Merge tag 'android14-6.1.138_r00' into android14-6.1
This merges the android14-6.1.138_r00 tag into the android14-6.1 branch, catching it up with the latest LTS releases. It contains the following commits: * 48945465 Revert "cpufreq: Avoid using inconsistent policy->min and policy->max" * 9840922a Revert "cpufreq: Fix setting policy limits when frequency tables are used" * 1e50e672 UPSTREAM: arm64: errata: Add newer ARM cores to the spectre_bhb_loop_affected() lists * 4c7f06c5 Merge 6.1.138 into android14-6.1-lts |\ | * 02b72ccb Linux 6.1.138 | * 5626b47a ASoC: soc-core: Stop using of_property_read_bool() for non-boolean properties | * 79ff5e26 ASoC: Use of_property_read_bool() | * e25139c4 drm/amd/display: Fix slab-use-after-free in hdcp | * 942ecb9e drm/amd/display: Add scoped mutexes for amdgpu_dm_dhcp | * e07ed985 drm/amd/display: Change HDCP update sequence for DM | * e56b7400 drm/amd/display: Clean up style problems in amdgpu_dm_hdcp.c | * 8a86bb89 drm/amd/display: phase2 enable mst hdcp multiple displays | * 8316820e iommu/arm-smmu-v3: Fix iommu_device_probe bug due to duplicated stream ids | * 28ddd9cf iommu/arm-smmu-v3: Use the new rb tree helpers | * 4c4f168b dm: fix copying after src array boundaries | * dc0d654e irqchip/gic-v2m: Prevent use after free of gicv2m_get_fwnode() | * c8f809b3 irqchip/gic-v2m: Mark a few functions __init | * 36d4ce27 Revert "drm/meson: vclk: fix calculation of 59.94 fractional rates" | * 9b89102f net: phy: microchip: force IRQ polling mode for lan88xx | * 72a797fa ARM: dts: opos6ul: add ksz8081 phy properties | * 88d7fd2d firmware: arm_ffa: Skip Rx buffer ownership release if not acquired | * ff4273d4 firmware: arm_scmi: Balance device refcount when destroying devices | * c13b801e Revert "x86/kexec: Allocate PGD for x86_64 transition page tables separately" | * be9e2302 sch_ets: make est_qlen_notify() idempotent | * 83fb922d sch_qfq: make qfq_qlen_notify() idempotent | * 0475c854 sch_hfsc: make hfsc_qlen_notify() idempotent | * 0e59ce6c sch_drr: make drr_qlen_notify() idempotent | * 73cf6af1 sch_htb: make htb_qlen_notify() idempotent | * 85bb073b PCI: imx6: Skip controller_id generation logic for i.MX7D | * 8dcd4981 md: move initialization and destruction of 'io_acct_set' to md.c | * 01b83221 net: vertexcom: mse102x: Fix RX error handling | * 7bdc90cf net: vertexcom: mse102x: Add range check for CMD_RTS | * 9e951979 net: vertexcom: mse102x: Fix LEN_MASK | * 53b6b361 net: vertexcom: mse102x: Fix possible stuck of SPI interrupt | * 2735065a net: hns3: defer calling ptp_clock_register() | * de5ad4db net: hns3: fixed debugfs tm_qset size | * 9137a78d net: hns3: fix an interrupt residual problem | * e15d0059 net: hns3: store rx VLAN tag offload state for VF | * 328e124d net: fec: ERR007885 Workaround for conventional TX | * a0e0efba net: lan743x: Fix memleak issue when GSO enabled | * 44c3f30c nvme-tcp: fix premature queue removal and I/O failover | * 2922716d bnxt_en: Fix ethtool -d byte order for 32-bit values | * 43292b83 bnxt_en: Fix out-of-bound memcpy() during ethtool -w | * b1c2b19d bnxt_en: Fix coredump logic to free allocated buffer | * 68bfb59b net: ipv6: fix UDPv6 GSO segmentation with NAT | * f57fd07d net: dsa: felix: fix broken taprio gate states after clock jump | * 9f9c9d1c net: dlink: Correct endianness handling of led_mode | * 0561f2e3 ice: Check VF VSI Pointer Value in ice_vc_add_fdir_fltr() | * 0aa23e08 net_sched: qfq: Fix double list add in class with netem as child qdisc | * 9efb6a0f net_sched: ets: Fix double list add in class with netem as child qdisc | * 8df7d37d net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc | * 4f0ecf50 net_sched: drr: Fix double list add in class with netem as child qdisc | * eaf24941 net: ethernet: mtk-star-emac: rearm interrupts in rx_poll only when advised | * 94107259 net: ethernet: mtk-star-emac: fix spinlock recursion issues on rx/tx poll | * 4195bd19 net: mscc: ocelot: delete PVID VLAN when readding it as non-PVID | * 2ab27801 net: mscc: ocelot: treat 802.1ad tagged traffic as 802.1Q-untagged | * 901346b6 net/mlx5: E-switch, Fix error handling for enabling roce | * 455a5261 net/mlx5: E-Switch, Initialize MAC Address for Default GID | * 2d4a1212 vxlan: vnifilter: Fix unlocked deletion of default FDB entry | * 93d64691 wifi: plfxlc: Remove erroneous assert in plfxlc_mac_release | * 92b0c841 ASoC: soc-pcm: Fix hw_params() and DAPM widget sequence | * a99f5bf4 dm-bufio: don't schedule in atomic context | * 93eeb6df KVM: x86: Load DR6 with guest value only before entering .vcpu_run() loop | * 227bda0f xfs: restrict when we try to align cow fork delalloc to cowextsz hints | * 6724a3fa xfs: allow unlinked symlinks and dirs with zero size | * df403c88 xfs: fix freeing speculative preallocations for preallocated files | * 9e1ad087 xfs: make sure sb_fdblocks is non-negative | * 80d3d1e7 xfs: allow symlinks with short remote targets | * 251af3b8 xfs: convert delayed extents to unwritten when zeroing post eof blocks | * 9ae4afcb xfs: make xfs_bmapi_convert_delalloc() to allocate the target offset | * b4dbf905 xfs: make the seq argument to xfs_bmapi_convert_delalloc() optional | * 0e2fcf27 xfs: match lock mode in xfs_buffered_write_iomap_begin() | * 7bfa86d2 xfs: revert commit 44af6c7e | * b359d2ee xfs: validate recovered name buffers when recovering xattr items | * d6f7f0dd xfs: check opcode and iovec count match in xlog_recover_attri_commit_pass2 | * 3a97d267 xfs: require XFS_SB_FEAT_INCOMPAT_LOG_XATTRS for attr log intent item recovery | * 2edfd2c8 xfs: remove a racy if_bytes check in xfs_reflink_end_cow_extent | * 1e2a6080 xfs: fix xfs_bmap_add_extent_delay_real for partial conversions | * ddbfb6ad xfs: fix error returns from xfs_bmapi_write | * 441021e5 tracing: Fix oob write in trace_seq_to_buffer() | * 15888cd4 cpufreq: Fix setting policy limits when frequency tables are used | * 68140057 cpufreq: Avoid using inconsistent policy->min and policy->max | * e34a33d5 ksmbd: fix use-after-free in kerberos authentication | * cf443f31 platform/x86/intel-uncore-freq: Fix missing uncore sysfs during CPU hotplug | * 810947bf iommu/vt-d: Apply quirk_iommu_igfx for 8086:0044 (QM57/QS57) | * c3f37faa iommu/amd: Fix potential buffer overflow in parse_ivrs_acpihid | * 2dd94484 dm: always update the array size in realloc_argv on success | * 12351db6 dm-integrity: fix a warning on invalid table line | * 524b7044 wifi: brcm80211: fmac: Add error handling for brcmf_usb_dl_writeimage() | * 3eaa5e36 mmc: renesas_sdhi: Fix error handling in renesas_sdhi_probe | * 45aced97 irqchip/qcom-mpm: Prevent crash when trying to handle non-wake GPIOs | * bdabd4ee amd-xgbe: Fix to ensure dependent features are toggled with RX checksum offload | * 160153cf perf/x86/intel: KVM: Mask PEBS_ENABLE loaded for guest with vCPU's value. | * 6c639af4 parisc: Fix double SIGFPE crash | * 446289b8 arm64: errata: Add missing sentinels to Spectre-BHB MIDR arrays | * b36749bb i2c: imx-lpi2c: Fix clock count when probe defers | * a62780b5 EDAC/altera: Set DDR and SDMMC interrupt mask before registration | * 17050592 EDAC/altera: Test the correct error reg offset | * 47ca1183 drm/nouveau: Fix WARN_ON in nouveau_fence_context_kill() | * 6649a1db ALSA: usb-audio: Add second USB ID for Jabra Evolve 65 headset | * 3cdbf622 Revert "rndis_host: Flag RNDIS modems as WWAN devices" * | a70a8dc1 Merge 6.1.137 into android14-6.1-lts |\| | * ac7079a4 Linux 6.1.137 | * 8b4c07bb LoongArch: Fix build error due to backport * | 3b321243 ANDROID: GKI: Add bpf_redirect_info to virtual_device symbol list. * | 6751b871 ANDROID: GKI: fix up crc issue in crypto_get_default_null_skcipher() * | 0b32b5b8 Revert "module: sign with sha512 instead of sha1 by default" * | e63ea173 Merge 6.1.136 into android14-6.1-lts |\| | * b6736e03 Linux 6.1.136 | * 715b3451 objtool: Silence more KCOV warnings, part 2 | * cfe7fd06 ASoC: qcom: q6afe-dai: fix Display Port Playback stream name | * fbf45385 PCI: Fix use-after-free in pci_bus_release_domain_nr() | * 353e1820 tracing: Remove pointer (asterisk) and brackets from cpumask_t field | * c8cbb617 phy: freescale: imx8m-pcie: Add one missing error return | * fc053d2d phy: freescale: imx8m-pcie: Do CMN_RST just before PHY PLL lock check | * 1a9e5875 nvme: fixup scan failure for non-ANA multipath controllers | * 48600cbc MIPS: cm: Fix warning if MIPS_CM is disabled | * ae43d74d xdp: Reset bpf_redirect_info before running a xdp's BPF prog. | * 3aaca46e net: dsa: mv88e6xxx: enable STU methods for 6320 family | * 503d67b3 net: dsa: mv88e6xxx: enable .port_set_policy() for 6320 family | * 9ff467ae net: dsa: mv88e6xxx: enable PVT for 6321 switch | * dc6b55cf net: dsa: mv88e6xxx: fix atu_move_port_mask for 6341 family | * e873e8f7 net/sched: act_mirred: don't override retval if we already lost the skb | * 4f9f6159 crypto: atmel-sha204a - Set hwrng quality to lowest possible | * 3a57f45b comedi: jr3_pci: Fix synchronous deletion of timer | * 63d956ac jfs: define xtree root and page independently | * 5d59fd63 of: module: add buffer overflow check in of_modalias() | * 2fea0d6d spi: spi-imx: Add check for spi_imx_setupxfer() | * fc962965 md/raid1: Add check for missing source disk in process_checks() | * 61b36bdc ubsan: Fix panic from test_ubsan_out_of_bounds | * af1c735e spi: tegra210-quad: add rate limiting and simplify timeout error message | * 009847bd spi: tegra210-quad: use WARN_ON_ONCE instead of WARN_ON for timeouts | * 342a5dfc loop: aio inherit the ioprio of original request | * ddc9ef51 x86/i8253: Call clockevent_i8253_disable() with interrupts disabled | * 30e482df scsi: pm80xx: Set phy_attached to zero when device is gone | * dae1e15f scsi: ufs: exynos: Ensure pre_link() executes before exynos_ufs_phy_init() | * 9e3014d7 scsi: hisi_sas: Fix I/O errors caused by hardware port ID changes | * 39ebdc2d ext4: make block validity check resistent to sb bh corruption | * 0c2aea32 nvmet-fc: put ref when assoc->del_work is already scheduled | * b7f235cb nvmet-fc: take tgtport reference only once | * 2184c429 x86/bugs: Don't fill RSB on context switch with eIBRS | * 3b2efa56 x86/bugs: Don't fill RSB on VMEXIT with eIBRS+retpoline | * 14b1cbf0 x86/bugs: Use SBPB in write_ibpb() if applicable | * 6c94a16b selftests/mincore: Allow read-ahead pages to