Noble update: v6.6.2 upstream stable release

    SRU Justification

    Impact:
       The upstream process for stable tree updates is quite similar
       in scope to the Ubuntu SRU process, e.g., each patch has to
       demonstrably fix a bug, and each patch is vetted by upstream
       by originating either directly from a mainline/stable Linux tree or
       a minimally backported form of that patch. The following upstream
       stable patches should be included in the Ubuntu kernel:

       v6.6.2 upstream stable release
       from git://git.kernel.org/

Linux 6.6.2
btrfs: make found_logical_ret parameter mandatory for function queue_scrub_stripe()
btrfs: use u64 for buffer sizes in the tree search ioctls
Revert "mmc: core: Capture correct oemid-bits for eMMC cards"
Revert "PCI/ASPM: Disable only ASPM_STATE_L1 when driver, disables L1"
x86/amd_nb: Use Family 19h Models 60h-7Fh Function 4 IDs
io_uring/net: ensure socket is marked connected on connect retry
selftests: mptcp: fix wait_rm_addr/sf parameters
selftests: mptcp: run userspace pm tests slower
eventfs: Check for NULL ef in eventfs_set_attr()
tracing/kprobes: Fix the order of argument descriptions
fbdev: fsl-diu-fb: mark wr_reg_wa() static
ALSA: hda/realtek: Add support dual speaker for Dell
fbdev: imsttfb: fix a resource leak in probe
fbdev: imsttfb: fix double free in probe()
arm64/arm: arm_pmuv3: perf: Don't truncate 64-bit registers
spi: spi-zynq-qspi: add spi-mem to driver kconfig dependencies
ASoC: dapm: fix clock get name
ASoC: hdmi-codec: register hpd callback on component probe
ASoC: mediatek: mt8186_mt6366_rt1019_rt5682s: trivial: fix error messages
ASoC: rt712-sdca: fix speaker route missing issue
drm/syncobj: fix DRM_SYNCOBJ_WAIT_FLAGS_WAIT_AVAILABLE
drm/vc4: tests: Fix UAF in the mock helpers
fs: dlm: Simplify buffer size computation in dlm_create_debug_file()
module/decompress: use kvmalloc() consistently
drivers: perf: Do not broadcast to other cpus when starting a counter
net: ti: icss-iep: fix setting counter value
RISC-V: Don't fail in riscv_of_parent_hartid() for disabled HARTs
net/sched: act_ct: Always fill offloading tuple iifidx
netfilter: nat: fix ipv6 nat redirect with mapped and scoped addresses
netfilter: xt_recent: fix (increase) ipv6 literal buffer length
i2c: iproc: handle invalid slave state
net: enetc: shorten enetc_setup_xdp_prog() error message to fit NETLINK_MAX_FMTMSG_LEN
virtio/vsock: Fix uninit-value in virtio_transport_recv_pkt()
r8169: respect userspace disabling IFF_MULTICAST
vsock/virtio: remove socket from connected/bound list on shutdown
blk-core: use pr_warn_ratelimited() in bio_check_ro()
nbd: fix uaf in nbd_open
tg3: power down device only on SYSTEM_POWER_OFF
ice: Fix VF-VF direction matching in drop rule in switchdev
ice: Fix VF-VF filter rules in switchdev mode
ice: lag: in RCU, use atomic allocation
ice: Fix SRIOV LAG disable on non-compliant aggregate
riscv: boot: Fix creation of loader.bin
nvme: fix error-handling for io_uring nvme-passthrough
net/smc: put sk reference if close work was canceled
net/smc: allow cdc msg send rather than drop it with NULL sndbuf_desc
net/smc: fix dangling sock under state SMC_APPFINCLOSEWAIT
octeontx2-pf: Free pending and dropped SQEs
selftests: pmtu.sh: fix result checking
net: stmmac: xgmac: Enable support for multiple Flexible PPS outputs
Fix termination state for idr_for_each_entry_ul()
net: r8169: Disable multicast filter for RTL8168H and RTL8107E
dccp/tcp: Call security_inet_conn_request() after setting IPv6 addresses.
dccp: Call security_inet_conn_request() after setting IPv4 addresses.
