Changelog in Linux kernel 6.19.6

clocksource/drivers/timer-integrator-ap: Add missing Kconfig dependency on OF

compiler-clang.h: require LLVM 19.1.0 or higher for __typeof_unqual__

cpufreq: dt-platdev: Block the driver from probing on more QC platforms

crash_dump: fix dm_crypt keys locking and ref leak

crypto: hisilicon/qm - move the barrier before writing to the mailbox register

dlm: fix recovery pending middle conversion

dlm: validate length in dlm_search_rsb_tree

dm mpath: Add missing dm_put_device when failing to get scsi dh name

dm mpath: make pg_init_delay_msecs settable

dm-integrity: fix a typo in the code for write/discard race

dm-integrity: fix recalculation in bitmap mode

dm-unstripe: fix mapping bug when there are multiple targets in a table

dm-verity: correctly handle dm_bufio_client_create() failure

dm: clear cloned request bio pointer when last clone bio completes

dm: fix excessive blk-crypto operations for invalid keys

dm: remove fake timeout to avoid leak request

dm: replace -EEXIST with -EBUSY

dma-mapping: avoid random addr value print out on error path

dmaengine: stm32-dma3: use module_platform_driver

dmaengine: stm32-mdma: initialize m2m_hw_period and ccr to fix warnings

dmaengine: sun6i: Choose appropriate burst length under maxburst

docs: kdoc: avoid error_count overflows

docs: kdoc: fix logic to handle unissued warnings

dpaa2-switch: validate num_ifs to prevent out-of-bounds write

dpll: zl3073x: fix REF_PHASE_OFFSET_COMP register width for some chip IDs

dpll: zl3073x: Remove redundant cleanup in devm_dpll_init()

driver core: faux: stop using static struct device

drm/amd/display: Add signal type check for dcn401 get_phyd32clk_src

drm/amd/display: Add USB-C DP Alt Mode lane limitation in DCN32

drm/amd/display: Adjust PHY FSM transition to TX_EN-to-PLL_ON for TMDS on DCN35

drm/amd/display: avoid dig reg access timeout on usb4 link training fail

drm/amd/display: Avoid updating surface with the same surface under MPO

drm/amd/display: bypass post csc for additional color spaces in dal

drm/amd/display: Correct DSC padding accounting

drm/amd/display: Correct FIXED_VS Link Rate Toggle Condition

drm/amd/display: Correct logic check error for fastboot

drm/amd/display: Disable FEC when powering down encoders

drm/amd/display: Don't disable DPCD mst_en if sink connected

drm/amd/display: Ensure link output is disabled in backend reset for PLL_ON

drm/amd/display: Fix DP no audio issue

drm/amd/display: Fix dsc eDP issue

drm/amd/display: Fix GFX12 family constant checks

drm/amd/display: Fix mismatched unlock for DMUB HW lock in HWSS fast path

drm/amd/display: Fix system resume lag issue

drm/amd/display: Fix writeback on DCN 3.2+

drm/amd/display: Fix wrong x_pos and y_pos for cursor offload

drm/amd/display: Guard FAMS2 configuration updates

drm/amd/display: Increase DCN35 SR enter/exit latency

drm/amd/display: only power down dig on phy endpoints

drm/amd/display: Remove conditional for shaper 3DLUT power-on

drm/amd/display: Revert "init dispclk from bootup clock for DCN314"

drm/amd/display: Revert "init dispclk from bootup clock for DCN315"

drm/amd/display: set enable_legacy_fast_update to false for DCN36

drm/amd/pm: Fix null pointer dereference issue

drm/amdgpu/ras: Move ras data alloc before bad page check

drm/amdgpu: Add HAINAN clock adjustment

drm/amdgpu: add support for HDP IP version 6.1.1

drm/amdgpu: Adjust usleep_range in fence wait

drm/amdgpu: avoid a warning in timedout job handler

drm/amdgpu: avoid sdma ring reset in sriov

drm/amdgpu: fix NULL pointer issue buffer funcs

drm/amdgpu: fix sync handling in amdgpu_dma_buf_move_notify

drm/amdgpu: fix the calculation of RAS bad page number

drm/amdgpu: GPU vm support 5-level page table

drm/amdgpu: keep vga memory on MacBooks with switchable graphics

drm/amdgpu: mark invalid records with U64_MAX

drm/amdgpu: Protect GPU register accesses in powergated state in some paths

drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v4

drm/amdgpu: Refactor amdgpu_gem_va_ioctl for Handling Last Fence Update and Timeline Management v7

drm/amdgpu: return when ras table checksum is error

drm/amdgpu: Skip loading SDMA_RS64 in VF

drm/amdgpu: Skip vcn poison irq release on VF

drm/amdgpu: Use 5-level paging if gmc support 57-bit VA

drm/amdgpu: validate user queue size constraints

drm/amdkfd: Fix GART PTE for non-4K pagesize in svm_migrate_gart_map()

drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set()

drm/amdkfd: Handle GPU reset and drain retry fault race

drm/amdkfd: Relax size checking during queue buffer get

drm/ast: Swap framebuffer writes on big-endian machines

drm/atmel-hlcdc: destroy properly the plane state in the reset callback

drm/atmel-hlcdc: don't reject the commit if the src rect has fractional parts

drm/atmel-hlcdc: fix memory leak from the atomic_destroy_state callback

drm/atmel-hlcdc: fix use-after-free of drm_crtc_commit after release

drm/bridge: anx7625: Fix invalid EDID size

drm/buddy: Prevent BUG_ON by validating rounded allocation

drm/i915/dp: Fail state computation for invalid DSC source input BPP values

drm/i915/dp: Fix pipe BPP clamping due to HDR

drm/i915/psr: Don't enable Panel Replay on sink if globally disabled

drm/i915/quirks: Fix device id for QUIRK_EDP_LIMIT_RATE_HBR2 entry

drm/i915/wakeref: clean up INTEL_WAKEREF_PUT_* flag macros

drm/panel-edp: Add AUO B140QAX01.H panel

drm/panel-edp: Add CSW MNE007QB3-1

drm/panel: edp: add BOE NV140WUM-T08 panel

drm/panel: Fix a possible null-pointer dereference in jdi_panel_dsi_remove()

