Merge tag 'android14-6.1.99_r00' into android14-6.1

This merges up to the 6.1.99 LTS release into android14-6.1.  This
includes the following commits:

*   12f9bcc0 Merge 6.1.99 into android14-6.1-lts
|\
| * cac15753 Linux 6.1.99
| * 1f4a10cb Revert "usb: xhci: prevent potential failure in handle_tx_event() for Transfer events without TRB"
* | e6e7b108 Merge 6.1.98 into android14-6.1-lts
|\|
| * 266ee8e0 Linux 6.1.98
| * 86e3ffea nilfs2: fix incorrect inode allocation from reserved inodes
| * a077a6cd null_blk: Do not allow runt zone with zone capacity smaller then zone size
| * 2fed4a94 spi: cadence: Ensure data lines set to low during dummy-cycle period
| * 41f5e284 nfc/nci: Add the inconsistency check between the input data length and count
| * 833112b7 kbuild: fix short log for AS in link-vmlinux.sh
| * 940a71f0 nvmet: fix a possible leak when destroy a ctrl during qp establishment
| * 273a824a platform/x86: touchscreen_dmi: Add info for the EZpad 6s Pro
| * 363585e3 platform/x86: touchscreen_dmi: Add info for GlobalSpace SolT IVW 11.6" tablet
| * 85646d77 regmap-i2c: Subtract reg size from max_write
| * 62fc41a6 nvme: adjust multiples of NVME_CTRL_PAGE_SIZE in offset
| * ce39d857 dma-mapping: benchmark: avoid needless copy_to_user if benchmark fails
| * d62da841 nvme-multipath: find NUMA path only for online numa-node
| * 154f4ca8 ALSA: hda/realtek: Enable headset mic of JP-IK LEAP W502 with ALC897
| * 850ef5d2 fs/ntfs3: Mark volume as dirty if xattr is broken
| * 3d32327f i2c: pnx: Fix potential deadlock warning from del_timer_sync() call in isr
| * 7069aa6d clk: mediatek: mt8183: Only enable runtime PM on mt8183-mfgcfg
| * e3e33879 clk: mediatek: clk-mtk: Register MFG notifier in mtk_clk_simple_probe()
| * 661baa17 clk: qcom: gcc-sm6350: Fix gpll6* & gpll7 parents
| * e5411f26 media: dw2102: fix a potential buffer overflow
| * 9c3906c3 ima: Avoid blocking in RCU read-side critical section
| * ee42c150 arm64: dts: rockchip: Fix the DCDC_REG2 minimum voltage on Quartz64 Model B
| * 9504a155 bnx2x: Fix multiple UBSAN array-index-out-of-bounds
| * 1c67f793 mtd: rawnand: rockchip: ensure NVDDR timings are rejected
| * 670f841c mtd: rawnand: Bypass a couple of sanity checks during NAND identification
| * ca0f2e72 mtd: rawnand: Ensure ECC configuration is propagated to upper layers
| * c550679d powerpc/pseries: Fix scv instruction crash with kexec
| * dd4674d0 drm: panel-orientation-quirks: Add quirk for Valve Galileo
| * 742cac67 drm/amdgpu/atomfirmware: silence UBSAN warning
| * 1f325352 drm/nouveau: fix null pointer dereference in nouveau_connector_get_modes
| * cbbe17a3 Revert "mm/writeback: fix possible divide-by-zero in wb_dirty_limits(), again"
| * 4e071611 fsnotify: Do not generate events for O_PATH file descriptors
| * 44aa3e76 can: kvaser_usb: Explicitly initialize family in leafimx driver_info struct
| * e6e200b2 Bluetooth: qca: Fix BT enable failure again for QCA6390 after warm reboot
| * c126aff7 scsi: mpi3mr: Use proper format specifier in mpi3mr_sas_port_add()
| * 525ad8dd f2fs: Add inline to f2fs_build_fault_attr() stub
| * aa1d8cc0 btrfs: fix adding block group to a reclaim list and the unused list during reclaim
| * c83ed422 mm: avoid overflows in dirty throttling logic
| * d259d0c3 mm: optimize the redundant loop of mm_update_owner_next()
| * 1b7d549e nilfs2: add missing check for inode numbers on directory entries
| * fae1959d nilfs2: fix inode number range checks
| * 98c89589 Revert "igc: fix a log entry using uninitialized netdev"
| * 89a5f062 platform/x86: toshiba_acpi: Fix quickstart quirk handling
| * ab557f5c mlxsw: core_linecards: Fix double memory deallocation in case of invalid INI file
| * d6f487e0 inet_diag: Initialize pad field in struct inet_diag_req_v2
| * 8d9fa5e8 selftests: make order checking verbose in msg_zerocopy selftest
| * fb8fc89b selftests: fix OOM in msg_zerocopy selftest
| * c8eb8ab9 bonding: Fix out-of-bounds read in bond_option_arp_ip_targets_set()
| * 4c06c133 netfilter: nf_tables: unconditionally flush pending work before notifier
| * 653deee4 riscv: kexec: Avoid deadlock in kexec crash path
| * b610a875 wifi: wilc1000: fix ies_len type in connect path
| * 4b3b6c7e net: ntb_netdev: Move ntb_netdev_rx_handler() to call netif_rx() from __netif_rx()
| * 12f6119d net: allow skb_datagram_iter to be called from any context
| * b368762d e1000e: Fix S0ix residency on corporate systems
| * c159afd3 KVM: s390: fix LPSWEY handling
| * 31f03bb0 tcp_metrics: validate source addr length
| * f8b7bd50 net/mlx5e: Add mqprio_rl cleanup and free in mlx5e_priv_cleanup()
| * bc3ff8d3 net/mlx5: E-switch, Create ingress ACL when needed
| * 965fbc6d UPSTREAM: tcp: fix DSACK undo in fast recovery to call tcp_try_to_open()
| * a0d1afe8 mac802154: fix time calculation in ieee802154_configure_durations()
| * 325d8659 tools/power turbostat: Remember global max_die_id
| * 0c97527e cdrom: rearrange last_media_change check to avoid unintentional overflow
| * c0d7a3b2 btrfs: scrub: initialize ret in scrub_simple_mirror() to fix compilation warning
| * c5179588 s390/pkey: Wipe sensitive data on failure
| * 751987a5 jffs2: Fix potential illegal address access in jffs2_free_inode
| * e1683ff4 serial: imx: Raise TX trigger level to 8
| * b869ec89 scsi: mpi3mr: Sanitise num_phys
| * bc84dd2c f2fs: check validation of fault attrs in f2fs_build_fault_attr()
| * a21d76bd bpf: Avoid uninitialized value in BPF_CORE_READ_BITFIELD
| * 2e9d8aa5 igc: fix a log entry using uninitialized netdev
| * ce8d4967 powerpc/xmon: Check cpu id in commands "c#", "dp#" and "dx#"
| * ae9edc2b kunit: Fix timeout message
| * 74159d40 orangefs: fix out-of-bounds fsid access
| * 9c06fe8c powerpc/64: Set _IO_BASE to POISON_POINTER_DELTA not 0 for CONFIG_PCI=n
| * d4889c95 i2c: i801: Annotate apanel_addr as __ro_after_init
| * 1663e247 media: dvb-frontends: tda10048: Fix integer overflow
| * 1aa04c84 media: s2255: Use refcount_t instead of atomic_t for num_channels
| * fa547cdd media: dvb-frontends: tda18271c2dd: Remove casting during div
| * aa03f591 net: dsa: mv88e6xxx: Correct check for empty list
| * 22ea2a7f wifi: mt76: replace skb_put with skb_put_zero
| * 948554f1 usb: xhci: prevent potential failure in handle_tx_event() for Transfer events without TRB
| * 46c82c5e Input: ff-core - prefer struct_size over open coded arithmetic
| * d792fc8f firmware: dmi: Stop decoding on broken entry
| * f2c9c42f sctp: prefer struct_size over open coded arithmetic
| * a010daa3 media: dw2102: Don't translate i2c read into write
| * ee18ed34 drm/amdgpu: fix uninitialized scalar variable warning
| * 87426135 drm/amd/display: Skip finding free audio for unknown engine_id
| * d2c3645a drm/amd/display: Check pipe offset before setting vblank
| * ae91ffbc drm/amd/display: Check index msg_id before read or write
| * bf312c05 drm/amdgpu: Initialize timestamp for some legacy SOCs
| * 7eb74d14 drm/amdgpu: Fix uninitialized variable warnings
| * 28c8d274 crypto: aead,cipher - zeroize key buffer after use
| * fa49c65a scsi: qedf: Make qedf_execute_tmf() non-preemptible
| * 63d202d9 IB/core: Implement a limit on UMAD receive List
| * 95e9377c media: dvb-usb: dib0700_devices: Add missing release_firmware()
| * c72990a6 media: dvb: as102-fe: Fix as10x_register_addr packing
| * 8d3f83df powerpc: Avoid nmi_enter/nmi_exit in real mode interrupt.
