pantah: update kernel-and-modules (trunk) prebuilt (12574206)

Linux version 6.1.112-android14-11-gd1b0bfd298ad-ab12574206 (build-
    user@build-host) (Android (10087095, +pgo, +bolt, +lto, -mlgo,
    based on r487747c) clang version 17.0.2
    (https://android.googlesource.com/toolchain/llvm-project
    d9f89f4d16663d5012e5c09495f3b30ece3d2362), LLD 17.0.2) #1 SMP
    PREEMPT Tue Oct 29 21:00:24 UTC 2024

aosp: (500 changes)
  d1b0bfd2 Snap for 12571779 from 19b68814b1cd60c40546f31f7cc5b7895c0b013b to android14-gs-pixel-6.1-trunk-release
  19b68814 Merge tag 'android14-6.1.112_r00' into android14-6.1
  29d66b39 UPSTREAM: exit: Sleep at TASK_IDLE when waiting for application core dump
  179ccc93 UPSTREAM: spi: spi-geni-qcom: Rename the label unmap_if_dma
  9a072aa7 UPSTREAM: spi: spi-geni-qcom: Add SPI Device mode support for GENI based QuPv3
  fcfc7a6d Merge 6.1.112 into android14-6.1-lts
  8fe68de8 Merge 6.1.111 into android14-6.1-lts
  8b7627ad Merge 6.1.110 into android14-6.1-lts
  b3fe05ec Merge 5e20208dfe4e ("fuse: fix memory leak in fuse_create_open") into android14-6.1-lts
  99de3824 Revert "perf/aux: Fix AUX buffer serialization"
  2fa599b8 Revert "clocksource/drivers/timer-of: Remove percpu irq related code"
  ad793062 Merge 9dc7ad2b6777 ("perf/aux: Fix AUX buffer serialization") into android14-6.1-lts
  a8d720c1 Merge ae7b2bd3d458 ("mmc: cqhci: Fix checking of CQHCI_HALT state") into android14-6.1-lts
  eccb72fb Revert "hwspinlock: Introduce hwspin_lock_bust()"
  d0af2ae8 Merge 6.1.109 into android14-6.1-lts
  c59cc7f2 Merge 6.1.108 into android14-6.1-lts
  db06d215 Revert "posix-timers: Ensure timer ID search-loop limit is valid"
  3e3e85a2 Revert "pid: Replace struct pid 1-element array with flex-array"
  524ae3c9 Merge 6.1.107 into android14-6.1-lts
  8f2e4ac3 Revert "cgroup: Make operations on the cgroup root_list RCU safe"
  b4c085bb Revert "cgroup: Move rcu_head up near the top of cgroup_root"
  aa4cd140 Linux 6.1.112
  ba6269e1 USB: usbtmc: prevent kernel-usb-infoleak
  c74796ff USB: serial: pl2303: add device id for Macrosilicon MS3020
  a20eea14 x86/mm: Switch to new Intel CPU model defines
  ee8adcb4 powercap: RAPL: fix invalid initialization for pl4_supported field
  563df8b4 btrfs: calculate the right space for delayed refs when updating global reserve
  2626cbee selftests: mptcp: join: restrict fullmesh endp on 1st sf
  0ba8b599 can: mcp251xfd: move mcp251xfd_timestamp_start()/stop() into mcp251xfd_chip_start/stop()
  88047c4b can: mcp251xfd: properly indent labels
  672c1916 gpio: prevent potential speculation leaks in gpio_device_get_desc()
  5c3a421c gpiolib: cdev: Ignore reconfiguration without direction
  e388656a Revert "wifi: cfg80211: check wiphy mutex is held for wdev mutex"
  ddeead47 netfilter: nf_tables: missing iterator type in lookup walk
  52735a01 netfilter: nft_set_pipapo: walk over current view on netlink dump
  8a64f87e netfilter: nft_socket: Fix a NULL vs IS_ERR() bug in nft_socket_cgroup_subtree_level()
  ace0db36 netfilter: nft_socket: make cgroupsv2 matching work with namespaces
  5899daf1 xfs: journal geometry is not properly bounds checked
  68e6efe0 xfs: set bnobt/cntbt numrecs correctly when formatting new AGs
  af871df6 xfs: fix reloading entire unlinked bucket lists
  62ca5910 xfs: make inode unlinked bucket recovery work with quotacheck
  e9d1551f xfs: reload entire unlinked bucket lists
  8ffd3ae7 xfs: use i_prev_unlinked to distinguish inodes that are not on the unlinked list
  8e2147f3 xfs: correct calculation for agend and blockcount
  d931b6c6 xfs: fix unlink vs cluster buffer instantiation race
  1486aeb7 xfs: fix negative array access in xfs_getbmap
  4790c167 xfs: load uncached unlinked inodes into memory on demand
  0cc19226 xfs: fix the calculation for "end" and "length"
  4427e3d3 xfs: remove WARN when dquot cache insertion fails
  e8c65334 xfs: fix ag count overflow during growfs
  02f44e7f xfs: collect errors from inodegc for unlinked inode recovery
  65fc94fc xfs: fix AGF vs inode cluster buffer deadlock
  b4aea9f9 xfs: defered work could create precommits
  81274891 xfs: buffer pins need to hold a buffer reference
  cbf91ddb xfs: fix BUG_ON in xfs_getbmap()
  fcd6ff90 xfs: quotacheck failure can race with background inode inactivation
  120108df xfs: fix uninitialized variable access
  ce563912 xfs: block reservation too large for minleft allocation
  0e3c9d69 xfs: prefer free inodes at ENOSPC over chunk allocation
  bb798c91 xfs: fix low space alloc deadlock
  cdbc02da xfs: don't use BMBT btree split workers for IO completion
  98b8fd60 xfs: fix extent busy updating
  b36c2ae0 xfs: Fix deadlock on xfs_inodegc_worker
  d2b47521 xfs: dquot shrinker doesn't check for XFS_DQFLAG_FREEING
  cfb92605 ocfs2: strict bound check before memcmp in ocfs2_xattr_find_entry()
