d39ecfc76bf5 Linux 6.19.12-xanmod1 4d2395b1b0f3 Merge tag 'v6.19.12' into 6.19 4ded67173728 XANMOD: .gitlab-ci: Change registry image to trixie ad8a3ed1e9f1 Linux 6.19.12 5adc01506da9 wifi: virt_wifi: remove SET_NETDEV_DEV to avoid use-after-free 6ce8afd360c2 kallsyms: prevent module removal when printing module name and buildid 81dca69c6290 kallsyms: cleanup code for appending the module buildid 8f928eebdf9a kallsyms: clean up modname and modbuildid initialization in kallsyms_lookup_buildid() 0349f69e4da3 kallsyms: clean up @namebuf initialization in kallsyms_lookup_buildid() 26304d124e7f usb: gadget: f_uac1_legacy: validate control request size 26a879a41ed9 usb: gadget: f_hid: move list and spinlock inits from bind to alloc 6045ea5ca6e3 usb: gadget: f_rndis: Fix net_device lifecycle with device_move fde29916e4cc usb: gadget: f_subset: Fix net_device lifecycle with device_move 14730506b9e2 usb: gadget: f_eem: Fix net_device lifecycle with device_move 9b1e55895932 usb: gadget: f_ecm: Fix net_device lifecycle with device_move 209decd3f790 usb: gadget: f_rndis: Protect RNDIS options with mutex 23e4851ce348 usb: gadget: f_subset: Fix unbalanced refcnt in geth_free c038ba56b92e usb: gadget: uvc: fix NULL pointer dereference during unbind race 7de4d46be407 usb: gadget: u_ether: Fix NULL pointer deref in eth_get_drvinfo 8ff689edfece usb: gadget: u_ether: Fix race between gether_disconnect and eth_stop 854c6b49c292 HID: appletb-kbd: add .resume method in PM 98429e9ec89a usb: typec: ucsi: validate connector number in ucsi_notify_common() 625a53ef398e usb: gadget: dummy_hcd: fix premature URB completion when ZLP follows partial transfer 8bcd80219d8e USB: dummy-hcd: Fix interrupt synchronization error 69ab97a69325 USB: dummy-hcd: Fix locking/synchronization error 5cba3060ee50 thunderbolt: Fix property read in nhi_wake_supported() 0b7845c6a391 usb: typec: thunderbolt: Set enter_vdo during initialization 777c3c26e2cb misc: fastrpc: check qcom_scm_assign_mem() return in rpmsg_probe f67d368d2676 misc: fastrpc: possible double-free of cctx->remote_heap 4d390f0e507d thermal: core: Fix thermal zone device registration error path c4593f1654f7 thermal: core: Address thermal zone removal races with resume fb4584d2b324 gpio: Fix resource leaks on errors in gpiochip_add_data_with_key() 178890edfcd1 gpio: mxc: map Both Edge pad wakeup to Rising Edge 7ea601daa015 sched_ext: Fix stale direct dispatch state in ddsp_dsq_id b4992a9446bb sched_ext: Fix is_bpf_migration_disabled() false negative on non-PREEMPT_RCU 3bf9d023d232 cpufreq: governor: fix double free in cpufreq_dbs_governor_init() error path 13b113659173 virtio_net: clamp rss_max_key_size to NETDEV_RSS_KEY_LEN 50ecd96a28f7 iommupt: Fix short gather if the unmap goes into a large mapping 7b2380f0a0e3 net: ethernet: mtk_ppe: avoid NULL deref when gmac0 is disabled 82f86111f070 net: ftgmac100: fix ring allocation unwind on open failure b69c4236255b vxlan: validate ND option lengths in vxlan_na_create 429d05565eb1 crypto: tegra - Add missing CRYPTO_ALG_ASYNC 63be324c7952 counter: rz-mtu3-cnt: do not use struct rz_mtu3_channel's dev member f5f6f06d7e6d counter: rz-mtu3-cnt: prevent counter from being toggled multiple times cb8973162912 vt: resize saved unicode buffer on alt screen