933 Commits

Author	SHA1	Message	Date
jianzhou	7c8fe0d3ae	Merge keystone/android14-6.1-keystone-qcom-release.6.1.57 (97abf17) into qcom-6.1 ... * refs/heads/tmp-97abf17: ANDROID: GKI: Update symbol list for mtk ANDROID: Update the ABI symbol list ANDROID: GKI: Update symbol list for mtk ANDROID: mm: lru_cache_disable skips lru cache drainnig ANDROID: mm: cma: introduce __cma_alloc API ANDROID: Update the ABI representation BACKPORT: fscrypt: support crypto data unit size less than filesystem block size UPSTREAM: netfilter: nf_tables: remove catchall element in GC sync path ANDROID: GKI: Update oplus symbol list ANDROID: vendor_hooks: export tracepoint symbol trace_mm_vmscan_kswapd_wake BACKPORT: HID: input: map battery system charging ANDROID: fuse-bpf: Ignore readaheads unless they go to the daemon FROMGIT: freezer,sched: clean saved_state when restoring it during thaw FROMGIT: freezer,sched: do not restore saved_state of a thawed task FROMGIT: f2fs: skip adding a discard command if exists UPSTREAM: f2fs: clean up zones when not successfully unmounted UPSTREAM: f2fs: use finish zone command when closing a zone UPSTREAM: f2fs: check zone write pointer points to the end of zone UPSTREAM: f2fs: close unused open zones while mounting UPSTREAM: f2fs: maintain six open zones for zoned devices ANDROID: update symbol for unisoc whitelist ANDROID: vendor_hooks: mm: add hook to count the number pages allocated for each slab ANDROID: Update the ABI symbol list ANDROID: sched: Add trace_android_rvh_set_user_nice_locked UPSTREAM: ASoC: soc-compress: Fix deadlock in soc_compr_open_fe BACKPORT: ASoC: add snd_soc_card_mutex_lock/unlock() BACKPORT: ASoC: expand snd_soc_dpcm_mutex_lock/unlock() BACKPORT: ASoC: expand snd_soc_dapm_mutex_lock/unlock() ANDROID: GKI: Update symbol list for mtk ANDROID: Update the ABI symbol list ANDROID: sched: Add vendor hook for update_load_sum FROMGIT: freezer,sched: clean saved_state when restoring it during thaw FROMGIT: freezer,sched: do not restore saved_state of a thawed task ANDROID: GKI: add allowed list for Exynosauto SoC ANDROID: KVM: arm64: pkvm_module_ops documentation ANDROID: Update the ABI symbol list UPSTREAM: usb: typec: tcpm: Fix NULL pointer dereference in tcpm_pd_svdm() ANDROID: GKI: Update oplus symbol list UPSTREAM: drm/qxl: fix UAF on handle creation FROMGIT: usb:gadget:uvc Do not use worker thread to pump isoc usb requests FROMGIT: usb: gadget: uvc: Fix use-after-free for inflight usb_requests FROMGIT: usb: gadget: uvc: move video disable logic to its own function FROMGIT: usb: gadget: uvc: Allocate uvc_requests one at a time FROMGIT: usb: gadget: uvc: prevent use of disabled endpoint UPSTREAM: drm/fourcc: Add NV20 and NV30 YUV formats FROMLIST: virt: geniezone: Add memory relinquish support FROMGIT: Input: uinput - allow injecting event times UPSTREAM: PM: hibernate: Fix copying the zero bitmap to safe pages UPSTREAM: PM: hibernate: don't store zero pages in the image file UPSTREAM: PM: hibernate: Complain about memory map mismatches during resume FROMLIST: devcoredump: Send uevent once devcd is ready FROMLIST: iommu: Avoid more races around device probe ANDROID: Update the ABI symbol list FROMLIST: ufs: core: clear cmd if abort success in mcq mode BACKPORT: wifi: cfg80211: Allow AP/P2PGO to indicate port authorization to peer STA/P2PClient BACKPORT: wifi: cfg80211: OWE DH IE handling offload ANDROID: KVM: arm64: mount procfs for pKVM module loading ANDROID: GKI: Update symbol list for mtk ANDROID: fuse-bpf: Add NULL pointer check in fuse_release_in UPSTREAM: serial: 8250_port: Check IRQ data before use ANDROID: KVM: arm64: Fix error path in pkvm_mem_abort() ANDROID: abi_gki_aarch64_qcom: Update symbol list ANDROID: GKI: add allowed list for Exynosauto SoC ANDROID: Update the ABI symbol list ANDROID: sched: Add vendor hook for util_fits_cpu ANDROID: update symbol for unisoc vendor_hooks ANDROID: vendor_hooks: mm: add hook to count the number pages allocated for each slab UPSTREAM: usb: gadget: udc: Handle gadget_connect failure during bind operation ANDROID: Update the ABI symbol list ANDROID: softirq: Add EXPORT_SYMBOL_GPL for softirq and tasklet ANDROID: mm/mempolicy.c fix up conversion to queue_folios_pte_range Revert "net: add sysctl accept_ra_min_rtr_lft" Revert "net: change accept_ra_min_rtr_lft to affect all RA lifetimes" Revert "net: release reference to inet6_dev pointer" Revert "ata,scsi: do not issue START STOP UNIT on resume" Revert "scsi: sd: Differentiate system and runtime start/stop management" Revert "scsi: sd: Do not issue commands to suspended disks on shutdown" Revert "wifi: cfg80211: fix cqm_config access race" Revert "netfilter: handle the connecting collision properly in nf_conntrack_proto_sctp" Revert "arm64: errata: Add Cortex-A520 speculative unprivileged load workaround" Revert "video/aperture: Only remove sysfb on the default vga pci device" Revert "drm/ast: Use drm_aperture_remove_conflicting_pci_framebuffers" Revert "fbdev/radeon: use pci aperture helpers" Revert "drm/gma500: Use drm_aperture_remove_conflicting_pci_framebuffers" Revert "drm/aperture: Remove primary argument" Revert "video/aperture: Only kick vgacon when the pdev is decoding vga" Revert "video/aperture: Move vga handling to pci function" Revert "fs/nls: make load_nls() take a const parameter" Revert "dm: fix a race condition in retrieve_deps" ANDROID: GKI: db845c: add new dma_buf symbols to list UPSTREAM: lib/test_meminit: fix off-by-one error in test_pages() ANDROID: GKI: add guards for an include file in net/ethtool/ioctl.c ANDROID: GKI: update .stg due to internal zswap and tracing changes ANDROID: GKI: db845c: add pcie_capability_clear_and_set_word to the symbol list ANDROID: GKI: sched: put back the cpu_capacity_inverted variable Revert "ipv4: fix data-races around inet->inet_id" Revert "usb: typec: bus: verify partner exists in typec_altmode_attention" Revert "scsi: core: Use 32-bit hostnum in scsi_host_lookup()" Revert "media: cec: core: add adap_nb_transmit_canceled() callback" Revert "media: cec: core: add adap_unconfigured() callback" Revert "tracing: Introduce pipe_cpumask to avoid race on trace_pipes" Revert "tracing: Zero the pipe cpumask on alloc to avoid spurious -EBUSY" Revert "PCI: Allow drivers to request exclusive config regions" Revert "PCI: Add locking to RMW PCI Express Capability Register accessors" Revert "crypto: api - Use work queue in crypto_destroy_instance" Revert "media: uapi: HEVC: Add num_delta_pocs_of_ref_rps_idx field" Linux 6.1.57 xen/events: replace evtchn_rwlock with RCU ipv6: remove one read_lock()/read_unlock() pair in rt6_check_neigh() btrfs: file_remove_privs needs an exclusive lock in direct io write netlink: remove the flex array from struct nlmsghdr btrfs: fix fscrypt name leak after failure to join log transaction btrfs: fix an error handling path in btrfs_rename() vrf: Fix lockdep splat in output path ipv6: remove nexthop_fib6_nh_bh() parisc: Restore __ldcw_align for PA-RISC 2.0 processors ksmbd: fix uaf in smb20_oplock_break_ack ksmbd: fix race condition between session lookup and expire x86/sev: Use the GHCB protocol when available for SNP CPUID requests RDMA/mlx5: Fix NULL string error RDMA/mlx5: Fix mutex unlocking on error flow for steering anchor creation RDMA/siw: Fix connection failure handling RDMA/srp: Do not call scsi_done() from srp_abort() RDMA/uverbs: Fix typo of sizeof argument RDMA/cma: Fix truncation compilation warning in make_cma_ports RDMA/cma: Initialize ib_sa_multicast structure to 0 when join gpio: pxa: disable pinctrl calls for MMP_GPIO gpio: aspeed: fix the GPIO number passed to pinctrl_gpio_set_config() IB/mlx4: Fix the size of a buffer in add_port_entries() of: dynamic: Fix potential memory leak in of_changeset_action() RDMA/core: Require admin capabilities to set system parameters dm zoned: free dmz->ddev array in dmz_put_zoned_devices parisc: Fix crash with nr_cpus=1 option smb: use kernel_connect() and kernel_bind() intel_idle: add Emerald Rapids Xeon support HID: intel-ish-hid: ipc: Disable and reenable ACPI GPE bit HID: sony: remove duplicate NULL check before calling usb_free_urb() netlink: annotate data-races around sk->sk_err netlink: Fix potential skb memleak in netlink_ack netlink: split up copies in the ack construction sctp: update hb timer immediately after users change hb_interval sctp: update transport state when processing a dupcook packet tcp: fix delayed ACKs for MSS boundary condition tcp: fix quick-ack counting to count actual ACKs of new data tipc: fix a potential deadlock on &tx->lock net: stmmac: dwmac-stm32: fix resume on STM32 MCU ipv4: Set offload_failed flag in fibmatch results netfilter: nf_tables: nft_set_rbtree: fix spurious insertion failure netfilter: nf_tables: Deduplicate nft_register_obj audit logs selftests: netfilter: Extend nft_audit.sh selftests: netfilter: Test nf_tables audit logging netfilter: handle the connecting collision properly in nf_conntrack_proto_sctp ibmveth: Remove condition to recompute TCP header checksum. net: ethernet: ti: am65-cpsw: Fix error code in am65_cpsw_nuss_init_tx_chns() net: nfc: llcp: Add lock when modifying device list net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg ipv6: tcp: add a missing nf_reset_ct() in 3WHS handling net: dsa: mv88e6xxx: Avoid EEPROM timeout when EEPROM is absent ptp: ocp: Fix error handling in ptp_ocp_device_init ipv4, ipv6: Fix handling of transhdrlen in __ip{,6}_append_data() neighbour: fix data-races around n->output neighbour: switch to standard rcu, instead of rcu_bh neighbour: annotate lockless accesses to n->nud_state bpf: Add BPF_FIB_LOOKUP_SKIP_NEIGH for bpf_fib_lookup net: fix possible store tearing in neigh_periodic_work() modpost: add missing else to the "of" check bpf, sockmap: Reject sk_msg egress redirects to non-TCP sockets bpf, sockmap: Do not inc copied_seq when PEEK flag set bpf: tcp_read_skb needs to pop skb regardless of seq NFSv4: Fix a nfs4_state_manager() race ima: rework CONFIG_IMA dependency block scsi: target: core: Fix deadlock due to recursive locking ima: Finish deprecation of IMA_TRUSTED_KEYRING Kconfig regulator/core: regulator_register: set device->class earlier iommu/mediatek: Fix share pgtable for iova over 4GB perf/x86/amd: Do not WARN() on every IRQ wifi: mac80211: fix potential key use-after-free regmap: rbtree: Fix wrong register marked as in-cache when creating new node perf/x86/amd/core: Fix overflow reset on hotplug wifi: mt76: mt76x02: fix MT76x0 external LNA gain handling drivers/net: process the result of hdlc_open() and add call of hdlc_close() in uhdlc_close() Bluetooth: ISO: Fix handling of listen for unicast Bluetooth: Delete unused hci_req_prepare_suspend() declaration regulator: mt6358: split ops for buck and linear range LDO regulators regulator: mt6358: Use linear voltage helpers for single range regulators regulator: mt6358: Drop *_SSHUB regulators bpf: Fix tr dereferencing leds: Drop BUG_ON check for LED_COLOR_ID_MULTI wifi: mwifiex: Fix oob check condition in mwifiex_process_rx_packet wifi: cfg80211: add missing kernel-doc for cqm_rssi_work wifi: cfg80211: fix cqm_config access race wifi: cfg80211: add a work abstraction with special semantics wifi: cfg80211: move wowlan disable under locks wifi: cfg80211: hold wiphy lock in auto-disconnect wifi: iwlwifi: mvm: Fix a memory corruption issue wifi: iwlwifi: dbg_ini: fix structure packing erofs: fix memory leak of LZMA global compressed deduplication ubi: Refuse attaching if mtd's erasesize is 0 HID: sony: Fix a potential memory leak in sony_probe() arm64: errata: Add Cortex-A520 speculative unprivileged load workaround arm64: Add Cortex-A520 CPU part definition drm/amd: Fix logic error in sienna_cichlid_update_pcie_parameters() drm/amd: Fix detection of _PR3 on the PCIe root port net: prevent rewrite of msg_name in sock_sendmsg() net: replace calls to sock->ops->connect() with kernel_connect() PCI: qcom: Fix IPQ8074 enumeration md/raid5: release batch_last before waiting for another stripe_head wifi: mwifiex: Fix tlv_buf_left calculation Bluetooth: hci_sync: Fix handling of HCI_QUIRK_STRICT_DUPLICATE_FILTER Bluetooth: hci_codec: Fix leaking content of local_codecs qed/red_ll2: Fix undefined behavior bug in struct qed_ll2_info mptcp: userspace pm allow creating id 0 subflow net: ethernet: mediatek: disable irq before schedule napi vringh: don't use vringh_kiov_advance() in vringh_iov_xfer() iommu/vt-d: Avoid memory allocation in iommu_suspend() scsi: zfcp: Fix a double put in zfcp_port_enqueue() i40e: fix the wrong PTP frequency calculation hwmon: (nzxt-smart2) add another USB ID hwmon: (nzxt-smart2) Add device id block: fix use-after-free of q->q_usage_counter rbd: take header_rwsem in rbd_dev_refresh() only when updating rbd: decouple parent info read-in from updating rbd_dev rbd: decouple header read-in from updating rbd_dev->header rbd: move rbd_dev_refresh() definition iommu/arm-smmu-v3: Avoid constructing invalid range commands iommu/arm-smmu-v3: Set TTL invalidation hint better drm/amd/display: Adjust the MST resume flow arm64: cpufeature: Fix CLRBHB and BC detection net: release reference to inet6_dev pointer net: change accept_ra_min_rtr_lft to affect all RA lifetimes net: add sysctl accept_ra_min_rtr_lft arm64: Avoid repeated AA64MMFR1_EL1 register read on pagefault path Revert "NFSv4: Retry LOCK on OLD_STATEID during delegation return" btrfs: use struct fscrypt_str instead of struct qstr btrfs: setup qstr from dentrys using fscrypt helper btrfs: use struct qstr instead of name and namelen pairs ring-buffer: Fix bytes info in per_cpu buffer stats ring-buffer: remove obsolete comment for free_buffer_page() mm: page_alloc: fix CMA and HIGHATOMIC landing on the wrong buddy list mm/page_alloc: leave IRQs enabled for per-cpu page allocations mm/page_alloc: always remove pages from temporary list mm: mempolicy: keep VMA walk if both MPOL_MF_STRICT and MPOL_MF_MOVE are specified mm/mempolicy: convert migrate_page_add() to migrate_folio_add() mm/mempolicy: convert queue_pages_pte_range() to queue_folios_pte_range() mm/mempolicy: convert queue_pages_pmd() to queue_folios_pmd() mm/memory: add vm_normal_folio() NFSv4: Fix a state manager thread deadlock regression NFS: rename nfs_client_kset to nfs_kset NFS: Cleanup unused rpc_clnt variable ata: libata-scsi: Fix delayed scsi_rescan_device() execution scsi: Do not attempt to rescan suspended devices scsi: core: Improve type safety of scsi_rescan_device() scsi: sd: Do not issue commands to suspended disks on shutdown scsi: sd: Differentiate system and runtime start/stop management ata,scsi: do not issue START STOP UNIT on resume mptcp: process pending subflow error on close mptcp: move __mptcp_error_report in protocol.c mptcp: annotate lockless accesses to sk->sk_err mptcp: fix dangling connection hang-up mptcp: rename timer related helper to less confusing names ASoC: tegra: Fix redundant PLLA and PLLA_OUT0 updates ASoC: soc-utils: Export snd_soc_dai_is_dummy() symbol spi: zynqmp-gqspi: fix clock imbalance on probe failure Linux 6.1.56 ASoC: amd: yc: Fix a non-functional mic on Lenovo 82TL mm, memcg: reconsider kmem.limit_in_bytes deprecation memcg: drop kmem.limit_in_bytes drm/meson: fix memory leak on ->hpd_notify callback drm/amdkfd: Use gpu_offset for user queue's wptr fs: binfmt_elf_efpic: fix personality for ELF-FDPIC power: supply: ab8500: Set typing and props power: supply: rk817: Add missing module alias drm/i915/gt: Fix reservation address in ggtt_reserve_guc_top ata: libata-sata: increase PMP SRST timeout to 10s ata: libata-core: Do not register PM operations for SAS ports ata: libata-core: Fix port and device removal ata: libata-core: Fix ata_port_request_pm() locking fs/smb/client: Reset password pointer to NULL net: thunderbolt: Fix TCPv6 GSO checksum calculation bpf: Fix BTF_ID symbol generation collision in tools/ bpf: Fix BTF_ID symbol generation collision bpf: Add override check to kprobe multi link attach media: uvcvideo: Fix OOB read btrfs: properly report 0 avail for very full file systems ring-buffer: Update "shortest_full" in polling mm: memcontrol: fix GFP_NOFS recursion in memory.high enforcement mm/slab_common: fix slab_caches list corruption after kmem_cache_destroy() mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions() arm64: defconfig: remove CONFIG_COMMON_CLK_NPCM8XX=y drm/tests: Fix incorrect argument in drm_test_mm_insert_range timers: Tag (hr)timer softirq as hotplug safe Revert "SUNRPC dont update timeout value on connection reset" netfilter: nf_tables: fix kdoc warnings after gc rework sched/rt: Fix live lock between select_fallback_rq() and RT push kernel/sched: Modify initial boot task idle setup ASoC: amd: yc: Fix non-functional mic on Lenovo 82QF and 82UG i2c: i801: unregister tco_pdev in i801_probe() error path io_uring/fs: remove sqe->rw_flags checking from LINKAT ata: libata-scsi: ignore reserved bits for REPORT SUPPORTED OPERATION CODES ata: libata-scsi: link ata port and scsi device LoongArch: numa: Fix high_memory calculation LoongArch: Define relocation types for ABI v2.10 ALSA: hda: Disable power save for solving pop issue on Lenovo ThinkCentre M70q netfilter: nf_tables: disallow rule removal from chain binding nilfs2: fix potential use after free in nilfs_gccache_submit_read_data() serial: 8250_port: Check IRQ data before use Revert "tty: n_gsm: fix UAF in gsm_cleanup_mux" misc: rtsx: Fix some platforms can not boot and move the l1ss judgment to probe mptcp: fix bogus receive window shrinkage with multiple subflows KVM: x86/mmu: Do not filter address spaces in for_each_tdp_mmu_root_yield_safe() KVM: x86/mmu: Open code leaf invalidation from mmu_notifier KVM: SVM: Fix TSC_AUX virtualization setup KVM: SVM: INTERCEPT_RDTSCP is never intercepted anyway x86/srso: Add SRSO mitigation for Hygon processors x86/sgx: Resolves SECS reclaim vs. page fault for EAUG race iommu/arm-smmu-v3: Fix soft lockup triggered by arm_smmu_mm_invalidate_range smack: Retrieve transmuting information in smack_inode_getsecurity() smack: Record transmuting in smk_transmuted nvme-pci: always return an ERR_PTR from nvme_pci_alloc_dev scsi: qla2xxx: Fix NULL pointer dereference in target mode wifi: ath11k: Don't drop tx_status when peer cannot be found nvme-pci: do not set the NUMA node of device if it has none nvme-pci: factor out a nvme_pci_alloc_dev helper nvme-pci: factor the iod mempool creation into a helper perf build: Define YYNOMEM as YYNOABORT for bison < 3.81 fbdev/sh7760fb: Depend on FB=y LoongArch: Set all reserved memblocks on Node#0 at initialization tsnep: Fix NAPI polling with budget 0 tsnep: Fix NAPI scheduling net: hsr: Add __packed to struct hsr_sup_tlv. ncsi: Propagate carrier gain/loss events to the NCSI controller powerpc/watchpoints: Annotate atomic context in more places powerpc/watchpoint: Disable pagefaults when getting user instruction powerpc/watchpoints: Disable preemption in thread_change_pc() ASoC: SOF: Intel: MTL: Reduce the DSP init timeout NFSv4.1: fix zero value filehandle in post open getattr media: vb2: frame_vector.c: replace WARN_ONCE with a comment ASoC: imx-rpmsg: Set ignore_pmdown_time for dai_link memblock tests: fix warning ‘struct seq_file’ declared inside parameter list memblock tests: fix warning: "__ALIGN_KERNEL" redefined firmware: cirrus: cs_dsp: Only log list of algorithms in debug build ASoC: cs42l42: Don't rely on GPIOD_OUT_LOW to set RESET initially low ASoC: cs42l42: Ensure a reset pulse meets minimum pulse width. ALSA: hda: intel-sdw-acpi: Use u8 type for link index bpf: Clarify error expectations from bpf_clone_redirect spi: intel-pci: Add support for Granite Rapids SPI serial flash ASoC: fsl: imx-pcm-rpmsg: Add SNDRV_PCM_INFO_BATCH flag spi: stm32: add a delay before SPI disable spi: nxp-fspi: reset the FLSHxCR1 registers ata: libata-eh: do not clear ATA_PFLAG_EH_PENDING in ata_eh_reset() smb3: correct places where ENOTSUPP is used instead of preferred EOPNOTSUPP scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command scsi: pm80xx: Use phy-specific SAS address when sending PHY_START command riscv: errata: fix T-Head dcache.cva encoding drm/amdgpu: Handle null atom context in VBIOS info ioctl drm/amdgpu/nbio4.3: set proper rmmio_remap.reg_offset for SR-IOV drm/amdgpu/soc21: don't remap HDP registers for SR-IOV drm/amd/display: Don't check registers, if using AUX BL control thermal/of: add missing of_node_put() platform/x86: asus-wmi: Support 2023 ROG X16 tablet mode platform/mellanox: mlxbf-bootctl: add NET dependency into Kconfig ata: sata_mv: Fix incorrect string length computation in mv_dump_mem() net/smc: bugfix for smcr v2 server connect success statistic ring-buffer: Do not attempt to read past "commit" selftests: fix dependency checker script btrfs: assert delayed node locked when removing delayed item ring-buffer: Avoid softlockup in ring_buffer_resize() selftests/ftrace: Correctly enable event in instance-event.tc scsi: ufs: core: Poll HCS.UCRDY before issuing a UIC command scsi: ufs: core: Move __ufshcd_send_uic_cmd() outside host_lock scsi: qedf: Add synchronization between I/O completions and abort parisc: irq: Make irq_stack_union static to avoid sparse warning parisc: drivers: Fix sparse warning parisc: iosapic.c: Fix sparse warnings parisc: sba: Fix compile warning wrt list of SBA devices nvme-fc: Prevent null pointer dereference in nvme_fc_io_getuuid() spi: sun6i: fix race between DMA RX transfer completion and RX FIFO drain spi: sun6i: reduce DMA RX transfer width to single byte bpf: Annotate bpf_long_memcpy with data_race dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock ceph: drop messages from MDS when unmounting x86/reboot: VMCLEAR active VMCSes before emergency reboot i2c: npcm7xx: Fix callback completion ordering gpio: pmic-eic-sprd: Add can_sleep flag for PMIC EIC chip firmware: arm_ffa: Don't set the memory region attributes for MEM_LEND arm64: dts: imx: Add imx8mm-prt8mm.dtb to build soc: imx8m: Enable OCOTP clock for imx8mm before reading registers selftests/powerpc: Fix emit_tests to work with run_kselftest.sh selftests/powerpc: Pass make context to children selftests/powerpc: Use CLEAN macro to fix make warning power: supply: rk817: Fix node refcount leak xtensa: boot/lib: fix function prototypes xtensa: umulsidi3: fix conditional expression xtensa: boot: don't add include-dirs xtensa: iss/network: make functions static xtensa: add default definition for XCHAL_HAVE_DIV32 firmware: imx-dsp: Fix an error handling path in imx_dsp_setup_channels() power: supply: ucs1002: fix error code in ucs1002_get_property() bus: ti-sysc: Fix SYSC_QUIRK_SWSUP_SIDLE_ACT handling for uart wake-up ARM: dts: ti: omap: motorola-mapphone: Fix abe_clkctrl warning on boot ARM: dts: Unify pinctrl-single pin group nodes for omap4 ARM: dts: Unify pwm-omap-dmtimer node names ARM: dts: ti: omap: Fix bandgap thermal cells addressing for omap3/4 ARM: dts: omap: correct indentation clk: tegra: fix error return case for recalc_rate clk: sprd: Fix thm_parents incorrect configuration power: supply: mt6370: Fix missing error code in mt6370_chg_toggle_cfo() firmware: arm_scmi: Fixup perf power-cost/microwatt support firmware: arm_scmi: Harden perf domain info access bus: ti-sysc: Fix missing AM35xx SoC matching bus: ti-sysc: Use fsleep() instead of usleep_range() in sysc_reset() drm/bridge: ti-sn65dsi83: Do not generate HFP/HBP/HSA and EOT packet spi: spi-gxp: BUG: Correct spi write return value MIPS: Alchemy: only build mmc support helpers if au1xmmc is enabled vfio/mdev: Fix a null-ptr-deref bug for mdev_unregister_parent() btrfs: reset destination buffer when read_extent_buffer() gets invalid range drm/amdkfd: Insert missing TLB flush on GFX10 and later drm/amdkfd: Flush TLB after unmapping for GFX v9.4.3 scsi: qla2xxx: Use raw_smp_processor_id() instead of smp_processor_id() scsi: qla2xxx: Select qpair depending on which CPU post_cmd() gets called wifi: ath11k: Cleanup mac80211 references on failure during tx_complete wifi: ath11k: fix tx status reporting in encap offload mode arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved s390/pkey: fix PKEY_TYPE_EP11_AES handling in PKEY_CLR2SECK2 IOCTL f2fs: get out of a repeat loop when getting a locked data page f2fs: optimize iteration over sparse directories ARM: dts: qcom: msm8974pro-castor: correct touchscreen syna,nosleep-mode ARM: dts: qcom: msm8974pro-castor: correct touchscreen function names ARM: dts: qcom: msm8974pro-castor: correct inverted X of touchscreen ARM: dts: samsung: exynos4210-i9100: Fix LCD screen's physical size ARM: dts: BCM5301X: Extend RAM to full 256MB for Linksys EA6500 V2 i2c: xiic: Correct return value check for xiic_reinit() i2c: mux: gpio: Add missing fwnode_handle_put() i2c: mux: demux-pinctrl: check the return value of devm_kstrdup() gpio: tb10x: Fix an error handling path in tb10x_gpio_probe() cifs: Fix UAF in cifs_demultiplex_thread() proc: nommu: fix empty /proc/<pid>/maps proc: nommu: /proc/<pid>/maps: release mmap read lock igc: Expose tx-usecs coalesce setting to user octeontx2-pf: Do xdp_do_flush() after redirects. bnxt_en: Flush XDP for bnxt_poll_nitroa0()'s NAPI net: ena: Flush XDP packets on error. locking/seqlock: Do the lockdep annotation before locking in do_write_seqcount_begin_nested() i915/pmu: Move execlist stats initialization to execlist specific setup netfilter: ipset: Fix race between IPSET_CMD_CREATE and IPSET_CMD_SWAP netfilter: nf_tables: disable toggling dormant table state more than once net: rds: Fix possible NULL-pointer dereference team: fix null-ptr-deref when team device type is changed net: bridge: use DEV_STATS_INC() net: hns3: add 5ms delay before clear firmware reset irq source net: hns3: fix fail to delete tc flower rules during reset issue net: hns3: only enable unicast promisc when mac table full net: hns3: fix GRE checksum offload issue net: hns3: add cmdq check for vf periodic service task x86/srso: Fix SBPB enablement for spec_rstack_overflow=off x86/srso: Fix srso_show_state() side effect platform/x86: intel_scu_ipc: Fail IPC send if still busy platform/x86: intel_scu_ipc: Don't override scu in intel_scu_ipc_dev_simple_command() platform/x86: intel_scu_ipc: Check status upon timeout in ipc_wait_for_interrupt() platform/x86: intel_scu_ipc: Check status after timeout in busy_loop() net: hsr: Properly parse HSRv1 supervisor frames. x86/mm, kexec, ima: Use memblock_free_late() from ima_free_kexec_buffer() dccp: fix dccp_v4_err()/dccp_v6_err() again powerpc/perf/hv-24x7: Update domain value check scsi: iscsi_tcp: restrict to TCP sockets ipv4: fix null-deref in ipv4_link_failure igc: Fix infinite initialization loop with early XDP redirect ionic: fix 16bit math issue when PAGE_SIZE >= 64KB netfilter, bpf: Adjust timeouts of non-confirmed CTs in bpf_ct_insert_entry() i40e: Fix VF VLAN offloading when port VLAN is configured iavf: schedule a request immediately after add/delete vlan iavf: add iavf_schedule_aq_request() helper ASoC: SOF: core: Only call sof_ops_free() on remove if the probe was successful iavf: do not process adminq tasks when __IAVF_IN_REMOVE_TASK is set octeon_ep: fix tx dma unmap len values in SG ASoC: imx-audmix: Fix return error with devm_clk_get() ASoC: hdaudio.c: Add missing check for devm_kstrdup net/core: Fix ETH_P_1588 flow dissector selftests: tls: swap the TX and RX sockets in some tests netfilter: conntrack: fix extension size table ALSA: hda/realtek: Splitting the UX3402 into two separate models ASoC: rt5640: Fix IRQ not being free-ed for HDA jack detect mode ASoC: rt5640: Revert "Fix sleep in atomic context" bpf: Avoid deadlock when using queue and stack maps from NMI netfilter: nf_tables: disallow element removal on anonymous sets ASoC: meson: spdifin: start hw on dai probe netfilter: nf_tables: fix memleak when more than 255 elements expired netfilter: nft_set_hash: try later when GC hits EAGAIN on iteration netfilter: nft_set_pipapo: stop GC iteration if GC transaction allocation fails netfilter: nft_set_pipapo: call nft_trans_gc_queue_sync() in catchall GC netfilter: nft_set_rbtree: use read spinlock to avoid datapath contention netfilter: nft_set_rbtree: skip sync GC for new elements in this transaction netfilter: nf_tables: defer gc run if previous batch is still pending netfilter: nf_tables: use correct lock to protect gc_list netfilter: nf_tables: GC transaction race with abort path netfilter: nf_tables: GC transaction race with netns dismantle netfilter: nf_tables: fix GC transaction races with netns and netlink event exit path netfilter: nf_tables: don't fail inserts if duplicate has expired netfilter: nf_tables: remove busy mark and gc batch API netfilter: nft_set_hash: mark set element as dead when deleting from packet path netfilter: nf_tables: adapt set backend to use GC transaction API netfilter: nf_tables: GC transaction API to avoid race with control plane netfilter: nf_tables: don't skip expired elements during walk ext4: do not let fstrim block system suspend ext4: move setting of trimmed bit into ext4_try_to_trim_range() ext4: replace the traditional ternary conditional operator with with max()/min() btrfs: remove BUG() after failure to insert delayed dir index item btrfs: improve error message after failure to add delayed dir index item dm: fix a race condition in retrieve_deps netfs: Only call folio_start_fscache() one time for each folio media: via: Use correct dependency for camera sensor drivers media: v4l: Use correct dependency for camera sensor drivers NFSv4.1: fix pnfs MDS=DS session trunking NFSv4.1: use EXCHGID4_FLAG_USE_PNFS_DS for DS server SUNRPC: Mark the cred for revalidation if the server rejects it NFS/pNFS: Report EINVAL errors from connect() to the server NFS: More fixes for nfs_direct_write_reschedule_io() NFS: Use the correct commit info in nfs_join_page_group() NFS: More O_DIRECT accounting fixes for error paths NFS: Fix O_DIRECT locking issues NFS: Fix error handling for O_DIRECT write scheduling ANDROID: GKI: Fix firmware: smccc build error ANDROID: Move microdroid and crashdump defconfigs to common Linux 6.1.55 interconnect: Teach lockdep about icc_bw_lock order net/sched: Retire rsvp classifier drm/amdgpu: fix amdgpu_cs_p1_user_fence Revert "memcg: drop kmem.limit_in_bytes" drm/amd/display: fix the white screen issue when >= 64GB DRAM ext4: fix rec_len verify error scsi: pm8001: Setup IRQs on resume scsi: megaraid_sas: Fix deadlock on firmware crashdump ata: libahci: clear pending interrupt status ata: libata: disallow dev-initiated LPM transitions to unsupported states i2c: aspeed: Reset the i2c controller when timeout occurs tracefs: Add missing lockdown check to tracefs_create_dir() nfsd: fix change_info in NFSv4 RENAME replies selinux: fix handling of empty opts in selinux_fs_context_submount() tracing: Have option files inc the trace array ref count tracing: Have current_trace inc the trace array ref count tracing: Increase trace array ref count on enable and filter files tracing: Have event inject files inc the trace array ref count tracing: Have tracing_max_latency inc the trace array ref count btrfs: check for BTRFS_FS_ERROR in pending ordered assert btrfs: release path before inode lookup during the ino lookup ioctl btrfs: fix a compilation error if DEBUG is defined in btree_dirty_folio btrfs: fix lockdep splat and potential deadlock after failure running delayed items dm: don't attempt to queue IO under RCU protection Revert "drm/amd: Disable S/G for APUs when 64GB or more host memory" md: Put the right device in md_seq_next nvme: avoid bogus CRTO values io_uring/net: fix iter retargeting for selected buf ovl: fix incorrect fdput() on aio completion ovl: fix failed copyup of fileattr on a symlink attr: block mode changes of symlinks Revert "SUNRPC: Fail faster on bad verifier" md/raid1: fix error: ISO C90 forbids mixed declarations samples/hw_breakpoint: fix building without module unloading x86/purgatory: Remove LTO flags x86/boot/compressed: Reserve more memory for page tables panic: Reenable preemption in WARN slowpath scsi: lpfc: Fix the NULL vs IS_ERR() bug for debugfs_create_file() scsi: target: core: Fix target_cmd_counter leak riscv: kexec: Align the kexeced kernel entry x86/ibt: Suppress spurious ENDBR selftests: tracing: Fix to unmount tracefs for recovering environment scsi: qla2xxx: Fix NULL vs IS_ERR() bug for debugfs_create_dir() drm: gm12u320: Fix the timeout usage for usb_bulk_msg() nvmet-tcp: pass iov_len instead of sg->length to bvec_set_page() nvmet: use bvec_set_page to initialize bvecs block: factor out a bvec_set_page helper btrfs: compare the correct fsid/metadata_uuid in btrfs_validate_super btrfs: add a helper to read the superblock metadata_uuid MIPS: Use "grep -E" instead of "egrep" misc: fastrpc: Fix incorrect DMA mapping unmap request misc: fastrpc: Prepare to dynamic dma-buf locking specification dma-buf: Add unlocked variant of attachment-mapping functions printk: Consolidate console deferred printing printk: Keep non-panic-CPUs out of console lock interconnect: Fix locking for runpm vs reclaim kobject: Add sanity check for kset->kobj.ktype in kset_register() media: pci: ipu3-cio2: Initialise timing struct to avoid a compiler warning usb: chipidea: add workaround for chipidea PEC bug usb: ehci: add workaround for chipidea PORTSC.PEC bug misc: open-dice: make OPEN_DICE depend on HAS_IOMEM serial: cpm_uart: Avoid suspicious locking scsi: target: iscsi: Fix buffer overflow in lio_target_nacl_info_show() tools: iio: iio_generic_buffer: Fix some integer type and calculation usb: gadget: fsl_qe_udc: validate endpoint index for ch9 udc usb: cdns3: Put the cdns set active part outside the spin lock media: pci: cx23885: replace BUG with error return media: tuners: qt1010: replace BUG_ON with a regular error scsi: lpfc: Abort outstanding ELS cmds when mailbox timeout error is detected media: dvb-usb-v2: gl861: Fix null-ptr-deref in gl861_i2c_master_xfer media: az6007: Fix null-ptr-deref in az6007_i2c_xfer() media: anysee: fix null-ptr-deref in anysee_master_xfer media: af9005: Fix null-ptr-deref in af9005_i2c_xfer media: dw2102: Fix null-ptr-deref in dw2102_i2c_transfer() media: dvb-usb-v2: af9035: Fix null-ptr-deref in af9035_i2c_master_xfer media: mdp3: Fix resource leaks in of_find_device_by_node PCI: fu740: Set the number of MSI vectors PCI: vmd: Disable bridge window for domain reset powerpc/pseries: fix possible memory leak in ibmebus_bus_init() ARM: 9317/1: kexec: Make smp stop calls asynchronous PCI: dwc: Provide deinit callback for i.MX jfs: fix invalid free of JFS_IP(ipimap)->i_imap in diUnmount fs/jfs: prevent double-free in dbUnmount() after failed jfs_remount() ext2: fix datatype of block number in ext2_xattr_set2() md: raid1: fix potential OOB in raid1_remove_disk() bus: ti-sysc: Configure uart quirks for k3 SoC drm/mediatek: dp: Change logging to dev for mtk_dp_aux_transfer() drm/exynos: fix a possible null-pointer dereference due to data race in exynos_drm_crtc_atomic_disable() drm/amd/display: Blocking invalid 420 modes on HDMI TMDS for DCN314 drm/amd/display: Blocking invalid 420 modes on HDMI TMDS for DCN31 drm/amd/display: Use DTBCLK as refclk instead of DPREFCLK ALSA: hda: intel-dsp-cfg: add LunarLake support ASoC: Intel: sof_sdw: Update BT offload config for soundwire config ASoC: SOF: topology: simplify code to prevent static analysis warnings drm/amd/display: Fix underflow issue on 175hz timing samples/hw_breakpoint: Fix kernel BUG 'invalid opcode: 0000' arm64: dts: qcom: sm8250-edo: correct ramoops pmsg-size arm64: dts: qcom: sm8150-kumano: correct ramoops pmsg-size arm64: dts: qcom: sm6350: correct ramoops pmsg-size arm64: dts: qcom: sm6125-pdx201: correct ramoops pmsg-size drm/edid: Add quirk for OSVR HDK 2.0 drm/bridge: tc358762: Instruct DSI host to generate HSE packets libbpf: Free btf_vmlinux when closing bpf_object wifi: mac80211_hwsim: drop short frames wifi: mac80211: check for station first in client probe wifi: cfg80211: ocb: don't leave if not joined wifi: cfg80211: reject auth/assoc to AP with our address netfilter: ebtables: fix fortify warnings in size_entry_mwt() wifi: mac80211: check S1G action frame size alx: fix OOB-read compiler warning mmc: sdhci-esdhc-imx: improve ESDHC_FLAG_ERR010450 tpm_tis: Resend command to recover from data transfer errors netlink: convert nlk->flags to atomic flags Bluetooth: Fix hci_suspend_sync crash crypto: lib/mpi - avoid null pointer deref in mpi_cmp_ui() net/ipv4: return the real errno instead of -EINVAL net: Use sockaddr_storage for getsockopt(SO_PEERNAME). can: sun4i_can: Add support for the Allwinner D1 can: sun4i_can: Add acceptance register quirk wifi: wil6210: fix fortify warnings mt76: mt7921: don't assume adequate headroom for SDIO headers wifi: mwifiex: fix fortify warning wifi: ath9k: fix printk specifier wifi: ath9k: fix fortify warnings ice: Don't tx before switchdev is fully configured crypto: lrw,xts - Replace strlcpy with strscpy devlink: remove reload failed checks in params get/set callbacks selftests/nolibc: fix up kernel parameters support ACPI: x86: s2idle: Catch multiple ACPI_TYPE_PACKAGE objects hw_breakpoint: fix single-stepping when using bpf_overflow_handler perf/imx_ddr: speed up overflow frequency of cycle perf/smmuv3: Enable HiSilicon Erratum 162001900 quirk for HIP08/09 ACPI: video: Add backlight=native DMI quirk for Lenovo Ideapad Z470 scftorture: Forgive memory-allocation failure if KASAN rcuscale: Move rcu_scale_writer() schedule_timeout_uninterruptible() to _idle() kernel/fork: beware of __put_task_struct() calling context ACPICA: Add AML_NO_OPERAND_RESOLVE flag to Timer locks: fix KASAN: use-after-free in trace_event_raw_event_filelock_lock btrfs: output extra debug info if we failed to find an inline backref autofs: fix memory leak of waitqueues in autofs_catatonic_mode Linux 6.1.54 drm/amd/display: Fix a bug when searching for insert_above_mpcc MIPS: Only fiddle with CHECKFLAGS if `need-compiler' kcm: Fix error handling for SOCK_DGRAM in kcm_sendmsg(). ixgbe: fix timestamp configuration code tcp: Fix bind() regression for v4-mapped-v6 non-wildcard address. tcp: Fix bind() regression for v4-mapped-v6 wildcard address. tcp: Factorise sk_family-independent comparison in inet_bind2_bucket_match(_addr_any). ipv6: Remove in6addr_any alternatives. ipv6: fix ip6_sock_set_addr_preferences() typo net: macb: fix sleep inside spinlock net: macb: Enable PTP unicast net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict() platform/mellanox: NVSW_SN2201 should depend on ACPI platform/mellanox: mlxbf-pmc: Fix reading of unprogrammed events platform/mellanox: mlxbf-pmc: Fix potential buffer overflows platform/mellanox: mlxbf-tmfifo: Drop jumbo frames platform/mellanox: mlxbf-tmfifo: Drop the Rx packet if no more descriptors kcm: Fix memory leak in error path of kcm_sendmsg() r8152: check budget for r8152_poll() net: dsa: sja1105: block FDB accesses that are concurrent with a switch reset net: dsa: sja1105: serialize sja1105_port_mcast_flood() with other FDB accesses net: dsa: sja1105: fix multicast forwarding working only for last added mdb entry net: dsa: sja1105: propagate exact error code from sja1105_dynamic_config_poll_valid() net: dsa: sja1105: hide all multicast addresses from "bridge fdb show" net:ethernet:adi:adin1110: Fix forwarding offload net: ethernet: adi: adin1110: use eth_broadcast_addr() to assign broadcast address hsr: Fix uninit-value access in fill_frame_info() net: ethernet: mtk_eth_soc: fix possible NULL pointer dereference in mtk_hwlro_get_fdir_all() net: ethernet: mvpp2_main: fix possible OOB write in mvpp2_ethtool_get_rxnfc() net: stmmac: fix handling of zero coalescing tx-usecs net/smc: use smc_lgr_list.lock to protect smc_lgr_list.list iterate in smcr_port_add selftests: Keep symlinks, when possible kselftest/runner.sh: Propagate SIGTERM to runner child net: ipv4: fix one memleak in __inet_del_ifa() kunit: Fix wild-memory-access bug in kunit_free_suite_set() drm/amdgpu: register a dirty framebuffer callback for fbcon drm/amd/display: Remove wait while locked drm/amd/display: always switch off ODM before committing more streams perf hists browser: Fix the number of entries for 'e' key perf tools: Handle old data in PERF_RECORD_ATTR perf test shell stat_bpf_counters: Fix test on Intel perf hists browser: Fix hierarchy mode header MIPS: Fix CONFIG_CPU_DADDI_WORKAROUNDS `modules_install' regression KVM: SVM: Skip VMSA init in sev_es_init_vmcb() if pointer is NULL KVM: SVM: Set target pCPU during IRTE update if target vCPU is running KVM: nSVM: Load L1's TSC multiplier based on L1 state, not L2 state KVM: nSVM: Check instead of asserting on nested TSC scaling support KVM: SVM: Get source vCPUs from source VM for SEV-ES intrahost migration KVM: SVM: Don't inject #UD if KVM attempts to skip SEV guest insn KVM: SVM: Take and hold ir_list_lock when updating vCPU's Physical ID entry drm/amd/display: prevent potential division by zero errors drm/amd/display: enable cursor degamma for DCN3+ DRM legacy gamma mtd: rawnand: brcmnand: Fix ECC level field setting for v7.2 controller mtd: rawnand: brcmnand: Fix potential false time out warning mtd: spi-nor: Correct flags for Winbond w25q128 mtd: rawnand: brcmnand: Fix potential out-of-bounds access in oob write mtd: rawnand: brcmnand: Fix crash during the panic_write drm/mxsfb: Disable overlay plane in mxsfb_plane_overlay_atomic_disable() btrfs: use the correct superblock to compare fsid in btrfs_validate_super btrfs: zoned: re-enable metadata over-commit for zoned mode btrfs: set page extent mapped after read_folio in relocate_one_page btrfs: don't start transaction when joining with TRANS_JOIN_NOSTART btrfs: free qgroup rsv on io failure btrfs: fix start transaction qgroup rsv double free btrfs: zoned: do not zone finish data relocation block group fuse: nlookup missing decrement in fuse_direntplus_link ata: pata_ftide010: Add missing MODULE_DESCRIPTION ata: sata_gemini: Add missing MODULE_DESCRIPTION ata: pata_falcon: fix IO base selection for Q40 ata: ahci: Add Elkhart Lake AHCI controller hwspinlock: qcom: add missing regmap config for SFPB MMIO implementation lib: test_scanf: Add explicit type cast to result initialization in test_number_prefix() f2fs: avoid false alarm of circular locking f2fs: flush inode if atomic file is aborted ext4: fix memory leaks in ext4_fname_{setup_filename,prepare_lookup} ext4: add correct group descriptors and reserved GDT blocks to system zone jbd2: correct the end of the journal recovery scan range jbd2: check 'jh->b_transaction' before removing it from checkpoint jbd2: fix checkpoint cleanup performance regression dmaengine: sh: rz-dmac: Fix destination and source data size setting clocksource/drivers/arm_arch_timer: Disable timer before programming CVAL ARC: atomics: Add compiler barrier to atomic operations... net/mlx5: Free IRQ rmap and notifier on kernel shutdown Multi-gen LRU: avoid race in inc_min_seq() sh: boards: Fix CEU buffer size passed to dma_declare_coherent_memory() net: hns3: remove GSO partial feature bit net: hns3: fix the port information display when sfp is absent net: hns3: fix invalid mutex between tc qdisc and dcb ets command issue net: hns3: fix debugfs concurrency issue between kfree buffer and read net: hns3: fix byte order conversion issue in hclge_dbg_fd_tcam_read() net: hns3: fix tx timeout issue netfilter: nfnetlink_osf: avoid OOB read netfilter: nftables: exthdr: fix 4-byte stack OOB write bpf: Assign bpf_tramp_run_ctx::saved_run_ctx before recursion check. bpf: Invoke __bpf_prog_exit_sleepable_recur() on recursion in kern_sys_bpf(). bpf: Remove prog->active check for bpf_lsm and bpf_iter net: dsa: sja1105: complete tc-cbs offload support on SJA1110 net: dsa: sja1105: fix -ENOSPC when replacing the same tc-cbs too many times net: dsa: sja1105: fix bandwidth discrepancy between tc-cbs software and offload ip_tunnels: use DEV_STATS_INC() idr: fix param name in idr_alloc_cyclic() doc s390/zcrypt: don't leak memory if dev_set_name() fails igb: Change IGB_MIN to allow set rx/tx value between 64 and 80 igbvf: Change IGBVF_MIN to allow set rx/tx value between 64 and 80 igc: Change IGC_MIN to allow set rx/tx value between 64 and 80 octeontx2-af: Fix truncation of smq in CN10K NIX AQ enqueue mbox handler kcm: Destroy mutex in kcm_exit_net() net: sched: sch_qfq: Fix UAF in qfq_dequeue() af_unix: Fix data race around sk->sk_err. af_unix: Fix data-races around sk->sk_shutdown. af_unix: Fix data-race around unix_tot_inflight. af_unix: Fix data-races around user->unix_inflight. bpf, sockmap: Fix skb refcnt race after locking changes net: phy: micrel: Correct bit assignments for phy_device flags net: ipv6/addrconf: avoid integer underflow in ipv6_create_tempaddr veth: Fixing transmit return status for dropped packets gve: fix frag_list chaining igb: disable virtualization features on 82580 ipv6: ignore dst hint for multipath routes ipv4: ignore dst hint for multipath routes mptcp: annotate data-races around msk->rmem_fwd_alloc net: annotate data-races around sk->sk_forward_alloc net: use sk_forward_alloc_get() in sk_get_meminfo() drm/i915/gvt: Drop unused helper intel_vgpu_reset_gtt() drm/i915/gvt: Put the page reference obtained by KVM's gfn_to_pfn() drm/i915/gvt: Verify pfn is "valid" before dereferencing "struct page" xsk: Fix xsk_diag use-after-free error during socket cleanup net: fib: avoid warn splat in flow dissector net: read sk->sk_family once in sk_mc_loop() ipv4: annotate data-races around fi->fib_dead sctp: annotate data-races around sk->sk_wmem_queued net/sched: fq_pie: avoid stalls in fq_pie_timer() smb: propagate error code of extract_sharename() cifs: use fs_context for automounts blk-throttle: consider 'carryover_ios/bytes' in throtl_trim_slice() blk-throttle: use calculate_io/bytes_allowed() for throtl_trim_slice() drm/i915: mark requests for GuC virtual engines to avoid use-after-free perf test stat_bpf_counters_cgrp: Enhance perf stat cgroup BPF counter test perf test stat_bpf_counters_cgrp: Fix shellcheck issue about logical operators pwm: lpc32xx: Remove handling of PWM channels watchdog: intel-mid_wdt: add MODULE_ALIAS() to allow auto-load perf top: Don't pass an ERR_PTR() directly to perf_session__delete() perf vendor events: Drop STORES_PER_INST metric event for power10 platform perf vendor events: Drop some of the JSON/events for power10 platform perf vendor events: Update the JSON/events descriptions for power10 platform x86/virt: Drop unnecessary check on extended CPUID level in cpu_has_svm() perf annotate bpf: Don't enclose non-debug code with an assert() Input: tca6416-keypad - fix interrupt enable disbalance Input: tca6416-keypad - always expect proper IRQ number in i2c client backlight: gpio_backlight: Drop output GPIO direction check for initial power state pwm: atmel-tcb: Fix resource freeing in error path and remove pwm: atmel-tcb: Harmonize resource allocation order pwm: atmel-tcb: Convert to platform remove callback returning void perf trace: Really free the evsel->priv area perf trace: Use zfree() to reduce chances of use after free Input: iqs7222 - configure power mode before triggering ATI kconfig: fix possible buffer overflow mailbox: qcom-ipcc: fix incorrect num_chans counting gfs2: low-memory forced flush fixes gfs2: Switch to wait_event in gfs2_logd tpm_crb: Fix an error handling path in crb_acpi_add() kbuild: do not run depmod for 'make modules_sign' kbuild: rpm-pkg: define _arch conditionally net: deal with integer overflows in kmalloc_reserve() net: factorize code in kmalloc_reserve() net: remove osize variable in __alloc_skb() net: add SKB_HEAD_ALIGN() helper bus: mhi: host: Skip MHI reset if device is in RDDM NFSv4/pnfs: minor fix for cleanup path in nfs4_get_device_info NFS: Fix a potential data corruption clk: qcom: mss-sc7180: fix missing resume during probe clk: qcom: q6sstop-qcs404: fix missing resume during probe clk: qcom: lpasscc-sc7280: fix missing resume during probe clk: qcom: dispcc-sm8450: fix runtime PM imbalance on probe errors soc: qcom: qmi_encdec: Restrict string length in decode clk: qcom: gcc-mdm9615: use proper parent for pll0_vote clock clk: imx: pll14xx: align pdiv with reference manual clk: imx: pll14xx: dynamically configure PLL for 393216000/361267200Hz dt-bindings: clock: xlnx,versal-clk: drop select:false pinctrl: cherryview: fix address_space_handler() argument cifs: update desired access while requesting for directory lease parisc: led: Reduce CPU overhead for disk & lan LED computation parisc: led: Fix LAN receive and transmit LEDs lib/test_meminit: allocate pages up to order MAX_ORDER mm: hugetlb_vmemmap: fix a race between vmemmap pmd split memcg: drop kmem.limit_in_bytes send channel sequence number in SMB3 requests after reconnects arm64: dts: renesas: rzg2l: Fix txdv-skew-psec typos clk: qcom: turingcc-qcs404: fix missing resume during probe ASoC: tegra: Fix SFC conversion for few rates drm/ast: Fix DRAM init on AST2200 clk: qcom: camcc-sc7180: fix async resume during probe fbdev/ep93xx-fb: Do not assign to struct fb_info.dev null_blk: fix poll request timeout handling scsi: qla2xxx: Fix firmware resource tracking scsi: qla2xxx: Error code did not return to upper layer scsi: qla2xxx: Fix smatch warn for qla_init_iocb_limit() scsi: qla2xxx: Flush mailbox commands on chip reset scsi: qla2xxx: Remove unsupported ql2xenabledif option scsi: qla2xxx: Fix TMF leak through scsi: qla2xxx: Fix session hang in gnl scsi: qla2xxx: Turn off noisy message log scsi: qla2xxx: Fix erroneous link up failure scsi: qla2xxx: Fix command flush during TMF scsi: qla2xxx: fix inconsistent TMF timeout scsi: qla2xxx: Fix deletion race condition scsi: qla2xxx: Limit TMF to 8 per function scsi: qla2xxx: Adjust IOCB resource on qpair create drm/virtio: Conditionally allocate virtio_gpu_fence io_uring: Don't set affinity on a dying sqpoll thread io_uring/sqpoll: fix io-wq affinity when IORING_SETUP_SQPOLL is used io_uring: break out of iowq iopoll on teardown io_uring/net: don't overflow multishot accept io_uring: revert "io_uring fix multishot accept ordering" io_uring: always lock in io_apoll_task_func Multi-gen LRU: fix per-zone reclaim mm: multi-gen LRU: rename lrugen->lists[] to lrugen->folios[] net/ipv6: SKB symmetric hash should incorporate transport ports ANDROID: GKI: fix up merge issue in drivers/scsi/storvsc_drv.c Linux 6.1.53 udf: initialize newblock to 0 clk: Avoid invalid function names in CLK_OF_DECLARE() treewide: Fix probing of devices in DT overlays clk: Mark a fwnode as initialized when using CLK_OF_DECLARE() macro md: fix regression for null-ptr-deference in __md_stop() NFSv4.2: Rework scratch handling for READ_PLUS (again) NFSv4.2: Fix a potential double free with READ_PLUS md: Free resources in __md_stop Revert "drm/amd/display: Do not set drr on pipe commit" tracing: Zero the pipe cpumask on alloc to avoid spurious -EBUSY serial: sc16is7xx: fix regression with GPIO configuration serial: sc16is7xx: remove obsolete out_thread label perf/x86/uncore: Correct the number of CHAs on EMR x86/sgx: Break up long non-preemptible delays in sgx_vepc_release() USB: core: Fix oversight in SuperSpeed initialization USB: core: Fix race by not overwriting udev->descriptor in hub_port_init() USB: core: Change usb_get_device_descriptor() API USB: core: Unite old scheme and new scheme descriptor reads usb: typec: bus: verify partner exists in typec_altmode_attention usb: typec: tcpm: set initial svdm version based on pd revision of: property: fw_devlink: Add a devlink for panel followers cpufreq: brcmstb-avs-cpufreq: Fix -Warray-bounds bug crypto: stm32 - fix loop iterating through scatterlist for DMA s390/dasd: fix string length handling s390/ipl: add missing secure/has_secure file to ipl type 'unknown' s390/dcssblk: fix kernel crash with list_add corruption arm64: sdei: abort running SDEI handlers during crash pstore/ram: Check start of empty przs during init mmc: renesas_sdhi: register irqs before registering controller platform/chrome: chromeos_acpi: print hex string for ACPI_TYPE_BUFFER x86/MCE: Always save CS register on AMD Zen IF Poison errors fsverity: skip PKCS#7 parser when keyring is empty net: handle ARPHRD_PPP in dev_is_mac_header_xmit() X.509: if signature is unsupported skip validation r8169: fix ASPM-related issues on a number of systems with NIC version from RTL8168h x86/sev: Make enc_dec_hypercall() accept a size instead of npages dccp: Fix out of bounds access in DCCP error handler dlm: fix plock lookup when using multiple lockspaces bpf: Fix issue in verifying allow_ptr_leaks drm/amd/display: Add smu write msg id fail retry process parisc: Fix /proc/cpuinfo output for lscpu procfs: block chmod on /proc/thread-self/comm block: don't add or resize partition on the disk with GENHD_FL_NO_PART Revert "PCI: Mark NVIDIA T4 GPUs to avoid bus reset" ntb: Fix calculation ntb_transport_tx_free_entry() ntb: Clean up tx tail index on link down ntb: Drop packets when qp link is down PCI/PM: Only read PCI_PM_CTRL register when available PCI: hv: Fix a crash in hv_pci_restore_msi_msg() during hibernation PCI: Free released resource after coalescing scsi: mpt3sas: Perform additional retries if doorbell read returns 0 Revert "scsi: qla2xxx: Fix buffer overrun" media: venus: hfi_venus: Write to VIDC_CTRL_INIT after unmasking interrupts media: dvb: symbol fixup for dvb_attach() ALSA: hda/cirrus: Fix broken audio on hardware with two CS42L42 codecs. arm64: csum: Fix OoB access in IP checksum code for negative lengths i3c: master: svc: fix probe failure when no i3c device exist LoongArch: mm: Add p?d_leaf() definitions xtensa: PMU: fix base address for the newer hardware drm/amd/display: register edp_backlight_control() for DCN301 backlight/lv5207lp: Compare against struct fb_info.device backlight/bd6107: Compare against struct fb_info.device backlight/gpio_backlight: Compare against struct fb_info.device io_uring: break iopolling on signal XArray: Do not return sibling entries from xa_load() ARM: OMAP2+: Fix -Warray-bounds warning in _pwrdm_state_switch() ipmi_si: fix a memleak in try_smi_init() PCI: rockchip: Use 64-bit mask on MSI 64-bit PCI address media: i2c: Add a camera sensor top level menu media: i2c: ccs: Check rules is non-NULL cpu/hotplug: Prevent self deadlock on CPU hot-unplug mm/vmalloc: add a safer version of find_vm_area() for debug scsi: core: Fix the scsi_set_resid() documentation printk: ringbuffer: Fix truncating buffer size min_t cast rcu: dump vmalloc memory info safely ALSA: pcm: Fix missing fixup call in compat hw_refine ioctl PM / devfreq: Fix leak in devfreq_dev_release() igb: set max size RX buffer when store bad packet is enabled skbuff: skb_segment, Call zero copy functions before using skbuff frags netfilter: xt_sctp: validate the flag_info count netfilter: xt_u32: validate user space input netfilter: nft_exthdr: Fix non-linear header modification netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c igmp: limit igmpv3_newpack() packet size to IP_MAX_MTU virtio_ring: fix avail_wrap_counter in virtqueue_add_packed cpufreq: Fix the race condition while updating the transition_task of policy Drivers: hv: vmbus: Don't dereference ACPI root object handle dmaengine: ste_dma40: Add missing IRQ check in d40_probe um: Fix hostaudio build errors mtd: rawnand: fsmc: handle clk prepare error in fsmc_nand_resume() mtd: spi-nor: Check bus width while setting QE bit leds: trigger: tty: Do not use LED_ON/OFF constants, use led_blink_set_oneshot instead leds: Fix BUG_ON check for LED_COLOR_ID_MULTI that is always false leds: multicolor: Use rounded division when calculating color components leds: pwm: Fix error code in led_pwm_create_fwnode() rpmsg: glink: Add check for kstrdup phy/rockchip: inno-hdmi: do not power on rk3328 post pll on reg write phy/rockchip: inno-hdmi: round fractal pixclock in rk3328 recalc_rate phy/rockchip: inno-hdmi: use correct vco_div_5 macro on rk3328 dmaengine: idxd: Modify the dependence of attribute pasid_enabled mtd: rawnand: brcmnand: Fix mtd oobsize tracing: Fix race issue between cpu buffer write and swap tracing: Remove extra space at the end of hwlat_detector/mode x86/speculation: Mark all Skylake CPUs as vulnerable to GDS tick/rcu: Fix false positive "softirq work is pending" messages platform/x86/amd/pmf: Fix a missing cleanup path HID: multitouch: Correct devm device reference for hidinput input_dev name HID: uclogic: Correct devm device reference for hidinput input_dev name HID: logitech-dj: Fix error handling in logi_dj_recv_switch_to_dj_mode() RDMA/efa: Fix wrong resources deallocation order RDMA/siw: Correct wrong debug message RDMA/siw: Balance the reference of cep->kref in the error path Revert "IB/isert: Fix incorrect release of isert connection" amba: bus: fix refcount leak serial: tegra: handle clk prepare error in tegra_uart_hw_init() interconnect: qcom: bcm-voter: Use enable_maks for keepalive voting interconnect: qcom: bcm-voter: Improve enable_mask handling interconnect: qcom: sm8450: Enable sync_state scsi: fcoe: Fix potential deadlock on &fip->ctlr_lock scsi: core: Use 32-bit hostnum in scsi_host_lookup() RDMA/irdma: Prevent zero-length STAG registration coresight: trbe: Fix TRBE potential sleep in atomic context cgroup:namespace: Remove unused cgroup_namespaces_init() Revert "f2fs: fix to do sanity check on extent cache correctly" f2fs: Only lfs mode is allowed with zoned block device feature f2fs: judge whether discard_unit is section only when have CONFIG_BLK_DEV_ZONED f2fs: fix to avoid mmap vs set_compress_option case media: i2c: rdacm21: Fix uninitialized value media: ov2680: Fix regulators being left enabled on ov2680_power_on() errors media: ov2680: Fix ov2680_set_fmt() which == V4L2_SUBDEV_FORMAT_TRY not working media: ov2680: Add ov2680_fill_format() helper function media: ov2680: Don't take the lock for try_fmt calls media: ov2680: Remove VIDEO_V4L2_SUBDEV_API ifdef-s media: ov2680: Fix vflip / hflip set functions media: ov2680: Fix ov2680_bayer_order() media: ov2680: Remove auto-gain and auto-exposure controls