Linux/linux 1f988d0drivers/hid hid-appletb-kbd.c hid-elecom.c

Merge tag 'hid-for-linus-2025070502' of git://git.kernel.org/pub/scm/linux/kernel/git/hid/hid

Pull HID fixes from Jiri Kosina:

 - Memory corruption fixes in hid-appletb-kbd driver (Qasim Ijaz)

 - New device ID in hid-elecom driver (Leonard Dizon)

 - Fixed several HID debugfs contants (Vicki Pfau)

* tag 'hid-for-linus-2025070502' of git://git.kernel.org/pub/scm/linux/kernel/git/hid/hid:
  HID: appletb-kbd: fix slab use-after-free bug in appletb_kbd_probe
  HID: Fix debug name for BTN_GEAR_DOWN, BTN_GEAR_UP, BTN_WHEEL
  HID: elecom: add support for ELECOM HUGE 019B variant
  HID: appletb-kbd: fix memory corruption of input_handler_list
DeltaFile
+9-5drivers/hid/hid-appletb-kbd.c
+4-2drivers/hid/hid-elecom.c
+2-2drivers/hid/hid-debug.c
+2-1drivers/hid/hid-ids.h
+2-1drivers/hid/hid-quirks.c
+19-115 files

Linux/linux 05df919fs/smb/client reparse.c fs_context.c

Merge tag 'v6.16-rc4-smb3-client-fixes' of git://git.samba.org/sfrench/cifs-2.6

Pull smb client fixes from Steve French:

 - Two reconnect fixes including one for a reboot/reconnect race

 - Fix for incorrect file type that can be returned by SMB3.1.1 POSIX
   extensions

 - tcon initialization fix

 - Fix for resolving Windows symlinks with absolute paths

* tag 'v6.16-rc4-smb3-client-fixes' of git://git.samba.org/sfrench/cifs-2.6:
  smb: client: fix native SMB symlink traversal
  smb: client: fix race condition in negotiate timeout by using more precise timing
  cifs: all initializations for tcon should happen in tcon_info_alloc
  smb: client: fix warning when reconnecting channel
  smb: client: fix readdir returning wrong type with POSIX extensions
DeltaFile
+13-9fs/smb/client/reparse.c
+7-10fs/smb/client/fs_context.c
+5-10fs/smb/client/connect.c
+4-6fs/smb/client/smb2pdu.c
+6-0fs/smb/client/misc.c
+2-0fs/smb/client/cifsglob.h
+37-352 files not shown
+39-368 files

Linux/linux fd860cdDocumentation/devicetree/bindings/i2c realtek,rtl9301-i2c.yaml, drivers/i2c/busses i2c-microchip-corei2c.c i2c-designware-master.c

Merge tag 'i2c-for-6.16-rc5' of git://git.kernel.org/pub/scm/linux/kernel/git/wsa/linux

Pull i2c fixes from Wolfram Sang:

 - designware: initialise msg_write_idx during transfer

 - microchip: check return value from core xfer call

 - realtek: add 'reg' property constraint to the device tree

* tag 'i2c-for-6.16-rc5' of git://git.kernel.org/pub/scm/linux/kernel/git/wsa/linux:
  dt-bindings: i2c: realtek,rtl9301: Fix missing 'reg' constraint
  i2c: microchip-core: re-fix fake detections w/ i2cdetect
  i2c/designware: Fix an initialization issue
DeltaFile
+5-1drivers/i2c/busses/i2c-microchip-corei2c.c
+2-1Documentation/devicetree/bindings/i2c/realtek,rtl9301-i2c.yaml
+1-0drivers/i2c/busses/i2c-designware-master.c
+8-23 files

Linux/linux a79a588drivers/base/power main.c, drivers/powercap intel_rapl_common.c

Merge tag 'pm-6.16-rc5' of git://git.kernel.org/pub/scm/linux/kernel/git/rafael/linux-pm

Pull power management fixes from Rafael Wysocki:
 "These address system suspend failures under memory pressure in some
  configurations, fix up RAPL handling on platforms where PL1 cannot be
  disabled, and fix a documentation typo:

   - Prevent the Intel RAPL power capping driver from allowing PL1 to be
     exceeded by mistake on systems when PL1 cannot be disabled (Zhang
     Rui)

   - Fix a typo in the ABI documentation (Sumanth Gavini)

   - Allow swap to be used a bit longer during system suspend and
     hibernation to avoid suspend failures under memory pressure (Mario
     Limonciello)"

* tag 'pm-6.16-rc5' of git://git.kernel.org/pub/scm/linux/kernel/git/rafael/linux-pm:
  PM: sleep: docs: Replace "diasble" with "disable"

