[Bug 2121372] Re: questing/linux-6.16: 6.16.0-17.17 -proposed tracker

[Launchpad Bug Tracker]

This bug was fixed in the package linux-6.16 - 6.16.0-17.17

---------------
linux-6.16 (6.16.0-17.17) questing; urgency=medium

  * questing/linux-6.16: 6.16.0-17.17 -proposed tracker (LP: #2121372)

  * sources list generation using dwarfdump takes up to 0.5hr in build process
    (LP: #2104911)
    - [Packaging] Don't generate list of source files

  * Questing update: v6.16.3 upstream stable release (LP: #2121371)
    - ext4: process folios writeback in bytes
    - ext4: move the calculation of wbc->nr_to_write to mpage_folio_done()
    - ext4: fix stale data if it bail out of the extents mapping loop
    - ext4: refactor the block allocation process of ext4_page_mkwrite()
    - ext4: restart handle if credits are insufficient during allocating
      blocks
    - ext4: enhance tracepoints during the folios writeback
    - ext4: correct the reserved credits for extent conversion
    - ext4: reserved credits for one extent during the folio writeback
    - ext4: replace ext4_writepage_trans_blocks()
    - Linux 6.16.3

  * Questing update: v6.16.2 upstream stable release (LP: #2121366)
    - io_uring: don't use int for ABI
    - io_uring: export io_[un]account_mem
    - io_uring/zcrx: account area memory
    - io_uring/memmap: cast nr_pages to size_t before shifting
    - io_uring/net: commit partial buffers on retry
    - ALSA: usb-audio: Validate UAC3 power domain descriptors, too
    - ALSA: usb-audio: Validate UAC3 cluster segment descriptors
    - ALSA: hda/realtek: Fix headset mic on HONOR BRB-X
    - ALSA: hda/realtek: Add Framework Laptop 13 (AMD Ryzen AI 300) to quirks
    - smb3: fix for slab out of bounds on mount to ksmbd
    - smb: client: remove redundant lstrp update in negotiate protocol
    - gpio: virtio: Fix config space reading.
    - arm64: dts: ti: k3-j722s-evm: Fix USB gpio-hog level for Type-C
    - media: i2c: set lt6911uxe's reset_gpio to GPIOD_OUT_LOW
    - gpio: mlxbf2: use platform_get_irq_optional()
    - Revert "gpio: pxa: Make irq_chip immutable"
    - Revert "gpio: mlxbf3: only get IRQ for device instance 0"
    - gpio: mlxbf3: use platform_get_irq_optional()
    - leds: flash: leds-qcom-flash: Fix registry access after re-bind
    - Revert "leds: trigger: netdev: Configure LED blink interval for HW
      offload"
    - netlink: avoid infinite retry looping in netlink_unicast()
    - net: phy: micrel: fix KSZ8081/KSZ8091 cable test
    - net: ftgmac100: fix potential NULL pointer access in
      ftgmac100_phy_disconnect
    - net: gianfar: fix device leak when querying time stamp info
    - net: enetc: fix device and OF node leak at probe
    - net: mtk_eth_soc: fix device leak at probe
    - net: ti: icss-iep: fix device and OF node leaks at probe
    - net: dpaa: fix device leak when querying time stamp info
    - net: usb: asix_devices: add phy_mask for ax88772 mdio bus
    - net: usb: qmi_wwan: add Telit Cinterion FN990A w/audio composition
    - fhandle: raise FILEID_IS_DIR in handle_type
    - nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm()
    - NFSD: detect mismatch of file handle and delegation stateid in OPEN op
    - NFS: Fix the setting of capabilities when automounting a new filesystem
    - PCI: Extend isolated function probing to LoongArch
    - LoongArch: BPF: Fix jump offset calculation in tailcall
    - LoongArch: Don't use %pK through printk() in unwinder
    - LoongArch: Make relocate_new_kernel_size be a .quad value
    - LoongArch: Avoid in-place string operation on FDT content
    - LoongArch: vDSO: Remove -nostdlib complier flag
    - sunvdc: Balance device refcount in vdc_port_mpgroup_check
    - clk: samsung: exynos850: fix a comment
    - clk: samsung: gs101: fix CLK_DOUT_CMU_G3D_BUSD
    - clk: samsung: gs101: fix alternate mout_hsi0_usb20_ref parent clock
    - fscrypt: Don't use problematic non-inline crypto engines
    - lib/crypto: x86/poly1305: Fix register corruption in no-SIMD contexts
    - lib/crypto: x86/poly1305: Fix performance regression on short messages
    - fs: Prevent file descriptor table allocations exceeding INT_MAX
    - Documentation: ACPI: Fix parent device references
    - ACPI: processor: perflib: Fix initial _PPC limit application
    - PCI/ACPI: Fix runtime PM ref imbalance on Hot-Plug Capable ports
    - ACPI: EC: Relax sanity check of the ECDT ID string
    - ACPI: processor: perflib: Move problematic pr->performance check
    - block: Make REQ_OP_ZONE_FINISH a write operation
    - mm/memory-tier: fix abstract distance calculation overflow
    - mfd: cros_ec: Separate charge-control probing from USB-PD
    - smb: client: let send_done() cleanup before calling
      smbd_disconnect_rdma_connection()
    - smb: client: don't wait for info->send_pending == 0 on error
    - habanalabs: fix UAF in export_dmabuf()
    - mm/smaps: fix race between smaps_hugetlb_range and migration
    - xfrm: flush all states in xfrm_state_fini
    - xfrm: restore GSO for SW crypto
    - xfrm: bring back device check in validate_xmit_xfrm
    - udp: also consider secpath when evaluating ipsec use for checksumming
    - netfilter: ctnetlink: fix refcount leak on table dump
    - netfilter: ctnetlink: remove refcounting in expectation dumpers
    - net: hibmcge: fix rtnl deadlock issue
    - net: hibmcge: fix the division by zero issue
    - net: hibmcge: fix the np_link_fail error reporting issue
    - net: ti: icssg-prueth: Fix emac link speed handling
    - net: page_pool: allow enabling recycling late, fix false positive
      warning
    - net: ti: icss-iep: Fix incorrect type for return value in extts_enable()
    - sctp: linearize cloned gso packets in sctp_rcv
    - net: lapbether: ignore ops-locked netdevs
    - hamradio: ignore ops-locked netdevs
    - erofs: fix block count report when 48-bit layout is on
    - intel_idle: Allow loading ACPI tables for any family
    - cpuidle: governors: menu: Avoid using invalid recent intervals data
    - net: phy: nxp-c45-tja11xx: fix the PHY ID mismatch issue when using C45
    - net: mdiobus: release reset_gpio in mdiobus_unregister_device()
    - net: stmmac: thead: Get and enable APB clock on initialization
    - riscv: dts: thead: Add APB clocks for TH1520 GMACs
    - ptp: prevent possible ABBA deadlock in ptp_clock_freerun()
    - tls: handle data disappearing from under the TLS ULP
    - ipvs: Fix estimator kthreads preferred affinity
    - netfilter: nf_tables: reject duplicate device on updates
    - bnxt: fill data page pool with frags if PAGE_SIZE > BNXT_RX_PAGE_SIZE
    - net: kcm: Fix race condition in kcm_unattach()
    - hfs: fix general protection fault in hfs_find_init()
    - hfs: fix slab-out-of-bounds in hfs_bnode_read()
    - hfsplus: fix slab-out-of-bounds in hfsplus_bnode_read()
    - hfsplus: fix slab-out-of-bounds read in hfsplus_uni2asc()
    - hfsplus: don't use BUG_ON() in hfsplus_create_attributes_file()
    - arm64: Handle KCOV __init vs inline mismatches
    - tpm: Check for completion after timeout
    - tpm: tpm_crb_ffa: try to probe tpm_crb_ffa when it's built-in
    - firmware: arm_ffa: Change initcall level of ffa_init() to
      rootfs_initcall
    - btrfs: fix -ENOSPC mmap write failure on NOCOW files/extents
    - smb/server: avoid deadlock when linking with ReplaceIfExists
    - nvme-pci: try function level reset on init failure
    - dm-stripe: limit chunk_sectors to the stripe size
    - md/raid10: set chunk_sectors limit
    - nvme-tcp: log TLS handshake failures at error level
    - gfs2: Validate i_depth for exhash directories
    - gfs2: Set .migrate_folio in gfs2_{rgrp,meta}_aops
    - loop: Avoid updating block size under exclusive owner
    - udf: Verify partition map count
    - drbd: add missing kref_get in handle_write_conflicts
    - hfs: fix not erasing deleted b-tree node issue
    - better lockdep annotations for simple_recursive_removal()
    - ata: ahci: Disallow LPM policy control if not supported
    - ata: ahci: Disable DIPM if host lacks support
    - ata: libata-sata: Disallow changing LPM state if not supported
    - fs/ntfs3: Add sanity check for file name
    - fs/ntfs3: correctly create symlink for relative path
    - pidfs: raise SB_I_NODEV and SB_I_NOEXEC
    - landlock: opened file never has a negative dentry
    - ext2: Handle fiemap on empty files to prevent EINVAL
    - fix locking in efi_secret_unlink()
    - securityfs: don't pin dentries twice, once is enough...
