33043 Commits

Author	SHA1	Message	Date
Srinivasarao Pathipati	ec1604a821	Merge keystone/android14-6.1-keystone-qcom-release.6.1.68+ (7cb0122) into qcom-6.1 ... * refs/heads/tmp-7cb0122: FROMLIST: mm/migrate: set swap entry values of THP tail pages properly. FROMLIST: binder: check offset alignment in binder_get_object() FROMLIST: iommu: Avoid races around default domain allocations ANDROID: ABI: Update oplus symbol list ANDROID: vendor_hook: rename the the name of hooks Revert "interconnect: Fix locking for runpm vs reclaim" ANDROID: abi_gki_aarch64_qcom: Update symbol list Revert "interconnect: Teach lockdep about icc_bw_lock order" Revert "usb: dwc3: core: configure TX/RX threshold for DWC3_IP" Revert "usb: dwc3: core: configure TX/RX threshold for DWC3_IP" ANDROID: Update symbols list for open-dice.ko ANDROID: Update symbols list for open-dice.ko ANDROID: ABI: Update oplus symbol list ANDROID: vendor_hook: rename the the name of hooks ANDROID: EXPORT raise_softirq and update the ABI symbol list UPSTREAM: netfilter: nf_tables: disallow timeout for anonymous sets BACKPORT: FROMGIT: mm: add alloc_contig_migrate_range allocation statistics FROMLIST: iommu: Avoid races around default domain allocations ANDROID: fips140 - fix integrity check by unapplying dynamic SCS ANDROID: fips140 - add option for debugging the integrity check BACKPORT: f2fs: split initial and dynamic conditions for extent_cache ANDROID: GKI: Update oplus symbol list ANDROID: Update the ABI symbol list UPSTREAM: usb: typec: altmodes/displayport: create sysfs nodes as driver's default device attribute group UPSTREAM: epoll: use refcount to reduce ep_mutex contention ANDROID: GKI: Update oplus symbol list ANDROID: uid_sys_stat: fix data-error of cputime and io ANDROID: Update the ABI symbol list ANDROID: vendor_hooks: Export cma_alloc trace points ANDROID: gki_defconfig: Enable CONFIG_ARM_SCMI_TRANSPORT_VIRTIO Revert "Merge tag 'android14-6.1.75_r00' into android14-6.1" UPSTREAM: net: tls: fix use-after-free with partial reads and async decrypt ANDROID: GKI: add GKI symbol list for Exynosauto SoC UPSTREAM: usb: typec: class: fix typec_altmode_put_partner to put plugs UPSTREAM: Revert "usb: typec: class: fix typec_altmode_put_partner to put plugs" ANDROID: GKI: Update symbol list for mtk ANDROID: GKI: Update oplus symbol list FROMGIT: f2fs: introduce FAULT_BLKADDR_CONSISTENCE FROMGIT: f2fs: fix to remove unnecessary f2fs_bug_on() to avoid panic FROMGIT: f2fs: compress: fix to avoid inconsistence bewteen i_blocks and dnode FROMGIT: f2fs: compress: fix to check unreleased compressed cluster FROMGIT: f2fs: compress: fix to cover normal cluster write with cp_rwsem FROMGIT: f2fs: compress: fix to guarantee persisting compressed blocks by CP BACKPORT: gso: fix dodgy bit handling for GSO_UDP_L4 ANDROID: remove LTO check from build.config.gki.aarch64.fips140 ANDROID: add symbol list for fips140 module ANDROID: ABI: Update oplus symbol list ANDROID: vendor_hooks: Add hook for trace_android_vh_copy_process ANDROID: abi_gki_aarch64_qcom: Update symbol list ANDROID: GKI: Update symbol list for transsion ANDROID: Add vendor_hooks to workaround CONFIG_TASK_DELAY_ACCT Revert "ANDROID: Build null_blk and scsi_debug as kernel modules" Revert "interconnect: Fix locking for runpm vs reclaim" ANDROID: GKI: Update symbol list for xiaomi ANDROID: sched/cpuset: Add vendor hook to change tasks affinity ANDROID: ABI: Update oplus symbol list ANDROID: binder: Add vendor hook to fix priority restore Revert "interconnect: Teach lockdep about icc_bw_lock order" BACKPORT: gso: fix dodgy bit handling for GSO_UDP_L4 ANDROID: ABI: Update oplus symbol list ANDROID: vendor_hooks: Add hook for trace_android_vh_copy_process ANDROID: GKI: Update symbol list for mtk FROMGIT: PM: runtime: add tracepoint for runtime_status changes ANDROID: GKI: add allowed list file for xiaomi UPSTREAM: netfilter: nft_set_rbtree: skip end interval element from gc ANDROID: GKI: add symbol list file for moto UPSTREAM: scsi: ufs: core: Fix racing issue between ufshcd_mcq_abort() and ISR UPSTREAM: scsi: ufs: core: Remove dev cmd clock scaling busy ANDROID: ABI: Update symbol list for Nothing ANDROID: abi_gki_aarch64_qcom: Export trace_android_vh_try_fixup_sea ANDROID: arm64: Call fixup_exception() within do_sea() ANDROID: PCI: dwc: Wait for the link only if it has been started ANDROID: Update the Pixel symbol list and GKI ABI ANDROID: scsi: ufs: add complete init vendor hook ANDROID: Update the ABI symbol list ANDROID: Fix CRC error with iommu_* functions Revert "bpf: add percpu stats for bpf_map elements insertions/deletions" Revert "bpf: Add map and need_defer parameters to .map_fd_put_ptr()" Revert "bpf: Defer the free of inner map when necessary" ANDROID: Roll back some code to fix system_server registers psi trigger failed. ANDROID: GKI: Update the ABI symbol list UPSTREAM: virtio: Add support for no-reset virtio PCI PM UPSTREAM: netfilter: nf_tables: check if catch-all set element is active in next generation UPSTREAM: net: tls, update curr on splice as well ANDROID: Update the ABI symbol list ANDROID: Add pci_read_config_word to virtual device symbol list ANDROID: Export kthread_set_per_cpu ANDROID: GKI: fix ABI breakage in struct ipv6_devconf Reapply "net: release reference to inet6_dev pointer" Reapply "net: change accept_ra_min_rtr_lft to affect all RA lifetimes" Reapply "net: add sysctl accept_ra_min_rtr_lft" ANDROID: GKI: explicit include of stringify.h BACKPORT: erofs: fix infinite loop due to a race of filling compressed_bvecs ANDROID: arm64: virt: Invalidate tlb once the balloon before reporting/inflating ANDROID: arm64: virt: Make the page_relinquish call generic UPSTREAM: drm/msm/dsi: Use pm_runtime_resume_and_get to prevent refcnt leaks UPSTREAM: drm/msm/dsi: Use pm_runtime_resume_and_get to prevent refcnt leaks UPSTREAM: drm/msm/dsi: Enable runtime PM UPSTREAM: arm64: scs: Disable LTO for SCS patching code ANDROID: GKI: Update symbol list for mtk ANDROID: GKI: Update symbol list for mtk BACKPORT: f2fs: Restrict max filesize for 16K f2fs BACKPORT: f2fs: Support Block Size == Page Size ANDROID: abi_gki_aarch64_qcom: Update symbol list UPSTREAM: drm/msm/dsi: Enable runtime PM UPSTREAM: usb: typec: tcpm: fix the PD disabled case ANDROID: ABI: Update symbol list for imx UPSTREAM: netfilter: nf_tables: reject QUEUE/DROP verdict parameters ANDROID: ABI: Update oplus symbol list ANDROID: fuse: Fix the issue of fuse_dentry_canonical_path ANDROID: Update the ABI symbol list ANDROID: Export cpufreq_driver_test_flags() ANDROID: Build null_blk and scsi_debug as kernel modules ANDROID: GKI: Update the pixel symbol list ANDROID: usb: dwc3: export tracepoint for dwc3 read/write ANDROID: scsi: ufs: add vendor hook to override key reprogramming ANDROID: vendor_hooks: Add hook for binder_detect_low_async_space_locked ANDROID: Update the ABI symbol list ANDROID: Update the ABI representation UPSTREAM: usb: typec: tcpm: Support multiple capabilities UPSTREAM: usb: typec: tcpm: Parse Accessory Mode information ANDROID: ABI: Update oplus symbol list ANDROID: vendor_hooks: add hooks in driver/android/binder.c UPSTREAM: net/rose: Fix Use-After-Free in rose_ioctl UPSTREAM: ida: Fix crash in ida_free when the bitmap is empty ANDROID: GKI: Update symbol list for mtk ANDROID: GKI: Update symbol list for mtk Reapply "perf: Disallow mis-matched inherited group reads" ANDROID: GKI: Add Pasa symbol list FROMGIT: mm: memcg: don't periodically flush stats when memcg is disabled ANDROID: Update the ABI symbol list ANDROID: sched: export update_misfit_status symbol ANDROID: GKI: Add ASR KMI symbol list FROMGIT: usb: dwc3: gadget: Fix NULL pointer dereference in dwc3_gadget_suspend FROMLIST: usb: core: Prevent null pointer dereference in update_port_device_state ANDROID: gki_defconfig: Enable CONFIG_NVME_MULTIPATH BACKPORT: irqchip/gic-v3: Work around affinity issues on ASR8601 BACKPORT: irqchip/gic-v3: Improve affinity helper Linux 6.1.75 Revert "Revert "md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d"" arm64: dts: armada-3720-turris-mox: set irq type for RTC Revert "KEYS: encrypted: Add check for strsep" riscv: Fix wrong usage of lm_alias() when splitting a huge linear mapping block: Remove special-casing of compound pages i2c: s3c24xx: fix transferring more than one message in polling mode i2c: s3c24xx: fix read transfers in polling mode ipv6: mcast: fix data-race in ipv6_mc_down / mld_ifc_work selftests: mlxsw: qos_pfc: Adjust the test to support 8 lanes mlxsw: spectrum_acl_erp: Fix error flow of pool allocation failure loop: fix the the direct I/O support check when used on top of block devices ethtool: netlink: Add missing ethnl_ops_begin/complete kdb: Fix a potential buffer overflow in kdb_local() ipvs: avoid stat macros calls from preemptible context netfilter: nf_tables: reject NFT_SET_CONCAT with not field length description netfilter: nf_tables: skip dead set elements in netlink dump netfilter: nf_tables: do not allow mismatch field size and set key length netfilter: bridge: replace physindev with physinif in nf_bridge_info netfilter: propagate net to nf_bridge_get_physindev netfilter: nf_queue: remove excess nf_bridge variable netfilter: nfnetlink_log: use proper helper for fetching physinif netfilter: nft_limit: do not ignore unsupported flags netfilter: nf_tables: reject invalid set policy mptcp: relax check on MPC passive fallback LoongArch: BPF: Prevent out-of-bounds memory access net: dsa: vsc73xx: Add null pointer check to vsc73xx_gpio_probe bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS net: stmmac: ethtool: Fixed calltrace caused by unbalanced disable_irq_wake calls drm/amdkfd: fixes for HMM mem allocation drm/amdkfd: Use resource_size() helper function dt-bindings: gpio: xilinx: Fix node address in gpio net: ravb: Fix dma_addr_t truncation in error case udp: annotate data-races around up->pending block: ensure we hold a queue reference when using queue limits mptcp: refine opt_mp_capable determination mptcp: use OPTION_MPTCP_MPJ_SYN in subflow_check_req() mptcp: use OPTION_MPTCP_MPJ_SYNACK in subflow_finish_connect() mptcp: strict validation before using mp_opt->hmac mptcp: mptcp_parse_option() fix for MPTCPOPT_MP_JOIN net: phy: micrel: populate .soft_reset for KSZ9131 amt: do not use overwrapped cb area net: ethernet: ti: am65-cpsw: Fix max mtu to fit ethernet frames net: qualcomm: rmnet: fix global oob in rmnet_policy s390/pci: fix max size calculation in zpci_memcpy_toio() ASoC: mediatek: sof-common: Add NULL check for normal_link string PCI: mediatek-gen3: Fix translation window size calculation PCI: keystone: Fix race condition when initializing PHYs nvmet-tcp: Fix the H2C expected PDU len calculation nvme: trace: avoid memcpy overflow warning nvmet: re-fix tracing strncpy() warning serial: imx: Correct clock error message in function probe() usb: xhci-mtk: fix a short packet issue of gen1 isoc-in transfer apparmor: avoid crash when parsed profile name is empty cxl/region: fix x9 interleave typo perf env: Avoid recursively taking env->bpf_progs.lock nvmet-tcp: fix a crash in nvmet_req_complete() nvmet-tcp: Fix a kernel panic when host sends an invalid H2C PDU length vdpa: Fix an error handling path in eni_vdpa_probe() spmi: mtk-pmif: Serialize PMIF status check and command submission usb: cdc-acm: return correct error code on unsupported break tty: use 'if' in send_break() instead of 'goto' tty: don't check for signal_pending() in send_break() tty: early return from send_break() on TTY_DRIVER_HARDWARE_BREAK tty: change tty_write_lock()'s ndelay parameter to bool perf genelf: Set ELF program header addresses properly perf hisi-ptt: Fix one memory leakage in hisi_ptt_process_auxtrace_event() perf header: Fix one memory leakage in perf_event__fprintf_event_update() iio: adc: ad9467: fix scale setting iio: adc: ad9467: don't ignore error codes iio: adc: ad9467: fix reset gpio handling selftests/sgx: Skip non X86_64 platform selftests/sgx: Include memory clobber for inline asm in test enclave selftests/sgx: Fix uninitialized pointer dereferences in encl_get_entry selftests/sgx: Fix uninitialized pointer dereference in error path serial: imx: fix tx statemachine deadlock software node: Let args be NULL in software_node_get_reference_args acpi: property: Let args be NULL in __acpi_node_get_property_reference base/node.c: initialize the accessor list before registering libapi: Add missing linux/types.h header to get the __u64 type on io.h serial: 8250: omap: Don't skip resource freeing if pm_runtime_resume_and_get() failed power: supply: bq256xx: fix some problem in bq256xx_hw_init power: supply: cw2015: correct time_to_empty units in sysfs MIPS: Alchemy: Fix an out-of-bound access in db1550_dev_setup() MIPS: Alchemy: Fix an out-of-bound access in db1200_dev_setup() riscv: Fixed wrong register in XIP_FIXUP_FLASH_OFFSET macro riscv: Fix set_direct_map_default_noflush() to reset _PAGE_EXEC riscv: Fix set_memory_XX() and set_direct_map_XX() by splitting huge linear mappings riscv: Fix module_alloc() that did not reset the linear mapping permissions riscv: Check if the code to patch lies in the exit section mips: Fix incorrect max_low_pfn adjustment mips: dmi: Fix early remap on MIPS32 mfd: intel-lpss: Fix the fractional clock divider flags leds: aw2013: Select missing dependency REGMAP_I2C mfd: syscon: Fix null pointer dereference in of_syscon_register() ARM: 9330/1: davinci: also select PINCTRL serial: sc16is7xx: set safe default SPI clock frequency serial: sc16is7xx: add check for unsupported SPI modes during probe HID: wacom: Correct behavior when processing some confidence == false touches iio: adc: ad7091r: Pass iio_dev to event handler KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache KVM: arm64: vgic-v4: Restore pending state on host userspace write x86/kvm: Do not try to disable kvmclock if it was not enabled PCI: mediatek: Clear interrupt status before dispatching handler PCI: dwc: endpoint: Fix dw_pcie_ep_raise_msix_irq() alignment support PCI/P2PDMA: Remove reference to pci_p2pdma_map_sg() cxl/port: Fix decoder initialization when nr_targets > interleave_ways Revert "net: rtnetlink: Enslave device before bringing it up" wifi: mwifiex: configure BSSID consistently when starting AP wifi: rtlwifi: Convert LNKCTL change to PCIe cap RMW accessors wifi: rtlwifi: Remove bogus and dangerous ASPM disable/enable code wifi: mt76: fix broken precal loading from MTD for mt7915 iommu/dma: Trace bounce buffer usage when mapping buffers iommu/arm-smmu-qcom: Add missing GMU entry to match table LoongArch: Fix and simplify fcsr initialization on execve() bpf: Fix re-attachment branch in bpf_tracing_prog_attach Bluetooth: Fix atomicity violation in {min,max}_key_size_set rootfs: Fix support for rootfstype= when root= is given md/raid1: Use blk_opf_t for read and write operations pwm: Fix out-of-bounds access in of_pwm_single_xlate() pwm: jz4740: Don't use dev_err_probe() in .request() netfilter: nf_tables: check if catch-all set element is active in next generation block: Fix iterating over an empty bio with bio_for_each_folio_all block: add check that partition length needs to be aligned with block size drm/amd: Enable PCIe PME from D3 scsi: mpi3mr: Block PEL Enable Command on Controller Reset and Unrecoverable State scsi: mpi3mr: Refresh sdev queue depth after controller reset scsi: target: core: add missing file_{start,end}_write() scsi: ufs: core: Simplify power management during async scan fbdev: flush deferred IO before closing fbdev: flush deferred work in fb_deferred_io_fsync() io_uring/rw: ensure io->bytes_done is always initialized ksmbd: only v2 leases handle the directory ksmbd: fix UAF issue in ksmbd_tcp_new_connection() ksmbd: validate mech token in session setup ALSA: hda/realtek: Enable headset mic on Lenovo M70 Gen5 ALSA: hda/realtek: Enable mute/micmute LEDs and limit mic boost on HP ZBook ALSA: hda/relatek: Enable Mute LED on HP Laptop 15s-fq2xxx ALSA: oxygen: Fix right channel of capture volume mixer drm/vmwgfx: Keep a gem reference to user bos in surfaces drm/vmwgfx: Fix possible invalid drm gem put calls serial: omap: do not override settings for RS485 support serial: 8250_exar: Set missing rs485_supported flag serial: imx: Ensure that imx_uart_rs485_config() is called with enabled clock serial: core, imx: do not set RS485 enabled if it is not supported serial: 8250_bcm2835aux: Restore clock error handling serial: core: make sure RS485 cannot be enabled when it is not supported serial: core: fix sanitizing check for RTS settings usb: mon: Fix atomicity violation in mon_bin_vma_fault usb: typec: class: fix typec_altmode_put_partner to put plugs Revert "usb: typec: class: fix typec_altmode_put_partner to put plugs" usb: cdns3: Fix uvc fail when DMA cross 4k boundery since sg enabled usb: cdns3: fix iso transfer error when mult is not zero usb: cdns3: fix uvc failure work since sg support enabled usb: chipidea: wait controller resume finished for wakeup irq Revert "usb: dwc3: don't reset device side if dwc3 was configured as host-only" Revert "usb: dwc3: Soft reset phy on probe for host" usb: dwc: ep0: Update request status in dwc3_ep0_stall_restart usb: phy: mxs: remove CONFIG_USB_OTG condition for mxs_phy_is_otg_host() tick-sched: Fix idle and iowait sleeptime accounting vs CPU hotplug powerpc/64s: Increase default stack size to 32KB clocksource/drivers/timer-ti-dm: Fix make W=n kerneldoc warnings binder: fix race between mmput() and do_exit() xen-netback: don't produce zero-size SKB frags Input: atkbd - use ab83 as id when skipping the getid command mips/smp: Call rcutree_report_cpu_starting() earlier binder: fix unused alloc->free_async_space binder: fix async space check for 0-sized buffers keys, dns: Fix size check of V1 server-list header selftests/bpf: Add assert for user stacks in test_task_stack of: unittest: Fix of_count_phandle_with_args() expected value message fbdev: imxfb: fix left margin setting of: Fix double free in of_parse_phandle_with_args_map ksmbd: validate the zero field of packet header kselftest/alsa - mixer-test: Fix the print format specifier warning kselftest/alsa - mixer-test: fix the number of parameters to ksft_exit_fail_msg() drm/amd/pm/smu7: fix a memleak in smu7_hwmgr_backend_init drm/amdkfd: Confirm list is non-empty before utilizing list_first_entry in kfd_topology.c IB/iser: Prevent invalidating wrong MR mmc: sdhci_omap: Fix TI SoC dependencies mmc: sdhci_am654: Fix TI SoC dependencies ALSA: scarlett2: Add clamp() in scarlett2_mixer_ctl_put() ALSA: scarlett2: Add missing error checks to *_ctl_get() ALSA: scarlett2: Allow passing any output to line_out_remap() ALSA: scarlett2: Add missing error check to scarlett2_usb_set_config() ALSA: scarlett2: Add missing error check to scarlett2_config_save() ASoC: rt5645: Drop double EF20 entry from dmi_platform_data[] pwm: stm32: Fix enable count for clk in .probe() pwm: stm32: Use hweight32 in stm32_pwm_detect_channels pwm: stm32: Use regmap_clear_bits and regmap_set_bits where applicable clk: fixed-rate: fix clk_hw_register_fixed_rate_with_accuracy_parent_hw accel/habanalabs: fix information leak in sec_attest_info() drm/mediatek: dp: Add phy_mtk_dp module as pre-dependency clk: si5341: fix an error code problem in si5341_output_clk_set_rate watchdog: rti_wdt: Drop runtime pm reference count when watchdog is unused watchdog: bcm2835_wdt: Fix WDIOC_SETTIMEOUT handling watchdog/hpwdt: Only claim UNKNOWN NMI if from iLO watchdog: set cdev owner before adding drivers: clk: zynqmp: update divider round rate logic drivers: clk: zynqmp: calculate closest mux rate clk: qcom: videocc-sm8150: Add missing PLL config property clk: qcom: videocc-sm8150: Update the videocc resets dt-bindings: clock: Update the videocc resets for sm8150 f2fs: fix to check return value of f2fs_recover_xattr_data drm/amd/pm: fix a double-free in amdgpu_parse_extended_power_table gpu/drm/radeon: fix two memleaks in radeon_vm_init drivers/amd/pm: fix a use-after-free in kv_parse_power_table drm/amd/pm: fix a double-free in si_dpm_init drm/amdgpu/debugfs: fix error code when smc register accessors are NULL drm/mediatek: Fix underrun in VDO1 when switches off the layer drm/mediatek: Return error if MDP RDMA failed to enable the clock drm/msm/dpu: Drop enable and frame_count parameters from dpu_hw_setup_misr() drm/msm/dpu: Set input_sel bit for INTF clk: renesas: rzg2l: Check reset monitor registers clk: renesas: rzg2l-cpg: Reuse code in rzg2l_cpg_reset() media: dvb-frontends: m88ds3103: Fix a memory leak in an error handling path of m88ds3103_probe() media: dvbdev: drop refcount on error path in dvb_device_open() f2fs: fix to update iostat correctly in f2fs_filemap_fault() f2fs: fix to check compress file in f2fs_move_file_range() f2fs: fix to wait on block writeback for post_read case drm/panel: st7701: Fix AVCL calculation media: rkisp1: Fix media device memory leak media: dt-bindings: media: rkisp1: Fix the port description for the parallel interface media: imx-mipi-csis: Fix clock handling in remove() clk: qcom: gpucc-sm8150: Update the gpu_cc_pll1 config RDMA/hns: Fix memory leak in free_mr_init() media: cx231xx: fix a memleak in cx231xx_init_isoc drm/bridge: tc358767: Fix return value on error case drm/bridge: cdns-mhdp8546: Fix use of uninitialized variable drm/radeon/trinity_dpm: fix a memleak in trinity_parse_power_table drm/radeon/dpm: fix a memleak in sumo_parse_power_table drm/radeon: check the alloc_workqueue return value in radeon_crtc_init() drm/panfrost: Ignore core_mask for poweroff and disable PWRTRANS irq ASoC: Intel: glk_rt5682_max98357a: fix board id mismatch drm/drv: propagate errors from drm_modeset_register_all() drm/msm/dsi: Use pm_runtime_resume_and_get to prevent refcnt leaks drm/msm/mdp4: flush vblank event on disable ASoC: cs35l34: Fix GPIO name and drop legacy include ASoC: cs35l33: Fix GPIO name and drop legacy include drm/tidss: Fix dss reset drm/tidss: Check for K2G in in dispc_softreset() drm/tidss: Return error value from from softreset drm/tidss: Move reset to the end of dispc_init() drm/radeon: check return value of radeon_ring_lock() drm/radeon/r100: Fix integer overflow issues in r100_cs_track_check() drm/radeon/r600_cs: Fix possible int overflows in r600_cs_check_reg() f2fs: fix to avoid dirent corruption drm/bridge: Fix typo in post_disable() description media: rkvdec: Hook the (TRY_)DECODER_CMD stateless ioctls media: verisilicon: Hook the (TRY_)DECODER_CMD stateless ioctls media: mtk-jpeg: Remove cancel worker in mtk_jpeg_remove to avoid the crash of multi-core JPEG devices media: mtk-jpegdec: export jpeg decoder functions media: pvrusb2: fix use after free on context disconnection drm/tilcdc: Fix irq free on unload drm/bridge: tpd12s015: Drop buggy __exit annotation for remove function drm/nouveau/fence:: fix warning directly dereferencing a rcu pointer drm/panel-elida-kd35t133: hold panel in reset for unprepare RDMA/hns: Fix inappropriate err code for unsupported operations RDMA/usnic: Silence uninitialized symbol smatch warnings drm/panfrost: Really power off GPU cores in panfrost_gpu_power_off() Revert "drm/omapdrm: Annotate dma-fence critical section in commit path" Revert "drm/tidss: Annotate dma-fence critical section in commit path" ARM: davinci: always select CONFIG_CPU_ARM926T ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim() mlxbf_gige: Enable the GigE port in mlxbf_gige_open mlxbf_gige: Fix intermittent no ip issue net/sched: act_ct: fix skb leak and crash on ooo frags sctp: fix busy polling sctp: support MSG_ERRQUEUE flag in recvmsg() bpf: sockmap, fix proto update hook to avoid dup calls null_blk: don't cap max_hw_sectors to BLK_DEF_MAX_SECTORS block: make BLK_DEF_MAX_SECTORS unsigned Bluetooth: btmtkuart: fix recv_buf() return value Bluetooth: Fix bogus check for re-auth no supported with non-ssp netfilter: nf_tables: mark newset as dead on transaction abort wifi: iwlwifi: mvm: send TX path flush in rfkill wifi: iwlwifi: mvm: set siso/mimo chains to 1 in FW SMPS request wifi: rtlwifi: rtl8192se: using calculate_bit_shift() wifi: rtlwifi: rtl8192ee: using calculate_bit_shift() wifi: rtlwifi: rtl8192de: using calculate_bit_shift() wifi: rtlwifi: rtl8192ce: using calculate_bit_shift() wifi: rtlwifi: rtl8192cu: using calculate_bit_shift() wifi: rtlwifi: rtl8192c: using calculate_bit_shift() wifi: rtlwifi: rtl8188ee: phy: using calculate_bit_shift() wifi: rtlwifi: add calculate_bit_shift() arm64: dts: qcom: ipq6018: Fix up indentation arm64: dts: qcom: ipq6018: Pad addresses to 8 hex digits arm64: dts: qcom: ipq6018: Use lowercase hex arm64: dts: qcom: ipq6018: improve pcie phy pcs reg table arm64: dts: qcom: ipq6018: fix clock rates for GCC_USB0_MOCK_UTMI_CLK arm64: dts: qcom: sc7280: Mark SDHCI hosts as cache-coherent block: add check of 'minors' and 'first_minor' in device_add_disk() arm64: dts: qcom: sm8150-hdk: fix SS USB regulators soc: qcom: llcc: Fix dis_cap_alloc and retain_on_pc configuration dma-mapping: clear dev->dma_mem to NULL after freeing it virtio/vsock: fix logic which reduces credit update messages ipmr: support IP_PKTINFO on cache report IGMP msg selftests/net: fix grep checking for fib_nexthop_multiprefix ARM: dts: stm32: don't mix SCMI and non-SCMI board compatibles scsi: hisi_sas: Correct the number of global debugfs registers scsi: hisi_sas: Rollback some operations if FLR failed scsi: hisi_sas: Replace with standard error code return value arm64: dts: imx8mm: Reduce GPU to nominal speed arm64: dts: renesas: white-hawk-cpu: Fix missing serial console pin control block: Set memalloc_noio to false on device_add_disk() error path selftests/bpf: Relax time_tai test for equal timestamps in tai_forward wifi: mt76: mt7921: fix country count limitation for CLC arm64: dts: mediatek: mt8183: correct MDP3 DMA-related nodes dt-bindings: media: mediatek: mdp3: correct RDMA and WROT node with generic names arm64: dts: hisilicon: hikey970-pmic: fix regulator cells properties bpf: Fix verification of indirect var-off stack access wifi: mt76: mt7921s: fix workqueue problem causes STA association fail arm64: dts: qcom: sc7280: fix usb_2 wakeup interrupt types arm64: dts: qcom: sc7280: Mark Adreno SMMU as DMA coherent arm64: dts: qcom: sc7280: Fix up GPU SIDs arm64: dts: qcom: sm8350: Fix DMA0 address arm64: dts: qcom: sdm845-db845c: correct LED panic indicator arm64: dts: qcom: qrb5165-rb5: correct LED panic indicator scsi: fnic: Return error if vmalloc() failed bpf: fix check for attempt to corrupt spilled pointer selftests/net: specify the interface when do arping bpf: Defer the free of inner map when necessary bpf: Add map and need_defer parameters to .map_fd_put_ptr() bpf: add percpu stats for bpf_map elements insertions/deletions rcu-tasks: Provide rcu_trace_implies_rcu_gp() arm64: dts: qcom: sm6350: Make watchdog bark interrupt edge triggered arm64: dts: qcom: sc8280xp: Make watchdog bark interrupt edge triggered arm64: dts: qcom: sm8250: Make watchdog bark interrupt edge triggered arm64: dts: qcom: sm8150: Make watchdog bark interrupt edge triggered arm64: dts: qcom: sdm845: Make watchdog bark interrupt edge triggered arm64: dts: qcom: sc7280: Make watchdog bark interrupt edge triggered arm64: dts: qcom: sc7280: Mark some nodes as 'reserved' arm64: dts: qcom: sc7180: Make watchdog bark interrupt edge triggered ARM: dts: qcom: sdx65: correct SPMI node name bpf: enforce precision of R0 on callback return md: synchronize flush io with array reconfiguration selftests/bpf: Fix erroneous bitmask operation arm64: dts: ti: k3-am65-main: Fix DSS irq trigger type arm64: dts: ti: k3-am62a-main: Fix GPIO pin count in DT nodes wifi: rtlwifi: rtl8821ae: phy: fix an undefined bitwise shift behavior firmware: meson_sm: populate platform devices from sm device tree data firmware: ti_sci: Fix an off-by-one in ti_sci_debugfs_create() net/ncsi: Fix netlink major/minor version numbers ARM: dts: qcom: apq8064: correct XOADC register address wifi: libertas: stop selecting wext wifi: ath11k: Defer on rproc_get failure bpf: Add crosstask check to __bpf_get_stack bpf, lpm: Fix check prefixlen before walking trie wifi: rtw88: fix RX filter in FIF_ALLMULTI flag wifi: plfxlc: check for allocation failure in plfxlc_usb_wreq_async() pNFS: Fix the pnfs block driver's calculation of layoutget size SUNRPC: fix _xprt_switch_find_current_entry logic NFSv4.1/pnfs: Ensure we handle the error NFS4ERR_RETURNCONFLICT blocklayoutdriver: Fix reference leak of pnfs_device_node csky: fix arch_jump_label_transform_static override crypto: scomp - fix req->dst buffer overflow crypto: sahara - do not resize req->src when doing hash operations crypto: sahara - fix processing hash requests with req->nbytes < sg->length crypto: sahara - improve error handling in sahara_sha_process() crypto: sahara - fix wait_for_completion_timeout() error handling crypto: sahara - fix ahash reqsize crypto: sahara - handle zero-length aes requests crypto: sahara - avoid skcipher fallback code duplication crypto: virtio - Wait for tasklet to complete on device remove gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump fs: indicate request originates from old mount API erofs: fix memory leak on short-lived bounced pages pstore: ram_core: fix possible overflow in persistent_ram_init_ecc() crypto: hisilicon/zip - save capability registers in probe process crypto: hisilicon/sec2 - save capability registers in probe process crypto: hisilicon/hpre - save capability registers in probe process crypto: hisilicon/qm - add a function to set qm algs crypto: hisilicon/zip - add zip comp high perf mode configuration crypto: hisilicon/qm - save capability registers in qm init process crypto: sahara - fix error handling in sahara_hw_descriptor_create() crypto: sahara - fix processing requests with cryptlen < sg->length crypto: sahara - fix ahash selftest failure crypto: sahara - fix cbc selftest failure crypto: sahara - remove FLAGS_NEW_KEY logic crypto: safexcel - Add error handling for dma_map_sg() calls crypto: af_alg - Disallow multiple in-flight AIO requests crypto: ccp - fix memleak in ccp_init_dm_workarea crypto: sa2ul - Return crypto_aead_setkey to transfer the error crypto: virtio - Handle dataq logic with tasklet selinux: Fix error priority for bind with AF_UNSPEC on PF_INET6 socket mtd: Fix gluebi NULL pointer dereference caused by ftl notifier kunit: debugfs: Fix unchecked dereference in debugfs_print_results() ACPI: extlog: Clear Extended Error Log status when RAS_CEC handled the error ACPI: LPSS: Fix the fractional clock divider flags spi: sh-msiof: Enforce fixed DTDL for R-Car H3 efivarfs: Free s_fs_info on unmount efivarfs: force RO when remounting if SetVariable is not supported calipso: fix memory leak in netlbl_calipso_add_pass() cpufreq: scmi: process the result of devm_of_clk_add_hw_provider() cpufreq: Use of_property_present() for testing DT property presence of: Add of_property_present() helper platform/x86/intel/vsec: Fix xa_alloc memory leak platform/x86/intel/vsec: Use mutex for ida_alloc() and ida_free() platform/x86/intel/vsec: Support private data platform/x86/intel/vsec: Enhance and Export intel_vsec_add_aux() KEYS: encrypted: Add check for strsep ACPI: LPIT: Avoid u32 multiplication overflow ACPI: video: check for error while searching for backlight device parent mtd: rawnand: Increment IFC_TIMEOUT_MSECS for nand controller response spi: spi-zynqmp-gqspi: fix driver kconfig dependencies powerpc/imc-pmu: Add a null pointer check in update_events_in_group() powerpc/powernv: Add a null pointer check in opal_powercap_init() powerpc/powernv: Add a null pointer check in opal_event_init() powerpc/powernv: Add a null pointer check to scom_debug_init_one() selftests/powerpc: Fix error handling in FPU/VMX preemption tests powerpc/pseries/memhp: Fix access beyond end of drmem array powerpc/44x: select I2C for CURRITUCK powerpc: add crtsavres.o to always-y instead of extra-y powerpc: remove checks for binutils older than 2.25 EDAC/thunderx: Fix possible out-of-bounds string access x86/mce/inject: Clear test status value x86/lib: Fix overflow when counting digits UPSTREAM: sched/fair: Limit sched slice duration ANDROID: Update the ABI symbol list ANDROID: idle_inject: Export function symbols ANDROID: Update the ABI symbol list ANDROID: GKI: Remove CONFIG_MEDIA_CEC_RC BACKPORT: usb: host: xhci: Avoid XHCI resume delay if SSUSB device is not present ANDROID: Update the ABI symbol list ANDROID: uid_sys_stats: Drop CONFIG_UID_SYS_STATS_DEBUG logic ANDROID: Update the ABI symbol list ANDROID: Update the ABI symbol list UPSTREAM: usb: gadget: uvc: Remove nested locking ANDROID: uid_sys_stats: Fully initialize uid_entry_tmp value ANDROID: Roll back some code to fix system_server registers psi trigger failed. UPSTREAM: usb: gadget: uvc: Fix use are free during STREAMOFF ANDROID: GKI: Add symbol list for Nothing Linux 6.1.74 scripts/decode_stacktrace.sh: optionally use LLVM utilities coresight: etm4x: Fix width of CCITMIN field PCI: Add ACS quirk for more Zhaoxin Root Ports leds: ledtrig-tty: Free allocated ttyname buffer on deactivate parport: parport_serial: Add Brainboxes device IDs and geometry parport: parport_serial: Add Brainboxes BAR details uio: Fix use-after-free in uio_open binder: fix comment on binder_alloc_new_buf() return value binder: fix trivial typo of binder_free_buf_locked() binder: fix use-after-free in shinker's callback binder: use EPOLLERR from eventpoll.h Revert "md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d" ksmbd: free ppace array on error in parse_dacl ksmbd: don't allow O_TRUNC open on read-only share bpf: Add --skip_encoding_btf_inconsistent_proto, --btf_gen_optimized to pahole flags for v1.25 btf, scripts: Exclude Rust CUs with pahole ASoC: SOF: Intel: hda-codec: Delay the codec device registration ACPI: resource: Add another DMI match for the TongFang GMxXGxx ALSA: hda/realtek: Fix mute and mic-mute LEDs for HP Envy X360 13-ay0xxx drm/crtc: fix uninitialized variable use ARM: sun9i: smp: fix return code check of of_property_match_string net: qrtr: ns: Return 0 if server port is not present virtio_blk: fix snprintf truncation compiler warning ida: Fix crash in ida_free when the bitmap is empty pinctrl: cy8c95x0: Fix get_pincfg pinctrl: cy8c95x0: Fix typo drm/amd/display: get dprefclk ss info from integration info table i2c: rk3x: fix potential spinlock recursion on poll smb: client: fix potential OOB in smb2_dump_detail() HID: nintendo: Prevent divide-by-zero on code dm audit: fix Kconfig so DM_AUDIT depends on BLK_DEV_DM ALSA: hda/realtek: Add quirks for ASUS Zenbook 2022 Models ASoC: Intel: bytcr_rt5640: Add new swapped-speakers quirk ASoC: Intel: bytcr_rt5640: Add quirk for the Medion Lifetab S10346 platform/x86: thinkpad_acpi: fix for incorrect fan reporting on some ThinkPad systems HID: nintendo: fix initializer element is not constant error kselftest: alsa: fixed a print formatting warning Input: xpad - add Razer Wolverine V2 support wifi: iwlwifi: pcie: avoid a NULL pointer dereference ARC: fix spare error s390/scm: fix virtual vs physical address confusion Input: i8042 - add nomux quirk for Acer P459-G2-M Input: atkbd - skip ATKBD_CMD_GETID in translated mode reset: hisilicon: hi6220: fix Wvoid-pointer-to-enum-cast warning Input: psmouse - enable Synaptics InterTouch for ThinkPad L14 G1 ring-buffer: Do not record in NMI if the arch does not support cmpxchg in NMI tracing: Fix uaf issue when open the hist or hist_debug file MIPS: dts: loongson: drop incorrect dwmac fallback compatible stmmac: dwmac-loongson: drop useless check for compatible fallback tracing: Add size check when printing trace_marker output tracing: Have large events show up as '[LINE TOO BIG]' instead of nothing jbd2: fix soft lockup in journal_finish_inode_data_buffers() platform/x86: intel-vbtn: Fix missing tablet-mode-switch events neighbour: Don't let neigh_forced_gc() disable preemption for long drm/crtc: Fix uninit-value bug in drm_mode_setcrtc jbd2: increase the journal IO's priority jbd2: correct the printing of write_flags in jbd2_write_superblock() clk: rockchip: rk3128: Fix HCLK_OTG gate register clk: rockchip: rk3568: Add PLL rate for 292.5MHz LoongArch: Preserve syscall nr across execve() hwmon: (corsair-psu) Fix probe when built-in drm/exynos: fix a wrong error checking drm/exynos: fix a potential error pointer dereference drm/amdgpu: Add NULL checks for function pointers arm64: dts: rockchip: Fix PCI node addresses on rk3399-gru nvme: prevent potential spectre v1 gadget nvme: introduce helper function to get ctrl state ASoC: ops: add correct range check for limiting volume ASoC: da7219: Support low DC impedance headset net/tg3: fix race condition in tg3_reset_task() ASoC: hdac_hda: Conditionally register dais for HDMI and Analog ASoC: amd: yc: Add DMI entry to support System76 Pangolin 13 nouveau/tu102: flush all pdbs on vmm flush ASoC: Intel: skl_hda_dsp_generic: Drop HDMI routes when HDMI is not available ASoC: rt5650: add mutex to avoid the jack detection failure ASoC: cs43130: Fix incorrect frame delay configuration ASoC: cs43130: Fix the position of const qualifier ASoC: Intel: Skylake: mem leak in skl register function ASoC: nau8822: Fix incorrect type in assignment and cast to restricted __be16 ASoC: Intel: Skylake: Fix mem leak in few functions arm64: dts: rockchip: fix rk356x pcie msg interrupt name ASoC: wm8974: Correct boost mixer inputs hwtracing: hisi_ptt: Don't try to attach a task hwtracing: hisi_ptt: Handle the interrupt in hardirq context nvme-core: check for too small lba shift blk-mq: don't count completed flush data request as inflight in case of quiesce smb: client, common: fix fortify warnings drm/amdgpu: Fix cat debugfs amdgpu_regs_didt causes kernel null pointer drm/amd/display: update dcn315 lpddr pstate latency nvme-core: fix a memory leak in nvme_ns_info_from_identify() ALSA: hda: intel-nhlt: Ignore vbps when looking for DMIC 32 bps format debugfs: fix automount d_fsdata usage wifi: mac80211: handle 320 MHz in ieee80211_ht_cap_ie_to_sta_ht_cap wifi: avoid offset calculation on NULL pointer wifi: cfg80211: lock wiphy mutex for rfkill poll mptcp: fix uninit-value in mptcp_incoming_options ALSA: hda - Fix speaker and headset mic pin config for CHUWI CoreBook XPro pinctrl: lochnagar: Don't build on MIPS f2fs: explicitly null-terminate the xattr list ANDROID: Enable CONFIG_LAZY_RCU in x86 gki_defconfig ANDROID: fuse-bpf: Fix the issue of abnormal lseek system calls ANDROID: ABI: Update symbol list for imx BACKPORT: PM: sleep: Fix possible deadlocks in core system-wide PM code UPSTREAM: async: Introduce async_schedule_dev_nocall() UPSTREAM: async: Split async_schedule_node_domain() FROMGIT: BACKPORT: mm: update mark_victim tracepoints fields ANDROID: Enable CONFIG_LAZY_RCU in arm64 gki_defconfig FROMLIST: rcu: Provide a boot time parameter to control lazy RCU ANDROID: rcu: Add a minimum time for marking boot as completed UPSTREAM: rcu: Disable laziness if lazy-tracking says so UPSTREAM: rcu: Track laziness during boot and suspend UPSTREAM: net: Use call_rcu_hurry() for dst_release() UPSTREAM: workqueue: Make queue_rcu_work() use call_rcu_hurry() UPSTREAM: percpu-refcount: Use call_rcu_hurry() for atomic switch UPSTREAM: io_uring: use call_rcu_hurry if signaling an eventfd UPSTREAM: rcu: Update synchronize_rcu_mult() comment for call_rcu_hurry() UPSTREAM: scsi/scsi_error: Use call_rcu_hurry() instead of call_rcu() UPSTREAM: rcu/rcutorture: Use call_rcu_hurry() where needed UPSTREAM: rcu/rcuscale: Use call_rcu_hurry() for async reader test UPSTREAM: rcu/sync: Use call_rcu_hurry() instead of call_rcu BACKPORT: rcu: Shrinker for lazy rcu UPSTREAM: rcu: Refactor code a bit in rcu_nocb_do_flush_bypass() UPSTREAM: rcu: Make call_rcu() lazy to save power UPSTREAM: rcu: Fix missing nocb gp wake on rcu_barrier() UPSTREAM: rcu: Fix late wakeup when flush of bypass cblist happens ANDROID: Update the ABI symbol list ANDROID: GKI: add GKI symbol list for Exynosauto SoC UPSTREAM: coresight: tmc: Don't enable TMC when it's not ready. UPSTREAM: netfilter: nf_tables: bail out on mismatching dynset and set expressions Revert "ipv6: remove max_size check inline with ipv4" ANDROID: ABI: Update oplus symbol list ANDROID: vendor_hooks: add hooks in driver/android/binder.c ANDROID: GKI: Update honda symbol list for xt_LOG ANDROID: GKI: Update honda symbol list for ebt filter ANDROID: GKI: Update honda symbol list for ebtables ANDROID: GKI: Update honda symbol list for net scheduler ANDROID: GKI: Update honda symbol list for led-trigger ANDROID: GKI: Add initial symbol list for honda ANDROID: GKI: add symbols to ABI ANDROID: db845c: Enable device tree overlay support FROMGIT: usb: dwc: ep0: Update request status in dwc3_ep0_stall_restart FROMGIT: usb: dwc3: set pm runtime active before resume common Linux 6.1.73 cifs: fix flushing folio regression for 6.1 backport ipv6: remove max_size check inline with ipv4 Revert "nfsd: separate nfsd_last_thread() from nfsd_put()" Revert "nfsd: call nfsd_last_thread() before final nfsd_put()" ANDROID: Update the pixel symbol list Revert "splice, net: Add a splice_eof op to file-ops and socket-ops" Revert "ipv4, ipv6: Use splice_eof() to flush" Revert "udp: introduce udp->udp_flags" Revert "udp: move udp->no_check6_tx to udp->udp_flags" Revert "udp: move udp->no_check6_rx to udp->udp_flags" Revert "udp: move udp->gro_enabled to udp->udp_flags" Revert "udp: move udp->accept_udp_{l4|fraglist} to udp->udp_flags" Revert "udp: lockless UDP_ENCAP_L2TPINUDP / UDP_GRO" Revert "udp: annotate data-races around udp->encap_type" Revert "bpf, sockmap: af_unix stream sockets need to hold ref for pair sock" Revert "bpf: decouple prune and jump points" Revert "bpf: remove unnecessary prune and jump points" Revert "bpf: Remove unused insn_cnt argument from visit_[func_call_]insn()" Revert "bpf: clean up visit_insn()'s instruction processing" Revert "bpf: Support new 32bit offset jmp instruction" Revert "bpf: handle ldimm64 properly in check_cfg()" Revert "bpf: Fix a verifier bug due to incorrect branch offset comparison with cpu=v4" Revert "device property: Allow const parameter to dev_fwnode()" BACKPORT: UPSTREAM: phy: qcom-qmp: Introduce Kconfig symbols for discrete drivers ANDROID: GKI: add symbols of vendor hooks to ABI for swapping in ahead ANDROID: GKI: add vendor hooks for swapping in ahead Reapply "kasan: print the original fault addr when access invalid shadow" ANDROID: GKI: fix crc issue in include/net/addrconf.h ANDROID: add 16k targets for Microdroid kernel Revert "cred: switch to using atomic_long_t" FROMGIT: BACKPORT: mm/cma: fix placement of trace_cma_alloc_start/finish FROMGIT: wifi: nl80211: Extend del pmksa support for SAE and OWE security ANDROID: Update the ABI symbol list ANDROID: mm: export dump_tasks symbol. FROMLIST: scsi: ufs: Remove the ufshcd_hba_exit() call from ufshcd_async_scan() FROMLIST: scsi: ufs: Simplify power management during async scan Linux 6.1.72 Revert "interconnect: qcom: sm8250: Enable sync_state" smb3: Replace smb2pdu 1-element arrays with flex-arrays media: qcom: camss: Comment CSID dt_id field bpf: syzkaller found null ptr deref in unix_bpf proto add bpf: Fix a verifier bug due to incorrect branch offset comparison with cpu=v4 net/sched: act_ct: Always fill offloading tuple iifidx net/sched: act_ct: additional checks for outdated flows f2fs: compress: fix to assign compress_level for lz4 correctly genirq/affinity: Only build SMP-only helper functions on SMP kernels mmc: sdhci-sprd: Fix eMMC init failure after hw reset mmc: core: Cancel delayed work before releasing host mmc: rpmb: fixes pause retune on all RPMB partitions. mmc: meson-mx-sdhc: Fix initialization frozen issue drm/amd/display: add nv12 bounding box drm/amdgpu: skip gpu_info fw loading on navi12 mm: fix unmap_mapping_range high bits shift bug i2c: core: Fix atomic xfer check for non-preempt config x86/kprobes: fix incorrect return address calculation in kprobe_emulate_call_indirect firewire: ohci: suppress unexpected system reboot in AMD Ryzen machines and ASM108x/VT630x PCIe cards ring-buffer: Fix 32-bit rb_time_read() race with rb_time_cmpxchg() btrfs: mark the len field in struct btrfs_ordered_sum as unsigned btrfs: fix qgroup_free_reserved_data int overflow octeontx2-af: Support variable number of lmacs octeontx2-af: Fix pause frame configuration net/sched: act_ct: Take per-cb reference to tcf_ct_flow_table netfilter: flowtable: GC pushes back packets to classic path net/sched: act_ct: Fix promotion of offloaded unreplied tuple net/sched: act_ct: offload UDP NEW connections netfilter: flowtable: cache info of last offload netfilter: flowtable: allow unidirectional rules net: sched: call tcf_ct_params_free to free params in tcf_ct_init mm/memory_hotplug: fix error handling in add_memory_resource() mm/memory_hotplug: add missing mem_hotplug_lock lib/group_cpus.c: avoid acquiring cpu hotplug lock in group_cpus_evenly genirq/affinity: Move group_cpus_evenly() into lib/ genirq/affinity: Rename irq_build_affinity_masks as group_cpus_evenly genirq/affinity: Don't pass irq_affinity_desc array to irq_build_affinity_masks genirq/affinity: Pass affinity managed mask array to irq_build_affinity_masks genirq/affinity: Remove the 'firstvec' parameter from irq_build_affinity_masks ALSA: hda/realtek: Add quirk for Lenovo Yoga Pro 7 firmware: arm_scmi: Fix frequency truncation by promoting multiplier type bpf, sockmap: af_unix stream sockets need to hold ref for pair sock ethtool: don't propagate EOPNOTSUPP from dumps dpaa2-eth: recycle the RX buffer only after all processing done net: dpaa2-eth: rearrange variable in dpaa2_eth_get_ethtool_stats smb: client: fix missing mode bits for SMB symlinks block: update the stable_writes flag in bdev_add filemap: add a per-mapping stable writes flag mm, netfs, fscache: stop read optimisation when folio removed from pagecache mm: merge folio_has_private()/filemap_release_folio() call pairs memory-failure: convert truncate_error_page() to use folio khugepage: replace try_to_release_page() with filemap_release_folio() ext4: convert move_extent_per_page() to use folios media: qcom: camss: Fix set CSI2_RX_CFG1_VC_MODE when VC is greater than 3 media: camss: sm8250: Virtual channels for CSID selftests: mptcp: set FAILING_LINKS in run_tests selftests: mptcp: fix fastclose with csum failure f2fs: set the default compress_level on ioctl f2fs: assign default compression level f2fs: convert to use bitmap API f2fs: clean up i_compress_flag and i_compress_level usage s390/cpumf: support user space events for counting s390/mm: add missing arch_set_page_dat() call to vmem_crst_alloc() net/mlx5: Increase size of irq name buffer blk-mq: make sure active queue usage is held for bio_integrity_prep() bpf: fix precision backtracking instruction iteration bpf: handle ldimm64 properly in check_cfg() bpf: Support new 32bit offset jmp instruction bpf: clean up visit_insn()'s instruction processing bpf: Remove unused insn_cnt argument from visit_[func_call_]insn() bpf: remove unnecessary prune and jump points bpf: decouple prune and jump points fbdev: imsttfb: fix double free in probe() fbdev: imsttfb: Release framebuffer and dealloc cmap on error path arm64: dts: qcom: sdm845: Fix PSCI power domain names arm64: dts: qcom: sdm845: align RPMh regulator nodes with bindings wifi: iwlwifi: yoyo: swap cdb and jacket bits values udp: annotate data-races around udp->encap_type udp: lockless UDP_ENCAP_L2TPINUDP / UDP_GRO udp: move udp->accept_udp_{l4|fraglist} to udp->udp_flags udp: move udp->gro_enabled to udp->udp_flags udp: move udp->no_check6_rx to udp->udp_flags udp: move udp->no_check6_tx to udp->udp_flags udp: introduce udp->udp_flags ipv4, ipv6: Use splice_eof() to flush splice, net: Add a splice_eof op to file-ops and socket-ops udp: Convert udp_sendpage() to use MSG_SPLICE_PAGES net: Declare MSG_SPLICE_PAGES internal sendmsg() flag bpf, x86: save/restore regs with BPF_DW size bpf, x86: Simplify the parsing logic of structure parameters bpf, x64: Fix tailcall infinite loop srcu: Fix callbacks acceleration mishandling cpu/SMT: Make SMT control more robust against enumeration failures cpu/SMT: Create topology_smt_thread_allowed() selftests: secretmem: floor the memory size to the multiple of page_size net: Implement missing SO_TIMESTAMPING_NEW cmsg