Lkft-triage October 2026

lkft-triage@lists.linaro.org

36 participants
42 discussions

[PATCH 6.12 000/869] 6.12.114-rc1 review

by Greg Kroah-Hartman

This is the start of the stable review cycle for the 6.12.114 release. There are 869 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know. Responses should be made by Mon, 19 Oct 2026 15:59:15 +0000. Anything received after that time might be too late. The whole patch series can be found in one patch at: https://www.kernel.org/pub/linux/kernel/v6.x/stable-review/patch-6.12.114-r… or in the git tree and branch at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-6.12.y and the diffstat can be found below. thanks, greg k-h ------------- Pseudo-Shortlog of commits: Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> Linux 6.12.114-rc1 Philipp Stanner <phasta(a)kernel.org> drm/panfrost: Fix scheduler workqueue bug David Hildenbrand <david(a)redhat.com> s390/uv: Don't return 0 from make_hva_secure() if the operation was not successful Toke Høiland-Jørgensen <toke(a)toke.dk> wifi: atk9k: Revert "wifi: ath9k: reject short WMI command responses" Mattia Meleleo <mattia.meleleo(a)coralogix.com> bpf, sockmap: Account for receive queue in FIONREAD without a verdict program Thomas Gleixner <tglx(a)linutronix.de> irqwork: Move data struct to a types header Suren Baghdasaryan <surenb(a)google.com> types: move struct rcuwait into types.h Ben Cressey <ben(a)cressey.dev> dm-integrity: fix buffer overflow with keyed discard Steven Rostedt <rostedt(a)goodmis.org> tracing: Fix comment in tracing_buffers_splice_read() Karl Mehltretter <kmehltretter(a)gmail.com> tracing: Fix ring_buffer_read_page_size() kernel-doc Stanley Chu <yschu(a)nuvoton.com> i3c: master: svc: Fix i3c_master_get_free_addr return check Stanley Chu <yschu(a)nuvoton.com> i3c: master: svc: Fix npcm845 FIFO_EMPTY quirk Stanley Chu <yschu(a)nuvoton.com> i3c: master: svc: Fix missed IBI after false SLVSTART on NPCM845 Ruoyu Wang <ruoyuw560(a)gmail.com> gpiolib: initialize return value in gpiochip_set_multiple() Mathieu Dubois-Briand <mathieu.dubois-briand(a)bootlin.com> gpiolib: Allow to use setters with return value for output-only gpios Rafael J. Wysocki <rafael.j.wysocki(a)intel.com> soundwire: intel_auxdevice: Fix system suspend/resume handling Shibo Zhu <3499129952(a)qq.com> PM: sleep: Unblock runtime PM when device prepare fails Muchun Song <muchun.song(a)linux.dev> mm/hugetlb_vmemmap: fix incorrect vmemmap restore in rollback Steffen Klassert <steffen.klassert(a)secunet.com> Revert "esp: do not unref managed frag pages in esp_ssg_unref()" Qiuxu Zhuo <qiuxu.zhuo(a)intel.com> EDAC/igen6: Fix NULL pointer dereference Pablo Neira Ayuso <pablo(a)netfilter.org> netfilter: ctnetlink: do not expose expectation DEAD flag Qiuxu Zhuo <qiuxu.zhuo(a)intel.com> EDAC/igen6: Fix the flood of invalid error reports Harald Freudenberger <freude(a)linux.ibm.com> s390/zcrypt: Fix memory leak with CCA cards used as accelerator Eric Dumazet <edumazet(a)google.com> net: do not acquire dev->tx_global_lock in netdev_watchdog_up() David Howells <dhowells(a)redhat.com> netfs: Fix folio state after ENOMEM whilst under writeback iteration Yichong Chen <chenyichong(a)uniontech.com> netfs: release readahead folios on iterator preparation failure Joseph Qi <joseph.qi(a)linux.alibaba.com> ocfs2: use correct endian in ocfs2_dinode_has_extents Tejun Heo <tj(a)kernel.org> sched/psi: Create the psimon kthread outside of cgroup_mutex Conor Dooley <conor.dooley(a)microchip.com> spi: microchip-core-qspi: stop checking viability of op->max_freq in supports_op callback Max Kellermann <max.kellermann(a)ionos.com> ceph: always call ceph_shift_unused_folios_left() Viacheslav Dubeyko <Slava.Dubeyko(a)ibm.com> ceph: introduce ceph_submit_write() method Max Kellermann <max.kellermann(a)ionos.com> ceph: fix crash after fscrypt_encrypt_pagecache_blocks() error Hristo Venev <hristo(a)venev.name> ceph: do not skip the first folio of the next object in writeback Adrian Hunter <adrian.hunter(a)intel.com> i3c: mipi-i3c-hci: Preserve RUN bit when aborting DMA ring Jon Hunter <jonathanh(a)nvidia.com> soc/tegra: pmc: Add kerneldoc for wake-up variables Thierry Reding <treding(a)nvidia.com> soc/tegra: pmc: Document tegra_pmc.syscore field Ming Qian <ming.qian(a)oss.nxp.com> media: verisilicon: Fix kernel panic due to __initconst misuse Kuniyuki Iwashima <kuniyu(a)google.com> mpls: Set rt->rt_nhn just before returning from mpls_nh_build_multi(). Kuniyuki Iwashima <kuniyu(a)amazon.com> net: Fix wild-memory-access in __register_pernet_operations() when CONFIG_NET_NS=n. Pankaj Gupta <pankaj.gupta(a)amd.com> KVM: SEV: Drop FOLL_WRITE for encrypted region registration Wludzik, Jozef <jozef.wludzik(a)intel.com> accel/ivpu: Fix race condition when mapping dmabuf Nitin Rawat <quic_nitirawa(a)quicinc.com> scsi: ufs: qcom : Fix NULL pointer dereference in ufs_qcom_setup_clocks Claudio Imbrenda <imbrenda(a)linux.ibm.com> s390/kvm: Mask extra bits from program interrupt code Claudio Imbrenda <imbrenda(a)linux.ibm.com> KVM: s390: Fix FOLL_*/FAULT_FLAG_* confusion Claudio Imbrenda <imbrenda(a)linux.ibm.com> KVM: s390: pv: fix race when making a page secure Claudio Imbrenda <imbrenda(a)linux.ibm.com> KVM: s390: move gmap_shadow_pgt_lookup() into kvm Claudio Imbrenda <imbrenda(a)linux.ibm.com> KVM: s390: use __kvm_faultin_pfn() Claudio Imbrenda <imbrenda(a)linux.ibm.com> KVM: s390: move pv gmap functions into kvm Claudio Imbrenda <imbrenda(a)linux.ibm.com> KVM: s390: wrapper for KVM_BUG Claudio Imbrenda <imbrenda(a)linux.ibm.com> s390/kvm: Initialize uninitialized flags variable Cyril Bur <cyrilbur(a)tenstorrent.com> riscv: uaccess: Only restore the CSR_STATUS SUM bit Ming Lei <ming.lei(a)redhat.com> ublk: fix dead loop when canceling io command Steven Rostedt <rostedt(a)goodmis.org> xfs: remove unused trace event xfs_dqreclaim_dirty Adrian Hunter <adrian.hunter(a)intel.com> i3c: master: Fix recursive locking during device registration Zide Chen <zide.chen(a)intel.com> perf/x86/intel/uncore: Fix uncore_box ref/unref ordering Shukai Ni <shukai.ni(a)kuleuven.be> dm-integrity: replace forgeable discard filler with a keyed sector marker Cen Zhang <zzzccc427(a)gmail.com> ocfs2: validate external xattr entries when reading metadata Kaitao Cheng <chengkaitao(a)kylinos.cn> bpf: Clear rb node linkage when freeing bpf_rb_root Hou Tao <houtao1(a)huawei.com> bpf: Remove migrate_{disable|enable} in bpf_obj_free_fields() Dan Williams <djbw(a)kernel.org> cxl/region: Resolve region deletion races Guoniu Zhou <guoniu.zhou(a)oss.nxp.com> pmdomain: imx93-blk-ctrl: Extract PHY as shared domain for DSI/CSI Sebastian Ene <sebastianene(a)google.com> firmware: arm_ffa: Fix Endpoint Memory Access Descriptor offset calculation Sudeep Holla <sudeep.holla(a)arm.com> firmware: arm_ffa: Add support for IMPDEF value in the memory access descriptor Damien Riégel <damien.riegel(a)silabs.com> greybus: raw: fix use-after-free if write is called after disconnect Yosry Ahmed <yosry(a)kernel.org> KVM: nSVM: Triple fault if restore host CR3 fails on nested #VMEXIT Rafael J. Wysocki <rafael.j.wysocki(a)intel.com> ACPI: platform: Use acpi_bus_get_primary_device() Al Viro <viro(a)zeniv.linux.org.uk> functionfs: fix the open/removal races Benjamin Leggett <benjamin(a)edera.io> drm/virtio: use the DMA API for resource backing on Xen Vivek Kasireddy <vivek.kasireddy(a)intel.com> drm/virtio: Add a helper to map and note the dma addrs and lengths Dongwon Kim <dongwon.kim(a)intel.com> drm/virtio: Use drm_gem_plane_helper_prepare_fb() Sajal Gupta <sajal2005gupta(a)gmail.com> drm/gud: validate GUD_ROTATION_0 is present in supported rotations Tetsuo Handa <penguin-kernel(a)I-love.SAKURA.ne.jp> printk: Don't WARN on kthread_run failure. Eduard Zingerman <eddyz87(a)gmail.com> bpf: check_cond_jmp_op(): properly infer if register is null Lorenzo Bianconi <lorenzo.bianconi(a)oss.qualcomm.com> net: stmmac: fix dma mapping leak in stmmac_tso_xmit() Huiwen He <hehuiwen(a)kylinos.cn> smb/client: invalidate fscache for fallocate range operations Eric Dumazet <edumazet(a)google.com> ipv6: mcast: use rcu_assign_pointer() for __rcu list updates Eduard Zingerman <eddyz87(a)gmail.com> bpf: backtrack_insn(): Handle ld_{abs,ind} subprog exit edge Eduard Zingerman <eddyz87(a)gmail.com> bpf: backtracking shouldn't clear outer frame R1-R5 for callbacks FAN YE <fy15309206903(a)gmail.com> btrfs: zstd: fix lost wakeup when waiting for a workspace Kuniyuki Iwashima <kuniyu(a)google.com> net: Remove conflicting altnames for dying netns in __dev_change_net_namespace(). Nicolas Dichtel <nicolas.dichtel(a)6wind.com> net: plumb extack in __dev_change_net_namespace() Nicolas Dichtel <nicolas.dichtel(a)6wind.com> net: rename netns_local to netns_immutable Gao Xiang <xiang(a)kernel.org> erofs: disable LZ4 rolling decompression for now Kumar Kartikeya Dwivedi <memxor(a)gmail.com> bpf: Mark signal tracepoint siginfo arguments as scalar Kumar Kartikeya Dwivedi <memxor(a)gmail.com> bpf: Mark syscall helpers as sleepable Cezary Rojewski <cezary.rojewski(a)intel.com> ASoC: Intel: avs: Refactor and fix init_config access Eduard Zingerman <eddyz87(a)gmail.com> bpf: zero extend the result of an arena 32-bit cmpxchg Eduard Zingerman <eddyz87(a)gmail.com> bpf: don't rewrite bpf_fastcall patterns entered by a jump Kumar Kartikeya Dwivedi <memxor(a)gmail.com> bpf: Check ancestor frames for rbtree callbacks Kumar Kartikeya Dwivedi <memxor(a)gmail.com> bpf: Reject legacy packet loads from callbacks Eduard Zingerman <eddyz87(a)gmail.com> bpf: Don't infer non-NULL from a pointer with an unbounded offset Ning Ding <dingning04(a)gmail.com> bpf: Keep refcount_acquire nullable for borrowed RCU kptrs Kumar Kartikeya Dwivedi <memxor(a)gmail.com> bpf: Mark NULL kptr stores precise Kumar Kartikeya Dwivedi <memxor(a)gmail.com> bpf: Preserve inner map identity in callback frames Vincent Donnefort <vdonnefort(a)google.com> tracing: Fix subbuf resize races with trace_pipe_raw readers Eduard Zingerman <eddyz87(a)gmail.com> bpf: mark a NULL call argument precise Karl Mehltretter <kmehltretter(a)gmail.com> iommu/amd: Do not reallocate GA log buffers on resume Alexander Graf <graf(a)amazon.com> virtio_ring: fix stale descriptor flags after a failed packed add Jia Jia <physicalmtea(a)gmail.com> vduse: validate virtqueue alignment Jia Jia <physicalmtea(a)gmail.com> vhost: invalidate vring access on IOTLB transitions Krystian Kaniewski <krystianmkaniewski(a)gmail.com> Bluetooth: hci_sysfs: Fix NULL pointer dereference in device_del() Carolina Jubran <cjubran(a)nvidia.com> net/mlx5e: Move representor vnic reporter to eswitch devlink port Dapeng Mi <dapeng1.mi(a)linux.intel.com> perf/x86/intel: Prevent drain_pebs() reentry Arunpravin Paneer Selvam <Arunpravin.PaneerSelvam(a)amd.com> drm/amdgpu: skip the VMID 0 flush for VRAM Paulo Alcantara <pc(a)manguebit.org> smb: client: honor forceuid/forcegid when mapping SIDs to uid/gid Paulo Alcantara <pc(a)manguebit.org> smb: client: avoid using uninitialized SIDs in cifs_posix_to_fattr() Arie Miller <renari(a)arimil.com> hwmon: (asus_rog_ryujin) Validate HID report lengths Arie Miller <renari(a)arimil.com> hwmon: (asus_rog_ryujin) Add per-device configuration Guenter Roeck <linux(a)roeck-us.net> hwmon: (asus_rog_ryujin) Rely on subsystem locking Stanley Chu <yschu(a)nuvoton.com> i3c: master: svc: Prevent IRQ storm from false SLVSTART on NPCM845 Stanley Chu <yschu(a)nuvoton.com> i3c: master: svc: Fix npcm845 invalid slvstart event Stanley Chu <yschu(a)nuvoton.com> i3c: master: svc: Fix npcm845 FIFO empty issue Brandon Brnich <b-brnich(a)ti.com> media: chips-media: wave5: Release m2m_ctx after Instance Removed from List Pengpeng Hou <pengpeng(a)iscas.ac.cn> genirq/proc: Size interrupt directory names for 10-digit interrupt numbers Andy Shevchenko <andriy.shevchenko(a)linux.intel.com> genirq: Consistently use '%u' format specifier for unsigned int variables Thomas Gleixner <tglx(a)linutronix.de> genirq/proc: Switch to lock guards Chen-Yu Tsai <wenst(a)chromium.org> pinctrl: mediatek: paris: bypass pinctrl GPIO layer in set GPIO direction Bartosz Golaszewski <bartosz.golaszewski(a)linaro.org> pinctrl: mediatek: paris: use new GPIO line value setter callbacks Bartosz Golaszewski <bartosz.golaszewski(a)linaro.org> pinctrl: mediatek: paris: don't double-check the GPIO number Bartosz Golaszewski <bartosz.golaszewski(a)linaro.org> gpiolib: introduce gpio_chip setters that return values Bartosz Golaszewski <bartosz.golaszewski(a)linaro.org> gpiolib: rework the wrapper around gpio_chip::set_multiple() Bartosz Golaszewski <bartosz.golaszewski(a)linaro.org> gpiolib: wrap gpio_chip::set() Bartosz Golaszewski <bartosz.golaszewski(a)linaro.org> gpiolib: make value setters have return values Candice Li <candice.li(a)amd.com> drm/amdgpu: Bound GPIO I2C table entry count from VBIOS Alex Deucher <alexander.deucher(a)amd.com> drm/amdgpu: rework i2c init and fini Alex Deucher <alexander.deucher(a)amd.com> drm/amdgpu/atombios: drop empty function Dr. David Alan Gilbert <linux(a)treblig.org> drm/amdgpu: Remove unused amdgpu_i2c functions Stepan Ionichev <sozdayvek(a)gmail.com> tty: serial: 8250: protect against NULL uart->port.dev in register Jiri Slaby (SUSE) <jirislaby(a)kernel.org> serial: 8250: invert serial8250_register_8250_port() CIR condition Herve Codina <herve.codina(a)bootlin.com> driver core: Avoid warning when removing a device while its supplier is unbinding Rafael J. Wysocki <rafael.j.wysocki(a)intel.com> driver core: Add device_link_test() for testing device link flags Colin Ian King <colin.i.king(a)gmail.com> PM: sleep: Fix bit masking operation Rafael J. Wysocki <rafael.j.wysocki(a)intel.com> PM: sleep: Use DPM_FLAG_SMART_SUSPEND conditionally Rafael J. Wysocki <rafael.j.wysocki(a)intel.com> PM: runtime: Introduce pm_runtime_blocked() Rafael J. Wysocki <rafael.j.wysocki(a)intel.com> PM: Block enabling of runtime PM during system suspend Rafael J. Wysocki <rafael.j.wysocki(a)intel.com> PM: Rearrange documentation related to __pm_runtime_disable() Rafael J. Wysocki <rafael.j.wysocki(a)intel.com> PM: sleep: core: Restrict power.set_active propagation Rafael J. Wysocki <rafael.j.wysocki(a)intel.com> PM: sleep: core: Synchronize runtime PM status of parents and children Sicong Huang <congei42(a)163.com> virt: acrn: Fix irqfd use-after-free during eventfd shutdown Dr. David Alan Gilbert <linux(a)treblig.org> virt: acrn: Remove unused list 'acrn_irqfd_clients' Tao Cui <cuitao(a)kylinos.cn> RDMA/counter: Fix num_counters leak on bind_qp failure in alloc_and_bind() Johannes Berg <johannes.berg(a)intel.com> wifi: iwlwifi: mvm: fix P2P-Device binding handling Johannes Berg <johannes.berg(a)intel.com> wifi: iwlwifi: simplify nested if checks Yunxiang Li <Yunxiang.Li(a)amd.com> drm/amdgpu/ras: add ras_suspend callback and use it for cp_ecc_error_irq Victor Skvortsov <victor.skvortsov(a)amd.com> drm/amdgpu: Update SRIOV Exchange Headers for RAS Telemetry Support Yongqiang Sun <Yongqiang.Sun(a)amd.com> drm/amdkfd: fix SMI event cross-process information leak Namjae Jeon <linkinjeon(a)kernel.org> ksmbd: fix maximum allowed access checks Alexey Velichayshiy <a.velichayshiy(a)ispras.ru> ksmbd: remove redundant DACL check in smb_check_perm_dacl Val Packett <val(a)packett.cool> remoteproc: qcom_wcnss: Fix handling the lack of PD regulators in v3 Gou Hao <gouhao(a)uniontech.com> powerpc/xive: propagate IPI init errors to prevent use-after-free Gou Hao <gouhao(a)uniontech.com> powerpc/xive: add error return value to xive_smp_probe() Rafael J. Wysocki <rafael.j.wysocki(a)intel.com> ACPI: bus: Introduce acpi_bus_get_primary_device() Muchun Song <muchun.song(a)linux.dev> mm/hugetlb: initialize gigantic bootmem hugepage struct pages earlier Kiryl Shutsemau <kas(a)kernel.org> mm/hugetlb: refactor code around vmemmap_walk Chris Mason <clm(a)meta.com> nfsd: convert nfsd_net boolean flags to unsigned long flags word Ye Liu <ye.liu(a)linux.dev> mm/page_owner: use memcg_data snapshot to avoid TOCTOU in print_page_owner_memcg() Evgenii Burenchev <evg28bur(a)yandex.ru> drm/amd/display: Fix dangling pointer in plane reset function Evgenii Burenchev <evg28bur(a)yandex.ru> drm/amd/display: Fix dangling pointer in CRTC reset function Alex Bereza <alex(a)bereza.email> dmaengine: xilinx_dma: Fix CPU stall in xilinx_dma_poll_timeout Yiyang Chen <chenyy23(a)mails.tsinghua.edu.cn> bpf: Reject MEM_ALLOC BTF accesses past object bounds Malaya Kumar Rout <malayarout91(a)gmail.com> time/namespace: Validate nanosecond field in proc_timens_set_offset() Nicholas Dudar <main.kalliope(a)gmail.com> bpf: Reject writes through untrusted BTF pointers Armin Wolf <W_Armin(a)gmx.de> platform/x86: dell-wmi-base: Fix handling of ultra performance key Nicholas Dudar <main.kalliope(a)gmail.com> bpf: Reject rdonly/rdwr_buf_size kfunc arguments that exceed u32 max Qing Ming <a0yami(a)mailbox.org> usb: gadget: uac: validate rate list length before storing Marco Scardovi <scardracs(a)disroot.org> platform/x86: asus-wmi: fix resource leaks on probe failure Maher Azzouzi <maherazz04(a)gmail.com> esp: do not unref managed frag pages in esp_ssg_unref() Leon Romanovsky <leon(a)kernel.org> RDMA/rvt: Return NULL after port allocation failure Reinette Chatre <reinette.chatre(a)intel.com> fs/resctrl: Prevent use-after-free in rdtgroup_kn_put() Sudeep Holla <sudeep.holla(a)kernel.org> firmware: arm_scmi: Fix SCMI device destroy lifetimes Ruoyu Wang <ruoyuw560(a)gmail.com> drm/msm: Only fini scheduler after successful init Philipp Stanner <phasta(a)kernel.org> drm/sched: Use struct for drm_sched_init() params Kumar Kartikeya Dwivedi <memxor(a)gmail.com> bpf: Zero queue and stack outputs on lock failure Pu Lehui <pulehui(a)huawei.com> riscv, bpf: Fix kernel stack corruption in tailcall with CFI Kees Cook <kees(a)kernel.org> kcfi: Rename CONFIG_CFI_CLANG to CONFIG_CFI Aditya Prakash Srivastava <aditya.ansh182(a)gmail.com> ext4: fix ABBA