Merge tag 'android15-6.6.87_r00' into android15-6.6

This merges the android15-6.6.87_r00 tag into the android15-6.6 branch,
catching it up with the latest LTS releases.

It contains the following commits:

* 9eb342a0 Revert "tracing: Allow creating instances with specified system events"
* 87e6b946 Revert "tracing: Switch trace_events_hist.c code over to use guard()"
* ef68e40e Revert "tracing/hist: Add poll(POLLIN) support on hist file"
* 2b3836f8 Revert "tracing/hist: Support POLLPRI event for poll on histogram"
* 4c08c7ca Revert "tracing: Correct the refcount if the hist/hist_debug file fails to open"
* 6702b1e2 Revert "of: property: Increase NR_FWNODE_REFERENCE_ARGS"
* 9efb6d85 Revert "RDMA/core: Don't expose hw_counters outside of init net namespace"
* 8d5ae9a6 Revert "can: statistics: use atomic access in hot path"
*   17c7ed15 Merge 6.6.87 into android15-6.6-lts
|\
| * 814637ca Linux 6.6.87
| * 47ee8328 tracing: Do not use PERF enums when perf is not defined
| * 661f09d3 NFSD: Skip sending CB_RECALL_ANY when the backchannel isn't up
| * 9a81cde8 nfsd: put dl_stid if fail to queue dl_recall
| * 15483afb media: streamzap: fix race between device disconnection and urb callback
| * 753a620a exec: fix the racy usage of fs_struct->in_exec
| * 72a3b5c3 jfs: add index corruption check to DT_GETPAGE()
| * a8c31808 jfs: fix slab-out-of-bounds read in ea_get()
| * 52a5509a ext4: fix OOB read when checking dotdot dir
| * d12a6016 ext4: don't over-report free space or inodes in statvfs
| * 617a4b00 arm64: Don't call NULL in do_compat_alignment_fixup()
| * 77029c61 tracing/osnoise: Fix possible recursive locking for cpus_read_lock()
| * fad52c9a tracing: Fix synth event printk format for str fields
| * fc128e85 tracing: Ensure module defining synth event cannot be unloaded while tracing
| * 099ef338 tracing: Fix use-after-free in print_graph_function_flags during tracer switching
| * 0e36a3e0 ksmbd: validate zero num_subauth before sub_auth is accessed
| * 3980770c ksmbd: fix session use-after-free in multichannel connection
| * a8a8ae30 ksmbd: fix use-after-free in ksmbd_sessions_deregister()
| * 60b72078 ksmbd: add bounds check for create lease context
| * 8d4848c4 ksmbd: add bounds check for durable handle context
| * 68d64f73 mmc: sdhci-omap: Disable MMC_CAP_AGGRESSIVE_PM for eMMC/SD
| * d8d7b505 mmc: sdhci-pxav3: set NEED_RSP_BUSY capability
| * 261f5177 mmc: omap: Fix memory leak in mmc_omap_new_slot
| * 90bcdefe ACPI: resource: Skip IRQ override on ASUS Vivobook 14 X1404VAP
| * c90402d2 acpi: nfit: fix narrowing conversion in acpi_nfit_ctl
| * 7085895c x86/mm: Fix flush_tlb_range() when used for zapping normal PMDs
| * e329d137 x86/tsc: Always save/restore TSC sched_clock() on suspend/resume
| * 67e4ca7d btrfs: handle errors from btrfs_dec_ref() properly
| * 99ddb9c5 kunit/overflow: Fix UB in overflow_allocation_test
| * e7f6922c perf/x86/intel: Avoid disable PMU if !cpuc->enabled in sample read
| * 79159fbd perf/x86/intel: Apply static call for drain_pebs
| * 2e6df032 ntb_perf: Delete duplicate dmaengine_unmap_put() call in perf_copy_chunk()
| * 3820d20d platform/x86: ISST: Correct command storage data length
| * b1a67385 ACPI: x86: Extend Lenovo Yoga Tab 3 quirk with skip GPIO event-handlers
| * 763f4d63 x86/microcode/AMD: Fix __apply_microcode_amd()'s return value
| * 10edc4ce x86/hyperv: Fix check of return value from snp_set_vmsa()
| * 7cf8fe2b LoongArch: BPF: Use move_addr() for BPF_PSEUDO_FUNC
| * 7df26962 LoongArch: BPF: Don't override subprog's return value
| * b3ffad2f LoongArch: BPF: Fix off-by-one error in build_prologue()
| * 279ec25c LoongArch: Increase ARCH_DMA_MINALIGN up to 16
| * acacd48a usbnet:fix NPE during rx_complete
| * 032c5407 drm/amd/display: Check link_index before accessing dc->links[]
| * 41a2c7ab tracing: Correct the refcount if the hist/hist_debug file fails to open
| * d24e5e63 tracing/hist: Support POLLPRI event for poll on histogram
| * 13edaf99 tracing/hist: Add poll(POLLIN) support on hist file
| * 77b7dbd3 tracing: Switch trace_events_hist.c code over to use guard()
| * f568fbe8 tracing: Allow creating instances with specified system events
| * 1913adb5 perf/core: Fix child_total_time_enabled accounting bug at task exit
| * 40316f29 drm/amdgpu/gfx11: fix num_mec
| * 1e458c29 net: ibmveth: make veth_pool_store stop hanging
| * ececf8ef arcnet: Add NULL check in com20020pci_probe()
| * fa2f9fc3 ipv6: Do not consider link down nexthops in path selection
| * 21f678f6 ipv6: Start path selection from the first nexthop
| * 5a2976cc net: fix geneve_opt length integer overflow
| * 0ae509b0 net: dsa: mv88e6xxx: propperly shutdown PPU re-enable timer on destroy
| * fbab7bbf ipv6: fix omitted netlink attributes when using RTEXT_FILTER_SKIP_STATS
| * 28d88ee1 netfilter: nft_tunnel: fix geneve_opt type confusion addition
| * ccc331fd net: decrease cached dst counters in dst_release
| * 85869532 tunnels: Accept PACKET_HOST in skb_tunnel_check_pmtu().
| * b0a1055e vsock: avoid timeout during connect() if the socket is closing
| * aeef6456 udp: Fix memory accounting leak.