media: i2c: ov2680: Set V4L2_CTRL_FLAG_MODIFY_LAYOUT on flips media: ov5640: Fix initial RESETB state and annotate timings media: ov5640: Enable MIPI interface in ov5640_set_power_mipi() HID: input: Support devices sending Eraser without Invert drivers: base: Free devm resources when unregistering a device USB: gadget: f_mass_storage: Fix unused variable warning USB: gadget: core: Add missing kerneldoc for vbus_work docs: ABI: fix spelling/grammar in SBEFIFO timeout interface media: venus: hfi_venus: Only consider sys_idle_indicator on V1 media: go7007: Remove redundant if statement media: cec: core: add adap_unconfigured() callback media: cec: core: add adap_nb_transmit_canceled() callback platform/x86: dell-sysman: Fix reference leak iommu/vt-d: Fix to flush cache of PASID directory table iommu/qcom: Disable and reset context bank before programming fsi: aspeed: Reset master errors after CFAM reset IB/uverbs: Fix an potential error pointer dereference RDMA/hns: Fix CQ and QP cache affinity RDMA/hns: Fix inaccurate error label name in init instance RDMA/hns: Fix incorrect post-send with direct wqe of wr-list RDMA/hns: Fix port active speed iommu/sprd: Add missing force_aperture iommu/mediatek: Fix two IOMMU share pagetable issue iommu/mediatek: Remove unused "mapping" member from mtk_iommu_data extcon: cht_wc: add POWER_SUPPLY dependency kernfs: add stub helper for kernfs_generic_poll() driver core: Call dma_cleanup() on the test_remove path driver core: test_async: fix an error code dma-buf/sync_file: Fix docs syntax interconnect: qcom: qcm2290: Enable sync state coresight: tmc: Explicit type conversions to prevent integer overflow RDMA/irdma: Replace one-element array with flexible-array member scsi: qedf: Do not touch __user pointer in qedf_dbg_fp_int_cmd_read() directly scsi: qedf: Do not touch __user pointer in qedf_dbg_debug_cmd_read() directly scsi: qedf: Do not touch __user pointer in qedf_dbg_stop_io_on_error_cmd_read() directly RDMA/rxe: Fix incomplete state save in rxe_requester RDMA/rxe: Split rxe_run_task() into two subroutines x86/APM: drop the duplicate APM_MINOR_DEV macro serial: sprd: Fix DMA buffer leak issue serial: sprd: Assign sprd_port after initialized to avoid wrong access iio: accel: adxl313: Fix adxl313_i2c_id[] table scsi: qla4xxx: Add length check when parsing nlattrs scsi: be2iscsi: Add length check when parsing nlattrs scsi: iscsi: Add strlen() check in iscsi_if_set{_host}_param() scsi: iscsi: Add length check for nlattr payload scsi: iscsi: Rename iscsi_set_param() to iscsi_if_set_param() scsi: RDMA/srp: Fix residual handling usb: phy: mxs: fix getting wrong state with mxs_phy_is_otg_host() media: mediatek: vcodec: fix resource leaks in vdec_msg_queue_init() media: mediatek: vcodec: fix potential double free media: mediatek: vcodec: Return NULL if no vdec_fb is found media: amphion: ensure the bitops don't cross boundaries media: amphion: fix UNUSED_VALUE issue reported by coverity media: amphion: fix UNINIT issues reported by coverity media: amphion: fix REVERSE_INULL issues reported by coverity media: amphion: fix CHECKED_RETURN issues reported by coverity media: rkvdec: increase max supported height for H.264 media: mtk-jpeg: Fix use after free bug due to uncanceled work media: amphion: add helper function to get id name media: amphion: reinit vpu if reqbufs output 0 dt-bindings: extcon: maxim,max77843: restrict connector properties scsi: hisi_sas: Fix normally completed I/O analysed as failed scsi: hisi_sas: Fix warnings detected by sparse RDMA/siw: Fabricate a GID on tun and loopback devices media: cx24120: Add retval check for cx24120_message_send() media: dvb-usb: m920x: Fix a potential memory leak in m920x_i2c_xfer() media: dib7000p: Fix potential division by zero drivers: usb: smsusb: fix error handling code in smsusb_init_device iommu: rockchip: Fix directory table address encoding iommu/amd/iommu_v2: Fix pasid_state refcount dec hit 0 warning on pasid unbind media: v4l2-core: Fix a potential resource leak in v4l2_fwnode_parse_link() media: i2c: tvp5150: check return value of devm_kasprintf() media: ad5820: Drop unsupported ad5823 from i2c_ and of_device_id tables media: ov5640: fix low resolution image abnormal issue RDMA/qedr: Remove a duplicate assignment in irdma_query_ah() cgroup/cpuset: Inherit parent's load balance state in v2 pNFS: Fix assignment of xprtdata.cred NFSv4.2: fix handling of COPY ERR_OFFLOAD_NO_REQ NFS: Guard against READDIR loop when entry names exceed MAXNAMELEN NFSD: da_addr_body field missing in some GETDEVICEINFO replies fs: lockd: avoid possible wrong NULL parameter jfs: validate max amount of blocks before allocation. ext4: fix unttached inode after power cut with orphan file feature enabled powerpc/iommu: Fix notifiers being shared by PCI and VIO buses powerpc/mpc5xxx: Add missing fwnode_handle_put() powerpc/pseries: Fix hcall tracepoints with JUMP_LABEL=n nfs/blocklayout: Use the passed in gfp flags powerpc/pseries: Rework lppaca_shared_proc() to avoid DEBUG_PREEMPT powerpc: Don't include lppaca.h in paca.h NFSv4.2: Fix READ_PLUS size calculations NFSv4.2: Fix up READ_PLUS alignment NFSv4.2: Fix READ_PLUS smatch warnings NFSv4.2: Rework scratch handling for READ_PLUS wifi: ath10k: Use RMW accessors for changing LNKCTL wifi: ath11k: Use RMW accessors for changing LNKCTL net/mlx5: Use RMW accessors for changing LNKCTL drm/radeon: Use RMW accessors for changing LNKCTL drm/amdgpu: Use RMW accessors for changing LNKCTL powerpc/perf: Convert fsl_emb notifier to state machine callbacks powerpc/fadump: reset dump area size if fadump memory reserve fails nvdimm: Fix dereference after free in register_nvdimm_pmu() nvdimm: Fix memleak of pmu attr_groups in unregister_nvdimm_pmu() vfio/type1: fix cap_migration information leak powerpc/radix: Move some functions into #ifdef CONFIG_KVM_BOOK3S_HV_POSSIBLE clk: imx: composite-8m: fix clock pauses when set_rate would be a no-op clk: imx8mp: fix sai4 clock clk: imx: imx8ulp: update SPLL2 type clk: imx: pllv4: Fix SPLL2 MULT range clk: qcom: gcc-sm8450: Use floor ops for SDCC RCGs PCI/ASPM: Use RMW accessors for changing LNKCTL PCI: pciehp: Use RMW accessors for changing LNKCTL PCI: Add locking to RMW PCI Express Capability Register accessors PCI: Allow drivers to request exclusive config regions pinctrl: mcp23s08: check return value of devm_kasprintf() PCI: Mark NVIDIA T4 GPUs to avoid bus reset PCI: microchip: Correct the DED and SEC interrupt bit offsets clk: qcom: gcc-sm6350: Fix gcc_sdcc2_apps_clk_src clk: qcom: reset: Use the correct type of sleep/delay based on length kvm/vfio: ensure kvg instance stays around in kvm_vfio_group_add() kvm/vfio: Prepare for accepting vfio device fd clk: qcom: gcc-sm8250: Fix gcc_sdcc2_apps_clk_src ext4: avoid potential data overflow in next_linear_group ext4: correct grp validation in ext4_mb_good_group EDAC/igen6: Fix the issue of no error events clk: qcom: gcc-sc7180: Fix up gcc_sdcc2_apps_clk_src clk: sunxi-ng: Modify mismatched function name PCI/DOE: Fix destroy_work_on_stack() race drivers: clk: keystone: Fix parameter judgment in _of_pll_clk_init() PCI: qcom-ep: Switch MHI bus master clock off during L1SS PCI: apple: Initialize pcie->nvecs before use clk: rockchip: rk3568: Fix PLL rate setting for 78.75MHz clk: qcom: gcc-sc8280xp: Add missing GDSCs dt-bindings: clock: qcom,gcc-sc8280xp: Add missing GDSCs clk: qcom: gcc-sc8280xp: Add missing GDSC flags clk: qcom: gcc-sc8280xp: Add EMAC GDSCs clk: qcom: gpucc-sm6350: Fix clock source names clk: qcom: gpucc-sm6350: Introduce index-based clk lookup ipmi:ssif: Fix a memory leak when scanning for an adapter ipmi:ssif: Add check for kstrdup ALSA: ac97: Fix possible error value of *rac97 of: unittest: Fix overlay type in apply/revert check of: overlay: Call of_changeset_init() early ASoC: SOF: amd: clear dsp to host interrupt status md: raid0: account for split bio in iostat accounting md/raid0: Fix performance regression for large sequential writes md/raid0: Factor out helper for mapping and submitting a bio md: add error_handlers for raid0 and linear firmware: cs_dsp: Fix new control name check md/raid5-cache: fix null-ptr-deref for r5l_flush_stripe_to_raid() md/raid5-cache: fix a deadlock in r5l_exit_log() bus: ti-sysc: Fix cast to enum warning arm64: dts: qcom: sc8280xp-x13s: Unreserve NC pins arm64: dts: qcom: msm8996: Fix dsi1 interrupts arm64: dts: qcom: msm8998: Add missing power domain to MMSS SMMU arm64: dts: qcom: msm8998: Drop bus clock reference from MMSS SMMU arm64: dts: qcom: apq8016-sbc: Fix ov5640 regulator supply names drm/mediatek: Fix potential memory leak if vmap() fail ARM: dts: qcom: ipq4019: correct SDHCI XO clock drm/mediatek: Remove freeing not dynamic allocated memory bus: ti-sysc: Fix build warning for 64-bit build drm/mediatek: dp: Add missing error checks in mtk_dp_parse_capabilities io_uring: fix drain stalls by invalid SQE block/mq-deadline: use correct way to throttling write requests audit: fix possible soft lockup in __audit_inode_child() drm/msm/a2xx: Call adreno_gpu_init() earlier drm/amd/pm: fix variable dereferenced issue in amdgpu_device_attr_create() smackfs: Prevent underflow in smk_set_cipso() drm/msm/dpu: fix the irq index in dpu_encoder_phys_wb_wait_for_commit_done firmware: meson_sm: fix to avoid potential NULL pointer dereference drm/msm/mdp5: Don't leak some plane state soc: qcom: smem: Fix incompatible types in comparison drm: xlnx: zynqmp_dpsub: Add missing check for dma_set_mask ima: Remove deprecated IMA_TRUSTED_KEYRING Kconfig drm/panel: simple: Add missing connector type and pixel format for AUO T215HVN01 drm/repaper: Reduce temporary buffer size in repaper_fb_dirty() drm/armada: Fix off-by-one error in armada_overlay_get_property() ARM: dts: BCM53573: Fix Tenda AC9 switch CPU port arm64: dts: qcom: sm8150: Fix the I2C7 interrupt of: unittest: fix null pointer dereferencing in of_unittest_find_node_by_name() drm/tegra: dpaux: Fix incorrect return value of platform_get_irq drm/msm: Update dev core dump to not print backwards md/md-bitmap: hold 'reconfig_mutex' in backlog_store() md/md-bitmap: remove unnecessary local variable in backlog_store() md/raid10: use dereference_rdev_and_rrdev() to get devices md/raid10: factor out dereference_rdev_and_rrdev() md: restore 'noio_flag' for the last mddev_resume() md: Change active_io to percpu md: Factor out is_md_suspended helper drm/amdgpu: Update min() to min_t() in 'amdgpu_info_ioctl' arm64: dts: qcom: msm8996-gemini: fix touchscreen VIO supply arm64: dts: qcom: sdm845: Fix the min frequency of "ice_core_clk" arm64: dts: qcom: sdm845: Add missing RPMh power domain to GCC ARM: dts: BCM53573: Fix Ethernet info for Luxul devices drm: adv7511: Fix low refresh rate register for ADV7533/5 ARM: dts: samsung: s5pv210-smdkv210: correct ethernet reg addresses (split) ARM: dts: s5pv210: add dummy 5V regulator for backlight on SMDKv210 ARM: dts: samsung: s3c6410-mini6410: correct ethernet reg addresses (split) drm/bridge: anx7625: Use common macros for HDCP capabilities drm/bridge: anx7625: Use common macros for DP power sequencing commands x86/mm: Fix PAT bit missing from page protection modify mask block: don't allow enabling a cache on devices that don't support it block: cleanup queue_wc_store drm/etnaviv: fix dumping of active MMU context arm64: tegra: Fix HSUART for Smaug arm64: dts: qcom: pmi8994: Add missing OVP interrupt arm64: dts: qcom: pm660l: Add missing short interrupt arm64: dts: qcom: pm6150l: Add missing short interrupt arm64: dts: qcom: sm8250-sony-xperia: correct GPIO keys wakeup again arm64: tegra: Fix HSUART for Jetson AGX Orin ARM: dts: BCM53573: Use updated "spi-gpio" binding properties ARM: dts: BCM53573: Add cells sizes to PCIe node ARM: dts: BCM53573: Drop nonexistent #usb-cells drm/amdgpu: avoid integer overflow warning in amdgpu_device_resize_fb_bar() firmware: ti_sci: Use system_state to determine polling ARM: dts: stm32: Add missing detach mailbox for DHCOM SoM ARM: dts: stm32: Update to generic ADC channel binding on DHSOM systems ARM: dts: stm32: Add missing detach mailbox for Odyssey SoM ARM: dts: stm32: YAML validation fails for Odyssey Boards ARM: dts: stm32: Add missing detach mailbox for emtrion emSBC-Argon ARM: dts: stm32: adopt generic iio bindings for adc channels on emstamp-argon ARM: dts: stm32: YAML validation fails for Argon Boards ARM: dts: stm32: Rename mdio0 to mdio arm64: dts: qcom: sm8250: Mark PCIe hosts as DMA coherent arm64: dts: qcom: pmk8350: fix ADC-TM compatible string arm64: dts: qcom: pmr735b: fix thermal zone name arm64: dts: qcom: pm8350b: fix thermal zone name arm64: dts: qcom: pm8350: fix thermal zone name arm64: dts: qcom: sm8350: Use proper CPU compatibles arm64: dts: qcom: sm8350: Add missing LMH interrupts to cpufreq arm64: dts: qcom: sm8350: Fix CPU idle state residency times arm64: dts: qcom: sdm845-tama: Set serial indices and stdout-path arm64: dts: qcom: msm8996: Add missing interrupt to the USB2 controller arm64: dts: qcom: sc8280xp: Add missing SCM interconnect arm64: dts: qcom: sc8280xp-crd: Correct vreg_misc_3p3 GPIO arm64: dts: qcom: sm8250-edo: Rectify gpio-keys arm64: dts: qcom: sm8250-edo: Add GPIO line names for PMIC GPIOs arm64: dts: qcom: sm8250-edo: Add gpio line names for TLMM arm64: dts: qcom: msm8916-l8150: correct light sensor VDDIO supply arm64: dts: qcom: sm8250: correct dynamic power coefficients arm64: dts: qcom: sm6350: Fix ZAP region soc: qcom: ocmem: Fix NUM_PORTS & NUM_MACROS macros soc: qcom: ocmem: Add OCMEM hardware version print ASoC: stac9766: fix build errors with REGMAP_AC97 drm/hyperv: Fix a compilation issue because of not including screen_info.h drm/amd/display: Do not set drr on pipe commit quota: fix dqput() to follow the guarantees dquot_srcu should provide quota: add new helper dquot_active() quota: rename dquot_active() to inode_quota_active() quota: factor out dquot_write_dquot() ASoC: cs43130: Fix numerator/denominator mixup drm/bridge: tc358764: Fix debug print parameter order netrom: Deny concurrent connect(). net/sched: sch_hfsc: Ensure inner classes have fsc curve sfc: Check firmware supports Ethernet PTP filter cteonxt2-pf: Fix backpressure config for multiple PFC priorities to work simultaneously octeontx2-pf: Fix PFC TX scheduler free octeontx2-pf: Refactor schedular queue alloc/free calls hwmon: (tmp513) Fix the channel number in tmp51x_is_visible() mlxsw: core_hwmon: Adjust module label names based on MTCAP sensor counter mlxsw: i2c: Limit single transaction buffer size mlxsw: i2c: Fix chunk size setting in output mailbox buffer net: arcnet: Do not call kfree_skb() under local_irq_disable() ice: avoid executing commands on other ports when driving sync wifi: ath9k: use IS_ERR() with debugfs_create_dir() arm64: mm: use ptep_clear() instead of pte_clear() in clear_flush() Bluetooth: btusb: Do not call kfree_skb() under spin_lock_irqsave() wifi: mwifiex: avoid possible NULL skb pointer dereference mac80211: make ieee80211_tx_info padding explicit wifi: nl80211/cfg80211: add forgotten nla_policy for BSS color attribute wifi: ath9k: protect WMI command response buffer replacement with a lock wifi: ath9k: fix races between ath9k_wmi_cmd and ath9k_wmi_ctrl_rx samples/bpf: fix broken map lookup probe samples/bpf: fix bio latency check with tracepoint ARM: dts: Add .dts files missing from the build wifi: mwifiex: Fix missed return in oob checks failed path wifi: mwifiex: fix memory leak in mwifiex_histogram_read() net: annotate data-races around sk->sk_lingertime fs: ocfs2: namei: check return value of ocfs2_add_entry() lwt: Check LWTUNNEL_XMIT_CONTINUE strictly lwt: Fix return values of BPF xmit ops hwrng: iproc-rng200 - Implement suspend and resume calls crypto: caam - fix unchecked return value error ice: ice_aq_check_events: fix off-by-one check when filling buffer net-memcg: Fix scope of sockmem pressure indicators selftests/bpf: Clean up fmod_ret in bench_rename test script selftests/bpf: Fix repeat option when kfunc_call verification fails net: tcp: fix unexcepted socket die when snd_wnd is 0 Bluetooth: hci_sync: Avoid use-after-free in dbg for hci_add_adv_monitor() Bluetooth: hci_sync: Don't double print name in add/remove adv_monitor Bluetooth: Fix potential use-after-free when clear keys Bluetooth: nokia: fix value check in nokia_bluetooth_serdev_probe() crypto: api - Use work queue in crypto_destroy_instance crypto: stm32 - Properly handle pm_runtime_get failing kbuild: rust_is_available: fix confusion when a version appears in the path kbuild: rust_is_available: add check for `bindgen` invocation kbuild: rust_is_available: fix version check when CC has multiple arguments kbuild: rust_is_available: remove -v option selftests/bpf: fix static assert compilation issue for test_cls_*.c wifi: mwifiex: fix error recovery in PCIE buffer descriptor management wifi: mwifiex: Fix OOB and integer underflow when rx packets wifi: mt76: mt7915: fix power-limits while chan_switch can: gs_usb: gs_usb_receive_bulk_callback(): count RX overflow errors also in case of OOM spi: tegra20-sflash: fix to check return value of platform_get_irq() in tegra_sflash_probe() wifi: mt76: testmode: add nla_policy for MT76_TM_ATTR_TX_LENGTH bpf: reject unhashed sockets in bpf_sk_assign udp: re-score reuseport groups when connected sockets are present wifi: mt76: mt7921: fix non-PSC channel scan fail wifi: rtw89: debug: Fix error handling in rtw89_debug_priv_btc_manual_set() regmap: rbtree: Use alloc_flags for memory allocations hwrng: pic32 - use devm_clk_get_enabled hwrng: nomadik - keep clock enabled while hwrng is registered tcp: tcp_enter_quickack_mode() should be static crypto: qat - change value of default idle filter bpf: Fix an error in verifying a field in a union bpf: Clear the probe_addr for uprobe libbpf: Fix realloc API handling in zero-sized edge cases bpftool: Use a local bpf_perf_event_value to fix accessing its fields bpftool: Use a local copy of BPF_LINK_TYPE_PERF_EVENT in pid_iter.bpf.c bpftool: Define a local bpf_perf_link to fix accessing its fields bpftool: use a local copy of perf_event to fix accessing :: Bpf_cookie selftests/bpf: Fix bpf_nf failure upon test rerun cpufreq: powernow-k8: Use related_cpus instead of cpus in driver.exit() x86/efistub: Fix PCI ROM preservation in mixed mode cpufreq: amd-pstate-ut: Fix kernel panic when loading the driver cpufreq: amd-pstate-ut: Remove module parameter access thermal/of: Fix potential uninitialized value access ACPI: x86: s2idle: Fix a logic error parsing AMD constraints table ACPI: x86: s2idle: Post-increment variables when getting constraints irqchip/loongson-eiointc: Fix return value checking of eiointc_index s390/paes: fix PKEY_TYPE_EP11_AES handling for secure keyblobs s390/pkey: fix PKEY_TYPE_EP11_AES handling for sysfs attributes s390/pkey: fix PKEY_TYPE_EP11_AES handling in PKEY_GENSECK2 IOCTL s390/pkey: fix/harmonize internal keyblob headers selftests/futex: Order calls to futex_lock_pi perf/imx_ddr: don't enable counter0 if none of 4 counters are used sched/rt: Fix sysctl_sched_rr_timeslice intial value arm64/fpsimd: Only provide the length to cpufeature for xCR registers arm64/sme: Don't use streaming mode to probe the maximum SME VL x86/decompressor: Don't rely on upper 32 bits of GPRs being preserved sched/psi: Select KERNFS as needed arm64/ptrace: Clean up error handling path in sve_set_common() selftests/resctrl: Close perf value read fd on errors selftests/resctrl: Unmount resctrl FS if child fails to run benchmark selftests/resctrl: Don't leak buffer in fill_cache() selftests/resctrl: Add resctrl.h into build deps OPP: Fix passing 0 to PTR_ERR in _opp_attach_genpd() refscale: Fix uninitalized use of wait_queue_head_t ARM: ptrace: Restore syscall skipping for tracers ARM: ptrace: Restore syscall restart tracing vfs, security: Fix automount superblock LSM init problem, preventing NFS sb sharing selftests/harness: Actually report SKIP for signal tests tmpfs: verify {g,u}id mount options correctly iomap: Remove large folio handling in iomap_invalidate_folio() fs: Fix error checking for d_hash_and_lookup() eventfd: prevent underflow for eventfd semaphores reiserfs: Check the return value from __getblk() tools/resolve_btfids: Fix setting HOSTCFLAGS tools/resolve_btfids: Pass HOSTCFLAGS as EXTRA_CFLAGS to prepare targets tools/resolve_btfids: Tidy HOST_OVERRIDES tools/resolve_btfids: Compile resolve_btfids as host program tools/resolve_btfids: Alter how HOSTCC is forced tools/resolve_btfids: Install subcmd headers tools/resolve_btfids: Use pkg-config to locate libelf tools lib subcmd: Add dependency test to install_headers tools lib subcmd: Make install_headers clearer tools lib subcmd: Add install target Revert "net: macsec: preserve ingress frame ordering" Revert "PCI: tegra194: Enable support for 256 Byte payload" Input: i8042 - add quirk for TUXEDO Gemini 17 Gen1/Clevo PD70PN udf: Handle error when adding extent to a file udf: Check consistency of Space Bitmap Descriptor drm/amd/display: ensure async flips are only accepted for fast updates net: Avoid address overwrite in kernel_connect KVM: x86/mmu: Add "never" option to allow sticky disabling of nx_huge_pages KVM: x86/mmu: Use kstrtobool() instead of strtobool() tpm: Enable hwrng only for Pluton on AMD CPUs crypto: rsa-pkcs1pad - Use helper to set reqsize cpufreq: intel_pstate: set stale CPU frequency to minimum of: property: Simplify of_link_to_phandle() platform/mellanox: Fix mlxbf-tmfifo not handling all virtio CONSOLE notifications tracing: Introduce pipe_cpumask to avoid race on trace_pipes net: sfp: handle 100G/25G active optical cables in sfp_parse_support ALSA: seq: oss: Fix racy open/close of MIDI devices LoongArch: Fix the write_fcsr() macro LoongArch: Let pmd_present() return true when splitting pmd scsi: lpfc: Fix incorrect big endian type assignment in bsg loopback path scsi: storvsc: Always set no_report_opcodes scsi: aacraid: Reply queue mapping to CPUs based on IRQ affinity sctp: handle invalid error codes without calling BUG() cifs: fix max_credits implementation cifs: fix sockaddr comparison in iface_cmp bnx2x: fix page fault following EEH recovery netlabel: fix shift wrapping bug in netlbl_catmap_setlong() wifi: mac80211: Use active_links instead of valid_links in Tx wifi: cfg80211: remove links only on AP drm/amdgpu: Match against exact bootloader status net: hns3: restore user pause configure when disable autoneg scsi: qedi: Fix potential deadlock on &qedi_percpu->p_work_lock scsi: lpfc: Remove reftag check in DIF paths platform/x86/amd/pmf: Fix unsigned comparison with less than zero idmaengine: make FSL_EDMA and INTEL_IDMA64 depends on HAS_IOMEM powerpc/powermac: Use early_* IO variants in via_calibrate_decr() wifi: brcmfmac: Fix field-spanning write in brcmf_scan_params_v2_to_v1() net: usb: qmi_wwan: add Quectel EM05GV2 net: annotate data-races around sk->sk_{rcv|snd}timeo net: dsa: microchip: KSZ9477 register regmap alignment to 32 bit boundaries Revert "wifi: ath6k: silence false positive -Wno-dangling-pointer warning on GCC 12" vmbus_testing: fix wrong python syntax for integer value comparison clk: fixed-mmio: make COMMON_CLK_FIXED_MMIO depend on HAS_IOMEM kprobes: Prohibit probing on CFI preamble symbol security: keys: perform capable check only on privileged operations staging: fbtft: ili9341: use macro FBTFT_REGISTER_SPI_DRIVER ALSA: usb-audio: Update for native DSD support quirks ata: pata_arasan_cf: Use dev_err_probe() instead dev_err() in data_xfer() ovl: Always reevaluate the file signature for IMA drm/amd/display: Exit idle optimizations before attempt to access PHY drm/amd/display: Guard DCN31 PHYD32CLK logic against chip family drm/amd/smu: use AverageGfxclkFrequency* to replace previous GFX Curr Clock platform/x86: huawei-wmi: Silence ambient light sensor platform/x86: asus-wmi: Fix setting RGB mode on some TUF laptops platform/x86: think-lmi: Use kfree_sensitive instead of kfree platform/x86/intel/hid: Add HP Dragonfly G2 to VGBS DMI quirks platform/x86: intel: hid: Always call BTNL ACPI method ALSA: usb-audio: Add quirk for Microsoft Modern Wireless Headset ASoC: atmel: Fix the 8K sample parameter in I2SC master ASoC: rt711-sdca: fix for JD event handling in ClockStop Mode0 ASoC: rt711: fix for JD event handling in ClockStop Mode0 ASoc: codecs: ES8316: Fix DMIC config ASoC: rt5682-sdw: fix for JD event handling in ClockStop Mode0 fs/nls: make load_nls() take a const parameter s390/dasd: fix hanging device after request requeue s390/dasd: use correct number of retries for ERP requests m68k: Fix invalid .section syntax ethernet: atheros: fix return value check in atl1c_tso_csum() ASoC: nau8821: Add DMI quirk mechanism for active-high jack-detect ASoC: da7219: Check for failure reading AAD IRQ events ASoC: da7219: Flush pending AAD IRQ when suspending ksmbd: fix out of bounds in init_smb2_rsp_hdr() ksmbd: no response from compound read ksmbd: validate session id and tree id in compound request ksmbd: fix out of bounds in smb3_decrypt_req() 9p: virtio: make sure 'offs' is initialized in zc_request 9p: virtio: fix unlikely null pointer deref in handle_rerror media: pci: cx23885: fix error handling for cx23885 ATSC boards media: pulse8-cec: handle possible ping error media: amphion: use dev_err_probe phy: qcom-snps-femto-v2: use qcom_snps_hsphy_suspend/resume error code Revert "MIPS: unhide PATA_PLATFORM" media: uapi: HEVC: Add num_delta_pocs_of_ref_rps_idx field powerpc/boot: Disable power10 features after BOOTAFLAGS assignment ALSA: hda/realtek: Enable 4 amplifiers instead of 2 on a HP platform ARM: dts: imx: Set default tuning step for imx7d usdhc Revert "Revert drm/amd/display: Enable Freesync Video Mode by default" scsi: ufs: Try harder to change the power mode Partially revert "drm/amd/display: Fix possible underflow for displays with large vblank" Revert "bridge: Add extack warning when enabling STP in netns." Linux 6.1.52 pinctrl: amd: Don't show `Invalid config param` errors usb: typec: tcpci: clear the fault status bit nilfs2: fix WARNING in mark_buffer_dirty due to discarded buffer reuse nilfs2: fix general protection fault in nilfs_lookup_dirty_data_buffers() dt-bindings: sc16is7xx: Add property to change GPIO function tcpm: Avoid soft reset when partner does not support get_status fsi: master-ast-cf: Add MODULE_FIRMWARE macro firmware: stratix10-svc: Fix an NULL vs IS_ERR() bug in probe serial: sc16is7xx: fix bug when first setting GPIO direction serial: sc16is7xx: fix broken port 0 uart init serial: qcom-geni: fix opp vote on shutdown wifi: mt76: mt7921: fix skb leak by txs missing in AMSDU wifi: mt76: mt7921: do not support one stream on secondary antenna only Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition staging: rtl8712: fix race condition HID: wacom: remove the battery when the EKR is off usb: chipidea: imx: improve logic if samsung,picophy-* parameter is 0 usb: dwc3: meson-g12a: do post init to fix broken usb after resumption ALSA: usb-audio: Fix init call orders for UAC1 USB: serial: option: add FOXCONN T99W368/T99W373 product USB: serial: option: add Quectel EM05G variant (0x030e) modules: only allow symbol_get of EXPORT_SYMBOL_GPL modules rtc: ds1685: use EXPORT_SYMBOL_GPL for ds1685_rtc_poweroff net: enetc: use EXPORT_SYMBOL_GPL for enetc_phc_index mmc: au1xmmc: force non-modular build and remove symbol_get usage ARM: pxa: remove use of symbol_get() ksmbd: reduce descriptor size if remaining bytes is less than request size ksmbd: replace one-element array with flex-array member in struct smb2_ea_info ksmbd: fix slub overflow in ksmbd_decode_ntlmssp_auth_blob() ksmbd: fix wrong DataOffset validation of create context erofs: ensure that the post-EOF tails are all zeroed Linux 6.1.51 thunderbolt: Fix a backport error for display flickering issue kallsyms: Fix kallsyms_selftest failure io_uring/parisc: Adjust pgoff in io_uring mmap() for parisc parisc: sys_parisc: parisc_personality() is called from asm code parisc: Cleanup mmap implementation regarding color alignment lockdep: fix static memory detection even more ARM: module: Use module_init_layout_section() to spot init sections arm64: module: Use module_init_layout_section() to spot init sections arm64: module-plts: inline linux/moduleloader.h module: Expose module_init_layout_section() ACPI: thermal: Drop nocrt parameter Linux 6.1.50 ASoC: amd: vangogh: select CONFIG_SND_AMD_ACP_CONFIG maple_tree: disable mas_wr_append() when other readers are possible ASoC: amd: yc: Fix a non-functional mic on Lenovo 82SJ gpio: sim: pass the GPIO device's software node to irq domain gpio: sim: dispose of irq mappings before destroying the irq_sim domain dma-buf/sw_sync: Avoid recursive lock during fence signal pinctrl: renesas: rza2: Add lock around pinctrl_generic{{add,remove}_group,{add,remove}_function} pinctrl: renesas: rzv2m: Fix NULL pointer dereference in rzv2m_dt_subnode_to_map() pinctrl: renesas: rzg2l: Fix NULL pointer dereference in rzg2l_dt_subnode_to_map() clk: Fix undefined reference to `clk_rate_exclusive_{get,put}' scsi: core: raid_class: Remove raid_component_add() scsi: snic: Fix double free in snic_tgt_create() madvise:madvise_free_pte_range(): don't use mapcount() against large folio for sharing check can: raw: add missing refcount for memory leak fix ublk: remove check IO_URING_F_SQE128 in ublk_ch_uring_cmd thunderbolt: Fix Thunderbolt 3 display flickering issue on 2nd hot plug onwards cgroup/cpuset: Free DL BW in case can_attach() fails sched/deadline: Create DL BW alloc, free & check overflow interface cgroup/cpuset: Iterate only if DEADLINE tasks are present sched/cpuset: Keep track of SCHED_DEADLINE task in cpusets sched/cpuset: Bring back cpuset_mutex cgroup/cpuset: Rename functions dealing with DEADLINE accounting nfsd: use vfs setgid helper nfs: use vfs setgid helper selftests/net: mv bpf/nat6to4.c to net folder hwmon: (aquacomputer_d5next) Add selective 200ms delay after sending ctrl report x86/fpu: Set X86_FEATURE_OSXSAVE feature after enabling OSXSAVE in CR4 x86/fpu: Invalidate FPU state correctly on exec() drm/display/dp: Fix the DP DSC Receiver cap size drm/i915/dgfx: Enable d3cold at s2idle drm/vmwgfx: Fix shader stage validation PCI: acpiphp: Use pci_assign_unassigned_bridge_resources() only for non-root bus media: vcodec: Fix potential array out-of-bounds in encoder queue_setup pinctrl: amd: Mask wake bits on probe again of: dynamic: Refactor action prints to not use "%pOF" inside devtree_lock of: unittest: Fix EXPECT for parse_phandle_with_args_map() test radix tree: remove unused variable riscv: Fix build errors using binutils2.37 toolchains riscv: Handle zicsr/zifencei issue between gcc and binutils lib/clz_ctz.c: Fix __clzdi2() and __ctzdi2() for 32-bit kernels batman-adv: Hold rtnl lock during MTU update via netlink batman-adv: Fix batadv_v_ogm_aggr_send memory leak batman-adv: Fix TT global entry leak when client roamed back batman-adv: Do not get eth header before batadv_check_management_packet batman-adv: Don't increase MTU when set by user batman-adv: Trigger events for auto adjusted MTU selinux: set next pointer before attaching to list nfsd: Fix race to FREE_STATEID and cl_revoked NFS: Fix a use after free in nfs_direct_join_group() mm: memory-failure: fix unexpected return value in soft_offline_page() mm: add a call to flush_cache_vmap() in vmap_pfn() mm/gup: handle cont-PTE hugetlb pages correctly in gup_must_unshare() via GUP-fast ALSA: ymfpci: Fix the missing snd_card_free() call at probe error shmem: fix smaps BUG sleeping while atomic mm,ima,kexec,of: use memblock_free_late from ima_free_kexec_buffer clk: Fix slab-out-of-bounds error in devm_clk_release() NFSv4: Fix dropped lock for racing OPEN and delegation return platform/x86: ideapad-laptop: Add support for new hotkeys found on ThinkBook 14s Yoga ITL wifi: mac80211: limit reorder_buf_filtered to avoid UBSAN warning ibmveth: Use dcbf rather than dcbfl ASoC: cs35l41: Correct amp_gain_tlv values ASoC: amd: yc: Add VivoBook Pro 15 to quirks list for acp6x io_uring/msg_ring: fix missing lock on overflow for IOPOLL io_uring/msg_ring: move double lock/unlock helpers higher up io_uring: extract a io_msg_install_complete helper io_uring: get rid of double locking KVM: x86/mmu: Fix an sign-extension bug with mmu_seq that hangs vCPUs KVM: x86: Preserve TDP MMU roots until they are explicitly invalidated bonding: fix macvlan over alb bond support rtnetlink: Reject negative ifindexes in RTM_NEWLINK netfilter: nf_tables: fix out of memory error handling netfilter: nf_tables: flush pending destroy work before netlink notifier i40e: fix potential NULL pointer dereferencing of pf->vf i40e_sync_vsi_filters() net/sched: fix a qdisc modification with ambiguous command request igc: Fix the typo in the PTM Control macro igb: Avoid starting unnecessary workqueues can: isotp: fix support for transmission of SF without flow control selftests: bonding: do not set port down before adding to bond ice: Fix NULL pointer deref during VF reset Revert "ice: Fix ice VF reset during iavf initialization" ice: fix receive buffer size miscalculation ipv4: fix data-races around inet->inet_id net: validate veth and vxcan peer ifindexes net: bcmgenet: Fix return value check for fixed_phy_register() net: bgmac: Fix return value check for fixed_phy_register() net: dsa: mt7530: fix handling of 802.1X PAE frames selftests: mlxsw: Fix test failure on Spectrum-4 mlxsw: Fix the size of 'VIRT_ROUTER_MSB' mlxsw: reg: Fix SSPR register layout mlxsw: pci: Set time stamp fields also when its type is MIRROR_UTC ipvlan: Fix a reference count leak warning in ipvlan_ns_exit() dccp: annotate data-races in dccp_poll() sock: annotate data-races around prot->memory_pressure net: dsa: felix: fix oversize frame dropping for always closed tc-taprio gates devlink: add missing unregister linecard notification devlink: move code to a dedicated directory octeontx2-af: SDP: fix receive link config tracing: Fix memleak due to race between current_tracer and trace tracing: Fix cpu buffers unavailable due to 'record_disabled' missed drm/i915/gt: Support aux invalidation on all engines drm/i915/gt: Poll aux invalidation register bit on invalidation drm/i915/gt: Ensure memory quiesced before invalidation drm/i915: Add the gen12_needs_ccs_aux_inv helper s390/zcrypt: fix reply buffer calculations for CCA replies s390/zcrypt: remove unnecessary (void *) conversions can: raw: fix lockdep issue in raw_release() can: raw: fix receiver memory leak jbd2: fix a race when checking checkpoint buffer busy jbd2: remove journal_clean_one_cp_list() jbd2: remove t_checkpoint_io_list MIPS: cpu-features: Use boot_cpu_type for CPU type based features MIPS: cpu-features: Enable octeon_cache by cpu_type PCI: acpiphp: Reassign resources on bridge if necessary video/aperture: Move vga handling to pci function video/aperture: Only kick vgacon when the pdev is decoding vga drm/aperture: Remove primary argument drm/gma500: Use drm_aperture_remove_conflicting_pci_framebuffers fbdev/radeon: use pci aperture helpers drm/ast: Use drm_aperture_remove_conflicting_pci_framebuffers xprtrdma: Remap Receive buffers after a reconnect NFSv4: fix out path in __nfs4_get_acl_uncached NFSv4.2: fix error handling in nfs42_proc_getxattr Linux 6.1.49 Revert "f2fs: fix to do sanity check on direct node in truncate_dnode()" Revert "f2fs: fix to set flush_merge opt and show noflush_merge" Revert "f2fs: don't reset unchangable mount option in f2fs_remount()" objtool/x86: Fix SRSO mess Linux 6.1.48 x86/srso: Correct the mitigation status when SMT is disabled objtool/x86: Fixup frame-pointer vs rethunk x86/retpoline,kprobes: Fix position of thunk sections with CONFIG_LTO_CLANG x86/srso: Disable the mitigation on unaffected configurations x86/CPU/AMD: Fix the DIV(0) initial fix attempt x86/retpoline: Don't clobber RFLAGS during srso_safe_ret() x86/static_call: Fix __static_call_fixup() x86/srso: Explain the untraining sequences a bit more x86/cpu: Cleanup the untrain mess x86/cpu: Rename srso_(.*)_alias to srso_alias_\1 x86/cpu: Rename original retbleed methods x86/cpu: Clean up SRSO return thunk mess x86/alternative: Make custom return thunk unconditional x86/cpu: Fix up srso_safe_ret() and __x86_return_thunk() x86/cpu: Fix __x86_return_thunk symbol type Linux 6.1.47 mmc: f-sdh30: fix order of function calls in sdhci_f_sdh30_remove net: fix the RTO timer retransmitting skb every 1ms if linear option is enabled drm/nouveau/disp: fix use-after-free in error handling of nouveau_connector_create af_unix: Fix null-ptr-deref in unix_stream_sendpage(). drm/amdgpu: keep irq count in amdgpu_irq_disable_all drm/amd/pm: skip the RLC stop when S0i3 suspend for SMU v13.0.4/11 arm64/ptrace: Ensure that SME is set up for target when writing SSVE state netfilter: set default timeout to 3 secs for sctp shutdown send and recv state hugetlb: do not clear hugetlb dtor until allocating vmemmap drm/amd/display: Implement workaround for writing to OTG_PIXEL_RATE_DIV register sched/fair: Remove capacity inversion detection sched/fair: unlink misfit task from cpu overutilized zsmalloc: allow only one active pool compaction context drm/amd/display: disable RCO for DCN314 ASoC: amd: vangogh: select CONFIG_SND_AMD_ACP_CONFIG drm/amdgpu/pm: fix throttle_status for other than MP1 11.0.7 drm/amdgpu: skip fence GFX interrupts disable/enable for S0ix drm/amd: flush any delayed gfxoff on suspend entry drm/i915/sdvo: fix panel_type initialization drm/qxl: fix UAF on handle creation mmc: block: Fix in_flight[issue_type] value error mmc: wbsd: fix double mmc_free_host() in wbsd_init() blk-crypto: dynamically allocate fallback profile arm64: dts: rockchip: Fix Wifi/Bluetooth on ROCK Pi 4 boards virtio-net: Zero max_tx_vq field for VIRTIO_NET_CTRL_MQ_HASH_CONFIG case cifs: Release folio lock on fscache read hit. ALSA: usb-audio: Add support for Mythware XA001AU capture and playback interfaces. serial: 8250: Fix oops for port->pm on uart_change_pm() riscv: uaccess: Return the number of bytes effectively not copied ALSA: hda/realtek - Remodified 3k pull low procedure soc: aspeed: socinfo: Add kfree for kstrdup soc: aspeed: uart-routing: Use __sysfs_match_string ALSA: hda/realtek: Add quirks for HP G11 Laptops ASoC: meson: axg-tdm-formatter: fix channel slot allocation ASoC: rt5665: add missed regulator_bulk_disable arm64: dts: imx93: Fix anatop node size ARM: dts: imx: Set default tuning step for imx6sx usdhc arm64: dts: imx8mm: Drop CSI1 PHY reference clock configuration ARM: dts: imx6: phytec: fix RTC interrupt level ARM: dts: imx: align LED node names with dtschema arm64: dts: rockchip: Disable HS400 for eMMC on ROCK 4C+ arm64: dts: rockchip: Disable HS400 for eMMC on ROCK Pi 4 arm64: dts: qcom: qrb5165-rb5: fix thermal zone conflict bus: ti-sysc: Flush posted write on enable before reset ice: Block switchdev mode when ADQ is active and vice versa qede: fix firmware halt over suspend and resume net: do not allow gso_size to be set to GSO_BY_FRAGS sock: Fix misuse of sk_under_memory_pressure() sfc: don't unregister flow_indr if it was never registered net: dsa: mv88e6xxx: Wait for EEPROM done before HW reset i40e: fix misleading debug logs iavf: fix FDIR rule fields masks validation net: openvswitch: reject negative ifindex team: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves net: phy: broadcom: stub c45 read/write for 54810 netfilter: nft_dynset: disallow object maps ipvs: fix racy memcpy in proc_do_sync_threshold netfilter: nf_tables: deactivate catchall elements in next generation netfilter: nf_tables: fix false-positive lockdep splat octeon_ep: cancel tx_timeout_task later in remove sequence net: macb: In ZynqMP resume always configure PS GTR for non-wakeup source drm/panel: simple: Fix AUO G121EAN01 panel timings according to the docs selftests: mirror_gre_changes: Tighten up the TTL test match net: phy: fix IRQ-based wake-on-lan over hibernate / power off net: pcs: Add missing put_device call in miic_create virtio-net: set queues after driver_ok virtio_net: notify MAC address change on device initialization xfrm: add forgotten nla_policy for XFRMA_MTIMER_THRESH xfrm: add NULL check in xfrm_update_ae_params ip_vti: fix potential slab-use-after-free in decode_session6 ip6_vti: fix slab-use-after-free in decode_session6 xfrm: fix slab-use-after-free in decode_session6 net: xfrm: Amend XFRMA_SEC_CTX nla_policy structure net: af_key: fix sadb_x_filter validation net: xfrm: Fix xfrm_address_filter OOB read i2c: designware: Handle invalid SMBus block data response length value i2c: designware: Correct length byte validation logic btrfs: fix BUG_ON condition in btrfs_cancel_balance btrfs: fix incorrect splitting in btrfs_drop_extent_map_range tty: serial: fsl_lpuart: Clear the error flags by writing 1 for lpuart32 platforms tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux vdpa: Enable strict validation for netlinks ops vdpa: Add max vqp attr to vdpa_nl_policy for nlattr length check vdpa: Add queue index attr to vdpa_nl_policy for nlattr length check vdpa: Add features attr to vdpa_nl_policy for nlattr length check powerpc/rtas_flash: allow user copy to flash block cache objects fbdev: mmp: fix value check in mmphw_probe() i2c: tegra: Fix i2c-tegra DMA config option processing i2c: hisi: Only handle the interrupt of the driver's transfer i2c: bcm-iproc: Fix bcm_iproc_i2c_isr deadlock issue cifs: fix potential oops in cifs_oplock_break vdpa/mlx5: Delete control vq iotlb in destroy_mr only when necessary vdpa/mlx5: Fix mr->initialized semantics vduse: Use proper spinlock for IRQ injection virtio-mmio: don't break lifecycle of vm_dev btrfs: fix use-after-free of new block group that became unused btrfs: convert btrfs_block_group::seq_zone to runtime flag btrfs: convert btrfs_block_group::needs_free_space to runtime flag btrfs: move out now unused BG from the reclaim list video/aperture: Only remove sysfb on the default vga pci device fbdev/hyperv-fb: Do not set struct fb_info.apertures ARM: dts: nxp/imx6sll: fix wrong property name in usbphy node KVM: arm64: vgic-v4: Make the doorbell request robust w.r.t preemption drm/amd/display: fix access hdcp_workqueue assert drm/amd/display: phase3 mst hdcp for multiple displays drm/amd/display: save restore hdcp state when display is unplugged from mst hub igc: read before write to SRRCTL register ring-buffer: Do not swap cpu_buffer during resize process Bluetooth: MGMT: Use correct address for memcpy() powerpc/kasan: Disable KCOV in KASAN code ALSA: hda/realtek: Add quirk for ASUS ROG GZ301V ALSA: hda/realtek: Add quirk for ASUS ROG GA402X ALSA: hda/realtek: Add quirk for ASUS ROG GX650P ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync() ALSA: hda/realtek: Add quirks for Unis H3C Desktop B760 & Q760 fs/ntfs3: Mark ntfs dirty when on-disk struct is corrupted fs: ntfs3: Fix possible null-pointer dereferences in mi_read() fs/ntfs3: Enhance sanity check while generating attr_list drm/amdgpu: Fix potential fence use-after-free v2 ceph: try to dump the msgs when decoding fails Bluetooth: btusb: Add MT7922 bluetooth ID for the Asus Ally Bluetooth: L2CAP: Fix use-after-free watchdog: sp5100_tco: support Hygon FCH/SCH (Server Controller Hub) firewire: net: fix use after free in fwnet_finish_incoming_packet() thunderbolt: Limit Intel Barlow Ridge USB3 bandwidth thunderbolt: Add Intel Barlow Ridge PCI ID pcmcia: rsrc_nonstatic: Fix memory leak in nonstatic_release_resource_db() gfs2: Fix possible data races in gfs2_show_options() usb: chipidea: imx: add missing USB PHY DPDM wakeup setting usb: chipidea: imx: don't request QoS for imx8ulp thunderbolt: Read retimer NVM authentication status prior tb_retimer_set_inbound_sbtx() media: platform: mediatek: vpu: fix NULL ptr dereference usb: gadget: uvc: queue empty isoc requests if no video buffer is available usb: gadget: u_serial: Avoid spinlock recursion in __gs_console_push media: camss: set VFE bpl_alignment to 16 for sdm845 and sm8250 media: v4l2-mem2mem: add lock to protect parameter num_rdy led: qcom-lpg: Fix resource leaks in for_each_available_child_of_node() loops serial: stm32: Ignore return value of uart_remove_one_port() in .remove() cifs: fix session state check in reconnect to avoid use-after-free issue smb: client: fix warning in cifs_smb3_do_mount() ALSA: hda/realtek: Add quirks for ROG ALLY CS35l41 audio HID: intel-ish-hid: ipc: Add Arrow Lake PCI device ID ASoC: SOF: core: Free the firmware trace before calling snd_sof_shutdown() drm/amd/display: Enable dcn314 DPP RCO drm/amd/display: Skip DPP DTO update if root clock is gated RDMA/mlx5: Return the firmware result upon destroying QP/RQ drm/amd/display: Apply 60us prefetch for DCFCLK <= 300Mhz drm/amdgpu: install stub fence into potential unused fence pointers iommu/amd: Introduce Disable IRTE Caching Support HID: logitech-hidpp: Add USB and Bluetooth IDs for the Logitech G915 TKL Keyboard accel/habanalabs: add pci health check during heartbeat dma-remap: use kvmalloc_array/kvfree for larger dma memory remap ASoC: SOF: Intel: fix SoundWire/HDaudio mutual exclusion iopoll: Call cpu_relax() in busy loops ASoC: Intel: sof_sdw: Add support for Rex soundwire ASoC: Intel: sof_sdw_rt_sdca_jack_common: test SOF_JACK_JDSRC in _exit ARM: dts: imx6dl: prtrvt, prtvt7, prti6q, prtwd2: fix USB related warnings ASoC: amd: vangogh: Add check for acp config flags in vangogh platform drm: rcar-du: remove R-Car H3 ES1.* workarounds drm/stm: ltdc: fix late dereference check ASoC: SOF: amd: Add pci revision id check PCI: tegra194: Fix possible array out of bounds access ASoC: Intel: sof_sdw: add quirk for LNL RVP ASoC: Intel: sof_sdw: add quirk for MTL RVP drm/amdgpu: fix memory leak in mes self test drm/amdgpu: Fix integer overflow in amdgpu_cs_pass1 drm/amdgpu: fix calltrace warning in amddrm_buddy_fini net: phy: at803x: fix the wol setting functions net: phy: at803x: Use devm_regulator_get_enable_optional() net/smc: Fix setsockopt and sysctl to specify same buffer size again net/smc: replace mutex rmbs_lock and sndbufs_lock with rw_semaphore selftests: forwarding: tc_actions: Use ncat instead of nc selftests: forwarding: tc_actions: cleanup temporary files when test is aborted zsmalloc: fix races between modifications of fullness and isolated zsmalloc: consolidate zs_pool's migrate_lock and size_class's locks cpuidle: psci: Move enabling OSI mode after power domains creation cpuidle: psci: Extend information in log about OSI/PC mode mmc: sdhci-f-sdh30: Replace with sdhci_pltfm Linux 6.1.46 drm/amd/pm/smu7: move variables to where they are used sch_netem: fix issues in netem_change() vs get_dist_table() alpha: remove __init annotation from exported page_is_ram() ACPI: scan: Create platform device for CS35L56 platform/x86: serial-multi-instantiate: Auto detect IRQ resource for CSC3551 scsi: qedf: Fix firmware halt over suspend and resume scsi: qedi: Fix firmware halt over suspend and resume scsi: fnic: Replace return codes in fnic_clean_pending_aborts() scsi: core: Fix possible memory leak if device_add() fails scsi: snic: Fix possible memory leak if device_add() fails scsi: 53c700: Check that command slot is not NULL scsi: ufs: renesas: Fix private allocation scsi: storvsc: Fix handling of virtual Fibre Channel timeouts scsi: core: Fix legacy /proc parsing buffer overflow netfilter: nf_tables: report use refcount overflow nvme-rdma: fix potential unbalanced freeze & unfreeze nvme-tcp: fix potential unbalanced freeze & unfreeze btrfs: set cache_block_group_error if we find an error btrfs: reject invalid reloc tree root keys with stack dump btrfs: exit gracefully if reloc roots don't match btrfs: properly clear end of the unreserved range in cow_file_range btrfs: don't stop integrity writeback too early btrfs: wait for actual caching progress during allocation gpio: sim: mark the GPIO chip as a one that can sleep gpio: ws16c48: Fix off-by-one error in WS16C48 resource region extent ibmvnic: Ensure login failure recovery is safe from other resets ibmvnic: Do partial reset on login failure ibmvnic: Handle DMA unmapping of login buffs in release functions ibmvnic: Unmap DMA login rsp buffer on send login fail ibmvnic: Enforce stronger sanity checks on login response net/mlx5: Reload auxiliary devices in pci error handlers net/mlx5: Skip clock update work when device is in error state net/mlx5: LAG, Check correct bucket when modifying LAG net/mlx5: Allow 0 for total host VFs dmaengine: owl-dma: Modify mismatched function name dmaengine: mcf-edma: Fix a potential un-allocated memory access net: hns3: fix strscpy causing content truncation issue nexthop: Fix infinite nexthop bucket dump when using maximum nexthop ID nexthop: Make nexthop bucket dump more efficient nexthop: Fix infinite nexthop dump when using maximum nexthop ID net: hns3: fix deadlock issue when externel_lb and reset are executed together net: hns3: add wait until mac link down net: hns3: refactor hclge_mac_link_status_wait for interface reuse net: dsa: ocelot: call dsa_tag_8021q_unregister() under rtnl_lock() on driver remove net: phy: at803x: remove set/get wol callbacks for AR8032 net: marvell: prestera: fix handling IPv4 routes with nhid net: tls: avoid discarding data on record close RDMA/umem: Set iova in ODP flow wifi: cfg80211: fix sband iftype data lookup for AP_VLAN drm/rockchip: Don't spam logs in atomic check IB/hfi1: Fix possible panic during hotplug remove iavf: fix potential races for FDIR filters drivers: vxlan: vnifilter: free percpu vni stats on error path drivers: net: prevent tun_build_skb() to exceed the packet size limit dccp: fix data-race around dp->dccps_mss_cache bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves xsk: fix refcount underflow in error path tunnels: fix kasan splat when generating ipv4 pmtu error tcp: add missing family to tcp_set_ca_state() tracepoint net/smc: Use correct buffer sizes when switching between TCP and SMC net/packet: annotate data-races around tp->status mptcp: fix the incorrect judgment for msk->cb_flags macsec: use DEV_STATS_INC() mISDN: Update parameter type of dsp_cmx_send() bpf, sockmap: Fix bug that strp_done cannot be called bpf, sockmap: Fix map type error in sock_map_del_link net: core: remove unnecessary frame_sz check in bpf_xdp_adjust_tail() selftests: forwarding: tc_flower: Relax success criterion selftests: forwarding: Switch off timeout selftests: forwarding: Skip test when no interfaces are specified selftests: forwarding: hw_stats_l3_gre: Skip when using veth pairs selftests: forwarding: ethtool_extended_state: Skip when using veth pairs selftests: forwarding: ethtool: Skip when using veth pairs selftests: forwarding: Add a helper to skip test when using veth pairs selftests/rseq: Fix build with undefined __weak interconnect: qcom: sm8450: add enable_mask for bcm nodes interconnect: qcom: Add support for mask-based BCMs iio: core: Prevent invalid memory access when there is no parent drm/nouveau/disp: Revert a NULL check inside nouveau_connector_get_modes x86: Move gds_ucode_mitigated() declaration to header x86/speculation: Add cpu_show_gds() prototype x86/sev: Do not try to parse for the CC blob on non-AMD hardware x86/mm: Fix VDSO and VVAR placement on 5-level paging machines x86/cpu/amd: Enable Zenbleed fix for AMD Custom APU 0405 x86/srso: Fix build breakage with the LLVM linker usb: typec: altmodes/displayport: Signal hpd when configuring pin assignment usb: typec: tcpm: Fix response to vsafe0V event usb: common: usb-conn-gpio: Prevent bailing out if initial role is none USB: Gadget: core: Help prevent panic during UVC unconfigure usb: dwc3: Properly handle processing of pending events usb-storage: alauda: Fix uninit-value in alauda_check_media() misc: rtsx: judge ASPM Mode to set PETXCFG Reg binder: fix memory leak in binder_init() iio: adc: ina2xx: avoid NULL pointer dereference on OF device match iio: adc: ad7192: Fix ac excitation feature iio: frequency: admv1013: propagate errors from regulator_get_voltage() iio: cros_ec: Fix the allocation size for cros_ec_command io_uring: correct check for O_TMPFILE drm/amd/display: trigger timing sync only if TG is running drm/amd/display: fix the build when DRM_AMD_DC_DCN is not set drm/amd/display: Retain phantom plane/stream if validation fails drm/amd/display: Disable phantom OTG after enable for plane disable drm/amd/display: Use update plane and stream routine for DCN32x drm/amd/display: Avoid ABM when ODM combine is enabled for eDP drm/amd/display: Update OTG instance in the commit stream drm/amd/display: Handle seamless boot stream drm/amd/display: Add function for validate and update new stream drm/amd/display: Handle virtual hardware detect drm/amd/pm: avoid unintentional shutdown due to temperature momentary fluctuation drm/amd/pm: fulfill powerplay peak profiling mode shader/memory clock settings drm/amd/pm: expose swctf threshold setting for legacy powerplay drm/amd/pm: fulfill swsmu peak profiling mode shader/memory clock settings nilfs2: fix use-after-free of nilfs_root in dirtying inodes via iput radix tree test suite: fix incorrect allocation size for pthreads hwmon: (pmbus/bel-pfe) Enable PMBUS_SKIP_STATUS_CHECK for pfe1100 cpuidle: dt_idle_genpd: Add helper function to remove genpd topology drm/amd/display: limit DPIA link rate to HBR3 drm/amd: Disable S/G for APUs when 64GB or more host memory drm/amdgpu: add S/G display parameter drm/amd/display: check attr flag before set cursor degamma on DCN3+ drm/amdgpu: fix possible UAF in amdgpu_cs_pass1() drm/shmem-helper: Reset vma->vm_ops before calling dma_buf_mmap() drm/nouveau/nvkm/dp: Add workaround to fix DP 1.3+ DPCD issues drm/nouveau/gr: enable memory loads on helper invocation on all channels nvme-pci: add NVME_QUIRK_BOGUS_NID for Samsung PM9B1 256G and 512G riscv/kexec: handle R_RISCV_CALL_PLT relocation type riscv,mmio: Fix readX()-to-delay() ordering riscv/kexec: load initrd high in available memory net: mana: Fix MANA VF unload when hardware is unresponsive dmaengine: pl330: Return DMA_PAUSED when transaction is paused mptcp: fix disconnect vs accept race mptcp: avoid bogus reset on fallback close selftests: mptcp: join: fix 'implicit EP' test selftests: mptcp: join: fix 'delete and re-add' test ipv6: adjust ndisc_is_useropt() to also return true for PIO mmc: moxart: read scr register without changing byte order wireguard: allowedips: expand maximum node depth selftests: forwarding: Set default IPv6 traceroute utility wifi: rtw89: fix 8852AE disconnection caused by RX full flags wifi: nl80211: fix integer overflow in nl80211_parse_mbssid_elems() KVM: SEV: only access GHCB fields once KVM: SEV: snapshot the GHCB before accessing it ksmbd: fix wrong next length validation of ea buffer in smb2_set_ea() ksmbd: validate command request size tpm: Add a helper for checking hwrng enabled tpm: Disable RNG for all AMD fTPMs Revert "loongarch/cpu: Switch to arch_cpu_finalize_init()" gcc-plugins: Reorganize gimple includes for GCC 13 Linux 6.1.45 x86/CPU/AMD: Do not leak quotient data after a division by 0 Revert "drm/i915: Disable DC states for all commits" drm/amdgpu: Use apt name for FW reserved region drm/amdgpu: Remove unnecessary domain argument drm/amdgpu: add vram reservation based on vram_usagebyfirmware_v2_2 arm64/ptrace: Don't enable SVE when setting streaming SVE exfat: check if filename entries exceeds max filename length f2fs: don't reset unchangable mount option in f2fs_remount() f2fs: fix to set flush_merge opt and show noflush_merge selftests/rseq: Play nice with binaries statically linked against glibc 2.35+ drm/amd/display: skip CLEAR_PAYLOAD_ID_TABLE if device mst_en is 0 drm/amd/display: Ensure that planes are in the same order drm/imx/ipuv3: Fix front porch adjustment upon hactive aligning powerpc/mm/altmap: Fix altmap boundary check mtd: rawnand: fsl_upm: Fix an off-by one test in fun_exec_op() mtd: rawnand: rockchip: Align hwecc vs. raw page helper layouts mtd: rawnand: rockchip: fix oobfree offset and description mtd: rawnand: omap_elm: Fix incorrect type in assignment io_uring: annotate offset timeout races f2fs: fix to do sanity check on direct node in truncate_dnode() btrfs: remove BUG_ON()'s in add_new_free_space() ext2: Drop fragment support fs: Protect reconfiguration of sb read-write from racing writes net: usbnet: Fix WARNING in usbnet_start_xmit/usb_submit_urb debugobjects: Recheck debug_objects_enabled before reporting Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb fs/sysv: Null check to prevent null-ptr-deref bug fs/ntfs3: Use __GFP_NOWARN allocation at ntfs_load_attr_list() mm: kmem: fix a NULL pointer dereference in obj_stock_flush_required() file: reinstate f_pos locking optimization for regular files bpf, cpumap: Make sure kthread is running before map update returns clk: imx93: Propagate correct error in imx93_clocks_probe() drm/i915/gt: Cleanup aux invalidation registers drm/i915: Fix premature release of request's reusable memory drm/ttm: check null pointer before accessing when swapping open: make RESOLVE_CACHED correctly test for O_TMPFILE arm64/fpsimd: Sync FPSIMD state with SVE for SME only systems arm64/fpsimd: Clear SME state in the target task when setting the VL arm64/fpsimd: Sync and zero pad FPSIMD state for streaming SVE powerpc/ftrace: Create a dummy stackframe to fix stack unwind bpf: Disable preemption in bpf_event_output rbd: prevent busy loop when requesting exclusive lock x86/hyperv: Disable IBT when hypercall page lacks ENDBR instruction wifi: mt76: mt7615: do not advertise 5 GHz on first phy of MT7615D (DBDC) net: tap_open(): set sk_uid from current_fsuid() net: tun_chr_open(): set sk_uid from current_fsuid() arm64: dts: stratix10: fix incorrect I2C property for SCL signal bpf: Disable preemption in bpf_perf_event_output mtd: rawnand: meson: fix OOB available bytes for ECC mtd: spinand: toshiba: Fix ecc_get_status exfat: release s_lock before calling dir_emit() exfat: use kvmalloc_array/kvfree instead of kmalloc_array/kfree firmware: arm_scmi: Drop OF node reference in the transport channel setup ceph: defer stopping mdsc delayed_work USB: zaurus: Add ID for A-300/B-500/C-700 libceph: fix potential hang in ceph_osdc_notify() scsi: storvsc: Limit max_sectors for virtual Fibre Channel devices scsi: zfcp: Defer fc_rport blocking until after ADISC response rust: allocator: Prevent mis-aligned allocation tcp_metrics: fix data-race in tcpm_suck_dst() vs fastopen tcp_metrics: annotate data-races around tm->tcpm_net tcp_metrics: annotate data-races around tm->tcpm_vals[] tcp_metrics: annotate data-races around tm->tcpm_lock tcp_metrics: annotate data-races around tm->tcpm_stamp tcp_metrics: fix addr_same() helper prestera: fix fallback to previous version on same major version net/mlx5: fs_core: Skip the FTs in the same FS_TYPE_PRIO_CHAINS fs_prio net/mlx5: fs_core: Make find_closest_ft more generic vxlan: Fix nexthop hash size ip6mr: Fix skb_under_panic in ip6mr_cache_report() s390/qeth: Don't call dev_close/dev_open (DOWN/UP) net: dcb: choose correct policy to parse DCB_ATTR_BCN bnxt_en: Fix max_mtu setting for multi-buf XDP bnxt_en: Fix page pool logic for page size >= 64K net: netsec: Ignore 'phy-mode' on SynQuacer in DT mode net: korina: handle clk prepare error in korina_probe() net: ll_temac: fix error checking of irq_of_parse_and_map() bpf: sockmap: Remove preempt_disable in sock_map_sk_acquire net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free bpf, cpumap: Handle skb as well when clean up ptr_ring ice: Fix RDMA VSI removal during queue rebuild net/sched: taprio: Limit TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME to INT_MAX. net: annotate data-races around sk->sk_priority net: add missing data-race annotation for sk_ll_usec net: add missing data-race annotations around sk->sk_peek_off net: annotate data-races around sk->sk_mark net: add missing READ_ONCE(sk->sk_rcvbuf) annotation net: add missing READ_ONCE(sk->sk_sndbuf) annotation net: add missing READ_ONCE(sk->sk_rcvlowat) annotation net: annotate data-races around sk->sk_max_pacing_rate net: annotate data-race around sk->sk_txrehash net: annotate data-races around sk->sk_reserved_mem qed: Fix scheduling in a tasklet while getting stats mISDN: hfcpci: Fix potential deadlock on &hc->lock net: sched: cls_u32: Fix match key mis-addressing perf test uprobe_from_different_cu: Skip if there is no gcc net: dsa: fix value check in bcm_sf2_sw_probe() rtnetlink: let rtnl_bridge_setlink checks IFLA_BRIDGE_MODE length bpf: Add length check for SK_DIAG_BPF_STORAGE_REQ_MAP_FD parsing net/mlx5e: Move representor neigh cleanup to profile cleanup_tx net/mlx5e: Fix crash moving to switchdev mode when ntuple offload is set net/mlx5e: fix return value check in mlx5e_ipsec_remove_trailer() net/mlx5: fix potential memory leak in mlx5e_init_rep_rx net/mlx5: DR, fix memory leak in mlx5dr_cmd_create_reformat_ctx net/mlx5e: fix double free in macsec_fs_tx_create_crypto_table_groups wifi: cfg80211: Fix return value in scan logic erofs: fix wrong primary bvec selection on deduplicated extents KVM: s390: fix sthyi error handling word-at-a-time: use the same return type for has_zero regardless of endianness firmware: arm_scmi: Fix chan_free cleanup on SMC lib/bitmap: workaround const_eval test build failure firmware: smccc: Fix use of uninitialised results structure arm64: dts: freescale: Fix VPU G2 clock arm64: dts: imx8mn-var-som: add missing pull-up for onboard PHY reset pinmux arm64: dts: phycore-imx8mm: Correction in gpio-line-names arm64: dts: phycore-imx8mm: Label typo-fix of VPU arm64: dts: imx8mm-venice-gw7904: disable disp_blk_ctrl arm64: dts: imx8mm-venice-gw7903: disable disp_blk_ctrl iommu/arm-smmu-v3: Document nesting-related errata iommu/arm-smmu-v3: Add explicit feature for nesting iommu/arm-smmu-v3: Document MMU-700 erratum 2812531 iommu/arm-smmu-v3: Work around MMU-600 erratum 1076982 net: ipa: only reset hashed tables when supported net/mlx5: Free irqs only on shutdown callback perf: Fix function pointer case io_uring: gate iowait schedule on having pending requests Linux 6.1.44 x86: fix backwards merge of GDS/SRSO bit xen/netback: Fix buffer overrun triggered by unusual packet x86/srso: Tie SBPB bit setting to microcode patch detection x86/srso: Add a forgotten NOENDBR annotation x86/srso: Fix return thunks in generated code x86/srso: Add IBPB on VMEXIT x86/srso: Add IBPB x86/srso: Add SRSO_NO support x86/srso: Add IBPB_BRTYPE support x86/srso: Add a Speculative RAS Overflow mitigation x86/cpu, kvm: Add support for CPUID_80000021_EAX x86/bugs: Increase the x86 bugs vector size to two u32s Documentation/x86: Fix backwards on/off logic about YMM support x86/mm: Initialize text poking earlier mm: Move mm_cachep initialization to mm_init() x86/mm: Use mm_alloc() in poking_init() x86/mm: fix poking_init() for Xen PV guests x86/xen: Fix secondary processors' FPU initialization x86/mem_encrypt: Unbreak the AMD_MEM_ENCRYPT=n build KVM: Add GDS_NO support to KVM x86/speculation: Add Kconfig option for GDS x86/speculation: Add force option to GDS mitigation x86/speculation: Add Gather Data Sampling mitigation x86/fpu: Move FPU initialization into arch_cpu_finalize_init() x86/fpu: Mark init functions __init x86/fpu: Remove cpuinfo argument from init functions x86/init: Initialize signal frame size late init, x86: Move mem_encrypt_init() into arch_cpu_finalize_init() init: Invoke arch_cpu_finalize_init() earlier init: Remove check_bugs() leftovers um/cpu: Switch to arch_cpu_finalize_init() sparc/cpu: Switch to arch_cpu_finalize_init() sh/cpu: Switch to arch_cpu_finalize_init() mips/cpu: Switch to arch_cpu_finalize_init() m68k/cpu: Switch to arch_cpu_finalize_init() loongarch/cpu: Switch to arch_cpu_finalize_init() ia64/cpu: Switch to arch_cpu_finalize_init() ARM: cpu: Switch to arch_cpu_finalize_init() x86/cpu: Switch to arch_cpu_finalize_init() init: Provide arch_cpu_finalize_init() Conflicts: Documentation/devicetree/bindings Documentation/devicetree/bindings/clock/xlnx,versal-clk.yaml Documentation/devicetree/bindings/extcon/maxim,max77843.yaml Documentation/devicetree/bindings/serial/nxp,sc16is7xx.txt android/abi_gki_aarch64_qcom drivers/bus/mhi/host/pm.c drivers/clk/qcom/gcc-sm8250.c drivers/interconnect/qcom/bcm-voter.c drivers/interconnect/qcom/icc-rpmh.h drivers/mailbox/qcom-ipcc.c Change-Id: I98acc81783883752e19e8d433e3db6977a0ebf7f Upstream-Build: ks_qcom-android14-6.1-keystone-qcom-release@11252216 UKQ2.231224.001 Signed-off-by: jianzhou <quic_jianzhou@quicinc.com>	2024-01-03 21:55:56 -08:00
