Merge tag 'android15-6.6.92_r00' into android15-6.6

This merges the android15-6.6.92_r00 tag into the android15-6.6 branch,
catching it up with the latest LTS releases.

It contains the following commits:

* fc57b382 ANDROID: GKI: db845c: add devm_register_sys_off_handler to symbol list
* fa2415a1 ANDROID: GKI: fix up crc issue with struct drm_atomic_state
* c6d284ab Revert "nvmem: qfprom: switch to 4-byte aligned reads"
* 2cb8fe26 Revert "perf: Avoid the read if the count is already updated"
* ae998420 Revert "serial: mctrl_gpio: split disable_ms into sync and no_sync APIs"
* 8fcd71ea Revert "espintcp: remove encap socket caching to avoid reference leak"
* e811b7a0 Revert "crypto: ahash - Set default reqsize from ahash_alg"
* 07e706a8 Revert "genirq/msi: Store the IOMMU IOVA directly in msi_desc instead of iommu_cookie"
* e6f7f485 Revert "ipv6: save dontfrag in cork"
*   5b8d7202 Merge 328840c9 ("af_unix: Run GC on only one CPU.") into android15-6.6-lts
|\
| * 328840c9 af_unix: Run GC on only one CPU.
| * 4be073d5 af_unix: Return struct unix_sock from unix_get_socket().
| * c7b1bd52 btrfs: check folio mapping after unlock in relocate_one_folio()
| * 63815bef hrtimers: Force migrate away hrtimers queued after CPUHP_AP_HRTIMERS_DYING
| * 5a9c0d5c can: kvaser_pciefd: Force IRQ edge in case of nested IRQ
| * f968f28c drm/gem: Internally test import_attach for imported objects
| * 10aecdc1 x86/mm/init: Handle the special case of device private pages in add_pages(), to not increase max_pfn and trigger dma_addressing_limited() bounce buffers bounce buffers
| * 367b8b91 i3c: master: svc: Fix implicit fallthrough in svc_i3c_master_ibi_work()
| * 1f917073 pinctrl: tegra: Fix off by one in tegra_pinctrl_get_group()
| * 4a5e6e79 watchdog: aspeed: fix 64-bit division
| * a9e4ee7f serial: sh-sci: Save and restore more registers
| * 517f928c pds_core: Prevent possible adminq overflow/stuck condition
| * 77192e9c highmem: add folio_test_partial_kmap()
| * bc133e43 x86/boot: Compile boot code with -std=gnu11 too
| * 5cdce62d spi: spi-fsl-dspi: Reset SR flags before sending a new message
| * 7cf42e5f spi: spi-fsl-dspi: Halt the module after a new message transfer
| * 9df00bd4 spi: spi-fsl-dspi: restrict register range for regmap access
| * 0e7efc9a ksmbd: fix stream write failure
| * fa68d5c1 Revert "arm64: dts: allwinner: h6: Use RSB for AXP805 PMIC connection"
| * f3910433 mm/page_alloc.c: avoid infinite retries caused by cpuset race
| * 363fd868 memcg: always call cond_resched() after fn()
| * f33001a7 Input: xpad - add more controllers
| * ed7d24b0 Revert "drm/amd: Keep display off while going into S4"
| * bee465c0 smb: client: Reset all search buffer pointers when releasing buffer
| * 17d096c4 arm64: dts: marvell: uDPU: define pinctrl state for alarm LEDs
| * 73cadde9 smb: client: Fix use-after-free in cifs_fill_dirent
| * 7227fc06 drm/edid: fixed the bug that hdr metadata was not reset
| * 7093887a thermal: intel: x86_pkg_temp_thermal: Fix bogus trip temperature
| * f8646562 platform/x86: dell-wmi-sysman: Avoid buffer overflow in current_password_store()
| * dde5400d can: kvaser_pciefd: Continue parsing DMA buf after dropped RX
| * 4cfe30f6 llc: fix data loss when reading from a socket in llc_ui_recvmsg()
| * 67643296 ALSA: hda/realtek: Add quirk for Lenovo Yoga Pro 7 14ASP10
| * 74d90875 ALSA: pcm: Fix race of buffer access at PCM OSS layer
| * b5bada85 ASoC: SOF: ipc4-pcm: Delay reporting is only supported for playback direction
| * 1beb8c26 ASoc: SOF: topology: connect DAI to a single DAI link
| * e8be784d ASoC: SOF: ipc4-control: Use SOF_CTRL_CMD_BINARY as numid for bytes_ext
| * 1f912f84 can: bcm: add missing rcu read protection for procfs content
| * 76c84c37 can: bcm: add locking for bcm_op runtime updates
| * e80f4f9c can: slcan: allow reception of short error messages
| * 584a7296 padata: do not leak refcount in reorder_work
| * 134daaba crypto: algif_hash - fix double free in hash_accept
| * 0c605de7 clk: s2mps11: initialise clk_hw_onecell_data::num before accessing ::hws[] in probe()
| * 35016086 octeontx2-af: Fix APR entry mapping based on APR_LMT_CFG
| * cc797add octeontx2-af: Set LMT_ENA bit for APR table entries
| * b19fc1d0 net/tipc: fix slab-use-after-free Read in tipc_aead_encrypt_done
| * a3d24e4a octeontx2-pf: Add AF_XDP non-zero copy support
| * 93c27694 sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue()
| * c844ace5 io_uring: fix overflow resched cqe reordering
| * dbcd0909 net: lan743x: Restore SGMII CTRL register on resume
| * 0b4cde72 net: dwmac-sun8i: Use parsed internal PHY address instead of 1
| * 52b2e557 pinctrl: qcom: switch to devm_register_sys_off_handler()
| * 78b70388 pinctrl: qcom/msm: Convert to platform remove callback returning void
| * df941e11 ice: Fix LACP bonds without SRIOV environment
| * c8a1a805 ice: fix vf->num_mac count with port representors
| * fa942824 bridge: netfilter: Fix forwarding of fragmented packets
| * feb6bde1 Bluetooth: btusb: use skb_pull to avoid unsafe access in QCA dump handling
| * c331a616 Bluetooth: L2CAP: Fix not checking l2cap_chan security level
| * 2b82d8e4 dmaengine: fsl-edma: Fix return code for unhandled interrupts
| * 55f3c97f dmaengine: idxd: Fix ->poll() return value
| * dcdc1aca xfrm: Sanitize marks before insert
| * a1fad2da clk: sunxi-ng: d1: Add missing divider for MMC mod clocks
| * c2b52d94 remoteproc: qcom_wcnss: Fix on platforms without fallback regulators
| * 5ff1a234 kernel/fork: only call untrack_pfn_clear() on VMAs duplicated for fork()
| * 1b388afe dmaengine: idxd: Fix allowing write() from different address spaces
| * 05298c30 dmaengine: idxd: add wq driver name support for accel-config user tool
| * b58a295d espintcp: remove encap socket caching to avoid reference leak
| * 3cf3d4f1 soundwire: bus: Fix race on the creation of the IRQ domain
| * d8ece4ce __legitimize_mnt(): check for MNT_SYNC_UMOUNT should be under mount_lock
| * e6d703b6 xenbus: Allow PVH dom0 a non-local xenstore
| * 85d12487 wifi: iwlwifi: add support for Killer on MTL
| * 4e3401aa tools: ynl-gen: validate 0 len strings from kernel
| * 50d0de59 btrfs: avoid NULL pointer dereference if no valid csum tree
| * 7a97f961 btrfs: correct the order of prelim_ref arguments in btrfs__prelim_ref
| * 225cc549 cifs: Fix changing times and read-only attr over SMB1 smb_set_file_info() function
| * fc460c12 cifs: Fix and improve cifs_query_path_info() and cifs_query_file_info()
| * b72952c8 io_uring/fdinfo: annotate racy sq/cq head/tail reads
| * 3a982ada nvmet-tcp: don't restore null sk_state_change
| * a7a2315d nvme-pci: add quirks for WDC Blue SN550 15b7:5009
| * 0a3f5efd nvme-pci: add quirks for device 126f:1001
| * 1c0d7792 ALSA: hda/realtek: Add quirk for HP Spectre x360 15-df1xxx
| * dbb47cbd ASoC: Intel: bytcr_rt5640: Add DMI quirk for Acer Aspire SW3-013
| * 4c017ff3 ASoC: cs42l43: Disable headphone clamps during type detection
