Merge tag 'android15-6.6.98_r00' into android15-6.6

This merges the android15-6.6.98_r00 tag into the android15-6.6 branch,
catching it up with the latest LTS releases.

It contains the following commits:

*   0c2af819 Merge 6.6.98 into android15-6.6-lts
|\
| * 9247f4e6 Linux 6.6.98
| * 20aa3d51 x86/CPU/AMD: Properly check the TSA microcode
* | 66b0293d Merge android15-6.6 into android15-6.6-lts
* | 81020b22 Revert "scsi: ufs: core: Fix abnormal scale up after last cmd finish"
* | 0b225c3d Revert "scsi: ufs: core: Add OPP support for scaling clocks and regulators"
* | b3d28c18 Revert "scsi: ufs: core: Fix clk scaling to be conditional in reset and restore"
* | 881548d5 ANDROID: GKI: add fput() to db854c symbol list
* | f67e2267 Merge 6.6.97 into android15-6.6-lts
|\|
| * 59a2de10 Linux 6.6.97
| * 897761d1 f2fs: fix to avoid use-after-free issue in f2fs_filemap_fault
| * 8c194490 x86/process: Move the buffer clearing before MONITOR
| * 6fb766d5 x86/microcode/AMD: Add TSA microcode SHAs
| * 276499bb KVM: SVM: Advertise TSA CPUID bits to guests
| * 90293047 x86/bugs: Add a Transient Scheduler Attacks mitigation
| * 2b6a5fbe x86/bugs: Rename MDS machinery to something more generic
| * 8a7ac273 powerpc/kernel: Fix ppc_save_regs inclusion in build
| * 63cff9f5 usb: typec: displayport: Fix potential deadlock
| * 4b91b77a platform/x86: think-lmi: Fix sysfs group cleanup
| * 98002f1a platform/x86: think-lmi: Fix kobject cleanup
| * cb3e3244 platform/x86: think-lmi: Create ksets consecutively
| * 36054636 powercap: intel_rapl: Do not change CLAMPING bit if ENABLE bit cannot be changed
| * 73d43c21 iommu/rockchip: prevent iommus dead loop when two masters share one IOMMU
| * 6052862b Logitech C-270 even more broken
| * 6358cb9c i2c/designware: Fix an initialization issue
| * d8eab407 dma-buf: fix timeout handling in dma_resv_wait_timeout v2
| * 59205a3e smb: client: fix readdir returning wrong type with POSIX extensions
| * 937f49be usb: chipidea: udc: disconnect/reconnect from host when do suspend/resume
| * afbec8c3 usb: cdnsp: do not disable slot for disabled slot
| * c9a841fd Input: iqs7222 - explicitly define number of external channels
| * 2cd5e7c1 Input: xpad - support Acer NGR 200 Controller
| * c16b75aa xhci: Disable stream for xHC controller with XHCI_BROKEN_STREAMS
| * 881c9274 xhci: dbc: Flush queued requests before stopping dbc
| * 897d1170 xhci: dbctty: disable ECHO flag by default
| * 7609899e usb: xhci: quirk for data loss in ISOC transfers
| * 204bdc7a NFSv4/flexfiles: Fix handling of NFS level errors in I/O
| * e3eed013 fs: export anon_inode_make_secure_inode() and fix secretmem LSM bypass
| * adb29b43 module: Provide EXPORT_SYMBOL_GPL_FOR_MODULES() helper
| * a6069306 platform/x86: hp-bioscfg: Fix class device unregistration
| * 8570c219 platform/x86: hp-bioscfg: Directly use firmware_attributes_class
| * 387da3b6 drm/v3d: Disable interrupts before resetting the GPU
| * 817662f9 rcu: Return early if callback is not specified
| * d5c1e3f3 mtd: spinand: fix memory leak of ECC engine conf
| * d547779e ACPICA: Refuse to evaluate a method if arguments are missing
| * 347827bd wifi: ath6kl: remove WARN on bad firmware input
| * 5aebb9aa wifi: mac80211: drop invalid source address OCB frames
| * 270d6371 aoe: defer rexmit timer downdev work to workqueue
| * 55dfffc5 scsi: target: Fix NULL pointer dereference in core_scsi3_decode_spec_i_port()
| * 7b9203af regulator: fan53555: add enable_time support and soft-start times
| * a1d10fee ASoC: amd: yc: update quirk data for HP Victus
| * 871beab5 powerpc: Fix struct termio related ioctl macros
| * ba911731 platform/x86/amd/pmc: Add PCSpecialist Lafite Pro V 14M to 8042 quirks list
| * 78520051 ASoC: amd: yc: Add quirk for MSI Bravo 17 D7VF internal mic
| * 69283b3f ata: pata_cs5536: fix build on 32-bit UML
| * 71f89fab ata: libata-acpi: Do not assume 40 wire cable if no devices are enabled
| * 6766316c ALSA: sb: Force to disable DMAs once when DMA mode is changed
| * c7922052 ALSA: sb: Don't allow changing the DMA mode during operations
| * c40ad1c0 drm/msm: Fix another leak in the submit error path
| * fe2695b2 drm/msm: Fix a fence leak in submit error path
| * 5df2087c drm/i915/dp_mst: Work around Thunderbolt sink disconnect after SINK_COUNT_ESI read
| * ad09bb7c drm/simpledrm: Do not upcast in release helpers
| * 51ba6586 scsi: ufs: core: Fix clk scaling to be conditional in reset and restore
| * 847af89a scsi: ufs: core: Add OPP support for scaling clocks and regulators
| * 95ffe734 scsi: ufs: core: Fix abnormal scale up after last cmd finish
| * 9e67044a f2fs: fix to zero post-eof page
| * d1ccd98e f2fs: convert f2fs_vm_page_mkwrite() to use folio
| * 7ac8a61e f2fs: prevent writing without fallocate() for pinned files
| * b43c3050 f2fs: add tracepoint for f2fs_vm_page_mkwrite()
* | 170440ba Revert "Bluetooth: hci_core: Fix use-after-free in vhci_flush()"
* | 50ec3336 Merge bceae1da ("x86/traps: Initialize DR6 by writing its architectural reset value") into android15-6.6-lts
|\|
| * bceae1da x86/traps: Initialize DR6 by writing its architectural reset value
| * 16254aa9 bnxt: properly flush XDP redirect lists
| * 6310aafd wifi: mac80211: finish link init before RCU publish
| * ebca4264 wifi: mac80211: Add link iteration macro for link data
| * 32d0b580 wifi: mac80211: chan: chandef is non-NULL for reserved
| * bc0819a2 Bluetooth: hci_core: Fix use-after-free in vhci_flush()
| * 64d07a40 smb: client: remove \t from TP_printk statements
| * 3499dcb6 btrfs: fix qgroup reservation leak on failure to allocate ordered extent
| * ccdd3eae Revert "drm/i915/gem: Allow EXEC_CAPTURE on recoverable contexts on DG1"
| * ca7d5aa7 smb: client: fix race condition in negotiate timeout by using more precise timing
| * 70b32cba amd-xgbe: do not double read link status
| * f680a464 net/sched: Always pass notifications when child class becomes empty
| * 5ea2a10b nui: Fix dma_mapping_error() check
| * 7a1841c9 rose: fix dangling neighbour pointers in rose_rt_device_down()
| * 744cd8ba enic: fix incorrect MTU comparison in enic_change_mtu()
| * a133683c amd-xgbe: align CL37 AN sequence as per databook
| * f2ca04cb lib: test_objagg: Set error message in check_expect_hints_stats()
| * 8f465284 igc: disable L1.2 PCI-E link substate to avoid performance issue
| * 83205811 drm/i915/gsc: mei interrupt top half should be in irq disabled context
| * 40e09506 drm/i915/gt: Fix timeline left held on VMA alloc error
| * 968a419c net: usb: lan78xx: fix WARN in __netif_napi_del_locked on disconnect
| * 0cee638d smb: client: fix warning when reconnecting channel
* | c9f588b3 Merge 33713f7c ("platform/mellanox: mlxreg-lc: Fix logic error in power state check") into android15-6.6-lts
|\|
| * 33713f7c platform/mellanox: mlxreg-lc: Fix logic error in power state check
| * 421672fb platform/x86: dell-wmi-sysman: Fix class device unregistration
| * dba37f72 platform/x86: dell-sysman: Directly use firmware_attributes_class
| * 4074f6a1 platform/x86: think-lmi: Fix class device unregistration
| * 093ee65b platform/x86: think-lmi: Directly use firmware_attributes_class
| * ee813c62 platform/x86: firmware_attributes_class: Simplify API
| * e52b896d platform/x86: firmware_attributes_class: Move include linux/device/class.h
| * 9143d22a platform/x86: make fw_attr_class constant
| * 3df1e72b arm64: dts: qcom: sm8550: add UART14 nodes
| * 0deb3eb7 platform/x86: dell-wmi-sysman: Fix WMI data block retrieval in sysfs callbacks
| * 55a90f82 drm/i915/selftests: Change mock_request() to return error pointers
| * 822c0544 spi: spi-fsl-dspi: Clear completion counter before initiating transfer
| * 1fc5dc93 drm/exynos: fimd: Guard display clock control with runtime PM calls
| * 7e6423f8 dpaa2-eth: fix xdp_rxq_info leak
| * 31afd307 ethernet: atl1: Add missing DMA mapping error checks and count errors
| * 2a7ac29f btrfs: use btrfs_record_snapshot_destroy() during rmdir
| * d77a1680 btrfs: propagate last_unlink_trans earlier when doing a rmdir
| * 65d7f92d btrfs: rename err to ret in btrfs_rmdir()
| * 2d11d274 btrfs: fix iteration of extrefs during log replay
| * 79b025eb btrfs: fix missing error handling when searching for inode refs during log replay
| * 52928120 Bluetooth: Prevent unintended pause by checking if advertising is active
| * e373354e platform/mellanox: nvsw-sn2201: Fix bus number in adapter error message
| * d8a1ad18 RDMA/mlx5: Fix vport loopback for MPV device
| * efb3413f RDMA/mlx5: Fix CC counters query for MPV
| * 301303d1 RDMA/mlx5: Fix HW counters query for non-representor devices
| * ee9cb286 scsi: ufs: core: Fix spelling of a sysfs attribute name
| * 39dac98a scsi: qla4xxx: Fix missing DMA mapping error in qla4xxx_alloc_pdu()
| * c3ec87fb scsi: qla2xxx: Fix DMA mapping test in qla24xx_get_port_database()
| * 8ca65fa7 NFSv4/pNFS: Fix a race to wake on NFS_LAYOUT_DRAIN
| * d0877c47 nfs: Clean up /proc/net/rpc/nfs when nfs_fs_proc_net_init() fails.
