Merge tag 'android14-6.1.90_r00' into android14-6.1

This merges up to the 6.1.90 LTS release into the android14-6.1 branch.
Included in here are the following commits:

* c0345356 Revert "macsec: Enable devices to advertise whether they update sk_buff md_dst during offloads"
* 35df421f Revert "macsec: Detect if Rx skb is macsec-related for offloading devices that update md_dst"
* f17db53d Revert "net/mlx5e: Advertise mlx5 ethernet driver updates sk_buff md_dst for MACsec"
*   62184d78 Merge 6.1.90 into android14-6.1-lts
|\
| * 909ba1f1 Linux 6.1.90
| * ca817d44 net/mlx5e: Advertise mlx5 ethernet driver updates sk_buff md_dst for MACsec
| * 21e042d2 macsec: Detect if Rx skb is macsec-related for offloading devices that update md_dst
| * 6536f12f macsec: Enable devices to advertise whether they update sk_buff md_dst during offloads
| * 9b7c5004 bounds: Use the right number of bits for power-of-two CONFIG_NR_CPUS
| * 4e75e222 i2c: smbus: fix NULL function pointer dereference
| * 25b34984 phy: ti: tusb1210: Resolve charger-det crash if charger psy is unregistered
| * 4201b8c8 riscv: Fix TASK_SIZE on 64-bit NOMMU
| * 0b947c90 riscv: fix VMALLOC_START definition
| * 023b6390 dmaengine: idxd: Fix oops during rmmod on single-CPU platforms
| * 8bf57418 dma: xilinx_dpdma: Fix locking
| * e71d5ec7 phy: rockchip-snps-pcie3: fix clearing PHP_GRF_PCIESEL_CON bits
| * 199895b8 phy: rockchip-snps-pcie3: fix bifurcation on rk3588
| * 4723dfe7 phy: freescale: imx8m-pcie: fix pcie link-up instability
| * ed4b981b phy: freescale: imx8m-pcie: Refine i.MX8MM PCIe PHY driver
| * d6a6bacd phy: marvell: a3700-comphy: Fix hardcoded array size
| * 976df695 phy: marvell: a3700-comphy: Fix out of bounds read
| * 2203a447 idma64: Don't try to serve interrupts when device is powered off
| * 33d8e3e5 dmaengine: tegra186: Fix residual calculation
| * 56bce3fc dmaengine: owl: fix register access functions
| * a8e8c79e x86/tdx: Preserve shared bit on mprotect()
| * 2bd85230 rust: remove `params` from `module` macro example
| * ad371d69 mtd: diskonchip: work around ubsan link failure
| * 4ebf1ff6 udp: preserve the connected status if only UDP cmsg
| * e3f0519d fbdev: fix incorrect address computation in deferred IO
| * d0205d6e stackdepot: respect __GFP_NOLOCKDEP allocation flag
| * c35fc180 net: b44: set pause params only when interface is up
| * 8e2c583c ethernet: Add helper for assigning packet type when dest address does not match device address
| * ba234a54 ACPI: CPPC: Fix access width used for PCC registers
| * 0f708a7e ACPI: CPPC: Fix bit_offset shift in MASK_VAL() macro
| * 01fc53be ACPI: CPPC: Use access_width over bit_width for system memory accesses
| * dd681710 irqchip/gic-v3-its: Prevent double free on error
| * 64f9d8ac drm/amdgpu: Fix leak when GPU memory allocation fails
| * 404b0ae4 drm/amdgpu/sdma5.2: use legacy HDP flush for SDMA2/3
| * ffddf569 arm64: dts: rockchip: enable internal pull-up for Q7_THRM# on RK3399 Puma
| * ba9bcc0e LoongArch: Fix access error when read fault on a write-only VMA
| * 94021d1d LoongArch: Fix callchain parse error with kernel tracepoint events
| * 38f17d1f cpu: Re-enable CPU mitigations by default for !X86 architectures
| * 8bdbcfaf btrfs: fix information leak in btrfs_ioctl_logical_to_ino()
| * 0561b65f HID: i2c-hid: remove I2C_HID_READ_PENDING flag to prevent lock-up
| * c7a4bca2 smb3: fix lock ordering potential deadlock in cifs_sync_mid_result
| * 2b8bf690 smb: client: Fix struct_group() usage in __packed structs
| * a957ea5a mmc: sdhci-msm: pervent access to suspended controller
| * e60502b9 Bluetooth: qca: fix NULL-deref on non-serdev suspend
| * e6dd0117 Bluetooth: btusb: Add Realtek RTL8852BE support ID 0x0bda:0x4853
| * c7882362 Bluetooth: Fix type of len in {l2cap,sco}_sock_getsockopt_old()
| * 4e6cd214 rust: make mutually exclusive with CFI_CLANG
| * 9f882077 rust: don't select CONSTRUCTORS
| * 6a190e7c x86/cpu: Fix check for RDPKRU in __show_regs()
| * 0c42f7e0 fork: defer linking file vma until vma is fully initialized
| * 539a2b99 virtio_net: Do not send RSS key if it is not supported
| * 34410fca Revert "crypto: api - Disallow identical driver names"
| * b3686200 cifs: Replace remaining 1-element arrays
| * 2ceacda2 af_unix: Suppress false-positive lockdep splat for spin_lock() in __unix_gc().
