Merge tag 'v6.18.12' into 6.18.12-lts

This is the 6.18.12 stable release

* tag 'v6.18.12':
  Linux 6.18.12
  Revert "driver core: enforce device_lock for driver_match_device()"
  Linux 6.18.11
  gpio: omap: do not register driver in probe()
  wifi: rtl8xxxu: fix slab-out-of-bounds in rtl8xxxu_sta_add
  PCI: endpoint: Avoid creating sub-groups asynchronously
  drm/exynos: vidi: use ctx->lock to protect struct vidi_context member variables related to memory alloc/free
  xfs: fix UAF in xchk_btree_check_block_owner
  erofs: fix UAF issue for file-backed mounts w/ directio option
  bus: fsl-mc: fix use-after-free in driver_override_show()
  scsi: qla2xxx: Query FW again before proceeding with login
  scsi: qla2xxx: Free sp in error path to fix system crash
  scsi: qla2xxx: Delay module unload while fabric scan in progress
  scsi: qla2xxx: Allow recovery for tape devices
  scsi: qla2xxx: Validate sp before freeing associated memory
  wifi: rtw88: Fix alignment fault in rtw_core_enable_beacon()
  hfs: ensure sb->s_fs_info is always cleaned up
  nilfs2: Fix potential block overflow that cause system hang
  crypto: virtio - Remove duplicated virtqueue_kick in virtio_crypto_skcipher_crypt_req
  crypto: virtio - Add spinlock protection with virtqueue notification
  crypto: omap - Allocate OMAP_CRYPTO_FORCE_COPY scatterlists correctly
  crypto: octeontx - Fix length check to avoid truncation in ucode_load_store
  crypto: iaa - Fix out-of-bounds index in find_empty_iaa_compression_mode
  ALSA: hda/conexant: Add quirk for HP ZBook Studio G4
  Bluetooth: btusb: Add USB ID 7392:e611 for Edimax EW-7611UXB
  driver core: enforce device_lock for driver_match_device()
  smb: client: let send_done handle a completion without IB_SEND_SIGNALED
  smb: client: let smbd_post_send_negotiate_req() use smbd_post_send()
  smb: client: fix last send credit problem causing disconnects
  smb: client: make use of smbdirect_socket.send_io.bcredits
  smb: client: use smbdirect_send_batch processing
  smb: client: introduce and use smbd_{alloc, free}_send_io()
  smb: client: split out smbd_ib_post_send()
  smb: client: port and use the wait_for_credits logic used by server
  smb: client: remove pointless sc->send_io.pending handling in smbd_post_send_iter()
  smb: client: remove pointless sc->recv_io.credits.count rollback
  smb: client: let smbd_post_send() make use of request->wr
  smb: client: let recv_done() queue a refill when the peer is low on credits
  smb: client: make use of smbdirect_socket.recv_io.credits.available
  smb: server: let send_done handle a completion without IB_SEND_SIGNALED
  smb: server: fix last send credit problem causing disconnects
  smb: server: make use of smbdirect_socket.send_io.bcredits
  smb: server: let recv_done() queue a refill when the peer is low on credits
  smb: server: make use of smbdirect_socket.recv_io.credits.available
  smb: smbdirect: introduce smbdirect_socket.send_io.bcredits.*
  smb: smbdirect: introduce smbdirect_socket.recv_io.credits.available
  smb: server: fix leak of active_num_conn in ksmbd_tcp_new_connection()
  ksmbd: add chann_lock to protect ksmbd_chann_list xarray
  ksmbd: fix infinite loop caused by next_smb2_rcv_hdr_off reset in error paths
  smb: client: split cached_fid bitfields to avoid shared-byte RMW races
  io_uring: allow io-wq workers to exit when unused
  io_uring/io-wq: add exit-on-idle state
  Linux 6.18.10
  riscv: Add intermediate cast to 'unsigned long' in __get_user_asm
  ALSA: usb-audio: Use the right limit for PCM OOB check
  ALSA: hda/realtek: Really fix headset mic for TongFang X6AR55xU.
  spi: tegra114: Preserve SPI mode bits in def_command1_reg
  spi: tegra: Fix a memory leak in tegra_slink_probe()
  spi: tegra210-quad: Protect curr_xfer check in IRQ handler
  spi: tegra210-quad: Protect curr_xfer clearing in tegra_qspi_non_combined_seq_xfer
  spi: tegra210-quad: Protect curr_xfer in tegra_qspi_combined_seq_xfer
  spi: tegra210-quad: Protect curr_xfer assignment in tegra_qspi_setup_transfer_one
  spi: tegra210-quad: Move curr_xfer read inside spinlock
  spi: tegra210-quad: Return IRQ_HANDLED when timeout already processed transfer
  regulator: spacemit-p1: Fix n_voltages for BUCK and LDO regulators
  i2c: imx: preserve error state in block data length handler
  gpio: loongson-64bit: Fix incorrect NULL check after devm_kcalloc()
  ASoC: amd: fix memory leak in acp3x pdm dma ops
  ALSA: usb-audio: fix broken logic in snd_audigy2nx_led_update()
  firmware: cs_dsp: rate-limit log messages in KUnit builds
  firmware: cs_dsp: Factor out common debugfs string read
  ipv6: Fix ECMP sibling count mismatch when clearing RTF_ADDRCONF
  nvme-pci: handle changing device dma map requirements
  drm/xe/guc: Fix CFI violation in debugfs access.
  netfilter: nf_tables: fix inverted genmask check in nft_map_catchall_activate()
  hwmon: (occ) Mark occ_init_attribute() as __printf
  drm/xe/pm: Disable D3Cold for BMG only on specific platforms
