7984e196e71f Linux 7.2.5-xanmod1
67c71f123ed3 Merge tag 'v7.2.5' into 7.2
a300e35c0a4b Linux 7.2.5
be15b8da4a82 ksmbd: zero pipe read compound padding
ecdcceed4d37 PCI: Allow per function PCI slots to fix slot reset on s390
8418a7201bb3 PCI: Introduce PCI_SLOT_PLACEHOLDER constant for slot_nr placeholder value
fb27cd32dd78 mm/damon/vaddr: drop last same folio access check optimization
e3db5d6bb034 mm/damon/paddr: drop last same folio access check reuse optimization
91b75a9e79e9 mm/damon/ops-common: use nr_accesses moving sum for quota score
8a96a06e04d2 mm/damon/core: avoid infinite kdamond_merge_regions() internal loop
013731074ab6 power: supply: ab8500_fg: fix use-after-free on remove
7a184e6f211c power: supply: ab8500_fg: Remove redundant dev_err()/dev_err_probe()
57dba479a3e1 remoteproc: qcom: pas: Guard dtb metadata release with dtb_pas_id check
ea0408273ccf rpcrdma: arm rn_done before publishing the notification
c4efdc1d4cb3 bpf: Disable preemption in bpf_get_stackid
f1e97925827c bpf: Use stack id functions instead of __bpf_get_stackid
b3024de68b81 bpf: Factor stackid_new_bucket from __bpf_get_stackid
370069c1f627 bpf: Factor stackid_fastpath function from __bpf_get_stackid
b8cf96ff8c11 bpf: Factor stackid_init function from __bpf_get_stackid
8cc98db4fc59 ksmbd: fix use-after-free in oplock break notification
88abd367fe8a drm/nouveau/gsp: fix vblank interrupts on GB20x
37ae6066f65e drm/nouveau/disp: fix head state readback on GB20x
37a758989faa drm/nouveau/disp: fix HDMI GCP AVMute register offsets on GB20x
20ca0fdad658 drm/nouveau/disp: fix HDMI vendor infoframes on GB20x
dbcaa9d0e9ee drm/nouveau/disp: route GSP-RM display MMIO through nvkm_disp_func hooks
a1db244bb282 drm/nouveau/disp: move the GSP HDMI GCP AVMute write to engine/disp
0cec2ceb5d95 drm/nouveau/disp: move GSP head-timing ISR and vblank helpers to tu102.c
c60033c17242 drm/nouveau/uvmm: clear the dirty flag when unwinding an OP_UNMAP_SPARSE
4083d24c2636 drm/nouveau/uvmm: fix premature region free on failed OP_UNMAP_SPARSE
3857238de6bc drm/nouveau/uvmm: fix NULL deref unwinding an OP_MAP_SPARSE op
4f3f9deca7e7 drm/nouveau: Use write-combined maps for coherent
1fef7553dc62 drm/nouveau: unsubscribe the channel-kill event before the fence context
ae5d57131dbf drm/nouveau/gsp: use per-version DP_CONFIG_STREAM params on r570 firmware
4deb29b9d33b drm/nouveau/dmem: fix mismatched DMA unmap size for large folios
0163b92946d0 drm/nouveau/dmem: fix callocated underflow on large folio split
10e92e18e3da drm/pagemap: Fix folio allocation fallback and use-after-put
f34f8b904592 drm/sysfb: ofdrm: Fix is_avivo() constant comparison bug
d9daf9a6e7a6 drm/sysfb: ofdrm: Fix integer overflow in fb_size calculation
bbdc6761c556 drm/sysfb: simpledrm: Improve stride validation
48c60b763a0d drm/sysfb: simpledrm: Improve panel-size validation
5683b1b2a609 drm/sysfb: simpledrm: Improve framebuffer-size validation
62e744babd0b drm/amdkfd: Reject zero-sized AQL queue allocations after size halving
c643c229babe drm/amdkfd: guard against NULL restore_mqd in CRIU queue restore
0a9a0e8a97da drm/amdkfd: Fix the case that vm range is hole at svm_migrate_copy_to_vram
58e866711b23 drm/amdkfd: fix scope of mqd_mgr dereference in pqm_debugfs_mqds
a2035918a7a1 drm/amdkfd: Fix error path at svm_migrate_copy_to_ram
6aae545c8708 drm/amdkfd: Add TLB flush after MES queue eviction/suspension
6decb921f7c5 drm/amdgpu: use AMDGPU_GPU_PAGE_SHIFT instead of PAGE_SHIFT
4e651478656b drm/amdgpu: update the fw version for gfx12 userqueues
bcc58f2ef770 drm/amdgpu: update the fw version for gfx11 userqueues
c931aedaf18c drm/amdgpu: Skip accessing psp rum time db for APUs
ebe7542553d0 drm/amdgpu: force complete the MES ring fences on reset
bdd6a58743e0 drm/amdgpu: force complete the KIQ ring fences on reset
4614011a844b drm/amdgpu: fix Idle BOs list in VM debugfs status info
c41cc2632bd6 drm/amdgpu: fix byte/dword unit mismatch in coredump IB dump
236ccf3ff9fd drm/amdgpu: fix autosuspend cleanup during removal
6ea36fc580cd drm/amdgpu: Disable runtime PM for externally attached dGPUs
0bfb938182d1 drm/amdgpu: clamp the isolation index for rings outside a partition
4d030c348707 drm/amdgpu: delay ttm buffer func enablement on xgmi
fd4746ed0574 drm/amdgpu: check thunderbolt before switcheroo registration
a46ab76b6cf5 drm/ttm: Drop tt->restore after successful restore
e6195b941fdc drm: Fix drm_crtc_commit leak if signaled when PAGE_FLIP_EVENT is used
d152b582d852 drm/msm/dsi: round 6G byte clock rate to the PLL-achievable value
eab46d962980 drm/gud: validate TV mode names before creating enum property
6ea61f1d4cba drm/gud: NUL-terminate TV mode names read from the device
9ae19bd60891 drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check
25ad527dc92a drm/amdgpu/gfx8: only apply compute quantums to KCQs
2d2071d67303 drm/amd/display: Set gpuvm min page size to 4K on dcn35/36
647426f78a34 drm/amd/display: Remove const Qualifier From Non-Pointer Fields
b10cc09b3292 drm/amd/display: validate plane degamma LUT size for private color prop
3891405e6488 drm/amd/display: Fix HPD consideration for VGA/LVDS connectors on DCE