| * 0a487e97 drm/lima: fix shared irq handling on driver remove
| * eda60520 crypto: hisilicon/debugfs - Fix debugfs uninit process issue
| * 42d64dbe locking/mutex: Introduce devm_mutex_init()
* | e44db575 ANDROID: db845c symbol list additions
* | ab63f81b Revert "mm/page_alloc: Separate THP PCP into movable and non-movable categories"
* | 9a2454ec Merge 6.1.97 into android14-6.1-lts
|\|
| * 7753af06 Linux 6.1.97
| * f19cca5d tracing/net_sched: NULL pointer dereference in perf_trace_qdisc_reset()
| * fbfd2c87 serial: 8250_omap: Fix Errata i2310 with RX FIFO level check
| * 1dc9d050 serial: imx: only set receiver level if it is zero
| * 16d92a6d arm64: dts: rockchip: Add sound-dai-cells for RK3368
| * 4e66009d arm64: dts: rockchip: fix PMIC interrupt pin on ROCK Pi E
| * 2581e814 ARM: dts: rockchip: rk3066a: add #sound-dai-cells to hdmi node
| * bccc0c84 arm64: dts: rockchip: Rename LED related pinctrl nodes on rk3308-rock-pi-s
| * b619f741 arm64: dts: rockchip: Fix SD NAND and eMMC init on rk3308-rock-pi-s
| * fcafdf32 efi/x86: Free EFI memory map only when installing a new one.
| * 01b3cddf efi: xen: Set EFI_PARAVIRT for Xen dom0 boot on all architectures
| * 0d01140e efi: memmap: Move manipulation routines into x86 arch tree
| * 7ad4e0a4 gfs2: Fix slab-use-after-free in gfs2_qd_dealloc
| * 447434ea mm/page_alloc: Separate THP PCP into movable and non-movable categories
| * 978e27ff Revert "cpufreq: amd-pstate: Fix the inconsistency in max frequency units"
| * d2b56368 pwm: stm32: Refuse too small period requests
| * f910aee9 syscalls: fix sys_fanotify_mark prototype
| * e1b88ac1 syscalls: fix compat_sys_io_pgetevents_time64 usage
| * 5ae6af68 ftruncate: pass a signed offset
| * 702c1edb ata: libata-core: Fix double free on error
| * 5f0d0bf9 ata: ahci: Clean up sysfs file on error
| * f926c022 can: mcp251xfd: fix infinite loop when xmit fails
| * 778a8e67 batman-adv: Don't accept TT entries for out-of-spec VIDs
| * c92a15b3 drm/amdgpu/atomfirmware: fix parsing of vram_info
| * 30cbf6ff drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_hd_modes
| * ca0fabd3 drm/i915/gt: Fix potential UAF by revoke of fence registers
| * 6ce0544c drm/amdgpu: avoid using null object of framebuffer
| * f95ed0f5 drm/nouveau/dispnv04: fix null pointer dereference in nv17_tv_get_ld_modes
| * 948dc69f hexagon: fix fadvise64_64 calling conventions
| * 0f922755 csky, hexagon: fix broken sys_sync_file_range
| * 87936f51 btrfs: zoned: fix initial free space detection
| * 41dd6b0e sh: rework sync_file_range ABI
| * bf3c44f6 kbuild: Install dtb files as 0644 in Makefile.dtbinst
| * 84394f35 irqchip/loongson-liointc: Set different ISRs for different cores
| * 71af0f2f cpu/hotplug: Fix dynstate assignment in __cpuhp_setup_state_cpuslocked()
| * e0560219 cpufreq: intel_pstate: Use HWP to initialize ITMT if CPPC is missing
| * 26b18dd3 net: can: j1939: enhanced error handling for tightly received RTS messages in xtp_rx_rts_session_new
| * 4ff69789 net: can: j1939: recover socket queue on CAN bus error during BAM transmission
| * f97cbce6 net: can: j1939: Initialize unused data in j1939_send_one()
| * a44aedd5 tty: mcf: MCF54418 has 10 UARTS
| * 94307bc3 ALSA: hda/realtek: fix mute/micmute LEDs don't work for EliteBook 645/665 G11.