    - tracefs: Add d_delete to remove negative dentries
    - usb: xhci: print xhci->xhc_state when queue_command failed
    - staging: gpib: Add init response codes for new ni-usb-hs+
    - selftests/kexec: fix test_kexec_jump build
    - platform/x86/amd: pmc: Add Lenovo Yoga 6 13ALC6 to pmc quirk list
    - cpufreq: CPPC: Mark driver with NEED_UPDATE_LIMITS flag
    - selftests/futex: Define SYS_futex on 32-bit architectures with 64-bit
      time_t
    - usb: typec: ucsi: psy: Set current max to 100mA for BC 1.2 and Default
    - bus: mhi: host: pci_generic: Add Telit FN990B40 modem support
    - bus: mhi: host: pci_generic: Disable runtime PM for QDU100
    - usb: xhci: Avoid showing warnings for dying controller
    - usb: xhci: Set avg_trb_len = 8 for EP0 during Address Device Command
    - usb: xhci: Avoid showing errors during surprise removal
    - soc: qcom: rpmh-rsc: Add RSC version 4 support
    - ACPI: APEI: send SIGBUS to current task if synchronous memory error not
      recovered
    - remoteproc: imx_rproc: skip clock enable when M-core is managed by the
      SCU
    - binder: Fix selftest page indexing
    - gpio: loongson-64bit: Extend GPIO irq support
    - usb: typec: ucsi: Add poll_cci operation to cros_ec_ucsi
    - usb: typec: tcpm/tcpci_maxim: fix irq wake usage
    - pmdomain: ti: Select PM_GENERIC_DOMAINS
    - gpio: wcd934x: check the return value of regmap_update_bits()
    - cpufreq: Exit governor when failed to start old governor
    - cpufreq: intel_pstate: Add Granite Rapids support in no-HWP mode
    - ARM: rockchip: fix kernel hang during smp initialization
    - PM / devfreq: governor: Replace sscanf() with kstrtoul() in
      set_freq_store()
    - EDAC/synopsys: Clear the ECC counters on init
    - ASoC: soc-dapm: set bias_level if snd_soc_dapm_set_bias_level() was
      successed
    - thermal/drivers/qcom-spmi-temp-alarm: Enable stage 2 shutdown when
      required
    - tools/nolibc: define time_t in terms of __kernel_old_time_t
    - iio: adc: ad_sigma_delta: don't overallocate scan buffer
    - gpio: tps65912: check the return value of regmap_update_bits()
    - ARM: tegra: Use I/O memcpy to write to IRAM
    - tools/build: Fix s390(x) cross-compilation with clang
    - selftests: tracing: Use mutex_unlock for testing glob filter
    - ACPI: PRM: Reduce unnecessary printing to avoid user confusion
    - firmware: arm_scmi: power_control: Ensure SCMI_SYSPOWER_IDLE is set
      early during resume
    - firmware: tegra: Fix IVC dependency problems
    - ALSA: hda: add MODULE_FIRMWARE for cs35l41/cs35l56
    - PM: runtime: Clear power.needs_force_resume in pm_runtime_reinit()
    - thermal: sysfs: Return ENODATA instead of EAGAIN for reads
    - PM: sleep: console: Fix the black screen issue
    - ACPI: processor: fix acpi_object initialization
    - mmc: sdhci-msm: Ensure SD card power isn't ON when card removed
    - ACPI: APEI: GHES: add TAINT_MACHINE_CHECK on GHES panic path
    - irqchip/renesas-rzv2h: Enable SKIP_SET_WAKE and MASK_ON_SUSPEND
    - selftests: vDSO: vdso_test_getrandom: Always print TAP header
    - pps: clients: gpio: fix interrupt handling order in remove path
    - reset: brcmstb: Enable reset drivers for ARCH_BCM2835
    - ASoC: SDCA: Add flag for unused IRQs
    - x86/sev/vc: Fix EFI runtime instruction emulation
    - char: misc: Fix improper and inaccurate error code returned by
      misc_init()
    - mei: bus: Check for still connected devices in mei_cl_bus_dev_release()
    - mmc: rtsx_usb_sdmmc: Fix error-path in sd_set_power_mode()
    - mmc: sdhci-esdhc-imx: Don't change pinctrl in suspend if wakeup source
    - platform/chrome: cros_ec_sensorhub: Retries when a sensor is not ready
    - ALSA: hda: Handle the jack polling always via a work
    - ALSA: hda: Disable jack polling at shutdown
    - EDAC/ie31200: Enable support for Core i5-14600 and i7-14700
    - x86/bugs: Avoid warning when overriding return thunk
    - ASoC: hdac_hdmi: Rate limit logging on connection and disconnection
    - ALSA: intel8x0: Fix incorrect codec index usage in mixer for ICH4
    - irqchip/mips-gic: Allow forced affinity
    - ASoC: SOF: topology: Parse the dapm_widget_tokens in case of DSPless
      mode
    - tty: serial: fix print format specifiers
    - ASoC: core: Check for rtd == NULL in snd_soc_remove_pcm_runtime()
    - usb: typec: intel_pmc_mux: Defer probe if SCU IPC isn't present
    - usb: core: usb_submit_urb: downgrade type check
    - usb: dwc3: xilinx: add shutdown callback
    - pm: cpupower: Fix the snapshot-order of tsc,mperf, clock in mperf_stop()
    - imx8m-blk-ctrl: set ISI panic write hurry level
    - soc: qcom: mdt_loader: Actually use the e_phoff
    - platform/x86: thinkpad_acpi: Handle KCOV __init vs inline mismatches
    - platform/chrome: cros_ec_typec: Defer probe on missing EC parent
    - ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control
    - ALSA: pcm: Rewrite recalculate_boundary() to avoid costly loop
    - ALSA: usb-audio: Avoid precedence issues in mixer_quirks macros
    - iio: adc: ad7768-1: Ensure SYNC_IN pulse minimum timing requirement
    - ASoC: codecs: rt5640: Retry DEVICE_ID verification
    - ASoC: qcom: use drvdata instead of component to keep id
    - netfilter: nft_set_pipapo: prefer kvmalloc for scratch maps
    - selftests: netfilter: Enable CONFIG_INET_SCTP_DIAG
    - powerpc/thp: tracing: Hide hugepage events under CONFIG_PPC_BOOK3S_64
    - verification/dot2k: Make a separate dot2k_templates/Kconfig_container
    - Bluetooth: hci_event: Add support for handling LE BIG Sync Lost event
    - Bluetooth: hci_sock: Reset cookie to zero in hci_sock_free_cookie()
    - Bluetooth: btusb: Add support for variant of RTL8851BE (USB ID
      13d3:3601)
    - xen/netfront: Fix TX response spurious interrupts
    - wifi: iwlwifi: mld: use spec link id and not FW link id
    - wifi: iwlwifi: mld: avoid outdated reorder buffer head_sn
    - wifi: iwlwifi: mvm: avoid outdated reorder buffer head_sn
    - net: usb: cdc-ncm: check for filtering capability
    - wifi: ath12k: Correct tid cleanup when tid setup fails
    - ktest.pl: Prevent recursion of default variable options
    - wifi: cfg80211: reject HTC bit for management frames
    - s390/sclp: Use monotonic clock in sclp_sync_wait()
    - s390/time: Use monotonic clock in get_cycles()
    - be2net: Use correct byte order and format string for TCP seq and ack_seq
    - libbpf: Verify that arena map exists when adding arena relocations
    - idpf: preserve coalescing settings across resets
    - libbpf: Fix warning in calloc() usage
    - wifi: rtw89: wow: Add Basic Rate IE to probe request in scheduled scan
      mode
    - wifi: rtw89: Lower the timeout in rtw89_fw_read_c2h_reg() for USB
    - et131x: Add missing check after DMA map
    - net: ag71xx: Add missing check after DMA map
    - net/mlx5e: Properly access RCU protected qdisc_sleeping variable
    - net: pcs: xpcs: mask readl() return value to 16 bits
    - arm64: Mark kernel as tainted on SAE and SError panic
    - drm/amd/pm: fix null pointer access
    - rcu: Protect ->defer_qs_iw_pending from data race
    - drm/amd/display: limit clear_update_flags to dcn32 and above
    - can: ti_hecc: fix -Woverflow compiler warning
    - net: mctp: Prevent duplicate binds
    - wifi: mac80211: don't use TPE data from assoc response
    - wifi: mac80211: handle WLAN_HT_ACTION_NOTIFY_CHANWIDTH async
    - wifi: cfg80211: Fix interface type validation
    - wifi: mac80211: don't unreserve never reserved chanctx
    - net: ipv4: fix incorrect MTU in broadcast routes
    - net: thunderx: Fix format-truncation warning in bgx_acpi_match_id()
    - net: phy: micrel: Add ksz9131_resume()
    - perf/cxlpmu: Remove unintended newline from IRQ name format string
    - sched/deadline: Fix accounting after global limits change
    - bpf: Forget ranges when refining tnum after JSET
    - wifi: iwlwifi: mvm: set gtk id also in older FWs
    - wifi: iwlwifi: mld: fix scan request validation
    - um: Re-evaluate thread flags repeatedly
    - wifi: iwlwifi: mvm: fix scan request validation
    - wifi: iwlwifi: handle non-overlapping API ranges
    - drm/sched/tests: Add unit test for cancel_job()
    - drm/sched: Avoid memory leaks with cancel_job() callback
    - s390/stp: Remove udelay from stp_sync_clock()
    - net: phy: bcm54811: PHY initialization
    - rv: Add #undef TRACE_INCLUDE_FILE
    - sched/fair: Bump sd->max_newidle_lb_cost when newidle balance fails
    - wifi: mac80211: don't complete management TX on SAE commit
    - wifi: mac80211: avoid weird state in error path
    - s390/early: Copy last breaking event address to pt_regs
    - (powerpc/512) Fix possible `dma_unmap_single()` on uninitialized pointer
    - ipv6: mcast: Check inet6_dev->dead under idev->mc_lock in
      __ipv6_dev_mc_inc().
    - rcu/nocb: Fix possible invalid rdp's->nocb_cb_kthread pointer access
    - wifi: mac80211: fix rx link assignment for non-MLO stations
    - wifi: mt76: mt7996: Fix mlink lookup in mt7996_tx_prepare_skb
    - wifi: mt76: fix vif link allocation
    - drm/fbdev-client: Skip DRM clients if modesetting is absent
    - drm/msm: Update register xml
    - drm/msm: use trylock for debugfs
    - drm/msm: Add error handling for krealloc in metadata setup
    - perf/arm: Add missing .suppress_bind_attrs
    - drm/imagination: Clear runtime PM errors while resetting the GPU
    - wifi: rtw89: Fix rtw89_mac_power_switch() for USB
    - wifi: rtw89: Disable deep power saving for USB/SDIO
    - wifi: mt76: mt7915: mcu: re-init MCU before loading FW patch
    - wifi: mt76: mt7915: mcu: increase eeprom command timeout
    - kselftest/arm64: Specify SVE data when testing VL set in sve-ptrace
    - drm/xe/xe_query: Use separate iterator while filling GT list
    - net: thunderbolt: Enable end-to-end flow control also in transmit
    - net: thunderbolt: Fix the parameter passing of
      tb_xdomain_enable_paths()/tb_xdomain_disable_paths()
    - xfrm: Duplicate SPI Handling
    - net: phy: air_en8811h: Introduce resume/suspend and clk_restore_context
      to ensure correct CKO settings after network interface reinitialization.
