Noble update: v6.7.2 upstream stable release

[Andrea Righi]

    SRU Justification

    Impact:
       The upstream process for stable tree updates is quite similar
       in scope to the Ubuntu SRU process, e.g., each patch has to
       demonstrably fix a bug, and each patch is vetted by upstream
       by originating either directly from a mainline/stable Linux tree or
       a minimally backported form of that patch. The following upstream
       stable patches should be included in the Ubuntu kernel:

       v6.7.2 upstream stable release
       from git://git.kernel.org/

Linux 6.7.2
Revert "Revert "md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d""
arm64: dts: armada-3720-turris-mox: set irq type for RTC
Revert "KEYS: encrypted: Add check for strsep"
i2c: s3c24xx: fix transferring more than one message in polling mode
i2c: s3c24xx: fix read transfers in polling mode
ipv6: mcast: fix data-race in ipv6_mc_down / mld_ifc_work
selftests: mlxsw: qos_pfc: Adjust the test to support 8 lanes
mlxsw: spectrum_router: Register netdevice notifier before nexthop
mlxsw: spectrum_acl_tcam: Fix stack corruption
mlxsw: spectrum_acl_tcam: Fix NULL pointer dereference in error path
mlxsw: spectrum_acl_erp: Fix error flow of pool allocation failure
loop: fix the the direct I/O support check when used on top of block devices
ethtool: netlink: Add missing ethnl_ops_begin/complete
arm64/ptrace: Don't flush ZA/ZT storage when writing ZA via ptrace
kdb: Fix a potential buffer overflow in kdb_local()
io_uring: adjust defer tw counting
ipvs: avoid stat macros calls from preemptible context
netfilter: nf_tables: reject NFT_SET_CONCAT with not field length description
netfilter: nf_tables: skip dead set elements in netlink dump
netfilter: nf_tables: do not allow mismatch field size and set key length
netfilter: bridge: replace physindev with physinif in nf_bridge_info
netfilter: propagate net to nf_bridge_get_physindev
netfilter: nf_queue: remove excess nf_bridge variable
netfilter: nfnetlink_log: use proper helper for fetching physinif
netfilter: nft_limit: do not ignore unsupported flags
netfilter: nf_tables: reject invalid set policy
net: netdevsim: don't try to destroy PHC on VFs
mptcp: relax check on MPC passive fallback
LoongArch: BPF: Prevent out-of-bounds memory access
net: dsa: vsc73xx: Add null pointer check to vsc73xx_gpio_probe
bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS
net: stmmac: ethtool: Fixed calltrace caused by unbalanced disable_irq_wake calls
selftests: bonding: Change script interpreter
drm/amdgpu: fall back to INPUT power for AVG power via INFO IOCTL
drm/amdkfd: fixes for HMM mem allocation
gpiolib: Fix scope-based gpio_device refcounting
ASoC: SOF: ipc4-loader: remove the CPC check warnings
gpio: mlxbf3: add an error code check in mlxbf3_gpio_probe
dt-bindings: gpio: xilinx: Fix node address in gpio
net: ravb: Fix dma_addr_t truncation in error case
net: tls, fix WARNIING in __sk_msg_free
bpf: Avoid iter->offset making backward progress in bpf_iter_udp
bpf: iter_udp: Retry with a larger batch size without going back to the previous bucket
net: netdev_queue: netdev_txq_completed_mb(): fix wake condition
net: add more sanity check in virtio_net_hdr_to_skb()
erofs: fix inconsistent per-file compression format
udp: annotate data-races around up->pending
net: stmmac: Fix ethool link settings ops for integrated PCS
block: ensure we hold a queue reference when using queue limits
mptcp: refine opt_mp_capable determination
mptcp: use OPTION_MPTCP_MPJ_SYN in subflow_check_req()
mptcp: use OPTION_MPTCP_MPJ_SYNACK in subflow_finish_connect()
mptcp: strict validation before using mp_opt->hmac
mptcp: mptcp_parse_option() fix for MPTCPOPT_MP_JOIN
ALSA: hda: Properly setup HDMI stream
net: phy: micrel: populate .soft_reset for KSZ9131
net: micrel: Fix PTP frame parsing for lan8841
ALSA: aloop: Introduce a function to get if access is interleaved mode
amt: do not use overwrapped cb area
net: ethernet: ti: am65-cpsw: Fix max mtu to fit ethernet frames
octeontx2-af: CN10KB: Fix FIFO length calculation for RPM2
rxrpc: Fix use of Don't Fragment flag
net: dsa: fix netdev_priv() dereference before check on non-DSA netdevice events
net: qualcomm: rmnet: fix global oob in rmnet_policy
s390/pci: fix max size calculation in zpci_memcpy_toio()
ASoC: mediatek: sof-common: Add NULL check for normal_link string
PCI: mediatek-gen3: Fix translation window size calculation
apparmor: Fix memory leak in unpack_profile()
PCI: keystone: Fix race condition when initializing PHYs
nvmet-tcp: Fix the H2C expected PDU len calculation
PCI: xilinx-xdma: Fix error code in xilinx_pl_dma_pcie_init_irq_domain()