    [2 lines not shown]
DeltaFile
+17-1drivers/powercap/intel_rapl_common.c
+4-1drivers/base/power/main.c
+5-0include/linux/suspend.h
+0-5kernel/power/power.h
+0-3kernel/power/hibernate.c
+1-2kernel/power/suspend.c
+27-122 files not shown
+29-138 files

Linux/linux 49dcc4fdrivers/acpi battery.c

Merge tag 'acpi-6.16-rc5' of git://git.kernel.org/pub/scm/linux/kernel/git/rafael/linux-pm

Pull ACPI fix from Rafael Wysocki:
 "Revert a problematic ACPI battery driver change merged recently"

* tag 'acpi-6.16-rc5' of git://git.kernel.org/pub/scm/linux/kernel/git/rafael/linux-pm:
  Revert "ACPI: battery: negate current when discharging"
DeltaFile
+3-16drivers/acpi/battery.c
+3-161 files

Linux/linux 250d057Documentation/ABI/testing sysfs-devices-power, drivers/base/power main.c

Merge branch 'pm-sleep'

Merge fixes related to system sleep for 6.16-rc5:

 - Fix typo in the ABI documentation (Sumanth Gavini).

 - Allow swap to be used a bit longer during system suspend and
   hibernation to avoid suspend failures under memory pressure (Mario
   Limonciello).

* pm-sleep:
  PM: sleep: docs: Replace "diasble" with "disable"
  PM: Restrict swap use to later in the suspend sequence
DeltaFile
+4-1drivers/base/power/main.c
+5-0include/linux/suspend.h
+0-5kernel/power/power.h
+1-2kernel/power/suspend.c
+0-3kernel/power/hibernate.c
+1-1Documentation/ABI/testing/sysfs-devices-power
+11-121 files not shown
+12-127 files

Linux/linux b1bf2efarch/arm64/boot/dts/apple t8103.dtsi t8112-j493.dts, drivers/firmware/arm_ffa driver.c

Merge tag 'soc-fixes-6.16' of git://git.kernel.org/pub/scm/linux/kernel/git/soc/soc

Pull SoC fixes from Arnd Bergmann:
 "A couple of fixes for firmware drivers have come up, addressing kernel
  side bugs in op-tee and ff-a code, as well as compatibility issues
  with exynos-acpm and ff-a protocols.

  The only devicetree fixes are for the Apple platform, addressing
  issues with conformance to the bindings for the wlan, spi and mipi
  nodes"

* tag 'soc-fixes-6.16' of git://git.kernel.org/pub/scm/linux/kernel/git/soc/soc:
  arm64: dts: apple: Move touchbar mipi {address,size}-cells from dtsi to dts
  arm64: dts: apple: Drop {address,size}-cells from SPI NOR
  arm64: dts: apple: t8103: Fix PCIe BCM4377 nodename
  optee: ffa: fix sleep in atomic context
  firmware: exynos-acpm: fix timeouts on xfers handling
  arm64: defconfig: update renamed PHY_SNPS_EUSB2
  firmware: arm_ffa: Fix the missing entry in struct ffa_indirect_msg_hdr

    [3 lines not shown]
DeltaFile
+36-35drivers/firmware/arm_ffa/driver.c
+32-9drivers/tee/optee/ffa_abi.c
+10-17drivers/firmware/samsung/exynos-acpm.c
+0-2arch/arm64/boot/dts/apple/t8103.dtsi
+2-0arch/arm64/boot/dts/apple/t8112-j493.dts
+0-2arch/arm64/boot/dts/apple/t8112.dtsi
+80-656 files not shown
+87-6912 files

Linux/linux c435a4farch/riscv Kconfig, arch/riscv/kernel cpu_ops_sbi.c

Merge tag 'riscv-for-linus-6.16-rc5' of git://git.kernel.org/pub/scm/linux/kernel/git/riscv/linux

Pull RISC-V fixes from Palmer Dabbelt:

 - kCFI is restricted to clang-17 or newer, as earlier versions have
   known bugs

 - sbi_hsm_hart_start is now staticly allocated, to avoid tripping up
   the SBI HSM page mapping on sparse systems.