| * e97ef9a3 serial: imx: set receiver level before starting uart
| * 98840e41 serial: 8250_omap: Implementation of Errata i2310
| * a47407ae usb: ucsi: stm32: fix command completion handling
| * a11b7162 usb: gadget: aspeed_udc: fix device address configuration
| * d77e2b51 usb: dwc3: core: remove lock of otg mode during gadget suspend/resume to avoid deadlock
| * 5584c776 usb: atm: cxacru: fix endpoint checking in cxacru_bind()
| * 7afa50ce usb: musb: da8xx: fix a resource leak in probe()
| * e9835f39 usb: gadget: printer: fix races against disable
| * e48b92ed usb: gadget: printer: SS+ support
| * a59d8437 net: usb: ax88179_178a: improve link status logs
| * d441ad2a iio: chemical: bme680: Fix sensor data read operation
| * ba1bb3e2 iio: chemical: bme680: Fix overflows in compensate() functions
| * 94f303ed iio: chemical: bme680: Fix calibration data variable
| * 4decfc47 iio: chemical: bme680: Fix pressure value output
| * 90d4d02b iio: accel: fxls8962af: select IIO_BUFFER & IIO_KFIFO_BUF
| * df188072 iio: adc: ad7266: Fix variable checking bug
| * 274239d9 i2c: testunit: discard write requests while old command is running
| * 86826b1f i2c: testunit: don't erase registers after STOP
| * 8cfb468a counter: ti-eqep: enable clock at probe
| * 70516c5f iio: xilinx-ams: Don't include ams_ctrl_channels in scan_mask
| * f8ec1677 mmc: sdhci: Do not lock spinlock around mmc_gpio_get_ro()
| * 2f3555c2 mmc: sdhci: Do not invert write-protect twice
| * dca15c18 mmc: sdhci-pci: Convert PCIBIOS_* return codes to errnos
| * 81027f81 mmc: sdhci-brcmstb: check R1_STATUS for erase/trim/discard
| * ea6beb81 nfs: drop the incorrect assertion in nfs_swap_rw()
| * 9ea2d1c6 ocfs2: fix DIO failure due to insufficient transaction credits
| * a4f9251e pinctrl: qcom: spmi-gpio: drop broken pm8008 support
| * ceabd79f Revert "MIPS: pci: lantiq: restore reset gpio polarity"
| * 3ae15c02 parisc: use generic sys_fanotify_mark implementation
| * 161cef81 x86: stop playing stack games in profile_pc()
| * 7fb37498 ima: Fix use-after-free on a dentry's dname.name
| * b7931771 randomize_kstack: Remove non-functional per-arch entropy filtering
| * 31594c5a gpiolib: cdev: Disallow reconfiguration without direction (uAPI v1)
| * c3b42574 riscv: stacktrace: convert arch_stack_walk() to noinstr
| * 09f64e7a drm/amdgpu: Fix pci state save during mode-1 reset
| * 87a2448e drm/amd/amdgpu: Fix style errors in amdgpu_drv.c & amdgpu_device.c
| * 89d7008a gpio: davinci: Validate the obtained number of IRQs
| * c717cef1 drm/panel: simple: Add missing display timing flags for KOE TX26D202VM0BWA
| * d8e27666 nvme: fixup comment for nvme RDMA Provider Type
| * b719f2bc drm/radeon/radeon_display: Decrease the size of allocated memory
| * 9e424deb soc: ti: wkup_m3_ipc: Send NULL dummy message instead of pointer message
| * 06c53310 media: dvbdev: Initialize sbuf
| * d0ff2443 ALSA: emux: improve patch ioctl data validation
| * fd7ef325 crypto: ecdh - explicitly zeroize private_key
| * 48147337 net/dpaa2: Avoid explicit cpumask var allocation on stack
| * d85ca817 net/iucv: Avoid explicit cpumask var allocation on stack
| * 782bdaf9 RDMA/restrack: Fix potential invalid address access
| * b30f3197 bpf: Mark bpf prog stack with kmsan_unposion_memory in interpreter mode
| * 5bcb9cf6 bpf: Add a check for struct bpf_fib_lookup size
| * cc33a7a2 wifi: ieee80211: check for NULL in ieee80211_mle_size_ok()
| * 08193826 mtd: partitions: redboot: Added conversion of operands to a larger type
| * ed1fa6d6 x86/fpu: Fix AMD X86_BUG_FXSAVE_LEAK fixup
| * 7d18ab6e vduse: Temporarily fail if control queue feature requested
| * d99a4e14 vduse: validate block features only with block devices
| * 5f414012 drm/panel: ilitek-ili9881c: Fix warning with GPIO controllers that sleep
| * e4f602e3 bpf: Take return from set_memory_ro() into account with bpf_prog_lock_ro()
| * efb27ad0 netfilter: nf_tables: fully validate NFT_DATA_VALUE on store to data registers
| * 736c74dc tcp: fix tcp_rcv_fastopen_synack() to enter TCP_CA_Loss for failed TFO
| * 853c0387 powerpc: restore some missing spu syscalls
| * 2eb9a4bc parisc: use correct compat recv/recvfrom syscalls
| * ef03810c sparc: fix compat recv/recvfrom syscalls
| * 04c12712 sparc: fix old compat_sys_select()
| * f75c21bf net: dsa: microchip: fix wrong register write when masking interrupt
| * c14f3c37 Fix race for duplicate reqsk on identical SYN
| * 4e0c539e xdp: Remove WARN() from __xdp_reg_mem_model()
| * 75fabdc9 net: dsa: microchip: use collision based back pressure mode
| * aecaaf8a net: phy: micrel: add Microchip KSZ 9477 to the device table
| * 5516c9ee ibmvnic: Free any outstanding tx skbs during scrq reset
| * d1b9df04 bpf: Fix overrunning reservations in ringbuf
| * bfa86a96 mlxsw: spectrum_buffers: Fix memory corruptions on Spectrum-4 systems
| * 2dfaf2c4 net: dsa: microchip: fix initial port flush problem
| * 8faf91e5 ASoC: fsl-asoc-card: set priv->pdev before using it
| * 20f19c91 ASoC: amd: acp: remove i2s configuration check in acp_i2s_probe()
| * d9912994 s390/pci: Add missing virt_to_phys() for directed DIBV
| * 87358401 ASoC: rockchip: i2s-tdm: Fix trcm mode by setting clock on right mclk
| * b45176b8 netfilter: nf_tables: use timestamp to check for set element timeout
| * 7491c3c5 dt-bindings: i2c: atmel,at91sam: correct path to i2c-controller schema
| * 58d65ce9 dt-bindings: i2c: Drop unneeded quotes
| * 777f3c99 MIPS: pci: lantiq: restore reset gpio polarity
| * ae7b2aa8 pinctrl: rockchip: fix pinmux reset in rockchip_pmx_set
| * 8a5859bb pinctrl: rockchip: use dedicated pinctrl type for RK3328
| * 6bed115e pinctrl: rockchip: fix pinmux bits for RK3328 GPIO3-B pins
| * 940ce6f2 pinctrl: rockchip: fix pinmux bits for RK3328 GPIO2-B pins
| * b36efd2e pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
| * 4312eace Input: ili210x - fix ili251x_read_touch_data() return value
| * b2f1ce6c ACPI: x86: Force StorageD3Enable on more products
| * c538c886 ACPI: x86: utils: Add Picasso to the list for forcing StorageD3Enable
| * 411e6aa9 usb: typec: ucsi: Ack also failed Get Error commands
| * 8cace39c usb: typec: ucsi: Never send a lone connector change ack
* | 47b24bf8 Revert "net/sched: fix false lockdep warning on qdisc root lock"
* | 0a6ad70f Revert "net/sched: unregister lockdep keys in qdisc_create/qdisc_alloc error path"
* | 325f5b8e Revert "tty: add the option to have a tty reject a new ldisc"
* | 7455bf54 Merge 6.1.96 into android14-6.1-lts
|\|
| * 99e6a620 Linux 6.1.96
| * 19526f54 Revert "mm: mmap: allow for the maximum number of bits for randomizing mmap_base by default"
| * 8a630e8a hid: asus: asus_report_fixup: fix potential read out of bounds
| * 48d3f91d net/sched: unregister lockdep keys in qdisc_create/qdisc_alloc error path
| * d04943bb drm/amd/display: revert Exit idle optimizations before HDCP execution
| * 5efe0b5d kheaders: explicitly define file modes for archived headers
| * f0b5d1d9 Revert "kheaders: substituting --sort in archive creation"
| * 8ab1361b x86/cpu: Fix x86_match_cpu() to match just X86_VENDOR_INTEL
| * b0727ed7 x86/cpu/vfm: Add new macros to work with (vendor/family/model) values
| * 6efd1d4b tracing: Add MODULE_DESCRIPTION() to preemptirq_delay_test
| * 8d5d123f pmdomain: ti-sci: Fix duplicate PD referrals
| * 95881ebd ARM: dts: samsung: smdk4412: fix keypad no-autorepeat
| * 7c1448ea ARM: dts: samsung: exynos4412-origen: fix keypad no-autorepeat
| * 2df48353 ARM: dts: samsung: smdkv310: fix keypad no-autorepeat
| * 8154edd6 perf script: Show also errors for --insn-trace option
| * 4bd6f883 perf: script: add raw|disasm arguments to --insn-trace option
| * 520f2892 spi: stm32: qspi: Clamp stm32_qspi_get_mode() output to CCR_BUSWIDTH_4
| * 56de6648 arm64: dts: imx8qm-mek: fix gpio number for reg_usdhc2_vmmc
| * 065494ad spi: stm32: qspi: Fix dual flash mode sanity test in stm32_qspi_setup()
| * fd6cfb11 dt-bindings: i2c: google,cros-ec-i2c-tunnel: correct path to i2c-controller schema
| * 92278b2d i2c: ocores: set IACK bit after core is enabled
| * 51897f99 mm/page_table_check: fix crash on ZONE_DEVICE
| * 6f7c39a6 tcp: clear tp->retrans_stamp in tcp_rcv_fastopen_synack()
| * 665e9326 mm: mmap: allow for the maximum number of bits for randomizing mmap_base by default
| * 4cb3b5bc kcov: don't lose track of remote references during softirqs
| * 9ad02301 gcov: add support for GCC 14
| * fc5cb952 drm/amdgpu: fix UBSAN warning in kv_dpm.c
| * f803532b drm/radeon: fix UBSAN warning in kv_dpm.c
| * 013e8f23 drm/i915/mso: using joiner is not possible with eDP MSO
| * 661882cf ALSA: hda/realtek: Limit mic boost on N14AP7
| * 72eed766 ALSA: hda/realtek: fix mute/micmute LEDs don't work for ProBook 445/465 G11.
