Merge tag 'android14-5.15.192_r00' into android14-5.15

This merges the android14-5.15.192_r00 tag into the android14-5.15 branch,
catching it up with the latest LTS releases.

It contains the following commits:

*   fabd66fa Merge 5.15.192 into android14-5.15-lts
|\
| * de9476bb Linux 5.15.192
| * 3e7c1c70 dmaengine: mediatek: Fix a flag reuse error in mtk_cqdma_tx_status()
| * b521afbe spi: tegra114: Use value to check for invalid delays
| * ffe92326 clk: qcom: gdsc: Set retain_ff before moving to HW CTRL
| * b01a706f perf bpf-event: Fix use-after-free in synthesis
| * 43167766 drm/bridge: ti-sn65dsi86: fix REFCLK setting
| * f2e6b997 spi: spi-fsl-lpspi: Reset FIFO and disable module on transfer abort
| * 18fac616 spi: spi-fsl-lpspi: Set correct chip-select polarity bit
| * 5255b997 spi: spi-fsl-lpspi: Fix transmissions when using CONT
| * 85be7ef8 pcmcia: Add error handling for add_interval() in do_validate_mem()
| * 271ed980 ALSA: hda/hdmi: Add pin fix for another HP EliteDesk 800 G4 model
| * 7e287256 mm/slub: avoid accessing metadata when pointer is invalid in object_err()
| * 8b9a5269 randstruct: gcc-plugin: Fix attribute addition
| * db44404d randstruct: gcc-plugin: Remove bogus void member
| * 4da1cc98 arm64: dts: marvell: uDPU: define pinctrl state for alarm LEDs
| * 85530b4e vmxnet3: update MTU after device quiesce
| * a82c31b8 net: dsa: microchip: linearize skb for tail-tagging switches
| * 01ea671f net: dsa: microchip: update tag_ksz masks for KSZ9477 family
| * 6db1f39f dmaengine: mediatek: Fix a possible deadlock error in mtk_cqdma_tx_status()
| * d0b7f11d dma-buf: insert memory barrier before updating num_fences
| * b336106f gpio: pca953x: fix IRQ storm on system wake up
| * 1d7def97 iio: light: opt3001: fix deadlock due to concurrent flag access
| * 28e4e1b5 iio: chemical: pms7003: use aligned_s64 for timestamp
| * 66dc11e9 spi: tegra114: Don't fail set_cs_timing when delays are zero
| * 45eef6be spi: tegra114: Remove unnecessary NULL-pointer checks
| * b9f28182 KVM: x86: Take irqfds.lock when adding/deleting IRQ bypass producer
| * c824d766 cpufreq/sched: Explicitly synchronize limits_changed flag handling
| * abdf3c33 mm/khugepaged: fix ->anon_vma race
| * 99a87726 e1000e: fix heap overflow in e1000_set_eeprom
| * 5d334bce batman-adv: fix OOB read/write in network-coding decode
| * 95b63d15 scsi: lpfc: Fix buffer free/clear order in deferred receive path
| * da98fc73 drm/amdgpu: drop hw access in non-DC audio fini
| * acdf26a9 wifi: mwifiex: Initialize the chan_stats array to zero
| * 732e6221 mm: move page table sync declarations to linux/pgtable.h
| * 744ff519 x86/mm/64: define ARCH_PAGE_TABLE_SYNC_MASK and arch_sync_kernel_mappings()
| * 4bd570f4 pcmcia: Fix a NULL pointer dereference in __iodyn_find_io_region()
| * 2be7109e ALSA: usb-audio: Add mute TLV for playback volumes on some devices
| * 0bb7069e phy: mscc: Stop taking ts_lock for tx_queue and use its own lock
| * 24b24295 net: phy: mscc: Fix memory leak when using one step timestamping
| * b4c2fb32 ptp: Add generic PTP is_sync() function
| * 0b21e9cd ppp: fix memory leak in pad_compress_skb
| * 955f400e net: atm: fix memory leak in atm_register_sysfs when device_register fail
| * 2bd0f672 ax25: properly unshare skbs in ax25_kiss_rcv()
| * a7eae332 ipv4: Fix NULL vs error pointer check in inet_blackhole_dev_init()
| * 894c7d0c net: thunder_bgx: decrement cleanup index before use
| * 299c6d47 net: thunder_bgx: add a missing of_node_put
| * e5f334ac wifi: libertas: cap SSID len in lbs_associate()
| * 24ec8826 wifi: cw1200: cap SSID length in cw1200_do_join()
| * eaa10a02 net: ethernet: mtk_eth_soc: fix tx vlan tag for llc packets
| * 1eadabcf i40e: Fix potential invalid access when MAC list is empty
| * 348a01c8 icmp: fix icmp_ndo_send address translation for reply direction
| * e96d08dd mISDN: Fix memory leak in dsp_hwec_enable()
| * 1079c102 xirc2ps_cs: fix register access when enabling FullDuplex
| * 47f6090b Bluetooth: Fix use-after-free in l2cap_sock_cleanup_listen()
| * c79730e3 netfilter: conntrack: helper: Replace -EEXIST by -EBUSY
| * d00c8b0d netfilter: br_netfilter: do not check confirmed bit in br_nf_local_in() after confirm
| * ff040562 wifi: cfg80211: fix use-after-free in cmp_bss()
| * 0f70fab5 arm64: dts: rockchip: Add vcc-supply to SPI flash on rk3399-pinebook-pro
| * 4377eac5 tee: fix NULL pointer dereference in tee_shm_put
| * b187c976 fs: writeback: fix use-after-free in __mark_inode_dirty()
| * 71224142 drm/amd/display: Don't warn when missing DCE encoder caps
* | ae9db560 Merge c1c74584 ("bpf: Fix oob access in cgroup local storage") into android14-5.15-lts
|\|
| * c1c74584 bpf: Fix oob access in cgroup local storage
| * c0499261 bpf: Move bpf map owner out of common struct
| * bfb8da7a bpf: Move cgroup iterator helpers to bpf.h
| * 23099792 bpf: Add cookie object to bpf maps
* | 2b4f1c38 Merge 5.15.191 into android14-5.15-lts
|\|
| * 7a6c2d09 Linux 5.15.191
| * 90bae69c xfs: do not propagate ENODATA disk errors into xattr code
| * c570d773 Revert "drm/dp: Change AUX DPCD probe address from DPCD_REV to LANE0_1_STATUS"
| * 3db34718 HID: mcp2221: Handle reads greater than 60 bytes
| * 6ac64874 HID: mcp2221: Don't set bus speed on every transfer
| * 2a0ed07b drm/nouveau/disp: Always accept linear modifier
| * 40a01652 net: usb: qmi_wwan: add Telit Cinterion LE910C4-WWX new compositions
| * 9a0b5fdc dma/pool: Ensure DMA_DIRECT_REMAP allocations are decrypted
| * 67334c94 Revert "drm/amdgpu: fix incorrect vm flags to map bo"
| * 4338b0f6 HID: hid-ntrig: fix unable to handle page fault in ntrig_report_version()
| * bfde0392 HID: wacom: Add a new Art Pen 2
| * 4263e585 HID: multitouch: fix slab out-of-bounds access in mt_report_fixup()
| * eaae728e HID: asus: fix UAF via HID_CLAIMED_INPUT validation
| * d51e381b KVM: x86: use array_index_nospec with indices that come from guest
| * 568e7761 efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare
| * 17d6c774 sctp: initialize more fields in sctp_v6_from_sk()
| * 700a71e7 net: stmmac: xgmac: Do not enable RX FIFO Overflow interrupts
| * 47fbd9c3 net/mlx5e: Set local Xoff after FW update
| * 9352f6ea net/mlx5e: Update and set Xon/Xoff upon port speed set
| * 7011f0f4 net/mlx5e: Update and set Xon/Xoff upon MTU set
| * f64abfa0 phy: mscc: Fix when PTP clock is register and unregister
| * 5680a4dd net: dlink: fix multicast stats being counted incorrectly
| * 62f36847 atm: atmtcp: Prevent arbitrary write in atmtcp_recv_control().
