Merge tag 'android14-6.1.134_r00' into android14-6.1

This merges the android14-6.1.134_r00 tag into the android14-6.1 branch,
catching it up with the latest LTS releases.

It contains the following commits:

* 5a2ca52a Revert "of: property: Increase NR_FWNODE_REFERENCE_ARGS"
* f6e3f076 Revert "can: statistics: use atomic access in hot path"
*   522ff9a1 Merge 6.1.134 into android14-6.1-lts
|\
| * 42010283 Linux 6.1.134
| * 1a84c0be tracing: Do not use PERF enums when perf is not defined
| * 14a6b65c NFSD: Skip sending CB_RECALL_ANY when the backchannel isn't up
| * d96587cc nfsd: put dl_stid if fail to queue dl_recall
| * 30ef7cfe media: streamzap: fix race between device disconnection and urb callback
| * 78f06805 jfs: add index corruption check to DT_GETPAGE()
| * 46e2c031 jfs: fix slab-out-of-bounds read in ea_get()
| * 89503e5e ext4: fix OOB read when checking dotdot dir
| * c07ec83b ext4: don't over-report free space or inodes in statvfs
| * cf187601 arm64: Don't call NULL in do_compat_alignment_fixup()
| * 8f4d0995 tracing/osnoise: Fix possible recursive locking for cpus_read_lock()
| * e9564aa7 tracing: Fix synth event printk format for str fields
| * bb9616ba tracing: Ensure module defining synth event cannot be unloaded while tracing
| * a2cce54c tracing: Fix use-after-free in print_graph_function_flags during tracer switching
| * 3ac65de1 ksmbd: validate zero num_subauth before sub_auth is accessed
| * 596407ad ksmbd: fix session use-after-free in multichannel connection
| * f0eb3f57 ksmbd: fix use-after-free in ksmbd_sessions_deregister()
| * 629dd37a ksmbd: add bounds check for create lease context
| * 8857a956 mmc: sdhci-omap: Disable MMC_CAP_AGGRESSIVE_PM for eMMC/SD
| * 91f33558 mmc: sdhci-pxav3: set NEED_RSP_BUSY capability
| * 0bb9c96f ACPI: resource: Skip IRQ override on ASUS Vivobook 14 X1404VAP
| * bae5b55e acpi: nfit: fix narrowing conversion in acpi_nfit_ctl
| * 0708fd6b x86/mm: Fix flush_tlb_range() when used for zapping normal PMDs
| * 39e32fe6 x86/tsc: Always save/restore TSC sched_clock() on suspend/resume
| * 9c823702 btrfs: handle errors from btrfs_dec_ref() properly
| * cacce7fa kunit/overflow: Fix UB in overflow_allocation_test
| * 781b2db0 perf/x86/intel: Avoid disable PMU if !cpuc->enabled in sample read
| * 0a416b4c perf/x86/intel: Apply static call for drain_pebs
| * 5b36f9e8 ntb_perf: Delete duplicate dmaengine_unmap_put() call in perf_copy_chunk()
| * 16d6b252 platform/x86: ISST: Correct command storage data length
| * c498c117 LoongArch: BPF: Use move_addr() for BPF_PSEUDO_FUNC
| * e9ccb262 LoongArch: BPF: Fix off-by-one error in build_prologue()
| * f39af67f LoongArch: Increase ARCH_DMA_MINALIGN up to 16
| * 0f10f83a usbnet:fix NPE during rx_complete
| * bbadf503 tty: serial: fsl_lpuart: disable transmitter before changing RS485 related registers
| * a824c44e tty: serial: fsl_lpuart: use UARTMODIR register bits for lpuart32 platform
| * 0628ee3b drm/amdgpu/gfx11: fix num_mec
| * ddd27528 io_uring/filetable: ensure node switch is always done, if needed
| * be8a0dec arcnet: Add NULL check in com20020pci_probe()
| * d10bd910 ipv6: Do not consider link down nexthops in path selection
| * 6d1e50a7 ipv6: Start path selection from the first nexthop
| * 21748669 net: fix geneve_opt length integer overflow
| * 5eaa143b net: dsa: mv88e6xxx: propperly shutdown PPU re-enable timer on destroy
| * b9039d61 ipv6: fix omitted netlink attributes when using RTEXT_FILTER_SKIP_STATS
| * a263d31c netfilter: nft_tunnel: fix geneve_opt type confusion addition
| * b88786ea tunnels: Accept PACKET_HOST in skb_tunnel_check_pmtu().
| * f3b75e0a vsock: avoid timeout during connect() if the socket is closing
| * 9122fec3 udp: Fix memory accounting leak.
| * b3f48a41 net: mvpp2: Prevent parser TCAM memory corruption
| * 1dcc144c net_sched: skbprio: Remove overly strict queue assertions
| * 797e5371 netlabel: Fix NULL pointer exception caused by CALIPSO on IPv4 sockets
| * 3f620f0a netfilter: nft_set_hash: GC reaps elements with conncount for dynamic sets only
| * 38253922 ASoC: imx-card: Add NULL check in imx_card_probe()
| * 8d78931a ntb: intel: Fix using link status DB's
| * 7ed22f8d ntb_hw_switchtec: Fix shift-out-of-bounds in switchtec_ntb_mw_set_trans
| * fb5069d0 riscv: ftrace: Add parentheses in macro definitions of make_call_t0 and make_call_ra
| * a333f223 spufs: fix a leak in spufs_create_context()
| * 880e7b3d spufs: fix gang directory lifetimes
| * 96de7fbd spufs: fix a leak on spufs_new_file() failure
| * ad387704 hwmon: (nct6775-core) Fix out of bounds access for NCT679{8,9}
| * a8184b19 memory: omap-gpmc: drop no compatible check
| * 4b07ce83 can: statistics: use atomic access in hot path
| * 1a8bae67 ALSA: hda/realtek: Add mute LED quirk for HP Pavilion x360 14-dy1xxx
| * e733877c drm/amd: Keep display off while going into S4
| * 34988d2e x86/sgx: Warn explicitly if X86_FEATURE_SGX_LC is not enabled
| * 8630709e locking/semaphore: Use wake_q to wake up processes outside lock critical section
| * e73917f9 sched/deadline: Use online cpus for validating runtime
| * 223f2aba ALSA: hda/realtek: Add support for ASUS Zenbook UM3406KA Laptops using CS35L41 HDA
| * de04d494 ALSA: hda/realtek: Add support for ASUS ROG Strix G614 Laptops using CS35L41 HDA
| * b31a7802 HID: i2c-hid: improve i2c_hid_get_report error message
| * 70bb0d71 platform/x86: intel-hid: fix volume buttons on Microsoft Surface Go 4 tablet
| * 3f3a07fc ALSA: hda: Fix speakers on ASUS EXPERTBOOK P5405CSA 1.0
| * 2dab4e83 ALSA: hda/realtek: Fix Asus Z13 2025 audio
| * 6387243b affs: don't write overlarge OFS data block size fields
| * 39504168 affs: generate OFS sequence numbers starting at 1
| * 499d2618 wifi: brcmfmac: keep power during suspend if board requires it
| * ff0c8508 nvme-pci: skip CMB blocks incompatible with PCI P2P DMA
| * 159ef31d nvme-pci: clean up CMBMSC when registering CMB fails
| * 6fca3c84 nvme-tcp: fix possible UAF in nvme_tcp_poll
| * 157c80e4 wifi: iwlwifi: mvm: use the right version of the rate API
| * c0a4cbda wifi: iwlwifi: fw: allocate chained SG tables for dump
| * c195e1ea rcu-tasks: Always inline rcu_irq_work_resched()
| * 4c467a4b context_tracking: Always inline ct_{nmi,irq}_{enter,exit}()
| * ad05c937 sched/smt: Always inline sched_smt_active()
| * 1e49787b octeontx2-af: Free NIX_AF_INT_VEC_GEN irq
| * 013a3c7e octeontx2-af: Fix mbox INTR handler when num VFs > 64
| * 9b435afa ACPI: processor: idle: Return an error if both P_LVL{2,3} idle states are invalid
| * 63d23e39 LoongArch: Fix help text of CMDLINE_EXTEND in Kconfig
| * 6fc6fa80 ring-buffer: Fix bytes_dropped calculation issue
| * 3420c271 net/mlx5e: SHAMPO, Make reserved size independent of page size
| * 128a0f43 ksmbd: fix multichannel connection failure
| * a6b59486 ksmbd: use aead_request_free to match aead_request_alloc
| * 717587fb rndis_host: Flag RNDIS modems as WWAN devices
| * 5fed5f6d rtnetlink: Allocate vfinfo size for VF GUIDs when supported
| * 83048539 exfat: fix the infinite loop in exfat_find_last_cluster()
| * b9249da6 objtool, media: dib8000: Prevent divide-by-zero in dib8000_set_dds()
| * 54668579 perf tools: annotate asm_pure_loop.S
| * 1ff71166 fs/procfs: fix the comment above proc_pid_wchan()
| * 62f6af0a staging: rtl8723bs: select CONFIG_CRYPTO_LIB_AES
| * c8b28c12 perf python: Check if there is space to copy all the event
| * 5a393187 perf python: Don't keep a raw_data pointer to consumed ring buffer space
| * 5cf553ae perf python: Decrement the refcount of just created event on failure
| * e95f1c10 perf python: Fixup description of sample.id event member
| * 3d381442 i3c: master: svc: Fix missing the IBI rules
| * b0686d0d um: remove copy_from_kernel_nofault_allowed
| * 142f8920 fuse: fix dax truncate/punch_hole fault path
| * a2851808 NFSv4: Don't trigger uneccessary scans for return-on-close delegations
| * a34f52b7 arch/powerpc: drop GENERIC_PTDUMP from mpc885_ads_defconfig
| * 11e24802 ocfs2: validate l_tree_depth to avoid out-of-bounds access
| * 7b9d5f73 kexec: initialize ELF lowest address to ULONG_MAX
| * 314f8fb9 perf units: Fix insufficient array space
| * b303aff1 perf evlist: Add success path to evlist__create_syswide_maps
| * 7098ae7e iio: adc: ad7124: Fix comparison of channel configs
| * 1a14e971 fs/ntfs3: Fix a couple integer overflows on 32bit systems
| * 1c80787e usb: xhci: correct debug message page size calculation
| * 7214c53e iio: accel: msa311: Fix failure to release runtime pm if direct mode claim fails.
