Merge tag 'android15-6.6.56_r00' into android15-6.6

This merges up to the 6.6.56 LTS release into android15-6.6.  Included
in here are the following commits:

*   3228553f Merge 6.6.56 into android15-6.6-lts
|\
| * d4576c56 Linux 6.6.56
| * 1e0f6964 Revert "perf callchain: Fix stitch LBR memory leaks"
* | ae4370b5 Revert "perf,x86: avoid missing caller address in stack traces captured in uprobe"
* | ac723e33 Revert "i2c: create debugfs entry per adapter"
* | 988aef38 Revert "i2c: core: Lock address during client device instantiation"
* | ba4a8a45 Merge 6.6.55 into android15-6.6-lts
|\|
| * 9b15f68c Linux 6.6.55
| * e334ae4a perf python: Allow checking for the existence of warning options in clang
| * 3faea781 Revert "ubifs: ubifs_symlink: Fix memleak of inode->i_link in error path"
| * e0aba0c6 null_blk: Fix return value of nullb_device_power_store()
| * e0b065ec drm/amd/display: enable_hpo_dp_link_output: Check link_res->hpo_dp_link_enc before using it
| * 776ebdee perf report: Fix segfault when 'sym' sort key is not used
| * eada63e6 drm/amd/display: Revert Avoid overflow assignment
| * de4841fc crypto: octeontx* - Select CRYPTO_AUTHENC
| * 25613e6d vhost/scsi: null-ptr-dereference in vhost_scsi_get_req()
| * cdf4bbbd rxrpc: Fix a race between socket set up and I/O thread creation
| * b538fefe net: stmmac: move the EST lock to struct stmmac_priv
| * aaadb755 null_blk: fix null-ptr-dereference while configuring 'power' and 'submit_queues'
| * b2b02202 null_blk: Remove usage of the deprecated ida_simple_xx() API
| * 2deb10a9 platform/x86: think-lmi: Fix password opcode ordering for workstations
| * e115c1b5 efi/unaccepted: touch soft lockup during memory accept
| * 50f4b57e drm/bridge: adv7511: fix crash on irq during probe
| * fd4d5cd7 iommufd: Fix protection fault in iommufd_test_syz_conv_iova
| * 69a1e2d9 net: dsa: fix netdev_priv() dereference before check on non-DSA netdevice events
| * 164936b2 netfilter: nf_tables: restore set elements when delete set fails
| * a1bd2a38 netfilter: nf_tables: fix memleak in map from abort path
| * b9077897 ubifs: ubifs_symlink: Fix memleak of inode->i_link in error path
| * 1428da2f Revert "drm/amd/display: Skip Recompute DSC Params if no Stream on Link"
| * d253f716 drm/rockchip: vop: enable VOP_FEATURE_INTERNAL_RGB on RK3066
| * 907717ee btrfs: drop the backref cache during relocation if we commit
| * 4dc6ea8b btrfs: relocation: constify parameters where possible
| * 5ae94c63 btrfs: relocation: return bool from btrfs_should_ignore_reloc_root
| * ce31847f ACPI: battery: Fix possible crash when unregistering a battery hook
| * 2deeb3c7 ACPI: battery: Simplify battery hook locking
| * 712d30f9 clk: qcom: gcc-sc8180x: Add GPLL9 support
| * 1c723d78 r8169: add tally counter fields added with RTL8125
| * f02fcb72 r8169: Fix spelling mistake: "tx_underun" -> "tx_underrun"
| * 736da424 iio: pressure: bmp280: Fix waiting time for BMP3xx configuration
| * ae6724f9 iio: pressure: bmp280: Fix regmap for BMP280 device
| * 5da669d9 iio: pressure: bmp280: Use BME prefix for BME280 specifics
| * b71b2d70 iio: pressure: bmp280: Improve indentation and line wrapping
| * afe335a6 iio: pressure: bmp280: Allow multiple chips id per family of devices
| * c059a266 dt-bindings: clock: qcom: Add GPLL9 support on gcc-sc8180x
| * 65e71cff dt-bindings: clock: qcom: Add missing UFS QREF clocks
| * fc1ed6f7 remoteproc: k3-r5: Delay notification of wakeup event
| * e1df6bbf remoteproc: k3-r5: Acquire mailbox handle during probe routine
| * 9eac174a media: imx335: Fix reset-gpio handling
| * 2b00bc1d media: i2c: imx335: Enable regulator supplies
| * e6be9559 RDMA/mana_ib: use the correct page table index based on hardware page size
| * 6c95c700 net: mana: Add support for page sizes other than 4KB on ARM64
| * 86b6cf7e net: mana: Enable MANA driver on ARM64 with 4K page size
| * 1f997b1d sched: psi: fix bogus pressure spikes from aggregation race
| * c83a80d8 lib/buildid: harden build ID parsing logic
| * f941d779 build-id: require program headers to be right after ELF header
| * a94ec40b drm/amd/display: Allow backlight to go below `AMDGPU_DM_DEFAULT_MIN_BACKLIGHT`
| * 54ad9c76 mm: z3fold: deprecate CONFIG_Z3FOLD
| * 5b981d83 uprobes: fix kernel info leak via "[uprobes]" vma
| * 24f7989e io_uring/net: harden multishot termination case for recv
| * 3c38faa3 arm64: errata: Expand speculative SSBS workaround once more
| * 9a3e9aab arm64: cputype: Add Neoverse-N3 definitions
| * c7e0da74 i2c: synquacer: Deal with optional PCLK correctly
| * 6109f531 i2c: synquacer: Remove a clk reference from struct synquacer_i2c
| * 316be491 i2c: core: Lock address during client device instantiation
| * 4a2be5a7 i2c: create debugfs entry per adapter
| * aac871e4 platform/x86: x86-android-tablets: Fix use after free on platform_device_register() errors
| * 2dbc42f5 platform/x86: x86-android-tablets: Create a platform_device from module_init()
| * ce5ec367 kconfig: qconf: fix buffer overflow in debug links
| * eebc10e9 cpufreq: intel_pstate: Make hwp_notify_lock a raw spinlock
| * 68d603f4 drm/amd/display: Fix system hang while resume with TBT monitor
| * 487f6450 drm/amd/display: Add HDR workaround for specific eDP
| * 579a0a84 drm/sched: Add locking to drm_sched_entity_modify_sched
| * 451c87d2 drm/i915/gem: fix bitwise and logical AND mixup
| * a8023f8b close_range(): fix the logics in descriptor table trimming
| * 310d9531 rtla: Fix the help text in osnoise and timerlat top tools
| * 8b0f0a26 tracing/timerlat: Fix duplicated kthread creation due to CPU online/offline
| * a6e98490 tracing/timerlat: Fix a race during cpuhp processing
| * a4a05cef tracing/timerlat: Drop interface_lock in stop_kthread()
| * 79250dec tracing/hwlat: Fix a race during cpuhp processing
| * b8c118c2 ceph: fix cap ref leak via netfs init_request
| * e676e4ea mac802154: Fix potential RCU dereference issue in mac802154_scan_worker
| * 830c03e5 Bluetooth: hci_event: Align BR/EDR JUST_WORKS paring with LE
| * 2f4e3926 net: pcs: xpcs: fix the wrong register that was written back
| * 7c5cd531 gpio: davinci: fix lazy disable
| * 0f41f383 cpufreq: Avoid a bad reference count on CPU node
| * ed87190e btrfs: wait for fixup workers before stopping cleaner kthread during umount
| * 521cfe23 btrfs: send: fix invalid clone operation for file that got its size decreased
| * 7ad0c586 btrfs: fix a NULL pointer dereference when failed to start a new trasacntion
| * d7674ed0 ACPI: resource: Add Asus ExpertBook B2502CVA to irq1_level_low_skip_override[]
| * 27ec4a38 ACPI: resource: Add Asus Vivobook X1704VAP to irq1_level_low_skip_override[]
| * c7d10fa7 cachefiles: fix dentry leak in cachefiles_open_file()
| * 195e42c9 Input: adp5589-keys - fix adp5589_gpio_get_value()
| * 7c3f0422 Input: adp5589-keys - fix NULL pointer dereference
| * cda7d597 rtc: at91sam9: fix OF node leak in probe() error path
| * 03582f47 net: stmmac: Fix zero-division error when disabling tc cbs
| * cd9ce830 tomoyo: fallback to realpath if symlink's pathname does not exist
| * af3122f5 gso: fix udp gso fraglist segmentation after pull from frag_list
| * 718a752b vrf: revert "vrf: Remove unnecessary RCU-bh critical section"
| * 73328d2a iio: magnetometer: ak8975: Fix reading for ak099xx sensors
| * 3374f06f smb3: fix incorrect mode displayed for read-only files
| * 47297322 smb: client: use actual path when queryfs
| * 868e843e clk: qcom: clk-alpha-pll: Fix CAL_L_VAL override for LUCID EVO PLL
| * 5bdb3cc0 clk: qcom: gcc-sc8180x: Fix the sdcc2 and sdcc4 clocks freq table
| * ea3a6938 media: qcom: camss: Fix ordering of pm_runtime_enable
| * c2218a82 media: qcom: camss: Remove use_count guard in stop_streaming
| * 8c860f35 clk: qcom: gcc-sm8250: Do not turn off PCIe GDSCs during gdsc_disable()
| * b0686aed media: venus: fix use after free bug in venus_remove due to race condition
| * 56770d1e clk: qcom: gcc-sm8150: De-register gcc_cpuss_ahb_clk_src
| * 7e217706 clk: samsung: exynos7885: Update CLKS_NR_FSYS after bindings fix
| * 8cf5c85d clk: qcom: clk-rpmh: Fix overflow in BCM vote
| * 1229485a media: uapi/linux/cec.h: cec_msg_set_reply_to: zero flags
| * e6f63d04 clk: qcom: gcc-sm8450: Do not turn off PCIe GDSCs during gdsc_disable()
| * 6fa24b41 media: sun4i_csi: Implement link validate for sun4i_csi subdev
| * fb286742 clk: qcom: dispcc-sm8250: use CLK_SET_RATE_PARENT for branch clocks
| * fc71c239 remoteproc: k3-r5: Fix error handling when power-up failed
| * bd588d52 clk: rockchip: fix error for unknown clocks
| * eb4df5e3 media: ov5675: Fix power on/off delay timings
| * acc5103a aoe: fix the potential use-after-free problem in more places
| * 1587db11 riscv: Fix kernel stack size when KASAN is enabled
| * 83b39493 RDMA/mana_ib: use the correct page size for mapping user-mode doorbell page
| * 4ac63712 i3c: master: svc: Fix use after free vulnerability in svc_i3c_master Driver Due to Race Condition
| * 6b17072c NFSD: Fix NFSv4's PUTPUBFH operation
| * f7d8ee9d nfsd: map the EBADMSG to nfserr_io to avoid warning
| * 33658ace nfsd: fix delegation_blocked() to block correctly for at least 30 seconds
| * be8d32eb perf hist: Update hist symbol when updating maps
| * bebb4c24 perf python: Disable -Wno-cast-function-type-mismatch if present on clang
| * bf0b3b35 exfat: fix memory leak in exfat_load_bitmap()
| * 9a2585ad riscv: define ILLEGAL_POINTER_VALUE for 64bit
| * 8f91116f arm64: Subscribe Microsoft Azure Cobalt 100 to erratum 3194386
| * 5f5ec16b arm64: fix selection of HAVE_DYNAMIC_FTRACE_WITH_ARGS
| * d52c5652 ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate
| * 86a89e75 ocfs2: fix null-ptr-deref when journal load failed.