PCI: xilinx-xdma: Fix uninitialized symbols in xilinx_pl_dma_pcie_setup_irq()
nvme: trace: avoid memcpy overflow warning
nvmet: re-fix tracing strncpy() warning
hisi_acc_vfio_pci: Update migration data pointer correctly on saving/resume
spi: coldfire-qspi: Remove an erroneous clk_disable_unprepare() from the remove function
cxl/port: Fix missing target list lock
perf db-export: Fix missing reference count get in call_path_from_sample()
cdx: Unlock on error path in rescan_store()
cdx: call of_node_put() on error path
serial: apbuart: fix console prompt on qemu
serial: imx: Correct clock error message in function probe()
usb: xhci-mtk: fix a short packet issue of gen1 isoc-in transfer
apparmor: avoid crash when parsed profile name is empty
apparmor: fix possible memory leak in unpack_trans_table
cxl/region: fix x9 interleave typo
perf stat: Fix hard coded LL miss units
perf env: Avoid recursively taking env->bpf_progs.lock
apparmor: free the allocated pdb objects
nvmet-tcp: fix a missing endianess conversion in nvmet_tcp_try_peek_pdu
nvmet-tcp: fix a crash in nvmet_req_complete()
nvmet-tcp: Fix a kernel panic when host sends an invalid H2C PDU length
apparmor: Fix ref count leak in task_kill
vdpa: Fix an error handling path in eni_vdpa_probe()
power: supply: Fix null pointer dereference in smb2_probe
perf vendor events: Remove UTF-8 characters from cmn.json
iommu: Don't reserve 0-length IOVA region
greybus: gb-beagleplay: Remove use of pad bytes
usb: gadget: webcam: Make g_webcam loadable again
spmi: mtk-pmif: Serialize PMIF status check and command submission
cdx: Explicitly include correct DT includes, again
arm64: dts: qcom: qrb5165-rb5: use u16 for DP altmode svid
usb: cdc-acm: return correct error code on unsupported break
PCI: epf-mhi: Fix the DMA data direction of dma_unmap_single()
bus: mhi: ep: Pass mhi_ep_buf_info struct to read/write APIs
bus: mhi: ep: Use slab allocator where applicable
bus: mhi: ep: Do not allocate event ring element on stack
perf unwind-libunwind: Fix base address for .eh_frame
perf unwind-libdw: Handle JIT-generated DSOs properly
perf genelf: Set ELF program header addresses properly
perf hisi-ptt: Fix one memory leakage in hisi_ptt_process_auxtrace_event()
perf header: Fix one memory leakage in perf_event__fprintf_event_update()
iio: adc: ad9467: fix scale setting
iio: adc: ad9467: add mutex to struct ad9467_state
iio: adc: ad9467: don't ignore error codes
iio: adc: ad9467: fix reset gpio handling
selftests/sgx: Skip non X86_64 platform
selftests/sgx: Include memory clobber for inline asm in test enclave
selftests/sgx: Fix uninitialized pointer dereferences in encl_get_entry
selftests/sgx: Fix uninitialized pointer dereference in error path
serial: imx: fix tx statemachine deadlock
software node: Let args be NULL in software_node_get_reference_args
acpi: property: Let args be NULL in __acpi_node_get_property_reference
base/node.c: initialize the accessor list before registering
perf stat: Exit perf stat if parse groups fails
perf mem: Fix error on hybrid related to availability of mem event in a PMU
perf vendor events powerpc: Update datasource event name to fix duplicate events
perf vendor events arm64 AmpereOne: Rename BPU_FLUSH_MEM_FAULT to GPC_FLUSH_MEM_FAULT
vfio/pds: Fix calculations in pds_vfio_dirty_sync
perf test record user-regs: Fix mask for vg register
staging: vc04_services: Do not pass NULL to vchiq_log_error()
staging: vc04_services: vchiq_core: Log through struct vchiq_instance
libapi: Add missing linux/types.h header to get the __u64 type on io.h
perf header: Fix segfault on build_mem_topology() error path
perf test: Remove atomics from test_loop to avoid test failures
iommu: Map reserved memory as cacheable if device is coherent
serial: 8250: omap: Don't skip resource freeing if pm_runtime_resume_and_get() failed
PCI: Avoid potential out-of-bounds read in pci_dev_for_each_resource()
power: supply: bq256xx: fix some problem in bq256xx_hw_init
power: supply: cw2015: correct time_to_empty units in sysfs
MIPS: Alchemy: Fix an out-of-bound access in db1550_dev_setup()
MIPS: Alchemy: Fix an out-of-bound access in db1200_dev_setup()
drm/i915/dp: Fix the max DSC bpc supported by source
riscv: Fixed wrong register in XIP_FIXUP_FLASH_OFFSET macro
riscv: Fix set_direct_map_default_noflush() to reset _PAGE_EXEC
riscv: Fix module_alloc() that did not reset the linear mapping permissions
riscv: Fix wrong usage of lm_alias() when splitting a huge linear mapping
riscv: Check if the code to patch lies in the exit section
um: virt-pci: fix platform map offset
mips: Fix incorrect max_low_pfn adjustment
mips: dmi: Fix early remap on MIPS32
srcu: Use try-lock lockdep annotation for NMI-safe access.