  9b325395 ocfs2: add bounds checking to ocfs2_xattr_find_entry()
  8220c3e2 spi: spidev: Add missing spi_device_id for jg10309-01
  892a5d4f block: Fix where bio IO priority gets set
  ff913aff tools: hv: rm .*.cmd when make clean
  0b78afa6 x86/hyperv: Set X86_FEATURE_TSC_KNOWN_FREQ when Hyper-V provides frequency
  123c2d18 smb: client: fix hang in wait_for_response() for negproto
  a4a5a153 spi: bcm63xx: Enable module autoloading
  74968adc drm: komeda: Fix an issue related to normalized zpos
  fbef47f5 spi: spidev: Add an entry for elgin,jg10309-01
  d404252a ASoC: tda7419: fix module autoloading
  b013a1e7 ASoC: intel: fix module autoloading
  62386a16 ASoC: Intel: soc-acpi-cht: Make Lenovo Yoga Tab 3 X90F DMI match less strict
  f1e32334 can: mcp251xfd: mcp251xfd_ring_init(): check TX-coalescing configuration
  fef6432e wifi: iwlwifi: clear trans->state earlier upon error
  a8c48e7b wifi: mac80211: free skb on error path in ieee80211_beacon_get_ap()
  1b0cd832 wifi: iwlwifi: mvm: don't wait for tx queues if firmware is dead
  5948a191 wifi: iwlwifi: mvm: pause TCM when the firmware is stopped
  051e6cce wifi: iwlwifi: mvm: fix iwl_mvm_scan_fits() calculation
  ba94a887 wifi: iwlwifi: lower message level for FW buffer destination
  f0eb1009 LoongArch: Define ARCH_IRQ_INIT_FLAGS as IRQ_NOPROBE
  bb06a6e7 net: ftgmac100: Ensure tx descriptor updates are visible
  2e767997 microblaze: don't treat zero reserved memory regions as error
  0bc618a6 hwmon: (asus-ec-sensors) remove VRM temp X570-E GAMING
  2fcf56f5 pinctrl: at91: make it work with current gpiolib
  5e2a30d6 scsi: lpfc: Fix overflow build issue
  fce0cddf ALSA: hda/realtek - FIxed ALC285 headphone no sound
  85ba7682 ALSA: hda/realtek - Fixed ALC256 headphone no sound
  555e0d60 ASoC: allow module autoloading for table board_ids
  9434465f ASoC: allow module autoloading for table db1200_pids
  39d4d5a2 ASoC: SOF: mediatek: Add missing board compatible
  4786dae0 Merge 6.1.106 into android14-6.1-lts
  0450b543 ANDROID: fix up abi break in arm64 cpu_hwcaps
  d747db68 Merge 6.1.105 into android14-6.1-lts
  2caf29dc Merge branch 'android14-6.1' into android14-6.1-lts
  e526b12b Linux 6.1.111
  e1a199ec ASoC: meson: axg-card: fix 'use-after-free'
  3d792c6a pinctrl: meteorlake: Add Arrow Lake-H/U ACPI ID
  57da7d15 drm/i915/guc: prevent a possible int overflow in wq offsets
  29aa2229 spi: geni-qcom: Fix incorrect free_irq() sequence
  d66fbca6 spi: geni-qcom: Undo runtime PM changes at driver exit time
  433ece38 spi: geni-qcom: Convert to platform remove callback returning void
  bd1f7cc3 drm/amdgpu/atomfirmware: Silence UBSAN warning
  84175dc5 dma-buf: heaps: Fix off-by-one in CMA heap fault handler
  94c705fb soundwire: stream: Revert "soundwire: stream: fix programming slave ports for non-continous port maps"
  09af8b0b spi: nxp-fspi: fix the KASAN report out-of-bounds bug
  f43190e3 net: dpaa: Pad packets to ETH_ZLEN
  33c2258b netfilter: nft_socket: fix sk refcount leaks
  bb8cb615 net: ftgmac100: Enable TX interrupt to avoid TX timeout
  8b220251 octeontx2-af: Modify SMQ flush sequence to drop packets
  22246e97 octeontx2-af: Set XOFF on other child transmit schedulers during SMQ flush
  5d537b8d fou: fix initialization of grc
  52c4beb7 net/mlx5: Fix bridge mode operations when there are no VFs
  c06402e3 net/mlx5: Verify support for scheduling element and TSAR type
  bfc611c8 net/mlx5: Correct TASR typo into TSAR
  cb7cea22 net/mlx5: Add missing masks and QoS bit masks for scheduling elements
  5b3cbf4f net/mlx5: Explicitly set scheduling element and TSAR type
  f062f17f net/mlx5e: Add missing link modes to ptys2ethtool_map
  7d32d2d3 net/mlx5: Update the list of the PCI supported devices
  b01930b7 igb: Always call igb_xdp_ring_update_tail() under Tx lock
  231442c4 ice: fix accounting for filters shared by multiple VSIs
  b0df43e2 hwmon: (pmbus) Conditionally clear individual status bits for pmbus rev >= 1.2
  a4a1de08 selftests/bpf: Support SOCK_STREAM in unix_inet_redir_to_connected()
  c6c16fd0 cxl/core: Fix incorrect vendor debug UUID define
  4b3c279f eeprom: digsy_mtc: Fix 93xx46 driver probe failure
  7029e9c7 arm64: dts: rockchip: fix PMIC interrupt pin in pinctrl for ROCK Pi E
  742dcbc4 fs/ntfs3: Use kvfree to free memory allocated by kvmalloc
  bc08f5ab pmdomain: ti: Add a null pointer check to the omap_prm_domain_init
  530698ea net: xilinx: axienet: Fix race in axienet_stop
  65d0db50 mm: avoid leaving partial pfn mappings around in error case
  d3fccbfa dm-integrity: fix a race condition when accessing recalc_sector
  34aaedb0 net: tighten bad gso csum offset check in virtio_net_hdr
  12cfb869 minmax: reduce min/max macro expansion in atomisp driver
  01948562 arm64: dts: rockchip: override BIOS_DISABLE signal via GPIO hog on RK3399 Puma