drm/panthor: Always wait after sending a command to an AS

drm/panthor: fix for dma-fence safe access rules

drm/radeon: Add HAINAN clock adjustment

drm/tegra: dsi: fix device leak on probe

drm/tests: shmem: Add clean-up action to unpin pages

drm/tests: shmem: Hold reservation lock around madvise

drm/tests: shmem: Hold reservation lock around purge

drm/tests: shmem: Hold reservation lock around vmap/vunmap

drm/tests: shmem: Swap names of export tests

drm/tyr: fix register name in error print

drm/v3d: Set DMA segment size to avoid debug warnings

drm/xe/ggtt: Use scope-based runtime pm

drm/xe/vm: Skip ufence association for CPU address mirror VMA during MAP

drm/xe/xe3_lpg: Apply Wa_16028005424

drm/xe: Add bounds check on pat_index to prevent OOB kernel read in madvise

drm/xe: Covert return of -EBUSY to -ENOMEM in VM bind IOCTL

drm/xe: Fix ggtt fb alignment

drm/xe: Only toggle scheduling in TDR if GuC is running

drm: Account property blob allocations to memcg

drm: of: drm_of_panel_bridge_remove(): fix device_node leak

drm: renesas: rz-du: mipi_dsi: fix kernel panic when rebooting for some panels

EDAC/igen6: Add more Intel Panther Lake-H SoCs support

EDAC/igen6: Add two Intel Amston Lake SoCs support

EFI/CPER: don't dump the entire memory region

EFI/CPER: don't go past the ARM processor CPER record buffer

erofs: fix incorrect early exits for invalid metabox-enabled images

erofs: fix incorrect early exits in volume label handling

erofs: fix interlaced plain identification for encoded extents

espintcp: Fix race condition in espintcp_close()

ext4: mark group add fast-commit ineligible

ext4: mark group extend fast-commit ineligible

ext4: move ext4_percpu_param_init() before ext4_mb_init()

ext4: propagate flags to convert_initialized_extent()

ext4: use reserved metadata blocks when splitting extent on endio

fbcon: check return value of con2fb_acquire_newinfo()

fbcon: Remove struct fbcon_display.inverse

fbdev: ffb: fix corrupted video output on Sun FFB1

fbdev: of: display_timing: fix refcount leak in of_get_display_timings()

fbdev: Use device_create_with_groups() to fix sysfs groups registration race

fbdev: vt8500lcdfb: fix missing dma_free_coherent()

fgraph: Do not call handlers direct when not using ftrace_ops

firmware: arm_ffa: Unmap Rx/Tx buffers on init failure

Linux: fix it87_wdt early reboot by reporting running timer

fpga: dfl: use subsys_initcall to allow built-in drivers to be added

fpga: of-fpga-region: Fail if any bridge is missing

fs/buffer: add alert in try_to_free_buffers() for folios without buffers

fs/ntfs3: avoid calling run_get_entry() when run == NULL in ntfs_read_run_nb_ra()

fs/ntfs3: drop preallocated clusters for sparse and compressed files

fs/ntfs3: handle attr_set_size() errors when truncating files

fs: ensure that internal tmpfs mount gets mount id zero

fs: ntfs3: check return value of indx_find to avoid infinite loop

fs: ntfs3: fix infinite loop in attr_load_runs_range on inconsistent metadata

fs: ntfs3: fix infinite loop triggered by zero-sized ATTR_LIST

function_graph: Restore direct mode when callbacks drop to one

gendwarfksyms: Fix build on 32-bit hosts

genirq/cpuhotplug: Notify about affinity changes breaking the affinity mask

gfs2: fiemap page fault fix

gpio: aspeed-sgpio: Change the macro to support deferred probe

gpio: nomadik: Add missing IS_ERR() check

gpio: pca953x: Add support for TCAL6408 TCAL6416

gpio: swnode: restore the swnode-name-against-chip-label matching

gpio: sysfs: fix chip removal with GPIOs exported over sysfs

gpu/panel-edp: add AUO panel entry for B140HAN06.4

gro: change the BUG_ON() in gro_pull_from_frag0()

hfs: Replace BUG_ON with error handling for CNID count checks

hfsplus: ensure sb->s_fs_info is always cleaned up

hfsplus: fix volume corruption issue for generic/480

hfsplus: fix volume corruption issue for generic/498

hfsplus: pretend special inodes as regular files

HID: apple: Add "SONiX KN85 Keyboard" to the list of non-apple keyboards

HID: elecom: Add support for ELECOM HUGE Plus M-HT1MRBK

HID: hid-pl: handle probe errors

HID: i2c-hid: Add FocalTech FT8112

HID: logitech-hidpp: Add support for Logitech K980

HID: logitech-hidpp: Check maxfield in hidpp_get_report_length()

HID: magicmouse: Do not crash on missing msc->input

HID: multitouch: add eGalaxTouch EXC3188 support

HID: multitouch: add quirks for Lenovo Yoga Book 9i

HID: pidff: Do not set out of range trigger button

HID: prodikeys: Check presence of pm->input_ep82

hisi_acc_vfio_pci: fix the queue parameter anomaly issue

hisi_acc_vfio_pci: resolve duplicate migration states

hisi_acc_vfio_pci: update status after RAS error

hwmon: (asus-ec-sensors) add Pro WS TRX50-SAGE WIFI A

hwmon: (dell-smm) Add support for Dell OptiPlex 7080

hwmon: (emc2305) Fix a resource leak in emc2305_of_parse_pwm_child

hwmon: (f71882fg) Add F81968 support

hwmon: (max16065) Use READ/WRITE_ONCE to avoid compiler optimization induced race