| * 5b0ae172 net: mvpp2: Prevent parser TCAM memory corruption
| * 864ca690 net_sched: skbprio: Remove overly strict queue assertions
| * 1927d0bc netlabel: Fix NULL pointer exception caused by CALIPSO on IPv4 sockets
| * 6134d1ea netfilter: nf_tables: don't unregister hook when table is dormant
| * 073b0479 netfilter: nft_set_hash: GC reaps elements with conncount for dynamic sets only
| * aff18605 e1000e: change k1 configuration on MTP and later platforms
| * e283a5bf ASoC: imx-card: Add NULL check in imx_card_probe()
| * 8db65e44 riscv: Fix hugetlb retrieval of number of ptes in case of !present pte
| * 99267842 ASoC: codecs: rt5665: Fix some error handling paths in rt5665_probe()
| * a59594c3 x86/uaccess: Improve performance by aligning writes to 8 bytes in copy_user_generic(), on non-FSRM/ERMS CPUs
| * f7a53d32 RISC-V: errata: Use medany for relocatable builds
| * b52e13bf ALSA: hda/realtek: Fix built-in mic breakage on ASUS VivoBook X515JA
| * c37616f1 firmware: cs_dsp: Ensure cs_dsp_load[_coeff]() returns 0 on success
| * 830169a5 ntb: intel: Fix using link status DB's
| * c61a3f2d ntb_hw_switchtec: Fix shift-out-of-bounds in switchtec_ntb_mw_set_trans
| * 2174fa13 riscv: ftrace: Add parentheses in macro definitions of make_call_t0 and make_call_ra
| * 239ea3c3 spufs: fix a leak in spufs_create_context()
| * 324f2808 spufs: fix gang directory lifetimes
| * 90d1b276 spufs: fix a leak on spufs_new_file() failure
| * 6e75137a hwmon: (nct6775-core) Fix out of bounds access for NCT679{8,9}
| * aaf534ad memory: omap-gpmc: drop no compatible check
| * 68adc6f1 can: statistics: use atomic access in hot path
| * 2a435a8c ALSA: hda/realtek: Add mute LED quirk for HP Pavilion x360 14-dy1xxx
| * 05413508 drm/amd: Keep display off while going into S4
| * 5272e986 nvme-pci: fix stuck reset on concurrent DPC and HP
| * d276f405 x86/sgx: Warn explicitly if X86_FEATURE_SGX_LC is not enabled
| * 83fa62a0 x86/hyperv: Fix output argument to hypercall that changes page visibility
| * e7d8c570 locking/semaphore: Use wake_q to wake up processes outside lock critical section
| * e87b8f20 wifi: mac80211: flush the station before moving it to UN-AUTHORIZED state
| * c0863207 x86/hyperv/vtl: Stop kernel from probing VTL0 low memory
| * 0ada8048 sched/deadline: Use online cpus for validating runtime
| * 264f9a79 ALSA: hda/realtek: Add support for ASUS Zenbook UM3406KA Laptops using CS35L41 HDA
| * b9fa3901 ALSA: hda/realtek: Add support for ASUS ROG Strix G614 Laptops using CS35L41 HDA
| * 4c886533 HID: i2c-hid: improve i2c_hid_get_report error message
| * 64f97446 platform/x86/intel/vsec: Add Diamond Rapids support
| * 84d6da67 platform/x86: intel-hid: fix volume buttons on Microsoft Surface Go 4 tablet
| * fa19b537 cifs: fix incorrect validation for num_aces field of smb_acl
| * 68ee6f71 perf/core: Fix perf_pmu_register() vs. perf_init_event()
| * 11e2ae4f ALSA: hda: Fix speakers on ASUS EXPERTBOOK P5405CSA 1.0
| * fc424138 ALSA: hda/realtek: Fix Asus Z13 2025 audio
| * 54fd5a5b affs: don't write overlarge OFS data block size fields
| * 9fcab9c7 affs: generate OFS sequence numbers starting at 1
| * ec7315e6 wifi: brcmfmac: keep power during suspend if board requires it
| * d9189555 nvme-pci: skip CMB blocks incompatible with PCI P2P DMA
| * a74dad10 nvme-pci: clean up CMBMSC when registering CMB fails
| * 9ca8c6f6 nvme-tcp: fix possible UAF in nvme_tcp_poll
| * 60856e6c wifi: iwlwifi: mvm: use the right version of the rate API
| * aadb8a9a wifi: iwlwifi: fw: allocate chained SG tables for dump
| * a3160e7f rcu-tasks: Always inline rcu_irq_work_resched()
| * 0a0813d1 context_tracking: Always inline ct_{nmi,irq}_{enter,exit}()
| * 69824323 sched/smt: Always inline sched_smt_active()
| * 7ae00d29 objtool: Fix verbose disassembly if CROSS_COMPILE isn't set
| * 08796bd2 octeontx2-af: Free NIX_AF_INT_VEC_GEN irq
| * aa042c45 octeontx2-af: Fix mbox INTR handler when num VFs > 64
| * f9b61f83 ACPI: processor: idle: Return an error if both P_LVL{2,3} idle states are invalid
| * d32f2047 LoongArch: Rework the arch_kgdb_breakpoint() implementation
| * 37319d6d LoongArch: Fix help text of CMDLINE_EXTEND in Kconfig
| * 8f77c286 objtool: Fix segfault in ignore_unreachable_insn()
| * de37b82b ring-buffer: Fix bytes_dropped calculation issue
| * 17e3c520 net/mlx5e: SHAMPO, Make reserved size independent of page size
| * 4790bcb2 ksmbd: fix r_count dec/increment mismatch
| * a32086cc ksmbd: fix multichannel connection failure
| * 1de7fec4 ksmbd: use aead_request_free to match aead_request_alloc
| * 8857aada rndis_host: Flag RNDIS modems as WWAN devices
| * 15f15077 rtnetlink: Allocate vfinfo size for VF GUIDs when supported
| * af089264 exfat: fix the infinite loop in exfat_find_last_cluster()
| * c6b6b8dc smb: client: Fix netns refcount imbalance causing leaks and use-after-free
| * d7ca0969 NFS: Shut down the nfs_client only after all the superblocks
| * 75b42dfe objtool, media: dib8000: Prevent divide-by-zero in dib8000_set_dds()
| * f2dc3c3b perf tools: annotate asm_pure_loop.S
| * e6fe7f82 fs/procfs: fix the comment above proc_pid_wchan()
| * 0a3bf3bc tty: n_tty: use uint for space returned by tty_write_room()
| * 357c1a3d staging: rtl8723bs: select CONFIG_CRYPTO_LIB_AES
| * 769a0f18 perf python: Check if there is space to copy all the event
| * 88f5dd00 perf python: Don't keep a raw_data pointer to consumed ring buffer space
| * 6bc0c3e7 perf python: Decrement the refcount of just created event on failure
| * b8e2e2cf perf python: Fixup description of sample.id event member
| * 9c764db1 i3c: master: svc: Fix missing the IBI rules
| * 4ee8160c um: hostfs: avoid issues on inode number reuse by host
| * c9a6cf3f um: remove copy_from_kernel_nofault_allowed
| * 5e06e641 selftests/mm/cow: fix the incorrect error handling
| * db75d49a fuse: fix dax truncate/punch_hole fault path
| * 4e2a03d7 NFSv4: Don't trigger uneccessary scans for return-on-close delegations
| * d03ce460 arch/powerpc: drop GENERIC_PTDUMP from mpc885_ads_defconfig
| * 3d012ba4 ocfs2: validate l_tree_depth to avoid out-of-bounds access
| * 8c69e830 kexec: initialize ELF lowest address to ULONG_MAX
| * 4159cb40 kernel/events/uprobes: handle device-exclusive entries correctly in __replace_page()
| * fa55abb9 perf units: Fix insufficient array space
| * 8a832ed0 perf evlist: Add success path to evlist__create_syswide_maps
| * 1f562f8e iio: adc: ad7124: Fix comparison of channel configs
| * a2ae5afa iio: adc: ad4130: Fix comparison of channel setups
| * cb7687e3 dmaengine: fsl-edma: cleanup chan after dma_async_device_unregister
| * f6d44b1a fs/ntfs3: Prevent integer overflow in hdr_first_de()
| * 0dfe700f fs/ntfs3: Fix a couple integer overflows on 32bit systems
| * 0566a11d usb: xhci: correct debug message page size calculation
| * fe2ada4e perf bench: Fix perf bench syscall loop count
| * 31ebc570 perf arm-spe: Fix load-store operation checking
| * d3f0bad2 iio: accel: msa311: Fix failure to release runtime pm if direct mode claim fails.