  drm/xe/query: Fix topology query pointer advance
  drm/mgag200: fix mgag200_bmc_stop_scanout()
  net: gro: fix outer network offset
  net: add proper RCU protection to /proc/net/ptype
  net: ethernet: adi: adin1110: Check return value of devm_gpiod_get_optional() in adin1110_check_spi()
  drm/amd/display: fix wrong color value mapping on MCM shaper LUT
  wifi: iwlwifi: mvm: pause TCM on fast resume
  wifi: iwlwifi: mld: cancel mlo_scan_start_wk
  net: enetc: Convert 16-bit register reads to 32-bit for ENETC v4
  net: enetc: Convert 16-bit register writes to 32-bit for ENETC v4
  net: enetc: Remove CBDR cacheability AXI settings for ENETC v4
  net: enetc: Remove SI/BDR cacheability AXI settings for ENETC v4
  tipc: use kfree_sensitive() for session key material
  net: rss: fix reporting RXH_XFRM_NO_CHANGE as input_xfrm for contexts
  linkwatch: use __dev_put() in callers to prevent UAF
  io_uring/zcrx: fix page array leak
  net: don't touch dev->stats in BPF redirect paths
  hwmon: (acpi_power_meter) Fix deadlocks related to acpi_power_meter_notify()
  net: usb: r8152: fix resume reset deadlock
  macvlan: fix error recovery in macvlan_common_newlink()
  net: sfp: Fix quirk for Ubiquiti U-Fiber Instant SFP module
  i40e: drop udp_tunnel_get_rx_info() call from i40e_open()
  ice: drop udp_tunnel_get_rx_info() call from ndo_open()
  ice: Fix PTP NULL pointer dereference during VSI rebuild
  ice: PTP: fix missing timestamps on E825 hardware
  ice: fix missing TX timestamps interrupts on E825 devices
  dpaa2-switch: add bounds check for if_id in IRQ handler
  net: liquidio: Fix off-by-one error in VF setup_nic_devices() cleanup
  net: liquidio: Fix off-by-one error in PF setup_nic_devices() cleanup
  net: liquidio: Initialize netdev pointer before queue setup
  dpaa2-switch: prevent ZERO_SIZE_PTR dereference when num_ifs is zero
  net/sched: cls_u32: use skb_header_pointer_careful()
  net: add skb_header_pointer_careful() helper
  hwmon: (dell-smm) Add Dell G15 5510 to fan control whitelist
  smb/client: fix memory leak in smb2_open_file()
  platform/x86/intel/tpmi/plr: Make the file domain<n>/status writeable
  platform/x86: hp-bioscfg: Skip empty attribute names
  platform/x86: intel_telemetry: Fix PSS event register mask
  platform/x86: toshiba_haps: Fix memory leaks in add/remove routines
  Revert "drm/amd/display: pause the workload setting in dm"
  tracing: Avoid possible signed 64-bit truncation
  ALSA: hda/realtek: ALC269 fixup for Lenovo Yoga Book 9i 13IRU8 audio
  btrfs: reject new transactions if the fs is fully read-only
  wifi: mac80211: don't increment crypto_tx_tailroom_needed_cnt twice
  btrfs: sync read disk super and set block size
  wifi: mac80211: correctly check if CSA is active
  btrfs: fix Wmaybe-uninitialized warning in replay_one_buffer()
  scsi: target: iscsi: Fix use-after-free in iscsit_dec_conn_usage_count()
  ALSA: hda/realtek: Fix headset mic for TongFang X6AR55xU
  io_uring/rw: free potentially allocated iovec on cache put failure
  riscv: Use 64-bit variable for output in __get_user_asm
  scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count()
  wifi: cfg80211: Fix bitrate calculation overflow for HE rates
  spi: intel-pci: Add support for Nova Lake SPI serial flash
  ALSA: usb-audio: Add delay quirk for MOONDROP Moonriver2 Ti
  regmap: maple: free entry on mas_store_gfp() failure
  spi: hisi-kunpeng: Fixed the wrong debugfs node name in hisi_spi debugfs initialization
  ALSA: hda/tas2781: Add newly-released HP laptop
  ASoC: tlv320adcx140: Propagate error codes during probe
  ASoC: amd: yc: Fix microphone on ASUS M6500RE
  nvmet-tcp: fixup hang in nvmet_tcp_listen_data_ready()
  ALSA: usb-audio: Prevent excessive number of frames
  nvme-fc: release admin tagset if init fails
  ASoC: simple-card-utils: Check device node before overwrite direction
  ASoC: davinci-evm: Fix reference leak in davinci_evm_probe
  dmaengine: mmp_pdma: Fix race condition in mmp_pdma_residue()
  ASoC: Intel: sof_sdw: Add new quirks for PTL on Dell with CS42L43
  wifi: mac80211: collect station statistics earlier when disconnect
  HID: Elecom: Add support for ELECOM M-XT3DRBK (018C)
  HID: logitech: add HID++ support for Logitech MX Anywhere 3S
  riscv: trace: fix snapshot deadlock with sbi ecall
  ring-buffer: Avoid softlockup in ring_buffer_resize() during memory free
  drm/amd/pm: Disable MMIO access during SMU Mode 1 reset
  HID: Apply quirk HID_QUIRK_ALWAYS_POLL to Edifier QR30 (2d99:a101)
  HID: Intel-thc-hid: Intel-thc: Add safety check for reading DMA buffer
  HID: i2c-hid: fix potential buffer overflow in i2c_hid_get_report()
  HID: quirks: Add another Chicony HP 5MP Cameras to hid_ignore_list
  drm/amd/display: Reduce number of arguments of dcn30's CalculatePrefetchSchedule()
  netfilter: replace -EEXIST with -EBUSY
  PCI: qcom: Remove ASPM L0s support for MSM8996 SoC
  ALSA: hda/realtek: add HP Laptop 15s-eq1xxx mute LED quirk