| * 23a3b32a RDMA/mlx5: Initialize obj_event->obj_sub_list before xa_insert
| * edca4751 platform/mellanox: mlxbf-tmfifo: fix vring_desc.len assignment
| * 3962e5a3 arm64: dts: apple: t8103: Fix PCIe BCM4377 nodename
| * b935c1e7 mtk-sd: reset host->mrq on prepare_data() error
| * 61cdd663 mtk-sd: Prevent memory corruption from DMA map failure
| * b3b00e9b mtk-sd: Fix a pagefault in dma_unmap_sg() for not prepared data
| * 45e9444b usb: typec: altmodes/displayport: do not index invalid pin_assignments
| * 24418bc7 regulator: gpio: Fix the out-of-bounds access to drvdata::gpiods
| * 0506547f Bluetooth: MGMT: mesh_send: check instances prior disabling advertising
| * 8af14069 Bluetooth: MGMT: set_mesh: update LE scan interval and window
| * 7e88ad41 Bluetooth: hci_sync: revert some mesh modifications
| * 3c0c18ef mmc: core: sd: Apply BROKEN_SD_DISCARD quirk earlier
| * c4fad246 Revert "mmc: sdhci: Disable SD card clock before changing parameters"
| * 3855b7ac mmc: sdhci: Add a helper function for dump register in dynamic debug mode
| * 94d0c326 vsock/vmci: Clear the vmci transport packet properly when initializing it
| * e7191481 s390/pci: Do not try re-enabling load/store if device is disabled
| * 80b971be virtio-net: ensure the received length does not exceed allocated size
| * 39617dc3 rtc: cmos: use spin_lock_irqsave in cmos_interrupt
| * 5cdd1f73 rtc: pcf2127: fix SPI command byte for PCF2131
| * 1cb814db rtc: pcf2127: add missing semicolon after statement
* | 06215a57 ANDROID: GKI: add devm_regulator_bulk_get_enable to db845c symbol list
* | 3925dd0a Revert "firmware: arm_scmi: Add a common helper to check if a message is supported"
* | cecf7b3c Merge 6.6.96 into android15-6.6-lts
|\|
| * a5df3a70 Linux 6.6.96
| * 18d3f9b8 ARM: 9354/1: ptrace: Use bitfield helpers
| * f9917821 firmware: arm_scmi: Ensure that the message-id supports fastchannel
| * 67a50f57 firmware: arm_scmi: Add a common helper to check if a message is supported
| * 6f27bbf3 nvme: always punt polled uring_cmd end_io work to task_work
| * cdfb20e4 spi: spi-cadence-quadspi: Fix pm runtime unbalance
| * c46358d0 Revert "ipv6: save dontfrag in cork"
| * 1583d908 x86/tools: Drop duplicate unlikely() definition in insn_decoder_test.c
| * ed1f395e Kunit to check the longest symbol length
| * 5f478783 s390/entry: Fix last breaking event handling in case of stack corruption
| * 56aa7679 media: uvcvideo: Rollback non processed entities on error
| * f165d04c kbuild: rpm-pkg: simplify installkernel %post
| * cca5bb42 scripts: clean up IA-64 code
| * b90dc5d6 ksmbd: remove unsafe_memcpy use in session setup
| * 107a48df ksmbd: Use unsafe_memcpy() for ntlm_negotiate
| * 8302adf6 drm/amdgpu: switch job hw_fence to amdgpu_fence
| * a5d7cc16 drm/amdgpu: Add kicker device detection
| * f640d011 drm/i915/gem: Allow EXEC_CAPTURE on recoverable contexts on DG1
| * a8ceffae drm/amdgpu: amdgpu_vram_mgr_new(): Clamp lpfn to total vram
| * 5148c7ea drm/amd/display: Add null pointer check for get_first_active_display()
| * ede04b47 drm/bridge: cdns-dsi: Wait for Clk and Data Lanes to be ready
| * 252e6e96 drm/bridge: cdns-dsi: Check return value when getting default PHY config
| * c4ee1b31 drm/bridge: cdns-dsi: Fix connecting to next bridge
| * f9b819c3 drm/bridge: cdns-dsi: Fix phy de-init and flag it so
| * 2565ff3a drm/bridge: cdns-dsi: Fix the clock variable for mode_valid()
| * 76115eaf drm/amdkfd: Fix race in GWS queue scheduling
| * 7946a10f drm/msm/gpu: Fix crash when throttling GPU immediately during boot
| * 50e48e94 drm/udl: Unregister device before cleaning up on disconnect
| * 5ff3636b drm/tegra: Fix a possible null pointer dereference
| * 23134a52 drm/tegra: Assign plane type before registration
| * 9ec447c2 drm/etnaviv: Protect the scheduler's pending list with its lock
| * 6d7b814c drm/cirrus-qemu: Fix pitch programming
| * 66f122e6 drm/ast: Fix comment on modeset lock
| * bf2c1643 scsi: megaraid_sas: Fix invalid node index
| * 42cf4f01 HID: wacom: fix kobject reference count leak
| * f531651c HID: wacom: fix memory leak on sysfs attribute creation failure
| * 33acbeeb HID: wacom: fix memory leak on kobject creation failure
| * f0ffc807 HID: lenovo: Restrict F7/9/11 mode to compact keyboards only
| * 8a89e9c2 net: libwx: fix the creation of page_pool
| * 9052c7bc btrfs: update superblock's device bytes_used when dropping chunk
| * aeeae8fe btrfs: fix a race between renames and directory logging
| * 6ad80378 dm-raid: fix variable in journal device check
| * e395e34b Bluetooth: L2CAP: Fix L2CAP MTU negotiation
| * f90d78d6 serial: imx: Restore original RXTL for console to fix data loss
| * 40f62f8c dt-bindings: serial: 8250: Make clocks and clock-frequency exclusive
| * f89c4052 staging: rtl8723bs: Avoid memset() in aes_cipher() and aes_decipher()
| * e5e6a5aa EDAC/amd64: Fix size calculation for Non-Power-of-Two DIMMs
| * c82c7041 smb: client: fix potential deadlock when reconnecting channels
| * ced8eff1 drm/bridge: ti-sn65dsi86: Add HPD for DisplayPort connector type
| * 1c9a8a84 drm/bridge: ti-sn65dsi86: make use of debugfs_init callback
| * ee800ff7 drm/i915: fix build error some more
| * 0804d77f net: selftests: fix TCP packet checksum
| * 5b63793d ALSA: hda/realtek: Fix built-in mic on ASUS VivoBook X507UAR
| * cabed6ba atm: Release atm_dev_mutex after removing procfs in atm_dev_deregister().
| * 63528d60 net: enetc: Correct endianness handling in _enetc_rd_reg64
| * ad9c4941 libbpf: Fix possible use-after-free for externs
| * c61e284d um: ubd: Add missing error check in start_io_thread()
| * 8f96a2ae vsock/uapi: fix linux/vm_sockets.h userspace compilation errors
| * d58343f8 af_unix: Don't set -ECONNRESET for consumed OOB skb.
| * 86136c67 wifi: mac80211: fix beacon interval calculation overflow
| * 9b9a87f0 libbpf: Fix null pointer dereference in btf_dump__free on allocation failure
| * 591f7962 attach_recursive_mnt(): do not lock the covering tree when sliding something under it
| * 74fcb385 ALSA: usb-audio: Fix out-of-bounds read in snd_usb_get_audioformat_uac3()
| * 3c709dce atm: clip: prevent NULL deref in clip_push()
| * 64a99eff lib/group_cpus: fix NULL pointer dereference from group_cpus_evenly()
| * 88f38696 s390/pkey: Prevent overflow in size calculation for memdup_user()
| * db33aa6c ASoC: amd: yc: Add DMI quirk for Lenovo IdeaPad Slim 5 15
| * 490a43d0 mm/damon/sysfs-schemes: free old damon_sysfs_scheme_filter->memcg_path on write
| * c9036b63 i2c: robotfuzz-osif: disable zero-length read messages
| * 4841060d i2c: tiny-usb: disable zero-length read messages
| * fad0a2c1 af_unix: Don't leave consecutive consumed OOB skbs.
| * aabb458c af_unix: Don't call skb_get() for OOB skb.
| * 0919388a af_unix: Define locking order for U_RECVQ_LOCK_EMBRYO in unix_collect_skb().
| * fd3af69c af_unix: Define locking order for U_LOCK_SECOND in unix_state_double_lock().
| * b7904e2f af_unix: Define locking order for unix_table_double_lock().
