6e0b8d1ff5cd Linux 6.18.3-xanmod1 16991c274358 Merge tag 'v6.18.3' into 6.18 a607c8f74434 Linux 6.18.3 b79938863f43 fuse: missing copy_finish in fuse-over-io-uring argument copies e0d6de83a4cc fuse: fix readahead reclaim deadlock a6d1f1ace16d fuse: fix io-uring list corruption for terminated non-committed requests f6c08d3aa441 iommu/mediatek: fix use-after-free on probe deferral bf58ef1c4cd3 block: freeze queue when updating zone resources ce909de4416e ARM: dts: microchip: sama7g5: fix uart fifo size to 32 699d66165f6c ARM: dts: microchip: sama7d65: fix uart fifo size to 32 c2423add6242 ARM: dts: microchip: sama5d2: fix spi flexcom fifo size to 32 4fc2f8fbfdd4 hwmon: (w83l786ng) Convert macros to functions to avoid TOCTOU c8cf0c2bdccc hwmon: (w83791d) Convert macros to functions to avoid TOCTOU ffd46e7f2b87 hwmon: (max6697) fix regmap leak on probe failure ef901d211dcc hwmon: (max16065) Use local variable to avoid TOCTOU 5b804b8f1e0d io_uring/rsrc: fix lost entries after cloned range c95e4c4caf9a interconnect: qcom: sdx75: Drop QPIC interconnect and BCM nodes 5fa6c144d3fb i2c: amd-mp2: fix reference leak in MP2 PCI device fb5b47ad5387 lib/crypto: riscv: Depend on RISCV_EFFICIENT_VECTOR_UNALIGNED_ACCESS 19d61f032c7e platform/x86: intel: chtwc_int33fe: don't dereference swnode args 17be376bb250 pwm: rzg2l-gpt: Allow checking period_tick cache value only if sibling channel is enabled f80e4e91b010 rpmsg: glink: fix rpmsg device leak 88b71cd0aa39 rtla/timerlat_bpf: Stop tracing on user latency 81bf2780ba43 soc: amlogic: canvas: fix device leak on lookup 25073a05068e soc: apple: mailbox: fix device leak on lookup b28fd17adfb2 soc: qcom: ocmem: fix device leak on lookup 951515391b8f soc: qcom: pbs: fix device leak on lookup b2d6246ef36f soc: samsung: exynos-pmu: fix device leak on regmap lookup 3ce2b4aec8cd tracing: Fix fixed array of synthetic event 479af0d9c6ba vfio: Fix ksize arg while copying user struct in vfio_df_ioctl_bind_iommufd() 8716a841d1da virtio: vdpa: Fix reference count leak in octep_sriov_enable() 3846f8f781cc zloop: make the write pointer of full zones invalid 35eb1ec73f57 zloop: fail zone append operations that are targeting full zones 1d18fb5c71f6 amba: tegra-ahb: Fix device leak on SMMU enable 70cf3d6fe71a crypto: arm64/ghash - Fix incorrect output from ghash-neon b674e3522b67 crypto: caam - Add check for kcalloc() in test_len() 51a5ab36084f crypto: af_alg - zero initialize memory allocated via sock_kmalloc c549b9e0b877 dt-bindings: PCI: qcom,pcie-sm8550: Add missing required power-domains and resets 1bff3e35ed44 dt-bindings: PCI: qcom,pcie-sm8450: Add missing required power-domains and resets d06674a1ca79 dt-bindings: PCI: qcom,pcie-sm8350: Add missing required power-domains and resets 4eee447b5bd4 dt-bindings: PCI: qcom,pcie-sm8250: Add missing required power-domains and resets f3510ba5e265 dt-bindings: PCI: qcom,pcie-sm8150: Add missing required power-domains and resets c3823d1243d3 dt-bindings: PCI: qcom,pcie-sc8280xp: Add missing required power-domains and resets 37f52c4554f3 dt-bindings: PCI: qcom,pcie-sc7280: Add missing required power-domains and resets 149b97dc3295 drm/displayid: pass iter to drm_find_displayid_extension() f9e805fa1fe8 drm/amd/display: Fix scratch registers offsets for DCN351 7d5df9dd6343 drm/amd/display: Fix scratch registers offsets for DCN35 ede98c3943cd drm/amd/display: Use GFP_ATOMIC in dc_create_plane_state() 9837f8d57a54 Revert "drm/amd/display: Fix pbn to kbps Conversion" acb3a68f2170 gpio: loongson: Switch 2K2000/3000 GPIO to BYTE_CTRL_MODE 5f8dc9f0327e gpiolib: acpi: Add quirk for Dell Precision 7780 efdcbc1b1035 gpio: regmap: Fix memleak in error path in gpio_regmap_register() 0f5940176ad6 s390/ipl: Clear SBP flag when bootprog is set 5fcdaa29e599 cgroup: rstat: use LOCK CMPXCHG in css_rstat_updated a35788ddf8df btrfs: don't log