Merge tag 'android15-6.6.111_r00' into android15-6.6

This merges the android15-6.6.111_r00 tag into the android15-6.6 branch,
catching it up with the latest LTS releases.

It contains the following commits:

*   eb31ef0a Merge 6.6.111 into android15-6.6-lts
|\
| * 655054d2 Linux 6.6.111
| * 3d3abf3f KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O
| * 284e67a9 net/9p: fix double req put in p9_fd_cancelled
| * ab172f4f crypto: rng - Ensure set_ent is always present
| * f5f235be riscv: mm: Do not restrict mmap address based on hint
| * 1602c9b4 riscv: mm: Use hint address in mmap if available
| * e242e52f driver core/PM: Set power.no_callbacks along with power.no_pm
| * e8574219 staging: axis-fifo: flush RX FIFO on read errors
| * a3c71d6c staging: axis-fifo: fix TX handling on copy_from_user() failure
| * 6d953e9d staging: axis-fifo: fix maximum TX packet length check
| * bfeea103 serial: stm32: allow selecting console when the driver is module
| * cb7630e7 hid: fix I2C read buffer overflow in raw_event() for mcp2221
| * dc487436 ALSA: usb-audio: fix race condition to UAF in snd_usbmidi_free
| * 647410a7 ALSA: usb-audio: Kill timer properly at removal
| * 97e87f36 platform/x86/amd/pmc: Add Stellaris Slim Gen6 AMD to spurious 8042 quirks list
| * bf28f5db can: rcar_canfd: Fix controller mode setting
| * e93af787 can: hi311x: fix null pointer dereference when resuming from sleep before interface was enabled
| * 03510f5f btrfs: ref-verify: handle damaged extent root tree
| * bcccd022 ASoC: rt5682s: Adjust SAR ADC button mode to fix noise issue
| * 081f14b9 perf subcmd: avoid crash in exclude_cmds when excludes is empty
| * 6d59f746 platform/x86/amd/pmc: Add MECHREVO Yilong15Pro to spurious_8042 list
| * 4b91d0c5 dm-integrity: limit MAX_TAG_SIZE to 255
| * 7f718711 ASoC: amd: acp: Adjust pdm gain value
| * 8281c2a6 wifi: rtlwifi: rtl8192cu: Don't claim USB ID 07b8:8188
| * 96dc17ae USB: serial: option: add SIMCom 8230C compositions
| * 228d06c4 media: i2c: tc358743: Fix use-after-free bugs caused by orphan timer in probe
| * 71ed8b81 media: tuner: xc5000: Fix use-after-free in xc5000_release
| * f82dc869 media: tunner: xc5000: Refactor firmware load
| * 250b6e00 KVM: arm64: Fix softirq masking in FPSIMD register saving sequence
* | c368f20e Merge 6.6.110 into android15-6.6-lts
|\|
| * e617101e Linux 6.6.110
| * 70e1e5fe ASoC: qcom: audioreach: fix potential null pointer dereference
| * f617d515 media: uvcvideo: Mark invalid entities with id UVC_INVALID_ENTITY_ID
| * 71da4064 media: rc: fix races with imon_disconnect()
| * bb10a9dd media: b2c2: Fix use-after-free causing by irq_check_work in flexcop_pci_remove
| * f03aa5e3 scsi: target: target_core_configfs: Add length check to avoid buffer overflow
| * e28d0537 gcc-plugins: Remove TODO_verify_il for GCC >= 16
| * 5d646a76 crypto: sha256 - fix crash at kexec
* | cdf138fb Merge 6.6.109 into android15-6.6-lts
|\|
| * f34f16e5 Linux 6.6.109
| * eb530563 drm/i915/backlight: Return immediately when scale() finds invalid parameters
| * 4529bb0b minmax.h: remove some #defines that are only expanded once
| * 1a899044 minmax.h: simplify the variants of clamp()
| * 9955044f minmax.h: move all the clamp() definitions after the min/max() ones
| * 26c3d697 minmax.h: use BUILD_BUG_ON_MSG() for the lo < hi test in clamp()
| * 511e7d2e minmax.h: reduce the #define expansion of min(), max() and clamp()
| * 85d61959 minmax.h: update some comments
| * 6012f69b minmax.h: add whitespace around operators and after commas
| * 46648b94 minmax: fix up min3() and max3() too
| * f0be4c5d minmax: improve macro expansion and type checking
| * 7194a302 minmax: don't use max() in situations that want a C constant expression
| * bb63c996 minmax: simplify min()/max()/clamp() implementation
| * 6183c657 minmax: make generic MIN() and MAX() macros available everywhere
| * c0c83f4c i40e: add validation for ring_len param
| * 6e425169 i40e: increase max descriptors for XL710
| * 7ea47a56 drm/ast: Use msleep instead of mdelay for edid read
| * ed6fa21f gpiolib: Extend software-node support to support secondary software-nodes
| * 457d2c5e loop: Avoid updating block size under exclusive owner
| * 78f579cb mm/migrate_device: don't add folio to be freed to LRU in migrate_device_finalize()
| * e7a85efb mm: migrate_device: use more folio in migrate_device_finalize()
| * 684a9a99 ARM: bcm: Select ARM_GIC_V3 for ARCH_BRCMSTB
| * 53888cd3 s390/cpum_cf: Fix uninitialized warning after backport of ce971233
| * 09e3bda3 fbcon: Fix OOB access in font allocation
| * adac90bb fbcon: fix integer overflow in fbcon_do_set_font
| * c9c2a51f mm/hugetlb: fix folio is still mapped when deleted
| * df1fa034 kmsan: fix out-of-bounds access to shadow memory
| * cab278ce afs: Fix potential null pointer dereference in afs_put_server
| * 58d304a8 ARM: dts: socfpga: sodia: Fix mdio bus probe and PHY address
| * 3887f381 tracing: dynevent: Add a missing lockdown check on dynevent
| * 8703940b crypto: af_alg - Fix incorrect boolean values in af_alg_ctx
| * b7694905 i40e: improve VF MAC filters accounting
| * b247cdd0 i40e: add mask to apply valid bits for itr_idx
| * edecce7a i40e: add max boundary check for VF filters
| * e748f1ee i40e: fix validation of VF state in get resources
| * 3883e970 i40e: fix input validation logic for action_meta
| * 2cc26dac i40e: fix idx validation in config queues msg
| * 50a1e2f5 i40e: fix idx validation in i40e_validate_queue_map
| * 3cefd898 HID: asus: add support for missing PX series fn keys
| * ba7bcfd5 smb: client: fix wrong index reference in smb2_compound_op()
| * 34873695 futex: Prevent use-after-free during requeue-PI
| * 6ffa6b5b drm/gma500: Fix null dereference in hdmi teardown
| * df2c0710 octeontx2-pf: Fix potential use after free in otx2_tc_add_flow()
| * 7b209698 net: dsa: lantiq_gswip: suppress -EINVAL errors for bridge FDB entries added to the CPU port
| * 816d30af net: dsa: lantiq_gswip: move gswip_add_single_port_br() call to port_setup()
| * a7a2b29c net: dsa: lantiq_gswip: do also enable or disable cpu port
| * be0bd592 selftests: fib_nexthops: Fix creation of non-FDB nexthops
| * 24046d31 nexthop: Forbid FDB status change while nexthop is in a group
| * 31ae2fbc net: allow alloc_skb_with_frags() to use MAX_SKB_FRAGS
| * 98a76bd9 bnxt_en: correct offset handling for IPv6 destination address
| * 82a1463c vhost: Take a reference on the task in struct vhost_task.
| * bcce99f6 Bluetooth: hci_event: Fix UAF in hci_acl_create_conn_sync
| * 6a0070c5 Bluetooth: hci_sync: Fix hci_resume_advertising_sync
| * c9572847 ethernet: rvu-af: Remove slash from the driver name
| * 17edec18 can: peak_usb: fix shift-out-of-bounds issue
| * 3664ae91 can: mcba_usb: populate ndo_change_mtu() to prevent buffer overflow
| * 2e423e19 can: sun4i_can: populate ndo_change_mtu() to prevent buffer overflow
| * be1b2500 can: hi311x: populate ndo_change_mtu() to prevent buffer overflow
| * cbc1de71 can: etas_es58x: populate ndo_change_mtu() to prevent buffer overflow
* | 1f13b7f0 Merge 0baf92d0 ("xfrm: xfrm_alloc_spi shouldn't use 0 as SPI") into android15-6.6-lts
|\|
| * 0baf92d0 xfrm: xfrm_alloc_spi shouldn't use 0 as SPI
* | 700de834 Revert "i2c: designware: Add quirk for Intel Xe"
* | 8da959a6 Merge f64abeeb ("bpf: Reject bpf_timer for PREEMPT_RT") into android15-6.6-lts
|\|
| * f64abeeb bpf: Reject bpf_timer for PREEMPT_RT
| * 865eec09 can: rcar_can: rcar_can_resume(): fix s2ram with PSCI
| * 210b91bf wifi: virt_wifi: Fix page fault on connect
| * c5be7edd smb: server: don't use delayed_work for post_recv_credits_work
| * 6017196a cpufreq: Initialize cpufreq-based invariance before subsys
| * 35bb271d ARM: dts: kirkwood: Fix sound DAI cells for OpenRD clients
| * ebe7a2e4 arm64: dts: imx8mp: Correct thermal sensor index
| * 1744aff0 mm: folio_may_be_lru_cached() unless folio_test_large()
| * d37ec803 mm/gup: local lru_add_drain() to avoid lru_add_drain_all()
| * 768c44cc mm/gup: check ref_count instead of lru before migration
| * dc58ab1e mm: add folio_expected_ref_count() for reference count calculation
| * 4ed203f7 mm/gup: revert "mm: gup: fix infinite loop within __get_longterm_locked"
| * df2580fb IB/mlx5: Fix obj_type mismatch for SRQ event subscriptions
| * 943754ad ALSA: usb-audio: Add mute TLV for playback volumes on more devices
| * 0aac2fa4 ALSA: usb-audio: move mixer_quirks' min_mute into common quirk
| * ea6016c9 ALSA: usb-audio: Add DSD support for Comtrue USB Audio device
| * b61b90b0 i2c: designware: Add quirk for Intel Xe
| * 41ea28a2 mmc: sdhci-cadence: add Mobileye eyeQ support
| * 306697a7 usb: core: Add 0x prefix to quirks debug output
| * dc77154e ALSA: usb-audio: Fix build with CONFIG_INPUT=n
| * a3961b1f ALSA: usb-audio: Convert comma to semicolon
| * d04d3016 ALSA: usb-audio: Add mixer quirk for Sony DualSense PS5
| * 8fa69bd1 ALSA: usb-audio: Remove unneeded wmb() in mixer_quirks
| * 9db26149 ALSA: usb-audio: Simplify NULL comparison in mixer_quirks
| * e8c605fe ALSA: usb-audio: Avoid multiple assignments in mixer_quirks
| * bafc648b ALSA: usb-audio: Drop unnecessary parentheses in mixer_quirks
| * 08a96e22 ALSA: usb-audio: Fix block comments in mixer_quirks
| * 18f9e77d firewire: core: fix overlooked update of subsystem ABI version
| * ca3e48e9 scsi: ufs: mcq: Fix memory allocation checks for SQE and CQE
* | 0d5d4df5 Merge 6.6.108 into android15-6.6-lts
|\|
| * 147338df Linux 6.6.108
| * 42a6aeb4 Revert "loop: Avoid updating block size under exclusive owner"
| * 06146c26 minmax: add a few more MIN_T/MAX_T users
| * af8b531e minmax: simplify and clarify min_t()/max_t() implementation
| * 2d396aa8 minmax: avoid overly complicated constant expressions in VM code
| * 532733ff mptcp: propagate shutdown to subflows when possible
| * 3ef938f6 rtc: pcf2127: fix SPI command byte for PCF2131 backport
| * 075abf0b iommu/amd/pgtbl: Fix possible race while increase page table level
| * 564f2312 xhci: dbc: Fix full DbC transfer ring after several reconnects
| * 3c6dd29a xhci: dbc: decouple endpoint allocation from initialization
| * 27b04564 phy: ti: omap-usb2: fix device leak at unbind
| * 34a8d5a1 phy: Use device_get_match_data()
| * 0ee0ef48 selftests: mptcp: userspace pm: validate deny-join-id0 flag
| * 650150cc mptcp: pm: nl: announce deny-join-id0 flag
| * a6157484 vmxnet3: unregister xdp rxq info in the reset path
| * e7b7a938 smb: client: fix smbdirect_recv_io leak in smbd_negotiate() error path
| * 2374c111 crypto: af_alg - Set merge to zero early in af_alg_sendmsg