| * 0ab50f62 pinctrl: meson: define the pull up/down resistor value as 60 kOhm
| * 534794c7 book3s64/radix: Fix compile errors when CONFIG_ARCH_WANT_OPTIMIZE_DAX_VMEMMAP=n
| * 442a2473 ASoC: imx-card: Adjust over allocation of memory in imx_card_parse_of()
| * fe4a7145 drm: Add valid clones check
| * 1c58b332 drm/panel-edp: Add Starry 116KHD024006
| * e585f4f4 drm/atomic: clarify the rules around drm_atomic_state->allow_modeset
| * 5d4951ba drm: bridge: adv7511: fill stream capabilities
| * a7e7cf53 wifi: ath12k: Fix end offset bit definition in monitor ring descriptor
| * 2dbcaddc wifi: ath9k: return by of_get_mac_address
| * a21971b4 accel/qaic: Mask out SR-IOV PCI resources
| * fbdf410d wifi: ath12k: fix ath12k_hal_tx_cmd_ext_desc_setup() info1 override
| * b658e144 regulator: ad5398: Add device tree support
| * df76df11 spi: zynqmp-gqspi: Always acknowledge interrupts
| * ccf4a818 wifi: rtw89: add wiphy_lock() to work that isn't held wiphy_lock() yet
| * 5e479af4 wifi: rtw88: Don't use static local variable in rtw8822b_set_tx_power_index_by_rate
| * ee71c34d wifi: rtl8xxxu: retry firmware download on error
| * 419988f4 perf/amd/ibs: Fix ->config to sample period calculation for OP PMU
| * 0cb6a129 perf/amd/ibs: Fix perf_ibs_op.cnt_mask for CurCnt
| * 9610a679 firmware: arm_scmi: Relax duplicate name constraint across protocol ids
| * 38d906f1 bpftool: Fix readlink usage in get_fd_type
| * 0e8eb91a drm/ast: Find VBIOS mode from regular display size
| * e190ed2c ASoC: rt722-sdca: Add some missing readable registers
| * 48c78cf6 ASoC: codecs: pcm3168a: Allow for 24-bit in provider mode
| * 123ac614 arm64: zynqmp: add clock-output-names property in clock nodes
| * 23b0b86a HID: usbkbd: Fix the bit shift number for LED_KANA
| * c317b069 wifi: ath12k: Avoid napi_sync() before napi_enable()
| * 32bcf541 scsi: st: Restore some drive settings after reset
| * 1960bb56 scsi: lpfc: Free phba irq in lpfc_sli4_enable_msi() when pci_irq_vector() fails
| * 3dfeee95 scsi: lpfc: Handle duplicate D_IDs in ndlp search-by D_ID routine
| * c34ab75a net/mana: fix warning in the writer of client oob
| * 1d10624a ice: count combined queues using Rx/Tx count
| * 948664b9 perf: Avoid the read if the count is already updated
| * f47d605c rcu: fix header guard for rcu_all_qs()
| * 9abec90c rcu: handle unstable rdp in rcu_read_unlock_strict()
| * 4a36d93a rcu: handle quiescent states for PREEMPT_RCU=n, PREEMPT_COUNT=y
| * cae56998 ice: treat dyn_allowed only as suggestion
| * 9ed3c1b1 bridge: mdb: Allow replace of a host-joined group
| * 961ee132 r8169: don't scan PHY addresses > 0
| * 2cb57a88 ipv4: ip_gre: Fix set but not used warning in ipgre_err() if IPv4-only
| * 13cba3f8 vxlan: Annotate FDB data races
| * 090c0ba1 net/mlx5e: Avoid WARN_ON when configuring MQPRIO with HTB offload enabled
| * f312bd5c media: qcom: camss: csid: Only add TPG v4l2 ctrl if TPG hardware is available
| * 6fed5e23 f2fs: introduce f2fs_base_attr for global sysfs entries
| * 9af429fe hwmon: (xgene-hwmon) use appropriate type for the latency value
| * 70e7df6f clk: qcom: camcc-sm8250: Use clk_rcg2_shared_ops for some RCGs
| * ba02bb3a wifi: rtw88: Fix __rtw_download_firmware() for RTL8814AU
| * 0b660a7f wifi: rtw88: Fix download_firmware_validate() for RTL8814AU
| * 23fe8aa8 ext4: remove writable userspace mappings before truncating page cache
| * 73e7c65b ext4: don't write back data before punch hole in nojournal mode
| * 3648ddab leds: trigger: netdev: Configure LED blink interval for HW offload
| * 7ef54a11 pstore: Change kmsg_bytes storage size to u32
| * 09c3a826 r8152: add vendor/device ID pair for Dell Alienware AW1022z
| * cc1d408e ip: fib_rules: Fetch net from fib_rule in fib[46]_rule_configure().
| * 22ee8dab arch/powerpc/perf: Check the instruction type before creating sample with perf_mem_data_src
| * fa5d374f powerpc/pseries/iommu: memory notifier incorrectly adds TCEs for pmemory
| * 6758d097 net: fec: Refactor MAC reset to function
| * 2caf52c0 wifi: mac80211: remove misplaced drv_mgd_complete_tx() call
| * bb1f9d63 wifi: mac80211: don't unconditionally call drv_mgd_complete_tx()
| * 9ef9ecab drm/v3d: Add clock handling
| * 76016797 net/mlx5e: reduce the max log mpwrq sz for ECPF and reps
| * dce57841 net/mlx5e: reduce rep rxq depth to 256 for ECPF
| * 9411c965 net/mlx5e: set the tx_queue_len for pfifo_fast
| * c31e8396 net/mlx5: Extend Ethtool loopback selftest to support non-linear SKB
| * 353cd680 scsi: target: spc: Fix loop traversal in spc_rsoc_get_descr()
| * 99197029 drm/amd/display/dm: drop hw_support check in amdgpu_dm_i2c_xfer()
| * 26b6548d drm/amdgpu: enlarge the VBIOS binary size limit
| * de67e80a drm/amd/display: Increase block_sequence array size
| * 16c26a64 drm/amd/display: Initial psr_version with correct setting
| * c59c96b8 drm/amd/display: Update CR AUX RD interval interpretation
| * af2d3631 drm/amdgpu: reset psp->cmd to NULL after releasing the buffer
| * 6881a3a5 drm/amd/display: Don't try AUX transactions on disconnected link
| * ab83ed96 drm/amdgpu: Set snoop bit for SDMA for MI series
| * 929cda8e soundwire: amd: change the soundwire wake enable/disable sequence
| * 6a7b7e98 phy: core: don't require set_mode() callback for phy_get_mode() to work
| * 3bf3eae9 serial: sh-sci: Update the suspend/resume support
| * e9bed533 sched: Reduce the default slice to avoid tasks getting an extra tick
| * 5024d8e5 x86/traps: Cleanup and robustify decode_bug()
| * cc50c7c1 clk: qcom: clk-alpha-pll: Do not use random stack value for recalc rate
| * fba6e5d4 clk: qcom: ipq5018: allow it to be bulid on arm32
| * d655dbd8 net/mlx4_core: Avoid impossible mlx4_db_alloc() order value
| * f8a9f45f media: v4l: Memset argument to 0 before calling get_mbus_config pad op
| * 0b9d2468 media: i2c: imx219: Correct the minimum vblanking value
| * 868c3d8c kunit: tool: Use qboot on QEMU x86_64
| * 3d6d1354 smack: Revert "smackfs: Added check catlen"
| * e30f3143 smack: recognize ipv4 CIPSO w/o categories
| * de4332d7 pinctrl: devicetree: do not goto err when probing hogs in pinctrl_dt_to_map
| * b3d2a880 ASoC: soc-dai: check return value at snd_soc_dai_set_tdm_slot()
| * 35160eda ASoC: tas2764: Power up/down amp on mute ops
| * c1045e77 ASoC: tas2764: Mark SW_RESET as volatile
| * 7ac84ee5 ASoC: tas2764: Add reg defaults for TAS2764_INT_CLK_CFG
| * 9dcce3f4 ASoC: ops: Enforce platform maximum on initial value
| * 3da8088a firmware: arm_ffa: Reject higher major version as incompatible
| * 3ec539f1 net/mlx5: Apply rate-limiting to high temperature warning
| * 69f453cc net/mlx5: Modify LSB bitmask in temperature event to include only the first bit
| * a9b2bb8a media: test-drivers: vivid: don't call schedule in loop
| * ddddd806 vxlan: Join / leave MC group after remote changes
| * d97c3827 ACPI: HED: Always initialize before evged