net: page_pool: add missing free_percpu when page_pool_init fail
octeontx2-pf: Fix holes in error code
octeontx2-pf: Fix error codes
inet: shrink struct flowi_common
bpf: Check map->usercnt after timer->timer is assigned
rxrpc: Fix two connection reaping bugs
tipc: Change nla_policy for bearer-related names to NLA_NUL_STRING
hsr: Prevent use after free in prp_create_tagged_frame()
llc: verify mac len before reading mac header
watchdog: ixp4xx: Make sure restart always works
watchdog: marvell_gti_wdt: Fix error code in probe()
Input: synaptics-rmi4 - fix use after free in rmi_unregister_function()
pwm: brcmstb: Utilize appropriate clock APIs in suspend/resume
pwm: sti: Reduce number of allocations and drop usage of chip_data
drm/amdgpu: don't put MQDs in VRAM on ARM | ARM64
drm/amdgpu/gfx10,11: use memcpy_to/fromio for MQDs
regmap: prevent noinc writes from clobbering cache
cpupower: fix reference to nonexistent document
media: cec: meson: always include meson sub-directory in Makefile
media: platform: mtk-mdp3: fix uninitialized variable in mdp_path_config()
media: mediatek: vcodec: using encoder device to alloc/free encoder memory
media: imx-jpeg: notify source chagne event when the first picture parsed
media: mediatek: vcodec: Handle invalid encoder vsi
media: verisilicon: Fixes clock list for rk3588 av1 decoder
media: dvb-usb-v2: af9035: fix missing unlock
media: cadence: csi2rx: Unregister v4l2 async notifier
media: i2c: imx219: Drop IMX219_REG_CSI_LANE_MODE from common regs array
media: i2c: imx219: Replace register addresses with macros
media: i2c: imx219: Convert to CCI register access helpers
media: cedrus: Fix clock/reset sequence
media: vidtv: mux: Add check and kfree for kstrdup
media: vidtv: psi: Add check for kstrdup
media: s3c-camif: Avoid inappropriate kfree()
media: mtk-jpegenc: Fix bug in JPEG encode quality selection
media: amphion: handle firmware debug message
media: bttv: fix use after free error due to btv->timeout timer
media: ov5640: Fix a memory leak when ov5640_probe fails
media: i2c: max9286: Fix some redundant of_node_put() calls
media: ov5640: fix vblank unchange issue when work at dvp mode
media: ov13b10: Fix some error checking in probe
media: verisilicon: Do not enable G2 postproc downscale if source is narrower than destination
media: hantro: Check whether reset op is defined before use
media: imx-jpeg: initiate a drain of the capture queue in dynamic resolution change
pcmcia: ds: fix possible name leak in error path in pcmcia_device_add()
pcmcia: ds: fix refcount leak in pcmcia_device_add()
pcmcia: cs: fix possible hung task and memory leak pccardd()
cxl/hdm: Remove broken error path
cxl/port: Fix @host confusion in cxl_dport_setup_regs()
cxl/core/regs: Rename @dev to @host in struct cxl_register_map
cxl/region: Fix cxl_region_rwsem lock held when returning to user space
cxl/region: Use cxl_calc_interleave_pos() for auto-discovery
cxl/region: Calculate a target position in a region interleave
cxl/region: Prepare the decoder match range helper for reuse
rtc: pcf85363: fix wrong mask/val parameters in regmap_update_bits call
virt: sevguest: Fix passing a stack buffer as a scatterlist target
cxl/mem: Fix shutdown order
cxl/memdev: Fix sanitize vs decoder setup locking
cxl/pci: Fix sanitize notifier setup
cxl/pci: Clarify devm host for memdev relative setup
cxl/pci: Remove inconsistent usage of dev_err_probe()
cxl/pci: Cleanup 'sanitize' to always poll
cxl/pci: Remove unnecessary device reference management in sanitize work
rtc: brcmstb-waketimer: support level alarm_irq
i3c: Fix potential refcount leak in i3c_master_register_new_i3c_devs
rtla: Fix uninitialized variable found
9p/net: fix possible memory leak in p9_check_errors()
perf vendor events intel: Add broadwellde two metrics
perf vendor events intel: Fix broadwellde tma_info_system_dram_bw_use metric
perf hist: Add missing puts to hist__account_cycles
libperf rc_check: Make implicit enabling work for GCC
perf machine: Avoid out of bounds LBR memory read
powerpc/vmcore: Add MMU information to vmcoreinfo
usb: host: xhci-plat: fix possible kernel oops while resuming
xhci: Loosen RPM as default policy to cover for AMD xHC 1.1
perf vendor events: Update PMC used in PM_RUN_INST_CMPL event for power10 platform
powerpc/pseries: fix potential memory leak in init_cpu_associativity()
powerpc/imc-pmu: Use the correct spinlock initializer.