  b8afddb8 arm64: dts: rockchip: fix eMMC/SPI corruption when audio has been used on RK3399 Puma
  67409b35 mptcp: pm: Fix uaf in __timer_delete_sync
  1e8c2fa6 platform/x86: panasonic-laptop: Allocate 1 entry extra in the sinf array
  9291fadb platform/x86: panasonic-laptop: Fix SINF array out of bounds accesses
  996c148d NFS: Avoid unnecessary rescanning of the per-server delegation list
  ca52183a NFSv4: Fix clearing of layout segments in layoutreturn
  d2952183 smb/server: fix return value of smb2_open()
  a6d2d2ad Input: i8042 - add Fujitsu Lifebook E756 to i8042 quirk table
  7dc99973 drm/msm/adreno: Fix error return if missing firmware-name
  b6effaa7 platform/surface: aggregator_registry: Add support for Surface Laptop Go 3
  646f2fcc platform/surface: aggregator_registry: Add Support for Surface Pro 10
  36985703 scripts: kconfig: merge_config: config files: add a trailing newline
  45ec9f17 HID: multitouch: Add support for GT7868Q
  415403a2 Input: synaptics - enable SMBus for HP Elitebook 840 G2
  2f4b5316 Input: ads7846 - ratelimit the spi_sync error message
  5b7e3e9c btrfs: update target inode's ctime on unlink
  deede799 powerpc/mm: Fix boot warning with hugepages and CONFIG_DEBUG_VIRTUAL
  179a4810 net: phy: vitesse: repair vsc73xx autonegotiation
  ac5021c2 drm: panel-orientation-quirks: Add quirk for Ayn Loki Max
  19258624 drm: panel-orientation-quirks: Add quirk for Ayn Loki Zero
  29a103bb net: ethernet: use ip_hdrlen() instead of bit shift
  1f0e1917 usbnet: ipheth: fix carrier detection in modes 1 and 4
  92b27473 ksmbd: override fsids for smb2_query_info()
  d5e40746 ksmbd: override fsids for share path check
  20739a07 Revert "leds: trigger: Remove unused function led_trigger_rename_static()"
  20c4ef91 Revert "leds: trigger: Store brightness set by led_trigger_event()"
  35455634 Revert "leds: trigger: Call synchronize_rcu() before calling trig->activate()"
  ba60d6bd Revert "leds: triggers: Flush pending brightness before activating trigger"
  2d60d8fc Revert "sysctl: treewide: drop unused argument ctl_table_root::set_ownership(table)"
  0733d050 Merge 6.1.104 into android14-6.1-lts
  1353c191 Revert "spi: microchip-core: switch to use modern name"
  3dc93ab5 Revert "spi: microchip-core: fix init function not setting the master and motorola modes"
  cb1459f2 Revert "jump_label: Prevent key->enabled int overflow"
  7c3cc078 Revert "jump_label: Fix concurrency issues in static_key_slow_dec()"
  81c0bf47 ANDROID: fix up crc issue for cpuset_cpus_allowed()
  5f55cad6 Linux 6.1.110
  2d3bc3d4 fuse: add feature flag for expire-only
  81eb07e2 regulator: of: fix a NULL vs IS_ERR() check in of_regulator_bulk_get_all()
  56fd70f4 memcg: protect concurrent access to mem_cgroup_idr
  61f4bd46 bpf: Silence a warning in btf_type_id_size()
  cd308758 btrfs: fix race between direct IO write and fsync when using same fd
  c5e3ce3e x86/mm: Fix PTI for i386 some more
  ca249435 ublk_drv: fix NULL pointer dereference in ublk_ctrl_start_recovery()
  68b1b63b gpio: modepin: Enable module autoloading
  f62b9a5e gpio: rockchip: fix OF node leak in probe()
  1aea4678 drm/i915/fence: Mark debug_fence_free() with __maybe_unused
  55fd565d drm/i915/fence: Mark debug_fence_init_onstack() with __maybe_unused
  93db1483 ASoC: sunxi: sun4i-i2s: fix LRCLK polarity in i2s mode
  760d252a ASoc: SOF: topology: Clear SOF link platform name upon unload
  7957c731 nvmet-tcp: fix kernel crash if commands allocation fails
  ba601707 ASoC: tegra: Fix CBB error during probe()
  e71647ab powerpc/64e: Define mmu_pte_psize static
  dd175933 powerpc/64e: split out nohash Book3E 64-bit code
  e7179089 powerpc/64e: remove unused IBM HTW code
  51d8e197 drm/amdgpu: handle gfx12 in amdgpu_display_verify_sizes
  46855dbb drm/amd: Add gfx12 swizzle mode defs
  9933c2d2 can: mcp251xfd: rx: add workaround for erratum DS80000789E 6 of mcp2518fd
  bb2d7e71 can: mcp251xfd: clarify the meaning of timestamp
  8fa0f389 can: mcp251xfd: rx: prepare to workaround broken RX FIFO head index erratum
  db9c3a3b can: mcp251xfd: mcp251xfd_handle_rxif_ring_uinc(): factor out in separate function
  40cae0df arm64: acpi: Harden get_cpu_for_acpi_id() against missing CPU entry
  b37f5f0f arm64: acpi: Move get_cpu_for_acpi_id() to a header
  cb152b84 ACPI: processor: Fix memory leaks in error paths of processor_add()
  5f86b4c2 ACPI: processor: Return an error if acpi_processor_get_info() fails in processor_add()
  5e20208d fuse: fix memory leak in fuse_create_open
  9dc7ad2b perf/aux: Fix AUX buffer serialization
  a2abd35e workqueue: Improve scalability of workqueue watchdog touch
  4250ddda fuse: add request extension
  6e663613 uprobes: Use kzalloc to allocate xol area
  0b93c4f4 workqueue: wq_watchdog_touch is always called with valid CPU