| * 84543da8 ocfs2: remove unreasonable unlock in ocfs2_read_blocks
| * ef768020 ocfs2: cancel dqi_sync_work before freeing oinfo
| * 637c00e0 ocfs2: reserve space for inline xattr before attaching reflink tree
| * 8d176ca5 ocfs2: fix uninit-value in ocfs2_get_block()
| * e7a80101 ocfs2: fix the la space leak when unmounting an ocfs2 volume
| * e3a9fc15 mm: krealloc: consider spare memory for __GFP_ZERO
| * fd349624 jbd2: correctly compare tids with tid_geq function in jbd2_fc_begin_commit
| * 1c62dc0d jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error
| * 393331e1 resource: fix region_intersects() vs add_memory_driver_managed()
| * b57b53e8 drm: omapdrm: Add missing check for alloc_ordered_workqueue
| * 0022085f of/irq: Support #msi-cells=<0> in of_msi_get_domain
| * d657d286 of: address: Report error on resource bounds overflow
| * 25b7a670 drm/rockchip: vop: clear DMA stop bit on RK3066
| * a17dfde5 parisc: Fix stack start for ADDR_NO_RANDOMIZE personality
| * 62f3e58c parisc: Allow mmap(MAP_STACK) memory to automatically expand upwards
| * 42451ba0 parisc: Fix 64-bit userspace syscall path
| * 89bbc55d ext4: mark fc as ineligible using an handle in ext4_xattr_set()
| * c5771f1c ext4: use handle to mark fc as ineligible in __track_dentry_update()
| * d13a3558 ext4: fix fast commit inode enqueueing during a full journal commit
| * 1552199a ext4: fix incorrect tid assumption in jbd2_journal_shrink_checkpoint_list()
| * 80dccb81 ext4: fix incorrect tid assumption in ext4_wait_for_tail_page_commit()
| * f55ecc58 ext4: update orig_path in ext4_find_extent()
| * 9203817b ext4: fix timer use-after-free on failed mount
| * 68a69cf6 ext4: fix double brelse() the buffer of the extents path
| * 8162ee5d ext4: aovid use-after-free in ext4_ext_insert_extent()
| * 1b558006 ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free
| * 93051d16 ext4: fix incorrect tid assumption in __jbd2_log_wait_for_space()
| * 5efccdee ext4: dax: fix overflowing extents beyond inode size when partially writing
| * 8c762b4e ext4: fix incorrect tid assumption in ext4_fc_mark_ineligible()
| * f4308d8e ext4: propagate errors from ext4_find_extent() in ext4_insert_range()
| * 8fe11779 ext4: fix slab-use-after-free in ext4_split_extent_at()
| * a56e5f38 ext4: correct encrypted dentry name hash when not casefolded
| * 2d64e7da ext4: no need to continue when the number of entries is 1
| * 9cdf65c6 ALSA: hda/realtek: Add a quirk for HP Pavilion 15z-ec200
| * 762650cd ALSA: hda/realtek: Add quirk for Huawei MateBook 13 KLV-WX9
| * 3624416a ALSA: line6: add hw monitor volume control to POD HD500X
| * 228a8b95 ALSA: usb-audio: Add native DSD support for Luxman D-08u
| * 9d125aab ALSA: usb-audio: Add delay quirk for VIVO USB-C HEADSET
| * aba1be9a ALSA: core: add isascii() check to card ID generator
| * 633d3456 ALSA: hda/tas2781: Add new quirk for Lenovo Y990 Laptop
| * c923bc87 drm: Consistently use struct drm_mode_rect for FB_DAMAGE_CLIPS
| * 6e6f8954 drm/mediatek: ovl_adaptor: Add missing of_node_put()
| * 3eff30f2 parisc: Fix itlb miss handler for 64-bit programs
| * 9fca08c0 perf/core: Fix small negative period being ignored
| * 888f728d power: supply: hwmon: Fix missing temp1_max_alarm attribute
| * 7febcf11 spi: bcm63xx: Fix missing pm_runtime_disable()
| * f2d0b351 spi: bcm63xx: Fix module autoloading
| * 0a42f636 dt-bindings: clock: exynos7885: Fix duplicated binding
| * ff580d01 memory: tegra186-emc: drop unused to_tegra186_emc()
| * 02825815 firmware: tegra: bpmp: Drop unused mbox_client_to_bpmp()
| * bf47be54 ovl: fail if trusted xattrs are needed but caller lacks permission
| * 6fcd6fea rust: sync: require `T: Sync` for `LockedBy::access`
| * d6c159c0 i2c: designware: fix controller is holding SCL low while ENABLE bit is disabled
| * b80dc74c i2c: xiic: Fix pm_runtime_set_suspended() with runtime pm enabled
| * 625a77b6 media: i2c: ar0521: Use cansleep version of gpiod_set_value()
| * c0e00163 i2c: xiic: Wait for TX empty to avoid missed TX NAKs
| * 7e263fd6 i2c: qcom-geni: Use IRQF_NO_AUTOEN flag in request_irq()
| * 22a1f8a5 i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume
| * 8176d487 platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug
| * b8c0aee7 Revert "ALSA: hda: Conditionally use snooping for AMD HDMI"
| * 2c74d33d selftests: vDSO: fix vdso_config for s390
| * 0fe35c47 selftests: vDSO: fix ELF hash table entry size for s390x
| * 67672702 powerpc/vdso: Fix VDSO data access when running in a non-root time namespace
| * dfb56976 selftests/mm: fix charge_reserved_hugetlb.sh test
| * b88842a9 selftests: vDSO: fix vDSO symbols lookup for powerpc64
| * d3b90ed9 selftests: vDSO: fix vdso_config for powerpc
| * 6c8aff20 selftests: vDSO: fix vDSO name for powerpc
| * 9629c0c3 perf: Really fix event_function_call() locking
| * 42cd165b perf callchain: Fix stitch LBR memory leaks
| * e2955fbe spi: rpc-if: Add missing MODULE_DEVICE_TABLE
| * 106f10fe accel/ivpu: Add missing MODULE_FIRMWARE metadata
| * 4019391d selftests: breakpoints: use remaining time to check if suspend succeed
| * c2aa4103 spi: s3c64xx: fix timeout counters in flush_fifo
| * dbda70bb selftest: hid: add missing run-hid-tools-tests.sh
| * 494380a4 spi: spi-cadence: Fix missing spi_controller_is_target() check
| * 97aa3293 spi: spi-cadence: Fix pm_runtime_set_suspended() with runtime pm enabled
| * 97f76711 spi: spi-cadence: Use helper function devm_clk_get_enabled()
| * d6e3898d spi: spi-imx: Fix pm_runtime_set_suspended() with runtime pm enabled
| * c2d9f9a7 bpftool: Fix undefined behavior in qsort(NULL, 0, ...)
| * 390b9e54 iomap: handle a post-direct I/O invalidate race in iomap_write_delalloc_release
| * ad762c52 bpftool: Fix undefined behavior caused by shifting into the sign bit
| * d43776b9 ext4: fix i_data_sem unlock order in ext4_ind_migrate()
| * 34b20963 ext4: avoid use-after-free in ext4_ext_show_leaf()
| * 1fe28527 ext4: ext4_search_dir should return a proper error
| * b111ae42 bpf: Make the pointer returned by iter next method valid
| * 18f06bac ksmbd: add refcnt to ksmbd_conn struct
| * f5e30a30 platform/x86: lenovo-ymc: Ignore the 0x0 state
| * 4298813a drm/amdgpu/gfx10: use rlc safe mode for soft recovery
| * c20cd3d6 drm/amdgpu/gfx11: use rlc safe mode for soft recovery
| * e16a6d1a powerpc/pseries: Use correct data types from pseries_hp_errorlog struct
| * fe2c86e1 of/irq: Refer to actual buffer size in of_irq_parse_one()
| * b511474f drm/amd/pm: ensure the fw_info is not null before using it
| * 3ffbdc97 drm/amdgpu/gfx9: use rlc safe mode for soft recovery
| * 8361e3f7 drm/amdgpu: Block MMR_READ IOCTL in reset
| * c474a1a7 drm/radeon/r100: Handle unknown family in r100_cp_init_microcode()
| * ee5d5470 scsi: NCR5380: Initialize buffer for MSG IN and STATUS transfers
| * 66a403d8 perf: Fix event_function_call() locking
| * deb78dc8 drm/amdgpu: fix unchecked return value warning for amdgpu_gfx
| * 5e0e1a94 scsi: lpfc: Update PRLO handling in direct attached topology
| * 55119faf scsi: aacraid: Rearrange order of struct aac_srb_unit
| * adf290fe perf,x86: avoid missing caller address in stack traces captured in uprobe
| * 4ee08b4a drm/printer: Allow NULL data in devcoredump printer
| * c7630935 drm/amd/display: Initialize get_bytes_per_element's default to 1
| * a1495acc drm/amd/display: Avoid overflow assignment in link_dp_cts
| * 929506d5 drm/amd/display: Fix index out of bounds in DCN30 color transformation
| * 122e3a7a drm/amd/display: Fix index out of bounds in degamma hardware format translation
| * 0d38a075 drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation
| * be2ca7a2 drm/amd/display: Check link_res->hpo_dp_link_enc before using it
| * 42d31a33 drm/amd/display: Check stream before comparing them
| * fb557a36 drm/stm: ltdc: reset plane transparency after plane disable
| * 64f38c08 platform/x86: touchscreen_dmi: add nanote-next quirk
| * 651ba62c HID: multitouch: Add support for Thinkpad X12 Gen 2 Kbd Portfolio
| * 71cfb54e drm/amdkfd: Fix resource leak in criu restore queue
| * fe902141 drm/amdgpu: enable gfxoff quirk on HP 705G4
| * a3c8cbef drm/amdgpu: add raven1 gfxoff quirk
| * c076b374 jfs: Fix uninit-value access of new_ea in ea_buffer
| * 9288a967 drm/msm/adreno: Assign msm_gpu->pdev earlier to avoid nullptrs
| * 4155dff7 scsi: smartpqi: correct stream detection
| * 7fff9a9f jfs: check if leafidx greater than num leaves per dmap tree
| * 4218b31e jfs: Fix uaf in dbFreeBits
| * f04925a0 jfs: UBSAN: shift-out-of-bounds in dbFindBits
| * cf6f3ebd drm/amd/display: fix double free issue during amdgpu module unload
| * 75839e23 drm/amd/display: Add null check for 'afb' in amdgpu_dm_plane_handle_cursor_update (v2)
| * 9641bc4a drm/amd/display: Check null pointers before using dc->clk_mgr
| * 4778982c drm/amd/display: Handle null 'stream_status' in 'planes_changed_for_existing_stream'
| * 6ec7c739 HID: Ignore battery for all ELAN I2C-HID devices
| * 29d2d5ed ata: sata_sil: Rename sil_blacklist to sil_quirks
| * 8fcf8519 ata: pata_serverworks: Do not use the term blacklist
| * e47e563c drm/amd/display: Add null check for top_pipe_to_program in commit_planes_for_stream
| * 30ceb873 drm/amdkfd: amdkfd_free_gtt_mem clear the correct pointer
| * 44e4aeae drm/amdgpu: disallow multiple BO_HANDLES chunks in one submit
| * 0a1741d1 drm/stm: Avoid use-after-free issues with crtc and plane
| * dfdbc5ba iommu/vt-d: Fix potential lockup if qi_submit_sync called with 0 count
| * 54e86bfe iommu/vt-d: Always reserve a domain ID for identity setup
| * 1c36eb17 power: reset: brcmstb: Do not go into infinite loop if reset fails
| * 2d56271f rcuscale: Provide clear error when async specified without primitives
| * fdda354f fbdev: pxafb: Fix possible use after free in pxafb_task()
| * 36bfefb6 fbdev: efifb: Register sysfs groups through driver core
| * 4b101d2f hwmon: (nct6775) add G15CF to ASUS WMI monitoring list
| * 2de5fd83 x86/syscall: Avoid memcpy() for ia32 syscall_get_arguments()
| * e9df4c61 selftests/nolibc: avoid passing NULL to printf("%s")
| * fc975b8d tools/nolibc: powerpc: limit stack-protector workaround to GCC
| * 6cc4e5ea ALSA: hdsp: Break infinite MIDI input flush loop
| * 7a557409 ALSA: asihpi: Fix potential OOB array access
| * ddd52c9f x86/kexec: Add EFI config table identity mapping for kexec kernel
| * 407abc7e x86/pkeys: Restore altstack access in sigreturn()
| * 19059128 x86/pkeys: Add PKRU as a parameter in signal handling functions
| * ef6c1ed5 tools/x86/kcpuid: Protect against faulty "max subleaf" values
| * 71faa656 ASoC: codecs: wsa883x: Handle reading version failure
| * 70d5e30b ALSA: usb-audio: Add logitech Audio profile quirk
| * fb2ed616 ALSA: usb-audio: Replace complex quirk lines with macros
| * 0bf9779c ALSA: usb-audio: Define macros for quirk table entries
| * 077e1b7c x86/ioapic: Handle allocation failures gracefully
| * 864f68a2 ALSA: usb-audio: Add input value sanity checks for standard types
| * f888741f nfp: Use IRQF_NO_AUTOEN flag in request_irq()
| * fef7b51f wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext()
| * 0a630d69 wifi: mt76: mt7915: hold dev->mt76.mutex while disabling tx worker
| * 833ebae2 wifi: mt76: mt7915: add dummy HW offload of IEEE 802.11 fragmentation
| * b4f8240b can: netlink: avoid call to do_set_data_bittiming callback with stale can_priv::ctrlmode
| * b017f4f6 drivers/perf: arm_spe: Use perf_allow_kernel() for permissions
| * 85525080 proc: add config & param to block forcing mem writes
| * 8b2906e1 ACPICA: iasl: handle empty connection_node
| * f3731960 wifi: mac80211: fix RCU list iterations
| * 6dcadb2e wifi: iwlwifi: mvm: avoid NULL pointer dereference
| * 32411625 wifi: iwlwifi: mvm: use correct key iteration
| * 5cce1c07 tcp: avoid reusing FIN_WAIT2 when trying to find port in connect() process
| * 27fe713c netpoll: Ensure clean state on setup failures
| * b60d2bc6 crypto: simd - Do not call crypto_alloc_tfm during registration
| * 0f6dab0b net: atlantic: Avoid warning about potential string truncation
| * f989162f ipv4: Mask upper DSCP bits and ECN bits in NETLINK_FIB_LOOKUP family
| * 239ac7fa wifi: rtw89: correct base HT rate mask for firmware
| * d4c4653b ipv4: Check !in_dev earlier for ioctl(SIOCSIFADDR).