exit after resize 428fdf55301e vt: discard stale unicode buffer on alt screen exit after resize 3f39b1273438 gpib: Fix fluke driver s390 compile issue ceacaa76f221 netfilter: ipset: drop logically empty buckets in mtype_del 6c01e7f11f5e nvmem: zynqmp_nvmem: Fix buffer size in DMA and memcpy 62249f1a6d36 nvmem: imx: assign nvmem_cell_info::raw_len ab09b9a1e3b0 PM: EM: Fix NULL pointer dereference when perf domain ID is not found 1de465753220 reset: gpio: fix double free in reset_add_gpio_aux_device() error path e7813ea3cc60 s390/cpum_sf: Cap sampling rate to prevent lsctl exception ace37bfec382 s390/zcrypt: Fix memory leak with CCA cards used as accelerator b7c0fc21ec01 spi: cadence-qspi: Fix exec_mem_op error handling 7b0b909c41ae dt-bindings: connector: add pd-disable dependency 980e284075c7 firmware: microchip: fail auto-update probe if no flash found de3f923ae7d9 comedi: me4000: Fix potential overrun of firmware buffer c8c607a77aab comedi: me_daq: Fix potential overrun of firmware buffer d07d97ca4f7f comedi: ni_atmio16d: Fix invalid clean-up after failed attach 83134a7a176c comedi: Reinit dev->spinlock between attachments to low-level drivers 830c848aba9f comedi: runflags cannot determine whether to reclaim chanlist 34b13250c618 comedi: dt2815: add hardware detection to prevent crash 92c5c03f71bc cdc-acm: new quirk for EPSON HMD e71303a91904 bridge: br_nd_send: validate ND option lengths 625fdac41cfc auxdisplay: line-display: fix NULL dereference in linedisp_release ebc2fcdba47d io_uring: protect remaining lockless ctx->rings accesses with RCU d4cc15294d6d usb: core: use dedicated spinlock for offload state b490f0e477d2 usb: cdns3: gadget: fix state inconsistency on gadget init failure 14bf08ab2cdf usb: cdns3: gadget: fix NULL pointer dereference in ep_queue 04d8e0411c21 usb: core: phy: avoid double use of 'usb3-phy' 51b62286fc66 usb: dwc2: gadget: Fix spin_lock/unlock mismatch in dwc2_hsotg_udc_stop() fdf734a4c277 usb: ehci-brcm: fix sleep during atomic 21e02f2bcb2b usb: host: xhci-sideband: delegate offload_usage tracking to class drivers 1762dc43b983 usb: misc: usbio: Fix URB memory leak on submit failure d40198de5023 usb: usbtmc: Flush anchored URBs in usbtmc_release a6e5461f076c usb: ulpi: fix double free in ulpi_register_interface() error path 0ddfd8646893 usb: quirks: add DELAY_INIT quirk for another Silicon Motion flash drive 706f4fe2dacc gpib: lpvo_usb: fix memory leak on disconnect cde2617a7a6d mei: me: reduce the scope on unexpected reset 1e6412a1c40a iio: gyro: mpu3050: Fix out-of-sequence free_irq() 59a317f82156 iio: gyro: mpu3050: Move iio_device_register() to correct location e66215fc1878 iio: gyro: mpu3050: Fix irq resource leak 2821f7b62c5b iio: gyro: mpu3050: Fix incorrect free_irq() variable 3225a81e8d26 iio: imu: st_lsm6dsx: Set buffer sampling frequency for accelerometer only 85be6e4d2c4d iio: imu: st_lsm6dsx: Set FIFO ODR for accelerometer and gyroscope only 44ca042cd6bf iio: imu: bmi160: Remove potential undefined behavior in bmi160_config_pin() 4f87ef4048d8 iio: light: veml6070: fix veml6070_read() return value 6fb4bd8834f4 iio: light: vcnl4035: fix scan buffer on big-endian 595abfc7616b iio: imu: adis16550: fix swapped gyro/accel filter functions 4c719772cacf iio: dac: ad5770r: fix