jianzhou	29f0788ed7	Merge keystone/android14-6.1-keystone-qcom-release.6.1.43 (ff4725c) into qcom-6.1 ... * refs/heads/tmp-ff4725c: UPSTREAM: usb: gadget: udc: Handle gadget_connect failure during bind operation ANDROID: GKI: Update oplus symbol list ANDROID: fs/passthrough: Fix compatibility with R/O file system ANDROID: vendor_hooks: add hooks for adjust kvmalloc_node alloc_flags FROMLIST: usb: typec: tcpm: Fix sink caps op current check UPSTREAM: scsi: ufs: core: Add advanced RPMB support where UFSHCI 4.0 does not support EHS length in UTRD ANDROID: ABI: Update symbol list for MediatTek ANDROID: vendor_hooks: Add hook for mmc queue Revert "proc: allow pid_revalidate() during LOOKUP_RCU" UPSTREAM: scsi: ufs: ufs-qcom: Clear qunipro_g4_sel for HW major version > 5 ANDROID: GKI: Update symbols to symbol list ANDROID: vendor_hook: Add hook to tune readaround size ANDROID: add for tuning readahead size ANDROID: vendor_hooks: Add hooks to avoid key threads stalled in memory allocations ANDROID: GKI: Update oplus symbol list ANDROID: vendor_hooks: add hooks for adjust kvmalloc_node alloc_flags UPSTREAM: netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c ANDROID: GKI: Update oplus symbol list update oplus symbol list for Addding hooks for adjusting alloc_flags ANDROID: vendor_hooks: Add hooks for adjusting alloc_flags ANDROID: ABI: Update symbol list for imx ANDROID: abi_gki_aarch64_qcom: Add __netif_rx ANDROID: ABI: Update sony symbol list and stg ANDROID: mmc: Add vendor hooks for sdcard failure diagnostics ANDROID: Update symbol list for mtk UPSTREAM: scsi: ufs: mcq: Fix the search/wrap around logic UPSTREAM: scsi: ufs: core: Fix ufshcd_inc_sq_tail() function bug FROMLIST: ufs: core: Expand MCQ queue slot to DeviceQueueDepth + 1 Revert "ANDROID: KVM: arm64: Don't allocate from handle_host_mem_abort" BACKPORT: usb: typec: altmodes/displayport: Signal hpd when configuring pin assignment UPSTREAM: mm: multi-gen LRU: don't spin during memcg release UPSTREAM: vringh: don't use vringh_kiov_advance() in vringh_iov_xfer() BACKPORT: usb: gadget: uvc: Add missing initialization of ssp config descriptor BACKPORT: usb: gadget: unconditionally allocate hs/ss descriptor in bind operation UPSTREAM: usb: gadget: f_uvc: change endpoint allocation in uvc_function_bind() UPSTREAM: usb: gadget: function: Remove unused declarations UPSTREAM: usb: gadget: uvc: clean up comments and styling in video_pump UPSTREAM: mm/page_alloc: use write_seqlock_irqsave() instead write_seqlock() + local_irq_save(). UPSTREAM: cpuidle: teo: Update idle duration estimate when choosing shallower state BACKPORT: Revert "PCI: dwc: Wait for link up only if link is started" UPSTREAM: ravb: Fix use-after-free issue in ravb_tx_timeout_work() UPSTREAM: ravb: Fix up dma_free_coherent() call in ravb_remove() BACKPORT: usb: typec: altmodes/displayport: Signal hpd low when exiting mode ANDROID: KVM: arm64: Fix KVM_HOST_S2_DEFAULT_MMIO_PTE encoding ANDROID: Update the ABI symbol list ANDROID: fs/proc: Perform priority inheritance around access_remote_vm() UPSTREAM: serial: 8250_dw: fall back to poll if there's no interrupt ANDROID: Update the ABI representation ANDROID: power: Add vendor hook for suspend ANDROID: Update the ABI symbol list UPSTREAM: of: reserved-mem: print out reserved-mem details during boot ANDROID: GKI: Update symbol list for xiaomi "abi_gki_aarch64_xiaomi" ANDROID: Update symbols list and ABI for qcom ANDROID: fuse-bpf: Add NULL pointer check in fuse_entry_revalidate ANDROID: GKI: Update oplus symbol list update oplus symbol list for Addding hooks for adjusting alloc_flags ANDROID: vendor_hooks: Add hooks for adjusting alloc_flags UPSTREAM: libceph: harden msgr2.1 frame segment length checks ANDROID: Update the ABI symbol list ANDROID: mm: Add vendor hook in filemap_get_folio() UPSTREAM: netfilter: ipset: Fix race between IPSET_CMD_CREATE and IPSET_CMD_SWAP UPSTREAM: netfilter: ipset: Add schedule point in call_ad(). UPSTREAM: net: xfrm: Fix xfrm_address_filter OOB read UPSTREAM: igb: set max size RX buffer when store bad packet is enabled ANDROID: GKI: fix ABI breakage in struct hid_device UPSTREAM: HID: input: map battery system charging FROMGIT: maple_tree: add GFP_KERNEL to allocations in mas_expected_entries() UPSTREAM: maple_tree: replace data before marking dead in split and spanning store UPSTREAM: maple_tree: change mas_adopt_children() parent usage UPSTREAM: maple_tree: introduce mas_tree_parent() definition UPSTREAM: maple_tree: introduce mas_put_in_tree() UPSTREAM: maple_tree: reorder replacement of nodes to avoid live lock ANDROID: GKI: add allowed list for Exynosauto SoC ANDROID: Update the ABI symbol list ANDROID: Update the ABI symbol list ANDROID: KVM: Update nVHE stack size to 8KB ANDROID: Update the ABI symbol list ANDROID: mm: Add vendor hook in rmqueue() FROMLIST: virt: geniezone: Add memory pin/unpin support FROMLIST: virt: geniezone: Add block-based demand paging support FROMLIST: virt: geniezone: Add demand paging support ANDROID: virt: geniezone: Refactoring memory region support ANDROID: virt: geniezone: Refactor code comments from mainline v6 accordingly ANDROID: virt: geniezone: Refactoring vgic to align with upstream v6 ANDROID: virt: geniezone: Refactoring vcpu to align with upstream v6 ANDROID: virt: geniezone: Refactoring vm capability to align with upstream v6 ANDROID: virt: geniezone: Refactoring irqfd to align with upstream v6 ANDROID: sched: Add EXPORT_SYMBOL_GPL for sched_wakeup ANDROID: vendor_hooks: Export direct reclaim trace points ANDROID: mm: freeing MIGRATE_ISOLATE page instantly ANDROID: KVM: arm64: Allow setting device attr in stage-2 PTEs ANDROID: KVM: arm64: Fix hyp tracing build dependencies Revert "arm64: errata: Mitigate Ampere1 erratum AC03_CPU_38 at stage-2" Revert "locking/rtmutex: Fix task->pi_waiters integrity" Revert "ring-buffer: Fix wrong stat of cpu_buffer->read" FROMLIST: Revert "fuse: Apply flags2 only when userspace set the FUSE_INIT_EXT" Revert "sched/psi: Fix avgs_work re-arm in psi_avgs_work()" Revert "sched/psi: Rearrange polling code in preparation" Revert "sched/psi: Rename existing poll members in preparation" Revert "sched/psi: Extract update_triggers side effect" Revert "sched/psi: Allow unprivileged polling of N*2s period" Revert "sched/psi: use kernfs polling functions for PSI trigger polling" Revert "Revert "8250: add support for ASIX devices with a FIFO bug"" ANDROID: GKI: Fix block/genhd.c exports from having their CRC changed Revert "blk-mq: fix potential io hang by wrong 'wake_batch'" Revert "bpf: Remove bpf trampoline selector" Revert "drm/bridge: Introduce pre_enable_prev_first to alter bridge init order" Revert "drm/bridge: ti-sn65dsi83: Fix enable/disable flow to meet spec" Linux 6.1.43 dma-buf: fix an error pointer vs NULL bug dma-buf: keep the signaling time of merged fences v3 test_firmware: return ENOMEM instead of ENOSPC on failed memory allocation selftests: mptcp: sockopt: use 'iptables-legacy' if available mptcp: ensure subflow is unhashed before cleaning the backlog cpufreq: intel_pstate: Drop ACPI _PSS states table patching ACPI: processor: perflib: Avoid updating frequency QoS unnecessarily ACPI: processor: perflib: Use the "no limit" frequency QoS drm/amd/display: Write to correct dirty_rect drm/amd/display: perform a bounds check before filling dirty rectangles tracing: Fix trace_event_raw_event_synth() if else statement drm/amd/display: set per pipe dppclk to 0 when dpp is off rbd: retrieve and check lock owner twice before blocklisting rbd: harden get_lock_owner_info() a bit rbd: make get_lock_owner_info() return a single locker or NULL dm cache policy smq: ensure IO doesn't prevent cleaner policy progress drm/i915/dpt: Use shmem for dpt objects ceph: never send metrics if disable_send_metrics is set PM: sleep: wakeirq: fix wake irq arming arm64/sme: Set new vector length before reallocating ASoC: wm8904: Fill the cache for WM8904_ADC_TEST_0 register s390/dasd: print copy pair message only for the correct error s390/dasd: fix hanging device after quiesce/resume LoongArch: BPF: Enable bpf_probe_read{, str}() on LoongArch LoongArch: BPF: Fix check condition to call lu32id in move_imm() Revert "um: Use swap() to make code cleaner" soundwire: fix enumeration completion selftests: mptcp: join: only check for ip6tables if needed net: dsa: qca8k: fix mdb add/del case with 0 VID net: dsa: qca8k: fix broken search_and_del net: dsa: qca8k: fix search_and_insert wrong handling of new rule virtio-net: fix race between set queues and probe xen: speed up grant-table reclaim proc/vmcore: fix signedness bug in read_from_oldmem() locking/rtmutex: Fix task->pi_waiters integrity irqchip/gic-v4.1: Properly lock VPEs when doing a directLPI invalidation irq-bcm6345-l1: Do not assume a fixed block to cpu mapping tpm_tis: Explicitly check for error code ACPI/IORT: Remove erroneous id_count check in iort_node_get_rmr_info() nfsd: Remove incorrect check in nfsd4_validate_stateid file: always lock position for FMODE_ATOMIC_POS x86/MCE/AMD: Decrement threshold_bank refcount when removing threshold blocks btrfs: check for commit error at btrfs_attach_transaction_barrier() btrfs: check if the transaction was aborted at btrfs_wait_for_commit() btrfs: account block group tree when calculating global reserve size hwmon: (nct7802) Fix for temp6 (PECI1) processed even if PECI1 disabled hwmon: (k10temp) Enable AMD3255 Proc to show negative temperature ALSA: hda/relatek: Enable Mute LED on HP 250 G8 ALSA: hda/realtek: Support ASUS G713PV laptop Revert "xhci: add quirk for host controllers that don't update endpoint DCS" tty: n_gsm: fix UAF in gsm_cleanup_mux staging: ks7010: potential buffer overflow in ks_wlan_set_encode_ext() staging: r8712: Fix memory leak in _r8712_init_xmit_priv() Documentation: security-bugs.rst: clarify CVE handling Documentation: security-bugs.rst: update preferences when dealing with the linux-distros group Revert "usb: xhci: tegra: Fix error check" usb: xhci-mtk: set the dma max_seg_size usb: cdns3: fix incorrect calculation of ep_buf_size when more than one config USB: quirks: add quirk for Focusrite Scarlett usb: ohci-at91: Fix the unhandle interrupt when resume usb: misc: ehset: fix wrong if condition usb: dwc3: don't reset device side if dwc3 was configured as host-only usb: dwc3: pci: skip BYT GPIO lookup table for hardwired phy Revert "usb: dwc3: core: Enable AutoRetry feature in the controller" usb: typec: Use sysfs_emit_at when concatenating the string usb: typec: Iterate pds array when showing the pd list usb: typec: Set port->pd before adding device for typec_port can: gs_usb: gs_can_close(): add missing set of CAN state to CAN_STATE_STOPPED USB: serial: simple: sort driver entries USB: serial: simple: add Kaufmann RKS+CAN VCP USB: serial: option: add Quectel EC200A module support USB: serial: option: support Quectel EM060K_128 serial: sifive: Fix sifive_serial_console_setup() section serial: 8250_dw: Preserve original value of DLF register serial: qcom-geni: drop bogus runtime pm state update KVM: x86: Disallow KVM_SET_SREGS{2} if incoming CR0 is invalid KVM: VMX: Don't fudge CR0 and CR4 for restricted L2 guest KVM: Grab a reference to KVM for VM and vCPU stats file descriptors usb: gadget: core: remove unbalanced mutex_unlock in usb_gadget_activate USB: gadget: Fix the memory leak in raw_gadget driver usb: gadget: call usb_gadget_check_config() to verify UDC capability Revert "usb: gadget: tegra-xudc: Fix error check in tegra_xudc_powerdomain_init()" tracing: Fix warning in trace_buffered_event_disable() ring-buffer: Fix wrong stat of cpu_buffer->read ata: pata_ns87415: mark ns87560_tf_read static ublk: fail to recover device if queue setup is interrupted ublk: fail to start device if queue setup is interrupted ublk_drv: move ublk_get_device_from_id into ublk_ctrl_uring_cmd drm/msm: Disallow submit with fence id 0 drm/msm: Switch idr_lock to spinlock RDMA/irdma: Report correct WC error RDMA/irdma: Fix op_type reporting in CQEs drm/amd/display: Unlock on error path in dm_handle_mst_sideband_msg_ready_event() drm/amd: Fix an error handling mistake in psp_sw_init() dm raid: protect md_stop() with 'reconfig_mutex' dm raid: clean up four equivalent goto tags in raid_ctr() dm raid: fix missing reconfig_mutex unlock in raid_ctr() error paths xenbus: check xen_domain in xenbus_probe_initcall drm/i915: Fix an error handling path in igt_write_huge() smb3: do not set NTLMSSP_VERSION flag for negotiate not auth request block: Fix a source code comment in include/uapi/linux/blkzoned.h ASoC: fsl_spdif: Silence output on stop cxl/acpi: Return 'rc' instead of '0' in cxl_parse_cfmws() cxl/acpi: Fix a use-after-free in cxl_parse_cfmws() drm/msm: Fix IS_ERR_OR_NULL() vs NULL check in a5xx_submit_in_rb() RDMA/bnxt_re: Prevent handling any completions after qp destroy RDMA/mthca: Fix crash when polling CQ for shared QPs RDMA/irdma: Fix data race on CQP request done RDMA/irdma: Fix data race on CQP completion stats RDMA/irdma: Add missing read barriers drm/msm/adreno: Fix snapshot BINDLESS_DATA size drm/msm/dpu: drop enum dpu_core_perf_data_bus_id RDMA/mlx4: Make check for invalid flags stricter tipc: stop tipc crypto on failure in tipc_node_create tipc: check return value of pskb_trim() benet: fix return value check in be_lancer_xmit_workarounds() net/sched: mqprio: Add length check for TCA_MQPRIO_{MAX/MIN}_RATE64 net/sched: mqprio: add extack to mqprio_parse_nlattr() net/sched: mqprio: refactor nlattr parsing to a separate function mm: suppress mm fault logging if fatal signal already pending netfilter: nf_tables: disallow rule addition to bound chain via NFTA_RULE_CHAIN_ID netfilter: nf_tables: skip immediate deactivate in _PREPARE_ERROR netfilter: nft_set_rbtree: fix overlap expiration walk igc: Fix Kernel Panic during ndo_tx_timeout callback x86/traps: Fix load_unaligned_zeropad() handling for shared TDX memory platform/x86: msi-laptop: Fix rfkill out-of-sync on MSI Wind U100 net: stmmac: Apply redundant write work around on 4.xx too octeontx2-af: Fix hash extraction enable configuration octeontx2-af: Removed unnecessary debug messages. team: reset team's flags when down link is P2P device bonding: reset bond's flags when down link is P2P device ice: Fix memory management in ice_ethtool_fdir.c tcp: Reduce chance of collisions in inet6_hashfn(). ipv6 addrconf: fix bug where deleting a mngtmpaddr can create a new temporary address ethernet: atheros: fix return value check in atl1e_tso_csum() atheros: fix return value check in atl1_tso() phy: hisilicon: Fix an out of bounds check in hisi_inno_phy_probe() vxlan: fix GRO with VXLAN-GPE vxlan: generalize vxlan_parse_gpe_hdr and remove unused args vxlan: calculate correct header length for GPE net: hns3: fix wrong bw weight of disabled tc issue net: hns3: fix wrong tc bandwidth weight data issue net: hns3: fix the imp capability bit cannot exceed 32 bits issue net: phy: marvell10g: fix 88x3310 power up iavf: check for removal state before IAVF_FLAG_PF_COMMS_FAILED iavf: fix potential deadlock on allocation failure i40e: Fix an NULL vs IS_ERR() bug for debugfs_create_dir() media: amphion: Fix firmware path to match linux-firmware media: staging: atomisp: select V4L2_FWNODE soundwire: qcom: update status correctly with mask phy: qcom-snps-femto-v2: properly enable ref clock phy: qcom-snps-femto-v2: keep cfg_ahb_clk enabled during runtime suspend phy: qcom-snps: correct struct qcom_snps_hsphy kerneldoc phy: phy-mtk-dp: Fix an error code in probe() drm/amd/display: Prevent vtotal from being set to 0 drm/amd/display: Fix possible underflow for displays with large vblank drm/amd/display: update extended blank for dcn314 onwards drm/amd/display: Add FAMS validation before trying to use it drm/amd/display: fix dc/core/dc.c kernel-doc drm/amd/display: Rework comments on dc file maple_tree: fix 32 bit mas_next testing maple_tree: add __init and __exit to test module test_maple_tree: test modifications while iterating tracing/probes: Fix to record 0-length data_loc in fetch_store_string*() if fails Revert "tracing: Add "(fault)" name injection to kernel probes" tracing: Allow synthetic events to pass around stacktraces tracing/probes: Fix to avoid double count of the string length on the array tracing/probes: Add symstr type for dynamic events mptcp: do not rely on implicit state check in mptcp_listen() mptcp: introduce 'sk' to replace 'sock->sk' in mptcp_listen() arm64: errata: Mitigate Ampere1 erratum AC03_CPU_38 at stage-2 KVM: arm64: Condition HW AF updates on config option drm/ttm: never consider pinned BOs for eviction&swap tty: fix hang on tty device with no_room set n_tty: Rename tail to old_tail in n_tty_read() drm/ttm: Don't leak a resource on eviction error drm/ttm: Don't print error message if eviction was interrupted drm/amd/display: Set minimum requirement for using PSR-SU on Phoenix drm/amd/display: Set minimum requirement for using PSR-SU on Rembrandt drm/amd/display: Update correct DCN314 register header drm/amd/display: fix dcn315 single stream crb allocation drm/amd/display: add pixel rate based CRB allocation support drm/amd/display: fix unbounded requesting for high pixel rate modes on dcn315 drm/amd/display: use low clocks for no plane configs drm/amd/display: add ODM case when looking for first split pipe drm/amd/display: Use min transition for all SubVP plane add/remove drm/amd/display: Include surface of unaffected streams drm/amd/display: Copy DC context in the commit streams drm/amd/display: Enable new commit sequence only for DCN32x drm/amd/display: Rework context change check drm/amd/display: Check if link state is valid drm/amd/display: add FB_DAMAGE_CLIPS support PCI: rockchip: Don't advertise MSI-X in PCIe capabilities PCI: rockchip: Fix window mapping and address translation for endpoint PCI: rockchip: Remove writes to unused registers PCI/ASPM: Avoid link retraining race PCI/ASPM: Factor out pcie_wait_for_retrain() PCI/ASPM: Return 0 or -ETIMEDOUT from pcie_retrain_link() MIPS: Loongson: Fix build error when make modules_install MIPS: Loongson: Move arch cflags to MIPS top level Makefile i2c: nomadik: Remove a useless call in the remove function i2c: nomadik: Use devm_clk_get_enabled() i2c: nomadik: Remove unnecessary goto label i2c: Improve size determinations i2c: Delete error messages for failed memory allocations btrfs: fix race between quota disable and relocation gpio: mvebu: fix irq domain leak gpio: mvebu: Make use of devm_pwmchip_add pwm: Add a stub for devm_pwmchip_add() gpio: tps68470: Make tps68470_gpio_output() always set the initial value io_uring: don't audit the capability check in io_uring_create() KVM: s390: pv: fix index value of replaced ASCE powerpc/pseries/vas: Hold mmap_mutex after mmap lock during window close blk-mq: Fix stall due to recursive flush plug jbd2: Fix wrongly judgement for buffer head removing while doing checkpoint drm/amd: Align SMU11 SMU_MSG_OverridePcieParameters implementation with SMU13 drm/amd: Move helper for dynamic speed switch check out of smu13 ovl: fix null pointer dereference in ovl_permission() drm/amd/display: Keep PHY active for dp config platform/x86/amd/pmf: reduce verbosity of apmf_get_system_params platform/x86/amd/pmf: Notify OS power slider update netfilter: nf_tables: fix underflow in chain reference counter netfilter: nf_tables: fix underflow in object reference counter ANDROID: ABI: Update STG ABI to format version 2 Linux 6.1.42 Revert "drm/amd/display: edp do not add non-edid timings" drm/amd/display: Add polling method to handle MST reply packet drm/amd/display: fix linux dp link lost handled only one time drm/amd/display: Clean up errors & warnings in amdgpu_dm.c drm/amd/display: force connector state when bpc changes during compliance drm/dp_mst: Clear MSG_RDY flag before sending new message drm/amd/display: fix some coding style issues drm/amd/display: use max_dsc_bpp in amdgpu_dm selftests/bpf: Fix sk_assign on s390x selftests/bpf: Workaround verification failure for fexit_bpf2bpf/func_replace_return_code selftests/bpf: make test_align selftest more robust bpf: aggressively forget precise markings during state checkpointing bpf: stop setting precise in current state bpf: allow precision tracking for programs with subprogs scripts/kallsyms: update the usage in the comment block scripts/kallsyms.c Make the comment up-to-date with current implementation kallsyms: add kallsyms_seqs_of_names to list of special symbols spi: dw: Remove misleading comment for Mount Evans SoC drm/ttm: fix bulk_move corruption when adding a entry tracing/histograms: Return an error if we fail to add histogram to hist_vars list jbd2: recheck chechpointing non-dirty buffer net: phy: prevent stale pointer dereference in phy_init() tcp: annotate data-races around fastopenq.max_qlen tcp: annotate data-races around icsk->icsk_user_timeout tcp: annotate data-races around tp->notsent_lowat tcp: annotate data-races around rskq_defer_accept tcp: annotate data-races around tp->linger2 tcp: annotate data-races around icsk->icsk_syn_retries tcp: annotate data-races around tp->keepalive_probes tcp: annotate data-races around tp->keepalive_intvl tcp: annotate data-races around tp->keepalive_time tcp: annotate data-races around tp->tsoffset tcp: annotate data-races around tp->tcp_tx_delay Bluetooth: hci_sync: Avoid use-after-free in dbg for hci_remove_adv_monitor() Bluetooth: ISO: fix iso_conn related locking and validity issues Bluetooth: hci_event: call disconnect callback before deleting conn Bluetooth: use RCU for hci_conn_params and iterate safely in hci_sync netfilter: nf_tables: skip bound chain on rule flush netfilter: nf_tables: skip bound chain in netns release path netfilter: nft_set_pipapo: fix improper element removal netfilter: nf_tables: can't schedule in nft_chain_validate netfilter: nf_tables: fix spurious set element insertion failure ALSA: hda/realtek: Fix generic fixup definition for cs35l41 amp llc: Don't drop packet from non-root netns. fbdev: au1200fb: Fix missing IRQ check in au1200fb_drv_probe Revert "tcp: avoid the lookup process failing to get sk in ehash table" net:ipv6: check return value of pskb_trim() net: ipv4: Use kfree_sensitive instead of kfree tcp: annotate data-races around tcp_rsk(req)->ts_recent tcp: annotate data-races around tcp_rsk(req)->txhash net: ipv4: use consistent txhash in TIME_WAIT and SYN_RECV igc: Prevent garbled TX queue with XDP ZEROCOPY igc: Avoid transmit queue timeout for XDP bpf, arm64: Fix BTI type used for freplace attached functions bpf: Repeat check_max_stack_depth for async callbacks bpf: Fix subprog idx logic in check_max_stack_depth octeontx2-pf: Dont allocate BPIDs for LBK interfaces security: keys: Modify mismatched function name iavf: fix reset task race with iavf_remove() iavf: fix a deadlock caused by rtnl and driver's lock circular dependencies iavf: Wait for reset in callbacks which trigger it iavf: make functions static where possible iavf: send VLAN offloading caps once after VFR iavf: Move netdev_update_features() into watchdog task iavf: use internal state to free traffic IRQs iavf: Fix out-of-bounds when setting channels on remove iavf: Fix use-after-free in free_netdev net: dsa: microchip: correct KSZ8795 static MAC table access net: dsa: microchip: ksz8_r_sta_mac_table(): Avoid using error code for empty entries net: dsa: microchip: ksz8: Make ksz8_r_sta_mac_table() static net: dsa: microchip: ksz8: Separate static MAC table operations for code reuse net: sched: cls_bpf: Undo tcf_bind_filter in case of an error net: sched: cls_u32: Undo refcount decrement in case update failed net: sched: cls_u32: Undo tcf_bind_filter if u32_replace_hw_knode net: sched: cls_matchall: Undo tcf_bind_filter in case of failure after mall_set_parms ASoC: SOF: ipc3-dtrace: uninitialized data in dfsentry_trace_filter_write() cifs: fix mid leak during reconnection after timeout threshold net: ethernet: mtk_eth_soc: handle probe deferral bridge: Add extack warning when enabling STP in netns. net: ethernet: ti: cpsw_ale: Fix cpsw_ale_get_field()/cpsw_ale_set_field() dsa: mv88e6xxx: Do a final check before timing out kallsyms: strip LTO-only suffixes from promoted global functions kallsyms: Correctly sequence symbols when CONFIG_LTO_CLANG=y kallsyms: Improve the performance of kallsyms_lookup_name() spi: s3c64xx: clear loopback bit after loopback test btrfs: be a bit more careful when setting mirror_num_ret in btrfs_map_block perf build: Fix library not found error when using CSLIBS fbdev: imxfb: Removed unneeded release_mem_region fbdev: imxfb: warn about invalid left/right margin spi: bcm63xx: fix max prepend length pinctrl: renesas: rzg2l: Handle non-unique subnode names pinctrl: renesas: rzv2m: Handle non-unique subnode names sched/psi: use kernfs polling functions for PSI trigger polling sched/psi: Allow unprivileged polling of N*2s period sched/psi: Extract update_triggers side effect sched/psi: Rename existing poll members in preparation sched/psi: Rearrange polling code in preparation sched/psi: Fix avgs_work re-arm in psi_avgs_work() sched/fair: Use recent_used_cpu to test p->cpus_ptr ASoC: qcom: q6apm: do not close GPR port before closing graph ASoC: codecs: wcd938x: fix dB range for HPHL and HPHR ASoC: codecs: wcd938x: fix mbhc impedance loglevel ASoC: amd: acp: fix for invalid dai id handling in acp_get_byte_count() net: hns3: fix strncpy() not using dest-buf length as length issue igb: Fix igb_down hung on surprise removal wifi: iwlwifi: pcie: add device id 51F1 for killer 1675 wifi: iwlwifi: mvm: avoid baid size integer overflow wifi: iwlwifi: Add support for new PCI Id wifi: wext-core: Fix -Wstringop-overflow warning in ioctl_standard_iw_point() devlink: report devlink_port_type_warn source device net: ethernet: litex: add support for 64 bit stats wifi: ath11k: fix memory leak in WMI firmware stats spi: dw: Add compatible for Intel Mount Evans SoC wifi: mac80211_hwsim: Fix possible NULL dereference wifi: ath11k: add support default regdb while searching board-2.bin for WCN6855 bpf: tcp: Avoid taking fast sock lock in iterator bpf: Address KCSAN report on bpf_lru_list bpf: Print a warning only if writing to unprivileged_bpf_disabled. wifi: ath11k: fix registration of 6Ghz-only phy without the full channel range sched/fair: Don't balance task to its current running CPU rcu: Mark additional concurrent load from ->cpu_no_qs.b.exp rcu-tasks: Avoid pr_info() with spin lock in cblist_init_generic() ACPI: video: Add backlight=native DMI quirk for Dell Studio 1569 FS: JFS: Check for read-only mounted filesystem in txBegin FS: JFS: Fix null-ptr-deref Read in txBegin MIPS: dec: prom: Address -Warray-bounds warning fs: jfs: Fix UBSAN: array-index-out-of-bounds in dbAllocDmapLev udf: Fix uninitialized array access for some pathnames ovl: check type and offset of struct vfsmount in ovl_entry HID: add quirk for 03f0:464a HP Elite Presenter Mouse quota: fix warning in dqgrab() quota: Properly disable quotas when add_dquot_ref() fails ALSA: emu10k1: roll up loops in DSP setup code for Audigy drm/radeon: Fix integer overflow in radeon_cs_parser_init ext4: correct inline offset when handling xattrs in inode body ASoC: codecs: wcd938x: fix soundwire initialisation race ASoC: codecs: wcd938x: fix codec initialisation race ASoC: codecs: wcd934x: fix resource leaks on component remove ASoC: codecs: wcd938x: fix missing mbhc init error handling ASoC: codecs: wcd938x: fix resource leaks on component remove ASoC: tegra: Fix AMX byte map ASoC: qdsp6: audioreach: fix topology probe deferral ASoC: codecs: wcd-mbhc-v2: fix resource leaks on component remove ASoC: codecs: wcd938x: fix missing clsh ctrl error handling ASoC: cs42l51: fix driver to properly autoload with automatic module loading ASoC: rt5640: Fix sleep in atomic context ASoC: tegra: Fix ADX byte map ASoC: fsl_sai: Revert "ASoC: fsl_sai: Enable MCTL_MCLK_EN bit for master mode" ASoC: fsl_sai: Disable bit clock with transmitter drm/amd/display: Keep PHY active for DP displays on DCN31 drm/amd/display: check TG is non-null before checking if enabled drm/amd/display: Disable MPC split by default on special asic drm/amd/display: only accept async flips for fast updates drm/client: Fix memory leak in drm_client_modeset_probe drm/client: Fix memory leak in drm_client_target_cloned drm/amdgpu/pm: make mclk consistent for smu 13.0.7 drm/amdgpu/pm: make gfxclock consistent for sienna cichlid drm/amdgpu/vkms: relax timer deactivation by hrtimer_try_to_cancel dma-buf/dma-resv: Stop leaking on krealloc() failure selftests: tc: add ConnTrack procfs kconfig can: gs_usb: gs_can_open(): improve error handling can: bcm: Fix UAF in bcm_proc_show() can: mcp251xfd: __mcp251xfd_chip_set_mode(): increase poll timeout arm64/fpsimd: Ensure SME storage is allocated after SVE VL changes regmap: Account for register length in SMBus I/O limits of: Preserve "of-display" device name for compatibility regmap: Drop initial version of maximum transfer length fixes selftests: tc: add 'ct' action kconfig dep selftests: tc: set timeout to 15 minutes btrfs: fix race between balance and cancel/pause fuse: ioctl: translate ENOSYS in outarg btrfs: zoned: fix memory leak after finding block group with super blocks btrfs: set_page_extent_mapped after read_folio in btrfs_cont_expand fuse: Apply flags2 only when userspace set the FUSE_INIT_EXT fuse: revalidate: don't invalidate if interrupted btrfs: fix warning when putting transaction with qgroups enabled after abort perf probe: Add test for regression introduced by switch to die_get_decl_file() keys: Fix linking a duplicate key to a keyring's assoc_array maple_tree: fix node allocation testing on 32 bit maple_tree: set the node limit when creating a new root node ALSA: hda/realtek: Enable Mute LED on HP Laptop 15s-eq2xxx ALSA: hda/realtek: Add quirk for Clevo NS70AU ALSA: hda/realtek - remove 3k pull low procedure io_uring: treat -EAGAIN for REQ_F_NOWAIT as final for io-wq Linux 6.1.41 x86/cpu/amd: Add a Zenbleed fix x86/cpu/amd: Move the errata checking functionality up Linux 6.1.40 net/ncsi: change from ndo_set_mac_address to dev_set_mac_address net/ncsi: make one oem_gma function for all mfr id drm/atomic: Fix potential use-after-free in nonblocking commits net/sched: sch_qfq: reintroduce lmax bound check for MTU swiotlb: mark swiotlb_memblock_alloc() as __init Revert "drm/amd: Disable PSR-SU on Parade 0803 TCON" MIPS: kvm: Fix build error with KVM_MIPS_DEBUG_COP0_COUNTERS enabled scsi: qla2xxx: Fix end of loop test scsi: qla2xxx: Remove unused nvme_ls_waitq wait queue scsi: qla2xxx: Pointer may be dereferenced scsi: qla2xxx: Correct the index of array scsi: qla2xxx: Check valid rport returned by fc_bsg_to_rport() scsi: qla2xxx: Fix potential NULL pointer dereference scsi: qla2xxx: Fix buffer overrun scsi: qla2xxx: Avoid fcport pointer dereference scsi: qla2xxx: Array index may go out of bound scsi: qla2xxx: Fix mem access after free scsi: qla2xxx: Wait for io return on terminate rport scsi: qla2xxx: Fix hang in task management scsi: qla2xxx: Fix task management cmd fail due to unavailable resource scsi: qla2xxx: Fix task management cmd failure scsi: qla2xxx: Multi-que support for TMF tracing/user_events: Fix struct arg size match check tracing/probes: Fix to update dynamic data counter if fetcharg uses it tracing/probes: Fix not to count error code to total length selftests: mptcp: pm_nl_ctl: fix 32-bit support selftests: mptcp: depend on SYN_COOKIES selftests: mptcp: userspace_pm: report errors with 'remove' tests selftests: mptcp: userspace_pm: use correct server port selftests: mptcp: sockopt: return error if wrong mark selftests: mptcp: connect: fail if nft supposed to work tracing: Fix null pointer dereference in tracing_err_log_open() fprobe: Ensure running fprobe_exit_handler() finished before calling rethook_free() fprobe: Release rethook after the ftrace_ops is unregistered pwm: meson: fix handling of period/duty if greater than UINT_MAX pwm: meson: modify and simplify calculation in meson_pwm_get_state PM: QoS: Restore support for default value on frequency QoS perf/x86: Fix lockdep warning in for_each_sibling_event() on SPR xtensa: ISS: fix call to split_if_spec cifs: if deferred close is disabled then close files immediately drm/amd/pm: conditionally disable pcie lane/speed switching for SMU13 drm/amd/pm: share the code around SMU13 pcie parameters update ftrace: Fix possible warning on checking all pages used in ftrace_process_locs() ring-buffer: Fix deadloop issue on reading trace_pipe net: ena: fix shift-out-of-bounds in exponential backoff regmap-irq: Fix out-of-bounds access when allocating config buffers perf: RISC-V: Remove PERF_HES_STOPPED flag checking in riscv_pmu_start() samples: ftrace: Save required argument registers in sample trampolines nvme: don't reject probe due to duplicate IDs for single-ported PCIe devices tracing: Fix memory leak of iter->temp when reading trace_pipe tracing/histograms: Add histograms to hist_vars if they have referenced variables dm: verity-loadpin: Add NULL pointer check for 'bdev' parameter s390/decompressor: fix misaligned symbol build error bus: ixp4xx: fix IXP4XX_EXP_T1_MASK Revert "8250: add support for ASIX devices with a FIFO bug" soundwire: qcom: fix storing port config out-of-bounds opp: Fix use-after-free in lazy_opp_tables after probe deferral meson saradc: fix clock divider mask length xhci: Show ZHAOXIN xHCI root hub speed correctly xhci: Fix TRB prefetch issue of ZHAOXIN hosts xhci: Fix resume issue of some ZHAOXIN hosts ceph: don't let check_caps skip sending responses for revoke msgs ceph: fix blindly expanding the readahead windows ceph: add a dedicated private data for netfs rreq libceph: harden msgr2.1 frame segment length checks firmware: stratix10-svc: Fix a potential resource leak in svc_create_memory_pool() tty: serial: imx: fix rs485 rx after tx tty: serial: samsung_tty: Fix a memory leak in s3c24xx_serial_getclk() when iterating clk tty: serial: samsung_tty: Fix a memory leak in s3c24xx_serial_getclk() in case of error serial: atmel: don't enable IRQs prematurely drm/ttm: Don't leak a resource on swapout move error drm/amdgpu: avoid restore process run into dead loop. drm/amd/display: Add monitor specific edid quirk drm/amd/display: Correct `DMUB_FW_VERSION` macro drm/amd/display: add a NULL pointer check drm/amd: Disable PSR-SU on Parade 0803 TCON drm/amdgpu: fix clearing mappings for BOs that are always valid in VM drm/amd/display: disable seamless boot if force_odm_combine is enabled drm/amd/display: Remove Phantom Pipe Check When Calculating K1 and K2 drm/amd/display: edp do not add non-edid timings drm/amd/display: fix seamless odm transitions drm/rockchip: vop: Leave vblank enabled in self-refresh drm/atomic: Allow vblank-enabled + self-refresh "disable" scsi: lpfc: Fix double free in lpfc_cmpl_els_logo_acc() caused by lpfc_nlp_not_used() fs: dlm: fix mismatch of plock results from userspace fs: dlm: make F_SETLK use unkillable wait_event fs: dlm: interrupt posix locks only when process is killed fs: dlm: fix cleanup pending ops when interrupted fs: dlm: return positive pid value for F_GETLK dm init: add dm-mod.waitfor to wait for asynchronously probed block devices md/raid0: add discard support for the 'original' layout mfd: pm8008: Fix module autoloading misc: pci_endpoint_test: Re-init completion for every test misc: pci_endpoint_test: Free IRQs before removing the device PCI: rockchip: Set address alignment for endpoint mode PCI: rockchip: Use u32 variable to access 32-bit registers PCI: rockchip: Fix legacy IRQ generation for RK3399 PCIe endpoint core PCI: rockchip: Add poll and timeout to wait for PHY PLLs to be locked PCI: rockchip: Write PCI Device ID to correct register PCI: rockchip: Assert PCI Configuration Enable bit after probe PCI: epf-test: Fix DMA transfer completion detection PCI: epf-test: Fix DMA transfer completion initialization PCI: qcom: Disable write access to read only registers for IP v2.3.3 PCI: Add function 1 DMA alias quirk for Marvell 88SE9235 PCI: Release resource invalidated by coalescing PCI/PM: Avoid putting EloPOS E2/S2/H2 PCIe Ports in D3cold s390/zcrypt: do not retry administrative requests scsi: mpi3mr: Propagate sense data for admin queue SCSI I/O dm integrity: reduce vmalloc space footprint on 32-bit architectures hwrng: imx-rngc - fix the timeout for init and self check jfs: jfs_dmap: Validate db_l2nbperpage while mounting ext2/dax: Fix ext2_setsize when len is page aligned soc: qcom: mdt_loader: Fix unconditional call to scm_pas_mem_setup fs: dlm: revert check required context while close ext4: only update i_reserved_data_blocks on successful block allocation ext4: turn quotas off if mount failed after enabling quotas ext4: fix to check return value of freeze_bdev() in ext4_shutdown() ext4: fix wrong unit use in ext4_mb_new_blocks ext4: get block from bh in ext4_free_blocks for fast commit replay ext4: fix wrong unit use in ext4_mb_clear_bb ext4: Fix reusing stale buffer heads from last failed mounting MIPS: KVM: Fix NULL pointer dereference MIPS: Loongson: Fix cpu_probe_loongson() again powerpc/64s: Fix native_hpte_remove() to be irq-safe powerpc/security: Fix Speculation_Store_Bypass reporting on Power10 misc: fastrpc: Create fastrpc scalar with correct buffer count powerpc: Fail build if using recordmcount with binutils v2.37 tracing/user_events: Fix incorrect return value for writing operation when events are disabled kasan: add kasan_tag_mismatch prototype net: phy: dp83td510: fix kernel stall during netboot in DP83TD510E PHY driver net: bcmgenet: Ensure MDIO unregistration has clocks enabled mtd: rawnand: meson: fix unaligned DMA buffers handling tpm: return false from tpm_amd_is_rng_defective on non-x86 platforms tpm: tis_i2c: Limit write bursts to I2C_SMBUS_BLOCK_MAX (32) bytes tpm: tis_i2c: Limit read bursts to I2C_SMBUS_BLOCK_MAX (32) bytes tpm: tpm_vtpm_proxy: fix a race condition in /dev/vtpmx creation tpm: Do not remap from ACPI resources again for Pluton TPM pinctrl: amd: Unify debounce handling into amd_pinconf_set() pinctrl: amd: Drop pull up select configuration pinctrl: amd: Use amd_pinconf_set() for all config options pinctrl: amd: Only use special debounce behavior for GPIO 0 pinctrl: amd: Revert "pinctrl: amd: disable and mask interrupts on probe" pinctrl: amd: Detect and mask spurious interrupts pinctrl: amd: Fix mistake in handling clearing pins at startup pinctrl: amd: Detect internal GPIO0 debounce handling pinctrl: amd: Add fields for interrupt status and wake status pinctrl: amd: Adjust debugfs output pinctrl: amd: Add Z-state wake control bits f2fs: fix deadlock in i_xattr_sem and inode page lock f2fs: fix the wrong condition to determine atomic context drm/amd/pm: add abnormal fan detection for smu 13.0.0 drm/amdgpu: Fix minmax warning drm/amdgpu: add the fan abnormal detection feature drm/amd/pm: revise the ASPM settings for thunderbolt attached scenario drm/amdgpu/sdma4: set align mask to 255 drm/client: Send hotplug event after registering a client cifs: fix session state check in smb2_find_smb_ses ovl: fix null pointer dereference in ovl_get_acl_rcu() ovl: let helper ovl_i_path_real() return the realinode fs/ntfs3: Check fields while reading nvme-pci: fix DMA direction of unmapping integrity data net/sched: sch_qfq: account for stab overhead in qfq_enqueue net/sched: sch_qfq: refactor parsing of netlink parameters wifi: rtw89: debug: fix error code in rtw89_debug_priv_send_h2c_set() net/sched: make psched_mtu() RTNL-less safe netdevsim: fix uninitialized data in nsim_dev_trap_fa_cookie_write() riscv: mm: fix truncation warning on RV32 net/sched: flower: Ensure both minimum and maximum ports are specified bpf: cpumap: Fix memory leak in cpu_map_update_elem wifi: airo: avoid uninitialized warning in airo_get_rate() erofs: fix fsdax unavailability for chunk-based regular files erofs: avoid infinite loop in z_erofs_do_read_page() when reading beyond EOF erofs: avoid useless loops in z_erofs_pcluster_readmore() when reading beyond EOF octeontx2-pf: Add additional check for MCAM rules drm/i915: Fix one wrong caching mode enum usage drm/i915: Don't preserve dpll_hw_state for slave crtc in Bigjoiner riscv, bpf: Fix inconsistent JIT image generation nvme: fix the NVME_ID_NS_NVM_STS_MASK definition igc: Fix inserting of empty frame for launchtime igc: Fix launchtime before start of cycle kernel/trace: Fix cleanup logic of enable_trace_eprobe platform/x86: wmi: Break possible infinite loop when parsing GUID net: dsa: qca8k: Add check for skb_copy ipv6/addrconf: fix a potential refcount underflow for idev NTB: ntb_tool: Add check for devm_kcalloc NTB: ntb_transport: fix possible memory leak while device_register() fails ntb: intel: Fix error handling in intel_ntb_pci_driver_init() NTB: amd: Fix error handling in amd_ntb_pci_driver_init() ntb: idt: Fix error handling in idt_pci_driver_init() udp6: fix udp6_ehashfn() typo icmp6: Fix null-ptr-deref of ip6_null_entry->rt6i_idev in icmp6_dev(). net: prevent skb corruption on frag list segmentation net: bgmac: postpone turning IRQs off to avoid SoC hangs ionic: remove WARN_ON to prevent panic_on_warn octeontx2-af: Move validation of ptp pointer before its usage octeontx2-af: Promisc enable/disable through mbox gve: Set default duplex configuration to full net/sched: cls_fw: Fix improper refcount update leads to use-after-free net: mvneta: fix txq_map in case of txq_number==1 bpf: Fix max stack depth check for async callbacks scsi: ufs: ufs-mediatek: Add dependency for RESET_CONTROLLER scsi: qla2xxx: Fix error code in qla2x00_start_sp() blk-crypto: use dynamic lock class for blk_crypto_profile::lock igc: Handle PPS start time programming for past time values igc: set TP bit in 'supported' and 'advertising' fields of ethtool_link_ksettings net/mlx5e: Check for NOT_READY flag state after locking net/mlx5e: fix memory leak in mlx5e_ptp_open net/mlx5e: fix memory leak in mlx5e_fs_tt_redirect_any_create net/mlx5e: fix double free in mlx5e_destroy_flow_table igc: Remove delay during TX ring configuration ice: Fix max_rate check while configuring TX rate limits drm/panel: simple: Add Powertip PH800480T013 drm_display_mode flags swiotlb: reduce the number of areas to match actual memory pool size swiotlb: reduce the swiotlb buffer size on allocation failure swiotlb: always set the number of areas before allocating the pool drm/bridge: ti-sn65dsi86: Fix auxiliary bus lifetime drm/panel: simple: Add connector_type for innolux_at043tn24 ksmbd: fix out of bounds read in smb2_sess_setup ksmbd: add missing compound request handing in some commands workqueue: clean up WORK_* constant types, clarify masking net: lan743x: Don't sleep in atomic context HID: amd_sfh: Fix for shift-out-of-bounds HID: amd_sfh: Rename the float32 variable Linux 6.1.39 io_uring: Use io_schedule* in cqring wait sh: hd64461: Handle virq offset for offchip IRQ base and HD64461 IRQ sh: mach-dreamcast: Handle virq offset in cascaded IRQ demux sh: mach-highlander: Handle virq offset in cascaded IRL demux sh: mach-r2d: Handle virq offset in cascaded IRL demux block/partition: fix signedness issue for Amiga partitions tty: serial: fsl_lpuart: add earlycon for imx8ulp platform wireguard: netlink: send staged packets when setting initial private key wireguard: queueing: use saner cpu selection wrapping netfilter: nf_tables: prevent OOB access in nft_byteorder_eval netfilter: nf_tables: do not ignore genmask when looking up chain by id netfilter: conntrack: Avoid nf_ct_helper_hash uses after free netfilter: nf_tables: unbind non-anonymous set if rule construction fails mtd: parsers: refer to ARCH_BCMBCA instead of ARCH_BCM4908 drm/i915/tc: Fix system resume MST mode restore for DP-alt sinks drm/i915/tc: Fix TC port link ref init for DP MST during HW readout drm/i915: Fix TypeC mode initialization during system resume mm/mmap: Fix extra maple tree write xfs: fix xfs_inodegc_stop racing with mod_delayed_work xfs: disable reaping in fscounters scrub xfs: check that per-cpu inodegc workers actually run on that cpu xfs: explicitly specify cpu when forcing inodegc delayed work to run immediately fs: no need to check source blktrace: use inline function for blk_trace_remove() while blktrace is disabled leds: trigger: netdev: Recheck NETDEV_LED_MODE_LINKUP on dev rename ARM: orion5x: fix d2net gpio initialization ARM: dts: qcom: ipq4019: fix broken NAND controller properties override regulator: tps65219: Fix matching interrupts for their regulators ASoC: mediatek: mt8173: Fix snd_soc_component_initialize error path ASoC: mediatek: mt8173: Fix irq error path btrfs: do not BUG_ON() on tree mod log failure at __btrfs_cow_block() btrfs: fix extent buffer leak after tree mod log failure at split_node() btrfs: fix race when deleting quota root from the dirty cow roots list btrfs: reinsert BGs failed to reclaim btrfs: add block-group tree to lockdep classes btrfs: bail out reclaim process if filesystem is read-only btrfs: delete unused BGs while reclaiming BGs btrfs: add handling for RAID1C23/DUP to btrfs_reduce_alloc_profile ipvs: increase ip_vs_conn_tab_bits range for 64BIT usb: typec: ucsi: Mark dGPUs as DEVICE scope i2c: nvidia-gpu: Remove ccgx,firmware-build property i2c: nvidia-gpu: Add ACPI property to align with device-tree fs: Lock moved directories fs: Establish locking order for unrelated directories Revert "f2fs: fix potential corruption when moving a directory" ext4: Remove ext4 locking of moved directory fs: avoid empty option when generating legacy mount string jffs2: reduce stack usage in jffs2_build_xattr_subsystem() shmem: use ramfs_kill_sb() for kill_sb method of ramfs-based tmpfs mm/damon/ops-common: atomically test and clear young on ptes and pmds autofs: use flexible array in ioctl structure integrity: Fix possible multiple allocation in integrity_inode_get() um: Use HOST_DIR for mrproper watch_queue: prevent dangling pipe pointer bcache: Fix __bch_btree_node_alloc to make the failure behavior consistent bcache: Remove unnecessary NULL point check in node allocations bcache: fixup btree_cache_wait list damage wifi: mt76: mt7921e: fix init command fail with enabled device wifi: ath10k: Serialize wake_tx_queue ops wifi: cfg80211: fix regulatory disconnect for non-MLO mmc: sdhci: fix DMA configure compatibility issue when 64bit DMA mode is used. mmc: mmci: Set PROBE_PREFER_ASYNCHRONOUS mmc: core: disable TRIM on Micron MTFC4GACAJCN-1M mmc: core: disable TRIM on Kingston EMMC04G-M627 io_uring: wait interruptibly for request completions on exit irqchip/loongson-pch-pic: Fix initialization of HT vector register NFSD: add encoding of op_recall flag for write delegation irqchip/loongson-pch-pic: Fix potential incorrect hwirq assignment i2c: qup: Add missing unwind goto in qup_i2c_probe() btrfs: do not BUG_ON() on tree mod log failure at balance_level() extcon: usbc-tusb320: Unregister typec port on driver removal extcon: usbc-tusb320: Convert to i2c's .probe_new() dm ioctl: Avoid double-fetch of version dm ioctl: have constant on the right side of the test dm: avoid split of quoted strings where possible dm: fix undue/missing spaces i2c: xiic: Don't try to handle more interrupt events after error apparmor: fix missing error check for rhashtable_insert_fast sh: dma: Fix DMA channel offset calculation s390/qeth: Fix vipa deletion afs: Fix accidental truncation when storing data octeontx-af: fix hardware timestamp configuration net: dsa: sja1105: always enable the send_meta options net: dsa: tag_sja1105: fix MAC DA patching from meta frames pptp: Fix fib lookup calls. riscv: move memblock_allow_resize() after linear mapping is ready fanotify: disallow mount/sb marks on kernel internal pseudo fs net/sched: act_pedit: Add size check for TCA_PEDIT_PARMS_EX xsk: Honor SO_BINDTODEVICE on bind bpf, btf: Warn but return no error for NULL btf from __register_btf_kfunc_id_set() tcp: annotate data races in __tcp_oow_rate_limited() net: fix net_dev_start_xmit trace event vs skb_transport_offset() net: dsa: tag_sja1105: fix source port decoding in vlan_filtering=0 bridge mode net: bridge: keep ports without IFF_UNICAST_FLT in BR_PROMISC mode powerpc: dts: turris1x.dts: Fix PCIe MEM size for pci2 node powerpc: allow PPC_EARLY_DEBUG_CPM only when SERIAL_CPM=y ntfs: Fix panic about slab-out-of-bounds caused by ntfs_listxattr() octeontx2-af: Add validation before accessing cgx and lmac octeontx2-af: Fix mapping for NIX block from CGX connection f2fs: fix error path handling in truncate_dnode() mailbox: ti-msgmgr: Fill non-message tx data fields with 0x0 drm/amd: Don't try to enable secure display TA multiple times drm/amdgpu: fix number of fence calculations spi: bcm-qspi: return error if neither hif_mspi nor mspi is available mlxsw: minimal: fix potential memory leak in mlxsw_m_linecards_init net: dsa: vsc73xx: fix MTU configuration ibmvnic: Do not reset dql stats on NON_FATAL err Bluetooth: MGMT: Fix marking SCAN_RSP as not connectable Bluetooth: MGMT: Use BIT macro when defining bitfields Bluetooth: MGMT: add CIS feature bits to controller information Bluetooth: ISO: use hci_sync for setting CIG parameters Bluetooth: fix invalid-bdaddr quirk for non-persistent setup Add MODULE_FIRMWARE() for FIRMWARE_TG357766. net: dsa: tag_sja1105: always prefer source port information from INCL_SRCPT net: dsa: sja1105: always enable the INCL_SRCPT option net: dsa: felix: don't drop PTP frames with tag_8021q when RX timestamping is disabled net: mscc: ocelot: don't keep PTP configuration of all ports in single structure net: mscc: ocelot: don't report that RX timestamping is enabled by default spi: spi-geni-qcom: enable SPI_CONTROLLER_MUST_TX for GPI DMA mode net/sched: act_ipt: add sanity checks on skb before calling target net: add a couple of helpers for iph tot_len net/sched: act_ipt: add sanity checks on table name and hook locations sctp: fix potential deadlock on &net->sctp.addr_wq_lock media: cec: i2c: ch7322: also select REGMAP f2fs: check return value of freeze_super() drm/i915/guc/slpc: Apply min softlimit correctly drm/i915/psr: Use hw.adjusted mode when calculating io/fast wake times rtc: st-lpc: Release some resources in st_rtc_probe() in case of error md/raid10: fix the condition to call bio_end_io_acct() pwm: mtk_disp: Fix the disable flow of disp_pwm pwm: ab8500: Fix error code in probe() pwm: sysfs: Do not apply state to already disabled PWMs pwm: imx-tpm: force 'real_period' to be zero in suspend lib/bitmap: drop optimization of bitmap_{from,to}_arr64 phy: tegra: xusb: check return value of devm_kzalloc() mfd: stmpe: Only disable the regulators if they are enabled hwtracing: hisi_ptt: Fix potential sleep in atomic context clk: qcom: mmcc-msm8974: fix MDSS_GDSC power flags misc: fastrpc: check return value of devm_kasprintf() cpufreq: mediatek: correct voltages for MT7622 and MT7623 KVM: s390/diag: fix racy access of physical cpu number in diag 9c handler KVM: s390: vsie: fix the length of APCB bitmap mfd: stmfx: Nullify stmfx->vdd in case of error mfd: stmfx: Fix error path in stmfx_chip_init bus: fsl-mc: don't assume child devices are all fsl-mc devices nvmem: rmem: Use NVMEM_DEVID_AUTO nvmem: sunplus-ocotp: release otp->clk before return drivers: fwnode: fix fwnode_irq_get[_byname]() device property: Clarify description of returned value in some functions device property: Fix documentation for fwnode_get_next_parent() serial: 8250_omap: Use force_suspend and resume for system suspend Revert "usb: common: usb-conn-gpio: Set last role to unknown before initial detection" mfd: intel-lpss: Add missing check for