powerpc/vas: Limit open window failure messages in log bufffer
perf trace: Use the right bpf_probe_read(_str) variant for reading user data
powerpc: Hide empty pt_regs at base of the stack
powerpc/xive: Fix endian conversion size
powerpc/40x: Remove stale PTE_ATOMIC_UPDATES macro
perf tools: Do not ignore the default vmlinux.h
modpost: fix ishtp MODULE_DEVICE_TABLE built on big-endian host
modpost: fix tee MODULE_DEVICE_TABLE built on big-endian host
s390/ap: re-init AP queues on config on
perf mem-events: Avoid uninitialized read
perf parse-events: Fix for term values that are raw events
perf build: Add missing comment about NO_LIBTRACEEVENT=1
interconnect: fix error handling in qnoc_probe()
powerpc: Only define __parse_fpscr() when required
interconnect: qcom: osm-l3: Replace custom implementation of COUNT_ARGS()
interconnect: qcom: sm8350: Set ACV enable_mask
interconnect: qcom: sm8250: Set ACV enable_mask
interconnect: qcom: sm8150: Set ACV enable_mask
interconnect: qcom: sm6350: Set ACV enable_mask
interconnect: qcom: sdm845: Set ACV enable_mask
interconnect: qcom: sdm670: Set ACV enable_mask
interconnect: qcom: sc8280xp: Set ACV enable_mask
interconnect: qcom: sc8180x: Set ACV enable_mask
interconnect: qcom: sc7280: Set ACV enable_mask
interconnect: qcom: sc7180: Set ACV enable_mask
interconnect: qcom: qdu1000: Set ACV enable_mask
f2fs: fix to initialize map.m_pblk in f2fs_precache_extents()
dmaengine: pxa_dma: Remove an erroneous BUG_ON() in pxad_free_desc()
USB: usbip: fix stub_dev hub disconnect
tools: iio: iio_generic_buffer ensure alignment
debugfs: Fix __rcu type comparison warning
misc: st_core: Do not call kfree_skb() under spin_lock_irqsave()
tools/perf: Update call stack check in builtin-lock.c
dmaengine: ti: edma: handle irq_of_parse_and_map() errors
usb: chipidea: Simplify Tegra DMA alignment code
usb: chipidea: Fix DMA overwrite for Tegra
usb: dwc2: fix possible NULL pointer dereference caused by driver concurrency
dmaengine: idxd: Register dsa_bus_type before registering idxd sub-drivers
perf record: Fix BTF type checks in the off-cpu profiling
perf vendor events arm64: Fix for AmpereOne metrics
pinctrl: renesas: rzg2l: Make reverse order of enable() for disable()
livepatch: Fix missing newline character in klp_resolve_symbols()
perf parse-events: Fix tracepoint name memory leak
tty: tty_jobctrl: fix pid memleak in disassociate_ctty()
f2fs: fix to drop meta_inode's page cache in f2fs_put_super()
f2fs: compress: fix to avoid redundant compress extension
f2fs: compress: fix to avoid use-after-free on dic
f2fs: compress: fix deadloop in f2fs_write_cache_pages()
perf kwork: Set ordered_events to true in 'struct perf_tool'
perf kwork: Add the supported subcommands to the document
perf kwork: Fix incorrect and missing free atom in work_push_atom()
pinctrl: baytrail: fix debounce disable case
iio: frequency: adf4350: Use device managed functions and fix power down issue.
perf stat: Fix aggr mode initialization
apparmor: fix invalid reference on profile->disconnected
scripts/gdb: fix usage of MOD_TEXT not defined when CONFIG_MODULES=n
leds: trigger: ledtrig-cpu:: Fix 'output may be truncated' issue for 'cpu'
leds: pwm: Don't disable the PWM when the LED should be off
leds: turris-omnia: Do not use SMBUS calls
mfd: arizona-spi: Set pdata.hpdet_channel for ACPI enumerated devs
dt-bindings: mfd: mt6397: Split out compatible for MediaTek MT6366 PMIC
mfd: dln2: Fix double put in dln2_probe
mfd: core: Ensure disabled devices are skipped without aborting
mfd: core: Un-constify mfd_cell.of_reg
IB/mlx5: Fix init stage error handling to avoid double free of same QP and UAF
erofs: fix erofs_insert_workgroup() lockref usage
ASoC: ams-delta.c: use component after check
crypto: qat - fix deadlock in backlog processing
crypto: qat - fix ring to service map for QAT GEN4
crypto: qat - use masks for AE groups
crypto: qat - refactor fw config related functions
crypto: qat - enable dc chaining service
crypto: qat - consolidate services structure
certs: Break circular dependency when selftest is modular
padata: Fix refcnt handling in padata_free_shell()
PCI: endpoint: Fix double free in __pci_epc_create()
ASoC: Intel: Skylake: Fix mem leak when parsing UUIDs fails
HID: logitech-hidpp: Move get_wireless_feature_index() check to hidpp_connect_event()
HID: logitech-hidpp: Revert "Don't restart communication if not necessary"
HID: logitech-hidpp: Don't restart IO, instead defer hid_connect() only
sh: bios: Revive earlyprintk support
HID: uclogic: Fix a work->entry not empty bug in __queue_work()
HID: uclogic: Fix user-memory-access bug in uclogic_params_ugee_v2_init_event_hooks()
hid: cp2112: Fix IRQ shutdown stopping polling for all IRQs on chip
RDMA/hfi1: Workaround truncation compilation error
scsi: ufs: core: Leave space for '\0' in utf8 desc string
ASoC: fsl: Fix PM disable depth imbalance in fsl_easrc_probe
ASoC: intel: sof_sdw: Stop processing CODECs when enough are found
ASoC: SOF: core: Ensure sof_ops_free() is still called when probe never ran.