  x86/sev: Disable GCOV on noinstr object
  ALSA: hda/realtek: Add quirk for Acer Nitro AN517-55
  HID: playstation: Center initial joystick axes to prevent spurious events
  HID: intel-ish-hid: Reset enum_devices_done before enumeration
  riscv: Sanitize syscall table indexing under speculation
  btrfs: fix reservation leak in some error paths when inserting inline extent
  HID: multitouch: add MT_QUIRK_STICKY_FINGERS to MT_CLS_VTL
  HID: intel-ish-hid: Update ishtp bus match to support device ID table
  btrfs: do not free data reservation in fallback from inline due to -ENOSPC
  smb/server: fix refcount leak in parse_durable_handle_context()
  LoongArch: Enable exception fixup for specific ADE subcode
  io_uring: use GFP_NOWAIT for overflow CQEs on legacy rings
  smb/server: fix refcount leak in smb2_open()
  md: suspend array while updating raid_disks via sysfs
  LoongArch: Set correct protection_map[] for VM_NONE/VM_SHARED
  smb/server: call ksmbd_session_rpc_close() on error path in create_smb2_pipe()
  block,bfq: fix aux stat accumulation destination
  platform/x86: dell-lis3lv02d: Add Latitude 5400
  wifi: iwlwifi: Implement settime64 as stub for MVM/MLD PTP
  net: usb: sr9700: support devices with virtual driver CD
  wifi: mac80211: don't WARN for connections on invalid channels
  wifi: wlcore: ensure skb headroom before skb_push
  wifi: mac80211: ocb: skip rx_no_sta when interface is not joined
  tracing: Fix ftrace event field alignments
  binderfs: fix ida_alloc_max() upper bound
  binder: fix BR_FROZEN_REPLY error log
  binder: fix UAF in binder_netlink_report()
  rust_binderfs: fix ida_alloc_max() upper bound
  rust_binder: add additional alignment checks
  rust_binder: correctly handle FDA objects of length zero
  sched/fair: Have SD_SERIALIZE affect newidle balancing
  sched/fair: Skip sched_balance_running cmpxchg when balance is not due
  bus: mhi: host: pci_generic: Add Telit FE990B40 modem support
  treewide: Drop pci_save_state() after pci_restore_state()
  PCI/ERR: Ensure error recoverability at all times
  hwmon: (gpio-fan) Allow to stop FANs when CONFIG_PM is disabled
  hwmon: (gpio-fan) Fix set_rpm() return value
  KVM: Don't clobber irqfd routing type when deassigning irqfd
  KVM: selftests: Add -U_FORTIFY_SOURCE to avoid some unpredictable test failures
  net: spacemit: k1-emac: fix jumbo frame support
  net: cpsw_new: Execute ndo_set_rx_mode callback in a work queue
  net: cpsw: Execute ndo_set_rx_mode callback in a work queue
  nouveau/gsp: fix suspend/resume regression on r570 firmware
  nouveau/gsp: use rpc sequence numbers properly.
  nouveau: add a third state to the fini handler.
  Revert "drm/amd: Check if ASPM is enabled from PCIe subsystem"
  mm, shmem: prevent infinite loop on truncate race
  gve: Correct ethtool rx_dropped calculation
  gve: Fix stats report corruption on queue count change
  drm/amd: Set minimum version for set_hw_resource_1 on gfx11 to 0x52
  cgroup/dmem: avoid pool UAF
  cgroup/dmem: avoid rcu warning when unregister region
  cgroup/dmem: fix NULL pointer dereference when setting max
  ceph: fix oops due to invalid pointer for kfree() in parse_longname()
  ARM: 9468/1: fix memset64() on big-endian
  rbd: check for EOD after exclusive lock is ensured to be held
  ceph: fix NULL pointer dereference in ceph_mds_auth_match()
  mm/slab: Add alloc_tagging_slab_free_hook for memcg_alloc_abort_single
  procfs: avoid fetching build ID while holding VMA lock
  pmdomain: imx8m-blk-ctrl: fix out-of-range access of bc->domains
  pmdomain: imx8mp-blk-ctrl: Keep usb phy power domain on for system wakeup
  pmdomain: imx: gpcv2: Fix the imx8mm gpu hang due to wrong adb400 reset
  pmdomain: imx8mp-blk-ctrl: Keep gpc power domain on for system wakeup
  pmdomain: qcom: rpmpd: fix off-by-one error in clamping to the highest state
  ALSA: aloop: Fix racy access at PCM trigger
  platform/x86: intel_telemetry: Fix swapped arrays in PSS output
  KVM: x86: Explicitly configure supported XSS from {svm,vmx}_set_cpu_caps()
  x86/kfence: fix booting on 32bit non-PAE systems
  x86/vmware: Fix hypercall clobbers
  nvmet-tcp: add bounds checks in nvmet_tcp_build_pdu_iovec
  Linux 6.18.9
  mptcp: avoid dup SUB_CLOSED events after disconnect
  sched_ext: Fix SCX_KICK_WAIT to work reliably
  sched_ext: Don't kick CPUs running higher classes
  net/sched: act_ife: convert comma to semicolon
  Revert "drm/nouveau/disp: Set drm_mode_config_funcs.atomic_(check|commit)"
  libbpf: Fix -Wdiscarded-qualifiers under C23
  gpiolib: acpi: Fix potential out-of-boundary left shift
  iommu/tegra241-cmdqv: Reset VCMDQ in tegra241_vcmdq_hw_init_user()
  drm/amdgpu: Fix cond_exec handling in amdgpu_ib_schedule()
  drm/amdgpu: fix NULL pointer dereference in amdgpu_gmc_filter_faults_remove
  drm/amdgpu/gfx12: adjust KGQ reset sequence
  drm/amdgpu/gfx12: fix wptr reset in KGQ init
  drm/amdgpu/gfx11: adjust KGQ reset sequence
  drm/amdgpu/gfx11: fix wptr reset in KGQ init