| * 0d398ed8 PCI: Fix old_size lower bound in calculate_iosize() too
| * d8afc255 eth: mlx4: don't try to complete XDP frames in netpoll
| * 242272c9 bpf: don't do clean_live_states when state->loop_entry->branches > 0
| * 00e59d14 can: c_can: Use of_property_present() to test existence of DT property
| * ef7ee9b8 pmdomain: imx: gpcv2: use proper helper for property detection
| * 7c5e7360 RDMA/core: Fix best page size finding when it can cross SG entries
| * c504c11b serial: mctrl_gpio: split disable_ms into sync and no_sync APIs
| * df8970a2 drm/amd/display: Add support for disconnected eDP streams
| * 671fea64 i3c: master: svc: Flush FIFO before sending Dynamic Address Assignment(DAA)
| * 398351dc EDAC/ie31200: work around false positive build warning
| * c81c2ee1 net: pktgen: fix access outside of user given buffer in pktgen_thread_write()
| * 35434d1c wifi: rtw89: fw: propagate error code from rtw89_h2c_tx()
| * 5ce1f780 wifi: rtw88: Fix rtw_desc_to_mcsrate() to handle MCS16-31
| * 1b1daafd wifi: rtw88: Fix rtw_init_ht_cap() for RTL8814AU
| * a9581319 wifi: rtw88: Fix rtw_init_vht_cap() for RTL8814AU
| * f38a1b35 scsi: mpt3sas: Send a diag reset if target reset fails
| * 06abee68 clocksource: mips-gic-timer: Enable counter when CPUs start
| * 2e1b3650 MIPS: pm-cps: Use per-CPU variables as per-CPU, not per-core
| * ba41e4e6 genirq/msi: Store the IOMMU IOVA directly in msi_desc instead of iommu_cookie
| * 2ed497f3 MIPS: Use arch specific syscall name match function
| * b2ea189a crypto: skcipher - Zap type in crypto_alloc_sync_skcipher
| * 3a0c8429 crypto: ahash - Set default reqsize from ahash_alg
| * b1d1b096 x86/kaslr: Reduce KASLR entropy on most x86 systems
| * b0556ba8 net/mlx5: Change POOL_NEXT_SIZE define value and make it global
| * 52aa28f7 dm: fix unconditional IO throttle caused by REQ_PREFLUSH
| * ecd205a5 libbpf: Fix out-of-bound read
| * e17a6ba0 media: tc358746: improve calculation of the D-PHY timing registers
| * ca9f3ab6 media: adv7180: Disable test-pattern control on adv7180
| * 3cd2aa93 cpuidle: menu: Avoid discarding useful information
| * 48fd80f7 vdpa/mlx5: Fix mlx5_vdpa_get_config() endianness on big-endian machines
| * f5121d5b vhost-scsi: Return queue full for page alloc failures during copy
| * de4469a9 x86/nmi: Add an emergency handler in nmi_desc & use it in nmi_shootdown_cpus()
| * 01768d15 ASoC: mediatek: mt8188: Add reference for dmic clocks
| * 6dadc66f ASoC: mediatek: mt8188: Treat DMIC_GAINx_CUR as non-volatile
| * ec6f764a drm/amd/display: handle max_downscale_src_width fail check
| * 7472e0da x86/build: Fix broken copy command in genimage.sh when making isoimage
| * f32344bf Octeontx2-af: RPM: Register driver with PCI subsys IDs
| * 3314310b soc: ti: k3-socinfo: Do not use syscon helper to build regmap
| * f4e35b2c wifi: ath12k: Improve BSS discovery with hidden SSID in 6 GHz band
| * fed3038a bonding: report duplicate MAC address in all situations
| * 7819a7dc net: xgene-v2: remove incorrect ACPI_PTR annotation
| * 7b8fe48c net: ethernet: mtk_ppe_offload: Allow QinQ, double ETH_P_8021Q only
| * ff01e0d0 leds: pwm-multicolor: Add check for fwnode_property_read_u32
| * 2059e6ea drm/amdkfd: KFD release_work possible circular locking
| * 0759d154 selftests/net: have `gro.sh -t` return a correct exit code
| * b3c84494 net/mlx5: Avoid report two health errors on same syndrome
| * e2de76c3 firmware: arm_ffa: Set dma_mask for ffa devices
| * a1a5e783 PCI: brcmstb: Add a softdep to MIP MSI-X driver
| * 1f27e708 PCI: brcmstb: Expand inbound window size up to 64GB
| * f6dfaf59 wifi: ath12k: Report proper tx completion status to mac80211
| * c7c729d7 soc: apple: rtkit: Implement OSLog buffers properly
| * 78b6b2fe soc: apple: rtkit: Use high prio work queue
| * 1ae981c9 perf: arm_pmuv3: Call kvm_vcpu_pmu_resync_el0() before enabling counters
| * 372ed217 fpga: altera-cvp: Increase credit timeout
| * 7b851d6a drm/mediatek: mtk_dpi: Add checks for reg_h_fre_con existence
| * d8e57904 ARM: at91: pm: fix at91_suspend_finish for ZQ calibration
| * a9dd5d74 hwmon: (gpio-fan) Add missing mutex locks
| * 7adb9668 x86/bugs: Make spectre user default depend on MITIGATION_SPECTRE_V2
| * ca16d144 clk: imx8mp: inform CCF of maximum frequency of clocks
| * 032f3bf6 media: uvcvideo: Handle uvc menu translation inside uvc_get_le_value
| * faa24692 media: uvcvideo: Add sanity check to uvc_ioctl_xu_ctrl_map
| * 9459abd7 drm/rockchip: vop2: Add uv swap for cluster window
| * 9778a918 ipv4: fib: Move fib_valid_key_len() to rtm_to_fib_config().
| * 2be4a7d5 ALSA: hda/realtek: Enable PC beep passthrough for HP EliteBook 855 G7
| * 30ae8959 perf/hw_breakpoint: Return EOPNOTSUPP for unsupported breakpoint type
| * 2a9a7d2f net: pktgen: fix mpls maximum labels list parsing
| * cf81dae8 net: ethernet: ti: cpsw_new: populate netdev of_node
| * 2cbe6d55 pinctrl: bcm281xx: Use "unsigned int" instead of bare "unsigned"
| * 5c9eca18 media: cx231xx: set device_caps for 417
| * a7b8f0ad drm/amd/display: Skip checking FRL_MODE bit for PCON BW determination
| * 3af9db78 drm/amdgpu: Do not program AGP BAR regs under SRIOV in gfxhub_v1_0.c
| * fef1e148 remoteproc: qcom_wcnss: Handle platforms with only single power domain
| * c5b23df9 net: phylink: use pl->link_interface in phylink_expects_phy()
| * b27be76f drm/gem: Test for imported GEM buffers with helper
| * 121f0335 orangefs: Do not truncate file size
| * 3986ef4a dm cache: prevent BUG_ON by blocking retries on failed device resumes
| * d5f8c8ec media: c8sectpfe: Call of_node_put(i2c_bus) only once in c8sectpfe_probe()
| * 74eea50b ARM: tegra: Switch DSI-B clock parent to PLLD on Tegra114
| * da74e11c ieee802154: ca8210: Use proper setters and getters for bitwise types
| * c0acbeac rtc: ds1307: stop disabling alarms on probe
| * fb691890 tcp: bring back NUMA dispersion in inet_ehash_locks_alloc()
| * 8c1a16d6 ALSA: seq: Improve data consistency at polling
| * 7b1bb4d4 powerpc/prom_init: Fixup missing #size-cells on PowerBook6,7
| * d0e3e195 arm64: tegra: Resize aperture for the IGX PCIe C5 slot
| * 988770bf arm64: tegra: p2597: Fix gpio for vdd-1v8-dis regulator
| * ab13c8a5 drm/amdkfd: Set per-process flags only once cik/vi
| * 0acdc4d6 crypto: lzo - Fix compression buffer overrun
| * ab4545a2 watchdog: aspeed: Update bootstatus handling
| * ac64f0e8 cpufreq: tegra186: Share policy per cluster
| * 3123b3d4 iommu/amd/pgtbl_v2: Improve error handling
| * 8c305588 ASoC: qcom: sm8250: explicitly set format in sm8250_be_hw_params_fixup()
| * 5b518c45 auxdisplay: charlcd: Partially revert "Move hwidth and bwidth to struct hd44780_common"
| * 769d1bcc gfs2: Check for empty queue in run_queue
| * 2e37d331 drm/amd/display: Fix incorrect DPCD configs while Replay/PSR switch
| * 1da3dc73 drm/amd/display: calculate the remain segments for all pipes
| * 4c2a3488 drm/amd/display: remove minimum Dispclk and apply oem panel timing.