mfd: intel-lpss: Fix the fractional clock divider flags
mfd: tps6594: Add null pointer check to tps6594_device_init()
leds: aw200xx: Fix write to DIM parameter
leds: aw2013: Select missing dependency REGMAP_I2C
rcu: Restrict access to RCU CPU stall notifiers
mfd: syscon: Fix null pointer dereference in of_syscon_register()
mfd: cs42l43: Correct SoundWire port list
mfd: rk8xx: fixup devices registration with PLATFORM_DEVID_AUTO
ARM: 9330/1: davinci: also select PINCTRL
serial: sc16is7xx: set safe default SPI clock frequency
serial: sc16is7xx: add check for unsupported SPI modes during probe
HID: wacom: Correct behavior when processing some confidence == false touches
HID: sensor-hub: Enable hid core report processing for all devices
iio: adc: ad7091r: Pass iio_dev to event handler
KVM: x86/pmu: Reset the PMU, i.e. stop counters, before refreshing
KVM: x86/pmu: Move PMU reset logic to common x86 code
KVM: arm64: vgic-its: Avoid potential UAF in LPI translation cache
KVM: arm64: vgic-v4: Restore pending state on host userspace write
x86/kvm: Do not try to disable kvmclock if it was not enabled
ARM: dts: qcom: sdx55: Fix the base address of PCIe PHY
PCI: mediatek: Clear interrupt status before dispatching handler
PCI: dwc: endpoint: Fix dw_pcie_ep_raise_msix_irq() alignment support
x86/pci: Reserve ECAM if BIOS didn't include it in PNP0C02 _CRS
PCI/P2PDMA: Remove reference to pci_p2pdma_map_sg()
cxl/port: Fix decoder initialization when nr_targets > interleave_ways
drm/amdgpu: revert "Adjust removal control flow for smu v13_0_2"
Revert "nSVM: Check for reserved encodings of TLB_CONTROL in nested VMCB"
Revert "net: rtnetlink: Enslave device before bringing it up"
net: stmmac: Prevent DSA tags from breaking COE
net: stmmac: fix ethtool per-queue statistics
wifi: mwifiex: fix uninitialized firmware_stat
wifi: mwifiex: configure BSSID consistently when starting AP
wifi: mwifiex: add extra delay for firmware ready
wifi: rtlwifi: Convert LNKCTL change to PCIe cap RMW accessors
wifi: rtlwifi: Remove bogus and dangerous ASPM disable/enable code
wifi: mt76: fix broken precal loading from MTD for mt7915
iommu/dma: Trace bounce buffer usage when mapping buffers
iommu/arm-smmu-qcom: Add missing GMU entry to match table
media: solo6x10: replace max(a, min(b, c)) by clamp(b, a, c)
bpf: Fix re-attachment branch in bpf_tracing_prog_attach
Bluetooth: Fix atomicity violation in {min,max}_key_size_set
rootfs: Fix support for rootfstype= when root= is given
md/raid1: Use blk_opf_t for read and write operations
pwm: Fix out-of-bounds access in of_pwm_single_xlate()
pwm: jz4740: Don't use dev_err_probe() in .request()
netfilter: nf_tables: check if catch-all set element is active in next generation
block: Fix iterating over an empty bio with bio_for_each_folio_all
block: Remove special-casing of compound pages
block: add check that partition length needs to be aligned with block size
drm/amd: Enable PCIe PME from D3
md: Fix md_seq_ops() regressions
scsi: mpi3mr: Block PEL Enable Command on Controller Reset and Unrecoverable State
scsi: mpi3mr: Clean up block devices post controller reset
scsi: mpi3mr: Refresh sdev queue depth after controller reset
scsi: target: core: add missing file_{start,end}_write()
scsi: ufs: core: Simplify power management during async scan
fbdev: flush deferred IO before closing
fbdev: flush deferred work in fb_deferred_io_fsync()
fbdev/acornfb: Fix name of fb_ops initializer macro
io_uring: ensure local task_work is run on wait timeout
io_uring/rw: ensure io->bytes_done is always initialized
io_uring: don't check iopoll if request completes
LoongArch: Fix and simplify fcsr initialization on execve()
ceph: select FS_ENCRYPTION_ALGS if FS_ENCRYPTION
ksmbd: only v2 leases handle the directory
ksmbd: fix UAF issue in ksmbd_tcp_new_connection()
ksmbd: validate mech token in session setup
ALSA: hda/realtek: Enable headset mic on Lenovo M70 Gen5
ALSA: hda/realtek: Enable mute/micmute LEDs and limit mic boost on HP ZBook
ALSA: hda/relatek: Enable Mute LED on HP Laptop 15s-fq2xxx
ALSA: oxygen: Fix right channel of capture volume mixer
serial: omap: do not override settings for RS485 support
serial: 8250_exar: Set missing rs485_supported flag
serial: imx: Ensure that imx_uart_rs485_config() is called with enabled clock
serial: core, imx: do not set RS485 enabled if it is not supported
serial: 8250_bcm2835aux: Restore clock error handling
serial: core: set missing supported flag for RX during TX GPIO
serial: core: make sure RS485 cannot be enabled when it is not supported
serial: core: fix sanitizing check for RTS settings
serial: Do not hold the port lock when setting rx-during-tx GPIO
dt-bindings: phy: qcom,sc8280xp-qmp-usb43dp-phy: fix path to header