conflicting inode if it's a dir moved in the current transaction 0d5c9e901ad4 powerpc/kexec: Enable SMT before waking offline CPUs 1c8bb965e9b0 SUNRPC: svcauth_gss: avoid NULL deref on zero length gss_token in gss_read_proxy_verf 2a77c8dd49bc svcrdma: use rc_pageoff for memcpy byte offset 4846a4c6acb9 svcrdma: return 0 on success from svc_rdma_copy_inline_range 433bb1344ef6 nfsd: Mark variable __maybe_unused to avoid W=1 build break da1ccfc4c452 svcrdma: bound check rq_pages index in inline path 7d17693eb79d ASoC: SOF: ipc4-topology: Convert FLOAT to S32 during blob selection 42ed4c781019 NFSD: Clear TIME_DELEG in the suppattr_exclcreat bitmap 506059202510 ALSA: hda/realtek: Add Asus quirk for TAS amplifiers 134436e66019 ASoC: SOF: ipc4-topology: Prefer 32-bit DMIC blobs for 8-bit formats as well 214b39648006 NFSD: NFSv4 file creation neglects setting ACL b8db16f97d08 NFSD: Clear SECLABEL in the suppattr_exclcreat bitmap b225325be7b2 net/handshake: restore destructor on submit failure 7a93edb23bcf fsnotify: do not generate ACCESS/MODIFY events on child for special files 7b9ea7aa24bd net: phy: marvell-88q2xxx: Fix clamped value in mv88q2xxx_hwmon_write 779fa2a063d4 r8169: fix RTL8117 Wake-on-Lan in DASH mode 681fd588733c lib/crypto: riscv: Add poly1305-core.S to .gitignore 5bb88024409e arm64/gcs: Flush the GCS locking state on exec 7992a8c94689 PM: runtime: Do not clear needs_force_resume with enabled runtime PM 6df47e5bb9b6 tracing: Do not register unsupported perf events cec87632c34a xfs: validate that zoned RT devices are zone aligned d29ed9ff972a xfs: fix a UAF problem in xattr repair 92f6a7b6cfda xfs: fix the zoned RT growfs check for zone alignment 0f3b87c66d89 xfs: fix stupid compiler warning 55c28a875425 xfs: fix a memory leak in xfs_buf_item_init() 0c01fa83c09b KVM: selftests: Add missing "break" in rseq_test's param parsing caf68b6da389 KVM: x86: Apply runtime updates to current CPUID during KVM_SET_CPUID{,2} aedf23821663 KVM: nSVM: Clear exit_code_hi in VMCB when synthesizing nested VM-Exits acffd1cee688 KVM: nSVM: Set exit_code_hi to -1 when synthesizing SVM_EXIT_ERR (failed VMRUN) 6617e02cf8df KVM: nVMX: Immediately refresh APICv controls as needed on nested VM-Exit 3fe48378e53f KVM: TDX: Explicitly set user-return MSRs that *may* be clobbered by the TDX-Module da28922a8c60 KVM: SVM: Mark VMCB_PERM_MAP as dirty on nested VMRUN 2c3719a04b04 KVM: Fix last_boosted_vcpu index assignment bug 691ff7e13f0d KVM: nSVM: Propagate SVM_EXIT_CR0_SEL_WRITE correctly for LMSW emulation 2853896ef465 KVM: selftests: Forcefully override ARCH from x86_64 to x86 201b4a7ebbe0 KVM: SVM: Mark VMCB_NPT as dirty on nested VMRUN c1f8d4d41ed3 KVM: nSVM: Avoid incorrect injection of SVM_EXIT_CR0_SEL_WRITE e23f46f1a971 KVM: x86: Fix VM hard lockup after prolonged inactivity with periodic HV timer a16ccbffb144 KVM: x86: Explicitly set new periodic hrtimer expiration in apic_timer_fn() 16fa73b11a94 KVM: x86: WARN if hrtimer callback for periodic APIC timer fires with period=0 b3b320a900a5 powerpc: Add reloc_offset() to font bitmap pointer used for bootx_printf() 2acb8517429a libceph: make decode_pool() more resilient against corrupted osdmaps 37a691ed7942 lib/crypto: riscv/chacha: Avoid s0/fp register 3383f16f7870 dm-pcache: advance slot index before writing slot c8f810e20f4b parisc: Do not reprogram affinitiy on ASP chip a19fb3611e4c scs: fix a wrong parameter in __scs_magic f8b136296722 media: iris: Add sanity check for stop streaming 24a2062257bb platform/chrome: cros_ec_ishtp: Fix UAF after unbinding driver f73b74dafa3c KVM: x86: Don't clear async #PF queue when CR0.PG is disabled (e.g. on #SMI) 7acc0390e0dd ocfs2: fix kernel BUG in ocfs2_find_victim_chain 30f4d4e5224a media: vidtv: initialize local pointers upon transfer of memory ownership 65d4e5af2a2e mm/slub: reset KASAN tag in