[continued from previous message]   
      
        - fs: ntfs3: Fix integer overflow in run_unpack()   
        - fs/ntfs3: reject index allocation if $BITMAP is empty but blocks exist   
        - iio: consumers: Fix handling of negative channel scale in   
          iio_convert_raw_to_processed()   
        - iio: consumers: Fix offset handling in iio_convert_raw_to_processed()   
        - netfilter: ipset: Remove unused htable_bits in macro ahash_region   
        - ipvs: Use READ_ONCE/WRITE_ONCE for ipvs->enable   
        - drivers/base/node: handle error properly in register_one_node()   
        - RDMA/cm: Rate limit destroy CM ID timeout error message   
        - wifi: mt76: fix potential memory leak in mt76_wmac_probe()   
        - wifi: mt76: mt7996: Fix RX packets configuration for primary WED device   
        - wifi: mt76: mt7996: Convert mt7996_wed_rro_addr to LE   
        - wifi: mt76: mt7915: fix mt7981 pre-calibration   
        - f2fs: fix to update map->m_next_extent correctly in f2fs_map_blocks()   
        - f2fs: fix to truncate first page in error path of f2fs_truncate()   
        - f2fs: fix to mitigate overhead of f2fs_zero_post_eof_page()   
        - ALSA: pcm: Disable bottom softirqs as part of spin_lock_irq() on   
          PREEMPT_RT   
        - ACPI: NFIT: Fix incorrect ndr_desc being reportedin dev_err message   
        - scsi: qla2xxx: edif: Fix incorrect sign of error code   
        - scsi: qla2xxx: Fix incorrect sign of error code in START_SP_W_RETRIES()   
        - scsi: qla2xxx: Fix incorrect sign of error code in qla_nvme_xmt_ls_rsp()   
        - HID: hidraw: tighten ioctl command parsing   
        - f2fs: fix zero-sized extent for precache extents   
        - Revert "usb: xhci: Avoid Stop Endpoint retry loop if the endpoint seems   
          Running"   
        - RDMA/core: Resolve MAC of next-hop device without ARP support   
        - IB/sa: Fix sa_local_svc_timeout_ms read race   
        - Documentation: trace: historgram-design: Separate sched_waking histogram   
          section heading and the following diagram   
        - wifi: ath12k: fix wrong logging ID used for CE   
        - wifi: ath10k: avoid unnecessary wait for service ready message   
        - iommu/vt-d: debugfs: Fix legacy mode page table dump logic   
        - wifi: mac80211: fix Rx packet handling when pubsta information is not   
          available   
        - [amd64] ASoC: Intel: sof_sdw: Prevent jump to NULL add_sidecar callback   
        - RDMA/rxe: Fix race in do_task() when draining   
        - wifi: rtw89: avoid circular locking dependency in ser_state_run()   
        - [arm64] remoteproc: qcom: q6v5: Avoid disabling handover IRQ twice   
        - dm vdo: return error on corrupted metadata in start_restoring_volume   
          functions   
        - [arm64] coresight-etm4x: Conditionally access register TRCEXTINSELR   
        - [arm64,armhf] coresight: tmc: Support atclk   
        - [arm64,armhf] coresight: catu: Support atclk   
        - [arm64,armhf] coresight: etm4x: Support atclk   
        - [arm64,armhf] coresight: trbe: Return NULL pointer for allocation   
   failures   
        - [arm64,armhf] coresight: tpda: fix the logic to setup the element size   
        - [arm64] coresight: Fix incorrect handling for return value of   
   devm_kzalloc   
        - NFSv4.1: fix backchannel max_resp_sz verification check   
        - ipvs: Defer ip_vs_ftp unregister during netns cleanup   
        - netfilter: nfnetlink: reset nlh pointer during batch replay   
        - scsi: mpt3sas: Fix crash in transport port remove by using ioc_info()   
        - usb: vhci-hcd: Prevent suspending virtually attached devices   
        - iommu/vt-d: Disallow dirty tracking if incoherent page walk   
        - net: usb: Remove disruptive netif_wake_queue in rtl8150_set_multicast   
        - ptp: Add a upper bound on max_vclocks   
        - vhost: vringh: Fix copy_to_iter return value check   
        - Bluetooth: MGMT: Fix not exposing debug UUID on   
          MGMT_OP_READ_EXP_FEATURES_INFO   
        - Bluetooth: ISO: Fix possible UAF on iso_conn_free   