hwmon: (nct6683) Add customer ID for ASRock Z590 Taichi

hwmon: (nct6775) Add ASUS Pro WS WRX90E-SAGE SE

hwmon: (nct7363) Fix a resource leak in nct7363_present_pwm_fanin

hyper-v: Mark inner union in hv_kvp_exchg_msg_value as packed

i2c: imx-lpi2c: fix SMBus block read NACK after byte count

i3c: master: svc: Initialize 'dev' to NULL in svc_i3c_master_ibi_isr()

i3c: mipi-i3c-hci: Reset RING_OPERATION1 fields during init

i3c: mipi-i3c-hci: Stop reading Extended Capabilities if capability ID is 0

iio: accel: adxl380: Avoid reading more entries than present in FIFO

iio: bmi270_i2c: Add MODULE_DEVICE_TABLE for BMI260/270

iio: gyro: itg3200: Fix unchecked return value in read_raw

iio: magnetometer: Remove IRQF_ONESHOT

iio: Use IRQF_NO_THREAD

ima: verify the previous kernel's IMA buffer lies in addressable RAM

include: uapi: netfilter_bridge.h: Cover for musl libc

io_uring/cmd_net: fix too strict requirement on ioctl

io_uring/filetable: clamp alloc_hint to the configured alloc range

io_uring/net: don't continue send bundle if poll was required for retry

io_uring/openclose: fix io_pipe_fixed() slot tracking for specific slots

io_uring/timeout: annotate data race in io_flush_timeouts()

io_uring/zcrx: check unsupported flags on import

io_uring/zcrx: fix post open error handling

io_uring/zcrx: fix sgtable leak on mapping failures

io_uring/zcrx: fix user_ref race between scrub and refill paths

io_uring: add IORING_OP_URING_CMD128 to opcode checks

iommu/amd: move wait_on_sem() out of spinlock

iommu/amd: serialize sequence allocation under concurrent TLB invalidations

iommu/arm-smmu-v3: Add update_safe bits to fix STE update sequence

iommu/arm-smmu-v3: Do not set disable_ats unless vSTE is Translate

iommu/arm-smmu-v3: Improve CMDQ lock fairness and efficiency

iommu/arm-smmu-v3: Mark EATS_TRANS safe when computing the update sequence

iommu/arm-smmu-v3: Mark STE MEV safe when computing the update sequence

iommu/vt-d: Flush dev-IOTLB only when PCIe device is accessible in scalable mode

iommu/vt-d: Flush piotlb for SVM and Nested domain

iommu/vt-d: Skip dev-iotlb flush for inaccessible PCIe device without scalable mode

iommupt: Always add IOVA range to iotlb_gather in gather_range_pages()

ipmi: ipmb: initialise event handler read bytes

ipv4: fib: Annotate access to struct fib_alias.fa_state.

ipv4: igmp: annotate data-races around idev->mr_maxdelay

ipv6: annotate data-races in ip6_multipath_hash_{policy,fields}()

ipv6: annotate data-races in net/ipv6/route.c

ipv6: annotate data-races over sysctl.flowlabel_reflect

ipv6: exthdrs: annotate data-race over multiple sysctl

ipv6: ioam: fix heap buffer overflow in __ioam6_fill_trace_data()

irqchip/riscv-imsic: Add a CPU pm notifier to restore the IMSIC on exit

jfs: Add missing set_freezable() for freezable kthread

jfs: nlink overflow in jfs_rename

kbuild: Fix CC_CAN_LINK detection

kbuild: rpm-pkg: Disable automatic requires for manual debuginfo package

kbuild: rpm-pkg: Fix manual debuginfo generation when using .src.rpm

kbuild: rpm-pkg: Restrict manual debug package creation

kcm: fix zero-frag skb in frag_list on partial sendmsg error

kcsan, compiler_types: avoid duplicate type issues in BPF Type Format

kernel: rpm-pkg: Restore find-debuginfo.sh approach to -debuginfo package

kexec: derive purgatory entry from symbol

kho: skip memoryless NUMA nodes when reserving scratch areas

kselftest/kublk: include message in _Static_assert for C11 compatibility

ksmbd: fix signededness bug in smb_direct_prepare_negotiation()

KVM: arm64: nv: Return correct RES0 bits for FGT registers

KVM: nSVM: Always use vmcb01 in VMLOAD/VMSAVE emulation

KVM: nSVM: Remove a user-triggerable WARN on nested_svm_load_cr3() succeeding

KVM: x86: Add SRCU protection for reading PDPTRs in __get_sregs2()

KVM: x86: Ignore -EBUSY when checking nested events from vcpu_block()

KVM: x86: Return "unsupported" instead of "invalid" on access to unsupported PV MSR

libceph: define and enforce CEPH_MAX_KEY_LEN

libperf build: Always place libperf includes first

libsubcmd: Fix null intersection case in exclude_cmds()

Linux: Linux 6.19.6

LoongArch: Disable instrumentation for setup_ptwalker()

LoongArch: Guard percpu handler under !CONFIG_PREEMPT_RT

LoongArch: Handle percpu handler address for ORC unwinder

LoongArch: Make cpumask_of_node() robust against NUMA_NO_NODE

LoongArch: Prefer top-down allocation after arch_mem_init()