usb: mon: Fix atomicity violation in mon_bin_vma_fault
usb: typec: class: fix typec_altmode_put_partner to put plugs
Revert "usb: typec: class: fix typec_altmode_put_partner to put plugs"
usb: cdns3: Fix uvc fail when DMA cross 4k boundery since sg enabled
usb: cdns3: fix iso transfer error when mult is not zero
usb: cdns3: fix uvc failure work since sg support enabled
usb: chipidea: wait controller resume finished for wakeup irq
Revert "usb: dwc3: don't reset device side if dwc3 was configured as host-only"
Revert "usb: dwc3: Soft reset phy on probe for host"
usb: dwc3: gadget: Queue PM runtime idle on disconnect event
usb: dwc3: gadget: Handle EP0 request dequeuing properly
usb: dwc: ep0: Update request status in dwc3_ep0_stall_restart
usb: phy: mxs: remove CONFIG_USB_OTG condition for mxs_phy_is_otg_host()
usb: gadget: u_ether: Re-attach netif device to mirror detachment
Revert "usb: gadget: f_uvc: change endpoint allocation in uvc_function_bind()"
tick-sched: Fix idle and iowait sleeptime accounting vs CPU hotplug
powerpc/64s: Increase default stack size to 32KB
clocksource/drivers/ep93xx: Fix error handling during probe
dt-bindings: timer: thead,c900-aclint-mtimer: separate mtime and mtimecmp regs
clocksource/drivers/timer-ti-dm: Fix make W=n kerneldoc warnings
binder: fix race between mmput() and do_exit()
xen-netback: don't produce zero-size SKB frags
Revert "drm/amdkfd: Relocate TBA/TMA to opposite side of VM hole"
rust: Ignore preserve-most functions
Input: atkbd - use ab83 as id when skipping the getid command
binder: fix unused alloc->free_async_space
binder: fix async space check for 0-sized buffers
selftests/bpf: Add assert for user stacks in test_task_stack
Revert "kernfs: convert kernfs_idr_lock to an irq safe raw spinlock"
kernfs: convert kernfs_idr_lock to an irq safe raw spinlock
class: fix use-after-free in class_register()
of: unittest: Fix of_count_phandle_with_args() expected value message
fbdev: imxfb: fix left margin setting
of: Fix double free in of_parse_phandle_with_args_map
ksmbd: validate the zero field of packet header
kselftest/alsa - conf: Stringify the printed errno in sysfs_get()
kselftest/alsa - mixer-test: Fix the print format specifier warning
kselftest/alsa - mixer-test: fix the number of parameters to ksft_exit_fail_msg()
drm/amd/display: avoid stringop-overflow warnings for dp_decide_lane_settings()
drm/amd/pm/smu7: fix a memleak in smu7_hwmgr_backend_init
drm/amdkfd: Confirm list is non-empty before utilizing list_first_entry in kfd_topology.c
IB/iser: Prevent invalidating wrong MR
drm/amdkfd: Fix type of 'dbg_flags' in 'struct kfd_process'
mmc: sdhci_omap: Fix TI SoC dependencies
mmc: sdhci_am654: Fix TI SoC dependencies
ALSA: scarlett2: Add missing mutex lock around get meter levels
ALSA: scarlett2: Add clamp() in scarlett2_mixer_ctl_put()
ALSA: scarlett2: Add missing error checks to *_ctl_get()
ALSA: scarlett2: Add missing error check to scarlett2_usb_set_config()
ALSA: scarlett2: Add missing error check to scarlett2_config_save()
ASoC: rt5645: Drop double EF20 entry from dmi_platform_data[]
pwm: stm32: Fix enable count for clk in .probe()
pwm: stm32: Use hweight32 in stm32_pwm_detect_channels
clk: fixed-rate: fix clk_hw_register_fixed_rate_with_accuracy_parent_hw
clk: qcom: dispcc-sm8550: Use the correct PLL configuration function
clk: qcom: dispcc-sm8550: Update disp PLL settings
clk: qcom: gpucc-sm8550: Update GPU PLL settings
clk: qcom: gcc-sm8550: Mark RCGs shared where applicable
clk: qcom: gcc-sm8550: use collapse-voting for PCIe GDSCs
clk: qcom: gcc-sm8550: Mark the PCIe GDSCs votable
clk: qcom: gcc-sm8550: Add the missing RETAIN_FF_ENABLE GDSC flag
accel/habanalabs: fix information leak in sec_attest_info()
drm/mediatek: dp: Add phy_mtk_dp module as pre-dependency
ASoC: tas2781: add support for FW version 0x0503
ASoC: amd: vangogh: Drop conflicting ACPI-based probing
clk: si5341: fix an error code problem in si5341_output_clk_set_rate
clk: rs9: Fix DIF OEn bit placement on 9FGV0241
watchdog: rti_wdt: Drop runtime pm reference count when watchdog is unused
watchdog: bcm2835_wdt: Fix WDIOC_SETTIMEOUT handling
watchdog/hpwdt: Only claim UNKNOWN NMI if from iLO
watchdog: set cdev owner before adding
drivers: clk: zynqmp: update divider round rate logic
drivers: clk: zynqmp: calculate closest mux rate
clk: sp7021: fix return value check in sp7021_clk_probe()
clk: qcom: videocc-sm8150: Add missing PLL config property
f2fs: fix to check return value of f2fs_recover_xattr_data
drm/amd/pm: fix a double-free in amdgpu_parse_extended_power_table
gpu/drm/radeon: fix two memleaks in radeon_vm_init
drivers/amd/pm: fix a use-after-free in kv_parse_power_table