support bnxt_en: Remove mis-applied code from bnxt_cfg_ntp_filters() net: ravb: Wait for operating mode to be applied asix: Add check for usbnet_get_endpoints octeontx2-af: Re-enable MAC TX in otx2_stop processing octeontx2-af: Always configure NIX TX link credits based on max frame size net/smc: fix invalid link access in dumping SMC-R connections net/qla3xxx: fix potential memleak in ql_alloc_buffer_queues igc: Fix hicredit calculation i40e: Restore VF MSI-X state during PCI reset ASoC: meson: g12a-tohdmitx: Fix event generation for S/PDIF mux ASoC: meson: g12a-toacodec: Fix event generation ASoC: meson: g12a-tohdmitx: Validate written enum values ASoC: meson: g12a-toacodec: Validate written enum values i40e: fix use-after-free in i40e_aqc_add_filters() net: Save and restore msg_namelen in sock_sendmsg netfilter: nft_immediate: drop chain reference counter on error net: bcmgenet: Fix FCS generation for fragmented skbuffs sfc: fix a double-free bug in efx_probe_filters ARM: sun9i: smp: Fix array-index-out-of-bounds read in sunxi_mc_smp_init selftests: bonding: do not set port down when adding to bond net: Implement missing getsockopt(SO_TIMESTAMPING_NEW) net: annotate data-races around sk->sk_bind_phc net: annotate data-races around sk->sk_tsflags net-timestamp: extend SOF_TIMESTAMPING_OPT_ID to HW timestamps can: raw: add support for SO_MARK r8169: Fix PCI error on system resume net: sched: em_text: fix possible memory leak in em_text_destroy() mlxbf_gige: fix receive packet race condition ASoC: mediatek: mt8186: fix AUD_PAD_TOP register and offset ASoC: fsl_rpmsg: Fix error handler with pm_runtime_enable igc: Check VLAN EtherType mask igc: Check VLAN TCI mask igc: Report VLAN EtherType matching back to user i40e: Fix filter input checks to prevent config with invalid values ice: Shut down VSI with "link-down-on-close" enabled ice: Fix link_down_on_close message drm/i915/dp: Fix passing the correct DPCD_REV for drm_dp_set_phy_test_pattern octeontx2-af: Fix marking couple of structure as __packed nfc: llcp_core: Hold a ref to llcp_local->dev when holding a ref to llcp_local netfilter: nf_tables: set transport offset from mac header for netdev/egress netfilter: use skb_ip_totlen and iph_totlen drm/bridge: ti-sn65dsi86: Never store more than msg->size bytes in AUX xfer wifi: iwlwifi: pcie: don't synchronize IRQs from IRQ KVM: x86/pmu: fix masking logic for MSR_CORE_PERF_GLOBAL_CTRL cifs: do not depend on release_iface for maintaining iface_list cifs: cifs_chan_is_iface_active should be called with chan_lock held drm/mgag200: Fix gamma lut not initialized for G200ER, G200EV, G200SE Revert "PCI/ASPM: Remove pcie_aspm_pm_state_change()" mptcp: prevent tcp diag from closing listener subflows ALSA: hda/realtek: Fix mute and mic-mute LEDs for HP ProBook 440 G6 ALSA: hda/realtek: fix mute/micmute LEDs for a HP ZBook ALSA: hda/realtek: enable SND_PCI_QUIRK for hp pavilion 14-ec1xxx series block: Don't invalidate pagecache for invalid falloc modes keys, dns: Fix missing size check of V1 server-list header ANDROID: gki_defconfig: Set CONFIG_IDLE_INJECT and CONFIG_CPU_IDLE_THERMAL into y ANDROID: KMI workaround for CONFIG_NETFILTER_FAMILY_BRIDGE ANDROID: dma-buf: don't re-purpose kobject as work_struct BACKPORT: FROMLIST: dma-buf: Move sysfs work out of DMA-BUF export path UPSTREAM: netfilter: nf_tables: skip set commit for deleted/destroyed sets ANDROID: KVM: arm64: Avoid BUG-ing from the host abort path ANDROID: Update the ABI symbol list UPSTREAM: ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet UPSTREAM: nvmet-tcp: Fix a possible UAF in queue intialization setup FROMGIT: usb: dwc3: gadget: Handle EP0 request dequeuing properly ANDROID: ABI: Update symbol list for imx UPSTREAM: io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid UPSTREAM: bpf: Fix prog_array_map_poke_run map poke update BACKPORT: xhci: track port suspend state correctly in unsuccessful resume cases ANDROID: fix crc error in put_cmsg caused in 6.1.68 ANDROID: Update the ABI symbol list ANDROID: sched: Export symbols for vendor modules UPSTREAM: usb: dwc3: core: add support for disabling High-speed park mode Linux 6.1.71 Revert "platform/x86: p2sb: Allow p2sb_bar() calls during PCI device probe" tracing/kprobes: Fix symbol counting logic by looking at modules as well kallsyms: Make module_kallsyms_on_each_symbol generally available device property: Allow const parameter to dev_fwnode() spi: Constify spi parameters of chip select APIs NFSD: fix possible oops when nfsd/pool_stats is closed. ring-buffer: Fix slowpath of interrupted event netfilter: nf_tables: skip set commit for deleted/destroyed sets ring-buffer: Remove useless update to write_stamp in rb_try_to_discard() tracing: Fix blocked reader of snapshot buffer ring-buffer: Fix wake ups when buffer_percent is set to 100 mm/memory-failure: check the mapcount of the precise page mm/memory-failure: cast index to loff_t before shifting it mm: migrate high-order folios in swap cache correctly mm/filemap: avoid buffered read/write race to read inconsistent data platform/x86: p2sb: Allow p2sb_bar() calls during PCI device probe ksmbd: fix slab-out-of-bounds in smb_strndup_from_utf16() block: renumber QUEUE_FLAG_HW_WC spi: atmel: Fix clock issue when using devices with different polarities spi: Add APIs in spi core to set/get spi->chip_select and spi->cs_gpiod spi: Reintroduce spi_set_cs_timing() linux/export: Ensure natural alignment of kcrctab array nfsd: call nfsd_last_thread() before final nfsd_put() nfsd: separate nfsd_last_thread() from nfsd_put() iio: imu: adis16475: add spi_device_id table spi: Introduce spi_get_device_match_data() helper usb: fotg210-hcd: delete an incorrect bounds test ARM: dts: Fix occasional boot hang for am3 usb ksmbd: fix wrong allocation size update in smb2_open() ksmbd: avoid duplicate opinfo_put() call on error of smb21_lease_break_ack() ksmbd: lazy v2 lease break on smb2_write() ksmbd: send v2 lease break notification for directory ksmbd: downgrade RWH lease caching state to RH for directory ksmbd: set v2 lease capability ksmbd: set epoch in create context v2 lease ksmbd: don't update ->op_state as OPLOCK_STATE_NONE on error ksmbd: move setting SMB2_FLAGS_ASYNC_COMMAND and AsyncId ksmbd: release interim response after sending status pending response ksmbd: move oplock handling after unlock parent dir ksmbd: separately allocate ci per dentry ksmbd: fix possible deadlock in smb2_open ksmbd: prevent memory leak on error return ksmbd: fix kernel-doc comment of ksmbd_vfs_kern_path_locked() ksmbd: no need to wait for binded connection termination at logoff ksmbd: add support for surrogate pair conversion ksmbd: fix missing RDMA-capable flag for IPoIB device in ksmbd_rdma_capable_netdev() ksmbd: fix recursive locking in vfs helpers ksmbd: fix kernel-doc comment of ksmbd_vfs_setxattr() ksmbd: reorganize ksmbd_iov_pin_rsp() ksmbd: Remove unused field in ksmbd_user struct ksmbd: fix potential double free on smb2_read_pipe() error path ksmbd: fix Null pointer dereferences in ksmbd_update_fstate() ksmbd: fix wrong error response status by using set_smb2_rsp_status() ksmbd: fix race condition between tree conn lookup and disconnect ksmbd: fix race condition from parallel smb2 lock requests ksmbd: fix race condition from parallel smb2 logoff requests ksmbd: fix race condition with fp ksmbd: check iov vector index in ksmbd_conn_write() ksmbd: return invalid parameter error response if smb2 request is invalid ksmbd: fix passing freed memory 'aux_payload_buf' ksmbd: remove unneeded mark_inode_dirty in set_info_sec() ksmbd: remove experimental warning ksmbd: add missing calling smb2_set_err_rsp() on error ksmbd: Fix one kernel-doc comment ksmbd: fix `force create mode' and `force directory mode' ksmbd: fix wrong interim response on compound ksmbd: add support for read compound ksmbd: switch to use kmemdup_nul() helper ksmbd: check if a mount point is crossed during path lookup ksmbd: Fix unsigned expression compared with zero ksmbd: Replace one-element array with flexible-array member ksmbd: Use struct_size() helper in ksmbd_negotiate_smb_dialect() ksmbd: Replace the ternary conditional operator with min() ksmbd: use kvzalloc instead of kvmalloc ksmbd: Change the return value of ksmbd_vfs_query_maximal_access to void ksmbd: return a literal instead of 'err' in ksmbd_vfs_kern_path_locked() ksmbd: use kzalloc() instead of __GFP_ZERO ksmbd: remove unused ksmbd_tree_conn_share function ksmbd: add mnt_want_write to ksmbd vfs functions ksmbd: fix posix_acls and acls dereferencing possible ERR_PTR() ksmbd: call putname after using the last component ksmbd: fix uninitialized pointer read in smb2_create_link() ksmbd: fix uninitialized pointer read in ksmbd_vfs_rename() ksmbd: fix racy issue from using ->d_parent and ->d_name fs: introduce lock_rename_child() helper ksmbd: remove unused compression negotiate ctx packing ksmbd: avoid duplicate negotiate ctx offset increments ksmbd: set NegotiateContextCount once instead of every inc ksmbd: delete asynchronous work from list ksmbd: remove unused is_char_allowed function ksmbd: Fix parameter name and comment mismatch ksmbd: Fix spelling mistake "excceed" -> "exceeded" ksmbd: update Kconfig to note Kerberos support and fix indentation ksmbd: Remove duplicated codes ksmbd: fix typo, syncronous->synchronous ksmbd: Implements sess->rpc_handle_list as xarray ksmbd: Convert to use sysfs_emit()/sysfs_emit_at() APIs ksmbd: Fix resource leak in smb2_lock() ksmbd: use F_SETLK when unlocking a file ksmbd: set SMB2_SESSION_FLAG_ENCRYPT_DATA when enforcing data encryption for this share ksmbd: replace one-element arrays with flexible-array members Revert "hrtimers: Push pending hrtimers away from outgoing CPU earlier" Revert "drop_monitor: Require 'CAP_SYS_ADMIN' when joining "events" group" ANDROID: KVM: arm64: Don't prepopulate MMIO regions for host stage-2 BACKPORT: FROMGIT fork: use __mt_dup() to duplicate maple tree in dup_mmap() FROMGIT: maple_tree: preserve the tree attributes when destroying maple tree FROMGIT: maple_tree: update check_forking() and bench_forking() FROMGIT: maple_tree: skip other tests when BENCH is enabled FROMGIT: maple_tree: update the documentation of maple tree FROMGIT: maple_tree: add test for mtree_dup() FROMGIT: radix tree test suite: align kmem_cache_alloc_bulk() with kernel behavior. FROMGIT: maple_tree: introduce interfaces __mt_dup() and mtree_dup() FROMGIT: maple_tree: introduce {mtree,mas}_lock_nested() FROMGIT: maple_tree: add mt_free_one() and mt_attr() helpers UPSTREAM: maple_tree: introduce __mas_set_range() ANDROID: GKI: Enable symbols for v4l2 in async and fwnode Revert "mmc: core: add helpers mmc_regulator_enable/disable_vqmmc" Revert "mmc: sdhci-sprd: Fix vqmmc not shutting down after the card was pulled" ANDROID: Update the ABI symbol list ANDROID: KVM: arm64: Fix hyp event alignment ANDROID: KVM: arm64: Fix host_smc print typo FROMGIT: f2fs: do not return EFSCORRUPTED, but try to run online repair ANDROID: KVM: arm64: Document module_change_host_prot_range Revert "mmc: core: add helpers mmc_regulator_enable/disable_vqmmc" Revert "mmc: sdhci-sprd: Fix vqmmc not shutting down after the card was pulled" FROMGIT: PM / devfreq: Synchronize devfreq_monitor_[start/stop] FROMGIT: arch/mm/fault: fix major fault accounting when retrying under per-VMA lock UPSTREAM: mm: handle write faults to RO pages under the VMA lock UPSTREAM: mm: handle read faults under the VMA lock UPSTREAM: mm: handle COW faults under the VMA lock UPSTREAM: mm: handle shared faults under the VMA lock BACKPORT: mm: call wp_page_copy() under the VMA lock UPSTREAM: mm: make lock_folio_maybe_drop_mmap() VMA lock aware UPSTREAM: mm/memory.c: fix mismerge ANDROID: Export functions to be used with dma_map_ops in modules BACKPORT: FROMGIT: erofs: enable sub-page compressed block support FROMGIT: erofs: refine z_erofs_transform_plain() for sub-page block support FROMGIT: erofs: fix ztailpacking for subpage compressed blocks BACKPORT: FROMGIT: erofs: fix up compacted indexes for block size < 4096 FROMGIT: erofs: record `pclustersize` in bytes instead of pages FROMGIT: erofs: support I/O submission for sub-page compressed blocks FROMGIT: erofs: fix lz4 inplace decompression FROMGIT: erofs: fix memory leak on short-lived bounced pages BACKPORT: erofs: tidy up z_erofs_do_read_page() UPSTREAM: erofs: move preparation logic into z_erofs_pcluster_begin() BACKPORT: erofs: avoid obsolete {collector,collection} terms BACKPORT: erofs: simplify z_erofs_read_fragment() UPSTREAM: erofs: get rid of the remaining kmap_atomic() UPSTREAM: erofs: simplify z_erofs_transform_plain() BACKPORT: erofs: adapt managed inode operations into folios UPSTREAM: erofs: avoid on-stack pagepool directly passed by arguments UPSTREAM: erofs: allocate extra bvec pages directly instead of retrying UPSTREAM: erofs: clean up z_erofs_pcluster_readmore() UPSTREAM: erofs: remove the member readahead from struct z_erofs_decompress_frontend UPSTREAM: erofs: fold in z_erofs_decompress() UPSTREAM: erofs: enable large folios for iomap mode ANDROID: Update the ABI symbol list UPSTREAM: USB: gadget: core: adjust uevent timing on gadget unbind Linux 6.1.70 loop: deprecate autoloading callback loop_probe() wifi: nl80211: fix deadlock in nl80211_set_cqm_rssi (6.6.x) wifi: cfg80211: fix CQM for non-range use fuse: share lookup state between submount and its parent mm/damon/core: make damon_start() waits until kdamond_fn() starts x86/alternatives: Sync core before enabling interrupts KVM: arm64: vgic: Force vcpu vgic teardown on vcpu destroy KVM: arm64: vgic: Add a non-locking primitive for kvm_vgic_vcpu_destroy() KVM: arm64: vgic: Simplify kvm_vgic_destroy() thunderbolt: Fix memory leak in margining_port_remove() lib/vsprintf: Fix %pfwf when current node refcount == 0 gpio: dwapb: mask/unmask IRQ when disable/enale it bus: ti-sysc: Flush posted write only after srst_udelay pinctrl: starfive: jh7100: ignore disabled device tree nodes dm-integrity: don't modify bio's immutable bio_vec in integrity_metadata() tracing / synthetic: Disable events after testing in synth_event_gen_test_init() scsi: core: Always send batch on reset or error handling command Revert "scsi: aacraid: Reply queue mapping to CPUs based on IRQ affinity" selftests: mptcp: join: fix subflow_send_ack lookup ublk: move ublk_cancel_dev() out of ub->mutex ubifs: fix possible dereference after free btrfs: zoned: no longer count fresh BG region as zone unusable Revert "drm/amd/display: Do not set DRR on pipe commit" dm thin metadata: Fix ABBA deadlock by resetting dm_bufio_client loop: do not enforce max_loop hard limit by (new) default RISC-V: Fix do_notify_resume / do_work_pending prototype 9p: prevent read overrun in protocol dump tracepoint drm/i915: Reject async flips with bigjoiner smb: client: fix OOB in smbCalcSize() smb: client: fix OOB in SMB2_query_info_init() smb: client: fix potential OOB in cifs_dump_detail() smb: client: fix OOB in cifsd when receiving compounded resps dt-bindings: nvmem: mxs-ocotp: Document fsl,ocotp net: ks8851: Fix TX stall caused by TX buffer overrun net: rfkill: gpio: set GPIO direction net: 9p: avoid freeing uninit memory in p9pdu_vreadf Input: soc_button_array - add mapping for airplane mode button net: usb: ax88179_178a: avoid failed operations when device is disconnected Bluetooth: Add more enc key size check Bluetooth: MGMT/SMP: Fix address type when using SMP over BREDR/LE Bluetooth: L2CAP: Send reject on command corrupted request Bluetooth: af_bluetooth: Fix Use-After-Free in bt_sock_recvmsg Bluetooth: hci_event: Fix not checking if HCI_OP_INQUIRY has been sent ALSA: hda/realtek: Add quirk for ASUS ROG GV302XA USB: serial: option: add Quectel RM500Q R13 firmware support USB: serial: option: add Foxconn T99W265 with new baseline USB: serial: option: add Quectel EG912Y module support USB: serial: ftdi_sio: update Actisense PIDs constant names wifi: cfg80211: fix certs build to not depend on file order wifi: cfg80211: Add my certificate usb-storage: Add quirk for incorrect WP on Kingston DT Ultimate 3.0 G3 ALSA: usb-audio: Increase delay in MOTU M quirk iio: triggered-buffer: prevent possible freeing of wrong buffer iio: adc: ti_am335x_adc: Fix return value check of tiadc_request_dma() iio: common: ms_sensors: ms_sensors_i2c: fix humidity conversion time table scsi: bnx2fc: Fix skb double free in bnx2fc_rcv() Input: ipaq-micro-keys - add error handling for devm_kmemdup interconnect: qcom: sm8250: Enable sync_state iio: imu: inv_mpu6050: fix an error code problem in inv_mpu6050_read_raw interconnect: Treat xlate() returning NULL node as an error drm/i915: Fix ADL+ tiled plane stride when the POT stride is smaller than the original drm/i915/mtl: Add MTL for remapping CCS FBs drm/i915/dpt: Only do the POT stride remap when using DPT drm/i915: Fix intel_atomic_setup_scalers() plane_state handling drm/i915: Relocate intel_atomic_setup_scalers() drm/i915/mtl: limit second scaler vertical scaling in ver >= 14 nvme-pci: fix sleeping function called from interrupt context gpiolib: cdev: add gpio_device locking wrapper around gpio_ioctl() pinctrl: at91-pio4: use dedicated lock class for IRQ x86/xen: add CPU dependencies for 32-bit build i2c: aspeed: Handle the coalesced stop conditions with the start conditions. ASoC: fsl_sai: Fix channel swap issue on i.MX8MP ASoC: hdmi-codec: fix missing report for jack initial status afs: Fix use-after-free due to get/remove race in volume tree afs: Fix overwriting of result of DNS query keys, dns: Allow key types (eg. DNS) to be reclaimed immediately on expiry net: check dev->gso_max_size in gso_features_check() afs: Fix dynamic root lookup DNS check afs: Fix the dynamic root's d_delete to always delete unused dentries net: check vlan filter feature in vlan_vids_add_by_dev() and vlan_vids_del_by_dev() net: mana: select PAGE_POOL Bluetooth: hci_event: shut up a false-positive warning Bluetooth: Fix deadlock in vhci_send_frame net/rose: fix races in rose_kill_by_device() ethernet: atheros: fix a memleak in atl1e_setup_ring_resources net: sched: ife: fix potential use-after-free net: Return error from sk_stream_wait_connect() if sk_wait_event() fails octeontx2-pf: Fix graceful exit during PFC configuration failure net: mscc: ocelot: fix eMAC TX RMON stats for bucket 256-511 and above net/mlx5e: Correct snprintf truncation handling for fw_version buffer used by representors net/mlx5e: Correct snprintf truncation handling for fw_version buffer net/mlx5: Fix fw tracer first block check net/mlx5e: fix a potential double-free in fs_udp_create_groups net/mlx5e: Fix a race in command alloc flow net/mlx5: Re-organize mlx5_cmd struct net/mlx5: Prevent high-rate FW commands from populating all slots net/mlx5: Introduce and use opcode getter in command interface net/mlx5e: Fix slab-out-of-bounds in mlx5_query_nic_vport_mac_list() Revert "net/mlx5e: fix double free of encap_header" Revert "net/mlx5e: fix double free of encap_header in update funcs" wifi: mac80211: mesh_plink: fix matches_local logic wifi: mac80211: mesh: check element parsing succeeded wifi: mac80211: check if the existing link config remains unchanged wifi: iwlwifi: pcie: add another missing bh-disable for rxq->lock s390/vx: fix save/restore of fpu kernel context reset: Fix crash when freeing non-existent optional resets ARM: OMAP2+: Fix null pointer dereference and memory leak in omap_soc_device_init ARM: dts: dra7: Fix DRA7 L3 NoC node register size drm/amd/display: fix hw rotated modes when PSR-SU is enabled HID: i2c-hid: Add IDEA5002 to i2c_hid_acpi_blacklist[] HID: i2c-hid: acpi: Unify ACPI ID tables format bpf: Fix prog_array_map_poke_run map poke update kasan: disable kasan_non_canonical_hook() for HW tags ANDROID: ABI: Update oplus symbol list ANDROID: vendor_hooks: Add hooks for rt_mutex steal UPSTREAM: dm verity: don't perform FEC for failed readahead IO UPSTREAM: netfilter: nft_set_pipapo: skip inactive elements during set walk FROMLIST: mm: migrate high-order folios in swap cache correctly ANDROID: fuse-bpf: Follow mounts in lookups Linux 6.1.69 r8152: fix the autosuspend doesn't work r8152: remove rtl_vendor_mode function r8152: avoid to change cfg for all devices net: tls, update curr on splice as well ring-buffer: Have rb_time_cmpxchg() set the msb counter too ring-buffer: Do not try to put back write_stamp ring-buffer: Fix a race in rb_time_cmpxchg() for 32 bit archs ring-buffer: Fix writing to the buffer with max_data_size ring-buffer: Have saved event hold the entire event ring-buffer: Do not update before stamp when switching sub-buffers tracing: Update snapshot buffer on resize if it is allocated ring-buffer: Fix memory leak of free page smb: client: fix OOB in smb2_query_reparse_point() smb: client: fix NULL deref in asn1_ber_decoder() smb: client: fix OOB in receive_encrypted_standard() drm/i915: Fix remapped stride with CCS on ADL+ drm/amd/display: Disable PSR-SU on Parade 0803 TCON again drm/amdgpu: fix tear down order in amdgpu_vm_pt_free btrfs: don't clear qgroup reserved bit in release_folio btrfs: free qgroup reserve when ORDERED_IOERR is set mm/shmem: fix race in shmem_undo_range w/THP mm/mglru: fix underprotected page cache dmaengine: stm32-dma: avoid bitfield overflow assertion drm/amdgpu/sdma5.2: add begin/end_use ring callbacks team: Fix use-after-free when an option instance allocation fails arm64: mm: Always make sw-dirty PTEs hw-dirty in pte_modify ext4: prevent the normalized size from exceeding EXT_MAX_BLOCKS soundwire: stream: fix NULL pointer dereference for multi_link btrfs: do not allow non subvolume root targets for snapshot perf: Fix perf_event_validate_size() lockdep splat HID: hid-asus: add const to read-only outgoing usb buffer arm64: add dependency between vmlinuz.efi and Image net: usb: qmi_wwan: claim interface 4 for ZTE MF290 asm-generic: qspinlock: fix queued_spin_value_unlocked() implementation HID: multitouch: Add quirk for HONOR GLO-GXXX touchpad HID: hid-asus: reset the backlight brightness level on resume nbd: pass nbd_sock to nbd_read_reply() instead of index HID: add ALWAYS_POLL quirk for Apple kb HID: glorious: fix Glorious Model I HID report platform/x86: intel_telemetry: Fix kernel doc descriptions LoongArch: Implement constant timer shutdown interface LoongArch: Add dependency between vmlinuz.efi and vmlinux.efi selftests/bpf: fix bpf_loop_bench for new callback verification scheme nvme: catch errors from nvme_configure_metadata() nvme-auth: set explanation code for failure2 msgs nbd: fold nbd config initialization into nbd_alloc_config() bcache: avoid NULL checking to c->root in run_cache_set() bcache: add code comments for bch_btree_node_get() and __bch_btree_node_alloc() bcache: remove redundant assignment to variable cur_idx bcache: avoid oversize memory allocation by small stripe_size blk-cgroup: bypass blkcg_deactivate_policy after destroying blk-throttle: fix lockdep warning of "cgroup_mutex or RCU read lock required!" stmmac: dwmac-loongson: Add architecture dependency usb: aqc111: check packet for fixup for true limit x86/hyperv: Fix the detection of E820_TYPE_PRAM in a Gen2 VM drm/mediatek: Add spinlock for setting vblank event in atomic_begin ksmbd: fix wrong name of SMB2_CREATE_ALLOCATION_SIZE PCI: loongson: Limit MRRS to 256 Revert "PCI: acpiphp: Reassign resources on bridge if necessary" ALSA: hda/realtek: Apply mute LED quirk for HP15-db ALSA: hda/hdmi: add force-connect quirks for ASUSTeK Z170 variants ALSA: hda/hdmi: add force-connect quirk for NUC5CPYB fuse: dax: set fc->dax to NULL in fuse_dax_conn_free() cred: switch to using atomic_long_t net: atlantic: fix double free in ring reinit logic appletalk: Fix Use-After-Free in atalk_ioctl net: stmmac: Handle disabled MDIO busses from devicetree dpaa2-switch: do not ask for MDB, VLAN and FDB replay dpaa2-switch: fix size of the dma_unmap vsock/virtio: Fix unsigned integer wrap around in virtio_transport_has_space() sign-file: Fix incorrect return values check stmmac: dwmac-loongson: Make sure MDIO is initialized before use net: ena: Fix XDP redirection error net: ena: Fix xdp drops handling due to multibuf packets net: ena: Destroy correct number of xdp queues upon failure net: Remove acked SYN flag from packet in the transmit queue correctly qed: Fix a potential use-after-free in qed_cxt_tables_alloc iavf: Handle ntuple on/off based on new state machines for flow director iavf: Introduce new state machines for flow director net/rose: Fix Use-After-Free in rose_ioctl atm: Fix Use-After-Free in do_vcc_ioctl octeontx2-af: Update RSS algorithm index octeontx2-pf: Fix promisc mcam entry action octeontx2-af: fix a use-after-free in rvu_nix_register_reporters net: fec: correct queue selection net: vlan: introduce skb_vlan_eth_hdr() atm: solos-pci: Fix potential deadlock on &tx_queue_lock atm: solos-pci: Fix potential deadlock on &cli_queue_lock bnxt_en: Fix HWTSTAMP_FILTER_ALL packet timestamp logic bnxt_en: Fix wrong return value check in bnxt_close_nic() bnxt_en: Save ring error counters across reset bnxt_en: Clear resource reservation during resume qca_spi: Fix reset behavior qca_debug: Fix ethtool -G iface tx behavior qca_debug: Prevent crash on TX ring changes net: ipv6: support reporting otherwise unknown prefix flags in RTM_NEWPREFIX net/mlx5e: Fix possible deadlock on mlx5e_tx_timeout_work HID: lenovo: Restrict detection of patched firmware only to USB cptkbd afs: Fix refcount underflow from error handling race ksmbd: fix memory leak in smb2_lock() ext4: fix warning in ext4_dio_write_end_io() powerpc/ftrace: Fix stack teardown in ftrace_no_trace r8152: add vendor/device ID pair for ASUS USB-C2500 r8152: add vendor/device ID pair for D-Link DUB-E250 r8152: add USB device driver for config selection perf/x86/uncore: Don't WARN_ON_ONCE() for a broken discovery table Revert "HID: fix HID device resource race between HID core and debugging support" ANDROID: GKI: Add symbols for rockchip sata ANDROID: sched: Add trace_android_rvh_setscheduler ANDROID: Update the ABI symbol list ANDROID: GKI: build damon for monitoring virtual address spaces UPSTREAM: mm/damon/sysfs-schemes: handle tried region directory allocation failure UPSTREAM: mm/damon/sysfs-schemes: handle tried regions sysfs directory allocation failure UPSTREAM: mm/damon/sysfs: check error from damon_sysfs_update_target() UPSTREAM: mm/damon/sysfs: eliminate potential uninitialized variable warning UPSTREAM: mm/damon/sysfs: update monitoring target regions for online input commit UPSTREAM: mm/damon/sysfs: remove requested targets when online-commit inputs UPSTREAM: mm/damon/sysfs: avoid empty scheme tried regions for large apply interval UPSTREAM: mm/damon/sysfs-schemes: do not update tried regions more than one DAMON snapshot UPSTREAM: mm/damon/sysfs: check DAMOS regions update progress from before_terminate() UPSTREAM: mm/damon/sysfs: implement a command for updating only schemes tried total bytes UPSTREAM: mm/damon/sysfs-schemes: implement DAMOS tried total bytes file UPSTREAM: mm/damon/ops-common: refactor to use {pte|pmd}p_clear_young_notify() UPSTREAM: mm/damon/core: skip apply schemes if empty UPSTREAM: mm/damon: use kstrtobool() instead of strtobool() UPSTREAM: mm/damon/sysfs-schemes: implement DAMOS-tried regions clear command UPSTREAM: mm/damon/sysfs: implement DAMOS tried regions update command UPSTREAM: mm/damon/sysfs-schemes: implement scheme region directory UPSTREAM: mm/damon/sysfs-schemes: implement schemes/tried_regions directory UPSTREAM: mm/damon/core: add a callback for scheme target regions check UPSTREAM: mm/damon/lru_sort: enable and disable synchronously UPSTREAM: mm/damon/reclaim: enable and disable synchronously UPSTREAM: mm/damon/{reclaim,lru_sort}: remove unnecessarily included headers UPSTREAM: mm/damon/modules: deduplicate init steps for DAMON context setup UPSTREAM: mm/damon/sysfs: split out schemes directory implementation to separate file UPSTREAM: mm/damon/sysfs: split out kdamond-independent schemes stats update logic into a new function UPSTREAM: mm/damon/sysfs: move unsigned long range directory to common module UPSTREAM: mm/damon/sysfs: move sysfs_lock to common module UPSTREAM: mm/damon/sysfs: remove parameters of damon_sysfs_region_alloc() UPSTREAM: mm/damon/sysfs: use damon_addr_range for region's start and end values UPSTREAM: mm/damon/core: split out scheme quota adjustment logic into a new function UPSTREAM: mm/damon/core: split out scheme stat update logic into a new function UPSTREAM: mm/damon/core: split damos application logic into a new function UPSTREAM: mm/damon/core: split out DAMOS-charged region skip logic into a new function ANDROID: Snapshot Mainline's version of checkpatch.pl ANDROID: KVM: arm64: Skip prefaulting ptes which will be modified later ANDROID: KVM: arm64: Introduce module_change_host_prot_range ANDROID: KVM: arm64: Relax checks in module_change_host_page_prot ANDROID: KVM: arm64: Optimise module_change_host_page_prot ANDROID: KVM: arm64: Prefault entries when splitting a block mapping ANDROID: virt: gunyah: Zero state_data after vcpu_run ANDROID: Update the ABI symbol list ANDROID: fs: Add vendor hooks for ep_create_wakeup_source & timerfd_create ANDROID: ABI: update symbol list for galaxy Linux 6.1.68 drm/i915: Skip some timing checks on BXT/GLK DSI transcoders drm/i915/sdvo: stop caching has_hdmi_monitor in struct intel_sdvo drm/i915/lvds: Use REG_BIT() & co. drm/i915/display: Drop check for doublescan mode in modevalid riscv: Kconfig: Add select ARM_AMBA to SOC_STARFIVE netfilter: nft_set_pipapo: skip inactive elements during set walk MIPS: Loongson64: Enable DMA noncoherent support MIPS: Loongson64: Handle more memory types passed from firmware MIPS: Loongson64: Reserve vgabios memory on boot KVM: SVM: Update EFER software model on CR0 trap for SEV-ES KVM: s390/mm: Properly reset no-dat MIPS: kernel: Clear FPU states when setting up kernel threads cifs: Fix flushing, invalidation and file size with FICLONE cifs: Fix flushing, invalidation and file size with copy_file_range() USB: gadget: core: adjust uevent timing on gadget unbind x86/CPU/AMD: Check vendor in the AMD microcode callback devcoredump: Send uevent once devcd is ready serial: 8250_omap: Add earlycon support for the AM654 UART controller serial: 8250: 8250_omap: Do not start RX DMA on THRI interrupt serial: 8250: 8250_omap: Clear UART_HAS_RHR_IT_DIS bit serial: sc16is7xx: address RX timeout interrupt errata ARM: PL011: Fix DMA support usb: typec: class: fix typec_altmode_put_partner to put plugs smb: client: fix potential NULL deref in parse_dfs_referrals() Revert "xhci: Loosen RPM as default policy to cover for AMD xHC 1.1" cifs: Fix non-availability of dedup breaking generic/304 parport: Add support for Brainboxes IX/UC/PX parallel cards serial: 8250_dw: Add ACPI ID for Granite Rapids-D UART usb: gadget: f_hid: fix report descriptor allocation drm/amdgpu: Update EEPROM I2C address for smu v13_0_0 drm/amdgpu: Add I2C EEPROM support on smu v13_0_6 drm/amdgpu: simplify amdgpu_ras_eeprom.c drm/amdgpu: Return from switch early for EEPROM I2C address drm/amdgpu: Remove second moot switch to set EEPROM I2C address drm/amdgpu: Add support for RAS table at 0x40000 drm/amdgpu: Decouple RAS EEPROM addresses from chips drm/amdgpu: Remove redundant I2C EEPROM address drm/amdgpu: Add EEPROM I2C address support for ip discovery drm/amdgpu: Update ras eeprom support for smu v13_0_0 and v13_0_10 drm/amdgpu: correct the amdgpu runtime dereference usage count drm/amd/amdgpu: Fix warnings in amdgpu/amdgpu_display.c drm/amdgpu: fix memory overflow in the IB test gpiolib: sysfs: Fix error handling on failed export x86/sev: Fix kernel crash due to late update to read-only ghcb_version perf: Fix perf_event_validate_size() arm64: dts: mt8183: kukui: Fix underscores in node names arm64: dts: mediatek: add missing space before { parisc: Fix asm operand number out of range build error in bug table parisc: Reduce size of the bug_table on 64-bit kernel by half tracing: Stop current tracer when resizing buffer tracing: Set actual size after ring buffer resize ring-buffer: Force absolute timestamp on discard of event LoongArch: BPF: Don't sign extend function return value LoongArch: BPF: Don't sign extend memory load operand misc: mei: client.c: fix problem of return '-EOVERFLOW' in mei_cl_write misc: mei: client.c: return negative error code in mei_cl_write hwtracing: hisi_ptt: Add dummy callback pmu::read() coresight: etm4x: Remove bogous __exit annotation for some functions coresight: etm4x: Make etm4_remove_dev() return void binder: fix memory leaks of spam and pending work arm64: dts: mediatek: mt8183-evb: Fix unit_address_vs_reg warning on ntc arm64: dts: mediatek: mt8183: Move thermal-zones to the root node arm64: dts: mediatek: mt8183: Fix unit address for scp reserved memory arm64: dts: mediatek: mt8195: Fix PM suspend/resume with venc clocks arm64: dts: mediatek: mt8173-evb: Fix regulator-fixed node names arm64: dts: mediatek: cherry: Fix interrupt cells for MT6360 on I2C7 arm64: dts: mediatek: mt8183-kukui-jacuzzi: fix dsi unnecessary cells properties arm64: dts: mediatek: mt7622: fix memory node warning check md/raid6: use valid sector values to determine if an I/O should wait on the reshape powercap: DTPM: Fix missing cpufreq_cpu_put() calls mm: fix oops when filemap_map_pmd() without prealloc_pte hugetlb: fix null-ptr-deref in hugetlb_vma_lock_write platform/surface: aggregator: fix recv_buf() return value regmap: fix bogus error on regcache_sync success r8169: fix rtl8125b PAUSE frames blasting when suspended packet: Move reference count in packet_sock to atomic_long_t tracing: Fix a possible race when disabling buffered events tracing: Fix incomplete locking when disabling buffered events tracing: Disable snapshot buffer when stopping instance tracers tracing: Always update snapshot buffer size checkstack: fix printed address cgroup_freezer: cgroup_freezing: Check if not frozen nilfs2: prevent WARNING in nilfs_sufile_set_segment_usage() nilfs2: fix missing error check for sb_set_blocksize call ring-buffer: Test last update in 32bit version of __rb_time_read() ALSA: hda/realtek: Add Framework laptop 16 to quirks ALSA: hda/realtek: add new Framework laptop to quirks ALSA: hda/realtek: Enable headset on Lenovo M90 Gen5 ALSA: pcm: fix out-of-bounds in snd_pcm_state_names ALSA: usb-audio: Add Pioneer DJM-450 mixer controls io_uring: fix mutex_unlock with unreferenced ctx nvme-pci: Add sleep quirk for Kingston drives io_uring/af_unix: disable sending io_uring over sockets ASoC: amd: yc: Fix non-functional mic on ASUS E1504FA kprobes: consistent rcu api usage for kretprobe holder rethook: Use __rcu pointer for rethook::handler iommu: Avoid more races around device probe md: don't leave 'MD_RECOVERY_FROZEN' in error path of md_set_readonly() md: introduce md_ro_state riscv: fix misaligned access handling of C.SWSP and C.SDSP ARM: dts: imx28-xea: Pass the 'model' property ARM: dts: imx7: Declare timers compatible with fsl,imx6dl-gpt ARM: imx: Check return value of devm_kasprintf in imx_mmdc_perf_init scsi: be2iscsi: Fix a memleak in beiscsi_init_wrb_handle() tracing: Fix a warning when allocating buffered events fails ARM: dts: imx6ul-pico: Describe the Ethernet PHY clock arm64: dts: imx8mp: imx8mq: Add parkmode-disable-ss-quirk on DWC3 arm64: dts: imx8mq: drop usb3-resume-missing-cas from usb drm/bridge: tc358768: select CONFIG_VIDEOMODE_HELPERS RDMA/irdma: Avoid free the non-cqp_request scratch RDMA/core: Fix umem iterator when PAGE_SIZE is greater then HCA pgsz ASoC: wm_adsp: fix memleak in wm_adsp_buffer_populate hwmon: (nzxt-kraken2) Fix error handling path in kraken2_probe() ASoC: codecs: lpass-tx-macro: set active_decimator correct default value hwmon: (acpi_power_meter) Fix 4.29 MW bug RDMA/irdma: Fix UAF in irdma_sc_ccq_get_cqe_info() RDMA/irdma: Refactor error handling in create CQP RDMA/bnxt_re: Correct module description string RDMA/rtrs-clt: Remove the warnings for req in_use check RDMA/rtrs-clt: Fix the max_send_wr setting RDMA/rtrs-srv: Destroy path files after making sure no IOs in-flight RDMA/rtrs-srv: Free srv_mr iu only when always_invalidate is true RDMA/rtrs-srv: Check return values while processing info request RDMA/rtrs-clt: Start hb after path_up RDMA/rtrs-srv: Do not unconditionally enable irq ASoC: fsl_sai: Fix no frame sync clock issue on i.MX8MP arm64: dts: rockchip: Expand reg size of vdec node for RK3399 arm64: dts: rockchip: Expand reg size of vdec node for RK3328 RDMA/irdma: Add wait for suspend on SQD RDMA/irdma: Do not modify to SQD on error RDMA/hns: Fix unnecessary err return when using invalid congest control algorithm tee: optee: Fix supplicant based device enumeration mm/damon/sysfs: eliminate potential uninitialized variable warning drop_monitor: Require 'CAP_SYS_ADMIN' when joining "events" group psample: Require 'CAP_NET_ADMIN' when joining "packets" group bpf: sockmap, updating the sg structure should also update curr tcp: do not accept ACK of bytes we never sent netfilter: xt_owner: Fix for unsafe access of sk->sk_socket netfilter: nf_tables: validate family when identifying table via handle netfilter: nf_tables: bail out on mismatching dynset and set expressions netfilter: nf_tables: fix 'exist' matching on bigendian arches netfilter: nft_exthdr: add boolean DCCP option matching dt-bindings: interrupt-controller: Allow #power-domain-cells octeontx2-af: Update Tx link register range octeontx2-af: Add missing mcs flr handler call octeontx2-af: Fix mcs stats register address octeontx2-af: Fix mcs sa cam entries size octeontx2-af: Adjust Tx credits when MCS external bypass is disabled net: hns: fix fake link up on xge port net: hns: fix wrong head when modify the tx feature when sending packets net: atlantic: Fix NULL dereference of skb pointer in ipv4: ip_gre: Avoid skb_pull() failure in ipgre_xmit() ionic: Fix dim work handling in split interrupt mode ionic: fix snprintf format length warning tcp: fix mid stream window clamp. net: bnxt: fix a potential use-after-free in bnxt_init_tc iavf: validate tx_coalesce_usecs even if rx_coalesce_usecs is zero i40e: Fix unexpected MFS warning message octeontx2-af: fix a use-after-free in rvu_npa_register_reporters xsk: Skip polling event check for unbound socket net: stmmac: fix FPE events losing octeontx2-pf: consider both Rx and Tx packet stats for adaptive interrupt coalescing arcnet: restoring support for multiple Sohard Arcnet cards platform/mellanox: Check devm_hwmon_device_register_with_groups() return value platform/mellanox: Add null pointer checks for devm_kasprintf() mlxbf-bootctl: correctly identify secure boot with development keys r8152: Add RTL8152_INACCESSIBLE to r8153_aldps_en() r8152: Add RTL8152_INACCESSIBLE to r8153_pre_firmware_1() r8152: Add RTL8152_INACCESSIBLE to r8156b_wait_loading_flash() r8152: Add RTL8152_INACCESSIBLE checks to more loops r8152: Rename RTL8152_UNPLUG to RTL8152_INACCESSIBLE hv_netvsc: rndis_filter needs to select NLS octeontx2-af: Check return value of nix_get_nixlf before using nixlf octeontx2-pf: Add missing mutex lock in otx2_get_pauseparam ipv6: fix potential NULL deref in fib6_add() platform/x86: wmi: Skip blocks with zero instances of: dynamic: Fix of_reconfig_get_state_change() return value documentation platform/x86: asus-wmi: Move i8042 filter install to shared asus-wmi code dt: dt-extract-compatibles: Don't follow symlinks when walking tree dt: dt-extract-compatibles: Handle cfile arguments in generator function x86/tdx: Allow 32-bit emulation by default x86/entry: Do not allow external 0x80 interrupts x86/entry: Convert INT 0x80 emulation to IDTENTRY x86/coco: Disable 32-bit emulation by default on TDX and SEV x86: Introduce ia32_enabled() drm/amdgpu: correct chunk_ptr to a pointer to chunk. kconfig: fix memory leak from range properties tg3: Increment tx_dropped in tg3_tso_bug() tg3: Move the [rt]x_dropped counters to tg3_napi zstd: Fix array-index-out-of-bounds UBSAN warning netfilter: ipset: fix race condition between swap/destroy and kernel side add/del/test i2c: designware: Fix corrupted memory seen in the ISR hrtimers: Push pending hrtimers away from outgoing CPU earlier vdpa/mlx5: preserve CVQ vringh index ANDROID: Fix up merge issues in 6.1.64 in net/netfilter/nf_tables_api.c Reapply "binder: fix UAF caused by faulty buffer cleanup" ANDROID: Fix up unneeded crc break in af_vsock.c Revert "mmc: Add quirk MMC_QUIRK_BROKEN_CACHE_FLUSH for Micron eMMC Q2J54A" Revert "ASoC: soc-card: Add storage for PCI SSID" Revert "tracing: Have trace_event_file have ref counters" Revert "workqueue: Provide one lock class key per work_on_cpu() callsite" UPSTREAM: x86/sev: Check for user-space IOIO pointing to kernel space UPSTREAM: x86/sev: Check IOBM for IOIO exceptions from user-space FROMGIT: usb: typec: tcpm: skip checking port->send_discover in PD3.0 ANDROID: arm64: Disable workaround for CPU errata 2441007 and 2441009 Linux 6.1.67 Revert "wifi: cfg80211: fix CQM for non-range use" ANDROID: Update the ABI symbol list ANDROID: netlink: add netlink poll and hooks Linux 6.1.66 iomap: update ki_pos a little later in iomap_dio_complete x86/apic/msi: Fix misconfigured non-maskable MSI quirk x86/xen: fix percpu vcpu_info allocation xen: simplify evtchn_do_upcall() call maze xen: Allow platform PCI interrupt to be shared r8169: fix deadlock on RTL8125 in jumbo mtu mode r8169: disable ASPM in case of tx timeout drm/amd/display: Fix MPCC 1DLUT programming drm/amd/display: Fix the delta clamping for shaper LUT drm/amd/display: clean code-style issues in dcn30_set_mpc_shaper_3dlut drm/amd/display: Expand kernel doc for DC mmc: sdhci-sprd: Fix vqmmc not shutting down after the card was pulled mmc: core: add helpers mmc_regulator_enable/disable_vqmmc drm/amd/pm: fix a memleak in aldebaran_tables_init iommu/vt-d: Make context clearing consistent with context mapping iommu/vt-d: Disable PCI ATS in legacy passthrough mode iommu/vt-d: Add device_block_translation() helper iommu/vt-d: Allocate pasid table in device probe path iommu/vt-d: Omit devTLB invalidation requests when TES=0 cpufreq: imx6q: Don't disable 792 Mhz OPP unnecessarily cpufreq: imx6q: don't warn for disabling a non-existing frequency drm/amd/display: Guard against invalid RPTR/WPTR being set drm/amd/display: Restore rptr/wptr for DMCUB as workaround spi: Fix null dereference on suspend fbdev: stifb: Make the STI next font pointer a 32-bit signed offset PCI: qcom-ep: Add dedicated callback for writing to DBI2 registers octeontx2-af: Initialize 'cntr_val' to fix uninitialized symbol error PCI: Lengthen reset delay for VideoPropulsion Torrent QN16e card KVM: x86: Fix lapic timer interrupt lost after loading a snapshot. net: ravb: Keep reverse order of operations in ravb_remove() net: ravb: Stop DMA in case of failures on ravb_open() net: ravb: Start TX queues after HW initialization succeeded net: ravb: Make write access to CXR35 first before accessing other EMAC registers net: ravb: Use pm_runtime_resume_and_get() net: ravb: Check return value of reset_control_deassert() ravb: Fix races between ravb_tx_timeout_work() and net related ops r8169: prevent potential deadlock in rtl8169_close octeontx2-pf: Restore TC ingress police rules when interface is up octeontx2-af: Install TC filter rules in hardware based on priority octeontx2-pf: Fix adding mbox work queue entry when num_vfs > 64 net: stmmac: xgmac: Disable FPE MMC interrupts octeontx2-af: Fix possible buffer overflow selftests/net: mptcp: fix uninitialized variable warnings selftests/net: unix: fix unused variable compiler warning selftests/net: fix a char signedness issue selftests/net: ipsec: fix constant out of range uapi: propagate __struct_group() attributes to the container union dpaa2-eth: increase the needed headroom to account for alignment ipv4: igmp: fix refcnt uaf issue when receiving igmp query packet usb: config: fix iteration issue in 'usb_get_bos_descriptor()' USB: core: Change configuration warnings to notices USB: xhci-plat: fix legacy PHY double init wifi: cfg80211: fix CQM for non-range use serial: sc16is7xx: add missing support for rs485 devicetree properties serial: sc16is7xx: Put IOControl register into regmap_volatile auxdisplay: hd44780: move cursor home after clear display command Input: xpad - add HyperX Clutch Gladiate Support btrfs: fix 64bit compat send ioctl arguments not initializing version member btrfs: make error messages more clear when getting a chunk map btrfs: send: ensure send_fd is writable btrfs: fix off-by-one when checking chunk map includes logical address btrfs: ref-verify: fix memory leaks in btrfs_ref_tree_mod() btrfs: add dmesg output for first mount and last unmount of a filesystem parisc: Mark altinstructions read-only and 32-bit aligned parisc: Ensure 32-bit alignment on parisc unwind section parisc: Mark jump_table naturally aligned parisc: Drop the HP-UX ENOSYM and EREMOTERELEASE error codes parisc: Mark lock_aligned variables 16-byte aligned on SMP parisc: Use natural CPU alignment for bug_table parisc: Mark ex_table entries 32-bit aligned in uaccess.h parisc: Mark ex_table entries 32-bit aligned in assembly.h powerpc: Don't clobber f0/vs0 during fp|altivec register save KVM: PPC: Book3S HV: Fix KVM_RUN clobbering FP/VEC user registers iommu/vt-d: Add MTL to quirk list to skip TE disabling bcache: revert replacing IS_ERR_OR_NULL with IS_ERR dma-buf: fix check in dma_resv_add_fence cpufreq/amd-pstate: Fix the return value of amd_pstate_fast_switch() powercap: DTPM: Fix unneeded conversions to micro-Watts nvme: check for valid nvme_identify_ns() before using it dm verity: don't perform FEC for failed readahead IO dm verity: initialize fec io before freeing it drm/amd/display: fix ABM disablement drm/amd/display: Update min Z8 residency time to 2100 for DCN314 drm/amd/display: Use DRAM speed from validation for dummy p-state drm/amd/display: Remove min_dst_y_next_start check for Z8 drm/amd/display: Include udelay when waiting for INBOX0 ACK drm/amdgpu: Force order between a read and write to the same address drm/amd: Enable PCIe PME from D3 scsi: sd: Fix system start for ATA devices scsi: Change SCSI device boolean fields to single bit flags dm-verity: align struct dm_verity_fec_io properly ALSA: hda/realtek: Add supported ALC257 for ChromeOS ALSA: hda/realtek: Headset Mic VREF to 100% ALSA: hda: Disable power-save on KONTRON SinglePC mmc: block: Be sure to wait while busy in CQE error recovery mmc: block: Do not lose cache flush during CQE error recovery mmc: block: Retry commands in CQE error recovery mmc: cqhci: Fix task clearing in CQE error recovery mmc: cqhci: Warn of halt or task clear failure mmc: cqhci: Increase recovery halt timeout mmc: sdhci-pci-gli: Disable LPM during initialization firewire: core: fix possible memory leak in create_units() pinctrl: avoid reload of p state in list iteration smb: client: report correct st_size for SMB and NFS symlinks cifs: Fix FALLOC_FL_INSERT_RANGE by setting i_size after EOF moved cifs: Fix FALLOC_FL_ZERO_RANGE by setting i_size if EOF moved Linux 6.1.65 io_uring: fix off-by one bvec index USB: dwc3: qcom: fix wakeup after probe deferral USB: dwc3: qcom: fix software node leak on probe errors usb: dwc3: set the dma max_seg_size usb: dwc3: Fix default mode initialization USB: dwc2: write HCINT with INTMASK applied usb: typec: tcpm: Skip hard reset when in error recovery USB: serial: option: don't claim interface 4 for ZTE MF290 USB: serial: option: fix FM101R-GL defines USB: serial: option: add Fibocom L7xx modules usb: cdnsp: Fix deadlock issue during using NCM gadget bcache: fixup lock c->root error bcache: fixup init dirty data errors bcache: prevent potential division by zero error bcache: check return value from btree_node_alloc_replacement() dm-delay: fix a race between delay_presuspend and delay_bio hv_netvsc: Mark VF as slave before exposing it to user-mode hv_netvsc: Fix race of register_netdevice_notifier and VF register hv_netvsc: fix race of netvsc and VF register_netdevice USB: serial: option: add Luat Air72*U series products s390/dasd: protect device queue against concurrent access io_uring/fs: consider link->flags when getting path for LINKAT bcache: fixup multi-threaded bch_sectors_dirty_init() wake-up race md: fix bi_status reporting in md_end_clone_io bcache: replace