Merge android16-6.12 into android16-6.12-kminext

This merges the android16-6.12 branch into the -kminext branch, catching
it up with the latest changes in there.

Resolves merge conflicts in:
	include/drm/drm_framebuffer.h
	kernel/sched/debug.c
	kernel/sched/fair.c

* 3907c0eb ANDROID: rust_binder: Add newline to ref logging
* c57a491d ANDROID: Add document for kernel AutoFDO profile
* abdb3eb9 FROMGIT: binder: fix double-free in dbitmap
* 5e5cde58 BACKPORT: FROMGIT: KVM: arm64: Sync protected guest VBAR_EL1 on injecting an undef exception
* 9da964bb BACKPORT: FROMGIT: KVM: arm64: Handle AIDR_EL1 and REVIDR_EL1 in host for protected VMs
* a79d3484 ANDROID: kconfig: Enable option needed for MTK desktop
* e13e0acd ANDROID: kconfig: Add MTK_IRQ  dedicated for irq-mtk
* 8419b8c5 BACKPORT: FROMGIT: sched/deadline: Fix dl_server behaviour
* 741f2ff0 BACKPORT: FROMGIT: sched/deadline: Fix dl_server getting stuck
* 4871f692 UPSTREAM: sched/deadline: Fix RT task potential starvation when expiry time passed
* 43a9f831 BACKPORT: UPSTREAM: sched/deadline: Always stop dl-server before changing parameters
* 3a426846 UPSTREAM: sched/deadline: Fix dl_server_stopped()
* 849a7734 BACKPORT: UPSTREAM: sched/deadline: Less agressive dl_server handling
* 6235ea22 Revert "FROMGIT: sched/deadline: Less agressive dl_server handling"
* b71965ea BACKPORT: FROMGIT: f2fs: add reserved nodes for privileged users
* 707938a4 BACKPORT: fs/proc/task_mmu: read proc/pid/maps under per-vma lock
* 147b075c UPSTREAM: fs/proc/task_mmu: remove conversion of seq_file position to unsigned
* 73bcbf1e ANDROID: GKI: Update symbol list for Galaxy
* ecb87057 ANDROID: vendor_hooks: Add hooks for dmv
* 8671d1f1 FROMGIT: usb: udc: Add trace event for usb_gadget_set_state
* 749cf174 ANDROID: KVM: arm64: Check PGD alignment when creating a pVM
* c65cb1d6 BACKPORT: FROMGIT: selinux: enable per-file labeling for functionfs
* db12c0e7 FROMGIT: usb: dwc3: Refactor dwc3_mode_show
* d518b0bc FROMGIT: usb: dwc3: Add trace event for dwc3_set_prtcap
* c9cce7e7 UPSTREAM: selftests/bpf: Add test for open coded dmabuf_iter
* 5d4cc7dc UPSTREAM: selftests/bpf: Add test for dmabuf_iter
* 2948f9da UPSTREAM: bpf: Add open coded dmabuf iterator
* e6c89908 BACKPORT: bpf: Add dmabuf iterator
* 362dc181 BACKPORT: dma-buf: Rename debugfs symbols
* 72759659 UPSTREAM: bpf/selftests: test_select_reuseport_kern: Remove unused header
* a0439bfa ANDROID: ABI: Update pixel symbol list
* bdeefc1b ANDROID: relist android_vh_f2fs_printk and android_vh_f2fs_set_bio_flag symbols
* 465f76d7 ANDROID: vendor_hooks: Refactor f2fs_submit_folio_write and trace_android_vh_f2fs_printk hooks
* e194fc8e ANDROID: delist f2fs_submit_folio_write and android_vh_f2fs_printk symbols
* e5c38acc BACKPORT: FROMGIT: userfaultfd: opportunistic TLB-flush batching for present pages in MOVE
* 1c370e7d FROMGIT: usb: host: enable USB offload during system sleep
* 2c9c6119 FROMGIT: xhci: sideband: add api to trace sideband usage
* 11464453 BACKPORT: FROMGIT: usb: offload: add apis for offload usage tracking
* cbd122ab FROMGIT: usb: xhci-plat: separate dev_pm_ops for each pm_event
* 4cc80704 FROMGIT: scsi: ufs: core: Disable timestamp functionality if not supported
* b1a53aee ANDROID: rust_binder: set NodeDeath.dead=true when already dead
* 44d5627d ANDROID: ABI: Update pixel symbol list
* 1e46082d ANDROID: rust_binder: Enable and fix missing-prototypes errors
* 079b8b87 ANDROID: rust_binder: use dedicated build files
* 31fc378e UPSTREAM: vsock: Do not allow binding to VMADDR_PORT_ANY
* f3a4b4d4 ANDROID: KVM: arm64: size overflow checks for mem_protect HVCs
* 557d30a1 ANDROID: KVM: Fix ToCToU issue when admitting pages in memcache
* 33eb6bde ANDROID: KVM: Prevent memory sharing outside of the RAM regions
* 0dd5dcd6 ANDROID: iommu/arm-smmu-v3-kvm: Fix free_domain for VMs
* 6a615265 ANDROID: allow kunit symbol to be used by vendor modules
* c882e6ef ANDROID: GKI: update symbol list for xiaomi
* 71c3c86a ANDROID: module: Add vendor hooks
* 695893ef ANDROID: Enable CONFIG_ARM64_PSEUDO_NMI
* 8baa5302 UPSTREAM: mm: skip CMA pages when they are not available
* 38ccf546 ANDROID: ABI: Update honor symbol list
* 7f29b30f ANDROID: mm: Add vendor hook to bypass the delay in queue_oom_reaper