reach the end of the file | * 4aebc670 objtool: Stop UNRET validation on UD2 | * 49802736 nvme: re-read ANA log page after ns scan completes | * 510ba30d ACPI PPTT: Fix coding mistakes in a couple of sizeof() calls | * d4444abc ACPI: EC: Set ec_no_wakeup for Lenovo Go S | * 2fbd0e19 nvme: requeue namespace scan on missed AENs | * e9f8bfb8 xen: Change xen-acpi-processor dom0 dependency | * 9ce224eb selftests: ublk: fix test_stripe_04 | * 3f6c9d66 udmabuf: fix a buf size overflow issue during udmabuf creation | * b16d315a KVM: s390: Don't use %pK through tracepoints | * dcd21345 sched/isolation: Make CONFIG_CPU_ISOLATION depend on CONFIG_SMP | * b22fac54 rtc: pcf85063: do a SW reset if POR failed | * 468ff4a7 9p/net: fix improper handling of bogus negative read/write replies | * 43b498a8 ntb_hw_amd: Add NTB PCI ID for new gen CPU | * 763bf67e ntb: reduce stack usage in idt_scan_mws | * 545defa6 qibfs: fix _another_ leak | * f93a840d objtool, lkdtm: Obfuscate the do_nothing() pointer | * 4e57e330 objtool, ASoC: codecs: wcd934x: Remove potential undefined behavior in wcd934x_slim_irq_handler() | * 5f938572 objtool: Silence more KCOV warnings | * bc49c510 thunderbolt: Scan retimers after device router has been enumerated | * 7e8f1dbf usb: host: xhci-plat: mvebu: use ->quirks instead of ->init_quirk() func | * 36d68151 usb: gadget: aspeed: Add NULL pointer check in ast_vhub_init_dev() | * 9e7bcd1e usb: xhci: Avoid Stop Endpoint retry loop if the endpoint seems Running | * d9a60dd6 dmaengine: dmatest: Fix dmatest waiting less when interrupted | * 54c7b864 sound/virtio: Fix cancel_sync warnings on uninitialized work_structs | * c2902e8a usb: dwc3: gadget: Avoid using reserved endpoints on Intel Merrifield | * a7a27cf2 usb: dwc3: gadget: Refactor loop to avoid NULL endpoints | * 609c9ea7 fs/ntfs3: Fix WARNING in ntfs_extend_initialized_size | * 27b12b58 usb: host: max3421-hcd: Add missing spi_device_id table | * 57089df3 s390/tty: Fix a potential memory leak bug | * 39725470 s390/sclp: Add check for get_zeroed_page() | * d0db2eb9 parisc: PDT: Fix missing prototype warning | * 2236d765 clk: check for disabled clock-provider in of_clk_get_hw_from_clkspec() | * 255cbc9d bpf: Fix deadlock between rcu_tasks_trace and event_mutex. | * e27244cb crypto: null - Use spin lock instead of mutex | * aba9e309 MIPS: cm: Detect CM quirks from device tree | * ba9bf518 pinctrl: renesas: rza2: Fix potential NULL pointer dereference | * 64ebb337 USB: wdm: add annotation | * e0917bef USB: wdm: wdm_wwan_port_tx_complete mutex in atomic context | * 217fe1fc USB: wdm: close race between wdm_open and wdm_wwan_port_stop | * 15a7f147 USB: wdm: handle IO errors in wdm_wwan_port_start | * 6b607ae3 USB: VLI disk crashes if LPM is used | * 219716ce usb: quirks: Add delay init quirk for SanDisk 3.2Gen1 Flash Drive | * a408b804 usb: quirks: add DELAY_INIT quirk for Silicon Motion Flash Drive | * 07b491b6 usb: dwc3: xilinx: Prevent spike in reset signal | * a4454701 usb: dwc3: gadget: check that event count does not exceed event buffer length | * 8b4b7ad4 USB: OHCI: Add quirk for LS7A OHCI controller (rev 0x02) | * df727eba usb: chipidea: ci_hdrc_imx: implement usb_phy_init() error handling | * d2daafc3 usb: chipidea: ci_hdrc_imx: fix call balance of regulator routines | * 0ee46049 usb: chipidea: ci_hdrc_imx: fix usbmisc handling | * c27db84e usb: cdns3: Fix deadlock when using NCM gadget | * 0a8f200a USB: serial: simple: add OWON HDS200 series oscilloscope support | * a5d0eaa0 USB: serial: option: add Sierra Wireless EM9291 | * acb86637 USB: serial: ftdi_sio: add support for Abacus Electrics Optical Probe | * fd93c803 serial: sifive: lock port in startup()/shutdown() callbacks | * 1adf7a11 serial: msm: Configure correct working mode before starting earlycon | * 4d43b709 misc: microchip: pci1xxxx: Fix incorrect IRQ status handling during ack | * 1263d5f5 misc: microchip: pci1xxxx: Fix Kernel panic during IRQ handler registration | * 023816bd KVM: x86: Reset IRTE to host control if *new* route isn't postable | * 38cfa866 KVM: x86: Explicitly treat routing entry type changes as changes | * 05a5c6b0 mei: me: add panther lake H DID | * 90757407 USB: storage: quirk for ADATA Portable HDD CH94 | * c5b8a549 mcb: fix a double free bug in chameleon_parse_gdd() | * f46d8893 KVM: SVM: Allocate IR data using atomic allocation | * 5d463685 LoongArch: Remove a bogus reference to ZONE_DMA | * 34256805 LoongArch: Return NULL from huge_pte_offset() for invalid PMD | * 128d261c drm/amd/display: Force full update in gpu reset | * a4be735f drm/amd/display: Fix gpu reset in multidisplay config | * 24023ed8 net: selftests: initialize TCP header and skb payload with zero | * 5b83d30c xen-netfront: handle NULL returned by xdp_convert_buff_to_frame() | * baa332e2 virtio_console: fix missing byte order handling for cols and rows | * 4e8ce397 wifi: rtw88: use ieee80211_purge_tx_queue() to purge TX skb | * ff5a5dae wifi: mac80211: export ieee80211_purge_tx_queue() for drivers | * 4e773aea LoongArch: Make regs_irqs_disabled() more clear | * da3170fe LoongArch: Select ARCH_USE_MEMTEST | * ecb3f8f8 perf/x86: Fix