error return in ad5770r_read_raw() c0fd83b0a5e7 iio: accel: adxl313: add missing error check in predisable 37891c52bcbf iio: accel: adxl380: fix FIFO watermark bit 8 always written as 0 86892dbc4068 iio: accel: fix ADXL355 temperature signature value 6a3ecaa2b6f9 iio: adc: aspeed: clear reference voltage bits before configuring vref ab84ff865682 iio: adc: ade9000: move mutex init before IRQ registration 9fbc93b20706 iio: adc: ade9000: fix wrong register in CALIBBIAS case for active power fc130772634c iio: adc: ade9000: fix wrong return type in streaming push c75eb149c772 iio: adc: ti-ads7950: do not clobber gpio state in ti_ads7950_get() 4394285b2f22 iio: adc: ti-ads7950: normalize return value of gpio_get 9d4e3c529f83 Input: xpad - add support for Razer Wolverine V3 Pro 82ae5085e2fd Input: xpad - add support for BETOP BTP-KP50B/C controller's wireless mode 62bf2b629edb Input: bcm5974 - recover from failed mode switch 9988d9bcc6f3 Input: i8042 - add TUXEDO InfinityBook Max 16 Gen10 AMD to i8042 quirk table c518eca395a3 Input: synaptics-rmi4 - fix a locking bug in an error path 2bcd5523d61c USB: core: add NO_LPM quirk for Razer Kiyo Pro webcam c1abb0ba9882 USB: serial: option: add support for Rolling Wireless RW135R-GL 1895b6b4331c USB: serial: io_edgeport: add support for Blackbox IC135A 59f3e9e31dfa drm/amdgpu/pm: drop SMU driver if version not matched messages d3508cf822c4 drm/amdgpu: Change AMDGPU_VA_RESERVED_TRAP_SIZE to 64KB 86b732fbc37c drm/amdgpu: validate doorbell_offset in user queue creation 1d6c25d224ef drm/amdgpu: Fix wait after reset sequence in S4 584668ed86e8 drm/i915/cdclk: Do the full CDCLK dance for min_voltage_level changes 70dfd16663cc drm/i915/dp: Use crtc_state->enhanced_framing properly on ivb/hsw CPU eDP 33b5336e4fd8 drm/i915/dsi: Don't do DSC horizontal timing adjustments in command mode 2a98748211fb drm/ast: dp501: Fix initialization of SCU2C 3124600a7558 iio: adc: ti-ads1119: Replace IRQF_ONESHOT with IRQF_NO_THREAD e42487d6c5d3 iio: adc: ti-ads1119: Reinit completion before wait_for_completion_timeout() 6e4ac0077aad iio: adc: ti-ads1119: Fix unbalanced pm reference count in ds1119_single_conversion() d2d031b0786e iio: adc: ti-adc161s626: use DMA-safe memory for spi_read() c5582fe4d32f iio: adc: ti-adc161s626: fix buffer read on big-endian 43f933dbdc4a iio: orientation: hid-sensor-rotation: add timestamp hack to not break userspace 77dff6ab64ac iio: orientation: hid-sensor-rotation: fix quaternion alignment b9860e9af2cf iio: add IIO_DECLARE_QUATERNION() macro 28c75dd143ea gpib: fix use-after-free in IO ioctl handlers d1fc07d6fb04 drm/amdgpu: fix the idr allocation flags de05c66fab88 x86/kexec: Disable KCOV instrumentation after load_segments() fb1064fcf848 mips: mm: Allocate tlb_vpn array atomically 7b89ce0c98bf hwmon: (occ) Fix division by zero in occ_show_power_1() 37459f84cf22 MIPS: Fix the GCC version check for `__multi3' workaround 2e65996ad8ac MIPS: SiByte: Bring back cache initialisation 515c2daab460 ksmbd: fix OOB write in QUERY_INFO for compound requests 86c8d07a64d5 Bluetooth: hci_event: move wake reason storage into validated event handlers eaf32002ca7b Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync ec17efb1ef91 Bluetooth: SMP: force responder MITM requirements