* caeb52b3 ANDROID: cgroup: Use backport reservation for freeze time
* 6cb12af2 FROMGIT: cgroup: Fix 64-bit division in cgroup.stat.local
* 4d45d195 BACKPORT: FROMGIT: cgroup: cgroup.stat.local time accounting
* 8dad1dda ANDROID: Update AutoFDO profile for 6.12.40
* ef71e857 ANDROID: gzvm: fix memleak in gzvm_ioeventfd
* 2282fc11 ANDROID: gzvm driver: fix UAF issue
* 9e3a0161 ANDROID: virt: geniezone: irqfd: fix memleak in srcu
* 78993dd6 ANDROID: add ddk headers to enable pKVM driver support
* 0668e45a ANDROID: iommu/arm-smmu-v3-kvm: Fix SID validation
* 0779e367 ANDROID: iommu/arm-smmu-v3-kvm: Fix pointer location error
* 514ebc78 ANDROID: GKI: update symbol list for galaxy
* e3be1878 ANDROID: mm: export delete_from_swap_cache for vendor module
* fe3859bd FROMGIT: f2fs: fix condition in __allow_reserved_blocks()
* 2f73efd7 ANDROID: iommu/arm-smmu-v3-kvm: Add support for reporting IOMMU faults to clients
* 1b664ac9 ANDROID: iommu/arm-smmu-v3-kvm: Add support for identifying SMMU masters from SIDs
* 7d6820ee ANDROID: Don't build 4k kernel when building 16k dist
* c13405a7 ANDROID: KVM: Fix error path of allocator topup
* 6d5091a7 ANDROID: refresh ABI, allow ABI break and fix up symbol CRCs
* e255bfe0 UPSTREAM: iio: Add channel type for attention
* 15806a23 ANDROID: GKI: Update symbol list for Amlogic
* 44dce0de FROMGIT: fs: create dedicated workqueue for quota_release_work
* 65d7fc64 ANDROID: GKI: refresh ABI and add allowed break
* c0fe83ef ANDROID: KVM: arm64: Add TRNG handling for protected guests
* 1ea73330 Revert "ANDROID: KVM: arm64: Remove DEBUG dependency to PKVM_STACKTRACE"
* 61f2d360 Revert "ANDROID: KVM: arm64: Always resolve nvhe BUGs file and line"
* bdba33dd Revert "ANDROID: Enable PKVM_STACKTRACE"
* d41d0584 ANDROID: KVM: arm64: Fix CPU type when reading trace_pdesc
* 1d46a7ce ANDROID: iommu: Fix error path for deferred map_sg
* c3591bab UPSTREAM: iio: hid-sensors: Add proximity and attention IDs
* 9a2a4b6d FROMLIST: KVM: Avoid synchronize_srcu() in kvm_io_bus_register_dev()
* 01e4ac39 Revert "FROMLIST: KVM: Avoid synchronize_srcu() in kvm_io_bus_register_dev()"
* 9bc9677b ANDROID: KVM: arm64: Reduce include dependencies of nvhe/iommu.h
* 3d97de67 UPSTREAM: xfrm: interface: fix use-after-free after changing collect_md xfrm interface
* 7471f5c0 ANDROID: binder: KMI-break workaround for binder_alloc
* ee25d80f UPSTREAM: binder: use per-vma lock in page reclaiming
* 251bbdfb BACKPORT: binder: propagate vm_insert_page() errors
* 397209d7 UPSTREAM: binder: use per-vma lock in page installation
* 1e0db6a0 UPSTREAM: binder: replace alloc->vma with alloc->mapped
* 1414bd7d BACKPORT: binder: store shrinker metadata under page->private
* 658b9fc0 BACKPORT: binder: concurrent page installation
* 3fb6436f BACKPORT: Revert "binder: switch alloc->mutex to spinlock_t"
* addb7a94 UPSTREAM: net/packet: fix a race in packet_set_ring() and packet_notifier()
* a54f6a76 ANDROID: binder: allow changing binder.impl during boot
* ad337532 ANDROID: Move SCX_OPS_DISABLING VH inside the scx_fork_rwsem section
* ca12b93f ANDROID: Fix error message for debug builds
* d9542e0a ANDROID: Fix build error in linker_ctx() when CONFIG_PER_VMA_LOCK=n
* 6904c560 UPSTREAM: mm: fix the race between collapse and PT_RECLAIM under per-vma lock
* d7023412 ANDROID: look up vma under RCU in linker_ctx()
* f90ba27e BACKPORT: mm: use per_vma lock for MADV_DONTNEED
* d16bae51 BACKPORT: mm/madvise: define and use madvise_behavior struct for madvise_do_behavior()
* afb28681 BACKPORT: mm/madvise: split out mmap locking operations for madvise()
* c5058bfb ANDROID: drm: fixup ABI break in struct drm_framebuffer
* 33c125be Reapply "drm/framebuffer: Acquire internal references on GEM handles"
* 8cf0645e ANDROID: drm: Fixup ABI break due to support_hdcp
* 30c11ac4 FROMGIT: drm_bridge: register content protect property
* 7a3066af UPSTREAM: blk-zoned: Split queue_zone_wplugs_show()
* dda5f406 UPSTREAM: blk-mq: Clean up blk_mq_requeue_work()
* 848f1374 UPSTREAM: block: fix blk_zone_append_update_request_bio() kernel-doc
* 6d5e6165 UPSTREAM: block: add trace messages to zone write plugging
* 257939f2 UPSTREAM: block: add tracepoint for blkdev_zone_mgmt
* 3a1f8568 ANDROID: define python library in BUILD for kunit parser
