Merge tag 'android14-5.15.182_r00' into android14-5.15

This merges the android14-5.15.182_r00 tag into the android14-5.15 branch,
catching it up with the latest LTS releases.

It contains the following commits:

*   cecb1a7a Merge 5.15.182 into android14-5.15-lts
|\
| * 3b8db0e4 Linux 5.15.182
| * 42266226 scsi: target: Fix WRITE_SAME No Data Buffer crash
| * aaa763ab dm: fix copying after src array boundaries
| * 655e6078 iommu/arm-smmu-v3: Fix iommu_device_probe bug due to duplicated stream ids
| * 6077d3a5 iommu/arm-smmu-v3: Use the new rb tree helpers
| * f95659af irqchip/gic-v2m: Prevent use after free of gicv2m_get_fwnode()
| * 073b77f8 irqchip/gic-v2m: Mark a few functions __init
| * 5883bcce irqchip/gic-v2m: Add const to of_device_id
| * cdde591d Revert "drm/meson: vclk: fix calculation of 59.94 fractional rates"
| * 853e14cf net: phy: microchip: force IRQ polling mode for lan88xx
| * d7084c39 ARM: dts: opos6ul: add ksz8081 phy properties
| * 91ff1e96 firmware: arm_scmi: Balance device refcount when destroying devices
| * d9f609cb net: hns3: fix deadlock issue when externel_lb and reset are executed together
| * c7f24b7d of: module: add buffer overflow check in of_modalias()
| * cc826a9e PCI: imx6: Skip controller_id generation logic for i.MX7D
| * 21491989 net: hns3: defer calling ptp_clock_register()
| * 19a68aa1 net: hns3: fixed debugfs tm_qset size
| * a059cef3 net: hns3: fix an interrupt residual problem
| * 85fc1d80 net: hns3: add support for external loopback test
| * 796f64db net: hns3: store rx VLAN tag offload state for VF
| * 6bed8028 net: fec: ERR007885 Workaround for conventional TX
| * df993daa net: lan743x: Fix memleak issue when GSO enabled
| * f21fb533 nvme-tcp: fix premature queue removal and I/O failover
| * dd008c02 bnxt_en: Fix ethtool -d byte order for 32-bit values
| * 69b10dd2 bnxt_en: Fix out-of-bound memcpy() during ethtool -w
| * f4f30f64 bnxt_en: Fix coredump logic to free allocated buffer
| * 15cb7eab net: ipv6: fix UDPv6 GSO segmentation with NAT
| * 6b732322 net: dlink: Correct endianness handling of led_mode
| * a32dcc3b ice: Check VF VSI Pointer Value in ice_vc_add_fdir_fltr()
| * e06e4cdf ice: Refactor promiscuous functions
| * 0bf32d6f net_sched: qfq: Fix double list add in class with netem as child qdisc
| * 554acc5a net_sched: ets: Fix double list add in class with netem as child qdisc
| * e3e949a3 net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc
| * 29686328 net_sched: drr: Fix double list add in class with netem as child qdisc
| * 6884fc89 net: ethernet: mtk-star-emac: rearm interrupts in rx_poll only when advised
| * bedd287f net: ethernet: mtk-star-emac: fix spinlock recursion issues on rx/tx poll
| * 97da9986 net: ethernet: mtk-star-emac: separate tx/rx handling with two NAPIs
| * 688fff00 net/mlx5: E-switch, Fix error handling for enabling roce
| * 225ee358 net/mlx5: E-Switch, Initialize MAC Address for Default GID
| * 9d3ef89b net/sched: act_mirred: don't override retval if we already lost the skb
| * 9efb2b99 KVM: x86: Load DR6 with guest value only before entering .vcpu_run() loop
| * 1a3f9482 tracing: Fix oob write in trace_seq_to_buffer()
| * 8ba0bfe2 iommu/vt-d: Apply quirk_iommu_igfx for 8086:0044 (QM57/QS57)
| * 466d9da2 iommu/amd: Fix potential buffer overflow in parse_ivrs_acpihid
| * 4df67fb2 dm: always update the array size in realloc_argv on success
| * 526530ec dm-integrity: fix a warning on invalid table line
| * 508be7c0 wifi: brcm80211: fmac: Add error handling for brcmf_usb_dl_writeimage()
| * 113304ce mmc: renesas_sdhi: Fix error handling in renesas_sdhi_probe
| * d5a69c78 amd-xgbe: Fix to ensure dependent features are toggled with RX checksum offload
| * ec458449 parisc: Fix double SIGFPE crash
| * 6266b350 arm64: errata: Add missing sentinels to Spectre-BHB MIDR arrays
| * f0d2cca4 i2c: imx-lpi2c: Fix clock count when probe defers
| * b98f280f EDAC/altera: Set DDR and SDMMC interrupt mask before registration
| * 72d3974e EDAC/altera: Test the correct error reg offset
| * 2ec0f5f6 drm/nouveau: Fix WARN_ON in nouveau_fence_context_kill()
| * 169346d8 ALSA: usb-audio: Add second USB ID for Jabra Evolve 65 headset
* | f1f45ce1 ANDROID: GKI: Add bpf_redirect_info to virtual_device symbol list.