platform_get_resource mfd: wcd934x: Fix an error handling path in wcd934x_slim_probe() usb: dwc3-meson-g12a: Fix an error handling path in dwc3_meson_g12a_probe() usb: common: usb-conn-gpio: Set last role to unknown before initial detection usb: dwc3: qcom: Fix an error handling path in dwc3_qcom_probe() usb: dwc3: qcom: Release the correct resources in dwc3_qcom_remove() KVM: s390: fix KVM_S390_GET_CMMA_BITS for GFNs in memslot holes f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io() f2fs: fix potential deadlock due to unpaired node_write lock use gfs2: Fix duplicate should_fault_in_pages() call sh: Avoid using IRQ0 on SH3 and SH4 media: atomisp: gmin_platform: fix out_len in gmin_get_config_dsm_var() media: venus: helpers: Fix ALIGN() of non power of two mfd: rt5033: Drop rt5033-battery sub-device coresight: Fix loss of connection info when a module is unloaded i3c: master: svc: fix cpu schedule in spin lock lkdtm: replace ll_rw_block with submit_bh kernfs: fix missing kernfs_idr_lock to remove an ID from the IDR serial: 8250: lock port for UART_IER access in omap8250_irq() serial: core: lock port for start_rx() in uart_resume_port() serial: 8250: lock port for stop_rx() in omap8250_irq() serial: core: lock port for stop_rx() in uart_suspend_port() usb: misc: eud: Fix eud sysfs path (use 'qcom_eud') usb: hide unused usbfs_notify_suspend/resume functions usb: phy: phy-tahvo: fix memory leak in tahvo_usb_probe() extcon: Fix kernel doc of property capability fields to avoid warnings extcon: Fix kernel doc of property fields to avoid warnings usb: gadget: u_serial: Add null pointer check in gserial_suspend usb: dwc3: qcom: Fix potential memory leak staging: vchiq_arm: mark vchiq_platform_init() static clk: qcom: mmcc-msm8974: use clk_rcg2_shared_ops for mdp_clk_src clock clk: qcom: dispcc-qcm2290: Fix GPLL0_OUT_DIV handling clk: qcom: dispcc-qcm2290: Fix BI_TCXO_AO handling clk: qcom: ipq6018: fix networking resets clk: qcom: reset: support resetting multiple bits media: mediatek: vcodec: using decoder status instead of core work count media: hi846: fix usage of pm_runtime_get_if_in_use() media: i2c: Correct format propagation for st-mipid02 media: usb: siano: Fix warning due to null work_func_t function pointer media: videodev2.h: Fix struct v4l2_input tuner index comment media: amphion: initiate a drain of the capture queue in dynamic resolution change media: amphion: drop repeated codec data for vc1g format media: amphion: drop repeated codec data for vc1l format media: usb: Check az6007_read() return value clk: qcom: gcc-qcm2290: Mark RCGs shared where applicable clk: qcom: gcc-ipq6018: Use floor ops for sdcc clocks clk: qcom: camcc-sc7180: Add parent dependency to all camera GDSCs clk: qcom: mmcc-msm8974: remove oxili_ocmemgx_clk serial: 8250: omap: Fix freeing of resources on failed register usb: dwc2: Fix some error handling paths usb: dwc2: platform: Improve error reporting for problems during .remove() sh: j2: Use ioremap() to translate device tree address into kernel memory f2fs: do not allow to defragment files have FI_COMPRESS_RELEASED dt-bindings: power: reset: qcom-pon: Only allow reboot-mode pre-pmk8350 w1: fix loop in w1_fini() w1: w1_therm: fix locking behavior in convert_t SUNRPC: Fix UAF in svc_tcp_listen_data_ready() btrfs: fix race when deleting free space root from the dirty cow roots list block: increment diskseq on all media change events block: change all __u32 annotations to __be32 in affs_hardblocks.h block: add overflow checks for Amiga partition support block: fix signed int overflow in Amiga partition support ALSA: pcm: Fix potential data race at PCM memory allocation helpers ALSA: jack: Fix mutex call in snd_jack_report() ALSA: hda/realtek: Add quirk for Clevo NPx0SNx ALSA: hda/realtek: Enable mute/micmute LEDs and limit mic boost on EliteBook mm/mmap: Fix VM_LOCKED check in do_vmi_align_munmap() Revert "drm/amd/display: edp do not add non-edid timings" iio: accel: fxls8962af: fixup buffer scan element type iio: accel: fxls8962af: errata bug only applicable for FXLS8962AF iio: adc: ad7192: Fix internal/external clock selection iio: adc: ad7192: Fix null ad7192_state pointer access phy: tegra: xusb: Clear the driver reference in usb-phy dev usb: dwc3: gadget: Propagate core init errors to UDC during pullup USB: serial: option: add LARA-R6 01B PIDs md/raid1-10: fix casting from randomized structure in raid1_submit_write() x86/efi: Make efi_set_virtual_address_map IBT safe arm64: sme: Use STR P to clear FFR context field in streaming SVE mode ksmbd: avoid field overflow warning smb: client: fix broken file attrs with nodfs mounts cifs: do all necessary checks for credits within or before locking cifs: prevent use-after-free by freeing the cfile later efi/libstub: Disable PCI DMA before grabbing the EFI memory map kbuild: Disable GCOV for *.mod.o hwrng: st - keep clock enabled while hwrng is registered dax/kmem: Pass valid argument to memory_group_register_static dax: Introduce alloc_dev_dax_id() dax: Fix dax_mapping_release() use after free SMB3: Do not send lease break acknowledgment if all file handles have been closed NFSv4.1: freeze the session table upon receiving NFS4ERR_BADSESSION NFSv4.2: fix wrong shrinker_id crypto: qat - unmap buffers before free for RSA crypto: qat - unmap buffer before free for DH crypto: qat - Use helper to set reqsize crypto: kpp - Add helper to set reqsize ARC: define ASM_NL and __ALIGN(_STR) outside #ifdef __ASSEMBLY__ guard modpost: fix off by one in is_executable_section() crypto: jitter - correct health test during initialization crypto: marvell/cesa - Fix type mismatch warning modpost: fix section mismatch message for R_ARM_{PC24,CALL,JUMP24} modpost: fix section mismatch message for R_ARM_ABS32 crypto: nx - fix build warnings when DEBUG_FS is not enabled modpost: remove broken calculation of exception_table_entry size hwrng: virtio - Fix race on data_avail and actual data vfio/mdev: Move the compat_class initialization to module init PCI: vmd: Fix uninitialized variable usage in vmd_enable_domain() PCI: endpoint: functions/pci-epf-test: Fix dma_chan direction PCI: endpoint: Fix a Kconfig prompt of vNTB driver PCI: endpoint: Fix Kconfig indent style powerpc/mm/dax: Fix the condition when checking if altmap vmemap can cross-boundary powerpc/book3s64/mm: Fix DirectMap stats in /proc/meminfo riscv: uprobes: Restore thread.bad_cause PCI: qcom: Disable write access to read only registers for IP v2.9.0 PCI: qcom: Use DWC helpers for modifying the read-only DBI registers PCI: qcom: Use lower case for hex PCI: qcom: Sort and group registers and bitfield definitions PCI: qcom: Remove PCIE20_ prefix from register definitions powerpc: update ppc_save_regs to save current r1 in pt_regs powerpc: simplify ppc_save_regs powerpc/powernv/sriov: perform null check on iov before dereferencing iov pinctrl: at91-pio4: check return value of devm_kasprintf() pinctrl: microchip-sgpio: check return value of devm_kasprintf() powerpc/64s: Fix VAS mm use after free perf tool x86: Fix perf_env memory leak perf tool x86: Consolidate is_amd check into single function platform/x86/dell/dell-rbtn: Fix resources leaking on error path perf dwarf-aux: Fix off-by-one in die_get_varname() platform/x86: thinkpad_acpi: Fix lkp-tests warnings for platform profiles perf script: Fix allocation of evsel->priv related to per-event dump files powerpc/signal32: Force inlining of __unsafe_save_user_regs() and save_tm_user_regs_unsafe() powerpc/interrupt: Don't read MSR from interrupt_exit_kernel_prepare() kcsan: Don't expect 64 bits atomic builtins from 32 bits architectures pinctrl: npcm7xx: Add missing check for ioremap pinctrl:sunplus: Add check for kmalloc platform/x86: think-lmi: Correct NVME password handling platform/x86: think-lmi: Correct System password interface platform/x86: think-lmi: mutex protection around multiple WMI calls pinctrl: cherryview: Return correct value if pin in push-pull mode perf bench: Add missing setlocale() call to allow usage of %'d style formatting scsi: lpfc: Revise NPIV ELS unsol rcv cmpl logic to drop ndlp based on nlp_state PCI: Add pci_clear_master() stub for non-CONFIG_PCI pinctrl: sunplus: Add check for kmalloc PCI: ftpci100: Release the clock resources PCI: pciehp: Cancel bringup sequence if card is not present scsi: 3w-xxxx: Add error handling for initialization failure in tw_probe() PCI/ASPM: Disable ASPM on MFD function removal to avoid use-after-free platform/x86: lenovo-yogabook: Set default keyboard backligh brightness on probe() platform/x86: lenovo-yogabook: Reprobe devices on remove() platform/x86: lenovo-yogabook: Fix work race on remove() pinctrl: bcm2835: Handle gpiochip_add_pin_range() errors scsi: qedf: Fix NULL dereference in error handling PCI: vmd: Reset VMD config register between soft reboots PCI: cadence: Fix Gen2 Link Retraining process ASoC: amd: acp: clear pdm dma interrupt mask ARM: dts: lan966x: kontron-d10: fix SPI CS ARM: dts: lan966x: kontron-d10: fix board reset clk: Fix memory leak in devm_clk_notifier_register() ASoC: imx-audmix: check return value of devm_kasprintf() ovl: update of dentry revalidate flags after copy up drivers: meson: secure-pwrc: always enable DMA domain clk: ti: clkctrl: check return value of kasprintf() clk: keystone: sci-clk: check return value of kasprintf() clk: si5341: free unused memory on probe failure clk: si5341: check return value of {devm_}kasprintf() clk: si5341: return error if one synth clock registration fails clk: cdce925: check return value of kasprintf() clk: vc5: check memory returned by kasprintf() drm/msm/dpu: correct MERGE_3D length drm/amdgpu: Fix usage of UMC fill record in RAS drm/amdgpu: Fix memcpy() in sienna_cichlid_append_powerplay_table function. arm64: dts: mediatek: mt8192: Fix CPUs capacity-dmips-mhz arm64: dts: mediatek: Add cpufreq nodes for MT8192 drm/msm/dp: Free resources after unregistering them drm/msm/dsi: Remove incorrect references to slice_count drm/msm/dsi: Flip greater-than check for slice_count and slice_per_intf drm/msm/dsi: Use DSC slice(s) packet size to compute word count drm/msm/dpu: Fix slice_last_group_size calculation drm/msm/dpu: do not enable color-management if DSPPs are not available ALSA: ac97: Fix possible NULL dereference in snd_ac97_mixer clk: tegra: tegra124-emc: Fix potential memory leak clk: clocking-wizard: Fix Oops in clk_wzrd_register_divider() clk: bcm: rpi: Fix off by one in raspberrypi_discover_clocks() arm64: dts: qcom: sm8250-edo: Panel framebuffer is 2.5k instead of 4k arm64: dts: qcom: sdm845: Flush RSC sleep & wake votes clk: imx: clk-imx8mp: improve error handling in imx8mp_clocks_probe() clk: imx93: fix memory leak and missing unwind goto in imx93_clocks_probe clk: imx: clk-imx8mn: fix memory leak in imx8mn_clocks_probe clk: imx: clk-imxrt1050: fix memory leak in imxrt1050_clocks_probe RDMA/bnxt_re: Avoid calling wake_up threads from spin_lock context RDMA/bnxt_re: wraparound mbox producer index drm/msm/a5xx: really check for A510 in a5xx_gpu_init amdgpu: validate offset_in_bo of drm_amdgpu_gem_va RDMA/rxe: Fix access checks in rxe_check_bind_mw RDMA/rxe: Replace pr_xxx by rxe_dbg_xxx in rxe_mw.c RDMA/rxe: Add ibdev_dbg macros for rxe HID: uclogic: Modular KUnit tests should not depend on KUNIT=y drm/radeon: fix possible division-by-zero errors drm/amd/display: Fix artifacting on eDP panels when engaging freesync video mode soc: mediatek: SVS: Fix MT8192 GPU node name drm/amdkfd: Fix potential deallocation of previously deallocated memory. drm/amd/display: Fix a test dml32_rq_dlg_get_rq_reg() drm/amd/display: Fix a test CalculatePrefetchSchedule() clk: Export clk_hw_forward_rate_request() ARM: dts: BCM5301X: fix duplex-full => full-duplex hwmon: (pmbus/adm1275) Fix problems with temperature monitoring on ADM1272 hwmon: (gsc-hwmon) fix fan pwm temperature scaling ARM: dts: stm32: fix i2s endpoint format property for stm32mp15xx-dkx ARM: dts: stm32: Fix audio routing on STM32MP15xx DHCOM PDK2 Input: pm8941-powerkey - fix debounce on gen2+ PMICs arm64: dts: ti: k3-j7200: Fix physical address of pin fbdev: omapfb: lcd_mipid: Fix an error handling path in mipid_spi_probe() drm/msm/dpu: set DSC flush bit correctly at MDP CTL flush register arm64: dts: renesas: ulcb-kf: Remove flow control for SCIF1 ARM: dts: iwg20d-q7-common: Fix backlight pwm specifier RDMA/hns: Fix hns_roce_table_get return value IB/hfi1: Fix wrong mmu_node used for user SDMA packet after invalidate RDMA/irdma: avoid fortify-string warning in irdma_clr_wqes soc/fsl/qe: fix usb.c build errors ARM: dts: meson8: correct uart_B and uart_C clock references ASoC: es8316: Do not set rate constraints for unsupported MCLKs ASoC: es8316: Increment max value for ALC Capture Target Volume control ARM: dts: qcom: apq8074-dragonboard: Set DMA as remotely controlled memory: brcmstb_dpfe: fix testing array offset after use ARM: dts: stm32: Shorten the AV96 HDMI sound card name arm64: dts: mediatek: mt8183: Add mediatek,broken-save-restore-fw to kukui arm64: dts: qcom: apq8096: fix fixed regulator name property arm64: dts: qcom: pm7250b: add missing spmi-vadc include ARM: omap2: fix missing tick_broadcast() prototype ARM: ep93xx: fix missing-prototype warnings drm/panel: simple: fix active size for Ampire AM-480272H3TMQW-T01H drm/bridge: ti-sn65dsi83: Fix enable/disable flow to meet spec drm/bridge: Introduce pre_enable_prev_first to alter bridge init order arm64: dts: qcom: apq8016-sbc: Fix 1.8V power rail on LS expansion arm64: dts: qcom: apq8016-sbc: Fix regulator constraints arm64: dts: qcom: sdm845-polaris: add missing touchscreen child node reg arm64: dts: qcom: sm8350: correct DMA controller unit address arm64: dts: qcom: sm8350: Add GPI DMA compatible fallback arm64: dts: qcom: sdm845: correct camss unit address arm64: dts: qcom: sdm630: correct camss unit address arm64: dts: qcom: msm8996: correct camss unit address arm64: dts: qcom: msm8994: correct SPMI unit address arm64: dts: qcom: msm8916: correct MMC unit address arm64: dts: qcom: msm8916: correct camss unit address ARM: dts: qcom: msm8974: do not use underscore in node name (again) drm/bridge: anx7625: Prevent endless probe loop drm/bridge: anx7625: Convert to i2c's .probe_new() ARM: dts: gta04: Move model property out of pinctrl node clk: renesas: rzg2l: Fix CPG_SIPLL5_CLK1 register write iommu/virtio: Return size mapped for a detached domain iommu/virtio: Detach domain on endpoint release drm/msm/dpu: Set DPU_DATA_HCTL_EN for in INTF_SC7180_MASK drm/msm/disp/dpu: get timing engine status from intf status register drm/msm/dsi: don't allow enabling 14nm VCO with unprogrammed rate RDMA/bnxt_re: Fix to remove an unnecessary log RDMA/bnxt_re: Remove a redundant check inside bnxt_re_update_gid RDMA/bnxt_re: Use unique names while registering interrupts RDMA/bnxt_re: Fix to remove unnecessary return labels RDMA/bnxt_re: Disable/kill tasklet only if it is enabled hwmon: (f71882fg) prevent possible division by zero clk: imx: scu: use _safe list iterator to avoid a use after free drm/bridge: tc358767: Switch to devm MIPI-DSI helpers arm64: dts: microchip: sparx5: do not use PSCI on reference boards bus: ti-sysc: Fix dispc quirk masking bool variables ARM: dts: stm32: Move ethernet MAC EEPROM from SoM to carrier boards drm/vkms: Fix RGB565 pixel conversion drm: Add fixed-point helper to get rounded integer values drm/vkms: isolate pixel conversion functionality ASoC: Intel: sof_sdw: remove SOF_SDW_TGL_HDMI for MeteorLake devices driver: soc: xilinx: use _safe loop iterator to avoid a use after free drm/panel: sharp-ls043t1le01: adjust mode settings drm: sun4i_tcon: use devm_clk_get_enabled in `sun4i_tcon_init_clocks` Input: adxl34x - do not hardcode interrupt trigger type clk: rs9: Fix .driver_data content in i2c_device_id clk: vc7: Fix .driver_data content in i2c_device_id clk: vc5: Fix .driver_data content in i2c_device_id bootmem: remove the vmemmap pages from kmemleak in free_bootmem_page clk: vc5: Use `clamp()` to restrict PLL range mm: call arch_swap_restore() from do_swap_page() ARM: dts: meson8b: correct uart_B and uart_C clock references ARM: dts: BCM5301X: Drop "clock-names" from the SPI node drm/vram-helper: fix function names in vram helper doc drm/bridge: tc358768: fix THS_TRAILCNT computation drm/bridge: tc358768: fix TXTAGOCNT computation drm/bridge: tc358768: fix THS_ZEROCNT computation drm/bridge: tc358768: fix TCLK_TRAILCNT computation drm/bridge: tc358768: Add atomic_get_input_bus_fmts() implementation drm/bridge: tc358768: fix TCLK_ZEROCNT computation drm/bridge: tc358768: fix PLL target frequency drm/bridge: tc358768: fix PLL parameters computation drm/bridge: tc358768: always enable HS video mode drm/bridge: ti-sn65dsi83: Fix enable error path Input: drv260x - sleep between polling GO bit drm/bridge: it6505: Move a variable assignment behind a null pointer check in receive_timing_debugfs_show() drm/amd/display: Explicitly specify update type per plane info change radeon: avoid double free in ci_dpm_init() drm/amd/display: Add logging for display MALL refresh setting netlink: Add __sock_i_ino() for __netlink_diag_dump(). ipvlan: Fix return value of ipvlan_queue_xmit() netfilter: nf_conntrack_sip: fix the ct_sip_parse_numerical_param() return value. netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one lib/ts_bm: reset initial match offset for every block of text net: nfc: Fix use-after-free caused by nfc_llcp_find_local sfc: fix crash when reading stats while NIC is resetting ocfs2: Fix use of slab data with sendpage net: axienet: Move reset before 64-bit DMA detection gtp: Fix use-after-free in __gtp_encap_destroy(). selftests: rtnetlink: remove netdevsim device after ipsec offload test bonding: do not assume skb mac_header is set netlink: do not hard code device address lenth in fdb dumps netlink: fix potential deadlock in netlink_set_err() net: stmmac: fix double serdes powerdown can: kvaser_pciefd: Set hardware timestamp on transmitted packets can: kvaser_pciefd: Add function to set skb hwtstamps can: length: fix bitstuffing count bpf: Fix bpf socket lookup from tc/xdp to respect socket VRF bindings bpf: Call __bpf_sk_lookup()/__bpf_skc_lookup() directly via TC hookpoint bpf: Factor out socket lookup functions for the TC hookpoint. wifi: ath9k: convert msecs to jiffies where needed wifi: iwlwifi: mvm: indicate HW decrypt for beacon protection mmc: Add MMC_QUIRK_BROKEN_SD_CACHE for Kingston Canvas Go Plus from 11/2019 wifi: ieee80211: Fix the common size calculation for reconfiguration ML wifi: cfg80211/mac80211: Fix ML element common size calculation wifi: cfg80211: fix regulatory disconnect with OCB/NAN wifi: cfg80211: drop incorrect nontransmitted BSS update code wifi: cfg80211: rewrite merging of inherited elements wifi: mac80211: Remove "Missing iftype sband data/EHT cap" spam wifi: iwlwifi: pcie: fix NULL pointer dereference in iwl_pcie_irq_rx_msix_handler() wifi: iwlwifi: pull from TXQs with softirqs disabled wifi: ath11k: Add missing check for ioremap rtnetlink: extend RTEXT_FILTER_SKIP_STATS to IFLA_VF_INFO wifi: mac80211: Fix permissions for valid_links debugfs entry wifi: ath9k: Fix possible stall on ath9k_txq_list_has_key() memstick r592: make memstick_debug_get_tpc_name() static mmc: mediatek: Avoid ugly error message when SDIO wakeup IRQ isn't used kexec: fix a memory leak in crash_shrink_memory() watchdog/perf: more properly prevent false positives with turbo modes watchdog/perf: define dummy watchdog_update_hrtimer_threshold() on correct config selftests: cgroup: fix unexpected failure on test_memcg_low ice: handle extts in the miscellaneous interrupt thread wifi: rsi: Do not set MMC_PM_KEEP_POWER in shutdown wifi: rsi: Do not configure WoWlan in shutdown hook if not enabled selftests/bpf: Fix check_mtu using wrong variable type wifi: mac80211: recalc min chandef for new STA links wifi: ath10k: Trigger STA disconnect after reconfig complete on hardware restart samples/bpf: xdp1 and xdp2 reduce XDPBUFSIZE to 60 wifi: ath9k: don't allow to overwrite ENDPOINT0 attributes wifi: ray_cs: Fix an error handling path in ray_probe() wifi: wl3501_cs: Fix an error handling path in wl3501_probe() wifi: atmel: Fix an error handling path in atmel_probe() wifi: orinoco: Fix an error handling path in orinoco_cs_probe() wifi: orinoco: Fix an error handling path in spectrum_cs_probe() regulator: core: Streamline debugfs operations regulator: core: Fix more error checking for debugfs_create_dir() selftests/bpf: Do not use sign-file as testcase bpf: Fix memleak due to fentry attach failure bpf: Remove bpf trampoline selector bpftool: JIT limited misreported as negative value on aarch64 nfc: llcp: fix possible use of uninitialized variable in nfc_llcp_send_connect() spi: dw: Round of n_bytes to power of 2 bpf: Don't EFAULT for {g,s}setsockopt with wrong optlen libbpf: fix offsetof() and container_of() to work with CO-RE sctp: add bpf_bypass_getsockopt proto callback wifi: mwifiex: Fix the size of a memory allocation in mwifiex_ret_802_11_scan() wifi: wilc1000: fix for absent RSN capabilities WFA testcase spi: spi-geni-qcom: Correct CS_TOGGLE bit in SPI_TRANS_CFG samples/bpf: Fix buffer overflow in tcp_basertt libbpf: btf_dump_type_data_check_overflow needs to consider BTF_MEMBER_BITFIELD_SIZE wifi: ath9k: avoid referencing uninit memory in ath9k_wmi_ctrl_rx wifi: ath9k: fix AR9003 mac hardware hang check register offset calculation igc: Enable and fix RX hash usage by netstack pstore/ram: Add check for kstrdup ima: Fix build warnings evm: Fix build warnings evm: Complete description of evm_inode_setattr() locking/atomic: arm: fix sync ops x86/mm: Fix __swp_entry_to_pte() for Xen PV guests perf/ibs: Fix interface via core pmu events kselftest: vDSO: Fix accumulation of uninitialized ret when CLOCK_REALTIME is undefined rcu/rcuscale: Stop kfree_scale_thread thread(s) after unloading rcuscale rcu/rcuscale: Move rcu_scale_*() after kfree_scale_cleanup() rcuscale: Move shutdown from wait_event() to wait_event_idle() rcutorture: Correct name of use_softirq module parameter rcu-tasks: Stop rcu_tasks_invoke_cbs() from using never-onlined CPUs rcu: Make rcu_cpu_starting() rely on interrupts being disabled thermal/drivers/sun8i: Fix some error handling paths in sun8i_ths_probe() cpufreq: intel_pstate: Fix energy_performance_preference for passive ARM: 9303/1: kprobes: avoid missing-declaration warnings PM: domains: Move the verification of in-params from genpd_add_device() powercap: RAPL: Fix CONFIG_IOSF_MBI dependency drivers/perf: hisi: Don't migrate perf to the CPU going to teardown x86/tdx: Fix race between set_memory_encrypted() and load_unaligned_zeropad() x86/mm: Allow guest.enc_status_change_prepare() to fail perf/arm-cmn: Fix DTC reset PM: domains: fix integer overflow issues in genpd_parse_state() clocksource/drivers/cadence-ttc: Fix memory leak in ttc_timer_probe tracing/timer: Add missing hrtimer modes to decode_hrtimer_mode(). tick/rcu: Fix bogus ratelimit condition posix-timers: Prevent RT livelock in itimer_delete() erofs: fix compact 4B support for 16k block size erofs: simplify iloc() svcrdma: Prevent page release when nothing was received irqchip/jcore-aic: Fix missing allocation of IRQ descriptors irqchip/stm32-exti: Fix warning on initialized field overwritten block: fix blktrace debugfs entries leakage md/raid1-10: submit write io directly if bitmap is not enabled md/raid1-10: factor out a helper to submit normal write md/raid1-10: factor out a helper to add bio to plug md/raid10: fix io loss while replacement replace rdev md/raid10: fix null-ptr-deref of mreplace in raid10_sync_request md/raid10: fix wrong setting of max_corr_read_errors md/raid10: fix overflow of md/safe_mode_delay md/raid10: check slab-out-of-bounds in md_bitmap_get_counter nvme-core: fix dev_pm_qos memleak nvme-core: add missing fault-injection cleanup nvme-auth: don't ignore key generation failures when initializing ctrl keys nvme-core: fix memory leak in dhchap_ctrl_secret nvme-core: fix memory leak in dhchap_secret_store nvme-auth: no need to reset chap contexts on re-authentication nvme-auth: remove symbol export from nvme_auth_reset nvme-auth: rename authentication work elements nvme-auth: rename __nvme_auth_[reset|free] to nvme_auth[reset|free]_dhchap lockd: drop inappropriate svc_get() from locked_get() blk-mq: fix potential io hang by wrong 'wake_batch' virt: sevguest: Add CONFIG_CRYPTO dependency x86/sev: Fix calculation of end address based on number of pages blk-iocost: use spin_lock_irqsave in adjust_inuse_and_calc_cost x86/resctrl: Only show tasks' pid in current pid namespace erofs: kill hooked chains to avoid loops on deduplicated compressed images erofs: move zdata.h into zdata.c erofs: remove tagged pointer helpers erofs: avoid tagged pointers to mark sync decompression erofs: clean up cached I/O strategies block: Fix the type of the second bdev_op_is_zoned_write() argument fs: pipe: reveal missing function protoypes drm: use mgr->dev in drm_dbg_kms in drm_dp_add_payload_part2 Linux 6.1.38 drm/amd/display: Ensure vmin and vmax adjust for DCE drm/amdgpu: Validate VM ioctl flags. docs: Set minimal gtags / GNU GLOBAL version to 6.6.5 scripts/tags.sh: Resolve gtags empty index generation perf symbols: Symbol lookup with kcore can fail if multiple segments match stext nubus: Partially revert proc_create_single_data() conversion execve: always mark stack as growing down during early stack setup PCI/ACPI: Call _REG when transitioning D-states PCI/ACPI: Validate acpi_pci_set_power_state() parameter drm/amd/display: Do not update DRR while BW optimizations pending drm/amd/display: Remove optimization for VRR updates xtensa: fix lock_mm_and_find_vma in case VMA not found Linux 6.1.37 xtensa: fix NOMMU build with lock_mm_and_find_vma() conversion csky: fix up lock_mm_and_find_vma() conversion parisc: fix expand_stack() conversion sparc32: fix lock_mm_and_find_vma() conversion Revert "thermal/drivers/mediatek: Use devm_of_iomap to avoid resource leak in mtk_thermal_probe" HID: logitech-hidpp: add HIDPP_QUIRK_DELAYED_INIT for the T651. HID: wacom: Use ktime_t rather than int when dealing with timestamps HID: hidraw: fix data race on device refcount fbdev: fix potential OOB read in fast_imageblit() mm: always expand the stack with the mmap write lock held execve: expand new process stack manually ahead of time mm: make find_extend_vma() fail if write lock not held powerpc/mm: convert coprocessor fault to lock_mm_and_find_vma() mm/fault: convert remaining simple cases to lock_mm_and_find_vma() arm/mm: Convert to using lock_mm_and_find_vma() riscv/mm: Convert to using lock_mm_and_find_vma() mips/mm: Convert to using lock_mm_and_find_vma() powerpc/mm: Convert to using lock_mm_and_find_vma() arm64/mm: Convert to using lock_mm_and_find_vma() mm: make the page fault mmap locking killable mm: introduce new 'lock_mm_and_find_vma()' page fault helper maple_tree: fix potential out-of-bounds access in mas_wr_end_piv() can: isotp: isotp_sendmsg(): fix return error fix on TX path x86/smp: Cure kexec() vs. mwait_play_dead() breakage x86/smp: Use dedicated cache-line for mwait_play_dead() x86/smp: Remove pointless wmb()s from native_stop_other_cpus() x86/smp: Dont access non-existing CPUID leaf x86/smp: Make stop_other_cpus() more robust x86/microcode/AMD: Load late on both threads too mm, hwpoison: when copy-on-write hits poison, take page offline mm, hwpoison: try to recover from copy-on write faults mptcp: ensure listener is unhashed before updating the sk status mm/mmap: Fix error return in do_vmi_align_munmap() mm/mmap: Fix error path in do_vmi_align_munmap() Revert "gpiolib: Fix irq_domain resource tracking for gpiochip_irqchip_add_domain()" Linux 6.1.36 smb: move client and server files to common directory fs/smb i2c: imx-lpi2c: fix type char overflow issue when calculating the clock cycle x86/apic: Fix kernel panic when booting with intremap=off and x2apic_phys KVM: arm64: Restore GICv2-on-GICv3 functionality vhost_net: revert upend_idx only on retriable error vhost_vdpa: tell vqs about the negotiated drm/radeon: fix race condition UAF in radeon_gem_set_domain_ioctl drm/exynos: fix race condition UAF in exynos_g2d_exec_ioctl drm/exynos: vidi: fix a wrong error return null_blk: Fix: memory release when memory_backed=1 ARM: dts: Fix erroneous ADS touchscreen polarities i2c: mchp-pci1xxxx: Avoid cast to incompatible function type ALSA: hda/realtek: Add "Intel Reference board" and "NUC 13" SSID in the ALC256 ASoC: fsl_sai: Enable BCI bit if SAI works on synchronous mode with BYP asserted s390/purgatory: disable branch profiling gfs2: Don't get stuck writing page onto itself under direct I/O ASoC: amd: yc: Add Thinkpad Neo14 to quirks list for acp6x ASoC: nau8824: Add quirk to active-high jack-detect soundwire: qcom: add proper error paths in qcom_swrm_startup() soundwire: dmi-quirks: add new mapping for HP Spectre x360 ASoC: simple-card: Add missing of_node_put() in case of error ASoC: codecs: wcd938x-sdw: do not set can_multi_write flag spi: lpspi: disable lpspi module irq in DMA mode s390/cio: unregister device when the only path is gone arm64: dts: qcom: sc7280-qcard: drop incorrect dai-cells from WCD938x SDW arm64: dts: qcom: sc7280-idp: drop incorrect dai-cells from WCD938x SDW Input: soc_button_array - add invalid acpi_index DMI quirk handling nvme: improve handling of long keep alives nvme: check IO start time when deciding to defer KA nvme: double KA polling frequency to avoid KATO with TBKAS on usb: gadget: udc: fix NULL dereference in remove() btrfs: fix an uninitialized variable warning in btrfs_log_inode nfcsim.c: Fix error checking for debugfs_create_dir media: cec: core: don't set last_initiator if tx in progress media: cec: core: disable adapter in cec_devnode_unregister smb3: missing null check in SMB2_change_notify arm64: Add missing Set/Way CMO encodings HID: wacom: Add error check to wacom_parse_and_register() scsi: target: iscsi: Prevent login threads from racing between each other gpiolib: Fix irq_domain resource tracking for gpiochip_irqchip_add_domain() gpio: sifive: add missing check for platform_get_irq gpiolib: Fix GPIO chip IRQ initialization restriction arm64: dts: rockchip: fix nEXTRST on SOQuartz arm64: dts: rockchip: Enable GPU on SOQuartz CM4 revert "net: align SO_RCVMARK required privileges with SO_MARK" sch_netem: acquire qdisc lock in netem_change() platform/x86/amd/pmf: Register notify handler only if SPS is enabled selftests: forwarding: Fix race condition in mirror installation io_uring/net: use the correct msghdr union member in io_sendmsg_copy_hdr bpf: Force kprobe multi expected_attach_type for kprobe_multi link bpf/btf: Accept function names that contain dots Revert "net: phy: dp83867: perform soft reset and retain established link" netfilter: nfnetlink_osf: fix module autoload netfilter: nf_tables: disallow updates of anonymous sets netfilter: nf_tables: reject unbound chain set before commit phase netfilter: nf_tables: reject unbound anonymous set before commit phase netfilter: nf_tables: disallow element updates of bound anonymous sets netfilter: nft_set_pipapo: .walk does not deal with generations netfilter: nf_tables: drop map element references from preparation phase netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain netfilter: nf_tables: fix chain binding transaction logic be2net: Extend xmit workaround to BE3 chip net: dsa: mt7530: fix handling of LLDP frames net: dsa: mt7530: fix handling of BPDUs on MT7530 switch net: dsa: mt7530: fix trapping frames on non-MT7621 SoC MT7530 switch ipvs: align inner_mac_header for encapsulation mmc: usdhi60rol0: fix deferred probing mmc: sh_mmcif: fix deferred probing mmc: sdhci-acpi: fix deferred probing mmc: owl: fix deferred probing mmc: omap_hsmmc: fix deferred probing mmc: omap: fix deferred probing mmc: mvsdio: fix deferred probing mmc: mtk-sd: fix deferred probing net: qca_spi: Avoid high load if QCA7000 is not available sfc: use budget for TX completions net/mlx5: DR, Fix wrong action data allocation in decap action xfrm: Linearize the skb after offloading if needed. selftests: net: fcnal-test: check if FIPS mode is enabled selftests: net: vrf-xfrm-tests: change authentication and encryption algos selftests: net: tls: check if FIPS mode is enabled bpf: Fix a bpf_jit_dump issue for x86_64 with sysctl bpf_jit_enable. xfrm: fix inbound ipv4/udp/esp packets to UDPv6 dualstack sockets bpf: Fix verifier id tracking of scalars on spill bpf: track immediate values written to stack by BPF_ST instruction KVM: arm64: PMU: Restore the host's PMUSERENR_EL0 xfrm: Ensure policies always checked on XFRM-I input path xfrm: interface: rename xfrm_interface.c to xfrm_interface_core.c xfrm: Treat already-verified secpath entries as optional ieee802154: hwsim: Fix possible memory leaks mmc: meson-gx: fix deferred probing memfd: check for non-NULL file_seals in memfd_create() syscall x86/mm: Avoid using set_pgd() outside of real PGD pages nilfs2: prevent general protection fault in nilfs_clear_dirty_page() io_uring/poll: serialize poll linked timer start with poll removal arm64: dts: rockchip: Fix rk356x PCIe register and range mappings regmap: spi-avmm: Fix regmap_bus max_raw_write regulator: pca9450: Fix LDO3OUT and LDO4OUT MASK spi: spi-geni-qcom: correctly handle -EPROBE_DEFER from dma_request_chan() wifi: iwlwifi: pcie: Handle SO-F device for PCI id 0x7AF0 bpf: ensure main program has an extable mmc: sunxi: fix deferred probing mmc: bcm2835: fix deferred probing mmc: sdhci-spear: fix deferred probing mmc: mmci: stm32: fix max busy timeout calculation mmc: meson-gx: remove redundant mmc_request_done() call from irq context mmc: sdhci-msm: Disable broken 64-bit DMA on MSM8916 mmc: litex_mmc: set PROBE_PREFER_ASYNCHRONOUS cgroup,freezer: hold cpu_hotplug_lock before freezer_mutex in freezer_css_{online,offline}() cgroup: Do not corrupt task iteration when rebinding subsystem mptcp: consolidate fallback and non fallback state machine mptcp: fix possible list corruption on passive MPJ mptcp: fix possible divide by zero in recvmsg() mptcp: handle correctly disconnect() failures io_uring/net: disable partial retries for recvmsg with cmsg io_uring/net: clear msg_controllen on partial sendmsg retry PCI: hv: Add a per-bus mutex state_lock PCI: hv: Fix a race condition in hv_irq_unmask() that can cause panic PCI: hv: Remove the useless hv_pcichild_state from struct hv_pci_dev Revert "PCI: hv: Fix a timing issue which causes kdump to fail occasionally" PCI: hv: Fix a race condition bug in hv_pci_query_relations() Drivers: hv: vmbus: Fix vmbus_wait_for_unload() to scan present CPUs Drivers: hv: vmbus: Call hv_synic_free() if hv_synic_alloc() fails KVM: Avoid illegal stage2 mapping on invalid memory slot ACPI: sleep: Avoid breaking S3 wakeup due to might_sleep() nilfs2: fix buffer corruption due to concurrent device reads scripts: fix the gfp flags header path in gfp-translate writeback: fix dereferencing NULL mapping->host on writeback_page_template selftests: mptcp: join: fix "userspace pm add & remove address" selftests: mptcp: join: skip fail tests if not supported selftests: mptcp: join: skip userspace PM tests if not supported selftests: mptcp: join: skip test if iptables/tc cmds fail selftests: mptcp: sockopt: skip TCP_INQ checks if not supported selftests: mptcp: diag: skip listen tests if not supported selftests/mount_setattr: fix redefine struct mount_attr build error selftests: mptcp: join: skip MPC backups tests if not supported selftests: mptcp: join: skip fullmesh flag tests if not supported selftests: mptcp: join: skip backup if set flag on ID not supported selftests: mptcp: join: skip implicit tests if not supported selftests: mptcp: join: support RM_ADDR for used endpoints or not selftests: mptcp: join: skip Fastclose tests if not supported selftests: mptcp: join: support local endpoint being tracked or not selftests: mptcp: join: skip check if MIB counter not supported selftests: mptcp: join: helpers to skip tests selftests: mptcp: join: use 'iptables-legacy' if available selftests: mptcp: lib: skip if not below kernel version selftests: mptcp: userspace pm: skip if not supported selftests: mptcp: userspace pm: skip if 'ip' tool is unavailable selftests: mptcp: sockopt: skip getsockopt checks if not supported selftests: mptcp: sockopt: relax expected returned size selftests: mptcp: pm nl: skip fullmesh flag checks if not supported selftests: mptcp: pm nl: remove hardcoded default limits selftests: mptcp: connect: skip disconnect tests if not supported selftests: mptcp: connect: skip transp tests if not supported selftests: mptcp: lib: skip if missing symbol selftests: mptcp: join: fix ShellCheck warnings selftests: mptcp: remove duplicated entries in usage tick/common: Align tick period during sched_timer setup ksmbd: validate session id and tree id in the compound request ksmbd: fix out-of-bound read in smb2_write ksmbd: validate command payload size tpm_crb: Add support for CRB devices based on Pluton tpm, tpm_tis: Claim locality in interrupt handler mm: Fix copy_from_user_nofault(). ata: libata-scsi: Avoid deadlock on rescan after device resume tty: serial: fsl_lpuart: reduce RX watermark to 0 on LS1028A tty: serial: fsl_lpuart: make rx_watermark configurable for different platforms drm/amd/display: fix the system hang while disable PSR drm/amd/display: Add wrapper to call planes and stream update drm/amd/display: Use dc_update_planes_and_stream ANDROID: GKI: irq-gic-v3: fix up breakage in 6.1.35 merge Linux 6.1.35 kbuild: Update assembler calls to use proper flags and language target MIPS: Prefer cc-option for additions to cflags MIPS: Move '-Wa,-msoft-float' check from as-option to cc-option x86/boot/compressed: prefer cc-option for CFLAGS additions scsi: target: core: Fix error path in target_setup_session() neighbour: delete neigh_lookup_nodev as not used net/sched: act_api: add specific EXT_WARN_MSG for tc action Revert "net/sched: act_api: move TCA_EXT_WARN_MSG to the correct hierarchy" net/sched: act_api: move TCA_EXT_WARN_MSG to the correct hierarchy drm/amdgpu: Don't set struct drm_driver.output_poll_changed rcu/kvfree: Avoid freeing new kfree_rcu() memory after old grace period parisc: Delete redundant register definitions in <asm/assembly.h> afs: Fix vlserver probe RTT handling octeon_ep: Add missing check for ioremap selftests/ptp: Fix timestamp printf format for PTP_SYS_OFFSET net: tipc: resize nlattr array to correct size dm: don't lock fs when the map is NULL during suspend or resume sfc: fix XDP queues mode with legacy IRQ net: macsec: fix double free of percpu stats net: lapbether: only support ethernet devices net: dsa: felix: fix taprio guard band overflow at 10Mbps with jumbo frames net/sched: cls_api: Fix lockup on flushing explicitly created chain ext4: drop the call to ext4_error() from ext4_get_group_info() cifs: fix lease break oops in xfstest generic/098 selftests: forwarding: hw_stats_l3: Set addrgenmode in a separate step net/sched: qdisc_destroy() old ingress and clsact Qdiscs before grafting net/sched: Refactor qdisc_graft() for ingress and clsact Qdiscs sched: add new attr TCA_EXT_WARN_MSG to report tc extact message selftests/tc-testing: Fix SFB db test selftests/tc-testing: Fix Error: failed to find target LOG selftests/tc-testing: Fix Error: Specified qdisc kind is unknown. drm/nouveau: add nv_encoder pointer check for NULL drm/nouveau/dp: check for NULL nv_connector->native_mode drm/bridge: ti-sn65dsi86: Avoid possible buffer overflow drm/nouveau: don't detect DSM for non-NVIDIA device net: phylink: use a dedicated helper to parse usgmii control word net: phylink: report correct max speed for QUSGMII igb: fix nvm.ops.read() error handling igc: Fix possible system crash when loading module igc: Clean the TX buffer and TX descriptor ring sctp: fix an error code in sctp_sf_eat_auth() ipvlan: fix bound dev checking for IPv6 l3s mode net: ethtool: correct MAX attribute value for stats IB/isert: Fix incorrect release of isert connection IB/isert: Fix possible list corruption in CMA handler IB/isert: Fix dead lock in ib_isert RDMA/mlx5: Fix affinity assignment IB/uverbs: Fix to consider event queue closing also upon non-blocking mode RDMA/cma: Always set static rate to 0 for RoCE RDMA/mlx5: Create an indirect flow table for steering anchor RDMA/mlx5: Initiate dropless RQ for RAW Ethernet functions octeontx2-af: fix lbk link credits on cn10k octeontx2-af: fixed resource availability check iavf: remove mask from iavf_irq_enable_queues() RDMA/rxe: Fix the use-before-initialization error of resp_pkts RDMA/rxe: Removed unused name from rxe_task struct wifi: mac80211: take lock before setting vif links wifi: cfg80211: fix link del callback to call correct handler wifi: mac80211: fix link activation settings order net/sched: cls_u32: Fix reference counter leak leading to overflow octeontx2-af: Fix promiscuous mode net/sched: act_pedit: Parse L3 Header for L4 offset net/sched: act_pedit: remove extra check for key type net/sched: simplify tcf_pedit_act igb: Fix extts capture value format for 82580/i354/i350 ping6: Fix send to link-local addresses with VRF. net: enetc: correct the indexes of highest and 2nd highest TCs netfilter: nf_tables: incorrect error path handling with NFT_MSG_NEWRULE ice: Fix XDP memory leak when NIC is brought up and down netfilter: nfnetlink: skip error delivery on batch in case of ENOMEM netfilter: nf_tables: integrate pipapo into commit protocol spi: fsl-dspi: avoid SCK glitches with continuous transfers spi: cadence-quadspi: Add missing check for dma_set_mask RDMA/rxe: Fix ref count error in check_rkey() RDMA/rxe: Fix packet length checks RDMA/rtrs: Fix rxe_dealloc_pd warning RDMA/rtrs: Fix the last iu->buf leak in err path usb: dwc3: gadget: Reset num TRBs before giving back the request USB: dwc3: fix use-after-free on core driver unbind USB: dwc3: qcom: fix NULL-deref on suspend usb: gadget: udc: core: Prevent soft_connect_store() race usb: gadget: udc: core: Offload usb_udc_vbus_handler processing usb: typec: Fix fast_role_swap_current show function usb: typec: ucsi: Fix command cancellation serial: lantiq: add missing interrupt ack USB: serial: option: add Quectel EM061KGL series clk: pxa: fix NULL pointer dereference in pxa3xx_clk_update_accr thunderbolt: Mask ring interrupt on Intel hardware as well thunderbolt: dma_test: Use correct value for absent rings when creating paths thunderbolt: Do not touch CL state configuration during discovery ALSA: hda/realtek: Add a quirk for Compaq N14JP6 drm/amdgpu: add missing radeon secondary PCI ID drm/amd/pm: workaround for compute workload type on some skus drm/amd: Tighten permissions on VBIOS flashing attributes drm/amd: Make sure image is written to trigger VBIOS image update flow drm/amd/display: edp do not add non-edid timings net: usb: qmi_wwan: add support for Compal RXM-G1 drm/amdgpu: vcn_4_0 set instance 0 init sched score to 1 RDMA/uverbs: Restrict usage of privileged QKEYs nouveau: fix client work fence deletion race net: ethernet: stmicro: stmmac: fix possible memory leak in __stmmac_open dm thin: fix issue_discard to pass GFP_NOIO to __blkdev_issue_discard dm thin metadata: check fail_io before using data_sm ALSA: usb-audio: Add quirk flag for HEM devices to enable native DSD playback ALSA: usb-audio: Fix broken resume due to UAC3 power state btrfs: can_nocow_file_extent should pass down args->strict from callers btrfs: fix iomap_begin length for nocow writes btrfs: do not ASSERT() on duplicated global roots powerpc/purgatory: remove PGO flags riscv/purgatory: remove PGO flags x86/purgatory: remove PGO flags kexec: support purgatories with .text.hot sections io_uring/net: save msghdr->msg_control for retries LoongArch: Fix perf event id calculation nilfs2: reject devices with insufficient block count nilfs2: fix possible out-of-bounds segment allocation in resize ioctl nilfs2: fix incomplete buffer cleanup in nilfs_btnode_abort_change_key() nios2: dts: Fix tse_mac "max-frame-size" property zswap: do not shrink if cgroup may not zswap ocfs2: check new file size on fallocate call ocfs2: fix use-after-free when unmounting read-only filesystem epoll: ep_autoremove_wake_function should use list_del_init_careful wifi: cfg80211: fix double lock bug in reg_wdev_chan_valid() wifi: cfg80211: fix locking in regulatory disconnect irqchip/gic: Correctly validate OF quirk descriptors NVMe: Add MAXIO 1602 to bogus nid list. io_uring: unlock sqd->lock before sq thread release CPU drm:amd:amdgpu: Fix missing buffer object unlock in failure path xen/blkfront: Only check REQ_FUA for writes ASoC: dwc: move DMA init to snd_soc_dai_driver probe() ASoC: cs35l41: Fix default regmap values for some registers mips: Move initrd_start check after initrd address sanitisation. MIPS: Alchemy: fix dbdma2 MIPS: Restore Au1300 support MIPS: unhide PATA_PLATFORM parisc: Flush gatt writes and adjust gatt mask in parisc_agp_mask_memory() parisc: Improve cache flushing for PCXL in arch_sync_dma_for_cpu() ASoC: Intel: avs: Add missing checks on FE startup ASoC: Intel: avs: Account for UID of ACPI device ASoC: soc-pcm: test if a BE can be prepared btrfs: handle memory allocation failure in btrfs_csum_one_bio btrfs: scrub: try harder to mark RAID56 block groups read-only drm: panel-orientation-quirks: Change Air's quirk to support Air Plus power: supply: Fix logic checking if system is running from battery irqchip/meson-gpio: Mark OF related data as maybe unused irqchip/gic-v3: Disable pseudo NMIs on Mediatek devices w/ firmware issues regulator: Fix error checking for debugfs_create_dir platform/x86: asus-wmi: Ignore WMI events with codes 0x7B, 0xC0 PCI/DPC: Quirk PIO log size for Intel Ice Lake Root Ports power: supply: Ratelimit no data debug output selftests: gpio: gpio-sim: Fix BUG: test FAILED due to recent change tools: gpio: fix debounce_period_us output of lsgpio ARM: dts: vexpress: add missing cache properties power: supply: bq27xxx: Use mod_delayed_work() instead of cancel() + schedule() power: supply: sc27xx: Fix external_power_changed race power: supply: ab8500: Fix external_power_changed race of: overlay: Fix missing of_node_put() in error case of init_overlay_changeset() ksmbd: validate smb request protocol id EDAC/qcom: Get rid of hardcoded register offsets qcom: llcc/edac: Fix the base address used for accessing LLCC banks cgroup: fix missing cpus_read_{lock,unlock}() in cgroup_transfer_tasks() cgroup: always put cset in cgroup_css_set_put_fork cgroup: bpf: use cgroup_lock()/cgroup_unlock() wrappers test_firmware: prevent race conditions by a correct implementation of locking test_firmware: Use kstrtobool() instead of strtobool() x86/head/64: Switch to KERNEL_CS as soon as new GDT is installed Revert "Bluetooth: fix debugfs registration" Revert "Bluetooth: hci_sync: add lock to protect HCI_UNREGISTER" Revert "net/ipv6: fix bool/int mismatch for skip_notify_on_dev_down" Revert "neighbour: fix unaligned access to pneigh_entry" Revert "tcp: deny tcp_disconnect() when threads are waiting" Revert "bpf, sockmap: Pass skb ownership through read_skb" Revert "bpf, sockmap: Convert schedule_work into delayed_work" Revert "bpf, sockmap: Reschedule is now done through backlog" Revert "bpf, sockmap: Improved check for empty queue" Revert "bpf, sockmap: Handle fin correctly" Revert "bpf, sockmap: TCP data stall on recv before accept" Revert "bpf, sockmap: Wake up polling after data copy" Revert "bpf, sockmap: Incorrectly handling copied_seq" Linux 6.1.34 Revert "staging: rtl8192e: Replace macro RTL_PCI_DEVICE with PCI_DEVICE" wifi: rtw88: correct PS calculation for SUPPORTS_DYNAMIC_PS wifi: rtw89: correct PS calculation for SUPPORTS_DYNAMIC_PS ext4: only check dquot_initialize_needed() when debugging Revert "ext4: don't clear SB_RDONLY when remounting r/w until quota is re-enabled" ksmbd: check the validation of pdu_size in ksmbd_conn_handler_loop ksmbd: fix out-of-bound read in parse_lease_state() ksmbd: fix out-of-bound read in deassemble_neg_contexts() vhost_vdpa: support PACKED when setting-getting vring_base vhost: support PACKED when setting-getting vring_base vduse: avoid empty string for dev name riscv: fix kprobe __user string arg print fault issue soundwire: stream: Add missing clear of alloc_slave_rt eeprom: at24: also select REGMAP riscv: mm: Ensure prot of VM_WRITE and VM_EXEC must be readable i2c: sprd: Delete i2c adapter in .remove's error path gpio: sim: fix memory corruption when adding named lines and unnamed hogs firmware: arm_ffa: Set handle field to zero in memory descriptor i2c: mv64xxx: Fix reading invalid status value in atomic mode arm64: dts: imx8mn-beacon: Fix SPI CS pinmux blk-mq: fix blk_mq_hw_ctx active request accounting ASoC: simple-card-utils: fix PCM constraint error check ASoC: mediatek: mt8195: fix use-after-free in driver remove path ASoC: mediatek: mt8195-afe-pcm: Convert to platform remove callback returning void arm64: dts: imx8-ss-dma: assign default clock rate for lpuarts arm64: dts: imx8qm-mek: correct GPIOs for USDHC2 CD and WP signals arm64: dts: qcom: sc7180-lite: Fix SDRAM freq for misidentified sc7180-lite boards ASoC: codecs: wsa881x: do not set can_multi_write flag ASoC: codecs: wsa883x: do not set can_multi_write flag ARM: dts: at91: sama7g5ek: fix debounce delay property for shdwc ARM: at91: pm: fix imbalanced reference counter for ethernet devices arm64: dts: qcom: sc8280xp: Flush RSC sleep & wake votes mm: page_table_check: Ensure user pages are not slab pages mm: page_table_check: Make it dependent on EXCLUSIVE_SYSTEM_RAM usb: usbfs: Use consistent mmap functions usb: usbfs: Enforce page requirements for mmap pinctrl: meson-axg: add missing GPIOA_18 gpio group soc: qcom: icc-bwmon: fix incorrect error code passed to dev_err_probe() virtio_net: use control_buf for coalesce params rbd: get snapshot context after exclusive lock is ensured to be held rbd: move RBD_OBJ_FLAG_COPYUP_ENABLED flag setting tee: amdtee: Add return_origin to 'struct tee_cmd_load_ta' Bluetooth: hci_qca: fix debugfs registration Bluetooth: fix debugfs registration Bluetooth: Fix use-after-free in hci_remove_ltk/hci_remove_irk s390/dasd: Use correct lock while counting channel queue length ceph: fix use-after-free bug for inodes when flushing capsnaps selftests: mptcp: update userspace pm subflow tests selftests: mptcp: update userspace pm addr tests mptcp: update userspace pm infos mptcp: add address into userspace pm list mptcp: only send RM_ADDR in nl_cmd_remove can: j1939: avoid possible use-after-free when j1939_can_rx_register fails can: j1939: change j1939_netdev_lock type to mutex can: j1939: j1939_sk_send_loop_abort(): improved error queue handling in J1939 Socket wifi: iwlwifi: mvm: Fix -Warray-bounds bug in iwl_mvm_wait_d3_notif() drm/amd/display: Reduce sdp bw after urgent to 90% drm/amd/pm: Fix power context allocation in SMU13 drm/amdgpu: change reserved vram info print drm/amdgpu: fix xclk freq on CHIP_STONEY drm/amd/pm: conditionally disable pcie lane switching for some sienna_cichlid SKUs drm/i915/gt: Use the correct error value when kernel_context() fails ALSA: hda/realtek: Add quirks for Asus ROG 2024 laptops using CS35L41 ALSA: hda/realtek: Add Lenovo P3 Tower platform ALSA: hda/realtek: Add a quirk for HP Slim Desktop S01 ALSA: ice1712,ice1724: fix the kcontrol->id initialization ALSA: hda/realtek: Add quirk for Clevo NS50AU ALSA: cmipci: Fix kctl->id initialization ALSA: gus: Fix kctl->id initialization ALSA: ymfpci: Fix kctl->id initialization ALSA: hda: Fix kctl->id initialization Input: fix open count when closing inhibited device Input: psmouse - fix OOB access in Elantech protocol Input: xpad - delete a Razer DeathAdder mouse VID/PID entry batman-adv: Broken sync while rescheduling delayed work bnxt_en: Implement .set_port / .unset_port UDP tunnel callbacks bnxt_en: Prevent kernel panic when receiving unexpected PHC_UPDATE event bnxt_en: Skip firmware fatal error recovery if chip is not accessible bnxt_en: Query default VLAN before VNIC setup on a VF bnxt_en: Don't issue AP reset during ethtool's reset operation net: bcmgenet: Fix EEE implementation lib: cpu_rmap: Fix potential use-after-free in irq_cpu_rmap_release() drm/amdgpu: fix Null pointer dereference error in amdgpu_device_recover_vram bpf: Add extra path pointer check to d_path helper net: sched: fix possible refcount leak in tc_chain_tmplt_add() net: sched: act_police: fix sparse errors in tcf_police_dump() net: sched: move rtm_tca_policy declaration to include file drm/i915/selftests: Add some missing error propagation drm/i915/selftests: Stop using kthread_stop() net: sched: add rcu annotations around qdisc->qdisc_sleeping rfs: annotate lockless accesses to RFS sock flow table rfs: annotate lockless accesses to sk->sk_rxhash tcp: gso: really support BIG TCP ipv6: rpl: Fix Route of Death. netfilter: nf_tables: out-of-bound check in chain blob netfilter: ipset: Add schedule point in call_ad(). netfilter: conntrack: fix NULL pointer dereference in nf_confirm_cthelper netfilter: nft_bitwise: fix register tracking selftests/bpf: Fix sockopt_sk selftest selftests/bpf: Verify optval=NULL case wifi: cfg80211: fix locking in sched scan stop work qed/qede: Fix scheduling while atomic wifi: mac80211: don't translate beacon/presp addrs wifi: mac80211: mlme: fix non-inheritence element wifi: cfg80211: reject bad AP MLD address wifi: mac80211: use correct iftype HE cap Bluetooth: L2CAP: Add missing checks for invalid DCID Bluetooth: ISO: don't try to remove CIG if there are bound CIS left Bluetooth: Fix l2cap_disconnect_req deadlock Bluetooth: hci_sync: add lock to protect HCI_UNREGISTER drm/i915: Use 18 fast wake AUX sync len drm/i915: Explain the magic numbers for AUX SYNC/precharge length net/sched: fq_pie: ensure reasonable TCA_FQ_PIE_QUANTUM values net: enetc: correct rx_bytes statistics of XDP net: enetc: correct the statistics of rx bytes net/smc: Avoid to access invalid RMBs' MRs in SMCRv1 ADD LINK CONT net/ipv6: fix bool/int mismatch for skip_notify_on_dev_down bpf: Fix elem_size not being set for inner maps bpf: Fix UAF in task local storage net/ipv4: ping_group_range: allow GID from 2147483648 to 4294967294 net: dsa: lan9303: allow vid != 0 in port_fdb_{add|del} methods neighbour: fix unaligned access to pneigh_entry bpf, sockmap: Avoid potential NULL dereference in sk_psock_verdict_data_ready() wifi: mt76: mt7615: fix possible race in mt7615_mac_sta_poll afs: Fix setting of mtime when creating a file/dir/symlink spi: qup: Request DMA before enabling clocks platform/surface: aggregator_tabletsw: Add support for book mode in KIP subsystem platform/surface: aggregator: Allow completion work-items to be executed in parallel spi: mt65xx: make sure operations completed before unloading net: sfp: fix state loss when updating state_hw_mask scsi: megaraid_sas: Add flexible array member for SGLs Revert "Revert "binder_alloc: add missing mmap_lock calls when using the VMA"" Revert "Revert "android: binder: stop saving a pointer to the VMA"" Revert "binder: add lockless binder_alloc_(set|get)_vma()" Revert "binder: fix UAF caused by faulty buffer cleanup" Revert "binder: fix UAF of alloc->vma in race with munmap()" ANDROID: GKI: add skb_pull_data to android/abi_gki_aarch64_virtual_device ANDROID: GKI: preserve CRC generation for some bluetooth symbols Revert "Revert "usb: gadget: udc: core: Invoke usb_gadget_connect only when started"" Revert "tipc: add tipc_bearer_min_mtu to calculate min mtu" Revert "tipc: do not update mtu if msg_max is too small in mtu negotiation" Revert "tipc: check the bearer min mtu properly when setting it by netlink" Revert "platform: Provide a remove callback that returns no value" Revert "ASoC: fsl_micfil: Fix error handler with pm_runtime_enable" Revert "firmware: arm_sdei: Fix sleep from invalid context BUG" ANDROID: add memset32 to db835c list of exported symbols needed. Revert "uapi/linux/const.h: prefer ISO-friendly __typeof__" Revert "posix-cpu-timers: Implement the missing timer_wait_running callback" Revert "KVM: arm64: Avoid vcpu->mutex v. kvm->lock inversion in CPU_ON" Revert "KVM: arm64: Avoid lock inversion when setting the VM register width" Revert "KVM: arm64: Use config_lock to protect data ordered against KVM_RUN" Revert "KVM: arm64: Use config_lock to protect vgic state" Revert "KVM: arm64: vgic: Don't acquire its_lock before config_lock" ANDROID: add Android KABI build files to root .gitignore file ANDROID: add more gki_module headers to .gitignore file Linux 6.1.33 ext4: enable the lazy init thread when remounting read/write selftests: mptcp: join: avoid using 'cmp --bytes' selftests: mptcp: simult flows: skip if MPTCP is not supported selftests: mptcp: diag: skip if MPTCP is not supported arm64: efi: Use SMBIOS processor version to key off Ampere quirk tls: rx: strp: don't use GFP_KERNEL in softirq context xfs: verify buffer contents when we skip log replay drm/amd/display: Have Payload Properly Created After Resume iommu/amd/pgtbl_v2: Fix domain max address tpm, tpm_tis: Request threaded interrupt handler regmap: Account for register length when chunking fs/ntfs3: Validate MFT flags before replaying logs KEYS: asymmetric: Copy sig and digest in public_key_verify_signature() ksmbd: fix multiple out-of-bounds read during context decoding ksmbd: fix slab-out-of-bounds read in smb2_handle_negotiate ksmbd: fix incorrect AllocationSize set in smb2_get_info ksmbd: fix UAF issue from opinfo->conn ksmbd: fix credit count leakage KVM: x86: Account fastpath-only VM-Exits in vCPU stats KVM: arm64: Populate fault info for watchpoint test_firmware: fix the memory leak of the allocated firmware buffer test_firmware: fix a memory leak with reqs buffer powerpc/xmon: Use KSYM_NAME_LEN in array size serial: cpm_uart: Fix a COMPILE_TEST dependency serial: 8250_tegra: Fix an error handling path in tegra_uart_probe() fbcon: Fix null-ptr-deref in soft_cursor ext4: add lockdep annotations for i_data_sem for ea_inode's ext4: disallow ea_inodes with extended