| * 0d6255e5 bnxt_en: Extend maximum length of version string by 1 byte
| * 74834f4a net: mvpp2: Increase size of queue_name buffer
| * 12d26aa7 tipc: guard against string buffer overrun
| * 4588ea78 ACPICA: check null return of ACPI_ALLOCATE_ZEROED() in acpi_db_convert_to_package()
| * 93d065b7 ACPI: EC: Do not release locks during operation region accesses
| * 90ec583a wifi: rtw88: select WANT_DEV_COREDUMP
| * 7a552bc2 wifi: ath11k: fix array out-of-bound access in SoC stats
| * d0e4274d wifi: ath12k: fix array out-of-bound access in SoC stats
| * 1ab2cfe1 blk_iocost: fix more out of bound shifts
| * 29dbea4c ACPI: CPPC: Add support for setting EPP register in FFH
| * 716dae96 ACPI: video: Add force_vendor quirk for Panasonic Toughbook CF-18
| * cc026a7f Bluetooth: btrtl: Set msft ext address filter quirk for RTL8852B
| * 18ed567a Bluetooth: btusb: Add Realtek RTL8852C support ID 0x0489:0xe122
| * 37a6fc0d net: sched: consistently use rcu_replace_pointer() in taprio_change()
| * 3f5625e9 wifi: mt76: mt7915: disable tx worker during tx BA session enable/disable
| * 1c6db078 e1000e: avoid failing the system during pm_suspend
| * 13ca2b35 ACPICA: Fix memory leak if acpi_ps_get_next_field() fails
| * 0b023034 ACPICA: Fix memory leak if acpi_ps_get_next_namepath() fails
| * 68a8e457 ACPI: PAD: fix crash in exit_round_robin()
| * 0a94777b net: hisilicon: hns_mdio: fix OF node leak in probe()
| * 359a218c net: hisilicon: hns_dsaf_mac: fix OF node leak in hns_mac_get_info()
| * f62bf4ff net: hisilicon: hip04: fix OF node leak in probe()
| * 143edf09 net/xen-netback: prevent UAF in xenvif_flush_hash()
| * 04053e55 wifi: cfg80211: Set correct chandef when starting CAC
| * d76360ad wifi: iwlwifi: mvm: drop wrong STA selection in TX
| * 191e8d52 wifi: iwlwifi: mvm: Fix a race in scan abort flow
| * 82465e05 ice: Adjust over allocation of memory in ice_sched_add_root_node() and ice_sched_add_node()
| * 21ba7132 crypto: octeontx2 - Fix authenc setkey
| * 0ac97b00 crypto: octeontx - Fix authenc setkey
| * 6300199b crypto: x86/sha256 - Add parentheses around macros' single arguments
| * e37e3488 wifi: ath9k_htc: Use __skb_set_length() for resetting urb before resubmit
| * fdc73f2c wifi: rtw89: avoid to add interface to list twice when SER
| * e6e4cfb5 wifi: ath9k: fix possible integer overflow in ath9k_get_et_stats()
| * 40346cbb ALSA: hda/conexant: Fix conflicting quirk for System76 Pangolin
| * b0f3c6a2 ALSA: gus: Fix some error handling paths related to get_bpos() usage
| * 2c3c1f87 cifs: Do not convert delimiter when parsing NFS-style symlinks
| * c6db81c5 cifs: Fix buffer overflow when parsing NFS reparse points
| * 92e71ccd ASoC: imx-card: Set card.owner to avoid a warning calltrace if SND=m
| * f8f08157 ALSA: hda/generic: Unconditionally prefer preferred_dacs pairs
| * e4c886dd cifs: Remove intermediate object of failed create reparse call
| * fa72abf3 ALSA: hda/realtek: Fix the push button function for the ALC257
| * 466129e3 ALSA: mixer_oss: Remove some incorrect kfree_const() usages
| * 0152c81f ASoC: atmel: mchp-pdmc: Skip ALSA restoration if substream runtime is uninitialized
| * 28234f8a Bluetooth: L2CAP: Fix not validating setsockopt user input
| * 6a6baa1e Bluetooth: ISO: Fix not validating setsockopt user input
| * dea46e24 media: usbtv: Remove useless locks in usbtv_video_free()
| * 0c18a640 Bluetooth: hci_sock: Fix not validating setsockopt user input
| * b66ff9a3 loop: don't set QUEUE_FLAG_NOMERGES
| * 3000f3a8 i2c: xiic: Try re-initialization on bus busy timeout
| * 7c48b5a6 i2c: xiic: improve error message when transfer fails to start
| * 7f64cb5b sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start
| * 25a54df4 dt-bindings: net: xlnx,axi-ethernet: Add missing reg minItems
| * 1372c757 iomap: constrain the file range passed to iomap_file_unshare
| * f9620e2a ppp: do not assume bh is held in ppp_channel_bridge_input()
| * d9dfd41e net: test for not too small csum_start in virtio_net_hdr_to_skb()
| * ea8cad4c ipv4: ip_gre: Fix drops of small packets in ipgre_xmit
| * a9ad307c net: stmmac: dwmac4: extend timeout for VLAN Tag register busy bit check
| * 9b0ee571 net: add more sanity checks to qdisc_pkt_len_init()
| * 25ab0b87 net: avoid potential underflow in qdisc_pkt_len_init() with UFO
| * da143240 net: fec: Reload PTP registers after link-state change
| * dc5fb264 net: fec: Restart PPS after link state change
| * e66e38d0 net: ethernet: lantiq_etop: fix memory disclosure
| * 718b6634 net: Fix gso_features_check to check for both dev->gso_{ipv4_,}max_size
| * dae9b99b net: Add netif_get_gro_max_size helper for GRO
| * f0a84ad8 Bluetooth: btmrvl: Use IRQF_NO_AUTOEN flag in request_irq()
| * b9090769 Bluetooth: L2CAP: Fix uaf in l2cap_connect
| * 48832965 Bluetooth: MGMT: Fix possible crash on mgmt_index_removed
| * 4e3542f4 netfilter: nf_tables: prevent nf_skb_duplicated corruption
| * fe9ccbf1 selftests: netfilter: Fix nft_audit.sh for newer nft binaries
| * 271b4904 net: wwan: qcom_bam_dmux: Fix missing pm_runtime_disable()
| * 96858258 net: ieee802154: mcr20a: Use IRQF_NO_AUTOEN flag in request_irq()
| * 8691a82a netfilter: uapi: NFTA_FLOWTABLE_HOOK is NLA_NESTED
| * fab615ac net/mlx5e: Fix crash caused by calling __xfrm_state_delete() twice
| * 0168ab6f net/mlx5e: Fix NULL deref in mlx5e_tir_builder_alloc()
| * 1c252d64 net/mlx5: Added cond_resched() to crdump collection
| * 26fad69b net/mlx5: Fix error path in multi-packet WQE transmit
| * 70db8582 net: sparx5: Fix invalid timestamps
| * d6c4c086 ieee802154: Fix build error
| * 11ab19d4 ceph: remove the incorrect Fw reference check when dirtying pages
| * 10a58555 mailbox: bcm2835: Fix timeout during suspend mode
| * b372b484 mailbox: rockchip: fix a typo in module autoloading
| * 7879ad0a drm/amdgpu: Fix get each xcp macro
| * f42595fb scsi: pm8001: Do not overwrite PCI queue mapping
| * 6b63cda2 scsi: st: Fix input/output error on empty drive reset
| * 86fdd180 jump_label: Fix static_key_slow_dec() yet again
| * 33f3e832 jump_label: Simplify and clarify static_key_fast_inc_cpus_locked()
| * e67534bd static_call: Replace pointless WARN_ON() in static_call_module_notify()
| * c0abbbe8 static_call: Handle module init failure correctly in static_call_del_module()
* | 9cb3cefe ANDROID: add __pskb_copy_fclone to db845c symbol list.
* | c03eccca Revert "bpf: Fix helper writes to read-only maps"
* | d9303523 Merge 6.6.54 into android15-6.6-lts
|\|
| * 63a57420 Linux 6.6.54
| * cada2646 Revert: "dm-verity: restart or panic on an I/O error"
| * 646749b4 spi: atmel-quadspi: Fix wrong register value written to MR
| * 4c0c5dcb x86/tdx: Fix "in-kernel MMIO" check
| * 440fba89 thunderbolt: Fix NULL pointer dereference in tb_port_update_credits()
| * e2ab9fd6 thunderbolt: Fix minimum allocated USB 3.x and PCIe bandwidth
| * 3dc5525d thunderbolt: Send uevent after asymmetric/symmetric switch
| * 6b563029 wifi: brcmfmac: add linefeed at end of file
| * 72a3aef9 iio: magnetometer: ak8975: Fix 'Unexpected device' error
| * 18b5ee7b perf/arm-cmn: Fail DTC counter allocation correctly
| * e43caacf usb: yurex: Fix inconsistent locking bug in yurex_read()
| * 790c630a bpf: Fix use-after-free in bpf_uprobe_multi_link_attach()
| * 7390c461 Documentation: KVM: fix warning in "make htmldocs"
| * d669e782 i2c: isch: Add missed 'else'
| * 88dfb1dd i2c: aspeed: Update the stop sw state when the bus recovery occurs
| * b35a42bd mm/damon/vaddr: protect vma traversal in __damon_va_thre_regions() with rcu read lock
| * 6ec62dba module: Fix KCOV-ignored file name
| * 236eb2f9 spi: fspi: add support for imx8ulp
| * 93476056 mm: only enforce minimum stack gap size if it's sensible
| * e1e734c1 lockdep: fix deadlock issue between lockdep and rcu
| * bd24f30f dm-verity: restart or panic on an I/O error
| * b3c10ac8 bpf: lsm: Set bpf_lsm_blob_sizes.lbs_task to 0
| * 722e9e5a mm/filemap: optimize filemap folio adding
| * 734594d4 lib/xarray: introduce a new helper xas_get_order
| * ff3c557f mm/filemap: return early if failed to allocate memory for split
| * 4d0261ce thunderbolt: Improve DisplayPort tunnel setup process to be more robust
| * aed38a3e thunderbolt: Configure asymmetric link if needed and bandwidth allows
| * 9b6933e9 thunderbolt: Add support for asymmetric link
| * 8f053095 thunderbolt: Introduce tb_switch_depth()
| * e07bc585 thunderbolt: Introduce tb_for_each_upstream_port_on_path()
| * 18dcdadc thunderbolt: Introduce tb_port_path_direction_downstream()
| * 5ac89bb0 thunderbolt: Change bandwidth reservations to comply USB4 v2
| * 7b85d751 thunderbolt: Make is_gen4_link() available to the rest of the driver
| * 22081f72 thunderbolt: Use weight constants in tb_usb3_consumed_bandwidth()
| * c014f374 thunderbolt: Use constants for path weight and priority
| * ae2d54f5 thunderbolt: Create multiple DisplayPort tunnels if there are more DP IN/OUT pairs
| * 6870e5b4 thunderbolt: Expose tb_tunnel_xxx() log macros to the rest of the driver
| * 95f53ccf thunderbolt: Use tb_tunnel_dbg() where possible to make logging more consistent
| * 90135c31 thunderbolt: Fix debug log when DisplayPort adapter not available for pairing
| * 159b1b45 dt-bindings: spi: nxp-fspi: add imx8ulp support
| * eb95bd96 dt-bindings: spi: nxp-fspi: support i.MX93 and i.MX95
| * f56a6d9c btrfs: fix race setting file private on concurrent lseek using same fd
| * 971d03cd btrfs: update comment for struct btrfs_inode::lock
| * a0cc053b btrfs: reorder btrfs_inode to fill gaps
| * 0131bf19 btrfs: subpage: fix the bitmap dump which can cause bitmap corruption
| * 459b724c lib/bitmap: add bitmap_{read,write}()
| * 32e93cae x86/entry: Remove unwanted instrumentation in common_interrupt()
| * d5c5afdb x86/idtentry: Incorporate definitions/declarations of the FRED entries
| * 1d8c1add serial: don't use uninitialized value in uart_poll_init()
| * 88e26a19 tty: serial: kgdboc: Fix 8250_* kgdb over serial
| * 73c1928a pps: add an error check in parport_attach
| * 8b48ea27 pps: remove usage of the deprecated ida_simple_xx() API
| * aafeabf2 usb: xhci: fix loss of data on Cadence xHC
| * eef5d621 xhci: Add a quirk for writing ERST in high-low order
| * 22564331 USB: misc: yurex: fix race between read and write
| * eff6dde4 usb: yurex: Replace snprintf() with the safer scnprintf() variant
| * 8526ca3b soc: versatile: realview: fix soc_dev leak during device remove
| * c48d5ad1 soc: versatile: realview: fix memory leak during device remove
| * f6bda3f1 ARM: dts: imx6ul-geam: fix fsl,pins property in tscgrp pinctrl
| * 45f690fa spi: fspi: involve lut_num for struct nxp_fspi_devtype_data
| * 1b8cf11b padata: use integer wrap around to prevent deadlock on seq_nr overflow
| * 62004f17 cpuidle: riscv-sbi: Use scoped device node handling to fix missing of_node_put
| * 662ec522 icmp: change the order of rate limits
| * e0be8f2d EDAC/igen6: Fix conversion of system address to physical memory address
| * 2a4a997a nfs: fix memory leak in error path of nfs4_do_reclaim
| * 4d3d0869 fs: Fix file_set_fowner LSM hook inconsistencies
| * 0eed942b vfs: fix race between evice_inodes() and find_inode()&iput()
| * ca2a69fd arm64: dts: rockchip: Correct the Pinebook Pro battery design capacity
| * eea02200 arm64: dts: qcom: sa8775p: Mark APPS and PCIe SMMUs as DMA coherent
| * 4fff20cf arm64: dts: rockchip: Raise Pinebook Pro's panel backlight PWM frequency
| * 0e6774ec arm64: errata: Enable the AC03_CPU_38 workaround for ampere1a
| * 93e1215f arm64: esr: Define ESR_ELx_EC_* constants as UL
| * 1b4089d5 hwrng: cctrng - Add missing clk_disable_unprepare in cctrng_resume
| * 3fd8e444 hwrng: bcm2835 - Add missing clk_disable_unprepare in bcm2835_rng_init
| * 5ad4d0b6 hwrng: mtk - Use devm_pm_runtime_enable
| * 7cb51731 f2fs: fix to check atomic_file in f2fs ioctl interfaces
| * 5e0de753 f2fs: Require FMODE_WRITE for atomic write ioctls
| * 56d86516 f2fs: avoid potential int overflow in sanity_check_area_boundary()
| * 0c598a02 f2fs: prevent possible int overflow in dir_block_index()
| * b18a5c83 f2fs: fix several potential integer overflows in file offsets
| * 4adf6514 btrfs: always update fstrim_range on failure in FITRIM ioctl
| * 6a6a5751 btrfs: tree-checker: fix the wrong output of data backref objectid
| * 534230ee debugobjects: Fix conditions in fill_pool()
| * c1ba1f2c wifi: mt76: mt7615: check devm_kasprintf() returned value
| * eed8db82 wifi: rtw88: 8822c: Fix reported RX band width
| * de0cb07d wifi: rtw88: 8821cu: Remove VID/PID 0bda:c82c
| * 8e4b60ae wifi: mt76: mt7996: fix NULL pointer dereference in mt7996_mcu_sta_bfer_he
| * cf23427d wifi: mt76: mt7915: check devm_kasprintf() returned value
| * 0a74a9b1 wifi: mt76: mt7921: Check devm_kasprintf() returned value
| * cb0125ec perf/x86/intel/pt: Fix sampling synchronization
| * 19fd2f2c efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption
| * ca659f38 ACPI: resource: Add another DMI match for the TongFang GMxXGxx
| * f0921ecd ACPI: sysfs: validate return type of _STR method
| * df6a82a6 drbd: Add NULL check for net_conf to prevent dereference in state validation
| * 42ac42d7 drbd: Fix atomicity violation in drbd_uuid_set_bm()
| * a3028d70 crypto: ccp - Properly unregister /dev/sev on sev PLATFORM_STATUS failure
| * 633bd1d6 serial: qcom-geni: fix fifo polling timeout
| * e29a1f8b xhci: Set quirky xHC PCI hosts to D3 _after_ stopping and freeing them.
