08752fbeb9d3 Linux 7.2.6-xanmod1
97d12734e07e Merge tag 'v7.2.6' into 7.2
500df175a7f9 Linux 7.2.6
61a8d06600c8 ksmbd: prevent out-of-bounds reads in share config responses
1f0085f15004 perf python: Add missed explicit dependencies
8f57985e30a2 perf ui hists: Fix dso_filter reference leak and exit zoom cleanup
078aca7b8051 perf hists browser: Increase MAX_OPTIONS to prevent stack buffer overflow
72e938788455 net/sched: fq: clamp quantum and initial_quantum in change path
b04326c7927a tcp: reject non zerocopy devmem tx
2bfcedbf68cb Revert "esp: do not unref managed frag pages in esp_ssg_unref()"
dd08a645195f dm-integrity: fix buffer overflow with keyed discard
872317e84fd0 net/sched: sch_htb: limit htb_classify inner-class filter hops
47eb90299e68 tcp: fix corruption of urgent data on multi-segment retransmit
756677031151 usb: atm: usbatm: fix invalid ci_range initialization
5975009651c4 net: fec: only stop PTP if it was initialized
a540a49fcca5 slip: remove slip_hangup() to fix use-after-free in slip_receive_buf()
16d21a27df3f net/sched: bound qdisc_pkt_len to prevent qdisc soft lockup
a9d88c79746c net: dsa: mxl862xx: enable assisted learning on CPU port
c0d3f9560cc8 net: stmmac: restore NET_IP_ALIGN in the RX DMA offset
b445030cca1f net: stmmac: drop gso_enabled_types and rely on netdev features
482b2542eeb8 net: stmmac: selftests: Don't test flow control for small rx fifos
5a106e59b051 net: stmmac: selftests: Account for the UC filter list for filtering tests
d1fad6804be2 net: stmmac: dwxgmac: Account for the primary MAC address for UC filtering
10cf85addede net: stmmac: dwmac4: Account for the primary MAC address for UC filtering
db57c2c4eaa5 net: stmmac: dwmac1000: Account for the primary MAC address for UC filtering
756932d2c6a0 net: stmmac: selftests: Check multiple MMC counters
2bbd61823f22 drm/xe/sysctrl: Read mailbox phase bit from hardware
08f8c20feca9 drm/xe/xe_ras: Add support to get error counter value
da853f330449 drm/xe/uapi: Add additional error components to xe drm_ras
1ffe1bd34b49 net: airoha: npu: fix missing streaming DMA mask
fc3ee0109085 selftests/arm64: Fix MTE prctl TAP plan
5791116f96d4 selftests/arm64: Treat KSM merge_across_nodes as optional
a327373156bb selftests/arm64: Print missing MTE TAP headers
18c08f84ca48 ALSA: control: Don't add invalid kcontrols to LED layer
1e7fb6801d9c netfilter: nf_tables: skip double clone set expressions on element insert
0044a4b85372 netfilter: x_tables: replace pr_{info,err}() by pr_info_ratelimited()
6a7d3b074cfb netfilter: nf_tables: move hardware offload step after building the chain blob
75c271c48f48 virtio-net: Ensure that TCP packets don't overflow gso_segs
905d648e97ef drm/xe: Reject page faults from non-fault-mode scratch VMs
9cc86bf96cfc drm/xe/xe_gt_idle: Add CCS to the powergating info print
2f1fac18cbe8 drm/xe: Do not apply WA 14025883347 to media 3503
1b871710ae9f net: stmmac: selftests: Pass the IP proto mask in the TC selftest
dadcbaa98de3 net: wangxun: use BIT_ULL() to prevent shift overflow on 32-bit archs
a32c4a6dc96c net: phy: air_en8811h: move LED GPIO configuration to config_init
94a913cd521c net/smc: release the internal TCP sock on IPPROTO_SMC socket creation failure
ff481b7ba651 net: ethernet: sun4i-emac: Fix IRQ error handling
2e658329d774 ASoC: amd: acp-config: change quirks to cover all ASUS FA401EA variants
cf839636911d samples/ftrace: Fix kthread_stop() on ERR_PTR in ftrace-direct-multi-modify
84b5c7670a86 samples/ftrace: Fix kthread_stop() on ERR_PTR in ftrace-direct-modify
c77633a95956 libceph: validate banner payload length
36138bde421a ceph: revalidate ki_pos for O_APPEND writes after cap acquisition
c5fd89f5e127 ceph: Fix ERR_PTR(0) in ceph_mkdir()
55126ef66298 ASoC: dapm: Fix off-by-one check on the second enum channel
8968852e664f of/irq: Fix device node refcount leak in of_irq_get_affinity()
dd52ab1c5436 apparmor: policy_int make sure list heads are initialized before fail path
889fa17a0af0 crypto: acomp - allocate async request context when cloning
f0e06321c70e tpm: st33zp24: Validate locality read result
e6d7d9b66541 tpm: st33zp24: Return zero on status read failure
0cd750379485 net/sched: sch_teql: restore skb->dev on the slave failure path
da16c31517cd net/sched: sfq: clamp quantum to avoid signed overflow soft lockup
2446644b0f6d net/sched: hhf: clamp quantum before hhf_change() to avoid overflow
bf97fd2163ad net/sched: fq_pie: clamp default quantum to avoid signed overflow
f2fe291fbf71 net/sched: sch_codel: clamp default mtu to avoid disabling CoDel
9f499e5827fd net/sched: fq_codel: clamp default quantum and mtu
e35acd56f244 net/sched: fq: add overflow bounds to quantum and initial quantum
e69bde4eb566 net: fix a resource leak in copy_net_ns() error handling path
efb4cdd8d72b net: core: check skb_frags_readable before uncloning in skb_copy_ubufs
62126464f3a6 net/sched: act_skbmod: fix length calculations and avoid invalid header warnings
0f0f3df2bde2 selftests/proc: make proc-maps-race work with READ_IMPLIES_EXEC
7efd495853ae maple_tree: fix argument name in header
dfe9ee26a9ad maple_tree: catch race in mas_alloc_cyclic()
21aea0891c20 mm/memcontrol: avoid false sharing between vmstats and events
3b06d0cc8154 selftests/mm: fix read_file() return value check
8625208f464e selftests/mm: skip COW tmpfile cases when fallocate() is unsupported
f6ec40d1e4f1 smb/client: preserve open info type across compound queries
a58270c1b344 cifs: fix clearing stats for fastest execution of each smb2 command
a0fcbea79f03 octeontx2-af: fix cn20k mailbox lifetime on repeated rvu_mbox_init()
7e33c6bd049b octeontx2-pf: fix NULL deref of af_xdp_zc_qidx on rep setup
281f9fda2e06 net/rds: use wq_has_sleeper() in rds_cong_map_updated()
4f9827b314ee net: mana: Cap MSI-X vectors to the device MSI-X table size
138b0054021f net/sched: act_ife: Only operate on Ethernet frames
a93b72eb2f5a net: enetc: restore RX ring congestion mode for ENETC v4
18ca1be8426a net: enetc: remove invalid code from enetc4_pl_mac_link_up()
1039c56c4c99 net: enetc: improve MAFT entry management with bitmap tracking
d25a4a481cfb net: enetc: convert ndo_set_rx_mode() to ndo_set_rx_mode_async()
c77effb3edb8 net: enetc: extract common helpers for MAC hash filter configuration
ccdc23869332 net: enetc: extract common helpers for MAC promiscuous mode setting
1a20660772b6 net: enetc: restore RX ring congestion mode after ring reconfiguration
b3235a8790a1 octeontx2-af: Fix TL3/TL2 link config ENA clearing
200460a0793d net: qualcomm: rmnet: restore skb->dev on deaggregated frames
ef42c9e922df octeontx2-vf: fix workqueue and netdev race in probe/remove
2f460aa0211e octeontx2-af: fix out-of-bounds read setting MSI-X irq affinity
fdf7358e2688 octeontx2-af: fix NULL deref in NIX TM tree debugfs read path
8d85498016a5 gtp: add synchronize_net() in gtp_newlink() error path to prevent use-after-free
bf9387488d63 xsk: honor XDP_TX_METADATA in zero-copy path
0e00ea9e97a3 xsk: align TX metadata layout across ABIs
2eafcf310f4e Bluetooth: do not leak an hci_conn when a second LE connect is rejected
3988cbb1be50 Bluetooth: RFCOMM: Validate MTU in rfcomm_apply_pn() to prevent infinite loop
22d419db7f9a Bluetooth: btnxpuart: Validate the FW dump header length
94a71da6d6b3 Bluetooth: hci_sync: add conditional locking annotations
7b80d2701a68 Bluetooth: btmtksdio: Fix out-of-bounds DMA read in the TX path
d84bc309288b Bluetooth: btmtksdio: Take exclusive ownership of the SKB before TX
956b5a979b0d Bluetooth: btmtk: Do not discard the subsystem reset timeout
820e64cb52db Bluetooth: btmtk: Do not report success when subsys reset fails
32a7bc6e93be Bluetooth: L2CAP: fix race l2cap_sock_cleanup_listen() vs. put_chan
ee2135a14fb2 Bluetooth: mgmt: fix 'hdev->discovery.uuids' NULL dereference
c47339e169bf Bluetooth: L2CAP: reject accept queue add unless BT_LISTEN
f49321c85785 Bluetooth: L2CAP: access chan->conn safely in get/setsockopt
a34fb2fa48fb f2fs: use adjusted write range after f2fs_write_checks()
2f10bc3ff24c arm64: process: Fix context switching MTE store-only tag check
ae0cfa977298 arm64: ptdump: Make note_page_flush() range aware
8f9a725d8971 fuse: Fix the condition to enable over-io-uring
f940f3d3fd0b fuse: use release/acquire for fch->initialized
833963069adf fuse: invalidate the correct range after O_APPEND direct write
faef603939f2 erofs: Fix EROFS_FS_ZIP_LZMA_DEFAULT_MAX_STREAMS default logic
31d299e7d553 scsi: qla2xxx: Fix an loop timeout test
4c19c302cc57 Drivers: hv: vmbus: Skip VMBus module cleanup for non-nested root partition
55d87e888ca1 net/sched: sch_cake: fix autorate reconfiguration throttling
4384d152e10d net: hibmcge: fix page_pool DMA direction mismatch
2e5b1f6ee74a net_sched: sch_fq: fix pacing delay underflow with pacing offload
72895242ee74 net: page_pool: Remove zone/policy GFP flags when allocating XArray entries
7d63522f9e59 net: libwx: fix concurrent bitmap overwrite in PTP setup
c6dfa6dc37d7 net: txgbe: fix MISC interrupt unmasking in non-MSI-X mode and device shutdown
648d196ccc03 net: sparx5: fix sleep in atomic context in MAC table access
905754787762 net: microchip: vcap: use port number instead of netdev name for debugfs
18c68c8f3d3f net/sched: account classifier filter allocations to memcg
08988d1941e1 ptp: netc: fix period truncation and potential divide-by-zero in PEROUT
98b499873355 bnxt_en: Gate TPH enablement behind BNXT_SUPPORTS_QUEUE_API check
b17907ef665b bnxt_en: Fix call to hardware monitoring event handler
1cd4b0a184db ASoC: fix unmet dependencies on PPC_BESTCOMM and SND_SOC_AC97_BUS
5d542be0c492 rtc: pcf85363: Add error checking to regmap calls in probe()
bbc975cfb07a NFSv4/pnfs: key the data server cache on the NFS version
a973622da0c6 NFSv4.2: fix LAYOUTSTATS send buffer exhaustion
f31f3c042e02 NFSv4.1: zero referring call lists before decoding
ecc8bac11a10 vxlan: fix reading neigh ha
291c9e137b7c net: bridge: arp/nd proxy: fix reading neigh ha
5ff429dd6725 net/smc: free pending qentry in smc_llc_flow_stop() before memset
e25a602c45c7 net/smc: free stashed qentry before overwrite in REQ_ADD_LINK to ADD_LINK transition
b2479738ba76 powercap: intel_rapl: Sign-extend the PMU delta on counter wraparound
d98b92f3d579 net: sched: fix 32-bit backlog wrap in gred, bfifo and plug enqueue
bc4e67c9399c net: tcp: block mixing readable and unreadable frags
7109bb63667a inetpeer: randomize RB-tree node comparison using SipHash
4a674afaae41 ip6mr: do not clone dst in ip6mr_cache_report()
684773c4d26f net: qlcnic: validate unified ROM sections before loading
35a6026eadcb net: add missing ref_tracker_dir_exit() to net_passive_dec()
f82b5dbb2fef ipv6: avoid divide by zero in rt6_multipath_rebalance
db038ac4dca0 netdevsim: update queue NAPI association on queue reset
f5d53818ba92 net: ipa: balance runtime PM reference on remove error
976e92931c28 forcedeth: stop the tx_timeout register dump past the requested window
d52c695b6980 net/mlx5: E-Switch, preserve max tx speed on vport state modification
8a9a3ccdc35e net/mlx5: Move vport DOWN state check out of mlx5_query_vport_max_tx_speed()
19dd11227916 net/mlx5: E-Switch, use state lock for vport state changes
21c0a41260e4 net: thunderbolt: Count delivered packets in rx_packets and rx_bytes
a5ce5b5aacd0 net/sched: add get_fill_size callbacks for actions missing them
434849b21ef5 net: bridge: Reject descending VLAN tunnel ranges
8341bd3ff126 xsk: fix NULL pointer dereference in __xsk_rcv()
e50df85ac835 irqchip/irq-realtek-rtl: Use readl_be()/writel_be() instead of readl()/writel()
12f903cfacb4 irqchip/irq-realtek-rtl: Add mask for interrupt handling
7dd58ec1bbd4 irqchip/irq-realtek-rtl: Add interrupt data structure
1f0b4680d3b5 irqchip/irq-realtek-rtl: Split out parent setup code
6c94e5f95258 smb: server: remove unused DES crypto header
93fb16a86d5d smb: server: Remove obsolete "select CRYPTO_LIB_DES" from Kconfig file
1e16e8258152 ALSA: mtpav: shut down output timer before card teardown
24d81b729920 drm/xe: don't WARN on kernel job timeout when device already wedged
5969a3df8361 spi: amlogic-spisg: Make sure clk_init_data is fully initialized
e46ef54fe4d9 RDMA/ucma: Allow path records to exactly fit the output buffer
ea5a3c307107 ntfs: validate usa_ofs before preserving the update sequence number
b42644e425fe ntfs: fix off-by-one page overflow in ntfs_decompress()
e52c8cd7e754 sched/topology: Add a cpus_read_lock to rebuild_sched_domains()
24b399f51812 ALSA: ice1712: Fix the card leak at probe error with the auto-cleanup
ae344ed82795 irqchip/gic-v5: Defer default SPI and LPI IAFFID programming
3958493a70ce irqchip/gic-v5: Use logical cpu 0 irs_data for dynamic IST allocation
7c10ec4987b7 irqchip/gic-v5: Release IRS iomem region on driver init failure
7b7201493383 irqchip/gic-v5: Fix gicv5_init_common() error paths
69f0c79f5b69 irqchip/gic-v5: Disable IRSes on probe failures
f43bdac1ae48 irqchip/gic-v5: Check for NULL LPI domain on domain teardown
6caeb878f809 irqchip/gic-v5: Check get_logical_index() return value in MADT IAFFID parsing
a7c041520924 irqchip/gic-v5: Synchronize CPU interface disable
54937af6f4a0 irqchip/gic-v5: Clear per-CPU IRS data on teardown
69212cccf4f9 irqchip/ast2700-intc: Disable all interrupt merge banks on probe
5ecfa72e74c6 clk: visconti: Make sure clk_init_data is fully initialized
c1c6d311fa83 clk: ti: Make sure clk_init_data is fully initialized
6234b08fbc4b prctl: fix PR_SET_MM_AUXV losing the forced AT_NULL terminator
56ae1f0b0840 lib/interval_tree: fix allocation warning messages
63337be8f5c4 rtc: gamecube: check return value of devm_rtc_register_device()
c80e3c69cf19 i2c: ocores: Disable clock on failed resume
f2f0da116486 irqchip/ast2700-intc: Avoid allocating in the irq_domain activate() callback
dbecbe23dc60 irqchip/renesas-rzg2l: Fix loss of interrupt
3f00d8a5e16c rtc: zynqmp: Return optional clock lookup errors
a24926c51303 cifs: remove dead size-update blocks in cifs_setattr_unix/nounix
7ec4098359b9 smb: client: set replay flag on the read send-error retry path
73f6bdb03804 smb: client: fix request buffer leak in smb2_new_read_req()
12f124ec61c7 smb/client: return EOPNOTSUPP for unsupported O_TMPFILE
9a4d2ef7e72b rtc: spacemit: handle regmap_test_bits() error return
6218c0533a72 rtc: pcf8563: fix clock provider leak on unbind
afbf69d1d691 virtio: rtc: time out alarm requests
c678d04ac9e5 vdpa/mlx5: fix wrong list iterated in add_direct_chain error path
89b4d033a4b5 virtio_pci: fix wrong queue index for admin vq in intx path
43a8e02dc826 vhost/net: fix clear_user start address in VHOST_GET_FEATURES_ARRAY
bdef50a8226f virtio_balloon: quiesce balloon work before device shutdown
1ac4c32198b8 virtio_balloon: factor out virtballoon_quiesce()
fcbba617b38c virtio: add virtio_device_shutdown() helper
ca6f3fa599cb vdpa_sim: fix cleanup after worker creation failure
2ee4d24c88c4 virtio_balloon: disable indirect descriptors
14dca701e72a ntfs: do not update ctime when setxattr fails
0400e0d50eb3 ntfs: serialize resident iomap reads with mrec_lock
9d1b68f3dd11 ntfs: convert iomap ops to ->iomap_next()
95dc8483f2d7 iomap: add ->iomap_next()
8a255824aa00 iomap: split iomap_iter() logic into iomap_iter_next()
95d7098561e5 ntfs: allow index root relocation
86f46508016b ntfs: reject unprivileged writes to reserved $LX* xattrs
25a70f2ea77e ntfs: respect per-file chmod mode over mount masks
6028b94f28d9 ntfs: apply Windows name checks only with windows_names
825dec512093 ntfs: Fix index_root heap OOB write in ntfs_ir_to_ib()
950e2ecc7aec ntfs: fix kmap_local_page() usage in compress
825f4476ea60 ntfs: Remove references to page->__folio_index
20224191755b ntfs: Use zero_user_segment() in handle_bounds_compressed_page()
cfa877fdae27 ntfs: Remove use of __folio_index in handle_bounds_compressed_page()
c13cd1124ec8 ntfs: Inline zero_partial_compressed_page()
e366735ed2a8 ntfs: rewrite EA stream before updating metadata
62f39201c0cc ntfs: remove empty EA attribute pair
98af5b4ae138 ntfs: validate final EA attribute size
9fb0fed1b918 perf vendor events arm64: Fix Tegra410 Olympus event 0x0197
b3ba86c6c599 perf vendor events arm64: fix swapped MetricGroup for Tegra410 L1 prefetcher metrics
4af8e0f7838d i3c: mipi-i3c-hci: Fix missing STAT_IBI_STATUS_THLD in PIO mode
63ab05e8f965 net: add missing ref_tracker_dir_exit() to alloc_netdev_mqs()
ba5429c8c43e bonding: initialize err for empty target lists
1058c4379959 mlxbf-bootctl: fix the build error with FIELD_PREP()
1b0a3d915320 platform/x86/amd/hsmp: Reject negative power cap writes in hwmon
8a7499b8fd34 platform/x86: hp-bioscfg: fix password encoding bounds check
0cc59397bbf9 vsock: use sock_error() to consume sk_err after a failed connect
491b368a0c6e vsock: don't check the listener's sk_err in vsock_accept()
cfcc833cb43b platform/x86: dell-wmi-sysman: Fix instance ID bounds
eddb191cc8d6 net/smc: hash socket only after full initialisation in smc_sk_init()
b4ce1c461a49 8139cp: fix Rx and Tx not being disabled in cp_suspend
f26400b325bd vxlan: mdb: Fix use-after-free in vxlan_mdb_flush()
44764dc4b9f9 ALSA: hda: Fix connection list comparison in proc output
509f4a09bae7 fuse: check for NULL root inode in fuse_fill_super_submount
710bbbbb66c7 soc: qcom: ubwc: Fix missing include
236d65ecf377 fuse: reject a duplicate fd= mount option
c8a109c9e23a fs/ntfs3: validate ef->size covers the record's name and value
53e56f7aa1d0 fs/ntfs3: fix out-of-bounds read in read_log_rec_buf()
c40f3f24839f cuse: wait for pending RCU callbacks on module exit
0dffaa477c2d net: bridge: vlan: fix inverted default vlan notification
adb27c5665bd tls: fix RX desync on overlapping skbs
38ce7de7215a net: dsa: mv88e6xxx: Fix PCS link check on CMODE read error
ad32e564c62e vxlan: vnifilter: enforce exact length of GROUP/GROUP6 attributes
b1908bff0faa ipvs: fix integer overflow in ftp helper port/address parsing
454c59ef2dd0 netfilter: ctnetlink: do not expose expectation DEAD flag
6a31c661ba1e netfilter: ipset: remove need to allocate memory on delete operations
44ff26872e24 f2fs: fix to avoid pinfile fragment on fragment:{block, segment} mode