defer_free() before accessing freed memory cb51bef465d8 KVM: Disallow toggling KVM_MEM_GUEST_MEMFD on an existing memslot dd6e519ba91e pinctrl: renesas: rzg2l: Fix ISEL restore on resume a1223a72c419 tools/testing/nvdimm: Use per-DIMM device handle 4560db9678a2 f2fs: fix return value of f2fs_recover_fsync_data() 51659b91898f f2fs: fix to not account invalid blocks in get_left_section_blocks() 2efb6b9c5bd2 f2fs: fix to detect recoverable inode during dryrun of find_fsync_dnodes() 57e36f84f2b5 f2fs: fix uninitialized one_time_gc in victim_sel_policy b355d300f51b f2fs: fix age extent cache insertion skip on counter overflow e6d828eae00e f2fs: use global inline_xattr_slab instead of per-sb slab cache 0dde30753c1e f2fs: invalidate dentry cache on failed whiteout creation bac23833220a f2fs: fix to avoid updating zero-sized extent in extent cache 40409e089b41 f2fs: fix to propagate error from f2fs_enable_checkpoint() 86a85a7b622e f2fs: fix to avoid potential deadlock 0df713a9c082 f2fs: fix to avoid updating compression context during writeback 0b36fae23621 f2fs: ensure node page reads complete before f2fs_put_super() finishes 3fb2db6f50ea scsi: ufs: core: Add ufshcd_update_evt_hist() for UFS suspend error a0d4e9e24474 scsi: mpi3mr: Read missing IOCFacts flag for reply queue full overflow 8edbb9e371af scsi: target: Reset t_task_cdb pointer in error case 8c5ce5fafe9c NFSD: use correct reservation type in nfsd4_scsi_fence_client 751c19635c2b scsi: aic94xx: fix use-after-free in device removal path 1c728951bc76 scsi: Revert "scsi: qla2xxx: Perform lockless command completion in abort path" 8f92817b6f10 cpufreq: nforce2: fix reference count leak in nforce2 87f11fea5acb cpuidle: governors: teo: Drop misguided target residency check 17157612e40d serial: sh-sci: Check that the DMA cookie is valid 190dc4b74800 serial: xilinx_uartps: fix rs485 delay_rts_after_send 320578703ebe serial: core: Fix serial device initialization c255a5164c58 serial: core: Restore sysfs fwnode information 864deb6cf1c0 mei: gsc: add dependency on Xe driver 670c2d09ac57 mei: Fix error handling in mei_register 4157f7bba629 intel_th: Fix error handling in intel_th_output_open 1f53652922cd dt-bindings: slimbus: fix warning from example f83e3e9f8918 char: applicom: fix NULL pointer dereference in ac_ioctl 687ccc341f63 xhci: dbgtty: fix device unregister: fixup fd00f88ef36b usb: renesas_usbhs: Fix a resource leak in usbhs_pipe_malloc() 1f069425f4f0 usb: dwc3: keep susphy enabled during exit to avoid controller faults 5a45d75da3b7 usb: dwc3: of-simple: fix clock resource leak in dwc3_of_simple_probe 9f4bc5c30402 usb: gadget: lpc32xx_udc: fix clock imbalance in error path 7501ecfe3e52 usb: phy: isp1301: fix non-OF device reference imbalance 2e7c47e2eb3c usb: phy: fsl-usb: Fix use-after-free in delayed work during device removal cefaad839a38 USB: lpc32xx_udc: Fix error handling in probe d377fe40ff5a usb: typec: altmodes/displayport: Drop the device reference in dp_altmode_probe() 8422cdf91db1 usb: typec: ucsi: huawei-gaokin: add DRM dependency a9cd9a4846ef usb: ohci-nxp: fix device leak on probe failure 987c0ddfe8bb phy: broadcom: bcm63xx-usbh: fix section mismatches b07bfaf62d07 media: pvrusb2: Fix incorrect variable used in trace message ac92151ff249 media: dvb-usb: dtv5100: fix out-of-bounds in dtv5100_i2c_msg() 207d2d90ad87 usb: usb-storage: Maintain minimal modifications to the bcdDevice range. 