* tag 'riscv-for-linus-6.16-rc5' of git://git.kernel.org/pub/scm/linux/kernel/git/riscv/linux:
  riscv: cpu_ops_sbi: Use static array for boot_data
  riscv: Require clang-17 or newer for kCFI
DeltaFile
+3-3arch/riscv/kernel/cpu_ops_sbi.c
+2-1arch/riscv/Kconfig
+5-42 files

Linux/linux 4b02ed4drivers/regulator tps65219-regulator.c gpio-regulator.c

Merge tag 'regulator-fix-v6.16-rc4' of git://git.kernel.org/pub/scm/linux/kernel/git/broonie/regulator

Pull regulator fixes from Mark Brown:
 "A few driver fixes (the GPIO one being potentially nasty, though it
  has been there for a while without anyone reporting it), and one core
  fix for the rarely used combination of coupled regulators and
  unbinding"

* tag 'regulator-fix-v6.16-rc4' of git://git.kernel.org/pub/scm/linux/kernel/git/broonie/regulator:
  regulator: gpio: Fix the out-of-bounds access to drvdata::gpiods
  regulator: mp886x: Fix ID table driver_data
  regulator: sy8824x: Fix ID table driver_data
  regulator: tps65219: Fix devm_kmalloc size allocation
  regulator: core: fix NULL dereference on unbind due to stale coupling data
DeltaFile
+14-14drivers/regulator/tps65219-regulator.c
+4-4drivers/regulator/gpio-regulator.c
+4-1drivers/regulator/sy8824x.c
+2-1drivers/regulator/mp886x.c
+1-0drivers/regulator/core.c
+25-205 files

Linux/linux a1d8128drivers/mtd/nand qpic_common.c, drivers/spi spi-qpic-snand.c spi-fsl-dspi.c

Merge tag 'spi-fix-v6.16-rc4' of git://git.kernel.org/pub/scm/linux/kernel/git/broonie/spi

Pull spi fixes from Mark Brown:
 "As well as a few driver specific fixes we've got a core change here
  which raises the hard coded limit on the number of devices we can
  support on one SPI bus since some FPGA based systems are running into
  the existing limit. This is not a good solution but it's one suitable
  for this point in the release cycle, we should dynamically size the
  relevant data structures which I hope will happen in the next couple
  of merge windows.

  We also pull in a MTD fix for the Qualcomm SNAND driver, the two fixes
  cover the same issue and merging them together minimises bisection
  issues"

* tag 'spi-fix-v6.16-rc4' of git://git.kernel.org/pub/scm/linux/kernel/git/broonie/spi:
  spi: cadence-quadspi: fix cleanup of rx_chan on failure paths
  spi: spi-fsl-dspi: Clear completion counter before initiating transfer
  spi: Raise limit on number of chip selects to 24

    [2 lines not shown]
DeltaFile
+26-4drivers/mtd/nand/qpic_common.c
+16-0drivers/spi/spi-qpic-snand.c
+10-1drivers/spi/spi-fsl-dspi.c
+8-0include/linux/mtd/nand-qpic-common.h
+0-5drivers/spi/spi-cadence-quadspi.c
+1-1include/linux/spi/spi.h
+61-116 files

Linux/linux df46426Documentation/wmi acpi-interface.rst, arch/x86/include/asm/amd fch.h

Merge tag 'platform-drivers-x86-v6.16-3' of git://git.kernel.org/pub/scm/linux/kernel/git/pdx86/platform-drivers-x86

Pull x86 platform drivers fixes from Ilpo Järvinen:
 "Mostly a few lines fixed here and there except amd/isp4 which improves
  swnodes relationships but that is a new driver not in any stable
  kernels yet. The think-lmi driver changes also look relatively large
  but there are just many fixes to it.

  The i2c/piix4 change is a effectively a revert of the commit
  7e173eb82ae9 ("i2c: piix4: Make CONFIG_I2C_PIIX4 dependent on
  CONFIG_X86") but that required moving the header out from arch/x86
  under include/linux/platform_data/

  Summary:

   - amd/isp4: Improve swnode graph (new driver exception)

   - asus-nb-wmi: Use duo keyboard quirk for Zenbook Duo UX8406CA


    [46 lines not shown]
DeltaFile
+144-37drivers/platform/x86/amd/amd_isp4.c
+32-62drivers/platform/x86/think-lmi.c
+11-5drivers/platform/x86/wmi.c
+9-5Documentation/wmi/acpi-interface.rst
+13-0include/linux/platform_data/x86/amd-fch.h
+0-13arch/x86/include/asm/amd/fch.h
+209-12221 files not shown
+263-15327 files

Linux/linux 3c2bd25drivers/usb/cdns3 cdnsp-ep0.c, drivers/usb/core hub.c

Merge tag 'usb-6.16-rc5' of git://git.kernel.org/pub/scm/linux/kernel/git/gregkh/usb

Pull USB fixes from Greg KH:
 "Here are some USB driver fixes for 6.16-rc5. I originally wanted this
  to get into -rc4, but there were some regressions that had to be
  handled first. Now all looks good. Included in here are the following
  fixes:

   - cdns3 driver fixes

   - xhci driver fixes

   - typec driver fixes

   - USB hub fixes (this is what took the longest to get right)

   - new USB driver quirks added

   - chipidea driver fixes

    [26 lines not shown]
DeltaFile
+17-17drivers/usb/typec/tcpm/tcpm.c
+5-26drivers/usb/host/xhci.c
+31-0drivers/usb/core/hub.c
+25-0drivers/usb/host/xhci-pci.c
+10-14drivers/usb/dwc3/gadget.c
+15-3drivers/usb/cdns3/cdnsp-ep0.c
+103-6018 files not shown
+160-8524 files

Linux/linux d46971eDocumentation/devicetree/bindings/input elan,ekth6915.yaml, drivers/input/joystick xpad.c

Merge tag 'input-for-v6.16-rc4' of git://git.kernel.org/pub/scm/linux/kernel/git/dtor/input

Pull input updates from Dmitry Torokhov:

 - support for Acer NGR 200 Controller added to xpad driver

 - xpad driver will no longer log errors about URBs at sudden disconnect

 - a fix for potential NULL dereference in cs40l50-vibra driver

 - several drivers have been switched to using scnprintf() to suppress
   warnings about potential output truncation

* tag 'input-for-v6.16-rc4' of git://git.kernel.org/pub/scm/linux/kernel/git/dtor/input:
  Input: cs40l50-vibra - fix potential NULL dereference in cs40l50_upload_owt()
  Input: alps - use scnprintf() to suppress truncation warning
  Input: iqs7222 - explicitly define number of external channels
  Input: xpad - support Acer NGR 200 Controller
  Input: xpad - return errors from xpad_try_sending_next_out_packet() up

    [10 lines not shown]
DeltaFile
+7-5Documentation/devicetree/bindings/input/elan,ekth6915.yaml
+7-4drivers/input/joystick/xpad.c
+5-5drivers/input/mouse/alps.c
+5-2drivers/input/misc/iqs7222.c
+2-2drivers/input/keyboard/atkbd.c
+2-2drivers/input/mouse/lifebook.c
+28-207 files not shown
+35-2613 files

Linux/linux 42bb9b6drivers/gpu/drm drm_gem.c, drivers/gpu/drm/amd/amdkfd kfd_svm.c

Merge tag 'drm-fixes-2025-07-04' of https://gitlab.freedesktop.org/drm/kernel

Pull drm fixes from Dave Airlie:
 "Weekly drm fixes, bit of a bumper crop, the usual amdgpu/xe/i915
  suspects, then there is a large scattering of fixes across core and
  drivers. I think the simple panel lookup fix is probably the largest,
  the sched race fix is also fun, but I don't see anything standing out
  too badly.

  dma-buf:
   - fix timeout handling

  gem:
   - fix framebuffer object references

  sched:
   - fix spsc queue job count race

  bridge:

    [74 lines not shown]
DeltaFile
+217-71drivers/gpu/drm/xe/xe_guc_pc.c
+82-50drivers/gpu/drm/panel/panel-simple.c
+44-28drivers/gpu/drm/xe/xe_device.c
+21-24drivers/gpu/drm/amd/amdkfd/kfd_svm.c
+40-4drivers/gpu/drm/drm_gem.c
+19-18drivers/gpu/drm/xe/xe_lrc.c
+423-19541 files not shown
+634-29547 files

Linux/linux 923d401drivers/iommu rockchip-iommu.c, drivers/iommu/intel iommu.c cache.c

Merge tag 'iommu-fixes-v6.16-rc4' of git://git.kernel.org/pub/scm/linux/kernel/git/iommu/linux

Pull iommu fixes from Joerg Roedel:

 - Rockchip: fix infinite loop caused by probing race condition

 - Intel VT-d: assign devtlb cache tag on ATS enablement

* tag 'iommu-fixes-v6.16-rc4' of git://git.kernel.org/pub/scm/linux/kernel/git/iommu/linux:
  iommu/vt-d: Assign devtlb cache tag on ATS enablement
  iommu/rockchip: prevent iommus dead loop when two masters share one IOMMU
DeltaFile
+10-1drivers/iommu/intel/iommu.c
+2-3drivers/iommu/intel/cache.c
+2-1drivers/iommu/rockchip-iommu.c
+2-0drivers/iommu/intel/iommu.h
+16-54 files

Linux/linux 1880df2drivers/block ublk_drv.c brd.c, drivers/nvme/host core.c multipath.c

Merge tag 'block-6.16-20250704' of git://git.kernel.dk/linux

Pull block fixes from Jens Axboe:

 - NVMe fixes via Christoph:
     - fix incorrect cdw15 value in passthru error logging (Alok Tiwari)
     - fix memory leak of bio integrity in nvmet (Dmitry Bogdanov)
     - refresh visible attrs after being checked (Eugen Hristev)
     - fix suspicious RCU usage warning in the multipath code (Geliang Tang)
     - correctly account for namespace head reference counter (Nilay Shroff)

 - Fix for a regression introduced in ublk in this cycle, where it would
   attempt to queue a canceled request.