RDMA/hns: Fix init failure of RoCE VF and HIP08
RDMA/hns: Fix unnecessary port_num transition in HW stats allocation
RDMA/hns: The UD mode can only be configured with DCQCN
RDMA/hns: Add check for SL
RDMA/hns: Fix signed-unsigned mixed comparisons
RDMA/hns: Fix uninitialized ucmd in hns_roce_create_qp_common()
RDMA/hns: Fix printing level of asynchronous events
IB/mlx5: Fix rdma counter binding for RAW QP
dlm: fix no ack after final message
dlm: be sure we reset all nodes at forced shutdown
dlm: fix remove member after close call
dlm: fix creating multiple node structures
fs: dlm: Fix the size of a buffer in dlm_create_debug_file()
ASoC: fsl-asoc-card: Add comment for mclk in the codec_priv
ASoC: Intel: sof_sdw_rt_sdca_jack_common: add rt713 support
backlight: pwm_bl: Disable PWM on shutdown, suspend and remove
ASoC: fsl: mpc5200_dma.c: Fix warning of Function parameter or member not described
kselftest: vm: fix mdwe's mmap_FIXED test case
ext4: move 'ix' sanity check to corrent position
ext4: add missing initialization of call_notify_error in update_super_work()
ARM: 9323/1: mm: Fix ARCH_LOW_ADDRESS_LIMIT when CONFIG_ZONE_DMA
ARM: 9321/1: memset: cast the constant byte to unsigned char
crypto: hisilicon/qm - fix PF queue parameter issue
hid: cp2112: Fix duplicate workqueue initialization
PCI: vmd: Correct PCI Header Type Register's multi-function check
ASoC: SOF: ipc4-topology: Use size_add() in call to struct_size()
crypto: qat - increase size of buffers
crypto: caam/jr - fix Chacha20 + Poly1305 self test failure
crypto: caam/qi2 - fix Chacha20 + Poly1305 self test failure
nd_btt: Make BTT lanes preemptible
libnvdimm/of_pmem: Use devm_kstrdup instead of kstrdup and check its return value
ASoC: soc-pcm.c: Make sure DAI parameters cleared if the DAI becomes inactive
scsi: ibmvfc: Fix erroneous use of rtas_busy_delay with hcall return code
crypto: qat - fix unregistration of compression algorithms
crypto: qat - fix unregistration of crypto algorithms
crypto: qat - ignore subsequent state up commands
crypto: qat - fix state machines cleanup paths
RDMA/core: Use size_{add,sub,mul}() in calls to struct_size()
hwrng: geode - fix accessing registers
hwrng: bcm2835 - Fix hwrng throughput regression
crypto: hisilicon/hpre - Fix a erroneous check after snprintf()
crypto: ccp - Fix some unfused tests
crypto: ccp - Fix sample application signature passing
crypto: ccp - Fix DBC sample application error handling
crypto: ccp - Fix ioctl unit tests
crypto: ccp - Get a free page to use while fetching initial nonce
KEYS: Include linux/errno.h in linux/verification.h
ALSA: hda: cs35l41: Undo runtime PM changes at driver exit time
ALSA: hda: cs35l41: Fix unbalanced pm_runtime_get()
ASoC: cs35l41: Undo runtime PM changes at driver exit time
ASoC: cs35l41: Verify PM runtime resume errors in IRQ handler
ASoC: cs35l41: Fix broken shared boost activation
ASoC: cs35l41: Initialize completion object before requesting IRQ
ASoC: cs35l41: Handle mdsync_up reg write errors
ASoC: cs35l41: Handle mdsync_down reg write errors
module/decompress: use vmalloc() for gzip decompression workspace
iommufd: Add iopt_area_alloc()
ARM: dts: BCM5301X: Explicitly disable unused switch CPU ports
soc: qcom: pmic_glink: fix connector type to be DisplayPort
selftests/resctrl: Ensure the benchmark commands fits to its array
selftests/pidfd: Fix ksft print formats
arm64: tegra: Use correct interrupts for Tegra234 TKE
memory: tegra: Set BPMP msg flags to reset IPC channels
firmware: tegra: Add suspend hook and reset BPMP IPC early on resume
arm64: tegra: Fix P3767 QSPI speed
arm64: tegra: Fix P3767 card detect polarity
arm64: dts: imx8mn: Add sound-dai-cells to micfil node
arm64: dts: imx8mm: Add sound-dai-cells to micfil node
arm64: dts: imx8mp-debix-model-a: Remove USB hub reset-gpios
arm64: dts: imx8qm-ss-img: Fix jpegenc compatible entry
clk: scmi: Free scmi_clk allocated when the clocks with invalid info are skipped
ARM: dts: am3517-evm: Fix LED3/4 pinmux
firmware: arm_ffa: Allow the FF-A drivers to use 32bit mode of messaging
firmware: arm_ffa: Assign the missing IDR allocation ID to the FFA device
arm64: dts: ti: Fix HDMI Audio overlay in Makefile
arm64: dts: ti: k3-am62a7-sk: Drop i2c-1 to 100Khz
arm64: dts: ti: k3-am625-beagleplay: Fix typo in ramoops reg