| * f7ba350f tty: rp2: Fix reset with non forgiving PCIe host bridges
| * 7420c1bf firmware_loader: Block path traversal
| * 18ed6a33 bus: mhi: host: pci_generic: Fix the name for the Telit FE990A
| * 3ae13d48 bus: integrator-lm: fix OF node leak in probe()
| * 4f7908eb usb: dwc2: drd: fix clock gating on USB role switch
| * 19fb05d2 usb: cdnsp: Fix incorrect usb_request status
| * a0b4cbeb USB: class: CDC-ACM: fix race between get_serial and set_serial
| * 7bcd961d USB: misc: cypress_cy7c63: check for short transfer
| * ef08eb16 USB: appledisplay: close race between probe and completion handler
| * 090386db arm64: dts: mediatek: mt8195-cherry: Mark USB 3.0 on xhci1 as disabled
| * 1e44ee6c usbnet: fix cyclical race on disconnect with work queue
| * d71300d0 wifi: rtw88: Fix USB/SDIO devices not transmitting beacons
| * 9ecd9d7a can: esd_usb: Remove CAN_CTRLMODE_3_SAMPLES for CAN-USB/3-FD
| * ccc87864 scsi: mac_scsi: Disallow bus errors during PDMA send
| * 0120c776 scsi: mac_scsi: Refactor polling loop
| * 6e8dc205 scsi: mac_scsi: Revise printk(KERN_DEBUG ...) messages
| * 09b06c25 scsi: ufs: qcom: Update MODE_MAX cfg_bw value
| * 568c7c4c scsi: sd: Fix off-by-one error in sd_read_block_characteristics()
| * facf1e49 ata: libata-scsi: Fix ata_msense_control() CDL page reporting
| * 6ab95e27 ksmbd: handle caseless file creation
| * 30fe2a88 ksmbd: allow write with FILE_APPEND_DATA
| * 3c1fd66a ksmbd: make __dir_empty() compatible with POSIX
| * ef836204 fs: Create a generic is_dot_dotdot() utility
| * ae619de5 powerpc/atomic: Use YZ constraints for DS-form instructions
| * a3765b49 KEYS: prevent NULL pointer dereference in find_asymmetric_key()
| * c886061b drm/amd/display: Validate backlight caps are sane
| * 9ce1ee22 drm/amd/display: Round calculated vtotal
| * 55fcbe5f drm/amd/display: Add HDMI DSC native YCbCr422 support
| * a53841b0 drm/amd/display: Skip Recompute DSC Params if no Stream on Link
| * 4777225e KVM: Use dedicated mutex to protect kvm_usage_count to avoid deadlock
| * beef3353 KVM: x86: Move x2APIC ICR helper above kvm_apic_write_nodecode()
| * 7eae461d KVM: x86: Enforce x2APIC's must-be-zero reserved ICR bits
| * d5d6489b KVM: arm64: Add memory length checks and remove inline in do_ffa_mem_xfer
| * 0188ea5f Input: i8042 - add another board name for TUXEDO Stellaris Gen5 AMD line
| * 09d94ac8 Input: i8042 - add TUXEDO Stellaris 15 Slim Gen6 AMD to i8042 quirk table
| * c18dca92 Input: i8042 - add TUXEDO Stellaris 16 Gen5 AMD to i8042 quirk table
| * 2a26c312 Input: adp5588-keys - fix check on return code
| * cd6dd564 iommufd: Protect against overflow of ALIGN() during iova allocation
| * e48edd47 Revert "media: tuners: fix error return code of hybrid_tuner_request_state()"
| * a4c2fbed soc: versatile: integrator: fix OF node leak in probe() error path
| * c3533bf2 soc: fsl: cpm1: tsa: Fix tsa_write8()
| * 543a3c7d ASoC: rt5682: Return devm_of_clk_add_hw_provider to transfer the error
| * 513d60f4 Revert "soc: qcom: smd-rpm: Match rpmsg channel instead of compatible"
| * 02a370c4 PCI: xilinx-nwl: Fix off-by-one in INTx IRQ handler
| * 3d8573ab PCI: Use an error code with PCIe failed link retraining
| * a200897d PCI: Correct error reporting with PCIe failed link retraining
| * f23785c6 PCI: imx6: Fix missing call to phy_power_off() in error handling
| * b91d041e PCI: dra7xx: Fix threaded IRQ request for "dra7xx-pcie-main" IRQ
| * 894f2111 PCI: Clear the LBMS bit after a link retrain
| * fb176957 PCI: Revert to the original speed after PCIe failed link retraining
| * 38dee6ed Remove *.orig pattern from .gitignore
| * 01ad0576 io_uring/sqpoll: do not put cpumask on stack
| * 859f62a2 io_uring/sqpoll: retain test for whether the CPU is valid
| * adbb4453 xen: allow mapping ACPI data using a different physical address
| * 161fd691 xen: move checks for e820 conflicts further up
| * 79fec62d Revert "net: libwx: fix alloc msix vectors failed"
| * 0851b1ec drm/vmwgfx: Prevent unmapping active read buffers
| * b5d38f1d drm/amd/display: Fix Synaptics Cascaded Panamera DSC Determination
| * 49d3a4ad mm: call the security_mmap_file() LSM hook in remap_file_pages()
| * 4bdf75c2 io_uring: check for presence of task_work rather than TIF_NOTIFY_SIGNAL
| * 358124ba io_uring/sqpoll: do not allow pinning outside of cpuset
| * da2bb8e1 netfilter: nf_tables: use rcu chain hook list iterator from netlink dump path
| * b3f7607f netfilter: ctnetlink: compile ctnetlink_label_size with CONFIG_NF_CONNTRACK_EVENTS
| * 668f4df6 netfilter: nf_tables: Keep deleted flowtable hooks until after RCU
| * 3e8ac274 net: stmmac: set PP_FLAG_DMA_SYNC_DEV only if XDP is enabled
| * e9e3424d virtio_net: Fix mismatched buf address when unmapping for small packets
| * ccd3e6ff bonding: Fix unnecessary warnings and logs from bond_xdp_get_xmit_slave()
| * 00a0c2d4 net: qrtr: Update packets cloning when broadcasting
| * 570f7d8c tcp: check skb is non-NULL in tcp_rto_delta_us()
| * 88297d3c net: ipv6: select DST_CACHE from IPV6_RPL_LWTUNNEL
| * d2abc379 net: seeq: Fix use after free vulnerability in ether3 Driver Due to Race Condition
| * af4b8a70 netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()
| * 89bab831 net: xilinx: axienet: Fix packet counting
| * bcce1393 net: xilinx: axienet: Schedule NAPI in two steps
| * 9360d077 Revert "dm: requeue IO if mapping table not yet available"
| * 66e78ade ep93xx: clock: Fix off by one in ep93xx_div_recalc_rate()
| * ca64edd7 vhost_vdpa: assign irq bypass producer token correctly
| * 70a180b8 cxl/pci: Fix to record only non-zero ranges
| * c16fa6d5 interconnect: icc-clk: Add missed num_nodes initialization
| * 257c7a39 coresight: tmc: sg: Do not leak sg_table
| * 5060a1be serial: 8250: omap: Cleanup on error in request_irq
| * b8e45b91 driver core: Fix a potential null-ptr-deref in module_add_driver()
| * fdc637d4 dt-bindings: iio: asahi-kasei,ak8975: drop incorrect AK09116 compatible
| * 7387270b iio: magnetometer: ak8975: drop incorrect AK09116 compatible
| * c5a4a276 iio: magnetometer: ak8975: Convert enum->pointer for data in the match tables
| * 2bc96d4e iio: chemical: bme680: Fix read/write ops to device by adding mutexes
| * 5d86a29d ABI: testing: fix admv8818 attr description
| * dd69fb02 driver core: Fix error handling in driver API device_rename()
| * 0f115888 iio: adc: ad7606: fix standby gpio state to match the documentation
| * 48617707 iio: adc: ad7606: fix oversampling gpio array
| * 30b9bf4b nvme-multipath: system fails to create generic nvme device
| * ecb8a79d spi: atmel-quadspi: Avoid overwriting delay register settings
| * 54fd8725 lib/sbitmap: define swap_lock as raw_spinlock_t
| * 93773e44 spi: spi-fsl-lpspi: Undo runtime PM changes at driver exit time
| * 2016d585 spi: atmel-quadspi: Undo runtime PM changes at driver exit time
| * 649ec8b3 f2fs: fix to don't set SB_RDONLY in f2fs_handle_critical_error()
| * f9ce2f55 f2fs: get rid of online repaire on corrupted directory
| * 66b1b825 f2fs: clean up w/ dotdot_name
| * 364afd8a f2fs: prevent atomic file from being dirtied before commit
| * b6f186bd f2fs: compress: don't redirty sparse cluster during {,de}compress
| * 4263b3ef f2fs: compress: do sanity check on cluster when CONFIG_F2FS_CHECK_FS is on
| * fc18e655 f2fs: fix to avoid use-after-free in f2fs_stop_gc_thread()
| * f2971778 f2fs: support .shutdown in f2fs_sops
| * 783b6ca3 f2fs: atomic: fix to truncate pagecache before on-disk metadata truncation
| * 1bb0686a f2fs: fix to wait page writeback before setting gcing flag
| * 87f9d26f f2fs: Create COW inode from parent dentry for atomic write
| * 67c3c463 f2fs: fix to avoid racing in between read and OPU dio write
| * 6c59f87e f2fs: reduce expensive checkpoint trigger frequency
| * d889928b f2fs: atomic: fix to avoid racing w/ GC
| * 8edf3a40 crypto: powerpc/p10-aes-gcm - Disable CRYPTO_AES_GCM_P10
| * 21b4fa3b crypto: caam - Pad SG length when allocating hash edesc
| * 318f7085 nfsd: return -EINVAL when namelen is 0
| * a1afbbb5 nfsd: call cache_put if xdr_reserve_space returns NULL
| * b743922b ntb: Force physically contiguous allocation of rx ring buffers
| * fd8932cf ntb_perf: Fix printk format
| * 16e5bed6 ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir()
| * b15dd2aa RDMA/irdma: fix error message in irdma_modify_qp_roce()
| * 0d50ae28 RDMA/cxgb4: Added NULL check for lookup_atid
| * 21ada691 riscv: Fix fp alignment bug in perf_callchain_user()
| * 6eff336b RDMA/mlx5: Obtain upper net device only when needed
| * e8721e9b RDMA/hns: Fix restricted __le16 degrades to integer issue
| * b3b7ff07 RDMA/hns: Optimize hem allocation performance
| * 288ecfd3 RDMA/hns: Fix 1bit-ECC recovery address in non-4K OS
| * 3ab28991 RDMA/hns: Fix VF triggering PF reset in abnormal interrupt handler
| * 094a1821 RDMA/hns: Fix spin_unlock_irqrestore() called with IRQs enabled
| * 69d95668 RDMA/hns: Fix the overflow risk of hem_list_calc_ba_range()
| * d2d9c512 RDMA/hns: Fix Use-After-Free of rsv_qp on HIP08
| * 85e37ac1 RDMA/hns: Don't modify rq next block addr in HIP09 QPC
| * b972bade watchdog: imx_sc_wdt: Don't disable WDT in suspend
| * 613a8d27 RDMA/mlx5: Limit usage of over-sized mkeys from the MR cache
| * 7838f6c8 RDMA/erdma: Return QP state in erdma_query_qp
| * 95248d74 PCI: kirin: Fix buffer overflow in kirin_pcie_parse_port()
| * d08754be IB/core: Fix ib_cache_setup_one error flow cleanup
| * 4c49d34f pinctrl: mvebu: Fix devinit_dove_pinctrl_probe function
| * a685bc35 nfsd: fix refcount leak when file is unhashed after being found
| * 982dfdfd nfsd: remove unneeded EEXIST error check in nfsd_do_file_acquire
| * 6ba26247 clk: rockchip: rk3588: Fix 32k clock name for pmu_24m_32k_100m_src_p
| * 521d101e clk: starfive: Use pm_runtime_resume_and_get to fix pm_runtime_get_sync() usage
| * 8758691e clk: ti: dra7-atl: Fix leak of of_nodes
| * 01b9be93 RDMA/rtrs-clt: Reset cid to con_num - 1 to stay in bounds
| * effc10f0 RDMA/rtrs: Reset hb_missed_cnt after receiving other traffic from peer
| * c6b9f971 media: mediatek: vcodec: Fix H264 stateless decoder smatch warning
| * dbe5b737 media: mediatek: vcodec: Fix VP8 stateless decoder smatch warning
| * 588bcce9 media: mediatek: vcodec: Fix H264 multi stateless decoder smatch warning
| * 08d13bcb clk: at91: sama7g5: Allocate only the needed amount of memory for PLLs
| * b6edb3fd pinctrl: single: fix missing error code in pcs_probe()
| * 8b7df763 RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency
| * 451249bb media: platform: rzg2l-cru: rzg2l-csi2: Add missing MODULE_DEVICE_TABLE
| * 4f201a94 PCI: xilinx-nwl: Clean up clock on probe failure/removal
| * f1058b07 PCI: xilinx-nwl: Fix register misspelling
| * 18a672c6 nvdimm: Fix devs leaks in scan_labels()
| * e39cc0c3 x86/PCI: Check pcie_find_root_port() return for NULL
| * 597c72f4 leds: pca995x: Fix device child node usage in pca995x_probe()
| * d14451d9 leds: pca995x: Use device_for_each_child_node() to access device child nodes
| * dbba3fce leds: leds-pca995x: Add support for NXP PCA9956B
| * 583314eb clk: qcom: dispcc-sm8250: use special function for Lucid 5LPE PLL
| * 4ddb5800 clk: qcom: ipq5332: Register gcc_qdss_tsctr_clk_src
| * e85ab507 PCI: keystone: Fix if-statement expression in ks_pcie_quirk()
| * 8e152448 firewire: core: correct range of block for case of switch statement
| * 390de4d0 PCI: Wait for Link before restoring Downstream Buses
| * 58f31be7 drivers: media: dvb-frontends/rtl2830: fix an out-of-bounds write error
| * 527ab3eb drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error
| * 075a0ce1 Input: ilitek_ts_i2c - add report id message validation
| * 831886bf Input: ilitek_ts_i2c - avoid wrong input subsystem sync
| * a3552e2f pinctrl: ti: ti-iodelay: Fix some error handling paths
| * 85427d51 pinctrl: ti: iodelay: Use scope based of_node_put() cleanups
| * ccc7cdf4 pinctrl: Use device_get_match_data()
| * a12e8a92 pinctrl: ti: ti-iodelay: Convert to platform remove callback returning void
| * bbf297b4 leds: bd2606mvv: Fix device child node usage in bd2606mvv_probe()
| * 676bf8fc clk: qcom: dispcc-sm8550: use rcg2_shared_ops for ESC RCGs
| * ffb0ae19 clk: qcom: dispcc-sm8650: Update the GDSC flags
| * 65a25e42 clk: qcom: dispcc-sm8550: use rcg2_ops for mdss_dptx1_aux_clk_src
| * 59938d4f clk: qcom: dispcc-sm8550: fix several supposed typos
| * 77c859e8 clk: rockchip: Set parent rate for DCLK_VOP clock on RK3228
| * d271e66f remoteproc: imx_rproc: Initialize workqueue earlier
| * 2941577c remoteproc: imx_rproc: Correct ddr alias for i.MX8M
| * af70d939 clk: imx: imx8qxp: Parent should be initialized earlier than the clock
| * d64513b2 clk: imx: imx8qxp: Register dc0_bypass0_clk before disp clk
| * 5b442989 clk: imx: imx8mp: fix clock tree update of TF-A managed clocks
| * 908165b5 clk: imx: fracn-gppll: fix fractional part of PLL getting lost
| * ed323659 clk: imx: composite-7ulp: Check the PCC present bit
| * c1eb71fd clk: imx: composite-93: keep root clock on when mcore enabled
| * 73034d13 clk: imx: composite-8m: Enable gate clk with mcore_booted
| * 554c590d clk: imx: composite-8m: Less function calls in __imx8m_clk_hw_composite() after error detection