attributes ext4: set lockdep subclass for the ea_inode in ext4_xattr_inode_cache_find() ext4: add EA_INODE checking to ext4_iget() mptcp: fix active subflow finalization mptcp: fix connect timeout handling selftests: mptcp: userspace pm: skip if MPTCP is not supported selftests: mptcp: sockopt: skip if MPTCP is not supported selftests: mptcp: join: skip if MPTCP is not supported selftests: mptcp: pm nl: skip if MPTCP is not supported selftests: mptcp: connect: skip if MPTCP is not supported tracing/probe: trace_probe_primary_from_call(): checked list_first_entry tracing/histograms: Allow variables to have some modifiers tracing/timerlat: Always wakeup the timerlat thread mtdchar: mark bits of ioctl handler noinline selinux: don't use make's grouped targets feature yet io_uring: undeprecate epoll_ctl support riscv: perf: Fix callchain parse error with kernel tracepoint events tpm, tpm_tis: correct tpm_tis_flags enumeration values iommu/amd: Fix domain flush size when syncing iotlb powerpc/iommu: Limit number of TCEs to 512 for H_STUFF_TCE hcall block: fix revalidate performance regression phy: qcom-qmp-pcie-msm8996: fix init-count imbalance phy: qcom-qmp-combo: fix init-count imbalance btrfs: fix csum_tree_block page iteration to avoid tripping on -Werror=array-bounds tty: serial: fsl_lpuart: use UARTCTRL_TXINV to send break instead of UARTCTRL_SBK mmc: pwrseq: sd8787: Fix WILC CHIP_EN and RESETN toggling order mmc: vub300: fix invalid response handling x86/mtrr: Revert 90b926e68f50 ("x86/pat: Fix pat_x_mtrr_type() for MTRR disabled case") drm/amd/pm: reverse mclk and fclk clocks levels for renoir drm/amd/pm: reverse mclk and fclk clocks levels for yellow carp drm/amd/pm: reverse mclk clocks levels for SMU v13.0.5 drm/amd/pm: resolve reboot exception for si oland drm/amd/pm: reverse mclk and fclk clocks levels for vangogh drm/amd/pm: reverse mclk and fclk clocks levels for SMU v13.0.4 drm/amdgpu: enable tmz by default for GC 11.0.1 ata: libata-scsi: Use correct device no in ata_find_dev() scsi: stex: Fix gcc 13 warnings misc: fastrpc: reject new invocations during device removal misc: fastrpc: return -EPIPE to invocations on device removal md/raid5: fix miscalculation of 'end_sector' in raid5_read_one_chunk() usb: gadget: f_fs: Add unbind event before functionfs_unbind usb: cdns3: fix NCM gadget RX speed 20x slow than expection at iMX8QM dt-bindings: usb: snps,dwc3: Fix "snps,hsphy_interface" type net: usb: qmi_wwan: Set DTR quirk for BroadMobi BM818 iio: dac: build ad5758 driver when AD5758 is selected iio: adc: stm32-adc: skip adc-diff-channels setup if none is present iio: adc: ad7192: Change "shorted" channels to differential iio: addac: ad74413: fix resistance input processing iio: dac: mcp4725: Fix i2c_master_send() return value handling iio: adc: ad_sigma_delta: Fix IRQ issue by setting IRQ_DISABLE_UNLAZY flag iio: adc: stm32-adc: skip adc-channels setup if none is present iio: light: vcnl4035: fixed chip ID check dt-bindings: iio: adc: renesas,rcar-gyroadc: Fix adi,ad7476 compatible value iio: imu: inv_icm42600: fix timestamp reset HID: wacom: avoid integer overflow in wacom_intuos_inout() HID: google: add jewel USB id iio: adc: mxs-lradc: fix the order of two cleanup operations iio: accel: st_accel: Fix invalid mount_matrix on devices without ACPI _ONT method media: uvcvideo: Don't expose unsupported formats to userspace drivers: base: cacheinfo: Fix shared_cpu_map changes in event of CPU hotplug mailbox: mailbox-test: fix a locking issue in mbox_test_message_write() media: mediatek: vcodec: Only apply 4K frame sizes on decoder formats KVM: arm64: vgic: Fix locking comment KVM: arm64: vgic: Wrap vgic_its_create() with config_lock KVM: arm64: vgic: Fix a circular locking issue block: Deny writable memory mapping if block is read-only nvme-pci: Add quirk for Teamgroup MP33 SSD ublk: fix AB-BA lockdep warning drm/amdgpu: skip disabling fence driver src_irqs when device is unplugged ceph: silence smatch warning in reconnect_caps_cb() atm: hide unused procfs functions drm/msm: Be more shouty if per-process pgtables aren't working ALSA: oss: avoid missing-prototype warnings nvme: do not let the user delete a ctrl before a complete initialization nvme-multipath: don't call blk_mark_disk_dead in nvme_mpath_remove_disk netfilter: conntrack: define variables exp_nat_nla_policy and any_addr with CONFIG_NF_NAT net: wwan: t7xx: Ensure init is completed before system sleep wifi: b43: fix incorrect __packed annotation scsi: core: Decrease scsi_device's iorequest_cnt if dispatch failed wifi: iwlwifi: mvm: Add locking to the rate read flow wifi: mac80211: recalc chanctx mindef before assigning wifi: mac80211: consider reserved chanctx for mindef wifi: mac80211: simplify chanctx allocation arm64: vdso: Pass (void *) to virt_to_page() arm64/mm: mark private VM_FAULT_X defines as vm_fault_t ARM: dts: stm32: add pin map for CAN controller on stm32f7 wifi: rtl8xxxu: fix authentication timeout due to incorrect RCR value ACPI: resource: Add IRQ override quirk for LG UltraPC 17U70P s390/topology: honour nr_cpu_ids when adding CPUs s390/pkey: zeroize key blobs ASoC: SOF: pm: save io region state in case of errors in resume ASoC: SOF: sof-client-probes: fix pm_runtime imbalance in error handling ASoC: SOF: pcm: fix pm_runtime imbalance in error handling ASoC: SOF: debug: conditionally bump runtime_pm counter on exceptions media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221 media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*() media: dvb-core: Fix use-after-free due to race at dvb_register_device() media: dvb-core: Fix use-after-free due on race condition at dvb_net media: mn88443x: fix !CONFIG_OF error by drop of_match_ptr from ID table media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb() media: dvb_ca_en50221: fix a size write bug media: netup_unidvb: fix irq init by register it at the end of probe media: dvb-usb: dw2102: fix uninit-value in su3000_read_mac_address media: dvb-usb: digitv: fix null-ptr-deref in digitv_i2c_xfer() media: dvb-usb-v2: rtl28xxu: fix null-ptr-deref in rtl28xxu_i2c_xfer media: dvb-usb-v2: ce6230: fix null-ptr-deref in ce6230_i2c_master_xfer() media: dvb-usb-v2: ec168: fix null-ptr-deref in ec168_i2c_xfer() media: dvb-usb: az6027: fix three null-ptr-deref in az6027_i2c_xfer() media: dvb_demux: fix a bug for the continuity counter ASoC: ssm2602: Add workaround for playback distortions ALSA: hda/realtek: Add quirks for ASUS GU604V and GU603V ASoC: dt-bindings: Adjust #sound-dai-cells on TI's single-DAI codecs xfrm: Check if_id in inbound policy/secpath match um: harddog: fix modular build ASoC: dwc: limit the number of overrun messages ASoC: amd: yc: Add DMI entry to support System76 Pangolin 12 nvme-pci: add quirk for missing secondary temperature thresholds nvme-pci: add NVME_QUIRK_BOGUS_NID for HS-SSD-FUTURE 2048G block/rnbd: replace REQ_OP_FLUSH with REQ_OP_WRITE nbd: Fix debugfs_create_dir error checking fbdev: stifb: Fix info entry in sti_struct on error path fbdev: modedb: Add 1920x1080 at 60 Hz video mode fbdev: imsttfb: Fix use after free bug in imsttfb_probe drm/amdgpu: set gfx9 onwards APU atomics support to be true gfs2: Don't deref jdesc in evict platform/mellanox: fix potential race in mlxbf-tmfifo driver platform/x86: intel_scu_pcidrv: Add back PCI ID for Medfield media: rcar-vin: Select correct interrupt mode for V4L2_FIELD_ALTERNATE hwmon: (k10temp) Add PCI ID for family 19, model 78h ARM: 9295/1: unwind:fix unwind abort for uleb128 case btrfs: abort transaction when sibling keys check fails for leaves drm/ast: Fix ARM compatibility mailbox: mailbox-test: Fix potential double-free in mbox_test_message_write() drm/amdgpu: Use the default reset when loading or reloading the driver ASoC: Intel: soc-acpi-cht: Add quirk for Nextbook Ares 8A tablet ALSA: hda: Glenfly: add HD Audio PCI IDs and HDMI Codec Vendor IDs. watchdog: menz069_wdt: fix watchdog initialisation drm/amdgpu: release gpu full access after "amdgpu_device_ip_late_init" mptcp: add annotations around sk->sk_shutdown accesses mptcp: fix data race around msk->first access mptcp: consolidate passive msk socket initialization mptcp: simplify subflow_syn_recv_sock() mptcp: avoid unneeded address copy mptcp: add annotations around msk->subflow accesses mptcp: avoid unneeded __mptcp_nmpc_socket() usage rtnetlink: call validate_linkmsg in rtnl_create_link mtd: rawnand: marvell: don't set the NAND frequency select mtd: rawnand: marvell: ensure timing values are written net: dsa: mv88e6xxx: Increase wait after reset deactivation tcp: fix mishandling when the sack compression is deferred. net/sched: flower: fix possible OOB write in fl_set_geneve_opt() iommu/mediatek: Flush IOTLB completely only if domain has been attached net/mlx5: Read embedded cpu after init bit cleared net/mlx5e: Fix error handling in mlx5e_refresh_tirs nvme: fix the name of Zone Append for verbose logging nfsd: fix double fget() bug in __write_ports_addfd() udp6: Fix race condition in udp6_sendmsg & connect net/netlink: fix NETLINK_LIST_MEMBERSHIPS length report net: sched: fix NULL pointer dereference in mq_attach net/sched: Prohibit regrafting ingress or clsact Qdiscs net/sched: Reserve TC_H_INGRESS (TC_H_CLSACT) for ingress (clsact) Qdiscs net/sched: sch_clsact: Only create under TC_H_CLSACT net/sched: sch_ingress: Only create under TC_H_INGRESS net/smc: Don't use RMBs not mapped to new link in SMCRv2 ADD LINK net/smc: Scan from current RMB list when no position specified tcp: Return user_mss for TCP_MAXSEG in CLOSE/LISTEN state if user_mss set tcp: deny tcp_disconnect() when threads are waiting af_packet: do not use READ_ONCE() in packet_bind() RDMA/irdma: Fix Local Invalidate fencing RDMA/irdma: Prevent QP use after free mtd: rawnand: ingenic: fix empty stub helper definitions perf ftrace latency: Remove unnecessary "--" from --use-nsec option amd-xgbe: fix the false linkup in xgbe_phy_status tls: improve lockless access safety of tls_err_abort() af_packet: Fix data-races of pkt_sk(sk)->num. netrom: fix info-leak in nr_write_internal() net: mellanox: mlxbf_gige: Fix skb_panic splat under memory pressure net/mlx5e: Don't attach netdev profile while handling internal error net/mlx5: fw_tracer, Fix event handling net/mlx5: SF, Drain health before removing device net/mlx5: Drain health before unregistering devlink riscv: Fix unused variable warning when BUILTIN_DTB is set dmaengine: pl330: rename _start to prevent build error nfsd: make a copy of struct iattr before calling notify_change iommu/amd: Fix up merge conflict resolution iommu/amd: Handle GALog overflows iommu/amd: Don't block updates to GATag if guest mode is on iommu/rockchip: Fix unwind goto issue RDMA/bnxt_re: Fix return value of bnxt_re_process_raw_qp_pkt_rx RDMA/bnxt_re: Fix a possible memory leak dmaengine: at_xdmac: fix potential Oops in at_xdmac_prep_interleaved() RDMA/hns: Modify the value of long message loopback slice RDMA/hns: Fix base address table allocation RDMA/hns: Fix timeout attr in query qp for HIP08 RDMA/efa: Fix unsupported page sizes in device phy: amlogic: phy-meson-g12a-mipi-dphy-analog: fix CNTL2_DIF_TX_CTL0 value RDMA/bnxt_re: Fix the page_size used during the MR creation Linux 6.1.32 tools headers UAPI: Sync the linux/in.h with the kernel sources netfilter: ctnetlink: Support offloaded conntrack entry deletion cpufreq: amd-pstate: Add ->fast_switch() callback cpufreq: amd-pstate: Update policy->cur in amd_pstate_adjust_perf() block: fix bio-cache for passthru IO Revert "thermal/drivers/mellanox: Use generic thermal_zone_get_trip() function" bluetooth: Add cmd validity checks at the start of hci_sock_ioctl() drm/amd: Don't allow s0ix on APUs older than Raven octeontx2-af: Add validation for lmac type RDMA/rxe: Fix the error "trying to register non-static key in rxe_cleanup_task" wifi: iwlwifi: mvm: fix potential memory leak wifi: iwlwifi: mvm: support wowlan info notification version 2 wifi: rtw89: correct 5 MHz mask setting net: phy: mscc: enable VSC8501/2 RGMII RX clock page_pool: fix inconsistency for page_pool_ring_[un]lock() net: page_pool: use in_softirq() instead vfio/type1: check pfn valid before converting to struct page blk-mq: fix race condition in active queue accounting bpf, sockmap: Incorrectly handling copied_seq bpf, sockmap: Wake up polling after data copy bpf, sockmap: TCP data stall on recv before accept bpf, sockmap: Handle fin correctly bpf, sockmap: Improved check for empty queue bpf, sockmap: Reschedule is now done through backlog bpf, sockmap: Convert schedule_work into delayed_work bpf, sockmap: Pass skb ownership through read_skb gpio-f7188x: fix chip name and pin count on Nuvoton chip net/mlx5: E-switch, Devcom, sync devcom events and devcom comp register tls: rx: strp: preserve decryption status of skbs when needed tls: rx: strp: factor out copying skb data tls: rx: strp: force mixed decrypted records into copy mode tls: rx: strp: fix determining record length in copy mode tls: rx: strp: set the skb->len of detached / CoW'ed skbs tls: rx: device: fix checking decryption status platform/x86/amd/pmf: Fix CnQF and auto-mode after resume selftests/bpf: Fix pkg-config call building sign-file firmware: arm_ffa: Fix usage of partition info get count flag ipv{4,6}/raw: fix output xfrm lookup wrt protocol inet: Add IP_LOCAL_PORT_RANGE socket option Linux 6.1.31 net: phy: mscc: add VSC8502 to MODULE_DEVICE_TABLE 3c589_cs: Fix an error handling path in tc589_probe() net/smc: Reset connection when trying to use SMCRv2 fails. regulator: mt6359: add read check for PMIC MT6359 firmware: arm_ffa: Set reserved/MBZ fields to zero in the memory descriptors arm64: dts: imx8mn-var-som: fix PHY detection bug by adding deassert delay net/mlx5: Devcom, serialize devcom registration net/mlx5: Devcom, fix error flow in mlx5_devcom_register_device net/mlx5: Collect command failures data only for known commands net/mlx5: Fix error message when failing to allocate device memory net/mlx5: DR, Check force-loopback RC QP capability independently from RoCE net/mlx5: Handle pairing of E-switch via uplink un/load APIs net/mlx5: DR, Fix crc32 calculation to work on big-endian (BE) CPUs net/mlx5e: do as little as possible in napi poll when budget is 0 net/mlx5e: Use correct encap attribute during invalidation net/mlx5e: Fix deadlock in tc route query code net/mlx5e: Fix SQ wake logic in ptp napi_poll context platform/mellanox: mlxbf-pmc: fix sscanf() error checking forcedeth: Fix an error handling path in nv_probe() sctp: fix an issue that plpmtu can never go to complete state cxl: Wait Memory_Info_Valid before access memory related info ASoC: Intel: avs: Access path components under lock ASoC: Intel: avs: Fix declaration of enum avs_channel_config ASoC: Intel: Skylake: Fix declaration of enum skl_ch_cfg x86/show_trace_log_lvl: Ensure stack pointer is aligned, again xen/pvcalls-back: fix double frees with pvcalls_new_active_socket() x86/pci/xen: populate MSI sysfs entries ARM: dts: imx6qdl-mba6: Add missing pvcie-supply regulator coresight: Fix signedness bug in tmc_etr_buf_insert_barrier_packet() platform/x86: ISST: Remove 8 socket limit regulator: pca9450: Fix BUCK2 enable_mask fs: fix undefined behavior in bit shift for SB_NOUSER firmware: arm_ffa: Fix FFA device names for logical partitions firmware: arm_ffa: Check if ffa_driver remove is present before executing optee: fix uninited async notif value power: supply: sbs-charger: Fix INHIBITED bit for Status reg power: supply: bq24190: Call power_supply_changed() after updating input current power: supply: bq25890: Call power_supply_changed() after updating input current or voltage power: supply: bq27xxx: After charger plug in/out wait 0.5s for things to stabilize power: supply: bq27xxx: Ensure power_supply_changed() is called on current sign changes power: supply: bq27xxx: Move bq27xxx_battery_update() down power: supply: bq27xxx: Add cache parameter to bq27xxx_battery_current_and_status() power: supply: bq27xxx: Fix poll_interval handling and races on remove power: supply: bq27xxx: Fix I2C IRQ race on remove power: supply: bq27xxx: Fix bq27xxx_battery_update() race condition power: supply: mt6360: add a check of devm_work_autocancel in mt6360_charger_probe power: supply: leds: Fix blink to LED on transition cifs: mapchars mount option ignored ipv6: Fix out-of-bounds access in ipv6_find_tlv() lan966x: Fix unloading/loading of the driver bpf: fix a memory leak in the LRU and LRU_PERCPU hash maps bpf: Fix mask generation for 32-bit narrow loads of 64-bit fields octeontx2-pf: Fix TSOv6 offload selftests: fib_tests: mute cleanup error message drm: fix drmm_mutex_init() net: fix skb leak in __skb_tstamp_tx() ASoC: lpass: Fix for KASAN use_after_free out of bounds media: radio-shark: Add endpoint checks USB: sisusbvga: Add endpoint checks USB: core: Add routines for endpoint checks in old drivers udplite: Fix NULL pointer dereference in __sk_mem_raise_allocated(). net: fix stack overflow when LRO is disabled for virtual interfaces fbdev: udlfb: Fix endpoint check debugobjects: Don't wake up kswapd from fill_pool() irqchip/mips-gic: Use raw spinlock for gic_lock irqchip/mips-gic: Don't touch vl_map if a local interrupt is not routable x86/topology: Fix erroneous smp_num_siblings on Intel Hybrid platforms perf/x86/uncore: Correct the number of CHAs on SPR drm/amd/amdgpu: limit one queue per gang selftests/memfd: Fix unknown type name build failure binder: fix UAF of alloc->vma in race with munmap() binder: fix UAF caused by faulty buffer cleanup binder: add lockless binder_alloc_(set|get)_vma() Revert "android: binder: stop saving a pointer to the VMA" Revert "binder_alloc: add missing mmap_lock calls when using the VMA" drm/amd/pm: Fix output of pp_od_clk_voltage drm/amd/pm: add missing NotifyPowerSource message mapping for SMU13.0.7 drm/radeon: reintroduce radeon_dp_work_func content drm/mgag200: Fix gamma lut not initialized. dt-binding: cdns,usb3: Fix cdns,on-chip-buff-size type btrfs: use nofs when cleaning up aborted transactions gpio: mockup: Fix mode of debugfs files parisc: Handle kprobes breakpoints only in kernel context parisc: Enable LOCKDEP support parisc: Allow to reboot machine after system halt parisc: Fix flush_dcache_page() for usage from irq context parisc: Handle kgdb breakpoints only in kernel context parisc: Use num_present_cpus() in alternative patching code xtensa: add __bswap{si,di}2 helpers xtensa: fix signal delivery to FDPIC process m68k: Move signal frame following exception on 68020/030 net: cdc_ncm: Deal with too low values of dwNtbOutMaxSize ASoC: rt5682: Disable jack detection interrupt during suspend power: supply: bq25890: Fix external_power_changed race power: supply: axp288_fuel_gauge: Fix external_power_changed race mmc: block: ensure error propagation for non-blk mmc: sdhci-esdhc-imx: make "no-mmc-hs400" works SUNRPC: Don't change task->tk_status after the call to rpc_exit_task ALSA: hda/realtek: Enable headset onLenovo M70/M90 ALSA: hda: Fix unhandled register update during auto-suspend period ALSA: hda/ca0132: add quirk for EVGA X299 DARK platform/x86/intel/ifs: Annotate work queue on stack so object debug does not complain x86/mm: Avoid incomplete Global INVLPG flushes arm64: Also reset KASAN tag if page is not PG_mte_tagged ocfs2: Switch to security_inode_init_security() drm/amd/display: hpd rx irq not working with eDP interface net: dsa: mv88e6xxx: Add RGMII delay to 88E6320 platform/x86: hp-wmi: Fix cast to smaller integer type warning skbuff: Proactively round up to kmalloc bucket size drm/amdgpu/mes11: enable reg active poll drm/amd/amdgpu: update mes11 api def watchdog: sp5100_tco: Immediately trigger upon starting. tpm: Prevent hwrng from activating during resume tpm: Re-enable TPM chip boostrapping non-tpm_tis TPM drivers tpm, tpm_tis: startup chip before testing for interrupts tpm_tis: Use tpm_chip_{start,stop} decoration inside tpm_tis_resume tpm, tpm_tis: Only handle supported interrupts tpm, tpm_tis: Avoid cache incoherency in test for interrupts usb: dwc3: fix gadget mode suspend interrupt handler issue Linux 6.1.30 drm/amdgpu: reserve the old gc_11_0_*_mes.bin drm/amd/amdgpu: introduce gc_*_mes_2.bin v2 drm/amdgpu: declare firmware for new MES 11.0.4 crypto: testmgr - fix RNG performance in fuzz tests remoteproc: imx_dsp_rproc: Fix kernel test robot sparse warning rethook, fprobe: do not trace rethook related functions rethook: use preempt_{disable, enable}_notrace in rethook_trampoline_handler arm64: mte: Do not set PG_mte_tagged if tags were not initialized s390/qdio: fix do_sqbs() inline assembly constraint s390/crypto: use vector instructions only if available for ChaCha20 s390/dasd: fix command reject error on ESE devices nilfs2: fix use-after-free bug of nilfs_root in nilfs_evict_inode() powerpc/64s/radix: Fix soft dirty tracking tpm/tpm_tis: Disable interrupts for more Lenovo devices powerpc/iommu: Incorrect DDW Table is referenced for SR-IOV device powerpc/iommu: DMA address offset is incorrectly calculated with 2MB TCEs dt-bindings: ata: ahci-ceva: Cover all 4 iommus entries drm/amdgpu/gfx11: update gpu_clock_counter logic drm/amdgpu: refine get gpu clock counter method drm/amdgpu/gfx11: Adjust gfxoff before powergating on gfx11 as well drm/amdgpu/gfx10: Disable gfxoff before disabling powergating. drm/amdgpu/gmc11: implement get_vbios_fb_size() drm/amd/pm: fix possible power mode mismatch between driver and PMFW ceph: force updating the msg pointer in non-split case vc_screen: reload load of struct vc_data pointer in vcs_write() to avoid UAF thunderbolt: Clear registers properly when auto clear isn't in use serial: qcom-geni: fix enabling deactivated interrupt serial: 8250_exar: Add support for USR298x PCI Modems serial: Add support for Advantech PCI-1611U card mm: fix zswap writeback race condition maple_tree: make maple state reusable after mas_empty_area() statfs: enforce statfs[64] structure initialization KVM: Fix vcpu_array[0] races ksmbd: fix global-out-of-bounds in smb2_find_context_vals ksmbd: fix wrong UserName check in session_user ksmbd: allocate one more byte for implied bcc[0] ksmbd: smb2: Allow messages padded to 8byte boundary SMB3: drop reference to cfile before sending oplock break SMB3: Close all deferred handles of inode in case of handle lease break wifi: rtw88: use work to update rate to avoid RCU warning can: kvaser_pciefd: Disable interrupts in probe error path can: kvaser_pciefd: Do not send EFLUSH command on TFD interrupt can: kvaser_pciefd: Clear listen-only bit if not explicitly requested can: kvaser_pciefd: Empty SRB buffer in probe can: kvaser_pciefd: Call request_irq() before enabling interrupts can: kvaser_pciefd: Set CAN_STATE_STOPPED in kvaser_pciefd_stop() can: isotp: recvmsg(): allow MSG_CMSG_COMPAT flag can: j1939: recvmsg(): allow MSG_CMSG_COMPAT flag ALSA: hda/realtek: Fix mute and micmute LEDs for yet another HP laptop ALSA: hda/realtek: Add quirk for HP EliteBook G10 laptops ALSA: hda/realtek: Add quirk for 2nd ASUS GU603 ALSA: hda/realtek: Add a quirk for HP EliteDesk 805 ALSA: hda/realtek: Add quirk for Clevo L140AU ALSA: hda: Add NVIDIA codec IDs a3 through a7 to patch table ALSA: hda: Fix Oops by 9.1 surround channel names xhci: Fix incorrect tracking of free space on transfer rings xhci-pci: Only run d3cold avoidance quirk for s2idle Revert "usb: gadget: udc: core: Invoke usb_gadget_connect only when started" Revert "usb: gadget: udc: core: Prevent redundant calls to pullup" usb: typec: altmodes/displayport: fix pin_assignment_show usb: gadget: u_ether: Fix host MAC address case usb: dwc3: debugfs: Resume dwc3 before accessing registers usb: dwc3: gadget: Improve dwc3_gadget_suspend() and dwc3_gadget_resume() USB: UHCI: adjust zhaoxin UHCI controllers OverCurrent bit value usb-storage: fix deadlock when a scsi command timeouts more than once USB: usbtmc: Fix direction for 0-length ioctl control messages ALSA: usb-audio: Add a sample rate workaround for Line6 Pod Go bridge: always declare tunnel functions netfilter: nft_set_rbtree: fix null deref on element insertion netfilter: nf_tables: fix nft_trans type confusion net: selftests: Fix optstring net: pcs: xpcs: fix C73 AN not getting enabled net: wwan: iosm: fix NULL pointer dereference when removing device vlan: fix a potential uninit-value in vlan_dev_hard_start_xmit() igb: fix bit_shift to be in [1..8] range net: dsa: mv88e6xxx: Fix mv88e6393x EPC write command offset cassini: Fix a memory leak in the error handling path of cas_init_one() tun: Fix memory leak for detached NAPI queue. net: tun: rebuild error handling in tun_get_user scsi: storvsc: Don't pass unused PFNs to Hyper-V host wifi: iwlwifi: mvm: don't trust firmware n_channels wifi: iwlwifi: mvm: fix OEM's name in the tas approved list wifi: iwlwifi: fix OEM's name in the ppag approved list wifi: iwlwifi: fw: fix DBGI dump wifi: iwlwifi: mvm: fix cancel_delayed_work_sync() deadlock wifi: mac80211: Abort running color change when stopping the AP wifi: mac80211: fix min center freq offset tracing wifi: mac80211: fortify the spinlock against deadlock by interrupt wifi: cfg80211: Drop entries with invalid BSSIDs in RNR ice: Fix ice VF reset during iavf initialization ice: introduce clear_reset_state operation net: bcmgenet: Restore phy_stop() depending upon suspend/close net: bcmgenet: Remove phy_stop() from bcmgenet_netif_stop() can: dev: fix missing CAN XL support in can_put_echo_skb() s390/cio: include subchannels without devices also for evaluation tipc: check the bearer min mtu properly when setting it by netlink tipc: do not update mtu if msg_max is too small in mtu negotiation tipc: add tipc_bearer_min_mtu to calculate min mtu virtio_net: Fix error unwinding of XDP initialization virtio-net: Maintain reverse cleanup order net: nsh: Use correct mac_offset to unwind gso skb in nsh_gso_segment() drm/exynos: fix g2d_open/close helper function definitions ASoC: SOF: topology: Fix logic for copying tuples ASoC: mediatek: mt8186: Fix use-after-free in driver remove path SUNRPC: Fix trace_svc_register() call site SUNRPC: always free ctxt when freeing deferred request SUNRPC: double free xprt_ctxt while still in use media: netup_unidvb: fix use-after-free at del_timer() net: hns3: fix reset timeout when enable full VF net: hns3: fix reset delay time to avoid configuration timeout net: hns3: fix sending pfc frames after reset issue net: hns3: fix output information incomplete for dumping tx queue info with debugfs net: dsa: rzn1-a5psw: disable learning for standalone ports net: dsa: rzn1-a5psw: fix STP states handling net: dsa: rzn1-a5psw: enable management frames for CPU port erspan: get the proto with the md version for collect_md serial: 8250_bcm7271: fix leak in `brcmuart_probe` serial: 8250_bcm7271: balance clk_enable calls serial: arc_uart: fix of_iomap leak in `arc_serial_probe` tcp: fix possible sk_priority leak in tcp_v4_send_reset() vsock: avoid to close connected socket after the timeout sfc: disable RXFCS and RXALL features by default ALSA: hda/realtek: Apply HP B&O top speaker profile to Pavilion 15 wifi: mt76: connac: fix stats->tx_bytes calculation ALSA: firewire-digi00x: prevent potential use after free net: phy: dp83867: add w/a for packet errors seen with short cables net: fec: Better handle pm_runtime_get() failing in .remove() selftets: seg6: disable rp_filter by default in srv6_end_dt4_l3vpn_test selftests: seg6: disable DAD on IPv6 router cfg for srv6_end_dt4_l3vpn_test drm/msm: Fix submit error-path leaks af_key: Reject optional tunnel/BEET mode templates in outbound policies xfrm: Reject optional tunnel/BEET mode templates in outbound policies cpupower: Make TSC read per CPU for Mperf monitor ASoC: fsl_micfil: Fix error handler with pm_runtime_enable platform: Provide a remove callback that returns no value dt-bindings: display/msm: dsi-controller-main: Document qcom, master-dsi and qcom, sync-dual-dsi drm/msm/dpu: Remove duplicate register defines from INTF drm/msm/dpu: Move non-MDP_TOP INTF_INTR offsets out of hwio header drm/msm/dpu: Assign missing writeback log_mask drm/msm/dp: unregister audio driver during unbind Revert "Fix XFRM-I support for nested ESP tunnels" xfrm: don't check the default policy if the policy allows the packet drm/amdgpu: drop gfx_v11_0_cp_ecc_error_irq_funcs platform/x86: hp-wmi: add micmute to hp_wmi_keymap struct platform/x86: Move existing HP drivers to a new hp subdir parisc: Replace regular spinlock with spin_trylock on panic path mfd: intel-lpss: Add Intel Meteor Lake PCH-S LPSS PCI IDs mfd: dln2: Fix memory leak in dln2_probe() mfd: intel_soc_pmic_chtwc: Add Lenovo Yoga Book X90F to intel_cht_wc_models soundwire: bus: Fix unbalanced pm_runtime_put() causing usage count underflow soundwire: qcom: gracefully handle too many ports in DT phy: st: miphy28lp: use _poll_timeout functions for waits soundwire: dmi-quirks: add remapping for Intel 'Rooks County' NUC M15 recordmcount: Fix memory leaks in the uwrite function lkdtm/stackleak: Fix noinstr violation sched: Fix KCSAN noinstr violation mcb-pci: Reallocate memory region to avoid memory overlapping serial: 8250: Reinit port->pm on port specific driver unbind usb: typec: tcpm: fix multiple times discover svids error HID: wacom: generic: Set battery quirk only when we see battery data HID: Ignore battery for ELAN touchscreen on ROG Flow X13 GV301RA HID: apple: Set the tilde quirk flag on the Geyser 3 ASoC: amd: yc: Add ThinkBook 14 G5+ ARP to quirks list for acp6x ASoC: amd: Add Dell G15 5525 to quirks list ALSA: hda: LNL: add HD Audio PCI ID usb: typec: ucsi: acpi: add quirk for ASUS Zenbook UM325 spi: spi-imx: fix MX51_ECSPI_* macros when cs > 3 HID: logitech-hidpp: Reconcile USB and Unifying serials HID: logitech-hidpp: Don't use the USB serial for USB devices ASoC: amd: yc: Add DMI entries to support HP OMEN 16-n0xxx (8A42) staging: axis-fifo: initialize timeouts in init only HID: apple: Set the tilde quirk flag on the Geyser 4 and later staging: rtl8192e: Replace macro RTL_PCI_DEVICE with PCI_DEVICE Bluetooth: btrtl: Add the support for RTL8851B Bluetooth: L2CAP: fix "bad unlock balance" in l2cap_disconnect_rsp Bluetooth: Add new quirk for broken set random RPA timeout for ATS2851 Bluetooth: hci_bcm: Fall back to getting bdaddr from EFI if not set Bluetooth: btintel: Add LE States quirk support Bluetooth: btrtl: check for NULL in btrtl_set_quirks() Bluetooth: Improve support for Actions Semi ATS2851 based devices Bluetooth: btrtl: add support for the RTL8723CS Bluetooth: Add new quirk for broken local ext features page 2 Bluetooth: btusb: Add new PID/VID 04ca:3801 for MT7663 ipvs: Update width of source for ip_vs_sync_conn_options nbd: fix incomplete validation of ioctl arg wifi: ath11k: Fix SKB corruption in REO destination ring wifi: iwlwifi: dvm: Fix memcpy: detected field-spanning write backtrace null_blk: Always check queue mode setting from configfs wifi: iwlwifi: fix iwl_mvm_max_amsdu_size() for MLO wifi: ath11k: Ignore frags from uninitialized peer in dp. block, bfq: Fix division by zero error on zero wsum wifi: iwlwifi: mvm: fix ptk_pn memory leak wifi: iwlwifi: pcie: Fix integer overflow in iwl_write_to_user_buf wifi: iwlwifi: add a new PCI device ID for BZ device wifi: iwlwifi: pcie: fix possible NULL pointer dereference md: fix soft lockup in status_resync bpf: Add preempt_count_{sub,add} into btf id deny list samples/bpf: Fix fout leak in hbm's run_bpf_prog f2fs: fix to check readonly condition correctly f2fs: fix to drop all dirty pages during umount() if cp_error is set f2fs: Fix system crash due to lack of free space in LFS crypto: jitter - permanent and intermittent health errors ext4: Fix best extent lstart adjustment logic in ext4_mb_new_inode_pa() ext4: set goal start correctly in ext4_mb_normalize_request scsi: ufs: ufs-pci: Add support for Intel Lunar Lake gfs2: Fix inode height consistency check scsi: message: mptlan: Fix use after free bug in mptlan_remove() due to race condition lib: cpu_rmap: Avoid use after free on rmap->obj array entries scsi: target: iscsit: Free cmds before session free netdev: Enforce index cap in netdev_get_tx_queue net: Catch invalid index in XPS mapping net: pasemi: Fix return type of pasemi_mac_start_tx() bnxt: avoid overflow in bnxt_get_nvram_directory() scsi: lpfc: Correct used_rpi count when devloss tmo fires with no recovery scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow ext2: Check block size validity during mount wifi: brcmfmac: cfg80211: Pass the PMK in binary instead of hex wifi: brcmfmac: pcie: Provide a buffer of random bytes to the device bpf: Annotate data races in bpf_local_storage wifi: ath: Silence memcpy run-time false positive warning media: mediatek: vcodec: Fix potential array out-of-bounds in decoder queue_setup media: Prefer designated initializers over memset for subdev pad ops drm/amdgpu: Fix sdma v4 sw fini error drm/amd: Fix an out of bounds error in BIOS parser drm/amd/display: Correct DML calculation to follow HW SPEC ACPI: video: Remove desktops without backlight DMI quirks irqchip/gicv3: Workaround for NVIDIA erratum T241-FABRIC-4 arm64: dts: qcom: sdm845-polaris: Drop inexistent properties ACPICA: ACPICA: check null return of ACPI_ALLOCATE_ZEROED in acpi_db_display_objects ACPICA: Avoid undefined behavior: applying zero offset to null pointer drm/msm/dp: Clean up handling of DP AUX interrupts drm/tegra: Avoid potential 32-bit integer overflow remoteproc: stm32_rproc: Add mutex protection for workqueue drm/amd/display: fixed dcn30+ underflow issue ACPI: EC: Fix oops when removing custom query handlers firmware: arm_sdei: Fix sleep from invalid context BUG arm64: dts: imx8mq-librem5: Remove dis_u3_susphy_quirk from usb_dwc3_0 memstick: r592: Fix UAF bug in r592_remove due to race condition drm/rockchip: dw_hdmi: cleanup drm encoder during unbind ACPI: processor: Check for null return of devm_kzalloc() in fch_misc_setup() media: pvrusb2: VIDEO_PVRUSB2 depends on DVB_CORE to use dvb_* symbols media: pci: tw68: Fix null-ptr-deref bug in buf prepare and finish media: cx23885: Fix a null-ptr-deref bug in buffer_prepare() and buffer_finish() arm64: dts: qcom: msm8996: Add missing DWC3 quirks remoteproc: imx_dsp_rproc: Add custom memory copy implementation for i.MX DSP Cores regmap: cache: Return error in cache sync operations for REGCACHE_NONE drm/amd/display: Use DC_LOG_DC in the trasform pixel function drm/amd/display: Enable HostVM based on rIOMMU active platform/x86: x86-android-tablets: Add Acer Iconia One 7 B1-750 data drm/amd/display: Correct DML calculation to align HW formula drm/amd/display: populate subvp cmd info only for the top pipe drm/displayid: add displayid_get_header() and check bounds better fs: hfsplus: remove WARN_ON() from hfsplus_cat_{read,write}_inode() open: return EINVAL for O_DIRECTORY | O_CREAT rcu: Protect rcu_print_task_exp_stall() ->exp_tasks access selftests: cgroup: Add 'malloc' failures checks in test_memcontrol refscale: Move shutdown from wait_event() to wait_event_idle() ext4: allow ext4_get_group_info() to fail ext4: allow to find by goal if EXT4_MB_HINT_GOAL_ONLY is set ext4: don't clear SB_RDONLY when remounting r/w until quota is re-enabled ext4: reflect error codes from ext4_multi_mount_protect() to its callers fbdev: arcfb: Fix error handling in arcfb_probe() drm/i915: taint kernel when force probing unsupported devices drm/i915: Expand force_probe to block probe of devices as well. drm/i915/dp: prevent potential div-by-zero drm/i915: Fix NULL ptr deref by checking new_crtc_state drm/i915/guc: Don't capture Gen8 regs on Xe devices af_unix: Fix data races around sk->sk_shutdown. af_unix: Fix a data race of sk->sk_receive_queue->qlen. net: datagram: fix data-races in datagram_poll() net: mscc: ocelot: fix stat counter register values ipvlan:Fix out-of-bounds caused by unclear skb->cb gve: Remove the code of clearing PBA bit tcp: add annotations around sk->sk_shutdown accesses net: add vlan_get_protocol_and_depth() helper net: deal with most data-races in sk_wait_event() net: annotate sk->sk_err write from do_recvmmsg() netlink: annotate accesses to nlk->cb_running bonding: fix send_peer_notif overflow netfilter: conntrack: fix possible bug_on with enable_hooks=1 netfilter: nf_tables: always release netdev hooks from notifier net: phy: bcm7xx: Correct read from expansion register net: Fix load-tearing on sk->sk_stamp in sock_recv_cmsgs(). net: stmmac: Initialize MAC_ONEUS_TIC_COUNTER register linux/dim: Do nothing if no time delta between samples tick/broadcast: Make broadcast device replacement work correctly scsi: ufs: core: Fix I/O hang that occurs when BKOPS fails in W-LUN suspend net: mdio: mvusb: Fix an error handling path in mvusb_mdio_probe() net: skb_partial_csum_set() fix against transport header magic value ARM: 9296/1: HP Jornada 7XX: fix kernel-doc warnings drm/mipi-dsi: Set the fwnode for mipi_dsi_device drm/fbdev-generic: prohibit potential out-of-bounds access Linux 6.1.29 drm/amd/display: Fix hang when skipping modeset spi: fsl-cpm: Use 16 bit mode for large transfers with even size spi: fsl-spi: Re-organise transfer bits_per_word adaptation x86: fix clear_user_rep_good() exception handling annotation x86/amd_nb: Add PCI ID for family 19h model 78h f2fs: inode: fix to do sanity check on extent cache correctly f2fs: fix to do sanity check on extent cache correctly drm/dsc: fix DP_DSC_MAX_BPP_DELTA_* macro values ext4: fix invalid free tracking in ext4_xattr_move_to_block() ext4: remove a BUG_ON in ext4_mb_release_group_pa() ext4: fix lockdep warning when enabling MMP ext4: bail out of ext4_xattr_ibody_get() fails for any reason ext4: add bounds checking in get_max_inline_xattr_value_size() ext4: fix deadlock when converting an inline directory in nojournal mode ext4: improve error handling from ext4_dirhash() ext4: improve error recovery code paths in __ext4_remount() ext4: check iomap type only if ext4_iomap_begin() does not fail ext4: fix data races when using cached status extents ext4: avoid a potential slab-out-of-bounds in ext4_group_desc_csum ext4: fix WARNING in mb_find_extent locking/rwsem: Add __always_inline annotation to __down_read_common() and inlined callers drm/dsc: fix drm_edp_dsc_sink_output_bpp() DPCD high byte usage drm: Add missing DP DSC extended capability definitions. ksmbd: fix racy issue from smb2 close and logoff with multichannel ksmbd: block asynchronous requests when making a delay on session setup ksmbd: destroy expired sessions ksmbd: fix racy issue from session setup and logoff ksmbd: Implements sess->ksmbd_chann_list as xarray drm/amd/display: Change default Z8 watermark values drm/amd/display: Update Z8 SR exit/enter latencies drm/amd/display: Update Z8 watermarks for DCN314 ASoC: codecs: wcd938x: fix accessing regmap on unattached devices ASoC: codecs: constify static sdw_slave_ops struct ASoC: rt1318: Add RT1318 SDCA vendor-specific driver drm/amd/display: Lowering min Z8 residency time drm/amd/display: Update minimum stutter residency for DCN314 Z8 drm/amd/display: Add minimum Z8 residency debug option drm/amd/display: Fix Z8 support configurations drm/amd/display: Add debug option to skip PSR CRTC disable drm/amd/display: Add Z8 allow states to z-state support list drm/amd/display: Refactor eDP PSR codes drm/i915: Check pipe source size when using skl+ scalers drm/i915/mtl: update scaler source and destination limits for MTL wifi: rtw88: rtw8821c: Fix rfe_option field width irqchip/loongson-eiointc: Fix registration of syscore_ops irqchip/loongson-eiointc: Fix incorrect use of acpi_get_vec_parent irqchip/loongarch: Adjust acpi_cascade_irqdomain_init() and sub-routines drm/msm: fix missing wq allocation error handling drm/msm: Hangcheck progress detection drm/msm/adreno: Simplify read64/write64 helpers f2fs: factor out victim_entry usage from general rb_tree use f2fs: allocate the extent_cache by default f2fs: refactor extent_cache to support for read and more f2fs: remove unnecessary __init_extent_tree f2fs: move internal functions into extent_cache.c f2fs: specify extent cache for read explicitly drm/msm/adreno: adreno_gpu: Use suspend() instead of idle() on load error fs/ntfs3: Refactoring of various minor issues HID: wacom: insert timestamp to packed Bluetooth (BT) events HID: wacom: Set a default resolution for older tablets drm/amd: Use `amdgpu_ucode_*` helpers for MES drm/amd: Add a new helper for loading/validating microcode drm/amd: Load MES microcode during early_init drm/amdgpu: remove deprecated MES version vars drm/amd/pm: avoid potential UBSAN issue on legacy asics drm/amdgpu: disable sdma ecc irq only when sdma RAS is enabled in suspend drm/amd/pm: parse pp_handle under appropriate conditions drm/amd/display: Enforce 60us prefetch for 200Mhz DCFCLK modes drm/amdgpu: Fix vram recover doesn't work after whole GPU reset (v2) drm/amdgpu: change gfx 11.0.4 external_id range drm/amdgpu/jpeg: Remove harvest checking for JPEG3 drm/amdgpu/gfx: disable gfx9 cp_ecc_error_irq only when enabling legacy gfx ras drm/amdgpu: fix amdgpu_irq_put call trace in gmc_v11_0_hw_fini drm/amdgpu: fix an amdgpu_irq_put() issue in gmc_v9_0_hw_fini() drm/amdgpu: fix amdgpu_irq_put call trace in gmc_v10_0_hw_fini drm/amd/display: fix flickering caused by S/G mode drm/amd/display: filter out invalid bits in pipe_fuses drm/amd/display: Fix 4to1 MPC black screen with DPP RCO drm/amd/display: Add NULL plane_state check for cursor disable logic drm/panel: otm8009a: Set backlight parent to panel device irqchip/loongson-eiointc: Fix returned value on parsing MADT irqchip/loongson-pch-pic: Fix pch_pic_acpi_init calling f2fs: fix potential corruption when moving a directory f2fs: fix null pointer panic in tracepoint in __replace_atomic_write_block drm/i915/dsi: Use unconditional msleep() instead of intel_dsi_msleep() drm/msm: fix workqueue leak on bind errors drm/msm: fix vram leak on bind errors drm/msm: fix drm device leak on bind errors drm/msm: fix NULL-deref on irq uninstall drm/msm: fix NULL-deref on snapshot tear down drm/i915/color: Fix typo for Plane CSC indexes drm/bridge: lt8912b: Fix DSI Video Mode drm/msm/adreno: fix runtime PM imbalance at gpu load ARM: dts: aspeed: romed8hm3: Fix GPIO polarity of system-fault LED ARM: dts: s5pv210: correct MIPI CSIS clock name ARM: dts: exynos: fix WM8960 clock name in Itop Elite ARM: dts: aspeed: asrock: Correct firmware flash SPI clocks sysctl: clarify register_sysctl_init() base directory order remoteproc: rcar_rproc: Call of_node_put() on iteration error remoteproc: imx_rproc: Call of_node_put() on iteration error remoteproc: imx_dsp_rproc: Call of_node_put() on iteration error remoteproc: st: Call of_node_put() on iteration error remoteproc: stm32: Call of_node_put() on iteration error proc_sysctl: enhance documentation proc_sysctl: update docs for __register_sysctl_table() sh: nmi_debug: fix return value of __setup handler sh: init: use OF_EARLY_FLATTREE for early init sh: mcount.S: fix build error when PRINTK is not enabled sh: math-emu: fix macro redefined warning SMB3: force unmount was failing to close deferred close files smb3: fix problem remounting a share after shutdown inotify: Avoid reporting event with invalid wd platform/x86: thinkpad_acpi: Add profile force ability platform/x86: touchscreen_dmi: Add info for the Dexp Ursus KX210i platform/x86: thinkpad_acpi: Fix platform profiles on T490 platform/x86: touchscreen_dmi: Add upside-down quirk for GDIX1002 ts on the Juno Tablet platform/x86/intel-uncore-freq: Return error on write frequency cifs: release leases for deferred close handles when freezing cifs: fix pcchunk length type in smb2_copychunk_range btrfs: zoned: fix full zone super block reading on ZNS btrfs: zoned: zone finish data relocation BG with last IO btrfs: fix space cache inconsistency after error loading it from disk btrfs: print-tree: parent bytenr must be aligned to sector size btrfs: make clear_cache mount option to rebuild FST without disabling it btrfs: zero the buffer before marking it dirty in btrfs_redirty_list_add btrfs: don't free qgroup space unless specified btrfs: fix encoded write i_size corruption with no-holes btrfs: fix assertion of exclop condition when starting balance btrfs: properly reject clear_cache and v1 cache for block-group-tree btrfs: zoned: fix wrong use of bitops API in btrfs_ensure_empty_zones btrfs: fix btrfs_prev_leaf() to not return the same key twice x86/retbleed: Fix return thunk alignment RISC-V: fix taking the text_mutex twice during sifive errata patching RISC-V: take text_mutex during alternative patching perf stat: Separate bperf from bpf_profiler perf tracepoint: Fix memory leak in is_valid_tracepoint() perf symbols: Fix return incorrect build_id size in elf_read_build_id() crypto: engine - fix crypto_queue backlog handling crypto: engine - Use crypto_request_complete crypto: api - Add scaffolding to change completion function signature crypto: sun8i-ss - Fix a test in sun8i_ss_setup_ivs() perf cs-etm: Fix timeless decode mode detection perf map: Delete two variable initialisations before null pointer checks in sort__sym_from_cmp() perf pmu: zfree() expects a pointer to a pointer to zero it after freeing its contents perf vendor events power9: Remove UTF-8 characters from JSON files perf ftrace: Make system wide the default target for latency subcommand perf tests record_offcpu.sh: Fix redirection of stderr to stdin perf vendor events s390: Remove UTF-8 characters from JSON file perf scripts intel-pt-events.py: Fix IPC output for Python 2 perf record: Fix "read LOST count failed" msg with sample read net: enetc: check the index of the SFI rather than the handle virtio_net: suppress cpu stall when free_unused_bufs ice: block LAN in case of VF to VF offload net: dsa: mt7530: fix network connectivity with multiple CPU ports net: dsa: mt7530: split-off common parts from mt7531_setup net: dsa: mt7530: fix corrupt frames using trgmii on 40 MHz XTAL MT7621 KVM: s390: fix race in gmap_make_secure() ALSA: caiaq: input: Add error handling for unsupported input methods in `snd_usb_caiaq_input_init` drm/amdgpu: add a missing lock for AMDGPU_SCHED af_packet: Don't send zero-byte data in packet_sendmsg_spkt(). ionic: catch failure from devlink_alloc ethtool: Fix uninitialized number of lanes ionic: remove noise from ethtool rxnfc error msg octeontx2-vf: Detach LF resources on probe cleanup octeontx2-pf: Disable packet I/O for graceful exit octeontx2-af: Skip PFs if not enabled octeontx2-af: Fix issues with NPC field hash extract octeontx2-af: Update/Fix NPC field hash extract feature octeontx2-pf: Add additional checks while configuring ucast/bcast/mcast rules octeontx2-af: Allow mkex profile without DMAC and add L2M/L2B header extraction support octeontx2-pf: Increase the size of dmac filter flows octeontx2-af: Fix depth of cam and mem table. octeontx2-af: Fix start and end bit for scan config octeontx2-af: Secure APR table update with the lock selftests: netfilter: fix libmnl pkg-config usage drm/i915/mtl: Add the missing CPU transcoder mask in intel_device_info riscv: compat_syscall_table: Fixup compile warning rxrpc: Fix hard call timeout units sfc: Fix module EEPROM reporting for QSFP modules r8152: move setting r8153b_rx_agg_chg_indicate() r8152: fix the poor throughput for 2.5G devices r8152: fix flow control issue of RTL8156A net/sched: act_mirred: Add carrier check i2c: tegra: Fix PEC support for SMBUS block read RISC-V: mm: Enable huge page support to kernel_page_present() function watchdog: dw_wdt: Fix the error handling path of dw_wdt_drv_probe() block: Skip destroyed blkg when restart in blkg_destroy_all() writeback: fix call of incorrect macro net: dsa: mv88e6xxx: add mv88e6321 rsvd2cpu net: ipv6: fix skb hash for some RST packets selftests: srv6: make srv6_end_dt46_l3vpn_test more robust sit: update dev->needed_headroom in ipip6_tunnel_bind_dev() net/sched: cls_api: remove block_cb from driver_list before freeing tcp: fix skb_copy_ubufs() vs BIG TCP net/ncsi: clear Tx enable mode when handling a Config required AEN octeontx2-pf: mcs: Do not reset PN while updating secy octeontx2-pf: mcs: Fix shared counters logic octeontx2-pf: mcs: Clear stats before freeing resource octeontx2-pf: mcs: Match macsec ethertype along with DMAC octeontx2-pf: mcs: Fix NULL pointer dereferences octeontx2-af: mcs: Fix MCS block interrupt octeontx2-af: mcs: Config parser to skip 8B header octeontx2-af: mcs: Write TCAM_DATA and TCAM_MASK registers at once octeonxt2-af: mcs: Fix per port bypass config ixgbe: Fix panic during XDP_TX with > 64 CPUs drm/amd/display: Update bounding box values for DCN321 drm/amd/display: Do not clear GPINT register when releasing DMUB from reset drm/amd/display: Reset OUTBOX0 r/w pointer on DMUB reset drm/amd/display: Fixes for dcn32_clk_mgr implementation drm/amd/display: Return error code on DSC atomic check failure drm/amd/display: Add missing WA and MCLK validation drm/amd/display: Remove FPU guards from the DML folder scsi: qedi: Fix use after free bug in qedi_remove() ASoC: Intel: soc-acpi-byt: Fix "WM510205" match no longer working KVM: x86/mmu: Refresh CR0.WP prior to checking for emulated permission faults KVM: VMX: Make CR0.WP a guest owned bit KVM: x86: Make use of kvm_read_cr*_bits() when testing bits KVM: x86: Do not unload MMU roots when only toggling CR0.WP with TDP enabled KVM: x86/mmu: Avoid indirect call for get_cr3 drm/amd/display: Ext displays with dock can't recognized after resume fs/ntfs3: Fix null-ptr-deref on inode->i_op in ntfs_lookup() mtd: spi-nor: spansion: Enable JFFS2 write buffer for Infineon s25hx SEMPER flash mailbox: zynqmp: Fix counts of child nodes mailbox: zynq: Switch to flexible array to simplify code soc: qcom: llcc: Do not create EDAC platform device on SDM845 qcom: llcc/edac: Support polling mode for ECC handling mtd: spi-nor: spansion: Enable JFFS2 write buffer for Infineon s28hx SEMPER flash mtd: spi-nor: Add a RWW flag mtd: spi-nor: add SFDP fixups for Quad Page Program mtd: spi-nor: spansion: Remove NO_SFDP_FLAGS from s28hs512t info KVM: x86/pmu: Disallow legacy LBRs if architectural LBRs are available KVM: x86: Track supported PERF_CAPABILITIES in kvm_caps perf/x86/core: Zero @lbr instead of returning -1 in x86_perf_get_lbr() stub crypto: ccp - Clear PSP interrupt status register before calling handler drm/vmwgfx: Fix Legacy Display Unit atomic drm support drm/vmwgfx: Remove explicit and broken vblank handling usb: dwc3: gadget: Execute gadget stop after halting the controller USB: dwc3: gadget: drop dead hibernation code Linux 6.1.28 netfilter: nf_tables: deactivate anonymous set from preparation phase scsi: libsas: Grab the ATA port lock in sas_ata_device_link_abort() debugobject: Ensure pool refill (again) drm/amd/display (gcc13): fix enum mismatch i40e: use int for i40e_status i40e: Remove string printing for i40e_status i40e: Remove unused i40e status codes sfc (gcc13): synchronize ef100_enqueue_skb()'s return type block/blk-iocost (gcc13): keep large values in a new enum perf intel-pt: Fix CYC timestamps after standalone CBR perf auxtrace: Fix address filter entire kernel size wifi: ath11k: synchronize ath11k_mac_he_gi_to_nl80211_he_gi()'s return type bonding (gcc13): synchronize bond_{a,t}lb_xmit() types thunderbolt: Use correct type in tb_port_is_clx_enabled() prototype cifs: protect session status check in smb2_reconnect() cifs: fix potential use-after-free bugs in TCP_Server_Info::hostname blk-iocost: avoid 64-bit division in ioc_timer_fn dm: don't lock fs when the map is NULL in process of resume dm ioctl: fix nested locking in table_clear() to remove deadlock concern dm flakey: fix a crash with invalid table line dm integrity: call kmem_cache_destroy() in dm_integrity_init() error path dm clone: call kmem_cache_destroy() in dm_clone_init() error path dm verity: fix error handling for check_at_most_once on FEC vhost_vdpa: fix unmap process in no-batch mode mm/mempolicy: correctly update prev when policy is equal on mbind ia64: fix an addr to taddr in huge_pte_offset() s390/dasd: fix hanging blockdevice after request requeue btrfs: scrub: reject unsupported scrub flags scripts/gdb: fix lx-timerlist for Python3 clk: rockchip: rk3399: allow clk_cifout to force clk_cifout_src to reparent clk: microchip: fix potential UAF in auxdev release callback wifi: rtw89: fix potential race condition between napi_init and napi_enable wifi: rtl8xxxu: RTL8192EU always needs full init mailbox: zynqmp: Fix typo in IPI documentation kcsan: Avoid READ_ONCE() in read_instrumented_memory() mailbox: zynqmp: Fix IPI isr handling mtd: spi-nor: core: Update flash's current address mode when changing address mode mtd: core: fix error path for nvmem provider mtd: core: fix nvmem error reporting mtd: core: provide unique name for nvmem device, take two kasan: hw_tags: avoid invalid virt_to_page() md/raid5: Improve performance for sequential IO md/raid10: fix null-ptr-deref in raid10_sync_request drbd: correctly submit flush bio on barrier mm: do not reclaim private data from pinned page nilfs2: fix infinite loop in nilfs_mdt_get_block() nilfs2: do not write dirty data after degenerating to read-only ALSA: hda/realtek: Fix mute and micmute LEDs for an HP laptop ALSA: hda/realtek: support HP Pavilion Aero 13-be0xxx Mute LED ALSA: hda/realtek: Add quirk for ASUS UM3402YAR using CS35L41 ALSA: hda/realtek: Add quirk for ThinkPad P1 Gen 6 ALSA: usb-audio: Add quirk for Pioneer DDJ-800 parisc: Ensure page alignment in flush functions parisc: Fix argument pointer in real64_call_asm() afs: Avoid endless loop if file is larger than expected afs: Fix getattr to report server i_size on dirs, not local size afs: Fix updating of i_size with dv jump from server PM: hibernate: Do not get block device exclusively in test_resume mode PM: hibernate: Turn snapshot_test into global variable ACPI: PM: Do not turn of unused power resources on the Toshiba Click Mini hte: tegra-194: Fix off by one in tegra_hte_map_to_line_id() hte: tegra: fix 'struct of_device_id' build error mfd: arizona-spi: Add missing MODULE_DEVICE_TABLE mfd: ocelot-spi: Fix unsupported bulk read mfd: tqmx86: Correct board names for TQMxE39x mfd: tqmx86: Specify IO port register range more precisely mfd: tqmx86: Do not access I2C_DETECT register through io_base thermal/drivers/mediatek: Use devm_of_iomap to avoid resource leak in mtk_thermal_probe pinctrl-bcm2835.c: fix race condition when setting gpio dir dmaengine: at_xdmac: do not enable all cyclic channels dmaengine: dw-edma: Fix to enable to issue dma request on DMA processing dmaengine: dw-edma: Fix to change for continuous transfer dma: gpi: remove spurious unlock in gpi_ch_init phy: ti: j721e-wiz: Fix unreachable code in wiz_mode_select() phy: tegra: xusb: Add missing tegra_xusb_port_unregister for usb2_port and ulpi_port soundwire: intel: don't save hw_params for use in prepare soundwire: cadence: rename sdw_cdns_dai_dma_data as sdw_cdns_dai_runtime pwm: mtk-disp: Configure double buffering before reading in .get_state() pwm: mtk-disp: Disable shadow registers before setting backlight values leds: tca6507: Fix error handling of using fwnode_property_read_string dmaengine: mv_xor_v2: Fix an error code. pinctrl: ralink: reintroduce ralink,rt2880-pinmux compatible string leds: TI_LMU_COMMON: select REGMAP instead of depending on it pinctrl: renesas: r8a779g0: Fix ERROROUTC function names pinctrl: renesas: r8a779g0: Fix Group 6/7 pin functions pinctrl: renesas: r8a779g0: Fix Group 4/5 pin functions pinctrl: renesas: r8a779f0: Fix tsn1_avtp_pps pin group pinctrl: renesas: r8a779a0: Remove incorrect AVB[01] pinmux configuration ext4: fix use-after-free read in ext4_find_extent for bigalloc + inline ext4: fix i_disksize exceeding i_size problem in paritally written case SMB3: Close deferred file handles in case of handle lease break SMB3: Add missing locks to protect deferred close file list timekeeping: Fix references to nonexistent ktime_get_fast_ns() openrisc: Properly store r31 to pt_regs on unhandled exceptions clocksource/drivers/davinci: Fix memory leak in davinci_timer_register when init fails RDMA/mlx5: Use correct device num_ports when modify DC SUNRPC: remove the maximum number of retries in call_bind_status RDMA/mlx5: Fix flow counter query via DEVX RDMA/mlx5: Check pcie_relaxed_ordering_enabled() in UMR swiotlb: fix debugfs reporting of reserved memory pools swiotlb: relocate PageHighMem test away from rmem_swiotlb_setup Input: raspberrypi-ts - fix refcount leak in rpi_ts_probe clk: qcom: dispcc-qcm2290: Remove inexistent DSI1PHY clk clk: qcom: dispcc-qcm2290: get rid of test clock clk: qcom: gcc-sm8350: fix PCIe PIPE clocks handling clk: qcom: lpassaudiocc-sc7280: Add required gdsc power domain clks in lpass_cc_sc7280_desc clk: qcom: lpasscc-sc7280: Skip qdsp6ss clock registration iommu/amd: Set page size bitmap during V2 domain allocation NFSv4.1: Always send a RECLAIM_COMPLETE after establishing lease clk: imx: imx8ulp: Fix XBAR_DIVBUS and AD_SLOW clock parents clk: imx: fracn-gppll: disable hardware select control clk: imx: fracn-gppll: fix the rate table IB/hfi1: Fix bugs with non-PAGE_SIZE-end multi-iovec user SDMA requests IB/hfi1: Fix SDMA mmu_rb_node not being evicted in LRU order RDMA/srpt: Add a check for valid 'mad_agent' pointer RDMA/cm: Trace icm_send_rej event before the cm state is reset power: supply: rk817: Fix low SOC bugs clk: qcom: gcc-sm6115: Mark RCGs shared where applicable RDMA/siw: Remove namespace check from siw_netdev_event() clk: add missing of_node_put() in "assigned-clocks" property parsing power: supply: generic-adc-battery: fix unit scaling iommu/mediatek: Set dma_mask for PGTABLE_PA_35_EN fs/ntfs3: Fix slab-out-of-bounds read in hdr_delete_de() fs/ntfs3: Fix OOB read in indx_insert_into_buffer fs/ntfs3: Add check for kmemdup fs/ntfs3: Fix memory leak if ntfs_read_mft failed RDMA/erdma: Use fixed hardware page size rtc: k3: handle errors while enabling wake irq rtc: meson-vrtc: Use ktime_get_real_ts64() to get the current time RDMA/mlx4: Prevent shift wrapping