bcf300e518c5 Linux 6.18.59-xanmod1
17c75c6d5860 Merge tag 'v6.18.59' into 6.18
1253a6aa5d10 Linux 6.18.59
9a5d65b06dc3 smb: client: drain outstanding I/O before truncating on O_TRUNC open
a4c584ea79d9 ice: fix crash in ethtool offline loopback test
9f158a9b10e1 ice: fix broken Rx on VFs
f4a25618c368 ice: switch to Page Pool
0026267561bc ice: drop page splitting and recycling
c8bd04221f6a ice: remove legacy Rx and construct SKB
4d143608a044 smb: client: fix data corruption with concurrent writes and O_TRUNC
c027f8b429db vsock/vmci: validate packet source for connected sockets
ecd7ead4bf05 ipv4: udp: Create exceptions before socket matching
6cd829de69ef vsock/virtio: validate packet source for connected sockets
569c34a35fbc virtio: set skb owner of virtio_transport_reset_no_sock() reply
f320b85c90fe workqueue: Fix unbound pool lifetime for pending pwqs
299912bbc645 workqueue: release pwq pools by pool type
94d13387b96e io_uring/cancel: don't spin on local work the task can't run
7123c79206e4 io_uring/cancel: move cancelation code from io_uring.c to cancel.c
76cb14d6f143 io_uring/cancel: move __io_uring_cancel() into cancel.c
755e88e78bea io_uring/cancel: move request/task cancelation logic into cancel.c
de477667b890 cifs: add revalidation on FSCTL failure in smb2_duplicate_extents()
242c7b3a71dd smb/client: refresh allocation size after duplicate extents
8d891c218016 sched_ext: Fix stall when a task enqueued with SCX_ENQ_LAST lands back on its CPU's local DSQ
6ac46ae5ac56 drm/amdgpu: free the userptr ranges when a CS fails after parser_bos
2058a1fe791b tracing: Keep the predicate limit separate from program capacity
07180a910e9d tracing: Fix ignored return value of resize_buffer_duplicate_size()
a425e1c68759 sched_ext: idle: Respect task affinity in restricted CPU selection
dfcfe2874e7c drm/i915/dmc: Harden DMC firmware payload parsing
c8b1a4840467 ntfs3: free the sbi after a grace period
d977b979081e fs/ntfs3: fix ntfs_mount_options leak in ntfs_fill_super()
129b0a64fe9a ntfs3: fix double free of sbi->options->nls and clarify ownership of fc->fs_private
e0ab43727657 ntfs3: fix use-after-free of sbi->options in cmp_fnames
a1647b653549 scsi: st: Fix use-after-free race between st_remove() and st_open()
d2f591e6c730 smb: client: fix multiuser mount with krb5
d96f3365ce61 smb: client: fix heap overflow in cifs_do_set_acl()
45e60747a9db net/sched: cls_flower: validate mask pointer after nla_next()
898cb4f2e12a ksmbd: zero the FS_OBJECT_ID_INFORMATION buffer before filling it in
d8c450ad0d08 ksmbd: initialize FileSystemControlFlags in FS_CONTROL_INFORMATION
beba2ef6f66a ksmbd: fill in FileSysIdentifier in FS_POSIX_INFORMATION
a9f14ea73e82 net: psp: do not inherit the Rx association on clone
8243d587a081 net: bridge: mcast: don't truncate the port group walk on teardown
80d5db1686b0 ext4: free the sbi after a grace period
cad63a7798d6 ASoC: SOF: ipc4-topology: Fix shift-out-of-bounds for aggregated ALH capture
c17cc2027773 futex: Fix mm reuse handling for FUT_OFF_MMSHARED
dce8f7f03a47 drm/amdgpu: keep the eviction fence until the last handle is closed
0caeefed99b3 KVM: x86/mmu: Cope with the SS bit being set in #NPF exit codes
7786dde1b500 KVM: x86/mmu: Preserve nested TDP shadow page tables if they are used as roots
dc29c0478b85 netfilter: nft_byteorder: remove multi-register support