non-sampling (counting) events on certain x86 platforms | * 9e75c934 iommu/amd: Return an error if vCPU affinity is set for non-vCPU IRTE | * 11bccb05 net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too | * 20d584a3 net_sched: hfsc: Fix a UAF vulnerability in class handling | * e79e8e05 tipc: fix NULL pointer dereference in tipc_mon_reinit_self() | * f41f097f net: phy: leds: fix memory leak | * ceceff6d net: lwtunnel: disable BHs when required | * 790bad9d scsi: core: Clear flags for scsi_cmnd that did not complete | * fd18210a btrfs: avoid page_lockend underflow in btrfs_punch_hole_lock_range() | * a252684e cpufreq: cppc: Fix invalid return value in .get() callback | * da8ee91e cpufreq: scpi: Fix null-ptr-deref in scpi_cpufreq_get_rate() | * f9c54238 cpufreq: scmi: Fix null-ptr-deref in scmi_cpufreq_get_rate() | * 4bf6d7de dma/contiguous: avoid warning about unused size_bytes | * 19cc8261 selftests/mm: generate a temporary mountpoint for cgroup filesystem | * d7888885 ASoC: qcom: Fix sc7280 lpass potential buffer overflow | * 20ecb510 ASoC: qcom: q6dsp: add support to more display ports | * 11f56f5a phy: freescale: imx8m-pcie: assert phy reset and perst in power off | * cf0fbe3e phy: freescale: imx8m-pcie: Add i.MX8MP PCIe PHY support | * b783478e PCI: Fix reference leak in pci_register_host_bridge() | * ead4d69b PCI: Assign PCI domain IDs by ida_alloc() | * 9c32eaf8 of: resolver: Fix device node refcount leakage in of_resolve_phandles() | * fc7e57c5 of: resolver: Simplify of_resolve_phandles() using __free() | * b7f5964d clk: renesas: r9a07g043: Fix HP clock source for RZ/Five | * 5053ee6f clk: renesas: r9a07g04[34]: Fix typo for sel_shdi variable | * 8213d3a6 clk: renesas: r9a07g04[34]: Use SEL_SDHI1_STS status configuration for SD1 mux | * 50563380 clk: renesas: rzg2l: Refactor SD mux driver | * 94c31387 clk: renesas: rzg2l: Remove CPG_SDHI_DSEL from generic header | * 0b78075a clk: renesas: rzg2l: Add struct clk_hw_data | * a70a0ac4 clk: renesas: rzg2l: Use u32 for flag and mux_flags | * b447885e backlight: led_bl: Hold led_access lock when calling led_sysfs_disable() | * c5a9d6c5 backlight: led_bl: Convert to platform remove callback returning void | * 11f72485 iio: adc: ad7768-1: Fix conversion result sign | * c13b7cac iio: adc: ad7768-1: Move setting of val a bit later to avoid unnecessary return value check | * c239afce net: dsa: mv88e6xxx: fix VTU methods for 6320 family | * 58c14a5e net: dsa: mv88e6xxx: fix internal PHYs for 6320 family | * 4db3e956 net: dsa: mv88e6xxx: add field to specify internal phys layout | * 7cdba14d net: dsa: mv88e6xxx: pass directly chip structure to mv88e6xxx_phy_is_internal | * 3edbf0fd net: dsa: mv88e6xxx: move link forcing to mac_prepare/mac_finish | * f27b1e1f net: dsa: add support for mac_prepare() and mac_finish() calls | * 9369d414 net: dsa: mv88e6xxx: don't dispose of Global2 IRQ mappings from mdiobus code | * 0882b475 auxdisplay: hd44780: Fix an API misuse in hd44780.c | * 4b9c5e6e auxdisplay: hd44780: Convert to platform remove callback returning void | * 6854c87a tracing: Verify event formats that have "%*p.." | * 480b9fc4 tracing: Add __print_dynamic_array() helper | * 247feaa1 tracing: Add __string_len() example | * 41abc05a tracing: Fix cpumask() example typo | * 3c8a30f9 tracing: Add __cpumask to denote a trace event field that is a cpumask_t | * 7c2f874c module: sign with sha512 instead of sha1 by default * | ae9d2e99 Merge 6.1.135 into android14-6.1-lts |\| | * 535ec20c Linux 6.1.135 | * ed412556 ALSA: hda/realtek: Fix built-in mic on another ASUS VivoBook model | * ca9f84de md: fix mddev uaf while iterating all_mddevs list | * bf1dc50b md: factor out a helper from mddev_put() | * 92f0f21b MIPS: ds1287: Match ds1287_set_base_clock() function types | * d268e589 MIPS: cevt-ds1287: Add missing ds1287.h include | * 0dde1e38 MIPS: dec: Declare which_prom() as static * | fcf8d4d8 Merge f3311056 ("sign-file,extract-cert: use pkcs11 provider for OPENSSL MAJOR >= 3") into android14-6.1-lts |\| | * f3311056 sign-file,extract-cert: use pkcs11 provider for OPENSSL MAJOR >= 3 | * 6e3319a2 sign-file,extract-cert: avoid using deprecated ERR_get_error_line() | * 3437e90d sign-file,extract-cert: move common SSL helper functions to a header * | 816b54a7 Revert "blk-cgroup: support to track if policy is online" * | 44fe4b43 Revert "blk-iocost: do not WARN if iocg was already offlined" * | ac80043d Revert "bpf: Prevent tail call between progs attached to different hooks" * | 92d04868 Merge 16c54d6a ("mm: fix apply_to_existing_page_range()") into android14-6.1-lts |\| | * 16c54d6a mm: fix apply_to_existing_page_range() | * aed0aac1 blk-iocost: do not WARN if iocg was already offlined | * 3154d64f blk-cgroup: support to track if policy is online | * d9a807fb bpf: Prevent tail call between progs attached to different hooks | * 4759acbd bpf: avoid holding freeze_mutex during mmap operation | * 282d1aa2 btrfs: fix the length of reserved qgroup to free | * 7d8bb979 cifs: use origin fullpath for automounts | * ec28c350 smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open() | * f27602b6 nvmet-fc: Remove unused