LoongArch: Remove some extern variables in source files

LoongArch: Use %px to print unmodified unwinding address

m68k: nommu: fix memmove() with differently aligned src and dest for 68000

mailbox: bcm-ferxrm-mailbox: Use default primary handler

mailbox: imx: Skip the suspend flag for i.MX7ULP

mailbox: mchp-ipc-sbi: fix out-of-bounds access in mchp_ipc_get_cluster_aggr_irq()

mailbox: mchp-ipc-sbi: fix uninitialized symbol and other smatch warnings

mailbox: pcc: Remove spurious IRQF_ONESHOT usage

mailbox: Prevent out-of-bounds access in fw_mbox_index_xlate()

mailbox: sprd: clear delivery flag before handling TX done

mailbox: sprd: mask interrupts that are not handled

md raid: fix hang when stopping arrays with metadata through dm-raid

md-cluster: fix NULL pointer dereference in process_metadata_update

md/bitmap: fix GPF in write_page caused by resize race

media: adv7180: fix frame interval in progressive mode

media: amphion: Clear last_buffer_dequeued flag for DEC_CMD_START

media: amphion: Drop min_queued_buffers assignment

media: ccs: Avoid possible division by zero

media: ccs: Fix setting initial sub-device state

media: chips-media: wave5: Fix conditional in start_streaming

media: chips-media: wave5: Fix device cleanup order to prevent kernel panic

media: chips-media: wave5: Fix kthread worker destruction in polling mode

media: chips-media: wave5: Fix Null reference while testing fluster

media: chips-media: wave5: Fix PM runtime usage count underflow

media: chips-media: wave5: Fix SError of kernel panic when closed

media: chips-media: wave5: Process ready frames when CMD_STOP sent to Encoder

media: cx23885: Add missing unmap in snd_cx23885_hw_params()

media: cx25821: Add missing unmap in snd_cx25821_hw_params()

media: cx25821: Fix a resource leak in cx25821_dev_setup()

media: cx88: Add missing unmap in snd_cx88_hw_params()

media: dvb-core: dmxdevfilter must always flush bufs

media: dw9714: Fix powerup sequence

media: i2c/tw9903: Fix potential memory leak in tw9903_probe()

media: i2c/tw9906: Fix potential memory leak in tw9906_probe()

media: i2c: ov01a10: Add missing v4l2_subdev_cleanup() calls

media: i2c: ov01a10: Fix analogue gain range

media: i2c: ov01a10: Fix digital gain range

media: i2c: ov01a10: Fix passing stream instead of pad to v4l2_subdev_state_get_format()

media: i2c: ov01a10: Fix reported pixel-rate value

media: i2c: ov01a10: Fix test-pattern disabling

media: i2c: ov01a10: Fix the horizontal flip control

media: i2c: ov5647: Correct minimum VBLANK value

media: i2c: ov5647: Correct pixel array offset

media: i2c: ov5647: Fix PIXEL_RATE value for VGA mode

media: i2c: ov5647: Initialize subdev before controls

media: i2c: ov5647: Sensor should report RAW color space

media: i2c: ov5647: use our own mutex for the ctrl lock

media: ipu6: Always close firmware stream

media: ipu6: Close firmware streams on streaming enable failure

media: ipu6: Ensure stream_mutex is acquired when dealing with node list

media: ipu6: Fix RPM reference leak in probe error paths

media: ipu6: Fix typo and wrong constant in ipu6-mmu.c

media: iris: Add buffer to list only after successful allocation

media: iris: Add missing platform data entries for SM8750

media: iris: Fix ffmpeg corrupted frame error

media: iris: Fix fps calculation

media: iris: gen1: Destroy internal buffers after FW releases

media: iris: gen2: Add sanity check for session stop

media: iris: Prevent output buffer queuing before stream-on completes

media: iris: remove v4l2_m2m_ioctl_{de,en}coder_cmd API usage during STOP handling

media: iris: Skip resolution set on first IPSC

media: iris: use fallback size when S_FMT is called without width/height

media: mediatek: encoder: Fix uninitialized scalar variable issue

media: mediatek: vcodec: Don't try to decode 422/444 VP9

media: mt9m114: Avoid a reset low spike during probe()

media: mt9m114: Return -EPROBE_DEFER if no endpoint is found

media: mtk-mdp: Fix a reference leak bug in mtk_mdp_remove()

media: mtk-mdp: Fix error handling in probe function

media: omap3isp: isp_video_mbus_to_pix/pix_to_mbus fixes

media: omap3isp: isppreview: always clamp in preview_try_format()

media: omap3isp: set initial format

media: pvrusb2: fix URB leak in pvr2_send_request_ex

media: qcom: camss: Do not enable cpas fast ahb clock for SM8550 VFE lite

media: qcom: camss: vfe: Fix out-of-bounds access in vfe_isr_reg_update()

media: radio-keene: fix memory leak in error path

media: rkisp1: Fix filter mode register configuration

media: rockchip: rga: Fix possible ERR_PTR dereference in rga_buf_init()

media: solo6x10: Check for out of bounds chip_id

media: staging/ipu7: Call synchronous RPM suspend in probe failure

media: staging/ipu7: Fix the loop bound in l2 table alloc

media: staging/ipu7: Ignore interrupts when device is suspended

media: staging/ipu7: Update CDPHY register settings

media: stm32: dcmipp: avoid naming clock if only one is needed

media: stm32: dcmipp: bytecap: clear all interrupts upon stream stop

media: stm32: dcmipp: byteproc: disable compose for all bayers

media: tegra-video: Fix memory leak in __tegra_channel_try_format()

media: uvcvideo: Create an ID namespace for streaming output terminals

media: uvcvideo: Fix support for V4L2_CTRL_FLAG_HAS_WHICH_MIN_MAX

media: uvcvideo: Return queued buffers on start_streaming() failure

media: v4l2-async: Fix error handling on steps after finding a match

media: v4l2-mem2mem: Add a kref to the v4l2_m2m_dev structure

media: venus: vdec: fix error state assignment for zero bytesused

media: venus: vdec: restrict EOS addr quirk to IRIS2 only

media: verisilicon: AV1: Fix enable cdef computation

media: verisilicon: AV1: Fix tile info buffer size

media: verisilicon: AV1: Fix tx mode bit setting

media: verisilicon: AV1: Set IDR flag for intra_only frame type

media: verisilicon: Avoid G2 bus error while decoding H.264 and HEVC

memory: mtk-smi: fix device leak on larb probe

memory: mtk-smi: fix device leaks on common probe

mfd: core: Add locking around 'mfd_of_node_list'

mfd: intel-lpss: Add Intel Nova Lake-S PCI IDs

mfd: macsmc: Initialize mutex

mfd: omap-usb-host: Fix OF populate on driver rebind

mfd: qcom-pm8xxx: Fix OF populate on driver rebind

mfd: tps65219: Implement LOCK register handling for TPS65214

minix: Add required sanity checking to minix_check_superblock()

