7d1d06705486 Linux 6.18.60-xanmod1 5cca9e47fe62 Merge tag 'v6.18.60' into 6.18 f45ed76d6791 Linux 6.18.60 057cd46db83f ACPI: tiny-power-button: Convert the driver to a platform one 05a4e200b129 ACPI: scan: Do not combine resources that overlap completely 67073dd6a642 resource: Add __resource_contains_unbound() for internal contains checks 112182caff41 ACPI: scan: Avoid registering platform devices with resource overlaps 70178691c467 pid_namespace: prevent TIF_NOTIFY_SIGNAL from interrupting the reaper 2decf30c2427 signal: allow taks to temporarily block TIF_NOTIFY_SIGNAL 7df22750f30d exit: hang up the tty before closing the files f7ac8500d58e fork: release the files of a failed fork after sched_cancel_fork() 85b3ef7b9648 ptrace: refuse to change the signal mask of a user worker 19c3fbf86c2a signal: only SIGKILL and the freezers interrupt a coredumping task c91e2a1f058d signal: don't retarget shared signals in a dying thread group 16e94ed90b1b coredump: hold RCU while releasing parked threads 8932e5a4df11 ftrace: Initialize modname and offset in print_rec() 1aa0c7aa4c25 asymmetric_keys: reject trust keys without IDs e55d48f21f59 keys/trusted_keys: return immediately after TPM unseal failure 0dac848d4e81 KEYS: trusted: Fix blob allocation size in tpm2_key_decode() 01835d3a3709 KEYS: Fix key_reject_and_link() race with keyring restriction 3edc064069d0 keys: Protect the read method check against type removal 61ac0585d9f4 keys: make keyring indexes independent of kernel addresses 6b613747f7ea keys: Protect the type name while describing a key b86db7993051 keys: Check the authorization payload in process keyring searches b0830a26e2c3 keys: Avoid the owner account dereference in named keyring lookup d3a32432e6be io_uring: keep the drain active when a deferred drain request is started 708031a0f3d8 io_uring: end the drain when the drain request completes 5bfeee177479 io_uring/waitid: prevent cancel reference wrap 29257ada73c4 io_uring/wait: wake real-time waiters from hard interrupt context 68c3969f8682 io_uring/net: keep recv buffer select length within MAX_RW_COUNT 9249f350e9b2 io_uring/poll: don't loop on HUP with multiple references f10ab47077e6 io_uring/timeout: don't lose a cancel as io-wq arms a timeout 045dfbbbc723 io_uring/timeout: don't flush with the sequence behind the last flush c7bb2c49581e io_uring/timeout: don't put a sequence target behind the last flush afa407c02f3a io_uring/poll: avoid retry wakeup loss when dropping ownership 8e3ac8ada6b5 io_uring: look up the file before queueing to io-wq 379b1382befb io_uring/timeout: don't end a linked timeout with 1 d25c2deb5dd4 io_uring/timeout: no ABS update of multishot timeouts fc8506eea449 io_uring/net: don't retry recv on uncommitted buffers e9b540d004ca io_uring: don't pass restart error codes to userspace b4b7b2d19dab io_uring/openclose: keep the lock in io_pipe_fixed() 64fca102086d io_uring/sqpoll: let the thread sleep on disabled rings 857de5de2f57 io_uring/kbuf: handle index wrap in last buffer check 9bfb315e2d09 io_uring/zcrx: fix buffer offsets in areas above 4GB 1731af12abdd io_uring/napi: don't busy poll past an expired timeout 18c373f44606 io_uring/napi: make stale entries time out after 60s d978f1fafc53 io_uring/wait: no early -ETIME if min_wait finds work 515e06072da3 io_uring/timeout: keep repeat count on multishot update ec99bc7fae9f io_uring/timeout: don't skip over reached sequences c5a92562cddf io_uring/fdinfo: fix CQE dump of CQE32 rings 24ea0d2fc921 io_uring/register: handle index wrap when resizing 82274bbae24f io_uring/register: don't wrap 32b CQEs when resizing 3a9c90b5be6f io_uring: drop the CQE cache if a refill fails 3330d7c73fa9 io_uring/futex: allocate private hash before waiting 1924a7e96308 io_uring/poll: drop stale double poll entry on rearm feb9c75c4d24 io_uring/wait: look at all CQ waiters on wake up 2c88d978f1df io_uring: wake ring pollers for local task_work 1827b011dd85 io_uring/cancel: let CANCEL_ALL find parked requests 49dbeedbcc39 io_uring/cancel: recognize "no timeout" on 32-bit 83fb8fe2210d io_uring/cancel: don't forget that the