drm/amd/pm: fix a double-free in si_dpm_init
drm/amdgpu/debugfs: fix error code when smc register accessors are NULL
drm/mediatek: Fix underrun in VDO1 when switches off the layer
drm/mediatek: Remove the redundant driver data for DPI
drm/mediatek: Return error if MDP RDMA failed to enable the clock
media: i2c: mt9m114: use fsleep() in place of udelay()
drm/msm/dpu: Drop enable and frame_count parameters from dpu_hw_setup_misr()
drm/msm/dpu: Set input_sel bit for INTF
clk: renesas: rzg2l: Check reset monitor registers
clk: renesas: rzg2l-cpg: Reuse code in rzg2l_cpg_reset()
media: dvb-frontends: m88ds3103: Fix a memory leak in an error handling path of m88ds3103_probe()
media: dvbdev: drop refcount on error path in dvb_device_open()
f2fs: fix to update iostat correctly in f2fs_filemap_fault()
f2fs: fix to check compress file in f2fs_move_file_range()
f2fs: fix to wait on block writeback for post_read case
drm/panel: st7701: Fix AVCL calculation
drm/msm/adreno: Fix A680 chip id
media: rkisp1: Fix memory leaks in rkisp1_isp_unregister()
media: rkisp1: Fix media device memory leak
media: dt-bindings: media: rkisp1: Fix the port description for the parallel interface
media: imx-mipi-csis: Drop extra clock enable at probe()
media: imx-mipi-csis: Fix clock handling in remove()
media: videobuf2: request more buffers for vb2_read
media: bttv: add back vbi hack
media: bttv: start_streaming should return a proper error code
f2fs: Restrict max filesize for 16K f2fs
clk: qcom: gpucc-sm8150: Update the gpu_cc_pll1 config
RDMA/hns: Fix memory leak in free_mr_init()
ASoC: SOF: Intel: pci-mtl: fix ARL-S definitions
media: cx231xx: fix a memleak in cx231xx_init_isoc
drm/bridge: tc358767: Fix return value on error case
drm/bridge: cdns-mhdp8546: Fix use of uninitialized variable
drm/radeon/trinity_dpm: fix a memleak in trinity_parse_power_table
drm/radeon/dpm: fix a memleak in sumo_parse_power_table
drm/radeon: check the alloc_workqueue return value in radeon_crtc_init()
drm/amd/display: Check writeback connectors in create_validate_stream_for_sink
drm/amd/display: Use drm_connector in create_stream_for_sink
drm/amd/display: Return drm_connector from find_first_crtc_matching_connector
drm/msm/dpu: correct clk bit for WB2 block
drm/panfrost: Ignore core_mask for poweroff and disable PWRTRANS irq
drm/msm/dpu: populate SSPP scaler block version
drm/msm/dpu: enable SmartDMA on SM8450
ASoC: SOF: topology: Use partial match for disconnecting DAI link and DAI widget
ASoC: Intel: sof_sdw_rt_sdca_jack_common: ctx->headset_codec_dev = NULL
ASoC: Intel: glk_rt5682_max98357a: fix board id mismatch
media: v4l: async: Fix duplicated list deletion
drm/drv: propagate errors from drm_modeset_register_all()
drm/msm/dsi: Use pm_runtime_resume_and_get to prevent refcnt leaks
drm/msm/dpu: Add missing safe_lut_tbl in sc8180x catalog
drm/msm/mdp4: flush vblank event on disable
drm/msm/a6xx: add QMP dependency
ASoC: cs35l34: Fix GPIO name and drop legacy include
ASoC: cs35l33: Fix GPIO name and drop legacy include
drm/imx/lcdc: Fix double-free of driver data
drm/tidss: Fix dss reset
drm/tidss: Check for K2G in in dispc_softreset()
drm/tidss: Return error value from from softreset
drm/tidss: Move reset to the end of dispc_init()
drm/amd/display: Fix NULL pointer dereference at hibernate
drm/radeon: check return value of radeon_ring_lock()
drm/radeon/r100: Fix integer overflow issues in r100_cs_track_check()
drm/radeon/r600_cs: Fix possible int overflows in r600_cs_check_reg()
ASoC: fsl_rpmsg: update Kconfig dependencies
fbdev/sm712fb: Use correct initializer macros for struct fb_ops
Revert "drm/bridge: Add 200ms delay to wait FW HPD status stable"
f2fs: fix to avoid dirent corruption
drm/bridge: imx93-mipi-dsi: Fix a couple of building warnings
drm/bridge: Fix typo in post_disable() description
drm/sched: Fix bounds limiting when given a malformed entity
media: amphion: Fix VPU core alias name
media: rkvdec: Hook the (TRY_)DECODER_CMD stateless ioctls
media: verisilicon: Hook the (TRY_)DECODER_CMD stateless ioctls
media: visl: Hook the (TRY_)DECODER_CMD stateless ioctls
media: mtk-jpeg: Remove cancel worker in mtk_jpeg_remove to avoid the crash of multi-core JPEG devices
media: pvrusb2: fix use after free on context disconnection
drm/tilcdc: Fix irq free on unload
drm/bridge: tpd12s015: Drop buggy __exit annotation for remove function
drm/nouveau/fence:: fix warning directly dereferencing a rcu pointer
drm/panel-elida-kd35t133: hold panel in reset for unprepare
drm/panel: nv3051d: Hold panel in reset for unprepare
RDMA/hns: Fix inappropriate err code for unsupported operations
RDMA/usnic: Silence uninitialized symbol smatch warnings
drm/panfrost: Really power off GPU cores in panfrost_gpu_power_off()