| * bf813928 Bluetooth: hci_event: Detect if HCI_EV_NUM_COMP_PKTS is unbalanced
| * e726dc92 powerpc/kvm: Fix ifdef to remove build warning
| * 5a2d5ab3 net: ipv4: fix regression in local-broadcast routes
| * 6606a6d3 udf: Fix directory iteration for longer tail extents
| * d717c12f vhost/net: Protect ubufs with rcu read lock in vhost_net_ubuf_put()
| * f230d401 NFS: Fix a race when updating an existing write
| * fd947b71 nfs: fold nfs_page_group_lock_subrequests into nfs_lock_and_join_requests
| * 2e0d974c ASoC: codecs: tx-macro: correct tx_macro_component_drv name
| * 8f397cde scsi: core: sysfs: Correct sysfs attributes access rights
| * a6f0f887 ftrace: Fix potential warning in trace_printk_seq during ftrace_dump
| * 2573ee4e pinctrl: STMFX: add missing HAS_IOMEM dependency
* | 22dedb32 ANDROID: GKI: fix up crc issue caused by new .h inclusion
* | 2632591c Revert "io_uring: don't use int for ABI"
* | ecd9f80f Revert "ASoC: soc-dai.h: merge DAI call back functions into ops"
* | 76975403 Revert "ASoC: fsl_sai: replace regmap_write with regmap_update_bits"
* | 4d6036fd Revert "pps: fix poll support"
* | 9c516eb0 Revert "PCI/ACPI: Fix runtime PM ref imbalance on Hot-Plug Capable ports"
* | 464642c5 Merge 5.15.190 into android14-5.15-lts
|\|
| * 01879f56 Linux 5.15.190
| * 77cf363f alloc_fdtable(): change calling conventions.
| * e442a966 wifi: mac80211: check basic rates validity in sta_link_apply_parameters
| * 82ef97ab netfilter: nf_reject: don't leak dst refcount for loopback packets
| * 53320a99 s390/hypfs: Enable limited access during lockdown
| * 0ffb1bf9 s390/hypfs: Avoid unnecessary ioctl registration in debugfs
| * bbdfdc63 ALSA: usb-audio: Use correct sub-type for UAC3 feature unit validation
| * 9d48c809 bonding: update LACP activity flag after setting lacp_active
| * 5748c51a net/sched: Remove unnecessary WARNING condition for empty child qdisc in htb_activate
| * 0dacfc53 net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit
| * f422b5e4 igc: fix disabling L1.2 PCI-E link substate on I226 on init
| * aa65c2bd ixgbe: xsk: resolve the negative overflow of budget in ixgbe_xmit_zc
| * fcb4ce9f net: usb: asix_devices: Fix PHY address mask in MDIO bus initialization
| * 5d1fed4b phy: mscc: Fix timestamping for vsc8584
| * 94beabf4 net: phy: Use netif_rx().
| * 9a1969fb ppp: fix race conditions in ppp_fill_forward_path
| * 9f113d28 ipv6: sr: validate HMAC algorithm ID in seg6_hmac_info_add
| * 2af45aad drm/amd/display: Add null pointer check in mod_hdcp_hdcp1_create_session()
| * 38c13968 ALSA: usb-audio: Fix size validation in convert_chmap_v3()
| * ddf1691f drm/hisilicon/hibmc: fix the hibmc loaded failed bug
| * 10ae9578 mlxsw: spectrum: Forward packets with an IPv4 link-local source IP
| * 0ad8509b iommu/amd: Avoid stack buffer overflow from kernel cmdline
| * 325bf7d5 scsi: qla4xxx: Prevent a potential error pointer dereference
| * 34171b9e net: bridge: fix soft lockup in br_multicast_query_expired()
| * 0ba6efb2 RDMA/bnxt_re: Fix to initialize the PBL array
| * e7ea080f cgroup/cpuset: Use static_branch_enable_cpuslocked() on cpusets_insane_config_key
| * c635a42d mm/page_alloc: detect allocation forbidden by cpuset and bail out early
| * 873f3220 x86/cpu/hygon: Add missing resctrl_cpu_detect() in bsp_init helper
| * 4ad0d45f mm/memory-failure: fix infinite UCE for VM_PFNMAP pfn
| * d8c5d87a iio: light: as73211: Ensure buffer holes are zeroed
| * 41b83842 tracing: Limit access to parser->buffer when trace_get_user failed
| * 9fb26b72 tracing: Remove unneeded goto out logic
| * 14b0d8e7 iio: imu: inv_icm42600: change invalid data error to -EBUSY
| * c78c8e50 usb: xhci: Fix slot_id resource race conflict
| * 5e2414eb compiler: remove __ADDRESSABLE_ASM{_STR,}() again
| * c8124155 selftests: mptcp: pm: check flush doesn't reset limits
| * 9aff206c pwm: mediatek: Fix duty and period setting
| * 77353410 pwm: mediatek: Handle hardware enable and clock enable separately
| * de1dda2e pwm: mediatek: Implement .apply() callback
| * 1c72f369 scsi: mpi3mr: Serialize admin queue BAR writes on 32-bit systems
| * fef82b52 scsi: mpi3mr: Drop unnecessary volatile from __iomem pointers
| * 098b2c8e scsi: ufs: exynos: Fix programming of HCI_UTRL_NEXUS_TYPE
| * 423fd248 iio: adc: ad_sigma_delta: change to buffer predisable
| * 0d59ce2b soc: qcom: mdt_loader: Ensure we don't read past the ELF header
| * e94264b0 wifi: ath11k: fix dest ring-buffer corruption when ring is full
| * 80bc1e5d asm-generic: Add memory barrier dma_mb()
| * 06b70ccc locking/barriers, kcsan: Support generic instrumentation
| * 9db6a78b media: venus: protect against spurious interrupts during probe
| * c52e2ecb media: venus: Add support for SSR trigger using fault injection
| * 39d70ce5 media: qcom: camss: cleanup media device allocated resource on error path
| * 4ef95267 media: camss: Convert to platform remove callback returning void
| * 6b7784ea f2fs: fix to avoid out-of-boundary access in dnode page
| * a19b31f8 drm/dp: Change AUX DPCD probe address from DPCD_REV to LANE0_1_STATUS
| * a7037057 mptcp: disable add_addr retransmission when timeout is 0
| * 7c5f3b63 drm/amd/display: Don't overclock DCE 6 by 15%
| * dfe40159 usb: dwc3: Remove WARN_ON for device endpoint command timeouts
| * bccd26d7 usb: dwc3: Ignore late xferNotReady event to prevent halt timeout
| * 7ec4f6da USB: storage: Ignore driver CD mode for Realtek multi-mode Wi-Fi dongles
| * 564b015a usb: storage: realtek_cr: Use correct byte order for bcs->Residue
| * b5a59ea9 USB: storage: Add unusual-devs entry for Novatek NTK96550-based camera
| * f596da86 usb: renesas-xhci: Fix External ROM access timeouts
| * f9f402f8 usb: core: hcd: fix accessing unmapped memory in SINGLE_STEP_SET_FEATURE test
| * 868a1b68 comedi: Fix use of uninitialized memory in do_insn_ioctl() and do_insnlist_ioctl()
| * bab220b0 comedi: pcl726: Prevent invalid irq number
| * ab77e85b comedi: Make insn_rw_emulate_bits() do insn->n samples
| * 78232f3d usb: quirks: Add DELAY_INIT quick for another SanDisk 3.2Gen1 Flash Drive
| * 4cb568aa most: core: Drop device reference after usage in get_channel()
| * 65817f61 iio: proximity: isl29501: fix buffered read on big-endian systems
| * 35b8c908 iio: pressure: bmp280: Use IS_ERR() in bmp280_common_probe()
| * e0b6b223 ftrace: Also allocate and copy hash for reading of filter files
| * 40382095 fpga: zynq_fpga: Fix the wrong usage of dma_map_sgtable()
| * 905986f6 use uniform permission checks for all mount propagation changes
| * 03b40bf5 fs/buffer: fix use-after-free when call bh_read() helper
| * 0496b11f drm/amd/display: Fill display clock and vblank time in dce110_fill_display_configs
| * 9031c990 drm/amd/display: Find first CRTC and its line time in dce110_fill_display_configs
| * 2e278aee drm/amd/display: Fix DP audio DTO1 clock source on DCE 6.