61f376654fb9 drm/amdgpu: Fix VCE 3 ring align_mask
d49fa454c286 KVM: SVM: Stop toggling virtual VMSAVE/VMLOAD on intercept recalc
5dac5c7ba8f5 ipv4: avoid divide by zero in fib_rebalance
ba5001db9bb2 s390/pci: Fix leak of uninitialized kernel data in SCLP report
34fa3607b760 s390/ctcm: Prevent XID null dereference
813a72beaa5d page_pool: keep frag_offset aligned for odd-sized requests
40507f59f230 sctp: validate chunk length in the inqueue parser
b8b7d28dc2b7 tipc: protect node reset trace dump with node lock
f7e82f72b90c workqueue: Annotate cb_lock nesting when draining a dead BH pool
6b26b3d39904 workqueue: Use raise_softirq() to trigger softirq in irq_work handler
b6a0e5faf0dc netlink: specs: add missing mask attributes for conntrack dump
62ed32a1d449 netlink: specs: fix the conntrack filter type
e20e6b14e3b5 xfs: fix zoned write iomap flags assignments
19a1a22029ad xfs: fix capability check in xfs
e5456dec79c7 xfs: don't hold buffer locks across sync transaction commit in xfs_sync_sb_buf
8f2efa742f4c net/iucv: fix the recvmsg window update
3cdd8b1abdde mac802154: fix data race and NULL deref on local->assoc_dev
c8922e7afb05 dm-integrity: require stable writes for internal hash modes
fc512700f141 dm-integrity: fix infinite loop on discard with large tag size
40791f07bad6 dm-ebs: fix incorrect device offset check in ebs_ctr()
ac5d887ab935 dm-crypt: fix a tiny race condition in crypt_dec_pending
73df2ff409f3 dm cache: fix issue with background work locking
de9e8e587c07 dm cache: fix demotion stats in passthrough mode
04d020b3d0b5 cifs: don't update i_size in cifs_do_truncate without a cached handle
2f9dd8214d42 cgroup: fix spurious SIGKILL of CLONE_INTO_CGROUP children
86814e537006 tcp: fix use-after-free in do_tcp_getsockopt(TCP_CC_INFO)
c1804ef01639 tcp: fix use-after-free in do_tcp_getsockopt(TCP_CONGESTION)
f641066b0ddc wifi: p54: validate firmware record lengths
09c7cce2e59e tracing: Fix hist trigger timestamps for buffered events
813e18881c64 tracing: Do not initialize tracefs work if tracing is disabled
a866a8a75392 tracing: Check operator stack capacity before pushing
7c0c6d88a232 tracing: Take trace_types_lock when dropping the buffer_meta reference
c4918c28b1ba tracing: Fix the shift out of bounds in the log2 histogram modifier
3a3c4503ba1b drm/xe: Bump LRU for external objects on exec and rebind
ef82b4d5cb4a drm/i915/dmc: Add sanity check for DMC load address
22fd3f760845 drm/i915/cx0_phy: Fix ARL-S host bridge detection
96d9996e5dbc drm/exec: don't immediately add prelocked obj to array of locked objs
07002a326c7c drm/amdgpu: report the BO alignment in bytes in GEM_LIST_HANDLES
652b1f26125f drm/amdgpu: don't drop the runtime PM reference twice in amdgpu_gpr
05507b9b19f9 drm/amdgpu/sdma3: Work around POLL_REGMEM / FENCE hang
6cfc4a25d4f0 drm/amd/pm: add zero fan stop temperature support on smu 14.0.2
55a65ef61e27 scsi: libiscsi: Validate the task named by a management response
7215a69b6456 scsi: libiscsi: Validate the ITT reflected in a Reject PDU
6cadfa6f1f58 scsi: libiscsi: Reject a negative task index from parse_pdu_itt
1d91ec793d6c scsi: xen/scsifront: Check for a NULL shadow entry on a backend response
2effbe746452 scsi: bsg: Pass reply_len to bsg_setup_queue() to fit UFS ARPMB replies
029770f5bade ring-buffer: Fix false warning in ring_buffer_map_get_reader()
2f1248b728b5 ring-buffer: Fix the sub-buffer array base in rb_meta_subbuf_idx()