* 5731f24e BACKPORT: UPSTREAM: block: add tracepoint for blk_zone_update_request_bio
* 1d1be390 UPSTREAM: block: split blk_zone_update_request_bio into two functions
* 2d8ecb2d UPSTREAM: blktrace: add zoned block commands to blk_fill_rwbs
* 6e560a72 UPSTREAM: traceevent/block: Add REQ_ATOMIC flag to block trace events
* c79994b4 UPSTREAM: mq-deadline: Remove a local variable
* 3c19cbf4 UPSTREAM: block: Add a public bdev_zone_is_seq() helper
* 12aafa4b ANDROID: ufs: core: Minimize diffs with upstream
* f67a8c04 BACKPORT: FROMGIT: f2fs: show the list of donation files
* ea4956ef UPSTREAM: f2fs: fix to avoid UAF in f2fs_sync_inode_meta()
* 53e4390f ANDROID: GKI: Update symbol list for Amlogic
* a74c28e2 ANDROID: vendor_hooks: Add hooks for printk
* 4ae522d0 ANDROID: rust_binder: avoid cloning `DArc` in `find_from`
* 2e5a4bac Merge tag 'android16-6.12.40_r00' into android16-6.12
* c026dd5e Revert "sched: Change nr_uninterruptible type to unsigned long"
* c86c3f7b Revert "net: vlan: fix VLAN 0 refcount imbalance of toggling filtering during runtime"
*   a01a7c1e Merge 6.12.40 into android16-6.12-lts
|\
| * d90ecb2b Linux 6.12.40
| * fd627ac8 KVM: x86/xen: Fix cleanup logic in emulation of Xen schedop poll hypercalls
| * ff7ccaad iommu/vt-d: Fix misplaced domain_attached assignment
| * e82d8825 smb: client: let smbd_post_send_iter() respect the peers max_send_size and transmit all data
| * 11f430b8 drm/xe: Move page fault init after topology init
| * ce758532 drm/xe/mocs: Initialize MOCS index early
| * 8fc25d30 sched,freezer: Remove unnecessary warning in __thaw_task
| * 7258b437 i2c: omap: fix deprecated of_property_read_bool() use
| * f7017168 i2c: omap: Handle omap_i2c_init() errors in omap_i2c_probe()
| * ba35cc05 i2c: omap: Fix an error handling path in omap_i2c_probe()
| * c1a786fa i2c: omap: Add support for setting mux
| * 35fdf109 selftests/bpf: Set test path for token/obj_priv_implicit_token_envvar
| * d9ebd928 rust: use `#[used(compiler)]` to fix build and `modpost` with Rust >= 1.89.0
| * affb46db net: libwx: fix multicast packets received count
| * 75747e25 usb: dwc3: qcom: Don't leave BCR asserted
| * c45b48b4 usb: hub: Don't try to recover devices lost during warm reset.
| * bf71baa3 usb: hub: Fix flushing of delayed work used for post resume purposes
| * e1135964 usb: hub: Fix flushing and scheduling of delayed work that tunes runtime pm
| * aec11e5f usb: hub: fix detection of high tier USB3 devices behind suspended hubs
| * ee56da95 btrfs: fix block group refcount race in btrfs_create_pending_block_groups()
| * e77078e5 clone_private_mnt(): make sure that caller has CAP_SYS_ADMIN in the right userns
| * 7fc808d9 sched: Change nr_uninterruptible type to unsigned long
| * 816d3697 efivarfs: Fix memory leak of efivarfs_fs_info in fs_context error paths
| * 44e73241 libbpf: Fix handling of BPF arena relocations
| * f0de9702 drm/mediatek: only announce AFBC if really supported
| * 40b5b4ba drm/mediatek: Add wait_event_timeout when disabling plane
| * b04fb262 Revert "cgroup_freezer: cgroup_freezing: Check if not frozen"
| * d7c10987 rxrpc: Fix transmission of an abort in response to an abort
| * 839fe96c rxrpc: Fix recv-recv race of completed call
| * e5c480dc net/sched: Return NULL when htb_lookup_leaf encounters an empty rbtree
| * 71f435f8 net: bridge: Do not offload IGMP/MLD messages
| * 8984bcbd net: vlan: fix VLAN 0 refcount imbalance of toggling filtering during runtime
| * cdb76791 tls: always refresh the queue when reading sock
| * 4e7c4636 virtio-net: fix recursived rtnl_lock() during probe()
| * 1a71bf5c hv_netvsc: Set VF priv_flags to IFF_NO_ADDRCONF before open to prevent IPv6 addrconf
| * 5db93cbd Bluetooth: L2CAP: Fix attempting to adjust outgoing MTU
| * 1259b780 drm/xe/pf: Prepare to stop SR-IOV support prior GT reset
| * be77ce6b drm/xe/pf: Move VFs reprovisioning to worker
| * abe59c53 drm/xe/pf: Sanitize VF scratch registers on FLR
| * fc38c249 netfilter: nf_conntrack: fix crash due to removal of uninitialised entry
| * 7c532f22 net: fix segmentation after TCP/UDP fraglist GRO
| * 7929d27c ipv6: mcast: Delay put pmc->idev in mld_del_delrec()
| * 35b501a2 net/mlx5: Correctly set gso_size when LRO is used