before building the pairing response 9a6d0db176f0 Bluetooth: SMP: derive legacy responder STK authentication from MITM state 1b655cd31134 io_uring/net: fix slab-out-of-bounds read in io_bundle_nbufs() 5ebdf66cbfd7 ALSA: hda/realtek: change quirk for HP OmniBook 7 Laptop 16-bh0xxx 0a037fc43df4 ALSA: hda/realtek: add quirk for HP Victus 15-fb0xxx e043f7732c5a ALSA: hda/realtek: Add quirk for ASUS ROG Strix SCAR 15 4b35ea673665 ALSA: hda/realtek: add quirk for Acer Swift SFG14-73 a79c4c420578 ALSA: ctxfi: Don't enumerate SPDIF1 at DAIO initialization 950decf59d4e ALSA: ctxfi: Fix missing SPDIFI1 index handling d4d3b8cbb70a ALSA: ctxfi: Check the error for index mapping 7594a6464873 ALSA: caiaq: fix stack out-of-bounds read in init_card c3a7903f65cf sched_ext: Fix SCX_KICK_WAIT deadlock by deferring wait to balance callback 91999af43ca2 lib/crypto: chacha: Zeroize permuted_state before it leaves scope fdc7a8fbd3d7 sched_ext: Fix inconsistent NUMA node lookup in scx_select_cpu_dfl() 2d4a6f0702c5 drm/amd/display: Fix NULL pointer dereference in dcn401_init_hw() 39749cac5e97 USB: serial: option: add MeiG Smart SRM825WN ca0e9491b98c wifi: iwlwifi: mvm: fix potential out-of-bounds read in iwl_mvm_nd_match_info_handler() 0c7f21d8bd2f wifi: wilc1000: fix u8 overflow in SSID scan buffer size calculation 23355ee5c41b rust_binder: use AssertSync for BINDER_VM_OPS 27ef84bba9b9 drm/ioc32: stop speculation on the drm_compat_ioctl path f6345a850844 ACPI: RIMT: Add dependency between iommu and devices 8464ade1ff63 riscv: Reset pmm when PR_TAGGED_ADDR_ENABLE is not set 155cbdd5da44 riscv: kgdb: fix several debug register assignment bugs bfee04838f63 perf/x86: Fix potential bad container_of in intel_pmu_hw_config 492030fbb4cc sched/debug: Fix avg_vruntime() usage fb61ffb3fb30 sched/fair: Fix zero_vruntime tracking fix 248ef9f40497 mips: ralink: update CPU clock index 87ffb315ab94 hwmon: (asus-ec-sensors) Fix T_Sensor for PRIME X670E-PRO WIFI 20112a0ed571 drm/sysfb: Fix efidrm error handling and memory type mismatch ab087fb00024 irqchip/riscv-aplic: Restrict genpd notifier to device tree only 67eb0d8b11cd hwmon: (occ) Fix missing newline in occ_show_extended() 5e11741aec3b spi: amlogic: spifc-a4: unregister ECC engine on probe failure and remove() callback 1210955855bb hwmon: (tps53679) Fix device ID comparison and printing in tps53676_identify() 400ee45f8048 drm/xe/pxp: Clear restart flag in pxp_start after jumping back cfef215d0574 drm/xe/pxp: Remove incorrect handling of impossible state during suspend c7ddd98f507c drm/xe/pxp: Clean up termination status on failure b656f040ed4e drm/xe/xe_pagefault: Disallow writes to read-only VMAs 61e7efb72c31 spi: stm32-ospi: Fix reset control leak on probe error 0807532c5ebb spi: stm32-ospi: Fix resource leak in remove() callback 17a86c8ff636 dt-bindings: gpio: fix microchip #interrupt-cells 76bc3240b546 gpio: shared: shorten the critical section in gpiochip_setup_shared() 4fe2ef542574 hwmon: (ltc4286) Add missing MODULE_IMPORT_NS("PMBUS") 1384f3e54f2f hwmon: (pxe1610) Check return value of page-select write in probe 6999b4769e2a hwmon: (tps53679) Fix array access with zero-length block read 40170fc1a79c io_uring/rsrc: reject zero-length fixed buffer import ee0180e77e6c accel/qaic: Handle DBC