merge-upstream/v6.12.49 from branch/tag: upstream/v6.12.49 into branch: cos-6.12
Changelog:
-------------------------------------------------------------
Ajay.Kathat@microchip.com (1):
wifi: wilc1000: avoid buffer overflow in WID string configuration
Alexey Nepomnyashih (1):
net: liquidio: fix overflow in octeon_init_instr_queue()
Amadeusz Sławiński (1):
ASoC: Intel: catpt: Expose correct bit depth to userspace
Anderson Nascimento (1):
net/tcp: Fix a NULL pointer dereference when using TCP-AO with TCP_REPAIR
Antheas Kapenekakis (2):
platform/x86: asus-wmi: Fix ROG button mapping, tablet mode on ASUS ROG Z13
platform/x86: asus-wmi: Re-add extra keys to ignore_key_wlan quirk
Borislav Petkov (1):
x86/bugs: KVM: Add support for SRSO_MSR_FIX
Borislav Petkov (AMD) (1):
x86/bugs: Add SRSO_USER_KERNEL_NO support
Bruno Thomsen (1):
rtc: pcf2127: fix SPI command byte for PCF2131 backport
Charles Keepax (3):
ASoC: wm8940: Correct PLL rate rounding
ASoC: wm8940: Correct typo in control name
ASoC: wm8974: Correct PLL rate rounding
Chen Ridong (1):
cgroup: split cgroup_destroy_wq into 3 workqueues
Christoph Hellwig (1):
nvme: fix PI insert on write
Colin Ian King (1):
ASoC: SOF: Intel: hda-stream: Fix incorrect variable used in error message
Dan Carpenter (1):
drm/xe: Fix a NULL vs IS_ERR() in xe_vm_add_compute_exec_queue()
David Laight (7):
minmax.h: add whitespace around operators and after commas
minmax.h: update some comments
minmax.h: reduce the #define expansion of min(), max() and clamp()
minmax.h: use BUILD_BUG_ON_MSG() for the lo < hi test in clamp()
minmax.h: move all the clamp() definitions after the min/max() ones
minmax.h: simplify the variants of clamp()
minmax.h: remove some #defines that are only expanded once
Duoming Zhou (2):
cnic: Fix use-after-free bugs in cnic_delete_task
octeontx2-pf: Fix use-after-free bugs in otx2_sync_tstamp()
Eugene Koira (1):
iommu/vt-d: Fix __domain_mapping()'s usage of switch_to_super_page()
Filipe Manana (1):
btrfs: fix invalid extref key setup when replaying dentry
Geert Uytterhoeven (1):
pcmcia: omap_cf: Mark driver struct with __refdata to prevent section mismatch
Geliang Tang (1):
selftests: mptcp: sockopt: fix error messages
Greg Kroah-Hartman (1):
Linux 6.12.49
Guangshuo Li (1):
LoongArch: vDSO: Check kcalloc() result in init_vdso()
H. Nikolaus Schaller (2):
power: supply: bq27xxx: fix error return in case of no bq27000 hdq battery
power: supply: bq27xxx: restrict no-battery detection to bq27000
Hangbin Liu (2):
bonding: set random address only when slaves already exist
bonding: don't set oif to bond dev when getting NS target destination
Hans de Goede (1):
net: rfkill: gpio: Fix crash due to dereferencering uninitialized pointer
Herbert Xu (2):
crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg
crypto: af_alg - Set merge to zero early in af_alg_sendmsg
Huacai Chen (1):
LoongArch: Align ACPI structures if ARCH_STRICT_ALIGN enabled
Hugh Dickins (2):
mm: revert "mm: vmscan.c: fix OOM on swap stress test"
mm/gup: check ref_count instead of lru before migration
Håkon Bugge (1):
rds: ib: Increment i_fastreg_wrs before bailing out
Ioana Ciornei (1):
dpaa2-switch: fix buffer pool seeding for control traffic
Ivan Lipski (1):
drm/amd/display: Allow RX6xxx & RX7700 to invoke amdgpu_irq_get/put
Jacob Keller (2):
ice: store max_frame and rx_buf_len only in ice_rx_ring
ice: fix Rx page leak on multi-buffer frames
Jakub Kicinski (1):
tls: make sure to abort the stream if headers are bogus
Jamie Bainbridge (1):
qed: Don't collect too many protection override GRC elements
Jens Axboe (4):
io_uring: backport io_should_terminate_tw()
io_uring: include dying ring in task_work "should cancel" state
io_uring/msg_ring: kill alloc_cache for io_kiocb allocations
io_uring/kbuf: drop WARN_ON_ONCE() from incremental length check
Jianbo Liu (1):
net/mlx5e: Harden uplink netdev access against device unbind
Kan Liang (1):
perf/x86/intel: Fix crash in icl_update_topdown_event()
Kohei Enju (1):
igc: don't fail igc_probe() on LED setup error
Krzysztof Kozlowski (1):
ASoC: qcom: q6apm-lpass-dais: Fix NULL pointer dereference if source graph failed
Kuniyuki Iwashima (1):
tcp: Clear tcp_sk(sk)->fastopen_rsk in tcp_disconnect().