drm/dp_mst: Fix fractional DSC bpp handling
drm/i915/display: Move releasing gem object away from fb tracking
Revert "drm/omapdrm: Annotate dma-fence critical section in commit path"
Revert "drm/tidss: Annotate dma-fence critical section in commit path"
ARM: davinci: always select CONFIG_CPU_ARM926T
ip6_tunnel: fix NEXTHDR_FRAGMENT handling in ip6_tnl_parse_tlv_enc_lim()
rxrpc: Fix skbuff cleanup of call's recvmsg_queue and rx_oos_queue
mlxbf_gige: Enable the GigE port in mlxbf_gige_open
mlxbf_gige: Fix intermittent no ip issue
net/sched: act_ct: fix skb leak and crash on ooo frags
blk-cgroup: fix rcu lockdep warning in blkg_lookup()
s390/bpf: Fix gotol with large offsets
sctp: fix busy polling
sctp: support MSG_ERRQUEUE flag in recvmsg()
bpf: sockmap, fix proto update hook to avoid dup calls
wifi: cfg80211: parse all ML elements in an ML probe response
wifi: cfg80211: correct comment about MLD ID
ice: Fix some null pointer dereference issues in ice_ptp.c
arm64: dts: rockchip: Fix led pinctrl of lubancat 1
null_blk: don't cap max_hw_sectors to BLK_DEF_MAX_SECTORS
Bluetooth: btmtkuart: fix recv_buf() return value
Bluetooth: btnxpuart: fix recv_buf() return value
Bluetooth: Fix bogus check for re-auth no supported with non-ssp
netfilter: nf_tables: validate chain type update if available
netfilter: nf_tables: mark newset as dead on transaction abort
wifi: iwlwifi: assign phy_ctxt before eSR activation
wifi: iwlwifi: fix out of bound copy_from_user
wifi: iwlwifi: mvm: Do not warn if valid link pair was not found
wifi: iwlwifi: mvm: send TX path flush in rfkill
wifi: iwlwifi: mvm: set siso/mimo chains to 1 in FW SMPS request
wifi: mac80211: fix advertised TTLM scheduling
wifi: rtlwifi: rtl8192se: using calculate_bit_shift()
wifi: rtlwifi: rtl8192ee: using calculate_bit_shift()
wifi: rtlwifi: rtl8192de: using calculate_bit_shift()
wifi: rtlwifi: rtl8192ce: using calculate_bit_shift()
wifi: rtlwifi: rtl8192cu: using calculate_bit_shift()
wifi: rtlwifi: rtl8192c: using calculate_bit_shift()
wifi: rtlwifi: rtl8188ee: phy: using calculate_bit_shift()
wifi: rtlwifi: add calculate_bit_shift()
bpf: Use c->unit_size to select target cache during free
arm64: dts: qcom: sc8180x: Fix up PCIe nodes
arm64: dts: qcom: sc8180x: Mark PCIe hosts cache-coherent
arm64: dts: qcom: sm8550: Update idle state time requirements
arm64: dts: qcom: sm8550: Separate out X3 idle state
arm64: dts: qcom: ipq6018: fix clock rates for GCC_USB0_MOCK_UTMI_CLK
arm64: dts: qcom: sc7280: Mark SDHCI hosts as cache-coherent
block: add check of 'minors' and 'first_minor' in device_add_disk()
soc: qcom: llcc: Fix LLCC_TRP_ATTR2_CFGn offset
firmware: qcom: qseecom: fix memory leaks in error paths
arm64: dts: qcom: sm8150-hdk: fix SS USB regulators
arm64: dts: qcom: sm8150: make dispcc cast minimal vote on MMCX
arm64: dts: qcom: sm6375: Hook up MPM
arm64: dts: qcom: sm6375: fix USB wakeup interrupt types
soc: qcom: llcc: Fix dis_cap_alloc and retain_on_pc configuration
arm64: dts: qcom: acer-aspire1: Correct audio codec definition
bpf: Limit the number of kprobes when attaching program to multiple kprobes
bpf: Limit the number of uprobes when attaching program to multiple uprobes
dma-mapping: clear dev->dma_mem to NULL after freeing it
virtio/vsock: send credit update during setting SO_RCVLOWAT
virtio/vsock: fix logic which reduces credit update messages
ipmr: support IP_PKTINFO on cache report IGMP msg
selftests/net: fix grep checking for fib_nexthop_multiprefix
bpf: Fix a race condition between btf_put() and map_free()
ARM: dts: stm32: don't mix SCMI and non-SCMI board compatibles
selftests/xsk: Fix for SEND_RECEIVE_UNALIGNED test
scsi: hisi_sas: Correct the number of global debugfs registers
scsi: hisi_sas: Rollback some operations if FLR failed
scsi: hisi_sas: Check before using pointer variables
scsi: hisi_sas: Replace with standard error code return value
scsi: ufs: qcom: Fix the return value when platform_get_resource_byname() fails
scsi: ufs: qcom: Fix the return value of ufs_qcom_ice_program_key()
arm64: dts: imx8mm: Reduce GPU to nominal speed
arm64: dts: renesas: white-hawk-cpu: Fix missing serial console pin control
arm64: dts: xilinx: Apply overlays to base dtbs
block: Set memalloc_noio to false on device_add_disk() error path
selftests/bpf: Relax time_tai test for equal timestamps in tai_forward
wifi: iwlwifi: don't support triggered EHT CQI feedback
wifi: mt76: mt7921: fix wrong 6Ghz power type
wifi: mt76: mt7921: fix CLC command timeout when suspend/resume
wifi: mt76: mt7921: fix country count limitation for CLC
arm64: dts: mediatek: mt8186: fix address warning for ADSP mailboxes
arm64: dts: mediatek: mt8186: Fix alias prefix for ovl_2l0