  drm/amdgpu/gfx10: fix wptr reset in KGQ init
  drm/amdgpu/soc21: fix xclk for APUs
  drm/amd/pm: fix smu v14 soft clock frequency setting issue
  drm/amd/pm: fix smu v13 soft clock frequency setting issue
  drm/imx/tve: fix probe device leak
  drm/msm/a6xx: fix bogus hwcg register updates
  drm/tyr: depend on `COMMON_CLK` to fix build error
  drm/xe/xelp: Fix Wa_18022495364
  drm: Do not allow userspace to trigger kernel warnings in drm_gem_change_handle_ioctl()
  scripts: generate_rust_analyzer: Add compiler_builtins -> core dep
  scripts: generate_rust_analyzer: fix resolution of #[pin_data] macros
  scripts: generate_rust_analyzer: compile sysroot with correct edition
  scripts: generate_rust_analyzer: remove sysroot assertion
  scripts: generate_rust_analyzer: Add pin_init_internal deps
  scripts: generate_rust_analyzer: Add pin_init -> compiler_builtins dep
  rust: sync: refcount: always inline functions using build_assert with arguments
  rust: sync: atomic: Provide stub for `rusttest` 32-bit hosts
  rust: bits: always inline functions using build_assert with arguments
  net: fix segmentation of forwarding fraglist GRO
  mm/shmem, swap: fix race of truncate and swap entry split
  mm/memory-failure: teach kill_accessing_process to accept hugetlb tail page pfn
  mm, swap: restore swap_space attr aviod kernel panic
  mm/memory-failure: fix missing ->mf_stats count in hugetlb poison
  mm/kfence: randomize the freelist on initialization
  btrfs: do not strictly require dirty metadata threshold for metadata writepages
  flex_proportions: make fprop_new_period() hardirq safe
  selftests: mptcp: join: fix local endp not being tracked
  selftests: mptcp: check subflow errors in close events
  selftests: mptcp: check no dup close events after error
  mptcp: only reset subflow errors when propagated
  mm/kasan: fix KASAN poisoning in vrealloc()
  gpio: rockchip: Stop calling pinctrl for set_direction
  ALSA: hda/realtek: fix right sounds and mute/micmute LEDs for HP machine
  nvmet: fix race in nvmet_bio_done() leading to NULL pointer dereference
  efivarfs: fix error propagation in efivar_entry_get()
  scsi: qla2xxx: edif: Fix dma_free_coherent() size
  kbuild: rust: clean libpin_init_internal in mrproper
  gpio: pca953x: mask interrupts in irq shutdown
  ASoC: amd: yc: Add DMI quirk for Acer TravelMate P216-41-TCO
  scsi: be2iscsi: Fix a memory leak in beiscsi_boot_get_sinfo()
  ASoC: fsl: imx-card: Do not force slot width to sample width
  rust: kbuild: give `--config-path` to `rustfmt` in `.rsi` target
  rust: rbtree: fix documentation typo in CursorMut peek_next method
  riscv: compat: fix COMPAT_UTS_MACHINE definition
  firewire: core: fix race condition against transaction list
  perf: sched: Fix perf crash with new is_user_task() helper
  pinctrl: qcom: sm8350-lpass-lpi: Merge with SC7280 to fix I2S2 and SWR TX pins
  pinctrl: meson: mark the GPIO controller as sleeping
  pinctrl: lpass-lpi: implement .get_direction() for the GPIO driver
  writeback: fix 100% CPU usage when dirtytime_expire_interval is 0
  sched/deadline: Fix 'stuck' dl_server
  sched/deadline: Document dl_server
  drm/xe/nvm: Fix double-free on aux add failure
  drm/xe/nvm: Manage nvm aux cleanup with devres
  drm/xe/configfs: Fix is_bound() pci_dev lifetime
  dma/pool: distinguish between missing and exhausted atomic pools
  bcache: fix I/O accounting leak in detached_dev_do_request
  bcache: use bio cloning for detached device requests
  bcache: fix improper use of bi_end_io
  of: reserved_mem: Allow reserved_mem framework detect "cma=" kernel param
  of/reserved_mem: Simplify the logic of fdt_scan_reserved_mem_reg_nodes()
  kbuild: Fix permissions of modules.builtin.modinfo
  kbuild: rpm-pkg: Generate debuginfo package manually
  gpio: brcmstb: correct hwirq to bank map
  drm/amd/pm: fix race in power state check before mutex lock
  gpio: virtuser: fix UAF in configfs release path
  gpiolib: acpi: use BIT_ULL() for u64 mask in address space handler
  ASoC: Intel: sof_es8336: fix headphone GPIO logic inversion
  drm/xe: Skip address copy for sync-only execs
  ASoC: soc-acpi-intel-ptl-match: fix name_prefix of rt1320-2
  scsi: firewire: sbp-target: Fix overflow in sbp_make_tpg()
  wifi: mac80211: correctly decode TTLM with default link map
  wifi: mac80211: apply advertised TTLM from association response
  wifi: mac80211: parse all TTLM entries
  net/mlx5e: Skip ESN replay window setup for IPsec crypto offload
  net/mlx5: Fix vhca_id access call trace use before alloc
  net/mlx5: Initialize events outside devlink lock
  net/mlx5: fs, Fix inverted cap check in tx flow table root disconnect
  net: phy: micrel: fix clk warning when removing the driver
  net/mlx5e: don't assume psp tx skbs are ipv6 csum handling
  net: bridge: fix static key check
  nfc: nci: Fix race between rfkill and nci_unregister_device().
  net/mlx5e: Account for netdev stats in ndo_get_stats64
  net/mlx5e: TC, delete flows only for existing peers