| * 47847495 platform/x86: ideapad-laptop: use usleep_range() for EC polling
| * 6e7af3d4 platform/x86: ideapad-laptop: move ACPI helpers from header to source file
| * f8761b11 platform/x86: ideapad-laptop: move ymc_trigger_ec from lenovo-ymc
| * d19ae7b0 platform/x86: ideapad-laptop: introduce a generic notification chain
| * b6b5bcae dummycon: Trigger redraw when switching consoles with deferred takeover
| * 8853bad7 tty: vt: make consw::con_switch() return a bool
| * e9ba8c52 tty: vt: sanitize arguments of consw::con_clear()
| * 0b10b5ab tty: vt: make init parameter of consw::con_init() a bool
| * 7bf946a2 PCI: apple: Set only available ports up
| * b8704eef PCI: apple: Use helper function for_each_child_of_node_scoped()
| * df1d7e87 uio_hv_generic: Align ring size to system page
| * ca019889 uio_hv_generic: Query the ringbuffer size for device
| * ebba6cc0 Drivers: hv: vmbus: Add utility function for querying ring size
| * 3bc5abf8 f2fs: don't over-report free space or inodes in statvfs
| * 9830ef18 ASoC: codecs: wcd9335: Fix missing free of regulator supplies
| * 28b6ef1a ASoC: codec: wcd9335: Convert to GPIO descriptors
| * 99d69684 ASoC: codecs: wcd9335: Handle nicer probe deferral and simplify with dev_err_probe()
| * 0c40fa81 jfs: validate AG parameters in dbMount() to prevent crashes
| * 7747d3f9 fs/jfs: consolidate sanity checking in dbMount
| * fc97a116 btrfs: handle csum tree error with rescue=ibadroots correctly
| * 2cbeb47e ovl: Check for NULL d_inode() in ovl_dentry_upper()
| * d120737a scsi: ufs: core: Don't perform UFS clkscaling during host async scan
| * acc1d4cc ceph: fix possible integer overflow in ceph_zero_objects()
| * f3465bb3 ALSA: usb-audio: Add a quirk for Lenovo Thinkpad Thunderbolt 3 dock
| * 789a3f63 ALSA: hda: Add new pci id for AMD GPU display HD audio controller
| * b8cd384c ALSA: hda: Ignore unsol events for cards being shut down
| * 23fe269b usb: typec: mux: do not return on EOPNOTSUPP in {mux, switch}_set
| * 8851e405 usb: typec: displayport: Receive DP Status Update NAK request exit dp altmode
| * 00626325 usb: cdc-wdm: avoid setting WDM_READ for ZLP-s
| * 433cb3e7 usb: Add checks for snprintf() calls in usb_alloc_dev()
| * 0aaf8104 usb: common: usb-conn-gpio: use a unique name for usb connector device
| * 8e958d10 tty: serial: uartlite: register uart driver in init
| * a33f507f usb: potential integer overflow in usbg_make_tpg()
| * a8d1b4f2 misc: tps6594-pfsm: Add NULL pointer check in tps6594_pfsm_probe()
| * 1063c586 iio: adc: ad_sigma_delta: Fix use of uninitialized status_pos
| * 41732f9f usb: dwc2: also exit clock_gating when stopping udc while suspended
| * 8217fa7d coresight: Only check bottom two claim bits
| * 8dbc01f0 um: use proper care when taking mmap lock during segfault
| * 265ca174 um: Add cmpxchg8b_emu and checksum functions to asm-prototypes.h
| * 462215a2 iio: pressure: zpa2326: Use aligned_s64 for the timestamp
| * c5734f9b drm/scheduler: signal scheduled fence when kill job
| * 553f560e bcache: fix NULL pointer in cache_set_flush()
| * 9d578589 amd/amdkfd: fix a kfd_process ref leak
| * 2fb2470b md/md-bitmap: fix dm-raid max_write_behind setting
| * aaef4f1f PCI: apple: Fix missing OF node reference in apple_pcie_setup_port
| * 969c9646 PCI: dwc: Make link training more robust by setting PORT_LOGIC_LINK_WIDTH to one lane
| * 7d942dbc dmaengine: xilinx_dma: Set dma_device directions
| * e0051a3d dmaengine: idxd: Check availability of workqueue allocated by idxd wq driver before using
| * c765f592 rust: module: place cleanup_module() in .exit.text section
| * efe5db9d ksmbd: provide zero as a unique ID to the Mac client
| * f72093f2 ksmbd: allow a filename to contain special characters on SMB3.1.1 posix extension
| * ad804e36 hwmon: (pmbus/max34440) Fix support for max34451
| * 2d8b3898 NFSv4: xattr handlers should check for absent nfs filehandles
| * 9d90ab45 cxl/region: Add a dev_err() on missing target list entries
| * 96715eb1 fuse: fix race between concurrent setattrs from multiple nodes
| * a13b2634 leds: multicolor: Fix intensity setting while SW blinking
| * c3616dfd sunrpc: don't immediately retransmit on seqno miss
| * f0ba7e6d mfd: max14577: Fix wakeup source leaks on device unbind
| * 35cda861 mailbox: Not protect module_put with spin_lock_irqsave
| * 7d03b140 NFSv4.2: fix listxattr to return selinux security label
| * cad6f283 NFSv4: Always set NLINK even if the server doesn't support it
| * 670c1c54 cifs: Fix encoding of SMB1 Session Setup NTLMSSP Request in non-UNICODE mode
| * 0e7f0e6e cifs: Fix cifs_query_path_info() for Windows NT servers
| * 4a6499ff cifs: Correctly set SMB1 SessionKey field in Session Setup Request
* | d3539418 Merge 6.6.95 into android15-6.6-lts
|\|
| * 3f5b4c10 Linux 6.6.95
| * 218c3629 cifs: Remove duplicate fattr->cf_dtype assignment from wsl_to_fattr() function
| * 6b4311f7 gpio: mlxbf3: only get IRQ for device instance 0
| * f6071c3c perf evsel: Missed close() when probing hybrid core PMUs
| * 2a673aca RISC-V: KVM: Don't treat SBI HFENCE calls as NOPs
| * e20f0f44 RISC-V: KVM: Fix the size parameter check in SBI SFENCE calls
| * a77d0a14 scsi: elx: efct: Fix memory leak in efct_hw_parse_filter()
| * 21da6d35 arm64/ptrace: Fix stack-out-of-bounds read in regs_get_kernel_stack_nth()
| * 7c631e5c perf/core: Fix WARN in perf_cgroup_switch()
| * bddec730 perf: Fix cgroup state vs ERROR
| * 2ee6044a perf: Fix sample vs do_exit()
| * 4ca4f418 s390/pci: Fix __pcilg_mio_inuser() inline assembly
| * d7094ad3 platform/loongarch: laptop: Add backlight power control support
| * 7b47919a smb: client: fix first command failure during re-negotiation
| * cc77844d Revert "cpufreq: tegra186: Share policy per cluster"
| * eb74c6f1 ARM: dts: am335x-bone-common: Increase MDIO reset deassert delay to 50ms
| * 94ec33e9 ARM: dts: am335x-bone-common: Increase MDIO reset deassert time
| * 2f38986e platform/x86: ideapad-laptop: add missing Ideapad Pro 5 fn keys
| * e9a011fc serial: sh-sci: Increment the runtime usage counter for the earlycon device
| * cfa7fa02 net: make for_each_netdev_dump() a little more bug-proof
| * b8ced2b9 smb: Log an error when close_all_cached_dirs fails
| * aaaa689a dt-bindings: i2c: nvidia,tegra20-i2c: Specify the required properties
| * 63779774 EDAC/amd64: Correct number of UMCs for family 19h models 70h-7fh
| * a5e3a144 net: atm: fix /proc/net/atm/lec handling
| * dffd0342 net: atm: add lec_mutex
| * bde8833e calipso: Fix null-ptr-deref in calipso_req_{set,del}attr().
| * 3162d823 ublk: santizize the arguments from userspace when adding a device
| * 66bba1fd net: lan743x: fix potential out-of-bounds write in lan743x_ptp_io_event_clock_get()
| * 7382b6f7 net: microchip: lan743x: Reduce PTP timeout on HW failure
| * 235aa081 tcp: fix passive TFO socket having invalid NAPI ID
| * d3dfe821 tipc: fix null-ptr-deref when acquiring remote ip of ethernet bearer
| * 9d0ddfb5 tcp: fix tcp_packet_delayed() for tcp_is_non_sack_preventing_reopen() behavior
| * 3261c017 atm: atmtcp: Free invalid length skb in atmtcp_c_send().
| * a0607816 mpls: Use rcu_dereference_rtnl() in mpls_route_input_rcu().
| * 4e9ab5c4 wifi: carl9170: do not ping device which has failed to load firmware
| * 43e3433a ptp: allow reading of currently dialed frequency to succeed on free-running clocks
| * a8c669bb ptp: fix breakage after ptp_vclock_in_use() rework
| * aaef8e3a e1000e: set fixed clock frequency indication for Nahum 11 and Nahum 13
| * f4c19a8e net: ice: Perform accurate aRFS flow match
| * 8662ac79 aoe: clean device rq_list in aoedev_downdev()
| * 9311d6d1 pldmfw: Select CRC32 when PLDMFW is selected
| * 4c8f5b04 hwmon: (occ) fix unaligned accesses
| * 1312d9bf hwmon: (occ) Rework attribute registration for stack usage
| * ff3dcf7f drm/i915/pmu: Fix build error with GCOV and AutoFDO enabled
| * af2f5f21 drm/nouveau/bl: increase buffer size to avoid truncate warning
| * b599b310 ionic: Prevent driver/fw getting out of sync on devcmd(s)
| * 002aa3ed drm/msm/dsi/dsi_phy_10nm: Fix missing initial VCO rate
| * 77087a79 drm/msm/disp: Correct porch timing for SDM845
| * 7e6980c2 smb: fix secondary channel creation issue with kerberos by populating hostname when adding channels
| * 599c489e sunrpc: handle SVC_GARBAGE during svc auth processing as auth error
| * 5e5d2ad9 erofs: remove unused trace event erofs_destroy_inode
| * 2536810d bpf: Fix L4 csum update on IPv6 in CHECKSUM_COMPLETE
| * f6393e5c net: Fix checksum update for ILA adj-transport
* | 041da35b Merge 3977946f ("mm/huge_memory: fix dereferencing invalid pmd migration entry") into android15-6.6-lts
|\|
| * 3977946f mm/huge_memory: fix dereferencing invalid pmd migration entry
* | 71c8356f Merge af6cfcd0 ("mm/hugetlb: unshare page tables during VMA split, not before") into android15-6.6-lts
|\|
| * af6cfcd0 mm/hugetlb: unshare page tables during VMA split, not before
| * 39c86833 iio: accel: fxls8962af: Fix temperature calculation
| * 3d849cc3 ALSA: hda/realtek: enable headset mic on Latitude 5420 Rugged
| * f80e5510 ALSA: hda/intel: Add Thinkpad E15 to PM deny list
| * d6197556 ALSA: usb-audio: Rename ALSA kcontrol PCM and PCM1 for the KTMicro sound card
| * 6562806f arm64: Restrict pagetable teardown to avoid false warning
| * 66bde385 wifi: rtw89: pci: use DBI function for 8852AE/8852BE/8851BE
| * eeacfbab wifi: cfg80211: init wiphy_work before allocating rfkill fails
| * 6d60d822 Input: sparcspkr - avoid unannotated fall-through
| * 3902205e atm: Revert atm_account_tx() if copy_from_iter_full() fails.