in set_user_sq_size() rtc: omap: include header for omap_rtc_power_off_program prototype workqueue: Fix hung time report of worker pools clk: qcom: gcc-qcm2290: Fix up gcc_sdcc2_apps_clk_src RDMA/rdmavt: Delete unnecessary NULL check clk: mediatek: mt8135: Properly use CLK_IS_CRITICAL flag clk: mediatek: mt7622: Properly use CLK_IS_CRITICAL flag clk: mediatek: Consistently use GATE_MTK() macro clk: mediatek: mt2712: Add error handling to clk_mt2712_apmixed_probe() RDMA/siw: Fix potential page_array out of range access IB/hifi1: add a null check of kzalloc_node in hfi1_ipoib_txreq_init clk: at91: clk-sam9x60-pll: fix return value check tracing/user_events: Ensure write index cannot be negative sched/rt: Fix bad task migration for rt tasks riscv: Fix ptdump when KASAN is enabled Revert "objtool: Support addition to set CFA base" perf/core: Fix hardlockup failure caused by perf throttle sched/fair: Fix inaccurate tally of ttwu_move_affine powerpc/rtas: use memmove for potentially overlapping buffer copy macintosh: via-pmu-led: requires ATA to be set powerpc/sysdev/tsi108: fix resource printk format warnings powerpc/wii: fix resource printk format warnings powerpc/mpc512x: fix resource printk format warning powerpc/perf: Properly detect mpc7450 family macintosh/windfarm_smu_sat: Add missing of_node_put() selftests/powerpc/pmu: Fix sample field check in the mmcra_thresh_marked_sample_test fbdev: mmp: Fix deferred clk handling in mmphw_probe() virtio_ring: don't update event idx on get_buf spmi: Add a check for remove callback when removing a SPMI driver staging: rtl8192e: Fix W_DISABLE# does not work after stop/start spi: cadence-quadspi: use macro DEFINE_SIMPLE_DEV_PM_OPS serial: 8250: Add missing wakeup event reporting tty: serial: fsl_lpuart: adjust buffer length to the intended size firmware: stratix10-svc: Fix an NULL vs IS_ERR() bug in probe usb: mtu3: fix kernel panic at qmu transfer done irq handler usb: chipidea: fix missing goto in `ci_hdrc_probe` usb: gadget: tegra-xudc: Fix crash in vbus_draw sh: sq: Fix incorrect element size for allocating bitmap buffer uapi/linux/const.h: prefer ISO-friendly __typeof__ scripts/gdb: raise error with reduced debugging information i2c: xiic: xiic_xfer(): Fix runtime PM leak on error path i2c: cadence: cdns_i2c_master_xfer(): Fix runtime PM leak on error path spi: cadence-quadspi: fix suspend-resume implementations drm/panel: novatek-nt35950: Only unregister DSI1 if it exists PCI/PM: Extend D3hot delay for NVIDIA HDA controllers ASoC: fsl_mqs: move of_node_put() to the correct location drm/panel: novatek-nt35950: Improve error handling coresight: etm_pmu: Set the module field cacheinfo: Check sib_leaf in cache_leaves_are_shared() HID: amd_sfh: Handle "no sensors" enabled for SFH1.1 HID: amd_sfh: Increase sensor command timeout for SFH1.1 HID: amd_sfh: Correct the stop all command HID: amd_sfh: Add support for shutdown operation HID: amd_sfh: Fix illuminance value HID: amd_sfh: Correct the sensor enable and disable command HID: amd_sfh: Correct the structure fields scripts/gdb: bail early if there are no generic PD scripts/gdb: bail early if there are no clocks ia64: salinfo: placate defined-but-not-used warning ia64: mm/contig: fix section mismatch warning/error PCI/EDR: Clear Device Status after EDR error recovery of: Fix modalias string generation vmci_host: fix a race condition in vmci_host_poll() causing GPF spi: fsl-spi: Fix CPM/QE mode Litte Endian interconnect: qcom: rpm: drop bogus pm domain attach spi: qup: Don't skip cleanup in remove's error path linux/vt_buffer.h: allow either builtin or modular for macros ASoC: es8316: Handle optional IRQ assignment PCI: imx6: Install the fault handler only on compatible match ASoC: soc-compress: Inherit atomicity from DAI link for Compress FE usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition spi: imx: Don't skip cleanup in remove's error path spi: atmel-quadspi: Free resources even if runtime resume failed in .remove() spi: atmel-quadspi: Don't leak clk enable count in pm resume serial: 8250_bcm7271: Fix arbitration handling iio: light: max44009: add missing OF device matching fpga: bridge: fix kernel-doc parameter description serial: stm32: Re-assert RTS/DE GPIO in RS485 mode only if more data are transmitted usb: dwc3: gadget: Change condition for processing suspend event usb: host: xhci-rcar: remove leftover quirk handling pstore: Revert pmsg_lock back to a normal mutex drivers: staging: rtl8723bs: Fix locking in rtw_scan_timeout_handler() drivers: staging: rtl8723bs: Fix locking in _rtw_join_timeout_handler() ASoC: cs35l41: Only disable internal boost ipmi: ASPEED_BT_IPMI_BMC: select REGMAP_MMIO instead of depending on it tcp/udp: Fix memleaks of sk and zerocopy skbs with TX timestamp. net: amd: Fix link leak when verifying config failed netlink: Use copy_to_user() for optval in netlink_getsockopt(). Revert "Bluetooth: btsdio: fix use after free bug in btsdio_remove due to unfinished work" ipv4: Fix potential uninit variable access bug in __ip_make_skb() net/sched: sch_fq: fix integer overflow of "credit" net: dpaa: Fix uninitialized variable in dpaa_stop() netfilter: nf_tables: don't write table validation state without mutex bpf: Don't EFAULT for getsockopt with optval=NULL bpf: Fix race between btf_put and btf_idr walk. net: stmmac:fix system hang when setting up tag_8021q VLAN for DSA ports net/mlx5e: Nullify table pointer when failing to create net/mlx5: Use recovery timeout on sync reset flow Revert "net/mlx5: Remove "recovery" arg from mlx5_load_one() function" net/mlx5: Suspend auxiliary devices only in case of PCI device suspend net/mlx5: Remove "recovery" arg from mlx5_load_one() function net/mlx5e: Fix error flow in representor failing to add vport rx rule net/mlx5: E-switch, Don't destroy indirect table in split rule net/mlx5: E-switch, Create per vport table based on devlink encap mode net/mlx5e: Don't clone flow post action attributes second time ixgbe: Enable setting RSS table to default values ixgbe: Allow flow hash to be set via ethtool wifi: iwlwifi: fw: fix memory leak in debugfs netfilter: conntrack: fix wrong ct->timeout value netfilter: conntrack: restore IPS_CONFIRMED out of nf_conntrack_hash_check_insert() wifi: iwlwifi: mvm: check firmware response size wifi: mt76: connac: fix txd multicast rate setting wifi: mt76: mt7921e: stop chip reset worker in unregister hook wifi: mt76: mt7921e: improve reliability of dma reset wifi: mt76: mt7921: fix missing unwind goto in `mt7921u_probe` mt76: mt7921: fix kernel panic by accessing unallocated eeprom.data wifi: mt76: fix 6GHz high channel not be scanned wifi: mt76: mt7921e: fix probe timeout after reboot wifi: mt76: add flexible polling wait-interval support wifi: mt76: handle failure of vzalloc in mt7615_coredump_work wifi: mt76: mt7915: expose device tree match table wifi: iwlwifi: make the loop for card preparation effective io_uring/rsrc: use nospec'ed indexes jdb2: Don't refuse invalidation of already invalidated buffers wifi: iwlwifi: fw: move memset before early return wifi: iwlwifi: mvm: initialize seq variable wifi: iwlwifi: yoyo: Fix possible division by zero wifi: iwlwifi: yoyo: skip dump correctly on hw error wifi: iwlwifi: mvm: don't drop unencrypted MCAST frames md/raid10: don't call bio_start_io_acct twice for bio which experienced read error md/raid10: fix memleak of md thread md/raid10: fix memleak for 'conf->bio_split' md/raid10: fix leak of 'r10bio->remaining' for recovery md/raid10: fix task hung in raid10d f2fs: fix to check return value of inc_valid_block_count() f2fs: fix to check return value of f2fs_do_truncate_blocks() bpf, sockmap: Revert buggy deadlock fix in the sockhash and sockmap wifi: iwlwifi: mvm: don't set CHECKSUM_COMPLETE for unsupported protocols wifi: iwlwifi: trans: don't trigger d3 interrupt twice wifi: iwlwifi: debug: fix crash in __iwl_err() blk-mq: don't plug for head insertions in blk_execute_rq_nowait selftests/bpf: Fix leaked bpf_link in get_stackid_cannot_attach selftests/bpf: Use read_perf_max_sample_freq() in perf_event_stackmap nvme-fcloop: fix "inconsistent {IN-HARDIRQ-W} -> {HARDIRQ-ON-W} usage" nvme: fix async event trace event nvmet: fix I/O Command Set specific Identify Controller nvmet: fix Identify Active Namespace ID list handling nvmet: fix Identify Controller handling nvmet: fix Identify Namespace handling nvmet: fix error handling in nvmet_execute_identify_cns_cs_ns() bpf, sockmap: fix deadlocks in the sockhash and sockmap wifi: ath11k: fix writing to unintended memory region net: ethernet: stmmac: dwmac-rk: fix optional phy regulator handling net: ethernet: stmmac: dwmac-rk: rework optional clock handling scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup() bpf/btf: Fix is_int_ptr() wifi: iwlwifi: fix duplicate entry in iwl_dev_info_table f2fs: fix to avoid use-after-free for cached IPU bio xsk: Fix unaligned descriptor validation crypto: drbg - Only fail when jent is unavailable in FIPS mode bpftool: Fix bug for long instructions in program CFG dumps selftests/bpf: Wait for receive in cg_storage_multi test selftests: xsk: Deflakify STATS_RX_DROPPED test selftests: xsk: Disable IPv6 on VETH1 selftests: xsk: Use correct UMEM size in testapp_invalid_desc net: qrtr: correct types of trace event parameters f2fs: fix iostat lock protection wifi: rt2x00: Fix memory leak when handling surveys scsi: hisi_sas: Handle NCQ error when IPTT is valid scsi: libsas: Add sas_ata_device_link_abort() wifi: rtlwifi: fix incorrect error codes in rtl_debugfs_set_write_reg() wifi: rtlwifi: fix incorrect error codes in rtl_debugfs_set_write_rfreg() crypto: sa2ul - Select CRYPTO_DES crypto: caam - Clear some memory in instantiate_rng f2fs: fix scheduling while atomic in decompression path f2fs: compress: fix to call f2fs_wait_on_page_writeback() in f2fs_write_raw_pages() f2fs: apply zone capacity to all zone type f2fs: fix uninitialized skipped_gc_rwsem f2fs: handle dqget error in f2fs_transfer_project_quota() net: sunhme: Fix uninitialized return code scsi: megaraid: Fix mega_cmd_done() CMDID_INT_CMDS scsi: target: iscsit: Fix TAS handling during conn cleanup scsi: target: Fix multiple LUN_RESET handling scsi: target: iscsit: Stop/wait on cmds during conn close scsi: target: iscsit: isert: Alloc per conn cmd counter scsi: target: Pass in cmd counter to use during cmd setup scsi: target: Move cmd counter allocation scsi: target: Move sess cmd counter to new struct scsi: target: core: Change the way target_xcopy_do_work() sets restiction on max I/O bpf: Fix __reg_bound_offset 64->32 var_off subreg propagation netfilter: keep conntrack reference until IPsecv6 policy checks are done net: dsa: qca8k: remove assignment of an_enabled in pcs_get_state() libbpf: Fix ld_imm64 copy logic for ksym in light skeleton. net/packet: convert po->auxdata to an atomic flag net/packet: convert po->origdev to an atomic flag net/packet: annotate accesses to po->xmit vlan: partially enable SIOCSHWTSTAMP in container net: pcs: xpcs: remove double-read of link state when using AN bpf: Remove misleading spec_v1 check on var-offset stack read selftests/bpf: Fix a fd leak in an error path in network_helpers.c wifi: ath11k: fix deinitialization of firmware resources scm: fix MSG_CTRUNC setting condition for SO_PASSSEC crypto: qat - fix concurrency issue when device state changes bpf: fix precision propagation verbose logging bpf: take into account liveness when propagating precision wifi: rtw88: mac: Return the original error from rtw_mac_power_switch() wifi: rtw88: mac: Return the original error from rtw_pwr_seq_parser() tools: bpftool: Remove invalid \' json escape wifi: ath6kl: reduce WARN to dev_dbg() in callback wifi: brcmfmac: support CQM RSSI notification with older firmware wifi: ath11k: fix SAC bug on peer addition with sta band migration wifi: ath5k: fix an off by one check in ath5k_eeprom_read_freq_list() wifi: ath5k: Use platform_get_irq() to get the interrupt wifi: ath11k: Use platform_get_irq() to get the interrupt wifi: ath9k: hif_usb: fix memory leak of remain_skbs wifi: ath6kl: minor fix for allocation size platform/chrome: cros_typec_switch: Add missing fwnode_handle_put() hwmon: (pmbus/fsp-3y) Fix functionality bitmask in FSP-3Y YM-2151E rpmsg: glink: Propagate TX failures in intentless mode as well cpufreq: use correct unit when verify cur freq ACPI: bus: Ensure that notify handlers are not running after removal tick/common: Align tick period with the HZ tick. drm/i915: Make intel_get_crtc_new_encoder() less oopsy debugobject: Prevent init race with static objects media: mediatek: vcodec: add remove function for decoder platform driver media: mediatek: vcodec: fix decoder disable pm crash perf/arm-cmn: Fix port detection for CMN-700 arm64: kgdb: Set PSTATE.SS to 1 to re-enable single-step x86/ioapic: Don't return 0 from arch_dynirq_lower_bound() regulator: stm32-pwr: fix of_iomap leak media: venus: dec: Fix capture formats enumeration order media: venus: dec: Fix handling of the start cmd media: rc: gpio-ir-recv: Fix support for wake-up drm/amd/display: Fix potential null dereference media: hi846: Fix memleak in hi846_init_controls() media: v4l: async: Return async sub-devices to subnotifier list media: rcar_fdp1: Fix refcount leak in probe and remove function media: platform: mtk-mdp3: fix potential frame size overflow in mdp_try_fmt_mplane() media: saa7134: fix use after free bug in saa7134_finidev due to race condition media: dm1105: Fix use after free bug in dm1105_remove due to race condition platform/x86/amd: pmc: Move out of BIOS SMN pair for STB init platform/x86/amd: pmc: Utilize SMN index 0 for driver probe platform/x86/amd: pmc: Move idlemask check into `amd_pmc_idlemask_read` platform/x86/amd: pmc: Don't dump data after resume from s0i3 on picasso platform/x86/amd: pmc: Hide SMU version and program attributes for Picasso platform/x86/amd: pmc: Don't try to read SMU version on Picasso platform/x86/amd/pmf: Move out of BIOS SMN pair for driver probe media: rkvdec: fix use after free bug in rkvdec_remove media: cedrus: fix use after free bug in cedrus_remove due to race condition media: mediatek: vcodec: change lat thread decode error condition media: mediatek: vcodec: making sure queue_work successfully media: mediatek: vcodec: remove unused lat_buf media: mediatek: vcodec: add core decode done event media: mediatek: vcodec: move lat_buf to the top of core list media: mediatek: vcodec: using each instance lat_buf count replace core ready list media: mediatek: vcodec: add params to record lat and core lat_buf count media: mediatek: vcodec: Force capture queue format to MM21 media: mediatek: vcodec: Make MM21 the default capture format media: mediatek: vcodec: Use 4K frame size when supported by stateful decoder arm64: dts: sc7280: Rename qspi data12 as data23 arm64: dts: sc7180: Rename qspi data12 as data23 arm64: dts: qcom: msm8994-angler: removed clash with smem_region arm64: dts: qcom: msm8994-angler: Fix cont_splash_mem mapping x86/apic: Fix atomic update of offset in reserve_eilvt_offset() regulator: core: Avoid lockdep reports when resolving supplies regulator: core: Consistently set mutex_owner when using ww_mutex_lock_slow() drm/ttm/pool: Fix ttm_pool_alloc error path drm/ttm: optimize pool allocations a bit v2 arm64: dts: qcom: apq8096-db820c: drop unit address from PMI8994 regulator arm64: dts: qcom: msm8994-msft-lumia-octagon: drop unit address from PMI8994 regulator arm64: dts: qcom: msm8994-kitakami: drop unit address from PMI8994 regulator arm64: dts: qcom: sc7180-trogdor-pazquel: correct trackpad supply arm64: dts: qcom: sc7180-trogdor-lazor: correct trackpad supply arm64: dts: qcom: sc7280-herobrine-villager: correct trackpad supply gpu: host1x: Fix memory leak of device names gpu: host1x: Fix potential double free if IOMMU is disabled soc: renesas: renesas-soc: Release 'chipid' from ioremap() soc: bcm: brcmstb: biuctrl: fix of_iomap leak mailbox: mpfs: switch to txdone_poll drm/mediatek: dp: Change the aux retries times when receiving AUX_DEFER drm/lima/lima_drv: Add missing unwind goto in lima_pdev_probe() ACPI: VIOT: Initialize the correct IOMMU fwspec arm64: dts: mediatek: mt8192-asurada: Fix voltage constraint for Vgpu cpufreq: qcom-cpufreq-hw: Revert adding cpufreq qos cpufreq: mediatek: Raise proc and sram max voltage for MT7622/7623 cpufreq: mediatek: raise proc/sram max voltage for MT8516 cpufreq: mediatek: fix KP caused by handler usage after regulator_put/clk_put cpufreq: mediatek: fix passing zero to 'PTR_ERR' arm64: dts: apple: t8103: Disable unused PCIe ports ARM: dts: stm32: fix spi1 pin assignment on stm32mp15 perf/arm-cmn: Move overlapping wp_combine field firmware: arm_scmi: Fix xfers allocation on Rx channel ARM: dts: gta04: fix excess dma channel usage drm: rcar-du: Fix a NULL vs IS_ERR() bug arm64: dts: qcom: sm8450: fix pcie1 gpios properties name mmc: sdhci-of-esdhc: fix quirk to ignore command inhibit for data ACPI: processor: Fix evaluating _PDC method when running as Xen dom0 drm/amd/display/dc/dce60/Makefile: Fix previous attempt to silence known override-init warnings arm64: dts: qcom: sm8350-microsoft-surface: fix USB dual-role mode property virt/coco/sev-guest: Double-buffer messages drm: msm: adreno: Disable preemption on Adreno 510 drm/msm/adreno: drop bogus pm_runtime_set_active() arm64: dts: ti: k3-am62a7: Correct L2 cache size to 512KB arm64: dts: ti: k3-am625: Correct L2 cache size to 512KB media: max9286: Free control handler drm/bridge: adv7533: Fix adv7533_mode_valid for adv7533 and adv7535 firmware: qcom_scm: Clear download bit during reboot media: av7110: prevent underflow in write_ts_to_decoder() media: amphion: decoder implement display delay enable media: platform: mtk-mdp3: Add missing check and free for ida_alloc media: bdisp: Add missing check for create_workqueue x86/MCE/AMD: Use an u64 for bank_map ARM: dts: qcom: sdx55: Fix the unit address of PCIe EP node ARM: dts: qcom: ipq8064: Fix the PCI I/O port range ARM: dts: qcom: ipq4019: Fix the PCI I/O port range arm64: dts: qcom: sm8450: Fix the PCI I/O port range arm64: dts: qcom: sm8150: Fix the PCI I/O port range arm64: dts: qcom: sm8250: Fix the PCI I/O port range arm64: dts: qcom: msm8996: Fix the PCI I/O port range arm64: dts: qcom: ipq6018: Fix the PCI I/O port range arm64: dts: qcom: ipq8074: Fix the PCI I/O port range arm64: dts: qcom: sc7280: Fix the PCI I/O port range arm64: dts: qcom: msm8998: Fix the PCI I/O port range arm64: dts: qcom: sdm845: Fix the PCI I/O port range arm64: dts: qcom: sdm845: correct dynamic power coefficients arm64: dts: qcom: sc7280: fix EUD port properties arm64: dts: qcom: msm8998: Fix stm-stimulus-base reg name arm64: dts: broadcom: bcmbca: bcm4908: fix procmon nodename arm64: dts: broadcom: bcmbca: bcm4908: fix LED nodenames arm64: dts: broadcom: bcmbca: bcm4908: fix NAND interrupt name arm64: dts: ti: k3-j721e-main: Remove ti,strobe-sel property arm64: dts: ti: k3-am62a7-sk: Fix DDR size to full 4GB arm64: dts: ti: k3-am62-main: Fix GPIO numbers in DT regulator: core: Shorten off-on-delay-us for always-on/boot-on by time since booted ARM: dts: qcom-apq8064: Fix opp table child name EDAC/skx: Fix overflows on the DRAM row address mapping arrays drm/msm/disp/dpu: check for crtc enable rather than crtc active to release shared resources drm/mediatek: dp: Only trigger DRM HPD events if bridge is attached arm64: dts: renesas: r9a07g043: Update IRQ numbers for SSI channels arm64: dts: renesas: r9a07g043: Introduce SOC_PERIPHERAL_IRQ() macro to specify interrupt property arm64: dts: renesas: r9a07g054: Update IRQ numbers for SSI channels arm64: dts: renesas: r9a07g044: Update IRQ numbers for SSI channels arm64: dts: renesas: r8a774c0: Remove bogus voltages from OPP table arm64: dts: renesas: r8a77990: Remove bogus voltages from OPP table soc: ti: pm33xx: Fix refcount leak in am33xx_pm_probe tools/x86/kcpuid: Fix avx512bw and avx512lvl fields in Fn00000007 drm/amdgpu: register a vga_switcheroo client for MacBooks with apple-gmux drm/probe-helper: Cancel previous job before starting new one drm/vgem: add missing mutex_destroy drm/i915/dg2: Drop one PCI ID drm/rockchip: Drop unbalanced obj unref erofs: fix potential overflow calculating xattr_isize erofs: initialize packed inode after root inode is assigned erofs: stop parsing non-compact HEAD index if clusterofs is invalid tpm, tpm_tis: Claim locality when interrupts are reenabled on resume tpm, tpm: Implement usage counter for locality tpm, tpm_tis: Claim locality before writing interrupt registers tpm, tpm_tis: Disable interrupts if tpm_tis_probe_irq() failed tpm, tpm_tis: Claim locality before writing TPM_INT_ENABLE register tpm, tpm_tis: Do not skip reset of original interrupt vector selinux: ensure av_permissions.h is built when needed selinux: fix Makefile dependencies of flask.h selftests/resctrl: Check for return value after write_schemata() selftests/resctrl: Allow ->setup() to return errors selftests/resctrl: Move ->setup() call outside of test specific branches selftests/resctrl: Return NULL if malloc_and_init_memory() did not alloc mem rcu: Fix missing TICK_DEP_MASK_RCU_EXP dependency check kunit: fix bug in the order of lines in debugfs logs kunit: improve KTAP compliance of KUnit test output ASoC: dt-bindings: qcom,lpass-rx-macro: correct minItems for clocks bus: mhi: host: Range check CHDBOFF and ERDBOFF bus: mhi: host: Use mhi_tryset_pm_state() for setting fw error state bus: mhi: host: Remove duplicate ee check for syserr cxl/hdm: Fail upon detecting 0-sized decoders xfs: don't consider future format versions valid ceph: fix potential use-after-free bug when trimming caps ubifs: Fix memory leak in do_rename ubifs: Free memory for tmpfile name ubi: Fix return value overwrite issue in try_write_vid_and_data() ubifs: Fix memleak when insert_old_idx() failed Revert "ubifs: dirty_cow_znode: Fix memleak in error handling path" RISC-V: Align SBI probe implementation with spec iommu/amd: Fix "Guest Virtual APIC Table Root Pointer" configuration in IRTE drm/amd/pm: re-enable the gfx imu when smu resume swsmu/amdgpu_smu: Fix the wrong if-condition tracing: Fix permissions for the buffer_percent file riscv: mm: remove redundant parameter of create_fdt_early_page_table i2c: omap: Fix standard mode false ACK readings ACPI: video: Remove acpi_backlight=video quirk for Lenovo ThinkPad W530 ksmbd: fix deadlock in ksmbd_find_crypto_ctx() ksmbd: not allow guest user on multichannel ksmbd: fix memleak in session setup ksmbd: fix NULL pointer dereference in smb2_get_info_filesystem() ksmbd: call rcu_barrier() in ksmbd_server_exit() ksmbd: fix racy issue under cocurrent smb2 tree disconnect KVM: RISC-V: Retry fault if vma_lookup() results become invalid drm/amd/display: fix a divided-by-zero error drm/amd/display: fix PSR-SU/DSC interoperability support drm/amd/display: limit timing for single dimm memory drm/amd/display: Remove stutter only configurations relayfs: fix out-of-bounds access in relay_file_read KVM: arm64: vgic: Don't acquire its_lock before config_lock KVM: arm64: Use config_lock to protect vgic state KVM: arm64: Use config_lock to protect data ordered against KVM_RUN KVM: arm64: Avoid lock inversion when setting the VM register width KVM: arm64: Avoid vcpu->mutex v. kvm->lock inversion in CPU_ON KVM: nVMX: Emulate NOPs in L2, and PAUSE if it's not intercepted reiserfs: Add security prefix to xattr name in reiserfs_security_write() rcu: Avoid stack overflow due to __rcu_irq_enter_check_tick() being kprobe-ed crypto: ccp - Don't initialize CCP for PSP 0x1649 crypto: arm64/aes-neonbs - fix crash with CFI enabled crypto: safexcel - Cleanup ring IRQ workqueues on load failure crypto: api - Demote BUG_ON() in crypto_unregister_alg() to a WARN_ON() ring-buffer: Sync IRQ works before buffer destruction ring-buffer: Ensure proper resetting of atomic variables in ring_buffer_reset_online_cpus pinctrl: qcom: lpass-lpi: set output value before enabling output soundwire: qcom: correct setting ignore bit on v1.5.1 pwm: meson: Fix g12a ao clk81 name pwm: meson: Fix axg ao mux parents wifi: mt76: add missing locking to protect against concurrent rx/status calls kheaders: Use array declaration instead of char iio: addac: stx104: Fix race condition for stx104_write_raw() iio: addac: stx104: Fix race condition when converting analog-to-digital ipmi: fix SSIF not responding under certain cond. ipmi:ssif: Add send_retries increment MIPS: fw: Allow firmware to pass a empty env fs: fix sysctls.c built tick/nohz: Fix cpu_is_hotpluggable() by checking with nohz subsystem serial: max310x: fix IO data corruption in batched operations serial: 8250: Fix serial8250_tx_empty() race with DMA Tx serial: fix TIOCSRS485 locking xhci: fix debugfs register accesses while suspended tty: Prevent writing chars during tcsetattr TCSADRAIN/FLUSH staging: iio: resolver: ads1210: fix config mode blk-crypto: make blk_crypto_evict_key() more robust blk-crypto: make blk_crypto_evict_key() return void blk-mq: release crypto keyslot before reporting I/O complete blk-crypto: Add a missing include directive blk-crypto: move internal only declarations to blk-crypto-internal.h blk-crypto: add a blk_crypto_config_supported_natively helper blk-crypto: don't use struct request_queue for public interfaces blk-stat: fix QUEUE_FLAG_STATS clear media: ov8856: Do not check for for module version posix-cpu-timers: Implement the missing timer_wait_running callback tpm: Add !tpm_amd_is_rng_defective() to the hwrng_unregister() call site hwmon: (adt7475) Use device_property APIs when configuring polarity hwmon: (k10temp) Check range scale when CUR_TEMP register is read-write USB: dwc3: fix runtime pm imbalance on unbind USB: dwc3: fix runtime pm imbalance on probe errors usb: dwc3: gadget: Stall and restart EP0 if host is unresponsive usb: gadget: udc: core: Prevent redundant calls to pullup usb: gadget: udc: core: Invoke usb_gadget_connect only when started IMA: allow/fix UML builds phy: qcom-qmp-pcie: sc8180x PCIe PHY has 2 lanes PCI: qcom: Fix the incorrect register usage in v2.7.0 config PCI: pciehp: Fix AB-BA deadlock between reset_lock and device_lock PCI: kirin: Select REGMAP_MMIO powerpc/boot: Fix boot wrapper code generation with CONFIG_POWER10_CPU arm64: Stash shadow stack pointer in the task struct on interrupt arm64: Always load shadow stack pointer directly from the task struct ASoC: amd: ps: update the acp clock source. ASoC: amd: fix ACP version typo mistake wifi: mt76: mt7921e: Set memory space enable in PCI_COMMAND if unset wireguard: timers: cast enum limits members to int in prints x86/cpu: Add model number for Intel Arrow Lake processor asm-generic/io.h: suppress endianness warnings for readq() and writeq() tracing: Error if a trace event has an array for a __field() wifi: ath11k: reduce the MHI timeout to 20s platform/x86: thinkpad_acpi: Add missing T14s Gen1 type to s2idle quirk list net: sfp: add quirk enabling 2500Base-x for HG MXPD-483II scsi: mpi3mr: Handle soft reset in progress fault code (0xF002) selftests mount: Fix mount_setattr_test builds failed net: wwan: t7xx: do not compile with -Werror ASoC: da7213.c: add missing pm_runtime_disable() ASoC: Intel: bytcr_rt5640: Add quirk for the Acer Iconia One 7 B1-750 iio: adc: palmas_gpadc: fix NULL dereference on rmmod ASoC: amd: yc: Add DMI entries to support Victus by HP Laptop 16-e1xxx (8A22) x86/hyperv: Block root partition functionality in a Confidential VM ASoC: soc-pcm: fix hw->formats cleared by soc_pcm_hw_init() for dpcm ASoC: Intel: soc-acpi: add table for Intel 'Rooks County' NUC M15 ASOC: Intel: sof_sdw: add quirk for Intel 'Rooks County' NUC M15 Linux 6.1.27 riscv: No need to relocate the dtb as it lies in the fixmap region riscv: Do not set initial_boot_params to the linear address of the dtb riscv: Move early dtb mapping into the fixmap region driver core: Don't require dynamic_debug for initcall_debug probe timing USB: serial: option: add UNISOC vendor and TOZED LT70C product btrfs: fix uninitialized variable warnings bluetooth: Perform careful capability checks in hci_sock_ioctl() gpiolib: acpi: Add a ignore wakeup quirk for Clevo NL5xNU drm/fb-helper: set x/yres_virtual in drm_fb_helper_check_var wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies() mptcp: fix accept vs worker race mptcp: stops worker on unaccepted sockets at listener close mm/mempolicy: fix use-after-free of VMA iterator KVM: arm64: Retry fault if vma_lookup() results become invalid phy: phy-brcm-usb: Utilize platform_get_irq_byname_optional() um: Only disable SSE on clang to work around old GCC bugs Linux 6.1.26 ASN.1: Fix check for strdup() success ASoC: fsl_sai: Fix pins setting for i.MX8QM platform ASoC: fsl_asrc_dma: fix potential null-ptr-deref ASoC: SOF: pm: Tear down pipelines only if DSP was active mm/page_alloc: fix potential deadlock on zonelist_update_seq seqlock fpga: bridge: properly initialize bridge device before populating children iio: adc: at91-sama5d2_adc: fix an error code in at91_adc_allocate_trigger() Input: pegasus-notetaker - check pipe type when probing gcc: disable '-Warray-bounds' for gcc-13 too sctp: Call inet6_destroy_sock() via sk->sk_destruct(). dccp: Call inet6_destroy_sock() via sk->sk_destruct(). inet6: Remove inet6_destroy_sock() in sk->sk_prot->destroy(). purgatory: fix disabling debug info fuse: always revalidate rename target dentry MIPS: Define RUNTIME_DISCARD_EXIT in LD script KVM: arm64: Fix buffer overflow in kvm_arm_set_fw_reg() KVM: arm64: Make vcpu flag updates non-preemptible sched/fair: Fixes for capacity inversion detection sched/fair: Consider capacity inversion in util_fits_cpu() sched/fair: Detect capacity inversion mm/mmap: regression fix for unmapped_area{_topdown} mm: page_alloc: skip regions with hugetlbfs pages when allocating 1G pages mm: kmsan: handle alloc failures in kmsan_vmap_pages_range_noflush() mm: kmsan: handle alloc failures in kmsan_ioremap_page_range() mm/huge_memory.c: warn with pr_warn_ratelimited instead of VM_WARN_ON_ONCE_FOLIO mm/khugepaged: check again on anon uffd-wp during isolation mm/userfaultfd: fix uffd-wp handling for THP migration entries Conflicts: Documentation/devicetree/bindings Documentation/devicetree/bindings/ata/ceva,ahci-1v84.yaml Documentation/devicetree/bindings/display/msm/dsi-controller-main.yaml Documentation/devicetree/bindings/iio/adc/renesas,rcar-gyroadc.yaml Documentation/devicetree/bindings/power/reset/qcom,pon.yaml Documentation/devicetree/bindings/sound/qcom,lpass-rx-macro.yaml Documentation/devicetree/bindings/sound/tas2562.yaml Documentation/devicetree/bindings/sound/tas2770.yaml Documentation/devicetree/bindings/sound/tas27xx.yaml Documentation/devicetree/bindings/usb/cdns,usb3.yaml Documentation/devicetree/bindings/usb/snps,dwc3.yaml drivers/bus/mhi/host/boot.c drivers/cpufreq/qcom-cpufreq-hw.c drivers/edac/qcom_edac.c drivers/firmware/qcom_scm.c drivers/gpu/drm/bridge/analogix/anx7625.c drivers/interconnect/qcom/icc-rpm.c drivers/interconnect/qcom/icc-rpm.h drivers/soc/qcom/llcc-qcom.c drivers/soc/qcom/mdt_loader.c drivers/ufs/host/ufs-qcom.c include/linux/soc/qcom/llcc-qcom.h Change-Id: I8b5c01908c4448ee74e3c086747fd18ad1015f4b Upstream-Build: ks_qcom-android14-6.1-keystone-qcom-release@11171449 UKQ2.231203.001 Signed-off-by: jianzhou <quic_jianzhou@quicinc.com> Signed-off-by: Maria Yu <quic_aiquny@quicinc.com>	2023-12-12 21:28:51 -08:00
Greg Kroah-Hartman	2950de8b2d	Merge 6.1.56 into android14-6.1-lts ... Changes in 6.1.56 NFS: Fix error handling for O_DIRECT write scheduling NFS: Fix O_DIRECT locking issues NFS: More O_DIRECT accounting fixes for error paths NFS: Use the correct commit info in nfs_join_page_group() NFS: More fixes for nfs_direct_write_reschedule_io() NFS/pNFS: Report EINVAL errors from connect() to the server SUNRPC: Mark the cred for revalidation if the server rejects it NFSv4.1: use EXCHGID4_FLAG_USE_PNFS_DS for DS server NFSv4.1: fix pnfs MDS=DS session trunking media: v4l: Use correct dependency for camera sensor drivers media: via: Use correct dependency for camera sensor drivers netfs: Only call folio_start_fscache() one time for each folio dm: fix a race condition in retrieve_deps btrfs: improve error message after failure to add delayed dir index item btrfs: remove BUG() after failure to insert delayed dir index item ext4: replace the traditional ternary conditional operator with with max()/min() ext4: move setting of trimmed bit into ext4_try_to_trim_range() ext4: do not let fstrim block system suspend netfilter: nf_tables: don't skip expired elements during walk netfilter: nf_tables: GC transaction API to avoid race with control plane netfilter: nf_tables: adapt set backend to use GC transaction API netfilter: nft_set_hash: mark set element as dead when deleting from packet path netfilter: nf_tables: remove busy mark and gc batch API netfilter: nf_tables: don't fail inserts if duplicate has expired netfilter: nf_tables: fix GC transaction races with netns and netlink event exit path netfilter: nf_tables: GC transaction race with netns dismantle netfilter: nf_tables: GC transaction race with abort path netfilter: nf_tables: use correct lock to protect gc_list netfilter: nf_tables: defer gc run if previous batch is still pending netfilter: nft_set_rbtree: skip sync GC for new elements in this transaction netfilter: nft_set_rbtree: use read spinlock to avoid datapath contention netfilter: nft_set_pipapo: call nft_trans_gc_queue_sync() in catchall GC netfilter: nft_set_pipapo: stop GC iteration if GC transaction allocation fails netfilter: nft_set_hash: try later when GC hits EAGAIN on iteration netfilter: nf_tables: fix memleak when more than 255 elements expired ASoC: meson: spdifin: start hw on dai probe netfilter: nf_tables: disallow element removal on anonymous sets bpf: Avoid deadlock when using queue and stack maps from NMI ASoC: rt5640: Revert "Fix sleep in atomic context" ASoC: rt5640: Fix IRQ not being free-ed for HDA jack detect mode ALSA: hda/realtek: Splitting the UX3402 into two separate models netfilter: conntrack: fix extension size table selftests: tls: swap the TX and RX sockets in some tests net/core: Fix ETH_P_1588 flow dissector ASoC: hdaudio.c: Add missing check for devm_kstrdup ASoC: imx-audmix: Fix return error with devm_clk_get() octeon_ep: fix tx dma unmap len values in SG iavf: do not process adminq tasks when __IAVF_IN_REMOVE_TASK is set ASoC: SOF: core: Only call sof_ops_free() on remove if the probe was successful iavf: add iavf_schedule_aq_request() helper iavf: schedule a request immediately after add/delete vlan i40e: Fix VF VLAN offloading when port VLAN is configured netfilter, bpf: Adjust timeouts of non-confirmed CTs in bpf_ct_insert_entry() ionic: fix 16bit math issue when PAGE_SIZE >= 64KB igc: Fix infinite initialization loop with early XDP redirect ipv4: fix null-deref in ipv4_link_failure scsi: iscsi_tcp: restrict to TCP sockets powerpc/perf/hv-24x7: Update domain value check dccp: fix dccp_v4_err()/dccp_v6_err() again x86/mm, kexec, ima: Use memblock_free_late() from ima_free_kexec_buffer() net: hsr: Properly parse HSRv1 supervisor frames. platform/x86: intel_scu_ipc: Check status after timeout in busy_loop() platform/x86: intel_scu_ipc: Check status upon timeout in ipc_wait_for_interrupt() platform/x86: intel_scu_ipc: Don't override scu in intel_scu_ipc_dev_simple_command() platform/x86: intel_scu_ipc: Fail IPC send if still busy x86/srso: Fix srso_show_state() side effect x86/srso: Fix SBPB enablement for spec_rstack_overflow=off net: hns3: add cmdq check for vf periodic service task net: hns3: fix GRE checksum offload issue net: hns3: only enable unicast promisc when mac table full net: hns3: fix fail to delete tc flower rules during reset issue net: hns3: add 5ms delay before clear firmware reset irq source net: bridge: use DEV_STATS_INC() team: fix null-ptr-deref when team device type is changed net: rds: Fix possible NULL-pointer dereference netfilter: nf_tables: disable toggling dormant table state more than once netfilter: ipset: Fix race between IPSET_CMD_CREATE and IPSET_CMD_SWAP i915/pmu: Move execlist stats initialization to execlist specific setup locking/seqlock: Do the lockdep annotation before locking in do_write_seqcount_begin_nested() net: ena: Flush XDP packets on error. bnxt_en: Flush XDP for bnxt_poll_nitroa0()'s NAPI octeontx2-pf: Do xdp_do_flush() after redirects. igc: Expose tx-usecs coalesce setting to user proc: nommu: /proc/<pid>/maps: release mmap read lock proc: nommu: fix empty /proc/<pid>/maps cifs: Fix UAF in cifs_demultiplex_thread() gpio: tb10x: Fix an error handling path in tb10x_gpio_probe() i2c: mux: demux-pinctrl: check the return value of devm_kstrdup() i2c: mux: gpio: Add missing fwnode_handle_put() i2c: xiic: Correct return value check for xiic_reinit() ARM: dts: BCM5301X: Extend RAM to full 256MB for Linksys EA6500 V2 ARM: dts: samsung: exynos4210-i9100: Fix LCD screen's physical size ARM: dts: qcom: msm8974pro-castor: correct inverted X of touchscreen ARM: dts: qcom: msm8974pro-castor: correct touchscreen function names ARM: dts: qcom: msm8974pro-castor: correct touchscreen syna,nosleep-mode f2fs: optimize iteration over sparse directories f2fs: get out of a repeat loop when getting a locked data page s390/pkey: fix PKEY_TYPE_EP11_AES handling in PKEY_CLR2SECK2 IOCTL arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved wifi: ath11k: fix tx status reporting in encap offload mode wifi: ath11k: Cleanup mac80211 references on failure during tx_complete scsi: qla2xxx: Select qpair depending on which CPU post_cmd() gets called scsi: qla2xxx: Use raw_smp_processor_id() instead of smp_processor_id() drm/amdkfd: Flush TLB after unmapping for GFX v9.4.3 drm/amdkfd: Insert missing TLB flush on GFX10 and later btrfs: reset destination buffer when read_extent_buffer() gets invalid range vfio/mdev: Fix a null-ptr-deref bug for mdev_unregister_parent() MIPS: Alchemy: only build mmc support helpers if au1xmmc is enabled spi: spi-gxp: BUG: Correct spi write return value drm/bridge: ti-sn65dsi83: Do not generate HFP/HBP/HSA and EOT packet bus: ti-sysc: Use fsleep() instead of usleep_range() in sysc_reset() bus: ti-sysc: Fix missing AM35xx SoC matching firmware: arm_scmi: Harden perf domain info access firmware: arm_scmi: Fixup perf power-cost/microwatt support power: supply: mt6370: Fix missing error code in mt6370_chg_toggle_cfo() clk: sprd: Fix thm_parents incorrect configuration clk: tegra: fix error return case for recalc_rate ARM: dts: omap: correct indentation ARM: dts: ti: omap: Fix bandgap thermal cells addressing for omap3/4 ARM: dts: Unify pwm-omap-dmtimer node names ARM: dts: Unify pinctrl-single pin group nodes for omap4 ARM: dts: ti: omap: motorola-mapphone: Fix abe_clkctrl warning on boot bus: ti-sysc: Fix SYSC_QUIRK_SWSUP_SIDLE_ACT handling for uart wake-up power: supply: ucs1002: fix error code in ucs1002_get_property() firmware: imx-dsp: Fix an error handling path in imx_dsp_setup_channels() xtensa: add default definition for XCHAL_HAVE_DIV32 xtensa: iss/network: make functions static xtensa: boot: don't add include-dirs xtensa: umulsidi3: fix conditional expression xtensa: boot/lib: fix function prototypes power: supply: rk817: Fix node refcount leak selftests/powerpc: Use CLEAN macro to fix make warning selftests/powerpc: Pass make context to children selftests/powerpc: Fix emit_tests to work with run_kselftest.sh soc: imx8m: Enable OCOTP clock for imx8mm before reading registers arm64: dts: imx: Add imx8mm-prt8mm.dtb to build firmware: arm_ffa: Don't set the memory region attributes for MEM_LEND gpio: pmic-eic-sprd: Add can_sleep flag for PMIC EIC chip i2c: npcm7xx: Fix callback completion ordering x86/reboot: VMCLEAR active VMCSes before emergency reboot ceph: drop messages from MDS when unmounting dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock bpf: Annotate bpf_long_memcpy with data_race spi: sun6i: reduce DMA RX transfer width to single byte spi: sun6i: fix race between DMA RX transfer completion and RX FIFO drain nvme-fc: Prevent null pointer dereference in nvme_fc_io_getuuid() parisc: sba: Fix compile warning wrt list of SBA devices parisc: iosapic.c: Fix sparse warnings parisc: drivers: Fix sparse warning parisc: irq: Make irq_stack_union static to avoid sparse warning scsi: qedf: Add synchronization between I/O completions and abort scsi: ufs: core: Move __ufshcd_send_uic_cmd() outside host_lock scsi: ufs: core: Poll HCS.UCRDY before issuing a UIC command selftests/ftrace: Correctly enable event in instance-event.tc ring-buffer: Avoid softlockup in ring_buffer_resize() btrfs: assert delayed node locked when removing delayed item selftests: fix dependency checker script ring-buffer: Do not attempt to read past "commit" net/smc: bugfix for smcr v2 server connect success statistic ata: sata_mv: Fix incorrect string length computation in mv_dump_mem() platform/mellanox: mlxbf-bootctl: add NET dependency into Kconfig platform/x86: asus-wmi: Support 2023 ROG X16 tablet mode thermal/of: add missing of_node_put() drm/amd/display: Don't check registers, if using AUX BL control drm/amdgpu/soc21: don't remap HDP registers for SR-IOV drm/amdgpu/nbio4.3: set proper rmmio_remap.reg_offset for SR-IOV drm/amdgpu: Handle null atom context in VBIOS info ioctl riscv: errata: fix T-Head dcache.cva encoding scsi: pm80xx: Use phy-specific SAS address when sending PHY_START command scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command smb3: correct places where ENOTSUPP is used instead of preferred EOPNOTSUPP ata: libata-eh: do not clear ATA_PFLAG_EH_PENDING in ata_eh_reset() spi: nxp-fspi: reset the FLSHxCR1 registers spi: stm32: add a delay before SPI disable ASoC: fsl: imx-pcm-rpmsg: Add SNDRV_PCM_INFO_BATCH flag spi: intel-pci: Add support for Granite Rapids SPI serial flash bpf: Clarify error expectations from bpf_clone_redirect ALSA: hda: intel-sdw-acpi: Use u8 type for link index ASoC: cs42l42: Ensure a reset pulse meets minimum pulse width. ASoC: cs42l42: Don't rely on GPIOD_OUT_LOW to set RESET initially low firmware: cirrus: cs_dsp: Only log list of algorithms in debug build memblock tests: fix warning: "__ALIGN_KERNEL" redefined memblock tests: fix warning ‘struct seq_file’ declared inside parameter list ASoC: imx-rpmsg: Set ignore_pmdown_time for dai_link media: vb2: frame_vector.c: replace WARN_ONCE with a comment NFSv4.1: fix zero value filehandle in post open getattr ASoC: SOF: Intel: MTL: Reduce the DSP init timeout powerpc/watchpoints: Disable preemption in thread_change_pc() powerpc/watchpoint: Disable pagefaults when getting user instruction powerpc/watchpoints: Annotate atomic context in more places ncsi: Propagate carrier gain/loss events to the NCSI controller net: hsr: Add __packed to struct hsr_sup_tlv. tsnep: Fix NAPI scheduling tsnep: Fix NAPI polling with budget 0 LoongArch: Set all reserved memblocks on Node#0 at initialization fbdev/sh7760fb: Depend on FB=y perf build: Define YYNOMEM as YYNOABORT for bison < 3.81 nvme-pci: factor the iod mempool creation into a helper nvme-pci: factor out a nvme_pci_alloc_dev helper nvme-pci: do not set the NUMA node of device if it has none wifi: ath11k: Don't drop tx_status when peer cannot be found scsi: qla2xxx: Fix NULL pointer dereference in target mode nvme-pci: always return an ERR_PTR from nvme_pci_alloc_dev smack: Record transmuting in smk_transmuted smack: Retrieve transmuting information in smack_inode_getsecurity() iommu/arm-smmu-v3: Fix soft lockup triggered by arm_smmu_mm_invalidate_range x86/sgx: Resolves SECS reclaim vs. page fault for EAUG race x86/srso: Add SRSO mitigation for Hygon processors KVM: SVM: INTERCEPT_RDTSCP is never intercepted anyway KVM: SVM: Fix TSC_AUX virtualization setup KVM: x86/mmu: Open code leaf invalidation from mmu_notifier KVM: x86/mmu: Do not filter address spaces in for_each_tdp_mmu_root_yield_safe() mptcp: fix bogus receive window shrinkage with multiple subflows misc: rtsx: Fix some platforms can not boot and move the l1ss judgment to probe Revert "tty: n_gsm: fix UAF in gsm_cleanup_mux" serial: 8250_port: Check IRQ data before use nilfs2: fix potential use after free in nilfs_gccache_submit_read_data() netfilter: nf_tables: disallow rule removal from chain binding ALSA: hda: Disable power save for solving pop issue on Lenovo ThinkCentre M70q LoongArch: Define relocation types for ABI v2.10 LoongArch: numa: Fix high_memory calculation ata: libata-scsi: link ata port and scsi device ata: libata-scsi: ignore reserved bits for REPORT SUPPORTED OPERATION CODES io_uring/fs: remove sqe->rw_flags checking from LINKAT i2c: i801: unregister tco_pdev in i801_probe() error path ASoC: amd: yc: Fix non-functional mic on Lenovo 82QF and 82UG kernel/sched: Modify initial boot task idle setup sched/rt: Fix live lock between select_fallback_rq() and RT push netfilter: nf_tables: fix kdoc warnings after gc rework Revert "SUNRPC dont update timeout value on connection reset" timers: Tag (hr)timer softirq as hotplug safe drm/tests: Fix incorrect argument in drm_test_mm_insert_range arm64: defconfig: remove CONFIG_COMMON_CLK_NPCM8XX=y mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions() mm/slab_common: fix slab_caches list corruption after kmem_cache_destroy() mm: memcontrol: fix GFP_NOFS recursion in memory.high enforcement ring-buffer: Update "shortest_full" in polling btrfs: properly report 0 avail for very full file systems media: uvcvideo: Fix OOB read bpf: Add override check to kprobe multi link attach bpf: Fix BTF_ID symbol generation collision bpf: Fix BTF_ID symbol generation collision in tools/ net: thunderbolt: Fix TCPv6 GSO checksum calculation fs/smb/client: Reset password pointer to NULL ata: libata-core: Fix ata_port_request_pm() locking ata: libata-core: Fix port and device removal ata: libata-core: Do not register PM operations for SAS ports ata: libata-sata: increase PMP SRST timeout to 10s drm/i915/gt: Fix reservation address in ggtt_reserve_guc_top power: supply: rk817: Add missing module alias power: supply: ab8500: Set typing and props fs: binfmt_elf_efpic: fix personality for ELF-FDPIC drm/amdkfd: Use gpu_offset for user queue's wptr drm/meson: fix memory leak on ->hpd_notify callback memcg: drop kmem.limit_in_bytes mm, memcg: reconsider kmem.limit_in_bytes deprecation ASoC: amd: yc: Fix a non-functional mic on Lenovo 82TL Linux 6.1.56 Change-Id: Id110614d91d6d60fb6c7622c5af82f219a84a30f Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>	2023-10-27 09:17:04 +00:00
Tomasz Duszynski	db636b8ec0	vfio: platform: ignore missing reset if disabled at module init ... If reset requirement was relaxed via module parameter, errors caused by missing reset should not be propagated down to the vfio core. Otherwise initialization will fail. Change-Id: I78957cef2b45c66eab1d949a04ccbaffe10499e7 Signed-off-by: Tomasz Duszynski <tduszynski@marvell.com> Signed-off-by: Alex Williamson <alex.williamson@redhat.com> Fixes: 5f6c7e0831 ("vfio/platform: Use the new device life cycle helpers") Reviewed-by: Kevin Tian <kevin.tian@intel.com> Reviewed-by: Eric Auger <eric.auger@redhat.com> Link: https://lore.kernel.org/r/20230131083349.2027189-1-tduszynski@marvell.com Git-commit: 168a9c91fe0a1180959b6394f4566de7080244b6 Git-repo: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git Signed-off-by: Yimin Peng <quic_yiminp@quicinc.com>	2023-10-11 18:34:05 -07:00
Jinjie Ruan	c01b2e0ee2	vfio/mdev: Fix a null-ptr-deref bug for mdev_unregister_parent() ... [ Upstream commit c777b11d34e0f47dbbc4b018ef65ad030f2b283a ] Inject fault while probing mdpy.ko, if kstrdup() of create_dir() fails in kobject_add_internal() in kobject_init_and_add() in mdev_type_add() in parent_create_sysfs_files(), it will return 0 and probe successfully. And when rmmod mdpy.ko, the mdpy_dev_exit() will call mdev_unregister_parent(), the mdev_type_remove() may traverse uninitialized parent->types[i] in parent_remove_sysfs_files(), and it will cause below null-ptr-deref. If mdev_type_add() fails, return the error code and kset_unregister() to fix the issue. general protection fault, probably for non-canonical address 0xdffffc0000000002: 0000 [#1] PREEMPT SMP KASAN KASAN: null-ptr-deref in range [0x0000000000000010-0x0000000000000017] CPU: 2 PID: 10215 Comm: rmmod Tainted: G W N 6.6.0-rc2+ #20 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.15.0-1 04/01/2014 RIP: 0010:__kobject_del+0x62/0x1c0 Code: 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 51 01 00 00 48 b8 00 00 00 00 00 fc ff df 48 8b 6b 28 48 8d 7d 10 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 24 01 00 00 48 8b 75 10 48 89 df 48 8d 6b 3c e8 RSP: 0018:ffff88810695fd30 EFLAGS: 00010202 RAX: dffffc0000000000 RBX: ffffffffa0270268 RCX: 0000000000000000 RDX: 0000000000000002 RSI: 0000000000000004 RDI: 0000000000000010 RBP: 0000000000000000 R08: 0000000000000001 R09: ffffed10233a4ef1 R10: ffff888119d2778b R11: 0000000063666572 R12: 0000000000000000 R13: fffffbfff404e2d4 R14: dffffc0000000000 R15: ffffffffa0271660 FS: 00007fbc81981540(0000) GS:ffff888119d00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007fc14a142dc0 CR3: 0000000110a62003 CR4: 0000000000770ee0 DR0: ffffffff8fb0bce8 DR1: ffffffff8fb0bce9 DR2: ffffffff8fb0bcea DR3: ffffffff8fb0bceb DR6: 00000000fffe0ff0 DR7: 0000000000000600 PKRU: 55555554 Call Trace: <TASK> ? die_addr+0x3d/0xa0 ? exc_general_protection+0x144/0x220 ? asm_exc_general_protection+0x22/0x30 ? __kobject_del+0x62/0x1c0 kobject_del+0x32/0x50 parent_remove_sysfs_files+0xd6/0x170 [mdev] mdev_unregister_parent+0xfb/0x190 [mdev] ? mdev_register_parent+0x270/0x270 [mdev] ? find_module_all+0x9d/0xe0 mdpy_dev_exit+0x17/0x63 [mdpy] __do_sys_delete_module.constprop.0+0x2fa/0x4b0 ? module_flags+0x300/0x300 ? __fput+0x4e7/0xa00 do_syscall_64+0x35/0x80 entry_SYSCALL_64_after_hwframe+0x46/0xb0 RIP: 0033:0x7fbc813221b7 Code: 73 01 c3 48 8b 0d d1 8c 2c 00 f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 b0 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 8b 0d a1 8c 2c 00 f7 d8 64 89 01 48 RSP: 002b:00007ffe780e0648 EFLAGS: 00000206 ORIG_RAX: 00000000000000b0 RAX: ffffffffffffffda RBX: 00007ffe780e06a8 RCX: 00007fbc813221b7 RDX: 000000000000000a RSI: 0000000000000800 RDI: 000055e214df9b58 RBP: 000055e214df9af0 R08: 00007ffe780df5c1 R09: 0000000000000000 R10: 00007fbc8139ecc0 R11: 0000000000000206 R12: 00007ffe780e0870 R13: 00007ffe780e0ed0 R14: 000055e214df9260 R15: 000055e214df9af0 </TASK> Modules linked in: mdpy(-) mdev vfio_iommu_type1 vfio [last unloaded: mdpy] Dumping ftrace buffer: (ftrace buffer empty) ---[ end trace 0000000000000000 ]--- RIP: 0010:__kobject_del+0x62/0x1c0 Code: 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 51 01 00 00 48 b8 00 00 00 00 00 fc ff df 48 8b 6b 28 48 8d 7d 10 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 24 01 00 00 48 8b 75 10 48 89 df 48 8d 6b 3c e8 RSP: 0018:ffff88810695fd30 EFLAGS: 00010202 RAX: dffffc0000000000 RBX: ffffffffa0270268 RCX: 0000000000000000 RDX: 0000000000000002 RSI: 0000000000000004 RDI: 0000000000000010 RBP: 0000000000000000 R08: 0000000000000001 R09: ffffed10233a4ef1 R10: ffff888119d2778b R11: 0000000063666572 R12: 0000000000000000 R13: fffffbfff404e2d4 R14: dffffc0000000000 R15: ffffffffa0271660 FS: 00007fbc81981540(0000) GS:ffff888119d00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007fc14a142dc0 CR3: 0000000110a62003 CR4: 0000000000770ee0 DR0: ffffffff8fb0bce8 DR1: ffffffff8fb0bce9 DR2: ffffffff8fb0bcea DR3: ffffffff8fb0bceb DR6: 00000000fffe0ff0 DR7: 0000000000000600 PKRU: 55555554 Kernel panic - not syncing: Fatal exception Dumping ftrace buffer: (ftrace buffer empty) Kernel Offset: disabled Rebooting in 1 seconds.. Fixes: da44c340c4 ("vfio/mdev: simplify mdev_type handling") Signed-off-by: Jinjie Ruan <ruanjinjie@huawei.com> Reviewed-by: Eric Farman <farman@linux.ibm.com> Reviewed-by: Jason Gunthorpe <jgg@nvidia.com> Link: https://lore.kernel.org/r/20230918115551.1423193-1-ruanjinjie@huawei.com Signed-off-by: Alex Williamson <alex.williamson@redhat.com> Signed-off-by: Sasha Levin <sashal@kernel.org>	2023-10-06 14:56:45 +02:00