| * 6a075f80 drm: bridge: cdns-mhdp8546: Fix missing mutex unlock on error path
| * 15a77e1a drm: bridge: anx7625: Fix NULL pointer dereference with early IRQ
| * e6b0616a ASoC: SOF: Intel: hda-stream: Fix incorrect variable used in error message
| * 7740da20 ASoC: wm8974: Correct PLL rate rounding
| * b4e87419 ASoC: wm8940: Correct typo in control name
| * b7e4884d ASoC: wm8940: Correct PLL rate rounding
| * abc9f859 io_uring: include dying ring in task_work "should cancel" state
| * c8e69b78 io_uring: backport io_should_terminate_tw()
| * 115e7d4d ALSA: hda/realtek: Fix mute led for HP Laptop 15-dw4xx
| * 0a3d5a4d selftests: mptcp: avoid spurious errors on TCP disconnect
| * 9ef1af5d selftests: mptcp: connect: catch IO errors on listen side
| * 666b49c8 rds: ib: Increment i_fastreg_wrs before bailing out
| * 689aee35 net: rfkill: gpio: Fix crash due to dereferencering uninitialized pointer
| * 7e4c3cd7 KVM: SVM: Sync TPR from LAPIC into VMCB::V_TPR even if AVIC is active
| * 6584e7ec mmc: mvsdio: Fix dma_unmap_sg() nents value
| * ac4e940d ASoC: qcom: q6apm-lpass-dais: Fix missing set_fmt DAI op for I2S
| * 411f7d4f ASoC: qcom: q6apm-lpass-dais: Fix NULL pointer dereference if source graph failed
| * 468bb234 ASoC: qcom: audioreach: Fix lpaif_type configuration for the I2S interface
| * fc7bd02d btrfs: tree-checker: fix the incorrect inode ref size check
| * 090b61b8 iommu/vt-d: Fix __domain_mapping()'s usage of switch_to_super_page()
| * 561eef41 LoongArch: Check the return value when creating kobj
| * 2ff7ef2f LoongArch: Align ACPI structures if ARCH_STRICT_ALIGN enabled
| * fb6ee62d LoongArch: Update help info of ARCH_STRICT_ALIGN
| * 90c0ffa1 power: supply: bq27xxx: restrict no-battery detection to bq27000
| * 84ac57c4 power: supply: bq27xxx: fix error return in case of no bq27000 hdq battery
| * 7c4491b5 crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg
| * ee74d69a nilfs2: fix CFI failure when accessing /sys/fs/nilfs2/features/*
| * d3cb3f20 ksmbd: smbdirect: verify remaining_data_length respects max_fragmented_recv_size
| * eb0378dd ksmbd: smbdirect: validate data_offset and data_length field of smb_direct_data_transfer
| * d2cfefa1 octeontx2-pf: Fix use-after-free bugs in otx2_sync_tstamp()
| * 8eeb2091 cnic: Fix use-after-free bugs in cnic_delete_task
| * cd093e8b net: liquidio: fix overflow in octeon_init_instr_queue()
| * 13f57d48 Revert "net/mlx5e: Update and set Xon/Xoff upon port speed set"
| * 4cefe5be tls: make sure to abort the stream if headers are bogus
| * dfd06131 tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect().
| * 97d797c5 bonding: don't set oif to bond dev when getting NS target destination
| * 2cb17c88 net/mlx5e: Harden uplink netdev access against device unbind
| * fd74bd40 net/mlx5e: Consider aggregated port speed during rate configuration
| * a7f10a46 i40e: remove redundant memory barrier when cleaning Tx descs
| * 0255c510 net: natsemi: fix `rx_dropped` double accounting on `netif_rx()` failure
| * af114ef2 selftests: mptcp: sockopt: fix error messages
| * dedaa9bc mptcp: tfo: record 'deny join id0' info
| * 36d9f72e mptcp: set remote_deny_join_id0 on SYN recv
| * 29a5fd48 bonding: set random address only when slaves already exist
| * ea53e6a4 qed: Don't collect too many protection override GRC elements
| * 2f4b68e7 dpaa2-switch: fix buffer pool seeding for control traffic
| * 4f364023 um: virtio_uml: Fix use-after-free after put_device in probe
| * 5d2c34ff btrfs: fix invalid extref key setup when replaying dentry
| * 4a1e3ec2 cgroup: split cgroup_destroy_wq into 3 workqueues
| * 9ba2b399 pcmcia: omap_cf: Mark driver struct with __refdata to prevent section mismatch
| * eae22a25 wifi: mac80211: fix incorrect type for ret
| * 93e063f1 wifi: mac80211: increase scan_ies_len for S1G
| * 0ffb49ba ALSA: firewire-motu: drop EPOLLOUT from poll return values as write is not supported
| * 6085291a wifi: wilc1000: avoid buffer overflow in WID string configuration
* | 9fe6c20c Merge 6.6.107 into android15-6.6-lts
|\|
| * af1544b5 Linux 6.6.107
| * f075a33e x86: disable image size check for test builds
| * 23f24d0a drm/i915/power: fix size for for_each_set_bit() in abox iteration
| * 0a87bf8b drm/amdgpu: fix a memory leak in fence cleanup when unloading
| * d70b5910 net: mdiobus: release reset_gpio in mdiobus_unregister_device()
| * cce57cd8 ksmbd: fix null pointer dereference in alloc_preauth_hash()
| * ce807c4c phy: ti-pipe3: fix device leak at unbind
| * 7c89ea3a phy: tegra: xusb: fix device and OF node leak at probe
| * 221f6739 dmaengine: dw: dmamux: Fix device reference leak in rzn1_dmamux_route_allocate
| * ebf6c7c9 dmaengine: qcom: bam_dma: Fix DT error handling for num-channels/ees
| * e0727853 usb: gadget: midi2: Fix MIDI2 IN EP max packet size
| * a04b32b0 usb: gadget: midi2: Fix missing UMP group attributes initialization
| * bea1946b USB: gadget: dummy-hcd: Fix locking bug in RT-enabled kernels
| * 26f296e4 xhci: fix memory leak regression when freeing xhci vdev devices depth first
| * 0d861bc0 RISC-V: Remove unnecessary include from compat.h
| * 156677ea hrtimers: Unconditionally update target CPU base after offline timer migration
| * b1fa39fb hrtimer: Rename __hrtimer_hres_active() to hrtimer_hres_active()
| * 6276a6b2 hrtimer: Remove unused function
| * c504b5aa regulator: sy7636a: fix lifecycle of power good gpio
| * 1baed105 dmaengine: ti: edma: Fix memory allocation size for queue_priority_map
| * df82c790 dmaengine: idxd: Fix double free in idxd_setup_wqs()
| * f0e46092 dmaengine: idxd: Fix refcount underflow on module unload
| * 0e95ee7f dmaengine: idxd: Remove improper idxd_free
| * 608c14c6 hsr: use hsr_for_each_port_rtnl in hsr_port_get_hsr
| * b072e32e hsr: use rtnl lock when iterating over ports
| * 72dbae1f net: hsr: Add VLAN CTAG filter support
| * 64a58ae6 net: hsr: Add support for MC filtering at the slave device
| * 94b05072 can: xilinx_can: xcan_write_frame(): fix use-after-free of transmitted SKB
| * deedea59 can: j1939: j1939_local_ecu_get(): undo increment when j1939_local_ecu_get() fails
| * 1e1adfff can: j1939: j1939_sk_bind(): call j1939_priv_put() immediately when j1939_local_ecu_get() failed
| * 23431998 i40e: fix IRQ freeing in i40e_vsi_request_irq_msix error path
| * ff00b2ed igb: fix link test skipping when interface is admin down
| * e450b496 docs: networking: can: change bcm_msg_head frames member to support flexible array
| * e6867c0a tunnels: reset the GSO metadata before reusing the skb
| * 5e84e18f net: bridge: Bounce invalid boolopts
| * fe78891f net: fec: Fix possible NPD in fec_enet_phy_reset_after_clk_enable()
| * 092e5703 Disable SLUB_TINY for build testing
| * 8a8f093e USB: serial: option: add Telit Cinterion LE910C4-WWX new compositions
| * e88b7810 USB: serial: option: add Telit Cinterion FN990A w/audio compositions
| * bb349808 dt-bindings: serial: brcm,bcm7271-uart: Constrain clocks
| * a0da801d serial: sc16is7xx: fix bug in flow control levels init
| * 1e92afef tty: hvc_console: Call hvc_kick in hvc_write unconditionally
| * af253b1a Revert "net: usb: asix: ax88772: drop phylink use in PM to avoid MDIO runtime PM wakeups"
| * 7bd41f9c Input: i8042 - add TUXEDO InfinityBook Pro Gen10 AMD to i8042 quirk table
| * 27e12607 Input: iqs7222 - avoid enabling unused interrupts
| * 854baafc kernfs: Fix UAF in polling when open file is released
| * 5de7b414 cifs: fix pagecache leak when do writepages
| * 9f4b38ad mm/khugepaged: fix the address passed to notifier on testing young
| * c95c2240 mm/khugepaged: convert hpage_collapse_scan_pmd() to use folios
| * 394547b9 btrfs: fix corruption reading compressed range when block size is smaller than page size
| * a29f891d btrfs: use readahead_expand() on compressed extents
| * 7bb675c9 mm/damon/lru_sort: avoid divide-by-zero in damon_lru_sort_apply_parameters()
| * 9fe04151 mm/damon/reclaim: avoid divide-by-zero in damon_reclaim_apply_parameters()
| * 60d7a3d2 mm/damon/sysfs: fix use-after-free in state_show()
| * 23538cfb libceph: fix invalid accesses to ceph_connection_v1_info
| * b97edd19 mtd: nand: raw: atmel: Respect tAR, tCLR in read setup timing
| * 252bc25d mtd: nand: raw: atmel: Fix comment in timings preparation
| * cfdde919 drm/amdgpu/vcn4: Fix IB parsing with multiple engine info packages
| * 9adb902b drm/amdgpu/vcn: Allow limiting ctx to instance 0 for AV1 at any time
| * b2fbe0f9 drm/mediatek: fix potential OF node use-after-free
| * 66328452 mm/damon/core: set quota->charged_from to jiffies at first charge window
| * 3d278e89 mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory
| * 8577ded2 fuse: prevent overflow in copy_file_range return value
| * 01e1eba6 fuse: check if copy_file_range() returns larger than requested size
| * c50336df mtd: rawnand: stm32_fmc2: fix ECC overwrite
| * 06d8ef8f mtd: rawnand: stm32_fmc2: avoid overlapping mappings on ECC buffer
| * 31dc1603 net: usb: asix: ax88772: drop phylink use in PM to avoid MDIO runtime PM wakeups
| * 9d55370c i2c: i801: Hide Intel Birch Stream SoC TCO WDT
| * 0709bc11 ocfs2: fix recursive semaphore deadlock in fiemap call
| * 8345a93b mptcp: sockopt: make sync_socket_options propagate SOCK_KEEPOPEN
| * e69f61b8 compiler-clang.h: define __SANITIZE_*__ macros only when undefined
| * deedce87 Revert "SUNRPC: Don't allow waiting for exiting tasks"
| * 6f628d7d EDAC/altera: Delete an inappropriate dma_free_coherent() call
| * 2089d8a3 KVM: SVM: Set synthesized TSA CPUID flags
* | 024d85b9 Merge 2b8a1969 ("rcu-tasks: Maintain real-time response in rcu_tasks_postscan()") into android15-6.6-lts
|\|
| * 2b8a1969 rcu-tasks: Maintain real-time response in rcu_tasks_postscan()
* | 7400c39d Revert "rcu-tasks: Eliminate deadlocks involving do_exit() and RCU tasks"
* | 46d4ea46 Merge d89abc4f ("rcu-tasks: Eliminate deadlocks involving do_exit() and RCU tasks") into android15-6.6-lts
|\|
| * d89abc4f rcu-tasks: Eliminate deadlocks involving do_exit() and RCU tasks
* | 9133339f Revert "rcu-tasks: Maintain lists to eliminate RCU-tasks/do_exit() deadlocks"
* | 627a7d24 Merge 4e86206b ("rcu-tasks: Maintain lists to eliminate RCU-tasks/do_exit() deadlocks") into android15-6.6-lts
|\|
| * 4e86206b rcu-tasks: Maintain lists to eliminate RCU-tasks/do_exit() deadlocks
* | 29ddd36f Merge 8be3d521 ("proc: fix type confusion in pde_set_flags()") into android15-6.6-lts
|\|
| * 8be3d521 proc: fix type confusion in pde_set_flags()
| * 66bcb04a tcp_bpf: Call sk_msg_free() when tcp_bpf_send_verdict() fails to allocate psock->cork.