deactivation if the owner went away 6a04ef40c13f drm/bridge: Fix refcount shown via debugfs for encoder_bridges_show() e54b8fe9454c gpio: qixis-fpga: Fix error handling for devm_regmap_init_mmio() 32aa4b55f894 gpio: shared: handle pins shared by child nodes of devices 28f488e7b327 gpio: shared: call gpio_chip::of_xlate() if set 77d22bf3fc5d interconnect: qcom: sm8450: Fix NULL pointer dereference in icc_link_nodes() 3cff90d9962c gpiolib: clear requested flag if line is invalid bdfef0a70093 iio: imu: bno055: fix BNO055_SCAN_CH_COUNT off by one 55a97dabdd8a Revert "drm: Fix use-after-free on framebuffers and property blobs when calling drm_dev_unplug" 7ffbe45b1d22 bpf: Fix incorrect pruning due to atomic fetch precision tracking f952157e695f bpf: Reject sleepable kprobe_multi programs at attach time 4f6c99dc0420 bpf: reject direct access to nullable PTR_TO_BUF pointers 76a0d524285b eth: fbnic: Increase FBNIC_QUEUE_SIZE_MIN to 64 872b74900d5d ipv6: avoid overflows in ip6_datagram_send_ctl() 294a8e5a705d net: hsr: fix VLAN add unwind on slave errors 415ea0c973c7 net/sched: cls_flow: fix NULL pointer dereference on shared blocks 96426c348def net/sched: cls_fw: fix NULL pointer dereference on shared blocks f953f11ccf4a net/x25: Fix overflow when accumulating packets c87dd137c0da net/x25: Fix potential double free of skb 631069c676b8 bnxt_en: Restore default stat ctxs for ULP when resource is available 024f5f7d031a bnxt_en: Don't assume XDP is never enabled in bnxt_init_dflt_ring_mode() 7d0f97a73581 bnxt_en: Refactor some basic ring setup and adjustment logic 4363698838b7 net/mlx5: Fix switchdev mode rollback in case of failure b20d4b304b5a net/mlx5: Avoid "No data available" when FW version queries fail 89c65f2fcd88 net/mlx5: lag: Check for LAG device before creating debugfs 6ec567425c05 net: macb: properly unregister fixed rate clocks 3496fb9e66f7 net: macb: fix clk handling on PCI glue driver removal 4fd258e281fa net/sched: sch_netem: fix out-of-bounds access in packet corruption af95bc39a83d bpf: sockmap: Fix use-after-free of sk->sk_socket in sk_psock_verdict_data_ready(). 47de5b73db3b rds: ib: reject FRMR registration before IB connection is established 562ed1954f0c Bluetooth: MGMT: validate mesh send advertising payload length ea3cd36d7382 Bluetooth: hci_event: fix potential UAF in hci_le_remote_conn_param_req_evt bad65b4b0a96 Bluetooth: hci_conn: fix potential UAF in set_cig_params_sync 40ba329e8b4c Bluetooth: MGMT: validate LTK enc_size on load 981b4fd2baf3 Bluetooth: hci_h4: Fix race during initialization 260dc2be643b Bluetooth: hci_sync: Fix UAF in le_read_features_complete 7fd74178d4b1 Bluetooth: hci_sync: fix leaks when hci_cmd_sync_queue_once fails 0ad2ce230b38 Bluetooth: hci_sync: hci_cmd_sync_queue_once() return -EEXIST if exists 8a96a0334a7d Bluetooth: L2CAP: Add support for setting BT_PHY d002bd11024b Bluetooth: SCO: fix race conditions in sco_sock_connect() 389cf7e53d1e Bluetooth: hci_sync: call destroy in hci_cmd_sync_run if immediate 17dc5d5a935c netfilter: nf_tables: reject immediate NF_QUEUE verdict 3e79374b03bf netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP 21a04c31db40 netfilter: ctnetlink: ignore explicit helper on new expectations f5ae5111d0ae netfilter: nf_conntrack_expect: store