| * fe867034 drm/amd/display: Fix fractional fb divider in set_pixel_clock_v3
| * 9c92d12b drm/amd/display: Avoid a NULL pointer dereference
| * f89530d7 ALSA: hda/realtek: Add support for HP EliteBook x360 830 G6 and EliteBook 830 G6
| * 7bf57a07 mm/debug_vm_pgtable: clear page table entries at destroy_args()
| * b14850b0 squashfs: fix memory leak in squashfs_fill_super
| * 7a556ae3 mmc: sdhci-pci-gli: GL9763e: Rename the gli_set_gl9763e() for consistency
| * c3e0a66f memstick: Fix deadlock by moving removing flag earlier
| * 23249dad KVM: arm64: Fix kernel BUG() due to bad backport of FPSIMD/SVE/SME fix
| * d08713ba scsi: ufs: ufs-pci: Fix default runtime and system PM levels
| * b2be3291 scsi: ufs: ufs-pci: Fix hibernate state transition for Intel MTL-like host controllers
| * fb9c73ef mptcp: do not queue data on closed subflows
| * a08f285d mptcp: drop unused sk in mptcp_push_release
| * 13e85f7d selftests: mptcp: Initialize variables to quiet gcc 12 warnings
| * c9f8a3b0 mptcp: introduce MAPPING_BAD_CSUM
| * 1da47584 mptcp: fix error mibs accounting
| * f4480eaa selftests: mptcp: add missing join check
| * 2b92ae68 selftests: mptcp: connect: also cover checksum
| * 2668261d selftests: mptcp: connect: also cover alt modes
| * 2c5b3b71 selftests: mptcp: make sendfile selftest work
| * 69648002 kbuild: userprogs: use correct linker when mixing clang and GNU ld
| * ad119074 ACPI: processor: idle: Check acpi_fetch_acpi_dev() return value
| * cbb445d5 PCI: vmd: Assign VMD IRQ domain before enumeration
| * c2d25fdd sch_htb: make htb_deactivate() idempotent
| * eda741fe codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog()
| * db568d21 sch_drr: make drr_qlen_notify() idempotent
| * dd83b2be btrfs: populate otime when logging an inode item
| * a803d916 KVM: VMX: Flush shadow VMCS on emergency reboot
| * be9692da net/sched: ets: use old 'nbands' while purging unused classes
| * 1980d8d3 net_sched: sch_ets: implement lockless ets_dump()
| * de127abe net/sched: sch_ets: properly init all active DRR list handles
| * 8af89a96 platform/chrome: cros_ec: Unregister notifier in cros_ec_unregister()
| * 9936cb9e platform/chrome: cros_ec: remove unneeded label and if-condition
| * 2ad14054 platform/chrome: cros_ec: Use per-device lockdep key
| * d9e812b9 platform/chrome: cros_ec: Make cros_ec_unregister() return void
| * 79c745be usb: dwc3: imx8mp: fix device leak at unbind
| * 7b3f0e3b bus: mhi: host: Detect events pointing to unexpected TREs
| * cfbd61d6 ata: Fix SATA_MOBILE_LPM_POLICY description in Kconfig
| * 90a53102 usb: musb: omap2430: fix device leak at unbind
| * 1be6c638 usb: musb: omap2430: Convert to platform remove callback returning void
| * 69bea84b mm/ptdump: take the memory hotplug lock inside ptdump_walk_pgd()
| * 3924dab9 NFS: Fix the setting of capabilities when automounting a new filesystem
| * dbadab48 NFS: Create an nfs4_server_set_init_caps() function
| * e60dc74f net: enetc: fix device and OF node leak at probe
| * a39791e4 block: Make REQ_OP_ZONE_FINISH a write operation
| * 1aaa8e9e PCI/ACPI: Fix runtime PM ref imbalance on Hot-Plug Capable ports
| * 5cbf5709 usb: typec: fusb302: cache PD RX state
| * 3467c4eb hv_netvsc: Fix panic during namespace deletion with VF
| * 26eb63f7 smb: server: Fix extension string in ksmbd_extract_shortname()
| * 14fafb39 ALSA: scarlett2: Add retry on -EPROTO from scarlett2_usb_tx()
| * 1b2b7e9d x86/fpu: Delay instruction pointer fixup until after warning
| * 6550b2be smb: client: fix use-after-free in crypt_message when using async crypto
| * ae8428d6 usb: hub: Don't try to recover devices lost during warm reset.
| * 98df81d1 usb: hub: avoid warm port reset during USB3 disconnect
| * 8a0b0221 x86/mce/amd: Add default names for MCA banks and blocks
| * 4e2ee5d1 iio: hid-sensor-prox: Fix incorrect OFFSET calculation
| * 4597cf3a iio: hid-sensor-prox: Restore lost scale assignments
| * c4029044 f2fs: fix to do sanity check on ino and xnid
| * 3a12e18a ARM: 9448/1: Use an absolute path to unified.h in KBUILD_AFLAGS
| * 40704789 arm64/entry: Mask DAIF in cpu_switch_to(), call_on_irq_stack()
| * 6188d61b drm/sched: Remove optimization that causes hang when killing dependent jobs
| * 7c5a13c7 ice: Fix a null pointer dereference in ice_copy_and_init_pkg()
| * 46a7cdcf selftests/memfd: add test for mapping write-sealed memfd read-only
| * 1c296cba mm: reinstate ability to map write-sealed memfd mappings read-only
| * d919658a mm: update memfd seal write check to include F_SEAL_WRITE
| * 27df40ad mm: drop the assumption that VM_SHARED always implies writable
| * 44e2f93f sch_qfq: make qfq_qlen_notify() idempotent
| * a5efc95a sch_hfsc: make hfsc_qlen_notify() idempotent
| * 967955c9 sch_htb: make htb_qlen_notify() idempotent
| * 587558d8 mptcp: pm: kernel: flush: do not reset ADD_ADDR limit
| * 6ddf51fc mptcp: drop skb if MPTCP skb extension allocation fails
| * 3b348c9c ipv6: sr: Fix MAC comparison to be constant-time
| * 3ae272ab net, hsr: reject HSR frame if skb can't hold tag
| * da240d7f drm/amd/display: Don't overwrite dce60_clk_mgr
| * 92c4a1fd drm/amd: Restore cached power limit during resume
| * 5005e4e6 media: venus: venc: Clamp param smaller than 1fps and bigger than 240
| * 48045c17 media: venus: vdec: Clamp param smaller than 1fps and bigger than 240.