| * 8ebf2709 ipv6: save dontfrag in cork
| * 2b790fe6 wifi: iwlwifi: fix debug actions order
| * 386a1a0d printk: Check CON_SUSPEND when unblanking a console
| * 8a7f2e84 hwmon: (dell-smm) Increment the number of fans
| * def5f5bc usb: xhci: Don't change the status of stalled TDs on failed Stop EP
| * 903c4a0c mmc: sdhci: Disable SD card clock before changing parameters
| * 5ae75245 mmc: dw_mmc: add exynos7870 DW MMC support
| * 110f701e arm64/mm: Check PUD_TYPE_TABLE in pud_bad()
| * 89947eea netfilter: conntrack: Bound nf_conntrack sysctl writes
| * da36c3ad timer_list: Don't use %pK through printk()
| * 6df38558 posix-timers: Add cond_resched() to posix_timer_add() search loop
| * 1bef1811 RDMA/uverbs: Propagate errors from rdma_lookup_get_uobject()
| * ba841627 ext4: do not convert the unwritten extents if data writeback fails
| * d7f3c874 ext4: reject the 'data_err=abort' option in nojournal mode
| * baf667f2 ASoC: sun4i-codec: support hp-det-gpios property
| * f8d94603 drm/amdgpu: Update SRIOV video codec caps
| * 2e290e9c mfd: tps65219: Remove TPS65219_REG_TI_DEV_ID check
| * aa97ea57 pinctrl-tegra: Restore SFSEL bit when freeing pins
| * 0fb6c439 xen: Add support for XenServer 6.1 platform device
| * 3ecfb92c net/smc: use the correct ndev to find pnetid by pnetid table
| * ba8354a6 dm: restrict dm device size to 2^63-512 bytes
| * 44a82d24 crypto: octeontx2 - suppress auth failure screaming due to negative tests
| * 3edb08b6 kbuild: fix argument parsing in scripts/config
| * bc8023ef bpf: Allow pre-ordering for bpf cgroup progs
| * aed5bd3a ASoC: mediatek: mt6359: Add stub for mt6359_accdet_enable_jack_detect
| * bf9cfc7f thunderbolt: Do not add non-active NVM if NVM upgrade is disabled for retimer
| * 4beb1e55 objtool: Fix error handling inconsistencies in check()
| * 72d9ccdc rtc: rv3032: fix EERD location
| * a7b7bc51 tcp: reorganize tcp_in_ack_event() and tcp_count_delivered()
| * ed887179 jbd2: do not try to recover wiped journal
| * 5741b9d7 bpf: Return prog btf_id without capable check
| * 743bb753 vfio/pci: Handle INTx IRQ_NOTCONNECTED
| * 9f51fa19 scsi: st: ERASE does not change tape location
| * 01195aa1 scsi: st: Tighten the page format heuristics with MODE SELECT
| * 3011cdc5 hypfs_create_cpu_files(): add missing check for hypfs_mkdir() failure
| * 4eda8a85 ext4: reorder capability check last
| * 57a2882c um: Update min_low_pfn to match changes in uml_reserved
| * 76381822 um: Store full CSGSFS and SS register from mcontext
| * 61225b33 dlm: make tcp still work in multi-link env
| * 05418220 i3c: master: svc: Fix missing STOP for master request
| * 398c541e drm/amd/display: Guard against setting dispclk low for dcn31x
| * 3192d59f btrfs: send: return -ENAMETOOLONG when attempting a path that is too long
| * a7f1c5fb btrfs: get zone unusable bytes while holding lock at btrfs_reclaim_bgs_work()
| * 4dc7dcb9 btrfs: fix non-empty delayed iputs list on unmount due to async workers
| * de635f9b btrfs: run btrfs_error_commit_super() early
| * 1a012fd4 btrfs: avoid linker error in btrfs_find_create_tree_block()
| * 4e74f91a btrfs: make btrfs_discard_workfn() block_group ref explicit
| * a4666a81 i2c: pxa: fix call balance of i2c->clk handling routines
| * 4fc8e3fb i2c: qup: Vote for interconnect bandwidth to DRAM
| * bffd5f28 x86/mm: Check return value from memblock_phys_alloc_range()
| * 7124a9b6 x86/stackprotector/64: Only export __ref_stack_chk_guard on CONFIG_SMP
| * 1752ceaa wifi: mt76: mt7996: revise TXS size
| * d9776ce1 wifi: mt76: only mark tx-status-failed frames as ACKed on mt76x0/2
| * 17e3ab06 mmc: host: Wait for Vdd to settle on card power off
| * ea3d95e0 libnvdimm/labels: Fix divide error in nd_label_data_init()
| * f29eb4c6 ext4: on a remount, only log the ro or r/w state when it has changed
| * 44acbc14 PCI: vmd: Disable MSI remapping bypass under Xen
| * aa59ccac pNFS/flexfiles: Report ENETDOWN as a connection error
| * ec59dfbc tools/build: Don't pass test log files to linker
| * e4510552 PCI: dwc: ep: Ensure proper iteration over outbound map windows
| * a74286d1 objtool: Properly disable uaccess validation
| * 454a770a lockdep: Fix wait context check on softirq for PREEMPT_RT
| * 0c2aa72f dql: Fix dql->limit value when reset.
| * 3854f4e9 thermal/drivers/qoriq: Power down TMU on system suspend
| * 4a120221 spi-rockchip: Fix register out of bounds access
| * 4a8ebc45 SUNRPC: rpcbind should never reset the port to the value '0'
| * 3ef02a05 SUNRPC: rpc_clnt_set_transport() must not change the autobind setting
| * 6b8beb81 NFSv4: Treat ENETUNREACH errors as fatal for state recovery
| * ee68e068 cifs: Fix establishing NetBIOS session for SMB2+ connection
| * 89bcd83f cifs: add validation check for the fields in smb_aces
| * 88bf6295 fbdev: core: tileblit: Implement missing margin clearing for tileblit
| * 1714afc1 fbcon: Use correct erase colour for clearing in fbcon
| * 7f370b7e fbdev: fsl-diu-fb: add missing device_remove_file()
| * bbf3bb6d riscv: Allow NOMMU kernels to access all of RAM
| * 09096ead mailbox: use error ret code of of_parse_phandle_with_args()
| * 5641f6b3 mailbox: pcc: Use acpi_os_ioremap() instead of ioremap()
| * 7d5b2278 ACPI: PNP: Add Intel OC Watchdog IDs to non-PNP device list
| * c1ab9f00 tracing: Mark binary printing functions with __printf() attribute
| * 50702e7b arm64: Add support for HIP09 Spectre-BHB mitigation
| * e0b05cd9 SUNRPC: Don't allow waiting for exiting tasks
| * c72826ef NFS: Don't allow waiting for exiting tasks
| * a81dd69f NFSv4: Check for delegation validity in nfs_start_delegation_return_locked()
| * 2371143e fuse: Return EPERM rather than ENOSYS from link()
| * 209a4da0 smb: client: Store original IO parameters and prevent zero IO sizes
| * 5194597b cifs: Fix negotiate retry functionality
| * d50f7ce2 cifs: Fix querying and creating MF symlinks over SMB1
| * 18066188 cifs: Add fallback for SMB2 CREATE without FILE_READ_ATTRIBUTES
| * f08641cd s390/vfio-ap: Fix no AP queue sharing allowed message written to kernel log
| * a6f24a41 kconfig: merge_config: use an empty file as initfile
| * adbb39ec samples/bpf: Fix compilation failure for samples/bpf on LoongArch Fedora
| * 38aa3cf1 bpf: fix possible endless loop in BPF map iteration
| * f5f169cd selftests/bpf: Mitigate sockmap_ktls disconnect_after_delete failure
| * f7292fbb drm/amdgpu: Allow P2P access through XGMI
| * 722a6972 ima: process_measurement() needlessly takes inode_lock() on MAY_READ
| * 91ba964a net: enetc: refactor bulk flipping of RX buffers to separate function
| * c36f5f65 scsi: mpi3mr: Add level check to control event logging
| * ca85c2d0 vhost-scsi: protect vq->log_used with vq->mutex
| * 20fb292a cgroup: Fix compilation issue due to cgroup_mutex not being exported
| * c15dc980 dma-mapping: avoid potential unused data compilation warning
| * 2cab5ea2 intel_th: avoid using deprecated page->mapping, index fields
| * b49b5132 virtio_ring: Fix data race by tagging event_triggered as racy for KCSAN
| * 42d15918 scsi: ufs: Introduce quirk to extend PA_HIBERN8TIME for UFS devices
| * fe8421e8 scsi: target: iscsi: Fix timeout on deleted connection
| * beb6382a nvmem: qfprom: switch to 4-byte aligned reads
| * 35d77c8d nvmem: core: update raw_len if the bit reading is required
| * 497f19ca nvmem: core: verify cell's raw_len
| * 04c81ac3 nvmem: rockchip-otp: add rk3576 variant data
| * 266e5f48 nvmem: rockchip-otp: Move read-offset into variant-data
| * b3145041 cpufreq: Add SM8650 to cpufreq-dt-platdev blocklist
| * 1efbe2c7 phy: renesas: rcar-gen3-usb2: Assert PLL reset on PHY power off
| * cf60d197 phy: renesas: rcar-gen3-usb2: Lock around hardware registers and driver data
