Changelog in Linux kernel 6.1.113

blk-integrity: use sysfs_emit

blk_iocost: fix more out of bound shifts

block, bfq: choose the last bfqq from merge chain in bfq_setup_cooperator()

block, bfq: don't break merge chain in bfq_split_bfqq()

block, bfq: fix possible UAF for bfqq->bic with merge chain

block, bfq: fix uaf for accessing waker_bfqq after splitting

block: fix potential invalid pointer dereference in blk_add_partition

block: print symbolic error name instead of error code

Bluetooth: btmrvl: Use IRQF_NO_AUTOEN flag in request_irq()

Bluetooth: btusb: Add Realtek RTL8852C support ID 0x0489:0xe122

Bluetooth: btusb: Fix not handling ZPL/short-transfer

Bluetooth: Fix usage of __hci_cmd_sync_status

Bluetooth: hci_core: Fix sending MGMT_EV_CONNECT_FAILED

Bluetooth: hci_event: Align BR/EDR JUST_WORKS paring with LE

Bluetooth: hci_sock: Fix not validating setsockopt user input

Bluetooth: hci_sync: Ignore errors from HCI_OP_REMOTE_NAME_REQ_CANCEL

Bluetooth: RFCOMM: FIX possible deadlock in rfcomm_sk_state_change

bnxt_en: Extend maximum length of version string by 1 byte

bonding: Fix unnecessary warnings and logs from bond_xdp_get_xmit_slave()

bootconfig: Fix the kerneldoc of _xbc_exit()

bpf, x64: Fix a jit convergence issue

bpf: Check percpu map value size first

bpf: correctly handle malformed BPF_CORE_TYPE_ID_LOCAL relos

bpf: Fix bpf_strtol and bpf_strtoul helpers for 32bit

bpf: Improve check_raw_mode_ok test for MEM_UNINIT-tagged types

bpf: lsm: Set bpf_lsm_blob_sizes.lbs_task to 0

bpf: Zero former ARG_PTR_TO_{LONG,INT} args in case of error

btrfs: fix a NULL pointer dereference when failed to start a new trasacntion

btrfs: send: fix invalid clone operation for file that got its size decreased

btrfs: wait for fixup workers before stopping cleaner kthread during umount

btrfs: zoned: fix missing RCU locking in error message when loading zone info

build-id: require program headers to be right after ELF header

bus: integrator-lm: fix OF node leak in probe()

bus: mhi: host: pci_generic: Fix the name for the Telit FE990A

cachefiles: fix dentry leak in cachefiles_open_file()

can: bcm: Clear bo->bcm_proc_read after remove_proc_entry().

can: j1939: use correct function name in comment

can: m_can: enable NAPI before enabling interrupts

can: m_can: m_can_close(): stop clocks after device has been shut down

can: m_can: Remove repeated check for is_peripheral

ceph: fix cap ref leak via netfs init_request

ceph: remove the incorrect Fw reference check when dirtying pages

clk: bcm: bcm53573: fix OF node leak in init

clk: imx: composite-7ulp: Check the PCC present bit

clk: imx: composite-8m: Enable gate clk with mcore_booted

clk: imx: composite-8m: Less function calls in __imx8m_clk_hw_composite() after error detection

clk: imx: fracn-gppll: fix fractional part of PLL getting lost

clk: imx: fracn-gppll: support integer pll

clk: imx: imx8mp: fix clock tree update of TF-A managed clocks

clk: imx: imx8qxp: Parent should be initialized earlier than the clock

clk: imx: imx8qxp: Register dc0_bypass0_clk before disp clk

clk: imx: Remove CLK_SET_PARENT_GATE for DRAM mux for i.MX7D

clk: qcom: clk-alpha-pll: Fix CAL_L_VAL override for LUCID EVO PLL

clk: qcom: clk-rpmh: Fix overflow in BCM vote

clk: qcom: dispcc-sm8250: use CLK_SET_RATE_PARENT for branch clocks

clk: qcom: dispcc-sm8250: use special function for Lucid 5LPE PLL

clk: qcom: gcc-sc8180x: Add GPLL9 support

clk: qcom: gcc-sc8180x: Fix the sdcc2 and sdcc4 clocks freq table

clk: qcom: gcc-sm8150: De-register gcc_cpuss_ahb_clk_src

clk: qcom: gcc-sm8250: Do not turn off PCIe GDSCs during gdsc_disable()

clk: qcom: gcc-sm8450: Do not turn off PCIe GDSCs during gdsc_disable()

clk: rockchip: fix error for unknown clocks

clk: rockchip: Set parent rate for DCLK_VOP clock on RK3228

clk: samsung: exynos7885: do not define number of clocks in bindings

clk: samsung: exynos7885: Update CLKS_NR_FSYS after bindings fix

clk: ti: dra7-atl: Fix leak of of_nodes

clocksource/drivers/qcom: Add missing iounmap() on errors in msm_dt_timer_init()

close_range(): fix the logics in descriptor table trimming

comedi: ni_routing: tools: Check when the file could not be opened

coresight: tmc: sg: Do not leak sg_table

cpufreq: intel_pstate: Make hwp_notify_lock a raw spinlock

cpufreq: ti-cpufreq: Introduce quirks to handle syscon fails appropriately

crypto: ccp - Properly unregister /dev/sev on sev PLATFORM_STATUS failure

crypto: hisilicon/hpre - enable sva error interrupt event

crypto: hisilicon/hpre - mask cluster timeout error

crypto: hisilicon/qm - fix coding style issues

crypto: hisilicon/qm - inject error before stopping queue

crypto: hisilicon/qm - reset device before enabling it

crypto: simd - Do not call crypto_alloc_tfm during registration

crypto: xor - fix template benchmarking

cxl/pci: Break out range register decoding from cxl_hdm_decode_init()

cxl/pci: Fix to record only non-zero ranges

debugobjects: Fix conditions in fill_pool()

delayacct: improve the average delay precision of getdelay tool to microsecond

device-dax: correct pgoff align in dax_set_mapping()