MIPS: Loongson2ef: Register PCI controller in early stage

MIPS: Loongson2ef: Use pcibios_align_resource() to block io range

MIPS: Loongson: Make cpumask_of_node() robust against NUMA_NO_NODE

MIPS: rb532: Fix MMIO UART resource registration

misc: bcm_vk: Fix possible null-pointer dereferences in bcm_vk_read()

misc: eeprom: Fix EWEN/EWDS/ERAL commands for 93xx56 and 93xx66

misc: ti_fpc202: fix a potential memory leak in probe function

mm, page_alloc, thp: prevent reclaim for __GFP_THISNODE THP allocations

mm/highmem: fix __kmap_to_page() build error

mm/hugetlb: restore failed global reservations to subpool

mm/page_alloc: clear page->private in free_pages_prepare()

mm/page_alloc: skip debug_check_no_{obj,locks}_freed with FPI_TRYLOCK

mm/slab: add rcu_barrier() to kvfree_rcu_barrier_on_cache()

mm/slab: avoid allocating slabobj_ext array from its own slab

mm/slab: do not access current->mems_allowed_seq if !allow_spin

mm/slab: use prandom if !allow_spin

mm/slab: use unsigned long for orig_size to ensure proper metadata align

mm/vmalloc: prevent RCU stalls in kasan_release_vmalloc_node

mm/vmscan: fix demotion targets checks in reclaim/demotion

mm: numa_memblks: Identify the accurate NUMA ID of CFMW

mmc: rtsx_pci_sdmmc: increase power-on settling delay to 5ms

modpost: Amend ppc64 save/restfpr symnames for -Os build

most: core: fix leak on early registration failure

most: core: fix resource leak in most_register_interface error paths

mptcp: pm: in-kernel: always set ID as avail when rm endp

mshv: clear eventfd counter on irqfd shutdown

mshv: Ignore second stats page map result failure

mtd: rawnand: pl353: Fix software ECC support

mtd: spinand: Disable continuous read during probe

mux: mmio: fix regmap leak on probe failure

myri10ge: avoid uninitialized variable use

net/mlx5: DR, Fix circular locking dependency in dump

net/mlx5: E-switch, Clear legacy flag when moving to switchdev

net/mlx5: Fix missing devlink lock in SRIOV enable error path

net/mlx5: LAG, disable MPESW in lag_disable_change()

net/mlx5e: Fix "scheduling while atomic" in IPsec MAC address query

net/rds: Clear reconnect pending bit

net/rds: No shortcut out of RDS_CONN_ERROR

net/sched: act_skbedit: fix divide-by-zero in tcf_skbedit_hash()

net: arcnet: com20020-pci: fix support for 2.5Mbit cards

net: consume xmit errors of GSO frames

net: cpsw_new: Fix potential unregister of netdev that has not been registered yet

net: cpsw_new: Fix unnecessary netdev unregistration in cpsw_probe() error path

net: do not pass flow_id to set_rps_cpu()

net: Drop the lock in skb_may_tx_timestamp()

net: ethernet: ec_bhf: Fix dma_free_coherent() dma handle

net: ethernet: marvell: skge: remove incorrect conflicting PCI ID

net: ethernet: xscale: Check for PTP support properly

net: hns3: extend HCLGE_FD_AD_QID to 11 bits

net: intel: fix PCI device ID conflict between i40e and ipw2200

net: macb: Fix tx/rx malfunction after phy link down and up

net: mana: Fix double destroy_workqueue on service rescan PCI path

net: nfc: nci: Fix parameter validation for packet data

net: phy: qcom: qca807x: normalize return value of gpio_get

net: qrtr: Drop the MHI auto_queue feature for IPCR DL channels

net: sfp: add quirk for Lantech 8330-265D

net: ti: icssg-prueth: Add optional dependency on HSR

net: usb: kaweth: remove TX queue manipulation in kaweth_set_rx_mode

net: usb: lan78xx: scan all MDIO addresses on LAN7801

net: usb: pegasus: enable basic endpoint checking

net: usb: r8152: fix transmit queue timeout

net: usb: sr9700: remove code to drive nonexistent multicast filter

net: wan/fsl_ucc_hdlc: Fix dma_free_coherent() in uhdlc_memclean()

net: wan: farsync: Fix use-after-free bugs caused by unfinished tasklets

net: wwan: mhi: Add network support for Foxconn T99W760

netconsole: avoid OOB reads, msg is not nul-terminated

netfilter: nf_conntrack: Add allow_clash to generic protocol handler

netfilter: nf_conntrack_h323: fix OOB read in decode_choice()

netfilter: xt_tcpmss: check remaining length before reading optlen

netfs: when subreq is marked for retry, do not check if it faced an error

nfc: nxp-nci: remove interrupt trigger type

nfsd: fix nfs4_file refcount leak in nfsd_get_dir_deleg()

nfsd: fix return error code for nfsd_map_name_to_[ug]id

NFSD: fix setting FMODE_NOCMTIME in nfs4_open_delegation

ntb: ntb_hw_switchtec: Fix array-index-out-of-bounds access

ntb: ntb_hw_switchtec: Fix shift-out-of-bounds for 0 mw lut

NTB: ntb_transport: Fix too small buffer for debugfs_name

ntfs3: fix circular locking dependency in run_unpack_ex

ntfs: ->d_compare() must not block

nvmem: Drop OF node reference on nvmem_add_one_cell() failure

objtool/rust: add one more `noreturn` Rust function

ocfs2: fix reflink preserve cleanup issue

octeontx2-af: CGX: fix bitmap leaks

octeontx2-af: Workaround SQM/PSE stalls by disabling sticky

of/kexec: refactor ima_get_kexec_buffer() to use ima_validate_range()