| * 449682e7 bpf: Tell memcg to use allow_spinning=false path in bpf_timer_init()
| * d660c8d8 s390/cpum_cf: Deny all sampling events by counter PMU
| * 1262bda8 tracing: Silence warning when chunk allocation fails in trace_pid_write
| * 69d99a93 NFSv4/flexfiles: Fix layout merge mirror check.
| * c288e4c3 NFSv4.2: Serialise O_DIRECT i/o and copy range
| * 9f2fdb18 NFSv4.2: Serialise O_DIRECT i/o and clone range
| * 4089fd70 NFSv4.2: Serialise O_DIRECT i/o and fallocate()
| * 320a0954 NFS: Serialise O_DIRECT i/o and truncate()
| * 275d9fd0 fs/nfs/io: make nfs_start_io_*() killable
| * 06c26a67 ftrace/samples: Fix function size computation
| * f7ec68cc tracing: Fix tracing_marker may trigger page fault during preempt_disable
| * 781ec303 NFSv4: Clear the NFS_CAP_XATTR flag if not supported by the server
| * b39234ed NFSv4: Clear the NFS_CAP_FS_LOCATIONS flag if it is not set
| * a022c9a4 NFSv4: Don't clear capabilities that won't be reset
| * 9339b4e7 SUNRPC: call xs_sock_process_cmsg for all cmsg
| * fd00ae04 flexfiles/pNFS: fix NULL checks on result of ff_layout_choose_ds_for_read
| * 0214b96a ima: limit the number of ToMToU integrity violations
| * 905d43b8 net: Fix null-ptr-deref by sock_lock_init_class_and_name() and rmmod.
| * 9da2a9d3 media: i2c: imx214: Fix link frequency validation
| * 817a962d NFSD: nfsd_unlink() clobbers non-zero status returned from fh_fill_pre_attrs()
| * 913ff520 nfsd: Fix a regression in nfsd_setattr()
| * 392260eb kasan: fix GCC mem-intrinsic prefix with sw tags
| * d699575d mm: introduce and use {pgd,p4d}_populate_kernel()
| * 3f8810b2 kunit: kasan_test: disable fortify string checker on kasan_strings() test
* | 4c28c902 Merge 6.6.106 into android16-6.6-lts
|\|
| * 60a9e718 Linux 6.6.106
| * 3b9e7e5c x86/vmscape: Add old Intel CPUs to affected list
| * 1e1dc1f9 x86/vmscape: Warn when STIBP is disabled with SMT
| * a5d029f1 x86/bugs: Move cpu_bugs_smt_update() down
| * 34e56670 x86/vmscape: Enable the mitigation
| * f866eef8 x86/vmscape: Add conditional IBPB mitigation
| * 813cb831 x86/vmscape: Enumerate VMSCAPE bug
| * 9d167706 Documentation/hw-vuln: Add VMSCAPE documentation
* | f479dcab ANDROID: GKI: add debugfs_lookup_and_remove to virtual_device symbol list.
* | 671e9f63 Revert "arm64: ftrace: fix unreachable PLT for ftrace_caller in init_module with CONFIG_DYNAMIC_FTRACE"
* | c22ec195 Merge 6.6.105 into android15-6.6-lts
|\|
| * fe9731e1 Linux 6.6.105
| * be4e6a22 spi: fsl-qspi: Fix double cleanup in probe error path
| * 054a444b dmaengine: mediatek: Fix a flag reuse error in mtk_cqdma_tx_status()
| * b718de59 cpufreq: intel_pstate: Check turbo_is_disabled() in store_no_turbo()
| * d0b26a9f cpufreq: intel_pstate: Read global.no_turbo under READ_ONCE()
| * a44d0904 cpufreq: intel_pstate: Rearrange show_no_turbo() and store_no_turbo()
| * 524ee260 riscv: use lw when reading int cpu in asm_per_cpu
| * 522ffe29 mm: slub: avoid wake up kswapd in set_track_prepare
| * ad2df864 slub: Reflow ___slab_alloc()
| * c866c40d tools: gpio: remove the include directory on make clean
| * 3c331f7f tools: gpio: rm .*.cmd on make clean
| * 7e4f8e09 drm/amd/amdgpu: Fix missing error return on kzalloc failure
| * 718c2489 drm/amdgpu: Replace DRM_* with dev_* in amdgpu_psp.c
| * c9c4635a perf bpf-event: Fix use-after-free in synthesis
| * 85da7f36 drm/bridge: ti-sn65dsi86: fix REFCLK setting
| * 1a7d3947 spi: spi-fsl-lpspi: Clear status register after disabling the module
| * cd53048e spi: spi-fsl-lpspi: Reset FIFO and disable module on transfer abort
| * a3399565 spi: spi-fsl-lpspi: Set correct chip-select polarity bit
| * a786ef5f spi: spi-fsl-lpspi: Fix transmissions when using CONT
| * 2313baff hwmon: mlxreg-fan: Prevent fans from getting stuck at 0 RPM
| * 8699358b pcmcia: Add error handling for add_interval() in do_validate_mem()
| * 3ee8f5c8 pcmcia: omap: Add missing check for platform_get_resource
| * 8d7ee56b Revert "drm/amdgpu: Avoid extra evict-restore process."
| * b9cf42a8 ALSA: hda/realtek: Fix headset mic for TongFang X6[AF]R5xxY
| * 5f46882b ALSA: hda/hdmi: Add pin fix for another HP EliteDesk 800 G4 model
| * 7d981661 drm/mediatek: Fix device/node reference count leaks in mtk_drm_get_all_drm_priv
| * 2c6c9d31 drm/mediatek: Fix using wrong drm private data to bind mediatek-drm
| * 13d0854e drm/mediatek: Add crtc path enum for all_drm_priv array
| * d5875a47 vmxnet3: update MTU after device quiesce
| * 5174ea81 net: dsa: microchip: linearize skb for tail-tagging switches
| * 3b6a5df3 net: dsa: microchip: update tag_ksz masks for KSZ9477 family
| * 16fea506 dmaengine: mediatek: Fix a possible deadlock error in mtk_cqdma_tx_status()
| * dd2b7abd ALSA: hda/realtek - Add new HP ZBook laptop with micmute led fixup
| * 7df63b5d ALSA: hda/realtek: Add support for HP Agusta using CS35L41 HDA
| * 47aba94a iio: pressure: mprls0025pa: use aligned_s64 for timestamp
| * e791bf21 iio: light: opt3001: fix deadlock due to concurrent flag access
| * 91da5330 iio: chemical: pms7003: use aligned_s64 for timestamp
| * fb6a7c1d iio: imu: inv_mpu6050: align buffer for timestamp
| * 977849e8 btrfs: adjust subpage bit start based on sectorsize
| * b088ae4e PCI/MSI: Add an option to write MSIX ENTRY_DATA before any reads
| * 30d201ee thermal/drivers/mediatek/lvts: Disable low offset IRQ for minimum threshold
| * 50ae352c spi: fsl-qspi: use devm function instead of driver remove
| * 0ef7058b mm/slub: avoid accessing metadata when pointer is invalid in object_err()
| * ba0ccc1b nouveau: fix disabling the nonstall irq due to storm code
| * 033f09b6 cpufreq: intel_pstate: Unchecked MSR aceess in legacy mode
| * 83440514 cpufreq: intel_pstate: Do not update global.turbo_disabled after initialization
| * 86cade77 cpufreq: intel_pstate: Fold intel_pstate_max_within_limits() into caller
| * e7f4f16f cpufreq: intel_pstate: Revise global turbo disable check
| * de6b545b Revert "spi: spi-cadence-quadspi: Fix pm runtime unbalance"
| * 94f7d907 Revert "spi: cadence-quadspi: fix cleanup of rx_chan on failure paths"
| * f4f7cde7 net: pcs: rzn1-miic: Correct MODCTRL register offset
| * 50a84d5c e1000e: fix heap overflow in e1000_set_eeprom
| * 1cfa5dd0 cifs: prevent NULL pointer dereference in UTF16 conversion
| * bb37252c batman-adv: fix OOB read/write in network-coding decode
| * d96cc9a1 scsi: lpfc: Fix buffer free/clear order in deferred receive path
| * abab31c3 platform/x86/amd/pmc: Add TUXEDO IB Pro Gen10 AMD to spurious 8042 quirks list
| * 350bfdd2 drm/amdgpu: drop hw access in non-DC audio fini
| * 9e429376 wifi: mt76: mt7996: Initialize hdr before passing to skb_put_data()
| * 9df29aa5 wifi: mwifiex: Initialize the chan_stats array to zero
| * bc983b83 soc: qcom: mdt_loader: Deal with zero e_shentsize
| * 698abcf0 proc: fix missing pde_set_flags() for net proc files
| * e9188f66 ocfs2: prevent release journal inode after journal shutdown
| * f9b8d4db sched: Fix sched_numa_find_nth_cpu() if mask offline
| * 6797a8b3 mm: move page table sync declarations to linux/pgtable.h
| * 26ff568f x86/mm/64: define ARCH_PAGE_TABLE_SYNC_MASK and arch_sync_kernel_mappings()
| * 2ee32c4c pcmcia: Fix a NULL pointer dereference in __iodyn_find_io_region()
| * 50f2f392 arm64: ftrace: fix unreachable PLT for ftrace_caller in init_module with CONFIG_DYNAMIC_FTRACE
| * 90e9372e ACPI/IORT: Fix memory leak in iort_rmr_alloc_sids()
| * ad17940a ALSA: usb-audio: Add mute TLV for playback volumes on some devices
| * a4e366fb phy: mscc: Stop taking ts_lock for tx_queue and use its own lock
| * 9b035445 selftest: net: Fix weird setsockopt() in bind_bhash.c.