87abc928271c f2fs: cleanup w/ f2fs_need_rand_{blk, seg, seg_blk}
8344c9233c8f virtio_net: Fix resize of the RX ring
49b01f2939ab net: hsr: free learned nodes on device setup failure
23fc79697224 pppox: drain queued packets on channel handoff
93462180871b net: dsa: b53: fix error propagation from b53_fdb_dump()
f392affef3c9 net: kcm: Hold RCU read lock while running BPF parser
fdbf04e3e01a dpll: fix NULL deref in dpll_device_ops() during teardown race
122d0db84b11 ionic: fix completion descriptor access with 2x desc size
242d2d8bfc09 ionic: add missing dma_rmb() after the completion publish check
8ed5e2a3c306 ptp: netc: skip PEROUT disable if channel is not enabled
851f2f82483d drm/xe: tests: fix error message in xe_migrate_sanity_test()
96c395977038 hinic3: Fix skb linearization mismatch and drop skb when skb_checksum_help() failed
bcd89fdf033b octeontx2-af: initialize lmac_bmap in rvu_mcs_set_lmac_bmap()
677b4c6e8c27 can: m_can: Use of_property_present() for wakeup-source
03022dd87407 bpf, xdp: move offload check into dev_xdp_install()
33bcf2dd2fd6 regulator: tps65185: wait for the IC to wake before the first I2C access
df9c1cd0c6e8 clk: ti: mux: resolve parent clocks by DT index, not by name
647157fecb42 clk: devres: fix cleanup in devm_clk_get_optional_enabled_with_rate()
7582a485870a nfs: fix ENXIO on O_CREAT open of existing symlink over NFSv3
d179ff22cd85 NFSv4: Fix incorrect argument passed to nfs4_delete_lease() in nfs4_add_lease()
436a214514e2 NFSv4/flexfiles: fix NULL dereference for NFSv4.0 data servers
c9c67f7107f7 NFS: Fix delayed delegation return list handling
23e4162405c4 pnfs/blocklayout: Fix device leaks on parse failure
5891c03e1509 NFSv4: remove callback IDR entry on client allocation failure
a30e2a335309 nfs: refactor pNFS functions using clear_and_wake_up_bit
2e8a725cdb64 nfs: replace atomic bitops sequence with clear_and_wake_up_bit helper
8e29e6c43f9d selftests/bpf: Retry stat generation in cgroup_iter_memcg
f075148f3eeb smb/server: fix session counter on session removal
f31178bb91cd smb/server: update session counter under sessions table lock
46bb82a53902 smb/server: warn if ksmbd_proc_create() fails
c949ea4edccf ksmbd: add procfs monitoring for active shares
55c677619084 smb/server: fix session leak in ksmbd_session_register()
8e4f75e979c1 ksmbd: bound smb_check_perm_dacl() ACE walks by DACL size
ce92f3cc7ee4 ksmbd: handle encrypted compressed requests
6f04e11d500b ksmbd: decrypt requests from expired encrypted sessions
9d3ebd821622 ksmbd: disconnect on SMB3 decryption failure
0875872718b9 ksmbd: scope session state changes to bound connections
b9f1aee32d38 ksmbd: fix encrypted request lookup on bound channels
3fc762f881c9 ksmbd: expire SMB sessions when Kerberos tickets expire
599dd43e4ba8 ksmbd: validate SMB2 write offsets
514a0b2bc949 ksmbd: detach blocked lock requests before freeing
d09af9a35ff7 ksmbd: safely discard unregistered deferred locks
31a89af4f513 bpf: Reject negative optlen in cgroup getsockopt hook
d73441232f1f m68k: nfcon: Do not call console_is_registered() in nfcon_device()
daeb74f5f398 bpf: Disallow bpf_{g,s}etsockopt() in cgroup UNIX getname hooks
7b6b6bbbfd13 erofs: fix unused pcluster_pools for higher page sizes
179a5b217157 lwt_bpf: Restore reserved headroom after xmit program
1bbdbf56d358 objtool/klp: Fix vmlinux klp relocations for EXPORT_SYMBOL_FOR_MODULES()
0f8a4184c00c erofs: guard on-disk algorithm IDs against Z_EROFS_COMPRESSION_MAX
451027c642e7 erofs: fix interlaced ztailpacking pclusters
a1d26dfb3291 ksmbd: defer publishing granted locks to prevent UAF/double-free race
a54df0ce7a98 ksmbd: recognize replayed SMB2 lock sequences
9e8faf91bb11 smb/server: preserve error status in smb2_handle_negotiate()
7d2cd9269b57 smb/server: call ksmbd_proc_cleanup() on module init failure
fb4ba2bdfc1d smb/server: abort initialization when proc setup fails
a2eb72b4d53b smb/server: fix invalid pointer dereference in ksmbd_stop_durable_scavenger()
7065d3648b1a smb/server: fix null-ptr-deref in ksmbd_ipc_tree_connect_request()
5f97bac88bfb ksmbd: serialize oplock close with pending break ownership
c2b867861a48 ksmbd: add SMB3 request replay support
50be5e96c381 ksmbd: retain connection for pending notify work
a34f809167a4 ksmbd: defer CHANGE_NOTIFY completion instead of STATUS_NOT_IMPLEMENTED
bbeefd3e9664 ksmbd: add AAPL kAAPL_SERVER_QUERY create context support
8a765fb56ca7 ksmbd: fix durable handle v2 default timeout units (60 -> 60000)
ac5104f4bd9a ksmbd: support access-based directory enumeration
8e2ebc776788 ksmbd: free preauth sessions on connection teardown
8084b5c71967 ksmbd: do not advertise unimplemented CA support
c494fcf8e89e ksmbd: validate ipc response length before dereferencing its fields
8ea83ef0c40e smb: smbdirect: release pending child sockets outside the handler lock
c4de57fd8545 smb: smbdirect: avoid recursive listen.lock during cleanup
959813a3752b smb: smbdirect: destroy QP before mem pools on accept failure
8a953b1a47ff smb: smbdirect: free completion queues with ib_free_cq()
497c221bf6b2 ksmbd: fix slab-out-of-bounds read in ksmbd_alloc_user()
abb5146b2d81 smb: server: fix leak of ksmbd_ipc_login_request_ext() returned buffer
07a9e289ff7e ksmbd: Do not skip lock checks for single-byte ranges
eb287c6e81de bpf: Check pointer type for all atomic RMW paths
9cd837ed9efd hwmon: (emc1403) Drop hysteresis for low limit temperature
9b23a010a1e8 hwmon: (coretemp) Fix core_data leak on CPUs without PTS
072fb5aeec2e apparmor: fix deadlock in complain-mode change_hat
c5a6c30e6ee7 selftests/mm: thuge-gen: fix test_shmget() for PAGE_SIZE check
b389dc35a557 block: mtip32xx: synchronize ioctls with device removal
b9cc6cc74daf ublk: avoid teardown retry loop on xarray allocation failure
6220421b9729 ublk: reject non-power-of-2 zone sizes in SET_PARAMS
b9c16db833e3 blk-iocost: clear delay state when freeing policy data
02f1b90ab33e blk-iolatency: clear delay state when freeing policy data
d3d35dd045a3 null_blk: serialize configfs attribute updates with device setup
c70994c2862b null_blk: serialize configfs attribute stores with the lock
baff300541a0 null_blk: reject per-device queue resize for shared tag set
0a3afab87124 null_blk: free zones array on device power-off
081cf37e8a0e null_blk: free global tag_set on init error path
cab9bf5f68f7 null_blk: register configfs subsystem after creating default devices
234117949da3 null_blk: use DEFINE_MUTEX for the file-scope mutex
c7bc5e7677bc mailbox: riscv-sbi-mpxy: validate RPMI notification lengths
c362e993e3a5 mailbox: pcc: Fix command timeout due to missed interrupt
53281c3a89cf mailbox: rockchip: disable pclk on probe failure and unbind
b3d73e7440e0 mailbox: qcom-cpucp: handle NULL data in send_data callback
e40b3edeaf25 mailbox: qcom-cpucp: fix PREEMPT_RT self-deadlock in IRQ handler
f445e7be37ce perf dso: Replace assert with runtime check in dso__read_symbol()
94d82e7a95b5 perf dso: Guard against cache underflow on short reads in dso_cache__memcpy()
b3339e4bd7a1 perf dso: Use stored fd error instead of stale errno in file_read() and file_size()
2482a7b86a2b perf dso: Guard close() against invalid fd in dso__decompress_kmodule_path()
bd98711ed867 perf dso: Guard against errno==0 when dso__get_filename() returns NULL
a0161780a0b8 sched_ext: Make SCHED_CLASS_EXT select GENERIC_ALLOCATOR
ed30a1892c63 sched_ext/scx_flatcg: Fix cvtime true-up on slice expiry
97bdcf58c0d6 sched_ext: Drop unlocked scx_rq_clock_invalidate() from scx_root_disable()
9e099588ee6a crypto: lskcipher - propagate errors from unaligned crypt
ed9ab15652c2 crypto: hisilicon/sec2 - fix CCM algorithm long packet failure
9eb64cfc9554 selftests/sched_ext: Fix flaky ddsp failure tests on busy systems
69f5815a0910 bpf: Fix pending_pos walk on 32-bit ring position wrap
10158c8aa7bb selftests/bpf: Fix selftest build after filter.h update
c98a1abbda87 ACPI: scan: Use acpi_bus_get_primary_device()
c9d202d3b6c2 ACPI: platform: Use acpi_bus_get_primary_device()
5657859851ab ACPI: bus: Introduce acpi_bus_get_primary_device()
0b9053cd0955 ACPI: scan: fix bus ID cleanup on device_add() failures
6f21453927d0 ring-buffer: Remove trace_buffer::cpus
71dbd143be59 riscv, bpf: Fix missing sign-ext for signed 1-byte and 2-byte kfunc args
e62b867143ef bpf: Fix arm64 KASAN false positive after bpf_throw
a3e6a9bd5ee8 selftests/bpf: Use ping_command() for IPv6 pings in lwt_ip_encap
aa7200c77b8b HID: tmff: Use 64-bit arithmetic for force feedback scaling
351cdfcd097d HID: multitouch: reclassify HTIX5288 to WIN_8_FORCE_MULTI_INPUT_NSMU
72d0b77412ae ASoC: SOF: validate topology volume range before allocation
3c44b8673bab tracing: Have trace_event_update_all() only handle module that is loading
2d92c250815c HID: haptic: don't write an uninitialized value to unhandled usages
7d9b5e86775f ALSA: core: Fix use-after-free in snd_card_do_free()
2b9a0e57bfd3 fs/ntfs3: reject out-of-range evcn in mi_enum_attr()
169383d8914b fs/ntfs3: fix integer overflow in MFT cluster validation
fa4168538494 bpf, arm64: Fix stack-passed arguments for indirect trampolines
9b65b0253ad5 net: page_pool: fix UAF in __page_pool_release_netmem_dma on xa_cmpxchg race
c52f3c102687 scsi: ufs: core: Set task state before io_schedule_timeout()
e2cd23443d36 scsi: mpt3sas: Avoid freeing unallocated PCIe SGL buffers
319324b5fbb2 selftests/bpf: Fix for veristat file/prog filters processing
e4afd90bc7bf Squashfs: check block offset is not negative
1222f7a3183b ocfs2: fix circular locking dependency in ocfs2_init_acl()
418e0ae42fa7 ocfs2: validate DIO orphan slot during inode read
3d7c4b7ce7b4 ocfs2: validate orphan slot during inode read
b262056695e8 bpftool: Fix double close in map dump
97bc6e3f5f9a x86/pkeys: Fix pkey_alloc() return value when pkeys are not supported
404b2a460566 selftests/cgroup: Preserve CPU hotplug write errors
2c23fc91789d nvmet: fix max_qid race between configfs and controller allocation
282a3ef9e4b6 ALSA: seq: midi: Serialize input teardown with event_input
67461b9113e7 ALSA: seq: midi: Optimize event_input locking with RCU
63730818d361 clocksource/drivers/armada: Unwind timer clock on init failure
7eb5764d25c4 clocksource/drivers/samsung_pwm: Switch to raw_spinlock_t type
e4764fa09a2e clocksource/drivers/clps711x: Do not unmap clocksource MMIO
54e1259b75d6 s390/debug: Fix deadlock during unregister
e9ba3132a9ed xenbus: Unregister reboot notifier on init failure
811fdac2d1bd sched/isolation: Defer freeing of cpumask memblock memory to initcall
b33197aef234 selftests/namespaces: Fix racy pipe handshake in timens and pidns_separate
65c3939656fd bpf: Fix UAF in bpf_trampoline_multi_attach_free on update failure
7edb0248f4ff selftests: drv-net: so_txtime: fix qdisc replace with handle
6dd217e218d4 power: supply: bq27xxx: bq27z561: fix invalid AverageEnergy address
17d2a9ef48d0 power: supply: bq27xxx: bq28z610: fix invalid AverageEnergy address
fd7aa80ecf69 power: supply: bq27xxx: bq27520g4: fix REG_TTES address
4492288889b9 power: supply: bd99954: Drop bad register fields
c18d09a1012b power: supply: bd71828: Do not hide errors
513cdd61debd power: supply: bd71828: Drop duplicate power-supply property
80091fbba3e9 power: supply: bd71828: Fix current direction
367b8a8860e7 power: supply: bd71815: Fix temperature reading
101cd6f72922 objtool/klp: Fix .kcfi_traps special section extraction
4e8a940c3153 objtool/klp: Fix vmlinux .klp.symid link error for .exitcall.exit symbols
01923107661a PCI/ASPM: Disable/restore ASPM on every function for multi-function devices
bcbcbd0370e6 spi: img-spfi: don't disable runtime PM on DMA deferred probe
6b6007e96d62 ASoC: spacemit: advertise only DMA-backed DAI streams
0a2129953aea selftests/bpf: vmtest.sh: Preserve command quoting when running in the VM
817ad6d29cbc selftests: harness: Mark test fixture objects __maybe_unused
44b702fceb4c bpf, s390: Clear fetch destination on faulting arena atomic
84fac27c0ca3 bpf, arm64: Clear fetch destination on faulting arena atomic
5eb3ff6a3bf2 bpf, x86: Clear fetch destination on faulting arena atomic
6465c2c0f1e3 bpf: Derive the atomic load register in one place
840f72750815 bpf, riscv: Clear fetch destination on faulting arena atomic
82b97be6a478 kunit: tool: fix _list_tests filtering wrong variable when list has TAP prefix
7e2ee531560e drm/amd/pm: silence uninitialized variable warnings
e87e015f44f1 perf build: Remove leftover feature tests for removed cxx and clang support
20ed93f1fd57 backlight: ktd2801: Fix unmet dependency on GPIOLIB
d32a47e7cda7 backlight: aw99706: Validate all DT property values consistently
43ba7cdff6dd mfd: cs42l43: Fix regmap defaults ordering
829539c4a650 arm64/efi: Avoid voluntary preemption with efi_mm installed
fdbdc5c016a8 iomap: iomap_bio_read_folio_range_sync is missing a call to bio_uninit
778f6a807051 super: fix dying superblock warning messages
ef34de895dfd PCI/ASPM: Use pcie_capability_clear_and_set_word() for ASPM disable/restore
f024208da64d objtool/klp: Fix relocations for EXPORT_SYMBOL_FOR_MODULES() symbols
d4ae0baea6d6 objtool/klp: Don't match local symbols against exports
a8efbd6bd582 objtool/klp: Fix cross-module klp relocation section naming
6a990e74d4e8 firewire: core: fix memory leak in error path of build_tree()
727013e31478 firewire: core: validate parent port count before allocating nodes in build_tree()
3f3980920f02 firewire: core: consolidate port counting in build_tree()
75c00ce4049c firewire: core: add KUnit tests for failure of tree building
a41a7dd31c4a firewire: core: add KUnit tests for successful tree building
0e86ed95eda9 firewire: core: add KUnit test skeleton for node tree
6d9c3ae59c7f UBI: fix two issues in the ubi.mtd MODULE_PARM_DESC
4e0ce77df7d9 ASoC: xilinx: formatter_pcm: fix stream_data leak on open error
851c5e9a829d mtd: ubi: Release device reference on busy detach
ec3fffb06a3f objtool/klp: Ignore replacement offset of empty x86 alternatives
ab0648f06367 objtool/klp: Fix size of empty special section entries
ba20c5bb872c objtool/klp: Fix vmlinux .klp.symid link error for .no_trim_symbol symbols
87b3da4acb86 ubi: Fix rollback for explicit UBI device numbers
6424b9cde9ed bpf: Compare iterator types during state pruning
07697272bfac UBI: fastmap: Pass to_be_tortured when reusing old fastmap PEBs
41033f8d870b UBI: Preserve torture flag when rescheduling failed erasures
4302bc71ace1 ASoC: fsl-asoc-card: defer probe when the CPU DAI device is not ready
c1829705803a ASoC: pxa: Use devm_clk_get_optional() for extclk clock
5eab61a483f4 idpf: add missing cpu_to_le32 in idpf_tx_splitq_build_flow_desc
57715e257c8a ice: acquire NVM lock around each flash read
dfa94b403e69 ice: clear the default forwarding VSI rule when releasing a VSI
dc0234c8c573 ice: fall back to SBQ when LL PHY timer interface times out
64a2bd4cfc16 RDMA/cma: Fix WARNING in res_to_rt
ea41b5630fa3 RDMA/cxgb4: Free debugfs on registration failure
068122750ee8 dmaengine: qcom-bam-dma: fix autosuspend cleanup during removal
99c91dca54a6 phy: rockchip: samsung-hdptx: Handle uncommitted PHY config changes
c4506784a95c phy: rockchip: samsung-hdptx: Fix rate recalculation for 3.2GHz FRL
0a111684ed66 phy: rockchip: samsung-hdptx: Guard against clk rate integer underflow
877657310a66 phy: rockchip: samsung-hdptx: Prevent divide-by-zero when computing clk rate
b6823d7f95ab phy: rockchip: samsung-hdptx: Fix rate recalculation for high bpc
6e6e471eef1d ALSA: seq: Don't leak the extension cell pointer in the bounce payload
7d44b897bff8 nfc: nci: fix use of uninitialized memory in CORE_INIT_RSP parsing
3ea115646abf nfc: digital: Do not dump a NULL response in command completion
3e7a093c177f nfc: pn533: hold a reference to the request skb during send_frame
eeb16fb24cfe nfc: llcp: bound SNL TLV parsing to the skb and add length checks
ee08414d78b8 nfc: nci: fix double completion race in nci_data_exchange_complete
d1b73962675c nfc: llcp: read llcp_sock->local under the socket lock in getsockopt
bd6f1277b62b nfc: llcp: avoid userspace overflow on invalid optlen
6d8926debeb9 hrtimer: Account nr_retries on recovered interrupt retries
ece3da898ef5 nvme: reject passthrough of driver-managed Set Features
b116e9dae433 nvme/ioctl: check SUBMIT_IO with nvme_cmd_allowed()
0b4cf43f9ca7 nvmet: fix NULL pointer dereference in nvmet_execute_identify_ns_zns()
ad75556bde3c nvme-apple: Drop the PRP null check chicken bit
e01921930981 nvme-apple: Require page aligned buffers on the admin queue
9650fd559f97 nvme: Add a quirk for page aligned admin queue buffers
03fd8591e90a nvme-apple: Never set the opcode in the NVMMU TCB
3bda132d063e nvme-apple: Don't set a DMA direction for commands without a data transfer
c11685ee4eed nvme-apple: Destroy the admin queue on removal
7b81e4d2230e nvmet: fix heap out-of-bounds read in nvmet_auth_negotiate()
f6374ec9a344 s390/irqflags: Add out-of-line definitions of arch_local_irq_*() for KMSAN
7954540e49ff arm64: bti: Disable in-kernel BTI with recent versions of Clang
78ac8fc22b12 ASoC: qcom: q6apm: keep the graph start count in sync with the DSP
b5fb0376c773 spi: sprd-adi: Fix probe succeeding without registering the controller
49a61174186b arm64: entry: Avoid unnecessary local_irq_disable() on kernel exit
fdda85094b2f phy: qcom: qmp-combo: Drop qmp_v4_calibrate_dp_phy
8dda7211be1e phy: qcom: qmp-combo: Correct pre-emphasis table for QMP v4 DP PHYs
8ecad7d61482 phy: renesas: rcar-gen3-usb2: Ignore missing VBUS regulator
2041b75c123f rust: uapi: replace direct asm-generic/ioctl.h include with linux/ioctl.h
ddddf034ac0e iommu/amd: Fix incorrect device ID in invalid PASID error message
7da0bdf0610f apparmor: fix unconfined user namespace restriction forced stack
4b835e45a4bb powerpc/configs: enable CONFIG_RAS to fix EDAC support
db7c3ced1fe8 selftests: drv-net: so_txtime: only send test traffic to sch_etf
ab7891cab3f1 selftests: drv-net: Test queue stall upon reconfig
8dd136173106 PCI: ultrarisc: Get and enable DP1000 PCIe controller clocks
e1dc0af719a2 amt: Don't support cross-netns setup.