| * c1a2081f platform/x86/intel-uncore-freq: Fail module load when plat_info is NULL
| * 2753481c selinux: fix selinux_xfrm_alloc_user() to set correct ctx_len
| * 0902625a ksmbd: fix null pointer dereference in destroy_previous_session
| * 2a03531c selftests/x86: Add a test to detect infinite SIGTRAP handler loop
| * 372b511e udmabuf: use sgtable-based scatterlist wrappers
| * bfa4d86e net: clear the dst when changing skb protocol
| * 0357da91 net_sched: sch_sfq: reject invalid perturb period
| * bb9d4fff scsi: s390: zfcp: Ensure synchronous unit_add
| * 8d60df50 scsi: storvsc: Increase the timeouts to storvsc_timeout
| * a504536c smb: improve directory cache reuse for readdir operations
| * 202d7e83 cifs: do not disable interface polling on failure
| * 58021a32 cifs: serialize other channels when query server interfaces is pending
| * b530c44e cifs: deal with the channel loading lag while picking channels
| * cd42dddd jffs2: check jffs2_prealloc_raw_node_refs() result in few other places
| * 3f46644a jffs2: check that raw node were preallocated before writing summary
| * b427d98d LoongArch: Fix panic caused by NULL-PMD in huge_pte_offset()
| * 099cfcb9 LoongArch: Avoid using $r0/$r1 as "mask" for csrxchg
| * 782baee5 platform/loongarch: laptop: Unregister generic_sub_drivers on exit
| * 3bce9e6b platform/loongarch: laptop: Get brightness setting from EC on probe
| * 1921781e drivers/rapidio/rio_cm.c: prevent possible heap overwrite
| * 675d90ee io_uring: fix task leak issue in io_wq_create()
| * 3c3c7c66 Revert "x86/bugs: Make spectre user default depend on MITIGATION_SPECTRE_V2" on v6.6 and older
| * af4ed526 powerpc/eeh: Fix missing PE bridge reconfiguration during VFIO EEH recovery
| * a7f3cfc1 powerpc/vdso: Fix build of VDSO32 with pcrel
| * dd95b3e0 platform/x86: dell_rbu: Stop overwriting data buffer
| * f3b840fb platform/x86: dell_rbu: Fix list usage
| * 523e2f8a platform/x86/amd: pmc: Clear metrics table at start of cycle
| * 7d71ba5b fs/xattr.c: fix simple_xattr_list()
| * 897e6d88 Revert "bus: ti-sysc: Probe for l4_wkup and l4_cfg interconnect devices first"
| * cdc1b9b4 tee: Prevent size calculation wraparound on 32-bit kernels
| * 59b7304d ARM: OMAP2+: Fix l4ls clk domain handling in STANDBY
| * bca6fe52 bus: fsl-mc: increase MC_CMD_COMPLETION_TIMEOUT_MS value
| * c85311a7 watchdog: da9052_wdt: respect TWDMIN
| * 519ba757 fbcon: Make sure modelist not set on unregistered console
| * 8df53ee7 wifi: ath12k: Pass correct values of center freq1 and center freq2 for 160 MHz
| * 2304e2b5 wifi: ath12k: fix incorrect CE addresses
| * 9db1bf90 wifi: ath12k: fix link valid field initialization in the monitor Rx
| * 6bd0f2e7 wifi: ath11k: determine PM policy based on machine model
| * 42d0bfbe octeontx2-pf: Add error log forcn10k_map_unmap_rq_policer()
| * a37888a4 net: ethernet: cortina: Use TOE/TSO on all TCP
| * 38c4106c bpf, sockmap: Fix data lost during EAGAIN retries
| * bdb4da9e f2fs: fix to set atomic write status more clear
| * a3c32f17 usbnet: asix AX88772: leave the carrier control to phylink
| * e036d648 ice: fix check for existing switch rule
| * 8cde755f i40e: fix MMIO write access to an invalid page in i40e_clear_hw
| * 52a16baf sock: Correct error checking condition for (assign|release)_proto_idx()
| * 34c0a670 scsi: lpfc: Use memcpy() for BIOS version
| * 79dc5e78 wifi: ath12k: fix failed to set mhi state error during reboot with hardware grouping
| * 5cf32cef pinctrl: mcp23s08: Reset all pins to input at probe
| * f9397cf7 software node: Correct a OOB check in software_node_get_reference_args()
| * 03545901 net: ethernet: ti: am65-cpsw: handle -EPROBE_DEFER
| * c0d8c14d vxlan: Do not treat dst cache initialization errors as fatal
| * b4c83b37 net: bridge: mcast: re-implement br_multicast_{enable, disable}_port functions
| * cd978993 net: bridge: mcast: update multicast contex when vlan state is changed
| * a0ab9e91 wifi: iwlwifi: Add missing MODULE_FIRMWARE for Qu-c0-jf-b0
| * 172d1e4a wifi: mac80211: VLAN traffic in multicast path
| * 4fc2b3c0 wifi: mac80211_hwsim: Prevent tsf from setting if beacon is disabled
| * 2077cef4 wifi: iwlwifi: pcie: make sure to lock rxq->read
| * 920fcc7a iommu/amd: Ensure GA log notifier callbacks finish running before module unload
| * 32f25633 scsi: lpfc: Fix lpfc_check_sli_ndlp() handling for GEN_REQUEST64 commands
| * c697dac9 libbpf: Add identical pointer detection to btf_dedup_is_equiv()
| * f11cfb48 clk: rockchip: rk3036: mark ddrphy as critical
| * dfec43c5 wifi: mac80211: do not offer a mesh path if forwarding is disabled
| * efa7997c wireless: purelifi: plfxlc: fix memory leak in plfxlc_usb_wreq_asyn()
| * 187829fb net: vertexcom: mse102x: Return code for mse102x_rx_pkt_spi
| * 84d34bd5 net: mlx4: add SOF_TIMESTAMPING_TX_SOFTWARE flag when getting ts info
| * ae48bc0b pinctrl: armada-37xx: propagate error from armada_37xx_gpio_get()
| * 8a15a543 pinctrl: armada-37xx: propagate error from armada_37xx_pmx_gpio_set_direction()
| * 02c966a8 pinctrl: armada-37xx: propagate error from armada_37xx_gpio_get_direction()
| * 14a26f66 pinctrl: armada-37xx: propagate error from armada_37xx_pmx_set_by_name()
| * 79f3e44d net: atlantic: generate software timestamp just before the doorbell
| * 9121c2dd ipv4/route: Use this_cpu_inc() for stats on PREEMPT_RT
| * 62b62a2a x86/sgx: Prevent attempts to reclaim poisoned pages
| * c1025a54 tcp: fix initial tp->rcvq_space.space value for passive TS enabled flows
| * 156b6bac tcp: always seek for minimal rtt in tcp_rcv_rtt_update()
| * 969d61aa wifi: rtw89: leave idle mode when setting WEP encryption for AP mode
| * f11520c6 wifi: ath11k: Fix QMI memory reuse logic
| * dcf7bb43 wifi: ath12k: fix a possible dead lock caused by ab->base_lock
| * 7c4b6d8b wifi: ath12k: fix macro definition HAL_RX_MSDU_PKT_LENGTH_GET
| * 6f79eb2e net: dlink: add synchronization for stats update
| * 04fa1bef i2c: npcm: Add clock toggle recovery
| * be5f6a65 i2c: tegra: check msg length in SMBUS block read
| * 76232544 cpufreq: scmi: Skip SCMI devices that aren't used by the CPUs
| * a620f666 sctp: Do not wake readers in __sctp_write_space()
| * a0b91fa8 wifi: mt76: mt7921: add 160 MHz AP for mt7922 device
| * bf3dcb53 wifi: mt76: mt76x2: Add support for LiteOn WN4516R,WN4519R
| * 2c1a2d86 emulex/benet: correct command version selection in be_cmd_get_stats()
| * 24900688 wifi: mt76: mt7996: drop fragments with multicast or broadcast RA
| * 775fdb40 i2c: designware: Invoke runtime suspend on quick slave re-registration
| * 7bf4461f bpf: Check rcu_read_lock_trace_held() in bpf_map_lookup_percpu_elem()
| * 61fc3248 f2fs: use vmalloc instead of kvmalloc in .init_{,de}compress_ctx
| * 92dbc2a2 tipc: use kfree_sensitive() for aead cleanup
| * 088279ff net: lan743x: Modify the EEPROM and OTP size for PCI1xxxx devices
| * d2a25ca4 net: macb: Check return value of dma_set_mask_and_coherent()
| * c148af1f ACPI: battery: negate current when discharging
| * 66353564 PM: runtime: fix denying of auto suspend in pm_suspend_timer_fn()
| * 6a7c583f gpiolib: of: Add polarity quirk for s5m8767
| * 5505ec19 ASoC: tegra210_ahub: Add check to of_device_get_match_data()
| * cf961a38 ACPICA: utilities: Fix overflow check in vsnprintf()
| * 558ba4af power: supply: bq27xxx: Retrieve again when busy
| * 1fee4324 ACPICA: fix acpi parse and parseext cache leaks
| * 8621fbeb ACPI: Add missing prototype for non CONFIG_SUSPEND/CONFIG_X86 case
| * 0ab90839 ACPI: bus: Bail out if acpi_kobj registration fails
| * 7d346ca1 ASoC: tas2770: Power cycle amp on ISENSE/VSENSE change
| * 30e11a8c ACPICA: Avoid sequence overread in call to strncmp()
| * 58cf7ba3 mmc: Add quirk to disable DDR50 tuning
| * 74f765e8 power: supply: collie: Fix wakeup source leaks on device unbind
| * 1c24a738 clocksource: Fix the CPUs' choice in the watchdog per CPU verification
| * 28ecaebb ASoC: amd: yc: Add quirk for Lenovo Yoga Pro 7 14ASP9
| * 755a8006 ACPICA: fix acpi operand cache leak in dswstate.c
| * 3175377e iio: adc: ad7606_spi: fix reg write value mask
| * f6a5b84f iio: imu: inv_icm42600: Fix temperature calculation
| * fe684290 mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race
| * 6a860536 iio: accel: fxls8962af: Fix temperature scan element sign
| * a9f6c1ad PCI: dw-rockchip: Fix PHY function call sequence in rockchip_pcie_phy_deinit()
| * 0b522796 PCI: Fix lock symmetry in pci_slot_unlock()
| * 7f6a2d37 PCI: Add ACS quirk for Loongson PCIe
| * 9895f9d9 PCI: cadence-ep: Correct PBA offset in .set_msix() callback
| * 7ca06d69 uio_hv_generic: Use correct size for interrupt and monitor pages
| * 6f824cdd Drivers: hv: Allocate interrupt and monitor pages aligned to system page boundary
| * 37166d63 smb: client: add NULL check in automount_fullpath
| * 39ff3774 cifs: dns resolution is needed only for primary channel
| * 5713127d cifs: update dstaddr whenever channel iface is updated
| * 9d80e1d3 cifs: reset connections for all channels when reconnect requested