docs/zh_CN: Update the translation of delay-accounting to 6.1-rc8

drbd: Add NULL check for net_conf to prevent dereference in state validation

drbd: Fix atomicity violation in drbd_uuid_set_bm()

driver core: bus: Return -EIO instead of 0 when show/store invalid bus attribute

drivers/perf: Fix ali_drw_pmu driver interrupt status clearing

drivers/perf: hisi_pcie: Record hardware counts correctly

drivers: media: dvb-frontends/rtl2830: fix an out-of-bounds write error

drivers: media: dvb-frontends/rtl2832: fix an out-of-bounds write error

Linux: drivers:drm:exynos_drm_gsc:Fix wrong assignment in gsc_bind()

drm/amd/amdgpu: Properly tune the size of struct

drm/amd/display: Add null check for 'afb' in amdgpu_dm_plane_handle_cursor_update (v2)

drm/amd/display: Add null check for set_output_gamma in dcn30_set_output_transfer_func

drm/amd/display: Add null check for top_pipe_to_program in commit_planes_for_stream

drm/amd/display: Allow backlight to go below `AMDGPU_DM_DEFAULT_MIN_BACKLIGHT`

drm/amd/display: Check null pointer before dereferencing se

drm/amd/display: Check null pointers before using dc->clk_mgr

drm/amd/display: Check stream before comparing them

drm/amd/display: Fix index out of bounds in DCN30 color transformation

drm/amd/display: Fix index out of bounds in DCN30 degamma hardware format translation

drm/amd/display: Fix index out of bounds in degamma hardware format translation

drm/amd/display: Fix Synaptics Cascaded Panamera DSC Determination

drm/amd/display: Fix system hang while resume with TBT monitor

drm/amd/display: Handle null 'stream_status' in 'planes_changed_for_existing_stream'

drm/amd/display: Initialize get_bytes_per_element's default to 1

drm/amd/display: Round calculated vtotal

drm/amd/display: Skip Recompute DSC Params if no Stream on Link

drm/amd/display: Validate backlight caps are sane

drm/amd/pm: ensure the fw_info is not null before using it

drm/amdgpu: add raven1 gfxoff quirk

drm/amdgpu: disallow multiple BO_HANDLES chunks in one submit

drm/amdgpu: enable gfxoff quirk on HP 705G4

drm/amdgpu: fix unchecked return value warning for amdgpu_gfx

drm/amdgpu: properly handle vbios fake edid sizing

drm/amdgpu: Replace one-element array with flexible-array member

drm/amdkfd: Fix resource leak in criu restore queue

drm/bridge: lontium-lt8912b: Validate mode in drm_bridge_funcs::mode_valid()

drm/crtc: fix uninitialized variable use even harder

drm/i915/gem: fix bitwise and logical AND mixup

drm/mediatek: Fix missing configuration flags in mtk_crtc_ddp_config()

drm/mediatek: Use spin_lock_irqsave() for CRTC event lock

drm/msm/a5xx: disable preemption in submits by default

drm/msm/a5xx: fix races in preemption evaluation stage

drm/msm/a5xx: properly clear preemption records on resume

drm/msm/a5xx: workaround early ring-buffer emptiness check

drm/msm: fix %s null argument error

drm/msm: Fix incorrect file name output in adreno_request_fw()

drm/printer: Allow NULL data in devcoredump printer

drm/radeon/evergreen_cs: fix int overflow errors in cs track offsets

drm/radeon/r100: Handle unknown family in r100_cp_init_microcode()

drm/radeon: properly handle vbios fake edid sizing

drm/radeon: Replace one-element array with flexible-array member

drm/rockchip: dw_hdmi: Fix reading EDID when using a forced mode

drm/rockchip: vop: Allow 4096px width scaling

drm/rockchip: vop: clear DMA stop bit on RK3066

drm/rockchip: vop: enable VOP_FEATURE_INTERNAL_RGB on RK3066

drm/rockchip: vop: limit maximum resolution to hardware capabilities

drm/sched: Add locking to drm_sched_entity_modify_sched

drm/stm: Avoid use-after-free issues with crtc and plane

drm/stm: Fix an error handling path in stm_drm_platform_probe()

drm/stm: ltdc: check memory returned by devm_kzalloc()

drm/stm: ltdc: reset plane transparency after plane disable

drm/v3d: Stop the active perfmon before being destroyed

drm/vc4: hdmi: Handle error case of pm_runtime_resume_and_get

drm/vc4: Stop the active perfmon before being destroyed

drm/vmwgfx: Prevent unmapping active read buffers

drm: Consistently use struct drm_mode_rect for FB_DAMAGE_CLIPS

drm: omapdrm: Add missing check for alloc_ordered_workqueue

dt-bindings: clock: exynos7885: Fix duplicated binding

dt-bindings: clock: qcom: Add GPLL9 support on gcc-sc8180x

dt-bindings: clock: qcom: Add missing UFS QREF clocks

dt-bindings: iio: asahi-kasei,ak8975: drop incorrect AK09116 compatible

EDAC/igen6: Fix conversion of system address to physical memory address

EDAC/synopsys: Fix ECC status and IRQ control race condition

EDAC/synopsys: Fix error injection on Zynq UltraScale+

efistub/tpm: Use ACPI reclaim memory for event log to avoid corruption

ep93xx: clock: Fix off by one in ep93xx_div_recalc_rate()

erofs: avoid hardcoded blocksize for subpage block support

erofs: fix incorrect symlink detection in fast symlink

erofs: get rid of erofs_inode_datablocks()

erofs: get rid of z_erofs_do_map_blocks() forward declaration

erofs: set block size to the on-disk block size

exfat: fix memory leak in exfat_load_bitmap()

ext4: aovid use-after-free in ext4_ext_insert_extent()

ext4: avoid buffer_head leak in ext4_mark_inode_used()

ext4: avoid negative min_clusters in find_group_orlov()

ext4: avoid OOB when system.data xattr changes underneath the filesystem

ext4: avoid potential buffer_head leak in __ext4_new_inode()

ext4: avoid use-after-free in ext4_ext_show_leaf()