* | ffd8616b ANDROID: GKI: fix up crc issue in crypto_get_default_null_skcipher()
* | adb6b381 Revert "blk-cgroup: support to track if policy is online"
* | 5dcd3425 Revert "blk-iocost: do not WARN if iocg was already offlined"
* | 304675b2 Revert "net: defer final 'struct net' free in netns dismantle"
* | c04bec14 Revert "auxdisplay: hd44780: Convert to platform remove callback returning void"
* | 6f2779b2 Revert "auxdisplay: hd44780: Fix an API misuse in hd44780.c"
* | 4c94936c Revert "backlight: led_bl: Convert to platform remove callback returning void"
* | c77f56bc Revert "module: sign with sha512 instead of sha1 by default"
* | b8210324 Merge 5.15.181 into android14-5.15-lts
|\|
| * 16fdf2c7 Linux 5.15.181
| * 26277a42 PCI: Release resource invalidated by coalescing
| * e4af080f PCI: Fix dropping valid root bus resources with .end = zero
| * ad367516 PCI: Fix use-after-free in pci_bus_release_domain_nr()
| * 1f7fb424 nvme: fixup scan failure for non-ANA multipath controllers
| * d2e15c2f MIPS: cm: Fix warning if MIPS_CM is disabled
| * c82ca029 xdp: Reset bpf_redirect_info before running a xdp's BPF prog.
| * 43c29687 drm/amd/display: fix double free issue during amdgpu module unload
| * bb6b2175 net: dsa: mv88e6xxx: enable .port_set_policy() for 6320 family
| * 527978c7 net: dsa: mv88e6xxx: enable PVT for 6321 switch
| * 7a10a6b1 net: dsa: mv88e6xxx: fix atu_move_port_mask for 6341 family
| * 3ea02720 crypto: atmel-sha204a - Set hwrng quality to lowest possible
| * 4e386645 comedi: jr3_pci: Fix synchronous deletion of timer
| * a1166e98 jfs: define xtree root and page independently
| * 2ddd4a7a md/raid1: Add check for missing source disk in process_checks()
| * e5e274f6 ubsan: Fix panic from test_ubsan_out_of_bounds
| * 7dd6ab7f loop: aio inherit the ioprio of original request
| * 1d8f9378 scsi: pm80xx: Set phy_attached to zero when device is gone
| * 47e8efd6 scsi: hisi_sas: Fix I/O errors caused by hardware port ID changes
| * 4b7bdc2e ext4: make block validity check resistent to sb bh corruption
| * 0773465f nvmet-fc: put ref when assoc->del_work is already scheduled
| * 33acc9c2 nvmet-fc: take tgtport reference only once
| * b6a2cd26 x86/bugs: Don't fill RSB on context switch with eIBRS
| * a71d88ae x86/bugs: Don't fill RSB on VMEXIT with eIBRS+retpoline
| * 56332c56 x86/bugs: Use SBPB in write_ibpb() if applicable
| * 33f046d7 selftests/mincore: Allow read-ahead pages to reach the end of the file
| * 3e70fa90 objtool: Stop UNRET validation on UD2
| * d2830ae3 nvme: re-read ANA log page after ns scan completes
| * 26671f66 ACPI PPTT: Fix coding mistakes in a couple of sizeof() calls
| * 5a838920 nvme: requeue namespace scan on missed AENs
| * bbe7c3b3 xen: Change xen-acpi-processor dom0 dependency
| * 605de052 selftests: ublk: fix test_stripe_04
| * 37351276 udmabuf: fix a buf size overflow issue during udmabuf creation
| * 4da2a94e KVM: s390: Don't use %pK through tracepoints
| * 20a3cec6 sched/isolation: Make CONFIG_CPU_ISOLATION depend on CONFIG_SMP
| * 40845d91 ntb: reduce stack usage in idt_scan_mws
| * 5fe708c5 qibfs: fix _another_ leak
| * 1640c9b8 objtool, ASoC: codecs: wcd934x: Remove potential undefined behavior in wcd934x_slim_irq_handler()
| * d26a6093 usb: gadget: aspeed: Add NULL pointer check in ast_vhub_init_dev()
| * 3a259d74 usb: xhci: Avoid Stop Endpoint retry loop if the endpoint seems Running
| * 0725a991 dmaengine: dmatest: Fix dmatest waiting less when interrupted
| * e03b10c4 sound/virtio: Fix cancel_sync warnings on uninitialized work_structs
| * 059d35a7 usb: dwc3: gadget: Avoid using reserved endpoints on Intel Merrifield
| * 423e146e fs/ntfs3: Fix WARNING in ntfs_extend_initialized_size
| * e10e634e usb: host: max3421-hcd: Add missing spi_device_id table
| * d9ef9664 s390/tty: Fix a potential memory leak bug
| * e1e00dc4 s390/sclp: Add check for get_zeroed_page()