    - net: atlantic: add set_power to fw_ops for atl2 to fix wol
    - ACPI: Suppress misleading SPCR console message when SPCR table is absent
    - net: ieee8021q: fix insufficient table-size assertion
    - net: enetc: separate 64-bit counters from enetc_port_counters
    - net: fec: allow disable coalescing
    - drm/amdgpu: Use correct severity for BP threshold exceed event
    - drm/amd/display: Separate set_gsl from set_gsl_source_select
    - drm/amd/display: add null check
    - wifi: ath10k: shutdown driver when hardware is unreliable
    - drm/panel: raydium-rm67200: Move initialization from enable() to prepare
      stage
    - eth: bnxt: take page size into account for page pool recycling rings
    - wifi: ath12k: Add memset and update default rate value in wmi tx
      completion
    - wifi: ath12k: Fix beacon reception for sta associated to Non-TX AP
    - wifi: ath12k: Fix station association with MBSSID Non-TX BSS
    - net: phy: realtek: add error handling to rtl8211f_get_wol
    - lib: packing: Include necessary headers
    - wifi: iwlwifi: dvm: fix potential overflow in rs_fill_link_cmd()
    - wifi: iwlwifi: mld: don't exit EMLSR when we shouldn't
    - wifi: iwlwifi: mld: use the correct struct size for tracing
    - wifi: iwlwifi: mld: fix last_mlo_scan_time type
    - wifi: iwlwifi: fw: Fix possible memory leak in iwl_fw_dbg_collect
    - wifi: iwlwifi: pcie: reinit device properly during TOP reset
    - rcutorture: Fix rcutorture_one_extend_check() splat in RT kernels
    - drm/amdgpu: Add more checks to PSP mailbox
    - drm/amd/display: Fix 'failed to blank crtc!'
    - drm/amd/display: Initialize mode_select to 0
    - wifi: mac80211: update radar_required in channel context after channel
      switch
    - wifi: rtlwifi: fix possible skb memory leak in
      `_rtl_pci_rx_interrupt()`.
    - wifi: rtw89: coex: Not to set slot duration to zero to avoid firmware
      issue
    - wifi: ath12k: Enable REO queue lookup table feature on QCN9274 hw2.0
    - wifi: ath12k: Decrement TID on RX peer frag setup error handling
    - powerpc: floppy: Add missing checks after DMA map
    - netmem: fix skb_frag_address_safe with unreadable skbs
    - arm64: stacktrace: Check kretprobe_find_ret_addr() return value
    - wifi: iwlegacy: Check rate_idx range after addition
    - dpaa_eth: don't use fixed_phy_change_carrier
    - drm/amd/pm: Use pointer type for typecheck()
    - drm/amd: Allow printing VanGogh OD SCLK levels without setting dpm to
      manual
    - drm/amd/display: Stop storing failures into adev->dm.cached_state
    - drm/amdgpu: Suspend IH during mode-2 reset
    - drm/amdgpu: clear pa and mca record counter when resetting eeprom
    - net: vlan: Make is_vlan_dev() a stub when VLAN is not configured
    - net: vlan: Replace BUG() with WARN_ON_ONCE() in vlan_dev_* stubs
    - gve: Return error for unknown admin queue command
    - net: dsa: b53: ensure BCM5325 PHYs are enabled
    - net: dsa: b53: fix b53_imp_vlan_setup for BCM5325
    - net: dsa: b53: prevent GMII_PORT_OVERRIDE_CTRL access on BCM5325
    - net: dsa: b53: prevent DIS_LEARNING access on BCM5325
    - net: dsa: b53: prevent SWITCH_CTRL access on BCM5325
    - bpftool: Fix JSON writer resource leak in version command
    - ptp: Use ratelimite for freerun error message
    - wifi: rtw89: scan abort when assign/unassign_vif
    - wifi: rtlwifi: fix possible skb memory leak in
      _rtl_pci_init_one_rxdesc()
    - ionic: clean dbpage in de-init
    - drm/xe: Make dma-fences compliant with the safe access rules
    - net: ncsi: Fix buffer overflow in fetching version id
    - drm: renesas: rz-du: mipi_dsi: Add min check for VCLK range
    - drm/ttm: Should to return the evict error
    - uapi: in6: restore visibility of most IPv6 socket options
    - wifi: rtw89: 8852c: increase beacon loss to 6 seconds
    - bpf: Make reg_not_null() true for CONST_PTR_TO_MAP
    - selftests/bpf: Fix ringbuf/ringbuf_write test failure with arm64 64KB
      page size
    - selftests/bpf: Fix a user_ringbuf failure with arm64 64KB page size
    - drm/amd/display: Update DMCUB loading sequence for DCN3.5
    - drm/amd/display: Avoid trying AUX transactions on disconnected ports
    - drm/ttm: Respect the shrinker core free target
    - rcu: Fix rcu_read_unlock() deadloop due to IRQ work
    - net: dsa: b53: fix IP_MULTICAST_CTRL on BCM5325
    - vsock/virtio: Resize receive buffers so that each SKB fits in a 4K page
    - vhost: fail early when __vhost_add_used() fails
    - drm/amd/display: Only finalize atomic_obj if it was initialized
    - drm/amd/display: Avoid configuring PSR granularity if PSR-SU not
      supported
    - drm/amd/display: Disable dsc_power_gate for dcn314 by default
    - watchdog: sbsa: Adjust keepalive timeout to avoid MediaTek WS0 race
      condition
    - cifs: Fix calling CIFSFindFirst() for root path without msearch
    - smb: client: fix session setup against servers that require SPN
    - fbdev: fix potential buffer overflow in do_register_framebuffer()
    - crypto: hisilicon/hpre - fix dma unmap sequence
    - ext4: do not BUG when INLINE_DATA_FL lacks system.data xattr
    - clk: tegra: periph: Fix error handling and resolve unsigned compare
      warning
    - sphinx: kernel_abi: fix performance regression with O=<dir>
    - mfd: axp20x: Set explicit ID for AXP313 regulator
    - phy: rockchip-pcie: Properly disable TEST_WRITE strobe signal
    - phy: rockchip-pcie: Enable all four lanes if required
    - scsi: libiscsi: Initialize iscsi_conn->dd_data only if memory is
      allocated
    - fs/orangefs: use snprintf() instead of sprintf()
    - watchdog: dw_wdt: Fix default timeout
    - hwmon: (emc2305) Set initial PWM minimum value during probe based on
      thermal state
    - clk: qcom: ipq5018: keep XO clock always on
    - MIPS: vpe-mt: add missing prototypes for vpe_{alloc,start,stop,free}
    - watchdog: iTCO_wdt: Report error if timeout configuration fails
    - ext4: limit the maximum folio order
    - scsi: bfa: Double-free fix
    - jfs: truncate good inode pages when hard link is 0
    - jfs: Regular file corruption check
    - jfs: upper bound check of tree index in dbAllocAG
    - media: hi556: Fix reset GPIO timings
    - RDMA/bnxt_re: Fix size of uverbs_copy_to() in
      BNXT_RE_METHOD_GET_TOGGLE_MEM
    - crypto: jitter - fix intermediary handling
    - MIPS: Don't crash in stack_top() for tasks without ABI or vDSO
    - MIPS: lantiq: falcon: sysctrl: fix request memory check logic
    - media: iris: Add handling for corrupt and drop frames
    - clk: thead: Mark essential bus clocks as CLK_IGNORE_UNUSED
    - media: i2c: vd55g1: Setup sensor external clock before patching
    - media: i2c: vd55g1: Fix RATE macros not being expressed in bps
    - media: ipu-bridge: Add _HID for OV5670
    - media: v4l2-common: Reduce warnings about missing V4L2_CID_LINK_FREQ
      control
    - leds: leds-lp50xx: Handle reg to get correct multi_index
    - dmaengine: stm32-dma: configure next sg only if there are more than 2
      sgs
    - RDMA: hfi1: fix possible divide-by-zero in find_hw_thread_mask()
    - RDMA/core: reduce stack using in nldev_stat_get_doit()
    - scsi: lpfc: Ensure HBA_SETUP flag is used only for SLI4 in
      dev_loss_tmo_callbk
    - scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport
      structure
    - crypto: caam - Support iMX8QXP and variants thereof
    - power: supply: qcom_battmgr: Add lithium-polymer entry
    - HID: rate-limit hid_warn to prevent log flooding
    - scsi: mpt3sas: Correctly handle ATA device errors
    - scsi: pm80xx: Free allocated tags after failure
    - scsi: mpi3mr: Correctly handle ATA device errors
    - PCI: dw-rockchip: Delay link training after hot reset in EP mode
    - pinctrl: stm32: Manage irq affinity settings
    - media: raspberrypi: cfe: Fix min_reqbufs_allocation
    - media: tc358743: Check I2C succeeded during probe
    - media: tc358743: Return an appropriate colorspace from tc358743_set_fmt
    - media: tc358743: Increase FIFO trigger level to 374
    - media: usb: hdpvr: disable zero-length read messages
    - media: dvb-frontends: dib7090p: fix null-ptr-deref in
      dib7090p_rw_on_apb()
    - media: dvb-frontends: w7090p: fix null-ptr-deref in
      w7090p_tuner_write_serpar and w7090p_tuner_read_serpar
    - media: uvcvideo: Add quirk for HP Webcam HD 2300
    - media: uvcvideo: Set V4L2_CTRL_FLAG_DISABLED during queryctrl errors
    - media: uvcvideo: Fix bandwidth issue for Alcor camera
    - crypto: octeontx2 - add timeout for load_fvc completion poll
    - crypto: ccp - Add missing bootloader info reg for pspv6
    - clk: renesas: rzg2l: Postpone updating priv->clks[]
    - soundwire: amd: serialize amd manager resume sequence during pm_prepare
    - soundwire: amd: cancel pending slave status handling workqueue during
      remove sequence
    - soundwire: Move handle_nested_irq outside of sdw_dev_lock
    - md: dm-zoned-target: Initialize return variable r to avoid uninitialized
      use
    - module: Prevent silent truncation of module name in delete_module(2)