| * 8bd1e852 iio: accel: mma8452: Ensure error return on failure to matching oversampling ratio
| * cb385b93 coresight-etm4x: add isb() before reading the TRCSTATR
| * 90b7ad76 coresight: catu: Fix number of pages while using 64k pages
| * b0201583 soundwire: slave: fix an OF node reference leak in soundwire slave device
| * 46b78bf0 isofs: fix KMSAN uninit-value bug in do_isofs_readdir()
| * be8a5aec clk: qcom: mmcc-sdm660: fix stuck video_subcore0 clock
| * d5c51c64 crypto: hisilicon/sec2 - fix for aead auth key length
| * d224ed6e x86/dumpstack: Fix inaccurate unwinding from exception stacks due to misplaced assignment
| * d77be514 mfd: sm501: Switch to BIT() to mitigate integer overflows
| * f1b95668 pinctrl: renesas: rzv2m: Fix missing of_node_put() call
| * dc7139b7 RDMA/mlx5: Fix mlx5_poll_one() cur_qp update flow
| * 837adafa crypto: nx - Fix uninitialised hv_nxc on error
| * 37a73de1 power: supply: max77693: Fix wrong conversion of charge input threshold value
| * b92e9f75 x86/entry: Fix ORC unwinder for PUSH_REGS with save_ret=1
| * bb2cb550 clk: amlogic: g12a: fix mmc A peripheral clock
| * 99db7515 selftests/bpf: Select NUMA_NO_NODE to create map
| * 6ded8c22 clk: amlogic: gxbb: drop non existing 32k clock parent
| * 1f3fc107 clk: amlogic: g12b: fix cluster A parent data
| * 77fedd8a pinctrl: tegra: Set SFIO mode to Mux Register
| * ae450da3 IB/mad: Check available slots before posting receive WRs
| * 29cb659b remoteproc: qcom_q6v5_mss: Handle platforms with one power domain
| * bc1db4d8 RDMA/erdma: Prevent use-after-free in erdma_accept_newconn()
| * 7844932c RDMA/mlx5: Fix calculation of total invalidated pages
| * d5212b99 RDMA/core: Don't expose hw_counters outside of init net namespace
| * 816ce9f4 clk: rockchip: rk3328: fix wrong clk_ref_usb3otg parent
| * 7c9abc45 pinctrl: renesas: rzg2l: Fix missing of_node_put() call
| * dd5c97e4 pinctrl: renesas: rza2: Fix missing of_node_put() call
| * 5a45035b lib: 842: Improve error handling in sw842_compress()
| * 8c6980c9 bpf: Use preempt_count() directly in bpf_send_signal_common()
| * 119bc7ed clk: qcom: gcc-msm8953: fix stuck venus0_core0 clock
| * 0fef48f4 clk: samsung: Fix UBSAN panic in samsung_clk_init()
| * 54380eea selftests/bpf: Fix string read in strncmp benchmark
| * 0144376d libbpf: Fix hypothetical STT_SECTION extern NULL deref case
| * 43ac4030 remoteproc: qcom_q6v5_pas: Make single-PD handling more robust
| * 062de5f4 of: property: Increase NR_FWNODE_REFERENCE_ARGS
| * e6015ca4 remoteproc: core: Clear table_sz when rproc_shutdown
| * 68e13ab1 crypto: hisilicon/sec2 - fix for aead authsize alignment
| * cb688aed clk: amlogic: gxbb: drop incorrect flag on 32k clock
| * 5170a857 fbdev: sm501fb: Add some geometry checks.