dac29cbb405b drm/amd/display: fix dc_lock leak on GPU reset error paths
15ee43aad0df drm/amd/display: avoid divide-by-zero in __is_lut_linear()
ac908108d197 drm/hibmc: Use drm_atomic_helper_check_plane_state()
93f36cf57c72 drm/hibmc: Fix list of formats on the primary plane
d8c055b34ab3 drm/nouveau/disp/r535: Add scanline position support + head state support
423fd96d094c drm/ssd130x: fix column and row end address in partial updates in ssd133x
956005c09cfd drm/sun4i: fix refcount leak in sun4i_backend_init_sat()
adadda76184e drm/ssd130x: fix column and row end address in partial updates for ssd132x
84829e324a39 drm/i915: Guard against NULL driver_data in i915_pci_probe()
80e4fd48b900 drm/i915/display: Clear SEL_FETCH_PLANE_CTL on plane disable
2d1215a72159 drm: fix race between partial drm_dev_register() failure and ioctl
972afe6d5314 drm/panel-edp: fix i2c adapter leak on probe failure
f7f61839ba39 drm/bridge: dw-hdmi: fix i2c adapter leak on probe failure
3e5c7cddc007 drm/panthor: fix firmware control interface bounds checks
6ae19dce3e8c drm/panthor: harden firmware build-info bounds checks
c659ba693970 drm/xe/vram: report FLAT_CCS base misalignment
967a179463d3 drm/amdgpu: avoid force-completing uninitialized UVD rings
3e234c6face8 drm/amdgpu: Fix init ordering in amdgpu_vram_mgr_init()
c42608c09b6b f2fs: fix to zero post-EOF data when extending file size
0b196c07407f f2fs: fix to pass folio->index to f2fs_sanity_check_node_footer()
153df7dc3aae f2fs: fix to reclaim space in f2fs_allocate_pinning_section()
931e1aa4d44c f2fs: fix valid block count leak on data block allocation failure
bee6dfcc111b f2fs: protect critical_task_priority updates with s_umount
3923ec2b98c9 f2fs: fix to clear dirty flag on folio in error path
436cdabc64c1 f2fs: fix to off-by-one issue in f2fs_zero_post_eof_page()
e88a37a6ec5d f2fs: fix to return -EFSCORRUPTED in f2fs_get_node_info() correctly
4e85a62b0c27 f2fs: fix i_size when pinned fallocate partially fails
905411f65048 f2fs: fix to avoid potential deadloop in f2fs_fsync_node_pages()
b9776094aa71 f2fs: fix to migrate all curseg types during free_segment_range
8f3b99c50dd0 f2fs: avoid NULL checkpoint thread access in sysfs
cc34df18da92 f2fs: fix folio_nr_pages() race after put in large folio invalidate
93a3e6a4c9e7 f2fs: fix dentry folio leak in find_in_level
99d14d61aa8b f2fs: embed f2fs_gc_kthread in f2fs_sb_info
34d971709748 f2fs: fix to avoid potential section-unaligned pinfile
47a4aaa56622 f2fs: don't drop the top folio order in the f2fs_iostat tracepoint
317d32e1a8de f2fs: limit recovery filename logging to stored length
cb0446b70766 f2fs: return writeback error from collapse range
ab31e3b774f5 f2fs: use the mount idmap for the owner check in f2fs_xattr_advise_set()
83f234dcb0e8 f2fs: dirty directory inodes on mtime/ctime update
dcae1eeda531 f2fs: validate MOVE_RANGE destination size
c14282d35ea8 f2fs: fix to avoid move_range and defragment on device_alias file
89c65ec3c189 f2fs: only redirty pinned folios in redirty_blocks
45837717808f f2fs: reject overlapping move range after len expansion
5ba01cc40041 f2fs: return symlink writeback errors
e9bfb56e2c1b scsi: qla2xxx: Skip NVMe LS reject IOCB when FW not started
7881faf862ee scsi: qla2xxx: Zero-init bsg stack buffers to avoid info leak
4cd349f89daa scsi: qla2xxx: Use coherent DMA buffer for D_Port diagnostics
7d0b3f745efb scsi: qla2xxx: Hold vport_slock for host map update in report ID acquisition
91fde7ad7225 scsi: qla2xxx: Drop vport reference under lock in report ID acquisition
e70036dc2ddc scsi: qla2xxx: Fix NVMe abort reference leak on repeated abort
35124cfa9898 scsi: qla2xxx: Avoid req_q_map double-read in qla2x00_error_entry()
f6e8977bce88 scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read
845d4abd92cd scsi: qla2xxx: Avoid double completion in async IOCB timeout
157ca7d1af45 scsi: qla2xxx: Quiesce response IRQ before freeing request queue
df86c27cf1ba scsi: qla2xxx: Fix response queue over-consumption in __qla_consume_iocb()
29f1f9ad9e35 scsi: qla2xxx: Reject non-SCSI SRB on status IOCB fast path
a6374b508893 scsi: qla2xxx: Don't query firmware state while chip is down
aac0d3cb9199 scsi: qla2xxx: Fix FCE trace enable parsing in debugfs
9f31de4d07e4 scsi: qla2xxx: Zero mailbox struct in qla2x00_get_firmware_state()
41ef7edde27a scsi: qla2xxx: Fix FCE trace use-after-free during firmware dump
122bf170c94a scsi: qla2xxx: Fix cs84xx use-after-free on host teardown
33735490789e scsi: qla2xxx: Serialize flash version read in reset handler
33c77254e6e9 scsi: qla2xxx: Clamp MSI-X derived queue counts to avoid truncation
b02ff132017b scsi: qla2xxx: Hold qpair lock when sending NVMe LS reject
f2d4f025b67f scsi: qla2xxx: Bound image count in qla2x00_update_fru_versions()
9fc03be98276 scsi: qla2xxx: Zero dport diagnostics buffer to avoid info leak
61f05f2e98f0 scsi: qla2xxx: Check entry_status in qla24xx_modify_vp_config()
f4aaa4a4e6f1 scsi: qla2xxx: Initialize NVMe abort_work once at submission
d556f899964d scsi: qla2xxx: Hold vport reference in qla24xx_report_id_acquisition()
e25241f9fa01 scsi: qla2xxx: Fix BSG job leak on validate flash image error path
b185375d2996 scsi: qla2xxx: Fix Name Server logout detection on FWI2 adapters