ext4: clear EXT4_GROUP_INFO_WAS_TRIMMED_BIT even mount with discard

ext4: correct encrypted dentry name hash when not casefolded

ext4: dax: fix overflowing extents beyond inode size when partially writing

ext4: don't set SB_RDONLY after filesystem errors

ext4: drop ppath from ext4_ext_replay_update_ex() to avoid double-free

ext4: ext4_search_dir should return a proper error

ext4: fix double brelse() the buffer of the extents path

ext4: fix fast commit inode enqueueing during a full journal commit

ext4: fix i_data_sem unlock order in ext4_ind_migrate()

ext4: fix incorrect tid assumption in __jbd2_log_wait_for_space()

ext4: fix incorrect tid assumption in ext4_fc_mark_ineligible()

ext4: fix incorrect tid assumption in ext4_wait_for_tail_page_commit()

ext4: fix incorrect tid assumption in jbd2_journal_shrink_checkpoint_list()

ext4: fix slab-use-after-free in ext4_split_extent_at()

ext4: mark fc as ineligible using an handle in ext4_xattr_set()

ext4: nested locking for xattr inode

ext4: no need to continue when the number of entries is 1

ext4: propagate errors from ext4_find_extent() in ext4_insert_range()

ext4: return error on ext4_find_inline_entry

ext4: update orig_path in ext4_find_extent()

ext4: use handle to mark fc as ineligible in __track_dentry_update()

f2fs: atomic: fix to truncate pagecache before on-disk metadata truncation

f2fs: avoid potential int overflow in sanity_check_area_boundary()

f2fs: clean up w/ dotdot_name

f2fs: factor the read/write tracing logic into a helper

f2fs: fix several potential integer overflows in file offsets

f2fs: fix to avoid racing in between read and OPU dio write

f2fs: fix to check atomic_file in f2fs ioctl interfaces

f2fs: fix to update i_ctime in __f2fs_setxattr()

f2fs: fix to wait page writeback before setting gcing flag

f2fs: get rid of online repaire on corrupted directory

f2fs: prevent possible int overflow in dir_block_index()

f2fs: reduce expensive checkpoint trigger frequency

f2fs: remove unneeded check condition in __f2fs_setxattr()

f2fs: Require FMODE_WRITE for atomic write ioctls

fbcon: Fix a NULL pointer dereference issue in fbcon_putcs

fbdev: hpfb: Fix an error handling path in hpfb_dio_probe()

fbdev: pxafb: Fix possible use after free in pxafb_task()

fbdev: sisfb: Fix strbuf array overflow

firmware: arm_scmi: Fix double free in OPTEE transport

firmware: tegra: bpmp: Drop unused mbox_client_to_bpmp()

firmware_loader: Block path traversal

fs/namespace: fnic: Switch to use %ptTd

fs/ntfs3: Do not call file_modified if collapse range failed

fs/ntfs3: Fix sparse warning in ni_fiemap

fs/ntfs3: Refactor enum_rstbl to suppress static checker

fs: Create a generic is_dot_dotdot() utility

fs: Fix file_set_fowner LSM hook inconsistencies

fsdax,xfs: port unshare to fsdax

fsdax: dax_unshare_iter() should return a valid length

fsdax: unshare: zero destination if srcmap is HOLE or UNWRITTEN

gpio: aspeed: Add the flush write to ensure the write complete.

gpio: aspeed: Use devm_clk api to manage clock source

gpio: davinci: fix lazy disable

gso: fix udp gso fraglist segmentation after pull from frag_list

HID: amd_sfh: Switch to device-managed dmam_alloc_coherent()

hid: intel-ish-hid: Fix uninitialized variable 'rv' in ish_fw_xfer_direct_dma

HID: multitouch: Add support for lenovo Y9000P Touchpad

HID: multitouch: Add support for Thinkpad X12 Gen 2 Kbd Portfolio

HID: plantronics: Workaround for an unexcepted opposite volume key

HID: wacom: Do not warn about dropped packets for first packet

HID: wacom: Support sequence numbers smaller than 16-bit

hwmon: (adm9240) Add missing dependency on REGMAP_I2C

hwmon: (adt7470) Add missing dependency on REGMAP_I2C

hwmon: (max16065) Fix alarm attributes

hwmon: (max16065) Fix overflows seen when writing limits

hwmon: (max16065) Remove use of i2c_match_id()

hwmon: (ntc_thermistor) fix module autoloading

hwmon: (tmp513) Add missing dependency on REGMAP_I2C

hwrng: bcm2835 - Add missing clk_disable_unprepare in bcm2835_rng_init

hwrng: cctrng - Add missing clk_disable_unprepare in cctrng_resume

hwrng: mtk - Use devm_pm_runtime_enable

i2c: Add i2c_get_match_data()

i2c: aspeed: Update the stop sw state when the bus recovery occurs

i2c: core: Lock address during client device instantiation

i2c: create debugfs entry per adapter

i2c: i801: Use a different adapter-name for IDF adapters

i2c: isch: Add missed 'else'

i2c: qcom-geni: Use IRQF_NO_AUTOEN flag in request_irq()

i2c: stm32f7: Do not prepare/unprepare clock during runtime suspend/resume

i2c: xiic: Fix pm_runtime_set_suspended() with runtime pm enabled

i2c: xiic: improve error message when transfer fails to start

i2c: xiic: Try re-initialization on bus busy timeout

i2c: xiic: Use devm_clk_get_enabled()

i2c: xiic: Wait for TX empty to avoid missed TX NAKs

i40e: Fix macvlan leak by synchronizing access to mac_filter_hash

IB/core: Fix ib_cache_setup_one error flow cleanup

ice: Adjust over allocation of memory in ice_sched_add_root_node() and ice_sched_add_node()

ice: Fix netif_is_ice() in Safe Mode

ice: fix VLAN replay after reset

icmp: Add counters for rate limits

icmp: change the order of rate limits

ieee802154: Fix build error

igb: Do not bring the device up after non-fatal error

iio: adc: ad7606: fix oversampling gpio array

iio: adc: ad7606: fix standby gpio state to match the documentation

iio: chemical: bme680: Fix read/write ops to device by adding mutexes

iio: magnetometer: ak8975: Convert enum->pointer for data in the match tables

iio: magnetometer: ak8975: drop incorrect AK09116 compatible

iio: magnetometer: ak8975: Fix 'Unexpected device' error

iio: magnetometer: ak8975: Fix reading for ak099xx sensors

Input: adp5588-keys - fix check on return code

Input: adp5589-keys - fix adp5589_gpio_get_value()