openrisc: define arch-specific version of nop()

ovpn: tcp - fix packet extraction from stream

parisc: kernel: replace kfree() with put_device() in create_tree_node()

parisc: Prevent interrupts during reboot

PCI/AER: Clear stale errors on reporting agents upon probe

PCI/bwctrl: Disable BW controller on Intel P45 using a quirk

PCI/IOV: Fix race between SR-IOV enable/disable and hotplug

PCI/MSI: Unmap MSI-X region on error

PCI/PM: Prevent runtime suspend until devices are fully initialized

PCI: Add ACS quirk for Qualcomm Hamoa & Glymur

PCI: Add Intel Nova Lake audio Device ID

PCI: cadence: Avoid signed 64-bit truncation and invalid sort

PCI: Don't claim disabled bridge windows

PCI: dw-rockchip: Change get_ltssm() to provide L1 Substates info

PCI: dw-rockchip: Disable BAR 0 and BAR 1 for Root Port

PCI: dwc: Add L1 Substates context to ltssm_status of debugfs

PCI: dwc: Fix msg_atu_index assignment

PCI: dwc: Skip PME_Turn_Off broadcast and L2/L3 transition during suspend if link is not up

PCI: dwc: Skip waiting for L2/L3 Ready if dw_pcie_rp::skip_l23_wait is true

PCI: Enable ACS after configuring IOMMU for OF platforms

PCI: endpoint: Fix swapped parameters in pci_{primary/secondary}_epc_epf_unlink() functions

PCI: Fix bridge window alignment with optional resources

PCI: Fix pci_slot_lock () device locking

PCI: Fix pci_slot_trylock() error handling

PCI: imx6: Add CLKREQ# override to enable REFCLK for i.MX95 PCIe

PCI: j721e: Add config guards for Cadence Host and Endpoint library APIs

PCI: Mark ASM1164 SATA controller to avoid bus reset

PCI: Mark Nvidia GB10 to avoid bus reset

PCI: Use resource_set_range() that correctly sets ->end

perf annotate: Fix args leak of map_symbol

perf annotate: Fix BUILD_NONDISTRO=1 missing args->ms conversions to pointer

perf annotate: Fix memcpy size in arch__grow_instructions()

perf build: Raise minimum shellcheck version to 0.7.2

perf build: Remove NO_LIBCAP that controls nothing

perf callchain: Fix srcline printing with inlines

perf cs-etm: Fix decoding for sparse CPU maps

perf jevents: Handle deleted JSONS in out of source builds

perf maps: Fix reference count leak in maps__find_ams()

perf metricgroup: Don't early exit if no CPUID table exists

perf stat-shadow: In prepare_metric fix guard on reading NULL perf_stat_evsel

perf stat: Ensure metrics are displayed even with failed events

perf symbol-elf: Fix leak of ELF files with GNU debugdata

perf test parse-metric: Ensure aggregate counts appear to have run

perf test stat tests: Fix for virtualized machines

perf test: Fix test case perf evlist tests for s390x

perf test: Fix test case perftool-testsuite_report for s390

perf test: Fix test perf evlist for z/VM s390x

perf tests kallsyms: Fix missed map__put()

perf tests sched: Avoid error in cleanup on loaded machines

perf tools: Get debug info of DSO properly

perf unwind-libdw: Fix invalid reference counts

perf vendor events amd: Fix Zen 5 MAB allocation events

perf/arm-cmn: Reject unsupported hardware configurations

perf/arm-cmn: Support CMN-600AE

perf/core: Fix slow perf_event_task_exit() with LBR callstacks

perf/cxlpmu: Replace IRQF_ONESHOT with IRQF_NO_THREAD

perf/x86/cstate: Add Airmont NP

perf/x86/intel: Add Airmont NP

perf/x86/msr: Add Airmont NP

phy: cadence-torrent: restore parent clock for refclk during resume

phy: fsl-imx8mq-usb: disable bind/unbind platform driver feature

phy: fsl-imx8mq-usb: set platform driver data

phy: mvebu-cp110-utmi: fix dr_mode property read from dts

phy: qcom: edp: Make the number of clocks flexible

phy: ti: phy-j721e-wiz: restore mux selection during resume

pinctrl: intel: Add code name documentation

pinctrl: mediatek: make devm allocations safer and clearer in mtk_eint_do_init()

pinctrl: meson: amlogic-a4: mark the GPIO controller as sleeping

pinctrl: renesas: rzt2h: Allow .get_direction() for IRQ function GPIOs

platform/x86: ISST: Add missing write block check

platform/x86: ISST: Store and restore all domains data

PM: sleep: core: Avoid bit field races related to work_in_progress

power: reset: tdx-ec-poweroff: fix restart

power: sequencing: fix missing state_lock in pwrseq_power_on() error path

powercap: intel_rapl: Add PL4 support for Ice Lake

powerpc/pseries: Fix MSI-X allocation failure when quota is exceeded

powerpc/smp: Add check for kcalloc() failure in parse_thread_groups()

proc: Fix pointer error dereference

procfs: fix possible double mmput() in do_procmap_query()

psp: use sk->sk_hash in psp_write_headers()

pstore: ram_core: fix incorrect success return when vmap() fails

ptp: ptp_vmclock: add 'VMCLOCK' to ACPI device match

rapidio: replace rio_free_net() with kfree() in rio_scan_alloc_net()

RDMA/bng_re: Remove unnessary validity checks

RDMA/bng_re: Unwind bng_re_dev_init properly

RDMA/core: Fix stale RoCE GIDs during netdev events at registration

RDMA/efa: Fix typo in efa_alloc_mr()