arm64: dts: ti: verdin-am62: disable MIPI DSI bridge
arm64: dts: ti: k3-j721s2-evm-gesi: Specify base dtb for overlay file
firmware: ti_sci: Mark driver as non removable
ARM: dts: stm32: stm32f7-pinctrl: don't use multiple blank lines
kunit: test: Fix the possible memory leak in executor_test
kunit: Fix possible memory leak in kunit_filter_suites()
kunit: Fix the wrong kfree of copy for kunit_filter_suites()
kunit: Fix missed memory release in kunit_free_suite_set()
soc: qcom: llcc: Handle a second device without data corruption
ARM: dts: qcom: mdm9615: populate vsdcc fixed regulator
ARM: dts: qcom: apq8026-samsung-matisse-wifi: Fix inverted hall sensor
arm64: dts: qcom: apq8016-sbc: Add missing ADV7533 regulators
riscv: dts: allwinner: remove address-cells from intc node
arm64: dts: qcom: msm8939: Fix iommu local address range
arm64: dts: qcom: msm8976: Fix ipc bit shifts
ARM64: dts: marvell: cn9310: Use appropriate label for spi1 pins
arm64: dts: qcom: sdx75-idp: align RPMh regulator nodes with bindings
arm64: dts: qcom: sdm845-mtp: fix WiFi configuration
arm64: dts: qcom: sm8350: fix pinctrl for UART18
arm64: dts: qcom: sm8150: add ref clock to PCIe PHYs
arm64: dts: qcom: sc7280: drop incorrect EUD port on SoC side
arm64: dts: qcom: sdm670: Fix pdc mapping
arm64: dts: qcom: qrb2210-rb1: Fix regulators
arm64: dts: qcom: qrb2210-rb1: Swap UART index
arm64: dts: qcom: sc7280: Add missing LMH interrupts
arm64: dts: qcom: sm6125: Pad APPS IOMMU address to 8 characters
arm64: dts: qcom: msm8992-libra: drop duplicated reserved memory
arm64: dts: qcom: msm8916: Fix iommu local address range
arm64: dts: qcom: sc7280: link usb3_phy_wrapper_gcc_usb30_pipe_clk
arm64: dts: qcom: sdm845: cheza doesn't support LMh node
arm64: dts: qcom: sdm845: Fix PSCI power domain names
ARM: dts: renesas: blanche: Fix typo in GP_11_2 pin name
perf: hisi: Fix use-after-free when register pmu fails
drivers/perf: hisi_pcie: Check the type first in pmu::event_init()
perf/arm-cmn: Fix DTC domain detection
drm/amd/pm: Fix a memory leak on an error path
drivers/perf: hisi: use cpuhp_state_remove_instance_nocalls() for hisi_hns3_pmu uninit process
drm: mediatek: mtk_dsi: Fix NO_EOT_PACKET settings/handling
clocksource/drivers/arm_arch_timer: limit XGene-1 workaround
drm/msm/dsi: free TX buffer in unbind
drm/msm/dsi: use msm_gem_kernel_put to free TX buffer
xen-pciback: Consider INTx disabled when MSI/MSI-X is enabled
xen: irqfd: Use _IOW instead of the internal _IOC() macro
xen: Make struct privcmd_irqfd's layout architecture independent
xenbus: fix error exit in xenbus_init()
drm/rockchip: Fix type promotion bug in rockchip_gem_iommu_map()
arm64/arm: xen: enlighten: Fix KPTI checks
drm/bridge: lt9611uxc: fix the race in the error path
gpu: host1x: Correct allocated size for contexts
drm/rockchip: cdn-dp: Fix some error handling paths in cdn_dp_probe()
drm/msm/a6xx: Fix unknown speedbin case
drm/msm/adreno: Fix SM6375 GPU ID
accel/habanalabs/gaudi2: Fix incorrect string length computation in gaudi2_psoc_razwi_get_engines()
drm/mediatek: Fix iommu fault during crtc enabling
drm/mediatek: Fix iommu fault by swapping FBs after updating plane state
drm/mediatek: Add mmsys_dev_num to mt8188 vdosys0 driver data
io_uring/kbuf: Allow the full buffer id space for provided buffers
io_uring/kbuf: Fix check of BID wrapping in provided buffers
drm/amd/display: Bail from dm_check_crtc_cursor if no relevant change
drm/amd/display: Refactor dm_get_plane_scale helper
drm/amd/display: Check all enabled planes in dm_check_crtc_cursor
drm/amd/display: Fix null pointer dereference in error message
drm/amdkfd: Handle errors from svm validate and map
drm/amdkfd: Remove svm range validated_once flag
drm/amdkfd: fix some race conditions in vram buffer alloc/free of svm code
drm/amdgpu: Increase IH soft ring size for GFX v9.4.3 dGPU
drm: Call drm_atomic_helper_shutdown() at shutdown/remove time for misc drivers
drm/bridge: tc358768: Fix tc358768_ns_to_cnt()
drm/bridge: tc358768: Clean up clock period code
drm/bridge: tc358768: Rename dsibclk to hsbyteclk
drm/bridge: tc358768: Use dev for dbg prints, not priv->dev
drm/bridge: tc358768: Print logical values, not raw register values
drm/bridge: tc358768: Use struct videomode
drm/bridge: tc358768: Fix bit updates