| * b2f79f85 mdacon: rework dependency list
| * 2841dcc3 fbdev: au1100fb: Move a variable assignment behind a null pointer check
| * be78c69c PCI: pciehp: Don't enable HPIE when resuming in poll mode
| * d953e2cd drm/amd/display: avoid NPD when ASIC does not support DMUB
| * 8dcd8b42 drm/mediatek: dsi: fix error codes in mtk_dsi_host_transfer()
| * a4d0b76c PCI: xilinx-cpm: Fix IRQ domain leak in error path of probe
| * defab1c6 PCI: Remove stray put_device() in pci_register_host_bridge()
| * 1cabe832 drm/amd/display: fix type mismatch in CalculateDynamicMetadataParameters()
| * 32d12502 PCI: Avoid reset when disabled via sysfs
| * 933322e5 PCI/portdrv: Only disable pciehp interrupts early when needed
| * d68c4559 PCI: brcmstb: Fix potential premature regulator disabling
| * 99a0efba PCI: brcmstb: Fix error path after a call to regulator_bulk_get()
| * 5bb237a1 PCI: brcmstb: Use internal register to change link capability
| * 9ce67aa3 PCI: cadence-ep: Fix the driver to send MSG TLP for INTx without data payload
| * 07e7a733 drm/msm/dsi: Set PHY usescase (and mode) before registering DSI host
| * cd4b0750 PCI/ASPM: Fix link state exit during switch upstream function removal
| * 4e9cefe8 drm/mediatek: mtk_hdmi: Fix typo for aud_sampe_size member
| * 61270882 drm/mediatek: mtk_hdmi: Unregister audio platform device on failure
| * c08869bf PCI: Use downstream bridges for distributing resources
| * 79d138d1 drm/vkms: Fix use after free and double free on init error
| * f3ce74cd drm: xlnx: zynqmp: Fix max dma segment size
| * e713b514 drm/bridge: it6505: fix HDCP V match check is not performed correctly
| * 21daa13f drm/dp_mst: Fix drm RAD print
| * 1ef7b8c1 drm/bridge: ti-sn65dsi86: Fix multiple instances
| * 072833f1 ASoC: ti: j721e-evm: Fix clock configuration for ti,j7200-cpb-audio compatible
| * c9c4db93 ALSA: hda/realtek: Always honor no_shutup_pins
| * cb6d6a00 HID: remove superfluous (and wrong) Makefile entry for CONFIG_INTEL_ISH_FIRMWARE_DOWNLOADER
| * 67ec1fea ASoC: cs35l41: check the return value from spi_setup()
| * 26067576 media: platform: allgro-dvt: unregister v4l2_device on the error path
| * aa5af83b media: verisilicon: HEVC: Initialize start_bit field
| * e7a2a34d x86/fpu/xstate: Fix inconsistencies in guest FPU xfeatures
| * 214965d1 perf/ring_buffer: Allow the EPOLLRDNORM flag for poll
| * 4210ca86 lockdep: Don't disable interrupts on RT in disable_irq_nosync_lockdep.*()
| * 72520ca5 PM: sleep: Fix handling devices with direct_complete set on errors
| * 6a810c46 thermal: int340x: Add NULL check for adev
| * 0e44e887 EDAC/ie31200: Fix the error path order of ie31200_init()
| * 13479cf5 EDAC/ie31200: Fix the DIMM size mask for several SoCs
| * 0d6f98d2 EDAC/ie31200: Fix the size of EDAC_MC_LAYER_CHIP_SELECT layer
| * 89f6691c selinux: Chain up tool resolving errors in install_policy.sh
| * 528a06fe PM: sleep: Adjust check before setting power.must_resume
| * 53d472f9 lockdep/mm: Fix might_fault() lockdep check of current->mm->mmap_lock
| * 2380b9f5 x86/sev: Add missing RIP_REL_REF() invocations during sme_enable()
| * cbcd6c85 x86/platform: Only allow CONFIG_EISA for 32-bit
| * 92ce1ccb x86/fpu: Avoid copying dynamic FP state from init_task in arch_dup_task_struct()
| * feec6cd9 x86/fpu: Fix guest FPU state buffer allocation size
| * a33ab15c cpufreq: governor: Fix negative 'idle_time' handling in dbs_update()
| * d6937b1b smack: dont compile ipv6 code unless ipv6 is configured
| * c678f083 cpufreq: scpi: compare kHz instead of Hz
| * f33c3cb0 x86/mm/pat: cpa-test: fix length for CPA_ARRAY test
| * d40e3537 watch_queue: fix pipe accounting mismatch
* | 4878fe79 Merge 6.1.133 into android14-6.1-lts
|\|
| * 3dfebb87 Linux 6.1.133
| * f6c086a7 ARM: dts: imx6qdl-apalis: Fix poweroff on Apalis iMX6
| * 04d1086a media: i2c: et8ek8: Don't strip remove function when driver is builtin
| * 7a735a8a usb: typec: ucsi: Fix NULL pointer access
| * 03fa71e9 usb: gadget: uvc: Fix ERR_PTR dereference in uvc_v4l2.c
| * 1a8d68ca serial: 8250_dma: terminate correct DMA in tx_dma_flush()
| * 52d942a5 memstick: rtsx_usb_ms: Fix slab-use-after-free in rtsx_usb_ms_drv_remove
| * 07f8bdce net: usb: usbnet: restore usb%d name exception for local mac addresses
| * 794aad07 net: usb: qmi_wwan: add Telit Cinterion FE990B composition
| * 8d333fc9 net: usb: qmi_wwan: add Telit Cinterion FN990B composition
| * eb7cfa77 tty: serial: 8250: Add Brainboxes XC devices
| * ded9ea38 tty: serial: 8250: Add some more device IDs
| * 79aafdf6 counter: microchip-tcb-capture: Fix undefined counter channel state on probe
| * e0d57d07 counter: stm32-lptimer-cnt: fix error handling when enabling
| * ccd744ac ALSA: hda/realtek: Support mute LED on HP Laptop 15s-du3xxx
| * 1ec43100 netfilter: socket: Lookup orig tuple for IPv6 SNAT
| * 04805efe drm/amd/display: Check denominator crb_pipes before used
| * 79e50307 ARM: Remove address checking for MMUless devices
| * 01469773 ARM: 9351/1: fault: Add "cut here" line for prefetch aborts
| * 756992b8 ARM: 9350/1: fault: Implement copy_from_kernel_nofault_allowed()
| * 0ef6e498 atm: Fix NULL pointer dereference
| * 7582e135 HID: hid-plantronics: Add mic mute mapping and generalize quirks
| * e43621ca ALSA: usb-audio: Add quirk for Plantronics headsets to fix control names
* | e3b905a7 Merge 6.1.132 into android14-6.1-lts
|\|
| * 8e60a714 Linux 6.1.132
| * 662254a3 xfs: give xfs_extfree_intent its own perag reference
| * 7400fa17 block, bfq: fix re-introduced UAF in bic_set_bfqq()
| * 49100c0b mm/migrate: fix shmem xarray update during migration
| * 4903303f wifi: iwlwifi: mvm: ensure offloading TID queue exists
| * 406a037d fs/ntfs3: Change new sparse cluster processing
| * 2e13f88e drm/amdgpu: fix use-after-free bug
| * 5cfcd32b arm64: dts: rockchip: fix u2phy1_host status for NanoPi R4S
| * 4e0713c7 media: mediatek: vcodec: Fix VP8 stateless decoder smatch warning
| * a12bd675 drm/mediatek: Fix coverity issue with unintentional integer overflow
| * 2d4a7a09 netfilter: nft_counter: Use u64_stats_t for statistic.
| * 4375eee3 mptcp: Fix data stream corruption in the address announcement
| * 19e85e06 drm/amd/display: Use HW lock mgr for PSR1 when only one eDP
| * 9c4e202a ksmbd: fix incorrect validation for num_aces field of smb_acl
| * a94ad20b drm/amdgpu: Fix JPEG video caps max size for navi1x and raven
| * 78b07dad drm/radeon: fix uninitialized size issue in radeon_vce_cs_parse()
| * 0a566a79 soc: qcom: pdr: Fix the potential deadlock
| * 7993ad77 batman-adv: Ignore own maximum aggregation size during RX
| * 205649d6 xsk: fix an integer overflow in xp_create_and_assign_umem()
| * ccb4aef2 efi/libstub: Avoid physical address 0x0 when doing random allocation
| * 1091f782 ARM: shmobile: smp: Enforce shmobile_smp_* alignment
| * 966f3314 proc: fix UAF in proc_get_inode()
| * b9a1c6e8 mmc: atmel-mci: Add missing clk_disable_unprepare()
| * be320c26 mmc: sdhci-brcmstb: add cqhci suspend/resume to PM ops
| * ea034e24 arm64: dts: freescale: imx8mm-verdin-dahlia: add Microphone Jack to sound card
| * 270fe5c0 regulator: check that dummy regulator has been probed before using it
| * 83387073 drm/v3d: Don't run jobs that have errors flagged in its fence
| * 0bd1486e can: flexcan: disable transceiver during system PM
| * 06ffbb4d can: flexcan: only change CAN state when link up in system PM
| * a8a89a6d can: rcar_canfd: Fix page entries in the AFL list
| * 78f6d8f8 i2c: omap: fix IRQ storms
| * 18f162e1 Revert "gre: Fix IPv6 link-local address generation."
| * 04c3f729 net/neighbor: add missing policy for NDTPA_QUEUE_LENBYTES
| * 47e88c6c net: lwtunnel: fix recursion loops
| * 51e8be95 net: atm: fix use after free in lec_send()
| * 9dac3f19 ipv6: Set errno after ip_fib_metrics_init() in ip6_route_info_create().
| * 77c41cdb ipv6: Fix memleak of nhc_pcpu_rth_output in fib_check_nh_v6_gw().
