Changelog in Linux kernel 6.12.2

clocksource/drivers/timer-ti-dm: Fix child node refcount handling

Linux: clocksource/drivers:sp804: Make user selectable

comedi: Flush partial mappings in error case

Compiler Attributes: disable __counted_by for clang < 19.1.3

counter: stm32-timer-cnt: Add check for clk_enable()

counter: stm32-timer-cnt: fix device_node handling in probe_encoder()

counter: ti-ecap-capture: Add check for clk_enable()

cppc_cpufreq: Use desired perf if feedback ctrs are 0 or unchanged

cpufreq/amd-pstate: Don't update CPPC request in amd_pstate_cpu_boost_update()

cpufreq: CPPC: Fix possible null-ptr-deref for cppc_get_cpu_cost()

cpufreq: CPPC: Fix possible null-ptr-deref for cpufreq_cpu_get_raw()

cpufreq: CPPC: Fix wrong return value in cppc_get_cpu_cost()

cpufreq: CPPC: Fix wrong return value in cppc_get_cpu_power()

cpufreq: loongson2: Unregister platform_driver on failure

cpufreq: loongson3: Check for error code from devm_mutex_init() call

cpufreq: mediatek-hw: Fix wrong return value in mtk_cpufreq_get_cpu_power()

crypto: bcm - add error check in the ahash_hmac_init function

crypto: caam - add error check to caam_rsa_set_priv_key_form

crypto: caam - Fix the pointer passed to caam_qi_shutdown()

crypto: cavium - Fix an error handling path in cpt_ucode_load_fw()

crypto: cavium - Fix the if condition to exit loop after timeout

crypto: hisilicon/qm - disable same error report before resetting

crypto: inside-secure - Fix the return value of safexcel_xcbcmac_cra_init()

crypto: mxs-dcp - Fix AES-CBC with hardware-bound keys

crypto: pcrypt - Call crypto layer directly when padata_do_parallel() return -EBUSY

crypto: qat - Fix missing destroy_workqueue in adf_init_aer()

crypto: qat - remove check after debugfs_create_dir()

crypto: qat - remove faulty arbiter config reset

crypto: qat/qat_420xx - fix off by one in uof_get_name()

crypto: qat/qat_4xxx - fix off by one in uof_get_name()

crypto: x86/aegis128 - access 32-bit arguments as 32-bit

dax: delete a stale directory pmem

devres: Fix page faults when tracing devres from unloaded modules

dlm: fix dlm_recover_members refcount on error

dlm: fix swapped args sb_flags vs sb_status

doc: rcu: update printed dynticks counter bits

docs: media: update location of the media patches

drivers: soc: xilinx: add the missing kfree in xlnx_add_cb_for_suspend()

drm/amd/display: fix a memleak issue when driver is removed

drm/amd/display: Fix incorrect DSC recompute trigger

drm/amd/display: Fix null check for pipe_ctx->plane_state in dcn20_program_pipe

drm/amd/display: Fix null check for pipe_ctx->plane_state in hwss_setup_dpp

drm/amd/display: Increase idle worker HPD detection time

drm/amd/display: Reduce HPD Detection Interval for IPS

drm/amd/display: Skip Invalid Streams from DSC Policy

drm/amdgpu/gfx9: Add Cleaner Shader Deinitialization in gfx_v9_0 Module

drm/amdgpu: fix ACA bank count boundary check error

drm/amdgpu: Fix JPEG v4.0.3 register write

drm/amdgpu: Fix map/unmap queue logic

drm/amdgpu: Fix the memory allocation issue in amdgpu_discovery_get_nps_info()

drm/amdkfd: Fix wrong usage of INIT_WORK()

drm/amdkfd: Use dynamic allocation for CU occupancy array in 'kfd_get_cu_occupancy()'

drm/bridge: anx7625: Drop EDID cache on bridge power off

drm/bridge: it6505: Drop EDID cache on bridge power off

drm/bridge: tc358767: Fix link properties discovery

drm/etnaviv: hold GPU lock across perfmon sampling

drm/etnaviv: Request pages from DMA32 zone on addressing_limited

drm/imagination: Convert to use time_before macro

drm/imagination: Use pvr_vm_context_get()

drm/imx/dcss: Use IRQF_NO_AUTOEN flag in request_irq()

drm/imx/ipuv3: Use IRQF_NO_AUTOEN flag in request_irq()

drm/mm: Mark drm_mm_interval_tree*() functions with __maybe_unused

drm/msm/adreno: Use IRQF_NO_AUTOEN flag in request_irq()

drm/msm/dpu: cast crtc_clk calculation to u64 in _dpu_core_perf_calc_clk()

drm/msm/dpu: drop LM_3 / LM_4 on MSM8998

drm/msm/dpu: drop LM_3 / LM_4 on SDM845

drm/msm/dpu: on SDM845 move DSPP_3 to LM_5 block

drm/msm/gpu: Check the status of registration to PM QoS

drm/nouveau/gr/gf100: Fix missing unlock in gf100_gr_chan_new()

drm/omap: Fix locking in omap_gem_new_dmabuf()