    - i3c: add missing include to internal header
    - rtc: ds1307: handle oscillator stop flag (OSF) for ds1341
    - i3c: don't fail if GETHDRCAP is unsupported
    - i3c: master: Initialize ret in i3c_i2c_notifier_call()
    - dm-mpath: don't print the "loaded" message if registering fails
    - dm-table: fix checking for rq stackable devices
    - i2c: Force DLL0945 touchpad i2c freq to 100khz
    - exfat: add cluster chain loop check for dir
    - f2fs: check the generic conditions first
    - f2fs: handle nat.blkaddr corruption in f2fs_get_node_info()
    - printk: nbcon: Allow reacquire during panic
    - kconfig: lxdialog: replace strcpy() with strncpy() in inputbox.c
    - vfio/type1: conditional rescheduling while pinning
    - kconfig: nconf: Ensure null termination where strncpy is used
    - scsi: Fix sas_user_scan() to handle wildcard and multi-channel scans
    - scsi: target: core: Generate correct identifiers for PR OUT transport
      IDs
    - scsi: aacraid: Stop using PCI_IRQ_AFFINITY
    - vfio/mlx5: fix possible overflow in tracking max message size
    - ipmi: Use dev_warn_ratelimited() for incorrect message warnings
    - kconfig: gconf: avoid hardcoding model2 in on_treeview2_cursor_changed()
    - kconfig: gconf: fix potential memory leak in renderer_edited()
    - kheaders: rebuild kheaders_data.tar.xz when a file is modified within a
      minute
    - kconfig: lxdialog: fix 'space' to (de)select options
    - ipmi: Fix strcpy source and destination the same
    - tools/power turbostat: Handle non-root legacy-uncore sysfs permissions
    - tools/power turbostat: Fix build with musl
    - tools/power turbostat: Handle cap_get_proc() ENOSYS
    - smb: client: don't call init_waitqueue_head(&info->conn_wait) twice in
      _smbd_get_connection
    - lib/sbitmap: convert shallow_depth from one word to the whole sbitmap
    - irqchip/mvebu-gicp: Clear pending interrupts on init
    - ALSA: hda/realtek: add LG gram 16Z90R-A to alc269 fixup table
    - ASoC: Intel: sof_sdw: Add quirk for Alienware Area 51 (2025) 0CCC SKU
    - regmap: irq: Free the regmap-irq mutex
    - net: phy: smsc: add proper reset flags for LAN8710A
    - ASoC: Intel: avs: Fix uninitialized pointer error in probe()
    - block: avoid possible overflow for chunk_sectors check in
      blk_stack_limits()
    - pNFS: Fix stripe mapping in block/scsi layout
    - pNFS: Fix disk addr range check in block/scsi layout
    - pNFS: Handle RPC size limit for layoutcommits
    - pNFS: Fix uninited ptr deref in block/scsi layout
    - rtc: ds1307: remove clear of oscillator stop flag (OSF) in probe
    - scsi: ufs: core: Fix interrupt handling for MCQ Mode
    - scsi: lpfc: Remove redundant assignment to avoid memory leak
    - ASoC: fsl_sai: replace regmap_write with regmap_update_bits
    - ublk: check for unprivileged daemon on each I/O fetch
    - block: fix kobject double initialization in add_disk
    - cifs: Fix collect_sample() to handle any iterator type
    - drm/i915/fbc: fix the implementation of wa_18038517565
    - drm/i915/psr: Do not trigger Frame Change events from frontbuffer flush
    - drm/xe/migrate: prevent infinite recursion
    - drm/xe/migrate: don't overflow max copy size
    - drm/xe/migrate: prevent potential UAF
    - drm/xe/hwmon: Add SW clamp for power limits writes
    - drm/amdgpu: fix vram reservation issue
    - drm/amdgpu: fix incorrect vm flags to map bo
    - x86/sev: Improve handling of writes to intercepted TSC MSRs
    - x86/fpu: Fix NULL dereference in avx512_status()
    - x86/sev: Ensure SVSM reserved fields in a page validation entry are
      initialized to zero
    - futex: Use user_write_access_begin/_end() in futex_put_value()
    - rust: kbuild: clean output before running `rustdoc`
    - rust: workaround `rustdoc` target modifiers bug
    - samples/damon/wsse: fix boot time enable handling
    - samples/damon/mtier: support boot time enable setup
    - mm/damon/core: commit damos->target_nid
    - block: Introduce bio_needs_zone_write_plugging()
    - dm: Always split write BIOs to zoned device limits
    - clk: qcom: gcc-ipq8074: fix broken freq table for nss_port6_tx_clk_src
    - clk: qcom: dispcc-sm8750: Fix setting rate byte and pixel clocks
    - cifs: reset iface weights when we cannot find a candidate
    - iommu/vt-d: Optimize iotlb_sync_map for non-caching/non-RWBF modes
    - iommu/arm-smmu-v3: Revert vmaster in the error path
    - iommu/arm-smmu-qcom: Add SM6115 MDSS compatible
    - iommufd: Report unmapped bytes in the error path of
      iopt_unmap_iova_range
    - iommufd: Prevent ALIGN() overflow
    - ext4: fix zombie groups in average fragment size lists
    - ext4: fix largest free orders lists corruption on mb_optimize_scan
      switch
    - ext4: initialize superblock fields in the kballoc-test.c kunit tests
    - usb: core: config: Prevent OOB read in SS endpoint companion parsing
    - misc: rtsx: usb: Ensure mmc child device is active when card is present
    - usb: typec: ucsi: Update power_supply on power role change
    - comedi: fix race between polling and detaching
    - thunderbolt: Fix copy+paste error in match_service_id()
    - usb: typec: fusb302: cache PD RX state
    - cdc-acm: fix race between initial clearing halt and open
    - btrfs: zoned: use filesystem size not disk size for reclaim decision
    - btrfs: abort transaction during log replay if walk_log_tree() failed
    - btrfs: zoned: reserve data_reloc block group on mount
    - btrfs: zoned: requeue to unused block group list if zone finish failed
    - btrfs: zoned: do not remove unwritten non-data block group
    - btrfs: qgroup: set quota enabled bit if quota disable fails flushing
      reservations
    - btrfs: don't ignore inode missing when replaying log tree
    - btrfs: fix ssd_spread overallocation
    - btrfs: qgroup: fix race between quota disable and quota rescan ioctl
    - btrfs: populate otime when logging an inode item
    - btrfs: don't skip accounting in early ENOTTY return in
      btrfs_uring_encoded_read()
    - btrfs: qgroup: fix qgroup create ioctl returning success after quotas
      disabled
    - btrfs: don't skip remaining extrefs if dir not found during log replay
    - btrfs: clear dirty status from extent buffer on error at
      insert_new_root()
    - btrfs: send: use fallocate for hole punching with send stream v2
    - btrfs: fix log tree replay failure due to file with 0 links and extents
    - btrfs: error on missing block group when unaccounting log tree extent
      buffers
    - btrfs: zoned: do not select metadata BG as finish target
    - btrfs: fix wrong length parameter for btrfs_cleanup_ordered_extents()
    - btrfs: fix iteration bug in __qgroup_excl_accounting()
    - btrfs: do not allow relocation of partially dropped subvolumes
    - xfs: fix scrub trace with null pointer in quotacheck
    - userfaultfd: fix a crash in UFFDIO_MOVE when PMD is a migration entry
    - fbdev: Fix vmalloc out-of-bounds write in fast_imageblit
    - fbdev: nvidiafb: add depends on HAS_IOPORT
    - ocfs2: reset folio to NULL when get folio fails
    - net/sched: ets: use old 'nbands' while purging unused classes
    - hv_netvsc: Fix panic during namespace deletion with VF
    - i2c: core: Fix double-free of fwnode in i2c_unregister_device()
    - parisc: Makefile: fix a typo in palo.conf
    - mm, slab: restore NUMA policy support for large kmalloc
    - mm/huge_memory: don't ignore queried cachemode in vmf_insert_pfn_pud()
    - mm/ptdump: take the memory hotplug lock inside ptdump_walk_pgd()
    - mm/shmem, swap: improve cached mTHP handling and fix potential hang
    - mm/kmemleak: avoid soft lockup in __kmemleak_do_cleanup()
    - mm/kmemleak: avoid deadlock by moving pr_warn() outside kmemleak_lock
    - media: uvcvideo: Fix 1-byte out-of-bounds read in uvc_parse_format()
    - media: venus: Fix OOB read due to missing payload bound check
    - media: uvcvideo: Do not mark valid metadata as invalid
    - media: v4l2: Add support for NV12M tiled variants to v4l2_format_info()
    - media: uvcvideo: Turn on the camera if V4L2_EVENT_SUB_FL_SEND_INITIAL
    - media: i2c: vd55g1: Fix return code in vd55g1_enable_streams error path
    - tracing: fprobe: Fix infinite recursion using preempt_*_notrace()
    - tools/nolibc: fix spelling of FD_SETBITMASK in FD_* macros
    - RDMA/siw: Fix the sendmsg byte count in siw_tcp_sendpages
    - KVM: VMX: Extract checking of guest's DEBUGCTL into helper
    - KVM: nVMX: Check vmcs12->guest_ia32_debugctl on nested VM-Enter
    - KVM: VMX: Wrap all accesses to IA32_DEBUGCTL with getter/setter APIs
    - KVM: VMX: Preserve host's DEBUGCTLMSR_FREEZE_IN_SMM while running the
      guest
    - ata: libata-sata: Add link_power_management_supported sysfs attribute
    - io_uring/rw: cast rw->flags assignment to rwf_t
    - firmware: arm_scmi: Convert to SYSTEM_SLEEP_PM_OPS
    - drm/amd/display: Allow DCN301 to clear update flags
    - rcu: Fix racy re-initialization of irq_work causing hangs
    - irqchip/mvebu-gicp: Use resource_size() for ioremap()