| * f4740054 Bluetooth: btusb: QCA: Fix downloading wrong NVM for WCN6855 GF variant without board ID
| * f5a40e54 Bluetooth: hci_core: add missing braces when using macro parameters
| * db386fc5 Bluetooth: SMP: Fix using HCI_ERROR_REMOTE_USER_TERM on timeout
| * 6c586fcb Bluetooth: SMP: If an unallowed command is received consider it a failure
| * 05ab8da3 Bluetooth: hci_sync: fix connectable extended advertising when using static random address
| * b97be7ee Bluetooth: Fix null-ptr-deref in l2cap_sock_resume_cb()
| * 95a13b0a riscv: traps_misaligned: properly sign extend value in misaligned load handler
| * 32b14e75 riscv: Enable interrupt during exception handling
| * efad4e2a loop: use kiocb helpers to fix lockdep warning
| * 65c666af usb: net: sierra: check for no status endpoint
| * cd469b17 ice: check correct pointer in fwlog debugfs
| * 5a5d64f0 ice: add NULL check in eswitch lag check
| * 3c4bdc8a hwmon: (corsair-cpro) Validate the size of the received input buffer
| * dcf0f03d selftests: net: increase inter-packet timeout in udpgro.sh
| * 33711db9 can: tcan4x5x: fix reset gpio usage during probe
| * d587e692 can: tcan4x5x: add option for selecting nWKRQ voltage
| * d57dda20 wifi: cfg80211: remove scan request n_channels counted_by
| * 6a466ac7 nvmet-tcp: fix callback lock for TLS handshake
| * f9a90478 nvme: fix misaccounting of nvme-mpath inflight I/O
| * fd649353 net: phy: Don't register LEDs for genphy
| * 5b02e397 smc: Fix various oops due to inet_sock type confusion.
| * 124765c2 nvme: fix endianness of command word prints in nvme_log_err_passthru()
| * 8184ee3c nvme: fix inconsistent RCU list manipulation in nvme_ns_add_to_ctrl_list()
| * 9a7de97b fix a leak in fcntl_dirnotify()
| * 09bce213 smb: client: fix use-after-free in cifs_oplock_break
| * 06ec83b6 rpl: Fix use-after-free in rpl_do_srh_inline().
| * a6d73510 net/sched: sch_qfq: Fix race condition on qfq_aggregate
| * e8767b89 block: fix kobject leak in blk_unregister_queue
| * 20648ff4 net: emaclite: Fix missing pointer increment in aligned_read()
| * 894780d6 cachefiles: Fix the incorrect return value in __cachefiles_write()
| * dc05051d selftests/sched_ext: Fix exit selftest hang on UP
| * 6952aeac bpf: Reject %p% format string in bprintf-like helpers
| * e8069278 arm64: dts: imx95: Correct the DMA interrupter number of pcie0_ep
| * 6353bf36 soundwire: amd: fix for clearing command status register
| * a6e232ee soundwire: amd: fix for handling slave alerts after link is down
| * 8814cbbd arm64: dts: rockchip: Add cd-gpios for sdcard detect on Cool Pi 4B
| * 6cb38e5d arm64: dts: rockchip: Add cd-gpios for sdcard detect on Cool Pi CM5
| * c42116dc comedi: Fix initialization of data for instructions that write to subdevice
| * 2af1e7d3 comedi: Fix use of uninitialized data in insn_rw_emulate_bits()
| * 8c20a5cb comedi: Fix some signed shift left operations
| * 992d600f comedi: Fail COMEDI_INSNLIST ioctl if n_insns is too large
| * 3eab654f comedi: das6402: Fix bit shift out of bounds
| * 076b13ee comedi: das16m1: Fix bit shift out of bounds
| * e0f3c086 comedi: aio_iiro_16: Fix bit shift out of bounds
| * a27e27ee comedi: pcl812: Fix bit shift out of bounds
| * 610615c9 iio: common: st_sensors: Fix use of uninitialize device structs
| * 6eea9f76 iio: backend: fix out-of-bound write
| * 404b1d0f iio: adc: stm32-adc: Fix race in installing chained IRQ handler
| * 07c9a061 iio: adc: max1363: Reorder mode_list[] entries
| * 0ceb2893 iio: adc: max1363: Fix MAX1363_4X_CHANS/MAX1363_8X_CHANS[]
| * 086a7647 iio: adc: axp20x_adc: Add missing sentinel to AXP717 ADC channel maps
| * bfcda3e1 iio: accel: fxls8962af: Fix use after free in fxls8962af_fifo_flush
| * b361598b soc: aspeed: lpc-snoop: Don't disable channels that aren't enabled
| * 855d4da5 soc: aspeed: lpc-snoop: Cleanup resources in stack-order
| * 2a76bc2b smb: client: fix use-after-free in crypt_message when using async crypto
| * d5629d1a s390/bpf: Fix bpf_arch_text_poke() with new_addr == NULL again
| * 11c19d42 pmdomain: governor: Consider CPU latency tolerance from pm_domain_cpu_gov
| * 10e27b2a net: libwx: properly reset Rx ring descriptor
| * ba7c793f net: libwx: fix the using of Rx buffer DMA
| * 08d18bda net: libwx: remove duplicate page_pool_put_full_page()
