Merge 6.12.23 into android16-6.12

GKI (arm64) relevant 77 out of 426 changes, affecting 93 files +851/-461
  40426fc0 cpufreq: scpi: compare kHz instead of Hz [1 file, +3/-2]
  7b1d2454 sched: Cancel the slice protection of the idle entity [1 file, +33/-13]
  b576c483 sched/eevdf: Force propagating min_slice of cfs_rq when {en,de}queue tasks [1 file, +4/-0]
  f381c92a cpufreq: governor: Fix negative 'idle_time' handling in dbs_update() [1 file, +23/-22]
  4d28c2ab lockdep/mm: Fix might_fault() lockdep check of current->mm->mmap_lock [1 file, +0/-2]
  31d56651 PM: sleep: Adjust check before setting power.must_resume [3 files, +9/-8]
  86475096 watchdog/hardlockup/perf: Fix perf_event memory leak [4 files, +1/-61]
  c3a4c91a PM: sleep: Fix handling devices with direct_complete set on errors [1 file, +4/-4]
  345957c1 lockdep: Don't disable interrupts on RT in disable_irq_nosync_lockdep.*() [1 file, +4/-4]
  5108828f perf/ring_buffer: Allow the EPOLLRDNORM flag for poll [1 file, +1/-1]
  15291b56 ALSA: timer: Don't take register_mutex with copy_from/to_user() [1 file, +77/-70]
  254f771c PCI: Use downstream bridges for distributing resources [1 file, +1/-2]
  372e387c PCI: Remove add_align overwrite unrelated to size0 [1 file, +0/-1]
  f556b6ba PCI/ASPM: Fix link state exit during switch upstream function removal [1 file, +9/-8]
  8ba27aa5 PCI/ACS: Fix 'pci=config_acs=' parameter [1 file, +13/-5]
  2a54a1a9 PCI/portdrv: Only disable pciehp interrupts early when needed [1 file, +5/-3]
  bcb48420 PCI: Avoid reset when disabled via sysfs [1 file, +4/-0]
  362b5879 PCI: Remove stray put_device() in pci_register_host_bridge() [1 file, +2/-3]
  b004cf51 PCI: dwc: ep: Return -ENOMEM for allocation failures [1 file, +1/-0]
  e23dfb92 PCI: Fix BAR resizing when VF BARs are assigned [1 file, +2/-2]
  057298d1 crypto: bpf - Add MODULE_DESCRIPTION for skcipher [1 file, +1/-0]
  2df19f5f remoteproc: core: Clear table_sz when rproc_shutdown [1 file, +1/-0]
  bfcca46f of: property: Increase NR_FWNODE_REFERENCE_ARGS [1 file, +1/-1]
  8ed53817 bpf: Use preempt_count() directly in bpf_send_signal_common() [1 file, +1/-1]
  6d4e56e4 crypto: api - Fix larval relookup type and mask [1 file, +7/-10]
  8ba426f1 rust: fix signature of rust_fmt_argument [2 files, +4/-5]
  19e6817f bpf: Fix array bounds error with may_goto [2 files, +22/-4]
  c2ddf2f5 leds: Fix LED_OFF brightness race [1 file, +18/-4]
  8109f576 usb: xhci: correct debug message page size calculation [1 file, +3/-3]
  c42282a0 kernel/events/uprobes: handle device-exclusive entries correctly in __replace_page() [1 file, +12/-1]
  5b2b6928 tty: n_tty: use uint for space returned by tty_write_room() [1 file, +7/-6]
  aba91899 fs/procfs: fix the comment above proc_pid_wchan() [1 file, +1/-1]
  456300be thermal: core: Remove duplicate struct declaration [1 file, +0/-2]
  6a140753 exfat: fix the infinite loop in exfat_find_last_cluster() [1 file, +1/-1]
  4a9595eb exfat: fix missing shutdown check [1 file, +27/-2]
  28b21ee8 rtnetlink: Allocate vfinfo size for VF GUIDs when supported [1 file, +3/-0]
  2a6f8823 ring-buffer: Fix bytes_dropped calculation issue [1 file, +2/-2]
  8e49f912 sched/smt: Always inline sched_smt_active() [1 file, +1/-1]
  00911b41 context_tracking: Always inline ct_{nmi,irq}_{enter,exit}() [1 file, +4/-4]
  d80168db rcu-tasks: Always inline rcu_irq_work_resched() [1 file, +1/-1]
  63bd235d nvme-pci: clean up CMBMSC when registering CMB fails [1 file, +1/-0]
  5eb8c8fe nvme-pci: skip CMB blocks incompatible with PCI P2P DMA [1 file, +12/-8]
  73644200 perf/core: Fix perf_pmu_register() vs. perf_init_event() [1 file, +26/-2]
  92075758 exfat: add a check for invalid data size [1 file, +5/-0]
  ddf40162 locking/semaphore: Use wake_q to wake up processes outside lock critical section [1 file, +9/-4]
  3e6ce0d9 nvme-pci: fix stuck reset on concurrent DPC and HP [1 file, +12/-1]
  93c59b55 net: devmem: do not WARN conditionally after netdev_rx_queue_restart() [1 file, +3/-1]
  d840c84c can: statistics: use atomic access in hot path [3 files, +39/-31]
  7a95b488 netfs: Fix netfs_unbuffered_read() to return ssize_t rather than int [1 file, +3/-3]
  7e3497d7 ublk: make sure ubq->canceling is set when queue is frozen [1 file, +29/-10]