75fd6d041c4a scsi: qla2xxx: edif: Fix NULL pointer deref in RX SA delete check
47049fdadc0e scsi: qla2xxx: Bound i2c->length in I2C bsg handlers
a5501c422562 scsi: qla2xxx: Zero SFP DMA buffer in FRU/I2C bsg handlers
2215e55ee1e5 media: chips-media: wave5: Resume device before setting EOS flag
2e5b9d632da6 media: chips-media: wave5: Fix pipeline stall when queuing fails
63d758d2f9db media: chips-media: wave5: Defer job_finish() only when a DEC_PIC was queued
c104f37b9f79 media: chips-media: wave5: Add timeout while stop_streaming
dc37c478ed65 media: chips-media: wave5: avoid skipping device_run while VPU has work
8c3cfb9fff96 media: chips-media: wave5: Set inst->std during default format initialization
5ee3099138fc media: chips-media: wave5: Guard bit depth check with initial_info_obtained
cfcaa26b36f7 media: qcom: iris: fix missing hfi_id in gen1 GOP_SIZE cap
d7f34cbaced9 media: qcom: iris: use disable_irq() during power-off
14f49e457781 media: qcom: iris: fix state-change debug log printing stale value
672dbccf4351 media: zoran: Avoid freeing a registered video_device twice
b24d34fd0b7c media: vimc: fix pixel format lookup in enum_framesizes
0e7f2cd72a4f media: video-i2c: fix kthread error pointer left in kthread_vid_cap on failure
22128985b581 media: venus: fix payload size calculation in parse_raw_formats()
66fe517d2dd3 media: venus: fix payload size returned by parse_caps() and parse_alloc_mode()
881aafb13952 media: v4l2-fwnode: Fix fwnode leak in v4l2_fwnode_parse_link
2bce73ab36d6 media: v4l2-ctrls: Allow unknown HDR10 white point and luminance
30f85a7c5911 media: v4l2-ctrls: validate HEVC EXT SPS RPS counts
a57d94026cb4 media: v4l2-async: avoid deleting unlinked ASC entry on link error
fd5b4a14c87b media: ti: vpe: quiesce overflow recovery before freeing streams
f1ba602afd5e media: tda18250: fix possible integer overflow
fc65623524b5 media: saa7164: fix cleanup on resource allocation failure
7d221859ba45 media: s2255: check firmware size before reading trailing marker
dd739517560c media: s2255: bound JPEG frame size before copying into the buffer
5249a092ed2c media: rzg2l-cru: Align bytesperline to hardware DMA stride requirement
ac02b2c56cce media: rtl2832_sdr: release URBs and stream buffers on start_streaming() failure
a0d9d9a3b41a media: rtl2832_sdr: use vb2_video_unregister_device() on remove to fix DMA leak
74938f83a8ab media: rkvdec: hevc: guard INTER_REF_PIC_SET_PRED index underflow
5ef075c44c79 media: rkvdec: hevc: tighten EXT SPS RPS control dimensions
e21f0344fcdf media: rkvdec: Propagate platform_get_irq() errors
b866d4bcd2ec media: rockchip: rga: don't change RGB quantization
5e6f5bffaa80 media: rc: sunxi-cir: Unregister rc device on probe failure
f220b29d318f media: mali-c55: Fix scaler factor overflow for large crop sizes
efb92bf2bd7a media: mali-c55: Fix AEXP IHIST disable bit shift
003b2bf69068 media: mali-c55: Fix clock leak on reset deassert failure
63fbd6372f77 media: mali-c55: fix dropped last AEC histogram zone weight
5a65e6f9dff6 media: nxp: imx8-isi: Use BIT_ULL() for 64-bit stream masks
de7192f111a4 media: nxp: imx8-isi: Correct color map between V4L2 and ISI
ab15c39a83b6 media: nxp: imx8-isi: Fix stream ID validation bypass in crossbar routing
426ead7eed6d media: platform: mtk-mdp3: fix NULL deref on failed SCP lookup
0259ade4c4ce media: platform: mtk-mdp3: Fix SCP device refcounting
d61ba609c322 media: meson: vdec: fix NULL pointer deref in vdec_try_fmt_common
f99d78280faa media: iris: Enumerate cap->bus_info to differentiate between encoder and decoder
dc31e4f1e146 media: ipu-bridge: check all DMI entries when overriding sensor rotation
eee6069e4e95 media: intel/ipu6: fix async notifier cleanup leak on parse error
ea97482e46cc media: imx355: Avoid calling imx355_power_off twice in error path
64d5e26dc6bb media: i2c: vd55g1: Fix media bus code initialization
7304585c7597 media: i2c: vd55g1: Fix manual digital gain on color variant
c85aa92f1b16 media: i2c: ov9282: restore flash duration calculation
09453b467990 media: i2c: ov7740: fix use-after-destroy in remove
6e1378445278 media: i2c: ov02a10: fix endpoint parsing use-after-free
55eb48818f77 media: i2c: imx415: Return test pattern write errors
46c63cc1c1ae media: i2c: imx415: Release runtime PM reference on VBLANK error
9d2e6262f65d media: i2c: alvium: Fix: Correct name of register in alvium_set_ctrl_auto_exposure
e6f1a1ac9b8c media: go7007: defer the ALSA v4l2 put until card release
16cb1ee17e09 media: em28xx: fix use-after-free of dev_next->devlist on disconnect
4666197ca4f7 media: em28xx: defer audio-only extension registration
86d8468e9015 media: dt-bindings: nxp,imx8-isi: Drop fsl,blk-ctrl requirement for i.MX8ULP
99cd62b9b1c8 media: cx23885: cancel NetUP CI work before teardown
a636c72c7f52 media: cx231xx: reject geometry changes while the VBI queue is busy
8c6610e230b9 media: cobalt: Avoid freeing ALSA private data twice
81aa608ac3a5 media: cedrus: fix memory leak in cedrus_init_ctrls()
ae614f487121 media: cec: Serialize exclusive follower delivery
6e7a52d23701 media: cec: meson: ao-cec-g12a: name the CEC core regmap to avoid debugfs clash