| * c2ee6de2 clk: imx: imx6ul: fix default parent for enet*_ref_sel
| * bd553be1 clk: imx: clk-audiomix: Correct parent clock for earc_phy and audpll
| * 3ba5a2e9 perf time-utils: Fix 32-bit nsec parsing
| * 022f9328 perf sched timehist: Fixed timestamp error when unable to confirm event sched_in time
| * fa0720b3 perf stat: Display iostat headers correctly
| * 505ec050 perf sched timehist: Fix missing free of session in perf_sched__timehist()
| * 88c4b5dd perf report: Fix --total-cycles --stdio output error
| * 297871cb perf ui/browser/annotate: Use global annotation_options
| * 4c857dcf perf annotate: Move some source code related fields from 'struct annotation' to 'struct annotated_source'
| * 4ef032d8 perf annotate: Split branch stack cycles info from 'struct annotation'
| * ba18185b perf inject: Fix leader sampling inserting additional samples
| * 1490a5db perf mem: Free the allocated sort string, fixing a leak
| * a634fa8e bpf: Zero former ARG_PTR_TO_{LONG,INT} args in case of error
| * abf7559b bpf: Improve check_raw_mode_ok test for MEM_UNINIT-tagged types
| * a2c8dc7e bpf: Fix helper writes to read-only maps
| * 81197a9b bpf: Fix bpf_strtol and bpf_strtoul helpers for 32bit
| * 257f9e51 nilfs2: fix potential oob read in nilfs_btree_check_delete()
| * 0f28b3b5 nilfs2: determine empty node blocks as corrupted
| * 21839b6f nilfs2: fix potential null-ptr-deref in nilfs_btree_insert()
| * 66f3fc74 sched/numa: Fix the vma scan starving issue
| * e3a2d3f6 sched/numa: Complete scanning of inactive VMAs when there is no alternative
| * cb7846df sched/numa: Complete scanning of partial VMAs regardless of PID activity
| * 7f019776 sched/numa: Move up the access pid reset logic
| * 6654e54a sched/numa: Trace decisions related to skipping VMAs
| * 707e9a6c sched/numa: Rename vma_numab_state::access_pids[] => ::pids_active[], ::next_pid_reset => ::pids_active_reset
| * ba4eb7f2 sched/numa: Document vma_numab_state fields
| * faeff8b1 ext4: check stripe size compatibility on remount as well
| * 2a6579ef ext4: avoid OOB when system.data xattr changes underneath the filesystem
| * dd3f90e8 ext4: return error on ext4_find_inline_entry
| * 9f707685 ext4: avoid negative min_clusters in find_group_orlov()
| * fae0793a ext4: avoid potential buffer_head leak in __ext4_new_inode()
| * 7a349fee ext4: avoid buffer_head leak in ext4_mark_inode_used()
| * 72eef522 smackfs: Use rcu_assign_pointer() to ensure safe assignment in smk_set_cipso
| * e4006410 ext4: clear EXT4_GROUP_INFO_WAS_TRIMMED_BIT even mount with discard
| * cfd257f5 kthread: fix task state in kthread worker if being frozen
| * b7d6e724 xz: cleanup CRC32 edits from 2018
| * 2288b54b bpf: correctly handle malformed BPF_CORE_TYPE_ID_LOCAL relos
| * fc2b8970 samples/bpf: Fix compilation errors with cf-protection option
| * 33ef0b25 selftests/bpf: Fix error compiling tc_redirect.c with musl libc
| * 8553067f selftests/bpf: Fix compile if backtrace support missing in libc
| * 7824530b selftests/bpf: Fix redefinition errors compiling lwt_reroute.c
| * a7d322fd selftests/bpf: Fix flaky selftest lwt_redirect/lwt_reroute
| * fb99b106 selftests/bpf: Fix C++ compile error from missing _Bool type
| * 99c03869 selftests/bpf: Fix error compiling test_lru_map.c
| * 564d1abf selftests/bpf: Fix arg parsing in veristat, test_progs
| * d57f8de8 selftests/bpf: Fix errors compiling cg_storage_multi.h with musl libc
| * 96416a7e selftests/bpf: Fix errors compiling decap_sanity.c with musl libc
| * 0bc023e2 selftests/bpf: Fix errors compiling lwt_redirect.c with musl libc
| * 397192f8 selftests/bpf: Fix compiling core_reloc.c with musl-libc
| * 227b50fe selftests/bpf: Fix compiling tcp_rtt.c with musl-libc
| * fe81b3df selftests/bpf: Fix compiling flow_dissector.c with musl-libc
| * 7d8d5840 selftests/bpf: Fix compiling kfree_skb.c with musl-libc
| * 425d4934 selftests/bpf: Fix compiling parse_tcp_hdr_opt.c with musl-libc
| * 52f5ed94 selftests/bpf: Fix include of <sys/fcntl.h>
| * 4730b07e selftests/bpf: Add a cgroup prog bpf_get_ns_current_pid_tgid() test
| * 17536f3b selftests/bpf: Refactor out some functions in ns_current_pid_tgid test
| * d6e16c33 selftests/bpf: Replace CHECK with ASSERT_* in ns_current_pid_tgid test
| * bedda119 selftests/bpf: Fix missing BUILD_BUG_ON() declaration
| * 4bff8cc5 selftests/bpf: Fix missing UINT_MAX definitions in benchmarks
| * 2388d181 selftests/bpf: Fix missing ARRAY_SIZE() definition in bench.c
| * 103c0431 selftests/bpf: Drop unneeded error.h includes
| * c8c590f0 selftests/bpf: Implement get_hw_ring_size function to retrieve current and max interface size
| * 7c877bad selftests/bpf: Fix error compiling bpf_iter_setsockopt.c with musl libc
| * db5cde7b selftests/bpf: Fix compile error from rlim_t in sk_storage_map.c
| * 7572c32f selftests/bpf: Use pid_t consistently in test_progs.c
| * b0b99c12 tools/runqslower: Fix LDFLAGS and add LDLIBS support
| * cd1b7f77 selftests/bpf: Fix wrong binary in Makefile log output
| * 97e4a3ba selftests/bpf: Add CFLAGS per source file and runner
| * 5d99839b bpf: Temporarily define BPF_NO_PRESEVE_ACCESS_INDEX for GCC
| * 01aa0d28 bpf: Disable some `attribute ignored' warnings in GCC
| * 5de3bd34 bpf: Use -Wno-error in certain tests when building with GCC
| * b6529a31 selftests/bpf: Fix error linking uprobe_multi on mips
| * e7d263b2 selftests/bpf: Workaround strict bpf_lsm return value check.
| * 5a4f8de9 sched/fair: Make SCHED_IDLE entity be preempted in strict hierarchy
| * 82478cb8 tpm: Clean up TPM space after command failure
| * 9c21cdae xen/swiotlb: fix allocated size
| * d1691e97 xen/swiotlb: add alignment check for dma buffers
| * ac8ec126 xen: tolerate ACPI NVS memory overlapping with Xen allocated memory
| * 149fbd6a xen: add capability to remap non-RAM pages to different PFNs
| * f12153ee xen: move max_pfn in xen_memory_setup() out of function scope
| * 242d0c3c xen: introduce generic helper checking for memory map conflicts
| * 35a10211 minmax: avoid overly complex min()/max() macro arguments in xen
| * 27f113dc ata: libata: Clear DID_TIME_OUT for ATA PT commands with sense data
| * f7b4ba5f HID: wacom: Do not warn about dropped packets for first packet
| * 85572bf6 HID: wacom: Support sequence numbers smaller than 16-bit
| * cafeba3c xen: use correct end address of kernel for conflict checking
| * 37c40c01 drivers:drm:exynos_drm_gsc:Fix wrong assignment in gsc_bind()
| * 614773a4 drm/msm: fix %s null argument error
| * 47694537 drm/msm/dsi: correct programming sequence for SM8350 / SM8450
| * 52d571a2 ipmi: docs: don't advertise deprecated sysfs entries
| * cbd26fc9 drm/msm/a5xx: workaround early ring-buffer emptiness check
| * d9bef5ba drm/msm/a5xx: fix races in preemption evaluation stage
| * dfd01205 drm/msm/a5xx: properly clear preemption records on resume
| * b9415145 drm/msm/a5xx: disable preemption in submits by default
| * 7e34440a drm/msm: Fix incorrect file name output in adreno_request_fw()
| * a02d92e8 powerpc/vdso: Inconditionally use CFUNC macro
| * efdf2af5 powerpc/8xx: Fix kernel vs user address comparison
| * 6b7a006a powerpc/8xx: Fix initial memory mapping
| * 415a2c21 drm/mediatek: Use spin_lock_irqsave() for CRTC event lock
| * 5b9b8cd2 drm/mediatek: Fix missing configuration flags in mtk_crtc_ddp_config()
| * c1ba4b8c jfs: fix out-of-bounds in dbNextAG() and diAlloc()
| * baeb8628 scsi: elx: libefc: Fix potential use after free in efc_nport_vport_del()
| * 9263023a drm/vc4: hdmi: Handle error case of pm_runtime_resume_and_get
| * 087b8808 drm/bridge: lontium-lt8912b: Validate mode in drm_bridge_funcs::mode_valid()
| * fa94d605 drm/radeon/evergreen_cs: fix int overflow errors in cs track offsets
| * 656803ab drm/rockchip: dw_hdmi: Fix reading EDID when using a forced mode
| * 9ec05e0b drm/rockchip: vop: Allow 4096px width scaling
| * 8e7760ed drm/amd/amdgpu: Properly tune the size of struct
| * 53c18f7b scsi: NCR5380: Check for phase match during PDMA fixup
| * 464fd60a scsi: smartpqi: revert propagate-the-multipath-failure-to-SML-quickly
| * de67850b drm/radeon: properly handle vbios fake edid sizing
| * 78b9e10b drm/amdgpu: properly handle vbios fake edid sizing
| * ddf9ff24 drm/amd/display: Add null check for set_output_gamma in dcn30_set_output_transfer_func
| * fc8b0b8d drm/stm: ltdc: check memory returned by devm_kzalloc()
| * 6e513c2e drm/stm: Fix an error handling path in stm_drm_platform_probe()
| * 8e6f4aa4 pmdomain: core: Harden inter-column space in debug summary
| * c390a26d iommu/arm-smmu-qcom: apply num_context_bank fixes for SDM630 / SDM660
| * 7acaef4f iommu/arm-smmu-qcom: Work around SDM845 Adreno SMMU w/ 16K pages
| * 324e1ec4 iommu/arm-smmu-qcom: hide last LPASS SMMU context bank from linux
| * 0f0222d5 mtd: rawnand: mtk: Fix init error path
| * e502a0db mtd: rawnand: mtk: Factorize out the logic cleaning mtk chips
| * ca63b1cb mtd: rawnand: mtk: Use for_each_child_of_node_scoped()
| * 9b52ee18 rcu/nocb: Fix RT throttling hrtimer armed from offline CPU
| * 4e31e504 mtd: powernv: Add check devm_kasprintf() returned value
| * e109a01f iommu/amd: Do not set the D bit on AMD v2 table entries
| * 9b97d6b0 fbdev: hpfb: Fix an error handling path in hpfb_dio_probe()
| * 508a550e power: supply: max17042_battery: Fix SOC threshold calc w/ no current sense
| * 05dba127 power: supply: axp20x_battery: Remove design from min and max voltage
| * cbb2313e hwmon: (ntc_thermistor) fix module autoloading
| * 590960a5 mtd: slram: insert break after errors in parsing the map
| * 0a27e174 hwmon: (max16065) Fix alarm attributes
| * fc702f5c hwmon: (max16065) Remove use of i2c_match_id()
| * 0c7af15f hwmon: (max16065) Fix overflows seen when writing limits
| * f606b9ac ASoC: loongson: fix error release
| * 886ea81d m68k: Fix kernel_clone_args.flags in m68k_clone()
| * cc08ac5f ALSA: hda: cs35l41: fix module autoloading
| * c239cfa3 selftests/ftrace: Add required dependency for kprobe tests
| * 7000e5f3 ASoC: tas2781-i2c: Get the right GPIO line
| * 92b53ece ASoC: tas2781-i2c: Drop weird GPIO code
| * ac7976b6 ASoC: tas2781: Use of_property_read_reg()
| * c0f65218 ASoC: tas2781: remove unused acpi_subysystem_id
| * 06a95f71 ASoC: rt5682s: Return devm_of_clk_add_hw_provider to transfer the error
| * 17c72808 x86/mm: Use IPIs to synchronize LAM enablement
| * ecd4adeb arm64: dts: mediatek: mt8195: Correct clock order for dp_intf*
| * 27106b0a clocksource/drivers/qcom: Add missing iounmap() on errors in msm_dt_timer_init()
| * ee7e02e7 reset: k210: fix OF node leak in probe() error path
| * cfbf049d reset: berlin: fix OF node leak in probe() error path
| * b2cce50a ARM: versatile: fix OF node leak in CPUs prepare
| * 01f986dc ARM: dts: imx7d-zii-rmu2: fix Ethernet PHY pinctrl property
| * 58bd96e5 ARM: dts: microchip: sama7g5: Fix RTT clock
| * e91e803d spi: bcmbca-hsspi: Fix missing pm_runtime_disable()
| * 7c84cb5a arm64: dts: ti: k3-j721e-beagleboneai64: Fix reversed C6x carveout locations
| * ff844401 arm64: dts: ti: k3-j721e-sk: Fix reversed C6x carveout locations
| * 6d91b3f5 arm64: dts: rockchip: Correct vendor prefix for Hardkernel ODROID-M1
| * c742692f ARM: dts: microchip: sam9x60: Fix rtc/rtt clocks
| * 514265b1 arm64: dts: renesas: r9a07g044: Correct GICD and GICR sizes
| * c2bae267 arm64: dts: renesas: r9a07g054: Correct GICD and GICR sizes
| * 7d0be362 arm64: dts: renesas: r9a07g043u: Correct GICD and GICR sizes
| * 1ccd886a regulator: Return actual error in of_regulator_bulk_get_all()
| * 3bf127bc spi: ppc4xx: Avoid returning 0 when failed to parse and map IRQ
| * 6699567b firmware: arm_scmi: Fix double free in OPTEE transport
| * bd7fa637 arm64: dts: mediatek: mt8186: Fix supported-hw mask for GPU OPPs
| * 8d81cd1a arm64: dts: exynos: exynos7885-jackpotlte: Correct RAM amount to 4GB
| * 1b08f7b5 spi: ppc4xx: handle irq_of_parse_and_map() errors
| * 80f5bfbb block: fix potential invalid pointer dereference in blk_add_partition
| * 0d7ddfc8 block: print symbolic error name instead of error code
| * 5740c0fa io_uring/io-wq: inherit cpuset of cgroup in io worker
| * 7b3a3558 io_uring/io-wq: do not allow pinning outside of cpuset
| * c3eba0a4 block, bfq: fix procress reference leakage for bfqq in merge chain
| * 0780451f block, bfq: fix uaf for accessing waker_bfqq after splitting
| * 0c9b52bf erofs: fix incorrect symlink detection in fast symlink
| * 81b048b9 cachefiles: Fix non-taking of sb_writers around set/removexattr
| * 19f3bec2 block, bfq: don't break merge chain in bfq_split_bfqq()
| * e50c9a35 block, bfq: choose the last bfqq from merge chain in bfq_setup_cooperator()
| * 7faed289 block, bfq: fix possible UAF for bfqq->bic with merge chain
| * 6e73b946 nbd: fix race between timeout and normal completion
| * 75a5e590 ublk: move zone report data out of request pdu
| * 0ceb2f2b ipv6: avoid possible NULL deref in rt6_uncached_list_flush_dev()
| * 2b5e904d net: tipc: avoid possible garbage value
| * a46add42 net: ipv6: rpl_iptunnel: Fix memory leak in rpl_input
| * 50d062b6 r8169: disable ALDPS per default for RTL8125
| * 1e8fc4ff net: enetc: Use IRQF_NO_AUTOEN flag in request_irq()
| * 905e83c6 bareudp: Pull inner IP header on xmit.