50f47c02be41 mptcp: avoid deadlock on fallback while reinjecting 77ea2657b470 mptcp: schedule rtx timer only after pushing data ea0129061d61 selftests: mptcp: pm: ensure unknown flags are ignored ec4358c72491 mptcp: pm: ignore unknown endpoint flags 344789964c6c mm/slab: introduce kvfree_rcu_barrier_on_cache() for cache destruction 2766fae7c4c6 dma-mapping: Fix DMA_BIT_MASK() macro being broken d519d23a6b1c crash: let architecture decide crash memory export to iomem_resource 20eda7c74b69 tpm2-sessions: Fix tpm2_read_public range checks 04a3aa6e8c5f tpm2-sessions: Fix out of range indexing in name_size cebbf5d16bb2 mm/huge_memory: add pmd folio to ds_queue in do_huge_zero_wp_pmd() d710b4a2c713 media: v4l2-mem2mem: Fix outdated documentation 2c636fb02af2 mm/ksm: fix exec/fork inheritance support for prctl 3997b3147c7b block: Remove queue freezing from several sysfs store callbacks f0dba761b282 jbd2: use a weaker annotation in journal handling 4a9e50d881f5 jbd2: use a per-journal lock_class_key for jbd2_trans_commit_key b59fa6011480 ext4: align max orphan file size with e2fsprogs limit e70d561d9d83 ext4: fix incorrect group number assertion in mb_check_buddy 8cde2072825b ext4: clear i_state_flags when alloc inode ce5f54c065a4 ext4: xattr: fix null pointer deref in ext4_raw_inode() ecb7e5603b57 ext4: check if mount_opts is NUL-terminated in ext4_ioctl_set_tune_sb() 5bbacbbf1ca4 ext4: fix string copying in parse_apply_sb_mount_options() 8626a78ce7dd printk: Avoid irq_work for printk_deferred() on suspend be8ba672cc5a printk: Allow printk_trigger_flush() to flush all types b107196729ff fs: PM: Fix reverse check in filesystems_freeze_callback() 858344bc9210 tpm: Cap the number of PCR banks 2b78da4cc75d ktest.pl: Fix uninitialized var in config-bisect.pl b3b036bac7c9 fs/ntfs3: fix mount failure for sparse runs in run_unpack() 419b1ea754c9 kallsyms: Fix wrong "big" kernel symbol type read from procfs 17900c56e263 crypto: scatterwalk - Fix memcpy_sglist() to always succeed 3312f03e9948 floppy: fix for PAGE_SIZE != 4KB cbaae7bb64d4 jbd2: fix the inconsistency between checksum and data in memory for journal sb 8dd553771afe block: rate-limit capacity change info log 3715bb43ccd3 gfs2: fix freeze error handling 98d65b62ddf8 btrfs: don't rewrite ret from inode_permission 498e286941b9 wifi: mt76: Fix DTS power-limits on little endian systems aceaa18f791a s390/dasd: Fix gendisk parent after copy pair swap 3b95fdb75d74 lib/crypto: x86/blake2s: Fix 32-bit arg treated as 64-bit 0eeaa2ba3b43 perf: arm_cspmu: fix error handling in arm_cspmu_impl_unregister() bacecf370e0c efi: Add missing static initializer for efi_mm::cpus_allowed_lock 265fad7d9c42 phy: exynos5-usbdrd: fix clock prepare imbalance 344057b2605d dt-bindings: clock: mmcc-sdm660: Add missing MDSS reset 9285d0483063 mmc: sdhci-msm: Avoid early clock doubling during HS400 transition 4bb9164e8f21 x86/mce: Do not clear bank's poll bit in mce_poll_banks on AMD SMCA systems 2ad1e2faebbd sched_ext: Fix missing post-enqueue handling in move_local_task_to_local_dsq() 5ddd444484be sched_ext: Fix bypass depth leak on scx_enable() failure ff67270a177f sched_ext: Fix the memleak for sch->helper objects 514d605ab6ce sched_ext: Factor out local_dsq_post_enq() from dispatch_enqueue() 3192204aa77f printk: Avoid scheduling irq_work on suspend 7fbfb85b05bc io_uring: fix filename leak in __io_openat_prep() dcb0d8bf1771 io_uring: fix min_wait wakeups for SQPOLL 13a8f7b88c2d io_uring/poll: correctly handle io_poll_add() return value on update 3dfe2e1531c8 clk: keystone: syscon-clk: fix regmap leak on probe failure 9e7c63c69f57 KEYS: trusted: Fix a memory leak in tpm2_load_cmd c30ed32690b2 rust: io: add typedef for phys_addr_t 52df55b21ede rust: io: move ResourceSize to top-level io module 0bf59179bdef rust: io: define ResourceSize as resource_size_t 93b3274587e8 samples: rust: fix endianness issue in rust_driver_pci 48298e1ba378 rust: dma: add helpers for architectures without CONFIG_HAS_DMA bee1f36801db rust_binder: avoid mem::take on delivered_deaths 505e8c7f6ca1 rust/drm/gem: Fix missing header in `Object` rustdoc bb82aaee1690 cifs: Fix memory and information leak in smb3_reconfigure() f8b19571b1db vhost/vsock: improve RCU read sections around vhost_vsock_get() 74dd8b66f9d2 block: rnbd-clt: Fix signedness bug in init_dev() 13456b4f1033 ublk: clean up user copy references on ublk server exit 2c46497eb148 drm/msm/a6xx: move preempt_prepare_postamble after error check 19648135e904 drm/msm: adreno: fix deferencing ifpc_reglist when not declared e64d5d45ffa8 scsi: scsi_debug: Fix atomic write enable module param description 7f39b9d0e86e MIPS: ftrace: Fix memory corruption when kernel is located beyond 32 bits 6455d25857f2 platform/x86/intel/hid: Add Dell Pro Rugged 10/12 tablet to VGBS DMI quirks c3cd1d514eb0 hwmon: (emc2305) fix double put in emc2305_probe_childs_from_dt 6c95c2e00996 nvme-fabrics: add ENOKEY to no retry criteria for authentication failures 76bced5efbf4 hwmon: (emc2305) fix device node refcount leak in error path 4f7d90c7184a nvme-fc: don't hold rport lock when putting ctrl 3b96dc29e385 platform/x86: wmi-gamezone: Add Legion Go 2 Quirks ef7653481a05 i2c: designware: Disable SMBus interrupts to prevent storms from mis-configured firmware 7b8581442457 clk: qcom: dispcc-sm7150: Fix dispcc_mdss_pclk0_clk_src 9a9a9b88a8d8 libperf cpumap: Fix perf_cpu_map__max for an empty/NULL map ad9f0f01373c serial: sprd: Return -EPROBE_DEFER when uart clock is not ready e63d2173887c usb: xhci: Don't unchain link TRBs on quirky HCs e375aa7f5a1e usb: usb-storage: No additional quirks need to be added to the EL-R12 optical drive. 6dc09b9b211b usb: xhci: limit run_graceperiod for only usb 3.0 devices 41374236a556 iio: adc: ti_am335x_adc: Limit step_avg to valid range for gcc complains 132fe187e0d9 usb: typec: ucsi: Handle incorrect num_connectors capability 1681cf6da695 usbip: Fix locking bug in RT-enabled kernels 967ac825b4f6 exfat: zero out post-EOF page cache on file extension ff3e06e80c9e exfat: fix remount failure in different process environments f04d53f6e3ff reset: fix BIT macro reference b49c766856fb functionfs: fix the open/removal races c6a2dd4f2e4e via_wdt: fix critical boot hang due to unnamed resource allocation ea0c31c52143 fuse: Invalidate the page cache after FOPEN_DIRECT_IO write b88dd8517ec8 fuse: Always flush the page cache before FOPEN_DIRECT_IO write 05f9aa19fdc1 scsi: qla2xxx: Use reinit_completion on mbx_intr_comp 6407b63db802 scsi: qla2xxx: Fix initiator mode with qlini_mode=exclusive 45185214175c scsi: qla2xxx: Fix lost interrupts with qlini_mode=disabled 095704d7f334 powerpc/addnote: Fix overflow on 32-bit builds d45fcd38c692 clk: mvebu: cp110 add CLK_IGNORE_UNUSED to pcie_x10, pcie_x11 & pcie_x4 5f9a7a00a2be scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI 4ca4c0b6c34f scsi: smartpqi: Add support for Hurray Data new controller PCI device 15108657bce0 ti-sysc: allow OMAP2 and OMAP4 timers to be reserved on AM33xx dbbf6d471306 um: init cpu_tasks[] earlier 64b989a051b0 firmware: imx: scu-irq: Init workqueue before request mbox channel 9f2ff08737c4 scsi: ufs: host: mediatek: Fix shutdown/suspend race condition eb8d9fb6280d ipmi: Fix __scan_channels() failing to rescan channels 235ae3fc9e9c ipmi: Fix the race between __scan_channels() and deliver_response() 8a9c52cbaf96 ASoC: ops: fix snd_soc_get_volsw for sx controls aa0449550e1e ASoC: SDCA: support Q7.8 volume format 523c21a04c17 nfsd: fix memory leak in nfsd_create_serv error paths 74fd0ae1a7de ASoC: ak4458: remove the reset operation in probe and remove eaa95228b8a5 ALSA: usb-mixer: us16x08: validate meter packet indices 499057a7cc6b ALSA: pcmcia: Fix resource leak in snd_pdacf_probe error path 042e9e86d8e1 ALSA: vxpocket: Fix resource leak in vxpocket_probe error path 2068cf6f8276 ASoC: fsl_sai: Constrain sample rates from audio PLLs only in master mode 425672fdb7b6 x86/mm/tlb/trace: Export the TLB_REMOTE_WRONG_CPU enum in 82b6dfc0aa60 x86/fpu: Fix FPU state core dump truncation on CPUs with no extended xfeatures f01e9f891c37 x86/msi: Make irq_retrigger() functional for posted MSI 34c0e95524d6 