7ad2fec27694 media: cec: extron-da-hd-4k-plus: add sanity check
9c6ceb094922 media: cec: disable delayed work before freeing an interrupted transmit
cca240779479 media: cec: core: Fix kmemleak due to missed rc_free_device() call
e3c973c912aa media: bcm2835-unicam: Fix pipeline wrong validation for unpacked formats
a6a568171d18 media: amphion: Remove obsolete frame_count check in venc_start_session
c6749ac8f59c media: airspy: use vb2_video_unregister_device() on disconnect to fix NULL deref
cc2bc29770b3 rust: drm: ioctl: fix unbounded lifetimes in ioctl handler arguments
c4357ebeee63 LoongArch: Avoid preempt count underflow without probe
c048b0a3c083 LoongArch: Do not save/restore percpu base register in rethook trampoline
fbf6ed7d827b LoongArch: Do not select HAVE_RUST when KASAN is enabled
6311b8c471af LoongArch: Fix acpi_package_ids[] array overflow
90b84201cb65 LoongArch: BPF: Fix off-by-one error for insn_is_cast_user()
f0e4d069cb47 LoongArch: BPF: Move arena register slot below TCC context
00cdb31f17c7 LoongArch: Expand module virtual address space to 2GB
96f44d493c28 LoongArch: BPF: Refactor jump offset calculation in tail call
2a148e146993 LoongArch: BPF: Optimize redundant TCC loads in epilogue
55e18311c705 LoongArch: Add DIRECT_MAP_PHYSMEM_END definition
83715a40a2d3 LoongArch: KVM: Validate MSI data before routing it to EIOINTC
bc7a6849b439 LoongArch: KVM: Preserve memslot arch flags on KVM_MR_FLAGS_ONLY
3bf6f5e2e100 LoongArch: KVM: Free init resources if kvm_init() fails
26bda95b64e8 LoongArch: KVM: Fix TOCTOU race on pv_features
de54ab63ef12 LoongArch: KVM: Fix resource leak in kvm_loongarch_env_init() error path
4595c9b2bdb0 LoongArch: KVM: Add unregister helpers for the KVM interrupt devices
8e61f76e7458 LoongArch: KVM: Fix PC double advance in kernel MMIO read fast path
f56060b0e10f LoongArch: KVM: Fix uninitialized stack variable issue with dmsintc
46aa64821f6c LoongArch: KVM: Set vcpu->cpu before IN_GUEST_MODE is set
2de38f0448b4 KVM: arm64: Correctly cap TLBI Range to the architural limit
36df368861d2 KVM: arm64: vgic-its: Don't dereference a NULL collection on ITT save
2bf6e59be382 KVM: arm64: vgic: Reset in_kernel on private IRQ allocation failure
b6c2abf620a4 KVM: arm64: vgic: Fix detection of MI on no pending LR
d3a2d20b7248 KVM: arm64: vgic-v3: take an LPI reference in vgic_v3_save_pending_tables
3feb83918e30 KVM: arm64: Sign-extend VA for range-based TLBI invalidation
87c2bbf18982 KVM: arm64: Remove VM-wide VNCR mapping counter
11ee3faab4f1 KVM: arm64: Make VNCR invalidation participate in MMU invalidation retry
9065c1261f8a KVM: arm64: Handle VNCR TLB invalidation race with vcpu_put() VNCR unmapping
c624731ca6fe KVM: arm64: Correctly handle end of VA space TLBI invalidation
1c9fca34b962 KVM: arm64: Handle negative S1 walk levels in VNCR TLB size evaluation
66c36dd65995 KVM: arm64: Consider SCTLR_EL2.M when mapping the L1 VNCR page
f3064dde0552 KVM: s390: Restore sigset on error path
3a131f7758d3 KVM: s390: pv: Fix rc/rrc offset for PVM_DUMP
ae452b990e05 KVM: s390: keyop: use mmu_lock to read gmap->asce
7077ec953996 KVM: s390: Fix memory corruption by not reinjecting CK machine checks
f8ed98e97a46 KVM: s390: Zero initialize irq in reinject_machine_check
134f235e0e8d KVM: s390: Zero initialize data structures for inject_pfault_token
4c05bf21d180 KVM: s390: Take srcu when importing watchpoint data
e4d8b7f176b9 KVM: s390: Free guest debug data on vcpu destroy
46cb8a273e2f KVM: s390: Fix old_data leak in guest debug error path
581be9f60858 KVM: s390: Fix memory leak in guest debug handling
3fe801db90bd KVM: s390: Fix length check __import_wp_info()
ac943db6e5fa KVM: x86: Move enabling EFER.SVME and EFER.LMSLE to generic EFER setup
a97d4eb883d3 KVM: x86: Ensure runtime reads of disabled_quirks are resolved once
92e24ca69e0f KVM: x86: Serialize writes to disabled_quirks using kvm->lock
bdb732ebee54 KVM: x86: hyper-v: Clamp stimer deadline to avoid livelock
8edb3c09e43f KVM: x86/mmu: Consume the locked rmap value in the lockless rmap walk
655694a1cba2 KVM: x86/mmu: Use CMPXCHG when clearing Accessed bit in TDP MMU
9941850e8adf KVM: nVM: Ensure INVVPID is emulated on the correct physical CPU
62c3ee4c9f0e KVM: nVMX: Service local TLB flushes on failed nested VM-Enter
bbec4adc2f34 KVM: nVMX: Ensure KVM_REQ_GET_NESTED_STATE_PAGES is cleared on VM-Exit
7fda9304d0d8 KVM: nVMX: Decouple INVVPID operand checks from flushing of vpid02
121991d15073 KVM: nVMX: Always flush vpid02 on first use
bb9f763d7aed KVM: PPC: Book3S HV: Validate arch_compat against host compatibility mode
d393ef49d94f iio: light: opt4001: Fix reversed GENMASK() arguments in fault count mask
fb21a4113e91 iio: light: opt4001: Reject integration times with a non-zero seconds part
2fb1e09451ae iio: light: opt4001: Fix incompatible pointer type passed to div_u64_rem()
4157573b37f6 iio: light: opt4001: Fix power down clearing bits of the wrong register
0107ac927b1e iio: light: opt4060: Fix incorrect register name in threshold read error message
7d2ddfee2952 iio: light: opt4060: Reject integration times with a non-zero seconds part
a54b53b00e0f iio: ti-ads7138: Disable STATS_EN bit while reading conversion results