drm/bridge: tc358768: Fix use of uninitialized variable
x86/tdx: Zero out the missing RSI in TDX_HYPERCALL macro
drm/mediatek: Fix coverity issue with unintentional integer overflow
drm/ssd130x: Fix screen clearing
drm/bridge: lt8912b: Add missing drm_bridge_attach call
drm/bridge: lt8912b: Manually disable HPD only if it was enabled
drm/bridge: lt8912b: Fix crash on bridge detach
drm/bridge: lt8912b: Fix bridge_detach
drm: bridge: it66121: Fix invalid connector dereference
drm/radeon: Remove the references of radeon_gem_ pread & pwrite ioctls
drm/radeon: possible buffer overflow
drm/rockchip: vop2: Add missing call to crtc reset helper
drm/rockchip: vop2: Don't crash for invalid duplicate_state
drm/rockchip: vop: Fix call to crtc reset helper
drm/rockchip: vop: Fix reset of state in duplicate state crtc funcs
drm/loongson: Fix error handling in lsdc_pixel_pll_setup()
drm: bridge: samsung-dsim: Fix waiting for empty cmd transfer FIFO on older Exynos
drm: bridge: for GENERIC_PHY_MIPI_DPHY also select GENERIC_PHY
drm: bridge: samsung-dsim: Initialize ULPS EXIT for i.MX8M DSIM
spi: omap2-mcspi: Fix hardcoded reference clock
spi: omap2-mcspi: switch to use modern name
platform/chrome: cros_ec_lpc: Separate host command and irq disable
hte: tegra: Fix missing error code in tegra_hte_test_probe()
hwmon: (sch5627) Disallow write access if virtual registers are locked
hwmon: (sch5627) Use bit macros when accessing the control register
hwmon: (pmbus/mp2975) Move PGOOD fix
Revert "hwmon: (sch56xx-common) Add automatic module loading on supported devices"
Revert "hwmon: (sch56xx-common) Add DMI override table"
hwmon: (coretemp) Fix potentially truncated sysfs attribute name
hwmon: (axi-fan-control) Fix possible NULL pointer dereference
regulator: qcom-rpmh: Fix smps4 regulator for pm8550ve
platform/x86: wmi: Fix opening of char device
platform/x86: wmi: Fix probe failure when failing to register WMI devices
clk: mediatek: fix double free in mtk_clk_register_pllfh()
clk: qcom: ipq5332: drop the CLK_SET_RATE_PARENT flag from GPLL clocks
clk: qcom: ipq9574: drop the CLK_SET_RATE_PARENT flag from GPLL clocks
clk: qcom: ipq5018: drop the CLK_SET_RATE_PARENT flag from GPLL clocks
clk: qcom: apss-ipq-pll: Fix 'l' value for ipq5332_pll_config
clk: qcom: apss-ipq-pll: Use stromer plus ops for stromer plus pll
clk: qcom: clk-alpha-pll: introduce stromer plus ops
clk: qcom: config IPQ_APSS_6018 should depend on QCOM_SMEM
clk: mediatek: clk-mt2701: Add check for mtk_alloc_clk_data
clk: mediatek: clk-mt7629: Add check for mtk_alloc_clk_data
clk: mediatek: clk-mt7629-eth: Add check for mtk_alloc_clk_data
clk: mediatek: clk-mt6797: Add check for mtk_alloc_clk_data
clk: mediatek: clk-mt6779: Add check for mtk_alloc_clk_data
clk: mediatek: clk-mt6765: Add check for mtk_alloc_clk_data
clk: npcm7xx: Fix incorrect kfree
clk: ti: fix double free in of_ti_divider_clk_setup()
clk: keystone: pll: fix a couple NULL vs IS_ERR() checks
clk: ralink: mtmips: quiet unused variable warning
spi: nxp-fspi: use the correct ioremap function
clk: linux/clk-provider.h: fix kernel-doc warnings and typos
clk: renesas: rzg2l: Fix computation formula
clk: renesas: rzg2l: Use FIELD_GET() for PLL register fields
clk: renesas: rzg2l: Trust value returned by hardware
clk: renesas: rzg2l: Lock around writes to mux register
clk: renesas: rzg2l: Wait for status bit of SD mux before continuing
clk: renesas: rcar-gen3: Extend SDnH divider table
clk: imx: imx8qxp: Fix elcdif_pll clock
clk: imx: imx8mq: correct error handling path
clk: imx: imx8: Fix an error handling path in imx8_acm_clk_probe()
clk: imx: imx8: Fix an error handling path if devm_clk_hw_register_mux_parent_data_table() fails
clk: imx: imx8: Fix an error handling path in clk_imx_acm_attach_pm_domains()
clk: imx: Select MXC_CLK for CLK_IMX8QXP
regulator: mt6358: Fail probe on unknown chip ID
gpio: sim: initialize a managed pointer when declaring it
clk: qcom: gcc-sm8150: Fix gcc_sdcc2_apps_clk_src
clk: qcom: mmcc-msm8998: Fix the SMMU GDSC
clk: qcom: mmcc-msm8998: Don't check halt bit on some branch clks
clk: qcom: clk-rcg2: Fix clock rate overflow for high parent frequencies
clk: qcom: gcc-msm8996: Remove RPM bus clocks
clk: qcom: ipq5332: Drop set rate parent from gpll0 dependent clocks
spi: tegra: Fix missing IRQ check in tegra_slink_probe()