  ice: stop counting UDP csum mismatch as rx_errors
  ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues
  ixgbe: don't initialize aci lock in ixgbe_recovery_probe()
  ixgbe: fix memory leaks in the ixgbe_recovery_probe() path
  bonding: fix use-after-free due to enslave fail after slave array update
  nfc: llcp: Fix memleak in nfc_llcp_send_ui_frame().
  net: spacemit: Check for netif_carrier_ok() in emac_stats_update()
  mptcp: fix race in mptcp_pm_nl_flush_addrs_doit()
  rocker: fix memory leak in rocker_world_port_post_fini()
  net/mlx5: Fix return type mismatch in mlx5_esw_vport_vhca_id()
  net: wwan: t7xx: fix potential skb->frags overflow in RX path
  ipv6: use the right ifindex when replying to icmpv6 from localhost
  net: mvpp2: cls: Fix memory leak in mvpp2_ethtool_cls_rule_ins()
  sfc: fix deadlock in RSS config read
  bonding: annotate data-races around slave->last_rx
  octeon_ep: Fix memory leak in octep_device_setup()
  net: bcmasp: fix early exit leak with fixed phy
  can: gs_usb: gs_usb_receive_bulk_callback(): fix error message
  net/mlx5: Fix memory leak in esw_acl_ingress_lgcy_setup()
  Bluetooth: MGMT: Fix memory leak in set_ssp_complete
  Bluetooth: hci_uart: fix null-ptr-deref in hci_uart_write_work
  can: at91_can: Fix memory leak in at91_can_probe()
  btrfs: zlib: fix the folio leak on S390 hardware acceleration
  readdir: require opt-in for d_type flags
  Linux 6.18.8
  mm/vma: enforce VMA fork limit on unfaulted,faulted mremap merge too
  mm/vma: fix anon_vma UAF on mremap() faulted, unfaulted merge
  irqchip/renesas-rzv2h: Prevent TINT spurious interrupt during resume
  arm64: dts: qcom: talos: Correct UFS clocks ordering
  iio: core: add separate lockdep class for info_exist_lock
  iio: core: Replace lockdep_set_class() + mutex_init() by combined call
  mm/hugetlb: fix two comments related to huge_pmd_unshare()
  mm: fix some typos in mm module
  Bluetooth: btintel_pcie: Support for S4 (Hibernate)
  gpio: cdev: Fix resource leaks on errors in gpiolib_cdev_register()
  gpio: cdev: Fix resource leaks on errors in lineinfo_changed_notify()
  gpio: cdev: Correct return code on memory allocation failure
  drm/xe: fix WQ_MEM_RECLAIM passed as max_active to alloc_workqueue()
  drm/xe: Adjust page count tracepoints in shrinker
  drm/bridge: synopsys: dw-dp: fix error paths of dw_dp_bind
  drm/amdgpu: remove frame cntl for gfx v12
  can: usb_8dev: usb_8dev_read_bulk_callback(): fix URB memory leak
  can: mcba_usb: mcba_usb_read_bulk_callback(): fix URB memory leak
  can: kvaser_usb: kvaser_usb_read_bulk_callback(): fix URB memory leak
  can: esd_usb: esd_usb_read_bulk_callback(): fix URB memory leak
  can: ems_usb: ems_usb_read_bulk_callback(): fix URB memory leak
  net: txgbe: remove the redundant data return in SW-FW mailbox
  net: sfp: add potron quirk to the H-COM SPP425H-GAB4 SFP+ Stick
  net: fec: account for VLAN header in frame length calculations
  irqchip/gic-v3-its: Avoid truncating memory addresses
  perf/x86/intel: Do not enable BTS for guests
  rxrpc: Fix data-race warning and potential load/store tearing
  rust: irq: always inline functions using build_assert with arguments
  rust: io: always inline functions using build_assert with arguments
  pmdomain:rockchip: Fix init genpd as GENPD_STATE_ON before regulator ready
  pmdomain: imx8m-blk-ctrl: Remove separate rst and clk mask for 8mq vpu
  platform/x86: hp-bioscfg: Fix automatic module loading
  netrom: fix double-free in nr_route_frame()
  uacce: ensure safe queue release with state management
  uacce: implement mremap in uacce_vm_ops to return -EPERM
  uacce: fix isolate sysfs check condition
  uacce: fix cdev handling in the cleanup path
  s390/boot/vmlinux.lds.S: Ensure bzImage ends with SecureBoot trailer
  s390/ap: Fix wrong APQN fill calculation
  mei: trace: treat reg parameter as string
  intel_th: fix device leak on output open()
  tracing: Fix crash on synthetic stacktrace field usage
  slimbus: core: fix device reference leak on report present
  slimbus: core: fix runtime PM imbalance on report present
  octeontx2: Fix otx2_dma_map_page() error return code
  ksmbd: smbd: fix dma_unmap_sg() nents
  arm64: Set __nocfi on swsusp_arch_resume()
  arm64/fpsimd: signal: Fix restoration of SVE context
  arm64/fpsimd: signal: Allocate SSVE storage when restoring ZA
  arm64/fpsimd: ptrace: Fix SVE writes on !SME systems
  wifi: rsi: Fix memory corruption due to not set vif driver data size
  wifi: mwifiex: Fix a loop in mwifiex_update_ampdu_rxwinsize()
  wifi: ath12k: fix dma_free_coherent() pointer
  wifi: ath10k: fix dma_free_coherent() pointer
  drm/nouveau/disp: Set drm_mode_config_funcs.atomic_(check|commit)
  iommu/io-pgtable-arm: fix size_t signedness bug in unmap path
  mmc: sdhci-of-dwcmshc: Prevent illegal clock reduction in HS200/HS400 mode
  mmc: rtsx_pci_sdmmc: implement sdmmc_card_busy function
  ALSA: usb-audio: Fix use-after-free in snd_usb_mixer_free()