98518a8312dc pinctrl: rockchip: Decode drive strength in the get function
608816b886a2 selftests/sched_ext: Check skeleton open failure in exit test
972d037f0046 selftests/cgroup: Avoid awk -e in cpuset tests
3f3811bacd93 cgroup/cpuset: Use WRITE_ONCE() for shared prs_err updates
79fb405966ed nvme-pci: release descriptor pools on probe failure
cead174d4242 nvmet: propagate percpu_ref_init() failure in nvmet_ns_enable()
480f6b92c914 nvmet: fix Reservation Register Replace for unregistered host with IEKEY
92533e49fe3c NFS: Return a delegation the client fails to record
d8f0b8375380 sunrpc: xprtsock: annotate shared socket callbacks with READ_ONCE/WRITE_ONCE
eb476289c12c SUNRPC: check rpc_sockaddr2uaddr() return value in rpcb_register_inet4/6
3039101d61bb hwmon: (pmbus/ltc4283) Add missing MODULE_DEVICE_TABLE for OF match table
bf3d173e1c41 hwmon: (cros_ec) Synchronize EC access from the thermal device callbacks
2a1828d693e6 hwmon: (cros_ec) Store the hwmon device in cros_ec_hwmon_priv
a09834704966 hwmon: (cros_ec) Register the thermal devices after the hwmon ones
08d4a5f731b3 arm64: Disable KCSAN instrumentation in delay.o
16fb33a8a323 xdrgen: Fix opaque and string encoders for unbounded members
621d4bba8f4c xdrgen: Add XDR width macros for short integer types
5585954164f5 xdrgen: Do not declare union XDR functions in the definitions header
af0f6fb2a2f9 xdrgen: Emit a blank line ahead of enum declarations
7ea29e2bffff lockd: Regenerate NLMv4 XDR code
0a7908d48ea0 nfsd: add protocol support for CB_NOTIFY
7458727fd7cb NFSD: Release the export reference when reaping open stateids
af3fe52fd108 netfilter: nft_ct: move custom expectation support to helper
1e694ac22ef2 netfilter: nft_ct: support expectation creation for natted flows
026f7f91de39 m68k: Fix backtraces for non-running tasks
74669cc3483e media: amd: isp4: fix self-deadlock in isp4sd_pwron_and_init() error path
a1f8750668e5 media: amd: isp4: release partial allocations in isp4if_alloc_fw_gpumem()
8cd13087eb57 hwrng: imx-rngc - Disable clock on registration failure
7c7d3e51c290 crypto: qat - remove dead ADF_HEX code
2a3c526c7554 crypto: qat - use 2-arg strscpy where destination size is known
5baddf100b3b iommu/vt-d: Flush context cache with correct SID when tearing down aliases
db5daf25f754 iommu/vt-d: Tear down scalable-mode context on probe failure
143cd37ce765 iommu/vt-d: Fix iopf_refcount leak on RID domain replacement
6b822d18c33a iommu/vt-d: Clear Present bit before tearing down copied context entry
a45f0b5eaac6 iommu/vt-d: Fix UCTP context table slot when copying root entries
2af1e99ec14d iommu/dma: Restore locking around msi_page_list
956265326139 fbdev: clps711x-fb: Remove unreachable unregister_framebuffer() call
7bf36dc23bcf fbdev: kyro: Validate overlay viewport coordinates
4b2c707bf5b1 fbdev: tdfxfb: fix PCI enable cleanup with pcim_enable_device()
ef79a405f839 apparmor: fix integer overflow in verify_tags() bounds check
b518c2468d91 perf synthetic-events: Fix divide by zero in perf_event__synthesize_threads
8340726a60aa perf python: Fix memory leak in pyrf__metrics_cb
31245887b0e0 perf python: Fix count_values memory leak in pyrf_evsel__read
9cd2a9a5fd74 perf python: Validate attribute setters in pyrf_evsel
a05972af8e9a perf python: Validate CPU and thread maps in pyrf_evsel__open
1f8f4e482af3 perf python: Handle Py_None for thread and cpu maps
3d34725649fa perf python: Check counts_values size in set_values
41579b30c2fd perf test: Fix skiplist leak in cmd_test
7e0cf79cd2f9 perf synthetic-events: Fix uninitialized pthread_join
cf34a68e9ada perf python: Fix memory leak in pyrf_evlist__get_pollfd
fbf8dc5170da perf tools: Fix sb_evlist leaks in top and record
b0756b5be729 perf stat: Fix evsel_list leak in cmd_stat
acf06e025eea perf script: Fix metric_evlist leak in script_find_metrics
a52414ecdbe6 ARM: dts: helios4: add SATA regulator supplies
e16bf9870618 ARM: dts: helios4: add vcc-supply to GPIO expander
8d976901462c ARM: dts: helios4: add vcc-supply to EEPROM
393d33d5d54c arm64: dts: turris-mox: fix usb3 phys
d1409d203251 i3c: renesas: Don't register devices when ENTDAA times out
869ecb131292 i3c: renesas: Follow a unified pattern for transfer and command initialization
739eb8ac160d i3c: renesas: Return immediately if there is no transfer
051f2da26ce3 bpf: Fix mmap_lock leak in irq_work path
3f45d8358e01 riscv: cpufeature: Clarify ISA spec version for canonical order
dc8b33b819cb net/sched: cls_api: fix teardown of an adopted proto on insert-race loss
0ffd3e983069 iio: light: gp2ap002: re-enable irq if runtime suspend fails
470edb012b1d iio: light: gp2ap002: Fix unbalanced runtime PM on repeated event writes
38c077c81590 iio: light: opt4060: Fix pointer type passed to div_u64_rem()
12feca126831 bpf, cgroup: Fix storage null-ptr-deref after replacing prog
bf8f63553123 pinctrl: fix PINCTRL_GENERIC_MUX not always being selectable
63562cfaea8a Bluetooth: MSFT: validate evt_prefix_len against the response length
22624d43fd73 Bluetooth: btmtksdio: fix usage_count leak when autosuspend_delay is negative
481533b03985 Bluetooth: MGMT: free the HCI command when it is cancelled
fa46d428c014 Bluetooth: MGMT: free the mesh send cancel command when it is cancelled
bb5ca1cc7744 Bluetooth: hci_sync: free the advertising instance on the failure and cancel paths
4d7b1c834d27 Bluetooth: hci_conn: fix the SCO setup context lifetime
f2b586d65f90 Bluetooth: btintel: Fix diagnostics event detection
b495a3a9b33b Bluetooth: L2CAP: use proto_lock for l2cap_data to fix l2cap_disconn_ind
84ea9c998748 Bluetooth: virtio_bt: avoid OOB read of build info string
1499d5e7e2cf pinctrl: airoha: fix edge-triggered interrupts handling
afd4d7aabb01 pinctrl: airoha: fix IRQ mask/unmask code
2c968c11592b pinctrl: airoha: add missed IRQ resource helpers
eb2587a25278 pinctrl: airoha: fix getting gpiochip/pinctrl pointers in the IRQ handling code
f385f3d3248f pinctrl: airoha: add missed get_direction() function for gpio_chip
10e890b305e6 pinctrl: airoha: an7583: fix spi group pins
458b07ec4281 pinctrl: airoha: an7583: fix muxing of non-gpio default pins
3fe11ae08e8c pinctrl: airoha: an7581: fix mux/conf of pcie_reset pins
ce7710c1151d pinctrl: airoha: an7583: fix I2C0_SDA_PD register bit order
229b61b5b209 pinctrl: airoha: an7581: fix pinconf of i2c_scl/i2c_sda pins
dec9a98b444f pinctrl: airoha: fix mdio bitfield names
64c6f46708f1 perf sched: Handle missing trace samples in pipe mode
01bcff124136 perf sched: Suppress latency table output when trace samples are missing
c4c136555ff9 btrfs: qgroup: fix a wrong length calculation in qgroup_free_reserved_data()
91ed75a0a0cb btrfs: use aligned range for locking in extent_fiemap()
98e3747587f9 btrfs: zoned: don't clobber the extent buffer when zeroing it out
e2de2989adb3 btrfs: zoned: flush active metadata block group at btree_writepages() start
81241f734f0f btrfs: retry verity reads for not-uptodate Merkle folios
e6045f6e8d86 btrfs: replace writeback inhibition xarray with a fixed inline buffer
d5602f96ff1e btrfs: check if root is readonly when setting posix acl
2073f3d97b0c btrfs: make sure EXTENT_BUFFER_READING is cleared under refs_lock
aaac9b352f7f btrfs: always wait for ordered extents to avoid OE races
ac916391e1c7 btrfs: defrag: fix deadlock between defrag and delalloc space reservation
8249dfe46337 btrfs: zoned: don't force read-only on transient -EAGAIN from reloc merge
6da989018eee scsi: sd: Fix sd_done() sense handling condition
5d7d1b8b525e scsi: sd: Fix special_vec mempool leak when scsi_alloc_sgtables() fails
748a14a0d41c scsi: sd: Fix error handling in sd_probe() after large pool creation failure
56e547a31ace perf trace-event: Fix integer truncation in do_read() and skip()
077c42c5c04f Bluetooth: btusb: QCA: Fix populating devcoredump fields on unenabled devices
42deed40dd99 Bluetooth: btusb: Record matched usb_device_id into btusb_data
dce459875be5 Bluetooth: btusb: Fix BD_ADDR byte order in btusb_set_bdaddr_wcn6855()
19f65ea34a53 Bluetooth: btqca: Fix qca_set_bdaddr() waiting for wrong HCI event
35d534234e24 sched/fair: Check CPU capacity before comparing group types during load balance
1d3880877efe sched/fair: Also gate overloaded status update for SD_ASYM_CPUCAPACITY
304844b5545f perf/x86/intel/pt: Fix stop/start with no update
55a5bc0de3b4 perf/x86/intel/pt: Use bitwise access for PERF_HES_STOPPED
b7402b47cb08 perf/x86/intel/pt: Factor out pt_config_enable()
f0f512b8d9ee ACPI: video: Release PCI device reference after lookup
1b58cfd22ca0 thermal/drivers/spacemit: Validate clamped trip thresholds
ec320af6cc1e ACPI: PCI: Avoid misleading _OSC messages for non-PCIe host bridges without _OSC
0afe0cf203a9 ASoC: tas675x: sort the register default table
d321dc10e4b0 regulator: qcom-rpmh: Fix PMIC5 BOB bypass mode handling
b6fc0825df46 bpf, arm64: Fix exception table metadata for arena load-acquire
76b16abbc5ea bpf, x86: Fix exception table metadata for arena load-acquire
a7dad4c69e5f bpf, riscv: Add and use bpf_atomic_is_load_acq() helper
5f8ade6e9b79 bpf: Reject load-acquire from pointers requiring fault protection
7d199b6a0651 arm_mpam: Disable driver unbind to avoid UAF
a29044c9c835 arm_mpam: Fix a NULL pointer dereference on unbinding after an error interrupt
988e11b69ef9 perf: arm_pmuv3: Zero initialize hw_id branch stack field
7e4f2702bbad coresight: etm4x: missing cscfg_csdev_disable_active_config() in perf enable
275466e3b95b coresight: etm4x: fix leaked trace id
5ac900f73ce1 coresight: etm4x: fix underflow for usage of (nrseqstate - 1)
8a0c540e0901 coresight: etm4x: fix wrong check of etm4x_sspcicrn_present()
b6ec4bf1ec44 md/raid1: don't set array_frozen in raid1_takeover()
bb7f92d58fca md/md-llbitmap: stop daemon timer rearm on destroy
2f0722435ce3 md/md-llbitmap: prevent create failure bitmap UAF
35b27002ae9c md: avoid stale clone I/O accounting timestamps
4224dccd325a md: wait for behind writes before destroying bitmap
ccbdc483eb04 md/raid5: round bitmap stripes with sector division
0fef3967ccb8 phy: qcom: qmp-pcie: Add pcs_lane1 offset to V5 offsets
03455404fb6c phy: qcom: qmp-usb: Fix possible NULL-deref on early runtime suspend
b85bbec72fa8 phy: qcom: snps-femto-v2: Fix possible NULL-deref on early runtime suspend
0f9789d1b63e phy: qcom: qmp-usb-legacy: Fix possible NULL-deref on early runtime suspend
328cf94be911 phy: qcom: sgmii-eth: vote for both voltage rails with correct current loads
fae5aba95368 soc: fsl: qe: check platform_driver_register() in qe_ic_of_init()
a22464c5df58 ext4: fix transaction overflow during writeback
c391af5743a4 ext4: teach ext4_meta_trans_blocks() about number of allocated extents
53f2e4d2b896 selftests/mm: unpoison pages in memory-failure teardown
dc2bd517ac0b hugetlbfs: release subpool on fill_super failure
7bfae60ab7a5 pinctrl: rockchip: Restrict the RV1103B 2-bit drive type to bank 2
ab698d7710b4 pinctrl: rockchip: Reset the pin count when recalculating SoC data
1b10015957a6 pinctrl: tegra264: fix DAP2 DIN/DOUT pin assignment
fb4824880b0d firmware_loader: do not queue completed sysfs fallback requests
0e4b5f8cad67 scsi: qla2xxx: Remove redundant VPD flash read in sysfs read path
39de65117fd9 PCI: cadence: Fix host/endpoint dependencies for cadence-plat driver
e399e9d7e291 drm/amdgpu/gfx6: Use PFP on the compute queues too
57a9b737e793 drm/amdgpu/gfx6: Fixup emitting SWITCH_BUFFER packets
36c99db9f364 perf trace-event: Fix buffer overflow in read_string()
ece5ad121b2a phy: rockchip: phy-rockchip-inno-csidphy: fix rk1808 hsfreq table
5acdc4d5b58b phy: sunplus: fix error handling in sp_uphy_init()
5374f3d53376 phy: renesas: rcar-gen2: Fix double of_node_put on phy creation failure
935f6e837a83 phy: renesas: phy-rcar-gen3-usb2: Fix devm action registration for disabled VBUS regulator
3f2828c4788a arm64: dts: ti: k3-am64: Fix MDIO clock reference for ICSSG0 node
33145914688e ALSA: hda: cix-ipbloq: Avoid build with 32bit archs
5826db2ddddb ext4: fix spurious message about orphan cleanup on RO fs
0fa116a17b69 drm/amd/display: Resize MST HDCP per-connector arrays to 32
6e26232294db drm/amdgpu/gfx6: Fixup emit_cntxcntl()
61b45f9be60c leds: gpio: Clear error pointers for skipped LEDs
ad50c2c550ff mfd: macsmc: Fix key count endianness annotation
ad32c823abfb drm/amdgpu: read TRUNCATE_COORD_MODE on gfx12
7b5f4362c41a drm/gfx12: Program DB_RING_CONTROL
e54c7a2bce63 mfd: iqs62x: Reject zero-length firmware records
f81bcb7e83be tools: Ensure tools copy of linux/filter.h exports the UAPI
15327f1eb9cc mfd: rave-sp: validate received frame payload lengths
77053624d033 arm64: hibernate: Restore DAIF state on error
d736ace2c491 arm64: hibernate: mask DAIF before restoring hibernated kernel
be919eed5e52 wifi: mac80211: skip default WMM setup for AP_VLAN links
8351d6634423 RDMA/erdma: restrict the driver to little-endian systems
cd2396fc9684 module/dups: Fix use-after-free in kmod_dup_req lifetime handling
2bdd4d5d2cae module/dups: Inform duplicate requests about the result directly
5ede61dc58fd module: use strscpy() to copy module names in stats and dup tracking
561651d6a155 RDMA/siw: Fix use-after-free in siw_accept()
ad4492dcaf90 IB/isert: post the full-feature receive buffers after session registration
4397ea31e3b0 IB/isert: delay the final Login Response until the session is registered
545461671497 soundwire: cadence_master: add BRA_NumBytes[8] support
55516986a3d8 cpufreq: imx6q: fix out-of-bounds write when probed more than once
0f77d1a0a250 cpufreq: imx6q: fix devres accumulation across driver rebind
35a125c9abbf rust: cpufreq: Fix temporary write in Registration::bios_limit_callback
04ac4e270e3d rust: cpufreq: Add CPUFREQ_TABLE_END as last table entry in TableBuilder::to_table
eadc95c99cbe drm/sun4i: hdmi-phy: Fix H6 8-bit MPLL config at 594 MHz
e71206a8a1d9 drm/sun4i: Drop node references while building component list
d9fb87926522 drm/sun4i: dw-hdmi: Drop TCON TOP port reference
68e0643bb227 drm/sun4i: tcon: Drop remote endpoint reference
c0d3219ffd4c drm/sun4i: crtc: Propagate layer initialization error
ef396e92c50e drm/sun4i: hdmi: Don't leak sync polarity bits into packet control
ae08a67bca78 drm/sun4i: tcon: Drop TCON TOP device reference
eb1dc0e2c7ac drm/sun4i: tcon: Set output mux for DSI and LVDS
ac9f274dac95 drm/sun4i: tcon-top: Keep mixer routes distinct
a42daad53d09 drm/sun4i: vi scaler: Restore opaque alpha in video modes
f587b2606d71 drm/sun4i: vi scaler: Fix coefficient selection
4420c243e789 drm/sun4i: Fix V3s YUV scanline size
4dd6b79f7099 perf c2c: Clean up registered formats on c2c_hists__init() and c2c_hists__reinit() failure
86f5cb2d1e61 perf c2c: Fix error masking, OOM, and unchecked caller errors in hpp_list__parse()
510b305f35aa clk: rockchip: rk3576: fix source muxes for SPI0..SPI4
976f1be72740 bpf: Fix sleepable check for tracing/lsm prog