deadlock in ext4_xattr_inode_cache_find() Leon Hwang <leon.hwang(a)linux.dev> bpf: Fix WARNING in bpf_tracing_link_release Justin Yeh <justin.yeh(a)mediatek.com> pinctrl: mediatek: use devm_gpiochip_add_data() for GPIO chip Li Qiang <liqiang01(a)kylinos.cn> scsi: ufs: core: Validate string descriptors Bean Huo <beanhuo(a)micron.com> scsi: ufs: core: Convert string descriptor format macros to enum Nicolin Chen <nicolinc(a)nvidia.com> iommu/tegra241-cmdqv: Don't fall back to a freed smmu after devm_krealloc() Nicolin Chen <nicolinc(a)nvidia.com> iommu/tegra241-cmdqv: Fix VINTF0 leak on the init-failure path Louis-Alexis Eyraud <louisalexis.eyraud(a)collabora.com> clk: mediatek: pllfh: Fix IO remapping leak in register_pllfhs error path Gary Guo <gary(a)garyguo.net> PCI: Fix UAF when probe runs concurrent to dyn ID removal Gary Guo <gary(a)garyguo.net> PCI: Fix dyn_id add TOCTOU Gary Guo <gary(a)garyguo.net> PCI: Make pci_match_one_device() match on ID instead of device Leon Romanovsky <leon(a)kernel.org> RDMA/cxgb4: Fix dereg_skb leak and double free in write_tpt_entry() Adrián Larumbe <adrian.larumbe(a)collabora.com> drm/panthor: Add vm_bind region with kbo range overlap check Jani Nikula <jani.nikula(a)intel.com> overflow: add range_overflows() and range_end_overflows() Jani Nikula <jani.nikula(a)intel.com> drm/i915: document range_overflows() and range_end_overflows() macros Jani Nikula <jani.nikula(a)intel.com> drm/i915: rename range_overflows_end() to range_end_overflows() Jeff Johnson <jeff.johnson(a)oss.qualcomm.com> wifi: ath12k: fix overreads in ath12k_wmi_process_csa_switch_count_event() Felix Fietkau <nbd(a)nbd.name> wifi: mt76: mt7996: hold dev->mt76.mutex while disabling tx worker in SER Felix Fietkau <nbd(a)nbd.name> wifi: mt76: cancel reset and rc work on device unregister Dmitry Baryshkov <dmitry.baryshkov(a)oss.qualcomm.com> drm/msm: don't tear down KMS twice when KMS init fails Yonghong Song <yonghong.song(a)linux.dev> bpf: Reject >8 byte return values on return-reading trampoline paths Felix Fietkau <nbd(a)nbd.name> wifi: mt76: mt7996: do not attach hif2 WED when the main WED attach failed Will Deacon <will(a)kernel.org> arm64: ptrace: Keep 'orig_x0' in-sync with x0 on syscall entry Zhao Li <enderaoelyther(a)gmail.com> wifi: nl80211: clean up color-change beacon data on errors Johannes Berg <johannes.berg(a)intel.com> wifi: nl80211: check link is beaconing for color change Jason Huang <jason.huang2(a)infineon.com> wifi: brcmfmac: fix P2P action frame handling without device vif Zhao Li <enderaoelyther(a)gmail.com> wifi: cfg80211: stop PMSR before P2P and NAN teardown Karl Mehltretter <kmehltretter(a)gmail.com> serial: core: do fallible allocations before the console can be registered Karl Mehltretter <kmehltretter(a)gmail.com> serial: core: clear freed pointers on uart_register_driver() failure Karl Mehltretter <kmehltretter(a)gmail.com> tty: skip cdev_del() when no cdev is registered Haoxiang Li <haoxiang_li2024(a)163.com> HID: logitech-hidpp: Fix FF device cleanup on init failure Vicki Pfau <vi(a)endrift.com> HID: steam: Reject short reads Zheng Qixing <zhengqixing(a)huawei.com> blk-cgroup: fix race between policy activation and blkg destruction Caleb Sander Mateos <csander(a)purestorage.com> ublk: check import_ubuf() return value Cen Zhang <zzzccc427(a)gmail.com> ocfs2: validate inline xattrs during inode block validation Rafael J. Wysocki <rafael.j.wysocki(a)intel.com> thermal: hwmon: Remove hwmon class device along with its parent Linus Walleij <linusw(a)kernel.org> ARM: 9481/2: breakpoint: CFI breakpoints only on demand Cen Zhang <zzzccc427(a)gmail.com> ocfs2: o2hb: quiesce negotiate handlers and timeout work Yufan Chen <ericterminal(a)gmail.com> ocfs2/heartbeat: fix slot mapping rollback leaks on error paths Jiri Olsa <jolsa(a)kernel.org> bpf: Clear buf on error in __bpf_get_task_stack Jiri Olsa <jolsa(a)kernel.org> bpf: Remove trace_in argument from __bpf_get_stack Jiri Olsa <jolsa(a)kernel.org> bpf: Factor callchain_finalize function from __bpf_get_stack Jiri Olsa <jolsa(a)kernel.org> bpf: Factor callchain_store function from __bpf_get_stack Harry Wentland <harry.wentland(a)amd.com> drm/amd/display: Resize MST HDCP per-connector arrays to 32 Ray Wu <ray.wu(a)amd.com> drm/amd/display: disable replay when crc source is enabled Yeoreum Yun <yeoreum.yun(a)arm.com> coresight: etm4x: missing cscfg_csdev_disable_active_config() in perf enable Yang Xiuwei <yangxiuwei(a)kylinos.cn> scsi: sd: Fix special_vec mempool leak when scsi_alloc_sgtables() fails Bart Van Assche <bvanassche(a)acm.org> scsi: sd: Move the sd_config_discard() function definition Filipe Manana <fdmanana(a)suse.com> btrfs: defrag: fix deadlock between defrag and delalloc space reservation Qu Wenruo <wqu(a)suse.com> btrfs: always wait for ordered extents to avoid OE races Sun YangKai <sunyangkai(a)fnnas.com> btrfs: check if root is readonly when setting posix acl Johannes Thumshirn <johannes.thumshirn(a)wdc.com> btrfs: zoned: don't clobber the extent buffer when zeroing it out Qu Wenruo <wqu(a)suse.com> btrfs: qgroup: fix a wrong length calculation in qgroup_free_reserved_data() Pauli Virtanen <pav(a)iki.fi> Bluetooth: L2CAP: use proto_lock for l2cap_data to fix l2cap_disconn_ind Pauli Virtanen <pav(a)iki.fi> Bluetooth: ISO: fix race of kfree vs kref_get_unless_zero Sanghyun Park <sanghyun.park.cnu(a)gmail.com> bpf: Fix mmap_lock leak in irq_work path Lu Baolu <baolu.lu(a)linux.intel.com> iommu/vt-d: Flush context cache with correct SID when tearing down aliases Chuck Lever <chuck.lever(a)oracle.com> NFS: Return a delegation the client fails to record Kuniyuki Iwashima <kuniyu(a)google.com> amt: Don't support cross-netns setup. John Johansen <john.johansen(a)canonical.com> apparmor: fix unconfined user namespace restriction forced stack Ning Ding <dingning04(a)gmail.com> bpf: Compare iterator types during state pruning Daniel Borkmann <daniel(a)iogearbox.net> bpf, s390: Clear fetch destination on faulting arena atomic Marek Szyprowski <m.szyprowski(a)samsung.com> clocksource/drivers/samsung_pwm: Switch to raw_spinlock_t type Maurizio Lombardi <mlombard(a)redhat.com> nvmet: fix max_qid race between configfs and controller allocation ZhengYuan Huang <gality369(a)gmail.com> ocfs2: validate orphan slot during inode read ZhengYuan Huang <gality369(a)gmail.com> ocfs2: validate DIO orphan slot during inode read Usama Arif <usama.arif(a)linux.dev> blk-iolatency: clear delay state when freeing policy data Usama Arif <usama.arif(a)linux.dev> blk-iocost: clear delay state when freeing policy data Yu Kuai <yukuai(a)fygo.io> blk-cgroup: delay freeing policy data after rcu grace period John Johansen <john.johansen(a)canonical.com> apparmor: fix deadlock in complain-mode change_hat Yiyang Chen <chenyy23(a)mails.tsinghua.edu.cn> bpf: Check pointer type for all atomic RMW paths Yunseong Kim <yunseong.kim(a)est.tech> ksmbd: fix slab-out-of-bounds read in ksmbd_alloc_user() Namjae Jeon <linkinjeon(a)kernel.org> ksmbd: serialize oplock close with pending break ownership Ilan Dudnik <ilan.dudnik(a)safebreach.com> ksmbd: defer publishing granted locks to prevent UAF/double-free race Gao Xiang <xiang(a)kernel.org> erofs: fix interlaced ztailpacking pclusters Namjae Jeon <linkinjeon(a)kernel.org> ksmbd: safely discard unregistered deferred locks Namjae Jeon <linkinjeon(a)kernel.org> ksmbd: detach blocked lock requests before freeing Namjae Jeon <linkinjeon(a)kernel.org> ksmbd: scope session state changes to bound connections Jeuk Kim <jeuk20.kim(a)gmail.com> NFSv4/flexfiles: fix NULL dereference for NFSv4.0 data servers Jiayuan Chen <jiayuan.chen(a)linux.dev> bpf, xdp: move offload check into dev_xdp_install() Petr Oros <poros(a)redhat.com> dpll: fix NULL deref in dpll_device_ops() during teardown race Anton Protopopov <a.s.protopopov(a)gmail.com> virtio_net: Fix resize of the RX ring Runyu Xiao <runyu.xiao(a)seu.edu.cn> ALSA: mtpav: shut down output timer before card teardown Eric Dumazet <edumazet(a)google.com> ip6mr: do not clone dst in ip6mr_cache_report() Nikolay Aleksandrov <razor(a)blackwall.org> net: bridge: arp/nd proxy: fix reading neigh ha Nikolay Aleksandrov <razor(a)blackwall.org> vxlan: fix reading neigh ha Jérémy Jean <Jeremy.Jean(a)oss.cyber.gouv.fr> NFSv4.1: zero referring call lists before decoding Jamal Hadi Salim <jhs(a)mojatatu.com> net/sched: account classifier filter allocations to memcg Michael Kelley <mhkelley58(a)gmail.com> Drivers: hv: vmbus: Skip VMBus module cleanup for non-nested root partition Pauli Virtanen <pav(a)iki.fi> Bluetooth: L2CAP: access chan->conn safely in get/setsockopt Breno Leitao <leitao(a)debian.org> Bluetooth: L2CAP: convert to getsockopt_iter Breno Leitao <leitao(a)debian.org> net: add getsockopt_iter callback to proto_ops Radek Podgorny <radek(a)podgorny.cz> Bluetooth: do not leak an hci_conn when a second LE connect is rejected Stanislav Fomichev <sdf.kernel(a)gmail.com> xsk: honor XDP_TX_METADATA in zero-copy path Anshumali Gaur <agaur(a)marvell.com> octeontx2-vf: fix workqueue and netdev race in probe/remove Victor Nogueira <victor(a)mojatatu.com> net/sched: act_ife: Only operate on Ethernet frames Eric Dumazet <edumazet(a)google.com> net/sched: add qstats_cpu_drop_inc() helper Eric Dumazet <edumazet(a)google.com> net_sched: sch_fq: add three drop_reason Pablo Neira Ayuso <pablo(a)netfilter.org> netfilter: nf_tables: skip double clone set expressions on element insert Florian Westphal <fw(a)strlen.de> netfilter: nf_tables: prepare for multiple elements in nft_trans_elem structure Florian Westphal <fw(a)strlen.de> netfilter: nf_tables: add nft_trans_commit_list_add_elem helper Florian Westphal <fw(a)strlen.de> netfilter: nf_tables: prefer nft_trans_elem_alloc helper Usama Arif <usama.arif(a)linux.dev> mm/huge_memory: transfer the pmd dirty bit to the folio on zap Christian Borntraeger <borntraeger(a)linux.ibm.com> KVM: s390: Fix memory corruption by not reinjecting CK machine checks Qihang <q.h.hack.winter(a)gmail.com> KVM: arm64: vgic-v3: take an LPI reference in vgic_v3_save_pending_tables Tiezhu Yang <yangtiezhu(a)loongson.cn> LoongArch: BPF: Refactor jump offset calculation in tail call Chao Yu <chao(a)kernel.org> f2fs: fix to avoid potential deadloop in f2fs_fsync_node_pages() Jesse Zhang <Jesse.Zhang(a)amd.com> drm/amdgpu: force complete the KIQ ring fences on reset Jesse Zhang <Jesse.Zhang(a)amd.com> drm/amdgpu: force complete the MES ring fences on reset Priya Hosur <Priya.Hosur(a)amd.com> drm/amdkfd: Add TLB flush after MES queue eviction/suspension Xiaogang Chen <xiaogang.chen(a)amd.com> drm/amdkfd: Fix error path at svm_migrate_copy_to_ram James Zhu <James.Zhu(a)amd.com> drm/amdkfd: return migration pages from copy function - again Xiaogang Chen <xiaogang.chen(a)amd.com> drm/amdkfd: Fix the case that vm range is hole at svm_migrate_copy_to_vram James Zhu <James.Zhu(a)amd.com> Revert "drm/amdkfd: return migration pages from copy function" James Zhu <James.Zhu(a)amd.com> drm/amdkfd: return migration pages from copy function Emily Deng <Emily.Deng(a)amd.com> drm/amdkfd: Fix partial migrate issue Cen Zhang (Microsoft Security FORGE Labs) <cenzhang(a)linux.microsoft.com> ksmbd: fix tree connection use-after-free in smb2_tree_connect() Kairui Song <kasong(a)tencent.com> mm/mglru: fix and remove redundant unevictable folio handling Kairui Song <kasong(a)tencent.com> mm/mglru: use the common routine for dirty/writeback reactivation Wei Xu <weixugc(a)google.com> mm/mglru: reset page lru tier bits when activating Jeff Layton <jlayton(a)kernel.org> lockd, nfsd: RCU-protect nlmsvc_ops dispatch Jeff Layton <jlayton(a)kernel.org> nfsd: restore rq_status_counter to even on all nfsd_dispatch() exit paths Jeff Layton <jlayton(a)kernel.org> nfsd: fix fcache_disposal UAF by inlining dispose state into nfsd_net Xiubo Li <xiubo.li(a)clyso.com> ceph: fix UAF in check_new_map() on session freed during unlock Michael Bommarito <michael.bommarito(a)gmail.com> ceph: cap delegated inode count in ceph_parse_deleg_inos() Frank Sorenson <sorenson(a)redhat.com> cifs: call pagecache_isize_extended() in cifs_setsize() when extending Bryam Vargas <hexlabsecurity(a)proton.me> smb: client: reject a tree connect response whose byte count is too small Jan Kara <jack(a)suse.cz> ext2: Fix lost inode updates for IS_SYNC inodes Chuck Lever <chuck.lever(a)oracle.com> SUNRPC: Reject short RFC 4121 MIC tokens in gss_krb5_verify_mic_v2 Chuck Lever <chuck.lever(a)oracle.com> svcrdma: Clear sc_cm_id when ADDR_CHANGE replacement fails Chuck Lever <chuck.lever(a)oracle.com> svcrdma: wake sq waiters when the transport closes Chuck Lever <chuck.lever(a)oracle.com> svcrdma: Add Write chunk WRs to the RPC's Send WR chain Chuck Lever <chuck.lever(a)oracle.com> svcrdma: Reject Read lists that exceed the page budget Dawei Feng <dawei.feng(a)seu.edu.cn> wifi: iwlwifi: dvm: fix memory leak in iwl_op_mode_dvm_start() Johannes Berg <johannes.berg(a)intel.com> wifi: iwlwifi: dvm: pair transport op-mode enter/leave Jens Axboe <axboe(a)kernel.dk> io_uring: defer eventfd signaling when queued from a wakeup handler Wei Fang <wei.fang(a)nxp.com> net: tap: fix wrong transport_header when sending VLAN-tagged frame Akihiko Odaki <akihiko.odaki(a)daynix.com> tap: Keep hdr_len in tap_get_user() Leon Romanovsky <leon(a)kernel.org> ntb: Store original DMA address for future release Koichiro Den <den(a)valinux.co.jp> NTB: ntb_transport: Use ntb_get_dma_dev() for DMA buffers Koichiro Den <den(a)valinux.co.jp> NTB: core: Add .get_dma_dev() callback to ntb_dev_ops Eric Dumazet <edumazet(a)google.com> tipc: avoid busy looping in tipc_exit_net() Thomas Zimmermann <tzimmermann(a)suse.de> fbdev: Wrap user-invoked calls to fb_set_var() in helper Ali Ahmet Memis <ali(a)iusegentoo.com> Bluetooth: ISO: zero the sockaddr before returning it in getname William Palacek <William.Palacek(a)amd.com> drm/amdkfd: Add bounds check for CRAT subtype length Yongqiang Sun <Yongqiang.Sun(a)amd.com> drm/amdkfd: Fix infinite loop parsing CRAT with zero subtype length Luxiao Xu <rakukuip(a)gmail.com> bpf: Check sk_state before sk_protocol in bpf_tcp_*_syncookie Qu Wenruo <wqu(a)suse.com> btrfs: initialize inode mapping flags for cached inodes Alex Deucher <alexander.deucher(a)amd.com> drm/amd/display: check if dml21_add_phantom_plane() is successful Yuho Choi <dbgh9129(a)gmail.com> dmaengine: idxd: fix double free of wq, engine, and group structs Michael Bommarito <michael.bommarito(a)gmail.com> idpf: bound interrupt-vector register fill to the allocated array Pauli Virtanen <pav(a)iki.fi> Bluetooth: hci_sync: hold conn in hci_connect_acl/le_sync() callbacks Arnaldo Carvalho de Melo <acme(a)redhat.com> perf tools: Use perf_env__get_cpu_topology() in machine__resolve() Pablo Neira Ayuso <pablo(a)netfilter.org> netfilter: nf_conntrack_expect: use conntrack GC to reap expectations Terry Bowman <terry.bowman(a)amd.com> cxl: Fix CXL_HEADERLOG_SIZE to match RAS Capability size Prasanna Kumar T S M <ptsm(a)linux.microsoft.com> soc: xilinx: Fix race condition in event registration Yihang Li <liyihang9(a)huawei.com> scsi: hisi_sas: Add slave_destroy interface for v3 hw Qiuxu Zhuo <qiuxu.zhuo(a)intel.com> EDAC/igen6: Fix call trace due to missing release() Qiuxu Zhuo <qiuxu.zhuo(a)intel.com> EDAC/igen6: Skip absent memory controllers Orange Kao <orange(a)aiven.io> EDAC/igen6: Add polling support Qiuxu Zhuo <qiuxu.zhuo(a)intel.com> EDAC/igen6: Initialize edac_op_state according to the configuration data David Carlier <devnexen(a)gmail.com> netfilter: flowtable: avoid num_encaps underflow on bridge VLAN untag Weiming Shi <bestswngs(a)gmail.com> btrfs: lzo: reject compressed segment that overflows the compressed input Cen Zhang <zzzccc427(a)gmail.com> ALSA: seq: oss: Serialize readq reset state with q->lock James Clark <james.clark(a)linaro.org> coresight: ete: Always save state on power down Ivan Abramov <i.abramov(a)mt-integration.ru> ieee802154: Avoid calling WARN_ON() on -ENOMEM in cfg802154_switch_netns() Rosen Penev <rosenp(a)gmail.com> net: emac: Fix NULL pointer dereference in emac_probe Rosen Penev <rosenp(a)gmail.com> net: ibm: emac: use platform_get_irq Rosen Penev <rosenp(a)gmail.com> net: ibm: emac: use devm_platform_ioremap_resource Masami Hiramatsu (Google) <mhiramat(a)kernel.org> tracing/probes: Remove WARN_ON_ONCE from parse_btf_arg Peter Ujfalusi <peter.ujfalusi(a)linux.intel.com> ASoC: SOF: ipc4-pcm: Continue the pipeline trigger in case of IPC timeout Peter Ujfalusi <peter.ujfalusi(a)linux.intel.com> ASoC: SOF: pcm: Add snd_sof_pcm specific wrappers for dev_dbg() and dev_err() Peter Ujfalusi <peter.ujfalusi(a)linux.intel.com> ASoC: SOF: pcm: Move period/buffer configuration print after platform open Peter Ujfalusi <peter.ujfalusi(a)linux.intel.com> ASoC: SOF: Relocate and rework functionality for PCM stream freeing Hongjie Fang <hongjiefang(a)asrmicro.com> scsi: core: pair EH runtime PM get and put Jérémy Jean <Jeremy.Jean(a)oss.cyber.gouv.fr> sctp: validate cookie AUTH state before use Julian Anastasov <ja(a)ssi.bg> ipvs: revalidate ihl to prevent out-of-bounds access Aleksandr Nogikh <nogikh(a)google.com> firewire: ohci: fix NULL pointer dereference in ar_context_release Mark Tomlinson <mark.tomlinson(a)alliedtelesis.co.nz> gpio: pca953x: fix pca953x_irq_bus_sync_unlock regmap lock Karthikeyan KS <karthiproffesional(a)gmail.com> soc: aspeed: lpc-snoop: Fix usercopy overflow in snoop_file_read Yun Zhou <yun.zhou(a)windriver.com> xfs: handle NULL b_addr in xfs_buf_free David Lee <david.lee(a)trailofbits.com> btrfs: lzo: reject inline extents without valid headers Chengfeng Ye <nicoyip.dev(a)gmail.com> bpf: Fix netns reference imbalance in conntrack kfuncs Linfeng Sun <linfeng.sun.dev(a)gamil.com> vhost_iotlb: bound map allocation in add_range Guenter Roeck <linux(a)roeck-us.net> hwmon: (pmbus) Fix type confusion in notification logic Michael Chan <michael.chan(a)broadcom.com> bnxt_en: Disable EOP for TPA on all chips to prevent data corruption Eric Dumazet <edumazet(a)google.com> netfilter: nf_flow_table: drop existing skb dst before skb_dst_set_noref() Alexandra Winter <wintera(a)linux.ibm.com> s390/ism: Fix UAF of sba and ieq during ism_dev_exit() Hongyan Xu <getshell(a)seu.edu.cn> watchdog: at91sam9_wdt: prevent timer rearm during teardown Jérémy Jean <Jeremy.Jean(a)oss.cyber.gouv.fr> tls: rx: restore msg_iter before TLS 1.3 optimistic retry Sabrina Dubroca <sd(a)queasysnail.net> selftests: tls: add rekey tests Steven Rostedt <rostedt(a)goodmis.org> eventfs: Use children field for rcu head and add memory barriers Zhiling Zou <zhilinz(a)nebusec.ai> mm/page_table_check: skip special zero mappings Dongjiang Zhu <zhudongjiang(a)fnnas.com> btrfs: skip global block reserve accounting for rescue mounts Maciej Fijalkowski <maciej.fijalkowski(a)intel.com> xsk: reclaim invalid Tx descriptors in ZC batch path Maciej Fijalkowski <maciej.fijalkowski(a)intel.com> xsk: provide sufficient space in pool->tx_descs Jason Xing <kernelxing(a)tencent.com> xsk: drain continuation descs after overflow in xsk_build_skb() Cen Zhang (Microsoft) <blbllhy(a)gmail.com> net/sched: cls_u32: validate offshift to prevent shift-out-of-bounds David Howells <dhowells(a)redhat.com> netfs: Fix folio_queue ENOMEM in writeback by adding a mempool Pauli Virtanen <pav(a)iki.fi> Bluetooth: ISO: lock sk in iso_connect_ind Pauli Virtanen <pav(a)iki.fi> Bluetooth: ISO: hold sk properly in iso_conn_ready Pauli Virtanen <pav(a)iki.fi> Bluetooth: hci_sync: hold conn in hci_connect_big_sync() callback Pauli Virtanen <pav(a)iki.fi> Bluetooth: hci_sync: hold conn in hci_connect_pa_sync() callback Hariprasad Kelam <hkelam(a)marvell.com> octeontx2-af: Block VFs from clobbering special CGX PKIND state Peiyang He <peiyang_he(a)smail.nju.edu.cn> iommu/iommufd: Fix IOPF group ownership UAF Hidayath Khan <hidayath(a)linux.ibm.com> dibs: fix use-after-free of dmb_node in loopback attach/detach/unregister David Howells <dhowells(a)redhat.com> afs: Fix UAF when sending a message Harald Freudenberger <freude(a)linux.ibm.com> s390/zcrypt: Close speculative mem read possibility Harald Freudenberger <freude(a)linux.ibm.com> s390/zcrypt: Rework domain processing within zcrypt device driver Harald Freudenberger <freude(a)linux.ibm.com> s390/zcrypt: Move inline function rng_type6cprb_msgx from header to code Harald Freudenberger <freude(a)linux.ibm.com> s390/ap/zcrypt: New xflag parameter Harald Freudenberger <freude(a)linux.ibm.com> s390/ap: Introduce ap message buffer pool Harald Freudenberger <freude(a)linux.ibm.com> s390/ap/zcrypt: Rework AP message buffer allocation Harald Freudenberger <freude(a)linux.ibm.com> s390/ap: Move response_type struct into ap_msg struct George Zhang <george.zhang(a)amd.com> drm/amd/display: Fix divide-by-zero in calculate_mcache_setting on zero viewport Wei Zhang <wei.zhang(a)oss.qualcomm.com> wifi: ath11k: cancel SSR work items during PCI shutdown Di Shen <di.shen(a)unisoc.com> OPP: Fix race between OPP addition and lookup Takashi Iwai <tiwai(a)suse.de> ALSA: seq: oss: Fix UAF at handling events with embedded SysEx data Geliang Tang <geliang(a)kernel.org> nvmet-tcp: check return value of nvmet_tcp_set_queue_sock Abd-Alrhman Masalkhi <abd.masalkhi(a)gmail.com> md/raid1,raid10: fix error-path detection with md_cloned_bio() Abd-Alrhman Masalkhi <abd.masalkhi(a)gmail.com> md/raid1,raid10: fix bio accounting for split md cloned bios Abd-Alrhman Masalkhi <abd.masalkhi(a)gmail.com> md/raid1,raid10: fix deadlock in read error recovery path Abd-Alrhman Masalkhi <abd.masalkhi(a)gmail.com> md: replace wait loop with wait_event() in md_handle_request() Miaoqing Pan <miaoqing.pan(a)oss.qualcomm.com> wifi: ath12k: fix memory leak in ath12k_wifi7_dp_rx_h_verify_tkip_mic() Zhang Cen <rollkingzzc(a)gmail.com> ocfs2: validate fast symlink target during inode read David Windsor <dwindsor(a)gmail.com> bpf: Reject sleepable BPF_LSM_CGROUP programs at load time Larysa Zaremba <larysa.zaremba(a)intel.com> ixgbe: do not configure xps for XDP queues Dan Williams <djbw(a)kernel.org> cxl/region: Block region delete during region creation Joe Damato <joe(a)dama.to> bnxt: fix head underflow on XDP head-grow Eric Dumazet <edumazet(a)google.com> net: watchdog: fix refcount tracking races Cen Zhang <zzzccc427(a)gmail.com> ALSA: seq: avoid stale FIFO cells during resize Takashi Iwai <tiwai(a)suse.de> ALSA: seq: Clean up fifo locking with guard Kuniyuki Iwashima <kuniyu(a)google.com> sockmap: Fix use-after-free in udp_bpf_recvmsg() Selvin Xavier <selvin.xavier(a)broadcom.com> RDMA/bnxt_re: Initialize dpi variable to zero Selvin Xavier <selvin.xavier(a)broadcom.com> RDMA/bnxt_re: Free SRQ toggle page after firmware teardown Leon Romanovsky <leon(a)kernel.org> RDMA/bnxt_re: Remove unusable nq variable Kashyap Desai <kashyap.desai(a)broadcom.com> RDMA/bnxt_re: Fix budget handling of notification queue Selvin Xavier <selvin.xavier(a)broadcom.com> RDMA/bnxt_re: Free CQ toggle page after firmware teardown Selvin Xavier <selvin.xavier(a)broadcom.com> RDMA/bnxt_re: Add a max slot check for SQ Selvin Xavier <selvin.xavier(a)broadcom.com> RDMA/bnxt_re: Avoid repeated requests to allocate WC pages Jacob Moroni <jmoroni(a)google.com> RDMA/irdma: Replace waitqueue and flag with completion Eric Dumazet <edumazet(a)google.com> net: serialize netif_running() check in enqueue_to_backlog() Baoli.Zhang <baoli.zhang(a)linux.intel.com> soundwire: fix bug in sdw_add_element_group_count found by syzkaller Abd-Alrhman Masalkhi <abd.masalkhi(a)gmail.com> md/raid1: fix writes_pending and barrier reference leaks on write failures Abd-Alrhman Masalkhi <abd.masalkhi(a)gmail.com> md/raid10: fix writes_pending leak on write request failures Yiyang Chen <chenyy23(a)mails.tsinghua.edu.cn> bpf: Guard conntrack opts error writes Eric Dumazet <edumazet(a)google.com> tipc: fix UAF in cleanup_bearer() due to premature dst_cache_destroy() Xin Long <lucien.xin(a)gmail.com> sctp: add INIT verification after cookie unpacking Abdurrahman Hussain <abdurrahman(a)nexthop.ai> hwmon: (pmbus/core) honor vrm_version in pmbus_data2reg_vid() Boris Brezillon <boris.brezillon(a)collabora.com> drm/panthor: Always use the IRQ-safe variant when acquiring the fence lock Xin Long <lucien.xin(a)gmail.com> sctp: fix addr_wq_timer race in sctp_free_addr_wq() Michael Bommarito <michael.bommarito(a)gmail.com> xen/pvcalls: bound backend response req_id before indexing rsp[] David Howells <dhowells(a)redhat.com> afs: Fix reinitialisation of the inode, in particular ->lock_work Morduan Zang <zhangdandan(a)uniontech.com> iomap: guard io_size EOF trim against concurrent truncate underflow David Howells <dhowells(a)redhat.com> netfs: Fix netfs_create_write_req() to handle async cache object creation David Howells <dhowells(a)redhat.com> netfs: Drop the was_async arg from netfs_read_subreq_terminated() David Howells <dhowells(a)redhat.com> netfs: Abstract out a rolling folio buffer implementation David Howells <dhowells(a)redhat.com> netfs: Add a tracepoint to log the lifespan of folio_queue structs David Howells <dhowells(a)redhat.com> netfs: Use a folio_queue allocation and free functions David Howells <dhowells(a)redhat.com> netfs: Clean up some whitespace in trace header Feng Liu <feliu(a)nvidia.com> net/mlx5e: Fix publication race for priv->channel_stats[] Cen Zhang <zzzccc427(a)gmail.com> Bluetooth: 6lowpan: avoid untracked enable work Yuho Choi <dbgh9129(a)gmail.com> net/liquidio: drop cached VF pci_dev LUT Eric Dumazet <edumazet(a)google.com> ipv4: igmp: Fix potential memory leaks in igmp_mod_timer() and igmp_stop_timer() Marc Zyngier <maz(a)kernel.org> KVM: arm64: vgic: Handle race between interrupt affinity change and LPI disabling Ian Bridges <icb(a)fastmail.org> ocfs2: fix UBSAN array-index-out-of-bounds in ocfs2_sum_rightmost_rec Deepanshu Kartikey <kartikey406(a)gmail.com> ocfs2: validate i_refcount_loc when refcount flag is set Dmitry Antipov <dmantipov(a)yandex.ru> ocfs2: add extra consistency checks for chain allocator dinodes Dmitry Antipov <dmantipov(a)yandex.ru> ocfs2: add suballoc slot check in ocfs2_validate_inode_block() Julian Sun <sunjunchao2870(a)gmail.com> ocfs2: correct l_next_free_rec in online check Mikulas Patocka <mpatocka(a)redhat.com> dm-verity: fix buffer overflow in FEC calculation Guangshuo Li <lgs201920130244(a)gmail.com> mmc: vub300: fix use-after-free on probe failure Johan Hovold <johan(a)kernel.org> mmc: vub300: rename probe error labels Johan Hovold <johan(a)kernel.org> mmc: vub300: fix use-after-free on disconnect Binbin Zhou <zhoubinbin(a)loongson.cn> mmc: vub300: Use devm_mmc_alloc_host() helper Bryam Vargas <hexlabsecurity(a)proton.me> ata: libata-core: Add NOLPM quirk for PNY CS900 1TB SSD Niklas Cassel <cassel(a)kernel.org> ata: libata-core: Disable LPM on Silicon Motion MD619{H,G}XCLDE3TC Zhao Li <enderaoelyther(a)gmail.com> wifi: ieee80211: validate MLE common info length Zhao Li <enderaoelyther(a)gmail.com> wifi: mac80211: validate extension-frame layout before RX Harald Freudenberger <freude(a)linux.ibm.com> s390/zcrypt: Fix buffer over-read in cca_cipher2protkey Amir Goldstein <amir73il(a)gmail.com> ovl: check access to copy_file_range source with src mounter creds Yongqiang Sun <Yongqiang.Sun(a)amd.com> drm/amdkfd: clamp v9 CRIU control stack checkpoint copy to BO size Jamal Hadi Salim <jhs(a)mojatatu.com> net/sched: Handle TC_ACT_REDIRECT from qdisc filter chains Honglei Huang <honghuan(a)amd.com> drm/amd/display: use kvzalloc to allocate struct dc George Guo <guodongtai(a)kylinos.cn> LoongArch: Fix address space mismatch in kexec command line lookup Petr Wozniak <petr.wozniak(a)gmail.com> xfrm: fix stale skb->prev after async crypto steals a GSO segment Tejun Heo <tj(a)kernel.org> sched_ext: Don't warn on core-sched forced idle in put_prev_task_scx() Jacob Moroni <jmoroni(a)google.com> RDMA/irdma: Prevent user-triggered null deref on QP create Christophe JAILLET <christophe.jaillet(a)wanadoo.fr> wifi: cfg80211: Fix an error handling path in cfg80211_wext_siwscan() Maoyi Xie <maoyixie.tju(a)gmail.com> wifi: mac80211: defer link RX stats percpu free to RCU Sarika Sharma <quic_sarishar(a)quicinc.com> wifi: cfg80211: add link_station_info structure to support MLO statistics Sarika Sharma <quic_sarishar(a)quicinc.com> wifi: mac80211: refactor populating mesh related fields in sinfo Cen Zhang <zzzccc427(a)gmail.com> wifi: cfg80211: use wiphy work for socket owner autodisconnect Mostafa Saleh <smostafa(a)google.com> firmware: arm_ffa: Fix out-of-bound writes in ffa_setup_and_transmit() Matt Bobrowski <mattbobrowski(a)google.com> bpf: Fix UAF in sock clone early bailouts Fushuai Wang <wangfushuai(a)baidu.com> bpf: Use rcu_read_lock_dont_migrate in bpf_sk_storage.c Menglong Dong <menglong8.dong(a)gmail.com> rcu: add rcu_read_lock_dont_migrate() Hou Tao <houtao1(a)huawei.com> bpf: Disable migration when cloning sock storage Hou Tao <houtao1(a)huawei.com> bpf: Disable migration when destroying sock storage Pauli Virtanen <pav(a)iki.fi> Bluetooth: hci_sync: extend conn_hash lookup critical sections Arvind Yadav <arvind.yadav(a)intel.com> drm/xe/guc: Keep scheduler timeline name alive Ruoyu Wang <ruoyuw560(a)gmail.com> bnxt_en: Handle partially initialized auxiliary devices Pavan Chebbi <pavan.chebbi(a)broadcom.com> fwctl/bnxt_en: Refactor aux bus functions to be more generic Weiming Shi <bestswngs(a)gmail.com> tipc: serialize udp bearer replicast list updates Frank Sorenson <sorenson(a)redhat.com> cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths Frank Sorenson <sorenson(a)redhat.com> cifs: prevent readdir from changing file size due to stale directory metadata Nicholas Dudar <main.kalliope(a)gmail.com> LoongArch: BPF: Zero-extend signed ALU32 div/mod results Emil Tantilov <emil.s.tantilov(a)intel.com> idpf: fix max_vport related crash on allocation error during init David Francis <David.Francis(a)amd.com> drm/amdkfd: Check bounds on CRIU restore queue type and mqd size Joonas Lahtinen <joonas.lahtinen(a)linux.intel.com> drm/i915/gt: Fix NULL deref on sched_engine alloc failure Jani Nikula <jani.nikula(a)intel.com> drm/i915/mst: limit DP MST ESI service loop Mario Limonciello <mario.limonciello(a)amd.com> drm/amdgpu: Release VFCT ACPI table reference Lijo Lazar <lijo.lazar(a)amd.com> drm/amdgpu: Add wrapper for freeing vbios memory Lijo Lazar <lijo.lazar(a)amd.com> drm/amdgpu: Use dbg level for VBIOS check messages Linmao Li <lilinmao(a)kylinos.cn> drm/vc4: Shut down BO cache timer before teardown Valery Borovsky <vebohr(a)gmail.com> media: stm32-dcmipp: Return queued buffers on start_streaming() failure Alain Volmat <alain.volmat(a)foss.st.com> media: stm32: dcmipp: replace s_stream with enable/disable_streams Alain Volmat <alain.volmat(a)foss.st.com> media: stm32: dcmipp: use v4l2_subdev_is_streaming Harish Kasiviswanathan <Harish.Kasiviswanathan(a)amd.com> drm/amdgpu: Fix kernel panic during driver load failure Sean Christopherson <seanjc(a)google.com> KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state Carlos López <clopez(a)suse.de> KVM: x86: Unconditionally recompute CR8 intercept on PPR update Sean Christopherson <seanjc(a)google.com> KVM: x86: Move update_cr8_intercept() to lapic.c Sean Christopherson <seanjc(a)google.com> KVM: x86: Rename APIC base setters to better capture their relationship Sean Christopherson <seanjc(a)google.com> KVM: x86: Move kvm_set_apic_base() implementation to lapic.c (from x86.c) Sean Christopherson <seanjc(a)google.com> KVM: x86: Drop superfluous kvm_lapic_set_base() call when setting APIC state Namjae Jeon <linkinjeon(a)kernel.org> ksmbd: prevent path traversal bypass by restricting caseless retry Haofeng Li <lihaofeng(a)kylinos.cn> ksmbd: validate NTLMv2 response before updating session key Ralph Boehme <slow(a)samba.org> smb/client: fix chown/chgrp with SMB3 POSIX Extensions Sean Christopherson <seanjc(a)google.com> KVM: guest_memfd: Treat memslot binding offset+size as unsigned values Guenter Roeck <linux(a)roeck-us.net> hwmon: (lm90) Add lock protection to lm90_alert David Howells <dhowells(a)redhat.com> netfs: Fix zeropoint update where i_size > remote_i_size Felix Gu <ustc.gu(a)gmail.com> drm/msm/adreno: Fix a reference leak in a6xx_gpu_init() Jia Zhu <zhujia.zj(a)bytedance.com> erofs: fix metabuf leak in inode xattr initialization Zhao Li <enderaoelyther(a)gmail.com> wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb Sarika Sharma <sarika.sharma(a)oss.qualcomm.com> wifi: mac80211: fix missing RX bitrate update for mesh forwarding path Florian Westphal <fw(a)strlen.de> netfilter: x_tables: allocate hook ops while under mutex Florian Westphal <fw(a)strlen.de> netfilter: x_tables: allow initial table replace without emitting audit log message Florian Westphal <fw(a)strlen.de> netfilter: ebtables: move to two-stage removal scheme Florian Westphal <fw(a)strlen.de> netfilter: bridge: eb_tables: close module init race David Howells <dhowells(a)redhat.com> netfs: Fix missing locking around retry adding new subreqs David Howells <dhowells(a)redhat.com> netfs: Fix leak of request in netfs_write_begin() error handling Guenter Roeck <linux(a)roeck-us.net> hwmon: (lm90) Stop work before releasing hwmon device Qing Ming <a0yami(a)mailbox.org> cgroup/rstat: validate cpu before css_rstat_cpu() access Eric Dumazet <edumazet(a)google.com> tcp: fix stale per-CPU tcp_tw_isn leak enabling ISN prediction Kuniyuki Iwashima <kuniyu(a)google.com> tcp: Remove sk->sk_prot->orphan_count. Fernando Fernandez Mancera <fmancera(a)suse.de> netfilter: nf_tables: fix dst corruption in same register operation Jakub Kicinski <kuba(a)kernel.org> ethtool: rss: fix indir_table and hkey leak on get_rxfh failure Jakub Kicinski <kuba(a)kernel.org> ethtool: module: call ethnl_ops_complete() on module flash errors Chuck Lever <chuck.lever(a)oracle.com> net/handshake: hand off the pinned file reference to accept_doit Christian König <christian.koenig(a)amd.com> drm/amdgpu: fix amdgpu_hmm_range_get_pages Lorenzo Bianconi <lorenzo(a)kernel.org> net: airoha: Add missing bits in airoha_qdma_cleanup_tx_queue() Lorenzo Bianconi <lorenzo(a)kernel.org> net: airoha: Do not read uninitialized fragment address in airoha_dev_xmit() Yinjie Yao <yinjie.yao(a)amd.com> drm/amdgpu/vcn: set no_user_fence for VCN v4.0 enc ring Jiajia Liu <liujiajia(a)kylinos.cn> wifi: mt76: add wcid publish check in mt76_sta_add Konstantin Khorenko <khorenko(a)virtuozzo.com> gcov: use atomic counter updates to fix concurrent access crashes Mikhail Lobanov <m.lobanov(a)rosa.ru> f2fs: read COW data with the original inode during atomic write Hongling Zeng <zenghongling(a)kylinos.cn> fbdev: omap2: fix use-after-free in omapfb_mmap Hongling Zeng <zenghongling(a)kylinos.cn> fbdev: omap2: fix inconsistent lock returns in omapfb_mmap Anna Maniscalco <anna.maniscalco2000(a)gmail.com> drm/msm: always recover the gpu Yongpeng Yang <yangyongpeng(a)xiaomi.com> f2fs: fix fsck inconsistency caused by incorrect nat_entry flag usage Harry Wentland <harry.wentland(a)amd.com> drm/amd/display: Fix out-of-bounds read in dp_get_eq_aux_rd_interval() Jens Axboe <axboe(a)kernel.dk> io_uring/napi: cap busy_poll_to 10 msec Olivier Langlois <olivier(a)trillion01.com> io_uring/napi: clean up __io_napi_do_busy_loop Olivier Langlois <olivier(a)trillion01.com> io_uring/napi: Use lock guards Olivier Langlois <olivier(a)trillion01.com> io_uring/napi: improve __io_napi_add Olivier Langlois <olivier(a)trillion01.com> io_uring/napi: protect concurrent io_napi_entry timeout accesses Erni Sri Satya Vennela <ernis(a)linux.microsoft.com> net: mana: Guard mana_remove against double invocation Morduan Zang <zhangdandan(a)uniontech.com> net: phonet: do not BUG_ON() in pn_socket_autobind() on failed bind Mikhail Gavrilov <mikhail.v.gavrilov(a)gmail.com> drm/amd/display: Wrap DCN32 phantom-plane allocation in DC_RUN_WITH_PREEMPTION_ENABLED