  a3800b64 nvme/ioctl: don't warn on vectorized uring_cmd with fixed buffer [1 file, +1/-1]
  94d5ad7b udp: Fix multiple wraparounds of sk->sk_rmem_alloc. [1 file, +17/-9]
  a116b271 udp: Fix memory accounting leak. [1 file, +7/-9]
  47744d0d vsock: avoid timeout during connect() if the socket is closing [1 file, +5/-1]
  9539c172 tunnels: Accept PACKET_HOST in skb_tunnel_check_pmtu(). [2 files, +1/-7]
  92a5c185 net: decrease cached dst counters in dst_release [1 file, +8/-0]
  de579015 ipv6: fix omitted netlink attributes when using RTEXT_FILTER_SKIP_STATS [1 file, +25/-12]
  2952776c net: fix geneve_opt length integer overflow [4 files, +4/-4]
  1eb36a2c ipv6: Start path selection from the first nexthop [1 file, +35/-3]
  f4fea25f ipv6: Do not consider link down nexthops in path selection [1 file, +4/-2]
  e9c92880 perf/core: Fix child_total_time_enabled accounting bug at task exit [1 file, +9/-9]
  387dc88c tracing: Switch trace_events_hist.c code over to use guard() [1 file, +10/-22]
  fe87f8d3 tracing/hist: Add poll(POLLIN) support on hist file [3 files, +95/-3]
  eecb62a2 tracing/hist: Support POLLPRI event for poll on histogram [1 file, +26/-3]
  ef79f2de tracing: Correct the refcount if the hist/hist_debug file fails to open [1 file, +18/-6]
  39bc1484 cgroup/rstat: Tracking cgroup-level niced CPU time [2 files, +15/-5]
  35016776 cgroup/rstat: Fix forceidle time in cpu.stat [1 file, +13/-16]
  d689645c usbnet:fix NPE during rx_complete [1 file, +3/-3]
  49b0a6ab exfat: fix random stack corruption after get_block [1 file, +33/-6]
  37c9875c exfat: fix potential wrong error return from get_block [1 file, +2/-0]
  cffc2a67 tracing: Ensure module defining synth event cannot be unloaded while tracing [1 file, +29/-1]
  33052e7f tracing: Fix synth event printk format for str fields [1 file, +1/-1]
  2e877ff3 mm/gup: reject FOLL_SPLIT_PMD with hugetlb VMAs [1 file, +3/-0]
  13d6f8ba ext4: don't over-report free space or inodes in statvfs [1 file, +17/-10]
  b47584c5 ext4: fix OOB read when checking dotdot dir [1 file, +3/-0]
  e2d8e7bd exec: fix the racy usage of fs_struct->in_exec [1 file, +9/-6]
  625e9b91 tracing: Do not use PERF enums when perf is not defined [1 file, +6/-2]

Changes in 6.12.23
        watch_queue: fix pipe accounting mismatch
        x86/mm/pat: cpa-test: fix length for CPA_ARRAY test
        cpufreq: scpi: compare kHz instead of Hz
        smack: dont compile ipv6 code unless ipv6 is configured
        smack: ipv4/ipv6: tcp/dccp/sctp: fix incorrect child socket label
        sched: Cancel the slice protection of the idle entity
        sched/eevdf: Force propagating min_slice of cfs_rq when {en,de}queue tasks
        cpufreq: governor: Fix negative 'idle_time' handling in dbs_update()
        EDAC/{skx_common,i10nm}: Fix some missing error reports on Emerald Rapids
        x86/fpu: Fix guest FPU state buffer allocation size
        x86/fpu: Avoid copying dynamic FP state from init_task in arch_dup_task_struct()
        x86/platform: Only allow CONFIG_EISA for 32-bit
        x86/sev: Add missing RIP_REL_REF() invocations during sme_enable()
        lockdep/mm: Fix might_fault() lockdep check of current->mm->mmap_lock
        PM: sleep: Adjust check before setting power.must_resume
        cpufreq: tegra194: Allow building for Tegra234
        RISC-V: KVM: Disable the kernel perf counter during configure
        kunit/stackinit: Use fill byte different from Clang i386 pattern
        watchdog/hardlockup/perf: Fix perf_event memory leak
        selinux: Chain up tool resolving errors in install_policy.sh
        EDAC/ie31200: Fix the size of EDAC_MC_LAYER_CHIP_SELECT layer
        EDAC/ie31200: Fix the DIMM size mask for several SoCs
        EDAC/ie31200: Fix the error path order of ie31200_init()
        x86/resctrl: Fix allocation of cleanest CLOSID on platforms with no monitors
        thermal: int340x: Add NULL check for adev
        PM: sleep: Fix handling devices with direct_complete set on errors
        lockdep: Don't disable interrupts on RT in disable_irq_nosync_lockdep.*()
        perf/ring_buffer: Allow the EPOLLRDNORM flag for poll
        x86/traps: Make exc_double_fault() consistently noreturn
        x86/fpu/xstate: Fix inconsistencies in guest FPU xfeatures
        x86/entry: Add __init to ia32_emulation_override_cmdline()