| * e6e5e5e5 media: venus: hfi: explicitly release IRQ during teardown
| * ef09b966 media: venus: Add a check for packet size after reading from shared memory
| * f16dc2c8 media: ov2659: Fix memory leaks in ov2659_probe()
| * fbc81e78 media: rainshadow-cec: fix TOCTOU race condition in rain_interrupt()
| * 5427dda1 media: usbtv: Lock resolution while streaming
| * 43677433 media: v4l2-ctrls: Don't reset handler's error in v4l2_ctrl_handler_free()
| * 025617f4 media: imx: fix a potential memory leak in imx_media_csc_scaler_device_init()
| * 5197247d media: hi556: correct the test pattern configuration
| * 6512784d media: gspca: Add bounds checking to firmware parser
| * 90cc9e7d soc/tegra: pmc: Ensure power-domains are in a known state
| * 84ff98c1 jbd2: prevent softlockup in jbd2_log_do_checkpoint()
| * fb454ba9 PCI: endpoint: Fix configfs group removal on driver teardown
| * dc4ffbd5 PCI: endpoint: Fix configfs group list head handling
| * 7d5c223e mtd: rawnand: fsmc: Add missing check after DMA map
| * 93f1be8d mtd: spinand: propagate spinand_wait() errors from spinand_write_page()
| * e26bd46c hwmon: (gsc-hwmon) fix fan pwm setpoint show functions
| * dbe8b436 pwm: imx-tpm: Reset counter if CMOD is 0
| * 6b6fa2a7 wifi: ath11k: fix source ring-buffer corruption
| * 56793428 wifi: brcmsmac: Remove const from tbl_ptr parameter in wlc_lcnphy_common_read_table()
| * 1bb6bb6c zynq_fpga: use sgtable-based scatterlist wrappers
| * 0176a611 ata: libata-scsi: Fix ata_to_sense_error() status handling
| * 48a1795c scsi: mpi3mr: Fix race between config read submit and interrupt completion
| * e1f8a51a ext4: fix hole length calculation overflow in non-extent inodes
| * 66245c16 ext4: use kmalloc_array() for array space allocation
| * 5396de17 ext4: don't try to clear the orphan_present feature block device is r/o
| * 2c9c1565 ext4: fix reserved gdt blocks handling in fsmap
| * e0fad182 ext4: fix fsmap end of range reporting with bigalloc
| * cdfc7b6d ext4: check fast symlink for ea_inode correctly
| * 8a5e6282 Revert "vgacon: Add check for vc_origin address range in vgacon_scroll()"
| * 649383fa lib/crypto: mips/chacha: Fix clang build and remove unneeded byteswap
| * 969668b6 vt: defkeymap: Map keycodes above 127 to K_HOLE
| * 6b03d59b vt: keyboard: Don't process Unicode characters in K_OFF mode
| * 228c686e bus: mhi: host: Fix endianness of BHI vector table
| * 9d916500 usb: dwc3: meson-g12a: fix device leaks at unbind
| * 332d4a4b usb: gadget: udc: renesas_usb3: fix device leak at unbind
| * f6d79955 usb: atm: cxacru: Merge cxacru_upload_firmware() into cxacru_heavy_init()
| * 5e5ccfdb m68k: Fix lost column on framebuffer debug console
| * 177d3651 cpufreq: armada-8k: Fix off by one in armada_8k_cpufreq_free_table()
| * 68c4613e serial: 8250: fix panic due to PSLVERR
| * 08e12045 HID: magicmouse: avoid setting up battery timer when not needed
| * 123cf618 media: uvcvideo: Do not mark valid metadata as invalid
| * 8343f3fe media: uvcvideo: Fix 1-byte out-of-bounds read in uvc_parse_format()
| * f249d32b mm/kmemleak: avoid deadlock by moving pr_warn() outside kmemleak_lock
| * a04de4c4 mm/kmemleak: avoid soft lockup in __kmemleak_do_cleanup()
| * d06e119a parisc: Makefile: fix a typo in palo.conf
| * 078e62bf fbdev: Fix vmalloc out-of-bounds write in fast_imageblit
| * fa086b13 btrfs: do not allow relocation of partially dropped subvolumes
| * 8563ac0b btrfs: fix log tree replay failure due to file with 0 links and extents
| * fa6e0cc6 cdc-acm: fix race between initial clearing halt and open
| * 6eb63a71 thunderbolt: Fix copy+paste error in match_service_id()
| * d85fac87 comedi: fix race between polling and detaching
| * 56b9177f usb: typec: ucsi: Update power_supply on power role change
| * 030b156e misc: rtsx: usb: Ensure mmc child device is active when card is present
| * 058ad2b7 usb: core: config: Prevent OOB read in SS endpoint companion parsing
| * 91789de2 ext4: fix largest free orders lists corruption on mb_optimize_scan switch
| * 3b6de89a drm/amdgpu: fix incorrect vm flags to map bo
| * 30b14a93 ASoC: fsl_sai: replace regmap_write with regmap_update_bits
| * 780ce475 ASoC: soc-dai.h: merge DAI call back functions into ops
| * 4f60001a ASoC: soc-dai.c: add missing flag check at snd_soc_pcm_dai_probe()
| * 87c474a6 scsi: lpfc: Remove redundant assignment to avoid memory leak
| * 48170130 rtc: ds1307: remove clear of oscillator stop flag (OSF) in probe
| * 4f783333 pNFS: Fix uninited ptr deref in block/scsi layout
| * f47b0662 pNFS: Handle RPC size limit for layoutcommits
| * 1ba621a6 pNFS: Fix disk addr range check in block/scsi layout
| * c8dea439 pNFS: Fix stripe mapping in block/scsi layout
| * 8b3ce085 block: avoid possible overflow for chunk_sectors check in blk_stack_limits()
| * 53acbc94 net: phy: smsc: add proper reset flags for LAN8710A
| * dc826121 ipmi: Fix strcpy source and destination the same
| * a12feec5 kconfig: lxdialog: fix 'space' to (de)select options
| * f7d9f071 kconfig: gconf: fix potential memory leak in renderer_edited()
| * 28498cf3 kconfig: gconf: avoid hardcoding model2 in on_treeview2_cursor_changed()
| * 19b94618 ipmi: Use dev_warn_ratelimited() for incorrect message warnings
| * 2b4aa66f scsi: aacraid: Stop using PCI_IRQ_AFFINITY
| * 2e24d269 scsi: target: core: Generate correct identifiers for PR OUT transport IDs
| * 237edd28 scsi: Fix sas_user_scan() to handle wildcard and multi-channel scans
| * e008120a kconfig: nconf: Ensure null termination where strncpy is used
| * a73ee10c kconfig: lxdialog: replace strcpy() with strncpy() in inputbox.c
| * 344ef2a6 i2c: Force DLL0945 touchpad i2c freq to 100khz
| * 3963ecbd dm-mpath: don't print the "loaded" message if registering fails
| * 6f83cf2e i3c: don't fail if GETHDRCAP is unsupported
| * ce319518 rtc: ds1307: handle oscillator stop flag (OSF) for ds1341
| * 758b8e34 i3c: add missing include to internal header
| * b506af24 md: dm-zoned-target: Initialize return variable r to avoid uninitialized use
| * e6f44cd7 crypto: octeontx2 - add timeout for load_fvc completion poll
| * eb605947 media: uvcvideo: Fix bandwidth issue for Alcor camera
| * 17b30e5d media: dvb-frontends: w7090p: fix null-ptr-deref in w7090p_tuner_write_serpar and w7090p_tuner_read_serpar
| * 529fd559 media: dvb-frontends: dib7090p: fix null-ptr-deref in dib7090p_rw_on_apb()
| * e06e7065 media: usb: hdpvr: disable zero-length read messages
| * aef1b717 media: tc358743: Increase FIFO trigger level to 374
| * 21ba26a8 media: tc358743: Return an appropriate colorspace from tc358743_set_fmt
| * a6ccbe03 media: tc358743: Check I2C succeeded during probe
| * 2e82f9a5 pinctrl: stm32: Manage irq affinity settings
| * 0de080a0 scsi: mpt3sas: Correctly handle ATA device errors
| * 5e25ee1e scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure
| * c16984bc RDMA/core: reduce stack using in nldev_stat_get_doit()
| * 9d3211cb RDMA: hfi1: fix possible divide-by-zero in find_hw_thread_mask()
| * a8c0dc45 leds: leds-lp50xx: Handle reg to get correct multi_index
| * b6a9cc99 media: v4l2-common: Reduce warnings about missing V4L2_CID_LINK_FREQ control
| * bd90dbd1 MIPS: Don't crash in stack_top() for tasks without ABI or vDSO
| * 1467a758 jfs: upper bound check of tree index in dbAllocAG
| * 9ad054cd jfs: Regular file corruption check
| * 8ed72759 jfs: truncate good inode pages when hard link is 0
| * ba024d92 scsi: bfa: Double-free fix
| * f5de907f watchdog: iTCO_wdt: Report error if timeout configuration fails
| * 90c1295d MIPS: vpe-mt: add missing prototypes for vpe_{alloc,start,stop,free}
| * e9849ca6 watchdog: dw_wdt: Fix default timeout
| * dacfd8cf fs/orangefs: use snprintf() instead of sprintf()
| * fd5aad08 scsi: libiscsi: Initialize iscsi_conn->dd_data only if memory is allocated
| * 7f322c12 ext4: do not BUG when INLINE_DATA_FL lacks system.data xattr
| * 79ec8dab crypto: hisilicon/hpre - fix dma unmap sequence
| * b06a3c55 cifs: Fix calling CIFSFindFirst() for root path without msearch
| * 8e6932ee watchdog: sbsa: Adjust keepalive timeout to avoid MediaTek WS0 race condition
| * 1117260a vhost: fail early when __vhost_add_used() fails
| * 6ef6e42d net: dsa: b53: fix IP_MULTICAST_CTRL on BCM5325
| * 77e56dbc drm/ttm: Respect the shrinker core free target
| * 65a7b771 uapi: in6: restore visibility of most IPv6 socket options
| * 49586908 drm/ttm: Should to return the evict error
| * 6716de17 net: ncsi: Fix buffer overflow in fetching version id
| * 56c48372 wifi: rtlwifi: fix possible skb memory leak in _rtl_pci_init_one_rxdesc()
| * f531abcd net: dsa: b53: prevent SWITCH_CTRL access on BCM5325
| * bae08d48 net: dsa: b53: prevent DIS_LEARNING access on BCM5325
| * 9874ad64 net: dsa: b53: prevent GMII_PORT_OVERRIDE_CTRL access on BCM5325
| * 36bec406 net: dsa: b53: fix b53_imp_vlan_setup for BCM5325
| * 392aa29d gve: Return error for unknown admin queue command
| * 452de579 net: vlan: Replace BUG() with WARN_ON_ONCE() in vlan_dev_* stubs
| * d49af619 drm/amd: Allow printing VanGogh OD SCLK levels without setting dpm to manual
| * 851c50b3 dpaa_eth: don't use fixed_phy_change_carrier
| * 6de7a779 wifi: iwlegacy: Check rate_idx range after addition
| * 7cc4b7c2 netmem: fix skb_frag_address_safe with unreadable skbs
| * 74517260 wifi: rtlwifi: fix possible skb memory leak in `_rtl_pci_rx_interrupt()`.