| * f05caed8 net: ethernet: ti: am65-cpts: Fix PTPv1 message type on TX packets
| * 777d7d00 iavf: Fix TC config comparison with existing adapter TC config
| * 81ad28ac i40e: Report MFS in decimal base instead of hex
| * 152ed360 i40e: Do not use WQ_MEM_RECLAIM flag for workqueue
| * 13ba94f6 netfilter: nf_tables: honor table dormant flag from netdev release event path
| * e3253574 eth: bnxt: fix counting packets discarded due to OOM and netpoll
| * 5bfe7bf9 mlxsw: spectrum_acl_tcam: Fix memory leak when canceling rehash work
| * 4526a56e mlxsw: spectrum_acl_tcam: Fix incorrect list API usage
| * 751d3528 mlxsw: spectrum_acl_tcam: Fix warning during rehash
| * b822644f mlxsw: spectrum_acl_tcam: Fix memory leak during rehash
| * 78884187 mlxsw: spectrum_acl_tcam: Rate limit error message
| * 813e2ab7 mlxsw: spectrum_acl_tcam: Fix possible use-after-free during rehash
| * b996e869 mlxsw: spectrum_acl_tcam: Fix possible use-after-free during activity update
| * 19ebdce6 mlxsw: spectrum_acl_tcam: Fix race during rehash delayed work
| * bca6fa2d net: openvswitch: Fix Use-After-Free in ovs_ct_exit
| * f4861f05 ipvs: Fix checksumming on GSO of SCTP packets
| * 4115403d Bluetooth: qca: set power_ctrl_enabled on NULL returned by gpiod_get_optional()
| * 31f18a1f Bluetooth: hci_sync: Using hci_cmd_sync_submit when removing Adv Monitor
| * 14051cbc Bluetooth: MGMT: Fix failing to MGMT_OP_ADD_UUID/MGMT_OP_REMOVE_UUID
| * 25a1c2d4 net: gtp: Fix Use-After-Free in gtp_dellink
| * 5e5e1865 net: usb: ax88179_178a: stop lying about skb->truesize
| * 7a25bfd1 ipv4: check for NULL idev in ip_route_use_hint()
| * 1e9b6945 net: fix sk_memory_allocated_{add|sub} vs softirqs
| * 82810873 net: make SK_MEMORY_PCPU_RESERV tunable
| * 0d14f104 ax25: Fix netdev refcount issue
| * 424c69db NFC: trf7970a: disable all regulators on removal
| * 25a82005 bnxt_en: Fix the PCI-AER routines
| * b20beb05 bnxt_en: refactor reset close code
| * 16be6002 bridge/br_netlink.c: no need to return void function
| * 599c9ad5 icmp: prevent possible NULL dereferences from icmp_build_probe()
| * d3c4b14c ARM: dts: microchip: at91-sama7g5ek: Replace regulator-suspend-voltage with the valid property
| * 3f7ecad5 mlxsw: core: Unregister EMAD trap using FORWARD action
| * 9064163f vxlan: drop packets from invalid src-address
| * 9b9c4ada wifi: iwlwifi: mvm: return uid from iwl_mvm_build_scan_cmd
| * d20e3beb wifi: iwlwifi: mvm: remove old PASN station when adding a new one
| * bab058e3 ARC: [plat-hsdk]: Remove misplaced interrupt-cells property
| * 0277e73e arm64: dts: rockchip: regulator for sd needs to be always on for BPI-R2Pro
| * af45b5bc arm64: dts: mediatek: mt2712: fix validation errors
| * 1aea205a arm64: dts: mediatek: mt7622: drop "reset-names" from thermal block
| * d078de86 arm64: dts: mediatek: mt7622: fix ethernet controller "compatible"
| * da3c0740 arm64: dts: mediatek: mt7622: fix IR nodename
| * ce782b5a arm64: dts: mediatek: mt7622: fix clock controllers
| * 818f56a8 arm64: dts: mediatek: mt8195-cherry: Update min voltage constraint for MT6315
| * 942debbe arm64: dts: mediatek: mt8192-asurada: Update min voltage constraint for MT6315
| * e8ac4490 arm64: dts: mediatek: mt8195: Add missing gce-client-reg to mutex
| * 5bcfc533 arm64: dts: mediatek: mt8195: Add missing gce-client-reg to vpp/vdosys
| * 18548e2a arm64: dts: mediatek: mt8192: Add missing gce-client-reg to mutex
| * 2f83d476 arm64: dts: mediatek: mt8183: Add power-domains properity to mfgcfg
| * 47581644 arm64: dts: rockchip: Remove unsupported node from the Pinebook Pro dts
| * 076ff06a arm64: dts: rockchip: enable internal pull-up on PCIE_WAKE# for RK3399 Puma
| * aa1af71d arm64: dts: rockchip: fix alphabetical ordering RK3399 puma
| * cb5b05e6 arm64: dts: rockchip: enable internal pull-up on Q7_USB_ID for RK3399 Puma
| * 9ab1d84b arm64: dts: rockchip: set PHY address of MT7531 switch to 0x1f
| * 526facda HID: logitech-dj: allow mice to use all types of reports
| * 6b0ac25f HID: intel-ish-hid: ipc: Fix dev_err usage with uninitialized dev->devc
| * 4f83ca4c cifs: reinstate original behavior again for forceuid/forcegid
| * e24e1651 smb: client: fix rename(2) regression against samba
* | beb491c1 Merge 6.1.89 into android14-6.1-lts
|\|
| * dcbc050c Linux 6.1.89
| * 8a529173 Revert "ASoC: ti: Convert Pandora ASoC to GPIO descriptors"
* | 3b75c4ca ANDROID: update .stg for change to struct clk_core
* | 077eb0a0 Revert "usb: xhci: Add timeout argument in address_device USB HCD callback"
* | 992f4a20 Merge 6.1.88 into android14-6.1-lts
|\|
| * f2295fab Linux 6.1.88
| * 0f7908a0 PCI/ASPM: Fix deadlock when enabling ASPM
| * 67a87712 ksmbd: common: use struct_group_attr instead of struct_group for network_open_info
| * 4687606d ksmbd: clear RENAME_NOREPLACE before calling vfs_rename
| * 21ff9d7d ksmbd: validate request buffer size in smb2_allocate_rsp_buf()
| * b80ba648 ksmbd: fix slab-out-of-bounds in smb2_allocate_rsp_buf
| * 7d51db45 net: dsa: mt7530: fix enabling EEE on MT7531 switch on all boards
| * 41a004ff net: dsa: mt7530: fix improper frames on all 25MHz and 40MHz XTAL MT7530
| * d9c2f69c net: dsa: introduce preferred_default_local_cpu_port and use on MT7530
| * 013c787d net: dsa: mt7530: set all CPU ports in MT7531_CPU_PMAP
| * 897ac530 nilfs2: fix OOB in nilfs_set_de_type
| * 1e7feb31 bootconfig: use memblock_free_late to free xbc memory to buddy
| * ad74d208 nouveau: fix instmem race condition around ptr stores
| * bcff1ed2 drm/vmwgfx: Fix crtc's atomic check conditional
| * 8f79b42d drm/vmwgfx: Sort primary plane formats by order of preference
| * 212e3bac drm/amdgpu: validate the parameters of bo mapping operations more clearly
| * 5ef7ba27 mm/memory-failure: fix deadlock when hugetlb_optimize_vmemmap is enabled
| * 76c2f4d4 init/main.c: Fix potential static_command_line memory overflow
| * f7e71a7c arm64: hibernate: Fix level3 translation fault in swsusp_save()
| * e09465ae KVM: x86/pmu: Do not mask LVTPC when handling a PMI on AMD platforms
| * 0fb74c00 KVM: x86/pmu: Disable support for adaptive PEBS
| * e487b8ec KVM: x86: Snapshot if a vCPU's vendor model is AMD vs. Intel compatible
| * 5d43e072 fs: sysfs: Fix reference leak in sysfs_break_active_protection()
| * 89af25bd speakup: Avoid crash on very long word
| * 7c6f9414 mei: me: disable RPL-S on SPS and IGN firmwares
| * 0588bbbd usb: gadget: f_ncm: Fix UAF ncm object at re-bind after usb ep transport error
| * a676b17e usb: Disable USB3 LPM at shutdown
| * 9de10b59 usb: dwc2: host: Fix dereference issue in DDMA completion flow.