| * 788ae2ae Bluetooth: Fix error code in chan_alloc_skb_cb()
| * 2c160e68 RDMA/hns: Fix wrong value of max_sge_rd
| * 7b2603ab RDMA/hns: Fix a missing rollback in error path of hns_roce_create_qp_common()
| * 21c3be49 RDMA/hns: Fix unmatched condition in error path of alloc_user_qp_db()
| * 4104b002 RDMA/hns: Fix soft lockup during bt pages loop
| * 652393ca RDMA/bnxt_re: Avoid clearing VLAN_ID mask in modify qp path
| * 3a86cecc ARM: dts: bcm2711: Don't mark timer regs unconfigured
| * 8c936723 ARM: OMAP1: select CONFIG_GENERIC_IRQ_CHIP
| * eb0b0b72 RDMA/bnxt_re: Add missing paranthesis in map_qp_id_to_tbl_indx
| * 06c5caad ARM: dts: bcm2711: PL011 UARTs are actually r1p5
| * e4ab889d soc: imx8m: Unregister cpufreq and soc dev in cleanup path
| * 296d1653 soc: imx8m: Use devm_* to simplify probe failure handling
| * 44f9ffc1 soc: imx8m: Remove global soc_uid
| * e7d05cf1 xfrm_output: Force software GSO only in tunnel mode
| * 0f80c969 arm64: dts: freescale: tqma8mpql: Fix vqmmc-supply
| * 177deffb firmware: imx-scu: fix OF node leak in .probe()
| * f4a60d36 smb: client: fix potential UAF in cifs_dump_full_key()
| * e0a545bb nvme-tcp: Fix a C2HTermReq error message
| * 66d14820 HID: apple: disable Fn key handling on the Omoton KB066
| * dda134d1 smb: client: Fix match_session bug preventing session reuse
| * 98bbcf4c smb3: add support for IAKerb
| * 0f928c11 arm64: mm: Populate vmemmap at the page level if not section aligned
| * b801f524 i2c: sis630: Fix an error handling path in sis630_probe()
| * f5955987 i2c: ali15x3: Fix an error handling path in ali15x3_probe()
| * aa1788ed i2c: ali1535: Fix an error handling path in ali1535_probe()
| * 9968fcf0 cifs: Fix integer overflow while processing closetimeo mount option
| * 531cebb5 cifs: Fix integer overflow while processing actimeo mount option
| * 39d086bb cifs: Fix integer overflow while processing acdirmax mount option
| * dd190168 cifs: Fix integer overflow while processing acregmax mount option
| * 78cc9c33 scripts: generate_rust_analyzer: add missing macros deps
| * d7cfc1a4 scripts: generate_rust_analyzer: provide `cfg`s for `core` and `alloc`
| * 88a96a6f scripts: `make rust-analyzer` for out-of-tree modules
| * d266fc89 scripts: generate_rust_analyzer: Handle sub-modules with no Makefile
* | 919facc0 Merge 99ddc149 ("ASoC: codecs: wm0010: Fix error handling path in wm0010_spi_probe()") into android14-6.1-lts
|\|
| * 99ddc149 ASoC: codecs: wm0010: Fix error handling path in wm0010_spi_probe()
| * 0f0302c5 drm/gma500: Add NULL check for pci_gfx_root in mid_get_vbt_data()
| * 694110bc ASoC: ops: Consistently treat platform_max as control value
| * 618c6ce8 leds: mlxreg: Use devm_mutex_init() for mutex initialization
* | 6151e515 Revert "tcp: fix races in tcp_abort()"
* | 0f8bbe98 Revert "tcp: fix forever orphan socket caused by tcp_abort"
* | c5f96457 Merge b753821e ("tcp: fix forever orphan socket caused by tcp_abort") into android14-6.1-lts
|\|
| * b753821e tcp: fix forever orphan socket caused by tcp_abort
* | 1231f555 Merge cae9d2b1 ("tcp: fix races in tcp_abort()") into android14-6.1-lts
|\|
| * cae9d2b1 tcp: fix races in tcp_abort()
* | e6079359 Merge f9d0a137 ("lib/buildid: Handle memfd_secret() files in build_id_parse()") into android14-6.1-lts
|\|
| * f9d0a137 lib/buildid: Handle memfd_secret() files in build_id_parse()
| * 52229ebb rust: Disallow BTF generation with Rust + LTO
| * d8bc07d1 qlcnic: fix memory leak issues in qlcnic_sriov_common.c
| * 7c461a5f ASoC: amd: yc: Support mic on another Lenovo ThinkPad E16 Gen 2 model
| * fa0809bb clk: samsung: update PLL locktime for PLL142XX used on FSD platform
* | b2b62f9e Merge 4964dbc4 ("drm/amd/display: Fix slab-use-after-free on hdcp_work") into android14-6.1-lts
|\|
| * 4964dbc4 drm/amd/display: Fix slab-use-after-free on hdcp_work
| * dc831b38 drm/amd/display: Assign normalized_pix_clk when color depth = 14
| * 889e55f2 drm/amd/display: Restore correct backlight brightness after a GPU reset
| * e8aeee0d drm/dp_mst: Fix locking when skipping CSN before topology probing
| * d2ab95b8 drm/atomic: Filter out redundant DPMS calls
| * ec522406 x86/microcode/AMD: Fix out-of-bounds on systems with CPU-less NUMA nodes
| * 61a95616 USB: serial: option: match on interface class for Telit FN990B
| * 7dad5048 USB: serial: option: fix Telit Cinterion FE990A name
| * bb03a80e USB: serial: option: add Telit Cinterion FE990B compositions
| * 58f4fbe6 USB: serial: ftdi_sio: add support for Altera USB Blaster 3
* | 39fddf40 Merge 870e3066 ("Input: i8042 - swap old quirk combination with new quirk for more devices") into android14-6.1-lts
|\|
| * 870e3066 Input: i8042 - swap old quirk combination with new quirk for more devices
| * e2ff9a5f Input: i8042 - swap old quirk combination with new quirk for several devices
| * c08785b0 Input: i8042 - add required quirks for missing old boardnames
| * 24af158f Input: i8042 - swap old quirk combination with new quirk for NHxxRZQ
| * dd889e6a xfs: remove conditional building of rt geometry validator functions
| * 23b8ab0c xfs: reset XFS_ATTR_INCOMPLETE filter on node removal
| * 858c9d52 xfs: update dir3 leaf block metadata after swap
| * a904118d xfs: ensure logflagsp is initialized in xfs_bmap_del_extent_real
| * 6c20890e xfs: fix perag leak when growfs fails
| * 4f4e046c xfs: add lock protection when remove perag from radix tree
| * 6587549b xfs: initialise di_crc in xfs_log_dinode
| * 87988e80 xfs: force all buffers to be written during btree bulk load
| * ec1d3a68 xfs: recompute growfsrtfree transaction reservation while growing rt volume
| * 072a9c45 xfs: remove unused fields from struct xbtree_ifakeroot
| * 5c29b065 xfs: don't allow overly small or large realtime volumes
| * 7d568f9d xfs: fix 32-bit truncation in xfs_compute_rextslog
| * 6a258245 xfs: make rextslog computation consistent with mkfs
| * f7a1233b xfs: don't leak recovered attri intent items
| * c3c04998 xfs: consider minlen sized extents in xfs_rtallocate_extent_block
| * e3770311 xfs: convert rt bitmap extent lengths to xfs_rtbxlen_t
| * 6744e7b0 xfs: move the xfs_rtbitmap.c declarations to xfs_rtbitmap.h
| * a64e7b6c xfs: reserve less log space when recovering log intent items
| * 5d6f3d30 xfs: use deferred frees for btree block freeing