functions | * e37eabef Revert "LoongArch: BPF: Fix off-by-one error in build_prologue()" | * b66bc16f landlock: Add the errata interface | * 13080d05 drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links | * 615c8f70 Revert "Xen/swiotlb: mark xen_swiotlb_fixup() __init" | * eec34d7d btrfs: zoned: fix zone finishing with missing devices | * 4aecf1c2 btrfs: zoned: fix zone activation with missing devices | * 159f0f61 btrfs: fix qgroup reserve leaks in cow_file_range | * 2a07aea0 LoongArch: Eliminate superfluous get_numa_distances_cnt() | * b137af79 powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas() | * 32e34564 x86/pvh: Call C code via the kernel virtual mapping | * 8dfff85d x86/split_lock: Fix the delayed detection logic | * edde34b7 mm: Fix is_zero_page() usage in try_grab_page() | * 13beac8e misc: pci_endpoint_test: Fix 'irq_type' to convey the correct type | * 53f4df92 misc: pci_endpoint_test: Fix displaying 'irq_type' after 'request_irq' error | * 9d5118b1 misc: pci_endpoint_test: Avoid issue of interrupts remaining after request_irq error | * 6cc2c355 mptcp: sockopt: fix getting freebind & transparent | * 89e1132b media: mediatek: vcodec: mark vdec_vp9_slice_map_counts_eob_coef noinline | * b3c78941 kbuild: Add '-fno-builtin-wcslen' | * 0bf87faf cpufreq: Reference count policy in cpufreq_update_limits() * | 3ba386dd Merge 17c7f46e ("KVM: arm64: Eagerly switch ZCR_EL{1,2}") into android14-6.1-lts |\| | * 17c7f46e KVM: arm64: Eagerly switch ZCR_EL{1,2} | * bde20e15 KVM: arm64: Calculate cptr_el2 traps on activating traps | * 0ff8c9a7 KVM: arm64: Mark some header functions as inline | * 60d55eb2 KVM: arm64: Refactor exit handlers | * 6648fef8 KVM: arm64: Remove VHE host restore of CPACR_EL1.SMEN | * 9f2386b2 KVM: arm64: Remove VHE host restore of CPACR_EL1.ZEN | * a539ca5c KVM: arm64: Remove host FPSIMD saving for non-protected KVM | * 04c50cc2 KVM: arm64: Unconditionally save+flush host FPSIMD/SVE/SME state | * 2fb83650 arm64/fpsimd: Stop using TIF_SVE to manage register saving in KVM | * 254fe3a1 arm64/fpsimd: Have KVM explicitly say which FP registers to save | * 312024dc arm64/fpsimd: Track the saved FPSIMD state type separately to TIF_SVE | * d5f7d383 KVM: arm64: Discard any SVE state when entering KVM guests * | d46f37d6 Merge dc7bdc1f ("io_uring/net: fix accept multishot handling") into android14-6.1-lts |\| | * dc7bdc1f io_uring/net: fix accept multishot handling | * b8acdc41 drm/i915/gvt: fix unterminated-string-initialization warning | * 4e4bd926 drm/sti: remove duplicate object names | * 12b038d5 drm/nouveau: prime: fix ttm_bo_delayed_delete oops | * 6785702f drm/amdgpu/dma_buf: fix page_link check | * ffd68880 drm/amd/pm/powerplay/hwmgr/vega20_thermal: Prevent division by zero | * 8f7b5987 drm/amd/pm/swsmu/smu13/smu_v13_0: Prevent division by zero | * 5fc4fb54 drm/amd/pm/powerplay/hwmgr/smu7_thermal: Prevent division by zero | * de6f8e05 drm/amd/pm/smu11: Prevent division by zero | * 836a189f drm/amd/pm/powerplay: Prevent division by zero | * 40296499 drm/amd/pm: Prevent division by zero | * c8129975 drm/amd: Handle being compiled without SI or CIK support better | * db783ada drm/msm/a6xx: Fix stale rpmh votes from GPU | * 3ba56fc3 drm/repaper: fix integer overflows in repeat functions | * 59f3925c perf/x86/intel/uncore: Fix the scale of IIO free running counters on SPR | * 96b2982f perf/x86/intel/uncore: Fix the scale of IIO free running counters on ICX | * 8a809a8b perf/x86/intel/uncore: Fix the scale of IIO free running counters on SNR | * 311b205f perf/x86/intel: Allow to update user space GPRs from PEBS records | * 51003b2c RDMA/cma: Fix workqueue crash in cma_netevent_work_handler | * 3ddca185 scsi: ufs: exynos: Ensure consistent phy reference counts | * e72c35de scsi: megaraid_sas: Block zero-length ATA VPD inquiry | * 599d1e2a virtiofs: add filesystem context source name check | * b4a9e164 tracing: Fix filter string testing | * b04eaa8d string: Add load_unaligned_zeropad() code path to sized_strscpy() | * 220f0fd6 smb3 client: fix open hardlink on deferred close file error | * 0f5de9de riscv: Avoid fortify warning in syscall_get_arguments() | * 44079e54 ksmbd: fix the warning from __kernel_write_iter | * 817fbb89 ksmbd: Prevent integer overflow in calculation of deadtime | * d5b554bc ksmbd: Fix dangling pointer in krb_authenticate | * f95a2ec3 mm: fix filemap_get_folios_contig returning batches of identical folios | * a6e7f601 mm/gup: fix wrongly calculated returned value in fault_in_safe_writeable() | * 5cdc985c loop: LOOP_SET_FD: send uevents for partitions | * df5118fd loop: properly send KOBJ_CHANGED uevent for disk device | * 0fdafdae isofs: Prevent the use of too small fid | * 3090cad5 i2c: cros-ec-tunnel: defer probe if parent EC is not present * | b918f051 Revert "arm64: errata: Add newer ARM cores to the spectre_bhb_loop_affected() lists" * | e106f149 Merge 0296f973 ("hfs/hfsplus: fix slab-out-of-bounds in hfs_bnode_read_key") into android14-6.1-lts |\| | * 0296f973 hfs/hfsplus: fix slab-out-of-bounds in hfs_bnode_read_key | * e9b5d6e1 crypto: caam/qi - Fix drv_ctx refcount bug | * 9734612b btrfs: correctly escape subvol in btrfs_show_options() | * ba903539 nfsd: decrease sc_count directly if fail to queue dl_recall | * 3a47d1e8 nfs: add missing selections of CONFIG_CRC32 | * 5ed9e05f nfs: move nfs_fhandle_hash to common include file | * 943fe139 asus-laptop: Fix an uninitialized variable | * 8ba70a72 ASoC: codecs:lpass-wsa-macro: Fix logic of enabling vi channels | * 96c93b30 ASoC: codecs:lpass-wsa-macro: Fix vi feedback rate | * 94515f5f Revert "PCI: Avoid reset when disabled via sysfs" | * b4df8b74 writeback: fix false warning in inode_to_wb() | * 0819b7c0 cpufreq/sched: Fix the usage of CPUFREQ_NEED_UPDATE_LIMITS | * 6a088c7d riscv: KGDB: Remove ".option norvc/.option rvc" for kgdb_compiled_break | * 0047bf9b riscv: KGDB: Do not inline arch_kgdb_breakpoint() | * b23e67fa riscv: Properly export reserved regions in /proc/iomem | * a6cb881e ptp: ocp: fix start time alignment in ptp_ocp_signal_set | * 343246e4 net: dsa: avoid refcount warnings when ds->ops->tag_8021q_vlan_del() fails | * 35cde75c net: dsa: mv88e6xxx: fix -ENOENT when deleting VLANs and MST is unsupported | * b3c70dfe net: dsa: mv88e6xxx: avoid unregistering devlink regions which were never registered | * f06b5b42 net: bridge: switchdev: do not notify new brentries as changed | * 464f78d3 net: b53: enable BPDU reception for management port | * fa2d7708 cxgb4: fix memory leak in cxgb4_init_ethtool_filters() error path | * 1489c195 net: openvswitch: fix nested key length validation in the set() action | * b9764ebe net: mctp: Set SOCK_RCU_FREE | * d8a632fb test suite: use %zu to print size_t | * eac34135 igc: cleanup PTP module if probe fails | * 81e25321 igc: handle the IGC_PTP_ENABLED flag correctly | * cfeeec7c igc: move ktime snapshot into PTM retry loop | * 0c03e4fb igc: fix PTM cycle trigger logic | * e4cab92a Revert "wifi: mac80211: Update skb's control block key in ieee80211_tx_dequeue()" | * c6d527bb Bluetooth: l2cap: Check encryption key size on incoming connection | * d8441818 Bluetooth: btrtl: Prevent potential NULL dereference | * d54bc626 Bluetooth: hci_event: Fix sending MGMT_EV_DEVICE_FOUND for invalid address | * 6c588e9a RDMA/core: Silence oversized kvmalloc() warning | * 883ca527 RDMA/hns: Fix wrong maximum DMA segment size | * 837af21f RDMA/usnic: Fix passing zero to PTR_ERR in usnic_ib_pci_probe() | * 065f4b1c md/md-bitmap: fix stats collection for external bitmaps | * 4a05f7ae md/raid10: fix missing discard IO accounting | * 3943754c scsi: iscsi: Fix missing scsi_host_put() in error path | * 8fd4b955 wifi: wl1251: fix memory leak in wl1251_tx_work | * 5f6863dc wifi: mac80211: Purge vif txq in ieee80211_do_stop() | * a167a283 wifi: mac80211: Update skb's control block key in ieee80211_tx_dequeue() | * 5e7df747 wifi: at76c50x: fix use after free access in at76_disconnect | * 1ac5eb4a scsi: hisi_sas: Enable force phy when SATA disk directly connected | * d5849383 HSI: ssi_protocol: Fix use after free vulnerability in ssi_protocol Driver Due to Race Condition | * 80f14e9d Bluetooth: hci_uart: Fix another race during initialization | * 8a1b01b7 x86/e820: Fix handling of subpage regions when calculating nosave ranges in e820__register_nosave_regions() | * 6dd04ebe ACPI: platform-profile: Fix CFI violation when accessing sysfs files | * a53b3599 arm64: errata: Add newer ARM cores to the spectre_bhb_loop_affected() lists * | 4f3eb660 Merge 47b445fc ("selftests: mptcp: close fd_in before returning in main_loop") into android14-6.1-lts |\| | * 47b445fc selftests: mptcp: close fd_in before returning in main_loop * | 8d8b1f03 Merge 696198f8 ("pinctrl: qcom: Clear latched interrupt status when changing IRQ type") into android14-6.1-lts |\| | * 696198f8 pinctrl: qcom: Clear latched interrupt status when changing IRQ type | * eb602e8c PCI: Fix reference leak in pci_alloc_child_bus() | * 210f00e9 PCI: brcmstb: Fix missing of_node_put() in brcm_pcie_probe() | * c467dbd5 of/irq: Fix device node refcount leakages in of_irq_init() | * 338f7aa6 of/irq: Fix device node refcount leakage in API irq_of_parse_and_map() | * 78d928bd of/irq: Fix device node refcount leakages in of_irq_count() | * b84b58ae of/irq: Fix device node refcount leakage in API of_irq_parse_raw() | * ceb4266a of/irq: Fix device node refcount leakage in API of_irq_parse_one() | * fbb09678 ntb: use 64-bit arithmetic for the MSI doorbell mask | * 0357c840 KVM: x86: Acquire SRCU in KVM_GET_MP_STATE to protect guest memory accesses | * 3d4aa023 gve: handle overflow when reporting TX consumed descriptors | * bcfb1e4e gpio: zynq: Fix wakeup source leaks on device unbind | * 5b3cc7e0 gpio: tegra186: fix resource handling in ACPI probe path | * 8dd7d728 ftrace: Add cond_resched() to ftrace_graph_set_hash() | * 3e070367 dm-verity: fix prefetch-vs-suspend race | * 5162ecc2 dm-integrity: set ti->error on memory allocation failure | * e89228dd dm-ebs: fix prefetch-vs-suspend race | * 0642f87c crypto: ccp - Fix check for the primary ASP device | * 8b75a7c1 clk: qcom: gdsc: Set retain_ff before moving to HW CTRL | * c0322b76 clk: qcom: gdsc: Capture pm_genpd_add_subdomain result code | * 62d14a1d clk: qcom: gdsc: Release