        regulator: pca9450: Fix enable register for LDO5
        auxdisplay: MAX6959 should select BITREVERSE
        media: verisilicon: HEVC: Initialize start_bit field
        media: platform: allgro-dvt: unregister v4l2_device on the error path
        auxdisplay: panel: Fix an API misuse in panel.c
        platform/x86: lenovo-yoga-tab2-pro-1380-fastcharger: Make symbol static
        platform/x86: dell-uart-backlight: Make dell_uart_bl_serdev_driver static
        platform/x86: dell-ddv: Fix temperature calculation
        ASoC: cs35l41: check the return value from spi_setup()
        ASoC: amd: acp: Fix for enabling DMIC on acp platforms via _DSD entry
        HID: remove superfluous (and wrong) Makefile entry for CONFIG_INTEL_ISH_FIRMWARE_DOWNLOADER
        dt-bindings: vendor-prefixes: add GOcontroll
        ALSA: hda/realtek: Always honor no_shutup_pins
        ASoC: ti: j721e-evm: Fix clock configuration for ti,j7200-cpb-audio compatible
        ALSA: timer: Don't take register_mutex with copy_from/to_user()
        drm/bridge: ti-sn65dsi86: Fix multiple instances
        drm/ssd130x: Set SPI .id_table to prevent an SPI core warning
        drm/ssd130x: fix ssd132x encoding
        drm/ssd130x: ensure ssd132x pitch is correct
        drm/dp_mst: Fix drm RAD print
        drm/bridge: it6505: fix HDCP V match check is not performed correctly
        drm: xlnx: zynqmp: Fix max dma segment size
        drm/vkms: Fix use after free and double free on init error
        gpu: cdns-mhdp8546: fix call balance of mhdp->clk handling routines
        drm/amdgpu: refine smu send msg debug log format
        drm/amdgpu/umsch: fix ucode check
        PCI: Use downstream bridges for distributing resources
        PCI: Remove add_align overwrite unrelated to size0
        drm/mediatek: mtk_hdmi: Unregister audio platform device on failure
        drm/mediatek: mtk_hdmi: Fix typo for aud_sampe_size member
        PCI/ASPM: Fix link state exit during switch upstream function removal
        drm/panel: ilitek-ili9882t: fix GPIO name in error message
        PCI/ACS: Fix 'pci=config_acs=' parameter
        drm/amd/display: fix an indent issue in DML21
        drm/msm/dpu: don't use active in atomic_check()
        drm/msm/dsi/phy: Program clock inverters in correct register
        drm/msm/dsi: Use existing per-interface slice count in DSC timing
        drm/msm/dsi: Set PHY usescase (and mode) before registering DSI host
        drm/amdkfd: Fix Circular Locking Dependency in 'svm_range_cpu_invalidate_pagetables'
        PCI: cadence-ep: Fix the driver to send MSG TLP for INTx without data payload
        PCI: brcmstb: Set generation limit before PCIe link up
        PCI: brcmstb: Use internal register to change link capability
        PCI: brcmstb: Fix error path after a call to regulator_bulk_get()
        PCI: brcmstb: Fix potential premature regulator disabling
        PCI/portdrv: Only disable pciehp interrupts early when needed
        PCI: Avoid reset when disabled via sysfs
        drm/panthor: Update CS_STATUS_ defines to correct values
        drm/amd/display: fix type mismatch in CalculateDynamicMetadataParameters()
        drm/msm/a6xx: Fix a6xx indexed-regs in devcoreduump
        crypto: powerpc: Mark ghashp8-ppc.o as an OBJECT_FILES_NON_STANDARD
        powerpc/kexec: fix physical address calculation in clear_utlb_entry()
        PCI: Remove stray put_device() in pci_register_host_bridge()
        PCI: xilinx-cpm: Fix IRQ domain leak in error path of probe
        drm/mediatek: Fix config_updating flag never false when no mbox channel
        drm/mediatek: dp: drm_err => dev_err in HPD path to avoid NULL ptr
        drm/mediatek: dsi: fix error codes in mtk_dsi_host_transfer()
        drm/amd/display: avoid NPD when ASIC does not support DMUB
        PCI: dwc: ep: Return -ENOMEM for allocation failures
        PCI: histb: Fix an error handling path in histb_pcie_probe()
        PCI: Fix BAR resizing when VF BARs are assigned
        PCI: pciehp: Don't enable HPIE when resuming in poll mode
        fbdev: au1100fb: Move a variable assignment behind a null pointer check
        dummycon: fix default rows/cols
        mdacon: rework dependency list
        fbdev: sm501fb: Add some geometry checks.