drm/omap: Fix possible NULL dereference

drm/panel: nt35510: Make new commands optional

drm/panfrost: Add missing OPP table refcnt decremental

drm/panfrost: Remove unused id_mask from struct panfrost_model

drm/panic: Select ZLIB_DEFLATE for DRM_PANIC_SCREEN_QR_CODE

drm/panthor: Fix OPP refcnt leaks in devfreq initialisation

drm/panthor: introduce job cycle and timestamp accounting

drm/panthor: record current and maximum device clock frequencies

drm/radeon: Fix spurious unplug event on radeon HDMI

drm/v3d: Address race-condition in MMU flush

drm/v3d: Appease lockdep while updating GPU stats

drm/v3d: Flush the MMU before we supply more memory to the binner

drm/vc4: Correct generation check in vc4_hvs_lut_load

drm/vc4: hdmi: Avoid hang with debug registers when suspended

drm/vc4: hdmi: Increase audio MAI fifo dreq threshold

drm/vc4: hvs: Correct logic on stopping an HVS channel

drm/vc4: hvs: Don't write gamma luts on 2711

drm/vc4: hvs: Fix dlist debug not resetting the next entry pointer

drm/vc4: hvs: Remove incorrect limit from hvs_dlist debugfs function

drm/vc4: Introduce generation number enum

drm/vc4: Match drm_dev_enter and exit calls in vc4_hvs_atomic_flush

drm/vc4: Match drm_dev_enter and exit calls in vc4_hvs_lut_load

drm/vkms: Drop unnecessary call to drm_crtc_cleanup()

drm/xe/hdcp: Fix gsc structure check in fw check status

drm/xe/ufence: Wake up waiters after setting ufence->signalled

drm: fsl-dcu: enable PIXCLK on LS1021A

drm: panel: nv3052c: correct spi_device_id for RG35XX panel

drm: use ATOMIC64_INIT() for atomic64_t

drm: xlnx: zynqmp_disp: layer may be null while releasing

drm: zynqmp_kms: Unplug DRM device before removal

dt-bindings: cache: qcom,llcc: Fix X1E80100 reg entries

dt-bindings: clock: axi-clkgen: include AXI clk

dt-bindings: iio: dac: ad3552r: fix maximum spi speed

dt-bindings: PCI: mediatek-gen3: Allow exact number of clocks only

dt-bindings: pinctrl: samsung: Fix interrupt constraint for variants with fallbacks

dt-bindings: serial: rs485: Fix rs485-rts-delay property

dt-bindings: vendor-prefixes: Add NeoFidelity, Inc

EDAC/bluefield: Fix potential integer overflow

EDAC/fsl_ddr: Fix bad bit shift operations

EDAC/igen6: Avoid segmentation fault on module unload

EDAC/skx_common: Differentiate memory error sources

EDAC/{skx_common,i10nm}: Fix incorrect far-memory error source indicator

efi/libstub: fix efi_parse_options() ignoring the default command line

efs: fix the efs new mount api implementation

erofs: fix blksize < PAGE_SIZE for file-backed mounts

erofs: fix file-backed mounts over FUSE

erofs: handle NONHEAD !delta[1] lclusters gracefully

eth: fbnic: don't disable the PCI device twice

exfat: fix file being changed by unaligned direct write

exfat: fix out-of-bounds access of directory entries

exfat: fix uninit-value in __exfat_get_dentry_set

ext4: avoid remount errors with 'abort' mount option

ext4: fix FS_IOC_GETFSMAP handling

ext4: fix race in buffer_head read fault injection

ext4: supress data-race warnings in ext4_free_inodes_{count,set}()

f2fs: check curseg->inited before write_sum_page in change_curseg

f2fs: compress: fix inconsistent update of i_blocks in release_compress_blocks and reserve_compress_blocks

f2fs: fix fiemap failure issue when page size is 16KB

f2fs: Fix not used variable 'index'

f2fs: fix null-ptr-deref in f2fs_submit_page_bio()

f2fs: fix race in concurrent f2fs_stop_gc_thread

f2fs: fix the wrong f2fs_bug_on condition in f2fs_do_replace_block

f2fs: fix to account dirty data in __get_secs_required()

f2fs: fix to avoid forcing direct write to use buffered IO on inline_data inode

f2fs: fix to avoid potential deadlock in f2fs_record_stop_reason()

f2fs: fix to avoid use GC_AT when setting gc_mode as GC_URGENT_LOW or GC_URGENT_MID

f2fs: fix to do cast in F2FS_{BLK_TO_BYTES, BTYES_TO_BLK} to avoid overflow

f2fs: fix to do sanity check on node blkaddr in truncate_node()

f2fs: fix to map blocks correctly for direct write

fadump: reserve param area if below boot_mem_top

fbdev: sh7760fb: Fix a possible memory leak in sh7760fb_alloc_mem()

fcntl: make F_DUPFD_QUERY associative

firmware: arm_scpi: Check the DVFS OPP count returned by the firmware

firmware: google: Unregister driver_info on failure

firmware_loader: Fix possible resource leak in fw_log_firmware_info()

fs/block: Check for IOCB_DIRECT in generic_atomic_write_valid()

fs/ntfs3: Equivalent transition from page to folio

fs/proc/kcore.c: fix coccinelle reported ERROR instances

fs/smb/client: implement chmod() for SMB3 POSIX Extensions

fs_parser: update mount_api doc to match function signature

fsnotify: Fix ordering of iput() and watched_objects decrement

fsnotify: fix sending inotify event with unexpected filename

gfs2: Allow immediate GLF_VERIFY_DELETE work

gfs2: Fix unlinked inode cleanup

gfs2: Rename GLF_VERIFY_EVICT to GLF_VERIFY_DELETE

gpio: exar: set value when external pull-up or pull-down is present

gpio: sloppy-logic-analyzer remove reference to rcu_momentary_dyntick_idle()