| * 85c1c86a ppp: fix memory leak in pad_compress_skb
| * 01d2690c net: atm: fix memory leak in atm_register_sysfs when device_register fail
| * 7d449b7a ax25: properly unshare skbs in ax25_kiss_rcv()
| * 5852cee1 mctp: return -ENOPROTOOPT for unknown getsockopt options
| * 7f886958 net/smc: Remove validation of reserved bits in CLC Decline message
| * 90ab05ed ipv4: Fix NULL vs error pointer check in inet_blackhole_dev_init()
| * bee1e19c net: thunder_bgx: decrement cleanup index before use
| * 45357295 net: thunder_bgx: add a missing of_node_put
| * e472f59d wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result()
| * 609f6deb wifi: libertas: cap SSID len in lbs_associate()
| * ccb83960 wifi: cw1200: cap SSID length in cw1200_do_join()
| * 61b80fbd net: ethernet: mtk_eth_soc: fix tx vlan tag for llc packets
| * 5d7b2d45 wifi: ath11k: fix group data packet drops during rekey
| * 6bf93442 wifi: ath11k: avoid forward declaration of ath11k_mac_start_vdev_delay()
| * 38b86b0a wifi: ath11k: rename ath11k_start_vdev_delay()
| * 14ed9f84 wifi: ath11k: Introduce and use ath11k_sta_to_arsta()
| * fb216d98 i40e: Fix potential invalid access when MAC list is empty
| * f18d9b3a net/smc: fix one NULL pointer dereference in smc_ib_is_sg_need_sync()
| * 668f4f63 macsec: read MACSEC_SA_ATTR_PN with nla_get_uint
| * 1cf0b558 netlink: add variable-length / auto integers
| * 5430388a net: macb: Fix tx_ptr_lock locking
| * 8d09b137 icmp: fix icmp_ndo_send address translation for reply direction
| * 1dda64fb mISDN: Fix memory leak in dsp_hwec_enable()
| * 9a4abe26 xirc2ps_cs: fix register access when enabling FullDuplex
| * 6077d16b Bluetooth: Fix use-after-free in l2cap_sock_cleanup_listen()
| * bd75eba8 Bluetooth: vhci: Prevent use-after-free by removing debugfs files early
| * 2acc8d3f netfilter: conntrack: helper: Replace -EEXIST by -EBUSY
| * 50db11e2 netfilter: br_netfilter: do not check confirmed bit in br_nf_local_in() after confirm
| * f1150153 wifi: brcmfmac: fix use-after-free when rescheduling brcmf_btcoex_info work
| * b7d08929 wifi: cfg80211: fix use-after-free in cmp_bss()
| * 4a05520d arm64: dts: imx8mp: Fix missing microSD slot vqmmc on Data Modul i.MX8M Plus eDM SBC
| * f7a48ef4 arm64: dts: imx8mp: Fix missing microSD slot vqmmc on DH electronics i.MX8M Plus DHCOM
| * 5b94a825 tee: optee: ffa: fix a typo of "optee_ffa_api_is_compatible"
| * 0383e172 arm64: dts: rockchip: Add vcc-supply to SPI flash on rk3399-pinebook-pro
| * add1ecc8 tee: fix NULL pointer dereference in tee_shm_put
| * bf89b1f8 fs: writeback: fix use-after-free in __mark_inode_dirty()
| * 41e168db Bluetooth: hci_sync: Avoid adding default advertising on startup
| * 703ea9e3 cpupower: Fix a bug where the -t option of the set subcommand was not working.
| * 2b21fd1c drm/amd/display: Don't warn when missing DCE encoder caps
| * 235a4c0a cdc_ncm: Flag Intel OEM version of Fibocom L850-GL as WWAN
| * ee58a0a3 LoongArch: Save LBT before FPU in setup_sigcontext()
| * dc4a024b btrfs: avoid load/store tearing races when checking if an inode was logged
| * 48545620 btrfs: fix race between setting last_dir_index_offset and inode logging
| * 9f76a2e1 btrfs: fix race between logging inode and checking if it was logged before
* | 245f4a27 Merge android15-6.6 into android15-6.6-lts
* | 4f606e64 Merge 7acfa07c ("bpf: Fix oob access in cgroup local storage") into android15-6.6-lts
|\|
| * 7acfa07c bpf: Fix oob access in cgroup local storage
| * dbd8ec22 bpf: Move bpf map owner out of common struct
| * 8e573ac2 bpf: Move cgroup iterator helpers to bpf.h
| * 3eeefeb9 bpf: Add cookie object to bpf maps
* | 0440d8a0 Merge 6.6.104 into android15-6.6-lts
|\|
| * 355bd0b5 Linux 6.6.104
| * d3cc7476 xfs: do not propagate ENODATA disk errors into xattr code
| * 0699faf7 Revert "drm/dp: Change AUX DPCD probe address from DPCD_REV to LANE0_1_STATUS"
| * 6c9552de HID: mcp2221: Handle reads greater than 60 bytes
| * 5a809b34 HID: mcp2221: Don't set bus speed on every transfer
| * 1b3ccc39 net/mlx5: SF, Fix add port error handling
| * ea687c00 net: rose: fix a typo in rose_clear_routes()
| * 4e86e5ba drm/nouveau/disp: Always accept linear modifier
| * 1424f613 smb3 client: fix return code mapping of remap_file_range
| * 3c332109 net: usb: qmi_wwan: add Telit Cinterion LE910C4-WWX new compositions
| * 4191ea1f fs/smb: Fix inconsistent refcnt update
| * 4f43a6d3 dma/pool: Ensure DMA_DIRECT_REMAP allocations are decrypted
| * 8911ec88 Revert "drm/amdgpu: fix incorrect vm flags to map bo"
| * e422370e HID: hid-ntrig: fix unable to handle page fault in ntrig_report_version()
| * b9166ea2 HID: wacom: Add a new Art Pen 2
| * 88d3c279 HID: logitech: Add ids for G PRO 2 LIGHTSPEED
| * 8783b2a0 HID: quirks: add support for Legion Go dual dinput modes
| * d4e6e268 HID: multitouch: fix slab out-of-bounds access in mt_report_fixup()
| * 5f3c0839 HID: asus: fix UAF via HID_CLAIMED_INPUT validation
| * c84ba4cd x86/microcode/AMD: Handle the case of no BIOS microcode
| * f4916164 KVM: x86: use array_index_nospec with indices that come from guest
| * 925599eb efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare
| * 463aa96f sctp: initialize more fields in sctp_v6_from_sk()
| * 9c547c8e net: rose: include node references in rose_neigh refcount
| * f8c29fc4 net: rose: convert 'use' field to refcount_t
| * 4998ab3e net: rose: split remove and free operations in rose_remove_neigh()
| * b0f87251 net: stmmac: Set CIC bit only for TX queues with COE
| * dc38d011 net: stmmac: xgmac: Correct supported speed modes
| * d02d635f net: stmmac: Rename phylink_get_caps() callback to update_caps()
| * ce006b60 net: stmmac: xgmac: Do not enable RX FIFO Overflow interrupts
| * 9b0acd3b net/mlx5e: Set local Xoff after FW update
| * dec9d873 net/mlx5e: Update and set Xon/Xoff upon port speed set
| * cdd96ed1 net/mlx5e: Update and set Xon/Xoff upon MTU set
| * 3e07c623 net/mlx5: Nack sync reset when SFs are present
| * a623e80a net/mlx5: Convert SF port_indices xarray to function_ids xarray
| * a7e9da4d net/mlx5: Use devlink port pointer to get the pointer of container SF struct
| * 25659835 net/mlx5: Call mlx5_sf_id_erase() once in mlx5_sf_dealloc()
| * ddac9d0f net/mlx5: Fix lockdep assertion on sync reset unload event
| * 8da591ae net/mlx5: Add support for sync reset using hot reset
| * 6292688e net/mlx5: Add device cap for supporting hot reset in sync reset flow
| * 09fd27c8 net/mlx5: Reload auxiliary drivers on fw_activate
| * 7acefa4c phy: mscc: Fix when PTP clock is register and unregister
| * b3c70f6f net: dlink: fix multicast stats being counted incorrectly
| * 589edd3d dt-bindings: display/msm: qcom,mdp5: drop lut clock
| * dc70ea94 ice: fix incorrect counter for buffer allocation failures
| * 05fc7307 ice: stop storing XDP verdict within ice_rx_buf
| * 29bcd31a ice: gather page_count()'s of each frag right before XDP prog call
| * 40a9f217 ice: Introduce ice_xdp_buff
| * 4de39976 drm/nouveau: remove unused memory target test
| * 32a49844 drm/nouveau: remove unused increment in gm200_flcn_pio_imem_wr
| * 3c80c230 atm: atmtcp: Prevent arbitrary write in atmtcp_recv_control().
| * 4bd2866d Bluetooth: hci_sync: fix set_local_name race condition
| * 961abec8 Bluetooth: hci_event: Detect if HCI_EV_NUM_COMP_PKTS is unbalanced
| * f356ed87 Bluetooth: hci_event: Mark connection as closed during suspend disconnect
| * 4c549d87 Bluetooth: hci_event: Treat UNKNOWN_CONN_ID on disconnect as success
| * 43078661 HID: input: report battery status changes immediately
| * 61d733a5 HID: input: rename hidinput_set_battery_charge_status()
| * e7d0bd35 powerpc/kvm: Fix ifdef to remove build warning
| * 6de90c2a drm/msm: Defer fd_install in SUBMIT ioctl
| * a208d67c net: ipv4: fix regression in local-broadcast routes
| * 9b270015 vhost/net: Protect ubufs with rcu read lock in vhost_net_ubuf_put()
| * 181feb41 NFS: Fix a race when updating an existing write
| * 9a196340 nfs: fold nfs_page_group_lock_subrequests into nfs_lock_and_join_requests
| * b15342e0 ACPI: EC: Add device to acpi_ec_no_wakeup[] qurik list
| * 61252713 erofs: fix atomic context detection when !CONFIG_DEBUG_LOCK_ALLOC
| * 8f8e6a78 ASoC: codecs: tx-macro: correct tx_macro_component_drv name
| * 24b9ed73 smb: client: fix race with concurrent opens in rename(2)
| * bc1427a4 smb: client: fix race with concurrent opens in unlink(2)
| * 43662b84 scsi: core: sysfs: Correct sysfs attributes access rights
| * 28c8fb7a ftrace: Fix potential warning in trace_printk_seq during ftrace_dump
| * 9e0743eb of: dynamic: Fix use after free in of_changeset_add_prop_helper()
| * 749137b4 of: Add a helper to free property struct
| * d3be2b8c mips: lantiq: xway: sysctrl: rename the etop node
| * e877b861 mips: dts: lantiq: danube: add missing burst length property
| * 6e59b848 pinctrl: STMFX: add missing HAS_IOMEM dependency
| * 43e3118c of: dynamic: Fix memleak when of_pci_add_properties() failed
* | 4c2d3488 Merge 6.6.103 into android15-6.6-lts
|\|
| * cc1a1c5b Linux 6.6.103
| * 40b36d9a alloc_fdtable(): change calling conventions.