regmap: debugfs: Fix a erroneous check after snprintf()
ipvlan: properly track tx_errors
net: add DEV_STATS_READ() helper
virtio_net: use u64_stats_t infra to avoid data-races
ipv6: avoid atomic fragment on GSO packets
mptcp: properly account fastopen data
ACPI: sysfs: Fix create_pnp_modalias() and create_of_modalias()
bpf: Fix unnecessary -EBUSY from htab_lock_bucket
Bluetooth: hci_sync: Fix Opcode prints in bt_dev_dbg/err
Bluetooth: Make handle of hci_conn be unique
Bluetooth: ISO: Pass BIG encryption info through QoS
wifi: iwlwifi: empty overflow queue during flush
wifi: iwlwifi: mvm: update IGTK in mvmvif upon D3 resume
wifi: iwlwifi: pcie: synchronize IRQs before NAPI
wifi: iwlwifi: mvm: fix netif csum flags
wifi: iwlwifi: increase number of RX buffers for EHT devices
wifi: iwlwifi: mvm: remove TDLS stations from FW
wifi: iwlwifi: mvm: fix iwl_mvm_mac_flush_sta()
wifi: iwlwifi: mvm: change iwl_mvm_flush_sta() API
wifi: iwlwifi: mvm: Don't always bind/link the P2P Device interface
wifi: iwlwifi: mvm: Fix key flags for IGTK on AP interface
wifi: iwlwifi: mvm: Correctly set link configuration
wifi: iwlwifi: yoyo: swap cdb and jacket bits values
wifi: mac80211: Fix setting vif links
wifi: mac80211: don't recreate driver link debugfs in reconfig
wifi: iwlwifi: mvm: use correct sta ID for IGTK/BIGTK
wifi: iwlwifi: mvm: fix removing pasn station for responder
wifi: iwlwifi: mvm: update station's MFP flag after association
tcp: fix cookie_init_timestamp() overflows
chtls: fix tp->rcv_tstamp initialization
thermal: core: Don't update trip points inside the hysteresis range
selftests/bpf: Make linked_list failure test more robust
net: skb_find_text: Ignore patterns extending past 'to'
bpf: Fix missed rcu read lock in bpf_task_under_cgroup()
thermal/drivers/mediatek: Fix probe for THERMAL_V2
r8169: fix rare issue with broken rx after link-down on RTL8125
thermal: core: prevent potential string overflow
wifi: rtw88: Remove duplicate NULL check before calling usb_kill/free_urb()
virtio-net: fix the vq coalescing setting for vq resize
virtio-net: fix per queue coalescing parameter setting
virtio-net: consistently save parameters for per-queue
virtio-net: fix mismatch of getting tx-frames
netfilter: nf_tables: Drop pointless memset when dumping rules
wifi: wfx: fix case where rates are out of order
PM / devfreq: rockchip-dfi: Make pmu regmap mandatory
can: dev: can_put_echo_skb(): don't crash kernel if can_priv::echo_skb is accessed out of bounds
can: dev: can_restart(): fix race condition between controller restart and netif_carrier_on()
can: dev: can_restart(): don't crash kernel if carrier is OK
wifi: ath11k: fix Tx power value during active CAC
r8152: break the loop when the budget is exhausted
selftests/bpf: Define SYS_NANOSLEEP_KPROBE_NAME for riscv
selftests/bpf: Define SYS_PREFIX for riscv
libbpf: Fix syscall access arguments on riscv
can: etas_es58x: add missing a blank line after declaration
can: etas_es58x: rework the version check logic to silence -Wformat-truncation
ACPI: video: Add acpi_backlight=vendor quirk for Toshiba Portégé R100
ACPI: property: Allow _DSD buffer data only for byte accessors
wifi: rtlwifi: fix EDCA limit set by BT coexistence
tcp_metrics: do not create an entry from tcp_init_metrics()
tcp_metrics: properly set tp->snd_ssthresh in tcp_init_metrics()
tcp_metrics: add missing barriers on delete
wifi: ath: dfs_pattern_detector: Fix a memory initialization issue
wifi: mt76: mt7921: fix the wrong rate selected in fw for the chanctx driver
wifi: mt76: mt7921: fix the wrong rate pickup for the chanctx driver
wifi: mt76: move struct ieee80211_chanctx_conf up to struct mt76_vif
wifi: mt76: mt7915: fix beamforming availability check
wifi: mt76: fix per-band IEEE80211_CONF_MONITOR flag comparison
wifi: mt76: get rid of false alamrs of tx emission issues
wifi: mt76: fix potential memory leak of beacon commands
wifi: mt76: update beacon size limitation
wifi: mt76: mt7996: fix TWT command format
wifi: mt76: mt7996: fix rx rate report for CBW320-2
wifi: mt76: mt7996: fix wmm queue mapping
wifi: mt76: mt7996: fix beamformee ss subfield in EHT PHY cap
wifi: mt76: mt7996: fix beamform mcu cmd configuration
wifi: mt76: mt7996: set correct wcid in txp
wifi: mt76: remove unused error path in mt76_connac_tx_complete_skb