| * e80b670b drm/amd/display: Fix 'failed to blank crtc!'
| * 6fed7311 wifi: iwlwifi: fw: Fix possible memory leak in iwl_fw_dbg_collect
| * ffbf9699 wifi: iwlwifi: dvm: fix potential overflow in rs_fill_link_cmd()
| * 85172638 drm/amd/display: Separate set_gsl from set_gsl_source_select
| * e03f9c0b net: fec: allow disable coalescing
| * 03dd5845 net: atlantic: add set_power to fw_ops for atl2 to fix wol
| * 833e0e67 net: thunderbolt: Fix the parameter passing of tb_xdomain_enable_paths()/tb_xdomain_disable_paths()
| * 39117551 drm/msm: use trylock for debugfs
| * 834c1e80 ipv6: mcast: Check inet6_dev->dead under idev->mc_lock in __ipv6_dev_mc_inc().
| * e22b1ee8 (powerpc/512) Fix possible `dma_unmap_single()` on uninitialized pointer
| * 599dcdff wifi: mac80211: don't complete management TX on SAE commit
| * bb9a6585 s390/stp: Remove udelay from stp_sync_clock()
| * 13ff80ef wifi: iwlwifi: mvm: fix scan request validation
| * ac31ba74 sched/deadline: Fix accounting after global limits change
| * 037d8560 net: thunderx: Fix format-truncation warning in bgx_acpi_match_id()
| * c965a0f7 net: ipv4: fix incorrect MTU in broadcast routes
| * 7fcb3d1a wifi: cfg80211: Fix interface type validation
| * 15b05f07 net: mctp: Prevent duplicate binds
| * 0ad84d62 rcu: Protect ->defer_qs_iw_pending from data race
| * a8b4ecb1 arm64: Mark kernel as tainted on SAE and SError panic
| * 0f2d1bcd net/mlx5e: Properly access RCU protected qdisc_sleeping variable
| * 8769e2cd net: ag71xx: Add missing check after DMA map
| * 44746e44 et131x: Add missing check after DMA map
| * 9152c8dc be2net: Use correct byte order and format string for TCP seq and ack_seq
| * 5e18232d s390/time: Use monotonic clock in get_cycles()
| * 39968a6d wifi: cfg80211: reject HTC bit for management frames
| * 72632af7 ktest.pl: Prevent recursion of default variable options
| * 2fc78b1f xen/netfront: Fix TX response spurious interrupts
| * a0c4744b ASoC: codecs: rt5640: Retry DEVICE_ID verification
| * 2191a2f8 iio: adc: ad7768-1: Ensure SYNC_IN pulse minimum timing requirement
| * 97e1d2a1 ALSA: usb-audio: Avoid precedence issues in mixer_quirks macros
| * 77477121 ALSA: pcm: Rewrite recalculate_boundary() to avoid costly loop
| * c2dacfe4 ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control
| * a73ccab0 platform/chrome: cros_ec_typec: Defer probe on missing EC parent
| * 93d700f5 platform/x86: thinkpad_acpi: Handle KCOV __init vs inline mismatches
| * ddb96ab1 pm: cpupower: Fix the snapshot-order of tsc,mperf, clock in mperf_stop()
| * ffa551a3 usb: core: usb_submit_urb: downgrade type check
| * 5c7fda82 usb: typec: intel_pmc_mux: Defer probe if SCU IPC isn't present
| * 82ba7b8c ASoC: core: Check for rtd == NULL in snd_soc_remove_pcm_runtime()
| * afd0dd1b ALSA: intel8x0: Fix incorrect codec index usage in mixer for ICH4
| * 866fcfc0 ASoC: hdac_hdmi: Rate limit logging on connection and disconnection
| * b3f0f92a x86/bugs: Avoid warning when overriding return thunk
| * 921592ff mmc: rtsx_usb_sdmmc: Fix error-path in sd_set_power_mode()
| * 345df19a reset: brcmstb: Enable reset drivers for ARCH_BCM2835
| * 932d27bc pps: clients: gpio: fix interrupt handling order in remove path
| * e8d16404 ACPI: APEI: GHES: add TAINT_MACHINE_CHECK on GHES panic path
| * 18aed89a mmc: sdhci-msm: Ensure SD card power isn't ON when card removed
| * 0c48c9fe ACPI: processor: fix acpi_object initialization
| * b287704f PM: sleep: console: Fix the black screen issue
| * 7121241b thermal: sysfs: Return ENODATA instead of EAGAIN for reads
| * c2b88466 PM: runtime: Clear power.needs_force_resume in pm_runtime_reinit()
| * 2bcc6a6c ACPI: PRM: Reduce unnecessary printing to avoid user confusion
| * e453c89e selftests: tracing: Use mutex_unlock for testing glob filter
| * 2499b0ac ARM: tegra: Use I/O memcpy to write to IRAM
| * aeb7edd5 gpio: tps65912: check the return value of regmap_update_bits()
| * 4dd40dfb tools/nolibc: define time_t in terms of __kernel_old_time_t
| * 5b49e57e thermal/drivers/qcom-spmi-temp-alarm: Enable stage 2 shutdown when required
| * 8cac2bd3 ASoC: soc-dapm: set bias_level if snd_soc_dapm_set_bias_level() was successed
| * 472af4d4 EDAC/synopsys: Clear the ECC counters on init
| * 2a65a747 PM / devfreq: governor: Replace sscanf() with kstrtoul() in set_freq_store()
| * c0726d1e ARM: rockchip: fix kernel hang during smp initialization
| * 4d0b2d5a cpufreq: Exit governor when failed to start old governor
| * 6c3ae3c4 gpio: wcd934x: check the return value of regmap_update_bits()
| * bade491e usb: xhci: Avoid showing errors during surprise removal
| * c4ba0c25 usb: xhci: Set avg_trb_len = 8 for EP0 during Address Device Command
| * 04e615da usb: xhci: Avoid showing warnings for dying controller
| * 5a164a72 usb: typec: ucsi: psy: Set current max to 100mA for BC 1.2 and Default
| * cc1613a4 selftests/futex: Define SYS_futex on 32-bit architectures with 64-bit time_t
| * be45f1b5 cpufreq: CPPC: Mark driver with NEED_UPDATE_LIMITS flag
| * f3ab168d usb: xhci: print xhci->xhc_state when queue_command failed
| * c8704dca securityfs: don't pin dentries twice, once is enough...
| * d167a43b ext2: Handle fiemap on empty files to prevent EINVAL
| * 5a77f371 fs/ntfs3: correctly create symlink for relative path
| * bde58c15 fs/ntfs3: Add sanity check for file name
| * 11388106 ata: libata-sata: Disallow changing LPM state if not supported
| * 11b56734 better lockdep annotations for simple_recursive_removal()
| * ad5f53b9 hfs: fix not erasing deleted b-tree node issue
| * 84ef8dd3 drbd: add missing kref_get in handle_write_conflicts
| * dc83df48 udf: Verify partition map count
| * 9d5012ff smb/server: avoid deadlock when linking with ReplaceIfExists
| * f8d55c91 arm64: Handle KCOV __init vs inline mismatches
| * 03cd1db1 hfsplus: don't use BUG_ON() in hfsplus_create_attributes_file()
| * ccf0ad56 hfsplus: fix slab-out-of-bounds read in hfsplus_uni2asc()
| * 5ab59229 hfsplus: fix slab-out-of-bounds in hfsplus_bnode_read()
| * a1a60e79 hfs: fix slab-out-of-bounds in hfs_bnode_read()
| * 24032599 ptp: prevent possible ABBA deadlock in ptp_clock_freerun()
| * 55b12736 cpuidle: governors: menu: Avoid using invalid recent intervals data
| * 8680e712 intel_idle: Allow loading ACPI tables for any family
| * cd0e92bb sctp: linearize cloned gso packets in sctp_rcv
| * 19b909a4 netfilter: ctnetlink: fix refcount leak on table dump
| * a47767e2 udp: also consider secpath when evaluating ipsec use for checksumming
| * edc065c1 ACPI: processor: perflib: Move problematic pr->performance check
| * 40f8fea7 ACPI: processor: perflib: Fix initial _PPC limit application
| * 289d1d1f Documentation: ACPI: Fix parent device references
| * 71379495 eventpoll: Fix semi-unbounded recursion
| * 74952808 fs: Prevent file descriptor table allocations exceeding INT_MAX
| * 9620376f sunvdc: Balance device refcount in vdc_port_mpgroup_check
| * 6fd42124 NFSD: detect mismatch of file handle and delegation stateid in OPEN op
| * f3aac6cf nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm()
| * 75947d32 net: usb: asix_devices: add phy_mask for ax88772 mdio bus
| * 1b35f7ee net: dpaa: fix device leak when querying time stamp info
| * f95f0deb net: gianfar: fix device leak when querying time stamp info
| * f324959a netlink: avoid infinite retry looping in netlink_unicast()
| * 286b5be7 gpio: virtio: Fix config space reading.