| * a0a3ace2 netfilter: nf_reject: don't leak dst refcount for loopback packets
| * c1aa8190 s390/hypfs: Enable limited access during lockdown
| * 972d8407 s390/hypfs: Avoid unnecessary ioctl registration in debugfs
| * 81a0f002 ALSA: usb-audio: Use correct sub-type for UAC3 feature unit validation
| * 7d67d591 net/mlx5e: Preserve shared buffer capacity during headroom updates
| * dacf1ca1 net/mlx5: Base ECVF devlink port attrs from 0
| * c71a3e2b Octeontx2-af: Skip overlap check for SPI field
| * 2919ca87 bonding: send LACPDUs periodically in passive mode after receiving partner's LACPDU
| * 45b70352 bonding: Add independent control state machine
| * f0c7885e bonding: update LACP activity flag after setting lacp_active
| * ca88ac44 net/sched: Remove unnecessary WARNING condition for empty child qdisc in htb_activate
| * aa12ee1c net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit
| * ee713448 igc: fix disabling L1.2 PCI-E link substate on I226 on init
| * d10f670b ixgbe: xsk: resolve the negative overflow of budget in ixgbe_xmit_zc
| * 5189c0b7 LoongArch: Optimize module load time by optimizing PLT/GOT counting
| * 070b4af4 net/smc: fix UAF on smcsk after smc_listen_out()
| * ba51d734 gve: prevent ethtool ops after shutdown
| * 748da808 net: usb: asix_devices: Fix PHY address mask in MDIO bus initialization
| * 3a4eeea7 phy: mscc: Fix timestamping for vsc8584
| * ca18d751 ppp: fix race conditions in ppp_fill_forward_path
| * 06a7acd4 net: ethernet: mtk_ppe: add RCU lock around dev_fill_forward_path
| * 87f78799 ipv6: sr: validate HMAC algorithm ID in seg6_hmac_info_add
| * 2156d9e9 net: gso: Forbid IPv6 TSO with extensions on devices with only IPV6_CSUM
| * 857b8387 drm/amd/display: Add null pointer check in mod_hdcp_hdcp1_create_session()
| * b79027f7 ALSA: usb-audio: Fix size validation in convert_chmap_v3()
| * f93032e5 drm/hisilicon/hibmc: fix the hibmc loaded failed bug
| * e50599ad mlxsw: spectrum: Forward packets with an IPv4 link-local source IP
| * 469c45c8 Bluetooth: hci_conn: do return error from hci_enhanced_setup_sync()
| * ae1d9779 Bluetooth: hci_event: fix MTU for BN == 0 in CIS Established
| * 8f80c633 iommu/amd: Avoid stack buffer overflow from kernel cmdline
| * f5ad0819 scsi: qla4xxx: Prevent a potential error pointer dereference
| * 96476b04 net: bridge: fix soft lockup in br_multicast_query_expired()
| * 7aee3d51 RDMA/bnxt_re: Fix to initialize the PBL array
| * 5d3f018f RDMA/bnxt_re: Fix to remove workload check in SRQ limit path
| * 7b044e92 RDMA/bnxt_re: Fix to do SRQ armena by default
| * acf0dea8 RDMA/erdma: Fix ignored return value of init_kernel_qp
| * 76588276 iosys-map: Fix undefined behavior in iosys_map_clear()
| * 34c3bc76 cgroup/cpuset: Use static_branch_enable_cpuslocked() on cpusets_insane_config_key
| * 72553fe1 drm/nouveau/nvif: Fix potential memory leak in nvif_vmm_ctor().
| * ad994eda spi: spi-fsl-lpspi: Clamp too high speed_hz
| * 7207923d x86/cpu/hygon: Add missing resctrl_cpu_detect() in bsp_init helper
| * 49865488 usb: typec: maxim_contaminant: disable low power mode when reading comparator values
| * f56e75b8 usb: typec: maxim_contaminant: re-enable cc toggle if cc is open and port is clean
| * e600de54 usb: xhci: Fix slot_id resource race conflict
| * 8d2b63fb iio: imu: inv_icm42600: change invalid data error to -EBUSY
| * 0af5812a iio: imu: inv_icm42600: Convert to uXX and sXX integer types
| * ec3310a5 iio: imu: inv_icm42600: use = { } instead of memset()
| * f52d8ba4 iio: imu: inv_icm42600: switch timestamp type from int64_t __aligned(8) to aligned_s64
| * f13768b9 iio: temperature: maxim_thermocouple: use DMA-safe buffer for spi_read()
| * 99b50834 iio: light: as73211: Ensure buffer holes are zeroed
| * 58ff8064 tracing: Limit access to parser->buffer when trace_get_user failed
| * 648e01a0 tracing: Remove unneeded goto out logic
| * c09dd377 tls: fix handling of zero-length records on the rx_list
| * 93879b3b powerpc/boot: Fix build with gcc 15
| * 5c67f7e4 mmc: sdhci-pci-gli: GL9763e: Mask the replay timer timeout of AER
| * 03695cdf compiler: remove __ADDRESSABLE_ASM{_STR,}() again
| * fa833df2 drm/amd/display: Don't overclock DCE 6 by 15%
| * 7660124e usb: dwc3: pci: add support for the Intel Wildcat Lake
| * 84c95dbf usb: dwc3: Remove WARN_ON for device endpoint command timeouts
| * 319aba29 usb: dwc3: Ignore late xferNotReady event to prevent halt timeout
| * dbfaa791 USB: storage: Ignore driver CD mode for Realtek multi-mode Wi-Fi dongles
| * bf29c961 usb: storage: realtek_cr: Use correct byte order for bcs->Residue
| * adfdc6ed USB: storage: Add unusual-devs entry for Novatek NTK96550-based camera
| * cd3bace9 usb: renesas-xhci: Fix External ROM access timeouts
| * 3b4a57b5 usb: core: hcd: fix accessing unmapped memory in SINGLE_STEP_SET_FEATURE test
| * d84f6e77 comedi: Fix use of uninitialized memory in do_insn_ioctl() and do_insnlist_ioctl()
| * 0eb4ed2a comedi: pcl726: Prevent invalid irq number
| * 842f307a comedi: Make insn_rw_emulate_bits() do insn->n samples
| * decaa540 usb: quirks: Add DELAY_INIT quick for another SanDisk 3.2Gen1 Flash Drive
| * 20729b82 cdx: Fix off-by-one error in cdx_rpmsg_probe()
| * 4de009fc most: core: Drop device reference after usage in get_channel()
| * bc4e3186 iio: proximity: isl29501: fix buffered read on big-endian systems
| * 6a605d30 iio: pressure: bmp280: Use IS_ERR() in bmp280_common_probe()
| * 3b114a32 ftrace: Also allocate and copy hash for reading of filter files
| * bb912a20 fpga: zynq_fpga: Fix the wrong usage of dma_map_sgtable()
| * 65e46aea drm/dp: Change AUX DPCD probe address from DPCD_REV to LANE0_1_STATUS
| * d404824f cpuidle: governors: menu: Avoid selecting states with too much latency
| * 3a92598c cpuidle: menu: Remove iowait influence
| * f0aa8591 mmc: sdhci-pci-gli: Add a new function to simplify the code
| * 1eae029f mmc: sdhci-pci-gli: Use PCI AER definitions, not hard-coded values
| * fd269466 selftests: mptcp: pm: check flush doesn't reset limits
| * a9cf4362 mptcp: disable add_addr retransmission when timeout is 0
| * ebe3d8cf mptcp: remove duplicate sk_reset_timer call
| * 1982e18b use uniform permission checks for all mount propagation changes
| * c5aa6ba1 fs/buffer: fix use-after-free when call bh_read() helper
| * 212eb86f smb: server: split ksmbd_rdma_stop_listening() out of ksmbd_rdma_destroy()
| * 740ccba3 arm64: dts: ti: k3-am62-main: Remove eMMC High Speed DDR support
| * 342f7a1d ext4: preserve SB_I_VERSION on remount
| * 047b4cb3 scsi: mpi3mr: Serialize admin queue BAR writes on 32-bit systems
| * c065c8d2 scsi: mpi3mr: Drop unnecessary volatile from __iomem pointers
| * 6d53b2a1 scsi: ufs: exynos: Fix programming of HCI_UTRL_NEXUS_TYPE
| * 0c3333f7 PCI: imx6: Add IMX8MM_EP and IMX8MP_EP fixed 256-byte BAR 4 in epc_features
| * d0252e69 PCI: imx6: Delay link start until configfs 'start' written
| * cee067ef PCI: rockchip: Set Target Link Speed to 5.0 GT/s before retraining
| * 7b688b36 PCI: rockchip: Use standard PCIe definitions
| * 72ff3acf soc: qcom: mdt_loader: Fix error return values in mdt_header_valid()
| * ef2f64df drm/amd/display: Fill display clock and vblank time in dce110_fill_display_configs
| * a98aa702 drm/amd/display: Find first CRTC and its line time in dce110_fill_display_configs
| * e95f4fd5 drm/amd/display: Fix DP audio DTO1 clock source on DCE 6.