netns and zone in expectation 3dfd3f7712b5 netfilter: nf_conntrack_expect: use expect->helper 3a6d5980652d netfilter: nf_conntrack_expect: honor expectation helper field bff0f4f06f12 netfilter: ctnetlink: zero expect NAT fields when CTA_EXPECT_NAT absent 90bd7e850134 netfilter: nf_conntrack_helper: pass helper to expect cleanup 9080d143d2e8 netfilter: ipset: use nla_strcmp for IPSET_ATTR_NAME attr 731246081728 netfilter: x_tables: ensure names are nul-terminated f08ffa3e1c8e netfilter: nfnetlink_log: account for netlink header size 879959a7a2be netfilter: flowtable: strictly check for maximum number of actions f3d9de6da11b ALSA: usb-audio: Exclude Scarlett 2i2 1st Gen (8016) from SKIP_IFACE_SETUP 636908a5e8d9 net: stmmac: skip VLAN restore when VLAN hash ops are missing de3c248d1b69 mptcp: fix soft lockup in mptcp_recvmsg() 3f2aba926756 mptcp: add eat_recv_skb helper 572ce6277851 net: ipv6: flowlabel: defer exclusive option free until RCU teardown ca995b1462ec bpf: Fix regsafe() for pointers to packet c9bc352f716d bridge: mrp: reject zero test interval to avoid OOM panic de7076a98502 ASoC: Intel: boards: fix unmet dependency on PINCTRL 3c3a6b9020c0 net: xilinx: axienet: Fix BQL accounting for multi-BD TX packets f135360a7de2 net: xilinx: axienet: Correct BD length masks to match AXIDMA IP spec cf2ff1018320 NFC: pn533: bound the UART receive buffer f5b94654a4a1 net: bonding: fix use-after-free in bond_xmit_broadcast() cded4002d221 crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption ce42ee423e58 crypto: algif_aead - Revert to operating out-of-place 29732b68a681 bnxt_en: set backing store type from query type 1091b3c17444 net: sched: cls_api: fix tc_chain_fill_node to initialize tcm_info to zero to prevent an info-leak d970341cfa55 net: use skb_header_pointer() for TCPv4 GSO frag_off check cf838b13226f net: introduce mangleid_features 1aea9c8d15b8 net: airoha: Add missing cleanup bits in airoha_qdma_cleanup_rx_queue() 2d88ed7fa000 ipv6: prevent possible UaF in addrconf_permanent_addr() ca4541106966 ASoC: ep93xx: Fix unchecked clk_prepare_enable() and add rollback on failure a633e8b804a5 ALSA: usb-audio: Exclude Scarlett Solo 1st Gen from SKIP_IFACE_SETUP acde2bdd7685 net: enetc: do not allow VF to configure the RSS key cef93971f27e net: enetc: check whether the RSS algorithm is Toeplitz f8fcb2ee45cb net: sfp: Fix Ubiquiti U-Fiber Instant SFP module on mvneta d0aefec1b1a1 net/sched: sch_hfsc: fix divide-by-zero in rtsc_min() 3a30f6469b05 bridge: br_nd_send: linearize skb before parsing ND options a098d5385537 eth: fbnic: Account for page fragments when updating BDQ tail 4a622658f384 ip6_tunnel: clear skb2->cb[] in ip4ip6_err() 1ceeebd5bd6d ipv6: icmp: clear skb2->cb[] in ip6_err_gen_icmpv6_unreach() a968438d4fc1 net: ti: icssg-prueth: fix missing data copy and wrong recycle in ZC RX dispatch 46bd79d0860e tg3: Fix race for querying speed/duplex d6e1c9b02d85 net/ipv6: ioam6: prevent schema length wraparound in trace fill e319058af6ae iommupt/amdv1: mark amdv1pt_install_leaf_entry as __always_inline ef3645606e4a net: ipv6: ndisc: fix ndisc_ra_useropt to initialize nduseropt_padX fields to zero to prevent an info-leak 5d2249eefaca net: qrtr: replace qrtr_tx_flow radix_tree with xarray to fix memory leak 