RDMA/ionic: Fix potential NULL pointer dereference in ionic_query_port

RDMA/rtrs-clt: For conn rejection use actual err number

RDMA/umem: Fix double dma_buf_unpin in failure path

regulator: core: Remove regulator supply_name length limit

remoteproc: imx_dsp_rproc: Skip RP_MBOX_SUSPEND_SYSTEM when mailbox TX channel is uninitialized

remoteproc: imx_rproc: Fix invalid loaded resource table detection

remoteproc: mediatek: Break lock dependency to `prepare_lock`

Linux: Remove WARN_ALL_UNSEEDED_RANDOM kernel config option

reset: gpio: suppress bind attributes in sysfs

Revert "ACPI: processor: Update cpuidle driver check in __acpi_processor_start()"

Revert "arm64: zynqmp: Add an OP-TEE node to the device tree"

Revert "media: iris: Add sanity check for stop streaming"

Revert "mfd: da9052-spi: Change read-mask to write-mask"

Revert "mmc: rtsx_pci_sdmmc: increase power-on settling delay to 5ms"

Revert "PCI/IOV: Add PCI rescan-remove locking when enabling/disabling SR-IOV"

Revert "PCI: dw-rockchip: Don't wait for link since we can detect Link Up"

Revert "PCI: dw-rockchip: Enumerate endpoints based on dll_link_up IRQ"

Revert "PCI: dwc: Don't wait for link up if driver can detect Link Up event"

Revert "PCI: qcom: Don't wait for link if we can detect Link Up"

Revert "PCI: qcom: Enable MSI interrupts together with Link up if 'Global IRQ' is supported"

Revert "PCI: qcom: Enumerate endpoints based on Link up event in 'global_irq' interrupt"

ring-buffer: Fix possible dereference of uninitialized pointer

riscv: vector: init vector context with proper vlenb

rnbd-srv: Zero the rsp buffer before using it

rpmsg: core: fix race in driver_override_show() and use core helper

rtc: interface: Alarm race handling should not discard preceding error

rtc: max31335: use correct CONFIG symbol in IS_REACHABLE()

rtc: nvvrs: Add ARCH_TEGRA to the NV VRS RTC driver

rtc: pcf8563: use correct of_node for output clock

rtc: zynqmp: correct frequency value

rtla: Fix NULL pointer dereference in actions_parse

rust/drm: Fix Registration::{new,new_foreign_owned}() docs

rust: cpufreq: always inline functions using build_assert with arguments

rust: irq: add `'static` bounds to irq callbacks

rust: kbuild: pass `-Zunstable-options` for Rust 1.95.0

rust: list: Add unsafe blocks for container_of and safety comments

rust: pin-init: replace clippy `expect` with `allow`

rust_binder: Fix build failure if !CONFIG_COMPAT

s390/boot: Add -Wno-default-const-init-unsafe to KBUILD_CFLAGS

s390/pci: Handle futile config accesses of disabled devices directly

s390/perf: Disable register readout on sampling events

s390/purgatory: Add -Wno-default-const-init-unsafe to KBUILD_CFLAGS

sched/debug: Fix updating of ppos on server write ops

scsi: buslogic: Reduce stack usage

scsi: ufs: core: Flush exception handling work when RPM level is zero

scsi: ufs: mediatek: Fix page faults in ufs_mtk_clk_scale() trace event

selftests/mm/charge_reserved_hugetlb: drop mount size for hugetlbfs

serial: 8250: 8250_omap.c: Add support for handling UART error conditions

serial: 8250: 8250_omap.c: Clear DMA RX running status only after DMA termination is done

serial: 8250_dw: handle clock enable errors in runtime_resume

serial: rsci: Add set_rtrg() callback

smb: client: add proper locking around ses->iface_last_update

smb: client: prevent races in ->query_interfaces()

soc/tegra: pmc: Fix unsafe generic_handle_irq() call

soc: imx8m: Fix error handling for clk_prepare_enable()

soc: rockchip: grf: Fix wrong RK3576_IOCGRF_MISC_CON definition

soc: rockchip: grf: Support multiple grf to be handled

soc: ti: k3-socinfo: Fix regmap leak on probe failure

soc: ti: pruss: Fix double free in pruss_clk_mux_setup()

soundwire: dmi-quirks: add mapping for Avell B.ON (OEM rebranded of NUC15)

soundwire: intel_auxdevice: add cs42l45 codec to wake_capable_list

sparc: don't reference obsolete termio struct for TC* constants

sparc: Fix page alignment in dma mapping

sparc: Synchronize user stack on fork and clone

spi-geni-qcom: initialize mode related registers to 0

spi-geni-qcom: use xfer->bits_per_word for can_dma()

spi: cadence-qspi: Fix probe error path and remove

spi: cadence-qspi: Try hard to disable the clocks

spi: cadence-quadspi: Parse DT for flashes with the rest of the DT parsing

spi: geni-qcom: Fix abort sequence execution for serial engine errors

spi: spi-mem: Limit octal DTR constraints to octal DTR situations

spi: spi-mem: Protect dirmap_create() with spi_mem_access_start/end

spi: spidev: fix lock inversion between spi_lock and buf_lock

spi: stm32: fix Overrun issue at < 8bpw

spmi: apple: Add "apple,t8103-spmi" compatible

staging: rtl8723bs: fix memory leak on failure path

staging: rtl8723bs: fix missing status update on sdio_alloc_irq() failure

staging: rtl8723bs: fix null dereference in find_network

statmount: permission check should return EPERM

tcp: fix potential race in tcp_v6_syn_recv_sock()

tcp: re-enable acceptance of FIN packets when RWIN is 0

team: avoid NETDEV_CHANGEMTU event when unregistering slave

thermal: int340x: Fix sysfs group leak on DLVR registration failure

tipc: fix duplicate publication key in tipc_service_insert_publ()

tipc: fix RCU dereference race in tipc_aead_users_dec()

tls: Fix race condition in tls_sw_cancel_work_tx()

tools headers: Go back to include asm-generic/unistd.h for arm64

tools/cpupower: Fix inverted APERF capability check

tools/power cpupower: Reset errno before strtoull()

tools: Fix bitfield dependency failure

tracing: Fix checking of freed trace_event_file for hist files

tracing: Fix false sharing in hwlat get_sample()

tracing: Fix to set write permission to per-cpu buffer_size_kb

tracing: Reset last_boot_info if ring buffer is reset

tracing: ring-buffer: Fix to check event length before using

tracing: Wake up poll waiters for hist files when removing an event

tty: vt/keyboard: Split apart vt_do_diacrit()

udplite: Fix null-ptr-deref in __udp_enqueue_schedule_skb().