        crypto: iaa - Test the correct request flag
        crypto: qat - set parity error mask for qat_420xx
        crypto: tegra - Use separate buffer for setkey
        crypto: tegra - check return value for hash do_one_req
        crypto: bpf - Add MODULE_DESCRIPTION for skcipher
        crypto: tegra - Use HMAC fallback when keyslots are full
        clk: amlogic: gxbb: drop incorrect flag on 32k clock
        crypto: hisilicon/sec2 - fix for aead authsize alignment
        crypto: hisilicon/sec2 - fix for sec spec check
        RDMA/mlx5: Fix page_size variable overflow
        remoteproc: core: Clear table_sz when rproc_shutdown
        of: property: Increase NR_FWNODE_REFERENCE_ARGS
        pinctrl: renesas: rzg2l: Suppress binding attributes
        remoteproc: qcom_q6v5_pas: Make single-PD handling more robust
        libbpf: Fix hypothetical STT_SECTION extern NULL deref case
        selftests/bpf: Fix string read in strncmp benchmark
        x86/mm/pat: Fix VM_PAT handling when fork() fails in copy_page_range()
        clk: renesas: r8a08g045: Check the source of the CPU PLL settings
        remoteproc: qcom: pas: add minidump_id to SC7280 WPSS
        clk: samsung: Fix UBSAN panic in samsung_clk_init()
        pinctrl: nuvoton: npcm8xx: Fix error handling in npcm8xx_gpio_fw()
        crypto: tegra - Fix CMAC intermediate result handling
        clk: qcom: gcc-msm8953: fix stuck venus0_core0 clock
        s390: Remove ioremap_wt() and pgprot_writethrough()
        RDMA/mana_ib: Ensure variable err is initialized
        crypto: tegra - Set IV to NULL explicitly for AES ECB
        remoteproc: qcom_q6v5_pas: Use resource with CX PD for MSM8226
        clk: qcom: gcc-x1e80100: Unregister GCC_GPU_CFG_AHB_CLK/GCC_DISP_XO_CLK
        bpf: Use preempt_count() directly in bpf_send_signal_common()
        lib: 842: Improve error handling in sw842_compress()
        pinctrl: renesas: rza2: Fix missing of_node_put() call
        pinctrl: renesas: rzg2l: Fix missing of_node_put() call
        RDMA/mlx5: Fix MR cache initialization error flow
        selftests/bpf: Fix freplace_link segfault in tailcalls prog test
        clk: rockchip: rk3328: fix wrong clk_ref_usb3otg parent
        RDMA/core: Don't expose hw_counters outside of init net namespace
        RDMA/mlx5: Fix calculation of total invalidated pages
        RDMA/erdma: Prevent use-after-free in erdma_accept_newconn()
        remoteproc: qcom_q6v5_mss: Handle platforms with one power domain
        power: supply: bq27xxx_battery: do not update cached flags prematurely
        crypto: api - Fix larval relookup type and mask
        IB/mad: Check available slots before posting receive WRs
        pinctrl: tegra: Set SFIO mode to Mux Register
        clk: amlogic: g12b: fix cluster A parent data
        clk: amlogic: gxbb: drop non existing 32k clock parent
        selftests/bpf: Select NUMA_NO_NODE to create map
        rust: fix signature of rust_fmt_argument
        pinctrl: npcm8xx: Fix incorrect struct npcm8xx_pincfg assignment
        crypto: qat - remove access to parity register for QAT GEN4
        clk: clk-imx8mp-audiomix: fix dsp/ocram_a clock parents
        clk: amlogic: g12a: fix mmc A peripheral clock
        x86/entry: Fix ORC unwinder for PUSH_REGS with save_ret=1
        power: supply: max77693: Fix wrong conversion of charge input threshold value
        crypto: nx - Fix uninitialised hv_nxc on error
        clk: qcom: gcc-sm8650: Do not turn off USB GDSCs during gdsc_disable()