| * 6992fb10 parisc: PDT: Fix missing prototype warning
| * aa36ec5d clk: check for disabled clock-provider in of_clk_get_hw_from_clkspec()
| * 1dd4a856 crypto: null - Use spin lock instead of mutex
| * 10829b24 MIPS: cm: Detect CM quirks from device tree
| * 809fce49 USB: wdm: add annotation
| * 6261b99e USB: wdm: wdm_wwan_port_tx_complete mutex in atomic context
| * b02a3fef USB: wdm: close race between wdm_open and wdm_wwan_port_stop
| * 17dd48b3 USB: wdm: handle IO errors in wdm_wwan_port_start
| * 68be90d3 USB: VLI disk crashes if LPM is used
| * 394ff469 usb: quirks: Add delay init quirk for SanDisk 3.2Gen1 Flash Drive
| * 50d68345 usb: quirks: add DELAY_INIT quirk for Silicon Motion Flash Drive
| * c0079630 usb: dwc3: gadget: check that event count does not exceed event buffer length
| * a143ed26 USB: OHCI: Add quirk for LS7A OHCI controller (rev 0x02)
| * 3ec61fa7 usb: chipidea: ci_hdrc_imx: implement usb_phy_init() error handling
| * 24b808d7 usb: chipidea: ci_hdrc_imx: fix call balance of regulator routines
| * 8060b719 usb: chipidea: ci_hdrc_imx: fix usbmisc handling
| * b9623958 usb: cdns3: Fix deadlock when using NCM gadget
| * 94df0495 USB: serial: simple: add OWON HDS200 series oscilloscope support
| * 82e841dc USB: serial: option: add Sierra Wireless EM9291
| * 184cdaa3 USB: serial: ftdi_sio: add support for Abacus Electrics Optical Probe
| * b59c7fef serial: sifive: lock port in startup()/shutdown() callbacks
| * 116c7d35 KVM: x86: Reset IRTE to host control if *new* route isn't postable
| * 26ccc791 mei: me: add panther lake H DID
| * 843a6fc5 USB: storage: quirk for ADATA Portable HDD CH94
| * 59f993cd mcb: fix a double free bug in chameleon_parse_gdd()
| * 95a34125 KVM: SVM: Allocate IR data using atomic allocation
| * aeba2e15 drm/amd/display: Fix gpu reset in multidisplay config
| * a14b254c net: selftests: initialize TCP header and skb payload with zero
| * bef170d6 virtio_console: fix missing byte order handling for cols and rows
| * c71ab87a iommu/amd: Return an error if vCPU affinity is set for non-vCPU IRTE
| * da793651 net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too
| * fcc8ede6 net_sched: hfsc: Fix a UAF vulnerability in class handling
| * 5fd464fd tipc: fix NULL pointer dereference in tipc_mon_reinit_self()
| * 663c3da8 net: phy: leds: fix memory leak
| * 46a35fe7 cpufreq: cppc: Fix invalid return value in .get() callback
| * 8fbaa766 cpufreq: scpi: Fix null-ptr-deref in scpi_cpufreq_get_rate()
| * 4e3d1c19 cpufreq: scmi: Fix null-ptr-deref in scmi_cpufreq_get_rate()
| * ad03f3f8 dma/contiguous: avoid warning about unused size_bytes
| * c049376c drm/msm/a6xx: Fix stale rpmh votes from GPU
| * cac1786e drm/msm/a6xx: Avoid gx gbit halt during rpm suspend
| * d5572d3d drm/msm/a6xx: Handle GMU prepare-slumber hfi failure
| * c8064e9c drm/msm/a6xx: Improve gpu recovery sequence
| * 14c96391 string: Add load_unaligned_zeropad() code path to sized_strscpy()
| * 039b1d64 kmsan: disable strscpy() optimization under KMSAN
| * f124c35b selftests/mm: generate a temporary mountpoint for cgroup filesystem
| * fbf43c9e ksmbd: Prevent integer overflow in calculation of deadtime
| * 3297497a PCI: Fix reference leak in pci_register_host_bridge()
| * db273126 PCI: Assign PCI domain IDs by ida_alloc()
| * fd168b7d PCI: Coalesce host bridge contiguous apertures
| * 786474c9 gpio: tegra186: fix resource handling in ACPI probe path
| * bc121680 gpio: tegra186: Force one interrupt per bank
| * 32d55484 cifs: fix integer overflow in match_server()
| * 9c9000cb cifs: avoid NULL pointer dereference in dbg call
| * 0f552a0a cifs: print TIDs as hex
| * 74c7d67a backlight: led_bl: Hold led_access lock when calling led_sysfs_disable()
| * 28d49aeb backlight: led_bl: Convert to platform remove callback returning void