8512d0312cc0 ring-buffer: Do not show buffer_meta for CPUs without a buffer
29469305a939 perf: Update cgroup time when rotating multiplexed events
b67fb3955b07 perf: Track the perf mlock gift separately
5d476bb76b7d i2c: viai2c-wmt: Fix clock leak in wmt_i2c_probe()
d2cb4d745149 i2c: qcom-cci: Fix HALT_ACK reset request being dropped
1f36e4ddd05d tracing/histograms: Reject non-stacktrace fields for synthetic stacktrace fields
13735c2cf484 tools: gpio: fix building from the top level with O=
77a63d1b813b sctp: revalidate output stream after association connect wait
6232e93c3036 pinctrl: amd: Clear S4 wake bits when firmware has _AEI
5f23e4e3a31d net: rds: fix uninitialized trans dereference in CM event handler
2465d27ef90d net/sched: fix use-after-free in __tcf_action_put()
568323cddd54 lib/crypto: poly1305: Use memzero_explicit() in poly1305_final()
ae6584eaaa4f lib/crypto: arm64: Fix lost Poly1305 carry when resuming NEON state
492c10662177 namei: test for a negative dentry the way traverse_mounts() does
4586ef24ce39 eventfs: Free the eventfs_inode after an rcu grace period too
2e10b8a74f55 pid_namespace: make zap_pid_ns_processes() freezable
952501bfc6e5 fsnotify: prevent mark additions during connector teardown
d00d5f534a82 KVM: nVMX: Reset MMU back to the root MMU if loading L2 state fails for !VM-Entry
b77e9622bbad x86/kvm: Don't consume async #PF flags on a kernel #PF in NMI context
811fb6d0b076 watch_queue: Fix note pool publication race in watch_queue_set_size()
2b54d3c971a1 unicode: free the map after a grace period
d518fc5cced1 bootconfig: give the footer size static_assert a message
1a177064f501 autofs: ignore notification errors from a replaced pipe
debb0f36bfe3 afs: free the super info after a grace period
5078c91f5c84 accel/rocket: search every core slot when a core is removed
7249a442ab26 PCI: Don't treat ~0 as ready in pci_dev_wait() with RRS SV
7595bacee48b printk: Postpone kthread startup
3eb08f09bfb3 perf: Fix perf_pmu_migrate_context() leaving events behind
d0ffb0dc0116 gpio: mxc: fix race between gpiochip registration and IRQ domain setup
238f93bd1d06 gpio: mxc: fix wakeup_pads bit operations
dab5c228a846 gpio: mxc: use BIT() macro
911f606dd05d gpio: mxc: fix both_edges bit operations
261802c14e1a gpio: mxc: fix race between chained IRQ handler install and probe completion
78189c0e35ab gpiolib: fix memory leak in gpiod_set_array_value_complex() on error paths
1c9fcfca51e3 calipso: keep BIG TCP payload_len in calipso_skbuff_setattr()
e221a7d6f7c9 net/ipv6: Introduce payload_len helpers
40c04abcbc34 net: bcmgenet: unshare the skb before writing the control block
bdd55b8a8acb netlink: avoid hashing the network namespace pointer
c9fb89246d99 scsi: libsas: Fix SMP IO deadlock during HA resume
fbb5a6f0b06f tracing: probes: error if BTF is required but unavailable
4c42ce499ce4 pipe: preserve existing fasync readers on writer setup failure
7780f9e828da samples: pidfd: fix userprogs typo
04d4571c00db ocfs2/dlm: Protect the recovery list during debugfs reads
de3923caf077 drm/panthor: fix immortalis condition
9b07828b133b scsi: target: iscsi: Fix race in discovery auth updates
71e12d43ef37 scsi: st: Save the visited block for the partition the drive is in
e3bf250a2fda nios2: fix __wsum type degradation in csum_fold()
e4d45c651d19 spi: tegra114: assert CS GPIO for every transfer in a message