| * 2d8c171e iio: accel: mma8452: Ensure error return on failure to matching oversampling ratio
| * 1287c788 ucsi_ccg: Don't show failed to get FW build information error
| * d2b1ee18 perf pmu: Don't double count common sysfs and json events
| * a8b3879b coresight-etm4x: add isb() before reading the TRCSTATR
| * 2b34bdc4 vhost-scsi: Fix handling of multiple calls to vhost_scsi_set_endpoint
| * 01592ce1 coresight: catu: Fix number of pages while using 64k pages
| * b302c4d3 soundwire: slave: fix an OF node reference leak in soundwire slave device
| * 98fa452d isofs: fix KMSAN uninit-value bug in do_isofs_readdir()
| * 6258b8ac perf stat: Fix find_stat for mixed legacy/non-legacy events
| * a7bae9f7 clk: qcom: mmcc-sdm660: fix stuck video_subcore0 clock
| * f2176ab4 pinctrl: intel: Fix wrong bypass assignment in intel_pinctrl_probe_pwm()
| * 75f095da crypto: hisilicon/sec2 - fix for aead auth key length
| * b6fc1fdd x86/dumpstack: Fix inaccurate unwinding from exception stacks due to misplaced assignment
| * 966fdfc4 leds: Fix LED_OFF brightness race
| * d6f517e8 mfd: sm501: Switch to BIT() to mitigate integer overflows
| * 7d8e0ac2 pinctrl: renesas: rzv2m: Fix missing of_node_put() call
| * 7c51a696 RDMA/mlx5: Fix mlx5_poll_one() cur_qp update flow
| * c4db297e crypto: nx - Fix uninitialised hv_nxc on error
| * a278a416 power: supply: max77693: Fix wrong conversion of charge input threshold value
| * 02586692 x86/entry: Fix ORC unwinder for PUSH_REGS with save_ret=1
| * 3d390227 clk: amlogic: g12a: fix mmc A peripheral clock
| * c6f63ae9 clk: clk-imx8mp-audiomix: fix dsp/ocram_a clock parents
| * 48e5f4fd selftests/bpf: Select NUMA_NO_NODE to create map
| * 7061afac clk: amlogic: gxbb: drop non existing 32k clock parent
| * b36254e8 clk: amlogic: g12b: fix cluster A parent data
| * 4dc22562 pinctrl: tegra: Set SFIO mode to Mux Register
| * 5fa3bfd3 IB/mad: Check available slots before posting receive WRs
| * 1b2641d1 remoteproc: qcom_q6v5_mss: Handle platforms with one power domain
| * 667a628a RDMA/erdma: Prevent use-after-free in erdma_accept_newconn()
| * 68438629 RDMA/mlx5: Fix calculation of total invalidated pages
| * 0cf80f92 RDMA/core: Don't expose hw_counters outside of init net namespace
| * 02527e62 clk: rockchip: rk3328: fix wrong clk_ref_usb3otg parent
| * 622d52c9 pinctrl: renesas: rzg2l: Fix missing of_node_put() call
| * 182ae87e pinctrl: renesas: rza2: Fix missing of_node_put() call
| * 77461377 lib: 842: Improve error handling in sw842_compress()
| * 43681d60 bpf: Use preempt_count() directly in bpf_send_signal_common()
| * 8e3e2112 remoteproc: qcom_q6v5_pas: Use resource with CX PD for MSM8226
| * b32da6cf RDMA/mana_ib: Ensure variable err is initialized
| * db6f0b88 clk: qcom: gcc-msm8953: fix stuck venus0_core0 clock
| * 4d29a6dc clk: samsung: Fix UBSAN panic in samsung_clk_init()
| * b07398e8 x86/mm/pat: Fix VM_PAT handling when fork() fails in copy_page_range()
| * 22280deb selftests/bpf: Fix string read in strncmp benchmark
| * b55c4702 libbpf: Fix hypothetical STT_SECTION extern NULL deref case
| * 5db89780 remoteproc: qcom_q6v5_pas: Make single-PD handling more robust
| * ba1a885c of: property: Increase NR_FWNODE_REFERENCE_ARGS
| * 7c6bb82a remoteproc: core: Clear table_sz when rproc_shutdown
| * 8594bbff crypto: hisilicon/sec2 - fix for sec spec check
| * 0aafd0ec crypto: hisilicon/sec2 - fix for aead authsize alignment
| * 2ff09de2 clk: amlogic: gxbb: drop incorrect flag on 32k clock
| * ce88afbc fbdev: sm501fb: Add some geometry checks.
| * 6ed70f3d mdacon: rework dependency list
| * 88ebc63d fbdev: au1100fb: Move a variable assignment behind a null pointer check
| * f6c1a08e PCI: pciehp: Don't enable HPIE when resuming in poll mode
| * cbcb02cc PCI: histb: Fix an error handling path in histb_pcie_probe()
| * b3a93a24 drm/amd/display: avoid NPD when ASIC does not support DMUB
| * 39030403 drm/mediatek: dsi: fix error codes in mtk_dsi_host_transfer()
| * 13ec849f drm/mediatek: dp: drm_err => dev_err in HPD path to avoid NULL ptr
| * 48b5e31b PCI: xilinx-cpm: Fix IRQ domain leak in error path of probe
| * 74578330 PCI: Remove stray put_device() in pci_register_host_bridge()
| * d5563f12 drm/amd/display: fix type mismatch in CalculateDynamicMetadataParameters()
| * 431f5106 PCI: Avoid reset when disabled via sysfs
| * 0aad0d29 PCI/portdrv: Only disable pciehp interrupts early when needed
| * eeeac24b PCI: brcmstb: Fix potential premature regulator disabling
| * eedd0548 PCI: brcmstb: Fix error path after a call to regulator_bulk_get()
| * 8b2853fd PCI: brcmstb: Use internal register to change link capability
| * 17a37367 PCI: cadence-ep: Fix the driver to send MSG TLP for INTx without data payload
| * 0f88894a drm/amdkfd: Fix Circular Locking Dependency in 'svm_range_cpu_invalidate_pagetables'
| * a984e610 drm/msm/dsi: Set PHY usescase (and mode) before registering DSI host
| * 7570e569 drm/msm/dsi: Use existing per-interface slice count in DSC timing
| * 45e03341 drm/msm/dpu: don't use active in atomic_check()
| * 8b930ddc PCI/ASPM: Fix link state exit during switch upstream function removal
| * 9c44e29c drm/mediatek: mtk_hdmi: Fix typo for aud_sampe_size member
| * 34c1720a drm/mediatek: mtk_hdmi: Unregister audio platform device on failure
| * 347641b0 PCI: Use downstream bridges for distributing resources
| * 561fc0c5 drm/vkms: Fix use after free and double free on init error
| * e2b31071 drm: xlnx: zynqmp: Fix max dma segment size
| * d360c02c drm/bridge: it6505: fix HDCP V match check is not performed correctly
| * c3b8e7c6 drm/dp_mst: Fix drm RAD print
| * 8830a2a3 drm/bridge: ti-sn65dsi86: Fix multiple instances
| * 1b5f3dc4 ASoC: ti: j721e-evm: Fix clock configuration for ti,j7200-cpb-audio compatible
| * a589f15d ALSA: hda/realtek: Always honor no_shutup_pins
| * f8e2e91b dt-bindings: vendor-prefixes: add GOcontroll
| * ba65e56f HID: remove superfluous (and wrong) Makefile entry for CONFIG_INTEL_ISH_FIRMWARE_DOWNLOADER
| * 20bbf66a ASoC: cs35l41: check the return value from spi_setup()
| * 756945c1 platform/x86: dell-ddv: Fix temperature calculation
| * 693b38ee media: platform: allgro-dvt: unregister v4l2_device on the error path
| * 57e257d9 media: verisilicon: HEVC: Initialize start_bit field
| * 63a0b0d0 x86/fpu/xstate: Fix inconsistencies in guest FPU xfeatures
| * 4c94efdc x86/traps: Make exc_double_fault() consistently noreturn
| * 36aee810 perf/ring_buffer: Allow the EPOLLRDNORM flag for poll
| * 477b6882 lockdep: Don't disable interrupts on RT in disable_irq_nosync_lockdep.*()
| * 01c5ab29 PM: sleep: Fix handling devices with direct_complete set on errors
| * ac2eb737 thermal: int340x: Add NULL check for adev
| * 12c5e76a EDAC/ie31200: Fix the error path order of ie31200_init()