| * 61761f08 bareudp: Pull inner IP header in bareudp_udp_encap_recv().
| * a4a70cba Bluetooth: btusb: Fix not handling ZPL/short-transfer
| * d7572187 can: m_can: m_can_close(): stop clocks after device has been shut down
| * 7fb4f560 can: m_can: enable NAPI before enabling interrupts
| * c3d941cc can: bcm: Clear bo->bcm_proc_read after remove_proc_entry().
| * 80bd490a sock_map: Add a cond_resched() in sock_hash_free()
| * 7eebbdde Bluetooth: hci_sync: Ignore errors from HCI_OP_REMOTE_NAME_REQ_CANCEL
| * ea8d90a5 Bluetooth: hci_core: Fix sending MGMT_EV_CONNECT_FAILED
| * 84398204 wifi: wilc1000: fix potential RCU dereference issue in wilc_parse_join_bss_param
| * 058c9026 wifi: mac80211: use two-phase skb reclamation in ieee80211_do_stop()
| * cacdc118 wifi: cfg80211: fix two more possible UBSAN-detected off-by-one errors
| * 2780657f wifi: mt76: mt7996: fix uninitialized TLV data
| * 2d9f3e56 wifi: mt76: mt7996: ensure 4-byte alignment for beacon commands
| * 15c1d606 wifi: mt76: mt7915: fix rx filter setting for bfee functionality
| * 9f05824b wifi: cfg80211: fix UBSAN noise in cfg80211_wext_siwscan()
| * 0940196c wifi: mt76: mt7603: fix mixed declarations and code
| * aa3e0db3 crypto: hisilicon/qm - inject error before stopping queue
| * 8b21a9b1 crypto: hisilicon/qm - reset device before enabling it
| * 7803e8cd crypto: hisilicon/hpre - mask cluster timeout error
| * 4589bb97 pm:cpupower: Add missing powercap_set_enabled() stub function
| * fb2d0575 x86/sgx: Fix deadlock in SGX NUMA node search
| * 6f68e1e9 wifi: mt76: mt7996: fix EHT beamforming capability check
| * c07082fa wifi: mt76: mt7996: fix HE and EHT beamforming capabilities
| * 29516e5d wifi: mt76: mt7996: fix wmm set of station interface to 3
| * 7146e5ae wifi: mt76: mt7996: fix traffic delay when switching back to working channel
| * 50d87e3b wifi: mt76: mt7996: use hweight16 to get correct tx antenna
| * 818dd118 wifi: mt76: mt7915: fix oops on non-dbdc mt7986
| * 4d3608ae cpufreq: ti-cpufreq: Introduce quirks to handle syscon fails appropriately
| * c902e515 perf/arm-cmn: Ensure dtm_idx is big enough
| * 5418a61e perf/arm-cmn: Fix CCLA register offset
| * a687d9d1 perf/arm-cmn: Refactor node ID handling. Again.
| * a1b25661 perf/arm-cmn: Improve debugfs pretty-printing for large configs
| * f5c4ec8d perf/arm-cmn: Rework DTC counters (again)
| * 814b8bc5 netfilter: nf_tables: remove annotation to access set timeout while holding lock
| * 9431e5ed netfilter: nf_tables: reject expiration higher than timeout
| * 2a5e648a netfilter: nf_tables: reject element expiration with no timeout
| * 08b25d59 netfilter: nf_tables: elements with timeout below CONFIG_HZ never expire
| * 8ad28208 ACPI: CPPC: Fix MASK_VAL() usage
| * fa3ef5ea can: j1939: use correct function name in comment
| * 37c5024e kselftest/arm64: Actually test SME vector length changes via sigreturn
| * 666a46a9 drivers/perf: hisi_pcie: Fix TLP headers bandwidth counting
| * 6206a0ed drivers/perf: hisi_pcie: Record hardware counts correctly
| * 39dd1f1f padata: Honor the caller's alignment in case of chunk_size 0
| * 1661f135 wifi: iwlwifi: mvm: increase the time between ranging measurements
| * 2c4a7b50 wifi: iwlwifi: config: label 'gl' devices as discrete
| * 305b7827 wifi: iwlwifi: remove AX101, AX201 and AX203 support from LNL
| * d54455a3 wifi: mac80211: don't use rate mask for offchannel TX either
| * 3b839d46 drivers/perf: Fix ali_drw_pmu driver interrupt status clearing
| * be158b7e kselftest/arm64: signal: fix/refactor SVE vector length enumeration
| * 288cbc50 powercap: intel_rapl: Fix off by one in get_rpi()
| * 9fc60f2b ARM: 9410/1: vfp: Use asm volatile in fmrx/fmxr macros
| * c82ea72d mount: handle OOM on mnt_warn_timestamp_expiry
| * 032ca566 RISC-V: KVM: Fix to allow hpmcounter31 from the guest
| * 3c39f253 RISC-V: KVM: Allow legacy PMU access from guest
| * a72a99da RISC-V: KVM: Fix sbiret init before forwarding to userspace
| * 07b90bbf wifi: rtw88: remove CPT execution branch never used
| * 32ba3160 arm64: signal: Fix some under-bracketed UAPI macros
| * f0525a64 net: stmmac: dwmac-loongson: Init ref and PTP clocks rate
| * 0a9445aa wifi: ath12k: fix invalid AMPDU factor calculation in ath12k_peer_assoc_h_he()
| * aafd6ad1 wifi: ath12k: match WMI BSS chan info structure with firmware definition
| * d45fe011 wifi: ath12k: fix BSS chan info request WMI command
| * dda028a8 wifi: ath9k: Remove error checks when creating debugfs entries
| * fb1862ce wifi: brcmfmac: introducing fwil query functions
| * c3cfcf51 wifi: brcmfmac: export firmware interface functions
| * 9349283f ACPI: PMIC: Remove unneeded check in tps68470_pmic_opregion_probe()
| * e55fcc82 crypto: xor - fix template benchmarking
| * 1b8178a2 wifi: rtw88: always wait for both firmware loading attempts
| * b3e360e0 EDAC/synopsys: Fix error injection on Zynq UltraScale+
| * 23752aba EDAC/synopsys: Fix ECC status and IRQ control race condition
* | 5611cd3d Merge 6.6.53 into android15-6.6-lts
|\|
| * 4ad9fa5c Linux 6.6.53
| * 51297ef7 USB: usbtmc: prevent kernel-usb-infoleak
| * 39d69238 USB: serial: pl2303: add device id for Macrosilicon MS3020
| * 3a2532d8 can: mcp251xfd: move mcp251xfd_timestamp_start()/stop() into mcp251xfd_chip_start/stop()
| * fa45741f can: mcp251xfd: properly indent labels
| * 26b0a1cd x86/mm: Switch to new Intel CPU model defines
| * ab51a98d nvme-pci: qdepth 1 quirk
| * c4e98006 gpiolib: cdev: Ignore reconfiguration without direction
| * 53dc61ae Revert "wifi: cfg80211: check wiphy mutex is held for wdev mutex"
| * 424bd795 netfilter: nf_tables: missing iterator type in lookup walk
| * f24d8abc netfilter: nft_set_pipapo: walk over current view on netlink dump
| * 94d6fe6b netfilter: nft_socket: Fix a NULL vs IS_ERR() bug in nft_socket_cgroup_subtree_level()
| * f07e28e4 netfilter: nft_socket: make cgroupsv2 matching work with namespaces
| * ea71c39d powercap/intel_rapl: Add support for AMD family 1Ah
| * e615cd84 drm: Expand max DRM device number to full MINORBITS
| * f6b589e3 accel: Use XArray instead of IDR for minors
| * d2e3d344 drm: Use XArray instead of IDR for minors
| * c726dea9 ocfs2: strict bound check before memcmp in ocfs2_xattr_find_entry()
| * 1f6e167d ocfs2: add bounds checking to ocfs2_xattr_find_entry()
| * 4c21bba3 spi: spidev: Add missing spi_device_id for jg10309-01
| * c20e89c9 block: Fix where bio IO priority gets set
| * 532ba43d tools: hv: rm .*.cmd when make clean
| * f0759b09 x86/hyperv: Set X86_FEATURE_TSC_KNOWN_FREQ when Hyper-V provides frequency
| * fabc4ed2 smb: client: fix hang in wait_for_response() for negproto
| * e7989641 spi: bcm63xx: Enable module autoloading
| * 745fe9f1 drm: komeda: Fix an issue related to normalized zpos
| * d7c12649 ALSA: hda: add HDMI codec ID for Intel PTL
| * 16fb61af ASoC: amd: yc: Add a quirk for MSI Bravo 17 (D7VEK)
| * a9affc6d spi: spidev: Add an entry for elgin,jg10309-01
| * 5a8f8d49 ASoC: fix module autoloading
| * b3cc98bd ASoC: tda7419: fix module autoloading
| * 1803f06c ASoC: google: fix module autoloading
| * 7675ab59 ASoC: intel: fix module autoloading
| * ec39e310 ASoC: Intel: soc-acpi-cht: Make Lenovo Yoga Tab 3 X90F DMI match less strict
| * 740253eb can: mcp251xfd: mcp251xfd_ring_init(): check TX-coalescing configuration
| * 021cd8f0 wifi: iwlwifi: clear trans->state earlier upon error
| * 9902dacd wifi: mac80211: free skb on error path in ieee80211_beacon_get_ap()
| * 4d0a900e wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
| * 2c61b561 wifi: iwlwifi: mvm: pause TCM when the firmware is stopped
| * 8587a0ed wifi: iwlwifi: mvm: fix iwl_mvm_max_scan_ie_fw_cmd_room()
| * 0d07f12e wifi: iwlwifi: mvm: fix iwl_mvm_scan_fits() calculation
| * dfa94a93 wifi: iwlwifi: lower message level for FW buffer destination
| * 8a834f25 LoongArch: Define ARCH_IRQ_INIT_FLAGS as IRQ_NOPROBE
| * d44cfa99 net: ftgmac100: Ensure tx descriptor updates are visible
| * 001eaeaa platform/x86: x86-android-tablets: Make Lenovo Yoga Tab 3 X90F DMI match less strict
| * 1bab72a2 microblaze: don't treat zero reserved memory regions as error
| * 76f74a1c hwmon: (asus-ec-sensors) remove VRM temp X570-E GAMING
| * af08f450 pinctrl: at91: make it work with current gpiolib
| * 013180bf scsi: lpfc: Fix overflow build issue
| * 49a9fe95 ALSA: hda/realtek - FIxed ALC285 headphone no sound
| * 4a31d48c ALSA: hda/realtek - Fixed ALC256 headphone no sound
| * 50dcf4b7 ASoC: allow module autoloading for table board_ids
| * b7420317 ASoC: allow module autoloading for table db1200_pids
| * 0627ba94 ASoC: mediatek: mt8188: Mark AFE_DAC_CON0 register as volatile
| * aef26737 ASoC: SOF: mediatek: Add missing board compatible
* | 9fc5c41d Merge 6.6.52 into android15-6.6-lts
|\|
| * 561bbd55 Linux 6.6.52
| * bd9c3c2d riscv: dts: starfive: add assigned-clock* to limit frquency
| * e43364f5 ASoC: meson: axg-card: fix 'use-after-free'
| * 2a01f3b7 pinctrl: meteorlake: Add Arrow Lake-H/U ACPI ID
| * b9d510e0 cifs: Fix signature miscalculation
| * 6ec7cbc7 ASoC: codecs: avoid possible garbage value in peb2466_reg_read()
| * 86238603 drm/i915/guc: prevent a possible int overflow in wq offsets
| * f9e08c20 spi: geni-qcom: Fix incorrect free_irq() sequence
| * 64cdc5d1 spi: geni-qcom: Undo runtime PM changes at driver exit time
| * ff65ae25 drm/amd/amdgpu: apply command submission parser for JPEG v1
| * 54268468 drm/amdgpu/atomfirmware: Silence UBSAN warning
| * def80cdb drm/nouveau/fb: restore init() for ramgp102
| * eb7fc8b6 dma-buf: heaps: Fix off-by-one in CMA heap fault handler
| * 8e1ffb257982 drm/syncobj: Fix syncobj leak in drm_syncobj_eventfd_ioctl
| * 28425a10a4fa soundwire: stream: Revert "soundwire: stream: fix programming slave ports for non-continous port maps"
| * af9ca9ca3e44 spi: nxp-fspi: fix the KASAN report out-of-bounds bug
| * a8632ef4fc13 tracing/osnoise: Fix build when timerlat is not enabled
| * 34fcac26216c net: dpaa: Pad packets to ETH_ZLEN
| * fc8c0cec1b48 net: dsa: felix: ignore pending status of TAS module when it's disabled
| * 83e6fb59040e netfilter: nft_socket: fix sk refcount leaks
| * 033a71efabac selftests: net: csum: Fix checksums for packets with non-zero padding
| * 38859fb5bdb6 net: ftgmac100: Enable TX interrupt to avoid TX timeout
| * 5bfbf2c18cf5 octeontx2-af: Modify SMQ flush sequence to drop packets
| * 7ae890ee1947 fou: fix initialization of grc
| * 65feee671e37 net/mlx5: Fix bridge mode operations when there are no VFs
| * 4bb9745cc3d3 net/mlx5: Verify support for scheduling element and TSAR type
| * 9f806d095955 net/mlx5: Correct TASR typo into TSAR
| * fa2e98068d25 net/mlx5: Add missing masks and QoS bit masks for scheduling elements
| * f015f63cc9c4 net/mlx5: Explicitly set scheduling element and TSAR type
| * f7e7dbdfc093 net/mlx5e: Add missing link mode to ptys2ext_ethtool_map
| * 4ce59074d53c IB/mlx5: Rename 400G_8X speed to comply to naming convention
| * 93fd5e028b29 net/mlx5e: Add missing link modes to ptys2ethtool_map
| * 02518dc443cd net/mlx5: Update the list of the PCI supported devices
| * e8db32a90248 igb: Always call igb_xdp_ring_update_tail() under Tx lock
| * cbaed60c69f0 ice: fix VSI lists confusion when adding VLANs
| * 01a786ada184 ice: fix accounting for filters shared by multiple VSIs
| * d21559e2037e ice: Fix lldp packets dropping after changing the number of channels
| * 1bc085e9977f hwmon: (pmbus) Conditionally clear individual status bits for pmbus rev >= 1.2