 - brd RCU sleeping fix, also introduced in this cycle. Bare bones fix,
   should be improved upon for the next release.

* tag 'block-6.16-20250704' of git://git.kernel.dk/linux:
  brd: fix sleeping function called from invalid context in brd_insert_page()

    [6 lines not shown]
DeltaFile
+16-2drivers/nvme/host/core.c
+6-5drivers/block/ublk_drv.c
+6-2drivers/nvme/host/multipath.c
+4-2drivers/block/brd.c
+4-2drivers/nvme/host/pci.c
+2-0drivers/nvme/target/nvmet.h
+38-136 files

Linux/linux 534eb6dDocumentation/devicetree/bindings/i2c realtek,rtl9301-i2c.yaml, drivers/i2c/busses i2c-microchip-corei2c.c i2c-designware-master.c

Merge tag 'i2c-host-fixes-6.16-rc5' of git://git.kernel.org/pub/scm/linux/kernel/git/andi.shyti/linux into i2c/for-current

i2c-host-fixes for v6.16-rc5

designware: initialise msg_write_idx during transfer
microchip: check return value from core xfer call
realtek: add 'reg' property constraint to the device tree
DeltaFile
+5-1drivers/i2c/busses/i2c-microchip-corei2c.c
+2-1Documentation/devicetree/bindings/i2c/realtek,rtl9301-i2c.yaml
+1-0drivers/i2c/busses/i2c-designware-master.c
+8-23 files

Linux/linux 482deedfs/bcachefs btree_io.c super.c

Merge tag 'bcachefs-2025-07-03' of git://evilpiepirate.org/bcachefs

Pull bcachefs fixes from Kent Overstreet:
 "The 'opts.casefold_disabled' patch is non critical, but would be a
  6.15 backport; it's to address the casefolding + overlayfs
  incompatibility that was discovvered late.

  It's late because I was hoping that this would be addressed on the
  overlayfs side (and will be in 6.17), but user reports keep coming in
  on this one (lots of people are using docker these days)"

* tag 'bcachefs-2025-07-03' of git://evilpiepirate.org/bcachefs:
  bcachefs: opts.casefold_disabled
  bcachefs: Work around deadlock to btree node rewrites in journal replay
  bcachefs: Fix incorrect transaction restart handling
  bcachefs: fix btree_trans_peek_prev_journal()
  bcachefs: mark invalid_btree_id autofix
DeltaFile
+34-7fs/bcachefs/btree_io.c
+16-15fs/bcachefs/super.c
+9-10fs/bcachefs/dirent.c
+8-5fs/bcachefs/inode.c
+9-2fs/bcachefs/bcachefs.h
+3-4fs/bcachefs/fs.c
+79-437 files not shown
+92-5313 files

Linux/linux 2eb7f03fs eventpoll.c, fs/netfs misc.c buffered_write.c

Merge tag 'vfs-6.16-rc5.fixes' of git://git.kernel.org/pub/scm/linux/kernel/git/vfs/vfs

Pull vfs fixes from Christian Brauner:

 - Fix a regression caused by the anonymous inode rework. Making them
   regular files causes various places in the kernel to tip over
   starting with io_uring.

   Revert to the former status quo and port our assertion to be based on
   checking the inode so we don't lose the valuable VFS_*_ON_*()
   assertions that have already helped discover weird behavior our
   outright bugs.

 - Fix the the upper bound calculation in fuse_fill_write_pages()

 - Fix priority inversion issues in the eventpoll code

 - Make secretmen use anon_inode_make_secure_inode() to avoid bypassing
   the LSM layer

    [45 lines not shown]
DeltaFile
+134-324fs/eventpoll.c
+31-19fs/netfs/misc.c
+23-15fs/netfs/buffered_write.c
+20-9include/trace/events/netfs.h
+24-5fs/smb/client/smb2pdu.c
+25-1fs/netfs/internal.h
+257-37315 files not shown
+354-44121 files

Linux/linux 25b1b75drivers/iommu/intel iommu.c cache.c

iommu/vt-d: Assign devtlb cache tag on ATS enablement

Commit <4f1492efb495> ("iommu/vt-d: Revert ATS timing change to fix boot
failure") placed the enabling of ATS in the probe_finalize callback. This
occurs after the default domain attachment, which is when the ATS cache
tag is assigned. Consequently, the device TLB cache tag is missed when the
domain is attached, leading to the device TLB not being invalidated in the
iommu_unmap paths.