Input: adp5589-keys - fix NULL pointer dereference

Input: i8042 - add another board name for TUXEDO Stellaris Gen5 AMD line

Input: i8042 - add TUXEDO Stellaris 15 Slim Gen6 AMD to i8042 quirk table

Input: i8042 - add TUXEDO Stellaris 16 Gen5 AMD to i8042 quirk table

Input: ilitek_ts_i2c - add report id message validation

Input: ilitek_ts_i2c - avoid wrong input subsystem sync

Input: synaptics-rmi4 - fix UAF of IRQ domain on driver removal

io_uring/io-wq: do not allow pinning outside of cpuset

io_uring/io-wq: inherit cpuset of cgroup in io worker

io_uring/net: harden multishot termination case for recv

io_uring/sqpoll: do not allow pinning outside of cpuset

io_uring/sqpoll: do not put cpumask on stack

io_uring/sqpoll: retain test for whether the CPU is valid

io_uring: check if we need to reschedule during overflow flush

iomap: constrain the file range passed to iomap_file_unshare

iomap: handle a post-direct I/O invalidate race in iomap_write_delalloc_release

iommu/amd: Do not set the D bit on AMD v2 table entries

iommu/arm-smmu-qcom: hide last LPASS SMMU context bank from linux

iommu/vt-d: Always reserve a domain ID for identity setup

iommu/vt-d: Fix potential lockup if qi_submit_sync called with 0 count

ipmi: docs: don't advertise deprecated sysfs entries

ipv4: Check !in_dev earlier for ioctl(SIOCSIFADDR).

ipv4: ip_gre: Fix drops of small packets in ipgre_xmit

ipv4: Mask upper DSCP bits and ECN bits in NETLINK_FIB_LOOKUP family

ipv6: avoid possible NULL deref in rt6_uncached_list_flush_dev()

jbd2: correctly compare tids with tid_geq function in jbd2_fc_begin_commit

jbd2: stop waiting for space when jbd2_cleanup_journal_tail() returns error

jfs: check if leafidx greater than num leaves per dmap tree

jfs: fix out-of-bounds in dbNextAG() and diAlloc()

jfs: Fix uaf in dbFreeBits

jfs: Fix uninit-value access of new_ea in ea_buffer

jfs: UBSAN: shift-out-of-bounds in dbFindBits

jump_label: Fix static_key_slow_dec() yet again

jump_label: Simplify and clarify static_key_fast_inc_cpus_locked()

kconfig: qconf: fix buffer overflow in debug links

KEYS: prevent NULL pointer dereference in find_asymmetric_key()

kselftest/arm64: Actually test SME vector length changes via sigreturn

kselftest/arm64: Don't pass headers to the compiler as source

kselftest/arm64: Fix enumeration of systems without 128 bit SME for SSVE+ZA

kselftest/arm64: signal: fix/refactor SVE vector length enumeration

kselftest/arm64: Verify simultaneous SSVE and ZA context generation

ksmbd: allow write with FILE_APPEND_DATA

ksmbd: handle caseless file creation

ksmbd: make __dir_empty() compatible with POSIX

ktest.pl: Avoid false positives with grub2 skip regex

kthread: fix task state in kthread worker if being frozen

kthread: unpark only parked kthread

KVM: x86: Enforce x2APIC's must-be-zero reserved ICR bits

KVM: x86: Move x2APIC ICR helper above kvm_apic_write_nodecode()

lib/buildid: harden build ID parsing logic

lib/sbitmap: define swap_lock as raw_spinlock_t

lib/xarray: introduce a new helper xas_get_order

libsubcmd: Don't free the usage string

Linux: Linux 6.1.113

lockdep: fix deadlock issue between lockdep and rcu

LoongArch: Fix memleak in pci_acpi_scan_root()

loop: don't set QUEUE_FLAG_NOMERGES

m68k: Fix kernel_clone_args.flags in m68k_clone()

mailbox: bcm2835: Fix timeout during suspend mode

mailbox: rockchip: fix a typo in module autoloading

mctp: Handle error of rtnl_register_module().

media: i2c: ar0521: Use cansleep version of gpiod_set_value()

media: i2c: imx335: Enable regulator supplies

media: imx335: Fix reset-gpio handling

media: qcom: camss: Fix ordering of pm_runtime_enable

media: sun4i_csi: Implement link validate for sun4i_csi subdev

media: uapi/linux/cec.h: cec_msg_set_reply_to: zero flags

media: usbtv: Remove useless locks in usbtv_video_free()

media: venus: fix use after free bug in venus_remove due to race condition

media: videobuf2-core: clear memory related fields in __vb2_plane_dmabuf_put()

mm/damon/vaddr: protect vma traversal in __damon_va_thre_regions() with rcu read lock

mm/filemap: optimize filemap folio adding

mm/filemap: return early if failed to allocate memory for split

mm: krealloc: consider spare memory for __GFP_ZERO

mm: only enforce minimum stack gap size if it's sensible

mm: z3fold: deprecate CONFIG_Z3FOLD

module: Fix KCOV-ignored file name

mount: handle OOM on mnt_warn_timestamp_expiry

mptcp: fallback when MPTCP opts are dropped after 1st data

mptcp: handle consistently DSS corruption

mptcp: pm: do not remove closing subflows

mtd: powernv: Add check devm_kasprintf() returned value

mtd: rawnand: mtk: Factorize out the logic cleaning mtk chips

mtd: rawnand: mtk: Fix init error path

mtd: rawnand: mtk: Use for_each_child_of_node_scoped()