arm64: dts: mediatek: mt8195: revise VDOSYS RDMA node name
arm64: dts: mediatek: mt8183: correct MDP3 DMA-related nodes
dt-bindings: media: mediatek: mdp3: correct RDMA and WROT node with generic names
test_bpf: Rename second ALU64_SMOD_X to ALU64_SMOD_K
bpf: Fix accesses to uninit stack slots
bpf: Guard stack limits against 32bit overflow
arm64: dts: hisilicon: hikey970-pmic: fix regulator cells properties
bpf: Fix verification of indirect var-off stack access
wifi: mt76: mt7921s: fix workqueue problem causes STA association fail
wifi: mt76: mt7996: fix mt7996_mcu_all_sta_info_event struct packing
wifi: mt76: mt7915: also MT7981 is 3T3R but nss2 on 5 GHz band
wifi: mt76: mt7915: fix EEPROM offset of TSSI flag on MT7981
wifi: mt76: mt7996: fix alignment of sta info event
wifi: mt76: mt7996: fix rate usage of inband discovery frames
wifi: mt76: mt7996: fix the size of struct bss_rate_tlv
wifi: mt76: mt7915: fallback to non-wed mode if platform_get_resource fails in mt7915_mmio_wed_init()
wifi: mt76: fix typo in mt76_get_of_eeprom_from_nvmem function
wifi: mt76: mt7996: fix uninitialized variable in parsing txfree
arm64: dts: qcom: sm8550: fix USB wakeup interrupt types
arm64: dts: qcom: sc7280: fix usb_2 wakeup interrupt types
arm64: dts: qcom: sa8775p: fix USB wakeup interrupt types
arm64: dts: qcom: sc7280: Mark Adreno SMMU as DMA coherent
arm64: dts: qcom: sc7280: Fix up GPU SIDs
arm64: dts: qcom: sm8350: Fix DMA0 address
arm64: dts: qcom: sm6125: add interrupts to DWC3 USB controller
arm64: dts: qcom: sdm845-db845c: correct LED panic indicator
arm64: dts: qcom: qrb5165-rb5: correct LED panic indicator
arm64: dts: qcom: qrb2210-rb1: use USB host mode
scsi: fnic: Return error if vmalloc() failed
bpf: fix check for attempt to corrupt spilled pointer
selftests/net: specify the interface when do arping
bpf: Defer the free of inner map when necessary
bpf: Add map and need_defer parameters to .map_fd_put_ptr()
arm64: dts: qcom: sm6350: Make watchdog bark interrupt edge triggered
arm64: dts: qcom: sc8280xp: Make watchdog bark interrupt edge triggered
arm64: dts: qcom: sa8775p: Make watchdog bark interrupt edge triggered
arm64: dts: qcom: sm8250: Make watchdog bark interrupt edge triggered
arm64: dts: qcom: sm8150: Make watchdog bark interrupt edge triggered
arm64: dts: qcom: sdm845: Make watchdog bark interrupt edge triggered
arm64: dts: qcom: sc7280: Make watchdog bark interrupt edge triggered
arm64: dts: qcom: sc7180: Make watchdog bark interrupt edge triggered
arm64: dts: qcom: sm8550: correct TX Soundwire clock
arm64: dts: qcom: sm8450: correct TX Soundwire clock
arm64: dts: qcom: sc8180x-primus: Fix HALL_INT polarity
dt-bindings: arm: qcom: Fix html link
ARM: dts: qcom: sdx65: correct SPMI node name
ARM: dts: qcom: sdx65: correct PCIe EP phy-names
bpf: enforce precision of R0 on callback return
md: synchronize flush io with array reconfiguration
selftests/bpf: Fix erroneous bitmask operation
wifi: rtw88: sdio: Honor the host max_req_size in the RX path
arm64: dts: ti: iot2050: Re-add aliases
arm64: dts: ti: k3-am65-main: Fix DSS irq trigger type
arm64: dts: ti: k3-am62a-main: Fix GPIO pin count in DT nodes
wifi: rtlwifi: rtl8821ae: phy: fix an undefined bitwise shift behavior
wifi: ath12k: fix the error handler of rfkill config
scsi: bfa: Use the proper data type for BLIST flags
firmware: ti_sci: Fix an off-by-one in ti_sci_debugfs_create()
net/ncsi: Fix netlink major/minor version numbers
scsi: lpfc: Fix list_entry null check warning in lpfc_cmpl_els_plogi()
ARM: dts: qcom: apq8064: correct XOADC register address
wifi: libertas: stop selecting wext
wifi: ath11k: Defer on rproc_get failure
bpf: Add crosstask check to __bpf_get_stack
bpf: Add KF_RCU flag to bpf_refcount_acquire_impl
bpf, lpm: Fix check prefixlen before walking trie
wifi: rtw88: fix RX filter in FIF_ALLMULTI flag
wifi: plfxlc: check for allocation failure in plfxlc_usb_wreq_async()
ARM: dts: qcom: msm8226: provide dsi phy clocks to mmcc
arm64: dts: qcom: sc8280xp-x13s: add missing camera LED pin config
arm64: dts: qcom: sc8280xp-x13s: Use the correct DP PHY compatible
arm64: dts: qcom: qrb4210-rb2: don't force usb peripheral mode
asm-generic: Fix 32 bit __generic_cmpxchg_local
SUNRPC: Fixup v4.1 backchannel request timeouts
pNFS: Fix the pnfs block driver's calculation of layoutget size
SUNRPC: fix _xprt_switch_find_current_entry logic
NFSv4.1/pnfs: Ensure we handle the error NFS4ERR_RETURNCONFLICT
NFS: Use parent's objective cred in nfs_access_login_time()
blocklayoutdriver: Fix reference leak of pnfs_device_node
csky: fix arch_jump_label_transform_static override
keys, dns: Fix size check of V1 server-list header
crypto: scomp - fix req->dst buffer overflow