    - dm: split write BIOs on zone boundaries when zone append is not emulated
    - io_uring/zcrx: fix null ifq on area destruction
    - io_uring/zcrx: don't leak pages on account failure
    - ACPI: Return -ENODEV from acpi_parse_spcr() when SPCR support is
      disabled
    - Linux 6.16.2
    - Upstream stable to v6.16.2
    - [Config] updateconfigs for v6.16.2

  * Questing update: v6.16.1 upstream stable release (LP: #2121364)
    - audit,module: restore audit logging in load failure case
    - parse_longname(): strrchr() expects NUL-terminated string
    - fs_context: fix parameter name in infofc() macro
    - selftests/landlock: Fix readlink check
    - selftests/landlock: Fix build of audit_test
    - fs/ntfs3: cancle set bad inode after removing name fails
    - landlock: Fix warning from KUnit tests
    - ublk: use vmalloc for ublk_device's __queues
    - hfsplus: make splice write available again
    - hfs: make splice write available again
    - hfsplus: remove mutex_lock check in hfsplus_free_extents
    - Revert "fs/ntfs3: Replace inode_trylock with inode_lock"
    - block: mtip32xx: Fix usage of dma_map_sg()
    - gfs2: Minor do_xmote cancelation fix
    - nbd: fix lockdep deadlock warning
    - md: allow removing faulty rdev during resync
    - kunit/fortify: Add back "volatile" for sizeof() constants
    - ublk: speed up ublk server exit handling
    - ublk: validate ublk server pid
    - md/raid10: fix set but not used variable in sync_request_write()
    - gfs2: No more self recovery
    - nvmet: pci-epf: Do not complete commands twice if nvmet_req_init() fails
    - block: sanitize chunk_sectors for atomic write limits
    - io_uring: fix breakage in EXPERT menu
    - btrfs: remove partial support for lowest level from
      btrfs_search_forward()
    - eventpoll: Fix semi-unbounded recursion
    - eventpoll: fix sphinx documentation build warning
    - block: restore two stage elevator switch while running nr_hw_queue
      update
    - sched/task_stack: Add missing const qualifier to end_of_stack()
    - ASOC: rockchip: fix capture stream handling in rockchip_sai_xfer_stop
    - ASoC: soc-dai: tidyup return value of snd_soc_xlate_tdm_slot_mask()
    - ASoC: amd: acp: Fix pointer assignments for snd_soc_acpi_mach structures
    - ASoC: ops: dynamically allocate struct snd_ctl_elem_value
    - arm64: dts: qcom: x1p42100: Fix thermal sensor configuration
    - ASoC: mediatek: use reserved memory or enable buffer pre-allocation
    - ASoC: mediatek: mt8183-afe-pcm: Support >32 bit DMA addresses
    - arm64: dts: freescale: imx93-tqma9352: Limit BUCK2 to 600mV
    - selftests: Fix errno checking in syscall_user_dispatch test
    - soc: qcom: QMI encoding/decoding for big endian
    - soc: qcom: fix endianness for QMI header
    - arm64: dts: qcom: qcs615: fix a crash issue caused by infinite loop for
      Coresight
    - arm64: dts: qcom: sdm845: Expand IMEM region
    - arm64: dts: qcom: sc7180: Expand IMEM region
    - arm64: dts: qcom: qcs615: disable the CTI device of the camera block
    - arm64: dts: exynos: gs101: Add 'local-timer-stop' to cpuidle nodes
    - arm64: dts: qcom: sa8775p: Correct the interrupt for remoteproc
    - arm64: dts: qcom: msm8976: Make blsp_dma controlled-remotely
    - pm: cpupower: Fix printing of CORE, CPU fields in cpupower-monitor
    - ARM: dts: vfxxx: Correctly use two tuples for timer address
    - usb: host: xhci-plat: fix incorrect type for of_match variable in
      xhci_plat_probe()
    - usb: misc: apple-mfi-fastcharge: Make power supply names unique
    - arm64: dts: rockchip: fix endpoint dtc warning for PX30 ISP
    - arm64: dts: ti: k3-am642-phyboard-electra: Fix PRU-ICSSG Ethernet ports
    - arm64: dts: ti: k3-am62p-verdin: Enable pull-ups on I2C_3_HDMI
    - arm64: dts: ti: k3-am62p-j722s: fix pinctrl-single size
    - ARM: dts: microchip: sama7d65: Add clock name property
    - ARM: dts: microchip: sam9x7: Add clock name property
    - cpufreq: armada-8k: make both cpu masks static
    - firmware: arm_scmi: Fix up turbo frequencies selection
    - x86/bugs: Avoid AUTO after the select step in the retbleed mitigation
    - x86/bugs: Simplify the retbleed=stuff checks
    - x86/bugs: Introduce cdt_possible()
    - x86/bugs: Allow ITS stuffing in eIBRS+retpoline mode also
    - usb: typec: ucsi: yoga-c630: fix error and remove paths
    - mei: vsc: Don't re-init VSC from mei_vsc_hw_reset() on stop
    - mei: vsc: Destroy mutex after freeing the IRQ
    - mei: vsc: Event notifier fixes
    - mei: vsc: Unset the event callback on remove and probe errors
    - mei: vsc: Drop unused vsc_tp_request_irq() and vsc_tp_free_irq()
    - mei: vsc: Run event callback from a workqueue
    - mei: vsc: Fix "BUG: Invalid wait context" lockdep error
    - spi: stm32: Check for cfg availability in stm32_spi_probe
    - drivers: misc: sram: fix up some const issues with recent attribute
      changes
    - rust: devres: require T: Send for Devres
    - power: sequencing: qcom-wcn: fix bluetooth-wifi copypasta for WCN6855
    - arm64: dts: rockchip: Enable eMMC HS200 mode on Radxa E20C
    - ASoC: SDCA: Add missing default in switch in entity_pde_event()
    - staging: gpib: fix unset padding field copy back to userspace
    - staging: fbtft: fix potential memory leak in fbtft_framebuffer_alloc()
    - rust: miscdevice: clarify invariant for `MiscDeviceRegistration`
    - vmci: Prevent the dispatching of uninitialized payloads
    - pps: fix poll support
    - arm64: dts: imx8mp-venice-gw74xx: update name of M2SKT_WDIS2# gpio
    - selftests: vDSO: chacha: Correctly skip test if necessary
    - Revert "vmci: Prevent the dispatching of uninitialized payloads"
    - powercap: dtpm_cpu: Fix NULL pointer dereference in get_pd_power_uw()
    - arm64: dts: ti: k3-am62p-verdin: add SD_1 CD pull-up
    - selftests/nolibc: correctly report errors from printf() and friends
    - usb: early: xhci-dbc: Fix early_ioremap leak
    - tools/nolibc: avoid false-positive -Wmaybe-uninitialized through
      waitpid()
    - arm: dts: ti: omap: Fixup pinheader typo
    - arm64: dts: renesas: r8a779g3-sparrow-hawk-fan-pwm: Add missing install
      target
    - arm64: dts: ti: k3-am62p-verdin: fix PWM_3_DSI GPIO direction
    - staging: gpib: Fix error code in board_type_ioctl()
    - staging: gpib: Fix error handling paths in cb_gpib_probe()
    - soc/tegra: cbb: Clear ERR_FORCE register with ERR_STATUS
    - arm64: dts: rockchip: fix PHY handling for ROCK 4D
    - arm64: dts: st: fix timer used for ticks
    - selftests: breakpoints: use suspend_stats to reliably check suspend
      success
    - ARM: dts: imx6ul-kontron-bl-common: Fix RTS polarity for RS485 interface
    - arm64: dts: imx8mm-beacon: Fix HS400 USDHC clock speed
    - arm64: dts: imx8mn-beacon: Fix HS400 USDHC clock speed
    - arm64: dts: freescale: imx8mp-toradex-smarc: fix lvds dsi mux gpio
    - arm64: dts: rockchip: Fix pinctrl node names for RK3528
    - PM / devfreq: Check governor before using governor->name
    - PM / devfreq: Fix a index typo in trans_stat
    - cpufreq: intel_pstate: Always use HWP_DESIRED_PERF in passive mode
    - cpufreq: Initialize cpufreq-based frequency-invariance later
    - cpufreq: Init policy->rwsem before it may be possibly used
    - arm64: dts: rockchip: Fix UART DMA support for RK3528
    - kexec_core: Fix error code path in the KEXEC_JUMP flow
    - ASoC: SDCA: Update memory allocations to zero initialise
    - ASoC: SDCA: Allow read-only controls to be deferrable
    - staging: greybus: gbphy: fix up const issue with the match callback
    - driver core: auxiliary bus: fix OF node leak
    - samples: mei: Fix building on musl libc
    - soc: qcom: pmic_glink: fix OF node leak
    - interconnect: qcom: sc8280xp: specify num_links for qnm_a1noc_cfg
    - interconnect: qcom: sc8180x: specify num_nodes
    - bus: mhi: host: pci_generic: Fix the modem name of Foxconn T99W640
    - drm/xe: Correct the rev value for the DVSEC entries
    - drm/xe: Correct BMG VSEC header sizing
    - platform/x86: oxpec: Fix turbo register for G1 AMD
    - riscv: dts: sophgo: sg2044: Add missing riscv,cbop-block-size property
    - staging: nvec: Fix incorrect null termination of battery manufacturer
    - selftests/tracing: Fix false failure of subsystem event test
    - MIPS: alchemy: gpio: use new GPIO line value setter callbacks for the
      remaining chips
    - Revert "udmabuf: fix vmap_udmabuf error page set"
    - udmabuf: fix vmap missed offset page
    - drm/rockchip: cleanup fb when drm_gem_fb_afbc_init failed
    - drm/sitronix: Remove broken backwards-compatibility layer
    - drm/connector: hdmi: Evaluate limited range after computing format
    - drm/panfrost: Fix panfrost device variable name in devfreq
    - drm/panthor: Add missing explicit padding in drm_panthor_gpu_info
    - wifi: rtw89: mcc: prevent shift wrapping in rtw89_core_mlsr_switch()
    - wifi: rtw89: sar: drop lockdep assertion in rtw89_set_sar_from_acpi
    - wifi: rtw89: sar: do not assert wiphy lock held until probing is done
    - wifi: rtw89: fix EHT 20MHz TX rate for non-AP STA