| * 9ca0c34a EDAC/ie31200: Fix the DIMM size mask for several SoCs
| * a26d5a10 EDAC/ie31200: Fix the size of EDAC_MC_LAYER_CHIP_SELECT layer
| * 06ca76e7 selinux: Chain up tool resolving errors in install_policy.sh
| * b9ad6385 RISC-V: KVM: Disable the kernel perf counter during configure
| * 3c64a5ba PM: sleep: Adjust check before setting power.must_resume
| * 913b739c lockdep/mm: Fix might_fault() lockdep check of current->mm->mmap_lock
| * 71fc439a x86/sev: Add missing RIP_REL_REF() invocations during sme_enable()
| * 7c376f91 x86/platform: Only allow CONFIG_EISA for 32-bit
| * 2541b0d1 x86/fpu: Avoid copying dynamic FP state from init_task in arch_dup_task_struct()
| * b58c6545 x86/fpu: Fix guest FPU state buffer allocation size
| * f2d51d45 EDAC/{skx_common,i10nm}: Fix some missing error reports on Emerald Rapids
| * 62173b2f cpufreq: governor: Fix negative 'idle_time' handling in dbs_update()
| * f7a1e1c2 smack: dont compile ipv6 code unless ipv6 is configured
| * e4b3585a cpufreq: scpi: compare kHz instead of Hz
| * b8db5776 x86/mm/pat: cpa-test: fix length for CPA_ARRAY test
| * 6dafa277 watch_queue: fix pipe accounting mismatch
* | 259b5bf0 Merge 6.6.86 into android15-6.6-lts
|\|
| * 3fa1ea3e Linux 6.6.86
| * 72a68d2b usb: gadget: uvc: Fix ERR_PTR dereference in uvc_v4l2.c
| * 367a2813 serial: 8250_dma: terminate correct DMA in tx_dma_flush()
| * 6186fb2c memstick: rtsx_usb_ms: Fix slab-use-after-free in rtsx_usb_ms_drv_remove
| * 2beb999f net: usb: usbnet: restore usb%d name exception for local mac addresses
| * 3007115c net: usb: qmi_wwan: add Telit Cinterion FE990B composition
| * ad43b150 net: usb: qmi_wwan: add Telit Cinterion FN990B composition
| * 5ec93d77 tty: serial: fsl_lpuart: disable transmitter before changing RS485 related registers
| * fe14cfba tty: serial: 8250: Add Brainboxes XC devices
| * be28a3da tty: serial: 8250: Add some more device IDs
| * 52eed361 counter: microchip-tcb-capture: Fix undefined counter channel state on probe
| * fa15592e counter: stm32-lptimer-cnt: fix error handling when enabling
| * 835807f5 ALSA: hda/realtek: Support mute LED on HP Laptop 15s-du3xxx
| * 52510415 netfilter: socket: Lookup orig tuple for IPv6 SNAT
| * f16a0970 scsi: ufs: qcom: Only free platform MSIs when ESI is enabled
| * 3918b201 reset: starfive: jh71x0: Fix accessing the empty member on JH7110 SoC
| * 790d3057 mm/page_alloc: fix memory accept before watermarks gets initialized
| * 404d85a7 drm/amd/display: Don't write DP_MSTM_CTRL after LT
| * 5f57a96e drm/dp_mst: Add a helper to queue a topology probe
| * 93ccb0fb drm/dp_mst: Factor out function to queue a topology probe work
| * b9264aa2 drm/amd/display: Check denominator crb_pipes before used
| * ad041034 ARM: Remove address checking for MMUless devices
| * 1809cabf ARM: 9351/1: fault: Add "cut here" line for prefetch aborts
| * fe17c8aa ARM: 9350/1: fault: Implement copy_from_kernel_nofault_allowed()
| * 9da6b634 atm: Fix NULL pointer dereference
| * f99afc59 HID: hid-plantronics: Add mic mute mapping and generalize quirks
| * 8ecdc85b ALSA: usb-audio: Add quirk for Plantronics headsets to fix control names
* | f071db89 Merge 6.6.85 into android15-6.6-lts
|\|
| * d57a7c61 Linux 6.6.85
| * fa81cb19 netfilter: nft_counter: Use u64_stats_t for statistic.
| * 35afffad wifi: iwlwifi: mvm: ensure offloading TID queue exists
| * fd82d29c wifi: iwlwifi: support BIOS override for 5G9 in CA also in LARI version 8
| * 7f306c65 bnxt_en: Fix receive ring space parameters when XDP is active
| * 9dff3e36 btrfs: make sure that WRITTEN is set on all metadata blocks
| * 690597da Revert "sched/core: Reduce cost of sched_move_task when config autogroup"
| * 04cd1dc3 arm64: dts: rockchip: fix u2phy1_host status for NanoPi R4S
* | 49de710f Merge 7d566962 ("KVM: arm64: Eagerly switch ZCR_EL{1,2}") into android15-6.6-lts
|\|
| * 7d566962 KVM: arm64: Eagerly switch ZCR_EL{1,2}
| * 93074abe KVM: arm64: Mark some header functions as inline
| * 2afe0394 KVM: arm64: Refactor exit handlers
| * 30253b3e KVM: arm64: Remove VHE host restore of CPACR_EL1.SMEN
| * 88adb7a0 KVM: arm64: Remove VHE host restore of CPACR_EL1.ZEN
| * 73f64c67 KVM: arm64: Remove host FPSIMD saving for non-protected KVM
| * 806d5c1e KVM: arm64: Unconditionally save+flush host FPSIMD/SVE/SME state
| * 20c6561c KVM: arm64: Calculate cptr_el2 traps on activating traps
* | 7c28850f Merge b44a3782 ("mptcp: Fix data stream corruption in the address announcement") into android15-6.6-lts
|\|
| * b44a3782 mptcp: Fix data stream corruption in the address announcement
| * d0f87370 ksmbd: fix incorrect validation for num_aces field of smb_acl
| * 5e0f5166 drm/amd/display: Use HW lock mgr for PSR1 when only one eDP
| * 7803ca38 drm/amd/display: should support dmub hw lock on Replay
| * 28780816 drm/amdgpu: Fix JPEG video caps max size for navi1x and raven
| * e66a1a61 drm/amdgpu: Fix MPEG2, MPEG4 and VC1 video caps max size
| * c76bd3c9 drm/sched: Fix fence reference count leak
| * 3ce08215 drm/radeon: fix uninitialized size issue in radeon_vce_cs_parse()
| * f2bbfd50 soc: qcom: pdr: Fix the potential deadlock
| * 6e38b4a4 batman-adv: Ignore own maximum aggregation size during RX
| * b7b4be1f xsk: fix an integer overflow in xp_create_and_assign_umem()
| * 19f4e715 efi/libstub: Avoid physical address 0x0 when doing random allocation
| * 0baa10cf ARM: shmobile: smp: Enforce shmobile_smp_* alignment
| * d6274b94 ARM: dts: imx6qdl-apalis: Fix poweroff on Apalis iMX6
| * 63b53198 proc: fix UAF in proc_get_inode()
| * 29124ae9 mm/migrate: fix shmem xarray update during migration
| * 9efb6b50 mm: fix error handling in __filemap_get_folio() with FGP_NOWAIT
| * f42c3618 mmc: atmel-mci: Add missing clk_disable_unprepare()
| * 6d2f8c59 mmc: sdhci-brcmstb: add cqhci suspend/resume to PM ops
| * db59b24b arm64: dts: rockchip: fix pinmux of UART0 for PX30 Ringneck on Haikou
| * 3db71cf0 arm64: dts: freescale: imx8mm-verdin-dahlia: add Microphone Jack to sound card
| * 62b5b2ec arm64: dts: freescale: imx8mp-verdin-dahlia: add Microphone Jack to sound card
| * 4b2a170c accel/qaic: Fix integer overflow in qaic_validate_req()
| * 998b1aae regulator: check that dummy regulator has been probed before using it
| * e26f24ca regulator: dummy: force synchronous probing
| * f793c0fd riscv: dts: starfive: Fix a typo in StarFive JH7110 pin function definitions
| * 7cd375d4 drm/v3d: Don't run jobs that have errors flagged in its fence
| * c8eebc9d can: flexcan: disable transceiver during system PM
| * 6f5481d4 can: flexcan: only change CAN state when link up in system PM
| * cc29775a can: ucan: fix out of bound read in strscpy() source
| * e5e6bd8e can: rcar_canfd: Fix page entries in the AFL list
| * b202afc5 i2c: omap: fix IRQ storms
| * f0372a4c Revert "gre: Fix IPv6 link-local address generation."