| * 14f6a11ea21e selftests/bpf: Support SOCK_STREAM in unix_inet_redir_to_connected()
| * 8295194a50eb cxl/core: Fix incorrect vendor debug UUID define
| * cb735cf79aa1 eeprom: digsy_mtc: Fix 93xx46 driver probe failure
| * 7853c146f8b4 drm/amd/display: Fix FEC_READY write on DP LT
| * 27bbf0b1cac9 drm/amd/display: Disable error correction if it's not supported
| * d72432755b12 arm64: dts: rockchip: fix PMIC interrupt pin in pinctrl for ROCK Pi E
| * b1e1daf0125e net: xilinx: axienet: Fix race in axienet_stop
| * a95a24fcaee1 mm: avoid leaving partial pfn mappings around in error case
| * 2ae1beb3ab4f x86/hyperv: fix kexec crash due to VP assist page corruption
| * 9b27991f3fb7 dm-integrity: fix a race condition when accessing recalc_sector
| * 4ec0d8dbd702 net: tighten bad gso csum offset check in virtio_net_hdr
| * 1705209b3e2a minmax: reduce min/max macro expansion in atomisp driver
| * 3844bc360e16 arm64: dts: rockchip: override BIOS_DISABLE signal via GPIO hog on RK3399 Puma
| * d52643ced186 arm64: dts: rockchip: fix eMMC/SPI corruption when audio has been used on RK3399 Puma
| * 7e2e638c5909 selftests: mptcp: join: restrict fullmesh endp on 1st sf
| * 6452b162549c mptcp: pm: Fix uaf in __timer_delete_sync
| * c54fc405a060 platform/x86: panasonic-laptop: Allocate 1 entry extra in the sinf array
| * 6821a82616f6 platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses
| * d07216aa30e8 NFS: Avoid unnecessary rescanning of the per-server delegation list
| * d8a7055ffd39 NFSv4: Fix clearing of layout segments in layoutreturn
| * 75e6572ccb78 smb/server: fix return value of smb2_open()
| * 91043a573ca7 Input: i8042 - add Fujitsu Lifebook E756 to i8042 quirk table
| * 57ac3b43fb1f drm/msm/adreno: Fix error return if missing firmware-name
| * c5331c6342fd platform/surface: aggregator_registry: Add support for Surface Laptop Go 3
| * 64f8ed257cec platform/surface: aggregator_registry: Add Support for Surface Pro 10
| * 86a1aaee7f44 scripts: kconfig: merge_config: config files: add a trailing newline
| * 1d5c7d0a49ec HID: multitouch: Add support for GT7868Q
| * 11eb4a8228f6 Input: synaptics - enable SMBus for HP Elitebook 840 G2
| * 3acb2392df34 Input: ads7846 - ratelimit the spi_sync error message
| * 5ee7efa629bf btrfs: update target inode's ctime on unlink
| * ab8f0c4986c7 net: hns3: use correct release function during uninitialization
| * 4bfee9346d8c wifi: mt76: mt7921: fix NULL pointer access in mt7921_ipv6_addr_change
| * 4a9a1edd9c49 powerpc/mm: Fix boot warning with hugepages and CONFIG_DEBUG_VIRTUAL
| * af252750bf3b net: phy: vitesse: repair vsc73xx autonegotiation
| * 31b9fc3d0c10 drm: panel-orientation-quirks: Add quirk for Ayn Loki Max
| * 7d42d19973cb drm: panel-orientation-quirks: Add quirk for Ayn Loki Zero
| * 9569e1fd06fa net: ethernet: use ip_hdrlen() instead of bit shift
| * 28123a54f887 usbnet: ipheth: fix carrier detection in modes 1 and 4
| * 4d1cfa3afb86 usbnet: ipheth: do not stop RX on failing RX callback
| * 9c8c230e2e15 usbnet: ipheth: drop RX URBs with no payload
| * c2fb33a7fed5 usbnet: ipheth: remove extraneous rx URB length check
| * 78bce66914db ksmbd: override fsids for smb2_query_info()
| * 5a199eedfdc8 ksmbd: override fsids for share path check
| * 2278629c3ebb nvmem: u-boot-env: error if NVMEM device is too small
| * 368fa77b7945 nvmem: u-boot-env: improve coding style
| * 2eea394c31cb nvmem: u-boot-env: use nvmem device helpers
| * ae91c9c7b67d nvmem: u-boot-env: use nvmem_add_one_cell() nvmem subsystem helper
| * 820b1b981aeb nvmem: core: add nvmem_dev_size() helper
| * f7dc14df1bde iio: adc: ad7124: fix DT configuration parsing
| * fbed74005829 iio: adc: ad7124: Switch from of specific to fwnode based property handling
| * bfc8dab8c73a device property: Introduce device_for_each_child_node_scoped()
| * fce8373d3153 device property: Add cleanup.h based fwnode_handle_put() scope based cleanup.
* | eb7cf642edfe Merge branch 'android15-6.6' into android15-6.6-lts
* | 886869d11e22 Merge branch 'android15-6.6' into android15-6.6-lts
* | e7a4f5e3aeee Revert "perf/aux: Fix AUX buffer serialization"
* | d16ed636abe6 Revert "clocksource/drivers/timer-of: Remove percpu irq related code"
* | 18bea82acf6f Merge 6.6.51 into android15-6.6-lts
|/
* 6d1dc55b5bab Linux 6.6.51
* 611e4281117a Bluetooth: hci_sync: Fix UAF on hci_abort_conn_sync
* 4d6cf010d876 Bluetooth: hci_sync: Fix UAF on create_le_conn_complete
* 78155f30beeb Bluetooth: hci_sync: Fix UAF in hci_acl_create_conn_sync
* 50b6744c12fa spi: spi-fsl-lpspi: Fix off-by-one in prescale max
* 7b5595f33c3c btrfs: fix race between direct IO write and fsync when using same fd
* 8eeda5fb5938 x86/mm: Fix PTI for i386 some more
* a2977c0ca3e9 membarrier: riscv: Add full memory barrier in switch_mm()
* 136a29d8112d ublk_drv: fix NULL pointer dereference in ublk_ctrl_start_recovery()
* bd29d8452079 riscv: Do not restrict memory size because of linear mapping on nommu
* 8289dc916e9e riscv: Fix toolchain vector detection
* b27ea9c96efd smb: client: fix double put of @cfile in smb2_rename_path()
* 52b688c8087b gpio: modepin: Enable module autoloading
* 9ceae54e65a3 gpio: rockchip: fix OF node leak in probe()
* 60d54a45dbbb drm/i915/fence: Mark debug_fence_free() with __maybe_unused
* a65ebba87337 drm/i915/fence: Mark debug_fence_init_onstack() with __maybe_unused
* 7c391eaf2c63 clk: qcom: gcc-sm8550: Don't park the USB RCG at registration time
* a5e871d26ba1 clk: qcom: gcc-sm8550: Don't use parking clk_ops for QUPs
* b9bb9634368e ASoC: sunxi: sun4i-i2s: fix LRCLK polarity in i2s mode
* f39bde3f7825 ASoc: SOF: topology: Clear SOF link platform name upon unload
* 05500a48d80d nvme-pci: allocate tagset on reset if necessary
* 489f2913a63f nvmet-tcp: fix kernel crash if commands allocation fails
* 585c598082e1 ASoC: tegra: Fix CBB error during probe()
* af4d5630d991 powerpc/vdso: Don't discard rela sections
* 547acc20e567 powerpc/64e: Define mmu_pte_psize static
* 8ea58996f539 powerpc/64e: split out nohash Book3E 64-bit code
* 8ebe3bb3688a powerpc/64e: remove unused IBM HTW code
* eaccebe663b2 clk: qcom: ipq9574: Update the alpha PLL type for GPLLs
* 37b65ea6c7ad crypto: starfive - Fix nent assignment in rsa dec
* 02b3f8860963 crypto: starfive - Align rsa input data to 32-bit
* 872f86e1757b ata: libata-scsi: Check ATA_QCFLAG_RTF_FILLED before using result_tf
* c8d4acb32530 ata: libata-scsi: Remove redundant sense_buffer memsets
* 302ba299c31e drm/amdgpu: handle gfx12 in amdgpu_display_verify_sizes
* 5f2a2bf25395 drm/amd: Add gfx12 swizzle mode defs
* 5ea24ddc26a7 can: mcp251xfd: rx: add workaround for erratum DS80000789E 6 of mcp2518fd
* 6cdc3fc4fb2f can: mcp251xfd: clarify the meaning of timestamp
* bf501ab4cbfe can: mcp251xfd: rx: prepare to workaround broken RX FIFO head index erratum
* 2370061f0707 can: mcp251xfd: mcp251xfd_handle_rxif_ring_uinc(): factor out in separate function
* 62ca6d3a905b arm64: acpi: Harden get_cpu_for_acpi_id() against missing CPU entry
* acf9ef8d1b1f arm64: acpi: Move get_cpu_for_acpi_id() to a header
* 47c310fbaaf4 ACPI: processor: Fix memory leaks in error paths of processor_add()
* 6bf77014db58 ACPI: processor: Return an error if acpi_processor_get_info() fails in processor_add()
* 241bce1c757d workqueue: Improve scalability of workqueue watchdog touch
* 5ff0a4414195 workqueue: wq_watchdog_touch is always called with valid CPU
* 0eceaa9d0560 Revert "mm: skip CMA pages when they are not available"
* 9a9974713de8 mm/vmscan: use folio_migratetype() instead of get_pageblock_migratetype()
* c4b69bee3f4e perf/aux: Fix AUX buffer serialization
* 9faed52b98e1 uprobes: Use kzalloc to allocate xol area
* 7eeb7189c4d4 clocksource/drivers/timer-of: Remove percpu irq related code
* 444c3927a0c1 clocksource/drivers/imx-tpm: Fix next event not taking effect sometime
* c4f27b17d384 clocksource/drivers/imx-tpm: Fix return -ETIME when delta exceeds INT_MAX
* 39e7e593418c VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
* 6ed45748c19b Drivers: hv: vmbus: Fix rescind handling in uio_hv_generic
* de6946be9c8b uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
* 3d1baf322a3a nvmem: Fix return type of devm_nvmem_device_get() in kerneldoc
* 1f33d9f1d9ac binder: fix UAF caused by offsets overwrite
* f77dc8a75859 misc: fastrpc: Fix double free of 'buf' in error path
* 7d301dd2722f usb: dwc3: Avoid waking up gadget during startxfer
* f224f3729779 usb: cdns2: Fix controller reset issue
* 6ef746b0b63f usb: dwc3: core: update LC timer as per USB Spec V3.2
* 314125cbae48 iio: adc: ad7124: fix chip ID mismatch
* 66d0d59afe55 iio: adc: ad7606: remove frstdata check for serial mode
* fb5d58f238c4 iio: adc: ad7124: fix config comparison
* ecc8e1bcac27 iio: fix scale application in iio_convert_raw_to_processed_unlocked
* cb0f3f0c102b iio: buffer-dmaengine: fix releasing dma channel on error
* dc12e49f970b staging: iio: frequency: ad9834: Validate frequency parameter value
* 5c007a980450 intel: legacy: Partial revert of field get conversion
* 4fe707a29789 tcp: process the 3rd ACK with sk_socket for TFO/MPTCP
* 3b843046dbbe cpufreq: amd-pstate: fix the highest frequency issue which limits performance
* 1ec40a175a48 cpufreq: amd-pstate: Enable amd-pstate preferred core support
* 0b983c08ca81 ACPI: CPPC: Add helper to get the highest performance value
* e0316069fae7 riscv: Use accessors to page table entries instead of direct dereference
* 59c9160a7ee3 riscv: mm: Only compile pgtable.c if MMU
* 1a8b2391e06e mm: Introduce pudp/p4dp/pgdp_get() functions
* 193b1fc1cbca riscv: Use WRITE_ONCE() when setting page table entries
* 6c4a878e1cc8 NFSv4: Add missing rescheduling points in nfs_client_return_marked_delegations
* 07f384c5be1f smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
* b777131d03be ata: pata_macio: Use WARN instead of BUG
* ff62110ec522 spi: spi-fsl-lpspi: limit PRESCALE bit in TCR register
* 32ee0520159f MIPS: cevt-r4k: Don't call get_c0_compare_int if timer irq is installed
* d942e855324a lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc()
* 7ead730af11e of/irq: Prevent device address out-of-bounds read in interrupt map walk
* c3af7e460a52 Squashfs: sanity check symbolic link size
* 6604d76253e7 usbnet: ipheth: race between ipheth_close and error handling
* a4858b00a1ec Input: uinput - reject requests with unreasonable number of slots
* 60dc4ee0428d HID: amd_sfh: free driver_data after destroying hid device
* 30e9ce7cd559 HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
* fc9fabeee107 s390/vmlinux.lds.S: Move ro_after_init section behind rodata section
* f1eb69aa8562 btrfs: initialize location to fix -Wmaybe-uninitialized in btrfs_lookup_dentry()
* 16ccaf581da4 spi: hisi-kunpeng: Add verification for the max_frequency provided by the firmware
* d43fde5ebfe7 kselftests: dmabuf-heaps: Ensure the driver name is null-terminated
* 5a022269abb2 i3c: mipi-i3c-hci: Error out instead on BUG_ON() in IBI DMA setup
* 1f489656d506 i3c: master: svc: resend target address when get NACK
* c03185f4a23e vfs: Fix potential circular locking through setxattr() and removexattr()
* e42ea96d6d36 regmap: maple: work around gcc-14.1 false-positive warning
* fd8e14122374 LoongArch: Use correct API to map cmdline in relocate_kernel()
* 938acd8e3aa0 net: dpaa: avoid on-stack arrays of NR_CPUS elements
* 013dae4735d2 Bluetooth: btnxpuart: Fix Null pointer dereference in btnxpuart_flush()
* 9fd29738377c tcp: Don't drop SYN+ACK for simultaneous connect().