pm subdomains in reverse add order | * 3db0ca61 cifs: fix integer overflow in match_server() | * b2a1833e cifs: avoid NULL pointer dereference in dbg call | * ad756ecd thermal/drivers/rockchip: Add missing rk3328 mapping entry | * 7a63f4fb sctp: detect and prevent references to a freed transport in sendmsg | * 974193e1 mm/hwpoison: do not send SIGBUS to processes with recovered clean pages | * 45970be1 mm: add missing release barrier on PGDAT_RECLAIM_LOCKED unlock | * aa82be51 mm/rmap: reject hugetlb folios in folio_make_device_exclusive() | * 36106d1c sparc/mm: disable preemption in lazy mmu mode | * 6eef9c02 btrfs: fix non-empty delayed iputs list on unmount due to compressed write workers | * 11a99abd arm64: dts: mediatek: mt8173: Fix disp-pwm compatible string | * f4c4bb9e arm64: mm: Correct the update of max_pfn | * a84cbabf mtd: rawnand: Add status chack in r852_ready() | * 6af3b92b mtd: inftlcore: Add error check for inftl_read_oob() | * 1c20a592 mptcp: only inc MPJoinAckHMacFailure for HMAC failures | * 855bf0aa mptcp: fix NULL pointer in can_accept_new_subflow | * becd8185 lib: scatterlist: fix sg_split_phys to preserve original scatterlist offsets | * a9e4bebe locking/lockdep: Decrease nr_unused_locks if lock unused in zap_class() | * 2edb5b29 mfd: ene-kb3930: Fix a potential NULL pointer dereference | * 3b4643ff jbd2: remove wrong sb->s_sequence check | * d83b0c03 i3c: Add NULL pointer check in i3c_master_queue_ibi() | * e49341f7 i3c: master: svc: Use readsb helper for reading MDB | * 4e73e1f6 smb311 client: fix missing tcon check when mounting with linux/posix extensions | * 475b9b45 soc: samsung: exynos-chipid: Add NULL pointer check in exynos_chipid_probe() | * d3071c1b vdpa/mlx5: Fix oversized null mkey longer than 32bit | * 35d0aa6d ext4: fix off-by-one error in do_split | * 3e7ecf18 bus: mhi: host: Fix race between unprepare and queue_buf | * 8a021b77 ASoC: qdsp6: q6asm-dai: fix q6asm_dai_compr_set_params error path | * f4b34e1e ASoC: qdsp6: q6apm-dai: fix capture pipeline overruns. | * ad3f2974 ASoC: qdsp6: q6apm-dai: set 10 ms period and buffer alignment. * | 055c0956 Merge be562a7f ("io_uring/kbuf: reject zero sized provided buffers") into android14-6.1-lts |\| | * be562a7f io_uring/kbuf: reject zero sized provided buffers | * 43736338 wifi: mac80211: fix integer overflow in hwmp_route_info_get() | * 5862c312 wifi: mt76: Add check for devm_kstrdup() | * 58f6dae9 clocksource/drivers/stm32-lptimer: Use wakeup capable instead of init wakeup | * 7312fc9d mtd: Replace kcalloc() with devm_kcalloc() | * 5ad73080 net: dsa: mv88e6xxx: workaround RGMII transmit delay erratum for 6320 family | * b279480a mtd: Add check for devm_kcalloc() | * 12025f83 mptcp: sockopt: fix getting IPV6_V6ONLY | * 0f9a4bab media: venus: hfi_parser: refactor hfi packet parsing logic | * 26bbedd0 media: venus: hfi_parser: add check to avoid out of bound access | * bb786c81 media: i2c: ov7251: Introduce 1 ms delay between regulators and en GPIO | * 2dd2d13c media: i2c: ov7251: Set enable GPIO low in probe | * a32e7319 media: i2c: ccs: Set the device's runtime PM status correctly in probe | * 26ddb187 media: i2c: ccs: Set the device's runtime PM status correctly in remove | * dc4620a0 media: v4l2-dv-timings: prevent possible overflow in v4l2_detect_gtf() | * f8b29f2d media: platform: stm32: Add check for clk_enable() | * b31a8ec0 media: streamzap: prevent processing IR data on URB failure | * a3f4d282 tpm, tpm_tis: Fix timeout handling when waiting for TPM status | * 9dd161f7 mtd: rawnand: brcmnand: fix PM resume warning | * 076cce6f spi: cadence-qspi: Fix probe on AM62A LP SK | * 07476e0d KVM: arm64: Tear down vGIC on failed vCPU creation | * 75791c04 arm64: errata: Add KRYO 2XX/3XX/4XX silver cores to Spectre BHB safe list | * f2e4ca0c arm64: errata: Assume that unknown CPUs _are_ vulnerable to Spectre BHB | * e03cc3e6 arm64: errata: Add QCOM_KRYO_4XX_GOLD to the spectre_bhb_k24_list | * 2ab5389f arm64: cputype: Add MIDR_CORTEX_A76AE | * 4b8cf3ca xenfs/xensyms: respect hypervisor's "next" indication | * 2257072f media: siano: Fix error handling in smsdvb_module_init() | * 455fd295 media: vim2m: print device name after registering device | * cf5f7bb4 media: venus: hfi: add check to handle incorrect queue size | * 4e95233a media: venus: hfi: add a check to handle OOB in sfr region | * aaf8d62a media: i2c: adv748x: Fix test pattern selection mask | * ac8d33ae ext4: don't treat fhandle lookup of ea_inode as FS corruption | * 08a64592 bpf: support SKF_NET_OFF and SKF_LL_OFF on skb frags | * d2134bf4 pwm: fsl-ftm: Handle clk_get_rate() returning 0 | * 52bced4b pwm: rcar: Improve register calculation | * f3e9cf26 pwm: mediatek: Prevent divide-by-zero in pwm_mediatek_config() | * b79faed2 tpm, tpm_tis: Workaround failed command reception on Infineon devices | * 1a5b7102 ktest: Fix Test Failures Due to Missing LOG_FILE Directories | * 660a53a0 fbdev: omapfb: Add 'plane' value check | * b951cf10 drm/amdgpu: grab an additional reference on the gang fence v2 | * c2968c81 PCI: vmd: Make vmd_dev::cfg_lock a raw_spinlock_t type | * 55ef52c3 drm/amdgpu: handle