6b7584b976d5 iio: temperature: hid-sensor-temperature: switch to non-devm iio_device_register()
44063a6673a6 iio: srf04: fix pm_runtime handling on probe error path
4a84300a1033 iio: pressure: mpl115: Fix runtime PM cleanup
3fa189573cca iio: pressure: dps310: fix NULL pointer dereference on ACPI probe
80e7381e8ccc iio: light: ltrf216a: fix runtime PM reference leak in error path
c2c83ecb1ef7 iio: light: gp2ap002: Disable regulators on resume failure
c1870bbfcfdd iio: light: cm32181: return zero after writing calibscale
3ce75e455dd6 iio: light: apds9306: fix PM reference leak in apds9306_read_data()
bc5fbf9868ca iio: imu: st_lsm6dsx: Update enable mask when using sensor fusion
14db27a2f11a iio: gyro: mpu3050: fix sign of raw angular velocity readings
daa1674ce873 iio: dac: mcp47feb02: add missing 'select REGMAP_I2C' to Kconfig
9fe22f563b2a iio: dac: m62332: Fix regulator reference count imbalance
36f17988eb86 iio: dac: ad5446: fix OF module device table
98bbd0844aed iio: dac: ad3552r-hs: fix scnprintf() buffer bound in data source show
44d52c8b1c6d iio: chemical: sgp30: Handle IAQ thread creation failure
30b0d44c978b iio: chemical: atlas-sensor: use iio_trigger_poll_nested() to fix remove UAF
777e8ebfe6b3 iio: chemical: atlas-sensor: fix PM reference leak in buffer postenable
8b3e22159018 iio: buffer: Tie IIO dma fence lock lifetime to the fence
11cef9949111 iio: buffer: Make IIO DMA fence release RCU-safe
6d4bdbf7bad6 iio: buffer: Fix potential use-after-free in anonymous buffer release
af113b29f884 iio: adc: pac1921: fix wrong channel used in trigger handler read
90a2810faefb iio: adc: max34408: add missing 'select REGMAP_I2C' to Kconfig
776bb4fb57ba iio: adc: max14001: add missing 'select REGMAP' to Kconfig
fc8a0d0eb346 iio: adc: adi-axi-adc: add data size support for AD408X backend
9c408b3309ee iio: adc: ad4080: configure backend data size
87c0fb907c41 ASoC: tas2783-sdw: sort the register default table
adf51dd6e11b ASoC: tas2783-sdw: drop duplicate reg_default entry
622319a4ac9f ASoC: tas2780: sort the register default table
86870ada907f ASoC: tas2764: sort the register default table
fee191641091 ASoC: tas2552: sort the register default table
a2ec67511c15 ASoC: sti-sas: sort the register default table
abf06bc6ac17 ASoC: sgtl5000: sort the register default table
856f0648beb7 ASoC: samsung: aries_audio_probe: double of_node_put due to direct assignment without of_node_get
55b5e9fc0822 ASoC: rt721-sdca-sdw: sort the register default table
b4eb58840871 ASoC: rt715: sort the register default table
a099f59e8c1d ASoC: rt715-sdca: sort the register default tables
f735844b71af ASoC: rt715-sdca: drop duplicate reg_default entries
418da4d4ccb8 ASoC: rt712-sdca-sdw: sort the register default table
836df0d31a9a ASoC: rt712-sdca-dmic: sort the register default table
cf6017e0feee ASoC: rt711: sort the register default table
b7f7451a29c3 ASoC: rt711-sdca: sort the register default tables
e15783332f45 ASoC: rt700: sort the register default table
a35b77dc8e26 ASoC: rt700: drop duplicate reg_default entry
3954b3b21742 ASoC: rt298: sort the register default table
b50de175dd03 ASoC: rt286: sort the register default table
b454c7ed1cf9 ASoC: rt274: sort the register default table
74fe7483e6eb ASoC: rt1318: sort the register default table
876d3276fd9c ASoC: rt1318-sdw: sort the register default table
ec7064d07e24 ASoC: rt1316-sdw: sort the register default table
b5a45169cbf9 ASoC: rt1017-sdca-sdw: sort the register default table
2f972da629f6 ASoC: pm4125-sdw: sort the register default table
fc569468e874 ASoC: pcm512x: sort the register default table
0381caa253cb ASoC: ml26124: sort the register default table
207f95aed374 ASoC: max9860: sort the register default table
bb1602908c67 ASoC: loongson: Fix error handling in ACPI property parsing
4731e2d22e4b AsoC: intel: sst: fix PCI device reference leak on probe failure
cb6b0b1a9d5a ASoC: hdac_hda: Fix hlink refcount leak on component registration failure
a201b5bcdfd6 ASoC: fsl_easrc: sort the register default table
3e50bcfe6212 ASoC: fsl_easrc: Use div64_u64 for 64-by-64 division
cbb3444113a8 ASoC: fsl: mpc5200-i2s: Free DMA resources on probe failure
99d5973d7a0f ASoC: cx2072x: sort the register default table
07a86575edc3 ASoC: cs35l34: drain threaded IRQ before runtime suspend
84cf6acd01a1 ASoC: cs35l33: drain threaded IRQ before runtime suspend
86f47316e536 ASoC: adau1761: sort the register default table
1c9a77101f2d i2c: mux: demux-pinctrl: fix OF node leak on kstrdup failure
b2956d578e87 clk: qcom: gcc-mdm9607: Drop incorrect BIMC PLL and related clocks
fb3438a00799 clk: qcom: gcc-mdm9607: Fix halt_reg for gcc_apss_axi_clk
76ff1eff7358 clk: qcom: gcc-mdm9607: Fix enable_reg for gcc_blsp1_sleep_clk
30223154daac clk: qcom: gcc-mdm9607: Drop incorrect system_noc_bfdcd_clk_src
691d472c9509 clk: qcom: gcc-mdm9607: Drop incorrect apss_tcu_clk_src
4865ff30e918 clk: rockchip: rk3588: Don't change PLL rates when setting dclk_vop2_src
c6679c13e3c3 clk: qcom: gcc-msm8939: Fix enable_reg for gcc_blsp1_sleep_clk
508d6150d940 clk: qcom: gcc-msm8916: Fix enable_reg for gcc_blsp1_sleep_clk