| * ec35f756 xfs: fix bounds check in xfs_defer_agfl_block()
| * fa91c696 xfs: validate block number being freed before adding to xefi
| * ec81c519 xfs: pass per-ag references to xfs_free_extent
| * ab3b2a70 xfs: pass the xfs_bmbt_irec directly through the log intent code
| * e0e440bf xfs: fix confusing xfs_extent_item variable names
| * 5b99dcc1 xfs: pass xfs_extent_free_item directly through the log intent code
| * 80cca6ec xfs: pass refcount intent directly through the log intent code
* | 01ad57e2 Merge 9135df02 ("io_uring: fix corner case forgetting to vunmap") into android14-6.1-lts
|\|
| * 9135df02 io_uring: fix corner case forgetting to vunmap
| * 50edea7d io_uring: don't attempt to mmap larger than what the user asks for
* | abd5ee4e ANDROID: GKI: Update .stg file based on io_ring_ctx internal change
* | 40767441 ANDROID: GKI: fix build breakage in io_uring during 6.1.132 merge
* | e561be40 Merge 9aeb6833 ("io_uring: get rid of remap_pfn_range() for mapping rings/sqes") into android14-6.1-lts
|\|
| * 9aeb6833 io_uring: get rid of remap_pfn_range() for mapping rings/sqes
* | 1627bf52 Merge 7710c04d ("mm: add nommu variant of vm_insert_pages()") into android14-6.1-lts
|\|
| * 7710c04d mm: add nommu variant of vm_insert_pages()
* | efc6c26b Merge a00113dc ("io_uring: add ring freeing helper") into android14-6.1-lts
|\|
| * a00113dc io_uring: add ring freeing helper
* | 468df534 Merge 63e6dc61 ("io_uring: return error pointer from io_mem_alloc()") into android14-6.1-lts
|\|
| * 63e6dc61 io_uring: return error pointer from io_mem_alloc()
* | bcca1a4a Merge 8cc4da21 ("block: fix 'kmem_cache of name 'bio-108' already exists'") into android14-6.1-lts
|\|
| * 8cc4da21 block: fix 'kmem_cache of name 'bio-108' already exists'
| * 82be3cb7 drm/nouveau: Do not override forced connector status
| * 3c6e077b mptcp: safety check before fallback
| * 452382b2 x86/irq: Define trace events conditionally
| * 9bd4fa7b perf/x86/intel: Use better start period for frequency mode
| * 3cb53dd5 fuse: don't truncate cached, mutated symlink
| * 5c5194a0 ASoC: tas2764: Set the SDOUT polarity correctly
| * 12566097 ASoC: tas2764: Fix power control mask
| * 55132107 ASoC: tas2770: Fix volume scale
| * 8c6715b2 nvme: only allow entering LIVE from CONNECTING state
| * 638ffdc4 sctp: Fix undefined behavior in left shift operation
| * cd3f60e4 nvmet-rdma: recheck queue state is LIVE in state lock in recv done
| * 6eea8a5c nvme-tcp: add basic support for the C2HTermReq PDU
| * f404cc4c nvme-pci: quirk Acer FA100 for non-uniqueue identifiers
| * d81ee629 net: wwan: mhi_wwan_mbim: Silence sequence number glitch errors
| * e6607c70 ASoC: SOF: Intel: hda: add softdep pre to snd-hda-codec-hdmi module
| * 5d2ca607 ASoC: arizona/madera: use fsleep() in up/down DAPM event delays.
| * 17458c11 ASoC: rsnd: adjust convert rate limitation
| * 1ffc9e94 ASoC: rsnd: don't indicate warning on rsnd_kctrl_accept_runtime()
| * ce0bdc1a ALSA: hda/realtek: Limit mic boost on Positivo ARN50
| * 1a95cff6 Xen/swiotlb: mark xen_swiotlb_fixup() __init
| * 6c31c876 thermal/cpufreq_cooling: Remove structure member documentation
| * 4d293411 s390/cio: Fix CHPID "configure" attribute caching
| * 4209d21f platform/x86: thinkpad_acpi: Support for V9 DYTC platform profiles
| * 96850a2a platform/x86: thinkpad_acpi: Fix invalid fan speed on ThinkPad X120e
| * 5932970c sched: Clarify wake_up_q()'s write to task->wake_q.next
| * 62a4c7ac HID: apple: fix up the F6 key on the Omoton KB066 keyboard
| * b3047f4c HID: hid-apple: Apple Magic Keyboard a3203 USB-C support
| * 9acdb005 HID: ignore non-functional sensor in HP 5MP Camera
| * 3358a3de HID: intel-ish-hid: Send clock sync message immediately after reset
| * fc16b179 HID: intel-ish-hid: fix the length of MNG_SYNC_FW_CLOCK in doorbell
| * 89811c62 vboxsf: fix building with GCC 15
| * 936041b6 alpha/elf: Fix misc/setarch test of util-linux by removing 32bit support
| * 6bbed0b3 smb: client: fix noisy when tree connecting to DFS interlink targets
| * ae45fe47 ACPI: resource: IRQ override for Eluktronics MECH-17
| * 24602e26 scsi: qla1280: Fix kernel oops when debug level > 2
| * 6d816086 scsi: core: Use GFP_NOIO to avoid circular locking dependency
| * 9bfa80c8 iscsi_ibft: Fix UBSAN shift-out-of-bounds warning in ibft_attr_show_nic()
| * e4beb8aa powercap: call put_device() on an error path in powercap_register_control_type()
| * 86f653f3 hrtimers: Mark is_migration_base() with __always_inline
| * db1daaca nvme-fc: go straight to connecting state when initializing
| * 39e507d4 net/mlx5e: Prevent bridge link show failure for non-eswitch-allowed devices
| * 86ff45f5 net/mlx5: Bridge, fix the crash caused by LAG state check
| * 2532adbf net: openvswitch: remove misbehaving actions length check
| * b309e754 gre: Fix IPv6 link-local address generation.
| * 42d5b131 netfilter: nft_exthdr: fix offset with ipv4_find_option()
| * e5ee0060 net_sched: Prevent creation of classes with TC_H_ROOT
| * 917e5204 ipvs: prevent integer overflow in do_ip_vs_get_ctl()
| * a62a25c6 netfilter: nf_conncount: Fully initialize struct nf_conncount_tuple in insert_tree()
| * 418119dd bonding: fix incorrect MAC address setting to receive NS messages
| * af757f5e net: switchdev: Convert blocking notification chain to a raw one
| * e8e3e03d eth: bnxt: do not update checksum in bnxt_xdp_build_skb()
| * 1598307c net/mlx5: handle errors in mlx5_chains_create_table()
| * 1c954950 Drivers: hv: vmbus: Don't release fb_mmio resource in vmbus_free_mmio()
| * c40cd24b drm/hyperv: Fix address space leak when Hyper-V DRM device is removed
| * 486033f5 netpoll: hold rcu read lock in __netpoll_send_skb()
| * c49e9152 net: mctp i2c: Copy headers if cloned
| * 95b53040 net: dsa: mv88e6xxx: Verify after ATU Load ops
| * 55a173e4 Revert "Bluetooth: hci_core: Fix sleeping function called from invalid context"
| * 79d50ce6 Bluetooth: hci_event: Fix enabling passive scanning
| * 0272d4af wifi: cfg80211: cancel wiphy_work before freeing wiphy
| * d02c9acd sched: address a potential NULL pointer dereference in the GRED scheduler.
| * 4fe95665 netfilter: nf_conncount: garbage collection is not skipped when jiffies wrap around
| * fcbacc47 ice: fix memory leak in aRFS after reset
| * 7a91926c netfilter: nft_ct: Use __refcount_inc() for per-CPU nft_ct_pcpu_template.