gpio: zevio: Add missed label initialisation

gve: Flow steering trigger reset only for timeout error

hfsplus: don't query the device logical block size multiple times

HID: hyperv: streamline driver probe to avoid devres issues

HID: wacom: Interpret tilt data from Intuos Pro BT as signed values

hostfs: Fix the NULL vs IS_ERR() bug for __filemap_get_folio()

hwmon: (aquacomputer_d5next) Fix length of speed_input array

hwmon: (nct6775-core) Fix overflows seen when writing limit attributes

hwmon: (pmbus/core) clear faults after setting smbalert mask

hwmon: (tps23861) Fix reporting of negative temperatures

i2c: dev: Fix memory leak when underlying adapter does not support I2C

i3c: master: Remove i3c_dev_disable_ibi_locked(olddev) on device hotjoin

i40e: Fix handling changed priv flags

ice: consistently use q_idx in ice_vc_cfg_qs_msg()

iio: accel: adxl380: fix raw sample read

iio: adc: ad4000: Check for error code from devm_mutex_init() call

iio: adc: ad4000: fix reading unsigned data

iio: adc: pac1921: Check for error code from devm_mutex_init() call

iio: backend: fix wrong pointer passed to IS_ERR()

iio: dac: adi-axi-dac: fix wrong register bitfield

iio: gts: Fix uninitialized symbol 'ret'

iio: light: al3010: Fix an error handling path in al3010_probe()

initramfs: avoid filename buffer overrun

Input: cs40l50 - fix wrong usage of INIT_WORK()

interconnect: qcom: icc-rpmh: probe defer incase of missing QoS clock dependency

io_uring: check for overflows in io_pin_pages

io_uring: fix corner case forgetting to vunmap

iommu/amd/pgtbl_v2: Take protection domain lock before invalidating TLB

iommu/s390: Implement blocking domain

iommu/tegra241-cmdqv: Fix alignment failure at max_n_shift

iommu/tegra241-cmdqv: Staticize cmdqv_debugfs_dir

iommu/vt-d: Fix checks and print in dmar_fault_dump_ptes()

iommu/vt-d: Fix checks and print in pgtable_walk()

ip6mr: fix tables suspicious RCU usage

ipc: fix memleak if msg_init_ns failed in create_ipc_ns

ipmr: fix tables suspicious RCU usage

ipv6: Fix soft lockups in fib6_select_path under high next hop churn

ipv6: release nexthop on device removal

irqchip/irq-mvebu-sei: Move misplaced select() callback to SEI CP domain

irqchip/riscv-aplic: Prevent crash when MSI domain is missing

isofs: avoid memory leak in iocharset

jffs2: fix use of uninitialized variable

jfs: xattr: check invalid xattr size more strictly

kasan: move checks to do_strncpy_from_user

kbuild: deb-pkg: Don't fail if modules.order is missing

kcsan, seqlock: Fix incorrect assumption in read_seqbegin()

kcsan, seqlock: Support seqcount_latch_t

kernel-doc: allow object-like macros in ReST output

kfifo: don't include dma-mapping.h in kfifo.h

kselftest/arm64: Fix encoding for SVE B16B16 test

kselftest/arm64: hwcap: fix f8dp2 cpuinfo name

kselftest/arm64: mte: fix printf type warnings about __u64

kselftest/arm64: mte: fix printf type warnings about longs

ksmbd: fix use-after-free in SMB request handling

kunit: skb: use "gfp" variable instead of hardcoding GFP_KERNEL

KVM: arm64: Don't retire aborted MMIO instruction

KVM: arm64: Get rid of userspace_irqchip_in_use

KVM: arm64: Ignore PMCNTENSET_EL0 while checking for overflow status

KVM: arm64: vgic-its: Add a data length check in vgic_its_save_*

KVM: arm64: vgic-its: Clear DTE when MAPD unmaps a device

KVM: arm64: vgic-its: Clear ITE when DISCARD frees an ITE

KVM: arm64: vgic-v3: Sanitise guest writes to GICR_INVLPIR

KVM: PPC: Book3S HV: Avoid returning to nested hypervisor on pending doorbells

KVM: PPC: Book3S HV: Fix kmv -> kvm typo

KVM: PPC: Book3S HV: Stop using vc->dpdes for nested KVM guests

KVM: x86/mmu: Skip the "try unsync" path iff the old SPTE was a leaf SPTE

KVM: x86: add back X86_LOCAL_APIC dependency

KVM: x86: Break CONFIG_KVM_X86's direct dependency on KVM_INTEL || KVM_AMD

KVM: x86: switch hugepage recovery thread to vhost_task

leds: ktd2692: Set missing timing properties

leds: max5970: Fix unreleased fwnode_handle in probe function

lib: string_helpers: silence snprintf() output truncation warning

libbpf: Add missing per-arch include path

libbpf: Fix expected_attach_type set handling in program load callback

libbpf: Fix output .symtab byte-order during linking

libbpf: fix sym_is_subprog() logic for weak global subprogs

libbpf: move global data mmap()'ing into bpf_object__load()

libbpf: never interpret subprogs in .text as entry programs

Linux: Linux 6.12.2

llc: Improve setsockopt() handling of malformed user input

locking/atomic/x86: Use ALT_OUTPUT_SP() for __alternative_atomic64()

locking/atomic/x86: Use ALT_OUTPUT_SP() for __arch_{,try_}cmpxchg64_emu()

locking/lockdep: Avoid creating new name string literals in lockdep_set_subclass()

locking/rt: Add sparse annotation PREEMPT_RT's sleeping locks.