um: Preserve errno within signal handler

uprobes: Fix incorrect lockdep condition in filter_chain()

usb: chipidea: udc: fix DMA and SG cleanup in _ep_nuke()

usb: dwc2: fix resume failure if dr_mode is host

usb: dwc3: gadget: Move vbus draw to workqueue context

usb: gadget: f_fs: fix DMA-BUF OUT queues

usb: gadget: f_fs: Fix ioctl error handling

usb: gadget: tegra-xudc: Add handling for BLCG_COREPLL_PWRDN

usb: host: tegra: Remove manual wake IRQ disposal

usb: typec: ucsi: psy: Fix voltage and current max for non-Fixed PDOs

vhost: fix caching attributes of MMIO regions by setting them explicitly

vhost: move vdpa group bound check to vhost_vdpa

virt: vbox: uapi: Mark inner unions in packed structs as packed

vmw_vsock: bypass false-positive Wnonnull warning with gcc-16

watchdog/softlockup: fix sample ring index wrap in need_counting_irqs()

watchdog: imx7ulp_wdt: handle the nowayout option

watchdog: rzv2h_wdt: Discard pm_runtime_put() return value

wifi: ath10k: fix lock protection in ath10k_wmi_event_peer_sta_ps_state_chg()

wifi: ath11k: add pm quirk for Thinkpad Z13/Z16 Gen1

wifi: ath11k: Fix failure to connect to a 6 GHz AP

wifi: ath12k: fix mac phy capability parsing

wifi: ath12k: fix preferred hardware mode calculation

wifi: brcmfmac: Fix potential kernel oops when probe fails

wifi: cfg80211: allow only one NAN interface, also in multi radio

wifi: cfg80211: treat deprecated INDOOR_SP_AP_OLD control value as LPI mode

wifi: cfg80211: wext: fix IGTK key ID off-by-one

wifi: iwlegacy: add missing mutex protection in il3945_store_measurement()

wifi: iwlegacy: add missing mutex protection in il4965_store_tx_power()

wifi: iwlwifi: fix 22000 series SMEM parsing

wifi: iwlwifi: mld: fix chandef start calculation

wifi: iwlwifi: mld: Fix primary link selection logic

wifi: iwlwifi: mld: Handle rate selection for NAN interface

wifi: iwlwifi: mvm: check the validity of noa_len

wifi: libertas: fix WARNING in usb_tx_block

wifi: rtw88: 8822b: Avoid WARNING in rtw8822b_config_trx_mode()

wifi: rtw88: fix DTIM period handling when conf->dtim_period is zero

wifi: rtw88: Fix inadvertent sharing of struct ieee80211_supported_band data

wifi: rtw88: rtw8821cu: Add ID for Mercusys MU6H

wifi: rtw88: Use devm_kmemdup() in rtw_set_supported_band()

wifi: rtw89: 8852au: add support for TP TX30U Plus

wifi: rtw89: 8922a: add digital compensation for 2GHz

wifi: rtw89: 8922a: set random mac if efuse contains zeroes

wifi: rtw89: Add default ID 28de:2432 for RTL8832CU

wifi: rtw89: Add support for D-Link VR Air Bridge (DWA-F18)

wifi: rtw89: Add support for MSI AX1800 Nano (GUAX18N)

wifi: rtw89: disable EHT protocol by chip capabilities

wifi: rtw89: fix potential zero beacon interval in beacon tracking

wifi: rtw89: fix unable to receive probe responses under MLO connection

wifi: rtw89: mac: correct page number for CSI response

wifi: rtw89: mcc: reset probe counter when receiving beacon

wifi: rtw89: pci: restore LDO setting after device resume

wifi: rtw89: pci: validate release report content before using for RTL8922DE

wifi: rtw89: pci: validate sequence number of TX release report

wifi: rtw89: regd: 6 GHz power type marks default when inactive

wifi: rtw89: ser: enable error IMR after recovering from L1

wifi: rtw89: setting TBTT AGG number when mac port initialization

wifi: rtw89: wow: add reason codes for disassociation in WoWLAN mode

writeback: Fix wakeup and logging timeouts for !DETECT_HUNG_TASK

x86/acpi/boot: Correct acpi_is_processor_usable() check again

x86/hyperv: Move hv crash init after hypercall pg setup

x86/kexec: add a sanity check on previous kernel's ima kexec buffer

x86/kexec: Copy ACPI root pointer address from config table

x86/sev: Use kfree_sensitive() when freeing a SNP message descriptor

x86/uprobes: Fix XOL allocation failure for 32-bit tasks

x86/xen/pvh: Enable PAE mode for 32-bit guest only when CONFIG_X86_PAE is set

xenbus: Use .freeze/.thaw to handle xenbus devices

xfrm6: fix uninitialized saddr in xfrm6_get_saddr()

xfrm: always flush state and policy upon NETDEV_UNREGISTER event

xfrm: skip templates check for packet offload tunnel mode

xfs: check for deleted cursors when revalidating two btrees

xfs: check return value of xchk_scrub_create_subord

xfs: delete attr leaf freemap entries when empty

xfs: fix copy-paste error in previous fix

xfs: fix freemap adjustments when adding xattrs to leaf blocks

xfs: fix remote xattr valuelblk check

xfs: fix the xattr scrub to detect freemap/entries array collisions

xfs: get rid of the xchk_xfile_*_descr calls

xfs: mark data structures corrupt on EIO and ENODATA

xfs: only call xf{array,blob}_destroy if we have a valid pointer

xfs: remove xfs_attr_leaf_hasname