| * 5f7f8d9d pinctrl: bcm281xx: Fix incorrect regmap max_registers value
| * 01e8a811 fbdev: hyperv_fb: iounmap() the correct memory when removing a device
| * f9c572d0 fs/ntfs3: Fix shift-out-of-bounds in ntfs_fill_super
| * 4c3712c1 hrtimer: Use and report correct timerslack values for realtime tasks
| * ba181019 sched/isolation: Prevent boot crash when the boot CPU is nohz_full
| * 65ae99b5 clockevents/drivers/i8253: Fix stop sequence for timer 0
* | 7c1a6949 Merge 6.1.131 into android14-6.1-lts
|\|
| * 344a0965 Linux 6.1.131
| * 5c0729c4 kbuild: userprogs: use correct lld when linking through clang
| * 631e00fd vsock: Orphan socket after transport release
| * 42b33381 vsock: Keep the binding until socket destruction
| * 13a4362a bpf, vsock: Invoke proto::close on close()
| * effac690 fs/ntfs3: Add rough attr alloc_size check
| * dbd3e4ad media: mediatek: vcodec: Handle invalid decoder vsi
| * 30652c8c scsi: lpfc: Fix a possible data race in lpfc_unregister_fcf_rescan()
| * 1ee2d454 nilfs2: handle errors that nilfs_prepare_chunk() may return
| * 98231939 nilfs2: eliminate staggered calls to kunmap in nilfs_rename
| * c38a305f nilfs2: move page release outside of nilfs_delete_entry and nilfs_set_link
| * c07bfa44 spi-mxs: Fix chipselect glitch
| * 260c0566 x86/mm: Don't disable PCID when INVLPG has been fixed by microcode
| * de03a57b uprobes: Fix race in uprobe_free_utask
| * 0084a61d Revert "KVM: PPC: e500: Mark "struct page" dirty in kvmppc_e500_shadow_map()"
| * 20228df3 Revert "KVM: PPC: e500: Mark "struct page" pfn accessed before dropping mmu_lock"
| * 44603dee Revert "KVM: PPC: e500: Use __kvm_faultin_pfn() to handle page faults"
| * e7d34398 Revert "KVM: e500: always restore irqs"
| * 3fa13708 ALSA: hda: realtek: fix incorrect IS_REACHABLE() usage
| * 8427e0b5 iio: adc: at91-sama5d2_adc: fix sama7g5 realbits value
| * a4ee0bee iio: dac: ad3552r: clear reset status flag
| * 22638b6f iio: filter: admv8818: Force initialization of SDO
| * 524f29d7 drivers: virt: acrn: hsm: Use kzalloc to avoid info leak in pmcmd_ioctl
| * bbfb0cfd eeprom: digsy_mtc: Make GPIO lookup table match the device
| * 7a5ffadd bus: mhi: host: pci_generic: Use pci_try_reset_function() to avoid deadlock
| * 18ae4cee slimbus: messaging: Free transaction ID in delayed interrupt scenario
| * dbd2dc47 drivers: core: fix device leak in __fw_devlink_relax_cycles()
| * e130e856 intel_th: pci: Add Panther Lake-P/U support
| * 926c0723 intel_th: pci: Add Panther Lake-H support
| * f630ab2c intel_th: pci: Add Arrow Lake support
| * f42cd9f2 mei: me: add panther lake P DID
| * 0ce61dbc KVM: SVM: Drop DEBUGCTL[5:2] from guest's effective value
| * 4a12b6c0 usb: xhci: Enable the TRB overfetch quirk on VIA VL805
| * 9692a670 xhci: pci: Fix indentation in the PCI device ID definitions
| * 18f82712 usb: gadget: Check bmAttributes only if configuration is valid
| * 79d07d7f usb: gadget: Fix setting self-powered state on suspend
| * b589d499 usb: gadget: Set self-powered based on MaxPower and bmAttributes
| * ceafde7c usb: typec: tcpci_rt1711h: Unmask alert interrupts to fix functionality
| * 871d6eaa usb: typec: ucsi: increase timeout for PPM reset operations
| * a9fa9f46 usb: dwc3: gadget: Prevent irq storm when TH re-executes
| * d8e47834 usb: dwc3: Set SUSPENDENABLE soon after phy init
| * 197e7807 usb: atm: cxacru: fix a flaw in existing endpoint checks
| * 4ca07808 usb: renesas_usbhs: Flush the notify_hotplug_work
| * ad379788 usb: quirks: Add DELAY_INIT and NO_LPM for Prolific Mass Storage Card Reader
| * bd7072ae usb: hub: lack of clearing xHC resources
| * f2ae16f7 usb: renesas_usbhs: Use devm_usb_get_phy()
| * 3d7f7a14 usb: renesas_usbhs: Call clk_put()
| * a55aa36d Revert "drivers/card_reader/rtsx_usb: Restore interrupt based detection"
| * 1f59fc0d gpio: rcar: Fix missing of_node_put() call
| * 09418e59 net: ipv6: fix missing dst ref drop in ila lwtunnel
| * e8defaef net: ipv6: fix dst ref loop in ila lwtunnel
| * 000c9ee4 sched/fair: Fix potential memory corruption in child_cfs_rq_on_list
| * 6aae16a9 ublk: set_params: properly check if parameters can be applied
| * acbcb74e net-timestamp: support TCP GSO case for a few missing flags
| * bb08e1d6 exfat: fix soft lockup in exfat_clear_bitmap
| * 2b0cbcf8 x86/sgx: Fix size overflows in sgx_encl_create()
| * 5a515d13 vlan: enforce underlying device type
| * 3de809a7 ppp: Fix KMSAN uninit-value warning with bpf
| * 33244e98 net: hns3: make sure ptp clock is unregister and freed if hclge_ptp_get_cycle returns an error
| * 4393452e be2net: fix sleeping while atomic bugs in be_ndo_bridge_getlink
| * 957d8036 drm/sched: Fix preprocessor guard
| * f463358c hwmon: fix a NULL vs IS_ERR_OR_NULL() check in xgene_hwmon_probe()
| * 17f86e25 llc: do not use skb_get() before dev_queue_xmit()
| * 48eb7e67 ALSA: usx2y: validate nrpacks module parameter on probe
| * 7d0f113a hwmon: (ad7314) Validate leading zero bits and return error
| * 2903c122 hwmon: (ntc_thermistor) Fix the ncpXXxh103 sensor table
| * afaf7f45 hwmon: (pmbus) Initialise page count in pmbus_identify()
| * 29e0cd29 caif_virtio: fix wrong pointer check in cfv_probe()
| * e8db7053 net: gso: fix ownership in __udp_gso_segment
| * 4d1a05cc nvmet-tcp: Fix a possible sporadic response drops in weakly ordered arch
| * f5631307 bluetooth: btusb: Initialize .owner field of force_poll_sync_fops
| * cf1a6015 HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove()
| * 52488583 HID: google: fix unused variable warning under !CONFIG_ACPI
| * 88ed69f9 wifi: iwlwifi: limit printed string from FW file
| * 90c30bed mm: don't skip arch_sync_kernel_mappings() in error paths
| * d0f491cc mm/page_alloc: fix uninitialized variable
| * 30f67c10 block: fix conversion of GPT partition name to 7-bit
| * d09cf514 s390/traps: Fix test_monitor_call() inline assembly
| * 469761d2 dma: kmsan: export kmsan_handle_dma() for modules
| * a5f5e520 rapidio: fix an API misues when rio_add_net() fails
| * ad82be42 rapidio: add check for rio_add_net() in rio_scan_alloc_net()
| * 236f41ca wifi: nl80211: reject cooked mode if it is set along with other flags
| * f4112cb4 wifi: cfg80211: regulatory: improve invalid hints checking
| * dc516e66 Bluetooth: Add check for mgmt_alloc_skb() in mgmt_device_connected()
| * 37785a01 Bluetooth: Add check for mgmt_alloc_skb() in mgmt_remote_name()
| * f1404f36 mptcp: fix 'scheduling while atomic' in mptcp_pm_nl_append_new_local_addr
| * 9ccee498 x86/cpu: Properly parse CPUID leaf 0x2 TLB descriptor 0x63
| * 336ab3ea x86/cpu: Validate CPUID leaf 0x2 EDX output
| * cfe0ecf6 x86/cacheinfo: Validate CPUID leaf 0x2 EDX output
| * 85e3d5ba platform/x86: thinkpad_acpi: Add battery quirk for ThinkPad X131e
| * 15e3a8cc drm/radeon: Fix rs400_gpu_init for ATI mobility radeon Xpress 200M
| * c1e54752 drm/amd/display: Fix null check for pipe_ctx->plane_state in resource_build_scaling_params