| * ae2ec5a5 net/neighbor: add missing policy for NDTPA_QUEUE_LENBYTES
| * e4f6de68 net: lwtunnel: fix recursion loops
| * 9566f6ee net: atm: fix use after free in lec_send()
| * a235ec29 ipv6: Set errno after ip_fib_metrics_init() in ip6_route_info_create().
| * 119dcafe ipv6: Fix memleak of nhc_pcpu_rth_output in fib_check_nh_v6_gw().
| * 1e842b45 ARM: davinci: da850: fix selecting ARCH_DAVINCI_DA8XX
| * 3d123ec7 accel/qaic: Fix possible data corruption in BOs > 2G
| * 59b68359 Bluetooth: hci_event: Fix connection regression between LE and non-LE adapters
| * ecd06ad0 Bluetooth: Fix error code in chan_alloc_skb_cb()
| * 9524af58 RDMA/hns: Fix wrong value of max_sge_rd
| * 0edfba91 RDMA/hns: Fix a missing rollback in error path of hns_roce_create_qp_common()
| * 5df88c38 RDMA/hns: Fix unmatched condition in error path of alloc_user_qp_db()
| * 975355fa RDMA/hns: Fix soft lockup during bt pages loop
| * dba5577d RDMA/bnxt_re: Avoid clearing VLAN_ID mask in modify qp path
| * 1e8d0765 ARM: dts: bcm2711: Don't mark timer regs unconfigured
| * e68954ec ARM: OMAP1: select CONFIG_GENERIC_IRQ_CHIP
| * 0e6aa61b RDMA/mlx5: Handle errors returned from mlx5r_ib_rate()
| * 6a788e32 RDMA/bnxt_re: Add missing paranthesis in map_qp_id_to_tbl_indx
| * 25be7f9b arm64: dts: rockchip: Remove undocumented sdmmc property from lubancat-1
| * 61820187 ARM: dts: bcm2711: PL011 UARTs are actually r1p5
| * 1b7b0366 soc: imx8m: Unregister cpufreq and soc dev in cleanup path
| * 4a58a332 soc: imx8m: Use devm_* to simplify probe failure handling
| * d1fb2e76 soc: imx8m: Remove global soc_uid
| * 8e1704e5 xfrm_output: Force software GSO only in tunnel mode
| * bfb9b940 xfrm: fix tunnel mode TX datapath in packet offload mode
| * e432cb12 arm64: dts: freescale: tqma8mpql: Fix vqmmc-supply
| * 555f05de firmware: imx-scu: fix OF node leak in .probe()
* | 3120fc52 Merge 6.6.84 into android15-6.6-lts
|\|
| * 4b6a8fa7 Linux 6.6.84
| * a561c6a0 netfilter: nf_tables: allow clone callbacks to sleep
| * f6de68e1 netfilter: nf_tables: bail out if stateful expression provides no .clone
| * 7fa2e296 netfilter: nf_tables: use timestamp to check for set element timeout
| * 50b22a98 rust: lockdep: Remove support for dynamically allocated LockClassKeys
| * 812080b0 nvme-tcp: Fix a C2HTermReq error message
| * 62485737 HID: apple: disable Fn key handling on the Omoton KB066
| * a09e085b nvme-fc: rely on state transitions to handle connectivity loss
| * efc30877 Bluetooth: L2CAP: Fix corrupted list in hci_chan_del
| * fb0800cb smb: client: Fix match_session bug preventing session reuse
| * 7dc9abfa smb3: add support for IAKerb
| * 643607a5 stmmac: loongson: Pass correct arg to PCI function
| * 66539277 i2c: sis630: Fix an error handling path in sis630_probe()
| * 9e3bef10 i2c: ali15x3: Fix an error handling path in ali15x3_probe()
| * beb68cfc i2c: ali1535: Fix an error handling path in ali1535_probe()
| * 10cbae84 cifs: Throw -EOPNOTSUPP error on unsupported reparse point type from parse_reparse_point()
| * 474c0871 cifs: Validate content of WSL reparse point buffers
| * 6c13fcb7 cifs: Fix integer overflow while processing closetimeo mount option
| * d5fff81c cifs: Fix integer overflow while processing actimeo mount option
| * 9e438d04 cifs: Fix integer overflow while processing acdirmax mount option
| * 0252c33c cifs: Fix integer overflow while processing acregmax mount option
| * d3f9fdc2 scripts: generate_rust_analyzer: add missing macros deps
| * a7025944 ASoC: codecs: wm0010: Fix error handling path in wm0010_spi_probe()
| * 69a90048 ASoC: rt722-sdca: add missing readable registers
| * 2592a628 rust: init: add missing newline to pr_info! calls
| * f69b8f42 ASoC: cs42l43: Fix maximum ADC Volume
| * b05b5627 drm/gma500: Add NULL check for pci_gfx_root in mid_get_vbt_data()
| * 5da54be4 rust: error: add missing newline to pr_warn! calls
| * 54405532 ASoC: ops: Consistently treat platform_max as control value
| * 86d97d49 mm: split critical region in remap_file_pages() and invoke LSMs in between
| * b2fe954a lib/buildid: Handle memfd_secret() files in build_id_parse()
| * aa4d9b54 rust: init: fix `Zeroable` implementation for `Option<NonNull<T>>` and `Option<KBox<T>>`
| * b78467d3 rust: Disallow BTF generation with Rust + LTO
| * d026392e smb: client: fix regression with guest option
| * 2bff992a qlcnic: fix memory leak issues in qlcnic_sriov_common.c
| * 7b2c29b7 arm64: mm: Populate vmemmap at the page level if not section aligned
| * 818330f7 dm-flakey: Fix memory corruption in optional corrupt_bio_byte feature
| * cfae6a5d ASoC: amd: yc: Support mic on another Lenovo ThinkPad E16 Gen 2 model
| * 4f6c0f75 clk: samsung: update PLL locktime for PLL142XX used on FSD platform
| * 09aeab68 ksmbd: prevent connection release during oplock break notification
| * fb776765 ksmbd: fix use-after-free in ksmbd_free_work_struct
| * 378b361e drm/amd/display: Fix slab-use-after-free on hdcp_work
| * a8f77e16 drm/amd/display: Assign normalized_pix_clk when color depth = 14
| * 8e91a616 drm/amd/display: Restore correct backlight brightness after a GPU reset
| * 8082ca0d drm/amd/display: Disable unneeded hpd interrupts during dm_init
| * b5c28350 drm/dp_mst: Fix locking when skipping CSN before topology probing
| * b3ddebae drm/atomic: Filter out redundant DPMS calls
| * 6736975e drm/i915/cdclk: Do cdclk post plane programming later
| * e686349c x86/microcode/AMD: Fix out-of-bounds on systems with CPU-less NUMA nodes
| * ab0f6e77 USB: serial: option: match on interface class for Telit FN990B
| * 61e54009 USB: serial: option: fix Telit Cinterion FE990A name
| * e1bfbf0f USB: serial: option: add Telit Cinterion FE990B compositions
| * 528ac204 USB: serial: ftdi_sio: add support for Altera USB Blaster 3
| * 392e9b29 Input: i8042 - swap old quirk combination with new quirk for more devices
| * e7c95c01 Input: i8042 - swap old quirk combination with new quirk for several devices
| * e690d0c5 Input: i8042 - add required quirks for missing old boardnames
| * 105a2116 Input: i8042 - swap old quirk combination with new quirk for NHxxRZQ
| * d639d553 Input: xpad - rename QH controller to Legion Go S
| * 0c4484cd Input: xpad - add support for TECNO Pocket Go