  aa97ab65 fuse: allow non-extending parallel direct writes on the same file
  b62c4a07 clocksource/drivers/timer-of: Remove percpu irq related code
  9178eb8e net: mana: Fix error handling in mana_create_txq/rxq's NAPI cleanup
  312e9834 fuse: add "expire only" mode to FUSE_NOTIFY_INVAL_ENTRY
  b2d15228 clocksource/drivers/imx-tpm: Fix next event not taking effect sometime
  25aa6c05 clocksource/drivers/imx-tpm: Fix return -ETIME when delta exceeds INT_MAX
  b9efdf33 VMCI: Fix use-after-free when removing resource in vmci_resource_remove()
  337c9ce3 Drivers: hv: vmbus: Fix rescind handling in uio_hv_generic
  2be37346 uio_hv_generic: Fix kernel NULL pointer dereference in hv_uio_rescind
  6fee4444 nvmem: Fix return type of devm_nvmem_device_get() in kerneldoc
  4f79e0b8 binder: fix UAF caused by offsets overwrite
  f519b045 usb: dwc3: core: update LC timer as per USB Spec V3.2
  46df22d7 iio: adc: ad7124: fix chip ID mismatch
  f8d4e637 iio: adc: ad7606: remove frstdata check for serial mode
  88886b3a iio: adc: ad7124: fix config comparison
  6e557200 iio: fix scale application in iio_convert_raw_to_processed_unlocked
  08b072b8 iio: buffer-dmaengine: fix releasing dma channel on error
  3ba9abfc staging: iio: frequency: ad9834: Validate frequency parameter value
  a0376e5b tcp: process the 3rd ACK with sk_socket for TFO/MPTCP
  bf2e9c81 io_uring/sqpoll: Do not set PF_NO_SETAFFINITY on sqpoll threads
  f4a75e39 io_uring/io-wq: stop setting PF_NO_SETAFFINITY on io-wq workers
  9bffd688 selftests: mptcp: join: check re-re-adding ID 0 signal
  5dc9170e selftests: mptcp: join: validate event numbers
  441b39fb selftests: mptcp: fix backport issues
  b88af1ae NFSv4: Add missing rescheduling points in nfs_client_return_marked_delegations
  075b44fc ata: pata_macio: Use WARN instead of BUG
  b1d20513 MIPS: cevt-r4k: Don't call get_c0_compare_int if timer irq is installed
  ebeff038 lib/generic-radix-tree.c: Fix rare race in __genradix_ptr_alloc()
  8ff351ea of/irq: Prevent device address out-of-bounds read in interrupt map walk
  fac5e82a Squashfs: sanity check symbolic link size
  76d9cd56 usbnet: ipheth: race between ipheth_close and error handling
  61df7661 Input: uinput - reject requests with unreasonable number of slots
  775125c7 HID: amd_sfh: free driver_data after destroying hid device
  e4a602a4 HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup
  0ee8425d s390/vmlinux.lds.S: Move ro_after_init section behind rodata section
  99505720 btrfs: initialize location to fix -Wmaybe-uninitialized in btrfs_lookup_dentry()
  e3930aac kselftests: dmabuf-heaps: Ensure the driver name is null-terminated
  26660853 i3c: mipi-i3c-hci: Error out instead on BUG_ON() in IBI DMA setup
  6675f2fb net: dpaa: avoid on-stack arrays of NR_CPUS elements
  01b78227 tcp: Don't drop SYN+ACK for simultaneous connect().
  7253b4fe PCI: Add missing bridge lock to pci_bus_lock()
  d69ffa44 riscv: set trap vector earlier
  0fbac73a btrfs: replace BUG_ON() with error handling at update_ref_for_cow()
  9cc887ac btrfs: clean up our handling of refs == 0 in snapshot delete
  75a428e1 btrfs: replace BUG_ON with ASSERT in walk_down_proc()
  65c87613 fs/ntfs3: Check more cases when directory is corrupted
  2c804cda smp: Add missing destroy_work_on_stack() call in smp_call_on_cpu()
  1a05d8d0 wifi: mwifiex: Do not return unused priv in mwifiex_get_priv_by_id()
  d1d55b0a dma-mapping: benchmark: Don't starve others when doing the test
  7d12a44f ext4: fix possible tid_t sequence overflows
  78f976b4 drm/amdgpu: Set no_hw_access when VF request full GPU fails
  e072d356 libbpf: Add NULL checks to bpf_object__{prev_map,next_map}
  d92f0baf hwmon: (w83627ehf) Fix underflows seen when writing limit attributes
  0c23e18c hwmon: (nct6775-core) Fix underflows seen when writing limit attributes
  da765beb hwmon: (lm95234) Fix underflows seen when writing limit attributes
  f7f5101a hwmon: (adc128d818) Fix underflows seen when writing limit attributes
  40a93d1f crypto: qat - fix unintentional re-enabling of error interrupts
  438d5222 pci/hotplug/pnv_php: Fix hotplug driver crash on Powernv
  5258a1ed devres: Initialize an uninitialized struct member
  289979d6 um: line: always fill *error_out in setup_one_line()
  3cff144c cgroup: Protect css->cgroup write under css_set_lock
  70e66ea0 iommu/vt-d: Handle volatile descriptor status read
  23e48f5d dm init: Handle minors larger than 255
  94c6dfbf ASoC: topology: Properly initialize soc_enum values
  ba34fcfe phy: zynqmp: Take the phy mutex in xlate
  135e3ad3 firmware: cs_dsp: Don't allow writes to read-only controls
  e7bd6988 net: dsa: vsc73xx: fix possible subblocks range of CAPT block
  dc9dad01 net: bridge: br_fdb_external_learn_add(): always set EXT_LEARN
  d7567f09 fou: Fix null-ptr-deref in GRO.