Greg Kroah-Hartman	dbb69752f7	This is the 6.1.53 stable release ... -----BEGIN PGP SIGNATURE----- iQIzBAABCAAdFiEEZH8oZUiU471FcZm+ONu9yGCSaT4FAmUBaBUACgkQONu9yGCS aT6OkBAArqBSUyCYQJrhoUlFYBnBqF7BLSkj0GwINGSUOlt5ilJ3kZwH9ftjvpWp ZtO0Rp/1yH2H5PpcsaLljPl055Sf30e0oCkz6vX16vy17NGnzI4rJi55+nRZbFRH tBMhMjblgIJoTiTPEQPSGghENok+QzJ9Imffo4/Wru3w5ytkBnGcPPXreHJw+8V5 Pjhzg5tcjhz23rk2wzVtR4VfEqWaHQaapv49rKB1Yls578WYn4QXl4jgUyB7rCo7 9vBB7xy77H1hr9m8ifB/9v1ToV/vw6L1xGPWWWbhsSikFAMBoq34SCsq+6RdeURo 43CCcFsx1s5acM7NQWvxkoV5Hgl8Hc3WgFsx5eVBlNd+vS6ezkgdYuGmN76t+dF/ hZ7XGEoEFuoz9NKQC/5rKjdBd2p/IQYx6vf8EpK0IxFPD4h+DY9pn0FvwuAmxAcA M41xLYGbXX5l/QJR016B1AYiB3DqVxRRRyQT0yNip+PDAh2N06MOJ84KgMSR9lg7 jyeFKZM2vQ619RopMIspuHTWxNiMw7x94aUhBnY1oD+fDzaRn+VNL8po6QYHLK8U QTDhrWplTbTuGIF72h+1IyX1aUj6ozoCewl9Y9ry1u9jBb7LZoupVd0s1dwqORIk 2OSo74pDu5F2BT+4hEcCpDRcYvWlfKbZWBunRrMqvHN8BON0Mks= =aFyS -----END PGP SIGNATURE----- Merge 6.1.53 into android14-6.1-lts Changes in 6.1.53 Revert "bridge: Add extack warning when enabling STP in netns." Partially revert "drm/amd/display: Fix possible underflow for displays with large vblank" scsi: ufs: Try harder to change the power mode Revert "Revert drm/amd/display: Enable Freesync Video Mode by default" ARM: dts: imx: Set default tuning step for imx7d usdhc ALSA: hda/realtek: Enable 4 amplifiers instead of 2 on a HP platform powerpc/boot: Disable power10 features after BOOTAFLAGS assignment media: uapi: HEVC: Add num_delta_pocs_of_ref_rps_idx field Revert "MIPS: unhide PATA_PLATFORM" phy: qcom-snps-femto-v2: use qcom_snps_hsphy_suspend/resume error code media: amphion: use dev_err_probe media: pulse8-cec: handle possible ping error media: pci: cx23885: fix error handling for cx23885 ATSC boards 9p: virtio: fix unlikely null pointer deref in handle_rerror 9p: virtio: make sure 'offs' is initialized in zc_request ksmbd: fix out of bounds in smb3_decrypt_req() ksmbd: validate session id and tree id in compound request ksmbd: no response from compound read ksmbd: fix out of bounds in init_smb2_rsp_hdr() ASoC: da7219: Flush pending AAD IRQ when suspending ASoC: da7219: Check for failure reading AAD IRQ events ASoC: nau8821: Add DMI quirk mechanism for active-high jack-detect ethernet: atheros: fix return value check in atl1c_tso_csum() m68k: Fix invalid .section syntax s390/dasd: use correct number of retries for ERP requests s390/dasd: fix hanging device after request requeue fs/nls: make load_nls() take a const parameter ASoC: rt5682-sdw: fix for JD event handling in ClockStop Mode0 ASoc: codecs: ES8316: Fix DMIC config ASoC: rt711: fix for JD event handling in ClockStop Mode0 ASoC: rt711-sdca: fix for JD event handling in ClockStop Mode0 ASoC: atmel: Fix the 8K sample parameter in I2SC master ALSA: usb-audio: Add quirk for Microsoft Modern Wireless Headset platform/x86: intel: hid: Always call BTNL ACPI method platform/x86/intel/hid: Add HP Dragonfly G2 to VGBS DMI quirks platform/x86: think-lmi: Use kfree_sensitive instead of kfree platform/x86: asus-wmi: Fix setting RGB mode on some TUF laptops platform/x86: huawei-wmi: Silence ambient light sensor drm/amd/smu: use AverageGfxclkFrequency* to replace previous GFX Curr Clock drm/amd/display: Guard DCN31 PHYD32CLK logic against chip family drm/amd/display: Exit idle optimizations before attempt to access PHY ovl: Always reevaluate the file signature for IMA ata: pata_arasan_cf: Use dev_err_probe() instead dev_err() in data_xfer() ALSA: usb-audio: Update for native DSD support quirks staging: fbtft: ili9341: use macro FBTFT_REGISTER_SPI_DRIVER security: keys: perform capable check only on privileged operations kprobes: Prohibit probing on CFI preamble symbol clk: fixed-mmio: make COMMON_CLK_FIXED_MMIO depend on HAS_IOMEM vmbus_testing: fix wrong python syntax for integer value comparison Revert "wifi: ath6k: silence false positive -Wno-dangling-pointer warning on GCC 12" net: dsa: microchip: KSZ9477 register regmap alignment to 32 bit boundaries net: annotate data-races around sk->sk_{rcv|snd}timeo net: usb: qmi_wwan: add Quectel EM05GV2 wifi: brcmfmac: Fix field-spanning write in brcmf_scan_params_v2_to_v1() powerpc/powermac: Use early_* IO variants in via_calibrate_decr() idmaengine: make FSL_EDMA and INTEL_IDMA64 depends on HAS_IOMEM platform/x86/amd/pmf: Fix unsigned comparison with less than zero scsi: lpfc: Remove reftag check in DIF paths scsi: qedi: Fix potential deadlock on &qedi_percpu->p_work_lock net: hns3: restore user pause configure when disable autoneg drm/amdgpu: Match against exact bootloader status wifi: cfg80211: remove links only on AP wifi: mac80211: Use active_links instead of valid_links in Tx netlabel: fix shift wrapping bug in netlbl_catmap_setlong() bnx2x: fix page fault following EEH recovery cifs: fix sockaddr comparison in iface_cmp cifs: fix max_credits implementation sctp: handle invalid error codes without calling BUG() scsi: aacraid: Reply queue mapping to CPUs based on IRQ affinity scsi: storvsc: Always set no_report_opcodes scsi: lpfc: Fix incorrect big endian type assignment in bsg loopback path LoongArch: Let pmd_present() return true when splitting pmd LoongArch: Fix the write_fcsr() macro ALSA: seq: oss: Fix racy open/close of MIDI devices net: sfp: handle 100G/25G active optical cables in sfp_parse_support tracing: Introduce pipe_cpumask to avoid race on trace_pipes platform/mellanox: Fix mlxbf-tmfifo not handling all virtio CONSOLE notifications of: property: Simplify of_link_to_phandle() cpufreq: intel_pstate: set stale CPU frequency to minimum crypto: rsa-pkcs1pad - Use helper to set reqsize tpm: Enable hwrng only for Pluton on AMD CPUs KVM: x86/mmu: Use kstrtobool() instead of strtobool() KVM: x86/mmu: Add "never" option to allow sticky disabling of nx_huge_pages net: Avoid address overwrite in kernel_connect drm/amd/display: ensure async flips are only accepted for fast updates udf: Check consistency of Space Bitmap Descriptor udf: Handle error when adding extent to a file Input: i8042 - add quirk for TUXEDO Gemini 17 Gen1/Clevo PD70PN Revert "PCI: tegra194: Enable support for 256 Byte payload" Revert "net: macsec: preserve ingress frame ordering" tools lib subcmd: Add install target tools lib subcmd: Make install_headers clearer tools lib subcmd: Add dependency test to install_headers tools/resolve_btfids: Use pkg-config to locate libelf tools/resolve_btfids: Install subcmd headers tools/resolve_btfids: Alter how HOSTCC is forced tools/resolve_btfids: Compile resolve_btfids as host program tools/resolve_btfids: Tidy HOST_OVERRIDES tools/resolve_btfids: Pass HOSTCFLAGS as EXTRA_CFLAGS to prepare targets tools/resolve_btfids: Fix setting HOSTCFLAGS reiserfs: Check the return value from __getblk() eventfd: prevent underflow for eventfd semaphores fs: Fix error checking for d_hash_and_lookup() iomap: Remove large folio handling in iomap_invalidate_folio() tmpfs: verify {g,u}id mount options correctly selftests/harness: Actually report SKIP for signal tests vfs, security: Fix automount superblock LSM init problem, preventing NFS sb sharing ARM: ptrace: Restore syscall restart tracing ARM: ptrace: Restore syscall skipping for tracers refscale: Fix uninitalized use of wait_queue_head_t OPP: Fix passing 0 to PTR_ERR in _opp_attach_genpd() selftests/resctrl: Add resctrl.h into build deps selftests/resctrl: Don't leak buffer in fill_cache() selftests/resctrl: Unmount resctrl FS if child fails to run benchmark selftests/resctrl: Close perf value read fd on errors arm64/ptrace: Clean up error handling path in sve_set_common() sched/psi: Select KERNFS as needed x86/decompressor: Don't rely on upper 32 bits of GPRs being preserved arm64/sme: Don't use streaming mode to probe the maximum SME VL arm64/fpsimd: Only provide the length to cpufeature for xCR registers sched/rt: Fix sysctl_sched_rr_timeslice intial value perf/imx_ddr: don't enable counter0 if none of 4 counters are used selftests/futex: Order calls to futex_lock_pi s390/pkey: fix/harmonize internal keyblob headers s390/pkey: fix PKEY_TYPE_EP11_AES handling in PKEY_GENSECK2 IOCTL s390/pkey: fix PKEY_TYPE_EP11_AES handling for sysfs attributes s390/paes: fix PKEY_TYPE_EP11_AES handling for secure keyblobs irqchip/loongson-eiointc: Fix return value checking of eiointc_index ACPI: x86: s2idle: Post-increment variables when getting constraints ACPI: x86: s2idle: Fix a logic error parsing AMD constraints table thermal/of: Fix potential uninitialized value access cpufreq: amd-pstate-ut: Remove module parameter access cpufreq: amd-pstate-ut: Fix kernel panic when loading the driver x86/efistub: Fix PCI ROM preservation in mixed mode cpufreq: powernow-k8: Use related_cpus instead of cpus in driver.exit() selftests/bpf: Fix bpf_nf failure upon test rerun bpftool: use a local copy of perf_event to fix accessing :: Bpf_cookie bpftool: Define a local bpf_perf_link to fix accessing its fields bpftool: Use a local copy of BPF_LINK_TYPE_PERF_EVENT in pid_iter.bpf.c bpftool: Use a local bpf_perf_event_value to fix accessing its fields libbpf: Fix realloc API handling in zero-sized edge cases bpf: Clear the probe_addr for uprobe bpf: Fix an error in verifying a field in a union crypto: qat - change value of default idle filter tcp: tcp_enter_quickack_mode() should be static hwrng: nomadik - keep clock enabled while hwrng is registered hwrng: pic32 - use devm_clk_get_enabled regmap: rbtree: Use alloc_flags for memory allocations wifi: rtw89: debug: Fix error handling in rtw89_debug_priv_btc_manual_set() wifi: mt76: mt7921: fix non-PSC channel scan fail udp: re-score reuseport groups when connected sockets are present bpf: reject unhashed sockets in bpf_sk_assign wifi: mt76: testmode: add nla_policy for MT76_TM_ATTR_TX_LENGTH spi: tegra20-sflash: fix to check return value of platform_get_irq() in tegra_sflash_probe() can: gs_usb: gs_usb_receive_bulk_callback(): count RX overflow errors also in case of OOM wifi: mt76: mt7915: fix power-limits while chan_switch wifi: mwifiex: Fix OOB and integer underflow when rx packets wifi: mwifiex: fix error recovery in PCIE buffer descriptor management selftests/bpf: fix static assert compilation issue for test_cls_*.c kbuild: rust_is_available: remove -v option kbuild: rust_is_available: fix version check when CC has multiple arguments kbuild: rust_is_available: add check for `bindgen` invocation kbuild: rust_is_available: fix confusion when a version appears in the path crypto: stm32 - Properly handle pm_runtime_get failing crypto: api - Use work queue in crypto_destroy_instance Bluetooth: nokia: fix value check in nokia_bluetooth_serdev_probe() Bluetooth: Fix potential use-after-free when clear keys Bluetooth: hci_sync: Don't double print name in add/remove adv_monitor Bluetooth: hci_sync: Avoid use-after-free in dbg for hci_add_adv_monitor() net: tcp: fix unexcepted socket die when snd_wnd is 0 selftests/bpf: Fix repeat option when kfunc_call verification fails selftests/bpf: Clean up fmod_ret in bench_rename test script net-memcg: Fix scope of sockmem pressure indicators ice: ice_aq_check_events: fix off-by-one check when filling buffer crypto: caam - fix unchecked return value error hwrng: iproc-rng200 - Implement suspend and resume calls lwt: Fix return values of BPF xmit ops lwt: Check LWTUNNEL_XMIT_CONTINUE strictly fs: ocfs2: namei: check return value of ocfs2_add_entry() net: annotate data-races around sk->sk_lingertime wifi: mwifiex: fix memory leak in mwifiex_histogram_read() wifi: mwifiex: Fix missed return in oob checks failed path ARM: dts: Add .dts files missing from the build samples/bpf: fix bio latency check with tracepoint samples/bpf: fix broken map lookup probe wifi: ath9k: fix races between ath9k_wmi_cmd and ath9k_wmi_ctrl_rx wifi: ath9k: protect WMI command response buffer replacement with a lock wifi: nl80211/cfg80211: add forgotten nla_policy for BSS color attribute mac80211: make ieee80211_tx_info padding explicit wifi: mwifiex: avoid possible NULL skb pointer dereference Bluetooth: btusb: Do not call kfree_skb() under spin_lock_irqsave() arm64: mm: use ptep_clear() instead of pte_clear() in clear_flush() wifi: ath9k: use IS_ERR() with debugfs_create_dir() ice: avoid executing commands on other ports when driving sync net: arcnet: Do not call kfree_skb() under local_irq_disable() mlxsw: i2c: Fix chunk size setting in output mailbox buffer mlxsw: i2c: Limit single transaction buffer size mlxsw: core_hwmon: Adjust module label names based on MTCAP sensor counter hwmon: (tmp513) Fix the channel number in tmp51x_is_visible() octeontx2-pf: Refactor schedular queue alloc/free calls octeontx2-pf: Fix PFC TX scheduler free cteonxt2-pf: Fix backpressure config for multiple PFC priorities to work simultaneously sfc: Check firmware supports Ethernet PTP filter net/sched: sch_hfsc: Ensure inner classes have fsc curve netrom: Deny concurrent connect(). drm/bridge: tc358764: Fix debug print parameter order ASoC: cs43130: Fix numerator/denominator mixup quota: factor out dquot_write_dquot() quota: rename dquot_active() to inode_quota_active() quota: add new helper dquot_active() quota: fix dqput() to follow the guarantees dquot_srcu should provide drm/amd/display: Do not set drr on pipe commit drm/hyperv: Fix a compilation issue because of not including screen_info.h ASoC: stac9766: fix build errors with REGMAP_AC97 soc: qcom: ocmem: Add OCMEM hardware version print soc: qcom: ocmem: Fix NUM_PORTS & NUM_MACROS macros arm64: dts: qcom: sm6350: Fix ZAP region arm64: dts: qcom: sm8250: correct dynamic power coefficients arm64: dts: qcom: msm8916-l8150: correct light sensor VDDIO supply arm64: dts: qcom: sm8250-edo: Add gpio line names for TLMM arm64: dts: qcom: sm8250-edo: Add GPIO line names for PMIC GPIOs arm64: dts: qcom: sm8250-edo: Rectify gpio-keys arm64: dts: qcom: sc8280xp-crd: Correct vreg_misc_3p3 GPIO arm64: dts: qcom: sc8280xp: Add missing SCM interconnect arm64: dts: qcom: msm8996: Add missing interrupt to the USB2 controller arm64: dts: qcom: sdm845-tama: Set serial indices and stdout-path arm64: dts: qcom: sm8350: Fix CPU idle state residency times arm64: dts: qcom: sm8350: Add missing LMH interrupts to cpufreq arm64: dts: qcom: sm8350: Use proper CPU compatibles arm64: dts: qcom: pm8350: fix thermal zone name arm64: dts: qcom: pm8350b: fix thermal zone name arm64: dts: qcom: pmr735b: fix thermal zone name arm64: dts: qcom: pmk8350: fix ADC-TM compatible string arm64: dts: qcom: sm8250: Mark PCIe hosts as DMA coherent ARM: dts: stm32: Rename mdio0 to mdio ARM: dts: stm32: YAML validation fails for Argon Boards ARM: dts: stm32: adopt generic iio bindings for adc channels on emstamp-argon ARM: dts: stm32: Add missing detach mailbox for emtrion emSBC-Argon ARM: dts: stm32: YAML validation fails for Odyssey Boards ARM: dts: stm32: Add missing detach mailbox for Odyssey SoM ARM: dts: stm32: Update to generic ADC channel binding on DHSOM systems ARM: dts: stm32: Add missing detach mailbox for DHCOM SoM firmware: ti_sci: Use system_state to determine polling drm/amdgpu: avoid integer overflow warning in amdgpu_device_resize_fb_bar() ARM: dts: BCM53573: Drop nonexistent #usb-cells ARM: dts: BCM53573: Add cells sizes to PCIe node ARM: dts: BCM53573: Use updated "spi-gpio" binding properties arm64: tegra: Fix HSUART for Jetson AGX Orin arm64: dts: qcom: sm8250-sony-xperia: correct GPIO keys wakeup again arm64: dts: qcom: pm6150l: Add missing short interrupt arm64: dts: qcom: pm660l: Add missing short interrupt arm64: dts: qcom: pmi8994: Add missing OVP interrupt arm64: tegra: Fix HSUART for Smaug drm/etnaviv: fix dumping of active MMU context block: cleanup queue_wc_store block: don't allow enabling a cache on devices that don't support it x86/mm: Fix PAT bit missing from page protection modify mask drm/bridge: anx7625: Use common macros for DP power sequencing commands drm/bridge: anx7625: Use common macros for HDCP capabilities ARM: dts: samsung: s3c6410-mini6410: correct ethernet reg addresses (split) ARM: dts: s5pv210: add dummy 5V regulator for backlight on SMDKv210 ARM: dts: samsung: s5pv210-smdkv210: correct ethernet reg addresses (split) drm: adv7511: Fix low refresh rate register for ADV7533/5 ARM: dts: BCM53573: Fix Ethernet info for Luxul devices arm64: dts: qcom: sdm845: Add missing RPMh power domain to GCC arm64: dts: qcom: sdm845: Fix the min frequency of "ice_core_clk" arm64: dts: qcom: msm8996-gemini: fix touchscreen VIO supply drm/amdgpu: Update min() to min_t() in 'amdgpu_info_ioctl' md: Factor out is_md_suspended helper md: Change active_io to percpu md: restore 'noio_flag' for the last mddev_resume() md/raid10: factor out dereference_rdev_and_rrdev() md/raid10: use dereference_rdev_and_rrdev() to get devices md/md-bitmap: remove unnecessary local variable in backlog_store() md/md-bitmap: hold 'reconfig_mutex' in backlog_store() drm/msm: Update dev core dump to not print backwards drm/tegra: dpaux: Fix incorrect return value of platform_get_irq of: unittest: fix null pointer dereferencing in of_unittest_find_node_by_name() arm64: dts: qcom: sm8150: Fix the I2C7 interrupt ARM: dts: BCM53573: Fix Tenda AC9 switch CPU port drm/armada: Fix off-by-one error in armada_overlay_get_property() drm/repaper: Reduce temporary buffer size in repaper_fb_dirty() drm/panel: simple: Add missing connector type and pixel format for AUO T215HVN01 ima: Remove deprecated IMA_TRUSTED_KEYRING Kconfig drm: xlnx: zynqmp_dpsub: Add missing check for dma_set_mask soc: qcom: smem: Fix incompatible types in comparison drm/msm/mdp5: Don't leak some plane state firmware: meson_sm: fix to avoid potential NULL pointer dereference drm/msm/dpu: fix the irq index in dpu_encoder_phys_wb_wait_for_commit_done smackfs: Prevent underflow in smk_set_cipso() drm/amd/pm: fix variable dereferenced issue in amdgpu_device_attr_create() drm/msm/a2xx: Call adreno_gpu_init() earlier audit: fix possible soft lockup in __audit_inode_child() block/mq-deadline: use correct way to throttling write requests io_uring: fix drain stalls by invalid SQE drm/mediatek: dp: Add missing error checks in mtk_dp_parse_capabilities bus: ti-sysc: Fix build warning for 64-bit build drm/mediatek: Remove freeing not dynamic allocated memory ARM: dts: qcom: ipq4019: correct SDHCI XO clock drm/mediatek: Fix potential memory leak if vmap() fail arm64: dts: qcom: apq8016-sbc: Fix ov5640 regulator supply names arm64: dts: qcom: msm8998: Drop bus clock reference from MMSS SMMU arm64: dts: qcom: msm8998: Add missing power domain to MMSS SMMU arm64: dts: qcom: msm8996: Fix dsi1 interrupts arm64: dts: qcom: sc8280xp-x13s: Unreserve NC pins bus: ti-sysc: Fix cast to enum warning md/raid5-cache: fix a deadlock in r5l_exit_log() md/raid5-cache: fix null-ptr-deref for r5l_flush_stripe_to_raid() firmware: cs_dsp: Fix new control name check md: add error_handlers for raid0 and linear md/raid0: Factor out helper for mapping and submitting a bio md/raid0: Fix performance regression for large sequential writes md: raid0: account for split bio in iostat accounting ASoC: SOF: amd: clear dsp to host interrupt status of: overlay: Call of_changeset_init() early of: unittest: Fix overlay type in apply/revert check ALSA: ac97: Fix possible error value of *rac97 ipmi:ssif: Add check for kstrdup ipmi:ssif: Fix a memory leak when scanning for an adapter clk: qcom: gpucc-sm6350: Introduce index-based clk lookup clk: qcom: gpucc-sm6350: Fix clock source names clk: qcom: gcc-sc8280xp: Add EMAC GDSCs clk: qcom: gcc-sc8280xp: Add missing GDSC flags dt-bindings: clock: qcom,gcc-sc8280xp: Add missing GDSCs clk: qcom: gcc-sc8280xp: Add missing GDSCs clk: rockchip: rk3568: Fix PLL rate setting for 78.75MHz PCI: apple: Initialize pcie->nvecs before use PCI: qcom-ep: Switch MHI bus master clock off during L1SS drivers: clk: keystone: Fix parameter judgment in _of_pll_clk_init() PCI/DOE: Fix destroy_work_on_stack() race clk: sunxi-ng: Modify mismatched function name clk: qcom: gcc-sc7180: Fix up gcc_sdcc2_apps_clk_src EDAC/igen6: Fix the issue of no error events ext4: correct grp validation in ext4_mb_good_group ext4: avoid potential data overflow in next_linear_group clk: qcom: gcc-sm8250: Fix gcc_sdcc2_apps_clk_src kvm/vfio: Prepare for accepting vfio device fd kvm/vfio: ensure kvg instance stays around in kvm_vfio_group_add() clk: qcom: reset: Use the correct type of sleep/delay based on length clk: qcom: gcc-sm6350: Fix gcc_sdcc2_apps_clk_src PCI: microchip: Correct the DED and SEC interrupt bit offsets PCI: Mark NVIDIA T4 GPUs to avoid bus reset pinctrl: mcp23s08: check return value of devm_kasprintf() PCI: Allow drivers to request exclusive config regions PCI: Add locking to RMW PCI Express Capability Register accessors PCI: pciehp: Use RMW accessors for changing LNKCTL PCI/ASPM: Use RMW accessors for changing LNKCTL clk: qcom: gcc-sm8450: Use floor ops for SDCC RCGs clk: imx: pllv4: Fix SPLL2 MULT range clk: imx: imx8ulp: update SPLL2 type clk: imx8mp: fix sai4 clock clk: imx: composite-8m: fix clock pauses when set_rate would be a no-op powerpc/radix: Move some functions into #ifdef CONFIG_KVM_BOOK3S_HV_POSSIBLE vfio/type1: fix cap_migration information leak nvdimm: Fix memleak of pmu attr_groups in unregister_nvdimm_pmu() nvdimm: Fix dereference after free in register_nvdimm_pmu() powerpc/fadump: reset dump area size if fadump memory reserve fails powerpc/perf: Convert fsl_emb notifier to state machine callbacks drm/amdgpu: Use RMW accessors for changing LNKCTL drm/radeon: Use RMW accessors for changing LNKCTL net/mlx5: Use RMW accessors for changing LNKCTL wifi: ath11k: Use RMW accessors for changing LNKCTL wifi: ath10k: Use RMW accessors for changing LNKCTL NFSv4.2: Rework scratch handling for READ_PLUS NFSv4.2: Fix READ_PLUS smatch warnings NFSv4.2: Fix up READ_PLUS alignment NFSv4.2: Fix READ_PLUS size calculations powerpc: Don't include lppaca.h in paca.h powerpc/pseries: Rework lppaca_shared_proc() to avoid DEBUG_PREEMPT nfs/blocklayout: Use the passed in gfp flags powerpc/pseries: Fix hcall tracepoints with JUMP_LABEL=n powerpc/mpc5xxx: Add missing fwnode_handle_put() powerpc/iommu: Fix notifiers being shared by PCI and VIO buses ext4: fix unttached inode after power cut with orphan file feature enabled jfs: validate max amount of blocks before allocation. fs: lockd: avoid possible wrong NULL parameter NFSD: da_addr_body field missing in some GETDEVICEINFO replies NFS: Guard against READDIR loop when entry names exceed MAXNAMELEN NFSv4.2: fix handling of COPY ERR_OFFLOAD_NO_REQ pNFS: Fix assignment of xprtdata.cred cgroup/cpuset: Inherit parent's load balance state in v2 RDMA/qedr: Remove a duplicate assignment in irdma_query_ah() media: ov5640: fix low resolution image abnormal issue media: ad5820: Drop unsupported ad5823 from i2c_ and of_device_id tables media: i2c: tvp5150: check return value of devm_kasprintf() media: v4l2-core: Fix a potential resource leak in v4l2_fwnode_parse_link() iommu/amd/iommu_v2: Fix pasid_state refcount dec hit 0 warning on pasid unbind iommu: rockchip: Fix directory table address encoding drivers: usb: smsusb: fix error handling code in smsusb_init_device media: dib7000p: Fix potential division by zero media: dvb-usb: m920x: Fix a potential memory leak in m920x_i2c_xfer() media: cx24120: Add retval check for cx24120_message_send() RDMA/siw: Fabricate a GID on tun and loopback devices scsi: hisi_sas: Fix warnings detected by sparse scsi: hisi_sas: Fix normally completed I/O analysed as failed dt-bindings: extcon: maxim,max77843: restrict connector properties media: amphion: reinit vpu if reqbufs output 0 media: amphion: add helper function to get id name media: mtk-jpeg: Fix use after free bug due to uncanceled work media: rkvdec: increase max supported height for H.264 media: amphion: fix CHECKED_RETURN issues reported by coverity media: amphion: fix REVERSE_INULL issues reported by coverity media: amphion: fix UNINIT issues reported by coverity media: amphion: fix UNUSED_VALUE issue reported by coverity media: amphion: ensure the bitops don't cross boundaries media: mediatek: vcodec: Return NULL if no vdec_fb is found media: mediatek: vcodec: fix potential double free media: mediatek: vcodec: fix resource leaks in vdec_msg_queue_init() usb: phy: mxs: fix getting wrong state with mxs_phy_is_otg_host() scsi: RDMA/srp: Fix residual handling scsi: iscsi: Rename iscsi_set_param() to iscsi_if_set_param() scsi: iscsi: Add length check for nlattr payload scsi: iscsi: Add strlen() check in iscsi_if_set{_host}_param() scsi: be2iscsi: Add length check when parsing nlattrs scsi: qla4xxx: Add length check when parsing nlattrs iio: accel: adxl313: Fix adxl313_i2c_id[] table serial: sprd: Assign sprd_port after initialized to avoid wrong access serial: sprd: Fix DMA buffer leak issue x86/APM: drop the duplicate APM_MINOR_DEV macro RDMA/rxe: Split rxe_run_task() into two subroutines RDMA/rxe: Fix incomplete state save in rxe_requester scsi: qedf: Do not touch __user pointer in qedf_dbg_stop_io_on_error_cmd_read() directly scsi: qedf: Do not touch __user pointer in qedf_dbg_debug_cmd_read() directly scsi: qedf: Do not touch __user pointer in qedf_dbg_fp_int_cmd_read() directly RDMA/irdma: Replace one-element array with flexible-array member coresight: tmc: Explicit type conversions to prevent integer overflow interconnect: qcom: qcm2290: Enable sync state dma-buf/sync_file: Fix docs syntax driver core: test_async: fix an error code driver core: Call dma_cleanup() on the test_remove path kernfs: add stub helper for kernfs_generic_poll() extcon: cht_wc: add POWER_SUPPLY dependency iommu/mediatek: Remove unused "mapping" member from mtk_iommu_data iommu/mediatek: Fix two IOMMU share pagetable issue iommu/sprd: Add missing force_aperture RDMA/hns: Fix port active speed RDMA/hns: Fix incorrect post-send with direct wqe of wr-list RDMA/hns: Fix inaccurate error label name in init instance RDMA/hns: Fix CQ and QP cache affinity IB/uverbs: Fix an potential error pointer dereference fsi: aspeed: Reset master errors after CFAM reset iommu/qcom: Disable and reset context bank before programming iommu/vt-d: Fix to flush cache of PASID directory table platform/x86: dell-sysman: Fix reference leak media: cec: core: add adap_nb_transmit_canceled() callback media: cec: core: add adap_unconfigured() callback media: go7007: Remove redundant if statement media: venus: hfi_venus: Only consider sys_idle_indicator on V1 docs: ABI: fix spelling/grammar in SBEFIFO timeout interface USB: gadget: core: Add missing kerneldoc for vbus_work USB: gadget: f_mass_storage: Fix unused variable warning drivers: base: Free devm resources when unregistering a device HID: input: Support devices sending Eraser without Invert media: ov5640: Enable MIPI interface in ov5640_set_power_mipi() media: ov5640: Fix initial RESETB state and annotate timings media: i2c: ov2680: Set V4L2_CTRL_FLAG_MODIFY_LAYOUT on flips media: ov2680: Remove auto-gain and auto-exposure controls media: ov2680: Fix ov2680_bayer_order() media: ov2680: Fix vflip / hflip set functions media: ov2680: Remove VIDEO_V4L2_SUBDEV_API ifdef-s media: ov2680: Don't take the lock for try_fmt calls media: ov2680: Add ov2680_fill_format() helper function media: ov2680: Fix ov2680_set_fmt() which == V4L2_SUBDEV_FORMAT_TRY not working media: ov2680: Fix regulators being left enabled on ov2680_power_on() errors media: i2c: rdacm21: Fix uninitialized value f2fs: fix to avoid mmap vs set_compress_option case f2fs: judge whether discard_unit is section only when have CONFIG_BLK_DEV_ZONED f2fs: Only lfs mode is allowed with zoned block device feature Revert "f2fs: fix to do sanity check on extent cache correctly" cgroup:namespace: Remove unused cgroup_namespaces_init() coresight: trbe: Fix TRBE potential sleep in atomic context RDMA/irdma: Prevent zero-length STAG registration scsi: core: Use 32-bit hostnum in scsi_host_lookup() scsi: fcoe: Fix potential deadlock on &fip->ctlr_lock interconnect: qcom: sm8450: Enable sync_state interconnect: qcom: bcm-voter: Improve enable_mask handling interconnect: qcom: bcm-voter: Use enable_maks for keepalive voting serial: tegra: handle clk prepare error in tegra_uart_hw_init() amba: bus: fix refcount leak Revert "IB/isert: Fix incorrect release of isert connection" RDMA/siw: Balance the reference of cep->kref in the error path RDMA/siw: Correct wrong debug message RDMA/efa: Fix wrong resources deallocation order HID: logitech-dj: Fix error handling in logi_dj_recv_switch_to_dj_mode() HID: uclogic: Correct devm device reference for hidinput input_dev name HID: multitouch: Correct devm device reference for hidinput input_dev name platform/x86/amd/pmf: Fix a missing cleanup path tick/rcu: Fix false positive "softirq work is pending" messages x86/speculation: Mark all Skylake CPUs as vulnerable to GDS tracing: Remove extra space at the end of hwlat_detector/mode tracing: Fix race issue between cpu buffer write and swap mtd: rawnand: brcmnand: Fix mtd oobsize dmaengine: idxd: Modify the dependence of attribute pasid_enabled phy/rockchip: inno-hdmi: use correct vco_div_5 macro on rk3328 phy/rockchip: inno-hdmi: round fractal pixclock in rk3328 recalc_rate phy/rockchip: inno-hdmi: do not power on rk3328 post pll on reg write rpmsg: glink: Add check for kstrdup leds: pwm: Fix error code in led_pwm_create_fwnode() leds: multicolor: Use rounded division when calculating color components leds: Fix BUG_ON check for LED_COLOR_ID_MULTI that is always false leds: trigger: tty: Do not use LED_ON/OFF constants, use led_blink_set_oneshot instead mtd: spi-nor: Check bus width while setting QE bit mtd: rawnand: fsmc: handle clk prepare error in fsmc_nand_resume() um: Fix hostaudio build errors dmaengine: ste_dma40: Add missing IRQ check in d40_probe Drivers: hv: vmbus: Don't dereference ACPI root object handle cpufreq: Fix the race condition while updating the transition_task of policy virtio_ring: fix avail_wrap_counter in virtqueue_add_packed igmp: limit igmpv3_newpack() packet size to IP_MAX_MTU netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c netfilter: nft_exthdr: Fix non-linear header modification netfilter: xt_u32: validate user space input netfilter: xt_sctp: validate the flag_info count skbuff: skb_segment, Call zero copy functions before using skbuff frags igb: set max size RX buffer when store bad packet is enabled PM / devfreq: Fix leak in devfreq_dev_release() ALSA: pcm: Fix missing fixup call in compat hw_refine ioctl rcu: dump vmalloc memory info safely printk: ringbuffer: Fix truncating buffer size min_t cast scsi: core: Fix the scsi_set_resid() documentation mm/vmalloc: add a safer version of find_vm_area() for debug cpu/hotplug: Prevent self deadlock on CPU hot-unplug media: i2c: ccs: Check rules is non-NULL media: i2c: Add a camera sensor top level menu PCI: rockchip: Use 64-bit mask on MSI 64-bit PCI address ipmi_si: fix a memleak in try_smi_init() ARM: OMAP2+: Fix -Warray-bounds warning in _pwrdm_state_switch() XArray: Do not return sibling entries from xa_load() io_uring: break iopolling on signal backlight/gpio_backlight: Compare against struct fb_info.device backlight/bd6107: Compare against struct fb_info.device backlight/lv5207lp: Compare against struct fb_info.device drm/amd/display: register edp_backlight_control() for DCN301 xtensa: PMU: fix base address for the newer hardware LoongArch: mm: Add p?d_leaf() definitions i3c: master: svc: fix probe failure when no i3c device exist arm64: csum: Fix OoB access in IP checksum code for negative lengths ALSA: hda/cirrus: Fix broken audio on hardware with two CS42L42 codecs. media: dvb: symbol fixup for dvb_attach() media: venus: hfi_venus: Write to VIDC_CTRL_INIT after unmasking interrupts Revert "scsi: qla2xxx: Fix buffer overrun" scsi: mpt3sas: Perform additional retries if doorbell read returns 0 PCI: Free released resource after coalescing PCI: hv: Fix a crash in hv_pci_restore_msi_msg() during hibernation PCI/PM: Only read PCI_PM_CTRL register when available ntb: Drop packets when qp link is down ntb: Clean up tx tail index on link down ntb: Fix calculation ntb_transport_tx_free_entry() Revert "PCI: Mark NVIDIA T4 GPUs to avoid bus reset" block: don't add or resize partition on the disk with GENHD_FL_NO_PART procfs: block chmod on /proc/thread-self/comm parisc: Fix /proc/cpuinfo output for lscpu drm/amd/display: Add smu write msg id fail retry process bpf: Fix issue in verifying allow_ptr_leaks dlm: fix plock lookup when using multiple lockspaces dccp: Fix out of bounds access in DCCP error handler x86/sev: Make enc_dec_hypercall() accept a size instead of npages r8169: fix ASPM-related issues on a number of systems with NIC version from RTL8168h X.509: if signature is unsupported skip validation net: handle ARPHRD_PPP in dev_is_mac_header_xmit() fsverity: skip PKCS#7 parser when keyring is empty x86/MCE: Always save CS register on AMD Zen IF Poison errors platform/chrome: chromeos_acpi: print hex string for ACPI_TYPE_BUFFER mmc: renesas_sdhi: register irqs before registering controller pstore/ram: Check start of empty przs during init arm64: sdei: abort running SDEI handlers during crash s390/dcssblk: fix kernel crash with list_add corruption s390/ipl: add missing secure/has_secure file to ipl type 'unknown' s390/dasd: fix string length handling crypto: stm32 - fix loop iterating through scatterlist for DMA cpufreq: brcmstb-avs-cpufreq: Fix -Warray-bounds bug of: property: fw_devlink: Add a devlink for panel followers usb: typec: tcpm: set initial svdm version based on pd revision usb: typec: bus: verify partner exists in typec_altmode_attention USB: core: Unite old scheme and new scheme descriptor reads USB: core: Change usb_get_device_descriptor() API USB: core: Fix race by not overwriting udev->descriptor in hub_port_init() USB: core: Fix oversight in SuperSpeed initialization x86/sgx: Break up long non-preemptible delays in sgx_vepc_release() perf/x86/uncore: Correct the number of CHAs on EMR serial: sc16is7xx: remove obsolete out_thread label serial: sc16is7xx: fix regression with GPIO configuration tracing: Zero the pipe cpumask on alloc to avoid spurious -EBUSY Revert "drm/amd/display: Do not set drr on pipe commit" md: Free resources in __md_stop NFSv4.2: Fix a potential double free with READ_PLUS NFSv4.2: Rework scratch handling for READ_PLUS (again) md: fix regression for null-ptr-deference in __md_stop() clk: Mark a fwnode as initialized when using CLK_OF_DECLARE() macro treewide: Fix probing of devices in DT overlays clk: Avoid invalid function names in CLK_OF_DECLARE() udf: initialize newblock to 0 Linux 6.1.53 Change-Id: I6f5858bce0f20963ae42515eac36ac14cb686f24 Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>	2023-09-18 09:57:37 +00:00
Stefan Hajnoczi	f6f300ecc1	vfio/type1: fix cap_migration information leak ... [ Upstream commit cd24e2a60af633f157d7e59c0a6dba64f131c0b1 ] Fix an information leak where an uninitialized hole in struct vfio_iommu_type1_info_cap_migration on the stack is exposed to userspace. The definition of struct vfio_iommu_type1_info_cap_migration contains a hole as shown in this pahole(1) output: struct vfio_iommu_type1_info_cap_migration { struct vfio_info_cap_header header; /* 0 8 */ __u32 flags; /* 8 4 */ /* XXX 4 bytes hole, try to pack */ __u64 pgsize_bitmap; /* 16 8 */ __u64 max_dirty_bitmap_size; /* 24 8 */ /* size: 32, cachelines: 1, members: 4 */ /* sum members: 28, holes: 1, sum holes: 4 */ /* last cacheline: 32 bytes */ }; The cap_mig variable is filled in without initializing the hole: static int vfio_iommu_migration_build_caps(struct vfio_iommu *iommu, struct vfio_info_cap *caps) { struct vfio_iommu_type1_info_cap_migration cap_mig; cap_mig.header.id = VFIO_IOMMU_TYPE1_INFO_CAP_MIGRATION; cap_mig.header.version = 1; cap_mig.flags = 0; /* support minimum pgsize */ cap_mig.pgsize_bitmap = (size_t)1 << __ffs(iommu->pgsize_bitmap); cap_mig.max_dirty_bitmap_size = DIRTY_BITMAP_SIZE_MAX; return vfio_info_add_capability(caps, &cap_mig.header, sizeof(cap_mig)); } The structure is then copied to a temporary location on the heap. At this point it's already too late and ioctl(VFIO_IOMMU_GET_INFO) copies it to userspace later: int vfio_info_add_capability(struct vfio_info_cap *caps, struct vfio_info_cap_header *cap, size_t size) { struct vfio_info_cap_header *header; header = vfio_info_cap_add(caps, size, cap->id, cap->version); if (IS_ERR(header)) return PTR_ERR(header); memcpy(header + 1, cap + 1, size - sizeof(*header)); return 0; } This issue was found by code inspection. Signed-off-by: Stefan Hajnoczi <stefanha@redhat.com> Reviewed-by: Kevin Tian <kevin.tian@intel.com> Fixes: ad721705d0 ("vfio iommu: Add migration capability to report supported features") Link: https://lore.kernel.org/r/20230801155352.1391945-1-stefanha@redhat.com Signed-off-by: Alex Williamson <alex.williamson@redhat.com> Signed-off-by: Sasha Levin <sashal@kernel.org>	2023-09-13 09:42:47 +02:00
Greg Kroah-Hartman	b435525822	This is the 6.1.39 stable release ... -----BEGIN PGP SIGNATURE----- iQIzBAABCAAdFiEEZH8oZUiU471FcZm+ONu9yGCSaT4FAmS38qMACgkQONu9yGCS aT56yQ//ZuDuw8Ev3HISVgZhE9FpuXC1RSYXiMCAvwA9rH3KnJ4wKVPEhEWLy9P4 jdJaatSLbLOvA7ME7JnwZxz2qahjBxo1tpx6u2S3zrzz4UlAPNLwCxTxxp4X07VI 3fBNvsmucqFSayCrA8t9xgkaJizuCvHZm7eSoyVIigPwbB5igc2b+bNSRcx1Zo+j SHl4Y4nGK8a47XU9RSlDLVKow0/6rrQLHQ9DLpxACArRHw3h451vD0DMcgOuU/Uv 6qq9u3COcdVw3oc5VENu9XklPmvQkxo3RaCUHyRadVstuc0H/BBUDvEhPn5PcVOV EdBWlTjmhsQo0aUziK4kotLNeX1VRgKa+rrIUBJn68OHv1SRRPZU/eJ8hkL81dCi FDPzXDOszixO7pPv1jj7O9kNcwKPuiHPmdaNPCY6jviOHhZnAEub44DpQamxWvU/ kb5MZRRY72wt9iWeI3kscCCSbf6eyjlmDMoYIeLuYn10n7gIDU80eUOBl9bqEsz/ X+OUxaY+XuKbCoucpNmSHHLmynJ5D0CXhl/5qnlgMoSo4UJ5BUIMj2e3ZqsKLfrR e/09MCRX79y9J+TxUunnQZfq5vBlH1tRsvUyhIfYfW4AaC9BrkOL2XZviQldKY6x FUmsxh62O3iGRtLOWDKQA5MwoJuD54qVcHr1iidWkO2G8T3ctCc= =kyUh -----END PGP SIGNATURE----- Merge 6.1.39 into android14-6.1-lts Changes in 6.1.39 drm: use mgr->dev in drm_dbg_kms in drm_dp_add_payload_part2 fs: pipe: reveal missing function protoypes block: Fix the type of the second bdev_op_is_zoned_write() argument erofs: clean up cached I/O strategies erofs: avoid tagged pointers to mark sync decompression erofs: remove tagged pointer helpers erofs: move zdata.h into zdata.c erofs: kill hooked chains to avoid loops on deduplicated compressed images x86/resctrl: Only show tasks' pid in current pid namespace blk-iocost: use spin_lock_irqsave in adjust_inuse_and_calc_cost x86/sev: Fix calculation of end address based on number of pages virt: sevguest: Add CONFIG_CRYPTO dependency blk-mq: fix potential io hang by wrong 'wake_batch' lockd: drop inappropriate svc_get() from locked_get() nvme-auth: rename __nvme_auth_[reset|free] to nvme_auth[reset|free]_dhchap nvme-auth: rename authentication work elements nvme-auth: remove symbol export from nvme_auth_reset nvme-auth: no need to reset chap contexts on re-authentication nvme-core: fix memory leak in dhchap_secret_store nvme-core: fix memory leak in dhchap_ctrl_secret nvme-auth: don't ignore key generation failures when initializing ctrl keys nvme-core: add missing fault-injection cleanup nvme-core: fix dev_pm_qos memleak md/raid10: check slab-out-of-bounds in md_bitmap_get_counter md/raid10: fix overflow of md/safe_mode_delay md/raid10: fix wrong setting of max_corr_read_errors md/raid10: fix null-ptr-deref of mreplace in raid10_sync_request md/raid10: fix io loss while replacement replace rdev md/raid1-10: factor out a helper to add bio to plug md/raid1-10: factor out a helper to submit normal write md/raid1-10: submit write io directly if bitmap is not enabled block: fix blktrace debugfs entries leakage irqchip/stm32-exti: Fix warning on initialized field overwritten irqchip/jcore-aic: Fix missing allocation of IRQ descriptors svcrdma: Prevent page release when nothing was received erofs: simplify iloc() erofs: fix compact 4B support for 16k block size posix-timers: Prevent RT livelock in itimer_delete() tick/rcu: Fix bogus ratelimit condition tracing/timer: Add missing hrtimer modes to decode_hrtimer_mode(). clocksource/drivers/cadence-ttc: Fix memory leak in ttc_timer_probe PM: domains: fix integer overflow issues in genpd_parse_state() perf/arm-cmn: Fix DTC reset x86/mm: Allow guest.enc_status_change_prepare() to fail x86/tdx: Fix race between set_memory_encrypted() and load_unaligned_zeropad() drivers/perf: hisi: Don't migrate perf to the CPU going to teardown powercap: RAPL: Fix CONFIG_IOSF_MBI dependency PM: domains: Move the verification of in-params from genpd_add_device() ARM: 9303/1: kprobes: avoid missing-declaration warnings cpufreq: intel_pstate: Fix energy_performance_preference for passive thermal/drivers/sun8i: Fix some error handling paths in sun8i_ths_probe() rcu: Make rcu_cpu_starting() rely on interrupts being disabled rcu-tasks: Stop rcu_tasks_invoke_cbs() from using never-onlined CPUs rcutorture: Correct name of use_softirq module parameter rcuscale: Move shutdown from wait_event() to wait_event_idle() rcu/rcuscale: Move rcu_scale_*() after kfree_scale_cleanup() rcu/rcuscale: Stop kfree_scale_thread thread(s) after unloading rcuscale kselftest: vDSO: Fix accumulation of uninitialized ret when CLOCK_REALTIME is undefined perf/ibs: Fix interface via core pmu events x86/mm: Fix __swp_entry_to_pte() for Xen PV guests locking/atomic: arm: fix sync ops evm: Complete description of evm_inode_setattr() evm: Fix build warnings ima: Fix build warnings pstore/ram: Add check for kstrdup igc: Enable and fix RX hash usage by netstack wifi: ath9k: fix AR9003 mac hardware hang check register offset calculation wifi: ath9k: avoid referencing uninit memory in ath9k_wmi_ctrl_rx libbpf: btf_dump_type_data_check_overflow needs to consider BTF_MEMBER_BITFIELD_SIZE samples/bpf: Fix buffer overflow in tcp_basertt spi: spi-geni-qcom: Correct CS_TOGGLE bit in SPI_TRANS_CFG wifi: wilc1000: fix for absent RSN capabilities WFA testcase wifi: mwifiex: Fix the size of a memory allocation in mwifiex_ret_802_11_scan() sctp: add bpf_bypass_getsockopt proto callback libbpf: fix offsetof() and container_of() to work with CO-RE bpf: Don't EFAULT for {g,s}setsockopt with wrong optlen spi: dw: Round of n_bytes to power of 2 nfc: llcp: fix possible use of uninitialized variable in nfc_llcp_send_connect() bpftool: JIT limited misreported as negative value on aarch64 bpf: Remove bpf trampoline selector bpf: Fix memleak due to fentry attach failure selftests/bpf: Do not use sign-file as testcase regulator: core: Fix more error checking for debugfs_create_dir() regulator: core: Streamline debugfs operations wifi: orinoco: Fix an error handling path in spectrum_cs_probe() wifi: orinoco: Fix an error handling path in orinoco_cs_probe() wifi: atmel: Fix an error handling path in atmel_probe() wifi: wl3501_cs: Fix an error handling path in wl3501_probe() wifi: ray_cs: Fix an error handling path in ray_probe() wifi: ath9k: don't allow to overwrite ENDPOINT0 attributes samples/bpf: xdp1 and xdp2 reduce XDPBUFSIZE to 60 wifi: ath10k: Trigger STA disconnect after reconfig complete on hardware restart wifi: mac80211: recalc min chandef for new STA links selftests/bpf: Fix check_mtu using wrong variable type wifi: rsi: Do not configure WoWlan in shutdown hook if not enabled wifi: rsi: Do not set MMC_PM_KEEP_POWER in shutdown ice: handle extts in the miscellaneous interrupt thread selftests: cgroup: fix unexpected failure on test_memcg_low watchdog/perf: define dummy watchdog_update_hrtimer_threshold() on correct config watchdog/perf: more properly prevent false positives with turbo modes kexec: fix a memory leak in crash_shrink_memory() mmc: mediatek: Avoid ugly error message when SDIO wakeup IRQ isn't used memstick r592: make memstick_debug_get_tpc_name() static wifi: ath9k: Fix possible stall on ath9k_txq_list_has_key() wifi: mac80211: Fix permissions for valid_links debugfs entry rtnetlink: extend RTEXT_FILTER_SKIP_STATS to IFLA_VF_INFO wifi: ath11k: Add missing check for ioremap wifi: iwlwifi: pull from TXQs with softirqs disabled wifi: iwlwifi: pcie: fix NULL pointer dereference in iwl_pcie_irq_rx_msix_handler() wifi: mac80211: Remove "Missing iftype sband data/EHT cap" spam wifi: cfg80211: rewrite merging of inherited elements wifi: cfg80211: drop incorrect nontransmitted BSS update code wifi: cfg80211: fix regulatory disconnect with OCB/NAN wifi: cfg80211/mac80211: Fix ML element common size calculation wifi: ieee80211: Fix the common size calculation for reconfiguration ML mmc: Add MMC_QUIRK_BROKEN_SD_CACHE for Kingston Canvas Go Plus from 11/2019 wifi: iwlwifi: mvm: indicate HW decrypt for beacon protection wifi: ath9k: convert msecs to jiffies where needed bpf: Factor out socket lookup functions for the TC hookpoint. bpf: Call __bpf_sk_lookup()/__bpf_skc_lookup() directly via TC hookpoint bpf: Fix bpf socket lookup from tc/xdp to respect socket VRF bindings can: length: fix bitstuffing count can: kvaser_pciefd: Add function to set skb hwtstamps can: kvaser_pciefd: Set hardware timestamp on transmitted packets net: stmmac: fix double serdes powerdown netlink: fix potential deadlock in netlink_set_err() netlink: do not hard code device address lenth in fdb dumps bonding: do not assume skb mac_header is set selftests: rtnetlink: remove netdevsim device after ipsec offload test gtp: Fix use-after-free in __gtp_encap_destroy(). net: axienet: Move reset before 64-bit DMA detection ocfs2: Fix use of slab data with sendpage sfc: fix crash when reading stats while NIC is resetting net: nfc: Fix use-after-free caused by nfc_llcp_find_local lib/ts_bm: reset initial match offset for every block of text netfilter: conntrack: dccp: copy entire header to stack buffer, not just basic one netfilter: nf_conntrack_sip: fix the ct_sip_parse_numerical_param() return value. ipvlan: Fix return value of ipvlan_queue_xmit() netlink: Add __sock_i_ino() for __netlink_diag_dump(). drm/amd/display: Add logging for display MALL refresh setting radeon: avoid double free in ci_dpm_init() drm/amd/display: Explicitly specify update type per plane info change drm/bridge: it6505: Move a variable assignment behind a null pointer check in receive_timing_debugfs_show() Input: drv260x - sleep between polling GO bit drm/bridge: ti-sn65dsi83: Fix enable error path drm/bridge: tc358768: always enable HS video mode drm/bridge: tc358768: fix PLL parameters computation drm/bridge: tc358768: fix PLL target frequency drm/bridge: tc358768: fix TCLK_ZEROCNT computation drm/bridge: tc358768: Add atomic_get_input_bus_fmts() implementation drm/bridge: tc358768: fix TCLK_TRAILCNT computation drm/bridge: tc358768: fix THS_ZEROCNT computation drm/bridge: tc358768: fix TXTAGOCNT computation drm/bridge: tc358768: fix THS_TRAILCNT computation drm/vram-helper: fix function names in vram helper doc ARM: dts: BCM5301X: Drop "clock-names" from the SPI node ARM: dts: meson8b: correct uart_B and uart_C clock references mm: call arch_swap_restore() from do_swap_page() clk: vc5: Use `clamp()` to restrict PLL range bootmem: remove the vmemmap pages from kmemleak in free_bootmem_page clk: vc5: Fix .driver_data content in i2c_device_id clk: vc7: Fix .driver_data content in i2c_device_id clk: rs9: Fix .driver_data content in i2c_device_id Input: adxl34x - do not hardcode interrupt trigger type drm: sun4i_tcon: use devm_clk_get_enabled in `sun4i_tcon_init_clocks` drm/panel: sharp-ls043t1le01: adjust mode settings driver: soc: xilinx: use _safe loop iterator to avoid a use after free ASoC: Intel: sof_sdw: remove SOF_SDW_TGL_HDMI for MeteorLake devices drm/vkms: isolate pixel conversion functionality drm: Add fixed-point helper to get rounded integer values drm/vkms: Fix RGB565 pixel conversion ARM: dts: stm32: Move ethernet MAC EEPROM from SoM to carrier boards bus: ti-sysc: Fix dispc quirk masking bool variables arm64: dts: microchip: sparx5: do not use PSCI on reference boards drm/bridge: tc358767: Switch to devm MIPI-DSI helpers clk: imx: scu: use _safe list iterator to avoid a use after free hwmon: (f71882fg) prevent possible division by zero RDMA/bnxt_re: Disable/kill tasklet only if it is enabled RDMA/bnxt_re: Fix to remove unnecessary return labels RDMA/bnxt_re: Use unique names while registering interrupts RDMA/bnxt_re: Remove a redundant check inside bnxt_re_update_gid RDMA/bnxt_re: Fix to remove an unnecessary log drm/msm/dsi: don't allow enabling 14nm VCO with unprogrammed rate drm/msm/disp/dpu: get timing engine status from intf status register drm/msm/dpu: Set DPU_DATA_HCTL_EN for in INTF_SC7180_MASK iommu/virtio: Detach domain on endpoint release iommu/virtio: Return size mapped for a detached domain clk: renesas: rzg2l: Fix CPG_SIPLL5_CLK1 register write ARM: dts: gta04: Move model property out of pinctrl node drm/bridge: anx7625: Convert to i2c's .probe_new() drm/bridge: anx7625: Prevent endless probe loop ARM: dts: qcom: msm8974: do not use underscore in node name (again) arm64: dts: qcom: msm8916: correct camss unit address arm64: dts: qcom: msm8916: correct MMC unit address arm64: dts: qcom: msm8994: correct SPMI unit address arm64: dts: qcom: msm8996: correct camss unit address arm64: dts: qcom: sdm630: correct camss unit address arm64: dts: qcom: sdm845: correct camss unit address arm64: dts: qcom: sm8350: Add GPI DMA compatible fallback arm64: dts: qcom: sm8350: correct DMA controller unit address arm64: dts: qcom: sdm845-polaris: add missing touchscreen child node reg arm64: dts: qcom: apq8016-sbc: Fix regulator constraints arm64: dts: qcom: apq8016-sbc: Fix 1.8V power rail on LS expansion drm/bridge: Introduce pre_enable_prev_first to alter bridge init order drm/bridge: ti-sn65dsi83: Fix enable/disable flow to meet spec drm/panel: simple: fix active size for Ampire AM-480272H3TMQW-T01H ARM: ep93xx: fix missing-prototype warnings ARM: omap2: fix missing tick_broadcast() prototype arm64: dts: qcom: pm7250b: add missing spmi-vadc include arm64: dts: qcom: apq8096: fix fixed regulator name property arm64: dts: mediatek: mt8183: Add mediatek,broken-save-restore-fw to kukui ARM: dts: stm32: Shorten the AV96 HDMI sound card name memory: brcmstb_dpfe: fix testing array offset after use ARM: dts: qcom: apq8074-dragonboard: Set DMA as remotely controlled ASoC: es8316: Increment max value for ALC Capture Target Volume control ASoC: es8316: Do not set rate constraints for unsupported MCLKs ARM: dts: meson8: correct uart_B and uart_C clock references soc/fsl/qe: fix usb.c build errors RDMA/irdma: avoid fortify-string warning in irdma_clr_wqes IB/hfi1: Fix wrong mmu_node used for user SDMA packet after invalidate RDMA/hns: Fix hns_roce_table_get return value ARM: dts: iwg20d-q7-common: Fix backlight pwm specifier arm64: dts: renesas: ulcb-kf: Remove flow control for SCIF1 drm/msm/dpu: set DSC flush bit correctly at MDP CTL flush register fbdev: omapfb: lcd_mipid: Fix an error handling path in mipid_spi_probe() arm64: dts: ti: k3-j7200: Fix physical address of pin Input: pm8941-powerkey - fix debounce on gen2+ PMICs ARM: dts: stm32: Fix audio routing on STM32MP15xx DHCOM PDK2 ARM: dts: stm32: fix i2s endpoint format property for stm32mp15xx-dkx hwmon: (gsc-hwmon) fix fan pwm temperature scaling hwmon: (pmbus/adm1275) Fix problems with temperature monitoring on ADM1272 ARM: dts: BCM5301X: fix duplex-full => full-duplex clk: Export clk_hw_forward_rate_request() drm/amd/display: Fix a test CalculatePrefetchSchedule() drm/amd/display: Fix a test dml32_rq_dlg_get_rq_reg() drm/amdkfd: Fix potential deallocation of previously deallocated memory. soc: mediatek: SVS: Fix MT8192 GPU node name drm/amd/display: Fix artifacting on eDP panels when engaging freesync video mode drm/radeon: fix possible division-by-zero errors HID: uclogic: Modular KUnit tests should not depend on KUNIT=y RDMA/rxe: Add ibdev_dbg macros for rxe RDMA/rxe: Replace pr_xxx by rxe_dbg_xxx in rxe_mw.c RDMA/rxe: Fix access checks in rxe_check_bind_mw amdgpu: validate offset_in_bo of drm_amdgpu_gem_va drm/msm/a5xx: really check for A510 in a5xx_gpu_init RDMA/bnxt_re: wraparound mbox producer index RDMA/bnxt_re: Avoid calling wake_up threads from spin_lock context clk: imx: clk-imxrt1050: fix memory leak in imxrt1050_clocks_probe clk: imx: clk-imx8mn: fix memory leak in imx8mn_clocks_probe clk: imx93: fix memory leak and missing unwind goto in imx93_clocks_probe clk: imx: clk-imx8mp: improve error handling in imx8mp_clocks_probe() arm64: dts: qcom: sdm845: Flush RSC sleep & wake votes arm64: dts: qcom: sm8250-edo: Panel framebuffer is 2.5k instead of 4k clk: bcm: rpi: Fix off by one in raspberrypi_discover_clocks() clk: clocking-wizard: Fix Oops in clk_wzrd_register_divider() clk: tegra: tegra124-emc: Fix potential memory leak ALSA: ac97: Fix possible NULL dereference in snd_ac97_mixer drm/msm/dpu: do not enable color-management if DSPPs are not available drm/msm/dpu: Fix slice_last_group_size calculation drm/msm/dsi: Use DSC slice(s) packet size to compute word count drm/msm/dsi: Flip greater-than check for slice_count and slice_per_intf drm/msm/dsi: Remove incorrect references to slice_count drm/msm/dp: Free resources after unregistering them arm64: dts: mediatek: Add cpufreq nodes for MT8192 arm64: dts: mediatek: mt8192: Fix CPUs capacity-dmips-mhz drm/amdgpu: Fix memcpy() in sienna_cichlid_append_powerplay_table function. drm/amdgpu: Fix usage of UMC fill record in RAS drm/msm/dpu: correct MERGE_3D length clk: vc5: check memory returned by kasprintf() clk: cdce925: check return value of kasprintf() clk: si5341: return error if one synth clock registration fails clk: si5341: check return value of {devm_}kasprintf() clk: si5341: free unused memory on probe failure clk: keystone: sci-clk: check return value of kasprintf() clk: ti: clkctrl: check return value of kasprintf() drivers: meson: secure-pwrc: always enable DMA domain ovl: update of dentry revalidate flags after copy up ASoC: imx-audmix: check return value of devm_kasprintf() clk: Fix memory leak in devm_clk_notifier_register() ARM: dts: lan966x: kontron-d10: fix board reset ARM: dts: lan966x: kontron-d10: fix SPI CS ASoC: amd: acp: clear pdm dma interrupt mask PCI: cadence: Fix Gen2 Link Retraining process PCI: vmd: Reset VMD config register between soft reboots scsi: qedf: Fix NULL dereference in error handling pinctrl: bcm2835: Handle gpiochip_add_pin_range() errors platform/x86: lenovo-yogabook: Fix work race on remove() platform/x86: lenovo-yogabook: Reprobe devices on remove() platform/x86: lenovo-yogabook: Set default keyboard backligh brightness on probe() PCI/ASPM: Disable ASPM on MFD function removal to avoid use-after-free scsi: 3w-xxxx: Add error handling for initialization failure in tw_probe() PCI: pciehp: Cancel bringup sequence if card is not present PCI: ftpci100: Release the clock resources pinctrl: sunplus: Add check for kmalloc PCI: Add pci_clear_master() stub for non-CONFIG_PCI scsi: lpfc: Revise NPIV ELS unsol rcv cmpl logic to drop ndlp based on nlp_state perf bench: Add missing setlocale() call to allow usage of %'d style formatting pinctrl: cherryview: Return correct value if pin in push-pull mode platform/x86: think-lmi: mutex protection around multiple WMI calls platform/x86: think-lmi: Correct System password interface platform/x86: think-lmi: Correct NVME password handling pinctrl:sunplus: Add check for kmalloc pinctrl: npcm7xx: Add missing check for ioremap kcsan: Don't expect 64 bits atomic builtins from 32 bits architectures powerpc/interrupt: Don't read MSR from interrupt_exit_kernel_prepare() powerpc/signal32: Force inlining of __unsafe_save_user_regs() and save_tm_user_regs_unsafe() perf script: Fix allocation of evsel->priv related to per-event dump files platform/x86: thinkpad_acpi: Fix lkp-tests warnings for platform profiles perf dwarf-aux: Fix off-by-one in die_get_varname() platform/x86/dell/dell-rbtn: Fix resources leaking on error path perf tool x86: Consolidate is_amd check into single function perf tool x86: Fix perf_env memory leak powerpc/64s: Fix VAS mm use after free pinctrl: microchip-sgpio: check return value of devm_kasprintf() pinctrl: at91-pio4: check return value of devm_kasprintf() powerpc/powernv/sriov: perform null check on iov before dereferencing iov powerpc: simplify ppc_save_regs powerpc: update ppc_save_regs to save current r1 in pt_regs PCI: qcom: Remove PCIE20_ prefix from register definitions PCI: qcom: Sort and group registers and bitfield definitions PCI: qcom: Use lower case for hex PCI: qcom: Use DWC helpers for modifying the read-only DBI registers PCI: qcom: Disable write access to read only registers for IP v2.9.0 riscv: uprobes: Restore thread.bad_cause powerpc/book3s64/mm: Fix DirectMap stats in /proc/meminfo powerpc/mm/dax: Fix the condition when checking if altmap vmemap can cross-boundary PCI: endpoint: Fix Kconfig indent style PCI: endpoint: Fix a Kconfig prompt of vNTB driver PCI: endpoint: functions/pci-epf-test: Fix dma_chan direction PCI: vmd: Fix uninitialized variable usage in vmd_enable_domain() vfio/mdev: Move the compat_class initialization to module init hwrng: virtio - Fix race on data_avail and actual data modpost: remove broken calculation of exception_table_entry size crypto: nx - fix build warnings when DEBUG_FS is not enabled modpost: fix section mismatch message for R_ARM_ABS32 modpost: fix section mismatch message for R_ARM_{PC24,CALL,JUMP24} crypto: marvell/cesa - Fix type mismatch warning crypto: jitter - correct health test during initialization modpost: fix off by one in is_executable_section() ARC: define ASM_NL and __ALIGN(_STR) outside #ifdef __ASSEMBLY__ guard crypto: kpp - Add helper to set reqsize crypto: qat - Use helper to set reqsize crypto: qat - unmap buffer before free for DH crypto: qat - unmap buffers before free for RSA NFSv4.2: fix wrong shrinker_id NFSv4.1: freeze the session table upon receiving NFS4ERR_BADSESSION SMB3: Do not send lease break acknowledgment if all file handles have been closed dax: Fix dax_mapping_release() use after free dax: Introduce alloc_dev_dax_id() dax/kmem: Pass valid argument to memory_group_register_static hwrng: st - keep clock enabled while hwrng is registered kbuild: Disable GCOV for *.mod.o efi/libstub: Disable PCI DMA before grabbing the EFI memory map cifs: prevent use-after-free by freeing the cfile later cifs: do all necessary checks for credits within or before locking smb: client: fix broken file attrs with nodfs mounts ksmbd: avoid field overflow warning arm64: sme: Use STR P to clear FFR context field in streaming SVE mode x86/efi: Make efi_set_virtual_address_map IBT safe md/raid1-10: fix casting from randomized structure in raid1_submit_write() USB: serial: option: add LARA-R6 01B PIDs usb: dwc3: gadget: Propagate core init errors to UDC during pullup phy: tegra: xusb: Clear the driver reference in usb-phy dev iio: adc: ad7192: Fix null ad7192_state pointer access iio: adc: ad7192: Fix internal/external clock selection iio: accel: fxls8962af: errata bug only applicable for FXLS8962AF iio: accel: fxls8962af: fixup buffer scan element type Revert "drm/amd/display: edp do not add non-edid timings" mm/mmap: Fix VM_LOCKED check in do_vmi_align_munmap() ALSA: hda/realtek: Enable mute/micmute LEDs and limit mic boost on EliteBook ALSA: hda/realtek: Add quirk for Clevo NPx0SNx ALSA: jack: Fix mutex call in snd_jack_report() ALSA: pcm: Fix potential data race at PCM memory allocation helpers block: fix signed int overflow in Amiga partition support block: add overflow checks for Amiga partition support block: change all __u32 annotations to __be32 in affs_hardblocks.h block: increment diskseq on all media change events btrfs: fix race when deleting free space root from the dirty cow roots list SUNRPC: Fix UAF in svc_tcp_listen_data_ready() w1: w1_therm: fix locking behavior in convert_t w1: fix loop in w1_fini() dt-bindings: power: reset: qcom-pon: Only allow reboot-mode pre-pmk8350 f2fs: do not allow to defragment files have FI_COMPRESS_RELEASED sh: j2: Use ioremap() to translate device tree address into kernel memory usb: dwc2: platform: Improve error reporting for problems during .remove() usb: dwc2: Fix some error handling paths serial: 8250: omap: Fix freeing of resources on failed register clk: qcom: mmcc-msm8974: remove oxili_ocmemgx_clk clk: qcom: camcc-sc7180: Add parent dependency to all camera GDSCs clk: qcom: gcc-ipq6018: Use floor ops for sdcc clocks clk: qcom: gcc-qcm2290: Mark RCGs shared where applicable media: usb: Check az6007_read() return value media: amphion: drop repeated codec data for vc1l format media: amphion: drop repeated codec data for vc1g format media: amphion: initiate a drain of the capture queue in dynamic resolution change media: videodev2.h: Fix struct v4l2_input tuner index comment media: usb: siano: Fix warning due to null work_func_t function pointer media: i2c: Correct format propagation for st-mipid02 media: hi846: fix usage of pm_runtime_get_if_in_use() media: mediatek: vcodec: using decoder status instead of core work count clk: qcom: reset: support resetting multiple bits clk: qcom: ipq6018: fix networking resets clk: qcom: dispcc-qcm2290: Fix BI_TCXO_AO handling clk: qcom: dispcc-qcm2290: Fix GPLL0_OUT_DIV handling clk: qcom: mmcc-msm8974: use clk_rcg2_shared_ops for mdp_clk_src clock staging: vchiq_arm: mark vchiq_platform_init() static usb: dwc3: qcom: Fix potential memory leak usb: gadget: u_serial: Add null pointer check in gserial_suspend extcon: Fix kernel doc of property fields to avoid warnings extcon: Fix kernel doc of property capability fields to avoid warnings usb: phy: phy-tahvo: fix memory leak in tahvo_usb_probe() usb: hide unused usbfs_notify_suspend/resume functions usb: misc: eud: Fix eud sysfs path (use 'qcom_eud') serial: core: lock port for stop_rx() in uart_suspend_port() serial: 8250: lock port for stop_rx() in omap8250_irq() serial: core: lock port for start_rx() in uart_resume_port() serial: 8250: lock port for UART_IER access in omap8250_irq() kernfs: fix missing kernfs_idr_lock to remove an ID from the IDR lkdtm: replace ll_rw_block with submit_bh i3c: master: svc: fix cpu schedule in spin lock coresight: Fix loss of connection info when a module is unloaded mfd: rt5033: Drop rt5033-battery sub-device media: venus: helpers: Fix ALIGN() of non power of two media: atomisp: gmin_platform: fix out_len in gmin_get_config_dsm_var() sh: Avoid using IRQ0 on SH3 and SH4 gfs2: Fix duplicate should_fault_in_pages() call f2fs: fix potential deadlock due to unpaired node_write lock use f2fs: fix to avoid NULL pointer dereference f2fs_write_end_io() KVM: s390: fix KVM_S390_GET_CMMA_BITS for GFNs in memslot holes usb: dwc3: qcom: Release the correct resources in dwc3_qcom_remove() usb: dwc3: qcom: Fix an error handling path in dwc3_qcom_probe() usb: common: usb-conn-gpio: Set last role to unknown before initial detection usb: dwc3-meson-g12a: Fix an error handling path in dwc3_meson_g12a_probe() mfd: wcd934x: Fix an error handling path in wcd934x_slim_probe() mfd: intel-lpss: Add missing check for platform_get_resource Revert "usb: common: usb-conn-gpio: Set last role to unknown before initial detection" serial: 8250_omap: Use force_suspend and resume for system suspend device property: Fix documentation for fwnode_get_next_parent() device property: Clarify description of returned value in some functions drivers: fwnode: fix fwnode_irq_get[_byname]() nvmem: sunplus-ocotp: release otp->clk before return nvmem: rmem: Use NVMEM_DEVID_AUTO bus: fsl-mc: don't assume child devices are all fsl-mc devices mfd: stmfx: Fix error path in stmfx_chip_init mfd: stmfx: Nullify stmfx->vdd in case of error KVM: s390: vsie: fix the length of APCB bitmap KVM: s390/diag: fix racy access of physical cpu number in diag 9c handler cpufreq: mediatek: correct voltages for MT7622 and MT7623 misc: fastrpc: check return value of devm_kasprintf() clk: qcom: mmcc-msm8974: fix MDSS_GDSC power flags hwtracing: hisi_ptt: Fix potential sleep in atomic context mfd: stmpe: Only disable the regulators if they are enabled phy: tegra: xusb: check return value of devm_kzalloc() lib/bitmap: drop optimization of bitmap_{from,to}_arr64 pwm: imx-tpm: force 'real_period' to be zero in suspend pwm: sysfs: Do not apply state to already disabled PWMs pwm: ab8500: Fix error code in probe() pwm: mtk_disp: Fix the disable flow of disp_pwm md/raid10: fix the condition to call bio_end_io_acct() rtc: st-lpc: Release some resources in st_rtc_probe() in case of error drm/i915/psr: Use hw.adjusted mode when calculating io/fast wake times drm/i915/guc/slpc: Apply min softlimit correctly f2fs: check return value of freeze_super() media: cec: i2c: ch7322: also select REGMAP sctp: fix potential deadlock on &net->sctp.addr_wq_lock net/sched: act_ipt: add sanity checks on table name and hook locations net: add a couple of helpers for iph tot_len net/sched: act_ipt: add sanity checks on skb before calling target spi: spi-geni-qcom: enable SPI_CONTROLLER_MUST_TX for GPI DMA mode net: mscc: ocelot: don't report that RX timestamping is enabled by default net: mscc: ocelot: don't keep PTP configuration of all ports in single structure net: dsa: felix: don't drop PTP frames with tag_8021q when RX timestamping is disabled net: dsa: sja1105: always enable the INCL_SRCPT option net: dsa: tag_sja1105: always prefer source port information from INCL_SRCPT Add MODULE_FIRMWARE() for FIRMWARE_TG357766. Bluetooth: fix invalid-bdaddr quirk for non-persistent setup Bluetooth: ISO: use hci_sync for setting CIG parameters Bluetooth: MGMT: add CIS feature bits to controller information Bluetooth: MGMT: Use BIT macro when defining bitfields Bluetooth: MGMT: Fix marking SCAN_RSP as not connectable ibmvnic: Do not reset dql stats on NON_FATAL err net: dsa: vsc73xx: fix MTU configuration mlxsw: minimal: fix potential memory leak in mlxsw_m_linecards_init spi: bcm-qspi: return error if neither hif_mspi nor mspi is available drm/amdgpu: fix number of fence calculations drm/amd: Don't try to enable secure display TA multiple times mailbox: ti-msgmgr: Fill non-message tx data fields with 0x0 f2fs: fix error path handling in truncate_dnode() octeontx2-af: Fix mapping for NIX block from CGX connection octeontx2-af: Add validation before accessing cgx and lmac ntfs: Fix panic about slab-out-of-bounds caused by ntfs_listxattr() powerpc: allow PPC_EARLY_DEBUG_CPM only when SERIAL_CPM=y powerpc: dts: turris1x.dts: Fix PCIe MEM size for pci2 node net: bridge: keep ports without IFF_UNICAST_FLT in BR_PROMISC mode net: dsa: tag_sja1105: fix source port decoding in vlan_filtering=0 bridge mode net: fix net_dev_start_xmit trace event vs skb_transport_offset() tcp: annotate data races in __tcp_oow_rate_limited() bpf, btf: Warn but return no error for NULL btf from __register_btf_kfunc_id_set() xsk: Honor SO_BINDTODEVICE on bind net/sched: act_pedit: Add size check for TCA_PEDIT_PARMS_EX fanotify: disallow mount/sb marks on kernel internal pseudo fs riscv: move memblock_allow_resize() after linear mapping is ready pptp: Fix fib lookup calls. net: dsa: tag_sja1105: fix MAC DA patching from meta frames net: dsa: sja1105: always enable the send_meta options octeontx-af: fix hardware timestamp configuration afs: Fix accidental truncation when storing data s390/qeth: Fix vipa deletion sh: dma: Fix DMA channel offset calculation apparmor: fix missing error check for rhashtable_insert_fast i2c: xiic: Don't try to handle more interrupt events after error dm: fix undue/missing spaces dm: avoid split of quoted strings where possible dm ioctl: have constant on the right side of the test dm ioctl: Avoid double-fetch of version extcon: usbc-tusb320: Convert to i2c's .probe_new() extcon: usbc-tusb320: Unregister typec port on driver removal btrfs: do not BUG_ON() on tree mod log failure at balance_level() i2c: qup: Add missing unwind goto in qup_i2c_probe() irqchip/loongson-pch-pic: Fix potential incorrect hwirq assignment NFSD: add encoding of op_recall flag for write delegation irqchip/loongson-pch-pic: Fix initialization of HT vector register io_uring: wait interruptibly for request completions on exit mmc: core: disable TRIM on Kingston EMMC04G-M627 mmc: core: disable TRIM on Micron MTFC4GACAJCN-1M mmc: mmci: Set PROBE_PREFER_ASYNCHRONOUS mmc: sdhci: fix DMA configure compatibility issue when 64bit DMA mode is used. wifi: cfg80211: fix regulatory disconnect for non-MLO wifi: ath10k: Serialize wake_tx_queue ops wifi: mt76: mt7921e: fix init command fail with enabled device bcache: fixup btree_cache_wait list damage bcache: Remove unnecessary NULL point check in node allocations bcache: Fix __bch_btree_node_alloc to make the failure behavior consistent watch_queue: prevent dangling pipe pointer um: Use HOST_DIR for mrproper integrity: Fix possible multiple allocation in integrity_inode_get() autofs: use flexible array in ioctl structure mm/damon/ops-common: atomically test and clear young on ptes and pmds shmem: use ramfs_kill_sb() for kill_sb method of ramfs-based tmpfs jffs2: reduce stack usage in jffs2_build_xattr_subsystem() fs: avoid empty option when generating legacy mount string ext4: Remove ext4 locking of moved directory Revert "f2fs: fix potential corruption when moving a directory" fs: Establish locking order for unrelated directories fs: Lock moved directories i2c: nvidia-gpu: Add ACPI property to align with device-tree i2c: nvidia-gpu: Remove ccgx,firmware-build property usb: typec: ucsi: Mark dGPUs as DEVICE scope ipvs: increase ip_vs_conn_tab_bits range for 64BIT btrfs: add handling for RAID1C23/DUP to btrfs_reduce_alloc_profile btrfs: delete unused BGs while reclaiming BGs btrfs: bail out reclaim process if filesystem is read-only btrfs: add block-group tree to lockdep classes btrfs: reinsert BGs failed to reclaim btrfs: fix race when deleting quota root from the dirty cow roots list btrfs: fix extent buffer leak after tree mod log failure at split_node() btrfs: do not BUG_ON() on tree mod log failure at __btrfs_cow_block() ASoC: mediatek: mt8173: Fix irq error path ASoC: mediatek: mt8173: Fix snd_soc_component_initialize error path regulator: tps65219: Fix matching interrupts for their regulators ARM: dts: qcom: ipq4019: fix broken NAND controller properties override ARM: orion5x: fix d2net gpio initialization leds: trigger: netdev: Recheck NETDEV_LED_MODE_LINKUP on dev rename blktrace: use inline function for blk_trace_remove() while blktrace is disabled fs: no need to check source xfs: explicitly specify cpu when forcing inodegc delayed work to run immediately xfs: check that per-cpu inodegc workers actually run on that cpu xfs: disable reaping in fscounters scrub xfs: fix xfs_inodegc_stop racing with mod_delayed_work mm/mmap: Fix extra maple tree write drm/i915: Fix TypeC mode initialization during system resume drm/i915/tc: Fix TC port link ref init for DP MST during HW readout drm/i915/tc: Fix system resume MST mode restore for DP-alt sinks mtd: parsers: refer to ARCH_BCMBCA instead of ARCH_BCM4908 netfilter: nf_tables: unbind non-anonymous set if rule construction fails netfilter: conntrack: Avoid nf_ct_helper_hash uses after free netfilter: nf_tables: do not ignore genmask when looking up chain by id netfilter: nf_tables: prevent OOB access in nft_byteorder_eval wireguard: queueing: use saner cpu selection wrapping wireguard: netlink: send staged packets when setting initial private key tty: serial: fsl_lpuart: add earlycon for imx8ulp platform block/partition: fix signedness issue for Amiga partitions sh: mach-r2d: Handle virq offset in cascaded IRL demux sh: mach-highlander: Handle virq offset in cascaded IRL demux sh: mach-dreamcast: Handle virq offset in cascaded IRQ demux sh: hd64461: Handle virq offset for offchip IRQ base and HD64461 IRQ io_uring: Use io_schedule* in cqring wait Linux 6.1.39 Change-Id: I5867c943c99c157fa599ecd08da961c632e58302 Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>	2023-09-02 19:41:42 +00:00