| * 5b011264 drm/amd/display: Fix fractional fb divider in set_pixel_clock_v3
| * 36a6b435 drm/amd/display: Avoid a NULL pointer dereference
| * 86c28257 s390/sclp: Fix SCCB present check
| * 50db1ab0 ALSA: hda/realtek: Add support for HP EliteBook x360 830 G6 and EliteBook 830 G6
| * 0a138533 mm/memory-failure: fix infinite UCE for VM_PFNMAP pfn
| * 63962ff9 mm/debug_vm_pgtable: clear page table entries at destroy_args()
| * 8d03bce0 squashfs: fix memory leak in squashfs_fill_super
| * 92c96896 mmc: sdhci-pci-gli: GL9763e: Rename the gli_set_gl9763e() for consistency
| * 0207d8fa memstick: Fix deadlock by moving removing flag earlier
| * 28b82be0 KVM: arm64: Fix kernel BUG() due to bad backport of FPSIMD/SVE/SME fix
| * d1446050 sched/fair: Fix frequency selection for non-invariant case
| * 858e035e topology: Set capacity_freq_ref in all cases
| * 68df021d arm64/amu: Use capacity_ref_freq() to set AMU ratio
| * cf4faefd cpufreq/cppc: Set the frequency used for computing the capacity
* | 10a74821 Merge 11da2b1a ("energy_model: Use a fixed reference frequency") into android15-6.6-lts
|\|
| * 11da2b1a energy_model: Use a fixed reference frequency
* | bc2356a5 Merge 6688eb92 ("cpufreq/schedutil: Use a fixed reference frequency") into android15-6.6-lts
|\|
| * 6688eb92 cpufreq/schedutil: Use a fixed reference frequency
* | 354adf43 Merge 9771732a ("cpufreq: Use the fixed and coherent frequency for scaling capacity") into android15-6.6-lts
|\|
| * 9771732a cpufreq: Use the fixed and coherent frequency for scaling capacity
* | c4fb953c Merge 46db6d47 ("sched/topology: Add a new arch_scale_freq_ref() method") into android15-6.6-lts
|\|
| * 46db6d47 sched/topology: Add a new arch_scale_freq_ref() method
* | e4dd5127 Revert "PM: runtime: Simplify pm_runtime_get_if_active() usage"
* | d584c05b Revert "PM: runtime: Take active children into account in pm_runtime_get_if_in_use()"
* | 3fbf602d Revert "block: reject invalid operation in submit_bio_noacct"
* | c4225843 Revert "block: Make REQ_OP_ZONE_FINISH a write operation"
* | e2f0ccd0 Revert "PCI/ACPI: Fix runtime PM ref imbalance on Hot-Plug Capable ports"
* | 4b815bd4 Merge 0ed2068d ("kbuild: userprogs: use correct linker when mixing clang and GNU ld") into android15-6.6-lts
|\|
| * 0ed2068d kbuild: userprogs: use correct linker when mixing clang and GNU ld
| * 5b7912d8 ata: libata-scsi: Return aborted command when missing sense and result TF
| * 9e9b1fa7 PM: runtime: Take active children into account in pm_runtime_get_if_in_use()
| * ac2e62ca PM: runtime: Simplify pm_runtime_get_if_active() usage
| * c0f179c1 ata: Fix SATA_MOBILE_LPM_POLICY description in Kconfig
| * dc35f594 usb: dwc3: imx8mp: fix device leak at unbind
| * 1636b5e9 mm/ptdump: take the memory hotplug lock inside ptdump_walk_pgd()
| * 365771ee wifi: mac80211: check basic rates validity in sta_link_apply_parameters
| * b59bea60 KVM: x86: Take irqfds.lock when adding/deleting IRQ bypass producer
| * 65b6b10f s390/mm: Remove possible false-positive warning in pte_free_defer()
| * 0852c97f btrfs: send: make fs_path_len() inline and constify its argument
| * 8f3aae5f btrfs: send: use fallocate for hole punching with send stream v2
| * f942e474 btrfs: send: avoid path allocation for the current inode when issuing commands
| * dbda681a btrfs: send: keep the current inode's path cached
| * ffc19fe2 btrfs: send: add and use helper to rename current inode when processing refs
| * bfed58ed btrfs: send: only use boolean variables at process_recorded_refs()
| * 25355725 btrfs: send: factor out common logic when sending xattrs
| * b1947464 btrfs: populate otime when logging an inode item
| * d7badc2b btrfs: constify more pointer parameters
| * 9dfdea89 btrfs: fix ssd_spread overallocation
| * 9c64d6b0 btrfs: open code timespec64 in struct btrfs_inode
| * 8f85af32 xfs: fully decouple XFS_IBULK* flags from XFS_IWALK* flags
| * 4734255e btrfs: abort transaction on unexpected eb generation at btrfs_copy_root()
| * 467dcf7e btrfs: always abort transaction on failure to add block group to free space tree
| * 8c5bf139 btrfs: move transaction aborts to the error site in add_block_group_free_space()
| * b172535c btrfs: qgroup: fix race between quota disable and quota rescan ioctl
| * d6f1a6c2 btrfs: don't ignore inode missing when replaying log tree
| * a779d1dd usb: typec: fusb302: cache PD RX state
| * 827f7b4f PCI/ACPI: Fix runtime PM ref imbalance on Hot-Plug Capable ports
| * 80617b39 block: Make REQ_OP_ZONE_FINISH a write operation
| * 6c77d4e0 block: reject invalid operation in submit_bio_noacct
| * 3bbd52a4 fscrypt: Don't use problematic non-inline crypto engines
| * c8a1e1f0 leds: flash: leds-qcom-flash: Fix registry access after re-bind
| * 71230248 leds: flash: leds-qcom-flash: Limit LED current based on thermal condition
| * 84a24fb4 net/sched: ets: use old 'nbands' while purging unused classes
| * 81505f13 net_sched: sch_ets: implement lockless ets_dump()
| * 00dc616e smb: client: fix netns refcount leak after net_passive changes
| * 2668e038 net: better track kernel sockets lifetime
| * ac90037b net: Add net_passive_inc() and net_passive_dec().
| * 5dd48186 selftests/memfd: add test for mapping write-sealed memfd read-only
| * 2e417969 mm: reinstate ability to map write-sealed memfd mappings read-only
| * 87a75f68 mm: update memfd seal write check to include F_SEAL_WRITE
| * 17c5d49b mm: drop the assumption that VM_SHARED always implies writable
| * 440d3684 mptcp: pm: kernel: flush: do not reset ADD_ADDR limit
| * 253b7d8b mptcp: drop skb if MPTCP skb extension allocation fails
| * cf0a8812 ACPI: pfr_update: Fix the driver update version check
| * 3ddd55cf ipv6: sr: Fix MAC comparison to be constant-time
| * b117c41b net, hsr: reject HSR frame if skb can't hold tag
| * 3afdeb96 drm/amd/display: Don't overwrite dce60_clk_mgr
| * 39f187cb drm/amd/display: Add primary plane to commits for correct VRR handling
| * 74ee7445 drm/amdkfd: Destroy KFD debugfs after destroy KFD wq
| * 627f30a3 drm/amdgpu: update mmhub 3.0.1 client id mappings
| * a3201e3b drm/amdgpu: Avoid extra evict-restore process.
| * 0e7f5f9a drm/amd: Restore cached power limit during resume
| * 00286014 media: venus: venc: Clamp param smaller than 1fps and bigger than 240
| * f8667785 media: venus: vdec: Clamp param smaller than 1fps and bigger than 240.
| * f54be97b media: venus: protect against spurious interrupts during probe
| * 041015a4 media: venus: hfi: explicitly release IRQ during teardown
| * ba567c2e media: venus: Add a check for packet size after reading from shared memory
| * 03c0e00c media: qcom: camss: cleanup media device allocated resource on error path
| * 3c0e4cc4 media: ivsc: Fix crash at shutdown due to missing mei_cldev_disable() calls
| * 61f267b7 media: ov2659: Fix memory leaks in ov2659_probe()
| * 1c2769dc media: rainshadow-cec: fix TOCTOU race condition in rain_interrupt()
| * 3d83d0b5 media: usbtv: Lock resolution while streaming
| * ecb73820 media: v4l2-ctrls: Don't reset handler's error in v4l2_ctrl_handler_free()
| * b3433cff media: verisilicon: Fix AV1 decoder clock frequency
| * 6a41dc14 media: vivid: fix wrong pixel_array control size
| * 8ad57bd4 media: imx: fix a potential memory leak in imx_media_csc_scaler_device_init()
| * c231d196 media: hi556: correct the test pattern configuration
| * 0148fcdd media: gspca: Add bounds checking to firmware parser
| * 85bfcb0e parisc: Update comments in make_insert_tlb
| * 9827b2b0 parisc: Try to fixup kernel exception in bad_area_nosemaphore path of do_page_fault()
| * 8bccf47a parisc: Revise gateway LWS calls to probe user read access
| * 4c981077 parisc: Revise __get_user() to probe user read access
| * d6ac1e11 parisc: Rename pte_needs_flush() to pte_needs_cache_flush() in cache.c
| * 033605fb parisc: Makefile: explain that 64BIT requires both 32-bit and 64-bit compilers
| * 69cf90e5 parisc: Drop WARN_ON_ONCE() from flush_cache_vmap
| * 0199adb6 parisc: Define and use set_pte_at()
| * b334724f parisc: Check region is readable by user in raw_copy_from_user()
| * fe0886c9 soc/tegra: pmc: Ensure power-domains are in a known state
| * 41f40038 jbd2: prevent softlockup in jbd2_log_do_checkpoint()
| * 92ef491b f2fs: fix to avoid out-of-boundary access in dnode page
| * 5d109edb phy: qcom: phy-qcom-m31: Update IPQ5332 M31 USB phy initialization sequence
| * adb48217 vhost/vsock: Avoid allocating arbitrarily-sized SKBs
| * ee438c49 vsock/virtio: Validate length in packet header before skb_put()
| * 6ee45782 PCI: endpoint: Fix configfs group removal on driver teardown
| * 07588623 PCI: endpoint: Fix configfs group list head handling
| * d1f59c79 mtd: rawnand: renesas: Add missing check after DMA map
| * fcb12d1e mtd: rawnand: fsmc: Add missing check after DMA map
| * 9de4819f mtd: spinand: propagate spinand_wait() errors from spinand_write_page()
| * b9e9afc3 mtd: spi-nor: Fix spi_nor_try_unlock_all()
| * 749ccc17 hwmon: (gsc-hwmon) fix fan pwm setpoint show functions
| * 747977ae pwm: mediatek: Fix duty and period setting
| * 07023648 pwm: mediatek: Handle hardware enable and clock enable separately
| * cbf3815d pwm: imx-tpm: Reset counter if CMOD is 0
| * aa48271f wifi: ath11k: fix dest ring-buffer corruption when ring is full
| * ee3c10c9 wifi: ath11k: fix source ring-buffer corruption
| * 069819aa wifi: ath11k: fix dest ring-buffer corruption
| * daa2b66f wifi: ath12k: fix dest ring-buffer corruption when ring is full
| * bfd4918b wifi: ath12k: fix source ring-buffer corruption
| * b5b6201a wifi: ath12k: fix dest ring-buffer corruption
| * 97e07460 wifi: brcmsmac: Remove const from tbl_ptr parameter in wlc_lcnphy_common_read_table()
| * 296bcff7 iio: adc: ad_sigma_delta: change to buffer predisable
| * 50e823a2 iio: imu: bno055: fix OOB access of hw_xlate array
| * e22e5ac2 zynq_fpga: use sgtable-based scatterlist wrappers
| * 981c845f soc: qcom: mdt_loader: Ensure we don't read past the ELF header
| * bfa87a2c ata: libata-scsi: Fix CDL control
| * 6f5d3408 scsi: ufs: ufs-pci: Fix default runtime and system PM levels
| * 03d55967 scsi: ufs: ufs-pci: Fix hibernate state transition for Intel MTL-like host controllers
| * 8247c426 ata: libata-scsi: Fix ata_to_sense_error() status handling
| * 728abc89 scsi: mpi3mr: Fix race between config read submit and interrupt completion
| * 78f1d313 dt-bindings: display: sprd,sharkl3-dsi-host: Fix missing clocks constraints
| * c4adc491 dt-bindings: display: sprd,sharkl3-dpu: Fix missing clocks constraints
| * 745c9b11 arm64: dts: ti: k3-am62-verdin: Enable pull-ups on I2C buses
| * d1aca165 arm64: dts: ti: k3-am62a7-sk: fix pinmux for main_uart1
| * 06c3fda2 arm64: dts: ti: k3-pinctrl: Enable Schmitt Trigger by default
| * 2fdddc18 btrfs: zoned: fix write time activation failure for metadata block group
| * 5fc0345e ext4: fix hole length calculation overflow in non-extent inodes
| * e0bb195a ext4: use kmalloc_array() for array space allocation
| * 173270d9 ext4: don't try to clear the orphan_present feature block device is r/o
| * d387cee4 ext4: fix reserved gdt blocks handling in fsmap
| * 052cd20d ext4: fix fsmap end of range reporting with bigalloc
| * ab1cc862 ext4: check fast symlink for ea_inode correctly
| * d0570a5b tracing: fprobe-event: Sanitize wildcard for fprobe event name
| * d9e157fc ksmbd: extend the connection limiting mechanism to support IPv6
| * a1d2bab4 ksmbd: fix refcount leak causing resource not released
| * 820949bb Revert "vgacon: Add check for vc_origin address range in vgacon_scroll()"
| * 5858448a crypto: qat - flush misc workqueue during device shutdown
| * fd284417 crypto: qat - lower priority for skcipher and aead algorithms