mtd: slram: insert break after errors in parsing the map

nbd: fix race between timeout and normal completion

net/mlx5: Added cond_resched() to crdump collection

net/mlx5: Always drain health in shutdown callback

net/mlx5: Fix error path in multi-packet WQE transmit

net/mlx5e: Fix NULL deref in mlx5e_tir_builder_alloc()

net/sched: accept TCA_STAB only for root qdisc

net/xen-netback: prevent UAF in xenvif_flush_hash()

net: add more sanity checks to qdisc_pkt_len_init()

net: atlantic: Avoid warning about potential string truncation

net: avoid potential underflow in qdisc_pkt_len_init() with UFO

net: dsa: b53: allow lower MTUs on BCM5325/5365

net: dsa: b53: fix jumbo frame mtu check

net: dsa: b53: fix jumbo frames on 10/100 ports

net: dsa: b53: fix max MTU for 1g switches

net: dsa: b53: fix max MTU for BCM5325/BCM5365

net: dsa: lan9303: ensure chip reset and wait for READY status

net: enetc: Use IRQF_NO_AUTOEN flag in request_irq()

net: ethernet: adi: adin1110: Fix some error handling path in adin1110_read_fifo()

net: ethernet: cortina: Drop TSO support

net: ethernet: cortina: Restore TSO support

net: ethernet: lantiq_etop: fix memory disclosure

net: explicitly clear the sk pointer, when pf->create fails

net: Fix an unsafe loop on the list

net: hisilicon: hip04: fix OF node leak in probe()

net: hisilicon: hns_dsaf_mac: fix OF node leak in hns_mac_get_info()

net: hisilicon: hns_mdio: fix OF node leak in probe()

net: ibm/emac: allocate dummy net_device dynamically

net: ibm: emac: mal: add dcr_unmap to _remove

net: ibm: emac: mal: fix wrong goto

net: ieee802154: mcr20a: Use IRQF_NO_AUTOEN flag in request_irq()

net: ipv6: rpl_iptunnel: Fix memory leak in rpl_input

net: ipv6: select DST_CACHE from IPV6_RPL_LWTUNNEL

net: mvpp2: Increase size of queue_name buffer

net: phy: bcm84881: Fix some error handling paths

net: phy: dp83869: fix memory corruption when enabling fiber

net: qrtr: Update packets cloning when broadcasting

net: sched: consistently use rcu_replace_pointer() in taprio_change()

net: seeq: Fix use after free vulnerability in ether3 Driver Due to Race Condition

net: sparx5: Fix invalid timestamps

net: stmmac: dwmac-loongson: Init ref and PTP clocks rate

net: stmmac: dwmac4: extend timeout for VLAN Tag register busy bit check

net: stmmac: Fix zero-division error when disabling tc cbs

net: stmmac: set PP_FLAG_DMA_SYNC_DEV only if XDP is enabled

net: tipc: avoid possible garbage value

net: wwan: qcom_bam_dmux: Fix missing pm_runtime_disable()

net: xilinx: axienet: Fix packet counting

net: xilinx: axienet: Schedule NAPI in two steps

netfilter: br_netfilter: fix panic with metadata_dst skb

netfilter: ctnetlink: compile ctnetlink_label_size with CONFIG_NF_CONNTRACK_EVENTS

netfilter: fib: check correct rtable in vrf setups

netfilter: nf_reject: Fix build warning when CONFIG_BRIDGE_NETFILTER=n

netfilter: nf_reject_ipv6: fix nf_reject_ip6_tcphdr_put()

netfilter: nf_tables: elements with timeout below CONFIG_HZ never expire

netfilter: nf_tables: Keep deleted flowtable hooks until after RCU

netfilter: nf_tables: prevent nf_skb_duplicated corruption

netfilter: nf_tables: reject element expiration with no timeout

netfilter: nf_tables: reject expiration higher than timeout

netfilter: nf_tables: remove annotation to access set timeout while holding lock

netfilter: uapi: NFTA_FLOWTABLE_HOOK is NLA_NESTED

netfilter: xtables: avoid NFPROTO_UNSPEC where needed

nfp: Use IRQF_NO_AUTOEN flag in request_irq()

nfs: fix memory leak in error path of nfs4_do_reclaim

nfsd: call cache_put if xdr_reserve_space returns NULL

nfsd: fix delegation_blocked() to block correctly for at least 30 seconds

NFSD: Fix NFSv4's PUTPUBFH operation

nfsd: fix refcount leak when file is unhashed after being found

nfsd: map the EBADMSG to nfserr_io to avoid warning

NFSD: Mark filecache "down" if init fails

nfsd: remove unneeded EEXIST error check in nfsd_do_file_acquire

nfsd: return -EINVAL when namelen is 0

NFSv4: Prevent NULL-pointer dereference in nfs42_complete_copies()

nilfs2: determine empty node blocks as corrupted

nilfs2: fix potential null-ptr-deref in nilfs_btree_insert()

nilfs2: fix potential oob read in nilfs_btree_check_delete()

nouveau/dmem: Fix vulnerability in migrate_to_ram upon copy error

ntb: Force physically contiguous allocation of rx ring buffers

ntb: intel: Fix the NULL vs IS_ERR() bug for debugfs_create_dir()

ntb: ntb_hw_switchtec: Fix use after free vulnerability in switchtec_ntb_remove due to race condition

ntb_perf: Fix printk format

nvdimm: Fix devs leaks in scan_labels()

nvme-multipath: system fails to create generic nvme device

nvme-pci: qdepth 1 quirk

ocfs2: cancel dqi_sync_work before freeing oinfo

ocfs2: fix null-ptr-deref when journal load failed.