Fix this by assigning the CACHE_TAG_DEVTLB cache tag when ATS is enabled.

Fixes: 4f1492efb495 ("iommu/vt-d: Revert ATS timing change to fix boot failure")
Cc: stable at vger.kernel.org
Suggested-by: Kevin Tian <kevin.tian at intel.com>
Signed-off-by: Lu Baolu <baolu.lu at linux.intel.com>
Tested-by: Shuicheng Lin <shuicheng.lin at intel.com>
Reviewed-by: Kevin Tian <kevin.tian at intel.com>
Link: https://lore.kernel.org/r/20250625050135.3129955-1-baolu.lu@linux.intel.com
Link: https://lore.kernel.org/r/20250628100351.3198955-2-baolu.lu@linux.intel.com
Signed-off-by: Joerg Roedel <joerg.roedel at amd.com>
DeltaFile
+10-1drivers/iommu/intel/iommu.c
+2-3drivers/iommu/intel/cache.c
+2-0drivers/iommu/intel/iommu.h
+14-43 files

Linux/linux 4cf6584drivers/input/misc cs40l50-vibra.c

Input: cs40l50-vibra - fix potential NULL dereference in cs40l50_upload_owt()

The cs40l50_upload_owt() function allocates memory via kmalloc()
without checking for allocation failure, which could lead to a
NULL pointer dereference.

Return -ENOMEM in case allocation fails.

Signed-off-by: Yunshui Jiang <jiangyunshui at kylinos.cn>
Fixes: c38fe1bb5d21 ("Input: cs40l50 - Add support for the CS40L50 haptic driver")
Link: https://lore.kernel.org/r/20250704024010.2353841-1-jiangyunshui@kylinos.cn
Cc: stable at vger.kernel.org
Signed-off-by: Dmitry Torokhov <dmitry.torokhov at gmail.com>
DeltaFile
+2-0drivers/input/misc/cs40l50-vibra.c
+2-01 files

Linux/linux da8d8e9drivers/gpu/drm/xe xe_guc_pc.c xe_device.c

Merge tag 'drm-xe-fixes-2025-07-03' of https://gitlab.freedesktop.org/drm/xe/kernel into drm-fixes

Driver Changes:
- Fix chunking the PTE updates and overflowing the maximum number of
  dwords with with MI_STORE_DATA_IMM (Jia Yao)
- Move WA BB to the LRC BO to mitigate hangs on context switch (Matthew
  Brost)
- Fix frequency/flush WAs for BMG (Vinay / Lucas)
- Fix kconfig prompt title and description (Lucas)
- Do not require kunit (Harry Austen / Lucas)
- Extend 14018094691 WA to BMG (Daniele)
- Fix wedging the device on signal (Matthew Brost)

Signed-off-by: Dave Airlie <airlied at redhat.com>

From: Lucas De Marchi <lucas.demarchi at intel.com>
Link: https://lore.kernel.org/r/o5662wz6nrlf6xt5sjgxq5oe6qoujefzywuwblm3m626hreifv@foqayqydd6ig
DeltaFile
+217-71drivers/gpu/drm/xe/xe_guc_pc.c
+44-28drivers/gpu/drm/xe/xe_device.c
+19-18drivers/gpu/drm/xe/xe_lrc.c
+10-8drivers/gpu/drm/xe/xe_migrate.c
+6-4drivers/gpu/drm/xe/xe_guc_submit.c
+5-3drivers/gpu/drm/xe/Kconfig
+301-1325 files not shown
+312-13711 files

Linux/linux 3363da8fs/smb/client reparse.c fs_context.c

smb: client: fix native SMB symlink traversal

We've seen customers having shares mounted in paths like /??/C:/ or
/??/UNC/foo.example.com/share in order to get their native SMB
symlinks successfully followed from different mounts.

After commit 12b466eb52d9 ("cifs: Fix creating and resolving absolute NT-style symlinks"),
the client would then convert absolute paths from "/??/C:/" to "/mnt/c/"
by default.  The absolute paths would vary depending on the value of
symlinkroot= mount option.

Fix this by restoring old behavior of not trying to convert absolute
paths by default.  Only do this if symlinkroot= was _explicitly_ set.