| * e992f258 phy: renesas: rcar-gen3-usb2: Move IRQ request in probe
| * eb4fdee1 phy: renesas: rcar-gen3-usb2: Add support to initialize the bus
| * e668cbeb i2c: designware: Fix an error handling path in i2c_dw_pci_probe()
| * ad40588d i2c: designware: Use temporary variable for struct device
| * 0ef9396a i2c: designware: Remove ->disable() callback
| * 33378973 i2c: designware: Uniform initialization flow for polling mode
| * d1954e7a gpio: pca953x: fix IRQ storm on system wake up
| * 58e34598 gpio: pca953x: Simplify code with cleanup helpers
| * 475d6ebc gpio: pca953x: Split pca953x_restore_context() and pca953x_save_context()
* | 9163e678 Merge 6.6.92 into android15-6.6-lts
|\|
| * ffaf6178 Linux 6.6.92
| * 35559ebc drm/amdgpu: fix pm notifier handling
| * c1d42a23 phy: tegra: xusb: remove a stray unlock
| * 3cfec712 btrfs: don't BUG_ON() when 0 reference count at btrfs_lookup_extent_info()
| * b3598f53 sctp: add mutual exclusion in proc_sctp_do_udp_port()
| * 93df6da6 hwpoison, memory_hotplug: lock folio before unmap hwpoisoned folio
| * 7bcd2918 memblock: Accept allocated memory before use in memblock_double_array()
| * 61334445 LoongArch: Explicitly specify code model in Makefile
| * f521c2a0 bpf, arm64: Fix address emission with tag-based KASAN enabled
| * d9664e6f bpf, arm64: Fix trampoline for BPF_TRAMP_F_CALL_ORIG
| * bfc26aa3 mm/migrate: correct nr_failed in migrate_pages_sync()
| * 62798e32 selftests/mm: compaction_test: support platform with huge mount of memory
| * 962ce902 usb: typec: ucsi: displayport: Fix deadlock
| * a0a736d9 Bluetooth: btnxpuart: Fix kernel panic during FW release
| * 98fdd2f6 mm/page_alloc: fix race condition in unaccepted memory handling
| * e24073cd x86/its: Fix build error for its_static_thunk()
| * d530dd65 dmaengine: idxd: Refactor remove call with idxd_cleanup() helper
| * a6cce316 dmaengine: idxd: fix memory leak in error handling path of idxd_pci_probe
| * 6e94a2c3 dmaengine: idxd: fix memory leak in error handling path of idxd_alloc
| * d2d05fd0 dmaengine: idxd: Add missing idxd cleanup to fix memory leak in remove call
| * 32ec46ad dmaengine: idxd: Add missing cleanups in cleanup internals
| * 404aad9b dmaengine: idxd: Add missing cleanup for early error out in idxd_setup_internals
| * 6ab9526e dmaengine: idxd: fix memory leak in error handling path of idxd_setup_groups
| * 9ba964b1 dmaengine: idxd: fix memory leak in error handling path of idxd_setup_engines
| * 47846211 dmaengine: idxd: fix memory leak in error handling path of idxd_setup_wqs
| * 1c9e4ed0 dmaengine: ti: k3-udma: Use cap_mask directly from dma_device structure instead of a local copy
| * d87f1cdd dmaengine: ti: k3-udma: Add missing locking
| * 5340d0e8 net: qede: Initialize qede_ll_ops with designated initializer
| * 5e700b06 wifi: mt76: disable napi on driver removal
| * 55018ca1 spi: tegra114: Use value to check for invalid delays
| * d8843fb1 smb: client: fix memory leak during error handling for POSIX mkdir
| * c682a193 scsi: sd_zbc: block: Respect bio vector limits for REPORT ZONES buffer
| * a1546ec7 phy: renesas: rcar-gen3-usb2: Set timing registers only once
| * 99fc6f1c phy: renesas: rcar-gen3-usb2: Fix role detection on unbind/bind
| * 2b169aa4 phy: Fix error handling in tegra_xusb_port_init
| * ba25131b phy: tegra: xusb: Use a bitmask for UTMI pad power state tracking
| * b1627af8 tracing: samples: Initialize trace_array_printk() with the correct function
| * 9d1216bf ftrace: Fix preemption accounting for stacktrace filter command
| * fa75d941 ftrace: Fix preemption accounting for stacktrace trigger command
| * 6d2d3752 Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer()
| * c0f3f0c8 Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges
| * 115c7890 hv_netvsc: Remove rmsg_pgcnt
| * 307963a3 hv_netvsc: Preserve contiguous PFN grouping in the page buffer array
| * da5d5bc3 hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages
| * c9d2b9a8 dma-buf: insert memory barrier before updating num_fences
| * fc8fa09d ALSA: usb-audio: Add sample rate quirk for Microdia JP001 USB Camera
| * 46b33b97 ALSA: usb-audio: Add sample rate quirk for Audioengine D1
| * 2759938c ALSA: es1968: Add error handling for snd_pcm_hw_constraint_pow2()
| * 124522cc ACPI: PPTT: Fix processor subtable walk
| * 6456c818 drm/amd/display: Avoid flooding unnecessary info messages
| * 43b35d40 drm/amd/display: Correct the reply value when AUX write incomplete
| * 34439d47 LoongArch: uprobes: Remove redundant code about resume_era
| * 84066382 LoongArch: uprobes: Remove user_{en,dis}able_single_step()
| * ad1e4410 LoongArch: Fix MAX_REG_OFFSET calculation
| * e89bd983 LoongArch: Save and restore CSR.CNTC for hibernation
| * f4c0a799 LoongArch: Prevent cond_resched() occurring within kernel-fpu
| * 7722fba9 udf: Make sure i_lenExtents is uptodate on inode eviction
| * a0302cb1 dmaengine: Revert "dmaengine: dmatest: Fix dmatest waiting less when interrupted"
| * e1b755c0 NFSv4/pnfs: Reset the layout state after a layoutreturn
| * c1dd9ccc tsnep: fix timestamping with a stacked DSA driver
| * 0980e62a tsnep: Inline small fragments within TX descriptor
| * 406d05da net/tls: fix kernel panic when alloc_page failed
| * f1ecccb5 mlxsw: spectrum_router: Fix use-after-free when deleting GRE net devices
| * fde33ab3 wifi: mac80211: Set n_channels after allocating struct cfg80211_scan_request
| * 72ee7af6 octeontx2-af: Fix CGX Receive counters
| * 398989c7 net: ethernet: mtk_eth_soc: fix typo for declaration MT7988 ESW capability
| * 03c42d35 octeontx2-pf: macsec: Fix incorrect max transmit size in TX secy
| * 7bddac86 regulator: max20086: fix invalid memory access
| * 9c2d0899 qlcnic: fix memory leak in qlcnic_sriov_channel_cfg_cmd()
| * b48a47e1 net/mlx5e: Disable MACsec offload for uplink representor profile
| * 4a7d4031 ALSA: sh: SND_AICA should depend on SH_DMA_API
| * c70c021b nvme-pci: acquire cq_poll_lock in nvme_poll_irqdisable
| * 64638f31 nvme-pci: make nvme_pci_npages_prp() __always_inline
| * cbe3f044 net: dsa: sja1105: discard incoming frames in BR_STATE_LISTENING
| * 1d60c078 net: cadence: macb: Fix a possible deadlock in macb_halt_tx.
| * 4e132f56 ALSA: ump: Fix a typo of snd_ump_stream_msg_device_info
| * 8a8dc7fd ALSA: seq: Fix delivery of UMP events to group ports
| * e4d8a517 net: mctp: Ensure keys maintain only one ref to corresponding dev
| * acab78ae net: mctp: Don't access ifa_index when missing
| * 2d45eeb7 mctp: no longer rely on net->dev_index_head[]
| * 7777ca11 tools/net/ynl: ethtool: fix crash when Hardware Clock info is missing
| * 95a9e08e tools: ynl: ethtool.py: Output timestamping statistics from tsinfo-get operation
| * a7d6e0ac net_sched: Flush gso_skb list too during ->change()
| * 31492b83 Bluetooth: MGMT: Fix MGMT_OP_ADD_DEVICE invalid device flags
| * b8084e81 spi: loopback-test: Do not split 1024-byte hexdumps
| * a6879a07 nfs: handle failure of nfs_get_lock_context in unlock path
| * ad6caaf2 HID: uclogic: Add NULL check in uclogic_input_configured()
| * 4715f16b HID: thrustmaster: fix memory leak in thrustmaster_interrupts()
| * ee4c5a2a RDMA/rxe: Fix slab-use-after-free Read in rxe_queue_cleanup bug
| * 99173e6f iio: chemical: sps30: use aligned_s64 for timestamp
| * 02023c28 iio: adc: ad7768-1: Fix insufficient alignment of timestamp.
| * 41ade94a Revert "drm/amd: Stop evicting resources on APUs in suspend"
| * c1a4d21a drm/amd: Add Suspend/Hibernate notification callback support
| * d59f4559 drm/amdgpu: trigger flr_work if reading pf2vf data failed
| * 9a6d2e19 drm/amdgpu: Fix the runtime resume failure issue
| * 95db39db drm/amd: Stop evicting resources on APUs in suspend
| * 220192d5 iio: adc: ad7266: Fix potential timestamp alignment issue.