| * 8672ad66 Revert "usb: cdc-wdm: close race between read and workqueue"
| * 4ed7c772 USB: serial: option: add Telit FN920C04 rmnet compositions
| * 19f98f21 USB: serial: option: add Rolling RW101-GL and RW135-GL support
| * 25a299c5 USB: serial: option: support Quectel EM060K sub-models
| * 9eba0750 USB: serial: option: add Lonsung U8300/U9300 product
| * 3e34029b USB: serial: option: add support for Fibocom FM650/FG650
| * 3c4ba8a6 USB: serial: option: add Fibocom FM135-GL variants
| * 282b223c serial: stm32: Reset .throttled state in .startup()
| * 87d15af8 serial: stm32: Return IRQ_NONE in the ISR if no handling happend
| * bbaafbb4 serial/pmac_zilog: Remove flawed mitigation for rx irq flood
| * 2c9b943e serial: mxs-auart: add spinlock around changing cts state
| * ac882d6b comedi: vmk80xx: fix incomplete endpoint checking
| * 9eae1fac thunderbolt: Fix wake configurations after device unplug
| * 38e10c9f thunderbolt: Avoid notify PM core about runtime PM resume
| * a6d2a8b2 binder: check offset alignment in binder_get_object()
| * d0538057 ALSA: hda/realtek - Enable audio jacks of Haier Boyue G42 with ALC269VC
| * 943c3e45 x86/cpufeatures: Fix dependencies for GFNI, VAES, and VPCLMULQDQ
| * d17075a9 x86/bugs: Fix BHI retpoline check
| * 165d2264 clk: mediatek: Do a runtime PM get on controllers during probe
| * c1d87d56 clk: mediatek: clk-mtk: Extend mtk_clk_simple_probe()
| * a4fe8813 clk: mediatek: clk-mux: Propagate struct device for mtk-mux
| * 6f5f72a6 clk: mediatek: clk-mtk: Propagate struct device for composites
| * 082b8314 clk: mediatek: clk-gate: Propagate struct device with mtk_clk_register_gates()
| * 647a25b0 clk: mediatek: mt8192: Propagate struct device for gate clocks
| * 0904f9ef clk: mediatek: mt8192: Correctly unregister and free clocks on failure
| * 83ada89e clk: Get runtime PM before walking tree for clk_summary
| * 5a704c26 clk: Show active consumers of clocks in debugfs
| * 5833b99c clk: remove unnecessary (void*) conversions
| * a424e713 clk: Get runtime PM before walking tree during disable_unused
| * 5558b3b6 clk: Initialize struct clk_core kref earlier
| * 43bc4cfe clk: Print an info line before disabling unused clocks
| * 349dbfd6 clk: Remove prepare_lock hold assertion in __clk_release()
| * f6ac4fdf usb: new quirk to reduce the SET_ADDRESS request timeout
| * 5f9b6319 usb: xhci: Add timeout argument in address_device USB HCD callback
| * 1d011d97 drm: panel-orientation-quirks: Add quirk for Lenovo Legion Go
| * 7989b04d ALSA: scarlett2: Rename scarlett_gen2 to scarlett2
| * 39f932d2 PCI: Simplify pcie_capability_clear_and_set_word() to ..._clear_word()
| * 636f0fdb PCI/DPC: Use FIELD_GET()
| * aedbd096 ALSA: scarlett2: Add Focusrite Clarett 2Pre and 4Pre USB support
| * 03bfe0e9 ALSA: scarlett2: Add Focusrite Clarett+ 2Pre and 4Pre support
| * 7c02a4a6 ALSA: scarlett2: Add correct product series name to messages
| * b928cde9 ALSA: scarlett2: Default mixer driver to enabled
| * 0f4048e1 ASoC: ti: Convert Pandora ASoC to GPIO descriptors
| * e2b8480b ALSA: scarlett2: Add support for Clarett 8Pre USB
| * 4d74cb9c ALSA: scarlett2: Move USB IDs out from device_info struct
| * bbdfa144 PCI: switchtec: Add support for PCIe Gen5 devices
| * 87709f7e PCI: switchtec: Use normal comment style
| * 89a9196a PCI: Execute quirk_enable_clear_retrain_link() earlier
| * caa7ff1d thunderbolt: Add debug log for link controller power quirk
| * 932a7651 thunderbolt: Log function name of the called quirk
| * 4b7ed240 x86/quirks: Include linux/pnp.h for arch_pnpbios_disabled()
| * f4aae2af PCI: Delay after FLR of Solidigm P44 Pro NVMe
| * 0fe6a97a usb: pci-quirks: Reduce the length of a spinlock section in usb_amd_find_chipset_info()
| * c96b07dc HID: kye: Sort kye devices
| * 57aadcc0 PCI: Avoid FLR for SolidRun SNET DPU rev 1
| * 3c55d439 ARM: omap2: n8x0: stop instantiating codec platform data
| * c330a13a drm/panel: visionox-rm69299: don't unregister DSI device
| * 5fd4b090 drm: nv04: Fix out of bounds access
| * 559f3a63 s390/cio: fix race condition during online processing
| * beb3ff19 s390/qdio: handle deferred cc1
| * fe446927 RDMA/mlx5: Fix port number for counter query in multi-port configuration
| * ea42dbe7 RDMA/cm: Print the old state when cm_destroy_id gets timeout
| * 196617d0 RDMA/rxe: Fix the problem "mutex_destroy missing"
| * 45e811ba net: ethernet: ti: am65-cpsw-nuss: cleanup DMA Channels before using them
| * e86c9db5 net: dsa: mt7530: fix mirroring frames received on local port
| * 62e27ef1 tun: limit printing rate when illegal packet received by tun dev
| * 6a6ebec4 ice: tc: allow zero flags in parsing tc flower
| * 46efa4d5 net/mlx5e: Prevent deadlock while disabling aRFS
| * 8635ac7d net/mlx5: Lag, restore buckets number to default after hash LAG deactivation
| * ba0db463 af_unix: Don't peek OOB data without MSG_OOB.