x86/bug: Fix old GCC compile fails 6220d38a08f8 net/hsr: fix NULL pointer dereference in prp_get_untagged_frame() e1be561f6b14 dt-bindings: mmc: sdhci-of-aspeed: Switch ref to sdhci-common.yaml 2ebf2e631d53 mmc: sdhci-of-arasan: Increase CD stable timeout to 2 seconds 87e74671ddbc mmc: sdhci-esdhc-imx: add alternate ARCH_S32 dependency to Kconfig be0b613198e6 spi: fsl-cpm: Check length parity before switching to 16 bit mode 7e086c97dd2b ACPI: CPPC: Fix missing PCC check for guaranteed_perf 4cb75cd4eeb4 ACPI: PCC: Fix race condition by removing static qualifier 76033cf8c2e4 platform/x86: intel_pmc_ipc: fix ACPI buffer memory leak 4a4193d9c6dd soc/tegra: fuse: Do not register SoC device on ACPI boot bb958a1320b5 can: gs_usb: gs_can_open(): fix error handling da852f46c76e xfs: don't leak a locked dquot when xfs_dquot_attach_buf fails 8722085fd23b Input: i8042 - add TUXEDO InfinityBook Max Gen10 AMD to i8042 quirk table a9c115e017b2 Input: alps - fix use-after-free bugs caused by dev3_register_work cffc4e29b1e2 Input: lkkbd - disable pending work before freeing device 40e3042de43f Input: ti_am335x_tsc - fix off-by-one error in wire_order validation 9d9eab0eb2bf Input: xpad - add support for CRKD Guitars cae029e0575d Input: apple_z2 - fix reading incorrect reports after exiting sleep 14b1a6009e48 HID: input: map HID_GD_Z to ABS_DISTANCE for stylus/pen 6dc8cf6e7998 ksmbd: fix buffer validation by including null terminator size in EA length 8cabcb4dd3dc ksmbd: Fix refcount leak when invalid session is found on session lookup 571204e4758a ksmbd: skip lock-range check on equal size to avoid size==0 underflow 3041d93301ca hwmon: (ltc4282): Fix reset_history file permissions 0821f3ad2d6e arm64: dts: mediatek: Apply mt8395-radxa DT overlay at build time 66dce411c7e9 amd/iommu: Preserve domain ids inside the kdump kernel 1e5b2d2138f6 drm/xe/oa: Always set OAG_OAGLBCTXCTRL_COUNTER_RESUME 338849090ee6 drm/xe/oa: Limit num_syncs to prevent oversized allocations 1d200017f55f drm/xe: Limit num_syncs to prevent oversized allocations cfc473f29eb5 block: rnbd-clt: Fix leaked ID in init_dev() 0460e09a6142 ublk: fix deadlock when reading partition table 474cf21e0c0e ublk: refactor auto buffer register in ublk_dispatch_req() 5907d423400e ublk: add `union ublk_io_buf` with improved naming 0f6f3cf11bfe ublk: add parameter `struct io_uring_cmd *` to ublk_prep_auto_buf_reg() a4315e409ab0 io_uring: fix nr_segs calculation in io_import_kbuf 0ab22a1796e0 spi: cadence-quadspi: Fix clock disable on probe failure path dac58c012c47 drm/amdgpu: fix a job->pasid access race in gpu recovery f51cc7aeb3d0 arm64: kdump: Fix elfcorehdr overlap caused by reserved memory processing reorder 0901f5fe2a01 x86/xen: Fix sparse warning in enlighten_pv.c 09fe52c728e0 drm/panel: sony-td4353-jdi: Enable prepare_prev_first 548e158dbf57 MIPS: Fix a reference leak bug in ip22_check_gio() 63cc97bd85e3 drm/xe: Restore engine registers before restarting schedulers after GT reset 4c8a881044e1 drm/xe: Increase TDF timeout f72c9ecd4b25 drm/me/gsc: mei interrupt top half should be in irq disabled context 754b10c067f0 drm/xe: fix drm_gpusvm_init() arguments 3a3612dc7055 drm/xe: Apply Wa_14020316580 in xe_gt_idle_enable_pg() f6ec2d5c21b1 drm/xe: Fix freq kobject leak on sysfs_create_files failure ea62d22f5772 hwmon: (tmp401) fix overflow caused by default conversion rate value 5aa213920166 hwmon: (ibmpex) fix use-after-free in high/low store e52b375b7dae hwmon: (dell-smm) Limit fan multiplier to avoid overflow 5e4481ef397e spi: mpfs: Fix an error handling path in mpfs_spi_probe() c062e2785bbe spi: microchip: rename driver file and internal identifiers f55201fb3bec block: fix race between wbt_enable_default and IO submission ef8178f81002 block: use {alloc|free}_sched data methods 93869ded0ccc block: introduce alloc_sched_data and free_sched_data