| * ec24e62a KVM: SVM: Forcibly leave SMM mode on SHUTDOWN interception
| * 635b3cc6 KVM: SVM: Update SEV-ES shutdown intercepts with more metadata
| * 2402a3ef firmware: arm_scmi: Fix timeout checks on polling path
| * b3881294 firmware: arm_scmi: Track basic SCMI communication debug metrics
| * 0b175f7c firmware: arm_scmi: Add support for debug metrics at the interface
| * 844b899f firmware: arm_scmi: Add message dump traces for bad and unexpected replies
| * 6bddbdbe firmware: arm_scmi: Add helper to trace bad messages
| * 7ea1913d tpm: tis: Double the timeout B to 4s
| * 70417bad tracing: probes: Fix a possible race in trace_probe_log APIs
| * 4e63b690 cgroup/cpuset: Extend kthread_is_per_cpu() check to all PF_NO_SETAFFINITY tasks
| * 44a4c0db platform/x86: asus-wmi: Fix wlan_ctrl_by_user detection
| * 6b92eee6 platform/x86/amd/pmc: Declare quirk_spurious_8042 for MECHREVO Wujie 14XA (GX4HRXL)
| * bfe0dd3b binfmt_elf: Move brk for static PIE even if ASLR disabled
| * 622b7267 binfmt_elf: Honor PT_LOAD alignment for static PIE
| * d9c17587 binfmt_elf: Calculate total_size earlier
| * d3642f29 selftests/exec: Build both static and non-static load_address tests
| * 7435fa1c binfmt_elf: Leave a gap between .bss and brk
| * 0d6a2bad selftests/exec: load_address: conform test to TAP format output
| * fe7eb1f3 binfmt_elf: elf_bss no longer used by load_elf_binary()
| * c6df4c71 binfmt_elf: Support segments with 0 filesz and misaligned starts
| * 11689bb0 fs/xattr.c: fix simple_xattr_list to always include security.* xattrs
* | 70cce264 UPSTREAM: x86/its: Fix build error for its_static_thunk()
* | 195969c1 Merge 6.6.91 into android15-6.6-lts
|\|
| * 615b9e10 Linux 6.6.91
| * 772934d9 x86/its: FineIBT-paranoid vs ITS
| * 9f69fe38 x86/its: Fix build errors when CONFIG_MODULES=n
| * 3b2234cd x86/its: Use dynamic thunks for indirect branches
| * 6699bf27 x86/ibt: Keep IBT disabled during alternative patching
| * 9e7364c3 x86/its: Align RETs in BHB clear sequence to avoid thunking
| * ba1d7036 x86/its: Add support for RSB stuffing mitigation
| * 61bed1dd x86/its: Add "vmexit" option to skip mitigation on some CPUs
| * f7ef7f6c x86/its: Enable Indirect Target Selection mitigation
| * 4754e29f x86/its: Add support for ITS-safe return thunk
| * c5a5d807 x86/its: Add support for ITS-safe indirect thunk
| * 19557975 x86/its: Enumerate Indirect Target Selection (ITS) bug
| * c6c1319d Documentation: x86/bugs/its: Add ITS documentation
| * a42e9162 x86/speculation: Remove the extra #ifdef around CALL_NOSPEC
| * 0a90b50e x86/speculation: Add a conditional CS prefix to CALL_NOSPEC
| * 2eecf5cf x86/speculation: Simplify and make CALL_NOSPEC consistent
| * a8a8826b x86/bhi: Do not set BHI_DIS_S in 32-bit mode
| * a0ff7f67 x86/bpf: Add IBHF call at end of classic BPF
| * 1afebfea x86/bpf: Call branch history clearing sequence on exit
| * ca8a5626 arm64: proton-pack: Add new CPUs 'k' values for branch mitigation
| * 80251f62 arm64: bpf: Only mitigate cBPF programs loaded by unprivileged users
| * 42a20cf5 arm64: bpf: Add BHB mitigation to the epilogue for cBPF programs
| * 73591041 arm64: proton-pack: Expose whether the branchy loop k value
| * 854da0ed arm64: proton-pack: Expose whether the platform is mitigated by firmware
| * 054fc98d arm64: insn: Add support for encoding DSB
| * 746e7d28 io_uring: ensure deferred completions are posted for multishot
| * 51f1389b io_uring: always arm linked timeouts prior to issue
| * 00f0dd1a do_umount(): add missing barrier before refcount checks in sync case
| * eba09f42 nvme: unblock ctrl state transition for firmware update
| * f5a7d616 drm/panel: simple: Update timings for AUO G101EVN010
| * 1c062021 MIPS: Fix MAX_REG_OFFSET
| * 66c4ec15 iio: adc: dln2: Use aligned_s64 for timestamp
| * 8b527305 iio: accel: adxl355: Make timestamp 64-bit aligned using aligned_s64
| * 95197719 types: Complement the aligned types with signed 64-bit one
| * 85d430ae iio: temp: maxim-thermocouple: Fix potential lack of DMA safe buffer.
| * 2b58e7c1 iio: accel: adxl367: fix setting odr for activity time update
| * 37a55b69 usb: usbtmc: Fix erroneous generic_read ioctl return
| * 1991ed79 usb: usbtmc: Fix erroneous wait_srq ioctl return
| * e96be8bd usb: usbtmc: Fix erroneous get_stb ioctl error returns
| * e2fef620 USB: usbtmc: use interruptible sleep in usbtmc_read
| * 14f298c5 usb: typec: ucsi: displayport: Fix NULL pointer access
| * c9d8b093 usb: typec: tcpm: delay SNK_TRY_WAIT_DEBOUNCE to SRC_TRYWAIT transition
| * 2d44ee69 usb: host: tegra: Prevent host controller crash when OTG port is used
| * 9b09b99a usb: gadget: Use get_status callback to set remote wakeup capability
| * 0b32d03e usb: gadget: tegra-xudc: ACK ST_RC after clearing CTRL_RUN
| * dffa51cf usb: gadget: f_ecm: Add get_status callback
| * 1981926e usb: cdnsp: fix L1 resume issue for RTL_REVISION_NEW_LPM version
| * d8460312 usb: cdnsp: Fix issue with resuming from L1
| * 8c133a08 ocfs2: stop quota recovery before disabling quotas
| * cc335d4f ocfs2: implement handshaking with ocfs2 recovery thread
| * c7441aa8 ocfs2: switch osb->disable_recovery to enum
| * cbd51081 x86/microcode: Consolidate the loader enablement checking
| * faa90596 module: ensure that kobject_put() is safe for module type kobjects
| * 7e1c7748 clocksource/i8253: Use raw_spinlock_irqsave() in clockevent_i8253_disable()
| * cbfaf46b xenbus: Use kref to track req lifetime
| * ffa14d4d xen: swiotlb: Use swiotlb bouncing if kmalloc allocation demands it
| * 2ed98e89 smb: client: Avoid race in open_cached_dir with lease breaks
| * 671c0543 usb: uhci-platform: Make the clock really optional
| * 03f108a7 drm/amdgpu/hdp6: use memcfg register to post the write for HDP flush
| * 1824e914 drm/amdgpu/hdp5: use memcfg register to post the write for HDP flush
| * 7133ff3b drm/amdgpu/hdp5.2: use memcfg register to post the write for HDP flush
| * 05340a42 drm/amdgpu/hdp4: use memcfg register to post the write for HDP flush
| * f647ce6d drm/amd/display: Copy AUX read reply data whenever length > 0
| * 79d982ae drm/amd/display: Fix wrong handling for AUX_DEFER case
| * 89850f11 drm/amd/display: Remove incorrect checking in dmub aux handler
| * cee6856f drm/amd/display: Fix the checking condition in dmub aux handling
| * c8a91deb drm/amd/display: more liberal vmin/vmax update for freesync
| * 12125f7d drm/v3d: Add job to pending list if the reset was skipped
| * 9ce66285 iio: imu: st_lsm6dsx: fix possible lockup in st_lsm6dsx_read_tagged_fifo
| * da33c416 iio: imu: st_lsm6dsx: fix possible lockup in st_lsm6dsx_read_fifo
| * 3413b87a iio: adis16201: Correct inclinometer channel resolution
| * 7748b1b2 iio: adc: rockchip: Fix clock initialization sequence
| * badda05d iio: adc: ad7606: fix serial register access
| * b229fa0d drm/amd/display: Shift DMUB AUX reply command if necessary
| * d4107290 x86/mm: Eliminate window where TLB flushes may be inadvertently skipped
| * 0f2b18c0 staging: axis-fifo: Correct handling of tx_fifo_depth for size validation
| * f4d6b9f4 staging: axis-fifo: Remove hardware resets for user errors
| * 90db1225 staging: iio: adc: ad7816: Correct conditional logic for store mode
| * f7adc494 Input: synaptics - enable InterTouch on TUXEDO InfinityBook Pro 14 v5
| * 85961bb7 Input: synaptics - enable SMBus for HP Elitebook 850 G1
| * cbd085c4 Input: synaptics - enable InterTouch on Dell Precision M3800
| * 82b02402 Input: synaptics - enable InterTouch on Dynabook Portege X30L-G
| * c321045f Input: synaptics - enable InterTouch on Dynabook Portege X30-D
| * 2d9d6a4c Input: xpad - fix two controller table values
| * 56b4e8b6 Input: xpad - add support for 8BitDo Ultimate 2 Wireless Controller
| * cbc82e7d Input: xpad - fix Share button on Xbox One controllers
| * 90fa6015 Input: mtk-pmic-keys - fix possible null pointer dereference
| * f72f0172 Input: cyttsp5 - fix power control issue on wakeup
| * dadbe33f Input: cyttsp5 - ensure minimum reset pulse width
| * ce4e826d net: dsa: b53: fix learning on VLAN unaware bridges
| * b1c9c58d net: dsa: b53: always rejoin default untagged VLAN on bridge leave
| * ca071649 net: dsa: b53: fix VLAN ID for untagged vlan on bridge leave
| * a143c39a net: dsa: b53: fix flushing old pvid VLAN on pvid change
| * aa00a30a net: dsa: b53: fix clearing PVID of a port
| * 0121c19e net: dsa: b53: allow leaky reserved multicast
| * 355b0526 bpf: Scrub packet on bpf_redirect_peer
| * a3dfec48 netfilter: ipset: fix region locking in hash types
| * adbc8cc1 ipvs: fix uninit-value for saddr in do_output_route4
| * 42b7a7c9 can: gw: fix RCU/BH usage in cgw_create_job()
| * 3455e639 can: mcp251xfd: fix TDC setting for low data bit rates
| * 68f29bb9 net: ethernet: mtk_eth_soc: reset all TX queues on DMA free
| * 37063539 netdevice: add netdev_tx_reset_subqueue() shorthand
| * fa1fe9f3 gre: Fix again IPv6 link-local address generation.