    - bpf, sockmap: Fix psock incorrectly pointing to sk
    - netconsole: Only register console drivers when targets are configured
    - bpf, ktls: Fix data corruption when using bpf_msg_pop_data() in ktls
    - net, bpf: Fix RCU usage in task_cls_state() for BPF programs
    - selftests/bpf: fix signedness bug in redir_partial()
    - bpf: handle jset (if a & b ...) as a jump in CFG computation
    - selftests/bpf: Fix unintentional switch case fall through
    - net: ipv6: ip6mr: Fix in/out netdev to pass to the FORWARD chain
    - drm/vmwgfx: Fix Host-Backed userspace on Guest-Backed kernel
    - slub: Fix a documentation build error for krealloc()
    - drm/amdgpu: Remove nbiov7.9 replay count reporting
    - drm/amdgpu/sdma: handle paging queues in amdgpu_sdma_reset_engine()
    - net: mana: Fix potential deadlocks in mana napi ops
    - wifi: mac80211: Fix bssid_indicator for MBSSID in AP mode
    - bpftool: Fix memory leak in dump_xx_nlmsg on realloc failure
    - powerpc/pseries/dlpar: Search DRC index from ibm,drc-indexes for IO add
    - wifi: ath12k: Avoid accessing uninitialized arvif->ar during beacon miss
    - wifi: ath12k: update channel list in worker when wait flag is set
    - wifi: ath12k: Fix double budget decrement while reaping monitor ring
    - wifi: ath12k: Pass ab pointer directly to ath12k_dp_tx_get_encap_type()
    - caif: reduce stack size, again
    - net: annotate races around sk->sk_uid
    - wifi: rtw89: avoid NULL dereference when RX problematic packet on
      unsupported 6 GHz band
    - wifi: rtl818x: Kill URBs before clearing tx status queue
    - drm/amdgpu: fix slab-use-after-free in amdgpu_userq_mgr_fini+0x70c
    - wifi: iwlwifi: Fix memory leak in iwl_mvm_init()
    - iwlwifi: Add missing check for alloc_ordered_workqueue
    - drm/xe/uapi: Correct sync type definition in comments
    - team: replace team lock with rtnl lock
    - wifi: ath11k: clear initialized flag for deinit-ed srng lists
    - wifi: ath12k: Clear auth flag only for actual association in security
      mode
    - tcp: fix tcp_ofo_queue() to avoid including too much DUP SACK range
    - net/mlx5: Check device memory pointer before usage
    - net: dst: annotate data-races around dst->input
    - net: dst: annotate data-races around dst->output
    - net: dst: add four helpers to annotate data-races around dst->dev
    - wifi: iwlwifi: Fix error code in iwl_op_mode_dvm_start()
    - kselftest/arm64: Fix check for setting new VLs in sve-ptrace
    - wifi: mt76: mt7925: fix off by one in mt7925_mcu_hw_scan()
    - bpf: Ensure RCU lock is held around bpf_prog_ksym_find
    - drm/msm/dpu: Fill in min_prefill_lines for SC8180X
    - m68k: Don't unregister boot console needlessly
    - refscale: Check that nreaders and loops multiplication doesn't overflow
    - wifi: mt76: mt7996: Fix secondary link lookup in
      mt7996_mcu_sta_mld_setup_tlv()
    - wifi: mt76: mt7996: Fix possible OOB access in mt7996_tx()
    - wifi: mt76: mt7996: Fix valid_links bitmask in
      mt7996_mac_sta_{add,remove}
    - drm/amdkfd: Move the process suspend and resume out of full access
    - drm/amdgpu: rework queue reset scheduler interaction
    - drm/amdgpu: move force completion into ring resets
    - drm/amdgpu/gfx10: fix KGQ reset sequence
    - drm/amd/pm/powerplay/hwmgr/smu_helper: fix order of mask and value
    - Revert "drm/amdgpu: fix slab-use-after-free in amdgpu_userq_mgr_fini"
    - drm/amdgpu: fix use-after-free in amdgpu_userq_suspend+0x51a/0x5a0
    - wifi: ath12k: Block radio bring-up in FTM mode
    - arm64: fix unnecessary rebuilding when CONFIG_DEBUG_EFI=y
    - drm/rockchip: vop2: fail cleanly if missing a primary plane for a video-
      port
    - drm/rockchip: vop2: Fix the update of LAYER/PORT select registers when
      there are multi display output on rk3588/rk3568
    - sched/psi: Optimize psi_group_change() cpu_clock() usage
    - fbcon: Fix outdated registered_fb reference in comment
    - netfilter: nf_tables: Drop dead code from fill_*_info routines
    - netfilter: nf_tables: adjust lockdep assertions handling
    - drm/panthor: Fix UAF in panthor_gem_create_with_handle() debugfs code
    - wifi: ath12k: update unsupported bandwidth flags in reg rules
    - wifi: ath12k: pack HTT pdev rate stats structs
    - arch: powerpc: defconfig: Drop obsolete CONFIG_NET_CLS_TCINDEX
    - um: rtc: Avoid shadowing err in uml_rtc_start()
    - iommu/amd: Enable PASID and ATS capabilities in the correct order
    - spi: spi-nxp-fspi: Check return value of devm_mutex_init()
    - leds: lp8860: Check return value of devm_mutex_init()
    - net/sched: Restrict conditions for adding duplicating netems to qdisc
      tree
    - net_sched: act_ctinfo: use atomic64_t for three counters
    - RDMA/mlx5: Fix UMR modifying of mkey page size
    - xen: fix UAF in dmabuf_exp_from_pages()
    - sched/deadline: Reset extra_bw to max_bw when clearing root domains
    - iommu/vt-d: Do not wipe out the page table NID when devices detach
    - iommu/vt-d: Fix missing PASID in dev TLB flush with cache_tag_flush_all
    - iommu/arm-smmu: disable PRR on SM8250
    - xen/gntdev: remove struct gntdev_copy_batch from stack
    - tcp: call tcp_measure_rcv_mss() for ooo packets
    - wifi: rtl8xxxu: Fix RX skb size for aggregation disabled
    - wifi: rtw88: Fix macid assigned to TDLS station
    - mwl8k: Add missing check after DMA map
    - wifi: mac80211: use RCU-safe iteration in ieee80211_csa_finish
    - wifi: ath12k: Use HTT_TCL_METADATA_VER_V1 in FTM mode
    - wifi: ath11k: fix sleeping-in-atomic in ath11k_mac_op_set_bitrate_mask()
    - drm/amdgpu/gfx9: fix kiq locking in KCQ reset
    - drm/amdgpu/gfx9.4.3: fix kiq locking in KCQ reset
    - drm/amdgpu/gfx10: fix kiq locking in KCQ reset
    - selftests/bpf: fix implementation of smp_mb()
    - iommu/amd: Fix geometry.aperture_end for V2 tables
    - rcu: Fix delayed execution of hurry callbacks
    - wifi: mac80211: reject TDLS operations when station is not associated
    - wifi: plfxlc: Fix error handling in usb driver probe
    - wifi: cfg80211: Add missing lock in cfg80211_check_and_end_cac()
    - wifi: mac80211: Do not schedule stopped TXQs
    - wifi: mac80211: Don't call fq_flow_idx() for management frames
    - wifi: mac80211: Check 802.11 encaps offloading in
      ieee80211_tx_h_select_key()
    - Reapply "wifi: mac80211: Update skb's control block key in
      ieee80211_tx_dequeue()"
    - wifi: ath12k: fix endianness handling while accessing wmi service bit
    - wifi: brcmfmac: fix P2P discovery failure in P2P peer due to missing P2P
      IE
    - PM: cpufreq: powernv/tracing: Move powernv_throttle trace event
    - wifi: mac80211: Write cnt before copying in ieee80211_copy_rnr_beacon()
    - wifi: nl80211: Set num_sub_specs before looping through sub_specs
    - ring-buffer: Remove ring_buffer_read_prepare_sync()
    - kcsan: test: Initialize dummy variable
    - memcg_slabinfo: Fix use of PG_slab
    - wifi: brcmfmac: cyw: Fix __counted_by to be LE variant
    - wifi: mac80211: fix WARN_ON for monitor mode on some devices
    - arm64/gcs: task_gcs_el0_enable() should use passed task
    - wifi: iwlwifi: mld: decode EOF bit for AMPDUs
    - iommu/vt-d: Fix UAF on sva unbind with pending IOPFs
    - wifi: brcmfmac: fix EXTSAE WPA3 connection failure due to AUTH TX
      failure
    - Bluetooth: btusb: Fix potential NULL dereference on kmalloc failure
    - Bluetooth: hci_sync: fix double free in 'hci_discovery_filter_clear()'
    - Bluetooth: hci_devcd_dump: fix out-of-bounds via dev_coredumpv
    - Bluetooth: btintel: Define a macro for Intel Reset vendor command
    - Bluetooth: btintel_pcie: Make driver wait for alive interrupt
    - Bluetooth: hci_event: Mask data status from LE ext adv reports
    - bpf: Disable migration in nf_hook_run_bpf().
    - bpf: Reject narrower access to pointer ctx fields
    - tools/rv: Do not skip idle in trace
    - selftests: drv-net: Fix remote command checking in require_cmd()
    - selftests: drv-net: tso: enable test cases based on hw_features
    - selftests: drv-net: tso: fix vxlan tunnel flags to get correct gso_type
    - selftests: drv-net: tso: fix non-tunneled tso6 test case name
    - can: peak_usb: fix USB FD devices potential malfunction
    - can: tscan1: Kconfig: add COMPILE_TEST
    - can: tscan1: CAN_TSCAN1 can depend on PC104
    - can: kvaser_pciefd: Store device channel index
    - can: kvaser_usb: Assign netdev.dev_port based on device channel index
    - netfilter: xt_nfacct: don't assume acct name is null-terminated
    - selftests: netfilter: Ignore tainted kernels in interface stress test
    - selftests: netfilter: ipvs.sh: Explicity disable rp_filter on interface
      tunl0
    - net/mlx5e: Clear Read-Only port buffer size in PBMC before update
    - net/mlx5e: Remove skb secpath if xfrm state is not found
    - net/mlx5e: Fix potential deadlock by deferring RX timeout recovery
    - macsec: set IFF_UNICAST_FLT priv flag
    - net: dsa: microchip: Fix wrong rx drop MIB counter for KSZ8863
    - neighbour: Fix null-ptr-deref in neigh_flush_dev().