        bpf: Fix array bounds error with may_goto
        RDMA/mlx5: Fix mlx5_poll_one() cur_qp update flow
        pinctrl: renesas: rzv2m: Fix missing of_node_put() call
        mfd: sm501: Switch to BIT() to mitigate integer overflows
        leds: Fix LED_OFF brightness race
        x86/dumpstack: Fix inaccurate unwinding from exception stacks due to misplaced assignment
        RDMA/core: Fix use-after-free when rename device name
        crypto: hisilicon/sec2 - fix for aead auth key length
        pinctrl: intel: Fix wrong bypass assignment in intel_pinctrl_probe_pwm()
        clk: qcom: mmcc-sdm660: fix stuck video_subcore0 clock
        perf stat: Fix find_stat for mixed legacy/non-legacy events
        perf: Always feature test reallocarray
        w1: fix NULL pointer dereference in probe
        fs/ntfs3: Update inode->i_mapping->a_ops on compression state
        phy: phy-rockchip-samsung-hdptx: Don't use dt aliases to determine phy-id
        isofs: fix KMSAN uninit-value bug in do_isofs_readdir()
        soundwire: slave: fix an OF node reference leak in soundwire slave device
        perf report: Switch data file correctly in TUI
        greybus: gb-beagleplay: Add error handling for gb_greybus_init
        coresight: catu: Fix number of pages while using 64k pages
        vhost-scsi: Fix handling of multiple calls to vhost_scsi_set_endpoint
        coresight-etm4x: add isb() before reading the TRCSTATR
        perf pmu: Don't double count common sysfs and json events
        tools/x86: Fix linux/unaligned.h include path in lib/insn.c
        perf build: Fix in-tree build due to symbolic link
        ucsi_ccg: Don't show failed to get FW build information error
        iio: accel: mma8452: Ensure error return on failure to matching oversampling ratio
        iio: accel: msa311: Fix failure to release runtime pm if direct mode claim fails.
        iio: backend: make sure to NULL terminate stack buffer
        perf arm-spe: Fix load-store operation checking
        perf bench: Fix perf bench syscall loop count
        usb: xhci: correct debug message page size calculation
        fs/ntfs3: Fix a couple integer overflows on 32bit systems
        fs/ntfs3: Prevent integer overflow in hdr_first_de()
        dmaengine: fsl-edma: cleanup chan after dma_async_device_unregister
        dmaengine: fsl-edma: free irq correctly in remove path
        iio: adc: ad4130: Fix comparison of channel setups
        iio: adc: ad7124: Fix comparison of channel configs
        iio: adc: ad7173: Fix comparison of channel configs
        iio: adc: ad7768-1: set MOSI idle state to prevent accidental reset
        iio: light: Add check for array bounds in veml6075_read_int_time_ms
        perf debug: Avoid stack overflow in recursive error message
        perf evlist: Add success path to evlist__create_syswide_maps
        perf units: Fix insufficient array space
        kernel/events/uprobes: handle device-exclusive entries correctly in __replace_page()
        kexec: initialize ELF lowest address to ULONG_MAX
        ocfs2: validate l_tree_depth to avoid out-of-bounds access
        arch/powerpc: drop GENERIC_PTDUMP from mpc885_ads_defconfig
        NFSv4: Don't trigger uneccessary scans for return-on-close delegations
        NFSv4: Avoid unnecessary scans of filesystems for returning delegations
        NFSv4: Avoid unnecessary scans of filesystems for expired delegations
        NFSv4: Avoid unnecessary scans of filesystems for delayed delegations
        NFS: fix open_owner_id_maxsz and related fields.