| * 275e3753 ALSA: usb-audio: Validate UAC3 cluster segment descriptors
| * f03418bb ALSA: usb-audio: Validate UAC3 power domain descriptors, too
| * b0878a23 io_uring: don't use int for ABI
| * 8afb22aa usb: gadget : fix use-after-free in composite_dev_cleanup()
| * 66b1f501 mm/hmm: move pmd_to_hmm_pfn_flags() to the respective #ifdeffery
| * 42ade829 MIPS: mm: tlb-r4k: Uniquify TLB entries on init
| * e0531094 ALSA: intel_hdmi: Fix off-by-one error in __hdmi_lpe_audio_probe()
| * 1946a6a9 net: usbnet: Fix the wrong netif_carrier_on() call
| * e2a4325c net: usbnet: Avoid potential RCU stall on LINK_CHANGE event
| * b4b40bab USB: serial: option: add Foxconn T99W709
| * cf867047 vsock: Do not allow binding to VMADDR_PORT_ANY
| * ba225703 net/packet: fix a race in packet_set_ring() and packet_notifier()
| * 2675f405 selftests/perf_events: Add a mmap() correctness test
| * 3bd518cc perf/core: Prevent VMA split of buffer mappings
| * de85e725 perf/core: Exit early on perf_mmap() fail
| * 899d253a perf/core: Don't leak AUX buffer refcount on allocation failure
| * ce0481ac pptp: fix pptp_xmit() error path
| * 22942907 smb: client: let recv_done() cleanup before notifying the callers.
| * 1f6525e7 smb: server: let recv_done() avoid touching data_transfer after cleanup/move
| * 87fc5ce6 smb: server: let recv_done() consistently call put_recvmsg/smb_direct_disconnect_rdma_connection
| * fb3854e7 smb: server: make sure we call ib_dma_unmap_single() only if we called ib_dma_map_single already
| * 484dea96 smb: server: remove separate empty_recvmsg_queue
| * 61a58a04 ALSA: hda/ca0132: Fix missing error handling in ca0132_alt_select_out()
| * f80b34eb benet: fix BUG when creating VFs
| * 4c102222 net: drop UFO packets in udp_rcv_segment()
| * 09ff062b ipv6: reject malicious packets in ipv6_gso_segment()
| * d0e1d47e net/mlx5: Correctly set gso_segs when LRO is used
| * 5de7513f pptp: ensure minimal skb length in pptp_xmit()
| * 10c803de phy: mscc: Fix parsing of unicast frames
| * 0a010879 netpoll: prevent hanging NAPI when netcons gets enabled
| * 19b83e31 NFS: Fixup allocation flags for nfsiod's __GFP_NORETRY
| * 461125e8 XArray: Add calls to might_alloc()
| * b23afb4a NFSv4.2: another fix for listxattr
| * 3570ef5c NFS: Fix filehandle bounds checking in nfs_fh_to_dentry()
| * 70bf3208 pNFS/flexfiles: don't attempt pnfs on fatal DS errors
| * 2ec8ec57 PCI: pnv_php: Fix surprise plug detection and recovery
| * f56e004b powerpc/eeh: Make EEH driver device hotplug safe
| * efabe0bd powerpc/eeh: Rely on dev->link_active_reporting
| * cb1ea063 powerpc/eeh: Export eeh_unfreeze_pe()
| * 12656cda PCI: pnv_php: Work around switches with broken presence detection
| * 912e2002 PCI: pnv_php: Clean up allocated IRQs on unplug
| * 06e25dfe kconfig: qconf: fix ConfigList::updateListAllforAll()
| * a30c34e6 scsi: ufs: core: Use link recovery when h8 exit fails during runtime resume
| * 0967189e scsi: mpt3sas: Fix a fw_event memory leak
| * 666b7cf6 f2fs: fix to avoid out-of-boundary access in devs.path
| * 5cd99d5a f2fs: fix to avoid panic in f2fs_evict_inode
| * 1edf6827 f2fs: fix to avoid UAF in f2fs_sync_inode_meta()
| * fba3a1c1 f2fs: doc: fix wrong quota mount option description
| * 08e8ab00 f2fs: fix KMSAN uninit-value in extent_info usage
| * 37f3a111 rtc: rv3028: fix incorrect maximum clock rate handling
| * 2ed0bae1 rtc: pcf8563: fix incorrect maximum clock rate handling
| * facb6e7c rtc: pcf85063: fix incorrect maximum clock rate handling
| * 452aed10 rtc: hym8563: fix incorrect maximum clock rate handling
| * d62a7978 rtc: ds1307: fix incorrect maximum clock rate handling
| * e9293fd0 ucount: fix atomic_long_inc_below() argument type
| * 0b973c5e module: Restore the moduleparam prefix length check
| * 69e83e55 apparmor: ensure WB_HISTORY_SIZE value is a power of 2
| * 74a87aca bpf: Check flow_dissector ctx accesses are aligned
| * 27354cbd vhost-scsi: Fix log flooding with target does not exist errors
| * aed9a4e4 mtd: rawnand: atmel: set pmecc data setup time
| * 62f7cc11 mtd: rawnand: rockchip: Add missing check after DMA map
| * 15d0e92d mtd: rawnand: atmel: Fix dma_mapping_error() address
| * 47bf04a5 jfs: fix metapage reference count leak in dbAllocCtl
| * cca8f5a3 fbdev: imxfb: Check fb_add_videomode to prevent null-ptr-deref
| * 52e1dc93 crypto: qat - fix seq_file position update in adf_ring_next()
| * 6ff44d06 sh: Do not use hyphen in exported variable name
| * 2bba4bdf dmaengine: nbpfaxi: Add missing check after DMA map
| * c94f4c6e dmaengine: mv_xor: Fix missing check after DMA map and missing unmap
| * bbe6cd4d fs/orangefs: Allow 2 more characters in do_c_string()
| * d2016efb PCI: endpoint: pci-epf-vntb: Fix the incorrect usage of __iomem attribute
| * d54f6bc4 soundwire: stream: restore params when prepare ports fail
| * cbdd905a crypto: img-hash - Fix dma_unmap_sg() nents value
| * 5867d62d crypto: keembay - Fix dma_unmap_sg() nents value
| * 0b777a59 hwrng: mtk - handle devm_pm_runtime_enable errors
| * 7a9ee7b9 watchdog: ziirave_wdt: check record length in ziirave_firm_verify()
| * d084ff4b scsi: isci: Fix dma_unmap_sg() nents value
| * 999bb730 scsi: mvsas: Fix dma_unmap_sg() nents value
| * 1c071797 scsi: ibmvscsi_tgt: Fix dma_unmap_sg() nents value
| * 896c8ac7 clk: sunxi-ng: v3s: Fix de clock definition
| * 2ab3f20f perf tests bp_account: Fix leaked file descriptor
| * b1b1bfb8 kernel: trace: preemptirq_delay_test: use offstack cpu mask
| * b6fbac6a RDMA/hns: Fix -Wframe-larger-than issue
| * 20c0ed8d crypto: ccp - Fix crash when rebind ccp device for ccp.ko
| * f25a1c88 crypto: inside-secure - Fix `dma_unmap_sg()` nents value
| * 9f13f09c perf sched: Fix memory leaks for evsel->priv in timehist
| * 84cd7256 clk: clk-axi-clkgen: fix fpfd_max frequency for zynq
| * 7b5365d1 pinctrl: sunxi: Fix memory leak on krealloc failure
| * 0369e205 PCI: endpoint: pci-epf-vntb: Return -ENOENT if pci_epc_get_next_free_bar() fails
| * 9ed082a7 power: supply: max14577: Handle NULL pdata when CONFIG_OF is not set
| * 4ebbb910 power: supply: cpcap-charger: Fix null check for power_supply_get_by_name
| * 7e903da7 clk: xilinx: vcu: unregister pll_post only if registered correctly
| * c62c0b6d media: v4l2-ctrls: Fix H264 SEPARATE_COLOUR_PLANE check
| * 2adc945b clk: davinci: Add NULL check in davinci_lpsc_clk_register()
| * e86cc0b9 mtd: fix possible integer overflow in erase_xfer()