| * 31ff70ad sch_htb: make htb_deactivate() idempotent
| * af9e2d47 ksmbd: fix memory leak in parse_lease_state()
| * 0236742b openvswitch: Fix unsafe attribute parsing in output_userspace()
| * fec1f9e9 ksmbd: Fix UAF in __close_file_table_ids
| * 04c8a38c ksmbd: prevent out-of-bounds stream writes by validating *pos
| * 6ee55167 ksmbd: prevent rename with empty string
| * 3482037d can: mcp251xfd: mcp251xfd_remove(): fix order of unregistration calls
| * 73dde269 wifi: cfg80211: fix out-of-bounds access during multi-link element defragmentation
| * d2520dc7 can: mcan: m_can_class_unregister(): fix order of unregistration calls
| * 0efe9965 arm64: dts: imx8mm-verdin: Link reg_usdhc2_vqmmc to usdhc2
| * 38433aa3 dm: add missing unlock on in dm_keyslot_evict()
* | 91c0e1c8 Merge 6.6.90 into android15-6.6-lts
|\|
| * 9c2dd895 Linux 6.6.90
* | 19ad69ff Merge ed3248a4 ("dm: fix copying after src array boundaries") into android15-6.6-lts
|\|
| * ed3248a4 dm: fix copying after src array boundaries
* | 32c69e08 Reapply "dm: always update the array size in realloc_argv on success"
* | 75ac935d Merge fe465003 ("xhci: fix possible null pointer dereference at secondary interrupter removal") into android15-6.6-lts
|\|
| * fe465003 xhci: fix possible null pointer dereference at secondary interrupter removal
* | 1654cc33 Merge 3efb29f6 ("usb: xhci: Check for xhci->interrupters being allocated in xhci_mem_clearup()") into android15-6.6-lts
|\|
| * 3efb29f6 usb: xhci: Check for xhci->interrupters being allocated in xhci_mem_clearup()
* | f9fc1f58 Merge android15-6.6 into android15-6.6-lts
* | a9e29a7f Merge bbc66abc ("drm/amd/display: Fix slab-use-after-free in hdcp") into android15-6.6-lts
|\|
| * bbc66abc drm/amd/display: Fix slab-use-after-free in hdcp
| * 97a91875 drm/amd/display: Add scoped mutexes for amdgpu_dm_dhcp
| * 4306dbd7 iommu/arm-smmu-v3: Fix iommu_device_probe bug due to duplicated stream ids
| * 3dc33f14 iommu/arm-smmu-v3: Use the new rb tree helpers
| * 8f2451eb drivers: base: handle module_kobject creation
| * ace531f2 kernel: globalize lookup_or_create_module_kobject()
| * 0ecbb45e kernel: param: rename locate_module_kobject
* | b6062169 Merge baa3ebba ("xhci: Limit time spent with xHC interrupts disabled during bus resume") into android15-6.6-lts
|\|
| * baa3ebba xhci: Limit time spent with xHC interrupts disabled during bus resume
| * ebb7195d xhci: support setting interrupt moderation IMOD for secondary interrupters
| * cc64775a usb: xhci: check if 'requested segments' exceeds ERST capacity
| * 3733697c xhci: Add helper to set an interrupters interrupt moderation interval
| * bcd191d7 xhci: add support to allocate several interrupters
| * ff0a5133 xhci: split free interrupter into separate remove and free parts
| * 3f6e8ad6 xhci: Clean up stale comment on ERST_SIZE macro
| * f3774349 xhci: Use more than one Event Ring segment
| * 6299fb61 xhci: Set DESI bits in ERDP register correctly
* | 0604a612 Revert "cpufreq: Fix setting policy limits when frequency tables are used"
* | 3d141045 Revert "net: Rename mono_delivery_time to tstamp_type for scalabilty"
* | cf8861e1 Revert "Bluetooth: L2CAP: copy RX timestamp to new fragments"
* | 8d056677 Revert "bpf: add find_containing_subprog() utility function"
* | 6eac5086 Revert "bpf: refactor bpf_helper_changes_pkt_data to use helper number"
* | 7b53e4c6 Revert "bpf: track changes_pkt_data property for global functions"
* | df171963 Revert "selftests/bpf: test for changing packet data from global functions"
* | 4fe4dffa Revert "bpf: check changes_pkt_data property for extension programs"
* | bb9c2735 Revert "selftests/bpf: freplace tests for tracking of changes_packet_data"
* | 3414f306 Revert "bpf: consider that tail calls invalidate packet pointers"
* | 16ae98c7 Revert "selftests/bpf: validate that tail call invalidates packet pointers"
* | b51ffb61 Revert "bpf: fix null dereference when computing changes_pkt_data of prog w/o subprogs"
* | 1e513665 Revert "selftests/bpf: extend changes_pkt_data with cases w/o subprograms"
* | 58a59d0e Merge 5e8c3113 ("Revert "drm/meson: vclk: fix calculation of 59.94 fractional rates"") into android15-6.6-lts
|\|
| * 5e8c3113 Revert "drm/meson: vclk: fix calculation of 59.94 fractional rates"
| * f129d8ae arm64: dts: st: Use 128kB size for aliased GIC400 register access on stm32mp25 SoCs
| * ce2fa5bc arm64: dts: st: Adjust interrupt-controller for stm32mp25 SoCs
| * fabe7303 ARM: dts: opos6ul: add ksz8081 phy properties
| * f68f93c9 firmware: arm_ffa: Skip Rx buffer ownership release if not acquired
| * 2fbf6c96 firmware: arm_scmi: Balance device refcount when destroying devices
| * e762ec4c sch_ets: make est_qlen_notify() idempotent
| * 36269156 sch_qfq: make qfq_qlen_notify() idempotent
| * 9030a912 sch_hfsc: make hfsc_qlen_notify() idempotent
| * 077e355d sch_drr: make drr_qlen_notify() idempotent
| * bbbf5e0f sch_htb: make htb_qlen_notify() idempotent
| * b9ded1fb riscv: Pass patch_text() the length in bytes
| * 85484bc6 ASoC: soc-core: Stop using of_property_read_bool() for non-boolean properties
| * 54583776 ASoC: Use of_property_read_bool()
| * 29ea1abc net: vertexcom: mse102x: Fix RX error handling
| * 6ac8ec92 net: vertexcom: mse102x: Add range check for CMD_RTS
| * 04d9c340 net: vertexcom: mse102x: Fix LEN_MASK
| * e1301580 net: vertexcom: mse102x: Fix possible stuck of SPI interrupt
| * cb5922f7 net: hns3: defer calling ptp_clock_register()
| * accb5a8e net: hns3: fixed debugfs tm_qset size
| * c1b1d3b0 net: hns3: fix an interrupt residual problem
| * 67d587bf net: hns3: store rx VLAN tag offload state for VF
| * 7e1ca1be octeon_ep: Fix host hang issue during device reboot
| * 0e32cbcb net: fec: ERR007885 Workaround for conventional TX
| * dae1ce27 net: lan743x: Fix memleak issue when GSO enabled
| * ec00ea56 nvme-tcp: fix premature queue removal and I/O failover
| * 252a5a67 bnxt_en: Fix ethtool -d byte order for 32-bit values
| * 4d698649 bnxt_en: Fix out-of-bound memcpy() during ethtool -w
| * 3facfd72 bnxt_en: Fix coredump logic to free allocated buffer
| * e0272844 net: ipv6: fix UDPv6 GSO segmentation with NAT
| * 8acf08b1 net: dsa: felix: fix broken taprio gate states after clock jump
| * cb625f78 net: ethernet: mtk_eth_soc: fix SER panic with 4GB+ RAM
| * 683ad6d7 igc: fix lock order in igc_ptp_reset
| * 2399d1a7 net: mdio: mux-meson-gxl: set reversed bit when using internal phy
| * 1bbbdfc2 net: dlink: Correct endianness handling of led_mode
| * 012a413b nvme-pci: fix queue unquiesce check on slot_reset
| * ce4f77be ALSA: ump: Fix buffer overflow at UMP SysEx message conversion
| * eae60cfe ice: Check VF VSI Pointer Value in ice_vc_add_fdir_fltr()
| * a4378311 net_sched: qfq: Fix double list add in class with netem as child qdisc
| * 72c3da7e net_sched: ets: Fix double list add in class with netem as child qdisc
| * 6082a87a net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc
| * db205b92 net_sched: drr: Fix double list add in class with netem as child qdisc
| * 9b467c5b pds_core: remove write-after-free of client_id
| * 0861fccd pds_core: specify auxiliary_device to be created
| * da23d7ed pds_core: make pdsc_auxbus_dev_del() void
| * 452fa190 pds_core: delete VF dev on reset
| * 5e51c0b5 pds_core: check health in devcmd wait
| * 5ba9380f net: ethernet: mtk-star-emac: rearm interrupts in rx_poll only when advised
| * 7cb10f17 net: ethernet: mtk-star-emac: fix spinlock recursion issues on rx/tx poll
| * a74777bb net: mscc: ocelot: delete PVID VLAN when readding it as non-PVID
| * dc7ffe02 net: mscc: ocelot: treat 802.1ad tagged traffic as 802.1Q-untagged
| * 8c7bfb61 Bluetooth: L2CAP: copy RX timestamp to new fragments
| * 8dde0222 net: Rename mono_delivery_time to tstamp_type for scalabilty
| * 2e8d44eb Bluetooth: btusb: avoid NULL pointer dereference in skb_dequeue()
| * dd20a33a net/mlx5: E-switch, Fix error handling for enabling roce
| * bab395c8 net/mlx5: E-Switch, Initialize MAC Address for Default GID
| * 3576e9a8 vxlan: vnifilter: Fix unlocked deletion of default FDB entry
| * 029f1134 powerpc/boot: Fix dash warning
| * 36a9a264 wifi: plfxlc: Remove erroneous assert in plfxlc_mac_release
| * c5a5de34 drm/i915/pxp: fix undefined reference to `intel_pxp_gsccs_is_ready_for_sessions'
| * 27a1efe2 powerpc/boot: Check for ld-option support
| * 9a8d4d70 book3s64/radix : Align section vmemmap start address to PAGE_SIZE
| * 8890eeae ASoC: soc-pcm: Fix hw_params() and DAPM widget sequence
| * a6dbcf69 iommu: Handle race with default domain setup
| * a1723e9c KVM: x86: Load DR6 with guest value only before entering .vcpu_run() loop
| * 46acbfbc PCI: imx6: Skip controller_id generation logic for i.MX7D
| * 28cfd949 Revert "PCI: imx6: Skip controller_id generation logic for i.MX7D"
| * 47e24c86 selftests/bpf: extend changes_pkt_data with cases w/o subprograms
| * 3a467d93 bpf: fix null dereference when computing changes_pkt_data of prog w/o subprogs
| * b7c0d2d4 selftests/bpf: validate that tail call invalidates packet pointers
| * f1692ee2 bpf: consider that tail calls invalidate packet pointers
| * 70234fbf selftests/bpf: freplace tests for tracking of changes_packet_data
| * 7197fc4a bpf: check changes_pkt_data property for extension programs
| * 85a30a46 selftests/bpf: test for changing packet data from global functions
| * 79751e92 bpf: track changes_pkt_data property for global functions
| * 3d496a1e bpf: refactor bpf_helper_changes_pkt_data to use helper number
| * f0b56f1d bpf: add find_containing_subprog() utility function
| * 056ebbdd tracing: Fix oob write in trace_seq_to_buffer()
| * 25687fd1 cpufreq: Fix setting policy limits when frequency tables are used
| * cbd54987 cpufreq: Avoid using inconsistent policy->min and policy->max
* | a10c8973 Revert "dm: always update the array size in realloc_argv on success"
* | 800d65c8 Merge e7694864 ("smb: client: fix zero length for mkdir POSIX create context") into android-mainline
|\|
| * e7694864 smb: client: fix zero length for mkdir POSIX create context
| * b4474635 ksmbd: fix use-after-free in kerberos authentication
| * a45445b6 platform/x86/intel-uncore-freq: Fix missing uncore sysfs during CPU hotplug
| * 3a868a7f platform/x86/amd: pmc: Require at least 2.5 seconds between HW sleep cycles
| * f39493cf iommu/vt-d: Apply quirk_iommu_igfx for 8086:0044 (QM57/QS57)
| * 13d67528 iommu/amd: Fix potential buffer overflow in parse_ivrs_acpihid
| * 64e95bb3 dm: always update the array size in realloc_argv on success
* | 802865c2 Merge ecc7f159 ("dm-integrity: fix a warning on invalid table line") into android-mainline
|\|
| * ecc7f159 dm-integrity: fix a warning on invalid table line
* | 9bcea087 Merge c8c83052 ("dm-bufio: don't schedule in atomic context") into android-mainline
|\|
| * c8c83052 dm-bufio: don't schedule in atomic context
* | 2b2f0d5a Merge 08424a09 ("wifi: brcm80211: fmac: Add error handling for brcmf_usb_dl_writeimage()") into android-mainline
|\|
| * 08424a09 wifi: brcm80211: fmac: Add error handling for brcmf_usb_dl_writeimage()
* | 57af78f4 Merge 8daa71c6 ("tracing: Do not take trace_event_sem in print_event_fields()") into android-mainline
|\|
| * 8daa71c6 tracing: Do not take trace_event_sem in print_event_fields()
* | f6c8c492 Merge 75fda0e5 ("spi: tegra114: Don't fail set_cs_timing when delays are zero") into android-mainline
|\|
| * 75fda0e5 spi: tegra114: Don't fail set_cs_timing when delays are zero
* | 8f486cc1 Merge 3aa4aff1 ("mmc: renesas_sdhi: Fix error handling in renesas_sdhi_probe") into android-mainline
|\|
| * 3aa4aff1 mmc: renesas_sdhi: Fix error handling in renesas_sdhi_probe
* | 4f41bfdb Merge 4d1a2d13 ("mm/memblock: repeat setting reserved region nid if array is doubled") into android-mainline
|\|
| * 4d1a2d13 mm/memblock: repeat setting reserved region nid if array is doubled
* | bf30bf59 Merge c0fabecd ("mm/memblock: pass size instead of end to memblock_set_node()") into android-mainline
|\|
| * c0fabecd mm/memblock: pass size instead of end to memblock_set_node()
* | b917e32d Merge dfbaecf7 ("irqchip/qcom-mpm: Prevent crash when trying to handle non-wake GPIOs") into android-mainline
|\|
| * dfbaecf7 irqchip/qcom-mpm: Prevent crash when trying to handle non-wake GPIOs
* | 624451d0 Merge e51dd712 ("amd-xgbe: Fix to ensure dependent features are toggled with RX checksum offload") into android-mainline
|\|
| * e51dd712 amd-xgbe: Fix to ensure dependent features are toggled with RX checksum offload
* | 6b5926ac Merge 34b6fa11 ("perf/x86/intel: KVM: Mask PEBS_ENABLE loaded for guest with vCPU's value.") into android-mainline
|\|
| * 34b6fa11 perf/x86/intel: KVM: Mask PEBS_ENABLE loaded for guest with vCPU's value.
* | 3dfac7bc Merge 6a098c51 ("parisc: Fix double SIGFPE crash") into android-mainline
|\|
| * 6a098c51 parisc: Fix double SIGFPE crash
* | 7adf4c45 Merge 3821cae9 ("arm64: errata: Add missing sentinels to Spectre-BHB MIDR arrays") into android-mainline
|\|
| * 3821cae9 arm64: errata: Add missing sentinels to Spectre-BHB MIDR arrays
* | 183e0245 Reapply "arm64: errata: Add newer ARM cores to the spectre_bhb_loop_affected() lists"
* | eb6f76b7 Merge ddf4e7f0 ("i2c: imx-lpi2c: Fix clock count when probe defers") into android-mainline
|/
* ddf4e7f0 i2c: imx-lpi2c: Fix clock count when probe defers
* 78cf306f EDAC/altera: Set DDR and SDMMC interrupt mask before registration
* 72664163 EDAC/altera: Test the correct error reg offset
* 126f5c6e drm/nouveau: Fix WARN_ON in nouveau_fence_context_kill()
* 94808275 drm/fdinfo: Protect against driver unbind
* b364ee98 btrfs: fix COW handling in run_delalloc_nocow()
* 3ac18e0a ALSA: usb-audio: Add second USB ID for Jabra Evolve 65 headset
* f73ecbfa ALSA: usb-audio: Add retry on -EPROTO from usb_set_interface()
* fd1aeef3 Revert "rndis_host: Flag RNDIS modems as WWAN devices"

Change-Id: I9176e1db2f5a199ce0ba84842488ecdcb508f324
Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>