LoongArch: BPF: Sign-extend return values

LoongArch: Explicitly specify code model in Makefile

LoongArch: Fix build failure with GCC 15 (-std=gnu23)

loop: fix type of block size

m68k: coldfire/device.c: only build FEC when HW macros are defined

m68k: mcfgpio: Fix incorrect register offset for CONFIG_M5441x

m68k: mvme147: Fix SCSI controller IRQ numbers

m68k: mvme147: Reinstate early console

mailbox, remoteproc: k3-m4+: fix compile testing

mailbox: arm_mhuv2: clean up loop in get_irq_chan_comb()

mailbox: mtk-cmdq: fix wrong use of sizeof in cmdq_get_clocks()

MAINTAINERS: appoint myself the XFS maintainer for 6.12 LTS

MAINTAINERS: update location of media main tree

marvell: pxa168_eth: fix call balance of pep->clk handling routines

media: atomisp: Add check for rgby_data memory allocation failure

media: i2c: ds90ub960: Fix missing return check on ub960_rxport_read call

media: i2c: max96717: clean up on error in max96717_subdev_init()

media: i2c: vgxy61: Fix an error handling path in vgxy61_detect()

media: intel/ipu6: do not handle interrupts when device is disabled

media: ipu6: Fix DMA and physical address debugging messages for 32-bit

media: ipu6: not override the dma_ops of device in driver

media: ipu6: remove architecture DMA ops dependency in Kconfig

media: v4l2-core: v4l2-dv-timings: check cvt/gtf result

media: wl128x: Fix atomicity violation in fmc_send_cmd()

mfd: da9052-spi: Change read-mask to write-mask

mfd: intel_soc_pmic_bxtwc: Fix IRQ domain names duplication

mfd: intel_soc_pmic_bxtwc: Use IRQ domain for PMIC devices

mfd: intel_soc_pmic_bxtwc: Use IRQ domain for TMU device

mfd: intel_soc_pmic_bxtwc: Use IRQ domain for USB Type-C device

mfd: rt5033: Fix missing regmap_del_irq_chip()

mfd: tps65010: Use IRQF_NO_AUTOEN flag in request_irq() to fix race

microblaze: Export xmb_manager functions

mips: asm: fix warning when disabling MIPS_FP_SUPPORT

misc: apds990x: Fix missing pm_runtime_disable()

mmc: mmc_spi: drop buggy snprintf()

modpost: remove incorrect code in do_eisa_entry()

mtd: hyperbus: rpc-if: Add missing MODULE_DEVICE_TABLE

mtd: rawnand: atmel: Fix possible memory leak

mtd: spi-nor: core: replace dummy buswidth from addr to data

mtd: spi-nor: spansion: Use nor->addr_nbytes in octal DTR mode in RD_ANY_REG_OP

mtd: ubi: fix unreleased fwnode_handle in find_volume_fwnode()

net/9p/usbg: fix handling of the failed kzalloc() memory allocation

net/ipv6: delete temporary address if mngtmpaddr is removed or unmanaged

net/l2tp: fix warning in l2tp_exit_net found by syzbot

net: hsr: fix hsr_init_sk() vs network/transport headers.

net: mdio-ipq4019: add missing error check

net: microchip: vcap: Add typegroup table terminators in kunit tests

net: rfkill: gpio: Add check for clk_enable()

net: stmmac: dwmac-socfpga: Set RX watchdog interrupt as broken

net: txgbe: fix null pointer to pcs

net: txgbe: remove GPIO interrupt controller

net: usb: lan78xx: Fix double free issue with interrupt buffer allocation

net: usb: lan78xx: Fix memory leak on device unplug by freeing PHY device

net: usb: lan78xx: Fix refcounting and autosuspend on invalid WoL configuration

net_sched: sch_fq: don't follow the fast path if Tx is behind now

netdev-genl: Hold rcu_read_lock in napi_get

netdevsim: copy addresses for both in and out paths

netfilter: ipset: add missing range check in bitmap_ip_uadt

netfilter: nf_tables: avoid false-positive lockdep splat on rule deletion

netfilter: nf_tables: must hold rcu read lock while iterating expression type list

netfilter: nf_tables: must hold rcu read lock while iterating object type list

netfs/fscache: Add a memory barrier for FSCACHE_VOLUME_CREATING

netlink: fix false positive warning in extack during dumps

netlink: typographical error in nlmsg_type constants definition

netpoll: Use rcu_access_pointer() in netpoll_poll_lock

nfs/blocklayout: Don't attempt unregister for invalid block device

nfs/blocklayout: Limit repeat device registration on failure

nfs/localio: must clear res.replen in nfs_local_read_done

nfs: ignore SB_RDONLY when mounting nfs

nfs_common: must not hold RCU while calling nfsd_file_put_local

NFSD: Cap the number of bytes copied by nfs4_reset_recoverydir()

nfsd: drop inode parameter from nfsd4_change_attribute()

NFSD: Fix nfsd4_shutdown_copy()