| * dc9839dc Input: xpad - add support for ZOTAC Gaming Zone
| * 8cf88f39 Input: xpad - add multiple supported devices
| * 5184e44b Input: xpad - add 8BitDo SN30 Pro, Hyperkin X91 and Gamesir G7 SE controllers
| * 0b5b6512 Input: iqs7222 - preserve system status register
| * cbd68fca Input: ads7846 - fix gpiod allocation
| * 78aefac7 io_uring: fix error pbuf checking
| * 1fdb9c9e io_uring: use unpin_user_pages() where appropriate
* | e9a9efc5 ANDROID: GKI: allow abi break in struct io_ring_ctx
* | 6e54d272 Merge 46b1b3d8 ("io_uring/kbuf: use vm_insert_pages() for mmap'ed pbuf ring") into android15-6.6-lts
|\|
| * 46b1b3d8 io_uring/kbuf: use vm_insert_pages() for mmap'ed pbuf ring
* | 82f1bb9a Merge af8f27ef ("io_uring/kbuf: vmap pinned buffer ring") into android15-6.6-lts
|\|
| * af8f27ef io_uring/kbuf: vmap pinned buffer ring
* | 5e5e14ff Merge 6168ec87 ("io_uring: unify io_pin_pages()") into android15-6.6-lts
|\|
| * 6168ec87 io_uring: unify io_pin_pages()
* | ad8b6d5e Merge 719e745e ("io_uring: use vmap() for ring mapping") into android15-6.6-lts
|\|
| * 719e745e io_uring: use vmap() for ring mapping
* | cdba56b8 Merge b89f95b9 ("io_uring: fix corner case forgetting to vunmap") into android15-6.6-lts
|\|
| * b89f95b9 io_uring: fix corner case forgetting to vunmap
* | ddc77719 Merge a0b21f2a ("io_uring: don't attempt to mmap larger than what the user asks for") into android15-6.6-lts
|\|
| * a0b21f2a io_uring: don't attempt to mmap larger than what the user asks for
* | 2ccdc4d5 Merge 2905c4fe ("io_uring: get rid of remap_pfn_range() for mapping rings/sqes") into android15-6.6-lts
|\|
| * 2905c4fe io_uring: get rid of remap_pfn_range() for mapping rings/sqes
* | a41ceb1f Merge b6690a41 ("mm: add nommu variant of vm_insert_pages()") into android15-6.6-lts
|\|
| * b6690a41 mm: add nommu variant of vm_insert_pages()
| * 0446d868 block: fix 'kmem_cache of name 'bio-108' already exists'
| * 474cebf2 net: Handle napi_schedule() calls from non-interrupt
| * deb9982c drm/nouveau: Do not override forced connector status
| * 47f42722 mptcp: safety check before fallback
| * bb41ef31 x86/irq: Define trace events conditionally
| * cdf7658e perf/x86/intel: Use better start period for frequency mode
| * 791eaeaa drm/vkms: Round fixp2int conversion in lerp_u16
| * fcfb7ea1 fuse: don't truncate cached, mutated symlink
| * 08ee4f87 ASoC: tas2764: Set the SDOUT polarity correctly
| * 6c703cea ASoC: tas2764: Fix power control mask
| * 8f677fb4 ASoC: tas2770: Fix volume scale
| * f33c0908 nvme: only allow entering LIVE from CONNECTING state
| * 6df3939d sctp: Fix undefined behavior in left shift operation
| * d3ca7992 cifs: Treat unhandled directory name surrogate reparse points as mount directory nodes
| * 492be1cd apple-nvme: Release power domains when probe fails
| * bf78e632 nvmet-rdma: recheck queue state is LIVE in state lock in recv done
| * e9764289 nvme-tcp: add basic support for the C2HTermReq PDU
| * aca3cdc3 nvme-pci: quirk Acer FA100 for non-uniqueue identifiers
| * 570f4d6e io-wq: backoff when retrying worker creation
| * f3288ffd net: wwan: mhi_wwan_mbim: Silence sequence number glitch errors
| * f623c04f ASoC: SOF: amd: Handle IPC replies before FW_BOOT_COMPLETE
| * a4859a07 ASoC: SOF: Intel: hda: add softdep pre to snd-hda-codec-hdmi module
| * 7e971474 ASoC: arizona/madera: use fsleep() in up/down DAPM event delays.
| * 544f38b4 ASoC: rsnd: adjust convert rate limitation
| * 7fe470e6 ASoC: rsnd: don't indicate warning on rsnd_kctrl_accept_runtime()
| * fa51c913 ASoC: rsnd: indicate unsupported clock rate
| * aa2e8245 ALSA: hda/realtek: Limit mic boost on Positivo ARN50
| * 9f303c35 ASoC: simple-card-utils.c: add missing dlc->of_node
| * dfbaf8a6 selftests/bpf: Fix invalid flag of recv()
| * c96cce85 Bluetooth: L2CAP: Fix slab-use-after-free Read in l2cap_send_cmd
| * 45a5d06e Xen/swiotlb: mark xen_swiotlb_fixup() __init
| * f225a79b thermal/cpufreq_cooling: Remove structure member documentation
| * 051a7980 s390/cio: Fix CHPID "configure" attribute caching
| * 194dc8c7 platform/x86: thinkpad_acpi: Support for V9 DYTC platform profiles
| * 7f417bd9 platform/x86: thinkpad_acpi: Fix invalid fan speed on ThinkPad X120e
| * 265c0369 sched: Clarify wake_up_q()'s write to task->wake_q.next
| * 5b1c4853 objtool: Ignore dangling jump table entries
| * be2051f8 HID: apple: fix up the F6 key on the Omoton KB066 keyboard
| * 68eddb06 HID: hid-apple: Apple Magic Keyboard a3203 USB-C support
| * 94516603 HID: topre: Fix n-key rollover on Realforce R3S TKL boards
| * 490eb24d usb: phy: generic: Use proper helper for property detection
| * 7a7ada33 HID: ignore non-functional sensor in HP 5MP Camera
| * 2a11cee9 HID: intel-ish-hid: Send clock sync message immediately after reset
| * cc4c96f1 HID: intel-ish-hid: fix the length of MNG_SYNC_FW_CLOCK in doorbell
| * 5d01a4ec vboxsf: fix building with GCC 15
| * 52df9619 alpha/elf: Fix misc/setarch test of util-linux by removing 32bit support
| * dd33c1a3 smb: client: fix noisy when tree connecting to DFS interlink targets
| * 1b9cd040 ACPI: resource: IRQ override for Eluktronics MECH-17
| * ea371d1c scsi: qla1280: Fix kernel oops when debug level > 2
| * caa38322 scsi: ufs: core: Fix error return with query response
| * e9d4044f scsi: core: Use GFP_NOIO to avoid circular locking dependency
| * c79ac6a8 platform/x86/intel: pmc: fix ltr decode in pmc_core_ltr_show()
| * 6c8b1efd sched/debug: Provide slice length for fair tasks
| * 2d1eef24 iscsi_ibft: Fix UBSAN shift-out-of-bounds warning in ibft_attr_show_nic()
| * a470f80e powercap: call put_device() on an error path in powercap_register_control_type()
| * a625ad9b hrtimers: Mark is_migration_base() with __always_inline
| * fa5bfdd9 nvme-fc: do not ignore connectivity loss during connecting
| * aef373bb nvme-fc: go straight to connecting state when initializing
| * 885b7279 net/mlx5e: Prevent bridge link show failure for non-eswitch-allowed devices
| * bd7e3a42 net/mlx5: Bridge, fix the crash caused by LAG state check
| * 4e79d865 net/mlx5: Lag, Check shared fdb before creating MultiPort E-Switch
| * 4b1a0ee6 net: openvswitch: remove misbehaving actions length check
| * ecc19a93 gre: Fix IPv6 link-local address generation.