crypto: sahara - do not resize req->src when doing hash operations
crypto: sahara - fix processing hash requests with req->nbytes < sg->length
crypto: sahara - improve error handling in sahara_sha_process()
crypto: sahara - fix wait_for_completion_timeout() error handling
crypto: sahara - fix ahash reqsize
crypto: sahara - handle zero-length aes requests
crypto: sahara - avoid skcipher fallback code duplication
crypto: virtio - Wait for tasklet to complete on device remove
dlm: fix format seq ops type 4
gfs2: fix kernel BUG in gfs2_quota_cleanup
gfs2: Fix kernel NULL pointer dereference in gfs2_rgrp_dump
fs: indicate request originates from old mount API
erofs: fix memory leak on short-lived bounced pages
pstore: ram_core: fix possible overflow in persistent_ram_init_ecc()
crypto: hisilicon/zip - save capability registers in probe process
crypto: hisilicon/sec2 - save capability registers in probe process
crypto: hisilicon/hpre - save capability registers in probe process
crypto: hisilicon/qm - add a function to set qm algs
crypto: hisilicon/zip - add zip comp high perf mode configuration
crypto: hisilicon/qm - save capability registers in qm init process
crypto: sahara - fix error handling in sahara_hw_descriptor_create()
crypto: sahara - fix processing requests with cryptlen < sg->length
crypto: sahara - fix ahash selftest failure
crypto: sahara - fix cbc selftest failure
crypto: sahara - remove FLAGS_NEW_KEY logic
crypto: safexcel - Add error handling for dma_map_sg() calls
hwrng: stm32 - add missing clk_disable_unprepare() in stm32_rng_init()
crypto: qat - add NULL pointer check
crypto: qat - fix mutex ordering in adf_rl
crypto: qat - fix error path in add_update_sla()
crypto: af_alg - Disallow multiple in-flight AIO requests
crypto: ccp - fix memleak in ccp_init_dm_workarea
crypto: sa2ul - Return crypto_aead_setkey to transfer the error
crypto: qat - add sysfs_added flag for rate limiting
crypto: qat - add sysfs_added flag for ras
crypto: virtio - Handle dataq logic with tasklet
crypto: jh7110 - Correct deferred probe return
crypto: qat - prevent underflow in rp2srv_store()
crypto: rsa - add a check for allocation failure
selinux: Fix error priority for bind with AF_UNSPEC on PF_INET6 socket
drivers/thermal/loongson2_thermal: Fix incorrect PTR_ERR() judgment
cpuidle: haltpoll: Do not enable interrupts when entering idle
mtd: Fix gluebi NULL pointer dereference caused by ftl notifier
kunit: debugfs: Handle errors from alloc_string_stream()
kunit: debugfs: Fix unchecked dereference in debugfs_print_results()
thermal: core: Fix NULL pointer dereference in zone registration error path
ACPI: extlog: Clear Extended Error Log status when RAS_CEC handled the error
ACPI: LPSS: Fix the fractional clock divider flags
spi: sh-msiof: Enforce fixed DTDL for R-Car H3
efivarfs: Free s_fs_info on unmount
efivarfs: force RO when remounting if SetVariable is not supported
calipso: fix memory leak in netlbl_calipso_add_pass()
cpufreq: scmi: process the result of devm_of_clk_add_hw_provider()
platform/x86/intel/vsec: Fix xa_alloc memory leak
spi: cadence-quadspi: add missing clk_disable_unprepare() in cqspi_probe()
KEYS: encrypted: Add check for strsep
ACPI: LPIT: Avoid u32 multiplication overflow
ACPI: video: check for error while searching for backlight device parent
mtd: rawnand: Increment IFC_TIMEOUT_MSECS for nand controller response
spi: spi-zynqmp-gqspi: fix driver kconfig dependencies
perf/x86/intel/uncore: Fix NULL pointer dereference issue in upi_fill_topology()
sched/fair: Update min_vruntime for reweight_entity() correctly
powerpc/imc-pmu: Add a null pointer check in update_events_in_group()
powerpc/powernv: Add a null pointer check in opal_powercap_init()
powerpc/powernv: Add a null pointer check in opal_event_init()
powerpc/powernv: Add a null pointer check to scom_debug_init_one()
powerpc/rtas: Avoid warning on invalid token argument to sys_rtas()
powerpc/hv-gpci: Add return value check in affinity_domain_via_partition_show function
selftests/powerpc: Fix error handling in FPU/VMX preemption tests
KVM: PPC: Book3S HV: Handle pending exceptions on guest entry with MSR_EE
drivers/perf: hisi: Fix some event id for HiSilicon UC pmu
perf/arm-cmn: Fix HN-F class_occup_id events
x86/microcode/intel: Set new revision only after a successful update
powerpc/pseries/memhp: Fix access beyond end of drmem array
powerpc/44x: select I2C for CURRITUCK
x86: Fix CPUIDLE_FLAG_IRQ_ENABLE leaking timer reprogram
fs/pipe: Fix lockdep false-positive in watchqueue pipe_write()
powerpc: add crtsavres.o to always-y instead of extra-y
EDAC/thunderx: Fix possible out-of-bounds string access
x86/mce/inject: Clear test status value
x86/lib: Fix overflow when counting digits