  a97f32bc bareudp: Fix device stats updates.
  ee3710c4 usbnet: modern method to get random MAC
  e9b0dced ice: do not bring the VSI up, if it was down before the XDP setup
  e1b204ec ice: allow hot-swapping XDP programs
  30576465 ice: Use ice_max_xdp_frame_size() in ice_xdp_setup_prog()
  13a6e5d9 igc: Unlock on error in igc_io_resume()
  06eab37e regulator: core: Stub devm_regulator_bulk_get_const() if !CONFIG_REGULATOR
  fd501568 regulator: Add of_regulator_bulk_get_all
  942baec8 platform/x86: dell-smbios: Fix error path in dell_smbios_init()
  9e3ffb83 ice: Add netif_device_attach/detach into PF reset flow
  2dbb3841 igb: Fix not clearing TimeSync interrupts for 82580
  13af7446 cifs: Fix FALLOC_FL_ZERO_RANGE to preflush buffered part of target region
  ca647e87 rust: kbuild: fix export of bss symbols
  7bb10305 rust: Use awk instead of recent xargs
  4205e8bc can: mcp251xfd: fix ring configuration when switching from CAN-CC to CAN-FD mode
  add5c9c8 can: m_can: Release irq on error in m_can_open
  3b39dc29 can: bcm: Remove proc entry when dev is unregistered.
  c5624ce3 drm/amdgpu: check for LINEAR_ALIGNED correctly in check_tiling_flags_gfx6
  20e7164c drm/amd/display: Check denominator pbn_div before used
  24d3e379 pcmcia: Use resource_size function on resource object
  799b722c media: qcom: camss: Add check for v4l2_fwnode_endpoint_parse
  27452796 Input: ili210x - use kvmalloc() to allocate buffer for firmware update
  af218c80 PCI: keystone: Add workaround for Errata #i2037 (AM65x SR 1.0)
  4b91e418 media: vivid: don't set HDMI TX controls if there are no HDMI outputs
  2c6599dd drm/amdgpu: clear RB_OVERFLOW bit when enabling interrupts
  d40c2c3d drm/amdgpu: Fix smatch static checker warning
  5ca7e32f drm/amd/display: Check HDCP returned status
  31bd4fab usb: gadget: aspeed_udc: validate endpoint index for ast udc
  32afa1ad usb: uas: set host status byte on data completion error
  f67db18e wifi: brcmsmac: advertise MFP_CAPABLE to enable WPA3
  015c78c4 leds: spi-byte: Call of_node_put() on error path
  4f0c7ab4 media: vivid: fix wrong sizeimage value for mplane
  41e46e59 fs/ntfs3: One more reason to mark inode bad
  01739991 udf: Avoid excessive partition lengths
  d845231d netfilter: nf_conncount: fix wrong variable type
  86ab0b47 iommu: sun50i: clear bypass register
  dbb9f9e7 x86/kmsan: Fix hook for unaligned accesses
  0594d41e af_unix: Remove put_pid()/put_cred() in copy_peercred().
  3e5e4038 irqchip/armada-370-xp: Do not allow mapping IRQ 0 and 1
  1f81d511 ELF: fix kernel.randomize_va_space double read
  4effd088 smack: unix sockets: fix accept()ed socket label
  85713a75 ALSA: hda: Add input value sanity checks to HDMI channel map controls
  c0939f94 ALSA: control: Apply sanity check of input values for user elements
  30562eff nilfs2: fix state management in error path of log writing function
  19cfeba0 nilfs2: protect references to superblock parameters exposed in sysfs
  ca92c4bf nilfs2: fix missing cleanup on rollforward recovery error
  549e4075 sched: sch_cake: fix bulk flow accounting logic for host fairness
  925c18a7 ila: call nf_unregister_net_hooks() sooner
  810a4e7d tcp_bpf: fix return value of tcp_bpf_sendmsg()
  e446fd2d Revert "drm/amdgpu: align pp_power_profile_mode with kernel docs"
  3d90605c x86/fpu: Avoid writing LBR bit to IA32_XSS unless supported
  0b86d212 net: mctp-serial: Fix missing escapes on transmit
  29d6f701 tracing: Avoid possible softlockup in tracing_iter_reset()
  14f970a8 spi: rockchip: Resolve unbalanced runtime PM / system PM handling
  f7ab9e14 can: mcp251x: fix deadlock if an interrupt occurs during mcp251x_open
  fbf8b038 clk: qcom: clk-alpha-pll: Fix the trion pll postdiv set rate API
  68dc9cce clk: qcom: clk-alpha-pll: Fix the pll post div mask
  ae7b2bd3 mmc: cqhci: Fix checking of CQHCI_HALT state
  42cbbd95 fuse: use unsigned type for getxattr/listxattr size truncation
  3a5a2a08 mmc: sdhci-of-aspeed: fix module autoloading