        fuse: fix dax truncate/punch_hole fault path
        selftests/mm/cow: fix the incorrect error handling
        um: Pass the correct Rust target and options with gcc
        um: remove copy_from_kernel_nofault_allowed
        um: hostfs: avoid issues on inode number reuse by host
        i3c: master: svc: Fix missing the IBI rules
        perf python: Fixup description of sample.id event member
        perf python: Decrement the refcount of just created event on failure
        perf python: Don't keep a raw_data pointer to consumed ring buffer space
        perf python: Check if there is space to copy all the event
        perf dso: fix dso__is_kallsyms() check
        perf: intel-tpebs: Fix incorrect usage of zfree()
        staging: rtl8723bs: select CONFIG_CRYPTO_LIB_AES
        staging: vchiq_arm: Register debugfs after cdev
        staging: vchiq_arm: Fix possible NPR of keep-alive thread
        tty: n_tty: use uint for space returned by tty_write_room()
        perf vendor events arm64 AmpereOneX: Fix frontend_bound calculation
        fs/procfs: fix the comment above proc_pid_wchan()
        perf tools: annotate asm_pure_loop.S
        perf bpf-filter: Fix a parsing error with comma
        thermal: core: Remove duplicate struct declaration
        objtool, nvmet: Fix out-of-bounds stack access in nvmet_ctrl_state_show()
        objtool, media: dib8000: Prevent divide-by-zero in dib8000_set_dds()
        NFS: Shut down the nfs_client only after all the superblocks
        smb: client: Fix netns refcount imbalance causing leaks and use-after-free
        exfat: fix the infinite loop in exfat_find_last_cluster()
        exfat: fix missing shutdown check
        rtnetlink: Allocate vfinfo size for VF GUIDs when supported
        rndis_host: Flag RNDIS modems as WWAN devices
        ksmbd: use aead_request_free to match aead_request_alloc
        ksmbd: fix multichannel connection failure
        ksmbd: fix r_count dec/increment mismatch
        net/mlx5e: SHAMPO, Make reserved size independent of page size
        ring-buffer: Fix bytes_dropped calculation issue
        objtool: Fix segfault in ignore_unreachable_insn()
        LoongArch: Fix help text of CMDLINE_EXTEND in Kconfig
        LoongArch: Fix device node refcount leak in fdt_cpu_clk_init()
        LoongArch: Rework the arch_kgdb_breakpoint() implementation
        ACPI: processor: idle: Return an error if both P_LVL{2,3} idle states are invalid
        net: phy: broadcom: Correct BCM5221 PHY model detection
        octeontx2-af: Fix mbox INTR handler when num VFs > 64
        octeontx2-af: Free NIX_AF_INT_VEC_GEN irq
        objtool: Fix verbose disassembly if CROSS_COMPILE isn't set
        sched/smt: Always inline sched_smt_active()
        context_tracking: Always inline ct_{nmi,irq}_{enter,exit}()
        rcu-tasks: Always inline rcu_irq_work_resched()
        objtool/loongarch: Add unwind hints in prepare_frametrace()
        nfs: Add missing release on error in nfs_lock_and_join_requests()
        wifi: mac80211: Cleanup sta TXQs on flush
        wifi: mac80211: remove debugfs dir for virtual monitor
        wifi: iwlwifi: fw: allocate chained SG tables for dump
        wifi: iwlwifi: mvm: use the right version of the rate API
        nvme-tcp: fix possible UAF in nvme_tcp_poll
        nvme-pci: clean up CMBMSC when registering CMB fails
        nvme-pci: skip CMB blocks incompatible with PCI P2P DMA
        wifi: brcmfmac: keep power during suspend if board requires it
        affs: generate OFS sequence numbers starting at 1
        affs: don't write overlarge OFS data block size fields
        ALSA: hda/realtek: Fix Asus Z13 2025 audio
        ALSA: hda: Fix speakers on ASUS EXPERTBOOK P5405CSA 1.0
        perf/core: Fix perf_pmu_register() vs. perf_init_event()
        smb: common: change the data type of num_aces to le16
        cifs: fix incorrect validation for num_aces field of smb_acl
        platform/x86: intel-hid: fix volume buttons on Microsoft Surface Go 4 tablet
        platform/x86/intel/vsec: Add Diamond Rapids support
        net: dsa: rtl8366rb: don't prompt users for LED control
        HID: i2c-hid: improve i2c_hid_get_report error message
        platform/x86/amd/pmf: Propagate PMF-TA return codes
        platform/x86/amd/pmf: Update PMF Driver for Compatibility with new PMF-TA
        exfat: add a check for invalid data size
        ALSA: hda/realtek: Add support for ASUS ROG Strix G814 Laptop using CS35L41 HDA
        ALSA: hda/realtek: Add support for ASUS ROG Strix GA603 Laptops using CS35L41 HDA
        ALSA: hda/realtek: Add support for ASUS ROG Strix G614 Laptops using CS35L41 HDA
        ALSA: hda/realtek: Add support for various ASUS Laptops using CS35L41 HDA
        ALSA: hda/realtek: Add support for ASUS B3405 and B3605 Laptops using CS35L41 HDA
        ALSA: hda/realtek: Add support for ASUS B5405 and B5605 Laptops using CS35L41 HDA