1adc95085d5f net: enetc: do not access non-existent registers on pseudo MAC 67f93484ef5d net: enetc: add graceful stop to safely reinitialize the TX Ring 1a66f511b580 net: enetc: reset PIR and CIR if they are not equal when initializing TX ring c1a36d50a4f3 net: fec: fix the PTP periodic output sysfs interface c8eab8f49696 netdevsim: fix build if SKB_EXTENSIONS=n e3b81237ce8e net: mana: Fix RX skb truesize accounting 5bb3caf0bbfb mpls: add seqcount to protect the platform_label{,s} pair 4b03ab0a587e crypto: af-alg - fix NULL pointer dereference in scatterwalk 6494a4fdbf7a crypto: deflate - fix spurious -ENOSPC cebc5ebd9583 crypto: caam - fix overflow on long hmac keys f2af8be110bd crypto: caam - fix DMA corruption on long hmac keys 6d318f173152 cgroup: Fix cgroup_drain_dying() testing the wrong condition 30bb292865fb selftests/cgroup: Don't require synchronous populated update on task exit 78c72bce4a87 cgroup: Wait for dying tasks to leave on rmdir c7de0861526b wifi: ath11k: Pass the correct value of each TID during a stop AMPDU session 822f1a927658 wifi: iwlwifi: mld: correctly set wifi generation data 6607d0e58cec wifi: iwlwifi: mvm: don't send a 6E related command when not supported 825f31cb5ac0 wifi: iwlwifi: mld: Fix MLO scan timing 34a0fc58dcfa dt-bindings: auxdisplay: ht16k33: Use unevaluatedProperties to fix common property warning a7d149152bc5 mshv: Fix error handling in mshv_region_pin 77f7fda62176 spi: geni-qcom: Check DMA interrupts early in ISR 9acc84db90c8 smb: client: fix generic/694 due to wrong ->i_blocks e180b2af2725 drm/amd/display: Fix gamma 2.2 colorop TFs de585ee18dd5 btrfs: reject root items with drop_progress and zero drop_level 100654bc94a8 i2c: tegra: Don't mark devices with pins as IRQ safe 386f5e16a383 btrfs: reserve enough transaction items for qgroup ioctls 2edc92f89eee HID: multitouch: Check to ensure report responses match the request 3362980d8e02 objtool/klp: fix mkstemp() failure with long paths bd6e1d0230cc HID: core: Mitigate potential OOB by removing bogus memset() 9a793ac19eb8 HID: logitech-hidpp: Prevent use-after-free on force feedback initialisation failure 9f201c9722a9 objtool: Fix Clang jump table detection ab7a649a5de0 tg3: replace placeholder MAC address with device property ace5acd6ae00 btrfs: don't take device_list_mutex when querying zone info 5fbbb1ff936d atm: lec: fix use-after-free in sock_def_readable() 3d78386b1444 HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq e77b2937aaa2 wifi: mac80211: check tdls flag in ieee80211_tdls_oper 29f9758749d3 HID: logitech-hidpp: Enable MX Master 4 over bluetooth 02a788c94fb0 arm64/scs: Fix handling of advance_loc4 e5a3e3cdd9b3 xfs: close crash window in attr dabtree inactivation a8586f79b6bc xfs: factor out xfs_attr3_leaf_init ee2bd4d6ea54 xfs: factor out xfs_attr3_node_entry_remove ea0aeb3da359 xfs: only assert new size for datafork during truncate extents 05ac37544673 scsi: target: tcm_loop: Drain commands in target_reset handler 4eaff1728d0e scsi: target: file: Use kzalloc_flex for aio_cmd e5a75bf026c6 net: mana: fix use-after-free in add_adev() error path 732fdeb2987c net: correctly handle tunneled traffic on IPV6_CSUM GSO fallback 9b96266a2d46 drm/amd/pm: disable OD_FAN_CURVE if temp or pwm range invalid for smu v13