8eb29dc9a9ad clk: microchip: mpfs: fix regmap_update_bits() mask/val order
bf85bd6e550c clk: meson: align gxbb_32k_clk_sel number of parents with actual count
bf538cdc9bb4 clk: mediatek: mt8196: Select REGMAP_MMIO for vlpckgen
9a511980e81b clk: clocking-wizard: fix integer overflow in rate calculation
edf86952488f batman-adv: bla: prevent CRC corruptions after claim flush
9a0c47023d32 batman-adv: bla: fix freeing of claims on meshif deletion
0c2df865338b batman-adv: dat: avoid unaligned fault in IP extraction
2879177539e3 batman-adv: mcast: linearize skbuff for packet generation
e4af59a2dc95 batman-adv: mcast: ensure unshared skb for multicast packets
b9c2d3a5043f batman-adv: fix TX priority extraction for BATADV_FORW_MCAST
2dffc8c44b6e batman-adv: fix stale receive device on merged fragments
23e747fe5858 mtd: rawnand: validate ONFI extended parameter page sections
97f1f4cdec16 mtd: rawnand: sunxi: fix H6/H616 controller timings
6086af3e39b0 mtd: rawnand: sunxi: describe tADL and tWHR delays
c3d542c6204c mtd: rawnand: sunxi: group controller delay tables
a732ae52c6ae mtd: rawnand: pl353: Make sure we use the monolithic helpers for raw accesses
00b4d5d20629 mtd: nand: realtek-ecc: add missing MODULE_DEVICE_TABLE()
1e5cd8bc9023 mtd: mtdoops: free page bitmap when the backing MTD is removed
d14e6298139f mtd: afs: validate v2 image info bounds
0307c2e82847 s390/vfio-ap: Fix required lock not held during update of ap_matrix_mdev object
09548edc6114 s390/vfio-ap: fix potential use of uninitialized apm_filtered bitmap
7db2511fc601 s390/vfio-ap: Fix NULL deref in status_show() during queue probe
0fd74477d057 s390/vfio-ap: Fix missing lock required to access list of ap_matrix_mdev objects
04b35dd88c10 s390/vfio-ap: Fix hot-unplug skipped when last AP adapter or domain removed
4f7e869d0db2 s390/vfio-ap: Fix dereference matrix_mdev->kvm without checking for NULL
2ff68bf414de s390/vfio-ap: Fix control domain removal in vfio_ap_mdev_cfg_remove
c8a9772f6dfe s390/vfio-ap: Fix stale do_remove flag across iterations in vfio_ap_mdev_cfg_remove
13bfc94eef38 s390/vfio-ap: fix stale pqap_hook pointer on error in vfio_ap_mdev_set_kvm()
c99e2c7811be powerpc/crash: stop watchdogs before booting kdump kernel
08ec4e8e3c54 powerpc/pseries: Move H_WATCHDOG definitions to a common header
8536f38107a6 powerpc/pseries: Handle and log pseries-wdt registration failures
7968852a7ca3 powerpc/mm: fix wrong addr_pfn tracking in compound vmemmap population
c4cb547f26d9 powerpc/kexec_file: Prevent kexec range truncation
4ff3d9fd71c7 powerpc/kexec_file: Fix null-ptr-def in extra size calculation
c513c8d17318 parisc: Fix alignment of asm statements in head.S
16a62a3f2128 parisc: eisa: Fix infinite loop when parsing invalid IRQ value
9dfa11cef475 nvdimm/btt: reject an arena whose nfree is below the lane count
c74eba81766e mm/hugetlb_cgroup: call page_counter_set_max() outside VM_BUG_ON()
05caf140e24a mm/hugetlb: keep max_huge_pages when dissolving surplus folios
10f616ef06c5 mm/hugetlb_cma: fix null nodemask dereference in hugetlb_cma_alloc_frozen_folio
e45612994250 mm/hugetlb: fix missing migratable flag on same-node hugetlb migration
99186b185c24 mm/migrate_device: avoid out-of-bounds writes for compound folios
431402bfca1c mm: fix incorrect vm_flags usage when checking allowable orders for tmpfs
cc5d6446ead3 Revert "pmdomain: qcom: rpmhpd: Add missing MXC and MMCX power domains for Eliza"
e19e41d1c628 Revert "once: don't use a work queue to reset sleepable static key"
3ddf7b95818a Revert "irqchip/mbigen: Fix mbigen node address layout"
a78d2d9a8456 pmdomain: airoha: fix unselectable AIROHA_CPU_PM_DOMAIN kconfig
1cbed7538946 nvmet-tcp: reject unsolicited H2CData PDUs
d95d342bc0ea nvmet-tcp: fix out-of-bounds write when receiving an over-long PDU
eb4f9127a2b8 nvmet-auth: Synchronize timeout work during SQ teardown
bb6dafa79040 nvme: skip the zoned limits update if the zone info query failed
76023560d60f nvme: add missing SRCU grace period in error path
a0c389b8a495 nvme-tcp: check the data direction of a C2HData PDU
5f89d68c00cc nvme-fc: fix double free of fabrics options when nvme_add_ctrl() fails
d21da6cc91ba nvme-fabrics: fix DHCHAP secret leak on parse failure
b3e0f79af1f2 accel/ethosu: fix job completion fence cleanup
f7aad73b4811 accel/ethosu: check MMIO mapping errors in probe
f00def884a83 accel/amdxdna: return early from a zero-length flush
dd403f6a38c5 ring-buffer: Allow splice reads on static buffers
50afadf1ea66 ALSA: pcm: Fix race between non-atomic ops and trigger-start
cd209eb3136e ALSA: harmony: initialize locks before requesting IRQ
faba321da0eb ALSA: rawmidi: Return the error from snd_rawmidi_input_params()
34f1d4f9f5ea arm64: errata: pass REVIDR when matching target implementation CPUs
d2d22ff377cd arm64: Don't read GMID_EL1 when MTE is disabled
0f05d95b9916 arm64: mm: Fix the lockless page-table walk in show_pte()
b00ada2f55c5 i2c: qcom-cci: fix autosuspend cleanup
694e7e6edf24 i2c: mux: Fix channel node leak on adapter add failure
552836be2d95 i2c: core: fix debugfs UAF on adapter removal
19cd6394f7dd i2c: qcom-geni: update frequency table to fix timing parameters
ac257b283962 i2c: designware: Enable interrupt mask workaround for HJMC3001