NFSD: Prevent a potential integer overflow

NFSD: Prevent NULL dereference in nfsd4_process_cb_update()

nfsd: release svc_expkey/svc_export with rcu_work

NFSv4.0: Fix a use-after-free problem in the asynchronous open()

nvme-fabrics: fix kernel crash while shutting down controller

nvme-pci: fix freeing of the HMB descriptor table

nvme-pci: reverse request order in nvme_queue_rqs

nvme/multipath: Fix RCU list traversal to use SRCU primitive

ocfs2: fix uninitialized value in ocfs2_file_read_iter()

octeontx2-af: Quiesce traffic before NIX block reset

octeontx2-af: RPM: Fix low network performance

octeontx2-af: RPM: Fix mismatch in lmac type

octeontx2-af: RPM: fix stale FCFEC counters

octeontx2-af: RPM: fix stale RSFEC counters

octeontx2-pf: handle otx2_mbox_get_rsp errors in cn10k.c

octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_common.c

octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_dcbnl.c

octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_dmac_flt.c

octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_ethtool.c

octeontx2-pf: handle otx2_mbox_get_rsp errors in otx2_flows.c

of/fdt: add dt_phys arg to early_init_dt_scan and early_init_dt_verify

openrisc: Implement fixmap to fix earlycon

parisc/ftrace: Fix function graph tracing disablement

PCI: cpqphp: Fix PCIBIOS_* return value confusion

PCI: endpoint: epf-mhi: Avoid NULL dereference if DT lacks 'mmio'

PCI: Fix reset_method_store() memory leak

PCI: Fix use-after-free of slot->bus on hot remove

PCI: j721e: Deassert PERST# after a delay of PCIE_T_PVPERL_MS milliseconds

PCI: qcom-ep: Move controller cleanups to qcom_pcie_perst_deassert()

PCI: qcom: Enable MSI interrupts together with Link up if 'Global IRQ' is supported

PCI: tegra194: Move controller cleanups to pex_ep_event_pex_rst_deassert()

perf bpf-filter: Return -ENOMEM directly when pfi allocation fails

perf build: Add missing cflags when building with custom libtraceevent

perf cs-etm: Don't flush when packet_queue fills up

perf disasm: Fix capstone memory leak

perf disasm: Fix not cleaning up disasm_line in symbol__disassemble_raw()

perf disasm: Use disasm_line__free() to properly free disasm_line

perf dso: Fix symtab_type for kmod compression

perf ftrace latency: Fix unit on histogram first entry when using --use-nsec

perf jevents: Don't stop at the first matched pmu when searching a events table

perf list: Fix topic and pmu_name argument order

perf mem: Fix printing PERF_MEM_LVLNUM_{L2_MHB|MSC}

perf probe: Correct demangled symbols in C++ program

perf probe: Fix libdw memory leak

perf stat: Close cork_fd when create_perf_stat_counter() failed

perf stat: Fix affinity memory leaks on error path

perf test attr: Add back missing topdown events

perf trace: Avoid garbage when not printing a syscall's arguments

perf trace: avoid garbage when not printing a trace event's arguments

perf trace: Do not lose last events in a race

perf trace: Fix tracing itself, creating feedback loops

perf trace: Keep exited threads for summary

perf/arm-cmn: Ensure port and device id bits are set properly

perf/arm-smmuv3: Fix lockdep assert in ->event_init()

perf/x86/intel/pt: Fix buffer full but size is 0 case

phy: airoha: Fix REG_CSR_2L_JCPLL_SDM_HREN config in airoha_pcie_phy_init_ssc_jcpll()

phy: airoha: Fix REG_CSR_2L_PLL_CMN_RESERVE0 config in airoha_pcie_phy_init_clk_out()

phy: airoha: Fix REG_CSR_2L_RX{0,1}_REV0 definitions

phy: airoha: Fix REG_PCIE_PMA_TX_RESET config in airoha_pcie_phy_init_csr_2l()

phy: realtek: usb: fix NULL deref in rtk_usb2phy_probe

phy: realtek: usb: fix NULL deref in rtk_usb3phy_probe

pinctrl: k210: Undef K210_PC_DEFAULT

pinctrl: qcom: spmi: fix debugfs drive strength

pinctrl: renesas: rzg2l: Fix missing return in rzg2l_pinctrl_register()

pinctrl: renesas: Select PINCTRL_RZG2L for RZ/V2H(P) SoC

pinctrl: zynqmp: drop excess struct member description

platform/chrome: cros_ec_typec: fix missing fwnode reference decrement

platform/x86/intel/pmt: allow user offset for PMT callbacks

platform/x86: asus-wmi: Fix inconsistent use of thermal policies

platform/x86: panasonic-laptop: Return errno correctly in show callback

pmdomain: ti-sci: Add missing of_node_put() for args.np

power: reset: ep93xx: add AUXILIARY_BUS dependency

power: sequencing: make the QCom PMU pwrseq driver depend on CONFIG_OF

power: supply: bq27xxx: Fix registers of bq27426

power: supply: core: Remove might_sleep() from power_supply_put()

power: supply: rt9471: Fix wrong WDT function regfield declaration

power: supply: rt9471: Use IC status regfield to report real charger status

powerpc/fadump: allocate memory for additional parameters early

powerpc/fadump: Move fadump_cma_init to setup_arch() after initmem_init()