Qu Wenruo <wqu(a)suse.com> btrfs: only release the dirty pages io tree after successful writes Zhenzhong Duan <zhenzhong.duan(a)intel.com> iommu/vt-d: Avoid NULL pointer dereference or refcount corruption Hyunwoo Kim <imv4bel(a)gmail.com> KVM: arm64: Take the SRCU lock for page table walks in fault injection and AT emulation Fedor Pchelkin <pchelkin(a)ispras.ru> wifi: fix leak if split 6 GHz scanning fails Xin Long <lucien.xin(a)gmail.com> sctp: validate embedded INIT chunk and address list lengths in cookie Salman Alghamdi <me(a)cipherat.com> staging: rtl8723bs: rtw_mlme: add bounds checks before ie_length subtraction Danilo Krummrich <dakr(a)kernel.org> vdpa: use generic driver_override infrastructure Ritesh Harjani (IBM) <ritesh.list(a)gmail.com> powerpc/pgtable-frag: Fix bad page state in pte_frag_destroy Ritesh Harjani (IBM) <ritesh.list(a)gmail.com> powerpc/64s: Fix unmap race with PMD migration entries Lorenzo Bianconi <lorenzo(a)kernel.org> wifi: mt76: Fix memory leak destroying device Sean Wang <sean.wang(a)mediatek.com> wifi: mt76: mt7925: fix potential deadlock in mt7925_roc_abort_sync Eric Dumazet <edumazet(a)google.com> net: pull headers in qdisc_pkt_len_segs_init() Damien Riégel <damien.riegel(a)silabs.com> greybus: raw: fix use-after-free on cdev close Jianan Huang <huangjianan(a)xiaomi.com> f2fs: avoid reading already updated pages during GC Yongpeng Yang <yangyongpeng(a)xiaomi.com> f2fs: fix data loss caused by incorrect use of nat_entry flag Michal Schmidt <mschmidt(a)redhat.com> ice: fix double-free of tx_buf skb Pablo Neira Ayuso <pablo(a)netfilter.org> netfilter: nat: use kfree_rcu to release ops Edward Adam Davis <eadavis(a)qq.com> sched/psi: fix race between file release and pressure write Lorenzo Bianconi <lorenzo(a)kernel.org> net: airoha: fix BQL imbalance in TX path Raphael Zimmer <raphael.zimmer(a)tu-ilmenau.de> libceph: Fix potential out-of-bounds access in __ceph_x_decrypt() Weiming Shi <bestswngs(a)gmail.com> tap: fix stack info leak in tap_ioctl() SIOCGIFHWADDR D. Wythe <alibuda(a)linux.alibaba.com> Revert "net/smc: Introduce TCP ULP support" Li Zhijian <lizhijian(a)fujitsu.com> RDMA/rxe: Fix iova-to-va conversion for MR page sizes != PAGE_SIZE Daisuke Matsuda <matsuda-daisuke(a)fujitsu.com> RDMA/rxe: Move some code to rxe_loc.h in preparation for ODP Florian Westphal <fw(a)strlen.de> netfilter: nf_tables: use list_del_rcu for netlink hooks Stephen Smalley <stephen.smalley.work(a)gmail.com> selinux: allow multiple opens of /sys/fs/selinux/policy Yicong Yang <yangyicong(a)hisilicon.com> coresight: tmc-etr: Fix race condition between sysfs and perf mode Mike Snitzer <snitzer(a)hammerspace.com> NFS/localio: prevent direct reclaim recursion into NFS via nfs_writepages Srinivasan Shanmugam <srinivasan.shanmugam(a)amd.com> drm/amd/display: Fix dc_link NULL handling in HPD init Johan Hovold <johan(a)kernel.org> spi: ch341: fix devres lifetime Yang Yingliang <yangyingliang(a)huawei.com> spi: ch341: switch to use devm_spi_alloc_host() Jason Gunthorpe <jgg(a)ziepe.ca> RDMA/mlx4: Fix mis-use of RCU in mlx4_srq_event() Suren Baghdasaryan <surenb(a)google.com> refcount: provide ops for cases when object's memory can be reused Yongpeng Yang <yangyongpeng(a)xiaomi.com> f2fs: fix fsck inconsistency caused by FGGC of node block Osama Abdelkader <osama.abdelkader(a)gmail.com> riscv: kvm: fix vector context allocation leak Conor Dooley <conor.dooley(a)microchip.com> spi: microchip-core-qspi: control built-in cs manually Conor Dooley <conor.dooley(a)microchip.com> spi: microchip-core-qspi: remove unused param from mchp_coreqspi_write_op() Conor Dooley <conor.dooley(a)microchip.com> spi: microchip-core-qspi: set min_speed_hz during probe Miquel Raynal <miquel.raynal(a)bootlin.com> spi: microchip-core-qspi: Support per spi-mem operation frequency switches Eric Biggers <ebiggers(a)kernel.org> dm-verity-fec: fix reading parity bytes split across blocks (take 3) Yosry Ahmed <yosry(a)kernel.org> KVM: nSVM: Avoid clearing VMCB_LBR in vmcb12 Sam Edwards <cfsworks(a)gmail.com> ceph: fix num_ops off-by-one when crypto allocation fails Matthew Wilcox (Oracle) <willy(a)infradead.org> ceph: Remove uses of page from ceph_process_folio_batch() Viacheslav Dubeyko <Slava.Dubeyko(a)ibm.com> ceph: introduce ceph_process_folio_batch() method Viacheslav Dubeyko <Slava.Dubeyko(a)ibm.com> ceph: extend ceph_writeback_ctl for ceph_writepages_start() refactoring Matthew Wilcox (Oracle) <willy(a)infradead.org> ceph: Remove call to PagePrivate2() Yosry Ahmed <yosry(a)kernel.org> KVM: nSVM: Always use NextRIP as vmcb02's NextRIP after first L2 VMRUN Sean Christopherson <seanjc(a)google.com> KVM: x86: Rename "governed features" helpers to use "guest_cpu_cap" Corey Minyard <corey(a)minyard.net> ipmi:ssif: Clean up kthread on errors Yosry Ahmed <yosry(a)kernel.org> KVM: SVM: Add missing save/restore handling of LBR MSRs Deepanshu Kartikey <kartikey406(a)gmail.com> gfs2: fix memory leaks in gfs2_fill_super error path Jeongjun Park <aha310510(a)gmail.com> drm/exynos: vidi: use priv->vidi_dev for ctx lookup in vidi_connection_ioctl() Jie Zhang <jzhang918(a)gmail.com> net: stmmac: fix oops when split header is enabled Boris Burkov <boris(a)bur.io> btrfs: fix EEXIST abort due to non-consecutive gaps in chunk allocation Guillaume Gonnet <ggonnet.linux(a)gmail.com> bpf: Fix tcx/netkit detach permissions when prog fd isn't given Dave Airlie <airlied(a)redhat.com> nouveau/gsp: drop WARN_ON in ACPI probes Dragos Tatulea <dtatulea(a)nvidia.com> net/mlx5e: RX, Fix XDP multi-buf frag counting for striding RQ Dragos Tatulea <dtatulea(a)nvidia.com> net/mlx5e: RX, Fix XDP multi-buf frag counting for legacy RQ Miaoqian Lin <linmq006(a)gmail.com> rxrpc, afs: Fix missing error pointer check after rxrpc_kernel_lookup_peer() David Howells <dhowells(a)redhat.com> rxrpc: kdoc: Update function descriptions and add link from rxrpc.rst Chen Ni <nichen(a)iscas.ac.cn> ASoC: amd: acp-mach-common: Add missing error check for clock acquisition Vladimir Riabchun <ferr.lambarginio(a)gmail.com> scsi: qla2xxx: Completely fix fcport double free Adrian Hunter <adrian.hunter(a)intel.com> i3c: mipi-i3c-hci: Fix race in DMA ring dequeue Adrian Hunter <adrian.hunter(a)intel.com> i3c: mipi-i3c-hci: Correct RING_CTRL_ABORT handling in DMA dequeue Kohei Enju <kohei(a)enjuk.jp> ice: ptp: don't WARN when controlling PF is unavailable Srinivasan Shanmugam <srinivasan.shanmugam(a)amd.com> drm/amd/display: Fix NULL pointer dereference in dcn401_init_hw() Emmanuel Grumbach <emmanuel.grumbach(a)intel.com> wifi: iwlwifi: mvm: don't send a 6E related command when not supported Prathamesh Shete <pshete(a)nvidia.com> soc/tegra: pmc: Fix unsafe generic_handle_irq() call Thierry Reding <treding(a)nvidia.com> syscore: Pass context data to callbacks Kai Huang <kai.huang(a)intel.com> KVM: Export hardware virtualization enabling/disabling functions Ming Qian <ming.qian(a)oss.nxp.com> media: verisilicon: Avoid G2 bus error while decoding H.264 and HEVC Nicolas Dufresne <nicolas.dufresne(a)collabora.com> media: v4l2-mem2mem: Add a kref to the v4l2_m2m_dev structure Heinz Mauelshagen <heinzm(a)redhat.com> md raid: fix hang when stopping arrays with metadata through dm-raid Filipe Manana <fdmanana(a)suse.com> btrfs: don't BUG() on unexpected delayed ref type in run_one_delayed_ref() Filipe Manana <fdmanana(a)suse.com> btrfs: remove 'reserved' argument from btrfs_pin_extent() Qu Wenruo <wqu(a)suse.com> btrfs: do not ASSERT() when the fs flips RO inside btrfs_repair_io_failure() Lijo Lazar <lijo.lazar(a)amd.com> drm/amdgpu: Skip vcn poison irq release on VF Hugo Villeneuve <hvilleneuve(a)dimonoff.com> drm: renesas: rz-du: mipi_dsi: fix kernel panic when rebooting for some panels Daniil Dulov <d.dulov(a)aladdin.ru> ring-buffer: Fix possible dereference of uninitialized pointer Jackson Lee <jackson.lee(a)chipsnmedia.com> media: chips-media: wave5: Fix Null reference while testing fluster Tetsuo Handa <penguin-kernel(a)I-love.SAKURA.ne.jp> team: avoid NETDEV_CHANGEMTU event when unregistering slave Ping-Ke Shih <pkshih(a)realtek.com> wifi: rtw89: pci: validate sequence number of TX release report Cédric Bellegarde <cedric.bellegarde(a)adishatz.org> ASoC: qcom: q6asm: drop DSP responses for closed data streams Srinivas Kandagatla <srinivas.kandagatla(a)oss.qualcomm.com> ASoC: qcom: q6asm: handle the responses after closing Nicholas Kazlauskas <nicholas.kazlauskas(a)amd.com> drm/amd/display: Adjust PHY FSM transition to TX_EN-to-PLL_ON for TMDS on DCN35 Nicholas Carlini <nicholas(a)carlini.com> ksmbd: fix signededness bug in smb_direct_prepare_negotiation() Johannes Berg <johannes.berg(a)intel.com> wifi: iwlwifi: fix 22000 series SMEM parsing Szymon Wilczek <swilczek.lx(a)gmail.com> ntfs3: fix circular locking dependency in run_unpack_ex Konstantin Komarov <almaz.alexandrovich(a)paragon-software.com> fs/ntfs3: Accumulated refactoring changes Filipe Manana <fdmanana(a)suse.com> btrfs: fix zero size inode with non-zero size after log replay David Sterba <dsterba(a)suse.com> btrfs: tree-log: don't use token set/get accessors in fill_inode_item() Joel Fernandes <joelagnelf(a)nvidia.com> srcu: Use irq_work to start GP in tiny SRCU Eric Dumazet <edumazet(a)google.com> ipv6: ioam: fix potential NULL dereferences in __ioam6_fill_trace_data() Justin Iurman <justin.iurman(a)gmail.com> net: ioam6: fix OOB and missing lock Long Li <leo.lilong(a)huawei.com> xfs: close crash window in attr dabtree inactivation Long Li <leo.lilong(a)huawei.com> xfs: factor out xfs_attr3_node_entry_remove Long Li <leo.lilong(a)huawei.com> xfs: remove bp->b_error check in xfs_attr3_root_inactive Lee Jones <lee(a)kernel.org> HID: core: Mitigate potential OOB by removing bogus memset() Li Chen <chenl311(a)chinatelecom.cn> HID: rate-limit hid_warn to prevent log flooding Tatsuya S <tatsuya.s2862(a)gmail.com> HID: core: Add reserved item tag for main items Sabrina Dubroca <sd(a)queasysnail.net> mpls: add seqcount to protect the platform_label{,s} pair Kuniyuki Iwashima <kuniyu(a)google.com> mpls: Protect net->mpls.platform_label with a per-netns mutex. Kuniyuki Iwashima <kuniyu(a)google.com> mpls: Convert mpls_dump_routes() to RCU. Kuniyuki Iwashima <kuniyu(a)google.com> mpls: Add mpls_route_input(). Kuniyuki Iwashima <kuniyu(a)google.com> mpls: Pass net to mpls_dev_get(). Kuniyuki Iwashima <kuniyu(a)google.com> mpls: Add mpls_dev_rcu(). Kuniyuki Iwashima <kuniyu(a)google.com> mpls: Unify return paths in mpls_dev_notify(). Kuniyuki Iwashima <kuniyu(a)google.com> mpls: Hold dev refcnt for mpls_nh. Pengpeng Hou <pengpeng(a)iscas.ac.cn> bnxt_en: set backing store type from query type Michael Chan <michael.chan(a)broadcom.com> bnxt_en: Update firmware interface spec to 1.10.3.85 Li Xiasong <lixiasong1(a)huawei.com> mptcp: fix soft lockup in mptcp_recvmsg() Geliang Tang <geliang(a)kernel.org> mptcp: add eat_recv_skb helper Paolo Abeni <pabeni(a)redhat.com> mptcp: leverage skb deferral free Paolo Abeni <pabeni(a)redhat.com> mptcp: cleanup mem accounting Paolo Abeni <pabeni(a)redhat.com> mptcp: move the whole rx path under msk socket lock protection Pauli Virtanen <pav(a)iki.fi> Bluetooth: hci_sync: hci_cmd_sync_queue_once() return -EEXIST if exists Daniel Borkmann <daniel(a)iogearbox.net> bpf: Fix incorrect pruning due to atomic fetch precision tracking Peilin Ye <yepeilin(a)google.com> bpf: Factor out check_load_mem() and check_store_reg() Peilin Ye <yepeilin(a)google.com> bpf: Factor out check_atomic_rmw() Peilin Ye <yepeilin(a)google.com> bpf: Factor out atomic_ptr_type_ok() Takashi Iwai <tiwai(a)suse.de> ALSA: ctxfi: Check the error for index mapping Harin Lee <me(a)harin.net> ALSA: ctxfi: Refactor resource alloc for sparse mappings Harin Lee <me(a)harin.net> ALSA: ctxfi: Use explicit output flag for DAIO resources Harin Lee <me(a)harin.net> ALSA: ctxfi: Add hw parameter to daio_mgr_dao_init() Oleh Konko <security(a)1seal.org> Bluetooth: hci_event: move wake reason storage into validated event handlers Pengpeng Hou <pengpeng(a)iscas.ac.cn> rxrpc: proc: size address buffers for %pISpc output Sean Christopherson <seanjc(a)google.com> KVM: SEV: Protect *all* of sev_mem_enc_register_region() with kvm->lock Ge Yang <yangge1116(a)126.com> KVM: SEV: Use long-term pin when registering encrypted memory regions Shardul Bankar <shardul.b(a)mpiricsoftware.com> wireguard: device: use exit_rtnl callback instead of manual rtnl_lock in pre_exit Kuniyuki Iwashima <kuniyu(a)amazon.com> net: Add ->exit_rtnl() hook to struct pernet_operations. Kuniyuki Iwashima <kuniyu(a)amazon.com> net: Add ops_undo_single for module load/unload. Kuniyuki Iwashima <kuniyu(a)amazon.com> net: Factorise setup_net() and cleanup_net(). Kory Maincent (TI.com) <kory.maincent(a)bootlin.com> drm/tilcdc: Fix removal actions in case of failed probe Benjamin Marzinski <bmarzins(a)redhat.com> dm: limit swapping tables for devices with zone write plugs Janosch Frank <frankja(a)linux.ibm.com> s390/mm: Add missing secure storage access fixups for donated memory Luca Leonardo Scorcia <l.scorcia(a)gmail.com> drm/mediatek: dsi: Store driver data before invoking mipi_dsi_host_register Ihor Solodrai <ihor.solodrai(a)linux.dev> bpf: Fix exception exit lock checking for subprogs Yonatan Nachum <ynachum(a)amazon.com> RDMA/efa: Fix use of completion ctx after free Jiayuan Chen <jiayuan.chen(a)shopee.com> serial: core: fix infinite loop in handle_tx() for PORT_UNKNOWN Jiri Slaby (SUSE) <jirislaby(a)kernel.org> serial: rename local uart_port_lock() -> uart_port_ref_lock() Pablo Neira Ayuso <pablo(a)netfilter.org> netfilter: nf_tables: clone set on flush only Larysa Zaremba <larysa.zaremba(a)intel.com> ice: change XDP RxQ frag_size from DMA write length to xdp.frame_sz Juri Lelli <juri.lelli(a)redhat.com> sched/deadline: Fix missing ENQUEUE_REPLENISH during PI de-boosting Davidlohr Bueso <dave(a)stgolabs.net> cxl/mbox: validate payload size before accessing contents in cxl_payload_from_user_allowed() Jens Axboe <axboe(a)kernel.dk> io_uring/rw: free potentially allocated iovec on cache put failure Martin Kaiser <martin(a)kaiser.cx> riscv: trace: fix snapshot deadlock with sbi ecall Edward Adam Davis <eadavis(a)qq.com> ALSA: usb-audio: Prevent excessive number of frames Gustavo A. R. Silva <gustavoars(a)kernel.org> virtio_net: Fix misalignment bug in struct virtnet_info Gustavo A. R. Silva <gustavoars(a)kernel.org> stddef: Introduce TRAILING_OVERLAP() helper macro Emil Tantilov <emil.s.tantilov(a)intel.com> idpf: fix error handling in the init_task on load Caleb Sander Mateos <csander(a)purestorage.com> block: zero non-PI portion of auto integrity buffer Jie Zhang <jie.zhang(a)oss.qualcomm.com> drm/msm: Recover HW before retire hung submit Cong Nguyen <congnt264(a)gmail.com> staging: rtl8723bs: fix xmit_frame/xmit_buf leaks on mgnt-frame error paths Kumar Kartikeya Dwivedi <memxor(a)gmail.com> bpf: Mark bpf_refcount field as unique Haotian Zhang <vulab(a)iscas.ac.cn> PCI: endpoint: Add missing NULL check for alloc_workqueue() Manivannan Sadhasivam <manivannan.sadhasivam(a)oss.qualcomm.com> net: qrtr: Drop the MHI auto_queue feature for IPCR DL channels Jeffrey Hugo <quic_jhugo(a)quicinc.com> accel/qaic: Add config structs for supported cards Johannes Berg <johannes.berg(a)intel.com> wifi: mac80211: don't WARN for connections on invalid channels Benjamin Berg <benjamin.berg(a)intel.com> wifi: mac80211: log link information in ieee80211_determine_chan_mode Benjamin Berg <benjamin.berg(a)intel.com> wifi: mac80211: fix typo in HE MCS check Johan Hovold <johan(a)kernel.org> staging: most: remove broken i2c driver Aleksei Nikiforov <aleksei.nikiforov(a)linux.ibm.com> s390/fpu: Fix false-positive kmsan report in fpu_vstl() Tony Battersby <tonyb(a)cybernetics.com> scsi: qla2xxx: Clear cmds after chip reset Akash Goel <akash.goel(a)arm.com> drm/panthor: Prevent potential UAF in group creation Jacek Lawrynowicz <jacek.lawrynowicz(a)linux.intel.com> accel/ivpu: Fix page fault in ivpu_bo_unbind_all_bos_from_context() Jacek Lawrynowicz <jacek.lawrynowicz(a)linux.intel.com> accel/ivpu: Rework bind/unbind of imported buffers Tomasz Rusinowicz <tomasz.rusinowicz(a)intel.com> accel/ivpu: Allow to import single buffer into multiple contexts Sarika Sharma <sarika.sharma(a)oss.qualcomm.com> wifi: ath12k: Fix MSDU buffer types handling in RX error path Xiaoqi Zhuang <xiaoqi.zhuang(a)oss.qualcomm.com> coresight: ETR: Fix ETR buffer use-after-free issue Yeoreum Yun <yeoreum.yun(a)arm.com> coresight-tmc: change tmc_drvdata spinlock's type to raw_spinlock_t Li Nan <linan122(a)huawei.com> md: init bioset in mddev_init Lorenzo Bianconi <lorenzo(a)kernel.org> wifi: mt76: wed: use proper wed reference in mt76 wed driver callabacks Miquel Sabaté Solà <mssola(a)mssola.com> btrfs: fix double free of qgroup record after failure to add delayed ref head Antoine Tenart <atenart(a)kernel.org> net: vxlan: prevent NULL deref in vxlan_xmit_one Gustavo Luiz Duarte <gustavold(a)gmail.com> netconsole: Acquire su_mutex before navigating configs hierarchy Icenowy Zheng <uwu(a)icenowy.me> clk: thead: th1520-ap: set all AXI clocks to CLK_IS_CRITICAL Nitin Rawat <nitin.rawat(a)oss.qualcomm.com> scsi: ufs: ufs-qcom: Fix UFS OCP issue during UFS power down (PC=3) Nitin Rawat <quic_nitirawa(a)quicinc.com> scsi: ufs: qcom : Refactor phy_power_on/off calls Akiva Goldberger <agoldberger(a)nvidia.com> mlx5: Fix default values in create CQ Cosmin Ratiu <cratiu(a)nvidia.com> net/mlx5e: Prepare for using different CQ doorbells Cosmin Ratiu <cratiu(a)nvidia.com> net/mlx5: Store the global doorbell in mlx5_priv Cosmin Ratiu <cratiu(a)nvidia.com> net/mlx5: Fix typo of MLX5_EQ_DOORBEL_OFFSET Yevgeny Kliteynik <kliteyn(a)nvidia.com> net/mlx5: HWS, fix bad parameter in CQ creation Yishai Hadas <yishaih(a)nvidia.com> RDMA/mlx5: Remove the redundant MLX5_IB_STAGE_UAR stage Satyanarayana K V P <satyanarayana.k.v.p(a)intel.com> drm/xe/guc: Add devm release action to