        - Bluetooth: ISO: free rx_skb if not consumed   
        - Bluetooth: ISO: don't leak skb in ISO_CONT RX   
        - Bluetooth: hci_sync: Fix using random address for BIG/PA advertisements   
        - KEYS: X.509: Fix Basic Constraints CA flag parsing   
        - ocfs2: fix double free in user_cluster_connect()   
        - drivers/base/node: fix double free in register_one_node()   
        - [arm64] PCI: j721e: Fix incorrect error message in probe()   
        - [amd64,arm64] idpf: fix mismatched free function for dma_alloc_coherent   
        - nfp: fix RSS hash key size when RSS is not supported   
        - net: ena: return 0 in ena_get_rxfh_key_size() when RSS hash key is not   
          configurable   
        - net: dlink: handle copy_thresh allocation failure   
        - net/mlx5: Stop polling for command response if interface goes down   
        - net/mlx5: pagealloc: Fix reclaim race during command interface teardown   
        - net/mlx5: fw reset, add reset timeout work   
        - smb: client: fix crypto buffers in non-linear memory   
        - Revert "net/mlx5e: Update and set Xon/Xoff upon MTU set"   
        - bpf: Reject negative offsets for ALU ops   
        - tpm: Disable TPM2_TCG_HMAC by default   
        - Squashfs: fix uninit-value in squashfs_get_parent   
        - uio_hv_generic: Let userspace take care of interrupt mask   
        - io_uring/waitid: always prune wait queue entry in io_waitid_wait()   
        - [arm64] ASoC: wcd934x: fix error handling in wcd934x_codec_parse_data()   
        - [amd64,arm64] ASoC: SOF: ipc3-topology: Fix multi-core and static   
          pipelines tear down   
        - fs: udf: fix OOB read in lengthAllocDescs handling   
        - net: nfc: nci: Add parameter validation for packet data   
        - [arm64,armhf] mfd: vexpress-sysreg: Check the return value of   
          devm_gpiochip_add_data()   
        - dm: fix queue start/stop imbalance under suspend/load/resume races   
        - dm: fix NULL pointer dereference in __dm_suspend()   
        - ksmbd: Fix race condition in RPC handle list access   
        - ksmbd: fix error code overwriting in smb2_get_info_filesystem()   
        - ksmbd: add max ip connections parameter   
        - ext4: fix checks for orphan inodes   
        - [amd64] KVM: SVM: Skip fastpath emulation on VM-Exit if next RIP isn't   
          valid   
        - fbdev: simplefb: Fix use after free in simplefb_detach_genpds()   
        - mm: hugetlb: avoid soft lockup when mprotect to large memory area   
        - nvdimm: ndtest: Return -ENOMEM if devm_kcalloc() fails in ndtest_probe()   
        - [arm64] misc: fastrpc: Save actual DMA size in fastrpc_map structure   
        - [arm64] misc: fastrpc: Fix fastrpc_map_lookup operation   
        - [arm64] misc: fastrpc: fix possible map leak in fastrpc_put_args   
        - [arm64] misc: fastrpc: Skip reference for DMA handles   
        - Input: atmel_mxt_ts - allow reset GPIO to sleep   
        - Input: uinput - zero-initialize uinput_ff_upload_compat to avoid info   
   leak   
        - sunrpc: fix null pointer dereference on zero-length checksum   
        - [arm64] remoteproc: pru: Fix potential NULL pointer dereference in   
          pru_rproc_set_ctable()   
        - [amd64,arm64] tee: fix register_shm_helper()   
        - pinctrl: check the return value of pinmux_ops::get_function_name()   
        - bus: fsl-mc: Check return value of platform_get_resource()   
        - net/9p: Fix buffer overflow in USB transport layer   
        - net: usb: asix: hold PM usage ref to avoid PM/MDIO + RTNL deadlock   
        - usb: typec: tipd: Clear interrupts first   
        https://www.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.12.54   
        - fs: always return zero on success from replace_fd()   
        - fscontext: do not consume log entries when returning -EMSGSIZE   
        - [arm64] map [_text, _stext) virtual address range non-exe   
   utable+read-only   
      
   [continued in next message]   
      
   --- SoupGate-Win32 v1.05   
    * Origin: you cannot sedate... all the things you hate (1:229/2)