| * 74cb0f10 net: stmmac: intel: populate entire system_counterval_t in get_time_fn() callback
| * 516cd094 mmc: sdhci_am654: Workaround for Errata i2312
| * 5280e0b8 mmc: sdhci-pci: Quirk for broken command queuing on Intel GLK-based Positivo models
| * 6198bfe1 mmc: bcm2835: Fix dma_unmap_sg() nents value
| * a25ebc33 memstick: core: Zero initialize id_reg in h_memstick_read_dev_id()
| * 2594d5ff isofs: Verify inode mode when loading from disk
| * 12216028 dmaengine: nbpfaxi: Fix memory corruption in probe()
| * 573f1e59 cpuidle: psci: Fix cpuhotplug routine with PREEMPT_RT=y
| * 9e11e0db Bluetooth: btintel: Check if controller is ISO capable on btintel_classify_pkt_type
| * 1ddedbd8 af_packet: fix soft lockup issue caused by tpacket_snd()
| * fa0796cd af_packet: fix the SO_SNDTIMEO constraint not effective on tpacked_snd()
| * 0e9c4b36 arm64: dts: rockchip: use cs-gpios for spi1 on ringneck
| * b0c7f298 arm64: dts: imx8mp-venice-gw73xx: fix TPM SPI frequency
| * 9650e49d arm64: dts: imx8mp-venice-gw72xx: fix TPM SPI frequency
| * a3964e87 arm64: dts: imx8mp-venice-gw71xx: fix TPM SPI frequency
| * 1a54317f arm64: dts: freescale: imx8mm-verdin: Keep LDO5 always on
| * a86ea423 arm64: dts: add big-endian property back into watchdog node
| * c7000077 arm64: dts: imx8mp-venice-gw74xx: fix TPM SPI frequency
| * 5419adae net/mlx5: Update the list of the PCI supported devices
| * 837a9631 phonet/pep: Move call to pn_skb_get_dst_sockaddr() earlier in pep_sock_accept()
| * 93812699 mptcp: reset fallback status gracefully at disconnect() time
| * f81b6fbe mptcp: plug races between subflow fail and subflow creation
| * 54999dea mptcp: make fallback action and fallback decision atomic
| * f28044a6 io_uring/poll: fix POLLERR handling
| * 134ec1ed ALSA: hda/realtek: Add quirk for ASUS ROG Strix G712LWS
| * 61e86757 ALSA: hda/realtek - Fix mute LED for HP Victus 16-r0xxx
| * 084eb54b drm/amd/display: Free memory allocation
| * 74162dda drm/amd/display: Disable CRTC degamma LUT for DCN401
| * 62f2a58a drm/amdgpu: Increase reset counter only on success
| * 228ad2ab drm/amdgpu/gfx8: reset compute ring wptr on the GPU on resume
| * 21e649b0 objtool/rust: add one more `noreturn` Rust function for Rust 1.89.0
| * 7bb9ea51 tracing/osnoise: Fix crash in timerlat_dump_stack()
| * 33e20747 tracing: Add down_write(trace_event_sem) when adding trace event
| * 692cfff2 tracing/probes: Avoid using params uninitialized in parse_btf_arg()
| * d18f63e8 HID: core: do not bypass hid_hw_raw_request
| * 953af3c0 HID: core: ensure __hid_request reserves the report ID as the first byte
| * a262370f HID: core: ensure the allocated report buffer can contain the reserved report ID
| * 68860d1a dm-bufio: fix sched in atomic context
| * 0758f7ef spi: Add check for 8-bit transfer with 8 IO mode support
| * 40f79e2b pch_uart: Fix dma_sync_sg_for_device() nents value
| * 9ecfed98 Input: xpad - set correct controller type for Acer NGR200
| * c29a2328 nvmem: layouts: u-boot-env: remove crc32 endianness conversion
| * c85295f6 nvmem: imx-ocotp: fix MAC address byte length
| * ff628593 Revert "staging: vchiq_arm: Create keep-alive thread during probe"
| * 970635ed thunderbolt: Fix bit masking in tb_dp_port_set_hops()
| * 17a6ea23 thunderbolt: Fix wake on connect at runtime
| * 1a1190b4 i2c: stm32f7: unmap DMA mapped buffer
| * 79b63523 i2c: stm32: fix the device used for the DMA map
| * 783ea37b usb: gadget: configfs: Fix OOB read on empty string write
| * 032f2296 usb: dwc2: gadget: Fix enter to hibernation for UTMI+ PHY
| * 231bf7e8 usb: musb: fix gadget state on disconnect
| * 951dd99a USB: serial: ftdi_sio: add support for NDI EMGUIDE GEMINI
| * 8b8cb0c3 USB: serial: option: add Foxconn T99W640
| * ba1d8dc8 USB: serial: option: add Telit Cinterion FE910C04 (ECM) composition
| * 248ba00d phy: tegra: xusb: Disable periodic tracking on Tegra234
| * 2f2a3753 phy: tegra: xusb: Decouple CYA_TRK_CODE_UPDATE_ON_IDLE from trk_hw_mode
| * ec7f98ff phy: tegra: xusb: Fix unbalanced regulator disable in UTMI PHY mode
* | e2ed230f Merge android16-6.12 into android16-6.12-lts
* | 4a5ce5ae Revert "drm/framebuffer: Acquire internal references on GEM handles"
* | 8eba32b6 Merge 6.12.39 into android16-6.12-lts
|/
* cdf264c0 Linux 6.12.39