| * a1d3e352 af_unix: Call manage_oob() for every skb in unix_stream_read_generic().
| * f1c3c617 netfilter: flowtable: incorrect pppoe tuple
| * 8bf7c76a netfilter: flowtable: validate pppoe header
| * 41d8fdf3 netfilter: nft_set_pipapo: do not free live element
| * b13db0d1 netfilter: br_netfilter: skip conntrack input hook for promisc packets
| * df7c0fb8 netfilter: nf_tables: Fix potential data-race in __nft_obj_type_get()
| * 8d56bad4 netfilter: nf_tables: Fix potential data-race in __nft_expr_type_get()
| * 408a43b6 x86/efistub: Remap kernel text read-only before dropping NX attribute
| * f56faf87 x86/sev: Move early startup code into .head.text section
| * d6f5bc5f x86/sme: Move early SME kernel encryption handling into .head.text
| * e6489cc4 x86/head/64: Move the __head definition to <asm/init.h>
| * bbcd0534 x86/head/64: Add missing __head annotation to startup_64_load_idt()
| * 20dc656b x86/mm: Remove P*D_PAGE_MASK and P*D_PAGE_SIZE macros
| * d327e961 x86/efistub: Use 1:1 file:memory mapping for PE/COFF .compat section
| * c4421279 x86/boot: Increase section and file alignment to 4k/512
| * 581f5d5e x86/boot: Split off PE/COFF .data section
| * 43b19205 x86/boot: Drop PE/COFF .reloc section
| * d03399c3 x86/boot: Construct PE/COFF .text section from assembler
| * 1fa0a214 x86/boot: Derive file size from _edata symbol
| * 1c754c6e x86/boot: Define setup size in linker script
| * f9d68334 x86/boot: Set EFI handover offset directly in header asm
| * e1380c92 x86/boot: Grab kernel_info offset from zoffset header directly
| * 67b8dc50 x86/boot: Drop references to startup_64
| * 33d38d9b x86/boot: Drop redundant code setting the root device
| * 5c3e92ad x86/boot: Omit compression buffer from PE/COFF image memory footprint
| * f31f521a x86/boot: Remove the 'bugger off' message
| * 0db16d1d x86/efi: Drop alignment flags from PE section headers
| * 1800c962 x86/efistub: Reinstate soft limit for initrd loading
| * f46e0e9f x86/efi: Disregard setup header of loaded image
| * f5603f9e x86/efi: Drop EFI stub .bss from .data section
| * 704edc92 drm/i915/vma: Fix UAF on destroy against retire race
| * add0ff34 net: usb: ax88179_178a: avoid writing the mac address before first reading
| * 07b37f22 random: handle creditable entropy from atomic process context
| * bcdd9ce7 selftests/ftrace: Limit length in subsystem-enable tests
| * 45eec81e SUNRPC: Fix rpcgss_context trace event acceptor field
| * cbe7b911 io_uring: Fix io_cqring_wait() not restoring sigmask on get_timespec64() failure
| * 121a83be drm/amd/display: Do not recursively call manual trigger programming
| * 01c227f5 drm/amdgpu: fix incorrect number of active RBs for gfx11
| * 87f8aac7 drm/amdgpu: fix incorrect active rb bitmap for gfx11
| * 1e053399 drm/vmwgfx: Enable DMA mappings with SEV
* | af0a15ff Merge 6.1.87 into android14-6.1-lts
|\|
| * 6741e066 Linux 6.1.87
| * 724fbc7c drm/amd/display: fix disable otg wa logic in DCN316
| * 90819b18 drm/amdgpu: always force full reset for SOC21
| * 7cc89dbc drm/amdgpu: Reset dGPU if suspend got aborted
| * 29bd4d05 drm/i915: Disable port sync when bigjoiner is used
| * 2bc1796f drm/i915/cdclk: Fix CDCLK programming order when pipes are active
| * d844df11 x86/bugs: Replace CONFIG_SPECTRE_BHI_{ON,OFF} with CONFIG_MITIGATION_SPECTRE_BHI
| * 7f18a0df x86/bugs: Remove CONFIG_BHI_MITIGATION_AUTO and spectre_bhi=auto
| * d737d8cd x86/bugs: Clarify that syscall hardening isn't a BHI mitigation
| * 4b0b5d62 x86/bugs: Fix BHI handling of RRSBA
| * dc2db3e9 x86/bugs: Rename various 'ia32_cap' variables to 'x86_arch_cap_msr'
| * b1b32586 x86/bugs: Cache the value of MSR_IA32_ARCH_CAPABILITIES
| * 662e341e x86/bugs: Fix BHI documentation
| * 0d433e40 x86/bugs: Fix return type of spectre_bhi_state()
| * d447d8de irqflags: Explicitly ignore lockdep_hrtimer_exit() argument
| * 22f51ddb x86/apic: Force native_apic_mem_read() to use the MOV instruction
| * 881b495e selftests: timers: Fix abs() warning in posix_timers test
| * 9c097739 x86/cpu: Actually turn off mitigations by default for SPECULATION_MITIGATIONS=n
| * 0c182182 perf/x86: Fix out of range data
| * a2c1c0cf vhost: Add smp_rmb() in vhost_enable_notify()
| * f6e2d61d vhost: Add smp_rmb() in vhost_vq_avail_empty()
| * 18c8cc66 drm/client: Fully protect modes[] with dev->mode_config.mutex
| * 8a6fea3f drm/ast: Fix soft lockup
| * d29b50a3 drm/amdkfd: Reset GPU on queue preemption failure
| * 4b53d7d6 drm/i915/vrr: Disable VRR when using bigjoiner
| * 62029bc9 kprobes: Fix possible use-after-free issue on kprobe registration
| * 88dd8bb1 io_uring/net: restore msg_control on sendzc retry
| * c00146b3 btrfs: qgroup: convert PREALLOC to PERTRANS after record_root_in_trans
| * 06fe9998 btrfs: record delayed inode root in transaction
| * cb3131b5 btrfs: qgroup: correctly model root qgroup rsv in convert
| * 5f1205b8 iommu/vt-d: Allocate local memory for page request queue
| * 91580ea4 tracing: hide unused ftrace_event_id_fops
| * 19ff8fed net: ena: Fix incorrect descriptor free behavior
| * 7d44e12e net: ena: Wrong missing IO completions check order
| * 4dea83d4 net: ena: Fix potential sign extension issue
| * b75722be af_unix: Fix garbage collector racing against connect()
| * fb6d14e2 af_unix: Do not use atomic ops for unix_sk(sk)->inflight.