0c739f54f1c7 perf: Fix use-after-free when perf mmap() revival races with the last munmap()
517b02eaf30d perf build: Add clang and rust target flags for LoongArch
d9a9da94c9da perf hisi-ptt: Fix PTT trace TLP header parsing
ecd69a46c029 perf trace: Refactor augmented_raw_syscalls using bpf_for
92ad79c286f6 perf trace: Factor out BPF loop body
a820237b0378 perf/x86/intel: Remove anythread_deprecated bit from perf_capabilities
68c4b780b266 perf/x86/intel: Fix kernel address leakages in LBR stack
a5c7962e64ff rtc: rzn1: Disable alarm interrupt before reprogramming alarm registers
ea318a4675ee rtc: rzn1: Handle unset alarm weekday in rzn1_rtc_read_alarm
75c1e64b7b14 rtc: rzn1: Fix weekday underflow when alarm crosses month boundary
2f2496810890 rtc: rzn1: Handle EPROBE_DEFER for optional pps interrupt
5ec8f629a300 memcg: make the v1 soft limit knob inert
d44c3c5986c7 memcg: bypass the reclaim and oom killer for dying tasks once oom_reaper is done
6165478eaa30 memcg: keep folio's objcg same as its node
2943f1f4b7f2 mm/mempolicy: fix sleeping allocation in alloc_pages_bulk_weighted_interleave()
9435cddf1378 mm/huge_memory: transfer the pmd dirty bit to the folio on zap
d69841dbd92a misc: fastrpc: don't publish fd before copy_to_user() succeeds
6e62cf983a2b kprobes: Protect kprobe_blacklist with RCU
732510e13ee5 irqchip/stm32mp-exti: Fix the unit of the hwspinlock timeout
d62a84a78de5 ima: Check for ERR_PTR from dentry_path() in validate_hash_algo()
e5b64bd7e57f ata: ahci: work around lost interrupts on Marvell 88SE61xx
df1a97d5313f ceph: lock mutex in ceph_mds_check_access()
a5b5e62bacef bpf: Fix infinite loop in pcpu_freelist push with one possible CPU
683fa887e19f bpf, riscv: Make arena support depend on ZACAS
fdbaeae9313b block: flag zoned disks with GENHD_FL_NO_PART
9b7c322cf29e cpuidle: psci: Fix support for probe deferral by dropping the faux device
3394c7ba2333 cpuidle: dt_idle_genpd: kfree() the original name allocation
e79449be26ac dmaengine: dw-edma: Mark emulated IRQ as level-triggered
d91fb6c0d10d dmaengine: dw-edma: Initialize IRQ data before requesting IRQs
3044460e2d31 dmaengine: dw-edma: Complete descriptors before pausing
8cd010697b79 dmaengine: dw-edma: Fix HDMA channel status register access
2a3801ae5c34 dmaengine: fsl-edma: tracing: no ptr dereference during log output
feeb2ef77508 dma-direct: return struct page from dma_direct_alloc_from_pool()
0d4a5d218055 dma-buf: dma-heap: don't publish fd before copy_to_user() succeeds
94380ecd5ff9 dm: fix resume-vs-remove race
00ad6f9ed27f dm: fix race when loading and unloading a table
0cdc6cb242dd HID: wacom: validate report length in wacom_intuos_pro2_bt_irq
48934c292741 HID: rmi: fix OOB access with undersized RMI reports
bfb7939788f3 HID: bpf: serialize device reference release in struct_ops destroy path
b260b54f1140 ftrace: Synchronize the initialization of ftrace_ops
cee8f286794d ftrace: Take trace_array reference before accessing its ftrace_ops
b715872ef0cc futex: Provide rt_mutex_.*_schedule() equivalents for futex scheduling
e4a4ccfa470f futex: Prevent rcuwait use-after-free during requeue PI
3b4f72bdddff mm/secretmem: properly account locked pages
0b8faf28d137 mm/damon/core: initialize damos->last_applied
463ebd63e8ee mm/damon/core: handle region split failure in apply_min_nr_regions()
54ef3a3f14e9 mm/damon/core-kunit: skip wrong region walk in commit_target_regions()
bbbf6a9781fd mm/damon/core-kunit: skip wrong quota goal walk in commit_quota_goals()
bee189b41f9d mm/damon/core-kunit: skip wrong dest walk in commit_dests_for()
03a8f8917236 mm/damon/core-kunit: handle region split failure in filter_out()
4deb1ec69993 mm/damon/core-kunit: check region count before testing in split_at()
54439210c91e mm/damon/sysfs: kobject_del() target (normal), context and kdamond dirs
e94f9f9478af mm/damon/sysfs: kobject_del() region and target (error) dirs
11ce1b269aac mm/damon/sysfs-schemes: kobject_del() scheme region dirs
5091760ab2ac mm/damon/sysfs-schemes: kobject_del() scheme quota goal dirs
eca049e5b5e5 mm/damon/sysfs-schemes: kobject_del() scheme filter dirs
df7a40102ae4 mm/damon/sysfs-schemes: kobject_del() scheme dirs
43b33bdace2c mm/damon/sysfs-schemes: kobject_del() scheme action destination dirs
b8ec303f53b0 samples/damon/wsse: stop and free damon ctx when damon_call() fails
e60774d6335b samples/damon/wsse: handle damon_start() failure
9fbc1811e83f samples/damon/prcl: stop and free damon ctx when damon_call() fails
f383b55811d8 samples/damon/prcl: handle damon_start() failure
215f9a7e4f1d samples/damon/mtier: handle damon_stop() failure
b4bba194bd06 samples/damon/mtier: handle damon_start() failure
cb97afccffd6 mm/damon/vaddr-kunit: check region count in three_regions test
3ed555fb2c6e mm/damon/tests/core-kunit: catch test failure in test_merge_regions_of()
25253bbd8066 mm/damon/sysfs: read ops_id only once in damon_sysfs_apply_inputs()
81e9ca01ebc2 mm/damon/sysfs: read addr_unit only once in damon_sysfs_apply_inputs()
b9687ed098d7 Docs/ABI/damon: fix typo in intervals_goal sysfs path
e20b16aa3b49 scsi: pm8001: Use rollback index when freeing MSI-X vectors