| * 3ee97970 remoteproc: core: Release rproc->clean_table after rproc_attach() fails
| * 9515d74c remoteproc: core: Cleanup acquired resources when rproc_handle_resources() fails in rproc_attach()
| * a4df96e2 regulator: max14577: Add error check for max14577_read_reg()
| * 231f6a1d mips: Add -std= flag specified in KBUILD_CFLAGS to vdso CFLAGS
| * dfa9ef97 staging: iio: ad5933: Correct settling cycles encoding per datasheet
| * cc3cc41e video: screen_info: Relocate framebuffers behind PCI bridges
| * fa2118e9 KVM: s390: rename PROT_NONE to PROT_TYPE_DUMMY
| * 6bd2569d net: ch9200: fix uninitialised access during mii_nway_restart
| * b1bf167f phy: fsl-imx8mq-usb: fix phy_tx_vboost_level_from_property()
| * 83a692a9 ftrace: Fix UAF when lookup kallsym after ftrace disabled
| * 6737c455 mtd: rawnand: qcom: Fix read len for onfi param page
| * df4918c0 dm-verity: fix a memory leak if some arguments are specified multiple times
| * 61850a1b dm-mirror: fix a tiny race condition
| * fe0ff7d8 KVM: VMX: Flush shadow VMCS on emergency reboot
| * 0d7a2ea4 KVM: SVM: Clear current_vmcb during vCPU free for all *possible* CPUs
| * 7775ab2d mtd: nand: sunxi: Add randomizer configuration before randomizer enable
| * e06a1dad mtd: rawnand: sunxi: Add randomizer configuration in sunxi_nfc_hw_ecc_write_chunk
| * d3abf006 mm: fix ratelimit_pages update error in dirty_ratio_handler()
| * 23a707bb RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction
| * 442e80dc watchdog: fix watchdog may detect false positive of softlockup
| * 5180561a ipc: fix to protect IPCS lookups using RCU
| * f24d4224 clk: meson-g12a: add missing fclk_div2 to spicc
| * ebb80605 parisc: fix building with gcc-15
| * 2f4040a5 vgacon: Add check for vc_origin address range in vgacon_scroll()
| * 7f278597 parisc/unaligned: Fix hex output to show 8 hex chars
| * 3ca78032 fbdev: Fix fb_set_var to prevent null-ptr-deref in fb_videomode_to_var
| * e32a40db EDAC/altera: Use correct write width with the INTTEST register
| * 0909b2b4 fbdev: Fix do_register_framebuffer to prevent null-ptr-deref in fb_videomode_to_var
| * 061a5dd6 net: ftgmac100: select FIXED_PHY
| * 8c5713ce net/sched: fix use-after-free in taprio_dev_notifier
| * a8acc708 NFC: nci: uart: Set tty->disc_data only in success path
| * d95d8784 hwmon: (ftsteutates) Fix TOCTOU race in fts_read()
| * 79ef8a6c f2fs: fix to do sanity check on sit_bitmap_size
| * a87cbcc9 f2fs: prevent kernel warning due to negative i_nlink from corrupted image
| * aaddc6c6 f2fs: fix to do sanity check on ino and xnid
| * 0f7100e8 Input: gpio-keys - fix possible concurrent access in gpio_keys_irq_timer()
| * 17474a56 Input: ims-pcu - check record size in ims_pcu_flash_firmware()
| * cf6a4c4a ext4: only dirty folios when data journaling regular files
| * 3e8a5163 ext4: ensure i_size is smaller than maxbytes
| * 68cea04f ext4: factor out ext4_get_maxbytes()
| * 223091c9 ext4: fix calculation of credits for extent tree modification
| * 26e09d18 ext4: inline: fix len overflow in ext4_prepare_inline_data
| * 55995f17 bus: fsl-mc: fix GET/SET_TAILDROP command ids
| * 1e474b5f bus: fsl-mc: do not add a device-link for the UAPI used DPMCP device
| * 8edfed44 ata: pata_via: Force PIO for ATAPI devices on VT6415/VT6330
| * 48f35a32 cgroup,freezer: fix incomplete freezing when attaching tasks
| * 96707ff5 ceph: set superblock s_magic for IMA fsmagic matching
| * 636391e8 can: tcan4x5x: fix power regulator retrieval during probe
| * d5d4be47 bus: mhi: host: Fix conflict between power_up and SYSERR
| * 44b9620e bus: mhi: ep: Update read pointer only after buffer is written
| * 838d63de ARM: omap: pmic-cpcap: do not mess around without CPCAP or OMAP4
| * c592d3ce ARM: 9447/1: arm/memremap: fix arch_memremap_can_ram_remap()
| * 12cffd5b arm64/mm: Close theoretical race where stale TLB entry remains valid
| * a31dce9b media: uvcvideo: Fix deferred probing error
| * c51c0a0b media: uvcvideo: Send control events for partial succeeds
| * d314f99b media: uvcvideo: Return the number of processed controls
| * ec26be7d media: imx-jpeg: Cleanup after an allocation error
| * 20a6db0e media: imx-jpeg: Reset slot data pointers when freed
| * 683a1db6 media: imx-jpeg: Move mxc_jpeg_free_slot_data() ahead
| * 350d4af0 media: imx-jpeg: Drop the first error frames
| * f6b1b0f8 media: vivid: Change the siize of the composing
| * 9824e173 media: vidtv: Terminating the subsequent process of initialization failure
| * 17cb043e media: videobuf2: use sgtable-based scatterlist wrappers
| * 36318ff3 media: venus: Fix probe error handling
| * ae7b143e media: v4l2-dev: fix error handling in __video_register_device()
| * dfb2add0 media: omap3isp: use sgtable-based scatterlist wrappers
| * ac3a8e37 media: mediatek: vcodec: Correct vsi_core framebuffer size
| * 025a943c media: gspca: Add error handling for stv06xx_read_sensor()
| * ec5c3286 media: davinci: vpif: Fix memory leak in probe error path
| * 04354c52 media: cxusb: no longer judge rbuf when the write fails
| * 4425db51 media: ccs-pll: Check for too high VT PLL multiplier in dual PLL case
| * 1e4b3f16 media: ccs-pll: Correct the upper limit of maximum op_pre_pll_clk_div
| * b9e31423 media: ccs-pll: Start OP pre-PLL multiplier search from correct value
| * ae2fe660 media: ccs-pll: Start VT pre-PLL multiplier search from correct value
| * eb7a4ea0 media: i2c: ds90ub913: Fix returned fmt from .set_fmt()
| * ecaf904a media: nxp: imx8-isi: better handle the m2m usage_count
| * 585acb35 media: ov5675: suppress probe deferral errors
| * ce4a5a34 media: ov8856: suppress probe deferral errors
| * aaf516bb wifi: rtlwifi: disable ASPM for RTL8723BE with subsystem ID 11ad:1723
| * d4356ce8 wifi: rtw88: usb: Reduce control message timeout to 500 ms
| * 2e7c64d7 jbd2: fix data-race and null-ptr-deref in jbd2_journal_dirty_metadata()
| * 1eeecd9b wifi: ath12k: fix ring-buffer corruption
| * 14f5549a fs/nfs/read: fix double-unlock bug in nfs_return_empty_folio()
| * 5ee9a07b SUNRPC: Prevent hang on NFS mount with xprtsec=[m]tls
| * 5060e1a5 nfsd: Initialize ssc before laundromat_work to prevent NULL dereference
| * e7e943dd nfsd: nfsd4_spo_must_allow() must check this is a v4 compound request
| * f08689fe wifi: ath11k: fix ring-buffer corruption
| * 68b29235 wifi: ath11k: fix rx completion meta data corruption
| * 0e4dc150 wifi: p54: prevent buffer-overflow in p54_rx_eeprom_readback()
| * 782b3aff net/mlx5: Add error handling in mlx5_query_nic_vport_node_guid()
| * 477e4319 net/mlx5_core: Add error handling inmlx5_query_nic_vport_qkey_viol_cntr()
| * 278a92b8 regulator: max20086: Change enable gpio to optional
| * 420f6942 regulator: max20086: Fix MAX200086 chip id
| * bf70b3c3 powerpc/pseries/msi: Avoid reading PCI device registers in reduced power states
| * 0257c26b io_uring/kbuf: account ring io_buffer_list memory
| * a8b5ef35 io_uring: account drain memory to cgroup
| * abf80985 ASoC: meson: meson-card-utils: use of_property_present() for DT parsing
| * 3895a759 ASoC: qcom: sdm845: Add error handling in sdm845_slim_snd_hw_params()
| * 40aefac8 gfs2: move msleep to sleepable context
| * f5b91447 crypto: marvell/cesa - Do not chain submitted requests
| * 0df5e4c7 configfs: Do not override creating attribute file failure in populate_attrs()
* | 6a12f866 Revert "Bluetooth: MGMT: Protect mgmt_pending list with its own lock"
* | 2ed4312a Revert "usb: typec: ucsi: fix Clang -Wsign-conversion warning"
* | 83acbc66 Merge 6.6.94 into android15-6.6-lts
|\|
| * 6282921b Linux 6.6.94
| * d0e22b85 drm/meson: Use 1000ULL when operating with mode->clock
| * 65e20c5d net: usb: aqc111: debug info before sanitation
| * 0fcfc935 regulator: dt-bindings: mt6357: Drop fixed compatible requirement
| * 1380f685 calipso: unlock rcu before returning -EAFNOSUPPORT
| * 2cfcbe15 x86/iopl: Cure TIF_IO_BITMAP inconsistencies
| * 8884c41b xen/arm: call uaccess_ttbr0_enable for dm_op hypercall
| * b0e35d56 usb: typec: tcpm/tcpci_maxim: Fix bounds check in process_rx()
| * 3c7e52cf usb: Flush altsetting 0 endpoints before reinitializating them after reset.
| * c40b5e0a usb: cdnsp: Fix issue with detecting USB 3.2 speed
| * 81dc3db4 usb: cdnsp: Fix issue with detecting command completion event
| * 6e3af836 VMCI: fix race between vmci_host_setup_notify and vmci_ctx_unset_notify
| * 97f5b57e usb: usbtmc: Fix read_stb function and get_stb ioctl
| * b0630d18 kbuild: Disable -Wdefault-const-init-unsafe
| * 2c72fe18 posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del()
| * 99bc5248 Revert "io_uring: ensure deferred completions are posted for multishot"
| * 029d39ae io_uring/rw: fix wrong NOWAIT check in io_rw_init_file()
| * 62d5d980 io_uring/rw: allow pollable non-blocking attempts for !FMODE_NOWAIT
| * 90e11232 io_uring: add io_file_can_poll() helper
| * 4fa7831c HID: usbhid: Eliminate recurrent out-of-bounds bug in usbhid_parse()
| * dd4b8e05 ALSA: usb-audio: Add implicit feedback quirk for RODE AI-1
| * 37a75cd8 tools/resolve_btfids: Fix build when cross compiling kernel with clang.