| * 19643bf8 net: dsa: mt7530: trap link-local frames regardless of ST Port State
| * 8edb087c net: sparx5: fix wrong config being used when reconfiguring PCS
| * 88a50c8a net/mlx5e: HTB, Fix inconsistencies with QoS SQs number
| * ad26f26a net/mlx5e: Fix mlx5e_priv_init() cleanup flow
| * 2e8dc5cf net/mlx5: Properly link new fs rules into the tree
| * c760089a netfilter: complete validation of user input
| * 9d42f373 Bluetooth: L2CAP: Fix not validating setsockopt user input
| * 7bc65d23 Bluetooth: SCO: Fix not validating setsockopt user input
| * de76ae9e ipv6: fix race condition between ipv6_get_ifaddr and ipv6_del_addr
| * 03d56499 ipv4/route: avoid unused-but-set-variable warning
| * 2c46877f ipv6: fib: hide unused 'pn' variable
| * 7e33f687 octeontx2-af: Fix NIX SQ mode and BP config
| * 84a352b7 af_unix: Clear stale u->oob_skb.
| * 492337a4 net: ks8851: Handle softirqs at the end of IRQ thread to fix hang
| * be033154 net: ks8851: Inline ks8851_rx_skb()
| * ecedcd7e bnxt_en: Reset PTP tx_avail after possible firmware reset
| * 4a1b65d1 geneve: fix header validation in geneve[6]_xmit_skb
| * 2a523f14 xsk: validate user input for XDP_{UMEM|COMPLETION}_FILL_RING
| * ac1c10b4 u64_stats: fix u64_stats_init() for lockdep when used repeatedly in one file
| * 0b445005 net: openvswitch: fix unwanted error log on timeout policy probing
| * 9fc74e36 scsi: qla2xxx: Fix off by one in qla_edif_app_getstats()
| * 438b9a71 scsi: hisi_sas: Modify the deadline for ata_wait_after_reset()
| * b7dc2e6b nouveau: fix function cast warning
| * 84fb6006 Revert "drm/qxl: simplify qxl_fence_wait"
| * 24c0c586 arm64: dts: imx8-ss-conn: fix usdhc wrong lpcg clock order
| * 49054b3e media: cec: core: remove length check of Timer Status
| * bccc8d15 PM: s2idle: Make sure CPUs will wakeup directly on resume
| * bd9b9405 drm/amd/pm: fixes a random hang in S4 for SMU v13.0.4/11
| * 66fab1e1 Bluetooth: Fix memory leak in hci_req_sync_complete()
| * 2d5f12de ring-buffer: Only update pages_touched when a new page is touched
| * 3fe79b2c batman-adv: Avoid infinite loop trying to resize local TT
| * 0559b2d7 ata: libata-scsi: Fix ata_scsi_dev_rescan() error path
| * ca5962bd smb3: fix Open files on server counter going negative
* | 37db5a6c Reapply "scsi: core: Add struct for args to execution functions"
* | faf34a67 Merge 6.1.86 into android14-6.1-lts
|\|
| * cd5d98c0 Linux 6.1.86
| * c5f9fe2c Revert "drm/amd/amdgpu: Fix potential ioremap() memory leaks in amdgpu_device_init()"
| * eea65ed7 VMCI: Fix possible memcpy() run-time warning in vmci_datagram_invoke_guest_handler()
| * cea93dae net: mpls: error out if inner headers are not set
| * 21f5cfed Bluetooth: btintel: Fixe build regression
| * 00e34ff1 platform/x86: intel-vbtn: Update tablet mode switch at end of probe
| * e80b4980 randomize_kstack: Improve entropy diffusion
| * 649e5646 virtio: reenable config if freezing device failed
| * 3a9c4590 scsi: sd: usb_storage: uas: Access media prior to querying device properties
| * 345b6b83 Revert "scsi: core: Add struct for args to execution functions"
| * f1465ff4 Revert "scsi: sd: usb_storage: uas: Access media prior to querying device properties"
| * cf0650ad gcc-plugins/stackleak: Avoid .head.text section
| * 2b859779 tty: n_gsm: require CAP_NET_ADMIN to attach N_GSM0710 ldisc
| * 2aeb805a netfilter: nf_tables: discard table flag update with pending basechain deletion
| * 8d3a58af netfilter: nf_tables: release mutex after nft_gc_seq_end from abort path
| * fcd1993a netfilter: nf_tables: release batch on table validation from abort path
| * 664206ff fbmon: prevent division by zero in fb_videomode_from_videomode()
| * 30044c66 drivers/nvme: Add quirks for device 126f:2262
| * 5245a6da io_uring: clear opcode specific data for an early failure
| * f8a7b7b0 fbdev: viafb: fix typo in hw_bitblt_1 and hw_bitblt_2
| * 8b849265 ASoC: soc-core.c: Skip dummy codec when adding platforms
| * 103c0f94 thermal/of: Assume polling-delay(-passive) 0 when absent
| * 409289d0 usb: sl811-hcd: only defined function checkdone if QUIRK2 is defined
| * 57e6634e usb: typec: tcpci: add generic tcpci fallback compatible
| * f692c547 thunderbolt: Keep the domain powered when USB4 port is in redrive mode
| * 893b2562 usb: gadget: uvc: mark incomplete frames with UVC_STREAM_ERR