| * 9e6e37d9 KVM: x86: Always sync PIR to IRR prior to scanning I/O APIC routes
| * 68df4fc4 KVM: arm64: Disassociate vcpus from redistributor region on teardown
| * 92c77807 KVM: Fix a data race on last_boosted_vcpu in kvm_vcpu_on_spin()
| * b95fce86 cifs: fix typo in module parameter enable_gcm_256
| * 15cb476c btrfs: retry block group reclaim without infinite loop
| * 893eeba9 net: do not leave a dangling sk pointer, when socket creation fails
| * 44f52143 net: usb: ax88179_178a: improve reset check
| * dda369a7 net: stmmac: Assign configured channel value to EXTTS event
| * d8abba1e MIPS: dts: bcm63268: Add missing properties to the TWD node
| * 27033125 kbuild: Remove support for Clang's ThinLTO caching
| * 99958641 RDMA/mlx5: Add check for srq max_sge attribute
| * a331f275 firmware: psci: Fix return value from psci_system_suspend()
| * ddc1f5f1 ACPICA: Revert "ACPICA: avoid Info: mapping multiple BARs. Your kernel is fine."
| * 87d2639f arm64: dts: freescale: imx8mm-verdin: enable hysteresis on slow input pin
| * 97af5de2 arm64: dts: imx93-11x11-evk: Remove the 'no-sdio' property
| * 474a1661 regulator: bd71815: fix ramp values
| * 6136f19e dmaengine: ioatdma: Fix missing kmem_cache_destroy()
| * 6a104377 dmaengine: ioatdma: Fix kmemleak in ioat_pci_probe()
| * 98b35b2b dmaengine: ioatdma: Fix error path in ioat3_dma_probe()
| * d7f4e58f dmaengine: ioat: use PCI core macros for PCIe Capability
| * 98d79caf dmaengine: ioatdma: Fix leaking on version mismatch
| * 95dc59ba dmaengine: ioat: Drop redundant pci_enable_pcie_error_reporting()
| * 83163667 dmaengine: idxd: Fix possible Use-After-Free in irq_process_work_list
| * 1bd1857f regulator: core: Fix modpost error "regulator_get_regmap" undefined
| * 1803875f net: usb: rtl8150 fix unintiatilzed variables in rtl8150_get_link_ksettings
| * e214f102 bnxt_en: Restore PTP tx_avail count in case of skb_pad() error
| * dd37b869 ice: Fix VSI list rule with ICE_SW_LKUP_LAST type
| * ec4d970b seg6: fix parameter passing when calling NF_HOOK() in End.DX4 and End.DX6 behaviors
| * 788d585e netfilter: ipset: Fix suspicious rcu_dereference_protected()
| * 49780570 octeontx2-pf: Add error handling to VLAN unoffload handling
| * 04619db3 virtio_net: checksum offloading handling fix
| * 521d42a1 net: stmmac: No need to calculate speed divider when offload is disabled
| * d50d62d5 ptp: fix integer overflow in max_vclocks_store
| * 2f82f75f sched: act_ct: add netns into the key of tcf_ct_flow_table
| * 623c90d8 tipc: force a dst refcount before doing decryption
| * 6fc78d67 net/sched: act_api: fix possible infinite loop in tcf_idr_check_alloc()
| * 668be2b6 net/sched: act_api: rely on rcu in tcf_idr_check_alloc
| * 5bd1b7ab net: phy: mxl-gpy: Remove interrupt mask clearing from config_init
| * 70993aca net: phy: mxl-gpy: enhance delay time required by loopback disable function
| * 7d0606bd net: lan743x: Support WOL at both the PHY and MAC appropriately
| * 2af9aa9a net: lan743x: disable WOL upon resume to restore full data path operation
| * e2ec0717 qca_spi: Make interrupt remembering atomic
| * 1b631bff netns: Make get_net_ns() handle zero refcount net
| * 83c02fb2 xfrm6: check ip6_dst_idev() return value in xfrm6_get_saddr()
| * 51ee2f7c ipv6: prevent possible NULL dereference in rt6_probe()
| * 88b9a55e ipv6: prevent possible NULL deref in fib6_nh_init()
| * a02fd5d7 netrom: Fix a memory leak in nr_heartbeat_expiry()
| * eb1bde62 ALSA: hda/realtek: Enable headset mic on IdeaPad 330-17IKB 81DM
| * dacc15e9 bpf: Avoid splat in pskb_pull_reason
| * 7dabc4b4 cipso: fix total option length computation
| * 224b69e8 ice: avoid IRQ collision to fix init failure on ACPI S3 resume
| * 531d85b4 ice: move RDMA init to ice_idc.c
| * 7de448db ALSA/hda: intel-dsp-config: Document AVS as dsp_driver option
| * 71b027d3 ALSA: hda/realtek: Remove Framework Laptop 16 from quirks
| * 32ef4dc2 tracing: Build event generation tests only as modules
| * 6c0f6ccd mips: bmips: BCM6358: make sure CBR is correctly set
| * a6061f60 MIPS: Routerboard 532: Fix vendor retry check code
| * 3c6332f3 tty: add the option to have a tty reject a new ldisc
| * 6466b919 usb: gadget: function: Remove usage of the deprecated ida_simple_xx() API
| * 3b3655a1 serial: exar: adding missing CTI and Exar PCI ids
| * 7f9e70c6 serial: imx: Introduce timeout when waiting on transmitter empty
| * d996deb8 MIPS: Octeon: Add PCIe link status check
| * 70196fea PCI/PM: Avoid D3cold for HP Pavilion 17 PC/1972 PCIe Ports
| * 29dfe9e8 udf: udftime: prevent overflow in udf_disk_stamp_to_time()
| * 69170a88 usb: dwc3: pci: Don't set "linux,phy_charger_detect" property on Lenovo Yoga Tab2 1380
| * dd425700 Avoid hw_desc array overrun in dw-axi-dmac
| * 8fc246a8 usb: misc: uss720: check for incompatible versions of the Belkin F5U002
| * a9cea048 f2fs: remove clear SB_INLINECRYPT flag in default_options
| * 8092775c iommu/arm-smmu-v3: Free MSIs in case of ENOMEM
| * 10c19cf7 power: supply: cros_usbpd: provide ID table for avoiding fallback match
| * 5cb3339b platform/x86: p2sb: Don't init until unassigned resources have been assigned
| * 7bbcd3b1 powerpc/io: Avoid clang null pointer arithmetic warnings
| * 8aa11aa0 powerpc/pseries: Enforce hcall result buffer validity and size
| * cf56640e ALSA: hda/realtek: Add quirks for Lenovo 13X
| * 9fd8ddd2 drm/lima: mask irqs in timeout path before hard reset
| * 394d6606 drm/lima: add mask irq callback to gp and pp
| * 4cd1360c ASoC: Intel: sof_sdw: add JD2 quirk for HP Omen 14
| * 6239d65b platform/x86: toshiba_acpi: Add quirk for buttons on Z830
| * fc1f0309 drm/amd/display: Exit idle optimizations before HDCP execution
| * be4a1fc8 Bluetooth: ath3k: Fix multiple issues reported by checkpatch.pl
| * aa2fb9c5 HID: asus: fix more n-key report descriptors if n-key quirked
| * 5368c463 HID: Add quirk for Logitech Casa touchpad
| * 0b81faa0 wifi: mt76: mt7921s: fix potential hung tasks during chip recovery