| * 9745eecf crypto: marvell/cesa - Fix engine load inaccuracy
| * dcd17f4f PCI: rockchip-host: Fix "Unexpected Completion" log message
| * 2e34470f vrf: Drop existing dst reference in vrf_ip6_input_dst
| * 5e0275f8 selftests: rtnetlink.sh: remove esp4_offload after test
| * b10cfa2d netfilter: xt_nfacct: don't assume acct name is null-terminated
| * bfc8a827 can: kvaser_usb: Assign netdev.dev_port based on device channel index
| * 0721467b can: kvaser_pciefd: Store device channel index
| * 19859cc1 wifi: brcmfmac: fix P2P discovery failure in P2P peer due to missing P2P IE
| * 696994a1 Reapply "wifi: mac80211: Update skb's control block key in ieee80211_tx_dequeue()"
| * 9b096abd wifi: mac80211: Check 802.11 encaps offloading in ieee80211_tx_h_select_key()
| * fe1ee935 wifi: mac80211: Don't call fq_flow_idx() for management frames
| * d5689053 mwl8k: Add missing check after DMA map
| * da1be393 wifi: rtl8xxxu: Fix RX skb size for aggregation disabled
| * 7c537709 xen/gntdev: remove struct gntdev_copy_batch from stack
| * 9cd15370 net_sched: act_ctinfo: use atomic64_t for three counters
| * cab28099 net/sched: Restrict conditions for adding duplicating netems to qdisc tree
| * 863b1c70 um: rtc: Avoid shadowing err in uml_rtc_start()
| * 8d83f714 arch: powerpc: defconfig: Drop obsolete CONFIG_NET_CLS_TCINDEX
| * 5351b8a4 netfilter: nf_tables: adjust lockdep assertions handling
| * 7a43cb57 drm/amd/pm/powerplay/hwmgr/smu_helper: fix order of mask and value
| * 8f35daf3 m68k: Don't unregister boot console needlessly
| * 9053a69a net/mlx5: Check device memory pointer before usage
| * f5a27666 tcp: fix tcp_ofo_queue() to avoid including too much DUP SACK range
| * eff3bb53 wifi: ath11k: clear initialized flag for deinit-ed srng lists
| * 2e9f85ee iwlwifi: Add missing check for alloc_ordered_workqueue
| * d76ca835 wifi: iwlwifi: Fix memory leak in iwl_mvm_init()
| * c73c773b wifi: rtl818x: Kill URBs before clearing tx status queue
| * 9a0624ff caif: reduce stack size, again
| * a7caec2a bpftool: Fix memory leak in dump_xx_nlmsg on realloc failure
| * 73fc5d04 bpf, ktls: Fix data corruption when using bpf_msg_pop_data() in ktls
| * c0efe4ea bpf, sockmap: Fix psock incorrectly pointing to sk
| * d699e4e6 drm/rockchip: cleanup fb when drm_gem_fb_afbc_init failed
| * 4bf71215 selftests/tracing: Fix false failure of subsystem event test
| * 3afd514c staging: nvec: Fix incorrect null termination of battery manufacturer
| * f7c2de49 samples: mei: Fix building on musl libc
| * 90918264 cpufreq: Init policy->rwsem before it may be possibly used
| * d9c7fc2c cpufreq: Initialize cpufreq-based frequency-invariance later
| * 997c36d1 cpufreq: intel_pstate: Always use HWP_DESIRED_PERF in passive mode
| * f0479e87 PM / devfreq: Check governor before using governor->name
| * 35a490ea arm64: dts: imx8mn-beacon: Fix HS400 USDHC clock speed
| * 10c0fbd5 arm64: dts: imx8mm-beacon: Fix HS400 USDHC clock speed
| * 0008ec69 ARM: dts: imx6ul-kontron-bl-common: Fix RTS polarity for RS485 interface
| * a7892569 arm: dts: ti: omap: Fixup pinheader typo
| * ae08cd98 usb: early: xhci-dbc: Fix early_ioremap leak
| * c6fdcd40 Revert "vmci: Prevent the dispatching of uninitialized payloads"
| * a891b456 pps: fix poll support
| * a85dc838 vmci: Prevent the dispatching of uninitialized payloads
| * 3290f62f staging: fbtft: fix potential memory leak in fbtft_framebuffer_alloc()
| * 76f1842c usb: misc: apple-mfi-fastcharge: Make power supply names unique
| * 4986c1e8 ARM: dts: vfxxx: Correctly use two tuples for timer address
| * b6b55119 selftests: Fix errno checking in syscall_user_dispatch test
| * cfb5e558 ASoC: ops: dynamically allocate struct snd_ctl_elem_value
| * fe18d9f1 ASoC: soc-dai: tidyup return value of snd_soc_xlate_tdm_slot_mask()
| * bec8109f Revert "fs/ntfs3: Replace inode_trylock with inode_lock"
| * 14922f0c hfsplus: remove mutex_lock check in hfsplus_free_extents
| * 92c50b2d fs_context: fix parameter name in infofc() macro
| * 7becf31e ASoC: Intel: fix SND_SOC_SOF dependencies
| * c845b2e7 ethernet: intel: fix building with large NR_CPUS
| * 6dd7e3fc usb: phy: mxs: disconnect line when USB charger is attached
| * c53baa6a usb: chipidea: add USB PHY event
| * 6005cea1 ALSA: hda: Add missing NVIDIA HDA codec IDs
| * 988be12b comedi: comedi_test: Fix possible deletion of uninitialized timers
| * fa6ce4a9 jfs: reject on-disk inodes of an unsupported type
| * 6b80d98a x86/bugs: Fix use of possibly uninit value in amd_check_tsa_microcode()
| * 6d40dd35 usb: typec: tcpm: apply vbus before data bringup in tcpm_src_attach
| * 92370ce7 usb: typec: tcpm: allow switching to mode accessory to mux properly
| * 2f7fbb19 usb: typec: tcpm: allow to use sink in accessory mode
| * 4991f824 mm/zsmalloc: do not pass __GFP_MOVABLE if CONFIG_COMPACTION=n
| * 98872a93 nilfs2: reject invalid file types when reading inodes
| * 1d6f0270 gve: Fix stuck TX queue for DQ queue format
| * ae07af3d e1000e: ignore uninitialized checksum word on tgp
| * 30e2871b e1000e: disregard NVM checksum on tgp when valid checksum bit is not set
| * 8aa46b24 dpaa2-switch: Fix device reference count leak in MAC endpoint handling
| * 30f7d3d9 dpaa2-eth: Fix device reference count leak in MAC endpoint handling
| * 094a94e3 ALSA: hda/realtek - Add mute LED support for HP Pavilion 15-eg0xxx
| * 83f64bb3 bus: fsl-mc: Fix potential double device reference in fsl_mc_get_endpoint()
| * c742b063 i2c: virtio: Avoid hang by using interruptible completion wait
| * d05ec13a i2c: qup: jump out of the loop in case of timeout
| * ec1aa39e platform/x86: ideapad-laptop: Fix kbd backlight not remembered among boots
| * a8e8b373 net: hns3: fixed vf get max channels bug
| * d739b876 net: hns3: disable interrupt when ptp init failed
| * f1d94304 net: hns3: fix concurrent setting vlan filter issue
| * ab905a2e net/sched: sch_qfq: Avoid triggering might_sleep in atomic context in qfq_delete_class
| * 186942d1 net: appletalk: Fix use-after-free in AARP proxy probe
| * 4640c4dc i40e: report VF tx_dropped with tx_errors instead of tx_discards
| * 8d9184cc i40e: Add rx_missed_errors for buffer exhaustion
| * c8aefc59 regmap: fix potential memory leak of regmap_bus
| * cda04854 interconnect: qcom: sc7280: Add missing num_links to xm_pcie3_1 node
| * 532fbdc7 RDMA/core: Rate limit GID cache warning messages
| * ca9bef9b regulator: core: fix NULL dereference on unbind due to stale coupling data