wifi: mt76: mt7603: improve stuck beacon handling
wifi: mt76: mt7603: improve watchdog reset reliablity
wifi: mt76: mt7603: rework/fix rx pse hang check
cpufreq: tegra194: fix warning due to missing opp_put
PM: sleep: Fix symbol export for _SIMPLE_ variants of _PM_OPS()
wifi: mac80211: fix check for unusable RX result
wifi: ath11k: fix boot failure with one MSI vector
wifi: ath12k: fix DMA unmap warning on NULL DMA address
wifi: rtw88: debug: Fix the NULL vs IS_ERR() bug for debugfs_create_file()
net: ethernet: mtk_wed: fix EXT_INT_STATUS_RX_FBUF definitions for MT7986 SoC
ice: fix pin assignment for E810-T without SMA control
net: spider_net: Use size_add() in call to struct_size()
tipc: Use size_add() in calls to struct_size()
tls: Use size_add() in call to struct_size()
mlxsw: Use size_mul() in call to struct_size()
gve: Use size_add() in call to struct_size()
bpf: Fix kfunc callback register type handling
tcp: call tcp_try_undo_recovery when an RTOd TFO SYNACK is ACKed
selftests/bpf: Skip module_fentry_shadow test when bpf_testmod is not available
udplite: fix various data-races
udplite: remove UDPLITE_BIT
udp: annotate data-races around udp->encap_type
udp: lockless UDP_ENCAP_L2TPINUDP / UDP_GRO
udp: move udp->accept_udp_{l4|fraglist} to udp->udp_flags
udp: add missing WRITE_ONCE() around up->encap_rcv
udp: move udp->gro_enabled to udp->udp_flags
udp: move udp->no_check6_rx to udp->udp_flags
udp: move udp->no_check6_tx to udp->udp_flags
udp: introduce udp->udp_flags
wifi: cfg80211: fix kernel-doc for wiphy_delayed_work_flush()
bpf, x64: Fix tailcall infinite loop
selftests/bpf: Correct map_fd to data_fd in tailcalls
iavf: Fix promiscuous mode configuration flow messages
i40e: fix potential memory leaks in i40e_remove()
wifi: iwlwifi: don't use an uninitialized variable
wifi: iwlwifi: honor the enable_ini value
wifi: mac80211: fix # of MSDU in A-MSDU calculation
wifi: cfg80211: fix off-by-one in element defrag
wifi: mac80211: fix RCU usage warning in mesh fast-xmit
wifi: mac80211: move sched-scan stop work to wiphy work
wifi: mac80211: move offchannel works to wiphy work
wifi: mac80211: move scan work to wiphy work
wifi: mac80211: move radar detect work to wiphy work
wifi: cfg80211: add flush functions for wiphy work
wifi: ath12k: fix undefined behavior with __fls in dp
irqchip/sifive-plic: Fix syscore registration for multi-socket systems
genirq/matrix: Exclude managed interrupts in irq_matrix_allocated()
string: Adjust strtomem() logic to allow for smaller sources
PCI/MSI: Provide stubs for IMS functions
selftests/x86/lam: Zero out buffer for readlink()
perf: Optimize perf_cgroup_switch()
pstore/platform: Add check for kstrdup
x86/nmi: Fix out-of-order NMI nesting checks & false positive warning
drivers/clocksource/timer-ti-dm: Don't call clk_get_rate() in stop function
srcu: Fix callbacks acceleration mishandling
x86/apic: Fake primary thread mask for XEN/PV
cpu/SMT: Make SMT control more robust against enumeration failures
x86/boot: Fix incorrect startup_gdt_descr.size
x86/sev-es: Allow copy_from_kernel_nofault() in earlier boot
cgroup/cpuset: Fix load balance state in update_partition_sd_lb()
ACPI/NUMA: Apply SRAT proximity domain to entire CFMWS window
x86/numa: Introduce numa_fill_memblks()
futex: Don't include process MM in futex key on no-MMU
x86/srso: Fix unret validation dependencies
x86/srso: Fix vulnerability reporting for missing microcode
x86/srso: Print mitigation for retbleed IBPB case
x86/srso: Fix SBPB enablement for (possible) future fixed HW
writeback, cgroup: switch inodes with dirty timestamps to release dying cgwbs
vfs: fix readahead(2) on block devices
nfsd: Handle EOPENSTALE correctly in the filecache
sched: Fix stop_one_cpu_nowait() vs hotplug
objtool: Propagate early errors
sched/uclamp: Ignore (util == 0) optimization in feec() when p_util_max = 0
sched/uclamp: Set max_spare_cap_cpu even if max_spare_cap is 0
iov_iter, x86: Be consistent about the __user tag on copy_mc_to_user()
sched/fair: Fix cfs_rq_is_decayed() on !SMP
sched/topology: Fix sched_numa_find_nth_cpu() in non-NUMA case
sched/topology: Fix sched_numa_find_nth_cpu() in CPU-less case
numa: Generalize numa_map_to_online_node()
hwmon: (nct6775) Fix incorrect variable reuse in fan_div calculation