| * 96826b16 netpoll: Fix race condition in netpoll_owner_active
| * e8fc7647 net: dsa: realtek: keep default LED state in rtl8366rb
| * d927fae2 kselftest: arm64: Add a null pointer check
| * 048b3381 net/sched: fix false lockdep warning on qdisc root lock
| * eaddb866 scsi: qedi: Fix crash while reading debugfs attribute
| * f251ccef drop_monitor: replace spin_lock by raw_spin_lock
| * 63310043 af_packet: avoid a false positive warning in packet_setsockopt()
| * 2e48d735 wifi: ath9k: work around memset overflow warning
| * fed79148 batman-adv: bypass empty buckets in batadv_purge_orig_ref()
| * 63f2d537 selftests/bpf: Fix flaky test btf_map_in_map/lookup_update
| * fb9088a7 selftests/bpf: Prevent client connect before server bind in test_tc_tunnel.sh
| * 61ec76ec block/ioctl: prefer different overflow check
| * cf9b1652 rcutorture: Fix invalid context warning when enable srcu barrier testing
| * dbd4175e rcutorture: Make stall-tasks directly exit when rcutorture tests end
| * 9bc282fb rcutorture: Fix rcu_torture_one_read() pipe_count overflow comment
| * 55c22375 io_uring/sqpoll: work around a potential audit memory leak
| * 7c42ce55 crypto: hisilicon/sec - Fix memory leak for sec resource release
| * 4925da08 padata: Disable BH when taking works lock on MT path
* | cb7d32c2 Merge aosp/android14-6.1 to aosp/android14-6.1-lts
* | 6f4a686a Revert "i2c: add fwnode APIs"
* | efbc7c75 Revert "i2c: acpi: Unbind mux adapters before delete"
* | ced50587 Merge 6.1.95 into android14-6.1-lts
|\|
| * a6398e37 Linux 6.1.95
| * edd2754a zap_pid_ns_processes: clear TIF_NOTIFY_SIGNAL along with TIF_SIGPENDING
| * e44999ec i2c: designware: Fix the functionality flags of the slave-only interface
| * 1a0bbb90 i2c: at91: Fix the functionality flags of the slave-only interface
| * ea25a4c0 misc: microchip: pci1xxxx: Fix a memory leak in the error handling of gp_aux_bus_probe()
| * e0e2eec7 usb-storage: alauda: Check whether the media is initialized
| * ae917519 serial: core: Add UPIO_UNKNOWN constant for unknown port type
| * 29d35f0b serial: 8250_dw: fall back to poll if there's no interrupt
| * 9a733d69 greybus: Fix use-after-free bug in gb_interface_release due to race condition.
| * 12a4a28e Bluetooth: qca: generalise device address check
| * 47988653 Bluetooth: qca: fix wcn3991 device address check
| * 9afc658c cachefiles, erofs: Fix NULL deref in when cachefiles is not doing ondemand-mode
| * 4733dea7 remoteproc: k3-r5: Jump to error handling labels in start/stop errors
| * 04b0c419 Revert "fork: defer linking file vma until vma is fully initialized"
| * 35e39537 mptcp: pm: update add_addr counters after connect
| * 51861fc0 serial: 8250_pxa: Configure tx_loadsz to match FIFO IRQ level
| * 00b0752c mm/memory-failure: fix handling of dissolved but not taken off from buddy pages
| * b2494506 mm/huge_memory: don't unpoison huge_zero_folio
| * 2641261b tick/nohz_full: Don't abuse smp_call_function_single() in tick_setup_device()
| * 271dcd97 nilfs2: fix potential kernel bug due to lack of writeback flag waiting
| * 17765964 btrfs: zoned: fix use-after-free due to race with dev replace
| * babfd2d0 btrfs: zoned: factor out DUP bg handling from btrfs_load_block_group_zone_info
| * 43a89d48 btrfs: zoned: factor out single bg handling from btrfs_load_block_group_zone_info
| * 7fd274c0 btrfs: zoned: factor out per-zone logic from btrfs_load_block_group_zone_info
| * c60f0a44 btrfs: zoned: introduce a zone_info struct in btrfs_load_block_group_zone_info
| * d2fa51eb intel_th: pci: Add Lunar Lake support
| * 5b64a368 intel_th: pci: Add Meteor Lake-S support
| * a1fb1bd6 intel_th: pci: Add Sapphire Rapids SOC support
| * b7b6bc60 intel_th: pci: Add Granite Rapids SOC support
| * bb8b9d91 intel_th: pci: Add Granite Rapids support
| * 32728014 drm/i915/dpt: Make DPT object unshrinkable
| * d205e302 drm/i915/gt: Disarm breadcrumbs if engines are already idle
| * 919f8626 riscv: rewrite __kernel_map_pages() to fix sleeping in invalid context
| * dd5042ee remoteproc: k3-r5: Do not allow core1 to power up before core0 via sysfs
| * 2a1ec20b remoteproc: k3-r5: Wait for core0 power-up before powering up core1
| * f6a426a0 dmaengine: axi-dmac: fix possible race in remove()
| * eab9d5a8 PCI: rockchip-ep: Remove wrong mask on subsys_vendor_id
| * ea042dc2 ocfs2: fix races between hole punching and AIO+DIO
| * a2e8105e ocfs2: use coarse time for new created files
| * a373ad83 fs/proc: fix softlockup in __read_vmcore
| * 06bea44b knfsd: LOOKUP can return an illegal error value
| * bbce9fb5 spmi: hisi-spmi-controller: Do not override device identifier
| * 95bac1c8 vmci: prevent speculation leaks by sanitizing event in event_deliver()
| * 5eabdf17 sock_map: avoid race between sock_map_close and sk_psock_put
| * ae080302 null_blk: Print correct max open zones limit in null_init_zoned_dev()
| * e2585bc1 tracing/selftests: Fix kprobe event name test for .isra. functions
| * 6625417d riscv: fix overlap of allocated page and PTR_ERR
| * c81705d6 perf/core: Fix missing wakeup when waiting for context reference
| * 355784a5 x86/amd_nb: Check for invalid SMN reads
| * 2458f236 irqchip/gic-v3-its: Fix potential race condition in its_vlpi_prop_update()
| * 9dc3200a mptcp: pm: inc RmAddr MIB counter once per RM_ADDR ID
| * f03c46ea mptcp: ensure snd_una is properly initialized on connect
| * c3ca24df drm/exynos: hdmi: report safe 640x480 mode as a fallback when no EDID found
| * dcba6bed drm/exynos/vidi: fix memory leak in .get_modes()
| * 08891eea drivers: core: synchronize really_probe() and dev_uevent()
| * cc09e1d3 iio: imu: inv_icm42600: delete unneeded update watermark call
| * 1b82cc86 iio: dac: ad5592r: fix temperature channel scaling value
| * f35eb2c4 iio: adc: ad9467: fix scan type sign
| * b9da7e96 x86/boot: Don't add the EFI stub to targets, again