| * c9a2e815 block: Fix bvec_set_folio() for very large folios
| * 9e263d94 bio: Fix bio_first_folio() for SPARSEMEM without VMEMMAP
| * 51c69598 perf: Ensure bpf_perf_link path is properly serialized
| * efcd52ba nvmet-fcloop: access fcpreq only when holding reqlock
| * 84ead78a fs/filesystems: Fix potential unsigned integer underflow in fs_name()
| * 0383b254 net_sched: ets: fix a race in ets_qdisc_change()
| * 057f7a61 net_sched: tbf: fix a race in tbf_change()
| * 2a71924c net_sched: red: fix a race in __red_change()
| * 46c15c9d net_sched: prio: fix a race in prio_tune()
| * 77a72d74 net/mlx5e: Fix leak of Geneve TLV option object
| * a810e484 net/mlx5: Fix return value when searching for existing flow group
| * 5953ae44 net/mlx5: Fix ECVF vports unload on shutdown flow
| * 7fb33ed5 net/mlx5: Ensure fw pages are always allocated on same NUMA
| * 3c40cfcb Bluetooth: MGMT: Fix sparse errors
| * c621211b Bluetooth: hci_sync: Fix broadcast/PA when using an existing instance
| * 4bf29910 Bluetooth: Fix NULL pointer deference on eir_get_service_data
| * abb0605c net/mdiobus: Fix potential out-of-bounds clause 45 read/write access
| * bab6bca0 net/mdiobus: Fix potential out-of-bounds read/write access
| * 7bafe26d macsec: MACsec SCI assignment for ES = 0
| * ff55c85a net: Fix TOCTOU issue in sk_is_readable()
| * c6dad167 ACPI: CPPC: Fix NULL pointer dereference when nosmp is used
| * 987c3b88 i40e: retry VFLR handling if there is ongoing VF reset
| * dd184939 i40e: return false from i40e_reset_vf if reset is in progress
| * dc5fc562 drm/meson: fix more rounding issues with 59.94Hz modes
| * 81331229 drm/meson: use vclk_freq instead of pixel_freq in debug print
| * e9a5fe78 drm/meson: fix debug log statement when setting the HDMI clocks
| * 1f8d03fb drm/meson: use unsigned long long / Hz for frequency types
| * d2fc85c9 powerpc/vas: Return -EINVAL if the offset is non-zero in mmap()
| * 8635e325 powerpc/powernv/memtrace: Fix out of bounds issue in memtrace mmap
| * b4e9bab6 net_sched: sch_sfq: fix a potential crash on gso_skb handling
| * d4cbcf27 scsi: iscsi: Fix incorrect error path labels for flashnode operations
| * 581b7c3d pinctrl: qcom: pinctrl-qcm2290: Add missing pins
| * de2adfaa regulator: max20086: Fix refcount leak in max20086_parse_regulators_dt()
| * 6e329771 wifi: ath11k: validate ath11k_crypto_mode on top of ath11k_core_qmi_firmware_ready
| * e8e40575 wifi: ath11k: don't wait when there is no vdev started
| * a0ec9e39 wifi: ath11k: don't use static variables in ath11k_debugfs_fw_stats_process()
| * e57c74d7 wifi: ath11k: avoid burning CPU in ath11k_debugfs_fw_stats_request()
| * 452f5576 wifi: ath11k: convert timeouts to secs_to_jiffies()
| * d66fd959 wifi: ath11k: fix soc_dp_stats debugfs file permission
| * 748da2fc ath10k: snoc: fix unbalanced IRQ enable in crash recovery
| * 25911959 ptp: remove ptp->n_vclocks check logic in ptp_vclock_in_use()
| * bdd56875 Bluetooth: MGMT: Protect mgmt_pending list with its own lock
| * 5e64376d Bluetooth: MGMT: Remove unused mgmt_pending_find_data
| * 9f66b653 Bluetooth: MGMT: Fix UAF on mgmt_remove_adv_monitor_complete
| * 6edb1718 Bluetooth: hci_core: fix list_for_each_entry_rcu usage
| * 21f07126 scsi: core: ufs: Fix a hang in the error handler
| * 44ab21d7 serial: sh-sci: Clean sci_ports[0] after at earlycon exit
| * 9d50955b serial: sh-sci: Move runtime PM enable to sci_probe_single()
| * f8f07ea2 serial: sh-sci: Check if TX data was written to device in .tx_empty()
| * 6b60251c arm64: dts: ti: k3-j721e-sk: Add DT nodes for power regulators
| * 9333ced8 arm64: dts: ti: k3-j721e-sk: Add support for multiple CAN instances
| * b18568ba arm64: dts: ti: k3-j721e-sk: Model CSI2RX connector mux
| * 1e3db0a9 arm64: dts: ti: k3-am65-main: Add missing taps to sdhci0
| * 869aafe4 arm64: dts: ti: k3-am65-main: Fix sdhci node properties
| * c789d2c1 kasan: use unchecked __memset internally
| * 91d14d99 Input: synaptics-rmi - fix crash with unsupported versions of F34
| * 73b8f313 pmdomain: core: Fix error checking in genpd_dev_pm_attach_by_id()
| * 4f091ad0 do_change_type(): refuse to operate on unmounted/not ours mounts
| * 3d1ea8e0 fix propagation graph breakage by MOVE_MOUNT_SET_GROUP move_mount(2)
| * 3b699b94 path_overmount(): avoid false negatives
| * 3aed255a ASoC: ti: omap-hdmi: Re-add dai_link->platform to fix card init
| * cc03c899 ASoC: Intel: avs: Verify content returned by parse_int_array()
| * ea739a54 ASoC: Intel: avs: Fix deadlock when the failing IPC is SET_D0IX
| * 9836cc31 ASoC: codecs: hda: Fix RPM usage count underflow
| * 0fd2ae40 scsi: ufs: qcom: Prevent calling phy_exit() before phy_init()
| * d2507aee seg6: Fix validation of nexthop addresses
| * 8c9e9cd3 wireguard: device: enable threaded NAPI
| * a21a4937 net: dsa: b53: allow RGMII for bcm63xx RGMII ports
| * 02c03865 net: dsa: b53: do not enable RGMII delay on bcm63xx
| * 1c7a023b netfilter: nf_nat: also check reverse tuple to obtain clashing entry
| * 39bab2d3 netfilter: nf_set_pipapo_avx2: fix initial map fill
| * 7f6265fc gve: add missing NULL check for gve_alloc_pending_packet() in TX DQO
| * 9c49728b PM: sleep: Fix power.is_suspended cleanup for direct-complete devices
| * c07c61ef vmxnet3: correctly report gso type for UDP tunnels
| * cc89f457 net: wwan: t7xx: Fix napi rx poll issue
| * 85eef174 net: fix udp gso skb_segment after pull from frag_list
| * b263088e net: stmmac: make sure that ptp_rate is not 0 before configuring timestamping
| * 2e02edb6 net: dsa: tag_brcm: legacy: fix pskb_may_pull length
| * 18e64816 ice: fix rebuilding the Tx scheduler tree for large queue counts
| * d78e538b ice: create new Tx scheduler nodes for new queues only
| * 1d3c5d0d ice: fix Tx scheduler error handling in XDP callback
| * 55dd7225 Bluetooth: L2CAP: Fix not responding with L2CAP_CR_LE_ENCRYPTION
| * 59d5f313 spi: bcm63xx-hsspi: fix shared reset
| * 29abb7fc spi: bcm63xx-spi: fix shared reset
| * d8883973 net: lan966x: Make sure to insert the vlan tags also in host mode
| * 1b2e54f4 net/mlx4_en: Prevent potential integer overflow calculating Hz
| * 2e3d96ad driver: net: ethernet: mtk_star_emac: fix suspend/resume issue
| * acab7ca5 net: tipc: fix refcount warning in tipc_aead_encrypt
| * 633a8021 gve: Fix RX_BUFFERS_POSTED stat to report per-queue fill_cnt
| * 6ee70ca1 net: stmmac: platform: guarantee uniqueness of bus_id
| * 7a8e8756 vt: remove VT_RESIZE and VT_RESIZEX from vt_compat_ioctl()
| * b3b4efa2 coresight: prevent deactivate active config while enabling the config
| * e69e2cfd fpga: fix potential null pointer deref in fpga_mgr_test_img_load_sgt()
| * 32b3f338 counter: interrupt-cnt: Protect enable/disable OPs with mutex
| * 72166de0 MIPS: Loongson64: Add missing '#interrupt-cells' for loongson64c_ls7a
| * ec20928e iio: adc: ad7124: Fix 3dB filter frequency reading
| * ca0012a6 iio: filter: admv8818: Support frequencies >= 2^32
| * 786cdbd4 iio: filter: admv8818: fix range calculation
| * 61b3b2d6 iio: filter: admv8818: fix integer overflow
| * 31fa7dd0 iio: filter: admv8818: fix band 4, state 15
| * f2829faa thunderbolt: Fix a logic error in wake on connect
| * a6c7c365 serial: Fix potential null-ptr-deref in mlb_usio_probe()
| * db96a4fd usb: renesas_usbhs: Reorder clock handling and power management in probe
| * 63df0a22 rtc: loongson: Add missing alarm notifications for ACPI RTC events
| * 56035627 PCI/DPC: Initialize aer_err_info before using it
| * b79e1005 dmaengine: ti: Add NULL check in udma_probe()
| * 127dfb4f phy: qcom-qmp-usb: Fix an NULL vs IS_ERR() bug
| * 248f52ad PCI: apple: Use gpiod_set_value_cansleep in probe flow
| * 004316d2 PCI: cadence: Fix runtime atomic count underflow
| * 92d879ef PCI: Print the actual delay time in pci_bridge_wait_for_secondary_bus()
| * 2e6d9128 rtc: sh: assign correct interrupts with DT
| * 848d78e3 cifs: Fix validation of SMB1 query reparse point response
| * c050dc26 nfs: ignore SB_RDONLY when remounting nfs
| * c9d9a899 nfs: clear SB_RDONLY before getting superblock
| * 7101de23 perf trace: Always print return value for syscalls returning a pid
| * 49439507 perf record: Fix incorrect --user-regs comments
| * 5ec729bc perf tests switch-tracking: Fix timestamp comparison
| * a20bbd91 mfd: stmpe-spi: Correct the name used in MODULE_DEVICE_TABLE
| * 611efa31 mfd: exynos-lpass: Avoid calling exynos_lpass_disable() twice in exynos_lpass_remove()
| * 85322ddd rpmsg: qcom_smd: Fix uninitialized return variable in __qcom_smd_send()
| * 3b726bc1 remoteproc: k3-r5: Drop check performed in k3_r5_rproc_{mbox_callback/kick}
| * f1a3c8ce remoteproc: qcom_wcnss_iris: Add missing put_device() on error in probe
| * 41581d39 perf scripts python: exported-sql-viewer.py: Fix pattern matching with Python 3
| * 53385a40 perf intel-pt: Fix PEBS-via-PT data_src
| * 1737865a perf trace: Fix leaks of 'struct thread' in set_filter_loop_pids()
| * 84126960 dm-flakey: make corrupting read bios work
| * 1aef0e10 dm-flakey: error all IOs when num_features is absent