| * 181b68fa netfilter: nft_exthdr: fix offset with ipv4_find_option()
| * 78533c4a net_sched: Prevent creation of classes with TC_H_ROOT
| * 1bd2a8bb ipvs: prevent integer overflow in do_ip_vs_get_ctl()
| * fda50302 netfilter: nf_conncount: Fully initialize struct nf_conncount_tuple in insert_tree()
| * 6e4edd9e bonding: fix incorrect MAC address setting to receive NS messages
| * 1f7d0518 net: switchdev: Convert blocking notification chain to a raw one
| * ee086c8e eth: bnxt: do not update checksum in bnxt_xdp_build_skb()
| * 637105ef net/mlx5: handle errors in mlx5_chains_create_table()
| * 466ae740 Drivers: hv: vmbus: Don't release fb_mmio resource in vmbus_free_mmio()
| * ad27b4a5 drm/hyperv: Fix address space leak when Hyper-V DRM device is removed
| * 9d1966bd netpoll: hold rcu read lock in __netpoll_send_skb()
| * 6c5bb3f7 net: mctp i2c: Copy headers if cloned
| * 78f83ea6 net: dsa: mv88e6xxx: Verify after ATU Load ops
| * 20b66728 net/mlx5: Fill out devlink dev info only for PFs
| * 5e8ce74f Revert "Bluetooth: hci_core: Fix sleeping function called from invalid context"
| * 7e8cd2bc Bluetooth: hci_event: Fix enabling passive scanning
| * 75d262ad wifi: cfg80211: cancel wiphy_work before freeing wiphy
| * 0f0a1529 sched: address a potential NULL pointer dereference in the GRED scheduler.
| * 0a9f0cfd netfilter: nf_conncount: garbage collection is not skipped when jiffies wrap around
| * 5d30d256 ice: fix memory leak in aRFS after reset
| * 29bde975 netfilter: nft_ct: Use __refcount_inc() for per-CPU nft_ct_pcpu_template.
| * 21e65f1f pinctrl: bcm281xx: Fix incorrect regmap max_registers value
| * c198157a fbdev: hyperv_fb: iounmap() the correct memory when removing a device
| * 372df1f2 tcp: fix forever orphan socket caused by tcp_abort
| * abadaa35 tcp: fix races in tcp_abort()
| * f9543375 bpf: Use raw_spinlock_t in ringbuf
| * 47217354 hrtimer: Use and report correct timerslack values for realtime tasks
| * c7ee791e zram: fix NULL pointer in comp_algorithm_show()
| * 6e0447fa sched/isolation: Prevent boot crash when the boot CPU is nohz_full
| * de47f33d clockevents/drivers/i8253: Fix stop sequence for timer 0
* | b0678c2b Merge 6.6.83 into android15-6.6-lts
|\|
| * 594a1dd5 Linux 6.6.83
| * d5285e08 kbuild: userprogs: use correct lld when linking through clang
| * 79a955ea pfifo_tail_enqueue: Drop new packet when sch->limit == 0
| * f9825c3f spi-mxs: Fix chipselect glitch
| * aa6ef9ce x86/boot: Sanitize boot params before parsing command line
| * c59843e8 x86/boot: Rename conflicting 'boot_params' pointer to 'boot_params_ptr'
| * 5b6eac63 ima: Reset IMA_NONACTION_RULE_FLAGS after post_setattr
| * bb442549 x86/mm: Don't disable PCID when INVLPG has been fixed by microcode
| * eff00c5e uprobes: Fix race in uprobe_free_utask
| * 53402e17 drm/i915/dsi: Use TRANS_DDI_FUNC_CTL's own port width macro
| * 03f1b76f Revert "KVM: PPC: e500: Mark "struct page" dirty in kvmppc_e500_shadow_map()"
| * e4c6eff5 Revert "KVM: PPC: e500: Mark "struct page" pfn accessed before dropping mmu_lock"
| * 36f688ad Revert "KVM: PPC: e500: Use __kvm_faultin_pfn() to handle page faults"
| * 9e4b2725 Revert "KVM: e500: always restore irqs"
| * 52fffb4a riscv: Fix enabling cbo.zero when running in M-mode
| * 76c9f76d ALSA: hda: realtek: fix incorrect IS_REACHABLE() usage
| * 128962f5 kbuild: hdrcheck: fix cross build with clang
| * 62112e7f arm64: hugetlb: Fix huge_ptep_get_and_clear() for non-present ptes
* | b7c385b1 Merge branch 'android15-6.6' into android15-6.6-lts
* | 3cabdd83 Merge c04035ce ("mm: hugetlb: Add huge page size param to huge_ptep_get_and_clear()") into android15-6.6-lts
|\|
| * c04035ce mm: hugetlb: Add huge page size param to huge_ptep_get_and_clear()
* | d38affcc Merge 11f0e95d ("iio: adc: at91-sama5d2_adc: fix sama7g5 realbits value") into android15-6.6-lts
|/
* 11f0e95d iio: adc: at91-sama5d2_adc: fix sama7g5 realbits value
* 12012d43 iio: dac: ad3552r: clear reset status flag
* 82d94af4 iio: filter: admv8818: Force initialization of SDO
* d7e5031f drivers: virt: acrn: hsm: Use kzalloc to avoid info leak in pmcmd_ioctl
* 47aa0f5c eeprom: digsy_mtc: Make GPIO lookup table match the device
* 1f9eb707 bus: mhi: host: pci_generic: Use pci_try_reset_function() to avoid deadlock
* faac8e89 slimbus: messaging: Free transaction ID in delayed interrupt scenario
* e49700a7 drivers: core: fix device leak in __fw_devlink_relax_cycles()
* d43b3f64 char: misc: deallocate static minor in error path
* a5e10461 intel_th: pci: Add Panther Lake-P/U support
* d66d16c3 intel_th: pci: Add Panther Lake-H support
* 9d3c428e intel_th: pci: Add Arrow Lake support
* 69395846 mei: me: add panther lake P DID
* d7b339bb cdx: Fix possible UAF error in driver_override_show()
* 4f1ca393 KVM: x86: Explicitly zero EAX and EBX when PERFMON_V2 isn't supported by KVM
* 33bf2b75 KVM: SVM: Suppress DEBUGCTL.BTF on AMD
* 978df364 KVM: SVM: Drop DEBUGCTL[5:2] from guest's effective value
* c401b1b4 usb: xhci: Enable the TRB overfetch quirk on VIA VL805
* af091756 xhci: pci: Fix indentation in the PCI device ID definitions
* 2c271df3 usb: gadget: Check bmAttributes only if configuration is valid
* 0af02029 usb: gadget: Fix setting self-powered state on suspend
* b7768bba usb: gadget: Set self-powered based on MaxPower and bmAttributes
* 68f7ef44 usb: typec: tcpci_rt1711h: Unmask alert interrupts to fix functionality
* 8233c63f usb: typec: ucsi: increase timeout for PPM reset operations
* 656a99b5 usb: dwc3: gadget: Prevent irq storm when TH re-executes
* 13f9b888 usb: dwc3: Set SUSPENDENABLE soon after phy init
* a0475a88 usb: atm: cxacru: fix a flaw in existing endpoint checks
* 0f685061 usb: gadget: u_ether: Set is_suspend flag if remote wakeup fails
* d50f5c0c usb: renesas_usbhs: Flush the notify_hotplug_work
* 46fba7be usb: typec: ucsi: Fix NULL pointer access
* 7f0441af usb: quirks: Add DELAY_INIT and NO_LPM for Prolific Mass Storage Card Reader
* 7817af8b usb: hub: lack of clearing xHC resources
* ef082029 usb: renesas_usbhs: Use devm_usb_get_phy()
* d72f4475 usb: renesas_usbhs: Call clk_put()
* 3cae0b7e Revert "drivers/card_reader/rtsx_usb: Restore interrupt based detection"
* 897b7b76 gpio: rcar: Fix missing of_node_put() call