| * 34ae447b misc: microchip: pci1xxxx: fix double free in the error handling of gp_aux_bus_probe()
| * cde177fa bnxt_en: Adjust logging of firmware messages in case of released token in __hwrm_send()
| * e9c6513c af_unix: Read with MSG_PEEK loops if the first unread byte is OOB
| * 60cd7148 ionic: fix use after netif_napi_del()
| * caaa2129 net: bridge: mst: fix suspicious rcu usage in br_mst_set_state
| * 09f4337c net: bridge: mst: pass vlan group directly to br_mst_vlan_set_state
| * cd68f849 net/ipv6: Fix the RT cache flush via sysctl using a previous delay
| * 5872043b nvmet-passthru: propagate status from id override functions
| * a6ea39fd net: stmmac: replace priv->speed with the portTransmitRate from the tc-cbs parameters
| * c495ebe9 gve: ignore nonrelevant GSO type bits when processing TSO headers
| * 950217d9 net: pse-pd: Use EOPNOTSUPP error code instead of ENOTSUPP
| * 390b353d netfilter: ipset: Fix race between namespace cleanup and gc in the list:set type
| * 4431d374 Bluetooth: L2CAP: Fix rejecting L2CAP_CONN_PARAM_UPDATE_REQ
| * 0f99dc35 net/mlx5e: Fix features validation check for tunneled UDP (non-VXLAN) packets
| * 11f1f0c4 geneve: Fix incorrect inner network header offset when innerprotoinherit is set
| * 0b160b12 tcp: fix race in tcp_v6_syn_recv_sock()
| * c8879a39 drm/bridge/panel: Fix runtime warning on panel bridge release
| * 3b1cf943 drm/komeda: check for error-valued pointer
| * f1ab15a0 liquidio: Adjust a NULL pointer handling path in lio_vf_rep_copy_packet
| * f2583f81 net: hns3: add cond_resched() to hns3 ring buffer init process
| * 6d0007f7 net: hns3: fix kernel crash problem in concurrent scenario
| * 84a0d868 net: sfp: Always call `sfp_sm_mod_remove()` on remove
| * 2b7be0eb drm/vmwgfx: Remove STDU logic from generic mode_valid function
| * b1aae9c5 drm/vmwgfx: 3D disabled should not effect STDU memory limits
| * b7479b39 drm/vmwgfx: Filter modes which exceed graphics memory
| * 862bd36d drm/vmwgfx: Refactor drm connector probing for display modes
| * 67adcfae drm/vmwgfx: Port the framebuffer code to drm fb helpers
| * 789c99a1 HID: logitech-dj: Fix memory leak in logi_dj_recv_switch_to_dj_mode()
| * f2af9dba iommu/amd: Fix sysfs leak in iommu init
| * bfd546fc HID: core: remove unnecessary WARN_ON() in implement()
| * 2df8c16e gpio: tqmx86: fix broken IRQ_TYPE_EDGE_BOTH interrupt type
| * 4ada932c gpio: tqmx86: store IRQ trigger type and unmask status separately
| * 0f6b55f9 gpio: tqmx86: Convert to immutable irq_chip
| * 8c2e28a2 gpio: tqmx86: introduce shadow register for GPIO output value
| * a09c3dbe gpio: tqmx86: remove unneeded call to platform_set_drvdata()
| * 82004405 gpio: tqmx86: fix typo in Kconfig label
| * 3150d4e4 platform/x86: dell-smbios: Fix wrong token data in sysfs
| * 0abb51ac NFS: add barriers when testing for NFS_FSDATA_BLOCKED
| * 3cde566d SUNRPC: return proper error from gss_wrap_req_priv
| * e6ddef11 NFSv4.1 enforce rootpath check in fs_location query
| * 81fce119 clk: sifive: Do not register clkdevs for PRCI clocks
| * fcb4ce61 selftests/ftrace: Fix to check required event file
| * 320ba9cb cachefiles: flush all requests after setting CACHEFILES_DEAD
| * eac51d9d cachefiles: defer exposing anon_fd until after copy_to_user() succeeds
| * 1fd5f317 cachefiles: never get a new anonymous fd if ondemand_id is valid
| * bb00aef6 cachefiles: remove err_put_fd label in cachefiles_ondemand_daemon_read()
| * cb55625f cachefiles: fix slab-use-after-free in cachefiles_ondemand_daemon_read()
| * 99e9c5bd cachefiles: fix slab-use-after-free in cachefiles_ondemand_get_fd()
| * a0cc87f8 cachefiles: add restore command to recover inflight ondemand read requests
| * 5344f2ab cachefiles: add spin_lock for cachefiles_ondemand_info
| * f17443d5 cachefiles: resend an open request if the read request's object is closed
| * bb512c85 cachefiles: extract ondemand info field from cachefiles_object
| * e43fb9a2 cachefiles: introduce object ondemand state
| * 9f13aacd cachefiles: remove requests from xarray during flushing requests
| * dad92526 cachefiles: add output string to cachefiles_obj_[get|put]_ondemand_fd
| * bee55952 cxl/test: Add missing vmalloc.h for tools/testing/cxl/test/mem.c
| * 6dfa1d80 Input: try trimming too long modalias strings
| * ce1afd73 powerpc/uaccess: Fix build errors seen with GCC 13/14
| * d2212849 gve: Clear napi->skb before dev_kfree_skb_any()
| * d19254d8 scsi: sd: Use READ(16) when reading block zero on large capacity disks
| * 46bab2bc scsi: mpt3sas: Avoid test/set_bit() operating in non-allocated memory
| * a9624afc scsi: mpi3mr: Fix ATA NCQ priority support
| * a136698d thunderbolt: debugfs: Fix margin debugfs node creation condition
| * 0daacb57 xhci: Apply broken streams quirk to Etron EJ188 xHCI host
| * 633f72cb xhci: Handle TD clearing for multiple streams case
| * 0a1c2a58 xhci: Apply reset resume quirk to Etron EJ188 xHCI host
| * f6559d28 xhci: Set correct transferred length for cancelled bulk transfers
| * 33aecc57 jfs: xattr: fix buffer overflow for invalid xattr
| * b6e5e696 landlock: Fix d_parent walk
| * 03f916e5 tty: n_tty: Fix buffer offsets when lookahead is used
| * 185a1b1f mei: me: release irq in mei_me_pci_resume error path
| * 2ad7e02c usb: typec: tcpm: Ignore received Hard Reset in TOGGLING state
| * 40536965 usb: typec: tcpm: fix use-after-free case in tcpm_register_source_caps
| * fb9f366a USB: xen-hcd: Traverse host/ when CONFIG_USB_XEN_HCD is selected
| * 02a4c049 USB: class: cdc-wdm: Fix CPU lockup caused by excessive log messages
| * c2844d5e io_uring: check for non-NULL file pointer in io_file_can_poll()
| * 129dcd3e nilfs2: fix nilfs_empty_dir() misjudgment and long loop on I/O errors
| * ea2ac923 nilfs2: return the mapped address from nilfs_get_page()
| * 8b0d6d18 btrfs: fix leak of qgroup extent records after transaction abort
| * b1a5d3f7 btrfs: make btrfs_destroy_delayed_refs() return void
| * 95e69b16 btrfs: remove unnecessary prototype declarations at disk-io.c