| * 4e9e4574 hwmon: (asus-ec-sensors) check sensor index in read_string()
| * a0d9d9b5 mtd: nand: ecc-mxic: Fix use of uninitialized variable ret
| * fde31444 backlight: pm8941: Add NULL check in wled_configure()
| * 06f41679 dm: free table mempools if not used in __bind
| * 679d40ca dm: don't change md if dm_table_set_restrictions() fails
| * e431cc95 perf ui browser hists: Set actions->thread before calling do_zoom_thread()
| * 34e124dc perf build: Warn when libdebuginfod devel files are not available
| * 655d3c6f randstruct: gcc-plugin: Fix attribute addition
| * c64a1634 randstruct: gcc-plugin: Remove bogus void member
| * ab91647a fbdev: core: fbcvt: avoid division by 0 in fb_cvt_hperiod()
| * 8312b1f7 soc: aspeed: Add NULL check in aspeed_lpc_enable_snoop()
| * b828083b soc: aspeed: lpc: Fix impossible judgment condition
| * fc5a7a96 ARM: aspeed: Don't select SRAM
| * e774ce47 arm64: dts: mt6359: Rename RTC node to match binding expectations
| * 5b91fc48 arm64: dts: renesas: white-hawk-ard-audio: Fix TPU0 groups
| * 0d5dd35f arm64: dts: rockchip: disable unrouted USB controllers and PHY on RK3399 Puma with Haikou
| * 867dd8a3 arm64: defconfig: mediatek: enable PHY drivers
| * 97899140 ARM: dts: qcom: apq8064 merge hw splinlock into corresponding syscon device
| * 9337a54b ARM: dts: qcom: apq8064: add missing clocks to the timer node
| * 4ca90f54 dt-bindings: vendor-prefixes: Add Liontron name
| * 4b23c46e bus: fsl-mc: fix double-free on mc_dev
| * 8b8e2966 nilfs2: do not propagate ENOENT error from nilfs_btree_propagate()
| * 9ab3008b nilfs2: add pointer check for nilfs_direct_propagate()
| * 681a35b1 ocfs2: fix possible memory leak in ocfs2_finish_quota_recovery
| * 4f99357d Squashfs: check return result of sb_min_blocksize
| * 2d4ad564 arm64: dts: ti: k3-j721e-common-proc-board: Enable OSPI1 on J721E
| * 38caeda9 arm64: tegra: Drop remaining serial clock-names and reset-names
| * 1aaffafd arm64: dts: rockchip: Update eMMC for NanoPi R5 series
| * 850fd99f arm64: dts: qcom: sda660-ifc6560: Fix dt-validate warning
| * ac25c304 arm64: dts: qcom: sdm660-lavender: Add missing USB phy supply
| * 6145c491 arm64: dts: mt6359: Add missing 'compatible' property to regulators node
| * 01832481 arm64: dts: mediatek: mt6357: Drop regulator-fixed compatibles
| * d6d756d3 arm64: dts: imx8mn-beacon: Set SAI5 MCLK direction to output for HDMI audio
| * 2eb09d84 arm64: dts: imx8mm-beacon: Set SAI5 MCLK direction to output for HDMI audio
| * 7a276eff arm64: dts: imx8mp-beacon: Fix RTC capacitive load
| * 75b985ef arm64: dts: imx8mn-beacon: Fix RTC capacitive load
| * 986c6c52 arm64: dts: imx8mm-beacon: Fix RTC capacitive load
| * c8658f43 arm64: dts: qcom: sdm660-xiaomi-lavender: Add missing SD card detect GPIO
| * 62f142f9 arm64: dts: mediatek: mt8195: Reparent vdec1/2 and venc1 power domains
| * 8af84ebd ARM: dts: at91: at91sam9263: fix NAND chip selects
| * e6ef5b28 ARM: dts: at91: usb_a9263: fix GPIO for Dataflash chip select
| * 3c947298 arm64: dts: qcom: sc8280xp-x13s: Drop duplicate DMIC supplies
| * b1253f7c arm64: dts: qcom: sm8250: Fix CPU7 opp table
| * ac0df85c arm64: dts: qcom: sm8350: Reenable crypto & cryptobam
| * 072b6f8e arm64: dts: qcom: sdm845-starqltechn: remove excess reserved gpios
| * 618060fc arm64: dts: qcom: sdm845-starqltechn: refactor node order
| * 2bf235c5 arm64: dts: qcom: sdm845-starqltechn: fix usb regulator mistake
| * 8218e210 arm64: dts: qcom: sdm845-starqltechn: remove wifi
| * c4f2f90e f2fs: fix to correct check conditions in f2fs_cross_rename
| * 67b800b6 f2fs: use d_inode(dentry) cleanup dentry->d_inode
| * 857b4d2b net: phy: mscc: Stop clearing the the UDPv4 checksum for L2 frames
| * 8ebcd311 net: openvswitch: Fix the dead loop of MPLS parse
| * 946bfdfc calipso: Don't call calipso functions for AF_INET sk.
| * 5df8db01 octeontx2-pf: QOS: Refactor TC_HTB_LEAF_DEL_LAST callback
| * 0b40aeaf net: phy: mscc: Fix memory leak when using one step timestamping
| * 6486f11c net: lan743x: rename lan743x_reset_phy to lan743x_hw_reset_phy
| * 4744a5d7 net: phy: fix up const issues in to_mdio_device() and to_phy_device()
| * 363fdf27 net: phy: clear phydev->devlink when the link is deleted
| * 6f639c25 bpf: Avoid __bpf_prog_ret0_warn when jit fails
| * 8d5bc5ec net: lan966x: Fix 1-step timestamping over ipv4 or ipv6
| * ac7897c0 RDMA/cma: Fix hang when cma_netevent_callback fails to queue_work
| * 60790d28 net: usb: aqc111: fix error handling of usbnet read calls
| * 333262e5 RISC-V: KVM: lock the correct mp_state during reset
| * 68b69b50 netfilter: nft_tunnel: fix geneve_opt dump
| * 4c6fa65a bpf, sockmap: Avoid using sk_socket after free when sending
| * 9c73afd7 Bluetooth: MGMT: iterate over mesh commands in mgmt_mesh_foreach()
| * 80167704 vfio/type1: Fix error unwind in migration dirty bitmap allocation
| * cf008d9a netfilter: nf_tables: nft_fib_ipv6: fix VRF ipv4/ipv6 result discrepancy
| * 1e8b2048 wifi: mt76: mt7996: fix RX buffer size of MCU event
| * 800f7e73 wifi: mt76: mt7996: set EHT max ampdu length capability
| * e9f9cef1 wifi: mt76: mt7915: Fix null-ptr-deref in mt7915_mmio_wed_init()
| * 6c81f1c7 kernfs: Relax constraint in draining guard
| * 713b9bfa scsi: ufs: mcq: Delete ufshcd_release_scsi_cmd() in ufshcd_mcq_abort()
| * 5482ef98 wifi: ath9k_htc: Abort software beacon handling if disabled
| * b5ef1289 hisi_acc_vfio_pci: bugfix live migration function without VF device driver
| * 5be5cd86 hisi_acc_vfio_pci: add eq and aeq interruption restore
| * f0423873 hisi_acc_vfio_pci: fix XQE dma address error
| * 99dbad1b wifi: ath12k: fix memory leak in ath12k_service_ready_ext_event
| * 4b1cf1f0 iommu: remove duplicate selection of DMAR_TABLE
| * 74e18211 wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds
| * f61b8fec s390/bpf: Store backchain even for leaf progs
| * fbd4d629 clk: qcom: gcc-msm8939: Fix mclk0 & mclk1 for 24 MHz
| * 6d8f3987 bpf: Fix WARN() in get_bpf_raw_tp_regs
| * eb435bc4 pinctrl: at91: Fix possible out-of-boundary access
| * b44672c1 libbpf: Use proper errno value in nlattr
| * 07680e38 ktls, sockmap: Fix missing uncharge operation
| * 94ade414 tracing: Fix error handling in event_trigger_parse()
| * ae015964 tracing: Rename event_trigger_alloc() to trigger_data_alloc()
| * 3f7724fc efi/libstub: Describe missing 'out' parameter in efi_load_initrd
| * 3c1adc2f clk: bcm: rpi: Add NULL check in raspberrypi_clk_register()
| * 012fd598 clk: qcom: gpucc-sm6350: Add *_wait_val values for GDSCs
| * 7c95e4a3 clk: qcom: gcc-sm6350: Add *_wait_val values for GDSCs
| * f2692b21 clk: qcom: dispcc-sm6350: Add *_wait_val values for GDSCs
| * a1383eb9 clk: qcom: camcc-sm6350: Add *_wait_val values for GDSCs
| * ac7ab38c tracing: Move histogram trigger variables from stack to per CPU structure
| * c60f57a4 bpf: Fix uninitialized values in BPF_{CORE,PROBE}_READ
| * 7c4c84cd RDMA/mlx5: Fix error flow upon firmware failure for RQ destruction
| * 5e4519d8 netfilter: nft_quota: match correctly when the quota just depleted
| * 585c9ed5 netfilter: bridge: Move specific fragmented packet to slow_path instead of dropping it
| * 50bbbd25 bpf: Allow XDP dev-bound programs to perform XDP_REDIRECT into maps
| * 1066c5a7 libbpf: Use proper errno value in linker
| * 1c005c53 f2fs: fix to detect gcing page in f2fs_is_cp_guaranteed()
| * 43cec280 f2fs: clean up w/ fscrypt_is_bounce_page()
| * 4b88a4df bonding: assign random address if device address is same as bond
| * 8fa998b8 iommu: Protect against overflow in iommu_pgsize()
| * cb4b9369 Use thread-safe function pointer in libbpf_print
| * 79669fac libbpf: Remove sample_period init in perf_buffer
| * 624b4cf6 scsi: hisi_sas: Call I_T_nexus after soft reset for SATA disk
| * 5edd80d4 RDMA/hns: Include hnae3.h in hns_roce_hw_v2.h
| * be049199 wifi: ath12k: fix node corruption in ar->arvifs list
| * c9c9107f wifi: ath12k: Add MSDU length validation for TKIP MIC error
| * f76f3990 wifi: rtw88: do not ignore hardware read error during DPK
| * 7b63e52a wifi: rtw88: sdio: call rtw_sdio_indicate_tx_status unconditionally
| * 446fcc23 wifi: rtw88: sdio: map mgmt frames to queue TX_DESC_QSEL_MGMT
| * 6aa81fc0 xfrm: Use xdo.dev instead of xdo.real_dev
| * 18eb7b5f libbpf: Fix buffer overflow in bpf_object__init_prog
| * 0e9c13ed net: ncsi: Fix GCPS 64-bit member variables
| * a39cc43e f2fs: fix to do sanity check on sbi->total_valid_block_count
| * a93db61d wifi: ath12k: Fix WMI tag for EHT rate in peer assoc
| * db1d15a2 bpf, sockmap: Fix panic when calling skb_linearize
| * 34837ae8 bpf, sockmap: fix duplicated data transmission
| * 2e36a81d bpf: fix ktls panic with sockmap
| * 7c969106 selftests/bpf: Fix bpf_nf selftest failure
| * b524baec IB/cm: use rwlock for MAD agent lock
| * f50ba7e7 wifi: ath11k: fix node corruption in ar->arvifs list
| * 3d6e3849 xen/x86: fix initial memory balloon target
| * 7810600b drm/mediatek: mtk_drm_drv: Unbind secondary mmsys components on err
| * a2502fd0 drm/mediatek: Fix kobject put for component sub-drivers
| * 81268557 drm/mediatek: mtk_drm_drv: Fix kobject put for mtk_mutex device ptr