* 9ff13800 net: ipv6: fix missing dst ref drop in ila lwtunnel
* 925933d2 net: ipv6: fix dst ref loop in ila lwtunnel
* 88afbcb4 net: dsa: mt7530: Fix traffic flooding for MMIO devices
* 9cc7f001 sched/fair: Fix potential memory corruption in child_cfs_rq_on_list
* c6292a2a ublk: set_params: properly check if parameters can be applied
* 04ab4df0 net-timestamp: support TCP GSO case for a few missing flags
* 747de766 exfat: fix soft lockup in exfat_clear_bitmap
* 47053726 x86/sgx: Fix size overflows in sgx_encl_create()
* 35614425 vlan: enforce underlying device type
* 1eacd476 ppp: Fix KMSAN uninit-value warning with bpf
* 65dcc3af net: ipa: Enable checksum for IPA_ENDPOINT_AP_MODEM_{RX,TX} for v4.7
* 5dc83121 net: ipa: Fix QSB data for v4.7
* b9a3f30b net: ipa: Fix v4.7 resource group names
* 026714ec HID: hid-steam: Fix use-after-free when detaching device
* 2c04e507 net: hns3: make sure ptp clock is unregister and freed if hclge_ptp_get_cycle returns an error
* 41d731e7 be2net: fix sleeping while atomic bugs in be_ndo_bridge_getlink
* 4f5cc62f drm/sched: Fix preprocessor guard
* b1e17ebd hwmon: fix a NULL vs IS_ERR_OR_NULL() check in xgene_hwmon_probe()
* 416e8b4c llc: do not use skb_get() before dev_queue_xmit()
* 8c48c26f ALSA: usx2y: validate nrpacks module parameter on probe
* 2efd6cc2 tracing: probe-events: Remove unused MAX_ARG_BUF_LEN macro
* c3dafdf7 hwmon: (ad7314) Validate leading zero bits and return error
* b5cc1496 hwmon: (ntc_thermistor) Fix the ncpXXxh103 sensor table
* 395c28f3 hwmon: (pmbus) Initialise page count in pmbus_identify()
* 7c823e4c perf/core: Fix pmus_lock vs. pmus_srcu ordering
* 90d30261 caif_virtio: fix wrong pointer check in cfv_probe()
* 01a83237 net: gso: fix ownership in __udp_gso_segment
* 84cce23d nvmet-tcp: Fix a possible sporadic response drops in weakly ordered arch
* 127c8905 bluetooth: btusb: Initialize .owner field of force_poll_sync_fops
* 560f4d12 HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove()
* d0ef5f19 HID: google: fix unused variable warning under !CONFIG_ACPI
* b02f8d5a wifi: iwlwifi: limit printed string from FW file
* 5c18fae5 mm: don't skip arch_sync_kernel_mappings() in error paths
* b56b6cfd mm/page_alloc: fix uninitialized variable
* f4e39e0f block: fix conversion of GPT partition name to 7-bit
* ab0727d6 NFS: fix nfs_release_folio() to not deadlock via kcompactd writeback
* 272abd47 s390/traps: Fix test_monitor_call() inline assembly
* 18519478 dma: kmsan: export kmsan_handle_dma() for modules
* 2537f01d rapidio: fix an API misues when rio_add_net() fails
* e6411c3b rapidio: add check for rio_add_net() in rio_scan_alloc_net()
* ebebbb0e wifi: nl80211: reject cooked mode if it is set along with other flags
* 35ef0711 wifi: cfg80211: regulatory: improve invalid hints checking
* bdb1805c Bluetooth: Add check for mgmt_alloc_skb() in mgmt_device_connected()
* c5845c73 Bluetooth: Add check for mgmt_alloc_skb() in mgmt_remote_name()
* f3fcdb2d mptcp: fix 'scheduling while atomic' in mptcp_pm_nl_append_new_local_addr
* bd8dd646 x86/cpu: Properly parse CPUID leaf 0x2 TLB descriptor 0x63
* 672bc566 x86/cpu: Validate CPUID leaf 0x2 EDX output
* db79249b x86/cacheinfo: Validate CPUID leaf 0x2 EDX output
* 8d1fcb46 platform/x86: thinkpad_acpi: Add battery quirk for ThinkPad X131e
* c9dbc5c7 drm/radeon: Fix rs400_gpu_init for ATI mobility radeon Xpress 200M
* 3b3c2be5 drm/amd/display: Fix null check for pipe_ctx->plane_state in resource_build_scaling_params
* c144d199 hwmon: (peci/dimmtemp) Do not provide fake thresholds data
* 8e507b37 ALSA: hda/realtek: update ALC222 depop optimize
* 0b60d5b2 ALSA: hda/realtek - add supported Mic Mute LED for Lenovo platform
* 3f63e8fe ALSA: hda: intel: Add Dell ALC3271 to power_save denylist
* 5e1b3bf7 ALSA: seq: Avoid module auto-load handling at event delivery
* d99dc8f7 gpio: aggregator: protect driver attr handlers against module unload
* c1036503 gpio: rcar: Use raw_spinlock to protect register access
* 8994f0ce ksmbd: fix bug on trap in smb2_lock
* 85735710 ksmbd: fix use-after-free in smb2_lock
* c1569dbb ksmbd: fix out-of-bounds in parse_sec_desc()
* 76861630 ksmbd: fix type confusion via race condition when using ipc_msg_send_request
* fc69e2c3 HID: appleir: Fix potential NULL dereference at raw event handle
* 8a998a80 LoongArch: Set max_pfn with the PFN of the last page
* abf16e74 LoongArch: Use polling play_dead() when resuming from hibernation
* 7929d362 LoongArch: Convert unreachable() to BUG()
* 35415b91 tracing: tprobe-events: Fix a memory leak when tprobe with $retval
* a9704893 Revert "of: reserved-memory: Fix using wrong number of cells to get property 'alignment'"
* 2d62d8f3 x86/microcode/AMD: Add some forgotten models to the SHA check
* dd8aad26 riscv: signal: fix signal_minsigstksz
* 1b0a08a4 RISC-V: Enable cbo.zero in usermode
* 19c9976b riscv: cacheinfo: Use of_property_present() for non-boolean properties
* 80aec5a8 riscv: Prevent a bad reference count on CPU nodes
* ebccacb0 riscv: cacheinfo: initialize cacheinfo's level and type from ACPI PPTT
* e1f99e0b riscv: cacheinfo: remove the useless input parameter (node) of ci_leaf_init()
* 017df7c7 NFS: O_DIRECT writes must check and adjust the file length
* 6e954923 x86/speculation: Add __update_spec_ctrl() helper
* 17485318 net: enetc: VFs do not support HWTSTAMP_TX_ONESTEP_SYNC
* f22f7ba8 net: enetc: Replace ifdef with IS_ENABLED
* 54e0f2d2 net: enetc: Remove setting of RX software timestamp
* 2a3f4e27 drm/amdgpu: disable BAR resize on Dell G5 SE
* c1843895 drm/amdgpu: Check extended configuration space register when system uses large bar
* 4d2a7df7 ibmvnic: Inspect header requirements before using scrq direct
* 6511585e ibmvnic: Perform tx CSO during send scrq direct
* 2c55d671 smb: client: fix chmod(2) regression with ATTR_READONLY
* 75cc3357 arm64: dts: rockchip: add rs485 support on uart5 of px30-ringneck-haikou
* 9afdcba9 drm/i915/ddi: Fix HDMI port width programming in DDI_BUF_CTL
* dbae7186 drm/i915/xe2lpd: Move D2D enable/disable
* ea3f0b36 efi: Don't map the entire mokvar table to determine its size
* 8f43ba5e x86/amd_nb: Use rdmsr_safe() in amd_get_mmconfig_range()

Change-Id: I35af7a7b541f920069d66adf939c5e86e0fa43ce
Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>