ocfs2: fix possible null-ptr-deref in ocfs2_set_buffer_uptodate

ocfs2: fix the la space leak when unmounting an ocfs2 volume

ocfs2: fix uninit-value in ocfs2_get_block()

ocfs2: remove unreasonable unlock in ocfs2_read_blocks

ocfs2: reserve space for inline xattr before attaching reflink tree

of/irq: Refer to actual buffer size in of_irq_parse_one()

of/irq: Support #msi-cells=<0> in of_msi_get_domain

padata: Honor the caller's alignment in case of chunk_size 0

padata: use integer wrap around to prevent deadlock on seq_nr overflow

parisc: Fix 64-bit userspace syscall path

parisc: Fix itlb miss handler for 64-bit programs

parisc: Fix stack start for ADDR_NO_RANDOMIZE personality

PCI/PM: Drop pci_bridge_wait_for_secondary_bus() timeout parameter

PCI/PM: Increase wait time after resume

PCI/PM: Mark devices disconnected if upstream PCIe link is down on resume

PCI: Add ACS quirk for Qualcomm SA8775P

PCI: Add function 0 DMA alias quirk for Glenfly Arise chip

PCI: imx6: Fix missing call to phy_power_off() in error handling

PCI: keystone: Fix if-statement expression in ks_pcie_quirk()

PCI: kirin: Fix buffer overflow in kirin_pcie_parse_port()

PCI: Mark Creative Labs EMU20k2 INTx masking as broken

PCI: Wait for Link before restoring Downstream Buses

PCI: xilinx-nwl: Clean up clock on probe failure/removal

PCI: xilinx-nwl: Fix off-by-one in INTx IRQ handler

PCI: xilinx-nwl: Fix register misspelling

perf hist: Update hist symbol when updating maps

perf inject: Fix leader sampling inserting additional samples

perf lock: Don't pass an ERR_PTR() directly to perf_session__delete()

perf lock: Dynamically allocate lockhash_table

perf mem: Free the allocated sort string, fixing a leak

perf report: Fix segfault when 'sym' sort key is not used

perf sched timehist: Fix missing free of session in perf_sched__timehist()

perf sched timehist: Fixed timestamp error when unable to confirm event sched_in time

perf sched: Avoid large stack allocations

perf sched: Fix memory leak in perf_sched__map()

perf sched: Move curr_pid and cpu_last_switched initialization to perf_sched__{lat|map|replay}()

perf sched: Move curr_thread initialization to perf_sched__map()

perf sched: Move start_work_mutex and work_done_wait_mutex initialization to perf_sched__replay()

perf stat: Display iostat headers correctly

perf time-utils: Fix 32-bit nsec parsing

perf,x86: avoid missing caller address in stack traces captured in uprobe

perf/arm-cmn: Ensure dtm_idx is big enough

perf/arm-cmn: Fail DTC counter allocation correctly

perf/arm-cmn: Improve debugfs pretty-printing for large configs

perf/arm-cmn: Refactor node ID handling. Again.

perf/arm-cmn: Rework DTC counters (again)

perf/core: Fix small negative period being ignored

perf/x86/intel/pt: Fix sampling synchronization

pinctrl: mvebu: Fix devinit_dove_pinctrl_probe function

pinctrl: mvebu: Use devm_platform_get_and_ioremap_resource()

pinctrl: single: fix missing error code in pcs_probe()

platform/x86: ISST: Fix the KASAN report slab-out-of-bounds bug

platform/x86: touchscreen_dmi: add nanote-next quirk

pmdomain: core: Harden inter-column space in debug summary

power: reset: brcmstb: Do not go into infinite loop if reset fails

power: supply: axp20x_battery: Remove design from min and max voltage

power: supply: hwmon: Fix missing temp1_max_alarm attribute

power: supply: max17042_battery: Fix SOC threshold calc w/ no current sense

powerpc/64: Add support to build with prefixed instructions

powerpc/64: Option to build big-endian with ELFv2 ABI

powerpc/8xx: Fix initial memory mapping

powerpc/8xx: Fix kernel vs user address comparison

powerpc/atomic: Use YZ constraints for DS-form instructions

powerpc/pseries: Use correct data types from pseries_hp_errorlog struct

powerpc/vdso: Fix VDSO data access when running in a non-root time namespace

powerpc: Allow CONFIG_PPC64_BIG_ENDIAN_ELF_ABI_V2 with ld.lld 15+

ppp: do not assume bh is held in ppp_channel_bridge_input()

ppp: fix ppp_async_encode() illegal access

pps: add an error check in parport_attach

pps: remove usage of the deprecated ida_simple_xx() API

proc: add config & param to block forcing mem writes

r8169: add tally counter fields added with RTL8125

r8169: disable ALDPS per default for RTL8125

r8169: Fix spelling mistake: "tx_underun" -> "tx_underrun"

rcu/nocb: Fix RT throttling hrtimer armed from offline CPU

rcuscale: Provide clear error when async specified without primitives

RDMA/cxgb4: Added NULL check for lookup_atid

RDMA/erdma: Return QP state in erdma_query_qp

RDMA/hns: Don't modify rq next block addr in HIP09 QPC

RDMA/hns: Fix 1bit-ECC recovery address in non-4K OS

RDMA/hns: Fix spin_unlock_irqrestore() called with IRQs enabled

RDMA/hns: Fix the overflow risk of hem_list_calc_ba_range()

RDMA/hns: Fix Use-After-Free of rsv_qp on HIP08

RDMA/hns: Fix VF triggering PF reset in abnormal interrupt handler

RDMA/hns: Optimize hem allocation performance

RDMA/irdma: fix error message in irdma_modify_qp_roce()

RDMA/iwcm: Fix WARNING:at_kernel/workqueue.c:#check_flush_dependency

RDMA/mad: Improve handling of timed out WRs of mad agent

RDMA/mlx5: Enforce umem boundaries for explicit ODP page faults

RDMA/rtrs-clt: Reset cid to con_num - 1 to stay in bounds

RDMA/rtrs-srv: Avoid null pointer deref during path establishment

RDMA/rtrs: Reset hb_missed_cnt after receiving other traffic from peer

regulator: Return actual error in of_regulator_bulk_get_all()

remoteproc: imx_rproc: Correct ddr alias for i.MX8M

remoteproc: imx_rproc: Initialize workqueue earlier

remoteproc: imx_rproc: Use imx specific hook for find_loaded_rsc_table

remoteproc: k3-r5: Acquire mailbox handle during probe routine

remoteproc: k3-r5: Delay notification of wakeup event

remoteproc: k3-r5: Fix error handling when power-up failed

Linux: Remove *.orig pattern from .gitignore

reset: berlin: fix OF node leak in probe() error path

reset: k210: fix OF node leak in probe() error path

resource: fix region_intersects() vs add_memory_driver_managed()