a mistaken IS_ERR() by IS_ERR_OR_NULL() in btree_gc_coalesce() swiotlb-xen: provide the "max_mapping_size" method ACPI: resource: Skip IRQ override on ASUS ExpertBook B1402CVA arm64: dts: imx8mn-var-som: add 20ms delay to ethernet regulator enable NFSD: Fix checksum mismatches in the duplicate reply cache NFSD: Fix "start of NFS reply" pointer passed to nfsd_cache_update() ext4: make sure allocate pending entry not fail ext4: fix slab-use-after-free in ext4_es_insert_extent() ext4: using nofail preallocation in ext4_es_insert_extent() ext4: using nofail preallocation in ext4_es_insert_delayed_block() ext4: using nofail preallocation in ext4_es_remove_extent() ext4: use pre-allocated es in __es_remove_extent() ext4: use pre-allocated es in __es_insert_extent() ext4: factor out __es_alloc_extent() and __es_free_extent() ext4: add a new helper to check if es must be kept media: qcom: camss: Fix genpd cleanup media: qcom: camss: Fix V4L2 async notifier error path media: qcom: Initialise V4L2 async notifier later media: camss: Convert to platform remove callback returning void media: camss: Split power domain management MIPS: KVM: Fix a build warning about variable set but not used cifs: fix leak of iface for primary channel cifs: account for primary channel in the interface list cifs: distribute channels across interfaces based on speed cifs: print last update time for interface list smb3: allow dumping session and tcon id to improve stats analysis and debugging cifs: minor cleanup of some headers lockdep: Fix block chain corruption USB: dwc3: qcom: fix ACPI platform device leak USB: dwc3: qcom: fix resource leaks on probe deferral nvmet: nul-terminate the NQNs passed in the connect command i40e: Fix adding unsupported cloud filters i40e: use ERR_PTR error print in i40e messages arm64: mm: Fix "rodata=on" when CONFIG_RODATA_FULL_DEFAULT_ENABLED=y mm,kfence: decouple kfence from page granularity mapping judgement afs: Fix file locking on R/O volumes to operate in local mode afs: Return ENOENT if no cell DNS record can be found net: axienet: Fix check for partial TX checksum amd-xgbe: propagate the correct speed and duplex status amd-xgbe: handle the corner-case during tx completion amd-xgbe: handle corner-case during sfp hotplug octeontx2-pf: Fix ntuple rule creation to direct packet to VF with higher Rx queue than its PF arm/xen: fix xen_vcpu_info allocation alignment net/smc: avoid data corruption caused by decline net: usb: ax88179_178a: fix failed operations during ax88179_reset ipv4: Correct/silence an endian warning in __ip_do_redirect HID: fix HID device resource race between HID core and debugging support drm/rockchip: vop: Fix color for RGB888/BGR888 format on VOP full drm/i915: do not clean GT table on error path ata: pata_isapnp: Add missing error check for devm_ioport_map() octeontx2-pf: Fix memory leak during interface down wireguard: use DEV_STATS_INC() drm/panel: simple: Fix Innolux G101ICE-L01 timings drm/panel: simple: Fix Innolux G101ICE-L01 bus flags drm/panel: auo,b101uan08.3: Fine tune the panel power sequence drm/panel: boe-tv101wum-nl6: Fine tune the panel power sequence afs: Make error on cell lookup failure consistent with OpenAFS afs: Fix afs_server_list to be cleaned up with RCU Revert "inet: shrink struct flowi_common" Revert "mfd: core: Un-constify mfd_cell.of_reg" Revert "arm64/arm: xen: enlighten: Fix KPTI checks" Revert "virtio/vsock: replace virtio_vsock_pkt with sk_buff" Revert "vsock/virtio: remove socket from connected/bound list on shutdown" Revert "virtio/vsock: don't use skbuff state to account credit" Revert "virtio/vsock: remove redundant 'skb_pull()' call" Revert "virtio/vsock: don't drop skbuff on copy failure" Revert "virtio/vsock: fix leaks due to missing skb owner" Revert "virtio/vsock: Fix uninit-value in virtio_transport_recv_pkt()" Revert "virtio/vsock: fix header length on skb merging" Revert "vsock/loopback: use only sk_buff_head.lock to protect the packet queue" Linux 6.1.64 RISC-V: drop error print from riscv_hartid_to_cpuid() cxl/port: Fix NULL pointer access in devm_cxl_add_port() mmc: sdhci-pci-gli: GL9755: Mask the replay timer timeout of AER Input: xpad - add VID for Turtle Beach controllers tracing: Have trace_event_file have ref counters powerpc/powernv: Fix fortify source warnings in opal-prd.c drm/amd/display: Change the DMCUB mailbox memory location from FB to inbox drm/amd/display: Enable fast plane updates on DCN3.2 and above drm/amd/display: fix a NULL pointer dereference in amdgpu_dm_i2c_xfer() drm/amdgpu: lower CS errors to debug severity drm/amdgpu: fix error handling in amdgpu_bo_list_get() drm/amdgpu: don't use ATRM for external devices drm/amdgpu: don't use pci_is_thunderbolt_attached() drm/amdgpu/smu13: drop compute workload workaround drm/amd/pm: Fix error of MACO flag setting code drm/i915: Fix potential spectre vulnerability drm/i915: Bump GLK CDCLK frequency when driving multiple pipes drm/amd/pm: Handle non-terminated overdrive commands. ext4: properly sync file size update after O_SYNC direct IO ext4: add missed brelse in update_backups ext4: remove gdb backup copy for meta bg in setup_new_flex_group_blocks ext4: correct the start block of counting reserved clusters ext4: correct return value of ext4_convert_meta_bg ext4: mark buffer new if it is unwritten to avoid stale data exposure ext4: correct offset of gdb backup in non meta_bg group to update_backups ext4: apply umask if ACL support is disabled Revert "net: r8169: Disable multicast filter for RTL8168H and RTL8107E" media: qcom: camss: Fix csid-gen2 for test pattern generator media: qcom: camss: Fix invalid clock enable bit disjunction media: qcom: camss: Fix missing vfe_lite clocks check media: qcom: camss: Fix VFE-480 vfe_disable_output() media: qcom: camss: Fix VFE-17x vfe_disable_output() media: qcom: camss: Fix vfe_get() error jump media: qcom: camss: Fix pm_domain_on sequence in probe mmc: sdhci-pci-gli: GL9750: Mask the replay timer timeout of AER r8169: add handling DASH when DASH is disabled r8169: fix network lost after resume on DASH systems mptcp: fix setsockopt(IP_TOS) subflow locking mptcp: add validity check for sending RM_ADDR mptcp: deal with large GSO size mm: kmem: drop __GFP_NOFAIL when allocating objcg vectors mm: fix for negative counter: nr_file_hugepages mmc: sdhci-pci-gli: A workaround to allow GL9750 to enter ASPM L1.2 riscv: kprobes: allow writing to x0 riscv: correct pt_level name via pgtable_l5/4_enabled riscv: mm: Update the comment of CONFIG_PAGE_OFFSET LoongArch: Mark __percpu functions as always inline nfsd: fix file memleak on client_opens_release dm-verity: don't use blocking calls from tasklets drm/mediatek/dp: fix memory leak on ->get_edid callback error path drm/mediatek/dp: fix memory leak on ->get_edid callback audio detection media: ccs: Correctly initialise try compose rectangle media: venus: hfi: add checks to handle capabilities from firmware media: venus: hfi: fix the check to handle session buffer requirement media: venus: hfi_parser: Add check to keep the number of codecs within range media: sharp: fix sharp encoding media: lirc: drop trailing space from scancode transmit f2fs: avoid format-overflow warning f2fs: do not return EFSCORRUPTED, but try to run online repair i2c: i801: fix potential race in i801_block_transaction_byte_by_byte net: phylink: initialize carrier state at creation net: dsa: lan9303: consequently nested-lock physical MDIO net: ethtool: Fix documentation of ethtool_sprintf() s390/ap: fix AP bus crash on early config change callback invocation i2c: designware: Disable TX_EMPTY irq while waiting for block length byte sbsa_gwdt: Calculate timeout with 64-bit math lsm: fix default return value for inode_getsecctx lsm: fix default return value for vm_enough_memory Revert "i2c: pxa: move to generic GPIO recovery" Revert ncsi: Propagate carrier gain/loss events to the NCSI controller cxl/region: Fix x1 root-decoder granularity calculations tools/testing/cxl: Define a fixed volatile configuration to parse cxl/mem: Move devm_cxl_add_endpoint() from cxl_core to cxl_mem cxl: Unify debug messages when calling devm_cxl_add_port() i3c: master: svc: fix random hot join failure since timeout error i3c: master: svc: add NACK check after start byte sent cxl/region: Do not try to cleanup after cxl_region_setup_targets() fails cxl/region: Move region-position validation to a helper cxl/region: Cleanup target list on attach error cxl/region: Validate region mode vs decoder mode drm/amd/display: enable dsc_clk even if dsc_pg disabled Bluetooth: btusb: Add 0bda:b85b for Fn-Link RTL8852BE Bluetooth: btusb: Add RTW8852BE device 13d3:3570 to device tables bluetooth: Add device 13d3:3571 to device tables bluetooth: Add device 0bda:887b to device tables Bluetooth: btusb: Add Realtek RTL8852BE support ID 0x0cb8:0xc559 clk: visconti: Fix undefined behavior bug in struct visconti_pll_provider clk: visconti: remove unused visconti_pll_provider::regmap cpufreq: stats: Fix buffer overflow detection in trans_stats() pmdomain: imx: Make imx pgc power domain also set the fwnode pmdomain: bcm: bcm2835-power: check if the ASB register is equal to enable ALSA: hda/realtek: Add quirks for HP Laptops ALSA: hda/realtek: Enable Mute LED on HP 255 G10 ALSA: hda/realtek - Enable internal speaker of ASUS K6500ZC ALSA: hda/realtek - Add Dell ALC295 to pin fall back table ALSA: hda/realtek: Enable Mute LED on HP 255 G8 ALSA: info: Fix potential deadlock at disconnection btrfs: zoned: wait for data BG to be finished on direct IO allocation xfs: recovery should not clear di_flushiter unconditionally cifs: do not reset chan_max if multichannel is not supported at mount cifs: force interface update before a fresh session setup cifs: reconnect helper should set reconnect for the right channel smb: client: fix potential deadlock when releasing mids smb: client: fix use-after-free bug in cifs_debug_data_proc_show() smb3: fix caching of ctime on setxattr smb3: fix touch -h of symlink smb3: fix creating FIFOs when mounting with "sfu" mount option fs: add ctime accessors infrastructure xhci: Enable RPM on controllers that support low-power states parisc/power: Fix power soft-off when running on qemu parisc/pgtable: Do not drop upper 5 address bits of physical address parisc: Prevent booting 64-bit kernels on PA1.x machines i3c: master: svc: fix SDA keep low when polling IBIWON timeout happen i3c: master: svc: fix check wrong status register in irq handler i3c: master: svc: fix ibi may not return mandatory data byte i3c: master: svc: fix wrong data return when IBI happen during start frame i3c: master: svc: fix race condition in ibi work thread i3c: master: cdns: Fix reading status register mtd: cfi_cmdset_0001: Byte swap OTP info mm/memory_hotplug: use pfn math in place of direct struct page manipulation mm/cma: use nth_page() in place of direct struct page manipulation s390/cmma: fix detection of DAT pages dmaengine: stm32-mdma: correct desc prep when channel running mcb: fix error handling for different scenarios when parsing driver core: Release all resources during unbind before updating device links tracing: Have the user copy of synthetic event address use correct context i2c: core: Run atomic i2c xfer when !preemptible kernel/reboot: emergency_restart: Set correct system_state quota: explicitly forbid quota files from being encrypted jbd2: fix potential data lost in recovering journal raced with synchronizing fs bdev ASoC: codecs: wsa-macro: fix uninitialized stack variables with name prefix hid: lenovo: Resend all settings on reset_resume for compact keyboards selftests/resctrl: Reduce failures due to outliers in MBA/MBM tests selftests/resctrl: Move _GNU_SOURCE define into Makefile selftests/resctrl: Remove duplicate feature check from CMT test netfilter: nf_tables: split async and sync catchall in two functions netfilter: nf_tables: remove catchall element in GC sync path ima: detect changes to the backing overlay file ima: annotate iint mutex to avoid lockdep false positive warnings mfd: qcom-spmi-pmic: Fix revid implementation mfd: qcom-spmi-pmic: Fix reference leaks in revid helper arm64: dts: qcom: ipq6018: Fix tcsr_mutex register size ACPI: FPDT: properly handle invalid FPDT subtables firmware: qcom_scm: use 64-bit calling convention only when client is 64-bit arm64: dts: qcom: ipq8074: Fix hwlock index for SMEM btrfs: don't arbitrarily slow down delalloc if we're committing rcu: kmemleak: Ignore kmemleak false positives when RCU-freeing objects PM: hibernate: Clean up sync_read handling in snapshot_write_next() PM: hibernate: Use __get_safe_page() rather than touching the list arm64: dts: qcom: ipq6018: Fix hwlock index for SMEM rcu/tree: Defer setting of jiffies during stall reset svcrdma: Drop connection after an RDMA Read error wifi: wilc1000: use vmm_table as array in wilc struct PCI: exynos: Don't discard .remove() callback PCI: kirin: Don't discard .remove() callback PCI/ASPM: Fix L1 substate handling in aspm_attr_store_common() mmc: Add quirk MMC_QUIRK_BROKEN_CACHE_FLUSH for Micron eMMC Q2J54A mmc: sdhci_am654: fix start loop index for TAP value parsing mmc: vub300: fix an error code ksmbd: fix slab out of bounds write in smb_inherit_dacl() ksmbd: handle malformed smb1 message clk: qcom: ipq6018: drop the CLK_SET_RATE_PARENT flag from PLL clocks clk: qcom: ipq8074: drop the CLK_SET_RATE_PARENT flag from PLL clocks clk: socfpga: Fix undefined behavior bug in struct stratix10_clock_data parisc/power: Add power soft-off when running on qemu parisc/pdc: Add width field to struct pdc_model arm64: Restrict CPU_BIG_ENDIAN to GNU as or LLVM IAS 15.x or newer PCI: keystone: Don't discard .probe() callback PCI: keystone: Don't discard .remove() callback KEYS: trusted: Rollback init_trusted() consistently KEYS: trusted: tee: Refactor register SHM usage genirq/generic_chip: Make irq_remove_generic_chip() irqdomain aware mmc: meson-gx: Remove setting of CMD_CFG_ERROR wifi: ath11k: fix gtk offload status event locking wifi: ath11k: fix htt pktlog locking wifi: ath11k: fix dfs radar event locking wifi: ath11k: fix temperature event locking regmap: Ensure range selector registers are updated after cache sync ACPI: resource: Do IRQ override on TongFang GMxXGxx mm/damon/sysfs: check error from damon_sysfs_update_target() mm/damon: implement a function for max nr_accesses safe calculation mm/damon/ops-common: avoid divide-by-zero during region hotness calculation mm/damon/lru_sort: avoid divide-by-zero in hot threshold calculation watchdog: move softlockup_panic back to early_param mm/damon/sysfs: update monitoring target regions for online input commit mm/damon/sysfs: remove requested targets when online-commit inputs PCI/sysfs: Protect driver's D3cold preference from user space hvc/xen: fix event channel handling for secondary consoles hvc/xen: fix error path in xen_hvc_init() to always register frontend driver hvc/xen: fix console unplug tty: serial: meson: fix hard LOCKUP on crtscts mode tty/sysrq: replace smp_processor_id() with get_cpu() proc: sysctl: prevent aliased sysctls from getting passed to init audit: don't WARN_ON_ONCE(!current->mm) in audit_exe_compare() audit: don't take task_lock() in audit_exe_compare() code path KVM: x86: Clear bit12 of ICR after APIC-write VM-exit KVM: x86: Ignore MSR_AMD64_TW_CFG access KVM: x86: hyper-v: Don't auto-enable stimer on write from user-space x86/cpu/hygon: Fix the CPU topology evaluation for real crypto: x86/sha - load modules based on CPU features scsi: qla2xxx: Fix system crash due to bad pointer access scsi: megaraid_sas: Increase register read retry rount from 3 to 30 for selected registers scsi: mpt3sas: Fix loop logic bpf: Fix precision tracking for BPF_ALU | BPF_TO_BE | BPF_END bpf: Fix check_stack_write_fixed_off() to correctly spill imm randstruct: Fix gcc-plugin performance mode to stay in group powerpc/perf: Fix disabling BHRB and instruction sampling perf intel-pt: Fix async branch flags media: venus: hfi: add checks to perform sanity on queue pointers i915/perf: Fix NULL deref bugs with drm_dbg() calls cifs: fix check of rc in function generate_smb3signingkey cifs: spnego: add ';' in HOST_KEY_LEN tools/power/turbostat: Enable the C-state Pre-wake printing tools/power/turbostat: Fix a knl bug macvlan: Don't propagate promisc change to lower dev in passthru net/mlx5e: Check return value of snprintf writing to fw_version buffer for representors net/mlx5e: Check return value of snprintf writing to fw_version buffer net/mlx5e: Reduce the size of icosq_str net/mlx5e: Fix pedit endianness net/mlx5e: fix double free of encap_header in update funcs net/mlx5e: fix double free of encap_header net: stmmac: avoid rx queue overrun net: stmmac: fix rx budget limit check netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval() netfilter: nf_conntrack_bridge: initialize err to 0 af_unix: fix use-after-free in unix_stream_read_actor() net: ethernet: cortina: Fix MTU max setting net: ethernet: cortina: Handle large frames net: ethernet: cortina: Fix max RX frame define bonding: stop the device in bond_setup_by_slave() ptp: annotate data-race around q->head and q->tail xen/events: fix delayed eoi list handling ppp: limit MRU to 64K net: mvneta: fix calls to page_pool_get_stats tipc: Fix kernel-infoleak due to uninitialized TLV value net: hns3: fix VF wrong speed and duplex issue net: hns3: fix VF reset fail issue net: hns3: fix variable may not initialized problem in hns3_init_mac_addr() net: hns3: fix out-of-bounds access may occur when coalesce info is read via debugfs net: hns3: fix incorrect capability bit display for copper port net: hns3: add barrier in vf mailbox reply process net: hns3: fix add VLAN fail issue tty: Fix uninit-value access in ppp_sync_receive() ipvlan: add ipvlan_route_v6_outbound() helper net: set SOCK_RCU_FREE before inserting socket into hashtable vhost-vdpa: fix use after free in vhost_vdpa_probe() gfs2: Silence "suspicious RCU usage in gfs2_permission" warning SUNRPC: Fix RPC client cleaned up the freed pipefs dentries NFSv4.1: fix SP4_MACH_CRED protection for pnfs IO SUNRPC: Add an IS_ERR() check back to where it was NFSv4.1: fix handling NFS4ERR_DELAY when testing for session trunking mtd: rawnand: meson: check return value of devm_kasprintf() mtd: rawnand: intel: check return value of devm_kasprintf() SUNRPC: ECONNRESET might require a rebind sched/core: Optimize in_task() and in_interrupt() a bit wifi: iwlwifi: Use FW rate for non-data frames mtd: rawnand: tegra: add missing check for platform_get_irq() pwm: Fix double shift bug drm/amdgpu: fix software pci_unplug on some chips ALSA: hda/realtek: Add quirk for ASUS UX7602ZM drm/qxl: prevent memory leak ASoC: ti: omap-mcbsp: Fix runtime PM underflow warnings i2c: dev: copy userspace array safely kgdb: Flush console before entering kgdb on panic drm/amd/display: Avoid NULL dereference of timing generator media: imon: fix access to invalid resource for the second interface media: ccs: Fix driver quirk struct documentation media: cobalt: Use FIELD_GET() to extract Link Width gfs2: fix an oops in gfs2_permission gfs2: ignore negated quota changes media: vivid: avoid integer overflow media: gspca: cpia1: shift-out-of-bounds in set_flicker i3c: master: mipi-i3c-hci: Fix a kernel panic for accessing DAT_data. virtio-blk: fix implicit overflow on virtio_max_dma_size i2c: sun6i-p2wi: Prevent potential division by zero i2c: fix memleak in i2c_new_client_device() i3c: mipi-i3c-hci: Fix out of bounds access in hci_dma_irq_handler 9p: v9fs_listxattr: fix %s null argument warning 9p/trans_fd: Annotate data-racy writes to file::f_flags usb: gadget: f_ncm: Always set current gadget in ncm_bind() f2fs: fix error handling of __get_node_page soundwire: dmi-quirks: update HP Omen match usb: dwc3: core: configure TX/RX threshold for DWC3_IP tty: vcc: Add check for kstrdup() in vcc_probe() thunderbolt: Apply USB 3.x bandwidth quirk only in software connection manager iio: adc: stm32-adc: harden against NULL pointer deref in stm32_adc_probe() mfd: intel-lpss: Add Intel Lunar Lake-M PCI IDs exfat: support handle zero-size directory HID: Add quirk for Dell Pro Wireless Keyboard and Mouse KM5221W crypto: hisilicon/qm - prevent soft lockup in receive loop ASoC: Intel: soc-acpi-cht: Add Lenovo Yoga Tab 3 Pro YT3-X90 quirk PCI: Use FIELD_GET() in Sapphire RX 5600 XT Pulse quirk misc: pci_endpoint_test: Add Device ID for R-Car S4-8 PCIe controller PCI: Disable ATS for specific Intel IPU E2000 devices PCI: Extract ATS disabling to a helper function PCI: Use FIELD_GET() to extract Link Width scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup() PCI: Do error check on own line to split long "if" conditions atm: iphase: Do PCI error checks on own line PCI: mvebu: Use FIELD_PREP() with Link Width PCI: tegra194: Use FIELD_GET()/FIELD_PREP() with Link Width fields ALSA: hda: Fix possible null-ptr-deref when assigning a stream ARM: 9320/1: fix stack depot IRQ stack filter HID: lenovo: Detect quirk-free fw on cptkbd and stop applying workaround jfs: fix array-index-out-of-bounds in diAlloc jfs: fix array-index-out-of-bounds in dbFindLeaf fs/jfs: Add validity check for db_maxag and db_agpref fs/jfs: Add check for negative db_l2nbperpage scsi: ibmvfc: Remove BUG_ON in the case of an empty event pool scsi: hisi_sas: Set debugfs_dir pointer to NULL after removing debugfs RDMA/hfi1: Use FIELD_GET() to extract Link Width ASoC: SOF: ipc4: handle EXCEPTION_CAUGHT notification from firmware crypto: pcrypt - Fix hungtask for PADATA_RESET ASoC: SOF: Pass PCI SSID to machine driver ASoC: soc-card: Add storage for PCI SSID selftests/efivarfs: create-read: fix a resource leak arm64: dts: ls208xa: use a pseudo-bus to constrain usb dma size drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL drm/amdkfd: Fix shift out-of-bounds issue drm/panel: st7703: Pick different reset sequence drm/amdgpu/vkms: fix a possible null pointer dereference drm/radeon: fix a possible null pointer dereference drm/panel/panel-tpo-tpg110: fix a possible null pointer dereference drm/panel: fix a possible null pointer dereference drm/amdgpu: Fix potential null pointer derefernce drm/amd: Fix UBSAN array-index-out-of-bounds for Polaris and Tonga drm/amd: Fix UBSAN array-index-out-of-bounds for SMU7 drm/msm/dp: skip validity check for DP CTS EDID checksum drm: vmwgfx_surface.c: copy user-array safely drm_lease.c: copy user-array safely kernel: watch_queue: copy user-array safely kernel: kexec: copy user-array safely string.h: add array-wrappers for (v)memdup_user() drm/amd/display: use full update for clip size increase of large plane source drm/amd: Update `update_pcie_parameters` functions to use uint8_t arguments drm/amdkfd: Fix a race condition of vram buffer unref in svm code drm/amdgpu: not to save bo in the case of RAS err_event_athub drm/komeda: drop all currently held locks if deadlock happens drm/gma500: Fix call trace when psb_gem_mm_init() fails platform/x86: thinkpad_acpi: Add battery quirk for Thinkpad X120e platform/chrome: kunit: initialize lock for fake ec_dev tsnep: Fix tsnep_request_irq() format-overflow warning ACPI: EC: Add quirk for HP 250 G7 Notebook PC Bluetooth: Fix double free in hci_conn_cleanup Bluetooth: btusb: Add date->evt_skb is NULL check bpf: Ensure proper register state printing for cond jumps vsock: read from socket's error queue wifi: ath10k: Don't touch the CE interrupt registers after power up net: annotate data-races around sk->sk_dst_pending_confirm net: annotate data-races around sk->sk_tx_queue_mapping wifi: ath10k: fix clang-specific fortify warning wifi: ath9k: fix clang-specific fortify warnings bpf: Detect IP == ksym.end as part of BPF program atl1c: Work around the DMA RX overflow issue wifi: mac80211: don't return unset power in ieee80211_get_tx_power() wifi: mac80211_hwsim: fix clang-specific fortify warning wifi: plfxlc: fix clang-specific fortify warning x86/mm: Drop the 4 MB restriction on minimal NUMA node memory size workqueue: Provide one lock class key per work_on_cpu() callsite cpu/hotplug: Don't offline the last non-isolated CPU smp,csd: Throw an error if a CSD lock is stuck for too long clocksource/drivers/timer-atmel-tcb: Fix initialization on SAM9 hardware clocksource/drivers/timer-imx-gpt: Fix potential memory leak selftests/lkdtm: Disable CONFIG_UBSAN_TRAP in test config srcu: Fix srcu_struct node grpmask overflow on 64-bit systems perf/core: Bail out early if the request AUX area is out of bound lib/generic-radix-tree.c: Don't overflow in peek() locking/ww_mutex/test: Fix potential workqueue corruption Linux 6.1.63 virtio/vsock: fix header length on skb merging virtio/vsock: Fix uninit-value in virtio_transport_recv_pkt() virtio/vsock: fix leaks due to missing skb owner vsock/loopback: use only sk_buff_head.lock to protect the packet queue virtio/vsock: don't drop skbuff on copy failure virtio/vsock: remove redundant 'skb_pull()' call virtio/vsock: don't use skbuff state to account credit wifi: cfg80211: fix kernel-doc for wiphy_delayed_work_flush() btrfs: use u64 for buffer sizes in the tree search ioctls Revert "mmc: core: Capture correct oemid-bits for eMMC cards" x86/amd_nb: Use Family 19h Models 60h-7Fh Function 4 IDs io_uring/net: ensure socket is marked connected on connect retry tracing/kprobes: Fix the order of argument descriptions fbdev: fsl-diu-fb: mark wr_reg_wa() static fbdev: imsttfb: fix a resource leak in probe fbdev: imsttfb: Fix error path of imsttfb_probe() spi: spi-zynq-qspi: add spi-mem to driver kconfig dependencies ASoC: dapm: fix clock get name ASoC: hdmi-codec: register hpd callback on component probe ASoC: mediatek: mt8186_mt6366_rt1019_rt5682s: trivial: fix error messages drm/syncobj: fix DRM_SYNCOBJ_WAIT_FLAGS_WAIT_AVAILABLE RISC-V: Don't fail in riscv_of_parent_hartid() for disabled HARTs netfilter: nat: fix ipv6 nat redirect with mapped and scoped addresses netfilter: nft_redir: use `struct nf_nat_range2` throughout and deduplicate eval call-backs netfilter: xt_recent: fix (increase) ipv6 literal buffer length i2c: iproc: handle invalid slave state r8169: respect userspace disabling IFF_MULTICAST vsock/virtio: remove socket from connected/bound list on shutdown virtio/vsock: replace virtio_vsock_pkt with sk_buff blk-core: use pr_warn_ratelimited() in bio_check_ro() nbd: fix uaf in nbd_open tg3: power down device only on SYSTEM_POWER_OFF nvme: fix error-handling for io_uring nvme-passthrough net/smc: put sk reference if close work was canceled net/smc: allow cdc msg send rather than drop it with NULL sndbuf_desc net/smc: fix dangling sock under state SMC_APPFINCLOSEWAIT octeontx2-pf: Free pending and dropped SQEs octeontx2-pf: qos send queues management octeontx2-pf: Rename tot_tx_queues to non_qos_queues selftests: pmtu.sh: fix result checking net: stmmac: xgmac: Enable support for multiple Flexible PPS outputs Fix termination state for idr_for_each_entry_ul() net: r8169: Disable multicast filter for RTL8168H and RTL8107E dccp/tcp: Call security_inet_conn_request() after setting IPv6 addresses. dccp: Call security_inet_conn_request() after setting IPv4 addresses. net: page_pool: add missing free_percpu when page_pool_init fail octeontx2-pf: Fix holes in error code octeontx2-pf: Fix error codes inet: shrink struct flowi_common bpf: Check map->usercnt after timer->timer is assigned tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING hsr: Prevent use after free in prp_create_tagged_frame() llc: verify mac len before reading mac header watchdog: ixp4xx: Make sure restart always works Input: synaptics-rmi4 - fix use after free in rmi_unregister_function() pwm: brcmstb: Utilize appropriate clock APIs in suspend/resume pwm: sti: Reduce number of allocations and drop usage of chip_data regmap: prevent noinc writes from clobbering cache media: cec: meson: always include meson sub-directory in Makefile media: dvb-usb-v2: af9035: fix missing unlock media: cadence: csi2rx: Unregister v4l2 async notifier media: cedrus: Fix clock/reset sequence media: vidtv: mux: Add check and kfree for kstrdup media: vidtv: psi: Add check for kstrdup media: s3c-camif: Avoid inappropriate kfree() media: mtk-jpegenc: Fix bug in JPEG encode quality selection media: amphion: handle firmware debug message media: bttv: fix use after free error due to btv->timeout timer media: ov5640: Fix a memory leak when ov5640_probe fails media: i2c: max9286: Fix some redundant of_node_put() calls media: ov5640: fix vblank unchange issue when work at dvp mode media: ov5640: Drop dead code using frame_interval media: verisilicon: Do not enable G2 postproc downscale if source is narrower than destination media: hantro: Check whether reset op is defined before use pcmcia: ds: fix possible name leak in error path in pcmcia_device_add() pcmcia: ds: fix refcount leak in pcmcia_device_add() pcmcia: cs: fix possible hung task and memory leak pccardd() rtc: pcf85363: fix wrong mask/val parameters in regmap_update_bits call virt: sevguest: Fix passing a stack buffer as a scatterlist target x86/sev: Change snp_guest_issue_request()'s fw_err argument crypto: ccp - Name -1 return value as SEV_RET_NO_FW_CALL cxl/mem: Fix shutdown order i3c: Fix potential refcount leak in i3c_master_register_new_i3c_devs 9p/net: fix possible memory leak in p9_check_errors() perf hist: Add missing puts to hist__account_cycles perf machine: Avoid out of bounds LBR memory read usb: host: xhci-plat: fix possible kernel oops while resuming xhci: Loosen RPM as default policy to cover for AMD xHC 1.1 powerpc/pseries: fix potential memory leak in init_cpu_associativity() powerpc/imc-pmu: Use the correct spinlock initializer. powerpc/vas: Limit open window failure messages in log bufffer powerpc/xive: Fix endian conversion size powerpc/40x: Remove stale PTE_ATOMIC_UPDATES macro modpost: fix ishtp MODULE_DEVICE_TABLE built on big-endian host modpost: fix tee MODULE_DEVICE_TABLE built on big-endian host powerpc: Only define __parse_fpscr() when required interconnect: qcom: sm8350: Set ACV enable_mask interconnect: qcom: sm8350: Retire DEFINE_QBCM interconnect: qcom: sm8150: Set ACV enable_mask interconnect: qcom: sm8150: Retire DEFINE_QBCM interconnect: qcom: sm8150: Drop IP0 interconnects interconnect: move ignore_list out of of_count_icc_providers() interconnect: qcom: sm6350: Set ACV enable_mask interconnect: qcom: sm6350: Retire DEFINE_QBCM interconnect: qcom: sdm845: Set ACV enable_mask interconnect: qcom: sdm845: Retire DEFINE_QBCM interconnect: qcom: sc8280xp: Set ACV enable_mask interconnect: qcom: sc8180x: Set ACV enable_mask interconnect: qcom: sc7280: Set ACV enable_mask interconnect: qcom: sc7180: Set ACV enable_mask interconnect: qcom: sc7180: Retire DEFINE_QBCM f2fs: fix to initialize map.m_pblk in f2fs_precache_extents() dmaengine: pxa_dma: Remove an erroneous BUG_ON() in pxad_free_desc() USB: usbip: fix stub_dev hub disconnect tools: iio: iio_generic_buffer ensure alignment misc: st_core: Do not call kfree_skb() under spin_lock_irqsave() dmaengine: ti: edma: handle irq_of_parse_and_map() errors usb: chipidea: Simplify Tegra DMA alignment code usb: chipidea: Fix DMA overwrite for Tegra usb: dwc2: fix possible NULL pointer dereference caused by driver concurrency dmaengine: idxd: Register dsa_bus_type before registering idxd sub-drivers perf record: Fix BTF type checks in the off-cpu profiling pinctrl: renesas: rzg2l: Make reverse order of enable() for disable() livepatch: Fix missing newline character in klp_resolve_symbols() tty: tty_jobctrl: fix pid memleak in disassociate_ctty() f2fs: compress: fix to avoid redundant compress extension f2fs: compress: fix to avoid use-after-free on dic f2fs: compress: fix deadloop in f2fs_write_cache_pages() f2fs: convert f2fs_write_cache_pages() to use filemap_get_folios_tag() filemap: add filemap_get_folios_tag() perf kwork: Set ordered_events to true in 'struct perf_tool' perf kwork: Add the supported subcommands to the document perf kwork: Fix incorrect and missing free atom in work_push_atom() iio: frequency: adf4350: Use device managed functions and fix power down issue. perf stat: Fix aggr mode initialization apparmor: fix invalid reference on profile->disconnected apparmor: test: make static symbols visible during kunit testing kunit: add macro to allow conditionally exposing static symbols to tests leds: trigger: ledtrig-cpu:: Fix 'output may be truncated' issue for 'cpu' leds: pwm: Don't disable the PWM when the LED should be off leds: turris-omnia: Do not use SMBUS calls leds: turris-omnia: Drop unnecessary mutex locking mfd: arizona-spi: Set pdata.hpdet_channel for ACPI enumerated devs dt-bindings: mfd: mt6397: Split out compatible for MediaTek MT6366 PMIC dt-bindings: mfd: mt6397: Add binding for MT6357 mfd: dln2: Fix double put in dln2_probe mfd: core: Ensure disabled devices are skipped without aborting mfd: core: Un-constify mfd_cell.of_reg IB/mlx5: Fix init stage error handling to avoid double free of same QP and UAF ASoC: ams-delta.c: use component after check crypto: qat - fix deadlock in backlog processing padata: Fix refcnt handling in padata_free_shell() ASoC: Intel: Skylake: Fix mem leak when parsing UUIDs fails HID: logitech-hidpp: Move get_wireless_feature_index() check to hidpp_connect_event() HID: logitech-hidpp: Revert "Don't restart communication if not necessary" HID: logitech-hidpp: Don't restart IO, instead defer hid_connect() only HID: logitech-hidpp: Remove HIDPP_QUIRK_NO_HIDINPUT quirk Revert "HID: logitech-hidpp: add a module parameter to keep firmware gestures" sh: bios: Revive earlyprintk support hid: cp2112: Fix IRQ shutdown stopping polling for all IRQs on chip HID: cp2112: Make irq_chip immutable RDMA/hfi1: Workaround truncation compilation error scsi: ufs: core: Leave space for '\0' in utf8 desc string ASoC: fsl: Fix PM disable depth imbalance in fsl_easrc_probe ASoC: SOF: core: Ensure sof_ops_free() is still called when probe never ran. RDMA/hns: The UD mode can only be configured with DCQCN RDMA/hns: Add check for SL RDMA/hns: Fix signed-unsigned mixed comparisons RDMA/hns: Fix uninitialized ucmd in hns_roce_create_qp_common() RDMA/hns: Fix printing level of asynchronous events IB/mlx5: Fix rdma counter binding for RAW QP ASoC: fsl: mpc5200_dma.c: Fix warning of Function parameter or member not described ext4: move 'ix' sanity check to corrent position ARM: 9321/1: memset: cast the constant byte to unsigned char crypto: hisilicon/qm - fix PF queue parameter issue crypto: hisilicon/qm - split a debugfs.c from qm crypto: hisilicon/qm - modify the process of regs dfx crypto: hisilicon/qm - delete redundant null assignment operations hid: cp2112: Fix duplicate workqueue initialization PCI: vmd: Correct PCI Header Type Register's multi-function check crypto: qat - increase size of buffers crypto: caam/jr - fix Chacha20 + Poly1305 self test failure crypto: caam/qi2 - fix Chacha20 + Poly1305 self test failure nd_btt: Make BTT lanes preemptible libnvdimm/of_pmem: Use devm_kstrdup instead of kstrdup and check its return value scsi: ibmvfc: Fix erroneous use of rtas_busy_delay with hcall return code crypto: qat - fix unregistration of crypto algorithms crypto: qat - extend buffer list interface crypto: qat - generalize crypto request buffers crypto: qat - change bufferlist logic interface crypto: qat - rename bufferlist functions crypto: qat - relocate bufferlist logic crypto: qat - ignore subsequent state up commands RDMA/core: Use size_{add,sub,mul}() in calls to struct_size() hwrng: geode - fix accessing registers hwrng: bcm2835 - Fix hwrng throughput regression crypto: hisilicon/hpre - Fix a erroneous check after snprintf() KEYS: Include linux/errno.h in linux/verification.h ALSA: hda: cs35l41: Undo runtime PM changes at driver exit time ALSA: hda: cs35l41: Fix unbalanced pm_runtime_get() ASoC: cs35l41: Undo runtime PM changes at driver exit time ASoC: cs35l41: Verify PM runtime resume errors in IRQ handler module/decompress: use vmalloc() for gzip decompression workspace selftests/resctrl: Ensure the benchmark commands fits to its array selftests/pidfd: Fix ksft print formats arm64: tegra: Use correct interrupts for Tegra234 TKE arm64: dts: imx8mn: Add sound-dai-cells to micfil node arm64: dts: imx8mm: Add sound-dai-cells to micfil node arm64: dts: imx8qm-ss-img: Fix jpegenc compatible entry clk: scmi: Free scmi_clk allocated when the clocks with invalid info are skipped ARM: dts: am3517-evm: Fix LED3/4 pinmux firmware: arm_ffa: Allow the FF-A drivers to use 32bit mode of messaging firmware: arm_ffa: Assign the missing IDR allocation ID to the FFA device arm64: dts: ti: k3-am62a7-sk: Drop i2c-1 to 100Khz firmware: ti_sci: Mark driver as non removable kunit: Fix missed memory release in kunit_free_suite_set() soc: qcom: llcc: Handle a second device without data corruption ARM: dts: qcom: mdm9615: populate vsdcc fixed regulator arm64: dts: qcom: apq8016-sbc: Add missing ADV7533 regulators ARM64: dts: marvell: cn9310: Use appropriate label for spi1 pins arm64: dts: qcom: sdm845-mtp: fix WiFi configuration arm64: dts: qcom: sm8350: fix pinctrl for UART18 arm64: dts: qcom: sm8150: add ref clock to PCIe PHYs arm64: dts: qcom: sc7280: Add missing LMH interrupts arm64: dts: qcom: msm8992-libra: drop duplicated reserved memory arm64: dts: qcom: msm8916: Fix iommu local address range arm64: dts: qcom: sc7280: link usb3_phy_wrapper_gcc_usb30_pipe_clk arm64: dts: qcom: sdm845: cheza doesn't support LMh node ARM: dts: renesas: blanche: Fix typo in GP_11_2 pin name perf: hisi: Fix use-after-free when register pmu fails drivers/perf: hisi_pcie: Check the type first in pmu::event_init() perf/arm-cmn: Fix DTC domain detection perf/arm-cmn: Revamp model detection drivers/perf: hisi: use cpuhp_state_remove_instance_nocalls() for hisi_hns3_pmu uninit process drm: mediatek: mtk_dsi: Fix NO_EOT_PACKET settings/handling clocksource/drivers/arm_arch_timer: limit XGene-1 workaround drm/msm/dsi: free TX buffer in unbind drm/msm/dsi: use msm_gem_kernel_put to free TX buffer xen-pciback: Consider INTx disabled when MSI/MSI-X is enabled xenbus: fix error exit in xenbus_init() drm/rockchip: Fix type promotion bug in rockchip_gem_iommu_map() arm64/arm: xen: enlighten: Fix KPTI checks drm/bridge: lt9611uxc: fix the race in the error path gpu: host1x: Correct allocated size for contexts drm/rockchip: cdn-dp: Fix some error handling paths in cdn_dp_probe() drm/mediatek: Fix iommu fault during crtc enabling drm/mediatek: Fix iommu fault by swapping FBs after updating plane state io_uring/kbuf: Allow the full buffer id space for provided buffers io_uring/kbuf: Fix check of BID wrapping in provided buffers drm/amd/display: Bail from dm_check_crtc_cursor if no relevant change drm/amd/display: Refactor dm_get_plane_scale helper drm/amd/display: Check all enabled planes in dm_check_crtc_cursor drm/amdkfd: fix some race conditions in vram buffer alloc/free of svm code drm/bridge: tc358768: Fix tc358768_ns_to_cnt() drm/bridge: tc358768: Clean up clock period code drm/bridge: tc358768: Rename dsibclk to hsbyteclk drm/bridge: tc358768: Use dev for dbg prints, not priv->dev drm/bridge: tc358768: Print logical values, not raw register values drm/bridge: tc358768: Use struct videomode drm/bridge: tc358768: remove unused variable drm/bridge: tc358768: Fix bit updates drm/bridge: tc358768: Fix use of uninitialized variable drm/bridge: lt8912b: Add missing drm_bridge_attach call drm/bridge: lt8912b: Manually disable HPD only if it was enabled drm/bridge: lt8912b: Fix crash on bridge detach drm/bridge: lt8912b: Fix bridge_detach drm/bridge: lt8912b: Add hot plug detection drm: bridge: it66121: Fix invalid connector dereference drm/radeon: possible buffer overflow drm/rockchip: vop2: Add missing call to crtc reset helper drm/rockchip: vop2: Don't crash for invalid duplicate_state drm/rockchip: vop: Fix call to crtc reset helper drm/rockchip: vop: Fix reset of state in duplicate state crtc funcs hte: tegra: Fix missing error code in tegra_hte_test_probe() hwmon: (sch5627) Disallow write access if virtual registers are locked hwmon: (sch5627) Use bit macros when accessing the control register Revert "hwmon: (sch56xx-common) Add automatic module loading on supported devices" Revert "hwmon: (sch56xx-common) Add DMI override table" hwmon: (coretemp) Fix potentially truncated sysfs attribute name hwmon: (axi-fan-control) Fix possible NULL pointer dereference platform/x86: wmi: Fix opening of char device platform/x86: wmi: Fix probe failure when failing to register WMI devices clk: qcom: config IPQ_APSS_6018 should depend on QCOM_SMEM clk: mediatek: clk-mt2701: Add check for mtk_alloc_clk_data clk: mediatek: clk-mt7629: Add check for mtk_alloc_clk_data clk: mediatek: clk-mt7629-eth: Add check for mtk_alloc_clk_data clk: mediatek: clk-mt6797: Add check for mtk_alloc_clk_data clk: mediatek: clk-mt6779: Add check for mtk_alloc_clk_data clk: mediatek: clk-mt6765: Add check for mtk_alloc_clk_data clk: npcm7xx: Fix incorrect kfree clk: ti: fix double free in of_ti_divider_clk_setup() clk: ti: change ti_clk_register[_omap_hw]() API clk: keystone: pll: fix a couple NULL vs IS_ERR() checks spi: nxp-fspi: use the correct ioremap function clk: linux/clk-provider.h: fix kernel-doc warnings and typos clk: renesas: rzg2l: Fix computation formula clk: renesas: rzg2l: Use FIELD_GET() for PLL register fields clk: renesas: rzg2l: Trust value returned by hardware clk: renesas: rzg2l: Lock around writes to mux register clk: renesas: rzg2l: Wait for status bit of SD mux before continuing clk: renesas: rcar-gen3: Extend SDnH divider table clk: imx: imx8qxp: Fix elcdif_pll clock clk: imx: imx8mq: correct error handling path clk: imx: Select MXC_CLK for CLK_IMX8QXP regulator: mt6358: Fail probe on unknown chip ID clk: qcom: gcc-sm8150: Fix gcc_sdcc2_apps_clk_src clk: qcom: mmcc-msm8998: Fix the SMMU GDSC clk: qcom: mmcc-msm8998: Don't check halt bit on some branch clks clk: qcom: clk-rcg2: Fix clock rate overflow for high parent frequencies clk: qcom: gcc-msm8996: Remove RPM bus clocks spi: tegra: Fix missing IRQ check in tegra_slink_probe() regmap: debugfs: Fix a erroneous check after snprintf() ipvlan: properly track tx_errors net: add DEV_STATS_READ() helper ipv6: avoid atomic fragment on GSO packets ACPI: sysfs: Fix create_pnp_modalias() and create_of_modalias() bpf: Fix unnecessary -EBUSY from htab_lock_bucket Bluetooth: hci_sync: Fix Opcode prints in bt_dev_dbg/err wifi: iwlwifi: empty overflow queue during flush wifi: iwlwifi: pcie: synchronize IRQs before NAPI wifi: iwlwifi: call napi_synchronize() before freeing rx/tx queues tcp: fix cookie_init_timestamp() overflows chtls: fix tp->rcv_tstamp initialization net: skb_find_text: Ignore patterns extending past 'to' selftests: netfilter: test for sctp collision processing in nf_conntrack r8169: fix rare issue with broken rx after link-down on RTL8125 r8169: use tp_to_dev instead of open code thermal: core: prevent potential string overflow netfilter: nf_tables: Drop pointless memset when dumping rules wifi: wfx: fix case where rates are out of order PM / devfreq: rockchip-dfi: Make pmu regmap mandatory can: dev: can_put_echo_skb(): don't crash kernel if can_priv::echo_skb is accessed out of bounds can: dev: can_restart(): fix race condition between controller restart and netif_carrier_on() can: dev: can_restart(): don't crash kernel if carrier is OK wifi: ath11k: fix Tx power value during active CAC ACPI: video: Add acpi_backlight=vendor quirk for Toshiba Portégé R100 ACPI: property: Allow _DSD buffer data only for byte accessors wifi: rtlwifi: fix EDCA limit set by BT coexistence tcp_metrics: do not create an entry from tcp_init_metrics() tcp_metrics: properly set tp->snd_ssthresh in tcp_init_metrics() tcp_metrics: add missing barriers on delete wifi: ath: dfs_pattern_detector: Fix a memory initialization issue wifi: mt76: mt7915: fix beamforming availability check wifi: mt76: mt7603: improve stuck beacon handling wifi: mt76: mt7603: improve watchdog reset reliablity wifi: mt76: mt7603: rework/fix rx pse hang check wifi: ath11k: fix boot failure with one MSI vector wifi: rtw88: debug: Fix the NULL vs IS_ERR() bug for debugfs_create_file() net: ethernet: mtk_wed: fix EXT_INT_STATUS_RX_FBUF definitions for MT7986 SoC net: spider_net: Use size_add() in call to struct_size() tipc: Use size_add() in calls to struct_size() tls: Use size_add() in call to struct_size() tls: Only use data field in crypto completion function mlxsw: Use size_mul() in call to struct_size() gve: Use size_add() in call to struct_size() tcp: call tcp_try_undo_recovery when an RTOd TFO SYNACK is ACKed udp: add missing WRITE_ONCE() around up->encap_rcv selftests/bpf: Correct map_fd to data_fd in tailcalls iavf: Fix promiscuous mode configuration flow messages i40e: fix potential memory leaks in i40e_remove() wifi: iwlwifi: honor the enable_ini value wifi: mac80211: fix # of MSDU in A-MSDU calculation wifi: mac80211: move sched-scan stop work to wiphy work wifi: mac80211: move offchannel works to wiphy work wifi: mac80211: move scan work to wiphy work wifi: mac80211: move radar detect work to wiphy work wifi: cfg80211: add flush functions for wiphy work genirq/matrix: Exclude managed interrupts in irq_matrix_allocated() string: Adjust strtomem() logic to allow for smaller sources pstore/platform: Add check for kstrdup drivers/clocksource/timer-ti-dm: Don't call clk_get_rate() in stop function x86/boot: Fix incorrect startup_gdt_descr.size x86/sev-es: Allow copy_from_kernel_nofault() in earlier boot ACPI/NUMA: Apply SRAT proximity domain to entire CFMWS window x86/numa: Introduce numa_fill_memblks() futex: Don't include process MM in futex key on no-MMU x86/srso: Fix SBPB enablement for (possible) future fixed HW writeback, cgroup: switch inodes with dirty timestamps to release dying cgwbs vfs: fix readahead(2) on block devices sched: Fix stop_one_cpu_nowait() vs hotplug objtool: Propagate early errors sched/uclamp: Ignore (util == 0) optimization in feec() when p_util_max = 0 sched/uclamp: Set max_spare_cap_cpu even if max_spare_cap is 0 iov_iter, x86: Be consistent about the __user tag on copy_mc_to_user() sched/fair: Fix cfs_rq_is_decayed() on !SMP hwmon: (nct6775) Fix incorrect variable reuse in fan_div calculation Linux 6.1.62 ASoC: SOF: sof-pci-dev: Fix community key quirk detection ALSA: hda: intel-dsp-config: Fix JSL Chromebook quirk detection misc: pci_endpoint_test: Add deviceID for J721S2 PCIe EP device support tty: 8250: Add Brainboxes Oxford Semiconductor-based quirks tty: 8250: Add support for Intashield IX cards tty: 8250: Add support for additional Brainboxes PX cards tty: 8250: Fix up PX-803/PX-857 tty: 8250: Fix port count of PX-257 tty: 8250: Add support for Intashield IS-100 tty: 8250: Add support for Brainboxes UP cards tty: 8250: Add support for additional Brainboxes UC cards tty: 8250: Remove UC-257 and UC-431 tty: n_gsm: fix race condition in status line change on dead connections usb: raw-gadget: properly handle interrupted requests usb: typec: tcpm: Fix NULL pointer dereference in tcpm_pd_svdm() usb: storage: set 1.50 as the lower bcdDevice for older "Super Top" compatibility PCI: Prevent xHCI driver from claiming AMD VanGogh USB3 DRD device ALSA: usb-audio: add quirk flag to enable native DSD for McIntosh devices mmap: fix error paths with dup_anon_vma() mm/mempolicy: fix set_mempolicy_home_node() previous VMA pointer x86: KVM: SVM: always update the x2avic msr interception perf evlist: Avoid frequency mode for the dummy event power: supply: core: Use blocking_notifier_call_chain to avoid RCU complaint ceph_wait_on_conflict_unlink(): grab reference before dropping ->d_lock io_uring: kiocb_done() should *not* trust ->ki_pos if ->{read,write}_iter() failed powerpc/mm: Fix boot crash with FLATMEM r8152: Check for unplug in r8153b_ups_en() / r8153c_ups_en() r8152: Check for unplug in rtl_phy_patch_request() net: chelsio: cxgb4: add an error code check in t4_load_phy_fw drm/amdgpu: Reserve fences for VM update platform/mellanox: mlxbf-tmfifo: Fix a warning message netfilter: nf_tables: audit log object reset once per table LoongArch: Replace kmap_atomic() with kmap_local_page() in copy_user_highpage() LoongArch: Export symbol invalid_pud_table for modules building gpu/drm: Eliminate DRM_SCHED_PRIORITY_UNSET drm/amdgpu: Unset context priority is now invalid scsi: mpt3sas: Fix in error path fbdev: uvesafb: Call cn_del_callback() at the end of uvesafb_exit() fbdev: omapfb: fix some error codes drm/ttm: Reorder sys manager cleanup step ASoC: codecs: tas2780: Fix log of failed reset via I2C. ASoC: rt5650: fix the wrong result of key button efi: fix memory leak in krealloc failure handling netfilter: nfnetlink_log: silence bogus compiler warning spi: npcm-fiu: Fix UMA reads when dummy.nbytes == 0 fs/ntfs3: Avoid possible memory leak fs/ntfs3: Fix directory element type detection fs/ntfs3: Fix NULL pointer dereference on error in attr_allocate_frame() fs/ntfs3: Fix possible NULL-ptr-deref in ni_readpage_cmpr() fs/ntfs3: Use kvmalloc instead of kmalloc(... __GFP_NOWARN) fs/ntfs3: Write immediately updated ntfs state fs/ntfs3: Add ckeck in ni_update_parent() fbdev: atyfb: only use ioremap_uc() on i386 and ia64 Input: synaptics-rmi4 - handle reset delay when using SMBus trsnsport powerpc/85xx: Fix math emulation exception dmaengine: ste_dma40: Fix PM disable depth imbalance in d40_probe irqchip/stm32-exti: add missing DT IRQ flag translation irqchip/riscv-intc: Mark all INTC nodes as initialized net: sched: cls_u32: Fix allocation size in u32_init() ASoC: tlv320adc3xxx: BUG: Correct micbias setting coresight: tmc-etr: Disable warnings for allocation failures ASoC: simple-card: fixup asoc_simple_probe() error handling Revert "kasan: print the original fault addr when access invalid shadow" ANDROID: GKI: add system_unbound_wq to some symbol lists. Revert "audit,io_uring: io_uring openat triggers audit reference count underflow" Revert "tcp: allow again tcp_disconnect() when threads are waiting" Revert "tcp_bpf: properly release resources on error paths" Revert "ipv4/fib: send notify when delete source address routes" Revert "Bluetooth: hci_core: Fix build warnings" Revert "xfrm: fix a data-race in xfrm_gen_index()" Revert "perf: Disallow mis-matched inherited group reads" ANDROID: fix up 6.1.60 merge of hid.h into android14-6.1-lts ANDROID: GKI: arm64: drop CONFIG_DEBUG_PREEMPT forced disable Revert "net: macsec: indicate next pn update when offloading" Revert "net: phy: mscc: macsec: reject PN update requests" Revert "net/mlx5e: macsec: use update_pn flag instead of PN comparation" Revert "tcp: enforce receive buffer memory limits by allowing the tcp window to shrink" Linux 6.1.61 objtool/x86: add missing embedded_insn check ext4: avoid overlapping preallocations due to overflow ext4: fix BUG in ext4_mb_new_inode_pa() due to overflow ext4: add two helper functions extent_logical_end() and pa_logical_end() platform/x86: Add s2idle quirk for more Lenovo laptops clk: Sanitize possible_parent_show to Handle Return Value of of_clk_get_parent_name sparc32: fix a braino in fault handling in csum_and_copy_..._user() perf/core: Fix potential NULL deref x86/cpu: Add model number for Intel Arrow Lake mobile processor x86/i8259: Skip probing when ACPI/MADT advertises PCAT compatibility nvmem: imx: correct nregs for i.MX6UL nvmem: imx: correct nregs for i.MX6SLL nvmem: imx: correct nregs for i.MX6ULL misc: fastrpc: Unmap only if buffer is unmapped from DSP misc: fastrpc: Clean buffers on remote invocation failures misc: fastrpc: Free DMA handles for RPC calls with no arguments misc: fastrpc: Reset metadata buffer to avoid incorrect free tracing/kprobes: Fix the description of variable length arguments i2c: aspeed: Fix i2c bus hang in slave read i2c: stm32f7: Fix PEC handling in case of SMBUS transfers i2c: muxes: i2c-demux-pinctrl: Use of_get_i2c_adapter_by_node() i2c: muxes: i2c-mux-gpmux: Use of_get_i2c_adapter_by_node() i2c: muxes: i2c-mux-pinctrl: Use of_get_i2c_adapter_by_node() iio: adc: xilinx-xadc: Correct temperature offset/scale for UltraScale iio: adc: xilinx-xadc: Don't clobber preset voltage/temperature thresholds iio: exynos-adc: request second interupt only when touchscreen mode is used iio: afe: rescale: Accept only offset channels io_uring/fdinfo: lock SQ thread while retrieving thread cpu/pid kasan: print the original fault addr when access invalid shadow blk-throttle: check for overflow in calculate_bytes_allowed scsi: sd: Introduce manage_shutdown device flag iavf: in iavf_down, disable queues when removing the driver drm/logicvc: Kconfig: select REGMAP and REGMAP_MMIO i40e: Fix wrong check for I40E_TXR_FLAGS_WB_ON_ITR gtp: fix fragmentation needed check with gso gtp: uapi: fix GTPA_MAX tcp: fix wrong RTO timeout when received SACK reneging r8152: Release firmware if we have an error in probe r8152: Cancel hw_phy_work if we have an error in probe r8152: Run the unload routine if we have errors during probe r8152: Increase USB control msg timeout to 5000ms as per spec net: usb: smsc95xx: Fix uninit-value access in smsc95xx_read_reg net: ieee802154: adf7242: Fix some potential buffer overflow in adf7242_stats_show() net: ethernet: adi: adin1110: Fix uninitialized variable igc: Fix ambiguity in the ethtool advertising neighbour: fix various data-races igb: Fix potential memory leak in igb_add_ethtool_nfc_entry treewide: Spelling fix in comment i40e: Fix I40E_FLAG_VF_VLAN_PRUNING value iavf: initialize waitqueues before starting watchdog_task r8169: fix the KCSAN reported data race in rtl_rx while reading desc->opts1 r8169: fix the KCSAN reported data-race in rtl_tx while reading TxDescArray[entry].opts1 r8169: fix the KCSAN reported data-race in rtl_tx() while reading tp->cur_tx clk: ti: Fix missing omap5 mcbsp functional clock and aliases clk: ti: Fix missing omap4 mcbsp functional clock and aliases firmware/imx-dsp: Fix use_after_free in imx_dsp_setup_channels() ARM: OMAP: timer32K: fix all kernel-doc warnings drm/dp_mst: Fix NULL deref in get_mst_branch_device_by_guid_helper() drm/amd: Disable ASPM for VI w/ all Intel systems drm/i915/pmu: Check if pmu is closed before stopping event nfsd: lock_rename() needs both directories to live on the same fs maple_tree: add GFP_KERNEL to allocations in mas_expected_entries() hugetlbfs: extend hugetlb_vma_lock to private VMAs mm/migrate: fix do_pages_move for compat pointers mm/page_alloc: correct start page when guard page debug is enabled hugetlbfs: clear resv_map pointer if mmap fails mm: fix vm_brk_flags() to not bail out while holding lock arm64: dts: rockchip: Fix i2s0 pin conflict on ROCK Pi 4 boards arm64: dts: rockchip: Add i2s0-2ch-bus-bclk-off pins to RK3399 vhost: Allow null msg.size on VHOST_IOTLB_INVALIDATE vsock/virtio: initialize the_virtio_vsock before using VQs virtio_pci: fix the common cfg map size virtio-crypto: handle config changed by work queue virtio-mmio: fix memory leak of vm_dev virtio_balloon: Fix endless deflation and inflation on arm64 mcb-lpc: Reallocate memory region to avoid memory overlapping mcb: Return actual parsed size when reading chameleon table pinctrl: qcom: lpass-lpi: fix concurrent register updates ASoC: codecs: wcd938x: fix runtime PM imbalance on remove ASoC: codecs: wcd938x: fix regulator leaks on probe errors ASoC: codecs: wcd938x: Simplify with dev_err_probe ASoC: codecs: wcd938x: Convert to platform remove callback returning void mmc: core: Fix error propagation for some ioctl commands mmc: block: ioctl: do write error check for spi mmc: core: Align to common busy polling behaviour for mmc ioctls KVM: x86/pmu: Truncate counter value to allowed width on write Linux 6.1.60 selftests: mptcp: join: no RST when rm subflow/addr selftests: mptcp: join: correctly check for no RST mptcp: avoid sending RST when closing the initial subflow Bluetooth: hci_sock: Correctly bounds check and pad HCI_MON_NEW_INDEX name Bluetooth: hci_sock: fix slab oob read in create_monitor_event net: move altnames together with the netdevice phy: mapphone-mdm6600: Fix pinctrl_pm handling for sleep pins phy: mapphone-mdm6600: Fix runtime PM for remove phy: mapphone-mdm6600: Fix runtime disable on probe gpio: vf610: mask the gpio irq in system suspend and support wakeup gpio: vf610: make irq_chip immutable tracing/kprobes: Return EADDRNOTAVAIL when func matches several symbols kallsyms: Add helper kallsyms_on_each_match_symbol() kallsyms: Reduce the memory occupied by kallsyms_seqs_of_names[] serial: 8250: omap: convert to modern PM ops serial: 8250: omap: Move uart_write() inside PM section drm/bridge: ti-sn65dsi86: Associate DSI device lifetime with auxiliary device ASoC: pxa: fix a memory leak in probe() gpio: vf610: set value before the direction to avoid a glitch platform/x86: asus-wmi: Map 0x2a code, Ignore 0x2b and 0x2c events platform/x86: asus-wmi: Only map brightness codes when using asus-wmi backlight control platform/x86: asus-wmi: Change ASUS_WMI_BRN_DOWN code from 0x20 to 0x2e platform/x86: intel-uncore-freq: Conditionally create attribute for read frequency platform/surface: platform_profile: Propagate error if profile registration fails s390/cio: fix a memleak in css_alloc_subchannel selftests/ftrace: Add new test case which checks non unique symbol s390/pci: fix iommu bitmap allocation perf: Disallow mis-matched inherited group reads USB: serial: option: add Fibocom to DELL custom modem FM101R-GL USB: serial: option: add entry for Sierra EM9191 with new firmware USB: serial: option: add Telit LE910C4-WWX 0x1035 composition HID: input: map battery system charging KVM: x86/mmu: Stop zapping invalidated TDP MMU roots asynchronously nvme-rdma: do not try to stop unallocated queues nvmet-auth: complete a request only after freeing the dhchap pointers nvme-pci: add BOGUS_NID for Intel 0a54 device nvme: sanitize metadata bounce buffer for reads nfs42: client needs to strip file mode's suid/sgid bit after ALLOCATE op ACPI: irq: Fix incorrect return value in acpi_register_gsi() NFSv4.1: fixup use EXCHGID4_FLAG_USE_PNFS_DS for DS server pNFS/flexfiles: Check the layout validity in ff_layout_mirror_prepare_stats pNFS: Fix a hang in nfs4_evict_inode() Revert "pinctrl: avoid unsafe code pattern in find_pinctrl()" mmc: core: Capture correct oemid-bits for eMMC cards mmc: core: sdio: hold retuning if sdio in 1-bit mode mmc: mtk-sd: Use readl_poll_timeout_atomic in msdc_reset_hw mmc: sdhci-pci-gli: fix LPM negotiation so x86/S0ix SoCs can suspend dt-bindings: mmc: sdhci-msm: correct minimum number of clocks mtd: physmap-core: Restore map_rom fallback mtd: spinand: micron: correct bitmask for ecc status mtd: rawnand: arasan: Ensure program page operations are successful mtd: rawnand: marvell: Ensure program page operations are successful mtd: rawnand: pl353: Ensure program page operations are successful mtd: rawnand: qcom: Unmap the right resource upon probe failure net/smc: fix smc clc failed issue when netdevice not in init_net tcp_bpf: properly release resources on error paths selftests: openvswitch: Add version check for pyroute2 Bluetooth: hci_event: Fix using memcmp when comparing keys ice: Remove redundant pci_enable_pcie_error_reporting() tcp: allow again tcp_disconnect() when threads are waiting net/tls: split tls_rx_reader_lock net/mlx5e: Don't offload internal port if filter device is out device net/mlx5: Handle fw tracer change ownership event based on MTRC net/mlx5: E-switch, register event handler before arming the event xfrm6: fix inet6_dev refcount underflow problem net: xfrm: skip policies marked as dead while reinserting policies fprobe: Fix to ensure the number of active retprobes is not zero fprobe: Add nr_maxactive to specify rethook_node pool size fprobe: Pass entry_data to handlers cpufreq: schedutil: Update next_freq when cpufreq_limits change platform/x86: touchscreen_dmi: Add info for the Positivo C4128B HID: nintendo: reinitialize USB Pro Controller after resuming from suspend HID: multitouch: Add required quirk for Synaptics 0xcd7e device drm/amd/pm: add unique_id for gc 11.0.3 btrfs: error out when reallocating block for defrag using a stale transaction btrfs: error when COWing block from a root that is being deleted btrfs: error out when COWing block using a stale transaction btrfs: fix some -Wmaybe-uninitialized warnings in ioctl.c drm: panel-orientation-quirks: Add quirk for One Mix 2S ipv4/fib: send notify when delete source address routes sky2: Make sure there is at least one frag_addr available regulator/core: Revert "fix kobject release warning and memory leak in regulator_register()" wifi: cfg80211: avoid leaking stack data into trace wifi: mac80211: allow transmitting EAPOL frames with tainted key wifi: mac80211: work around Cisco AP 9115 VHT MPDU length wifi: cfg80211: Fix 6GHz scan configuration Bluetooth: hci_core: Fix build warnings Bluetooth: Avoid redundant authentication Bluetooth: btusb: add shutdown function for QCA6174 HID: holtek: fix slab-out-of-bounds Write in holtek_kbd_input_event HID: logitech-hidpp: Add Bluetooth ID for the Logitech M720 Triathlon mouse wifi: iwlwifi: Ensure ack flag is properly cleared. wifi: mwifiex: Sanity check tlv_len and tlv_bitmap_len tracing: relax trace_event_eval_update() execution with cond_resched() ata: libata-eh: Fix compilation warning in ata_eh_link_report() ata: libata-core: Fix compilation warning in ata_dev_config_ncq() gpio: timberdale: Fix potential deadlock on &tgpio->lock overlayfs: set ctime when setting mtime and atime i2c: mux: Avoid potential false error message in i2c_mux_add_adapter btrfs: initialize start_slot in btrfs_log_prealloc_extents btrfs: return -EUCLEAN for delayed tree ref with a ref count not equals to 1 btrfs: prevent transaction block reserve underflow when starting transaction fs-writeback: do not requeue a clean inode having skipped pages ARM: dts: ti: omap: Fix noisy serial with overrun-throttle-ms for mapphone pwr-mlxbf: extend Kconfig to include gpio-mlxbf3 dependency iio: adc: ad7192: Correct reference voltage iio: adc: ad7192: Simplify using devm_regulator_get_enable() iio: cros_ec: fix an use-after-free in cros_ec_sensors_push_data() iio: core: introduce iio_device_{claim|release}_buffer_mode() APIs serial: 8250_omap: Fix errors with no_console_suspend serial: 8250: omap: Fix imprecise external abort for omap_8250_pm() serial: Reduce spinlocked portion of uart_rs485_config() serial: Rename uart_change_speed() to uart_change_line_settings() serial: Move uart_change_speed() earlier usb: misc: onboard_hub: add support for Microchip USB2412 USB 2.0 hub usb: misc: onboard_usb_hub: add Genesys Logic GL3523 hub support usb: misc: onboard_usb_hub: add Genesys Logic GL852G hub support usb: misc: onboard_usb_hub: add Genesys Logic GL850G hub support selftests/mm: fix awk usage in charge_reserved_hugetlb.sh and hugetlb_reparenting_test.sh that may cause error net: check for altname conflicts when changing netdev's netns net: fix ifname in netlink ntf during netns move net: avoid UAF on deleted altname net: pktgen: Fix interface flags printing net: phy: bcm7xxx: Add missing 16nm EPHY statistics netfilter: nf_tables: revert do not remove elements if set backend implements .abort netfilter: nf_tables: do not remove elements if set backend implements .abort netlink: Correct offload_xstats size netfilter: nft_set_rbtree: .deactivate fails if element has expired selftests: netfilter: Run nft_audit.sh in its own netns selftests: openvswitch: Catch cases where the tests are killed neighbor: tracing: Move pin6 inside CONFIG_IPV6=y section net/sched: sch_hfsc: upgrade 'rt' to 'sc' when it becomes a inner curve bonding: Return pointer to data after pull on skb net: dsa: bcm_sf2: Fix possible memory leak in bcm_sf2_mdio_register() i40e: prevent crash on probe if hw registers have invalid values octeon_ep: update BQL sent bytes before ringing doorbell net: usb: smsc95xx: Fix an error code in smsc95xx_reset() ipv4: fib: annotate races around nh->nh_saddr_genid and nh->nh_saddr tun: prevent negative ifindex tcp: Fix listen() warning with v4-mapped-v6 address. tcp: tsq: relax tcp_small_queue_check() when rtx queue contains a single skb tcp: fix excessive TLP and RACK timeouts from HZ rounding net: rfkill: gpio: prevent value glitch during probe net: ipv6: fix return value check in esp_remove_trailer net: ipv4: fix return value check in esp_remove_trailer wifi: cfg80211: use system_unbound_wq for wiphy work xfrm: interface: use DEV_STATS_INC() xfrm: fix a data-race in xfrm_gen_index() xfrm: fix a data-race in xfrm_lookup_with_ifid() qed: fix LL2 RX buffer allocation ASoC: codecs: wcd938x: fix resource leaks on bind errors ASoC: codecs: wcd938x: fix unbind tear down order ASoC: codecs: wcd938x: drop bogus bind error handling ASoC: codecs: wcd938x-sdw: fix runtime PM imbalance on probe errors ASoC: codecs: wcd938x-sdw: fix use after free on driver unbind ALSA: hda/relatek: Enable Mute LED on HP Laptop 15s-fq5xxx ALSA: hda/realtek: Add quirk for ASUS ROG GU603ZV ALSA: hda/realtek - Fixed ASUS platform headset Mic issue drm/mediatek: Correctly free sg_table in gem prime vmap drm/i915: Retry gtt fault when out of fence registers nvmet-tcp: Fix a possible UAF in queue intialization setup netfilter: nft_payload: fix wrong mac header matching fs/ntfs3: fix deadlock in mark_as_free_ex fs/ntfs3: fix panic about slab-out-of-bounds caused by ntfs_list_ea() fs/ntfs3: Fix possible null-pointer dereference in hdr_find_e() mptcp: more conservative check for zero probes tcp: check mptcp-level constraints for backlog coalescing audit,io_uring: io_uring openat triggers audit reference count underflow x86: KVM: SVM: refresh AVIC inhibition in svm_leave_nested() x86: KVM: SVM: add support for Invalid IPI Vector interception KVM: x86: Constrain guest-supported xfeatures only at KVM_GET_XSAVE{2} x86/fpu: Allow caller to constrain xfeatures when copying to uabi buffer x86/sev: Check for user-space IOIO pointing to kernel space x86/sev: Check IOBM for IOIO exceptions from user-space x86/sev: Disable MMIO emulation from user mode KVM: x86: Mask LVTPC when handling a PMI regmap: fix NULL deref on lookup nfc: nci: fix possible NULL pointer dereference in send_acknowledge() btrfs: fix stripe length calculation for non-zoned data chunk allocation net/smc: return the right falback reason when prefix checks fail ice: reset first in crash dump kernels ice: fix over-shifted variable Bluetooth: avoid memcmp() out of bounds warning Bluetooth: hci_event: Fix coding style Bluetooth: vhci: Fix race when opening vhci device Bluetooth: Fix a refcnt underflow problem for hci_conn Bluetooth: Reject connection with the device which has same BD_ADDR Bluetooth: hci_event: Ignore NULL link key igc: Fix race condition in PTP tx code igc: Add condition for qbv_config_change_errors counter igc: Add qbv_config_change_errors counter igc: Remove reset adapter task for i226 during disable tsn config igc: enable Qbv configuration for 2nd GCL igc: remove I226 Qbv BaseTime restriction lib/Kconfig.debug: do not enable DEBUG_PREEMPT by default Linux 6.1.59 ALSA: hda/realtek - Fixed two speaker platform powerpc/64e: Fix wrong test in __ptep_test_and_clear_young() powerpc/8xx: Fix pte_access_permitted() for PAGE_NONE dmaengine: mediatek: Fix deadlock caused by synchronize_irq() dmaengine: idxd: use spin_lock_irqsave before wait_event_lock_irq x86/alternatives: Disable KASAN in apply_alternatives() usb: cdnsp: Fixes issue with dequeuing not queued requests usb: gadget: ncm: Handle decoding of multiple NTB's in unwrap call usb: gadget: udc-xilinx: replace memcpy with memcpy_toio usb: typec: ucsi: Clear EVENT_PENDING bit if ucsi_send_command fails usb: typec: altmodes/displayport: Signal hpd low when exiting mode counter: microchip-tcb-capture: Fix the use of internal GCLK logic counter: chrdev: fix getting array extensions scsi: ufs: core: Correct clear TM error log pinctrl: avoid unsafe code pattern in find_pinctrl() dma-buf: add dma_fence_timestamp helper cgroup: Remove duplicates in cgroup v1 tasks file usb: typec: ucsi: Use GET_CAPABILITY attributes data to set power supply scope nfp: flower: avoid rmmod nfp crash issues mctp: perform route lookups under a RCU read-side lock tee: amdtee: fix use-after-free vulnerability in amdtee_close_session Input: goodix - ensure int GPIO is in input for gpio_count == 1 && gpio_int_idx == 0 case Input: i8042 - add Fujitsu Lifebook E5411 to i8042 quirk table Input: xpad - add PXN V900 support Input: psmouse - fix fast_reconnect function for PS/2 mode Input: powermate - fix use-after-free in powermate_config_complete ceph: fix type promotion bug on 32bit systems ceph: fix incorrect revoked caps assert in ceph_fill_file_size() libceph: use kernel_connect() powerpc/47x: Fix 47x syscall return crash thunderbolt: Restart XDomain discovery handshake after failure thunderbolt: Check that lane 1 is in CL0 before enabling lane bonding thunderbolt: Workaround an IOMMU fault on certain systems with Intel Maple Ridge mcb: remove is_added flag from mcb_device struct x86/cpu: Fix AMD erratum #1485 on Zen4-based CPUs perf/x86/lbr: Filter vsyscall addresses ksmbd: not allow to open file if delelete on close bit is set ACPI: EC: Add quirk for the HP Pavilion Gaming 15-dk1xxx ACPI: resource: Skip IRQ override on ASUS ExpertBook B1402CBA drm/amd/display: Don't set dpms_off for seamless boot drm/amdgpu: add missing NULL check drm/atomic-helper: relax unregistered connector check arm64: dts: mediatek: mt8195-demo: update and reorder reserved memory regions arm64: dts: mediatek: mt8195-demo: fix the memory size to 8GB iio: addac: Kconfig: update ad74413r selections iio: pressure: ms5611: ms5611_prom_is_valid false negative bug iio: pressure: dps310: Adjust Timeout Settings iio: admv1013: add mixer_vgate corner cases iio: dac: ad3552r: Correct device IDs iio: adc: imx8qxp: Fix address for command buffer registers iio: imu: bno055: Fix missing Kconfig dependencies iio: pressure: bmp280: Fix NULL pointer exception usb: musb: Modify the "HWVers" register address usb: musb: Get the musb_qh poniter after musb_giveback usb: hub: Guard against accesses to uninitialized BOS descriptors usb: cdns3: Modify the return value of cdns_set_active () to void when CONFIG_PM_SLEEP is disabled usb: dwc3: Soft reset phy on probe for host net: usb: dm9601: fix uninitialized variable use in dm9601_mdio_read usb: xhci: xhci-ring: Use sysdev for mapping bounce buffer dmaengine: stm32-mdma: set in_flight_bytes in case CRQA flag is set dmaengine: stm32-mdma: use Link Address Register to compute residue dmaengine: stm32-dma: fix residue in case of MDMA chaining dmaengine: stm32-dma: fix stm32_dma_prep_slave_sg in case of MDMA chaining dmaengine: stm32-mdma: abort resume if no ongoing transfer tcp: enforce receive buffer memory limits by allowing the tcp window to shrink workqueue: Override implicit ordered attribute in workqueue_apply_unbound_cpumask() nfc: nci: assert requested protocol is valid pinctrl: renesas: rzn1: Enable missing PINMUX net/smc: Fix pos miscalculation in statistics net: nfc: fix races in nfc_llcp_sock_get() and nfc_llcp_sock_get_sn() net/mlx5e: Again mutually exclude RX-FCS and RX-port-timestamp ixgbe: fix crash with empty VF macvlan list net/mlx5e: macsec: use update_pn flag instead of PN comparation net: phy: mscc: macsec: reject PN update requests net: macsec: indicate next pn update when offloading net: refine debug info in skb_checksum_help() bpf: Fix verifier log for async callback return values drm/vmwgfx: fix typo of sizeof argument riscv, bpf: Sign-extend return values riscv, bpf: Factor out emit_call for kernel and bpf context xen-netback: use default TX queue size for vifs mlxsw: fix mlxsw_sp2_nve_vxlan_learning_set() return type ieee802154: ca8210: Fix a potential UAF in ca8210_probe ravb: Fix use-after-free issue in ravb_tx_timeout_work() ravb: Fix up dma_free_coherent() call in ravb_remove() arm64: dts: mediatek: mt8195: Set DSU PMU status to fail can: sun4i_can: Only show Kconfig if ARCH_SUNXI is set can: isotp: isotp_sendmsg(): fix TX state detection and wait behavior net: dsa: qca8k: fix potential MDIO bus conflict when accessing internal PHYs via management frames phy: lynx-28g: serialize concurrent phy_set_mode_ext() calls to shared registers phy: lynx-28g: lock PHY while performing CDR lock workaround phy: lynx-28g: cancel the CDR check work item on the remove path drm/msm/dp: Add newlines to debug printks drm/msm/dpu: change _dpu_plane_calc_bw() to use u64 to avoid overflow drm/msm/dsi: fix irq_of_parse_and_map() error checking drm/msm/dsi: skip the wait for video mode done if not applicable drm/msm/dp: do not reinitialize phy unless retry during link training pinctrl: nuvoton: wpcm450: fix out of bounds write ALSA: hda/realtek - ALC287 merge RTK codec with CS CS35L41 AMP ALSA: hda/realtek - ALC287 I2S speaker platform support ALSA: hda/realtek: Add quirk for mute LEDs on HP ENVY x360 15-eu0xxx ALSA: hda/realtek: Add quirk for HP Victus 16-d1xxx to enable mute LED ASoC: fsl_sai: Don't disable bitclock for i.MX8MP ASoC: fsl_sai: MCLK bind with TX/RX enable bit ASoC: Use of_property_read_bool() for boolean properties ASoC: Intel: soc-acpi: Add entry for sof_es8336 in MTL match table. ASoC: Intel: sof_sdw: add support for SKU 0B14 ASoC: Intel: soc-acpi: Add entry for HDMI_In capture support in MTL match table ASoC: simple-card-utils: fixup simple_util_startup() error handling ASoC: SOF: amd: fix for firmware reload failure after playback ALSA: hda/realtek: Change model for Intel RVP board ALSA: usb-audio: Fix microphone sound on Nexigo webcam. ALSA: usb-audio: Fix microphone sound on Opencomm2 Headset KEYS: trusted: Remove redundant static calls usage irqchip: renesas-rzg2l: Fix logic to clear TINT interrupt source dt-bindings: interrupt-controller: renesas,rzg2l-irqc: Update description for '#interrupt-cells' property arm64: dts: qcom: sm8150: extend the size of the PDC resource net: prevent address rewrite in kernel_bind() ata: libata-scsi: Disable scsi device manage_system_start_stop ASoC: amd: yc: Fix non-functional mic on Lenovo 82YM quota: Fix slow quotaoff HID: logitech-hidpp: Fix kernel crash on receiver USB disconnect scsi: Do not rescan devices with a suspended queue platform/x86: hp-wmi:: Mark driver struct with __refdata to prevent section mismatch warning platform/x86: think-lmi: Fix reference leak perf/arm-cmn: Fix the unhandled overflow status of counter 4 to 7 RDMA/cxgb4: Check skb value for failure to allocate drm/i915: Don't set PIPE_CONTROL_FLUSH_L3 for aux inval mptcp: fix delegated action races net: mana: Fix TX CQE error handling Linux 6.1.58 lib/test_meminit: fix off-by-one error in test_pages() Revert "NFS: Fix error handling for O_DIRECT write scheduling" Revert "NFS: Fix O_DIRECT locking issues" Revert "NFS: More O_DIRECT accounting fixes for error paths" Revert "NFS: Use the correct commit info in nfs_join_page_group()" Revert "NFS: More fixes for nfs_direct_write_reschedule_io()" Conflicts: Documentation/devicetree/bindings Documentation/devicetree/bindings/interrupt-controller/qcom,mpm.yaml Documentation/devicetree/bindings/interrupt-controller/renesas,rzg2l-irqc.yaml Documentation/devicetree/bindings/mfd/mt6397.txt Documentation/devicetree/bindings/mmc/sdhci-msm.yaml drivers/clk/qcom/gcc-sm8150.c drivers/hwtracing/coresight/coresight-tmc-core.c drivers/hwtracing/coresight/coresight-tmc-etr.c drivers/interconnect/qcom/sm8150.c drivers/interconnect/qcom/sm8150.h drivers/phy/qualcomm/Makefile Change-Id: I9b0afef38a5cd42781504ccd77dfb8a747a5dea4 Upstream-Build: ks_qcom-android14-6.1-keystone-qcom-release@11750438 UKQ2.240423.001 Signed-off-by: Srinivasarao Pathipati <quic_c_spathi@quicinc.com>	2024-05-09 10:00:15 +05:30
Priyanka G Pai	775902195a	msm: npu: Add virt npu driver for kernel 6.1 ... VIRT NPU driver snapshot from msm-5.15 branch commit 8d24307a884b ("msm: npu: update VIRTIO_ID_NPU on msm-5.15"). Change-Id: Icbd2d45e624ab4d6b4645b4a00e1c9e75040e522 Signed-off-by: Priyanka G Pai <quic_pgpai@quicinc.com>	2024-03-13 17:29:05 +05:30
jianzhou	7c8fe0d3ae	Merge keystone/android14-6.1-keystone-qcom-release.6.1.57 (97abf17) into qcom-6.1 ... * refs/heads/tmp-97abf17: ANDROID: GKI: Update symbol list for mtk ANDROID: Update the ABI symbol list ANDROID: GKI: Update symbol list for mtk ANDROID: mm: lru_cache_disable skips lru cache drainnig ANDROID: mm: cma: introduce __cma_alloc API ANDROID: Update the ABI representation BACKPORT: fscrypt: support crypto data unit size less than filesystem block size UPSTREAM: netfilter: nf_tables: remove catchall element in GC sync path ANDROID: GKI: Update oplus symbol list ANDROID: vendor_hooks: export tracepoint symbol trace_mm_vmscan_kswapd_wake BACKPORT: HID: input: map battery system charging ANDROID: fuse-bpf: Ignore readaheads unless they go to the daemon FROMGIT: freezer,sched: clean saved_state when restoring it during thaw FROMGIT: freezer,sched: do not restore saved_state of a thawed task FROMGIT: f2fs: skip adding a discard command if exists UPSTREAM: f2fs: clean up zones when not successfully unmounted UPSTREAM: f2fs: use finish zone command when closing a zone UPSTREAM: f2fs: check zone write pointer points to the end of zone UPSTREAM: f2fs: close unused open zones while mounting UPSTREAM: f2fs: maintain six open zones for zoned devices ANDROID: update symbol for unisoc whitelist ANDROID: vendor_hooks: mm: add hook to count the number pages allocated for each slab ANDROID: Update the ABI symbol list ANDROID: sched: Add trace_android_rvh_set_user_nice_locked UPSTREAM: ASoC: soc-compress: Fix deadlock in soc_compr_open_fe BACKPORT: ASoC: add snd_soc_card_mutex_lock/unlock() BACKPORT: ASoC: expand snd_soc_dpcm_mutex_lock/unlock() BACKPORT: ASoC: expand snd_soc_dapm_mutex_lock/unlock() ANDROID: GKI: Update symbol list for mtk ANDROID: Update the ABI symbol list ANDROID: sched: Add vendor hook for update_load_sum FROMGIT: freezer,sched: clean saved_state when restoring it during thaw FROMGIT: freezer,sched: do not restore saved_state of a thawed task ANDROID: GKI: add allowed list for Exynosauto SoC ANDROID: KVM: arm64: pkvm_module_ops documentation ANDROID: Update the ABI symbol list UPSTREAM: usb: typec: tcpm: Fix NULL pointer dereference in tcpm_pd_svdm() ANDROID: GKI: Update oplus symbol list UPSTREAM: drm/qxl: fix UAF on handle creation FROMGIT: usb:gadget:uvc Do not use worker thread to pump isoc usb requests FROMGIT: usb: gadget: uvc: Fix use-after-free for inflight usb_requests FROMGIT: usb: gadget: uvc: move video disable logic to its own function FROMGIT: usb: gadget: uvc: Allocate uvc_requests one at a time FROMGIT: usb: gadget: uvc: prevent use of disabled endpoint UPSTREAM: drm/fourcc: Add NV20 and NV30 YUV formats FROMLIST: virt: geniezone: Add memory relinquish support FROMGIT: Input: uinput - allow injecting event times UPSTREAM: PM: hibernate: Fix copying the zero bitmap to safe pages UPSTREAM: PM: hibernate: don't store zero pages in the image file UPSTREAM: PM: hibernate: Complain about memory map mismatches during resume FROMLIST: devcoredump: Send uevent once devcd is ready FROMLIST: iommu: Avoid more races around device probe ANDROID: Update the ABI symbol list FROMLIST: ufs: core: clear cmd if abort success in mcq mode BACKPORT: wifi: cfg80211: Allow AP/P2PGO to indicate port authorization to peer STA/P2PClient BACKPORT: wifi: cfg80211: OWE DH IE handling offload ANDROID: KVM: arm64: mount procfs for pKVM module loading ANDROID: GKI: Update symbol list for mtk ANDROID: fuse-bpf: Add NULL pointer check in fuse_release_in UPSTREAM: serial: 8250_port: Check IRQ data before use ANDROID: KVM: arm64: Fix error path in pkvm_mem_abort() ANDROID: abi_gki_aarch64_qcom: Update symbol list ANDROID: GKI: add allowed list for Exynosauto SoC ANDROID: Update the ABI symbol list ANDROID: sched: Add vendor hook for util_fits_cpu ANDROID: update symbol for unisoc vendor_hooks ANDROID: vendor_hooks: mm: add hook to count the number pages allocated for each slab UPSTREAM: usb: gadget: udc: Handle gadget_connect failure during bind operation ANDROID: Update the ABI symbol list ANDROID: softirq: Add EXPORT_SYMBOL_GPL for softirq and tasklet ANDROID: mm/mempolicy.c fix up conversion to queue_folios_pte_range Revert "net: add sysctl accept_ra_min_rtr_lft" Revert "net: change accept_ra_min_rtr_lft to affect all RA lifetimes" Revert "net: release reference to inet6_dev pointer" Revert "ata,scsi: do not issue START STOP UNIT on resume" Revert "scsi: sd: Differentiate system and runtime start/stop management" Revert "scsi: sd: Do not issue commands to suspended disks on shutdown" Revert "wifi: cfg80211: fix cqm_config access race" Revert "netfilter: handle the connecting collision properly in nf_conntrack_proto_sctp" Revert "arm64: errata: Add Cortex-A520 speculative unprivileged load workaround" Revert "video/aperture: Only remove sysfb on the default vga pci device" Revert "drm/ast: Use drm_aperture_remove_conflicting_pci_framebuffers" Revert "fbdev/radeon: use pci aperture helpers" Revert "drm/gma500: Use drm_aperture_remove_conflicting_pci_framebuffers" Revert "drm/aperture: Remove primary argument" Revert "video/aperture: Only kick vgacon when the pdev is decoding vga" Revert "video/aperture: Move vga handling to pci function" Revert "fs/nls: make load_nls() take a const parameter" Revert "dm: fix a race condition in retrieve_deps" ANDROID: GKI: db845c: add new dma_buf symbols to list UPSTREAM: lib/test_meminit: fix off-by-one error in test_pages() ANDROID: GKI: add guards for an include file in net/ethtool/ioctl.c ANDROID: GKI: update .stg due to internal zswap and tracing changes ANDROID: GKI: db845c: add pcie_capability_clear_and_set_word to the symbol list ANDROID: GKI: sched: put back the cpu_capacity_inverted variable Revert "ipv4: fix data-races around inet->inet_id" Revert "usb: typec: bus: verify partner exists in typec_altmode_attention" Revert "scsi: core: Use 32-bit hostnum in scsi_host_lookup()" Revert "media: cec: core: add adap_nb_transmit_canceled() callback" Revert "media: cec: core: add adap_unconfigured() callback" Revert "tracing: Introduce pipe_cpumask to avoid race on trace_pipes" Revert "tracing: Zero the pipe cpumask on alloc to avoid spurious -EBUSY" Revert "PCI: Allow drivers to request exclusive config regions" Revert "PCI: Add locking to RMW PCI Express Capability Register accessors" Revert "crypto: api - Use work queue in crypto_destroy_instance" Revert "media: uapi: HEVC: Add num_delta_pocs_of_ref_rps_idx field" Linux 6.1.57 xen/events: replace evtchn_rwlock with RCU ipv6: remove one read_lock()/read_unlock() pair in rt6_check_neigh() btrfs: file_remove_privs needs an exclusive lock in direct io write netlink: remove the flex array from struct nlmsghdr btrfs: fix fscrypt name leak after failure to join log transaction btrfs: fix an error handling path in btrfs_rename() vrf: Fix lockdep splat in output path ipv6: remove nexthop_fib6_nh_bh() parisc: Restore __ldcw_align for PA-RISC 2.0 processors ksmbd: fix uaf in smb20_oplock_break_ack ksmbd: fix race condition between session lookup and expire x86/sev: Use the GHCB protocol when available for SNP CPUID requests RDMA/mlx5: Fix NULL string error RDMA/mlx5: Fix mutex unlocking on error flow for steering anchor creation RDMA/siw: Fix connection failure handling RDMA/srp: Do not call scsi_done() from srp_abort() RDMA/uverbs: Fix typo of sizeof argument RDMA/cma: Fix truncation compilation warning in make_cma_ports RDMA/cma: Initialize ib_sa_multicast structure to 0 when join gpio: pxa: disable pinctrl calls for MMP_GPIO gpio: aspeed: fix the GPIO number passed to pinctrl_gpio_set_config() IB/mlx4: Fix the size of a buffer in add_port_entries() of: dynamic: Fix potential memory leak in of_changeset_action() RDMA/core: Require admin capabilities to set system parameters dm zoned: free dmz->ddev array in dmz_put_zoned_devices parisc: Fix crash with nr_cpus=1 option smb: use kernel_connect() and kernel_bind() intel_idle: add Emerald Rapids Xeon support HID: intel-ish-hid: ipc: Disable and reenable ACPI GPE bit HID: sony: remove duplicate NULL check before calling usb_free_urb() netlink: annotate data-races around sk->sk_err netlink: Fix potential skb memleak in netlink_ack netlink: split up copies in the ack construction sctp: update hb timer immediately after users change hb_interval sctp: update transport state when processing a dupcook packet tcp: fix delayed ACKs for MSS boundary condition tcp: fix quick-ack counting to count actual ACKs of new data tipc: fix a potential deadlock on &tx->lock net: stmmac: dwmac-stm32: fix resume on STM32 MCU ipv4: Set offload_failed flag in fibmatch results netfilter: nf_tables: nft_set_rbtree: fix spurious insertion failure netfilter: nf_tables: Deduplicate nft_register_obj audit logs selftests: netfilter: Extend nft_audit.sh selftests: netfilter: Test nf_tables audit logging netfilter: handle the connecting collision properly in nf_conntrack_proto_sctp ibmveth: Remove condition to recompute TCP header checksum. net: ethernet: ti: am65-cpsw: Fix error code in am65_cpsw_nuss_init_tx_chns() net: nfc: llcp: Add lock when modifying device list net: usb: smsc75xx: Fix uninit-value access in __smsc75xx_read_reg ipv6: tcp: add a missing nf_reset_ct() in 3WHS handling net: dsa: mv88e6xxx: Avoid EEPROM timeout when EEPROM is absent ptp: ocp: Fix error handling in ptp_ocp_device_init ipv4, ipv6: Fix handling of transhdrlen in __ip{,6}_append_data() neighbour: fix data-races around n->output neighbour: switch to standard rcu, instead of rcu_bh neighbour: annotate lockless accesses to n->nud_state bpf: Add BPF_FIB_LOOKUP_SKIP_NEIGH for bpf_fib_lookup net: fix possible store tearing in neigh_periodic_work() modpost: add missing else to the "of" check bpf, sockmap: Reject sk_msg egress redirects to non-TCP sockets bpf, sockmap: Do not inc copied_seq when PEEK flag set bpf: tcp_read_skb needs to pop skb regardless of seq NFSv4: Fix a nfs4_state_manager() race ima: rework CONFIG_IMA dependency block scsi: target: core: Fix deadlock due to recursive locking ima: Finish deprecation of IMA_TRUSTED_KEYRING Kconfig regulator/core: regulator_register: set device->class earlier iommu/mediatek: Fix share pgtable for iova over 4GB perf/x86/amd: Do not WARN() on every IRQ wifi: mac80211: fix potential key use-after-free regmap: rbtree: Fix wrong register marked as in-cache when creating new node perf/x86/amd/core: Fix overflow reset on hotplug wifi: mt76: mt76x02: fix MT76x0 external LNA gain handling drivers/net: process the result of hdlc_open() and add call of hdlc_close() in uhdlc_close() Bluetooth: ISO: Fix handling of listen for unicast Bluetooth: Delete unused hci_req_prepare_suspend() declaration regulator: mt6358: split ops for buck and linear range LDO regulators regulator: mt6358: Use linear voltage helpers for single range regulators regulator: mt6358: Drop *_SSHUB regulators bpf: Fix tr dereferencing leds: Drop BUG_ON check for LED_COLOR_ID_MULTI wifi: mwifiex: Fix oob check condition in mwifiex_process_rx_packet wifi: cfg80211: add missing kernel-doc for cqm_rssi_work wifi: cfg80211: fix cqm_config access race wifi: cfg80211: add a work abstraction with special semantics wifi: cfg80211: move wowlan disable under locks wifi: cfg80211: hold wiphy lock in auto-disconnect wifi: iwlwifi: mvm: Fix a memory corruption issue wifi: iwlwifi: dbg_ini: fix structure packing erofs: fix memory leak of LZMA global compressed deduplication ubi: Refuse attaching if mtd's erasesize is 0 HID: sony: Fix a potential memory leak in sony_probe() arm64: errata: Add Cortex-A520 speculative unprivileged load workaround arm64: Add Cortex-A520 CPU part definition drm/amd: Fix logic error in sienna_cichlid_update_pcie_parameters() drm/amd: Fix detection of _PR3 on the PCIe root port net: prevent rewrite of msg_name in sock_sendmsg() net: replace calls to sock->ops->connect() with kernel_connect() PCI: qcom: Fix IPQ8074 enumeration md/raid5: release batch_last before waiting for another stripe_head wifi: mwifiex: Fix tlv_buf_left calculation Bluetooth: hci_sync: Fix handling of HCI_QUIRK_STRICT_DUPLICATE_FILTER Bluetooth: hci_codec: Fix leaking content of local_codecs qed/red_ll2: Fix undefined behavior bug in struct qed_ll2_info mptcp: userspace pm allow creating id 0 subflow net: ethernet: mediatek: disable irq before schedule napi vringh: don't use vringh_kiov_advance() in vringh_iov_xfer() iommu/vt-d: Avoid memory allocation in iommu_suspend() scsi: zfcp: Fix a double put in zfcp_port_enqueue() i40e: fix the wrong PTP frequency calculation hwmon: (nzxt-smart2) add another USB ID hwmon: (nzxt-smart2) Add device id block: fix use-after-free of q->q_usage_counter rbd: take header_rwsem in rbd_dev_refresh() only when updating rbd: decouple parent info read-in from updating rbd_dev rbd: decouple header read-in from updating rbd_dev->header rbd: move rbd_dev_refresh() definition iommu/arm-smmu-v3: Avoid constructing invalid range commands iommu/arm-smmu-v3: Set TTL invalidation hint better drm/amd/display: Adjust the MST resume flow arm64: cpufeature: Fix CLRBHB and BC detection net: release reference to inet6_dev pointer net: change accept_ra_min_rtr_lft to affect all RA lifetimes net: add sysctl accept_ra_min_rtr_lft arm64: Avoid repeated AA64MMFR1_EL1 register read on pagefault path Revert "NFSv4: Retry LOCK on OLD_STATEID during delegation return" btrfs: use struct fscrypt_str instead of struct qstr btrfs: setup qstr from dentrys using fscrypt helper btrfs: use struct qstr instead of name and namelen pairs ring-buffer: Fix bytes info in per_cpu buffer stats ring-buffer: remove obsolete comment for free_buffer_page() mm: page_alloc: fix CMA and HIGHATOMIC landing on the wrong buddy list mm/page_alloc: leave IRQs enabled for per-cpu page allocations mm/page_alloc: always remove pages from temporary list mm: mempolicy: keep VMA walk if both MPOL_MF_STRICT and MPOL_MF_MOVE are specified mm/mempolicy: convert migrate_page_add() to migrate_folio_add() mm/mempolicy: convert queue_pages_pte_range() to queue_folios_pte_range() mm/mempolicy: convert queue_pages_pmd() to queue_folios_pmd() mm/memory: add vm_normal_folio() NFSv4: Fix a state manager thread deadlock regression NFS: rename nfs_client_kset to nfs_kset NFS: Cleanup unused rpc_clnt variable ata: libata-scsi: Fix delayed scsi_rescan_device() execution scsi: Do not attempt to rescan suspended devices scsi: core: Improve type safety of scsi_rescan_device() scsi: sd: Do not issue commands to suspended disks on shutdown scsi: sd: Differentiate system and runtime start/stop management ata,scsi: do not issue START STOP UNIT on resume mptcp: process pending subflow error on close mptcp: move __mptcp_error_report in protocol.c mptcp: annotate lockless accesses to sk->sk_err mptcp: fix dangling connection hang-up mptcp: rename timer related helper to less confusing names ASoC: tegra: Fix redundant PLLA and PLLA_OUT0 updates ASoC: soc-utils: Export snd_soc_dai_is_dummy() symbol spi: zynqmp-gqspi: fix clock imbalance on probe failure Linux 6.1.56 ASoC: amd: yc: Fix a non-functional mic on Lenovo 82TL mm, memcg: reconsider kmem.limit_in_bytes deprecation memcg: drop kmem.limit_in_bytes drm/meson: fix memory leak on ->hpd_notify callback drm/amdkfd: Use gpu_offset for user queue's wptr fs: binfmt_elf_efpic: fix personality for ELF-FDPIC power: supply: ab8500: Set typing and props power: supply: rk817: Add missing module alias drm/i915/gt: Fix reservation address in ggtt_reserve_guc_top ata: libata-sata: increase PMP SRST timeout to 10s ata: libata-core: Do not register PM operations for SAS ports ata: libata-core: Fix port and device removal ata: libata-core: Fix ata_port_request_pm() locking fs/smb/client: Reset password pointer to NULL net: thunderbolt: Fix TCPv6 GSO checksum calculation bpf: Fix BTF_ID symbol generation collision in tools/ bpf: Fix BTF_ID symbol generation collision bpf: Add override check to kprobe multi link attach media: uvcvideo: Fix OOB read btrfs: properly report 0 avail for very full file systems ring-buffer: Update "shortest_full" in polling mm: memcontrol: fix GFP_NOFS recursion in memory.high enforcement mm/slab_common: fix slab_caches list corruption after kmem_cache_destroy() mm/damon/vaddr-test: fix memory leak in damon_do_test_apply_three_regions() arm64: defconfig: remove CONFIG_COMMON_CLK_NPCM8XX=y drm/tests: Fix incorrect argument in drm_test_mm_insert_range timers: Tag (hr)timer softirq as hotplug safe Revert "SUNRPC dont update timeout value on connection reset" netfilter: nf_tables: fix kdoc warnings after gc rework sched/rt: Fix live lock between select_fallback_rq() and RT push kernel/sched: Modify initial boot task idle setup ASoC: amd: yc: Fix non-functional mic on Lenovo 82QF and 82UG i2c: i801: unregister tco_pdev in i801_probe() error path io_uring/fs: remove sqe->rw_flags checking from LINKAT ata: libata-scsi: ignore reserved bits for REPORT SUPPORTED OPERATION CODES ata: libata-scsi: link ata port and scsi device LoongArch: numa: Fix high_memory calculation LoongArch: Define relocation types for ABI v2.10 ALSA: hda: Disable power save for solving pop issue on Lenovo ThinkCentre M70q netfilter: nf_tables: disallow rule removal from chain binding nilfs2: fix potential use after free in nilfs_gccache_submit_read_data() serial: 8250_port: Check IRQ data before use Revert "tty: n_gsm: fix UAF in gsm_cleanup_mux" misc: rtsx: Fix some platforms can not boot and move the l1ss judgment to probe mptcp: fix bogus receive window shrinkage with multiple subflows KVM: x86/mmu: Do not filter address spaces in for_each_tdp_mmu_root_yield_safe() KVM: x86/mmu: Open code leaf invalidation from mmu_notifier KVM: SVM: Fix TSC_AUX virtualization setup KVM: SVM: INTERCEPT_RDTSCP is never intercepted anyway x86/srso: Add SRSO mitigation for Hygon processors x86/sgx: Resolves SECS reclaim vs. page fault for EAUG race iommu/arm-smmu-v3: Fix soft lockup triggered by arm_smmu_mm_invalidate_range smack: Retrieve transmuting information in smack_inode_getsecurity() smack: Record transmuting in smk_transmuted nvme-pci: always return an ERR_PTR from nvme_pci_alloc_dev scsi: qla2xxx: Fix NULL pointer dereference in target mode wifi: ath11k: Don't drop tx_status when peer cannot be found nvme-pci: do not set the NUMA node of device if it has none nvme-pci: factor out a nvme_pci_alloc_dev helper nvme-pci: factor the iod mempool creation into a helper perf build: Define YYNOMEM as YYNOABORT for bison < 3.81 fbdev/sh7760fb: Depend on FB=y LoongArch: Set all reserved memblocks on Node#0 at initialization tsnep: Fix NAPI polling with budget 0 tsnep: Fix NAPI scheduling net: hsr: Add __packed to struct hsr_sup_tlv. ncsi: Propagate carrier gain/loss events to the NCSI controller powerpc/watchpoints: Annotate atomic context in more places powerpc/watchpoint: Disable pagefaults when getting user instruction powerpc/watchpoints: Disable preemption in thread_change_pc() ASoC: SOF: Intel: MTL: Reduce the DSP init timeout NFSv4.1: fix zero value filehandle in post open getattr media: vb2: frame_vector.c: replace WARN_ONCE with a comment ASoC: imx-rpmsg: Set ignore_pmdown_time for dai_link memblock tests: fix warning ‘struct seq_file’ declared inside parameter list memblock tests: fix warning: "__ALIGN_KERNEL" redefined firmware: cirrus: cs_dsp: Only log list of algorithms in debug build ASoC: cs42l42: Don't rely on GPIOD_OUT_LOW to set RESET initially low ASoC: cs42l42: Ensure a reset pulse meets minimum pulse width. ALSA: hda: intel-sdw-acpi: Use u8 type for link index bpf: Clarify error expectations from bpf_clone_redirect spi: intel-pci: Add support for Granite Rapids SPI serial flash ASoC: fsl: imx-pcm-rpmsg: Add SNDRV_PCM_INFO_BATCH flag spi: stm32: add a delay before SPI disable spi: nxp-fspi: reset the FLSHxCR1 registers ata: libata-eh: do not clear ATA_PFLAG_EH_PENDING in ata_eh_reset() smb3: correct places where ENOTSUPP is used instead of preferred EOPNOTSUPP scsi: pm80xx: Avoid leaking tags when processing OPC_INB_SET_CONTROLLER_CONFIG command scsi: pm80xx: Use phy-specific SAS address when sending PHY_START command riscv: errata: fix T-Head dcache.cva encoding drm/amdgpu: Handle null atom context in VBIOS info ioctl drm/amdgpu/nbio4.3: set proper rmmio_remap.reg_offset for SR-IOV drm/amdgpu/soc21: don't remap HDP registers for SR-IOV drm/amd/display: Don't check registers, if using AUX BL control thermal/of: add missing of_node_put() platform/x86: asus-wmi: Support 2023 ROG X16 tablet mode platform/mellanox: mlxbf-bootctl: add NET dependency into Kconfig ata: sata_mv: Fix incorrect string length computation