| * 7dbf0829 bus: mhi: host: Add MHI_PM_SYS_ERR_FAIL state
| * 63eaa43d tools: iio: replace seekdir() in iio_generic_buffer
| * 1e9f5619 ring-buffer: use READ_ONCE() to read cpu_buffer->commit_page in concurrent environment
| * 5e7da5bb ktest: force $buildonly = 1 for 'make_warnings_file' test type
| * 39da708c perf/x86/amd/lbr: Discard erroneous branch entries
| * 44479c7f platform/x86: touchscreen_dmi: Add an extra entry for a variant of the Chuwi Vi8 tablet
| * 70310e55 Input: allocate keycode for Display refresh rate toggle
| * 055e406d Input: imagis - use FIELD_GET where applicable
| * 4097b1f1 RDMA/cm: add timeout to cm_destroy_id wait
| * 512a01da block: prevent division by zero in blk_rq_stat_sum()
| * c87e811c input/touchscreen: imagis: Correct the maximum touch area value
| * b7d153bf libperf evlist: Avoid out-of-bounds access
| * aaefa79c Revert "ACPI: PM: Block ASUS B1400CEAE from suspend to idle by default"
| * 43be051f SUNRPC: increase size of rpc_wait_queue.qlen from unsigned short to unsigned int
| * 3a94feab drm/amd/amdgpu: Fix potential ioremap() memory leaks in amdgpu_device_init()
| * 354a5d7b drm/amd/display: Fix nanosec stat overflow
| * aba66484 ext4: forbid commit inconsistent quota data when errors=remount-ro
| * baba3510 ext4: add a hint for block bitmap corrupt state in mb_groups
| * b75395ec ALSA: firewire-lib: handle quirk to calculate payload quadlets as data block counter
| * 84ed33a0 media: sta2x11: fix irq handler cast
| * 2e2177f9 Julia Lawall reported this null pointer dereference, this should fix it.
| * 3f3c1e73 rcu-tasks: Repair RCU Tasks Trace quiescence check
| * eae948ec ASoC: Intel: common: DMI remap for rebranded Intel NUC M15 (LAPRC710) laptops
| * 13701b0f isofs: handle CDs with bad root inode but good Joliet root directory
| * ee0b5f96 scsi: lpfc: Fix possible memory leak in lpfc_rcv_padisc()
| * 53cb1e52 sysv: don't call sb_bread() with pointers_lock held
| * 5238e1c2 pinctrl: renesas: checker: Limit cfg reg enum checks to provided IDs
| * c87dd159 drm: panel-orientation-quirks: Add quirk for GPD Win Mini
| * ac1e0f08 Input: synaptics-rmi4 - fail probing if memory allocation for "phys" fails
| * 48bfb4b0 drm/vc4: don't check if plane->state->fb == state->fb
| * a83a7728 Bluetooth: btmtk: Add MODULE_FIRMWARE() for MT7922
| * b19fe5ee Bluetooth: btintel: Fix null ptr deref in btintel_read_version
| * d7ee3bf0 net/smc: reduce rtnl pressure in smc_pnet_create_pnetids_list()
| * 5693dd6d ice: use relative VSI index for VFs instead of PF VSI number
| * 9ae356c6 btrfs: send: handle path ref underflow in header iterate_inode_ref()
| * 0f30f95b btrfs: export: handle invalid inode or root reference in btrfs_get_parent()
| * 36c2a286 btrfs: handle chunk tree lookup error in btrfs_relocate_sys_chunks()
| * 50bd749c cpufreq: Don't unregister cpufreq cooling on CPU hotplug
| * 6597a668 wifi: ath11k: decrease MHI channel buffer length to 8KB
| * 4e0cfb25 dma-direct: Leak pages on dma_set_decrypted() failure
| * a3f6045c net: pcs: xpcs: Return EINVAL in the internal methods
| * 51a9b20a tools/power x86_energy_perf_policy: Fix file leak in get_pkg_num()
| * 635594cc pstore/zone: Add a null pointer check to the psz_kmsg_read
| * 8ead0a04 wifi: brcmfmac: Add DMI nvram filename quirk for ACEPC W5 Pro
| * 161d6b80 firmware: tegra: bpmp: Return directly after a failed kzalloc() in get_filename()
| * 8af60bb2 net: skbuff: add overflow debug check to pull/push helpers
| * b8ca1586 ionic: set adminq irq affinity
| * 6925d11f arm64: dts: rockchip: fix rk3399 hdmi ports node
| * a2920489 arm64: dts: rockchip: fix rk3328 hdmi ports node
| * b510fbe3 cpuidle: Avoid potential overflow in integer multiplication
| * 94b016b2 panic: Flush kernel log buffer at the end
| * 8d80e092 wifi: iwlwifi: pcie: Add the PCI device id for new hardware
| * feacd430 VMCI: Fix memcpy() run-time warning in dg_dispatch_as_host()
| * fd5fdaca wifi: rtw89: pci: enlarge RX DMA buffer to consider size of RX descriptor
| * d6b0472d bnx2x: Fix firmware version string character counts
| * 7dd4831c wifi: ath9k: fix LNA selection in ath_ant_try_scan()
| * e6768c67 amdkfd: use calloc instead of kzalloc to avoid integer overflow
* | a28d27f6 ANDROID: fix crc issue in net/ipv4/inet_fragment.c
* | da08c217 ANDROID: preserve CRC values in struct sk_buff due to ip_defrag_offset removal