Revert "ALSA: hda: Conditionally use snooping for AMD HDMI"

Revert "arm64: dts: qcom: sm8250: switch UFS QMP PHY to new style of bindings"

Revert "dm: requeue IO if mapping table not yet available"

Revert "iommu/vt-d: Retrieve IOMMU perfmon capability information"

Revert "media: tuners: fix error return code of hybrid_tuner_request_state()"

Revert "net: ibm/emac: allocate dummy net_device dynamically"

Revert "net: stmmac: set PP_FLAG_DMA_SYNC_DEV only if XDP is enabled"

Revert "usb: yurex: Replace snprintf() with the safer scnprintf() variant"

RISC-V: Don't have MAX_PHYSMEM_BITS exceed phys_addr_t

RISC-V: KVM: Fix sbiret init before forwarding to userspace

riscv/kexec_file: Fix relocation type R_RISCV_ADD16 and R_RISCV_SUB16 unknown

riscv: define ILLEGAL_POINTER_VALUE for 64bit

riscv: Fix fp alignment bug in perf_callchain_user()

rtc: at91sam9: fix OF node leak in probe() error path

rtnetlink: Add bulk registration helpers for rtnetlink message handlers.

rust: macros: provide correct provenance when constructing THIS_MODULE

s390/cpum_sf: Remove WARN_ON_ONCE statements

s390/facility: Disable compile time optimization for decompressor code

s390/mm: Add cond_resched() to cmm_alloc/free_pages()

sched: psi: fix bogus pressure spikes from aggregation race

scsi: aacraid: Rearrange order of struct aac_srb_unit

scsi: elx: libefc: Fix potential use after free in efc_nport_vport_del()

scsi: lpfc: Add ELS_RSP cmd to the list of WQEs to flush in lpfc_els_flush_cmd()

scsi: lpfc: Ensure DA_ID handling completion before deleting an NPIV instance

scsi: lpfc: Update PRLO handling in direct attached topology

scsi: mac_scsi: Disallow bus errors during PDMA send

scsi: mac_scsi: Refactor polling loop

scsi: mac_scsi: Revise printk(KERN_DEBUG ...) messages

scsi: NCR5380: Check for phase match during PDMA fixup

scsi: NCR5380: Initialize buffer for MSG IN and STATUS transfers

scsi: pm8001: Do not overwrite PCI queue mapping

scsi: sd: Fix off-by-one error in sd_read_block_characteristics()

scsi: smartpqi: correct stream detection

scsi: smartpqi: revert propagate-the-multipath-failure-to-SML-quickly

scsi: wd33c93: Don't use stale scsi_pointer value

sctp: ensure sk_state is set to CLOSED if hashing fails in sctp_listen_start

sctp: set sk_state back to CLOSED if autobind fails in sctp_listen_start

secretmem: disable memfd_secret() if arch cannot set direct map

selftests/bpf: Add a cgroup prog bpf_get_ns_current_pid_tgid() test

selftests/bpf: Add selftest deny_namespace to s390x deny list

selftests/bpf: Add tests for _opts variants of bpf_*_get_fd_by_id()

selftests/bpf: Fix C++ compile error from missing _Bool type

selftests/bpf: Fix compile error from rlim_t in sk_storage_map.c

selftests/bpf: Fix compile if backtrace support missing in libc

selftests/bpf: Fix compiling core_reloc.c with musl-libc

selftests/bpf: Fix compiling flow_dissector.c with musl-libc

selftests/bpf: Fix compiling kfree_skb.c with musl-libc

selftests/bpf: Fix compiling tcp_rtt.c with musl-libc

selftests/bpf: Fix error compiling bpf_iter_setsockopt.c with musl libc

selftests/bpf: Fix error compiling test_lru_map.c

selftests/bpf: Fix errors compiling cg_storage_multi.h with musl libc

selftests/bpf: Fix include of

selftests/bpf: Fix missing ARRAY_SIZE() definition in bench.c

selftests/bpf: Fix missing BUILD_BUG_ON() declaration

selftests/bpf: Fix missing UINT_MAX definitions in benchmarks

selftests/bpf: Move test_progs helpers to testing_helpers object

selftests/bpf: Refactor out some functions in ns_current_pid_tgid test

selftests/bpf: Replace CHECK with ASSERT_* in ns_current_pid_tgid test

selftests/bpf: Replace extract_build_id with read_build_id

selftests/bpf: Use pid_t consistently in test_progs.c

selftests/bpf: Workaround strict bpf_lsm return value check.

selftests/mm: fix charge_reserved_hugetlb.sh test

selftests/nolibc: avoid passing NULL to printf("%s")

selftests: breakpoints: use remaining time to check if suspend succeed

selftests: net: no_forwarding: fix VID for $swp2 in one_bridge_two_pvids() test

selftests: net: Remove executable bits from library scripts

selftests: netfilter: Fix nft_audit.sh for newer nft binaries

selftests: vDSO: fix ELF hash table entry size for s390x

selftests: vDSO: fix vDSO name for powerpc

selftests: vDSO: fix vDSO symbols lookup for powerpc64

selftests: vDSO: fix vdso_config for powerpc

selftests: vDSO: fix vdso_config for s390

selinux,smack: don't bypass permissions check in inode_setsecctx hook

slip: make slhc_remember() more robust against malicious packets

smackfs: Use rcu_assign_pointer() to ensure safe assignment in smk_set_cipso

smb: client: use actual path when queryfs

soc: versatile: integrator: fix OF node leak in probe() error path

soc: versatile: realview: fix memory leak during device remove

soc: versatile: realview: fix soc_dev leak during device remove

sock_map: Add a cond_resched() in sock_hash_free()

spi: atmel-quadspi: Undo runtime PM changes at driver exit time

spi: bcm63xx: Fix missing pm_runtime_disable()

spi: bcm63xx: Fix module autoloading

spi: ppc4xx: Avoid returning 0 when failed to parse and map IRQ

spi: ppc4xx: handle irq_of_parse_and_map() errors

spi: s3c64xx: fix timeout counters in flush_fifo

spi: spi-fsl-lpspi: Undo runtime PM changes at driver exit time

spi: spi-imx: Fix pm_runtime_set_suspended() with runtime pm enabled

staging: vme_user: added bound check to geoid

static_call: Handle module init failure correctly in static_call_del_module()

static_call: Replace pointless WARN_ON() in static_call_module_notify()