        ALSA: hda/realtek: Add support for ASUS Zenbook UM3406KA Laptops using CS35L41 HDA
        sched/deadline: Use online cpus for validating runtime
        x86/hyperv/vtl: Stop kernel from probing VTL0 low memory
        ASoC: codecs: wsa884x: report temps to hwmon in millidegree of Celsius
        ASoC: rt1320: set wake_capable = 0 explicitly
        wifi: mac80211: flush the station before moving it to UN-AUTHORIZED state
        wifi: mac80211: fix SA Query processing in MLO
        locking/semaphore: Use wake_q to wake up processes outside lock critical section
        x86/hyperv: Fix output argument to hypercall that changes page visibility
        x86/sgx: Warn explicitly if X86_FEATURE_SGX_LC is not enabled
        nvme-pci: fix stuck reset on concurrent DPC and HP
        drm/amd: Keep display off while going into S4
        net: devmem: do not WARN conditionally after netdev_rx_queue_restart()
        selftests: netfilter: skip br_netfilter queue tests if kernel is tainted
        ALSA: hda/realtek: Add mute LED quirk for HP Pavilion x360 14-dy1xxx
        can: statistics: use atomic access in hot path
        memory: omap-gpmc: drop no compatible check
        hwmon: (nct6775-core) Fix out of bounds access for NCT679{8,9}
        netfs: Fix netfs_unbuffered_read() to return ssize_t rather than int
        spufs: fix a leak on spufs_new_file() failure
        spufs: fix gang directory lifetimes
        spufs: fix a leak in spufs_create_context()
        fs/9p: fix NULL pointer dereference on mkdir
        riscv: ftrace: Add parentheses in macro definitions of make_call_t0 and make_call_ra
        ntb_hw_switchtec: Fix shift-out-of-bounds in switchtec_ntb_mw_set_trans
        ntb: intel: Fix using link status DB's
        firmware: cs_dsp: Ensure cs_dsp_load[_coeff]() returns 0 on success
        ALSA: hda/realtek: Fix built-in mic breakage on ASUS VivoBook X515JA
        RISC-V: errata: Use medany for relocatable builds
        x86/uaccess: Improve performance by aligning writes to 8 bytes in copy_user_generic(), on non-FSRM/ERMS CPUs
        ublk: make sure ubq->canceling is set when queue is frozen
        s390/entry: Fix setting _CIF_MCCK_GUEST with lowcore relocation
        ASoC: codecs: rt5665: Fix some error handling paths in rt5665_probe()
        spi: cadence: Fix out-of-bounds array access in cdns_mrvl_xspi_setup_clock()
        riscv: Fix hugetlb retrieval of number of ptes in case of !present pte
        riscv/kexec_file: Handle R_RISCV_64 in purgatory relocator
        riscv/purgatory: 4B align purgatory_start
        nvme/ioctl: don't warn on vectorized uring_cmd with fixed buffer
        ASoC: imx-card: Add NULL check in imx_card_probe()
        spi: bcm2835: Do not call gpiod_put() on invalid descriptor
        ALSA: hda/realtek: Fix built-in mic on another ASUS VivoBook model
        spi: bcm2835: Restore native CS probing when pinctrl-bcm2835 is absent
        e1000e: change k1 configuration on MTP and later platforms
        idpf: fix adapter NULL pointer dereference on reboot
        netfilter: nft_set_hash: GC reaps elements with conncount for dynamic sets only
        netfilter: nf_tables: don't unregister hook when table is dormant
        netlabel: Fix NULL pointer exception caused by CALIPSO on IPv4 sockets
        net_sched: skbprio: Remove overly strict queue assertions
        sctp: add mutual exclusion in proc_sctp_do_udp_port()
        net: mvpp2: Prevent parser TCAM memory corruption
        udp: Fix multiple wraparounds of sk->sk_rmem_alloc.
        udp: Fix memory accounting leak.
        vsock: avoid timeout during connect() if the socket is closing
        tunnels: Accept PACKET_HOST in skb_tunnel_check_pmtu().
        net: decrease cached dst counters in dst_release
        netfilter: nft_tunnel: fix geneve_opt type confusion addition
        ipv6: fix omitted netlink attributes when using RTEXT_FILTER_SKIP_STATS
        net: dsa: mv88e6xxx: propperly shutdown PPU re-enable timer on destroy
        net: fix geneve_opt length integer overflow
        ipv6: Start path selection from the first nexthop
        ipv6: Do not consider link down nexthops in path selection
        arcnet: Add NULL check in com20020pci_probe()
        net: ibmveth: make veth_pool_store stop hanging
        kbuild: deb-pkg: don't set KBUILD_BUILD_VERSION unconditionally
        drm/amdgpu/gfx11: fix num_mec
        drm/amdgpu/gfx12: fix num_mec
        perf/core: Fix child_total_time_enabled accounting bug at task exit
        tools/power turbostat: report CoreThr per measurement interval
        tracing: Switch trace_events_hist.c code over to use guard()
        tracing/hist: Add poll(POLLIN) support on hist file
        tracing/hist: Support POLLPRI event for poll on histogram
        tracing: Correct the refcount if the hist/hist_debug file fails to open