| * 010cd946 ALSA: hda/realtek: update ALC222 depop optimize
| * dc209114 ALSA: hda/realtek - add supported Mic Mute LED for Lenovo platform
| * 4115d28c ALSA: hda: intel: Add Dell ALC3271 to power_save denylist
| * 9334c88f gpio: aggregator: protect driver attr handlers against module unload
| * 3e300913 gpio: rcar: Use raw_spinlock to protect register access
| * 11e0e74e ksmbd: fix bug on trap in smb2_lock
| * 410ce35a ksmbd: fix use-after-free in smb2_lock
| * 6321bbda ksmbd: fix type confusion via race condition when using ipc_msg_send_request
| * 8d39eb8c HID: appleir: Fix potential NULL dereference at raw event handle
| * 12333d33 LoongArch: Convert unreachable() to BUG()
| * 4b46c6e1 Revert "of: reserved-memory: Fix using wrong number of cells to get property 'alignment'"
| * 0c65d13b x86/amd_nb: Use rdmsr_safe() in amd_get_mmconfig_range()
| * 2ff298cc x86/speculation: Add __update_spec_ctrl() helper
| * d2d7ee96 cpuidle, intel_idle: Fix CPUIDLE_FLAG_IBRS
| * b3b35ff8 drm/amdgpu: disable BAR resize on Dell G5 SE
| * b0b6f8b5 drm/amdgpu: Check extended configuration space register when system uses large bar
| * c2b3f2af ibmvnic: Inspect header requirements before using scrq direct
| * 30875b69 ibmvnic: Perform tx CSO during send scrq direct
* | 727d125c ANDROID: GKI: fix crc change in __icmp_send
* | 193ff8b1 Merge branch 'android14-6.1' into android14-6.1-lts
* | a54c40ca Merge 6.1.130 into android14-6.1-lts
|\|
| * 6ae7ac5c Linux 6.1.130
| * eeb62bb4 media: mtk-vcodec: potential null pointer deference in SCP
| * 020ecb76 pfifo_tail_enqueue: Drop new packet when sch->limit == 0
| * 5b99dea7 Squashfs: check the inode number is not the invalid value of zero
| * c72eda07 mm/memory: Use exception ip to search exception tables
| * 7b425f54 ptrace: Introduce exception_ip arch hook
| * ef3bc907 intel_idle: Handle older CPUs, which stop the TSC in deeper C states, correctly
| * b6eac419 amdgpu/pm/legacy: fix suspend/resume issues
| * 070fda69 drm/amd/display: fixed integer types and null check locations
| * ee3ab05c riscv/futex: sign extend compare value in atomic cmpxchg
| * 84586322 sched/core: Prevent rescheduling when interrupts are disabled
| * 8ada478c vmlinux.lds: Ensure that const vars with relocations are mapped R/O
| * 1489b2dd mptcp: reset when MPTCP opts are dropped after join
| * 8116fb4a mptcp: always handle address removal under msk socket lock
| * f19009e4 phy: exynos5-usbdrd: fix MPLL_MULTIPLIER and SSC_REFCLKSEL masks in refclk
| * 14d1a865 phy: tegra: xusb: reset VBUS & ID OVERRIDE
| * 39f843e4 net: enetc: fix the off-by-one issue in enetc_map_tx_tso_buffs()
| * 45b8d6ce net: enetc: correct the xdp_tx statistics
| * 88304bb7 net: enetc: update UDP checksum when updating originTimestamp field
| * c55a98de net: enetc: keep track of correct Tx BD count in enetc_map_tx_tso_buffs()
| * 046e2669 net: enetc: fix the off-by-one issue in enetc_map_tx_buffs()
| * 67ebc339 usbnet: gl620a: fix endpoint checking in genelink_bind()
| * 545b563e i2c: npcm: disable interrupt enable bit before devm_request_irq
| * abb00a9a drm/amd/display: Fix HPD after gpu reset
| * 64f3a352 drm/amd/display: Disable PSR-SU on eDP panels
| * 295fadbd perf/core: Fix low freq setting via IOC_PERIOD
| * 25a9171d perf/x86: Fix low freqency setting issue
| * 3b8c444e ALSA: usb-audio: Re-add sample rate quirk for Pioneer DJM-900NXS2
| * 99277522 ftrace: Avoid potential division by zero in function_stat_show()
| * 5ae1b18f tracing: Fix bad hist from corrupting named_triggers list
| * 950866c9 phy: rockchip: naneng-combphy: compatible reset with old DT
| * 776eaba5 x86/CPU: Fix warm boot hang regression on AMD SC1100 SoC systems
| * 93cff66f io_uring/net: save msg_control for compat
| * c4cb2bfa uprobes: Reject the shared zeropage in uprobe_write_opcode()
| * 476c1dfe mm: Don't pin ZERO_PAGE in pin_user_pages()
| * cffd76d4 net: ipv6: fix dst ref loop on input in rpl lwt
| * 4c12c3c8 net: ipv6: rpl_iptunnel: mitigate 2-realloc issue
| * 7f9aabba net: ipv6: fix dst ref loop on input in seg6 lwt
| * c447c5a9 net: ipv6: seg6_iptunnel: mitigate 2-realloc issue
| * daff29e0 include: net: add static inline dst_dev_overhead() to dst.h
| * cd60e8ed net/mlx5: IRQ, Fix null string in debug print
| * 36c72334 net: mvpp2: cls: Fixed Non IP flow, with vlan tag flow defination.
| * 320cb2d5 net: Clear old fragment checksum value in napi_reuse_skb
| * 57cf8c5a tcp: Defer ts_recent changes until req is owned
| * be5a87bd ipvs: Always clear ipvs_property flag in skb_scrub_packet()
| * 09e9fe14 ASoC: es8328: fix route from DAC to output
| * 90ed67b0 net: cadence: macb: Synchronize stats calculations
| * 5b8dea8d ipvlan: ensure network headers are in skb linear part
| * 7a62b1e4 ipvlan: Prepare ipvlan_process_v4_outbound() to future .flowi4_tos conversion.
| * 3e8520bc ipv4: Convert ip_route_input() to dscp_t.
| * 671fcbf9 ipv4: Convert icmp_route_lookup() to dscp_t.
| * ab5c0db8 ipvlan: Unmask upper DSCP bits in ipvlan_process_v4_outbound()
| * eaba5f67 ipv4: icmp: Unmask upper DSCP bits in icmp_route_lookup()
| * 28e46a8c ipv4: icmp: Pass full DS field to ip_route_input()
| * 524c341c net/ipv4: add tracepoint for icmp_send
| * 1774ba1f net: set the minimum for net_hotdata.netdev_budget_usecs
| * 461fb891 net: loopback: Avoid sending IP packets without an Ethernet header
| * 3f0ecb5b afs: Fix the server_list to unuse a displaced server rather than putting it
| * 1dac4025 afs: Make it possible to find the volumes that are using a server
| * 916e5a56 afs: remove variable nr_servers
| * 31caad0f Bluetooth: L2CAP: Fix L2CAP_ECRED_CONN_RSP response
| * 4eb6de41 ALSA: usb-audio: Avoid dropping MIDI events at closing multiple ports
| * ddb61024 sunrpc: suppress warnings for unused procfs functions
| * 7051b8df RDMA/mlx5: Fix bind QP error cleanup flow
| * 0282f5af scsi: core: Clear driver private data when retrying request
| * 65344e73 SUNRPC: Prevent looping due to rpc_signal_task() races
| * 6f0e029e SUNRPC: convert RPC_TASK_* constants to enum
| * a7c41830 ovl: fix UAF in ovl_dentry_update_reval by moving dput() in ovl_link_up
| * a18dc2d7 IB/mlx5: Set and get correct qp_num for a DCT QP
| * 3fa58a6f netfilter: allow exp not to be removed in nf_ct_find_expectation
| * cd291558 spi: atmel-quadspi: Fix wrong register value written to MR
| * 02225f59 spi: atmel-quadspi: Avoid overwriting delay register settings
| * d48890ef media: mediatek: vcodec: Fix H264 multi stateless decoder smatch warning
| * ada4ca5f block, bfq: fix bfqq uaf in bfq_limit_depth()
| * eca0025f block, bfq: split sync bfq_queues on a per-actuator basis
| * cd78b738 x86/cpu/kvm: SRSO: Fix possible missing IBPB on VM-Exit
| * aecca7b4 ftrace: Do not add duplicate entries in subops manager ops
| * 8096f2de ftrace: Correct preemption accounting for function tracing.