Before patch:

  $ mount.cifs //w22-fs0/test2 /mnt/1 -o vers=3.1.1,username=xxx,password=yyy
  $ ls -l /mnt/1/symlink2
  lrwxr-xr-x 1 root root 15 Jun 20 14:22 /mnt/1/symlink2 -> /mnt/c/testfile

    [20 lines not shown]
DeltaFile
+13-9fs/smb/client/reparse.c
+7-10fs/smb/client/fs_context.c
+20-192 files

Linux/linux 266b5d0fs/smb/client connect.c cifsglob.h

smb: client: fix race condition in negotiate timeout by using more precise timing

When the SMB server reboots and the client immediately accesses the mount
point, a race condition can occur that causes operations to fail with
"Host is down" error.

Reproduction steps:
  # Mount SMB share
  mount -t cifs //192.168.245.109/TEST /mnt/ -o xxxx
  ls /mnt

  # Reboot server
  ssh root at 192.168.245.109 reboot
  ssh root at 192.168.245.109 /path/to/cifs_server_setup.sh
  ssh root at 192.168.245.109 systemctl stop firewalld

  # Immediate access fails
  ls /mnt
  ls: cannot access '/mnt': Host is down

    [52 lines not shown]
DeltaFile
+4-3fs/smb/client/connect.c
+1-0fs/smb/client/cifsglob.h
+5-32 files

Linux/linux 8f954c4drivers/gpu/drm/bridge samsung-dsim.c

Merge tag 'samsung-dsim-fixes-for-v6.16-rc4' of git://git.kernel.org/pub/scm/linux/kernel/git/daeinki/drm-exynos into drm-fixes

- Fixed raw pointer leakage and unsafe behavior in printk()
  . Switch from %pK to %p for pointer formatting, as %p is now safer
    and prevents issues like raw pointer leakage and acquiring sleeping
    locks in atomic contexts.

Signed-off-by: Dave Airlie <airlied at redhat.com>

From: Inki Dae <inki.dae at samsung.com>
Link: https://lore.kernel.org/r/20250629091742.29956-1-inki.dae@samsung.com
DeltaFile
+2-2drivers/gpu/drm/bridge/samsung-dsim.c
+2-21 files

Linux/linux ac2ad73drivers/gpu/drm/exynos exynos_drm_ipp.c exynos_drm_fimd.c

Merge tag 'exynos-drm-fixes-for-v6.16-rc4' of git://git.kernel.org/pub/scm/linux/kernel/git/daeinki/drm-exynos into drm-fixes

Fixups
- Fixed raw pointer leakage and unsafe behavior in printk()
  . Switch from %pK to %p for pointer formatting, as %p is now safer
    and prevents issues like raw pointer leakage and acquiring sleeping
    locks in atomic contexts.

- Fixed kernel panic during boot
  . A NULL pointer dereference issue occasionally occurred
    when the vblank interrupt handler was called before
    the DRM driver was fully initialized during boot.
    So this patch fixes the issue by adding a check in the interrupt handler
    to ensure the DRM driver is properly initialized.

- Fixed a lockup issue on Samsung Peach-Pit/Pi Chromebooks
  . The issue occurred after commit c9b1150a68d9 changed
    the call order of CRTC enable/disable and bridge pre_enable/post_disable
    methods, causing fimd_dp_clock_enable() to be called

    [8 lines not shown]
DeltaFile
+16-16drivers/gpu/drm/exynos/exynos_drm_ipp.c
+12-0drivers/gpu/drm/exynos/exynos_drm_fimd.c
+4-0drivers/gpu/drm/exynos/exynos7_drm_decon.c
+1-1drivers/gpu/drm/exynos/exynos_drm_gem.c
+33-174 files

Linux/linux afd30acdrivers/gpu/drm/i915/display vlv_dsi.c, drivers/gpu/drm/i915/gt intel_ring_submission.c intel_gsc.c

Merge tag 'drm-intel-fixes-2025-07-03' of https://gitlab.freedesktop.org/drm/i915/kernel into drm-fixes

- Make mei interrupt top half irq disabled to fix RT builds
- Fix timeline left held on VMA alloc error
- Fix NULL pointer deref in vlv_dphy_param_init()
- Fix selftest mock_request() to avoid NULL deref

Signed-off-by: Dave Airlie <airlied at redhat.com>
From: Joonas Lahtinen <joonas.lahtinen at linux.intel.com>
Link: https://lore.kernel.org/r/aGYVPAA4KvsZqDFx@jlahtine-mobl
DeltaFile
+10-10drivers/gpu/drm/i915/selftests/i915_request.c
+2-1drivers/gpu/drm/i915/gt/intel_ring_submission.c
+1-1drivers/gpu/drm/i915/selftests/mock_request.c
+1-1drivers/gpu/drm/i915/display/vlv_dsi.c
+1-1drivers/gpu/drm/i915/gt/intel_gsc.c
+15-145 files