    - stmmac: xsk: fix negative overflow of budget in zerocopy mode
    - igb: xsk: solve negative overflow of nb_pkts in zerocopy mode
    - selftests: rtnetlink.sh: remove esp4_offload after test
    - vrf: Drop existing dst reference in vrf_ip6_input_dst
    - ipv6: add a retry logic in net6_rt_notify()
    - ipv6: prevent infinite loop in rt6_nlmsg_size()
    - ipv6: fix possible infinite loop in fib6_info_uses_dev()
    - ipv6: annotate data-races around rt->fib6_nsiblings
    - bpf/preload: Don't select USERMODE_DRIVER
    - bpf, arm64: Fix fp initialization for exception boundary
    - RISC-V: KVM: Fix inclusion of Smnpm in the guest ISA bitmap
    - rv: Remove trailing whitespace from tracepoint string
    - rv: Use strings in da monitors tracepoints
    - rv: Adjust monitor dependencies
    - staging: media: atomisp: Fix stack buffer overflow in gmin_get_var_int()
    - fortify: Fix incorrect reporting of read buffer size
    - pinctrl: cirrus: madera-core: Use devm_pinctrl_register_mappings()
    - remoteproc: qcom: pas: Conclude the rename from adsp
    - PCI: rockchip-host: Fix "Unexpected Completion" log message
    - clk: renesas: rzv2h: Fix missing CLK_SET_RATE_PARENT flag for ddiv
      clocks
    - crypto: sun8i-ce - fix nents passed to dma_unmap_sg()
    - crypto: qat - use unmanaged allocation for dc_data
    - crypto: marvell/cesa - Fix engine load inaccuracy
    - crypto: s390/hmac - Fix counter in export state
    - crypto: s390/sha3 - Use cpu byte-order when exporting
    - padata: Fix pd UAF once and for all
    - crypto: ccp - Fix dereferencing uninitialized error pointer
    - crypto: qat - allow enabling VFs in the absence of IOMMU
    - crypto: qat - fix state restore for banks with exceptions
    - mtd: fix possible integer overflow in erase_xfer()
    - clk: davinci: Add NULL check in davinci_lpsc_clk_register()
    - media: imx-jpeg: Account for data_offset when getting image address
    - media: v4l2-ctrls: Fix H264 SEPARATE_COLOUR_PLANE check
    - perf parse-events: Set default GH modifier properly
    - clk: xilinx: vcu: unregister pll_post only if registered correctly
    - power: supply: cpcap-charger: Fix null check for
      power_supply_get_by_name
    - power: reset: POWER_RESET_TORADEX_EC should depend on ARCH_MXC
    - power: supply: max14577: Handle NULL pdata when CONFIG_OF is not set
    - power: supply: qcom_pmi8998_charger: fix wakeirq
    - power: supply: max1720x correct capacity computation
    - crypto: arm/aes-neonbs - work around gcc-15 warning
    - crypto: ahash - Add support for drivers with no fallback
    - crypto: ahash - Stop legacy tfms from using the set_virt fallback path
    - crypto: qat - restore ASYM service support for GEN6 devices
    - PCI: endpoint: pci-epf-vntb: Return -ENOENT if
      pci_epc_get_next_free_bar() fails
    - pinctrl: sunxi: Fix memory leak on krealloc failure
    - pinctrl: berlin: fix memory leak in berlin_pinctrl_build_state()
    - pinctrl: canaan: k230: add NULL check in DT parse
    - pinctrl: canaan: k230: Fix order of DT parse and pinctrl register
    - PCI: Adjust the position of reading the Link Control 2 register
    - PCI: Rename PCIE_RESET_CONFIG_DEVICE_WAIT_MS to
      PCIE_RESET_CONFIG_WAIT_MS
    - PCI: dw-rockchip: Wait PCIE_RESET_CONFIG_WAIT_MS after link-up IRQ
    - PCI: qcom: Wait PCIE_RESET_CONFIG_WAIT_MS after link-up IRQ
    - soundwire: Correct some property names
    - dmaengine: mmp: Fix again Wvoid-pointer-to-enum-cast warning
    - soundwire: debugfs: move debug statement outside of error handling
    - phy: qualcomm: phy-qcom-eusb2-repeater: Don't zero-out registers
    - fanotify: sanitize handle_type values when reporting fid
    - clk: clk-axi-clkgen: fix fpfd_max frequency for zynq
    - RDMA/ipoib: Use parent rdma device net namespace
    - RDMA/uverbs: Check CAP_NET_RAW in user namespace for flow create
    - RDMA/mlx5: Check CAP_NET_RAW in user namespace for flow create
    - RDMA/mlx5: Check CAP_NET_RAW in user namespace for anchor create
    - RDMA/uverbs: Check CAP_NET_RAW in user namespace for QP create
    - RDMA/uverbs: Check CAP_NET_RAW in user namespace for RAW QP create
    - leds: tps6131x: Add V4L2_FLASH_LED_CLASS dependency
    - RDMA/mlx5: Check CAP_NET_RAW in user namespace for devx create
    - RDMA/nldev: Check CAP_NET_RAW in user namespace for QP modify
    - RDMA/counter: Check CAP_NET_RAW check in user namespace for RDMA
      counters
    - Fix dma_unmap_sg() nents value
    - leds: pca955x: Avoid potential overflow when filling default_label (take
      2)
    - gitignore: allow .pylintrc to be tracked
    - perf tools: Fix use-after-free in help_unknown_cmd()
    - perf dso: Add missed dso__put to dso__load_kcore
    - mtd: spi-nor: spansion: Fixup params->set_4byte_addr_mode for SEMPER
    - perf sched: Make sure it frees the usage string
    - perf sched: Free thread->priv using priv_destructor
    - perf sched: Fix memory leaks in 'perf sched map'
    - perf sched: Fix thread leaks in 'perf sched timehist'
    - perf sched: Fix memory leaks for evsel->priv in timehist
    - perf sched: Use RC_CHK_EQUAL() to compare pointers
    - perf sched: Fix memory leaks in 'perf sched latency'
    - clk: spacemit: mark K1 pll1_d8 as critical
    - RDMA/hns: Fix double destruction of rsv_qp
    - RDMA/hns: Fix HW configurations not cleared in error flow
    - crypto: ccp - Fix locking on alloc failure handling
    - crypto: inside-secure - Fix `dma_unmap_sg()` nents value
    - crypto: ccp - Fix crash when rebind ccp device for ccp.ko
    - RDMA/hns: Get message length of ack_req from FW
    - RDMA/hns: Fix accessing uninitialized resources
    - RDMA/hns: Drop GFP_NOWARN
    - RDMA/hns: Fix -Wframe-larger-than issue
    - tracing: Use queue_rcu_work() to free filters
    - kernel: trace: preemptirq_delay_test: use offstack cpu mask
    - RDMA/uverbs: Add empty rdma_uattrs_has_raw_cap() declaration
    - proc: use the same treatment to check proc_lseek as ones for
      proc_read_iter et.al
    - cxl/core: Introduce a new helper cxl_resource_contains_addr()
    - cxl/edac: Fix wrong dpa checking for PPR operation
    - pinmux: fix race causing mux_owner NULL with active mux_usecount
    - perf tests bp_account: Fix leaked file descriptor
    - perf hwmon_pmu: Avoid shortening hwmon PMU name
    - perf python: Fix thread check in pyrf_evsel__read
    - perf python: Correct pyrf_evsel__read for tool PMUs
    - RDMA/mana_ib: Fix DSCP value in modify QP
    - clk: thead: th1520-ap: Correctly refer the parent of osc_12m
    - ext4: fix insufficient credits calculation in ext4_meta_trans_blocks()
    - clk: sunxi-ng: v3s: Fix de clock definition
    - scsi: ibmvscsi_tgt: Fix dma_unmap_sg() nents value
    - scsi: core: Fix kernel doc for scsi_track_queue_full()
    - scsi: elx: efct: Fix dma_unmap_sg() nents value
    - scsi: mvsas: Fix dma_unmap_sg() nents value
    - scsi: isci: Fix dma_unmap_sg() nents value
    - PCI: Fix driver_managed_dma check
    - watchdog: ziirave_wdt: check record length in ziirave_firm_verify()
    - selftests/cgroup: fix cpu.max tests
    - ext4: fix inode use after free in ext4_end_io_rsv_work()
    - ext4: Make sure BH_New bit is cleared in ->write_end handler
    - clk: at91: sam9x7: update pll clk ranges
    - hwrng: mtk - handle devm_pm_runtime_enable errors
    - crypto: keembay - Fix dma_unmap_sg() nents value
    - crypto: img-hash - Fix dma_unmap_sg() nents value
    - crypto: qat - disable ZUC-256 capability for QAT GEN5
    - crypto: qat - fix virtual channel configuration for GEN6 devices
    - crypto: krb5 - Fix memory leak in krb5_test_one_prf()
    - cgroup: Add compatibility option for content of /proc/cgroups
    - soundwire: stream: restore params when prepare ports fail
    - PCI: endpoint: pci-epf-vntb: Fix the incorrect usage of __iomem
      attribute
    - clk: imx95-blk-ctl: Fix synchronous abort
    - phy: qcom: phy-qcom-snps-eusb2: Add missing write from init sequence
    - remoteproc: xlnx: Disable unsupported features
    - fs/orangefs: Allow 2 more characters in do_c_string()
    - clk: thead: th1520-ap: Describe mux clocks with clk_mux
    - tools subcmd: Tighten the filename size in check_if_command_finished
    - perf pmu: Switch FILENAME_MAX to NAME_MAX
    - dmaengine: mv_xor: Fix missing check after DMA map and missing unmap
    - dmaengine: nbpfaxi: Add missing check after DMA map
    - mfd: tps65219: Update TPS65214 MFD cell's GPIO compatible string
    - ASoC: SDCA: Fix some holes in the regmap readable/writeable helpers
    - ASoC: fsl_xcvr: get channel status data when PHY is not exists
    - ASoC: fsl_xcvr: get channel status data with firmware exists
    - clk: spacemit: ccu_pll: fix error return value in recalc_rate callback
    - sh: Do not use hyphen in exported variable name
    - perf tools: Remove libtraceevent in .gitignore
    - clk: clocking-wizard: Fix the round rate handling for versal
    - crypto: qat - fix DMA direction for compression on GEN2 devices
    - crypto: qat - fix seq_file position update in adf_ring_next()
    - fbdev: imxfb: Check fb_add_videomode to prevent null-ptr-deref
    - smb: client: allow parsing zero-length AV pairs
    - drm/xe/configfs: Fix pci_dev reference leak
    - jfs: fix metapage reference count leak in dbAllocCtl
    - mtd: rawnand: atmel: Fix dma_mapping_error() address
    - mtd: rawnand: rockchip: Add missing check after DMA map
    - mtd: rawnand: atmel: set pmecc data setup time
    - drm/xe/vf: Disable CSC support on VF
    - selftests: ALSA: fix memory leak in utimer test
    - ALSA: usb: scarlett2: Fix missing NULL check
    - perf record: Cache build-ID of hit DSOs only
    - bpf: Add cookie object to bpf maps
    - bpf: Move bpf map owner out of common struct
    - bpf: Move cgroup iterator helpers to bpf.h
    - bpf: Fix oob access in cgroup local storage
    - vdpa/mlx5: Fix needs_teardown flag calculation
    - vhost-scsi: Fix log flooding with target does not exist errors
    - vhost-scsi: Fix check for inline_sg_cnt exceeding preallocated limit
    - vdpa/mlx5: Fix release of uninitialized resources on error path
    - vdpa: Fix IDR memory leak in VDUSE module exit
    - vhost: Reintroduce kthread API and add mode selection
    - bpf: Check flow_dissector ctx accesses are aligned
    - bpf: Check netfilter ctx accesses are aligned
    - dm-flakey: Fix corrupt_bio_byte setup checks
    - uprobes: revert ref_ctr_offset in uprobe_unregister error path
    - scripts: gdb: move MNT_* constants to gdb-parsed
    - squashfs: use folios in squashfs_bio_read_cached()
    - squashfs: fix incorrect argument to sizeof in kmalloc_array call
    - i3c: fix module_i3c_i2c_driver() with I3C=n
    - i3c: master: svc: Fix npcm845 FIFO_EMPTY quirk
    - module: Restore the moduleparam prefix length check
    - ucount: fix atomic_long_inc_below() argument type
    - rtc: ds1307: fix incorrect maximum clock rate handling
    - rtc: hym8563: fix incorrect maximum clock rate handling