4dd118d06dec scsi: megaraid_sas: Limit NVMe request size to the PRP chain frame
f033530105aa scsi: bsg: Fix TOCTOU in io_uring passthrough command setup
5d326efc334e scsi: bsg: Cap io_uring sense copy to max_response_len
3ddf3ea291a0 scsi: target: iscsi: Reserve a terminator byte for the login payload
5def8b6aaad4 spi: Fix DMA mapping ownership on partial map failure
103e7b19d108 spi: bcmbca-hsspi: disable clocks on resume failure
6b1ccecf311c spi: bcm63xx: disable clock on resume failure
d07d4fbae479 spi: bcm63xx-hsspi: disable clocks on resume failure
220cea6c1662 soc: qcom: geni-se: Use HW PROG_RAM_DEPTH to validate firmware size
b437284a4c29 soc: fsl: qe: Add chained_irq_{enter,exit}() calls in cascade handler
fa5e1bc673ca ublk: clear VM_MAYWRITE on read-only ublk char device mmap
dfc17986c608 userfaultfd: reset err to be 0 when move_pages_ptes succeeded
64a41f4a9a96 tracing: Take trace_array reference when opening options file
2ee3f7d43f79 tracing: Have show_event_filters/triggers files take trace array ref
e6ccc279cb8e tracing/probes: Fix anon_stack check for unnamed bitfields in btf_find_struct_member
50af36b7f901 thermal/drivers/qoriq: Disable clock on resume failure
909cdbd028f8 thermal/drivers/imx: Disable clock on runtime resume failure
7236bbd2cb7d xhci: fix lost bounce buffers on TDs spanning several ring segments
fd19b8895f8a staging: rtl8723bs: fix OOB read in rtw_restruct_wmm_ie()
a54fd1a44862 staging: rtl8723bs: fix OOB read in rtw_action_frame_parse()
34f51d196c43 staging: rtl8723bs: fix OOB read / stack overflow in rtw_get_wps_attr()
5117f236e9e3 usb: gadget: fix null pointer dereference in usb_put_function_instance()
64ec019bf9a8 USB: gadget: fix NULL pointer dereference in gadget_dev_ioctl()
858576de6b2f usb: gadget: f_midi: initialize work in f_midi_alloc()
49fab5e1bdb2 usb: gadget: f_midi2: fix use-after-free in string attribute show path
b9b5b5df5b8d usb: gadget: f_mass_storage: fix null pointer dereference in fsg_common_set_num_buffers()
4079f19a0e1c usb: gadget: midi2: Fix null-pointer dereference in f_midi2_free_ep_reqs
bdaaf3074aed usb: typec: ucsi: displayport: Fix OOB altmode array index
87f7222587b4 usb: typec: tipd: Fix Thunderbolt altmode VDOs for cd321x
e5f9f36c5d61 usb: typec: tcpm: constrain TCPM_SOURCING_VBUS event handling
52d556f08547 usb: typec: qcom-pmic: cancel reset_work on stop
b5efa3b89395 usb: typec: qcom-pmic-typec: drain cc_debounce_dwork if port_start() fails
1ab669c2b44e usb: typec: qcom-pmic-typec: disable cc_debounce_dwork on stop
e2e424655e31 usb: typec: mux: Fix typec_switch_match()
312a11d6f739 usb: typec: mux: avoid duplicated mux switches
df7cd3908e07 usb: typec: hd3ss3220: track VBUS enable state per consumer
cae9dbba6ada usb: storage: realtek_cr: fix use-after-free on disconnect
e01408ee52fe usb: dwc3: clear forceRM when issuing EndTransfer
d8cfb7f630eb usb: dwc3: google: Initialise probe properties with DWC3_DEFAULT_PROPERTIES
619aae11b85f usb: f_mass_storage: Bump local buffer size in fsg_common_create_luns()
2571029a92ee usb: cdnsp: fix wakeup from S3 after controller context loss
996c319b8bd5 usb-storage: ene_ub6250: fix race between scan work and probe
1618257cb0ab media: usbtv: keep device alive while ALSA card exists
d2c87eadcec4 clk: qcom: gcc-mdm9607: Increase delay for USB PHY reset
9d81885d97cb ALSA: usb-audio: fix OOB write in snd_usbmidi_us122l_output()
e22428f0c038 usb: image: mdc800: change kmalloc() to kzalloc()
b08c3d5ee7fe drm/amd/display: fix division by zero in get_estimated_bw()
6fedb2eaff77 NFSD: Prevent client use-after-free during blocked-lock reaping
e57a9ed34ea8 NFSD: Prevent client use-after-free during close_lru reaping
b75ecd512208 NFSD: Consolidate the revocation-path client unpin
c05ae58fe06c NFSD: Prevent client use-after-free during export state revocation
0146467a2fce NFSD: Guard admin state-revocation walks with NFSD_NET_UP
f7e7fcd82f57 NFSD: Annotate caller preconditions for the state-table walkers
2640cc26ed0d KVM: SEV: Forcefully invalidate SNP VMSA if its backing gmem page is zapped
98bcc7034db1 KVM: x86/mmu: Use split "zap all fast" helpers when invalidating memslot
689c1b2da477 KVM: x86/mmu: Split kvm_mmu_zap_all_fast() into "front" and "back" halves
00388b7b718a KVM: x86/mmu: Fold kvm_mmu_zap_memslot() into kvm_arch_flush_shadow_memslot()
7a90d99686e5 ACPI: battery: Protect all properties with a separated mutex
d7a6af8e5176 ACPI: battery: Use kstrtoul() over sscanf("%lu\n")
d044d796e2a3 HID: sony: clean up device list on probe failure
5a4ed79030ef HID: sony: use guard() and scoped_guard()
3b467c68803d ceph: properly decrypt filenames in vmalloc() buffers
052b6b2d5fe9 zram: fix slot lock bit position on big-endian 64-bit
342d140c8225 zram: move lockmap to be per-zram instead per table
4a2fb2d12b87 usb: gadget: f_fs: Fix Use-After-Free in AIO error path
7411de0ce3b4 USB: gadget: ffs: fix mm lifetime handling
68a069b40730 mm/page_alloc: don't spin_trylock() in NMI on UP
348c3db4f152 drm/xe: Don't hand out the flat CCS storage as usable VRAM
a84f3db72561 fs/ntfs3: fix slab-out-of-bounds write in ni_create_attr_list()
bab5a851e44a net: skbuff: don't skb_tx_error() the source skb in skb_zerocopy()