powerpc/fadump: Refactor and prepare fadump_cma_init for late init

powerpc/kexec: Fix return of uninitialized variable

powerpc/mm/fault: Fix kfence page fault reporting

powerpc/pseries: Fix dtl_access_lock to be a rw_semaphore

powerpc/pseries: Fix KVM guest detection for disabling hardlockup detector

powerpc/sstep: make emulate_vsx_load and emulate_vsx_store static

powerpc/vdso: Flag VDSO64 entry points as functions

pwm: Assume a disabled PWM to emit a constant inactive output

pwm: imx27: Workaround of the pwm output bug when decrease the duty cycle

rcu/kvfree: Fix data-race in __mod_timer / kvfree_call_rcu

rcu/nocb: Fix missed RCU barrier on deoffloading

rcu/srcutiny: don't return before reenabling preemption

rcuscale: Do a proper cleanup if kfree_scale_init() fails

RDMA/bnxt_re: Check cqe flags to know imm_data vs inv_irkey

RDMA/bnxt_re: Correct the sequence of device suspend

RDMA/core: Implement RoCE GID port rescan and export delete function

RDMA/core: Provide rdma_user_mmap_disassociate() to disassociate mmap pages

RDMA/hns: Disassociate mmap pages for all uctx when HW is being reset

RDMA/hns: Fix an AEQE overflow error caused by untimely update of eq_db_ci

RDMA/hns: Fix cpu stuck caused by printings during reset

RDMA/hns: Fix different dgids mapping to the same dip_idx

RDMA/hns: Fix flush cqe error when racing with destroy qp

RDMA/hns: Fix NULL pointer derefernce in hns_roce_map_mr_sg()

RDMA/hns: Fix out-of-order issue of requester when setting FENCE

RDMA/hns: Modify debugfs name

RDMA/hns: Use dev_* printings in hem code instead of ibdev_*

RDMA/mlx5: Call dev_put() after the blocking notifier

RDMA/mlx5: Ensure active slave attachment to the bond IB device

RDMA/mlx5: Move events notifier registration to be after device registration

RDMA/rxe: Fix the qp flush warnings in req

RDMA/rxe: Set queue pair cur_qp_state when being queried

regmap: irq: Set lockdep class for hierarchical IRQ domains

regulator: qcom-smd: make smd_vreg_rpm static

regulator: rk808: Restrict DVS GPIOs to the RK808 variant only

remoteproc: qcom: adsp: Remove subdevs on the error path of adsp_probe()

remoteproc: qcom: pas: add minidump_id to SM8350 resources

remoteproc: qcom: pas: Remove subdevs on the error path of adsp_probe()

remoteproc: qcom_q6v5_mss: Re-order writes to the IMEM region

Linux: Rename .data.once to .data..once to fix resetting WARN*_ONCE

Linux: Rename .data.unlikely to .data..unlikely

Revert "block, bfq: merge bfq_release_process_ref() into bfq_put_cooperator()"

Revert "cgroup: Fix memory leak caused by missing cgroup_bpf_offline"

Revert "f2fs: remove unreachable lazytime mount option parsing"

Revert "fs: don't block i_writecount during exec"

Revert "KVM: VMX: Move LOAD_IA32_PERF_GLOBAL_CTRL errata handling out of setup_vmcs_config()"

Revert "nfs: don't reuse partially completed requests in nfs_lock_and_join_requests"

Revert "scripts/faddr2line: Check only two symbols when calculating symbol size"

Revert "serial: sh-sci: Clean sci_ports[0] after at earlycon exit"

Revert "usb: gadget: composite: fix OS descriptors w_value logic"

Revert "wifi: iwlegacy: do not skip frames with bad FCS"

RISC-V: Check scalar unaligned access on all CPUs

RISC-V: KVM: Fix APLIC in_clrip and clripnum write emulation

RISC-V: Scalar unaligned access emulated on hotplug CPUs

riscv: kvm: Fix out-of-bounds array access

rpmsg: glink: use only lower 16-bits of param2 for CMD_OPEN name length

rtase: Correct the speed for RTL907XD-V1

rtase: Corrects error handling of the rtase_check_mac_version_valid()

rtase: Refactor the rtase_check_mac_version_valid() function

rtc: ab-eoz9: don't fail temperature reads on undervoltage notification

rtc: abx80x: Fix WDT bit position of the status register

rtc: check if __rtc_read_time was successful in rtc_timer_do_work()

rtc: rzn1: fix BCD to rtc_time conversion errors

rtc: st-lpc: Use IRQF_NO_AUTOEN flag in request_irq()

rtla/timerlat: Do not set params->user_workload with -U

rust: block: fix formatting of `kernel::block::mq::request` module

rust: helpers: Avoid raw_spin_lock initialization for PREEMPT_RT

rust: kernel: fix THIS_MODULE header path in ThisModule doc comment

rust: macros: fix documentation of the paste! macro

rust: rbtree: fix `SAFETY` comments that should be `# Safety` sections

rxrpc: Improve setsockopt() handling of malformed user input

s390/cio: Do not unregister the subchannel based on DNV

s390/cpum_sf: Fix and protect memory allocation of SDBs with mutex

s390/facilities: Fix warning about shadow of global variable

s390/iucv: MSG_PEEK causes memory leak in iucv_sock_destruct()

s390/pageattr: Implement missing kernel_page_present()

s390/pci: Fix potential double remove of hotplug slot

s390/syscalls: Avoid creation of arch/arch/ directory

s390/virtio_ccw: Fix dma_parm pointer not set up

sched/cpufreq: Ensure sd is rebuilt for EAS check

sched/ext: Remove sched_fork() hack

sched_ext: scx_bpf_dispatch_from_dsq_set_*() are allowed from unlocked context

scripts/kernel-doc: Do not track section counter across processed files

scsi: bfa: Fix use-after-free in bfad_im_module_exit()

scsi: fusion: Remove unused variable 'rc'

scsi: hisi_sas: Enable all PHYs that are not disabled by user during controller reset

scsi: qedf: Fix a possible memory leak in qedf_alloc_and_init_sb()

scsi: qedi: Fix a possible memory leak in qedi_alloc_and_init_sb()