| * be70a6c5 wifi: ath10k: fix QCOM_RPROC_COMMON dependency
| * 46a072e0 selftests/mm: compaction_test: fix bogus test success on Aarch64
| * 264b8a7e selftests/mm: log a consistent test name for check_compaction
| * 5ba39134 selftests/mm: conform test to TAP format output
| * 499fd1db selftests/mm: compaction_test: fix incorrect write of zero to nr_hugepages
| * 198a8083 mm/vmalloc: fix vmalloc which may return null if called with __GFP_NOFAIL
| * fe5c2bdc mm, vmalloc: fix high order __GFP_NOFAIL allocations
| * b1574c8c i2c: acpi: Unbind mux adapters before delete
| * ef1e9b62 i2c: add fwnode APIs
| * c0cd2d88 HID: i2c-hid: elan: fix reset suspend current leakage
| * 274ecd40 HID: i2c-hid: elan: Add ili9882t timing
| * 0fce1c95 firmware: qcom_scm: disable clocks if qcom_scm_bw_enable() fails
| * 5ee241f7 mmc: davinci: Don't strip remove function when driver is builtin
| * c3d39fdc serial: sc16is7xx: fix bug in sc16is7xx_set_baud() when using prescaler
| * aeb2b22e serial: sc16is7xx: replace hardcoded divisor value with BIT() macro
| * c0b8f491 misc/pvpanic-pci: register attributes via pci_driver
| * 96826e74 misc/pvpanic: deduplicate common code
| * 1529c86d arm64: dts: qcom: sa8155p-adp: fix SDHC2 CD pin configuration
| * eedbb969 arm64: dts: qcom: sm8150: align TLMM pin configuration with DT schema
| * a869a9b6 drm/amd/display: Fix incorrect DSC instance for MST
| * ed82dc58 drm/amd/display: drop unnecessary NULL checks in debugfs
| * b6621895 xtensa: fix MAKE_PC_FROM_RA second argument
| * eccf114a xtensa: stacktrace: include <asm/ftrace.h> for prototype
| * 5253a35e iio: accel: mxc4005: Reset chip on probe() and resume()
| * 02db5953 iio: accel: mxc4005: allow module autoloading via OF compatible
| * a0fdccb1 usb: gadget: f_fs: Fix race between aio_cancel() and AIO request complete
| * b55bc525 usb: gadget: f_fs: use io_data->status consistently
| * e8b85823 btrfs: fix wrong block_start calculation for btrfs_drop_extent_map_range()
| * b45cfd9b Bluetooth: qca: fix invalid device address check
| * 2498960d ipv6: fix possible race in __fib6_drop_pcpu_from()
| * 6b9ff162 af_unix: Annotate data-race of sk->sk_shutdown in sk_diag_fill().
| * 4a967bac af_unix: Use skb_queue_len_lockless() in sk_diag_show_rqlen().
| * e3f2599e af_unix: Use skb_queue_empty_lockless() in unix_release_sock().
| * 4c64c3e2 af_unix: annotate lockless accesses to sk->sk_err
| * f5c42766 af_unix: Use unix_recvq_full_lockless() in unix_stream_connect().
| * 8b29fcd7 af_unix: Annotate data-race of net->unx.sysctl_max_dgram_qlen.
| * 19425cfe af_unix: Annotate data-races around sk->sk_state in UNIX_DIAG.
| * fda68a7d af_unix: Annotate data-race of sk->sk_state in unix_stream_read_skb().
| * f53cf044 af_unix: Annotate data-races around sk->sk_state in sendmsg() and recvmsg().
| * 018fc5d9 af_unix: Annotate data-race of sk->sk_state in unix_stream_connect().
| * 35bdc364 af_unix: Annotate data-races around sk->sk_state in unix_write_space() and poll().
| * a8814322 af_unix: Annotate data-race of sk->sk_state in unix_inq_len().
| * a59dc9cb af_unix: Annodate data-races around sk->sk_state for writers.
| * ca326055 af_unix: Set sk->sk_state under unix_state_lock() for truly disconencted peer.
| * fe394d59 net: wwan: iosm: Fix tainted pointer delete is case of region creation fail
| * a62c5054 ice: remove af_xdp_zc_qps bitmap
| * 447a5433 ice: remove null checks before devm_kfree() calls
| * a388961b ice: Introduce new parameters in ice_sched_node
| * 17ccdebe ice: fix iteration of TLVs in Preserved Fields Area
| * 952557eb ptp: Fix error message on failed pin verification
| * 0bf6cc96 net/sched: taprio: always validate TCA_TAPRIO_ATTR_PRIOMAP
| * 531eab2d net/mlx5: Fix tainted pointer delete is case of flow rules creation fail
| * e7d4485d net/mlx5: Always stop health timer during driver removal
| * 0819acb8 net/mlx5: Split function_setup() to enable and open functions
| * 0c42eef3 net/mlx5: Stop waiting for PCI if pci channel is offline
| * e4df7b53 net/mlx5: Stop waiting for PCI up if teardown was triggered
| * a2ab7dae tcp: count CLOSE-WAIT sockets for TCP_MIB_CURRESTAB
| * a31d0e5d vxlan: Fix regression when dropping packets due to invalid src addresses
| * 0f208fad net: sched: sch_multiq: fix possible OOB write in multiq_tune()
| * 1a0c20c0 net/smc: avoid overwriting when adjusting sock bufsizes
| * 87ef68f3 octeontx2-af: Always allocate PF entries from low prioriy zone
| * 3708b6c2 bpf: Set run context for rawtp test_run callback
| * a170d5a4 ipv6: sr: block BH in seg6_output_core() and seg6_input_core()
| * 9b3d1ba4 ipv6: ioam: block BH from ioam6_output()
| * 9bcdfdc6 net/ncsi: Fix the multi thread manner of NCSI driver
| * f2cd7e1b net/ncsi: Simplify Kconfig/dts control flow
| * e6ad2311 ax25: Replace kfree() in ax25_dev_free() with ax25_dev_put()
| * f4df9d6c ax25: Fix refcount imbalance on inbound connections
| * bd403f39 wifi: mac80211: correctly parse Spatial Reuse Parameter Set element
| * a8bc8276 wifi: iwlwifi: mvm: don't read past the mfuart notifcation
| * 9e719ae3 wifi: iwlwifi: mvm: check n_ssids before accessing the ssids
| * ca4c2307 wifi: iwlwifi: dbg_ini: move iwl_dbg_tlv_free outside of debugfs ifdef
| * 8014a7db wifi: iwlwifi: mvm: revert gen2 TX A-MPDU size to 64
| * a5c20830 wifi: cfg80211: pmsr: use correct nla_get_uX functions
| * 6d540b03 wifi: cfg80211: Lock wiphy in cfg80211_get_station
| * 96c950d6 wifi: cfg80211: fully move wiphy work to unbound workqueue
| * 9c49b58b wifi: mac80211: Fix deadlock in ieee80211_sta_ps_deliver_wakeup()
| * 617dadbf wifi: mac80211: mesh: Fix leak of mesh_preq_queue objects
* | c6bbb760 ANDROID: ABI fixup for abi break in struct dst_ops
* | 079775fd Merge 6.1.94 into android14-6.1-lts
|/
* eb44d830 Linux 6.1.94
* 6d6fe13c smp: Provide 'setup_max_cpus' definition on UP too
* b09b556e smb: client: fix deadlock in smb2_find_smb_tcon()