  b5123ba7 fuse: update stats for pages in dropped aux writeback list
  373f8f5b mmc: dw_mmc: Fix IDMAC operation with pages bigger than 4K
  8cb8f89f mmc: core: apply SD quirks earlier during probe
  6e7989e9 Bluetooth: MGMT: Ignore keys being loaded with invalid type
  547017ba Revert "Bluetooth: MGMT/SMP: Fix address type when using SMP over BREDR/LE"
  7e328cf9 nvme-pci: Add sleep quirk for Samsung 990 Evo
  a92d81c9 rtmutex: Drop rt_mutex::wait_lock before scheduling
  8d3dc52f x86/kaslr: Expose and use the end of the physical memory address space
  edafbf36 irqchip/gic-v2m: Fix refcount leak in gicv2m_of_init()
  15210b7c perf/x86/intel: Limit the period on Haswell
  26c6af49 x86/tdx: Fix data leak in mmio_read()
  e1cbd23d ata: libata: Fix memory leak for error path in ata_host_alloc()
  eaebe313 ksmbd: Unlock on in ksmbd_tcp_set_interfaces()
  93d54a4b ksmbd: unset the binding mark of a reused connection
  a7e2b078 ALSA: hda/realtek: Support mute LED on HP Laptop 14-dq2xxx
  ed2bb258 ALSA: hda/realtek: add patch for internal mic in Lenovo V145
  702b2f1a ALSA: hda/conexant: Add pincfg quirk to enable top speakers on Sirius devices
  6c71e043 KVM: SVM: Don't advertise Bus Lock Detect to guest if SVM support is missing
  11800db8 KVM: SVM: fix emulation of msr reads/writes of MSR_FS_BASE and MSR_GS_BASE
  fa297c33 KVM: x86: Acquire kvm->srcu when handling KVM_SET_VCPU_EVENTS
  fe5046ca ASoC: dapm: Fix UAF for snd_soc_pcm_runtime object
  db2c2356 sch/netem: fix use after free in netem_dequeue
  00364d57 Revert "perf: Fix event leak upon exec and file release"
  e3e84f62 Revert "sbitmap: fix io hung due to race on sbitmap_word::cleared"
  38dfa1fe Revert "sched/fair: set_load_weight() must also call reweight_task() for SCHED_IDLE tasks"
  fd305489 Merge 6.1.103 into android14-6.1-lts
  4267216b Merge 6.1.102 into android14-6.1-lts
  5e0a4639 Merge 6.1.101 into android14-6.1-lts
  d62f0618 Revert "sched: Move psi_account_irqtime() out of update_rq_clock_task() hotpath"
  879c789a Merge 6.1.100 into android14-6.1-lts
  5ca5b389 Linux 6.1.109
  27b3111f i2c: Use IS_REACHABLE() for substituting empty ACPI functions
  541de967 ext4: handle redirtying in ext4_bio_write_page()
  02bcb6d0 ext4: reject casefold inode flag without casefold feature
  6ac60f68 udf: Limit file size to 4TB
  63673a49 ext4: fix inode tree inconsistency caused by ENOMEM
  4cfdb8c9 Bluetooth: SCO: fix sco_conn related locking and validity issues
  70a13b1e Bluetooth: SCO: Fix possible circular locking dependency on sco_connect_cfm
  6b5325f2 virtio_net: Fix napi_skb_cache_put warning
  04d427e3 media: uvcvideo: Enforce alignment of frame and interval
  1726914c drm/amd/display: Skip wbscl_set_scaler_filter if filter is null
  9f404b0b drm/amd/display: Correct the defined value for AMDGPU_DMUB_NOTIFICATION_MAX
  356fcce9 drm/amd/display: added NULL check at start of dc_validate_stream
  5ea84b48 block: remove the blk_flush_integrity call in blk_integrity_unregister
  0cc7e0ee driver: iio: add missing checks on iio_info's callback access
  479f2211 wifi: cfg80211: make hash table duplicates more survivable
  1bec7782 hwmon: (k10temp) Check return value of amd_smn_read()
  a3480e59 dmaengine: altera-msgdma: properly free descriptor in msgdma_free_descriptor
  47803e87 dmaengine: altera-msgdma: use irq variant of spin_lock/unlock while invoking callbacks
  e1b121f2 drm/bridge: tc358767: Check if fully initialized before signalling HPD event via IRQ
  8795acb3 drm/meson: plane: Add error handling
  03924d11 net/mlx5e: SHAMPO, Fix incorrect page release
  0776bcf9 smack: tcp: ipv4, fix incorrect labeling
  a1d594e6 regmap: spi: Fix potential off-by-one when calculating reserved size
  d8c42405 fsnotify: clear PARENT_WATCHED flags lazily
  b4243c05 usb: typec: ucsi: Fix null pointer dereference in trace
  86d87f2e usbip: Don't submit special requests twice
  1e4cbc11 rcu/nocb: Remove buggy bypass lock contention mitigation
  08a3c584 pwm: xilinx: Fix u32 overflow issue in 32-bit width PWM mode.