scsi: sg: Enable runtime power management

scsi: target: Fix incorrect function name in pscsi_create_type_disk()

selftests/bpf: add missing header include for htons

selftests/bpf: Add push/pop checking for msg_verify_data in test_sockmap

selftests/bpf: Add txmsg_pass to pull/push/pop in test_sockmap

selftests/bpf: Fix backtrace printing for selftests crashes

selftests/bpf: Fix msg_verify_data in test_sockmap

selftests/bpf: Fix SENDPAGE data logic in test_sockmap

selftests/bpf: fix test_spin_lock_fail.c's global vars usage

selftests/bpf: Fix total_bytes in msg_loop_rx in test_sockmap

selftests/bpf: Fix txmsg_redir of test_txmsg_pull in test_sockmap

selftests/bpf: Fix uprobe_multi compilation error

selftests/bpf: skip the timer_lockup test for single-CPU nodes

selftests/mount_setattr: Fix failures on 64K PAGE_SIZE kernels

selftests/resctrl: Fix memory overflow due to unhandled wraparound

selftests/resctrl: Print accurate buffer size as part of MBM results

selftests/resctrl: Protect against array overrun during iMC config parsing

selftests: bpf: Add missing per-arch include path

selftests: net: really check for bg process completion

selftests: netfilter: Fix missing return values in conntrack_dump_flush

serial: 8250: omap: Move pm_runtime_get_sync

serial: 8250_fintek: Add support for F81216E

serial: amba-pl011: fix build regression

serial: amba-pl011: Fix RX stall when DMA is used

serial: sh-sci: Clean sci_ports[0] after at earlycon exit

sh: cpuinfo: Fix a warning for CONFIG_CPUMASK_OFFSTACK

sh: intc: Fix use-after-free bug in register_intc_controller()

smb3: request handle caching when caching directories

smb: cached directories can be more than root file handle

smb: client: disable directory caching when dir_cache_timeout is zero

smb: client: fix NULL ptr deref in crypto_aead_setkey()

smb: client: fix use-after-free of signing key

smb: client: handle max length for SMB symlinks

smb: Don't leak cfid when reconnect races with open_cached_dir

smb: During unmount, ensure all cached dir instances drop their dentry

smb: Initialize cfid->tcon before performing network ops

smb: prevent use-after-free due to open_cached_dir error paths

soc: fsl: cpm1: qmc: Set the ret error code on platform_get_irq() failure

soc: fsl: rcpm: fix missing of_node_put() in copy_ippdexpcr1_setting()

soc: qcom: geni-se: fix array underflow in geni_se_clk_tbl_get()

soc: ti: smartreflex: Use IRQF_NO_AUTOEN flag in request_irq()

spi: atmel-quadspi: Fix register name in verbose logging function

spi: Fix acpi deferred irq probe

spi: spi-fsl-lpspi: Use IRQF_NO_AUTOEN flag in request_irq()

spi: tegra210-quad: Avoid shift-out-of-bounds

spi: zynqmp-gqspi: Undo runtime PM changes at driver exit time

staging: vchiq_arm: Fix missing refcount decrement in error path for fw_node

sunrpc: clear XPRT_SOCK_UPD_TIMEOUT when reset transport

sunrpc: fix one UAF issue caused by sunrpc kernel tcp socket

SUNRPC: make sure cache entry active before cache_show

SUNRPC: timeout and cancel TLS handshake with -ETIMEDOUT

svcrdma: Address an integer overflow

svcrdma: fix miss destroy percpu_counter in svc_rdma_proc_init()

tcp: Fix use-after-free of nreq in reqsk_timer_handler().

tg3: Set coherent DMA mask bits to 31 for BCM57766 chipsets

thermal/lib: Fix memory leak on error in thermal_genl_auto()

thermal: core: Fix race between zone registration and system suspend

thermal: core: Initialize thermal zones before registering them

thermal: core: Mark thermal zones as initializing to start with

thermal: core: Rearrange PM notification code

thermal: core: Represent suspend-related thermal zone flags as bits

thermal: testing: Initialize some variables annoteded with _free()

thermal: testing: Use DEFINE_FREE() and __free() to simplify code

time: Fix references to _msecs_to_jiffies() handling of values

time: Partially revert cleanup on msecs_to_jiffies() documentation

timers: Add missing READ_ONCE() in __run_timer_base()

tools/lib/thermal: Make more generic the command encoding function

tools/nolibc: s390: include std.h

tools/power turbostat: Fix child's argument forwarding

tools/power turbostat: Fix trailing '\n' parsing

tpm: fix signed/unsigned bug when checking event logs

trace/trace_event_perf: remove duplicate samples on the first tracepoint event

tty: ldsic: fix tty_ldisc_autoload sysctl's proc_handler

ubi: fastmap: Fix duplicate slab cache names while attaching

ubi: fastmap: wl: Schedule fm_work if wear-leveling pool is empty

ubi: wl: Put source PEB into correct list if trying locking LEB failed

ubifs: authentication: Fix use-after-free in ubifs_tnc_end_commit

ubifs: Correct the total block count by deducting journal reservation

ublk: fix error code for unsupported command

ublk: fix ublk_ch_mmap() for 64K page size

udmabuf: change folios array from kmalloc to kvmalloc

udmabuf: fix vmap_udmabuf error page set

um: Always dump trace for specified task in show_stack

um: Fix potential integer overflow during physmem setup

um: Fix the return value of elf_core_copy_task_fpregs

um: net: Do not use drvdata in release

um: ubd: Do not use drvdata in release

um: ubd: Initialize ubd's disk pointer in ubd_add

um: vector: Do not use drvdata in release

unicode: Fix utf8_load() error path

USB: chaoskey: fail open after removal

USB: chaoskey: Fix possible deadlock chaoskey_list_lock

usb: dwc3: ep0: Don't clear ep0 DWC3_EP_TRANSFER_STARTED

usb: dwc3: gadget: Add missing check for single port RAM in TxFIFO resizing logic