* f3f9decc KVM: SVM: Set synthesized TSA CPUID flags
* f004f58d rseq: Fix segfault on registration when rseq_cs is non-zero
* f2133b84 crypto: ecdsa - Harden against integer overflows in DIV_ROUND_UP()
* 59923d50 arm64: Filter out SME hwcaps when FEAT_SME isn't implemented
* 815f1161 ksmbd: fix potential use-after-free in oplock/lease break ack
* 2d89dab1 kasan: remove kasan_find_vm_area() to prevent possible deadlock
* e1aec954 net: wangxun: revert the adjustment of the IRQ vector sequence
* 5244536e erofs: fix rare pcluster memory leak after unmounting
* 5ea53aa7 selftests/bpf: adapt one more case in test_lru_map to the new target_free
* 7b4a0263 HID: nintendo: avoid bluetooth suspend/resume stalls
* c7253635 HID: quirks: Add quirk for 2 Chicony Electronics HP 5MP Cameras
* 716a0c8d HID: Add IGNORE quirk for SMARTLINKTECHNOLOGY
* 70685fb6 riscv: vdso: Exclude .rodata from the PT_DYNAMIC segment
* 9ef5d474 bpf: Adjust free target to avoid global starvation of LRU map
* c23e0792 vt: add missing notification when switching back to text mode
* 0bcc14f3 btrfs: fix assertion when building free space tree
* 589b290d net: mana: Record doorbell physical address in PF mode
* 921fffa1 HID: lenovo: Add support for ThinkPad X1 Tablet Thin Keyboard Gen2
* e46cf294 driver: bluetooth: hci_qca:fix unable to load the BT driver
* a9c357b0 net: usb: qmi_wwan: add SIMCom 8230C composition
* e55b2126 ALSA: hda/realtek: Add quirks for some Clevo laptops
* 01b0312a ALSA: hda/realtek - Enable mute LED on HP Pavilion Laptop 15-eg100
* 72aad5cf ASoC: amd: yc: add quirk for Acer Nitro ANV15-41 internal mic
* 383b2399 io_uring: make fallocate be hashed work
* 67be7e6c ALSA: hda/realtek: Add mic-mute LED setup for ASUS UM5606
* 68397fda ASoC: SOF: Intel: hda: Use devm_kstrdup() to avoid memleak.
* dd072fa6 um: vector: Reduce stack usage in vector_eth_configure()
* 7df2295c atm: idt77252: Add missing `dma_map_error()`
* 25cab1b8 ublk: sanity check add_dev input for underflow
* f154e41e bnxt_en: Set DMA unmap len correctly for XDP_REDIRECT
* b4e7e3f4 bnxt_en: Fix DCB ETS validation
* 948ab36e net: ll_temac: Fix missing tx_pending check in ethtools_set_ringparam()
* bbd385b6 net/mlx5e: Add new prio for promiscuous mode
* 7581afc0 net/mlx5e: Fix race between DIM disable and net_dim()
* c4270235 can: m_can: m_can_handle_lost_msg(): downgrade msg lost in rx message to debug level
* 90d0d5a4 drm/xe/pm: Correct comment of xe_pm_set_vram_threshold()
* ec401456 selftests: net: lib: fix shift count out of range
* 182c9f38 selftests: net: lib: Move logging from forwarding/lib.sh here
* e3647c40 net: phy: microchip: limit 100M workaround to link-down events on LAN88xx
* b215e916 net: phy: microchip: Use genphy_soft_reset() to purge stale LPA bits
* 4c934e0c ibmvnic: Fix hardcoded NUM_RX_STATS/NUM_TX_STATS with dynamic sizeof
* 473f3ead net: appletalk: Fix device refcount leak in atrtr_create()
* e0dd2e97 netfilter: flowtable: account for Ethernet header in nf_flow_pppoe_proto()
* fd67f52e erofs: fix to add missing tracepoint in erofs_readahead()
* ea2350df erofs: refine readahead tracepoint
* 9493b5f9 erofs: tidy up zdata.c
* 71e4f033 erofs: get rid of `z_erofs_next_pcluster_t`
* 16396885 erofs: free pclusters if no cached folio is attached
* ff4b8c9a drm/xe/pf: Clear all LMTT pages on alloc
* 8586552d nbd: fix uaf in nbd_genl_connect() error path
* 1bbdf421 wifi: mt76: mt7925: Fix null-ptr-deref in mt7925_thermal_init()
* fa7e9a15 drm/nouveau/gsp: fix potential leak of memory used during acpi init
* 06c56637 wifi: rt2x00: fix remove callback type mismatch
* d21eeb05 wifi: mac80211: fix non-transmitted BSSID profile search
* d4a7056c wifi: mac80211: correctly identify S1G short beacon
* 2941155d raid10: cleanup memleak at raid10_make_request
* 776e6186 md/raid1: Fix stack memory use after return in raid1_reshape
* a560de52 drm/tegra: nvdec: Fix dma_alloc_coherent error check
* fcd9c923 wifi: zd1211rw: Fix potential NULL pointer dereference in zd_mac_tx_to_dev()
* c6625c21 wifi: cfg80211: fix S1G beacon head validation in nl80211
* 8d4d00ea netfs: Fix ref leak on inserted extra subreq in write retry
* 42baf997 netlink: make sure we allow at least one dump skb
* f98c4cec netlink: Fix rmem check in netlink_broadcast_deliver().