| * d42364dd EDAC/qcom: Correct interrupt enable register configuration
| * 24e8e452 smb: client: Add check for next_buffer in receive_encrypted_standard()
| * 5801ed1c mtd: rawnand: cadence: fix incorrect device in dma_unmap_single
| * e630d321 mtd: rawnand: cadence: use dma_map_resource for sdma address
| * 51a8a44e mtd: rawnand: cadence: fix error code in cadence_nand_init()
| * 0a0c255c mm,madvise,hugetlb: check for 0-length range after end address adjustment
| * 1ffa1bfc acct: block access to kernel internal filesystems
| * 5ee8da9b acct: perform last write from workqueue
| * e2b7b9e4 ALSA: hda/conexant: Add quirk for HP ProBook 450 G4 mute LED
| * 1bb8c9cd ALSA: hda: Add error check for snd_ctl_rename_id() in snd_hda_create_dig_out_ctls()
| * fde718a5 ASoC: fsl_micfil: Enable default case in micfil_set_quality()
| * 1358d8e0 nfp: bpf: Add check for nfp_app_ctrl_msg_alloc()
| * fcfc00bf drop_monitor: fix incorrect initialization order
| * ec18520f tee: optee: Fix supplicant wait loop
| * 64d31ab8 drm/i915: Make sure all planes in use by the joiner have their crtc included
| * 7e75ccfb drm/msm/dpu: Disable dither in phys encoder cleanup
| * 36c22125 bpf: skip non exist keys in generic_map_lookup_batch
| * 85f5a434 nvme/ioctl: add missing space in err message
| * b5065a10 drm/msm/dpu: Don't leak bits_per_component into random DSC_ENC fields
| * 7f7f3f42 nouveau/svm: fix missing folio unlock + put after make_device_exclusive_range()
| * 51ae6861 power: supply: da9150-fg: fix potential overflow
| * de9be9c3 bpf: Fix wrong copied_seq calculation
| * e410fd60 strparser: Add read_sock callback
| * f615fccf bpf, test_run: Fix use-after-free issue in eth_skb_pkt_type()
| * 16985c09 drm/rcar-du: dsi: Fix PHY lock bit check
| * ff319c9f drm/tidss: Fix race condition while handling interrupt registers
| * 36a6e217 drm/tidss: Add simple K2G manual reset
* | 2785dc9d ANDROID: GKI: Fix CRC issue with change to include/net/tcp.h
* | 87c6ad83 Merge 87858bbf ("tcp: drop secpath at the same time as we currently drop dst") into android14-6.1-lts
|\|
| * 87858bbf tcp: drop secpath at the same time as we currently drop dst
* | 3a51c14a Merge cb7bea98 ("net: axienet: Set mac_managed_pm") into android14-6.1-lts
|\|
| * cb7bea98 net: axienet: Set mac_managed_pm
| * a0bad5c7 arp: switch to dev_getbyhwaddr() in arp_req_set_public()
| * 0f038b94 net: Add non-RCU dev_getbyhwaddr() helper
| * cce3ccc0 flow_dissector: Fix port range key handling in BPF conversion
| * 8d984c60 flow_dissector: Fix handling of mixed port and port-range keys
| * 20825e9c geneve: Suppress list corruption splat in geneve_destroy_tunnels().
| * b70fa591 gtp: Suppress list corruption splat in gtp_net_exit_batch_rtnl().
| * 501ac6a7 ibmvnic: Don't reference skb after sending to VIOS
| * c9543af8 ibmvnic: Add stat for tx direct vs tx batched
| * a6a19d29 ibmvnic: Introduce send sub-crq direct
| * b92f2452 ibmvnic: Return error code on TX scrq flush fail
| * 36069c76 ALSA: hda/cirrus: Correct the full scale volume set logic
| * 904e746b geneve: Fix use-after-free in geneve_find_dev().
| * c905a305 powerpc/code-patching: Fix KASAN hit by not flagging text patching area as VM_ALLOC
| * f67713b2 ALSA: hda/realtek: Fixup ALC225 depop procedure
| * 10a293b0 powerpc/64s: Rewrite __real_pte() and __rpte_to_hidx() as static inline
| * e574bf58 powerpc/64s/mm: Move __real_pte stubs into hash-4k.h
| * 5a0b0bc4 ASoC: rockchip: i2s-tdm: fix shift config for SND_SOC_DAIFMT_DSP_[AB]
| * 24a94261 USB: gadget: f_midi: f_midi_complete to call queue_work
| * e3bc1a9a usb: gadget: core: flush gadget workqueue after device removal
| * 7fb673f0 USB: gadget: core: create sysfs link between udc and gadget
* | 208e9672 Merge ac18d781 ("media: uvcvideo: Remove dangling pointers") into android14-6.1-lts
|\|
| * ac18d781 media: uvcvideo: Remove dangling pointers
| * b4d26650 media: uvcvideo: Only save async fh if success
| * 9b3e69b5 media: uvcvideo: Refactor iterators
| * 3c00e94d media: uvcvideo: Fix crash during unbind if gpio unit is in use
| * ce8d2e91 media: Switch to use dev_err_probe() helper
| * 4a7c4751 soc: mediatek: mtk-devapc: Fix leaking IO map on driver remove
| * 9b937583 soc/mediatek: mtk-devapc: Convert to platform remove callback returning void
| * ae86c015 soc: mediatek: mtk-devapc: Fix leaking IO map on error paths
| * 69fa8a45 soc: mediatek: mtk-devapc: Switch to devm_clk_get_enabled()
| * 77779d12 tpm: Change to kvalloc() in eventlog/acpi.c
| * 7a72242c tpm: Use managed allocation for bios event log
| * 19bb4fc2 arm64: dts: qcom: sm8450: Fix CDSP memory length
| * 8ae7a709 arm64: dts: qcom: trim addresses to 8 digits
| * 257fa56e arm64: dts: mediatek: mt8183: Disable DSI display output by default
| * 4cc8b011 scsi: core: Do not retry I/Os during depopulation
| * 79a43ee6 scsi: core: Handle depopulation and restoration in progress
| * 5c1e84bc ASoC: renesas: rz-ssi: Add a check for negative sample_space
| * f39ec4e6 clk: mediatek: mt2701-img: add missing dummy clk
| * 67e7bcc0 clk: mediatek: mt2701-bdp: add missing dummy clk
| * dc7378ac clk: mediatek: mt2701-vdec: fix conversion to mtk_clk_simple_probe
| * 58af6b78 clk: mediatek: clk-mtk: Add dummy clock ops
| * 5c5b0e36 Bluetooth: qca: Fix poor RF performance for WCN6855
| * 55d69a2d Bluetooth: qca: Update firmware-name to support board specific nvm
| * e3c4cc00 Bluetooth: qca: Support downloading board id specific NVM for WCN7850
* | e9df7dc2 Merge 0986efc3 ("spi: atmel-qspi: Memory barriers after memory-mapped I/O") into android14-6.1-lts
|\|
| * 0986efc3 spi: atmel-qspi: Memory barriers after memory-mapped I/O
| * c788bfef spi: atmel-quadspi: Create `atmel_qspi_ops` to support newer SoC families
| * 756bb7c7 spi: atmel-quadspi: switch to use modern name
| * baaad676 spi: atmel-quadspi: Add support for configuring CS timing
* | 9212df98 Merge 0a09d56e ("memcg: fix soft lockup in the OOM process") into android14-6.1-lts
|/
* 0a09d56e memcg: fix soft lockup in the OOM process
* 2ea46587 mm: update mark_victim tracepoints fields
* 032fa54f md/md-bitmap: Synchronize bitmap_get_stats() with bitmap lifetime
* 249d9b9d md/md-bitmap: add 'sync_size' into struct md_bitmap_stats
* e83e6ea5 md/md-cluster: fix spares warnings for __le64
* e5c4b7b1 md/md-bitmap: replace md_bitmap_status() with a new helper md_bitmap_get_stats()
* a27c597f arm64: mte: Do not allow PROT_MTE on MAP_HUGETLB user mappings

Change-Id: I49eabb79ab13e7f138664d9fb38f9b3e0f9c116a
Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>