| * 664e5a6f Input: gpio-keys - fix a sleep while atomic with PREEMPT_RT
* | 7d34e603 Revert "sched: Add wrapper for get_wchan() to keep task blocked"
* | a7137fe7 Revert "x86: Fix __get_wchan() for !STACKTRACE"
* | 64f4f08a Revert "x86: Pin task-stack in __get_wchan()"
* | c30f9dec Merge b62c8ee4 ("x86: Pin task-stack in __get_wchan()") into android14-5.15-lts
|\|
| * b62c8ee4 x86: Pin task-stack in __get_wchan()
| * e43191f9 x86: Fix __get_wchan() for !STACKTRACE
* | d9c9d34a Merge 5ce1264b ("sched: Add wrapper for get_wchan() to keep task blocked") into android14-5.15-lts
|\|
| * 5ce1264b sched: Add wrapper for get_wchan() to keep task blocked
* | 166af4de Merge b52e53a4 ("x86: Fix get_wchan() to support the ORC unwinder") into android14-5.15-lts
|\|
| * b52e53a4 x86: Fix get_wchan() to support the ORC unwinder
| * 4dba4433 bpf, sockmap: Fix panic when calling skb_linearize
| * 7722142d platform/x86: think-lmi: Fix kobject cleanup
| * f110c609 powercap: intel_rapl: Do not change CLAMPING bit if ENABLE bit cannot be changed
| * 7d2c4a0f mm/vmalloc: leave lazy MMU mode on PTE mapping error
| * ee093910 ASoC: fsl_sai: Force a software reset when starting in consumer mode
| * d2ab0bb4 usb: dwc3: qcom: Don't leave BCR asserted
| * 5e2851d5 usb: musb: fix gadget state on disconnect
| * 8594a4e8 usb: musb: Add and use inline functions musb_{get,set}_state
| * 7a717883 usb: hub: Fix flushing of delayed work used for post resume purposes
| * 1a6fee8d usb: hub: Fix flushing and scheduling of delayed work that tunes runtime pm
| * e38ca702 usb: hub: fix detection of high tier USB3 devices behind suspended hubs
* | bb807623 Revert "sched: Change nr_uninterruptible type to unsigned long"
* | 1f748b88 Revert "net: vlan: fix VLAN 0 refcount imbalance of toggling filtering during runtime"
* | b27f515f Merge 36fecd74 ("clone_private_mnt(): make sure that caller has CAP_SYS_ADMIN in the right userns") into android14-5.15-lts
|\|
| * 36fecd74 clone_private_mnt(): make sure that caller has CAP_SYS_ADMIN in the right userns
| * 9ef510db sched: Change nr_uninterruptible type to unsigned long
| * 850226ae net/sched: Return NULL when htb_lookup_leaf encounters an empty rbtree
| * 2a4b9df3 net: bridge: Do not offload IGMP/MLD messages
| * 047b61a2 net: vlan: fix VLAN 0 refcount imbalance of toggling filtering during runtime
| * 9aa9261b Bluetooth: L2CAP: Fix attempting to adjust outgoing MTU
| * 6e4eec86 ipv6: mcast: Delay put pmc->idev in mld_del_delrec()
| * 984a2fb6 net/mlx5: Correctly set gso_size when LRO is used
| * 88576404 net/mlx5e: Add support to klm_umr_wqe
| * 9737501f lib: bitmap: Introduce node-aware alloc API
| * ce2f1b5d Bluetooth: SMP: Fix using HCI_ERROR_REMOTE_USER_TERM on timeout
| * edf3a182 Bluetooth: SMP: If an unallowed command is received consider it a failure
| * 3a4eca2a Bluetooth: Fix null-ptr-deref in l2cap_sock_resume_cb()
| * a6a238c4 usb: net: sierra: check for no status endpoint
| * 4eb5cc48 hwmon: (corsair-cpro) Validate the size of the received input buffer
| * 22bff803 selftests: net: increase inter-packet timeout in udpgro.sh
| * db262843 selftests: udpgro: report error when receive failed
| * 46c321f4 nvme: fix misaccounting of nvme-mpath inflight I/O
| * 4256a483 smb: client: fix use-after-free in cifs_oplock_break
| * 4b5022b6 pinctrl: mediatek: moore: check if pin_desc is valid before use
| * 8ba6c236 rpl: Fix use-after-free in rpl_do_srh_inline().
| * c6df7940 net/sched: sch_qfq: Fix race condition on qfq_aggregate
| * ca9850df net: emaclite: Fix missing pointer increment in aligned_read()
| * 97303e54 bpf: Reject %p% format string in bprintf-like helpers
| * 020eed56 comedi: Fix initialization of data for instructions that write to subdevice
| * c53570e6 comedi: Fix use of uninitialized data in insn_rw_emulate_bits()
| * 75712705 comedi: Fix some signed shift left operations
| * 69dc06b9 comedi: Fail COMEDI_INSNLIST ioctl if n_insns is too large
| * 73f34d60 comedi: das6402: Fix bit shift out of bounds
| * b3c95fa5 comedi: das16m1: Fix bit shift out of bounds
| * c5932153 comedi: aio_iiro_16: Fix bit shift out of bounds
| * 29ef03e5 comedi: pcl812: Fix bit shift out of bounds
| * eda04194 iio: adc: stm32-adc: Fix race in installing chained IRQ handler
| * 2f10149a iio: adc: max1363: Reorder mode_list[] entries
| * 8ff32ec3 iio: adc: max1363: Fix MAX1363_4X_CHANS/MAX1363_8X_CHANS[]
| * 166afe96 soc: aspeed: lpc-snoop: Don't disable channels that aren't enabled
| * fe632e8f soc: aspeed: lpc-snoop: Cleanup resources in stack-order
| * 5fd9150d pmdomain: governor: Consider CPU latency tolerance from pm_domain_cpu_gov
| * ecb1a74e mmc: sdhci_am654: Workaround for Errata i2312
| * 4d6c8f3e mmc: sdhci-pci: Quirk for broken command queuing on Intel GLK-based Positivo models
| * 0886c420 mmc: bcm2835: Fix dma_unmap_sg() nents value
| * 0a8432ef memstick: core: Zero initialize id_reg in h_memstick_read_dev_id()
| * 6ef428a6 isofs: Verify inode mode when loading from disk
| * 24861ef8 dmaengine: nbpfaxi: Fix memory corruption in probe()
| * 052af0c5 af_packet: fix soft lockup issue caused by tpacket_snd()
| * 9e3219d3 af_packet: fix the SO_SNDTIMEO constraint not effective on tpacked_snd()
| * e98c1dfa phonet/pep: Move call to pn_skb_get_dst_sockaddr() earlier in pep_sock_accept()
| * ca60064e tracing: Add down_write(trace_event_sem) when adding trace event
| * f10923b8 HID: core: do not bypass hid_hw_raw_request
| * aefa6e92 HID: core: ensure __hid_request reserves the report ID as the first byte
| * 7fa83d00 HID: core: ensure the allocated report buffer can contain the reserved report ID
| * 6c6ae150 pch_uart: Fix dma_sync_sg_for_device() nents value
| * d83feb28 Input: xpad - set correct controller type for Acer NGR200
| * 8039721d thunderbolt: Fix bit masking in tb_dp_port_set_hops()
| * 0bcdbf95 i2c: stm32: fix the device used for the DMA map
| * 15a87206 usb: gadget: configfs: Fix OOB read on empty string write
| * 76157b52 USB: serial: ftdi_sio: add support for NDI EMGUIDE GEMINI
| * 660b9dc0 USB: serial: option: add Foxconn T99W640
| * d374b477 USB: serial: option: add Telit Cinterion FE910C04 (ECM) composition
| * cdcb0ffd phy: tegra: xusb: Fix unbalanced regulator disable in UTMI PHY mode
* 318f89bd Merge android14-5.15 into android14-5.15-lts

Change-Id: I6d793bdd3d8f1e7a44ac67ce19029a6338b444a0
Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>