in mv_dump_mem() net/smc: bugfix for smcr v2 server connect success statistic ring-buffer: Do not attempt to read past "commit" selftests: fix dependency checker script btrfs: assert delayed node locked when removing delayed item ring-buffer: Avoid softlockup in ring_buffer_resize() selftests/ftrace: Correctly enable event in instance-event.tc scsi: ufs: core: Poll HCS.UCRDY before issuing a UIC command scsi: ufs: core: Move __ufshcd_send_uic_cmd() outside host_lock scsi: qedf: Add synchronization between I/O completions and abort parisc: irq: Make irq_stack_union static to avoid sparse warning parisc: drivers: Fix sparse warning parisc: iosapic.c: Fix sparse warnings parisc: sba: Fix compile warning wrt list of SBA devices nvme-fc: Prevent null pointer dereference in nvme_fc_io_getuuid() spi: sun6i: fix race between DMA RX transfer completion and RX FIFO drain spi: sun6i: reduce DMA RX transfer width to single byte bpf: Annotate bpf_long_memcpy with data_race dma-debug: don't call __dma_entry_alloc_check_leak() under free_entries_lock ceph: drop messages from MDS when unmounting x86/reboot: VMCLEAR active VMCSes before emergency reboot i2c: npcm7xx: Fix callback completion ordering gpio: pmic-eic-sprd: Add can_sleep flag for PMIC EIC chip firmware: arm_ffa: Don't set the memory region attributes for MEM_LEND arm64: dts: imx: Add imx8mm-prt8mm.dtb to build soc: imx8m: Enable OCOTP clock for imx8mm before reading registers selftests/powerpc: Fix emit_tests to work with run_kselftest.sh selftests/powerpc: Pass make context to children selftests/powerpc: Use CLEAN macro to fix make warning power: supply: rk817: Fix node refcount leak xtensa: boot/lib: fix function prototypes xtensa: umulsidi3: fix conditional expression xtensa: boot: don't add include-dirs xtensa: iss/network: make functions static xtensa: add default definition for XCHAL_HAVE_DIV32 firmware: imx-dsp: Fix an error handling path in imx_dsp_setup_channels() power: supply: ucs1002: fix error code in ucs1002_get_property() bus: ti-sysc: Fix SYSC_QUIRK_SWSUP_SIDLE_ACT handling for uart wake-up ARM: dts: ti: omap: motorola-mapphone: Fix abe_clkctrl warning on boot ARM: dts: Unify pinctrl-single pin group nodes for omap4 ARM: dts: Unify pwm-omap-dmtimer node names ARM: dts: ti: omap: Fix bandgap thermal cells addressing for omap3/4 ARM: dts: omap: correct indentation clk: tegra: fix error return case for recalc_rate clk: sprd: Fix thm_parents incorrect configuration power: supply: mt6370: Fix missing error code in mt6370_chg_toggle_cfo() firmware: arm_scmi: Fixup perf power-cost/microwatt support firmware: arm_scmi: Harden perf domain info access bus: ti-sysc: Fix missing AM35xx SoC matching bus: ti-sysc: Use fsleep() instead of usleep_range() in sysc_reset() drm/bridge: ti-sn65dsi83: Do not generate HFP/HBP/HSA and EOT packet spi: spi-gxp: BUG: Correct spi write return value MIPS: Alchemy: only build mmc support helpers if au1xmmc is enabled vfio/mdev: Fix a null-ptr-deref bug for mdev_unregister_parent() btrfs: reset destination buffer when read_extent_buffer() gets invalid range drm/amdkfd: Insert missing TLB flush on GFX10 and later drm/amdkfd: Flush TLB after unmapping for GFX v9.4.3 scsi: qla2xxx: Use raw_smp_processor_id() instead of smp_processor_id() scsi: qla2xxx: Select qpair depending on which CPU post_cmd() gets called wifi: ath11k: Cleanup mac80211 references on failure during tx_complete wifi: ath11k: fix tx status reporting in encap offload mode arm64: dts: qcom: sdm845-db845c: Mark cont splash memory region as reserved s390/pkey: fix PKEY_TYPE_EP11_AES handling in PKEY_CLR2SECK2 IOCTL f2fs: get out of a repeat loop when getting a locked data page f2fs: optimize iteration over sparse directories ARM: dts: qcom: msm8974pro-castor: correct touchscreen syna,nosleep-mode ARM: dts: qcom: msm8974pro-castor: correct touchscreen function names ARM: dts: qcom: msm8974pro-castor: correct inverted X of touchscreen ARM: dts: samsung: exynos4210-i9100: Fix LCD screen's physical size ARM: dts: BCM5301X: Extend RAM to full 256MB for Linksys EA6500 V2 i2c: xiic: Correct return value check for xiic_reinit() i2c: mux: gpio: Add missing fwnode_handle_put() i2c: mux: demux-pinctrl: check the return value of devm_kstrdup() gpio: tb10x: Fix an error handling path in tb10x_gpio_probe() cifs: Fix UAF in cifs_demultiplex_thread() proc: nommu: fix empty /proc/<pid>/maps proc: nommu: /proc/<pid>/maps: release mmap read lock igc: Expose tx-usecs coalesce setting to user octeontx2-pf: Do xdp_do_flush() after redirects. bnxt_en: Flush XDP for bnxt_poll_nitroa0()'s NAPI net: ena: Flush XDP packets on error. locking/seqlock: Do the lockdep annotation before locking in do_write_seqcount_begin_nested() i915/pmu: Move execlist stats initialization to execlist specific setup netfilter: ipset: Fix race between IPSET_CMD_CREATE and IPSET_CMD_SWAP netfilter: nf_tables: disable toggling dormant table state more than once net: rds: Fix possible NULL-pointer dereference team: fix null-ptr-deref when team device type is changed net: bridge: use DEV_STATS_INC() net: hns3: add 5ms delay before clear firmware reset irq source net: hns3: fix fail to delete tc flower rules during reset issue net: hns3: only enable unicast promisc when mac table full net: hns3: fix GRE checksum offload issue net: hns3: add cmdq check for vf periodic service task x86/srso: Fix SBPB enablement for spec_rstack_overflow=off x86/srso: Fix srso_show_state() side effect platform/x86: intel_scu_ipc: Fail IPC send if still busy platform/x86: intel_scu_ipc: Don't override scu in intel_scu_ipc_dev_simple_command() platform/x86: intel_scu_ipc: Check status upon timeout in ipc_wait_for_interrupt() platform/x86: intel_scu_ipc: Check status after timeout in busy_loop() net: hsr: Properly parse HSRv1 supervisor frames. x86/mm, kexec, ima: Use memblock_free_late() from ima_free_kexec_buffer() dccp: fix dccp_v4_err()/dccp_v6_err() again powerpc/perf/hv-24x7: Update domain value check scsi: iscsi_tcp: restrict to TCP sockets ipv4: fix null-deref in ipv4_link_failure igc: Fix infinite initialization loop with early XDP redirect ionic: fix 16bit math issue when PAGE_SIZE >= 64KB netfilter, bpf: Adjust timeouts of non-confirmed CTs in bpf_ct_insert_entry() i40e: Fix VF VLAN offloading when port VLAN is configured iavf: schedule a request immediately after add/delete vlan iavf: add iavf_schedule_aq_request() helper ASoC: SOF: core: Only call sof_ops_free() on remove if the probe was successful iavf: do not process adminq tasks when __IAVF_IN_REMOVE_TASK is set octeon_ep: fix tx dma unmap len values in SG ASoC: imx-audmix: Fix return error with devm_clk_get() ASoC: hdaudio.c: Add missing check for devm_kstrdup net/core: Fix ETH_P_1588 flow dissector selftests: tls: swap the TX and RX sockets in some tests netfilter: conntrack: fix extension size table ALSA: hda/realtek: Splitting the UX3402 into two separate models ASoC: rt5640: Fix IRQ not being free-ed for HDA jack detect mode ASoC: rt5640: Revert "Fix sleep in atomic context" bpf: Avoid deadlock when using queue and stack maps from NMI netfilter: nf_tables: disallow element removal on anonymous sets ASoC: meson: spdifin: start hw on dai probe netfilter: nf_tables: fix memleak when more than 255 elements expired netfilter: nft_set_hash: try later when GC hits EAGAIN on iteration netfilter: nft_set_pipapo: stop GC iteration if GC transaction allocation fails netfilter: nft_set_pipapo: call nft_trans_gc_queue_sync() in catchall GC netfilter: nft_set_rbtree: use read spinlock to avoid datapath contention netfilter: nft_set_rbtree: skip sync GC for new elements in this transaction netfilter: nf_tables: defer gc run if previous batch is still pending netfilter: nf_tables: use correct lock to protect gc_list netfilter: nf_tables: GC transaction race with abort path netfilter: nf_tables: GC transaction race with netns dismantle netfilter: nf_tables: fix GC transaction races with netns and netlink event exit path netfilter: nf_tables: don't fail inserts if duplicate has expired netfilter: nf_tables: remove busy mark and gc batch API netfilter: nft_set_hash: mark set element as dead when deleting from packet path netfilter: nf_tables: adapt set backend to use GC transaction API netfilter: nf_tables: GC transaction API to avoid race with control plane netfilter: nf_tables: don't skip expired elements during walk ext4: do not let fstrim block system suspend ext4: move setting of trimmed bit into ext4_try_to_trim_range() ext4: replace the traditional ternary conditional operator with with max()/min() btrfs: remove BUG() after failure to insert delayed dir index item btrfs: improve error message after failure to add delayed dir index item dm: fix a race condition in retrieve_deps netfs: Only call folio_start_fscache() one time for each folio media: via: Use correct dependency for camera sensor drivers media: v4l: Use correct dependency for camera sensor drivers NFSv4.1: fix pnfs MDS=DS session trunking NFSv4.1: use EXCHGID4_FLAG_USE_PNFS_DS for DS server SUNRPC: Mark the cred for revalidation if the server rejects it NFS/pNFS: Report EINVAL errors from connect() to the server NFS: More fixes for nfs_direct_write_reschedule_io() NFS: Use the correct commit info in nfs_join_page_group() NFS: More O_DIRECT accounting fixes for error paths NFS: Fix O_DIRECT locking issues NFS: Fix error handling for O_DIRECT write scheduling ANDROID: GKI: Fix firmware: smccc build error ANDROID: Move microdroid and crashdump defconfigs to common Linux 6.1.55 interconnect: Teach lockdep about icc_bw_lock order net/sched: Retire rsvp classifier drm/amdgpu: fix amdgpu_cs_p1_user_fence Revert "memcg: drop kmem.limit_in_bytes" drm/amd/display: fix the white screen issue when >= 64GB DRAM ext4: fix rec_len verify error scsi: pm8001: Setup IRQs on resume scsi: megaraid_sas: Fix deadlock on firmware crashdump ata: libahci: clear pending interrupt status ata: libata: disallow dev-initiated LPM transitions to unsupported states i2c: aspeed: Reset the i2c controller when timeout occurs tracefs: Add missing lockdown check to tracefs_create_dir() nfsd: fix change_info in NFSv4 RENAME replies selinux: fix handling of empty opts in selinux_fs_context_submount() tracing: Have option files inc the trace array ref count tracing: Have current_trace inc the trace array ref count tracing: Increase trace array ref count on enable and filter files tracing: Have event inject files inc the trace array ref count tracing: Have tracing_max_latency inc the trace array ref count btrfs: check for BTRFS_FS_ERROR in pending ordered assert btrfs: release path before inode lookup during the ino lookup ioctl btrfs: fix a compilation error if DEBUG is defined in btree_dirty_folio btrfs: fix lockdep splat and potential deadlock after failure running delayed items dm: don't attempt to queue IO under RCU protection Revert "drm/amd: Disable S/G for APUs when 64GB or more host memory" md: Put the right device in md_seq_next nvme: avoid bogus CRTO values io_uring/net: fix iter retargeting for selected buf ovl: fix incorrect fdput() on aio completion ovl: fix failed copyup of fileattr on a symlink attr: block mode changes of symlinks Revert "SUNRPC: Fail faster on bad verifier" md/raid1: fix error: ISO C90 forbids mixed declarations samples/hw_breakpoint: fix building without module unloading x86/purgatory: Remove LTO flags x86/boot/compressed: Reserve more memory for page tables panic: Reenable preemption in WARN slowpath scsi: lpfc: Fix the NULL vs IS_ERR() bug for debugfs_create_file() scsi: target: core: Fix target_cmd_counter leak riscv: kexec: Align the kexeced kernel entry x86/ibt: Suppress spurious ENDBR selftests: tracing: Fix to unmount tracefs for recovering environment scsi: qla2xxx: Fix NULL vs IS_ERR() bug for debugfs_create_dir() drm: gm12u320: Fix the timeout usage for usb_bulk_msg() nvmet-tcp: pass iov_len instead of sg->length to bvec_set_page() nvmet: use bvec_set_page to initialize bvecs block: factor out a bvec_set_page helper btrfs: compare the correct fsid/metadata_uuid in btrfs_validate_super btrfs: add a helper to read the superblock metadata_uuid MIPS: Use "grep -E" instead of "egrep" misc: fastrpc: Fix incorrect DMA mapping unmap request misc: fastrpc: Prepare to dynamic dma-buf locking specification dma-buf: Add unlocked variant of attachment-mapping functions printk: Consolidate console deferred printing printk: Keep non-panic-CPUs out of console lock interconnect: Fix locking for runpm vs reclaim kobject: Add sanity check for kset->kobj.ktype in kset_register() media: pci: ipu3-cio2: Initialise timing struct to avoid a compiler warning usb: chipidea: add workaround for chipidea PEC bug usb: ehci: add workaround for chipidea PORTSC.PEC bug misc: open-dice: make OPEN_DICE depend on HAS_IOMEM serial: cpm_uart: Avoid suspicious locking scsi: target: iscsi: Fix buffer overflow in lio_target_nacl_info_show() tools: iio: iio_generic_buffer: Fix some integer type and calculation usb: gadget: fsl_qe_udc: validate endpoint index for ch9 udc usb: cdns3: Put the cdns set active part outside the spin lock media: pci: cx23885: replace BUG with error return media: tuners: qt1010: replace BUG_ON with a regular error scsi: lpfc: Abort outstanding ELS cmds when mailbox timeout error is detected media: dvb-usb-v2: gl861: Fix null-ptr-deref in gl861_i2c_master_xfer media: az6007: Fix null-ptr-deref in az6007_i2c_xfer() media: anysee: fix null-ptr-deref in anysee_master_xfer media: af9005: Fix null-ptr-deref in af9005_i2c_xfer media: dw2102: Fix null-ptr-deref in dw2102_i2c_transfer() media: dvb-usb-v2: af9035: Fix null-ptr-deref in af9035_i2c_master_xfer media: mdp3: Fix resource leaks in of_find_device_by_node PCI: fu740: Set the number of MSI vectors PCI: vmd: Disable bridge window for domain reset powerpc/pseries: fix possible memory leak in ibmebus_bus_init() ARM: 9317/1: kexec: Make smp stop calls asynchronous PCI: dwc: Provide deinit callback for i.MX jfs: fix invalid free of JFS_IP(ipimap)->i_imap in diUnmount fs/jfs: prevent double-free in dbUnmount() after failed jfs_remount() ext2: fix datatype of block number in ext2_xattr_set2() md: raid1: fix potential OOB in raid1_remove_disk() bus: ti-sysc: Configure uart quirks for k3 SoC drm/mediatek: dp: Change logging to dev for mtk_dp_aux_transfer() drm/exynos: fix a possible null-pointer dereference due to data race in exynos_drm_crtc_atomic_disable() drm/amd/display: Blocking invalid 420 modes on HDMI TMDS for DCN314 drm/amd/display: Blocking invalid 420 modes on HDMI TMDS for DCN31 drm/amd/display: Use DTBCLK as refclk instead of DPREFCLK ALSA: hda: intel-dsp-cfg: add LunarLake support ASoC: Intel: sof_sdw: Update BT offload config for soundwire config ASoC: SOF: topology: simplify code to prevent static analysis warnings drm/amd/display: Fix underflow issue on 175hz timing samples/hw_breakpoint: Fix kernel BUG 'invalid opcode: 0000' arm64: dts: qcom: sm8250-edo: correct ramoops pmsg-size arm64: dts: qcom: sm8150-kumano: correct ramoops pmsg-size arm64: dts: qcom: sm6350: correct ramoops pmsg-size arm64: dts: qcom: sm6125-pdx201: correct ramoops pmsg-size drm/edid: Add quirk for OSVR HDK 2.0 drm/bridge: tc358762: Instruct DSI host to generate HSE packets libbpf: Free btf_vmlinux when closing bpf_object wifi: mac80211_hwsim: drop short frames wifi: mac80211: check for station first in client probe wifi: cfg80211: ocb: don't leave if not joined wifi: cfg80211: reject auth/assoc to AP with our address netfilter: ebtables: fix fortify warnings in size_entry_mwt() wifi: mac80211: check S1G action frame size alx: fix OOB-read compiler warning mmc: sdhci-esdhc-imx: improve ESDHC_FLAG_ERR010450 tpm_tis: Resend command to recover from data transfer errors netlink: convert nlk->flags to atomic flags Bluetooth: Fix hci_suspend_sync crash crypto: lib/mpi - avoid null pointer deref in mpi_cmp_ui() net/ipv4: return the real errno instead of -EINVAL net: Use sockaddr_storage for getsockopt(SO_PEERNAME). can: sun4i_can: Add support for the Allwinner D1 can: sun4i_can: Add acceptance register quirk wifi: wil6210: fix fortify warnings mt76: mt7921: don't assume adequate headroom for SDIO headers wifi: mwifiex: fix fortify warning wifi: ath9k: fix printk specifier wifi: ath9k: fix fortify warnings ice: Don't tx before switchdev is fully configured crypto: lrw,xts - Replace strlcpy with strscpy devlink: remove reload failed checks in params get/set callbacks selftests/nolibc: fix up kernel parameters support ACPI: x86: s2idle: Catch multiple ACPI_TYPE_PACKAGE objects hw_breakpoint: fix single-stepping when using bpf_overflow_handler perf/imx_ddr: speed up overflow frequency of cycle perf/smmuv3: Enable HiSilicon Erratum 162001900 quirk for HIP08/09 ACPI: video: Add backlight=native DMI quirk for Lenovo Ideapad Z470 scftorture: Forgive memory-allocation failure if KASAN rcuscale: Move rcu_scale_writer() schedule_timeout_uninterruptible() to _idle() kernel/fork: beware of __put_task_struct() calling context ACPICA: Add AML_NO_OPERAND_RESOLVE flag to Timer locks: fix KASAN: use-after-free in trace_event_raw_event_filelock_lock btrfs: output extra debug info if we failed to find an inline backref autofs: fix memory leak of waitqueues in autofs_catatonic_mode Linux 6.1.54 drm/amd/display: Fix a bug when searching for insert_above_mpcc MIPS: Only fiddle with CHECKFLAGS if `need-compiler' kcm: Fix error handling for SOCK_DGRAM in kcm_sendmsg(). ixgbe: fix timestamp configuration code tcp: Fix bind() regression for v4-mapped-v6 non-wildcard address. tcp: Fix bind() regression for v4-mapped-v6 wildcard address. tcp: Factorise sk_family-independent comparison in inet_bind2_bucket_match(_addr_any). ipv6: Remove in6addr_any alternatives. ipv6: fix ip6_sock_set_addr_preferences() typo net: macb: fix sleep inside spinlock net: macb: Enable PTP unicast net/tls: do not free tls_rec on async operation in bpf_exec_tx_verdict() platform/mellanox: NVSW_SN2201 should depend on ACPI platform/mellanox: mlxbf-pmc: Fix reading of unprogrammed events platform/mellanox: mlxbf-pmc: Fix potential buffer overflows platform/mellanox: mlxbf-tmfifo: Drop jumbo frames platform/mellanox: mlxbf-tmfifo: Drop the Rx packet if no more descriptors kcm: Fix memory leak in error path of kcm_sendmsg() r8152: check budget for r8152_poll() net: dsa: sja1105: block FDB accesses that are concurrent with a switch reset net: dsa: sja1105: serialize sja1105_port_mcast_flood() with other FDB accesses net: dsa: sja1105: fix multicast forwarding working only for last added mdb entry net: dsa: sja1105: propagate exact error code from sja1105_dynamic_config_poll_valid() net: dsa: sja1105: hide all multicast addresses from "bridge fdb show" net:ethernet:adi:adin1110: Fix forwarding offload net: ethernet: adi: adin1110: use eth_broadcast_addr() to assign broadcast address hsr: Fix uninit-value access in fill_frame_info() net: ethernet: mtk_eth_soc: fix possible NULL pointer dereference in mtk_hwlro_get_fdir_all() net: ethernet: mvpp2_main: fix possible OOB write in mvpp2_ethtool_get_rxnfc() net: stmmac: fix handling of zero coalescing tx-usecs net/smc: use smc_lgr_list.lock to protect smc_lgr_list.list iterate in smcr_port_add selftests: Keep symlinks, when possible kselftest/runner.sh: Propagate SIGTERM to runner child net: ipv4: fix one memleak in __inet_del_ifa() kunit: Fix wild-memory-access bug in kunit_free_suite_set() drm/amdgpu: register a dirty framebuffer callback for fbcon drm/amd/display: Remove wait while locked drm/amd/display: always switch off ODM before committing more streams perf hists browser: Fix the number of entries for 'e' key perf tools: Handle old data in PERF_RECORD_ATTR perf test shell stat_bpf_counters: Fix test on Intel perf hists browser: Fix hierarchy mode header MIPS: Fix CONFIG_CPU_DADDI_WORKAROUNDS `modules_install' regression KVM: SVM: Skip VMSA init in sev_es_init_vmcb() if pointer is NULL KVM: SVM: Set target pCPU during IRTE update if target vCPU is running KVM: nSVM: Load L1's TSC multiplier based on L1 state, not L2 state KVM: nSVM: Check instead of asserting on nested TSC scaling support KVM: SVM: Get source vCPUs from source VM for SEV-ES intrahost migration KVM: SVM: Don't inject #UD if KVM attempts to skip SEV guest insn KVM: SVM: Take and hold ir_list_lock when updating vCPU's Physical ID entry drm/amd/display: prevent potential division by zero errors drm/amd/display: enable cursor degamma for DCN3+ DRM legacy gamma mtd: rawnand: brcmnand: Fix ECC level field setting for v7.2 controller mtd: rawnand: brcmnand: Fix potential false time out warning mtd: spi-nor: Correct flags for Winbond w25q128 mtd: rawnand: brcmnand: Fix potential out-of-bounds access in oob write mtd: rawnand: brcmnand: Fix crash during the panic_write drm/mxsfb: Disable overlay plane in mxsfb_plane_overlay_atomic_disable() btrfs: use the correct superblock to compare fsid in btrfs_validate_super btrfs: zoned: re-enable metadata over-commit for zoned mode btrfs: set page extent mapped after read_folio in relocate_one_page btrfs: don't start transaction when joining with TRANS_JOIN_NOSTART btrfs: free qgroup rsv on io failure btrfs: fix start transaction qgroup rsv double free btrfs: zoned: do not zone finish data relocation block group fuse: nlookup missing decrement in fuse_direntplus_link ata: pata_ftide010: Add missing MODULE_DESCRIPTION ata: sata_gemini: Add missing MODULE_DESCRIPTION ata: pata_falcon: fix IO base selection for Q40 ata: ahci: Add Elkhart Lake AHCI controller hwspinlock: qcom: add missing regmap config for SFPB MMIO implementation lib: test_scanf: Add explicit type cast to result initialization in test_number_prefix() f2fs: avoid false alarm of circular locking f2fs: flush inode if atomic file is aborted ext4: fix memory leaks in ext4_fname_{setup_filename,prepare_lookup} ext4: add correct group descriptors and reserved GDT blocks to system zone jbd2: correct the end of the journal recovery scan range jbd2: check 'jh->b_transaction' before removing it from checkpoint jbd2: fix checkpoint cleanup performance regression dmaengine: sh: rz-dmac: Fix destination and source data size setting clocksource/drivers/arm_arch_timer: Disable timer before programming CVAL ARC: atomics: Add compiler barrier to atomic operations... net/mlx5: Free IRQ rmap and notifier on kernel shutdown Multi-gen LRU: avoid race in inc_min_seq() sh: boards: Fix CEU buffer size passed to dma_declare_coherent_memory() net: hns3: remove GSO partial feature bit net: hns3: fix the port information display when sfp is absent net: hns3: fix invalid mutex between tc qdisc and dcb ets command issue net: hns3: fix debugfs concurrency issue between kfree buffer and read net: hns3: fix byte order conversion issue in hclge_dbg_fd_tcam_read() net: hns3: fix tx timeout issue netfilter: nfnetlink_osf: avoid OOB read netfilter: nftables: exthdr: fix 4-byte stack OOB write bpf: Assign bpf_tramp_run_ctx::saved_run_ctx before recursion check. bpf: Invoke __bpf_prog_exit_sleepable_recur() on recursion in kern_sys_bpf(). bpf: Remove prog->active check for bpf_lsm and bpf_iter net: dsa: sja1105: complete tc-cbs offload support on SJA1110 net: dsa: sja1105: fix -ENOSPC when replacing the same tc-cbs too many times net: dsa: sja1105: fix bandwidth discrepancy between tc-cbs software and offload ip_tunnels: use DEV_STATS_INC() idr: fix param name in idr_alloc_cyclic() doc s390/zcrypt: don't leak memory if dev_set_name() fails igb: Change IGB_MIN to allow set rx/tx value between 64 and 80 igbvf: Change IGBVF_MIN to allow set rx/tx value between 64 and 80 igc: Change IGC_MIN to allow set rx/tx value between 64 and 80 octeontx2-af: Fix truncation of smq in CN10K NIX AQ enqueue mbox handler kcm: Destroy mutex in kcm_exit_net() net: sched: sch_qfq: Fix UAF in qfq_dequeue() af_unix: Fix data race around sk->sk_err. af_unix: Fix data-races around sk->sk_shutdown. af_unix: Fix data-race around unix_tot_inflight. af_unix: Fix data-races around user->unix_inflight. bpf, sockmap: Fix skb refcnt race after locking changes net: phy: micrel: Correct bit assignments for phy_device flags net: ipv6/addrconf: avoid integer underflow in ipv6_create_tempaddr veth: Fixing transmit return status for dropped packets gve: fix frag_list chaining igb: disable virtualization features on 82580 ipv6: ignore dst hint for multipath routes ipv4: ignore dst hint for multipath routes mptcp: annotate data-races around msk->rmem_fwd_alloc net: annotate data-races around sk->sk_forward_alloc net: use sk_forward_alloc_get() in sk_get_meminfo() drm/i915/gvt: Drop unused helper intel_vgpu_reset_gtt() drm/i915/gvt: Put the page reference obtained by KVM's gfn_to_pfn() drm/i915/gvt: Verify pfn is "valid" before dereferencing "struct page" xsk: Fix xsk_diag use-after-free error during socket cleanup net: fib: avoid warn splat in flow dissector net: read sk->sk_family once in sk_mc_loop() ipv4: annotate data-races around fi->fib_dead sctp: annotate data-races around sk->sk_wmem_queued net/sched: fq_pie: avoid stalls in fq_pie_timer() smb: propagate error code of extract_sharename() cifs: use fs_context for automounts blk-throttle: consider 'carryover_ios/bytes' in throtl_trim_slice() blk-throttle: use calculate_io/bytes_allowed() for throtl_trim_slice() drm/i915: mark requests for GuC virtual engines to avoid use-after-free perf test stat_bpf_counters_cgrp: Enhance perf stat cgroup BPF counter test perf test stat_bpf_counters_cgrp: Fix shellcheck issue about logical operators pwm: lpc32xx: Remove handling of PWM channels watchdog: intel-mid_wdt: add MODULE_ALIAS() to allow auto-load perf top: Don't pass an ERR_PTR() directly to perf_session__delete() perf vendor events: Drop STORES_PER_INST metric event for power10 platform perf vendor events: Drop some of the JSON/events for power10 platform perf vendor events: Update the JSON/events descriptions for power10 platform x86/virt: Drop unnecessary check on extended CPUID level in cpu_has_svm() perf annotate bpf: Don't enclose non-debug code with an assert() Input: tca6416-keypad - fix interrupt enable disbalance Input: tca6416-keypad - always expect proper IRQ number in i2c client backlight: gpio_backlight: Drop output GPIO direction check for initial power state pwm: atmel-tcb: Fix resource freeing in error path and remove pwm: atmel-tcb: Harmonize resource allocation order pwm: atmel-tcb: Convert to platform remove callback returning void perf trace: Really free the evsel->priv area perf trace: Use zfree() to reduce chances of use after free Input: iqs7222 - configure power mode before triggering ATI kconfig: fix possible buffer overflow mailbox: qcom-ipcc: fix incorrect num_chans counting gfs2: low-memory forced flush fixes gfs2: Switch to wait_event in gfs2_logd tpm_crb: Fix an error handling path in crb_acpi_add() kbuild: do not run depmod for 'make modules_sign' kbuild: rpm-pkg: define _arch conditionally net: deal with integer overflows in kmalloc_reserve() net: factorize code in kmalloc_reserve() net: remove osize variable in __alloc_skb() net: add SKB_HEAD_ALIGN() helper bus: mhi: host: Skip MHI reset if device is in RDDM NFSv4/pnfs: minor fix for cleanup path in nfs4_get_device_info NFS: Fix a potential data corruption clk: qcom: mss-sc7180: fix missing resume during probe clk: qcom: q6sstop-qcs404: fix missing resume during probe clk: qcom: lpasscc-sc7280: fix missing resume during probe clk: qcom: dispcc-sm8450: fix runtime PM imbalance on probe errors soc: qcom: qmi_encdec: Restrict string length in decode clk: qcom: gcc-mdm9615: use proper parent for pll0_vote clock clk: imx: pll14xx: align pdiv with reference manual clk: imx: pll14xx: dynamically configure PLL for 393216000/361267200Hz dt-bindings: clock: xlnx,versal-clk: drop select:false pinctrl: cherryview: fix address_space_handler() argument cifs: update desired access while requesting for directory lease parisc: led: Reduce CPU overhead for disk & lan LED computation parisc: led: Fix LAN receive and transmit LEDs lib/test_meminit: allocate pages up to order MAX_ORDER mm: hugetlb_vmemmap: fix a race between vmemmap pmd split memcg: drop kmem.limit_in_bytes send channel sequence number in SMB3 requests after reconnects arm64: dts: renesas: rzg2l: Fix txdv-skew-psec typos clk: qcom: turingcc-qcs404: fix missing resume during probe ASoC: tegra: Fix SFC conversion for few rates drm/ast: Fix DRAM init on AST2200 clk: qcom: camcc-sc7180: fix async resume during probe fbdev/ep93xx-fb: Do not assign to struct fb_info.dev null_blk: fix poll request timeout handling scsi: qla2xxx: Fix firmware resource tracking scsi: qla2xxx: Error code did not return to upper layer scsi: qla2xxx: Fix smatch warn for qla_init_iocb_limit() scsi: qla2xxx: Flush mailbox commands on chip reset scsi: qla2xxx: Remove unsupported ql2xenabledif option scsi: qla2xxx: Fix TMF leak through scsi: qla2xxx: Fix session hang in gnl scsi: qla2xxx: Turn off noisy message log scsi: qla2xxx: Fix erroneous link up failure scsi: qla2xxx: Fix command flush during TMF scsi: qla2xxx: fix inconsistent TMF timeout scsi: qla2xxx: Fix deletion race condition scsi: qla2xxx: Limit TMF to 8 per function scsi: qla2xxx: Adjust IOCB resource on qpair create drm/virtio: Conditionally allocate virtio_gpu_fence io_uring: Don't set affinity on a dying sqpoll thread io_uring/sqpoll: fix io-wq affinity when IORING_SETUP_SQPOLL is used io_uring: break out of iowq iopoll on teardown io_uring/net: don't overflow multishot accept io_uring: revert "io_uring fix multishot accept ordering" io_uring: always lock in io_apoll_task_func Multi-gen LRU: fix per-zone reclaim mm: multi-gen LRU: rename lrugen->lists[] to lrugen->folios[] net/ipv6: SKB symmetric hash should incorporate transport ports ANDROID: GKI: fix up merge issue in drivers/scsi/storvsc_drv.c Linux 6.1.53 udf: initialize newblock to 0 clk: Avoid invalid function names in CLK_OF_DECLARE() treewide: Fix probing of devices in DT overlays clk: Mark a fwnode as initialized when using CLK_OF_DECLARE() macro md: fix regression for null-ptr-deference in __md_stop() NFSv4.2: Rework scratch handling for READ_PLUS (again) NFSv4.2: Fix a potential double free with READ_PLUS md: Free resources in __md_stop Revert "drm/amd/display: Do not set drr on pipe commit" tracing: Zero the pipe cpumask on alloc to avoid spurious -EBUSY serial: sc16is7xx: fix regression with GPIO configuration serial: sc16is7xx: remove obsolete out_thread label perf/x86/uncore: Correct the number of CHAs on EMR x86/sgx: Break up long non-preemptible delays in sgx_vepc_release() USB: core: Fix oversight in SuperSpeed initialization USB: core: Fix race by not overwriting udev->descriptor in hub_port_init() USB: core: Change usb_get_device_descriptor() API USB: core: Unite old scheme and new scheme descriptor reads usb: typec: bus: verify partner exists in typec_altmode_attention usb: typec: tcpm: set initial svdm version based on pd revision of: property: fw_devlink: Add a devlink for panel followers cpufreq: brcmstb-avs-cpufreq: Fix -Warray-bounds bug crypto: stm32 - fix loop iterating through scatterlist for DMA s390/dasd: fix string length handling s390/ipl: add missing secure/has_secure file to ipl type 'unknown' s390/dcssblk: fix kernel crash with list_add corruption arm64: sdei: abort running SDEI handlers during crash pstore/ram: Check start of empty przs during init mmc: renesas_sdhi: register irqs before registering controller platform/chrome: chromeos_acpi: print hex string for ACPI_TYPE_BUFFER x86/MCE: Always save CS register on AMD Zen IF Poison errors fsverity: skip PKCS#7 parser when keyring is empty net: handle ARPHRD_PPP in dev_is_mac_header_xmit() X.509: if signature is unsupported skip validation r8169: fix ASPM-related issues on a number of systems with NIC version from RTL8168h x86/sev: Make enc_dec_hypercall() accept a size instead of npages dccp: Fix out of bounds access in DCCP error handler dlm: fix plock lookup when using multiple lockspaces bpf: Fix issue in verifying allow_ptr_leaks drm/amd/display: Add smu write msg id fail retry process parisc: Fix /proc/cpuinfo output for lscpu procfs: block chmod on /proc/thread-self/comm block: don't add or resize partition on the disk with GENHD_FL_NO_PART Revert "PCI: Mark NVIDIA T4 GPUs to avoid bus reset" ntb: Fix calculation ntb_transport_tx_free_entry() ntb: Clean up tx tail index on link down ntb: Drop packets when qp link is down PCI/PM: Only read PCI_PM_CTRL register when available PCI: hv: Fix a crash in hv_pci_restore_msi_msg() during hibernation PCI: Free released resource after coalescing scsi: mpt3sas: Perform additional retries if doorbell read returns 0 Revert "scsi: qla2xxx: Fix buffer overrun" media: venus: hfi_venus: Write to VIDC_CTRL_INIT after unmasking interrupts media: dvb: symbol fixup for dvb_attach() ALSA: hda/cirrus: Fix broken audio on hardware with two CS42L42 codecs. arm64: csum: Fix OoB access in IP checksum code for negative lengths i3c: master: svc: fix probe failure when no i3c device exist LoongArch: mm: Add p?d_leaf() definitions xtensa: PMU: fix base address for the newer hardware drm/amd/display: register edp_backlight_control() for DCN301 backlight/lv5207lp: Compare against struct fb_info.device backlight/bd6107: Compare against struct fb_info.device backlight/gpio_backlight: Compare against struct fb_info.device io_uring: break iopolling on signal XArray: Do not return sibling entries from xa_load() ARM: OMAP2+: Fix -Warray-bounds warning in _pwrdm_state_switch() ipmi_si: fix a memleak in try_smi_init() PCI: rockchip: Use 64-bit mask on MSI 64-bit PCI address media: i2c: Add a camera sensor top level menu media: i2c: ccs: Check rules is non-NULL cpu/hotplug: Prevent self deadlock on CPU hot-unplug mm/vmalloc: add a safer version of find_vm_area() for debug scsi: core: Fix the scsi_set_resid() documentation printk: ringbuffer: Fix truncating buffer size min_t cast rcu: dump vmalloc memory info safely ALSA: pcm: Fix missing fixup call in compat hw_refine ioctl PM / devfreq: Fix leak in devfreq_dev_release() igb: set max size RX buffer when store bad packet is enabled skbuff: skb_segment, Call zero copy functions before using skbuff frags netfilter: xt_sctp: validate the flag_info count netfilter: xt_u32: validate user space input netfilter: nft_exthdr: Fix non-linear header modification netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro for ip_set_hash_netportnet.c igmp: limit igmpv3_newpack() packet size to IP_MAX_MTU virtio_ring: fix avail_wrap_counter in virtqueue_add_packed cpufreq: Fix the race condition while updating the transition_task of policy Drivers: hv: vmbus: Don't dereference ACPI root object handle dmaengine: ste_dma40: Add missing IRQ check in d40_probe um: Fix hostaudio build errors mtd: rawnand: fsmc: handle clk prepare error in fsmc_nand_resume() mtd: spi-nor: Check bus width while setting QE bit leds: trigger: tty: Do not use LED_ON/OFF constants, use led_blink_set_oneshot instead leds: Fix BUG_ON check for LED_COLOR_ID_MULTI that is always false leds: multicolor: Use rounded division when calculating color components leds: pwm: Fix error code in led_pwm_create_fwnode() rpmsg: glink: Add check for kstrdup phy/rockchip: inno-hdmi: do not power on rk3328 post pll on reg write phy/rockchip: inno-hdmi: round fractal pixclock in rk3328 recalc_rate phy/rockchip: inno-hdmi: use correct vco_div_5 macro on rk3328 dmaengine: idxd: Modify the dependence of attribute pasid_enabled mtd: rawnand: brcmnand: Fix mtd oobsize tracing: Fix race issue between cpu buffer write and swap tracing: Remove extra space at the end of hwlat_detector/mode x86/speculation: Mark all Skylake CPUs as vulnerable to GDS tick/rcu: Fix false positive "softirq work is pending" messages platform/x86/amd/pmf: Fix a missing cleanup path HID: multitouch: Correct devm device reference for hidinput input_dev name HID: uclogic: Correct devm device reference for hidinput input_dev name HID: logitech-dj: Fix error handling in logi_dj_recv_switch_to_dj_mode() RDMA/efa: Fix wrong resources deallocation order RDMA/siw: Correct wrong debug message RDMA/siw: Balance the reference of cep->kref in the error path Revert "IB/isert: Fix incorrect release of isert connection" amba: bus: fix refcount leak serial: tegra: handle clk prepare error in tegra_uart_hw_init() interconnect: qcom: bcm-voter: Use enable_maks for keepalive voting interconnect: qcom: bcm-voter: Improve enable_mask handling interconnect: qcom: sm8450: Enable sync_state scsi: fcoe: Fix potential deadlock on &fip->ctlr_lock scsi: core: Use 32-bit hostnum in scsi_host_lookup() RDMA/irdma: Prevent zero-length STAG registration coresight: trbe: Fix TRBE potential sleep in atomic context cgroup:namespace: Remove unused cgroup_namespaces_init() Revert "f2fs: fix to do sanity check on extent cache correctly" f2fs: Only lfs mode is allowed with zoned block device feature f2fs: judge whether discard_unit is section only when have CONFIG_BLK_DEV_ZONED f2fs: fix to avoid mmap vs set_compress_option case media: i2c: rdacm21: Fix uninitialized value media: ov2680: Fix regulators being left enabled on ov2680_power_on() errors media: ov2680: Fix ov2680_set_fmt() which == V4L2_SUBDEV_FORMAT_TRY not working media: ov2680: Add ov2680_fill_format() helper function media: ov2680: Don't take the lock for try_fmt calls media: ov2680: Remove VIDEO_V4L2_SUBDEV_API ifdef-s media: ov2680: Fix vflip / hflip set functions media: ov2680: Fix ov2680_bayer_order() media: ov2680: Remove auto-gain and auto-exposure controls media: i2c: ov2680: Set V4L2_CTRL_FLAG_MODIFY_LAYOUT on flips media: ov5640: Fix initial RESETB state and annotate timings media: ov5640: Enable MIPI interface in ov5640_set_power_mipi() HID: input: Support devices sending Eraser without Invert drivers: base: Free devm resources when unregistering a device USB: gadget: f_mass_storage: Fix unused variable warning USB: gadget: core: Add missing kerneldoc for vbus_work docs: ABI: fix spelling/grammar in SBEFIFO timeout interface media: venus: hfi_venus: Only consider sys_idle_indicator on V1 media: go7007: Remove redundant if statement media: cec: core: add adap_unconfigured() callback media: cec: core: add adap_nb_transmit_canceled() callback platform/x86: dell-sysman: Fix reference leak iommu/vt-d: Fix to flush cache of PASID directory table iommu/qcom: Disable and reset context bank before programming fsi: aspeed: Reset master errors after CFAM reset IB/uverbs: Fix an potential error pointer dereference RDMA/hns: Fix CQ and QP cache affinity RDMA/hns: Fix inaccurate error label name in init instance RDMA/hns: Fix incorrect post-send with direct wqe of wr-list RDMA/hns: Fix port active speed iommu/sprd: Add missing force_aperture iommu/mediatek: Fix two IOMMU share pagetable issue iommu/mediatek: Remove unused "mapping" member from mtk_iommu_data extcon: cht_wc: add POWER_SUPPLY dependency kernfs: add stub helper for kernfs_generic_poll() driver core: Call dma_cleanup() on the test_remove path driver core: test_async: fix an error code dma-buf/sync_file: Fix docs syntax interconnect: qcom: qcm2290: Enable sync state coresight: tmc: Explicit type conversions to prevent integer overflow RDMA/irdma: Replace one-element array with flexible-array member scsi: qedf: Do not touch __user pointer in qedf_dbg_fp_int_cmd_read() directly scsi: qedf: Do not touch __user pointer in qedf_dbg_debug_cmd_read() directly scsi: qedf: Do not touch __user pointer in qedf_dbg_stop_io_on_error_cmd_read() directly RDMA/rxe: Fix incomplete state save in rxe_requester RDMA/rxe: Split rxe_run_task() into two subroutines x86/APM: drop the duplicate APM_MINOR_DEV macro serial: sprd: Fix DMA buffer leak issue serial: sprd: Assign sprd_port after initialized to avoid wrong access iio: accel: adxl313: Fix adxl313_i2c_id[] table scsi: qla4xxx: Add length check when parsing nlattrs scsi: be2iscsi: Add length check when parsing nlattrs scsi: iscsi: Add strlen() check in iscsi_if_set{_host}_param() scsi: iscsi: Add length check for nlattr payload scsi: iscsi: Rename iscsi_set_param() to iscsi_if_set_param() scsi: RDMA/srp: Fix residual handling usb: phy: mxs: fix getting wrong state with mxs_phy_is_otg_host() media: mediatek: vcodec: fix resource leaks in vdec_msg_queue_init() media: mediatek: vcodec: fix potential double free media: mediatek: vcodec: Return NULL if no vdec_fb is found media: amphion: ensure the bitops don't cross boundaries media: amphion: fix UNUSED_VALUE issue reported by coverity media: amphion: fix UNINIT issues reported by coverity media: amphion: fix REVERSE_INULL issues reported by coverity media: amphion: fix CHECKED_RETURN issues reported by coverity media: rkvdec: increase max supported height for H.264 media: mtk-jpeg: Fix use after free bug due to uncanceled work media: amphion: add helper function to get id name media: amphion: reinit vpu if reqbufs output 0 dt-bindings: extcon: maxim,max77843: restrict connector properties scsi: hisi_sas: Fix normally completed I/O analysed as failed scsi: hisi_sas: Fix warnings detected by sparse RDMA/siw: Fabricate a GID on tun and loopback devices media: cx24120: Add retval check for cx24120_message_send() media: dvb-usb: m920x: Fix a potential memory leak in m920x_i2c_xfer() media: dib7000p: Fix potential division by zero drivers: usb: smsusb: fix error handling code in smsusb_init_device iommu: rockchip: Fix directory table address encoding iommu/amd/iommu_v2: Fix pasid_state refcount dec hit 0 warning on pasid unbind media: v4l2-core: Fix a potential resource leak in v4l2_fwnode_parse_link() media: i2c: tvp5150: check return value of devm_kasprintf() media: ad5820: Drop unsupported ad5823 from i2c_ and of_device_id tables media: ov5640: fix low resolution image abnormal issue RDMA/qedr: Remove a duplicate assignment in irdma_query_ah() cgroup/cpuset: Inherit parent's load balance state in v2 pNFS: Fix assignment of xprtdata.cred NFSv4.2: fix handling of COPY ERR_OFFLOAD_NO_REQ NFS: Guard against READDIR loop when entry names exceed MAXNAMELEN NFSD: da_addr_body field missing in some GETDEVICEINFO replies fs: lockd: avoid possible wrong NULL parameter jfs: validate max amount of blocks before allocation. ext4: fix unttached inode after power cut with orphan file feature enabled powerpc/iommu: Fix notifiers being shared by PCI and VIO buses powerpc/mpc5xxx: Add missing fwnode_handle_put() powerpc/pseries: Fix hcall tracepoints with JUMP_LABEL=n nfs/blocklayout: Use the passed in gfp flags powerpc/pseries: Rework lppaca_shared_proc() to avoid DEBUG_PREEMPT powerpc: Don't include lppaca.h in paca.h NFSv4.2: Fix READ_PLUS size calculations NFSv4.2: Fix up READ_PLUS alignment NFSv4.2: Fix READ_PLUS smatch warnings NFSv4.2: Rework scratch handling for READ_PLUS wifi: ath10k: Use RMW accessors for changing LNKCTL wifi: ath11k: Use RMW accessors for changing LNKCTL net/mlx5: Use RMW accessors for changing LNKCTL drm/radeon: Use RMW accessors for changing LNKCTL drm/amdgpu: Use RMW accessors for changing LNKCTL powerpc/perf: Convert fsl_emb notifier to state machine callbacks powerpc/fadump: reset dump area size if fadump memory reserve fails nvdimm: Fix dereference after free in register_nvdimm_pmu() nvdimm: Fix memleak of pmu attr_groups in unregister_nvdimm_pmu() vfio/type1: fix cap_migration information leak powerpc/radix: Move some functions into #ifdef CONFIG_KVM_BOOK3S_HV_POSSIBLE clk: imx: composite-8m: fix clock pauses when set_rate would be a no-op clk: imx8mp: fix sai4 clock clk: imx: imx8ulp: update SPLL2 type clk: imx: pllv4: Fix SPLL2 MULT range clk: qcom: gcc-sm8450: Use floor ops for SDCC RCGs PCI/ASPM: Use RMW accessors for changing LNKCTL PCI: pciehp: Use RMW accessors for changing LNKCTL PCI: Add locking to RMW PCI Express Capability Register accessors PCI: Allow drivers to request exclusive config regions pinctrl: mcp23s08: check return value of devm_kasprintf() PCI: Mark NVIDIA T4 GPUs to avoid bus reset PCI: microchip: Correct the DED and SEC interrupt bit offsets clk: qcom: gcc-sm6350: Fix gcc_sdcc2_apps_clk_src clk: qcom: reset: Use the correct type of sleep/delay based on length kvm/vfio: ensure kvg instance stays around in kvm_vfio_group_add() kvm/vfio: Prepare for accepting vfio device fd clk: qcom: gcc-sm8250: Fix gcc_sdcc2_apps_clk_src ext4: avoid potential data overflow in next_linear_group ext4: correct grp validation in ext4_mb_good_group EDAC/igen6: Fix the issue of no error events clk: qcom: gcc-sc7180: Fix up gcc_sdcc2_apps_clk_src clk: sunxi-ng: Modify mismatched function name PCI/DOE: Fix destroy_work_on_stack() race drivers: clk: keystone: Fix parameter judgment in _of_pll_clk_init() PCI: qcom-ep: Switch MHI bus master clock off during L1SS PCI: apple: Initialize pcie->nvecs before use clk: rockchip: rk3568: Fix PLL rate setting for 78.75MHz clk: qcom: gcc-sc8280xp: Add missing GDSCs dt-bindings: clock: qcom,gcc-sc8280xp: Add missing GDSCs clk: qcom: gcc-sc8280xp: Add missing GDSC flags clk: qcom: gcc-sc8280xp: Add EMAC GDSCs clk: qcom: gpucc-sm6350: Fix clock source names clk: qcom: gpucc-sm6350: Introduce index-based clk lookup ipmi:ssif: Fix a memory leak when scanning for an adapter ipmi:ssif: Add check for kstrdup ALSA: ac97: Fix possible error value of *rac97 of: unittest: Fix overlay type in apply/revert check of: overlay: Call of_changeset_init() early ASoC: SOF: amd: clear dsp to host interrupt status md: raid0: account for split bio in iostat accounting md/raid0: Fix performance regression for large sequential writes md/raid0: Factor out helper for mapping and submitting a bio md: add error_handlers for raid0 and linear firmware: cs_dsp: Fix new control name check md/raid5-cache: fix null-ptr-deref for r5l_flush_stripe_to_raid() md/raid5-cache: fix a deadlock in r5l_exit_log() bus: ti-sysc: Fix cast to enum warning arm64: dts: qcom: sc8280xp-x13s: Unreserve NC pins arm64: dts: qcom: msm8996: Fix dsi1 interrupts arm64: dts: qcom: msm8998: Add missing power domain to MMSS SMMU arm64: dts: qcom: msm8998: Drop bus clock reference from MMSS SMMU arm64: dts: qcom: apq8016-sbc: Fix ov5640 regulator supply names drm/mediatek: Fix potential memory leak if vmap() fail ARM: dts: qcom: ipq4019: correct SDHCI XO clock drm/mediatek: Remove freeing not dynamic allocated memory bus: ti-sysc: Fix build warning for 64-bit build drm/mediatek: dp: Add missing error checks in mtk_dp_parse_capabilities io_uring: fix drain stalls by invalid SQE block/mq-deadline: use correct way to throttling write requests audit: fix possible soft lockup in __audit_inode_child() drm/msm/a2xx: Call adreno_gpu_init() earlier drm/amd/pm: fix variable dereferenced issue in amdgpu_device_attr_create() smackfs: Prevent underflow in smk_set_cipso() drm/msm/dpu: fix the irq index in dpu_encoder_phys_wb_wait_for_commit_done firmware: meson_sm: fix to avoid potential NULL pointer dereference drm/msm/mdp5: Don't leak some plane state soc: qcom: smem: Fix incompatible types in comparison drm: xlnx: zynqmp_dpsub: Add missing check for dma_set_mask ima: Remove deprecated IMA_TRUSTED_KEYRING Kconfig drm/panel: simple: Add missing connector type and pixel format for AUO T215HVN01 drm/repaper: Reduce temporary buffer size in repaper_fb_dirty() drm/armada: Fix off-by-one error in armada_overlay_get_property() ARM: dts: BCM53573: Fix Tenda AC9 switch CPU port arm64: dts: qcom: sm8150: Fix the I2C7 interrupt of: unittest: fix null pointer dereferencing in of_unittest_find_node_by_name() drm/tegra: dpaux: Fix incorrect return value of platform_get_irq drm/msm: Update dev core dump to not print backwards md/md-bitmap: hold 'reconfig_mutex' in backlog_store() md/md-bitmap: remove unnecessary local variable in backlog_store() md/raid10: use dereference_rdev_and_rrdev() to get devices md/raid10: factor out dereference_rdev_and_rrdev() md: restore 'noio_flag' for the last mddev_resume() md: Change active_io to percpu md: Factor out is_md_suspended helper drm/amdgpu: Update min() to min_t() in 'amdgpu_info_ioctl' arm64: dts: qcom: msm8996-gemini: fix touchscreen VIO supply arm64: dts: qcom: sdm845: Fix the min frequency of "ice_core_clk" arm64: dts: qcom: sdm845: Add missing RPMh power domain to GCC ARM: dts: BCM53573: Fix Ethernet info for Luxul devices drm: adv7511: Fix low refresh rate register for ADV7533/5 ARM: dts: samsung: s5pv210-smdkv210: correct ethernet reg addresses (split) ARM: dts: s5pv210: add dummy 5V regulator for backlight on SMDKv210 ARM: dts: samsung: s3c6410-mini6410: correct ethernet reg addresses (split) drm/bridge: anx7625: Use common macros for HDCP capabilities drm/bridge: anx7625: Use common macros for DP power sequencing commands x86/mm: Fix PAT bit missing from page protection modify mask block: don't allow enabling a cache on devices that don't support it block: cleanup queue_wc_store drm/etnaviv: fix dumping of active MMU context arm64: tegra: Fix HSUART for Smaug arm64: dts: qcom: pmi8994: Add missing OVP interrupt arm64: dts: qcom: pm660l: Add missing short interrupt arm64: dts: qcom: pm6150l: Add missing short interrupt arm64: dts: qcom: sm8250-sony-xperia: correct GPIO keys wakeup again arm64: tegra: Fix HSUART for Jetson AGX Orin ARM: dts: BCM53573: Use updated "spi-gpio" binding properties ARM: dts: BCM53573: Add cells sizes to PCIe node ARM: dts: BCM53573: Drop nonexistent #usb-cells drm/amdgpu: avoid integer overflow warning in amdgpu_device_resize_fb_bar() firmware: ti_sci: Use system_state to determine polling ARM: dts: stm32: Add missing detach mailbox for DHCOM SoM ARM: dts: stm32: Update to generic ADC channel binding on DHSOM systems ARM: dts: stm32: Add missing detach mailbox for Odyssey SoM ARM: dts: stm32: YAML validation fails for Odyssey Boards ARM: dts: stm32: Add missing detach mailbox for emtrion emSBC-Argon ARM: dts: stm32: adopt generic iio bindings for adc channels on emstamp-argon ARM: dts: stm32: YAML validation fails for Argon Boards ARM: dts: stm32: Rename mdio0 to mdio arm64: dts: qcom: sm8250: Mark PCIe hosts as DMA coherent arm64: dts: qcom: pmk8350: fix ADC-TM compatible string arm64: dts: qcom: pmr735b: fix thermal zone name arm64: dts: qcom: pm8350b: fix thermal zone name arm64: dts: qcom: pm8350: fix thermal zone name arm64: dts: qcom: sm8350: Use proper CPU compatibles arm64: dts: qcom: sm8350: Add missing LMH interrupts to cpufreq arm64: dts: qcom: sm8350: Fix CPU idle state residency times arm64: dts: qcom: sdm845-tama: Set serial indices and stdout-path arm64: dts: qcom: msm8996: Add missing interrupt to the USB2 controller arm64: dts: qcom: sc8280xp: Add missing SCM interconnect arm64: dts: qcom: sc8280xp-crd: Correct vreg_misc_3p3 GPIO arm64: dts: qcom: sm8250-edo: Rectify gpio-keys arm64: dts: qcom: sm8250-edo: Add GPIO line names for PMIC GPIOs arm64: dts: qcom: sm8250-edo: Add gpio line names for TLMM arm64: dts: qcom: msm8916-l8150: correct light sensor VDDIO supply arm64: dts: qcom: sm8250: correct dynamic power coefficients arm64: dts: qcom: sm6350: Fix ZAP region soc: qcom: ocmem: Fix NUM_PORTS & NUM_MACROS macros soc: qcom: ocmem: Add OCMEM hardware version print ASoC: stac9766: fix build errors with REGMAP_AC97 drm/hyperv: Fix a compilation issue because of not including screen_info.h drm/amd/display: Do not set drr on pipe commit quota: fix dqput() to follow the guarantees dquot_srcu should provide quota: add new helper dquot_active() quota: rename dquot_active() to inode_quota_active() quota: factor out dquot_write_dquot() ASoC: cs43130: Fix numerator/denominator mixup drm/bridge: tc358764: Fix debug print parameter order netrom: Deny concurrent connect(). net/sched: sch_hfsc: Ensure inner classes have fsc curve sfc: Check firmware supports Ethernet PTP filter cteonxt2-pf: Fix backpressure config for multiple PFC priorities to work simultaneously octeontx2-pf: Fix PFC TX scheduler free octeontx2-pf: Refactor schedular queue alloc/free calls hwmon: (tmp513) Fix the channel number in tmp51x_is_visible() mlxsw: core_hwmon: Adjust module label names based on MTCAP sensor counter mlxsw: i2c: Limit single transaction buffer size mlxsw: i2c: Fix chunk size setting in output mailbox buffer net: arcnet: Do not call kfree_skb() under local_irq_disable() ice: avoid executing commands on other ports when driving sync wifi: ath9k: use IS_ERR() with debugfs_create_dir() arm64: mm: use ptep_clear() instead of pte_clear() in clear_flush() Bluetooth: btusb: Do not call kfree_skb() under spin_lock_irqsave() wifi: mwifiex: avoid possible NULL skb pointer dereference mac80211: make ieee80211_tx_info padding explicit wifi: nl80211/cfg80211: add forgotten nla_policy for BSS color attribute wifi: ath9k: protect WMI command response buffer replacement with a lock wifi: ath9k: fix races between ath9k_wmi_cmd and ath9k_wmi_ctrl_rx samples/bpf: fix broken map lookup probe samples/bpf: fix bio latency check with tracepoint ARM: dts: Add .dts files missing from the build wifi: mwifiex: Fix missed return in oob checks failed path wifi: mwifiex: fix memory leak in mwifiex_histogram_read() net: annotate data-races around sk->sk_lingertime fs: ocfs2: namei: check return value of ocfs2_add_entry() lwt: Check LWTUNNEL_XMIT_CONTINUE strictly lwt: Fix return values of BPF xmit ops hwrng: iproc-rng200 - Implement suspend and resume calls crypto: caam - fix unchecked return value error ice: ice_aq_check_events: fix off-by-one check when filling buffer net-memcg: Fix scope of sockmem pressure indicators selftests/bpf: Clean up fmod_ret in bench_rename test script selftests/bpf: Fix repeat option when kfunc_call verification fails net: tcp: fix unexcepted socket die when snd_wnd is 0 Bluetooth: hci_sync: Avoid use-after-free in dbg for hci_add_adv_monitor() Bluetooth: hci_sync: Don't double print name in add/remove adv_monitor Bluetooth: Fix potential use-after-free when clear keys Bluetooth: nokia: fix value check in nokia_bluetooth_serdev_probe() crypto: api - Use work queue in crypto_destroy_instance crypto: stm32 - Properly handle pm_runtime_get failing kbuild: rust_is_available: fix confusion when a version appears in the path kbuild: rust_is_available: add check for `bindgen` invocation kbuild: rust_is_available: fix version check when CC has multiple arguments kbuild: rust_is_available: remove -v option selftests/bpf: fix static assert compilation issue for test_cls_*.c wifi: mwifiex: fix error recovery in PCIE buffer descriptor management wifi: mwifiex: Fix OOB and integer underflow when rx packets wifi: mt76: mt7915: fix power-limits while chan_switch can: gs_usb: gs_usb_receive_bulk_callback(): count RX overflow errors also in case of OOM spi: tegra20-sflash: fix to check return value of platform_get_irq() in tegra_sflash_probe() wifi: mt76: testmode: add nla_policy for MT76_TM_ATTR_TX_LENGTH bpf: reject unhashed sockets in bpf_sk_assign udp: re-score reuseport groups when connected sockets are present wifi: mt76: mt7921: fix non-PSC channel scan fail wifi: rtw89: debug: Fix error handling in rtw89_debug_priv_btc_manual_set() regmap: rbtree: Use alloc_flags for memory allocations hwrng: pic32 - use devm_clk_get_enabled hwrng: nomadik - keep clock enabled while hwrng is registered tcp: tcp_enter_quickack_mode() should be static crypto: qat - change value of default idle filter bpf: Fix an error in verifying a field in a union bpf: Clear the probe_addr for uprobe libbpf: Fix realloc API handling in zero-sized edge cases bpftool: Use a local bpf_perf_event_value to fix accessing its fields bpftool: Use a local copy of BPF_LINK_TYPE_PERF_EVENT in pid_iter.bpf.c bpftool: Define a local bpf_perf_link to fix accessing its fields bpftool: use a local copy of perf_event to fix accessing :: Bpf_cookie selftests/bpf: Fix bpf_nf failure upon test rerun cpufreq: powernow-k8: Use related_cpus instead of cpus in driver.exit() x86/efistub: Fix PCI ROM preservation in mixed mode cpufreq: amd-pstate-ut: Fix kernel panic when loading the driver cpufreq: amd-pstate-ut: Remove module parameter access thermal/of: Fix potential uninitialized value access ACPI: x86: s2idle: Fix a logic error parsing AMD constraints table ACPI: x86: s2idle: Post-increment variables when getting constraints irqchip/loongson-eiointc: Fix return value checking of eiointc_index s390/paes: fix PKEY_TYPE_EP11_AES handling for secure keyblobs s390/pkey: fix PKEY_TYPE_EP11_AES handling for sysfs attributes s390/pkey: fix PKEY_TYPE_EP11_AES handling in PKEY_GENSECK2 IOCTL s390/pkey: fix/harmonize internal keyblob headers selftests/futex: Order calls to futex_lock_pi perf/imx_ddr: don't enable counter0 if none of 4 counters are used sched/rt: Fix sysctl_sched_rr_timeslice intial value arm64/fpsimd: Only provide the length to cpufeature for xCR registers arm64/sme: Don't use streaming mode to probe the maximum SME VL x86/decompressor: Don't rely on upper 32 bits of GPRs being preserved sched/psi: Select KERNFS as needed arm64/ptrace: Clean up error handling path in sve_set_common() selftests/resctrl: Close perf value read fd on errors selftests/resctrl: Unmount resctrl FS if child fails to run benchmark selftests/resctrl: Don't leak buffer in fill_cache() selftests/resctrl: Add resctrl.h into build deps OPP: Fix passing 0 to PTR_ERR in _opp_attach_genpd() refscale: Fix uninitalized use of wait_queue_head_t ARM: ptrace: Restore syscall skipping for tracers ARM: ptrace: Restore syscall restart tracing vfs, security: Fix automount superblock LSM init problem, preventing NFS sb sharing selftests/harness: Actually report SKIP for signal tests tmpfs: verify {g,u}id mount options correctly iomap: Remove large folio handling in iomap_invalidate_folio() fs: Fix error checking for d_hash_and_lookup() eventfd: prevent underflow for eventfd semaphores reiserfs: Check the return value from __getblk() tools/resolve_btfids: Fix setting HOSTCFLAGS tools/resolve_btfids: Pass HOSTCFLAGS as EXTRA_CFLAGS to prepare targets tools/resolve_btfids: Tidy HOST_OVERRIDES tools/resolve_btfids: Compile resolve_btfids as host program tools/resolve_btfids: Alter how HOSTCC is forced tools/resolve_btfids: Install subcmd headers tools/resolve_btfids: Use pkg-config to locate libelf tools lib subcmd: Add dependency test to install_headers tools lib subcmd: Make install_headers clearer tools lib subcmd: Add install target Revert "net: macsec: preserve ingress frame ordering" Revert "PCI: tegra194: Enable support for 256 Byte payload" Input: i8042 - add quirk for TUXEDO Gemini 17 Gen1/Clevo PD70PN udf: Handle error when adding extent to a file udf: Check consistency of Space Bitmap Descriptor drm/amd/display: ensure async flips are only accepted for fast updates net: Avoid address overwrite in kernel_connect KVM: x86/mmu: Add "never" option to allow sticky disabling of nx_huge_pages KVM: x86/mmu: Use kstrtobool() instead of strtobool() tpm: Enable hwrng only for Pluton on AMD CPUs crypto: rsa-pkcs1pad - Use helper to set reqsize cpufreq: intel_pstate: set stale CPU frequency to minimum of: property: Simplify of_link_to_phandle() platform/mellanox: Fix mlxbf-tmfifo not handling all virtio CONSOLE notifications tracing: Introduce pipe_cpumask to avoid race on trace_pipes net: sfp: handle 100G/25G active optical cables in sfp_parse_support ALSA: seq: oss: Fix racy open/close of MIDI devices LoongArch: Fix the write_fcsr() macro LoongArch: Let pmd_present() return true when splitting pmd scsi: lpfc: Fix incorrect big endian type assignment in bsg loopback path scsi: storvsc: Always set no_report_opcodes scsi: aacraid: Reply queue mapping to CPUs based on IRQ affinity sctp: handle invalid error codes without calling BUG() cifs: fix max_credits implementation cifs: fix sockaddr comparison in iface_cmp bnx2x: fix page fault following EEH recovery netlabel: fix shift wrapping bug in netlbl_catmap_setlong() wifi: mac80211: Use active_links instead of valid_links in Tx wifi: cfg80211: remove links only on AP drm/amdgpu: Match against exact bootloader status net: hns3: restore user pause configure when disable autoneg scsi: qedi: Fix potential deadlock on &qedi_percpu->p_work_lock scsi: lpfc: Remove reftag check in DIF paths platform/x86/amd/pmf: Fix unsigned comparison with less than zero idmaengine: make FSL_EDMA and INTEL_IDMA64 depends on HAS_IOMEM powerpc/powermac: Use early_* IO variants in via_calibrate_decr() wifi: brcmfmac: Fix field-spanning write in brcmf_scan_params_v2_to_v1() net: usb: qmi_wwan: add Quectel EM05GV2 net: annotate data-races around sk->sk_{rcv|snd}timeo net: dsa: microchip: KSZ9477 register regmap alignment to 32 bit boundaries Revert "wifi: ath6k: silence false positive -Wno-dangling-pointer warning on GCC 12" vmbus_testing: fix wrong python syntax for integer value comparison clk: fixed-mmio: make COMMON_CLK_FIXED_MMIO depend on HAS_IOMEM kprobes: Prohibit probing on CFI preamble symbol security: keys: perform capable check only on privileged operations staging: fbtft: ili9341: use macro FBTFT_REGISTER_SPI_DRIVER ALSA: usb-audio: Update for native DSD support quirks ata: pata_arasan_cf: Use dev_err_probe() instead dev_err() in data_xfer() ovl: Always reevaluate the file signature for IMA drm/amd/display: Exit idle optimizations before attempt to access PHY drm/amd/display: Guard DCN31 PHYD32CLK logic against chip family drm/amd/smu: use AverageGfxclkFrequency* to replace previous GFX Curr Clock platform/x86: huawei-wmi: Silence ambient light sensor platform/x86: asus-wmi: Fix setting RGB mode on some TUF laptops platform/x86: think-lmi: Use kfree_sensitive instead of kfree platform/x86/intel/hid: Add HP Dragonfly G2 to VGBS DMI quirks platform/x86: intel: hid: Always call BTNL ACPI method ALSA: usb-audio: Add quirk for Microsoft Modern Wireless Headset ASoC: atmel: Fix the 8K sample parameter in I2SC master ASoC: rt711-sdca: fix for JD event handling in ClockStop Mode0 ASoC: rt711: fix for JD event handling in ClockStop Mode0 ASoc: codecs: ES8316: Fix DMIC config ASoC: rt5682-sdw: fix for JD event handling in ClockStop Mode0 fs/nls: make load_nls() take a const parameter s390/dasd: fix hanging device after request requeue s390/dasd: use correct number of retries for ERP requests m68k: Fix invalid .section syntax ethernet: atheros: fix return value check in atl1c_tso_csum() ASoC: nau8821: Add DMI quirk mechanism for active-high jack-detect ASoC: da7219: Check for failure reading AAD IRQ events ASoC: da7219: Flush pending AAD IRQ when suspending ksmbd: fix out of bounds in init_smb2_rsp_hdr() ksmbd: no response from compound read ksmbd: validate session id and tree id in compound request ksmbd: fix out of bounds in smb3_decrypt_req() 9p: virtio: make sure 'offs' is initialized in zc_request 9p: virtio: fix unlikely null pointer deref in handle_rerror media: pci: cx23885: fix error handling for cx23885 ATSC boards media: pulse8-cec: handle possible ping error media: amphion: use dev_err_probe phy: qcom-snps-femto-v2: use qcom_snps_hsphy_suspend/resume error code Revert "MIPS: unhide PATA_PLATFORM" media: uapi: HEVC: Add num_delta_pocs_of_ref_rps_idx field powerpc/boot: Disable power10 features after BOOTAFLAGS assignment ALSA: hda/realtek: Enable 4 amplifiers instead of 2 on a HP platform ARM: dts: imx: Set default tuning step for imx7d usdhc Revert "Revert drm/amd/display: Enable Freesync Video Mode by default" scsi: ufs: Try harder to change the power mode Partially revert "drm/amd/display: Fix possible underflow for displays with large vblank" Revert "bridge: Add extack warning when enabling STP in netns." Linux 6.1.52 pinctrl: amd: Don't show `Invalid config param` errors usb: typec: tcpci: clear the fault status bit nilfs2: fix WARNING in mark_buffer_dirty due to discarded buffer reuse nilfs2: fix general protection fault in nilfs_lookup_dirty_data_buffers() dt-bindings: sc16is7xx: Add property to change GPIO function tcpm: Avoid soft reset when partner does not support get_status fsi: master-ast-cf: Add MODULE_FIRMWARE macro firmware: stratix10-svc: Fix an NULL vs IS_ERR() bug in probe serial: sc16is7xx: fix bug when first setting GPIO direction serial: sc16is7xx: fix broken port 0 uart init serial: qcom-geni: fix opp vote on shutdown wifi: mt76: mt7921: fix skb leak by txs missing in AMSDU wifi: mt76: mt7921: do not support one stream on secondary antenna only Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition staging: rtl8712: fix race condition HID: wacom: remove the battery when the EKR is off usb: chipidea: imx: improve logic if samsung,picophy-* parameter is 0 usb: dwc3: meson-g12a: do post init to fix broken usb after resumption ALSA: usb-audio: Fix init call orders for UAC1 USB: serial: option: add FOXCONN T99W368/T99W373 product USB: serial: option: add Quectel EM05G variant (0x030e) modules: only allow symbol_get of EXPORT_SYMBOL_GPL modules rtc: ds1685: use EXPORT_SYMBOL_GPL for ds1685_rtc_poweroff net: enetc: use EXPORT_SYMBOL_GPL for enetc_phc_index mmc: au1xmmc: force non-modular build and remove symbol_get usage ARM: pxa: remove use of symbol_get() ksmbd: reduce descriptor size if remaining bytes is less than request size ksmbd: replace one-element array with flex-array member in struct smb2_ea_info ksmbd: fix slub overflow in ksmbd_decode_ntlmssp_auth_blob() ksmbd: fix wrong DataOffset validation of create context erofs: ensure that the post-EOF tails are all zeroed Linux 6.1.51 thunderbolt: Fix a backport error for display flickering issue kallsyms: Fix kallsyms_selftest failure io_uring/parisc: Adjust pgoff in io_uring mmap() for parisc parisc: sys_parisc: parisc_personality() is called from asm code parisc: Cleanup mmap implementation regarding color alignment lockdep: fix static memory detection even more ARM: module: Use module_init_layout_section() to spot init sections arm64: module: Use module_init_layout_section() to spot init sections arm64: module-plts: inline linux/moduleloader.h module: Expose module_init_layout_section() ACPI: thermal: Drop nocrt parameter Linux 6.1.50 ASoC: amd: vangogh: select CONFIG_SND_AMD_ACP_CONFIG maple_tree: disable mas_wr_append() when other readers are possible ASoC: amd: yc: Fix a non-functional mic on Lenovo 82SJ gpio: sim: pass the GPIO device's software node to irq domain gpio: sim: dispose of irq mappings before destroying the irq_sim domain dma-buf/sw_sync: Avoid recursive lock during fence signal pinctrl: renesas: rza2: Add lock around pinctrl_generic{{add,remove}_group,{add,remove}_function} pinctrl: renesas: rzv2m: Fix NULL pointer dereference in rzv2m_dt_subnode_to_map() pinctrl: renesas: rzg2l: Fix NULL pointer dereference in rzg2l_dt_subnode_to_map() clk: Fix undefined reference to `clk_rate_exclusive_{get,put}' scsi: core: raid_class: Remove raid_component_add() scsi: snic: Fix double free in snic_tgt_create() madvise:madvise_free_pte_range(): don't use mapcount() against large folio for sharing check can: raw: add missing refcount for memory leak fix ublk: remove check IO_URING_F_SQE128 in ublk_ch_uring_cmd thunderbolt: Fix Thunderbolt 3 display flickering issue on 2nd hot plug onwards cgroup/cpuset: Free DL BW in case can_attach() fails sched/deadline: Create DL BW alloc, free & check overflow interface cgroup/cpuset: Iterate only if DEADLINE tasks are present sched/cpuset: Keep track of SCHED_DEADLINE task in cpusets sched/cpuset: Bring back cpuset_mutex cgroup/cpuset: Rename functions dealing with DEADLINE accounting nfsd: use vfs setgid helper nfs: use vfs setgid helper selftests/net: mv bpf/nat6to4.c to net folder hwmon: (aquacomputer_d5next) Add selective 200ms delay after sending ctrl report x86/fpu: Set X86_FEATURE_OSXSAVE feature after enabling OSXSAVE in CR4 x86/fpu: Invalidate FPU state correctly on exec() drm/display/dp: Fix the DP DSC Receiver cap size drm/i915/dgfx: Enable d3cold at s2idle drm/vmwgfx: Fix shader stage validation PCI: acpiphp: Use pci_assign_unassigned_bridge_resources() only for non-root bus media: vcodec: Fix potential array out-of-bounds in encoder queue_setup pinctrl: amd: Mask wake bits on probe again of: dynamic: Refactor action prints to not use "%pOF" inside devtree_lock of: unittest: Fix EXPECT for parse_phandle_with_args_map() test radix tree: remove unused variable riscv: Fix build errors using binutils2.37 toolchains riscv: Handle zicsr/zifencei issue between gcc and binutils lib/clz_ctz.c: Fix __clzdi2() and __ctzdi2() for 32-bit kernels batman-adv: Hold rtnl lock during MTU update via netlink batman-adv: Fix batadv_v_ogm_aggr_send memory leak batman-adv: Fix TT global entry leak when client roamed back batman-adv: Do not get eth header before batadv_check_management_packet batman-adv: Don't increase MTU when set by user batman-adv: Trigger events for auto adjusted MTU selinux: set next pointer before attaching to list nfsd: Fix race to FREE_STATEID and cl_revoked NFS: Fix a use after free in nfs_direct_join_group() mm: memory-failure: fix unexpected return value in soft_offline_page() mm: add a call to flush_cache_vmap() in vmap_pfn() mm/gup: handle cont-PTE hugetlb pages correctly in gup_must_unshare() via GUP-fast ALSA: ymfpci: Fix the missing snd_card_free() call at probe error shmem: fix smaps BUG sleeping while atomic mm,ima,kexec,of: use memblock_free_late from ima_free_kexec_buffer clk: Fix slab-out-of-bounds error in devm_clk_release() NFSv4: Fix dropped lock for racing OPEN and delegation return platform/x86: ideapad-laptop: Add support for new hotkeys found on ThinkBook 14s Yoga ITL wifi: mac80211: limit reorder_buf_filtered to avoid UBSAN warning ibmveth: Use dcbf rather than dcbfl ASoC: cs35l41: Correct amp_gain_tlv values ASoC: amd: yc: Add VivoBook Pro 15 to quirks list for acp6x io_uring/msg_ring: fix missing lock on overflow for IOPOLL io_uring/msg_ring: move double lock/unlock helpers higher up io_uring: extract a io_msg_install_complete helper io_uring: get rid of double locking KVM: x86/mmu: Fix an sign-extension bug with mmu_seq that hangs vCPUs KVM: x86: Preserve TDP MMU roots until they are explicitly invalidated bonding: fix macvlan over alb bond support rtnetlink: Reject negative ifindexes in RTM_NEWLINK netfilter: nf_tables: fix out of memory error handling netfilter: nf_tables: flush pending destroy work before netlink notifier i40e: fix potential NULL pointer dereferencing of pf->vf i40e_sync_vsi_filters() net/sched: fix a qdisc modification with ambiguous command request igc: Fix the typo in the PTM Control macro igb: Avoid starting unnecessary workqueues can: isotp: fix support for transmission of SF without flow control selftests: bonding: do not set port down before adding to bond ice: Fix NULL pointer deref during VF reset Revert "ice: Fix ice VF reset during iavf initialization" ice: fix receive buffer size miscalculation ipv4: fix data-races around inet->inet_id net: validate veth and vxcan peer ifindexes net: bcmgenet: Fix return value check for fixed_phy_register() net: bgmac: Fix return value check for fixed_phy_register() net: dsa: mt7530: fix handling of 802.1X PAE frames selftests: mlxsw: Fix test failure on Spectrum-4 mlxsw: Fix the size of 'VIRT_ROUTER_MSB' mlxsw: reg: Fix SSPR register layout mlxsw: pci: Set time stamp fields also when its type is MIRROR_UTC ipvlan: Fix a reference count leak warning in ipvlan_ns_exit() dccp: annotate data-races in dccp_poll() sock: annotate data-races around prot->memory_pressure net: dsa: felix: fix oversize frame dropping for always closed tc-taprio gates devlink: add missing unregister linecard notification devlink: move code to a dedicated directory octeontx2-af: SDP: fix receive link config tracing: Fix memleak due to race between current_tracer and trace tracing: Fix cpu buffers unavailable due to 'record_disabled' missed drm/i915/gt: Support aux invalidation on all engines drm/i915/gt: Poll aux invalidation register bit on invalidation drm/i915/gt: Ensure memory quiesced before invalidation drm/i915: Add the gen12_needs_ccs_aux_inv helper s390/zcrypt: fix reply buffer calculations for CCA replies s390/zcrypt: remove unnecessary (void *) conversions can: raw: fix lockdep issue in raw_release() can: raw: fix receiver memory leak jbd2: fix a race when checking checkpoint buffer busy jbd2: remove journal_clean_one_cp_list() jbd2: remove t_checkpoint_io_list MIPS: cpu-features: Use boot_cpu_type for CPU type based features MIPS: cpu-features: Enable octeon_cache by cpu_type PCI: acpiphp: Reassign resources on bridge if necessary video/aperture: Move vga handling to pci function video/aperture: Only kick vgacon when the pdev is decoding vga drm/aperture: Remove primary argument drm/gma500: Use drm_aperture_remove_conflicting_pci_framebuffers fbdev/radeon: use pci aperture helpers drm/ast: Use drm_aperture_remove_conflicting_pci_framebuffers xprtrdma: Remap Receive buffers after a reconnect NFSv4: fix out path in __nfs4_get_acl_uncached NFSv4.2: fix error handling in nfs42_proc_getxattr Linux 6.1.49 Revert "f2fs: fix to do sanity check on direct node in truncate_dnode()" Revert "f2fs: fix to set flush_merge opt and show noflush_merge" Revert "f2fs: don't reset unchangable mount option in f2fs_remount()" objtool/x86: Fix SRSO mess Linux 6.1.48 x86/srso: Correct the mitigation status when SMT is disabled objtool/x86: Fixup frame-pointer vs rethunk x86/retpoline,kprobes: Fix position of thunk sections with CONFIG_LTO_CLANG x86/srso: Disable the mitigation on unaffected configurations x86/CPU/AMD: Fix the DIV(0) initial fix attempt x86/retpoline: Don't clobber RFLAGS during srso_safe_ret() x86/static_call: Fix __static_call_fixup() x86/srso: Explain the untraining sequences a bit more x86/cpu: Cleanup the untrain mess x86/cpu: Rename srso_(.*)_alias to srso_alias_\1 x86/cpu: Rename original retbleed methods x86/cpu: Clean up SRSO return thunk mess x86/alternative: Make custom return thunk unconditional x86/cpu: Fix up srso_safe_ret() and __x86_return_thunk() x86/cpu: Fix __x86_return_thunk symbol type Linux 6.1.47 mmc: f-sdh30: fix order of function calls in sdhci_f_sdh30_remove net: fix the RTO timer retransmitting skb every 1ms if linear option is enabled drm/nouveau/disp: fix use-after-free in error handling of nouveau_connector_create af_unix: Fix null-ptr-deref in unix_stream_sendpage(). drm/amdgpu: keep irq count in amdgpu_irq_disable_all drm/amd/pm: skip the RLC stop when S0i3 suspend for SMU v13.0.4/11 arm64/ptrace: Ensure that SME is set up for target when writing SSVE state netfilter: set default timeout to 3 secs for sctp shutdown send and recv state hugetlb: do not clear hugetlb dtor until allocating vmemmap drm/amd/display: Implement workaround for writing to OTG_PIXEL_RATE_DIV register sched/fair: Remove capacity inversion detection sched/fair: unlink misfit task from cpu overutilized zsmalloc: allow only one active pool compaction context drm/amd/display: disable RCO for DCN314 ASoC: amd: vangogh: select CONFIG_SND_AMD_ACP_CONFIG drm/amdgpu/pm: fix throttle_status for other than MP1 11.0.7 drm/amdgpu: skip fence GFX interrupts disable/enable for S0ix drm/amd: flush any delayed gfxoff on suspend entry drm/i915/sdvo: fix panel_type initialization drm/qxl: fix UAF on handle creation mmc: block: Fix in_flight[issue_type] value error mmc: wbsd: fix double mmc_free_host() in wbsd_init() blk-crypto: dynamically allocate fallback profile arm64: dts: rockchip: Fix Wifi/Bluetooth on ROCK Pi 4 boards virtio-net: Zero max_tx_vq field for VIRTIO_NET_CTRL_MQ_HASH_CONFIG case cifs: Release folio lock on fscache read hit. ALSA: usb-audio: Add support for Mythware XA001AU capture and playback interfaces. serial: 8250: Fix oops for port->pm on uart_change_pm() riscv: uaccess: Return the number of bytes effectively not copied ALSA: hda/realtek - Remodified 3k pull low procedure soc: aspeed: socinfo: Add kfree for kstrdup soc: aspeed: uart-routing: Use __sysfs_match_string ALSA: hda/realtek: Add quirks for HP G11 Laptops ASoC: meson: axg-tdm-formatter: fix channel slot allocation ASoC: rt5665: add missed regulator_bulk_disable arm64: dts: imx93: Fix anatop node size ARM: dts: imx: Set default tuning step for imx6sx usdhc arm64: dts: imx8mm: Drop CSI1 PHY reference clock configuration ARM: dts: imx6: phytec: fix RTC interrupt level ARM: dts: imx: align LED node names with dtschema arm64: dts: rockchip: Disable HS400 for eMMC on ROCK 4C+ arm64: dts: rockchip: Disable HS400 for eMMC on ROCK Pi 4 arm64: dts: qcom: qrb5165-rb5: fix thermal zone conflict bus: ti-sysc: Flush posted write on enable before reset ice: Block switchdev mode when ADQ is active and vice versa qede: fix firmware halt over suspend and resume net: do not allow gso_size to be set to GSO_BY_FRAGS sock: Fix misuse of sk_under_memory_pressure() sfc: don't unregister flow_indr if it was never registered net: dsa: mv88e6xxx: Wait for EEPROM done before HW reset i40e: fix misleading debug logs iavf: fix FDIR rule fields masks validation net: openvswitch: reject negative ifindex team: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves net: phy: broadcom: stub c45 read/write for 54810 netfilter: nft_dynset: disallow object maps ipvs: fix racy memcpy in proc_do_sync_threshold netfilter: nf_tables: deactivate catchall elements in next generation netfilter: nf_tables: fix false-positive lockdep splat octeon_ep: cancel tx_timeout_task later in remove sequence net: macb: In ZynqMP resume always configure PS GTR for non-wakeup source drm/panel: simple: Fix AUO G121EAN01 panel timings according to the docs selftests: mirror_gre_changes: Tighten up the TTL test match net: phy: fix IRQ-based wake-on-lan over hibernate / power off net: pcs: Add missing put_device call in miic_create virtio-net: set queues after driver_ok virtio_net: notify MAC address change on device initialization xfrm: add forgotten nla_policy for XFRMA_MTIMER_THRESH xfrm: add NULL check in xfrm_update_ae_params ip_vti: fix potential slab-use-after-free in decode_session6 ip6_vti: fix slab-use-after-free in decode_session6 xfrm: fix slab-use-after-free in decode_session6 net: xfrm: Amend XFRMA_SEC_CTX nla_policy structure net: af_key: fix sadb_x_filter validation net: xfrm: Fix xfrm_address_filter OOB read i2c: designware: Handle invalid SMBus block data response length value i2c: designware: Correct length byte validation logic btrfs: fix BUG_ON condition in btrfs_cancel_balance btrfs: fix incorrect splitting in btrfs_drop_extent_map_range tty: serial: fsl_lpuart: Clear the error flags by writing 1 for lpuart32 platforms tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux vdpa: Enable strict validation for netlinks ops vdpa: Add max vqp attr to vdpa_nl_policy for nlattr length check vdpa: Add queue index attr to vdpa_nl_policy for nlattr length check vdpa: Add features attr to vdpa_nl_policy for nlattr length check powerpc/rtas_flash: allow user copy to flash block cache objects fbdev: mmp: fix value check in mmphw_probe() i2c: tegra: Fix i2c-tegra DMA config option processing i2c: hisi: Only handle the interrupt of the driver's transfer i2c: bcm-iproc: Fix bcm_iproc_i2c_isr deadlock issue cifs: fix potential oops in cifs_oplock_break vdpa/mlx5: Delete control vq iotlb in destroy_mr only when necessary vdpa/mlx5: Fix mr->initialized semantics vduse: Use proper spinlock for IRQ injection virtio-mmio: don't break lifecycle of vm_dev btrfs: fix use-after-free of new block group that became unused btrfs: convert btrfs_block_group::seq_zone to runtime flag btrfs: convert btrfs_block_group::needs_free_space to runtime flag btrfs: move out now unused BG from the reclaim list video/aperture: Only remove sysfb on the default vga pci device fbdev/hyperv-fb: Do not set struct fb_info.apertures ARM: dts: nxp/imx6sll: fix wrong property name in usbphy node KVM: arm64: vgic-v4: Make the doorbell request robust w.r.t preemption drm/amd/display: fix access hdcp_workqueue assert drm/amd/display: phase3 mst hdcp for multiple displays drm/amd/display: save restore hdcp state when display is unplugged from mst hub igc: read before write to SRRCTL register ring-buffer: Do not swap cpu_buffer during resize process Bluetooth: MGMT: Use correct address for memcpy() powerpc/kasan: Disable KCOV in KASAN code ALSA: hda/realtek: Add quirk for ASUS ROG GZ301V ALSA: hda/realtek: Add quirk for ASUS ROG GA402X ALSA: hda/realtek: Add quirk for ASUS ROG GX650P ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync() ALSA: hda/realtek: Add quirks for Unis H3C Desktop B760 & Q760 fs/ntfs3: Mark ntfs dirty when on-disk struct is corrupted fs: ntfs3: Fix possible null-pointer dereferences in mi_read() fs/ntfs3: Enhance sanity check while generating attr_list drm/amdgpu: Fix potential fence use-after-free v2 ceph: try to dump the msgs when decoding fails Bluetooth: btusb: Add MT7922 bluetooth ID for the Asus Ally Bluetooth: L2CAP: Fix use-after-free watchdog: sp5100_tco: support Hygon FCH/SCH (Server Controller Hub) firewire: net: fix use after free in fwnet_finish_incoming_packet() thunderbolt: Limit Intel Barlow Ridge USB3 bandwidth thunderbolt: Add Intel Barlow Ridge PCI ID pcmcia: rsrc_nonstatic: Fix memory leak in nonstatic_release_resource_db() gfs2: Fix possible data races in gfs2_show_options() usb: chipidea: imx: add missing USB PHY DPDM wakeup setting usb: chipidea: imx: don't request QoS for imx8ulp thunderbolt: Read retimer NVM authentication status prior tb_retimer_set_inbound_sbtx() media: platform: mediatek: vpu: fix NULL ptr dereference usb: gadget: uvc: queue empty isoc requests if no video buffer is available usb: gadget: u_serial: Avoid spinlock recursion in __gs_console_push media: camss: set VFE bpl_alignment to 16 for sdm845 and sm8250 media: v4l2-mem2mem: add lock to protect parameter num_rdy led: qcom-lpg: Fix resource leaks in for_each_available_child_of_node() loops serial: stm32: Ignore return value of uart_remove_one_port() in .remove() cifs: fix session state check in reconnect to avoid use-after-free issue smb: client: fix warning in cifs_smb3_do_mount() ALSA: hda/realtek: Add quirks for ROG ALLY CS35l41 audio HID: intel-ish-hid: ipc: Add Arrow Lake PCI device ID ASoC: SOF: core: Free the firmware trace before calling snd_sof_shutdown() drm/amd/display: Enable dcn314 DPP RCO drm/amd/display: Skip DPP DTO update if root clock is gated RDMA/mlx5: Return the firmware result upon destroying QP/RQ drm/amd/display: Apply 60us prefetch for DCFCLK <= 300Mhz drm/amdgpu: install stub fence into potential unused fence pointers iommu/amd: Introduce Disable IRTE Caching Support HID: logitech-hidpp: Add USB and Bluetooth IDs for the Logitech G915 TKL Keyboard accel/habanalabs: add pci health check during heartbeat dma-remap: use kvmalloc_array/kvfree for larger dma memory remap ASoC: SOF: Intel: fix SoundWire/HDaudio mutual exclusion iopoll: Call cpu_relax() in busy loops ASoC: Intel: sof_sdw: Add support for Rex soundwire ASoC: Intel: sof_sdw_rt_sdca_jack_common: test SOF_JACK_JDSRC in _exit ARM: dts: imx6dl: prtrvt, prtvt7, prti6q, prtwd2: fix USB related warnings ASoC: amd: vangogh: Add check for acp config flags in vangogh platform drm: rcar-du: remove R-Car H3 ES1.* workarounds drm/stm: ltdc: fix late dereference check ASoC: SOF: amd: Add pci revision id check PCI: tegra194: Fix possible array out of bounds access ASoC: Intel: sof_sdw: add quirk for LNL RVP ASoC: Intel: sof_sdw: add quirk for MTL RVP drm/amdgpu: fix memory leak in mes self test drm/amdgpu: Fix integer overflow in amdgpu_cs_pass1 drm/amdgpu: fix calltrace warning in amddrm_buddy_fini net: phy: at803x: fix the wol setting functions net: phy: at803x: Use devm_regulator_get_enable_optional() net/smc: Fix setsockopt and sysctl to specify same buffer size again net/smc: replace mutex rmbs_lock and sndbufs_lock with rw_semaphore selftests: forwarding: tc_actions: Use ncat instead of nc selftests: forwarding: tc_actions: cleanup temporary files when test is aborted zsmalloc: fix races between modifications of fullness and isolated zsmalloc: consolidate zs_pool's migrate_lock and size_class's locks cpuidle: psci: Move enabling OSI mode after power domains creation cpuidle: psci: Extend information in log about OSI/PC mode mmc: sdhci-f-sdh30: Replace with sdhci_pltfm Linux 6.1.46 drm/amd/pm/smu7: move variables to where they are used sch_netem: fix issues in netem_change() vs get_dist_table() alpha: remove __init annotation from exported page_is_ram() ACPI: scan: Create platform device for CS35L56 platform/x86: serial-multi-instantiate: Auto detect IRQ resource for CSC3551 scsi: qedf: Fix firmware halt over suspend and resume scsi: qedi: Fix firmware halt over suspend and resume scsi: fnic: Replace return codes in fnic_clean_pending_aborts() scsi: core: Fix possible memory leak if device_add() fails scsi: snic: Fix possible memory leak if device_add() fails scsi: 53c700: Check that command slot is not NULL scsi: ufs: renesas: Fix private allocation scsi: storvsc: Fix handling of virtual Fibre Channel timeouts scsi: core: Fix legacy /proc parsing buffer overflow netfilter: nf_tables: report use refcount overflow nvme-rdma: fix potential unbalanced freeze & unfreeze nvme-tcp: fix potential unbalanced freeze & unfreeze btrfs: set cache_block_group_error if we find an error btrfs: reject invalid reloc tree root keys with stack dump btrfs: exit gracefully if reloc roots don't match btrfs: properly clear end of the unreserved range in cow_file_range btrfs: don't stop integrity writeback too early btrfs: wait for actual caching progress during allocation gpio: sim: mark the GPIO chip as a one that can sleep gpio: ws16c48: Fix off-by-one error in WS16C48 resource region extent ibmvnic: Ensure login failure recovery is safe from other resets ibmvnic: Do partial reset on login failure ibmvnic: Handle DMA unmapping of login buffs in release functions ibmvnic: Unmap DMA login rsp buffer on send login fail ibmvnic: Enforce stronger sanity checks on login response net/mlx5: Reload auxiliary devices in pci error handlers net/mlx5: Skip clock update work when device is in error state net/mlx5: LAG, Check correct bucket when modifying LAG net/mlx5: Allow 0 for total host VFs dmaengine: owl-dma: Modify mismatched function name dmaengine: mcf-edma: Fix a potential un-allocated memory access net: hns3: fix strscpy causing content truncation issue nexthop: Fix infinite nexthop bucket dump when using maximum nexthop ID nexthop: Make nexthop bucket dump more efficient nexthop: Fix infinite nexthop dump when using maximum nexthop ID net: hns3: fix deadlock issue when externel_lb and reset are executed together net: hns3: add wait until mac link down net: hns3: refactor hclge_mac_link_status_wait for interface reuse net: dsa: ocelot: call dsa_tag_8021q_unregister() under rtnl_lock() on driver remove net: phy: at803x: remove set/get wol callbacks for AR8032 net: marvell: prestera: fix handling IPv4 routes with nhid net: tls: avoid discarding data on record close RDMA/umem: Set iova in ODP flow wifi: cfg80211: fix sband iftype data lookup for AP_VLAN drm/rockchip: Don't spam logs in atomic check IB/hfi1: Fix possible panic during hotplug remove iavf: fix potential races for FDIR filters drivers: vxlan: vnifilter: free percpu vni stats on error path drivers: net: prevent tun_build_skb() to exceed the packet size limit dccp: fix data-race around dp->dccps_mss_cache bonding: Fix incorrect deletion of ETH_P_8021AD protocol vid from slaves xsk: fix refcount underflow in error path tunnels: fix kasan splat when generating ipv4 pmtu error tcp: add missing family to tcp_set_ca_state() tracepoint net/smc: Use correct buffer sizes when switching between TCP and SMC net/packet: annotate data-races around tp->status mptcp: fix the incorrect judgment for msk->cb_flags macsec: use DEV_STATS_INC() mISDN: Update parameter type of dsp_cmx_send() bpf, sockmap: Fix bug that strp_done cannot be called bpf, sockmap: Fix map type error in sock_map_del_link net: core: remove unnecessary frame_sz check in bpf_xdp_adjust_tail() selftests: forwarding: tc_flower: Relax success criterion selftests: forwarding: Switch off timeout selftests: forwarding: Skip test when no interfaces are specified selftests: forwarding: hw_stats_l3_gre: Skip when using veth pairs selftests: forwarding: ethtool_extended_state: Skip when using veth pairs selftests: forwarding: ethtool: Skip when using veth pairs selftests: forwarding: Add a helper to skip test when using veth pairs selftests/rseq: Fix build with undefined __weak interconnect: qcom: sm8450: add enable_mask for bcm nodes interconnect: qcom: Add support for mask-based BCMs iio: core: Prevent invalid memory access when there is no parent drm/nouveau/disp: Revert a NULL check inside nouveau_connector_get_modes x86: Move gds_ucode_mitigated() declaration to header x86/speculation: Add cpu_show_gds() prototype x86/sev: Do not try to parse for the CC blob on non-AMD hardware x86/mm: Fix VDSO and VVAR placement on 5-level paging machines x86/cpu/amd: Enable Zenbleed fix for AMD Custom APU 0405 x86/srso: Fix build breakage with the LLVM linker usb: typec: altmodes/displayport: Signal hpd when configuring pin assignment usb: typec: tcpm: Fix response to vsafe0V event usb: common: usb-conn-gpio: Prevent bailing out if initial role is none USB: Gadget: core: Help prevent panic during UVC unconfigure usb: dwc3: Properly handle processing of pending events usb-storage: alauda: Fix uninit-value in alauda_check_media() misc: rtsx: judge ASPM Mode to set PETXCFG Reg binder: fix memory leak in binder_init() iio: adc: ina2xx: avoid NULL pointer dereference on OF device match iio: adc: ad7192: Fix ac excitation feature iio: frequency: admv1013: propagate errors from regulator_get_voltage() iio: cros_ec: Fix the allocation size for cros_ec_command io_uring: correct check for O_TMPFILE drm/amd/display: trigger timing sync only if TG is running drm/amd/display: fix the build when DRM_AMD_DC_DCN is not set drm/amd/display: Retain phantom plane/stream if validation fails drm/amd/display: Disable phantom OTG after enable for plane disable drm/amd/display: Use update plane and stream routine for DCN32x drm/amd/display: Avoid ABM when ODM combine is enabled for eDP drm/amd/display: Update OTG instance in the commit stream drm/amd/display: Handle seamless boot stream drm/amd/display: Add function for validate and update new stream drm/amd/display: Handle virtual hardware detect drm/amd/pm: avoid unintentional shutdown due to temperature momentary fluctuation drm/amd/pm: fulfill powerplay peak profiling mode shader/memory clock settings drm/amd/pm: expose swctf threshold setting for legacy powerplay drm/amd/pm: fulfill swsmu peak profiling mode shader/memory clock settings nilfs2: fix use-after-free of nilfs_root in dirtying inodes via iput radix tree test suite: fix incorrect allocation size for pthreads hwmon: (pmbus/bel-pfe) Enable PMBUS_SKIP_STATUS_CHECK for pfe1100 cpuidle: dt_idle_genpd: Add helper function to remove genpd topology drm/amd/display: limit DPIA link rate to HBR3 drm/amd: Disable S/G for APUs when 64GB or more host memory drm/amdgpu: add S/G display parameter drm/amd/display: check attr flag before set cursor degamma on DCN3+ drm/amdgpu: fix possible UAF in amdgpu_cs_pass1() drm/shmem-helper: Reset vma->vm_ops before calling dma_buf_mmap() drm/nouveau/nvkm/dp: Add workaround to fix DP 1.3+ DPCD issues drm/nouveau/gr: enable memory loads on helper invocation on all channels nvme-pci: add NVME_QUIRK_BOGUS_NID for Samsung PM9B1 256G and 512G riscv/kexec: handle R_RISCV_CALL_PLT relocation type riscv,mmio: Fix readX()-to-delay() ordering riscv/kexec: load initrd high in available memory net: mana: Fix MANA VF unload when hardware is unresponsive dmaengine: pl330: Return DMA_PAUSED when transaction is paused mptcp: fix disconnect vs accept race mptcp: avoid bogus reset on fallback close selftests: mptcp: join: fix 'implicit EP' test selftests: mptcp: join: fix 'delete and re-add' test ipv6: adjust ndisc_is_useropt() to also return true for PIO mmc: moxart: read scr register without changing byte order wireguard: allowedips: expand maximum node depth selftests: forwarding: Set default IPv6 traceroute utility wifi: rtw89: fix 8852AE disconnection caused by RX full flags wifi: nl80211: fix integer overflow in nl80211_parse_mbssid_elems() KVM: SEV: only access GHCB fields once KVM: SEV: snapshot the GHCB before accessing it ksmbd: fix wrong next length validation of ea buffer in smb2_set_ea() ksmbd: validate command request size tpm: Add a helper for checking hwrng enabled tpm: Disable RNG for all AMD fTPMs Revert "loongarch/cpu: Switch to arch_cpu_finalize_init()" gcc-plugins: Reorganize gimple includes for GCC 13 Linux 6.1.45 x86/CPU/AMD: Do not leak quotient data after a division by 0 Revert "drm/i915: Disable DC states for all commits" drm/amdgpu: Use apt name for FW reserved region drm/amdgpu: Remove unnecessary domain argument drm/amdgpu: add vram reservation based on vram_usagebyfirmware_v2_2 arm64/ptrace: Don't enable SVE when setting streaming SVE exfat: check if filename entries exceeds max filename length f2fs: don't reset unchangable mount option in f2fs_remount() f2fs: fix to set flush_merge opt and show noflush_merge selftests/rseq: Play nice with binaries statically linked against glibc 2.35+ drm/amd/display: skip CLEAR_PAYLOAD_ID_TABLE if device mst_en is 0 drm/amd/display: Ensure that planes are in the same order drm/imx/ipuv3: Fix front porch adjustment upon hactive aligning powerpc/mm/altmap: Fix altmap boundary check mtd: rawnand: fsl_upm: Fix an off-by one test in fun_exec_op() mtd: rawnand: rockchip: Align hwecc vs. raw page helper layouts mtd: rawnand: rockchip: fix oobfree offset and description mtd: rawnand: omap_elm: Fix incorrect type in assignment io_uring: annotate offset timeout races f2fs: fix to do sanity check on direct node in truncate_dnode() btrfs: remove BUG_ON()'s in add_new_free_space() ext2: Drop fragment support fs: Protect reconfiguration of sb read-write from racing writes net: usbnet: Fix WARNING in usbnet_start_xmit/usb_submit_urb debugobjects: Recheck debug_objects_enabled before reporting Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb fs/sysv: Null check to prevent null-ptr-deref bug fs/ntfs3: Use __GFP_NOWARN allocation at ntfs_load_attr_list() mm: kmem: fix a NULL pointer dereference in obj_stock_flush_required() file: reinstate f_pos locking optimization for regular files bpf, cpumap: Make sure kthread is running before map update returns clk: imx93: Propagate correct error in imx93_clocks_probe() drm/i915/gt: Cleanup aux invalidation registers drm/i915: Fix premature release of request's reusable memory drm/ttm: check null pointer before accessing when swapping open: make RESOLVE_CACHED correctly test for O_TMPFILE arm64/fpsimd: Sync FPSIMD state with SVE for SME only systems arm64/fpsimd: Clear SME state in the target task when setting the VL arm64/fpsimd: Sync and zero pad FPSIMD state for streaming SVE powerpc/ftrace: Create a dummy stackframe to fix stack unwind bpf: Disable preemption in bpf_event_output rbd: prevent busy loop when requesting exclusive lock x86/hyperv: Disable IBT when hypercall page lacks ENDBR instruction wifi: mt76: mt7615: do not advertise 5 GHz on first phy of MT7615D (DBDC) net: tap_open(): set sk_uid from current_fsuid() net: tun_chr_open(): set sk_uid from current_fsuid() arm64: dts: stratix10: fix incorrect I2C property for SCL signal bpf: Disable preemption in bpf_perf_event_output mtd: rawnand: meson: fix OOB available bytes for ECC mtd: spinand: toshiba: Fix ecc_get_status exfat: release s_lock before calling dir_emit() exfat: use kvmalloc_array/kvfree instead of kmalloc_array/kfree firmware: arm_scmi: Drop OF node reference in the transport channel setup ceph: defer stopping mdsc delayed_work USB: zaurus: Add ID for A-300/B-500/C-700 libceph: fix potential hang in ceph_osdc_notify() scsi: storvsc: Limit max_sectors for virtual Fibre Channel devices scsi: zfcp: Defer fc_rport blocking until after ADISC response rust: allocator: Prevent mis-aligned allocation tcp_metrics: fix data-race in tcpm_suck_dst() vs fastopen tcp_metrics: annotate data-races around tm->tcpm_net tcp_metrics: annotate data-races around tm->tcpm_vals[] tcp_metrics: annotate data-races around tm->tcpm_lock tcp_metrics: annotate data-races around tm->tcpm_stamp tcp_metrics: fix addr_same() helper prestera: fix fallback to previous version on same major version net/mlx5: fs_core: Skip the FTs in the same FS_TYPE_PRIO_CHAINS fs_prio net/mlx5: fs_core: Make find_closest_ft more generic vxlan: Fix nexthop hash size ip6mr: Fix skb_under_panic in ip6mr_cache_report() s390/qeth: Don't call dev_close/dev_open (DOWN/UP) net: dcb: choose correct policy to parse DCB_ATTR_BCN bnxt_en: Fix max_mtu setting for multi-buf XDP bnxt_en: Fix page pool logic for page size >= 64K net: netsec: Ignore 'phy-mode' on SynQuacer in DT mode net: korina: handle clk prepare error in korina_probe() net: ll_temac: fix error checking of irq_of_parse_and_map() bpf: sockmap: Remove preempt_disable in sock_map_sk_acquire net/sched: cls_route: No longer copy tcf_result on update to avoid use-after-free net/sched: cls_fw: No longer copy tcf_result on update to avoid use-after-free net/sched: cls_u32: No longer copy tcf_result on update to avoid use-after-free bpf, cpumap: Handle skb as well when clean up ptr_ring ice: Fix RDMA VSI removal during queue rebuild net/sched: taprio: Limit TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME to INT_MAX. net: annotate data-races around sk->sk_priority net: add missing data-race annotation for sk_ll_usec net: add missing data-race annotations around sk->sk_peek_off net: annotate data-races around sk->sk_mark net: add missing READ_ONCE(sk->sk_rcvbuf) annotation net: add missing READ_ONCE(sk->sk_sndbuf) annotation net: add missing READ_ONCE(sk->sk_rcvlowat) annotation net: annotate data-races around sk->sk_max_pacing_rate net: annotate data-race around sk->sk_txrehash net: annotate data-races around sk->sk_reserved_mem qed: Fix scheduling in a tasklet while getting stats mISDN: hfcpci: Fix potential deadlock on &hc->lock net: sched: cls_u32: Fix match key mis-addressing perf test uprobe_from_different_cu: Skip if there is no gcc net: dsa: fix value check in bcm_sf2_sw_probe() rtnetlink: let rtnl_bridge_setlink checks IFLA_BRIDGE_MODE length bpf: Add length check for SK_DIAG_BPF_STORAGE_REQ_MAP_FD parsing net/mlx5e: Move representor neigh cleanup to profile cleanup_tx net/mlx5e: Fix crash moving to switchdev mode when ntuple offload is set net/mlx5e: fix return value check in mlx5e_ipsec_remove_trailer() net/mlx5: fix potential memory leak in mlx5e_init_rep_rx net/mlx5: DR, fix memory leak in mlx5dr_cmd_create_reformat_ctx net/mlx5e: fix double free in macsec_fs_tx_create_crypto_table_groups wifi: cfg80211: Fix return value in scan logic erofs: fix wrong primary bvec selection on deduplicated extents KVM: s390: fix sthyi error handling word-at-a-time: use the same return type for has_zero regardless of endianness firmware: arm_scmi: Fix chan_free cleanup on SMC lib/bitmap: workaround const_eval test build failure firmware: smccc: Fix use of uninitialised results structure arm64: dts: freescale: Fix VPU G2 clock arm64: dts: imx8mn-var-som: add missing pull-up for onboard PHY reset pinmux arm64: dts: phycore-imx8mm: Correction in gpio-line-names arm64: dts: phycore-imx8mm: Label typo-fix of VPU arm64: dts: imx8mm-venice-gw7904: disable disp_blk_ctrl arm64: dts: imx8mm-venice-gw7903: disable disp_blk_ctrl iommu/arm-smmu-v3: Document nesting-related errata iommu/arm-smmu-v3: Add explicit feature for nesting iommu/arm-smmu-v3: Document MMU-700 erratum 2812531 iommu/arm-smmu-v3: Work around MMU-600 erratum 1076982 net: ipa: only reset hashed tables when supported net/mlx5: Free irqs only on shutdown callback perf: Fix function pointer case io_uring: gate iowait schedule on having pending requests Linux 6.1.44 x86: fix backwards merge of GDS/SRSO bit xen/netback: Fix buffer overrun triggered by unusual packet x86/srso: Tie SBPB bit setting to microcode patch detection x86/srso: Add a forgotten NOENDBR annotation x86/srso: Fix return thunks in generated code x86/srso: Add IBPB on VMEXIT x86/srso: Add IBPB x86/srso: Add SRSO_NO support x86/srso: Add IBPB_BRTYPE support x86/srso: Add a Speculative RAS Overflow mitigation x86/cpu, kvm: Add support for CPUID_80000021_EAX x86/bugs: Increase the x86 bugs vector size to two u32s Documentation/x86: Fix backwards on/off logic about YMM support x86/mm: Initialize text poking earlier mm: Move mm_cachep initialization to mm_init() x86/mm: Use mm_alloc() in poking_init() x86/mm: fix poking_init() for Xen PV guests x86/xen: Fix secondary processors' FPU initialization x86/mem_encrypt: Unbreak the AMD_MEM_ENCRYPT=n build KVM: Add GDS_NO support to KVM x86/speculation: Add Kconfig option for GDS x86/speculation: Add force option to GDS mitigation x86/speculation: Add Gather Data Sampling mitigation x86/fpu: Move FPU initialization into arch_cpu_finalize_init() x86/fpu: Mark init functions __init x86/fpu: Remove cpuinfo argument from init functions x86/init: Initialize signal frame size late init, x86: Move mem_encrypt_init() into arch_cpu_finalize_init() init: Invoke arch_cpu_finalize_init() earlier init: Remove check_bugs() leftovers um/cpu: Switch to arch_cpu_finalize_init() sparc/cpu: Switch to arch_cpu_finalize_init() sh/cpu: Switch to arch_cpu_finalize_init() mips/cpu: Switch to arch_cpu_finalize_init() m68k/cpu: Switch to arch_cpu_finalize_init() loongarch/cpu: Switch to arch_cpu_finalize_init() ia64/cpu: Switch to arch_cpu_finalize_init() ARM: cpu: Switch to arch_cpu_finalize_init() x86/cpu: Switch to arch_cpu_finalize_init() init: Provide arch_cpu_finalize_init() Conflicts: Documentation/devicetree/bindings Documentation/devicetree/bindings/clock/xlnx,versal-clk.yaml Documentation/devicetree/bindings/extcon/maxim,max77843.yaml Documentation/devicetree/bindings/serial/nxp,sc16is7xx.txt android/abi_gki_aarch64_qcom drivers/bus/mhi/host/pm.c drivers/clk/qcom/gcc-sm8250.c drivers/interconnect/qcom/bcm-voter.c drivers/interconnect/qcom/icc-rpmh.h drivers/mailbox/qcom-ipcc.c Change-Id: I98acc81783883752e19e8d433e3db6977a0ebf7f Upstream-Build: ks_qcom-android14-6.1-keystone-qcom-release@11252216 UKQ2.231224.001 Signed-off-by: jianzhou <quic_jianzhou@quicinc.com>	2024-01-03 21:55:56 -08:00