        cgroup/rstat: Tracking cgroup-level niced CPU time
        cgroup/rstat: Fix forceidle time in cpu.stat
        tty: serial: fsl_lpuart: Use u32 and u8 for register variables
        tty: serial: fsl_lpuart: use port struct directly to simply code
        tty: serial: fsl_lpuart: Fix unused variable 'sport' build warning
        tty: serial: lpuart: only disable CTS instead of overwriting the whole UARTMODIR register
        wifi: mac80211: Fix sparse warning for monitor_sdata
        usbnet:fix NPE during rx_complete
        rust: Fix enabling Rust and building with GCC for LoongArch
        LoongArch: Increase ARCH_DMA_MINALIGN up to 16
        LoongArch: Increase MAX_IO_PICS up to 8
        LoongArch: BPF: Fix off-by-one error in build_prologue()
        LoongArch: BPF: Don't override subprog's return value
        LoongArch: BPF: Use move_addr() for BPF_PSEUDO_FUNC
        x86/hyperv: Fix check of return value from snp_set_vmsa()
        KVM: x86: block KVM_CAP_SYNC_REGS if guest state is protected
        x86/microcode/AMD: Fix __apply_microcode_amd()'s return value
        x86/mce: use is_copy_from_user() to determine copy-from-user context
        x86/tdx: Fix arch_safe_halt() execution for TDX VMs
        ACPI: x86: Extend Lenovo Yoga Tab 3 quirk with skip GPIO event-handlers
        platform/x86: thinkpad_acpi: disable ACPI fan access for T495* and E560
        platform/x86: ISST: Correct command storage data length
        ntb_perf: Delete duplicate dmaengine_unmap_put() call in perf_copy_chunk()
        perf/x86/intel: Apply static call for drain_pebs
        perf/x86/intel: Avoid disable PMU if !cpuc->enabled in sample read
        uprobes/x86: Harden uretprobe syscall trampoline check
        idpf: Don't hard code napi_struct size
        x86/Kconfig: Add cmpxchg8b support back to Geode CPUs
        x86/tsc: Always save/restore TSC sched_clock() on suspend/resume
        x86/mm: Fix flush_tlb_range() when used for zapping normal PMDs
        wifi: mt76: mt7925: remove unused acpi function for clc
        acpi: nfit: fix narrowing conversion in acpi_nfit_ctl
        ACPI: resource: Skip IRQ override on ASUS Vivobook 14 X1404VAP
        ARM: 9444/1: add KEEP() keyword to ARM_VECTORS
        media: omap3isp: Handle ARM dma_iommu_mapping
        Remove unnecessary firmware version check for gc v9_4_2
        mmc: omap: Fix memory leak in mmc_omap_new_slot
        mmc: sdhci-pxav3: set NEED_RSP_BUSY capability
        mmc: sdhci-omap: Disable MMC_CAP_AGGRESSIVE_PM for eMMC/SD
        KVM: SVM: Don't change target vCPU state on AP Creation VMGEXIT error
        ksmbd: add bounds check for durable handle context
        ksmbd: add bounds check for create lease context
        ksmbd: fix use-after-free in ksmbd_sessions_deregister()
        ksmbd: fix session use-after-free in multichannel connection
        ksmbd: fix overflow in dacloffset bounds check
        ksmbd: validate zero num_subauth before sub_auth is accessed
        ksmbd: fix null pointer dereference in alloc_preauth_hash()
        exfat: fix random stack corruption after get_block
        exfat: fix potential wrong error return from get_block
        tracing: Fix use-after-free in print_graph_function_flags during tracer switching
        tracing: Ensure module defining synth event cannot be unloaded while tracing
        tracing: Fix synth event printk format for str fields
        tracing/osnoise: Fix possible recursive locking for cpus_read_lock()
        mm/gup: reject FOLL_SPLIT_PMD with hugetlb VMAs
        arm64: Don't call NULL in do_compat_alignment_fixup()
        wifi: mt76: mt7921: fix kernel panic due to null pointer dereference
        ext4: don't over-report free space or inodes in statvfs
        ext4: fix OOB read when checking dotdot dir
        jfs: fix slab-out-of-bounds read in ea_get()
        jfs: add index corruption check to DT_GETPAGE()
        mm: zswap: fix crypto_free_acomp() deadlock in zswap_cpu_comp_dead()
        exec: fix the racy usage of fs_struct->in_exec
        media: vimc: skip .s_stream() for stopped entities
        media: streamzap: fix race between device disconnection and urb callback
        nfsd: allow SC_STATUS_FREEABLE when searching via nfs4_lookup_stateid()
        nfsd: put dl_stid if fail to queue dl_recall
        nfsd: fix management of listener transports
        NFSD: nfsd_unlink() clobbers non-zero status returned from fh_fill_pre_attrs()
        NFSD: Never return NFS4ERR_FILE_OPEN when removing a directory
        NFSD: Skip sending CB_RECALL_ANY when the backchannel isn't up
        ARM: 9443/1: Require linker to support KEEP within OVERLAY for DCE
        tracing: Do not use PERF enums when perf is not defined
        platform/x86/amd/pmf: fix cleanup in amd_pmf_init_smart_pc()
        Linux 6.12.23

Change-Id: I007dc80a847f3232a2d12c056a74d16d2ab92b29
Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>