| * 9d708a3b iio: adc: ad7768-1: Fix conversion result sign
| * fda3b0b7 iio: adc: ad7768-1: Move setting of val a bit later to avoid unnecessary return value check
| * 8ee067cf soc: samsung: exynos-chipid: Add NULL pointer check in exynos_chipid_probe()
| * c6f24e85 soc: samsung: exynos-chipid: Pass revision reg offsets
| * 75dd8356 soc: samsung: exynos-chipid: avoid soc_device_to_device()
| * f5482938 net: dsa: mv88e6xxx: fix VTU methods for 6320 family
| * 36771754 auxdisplay: hd44780: Fix an API misuse in hd44780.c
| * 959b07fb auxdisplay: hd44780: Convert to platform remove callback returning void
| * f1d518c0 media: streamzap: fix race between device disconnection and urb callback
| * a5d7d89a media: streamzap: remove unused struct members
| * b608bd3b media: streamzap: less chatter
| * 6dd4cf3e media: streamzap: no need for usb pid/vid in device name
| * fa5fec7f media: streamzap: remove unnecessary ir_raw_event_reset and handle
| * ed4ee963 module: sign with sha512 instead of sha1 by default
| * 74a466a1 Bluetooth: SCO: Fix UAF on sco_sock_timeout
| * e7d3a0c7 f2fs: Add inline to f2fs_build_fault_attr() stub
| * c7dc74ab scsi: lpfc: Fix null pointer dereference after failing to issue FLOGI and PLOGI
| * 984212fa pmdomain: ti: Add a null pointer check to the omap_prm_domain_init
| * 6e5b6017 f2fs: check validation of fault attrs in f2fs_build_fault_attr()
| * eac1e7e1 mm: fix apply_to_existing_page_range()
| * 0c35d191 fs/proc: do_task_stat: use sig->stats_lock to gather the threads/children stats
| * 7d21587d drm/i915/gt: Cleanup partial engine discovery failures
| * d154b333 dm cache: fix flushing uninitialized delayed_work on cache_ctr error
| * 4de2c04c jfs: Fix shift-out-of-bounds in dbDiscardAG
| * 500f00c8 MIPS: ds1287: Match ds1287_set_base_clock() function types
| * 9aad60a2 MIPS: cevt-ds1287: Add missing ds1287.h include
| * dd0e9415 MIPS: dec: Declare which_prom() as static
| * dac46598 net: defer final 'struct net' free in netns dismantle
| * 22018622 scsi: ufs: bsg: Set bsg_queue to NULL after removal
| * 6e9ed2f4 scsi: lpfc: Fix a possible data race in lpfc_unregister_fcf_rescan()
| * 93026882 openvswitch: fix lockup on tx to unregistering netdev with carrier
| * 5efcb301 net: openvswitch: fix race on port output
| * 21116833 ipvs: properly dereference pe in ip_vs_add_service
| * 22e9b83f ext4: fix timer use-after-free on failed mount
| * 7d215e01 blk-iocost: do not WARN if iocg was already offlined
| * d20f28f0 blk-cgroup: support to track if policy is online
| * 3516f93c bpf: Check rcu_read_lock_trace_held() before calling bpf map helpers
| * 0d90d9e1 bpf: avoid holding freeze_mutex during mmap operation
| * 82e813b1 sched/task_stack: fix object_is_on_stack() for KASAN tagged pointers
| * bb657008 smb: client: fix potential UAF in cifs_stats_proc_show()
| * ce495690 smb: client: fix potential deadlock when releasing mids
| * 878f3287 smb/server: fix potential null-ptr-deref of lease_ctx_info in smb2_open()
| * 4a788ebb smb: client: fix NULL ptr deref in crypto_aead_setkey()
| * ef51c0d5 smb: client: fix UAF in async decryption
| * ed3b36f3 cifs: Fix UAF in cifs_demultiplex_thread()
| * 336a0669 smb: client: fix use-after-free bug in cifs_debug_data_proc_show()
| * 58de45f4 net: make sock_inuse_add() available
| * 480469f1 ksmbd: fix potencial out-of-bounds when buffer offset is invalid
| * d798fd98 smb: client: fix potential UAF in cifs_dump_full_key()
| * d54fdcf1 nvmet-fc: Remove unused functions
| * 6955fd3a landlock: Add the errata interface
| * 3cc1116d drm/amdgpu: fix usage slab after free
| * fcf9d6a9 drm/amd/display: Add null checks for 'stream' and 'plane' before dereferencing
| * b19ca842 drm/amd/display: Fix out-of-bounds access in 'dcn21_link_encoder_create'
| * e3cd0d83 drm/amd/display: Stop amdgpu_dm initialize when link nums greater than max_links