SUNRPC: Fix integer overflow in decode_rc_list()

tcp: avoid reusing FIN_WAIT2 when trying to find port in connect() process

tcp: check skb is non-NULL in tcp_rto_delta_us()

tcp: fix tcp_enter_recovery() to zero retrans_stamp when it's safe

tcp: fix to allow timestamp undo if no retransmits were sent

thermal: int340x: processor_thermal: Set feature mask before proc_thermal_add

thermal: intel: int340x: processor: Fix warning during module unload

tipc: guard against string buffer overrun

tomoyo: fallback to realpath if symlink's pathname does not exist

tools/iio: Add memory allocation failure check for trigger_name

tools/x86/kcpuid: Protect against faulty "max subleaf" values

tpm: Clean up TPM space after command failure

tracing/hwlat: Fix a race during cpuhp processing

tracing/timerlat: Fix a race during cpuhp processing

tracing: Have saved_cmdlines arrays all in one allocation

tracing: Remove precision vsnprintf() check from print event

tty: rp2: Fix reset with non forgiving PCIe host bridges

unicode: Don't special case ignorable code points

uprobes: fix kernel info leak via "[uprobes]" vma

USB: appledisplay: close race between probe and completion handler

usb: cdnsp: Fix incorrect usb_request status

usb: chipidea: udc: enable suspend interrupt after usb reset

USB: class: CDC-ACM: fix race between get_serial and set_serial

usb: dwc2: Adjust the timing of USB Driver Interrupt Registration in the Crashkernel Scenario

usb: dwc2: drd: fix clock gating on USB role switch

usb: dwc3: core: Stop processing of pending events if controller is halted

usb: gadget: core: force synchronous registration

USB: misc: cypress_cy7c63: check for short transfer

USB: misc: yurex: fix race between read and write

usb: storage: ignore bogus device raised by JieLi BR21 USB sound chip

usb: xhci: fix loss of data on Cadence xHC

usb: xhci: Fix problem with xhci resume from suspend

usb: yurex: Fix inconsistent locking bug in yurex_read()

usb: yurex: Replace snprintf() with the safer scnprintf() variant

usbnet: fix cyclical race on disconnect with work queue

vdpa: Add eventfd for the vdpa callback

vfio/pci: fix potential memory leak in vfio_intx_enable()

vfs: fix race between evice_inodes() and find_inode()&iput()

vhost/scsi: null-ptr-dereference in vhost_scsi_get_req()

vhost_vdpa: assign irq bypass producer token correctly

virtio_console: fix misc probe bugs

virtio_pmem: Check device status before requesting flush

vxlan: Handle error of rtnl_register_module().

watchdog: imx_sc_wdt: Don't disable WDT in suspend

wifi: ath11k: fix array out-of-bound access in SoC stats

wifi: ath9k: fix parameter check in ath9k_init_debug()

wifi: ath9k: fix possible integer overflow in ath9k_get_et_stats()

wifi: ath9k: Remove error checks when creating debugfs entries

wifi: ath9k_htc: Use __skb_set_length() for resetting urb before resubmit

wifi: cfg80211: fix two more possible UBSAN-detected off-by-one errors

wifi: cfg80211: fix UBSAN noise in cfg80211_wext_siwscan()

wifi: cfg80211: Set correct chandef when starting CAC

wifi: iwlwifi: mvm: Fix a race in scan abort flow

wifi: iwlwifi: mvm: increase the time between ranging measurements

wifi: mac80211: Avoid address calculations via out of bounds array indexing

wifi: mac80211: don't use rate mask for offchannel TX either

wifi: mac80211: fix RCU list iterations

wifi: mac80211: use two-phase skb reclamation in ieee80211_do_stop()

wifi: mt76: do not run mt76_unregister_device() on unregistered hw

wifi: mt76: mt7615: check devm_kasprintf() returned value

wifi: mt76: mt7915: disable tx worker during tx BA session enable/disable

wifi: mt76: mt7915: fix rx filter setting for bfee functionality

wifi: mt76: mt7915: hold dev->mt76.mutex while disabling tx worker

wifi: mwifiex: Fix memcpy() field-spanning write warning in mwifiex_cmd_802_11_scan_ext()

wifi: rtw88: 8822c: Fix reported RX band width

wifi: rtw88: always wait for both firmware loading attempts

wifi: rtw88: remove CPT execution branch never used

wifi: rtw88: select WANT_DEV_COREDUMP

wifi: rtw89: correct base HT rate mask for firmware

wifi: wilc1000: fix potential RCU dereference issue in wilc_parse_join_bss_param

x86/entry: Remove unwanted instrumentation in common_interrupt()

x86/idtentry: Incorporate definitions/declarations of the FRED entries

x86/ioapic: Handle allocation failures gracefully

x86/kexec: Add EFI config table identity mapping for kexec kernel

x86/sgx: Fix deadlock in SGX NUMA node search

x86/syscall: Avoid memcpy() for ia32 syscall_get_arguments()

x86/tdx: Fix "in-kernel MMIO" check

xen/swiotlb: add alignment check for dma buffers

xen/swiotlb: fix allocated size

xen: use correct end address of kernel for conflict checking

xhci: Add a quirk for writing ERST in high-low order

xhci: fix event ring segment table related masks and variables in header

xhci: Preserve RsvdP bits in ERSTBA register correctly

xhci: Refactor interrupter code for initial multi interrupter support.

xhci: remove xhci_test_trb_in_td_math early development check

xhci: Set quirky xHC PCI hosts to D3 _after_ stopping and freeing them.

xz: cleanup CRC32 edits from 2018