amdgpu_cgs_create_device() errors in amd_powerplay_create() | * dd686b69 drm/mediatek: mtk_dpi: Explicitly manage TVD clock in power on/off | * 0003302f drm/mediatek: mtk_dpi: Move the input_2p_en bit to platform data | * 4262d784 drm/amdkfd: Fix pqm_destroy_queue race with GPU reset | * 57c9dabd drm/amdkfd: Fix mode1 reset crash issue | * 82b6aaa8 drm/amdkfd: clamp queue size to minimum | * 16961e02 drivers: base: devres: Allow to release group on device release | * 0b67e9c8 drm/bridge: panel: forbid initializing a panel with unknown connector type | * 55bd37d4 drm: panel-orientation-quirks: Add quirk for OneXPlayer Mini (Intel) | * 2f292d7e drm: panel-orientation-quirks: Add new quirk for GPD Win 2 | * e6920a63 drm: panel-orientation-quirks: Add quirk for AYA NEO Slide | * c7b6d314 drm: panel-orientation-quirks: Add quirks for AYA NEO Flip DS and KB | * 0f1abea4 drm: panel-orientation-quirks: Add support for AYANEO 2S * | c80ed510 Merge b2ebe6c3 ("drm/amd/display: Update Cursor request mode to the beginning prefetch always") into android14-6.1-lts |\| | * b2ebe6c3 drm/amd/display: Update Cursor request mode to the beginning prefetch always | * b09c25c6 drm: allow encoder mode_set even when connectors change for crtc | * 6e5534f4 Bluetooth: qca: simplify WCN399x NVM loading | * 9cf7dcca Bluetooth: hci_uart: fix race during initialization | * 1b1828b4 tracing: fix return value in __ftrace_event_enable_disable for TRACE_REG_UNREGISTER | * 53fb25e9 net: vlan: don't propagate flags on open | * 31d43652 wifi: mt76: mt76x2u: add TP-Link TL-WDN6200 ID to device table | * f746fe0c scsi: st: Fix array overflow in st_setup() | * cf9291a3 ext4: ignore xattrs past end | * 54f4e64d ext4: protect ext4_release_dquot against freezing | * 4d82ed58 ahci: add PCI ID for Marvell 88SE9215 SATA Controller | * 98dbf2af f2fs: fix to avoid out-of-bounds access in f2fs_truncate_inode_blocks() | * 5b4fc3c4 ata: libata-eh: Do not use ATAPI DMA for a device limited to PIO mode | * a260bf14 jfs: add sanity check for agwidth in dbMount | * c9541c2b jfs: Prevent copying of nlink with value 0 from disk inode | * 55edbf5d fs/jfs: Prevent integer overflow in AG size calculation | * 7307c8a0 fs/jfs: cast inactags to s64 to prevent potential overflow | * cab18523 jfs: Fix uninit-value access of imap allocated in the diMount() function | * 90e089a6 page_pool: avoid infinite loop to schedule delayed worker | * 3d1b15f6 f2fs: don't retry IO for corrupted data scenario | * c9c01867 ASoC: amd: Add DMI quirk for ACP6X mic support | * 908abfdf ALSA: usb-audio: Fix CME quirk for UF series keyboards | * 2de2827e mmc: dw_mmc: add a quirk for accessing 64-bit FIFOs in two halves | * 4e587fb8 ASoC: fsl_audmix: register card device depends on 'dais' property | * 2bb2136e ALSA: hda: intel: Add Lenovo IdeaPad Z570 to probe denylist | * 922c5428 ALSA: hda: intel: Fix Optimus when GPU has no sound | * ddb14788 HID: pidff: Fix null pointer dereference in pidff_find_fields | * e916d458 HID: pidff: Do not send effect envelope if it's empty | * fbb2f79b HID: pidff: Convert infinite length from Linux API to PID standard | * 72be1287 xen/mcelog: Add __nonstring annotations for unterminated strings | * 4746f2dd arm64: cputype: Add QCOM_CPU_PART_KRYO_3XX_GOLD | * 36a7a63c perf: arm_pmu: Don't disable counter in armpmu_add() | * 5d2f3d43 x86/cpu: Don't clear X86_FEATURE_LAHF_LM flag in init_amd_k8() on AMD when running in a virtual machine | * 87b9f086 pm: cpupower: bench: Prevent NULL dereference on malloc failure | * eda58658 umount: Allow superblock owners to force umount | * 08cf79c7 fs: consistently deref the files table with rcu_dereference_raw() | * 2f75cb27 iommu/mediatek: Fix NULL pointer deference in mtk_iommu_device_group | * 4ffb746e nft_set_pipapo: fix incorrect avx2 match of 5th field octet | * b78f2b45 net: ppp: Add bound checking for skb data on ppp_sync_txmung | * a98d0ba2 ipv6: Align behavior across nexthops during path selection | * 1348214f net_sched: sch_sfq: move the limit validation | * d5108432 net_sched: sch_sfq: use a temporary work area for validating configuration | * b64c8c75 nvmet-fcloop: swap list_add_tail arguments | * 25344c2a ata: sata_sx4: Add error handling in pdc20621_i2c_read() | * ec9faff4 net: ethtool: Don't call .cleanup_data when prepare_data fails | * f6b84d1c tc: Ensure we have enough buffer space when sending filter netlink notifications | * 3051d6d2 net/sched: cls_api: conditional notification of events | * db5d2b27 rtnl: add helper to check if a notification is needed | * 8ab0c35a rtnl: add helper to check if rtnl group has listeners | * f3ce4d3f net: tls: explicitly disallow disconnect | * 829c49b6 codel: remove sch->q.qlen check before qdisc_tree_reduce_backlog() | * 24e6280c tipc: fix memory leak in tipc_link_xmit | * 2dc53c7a ata: pata_pxa: Fix potential NULL pointer dereference in pxa_ata_probe() | * d4d8662e selftests/futex: futex_waitv wouldblock test should fail * 2b26f9c3 Merge branch 'android14-6.1' into android14-6.1-lts Change-Id: I1c8bdcd91094e2f166307124d6f94efa65158437 Signed-off-by:Greg Kroah-Hartman <gregkh@google.com>
Loading
Please sign in to comment