| * 27fda36e wifi: ath10k: avoid NULL pointer error during sdio remove
| * c1cbf006 phy: tegra: xusb: Fix return value of tegra_xusb_find_port_node function
| * a262c2dc powerpc/rtas: Prevent Spectre v1 gadget construction in sys_rtas()
| * d1c85e26 x86/pvh: Call C code via the kernel virtual mapping
| * 386617ef net: mana: Fix error handling in mana_create_txq/rxq's NAPI cleanup
| * 66a99371 bnxt_re: avoid shift undefined behavior in bnxt_qplib_alloc_init_hwq
| * 7d3914a4 phonet/pep: fix racy skb_queue_empty() use
| * 6cc52df6 filemap: Fix bounds checking in filemap_read()
| * 90c8482a net: fix crash when config small gso_max_size/gso_ipv4_max_size
| * 77aa9855 ipv6: release nexthop on device removal
| * f241e4a7 misc: pci_endpoint_test: Fix 'irq_type' to convey the correct type
| * 30f2cd70 misc: pci_endpoint_test: Fix displaying 'irq_type' after 'request_irq' error
| * 54c9f299 misc: pci_endpoint_test: Avoid issue of interrupts remaining after request_irq error
| * 980a236a mptcp: sockopt: fix getting IPV6_V6ONLY
| * 8fbd9487 kbuild: Add '-fno-builtin-wcslen'
| * 5d3779ce cpufreq: Reference count policy in cpufreq_update_limits()
* | 8dac3410 Merge 93cc7c7f ("KVM: arm64: Eagerly switch ZCR_EL{1,2}") into android14-5.15-lts
|\|
| * 93cc7c7f KVM: arm64: Eagerly switch ZCR_EL{1,2}
| * ec3efc04 KVM: arm64: Calculate cptr_el2 traps on activating traps
| * 52a473ba KVM: arm64: Remove VHE host restore of CPACR_EL1.ZEN
| * 08ce0d1e KVM: arm64: Remove host FPSIMD saving for non-protected KVM
| * 5289ac43 KVM: arm64: Unconditionally save+flush host FPSIMD/SVE/SME state
| * 978c0ccf arm64/fpsimd: Stop using TIF_SVE to manage register saving in KVM
| * 6b3d37c9 arm64/fpsimd: Have KVM explicitly say which FP registers to save
| * 8be8ba9c arm64/fpsimd: Track the saved FPSIMD state type separately to TIF_SVE
| * c4ab60a8 KVM: arm64: Discard any SVE state when entering KVM guests
| * 58ed9301 KVM: arm64: Always start with clearing SVE flag on load
| * a2231da3 KVM: arm64: Get rid of host SVE tracking/saving
* | 0416edb7 UPSTREAM: arm64: errata: Add missing sentinels to Spectre-BHB MIDR arrays
* | e411ed53 Merge 2f420df7 ("drm/sti: remove duplicate object names") into android14-5.15-lts
|\|
| * 2f420df7 drm/sti: remove duplicate object names
| * ada78110 drm/nouveau: prime: fix ttm_bo_delayed_delete oops
| * 49419665 drm/amdgpu/dma_buf: fix page_link check
| * 80814924 drm/amd/pm/powerplay/hwmgr/vega20_thermal: Prevent division by zero
| * f2904fa2 drm/amd/pm/swsmu/smu13/smu_v13_0: Prevent division by zero
| * be0fffc4 drm/amd/pm/powerplay/hwmgr/smu7_thermal: Prevent division by zero
| * 0c02fcbe drm/amd/pm/powerplay: Prevent division by zero
| * b7c41df4 drm/amd/pm: Prevent division by zero
| * c177517e drm/repaper: fix integer overflows in repeat functions
| * 3d81ec24 perf/x86/intel/uncore: Fix the scale of IIO free running counters on SPR
| * 93c5be4d perf/x86/intel/uncore: Fix the scale of IIO free running counters on ICX
| * 609ed2fc perf/x86/intel/uncore: Fix the scale of IIO free running counters on SNR
| * b55b385b perf/x86/intel: Allow to update user space GPRs from PEBS records
| * 5ee09cda virtiofs: add filesystem context source name check
| * aac80c3e tracing: Fix filter string testing
| * e5467a69 riscv: Avoid fortify warning in syscall_get_arguments()
| * 7596182d mm/gup: fix wrongly calculated returned value in fault_in_safe_writeable()
| * 6b563dc8 loop: LOOP_SET_FD: send uevents for partitions
| * 81565d09 loop: properly send KOBJ_CHANGED uevent for disk device
| * 63d5a3e2 isofs: Prevent the use of too small fid
| * cd83035b i2c: cros-ec-tunnel: defer probe if parent EC is not present
| * a33c035d hfs/hfsplus: fix slab-out-of-bounds in hfs_bnode_read_key
| * 877ee3ba crypto: caam/qi - Fix drv_ctx refcount bug
| * cdd459a5 btrfs: correctly escape subvol in btrfs_show_options()