* 78c6e39fef5c PCI: Add missing bridge lock to pci_bus_lock()
* ce2e63804abf riscv: set trap vector earlier
* 124451bbc2d3 cxl/region: Verify target positions using the ordered target list
* 41a0f85e268d btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
* 7d1df13bf078 btrfs: clean up our handling of refs == 0 in snapshot delete
* e7469c65b3c5 btrfs: replace BUG_ON with ASSERT in walk_down_proc()
* 951b696db188 fs/ntfs3: Check more cases when directory is corrupted
* 6b1b0a86d9c1 smp: Add missing destroy_work_on_stack() call in smp_call_on_cpu()
* 6922ab293262 drm/amdgpu: reject gang submit on reserved VMIDs
* c2618dcb26c7 wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
* abc8b81b6fc7 dma-mapping: benchmark: Don't starve others when doing the test
* e16c4c245150 jbd2: avoid mount failed when commit block is partial submitted
* 3236afd1a2fa ext4: fix possible tid_t sequence overflows
* 077c7e5fee4b drm/amdgpu: Set no_hw_access when VF request full GPU fails
* 030958c2d05e libbpf: Add NULL checks to bpf_object__{prev_map,next_map}
* 4b83b207f006 ASoc: TAS2781: replace beXX_to_cpup with get_unaligned_beXX for potentially broken alignment
* 8fecb75bff1b hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
* 2f695544084a hwmon: (nct6775-core) Fix underflows seen when writing limit attributes
* 46e4fd338d5b hwmon: (lm95234) Fix underflows seen when writing limit attributes
* 6891b11a0c62 hwmon: (adc128d818) Fix underflows seen when writing limit attributes
* 3a986d134402 crypto: qat - fix unintentional re-enabling of error interrupts
* 7b1d779647af scsi: pm80xx: Set phy->enable_completion only when we wait for it
* 2f49e05d6b58 scsi: ufs: core: Remove SCSI host only if added
* c83d464b82a8 wifi: rtw88: usb: schedule rx work after everything is set up
* c5b30148ef3b virtio_ring: fix KMSAN error for premapped mode
* b82d4d5c736f pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
* 72377cee3f46 devres: Initialize an uninitialized struct member
* ec5b47a37017 um: line: always fill *error_out in setup_one_line()
* 84a6b76b2859 cgroup: Protect css->cgroup write under css_set_lock
* 7cfa7abb240c iommu/vt-d: Handle volatile descriptor status read
* 8b3267428333 dm init: Handle minors larger than 255
* 67786b291e77 ASoC: topology: Properly initialize soc_enum values
* 8bdbc44c6d26 phy: zynqmp: Take the phy mutex in xlate
* 441e6f5829be firmware: cs_dsp: Don't allow writes to read-only controls
* e997b357b13a xen: privcmd: Fix possible access to a freed kirqfd instance
* 2b110cce19c8 selftests: net: enable bind tests
* 97d627461504 net: dsa: vsc73xx: fix possible subblocks range of CAPT block
* c6c535a44469 net: bridge: br_fdb_external_learn_add(): always set EXT_LEARN
* 565eb51b3d80 r8152: fix the firmware doesn't work
* 1df42be305fe fou: Fix null-ptr-deref in GRO.
* 40531583c5cd bareudp: Fix device stats updates.
* f8d6acb19f4a bpf, net: Fix a potential race in do_sock_getsockopt()
* 2174a3c36899 net/socket: Break down __sys_getsockopt
* e88c16a4f07e net/socket: Break down __sys_setsockopt
* 09fba0162ba0 bpf: Add sockptr support for setsockopt
* 4a746fb253fa bpf: Add sockptr support for getsockopt
* 07200e313cb5 usbnet: modern method to get random MAC
* 81e5622c052b ice: do not bring the VSI up, if it was down before the XDP setup
* 2f057db2fb29 ice: protect XDP configuration with a mutex
* 26928c8f00f6 net: phy: Fix missing of_node_put() for leds
* 217539e994e5 hwmon: (hp-wmi-sensors) Check if WMI event data exists
* ed60aab60641 igc: Unlock on error in igc_io_resume()
* 249c88e7fb45 Bluetooth: MGMT: Fix not generating command complete for MGMT_OP_DISCONNECT
* d56412ee7cf9 Bluetooth: hci_sync: Introduce hci_cmd_sync_run/hci_cmd_sync_run_once
* d948e1ffa1d4 Bluetooth: hci_sync: Attempt to dequeue connection attempt
* 1499f79995c7 Bluetooth: hci_sync: Add helper functions to manipulate cmd_sync queue
* 98f66ea456d5 Bluetooth: hci_conn: Fix UAF Write in __hci_acl_create_connection_sync
* e78bd85af297 Bluetooth: Remove pending ACL connection attempts
* c57edb548276 Bluetooth: hci_conn: Only do ACL connections sequentially
* 9cd7289bcc24 Bluetooth: hci_event: Use HCI error defines instead of magic values
* a22cbf1e085b Bluetooth: qca: If memdump doesn't work, re-enable IBS
* 503901d3c9e5 can: kvaser_pciefd: Use a single write when releasing RX buffers
* 6587b387cd54 can: kvaser_pciefd: Move reset of DMA RX buffers to the end of the ISR
* 00e4c69422c0 can: kvaser_pciefd: Rename board_irq to pci_irq
* 42408507362d can: kvaser_pciefd: Remove unnecessary comment
* c1fb6226795d can: kvaser_pciefd: Skip redundant NULL pointer check in ISR
* c5e236744db6 regulator: core: Stub devm_regulator_bulk_get_const() if !CONFIG_REGULATOR
* dc2694e474b7 platform/x86: dell-smbios: Fix error path in dell_smbios_init()
* efe8effe1380 ice: Add netif_device_attach/detach into PF reset flow
* 4dde04370503 igb: Fix not clearing TimeSync interrupts for 82580
* 0a9423f99ded cifs: Fix FALLOC_FL_ZERO_RANGE to preflush buffered part of target region
* b4b2115d1f50 rust: kbuild: fix export of bss symbols
* 4de4e53bbd13 rust: Use awk instead of recent xargs
* 0e52907493fd can: mcp251xfd: fix ring configuration when switching from CAN-CC to CAN-FD mode
* db5aca78e260 can: m_can: Release irq on error in m_can_open
* 4377b79323df can: bcm: Remove proc entry when dev is unregistered.
* 9a41def4c48f drm/amdgpu: check for LINEAR_ALIGNED correctly in check_tiling_flags_gfx6
* dfafee0a7b51 drm/amd/display: Check denominator pbn_div before used
* dd48992a8a90 pcmcia: Use resource_size function on resource object
* b4987d0236d5 media: qcom: camss: Add check for v4l2_fwnode_endpoint_parse
* 6970213c7e7d Input: ili210x - use kvmalloc() to allocate buffer for firmware update
* 576d0fb6f8d4 PCI: keystone: Add workaround for Errata #i2037 (AM65x SR 1.0)
* 7b645e687086 ice: Check all ice_vsi_rebuild() errors in function
* 4ef01846c686 vfio/spapr: Always clear TCEs before unsetting the window
* 4676bacc6eaf media: vivid: don't set HDMI TX controls if there are no HDMI outputs
* 2521ba3cfa1d drm/amdgpu: clear RB_OVERFLOW bit when enabling interrupts
* 8bc7b3ce33e6 drm/amdgpu: Fix smatch static checker warning
* 1bd1fe1109fc drm/amd/display: Check HDCP returned status
* 874e3bb302f9 drm/amd/display: Run DC_LOG_DC after checking link->link_enc
* b2a50ffdd1a0 usb: gadget: aspeed_udc: validate endpoint index for ast udc
* 4292441b87b8 usb: uas: set host status byte on data completion error
* d22d72e2bf9c wifi: brcmsmac: advertise MFP_CAPABLE to enable WPA3
* 56b7104b823b leds: spi-byte: Call of_node_put() on error path
* 6ae2e315a388 media: vivid: fix wrong sizeimage value for mplane
* 1741021fc120 riscv: kprobes: Use patch_text_nosync() for insn slots
* d670934d4fc9 fs/ntfs3: One more reason to mark inode bad
* a56330761950 udf: Avoid excessive partition lengths
* 415f3634d53c wifi: iwlwifi: mvm: use IWL_FW_CHECK for link ID check
* 54921e9a7a8e netfilter: nf_conncount: fix wrong variable type
* 75758ca26cb5 iommu: sun50i: clear bypass register
* 4ebd15ab4b85 x86/kmsan: Fix hook for unaligned accesses
* 9c2450cf5d65 af_unix: Remove put_pid()/put_cred() in copy_peercred().
* 29ac5a9b6e9c irqchip/armada-370-xp: Do not allow mapping IRQ 0 and 1
* 9a173212a318 accel/habanalabs/gaudi2: unsecure edma max outstanding register
* 53f17409abf6 ELF: fix kernel.randomize_va_space double read
* 3c9e7909df15 bpf, verifier: Correct tail_call_reachable for bpf prog
* b181e96e8043 smack: unix sockets: fix accept()ed socket label
* 838c2cfdb6be wifi: ath12k: fix firmware crash due to invalid peer nss
* b366b1e1dda7 wifi: ath12k: fix uninitialize symbol error on ath12k_peer_assoc_h_he()
* fd05943b054b ALSA: hda: Add input value sanity checks to HDMI channel map controls
* 4a67c7c03830 ALSA: control: Apply sanity check of input values for user elements
* 337266ada863 drm/i915: Do not attempt to load the GSC multiple times
* 0a1a961bde43 nilfs2: fix state management in error path of log writing function
* 8c6e43b3d5f1 nilfs2: protect references to superblock parameters exposed in sysfs
* 9d8c3a585d56 nilfs2: fix missing cleanup on rollforward recovery error
* d4a9039a7b3d sched: sch_cake: fix bulk flow accounting logic for host fairness
* 18a5a1694046 ila: call nf_unregister_net_hooks() sooner
* c8219a27fa43 tcp_bpf: fix return value of tcp_bpf_sendmsg()
* 94479011f4f5 Revert "drm/amdgpu: align pp_power_profile_mode with kernel docs"
* 73d20d08d39e x86/apic: Make x2apic_disable() work correctly
* 55c834bc9f82 x86/fpu: Avoid writing LBR bit to IA32_XSS unless supported
* ec36815215d7 net: mctp-serial: Fix missing escapes on transmit
* 9e0bff4900b5 net: mana: Fix error handling in mana_create_txq/rxq's NAPI cleanup
* 05e08297c3c2 eventfs: Use list_del_rcu() for SRCU protected list variable
* e0d724932ad1 fscache: delete fscache_cookie_lru_timer when fscache exits to avoid UAF
* 3c6b4bcf3784 userfaultfd: fix checks for huge PMDs
* 4a594acc12d5 userfaultfd: don't BUG_ON() if khugepaged yanks our page table
* b4fdabffae14 tracing/timerlat: Add interface_lock around clearing of kthread in stop_kthread()
* 993ecb4ec1f3 tracing: Avoid possible softlockup in tracing_iter_reset()
* 8c72f0b2c45f tracing/timerlat: Only clear timer if a kthread exists
* 7a5f01828edf tracing/osnoise: Use a cpumask to know what threads are kthreads
* d034bff62fae spi: rockchip: Resolve unbalanced runtime PM / system PM handling
* 1b2770e27d6d mm: vmalloc: ensure vmap_block is initialised before adding to queue
* c318a4bb36f2 kexec_file: fix elfcorehdr digest exclusion when CONFIG_CRASH_HOTPLUG=y
* 8fecde9c3f9a can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
* f58f23328932 clk: qcom: clk-alpha-pll: Fix the trion pll postdiv set rate API
* 229493828da0 clk: qcom: clk-alpha-pll: Fix the pll post div mask
* 72f4fc5fb291 clk: starfive: jh7110-sys: Add notifier for PLL0 clock
* f36df5cc866f fuse: fix memory leak in fuse_create_open
* bfd55cd4295a fuse: use unsigned type for getxattr/listxattr size truncation
* ad6451ab31e1 fuse: update stats for pages in dropped aux writeback list
* a7fa220ebb41 mmc: cqhci: Fix checking of CQHCI_HALT state
* 4c6520627bbe mmc: sdhci-of-aspeed: fix module autoloading
* 5b4bf3948875 mmc: dw_mmc: Fix IDMAC operation with pages bigger than 4K
* 115a755bb38d mmc: core: apply SD quirks earlier during probe
* 84996e92a184 Bluetooth: MGMT: Ignore keys being loaded with invalid type
* c4252955e1fb Revert "Bluetooth: MGMT/SMP: Fix address type when using SMP over BREDR/LE"
* f9275893b07f rust: macros: provide correct provenance when constructing THIS_MODULE
* d6344cc86f31 rust: types: Make Opaque::get const
* 77ee2eaee4d9 nvme-pci: Add sleep quirk for Samsung 990 Evo
* 85f03ca98e07 rtmutex: Drop rt_mutex::wait_lock before scheduling
* 0b46b4ac929f x86/kaslr: Expose and use the end of the physical memory address space
* 2f4d7b702668 irqchip/gic-v2m: Fix refcount leak in gicv2m_of_init()
* 0eaf812aa150 perf/x86/intel: Limit the period on Haswell
* ef00818c50cf x86/tdx: Fix data leak in mmio_read()
* c0fbc9593b18 ata: libata: Fix memory leak for error path in ata_host_alloc()
* f75881f54c05 ksmbd: Unlock on in ksmbd_tcp_set_interfaces()
* 41bc256da7e4 ksmbd: unset the binding mark of a reused connection
* 5a72d1edb084 smb: client: fix double put of @cfile in smb2_set_path_size()
* d84ab6661e8d powerpc/qspinlock: Fix deadlock in MCS queue
* c1f23443da3f ALSA: hda/realtek: Support mute LED on HP Laptop 14-dq2xxx
* 421c2701a9fe ALSA: hda/realtek: add patch for internal mic in Lenovo V145
* 638e61b00208 ALSA: hda/conexant: Add pincfg quirk to enable top speakers on Sirius devices
* 6c7c519c4dc0 KVM: SVM: Don't advertise Bus Lock Detect to guest if SVM support is missing
* c98bb4f15e7f KVM: SVM: fix emulation of msr reads/writes of MSR_FS_BASE and MSR_GS_BASE
* 939375737b5a KVM: x86: Acquire kvm->srcu when handling KVM_SET_VCPU_EVENTS
* 5d13afd021eb ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
* b0804c286ccf net: microchip: vcap: Fix use-after-free error in kunit test
* dde33a9d0b80 sch/netem: fix use after free in netem_dequeue

Change-Id: I4c89274883207e9790426a87db84fb4248fa0b2c
Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>