elevator methods aa81ed74af25 block: move elevator tags into struct elevator_resources 22f98de8fa78 block: unify elevator tags and type xarrays into struct elv_change_ctx 322d0132d8b5 selftests: ublk: fix overflow in ublk_queue_auto_zc_fallback() 9c0dc1d40b69 drm/tests: Handle EDEADLK in set_up_atomic_state() 5ffc53a58a75 drm/tests: Handle EDEADLK in drm_test_check_valid_clones() c35d4fba2e0b drm/tests: hdmi: Handle drm_kunit_helper_enable_crtc_connector() returning EDEADLK 91a51d01be5c net: hns3: add VLAN id validation before using f02f283ebfaf net: hns3: using the num_tqps to check whether tqp_index is out of range when vf get ring info from mbx 62f28d79a618 net: hns3: using the num_tqps in the vf driver to apply for resources 918aafade36d net: enetc: do not transmit redirected XDP frames when the link is down 3c330f1dee3c net/handshake: duplicate handshake cancellations leak socket 4af9c2cd9a84 net/mlx5e: Don't include PSP in the hard MTU calculations 52f7785dad93 net/mlx5e: Trigger neighbor resolution for unresolved destinations 2d2e05d3c2af net/mlx5e: Use ip6_dst_lookup instead of ipv6_dst_lookup_flow for MAC init a935b5993b9e net/mlx5: Serialize firmware reset with devlink d173741ab4cb net/mlx5: fw_tracer, Handle escaped percent properly 8c35c2448086 net/mlx5: fw_tracer, Validate format string parameters 2d2d97d8a644 net/mlx5: Drain firmware reset in shutdown callback 5af49c5c3bdb net/mlx5: fw reset, clear reset requested on drain_fw_reset 4066b5b54629 ethtool: Avoid overflowing userspace buffer on stats query 730a125ec467 can: j1939: make j1939_sk_bind() fail if device is no longer registered b166b8e0a381 iommufd/selftest: Check for overflow in IOMMU_TEST_OP_ADD_RESERVED 9bec0d706487 iommufd/selftest: Make it clearer to gcc that the access is not out of bounds 365417a77d38 selftests: netfilter: packetdrill: avoid failure on HZ=100 kernel 95b2dac3aaee netfilter: nf_tables: remove redundant chain validation on register store 79ea9102e66b netfilter: nf_nat: remove bogus direction check c59137e1314d nfc: pn533: Fix error code in pn533_acr122_poweron_rdr() 43d9a530c8c0 net/sched: ets: Remove drr class from the active list if it changes to strict 21fdcc00656a caif: fix integer underflow in cffrml_receive() 82abf247e013 selftests: netfilter: prefer xfail in case race wasn't triggered 689a627d1478 ipvs: fix ipv4 null-ptr-deref in route error path 4bd2b89f4028 netfilter: nf_conncount: fix leaked ct in error paths c70df25214ac inet: frags: flush pending skbs in fqdir_pre_exit() 58e7108971fa inet: frags: add inet_frag_queue_flush() 1b5c3b8826d4 inet: frags: avoid theoretical race in ip_frag_reinit() 9ed53331e418 selftests: net: tfo: Fix build warning aa3f345dbac2 selftests: net: Fix build warnings 008fd87cd708 selftest: af_unix: Support compilers without flex-array-member-not-at-end support 1d18e7155f64 broadcom: b44: prevent uninitialized value usage 698f389552ab net: ti: icssg-prueth: add PTP_1588_CLOCK_OPTIONAL dependency c999153bfb2d net: openvswitch: fix middle attribute validation in push_nsh() action f17e0c120848 bnxt_en: Fix XDP_TX path 4049a6ace209 mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats 675c5aeadf64 mlxsw: spectrum_router: Fix neighbour use-after-free fcb9e2e5cf04 mlxsw: spectrum_router: Fix possible neighbour reference count leak d2495f529d60 net/mlx5: Fix double unregister of HCA_PORTS component 7aa2085ca72b ipvlan: Ignore PACKET_LOOPBACK in handle_mode_l2() 90206ede6318 net: phy: RTL8211FVD: Restore disabling of PHY-mode EEE e3859271c72c net: phy: realtek: create rtl8211f_config_phy_eee() helper c6a23498f795 net: phy: realtek: eliminate priv->phycr1 variable ce370d988122 net: phy: realtek: allow CLKOUT to be disabled on RTL8211F(D)(I)-VD-CG d064d95c74d3 net: phy: realtek: eliminate has_phycr2 variable 7ec73f0e1600 net: phy: realtek: eliminate