Linux/linux b91e11edrivers/gpu/drm drm_gem.c drm_gem_framebuffer_helper.c, drivers/gpu/drm/panel panel-simple.c

Merge tag 'drm-misc-fixes-2025-07-03' of https://gitlab.freedesktop.org/drm/misc/kernel into drm-fixes

drm-misc-fixes for v6.16-rc5:
- Replace simple panel lookup hack with proper fix.
- nullpointer deref in vesadrm fix.
- fix dma_resv_wait_timeout.
- fix error handling in ttm_buffer_object_transfer.
- bridge fixes.
- Fix vmwgfx accidentally allocating encrypted memory.
- Fix race in spsc_queue_push()
- Add refcount on backing GEM objects during fb creation.
- Fix v3d irq's being enabled during gpu reset.

Signed-off-by: Dave Airlie <airlied at redhat.com>
From: Maarten Lankhorst <maarten.lankhorst at linux.intel.com>
Link: https://lore.kernel.org/r/a7461418-08dc-4b7c-b2fa-264155f66d5e@linux.intel.com
DeltaFile
+82-50drivers/gpu/drm/panel/panel-simple.c
+40-4drivers/gpu/drm/drm_gem.c
+27-10drivers/gpu/drm/v3d/v3d_irq.c
+9-7drivers/gpu/drm/drm_gem_framebuffer_helper.c
+7-6drivers/gpu/drm/ttm/ttm_bo_util.c
+9-4drivers/gpu/drm/sysfb/vesadrm.c
+174-8110 files not shown
+205-9416 files

Linux/linux 4c06e63fs/btrfs tree-log.c free-space-tree.c

Merge tag 'for-6.16-rc4-tag' of git://git.kernel.org/pub/scm/linux/kernel/git/kdave/linux

Pull btrfs fixes from David Sterba:

 - tree-log fixes:
    - fixes of log tracking of directories and subvolumes
    - fix iteration and error handling of inode references
      during log replay

 - fix free space tree rebuild (reported by syzbot)

* tag 'for-6.16-rc4-tag' of git://git.kernel.org/pub/scm/linux/kernel/git/kdave/linux:
  btrfs: use btrfs_record_snapshot_destroy() during rmdir
  btrfs: propagate last_unlink_trans earlier when doing a rmdir
  btrfs: record new subvolume in parent dir earlier to avoid dir logging races
  btrfs: fix inode lookup error handling during log replay
  btrfs: fix iteration of extrefs during log replay
  btrfs: fix missing error handling when searching for inode refs during log replay
  btrfs: fix failure to rebuild free space tree using multiple transactions
DeltaFile
+69-68fs/btrfs/tree-log.c
+40-0fs/btrfs/free-space-tree.c
+18-18fs/btrfs/inode.c
+2-2fs/btrfs/ioctl.c
+2-0fs/btrfs/block-group.h
+131-885 files

Linux/linux 025c197Documentation/ABI/testing sysfs-driver-ufs, drivers/infiniband/ulp/srp ib_srp.c

Merge tag 'scsi-fixes' of git://git.kernel.org/pub/scm/linux/kernel/git/jejb/scsi

Pull SCSI fixes from James Bottomley:
 "Driver fixes plus core sd.c fix are all small and obvious.

  The larger change to hosts.c is less obvious, but required to avoid
  data corruption caused by bio splitting"

* tag 'scsi-fixes' of git://git.kernel.org/pub/scm/linux/kernel/git/jejb/scsi:
  scsi: ufs: core: Fix spelling of a sysfs attribute name
  scsi: core: Enforce unlimited max_segment_size when virt_boundary_mask is set
  scsi: RDMA/srp: Don't set a max_segment_size when virt_boundary_mask is set
  scsi: sd: Fix VPD page 0xb7 length check
  scsi: qla4xxx: Fix missing DMA mapping error in qla4xxx_alloc_pdu()
  scsi: qla2xxx: Fix DMA mapping test in qla24xx_get_port_database()
DeltaFile
+11-7drivers/scsi/hosts.c
+3-2drivers/infiniband/ulp/srp/ib_srp.c
+2-2drivers/ufs/core/ufs-sysfs.c
+2-0drivers/scsi/qla4xxx/ql4_os.c
+1-1Documentation/ABI/testing/sysfs-driver-ufs
+1-1drivers/scsi/qla2xxx/qla_mbx.c
+20-131 files not shown
+21-147 files