  1d34bd5b ionic: fix potential irq name truncation
  0f54b254 RDMA/efa: Properly handle unexpected AQ completions
  1227a242 hwspinlock: Introduce hwspin_lock_bust()
  ebcb06e0 PCI: al: Check IORESOURCE_BUS existence during probe
  20585a27 cpufreq: scmi: Avoid overflow of target_freq in fast switch
  de9d821f wifi: iwlwifi: remove fw_running op
  369cfc63 drm/amdgpu: update type of buf size to u32 for eeprom functions
  1111076d wifi: rtw89: ser: avoid multiple deinit on same CAM
  81a21315 drm/amd/pm: check negtive return for table entries
  70e8ec21 drm/amdgpu: the warning dereferencing obj for nbio_v7_4
  462001ae drm/amd/pm: check specific index for aldebaran
  01cd55b9 drm/amdgpu: fix the waring dereferencing hive
  1b73ea3d drm/amdgpu: fix dereference after null check
  100d3a39 drm/amdgpu/pm: Check input value for CUSTOM profile mode setting on legacy SOCs
  b8dfd4a3 wifi: ath11k: initialize 'ret' in ath11k_qmi_load_file_target_mem()
  09b2d107 apparmor: fix possible NULL pointer dereference
  872814e9 drm/amdkfd: Reconcile the definition and use of oem_id in struct kfd_topology_device
  b862a0bc drm/amdgpu: fix mc_data out-of-bounds read warning
  8981927e drm/amdgpu: fix ucode out-of-bounds read warning
  32915dc9 drm/amdgpu: Fix out-of-bounds read of df_v1_7_channel_number
  cf2db220 drm/amdgpu: Fix out-of-bounds write warning
  9dcbb3b3 drm/amdgpu/pm: Fix uninitialized variable agc_btc_response
  81a1e510 drm/amdgpu/pm: Fix uninitialized variable warning for smu10
  341fa0fa drm/amd/pm: fix uninitialized variable warnings for vangogh_ppt
  2be1eb63 drm/amd/amdgpu: Check tbo resource pointer
  3300a039 drm/amd/display: Skip inactive planes within ModeSupportAndSystemConfiguration
  733ae185 drm/amd/display: Ensure index calculation will not overflow
  33e1ffc9 drm/amd/display: Spinlock before reading event
  ca4e62eb drm/amd/display: Fix Coverity INTEGER_OVERFLOW within dal_gpio_service_create
  0147505f drm/amd/display: Check msg_id before processing transcation
  b36e9b31 drm/amd/display: Check num_valid_sets before accessing reader_wm_sets[]
  f338f99f drm/amd/display: Add array index check for hdcp ddc access
  28b515c4 drm/amd/display: Stop amdgpu_dm initialize when stream nums greater than 6
  276e3fd9 drm/amd/display: Check gpio_id before used as array index
  40b834ca drm/amdgpu: avoid reading vf2pf info size from FB
  ef18f5c7 drm/amd/pm: fix uninitialized variable warnings for vega10_hwmgr
  20c6373a drm/amd/pm: fix the Out-of-bounds read warning
  60f4a4bc drm/amd/pm: Fix negative array index read
  e95ee499 drm/amd/pm: fix warning using uninitialized value of max_vid_step
  0f97f31a drm/amd/pm: fix uninitialized variable warning for smu8_hwmgr
  92cb4425 drm/amd/pm: fix uninitialized variable warning
  ec0c1056 drm/amdgpu/pm: Check the return value of smum_send_msg_to_smc
  cbf1a8ee drm/amdgpu: fix overflowed array index read warning
  d219f902 drm/amd/display: Assign linear_pitch_alignment even for VM
  4528d628 drm/amdgpu: Fix uninitialized variable warning in amdgpu_afmt_acr
  300f0767 selftests: mptcp: join: cannot rm sf if closed
  ec243def selftests: mptcp: join: check re-re-adding ID 0 endp
  753427d8 selftests: mptcp: join: no extra msg if no counter
  141d0f09 selftests: mptcp: join: check removing ID 0 endpoint
  937b086c mptcp: avoid duplicated SUB_CLOSED events
  941b036b mptcp: pr_debug: add missing \n at the end
  2ad4ad69 selftests: mptcp: join: check re-adding init endp with != id
  d6b06098 selftests: mptcp: join: check re-using ID of unused ADD_ADDR
  7f72d709 selftests: mptcp: join: test for flush/re-add endpoints
  66864ca5 selftests: mptcp: add explicit test case for remove/readd
  f258df1b selftests: mptcp: join: check re-using ID of closed subflow
  c865bb5b selftests: mptcp: join: validate fullmesh endp on 1st sf
  c9c74466 mptcp: pm: fix ID 0 endp usage after multiple re-creations
  4188a941 mptcp: pm: reuse ID 0 after delete and re-add
  2b4f46f9 mptcp: pm: avoid possible UaF when selecting endp
  733da337 mptcp: pm: fullmesh: select the right ID later
  5f049691 f2fs: fix to truncate preallocated blocks in f2fs_file_open()
  0ae40b2d PCI/MSI: Fix UAF in msi_capability_init
  5401bde3 mptcp: pm: fix RM_ADDR ID for the initial subflow
  1817a1df mptcp: make pm_remove_addrs_and_subflows static
  e89266b8 ASoC: amd: yc: Support mic on Lenovo Thinkpad E14 Gen 6
  a03caacd net: usb: qmi_wwan: add MeiG Smart SRM825L
  0e14b91f dma-debug: avoid deadlock between dma debug vs printk and netconsole
  689e48ab i2c: Fix conditional for substituting empty ACPI functions
  94644610 ALSA: hda/conexant: Mute speakers at suspend / shutdown
  8e8bf09c ALSA: hda/generic: Add a helper to mute speakers at suspend/shutdown
  32ed7578 scsi: ufs: core: Bypass quick recovery if force reset is needed
  bc84eb3e drm: panel-orientation-quirks: Add quirk for OrangePi Neo
  69950617 Linux 6.1.108
  d3acaf2e fbdev: offb: fix up missing cleanup.h
  d03099a2 apparmor: fix policy_unpack_test on big endian systems
  60962c3d scsi: aacraid: Fix double-free on probe failure
  9dd1abd3 igc: Fix qbv tx latency by setting gtxoffset
  e257219e igc: Fix reset adapter logics when tx mode change