21f41b6daf0d drm/xe/oa: Zero OA buffer at allocation
6046bb9cb285 drm/xe: skip eviction of a BO with no resource
8d15821aa2de ASoC: amd: yc: disable MSI on resume
efe1393e783f net/mlx5: HWS, fix flow meter offset within its bulk
a3516f0704b9 net/mlx5: HWS, release L2 to L3 tunnel reformats to their own pool
79071b67182e accel/rocket: clear rdev on device init failure
06791594274f netlink: reset skb headers before unicast and multicast filtering
4a9fb8122a19 regmap: Drop map lock during cache init and exit
bae057687f61 regcache: Do not overwrite error code when finalizing cache after error
b498b70a8174 regcache: Add ->populate() callback to separate from ->init()
0a9a172d4cbf ASoC: nau8822: Fix the 128x oversampling switch bits
9a87917b8f3d ASoC: wm8978: Fix the 128x oversampling switch bits
9b1a72628f12 ASoC: max98371: Fix the Speaker DHT Min Volume bits
384e00dd8908 ASoC: pcm3168a: Fix the DAC zero flag polarity bit
db3a7a70cc21 ASoC: cs42l52: Fix the NG Type Switch bit
856ecf3c600a ASoC: cs42l56: Put the Limiter Cushion control on the limiter register
4528f8d38d89 ASoC: stm32: spdifrx: fix synchronization state check
d3239b8f4fc4 ASoC: Intel: avs: Reset the stream unless it is already prepared
a7c7d0ff8763 net/rds: don't let the rdma_cm destroy an id RDS still owns on route failure
c2c5359ef2c3 vsock: treat TCP_CLOSING as once-established
fb5fb74fb4ff gpio: nct6694: Mark the GPIO controller as sleeping
6b03e354526f drm/vc4: hdmi: Move packet RAM enable to PM runtime
47b725c17dcb pinctrl: sunxi: dt: do not accumulate npins across probe attempts
9d0508bcf674 pinctrl: qcom: ipq5018: replace gcc_plltest with pwm2 on gpio12
2ac0256a28e1 power: supply: core: prevent unregistering a power supply while a callback runs
dda0df37aabd power: supply: generic-adc-battery: Fix temperature IIO channel conversion
06e3e6dc2688 tools/power turbostat: Fix add_counter issue if > 24 counters.
f573d257aad5 tools/power turbostat: Fix PMT error path fd handling
b2af180dbc5f tools/power turbostat: Fix CWF PMT off-by-one
e2c86984ccc0 tools/power turbostat: Fix fd_perf leak on reset
e76e6284de2b pinctrl: qcom: ipq5018: add missing pwm3 function on gpio13
54e54a690bf1 pinctrl: qcom: qcs8300: Fix intr_target_width
f47ce27af80b Drivers: hv: Don't reset VMBus connection state on error/exit paths
2b561786c907 x86/hyperv: Avoid using per-cpu output page in hv_apicid_to_vp_index()
7141331f2d24 Drivers: hv: Avoid infinite retry loop in init_vp_index()
c3e5854b2e8b power: supply: ds2780: Fix ds2780_get_capacity() returning raw value
7de3a5a49410 power: supply: Fix maintenance charge table kernel-doc
ea9c08c33d57 ARM: dts: ti/omap: dra7: fix PCIe PHY clock divider definition
0992d03e55e5 soc/tegra: fuse: Add missing newline to APBMISC error message
07fa8baa78d6 kho: free phys_bits bitmaps using free_page() in __kho_abort()
96d2abaa2e32 i2c: qcom-geni: Restore the source-clock selection policy
cd3c05651d04 rose: purge rose_neigh->queue on final teardown
6b450cf6dd41 ax25: bound REJ-driven fast retransmits with the existing N2 counter
c7bdc88b27cc ALSA: ctxfi: Use correct DAIO type for da_desc
fb5e2dd6565a ALSA: ctxfi: Rename SPDIFI1 to SPDIFI_BAY
7fca3600e79e ALSA: ctxfi: Don't enumerate SPDIF1 at DAIO initialization
b48ebe399b4e drm/ttm: fix swapped-out resources never leaving their bulk_move range