f523359c4789 bpf: Clear buf on error in __bpf_get_task_stack
34cbcb333f30 bpf: Remove trace_in argument from __bpf_get_stack
27ed6cf4c0ac bpf: Factor callchain_finalize function from __bpf_get_stack
b61aacc66a1f bpf: Factor callchain_store function from __bpf_get_stack
b5a2907bdece ocfs2: o2hb: quiesce negotiate handlers and timeout work
073f51e39bed ocfs2: synchronize heartbeat callbacks with o2net teardown
2e689bb5643c perf libbfd: Fix memory leaks and NULL fclose in BPF disassembly
61fab7859905 perf bpf: Add PROG_TAGS to required arrays in __bpf_event__print_bpf_prog_info()
5161e7ef5b38 perf header: Use write lock when translating BPF prog info pointers
731edc4d0d01 perf libbfd: Validate BPF prog info arrays before pointer cast
8040663c1dfd vfio/pci: Avoid mapping BARs for devices with non-mappable BARs
720408d98d9f ARM: 9485/1: mm: acquire mmap write lock around show_pte() for user faults
8d7cbc6df963 ARM: 9484/1: enable interrupts when unhandled user faults are triggered
8de56782d6e5 ARM: 9483/1: select HAVE_POSIX_CPU_TIMERS_TASK_WORK
da64b150e4b7 ARM: 9481/2: breakpoint: CFI breakpoints only on demand
fa1b33fdab3e RDMA/srp: fix heap information leak on a truncated SRP_CRED_REQ
c92686867638 RDMA/erdma: Hold QP references for AE and CM processing
4545f355654d RDMA/erdma: Hold CQ references when processing EQ events
795f70fe748b kbuild: fix modules.builtin(.modinfo) targets in the top-level Makefile
3c5adf387155 modpost: prevent leak when early return no suffix .o in read_symbols()
f3b6624d9421 scripts/tags.sh: Prevent binary files appearing in cscope.files
1b18270e3d88 intel_idle: Avoid using deep idle states during initialization
36fb592af353 xen/xenbus: check otherend_id only after it has been initialized
4fa8915f40f7 thermal: hwmon: Remove hwmon class device along with its parent
422a41604117 bpf: Check load-acquire src ptr type before the load
8fd17b394719 gpu: nova-core: correct FRTS vidmem offset calculation
018169883d48 gpu: nova-core: clean up FSP FRTS comments
b666585dfaf4 gpu: nova-core: factor out common FSP message header
c93fc0f7ba18 thunderbolt: stream: Fix possible short reads/writes
de9eac1099f1 thunderbolt: stream: Restore consumer if copying from iter fails
ede92f86b6c4 arm64: dts: qcom: talos-evk: Fix swapped USB QMP PHY vdda-phy/vdda-pll supplies
7b0806902969 arm64: dts: qcom: sa8155p-adp: Fix swapped USB and UFS QMP PHY vdda-phy/vdda-pll supplies
458864b9ef1c arm64: dts: qcom: eliza-mtp: Fix swapped USB QMP PHY vdda-phy/vdda-pll supplies
c12cf2252dde arm64: dts: qcom: lemans: Fix swapped USB QMP PHY vdda-phy/vdda-pll supplies
4a65a0ffc748 arm64: dts: qcom: glymur: Fix swapped USB QMP PHY vdda-phy/vdda-pll supplies
74d6524b3463 arm64: dts: qcom: kaanapali: Fix swapped USB QMP PHY vdda-phy/vdda-pll supplies
eb262afc7231 arm64: dts: qcom: sar2130p: Fix swapped USB QMP PHY vdda-phy/vdda-pll supplies
407b05cf21ea arm64: dts: qcom: sm8750: Fix swapped USB QMP PHY vdda-phy/vdda-pll supplies
83db0e7a95f2 arm64: dts: qcom: sm8650: Fix swapped USB QMP PHY vdda-phy/vdda-pll supplies
bfd0c3600b6e arm64: dts: qcom: purwa: Fix swapped USB QMP PHY vdda-phy/vdda-pll supplies
069f1a1523d0 arm64: dts: qcom: hamoa: Fix swapped USB QMP PHY vdda-phy/vdda-pll supplies
8aad733a4bb8 arm64: dts: qcom: sc8180x: Fix swapped USB QMP PHY vdda-phy/vdda-pll supplies
88ac1561a1ef arm64: dts: qcom: sc7280: Fix swapped USB QMP PHY vdda-phy/vdda-pll supplies
a9783bec0db4 arm64: dts: qcom: sc7180: Fix swapped USB QMP PHY vdda-phy/vdda-pll supplies
4cd993d91c8b arm64: dts: qcom: sm7225-fairphone-fp4: Fix swapped USB QMP PHY vdda-phy/vdda-pll supplies
dfc8d77f8078 arm64: dts: qcom: qcs6490: Fix swapped USB QMP PHY vdda-phy/vdda-pll supplies
221300448bd1 arm64: dts: qcom: qcm6490: Fix swapped USB QMP PHY vdda-phy/vdda-pll supplies
93c1c78f9dc2 arm64: dts: qcom: qcs8550-aim300: Fix swapped USB QMP PHY vdda-phy/vdda-pll supplies
85f59f34757b arm64: dts: qcom: sm8550: Fix swapped USB QMP PHY vdda-phy/vdda-pll supplies
64e223194230 arm64: dts: qcom: sm8450: Fix swapped USB QMP PHY vdda-phy/vdda-pll supplies
d843ed6b412a arm64: dts: qcom: sm8350: Fix swapped USB QMP PHY vdda-phy/vdda-pll supplies
d143fb29b0ca arm64: dts: qcom: sm8250: Fix swapped USB QMP PHY vdda-phy/vdda-pll supplies
9063b2373ac8 arm64: dts: qcom: sm8150: Fix swapped USB QMP PHY vdda-phy/vdda-pll supplies
1b3154a198b7 arm64: dts: qcom: sdm850: Fix swapped USB QMP PHY vdda-phy/vdda-pll supplies
6071a3b06ace arm64: dts: qcom: sdm845: Fix swapped USB QMP PHY vdda-phy/vdda-pll supplies
3db02fe87c95 arm64: dts: qcom: sa8540p: Fix swapped USB QMP PHY vdda-phy/vdda-pll supplies
15ad83a26241 arm64: dts: qcom: sc8280xp-blackrock: Fix swapped USB QMP PHY vdda-phy/vdda-pll supplies
8d951c93e4b1 selftests/mm: fix ternary operator precedence in ksm_tests
0df56ab44ecf selftests/mm: fix ksm NUMA merge test for systems with memoryless NUMA nodes
cd3c3baaa256 selftests/mm: handle EINVAL when configuring gigantic hugepages
229ac3773516 selftests/mm: fix memleak in migration benchmark
2c2218560b6e bpf, cgroup: Fix invalid storage access after __cgroup_bpf_attach failed
6282d47b24b0 remoteproc: fix OOB read via signed offset in rsc_table_for_each_entry()
cd07aef510ac PCI/sysfs: Add lockdown checks to legacy I/O and memory handlers
2fae17fd4fe3 PCI/sysfs: Return -EINVAL for unsupported I/O BAR mmap
fdfb3a1f5c06 ALSA: hda/realtek: ALC269 fixup for Yoga/Legion Mic noise
8d8d3d4a6483 arm64: dts: qcom: agatti: Add missing CX power domain to DISPCC
b681c740e6d6 block: handle nogenerate/noverify properly in fs-integrity
7ccd6b6448cd block: lift BIP_CHECK_FLAGS to include/linux/bio-integrity.h
70af551b7fcd block: remove bip_should_check
6e959e7691c6 ublk: clear auto buf reg before updating io->buf in batch commit
30810bdf273b drm/omap: dsi: Do not copy isr table
04e4d18e7fea riscv: dts: sophgo: cv180x: Allow the DMA multiplexer to set channel number for DMA controller
7ae71629357d bpf: Invalidate RCU pointers after final spin unlock
7565e4450763 fat: release buffer head after rebuilding parent
530a9d5ef831 rapidio: clear mport->net when rio_add_net() fails
0e7459abff46 ocfs2: do not use make_bad_inode() in ocfs2_read_inode_block_full()
9f4129b6905b ocfs2: validate external xattr entries when reading metadata
3fd45b24879f ocfs2: validate inline xattrs during inode block validation
67201231eecc pps-gpio: remove dead capture_clear code
77a6bdb97e02 pps: pps-gpio: split IRQ handler into hardirq timestamper + threaded handler
a31e768d2e4a pps: don't try to wait for negative timeouts in PPS_FETCH
13d0dfd5d5f3 lib/string: fix memchr_inv() for large ranges
70d7bb7a0be0 ocfs2/cluster: keep heartbeat local node stable
653d22269a8b ublk: validate auto buf reg before taking uring_cmd
af9a009ed496 ublk: check for ublk_unmap_io() returning 0
5ac6019cb78e ublk: check import_ubuf() return value
b783da6e32c2 block/kyber-iosched: flush per-cpu latency buckets over possible CPUs
7a578afab9e9 block/blk-iocost: collect per-cpu latency stats over possible CPUs
29db15ba4493 block/blk-iolatency: account per-cpu latency stats over possible CPUs
834fbb747ced block/blk-stat: drain per-cpu callback stats over possible CPUs
d8c872901e64 blk-cgroup: skip dying blkg in blkcg_activate_policy()
2cf9f50a38c1 blk-cgroup: fix race between policy activation and blkg destruction
f97022fefe6e phonet: pep: do not write beyond optlen in getsockopt
c20cf591d923 net: stmmac: Skip PHY attach if custom PCS is in use
3ad0fd538503 iio: light: tsl2583: return zero in write_raw() on success
0649178f3ced iio: light: isl29028: return zero in write_raw() on success
fe73809bc314 iio: light: tsl2772: fix ALS calibscale readback
b75ee915ab99 perf arm-spe: Reject zero nr_cpu in metadata to prevent division by zero
e25897916844 perf intel-bts: Fix off-by-one in auxtrace_info minimum size check
bbf8a944b007 perf intel-pt: Fix off-by-one in auxtrace_info minimum size check
68b37d885e88 perf auxtrace: Fix queue grow overflow and old array leak
d18a40a72b50 perf thread-stack: Fix heap buffer overflow on branch stack wrap copy
ef81d735d579 HID: lg4ff: validate report length before fixed offsets
d10a68ac8768 HID: i2c-hid: goodix: Disable VDD on VDDIO enable failure
b5fc0267ed84 HID: sony: add missing __packed to struct with static_assert()
93c5cc35bcd9 HID: steam: Reject short reads
dc766ca718ab HID: steam: Improve logging and other cleanup
fdc4ef7a4bfe HID: steam: Add support for sensor events on the Steam Controller (2015)
5181f83da922 HID: steam: Rename some constants that got renamed upstream
de102444a538 HID: steam: Refactor and clean up report parsing
7b5ae8d815f7 HID: i2c-hid: Fix "(null)" output when reading report descriptor fails
b85d1000eb88 HID: synchronize input before cleaning up a failed probe
4eff0ad8128b HID: i2c-hid: Refactor _DSM helper and add i2c-hid-acpi-prp0001 driver
13378c9ac0a1 HID: logitech-hidpp: Fix FF device cleanup on init failure
5c288cc441a2 HID: asus: fix a off-by-one in mcu_parse_version_string() validation
744b3f930c11 HID: asus: refactor the two workqueues and init sequence
b712b4135ce4 PCI: dwc: ep: Fix unmap potentially unmapping the wrong iATU
5aed69e20fd3 platform: arm64: qcom-hamoa-ec: reject incomplete responses
914704c7b318 PCI: dwc: ep: Flush cached MSI write before unmapping the iATU
79588f2c7549 misc: pci_endpoint_test: Check SUCCESS bit for doorbell status
6228722c2730 dm-integrity: replace forgeable discard filler with a keyed sector marker
5c5a795bf624 tty: clear cdev pointer after cdev_add() failure
3dbf85ef40b6 tty: skip cdev_del() when no cdev is registered
06b376432974 serial: core: clear freed pointers on uart_register_driver() failure
c2aec15f78b2 serial: core: do fallible allocations before the console can be registered
2ad24c1d0b93 serial: amba-pl011: keep console clock enabled for atomic writes
0bcf3335dd3b serial: amba-pl011: unprepare console clock on unregister
10232a59e076 MIPS: ptrace: Fix syscall skipping via PTRACE_SYSCALL
6390b2a352fc soc: fsl: qe: implement get_direction()
77159db9c6f1 soc: fsl: qe: properly scan GPIO nodes at startup
7b0093b638c8 powerpc/irq: Fix missing r2 clobber in PCREL inline assembly
066e5e9962dd powerpc64/bpf: Fix build break for arch_bpf_timed_may_goto
ce3976251120 powerpc64/bpf: Fix build break in bpf_jit_emit_func_call_rel()
19b54740e2e1 powerpc/syscall: Fix syscall skip handling for seccomp and ptrace
de2d453f6f71 powerpc/smp: add NULL guard for cause_ipi in smp_muxed_ipi_message_pass
c554a8d376d5 powerpc/xive: propagate IPI init errors to prevent use-after-free
e4c0451aa615 powerpc/xive: add error return value to xive_smp_probe()
0a2be2ca7ad7 powerpc/xive: make xive IPI allocation NULL-safe
7e4b44abf682 pinctrl: spacemit: validate pins in pinconf callbacks
09f47abc95ee pinctrl: generic: free maps on pinctrl_generic_to_map() failure
9ab072a1469f pinctrl: eswin: Fix Handling of PIN_CONFIG_PERSIST_STATE
91a6f4283099 objtool/klp: Fix symbol resolution for duplicate data symbols
9f08c4074041 objtool/klp: Add .klp.symid for sympos disambiguation
20938e167757 objtool/klp: Fix false module dependencies caused by dead relocs
8844c2efd92c objtool/klp: Normalize Module.symvers paths to module names
ce962f04312f objtool/klp: Fix module name normalization for paths with dots
e82f260a74de firmware: coreboot: Validate table bounds
af8087f16714 bpf: Fix mmap_lock deadlock on arena lock failure
db3439ad11ac wifi: cfg80211: stop PMSR before P2P and NAN teardown
eef374088450 wifi: mac80211: disconnect on CSA to channel 0
f26e1b169045 wifi: brcmfmac: fix P2P action frame handling without device vif
5f00970da7da perf build: Fix a build error on 32-bit x86
cb04dd061d33 wifi: mac80211: skip unused probe response countdown offsets
ef65c02a5a1f wifi: zd1211rw: reject secondary interfaces to prevent conflicts
4e0a67fbe3d9 wifi: nl80211: clean up color-change beacon data on errors
c8ae335c4823 wifi: mac80211: send TWT teardown to peer after setup TX failure
40120891f29d perf/cxlpmu: Fix 64-bit write to 32-bit HDM filter register
6a1e24977e50 iommu/arm-smmu-v3: Convert to use atomic poll timeout
88493d0d4c81 kselftest/arm64: Don't write to P0 in irritator on SME only systems
f433869f2384 arm64: ptrace: Keep 'orig_x0' in-sync with x0 on syscall entry
b568c2097a69 kselftest/arm64: fp-ptrace: Fix checks for inactive SVE and SSVE regsets
b19c3fd8e2ab arm64/fpsimd: ptrace: Fix inactive SVE and SSVE regsets
bd89a1988f44 arm_mpam: Apply T241-MPAM-6 to 63-bit counters
6e61b07c3487 arm64: smp: Fix IPI teardown for GICv5 flow
0bd829443a50 wifi: mt76: mt7996: remove beacon_int_min_gcd from ADHOC interface combinations
045d1bfb72d2 wifi: ath10k: snoc: use memcpy_fromio() for MSA ramdump
c770e7da8ceb wifi: ath12k: fix encrypted EAPOL TX in encap offload mode
aff81505a84d wifi: mt76: mt7996: fix out-of-bounds link array access in mt7996_tx()
c1442c345ca8 wifi: mt76: reject out-of-range link ids in mt76_vif_link()
626dce25666a wifi: mt76: mt7925: Fix EHT Beamformee SS subfields to meet 802.11be minimum
fa496e89e01c wifi: mt76: fix queue assignment for disassoc packets
c2dfb099ca94 wifi: mt76: mt7915: report RX chain signal for all RX paths
42082f42969a wifi: mt76: mt7915: fix chainmask handling for non-dbdc phys on band 1
2c488baccd97 wifi: mt76: mt7996: do not leave state behind after a failed WED attach
d566387df830 wifi: mt76: mt7996: do not attach hif2 WED when the main WED attach failed
865c798933a0 wifi: mt76: mt7996: fix reg addr remap when addr is 0
fb9c7b4c238b wifi: mt76: mt7915: release hif2 reference on probe IRQ failure
648f5f03ff50 wifi: mt76: mt7915: fix ext PHY use-after-free on register error path
29fbc5256c2d wifi: mt76: mt7915: fix double hif2 init on the non-WED path
9e02b1cfb163 wifi: mt76: mt7996: fix MIB TX aggregation counter registers for mt7990
60eb18612d21 wifi: mt76: set MT76_SCANNING when starting a hw scan
fc3762724a36 wifi: mt76: mt7996: clear stale link state on full reset
8826d7a5e2dd wifi: mt76: mt7996: free vif links after clearing wcid entries on full reset
bb507affe9e2 wifi: mt76: mt7996: wake MCU waiters before aborting scan in L1 SER
c667ec75881c wifi: mt76: mt7996: skip key upload when adding an offchannel link
beaa42b87596 wifi: mt76: mt7915: unlink TWT flow if the MCU rejects the agreement
a6d7d7a253c5 bpf, x86: Fix trampoline stack size for 128-bit arguments
d36ac53fc83b bpf: Reject >8 byte return values on return-reading trampoline paths
2b33064072c8 perf machine: Check snprintf truncation for guest kallsyms path
8cd0affed95c perf machine: Free scandir entries in guest kernel map creation
c2d36639d371 perf machine: Reset errno before strtol in guest kernel map creation
2edeb8a9f07b perf machine: Don't abort guest map creation on first inaccessible dir
f320fd080d03 perf machine: Check snprintf truncation in machines__findnew()