  96013d25 phy: zynqmp: Enable reference clock correctly
  b4ecded1 usb: cdnsp: fix for Link TRB with TC
  d0a0a4b4 usb: cdnsp: fix incorrect index in cdnsp_get_hw_deq function
  38e73085 usb: core: sysfs: Unmerge @usb3_hardware_lpm_attr_group in remove_power_attributes()
  23074dbc usb: dwc3: st: add missing depopulate in probe error path
  4c673529 usb: dwc3: st: fix probed platform device ref count on probe error path
  2189fd13 usb: dwc3: core: Prevent USB core invalid event buffer address access
  391179f4 usb: dwc3: omap: add missing depopulate in probe error path
  9fc715c1 USB: serial: option: add MeiG Smart SRM825L
  c1543959 cdc-acm: Add DISABLE_ECHO quirk for GE HealthCare UI Controller
  d9d48d70 soc: qcom: cmd-db: Map shared memory as WC, not WB
  7ecd3dd4 nfc: pn533: Add poll mod list filling check
  746ce47c net: busy-poll: use ktime_get_ns() instead of local_clock()
  093ee72e drm/amd/display: avoid using null object of framebuffer
  d1e52a7e sctp: fix association labeling in the duplicate COOKIE-ECHO case
  e8b9930b gtp: fix a potential NULL pointer dereference
  bfbf576f bonding: implement xdo_dev_state_free and call it after deletion
  3308410c selftests: forwarding: local_termination: Down ports on cleanup
  5cdcf0d7 selftests: forwarding: no_forwarding: Down ports on cleanup
  1e101c2b netfilter: nf_tables_ipv6: consider network offset in netdev/egress validation
  9bba5955 ethtool: check device is present when getting link settings
  1688b058 wifi: iwlwifi: fw: fix wgds rev 3 exact size
  a369766d netfilter: nf_tables: restore IP sanity checks for netdev/egress
  3723a05f iommu: Do not return 0 from map_pages if it doesn't do anything
  9f3d456e Bluetooth: hci_core: Fix not handling hibernation actions

private/devices/google/gs201: (3 changes)
  45615392 Snap for 12571779 from c2c7882ed1b157bc1bea0428f211f038a8aef190 to android14-gs-pixel-6.1-trunk-release
  c2c7882e gs201: Add google_modemctl module
  92fa2bc5 arm64/config: gs201: Add GOOGLE_MODEMCTL to defconfig

private/devices/google/pantah: (2 changes)
  8c4fc2e2 Snap for 12571779 from de30be3b4b5487aca14485c738ae8c1c615cf147 to android14-gs-pixel-6.1-trunk-release
  de30be3b pantah: Drop build-time radio customization

private/google-modules/amplifiers: (3 changes)
  b3863f87 Snap for 12571779 from 72faed8c132da30109ea588cc38d48f45161ef50 to android14-gs-pixel-6.1-trunk-release
  72faed8c tas25xx: fix invalid-access in find_block_for_channel am: ebb7d7cd53
  ebb7d7cd tas25xx: fix invalid-access in find_block_for_channel

private/google-modules/aoc: (2 changes)
  53a7ea8a Snap for 12571779 from 8d54edcfe9ff061602d1b1c7782703ab7c261828 to android14-gs-pixel-6.1-trunk-release
  8d54edcf alsa: Drop direct cpif dependencies

private/google-modules/display/common: (2 changes)
  e3b12df5 Snap for 12571779 from 258df5dbb1ad0075719a92453b869a8e8a041b11 to android14-gs-pixel-6.1-trunk-release
  258df5db gs_panel: correct lock in force_power_on_store

private/google-modules/display/samsung: (3 changes)
  3f6ca5b8 Snap for 12571779 from 509dedd1cef63463c7d072f2206da7c5c1cbd4f3 to android14-gs-pixel-6.1-trunk-release
  509dedd1 drm: samsung: support setting urgent read latency base on layer RT BW am: 5e6a4e1439
  5e6a4e14 drm: samsung: support setting urgent read latency base on layer RT BW

private/google-modules/gpu: (4 changes)
  5621233c Snap for 12571779 from aa5e6f43758f384d101012db08118c21dda7a543 to android14-gs-pixel-6.1-trunk-release
  aa5e6f43 mali_kbase: gs201: panic on kbase_pm_timed_out dogfood builds
  0644ab30 mali_kbase: dump PDC state on PM timeout
  bba4d7fa mali_kbase: Log PM timeout timestamp

private/google-modules/misc: (1 change)
  c60f038f Make change and version bump to ZK1A.241030.001 Snap for 12571779 from 7dbdd9428bf935cbf67f129acae2ca180493f232 to android14-gs-pixel-6.1-trunk-release

private/google-modules/soc/gs: (6 changes)
  25ed9ae1 Snap for 12571779 from aadb07f68d657af9861df56bb919df2e398097e4 to android14-gs-pixel-6.1-trunk-release
  aadb07f6 sched: take thermal cap into account
  0d58a7c9 usb: dwc3: vote the qos by dts value
  f3e1d24a bts: Expose API to set required urgent read latency am: 23b03d50d3
  82011f43 google_modemctl: New modem interface module
  23b03d50 bts: Expose API to set required urgent read latency

private/google-modules/touch/common: (2 changes)
  696ddcd2 Snap for 12571779 from 9602fc56c89092d608bed269f474eb8e4f03b664 to android14-gs-pixel-6.1-trunk-release
  9602fc56 touch/common: Adjust the logs of unhandled command ops

private/google-modules/touch/synaptics: (2 changes)
  0fc060be Snap for 12571779 from cb580b049b4112be13d36adf914c9345de0fea39 to android14-gs-pixel-6.1-trunk-release
  cb580b04 syna_gtd: support pt5b TRX TRX short test

Bug: 286061575
Bug: 336719614
Bug: 360934165
Bug: 363118941
Bug: 365694837
Bug: 367155543
Bug: 373989095
Bug: 375029573
Bug: 375102057
Pick-Prebuilt: 690972501
Build-Id: 12574206
Config: trunk
Processing-Config: kernel_headers
Flag: build.RELEASE_KERNEL_CHEETAH_DIR
Flag: build.RELEASE_KERNEL_PANTHER_DIR
Change-Id: Id210bbdefeb1a7255dae0838497a29433e568db6
Signed-off-by: SecurityBot <android-nexus-securitybot@system.gserviceaccount.com>