  ALSA: scarlett2: Fix buffer overflow in config retrieval
  ALSA: hda/realtek: Add quirk for Samsung 730QED to fix headphone
  ALSA: ctxfi: Fix potential OOB access in audio mixer handling
  iio: dac: ad5686: add AD5695R to ad5686_chip_info_tbl
  iio: dac: ad3552r-hs: fix out-of-bound write in ad3552r_hs_write_data_source
  iio: chemical: scd4x: fix reported channel endianness
  iio: adc: pac1934: Fix clamped value in pac1934_reg_snapshot
  iio: adc: exynos_adc: fix OF populate on driver rebind
  iio: adc: at91-sama5d2_adc: Fix potential use-after-free in sama5d2_adc driver
  iio: adc: ad9467: fix ad9434 vref mask
  iio: accel: iis328dq: fix gain values
  iio: accel: adxl380: fix handling of unavailable "INT1" interrupt
  migrate: correct lock ordering for hugetlb file folios
  of: platform: Use default match table for /firmware
  of: fix reference count leak in of_alias_scan()
  panic: only warn about deprecated panic_print on write access
  leds: led-class: Only Add LED to leds_list when it is fully ready
  keys/trusted_keys: fix handle passed to tpm_buf_append_name during unseal
  x86: make page fault handling disable interrupts properly
  Octeontx2-af: Add proper checks for fwdata
  dpll: Prevent duplicate registrations
  net/sched: act_ife: avoid possible NULL deref
  hinic3: Fix netif_queue_set_napi queue_index input parameter error
  vsock/virtio: cap TX credit to local buffer size
  vsock/test: fix seqpacket message bounds test
  vsock/virtio: fix potential underflow in virtio_transport_get_credit()
  net: openvswitch: fix data race in ovs_vport_get_upcall_stats
  octeontx2-af: Fix error handling
  net: pcs: pcs-mtk-lynxi: report in-band capability for 2500Base-X
  net: dsa: fix off-by-one in maximum bridge ID determination
  net: bcmasp: Fix network filter wake for asp-3.0
  bonding: provide a net pointer to __skb_flow_dissect()
  selftests: net: amt: wait longer for connection before sending packets
  be2net: Fix NULL pointer dereference in be_cmd_get_mac_from_list
  drm/nouveau: implement missing DCB connector types; gracefully handle unknown connectors
  drm/nouveau: add missing DCB connector types
  drm/amdgpu: fix type for wptr in ring backup
  drm/amd/pm: Workaround SI powertune issue on Radeon 430 (v2)
  drm/amd/pm: Don't clear SI SMC table when setting power limit
  drm/amd/pm: Fix si_dpm mmCG_THERMAL_INT setting
  sched/fair: Fix pelt clock sync when entering idle
  perf: Fix refcount warning on event->mmap_count increment
  selftests/ublk: fix garbage output in foreground mode
  selftests/ublk: fix error handling for starting device
  selftests/ublk: fix IO thread idle check
  ublk: fix ublksrv pid handling for pid namespaces
  drm/xe: Update wedged.mode only after successful reset policy change
  drm/xe/pm: Add scope-based cleanup helper for runtime PM
  drm/xe/migrate: fix job lock assert
  drm/xe/uapi: disallow bind queue sharing
  clocksource: Reduce watchdog readout delay limit to prevent false positives
  Octeontx2-pf: Update xdp features
  usbnet: limit max_mtu based on device's hard_mtu
  ipv6: annotate data-race in ndisc_router_discovery()
  mISDN: annotate data-race around dev->work
  net: hns3: fix the HCLGE_FD_AD_NXT_KEY error setting issue
  net: hns3: fix wrong GENMASK() for HCLGE_FD_AD_COUNTER_NUM_M
  be2net: fix data race in be_get_new_eqd
  idpf: Fix data race in idpf_net_dim
  net: hns3: fix data race in hns3_fetch_stats
  net: phy: intel-xway: fix OF node refcount leakage
  idpf: read lower clock bits inside the time sandwich
  ice: fix devlink reload call trace
  ice: add missing ice_deinit_hw() in devlink reinit path
  ice: Fix persistent failure in ice_get_rxfh
  netdevsim: fix a race issue related to the operation on bpf_bound_progs list
  vsock/test: Do not filter kallsyms by symbol type
  drm/imagination: Wait for FW trace update command completion
  drm/mediatek: dpi: Find next bridge during probe
  drm/xe: Disable timestamp WA on VFs
  drm/xe/vm: fix xe_vm_validation_exec() kernel-doc
  drm/xe/xe_late_bind_fw: fix enum xe_late_bind_fw_id kernel-doc
  iommu/amd: Fix error path in amd_iommu_probe_device()
  ntb: transport: Fix uninitialized mutex
  ALSA: usb: Increase volume range that triggers a warning
  scsi: qla2xxx: Sanitize payload size to prevent member overflow
  scsi: core: Wake up the error handler when final completions race against each other
  platform/x86/amd: Fix memory leak in wbrf_record()
  platform/mellanox: Fix SN5640/SN5610 LED platform data
  riscv: suspend: Fix stimecmp update hazard on RV32
  riscv: clocksource: Fix stimecmp update hazard on RV32
  kconfig: fix static linking of nconf
  regmap: Fix race condition in hwspinlock irqsave routine
  spi: spi-sprd-adi: Fix double free in probe error path
  interconnect: debugfs: initialize src_node and dst_node to empty strings
  iio: adc: ad7606: Fix incorrect type for error return variable
  iio: adc: ad7280a: handle spi_setup() errors in probe()