* cecc9146 ASoC: Intel: sof-function-topology-lib: Print out the unsupported dmic count
* 19ff875d erofs: address D-cache aliasing
* 4745bfd3 erofs: fix to add missing tracepoint in erofs_read_folio()
* 3b16c9b8 ksmbd: fix a mount write count leak in ksmbd_vfs_kern_path_locked()
* 92c2c005 smb: server: make use of rdma_destroy_qp()
* 1d219778 clk: scmi: Handle case where child clocks are initialized before their parents
* 971da696 x86/mm: Disable hugetlb page table sharing on 32-bit
* a68b8585 x86/rdrand: Disable RDSEED on AMD Cyan Skillfish
* fcee75da clk: imx: Fix an out-of-bounds access in dispmix_csr_clk_dev_data
* 5d2d34f3 rust: init: allow `dead_code` warnings for Rust >= 1.89.0
* febc0b5d lib/alloc_tag: do not acquire non-existent lock in alloc_tag_top_users()
* 4c39dfd1 mm/vmalloc: leave lazy MMU mode on PTE mapping error
* 92ed107c scripts/gdb: fix interrupts.py after maple tree conversion
* 62720dc3 scripts/gdb: de-reference per-CPU MCE interrupts
* cb89f9bf scripts/gdb: fix interrupts display after MCP on x86
* ee6c677e mm: fix the inaccurate memory statistics issue for users
* 839d8682 maple_tree: fix mt_destroy_walk() on root leaf node
* 92db42e2 kallsyms: fix build without execinfo
* 7dccd5eb Revert "PCI/ACPI: Fix allocated memory release on error in pci_acpi_scan_root()"
* e4172522 Revert "ACPI: battery: negate current when discharging"
* ee6f6138 drm/xe: Allocate PF queue size on pow2 boundary
* 065bd940 drm/framebuffer: Acquire internal references on GEM handles
* 9e4af87b Revert "usb: gadget: u_serial: Add null pointer check in gs_start_io"
* abf3620c usb: gadget: u_serial: Fix race condition in TTY wakeup
* 48007d6e Revert "drm/xe/xe2: Enable Indirect Ring State support for Xe2"
* 57b7c27e drm/xe/bmg: fix compressed VRAM handling
* 2d2f07a9 drm/gem: Fix race in drm_gem_handle_create_tail()
* 38df1a50 drm/ttm: fix error handling in ttm_buffer_object_transfer
* e2d6547d drm/sched: Increment job count before swapping tail spsc queue
* 08480e28 drm/gem: Acquire references on GEM handles for framebuffers
* e90ee15c drm/amdkfd: Don't call mmput from MMU notifier callback
* 9f852d30 drm/imagination: Fix kernel crash when hard resetting the GPU
* a7b2f250 wifi: mt76: mt7925: fix invalid array index in ssid assignment during hw scan
* fad0f6fc wifi: mt76: mt7925: fix the wrong config for tx interrupt
* 9b50874f wifi: mt76: mt7925: prevent NULL pointer dereference in mt7925_sta_set_decap_offload()
* 9639e540 wifi: mt76: mt7921: prevent decap offload config before STA initialization
* a963819a wifi: mwifiex: discard erroneous disassoc frames on STA interface
* e01851f6 wifi: prevent A-MSDU attacks in mesh networks
* 373caeec pwm: mediatek: Ensure to disable clocks in error path
* d526e11a pwm: Fix invalid state detection
* 275605a8 pinctrl: qcom: msm: mark certain pins as invalid for interrupts
* 3e054270 md/md-bitmap: fix GPF in bitmap_get_stats()
* 9f260e16 net: ethernet: rtsn: Fix a null pointer dereference in rtsn_probe()
* 8f652773 gre: Fix IPv6 multicast route creation.
* 199af064 ASoC: fsl_sai: Force a software reset when starting in consumer mode
* e14bffc9 ALSA: ad1816a: Fix potential NULL pointer deref in snd_card_ad1816a_pnp()
* d9bd1163 KVM: Allow CPU to reschedule while setting per-page memory attributes
* fd044c99 KVM: SVM: Reject SEV{-ES} intra host migration if vCPU creation is in-flight
* 5cb498b2 KVM: SVM: Add missing member in SNP_LAUNCH_START command structure
* 55f56852 KVM: x86/xen: Allow 'out of range' event channel ports in IRQ routing table.