work was running 4a9748a48f23 io_uring: don't lose a cancel as io-wq parks a request 272f545ab931 io_uring/poll: don't lose a cancel as io-wq arms poll a08c16cf4032 io_uring/io-wq: let cancel find picked up hashed work 5d8092339f32 io_uring/io-wq: don't exit with a creation pending 661bfc5b5cec io_uring/io-wq: don't strand work when a worker exits 20558701dbeb io_uring/io-wq: don't go to sleep on pending work 14f56e9c0b8f io_uring: don't flood a cancelling task with task_work 3e02b8df0e9f io_uring/io-wq: don't hide a link from cancellations 7309fea05a3d io_uring/io-wq: don't lose the signal that ends work 4a89352edd8b io_uring/wait: don't spin on a stuck overflow list 2d5af2142206 io_uring/cmd: don't leave list poison in ->hash_node 8381a912c65b io_uring/waitid: own the request before clearing ->head 0d81cdd433b0 io-wq: order the exit bit against worker creation task work 388604279da3 net: gso: limit recursive IP-in-IP segmentation 06e816bed499 tracing/histograms: Verify event_call identity when updating synth_event refcount a9c51d3b5311 tracing: Fix 64-bit and signed histogram fields on 32-bit kernels 431959fc7645 tracing: Unregister field variable histograms when the command fails 3609ada3c12c tracing: Save the event file instead of the compatible histogram 1008e9e0b828 tracing: Reject incomplete event filter expressions 92b69f6db640 tracing: Hold trace_types_lock when resetting last boot data from readers 57408eac99b0 tracing: Hold trace_types_lock when updating modules in persistent instances 10c705dd706a Bluetooth: L2CAP: refuse __l2cap_chan_add if chan already has conn 216a047d17b5 net_sched: codel: fix stale state for empty flows in fq_codel d5482be6243b mm/damon/core: error damos_commit_quota_goal() for zero target_value ce68b7a19a23 block: avoid potential deadlock on zone revalidation failure 50a4c00511cf ax25: don't free an incoming SABM skb left on the listener's queue 422548da8d1a rose: bring up the link of the preferred route passed over by a connect request e1765e170a08 ax25: send unacknowledged I frames again when a link is re-established 26c0952ba226 rose: clear the circuits of a neighbour that restarts the link d5189ba85343 ax25: send a private copy of each I frame f44808ff191c ax25: don't accept frames on a device that is going down d046414d5900 ax25: wait for ax25_send_frame() before detaching the connections of a device 08690ab94ca8 ax25: read the connection's ax25_dev only once when walking ax25_list 56165cd0710c ax25: don't create two connections for the same link in ax25_send_frame() 515efcc5aacc rose: process received frames and send with the socket locked ccf05d51014e ax25: serialise the transmission of I frames on a connection d43478056d6f rose: restart the link of a neighbour created over a live AX.25 connection 1e3cba409644 rose: clear through routes when a neighbour is removed from the tables d834cb9b9ce7 netrom: fix nr_node leak when nr_del_node() removes the last route f026224d0301 netrom: clear nr_neigh->ax25 under the routing lock in nr_link_failed() 9e08bc699bde netrom: fix reference count leak in nr_rt_device_down ece0d8fc6a45 netrom: look up and update routes in one critical section a007f3036b59 netrom: use a single lock for the node and neighbour lists 23c0aedefd90 net: ax25: fix integer overflow in ax25_rx_fragment() d3db0d9b568b ax25: check frame length in ax25_decode() and ax25_rx_iframe() 0fb17d4257e8 ax25: fix OOB read after address header strip in ax25_rcv() 9a92a7f8bd97 netrom: bound fragment reassembly in nr_queue_rx_frame() 775505307e97 net: netrom: validate source address in nr_find_socket() 2cf088d42435 netrom: require full NET/ROM headers in nr_route_frame() c8082ee771a0 netrom: linearize and validate lengths in nr_rx_frame() e885a256982c rose: clear stale N(R)/N(S) before (re)transmitting a data frame 2a2927e95cf1 ice: change XDP RxQ frag_size from DMA write length to xdp.frame_sz eae1bd12387e ice: fix rxq info registering in mbuf packets 54136991299a ACPI: scan: Register platform devices for fixed event buttons 600d95eb39ad eventfs: fix SRCU read lock leak in eventfs_iterate()