| * 77511c2d perf/amlogic: Replace smp_processor_id() with raw_smp_processor_id() in meson_ddr_pmu_create()
| * ee965020 scsi: qedf: Use designated initializer for struct qed_fcoe_cb_ops
| * e500dff1 arm64/fpsimd: Do not discard modified SVE state
| * 99d4011a firmware: SDEI: Allow sdei initialization without ACPI_APEI_GHES
| * 3215e000 drm/tegra: rgb: Fix the unbound reference count
| * 01f73e10 drm/vkms: Adjust vkms_state->active_planes allocation type
| * 4715d295 drm: rcar-du: Fix memory leak in rcar_du_vsps_init()
| * 5e99bcff selftests/seccomp: fix syscall_restart test for arm compat
| * cf08a1cb arm64: Support ARM64_VA_BITS=52 when setting ARCH_MMAP_RND_BITS_MAX
| * 0052f10c firmware: psci: Fix refcount leak in psci_dt_init
| * 569829f8 m68k: mac: Fix macintosh_config for Mac II
| * 428d865f watchdog: exar: Shorten identity name to fit correctly
| * 701340a2 fs/ntfs3: handle hdr_first_de() return value
| * 94be7561 drm/bridge: lt9611uxc: Fix an error handling path in lt9611uxc_probe()
| * 2f6e645c arm64/fpsimd: Fix merging of FPSIMD state during signal return
| * 43be952e arm64/fpsimd: Discard stale CPU state when handling SME traps
| * 8bf6491d arm64/fpsimd: Avoid RES0 bits in the SME trap handler
| * 0d271c53 media: rkvdec: Fix frame size enumeration
| * cdf7e1ff drm/amd/pp: Fix potential NULL pointer dereference in atomctrl_initialize_mc_reg_table
| * 079cc1fa drm/vc4: tests: Use return instead of assert
| * 83cc3637 drm/vmwgfx: Add seqno waiter for sync_files
| * 8b263e8a ASoC: apple: mca: Constrain channels according to TDM mask
| * 42f7dd4b spi: sh-msiof: Fix maximum DMA transfer size
| * 5174ac31 ACPI: OSI: Stop advertising support for "3.0 _SCP Extensions"
| * fca08cfa PM: sleep: Print PM debug messages during hibernation
| * aa7b9005 x86/mtrr: Check if fixed-range MTRRs exist in mtrr_save_fixed_ranges()
| * 2b545938 PM: wakeup: Delete space in the end of string shown by pm_show_wakelocks()
| * 5b71469d ASoC: SOF: ipc4-pcm: Adjust pipeline_list->pipelines allocation type
| * d46af758 power: reset: at91-reset: Optimize at91_reset()
| * c6c14226 spi: tegra210-quad: modify chip select (CS) deactivation
| * 41de2c9e spi: tegra210-quad: remove redundant error handling code
| * 04034d43 spi: tegra210-quad: Fix X1_X2_X4 encoding and support x4 transfers
| * 3ff24224 EDAC/{skx_common,i10nm}: Fix the loss of saved RRL for HBM pseudo channel 0
| * 3f5d0659 EDAC/skx_common: Fix general protection fault
| * 4191b766 ASoC: tas2764: Enable main IRQs
| * 8b94e19a ACPICA: exserial: don't forget to handle FFixedHW opregions for reading
| * f6941e72 kunit: Fix wrong parameter to kunit_deactivate_static_stub()
| * 5810e9d4 crypto: sun8i-ce - move fallback ahash_request to the end of the struct
| * 04a39a3c crypto: xts - Only add ecb if it is not already there
| * ba2af685 crypto: lrw - Only add ecb if it is not already there
| * ec91ab13 rcu/cpu_stall_cputime: fix the hardirq count for x86 architecture
| * 402fd6a6 btrfs: scrub: fix a wrong error type when metadata bytenr mismatches
| * 7cfb9086 btrfs: scrub: update device stats when an error is detected
| * 3cf4d9ca crypto: marvell/cesa - Avoid empty transfer descriptor
| * 5e9666ac crypto: marvell/cesa - Handle zero-length skcipher requests
| * 62af7780 x86/cpu: Sanitize CPUID(0x80000000) output
| * ce167ff4 x86/microcode/AMD: Do not return error when microcode update is not necessary
| * 4fb22310 powerpc/crash: Fix non-smp kexec preparation
| * fdc39b3a powerpc: do not build ppc_save_regs.o always
| * cb1e26f5 crypto: sun8i-ss - do not use sg_dma_len before calling DMA functions
| * c62b79c1 crypto: sun8i-ce-cipher - fix error handling in sun8i_ce_cipher_prepare()
| * 6ce08b3b perf/core: Fix broken throttling when max_samples_per_tick=1
| * eec0dd17 gfs2: gfs2_create_inode error handling fix
| * 76c7b140 crypto: sun8i-ce-hash - fix error handling in sun8i_ce_hash_run()
| * 5dea6398 x86/idle: Remove MFENCEs for X86_BUG_CLFLUSH_MONITOR in mwait_idle_with_hints() and prefer_mwait_c1_over_halt()
| * cc5cd8a1 tools/x86/kcpuid: Fix error handling
| * e9019e22 Revert "drm/amd/display: more liberal vmin/vmax update for freesync"
| * 9f837b35 dt-bindings: phy: imx8mq-usb: fix fsl,phy-tx-vboost-level-microvolt property
| * 68c50424 dt-bindings: usb: cypress,hx3: Add support for all variants
| * 5a057f26 thunderbolt: Do not double dequeue a configuration request
| * 259e4d6e usb: usbtmc: Fix timeout value in get_stb
| * 3258d7ff serial: jsm: fix NPE during jsm_uart_port_init
| * e2e38c52 Bluetooth: hci_qca: move the SoC type check to the right place
| * b63f23fb usb: typec: ucsi: fix Clang -Wsign-conversion warning
| * 5ec1200d USB: serial: pl2303: add new chip PL2303GC-Q20 and PL2303GT-2AB
| * ff835ab1 usb: storage: Ignore UAS driver for SanDisk 3.2 Gen2 storage device
| * 73c50fa3 usb: quirks: Add NO_LPM quirk for SanDisk Extreme 55AE
| * 32a5f643 rtc: Fix offset calculation for .start_secs < 0
| * b836d94b rtc: Make rtc_time64_to_tm() support dates before 1970
| * dbd568a3 acpi-cpufreq: Fix nominal_freq units to KHz in get_max_boost_ratio()
| * 39ed85ae pinctrl: armada-37xx: set GPIO output value before setting direction
| * 8f0f45a3 pinctrl: armada-37xx: use correct OUTPUT_VAL register for GPIOs > 31
| * 4afa9d57 tracing: Fix compilation warning on arm32
* | 7ebf0f8f Revert "coredump: hand a pidfd to the usermode coredump helper"
* | 53788b53 Merge 6.6.93 into android15-6.6-lts
|\|
| * c2603c51 Linux 6.6.93
| * c78abb64 ksmbd: use list_first_entry_or_null for opinfo_get_list()
| * 10645149 net: ethernet: ti: am65-cpsw: Lower random mac address error print to info
| * 513b27db platform/x86: thinkpad_acpi: Ignore battery threshold change event notification
| * 871e4449 platform/x86: fujitsu-laptop: Support Lifebook S2110 hotkeys
| * af724314 NFS: Avoid flushing data while holding directory locks in nfs_rename()
| * f8309744 nvme-pci: add NVME_QUIRK_NO_DEEPEST_PS quirk for SOLIDIGM P44 Pro
| * e99de950 spi: spi-sun4i: fix early activation
| * b8435b76 phy: starfive: jh7110-usb: Fix USB 2.0 host occasional detection failure
| * eae12139 drm/amd/display: fix link_set_dpms_off multi-display MST corner case
| * 4728d56d um: let 'make clean' properly clean underlying SUBARCH as well
| * af288d8e platform/x86: thinkpad_acpi: Support also NEC Lavie X1475JAS
| * 764f8cd8 nfs: don't share pNFS DS connections between net namespaces
| * 98f7c351 HID: quirks: Add ADATA XPG alpha wireless mouse support
| * 46a6ce48 dmaengine: idxd: cdev: Fix uninitialized use of sva in idxd_cdev_open
| * cdb61a70 coredump: hand a pidfd to the usermode coredump helper
| * 1846a7b9 coredump: fix error handling for replace_fd()
| * 0ec1e98b perf/arm-cmn: Initialise cmn->cpu earlier
| * 10778e2f perf/arm-cmn: Fix REQ2/SNP2 mixup
| * 295f7c57 net_sched: hfsc: Address reentrant enqueue adding class to eltree twice
| * ee1209b9 arm64: dts: ti: k3-am68-sk: Fix regulator hierarchy
| * cf270462 arm64: dts: qcom: sm8550: Add missing properties for cryptobam
| * feadf317 arm64: dts: qcom: sm8450: Add missing properties for cryptobam
| * 5dd982ff arm64: dts: qcom: sm8350: Fix typo in pil_camera_mem node
| * abf3ffae arm64: dts: qcom: ipq9574: Add missing properties for cryptobam
* | c887c9d4 Merge ea61eda1 ("af_unix: Fix uninit-value in __unix_walk_scc()") into android15-6.6-lts
|\|
| * ea61eda1 af_unix: Fix uninit-value in __unix_walk_scc()
| * ed14f8ae af_unix: Fix garbage collection of embryos carrying OOB with SCM_RIGHTS
| * c0c8d419 af_unix: Add dead flag to struct scm_fp_list.
| * a288920f af_unix: Don't access successor in unix_del_edges() during GC.
| * 3600729b af_unix: Try not to hold unix_gc_lock during accept().
| * 7b1ffbd3 af_unix: Remove lock dance in unix_peek_fds().
| * de792163 af_unix: Replace garbage collection algorithm.
| * 2c2d0c66 af_unix: Detect dead SCC.
| * 32400501 af_unix: Assign a unique index to SCC.
| * d2380222 af_unix: Avoid Tarjan's algorithm if unnecessary.
| * cdaa3499 af_unix: Skip GC if no cycle exists.
| * e0e23fc4 af_unix: Save O(n) setup of Tarjan's algo.
| * 27a07364 af_unix: Fix up unix_edge.successor for embryo socket.
| * 36f924e4 af_unix: Save listener for embryo socket.
| * 3ee9b24b af_unix: Detect Strongly Connected Components.
| * 856aacbe af_unix: Iterate all vertices by DFS.
| * 494accab af_unix: Bulk update unix_tot_inflight/unix_inflight when queuing skb.
| * d2d9f382 af_unix: Link struct unix_edge when queuing skb.
| * 4fc7df1c af_unix: Allocate struct unix_edge for each inflight AF_UNIX fd.
| * 9e98ba0c af_unix: Allocate struct unix_vertex for each inflight AF_UNIX fd.
| * 8eb55b66 af_unix: Remove CONFIG_UNIX_SCM.
| * c0d56c02 af_unix: Remove io_uring code for GC.
| * 36f1f6ac af_unix: Replace BUG_ON() with WARN_ON_ONCE().
| * acc97866 af_unix: Try to run GC async.
* ce8bd9ef Merge android15-6.6 into android15-6.6-lts
* e6f212b3 Merge android15-6.6 into android15-6.6-lts

Change-Id: Ia4eb4acf771fe16d413346e2510066720e5f4515
Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>