usb: dwc3: gadget: Fix checking for number of TRBs left

usb: dwc3: gadget: Fix looping of queued SG entries

usb: ehci-spear: fix call balance of sehci clk handling routines

usb: gadget: uvc: wake pump everytime we update the free list

usb: misc: ljca: move usb_autopm_put_interface() after wait for response

usb: misc: ljca: set small runtime autosuspend delay

usb: musb: Fix hardware lockup on first Rx endpoint request

usb: typec: fix potential array underflow in ucsi_ccg_sync_control()

usb: typec: ucsi: glink: fix off-by-one in connector_status

usb: using mutex lock and supporting O_NONBLOCK flag in iowarrior_read()

usb: xhci: Avoid queuing redundant Stop Endpoint commands

usb: xhci: Fix TD invalidation under pending Set TR Dequeue

usb: xhci: Limit Stop Endpoint retries

usb: yurex: make waiting on yurex_write interruptible

vdpa/mlx5: Fix suboptimal range on iotlb iteration

vfio/mlx5: Fix an unwind issue in mlx5vf_add_migration_pages()

vfio/mlx5: Fix unwind flows in mlx5vf_pci_save/resume_device_data()

vfio/pci: Properly hide first-in-list PCIe extended capability

virtio_blk: reverse request order in virtio_queue_rqs

virtiofs: use pages instead of pointer for kernel direct IO

watchdog: Add HAS_IOPORT dependency for SBC8360 and SBC7240

wifi: ath10k: fix invalid VHT parameters in supported_vht_mcs_rate_nss1

wifi: ath10k: fix invalid VHT parameters in supported_vht_mcs_rate_nss2

wifi: ath11k: Fix CE offset address calculation for WCN6750 in SSR

wifi: ath12k: fix crash when unbinding

wifi: ath12k: fix one more memcpy size error

wifi: ath12k: fix use-after-free in ath12k_dp_cc_cleanup()

wifi: ath12k: fix warning when unbinding

wifi: ath12k: Skip Rx TID cleanup for self peer

wifi: ath9k: add range check for conn_rsp_epid in htc_connect_service()

wifi: brcmfmac: release 'root' node in all execution paths

wifi: cfg80211: check radio iface combination for multi radio per wiphy

wifi: cfg80211: Remove the Medium Synchronization Delay validity check

wifi: cw1200: Fix potential NULL dereference

wifi: iwlwifi: allow fast resume on ax200

wifi: iwlwifi: mvm: tell iwlmei when we finished suspending

wifi: mwifiex: add missing locking for cfg80211 calls

wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_config_scan()

wifi: mwifiex: Use IRQF_NO_AUTOEN flag in request_irq()

wifi: nl80211: fix bounds checker error in nl80211_parse_sched_scan

wifi: p54: Use IRQF_NO_AUTOEN flag in request_irq()

wifi: rtl8xxxu: Perform update_beacon_work when beaconing is enabled

wifi: rtlwifi: Drastically reduce the attempts to read efuse in case of failures

wifi: rtw89: coex: check NULL return of kmalloc in btc_fw_set_monreg()

wifi: rtw89: Fix TX fail with A2DP after scanning

wifi: rtw89: read bss_conf corresponding to the link

wifi: rtw89: read link_sta corresponding to the link

wifi: rtw89: refactor STA related func ahead for MLO

wifi: rtw89: refactor VIF related func ahead for MLO

wifi: rtw89: rename rtw89_sta to rtw89_sta_link ahead for MLO

wifi: rtw89: rename rtw89_vif to rtw89_vif_link ahead for MLO

wifi: rtw89: tweak driver architecture for impending MLO support

wifi: rtw89: unlock on error path in rtw89_ops_unassign_vif_chanctx()

wifi: wfx: Fix error handling in wfx_core_init()

wifi: wilc1000: Set MAC after operation mode

wireguard: selftests: load nf_conntrack if not present

x86/CPU/AMD: Terminate the erratum_1386_microcode array

x86/Documentation: Update algo in init_size description of boot protocol

x86/microcode/AMD: Flush patch buffer mapping after application

x86/mm: Carve out INVLPG inline asm for use by others

x86/pvh: Call C code via the kernel virtual mapping

x86/tdx: Dynamically disable SEPT violations from causing #VEs

x86/tdx: Introduce wrappers to read and write TD metadata

x86/tdx: Rename tdx_parse_tdinfo() to tdx_setup()

x86/unwind/orc: Fix unwind for newly forked tasks

x86: fix off-by-one in access_ok()

xen: Fix the issue of resource not being properly released in xenbus_dev_probe()

xfs: fix simplify extent lookup in xfs_can_free_eofblocks

xhci: Combine two if statements for Etron xHCI host

xhci: Don't issue Reset Device command to Etron xHCI host

xhci: Don't perform Soft Retry for Etron xHCI host

xhci: Fix control transfer error on Etron xHCI host

xsk: Free skb when TX metadata options are invalid

zram: fix NULL pointer in comp_algorithm_show()

zram: permit only one post-processing operation at a time

zram: ZRAM_DEF_COMP should depend on ZRAM