Lachlan Hodges (1):
wifi: mac80211: increase scan_ies_len for S1G
Li Zhe (1):
gup: optimize longterm pin_user_pages() for large folio
Liao Yuanhong (1):
wifi: mac80211: fix incorrect type for ret
Loic Poulain (1):
drm: bridge: anx7625: Fix NULL pointer dereference with early IRQ
Maciej Fijalkowski (1):
i40e: remove redundant memory barrier when cleaning Tx descs
Maciej S. Szmigiero (1):
KVM: SVM: Sync TPR from LAPIC into VMCB::V_TPR even if AVIC is active
Mathias Nyman (2):
xhci: dbc: decouple endpoint allocation from initialization
xhci: dbc: Fix full DbC transfer ring after several reconnects
Matthieu Baerts (NGI0) (7):
mptcp: set remote_deny_join_id0 on SYN recv
selftests: mptcp: userspace pm: validate deny-join-id0 flag
mptcp: tfo: record 'deny join id0' info
mptcp: propagate shutdown to subflows when possible
selftests: mptcp: connect: catch IO errors on listen side
selftests: mptcp: avoid spurious errors on TCP disconnect
mptcp: pm: nl: announce deny-join-id0 flag
Miaoqian Lin (1):
um: virtio_uml: Fix use-after-free after put_device in probe
Mikulas Patocka (2):
dm-raid: don't set io_min and io_opt for raid1
dm-stripe: fix a possible integer overflow
Mohammad Rafi Shaik (2):
ASoC: qcom: audioreach: Fix lpaif_type configuration for the I2S interface
ASoC: qcom: q6apm-lpass-dais: Fix missing set_fmt DAI op for I2S
Namjae Jeon (1):
ksmbd: smbdirect: validate data_offset and data_length field of smb_direct_data_transfer
Nathan Chancellor (1):
nilfs2: fix CFI failure when accessing /sys/fs/nilfs2/features/*
Niklas Neronin (2):
usb: xhci: introduce macro for ring segment list iteration
usb: xhci: remove option to change a default ring's TRB cycle bit
Paulo Alcantara (1):
smb: client: fix filename matching of deferred files
Pavel Begunkov (1):
io_uring/cmd: let cmds to know about dying task
Praful Adiga (1):
ALSA: hda/realtek: Fix mute led for HP Laptop 15-dw4xx
Qi Xi (1):
drm: bridge: cdns-mhdp8546: Fix missing mutex unlock on error path
Qu Wenruo (1):
btrfs: tree-checker: fix the incorrect inode ref size check
Sankararaman Jayaraman (1):
vmxnet3: unregister xdp rxq info in the reset path
Sathesh B Edara (1):
octeon_ep: fix VF MAC address lifecycle handling
Sean Christopherson (1):
KVM: SVM: Set/clear SRSO's BP_SPEC_REDUCE on 0 <=> 1 VM count transitions
Shivank Garg (1):
mm: add folio_expected_ref_count() for reference count calculation
Shuicheng Lin (1):
drm/xe/tile: Release kobject for the failure path
Stefan Metzmacher (3):
ksmbd: smbdirect: verify remaining_data_length respects max_fragmented_recv_size
smb: client: let smbd_destroy() call disable_work_sync(&info->post_send_credits_work)
smb: client: fix smbdirect_recv_io leak in smbd_negotiate() error path
Takashi Sakamoto (1):
ALSA: firewire-motu: drop EPOLLOUT from poll return values as write is not supported
Tao Cui (1):
LoongArch: Check the return value when creating kobj
Tariq Toukan (1):
Revert "net/mlx5e: Update and set Xon/Xoff upon port speed set"
Thomas Fourier (1):
mmc: mvsdio: Fix dma_unmap_sg() nents value
Tiezhu Yang (4):
LoongArch: Update help info of ARCH_STRICT_ALIGN
objtool/LoongArch: Mark types based on break immediate code
objtool/LoongArch: Mark special atomic instruction as INSN_BUG type
LoongArch: Fix unreliable stack for live patching
Tiwei Bie (1):
um: Fix FD copy size in os_rcv_fd_msg()
Vasant Hegde (1):
iommu/amd/pgtbl: Fix possible race while increase page table level
Yang Xiuwei (1):
io_uring: fix incorrect io_kiocb reference in io_link_skb
Yeounsu Moon (1):
net: natsemi: fix `rx_dropped` double accounting on `netif_rx()` failure
BUG=b/447536172
TEST=tryjob, validation and K8s e2e
RELEASE_NOTE=Updated the Linux kernel to v6.12.49.
Change-Id: I400cc644152ac3aad44caebccf7e4f24b592b7cd
Signed-off-by: COS Kernel Merge Bot <cloud-image-merge-automation@prod.google.com>
Reviewed-on: https://cos-review.googlesource.com/c/third_party/kernel/+/112257
Reviewed-by: Kevin Berry <kpberry@google.com>
Reviewed-by: Robert Kolchmeyer <rkolchmeyer@google.com>
Tested-by: Cusky Presubmit Bot <presubmit@cos-infra-prod.iam.gserviceaccount.com>