e67b5cb76c5b perf machine: Guard against NULL strlist in machines__findnew()
c760be5c9f1b perf machine: Fix NULL parent dereference in fork event processing
bb43829acdf4 perf machine: Fix fd leak on bounds check in maps__set_modules_path_dir()
201636c1cfd3 perf libdw: Fix outer-frame name resolution and spurious "(inlined)" tag
da56e16f4293 perf unwind-libdw: Fix unwinding of multi-threaded processes
cb8f0d60160b ASoC: SDCA: Add missing stub for sdca_fdl_free_state()
29dc2e24f6ad regulator: core: use system_freezable_wq for init complete work
cc6a0133c749 arm64: tegra: Fix CMDQV interrupt type on Tegra264
3a5042886443 ARM: tegra: Fix OF node reference leaks in IRQ init
08331ff6fffa ASoC: tas2783-sdw: drop stale regcache on uninitialized re-attach
bfa756f3b8bf ASoC: codecs: tas2783-sdw: Propagate regcache_sync() errors
047a81714780 wifi: ath11k: fix leak in ath11k_service_ready_ext_event()
00008e6f544c drm/msm/dsi: Drop dev_pm_opp_set_rate(0)
e532b800728d drm/msm/dp: Drop dev_pm_opp_set_rate(0)
54b17a858b8b drm/msm/dpu: Drop sneaky dev_pm_opp_set_rate(0)
8a3aee5143ea perf: arm_spe: Make wakeup range check overflow safe
2350896a36b5 drm/msm/dp: do not reject wide-bus modes while a YUV420 mode is active
c89d481a50de drm/msm/dp: reject YUV420-only modes without VSC SDP support
e2a99fa93b40 drm/msm: don't tear down KMS twice when KMS init fails
0f00f6848f6b drm/msm/dpu: Fix DMA SSPP REC block offsets on DPU v13
182cd086b31e ACPI: processor: Unregister cpufreq notifier on init failure
1558c267b78b wifi: mt76: only consume the WO drop bit on WED v2 devices
4087cff2389c wifi: mt76: mt7996: add missing rdd_idx check when enabling background radar
2bcbbfaaa648 wifi: mt76: mt7915: use little-endian for bss_info_ra wire fields
e1383c17fb5d wifi: mt76: report data NSS for STBC frames in RX rate decode
c4dc85481d38 wifi: mt76: cancel reset and rc work on device unregister
ea69a378d77c wifi: mt76: mt7996: don't leak MLD group index on remap alloc failure
1a51aff0e048 wifi: mt76: mt7996: reserve space for the CSA-abort countdown TLV
01e3d5707522 wifi: mt76: fix ER-SU 106-tone RU check in RX rate decode
5f9c09e948ce wifi: mt76: decode the full VHT Rx STBC capability field
594c4b7f89f9 wifi: mt76: mt7996: hold dev->mt76.mutex while disabling tx worker in SER
71bf9de2ab3f wifi: mt76: mt7915: unwind state on add_interface failure
6ed0fba58bb1 wifi: mt76: fix out-of-bounds access in mmio copy helpers
93eaddfdd35a wifi: mt76: mt7996: bound TLV walk in mt7996_mcu_get_chip_config
e6a7cfe07319 wifi: mt76: fix HE DCM max-RU capability encoding
fd5a8b049a7e wifi: mt76: check txfree done event on the WED hw path
636ab58493fc wifi: mt76: mt7915: poll the correct SLP CTRL register for the second adie
a273dc3b86a7 wifi: mt76: fix RXDMAD_C buffer recycling race
a83bc76d1713 wifi: mt76: fix uninitialised RXDMAD_C descriptor info
0fd0bad6248d wifi: mt76: fix stranded frames in mt76_txq_schedule_pending
a68447b88454 wifi: mt76: fix 4th chain ACK RSSI bitmask in sta_poll
93ce0dae8e77 wifi: mt76: mt7915: write RX header translation bit to the correct register
7b47f11d6ce0 wifi: mt76: mt7996: don't report a zero TX bitrate
ecfd1a07e78c wifi: mt76: mt7915: avoid nss underflow in mt7915_mcu_get_sta_nss
a97b2b942d2f wifi: mt76: mt7915: clear wcid mask under mutex after RCU pointer clear
4b92027fd043 wifi: mt76: mt7996: set MT76_MCU_RESET before waking MCU waiters on full reset
b1c5cf8903be wifi: mt76: mt7996: validate RX band_idx before dereferencing phys[]
1584fd436132 wifi: mt76: assign link_id when sending probe request during scan
186c957ac332 wifi: mt76: fix non-AQL packet accounting for MLO stations
0a951ff6704d wifi: mt76: mt7996: fix MLD ID in MAC TXD and HIF TXP
db4be207f3f6 wifi: mt76: fix RX data queuing of RRO 3.0
253b30a739ca wifi: mt76: mt7996: fix capability of EHT-MCS 15 in MRU
a142565452ee wifi: mt76: mt7996: fix non-MLD station num_sta leak
85a0d0bf9726 wifi: mt76: mt7996: fix EAPOL source BSS for non-MLD stations
6a342db7a650 wifi: mt76: mt792x: Fix memory leak in SDIO TX path
27dbe86665da wifi: mt76: mt7925: fix msg len mismatch between driver and firmware
5cfd3d6078d9 wifi: mt76: mt7925: update clc before setting sar power table
7b7060e26273 wifi: mt76: mt7927: set band index for sniffer mode
f544bcba4721 wifi: mt76: mt7921: Add PCIe AER handler support to prevent system crash
b250943f3f83 wifi: mt76: mt792x: fix use-after-free in mt76_rx_poll_complete
0c46d22c30a1 wifi: mt76: add init_wiphy callback
2691bf35cee6 wifi: mt76: mt7925: add NAN MCU helpers
2ca99492a7bf wifi: mt76: connac: add NAN connection type
d4029aab5be8 wifi: mt76: mt7915: fix net_fill_forward_path for non-DBDC mt7986
ef0190f1fafa wifi: mt76: mt792x: stop USB register access after bus hang
063169a2755a wifi: mt76: fix handling channel context with different bands in mt76_switch_vif_chanctx()
6def491fe9c4 wifi: mt76: mt76x02: do not WARN on invalid rx descriptor length
2e3549a038f1 wifi: mt76: connac: add MT7991A (0x7991) to is_mt7996()
3b052a39c465 fanotify: report full event length for FIONREAD
ef81e4a1628e misc: sgi-gru: remove interrupt-context page-table walks
961f4406a2dd misc: vmc_vmci: Fix potential memory leak in vmci_event_subscribe()
a1584c5f05cb powerpc/crash: Fix possible memory leak in update_crash_elfcorehdr()
2996d2a7cb92 powerpc/44x: Set GPIO chip parent
4e8bfb2a3b27 powerpc: implement get_direction() in cpm2
193fe50a497d dma-resv: Fix undefined symbol when CONFIG_DMA_SHARED_BUFFER is disabled
34470cc3a8e6 iomap: release the folio batch on iomap callback failures
20e9cbd3be1e dcache: keep shrink_dcache_for_umount() making progress on busy roots
9be10f49dfc2 locking/lockdep: Fix NULL pointer dereference in __lock_set_class()
1e202ab73001 pinctrl: qcom: shikra: Fix intr_target_width for summary interrupt routing
c02d675e8146 md/raid1: create serial pool adding rdev to array with serialize_policy=1
1f42e5898b45 fs: annotate inode timestamp accessors
dff41b56ab7b i3c: master: adi: add OF module alias for autoloading
618dd640ded6 i3c: dw: avoid shift-out-of-bounds when DAA assigns no devices
c1f4d7763cdf swiotlb: Preserve allocation virtual address for dynamic pools
8c486293ddd0 iommu/dma: Check atomic pool allocation result directly
a58923756b0f md: scope memalloc_noio to allocation critical sections
cc543e769b97 md/bitmap: resume array on backlog_store() error path
af409d56bb38 clk: qcom: Return expected ENOMEM error on dynamic allocation failure
e13c99679b54 clk: qcom: gpucc-qcm2290: Park RCG's clk source at XO during disable
bb105eb8cce8 clk: qcom: gpucc-qcm2290: Keep the critical clocks always-on from probe
679df05c771a clk: qcom: gpucc-qcm2290: Move to the latest common qcom_cc_probe() model
73d816a47fcc clk: qcom: gpucc-qcm2290: Drop pm_clk handling
308f3349e2fd clk: qcom: qcm2290: Update DISPCC and GPUCC GDSC *wait_val values
844e78f83227 clk: qcom: qcm2290: Add RETAIN_FF_ENABLE flag for DISPCC and GPUCC GDSCs
dfc8dea60be2 clk: qcom: qcm2290: Set POLL_CFG_GDSCR flag for DISPCC and GPUCC GDSCs
8b516ca0d040 clk: qcom: dispcc-qcm2290: Enable runtime PM support
a0e5c01eb1df clk: qcom: dispcc-qcm2290: Move to the latest common qcom_cc_probe() model
8bc5a909a611 clk: qcom: negcc-nord: keep GPU2 CFG clock enabled via critical CBCR
b88c019e2cca clk: qcom: gcc-nord: mark PCIe link clocks as critical
9726f63fb925 clk: qcom: negcc-nord: use clk_regmap_phy_mux for USB3 pipe clock srcs
c3683217826d clk: qcom: nord: use BRANCH_HALT_SKIP for PHY pipe clocks
948183bb89dc arm64: dts: qcom: eliza: Add fallback compatible for ADSP remoteproc
a2074f86fc96 lib/test_hmm: fail dmirror_fault() when the mirrored mm is gone
65e7240d679f platform/chrome: lightbar: Limit payload to max packet size
79347e42cfbc bpf: Fix potential UAF when reading bpf link info
923f559e95b8 bpf: Fix potential UAF in bpf_netns_link_update_prog
aab9d81a415c power: supply: sc2731_charger: cancel work on remove
ad4f4e6678ec power: supply: isp1704_charger: cancel work on remove
3646c881b6ad arm64: dts: qcom: qcs6490-rb3gen2-industrial-mezzanine: Fix the PCIe iommu-map entries
65fded30a447 arm64: dts: qcom: qcs6490-rb3gen2: Fix the PCIe iommu-map entries
d6c3c9c6cc38 arm64: dts: qcom: qcs6490-thundercomm-minipc-g1iot: Fix the PCIe iommu-map entries
efcf504642ba arm64: dts: qcom: qcs6490-radxa-dragon-q6a: Fix the PCIe iommu-map entries
a1e2a5239cfc arm64: dts: qcom: lemans-evk-ifp-mezzanine: Fix the PCIe iommu-map entries
e57c32625d30 arm64: dts: qcom: monaco-evk-ifp-mezzanine: Fix the PCIe iommu-map entries
d0da19edc7ba arm64: dts: qcom: monaco-monza-som: Fix the PCIe iommu-map entries
5ac48b3956ca arm64: dts: qcom: monaco: Fix the PCIe iommu-map entries
3047cfd5ebdc arm64: dts: qcom: lemans: Fix the PCIe iommu-map entries
eb16dcbce98b arm64: dts: qcom: talos: Fix the PCIe iommu-map entries
604e55211af9 arm64: dts: qcom: sm8750: Fix the PCIe iommu-map entries
ff9c3c087b67 arm64: dts: qcom: sm8650: Fix the PCIe iommu-map entries
9eb128da8525 arm64: dts: qcom: sm8550: Fix the PCIe iommu-map entries
0ce01e1cd0c3 arm64: dts: qcom: sm8450: Fix the PCIe iommu-map entries
1d6e5c05018b arm64: dts: qcom: sm8350: Fix the PCIe iommu-map entries
8c8b4f2a352c arm64: dts: qcom: sm8250: Fix the PCIe iommu-map entries
dcdb31fb3e97 arm64: dts: qcom: sm8150: Fix the PCIe iommu-map entries
22a6fcd328ab arm64: dts: qcom: sdm845: Fix the PCIe iommu-map entries
04ae73e1f607 arm64: dts: qcom: sc8180x: Fix the PCIe iommu-map entries
bf3f0faa4514 arm64: dts: qcom: sar2130p: Fix the PCIe iommu-map entries
5f6cc86e9d60 arm64: dts: qcom: kodiak: Fix the PCIe iommu-map entries
36fb7eea7121 arm64: dts: qcom: kaanapali: Fix the PCIe iommu-map entries
9d0e427b1bbb arm64: dts: qcom: sm8250-xiaomi-elish: correct the board ID
58d595f2d695 arm64: dts: qcom: talos: Fix cpu6 1094.4MHz OPP frequency typo
030376932ffd arm64: dts: qcom: glymur: Fix PDC IRQ mapping
cbbaf0c870dd block: fix dio leak on metadata mapping error
6809ba75b8bb firmware: qcom: scm: Fix tzmem state on probe retry
6fab857eccfc firmware: qcom: scm: Fix reserved memory cleanup on probe failure
f312ef502667 firmware: qcom: scm: Fix NULL dereference in IRQ handler before __scm is published
edad2969959f firmware: qcom: scm: instrument SMC call path with tracepoints
0e93bb22355e firmware: qcom: scm: add trace events for the SMC call interface
cb3219dcb859 arm64: dts: qcom: sc8280xp-crd: Fix the pin index for misc_3p3_reg_en
a9e8aa66c538 arm64: dts: qcom: glymur-crd: Add FocalTech ft3d81 touchscreen support
759308ce67e9 soc: qcom: pmic_glink_altmode: Define the TBT extradata properly
c9edf04712b5 clk: qcom: gcc-qcm2290: don't park QUP RCGs upon registration
cf8a53ea2a80 arm64: dts: qcom: qcs404: Fix DTBS Check errors in usb controller nodes
099702ece062 arm64: dts: qcom: sdm632-motorola-ocean: Fix LED default trigger property
9f84fcd28690 arm64: dts: qcom: msm8976-longcheer-l9360: Fix accidental node override
85fc83107415 arm64: dts: qcom: msm8998: Don't pull-up I2C pins by default in sleep
4c31039af742 rcu: Mark accesses to ->rcu_urgent_qs and ->rcu_need_heavy_qs
0a3709557f88 PCI: dwc: ep: Clear MSI iATU mapping in dw_pcie_ep_cleanup()
379913074bf4 md/raid10: consistently fail atomic writes that require splitting
110092e68836 md/raid1: restrict atomic write limits and handle runtime constraints
acff2713c321 wifi: ath11k: fix stride mismatch in mac_phy_caps_parse()
26f8f87f0a55 wifi: ath12k: fix stride mismatch in mac_phy_caps_parse()
ba1ee854b681 Revert "serial: 8250: Clear CON_PRINTBUFFER on port re-registration"
cd2e26852094 selftests/zram: fix kernel_gte() for POSIX sh
81b39df5d701 md: recheck spare changes before starting sync
9bb9504e2d8f md: remove REQ_NOWAIT support from raid1/10/456
f6215e3a65f1 tools/nolibc/powerpc: mark ctr and xer as clobbered by system call
86d4e8c527de fanotify: stop permission watchdog when timeout is zero
0187a11e2d61 md/raid5: protect lockless recovery_offset accesses during reshape
bae1d7735113 net: airoha: fix ETS QoS stats counter underflow and cross-channel corruption
4b9a1b5203d4 md/raid5: fix lockless max_nr_stripes reads
fcf21df7d3c5 md/raid5-ppl: fix use-after-free in ppl_do_flush()
16b6e6243d81 md/raid5: protect bitmap batch counters aka seq_flush/seq_write consistency
4743959aa8d8 bus: mhi: host: Fix controller cleanup on EDL sysfs failure
84e713a8aa7f bus: mhi: host: Flush the posted write after writing to MHI_SOC_RESET_REQ_OFFSET
1b68b6e529ce wifi: rtlwifi: pci: fix error path in rtl_pci_probe()
05c1081ae450 platform/chrome: cros_ec_debugfs: Unregister panic notifier
e97d1fce7173 platform/chrome: cros_ec_debugfs: Clean up console log on probe failure
618781e47fb0 regulator: tps65185: handle gpiod_get_value_cansleep() error returns
08835d42ce64 s390/vdso: Pass --eh-frame-hdr to the linker
4d030d7d1af9 media: stm32: dcmi: fix some error handling bugs in probe()
cb83cfff8dff media: qcom: iris: handle runtime PM resume failure in core deinit
6bd10931ac2d media: qcom: iris: Remove duplicate HFI_PROP_OPB_ENABLE entry
a5e341a25de3 media: qcom: iris: Fix bitmask test in iris_allow_cmd()
8a61c211d0d5 drm/msm: remove objects from evit list after pinning them
29d6bbda42aa PCI: starfive: Fix unchecked pm_runtime_get_sync() in probe
dad14ba26c9a PCI: starfive: Fix Runtime PM handling and teardown ordering
7c7fad5607dc wifi: ath12k: validate TLV length in process_tpc_stats()
5de2b8c53714 wifi: ath11k: fix overreads in ath11k_wmi_process_csa_switch_count_event()
bf97c9d51238 wifi: ath12k: fix overreads in ath12k_wmi_process_csa_switch_count_event()
761cf9c63274 drm/panthor: Add vm_bind region with kbo range overlap check
1a7958ce58dc spi: davinci: switch to managed controller allocation
44ec34cd3cbe nvmet: reject out-of-range mdts values in configfs store
06352dae949c nvme-pci: return error when parsing a quirk string fails
be5eb47ee3fe nvme-fc: unmap cmd_iu DMA on rsp_iu mapping failure in init_request
9e136150ac55 nvmet: fix return status of RMI log page on allocation failure
48812c810307 IB/isert: reject login PDUs declaring more data than was received
352dc85324b2 IB/isert: reject PDUs declaring more data than was received
c12cc56eb9fc media: staging/ipu7: fix async notifier leak on init error
a64e2beb4501 RDMA/cxgb4: free STAG index when TPT entry write fails
5b96c5ba26a8 RDMA/mlx5: Send cong param changes to the resolved port mdev
c75ee076fa09 RDMA/mlx5: Fix stack out-of-bounds read in cc_params debugfs
6b15fc9bc117 RDMA/cxgb4: Fix dereg_skb leak and double free in write_tpt_entry()
254579a81e49 riscv: dts: spacemit: Make dtschema recognize the etherent PHY correctly on K3 com260 board
63ad1eb9dceb riscv: dts: spacemit: Make dtschema recognize the etherent PHY correctly on K3 pico-itx board
fcf7e0500ea9 clk: spacemit: k3: fix missing /2 factor in i2s sysclk dividers
fcadc927cbff scsi: smartpqi: Fix AIO retry marker cleared by SCSI core between dispatches.