* 291eff10 x86/mce: Make sure CMCI banks are cleared during shutdown on Intel
* 8ed7f3de x86/mce: Ensure user polling settings are honored when restarting timer
* 55ea884c x86/mce: Don't remove sysfs if thresholding sysfs init fails
* afcf4f4e x86/mce/amd: Fix threshold limit reset
* e01d5e33 x86/mce/amd: Add default names for MCA banks and blocks
* 9e0d33e7 ipmi:msghandler: Fix potential memory corruption in ipmi_create_user()
* d1ff5f9d rxrpc: Fix oops due to non-existence of prealloc backlog struct
* 5385ad53 rxrpc: Fix bug due to prealloc collision
* 8ecd651e net/sched: Abort __tc_modify_qdisc if parent class does not exist
* fc2fffa2 net: ethernet: ti: am65-cpsw-nuss: Fix skb size by accounting for skb_shared_info
* 34a09d62 atm: clip: Fix NULL pointer dereference in vcc_sendmsg()
* 024876b2 atm: clip: Fix infinite recursive call of clip_push().
* 9f771816 atm: clip: Fix memory leak of struct clip_vcc.
* 36caab99 atm: clip: Fix potential null-ptr-deref in to_atmarpd().
* 4d5476fa net: phy: smsc: Fix link failure in forced mode with Auto-MDIX
* 6fb4cd24 net: phy: smsc: Force predictable MDI-X state on LAN87xx
* 850812bd net: phy: smsc: Fix Auto-MDIX configuration when disabled by strap
* be8792c6 net: stmmac: Fix interrupt handling for level-triggered mode in DWC_XGMAC2
* 41a741c4 vsock: Fix IOCTL_VM_SOCKETS_GET_LOCAL_CID to check also `transport_local`
* ae2c712b vsock: Fix transport_* TOCTOU
* 3734d782 vsock: Fix transport_{g2h,h2g} TOCTOU
* 62e6160c tcp: Correct signedness in skb remaining space calculation
* 50aa2d12 tipc: Fix use-after-free in tipc_conn_close().
* 8fb2802a vsock: fix `vsock_proto` declaration
* 4b8e18af netlink: Fix wraparounds of sk->sk_rmem_alloc.
* b9012944 net: phy: qcom: qca808x: Fix WoL issue by utilizing at8031_set_wol()
* 31db4223 net: phy: qcom: move the WoL function to shared library
* 778f4e17 arm64: poe: Handle spurious Overlay faults
* 2e0cb0c7 bnxt_en: eliminate the compile warning in bnxt_request_irq due to CONFIG_RFS_ACCEL
* 0caba66f sched/deadline: Fix dl_server runtime calculation formula
* 35bda158 fix proc_sys_compare() handling of in-lookup dentries
* df1d6801 pinctrl: amd: Clear GPIO debounce for suspend
* cdbcde93 Bluetooth: hci_event: Fix not marking Broadcast Sink BIS as connected
* 32fa1f92 Bluetooth: hci_sync: Fix not disabling advertising instance
* 0cd863ab ASoC: cs35l56: probe() should fail if the device ID is not recognized
* a0a80090 perf: Revert to requiring CAP_SYS_ADMIN for uprobes
* f7fe33f6 sched/core: Fix migrate_swap() vs. hotplug
* 1207f57b irqchip/irq-msi-lib: Select CONFIG_GENERIC_MSI_IRQ
* bc179aa7 perf/core: Fix the WARN_ON_ONCE is out of lock protected region
* 8f4c7131 ASoC: Intel: soc-acpi: arl: Correct order of cs42l43 matches
* cca47e6e ASoC: Intel: soc-acpi-intel-arl-match: set get_function_tplg_files ops
* fc3a8a5e ASoC: Intel: add sof_sdw_get_tplg_files ops
* 36536435 ASoC: soc-acpi: add get_function_tplg_files ops
* 06e0b070 ASoC: Intel: soc-acpi: arl: Add match entries for new cs42l43 laptops
* 97d14c04 ASoC: Intel: soc-acpi: arl: Correct naming of a cs35l56 address struct
* 724b93a6 ASoC: Intel: SND_SOC_INTEL_SOF_BOARD_HELPERS select SND_SOC_ACPI_INTEL_MATCH
* d4f6a267 ASoC: fsl_asrc: use internal measured ratio for non-ideal ratio mode
* 07ed75bf drm/amdgpu: Replace Mutex with Spinlock for RLCG register access to avoid Priority Inversion in SRIOV
* 56ea7746 crypto: s390/sha - Fix uninitialized variable in SHA-1 and SHA-2
* 04513cf1 drm/amdgpu/ip_discovery: add missing ip_discovery fw
* 39d6a607 drm/amdgpu/discovery: use specific ip_discovery.bin for legacy asics
* e9d9b25f drm/exynos: exynos7_drm_decon: add vblank check in IRQ handling
* 6dee745b eventpoll: don't decrement ep refcount while still holding the ep mutex

Change-Id: Icc610162e88de802fbc6cba4020b6763f6d6bf79
Signed-off-by: Aleksei Vetrov <vvvvvv@google.com>