  iio: imu: st_lsm6dsx: fix iio_chan_spec for sensors without event detection
  io_uring/io-wq: check IO_WQ_BIT_EXIT inside work run loop
  timekeeping: Adjust the leap state for the correct auxiliary timekeeper
  mm: restore per-memcg proactive reclaim with !CONFIG_NUMA
  mm/rmap: fix two comments related to huge_pmd_unshare()
  mm/hugetlb: fix hugetlb_pmd_shared()
  platform/x86: hp-bioscfg: Fix kernel panic in GET_INSTANCE_ID macro
  platform/x86: hp-bioscfg: Fix kobject warnings for empty attribute names
  drm, drm/xe: Fix xe userptr in the absence of CONFIG_DEVICE_PRIVATE
  fs/writeback: skip AS_NO_DATA_INTEGRITY mappings in wait_sb_inodes()
  comedi: Fix getting range information for subdevices 16 to 255
  x86/kfence: avoid writing L1TF-vulnerable PTEs
  rxrpc: Fix recvmsg() unconditional requeue
  slab: fix kmalloc_nolock() context check for PREEMPT_RT
  arm64: dts: rockchip: Configure MCLK for analog sound on NanoPi M5
  arm64: dts: rockchip: Fix headphones widget name on NanoPi M5
  arm64: dts: rockchip: fix unit-address for RK3588 NPU's core1 and core2's IOMMU
  arm64: dts: rockchip: Fix voltage threshold for volume keys for Pinephone Pro
  arm64: dts: rockchip: remove dangerous max-link-speed from helios64
  arm64: dts: rockchip: remove redundant max-link-speed from nanopi-r4s
  ARM: dts: microchip: sama7d65: fix size-cells property for i2c3
  ARM: dts: microchip: sama7d65: fix the ranges property for flx9
  i2c: spacemit: drop IRQF_ONESHOT flag from IRQ request
  scsi: xen: scsiback: Fix potential memory leak in scsiback_remove()
  scsi: storvsc: Process unsupported MODE_SENSE_10
  Input: i8042 - add quirk for ASUS Zenbook UX425QA_UM425QA
  Input: i8042 - add quirks for MECHREVO Wujie 15X Pro
  Revert "nfc/nci: Add the inconsistency check between the input data length and count"
  w1: fix redundant counter decrement in w1_attach_slave_device()
  w1: therm: Fix off-by-one buffer overflow in alarms_store
  comedi: dmm32at: serialize use of paged registers
  serial: Fix not set tty->port race condition
  serial: 8250_pci: Fix broken RS485 for F81504/508/512
  wifi: mac80211: don't perform DA check on S1G beacon
  crypto: authencesn - reject too-short AAD (assoclen<8) to match ESP/ESN spec
  net/sched: qfq: Use cl_is_active to determine whether class is active in qfq_rm_from_ag
  net/sched: Enforce that teql can only be used as root qdisc
  octeontx2: cn10k: fix RX flowid TCAM mask handling
  ipvlan: Make the addrs_lock be per port
  l2tp: avoid one data-race in l2tp_tunnel_del_work()
  pwm: max7360: Populate missing .sizeof_wfhw in max7360_pwm_ops
  pwm: Ensure ioctl() returns a negative errno on error
  veth: fix data race in veth_get_ethtool_stats
  fou: Don't allow 0 for FOU_ATTR_IPPROTO.
  tools: ynl: Specify --no-line-number in ynl-regen.sh.
  gue: Fix skb memleak with inner IP protocol 0.
  amd-xgbe: avoid misleading per-packet error log
  sctp: move SCTP_CMD_ASSOC_SHKEY right after SCTP_CMD_PEER_INIT
  can: gs_usb: gs_usb_receive_bulk_callback(): unanchor URL on usb_submit_urb() error
  net: freescale: ucc_geth: Return early when TBI PHY can't be found
  selftests: net: fib-onlink-tests: Convert to use namespaces by default
  l2tp: Fix memleak in l2tp_udp_encap_recv().
  bonding: limit BOND_MODE_8023AD to Ethernet devices
  net: usb: dm9601: remove broken SR9700 support
  vsock/virtio: Coalesce only linear skb
  igc: Reduce TSN TX packet buffer from 7KB to 5KB per queue
  igc: fix race condition in TX timestamp read for register 0
  igc: Restore default Qbv schedule when changing channels
  ice: Fix incorrect timeout ice_release_res()
  ice: Avoid detrimental cleanup for bond during interface stop
  ice: initialize ring_stats->syncp
  wifi: ath12k: Fix wrong P2P device link id issue
  wifi: ath12k: fix dead lock while flushing management frames
  wifi: ath12k: Fix scan state stuck in ABORTING after cancel_remain_on_channel
  wifi: ath12k: cancel scan only on active scan vdev
  ata: libata: Print features also for ATAPI devices
  ata: libata: Add DIPM and HIPM to ata_dev_print_features() early return
  ata: libata: Add cpr_log to ata_dev_print_features() early return
  ata: libata-sata: Improve link_power_management_supported sysfs attribute
  ata: libata: Call ata_dev_config_lpm() for ATAPI devices
  ata: ahci: Do not read the per port area for unimplemented ports
  wifi: ath12k: don't force radio frequency check in freq_to_idx()
  pmdomain: qcom: rpmhpd: Add MXC to SC8280XP
  dt-bindings: power: qcom,rpmpd: Add SC8280XP_MXC_AO
  btrfs: fix missing fields in superblock backup with BLOCK_GROUP_TREE
  Drivers: hv: Always do Hyper-V panic notification in hv_kmsg_dump()
  perf parse-events: Fix evsel allocation failure
  arm64: dts: rockchip: Fix wrong register range of rk3576 gpu
  arm64: dts: qcom: sm8650: Fix compile warnings in USB controller node
  arm64: dts: qcom: sm8550: Fix compile warnings in USB controller node
  arm64: dts: qcom: sc8280xp: Add missing VDD_MXC links