f181155baf0c nilfs2: fix BUG in nilfs_copy_dirty_pages() on dirty state mismatch
15c855937641 nilfs2: prevent out-of-bounds read in super root block parsing
8cea0bc78ac6 nilfs2: fix infinite loop in nilfs_clean_segments()
44ea94a65fd2 clk: rockchip: Fractional PLL coefficient on RK3588/RK3576 is two's complement
554c752ebd46 clk: rockchip: Fix the fractional part denominator on RK3588/RK3576 PLLs
42a5661ff7e4 PCI: Fix UAF when probe runs concurrent to dyn ID removal
e0b62b59a0ab PCI: Fix dyn_id add TOCTOU
30f79038b676 PCI: Make pci_match_one_device() match on ID instead of device
8e25cfa697a9 clk: mediatek: mt8135: Fix inverted gate control for devapc_ck
6bc007ee691c clk/x86: pmc_atom: add kasprintf return value check
a3c031fd2c4c clk: palmas: Manage external-control prepare with devm
1183dc2450a2 clk: eswin: Zero-initialize stack-allocated clk_init_data
fea0b4fd891a clk: mediatek: pllfh: Fix IO remapping leak in register_pllfhs error path
8ed265c0b472 clk: tegra: tegra124-emc: put EMC node on register failure
41e42bf05da9 arm64: dts: allwinner: sun50i-a64-pinephone: Fix mpu6050 mount matrix
0b56ad971fa0 wifi: mac80211: fix per-STA profile length in cross-link CSA parsing
ce30b9f6ace6 media: stm32: dcmi: fix error handling on MDMA pool alloc failure
1d4b59027734 RDMA/efa: Fix PBL chunk length computation
4cfb448705da RDMA/rxe: Fix UAF in ODP init error-handling path
417190bde0fd iommu/tegra241-cmdqv: Fix VINTF0 leak on the init-failure path
0b139ec4641c iommu/tegra241-cmdqv: Require exactly one Stream ID for a vSID
421f5ab135cd iommu/tegra241-cmdqv: Free the error IRQ before tearing down VINTFs
86197679b293 iommu/tegra241-cmdqv: Don't fall back to a freed smmu after devm_krealloc()
a168254ff8db iommu/tegra241-cmdqv: Don't run the error ISR before probe sets up vintfs
f3ef4abc271a iommu/tegra241-cmdqv: Synchronize the error ISR against VINTF (de)init
b4535b403d6b iommu/tegra241-cmdqv: Publish an LVCMDQ only after it is fully initialized
967a5ff8a614 fs/ntfs3: reject restart table growth beyond U16_MAX entries
e67992e9089b staging: rtl8723bs: use kfree_sensitive() for key material
c582b049fd02 arm64: dts: qcom: glymur: fix SoCCP memory mappings
0dc9e289bbb5 remoteproc: qcom: q6v5: Request shutdown if crash is triggered host-side
a8deb8980c63 remoteproc: qcom: pas: Add late attach support for subsystems
61862ed651b2 remoteproc: Prevent crash handling to race with rproc_del()
0ff49320a49c remoteproc: core: Attach rproc asynchronously in rproc_add() path via schedule_work()
38e4018ac5cc remoteproc: Allow shutdown of crashed processors
b22af817f56d cpufreq/amd-pstate: Set min_limit_freq based on bios_min_perf
732fc96c1f87 perf annotate: Be robust to annotating without a thread
f173b0c5e656 perf ui hists: In report UI ensure thread is set with reference counting
b5ea46ba8a95 gpu: nova-core: fix packed registry table size
973e3c9087f9 gpu: nova-core: build SetRegistry entries dynamically
4d6270bbb4e0 sched_ext: Abort directly from the hardlockup handler
30f4e6c8225e sched_ext: Fix exit_cpu accuracy for lockup paths
7965965aa282 w1: ds2482: Fix signedness bug in ds2482_w1_triplet()
1cd16c8d68f5 spi: oc-tiny: switch to managed controller allocation
7069684d4bc6 clk: mediatek: mt6735: Unregister PLLs on probe failure
1c90da6376e4 PCI/pwrctrl: tc9563: Power off only the external ports in tc9563_pwrctrl_disable_port()
972c771674e8 PCI/pwrctrl: tc9563: Fix parsing the integrated Ethernet MAC Endpoint node
3371d30a97a2 isofs: release zisofs block pointer buffer head
16a56afd56c4 powercap: intel_rapl_tpmi: Handle PMU registration failure during probe
74d206641841 thermal/drivers/qcom-spmi-adc-tm5: Drop IIO_VAL_INT check in adc_tm5_get_temp
82d250eb2a04 thermal/drivers/airoha: Fix copy paste error for sen internal
bf7994d4d7f5 thermal/drivers/airoha: Fix copy paste error on clamp_t low temp
67332b75ca7e ACPI: bus: Avoid confusing complaints regarding missing _OSC features
f917707f0de0 RDMA/mlx5: Fix integer overflow of user QP buffer size
093f290dd879 crypto: keembay - publish OF module alias for OCS AES/SM4
5aae80dcec07 crypto: keembay - Initialize completion before requesting IRQ
2b3fb5693c25 scsi: ufs: debugfs: Reserve space for a string terminator
cfef700703d9 scsi: ufs: rpmb: Validate request frame length before parsing
4b62f73836f4 scsi: ufs: core: Validate connected lane counts
a769095d1d74 scsi: ufs: Avoid NULL CQE dereference when reporting invalid tags
66da25277256 scsi: ufs: core: Validate string descriptors
f7f970bc7052 power: supply: sbs-battery: Use a per-device serial number buffer
d29a8ee271da arm64: RSI: fix field-spanning write warning in attestation token init
df6bc642201d riscv: dts: spacemit: Fix phy id check for the phy on com260 board
a510644ce03e riscv: dts: spacemit: Fix phy id check for the phy on pico-itx board
9875c4587d65 tools/build: Allow versioning of all LLVM tools defined in Makefile.include
e06785cba7f8 pinctrl: mediatek: free EINT resources on unbind
b8fa1098ee9f pinctrl: mediatek: use devm_gpiochip_add_data() for GPIO chip
908f3ea3f050 liveupdate: Remember FLB retrieve() status
217775362e80 liveupdate: Reference count outgoing FLB data
f2a3a52b8293 liveupdate: reject nonzero reserved value for SESSION_FINISH
dc59caae4d8f riscv: dts: spacemit: Add enough deassert time for the PHY on com260 board
bf26fb05720b riscv: dts: spacemit: Add enough deassert time for the PHY on PICO ITX
56140bd357c5 riscv: dts: spacemit: improve RTL8211F PHY configuration on K3 Pico-ITX board
7c37d7cd2d0b power: reset: reboot-mode: Remove devres based allocations
8f7683ce37a5 cxl/region: Fix use-after-free in find_pos_and_ways() error path
c44c01167aed pinctrl: fix unmet dependencies from missing GPIOLIB
1a6e68cd6117 selftests/bpf: Fix memory leak on subtest_states reallocation
3d83554653bb selftests/bpf: Fix missing allocation null checks in test_progs.c
8d2b2adee3b9 selftests/bpf: Fix incorrect error checking for pthread_create
48a0209d8da0 bpf: Fix WARNING in bpf_tracing_link_release
5de0acc36e23 ARM: lpc32xx: only run SoC init on LPC32xx hardware
a2cbab47f44e bpf: Fix CFI mismatch in task work callback
843419e12402 arm64: dts: rockchip: Fix rk3566-bigtreetech-cb2 touchscreen property
94987478c83e arm64: dts: rockchip: Fix Gru WLAN sideband interrupt
331fd2c8cd1e arm64: dts: rockchip: Add missing hclk for RK3588 eDP1
d506e4a1b179 arm64: dts: rockchip: Add missing hclk for RK3588 eDP0
24f20986b253 exfat: fix valid_size extension over a shared writable mapping
8cb66c6579ab drm/panthor: return PTR_ERR() from devm_drm_dev_alloc()
72caafbc95c5 fs/ntfs3: fix out-of-bounds read of INDEX_ROOT in reparse/objid init
c408d416618e netfilter: nf_nat_sip: rewind offset when NAT shrinks the packet
fdb1a59dfc8c drm/tve200: add OF module alias for autoloading
0b37120b0bb5 perf trace: Correct default cpumask formatting to hexadecimal
8edcf5385ca7 perf cap: Remove used_root parameter and simplify capability checks
aabd063d7987 ASoC: spacemit: rename clock inputs to match binding
5b856fd4a763 clk: sunxi-ng: mux: fix determine helper rate propagation
4eda2111b111 leds: pca9532: Fix phantom device registration on missing hardware
c2b4cd53bc6f PM: hibernate: Fix memory leak in snapshot_write_next() error path
334145d683ad RDMA/erdma: complete object teardown when the destroy command fails
56a347950e66 xfrm: Fix skb double-free in xfrm_dev_direct_output()
9562da57ff48 perf cs-etm: Avoid truncating AUX buffer sizes to int
28bb9cb31347 perf cs-etm: Flush thread stacks after decoder reset
a8412fdcd000 gpu: nova-core: correct RISC-V HALTED field
8f396ccaf128 riscv: dts: thead: th1520: remove pclk for I2C1
e8a504606b94 riscv: dts: spacemit: k1: Split gmac_clk_ref into independent pinctrl groups
da3066cee2c8 riscv: dts: spacemit: set console baud rate on K3 Pico-ITX board
24f57e7c75b7 bitmap: Properly initialise destination bitmap for scatter & gather test
4520d4a1db37 firmware: arm_scmi: Unrequest devices if driver registration fails
826413b858ea firmware: arm_scmi: Roll back partial protocol table registration
f4ade8d22475 cpufreq/amd-pstate: handle missing policy in dynamic EPP callbacks
54d63431854b cpufreq/amd-pstate: Toggle auto_sel in active mode on shared memory systems
f15b9aa41307 cpufreq/amd-pstate: Fix EPP return type and handle errors during initialization
ba6ce23d17db cpufreq: amd-pstate-ut: Skip tests when amd-pstate driver is not active
2f923ccc8871 ARM: dts: allwinner: a10: Fix PMU interrupt
09c7565ebdf6 ext4: skip tail block zeroing for inline data files
83663c0b7394 ext4: check dir entry fits before reading the hash trailer in ext4_search_dir()
e1e342d9a561 ext4: fix buffer_head leak in ext4_init_orphan_info
518df61b9b0a RDMA/bnxt_re: Clear VM_MAYWRITE on DBR/toggle page mmap
9ddbc95dac16 wifi: ath11k: Avoid buffer overread in ath11k_wmi_tlv_op_rx()
9e6ec0977f0b wifi: ath12k: Avoid buffer overread in ath12k_wmi_op_rx()
919c31763d65 wifi: ath12k: fix survey indexing across bands
0fd2c54d8a56 wifi: ath11k: Correctly copy the hint BSSID in WMI scan request
84f87c46cec5 wifi: ath12k: Correctly copy the hint BSSID in WMI scan request
8d66010645bc wifi: ath12k: allocate HOST_DDR and BDF regions after Q6 RO region
39520ff5cdfd wifi: ath12k: refactor QMI memory assignment
c78e6912404b wifi: ath12k: switch to name-based reserved memory lookup
2f3635213ecf wifi: ath6kl: avoid buffer overreads in WMI event handlers
f2dd3a8580df wifi: ath12k: fix ML-STA authentication timeout on QCC2072
850211b0ba6c wifi: ath12k: advertise ieee_link_id in vdev start MLO params
1f77d0c58b6a wifi: ath12k: Set IEEE80211_OFFLOAD_ENCAP_4ADDR after tx_encap_type vdev param
2d3cb65c4846 wifi: ath12k: Advertise multicast Ethernet encapsulation offload support
b4c728577933 ext4: validate readdir offset before accessing dirent
439aedfd7ae8 ext4: use fsdata to track inline data write state and fix race
9fd3ffc3c51c ext4: drain in-flight DIO before buffered write fallback
43ae387c3ae6 ext4: clear stale xarray tags on folios skipped during writeback
7720fddd1fe3 ext4: fix ABBA deadlock in ext4_xattr_inode_cache_find()
169772cd2147 thermal: intel: int3400: clean up ODVP on probe failures
b801158f81fe iommu/arm-smmu-v3: Declare eats_s1chk and eats_trans as host-endian u64
64e29e509906 iommu/qcom: Fix inverted fault report check in qcom_iommu_fault()
e3e12b851953 iommu/qcom: Remove sysfs device on probe failure path
99d42aef089a iommu/amd: Fix undefined behavior in devid_write debugfs function
21d35c5f46e9 firmware: arm_scmi: Fix requested device removal race
c06f2856a1d7 RDMA/core: Fix potential use after free in ib_dealloc_pd_user()
bfc119a40c04 RDMA/core: Fix potential use after free in uverbs_free_dmah()
43403fe45379 RDMA/core: Fix potential use after free in ib_free_cq()
64c72390d840 RDMA/core: Fix potential use after free in counter_release()
95c992c869df RDMA/core: Fix potential use after free in ib_destroy_srq_user()
8a72a6aad84b RDMA/core: Fix potential use after free in ib_destroy_cq_user()
001383248e5d RDMA/core: Fix use after free in ib_query_qp()
56024193f6d7 RDMA/core: Add rdma_restrack_begin/abort/commit_del() operations
638b9a5364c1 RDMA/mana_ib: drain QP references after partial table insertion
61a25b8d333e RDMA/erdma: Fix CEQ tasklet use-after-free on removal
3ec5f37e14bc PCI: j721e: Fix incorrect max_lanes for J7200
425addfb52c4 RDMA/srpt: Pass the mapped task attribute to target_init_cmd()
641f814965d7 bpf: Mark bpf_refcount field as unique
373a1e9366e7 bpf: Preserve unique-field state across nested structs
92356df4aa2b bpf: Fix offset warn check for bpf_res_spin_lock
a21001465264 virt: arm-cca-guest: use migrate_disable() for attestation token requests
2373496c0dac ACPI: battery: Adjust charging status validation check
08fe2eaa6091 bpf, riscv: Fix extable handling for arena load_acquire
a6e11a81da34 riscv, bpf: Fix kernel stack corruption in tailcall with CFI
2a3a29e90021 riscv, bpf: Fix memory leak in bpf_jit_free
4c39115eb6e3 libbpf: Search /lib64 and /lib in resolve_full_path()
0e94a2ca7905 selftests/bpf: Fix lsm_bdev dev_t encoding mismatch
912189169df3 selftests/bpf: Fix make install target
e2396b8a5620 bpf: Zero queue and stack outputs on lock failure
27a3be4e965b platform/x86: acer-wmi: reject missing gaming WMI results
2fb8ff81659a ext4: skip extra isize expansion during mount to prevent deadlock
36bf17bb90cd ext4: fix out-of-bounds read in ext4_read_inline_dir()
32f7ab52875e ext4: fix circular lock dependency in ext4_ext_migrate
6e11ac626f9f ACPI: PCI: Clear driver_data on all paths that free the acpi_pci_root
355bee5f11ac ACPI: processor: validate MADT IOAPIC entry bounds
2267448f6787 ACPI: EC: Avoid _REG disconnect on GPIO IRQ defer
c57e238b475e RDMA/nldev: validate dynamic counter attribute length
d324c4353f64 irqchip/gic-v3-its: Prevent leak in its_vpe_irq_domain_alloc()
bf18426dddbf samples: rust: debugfs: fix excessive stack use
5a9f8b7f1167 rust: device: make lifetime on `Core` and `CoreInternal` invariant
082435d51f28 selftests/bpf: Silence maybe-uninitialized compiler warning in libarena
555e689c4630 selftests/bpf: Silence array bounds warning in global_map_resize
0fb8a6076531 selftests/bpf: Check malloc result with ASSERT_NEQ in test_sha256
05e588ad7715 selftests/bpf: Check malloc result with ASSERT_NEQ in test_loader
af33d192af2f x86/bugs: Don't use cpu-type matching in cpu_vuln_blacklist
b86e65df16da arm64: dts: imx8-ss-audio: Fix LPCG clock indices for ASRC0
cb6b14e24b99 kcsan: avoid unintended access checking in NMIs
bd02d644bd19 RDMA/srpt: Fix srpt_alloc_rw_ctxs() unwind counters
c5643ea4f040 RDMA/bnxt_re: Validate udata before executing commands
ee901a0f4651 RDMA/core: Add ib_no_udata_io() helper
5ec111ddc1f7 RDMA/rxe: Validate num_sge/cur_sge before indexing wqe->dma.sge[]
ca99431820e8 RDMA/hfi1: Propagate sdma_txinit_ahg() errors
7e24fd5253fc arm64: dts: amlogic: meson-axg-s400: enable mipi_pcie_analog_dphy for PCIe
a22abf6d48ee arm64: dts: amlogic: meson-axg: Add missing nand_rb0 pin to nand_all_pins
0c52d48122a1 phy: starfive: Fix runtime PM cleanup in JH7110 DPHY RX probe
da666984ffda phy: starfive: Fix runtime PM cleanup in JH7110 DPHY TX probe
cdaa9cb77eb6 iio: dac: ad5686: missing NULL check on match data
5ed1b048527b ASoC: meson: Keep link pointers valid on realloc failure
2787034ea016 dmaengine: dw-edma: Clear stale requests on termination
6fc436e1500c dmaengine: dw-edma: Serialize channel state checks
f71c94c1a657 dmaengine: dw-edma: Serialize abort state updates
f3ec6702a1d2 dmaengine: dw-edma: Terminate all descriptors without callbacks
57cf929a33cb bpf: Disallow interpreter fallback for BPF_ADDR_PERCPU insn
17da80d0c7b5 bpf: Disallow interpreter fallback for gotox insn
408b6d3bc19c bpf: Disallow interpreter fallback for arena-related insns
8a0863565603 bpf: Reject arena frees below the arena base
49882b4d5290 arm64: dts: qcom: glymur: Add CX power domain to GCC
9d7355c6040c drm/msm/a6xx: Fix RBBM_CLOCK_CNTL3_TP0 value in a730_hwcg
50fb8b5857d5 driver core: soc: Unregister bus on early device registration failure
231bbc04c58f software node: Fix software_node_get_reference_args() with index -1
07fee585336a drivers: base: Remove statistics group if encryption group not created
7244dd0f1262 drm/v3d: Associate BOs with every job that accesses them
89d415976852 drm/v3d: Convert submit helpers to operate on struct v3d_submit
87bdadba51c5 drm/v3d: Make v3d_get_cpu_indirect_csd_params() a pure parser
d7c6dfcd286d drm/v3d: Introduce struct v3d_submit and convert CL/TFU/CSD ioctls
941522179e62 drm/v3d: Migrate BO reservation locking to DRM exec
cfb009ab2618 drm/v3d: Extract v3d_job_add_syncobjs() helper
a3e81f48c9e6 drm/v3d: Drop unused drm_encoder.h include from v3d_drv.h
02438d15b0f4 perf build: Fix compiler errors with old capstone
c91d07e96680 perf ui hists: Fix uninitialized stack memory free on pstack allocation failure
c645f6dd1af2 mtd: part: reject MTDPART_OFS_RETAIN in mtd_add_partition()
37be7bc2c2d0 mtd: mtdswap: Avoid freeing registered blktrans device twice
529aeba63d44 mtd: intel-dg: Fix runtime PM error path in probe
b07d0469126c soc: ti: knav_qmss: Remove debugfs file on teardown
fda8fb7e8179 vfio/pci: clear vdev->msi_perm after freeing it on init failure
1d36a009c8ee vfio: selftests: Avoid VLAs
6fb4cd8ee68f char: xilinx_hwicap: unregister class on init errors
4a6518be3160 ipack: ipoctal: fix UAF, null-ptr-deref, and use-after-free in cleanup on remove
5c8927882b70 ppdev: prevent overflow when setting port timeout
1105f6e7b392 cacheinfo: don't propagate DT/ACPI error when arch supplies info (arm64)
b044a6c443d5 misc: lan966x_pci: depopulate children on populate failure
ab2fe4304141 misc: ad525x_dpot: use driver core groups for sysfs files
3ac54631098a misc: rtsx: add missing write register handling
4984277bc43f misc: bcm-vk: Use acquire/release for msgq_inited
0b8177cca0c9 misc: pch_phub: Complete enum usage for device identification
c70f3be8be0d mei: lb: fix incorrect type in assignment
ca4489b3e546 speakup: keyhelp: guard letter_offsets possible out-of-range indexing
d65abe969dcb accessibility: speakup: Fix incorrect string length computation in report_char_chartab_status()
ec5bd6731183 uio: Fix stale info pointer in failed registration path
8bf5e01238c3 gpib: use 'static inline' instead of 'extern inline'
0a53e4bc076e gpib: Move stuck SRQ update under lock
2750b16e8539 tlclk: if sscanf() fails, fall back to 0, not random value
c48e5aa01525 staging: rtl8723bs: fix xmit_frame/xmit_buf leaks on mgnt-frame error paths
b21cb958292e UDF symlink pathComponent header OOB read
56ad47bee6d3 tty: hvc: restrict HVC_DCC to ARMv6+ and ARM64
977659adb341 usb: gadget: f_uac1_legacy: remove broken string configfs attributes