    - rtc: nct3018y: fix incorrect maximum clock rate handling
    - rtc: pcf85063: fix incorrect maximum clock rate handling
    - rtc: pcf8563: fix incorrect maximum clock rate handling
    - rtc: rv3028: fix incorrect maximum clock rate handling
    - f2fs: turn off one_time when forcibly set to foreground GC
    - f2fs: fix bio memleak when committing super block
    - f2fs: fix to avoid invalid wait context issue
    - f2fs: compress: change the first parameter of page_array_{alloc,free} to
      sbi
    - f2fs: compress: fix UAF of f2fs_inode_info in f2fs_free_dic
    - f2fs: fix KMSAN uninit-value in extent_info usage
    - f2fs: fix to check upper boundary for value of gc_boost_zoned_gc_percent
    - f2fs: fix to check upper boundary for gc_valid_thresh_ratio
    - f2fs: fix to check upper boundary for gc_no_zoned_gc_percent
    - f2fs: doc: fix wrong quota mount option description
    - f2fs: fix to avoid UAF in f2fs_sync_inode_meta()
    - f2fs: fix to avoid panic in f2fs_evict_inode
    - f2fs: fix to avoid out-of-boundary access in devs.path
    - f2fs: vm_unmap_ram() may be called from an invalid context
    - f2fs: fix to update upper_p in __get_secs_required() correctly
    - f2fs: fix to calculate dirty data during has_not_enough_free_secs()
    - f2fs: fix to trigger foreground gc during f2fs_map_blocks() in lfs mode
    - exfat: fdatasync flag should be same like generic_write_sync()
    - i2c: muxes: mule: Fix an error handling path in mule_i2c_mux_probe()
    - vfio: Fix unbalanced vfio_df_close call in no-iommu mode
    - vfio: Prevent open_count decrement to negative
    - vfio/pds: Fix missing detach_ioas op
    - vfio/pci: Separate SR-IOV VF dev_set
    - scsi: mpt3sas: Fix a fw_event memory leak
    - scsi: Revert "scsi: iscsi: Fix HW conn removal use after free"
    - scsi: ufs: core: Use link recovery when h8 exit fails during runtime
      resume
    - scsi: sd: Make sd shutdown issue START STOP UNIT appropriately
    - kconfig: qconf: fix ConfigList::updateListAllforAll()
    - vfio/pci: Do vf_token checks for VFIO_DEVICE_BIND_IOMMUFD
    - sched/psi: Fix psi_seq initialization
    - padata: Remove comment for reorder_work
    - PCI: pnv_php: Clean up allocated IRQs on unplug
    - PCI: pnv_php: Work around switches with broken presence detection
    - powerpc/eeh: Export eeh_unfreeze_pe()
    - powerpc/eeh: Make EEH driver device hotplug safe
    - PCI: pnv_php: Fix surprise plug detection and recovery
    - tools/power turbostat: regression fix: --show C1E%
    - pNFS/flexfiles: don't attempt pnfs on fatal DS errors
    - NFS: Fix wakeup of __nfs_lookup_revalidate() in unblock_revalidate()
    - NFS: Fix filehandle bounds checking in nfs_fh_to_dentry()
    - NFSv4.2: another fix for listxattr
    - NFS: Fixup allocation flags for nfsiod's __GFP_NORETRY
    - ARM: s3c/gpio: complete the conversion to new GPIO value setters
    - md/md-cluster: handle REMOVE message earlier
    - kcm: Fix splice support
    - netpoll: prevent hanging NAPI when netcons gets enabled
    - phy: mscc: Fix parsing of unicast frames
    - net: ipa: add IPA v5.1 and v5.5 to ipa_version_string()
    - net: mdio_bus: Use devm for getting reset GPIO
    - pptp: ensure minimal skb length in pptp_xmit()
    - nvmet: initialize discovery subsys after debugfs is initialized
    - s390/ap: Unmask SLCF bit in card and queue ap functions sysfs
    - s390/mm: Set high_memory at the end of the identity mapping
    - netlink: specs: ethtool: fix module EEPROM input/output arguments
    - block: Fix default IO priority if there is no IO context
    - block: ensure discard_granularity is zero when discard is not supported
    - ASoC: tas2781: Fix the wrong step for TLV on tas2781
    - spi: cs42l43: Property entry should be a null-terminated array
    - net: airoha: Fix PPE table access in airoha_ppe_debugfs_foe_show()
    - net/mlx5: Correctly set gso_segs when LRO is used
    - selftests: avoid using ifconfig
    - ipv6: reject malicious packets in ipv6_gso_segment()
    - net: mdio: mdio-bcm-unimac: Correct rate fallback logic
    - net: drop UFO packets in udp_rcv_segment()
    - net/sched: taprio: enforce minimum value for picos_per_byte
    - md: make rdev_addable usable for rcu mode
    - sunrpc: fix client side handling of tls alerts
    - drm/xe/pf: Disable PF restart worker on device removal
    - x86/irq: Plug vector setup race
    - eth: fbnic: unlink NAPIs from queues on error to open
    - ipa: fix compile-testing with qcom-mdt=m
    - net: devmem: fix DMA direction on unmapping
    - net: airoha: npu: Add missing MODULE_FIRMWARE macros
    - benet: fix BUG when creating VFs
    - Revert "net: mdio_bus: Use devm for getting reset GPIO"
    - net/sched: mqprio: fix stack out-of-bounds write in tc entry parsing
    - s390/mm: Allocate page table with PAGE_SIZE granularity
    - eth: fbnic: remove the debugging trick of super high page bias
    - eth: fbnic: Fix tx_dropped reporting
    - eth: fbnic: Lock the tx_dropped update
    - NFS/localio: nfs_close_local_fh() fix check for file closed
    - NFS/localio: nfs_uuid_put() fix races with nfs_open/close_local_fh()
    - NFS/localio: nfs_uuid_put() fix the wake up after unlinking the file
    - net: ti: icssg-prueth: Fix skb handling for XDP_PASS
    - irqchip: Build IMX_MU_MSI only on ARM
    - ASoC: SOF: Intel: hda-sdw-bpt: fix SND_SOF_SOF_HDA_SDW_BPT dependencies
    - ALSA: hda/ca0132: Fix missing error handling in ca0132_alt_select_out()
    - s390/boot: Fix startup debugging log
    - smb: server: remove separate empty_recvmsg_queue
    - smb: server: make sure we call ib_dma_unmap_single() only if we called
      ib_dma_map_single already
    - smb: server: let recv_done() consistently call
      put_recvmsg/smb_direct_disconnect_rdma_connection
    - smb: server: let recv_done() avoid touching data_transfer after
      cleanup/move
    - smb: client: remove separate empty_packet_queue
    - smb: client: make sure we call ib_dma_unmap_single() only if we called
      ib_dma_map_single already
    - smb: client: let recv_done() cleanup before notifying the callers.
    - smb: client: let recv_done() avoid touching data_transfer after
      cleanup/move
    - nvmet: exit debugfs after discovery subsystem exits
    - pptp: fix pptp_xmit() error path
    - smb: client: return an error if rdma_connect does not return within 5
      seconds
    - tools/power turbostat: Fix bogus SysWatt for forked program
    - tools/power turbostat: Fix DMR support
    - nfsd: don't set the ctime on delegated atime updates
    - nfsd: avoid ref leak in nfsd_open_local_fh()
    - sunrpc: fix handling of server side tls alerts
    - perf/core: Preserve AUX buffer allocation failure result
    - perf/core: Don't leak AUX buffer refcount on allocation failure
    - perf/core: Exit early on perf_mmap() fail
    - perf/core: Handle buffer mapping fail correctly in perf_mmap()
    - perf/core: Prevent VMA split of buffer mappings
    - selftests/perf_events: Add a mmap() correctness test
    - net/packet: fix a race in packet_set_ring() and packet_notifier()
    - vsock: Do not allow binding to VMADDR_PORT_ANY
    - ksmbd: fix null pointer dereference error in generate_encryptionkey
    - ksmbd: fix Preauh_HashValue race condition
    - ksmbd: fix corrupted mtime and ctime in smb2_open
    - smb: client: fix netns refcount leak after net_passive changes
    - smb: client: set symlink type as native for POSIX mounts
    - smb: client: default to nonativesocket under POSIX mounts
    - ksmbd: limit repeated connections from clients with the same IP
    - smb: server: Fix extension string in ksmbd_extract_shortname()
    - USB: serial: option: add Foxconn T99W709
    - Bluetooth: btusb: Add USB ID 3625:010b for TP-LINK Archer TX10UB Nano
    - net: usbnet: Avoid potential RCU stall on LINK_CHANGE event
    - net: usbnet: Fix the wrong netif_carrier_on() call
    - x86/sev: Evict cache lines during SNP memory validation
    - ALSA: intel_hdmi: Fix off-by-one error in __hdmi_lpe_audio_probe()
    - ALSA: scarlett2: Add retry on -EPROTO from scarlett2_usb_tx()
    - ALSA: hda/realtek - Fix mute LED for HP Victus 16-r1xxx
    - ALSA: hda/realtek - Fix mute LED for HP Victus 16-s0xxx
    - ALSA: hda/realtek - Fix mute LED for HP Victus 16-d1xxx (MB 8A26)
    - platform/x86/intel/pmt: fix a crashlog NULL pointer access
    - x86/fpu: Delay instruction pointer fixup until after warning
    - KVM: x86: Convert vcpu_run()'s immediate exit param into a generic
      bitmap
    - KVM: x86: Drop kvm_x86_ops.set_dr6() in favor of a new KVM_RUN flag
    - KVM: VMX: Allow guest to set DEBUGCTL.RTM_DEBUG if RTM is supported
    - KVM: arm64: Check for SYSREGS_ON_CPU before accessing the CPU state
    - KVM: arm64: Filter out HCR_EL2 bits when running in hypervisor context
    - zloop: fix KASAN use-after-free of tag set
    - s390/mm: Remove possible false-positive warning in pte_free_defer()
    - MIPS: mm: tlb-r4k: Uniquify TLB entries on init
    - mm/hmm: move pmd_to_hmm_pfn_flags() to the respective #ifdeffery
    - mm: swap: correctly use maxpages in swapon syscall to avoid potential
      deadloop
    - mm: swap: fix potential buffer overflow in setup_clusters()
    - mm: swap: move nr_swap_pages counter decrement from folio_alloc_swap()
      to swap_range_alloc()
    - mm: shmem: fix the shmem large folio allocation for the i915 driver
    - usb: gadget: uvc: Initialize frame-based format color matching
      descriptor
    - perf/arm-ni: Set initial IRQ affinity
    - media: ti: j721e-csi2rx: fix list_del corruption
    - HID: apple: validate feature-report field count to prevent NULL pointer
      dereference
    - USB: gadget: f_hid: Fix memory leak in hidg_bind error path
    - HID: core: Harden s32ton() against conversion to 0 bits
    - HID: magicmouse: avoid setting up battery timer when not needed
    - HID: apple: avoid setting up battery timer for devices without battery
    - usb: gadget : fix use-after-free in composite_dev_cleanup()
    - wifi: ath12k: install pairwise key first
    - mm: fix a UAF when vma->mm is freed after vma->vm_refcnt got dropped
    - Linux 6.16.1
    - Upstream stable to v6.16.1
    - [Config] updateconfigs for v6.16.1

  * Miscellaneous Ubuntu changes
    - [Packaging] Switch to linux-6.16
    - [Packaging] Use host bpftool if doing cross-compiling
    - [Packaging] Don't suggest linux-modules-extra

 -- Timo Aaltonen <timo.aaltonen at canonical.com>  Mon, 25 Aug 2025
18:29:41 +0300

** Changed in: linux-6.16 (Ubuntu Questing)
       Status: New => Fix Released

-- 
You received this bug notification because you are a member of Ubuntu
Package Archive Administrators, which is a bug assignee.
https://bugs.launchpad.net/bugs/2121372

Title:
  questing/linux-6.16: 6.16.0-17.17 -proposed tracker

To manage notifications about this bug go to:
https://bugs.launchpad.net/canonical-signing-jobs/task00/+bug/2121372/+subscriptions