Conflicts:

drivers/pci/bus.c
drivers/pci/controller/dwc/pcie-qcom.c

Signed-off-by: Sivasri Kumar, Vanka <svanka@qti.qualcomm.com>

Author: svankas

Documentation/netlink/specs/fou.yaml

@@ -39,6 +39,8 @@ attribute-sets:
       -
         name: ipproto
         type: u8
+        checks:
+          min: 1
       -
         name: type
         type: u8

Makefile

@@ -1,7 +1,7 @@
 # SPDX-License-Identifier: GPL-2.0
 VERSION = 6
 PATCHLEVEL = 18
-SUBLEVEL = 7
+SUBLEVEL = 12
 EXTRAVERSION =
 NAME = Baby Opossum Posse
 
@@ -1590,7 +1590,8 @@ MRPROPER_FILES += include/config include/generated          \
 		  certs/x509.genkey \
 		  vmlinux-gdb.py \
 		  rpmbuild \
-		  rust/libmacros.so rust/libmacros.dylib
+		  rust/libmacros.so rust/libmacros.dylib \
+		  rust/libpin_init_internal.so rust/libpin_init_internal.dylib
 
 # clean - Delete most, but leave enough to build external modules
 #

arch/arm/boot/dts/microchip/sama7d65.dtsi

@@ -527,7 +527,7 @@
 				interrupts = <GIC_SPI 37 IRQ_TYPE_LEVEL_HIGH>;
 				clocks = <&pmc PMC_TYPE_PERIPHERAL 37>;
 				#address-cells = <1>;
-				#size-cells = <1>;
+				#size-cells = <0>;
 				dmas = <&dma0 AT91_XDMAC_DT_PERID(12)>,
 				       <&dma0 AT91_XDMAC_DT_PERID(11)>;
 				dma-names = "tx", "rx";
@@ -676,7 +676,7 @@
 		flx9: flexcom@e2820000 {
 			compatible = "microchip,sama7d65-flexcom", "atmel,sama5d2-flexcom";
 			reg = <0xe2820000 0x200>;
-			ranges = <0x0 0xe281c000 0x800>;
+			ranges = <0x0 0xe2820000 0x800>;
 			clocks = <&pmc PMC_TYPE_PERIPHERAL 43>;
 			#address-cells = <1>;
 			#size-cells = <1>;

arch/arm/include/asm/string.h

@@ -42,7 +42,10 @@ static inline void *memset32(uint32_t *p, uint32_t v, __kernel_size_t n)
 extern void *__memset64(uint64_t *, uint32_t low, __kernel_size_t, uint32_t hi);
 static inline void *memset64(uint64_t *p, uint64_t v, __kernel_size_t n)
 {
-	return __memset64(p, v, n * 8, v >> 32);
+	if (IS_ENABLED(CONFIG_CPU_LITTLE_ENDIAN))
+		return __memset64(p, v, n * 8, v >> 32);
+	else
+		return __memset64(p, v >> 32, n * 8, v);
 }
 
 /*

arch/arm64/boot/dts/qcom/sc8280xp.dtsi

@@ -5773,8 +5773,12 @@
 			clocks = <&rpmhcc RPMH_CXO_CLK>;
 			clock-names = "xo";
 
-			power-domains = <&rpmhpd SC8280XP_NSP>;
-			power-domain-names = "nsp";
+			power-domains = <&rpmhpd SC8280XP_NSP>,
+					<&rpmhpd SC8280XP_CX>,
+					<&rpmhpd SC8280XP_MXC>;
+			power-domain-names = "nsp",
+					     "cx",
+					     "mxc";
 
 			memory-region = <&pil_nsp0_mem>;
 
@@ -5904,8 +5908,12 @@
 			clocks = <&rpmhcc RPMH_CXO_CLK>;
 			clock-names = "xo";
 
-			power-domains = <&rpmhpd SC8280XP_NSP>;
-			power-domain-names = "nsp";
+			power-domains = <&rpmhpd SC8280XP_NSP>,
+					<&rpmhpd SC8280XP_CX>,
+					<&rpmhpd SC8280XP_MXC>;
+			power-domain-names = "nsp",
+					     "cx",
+					     "mxc";
 
 			memory-region = <&pil_nsp1_mem>;
 

arch/arm64/boot/dts/qcom/sm8550.dtsi

@@ -4101,8 +4101,6 @@
 		usb_1: usb@a600000 {
 			compatible = "qcom,sm8550-dwc3", "qcom,snps-dwc3";
 			reg = <0x0 0x0a600000 0x0 0xfc100>;
-			#address-cells = <1>;
-			#size-cells = <0>;
 
 			clocks = <&gcc GCC_CFG_NOC_USB3_PRIM_AXI_CLK>,
 				 <&gcc GCC_USB30_PRIM_MASTER_CLK>,

arch/arm64/boot/dts/qcom/sm8650.dtsi

@@ -5119,9 +5119,6 @@
 
 			dma-coherent;
 
-			#address-cells = <1>;
-			#size-cells = <0>;
-
 			status = "disabled";
 
 			ports {

arch/arm64/boot/dts/rockchip/rk3399-kobol-helios64.dts

@@ -424,7 +424,6 @@
 
 &pcie0 {
 	ep-gpios = <&gpio2 RK_PD4 GPIO_ACTIVE_HIGH>;
-	max-link-speed = <2>;
 	num-lanes = <2>;
 	pinctrl-names = "default";
 	status = "okay";

arch/arm64/boot/dts/rockchip/rk3399-nanopi-r4s.dtsi

@@ -71,7 +71,6 @@
 };
 
 &pcie0 {
-	max-link-speed = <1>;
 	num-lanes = <1>;
 	vpcie3v3-supply = <&vcc3v3_sys>;
 };

arch/arm64/boot/dts/rockchip/rk3399-pinephone-pro.dts

@@ -40,13 +40,13 @@
 		button-up {
 			label = "Volume Up";
 			linux,code = <KEY_VOLUMEUP>;
-			press-threshold-microvolt = <100000>;
+			press-threshold-microvolt = <2000>;
 		};
 
 		button-down {
 			label = "Volume Down";
 			linux,code = <KEY_VOLUMEDOWN>;
-			press-threshold-microvolt = <600000>;
+			press-threshold-microvolt = <300000>;
 		};
 	};