| * ea95d4e8 lib/crypto: mips/chacha: Fix clang build and remove unneeded byteswap
| * c82ad93b vt: defkeymap: Map keycodes above 127 to K_HOLE
| * c0942ce3 vt: keyboard: Don't process Unicode characters in K_OFF mode
| * 5e174296 bus: mhi: host: Detect events pointing to unexpected TREs
| * 38de63c2 bus: mhi: host: Fix endianness of BHI vector table
| * e192ebb7 usb: dwc3: meson-g12a: fix device leaks at unbind
| * d52ad077 usb: musb: omap2430: fix device leak at unbind
| * 21c400de usb: gadget: udc: renesas_usb3: fix device leak at unbind
| * 295425f5 usb: atm: cxacru: Merge cxacru_upload_firmware() into cxacru_heavy_init()
| * e06e9ef1 m68k: Fix lost column on framebuffer debug console
| * b4b21367 platform/chrome: cros_ec: Unregister notifier in cros_ec_unregister()
| * 1bf5cc1e cpufreq: armada-8k: Fix off by one in armada_8k_cpufreq_free_table()
| * cb7b3633 serial: 8250: fix panic due to PSLVERR
| * 23280101 rcu: Fix racy re-initialization of irq_work causing hangs
| * 049874a1 HID: apple: avoid setting up battery timer for devices without battery
| * 05a40e70 HID: magicmouse: avoid setting up battery timer when not needed
| * 5661fdd2 RDMA/siw: Fix the sendmsg byte count in siw_tcp_sendpages
| * b9669bed tools/nolibc: fix spelling of FD_SETBITMASK in FD_* macros
| * fdd1c9f7 media: uvcvideo: Do not mark valid metadata as invalid
| * 8f274e2b media: venus: Fix OOB read due to missing payload bound check
| * a97e062e media: uvcvideo: Fix 1-byte out-of-bounds read in uvc_parse_format()
| * 1da95d3d mm/kmemleak: avoid deadlock by moving pr_warn() outside kmemleak_lock
| * e21a3ddd mm/kmemleak: avoid soft lockup in __kmemleak_do_cleanup()
| * 74fb3b1b parisc: Makefile: fix a typo in palo.conf
| * 2a70cbd1 hv_netvsc: Fix panic during namespace deletion with VF
| * 27b118ae fbdev: Fix vmalloc out-of-bounds write in fast_imageblit
| * f83d4c81 btrfs: do not allow relocation of partially dropped subvolumes
| * 77e07f72 btrfs: zoned: do not select metadata BG as finish target
| * 6b801da8 btrfs: fix log tree replay failure due to file with 0 links and extents
| * a002525b btrfs: clear dirty status from extent buffer on error at insert_new_root()
| * 99e36ff4 btrfs: zoned: do not remove unwritten non-data block group
| * e02bdb22 btrfs: abort transaction during log replay if walk_log_tree() failed
| * ec5bfcfb btrfs: zoned: use filesystem size not disk size for reclaim decision
| * 9dfe40cb cdc-acm: fix race between initial clearing halt and open
| * 729ac69a thunderbolt: Fix copy+paste error in match_service_id()
| * 5c4a2ffc comedi: fix race between polling and detaching
| * e613904f usb: typec: ucsi: Update power_supply on power role change
| * ca9fb654 misc: rtsx: usb: Ensure mmc child device is active when card is present
| * 5badd56c usb: core: config: Prevent OOB read in SS endpoint companion parsing
| * 492207cf ext4: fix largest free orders lists corruption on mb_optimize_scan switch
| * 88d02c33 ext4: fix zombie groups in average fragment size lists
| * d19b8175 iommufd: Prevent ALIGN() overflow
| * 2ccccb0e iommufd: Report unmapped bytes in the error path of iopt_unmap_iova_range
| * a11b6ee7 iommu/arm-smmu-qcom: Add SM6115 MDSS compatible
| * 7e0c0664 cifs: reset iface weights when we cannot find a candidate
| * 1b6310d1 drm/amdgpu: fix incorrect vm flags to map bo
| * 3fbc2e43 ASoC: fsl_sai: replace regmap_write with regmap_update_bits
| * 8270fbcc scsi: lpfc: Remove redundant assignment to avoid memory leak
| * 063fe9b1 rtc: ds1307: remove clear of oscillator stop flag (OSF) in probe
| * 24334f3c pNFS: Fix uninited ptr deref in block/scsi layout
| * 198f26c5 pNFS: Handle RPC size limit for layoutcommits
| * 2c5b079b pNFS: Fix disk addr range check in block/scsi layout
| * cf949a96 pNFS: Fix stripe mapping in block/scsi layout
| * 3b9d69f0 block: avoid possible overflow for chunk_sectors check in blk_stack_limits()
| * 1df5970c ASoC: Intel: avs: Fix uninitialized pointer error in probe()
| * f2e48095 net: phy: smsc: add proper reset flags for LAN8710A
| * 6b93ab1a ipmi: Fix strcpy source and destination the same
| * 9da4d5c3 kconfig: lxdialog: fix 'space' to (de)select options
| * 44337363 kconfig: gconf: fix potential memory leak in renderer_edited()
| * e55c6f05 kconfig: gconf: avoid hardcoding model2 in on_treeview2_cursor_changed()
| * 933992c6 ipmi: Use dev_warn_ratelimited() for incorrect message warnings
| * 2e07a9fe vfio/mlx5: fix possible overflow in tracking max message size
| * 48d7bdd8 scsi: aacraid: Stop using PCI_IRQ_AFFINITY
| * 0787a522 scsi: target: core: Generate correct identifiers for PR OUT transport IDs
| * a40c4af8 scsi: Fix sas_user_scan() to handle wildcard and multi-channel scans
| * 28d64271 kconfig: nconf: Ensure null termination where strncpy is used
| * 106ab3cd vfio/type1: conditional rescheduling while pinning
| * 98b7b47c kconfig: lxdialog: replace strcpy() with strncpy() in inputbox.c
| * b45134f7 f2fs: check the generic conditions first
* | 2cc8af56 Merge 868f2328 ("exfat: add cluster chain loop check for dir") into android15-6.6-lts
|\|
| * 868f2328 exfat: add cluster chain loop check for dir
| * 6af18148 i2c: Force DLL0945 touchpad i2c freq to 100khz
| * f8c00188 apparmor: use the condition in AA_BUG_FMT even with debug disabled
| * dd45d42a dm-table: fix checking for rq stackable devices
| * f4133dc2 dm-mpath: don't print the "loaded" message if registering fails
| * cf4a40ad i3c: master: Initialize ret in i3c_i2c_notifier_call()
| * 4e24a6a4 i3c: don't fail if GETHDRCAP is unsupported
| * 2e487c0f apparmor: shift ouid when mediating hard links in userns
| * ef8814a9 rtc: ds1307: handle oscillator stop flag (OSF) for ds1341
| * 6e3733fe i3c: add missing include to internal header
| * 6dd90afb module: Prevent silent truncation of module name in delete_module(2)
| * d386c8e4 md: dm-zoned-target: Initialize return variable r to avoid uninitialized use
| * b0cab3d9 soundwire: Move handle_nested_irq outside of sdw_dev_lock
| * 1e369757 soundwire: amd: serialize amd manager resume sequence during pm_prepare
| * d2974cfd crypto: octeontx2 - add timeout for load_fvc completion poll
| * ae5a0993 media: uvcvideo: Fix bandwidth issue for Alcor camera
| * 6bbaec6a media: dvb-frontends: w7090p: fix null-ptr-deref in w7090p_tuner_write_serpar and w7090p_tuner_read_serpar
| * 09906650 media: dvb-frontends: dib7090p: fix null-ptr-deref in dib7090p_rw_on_apb()
| * 77ac2add media: usb: hdpvr: disable zero-length read messages
| * 1512ced6 media: tc358743: Increase FIFO trigger level to 374
| * 9b023149 media: tc358743: Return an appropriate colorspace from tc358743_set_fmt
| * 5c809ef8 media: tc358743: Check I2C succeeded during probe
| * 815cb581 pinctrl: stm32: Manage irq affinity settings
| * 67bca5b0 scsi: mpi3mr: Correctly handle ATA device errors
| * 80726da5 scsi: mpt3sas: Correctly handle ATA device errors
| * 92422682 power: supply: qcom_battmgr: Add lithium-polymer entry
| * 7925dd68 scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure
* | 26e3f4bd Merge 8c449e58 ("RDMA/core: reduce stack using in nldev_stat_get_doit()") into android15-6.6-lts
|\|
| * 8c449e58 RDMA/core: reduce stack using in nldev_stat_get_doit()
| * 89fdac33 RDMA: hfi1: fix possible divide-by-zero in find_hw_thread_mask()
| * 773612b1 dmaengine: stm32-dma: configure next sg only if there are more than 2 sgs
| * 01c412e3 leds: leds-lp50xx: Handle reg to get correct multi_index
| * 07cba889 media: v4l2-common: Reduce warnings about missing V4L2_CID_LINK_FREQ control
| * f54eacb5 MIPS: lantiq: falcon: sysctrl: fix request memory check logic
| * f22de202 MIPS: Don't crash in stack_top() for tasks without ABI or vDSO
| * 9021924d crypto: jitter - fix intermediary handling
| * 173cfd74 jfs: upper bound check of tree index in dbAllocAG
| * 78989af5 jfs: Regular file corruption check
| * 34d8e982 jfs: truncate good inode pages when hard link is 0
| * 39cfe2c8 scsi: bfa: Double-free fix
| * 2b98d2c2 watchdog: iTCO_wdt: Report error if timeout configuration fails
| * 7fe9533f MIPS: vpe-mt: add missing prototypes for vpe_{alloc,start,stop,free}
| * 6caa737a clk: qcom: ipq5018: keep XO clock always on
| * 16e24517 hwmon: (emc2305) Set initial PWM minimum value during probe based on thermal state
| * d202efb1 watchdog: dw_wdt: Fix default timeout
| * 478bd3bc fs/orangefs: use snprintf() instead of sprintf()
| * 66a373f5 scsi: libiscsi: Initialize iscsi_conn->dd_data only if memory is allocated
| * 4db46a83 phy: rockchip-pcie: Properly disable TEST_WRITE strobe signal
| * 41368857 mfd: axp20x: Set explicit ID for AXP313 regulator
| * 6c9e12fe clk: tegra: periph: Fix error handling and resolve unsigned compare warning
| * d960f4b7 ext4: do not BUG when INLINE_DATA_FL lacks system.data xattr
| * de6af003 crypto: hisilicon/hpre - fix dma unmap sequence
| * cbe740de fbdev: fix potential buffer overflow in do_register_framebuffer()
| * 6daa13c2 cifs: Fix calling CIFSFindFirst() for root path without msearch
| * 74e7af83 watchdog: sbsa: Adjust keepalive timeout to avoid MediaTek WS0 race condition
| * 3a5236c6 drm/amd/display: Avoid configuring PSR granularity if PSR-SU not supported
| * 8708914f drm/amd/display: Only finalize atomic_obj if it was initialized
| * 110822d3 vhost: fail early when __vhost_add_used() fails
| * c2bdb45f vsock/virtio: Resize receive buffers so that each SKB fits in a 4K page
| * bc9ef978 net: dsa: b53: fix IP_MULTICAST_CTRL on BCM5325
| * e7a37545 rcu: Fix rcu_read_unlock() deadloop due to IRQ work
| * 58ed3ac8 drm/ttm: Respect the shrinker core free target
| * 39de3ce6 drm/amd/display: Avoid trying AUX transactions on disconnected ports
| * d02ee5ee selftests/bpf: Fix a user_ringbuf failure with arm64 64KB page size
* | f638639f Revert "neighbour: add support for NUD_PERMANENT proxy entries"
* | 7adc6475 Merge c03a532f ("bpf: Make reg_not_null() true for CONST_PTR_TO_MAP") into android15-6.6-lts
|\|
| * c03a532f bpf: Make reg_not_null() true for CONST_PTR_TO_MAP
| * 86f3cff5 uapi: in6: restore visibility of most IPv6 socket options
| * 3c9ca275 drm/ttm: Should to return the evict error
| * e4b67ceb drm: renesas: rz-du: mipi_dsi: Add min check for VCLK range
| * 1df5e6eb net: ncsi: Fix buffer overflow in fetching version id
| * 859c54bb ionic: clean dbpage in de-init
| * ec33caca wifi: rtlwifi: fix possible skb memory leak in _rtl_pci_init_one_rxdesc()
| * c2e719bc ptp: Use ratelimite for freerun error message
| * 868b5265 bpftool: Fix JSON writer resource leak in version command
| * d930e738 net: dsa: b53: prevent SWITCH_CTRL access on BCM5325
| * 8609f3c4 net: dsa: b53: prevent DIS_LEARNING access on BCM5325
| * bc0e01d6 net: dsa: b53: prevent GMII_PORT_OVERRIDE_CTRL access on BCM5325
| * 668280aa net: dsa: b53: fix b53_imp_vlan_setup for BCM5325
| * 7f36d13d gve: Return error for unknown admin queue command
| * a1172cbf net: vlan: Replace BUG() with WARN_ON_ONCE() in vlan_dev_* stubs
| * 8d1f4798 net: vlan: Make is_vlan_dev() a stub when VLAN is not configured
| * 63acb8e2 drm/amd: Allow printing VanGogh OD SCLK levels without setting dpm to manual
| * 50dbeff4 dpaa_eth: don't use fixed_phy_change_carrier
| * 7c299d0b neighbour: add support for NUD_PERMANENT proxy entries
| * a70c3141 wifi: iwlegacy: Check rate_idx range after addition
| * ad8742e2 netmem: fix skb_frag_address_safe with unreadable skbs
| * 88517afa powerpc: floppy: Add missing checks after DMA map
| * eb1e1526 wifi: ath12k: Decrement TID on RX peer frag setup error handling
| * 9874a00b wifi: ath12k: Enable REO queue lookup table feature on QCN9274 hw2.0
| * afb39537 wifi: rtlwifi: fix possible skb memory leak in `_rtl_pci_rx_interrupt()`.