d0667c263362 ACPI: processor: idle: Expand _LPI package sanity checks
a88fae3508aa crypto: aspeed - Propagate platform_get_irq() errors
6ee726526f08 crypto: sl3516 - drop invalid sg_dma_len checks before DMA mapping
c5b52d79d6b2 wifi: rtw89: fw: use MAC source for IO offload delay command
a28a7d9b3bb1 scsi: ufs: core: Avoid possible memory reclaim deadlock in TX EQTR context
576312f027d1 bpf: Sync tail_call_reachable with callee state on entry
09b360eb6ce3 drm/msm: Only fini scheduler after successful init
d684f756d029 drm/msm: Fix task_struct reference leak in recover_worker
8fc6a356f498 drm/msm/a6xx: Fix IRQ storm during msm_recovery test
197912ffbb65 drm/msm/a6xx: Fix A621 GPUCC register list for state capture
9d52bfc956c7 drm/msm/a6xx: Fix A663 GPUCC register list for state capture
dc64cf9d7142 drm/msm: Recover HW before retire hung submit
51fcee9d4140 drm/msm/a6xx: Fix stale rpmh votes after suspend
105aaff286a1 drm/msm/adreno: fix use after free on error path in a6xx_gpu_init()
b00290d1dc23 gpu: host1x: Avoid stack over-read in debug output helpers
eb9f22149875 gpu: host1x: Fix offset calculation in trace_write_gather
a1c4229ebeb4 gpu: host1x: Avoid double device_add when clients already present
082b353c05b8 wifi: iwlwifi: mei: pass correct argument to function
bc7a7ad93070 wifi: iwlwifi: guard against division by zero in iwl_dbg_tlv_alloc_fragments
f7f770d12e6e wifi: iwlwifi: mei: check SAP message length before reading it
2a77cb320e39 wifi: iwlwifi: mvm: fix off-by-one in TXF key sanitiser
769e1910d41f wifi: iwlwifi: fix counter type in iwl_fwrt_dump_error_logs
1d74ddb6da54 perf stat: Fix duplicate output with --for-each-cgroup
b3ce55b4a9da spi: geni-qcom: Fix sticky ret causing wrong return value on invalid proto
3296c42d1c3c drm/solomon: remove unneeded variables in blit functions
51a548f54651 soc: renesas: r8a78000: Drop duplicate "default ARCH_RENESAS"
fa8dc4d73314 clk: qcom: gcc-glymur: Enable runtime PM
64de7f5c2d5c perf jevents: Add more components to the metric sorting order
789395e53ebf perf sched: Free subcommand string after perf sched stats
7a936fa41c55 perf sched: Fix memory leaks in perf sched stats report
cf3282cf46be perf sched: Add missing perf_session__delete()
c2d4db21ad2d arm64: dts: qcom: milos: Add reset for sdhc_2
c5d8ff2d2f05 arm64: dts: qcom: sm8250: correct frequencies in the Iris OPP table
9362c436aec0 arm64: dts: qcom: sm8250: sort out Iris power domains
6f73a043f824 arm64: qcom: ipq5018: Add GEPHY RX and TX clocks
f9f86d8363a7 arm64: dts: qcom: ipq5018: Correct CMN PLL reference clock rate
1d857673a076 arm64: dts: qcom: glymur-crd: merge duplicate &pmh0101_gpios node extensions
31901797093e arm64: dts: qcom: eliza: Enable first QUPv3 wrapper by default
be3f5db2d705 arm64: dts: qcom: sc8280xp-x13s: Fix the drive-strength of mclk pin
74689c170832 arm64: dts: qcom: msm8996-xiaomi-gemini: Fix up ti,drv2604 enable GPIO
fb97d1d6c206 x86/mm/pat: Take cpa_lock around large-page collapse
9ff718df5473 drm/bridge: tc358767: clamp the reported AUX read size to the request
b375b66a4722 perf: evsel: Fix error handling in tp_format lookup
2907676ed67a remoteproc: qcom: Fix glink->node reference leak in qcom_add_glink_subdev
688f621a8d9c remoteproc: qcom_q6v5_mss: Fix MDM9607 subsystem control instance ID
beab49fb7405 remoteproc: qcom_q6v5_mss: Make ssctl_id configurable per platform
73a9119d57e7 cpufreq: schedutil: Fix self-contradictory comment in sugov_iowait_apply()
b12839d2af89 cpufreq: intel_pstate: Fix setting minimum P-state at init time
ae56bcb41607 drm/amd/display: remove duplicate link_dp_panel_replay.h include
c71783a6ed19 drm/amd/display: fix wrong register field in dccg35_set_hdmistreamclk_src_new
7ccdcfbb8617 drm/amd/display: Remove unused-but-set variable hubp from
6970ec944567 drm/amd/display: Fix DM I2C teardown race
f0c4b7ca24d2 OPP: Fix cleanup ordering
7d102d1f0631 media: ipu6: Do not free aux device pdata after init
de9be39cefda media: bcm2835-unicam: Fix asc leaked in error/remove path
c4b00825780a media: platform: amd: fix unmet dependency for VIDEO_V4L2_SUBDEV_API
76511a617ae4 media: i2c: rdacm21: Fix missing media_entity_cleanup()
78cdd9438ad3 media: ti: vpe: Select V4L2_FWNODE for VIP
7c614f83301d irqchip/renesas-irqc: Fix generic interrupt chip leak on remove
f58abff399f7 PCI: keystone: Fix OF node reference leak in init
578ab48dc684 PCI: xgene: Drop unnecessary OF node reference
f9ed38e80443 cpufreq: spear: Fix an IS_ERR() vs NULL bug in spear1340_set_cpu_rate()
68682c9b7b8c dax: fix holder_ops race in fs_put_dax()
eb412f80311f dax: read holder_ops once in dax_holder_notify_failure()
c8c16c2de911 dax/fsdev: fail probe on invalid pgmap offset
7b642bd3d391 dax/fsdev: use __va(phys) for kaddr in direct_access
9b0f91dc9147 dax/fsdev: clear pgmap ops and owner on unbind
93c5509033e4 dax/fsdev: don't leave a dangling dev_dax->pgmap on probe failure
d298a0513aaf dax/fsdev: clear vmemmap_shift when binding static pgmap
58db9b927866 dax/fsdev: fix multi-range offset in memory_failure handler
154540d584ae dax: fix misleading comment about share/index union in dax_folio_reset_order()
6beaef33ee56 libnvdimm/labels: Bound the on-media label size before the shift
a8e3a0e8997d tools/sched_ext: scx_qmap: Fix stale API name in comment
92a4e01e2ef8 regulator: adp5055: Fix error code in adp5055_of_parse_cb()
ca95b15a0760 cxl/features: Clamp Get Feature output size to the remaining buffer
16b7c99eff03 cxl/features: Reject Set Features output buffer smaller than the header
329ea475581c cxl/features: Reject Get Feature count larger than the output buffer
4635953b4c1a firmware: arm_scmi: Fix transport device teardown lookup
c59b3393df13 firmware: arm_scmi: Fix SCMI device destroy lifetimes
3515aed7fe42 firmware: arm_scmi: Unwind P2A receiver mailbox setup failure
9958f55eace8 firmware: arm_scmi: Unwind TX receiver mailbox setup failure
45e54438f4fd firmware: arm_scmi: Fix OF node reference handling
3f4cf1edf736 firmware: arm_scmi: Clear SystemPower flag on create failure
77d2985d1e80 firmware: arm_scmi: Drop handle on protocol bind failures
09d08581ead9 firmware: arm_scmi: Protect device request lookup with RCU
ad39c232ffac firmware: arm_scmi: Use channel ID for transport teardown
0b6e59eb885f firmware: arm_scmi: Reject out of range DT protocol IDs
bab26acebe55 firmware: arm_scmi: Avoid IDR updates while cleaning channels
fbaebd380caa firmware: arm_scmi: Free transport channel on IDR failure
43aad7687238 firmware: arm_scmi: Clean up channels on setup failure
5e30d3d16d1a firmware: arm_scmi: Quiesce notifications before teardown
74fcaa0a3f7a firmware: arm_scmi: Unregister device notifier before IDR teardown
a1bc587568a4 firmware: arm_scmi: Publish channel state before callbacks
54be1b7c1eb8 x86/entry/fred: Encode frame pointer on entry
ccbd20f2168f wifi: ath11k: cap out-of-range rx MCS instead of leaving bogus rate
3dfa1b8ccf7c wifi: ath12k: fix rx_mpdu_start layout for QCC2072
329b10ddc919 wifi: ath12k: fix MLO peer delete race
af405d216316 wifi: ath12k: fix dp_link_peer dangling references on AP vdev rollback
473ea7aa3561 hfsplus: validate thread record before delete key rebuild
8e0c487b0b1b cxl/port: Restart port enumeration when a sibling adds the dport first
7682b617db1f cxl/features: Serialize multi-part Get/Set Feature transfers
ada7aa90eb65 cxl/pci: Honor -EPROBE_DEFER from component register setup
e77594e0cea6 cxl/mbox: Break poison list loop on an empty payload
5354222bef78 cxl/memdev: Fix firmware upload exact-fit handling
dc0a11961361 cxl/test: Rework cxl_type2_mem_init() to use cxl_mock_platform_device_add()
455e817515ff iommufd: Simplify iommufd_device_remove_vdev()
795113f9da49 arm64: dts: renesas: r9a09g047: Fix PCIe dma-ranges memory space code
531ff98bcec5 arm64: dts: renesas: r9a09g056: Fix PCIe dma-ranges memory space code
92425d1fdebc arm64: dts: renesas: rzt2h-n2h-evk: Remove unused MII/GMII pins
e559626bee8a rpmsg: glink: fix deadlock in endpoint destroy during driver detach
b86dbfe4583b fs/resctrl: Fix UAF from worker threads when domains are removed
6bd8bfb85257 perf record: Fix multiple PERF_RECORD_COMPRESSED2 records per push
9f06abd2f64f perf record: Return the written size from process_comp_header()
4c593c62c149 fs/resctrl: Prevent use-after-free in rdtgroup_kn_put()
5116fef23016 tools/sched_ext: scx_flatcg: Fix uninitialized stats on allocation failure
9fb74dce5c65 media: v4l2-async: Unregister sub-device if asc_list is empty
fb66f61a8e75 rust: drm: gpuvm: require Send + Sync for the driver's associated data
59c557d2474c iommufd/selftest: Avoid selftest dirty bitmap size wrap
9c6eace8d07e isofs: fix out-of-bounds page array access on empty zisofs block
4e0af1264a0f ASoC: apple: mca: increase SERDES reset delay
6247fbddbcdf RDMA/hfi1: Initialize debugfs after probe completes
364be5873f2a RDMA/hfi1: Stop flushing the global IB workqueue
83fe4e4f4fbf RDMA/hfi1: Free RX data on late probe failure
4204f5c0312b RDMA/hfi1: Preserve unit 0 on allocation failure
b1e1b25723af RDMA/rvt: Return NULL after port allocation failure
0d85891822df misc: rtsx_usb: avoid USB I/O in runtime autosuspend
901951d0ed7a pmdomain: bcm: bcm2835: handle genpd provider registration errors
6514c99d2c7d ALSA: hpi: Check transport errors during HPI6000 adapter initialization
26b6b14c7a03 esp: do not unref managed frag pages in esp_ssg_unref()
5f35a29a5eed xfrm6: fix out-of-bounds write in xfrm6_input_addr() when secpath is full
ed566979f99c crash_dump: release keyring reference at the correct time
30e78390af05 hwrng: ks-sa - Fix runtime PM cleanup on registration failure
e6d3c7eae75a crypto: ccp - Fix memory leak in SEV INIT_EX path
364f3841bc22 crypto: ccp - Fix possible deadlock in SEV init failure path
5de981b7db1f Revert "drm/msm: dsi: fix PLL init in bonded mode"
96379c2dec72 drm/msm/dp: add missing drm_edid_connector_update() before add_modes on cached EDID
0d37e2503efd RDMA/rxe: Avoid reprocessing the current packet after the QP enters the error state
24ce944721dc RDMA/ipoib: Drain RCU callbacks during module teardown
4664368b9bd9 RDMA/mlx5: Drain RCU callbacks during module teardown
48b72fa0d209 RDMA/core: Wait for RCU callbacks before unloading ib_core
ea4a4237b161 iio: accel: dmard09: Implement IIO_CHAN_INFO_SCALE
13a472452dcd wifi: rtw89: 8852a: fix RSSI report when average beacon RSSI is not ready
280145253fd3 bpf: Mark tracing_multi trampolines as ftrace managed
b7e2a5c6519a bpf: Require a BPF cpumask for bpf_cpumask_populate()
b425cc3913fb clk: qcom: camcc-sc8280xp: unregister CAMCC_GDSC_CLK
b7cd0d057e4f bus: qcom-ebi2: use managed resources for clocks and children
f98700ea1975 soc: qcom: rpmh-rsc: manage PM notifiers with devres
a819fd4479c7 perf metricgroup: Fix metric expression copy leaks
ad44537175f7 clk: spacemit: k3: fix parent clock of UFS aclk
c4e364ecb809 perf record: Fix teardown hang on system-wide multi-threaded sessions
c30c5ae811ee drm/panel: samsung-s6d16d0: Power off on prepare failure
a0ac59897309 usb: chipidea: imx: fix missing ret assignment for dev_err_probe
616dfbd3a0b4 usb: typec: ucsi: gaokun: unwind notifier on UCSI register failure
9ada6c7692c0 usb: renesas_usbhs: Fix power-off ordering on unbind
7a5b2e8ec85a usb: mtu3: allow system suspend during active gadget connection
428a82d987fc platform/surface: acpi-notify: Check ACPI companion before use
d25dd08268ae platform/mellanox: mlxbf-pmc: Check ACPI_COMPANION() against NULL
3308b8c5f5a2 platform/x86: asus-wmi: fix resource leaks on probe failure
e6a9c6b79b70 usb: fix UAF when probe runs concurrent to dyn ID removal
9e6f57107c18 usb: gadget: aspeed_udc: check endpoint DMA allocation
9c4bc8f7426a usb: ljca: bound bank_num in ljca_enumerate_gpio()
969bf1c64b84 usb: typec: tcpm: fix EPR AVS APDO maximum voltage decoding
36315a330e06 usb: gadget: configfs: fix out-of-bounds read of qw_sign
58952c83dfe6 usb: gadget: f_fs: Fix fence cleanup in ffs_dmabuf_transfer() error paths
3819c6f255a3 usb: gadget: uac: validate rate list length before storing
59faa59c25a0 serial: qcom-geni: do not advance stale DMA completions
494bb296407f serial: ma35d1: Fix OF node reference leaks in console init
606f769df00d serial: 8250: Clear CON_PRINTBUFFER on port re-registration
08182086dca4 media: platform: amd: use refcount_t instead of atomic_t
55bb98850f39 spi: qcom-geni: Fix missing error check on pm_runtime_get_sync()
7bfa711f311a platform/x86: asus-wireless: Fail probe when there is no ACPI match
73e2e363a966 perf capstone: Fix kernel map reference count leak
01f6c6ff9ebf selftests/sched_ext: Fix bpf_link leak on early return in prog_run
891aee54b39d hwspinlock: propagate errno when registering single lock
56a3846830ac bpf: Reject rdonly/rdwr_buf_size kfunc arguments that exceed u32 max
bce6b48af3ab remoteproc: qcom_wcnss: Fix handling the lack of PD regulators in v3
5aed51501447 remoteproc: qcom_q6v5_adsp: Fix reference leak for device node
f3614622dc41 bpf: Drop scalar id on sign-extending narrowing stack fills
acc190322250 platform/x86: lg-laptop: Fix LED resource handling
392c19faec6b platform/x86: dell-wmi-base: Fix handling of ultra performance key
f59cd5007055 platform/x86: dell-wmi-base: Fix resource leak on module load failure
ef59ff891adf platform/x86: dell-privacy: Fix race condition
3fd86a5d6fac ACPI: RISC-V: Fix riscv_acpi_add_prt_dep() loop handling
088c1c859213 ACPI: RISC-V: Check acpi_get_handle() status in riscv_acpi_add_prt_dep()
b0f9c3418735 ACPI: RISC-V: Fix riscv_acpi_irq_get_dep() loop termination
8f194dee0c0d printk: Fix possible console use-after-free
a09efb1e256f leds: st1202: Validate LED reg property against channel count
f1a049284bcb leds: st1202: Disable channel when brightness is set to zero
6d711caa9f24 leds: st1202: Fix brightness having no effect while pattern mode is active
14bb601435c0 leds: st1202: Set all pattern PWM slots to full after clearing pattern
037359b67bb9 leds: st1202: Fix spurious pattern sequence start in setup
2e3900c92db2 leds: st1202: Fix pattern duration prescaler and pattern_clear skip marker
523902fc6f2e leds: st1202: Stop pattern sequence before reprogramming
e9d1f11c7049 leds: pca9532: Fix inverted GPIO output polarity
2c1795907ac5 arm64: dts: mediatek: tungsten-smarc: Remove unnecessary cells
585a58a6568d iommu/amd: Fix false positive in SB IOAPIC IVRS validation
5af7fdb7659b iommu/amd: Prevent SB IOAPIC from overriding IVRS validation errors
697c84154983 iommu/msm: Return -ENOMEM on memory allocation failure in probe
35ebd93daaec bpf: Fix security_bpf_map_create error handling
90f661bcfaf3 iommu/mediatek-v1: Fix off-by-one in MT2701_LARB_NR_MAX
21c644536679 bpf: Reject programs with inlined helpers if JIT is not available
8467d5a2fb87 bpf: Introduce jit_required flag and remove bpf_prog_has_kfunc_call()
8f3f64faee33 bus: mhi: ep: Fix device refcount leak in the error path of MHI device creation
2b2a903bee56 bpf: Fix use-after-free on mm_struct in bpf_find_vma()
cab81e3ad948 efi: fix stale reference to efi_recover_from_page_fault()
86d11c594d60 bpf: Fix vmlinux BTF prep race in bpf_get_btf_vmlinux
8e29690f9128 perf dso: Fix kallsyms DSO detection with fallback logic
20740a211572 perf vendor events amd: Reintroduce deprecated Zen 5 core events
7ff668cfc396 drm/amdgpu/mes: Fix hung_queue_db_array loop limit for multi-XCC
272c97f9286d bpftool: Check EVP_Digest when computing excl_prog_hash
c4058355d274 udf: Mark LVID buffer as uptodate before marking it dirty
6be64cca6527 usb: gadget: r8a66597: avoid double free of ep0_req in probe error path
62efee351566 usb: typec: ucsi: unregister debugfs entries on teardown
d67607e77495 thermal/drivers/rcar: Fix error checking in probe()
437d6d15936d staging: media: ipu7: fix pm_runtime refcount leak in ipu7_resume()
acd23fc1af6f staging: media: ipu7: fix pm_runtime refcount leak in ipu7_init_fw_code_region_by_sys()
19d5566b84ca bpf: Reject writes through untrusted BTF pointers
1238e1c7e5d3 perf data convert json: Fix trace_seq memory leak in process_sample_event()
6993d1fdb9de perf record: fix poll storm when monitored threads exit
f7a1cf9f679d clk: qcom: gcc-qcs8300: Use retention for USB power domains
8dcdeb8e2337 clk: qcom: gcc-qcs8300: Use retention for PCIe power domains
6ccc420af818 arm64: dts: qcom: sc8180x-lenovo-flex-5g: Describe the display power net
1d6f9c6e8452 arm64: dts: qcom: sc8180x-lenovo-flex-5g: Rename regulator nodes
c7e72d6d5126 arm64: dts: qcom: sc8180x-primus: Describe the display power net
c64326ede83c arm64: dts: qcom: sc8180x-primus: Rename regulator nodes
9ff0ec945a73 arm64: dts: qcom: sdm670-google: add lpi reserved gpios
488c42ff7f42 arm64: dts: qcom: sm6125-xiaomi-laurel-sprout: Fixup panel compatible
07bb368ae12b arm64: dts: qcom: sc8280xp-arcata: Fix top USB-C DP alt mode
40bd77fa2857 clk: qcom: gdsc: tear down per-domain genpds in gdsc_unregister()
fade2037ee2a clk: qcom: gdsc: propagate gdsc_enable() failure for ALWAYS_ON domains
02533b6cf5f6 clk: qcom: gdsc: propagate gdsc_check_status() errors from gdsc_poll_status
609ebd03deee arm64: dts: qcom: Add #{address,size}-cells to Chromium-based /firmware
ac2f3219b330 timekeeping: Account for monotonicity adjustment in ntp_error
ad25b583d591 y2038: uapi: Use 64-bit __kernel_old_timespec::tv_nsec on x32
1f0c3c0c36c7 time/namespace: Validate nanosecond field in proc_timens_set_offset()
a36bf15ab84c timers/migration: Fix memory leak in tmigr_setup_groups() error path
7099de4de14a timekeeping: Unwind aux clock sysfs children on failure
2a4ffc16d3a7 clocksource: Unregister subsystem on device registration failure
d739c63bfa38 selftests: timers: leap-a-day: Fix -w option and update usage comment