Greg Kroah-Hartman	ee16988743	Merge 6.1.65 into android14-6.1-lts ... Changes in 6.1.65 afs: Fix afs_server_list to be cleaned up with RCU afs: Make error on cell lookup failure consistent with OpenAFS drm/panel: boe-tv101wum-nl6: Fine tune the panel power sequence drm/panel: auo,b101uan08.3: Fine tune the panel power sequence drm/panel: simple: Fix Innolux G101ICE-L01 bus flags drm/panel: simple: Fix Innolux G101ICE-L01 timings wireguard: use DEV_STATS_INC() octeontx2-pf: Fix memory leak during interface down ata: pata_isapnp: Add missing error check for devm_ioport_map() drm/i915: do not clean GT table on error path drm/rockchip: vop: Fix color for RGB888/BGR888 format on VOP full HID: fix HID device resource race between HID core and debugging support ipv4: Correct/silence an endian warning in __ip_do_redirect net: usb: ax88179_178a: fix failed operations during ax88179_reset net/smc: avoid data corruption caused by decline arm/xen: fix xen_vcpu_info allocation alignment octeontx2-pf: Fix ntuple rule creation to direct packet to VF with higher Rx queue than its PF amd-xgbe: handle corner-case during sfp hotplug amd-xgbe: handle the corner-case during tx completion amd-xgbe: propagate the correct speed and duplex status net: axienet: Fix check for partial TX checksum afs: Return ENOENT if no cell DNS record can be found afs: Fix file locking on R/O volumes to operate in local mode mm,kfence: decouple kfence from page granularity mapping judgement arm64: mm: Fix "rodata=on" when CONFIG_RODATA_FULL_DEFAULT_ENABLED=y i40e: use ERR_PTR error print in i40e messages i40e: Fix adding unsupported cloud filters nvmet: nul-terminate the NQNs passed in the connect command USB: dwc3: qcom: fix resource leaks on probe deferral USB: dwc3: qcom: fix ACPI platform device leak lockdep: Fix block chain corruption cifs: minor cleanup of some headers smb3: allow dumping session and tcon id to improve stats analysis and debugging cifs: print last update time for interface list cifs: distribute channels across interfaces based on speed cifs: account for primary channel in the interface list cifs: fix leak of iface for primary channel MIPS: KVM: Fix a build warning about variable set but not used media: camss: Split power domain management media: camss: Convert to platform remove callback returning void media: qcom: Initialise V4L2 async notifier later media: qcom: camss: Fix V4L2 async notifier error path media: qcom: camss: Fix genpd cleanup ext4: add a new helper to check if es must be kept ext4: factor out __es_alloc_extent() and __es_free_extent() ext4: use pre-allocated es in __es_insert_extent() ext4: use pre-allocated es in __es_remove_extent() ext4: using nofail preallocation in ext4_es_remove_extent() ext4: using nofail preallocation in ext4_es_insert_delayed_block() ext4: using nofail preallocation in ext4_es_insert_extent() ext4: fix slab-use-after-free in ext4_es_insert_extent() ext4: make sure allocate pending entry not fail NFSD: Fix "start of NFS reply" pointer passed to nfsd_cache_update() NFSD: Fix checksum mismatches in the duplicate reply cache arm64: dts: imx8mn-var-som: add 20ms delay to ethernet regulator enable ACPI: resource: Skip IRQ override on ASUS ExpertBook B1402CVA swiotlb-xen: provide the "max_mapping_size" method bcache: replace a mistaken IS_ERR() by IS_ERR_OR_NULL() in btree_gc_coalesce() md: fix bi_status reporting in md_end_clone_io bcache: fixup multi-threaded bch_sectors_dirty_init() wake-up race io_uring/fs: consider link->flags when getting path for LINKAT s390/dasd: protect device queue against concurrent access USB: serial: option: add Luat Air72*U series products hv_netvsc: fix race of netvsc and VF register_netdevice hv_netvsc: Fix race of register_netdevice_notifier and VF register hv_netvsc: Mark VF as slave before exposing it to user-mode dm-delay: fix a race between delay_presuspend and delay_bio bcache: check return value from btree_node_alloc_replacement() bcache: prevent potential division by zero error bcache: fixup init dirty data errors bcache: fixup lock c->root error usb: cdnsp: Fix deadlock issue during using NCM gadget USB: serial: option: add Fibocom L7xx modules USB: serial: option: fix FM101R-GL defines USB: serial: option: don't claim interface 4 for ZTE MF290 usb: typec: tcpm: Skip hard reset when in error recovery USB: dwc2: write HCINT with INTMASK applied usb: dwc3: Fix default mode initialization usb: dwc3: set the dma max_seg_size USB: dwc3: qcom: fix software node leak on probe errors USB: dwc3: qcom: fix wakeup after probe deferral io_uring: fix off-by one bvec index Linux 6.1.65 Change-Id: Iea9267bee56905028a77d03c7fad8def8969246e Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>	2023-12-20 13:31:28 +00:00
Vikash Garodia	afe08d5d44	BACKPORT: media: venus: hfi_parser: Add check to keep the number of codecs within range ... Supported codec bitmask is populated from the payload from venus firmware. There is a possible case when all the bits in the codec bitmask is set. In such case, core cap for decoder is filled and MAX_CODEC_NUM is utilized. Now while filling the caps for encoder, it can lead to access the caps array beyong 32 index. Hence leading to OOB write. The fix counts the supported encoder and decoder. If the count is more than max, then it skips accessing the caps. commit 0768a9dd809e ("media: venus: hfi_parser: Add check to keep the number of codecs within range"). Change-Id: Ieee7bb9730c9086de4ebddb5ca65908ee5887080 Cc: stable@vger.kernel.org Fixes: 1a73374a04 ("media: venus: hfi_parser: add common capability parser") Signed-off-by: Stanimir Varbanov <stanimir.k.varbanov@gmail.com> Signed-off-by: Hans Verkuil <hverkuil-cisco@xs4all.nl> Signed-off-by: Vikash Garodia <quic_vgarodia@quicinc.com>	2023-12-19 09:56:47 -08:00
qctecmdr	dcb98568ec	Merge "BACKPORT: media: venus: hfi: add checks to handle capabilities from firmware"	2023-12-19 03:50:02 -08:00
qctecmdr	6609224546	Merge "Merge keystone/android14-6.1-keystone-qcom-release.6.1.43 (ff4725c) into qcom-6.1"	2023-12-19 01:35:20 -08:00
Vikash Garodia	e5086a2044	BACKPORT: media: venus: hfi: add checks to handle capabilities from firmware ... The hfi parser, parses the capabilities received from venus firmware and copies them to core capabilities. Consider below api, for example, fill_caps - In this api, caps in core structure gets updated with the number of capabilities received in firmware data payload. If the same api is called multiple times, there is a possibility of copying beyond the max allocated size in core caps. Similar possibilities in fill_raw_fmts and fill_profile_level functions. commit 8d0b89398b7e ("media: venus: hfi: add checks to handle capabilities from firmware"). Change-Id: Ib34d6d8dd77b3997bbbc7a25376b658dbcb6bac6 Cc: stable@vger.kernel.org Fixes: 1a73374a04 ("media: venus: hfi_parser: add common capability parser") Signed-off-by: Stanimir Varbanov <stanimir.k.varbanov@gmail.com> Signed-off-by: Hans Verkuil <hverkuil-cisco@xs4all.nl> Signed-off-by: Vikash Garodia <quic_vgarodia@quicinc.com>	2023-12-17 20:30:12 -08:00
Vikash Garodia	8ab11d9226	BACKPORT: media: venus: hfi: fix the check to handle session buffer requirement ... Buffer requirement, for different buffer type, comes from video firmware. While copying these requirements, there is an OOB possibility when the payload from firmware is more than expected size. Fix the check to avoid the OOB possibility. commit b18e36dfd6c9 ("media: venus: hfi: fix the check to handle session buffer requirement"). Change-Id: I8169c57b2c244c52bac0b4de460b9820707f6ff7 Cc: stable@vger.kernel.org Fixes: 09c2845e8f ("[media] media: venus: hfi: add Host Firmware Interface (HFI)") Reviewed-by: Nathan Hebert <nhebert@chromium.org> Signed-off-by: Stanimir Varbanov <stanimir.k.varbanov@gmail.com> Signed-off-by: Hans Verkuil <hverkuil-cisco@xs4all.nl> Signed-off-by: Vikash Garodia <quic_vgarodia@quicinc.com>	2023-12-17 10:13:32 -08:00
Vikash Garodia	d3f60f1443	BACKPORT: media: venus: hfi: add checks to perform sanity on queue pointers ... Read and write pointers are used to track the packet index in the memory shared between video driver and firmware. There is a possibility of OOB access if the read or write pointer goes beyond the queue memory size. Add checks for the read and write pointers to avoid OOB access. commit 5e538fce3358 ("media: venus: hfi: add checks to perform sanity on queue pointers"). Change-Id: I6c280854a7a51e38d92a2923d4c9bfe6a49c0ce2 Cc: stable@vger.kernel.org Fixes: d96d3f30c0 ("[media] media: venus: hfi: add Venus HFI files") Signed-off-by: Stanimir Varbanov <stanimir.k.varbanov@gmail.com> Signed-off-by: Hans Verkuil <hverkuil-cisco@xs4all.nl> Signed-off-by: Vikash Garodia <quic_vgarodia@quicinc.com>	2023-12-17 10:12:18 -08:00
Greg Kroah-Hartman	f1bc13cb9d	This is the 6.1.64 stable release ... -----BEGIN PGP SIGNATURE----- iQIzBAABCAAdFiEEZH8oZUiU471FcZm+ONu9yGCSaT4FAmVmHpsACgkQONu9yGCS aT5uvw//SzcE0GImnHnfeN7iXtpFE9O0fhTxsjZCi8/HTXmGWPtQgWscd9y81bAd EHBVr456GXqd6KuIF+03g/r/FYinwWqK375meLfaybw1vSBP+fZttrEGqz6nTnYD yqOxw2bqgz8Xjp63UeNHD6mifpBvVtuAvzrfO1E2Ie/U1OU2uKdjRRv0iijKNeWN liOYTXaddIkVfZR0z6dVTl0hb5dPWsxNmF77kfVpKz4ALIHJcO13DlUuKtQz6Sb6 0ElmJpuonHuUxHzb8e9LLsFy3IvbBqomSscwcd0tngtdUTzhMYFIZLjg2+WQ9Ovq raMGqvS/bKsoyoTBNKL83QB2NyXQb3vkfL0NgLsq9IwDl+r96mP9ctANYGwSjhND o/4sa/fbMFzeInA8Rzh7i56RCNstOBKApJPhBzWuY0f/6b1BZpvZaONyX3fFksWO dMeYT16GgO4lhQXnG3O6mtDT8eoZ1fLf7ZdGEZ2NktcOzXYelNc4aXJke7qdlIop CVxM+Ur+juj+DJymo59a6baXjEgIROdHq83N3CZwetGviPHneGqgYc0K7ETtA33H sH/0KGYAT8SzzjMlnXB0lpjp68WViJfzzo9Wxdf2aDZbL3SdI14GPKMUeDqqeSyU 8bB2Hb4ItccRFW9RriiE3BPGnLGu7PDTkn5TgXDG/bDX54Cb5DQ= =YPzI -----END PGP SIGNATURE----- Merge 6.1.64 into android14-6.1-lts Changes in 6.1.64 locking/ww_mutex/test: Fix potential workqueue corruption lib/generic-radix-tree.c: Don't overflow in peek() perf/core: Bail out early if the request AUX area is out of bound srcu: Fix srcu_struct node grpmask overflow on 64-bit systems selftests/lkdtm: Disable CONFIG_UBSAN_TRAP in test config clocksource/drivers/timer-imx-gpt: Fix potential memory leak clocksource/drivers/timer-atmel-tcb: Fix initialization on SAM9 hardware smp,csd: Throw an error if a CSD lock is stuck for too long cpu/hotplug: Don't offline the last non-isolated CPU workqueue: Provide one lock class key per work_on_cpu() callsite x86/mm: Drop the 4 MB restriction on minimal NUMA node memory size wifi: plfxlc: fix clang-specific fortify warning wifi: mac80211_hwsim: fix clang-specific fortify warning wifi: mac80211: don't return unset power in ieee80211_get_tx_power() atl1c: Work around the DMA RX overflow issue bpf: Detect IP == ksym.end as part of BPF program wifi: ath9k: fix clang-specific fortify warnings wifi: ath10k: fix clang-specific fortify warning net: annotate data-races around sk->sk_tx_queue_mapping net: annotate data-races around sk->sk_dst_pending_confirm wifi: ath10k: Don't touch the CE interrupt registers after power up vsock: read from socket's error queue bpf: Ensure proper register state printing for cond jumps Bluetooth: btusb: Add date->evt_skb is NULL check Bluetooth: Fix double free in hci_conn_cleanup ACPI: EC: Add quirk for HP 250 G7 Notebook PC tsnep: Fix tsnep_request_irq() format-overflow warning platform/chrome: kunit: initialize lock for fake ec_dev platform/x86: thinkpad_acpi: Add battery quirk for Thinkpad X120e drm/gma500: Fix call trace when psb_gem_mm_init() fails drm/komeda: drop all currently held locks if deadlock happens drm/amdgpu: not to save bo in the case of RAS err_event_athub drm/amdkfd: Fix a race condition of vram buffer unref in svm code drm/amd: Update `update_pcie_parameters` functions to use uint8_t arguments drm/amd/display: use full update for clip size increase of large plane source string.h: add array-wrappers for (v)memdup_user() kernel: kexec: copy user-array safely kernel: watch_queue: copy user-array safely drm_lease.c: copy user-array safely drm: vmwgfx_surface.c: copy user-array safely drm/msm/dp: skip validity check for DP CTS EDID checksum drm/amd: Fix UBSAN array-index-out-of-bounds for SMU7 drm/amd: Fix UBSAN array-index-out-of-bounds for Polaris and Tonga drm/amdgpu: Fix potential null pointer derefernce drm/panel: fix a possible null pointer dereference drm/panel/panel-tpo-tpg110: fix a possible null pointer dereference drm/radeon: fix a possible null pointer dereference drm/amdgpu/vkms: fix a possible null pointer dereference drm/panel: st7703: Pick different reset sequence drm/amdkfd: Fix shift out-of-bounds issue drm/amdgpu: Fix a null pointer access when the smc_rreg pointer is NULL arm64: dts: ls208xa: use a pseudo-bus to constrain usb dma size selftests/efivarfs: create-read: fix a resource leak ASoC: soc-card: Add storage for PCI SSID ASoC: SOF: Pass PCI SSID to machine driver crypto: pcrypt - Fix hungtask for PADATA_RESET ASoC: SOF: ipc4: handle EXCEPTION_CAUGHT notification from firmware RDMA/hfi1: Use FIELD_GET() to extract Link Width scsi: hisi_sas: Set debugfs_dir pointer to NULL after removing debugfs scsi: ibmvfc: Remove BUG_ON in the case of an empty event pool fs/jfs: Add check for negative db_l2nbperpage fs/jfs: Add validity check for db_maxag and db_agpref jfs: fix array-index-out-of-bounds in dbFindLeaf jfs: fix array-index-out-of-bounds in diAlloc HID: lenovo: Detect quirk-free fw on cptkbd and stop applying workaround ARM: 9320/1: fix stack depot IRQ stack filter ALSA: hda: Fix possible null-ptr-deref when assigning a stream PCI: tegra194: Use FIELD_GET()/FIELD_PREP() with Link Width fields PCI: mvebu: Use FIELD_PREP() with Link Width atm: iphase: Do PCI error checks on own line PCI: Do error check on own line to split long "if" conditions scsi: libfc: Fix potential NULL pointer dereference in fc_lport_ptp_setup() PCI: Use FIELD_GET() to extract Link Width PCI: Extract ATS disabling to a helper function PCI: Disable ATS for specific Intel IPU E2000 devices misc: pci_endpoint_test: Add Device ID for R-Car S4-8 PCIe controller PCI: Use FIELD_GET() in Sapphire RX 5600 XT Pulse quirk ASoC: Intel: soc-acpi-cht: Add Lenovo Yoga Tab 3 Pro YT3-X90 quirk crypto: hisilicon/qm - prevent soft lockup in receive loop HID: Add quirk for Dell Pro Wireless Keyboard and Mouse KM5221W exfat: support handle zero-size directory mfd: intel-lpss: Add Intel Lunar Lake-M PCI IDs iio: adc: stm32-adc: harden against NULL pointer deref in stm32_adc_probe() thunderbolt: Apply USB 3.x bandwidth quirk only in software connection manager tty: vcc: Add check for kstrdup() in vcc_probe() usb: dwc3: core: configure TX/RX threshold for DWC3_IP soundwire: dmi-quirks: update HP Omen match f2fs: fix error handling of __get_node_page usb: gadget: f_ncm: Always set current gadget in ncm_bind() 9p/trans_fd: Annotate data-racy writes to file::f_flags 9p: v9fs_listxattr: fix %s null argument warning i3c: mipi-i3c-hci: Fix out of bounds access in hci_dma_irq_handler i2c: fix memleak in i2c_new_client_device() i2c: sun6i-p2wi: Prevent potential division by zero virtio-blk: fix implicit overflow on virtio_max_dma_size i3c: master: mipi-i3c-hci: Fix a kernel panic for accessing DAT_data. media: gspca: cpia1: shift-out-of-bounds in set_flicker media: vivid: avoid integer overflow gfs2: ignore negated quota changes gfs2: fix an oops in gfs2_permission media: cobalt: Use FIELD_GET() to extract Link Width media: ccs: Fix driver quirk struct documentation media: imon: fix access to invalid resource for the second interface drm/amd/display: Avoid NULL dereference of timing generator kgdb: Flush console before entering kgdb on panic i2c: dev: copy userspace array safely ASoC: ti: omap-mcbsp: Fix runtime PM underflow warnings drm/qxl: prevent memory leak ALSA: hda/realtek: Add quirk for ASUS UX7602ZM drm/amdgpu: fix software pci_unplug on some chips pwm: Fix double shift bug mtd: rawnand: tegra: add missing check for platform_get_irq() wifi: iwlwifi: Use FW rate for non-data frames sched/core: Optimize in_task() and in_interrupt() a bit SUNRPC: ECONNRESET might require a rebind mtd: rawnand: intel: check return value of devm_kasprintf() mtd: rawnand: meson: check return value of devm_kasprintf() NFSv4.1: fix handling NFS4ERR_DELAY when testing for session trunking SUNRPC: Add an IS_ERR() check back to where it was NFSv4.1: fix SP4_MACH_CRED protection for pnfs IO SUNRPC: Fix RPC client cleaned up the freed pipefs dentries gfs2: Silence "suspicious RCU usage in gfs2_permission" warning vhost-vdpa: fix use after free in vhost_vdpa_probe() net: set SOCK_RCU_FREE before inserting socket into hashtable ipvlan: add ipvlan_route_v6_outbound() helper tty: Fix uninit-value access in ppp_sync_receive() net: hns3: fix add VLAN fail issue net: hns3: add barrier in vf mailbox reply process net: hns3: fix incorrect capability bit display for copper port net: hns3: fix out-of-bounds access may occur when coalesce info is read via debugfs net: hns3: fix variable may not initialized problem in hns3_init_mac_addr() net: hns3: fix VF reset fail issue net: hns3: fix VF wrong speed and duplex issue tipc: Fix kernel-infoleak due to uninitialized TLV value net: mvneta: fix calls to page_pool_get_stats ppp: limit MRU to 64K xen/events: fix delayed eoi list handling ptp: annotate data-race around q->head and q->tail bonding: stop the device in bond_setup_by_slave() net: ethernet: cortina: Fix max RX frame define net: ethernet: cortina: Handle large frames net: ethernet: cortina: Fix MTU max setting af_unix: fix use-after-free in unix_stream_read_actor() netfilter: nf_conntrack_bridge: initialize err to 0 netfilter: nf_tables: fix pointer math issue in nft_byteorder_eval() net: stmmac: fix rx budget limit check net: stmmac: avoid rx queue overrun net/mlx5e: fix double free of encap_header net/mlx5e: fix double free of encap_header in update funcs net/mlx5e: Fix pedit endianness net/mlx5e: Reduce the size of icosq_str net/mlx5e: Check return value of snprintf writing to fw_version buffer net/mlx5e: Check return value of snprintf writing to fw_version buffer for representors macvlan: Don't propagate promisc change to lower dev in passthru tools/power/turbostat: Fix a knl bug tools/power/turbostat: Enable the C-state Pre-wake printing cifs: spnego: add ';' in HOST_KEY_LEN cifs: fix check of rc in function generate_smb3signingkey i915/perf: Fix NULL deref bugs with drm_dbg() calls media: venus: hfi: add checks to perform sanity on queue pointers perf intel-pt: Fix async branch flags powerpc/perf: Fix disabling BHRB and instruction sampling randstruct: Fix gcc-plugin performance mode to stay in group bpf: Fix check_stack_write_fixed_off() to correctly spill imm bpf: Fix precision tracking for BPF_ALU | BPF_TO_BE | BPF_END scsi: mpt3sas: Fix loop logic scsi: megaraid_sas: Increase register read retry rount from 3 to 30 for selected registers scsi: qla2xxx: Fix system crash due to bad pointer access crypto: x86/sha - load modules based on CPU features x86/cpu/hygon: Fix the CPU topology evaluation for real KVM: x86: hyper-v: Don't auto-enable stimer on write from user-space KVM: x86: Ignore MSR_AMD64_TW_CFG access KVM: x86: Clear bit12 of ICR after APIC-write VM-exit audit: don't take task_lock() in audit_exe_compare() code path audit: don't WARN_ON_ONCE(!current->mm) in audit_exe_compare() proc: sysctl: prevent aliased sysctls from getting passed to init tty/sysrq: replace smp_processor_id() with get_cpu() tty: serial: meson: fix hard LOCKUP on crtscts mode hvc/xen: fix console unplug hvc/xen: fix error path in xen_hvc_init() to always register frontend driver hvc/xen: fix event channel handling for secondary consoles PCI/sysfs: Protect driver's D3cold preference from user space mm/damon/sysfs: remove requested targets when online-commit inputs mm/damon/sysfs: update monitoring target regions for online input commit watchdog: move softlockup_panic back to early_param mm/damon/lru_sort: avoid divide-by-zero in hot threshold calculation mm/damon/ops-common: avoid divide-by-zero during region hotness calculation mm/damon: implement a function for max nr_accesses safe calculation mm/damon/sysfs: check error from damon_sysfs_update_target() ACPI: resource: Do IRQ override on TongFang GMxXGxx regmap: Ensure range selector registers are updated after cache sync wifi: ath11k: fix temperature event locking wifi: ath11k: fix dfs radar event locking wifi: ath11k: fix htt pktlog locking wifi: ath11k: fix gtk offload status event locking mmc: meson-gx: Remove setting of CMD_CFG_ERROR genirq/generic_chip: Make irq_remove_generic_chip() irqdomain aware KEYS: trusted: tee: Refactor register SHM usage KEYS: trusted: Rollback init_trusted() consistently PCI: keystone: Don't discard .remove() callback PCI: keystone: Don't discard .probe() callback arm64: Restrict CPU_BIG_ENDIAN to GNU as or LLVM IAS 15.x or newer parisc/pdc: Add width field to struct pdc_model parisc/power: Add power soft-off when running on qemu clk: socfpga: Fix undefined behavior bug in struct stratix10_clock_data clk: qcom: ipq8074: drop the CLK_SET_RATE_PARENT flag from PLL clocks clk: qcom: ipq6018: drop the CLK_SET_RATE_PARENT flag from PLL clocks ksmbd: handle malformed smb1 message ksmbd: fix slab out of bounds write in smb_inherit_dacl() mmc: vub300: fix an error code mmc: sdhci_am654: fix start loop index for TAP value parsing mmc: Add quirk MMC_QUIRK_BROKEN_CACHE_FLUSH for Micron eMMC Q2J54A PCI/ASPM: Fix L1 substate handling in aspm_attr_store_common() PCI: kirin: Don't discard .remove() callback PCI: exynos: Don't discard .remove() callback wifi: wilc1000: use vmm_table as array in wilc struct svcrdma: Drop connection after an RDMA Read error rcu/tree: Defer setting of jiffies during stall reset arm64: dts: qcom: ipq6018: Fix hwlock index for SMEM PM: hibernate: Use __get_safe_page() rather than touching the list PM: hibernate: Clean up sync_read handling in snapshot_write_next() rcu: kmemleak: Ignore kmemleak false positives when RCU-freeing objects btrfs: don't arbitrarily slow down delalloc if we're committing arm64: dts: qcom: ipq8074: Fix hwlock index for SMEM firmware: qcom_scm: use 64-bit calling convention only when client is 64-bit ACPI: FPDT: properly handle invalid FPDT subtables arm64: dts: qcom: ipq6018: Fix tcsr_mutex register size mfd: qcom-spmi-pmic: Fix reference leaks in revid helper mfd: qcom-spmi-pmic: Fix revid implementation ima: annotate iint mutex to avoid lockdep false positive warnings ima: detect changes to the backing overlay file netfilter: nf_tables: remove catchall element in GC sync path netfilter: nf_tables: split async and sync catchall in two functions selftests/resctrl: Remove duplicate feature check from CMT test selftests/resctrl: Move _GNU_SOURCE define into Makefile selftests/resctrl: Reduce failures due to outliers in MBA/MBM tests hid: lenovo: Resend all settings on reset_resume for compact keyboards ASoC: codecs: wsa-macro: fix uninitialized stack variables with name prefix jbd2: fix potential data lost in recovering journal raced with synchronizing fs bdev quota: explicitly forbid quota files from being encrypted kernel/reboot: emergency_restart: Set correct system_state i2c: core: Run atomic i2c xfer when !preemptible tracing: Have the user copy of synthetic event address use correct context driver core: Release all resources during unbind before updating device links mcb: fix error handling for different scenarios when parsing dmaengine: stm32-mdma: correct desc prep when channel running s390/cmma: fix detection of DAT pages mm/cma: use nth_page() in place of direct struct page manipulation mm/memory_hotplug: use pfn math in place of direct struct page manipulation mtd: cfi_cmdset_0001: Byte swap OTP info i3c: master: cdns: Fix reading status register i3c: master: svc: fix race condition in ibi work thread i3c: master: svc: fix wrong data return when IBI happen during start frame i3c: master: svc: fix ibi may not return mandatory data byte i3c: master: svc: fix check wrong status register in irq handler i3c: master: svc: fix SDA keep low when polling IBIWON timeout happen parisc: Prevent booting 64-bit kernels on PA1.x machines parisc/pgtable: Do not drop upper 5 address bits of physical address parisc/power: Fix power soft-off when running on qemu xhci: Enable RPM on controllers that support low-power states fs: add ctime accessors infrastructure smb3: fix creating FIFOs when mounting with "sfu" mount option smb3: fix touch -h of symlink smb3: fix caching of ctime on setxattr smb: client: fix use-after-free bug in cifs_debug_data_proc_show() smb: client: fix potential deadlock when releasing mids cifs: reconnect helper should set reconnect for the right channel cifs: force interface update before a fresh session setup cifs: do not reset chan_max if multichannel is not supported at mount xfs: recovery should not clear di_flushiter unconditionally btrfs: zoned: wait for data BG to be finished on direct IO allocation ALSA: info: Fix potential deadlock at disconnection ALSA: hda/realtek: Enable Mute LED on HP 255 G8 ALSA: hda/realtek - Add Dell ALC295 to pin fall back table ALSA: hda/realtek - Enable internal speaker of ASUS K6500ZC ALSA: hda/realtek: Enable Mute LED on HP 255 G10 ALSA: hda/realtek: Add quirks for HP Laptops pmdomain: bcm: bcm2835-power: check if the ASB register is equal to enable pmdomain: imx: Make imx pgc power domain also set the fwnode cpufreq: stats: Fix buffer overflow detection in trans_stats() clk: visconti: remove unused visconti_pll_provider::regmap clk: visconti: Fix undefined behavior bug in struct visconti_pll_provider Bluetooth: btusb: Add Realtek RTL8852BE support ID 0x0cb8:0xc559 bluetooth: Add device 0bda:887b to device tables bluetooth: Add device 13d3:3571 to device tables Bluetooth: btusb: Add RTW8852BE device 13d3:3570 to device tables Bluetooth: btusb: Add 0bda:b85b for Fn-Link RTL8852BE drm/amd/display: enable dsc_clk even if dsc_pg disabled cxl/region: Validate region mode vs decoder mode cxl/region: Cleanup target list on attach error cxl/region: Move region-position validation to a helper cxl/region: Do not try to cleanup after cxl_region_setup_targets() fails i3c: master: svc: add NACK check after start byte sent i3c: master: svc: fix random hot join failure since timeout error cxl: Unify debug messages when calling devm_cxl_add_port() cxl/mem: Move devm_cxl_add_endpoint() from cxl_core to cxl_mem tools/testing/cxl: Define a fixed volatile configuration to parse cxl/region: Fix x1 root-decoder granularity calculations Revert ncsi: Propagate carrier gain/loss events to the NCSI controller Revert "i2c: pxa: move to generic GPIO recovery" lsm: fix default return value for vm_enough_memory lsm: fix default return value for inode_getsecctx sbsa_gwdt: Calculate timeout with 64-bit math i2c: designware: Disable TX_EMPTY irq while waiting for block length byte s390/ap: fix AP bus crash on early config change callback invocation net: ethtool: Fix documentation of ethtool_sprintf() net: dsa: lan9303: consequently nested-lock physical MDIO net: phylink: initialize carrier state at creation i2c: i801: fix potential race in i801_block_transaction_byte_by_byte f2fs: do not return EFSCORRUPTED, but try to run online repair f2fs: avoid format-overflow warning media: lirc: drop trailing space from scancode transmit media: sharp: fix sharp encoding media: venus: hfi_parser: Add check to keep the number of codecs within range media: venus: hfi: fix the check to handle session buffer requirement media: venus: hfi: add checks to handle capabilities from firmware media: ccs: Correctly initialise try compose rectangle drm/mediatek/dp: fix memory leak on ->get_edid callback audio detection drm/mediatek/dp: fix memory leak on ->get_edid callback error path dm-verity: don't use blocking calls from tasklets nfsd: fix file memleak on client_opens_release LoongArch: Mark __percpu functions as always inline riscv: mm: Update the comment of CONFIG_PAGE_OFFSET riscv: correct pt_level name via pgtable_l5/4_enabled riscv: kprobes: allow writing to x0 mmc: sdhci-pci-gli: A workaround to allow GL9750 to enter ASPM L1.2 mm: fix for negative counter: nr_file_hugepages mm: kmem: drop __GFP_NOFAIL when allocating objcg vectors mptcp: deal with large GSO size mptcp: add validity check for sending RM_ADDR mptcp: fix setsockopt(IP_TOS) subflow locking r8169: fix network lost after resume on DASH systems r8169: add handling DASH when DASH is disabled mmc: sdhci-pci-gli: GL9750: Mask the replay timer timeout of AER media: qcom: camss: Fix pm_domain_on sequence in probe media: qcom: camss: Fix vfe_get() error jump media: qcom: camss: Fix VFE-17x vfe_disable_output() media: qcom: camss: Fix VFE-480 vfe_disable_output() media: qcom: camss: Fix missing vfe_lite clocks check media: qcom: camss: Fix invalid clock enable bit disjunction media: qcom: camss: Fix csid-gen2 for test pattern generator Revert "net: r8169: Disable multicast filter for RTL8168H and RTL8107E" ext4: apply umask if ACL support is disabled ext4: correct offset of gdb backup in non meta_bg group to update_backups ext4: mark buffer new if it is unwritten to avoid stale data exposure ext4: correct return value of ext4_convert_meta_bg ext4: correct the start block of counting reserved clusters ext4: remove gdb backup copy for meta bg in setup_new_flex_group_blocks ext4: add missed brelse in update_backups ext4: properly sync file size update after O_SYNC direct IO drm/amd/pm: Handle non-terminated overdrive commands. drm/i915: Bump GLK CDCLK frequency when driving multiple pipes drm/i915: Fix potential spectre vulnerability drm/amd/pm: Fix error of MACO flag setting code drm/amdgpu/smu13: drop compute workload workaround drm/amdgpu: don't use pci_is_thunderbolt_attached() drm/amdgpu: don't use ATRM for external devices drm/amdgpu: fix error handling in amdgpu_bo_list_get() drm/amdgpu: lower CS errors to debug severity drm/amd/display: fix a NULL pointer dereference in amdgpu_dm_i2c_xfer() drm/amd/display: Enable fast plane updates on DCN3.2 and above drm/amd/display: Change the DMCUB mailbox memory location from FB to inbox powerpc/powernv: Fix fortify source warnings in opal-prd.c tracing: Have trace_event_file have ref counters Input: xpad - add VID for Turtle Beach controllers mmc: sdhci-pci-gli: GL9755: Mask the replay timer timeout of AER cxl/port: Fix NULL pointer access in devm_cxl_add_port() RISC-V: drop error print from riscv_hartid_to_cpuid() Linux 6.1.64 Change-Id: I9284282aeae5d0f9da957a58147efe0114f8e60a Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>	2023-12-12 18:41:13 +00:00
Bryan O'Donoghue	3a14f4fd7b	media: qcom: camss: Fix genpd cleanup ... [ Upstream commit f69791c39745e64621216fe8919cb73c0065002b ] Right now we never release the power-domains properly on the error path. Add a routine to be reused for this purpose and appropriate jumps in probe() to run that routine where necessary. Fixes: 2f6f8af672 ("media: camss: Refactor VFE power domain toggling") Cc: stable@vger.kernel.org Signed-off-by: Bryan O'Donoghue <bryan.odonoghue@linaro.org> Signed-off-by: Hans Verkuil <hverkuil-cisco@xs4all.nl> Signed-off-by: Sasha Levin <sashal@kernel.org>	2023-12-03 07:32:10 +01:00
Bryan O'Donoghue	df5bb7b408	media: qcom: camss: Fix V4L2 async notifier error path ... [ Upstream commit b278080a89f452063915beda0ade6b3ed5ee4271 ] Previously the jump label err_cleanup was used higher in the probe() function to release the async notifier however the async notifier registration was moved later in the code rendering the previous four jumps redundant. Rename the label from err_cleanup to err_v4l2_device_unregister to capture what the jump does. Fixes: 51397a4ec75d ("media: qcom: Initialise V4L2 async notifier later") Signed-off-by: Bryan O'Donoghue <bryan.odonoghue@linaro.org> Signed-off-by: Hans Verkuil <hverkuil-cisco@xs4all.nl> [hverkuil: fix old name in commit log: err_v4l2_device_register -> err_v4l2_device_unregister] Stable-dep-of: f69791c39745 ("media: qcom: camss: Fix genpd cleanup") Signed-off-by: Sasha Levin <sashal@kernel.org>	2023-12-03 07:32:10 +01:00
Sakari Ailus	fdfcdf9697	media: qcom: Initialise V4L2 async notifier later ... [ Upstream commit 5651bab6890a0c5d126e2559b4aa353bed201e47 ] Initialise V4L2 async notifier and parse DT for async sub-devices later, just before registering the notifier. This way the device can be made available to the V4L2 async framework from the notifier init time onwards. A subsequent patch will add struct v4l2_device as an argument to v4l2_async_nf_init(). Signed-off-by: Sakari Ailus <sakari.ailus@linux.intel.com> Tested-by: Philipp Zabel <p.zabel@pengutronix.de> # imx6qp Tested-by: Niklas Söderlund <niklas.soderlund@ragnatech.se> # rcar + adv746x Tested-by: Aishwarya Kothari <aishwarya.kothari@toradex.com> # Apalis i.MX6Q with TC358743 Tested-by: Lad Prabhakar <prabhakar.mahadev-lad.rj@bp.renesas.com> # Renesas RZ/G2L SMARC Signed-off-by: Mauro Carvalho Chehab <mchehab@kernel.org> Stable-dep-of: f69791c39745 ("media: qcom: camss: Fix genpd cleanup") Signed-off-by: Sasha Levin <sashal@kernel.org>	2023-12-03 07:32:10 +01:00
Uwe Kleine-König	153a4396c3	media: camss: Convert to platform remove callback returning void ... [ Upstream commit 428bbf4be4018aefa26e4d6531779fa8925ecaaf ] The .remove() callback for a platform driver returns an int which makes many driver authors wrongly assume it's possible to do error handling by returning an error code. However the value returned is (mostly) ignored and this typically results in resource leaks. To improve here there is a quest to make the remove callback return void. In the first step of this quest all drivers are converted to .remove_new() which already returns void. Trivially convert this driver from always returning zero in the remove callback to the void returning variant. Signed-off-by: Uwe Kleine-König <u.kleine-koenig@pengutronix.de> Signed-off-by: Hans Verkuil <hverkuil-cisco@xs4all.nl> Stable-dep-of: f69791c39745 ("media: qcom: camss: Fix genpd cleanup") Signed-off-by: Sasha Levin <sashal@kernel.org>	2023-12-03 07:32:09 +01:00
Vladimir Zapolskiy	4ae3c85e73	media: camss: Split power domain management ... [ Upstream commit 46cc031754985ee24034d55687540adb079f8630 ] There are three cases of power domain management on supported platforms: 1) CAMSS on MSM8916, where a single VFE power domain is operated outside of the camss device driver, 2) CAMSS on MSM8996 and SDM630/SDM660, where two VFE power domains are managed separately by the camss device driver, the power domains are linked and unlinked on demand by their functions vfe_pm_domain_on() and vfe_pm_domain_off() respectively, 3) CAMSS on SDM845 and SM8250 platforms, and there are two VFE power domains and their parent power domain TITAN_TOP, the latter one shall be turned on prior to turning on any of VFE power domains. Due to a previously missing link between TITAN_TOP and VFEx power domains in the latter case, which is now fixed by [1], it was decided always to turn on all found VFE power domains and TITAN_TOP power domain, even if just one particular VFE is needed to be enabled or none of VFE power domains are required, for instance the latter case is when vfe_lite is in use. This misusage becomes more incovenient and clumsy, if next generations are to be supported, for instance CAMSS on SM8450 has three VFE power domains. The change splits the power management support for platforms with TITAN_TOP parent power domain, and, since 'power-domain-names' property is not present in camss device tree nodes, the assumption is that the first N power domains from the 'power-domains' list correspond to VFE power domains, and, if the number of power domains is greater than number of non-lite VFEs, then the last power domain from the list is the TITAN_TOP power domain. Signed-off-by: Vladimir Zapolskiy <vladimir.zapolskiy@linaro.org> Reviewed-by: Robert Foss <robert.foss@linaro.org> Signed-off-by: Hans Verkuil <hverkuil-cisco@xs4all.nl> Signed-off-by: Mauro Carvalho Chehab <mchehab@kernel.org> Stable-dep-of: f69791c39745 ("media: qcom: camss: Fix genpd cleanup") Signed-off-by: Sasha Levin <sashal@kernel.org>	2023-12-03 07:32:09 +01:00
Andrey Konovalov	eb2f435be2	media: qcom: camss: Fix csid-gen2 for test pattern generator ... commit 87889f1b7ea40d2544b49c62092e6ef2792dced7 upstream. In the current driver csid Test Pattern Generator (TPG) doesn't work. This change: - fixes writing frame width and height values into CSID_TPG_DT_n_CFG_0 - fixes the shift by one between test_pattern control value and the actual pattern. - drops fixed VC of 0x0a which testing showed prohibited some test patterns in the CSID to produce output. So that TPG starts working, but with the below limitations: - only test_pattern=9 works as it should - test_pattern=8 and test_pattern=7 produce black frame (all zeroes) - the rest of test_pattern's don't work (yavta doesn't get the data) - regardless of the CFA pattern set by 'media-ctl -V' the actual pixel order is always the same (RGGB for any RAW8 or RAW10P format in 4608x2592 resolution). Tested with: RAW10P format, VC0: media-ctl -V '"msm_csid0":0[fmt:SRGGB10/4608x2592 field:none]' media-ctl -V '"msm_vfe0_rdi0":0[fmt:SRGGB10/4608x2592 field:none]' media-ctl -l '"msm_csid0":1->"msm_vfe0_rdi0":0[1]' v4l2-ctl -d /dev/v4l-subdev6 -c test_pattern=9 yavta -B capture-mplane --capture=3 -n 3 -f SRGGB10P -s 4608x2592 /dev/video0 RAW10P format, VC1: media-ctl -V '"msm_csid0":2[fmt:SRGGB10/4608x2592 field:none]' media-ctl -V '"msm_vfe0_rdi1":0[fmt:SRGGB10/4608x2592 field:none]' media-ctl -l '"msm_csid0":2->"msm_vfe0_rdi1":0[1]' v4l2-ctl -d /dev/v4l-subdev6 -c test_pattern=9 yavta -B capture-mplane --capture=3 -n 3 -f SRGGB10P -s 4608x2592 /dev/video1 RAW8 format, VC0: media-ctl --reset media-ctl -V '"msm_csid0":0[fmt:SRGGB8/4608x2592 field:none]' media-ctl -V '"msm_vfe0_rdi0":0[fmt:SRGGB8/4608x2592 field:none]' media-ctl -l '"msm_csid0":1->"msm_vfe0_rdi0":0[1]' yavta -B capture-mplane --capture=3 -n 3 -f SRGGB8 -s 4608x2592 /dev/video0 Fixes: eebe6d00e9 ("media: camss: Add support for CSID hardware version Titan 170") Cc: stable@vger.kernel.org Signed-off-by: Andrey Konovalov <andrey.konovalov@linaro.org> Signed-off-by: Bryan O'Donoghue <bryan.odonoghue@linaro.org> Reviewed-by: Laurent Pinchart <laurent.pinchart@ideasonboard.com> Signed-off-by: Hans Verkuil <hverkuil-cisco@xs4all.nl> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>	2023-11-28 17:07:21 +00:00
Bryan O'Donoghue	eeab07ddd0	media: qcom: camss: Fix invalid clock enable bit disjunction ... commit d8f7e1a60d01739a1d78db2b08603089c6cf7c8e upstream. define CSIPHY_3PH_CMN_CSI_COMMON_CTRL5_CLK_ENABLE BIT(7) disjunction for gen2 ? BIT(7) : is a nop we are setting the same bit either way. Fixes: 4abb21309f ("media: camss: csiphy: Move to hardcode CSI Clock Lane number") Cc: stable@vger.kernel.org Signed-off-by: Bryan O'Donoghue <bryan.odonoghue@linaro.org> Reviewed-by: Konrad Dybcio <konrad.dybcio@linaro.org> Reviewed-by: Laurent Pinchart <laurent.pinchart@ideasonboard.com> Signed-off-by: Hans Verkuil <hverkuil-cisco@xs4all.nl> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>	2023-11-28 17:07:21 +00:00
Bryan O'Donoghue	18a06f2eeb	media: qcom: camss: Fix missing vfe_lite clocks check ... commit b6e1bdca463a932c1ac02caa7d3e14bf39288e0c upstream. check_clock doesn't account for vfe_lite which means that vfe_lite will never get validated by this routine. Add the clock name to the expected set to remediate. Fixes: 7319cdf189 ("media: camss: Add support for VFE hardware version Titan 170") Cc: stable@vger.kernel.org Signed-off-by: Bryan O'Donoghue <bryan.odonoghue@linaro.org> Reviewed-by: Laurent Pinchart <laurent.pinchart@ideasonboard.com> Signed-off-by: Hans Verkuil <hverkuil-cisco@xs4all.nl> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>	2023-11-28 17:07:21 +00:00
Bryan O'Donoghue	ddc424aedb	media: qcom: camss: Fix VFE-480 vfe_disable_output() ... commit 7f24d291350426d40b36dfbe6b3090617cdfd37a upstream. vfe-480 is copied from vfe-17x and has the same racy idle timeout bug as in 17x. Fix the vfe_disable_output() logic to no longer be racy and to conform to the 17x way of quiescing and then resetting the VFE. Fixes: 4edc8eae71 ("media: camss: Add initial support for VFE hardware version Titan 480") Cc: stable@vger.kernel.org Signed-off-by: Bryan O'Donoghue <bryan.odonoghue@linaro.org> Signed-off-by: Hans Verkuil <hverkuil-cisco@xs4all.nl> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>	2023-11-28 17:07:21 +00:00
Bryan O'Donoghue	0f3e5f93fe	media: qcom: camss: Fix VFE-17x vfe_disable_output() ... commit 3143ad282fc08bf995ee73e32a9e40c527bf265d upstream. There are two problems with the current vfe_disable_output() routine. Firstly we rightly use a spinlock to protect output->gen2.active_num everywhere except for in the IDLE timeout path of vfe_disable_output(). Even if that is not racy "in practice" somehow it is by happenstance not by design. Secondly we do not get consistent behaviour from this routine. On sc8280xp 50% of the time I get "VFE idle timeout - resetting". In this case the subsequent capture will succeed. The other 50% of the time, we don't hit the idle timeout, never do the VFE reset and subsequent captures stall indefinitely. Rewrite the vfe_disable_output() routine to - Quiesce write masters with vfe_wm_stop() - Set active_num = 0 remembering to hold the spinlock when we do so followed by - Reset the VFE Testing on sc8280xp and sdm845 shows this to be a valid fix. Fixes: 7319cdf189 ("media: camss: Add support for VFE hardware version Titan 170") Cc: stable@vger.kernel.org Signed-off-by: Bryan O'Donoghue <bryan.odonoghue@linaro.org> Signed-off-by: Hans Verkuil <hverkuil-cisco@xs4all.nl> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>	2023-11-28 17:07:21 +00:00