| * a70832d3 nfsd: decrease sc_count directly if fail to queue dl_recall
| * bf5f65ae nfs: add missing selections of CONFIG_CRC32
| * 72f7ccad nfs: move nfs_fhandle_hash to common include file
| * 41a125eb asus-laptop: Fix an uninitialized variable
| * 442a0ab6 ASoC: codecs:lpass-wsa-macro: Fix logic of enabling vi channels
| * 1a19d230 ASoC: codecs:lpass-wsa-macro: Fix vi feedback rate
| * 440225ed Revert "PCI: Avoid reset when disabled via sysfs"
| * 2b109b99 writeback: fix false warning in inode_to_wb()
| * 9ac9ad08 cpufreq/sched: Fix the usage of CPUFREQ_NEED_UPDATE_LIMITS
| * 6bc390b0 riscv: KGDB: Remove ".option norvc/.option rvc" for kgdb_compiled_break
| * 854d0f04 riscv: KGDB: Do not inline arch_kgdb_breakpoint()
| * 3c03e585 riscv: Properly export reserved regions in /proc/iomem
| * 9ea76099 net: dsa: avoid refcount warnings when ds->ops->tag_8021q_vlan_del() fails
| * 8ccdf5e2 net: dsa: mv88e6xxx: avoid unregistering devlink regions which were never registered
| * f7b3bddf net: b53: enable BPDU reception for management port
| * 118d05b5 cxgb4: fix memory leak in cxgb4_init_ethtool_filters() error path
| * a27526e6 net: openvswitch: fix nested key length validation in the set() action
| * 5c1313b9 net: mctp: Set SOCK_RCU_FREE
| * 18924cdf igc: cleanup PTP module if probe fails
| * 7d2d77e5 igc: handle the IGC_PTP_ENABLED flag correctly
| * 55725117 igc: move ktime snapshot into PTM retry loop
| * c1f174ed igc: fix PTM cycle trigger logic
| * 6d16d6cb Revert "wifi: mac80211: Update skb's control block key in ieee80211_tx_dequeue()"
| * 24b2cdfc Bluetooth: l2cap: Check encryption key size on incoming connection
| * 2d7c60c2 Bluetooth: btrtl: Prevent potential NULL dereference
| * 056f0493 Bluetooth: hci_event: Fix sending MGMT_EV_DEVICE_FOUND for invalid address
| * 791daf82 RDMA/core: Silence oversized kvmalloc() warning
| * bb93bd4b RDMA/hns: Fix wrong maximum DMA segment size
| * 3af43d72 RDMA/usnic: Fix passing zero to PTR_ERR in usnic_ib_pci_probe()
| * e2c440b2 md/raid10: fix missing discard IO accounting
| * f89ab864 scsi: iscsi: Fix missing scsi_host_put() in error path
| * 2996144b wifi: wl1251: fix memory leak in wl1251_tx_work
| * 305741e7 wifi: mac80211: Purge vif txq in ieee80211_do_stop()
| * 9d00c0a8 wifi: mac80211: Update skb's control block key in ieee80211_tx_dequeue()
| * 3c619aec wifi: at76c50x: fix use after free access in at76_disconnect
| * 00999e36 scsi: hisi_sas: Enable force phy when SATA disk directly connected
| * 31676d55 scsi: libsas: Add struct sas_tmf_task
| * 42bbb529 scsi: libsas: Delete lldd_clear_aca callback
| * 04bbb1b7 scsi: hisi_sas: Fix setting of hisi_sas_slot.is_internal
| * 8b8e6d43 scsi: hisi_sas: Factor out task prep and delivery code
| * 6587850b scsi: hisi_sas: Pass abort structure for internal abort
| * 9ebfa3eb scsi: hisi_sas: Start delivery hisi_sas_task_exec() directly
| * 9e5a0f57 Bluetooth: hci_uart: Fix another race during initialization
| * e8ea4dd6 x86/e820: Fix handling of subpage regions when calculating nosave ranges in e820__register_nosave_regions()
| * fb627b8f ACPI: platform-profile: Fix CFI violation when accessing sysfs files
| * 46e22de6 arm64: errata: Add newer ARM cores to the spectre_bhb_loop_affected() lists
| * 72972552 HSI: ssi_protocol: Fix use after free vulnerability in ssi_protocol Driver Due to Race Condition
| * 9242391c pinctrl: qcom: Clear latched interrupt status when changing IRQ type
| * 40c4c645 PCI: Fix reference leak in pci_alloc_child_bus()
| * 8730a3c6 PCI: brcmstb: Fix missing of_node_put() in brcm_pcie_probe()
| * fa4d1097 of/irq: Fix device node refcount leakages in of_irq_init()
| * 90d3d651 of/irq: Fix device node refcount leakage in API irq_of_parse_and_map()
| * 52f0888e of/irq: Fix device node refcount leakages in of_irq_count()
| * bd8f1721 ntb: use 64-bit arithmetic for the MSI doorbell mask