priv->phycr2 variable e12c912f92cc net/mlx5e: Avoid unregistering PSP twice f4a16bb7f8b5 net/mlx5: make enable_mpesw idempotent 45466141da3c net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change 51f5fbc1681b netrom: Fix memory leak in nr_sendmsg() ef4943d8c55c net: fec: ERR007885 Workaround for XDP TX path 6938e2fb4b4b gfs2: Fix use of bio_chain e84d2d5f3680 Bluetooth: btusb: Add new VID/PID 0x0489/0xE12F for RTL8852BE-VT 81b702a5486c Bluetooth: btusb: Add new VID/PID 13d3/3533 for RTL8821CE a35109f796db Bluetooth: btusb: add new custom firmwares a8c7343e2a04 Bluetooth: btusb: MT7920: Add VID/PID 0489/e135 c5f173e20fdd Bluetooth: btusb: MT7922: Add VID/PID 0489/e170 112a000505b8 Bluetooth: btusb: Add new VID/PID 2b89/6275 for RTL8761BUV ee63729760f5 ksmbd: vfs: fix race on m_flags in vfs_cache 063cbbc6f595 ksmbd: fix use-after-free in ksmbd_tree_connect_put under concurrency d8c5009bf41d smb/server: fix return value of smb2_ioctl() 32c3960b4212 gfs2: Fix "gfs2: Switch to wait_event in gfs2_quotad" a2046f5916c2 gfs2: fix remote evict for read-only filesystems 66e2f3c1aefe hfsplus: fix volume corruption issue for generic/101 306d8449af7c btrfs: scrub: always update btrfs_scrub_progress::last_physical f5323b43019d wifi: brcmfmac: Add DMI nvram filename quirk for Acer A1 840 tablet 9c6f9b2a80ed wifi: mt76: mt792x: fix wifi init fail by setting MCU_RUNNING after CLC load 0283fac52b42 wifi: cfg80211: use cfg80211_leave() in iftype change c3ab9657866f wifi: cfg80211: stop radar detection in cfg80211_leave() 40257a2ef1bc wifi: rtl8xxxu: Fix HT40 channel config for RTL8192CU, RTL8723AU d5fb4e2c9bb0 fs/ntfs3: check for shutdown in fsync 282214ddf847 hfsplus: fix volume corruption issue for generic/073 91f114bffa36 hfsplus: Verify inode mode when loading from disk 5882e7c8cdbb hfsplus: fix missing hfs_bnode_get() in __hfs_bnode_create 772e0a8809f1 hfsplus: fix volume corruption issue for generic/070 b3c151fe8f54 ntfs: set dummy blocksize to read boot_block when mounting f44e3d622d74 kbuild: Use objtree for module signing key path 5859a556db4b fs/ntfs3: Support timestamps prior to epoch 1c553c454f54 crypto: ccp - Add support for PCI device 0x115A c9266cafb277 livepatch: Match old_sympos 0 and 1 in klp_find_func() ab665eb99971 scripts: kdoc_parser.py: warn about Python version only once 3ef4a51315a9 x86/microcode: Mark early_parse_cmdline() as __init 63859f6da00d cpuidle: menu: Use residency threshold in polling state override decisions e486de4c945d cpufreq: s5pv210: fix refcount leak f916f071e41c ACPI: fan: Workaround for 64-bit firmware bug 3d9ecabe2953 cpufreq: dt-platdev: Add JH7110S SOC to the allowlist 29014a19d417 ACPI: property: Use ACPI functions in acpi_graph_get_next_endpoint() only f91dad0a3b38 ACPICA: Avoid walking the Namespace if start_node is NULL bb4c2f559e57 x86/ptrace: Always inline trivial accessors aab3236ff1da sched/fair: Revert max_newidle_lb_cost bump 3ed049fbfb4d sched/deadline: only set free_cpus for online runqueues 43c2e5c2acaa perf/x86/amd: Check event before enable to avoid GPF ec73412f61d3 scripts/faddr2line: Fix "Argument list too long" error bfa4924cbc52 iomap: account for unaligned end offsets when truncating read range 142194fb21af iomap: adjust read range correctly for non-block-aligned positions 4642686699a4 shmem: fix recovery on rename failures 6fd59082b626 btrfs: fix changeset leak on mmap write after failure to reserve metadata 6564f76a9efe btrfs: fix memory leak of fs_devices in degraded seed device path d0e177e176e7 bpf: Fix verifier assumptions of bpf_d_path's output buffer b7a2957ace3d bpf: Fix truncated dmabuf iterator reads 75fffc9fef36 bpf, arm64: Do not audit capability check in do_jit() f79a80c7fc06 btrfs: fix a potential path leak in print_data_reloc_error() 815abd170966 btrfs: do not skip logging new dentries when logging a new name