| * c387d8fc wifi: mac80211: update radar_required in channel context after channel switch
| * cf48c230 drm/amd/display: Fix 'failed to blank crtc!'
| * c43b6b0a wifi: iwlwifi: fw: Fix possible memory leak in iwl_fw_dbg_collect
| * 83aba958 wifi: iwlwifi: dvm: fix potential overflow in rs_fill_link_cmd()
| * 5c942d80 wifi: ath12k: Add memset and update default rate value in wmi tx completion
| * 9febff30 drm/amd/display: Separate set_gsl from set_gsl_source_select
| * f2a4ca53 net: fec: allow disable coalescing
| * b3472b9d net: atlantic: add set_power to fw_ops for atl2 to fix wol
* | 469f86f5 ANDROID: GKI: add ww_mutex_trylock to db845c symbol list
* | b6cea550 Revert "xfrm: Duplicate SPI Handling"
* | ff2119ff Merge 3d8090bb ("xfrm: Duplicate SPI Handling") into android15-6.6-lts
|\|
| * 3d8090bb xfrm: Duplicate SPI Handling
| * 81667abe net: thunderbolt: Fix the parameter passing of tb_xdomain_enable_paths()/tb_xdomain_disable_paths()
| * 99f142ec net: thunderbolt: Enable end-to-end flow control also in transmit
| * bdd66b91 kselftest/arm64: Specify SVE data when testing VL set in sve-ptrace
| * b6c39aaa wifi: mt76: mt7915: mcu: re-init MCU before loading FW patch
| * 51eb6a5f wifi: rtw89: Disable deep power saving for USB/SDIO
| * ecf449ef wifi: rtw89: Fix rtw89_mac_power_switch() for USB
| * f3d4fa12 drm/msm: use trylock for debugfs
| * e457e056 wifi: mac80211: fix rx link assignment for non-MLO stations
| * f7bc5092 ipv6: mcast: Check inet6_dev->dead under idev->mc_lock in __ipv6_dev_mc_inc().
| * 5a9b2180 (powerpc/512) Fix possible `dma_unmap_single()` on uninitialized pointer
| * ffa3a800 wifi: mac80211: don't complete management TX on SAE commit
| * c73e54db sched/fair: Bump sd->max_newidle_lb_cost when newidle balance fails
| * 3f8bcc32 s390/stp: Remove udelay from stp_sync_clock()
| * 11238e68 wifi: iwlwifi: mvm: fix scan request validation
| * 6cd174be um: Re-evaluate thread flags repeatedly
| * dae6099e wifi: iwlwifi: mvm: set gtk id also in older FWs
| * 8baba93e perf/cxlpmu: Remove unintended newline from IRQ name format string
| * 05ee035a net: phy: micrel: Add ksz9131_resume()
| * fd6a2163 net: thunderx: Fix format-truncation warning in bgx_acpi_match_id()
| * c133a932 net: ipv4: fix incorrect MTU in broadcast routes
| * 60690883 wifi: cfg80211: Fix interface type validation
| * a4d2cdb3 net: mctp: Prevent duplicate binds
| * b55947b7 rcu: Protect ->defer_qs_iw_pending from data race
| * e4246534 arm64: Mark kernel as tainted on SAE and SError panic
| * ac361868 net/mlx5e: Properly access RCU protected qdisc_sleeping variable
| * d1c8d242 net: ag71xx: Add missing check after DMA map
| * b0862e88 et131x: Add missing check after DMA map
| * 72cdcaeaa95b wifi: rtw89: Lower the timeout in rtw89_fw_read_c2h_reg() for USB
| * b16dfa7b4c94 be2net: Use correct byte order and format string for TCP seq and ack_seq
| * d46484e9dbb2 s390/time: Use monotonic clock in get_cycles()
| * 65b7c838736d wifi: cfg80211: reject HTC bit for management frames
| * 7eb1e485bc84 ktest.pl: Prevent recursion of default variable options
| * 30cad8797805 wifi: ath12k: Correct tid cleanup when tid setup fails
| * 5d3559880e9c net: usb: cdc-ncm: check for filtering capability
| * 8f5015143227 xen/netfront: Fix TX response spurious interrupts
| * 5ac23fc080be Bluetooth: hci_sock: Reset cookie to zero in hci_sock_free_cookie()
| * b84f88749ecf powerpc/thp: tracing: Hide hugepage events under CONFIG_PPC_BOOK3S_64
| * 245d23754f5b ASoC: qcom: use drvdata instead of component to keep id
| * c3d3492b12dd ASoC: codecs: rt5640: Retry DEVICE_ID verification
| * 70b3c831cfea iio: adc: ad7768-1: Ensure SYNC_IN pulse minimum timing requirement
* | bed39ff3329d Merge 2925edfa98f7 ("ALSA: usb-audio: Avoid precedence issues in mixer_quirks macros") into android15-6.6-lts
|/
* 2925edfa98f7 ALSA: usb-audio: Avoid precedence issues in mixer_quirks macros
* 2f81d6e98f32 ALSA: pcm: Rewrite recalculate_boundary() to avoid costly loop
* 0de69bc9b366 ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control
* 7731b7d596c5 platform/chrome: cros_ec_typec: Defer probe on missing EC parent
* 8c046583a234 platform/x86: thinkpad_acpi: Handle KCOV __init vs inline mismatches
* c2c252d2c180 soc: qcom: mdt_loader: Actually use the e_phoff
* 7589729947aa imx8m-blk-ctrl: set ISI panic write hurry level
* ac62b8f82b24 pm: cpupower: Fix the snapshot-order of tsc,mperf, clock in mperf_stop()
* 454a27cbab9b usb: core: usb_submit_urb: downgrade type check
* 0455858931ff usb: typec: intel_pmc_mux: Defer probe if SCU IPC isn't present
* 41f53afe53a5 ASoC: core: Check for rtd == NULL in snd_soc_remove_pcm_runtime()
* 789aa0b98854 ALSA: intel8x0: Fix incorrect codec index usage in mixer for ICH4
* 2828f2c4f2e9 ASoC: hdac_hdmi: Rate limit logging on connection and disconnection
* b80d6972859b x86/bugs: Avoid warning when overriding return thunk
* 16cdf4f5b959 ALSA: hda: Disable jack polling at shutdown
* 240e611b784d ALSA: hda: Handle the jack polling always via a work
* d54d1405f2c6 mmc: rtsx_usb_sdmmc: Fix error-path in sd_set_power_mode()
* 24f4ceeaeee7 mei: bus: Check for still connected devices in mei_cl_bus_dev_release()
* a29868db6dcf char: misc: Fix improper and inaccurate error code returned by misc_init()
* f8818e29d268 reset: brcmstb: Enable reset drivers for ARCH_BCM2835
* ff28f5dc3872 pps: clients: gpio: fix interrupt handling order in remove path
* d9d611639bea ACPI: APEI: GHES: add TAINT_MACHINE_CHECK on GHES panic path
* d3dd520206bd mmc: sdhci-msm: Ensure SD card power isn't ON when card removed
* f95174d4d5c4 ACPI: processor: fix acpi_object initialization
* e656c2db4922 PM: sleep: console: Fix the black screen issue
* 753cd9f3d396 thermal: sysfs: Return ENODATA instead of EAGAIN for reads
* 64d78290599a PM: runtime: Clear power.needs_force_resume in pm_runtime_reinit()
* 5aa770f45da7 firmware: tegra: Fix IVC dependency problems
* ab3bf61d9351 ACPI: PRM: Reduce unnecessary printing to avoid user confusion
* 783a726d509e selftests: tracing: Use mutex_unlock for testing glob filter
* 6ec6282acd89 tools/build: Fix s390(x) cross-compilation with clang
* 46b3a7a3a36d ARM: tegra: Use I/O memcpy to write to IRAM
* 149b733d5f80 gpio: tps65912: check the return value of regmap_update_bits()
* 3c3454b02c62 iio: adc: ad_sigma_delta: don't overallocate scan buffer
* 0a4757bf988e tools/nolibc: define time_t in terms of __kernel_old_time_t
* 58a39eda7f95 thermal/drivers/qcom-spmi-temp-alarm: Enable stage 2 shutdown when required

Change-Id: Ibc29a81d6de3a0b9f14a97b4c79f4ef877dbdc67
Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>