Bryan O'Donoghue	04ef31a3e3	media: qcom: camss: Fix vfe_get() error jump ... commit 26bda3da00c3edef727a6acb00ed2eb4b22f8723 upstream. Right now it is possible to do a vfe_get() with the internal reference count at 1. If vfe_check_clock_rates() returns non-zero then we will leave the reference count as-is and run: - pm_runtime_put_sync() - vfe->ops->pm_domain_off() skip: - camss_disable_clocks() Subsequent vfe_put() calls will when the ref-count is non-zero unconditionally run: - pm_runtime_put_sync() - vfe->ops->pm_domain_off() - camss_disable_clocks() vfe_get() should not attempt to roll-back on error when the ref-count is non-zero as the upper layers will still do their own vfe_put() operations. vfe_put() will drop the reference count and do the necessary power domain release, the cleanup jumps in vfe_get() should only be run when the ref-count is zero. [ 50.095796] CPU: 7 PID: 3075 Comm: cam Not tainted 6.3.2+ #80 [ 50.095798] Hardware name: LENOVO 21BXCTO1WW/21BXCTO1WW, BIOS N3HET82W (1.54 ) 05/26/2023 [ 50.095799] pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 50.095802] pc : refcount_warn_saturate+0xf4/0x148 [ 50.095804] lr : refcount_warn_saturate+0xf4/0x148 [ 50.095805] sp : ffff80000c7cb8b0 [ 50.095806] x29: ffff80000c7cb8b0 x28: ffff16ecc0e3fc10 x27: 0000000000000000 [ 50.095810] x26: 0000000000000000 x25: 0000000000020802 x24: 0000000000000000 [ 50.095813] x23: ffff16ecc7360640 x22: 00000000ffffffff x21: 0000000000000005 [ 50.095815] x20: ffff16ed175f4400 x19: ffffb4d9852942a8 x18: ffffffffffffffff [ 50.095818] x17: ffffb4d9852d4a48 x16: ffffb4d983da5db8 x15: ffff80000c7cb320 [ 50.095821] x14: 0000000000000001 x13: 2e656572662d7265 x12: 7466612d65737520 [ 50.095823] x11: 00000000ffffefff x10: ffffb4d9850cebf0 x9 : ffffb4d9835cf954 [ 50.095826] x8 : 0000000000017fe8 x7 : c0000000ffffefff x6 : 0000000000057fa8 [ 50.095829] x5 : ffff16f813fe3d08 x4 : 0000000000000000 x3 : ffff621e8f4d2000 [ 50.095832] x2 : 0000000000000000 x1 : 0000000000000000 x0 : ffff16ed32119040 [ 50.095835] Call trace: [ 50.095836] refcount_warn_saturate+0xf4/0x148 [ 50.095838] device_link_put_kref+0x84/0xc8 [ 50.095843] device_link_del+0x38/0x58 [ 50.095846] vfe_pm_domain_off+0x3c/0x50 [qcom_camss] [ 50.095860] vfe_put+0x114/0x140 [qcom_camss] [ 50.095869] csid_set_power+0x2c8/0x408 [qcom_camss] [ 50.095878] pipeline_pm_power_one+0x164/0x170 [videodev] [ 50.095896] pipeline_pm_power+0xc4/0x110 [videodev] [ 50.095909] v4l2_pipeline_pm_use+0x5c/0xa0 [videodev] [ 50.095923] v4l2_pipeline_pm_get+0x1c/0x30 [videodev] [ 50.095937] video_open+0x7c/0x100 [qcom_camss] [ 50.095945] v4l2_open+0x84/0x130 [videodev] [ 50.095960] chrdev_open+0xc8/0x250 [ 50.095964] do_dentry_open+0x1bc/0x498 [ 50.095966] vfs_open+0x34/0x40 [ 50.095968] path_openat+0xb44/0xf20 [ 50.095971] do_filp_open+0xa4/0x160 [ 50.095974] do_sys_openat2+0xc8/0x188 [ 50.095975] __arm64_sys_openat+0x6c/0xb8 [ 50.095977] invoke_syscall+0x50/0x128 [ 50.095982] el0_svc_common.constprop.0+0x4c/0x100 [ 50.095985] do_el0_svc+0x40/0xa8 [ 50.095988] el0_svc+0x2c/0x88 [ 50.095991] el0t_64_sync_handler+0xf4/0x120 [ 50.095994] el0t_64_sync+0x190/0x198 [ 50.095996] ---[ end trace 0000000000000000 ]--- Fixes: 779096916d ("media: camss: vfe: Fix runtime PM imbalance on error") Cc: stable@vger.kernel.org Signed-off-by: Bryan O'Donoghue <bryan.odonoghue@linaro.org> Reviewed-by: Laurent Pinchart <laurent.pinchart@ideasonboard.com> Signed-off-by: Hans Verkuil <hverkuil-cisco@xs4all.nl> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>	2023-11-28 17:07:20 +00:00
Bryan O'Donoghue	3166c3af55	media: qcom: camss: Fix pm_domain_on sequence in probe ... commit 7405116519ad70b8c7340359bfac8db8279e7ce4 upstream. We need to make sure camss_configure_pd() happens before camss_register_entities() as the vfe_get() path relies on the pointer provided by camss_configure_pd(). Fix the ordering sequence in probe to ensure the pointers vfe_get() demands are present by the time camss_register_entities() runs. In order to facilitate backporting to stable kernels I've moved the configure_pd() call pretty early on the probe() function so that irrespective of the existence of the old error handling jump labels this patch should still apply to -next circa Aug 2023 to v5.13 inclusive. Fixes: 2f6f8af672 ("media: camss: Refactor VFE power domain toggling") Cc: stable@vger.kernel.org Signed-off-by: Bryan O'Donoghue <bryan.odonoghue@linaro.org> Reviewed-by: Laurent Pinchart <laurent.pinchart@ideasonboard.com> Signed-off-by: Hans Verkuil <hverkuil-cisco@xs4all.nl> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>	2023-11-28 17:07:20 +00:00
Sakari Ailus	e082326473	media: ccs: Correctly initialise try compose rectangle ... commit 724ff68e968b19d786870d333f9952bdd6b119cb upstream. Initialise the try sink compose rectangle size to the sink compose rectangle for binner and scaler sub-devices. This was missed due to the faulty condition that lead to the compose rectangles to be initialised for the pixel array sub-device where it is not relevant. Fixes: ccfc97bdb5 ("[media] smiapp: Add driver") Cc: stable@vger.kernel.org Signed-off-by: Sakari Ailus <sakari.ailus@linux.intel.com> Reviewed-by: Laurent Pinchart <laurent.pinchart@ideasonboard.com> Signed-off-by: Hans Verkuil <hverkuil-cisco@xs4all.nl> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>	2023-11-28 17:07:19 +00:00
Vikash Garodia	424fc46381	media: venus: hfi: add checks to handle capabilities from firmware ... commit 8d0b89398b7ebc52103e055bf36b60b045f5258f upstream. The hfi parser, parses the capabilities received from venus firmware and copies them to core capabilities. Consider below api, for example, fill_caps - In this api, caps in core structure gets updated with the number of capabilities received in firmware data payload. If the same api is called multiple times, there is a possibility of copying beyond the max allocated size in core caps. Similar possibilities in fill_raw_fmts and fill_profile_level functions. Cc: stable@vger.kernel.org Fixes: 1a73374a04 ("media: venus: hfi_parser: add common capability parser") Signed-off-by: Vikash Garodia <quic_vgarodia@quicinc.com> Signed-off-by: Stanimir Varbanov <stanimir.k.varbanov@gmail.com> Signed-off-by: Hans Verkuil <hverkuil-cisco@xs4all.nl> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>	2023-11-28 17:07:19 +00:00
Vikash Garodia	9ebb3c14ec	media: venus: hfi: fix the check to handle session buffer requirement ... commit b18e36dfd6c935da60a971310374f3dfec3c82e1 upstream. Buffer requirement, for different buffer type, comes from video firmware. While copying these requirements, there is an OOB possibility when the payload from firmware is more than expected size. Fix the check to avoid the OOB possibility. Cc: stable@vger.kernel.org Fixes: 09c2845e8f ("[media] media: venus: hfi: add Host Firmware Interface (HFI)") Reviewed-by: Nathan Hebert <nhebert@chromium.org> Signed-off-by: Vikash Garodia <quic_vgarodia@quicinc.com> Signed-off-by: Stanimir Varbanov <stanimir.k.varbanov@gmail.com> Signed-off-by: Hans Verkuil <hverkuil-cisco@xs4all.nl> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>	2023-11-28 17:07:19 +00:00
Vikash Garodia	a3e0b55dea	media: venus: hfi_parser: Add check to keep the number of codecs within range ... commit 0768a9dd809ef52440b5df7dce5a1c1c7e97abbd upstream. Supported codec bitmask is populated from the payload from venus firmware. There is a possible case when all the bits in the codec bitmask is set. In such case, core cap for decoder is filled and MAX_CODEC_NUM is utilized. Now while filling the caps for encoder, it can lead to access the caps array beyong 32 index. Hence leading to OOB write. The fix counts the supported encoder and decoder. If the count is more than max, then it skips accessing the caps. Cc: stable@vger.kernel.org Fixes: 1a73374a04 ("media: venus: hfi_parser: add common capability parser") Signed-off-by: Vikash Garodia <quic_vgarodia@quicinc.com> Signed-off-by: Stanimir Varbanov <stanimir.k.varbanov@gmail.com> Signed-off-by: Hans Verkuil <hverkuil-cisco@xs4all.nl> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>	2023-11-28 17:07:19 +00:00
Sean Young	997639c100	media: sharp: fix sharp encoding ... commit 4f7efc71891462ab7606da7039f480d7c1584a13 upstream. The Sharp protocol[1] encoding has incorrect timings for bit space. [1] https://www.sbprojects.net/knowledge/ir/sharp.php Fixes: d35afc5fe0 ("[media] rc: ir-sharp-decoder: Add encode capability") Cc: stable@vger.kernel.org Reported-by: Joe Ferner <joe.m.ferner@gmail.com> Closes: https://sourceforge.net/p/lirc/mailman/message/38604507/ Signed-off-by: Sean Young <sean@mess.org> Signed-off-by: Hans Verkuil <hverkuil-cisco@xs4all.nl> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>	2023-11-28 17:07:19 +00:00
Sean Young	41c269083c	media: lirc: drop trailing space from scancode transmit ... commit c8a489f820179fb12251e262b50303c29de991ac upstream. When transmitting, infrared drivers expect an odd number of samples; iow without a trailing space. No problems have been observed so far, so this is just belt and braces. Fixes: 9b6192589b ("media: lirc: implement scancode sending") Cc: stable@vger.kernel.org Signed-off-by: Sean Young <sean@mess.org> Signed-off-by: Hans Verkuil <hverkuil-cisco@xs4all.nl> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>	2023-11-28 17:07:19 +00:00
Vikash Garodia	a1d8f675ea	media: venus: hfi: add checks to perform sanity on queue pointers ... commit 5e538fce33589da6d7cb2de1445b84d3a8a692f7 upstream. Read and write pointers are used to track the packet index in the memory shared between video driver and firmware. There is a possibility of OOB access if the read or write pointer goes beyond the queue memory size. Add checks for the read and write pointer to avoid OOB access. Cc: stable@vger.kernel.org Fixes: d96d3f30c0 ("[media] media: venus: hfi: add Venus HFI files") Signed-off-by: Vikash Garodia <quic_vgarodia@quicinc.com> Signed-off-by: Stanimir Varbanov <stanimir.k.varbanov@gmail.com> Signed-off-by: Hans Verkuil <hverkuil-cisco@xs4all.nl> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>	2023-11-28 17:07:07 +00:00
Takashi Iwai	b083aaf5db	media: imon: fix access to invalid resource for the second interface ... [ Upstream commit a1766a4fd83befa0b34d932d532e7ebb7fab1fa7 ] imon driver probes two USB interfaces, and at the probe of the second interface, the driver assumes blindly that the first interface got bound with the same imon driver. It's usually true, but it's still possible that the first interface is bound with another driver via a malformed descriptor. Then it may lead to a memory corruption, as spotted by syzkaller; imon driver accesses the data from drvdata as struct imon_context object although it's a completely different one that was assigned by another driver. This patch adds a sanity check -- whether the first interface is really bound with the imon driver or not -- for avoiding the problem above at the probe time. Reported-by: syzbot+59875ffef5cb9c9b29e9@syzkaller.appspotmail.com Closes: https://lore.kernel.org/all/000000000000a838aa0603cc74d6@google.com/ Tested-by: Ricardo B. Marliere <ricardo@marliere.net> Link: https://lore.kernel.org/r/20230922005152.163640-1-ricardo@marliere.net Signed-off-by: Takashi Iwai <tiwai@suse.de> Signed-off-by: Sean Young <sean@mess.org> Signed-off-by: Hans Verkuil <hverkuil-cisco@xs4all.nl> Signed-off-by: Sasha Levin <sashal@kernel.org>	2023-11-28 17:07:02 +00:00
Sakari Ailus	65335aef1a	media: ccs: Fix driver quirk struct documentation ... [ Upstream commit 441b5c63d71ec9ec5453328f7e83384ecc1dddd9 ] Fix documentation for struct ccs_quirk, a device specific struct for managing deviations from the standard. The flags field was drifted away from where it should have been. Signed-off-by: Sakari Ailus <sakari.ailus@linux.intel.com> Reviewed-by: Laurent Pinchart <laurent.pinchart@ideasonboard.com> Signed-off-by: Hans Verkuil <hverkuil-cisco@xs4all.nl> Signed-off-by: Sasha Levin <sashal@kernel.org>	2023-11-28 17:07:02 +00:00
Ilpo Järvinen	b8dcbbd0c4	media: cobalt: Use FIELD_GET() to extract Link Width ... [ Upstream commit f301fedbeecfdce91cb898d6fa5e62f269801fee ] Use FIELD_GET() to extract PCIe Negotiated and Maximum Link Width fields instead of custom masking and shifting. Signed-off-by: Ilpo Järvinen <ilpo.jarvinen@linux.intel.com> Reviewed-by: Jonathan Cameron <Jonathan.Cameron@huawei.com> Signed-off-by: Hans Verkuil <hverkuil-cisco@xs4all.nl> Signed-off-by: Sasha Levin <sashal@kernel.org>	2023-11-28 17:07:02 +00:00
Hans Verkuil	329a8d1d60	media: vivid: avoid integer overflow ... [ Upstream commit 4567ebf8e8f9546b373e78e3b7d584cc30b62028 ] Fixes these compiler warnings: drivers/media/test-drivers/vivid/vivid-rds-gen.c: In function 'vivid_rds_gen_fill': drivers/media/test-drivers/vivid/vivid-rds-gen.c:147:56: warning: '.' directive output may be truncated writing 1 byte into a region of size between 0 and 3 [-Wformat-truncation=] 147 | snprintf(rds->psname, sizeof(rds->psname), "%6d.%1d", | ^ drivers/media/test-drivers/vivid/vivid-rds-gen.c:147:52: note: directive argument in the range [0, 9] 147 | snprintf(rds->psname, sizeof(rds->psname), "%6d.%1d", | ^~~~~~~~~ drivers/media/test-drivers/vivid/vivid-rds-gen.c:147:9: note: 'snprintf' output between 9 and 12 bytes into a destination of size 9 147 | snprintf(rds->psname, sizeof(rds->psname), "%6d.%1d", | ^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ 148 | freq / 16, ((freq & 0xf) * 10) / 16); | ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Signed-off-by: Hans Verkuil <hverkuil-cisco@xs4all.nl> Acked-by: Arnd Bergmann <arnd@arndb.de> Signed-off-by: Sasha Levin <sashal@kernel.org>	2023-11-28 17:07:02 +00:00
Rajeshwar R Shinde	a647f27a74	media: gspca: cpia1: shift-out-of-bounds in set_flicker ... [ Upstream commit 099be1822d1f095433f4b08af9cc9d6308ec1953 ] Syzkaller reported the following issue: UBSAN: shift-out-of-bounds in drivers/media/usb/gspca/cpia1.c:1031:27 shift exponent 245 is too large for 32-bit type 'int' When the value of the variable "sd->params.exposure.gain" exceeds the number of bits in an integer, a shift-out-of-bounds error is reported. It is triggered because the variable "currentexp" cannot be left-shifted by more than the number of bits in an integer. In order to avoid invalid range during left-shift, the conditional expression is added. Reported-by: syzbot+e27f3dbdab04e43b9f73@syzkaller.appspotmail.com Closes: https://lore.kernel.org/all/20230818164522.12806-1-coolrrsh@gmail.com Link: https://syzkaller.appspot.com/bug?extid=e27f3dbdab04e43b9f73 Signed-off-by: Rajeshwar R Shinde <coolrrsh@gmail.com> Signed-off-by: Hans Verkuil <hverkuil-cisco@xs4all.nl> Signed-off-by: Sasha Levin <sashal@kernel.org>	2023-11-28 17:07:02 +00:00
Greg Kroah-Hartman	2b3ea8bdef	This is the 6.1.63 stable release ... -----BEGIN PGP SIGNATURE----- iQIzBAABCAAdFiEEZH8oZUiU471FcZm+ONu9yGCSaT4FAmVbOmsACgkQONu9yGCS aT5m1RAAx7hgbFDnLHCGh4YVBbNy8JngItsUBaJcI/67Mk5toNi0x8pqcS8mq7ED GTwRnRcKaIR2bTyco5Ed2OZn4jMCyHC4oiyBZnHWg6AMuQjSCYzIgm7DzlTCVYZ7 2r8uRbt/uXADTILJ2kwR2mtVpGcwrXa+lsHrMqvt+MvNwRoSVHBHVVYCrAc+JXwR GXCopzV/RFGS6w4SBsX0K+8pV7GO+bhpxJ1lPz1T/xeLYfT4C3EwSTWDbUXPbez7 IpJ+5yKJXXT9Xn9m/pekwZ/aOirLqtEbDxneEctsjvw140lCoQiEZn6ZRscgNEns 3H+J3Asgc2zXqPzfZFH02TebPj31B8HZ43Upu0okr0hr4A4/4JL9pjXEhm1bON/Z x3jlTF4dyay4vOGGIEYOAuJSUbn6AqpZ318uBWCd3BSPocihEDMJz2aoazVHcb6k 83MVxfFfEL6s9utcoSXB8VjHa4FQmpMYsozegloUSJJCsizgdzmih0buJYhBB9sI HbEohW+YAh3cACSn6arXUJIMH5F5xsfD89od2Pj+6UrapdlPz5gCaggA1RZplCho bjGc1k61Rp2qSdfMEcx+h4ypgoOdhgqZI0YhYDCgBSRcWOXnGrDjFvnnumatcT+H 6vqyX6zlNt6U1NpE56Jtf7gt1Ds6PeoadD0L6B8vjXrkdeXOlUU= =AZ9s -----END PGP SIGNATURE----- Merge 6.1.63 into android14-6.1-lts Changes in 6.1.63 hwmon: (nct6775) Fix incorrect variable reuse in fan_div calculation sched/fair: Fix cfs_rq_is_decayed() on !SMP iov_iter, x86: Be consistent about the __user tag on copy_mc_to_user() sched/uclamp: Set max_spare_cap_cpu even if max_spare_cap is 0 sched/uclamp: Ignore (util == 0) optimization in feec() when p_util_max = 0 objtool: Propagate early errors sched: Fix stop_one_cpu_nowait() vs hotplug vfs: fix readahead(2) on block devices writeback, cgroup: switch inodes with dirty timestamps to release dying cgwbs x86/srso: Fix SBPB enablement for (possible) future fixed HW futex: Don't include process MM in futex key on no-MMU x86/numa: Introduce numa_fill_memblks() ACPI/NUMA: Apply SRAT proximity domain to entire CFMWS window x86/sev-es: Allow copy_from_kernel_nofault() in earlier boot x86/boot: Fix incorrect startup_gdt_descr.size drivers/clocksource/timer-ti-dm: Don't call clk_get_rate() in stop function pstore/platform: Add check for kstrdup string: Adjust strtomem() logic to allow for smaller sources genirq/matrix: Exclude managed interrupts in irq_matrix_allocated() wifi: cfg80211: add flush functions for wiphy work wifi: mac80211: move radar detect work to wiphy work wifi: mac80211: move scan work to wiphy work wifi: mac80211: move offchannel works to wiphy work wifi: mac80211: move sched-scan stop work to wiphy work wifi: mac80211: fix # of MSDU in A-MSDU calculation wifi: iwlwifi: honor the enable_ini value i40e: fix potential memory leaks in i40e_remove() iavf: Fix promiscuous mode configuration flow messages selftests/bpf: Correct map_fd to data_fd in tailcalls udp: add missing WRITE_ONCE() around up->encap_rcv tcp: call tcp_try_undo_recovery when an RTOd TFO SYNACK is ACKed gve: Use size_add() in call to struct_size() mlxsw: Use size_mul() in call to struct_size() tls: Only use data field in crypto completion function tls: Use size_add() in call to struct_size() tipc: Use size_add() in calls to struct_size() net: spider_net: Use size_add() in call to struct_size() net: ethernet: mtk_wed: fix EXT_INT_STATUS_RX_FBUF definitions for MT7986 SoC wifi: rtw88: debug: Fix the NULL vs IS_ERR() bug for debugfs_create_file() wifi: ath11k: fix boot failure with one MSI vector wifi: mt76: mt7603: rework/fix rx pse hang check wifi: mt76: mt7603: improve watchdog reset reliablity wifi: mt76: mt7603: improve stuck beacon handling wifi: mt76: mt7915: fix beamforming availability check wifi: ath: dfs_pattern_detector: Fix a memory initialization issue tcp_metrics: add missing barriers on delete tcp_metrics: properly set tp->snd_ssthresh in tcp_init_metrics() tcp_metrics: do not create an entry from tcp_init_metrics() wifi: rtlwifi: fix EDCA limit set by BT coexistence ACPI: property: Allow _DSD buffer data only for byte accessors ACPI: video: Add acpi_backlight=vendor quirk for Toshiba Portégé R100 wifi: ath11k: fix Tx power value during active CAC can: dev: can_restart(): don't crash kernel if carrier is OK can: dev: can_restart(): fix race condition between controller restart and netif_carrier_on() can: dev: can_put_echo_skb(): don't crash kernel if can_priv::echo_skb is accessed out of bounds PM / devfreq: rockchip-dfi: Make pmu regmap mandatory wifi: wfx: fix case where rates are out of order netfilter: nf_tables: Drop pointless memset when dumping rules thermal: core: prevent potential string overflow r8169: use tp_to_dev instead of open code r8169: fix rare issue with broken rx after link-down on RTL8125 selftests: netfilter: test for sctp collision processing in nf_conntrack net: skb_find_text: Ignore patterns extending past 'to' chtls: fix tp->rcv_tstamp initialization tcp: fix cookie_init_timestamp() overflows wifi: iwlwifi: call napi_synchronize() before freeing rx/tx queues wifi: iwlwifi: pcie: synchronize IRQs before NAPI wifi: iwlwifi: empty overflow queue during flush Bluetooth: hci_sync: Fix Opcode prints in bt_dev_dbg/err bpf: Fix unnecessary -EBUSY from htab_lock_bucket ACPI: sysfs: Fix create_pnp_modalias() and create_of_modalias() ipv6: avoid atomic fragment on GSO packets net: add DEV_STATS_READ() helper ipvlan: properly track tx_errors regmap: debugfs: Fix a erroneous check after snprintf() spi: tegra: Fix missing IRQ check in tegra_slink_probe() clk: qcom: gcc-msm8996: Remove RPM bus clocks clk: qcom: clk-rcg2: Fix clock rate overflow for high parent frequencies clk: qcom: mmcc-msm8998: Don't check halt bit on some branch clks clk: qcom: mmcc-msm8998: Fix the SMMU GDSC clk: qcom: gcc-sm8150: Fix gcc_sdcc2_apps_clk_src regulator: mt6358: Fail probe on unknown chip ID clk: imx: Select MXC_CLK for CLK_IMX8QXP clk: imx: imx8mq: correct error handling path clk: imx: imx8qxp: Fix elcdif_pll clock clk: renesas: rcar-gen3: Extend SDnH divider table clk: renesas: rzg2l: Wait for status bit of SD mux before continuing clk: renesas: rzg2l: Lock around writes to mux register clk: renesas: rzg2l: Trust value returned by hardware clk: renesas: rzg2l: Use FIELD_GET() for PLL register fields clk: renesas: rzg2l: Fix computation formula clk: linux/clk-provider.h: fix kernel-doc warnings and typos spi: nxp-fspi: use the correct ioremap function clk: keystone: pll: fix a couple NULL vs IS_ERR() checks clk: ti: change ti_clk_register[_omap_hw]() API clk: ti: fix double free in of_ti_divider_clk_setup() clk: npcm7xx: Fix incorrect kfree clk: mediatek: clk-mt6765: Add check for mtk_alloc_clk_data clk: mediatek: clk-mt6779: Add check for mtk_alloc_clk_data clk: mediatek: clk-mt6797: Add check for mtk_alloc_clk_data clk: mediatek: clk-mt7629-eth: Add check for mtk_alloc_clk_data clk: mediatek: clk-mt7629: Add check for mtk_alloc_clk_data clk: mediatek: clk-mt2701: Add check for mtk_alloc_clk_data clk: qcom: config IPQ_APSS_6018 should depend on QCOM_SMEM platform/x86: wmi: Fix probe failure when failing to register WMI devices platform/x86: wmi: Fix opening of char device hwmon: (axi-fan-control) Fix possible NULL pointer dereference hwmon: (coretemp) Fix potentially truncated sysfs attribute name Revert "hwmon: (sch56xx-common) Add DMI override table" Revert "hwmon: (sch56xx-common) Add automatic module loading on supported devices" hwmon: (sch5627) Use bit macros when accessing the control register hwmon: (sch5627) Disallow write access if virtual registers are locked hte: tegra: Fix missing error code in tegra_hte_test_probe() drm/rockchip: vop: Fix reset of state in duplicate state crtc funcs drm/rockchip: vop: Fix call to crtc reset helper drm/rockchip: vop2: Don't crash for invalid duplicate_state drm/rockchip: vop2: Add missing call to crtc reset helper drm/radeon: possible buffer overflow drm: bridge: it66121: Fix invalid connector dereference drm/bridge: lt8912b: Add hot plug detection drm/bridge: lt8912b: Fix bridge_detach drm/bridge: lt8912b: Fix crash on bridge detach drm/bridge: lt8912b: Manually disable HPD only if it was enabled drm/bridge: lt8912b: Add missing drm_bridge_attach call drm/bridge: tc358768: Fix use of uninitialized variable drm/bridge: tc358768: Fix bit updates drm/bridge: tc358768: remove unused variable drm/bridge: tc358768: Use struct videomode drm/bridge: tc358768: Print logical values, not raw register values drm/bridge: tc358768: Use dev for dbg prints, not priv->dev drm/bridge: tc358768: Rename dsibclk to hsbyteclk drm/bridge: tc358768: Clean up clock period code drm/bridge: tc358768: Fix tc358768_ns_to_cnt() drm/amdkfd: fix some race conditions in vram buffer alloc/free of svm code drm/amd/display: Check all enabled planes in dm_check_crtc_cursor drm/amd/display: Refactor dm_get_plane_scale helper drm/amd/display: Bail from dm_check_crtc_cursor if no relevant change io_uring/kbuf: Fix check of BID wrapping in provided buffers io_uring/kbuf: Allow the full buffer id space for provided buffers drm/mediatek: Fix iommu fault by swapping FBs after updating plane state drm/mediatek: Fix iommu fault during crtc enabling drm/rockchip: cdn-dp: Fix some error handling paths in cdn_dp_probe() gpu: host1x: Correct allocated size for contexts drm/bridge: lt9611uxc: fix the race in the error path arm64/arm: xen: enlighten: Fix KPTI checks drm/rockchip: Fix type promotion bug in rockchip_gem_iommu_map() xenbus: fix error exit in xenbus_init() xen-pciback: Consider INTx disabled when MSI/MSI-X is enabled drm/msm/dsi: use msm_gem_kernel_put to free TX buffer drm/msm/dsi: free TX buffer in unbind clocksource/drivers/arm_arch_timer: limit XGene-1 workaround drm: mediatek: mtk_dsi: Fix NO_EOT_PACKET settings/handling drivers/perf: hisi: use cpuhp_state_remove_instance_nocalls() for hisi_hns3_pmu uninit process perf/arm-cmn: Revamp model detection perf/arm-cmn: Fix DTC domain detection drivers/perf: hisi_pcie: Check the type first in pmu::event_init() perf: hisi: Fix use-after-free when register pmu fails ARM: dts: renesas: blanche: Fix typo in GP_11_2 pin name arm64: dts: qcom: sdm845: cheza doesn't support LMh node arm64: dts: qcom: sc7280: link usb3_phy_wrapper_gcc_usb30_pipe_clk arm64: dts: qcom: msm8916: Fix iommu local address range arm64: dts: qcom: msm8992-libra: drop duplicated reserved memory arm64: dts: qcom: sc7280: Add missing LMH interrupts arm64: dts: qcom: sm8150: add ref clock to PCIe PHYs arm64: dts: qcom: sm8350: fix pinctrl for UART18 arm64: dts: qcom: sdm845-mtp: fix WiFi configuration ARM64: dts: marvell: cn9310: Use appropriate label for spi1 pins arm64: dts: qcom: apq8016-sbc: Add missing ADV7533 regulators ARM: dts: qcom: mdm9615: populate vsdcc fixed regulator soc: qcom: llcc: Handle a second device without data corruption kunit: Fix missed memory release in kunit_free_suite_set() firmware: ti_sci: Mark driver as non removable arm64: dts: ti: k3-am62a7-sk: Drop i2c-1 to 100Khz firmware: arm_ffa: Assign the missing IDR allocation ID to the FFA device firmware: arm_ffa: Allow the FF-A drivers to use 32bit mode of messaging ARM: dts: am3517-evm: Fix LED3/4 pinmux clk: scmi: Free scmi_clk allocated when the clocks with invalid info are skipped arm64: dts: imx8qm-ss-img: Fix jpegenc compatible entry arm64: dts: imx8mm: Add sound-dai-cells to micfil node arm64: dts: imx8mn: Add sound-dai-cells to micfil node arm64: tegra: Use correct interrupts for Tegra234 TKE selftests/pidfd: Fix ksft print formats selftests/resctrl: Ensure the benchmark commands fits to its array module/decompress: use vmalloc() for gzip decompression workspace ASoC: cs35l41: Verify PM runtime resume errors in IRQ handler ASoC: cs35l41: Undo runtime PM changes at driver exit time ALSA: hda: cs35l41: Fix unbalanced pm_runtime_get() ALSA: hda: cs35l41: Undo runtime PM changes at driver exit time KEYS: Include linux/errno.h in linux/verification.h crypto: hisilicon/hpre - Fix a erroneous check after snprintf() hwrng: bcm2835 - Fix hwrng throughput regression hwrng: geode - fix accessing registers RDMA/core: Use size_{add,sub,mul}() in calls to struct_size() crypto: qat - ignore subsequent state up commands crypto: qat - relocate bufferlist logic crypto: qat - rename bufferlist functions crypto: qat - change bufferlist logic interface crypto: qat - generalize crypto request buffers crypto: qat - extend buffer list interface crypto: qat - fix unregistration of crypto algorithms scsi: ibmvfc: Fix erroneous use of rtas_busy_delay with hcall return code libnvdimm/of_pmem: Use devm_kstrdup instead of kstrdup and check its return value nd_btt: Make BTT lanes preemptible crypto: caam/qi2 - fix Chacha20 + Poly1305 self test failure crypto: caam/jr - fix Chacha20 + Poly1305 self test failure crypto: qat - increase size of buffers PCI: vmd: Correct PCI Header Type Register's multi-function check hid: cp2112: Fix duplicate workqueue initialization crypto: hisilicon/qm - delete redundant null assignment operations crypto: hisilicon/qm - modify the process of regs dfx crypto: hisilicon/qm - split a debugfs.c from qm crypto: hisilicon/qm - fix PF queue parameter issue ARM: 9321/1: memset: cast the constant byte to unsigned char ext4: move 'ix' sanity check to corrent position ASoC: fsl: mpc5200_dma.c: Fix warning of Function parameter or member not described IB/mlx5: Fix rdma counter binding for RAW QP RDMA/hns: Fix printing level of asynchronous events RDMA/hns: Fix uninitialized ucmd in hns_roce_create_qp_common() RDMA/hns: Fix signed-unsigned mixed comparisons RDMA/hns: Add check for SL RDMA/hns: The UD mode can only be configured with DCQCN ASoC: SOF: core: Ensure sof_ops_free() is still called when probe never ran. ASoC: fsl: Fix PM disable depth imbalance in fsl_easrc_probe scsi: ufs: core: Leave space for '\0' in utf8 desc string RDMA/hfi1: Workaround truncation compilation error HID: cp2112: Make irq_chip immutable hid: cp2112: Fix IRQ shutdown stopping polling for all IRQs on chip sh: bios: Revive earlyprintk support Revert "HID: logitech-hidpp: add a module parameter to keep firmware gestures" HID: logitech-hidpp: Remove HIDPP_QUIRK_NO_HIDINPUT quirk HID: logitech-hidpp: Don't restart IO, instead defer hid_connect() only HID: logitech-hidpp: Revert "Don't restart communication if not necessary" HID: logitech-hidpp: Move get_wireless_feature_index() check to hidpp_connect_event() ASoC: Intel: Skylake: Fix mem leak when parsing UUIDs fails padata: Fix refcnt handling in padata_free_shell() crypto: qat - fix deadlock in backlog processing ASoC: ams-delta.c: use component after check IB/mlx5: Fix init stage error handling to avoid double free of same QP and UAF mfd: core: Un-constify mfd_cell.of_reg mfd: core: Ensure disabled devices are skipped without aborting mfd: dln2: Fix double put in dln2_probe dt-bindings: mfd: mt6397: Add binding for MT6357 dt-bindings: mfd: mt6397: Split out compatible for MediaTek MT6366 PMIC mfd: arizona-spi: Set pdata.hpdet_channel for ACPI enumerated devs leds: turris-omnia: Drop unnecessary mutex locking leds: turris-omnia: Do not use SMBUS calls leds: pwm: Don't disable the PWM when the LED should be off leds: trigger: ledtrig-cpu:: Fix 'output may be truncated' issue for 'cpu' kunit: add macro to allow conditionally exposing static symbols to tests apparmor: test: make static symbols visible during kunit testing apparmor: fix invalid reference on profile->disconnected perf stat: Fix aggr mode initialization iio: frequency: adf4350: Use device managed functions and fix power down issue. perf kwork: Fix incorrect and missing free atom in work_push_atom() perf kwork: Add the supported subcommands to the document perf kwork: Set ordered_events to true in 'struct perf_tool' filemap: add filemap_get_folios_tag() f2fs: convert f2fs_write_cache_pages() to use filemap_get_folios_tag() f2fs: compress: fix deadloop in f2fs_write_cache_pages() f2fs: compress: fix to avoid use-after-free on dic f2fs: compress: fix to avoid redundant compress extension tty: tty_jobctrl: fix pid memleak in disassociate_ctty() livepatch: Fix missing newline character in klp_resolve_symbols() pinctrl: renesas: rzg2l: Make reverse order of enable() for disable() perf record: Fix BTF type checks in the off-cpu profiling dmaengine: idxd: Register dsa_bus_type before registering idxd sub-drivers usb: dwc2: fix possible NULL pointer dereference caused by driver concurrency usb: chipidea: Fix DMA overwrite for Tegra usb: chipidea: Simplify Tegra DMA alignment code dmaengine: ti: edma: handle irq_of_parse_and_map() errors misc: st_core: Do not call kfree_skb() under spin_lock_irqsave() tools: iio: iio_generic_buffer ensure alignment USB: usbip: fix stub_dev hub disconnect dmaengine: pxa_dma: Remove an erroneous BUG_ON() in pxad_free_desc() f2fs: fix to initialize map.m_pblk in f2fs_precache_extents() interconnect: qcom: sc7180: Retire DEFINE_QBCM interconnect: qcom: sc7180: Set ACV enable_mask interconnect: qcom: sc7280: Set ACV enable_mask interconnect: qcom: sc8180x: Set ACV enable_mask interconnect: qcom: sc8280xp: Set ACV enable_mask interconnect: qcom: sdm845: Retire DEFINE_QBCM interconnect: qcom: sdm845: Set ACV enable_mask interconnect: qcom: sm6350: Retire DEFINE_QBCM interconnect: qcom: sm6350: Set ACV enable_mask interconnect: move ignore_list out of of_count_icc_providers() interconnect: qcom: sm8150: Drop IP0 interconnects interconnect: qcom: sm8150: Retire DEFINE_QBCM interconnect: qcom: sm8150: Set ACV enable_mask interconnect: qcom: sm8350: Retire DEFINE_QBCM interconnect: qcom: sm8350: Set ACV enable_mask powerpc: Only define __parse_fpscr() when required modpost: fix tee MODULE_DEVICE_TABLE built on big-endian host modpost: fix ishtp MODULE_DEVICE_TABLE built on big-endian host powerpc/40x: Remove stale PTE_ATOMIC_UPDATES macro powerpc/xive: Fix endian conversion size powerpc/vas: Limit open window failure messages in log bufffer powerpc/imc-pmu: Use the correct spinlock initializer. powerpc/pseries: fix potential memory leak in init_cpu_associativity() xhci: Loosen RPM as default policy to cover for AMD xHC 1.1 usb: host: xhci-plat: fix possible kernel oops while resuming perf machine: Avoid out of bounds LBR memory read perf hist: Add missing puts to hist__account_cycles 9p/net: fix possible memory leak in p9_check_errors() i3c: Fix potential refcount leak in i3c_master_register_new_i3c_devs cxl/mem: Fix shutdown order crypto: ccp - Name -1 return value as SEV_RET_NO_FW_CALL x86/sev: Change snp_guest_issue_request()'s fw_err argument virt: sevguest: Fix passing a stack buffer as a scatterlist target rtc: pcf85363: fix wrong mask/val parameters in regmap_update_bits call pcmcia: cs: fix possible hung task and memory leak pccardd() pcmcia: ds: fix refcount leak in pcmcia_device_add() pcmcia: ds: fix possible name leak in error path in pcmcia_device_add() media: hantro: Check whether reset op is defined before use media: verisilicon: Do not enable G2 postproc downscale if source is narrower than destination media: ov5640: Drop dead code using frame_interval media: ov5640: fix vblank unchange issue when work at dvp mode media: i2c: max9286: Fix some redundant of_node_put() calls media: ov5640: Fix a memory leak when ov5640_probe fails media: bttv: fix use after free error due to btv->timeout timer media: amphion: handle firmware debug message media: mtk-jpegenc: Fix bug in JPEG encode quality selection media: s3c-camif: Avoid inappropriate kfree() media: vidtv: psi: Add check for kstrdup media: vidtv: mux: Add check and kfree for kstrdup media: cedrus: Fix clock/reset sequence media: cadence: csi2rx: Unregister v4l2 async notifier media: dvb-usb-v2: af9035: fix missing unlock media: cec: meson: always include meson sub-directory in Makefile regmap: prevent noinc writes from clobbering cache pwm: sti: Reduce number of allocations and drop usage of chip_data pwm: brcmstb: Utilize appropriate clock APIs in suspend/resume Input: synaptics-rmi4 - fix use after free in rmi_unregister_function() watchdog: ixp4xx: Make sure restart always works llc: verify mac len before reading mac header hsr: Prevent use after free in prp_create_tagged_frame() tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING bpf: Check map->usercnt after timer->timer is assigned inet: shrink struct flowi_common octeontx2-pf: Fix error codes octeontx2-pf: Fix holes in error code net: page_pool: add missing free_percpu when page_pool_init fail dccp: Call security_inet_conn_request() after setting IPv4 addresses. dccp/tcp: Call security_inet_conn_request() after setting IPv6 addresses. net: r8169: Disable multicast filter for RTL8168H and RTL8107E Fix termination state for idr_for_each_entry_ul() net: stmmac: xgmac: Enable support for multiple Flexible PPS outputs selftests: pmtu.sh: fix result checking octeontx2-pf: Rename tot_tx_queues to non_qos_queues octeontx2-pf: qos send queues management octeontx2-pf: Free pending and dropped SQEs net/smc: fix dangling sock under state SMC_APPFINCLOSEWAIT net/smc: allow cdc msg send rather than drop it with NULL sndbuf_desc net/smc: put sk reference if close work was canceled nvme: fix error-handling for io_uring nvme-passthrough tg3: power down device only on SYSTEM_POWER_OFF nbd: fix uaf in nbd_open blk-core: use pr_warn_ratelimited() in bio_check_ro() virtio/vsock: replace virtio_vsock_pkt with sk_buff vsock/virtio: remove socket from connected/bound list on shutdown r8169: respect userspace disabling IFF_MULTICAST i2c: iproc: handle invalid slave state netfilter: xt_recent: fix (increase) ipv6 literal buffer length netfilter: nft_redir: use `struct nf_nat_range2` throughout and deduplicate eval call-backs netfilter: nat: fix ipv6 nat redirect with mapped and scoped addresses RISC-V: Don't fail in riscv_of_parent_hartid() for disabled HARTs drm/syncobj: fix DRM_SYNCOBJ_WAIT_FLAGS_WAIT_AVAILABLE ASoC: mediatek: mt8186_mt6366_rt1019_rt5682s: trivial: fix error messages ASoC: hdmi-codec: register hpd callback on component probe ASoC: dapm: fix clock get name spi: spi-zynq-qspi: add spi-mem to driver kconfig dependencies fbdev: imsttfb: Fix error path of imsttfb_probe() fbdev: imsttfb: fix a resource leak in probe fbdev: fsl-diu-fb: mark wr_reg_wa() static tracing/kprobes: Fix the order of argument descriptions io_uring/net: ensure socket is marked connected on connect retry x86/amd_nb: Use Family 19h Models 60h-7Fh Function 4 IDs Revert "mmc: core: Capture correct oemid-bits for eMMC cards" btrfs: use u64 for buffer sizes in the tree search ioctls wifi: cfg80211: fix kernel-doc for wiphy_delayed_work_flush() virtio/vsock: don't use skbuff state to account credit virtio/vsock: remove redundant 'skb_pull()' call virtio/vsock: don't drop skbuff on copy failure vsock/loopback: use only sk_buff_head.lock to protect the packet queue virtio/vsock: fix leaks due to missing skb owner virtio/vsock: Fix uninit-value in virtio_transport_recv_pkt() virtio/vsock: fix header length on skb merging Linux 6.1.63 Change-Id: I87b7a539b11c90cfaf16edb07d613f74d54458a4 Signed-off-by: Greg Kroah-Hartman <gregkh@google.com>	2023-11-27 16:59:46 +00:00
Marek Szyprowski	7ec7b7d3f2	media: cec: meson: always include meson sub-directory in Makefile ... [ Upstream commit 94e27fbeca27d8c772fc2bc807730aaee5886055 ] 'meson' directory contains two separate drivers, so it should be added to Makefile compilation hierarchy unconditionally, because otherwise the meson-ao-cec-g12a won't be compiled if meson-ao-cec is not selected. Signed-off-by: Marek Szyprowski <m.szyprowski@samsung.com> Fixes: 4be5e8648b ("media: move CEC platform drivers to a separate directory") Signed-off-by: Hans Verkuil <hverkuil-cisco@xs4all.nl> Signed-off-by: Sasha Levin <sashal@kernel.org>	2023-11-20 11:52:15 +01:00
Hans Verkuil	103c66dcf5	media: dvb-usb-v2: af9035: fix missing unlock ... [ Upstream commit f31b2cb85f0ee165d78e1c43f6d69f82cc3b2145 ] Instead of returning an error, goto the mutex unlock at the end of the function. Fixes smatch warning: drivers/media/usb/dvb-usb-v2/af9035.c:467 af9035_i2c_master_xfer() warn: inconsistent returns '&d->i2c_mutex'. Locked on : 326,387 Unlocked on: 465,467 Signed-off-by: Hans Verkuil <hverkuil-cisco@xs4all.nl> Fixes: 7bf744f2de0a ("media: dvb-usb-v2: af9035: Fix null-ptr-deref in af9035_i2c_master_xfer") Signed-off-by: Hans Verkuil <hverkuil-cisco@xs4all.nl> Signed-off-by: Sasha Levin <sashal@kernel.org>	2023-11-20 11:52:14 +01:00
Pratyush Yadav	39c2ec94a8	media: cadence: csi2rx: Unregister v4l2 async notifier ... [ Upstream commit b2701715301a49b53d05c7d43f3fedc3b8743bfc ] The notifier is added to the global notifier list when registered. When the module is removed, the struct csi2rx_priv in which the notifier is embedded, is destroyed. As a result the notifier list has a reference to a notifier that no longer exists. This causes invalid memory accesses when the list is iterated over. Similar for when the probe fails. Unregister and clean up the notifier to avoid this. Fixes: 1fc3b37f34 ("media: v4l: cadence: Add Cadence MIPI-CSI2 RX driver") Signed-off-by: Pratyush Yadav <p.yadav@ti.com> Tested-by: Julien Massot <julien.massot@collabora.com> Reviewed-by: Laurent Pinchart <laurent.pinchart@ideasonboard.com> Reviewed-by: Tomi Valkeinen <tomi.valkeinen@ideasonboard.com> Reviewed-by: Maxime Ripard <mripard@kernel.org> Signed-off-by: Jai Luthra <j-luthra@ti.com> Signed-off-by: Sakari Ailus <sakari.ailus@linux.intel.com> Signed-off-by: Hans Verkuil <hverkuil-cisco@xs4all.nl> Signed-off-by: Sasha Levin <sashal@kernel.org>	2023-11-20 11:52:14 +01:00
Jiasheng Jiang	a254ee1ddc	media: vidtv: mux: Add check and kfree for kstrdup ... [ Upstream commit 1fd6eb12642e0c32692924ff359c07de4b781d78 ] Add check for the return value of kstrdup() and return the error if it fails in order to avoid NULL pointer dereference. Moreover, use kfree() in the later error handling in order to avoid memory leak. Fixes: c2f78f0cb2 ("media: vidtv: psi: add a Network Information Table (NIT)") Signed-off-by: Jiasheng Jiang <jiasheng@iscas.ac.cn> Signed-off-by: Hans Verkuil <hverkuil-cisco@xs4all.nl> Signed-off-by: Sasha Levin <sashal@kernel.org>	2023-11-20 11:52:14 +01:00
Jiasheng Jiang	5c26aae372	media: vidtv: psi: Add check for kstrdup ... [ Upstream commit 76a2c5df6ca8bd8ada45e953b8c72b746f42918d ] Add check for the return value of kstrdup() and return the error if it fails in order to avoid NULL pointer dereference. Fixes: 7a7899f6f5 ("media: vidtv: psi: Implement an Event Information Table (EIT)") Fixes: c2f78f0cb2 ("media: vidtv: psi: add a Network Information Table (NIT)") Fixes: f90cf6079b ("media: vidtv: add a bridge driver") Signed-off-by: Jiasheng Jiang <jiasheng@iscas.ac.cn> Signed-off-by: Hans Verkuil <hverkuil-cisco@xs4all.nl> Signed-off-by: Sasha Levin <sashal@kernel.org>	2023-11-20 11:52:14 +01:00
Katya Orlova	e7c96f4605	media: s3c-camif: Avoid inappropriate kfree() ... [ Upstream commit 61334819aca018c3416ee6c330a08a49c1524fc3 ] s3c_camif_register_video_node() works with video_device structure stored as a field of camif_vp, so it should not be kfreed. But there is video_device_release() on error path that do it. Found by Linux Verification Center (linuxtesting.org) with SVACE. Fixes: babde1c243 ("[media] V4L: Add driver for S3C24XX/S3C64XX SoC series camera interface") Signed-off-by: Katya Orlova <e.orlova@ispras.ru> Signed-off-by: Hans Verkuil <hverkuil-cisco@xs4all.nl> Signed-off-by: Sasha Levin <sashal@kernel.org>	2023-11-20 11:52:14 +01:00
Fei Shao	1620531a3d	media: mtk-jpegenc: Fix bug in JPEG encode quality selection ... [ Upstream commit 0aeccc63f3bc4cfd49dc4893da1409402ee6b295 ] The driver uses the upper-bound approach to decide the target JPEG encode quality, but there's a logic bug that if the desired quality is higher than what the driver can support, the driver falls back to using the worst quality. Fix the bug by assuming using the best quality in the beginning, and with trivial refactor to avoid long lines. Fixes: 45f13a57d8 ("media: platform: Add jpeg enc feature") Signed-off-by: Fei Shao <fshao@chromium.org> Reviewed-by: Chen-Yu Tsai <wenst@chromium.org> Signed-off-by: Hans Verkuil <hverkuil-cisco@xs4all.nl> Signed-off-by: Sasha Levin <sashal@kernel.org>	2023-11-20 11:52:14 +01:00
Ming Qian	b75fb8a2ee	media: amphion: handle firmware debug message ... [ Upstream commit 6496617b2b06d7004a5cbd53d48f19567d6b018c ] decoder firmware may notify host some debug message, it can help analyze the state of the firmware in case of error Fixes: 9f599f351e ("media: amphion: add vpu core driver") Signed-off-by: Ming Qian <ming.qian@nxp.com> Reviewed-by: Nicolas Dufresne <nicolas.dufresne@collabora.com> Signed-off-by: Hans Verkuil <hverkuil-cisco@xs4all.nl> Signed-off-by: Sasha Levin <sashal@kernel.org>	2023-11-20 11:52:14 +01:00
Zheng Wang	20568d06f6	media: bttv: fix use after free error due to btv->timeout timer ... [ Upstream commit bd5b50b329e850d467e7bcc07b2b6bde3752fbda ] There may be some a race condition between timer function bttv_irq_timeout and bttv_remove. The timer is setup in probe and there is no timer_delete operation in remove function. When it hit kfree btv, the function might still be invoked, which will cause use after free bug. This bug is found by static analysis, it may be false positive. Fix it by adding del_timer_sync invoking to the remove function. cpu0 cpu1 bttv_probe ->timer_setup ->bttv_set_dma ->mod_timer; bttv_remove ->kfree(btv); ->bttv_irq_timeout ->USE btv Fixes: 162e6376ac ("media: pci: Convert timers to use timer_setup()") Signed-off-by: Zheng Wang <zyytlz.wz@163.com> Signed-off-by: Hans Verkuil <hverkuil-cisco@xs4all.nl> Signed-off-by: Sasha Levin <sashal@kernel.org>	2023-11-20 11:52:14 +01:00
Xiaolei Wang	825a7a6a3a	media: ov5640: Fix a memory leak when ov5640_probe fails ... [ Upstream commit 20290feaaeb76cc719921aad275ccb18662a7c3a ] sensor->ctrls.handler is initialized in ov5640_init_controls(), so when the sensor is not connected and ov5640_sensor_resume() fails, sensor->ctrls.handler should be released, otherwise a memory leak will be detected: unreferenced object 0xc674ca80 (size 64): comm "swapper/0", pid 1, jiffies 4294938337 (age 204.880s) hex dump (first 32 bytes): 80 55 75 c6 80 54 75 c6 00 55 75 c6 80 52 75 c6 .Uu..Tu..Uu..Ru. 00 53 75 c6 00 00 00 00 00 00 00 00 00 00 00 00 .Su.......... Fixes: 85644a9b37 ("media: ov5640: Use runtime PM") Signed-off-by: Xiaolei Wang <xiaolei.wang@windriver.com> Signed-off-by: Sakari Ailus <sakari.ailus@linux.intel.com> Signed-off-by: Hans Verkuil <hverkuil-cisco@xs4all.nl> Signed-off-by: Sasha Levin <sashal@kernel.org>	2023-11-20 11:52:14 +01:00
Christophe JAILLET	ba305517a1	media: i2c: max9286: Fix some redundant of_node_put() calls ... [ Upstream commit 0822315e46b400f611cba1193456ee6a5dc3e41d ] This is odd to have a of_node_put() just after a for_each_child_of_node() or a for_each_endpoint_of_node() loop. It should already be called during the last iteration. Remove these calls. Fixes: 66d8c9d242 ("media: i2c: Add MAX9286 driver") Signed-off-by: Christophe JAILLET <christophe.jaillet@wanadoo.fr> Reviewed-by: Jacopo Mondi <jacopo.mondi@ideasonboard.com> Reviewed-by: Laurent Pinchart <laurent.pinchart+renesas@ideasonboard.com> Reviewed-by: Kieran Bingham <kieran.bingham+renesas@ideasonboard.com> Signed-off-by: Sakari Ailus <sakari.ailus@linux.intel.com> Signed-off-by: Hans Verkuil <hverkuil-cisco@xs4all.nl> Signed-off-by: Sasha Levin <sashal@kernel.org>	2023-11-20 11:52:14 +01:00
Guoniu.zhou	a7a8c49dc6	media: ov5640: fix vblank unchange issue when work at dvp mode ... [ Upstream commit 8fc29e3c9f682d4ad9b0764d44ecc6c19b000051 ] The value of V4L2_CID_VBLANK control is initialized to default vblank value of 640x480 when driver probe. When OV5640 work at DVP mode, the control value won't update and lead to sensor can't output data if the resolution remain the same as last time since incorrect total vertical size. So update it when there is a new value applied. Fixes: bce93b827d ("media: ov5640: Add VBLANK control") Signed-off-by: Guoniu.zhou <guoniu.zhou@nxp.com> Signed-off-by: Sakari Ailus <sakari.ailus@linux.intel.com> Signed-off-by: Hans Verkuil <hverkuil-cisco@xs4all.nl> Signed-off-by: Sasha Levin <sashal@kernel.org>	2023-11-20 11:52:14 +01:00
Jacopo Mondi	9b1c0aca7f	media: ov5640: Drop dead code using frame_interval ... [ Upstream commit eeaa47d182fedfe68b8fd40ef3798761c8904791 ] The ov5640_update_pixel_rate() function handles the parallel and MIPI CSI-2 cases separately. When running on a parallel setup the V4L2_CID_PIXEL_RATE value is calculated at the beginning of the function using the values configured with the frame_interval operations, and then the function immediately returns. The remaining of the function handles the MIPI CSI-2 configuration and should not use the 'current_fr' and 'def_fps' fields as those are only relevant for parallel mode. Drop a small section of dead code that updates vblank using frame_interval on a MIPI CSI-2 setup. Signed-off-by: Jacopo Mondi <jacopo.mondi@ideasonboard.com> Signed-off-by: Sakari Ailus <sakari.ailus@linux.intel.com> Signed-off-by: Hans Verkuil <hverkuil-cisco@xs4all.nl> Stable-dep-of: 8fc29e3c9f68 ("media: ov5640: fix vblank unchange issue when work at dvp mode") Signed-off-by: Sasha Levin <sashal@kernel.org>	2023-11-20 11:52:13 +01:00
Marek Vasut	6380621de3	media: verisilicon: Do not enable G2 postproc downscale if source is narrower than destination ... [ Upstream commit 6e481d52d363218a3e6feb31694da74b38b30fad ] In case of encoded input VP9 data width that is not multiple of macroblock size, which is 16 (e.g. 1080x1920 frames, where 1080 is multiple of 8), the width is padded to be a multiple of macroblock size (for 1080x1920 frames, that is 1088x1920). The hantro_postproc_g2_enable() checks whether the encoded data width is equal to decoded frame width, and if not, enables down-scale mode. For a frame where input is 1080x1920 and output is 1088x1920, this is incorrect as no down-scale happens, the frame is only padded. Enabling the down-scale mode in this case results in corrupted frames. Fix this by adjusting the check to test whether encoded data width is greater than decoded frame width, and only in that case enable the down-scale mode. To generate input test data to trigger this bug, use e.g.: $ gst-launch-1.0 videotestsrc ! video/x-raw,width=272,height=256,format=I420 ! \ vp9enc ! matroskamux ! filesink location=/tmp/test.vp9 To trigger the bug upon decoding (note that the NV12 must be forced, as that assures the output data would pass the G2 postproc): $ gst-launch-1.0 filesrc location=/tmp/test.vp9 ! matroskademux ! vp9parse ! \ v4l2slvp9dec ! video/x-raw,format=NV12 ! videoconvert ! fbdevsink Fixes: 79c987de8b ("media: hantro: Use post processor scaling capacities") Signed-off-by: Marek Vasut <marex@denx.de> Reviewed-by: Benjamin Gaignard <benjamin.gaignard@collabora.com> Signed-off-by: Hans Verkuil <hverkuil-cisco@xs4all.nl> Signed-off-by: Sasha Levin <sashal@kernel.org>	2023-11-20 11:52:13 +01:00