* | 416b90bf Revert "vsock/virtio: fix packet delivery to tap device"
* | 66a10801 Merge 6.1.85 into android14-6.1-lts
|\|
| * bf1e3b1c Linux 6.1.85
| * e21838df x86: set SPECTRE_BHI_ON as default
| * 3e4283b7 KVM: x86: Add BHI_NO
| * 43704e99 x86/bhi: Mitigate KVM by default
| * bb8384b6 x86/bhi: Add BHI mitigation knob
| * 42196bde x86/bhi: Enumerate Branch History Injection (BHI) bug
| * 29c50bb6 x86/bhi: Define SPEC_CTRL_BHI_DIS_S
| * 07dbb10f x86/bhi: Add support for clearing branch history at syscall entry
| * 74fcb181 x86/syscall: Don't force use of indirect calls for system calls
| * fd52c039 x86/bugs: Change commas to semicolons in 'spectre_v2' sysfs file
| * 5e6898b8 nvme: fix miss command type check
| * 9c2b4b65 mm/secretmem: fix GUP-fast succeeding on secretmem folios
| * a6dc534c selftests: mptcp: display simult in extra_msg
| * d1fefedc mptcp: don't account accept() of non-MPC client as fallback to TCP
| * 08ef93eb selftests: mptcp: join: fix dev in check_endpoint
| * 7e8360ac smb: client: fix potential UAF in cifs_signal_cifsd_for_reconnect()
| * f9414004 smb: client: fix potential UAF in smb2_is_network_name_deleted()
| * 494c91e1 smb: client: fix potential UAF in is_valid_oplock_break()
| * c868cabd smb: client: fix potential UAF in smb2_is_valid_lease_break()
| * 84488466 smb: client: fix potential UAF in smb2_is_valid_oplock_break()
| * 16b7d785 smb: client: fix potential UAF in cifs_stats_proc_show()
| * 8fefd166 smb: client: fix potential UAF in cifs_stats_proc_write()
| * 22904231 smb: client: fix potential UAF in cifs_debug_files_proc_show()
| * 8c99dfb4 smb3: retrying on failed server close
| * f6583444 riscv: process: Fix kernel gp leakage
| * c88f7a70 riscv: Fix spurious errors from __get/put_kernel_nofault
| * 447d844a s390/entry: align system call table on 8 bytes
| * 22943e4f x86/coco: Require seeding RNG with RDRAND on CoCo systems
| * 20a91515 x86/mce: Make sure to grab mce_sysfs_mutex in set_bank()
| * 97e93367 x86/mm/pat: fix VM_PAT handling in COW mappings
| * 7b6df050 of: dynamic: Synchronize of_changeset_destroy() with the devlink removals
| * 9406d598 driver core: Introduce device_link_wait_removal()
| * f35d7ede ALSA: hda/realtek: Update Panasonic CF-SZ6 quirk to support headset with microphone
| * 2ff8f065 ALSA: hda/realtek - Fix inactive headset mic jack
| * 883e072e ksmbd: do not set SMB2_GLOBAL_CAP_ENCRYPTION for SMB 3.1.1
| * 51a6c2af ksmbd: validate payload size in ipc response
| * 2e5f8dc1 ksmbd: don't send oplock break if rename fails
| * 7ef6a7f9 x86/retpoline: Add NOENDBR annotation to the SRSO dummy return thunk
| * c19715ec nfsd: hold a lighter-weight client reference over CB_RECALL_ANY
| * 12059cf0 ata: sata_mv: Fix PCI device ID table declaration compilation warning
| * 78942ac7 cifs: Fix caching to try to do open O_WRONLY as rdwr on server
| * 9adcfd56 scsi: sd: Unregister device if device_add_disk() failed in sd_probe()
| * 4b87c1bc scsi: mylex: Fix sysfs buffer lengths
| * 7171d6ae ata: sata_sx4: fix pdc20621_get_from_dimm() on 64-bit
| * 7ff957ce ASoC: ops: Fix wraparound for mask in snd_soc_get_volsw
| * 4ff3d8ac ASoC: rt711-sdw: fix locking sequence
| * 044c34fe ASoC: rt711-sdca: fix locking sequence
| * eb028d1e ASoC: rt5682-sdw: fix locking sequence
| * 392c47fe drm/panfrost: fix power transition timeout warnings
| * 81f7c9da drivers/perf: riscv: Disable PERF_SAMPLE_BRANCH_* while not supported
| * d00c24dd 9p: Fix read/write debug statements to report server reply
| * 90a477df fs/pipe: Fix lockdep false-positive in watchqueue pipe_write()
| * 4af6d5b4 KVM: SVM: Add support for allowing zero SEV ASIDs
| * 2233bd58 KVM: SVM: Use unsigned integers when dealing with ASIDs
| * 815c2a1c KVM: SVM: WARN, but continue, if misc_cg_set_capacity() fails
| * 2f7efda5 KVM: SVM: enhance info printk's in SEV init
| * f089d455 net: ravb: Always update error counters
| * f9690dfa net: ravb: Always process TX descriptor ring
| * 265a0fc5 net: ravb: Let IP-specific receive function to interrogate descriptors
| * b3608fe2 net: fec: Set mac_managed_pm during probe
| * c1781222 drivers: net: convert to boolean for the mac_managed_pm flag
| * 4eed9d0a tcp: Fix bind() regression for v6-only wildcard and v4(-mapped-v6) non-wildcard addresses.