Eric Farman	8f98749d53	vfio/mdev: Move the compat_class initialization to module init ... [ Upstream commit ff598081e5b9d0bdd6874bfe340811bbb75b35e4 ] The pointer to mdev_bus_compat_class is statically defined at the top of mdev_core, and was originally (commit 7b96953bc6 ("vfio: Mediated device Core driver") serialized by the parent_list_lock. The blamed commit removed this mutex, leaving the pointer initialization unserialized. As a result, the creation of multiple MDEVs in parallel (such as during boot) can encounter errors during the creation of the sysfs entries, such as: [ 8.337509] sysfs: cannot create duplicate filename '/class/mdev_bus' [ 8.337514] vfio_ccw 0.0.01d8: MDEV: Registered [ 8.337516] CPU: 13 PID: 946 Comm: driverctl Not tainted 6.4.0-rc7 #20 [ 8.337522] Hardware name: IBM 3906 M05 780 (LPAR) [ 8.337525] Call Trace: [ 8.337528] [<0000000162b0145a>] dump_stack_lvl+0x62/0x80 [ 8.337540] [<00000001622aeb30>] sysfs_warn_dup+0x78/0x88 [ 8.337549] [<00000001622aeca6>] sysfs_create_dir_ns+0xe6/0xf8 [ 8.337552] [<0000000162b04504>] kobject_add_internal+0xf4/0x340 [ 8.337557] [<0000000162b04d48>] kobject_add+0x78/0xd0 [ 8.337561] [<0000000162b04e0a>] kobject_create_and_add+0x6a/0xb8 [ 8.337565] [<00000001627a110e>] class_compat_register+0x5e/0x90 [ 8.337572] [<000003ff7fd815da>] mdev_register_parent+0x102/0x130 [mdev] [ 8.337581] [<000003ff7fdc7f2c>] vfio_ccw_sch_probe+0xe4/0x178 [vfio_ccw] [ 8.337588] [<0000000162a7833c>] css_probe+0x44/0x80 [ 8.337599] [<000000016279f4da>] really_probe+0xd2/0x460 [ 8.337603] [<000000016279fa08>] driver_probe_device+0x40/0xf0 [ 8.337606] [<000000016279fb78>] __device_attach_driver+0xc0/0x140 [ 8.337610] [<000000016279cbe0>] bus_for_each_drv+0x90/0xd8 [ 8.337618] [<00000001627a00b0>] __device_attach+0x110/0x190 [ 8.337621] [<000000016279c7c8>] bus_rescan_devices_helper+0x60/0xb0 [ 8.337626] [<000000016279cd48>] drivers_probe_store+0x48/0x80 [ 8.337632] [<00000001622ac9b0>] kernfs_fop_write_iter+0x138/0x1f0 [ 8.337635] [<00000001621e5e14>] vfs_write+0x1ac/0x2f8 [ 8.337645] [<00000001621e61d8>] ksys_write+0x70/0x100 [ 8.337650] [<0000000162b2bdc4>] __do_syscall+0x1d4/0x200 [ 8.337656] [<0000000162b3c828>] system_call+0x70/0x98 [ 8.337664] kobject: kobject_add_internal failed for mdev_bus with -EEXIST, don't try to register things with the same name in the same directory. [ 8.337668] kobject: kobject_create_and_add: kobject_add error: -17 [ 8.337674] vfio_ccw: probe of 0.0.01d9 failed with error -12 [ 8.342941] vfio_ccw_mdev aeb9ca91-10c6-42bc-a168-320023570aea: Adding to iommu group 2 Move the initialization of the mdev_bus_compat_class pointer to the init path, to match the cleanup in module exit. This way the code in mdev_register_parent() can simply link the new parent to it, rather than determining whether initialization is required first. Fixes: 89345d5177 ("vfio/mdev: embedd struct mdev_parent in the parent data structure") Reported-by: Alexander Egorenkov <egorenar@linux.ibm.com> Signed-off-by: Eric Farman <farman@linux.ibm.com> Reviewed-by: Kevin Tian <kevin.tian@intel.com> Reviewed-by: Christoph Hellwig <hch@lst.de> Reviewed-by: Tony Krowiak <akrowiak@linux.ibm.com> Reviewed-by: Jason Gunthorpe <jgg@nvidia.com> Link: https://lore.kernel.org/r/20230626133642.2939168-1-farman@linux.ibm.com Signed-off-by: Alex Williamson <alex.williamson@redhat.com> Signed-off-by: Sasha Levin <sashal@kernel.org>	2023-07-19 16:21:41 +02:00
Greg Kroah-Hartman	26b6ad0f34	Merge 6.1.32 into android14-6.1-lts ... Changes in 6.1.32 inet: Add IP_LOCAL_PORT_RANGE socket option ipv{4,6}/raw: fix output xfrm lookup wrt protocol firmware: arm_ffa: Fix usage of partition info get count flag selftests/bpf: Fix pkg-config call building sign-file platform/x86/amd/pmf: Fix CnQF and auto-mode after resume tls: rx: device: fix checking decryption status tls: rx: strp: set the skb->len of detached / CoW'ed skbs tls: rx: strp: fix determining record length in copy mode tls: rx: strp: force mixed decrypted records into copy mode tls: rx: strp: factor out copying skb data tls: rx: strp: preserve decryption status of skbs when needed net/mlx5: E-switch, Devcom, sync devcom events and devcom comp register gpio-f7188x: fix chip name and pin count on Nuvoton chip bpf, sockmap: Pass skb ownership through read_skb bpf, sockmap: Convert schedule_work into delayed_work bpf, sockmap: Reschedule is now done through backlog bpf, sockmap: Improved check for empty queue bpf, sockmap: Handle fin correctly bpf, sockmap: TCP data stall on recv before accept bpf, sockmap: Wake up polling after data copy bpf, sockmap: Incorrectly handling copied_seq blk-mq: fix race condition in active queue accounting vfio/type1: check pfn valid before converting to struct page net: page_pool: use in_softirq() instead page_pool: fix inconsistency for page_pool_ring_[un]lock() net: phy: mscc: enable VSC8501/2 RGMII RX clock wifi: rtw89: correct 5 MHz mask setting wifi: iwlwifi: mvm: support wowlan info notification version 2 wifi: iwlwifi: mvm: fix potential memory leak RDMA/rxe: Fix the error "trying to register non-static key in rxe_cleanup_task" octeontx2-af: Add validation for lmac type drm/amd: Don't allow s0ix on APUs older than Raven bluetooth: Add cmd validity checks at the start of hci_sock_ioctl() Revert "thermal/drivers/mellanox: Use generic thermal_zone_get_trip() function" block: fix bio-cache for passthru IO cpufreq: amd-pstate: Update policy->cur in amd_pstate_adjust_perf() cpufreq: amd-pstate: Add ->fast_switch() callback netfilter: ctnetlink: Support offloaded conntrack entry deletion tools headers UAPI: Sync the linux/in.h with the kernel sources Linux 6.1.32 Change-Id: I70ca0d07b33b26c2ed7613e6532eb9ae845112ee Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>	2023-06-13 20:47:37 +00:00
Suren Baghdasaryan	5dd0547a3e	UPSTREAM: mm: replace vma->vm_flags direct modifications with modifier calls ... Replace direct modifications to vma->vm_flags with calls to modifier functions to be able to track flag changes and to keep vma locking correctness. [akpm@linux-foundation.org: fix drivers/misc/open-dice.c, per Hyeonggon Yoo] Link: https://lkml.kernel.org/r/20230126193752.297968-5-surenb@google.com Signed-off-by: Suren Baghdasaryan <surenb@google.com> Acked-by: Michal Hocko <mhocko@suse.com> Acked-by: Mel Gorman <mgorman@techsingularity.net> Acked-by: Mike Rapoport (IBM) <rppt@kernel.org> Acked-by: Sebastian Reichel <sebastian.reichel@collabora.com> Reviewed-by: Liam R. Howlett <Liam.Howlett@Oracle.com> Reviewed-by: Hyeonggon Yoo <42.hyeyoo@gmail.com> Cc: Andy Lutomirski <luto@kernel.org> Cc: Arjun Roy <arjunroy@google.com> Cc: Axel Rasmussen <axelrasmussen@google.com> Cc: David Hildenbrand <david@redhat.com> Cc: David Howells <dhowells@redhat.com> Cc: Davidlohr Bueso <dave@stgolabs.net> Cc: David Rientjes <rientjes@google.com> Cc: Eric Dumazet <edumazet@google.com> Cc: Greg Thelen <gthelen@google.com> Cc: Hugh Dickins <hughd@google.com> Cc: Ingo Molnar <mingo@redhat.com> Cc: Jann Horn <jannh@google.com> Cc: Joel Fernandes <joelaf@google.com> Cc: Johannes Weiner <hannes@cmpxchg.org> Cc: Kent Overstreet <kent.overstreet@linux.dev> Cc: Laurent Dufour <ldufour@linux.ibm.com> Cc: Lorenzo Stoakes <lstoakes@gmail.com> Cc: Matthew Wilcox <willy@infradead.org> Cc: Minchan Kim <minchan@google.com> Cc: Paul E. McKenney <paulmck@kernel.org> Cc: Peter Oskolkov <posk@google.com> Cc: Peter Xu <peterx@redhat.com> Cc: Peter Zijlstra <peterz@infradead.org> Cc: Punit Agrawal <punit.agrawal@bytedance.com> Cc: Sebastian Andrzej Siewior <bigeasy@linutronix.de> Cc: Shakeel Butt <shakeelb@google.com> Cc: Soheil Hassas Yeganeh <soheil@google.com> Cc: Song Liu <songliubraving@fb.com> Cc: Vlastimil Babka <vbabka@suse.cz> Cc: Will Deacon <will@kernel.org> Signed-off-by: Andrew Morton <akpm@linux-foundation.org> (cherry picked from commit 1c71222e5f2393b5ea1a41795c67589eea7e3490) Bug: 161210518 Change-Id: Ifc352b487db109adab17dd33a83f5c7e68c0bbc6 Signed-off-by: Suren Baghdasaryan <surenb@google.com>	2023-06-07 14:24:57 +00:00
Yan Zhao	cd3c5e4e0d	vfio/type1: check pfn valid before converting to struct page ... [ Upstream commit 4752354af71043e6fd72ef5490ed6da39e6cab4a ] Check physical PFN is valid before converting the PFN to a struct page pointer to be returned to caller of vfio_pin_pages(). vfio_pin_pages() pins user pages with contiguous IOVA. If the IOVA of a user page to be pinned belongs to vma of vm_flags VM_PFNMAP, pin_user_pages_remote() will return -EFAULT without returning struct page address for this PFN. This is because usually this kind of PFN (e.g. MMIO PFN) has no valid struct page address associated. Upon this error, vaddr_get_pfns() will obtain the physical PFN directly. While previously vfio_pin_pages() returns to caller PFN arrays directly, after commit 34a255e676 ("vfio: Replace phys_pfn with pages for vfio_pin_pages()"), PFNs will be converted to "struct page *" unconditionally and therefore the returned "struct page *" array may contain invalid struct page addresses. Given current in-tree users of vfio_pin_pages() only expect "struct page * returned, check PFN validity and return -EINVAL to let the caller be aware of IOVAs to be pinned containing PFN not able to be returned in "struct page *" array. So that, the caller will not consume the returned pointer (e.g. test PageReserved()) and avoid error like "supervisor read access in kernel mode". Fixes: 34a255e676 ("vfio: Replace phys_pfn with pages for vfio_pin_pages()") Cc: Sean Christopherson <seanjc@google.com> Reviewed-by: Jason Gunthorpe <jgg@nvidia.com> Signed-off-by: Yan Zhao <yan.y.zhao@intel.com> Reviewed-by: Sean Christopherson <seanjc@google.com> Link: https://lore.kernel.org/r/20230519065843.10653-1-yan.y.zhao@intel.com Signed-off-by: Alex Williamson <alex.williamson@redhat.com> Signed-off-by: Sasha Levin <sashal@kernel.org>	2023-06-05 09:26:19 +02:00
Steve Sistare	bf119a3c9c	vfio/type1: restore locked_vm ... commit 90fdd158a695d70403163f9a0e4efc5b20f3fd3e upstream. When a vfio container is preserved across exec or fork-exec, the new task's mm has a locked_vm count of 0. After a dma vaddr is updated using VFIO_DMA_MAP_FLAG_VADDR, locked_vm remains 0, and the pinned memory does not count against the task's RLIMIT_MEMLOCK. To restore the correct locked_vm count, when VFIO_DMA_MAP_FLAG_VADDR is used and the dma's mm has changed, add the dma's locked_vm count to the new mm->locked_vm, subject to the rlimit, and subtract it from the old mm->locked_vm. Fixes: c3cbab24db ("vfio/type1: implement interfaces to update vaddr") Cc: stable@vger.kernel.org Signed-off-by: Steve Sistare <steven.sistare@oracle.com> Reviewed-by: Kevin Tian <kevin.tian@intel.com> Reviewed-by: Jason Gunthorpe <jgg@nvidia.com> Link: https://lore.kernel.org/r/1675184289-267876-5-git-send-email-steven.sistare@oracle.com Signed-off-by: Alex Williamson <alex.williamson@redhat.com> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>	2023-03-10 09:34:32 +01:00
Steve Sistare	9f0fd4f8ec	vfio/type1: track locked_vm per dma ... commit 18e292705ba21cc9b3227b9ad5b1c28973605ee5 upstream. Track locked_vm per dma struct, and create a new subroutine, both for use in a subsequent patch. No functional change. Fixes: c3cbab24db ("vfio/type1: implement interfaces to update vaddr") Cc: stable@vger.kernel.org Signed-off-by: Steve Sistare <steven.sistare@oracle.com> Reviewed-by: Kevin Tian <kevin.tian@intel.com> Reviewed-by: Jason Gunthorpe <jgg@nvidia.com> Link: https://lore.kernel.org/r/1675184289-267876-4-git-send-email-steven.sistare@oracle.com Signed-off-by: Alex Williamson <alex.williamson@redhat.com> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>	2023-03-10 09:34:32 +01:00
Steve Sistare	a6b2aabe66	vfio/type1: prevent underflow of locked_vm via exec() ... commit 046eca5018f8a5dd1dc2cedf87fb5843b9ea3026 upstream. When a vfio container is preserved across exec, the task does not change, but it gets a new mm with locked_vm=0, and loses the count from existing dma mappings. If the user later unmaps a dma mapping, locked_vm underflows to a large unsigned value, and a subsequent dma map request fails with ENOMEM in __account_locked_vm. To avoid underflow, grab and save the mm at the time a dma is mapped. Use that mm when adjusting locked_vm, rather than re-acquiring the saved task's mm, which may have changed. If the saved mm is dead, do nothing. locked_vm is incremented for existing mappings in a subsequent patch. Fixes: 73fa0d10d0 ("vfio: Type1 IOMMU implementation") Cc: stable@vger.kernel.org Signed-off-by: Steve Sistare <steven.sistare@oracle.com> Reviewed-by: Kevin Tian <kevin.tian@intel.com> Reviewed-by: Jason Gunthorpe <jgg@nvidia.com> Link: https://lore.kernel.org/r/1675184289-267876-3-git-send-email-steven.sistare@oracle.com Signed-off-by: Alex Williamson <alex.williamson@redhat.com> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>	2023-03-10 09:34:32 +01:00
Steve Sistare	e8c21b19c2	vfio/type1: exclude mdevs from VFIO_UPDATE_VADDR ... commit ef3a3f6a294ba65fd906a291553935881796f8a5 upstream. Disable the VFIO_UPDATE_VADDR capability if mediated devices are present. Their kernel threads could be blocked indefinitely by a misbehaving userland while trying to pin/unpin pages while vaddrs are being updated. Do not allow groups to be added to the container while vaddr's are invalid, so we never need to block user threads from pinning, and can delete the vaddr-waiting code in a subsequent patch. Fixes: c3cbab24db ("vfio/type1: implement interfaces to update vaddr") Cc: stable@vger.kernel.org Signed-off-by: Steve Sistare <steven.sistare@oracle.com> Reviewed-by: Kevin Tian <kevin.tian@intel.com> Reviewed-by: Jason Gunthorpe <jgg@nvidia.com> Link: https://lore.kernel.org/r/1675184289-267876-2-git-send-email-steven.sistare@oracle.com Signed-off-by: Alex Williamson <alex.williamson@redhat.com> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>	2023-03-10 09:34:32 +01:00
Niklas Schnelle	4ba7d17f2b	vfio/type1: Respect IOMMU reserved regions in vfio_test_domain_fgsp() ... [ Upstream commit 895c0747f726bb50c9b7a805613a61d1b6f9fa06 ] Since commit cbf7827bc5dc ("iommu/s390: Fix potential s390_domain aperture shrinking") the s390 IOMMU driver uses reserved regions for the system provided DMA ranges of PCI devices. Previously it reduced the size of the IOMMU aperture and checked it on each mapping operation. On current machines the system denies use of DMA addresses below 2^32 for all PCI devices. Usually mapping IOVAs in a reserved regions is harmless until a DMA actually tries to utilize the mapping. However on s390 there is a virtual PCI device called ISM which is implemented in firmware and used for cross LPAR communication. Unlike real PCI devices this device does not use the hardware IOMMU but inspects IOMMU translation tables directly on IOTLB flush (s390 RPCIT instruction). If it detects IOVA mappings outside the allowed ranges it goes into an error state. This error state then causes the device to be unavailable to the KVM guest. Analysing this we found that vfio_test_domain_fgsp() maps 2 pages at DMA address 0 irrespective of the IOMMUs reserved regions. Even if usually harmless this seems wrong in the general case so instead go through the freshly updated IOVA list and try to find a range that isn't reserved, and fits 2 pages, is PAGE_SIZE * 2 aligned. If found use that for testing for fine grained super pages. Fixes: af029169b8 ("vfio/type1: Check reserved region conflict and update iova list") Signed-off-by: Niklas Schnelle <schnelle@linux.ibm.com> Reviewed-by: Matthew Rosato <mjrosato@linux.ibm.com> Reviewed-by: Jason Gunthorpe <jgg@nvidia.com> Link: https://lore.kernel.org/r/20230110164427.4051938-2-schnelle@linux.ibm.com Signed-off-by: Alex Williamson <alex.williamson@redhat.com> Signed-off-by: Sasha Levin <sashal@kernel.org>	2023-02-01 08:34:36 +01:00
Joao Martins	ba090c6deb	vfio/iova_bitmap: refactor iova_bitmap_set() to better handle page boundaries ... [ Upstream commit b058ea3ab5afea873ab8d976277539ca9e43869a ] Commit f38044e5ef58 ("vfio/iova_bitmap: Fix PAGE_SIZE unaligned bitmaps") had fixed the unaligned bitmaps by capping the remaining iterable set at the start of the bitmap. Although, that mistakenly worked around iova_bitmap_set() incorrectly setting bits across page boundary. Fix this by reworking the loop inside iova_bitmap_set() to iterate over a range of bits to set (cur_bit .. last_bit) which may span different pinned pages, thus updating @page_idx and @offset as it sets the bits. The previous cap to the first page is now adjusted to be always accounted rather than when there's only a non-zero pgoff. While at it, make @page_idx , @offset and @nbits to be unsigned int given that it won't be more than 512 and 4096 respectively (even a bigger PAGE_SIZE or a smaller struct page size won't make this bigger than the above 32-bit max). Also, delete the stale kdoc on Return type. Cc: Avihai Horon <avihaih@nvidia.com> Fixes: f38044e5ef58 ("vfio/iova_bitmap: Fix PAGE_SIZE unaligned bitmaps") Co-developed-by: Jason Gunthorpe <jgg@nvidia.com> Signed-off-by: Jason Gunthorpe <jgg@nvidia.com> Signed-off-by: Joao Martins <joao.m.martins@oracle.com> Reviewed-by: Jason Gunthorpe <jgg@nvidia.com> Tested-by: Avihai Horon <avihaih@nvidia.com> Link: https://lore.kernel.org/r/20221129131235.38880-1-joao.m.martins@oracle.com Signed-off-by: Alex Williamson <alex.williamson@redhat.com> Signed-off-by: Sasha Levin <sashal@kernel.org>	2022-12-31 13:32:41 +01:00
Joao Martins	31ef3d554d	vfio/iova_bitmap: Fix PAGE_SIZE unaligned bitmaps ... [ Upstream commit f38044e5ef58ad0346fdabd7027ea5c1e1a3b624 ] iova_bitmap_set() doesn't consider the end of the page boundary when the first bitmap page offset isn't zero, and wrongly changes the consecutive page right after. Consequently this leads to missing dirty pages from reported by the device as seen from the VMM. The current logic iterates over a given number of base pages and clamps it to the remaining indexes to iterate in the last page. Instead of having to consider extra pages to pin (e.g. first and extra pages), just handle the first page as its own range and let the rest of the bitmap be handled as if it was base page aligned. This is done by changing iova_bitmap_mapped_remaining() to return PAGE_SIZE - pgoff (on the first bitmap page), and leads to pgoff being set to 0 on following iterations. Fixes: 58ccf0190d ("vfio: Add an IOVA bitmap support") Reported-by: Avihai Horon <avihaih@nvidia.com> Tested-by: Avihai Horon <avihaih@nvidia.com> Signed-off-by: Joao Martins <joao.m.martins@oracle.com> Link: https://lore.kernel.org/r/20221025193114.58695-3-joao.m.martins@oracle.com Signed-off-by: Alex Williamson <alex.williamson@redhat.com> Signed-off-by: Sasha Levin <sashal@kernel.org>	2022-12-31 13:32:38 +01:00
Rafael Mendonca	f0865e4f2c	vfio: platform: Do not pass return buffer to ACPI _RST method ... [ Upstream commit e67e070632a665c932d534b8b800477bb3111449 ] The ACPI _RST method has no return value, there's no need to pass a return buffer to acpi_evaluate_object(). Fixes: d30daa33ec ("vfio: platform: call _RST method when using ACPI") Signed-off-by: Rafael Mendonca <rafaelmendsr@gmail.com> Reviewed-by: Eric Auger <eric.auger@redhat.com> Link: https://lore.kernel.org/r/20221018152825.891032-1-rafaelmendsr@gmail.com Signed-off-by: Alex Williamson <alex.williamson@redhat.com> Signed-off-by: Sasha Levin <sashal@kernel.org>	2022-12-31 13:32:38 +01:00
Anthony DeRossi	e806e22362	vfio/pci: Check the device set open count on reset ... vfio_pci_dev_set_needs_reset() inspects the open_count of every device in the set to determine whether a reset is allowed. The current device always has open_count == 1 within vfio_pci_core_disable(), effectively disabling the reset logic. This field is also documented as private in vfio_device, so it should not be used to determine whether other devices in the set are open. Checking for vfio_device_set_open_count() > 1 on the device set fixes both issues. After commit 2cd8b14aaa ("vfio/pci: Move to the device set infrastructure"), failure to create a new file for a device would cause the reset to be skipped due to open_count being decremented after calling close_device() in the error path. After commit eadd86f835 ("vfio: Remove calls to vfio_group_add_container_user()"), releasing a device would always skip the reset due to an ordering change in vfio_device_fops_release(). Failing to reset the device leaves it in an unknown state, potentially causing errors when it is accessed later or bound to a different driver. This issue was observed with a Radeon RX Vega 56 [1002:687f] (rev c3) assigned to a Windows guest. After shutting down the guest, unbinding the device from vfio-pci, and binding the device to amdgpu: [ 548.007102] [drm:psp_hw_start [amdgpu]] *ERROR* PSP create ring failed! [ 548.027174] [drm:psp_hw_init [amdgpu]] *ERROR* PSP firmware loading failed [ 548.027242] [drm:amdgpu_device_fw_loading [amdgpu]] *ERROR* hw_init of IP block <psp> failed -22 [ 548.027306] amdgpu 0000:0a:00.0: amdgpu: amdgpu_device_ip_init failed [ 548.027308] amdgpu 0000:0a:00.0: amdgpu: Fatal error during GPU init Fixes: 2cd8b14aaa ("vfio/pci: Move to the device set infrastructure") Fixes: eadd86f835 ("vfio: Remove calls to vfio_group_add_container_user()") Signed-off-by: Anthony DeRossi <ajderossi@gmail.com> Reviewed-by: Jason Gunthorpe <jgg@nvidia.com> Reviewed-by: Kevin Tian <kevin.tian@intel.com> Link: https://lore.kernel.org/r/20221110014027.28780-4-ajderossi@gmail.com Signed-off-by: Alex Williamson <alex.williamson@redhat.com>	2022-11-10 12:03:36 -07:00
Anthony DeRossi	5cd189e410	vfio: Export the device set open count ... The open count of a device set is the sum of the open counts of all devices in the set. Drivers can use this value to determine whether shared resources are in use without tracking them manually or accessing the private open_count in vfio_device. Signed-off-by: Anthony DeRossi <ajderossi@gmail.com> Reviewed-by: Jason Gunthorpe <jgg@nvidia.com> Reviewed-by: Kevin Tian <kevin.tian@intel.com> Reviewed-by: Yi Liu <yi.l.liu@intel.com> Link: https://lore.kernel.org/r/20221110014027.28780-3-ajderossi@gmail.com Signed-off-by: Alex Williamson <alex.williamson@redhat.com>	2022-11-10 12:03:36 -07:00
Anthony DeRossi	7fdba00111	vfio: Fix container device registration life cycle ... In vfio_device_open(), vfio_device_container_register() is always called when open_count == 1. On error, vfio_device_container_unregister() is only called when open_count == 1 and close_device is set. This leaks a registration for devices without a close_device implementation. In vfio_device_fops_release(), vfio_device_container_unregister() is called unconditionally. This can cause a device to be unregistered multiple times. Treating container device registration/unregistration uniformly (always when open_count == 1) fixes both issues. Fixes: ce4b4657ff ("vfio: Replace the DMA unmapping notifier with a callback") Signed-off-by: Anthony DeRossi <ajderossi@gmail.com> Reviewed-by: Jason Gunthorpe <jgg@nvidia.com> Reviewed-by: Kevin Tian <kevin.tian@intel.com> Reviewed-by: Yi Liu <yi.l.liu@intel.com> Link: https://lore.kernel.org/r/20221110014027.28780-2-ajderossi@gmail.com Signed-off-by: Alex Williamson <alex.williamson@redhat.com>	2022-11-10 12:03:36 -07:00
Linus Torvalds	d3cf405133	VFIO updates for v6.1-rc1 ... - Prune private items from vfio_pci_core.h to a new internal header, fix missed function rename, and refactor vfio-pci interrupt defines. (Jason Gunthorpe) - Create consistent naming and handling of ioctls with a function per ioctl for vfio-pci and vfio group handling, use proper type args where available. (Jason Gunthorpe) - Implement a set of low power device feature ioctls allowing userspace to make use of power states such as D3cold where supported. (Abhishek Sahu) - Remove device counter on vfio groups, which had restricted the page pinning interface to singleton groups to account for limitations in the type1 IOMMU backend. Document usage as limited to emulated IOMMU devices, ie. traditional mdev devices where this restriction is consistent. (Jason Gunthorpe) - Correct function prefix in hisi_acc driver incurred during previous refactoring. (Shameer Kolothum) - Correct typo and remove redundant warning triggers in vfio-fsl driver. (Christophe JAILLET) - Introduce device level DMA dirty tracking uAPI and implementation in the mlx5 variant driver (Yishai Hadas & Joao Martins) - Move much of the vfio_device life cycle management into vfio core, simplifying and avoiding duplication across drivers. This also facilitates adding a struct device to vfio_device which begins the introduction of device rather than group level user support and fills a gap allowing userspace identify devices as vfio capable without implicit knowledge of the driver. (Kevin Tian & Yi Liu) - Split vfio container handling to a separate file, creating a more well defined API between the core and container code, masking IOMMU backend implementation from the core, allowing for an easier future transition to an iommufd based implementation of the same. (Jason Gunthorpe) - Attempt to resolve race accessing the iommu_group for a device between vfio releasing DMA ownership and removal of the device from the IOMMU driver. Follow-up with support to allow vfio_group to exist with NULL iommu_group pointer to support existing userspace use cases of holding the group file open. (Jason Gunthorpe) - Fix error code and hi/lo register manipulation issues in the hisi_acc variant driver, along with various code cleanups. (Longfang Liu) - Fix a prior regression in GVT-g group teardown, resulting in unreleased resources. (Jason Gunthorpe) - A significant cleanup and simplification of the mdev interface, consolidating much of the open coded per driver sysfs interface support into the mdev core. (Christoph Hellwig) - Simplification of tracking and locking around vfio_groups that fall out from previous refactoring. (Jason Gunthorpe) - Replace trivial open coded f_ops tests with new helper. (Alex Williamson) -----BEGIN PGP SIGNATURE----- iQJPBAABCAA5FiEEQvbATlQL0amee4qQI5ubbjuwiyIFAmNGz2AbHGFsZXgud2ls bGlhbXNvbkByZWRoYXQuY29tAAoJECObm247sIsiatYQAI+7bFjVsTKwCnWUhp/A WnFmLpnh/OsBIYiXRbXGZBgIO4iPmMyFkxqjnv6e8H1WnKhLbuPy/xCaAvPrtI8b YKCpzdrDnfrPfB4+0cyGLJx15Jqd3sOZy097kl2lQJTscELTjJxTl0uB/Fbf/s38 t1K2nIhBm+sGK3rTf3JjY4Jc7vDbwX7HQt6rUVEbd3NoyLJV1T/HdeSgwSMdyiED WwkRZ0z/vU0hEDk5wk1ZyltkiUzdCSws3C8T0J39xRObPLHR1vYgKO8aeZhfQb4p luD1fzGRMt3JinSXCPPm5HfADXq2Rozx7Y7a454fvCa7lpX4MNAgaQdfIzI64lZj cMgSYAIskVq4vxCkO4bKec4FYrzJoxBMJwiXZvOZ4mF5SL4UIDwerMqQTA3fvtQ+ puS6x+/DF9XXHrEewEX7teg6QYPQueneSS+fWeFpMGzDXSjdQB6qV+rMWS297t+4 1KyITxkOxcZQ4+j1OLPGtxsRLKtWApawoNTpRMlaD+hSExxHLbUmKexOLXzuAoVP nhbjud+jzEbpCnwps24Og/iEBdRYJcl2KwEeSRPI856YRDrNa9jPtiDlsAtKZOK2 gJnOixSss6R+wgVVYIyMDZ8tsvO+UDQruvqQ2kFku1FOlO86pvwD6UUVuTVosdNc fktw6Dx90N3fdb/o8jjAjssx =Z8+P -----END PGP SIGNATURE----- Merge tag 'vfio-v6.1-rc1' of https://github.com/awilliam/linux-vfio Pull VFIO updates from Alex Williamson: - Prune private items from vfio_pci_core.h to a new internal header, fix missed function rename, and refactor vfio-pci interrupt defines (Jason Gunthorpe) - Create consistent naming and handling of ioctls with a function per ioctl for vfio-pci and vfio group handling, use proper type args where available (Jason Gunthorpe) - Implement a set of low power device feature ioctls allowing userspace to make use of power states such as D3cold where supported (Abhishek Sahu) - Remove device counter on vfio groups, which had restricted the page pinning interface to singleton groups to account for limitations in the type1 IOMMU backend. Document usage as limited to emulated IOMMU devices, ie. traditional mdev devices where this restriction is consistent (Jason Gunthorpe) - Correct function prefix in hisi_acc driver incurred during previous refactoring (Shameer Kolothum) - Correct typo and remove redundant warning triggers in vfio-fsl driver (Christophe JAILLET) - Introduce device level DMA dirty tracking uAPI and implementation in the mlx5 variant driver (Yishai Hadas & Joao Martins) - Move much of the vfio_device life cycle management into vfio core, simplifying and avoiding duplication across drivers. This also facilitates adding a struct device to vfio_device which begins the introduction of device rather than group level user support and fills a gap allowing userspace identify devices as vfio capable without implicit knowledge of the driver (Kevin Tian & Yi Liu) - Split vfio container handling to a separate file, creating a more well defined API between the core and container code, masking IOMMU backend implementation from the core, allowing for an easier future transition to an iommufd based implementation of the same (Jason Gunthorpe) - Attempt to resolve race accessing the iommu_group for a device between vfio releasing DMA ownership and removal of the device from the IOMMU driver. Follow-up with support to allow vfio_group to exist with NULL iommu_group pointer to support existing userspace use cases of holding the group file open (Jason Gunthorpe) - Fix error code and hi/lo register manipulation issues in the hisi_acc variant driver, along with various code cleanups (Longfang Liu) - Fix a prior regression in GVT-g group teardown, resulting in unreleased resources (Jason Gunthorpe) - A significant cleanup and simplification of the mdev interface, consolidating much of the open coded per driver sysfs interface support into the mdev core (Christoph Hellwig) - Simplification of tracking and locking around vfio_groups that fall out from previous refactoring (Jason Gunthorpe) - Replace trivial open coded f_ops tests with new helper (Alex Williamson) * tag 'vfio-v6.1-rc1' of https://github.com/awilliam/linux-vfio: (77 commits) vfio: More vfio_file_is_group() use cases vfio: Make the group FD disassociate from the iommu_group vfio: Hold a reference to the iommu_group in kvm for SPAPR vfio: Add vfio_file_is_group() vfio: Change vfio_group->group_rwsem to a mutex vfio: Remove the vfio_group->users and users_comp vfio/mdev: add mdev available instance checking to the core vfio/mdev: consolidate all the description sysfs into the core code vfio/mdev: consolidate all the available_instance sysfs into the core code vfio/mdev: consolidate all the name sysfs into the core code vfio/mdev: consolidate all the device_api sysfs into the core code vfio/mdev: remove mtype_get_parent_dev vfio/mdev: remove mdev_parent_dev vfio/mdev: unexport mdev_bus_type vfio/mdev: remove mdev_from_dev vfio/mdev: simplify mdev_type handling vfio/mdev: embedd struct mdev_parent in the parent data structure vfio/mdev: make mdev.h standalone includable drm/i915/gvt: simplify vgpu configuration management drm/i915/gvt: fix a memory leak in intel_gvt_init_vgpu_types ...	2022-10-12 14:46:48 -07:00
Alex Williamson	b1b8132a65	vfio: More vfio_file_is_group() use cases ... Replace further open coded tests with helper. Reviewed-by: Jason Gunthorpe <jgg@nvidia.com> Link: https://lore.kernel.org/r/166516896843.1215571.5378890510536477434.stgit@omen Signed-off-by: Alex Williamson <alex.williamson@redhat.com>	2022-10-07 13:06:52 -06:00
Jason Gunthorpe	3dd59a7dcb	vfio: Make the group FD disassociate from the iommu_group ... Allow the vfio_group struct to exist with a NULL iommu_group pointer. When the pointer is NULL the vfio_group users promise not to touch the iommu_group. This allows a driver to be hot unplugged while userspace is keeping the group FD open. Remove all the code waiting for the group FD to close. This fixes a userspace regression where we learned that virtnodedevd leaves a group FD open even though the /dev/ node for it has been deleted and all the drivers for it unplugged. Fixes: ca5f21b257 ("vfio: Follow a strict lifetime for struct iommu_group") Reported-by: Christian Borntraeger <borntraeger@linux.ibm.com> Tested-by: Matthew Rosato <mjrosato@linux.ibm.com> Tested-by: Christian Borntraeger <borntraeger@de.ibm.com> Tested-by: Eric Farman <farman@linux.ibm.com> Signed-off-by: Jason Gunthorpe <jgg@nvidia.com> Link: https://lore.kernel.org/r/3-v2-15417f29324e+1c-vfio_group_disassociate_jgg@nvidia.com Signed-off-by: Alex Williamson <alex.williamson@redhat.com>	2022-10-07 08:10:52 -06:00
Jason Gunthorpe	819da99a73	vfio: Hold a reference to the iommu_group in kvm for SPAPR ... SPAPR exists completely outside the normal iommu driver framework, the groups it creates are fake and are only created to enable VFIO's uAPI. Thus, it does not need to follow the iommu core rule that the iommu_group will only be touched while a driver is attached. Carry a group reference into KVM and have KVM directly manage the lifetime of this object independently of VFIO. This means KVM no longer relies on the vfio group file being valid to maintain the group reference. Tested-by: Matthew Rosato <mjrosato@linux.ibm.com> Signed-off-by: Jason Gunthorpe <jgg@nvidia.com> Link: https://lore.kernel.org/r/2-v2-15417f29324e+1c-vfio_group_disassociate_jgg@nvidia.com Signed-off-by: Alex Williamson <alex.williamson@redhat.com>	2022-10-07 08:10:52 -06:00
Jason Gunthorpe	4b22ef042d	vfio: Add vfio_file_is_group() ... This replaces uses of vfio_file_iommu_group() which were only detecting if the file is a VFIO file with no interest in the actual group. The only remaning user of vfio_file_iommu_group() is in KVM for the SPAPR stuff. It passes the iommu_group into the arch code through kvm for some reason. Tested-by: Matthew Rosato <mjrosato@linux.ibm.com> Tested-by: Christian Borntraeger <borntraeger@de.ibm.com> Tested-by: Eric Farman <farman@linux.ibm.com> Signed-off-by: Jason Gunthorpe <jgg@nvidia.com> Link: https://lore.kernel.org/r/1-v2-15417f29324e+1c-vfio_group_disassociate_jgg@nvidia.com Signed-off-by: Alex Williamson <alex.williamson@redhat.com>	2022-10-07 08:10:52 -06:00
Jason Gunthorpe	c82e81ab25	vfio: Change vfio_group->group_rwsem to a mutex ... These days not much is using the read side: - device first open - ioctl_get_status - device FD release - check enforced_coherent None of this is performance, so just make it into a normal mutex. Signed-off-by: Jason Gunthorpe <jgg@nvidia.com> Reviewed-by: Kevin Tian <kevin.tian@intel.com> Link: https://lore.kernel.org/r/2-v1-917e3647f123+b1a-vfio_group_users_jgg@nvidia.com Signed-off-by: Alex Williamson <alex.williamson@redhat.com>	2022-10-04 12:06:58 -06:00
Jason Gunthorpe	912b74d26c	vfio: Remove the vfio_group->users and users_comp ... Kevin points out that the users is really just tracking if group->opened_file is set, so we can simplify this code to a wait_queue that looks for !opened_file under the group_rwsem. Signed-off-by: Jason Gunthorpe <jgg@nvidia.com> Reviewed-by: Kevin Tian <kevin.tian@intel.com> Link: https://lore.kernel.org/r/1-v1-917e3647f123+b1a-vfio_group_users_jgg@nvidia.com Signed-off-by: Alex Williamson <alex.williamson@redhat.com>	2022-10-04 12:06:58 -06:00
Jason Gunthorpe	9c799c224d	vfio/mdev: add mdev available instance checking to the core ... Many of the mdev drivers use a simple counter for keeping track of the available instances. Move this code to the core code and store the counter in the mdev_parent. Implement it using correct locking, fixing mdpy. Drivers just provide the value in the mdev_driver at registration time and the core code takes care of maintaining it and exposing the value in sysfs. [hch: count instances per-parent instead of per-type, use an atomic_t to avoid taking mdev_list_lock in the show method] Signed-off-by: Jason Gunthorpe <jgg@nvidia.com> Signed-off-by: Christoph Hellwig <hch@lst.de> Reviewed-by: Kevin Tian <kevin.tian@intel.com> Reviewed-by: Kirti Wankhede <kwankhede@nvidia.com> Reviewed-by: Eric Farman <farman@linux.ibm.com> Link: https://lore.kernel.org/r/20220923092652.100656-15-hch@lst.de Signed-off-by: Alex Williamson <alex.williamson@redhat.com>	2022-10-04 12:06:58 -06:00
Christoph Hellwig	685a1537f4	vfio/mdev: consolidate all the description sysfs into the core code ... Every driver just emits a string, simply add a method to the mdev_driver to return it and provide a standard sysfs show function. Remove the now unused types_attrs field in struct mdev_driver and the support code for it. Signed-off-by: Christoph Hellwig <hch@lst.de> Reviewed-by: Jason Gunthorpe <jgg@nvidia.com> Reviewed-by: Kevin Tian <kevin.tian@intel.com> Reviewed-by: Kirti Wankhede <kwankhede@nvidia.com> Link: https://lore.kernel.org/r/20220923092652.100656-14-hch@lst.de Signed-off-by: Alex Williamson <alex.williamson@redhat.com>	2022-10-04 12:06:58 -06:00
Christoph Hellwig	f2fbc72e6d	vfio/mdev: consolidate all the available_instance sysfs into the core code ... Every driver just print a number, simply add a method to the mdev_driver to return it and provide a standard sysfs show function. Signed-off-by: Christoph Hellwig <hch@lst.de> Reviewed-by: Jason Gunthorpe <jgg@nvidia.com> Reviewed-by: Kevin Tian <kevin.tian@intel.com> Reviewed-by: Kirti Wankhede <kwankhede@nvidia.com> Reviewed-by: Eric Farman <farman@linux.ibm.com> Link: https://lore.kernel.org/r/20220923092652.100656-13-hch@lst.de Signed-off-by: Alex Williamson <alex.williamson@redhat.com>	2022-10-04 12:06:58 -06:00
Christoph Hellwig	0bc79069cc	vfio/mdev: consolidate all the name sysfs into the core code ... Every driver just emits a static string, simply add a field to the mdev_type for the driver to fill out or fall back to the sysfs name and provide a standard sysfs show function. Signed-off-by: Christoph Hellwig <hch@lst.de> Reviewed-by: Jason Gunthorpe <jgg@nvidia.com> Reviewed-by: Kevin Tian <kevin.tian@intel.com> Reviewed-by: Kirti Wankhede <kwankhede@nvidia.com> Reviewed-by: Eric Farman <farman@linux.ibm.com> Link: https://lore.kernel.org/r/20220923092652.100656-12-hch@lst.de Signed-off-by: Alex Williamson <alex.williamson@redhat.com>	2022-10-04 12:06:58 -06:00
Jason Gunthorpe	290aac5df8	vfio/mdev: consolidate all the device_api sysfs into the core code ... Every driver just emits a static string, simply feed it through the ops and provide a standard sysfs show function. Signed-off-by: Jason Gunthorpe <jgg@nvidia.com> Signed-off-by: Christoph Hellwig <hch@lst.de> Reviewed-by: Tony Krowiak <akrowiak@linux.ibm.com> Reviewed-by: Kevin Tian <kevin.tian@intel.com> Reviewed-by: Kirti Wankhede <kwankhede@nvidia.com> Reviewed-by: Eric Farman <farman@linux.ibm.com> Link: https://lore.kernel.org/r/20220923092652.100656-11-hch@lst.de Signed-off-by: Alex Williamson <alex.williamson@redhat.com>	2022-10-04 12:06:58 -06:00
Christoph Hellwig	c7c1f38f6c	vfio/mdev: remove mtype_get_parent_dev ... Just open code the dereferences in the only user. Signed-off-by: Christoph Hellwig <hch@lst.de> Reviewed-by: Jason Gunthorpe <jgg@nvidia.com> Reviewed-by: Jason J. Herne <jjherne@linux.ibm.com> Reviewed-by: Kevin Tian <kevin.tian@intel.com> Reviewed-by: Kirti Wankhede <kwankhede@nvidia.com> Reviewed-by: Eric Farman <farman@linux.ibm.com> Link: https://lore.kernel.org/r/20220923092652.100656-10-hch@lst.de Signed-off-by: Alex Williamson <alex.williamson@redhat.com>	2022-10-04 12:06:58 -06:00
Christoph Hellwig	062e720cd2	vfio/mdev: remove mdev_parent_dev ... Just open code the dereferences in the only user. Signed-off-by: Christoph Hellwig <hch@lst.de> Reviewed-by: Jason Gunthorpe <jgg@nvidia.com> Reviewed-by: Kevin Tian <kevin.tian@intel.com> Reviewed-by: Kirti Wankhede <kwankhede@nvidia.com> Link: https://lore.kernel.org/r/20220923092652.100656-9-hch@lst.de Signed-off-by: Alex Williamson <alex.williamson@redhat.com>	2022-10-04 12:06:58 -06:00
Christoph Hellwig	2815fe149f	vfio/mdev: unexport mdev_bus_type ... mdev_bus_type is only used in mdev.ko now, so unexport it. Signed-off-by: Christoph Hellwig <hch@lst.de> Reviewed-by: Jason Gunthorpe <jgg@nvidia.com> Reviewed-by: Kevin Tian <kevin.tian@intel.com> Reviewed-by: Kirti Wankhede <kwankhede@nvidia.com> Link: https://lore.kernel.org/r/20220923092652.100656-8-hch@lst.de Signed-off-by: Alex Williamson <alex.williamson@redhat.com>	2022-10-04 12:06:58 -06:00
Christoph Hellwig	cbf3bb28aa	vfio/mdev: remove mdev_from_dev ... Just open code it in the only caller. Signed-off-by: Christoph Hellwig <hch@lst.de> Reviewed-by: Jason Gunthorpe <jgg@nvidia.com> Reviewed-by: Kevin Tian <kevin.tian@intel.com> Reviewed-by: Kirti Wankhede <kwankhede@nvidia.com> Link: https://lore.kernel.org/r/20220923092652.100656-7-hch@lst.de Signed-off-by: Alex Williamson <alex.williamson@redhat.com>	2022-10-04 12:06:58 -06:00
Christoph Hellwig	da44c340c4	vfio/mdev: simplify mdev_type handling ... Instead of abusing struct attribute_group to control initialization of struct mdev_type, just define the actual attributes in the mdev_driver, allocate the mdev_type structures in the caller and pass them to mdev_register_parent. This allows the caller to use container_of to get at the containing structure and thus significantly simplify the code. Signed-off-by: Christoph Hellwig <hch@lst.de> Reviewed-by: Jason Gunthorpe <jgg@nvidia.com> Reviewed-by: Tony Krowiak <akrowiak@linux.ibm.com> Reviewed-by: Kevin Tian <kevin.tian@intel.com> Reviewed-by: Kirti Wankhede <kwankhede@nvidia.com> Reviewed-by: Eric Farman <farman@linux.ibm.com> Link: https://lore.kernel.org/r/20220923092652.100656-6-hch@lst.de Signed-off-by: Alex Williamson <alex.williamson@redhat.com>	2022-10-04 12:06:58 -06:00
Christoph Hellwig	89345d5177	vfio/mdev: embedd struct mdev_parent in the parent data structure ... Simplify mdev_{un}register_device by requiring the caller to pass in a structure allocate as part of the parent device structure. This removes the need for a list of parents and the separate mdev_parent refcount as we can simplify rely on the reference to the parent device. Signed-off-by: Christoph Hellwig <hch@lst.de> Reviewed-by: Jason Gunthorpe <jgg@nvidia.com> Reviewed-by: Tony Krowiak <akrowiak@linux.ibm.com> Reviewed-by: Kevin Tian <kevin.tian@intel.com> Reviewed-by: Kirti Wankhede <kwankhede@nvidia.com> Reviewed-by: Eric Farman <farman@linux.ibm.com> Link: https://lore.kernel.org/r/20220923092652.100656-5-hch@lst.de Signed-off-by: Alex Williamson <alex.williamson@redhat.com>	2022-10-04 12:06:58 -06:00
Christoph Hellwig	bdef2b7896	vfio/mdev: make mdev.h standalone includable ... Include <linux/device.h> and <linux/uuid.h> so that users of this headers don't need to do that and remove those includes that aren't needed any more. Signed-off-by: Christoph Hellwig <hch@lst.de> Reviewed-by: Eric Farman <farman@linux.ibm.com> Reviewed-by: Jason Gunthorpe <jgg@nvidia.com> Reviewed-by: Tony Krowiak <akrowiak@linux.ibm.com> Reviewed-by: Kevin Tian <kevin.tian@intel.com> Reviewed-by: Kirti Wankhede <kwankhede@nvidia.com> Link: https://lore.kernel.org/r/20220923092652.100656-4-hch@lst.de Signed-off-by: Alex Williamson <alex.williamson@redhat.com>	2022-10-04 12:06:58 -06:00
Longfang Liu	42e1d1eed2	hisi_acc_vfio_pci: Update some log and comment formats ... 1. Modify some annotation information formats to keep the entire driver annotation format consistent. 2. Modify some log description formats to be consistent with the format of the entire driver log. Reviewed-by: Jason Gunthorpe <jgg@nvidia.com> Signed-off-by: Longfang Liu <liulongfang@huawei.com> Link: https://lore.kernel.org/r/20220926093332.28824-6-liulongfang@huawei.com Signed-off-by: Alex Williamson <alex.williamson@redhat.com>	2022-09-27 09:30:31 -06:00
Longfang Liu	3b7cfba0d8	hisi_acc_vfio_pci: Remove useless macro definitions ... The QM_QUE_ISO_CFG macro definition is no longer used and needs to be deleted from the current driver. Reviewed-by: Jason Gunthorpe <jgg@nvidia.com> Signed-off-by: Longfang Liu <liulongfang@huawei.com> Link: https://lore.kernel.org/r/20220926093332.28824-5-liulongfang@huawei.com Signed-off-by: Alex Williamson <alex.williamson@redhat.com>	2022-09-27 09:30:31 -06:00
Longfang Liu	af72f53c1b	hisi_acc_vfio_pci: Remove useless function parameter ... Remove unused function parameters for vf_qm_fun_reset() and ensure the device is enabled before the reset operation is performed. Reviewed-by: Jason Gunthorpe <jgg@nvidia.com> Signed-off-by: Longfang Liu <liulongfang@huawei.com> Link: https://lore.kernel.org/r/20220926093332.28824-4-liulongfang@huawei.com Signed-off-by: Alex Williamson <alex.williamson@redhat.com>	2022-09-27 09:30:31 -06:00
Longfang Liu	008e5e996f	hisi_acc_vfio_pci: Fix device data address combination problem ... The queue address of the accelerator device should be combined into a dma address in a way of combining the low and high bits. The previous combination is wrong and needs to be modified. Reviewed-by: Jason Gunthorpe <jgg@nvidia.com> Signed-off-by: Longfang Liu <liulongfang@huawei.com> Link: https://lore.kernel.org/r/20220926093332.28824-3-liulongfang@huawei.com Signed-off-by: Alex Williamson <alex.williamson@redhat.com>	2022-09-27 09:30:31 -06:00
Longfang Liu	948f5ada58	hisi_acc_vfio_pci: Fixes error return code issue ... During the process of compatibility and matching of live migration device information, if the isolation status of the two devices is inconsistent, the live migration needs to be exited. The current driver does not return the error code correctly and needs to be fixed. Reviewed-by: Shameer Kolothum <shameerali.kolothum.thodi@huawei.com> Reviewed-by: Jason Gunthorpe <jgg@nvidia.com> Signed-off-by: Longfang Liu <liulongfang@huawei.com> Link: https://lore.kernel.org/r/20220926093332.28824-2-liulongfang@huawei.com Signed-off-by: Alex Williamson <alex.williamson@redhat.com>	2022-09-27 09:30:31 -06:00
Jason Gunthorpe	ca5f21b257	vfio: Follow a strict lifetime for struct iommu_group ... The iommu_group comes from the struct device that a driver has been bound to and then created a struct vfio_device against. To keep the iommu layer sane we want to have a simple rule that only an attached driver should be using the iommu API. Particularly only an attached driver should hold ownership. In VFIO's case since it uses the group APIs and it shares between different drivers it is a bit more complicated, but the principle still holds. Solve this by waiting for all users of the vfio_group to stop before allowing vfio_unregister_group_dev() to complete. This is done with a new completion to know when the users go away and an additional refcount to keep track of how many device drivers are sharing the vfio group. The last driver to be unregistered will clean up the group. This solves crashes in the S390 iommu driver that come because VFIO ends up racing releasing ownership (which attaches the default iommu_domain to the device) with the removal of that same device from the iommu driver. This is a side case that iommu drivers should not have to cope with. iommu driver failed to attach the default/blocking domain WARNING: CPU: 0 PID: 5082 at drivers/iommu/iommu.c:1961 iommu_detach_group+0x6c/0x80 Modules linked in: macvtap macvlan tap vfio_pci vfio_pci_core irqbypass vfio_virqfd kvm nft_fib_inet nft_fib_ipv4 nft_fib_ipv6 nft_fib nft_reject_inet nf_reject_ipv4 nf_reject_ipv6 nft_reject nft_ct nft_chain_nat nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 ip_set nf_tables nfnetlink mlx5_ib sunrpc ib_uverbs ism smc uvdevice ib_core s390_trng eadm_sch tape_3590 tape tape_class vfio_ccw mdev vfio_iommu_type1 vfio zcrypt_cex4 sch_fq_codel configfs ghash_s390 prng chacha_s390 libchacha aes_s390 mlx5_core des_s390 libdes sha3_512_s390 nvme sha3_256_s390 sha512_s390 sha256_s390 sha1_s390 sha_common nvme_core zfcp scsi_transport_fc pkey zcrypt rng_core autofs4 CPU: 0 PID: 5082 Comm: qemu-system-s39 Tainted: G W 6.0.0-rc3 #5 Hardware name: IBM 3931 A01 782 (LPAR) Krnl PSW : 0704c00180000000 000000095bb10d28 (iommu_detach_group+0x70/0x80) R:0 T:1 IO:1 EX:1 Key:0 M:1 W:0 P:0 AS:3 CC:0 PM:0 RI:0 EA:3 Krnl GPRS: 0000000000000001 0000000900000027 0000000000000039 000000095c97ffe0 00000000fffeffff 00000009fc290000 00000000af1fda50 00000000af590b58 00000000af1fdaf0 0000000135c7a320 0000000135e52258 0000000135e52200 00000000a29e8000 00000000af590b40 000000095bb10d24 0000038004b13c98 Krnl Code: 000000095bb10d18: c020003d56fc larl %r2,000000095c2bbb10 000000095bb10d1e: c0e50019d901 brasl %r14,000000095be4bf20 #000000095bb10d24: af000000 mc 0,0 >000000095bb10d28: b904002a lgr %r2,%r10 000000095bb10d2c: ebaff0a00004 lmg %r10,%r15,160(%r15) 000000095bb10d32: c0f4001aa867 brcl 15,000000095be65e00 000000095bb10d38: c004002168e0 brcl 0,000000095bf3def8 000000095bb10d3e: eb6ff0480024 stmg %r6,%r15,72(%r15) Call Trace: [<000000095bb10d28>] iommu_detach_group+0x70/0x80 ([<000000095bb10d24>] iommu_detach_group+0x6c/0x80) [<000003ff80243b0e>] vfio_iommu_type1_detach_group+0x136/0x6c8 [vfio_iommu_type1] [<000003ff80137780>] __vfio_group_unset_container+0x58/0x158 [vfio] [<000003ff80138a16>] vfio_group_fops_unl_ioctl+0x1b6/0x210 [vfio] pci 0004:00:00.0: Removing from iommu group 4 [<000000095b5b62e8>] __s390x_sys_ioctl+0xc0/0x100 [<000000095be5d3b4>] __do_syscall+0x1d4/0x200 [<000000095be6c072>] system_call+0x82/0xb0 Last Breaking-Event-Address: [<000000095be4bf80>] __warn_printk+0x60/0x68 It indicates that domain->ops->attach_dev() failed because the driver has already passed the point of destructing the device. Fixes: 9ac8545199 ("iommu: Fix use-after-free in iommu_release_device") Reported-by: Matthew Rosato <mjrosato@linux.ibm.com> Tested-by: Matthew Rosato <mjrosato@linux.ibm.com> Reviewed-by: Yi Liu <yi.l.liu@intel.com> Signed-off-by: Jason Gunthorpe <jgg@nvidia.com> Link: https://lore.kernel.org/r/0-v2-a3c5f4429e2a+55-iommu_group_lifetime_jgg@nvidia.com Signed-off-by: Alex Williamson <alex.williamson@redhat.com>	2022-09-27 09:01:23 -06:00
Joerg Roedel	38713c6028	Merge branches 'apple/dart', 'arm/mediatek', 'arm/omap', 'arm/smmu', 'virtio', 'x86/vt-d', 'x86/amd' and 'core' into next	2022-09-26 15:52:31 +02:00
Jason Gunthorpe	cdc71fe4ec	vfio: Move container code into drivers/vfio/container.c ... All the functions that dereference struct vfio_container are moved into container.c. Simple code motion, no functional change. Reviewed-by: Kevin Tian <kevin.tian@intel.com> Signed-off-by: Jason Gunthorpe <jgg@nvidia.com> Link: https://lore.kernel.org/r/8-v3-297af71838d2+b9-vfio_container_split_jgg@nvidia.com Signed-off-by: Alex Williamson <alex.williamson@redhat.com>	2022-09-22 15:46:06 -06:00