dd3253793697 irqchip/gic-v3-its: Fix its node leak in gic_acpi_parse_madt_its()
de5d0190c97f irqchip/gic-v3-its: Fix memleak in its_probe_one()
10f639168da5 selftests/lsm: Fix memory leak in attr_lsm_count
ab0c755ad5e7 selftests/bpf: Fix memory leak in msg_alloc_iov
88500a86ab79 s390/bpf: Replace ly instruction with llgf
e626a50d07d4 bpf: Reject MEM_ALLOC BTF accesses past object bounds
5280e0d3d6a5 selftests/bpf: Fix memory leak in msg_alloc_iov error path
091600519548 selftests/bpf: libarena: Clean up allocation state before buddy tests
c812c2ff5507 ALSA: via82xx: Remove unreachable branch in snd_via686_pcm_pointer()
08d6d9800e2e kbuild: unset sub_make_done before calling kselftest build system
911190f0b951 staging: rtl8723bs: fix mismatched free of HalData in rtw_sdio_if1_init()
b2243ffaac14 staging: octeon: add missing napi_disable in cvm_oct_rx_shutdown
41a79bd9e5a7 staging: octeon: add missing tasklet_kill in cvm_oct_tx_shutdown
b7fa32159dc5 staging: fbtft: Use sysfs_emit_at() to print to sysfs file
cfcc5a41a966 greybus: audio: bound the topology section sizes against the fetched size
d13a82297796 staging: sm750fb: Add missing Kconfig dependency
dd5767bd4240 staging: sm750fb: gate dualview dataflow using g_dualview
fbf9e0f2d536 staging: greybus: audio: correct sscanf() return value check
1c2a4ab6efa2 wifi: mac80211_hwsim: avoid NULL skb in stop queue drain
b2adb0e2f313 PCI: qcom: Skip PERST# GPIOs provided by downstream PCIe devices
c6eca03162e1 bus: qcom-ebi2: Fix clock leak on probe failure
f28e11937832 arm64: dts: qcom: sc8280xp: sort reserved memory regions
7a9ab46f1e2e clk: qcom: gcc-glymur: Move EVA clocks to critical clock list
784d168036a4 arm64: dts: glymur-crd: Add reset GPIO to touchscreen node
368b8e429965 arm64: dts: qcom: glymur-crd: Move common board nodes to shared DTSI
45f5512f1311 arm64: dts: qcom: glymur-crd: Add Embedded controller node
6f1ed14f6c5e arm64: dts: qcom: glymur: Fix gcc clock specifier for usb_mp_qmpphy nodes
144094da5b91 arm64: dts: qcom: glymur: Fix unit-address mismatch for spmi_bus2
da9ddc8ba43c arm64: dts: qcom: hamoa: Fix clocks for HSPHYs
19c802bcaf76 arm64: dts: qcom: sm6125: Use 64 bit addressing
f78fcc42099f arm64: dts: qcom: sm7225-fairphone-fp4: Fix address in fb node name
e7483891df45 arm64: dts: qcom: sc8280xp-blackrock: switch to uefi rtc offset
4b6f2aebaa92 arm64: dts: qcom: monaco: fix wrong connection for the replicator
bee77cd34ce8 clk: qcom: gxclkctl: Use custom disable callback for gx_gdsc
dee085f96cb9 clk: qcom: gdsc: Add custom disable callback for GX GDSC
78d9daf5e13a cgroup/cpuset: Make nr_deadline_tasks an atomic_t
195d7cca6433 PM: sleep: Fix off-by-one in wakelocks number limit check
46b5a0f22bfd bus: ti-sysc: Fix /chosen node reference leak
d553a9dc1c45 nvmet-rdma: fix response resource leak on queue teardown
e24951cab8aa nvmet-rdma: factor out response resource cleanup
840ab22ffa4d nvme-apple: Use acquire/release for queue enabled state
0550a269c04b fuse: move "epoch" from dentry.d_time to fuse_dentry.epoch
02d4ee65dc2e RDMA/bng_re: return a timeout when firmware responses stall
ec790449ad22 arm64: dts: qcom: talos: Fix GMU unit address
59d485a6289c arm64: dts: qcom: sm8750: wire UFS to ice instance
a6c0e693a7c8 RDMA/irdma: Add refcounting to user ring MRs
ff994bedc669 RDMA/irdma: Add irdma_cq fields to track pbl allocations
e4df2e98e439 RDMA/irdma: Add a refcount to track user ring MR associations
dc043b8d976d RDMA/irdma: Deduplicate the irdma_del_memlist logic
a3217fe79986 crypto: keembay - Fix AEAD unregister count in error path
0a261177ad32 crypto: rk3288 - fail ahash requests on HASH idle timeout
9486a6bcc90d hwrng: omap - Fix probe error path cleanup
bdc3b37a935f hwrng: xilinx-trng - propagate timeout before any data is read
b68b35ed97d3 crypto: sa2ul - stop probe if context pool creation fails
94abda77b57a crypto: atmel-sha204a - fix heap info leak on I2C transfer failure
add28e998890 crypto: atmel-ecc - reject hardware ECDH without a public key
92e4979e1a77 crypto: qat - clear AES key schedule from stack
1a106c6e1752 crypto: qat - cancel work on re-enable SR-IOV timeout
bee8d1fcdc8f hwrng: core - fix rng list on registration error
15732636ac12 perf vendor events amd: Update Zen 6 core events
e9d249a23184 perf vendor events amd: Update Zen 5 core events
6959e254f522 perf test amd ibs: avoid using executable heap
1b3d6fef10e6 perf/x86/amd/uncore: Add group validation
945e335da340 libbpf: Detect uprobe syscall with new error
7273ac5e7240 libbpf: Change has_nop_combo to work on top of nop10
16776fb9c55d perf cs-etm: Filter synthesized branch samples
54080d72abb3 perf cs-etm: Fix thread leaks on trace queue init failure
56e2ff5c9be1 tools/nolibc: mark arg1 operand in __nolibc_syscall0() as write-only
08af0f96120a fanotify: initialize permission event watchdog state
1b3fecd09910 uprobes/x86: Move optimized uprobe from nop5 to nop10
310a504467a1 uprobes/x86: Allow to copy uprobe trampolines on fork
88a3464c421f uprobes/x86: Do not leak trampoline vma mapping on optimization failure
1ca1ca70e90a uprobes/x86: Remove struct uprobe_trampoline object
f132fc01b359 wifi: rtw89: fix HE extended capability length check
942becee7e78 wifi: rtw89: check return values in rtw89_ops_start_ap()
80ea28c94cf1 wifi: rtw89: fw: fix link ID filling for LPS MLO common info
6268f46d8387 platform/chrome: sensorhub: Fix memory overread in ring handler
582b5e536245 wifi: rtw89: fw: correct preload field of w2 in rtw89_fw_h2c_default_cmac_tbl_be()
876b110114da wifi: rtw89: debug: fix off by on in rtw89_ppdu_str()
e984c63bd335 selftests/rseq: Replace glibc-specific __GNUC_PREREQ with portable check
343aa5275484 csky: Fix a4/a5 restoration in syscall trace path
feb0901bbcaf iio: orientation: hid-sensor-rotation: Avoid race between callback setup and device exposure
c1900758c3a8 soundwire: qcom: Fix port exhaustion check in stream_alloc_ports
8b5654d31727 dmaengine: xilinx_dma: Fix CPU stall in xilinx_dma_poll_timeout
54c9b3315ada dmaengine: hisilicon: Return -ENOMEM on dynamic memory allocation in probe
aec7cf9a5bd8 dmaengine: zynqmp_dma: fix race between runtime PM and device removal
c3e943490ced dmaengine: xilinx_dma: Fix channel idle state management in AXIDMA and MCDMA interrupt handlers
8896852b6fcd dmaengine: mediatek: mtk-uart-apdma: Return -ENOMEM on memory allocation failure
7d83720d0741 leds: lp5860-spi: Fix an error handling path
989f3d01fc19 leds: lp5860: Fix a potential double-unlock
1017fe1c7f48 mm/mm_init: handle alloc_percpu failure in free_area_init_core_hotplug
915c2d9d69fc bpf,lsm: Drop bpf_prog_free from sleepable_lsm_hooks
1d39861b9c41 selftests/bpf: Mask socket type flags in mptcpify prog
ff3f22ed8d2f bpf: Copy per-CPU map value padding in copy_map_value_long()
03b44839ce81 tools/bpf/bpftool: Reset vmlinux BTF after struct_ops commands
f6fd865651cc tools/bpf/bpftool: Reset vmlinux BTF after map commands
8d52adf7c923 bpftool: Strip all -Wformat* flags from bootstrap libbpf build
32bd68edbc6c drm/amd/display: Fix dangling pointer in CRTC reset function
80c0f51aced4 drm/amd/display: Fix dangling pointer in plane reset function
4bd683d1a7d3 ASoC: ti: j721e-evm: Avoid mixing goto with guard()
daaac025b158 ASoC: samsung: i2s: Avoid mixing goto with guard()
06aef6dcc1d5 drm/amdgpu/pm/powerplay: bounds-check voltage index in Vega10 lookup
1664327ce797 drm/amdgpu/pm/powerplay: bounds-check voltage index in SMU7 lookup
83c680de6d41 drm/amd/powerplay: fix VoltageObjectInfo zero-stride loop and OOB read
fceac25487b2 regulator: tps6594: Fix device node reference leaks in multiphase loop
f88c65473f52 PCI: imx6: Fix building against PCI_PWRCTRL_GENERIC
6d0343961ceb PCI: imx6: Fix building against PCI_HOST_COMMON
385f7a0f62b2 perf tests: Fix flakiness in branch stack sampling tests
8c0a67e54ec3 perf tests: Fix flakiness in BPF counters test on hybrid systems
16d72de0201e perf tests: Fix flakiness in trace record and replay test
cf79e50a1d30 perf tests: Add robust record retry helper and use subsecond workloads
a69133af55da perf tests: Fix Python JIT dump profiling test failure
5aa6eb9129c4 perf tests: Skip metrics validation if system-wide recording lacks permission
63aa9756ce0b perf test: Truncate test description to fit terminal width
b0f59d0a779e perf parse-events: Restrict core PMU bypass to --cputype option
2097ae16533d perf evlist: Add reference count checking
fa437210fcbd perf evsel: Add reference count
744f25f0cbab perf evlist: Add reference count
a1a3ba14f443 perf util: Sort includes and add missed explicit dependencies
5678f866a499 perf pmu: Recognize default_core as a core PMU in more places
e482f9ee9776 wifi: ath12k: correct monitor destination ring size
de3e55613780 wifi: ath12k: fix TLV32 length mask
82396ecb8f51 media: keymaps: Remove obsolete RC_MAP_HAUPPAUGE_NEW keymap define
4661b90eb66f media: keymaps: Remove obsolete RC_MAP_RC5_TV keymap define
b7f54ac6a131 cxl/test: Propagate -ENOMEM on platform_device_alloc() failures
348a95be3238 cxl/test: Add hierarchy enumeration support for type2 device
3e0285b77f51 cxl/test: Refactor platform device enumerations
3f6fba439a2d cxl/test: Add test for module parameters
66aa3763cf3f perf test: Skip failing 'perf test aslr' test case
15a6207d39b1 workqueue: only show running workers in stall diagnostics
0d98c5669d01 riscv: kexec_file: Fix crashk_low_res not exclude bug
23d41b2e6876 drm/panthor: Fix NPD issue on partial unmap of an evicted BO
f01cb1172944 drm/panthor: Support sparse mappings
e215d705f5a0 drm/panthor: Pass vm_bind_op to vm_prepare_map_op_ctx
727f043d699a pinctrl: bcm2835: Don't remove an unregistered GPIO chip
76777e5d5139 perf/x86/intel: Keep cap_user_rdpmc in sync with RDPMC user-disable state
1a6a214f732d pinctrl: imx1: fix device_node leak in dt_is_flat_functions()
64aa1bb4017d perf/x86/intel/uncore: Fix uncore_box ref/unref ordering
9c8967bcbb77 perf/x86/intel/uncore: Introduce PMU flags and broken state
23fcbd6df3fd perf/x86/intel/uncore: Factor out box setup code
18f4d9316215 perf/x86/intel/uncore: Let init_box() callback report failures
c27d15aac37a perf/x86/intel/uncore: Fix refcnt and other cleanups
5026e40cf926 perf/x86/intel/uncore: Fix PCI PMU cleanup on setup failure
a48296454b48 perf/x86/intel/uncore: Keep PCI PMUs working when MMIO/MSR setup fails
f94e62d21faa sched/fair: Fix overflow in update_tg_cfs_runnable()
089e307fda2e sched/core: Fix inter-class wakeup_preempt()
d452a11898eb mm/mm_init: fix incorrect node_spanned_pages
e0773ad25a34 drm/lima: call drm_mm_init() with a valid allocation range
666700062f1c clk: imx: scu: drop redundant init.ops variable assignment
99a07a897670 arm64: dts: imx8mp-ab2: Enable MU2 for DSP communication
11047c7ed5cc arm64: dts: freescale: imx95-toradex-smarc: add alias for lpuart5
4e29df25bbe6 arm64: dts: imx93-kontron: set memory node to 0x80000000/1GiB
db414a1cb1d4 firmware: imx: sm-misc: Add NULL check for kmalloc in syslog_show
bea093a6e388 ARM: OMAP2+: Fix OF node reference leaks in omap_hwmod
67c9db97fa08 ARM: imx: fix device_node refcount leaks in imx7_src_init()
6b60c84e7846 ARM: imx: fix device_node refcount leak in imx_src_init()
48852aed1070 clk: hisilicon: reset: Use devm_kzalloc to initialize hisi_reset_controller
eebc053abef6 arm64: dts: imx8mp-frdm: Add missing HDMI DDC pinctrl
22c944e440bc ASoC: fsl_audmix: rework runtime PM handling in probe
a47f087877bb ASoC: rt700-sdw: always drain jack work on remove
3d9f55585297 clk: stm32: add missing bitfield.h header
a0a546a9625d clk: nuvoton: ma35d1: fix ma35d1_clk_pll_determine_rate logic
ff955d3d1c45 clk: nuvoton: ma35d1: fix PLL_CTL1_FRAC bit field width and fractional calc
0a6901e715ba clk: nuvoton: ma35d1: fix ignored div_u64 return values in PLL freq calculation
36d5c243d2db clk: moxart: remove unused variables, fix refcount leak
69815429f8bc clk: eswin: Add CLK_IGNORE_UNUSED to NoC clock
c37fa5d8b2a6 clk: canaan: Clear rate fields before reprogramming dividers
7b38ddc1c1fb clk: versaclock7: Fix APLL clock leak on probe failure
9c2b1efef253 ARM: imx: avic: Fix OF node reference leaks
f0c12add5439 cxl/pci: Remove incorrect mbox.valid check in cxl_pci_type3_init_mailbox()
723808b2c117 arm64: dts: imx943: Correct PCIe outbound address space configuration
0c6897bdadff arm64: dts: imx94: Correct PCIe outbound address space configuration
b4e11c731d6b cxl/mbox: Clamp mailbox output allocation to the payload size
4992cdc4eb97 ASoC: SOF: ipc4-topology: Return error for invalid number of formats
a81768b43b59 mtd: rawnand: pl353: Fix debug prints
6559174fcb15 media: cec-pin: Fix event FIFO ordering
394dec22a5d5 soc: samsung: exynos-pmu: fix of_node refcount leak in exynos_get_pmu_regmap()
99330b12376c HID: roccat: bound device-supplied profile index
12c889727ddc HID: nintendo: Fix imu_timestamp_us double increment per report
0fecd89f979a HID: core: quiesce input in hid_hw_stop() to prevent use-after-free
b1af4cccae71 selftests: proc: include fcntl.h in proc-pidns
54d6b0ee9b8b platform/chrome: cros_ec_typec: Reject out-of-bounds PD cap count
aeb3e0083a07 x86/cfi: Use symmetric SYM_START and SYM_END in __CFI_TYPE()
6a052a154106 drm/bridge: of-display-mode-bridge: Fix missing static const for the bridge funcs
26cb44b0afff sched_ext/scx_flatcg: Fix cvtime_delta race and add hweight scaling to bypass charging
c776670f4ec9 cgroup/cpuset: Avoid unnecessary cpus & mems update in cpuset_hotplug_update_tasks()
f2df709905ab smack: restrict smackfs/{direct,mapped} values to 0-255
4d27a8221010 smack: deduplicate smackfs/{direct,mapped} file_operations
c62a81889718 smack: simplify write handlers of sysfs entries
d02c55e3ea82 smack: fix incorrect task context in smack_msg_queue_msgrcv
66f8255d1dd0 drm/bridge: cdns-mhdp8546: Return an error pointer on allocation failure
4a2355385486 drm/bridge: cdns-dsi: Return an error pointer on allocation failure
b49e7a24cf5b rust: drm: gpuvm: update DriverGpuVm for DeviceContext
c69e63065f35 drm/rockchip: vop2: Recognise 10-bit YUV422 as YUV format
a53cc0561dd1 drm/rockchip: vop2: Add RK3576 to the RG swap special case
0d3364597322 drm/display: hdmi-state-helper: Try subsampling in mode_valid
0b9878aba5cf drm/v3d: Clear queue->active_job when v3d_fence_create() fails
3b259831b738 gpu: nova-core: gsp: tu102: keep unloading if FWSEC-SB fails
23c02299e7d1 drm/bridge: display-connector: trigger initial HPD event for DP
a1303a44165d drm/bridge: display-connector: don't autoenable HPD IRQ
887315e5d2eb drm/rockchip: analogix_dp: Fix OF node reference leak via auto cleanup
4cd23a6e5c9d drm/rockchip: analogix_dp: Enable hclk for RK3588
69173c1ebede drm/rockchip: vop2: Wait for layer cfg done before switching LAYERSEL_REGDONE_SEL
e83dbc07404a drm/rockchip: vop2: Fix wrong wait target in layer cfg done check
11f07929f454 drm/rockchip: dw_dp: Release core resources
b66710d95db2 drm/rockchip: dw_dp: Add missing newline in dev_err_probe() message
48aaa495e24c drm/bridge: synopsys: dw-dp: Support unregistering the AUX channel
317dc1ead82e drm: lcdif: Wait for vblank before disabling DMA
ef28f1970de4 drm/tegra: dsi: Re-add clear enable register if DSI was powered by bootloader
873fab4fa057 drm/atomic: Drop drm_private_obj.state assignment from create_state
20a30536d60e drm: Remove unused header in drm_dumb_buffers.c
b34b41c5bda7 Smack: Fix error in capability bypass
dfc4ee8954d3 KVM: x86: Check EFER validity on KVM_SET_SREGS*
8fb2065261ec KVM: x86: Move the bulk of register specific code from x86.c to regs.c
562f2b0c8824 KVM: x86: Rename __{g,s}et_sregs2() => kvm_vcpu_ioctl_x86_{g,s}et_sregs2()
515dead3bb64 KVM: x86: Move get_segment_base() to regs.h, as kvm_get_segment_base()
e92b03627ad8 KVM: x86: Extract REGS and SREGS runtime sync code to helpers
34c1d674cef8 clk: qcom: Fix test_ctl_hi field for DEFAULT_EVO PLLs
6a78b7697a88 mm/mremap: reset unfaulted VMA page offset for MREMAP_DONTUNMAP
b1e740b91566 nvdimm: virtio_pmem: refcount requests for token lifetime
c4a140f0a30f nvdimm: virtio_pmem: use READ_ONCE()/WRITE_ONCE() for wait flags
fc25f9a9db8e nvdimm: virtio_pmem: always wake -ENOSPC waiters
c9cd77db17a9 nvdimm: virtio_pmem: stop allocating child flush bio
72561ca1ab96 nvdimm: pmem: keep PREFLUSH before data writes
e9414030257b nvdimm: preserve flush callback -ENOMEM
007bc1842317 memcg: move LRU size accounting on reparenting instead of copying it
4e30fbd26e84 ksmbd: fix tree connection use-after-free in smb2_tree_connect()
a6c88e5e3a75 smb/server: fix tree connection leak in smb2_tree_connect()
35d5c59fe6b1 ksmbd: fix maximum allowed access checks
7fa251df1110 btrfs: abort transaction before releasing tree_log_mutex on commit failure
9cf8c4c60020 tracing/probes: Fix BTF kflag check for anonymous struct member access
b8f5e4ab11e0 tracing/probes: ignore id update from btf_type_skip_modifiers
15f78eea8c4b staging: sm750fb: fix mono image source stride mismatch in lynxfb_ops_imageblit()
daed571f85fe udf: Fix data loss when converting inline inodes to out of line
d347c971aadd udf: Move udf_map_block() up
4822a030929e dm-pcache: validate the persisted dirty_tail chain at load
150e71808d37 i3c: master: Do not treat master device as a duplicate target
50034d8d0f79 i3c: master: Fix use-after-free of master->this
b4bf8af5e7d7 dm-pcache: validate seg_id fields from persistent memory
9dc73c51ed3e i3c: master: Fix recursive locking during device registration
6ecf17bf5fe8 i3c: master: Fix device_register() error path
96b066831f6e mm/damon/core: skip aging from repeated aggressive merging
e54602d9e38d batman-adv: bla: avoid CRC corruption due to parallel claim add
f68038c77a2f batman-adv: dat: atomically update mac addresses
fe3772ea9d26 drm/amd/display: Scale custom brightness curve from full range