| * 94c1cf83 gpio: zynq: Fix wakeup source leaks on device unbind
| * dd38803c ftrace: Add cond_resched() to ftrace_graph_set_hash()
| * 422dd984 dm-integrity: set ti->error on memory allocation failure
| * 9c5eedb0 crypto: ccp - Fix check for the primary ASP device
| * 2e794415 thermal/drivers/rockchip: Add missing rk3328 mapping entry
| * 0f7df489 sctp: detect and prevent references to a freed transport in sendmsg
| * 20035e67 mm/hwpoison: do not send SIGBUS to processes with recovered clean pages
| * f3509cec mm: add missing release barrier on PGDAT_RECLAIM_LOCKED unlock
| * 7de3726a sparc/mm: disable preemption in lazy mmu mode
| * 66a10239 arm64: dts: mediatek: mt8173: Fix disp-pwm compatible string
| * 2dd21fc1 mtd: rawnand: Add status chack in r852_ready()
| * e7d6ceff mtd: inftlcore: Add error check for inftl_read_oob()
| * cef678a2 mptcp: only inc MPJoinAckHMacFailure for HMAC failures
| * b3088bd2 mptcp: fix NULL pointer in can_accept_new_subflow
| * 9ce88838 lib: scatterlist: fix sg_split_phys to preserve original scatterlist offsets
| * 031b5307 locking/lockdep: Decrease nr_unused_locks if lock unused in zap_class()
| * 90ee23c2 mfd: ene-kb3930: Fix a potential NULL pointer dereference
| * ad926f73 jbd2: remove wrong sb->s_sequence check
| * 3ba40261 i3c: Add NULL pointer check in i3c_master_queue_ibi()
| * c658e130 i3c: master: svc: Use readsb helper for reading MDB
| * 5d74f8a5 vdpa/mlx5: Fix oversized null mkey longer than 32bit
| * 2883e9e7 ext4: fix off-by-one error in do_split
| * 899d0353 bus: mhi: host: Fix race between unprepare and queue_buf
| * 65cc9327 ASoC: qdsp6: q6asm-dai: fix q6asm_dai_compr_set_params error path
| * 9ae11b06 wifi: mac80211: fix integer overflow in hwmp_route_info_get()
| * 977fb812 wifi: mt76: Add check for devm_kstrdup()
| * 8f80ade0 clocksource/drivers/stm32-lptimer: Use wakeup capable instead of init wakeup
| * c1e3583f mtd: Replace kcalloc() with devm_kcalloc()
| * ef922b40 net: dsa: mv88e6xxx: workaround RGMII transmit delay erratum for 6320 family
| * 8f8ed592 mtd: Add check for devm_kcalloc()
| * f195e94c media: venus: hfi_parser: refactor hfi packet parsing logic
| * 1ad6aa14 media: venus: hfi_parser: add check to avoid out of bound access
| * 08ac0e22 media: i2c: ov7251: Introduce 1 ms delay between regulators and en GPIO
| * e8396890 media: i2c: ov7251: Set enable GPIO low in probe
| * 7c3118db media: i2c: ccs: Set the device's runtime PM status correctly in probe
| * 5a6b5aa8 media: i2c: ccs: Set the device's runtime PM status correctly in remove
| * 457a61c5 media: v4l2-dv-timings: prevent possible overflow in v4l2_detect_gtf()
| * 432f7488 media: streamzap: prevent processing IR data on URB failure
| * fbcb584e mtd: rawnand: brcmnand: fix PM resume warning
| * b8800431 spi: cadence-qspi: Fix probe on AM62A LP SK
| * 0b08172a arm64: errata: Add KRYO 2XX/3XX/4XX silver cores to Spectre BHB safe list
| * 8cb58a81 arm64: errata: Assume that unknown CPUs _are_ vulnerable to Spectre BHB
| * 1a646a62 arm64: errata: Add QCOM_KRYO_4XX_GOLD to the spectre_bhb_k24_list
| * f6ea5a8a arm64: cputype: Add MIDR_CORTEX_A76AE
| * 09a12853 xenfs/xensyms: respect hypervisor's "next" indication
| * b98fbad6 media: siano: Fix error handling in smsdvb_module_init()
| * 680cc530 media: vim2m: print device name after registering device
| * 32af5c1f media: venus: hfi: add check to handle incorrect queue size
| * 1b8fb257 media: venus: hfi: add a check to handle OOB in sfr region
| * 83724b88 media: i2c: adv748x: Fix test pattern selection mask
| * 84f2ca8d ext4: don't treat fhandle lookup of ea_inode as FS corruption
| * 8273ae80 bpf: support SKF_NET_OFF and SKF_LL_OFF on skb frags
| * 831062d7 bpf: Add endian modifiers to fix endian warnings
| * ed6ff2d4 pwm: fsl-ftm: Handle clk_get_rate() returning 0
| * 1f45022f pwm: rcar: Improve register calculation