| * 77db987b r8169: prepare rtl_hw_aspm_clkreq_enable for usage in atomic context
| * 9109472e r8169: use spinlock to protect access to registers Config2 and Config5
| * a33b7cb1 r8169: use spinlock to protect mac ocp register access
| * 095cfa2d i40e: Enforce software interrupt during busy-poll exit
| * 2f695361 i40e: Remove _t suffix from enum type names
| * f3c2ceb8 i40e: Store the irq number in i40e_q_vector
| * 810dd068 drm/amd: Flush GFXOFF requests in prepare stage
| * 43df8e64 drm/amd: Add concept of running prepare_suspend() sequence for IP blocks
| * 2990d8ea drm/amd: Evict resources during PM ops prepare() callback
| * 3e898462 i40e: fix vf may be used uninitialized in this function warning
| * fe74ea5b i40e: fix i40e_count_filters() to count only active/new filters
| * d417e3c1 octeontx2-af: Add array index check
| * e7e7030f octeontx2-pf: check negative error code in otx2_open()
| * 39efe5b6 octeontx2-af: Fix issue with loading coalesced KPU profiles
| * 940ff35a udp: prevent local UDP tunnel packets from being GROed
| * 8c58d384 udp: do not transition UDP GRO fraglist partial checksums to unnecessary
| * d1224508 udp: do not accept non-tunnel GSO skbs landing in a tunnel
| * fd6692e9 r8169: skip DASH fw status checks when DASH is disabled
| * 80247e0e mlxbf_gige: stop interface during shutdown
| * 167d4b47 ipv6: Fix infinite recursion in fib6_dump_done().
| * 2febb7ee selftests: reuseaddr_conflict: add missing new line at the end of the output
| * 1db7fcb2 erspan: make sure erspan_base_hdr is present in skb->head
| * 1829b618 i40e: Fix VF MAC filter removal
| * ed37bdae x86/retpoline: Do the necessary fixup to the Zen3/4 srso return thunk for !SRSO
| * 23178ec5 x86/bugs: Fix the SRSO mitigation on Zen3/4
| * 2eeab8c4 gro: fix ownership transfer
| * 66cb6659 selftests: net: gro fwd: update vxlan GRO test expectations
| * 10608161 net: phy: micrel: Fix potential null pointer dereference
| * 77f5e52d net: phy: micrel: lan8814: Fix when enabling/disabling 1-step timestamping
| * e01835f3 net: stmmac: fix rx queue priority assignment
| * b7d1ce2c net/sched: fix lockdep splat in qdisc_tree_reduce_backlog()
| * 55d3fe7b net/sched: act_skbmod: prevent kernel-infoleak
| * a44770fe bpf, sockmap: Prevent lock inversion deadlock in map delete elem
| * 8a57544e vboxsf: Avoid an spurious warning if load_nls_xxx() fails
| * 18aae2cb netfilter: validate user input for expected length
| * 9b5b7708 netfilter: nf_tables: Fix potential data-race in __nft_flowtable_type_get()
| * 4e8447a9 netfilter: nf_tables: flush pending destroy work before exit_net release
| * 745cf6a8 netfilter: nf_tables: reject new basechain after table flag update
| * 1c9e71ca Revert "x86/mm/ident_map: Use gbpages only where full GB page should be mapped."
| * db388b8e vsock/virtio: fix packet delivery to tap device
| * fc77240f net: usb: ax88179_178a: avoid the interface always configured as random address
| * cbaac2e5 net/rds: fix possible cp null dereference
| * 7c125079 xen-netfront: Add missing skb_mark_for_recycle
| * 18e18944 Bluetooth: Fix TOCTOU in HCI debugfs implementation
| * 38e3eaa8 Bluetooth: hci_event: set the conn encrypted before conn establishes
| * 3e773d04 Bluetooth: add quirk for broken address properties
| * a2812ff7 Bluetooth: qca: fix device-address endianness
| * 298dc5dd arm64: dts: qcom: sc7180-trogdor: mark bluetooth address as broken
| * 9bf4acc8 Revert "Bluetooth: hci_qca: Set BDA quirk bit if fwnode exists in DT"
| * 5d920886 x86/cpufeatures: Add CPUID_LNX_5 to track recently added Linux-defined word
| * 3d61f170 r8169: fix issue caused by buggy BIOS on certain boards with RTL8168d
| * 92357920 KVM: arm64: Fix host-programmed guest events in nVHE
| * ad141b08 perf/x86/amd/lbr: Use freeze based on availability
| * 8d029111 x86/cpufeatures: Add new word for scattered features
| * 58638e3b dm integrity: fix out-of-range warning
| * 7d056784 inet: inet_defrag: prevent sk release while still in use
| * 06426737 Octeontx2-af: fix pause frame configuration in GMP mode
| * 2553bfaa net: lan743x: Add set RFE read fifo threshold for PCI1x1x chips
| * 852698c9 cifs: Fix duplicate fscache cookie warnings
| * 98cdac20 bpf: Protect against int overflow for stack access size
| * 24444af5 mlxbf_gige: call request_irq() after NAPI initialized
| * 30fabe50 tls: get psock ref after taking rxlock to avoid leak
| * f52c8f12 tls: adjust recv return with async crypto and failed copy to userspace
| * efb4573f tls: recv: process_rx_list shouldn't use an offset with kvec
| * 0e111ce7 net: hns3: mark unexcuted loopback test result as UNEXECUTED
| * 50b69054 net: hns3: fix kernel crash when devlink reload during pf initialization
| * b8b533ee net: hns3: fix index limit to support all queue stats
| * ebabdae5 ACPICA: debugger: check status of acpi_evaluate_object() in acpi_db_walk_for_fields()
| * beaf0e79 net: wwan: t7xx: Split 64bit accesses to fix alignment issues
| * 91b243de tcp: properly terminate timers for kernel sockets
| * 16307e7b s390/qeth: handle deferred cc1
| * 231b189f ixgbe: avoid sleeping allocation in ixgbe_ipsec_vf_add_sa()
| * 99a75d75 wifi: iwlwifi: mvm: rfi: fix potential response leaks
| * 57beec62 mlxbf_gige: stop PHY during open() error paths
| * b51ec7fc nfc: nci: Fix uninit-value in nci_dev_up and nci_ntf_packet
| * 03369955 dma-buf: Fix NULL pointer dereference in sanitycheck()
| * 8333aae9 scripts/bpf_doc: Use silent mode when exec make cmd
* 7b7c6df4 Merge branch 'android14-6.1' into branch 'android14-6.1-lts'
* 0cf5cecb Revert "crypto: api - Disallow identical driver names"

Change-Id: Iace3d6c28e979288bd5e452ec7513ce23ee300d6
Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>