* 3174d8b7 powerpc/bpf: enforce full ordering for ATOMIC operations with BPF_FETCH
* 1ff2bd56 btrfs: fix crash on racing fsync and size-extending write into prealloc
* e601937b NFS: Fix READ_PLUS when server doesn't support OP_READ_PLUS
* a54419e6 nfs: fix undefined behavior in nfs_block_bits()
* 728b663f EDAC/igen6: Convert PCIBIOS_* return codes to errnos
* 4e060b30 i3c: master: svc: fix invalidate IBI type and miss call client IBI handler
* 07c8050f s390/cpacf: Make use of invalid opcode produce a link error
* 1d39dcff s390/cpacf: Split and rework cpacf query functions
* 8c5f5911 s390/ap: Fix crash in AP internal function modify_bitmap()
* ff19ea00 parisc: Define sigset_t in parisc uapi header
* bca17801 parisc: Define HAVE_ARCH_HUGETLB_UNMAPPED_AREA
* e941b712 ext4: fix mb_cache_entry's e_refcnt leak in ext4_xattr_block_cache_find()
* 16a392f6 ext4: set type of ac_groups_linear_remaining to __u32 to avoid overflow
* d47445b0 sparc: move struct termio to asm/termios.h
* 81dd3c82 net: fix __dst_negative_advice() race
* 10938be3 kdb: Use format-specifiers rather than memset() for padding in kdb_read()
* 60e2a14a kdb: Merge identical case statements in kdb_read()
* 0ec478e7 kdb: Fix console handling when editing and tab-completing commands
* b4e6a259 kdb: Use format-strings rather than '\0' injection in kdb_read()
* 33d9c814 kdb: Fix buffer overflow during tab-complete
* 6da1ffc4 watchdog: rti_wdt: Set min_hw_heartbeat_ms to accommodate a safety margin
* c7071d30 mm/hugetlb: pass correct order_per_bit to cma_declare_contiguous_nid
* 04b42782 mm/cma: drop incorrect alignment check in cma_init_reserved_mem
* 14a339e7 sparc64: Fix number of online CPUs
* 3ec82c9a intel_th: pci: Add Meteor Lake-S CPU support
* 82590ce3 cpufreq: amd-pstate: Fix the inconsistency in max frequency units
* 9ff078f5 kmsan: do not wipe out origin when doing partial unpoisoning
* ca71f204 net/9p: fix uninit-value in p9_client_rpc()
* 66840863 net/ipv6: Fix route deleting failure when metric equals 0
* 65bb86fb scsi: core: Handle devices which return an unusually large VPD page count
* 7a2bc8b3 mm: fix race between __split_huge_pmd_locked() and GUP-fast
* e7428e7e crypto: qat - Fix ADF_DEV_RESET_SYNC memory leak
* dd999fde crypto: ecrdsa - Fix module auto-load on add_key
* 458458c1 crypto: ecdsa - Fix module auto-load on add-key
* e0032f5c KVM: arm64: AArch32: Fix spurious trapping of conditional instructions
* 5b12ce0b KVM: arm64: Allow AArch32 PSTATE.M to be restored as System mode
* 4f902f03 KVM: arm64: Fix AArch32 register narrowing on userspace write
* 7da44257 drm/amd: Fix shutdown (again) on some SMU v13.0.4/11 platforms
* cb299cdb 9p: add missing locking around taking dentry fid list
* 97820893 drm/amdgpu/atomfirmware: add intergrated info v2.3 table
* edaa5748 fbdev: savage: Handle err return when savagefb_check_var failed
* 1a156761 mmc: sdhci-acpi: Add quirk to enable pull-up on the card-detect GPIO on Asus T100TA
* 4ac34dc6 mmc: sdhci-acpi: Disable write protect detection on Toshiba WT10-A
* 21109f13 mmc: sdhci-acpi: Fix Lenovo Yoga Tablet 2 Pro 1380 sdcard slot not working
* c2107d30 mmc: sdhci-acpi: Sort DMI quirks alphabetically
* 32b76505 mmc: sdhci: Add support for "Tuning Error" interrupts
* 36a28616 mmc: core: Add mmc_gpiod_set_cd_config() function
* 7170d0c0 media: v4l2-core: hold videodev_lock until dev reg, finishes
* 5d931a26 media: mxl5xx: Move xpt structures off stack
* 9ef7ee4c media: mc: mark the media devnode as registered from the, start
* 788fd0f1 media: mc: Fix graph walk in media_pipeline_start
* 9d180538 arm64: dts: hi3798cv200: fix the size of GICR
* 46fe2af4 wifi: rtlwifi: rtl8192de: Fix endianness issue in RX path
* 6973383a wifi: rtlwifi: rtl8192de: Fix low speed with WPA3-SAE
* 83daddb6 wifi: rtlwifi: rtl8192de: Fix 5 GHz TX power
* 2c13c9f6 wifi: rtl8xxxu: Fix the TX power of RTL8192CU, RTL8723AU
* c365394a wifi: rtw89: pci: correct TX resource checking for PCI DMA channel of firmware command
* 3f8d5e80 md/raid5: fix deadlock that raid5d() wait for itself to clear MD_SB_CHANGE_PENDING
* 3f099721 arm64: dts: qcom: qcs404: fix bluetooth device address
* 2eea8b44 arm64: tegra: Correct Tegra132 I2C alias
* ef2f4d60 ACPI: resource: Do IRQ override on TongFang GXxHRXx and GMxHGxx
* 3988a285 soc: qcom: rpmh-rsc: Enhance check for VRM in-flight request
* 560d69c9 thermal/drivers/qcom/lmh: Check for SCM availability at probe
* 5e0d41aa ata: pata_legacy: make legacy_exit() work again
* 336b8b2e wifi: rtw89: correct aSIFSTime for 6GHz band
* 934e1e43 bcache: fix variable length array abuse in btree_iter
* 011552f2 drm/amdgpu: add error handle to avoid out-of-bounds
* d082757b media: lgdt3306a: Add a check against null-pointer-def
* 8c8aa473 f2fs: fix to do sanity check on i_xattr_nid in sanity_check_inode()
* 376fad5e scripts/gdb: fix SB_* constants parsing
* 6bbd9c02 vxlan: Fix regression when dropping packets due to invalid src addresses
* 7a898d5e mptcp: fix full TCP keep-alive support
* dc62d53f mptcp: cleanup SOL_TCP handling
* e7d48faa mptcp: avoid some duplicate code in socket option handling
* 164320fc drm/i915/audio: Fix audio time stamp programming for DP
* 86a30d63 nilfs2: fix use-after-free of timer for log writer thread
* 79fc40a2 riscv: signal: handle syscall restart before get_signal
* bc20a0a2 afs: Don't cross .backup mountpoint from backup volume
* 26542625 mmc: core: Do not force a retune before RPMB switch
* 883e5d54 maple_tree: fix mas_empty_area_rev() null pointer dereference
* 34f30053 maple_tree: fix allocation in mas_sparse_area()
* cf0df435 Bluetooth: btrtl: Add missing MODULE_FIRMWARE declarations
* a17e06d7 drm: Check polling initialized before enabling in drm_helper_probe_single_connector_modes
* 4ad8d57d drm: Check output polling initialized before disabling

Change-Id: I849966e53c4a46d2ee81b3b6078f953a08502872
Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>