| * dc12f37a pwm: rcar: Simplify multiplication/shift logic
| * e3cf0c38 pwm: mediatek: Prevent divide-by-zero in pwm_mediatek_config()
| * 7fa3d93d ktest: Fix Test Failures Due to Missing LOG_FILE Directories
| * 09dbf22f fbdev: omapfb: Add 'plane' value check
| * c250262d PCI: vmd: Make vmd_dev::cfg_lock a raw_spinlock_t type
| * 1690b494 drm/mediatek: mtk_dpi: Explicitly manage TVD clock in power on/off
| * 25c29951 drm/amdkfd: Fix pqm_destroy_queue race with GPU reset
| * 62b3040a drm/amdkfd: clamp queue size to minimum
| * 0236f723 drivers: base: devres: Allow to release group on device release
| * e2dacf84 drm/bridge: panel: forbid initializing a panel with unknown connector type
| * e33d1037 drm: panel-orientation-quirks: Add new quirk for GPD Win 2
| * b60523a7 drm: panel-orientation-quirks: Add support for AYANEO 2S
| * cc301b9d drm/amd/display: Update Cursor request mode to the beginning prefetch always
| * 0a5ba5e2 drm: allow encoder mode_set even when connectors change for crtc
| * d71a57a3 Bluetooth: hci_uart: fix race during initialization
| * effeecfe tracing: fix return value in __ftrace_event_enable_disable for TRACE_REG_UNREGISTER
| * 523fa097 net: vlan: don't propagate flags on open
| * 5a194041 wifi: mt76: mt76x2u: add TP-Link TL-WDN6200 ID to device table
| * c6015d0f scsi: st: Fix array overflow in st_setup()
| * f737418b ext4: ignore xattrs past end
| * 1648029c ext4: protect ext4_release_dquot against freezing
| * fd4c73a2 ahci: add PCI ID for Marvell 88SE9215 SATA Controller
| * 67e16ccb f2fs: fix to avoid out-of-bounds access in f2fs_truncate_inode_blocks()
| * 714036b1 ata: libata-eh: Do not use ATAPI DMA for a device limited to PIO mode
| * a741f29a jfs: add sanity check for agwidth in dbMount
| * 86bfeaa1 jfs: Prevent copying of nlink with value 0 from disk inode
| * 3d8a45f8 fs/jfs: Prevent integer overflow in AG size calculation
| * 761e36cf fs/jfs: cast inactags to s64 to prevent potential overflow
| * 4f107327 jfs: Fix uninit-value access of imap allocated in the diMount() function
| * 91522aba page_pool: avoid infinite loop to schedule delayed worker
| * 691d4595 ALSA: usb-audio: Fix CME quirk for UF series keyboards
| * c30b45c7 ASoC: fsl_audmix: register card device depends on 'dais' property
| * 81b19dc8 ALSA: hda: intel: Fix Optimus when GPU has no sound
| * 6b4449e4 HID: pidff: Fix null pointer dereference in pidff_find_fields
| * 4c5f8e59 HID: pidff: Do not send effect envelope if it's empty
| * b5d9c541 HID: pidff: Convert infinite length from Linux API to PID standard
| * 01e1c8a2 xen/mcelog: Add __nonstring annotations for unterminated strings
| * 595a9e7b arm64: cputype: Add QCOM_CPU_PART_KRYO_3XX_GOLD
| * 016cc007 perf: arm_pmu: Don't disable counter in armpmu_add()
| * 4162ed24 x86/cpu: Don't clear X86_FEATURE_LAHF_LM flag in init_amd_k8() on AMD when running in a virtual machine
| * 0e297a02 pm: cpupower: bench: Prevent NULL dereference on malloc failure
| * c2077a80 umount: Allow superblock owners to force umount
| * d5048821 nft_set_pipapo: fix incorrect avx2 match of 5th field octet
| * 99aa698d net: ppp: Add bound checking for skb data on ppp_sync_txmung
| * e342ea4c nvmet-fcloop: swap list_add_tail arguments
| * bea74532 ata: sata_sx4: Add error handling in pdc20621_i2c_read()
| * 3c1c0a8c ata: sata_sx4: Drop pointless VPRINTK() calls and convert the remaining ones
| * 81a5174e net: ethtool: Don't call .cleanup_data when prepare_data fails
| * ac91c612 net: tls: explicitly disallow disconnect
| * ed06675d tipc: fix memory leak in tipc_link_xmit
| * d0d720f9 ata: pata_pxa: Fix potential NULL pointer dereference in pxa_ata_probe()
* ee8c095e Merge branch 'android14-5.15' into android14-5.15-lts

Change-Id: I619f16411c68d1e283f1d03df99165be1b761b19
Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>