safely tear down CT Yifan Zhang <yifan1.zhang(a)amd.com> amd/amdkfd: enhance kfd process check in switch partition Fernando Fernandez Mancera <fmancera(a)suse.de> sysfs: check visibility before changing group attribute ownership Cezary Rojewski <cezary.rojewski(a)intel.com> ASoC: Intel: avs: Do not share the name pointer between components Amadeusz Sławiński <amadeuszx.slawinski(a)linux.intel.com> ASoC: Intel: avs: Use topology information for endpoint numbers Weili Qian <qianweili(a)huawei.com> crypto: hisilicon/qm - request reserved interrupt for virtual function Weili Qian <qianweili(a)huawei.com> crypto: hisilicon/hpre - enable all clusters clock gating Zhongqiu Han <zhongqiu.han(a)oss.qualcomm.com> scsi: ufs: core: Fix data race in CPU latency PM QoS request handling Stephan Gerhold <stephan.gerhold(a)linaro.org> remoteproc: qcom: pas: Shutdown lite ADSP DTB on X1E Bjorn Andersson <bjorn.andersson(a)oss.qualcomm.com> remoteproc: qcom: pas: Conclude the rename from adsp Krzysztof Kozlowski <krzysztof.kozlowski(a)linaro.org> remoteproc: qcom_q6v5_pas: Simplify with dev_err_probe() Bjorn Andersson <bjorn.andersson(a)oss.qualcomm.com> remoteproc: qcom: pas: Make remoteproc name human friendly Uwe Kleine-König <u.kleine-koenig(a)baylibre.com> remoteproc: Switch back to struct platform_driver::remove() Matthew Brost <matthew.brost(a)intel.com> drm/xe: Don't allow evicting of BOs in same VM in array of VM binds Fangyu Yu <fangyu.yu(a)linux.alibaba.com> RISC-V: KVM: Write hgatp register with valid mode bits Niklas Schnelle <schnelle(a)linux.ibm.com> iommu/s390: Make attach succeed when the device was surprise removed Matthew Rosato <mjrosato(a)linux.ibm.com> iommu/s390: set appropriate IOTA region type Matthew Rosato <mjrosato(a)linux.ibm.com> iommu/s390: handle IOAT registration based on domain Stefan Metzmacher <metze(a)samba.org> smb: client: let recv_done verify data_offset, data_length and remaining_data_length Uladzislau Rezki (Sony) <urezki(a)gmail.com> mm/vmalloc, mm/kasan: respect gfp mask in kasan_populate_vmalloc() Felix Fietkau <nbd(a)nbd.name> wifi: mt76: mt7915: fix list corruption after hardware restart Duoming Zhou <duoming(a)zju.edu.cn> ptp: ocp: fix use-after-free bugs causing by ptp_ocp_watchdog Lama Kayal <lkayal(a)nvidia.com> net/mlx5: HWS, Fix memory leak in hws_action_get_shared_stc_nic error flow Lama Kayal <lkayal(a)nvidia.com> net/mlx5: HWS, Fix memory leak in hws_pool_buddy_init error path Vlad Dogaru <vdogaru(a)nvidia.com> net/mlx5: HWS, Refactor pool implementation Vlad Dogaru <vdogaru(a)nvidia.com> net/mlx5: HWS, Make pool single resource Vlad Dogaru <vdogaru(a)nvidia.com> net/mlx5: HWS, Remove unused element array Yevgeny Kliteynik <kliteyn(a)nvidia.com> net/mlx5: HWS, update flow - remove the use of dual RTCs Vlad Dogaru <vdogaru(a)nvidia.com> net/mlx5: HWS, handle returned error value in pool alloc Yevgeny Kliteynik <kliteyn(a)nvidia.com> net/mlx5: HWS, simplify allocations as we support only FDB Yevgeny Kliteynik <kliteyn(a)nvidia.com> net/mlx5: HWS, denote how refcounts are protected Eric Biggers <ebiggers(a)kernel.org> crypto: x86/aegis - Add missing error checks Eric Biggers <ebiggers(a)kernel.org> crypto: x86/aegis - Fix sleeping when disallowed on PREEMPT_RT Eric Biggers <ebiggers(a)google.com> crypto: x86/aegis128 - improve assembly function prototypes Eric Biggers <ebiggers(a)google.com> crypto: x86/aegis128 - optimize length block preparation using SSE4.1 Eric Biggers <ebiggers(a)google.com> crypto: x86/aegis128 - eliminate some indirect calls David Hildenbrand <david(a)redhat.com> mm/mremap: fix WARN with uffd that has remap events disabled William Liu <will(a)willsroot.io> net/sched: Fix backlog accounting in qdisc_dequeue_internal Dan Carpenter <dan.carpenter(a)linaro.org> wifi: iwlwifi: Fix error code in iwl_op_mode_dvm_start() Johannes Berg <johannes.berg(a)intel.com> wifi: iwlwifi: return ERR_PTR from opmode start() Gabriele Monaco <gmonaco(a)redhat.com> rv: Use strings in da monitors tracepoints Gabriele Monaco <gmonaco(a)redhat.com> rv: Remove trailing whitespace from tracepoint string Tamizh Chelvam Raja <tamizh.raja(a)oss.qualcomm.com> wifi: ath12k: Pass ab pointer directly to ath12k_dp_tx_get_encap_type() Heiko Stuebner <heiko(a)sntech.de> drm/rockchip: vop2: fail cleanly if missing a primary plane for a video-port Andy Yan <andy.yan(a)rock-chips.com> drm/rockchip: vop2: Register the primary plane and overlay plane separately Cristian Ciocaltea <cristian.ciocaltea(a)collabora.com> drm/rockchip: vop2: Consistently use dev_err_probe() Mario Limonciello <mario.limonciello(a)amd.com> platform/x86/amd: pmf: Use device managed allocations Shyam Sundar S K <Shyam-sundar.S-k(a)amd.com> platform/x86/amd/pmf: Switch to platform_get_resource() and devm_ioremap_resource() Heiko Carstens <hca(a)linux.ibm.com> s390/mm: Fix in_atomic() handling in do_secure_storage_access() Heiko Carstens <hca(a)linux.ibm.com> s390/mm: Get rid of fault type switch statements Heiko Carstens <hca(a)linux.ibm.com> s390/mm: Simplify get_fault_type() Claudio Imbrenda <imbrenda(a)linux.ibm.com> s390/mm/fault: Handle guest-related program interrupts in KVM Claudio Imbrenda <imbrenda(a)linux.ibm.com> s390/kvm: Remove kvm_arch_fault_in_page() Claudio Imbrenda <imbrenda(a)linux.ibm.com> s390/entry: Remove __GMAP_ASCE and use _PIF_GUEST_FAULT again Ping-Ke Shih <pkshih(a)realtek.com> wifi: rtw89: pci: configure manual DAC mode via PCI config API only Ben Dooks <ben.dooks(a)codethink.co.uk> riscv: save the SR_SUM status over switches Samuel Holland <samuel.holland(a)sifive.com> riscv: Add support for per-thread envcfg CSR values Samuel Holland <samuel.holland(a)sifive.com> riscv: Enable cbo.zero only when all harts support Zicboz Pu Lehui <pulehui(a)huawei.com> mm: fix uprobe pte be overwritten when expanding vma Sidhanta Sahu <sidhanta.sahu(a)oss.qualcomm.com> wifi: ath12k: Fix memory leak due to multiple rx_stats allocation Sriram R <quic_srirrama(a)quicinc.com> wifi: ath12k: prepare vif data structure for MLO handling Kalle Valo <quic_kvalo(a)quicinc.com> wifi: ath12k: ath12k_mac_op_sta_state(): clean up update_wk cancellation Kalle Valo <quic_kvalo(a)quicinc.com> wifi: ath12k: convert struct ath12k_sta::update_wk to use struct wiphy_work Zhi Wang <zhiw(a)nvidia.com> drm/nouveau: fix a use-after-free in r535_gsp_rpc_push() Brian Norris <briannorris(a)google.com> PCI/pwrctrl: Cancel outstanding rescan work when unregistering Manivannan Sadhasivam <manivannan.sadhasivam(a)linaro.org> PCI/pwrctl: Create pwrctl device only if at least one power supply is present Manivannan Sadhasivam <manivannan.sadhasivam(a)linaro.org> PCI/pwrctl: Use of_platform_device_create() to create pwrctl devices Yeoreum Yun <yeoreum.yun(a)arm.com> coresight: holding cscfg_csdev_lock while removing cscfg from csdev Michael S. Tsirkin <mst(a)redhat.com> virtio: break and reset virtio devices on device_shutdown() Roger Quadros <rogerq(a)kernel.org> dmaengine: ti: k3-udma-glue: Drop skip_fdq argument from k3_udma_glue_reset_rx_chn Roger Quadros <rogerq(a)kernel.org> net: ethernet: ti: am65-cpsw: streamline RX queue creation and cleanup Philippe Simons <simons.philippe(a)gmail.com> clk: sunxi-ng: h616: Reparent GPU clock during frequency changes Andre Przywara <andre.przywara(a)arm.com> clk: sunxi-ng: h616: Reparent CPU clock during frequency changes Alexander Gordeev <agordeev(a)linux.ibm.com> kasan: avoid sleepable page allocation from atomic context Ming Lei <ming.lei(a)redhat.com> ublk: fix race between io_uring_cmd_complete_in_task and ublk_cancel_cmd Yunhui Cui <cuiyunhui(a)bytedance.com> perf/dwc_pcie: fix duplicate pci_dev devices Bjorn Helgaas <bhelgaas(a)google.com> perf/dwc_pcie: Qualify RAS DES VSEC Capability by Vendor, Revision P Praneesh <quic_ppranees(a)quicinc.com> wifi: ath12k: Avoid memory leak while enabling statistics Karthikeyan Periyasamy <quic_periyasa(a)quicinc.com> wifi: ath12k: Avoid explicit type cast in monitor status parse handler Karthikeyan Periyasamy <quic_periyasa(a)quicinc.com> wifi: ath12k: fix incorrect TID updation in DP monitor status path Kang Yang <quic_kangyang(a)quicinc.com> wifi: ath12k: fix struct hal_rx_phyrx_rssi_legacy_info Atish Patra <atishp(a)rivosinc.com> RISC-V: KVM: Teardown riscv specific bits after kvm_exit Chao Yu <chao(a)kernel.org> f2fs: quota: fix to avoid warning in dquot_writeback_dquots() Murad Masimov <m.masimov(a)mt-integration.ru> ax25: Remove broken autobind Ville Syrjälä <ville.syrjala(a)linux.intel.com> drm/i915: Grab intel_display from the encoder to avoid potential oopsies Jani Nikula <jani.nikula(a)intel.com> drm/i915/crt: convert to struct intel_display Jani Nikula <jani.nikula(a)intel.com> drm/i915/gmbus: convert to struct intel_display Jani Nikula <jani.nikula(a)intel.com> drm/i915/display: convert I915_STATE_WARN() to struct intel_display Ville Syrjälä <ville.syrjala(a)linux.intel.com> drm/i915/vga: Convert VGA code to intel_display Jani Nikula <jani.nikula(a)intel.com> drm/i915/display: pass display to intel_crtc_for_pipe() Benjamin Berg <benjamin.berg(a)intel.com> um: work around sched_yield not yielding in time-travel mode Paulo Alcantara <pc(a)manguebit.org> smb: client: fix compound alignment with encryption Paulo Alcantara <pc(a)manguebit.com> smb: client: get rid of bounds check in SMB2_ioctl_init() Paulo Alcantara <pc(a)manguebit.com> smb: client: improve compound padding in encryption Christian Brauner <brauner(a)kernel.org> namespace: handle mount locking for automounts correctly Christian Brauner <brauner(a)kernel.org> fcntl: refuse F_SET_RW_HINT on an immutable inode Christian Brauner <brauner(a)kernel.org> namespace: check the target before walking it in do_mount_setattr() Christian Brauner <brauner(a)kernel.org> namespace: unhash a dentry before detaching the mounts on it Wentao Liang <vulab(a)iscas.ac.cn> drm/vc4: Fix firmware reference leak in vc4_drm_bind() Thomas Zimmermann <tzimmermann(a)suse.de> drm/vc4: Use video aperture helpers Stanley Jhu <stanleyjhu(a)google.com> scsi: ufs: core: Avoid unsafe MMIO reads in ufshcd_mcq_compl_all_cqes_lock() Bart Van Assche <bvanassche(a)acm.org> scsi: ufs: core: Add a comment block above ufshcd_mcq_compl_all_cqes_lock() Peter Wang <peter.wang(a)mediatek.com> scsi: ufs: core: Add debug log for MCQ command timeout Bart Van Assche <bvanassche(a)acm.org> scsi: ufs: core: Move an assignment in ufshcd_mcq_process_cqe() Ahmed Abdelhaleem Ahmed <ahmedhal(a)gmail.com> scsi: ch: Do not keep references to data transfer element devices Stanley Jhu <stanleyjhu(a)google.com> scsi: ufs: core: Decouple CQ sweep from request iterator in MCQ Wei-Jie Hung <imbigking12(a)gmail.com> riscv: patch: fix handling of bpf-jit execmem addresses Vivian Wang <wangruikang(a)iscas.ac.cn> riscv: patch: Avoid early phys_to_page() Suraj Gupta <suraj.gupta2(a)amd.com> net: xilinx: axienet: Free outstanding DMA buffers on dmaengine stop Ben Cressey <ben(a)cressey.dev> dm-integrity: fix buffer overflow in inline mode with large tag size Mikulas Patocka <mpatocka(a)redhat.com> dm-integrity: rename internal_hash Mikulas Patocka <mpatocka(a)redhat.com> dm-integrity: use internal variable for digestsize Christian Brauner <brauner(a)kernel.org> namespace: check the mounts before reading their parents in pivot_root() Christian Brauner <brauner(a)kernel.org> namespace: don't inherit MNT_UMOUNT in clone_mnt() Zack Rusin <zack.rusin(a)broadcom.com> drm/vmwgfx: validate pitch coming from userspace Maaz Mombasawala <maaz.mombasawala(a)broadcom.com> drm/vmwgfx: Stop using dev_private to store driver data. Mikhail Gavrilov <mikhail.v.gavrilov(a)gmail.com> Bluetooth: RFCOMM: connect the session socket without rfcomm_mutex Chengfeng Ye <nicoyip.dev(a)gmail.com> Bluetooth: hci_sync: Fix command skb lifetime during scan setup Tejun Heo <tj(a)kernel.org> sched_ext: Fix CPU hotplug hang when a dying CPU's tasks sit in the BPF scheduler Weiming Shi <bestswngs(a)gmail.com> net: team: stop reusing skb after queue override Weiming Shi <bestswngs(a)gmail.com> net: team: fix NULL pointer dereference in team_xmit during mode change Marc Harvey <marcharvey(a)google.com> net: team: Rename port_disabled team mode op to port_tx_disabled Marc Harvey <marcharvey(a)google.com> net: team: Remove unused team_mode_op, port_enabled Sean Wang <sean.wang(a)mediatek.com> wifi: mt76: connac: tolerate inactive BSS deactivation Lorenzo Stoakes (ARM) <ljs(a)kernel.org> mm/mremap: fix locked_vm leak from MREMAP_DONTUNMAP self-merge Lorenzo Stoakes (ARM) <ljs(a)kernel.org> mm/mremap: fix locked_vm leak by splitting VMA for MREMAP_DONTUNMAP Hengyu Liang <hengyul(a)cs.unc.edu> ata: libata-scsi: do not lose CHECK CONDITION for failed ATAPI commands Mario Limonciello <mario.limonciello(a)amd.com> drm/amd: Create a device link between APU display and XHCI devices Dave Chinner <dchinner(a)redhat.com> xfs: fix unmount hang with unflushable inodes stuck in the AIL Dave Chinner <dchinner(a)redhat.com> xfs: factor out stale buffer item completion Dave Chinner <dchinner(a)redhat.com> xfs: rearrange code in xfs_buf_item.c Dave Chinner <dchinner(a)redhat.com> xfs: avoid dquot buffer pin deadlock Dave Chinner <dchinner(a)redhat.com> xfs: catch stale AGF/AGF metadata Dave Chinner <dchinner(a)redhat.com> xfs: xfs_ifree_cluster vs xfs_iflush_shutdown_abort deadlock Daehyeon Ko <4ncienth(a)gmail.com> ip6_gre: remove obsolete ERSPAN PMTU update Darrick J. Wong <djwong(a)kernel.org> xfs: fix exchange-range-to-eof file size exchange Norbert Szetei <norbert(a)doyensec.com> xfs: stop exchanging reflink flags when exchanging mappings Xuanqiang Luo <luoxuanqiang(a)kylinos.cn> ice: fix use-after-free in dynamic port cleanup Zhen Ni <zhen.ni(a)easystack.cn> iommu/amd: Fix ivrs_base memleak in early_amd_iommu_init() Suravee Suthikulpanit <suravee.suthikulpanit(a)amd.com> iommu/amd: Disable AMD IOMMU if CMPXCHG16B feature is not supported Ethan Tidmore <ethantidmore06(a)gmail.com> usb: gadget: f_hid: Add missing error code Johan Hovold <johan(a)kernel.org> spi: mpc52xx: clean up interrupt handling ------------- Diffstat: Documentation/RCU/whatisRCU.rst | 10 + Documentation/admin-guide/device-mapper/dm-ima.rst | 7 +- .../admin-guide/device-mapper/dm-integrity.rst | 13 + Documentation/core-api/refcount-vs-atomic.rst | 37 +- Documentation/networking/af_xdp.rst | 54 +- .../networking/net_cachelines/net_device.rst | 2 +- Documentation/networking/rxrpc.rst | 11 + Documentation/networking/switchdev.rst | 2 +- Makefile | 33 +- arch/Kconfig | 26 +- arch/arm/Kconfig | 2 +- arch/arm/kernel/hw_breakpoint.c | 13 +- arch/arm/mach-exynos/mcpm-exynos.c | 12 +- arch/arm/mach-exynos/suspend.c | 48 +- arch/arm/mach-pxa/generic.h | 6 +- arch/arm/mach-pxa/irq.c | 10 +- arch/arm/mach-pxa/mfp-pxa2xx.c | 10 +- arch/arm/mach-pxa/mfp-pxa3xx.c | 10 +- arch/arm/mach-pxa/pxa25x.c | 4 +- arch/arm/mach-pxa/pxa27x.c | 4 +- arch/arm/mach-pxa/pxa3xx.c | 4 +- arch/arm/mach-pxa/smemc.c | 12 +- arch/arm/mach-s3c/irq-pm-s3c64xx.c | 12 +- arch/arm/mach-s5pv210/pm.c | 10 +- arch/arm/mach-versatile/integrator_ap.c | 12 +- arch/arm/mm/Makefile | 2 +- arch/arm/mm/cache-b15-rac.c | 12 +- arch/arm/mm/cache-fa.S | 2 +- arch/arm/mm/cache-v4.S | 2 +- arch/arm/mm/cache-v4wb.S | 4 +- arch/arm/mm/cache-v4wt.S | 2 +- arch/arm/mm/cache-v6.S | 2 +- arch/arm/mm/cache-v7.S | 2 +- arch/arm/mm/cache-v7m.S | 2 +- arch/arm/mm/proc-arm1020.S | 2 +- arch/arm/mm/proc-arm1020e.S | 2 +- arch/arm/mm/proc-arm1022.S | 2 +- arch/arm/mm/proc-arm1026.S | 2 +- arch/arm/mm/proc-arm920.S | 2 +- arch/arm/mm/proc-arm922.S | 2 +- arch/arm/mm/proc-arm925.S | 2 +- arch/arm/mm/proc-arm926.S | 2 +- arch/arm/mm/proc-arm940.S | 2 +- arch/arm/mm/proc-arm946.S | 2 +- arch/arm/mm/proc-feroceon.S | 2 +- arch/arm/mm/proc-mohawk.S | 2 +- arch/arm/mm/proc-xsc3.S | 2 +- arch/arm/mm/tlb-v4.S | 2 +- arch/arm64/Kconfig | 4 +- arch/arm64/kernel/debug-monitors.c | 2 +- arch/arm64/kernel/ptrace.c | 50 + arch/arm64/kernel/traps.c | 4 +- arch/arm64/kvm/at.c | 3 +- arch/arm64/kvm/handle_exit.c | 2 +- arch/arm64/kvm/vgic/vgic-v3.c | 12 +- arch/arm64/kvm/vgic/vgic.c | 9 +- arch/loongarch/kernel/machine_kexec.c | 5 +- arch/loongarch/kernel/smp.c | 12 +- arch/loongarch/net/bpf_jit.c | 20 +- arch/mips/alchemy/common/dbdma.c | 12 +- arch/mips/alchemy/common/irq.c | 24 +- arch/mips/alchemy/common/usb.c | 12 +- arch/mips/pci/pci-alchemy.c | 16 +- arch/powerpc/include/asm/book3s/64/pgtable.h | 15 + arch/powerpc/include/asm/xive.h | 4 +- arch/powerpc/mm/book3s64/pgtable.c | 13 +- arch/powerpc/mm/pgtable-frag.c | 1 + arch/powerpc/platforms/cell/spu_base.c | 10 +- arch/powerpc/platforms/powermac/pic.c | 12 +- arch/powerpc/platforms/powernv/smp.c | 8 +- arch/powerpc/platforms/pseries/smp.c | 8 +- arch/powerpc/sysdev/fsl_lbc.c | 12 +- arch/powerpc/sysdev/fsl_pci.c | 12 +- arch/powerpc/sysdev/ipic.c | 12 +- arch/powerpc/sysdev/mpic.c | 14 +- arch/powerpc/sysdev/mpic_timer.c | 10 +- arch/powerpc/sysdev/xive/common.c | 10 +- arch/riscv/Kconfig | 4 +- arch/riscv/include/asm/cfi.h | 4 +- arch/riscv/include/asm/processor.h | 2 + arch/riscv/include/asm/switch_to.h | 8 + arch/riscv/kernel/Makefile | 17 +- arch/riscv/kernel/asm-offsets.c | 5 + arch/riscv/kernel/cfi.c | 2 +- arch/riscv/kernel/cpufeature.c | 9 +- arch/riscv/kernel/entry.S | 9 + arch/riscv/kernel/patch.c | 21 +- arch/riscv/kernel/suspend.c | 4 +- arch/riscv/kvm/main.c | 4 +- arch/riscv/kvm/vcpu_vector.c | 5 +- arch/riscv/kvm/vmid.c | 2 +- arch/riscv/net/bpf_jit_comp64.c | 9 +- arch/riscv/purgatory/Makefile | 2 +- arch/s390/include/asm/fpu-insn.h | 3 + arch/s390/include/asm/gmap.h | 3 +- arch/s390/include/asm/kvm_host.h | 3 + arch/s390/include/asm/nmi.h | 3 + arch/s390/include/asm/pci.h | 2 + arch/s390/include/asm/pci_insn.h | 10 +- arch/s390/include/asm/processor.h | 5 +- arch/s390/include/asm/ptrace.h | 2 + arch/s390/include/asm/uv.h | 6 +- arch/s390/kernel/asm-offsets.c | 2 - arch/s390/kernel/entry.S | 44 +- arch/s390/kernel/nmi.c | 5 +- arch/s390/kernel/traps.c | 24 +- arch/s390/kernel/uv.c | 383 +++---- arch/s390/kvm/Makefile | 2 +- arch/s390/kvm/gaccess.c | 42 +- arch/s390/kvm/gmap.c | 121 +++ arch/s390/kvm/gmap.h | 19 + arch/s390/kvm/intercept.c | 7 +- arch/s390/kvm/interrupt.c | 24 +- arch/s390/kvm/kvm-s390.c | 222 +++- arch/s390/kvm/kvm-s390.h | 14 +- arch/s390/kvm/pci.c | 17 +- arch/s390/kvm/pv.c | 21 + arch/s390/kvm/vsie.c | 15 +- arch/s390/mm/fault.c | 189 +--- arch/s390/mm/gmap.c | 45 +- arch/s390/net/bpf_jit_comp.c | 11 + arch/s390/pci/pci.c | 35 +- arch/s390/pci/pci_sysfs.c | 11 +- arch/sh/mm/pmb.c | 10 +- arch/um/include/linux/time-internal.h | 2 + arch/um/kernel/skas/syscall.c | 11 + arch/x86/Kconfig | 12 +- arch/x86/crypto/Kconfig | 4 +- arch/x86/crypto/aegis128-aesni-asm.S | 110 +- arch/x86/crypto/aegis128-aesni-glue.c | 156 +-- arch/x86/events/amd/ibs.c | 12 +- arch/x86/events/intel/core.c | 32 +- arch/x86/events/intel/ds.c | 8 +- arch/x86/events/intel/uncore.c | 46 +- arch/x86/events/perf_event.h | 3 + arch/x86/hyperv/hv_init.c | 12 +- arch/x86/include/asm/cfi.h | 4 +- arch/x86/kernel/Makefile | 2 +- arch/x86/kernel/alternative.c | 4 +- arch/x86/kernel/amd_gart_64.c | 10 +- arch/x86/kernel/apic/apic.c | 12 +- arch/x86/kernel/apic/io_apic.c | 17 +- arch/x86/kernel/cpu/aperfmperf.c | 20 +- arch/x86/kernel/cpu/intel_epb.c | 16 +- arch/x86/kernel/cpu/mce/core.c | 14 +- arch/x86/kernel/cpu/microcode/core.c | 15 +- arch/x86/kernel/cpu/mtrr/legacy.c | 12 +- arch/x86/kernel/cpu/resctrl/rdtgroup.c | 19 +- arch/x86/kernel/cpu/umwait.c | 10 +- arch/x86/kernel/i8237.c | 10 +- arch/x86/kernel/i8259.c | 14 +- arch/x86/kernel/kprobes/core.c | 2 +- arch/x86/kernel/kvm.c | 12 +- arch/x86/kvm/cpuid.c | 2 +- arch/x86/kvm/cpuid.h | 16 +- arch/x86/kvm/lapic.c | 61 +- arch/x86/kvm/lapic.h | 4 +- arch/x86/kvm/mmu.h | 2 +- arch/x86/kvm/mmu/mmu.c | 4 +- arch/x86/kvm/regs.c | 6 +- arch/x86/kvm/svm/nested.c | 64 +- arch/x86/kvm/svm/sev.c | 42 +- arch/x86/kvm/svm/svm.c | 70 +- arch/x86/kvm/svm/svm.h | 4 +- arch/x86/kvm/vmx/nested.c | 11 +- arch/x86/kvm/vmx/vmx.c | 16 +- arch/x86/kvm/x86.c | 60 +- arch/x86/kvm/x86.h | 1 - arch/x86/purgatory/Makefile | 2 +- block/bfq-cgroup.c | 9 +- block/bio-integrity.c | 6 +- block/blk-cgroup.c | 5 +- block/blk-cgroup.h | 2 + block/blk-iocost.c | 21 +- block/blk-iolatency.c | 19 +- block/blk-throttle.c | 15 +- drivers/accel/ivpu/ivpu_drv.c | 2 +- drivers/accel/ivpu/ivpu_gem.c | 111 +- drivers/accel/ivpu/ivpu_gem.h | 3 +- drivers/accel/ivpu/ivpu_job.c | 2 +- drivers/accel/qaic/mhi_controller.c | 24 - drivers/accel/qaic/qaic.h | 13 +- drivers/accel/qaic/qaic_drv.c | 76 +- drivers/accel/qaic/qaic_timesync.c | 2 +- drivers/acpi/acpi_platform.c | 16 +- drivers/acpi/bus.c | 54 +- drivers/acpi/device_pm.c | 4 +- drivers/acpi/pci_link.c | 10 +- drivers/acpi/sleep.c | 12 +- drivers/ata/libata-core.c | 7 + drivers/ata/libata-scsi.c | 10 +- drivers/base/core.c | 74 +- drivers/base/firmware_loader/main.c | 12 +- drivers/base/power/main.c | 67 +- drivers/base/power/runtime.c | 61 +- drivers/base/syscore.c | 82 +- drivers/block/ublk_drv.c | 37 +- drivers/bus/mhi/host/pci_generic.c | 20 +- drivers/bus/mvebu-mbus.c | 16 +- drivers/char/ipmi/ipmi_ssif.c | 20 + drivers/clk/at91/pmc.c | 12 +- drivers/clk/imx/clk-vf610.c | 12 +- drivers/clk/ingenic/jz4725b-cgu.c | 2 +- drivers/clk/ingenic/jz4740-cgu.c | 2 +- drivers/clk/ingenic/jz4755-cgu.c | 2 +- drivers/clk/ingenic/jz4760-cgu.c | 2 +- drivers/clk/ingenic/jz4770-cgu.c | 2 +- drivers/clk/ingenic/jz4780-cgu.c | 2 +- drivers/clk/ingenic/pm.c | 14 +- drivers/clk/ingenic/pm.h | 2 +- drivers/clk/ingenic/tcu.c | 12 +- drivers/clk/ingenic/x1000-cgu.c | 2 +- drivers/clk/ingenic/x1830-cgu.c | 2 +- drivers/clk/mediatek/clk-pllfh.c | 98 +- drivers/clk/mvebu/common.c | 12 +- drivers/clk/rockchip/clk-rk3288.c | 12 +- drivers/clk/samsung/clk-s5pv210-audss.c | 12 +- drivers/clk/samsung/clk.c | 12 +- drivers/clk/sunxi-ng/ccu-sun50i-h616.c | 64 +- drivers/clk/tegra/clk-tegra210.c | 12 +- drivers/clk/thead/clk-th1520-ap.c | 30 +- drivers/clocksource/samsung_pwm_timer.c | 22 +- drivers/clocksource/timer-armada-370-xp.c | 12 +- drivers/cpuidle/cpuidle-psci.c | 12 +- drivers/crypto/hisilicon/hpre/hpre_main.c | 36 +- drivers/crypto/hisilicon/qm.c | 38 +- drivers/cxl/core/core.h | 2 + drivers/cxl/core/mbox.c | 11 +- drivers/cxl/core/port.c | 7 +- drivers/cxl/core/ras.c | 10 +- drivers/cxl/core/region.c | 81 +- drivers/cxl/core/trace.h | 12 +- drivers/cxl/cxl.h | 22 +- drivers/dma/idxd/init.c | 36 +- drivers/dma/ti/k3-udma-glue.c | 15 +- drivers/dma/xilinx/xilinx_dma.c | 14 +- drivers/dpll/dpll_core.c | 12 +- drivers/dpll/dpll_netlink.c | 68 +- drivers/edac/igen6_edac.c | 148 ++- drivers/firewire/ohci.c | 4 +- drivers/firmware/arm_ffa/driver.c | 56 +- drivers/firmware/arm_scmi/bus.c | 36 +- drivers/gpio/gpio-latch.c | 2 +- drivers/gpio/gpio-mxc.c | 12 +- drivers/gpio/gpio-pca953x.c | 18 +- drivers/gpio/gpio-pxa.c | 12 +- drivers/gpio/gpio-sa1100.c | 12 +- drivers/gpio/gpiolib.c | 136 ++- drivers/gpu/drm/amd/amdgpu/amdgpu.h | 1 + drivers/gpu/drm/amd/amdgpu/amdgpu_amdkfd.c | 2 +- drivers/gpu/drm/amd/amdgpu/amdgpu_amdkfd.h | 4 +- drivers/gpu/drm/amd/amdgpu/amdgpu_atombios.c | 25 +- drivers/gpu/drm/amd/amdgpu/amdgpu_bios.c | 63 +- drivers/gpu/drm/amd/amdgpu/amdgpu_device.c | 52 +- drivers/gpu/drm/amd/amdgpu/amdgpu_gfx.c | 23 +- drivers/gpu/drm/amd/amdgpu/amdgpu_gfx.h | 3 +- drivers/gpu/drm/amd/amdgpu/amdgpu_hmm.c | 16 +- drivers/gpu/drm/amd/amdgpu/amdgpu_i2c.c | 25 +- drivers/gpu/drm/amd/amdgpu/amdgpu_i2c.h | 3 - drivers/gpu/drm/amd/amdgpu/amdgpu_ras.c | 32 +- drivers/gpu/drm/amd/amdgpu/amdgpu_ras.h | 1 + drivers/gpu/drm/amd/amdgpu/amdgpu_ttm.c | 25 +- drivers/gpu/drm/amd/amdgpu/amdgv_sriovmsg.h | 131 ++- drivers/gpu/drm/amd/amdgpu/gfx_v12_0.c | 13 +- drivers/gpu/drm/amd/amdgpu/gfx_v9_0.c | 2 - drivers/gpu/drm/amd/amdgpu/mxgpu_nv.h | 3 + drivers/gpu/drm/amd/amdgpu/vcn_v2_5.c | 4 +- drivers/gpu/drm/amd/amdgpu/vcn_v4_0.c | 1 + drivers/gpu/drm/amd/amdkfd/kfd_crat.c | 17 + drivers/gpu/drm/amd/amdkfd/kfd_device.c | 13 +- .../gpu/drm/amd/amdkfd/kfd_device_queue_manager.c | 20 +- .../gpu/drm/amd/amdkfd/kfd_device_queue_manager.h | 2 + drivers/gpu/drm/amd/amdkfd/kfd_migrate.c | 199 ++-- drivers/gpu/drm/amd/amdkfd/kfd_mqd_manager_v9.c | 11 +- drivers/gpu/drm/amd/amdkfd/kfd_priv.h | 5 +- drivers/gpu/drm/amd/amdkfd/kfd_process.c | 4 + .../gpu/drm/amd/amdkfd/kfd_process_queue_manager.c | 24 +- drivers/gpu/drm/amd/amdkfd/kfd_smi_events.c | 6 +- drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm.h | 3 +- .../gpu/drm/amd/display/amdgpu_dm/amdgpu_dm_crc.c | 25 +- .../gpu/drm/amd/display/amdgpu_dm/amdgpu_dm_crtc.c | 8 +- .../gpu/drm/amd/display/amdgpu_dm/amdgpu_dm_hdcp.c | 10 +- .../gpu/drm/amd/display/amdgpu_dm/amdgpu_dm_hdcp.h | 8 +- .../gpu/drm/amd/display/amdgpu_dm/amdgpu_dm_irq.c | 3 +- .../drm/amd/display/amdgpu_dm/amdgpu_dm_plane.c | 12 +- .../drm/amd/display/amdgpu_dm/amdgpu_dm_replay.c | 7 + drivers/gpu/drm/amd/display/dc/core/dc.c | 6 +- drivers/gpu/drm/amd/display/dc/dc_dp_types.h | 2 +- .../drm/amd/display/dc/dml2/dml21/dml21_utils.c | 15 +- .../dml21/src/dml2_core/dml2_core_dcn4_calcs.c | 31 +- .../drm/amd/display/dc/hwss/dcn35/dcn35_hwseq.c | 52 + .../drm/amd/display/dc/hwss/dcn35/dcn35_hwseq.h | 4 + .../gpu/drm/amd/display/dc/hwss/dcn35/dcn35_init.c | 2 +- .../drm/amd/display/dc/hwss/dcn401/dcn401_hwseq.c | 13 +- .../amd/display/dc/resource/dcn32/dcn32_resource.c | 8 +- drivers/gpu/drm/amd/pm/swsmu/amdgpu_smu.c | 12 + drivers/gpu/drm/amd/pm/swsmu/inc/amdgpu_smu.h | 10 + .../gpu/drm/amd/pm/swsmu/smu14/smu_v14_0_0_ppt.c | 45 + drivers/gpu/drm/etnaviv/etnaviv_sched.c | 20 +- drivers/gpu/drm/exynos/exynos_drm_drv.h | 1 + drivers/gpu/drm/exynos/exynos_drm_vidi.c | 14 +- drivers/gpu/drm/gud/gud_drv.c | 2 + drivers/gpu/drm/i915/display/g4x_dp.c | 15 +- drivers/gpu/drm/i915/display/i9xx_wm.c | 15 +- drivers/gpu/drm/i915/display/intel_atomic_plane.c | 4 +- drivers/gpu/drm/i915/display/intel_bios.c | 6 +- drivers/gpu/drm/i915/display/intel_cdclk.c | 6 +- drivers/gpu/drm/i915/display/intel_crt.c | 216 ++-- drivers/gpu/drm/i915/display/intel_crt.h | 10 +- drivers/gpu/drm/i915/display/intel_crtc.c | 15 +- drivers/gpu/drm/i915/display/intel_crtc.h | 3 +- drivers/gpu/drm/i915/display/intel_cx0_phy.c | 76 +- drivers/gpu/drm/i915/display/intel_display.c | 48 +- drivers/gpu/drm/i915/display/intel_display.h | 17 +- .../gpu/drm/i915/display/intel_display_driver.c | 18 +- drivers/gpu/drm/i915/display/intel_display_irq.c | 20 +- drivers/gpu/drm/i915/display/intel_display_power.c | 71 +- .../drm/i915/display/intel_display_power_well.c | 6 +- drivers/gpu/drm/i915/display/intel_display_trace.h | 15 +- drivers/gpu/drm/i915/display/intel_dp.c | 8 +- drivers/gpu/drm/i915/display/intel_dpll.c | 12 +- drivers/gpu/drm/i915/display/intel_dpll_mgr.c | 90 +- drivers/gpu/drm/i915/display/intel_dsb.c | 2 +- drivers/gpu/drm/i915/display/intel_dsi_vbt.c | 5 +- drivers/gpu/drm/i915/display/intel_dvo.c | 8 +- drivers/gpu/drm/i915/display/intel_fbc.c | 7 +- drivers/gpu/drm/i915/display/intel_fdi.c | 52 +- drivers/gpu/drm/i915/display/intel_fifo_underrun.c | 15 +- drivers/gpu/drm/i915/display/intel_gmbus.c | 290 ++--- drivers/gpu/drm/i915/display/intel_gmbus.h | 15 +- drivers/gpu/drm/i915/display/intel_gmbus_regs.h | 16 +- drivers/gpu/drm/i915/display/intel_hdmi.c | 8 +- drivers/gpu/drm/i915/display/intel_hotplug_irq.c | 6 +- drivers/gpu/drm/i915/display/intel_link_bw.c | 3 +- drivers/gpu/drm/i915/display/intel_lvds.c | 2 +- drivers/gpu/drm/i915/display/intel_modeset_setup.c | 12 +- .../gpu/drm/i915/display/intel_modeset_verify.c | 89 +- drivers/gpu/drm/i915/display/intel_pch_display.c | 56 +- drivers/gpu/drm/i915/display/intel_pps.c | 26 +- drivers/gpu/drm/i915/display/intel_sdvo.c | 9 +- drivers/gpu/drm/i915/display/intel_snps_phy.c | 11 +- drivers/gpu/drm/i915/display/intel_sprite_uapi.c | 3 +- drivers/gpu/drm/i915/display/intel_vga.c | 45 +- drivers/gpu/drm/i915/display/intel_vga.h | 14 +- drivers/gpu/drm/i915/display/skl_watermark.c | 7 +- drivers/gpu/drm/i915/display/vlv_dsi_pll.c | 7 +- .../gpu/drm/i915/gt/intel_execlists_submission.c | 19 +- drivers/gpu/drm/i915/gt/intel_rc6.c | 2 +- drivers/gpu/drm/i915/i915_suspend.c | 5 +- drivers/gpu/drm/i915/i915_utils.h | 24 - drivers/gpu/drm/imagination/pvr_queue.c | 18 +- drivers/gpu/drm/lima/lima_sched.c | 16 +- drivers/gpu/drm/mediatek/mtk_dsi.c | 11 +- drivers/gpu/drm/msm/adreno/a6xx_gpu.c | 5 +- drivers/gpu/drm/msm/disp/mdp4/mdp4_kms.c | 24 +- drivers/gpu/drm/msm/disp/mdp5/mdp5_kms.c | 11 +- drivers/gpu/drm/msm/msm_gpu.c | 30 +- drivers/gpu/drm/msm/msm_ringbuffer.c | 24 +- drivers/gpu/drm/msm/msm_ringbuffer.h | 1 + drivers/gpu/drm/nouveau/nouveau_sched.c | 16 +- drivers/gpu/drm/nouveau/nvkm/subdev/gsp/r535.c | 29 +- drivers/gpu/drm/panfrost/panfrost_job.c | 20 +- drivers/gpu/drm/panthor/panthor_mmu.c | 25 +- drivers/gpu/drm/panthor/panthor_sched.c | 77 +- drivers/gpu/drm/renesas/rz-du/rzg2l_mipi_dsi.c | 8 + drivers/gpu/drm/rockchip/rockchip_drm_vop2.c | 182 ++-- drivers/gpu/drm/scheduler/sched_main.c | 50 +- drivers/gpu/drm/tilcdc/tilcdc_crtc.c | 2 +- drivers/gpu/drm/tilcdc/tilcdc_drv.c | 53 +- drivers/gpu/drm/tilcdc/tilcdc_drv.h | 2 +- drivers/gpu/drm/v3d/v3d_sched.c | 65 +- drivers/gpu/drm/vc4/vc4_bo.c | 2 +- drivers/gpu/drm/vc4/vc4_drv.c | 9 +- drivers/gpu/drm/virtio/virtgpu_drv.h | 25 + drivers/gpu/drm/virtio/virtgpu_object.c | 2 +- drivers/gpu/drm/virtio/virtgpu_plane.c | 4 + drivers/gpu/drm/virtio/virtgpu_prime.c | 42 + drivers/gpu/drm/virtio/virtgpu_vq.c | 4 +- drivers/gpu/drm/vmwgfx/vmwgfx_drv.c | 2 - drivers/gpu/drm/vmwgfx/vmwgfx_drv.h | 2 +- drivers/gpu/drm/vmwgfx/vmwgfx_kms.c | 30 +- drivers/gpu/drm/xe/xe_execlist.c | 15 +- drivers/gpu/drm/xe/xe_gpu_scheduler.c | 17 +- drivers/gpu/drm/xe/xe_guc.c | 8 +- drivers/gpu/drm/xe/xe_guc_ct.c | 41 +- drivers/gpu/drm/xe/xe_guc_ct.h | 1 + drivers/gpu/drm/xe/xe_guc_exec_queue_types.h | 5 + drivers/gpu/drm/xe/xe_guc_submit.c | 4 +- drivers/gpu/drm/xe/xe_vm.c | 31 +- drivers/gpu/drm/xe/xe_vm_types.h | 3 + drivers/hid/hid-core.c | 12 +- drivers/hid/hid-logitech-hidpp.c | 23 +- drivers/hid/hid-steam.c | 33 +- drivers/hv/vmbus_drv.c | 29 +- drivers/hwmon/asus_rog_ryujin.c | 137 +-- drivers/hwmon/lm90.c | 26 +- drivers/hwmon/pmbus/pmbus_core.c | 82 +- drivers/hwtracing/coresight/coresight-etm4x-core.c | 90 +- drivers/hwtracing/coresight/coresight-syscfg.c | 2 + drivers/hwtracing/coresight/coresight-tmc-core.c | 6 +- drivers/hwtracing/coresight/coresight-tmc-etf.c | 48 +- drivers/hwtracing/coresight/coresight-tmc-etr.c | 60 +- drivers/hwtracing/coresight/coresight-tmc.h | 2 +- drivers/i3c/master.c | 39 +- drivers/i3c/master/mipi-i3c-hci/core.c | 1 + drivers/i3c/master/mipi-i3c-hci/dma.c | 27 +- drivers/i3c/master/mipi-i3c-hci/hci.h | 1 + drivers/i3c/master/svc-i3c-master.c | 108 +- drivers/infiniband/core/counters.c | 9 +- drivers/infiniband/hw/bnxt_re/ib_verbs.c | 61 +- drivers/infiniband/hw/bnxt_re/ib_verbs.h | 1 + drivers/infiniband/hw/bnxt_re/qplib_sp.h | 1 + drivers/infiniband/hw/cxgb4/mem.c | 46 +- drivers/infiniband/hw/efa/efa_com.c | 28 +- drivers/infiniband/hw/irdma/hw.c | 7 +- drivers/infiniband/hw/irdma/main.h | 3 +- drivers/infiniband/hw/irdma/utils.c | 12 +- drivers/infiniband/hw/irdma/verbs.c | 22 +- drivers/infiniband/hw/mlx5/cq.c | 15 +- drivers/infiniband/hw/mlx5/main.c | 17 - drivers/infiniband/hw/mlx5/mlx5_ib.h | 1 - drivers/infiniband/sw/rdmavt/vt.c | 4 +- drivers/infiniband/sw/rxe/rxe.h | 37 - drivers/infiniband/sw/rxe/rxe_loc.h | 1 + drivers/infiniband/sw/rxe/rxe_mr.c | 287 +++-- drivers/infiniband/sw/rxe/rxe_verbs.h | 47 +- drivers/iommu/amd/init.c | 45 +- drivers/iommu/arm/arm-smmu-v3/tegra241-cmdqv.c | 60 +- drivers/iommu/intel/iommu.c | 20 +- drivers/iommu/intel/iommu.h | 2 +- drivers/iommu/intel/pasid.c | 9 +- drivers/iommu/io-pgfault.c | 24 +- drivers/iommu/iommufd/fault.c | 2 + drivers/iommu/s390-iommu.c | 63 +- drivers/irqchip/exynos-combiner.c | 14 +- drivers/irqchip/irq-armada-370-xp.c | 12 +- drivers/irqchip/irq-bcm7038-l1.c | 12 +- drivers/irqchip/irq-gic-v3-its.c | 12 +- drivers/irqchip/irq-i8259.c | 12 +- drivers/irqchip/irq-imx-gpcv2.c | 16 +- drivers/irqchip/irq-loongson-eiointc.c | 12 +- drivers/irqchip/irq-loongson-htpic.c | 10 +- drivers/irqchip/irq-loongson-htvec.c | 12 +- drivers/irqchip/irq-loongson-pch-lpc.c | 12 +- drivers/irqchip/irq-loongson-pch-pic.c | 12 +- drivers/irqchip/irq-mchp-eic.c | 12 +- drivers/irqchip/irq-mst-intc.c | 12 +- drivers/irqchip/irq-mtk-cirq.c | 12 +- drivers/irqchip/irq-renesas-rzg2l.c | 12 +- drivers/irqchip/irq-sa11x0.c | 12 +- drivers/irqchip/irq-sifive-plic.c | 12 +- drivers/irqchip/irq-sun6i-r.c | 18 +- drivers/irqchip/irq-tegra.c | 12 +- drivers/irqchip/irq-vic.c | 12 +- drivers/leds/leds-aw200xx.c | 2 +- drivers/leds/trigger/ledtrig-cpu.c | 14 +- drivers/macintosh/via-pmu.c | 12 +- drivers/md/dm-integrity.c | 156 ++- drivers/md/dm-table.c | 41 +- drivers/md/dm-verity-fec.c | 102 +- drivers/md/dm-zone.c | 34 +- drivers/md/dm.c | 6 + drivers/md/dm.h | 5 + drivers/md/md.c | 111 +- drivers/md/md.h | 5 + drivers/md/raid1.c | 32 +- drivers/md/raid10.c | 51 +- .../platform/chips-media/wave5/wave5-helper.c | 30 +- .../platform/chips-media/wave5/wave5-helper.h | 1 + .../platform/chips-media/wave5/wave5-vpu-dec.c | 5 + .../platform/chips-media/wave5/wave5-vpu-enc.c | 5 + .../media/platform/chips-media/wave5/wave5-vpu.c | 99 +- .../platform/chips-media/wave5/wave5-vpuapi.h | 6 + .../st/stm32/stm32-dcmipp/dcmipp-bytecap.c | 51 +- .../st/stm32/stm32-dcmipp/dcmipp-byteproc.c | 100 +- .../st/stm32/stm32-dcmipp/dcmipp-parallel.c | 108 +- drivers/media/platform/verisilicon/hantro.h | 2 + drivers/media/platform/verisilicon/hantro_drv.c | 42 +- drivers/media/platform/verisilicon/imx8m_vpu_hw.c | 8 + drivers/media/v4l2-core/v4l2-mem2mem.c | 23 + drivers/mfd/intel-lpss.c | 2 +- drivers/misc/lkdtm/cfi.c | 2 +- drivers/mmc/host/vub300.c | 39 +- drivers/net/amt.c | 5 +- drivers/net/bonding/bond_main.c | 2 +- drivers/net/ethernet/adi/adin1110.c | 2 +- drivers/net/ethernet/airoha/airoha_eth.c | 32 +- drivers/net/ethernet/broadcom/bnxt/bnxt.c | 76 +- drivers/net/ethernet/broadcom/bnxt/bnxt.h | 20 +- drivers/net/ethernet/broadcom/bnxt/bnxt_devlink.c | 8 +- drivers/net/ethernet/broadcom/bnxt/bnxt_ethtool.c | 2 +- drivers/net/ethernet/broadcom/bnxt/bnxt_hsi.h | 173 ++- drivers/net/ethernet/broadcom/bnxt/bnxt_ulp.c | 345 +++--- drivers/net/ethernet/broadcom/bnxt/bnxt_ulp.h | 25 +- drivers/net/ethernet/cavium/liquidio/lio_main.c | 27 - .../net/ethernet/cavium/liquidio/octeon_device.h | 3 - .../net/ethernet/cavium/liquidio/octeon_mailbox.c | 33 +- .../chelsio/inline_crypto/chtls/chtls_cm.c | 4 +- .../chelsio/inline_crypto/chtls/chtls_cm.h | 1 - drivers/net/ethernet/ibm/emac/core.c | 18 +- .../net/ethernet/intel/ice/devlink/devlink_port.c | 2 +- drivers/net/ethernet/intel/ice/ice_base.c | 9 +- drivers/net/ethernet/intel/ice/ice_ptp.c | 8 +- drivers/net/ethernet/intel/ice/ice_txrx.c | 6 +- drivers/net/ethernet/intel/idpf/idpf_dev.c | 2 +- drivers/net/ethernet/intel/idpf/idpf_lib.c | 15 +- drivers/net/ethernet/intel/idpf/idpf_vf_dev.c | 2 +- drivers/net/ethernet/intel/idpf/idpf_virtchnl.c | 12 +- drivers/net/ethernet/intel/idpf/idpf_virtchnl.h | 2 +- drivers/net/ethernet/intel/igc/igc_main.c | 3 +- drivers/net/ethernet/intel/ixgbe/ixgbe_main.c | 3 +- drivers/net/ethernet/marvell/octeontx2/af/cgx.c | 12 + drivers/net/ethernet/marvell/octeontx2/af/cgx.h | 1 + drivers/net/ethernet/marvell/octeontx2/af/rvu.h | 2 + .../net/ethernet/marvell/octeontx2/af/rvu_cgx.c | 79 ++ .../net/ethernet/marvell/octeontx2/af/rvu_nix.c | 22 +- .../net/ethernet/marvell/octeontx2/af/rvu_npc.c | 29 +- .../net/ethernet/marvell/octeontx2/nic/otx2_vf.c | 20 +- .../net/ethernet/marvell/prestera/prestera_main.c | 2 +- drivers/net/ethernet/mellanox/mlx4/srq.c | 13 +- drivers/net/ethernet/mellanox/mlx5/core/cq.c | 24 +- drivers/net/ethernet/mellanox/mlx5/core/en.h | 13 + .../ethernet/mellanox/mlx5/core/en/hv_vhca_stats.c | 10 +- .../net/ethernet/mellanox/mlx5/core/en/params.c | 2 +- drivers/net/ethernet/mellanox/mlx5/core/en/ptp.c | 2 +- drivers/net/ethernet/mellanox/mlx5/core/en/txrx.h | 5 +- .../net/ethernet/mellanox/mlx5/core/en/xsk/tx.c | 4 +- .../net/ethernet/mellanox/mlx5/core/en_common.c | 11 +- drivers/net/ethernet/mellanox/mlx5/core/en_main.c | 37 +- drivers/net/ethernet/mellanox/mlx5/core/en_rep.c | 54 +- drivers/net/ethernet/mellanox/mlx5/core/en_rep.h | 1 - drivers/net/ethernet/mellanox/mlx5/core/en_rx.c | 23 +- drivers/net/ethernet/mellanox/mlx5/core/en_stats.c | 9 +- drivers/net/ethernet/mellanox/mlx5/core/eq.c | 8 +- .../ethernet/mellanox/mlx5/core/esw/devlink_port.c | 36 + drivers/net/ethernet/mellanox/mlx5/core/eswitch.h | 1 + .../net/ethernet/mellanox/mlx5/core/fpga/conn.c | 16 +- .../net/ethernet/mellanox/mlx5/core/ipoib/ipoib.c | 3 +- drivers/net/ethernet/mellanox/mlx5/core/lib/aso.c | 8 +- drivers/net/ethernet/mellanox/mlx5/core/main.c | 11 +- .../ethernet/mellanox/mlx5/core/steering/dr_send.c | 29 +- .../mlx5/core/steering/hws/mlx5hws_action.c | 135 ++- .../mlx5/core/steering/hws/mlx5hws_action.h | 6 +- .../mellanox/mlx5/core/steering/hws/mlx5hws_cmd.c | 2 +- .../mellanox/mlx5/core/steering/hws/mlx5hws_cmd.h | 2 +- .../mlx5/core/steering/hws/mlx5hws_context.c | 30 +- .../mlx5/core/steering/hws/mlx5hws_context.h | 4 +- .../mlx5/core/steering/hws/mlx5hws_debug.c | 56 +- .../mlx5/core/steering/hws/mlx5hws_definer.h | 2 +- .../mlx5/core/steering/hws/mlx5hws_internal.h | 1 - .../mlx5/core/steering/hws/mlx5hws_matcher.c | 237 ++--- .../mlx5/core/steering/hws/mlx5hws_matcher.h | 8 +- .../mlx5/core/steering/hws/mlx5hws_pat_arg.h | 2 +- .../mellanox/mlx5/core/steering/hws/mlx5hws_pool.c | 513 +++------ .../mellanox/mlx5/core/steering/hws/mlx5hws_pool.h | 77 +- .../mellanox/mlx5/core/steering/hws/mlx5hws_rule.c | 75 +- .../mellanox/mlx5/core/steering/hws/mlx5hws_rule.h | 3 +- .../mellanox/mlx5/core/steering/hws/mlx5hws_send.c | 16 +- .../mlx5/core/steering/hws/mlx5hws_table.c | 16 +- drivers/net/ethernet/mellanox/mlx5/core/wc.c | 4 +- drivers/net/ethernet/mellanox/mlxsw/spectrum.c | 2 +- drivers/net/ethernet/microsoft/mana/mana_en.c | 7 +- drivers/net/ethernet/rocker/rocker_main.c | 2 +- drivers/net/ethernet/stmicro/stmmac/stmmac_main.c | 91 +- drivers/net/ethernet/ti/am65-cpsw-nuss.c | 253 +++-- drivers/net/ethernet/ti/cpsw_new.c | 2 +- drivers/net/ethernet/ti/icssg/icssg_common.c | 2 +- drivers/net/ethernet/xilinx/xilinx_axienet.h | 7 +- drivers/net/ethernet/xilinx/xilinx_axienet_main.c | 53 +- drivers/net/loopback.c | 2 +- drivers/net/net_failover.c | 2 +- drivers/net/netconsole.c | 2 + drivers/net/tap.c | 33 +- drivers/net/team/team_core.c | 95 +- drivers/net/team/team_mode_loadbalance.c | 4 +- drivers/net/virtio_net.c | 26 +- drivers/net/vrf.c | 2 +- drivers/net/vxlan/vxlan_core.c | 36 +- drivers/net/wireguard/device.c | 8 +- drivers/net/wireless/ath/ath11k/mhi.c | 8 +- drivers/net/wireless/ath/ath11k/pci.c | 7 + drivers/net/wireless/ath/ath12k/core.h | 2 +- drivers/net/wireless/ath/ath12k/dp_mon.c | 217 ++-- drivers/net/wireless/ath/ath12k/dp_rx.c | 62 +- drivers/net/wireless/ath/ath12k/dp_tx.c | 5 +- drivers/net/wireless/ath/ath12k/hal_rx.c | 10 +- drivers/net/wireless/ath/ath12k/hal_rx.h | 12 +- drivers/net/wireless/ath/ath12k/mac.c | 25 +- drivers/net/wireless/ath/ath12k/mhi.c | 4 - drivers/net/wireless/ath/ath12k/wmi.c | 19 +- drivers/net/wireless/ath/ath9k/wmi.c | 16 +- drivers/net/wireless/ath/ath9k/wmi.h | 1 - .../net/wireless/broadcom/brcm80211/brcmfmac/p2p.c | 4 + drivers/net/wireless/intel/iwlwifi/dvm/main.c | 47 +- drivers/net/wireless/intel/iwlwifi/fw/smem.c | 5 +- drivers/net/wireless/intel/iwlwifi/iwl-drv.c | 2 +- drivers/net/wireless/intel/iwlwifi/mvm/binding.c | 10 +- drivers/net/wireless/intel/iwlwifi/mvm/fw.c | 3 +- drivers/net/wireless/intel/iwlwifi/mvm/link.c | 5 +- drivers/net/wireless/intel/iwlwifi/mvm/mac80211.c | 12 +- drivers/net/wireless/intel/iwlwifi/mvm/mvm.h | 3 + drivers/net/wireless/intel/iwlwifi/mvm/ops.c | 24 +- .../net/wireless/intel/iwlwifi/mvm/time-event.c | 3 +- .../net/wireless/intel/iwlwifi/pcie/trans-gen2.c | 6 +- drivers/net/wireless/mediatek/mt76/dma.c | 10 +- drivers/net/wireless/mediatek/mt76/mac80211.c | 59 +- drivers/net/wireless/mediatek/mt76/mt76.h | 10 + .../net/wireless/mediatek/mt76/mt76_connac_mcu.c | 9 +- .../net/wireless/mediatek/mt76/mt76_connac_mcu.h | 23 + drivers/net/wireless/mediatek/mt76/mt7915/init.c | 2 + drivers/net/wireless/mediatek/mt76/mt7915/mac.c | 12 +- drivers/net/wireless/mediatek/mt76/mt7925/main.c | 14 +- drivers/net/wireless/mediatek/mt76/mt7925/mcu.c | 6 +- drivers/net/wireless/mediatek/mt76/mt7996/init.c | 2 + drivers/net/wireless/mediatek/mt76/mt7996/mac.c | 5 +- drivers/net/wireless/mediatek/mt76/mt7996/mmio.c | 4 + drivers/net/wireless/mediatek/mt76/wed.c | 10 +- drivers/net/wireless/realtek/rtw89/pci.c | 41 +- drivers/ntb/ntb_transport.c | 18 +- drivers/nvme/target/admin-cmd.c | 8 +- drivers/nvme/target/core.c | 41 +- drivers/nvme/target/fabrics-cmd.c | 2 +- drivers/nvme/target/nvmet.h | 6 + drivers/nvme/target/tcp.c | 6 +- drivers/opp/core.c | 5 +- drivers/pci/bus.c | 23 +- drivers/pci/endpoint/functions/pci-epf-ntb.c | 5 + drivers/pci/endpoint/functions/pci-epf-vntb.c | 5 + drivers/pci/of.c | 27 + drivers/pci/pci-driver.c | 198 ++-- drivers/pci/pci.h | 46 +- drivers/pci/pwrctl/core.c | 2 + drivers/pci/search.c | 8 +- drivers/perf/dwc_pcie_pmu.c | 81 +- drivers/pinctrl/mediatek/pinctrl-moore.c | 6 +- drivers/pinctrl/mediatek/pinctrl-mtk-common.c | 14 +- drivers/pinctrl/mediatek/pinctrl-paris.c | 33 +- drivers/platform/x86/amd/pmf/Kconfig | 1 + drivers/platform/x86/amd/pmf/acpi.c | 48 +- drivers/platform/x86/amd/pmf/core.c | 5 +- drivers/platform/x86/amd/pmf/pmf.h | 7 +- drivers/platform/x86/amd/pmf/tee-if.c | 64 +- drivers/platform/x86/asus-wmi.c | 6 +- drivers/platform/x86/dell/dell-wmi-base.c | 2 +- drivers/pmdomain/imx/imx93-blk-ctrl.c | 60 +- drivers/power/reset/sc27xx-poweroff.c | 10 +- drivers/ptp/ptp_ocp.c | 3 +- drivers/pwm/pwm-samsung.c | 22 +- drivers/remoteproc/Kconfig | 11 +- drivers/remoteproc/da8xx_remoteproc.c | 2 +- drivers/remoteproc/imx_dsp_rproc.c | 2 +- drivers/remoteproc/imx_rproc.c | 2 +- drivers/remoteproc/keystone_remoteproc.c | 2 +- drivers/remoteproc/meson_mx_ao_arc.c | 2 +- drivers/remoteproc/mtk_scp.c | 2 +- drivers/remoteproc/pru_rproc.c | 2 +- drivers/remoteproc/qcom_q6v5_adsp.c | 2 +- drivers/remoteproc/qcom_q6v5_mss.c | 2 +- drivers/remoteproc/qcom_q6v5_pas.c | 639 ++++++----- drivers/remoteproc/qcom_q6v5_wcss.c | 2 +- drivers/remoteproc/qcom_wcnss.c | 25 +- drivers/remoteproc/rcar_rproc.c | 2 +- drivers/remoteproc/remoteproc_virtio.c | 2 +- drivers/remoteproc/st_remoteproc.c | 2 +- drivers/remoteproc/stm32_rproc.c | 2 +- drivers/remoteproc/ti_k3_dsp_remoteproc.c | 2 +- drivers/remoteproc/wkup_m3_rproc.c | 2 +- drivers/s390/crypto/ap_bus.c | 74 ++ drivers/s390/crypto/ap_bus.h | 30 +- drivers/s390/crypto/pkey_cca.c | 11 +- drivers/s390/crypto/zcrypt_api.c | 122 ++- drivers/s390/crypto/zcrypt_api.h | 11 +- drivers/s390/crypto/zcrypt_ccamisc.c | 80 +- drivers/s390/crypto/zcrypt_ccamisc.h | 6 +- drivers/s390/crypto/zcrypt_ep11misc.c | 10 +- drivers/s390/crypto/zcrypt_msgtype50.c | 36 +- drivers/s390/crypto/zcrypt_msgtype6.c | 210 ++-- drivers/s390/crypto/zcrypt_msgtype6.h | 51 +- drivers/s390/net/ism_drv.c | 20 +- drivers/scsi/ch.c | 30 +- drivers/scsi/hisi_sas/hisi_sas_v3_hw.c | 12 +- drivers/scsi/qla2xxx/qla_iocb.c | 2 - drivers/scsi/qla2xxx/qla_os.c | 20 +- drivers/scsi/qla2xxx/qla_target.c | 5 +- drivers/scsi/qla2xxx/qla_target.h | 1 + drivers/scsi/scsi_error.c | 6 +- drivers/scsi/sd.c | 141 +-- drivers/sh/clk/core.c | 10 +- drivers/sh/intc/core.c | 12 +- drivers/soc/aspeed/aspeed-lpc-snoop.c | 31 +- drivers/soc/bcm/brcmstb/biuctrl.c | 12 +- drivers/soc/tegra/pmc.c | 124 ++- drivers/soc/xilinx/zynqmp_power.c | 43 +- drivers/soundwire/generic_bandwidth_allocation.c | 35 +- drivers/soundwire/intel_auxdevice.c | 36 +- drivers/spi/spi-ch341.c | 7 +- drivers/spi/spi-microchip-core-qspi.c | 100 +- drivers/spi/spi-mpc52xx.c | 26 +- drivers/staging/greybus/raw.c | 90 +- drivers/staging/most/Kconfig | 2 - drivers/staging/most/Makefile | 1 - drivers/staging/most/i2c/Kconfig | 13 - drivers/staging/most/i2c/Makefile | 4 - drivers/staging/most/i2c/i2c.c | 374 ------- drivers/staging/rtl8723bs/core/rtw_mlme.c | 14 +- drivers/staging/rtl8723bs/core/rtw_mlme_ext.c | 22 +- drivers/thermal/intel/intel_hfi.c | 12 +- drivers/thermal/thermal_hwmon.c | 89 +- drivers/tty/serial/8250/8250_core.c | 253 ++--- drivers/tty/serial/serial_core.c | 117 +- drivers/tty/tty_io.c | 2 +- drivers/ufs/core/ufs-mcq.c | 35 +- drivers/ufs/core/ufs-sysfs.c | 2 + drivers/ufs/core/ufshcd-priv.h | 14 +- drivers/ufs/core/ufshcd.c | 82 +- drivers/ufs/host/ufs-qcom.c | 71 +- drivers/usb/gadget/function/f_fs.c | 55 +- drivers/usb/gadget/function/f_hid.c | 4 +- drivers/usb/gadget/function/f_uac1.c | 13 +- drivers/usb/gadget/function/f_uac2.c | 13 +- drivers/vdpa/mlx5/core/mlx5_vdpa.h | 2 + drivers/vdpa/mlx5/core/mr.c | 5 +- drivers/vdpa/mlx5/core/resources.c | 11 +- drivers/vdpa/mlx5/net/mlx5_vnet.c | 6 +- drivers/vdpa/vdpa.c | 48 +- drivers/vdpa/vdpa_sim/vdpa_sim.c | 10 +- drivers/vdpa/vdpa_user/iova_domain.c | 11 +- drivers/vdpa/vdpa_user/vduse_dev.c | 4 +- drivers/vhost/iotlb.c | 47 +- drivers/vhost/net.c | 2 + drivers/vhost/vdpa.c | 9 +- drivers/vhost/vhost.c | 65 +- drivers/vhost/vhost.h | 1 + drivers/vhost/vsock.c | 2 + drivers/video/fbdev/core/fb_chrdev.c | 6 +- drivers/video/fbdev/core/fbcon.c | 2 - drivers/video/fbdev/core/fbmem.c | 13 + drivers/video/fbdev/core/fbsysfs.c | 4 +- drivers/video/fbdev/omap2/omapfb/omapfb-main.c | 11 +- drivers/video/fbdev/ps3fb.c | 5 +- drivers/video/fbdev/sh_mobile_lcdcfb.c | 5 +- drivers/virt/acrn/irqfd.c | 75 +- drivers/virtio/virtio.c | 29 + drivers/virtio/virtio_ring.c | 19 +- drivers/watchdog/at91sam9_wdt.c | 4 +- drivers/xen/pvcalls-front.c | 88 +- drivers/xen/xen-acpi-processor.c | 12 +- fs/9p/vfs_addr.c | 2 +- fs/afs/addr_list.c | 8 +- fs/afs/file.c | 6 +- fs/afs/fsclient.c | 2 +- fs/afs/inode.c | 1 + fs/afs/internal.h | 4 +- fs/afs/rxrpc.c | 4 +- fs/afs/super.c | 2 +- fs/afs/yfsclient.c | 2 +- fs/btrfs/acl.c | 4 + fs/btrfs/bio.c | 8 +- fs/btrfs/block-rsv.c | 19 +- fs/btrfs/defrag.c | 50 +- fs/btrfs/delayed-ref.c | 35 +- fs/btrfs/disk-io.c | 25 +- fs/btrfs/extent-tree.c | 35 +- fs/btrfs/extent-tree.h | 3 +- fs/btrfs/extent_io.c | 58 +- fs/btrfs/file.c | 103 +- fs/btrfs/fs.h | 9 + fs/btrfs/inode.c | 3 +- fs/btrfs/lzo.c | 13 +- fs/btrfs/qgroup.c | 18 +- fs/btrfs/transaction.c | 9 +- fs/btrfs/tree-log.c | 142 +-- fs/btrfs/volumes.c | 241 +++-- fs/btrfs/zstd.c | 11 +- fs/ceph/addr.c | 1115 +++++++++++++------- fs/ceph/mds_client.c | 65 +- fs/ceph/mds_client.h | 1 + fs/ceph/super.h | 9 + fs/erofs/decompressor.c | 61 +- fs/erofs/internal.h | 6 +- fs/erofs/xattr.c | 6 +- fs/erofs/zdata.c | 18 +- fs/erofs/zmap.c | 8 +- fs/ext2/inode.c | 3 +- fs/ext2/xattr.c | 4 +- fs/ext4/ext4.h | 3 +- fs/ext4/inode.c | 35 +- fs/ext4/xattr.c | 2 +- fs/f2fs/checkpoint.c | 15 +- fs/f2fs/data.c | 27 +- fs/f2fs/f2fs.h | 3 +- fs/f2fs/gc.c | 5 +- fs/f2fs/node.c | 50 +- fs/f2fs/super.c | 65 +- fs/fcntl.c | 3 + fs/gfs2/ops_fstype.c | 2 +- fs/gfs2/super.c | 4 +- fs/iomap/buffered-io.c | 8 +- fs/lockd/svc.c | 4 +- fs/lockd/svc4proc.c | 4 +- fs/lockd/svcproc.c | 4 +- fs/lockd/svcsubs.c | 45 +- fs/namespace.c | 40 +- fs/netfs/Makefile | 1 + fs/netfs/buffered_read.c | 129 +-- fs/netfs/direct_read.c | 16 +- fs/netfs/direct_write.c | 10 +- fs/netfs/internal.h | 11 +- fs/netfs/main.c | 7 + fs/netfs/misc.c | 110 +- fs/netfs/objects.c | 35 +- fs/netfs/read_collect.c | 61 +- fs/netfs/read_pgpriv2.c | 32 +- fs/netfs/read_retry.c | 4 +- fs/netfs/rolling_buffer.c | 230 ++++ fs/netfs/write_collect.c | 25 +- fs/netfs/write_issue.c | 32 +- fs/nfs/callback_xdr.c | 6 +- fs/nfs/delegation.c | 18 +- fs/nfs/flexfilelayout/flexfilelayout.c | 3 +- fs/nfs/fscache.c | 2 +- fs/nfs/fscache.h | 2 +- fs/nfs/localio.c | 15 + fs/nfs/nfs4session.c | 16 +- fs/nfsd/filecache.c | 75 +- fs/nfsd/lockd.c | 6 +- fs/nfsd/netns.h | 22 +- fs/nfsd/nfs4proc.c | 2 +- fs/nfsd/nfs4recover.c | 12 +- fs/nfsd/nfs4state.c | 41 +- fs/nfsd/nfsctl.c | 4 +- fs/nfsd/nfssvc.c | 45 +- fs/ntfs3/bitmap.c | 62 +- fs/ntfs3/frecord.c | 1 - fs/ntfs3/fsntfs.c | 2 +- fs/ntfs3/run.c | 19 +- fs/ocfs2/cluster/heartbeat.c | 139 ++- fs/ocfs2/cluster/tcp.c | 105 +- fs/ocfs2/cluster/tcp.h | 1 + fs/ocfs2/inode.c | 133 +++ fs/ocfs2/xattr.c | 215 ++++ fs/ocfs2/xattr.h | 2 + fs/overlayfs/file.c | 17 +- fs/smb/client/cifsacl.c | 28 +- fs/smb/client/cifsfs.c | 1 + fs/smb/client/cifsglob.h | 5 +- fs/smb/client/connect.c | 5 + fs/smb/client/file.c | 72 +- fs/smb/client/inode.c | 22 +- fs/smb/client/misc.c | 72 +- fs/smb/client/readdir.c | 17 +- fs/smb/client/smb2ops.c | 46 +- fs/smb/client/smb2pdu.c | 9 - fs/smb/client/smbdirect.c | 20 +- fs/smb/client/transport.c | 40 +- fs/smb/server/auth.c | 14 +- fs/smb/server/connection.c | 37 +- fs/smb/server/connection.h | 7 +- fs/smb/server/mgmt/tree_connect.c | 26 +- fs/smb/server/mgmt/user_config.c | 11 + fs/smb/server/mgmt/user_session.c | 8 +- fs/smb/server/oplock.c | 81 +- fs/smb/server/oplock.h | 1 + fs/smb/server/smb2pdu.c | 115 +- fs/smb/server/smbacl.c | 88 +- fs/smb/server/smbacl.h | 2 +- fs/smb/server/transport_rdma.c | 4 +- fs/smb/server/vfs.c | 2 + fs/smb/server/vfs_cache.c | 8 +- fs/sysfs/group.c | 26 +- fs/tracefs/event_inode.c | 24 + fs/tracefs/internal.h | 4 +- fs/xfs/libxfs/xfs_alloc.c | 41 +- fs/xfs/libxfs/xfs_da_btree.c | 53 +- fs/xfs/libxfs/xfs_da_btree.h | 2 + fs/xfs/libxfs/xfs_exchmaps.c | 103 +- fs/xfs/libxfs/xfs_ialloc.c | 31 +- fs/xfs/libxfs/xfs_log_format.h | 4 +- fs/xfs/xfs_attr_inactive.c | 104 +- fs/xfs/xfs_bmap_util.c | 15 +- fs/xfs/xfs_buf.c | 65 +- fs/xfs/xfs_buf.h | 1 - fs/xfs/xfs_buf_item.c | 297 ++++-- fs/xfs/xfs_buf_item.h | 3 +- fs/xfs/xfs_dquot.c | 4 +- fs/xfs/xfs_exchrange.c | 51 +- fs/xfs/xfs_icache.c | 8 + fs/xfs/xfs_inode.c | 2 +- fs/xfs/xfs_qm.c | 87 +- fs/xfs/xfs_trace.h | 2 - include/acpi/acpi_bus.h | 6 + include/asm-generic/vmlinux.lds.h | 2 +- include/clocksource/samsung_pwm.h | 2 +- include/drm/gpu_scheduler.h | 36 +- include/linux/arm_ffa.h | 24 +- include/linux/bpf.h | 10 +- include/linux/bpf_mprog.h | 10 + include/linux/bpf_verifier.h | 2 + include/linux/cfi.h | 4 +- include/linux/cfi_types.h | 6 +- include/linux/cgroup.h | 1 + include/linux/device.h | 14 + include/linux/dma/k3-udma-glue.h | 3 +- include/linux/fb.h | 2 + include/linux/folio_queue.h | 12 +- include/linux/gpio.h | 4 +- include/linux/gpio/consumer.h | 22 +- include/linux/gpio/driver.h | 10 + include/linux/gpu_buddy.h | 9 - include/linux/hid.h | 4 + include/linux/hugetlb.h | 6 + include/linux/i3c/master.h | 3 + include/linux/ieee80211.h | 12 +- include/linux/if_team.h | 3 +- include/linux/io_uring_types.h | 8 + include/linux/iommu.h | 5 + include/linux/irq_work.h | 9 +- include/linux/irq_work_types.h | 14 + include/linux/kasan.h | 6 +- include/linux/kvm_host.h | 8 + include/linux/lockd/bind.h | 12 +- include/linux/mlx5/cq.h | 2 +- include/linux/mlx5/driver.h | 3 +- include/linux/mm_inline.h | 15 +- include/linux/mmzone.h | 2 + include/linux/mount.h | 3 +- include/linux/net.h | 23 + include/linux/netdevice.h | 13 +- include/linux/netfilter.h | 2 + include/linux/netfilter/x_tables.h | 1 + include/linux/netfs.h | 22 +- include/linux/ntb.h | 24 + include/linux/overflow.h | 70 ++ include/linux/page-flags.h | 2 +- include/linux/pci.h | 1 + include/linux/pm.h | 2 + include/linux/pm_runtime.h | 21 +- include/linux/psi.h | 4 +- include/linux/rcupdate.h | 14 + include/linux/rcuwait.h | 13 +- include/linux/refcount.h | 106 ++ include/linux/ring_buffer.h | 5 +- include/linux/rolling_buffer.h | 61 ++ include/linux/skmsg.h | 14 - include/linux/slab.h | 9 + include/linux/soc/mediatek/mtk_wed.h | 1 + include/linux/srcutiny.h | 4 + include/linux/stddef.h | 20 + include/linux/sunrpc/svc_rdma.h | 14 +- include/linux/syscore_ops.h | 17 +- include/linux/types.h | 12 + include/linux/vdpa.h | 4 - include/media/v4l2-mem2mem.h | 21 + include/net/act_api.h | 2 +- include/net/ax25.h | 1 - include/net/bluetooth/hci_core.h | 2 + include/net/bluetooth/rfcomm.h | 1 + include/net/cfg80211.h | 103 +- include/net/dropreason-core.h | 21 + include/net/ip_vs.h | 2 +- include/net/net_namespace.h | 2 + include/net/netfilter/nf_conntrack_expect.h | 16 +- include/net/netfilter/nf_tables.h | 32 +- include/net/netns/mpls.h | 2 + include/net/pkt_cls.h | 14 +- include/net/sch_generic.h | 28 +- include/net/sctp/auth.h | 3 + include/net/tcp.h | 15 +- include/net/xdp_sock.h | 1 + include/net/xdp_sock_drv.h | 6 +- include/net/xsk_buff_pool.h | 9 +- include/scsi/scsi_host.h | 7 +- include/trace/events/netfs.h | 173 +-- include/trace/events/rv.h | 84 +- include/uapi/linux/netfilter/nf_conntrack_common.h | 1 + include/ufs/ufshcd.h | 7 +- init/Kconfig | 4 +- io_uring/eventfd.c | 6 +- io_uring/eventfd.h | 2 +- io_uring/futex.c | 4 +- io_uring/io_uring.c | 2 +- io_uring/napi.c | 72 +- io_uring/napi.h | 6 +- io_uring/poll.c | 23 +- io_uring/rw.c | 16 +- io_uring/waitid.c | 2 +- kernel/Makefile | 2 +- kernel/bpf/bpf_struct_ops.c | 12 + kernel/bpf/btf.c | 30 +- kernel/bpf/helpers.c | 15 +- kernel/bpf/mmap_unlock_work.h | 51 +- kernel/bpf/queue_stack_maps.c | 8 +- kernel/bpf/stackmap.c | 153 ++- kernel/bpf/syscall.c | 11 +- kernel/bpf/task_iter.c | 14 +- kernel/bpf/trampoline.c | 7 + kernel/bpf/verifier.c | 481 ++++++--- kernel/cgroup/cgroup.c | 47 +- kernel/cgroup/rstat.c | 19 +- kernel/configs/hardening.config | 4 +- kernel/cpu_pm.c | 12 +- kernel/irq/debugfs.c | 2 +- kernel/irq/generic-chip.c | 14 +- kernel/irq/pm.c | 11 +- kernel/irq/proc.c | 72 +- kernel/module/Kconfig | 2 +- kernel/printk/nbcon.c | 2 +- kernel/printk/printk.c | 13 +- kernel/rcu/srcutiny.c | 19 +- kernel/sched/ext.c | 40 +- kernel/sched/psi.c | 69 +- kernel/sched/syscalls.c | 17 + kernel/time/namespace.c | 5 + kernel/time/sched_clock.c | 22 +- kernel/time/timekeeping.c | 22 +- kernel/trace/ring_buffer.c | 139 ++- kernel/trace/ring_buffer_benchmark.c | 6 +- kernel/trace/trace.c | 110 +- kernel/trace/trace_probe.c | 2 +- lib/kunit_iov_iter.c | 4 +- lib/longest_symbol_kunit.c | 2 +- mm/huge_memory.c | 3 + mm/hugetlb.c | 9 +- mm/hugetlb_vmemmap.c | 232 ++-- mm/kasan/shadow.c | 111 +- mm/memcontrol.c | 2 +- mm/mm_init.c | 2 + mm/mremap.c | 68 +- mm/page_owner.c | 10 +- mm/page_table_check.c | 20 +- mm/vma.c | 39 +- mm/vma.h | 14 +- mm/vmalloc.c | 8 +- mm/vmscan.c | 47 +- net/ax25/af_ax25.c | 30 +- net/ax25/ax25_route.c | 74 -- net/batman-adv/soft-interface.c | 2 +- net/bluetooth/6lowpan.c | 27 +- net/bluetooth/hci_conn.c | 2 + net/bluetooth/hci_core.c | 4 + net/bluetooth/hci_event.c | 93 +- net/bluetooth/hci_sync.c | 145 ++- net/bluetooth/hci_sysfs.c | 17 +- net/bluetooth/iso.c | 46 +- net/bluetooth/l2cap_core.c | 23 +- net/bluetooth/l2cap_sock.c | 116 +- net/bluetooth/rfcomm/core.c | 134 ++- net/bridge/br_arp_nd_proxy.c | 24 +- net/bridge/br_device.c | 2 +- net/bridge/netfilter/ebtable_broute.c | 2 +- net/bridge/netfilter/ebtable_filter.c | 2 +- net/bridge/netfilter/ebtable_nat.c | 2 +- net/bridge/netfilter/ebtables.c | 71 +- net/ceph/auth_x.c | 5 + net/core/bpf_sk_storage.c | 17 +- net/core/dev.c | 190 +++- net/core/filter.c | 4 +- net/core/net_namespace.c | 175 +-- net/core/rtnetlink.c | 2 +- net/core/sock.c | 3 + net/ethtool/module.c | 3 +- net/ethtool/rss.c | 4 +- net/handshake/handshake-test.c | 8 + net/handshake/netlink.c | 6 +- net/handshake/request.c | 18 + net/hsr/hsr_device.c | 2 +- net/ieee802154/6lowpan/core.c | 2 +- net/ieee802154/core.c | 14 +- net/ife/ife.c | 14 +- net/ipv4/igmp.c | 14 +- net/ipv4/ip_tunnel.c | 2 +- net/ipv4/ipmr.c | 2 +- net/ipv4/netfilter/arp_tables.c | 35 +- net/ipv4/netfilter/ip_tables.c | 41 +- net/ipv4/netfilter/iptable_nat.c | 4 +- net/ipv4/tcp.c | 5 +- net/ipv4/tcp_bpf.c | 17 +- net/ipv4/tcp_input.c | 15 +- net/ipv4/tcp_ipv4.c | 3 +- net/ipv4/udp_bpf.c | 9 + net/ipv6/ioam6.c | 33 +- net/ipv6/ip6_gre.c | 9 +- net/ipv6/ip6_tunnel.c | 2 +- net/ipv6/ip6_vti.c | 2 +- net/ipv6/ip6mr.c | 5 +- net/ipv6/mcast.c | 20 +- net/ipv6/netfilter/ip6_tables.c | 38 +- net/ipv6/netfilter/ip6table_nat.c | 4 +- net/ipv6/sit.c | 2 +- net/ipv6/tcp_ipv6.c | 3 +- net/mac80211/debug.h | 10 +- net/mac80211/mlme.c | 35 +- net/mac80211/rx.c | 50 +- net/mac80211/sta_info.c | 79 +- net/mac80211/util.c | 3 + net/mpls/af_mpls.c | 232 ++-- net/mpls/internal.h | 16 +- net/mpls/mpls_iptunnel.c | 2 +- net/mptcp/fastopen.c | 3 +- net/mptcp/protocol.c | 256 ++--- net/mptcp/protocol.h | 6 +- net/netfilter/ipvs/ip_vs_core.c | 11 +- net/netfilter/ipvs/ip_vs_xmit.c | 3 +- net/netfilter/nf_conntrack_bpf.c | 111 +- net/netfilter/nf_conntrack_core.c | 33 +- net/netfilter/nf_conntrack_expect.c | 148 ++- net/netfilter/nf_conntrack_h323_main.c | 4 +- net/netfilter/nf_conntrack_helper.c | 10 +- net/netfilter/nf_conntrack_netlink.c | 24 +- net/netfilter/nf_conntrack_sip.c | 13 +- net/netfilter/nf_flow_table_ip.c | 3 + net/netfilter/nf_nat_core.c | 10 +- net/netfilter/nf_tables_api.c | 317 ++++-- net/netfilter/nft_bitwise.c | 15 +- net/netfilter/nft_byteorder.c | 13 +- net/netfilter/nft_ct.c | 3 +- net/netfilter/nft_dynset.c | 25 +- net/netfilter/nft_flow_offload.c | 3 +- net/netfilter/nft_set_pipapo.c | 11 +- net/netfilter/x_tables.c | 77 +- net/openvswitch/vport-internal_dev.c | 2 +- net/phonet/socket.c | 10 +- net/qrtr/mhi.c | 69 +- net/rxrpc/af_rxrpc.c | 25 +- net/rxrpc/key.c | 2 + net/rxrpc/peer_object.c | 22 +- net/rxrpc/proc.c | 32 +- net/rxrpc/recvmsg.c | 12 +- net/rxrpc/sendmsg.c | 7 +- net/rxrpc/server_key.c | 2 + net/sched/act_api.c | 2 +- net/sched/act_bpf.c | 2 +- net/sched/act_ife.c | 40 +- net/sched/act_mpls.c | 2 +- net/sched/act_police.c | 2 +- net/sched/act_skbedit.c | 2 +- net/sched/cls_api.c | 6 +- net/sched/cls_basic.c | 6 +- net/sched/cls_bpf.c | 6 +- net/sched/cls_cgroup.c | 2 +- net/sched/cls_flow.c | 2 +- net/sched/cls_flower.c | 4 +- net/sched/cls_fw.c | 4 +- net/sched/cls_matchall.c | 4 +- net/sched/cls_route.c | 4 +- net/sched/cls_u32.c | 18 +- net/sched/sch_cake.c | 4 +- net/sched/sch_codel.c | 12 +- net/sched/sch_drr.c | 2 +- net/sched/sch_ets.c | 2 +- net/sched/sch_fq.c | 26 +- net/sched/sch_fq_codel.c | 16 +- net/sched/sch_fq_pie.c | 14 +- net/sched/sch_generic.c | 45 +- net/sched/sch_gred.c | 2 +- net/sched/sch_hfsc.c | 2 +- net/sched/sch_hhf.c | 12 +- net/sched/sch_htb.c | 2 +- net/sched/sch_multiq.c | 2 +- net/sched/sch_pie.c | 12 +- net/sched/sch_prio.c | 2 +- net/sched/sch_qfq.c | 2 +- net/sched/sch_sfb.c | 2 +- net/sched/sch_sfq.c | 2 +- net/sctp/auth.c | 76 ++ net/sctp/bind_addr.c | 11 +- net/sctp/protocol.c | 3 +- net/sctp/sm_make_chunk.c | 20 +- net/sctp/sm_statefuns.c | 36 +- net/smc/af_smc.c | 90 +- net/smc/smc_loopback.c | 45 +- net/sunrpc/auth_gss/gss_krb5_unseal.c | 3 + net/sunrpc/xprtrdma/svc_rdma_recvfrom.c | 17 +- net/sunrpc/xprtrdma/svc_rdma_rw.c | 100 +- net/sunrpc/xprtrdma/svc_rdma_sendto.c | 16 +- net/sunrpc/xprtrdma/svc_rdma_transport.c | 30 +- net/tipc/core.c | 4 +- net/tipc/udp_media.c | 75 +- net/tls/tls_sw.c | 2 + net/wireless/core.c | 20 +- net/wireless/core.h | 2 +- net/wireless/nl80211.c | 16 +- net/wireless/scan.c | 15 +- net/wireless/sme.c | 6 +- net/xdp/xsk.c | 253 ++++- net/xdp/xsk_buff_pool.c | 14 +- net/xdp/xsk_queue.h | 65 +- net/xfrm/xfrm_device.c | 8 + security/apparmor/domain.c | 105 +- security/apparmor/include/policy.h | 3 + security/apparmor/policy.c | 22 +- security/selinux/selinuxfs.c | 27 +- sound/core/seq/oss/seq_oss_event.c | 6 +- sound/core/seq/oss/seq_oss_event.h | 3 +- sound/core/seq/oss/seq_oss_ioctl.c | 5 +- sound/core/seq/oss/seq_oss_midi.c | 6 +- sound/core/seq/oss/seq_oss_midi.h | 2 +- sound/core/seq/oss/seq_oss_readq.c | 85 +- sound/core/seq/oss/seq_oss_rw.c | 5 +- sound/core/seq/seq_clientmgr.c | 3 +- sound/core/seq/seq_fifo.c | 67 +- sound/core/seq/seq_fifo.h | 1 + sound/drivers/mtpav.c | 6 +- sound/pci/ctxfi/ctatc.c | 63 +- sound/pci/ctxfi/ctatc.h | 4 - sound/pci/ctxfi/ctdaio.c | 91 +- sound/pci/ctxfi/ctdaio.h | 2 + sound/pci/ctxfi/cthardware.h | 2 +- sound/pci/ctxfi/cthw20k1.c | 2 +- sound/pci/ctxfi/cthw20k2.c | 2 +- sound/soc/amd/acp/acp-mach-common.c | 18 +- sound/soc/intel/avs/avs.h | 2 +- sound/soc/intel/avs/path.c | 11 +- sound/soc/intel/avs/pcm.c | 23 +- sound/soc/intel/avs/probes.c | 2 +- sound/soc/intel/avs/topology.c | 47 +- sound/soc/intel/avs/topology.h | 4 +- sound/soc/qcom/qdsp6/q6asm.c | 5 + sound/soc/sof/ipc3-pcm.c | 13 +- sound/soc/sof/ipc3-topology.c | 20 +- sound/soc/sof/ipc4-pcm.c | 41 +- sound/soc/sof/ipc4-topology.c | 18 +- sound/soc/sof/pcm.c | 169 ++- sound/soc/sof/sof-audio.c | 49 - sound/soc/sof/sof-audio.h | 17 +- sound/usb/pcm.c | 2 +- tools/perf/util/event.c | 15 +- tools/perf/util/include/linux/linkage.h | 2 +- .../testing/selftests/bpf/progs/exceptions_fail.c | 9 +- .../bpf/progs/verifier_subprog_precision.c | 12 +- tools/testing/selftests/net/forwarding/README | 2 +- tools/testing/selftests/net/tls.c | 515 +++++++++ tools/testing/vma/vma.c | 4 +- virt/kvm/guest_memfd.c | 8 +- virt/kvm/kvm_main.c | 36 +- virt/kvm/kvm_mm.h | 7 +- 1236 files changed, 21709 insertions(+), 13348 deletions(-)

2 weeks, 3 days

[PATCH 6.18 00/52] 6.18.58-rc1 review

by Greg Kroah-Hartman

This is the start of the stable review cycle for the 6.18.58 release. There are 52 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know. Responses should be made by Mon, 19 Oct 2026 15:50:51 +0000. Anything received after that time might be too late. The whole patch series can be found in one patch at: https://www.kernel.org/pub/linux/kernel/v6.x/stable-review/patch-6.18.58-rc… or in the git tree and branch at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-6.18.y and the diffstat can be found below. thanks, greg k-h ------------- Pseudo-Shortlog of commits: Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> Linux 6.18.58-rc1 Toke Høiland-Jørgensen <toke(a)toke.dk> wifi: atk9k: Revert "wifi: ath9k: reject short WMI command responses" Mattia Meleleo <mattia.meleleo(a)coralogix.com> bpf, sockmap: Account for receive queue in FIONREAD without a verdict program Pratyush Yadav <pratyush(a)kernel.org> kho: free chunks using free_page() instead of kfree() Jens Axboe <axboe(a)kernel.dk> io_uring/kbuf: don't charge provided buffer rings to RLIMIT_MEMLOCK Hengyu Liang <hengyul(a)cs.unc.edu> io_uring: do not charge the SQ/CQ rings to RLIMIT_MEMLOCK Bernard Pidoux <bernard.f6bvp(a)gmail.com> rose: hold a reference on incoming sockets queued for accept() Alexander Lobakin <aleksander.lobakin(a)intel.com> ice: fix broken Rx on VFs Johan Hovold <johan(a)kernel.org> USB: iowarrior: fix use-after-free on disconnect race Oliver Neukum <oneukum(a)suse.com> usb: iowarrior: remove inherent race with minor number Stephen Smalley <stephen.smalley.work(a)gmail.com> selinux: allow multiple opens of /sys/fs/selinux/policy SeongJae Park <sj(a)kernel.org> mm/damon/core: fix damos_walk() vs kdamond_fn() exit race SeongJae Park <sj(a)kernel.org> mm/damon/core: cancel damos_walk() before damon_ctx->kdamond reset Long Li <leo.lilong(a)huawei.com> xfs: close crash window in attr dabtree inactivation Long Li <leo.lilong(a)huawei.com> xfs: factor out xfs_attr3_leaf_init Long Li <leo.lilong(a)huawei.com> xfs: factor out xfs_attr3_node_entry_remove Larysa Zaremba <larysa.zaremba(a)intel.com> ice: change XDP RxQ frag_size from DMA write length to xdp.frame_sz Larysa Zaremba <larysa.zaremba(a)intel.com> ice: fix rxq info registering in mbuf packets Michal Schmidt <mschmidt(a)redhat.com> ice: fix crash in ethtool offline loopback test Michal Kubiak <michal.kubiak(a)intel.com> ice: drop page splitting and recycling Michal Kubiak <michal.kubiak(a)intel.com> ice: remove legacy Rx and construct SKB Chris J Arges <carges(a)cloudflare.com> ima: Fix stack-out-of-bounds in is_bprm_creds_for_exec() Coiby Xu <coxu(a)redhat.com> ima: Access decompressed kernel module to verify appended signature Matteo Croce <technoboy85(a)gmail.com> fat: stop reading directory entries past the end-of-directory marker Frank Sorenson <sorenson(a)redhat.com> cifs: fix time_last_write stamp placement in setattr/truncate paths Fan Wu <fanwu01(a)zju.edu.cn> drm/xe/i2c: cancel the client work on remove Stanley Jhu <stanleyjhu(a)google.com> scsi: ufs: core: Avoid unsafe MMIO reads in ufshcd_mcq_compl_all_cqes_lock() Bart Van Assche <bvanassche(a)acm.org> scsi: ufs: core: Add a comment block above ufshcd_mcq_compl_all_cqes_lock() Peter Wang <peter.wang(a)mediatek.com> scsi: ufs: core: Add debug log for MCQ command timeout Bart Van Assche <bvanassche(a)acm.org> scsi: ufs: core: Move an assignment in ufshcd_mcq_process_cqe() Ahmed Abdelhaleem Ahmed <ahmedhal(a)gmail.com> scsi: ch: Do not keep references to data transfer element devices Stanley Jhu <stanleyjhu(a)google.com> scsi: ufs: core: Decouple CQ sweep from request iterator in MCQ Wei-Jie Hung <imbigking12(a)gmail.com> riscv: patch: fix handling of bpf-jit execmem addresses Vivian Wang <wangruikang(a)iscas.ac.cn> riscv: patch: Avoid early phys_to_page() Hamza Mahfooz <hamzamahfooz(a)linux.microsoft.com> net: mana: reserve RX buffer headroom to fix forwarding performance Suraj Gupta <suraj.gupta2(a)amd.com> net: xilinx: axienet: Free outstanding DMA buffers on dmaengine stop Mikhail Gavrilov <mikhail.v.gavrilov(a)gmail.com> Bluetooth: RFCOMM: connect the session socket without rfcomm_mutex Tejun Heo <tj(a)kernel.org> sched_ext: Fix CPU hotplug hang when a dying CPU's tasks sit in the BPF scheduler Mikulas Patocka <mpatocka(a)redhat.com> dm-integrity: validate the superblock on resume Mikulas Patocka <mpatocka(a)redhat.com> dm-integrity: fix NULL pointer dereference when the 'R' flag is used Sean Wang <sean.wang(a)mediatek.com> wifi: mt76: connac: tolerate inactive BSS deactivation Lubos Rendek <l.rendek(a)proxmox.com> nfsd: fix all-zero stateid in CB_OFFLOAD for async COPY Lorenzo Stoakes (ARM) <ljs(a)kernel.org> mm/mremap: fix locked_vm leak from MREMAP_DONTUNMAP self-merge Lorenzo Stoakes (ARM) <ljs(a)kernel.org> mm/mremap: fix locked_vm leak by splitting VMA for MREMAP_DONTUNMAP Jose Ignacio Tornos Martinez <jtornosm(a)redhat.com> iavf: send MAC change request synchronously Corinna Vinschen <vinschen(a)redhat.com> iavf: iavf_virtchnl_completion: drop duplicate ether_addr_equal() test Mario Limonciello <mario.limonciello(a)amd.com> drm/amd: Create a device link between APU display and XHCI devices Daehyeon Ko <4ncienth(a)gmail.com> ip6_gre: remove obsolete ERSPAN PMTU update Manivannan Sadhasivam <manivannan.sadhasivam(a)oss.qualcomm.com> PCI: dwc: Return -EIO from dw_pcie_wait_for_link() if device is not active Manivannan Sadhasivam <manivannan.sadhasivam(a)oss.qualcomm.com> PCI: dwc: Return -ENODEV from dw_pcie_wait_for_link() if device is not found Cheng Xu <chengyou(a)linux.alibaba.com> RDMA/erdma: Use IRQ-safe XArray helpers for QP and CQ tables Ethan Tidmore <ethantidmore06(a)gmail.com> usb: gadget: f_hid: Add missing error code Johan Hovold <johan(a)kernel.org> spi: mpc52xx: clean up interrupt handling ------------- Diffstat: Makefile | 4 +- arch/riscv/kernel/patch.c | 21 +- drivers/gpu/drm/amd/pm/swsmu/amdgpu_smu.c | 12 ++ drivers/gpu/drm/amd/pm/swsmu/inc/amdgpu_smu.h | 10 + .../gpu/drm/amd/pm/swsmu/smu14/smu_v14_0_0_ppt.c | 45 ++++ drivers/gpu/drm/xe/xe_i2c.c | 5 +- drivers/infiniband/hw/erdma/erdma_main.c | 4 +- drivers/infiniband/hw/erdma/erdma_verbs.c | 18 +- drivers/md/dm-integrity.c | 55 +++++ drivers/net/ethernet/intel/iavf/iavf.h | 11 +- drivers/net/ethernet/intel/iavf/iavf_main.c | 85 ++++++-- drivers/net/ethernet/intel/iavf/iavf_virtchnl.c | 111 ++++++++-- drivers/net/ethernet/intel/ice/ice.h | 3 +- drivers/net/ethernet/intel/ice/ice_base.c | 79 ++----- drivers/net/ethernet/intel/ice/ice_ethtool.c | 10 +- drivers/net/ethernet/intel/ice/ice_lib.c | 15 +- drivers/net/ethernet/intel/ice/ice_main.c | 11 +- drivers/net/ethernet/intel/ice/ice_txrx.c | 233 ++------------------- drivers/net/ethernet/intel/ice/ice_txrx.h | 88 -------- drivers/net/ethernet/intel/ice/ice_xsk.c | 75 +------ drivers/net/ethernet/intel/ice/virt/queues.c | 6 +- drivers/net/ethernet/microsoft/mana/mana_bpf.c | 8 +- drivers/net/ethernet/microsoft/mana/mana_en.c | 26 ++- drivers/net/ethernet/xilinx/xilinx_axienet.h | 7 +- drivers/net/ethernet/xilinx/xilinx_axienet_main.c | 53 ++++- drivers/net/wireless/ath/ath9k/wmi.c | 16 +- drivers/net/wireless/ath/ath9k/wmi.h | 1 - .../net/wireless/mediatek/mt76/mt76_connac_mcu.c | 9 +- .../net/wireless/mediatek/mt76/mt76_connac_mcu.h | 23 ++ drivers/net/wireless/mediatek/mt76/mt7925/mcu.c | 6 +- drivers/pci/controller/dwc/pcie-designware.c | 31 ++- drivers/scsi/ch.c | 30 +-- drivers/spi/spi-mpc52xx.c | 26 ++- drivers/ufs/core/ufs-mcq.c | 35 +++- drivers/ufs/core/ufshcd.c | 37 ++-- drivers/usb/gadget/function/f_hid.c | 4 +- drivers/usb/misc/iowarrior.c | 74 +++---- fs/fat/dir.c | 44 +++- fs/nfsd/nfs4proc.c | 2 + fs/smb/client/inode.c | 27 ++- fs/xfs/libxfs/xfs_attr_leaf.c | 22 ++ fs/xfs/libxfs/xfs_attr_leaf.h | 3 + fs/xfs/libxfs/xfs_da_btree.c | 53 ++++- fs/xfs/libxfs/xfs_da_btree.h | 2 + fs/xfs/xfs_attr_inactive.c | 99 +++++---- include/linux/damon.h | 1 + include/linux/kernel_read_file.h | 1 + include/linux/skmsg.h | 14 -- include/net/bluetooth/rfcomm.h | 1 + include/net/mana/mana.h | 4 +- io_uring/io_uring.c | 12 +- io_uring/kbuf.c | 6 +- io_uring/memmap.c | 29 ++- io_uring/memmap.h | 6 +- io_uring/register.c | 15 +- io_uring/zcrx.c | 4 +- kernel/kexec_handover.c | 2 +- kernel/module/main.c | 17 +- kernel/sched/ext.c | 29 ++- kernel/sched/sched.h | 5 +- mm/damon/core.c | 24 ++- mm/mremap.c | 38 +++- mm/vma.c | 21 +- mm/vma.h | 7 +- net/bluetooth/rfcomm/core.c | 134 ++++++++---- net/ipv4/tcp_bpf.c | 17 +- net/ipv6/ip6_gre.c | 7 - net/rose/af_rose.c | 44 +++- net/rose/rose_timer.c | 5 + security/integrity/ima/ima.h | 6 +- security/integrity/ima/ima_appraise.c | 16 +- security/integrity/ima/ima_main.c | 30 ++- security/integrity/ima/ima_policy.c | 3 +- security/ipe/hooks.c | 1 + security/selinux/hooks.c | 5 +- security/selinux/selinuxfs.c | 27 +-- tools/testing/vma/vma.c | 4 +- 77 files changed, 1160 insertions(+), 914 deletions(-)

2 weeks, 3 days

[PATCH 7.2 00/10] 7.2.12-rc1 review

by Greg Kroah-Hartman

This is the start of the stable review cycle for the 7.2.12 release. There are 10 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know. Responses should be made by Mon, 19 Oct 2026 15:50:51 +0000. Anything received after that time might be too late. The whole patch series can be found in one patch at: https://www.kernel.org/pub/linux/kernel/v7.x/stable-review/patch-7.2.12-rc1… or in the git tree and branch at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-7.2.y and the diffstat can be found below. thanks, greg k-h ------------- Pseudo-Shortlog of commits: Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> Linux 7.2.12-rc1 Richard Fitzgerald <rf(a)opensource.cirrus.com> ASoC: cs35l56: Add DAI for SDCA OT25 stream Toke Høiland-Jørgensen <toke(a)toke.dk> wifi: atk9k: Revert "wifi: ath9k: reject short WMI command responses" Hamza Mahfooz <hamzamahfooz(a)linux.microsoft.com> net: mana: reserve RX buffer headroom to fix forwarding performance Dipayaan Roy <dipayanroy(a)linux.microsoft.com> net: mana: refactor mana_get_strings() and mana_get_sset_count() to use switch Christian Brauner <brauner(a)kernel.org> readdir: take no inode lock on an immutable directory Christian Brauner <brauner(a)kernel.org> nullfs: refuse file locks Tejun Heo <tj(a)kernel.org> sched_ext: Fix CPU hotplug hang when a dying CPU's tasks sit in the BPF scheduler Mikulas Patocka <mpatocka(a)redhat.com> dm-integrity: validate the superblock on resume Mikulas Patocka <mpatocka(a)redhat.com> dm-integrity: fix NULL pointer dereference when the 'R' flag is used Lubos Rendek <l.rendek(a)proxmox.com> nfsd: fix all-zero stateid in CB_OFFLOAD for async COPY ------------- Diffstat: Makefile | 4 +- drivers/md/dm-integrity.c | 55 +++++++++++++ drivers/net/ethernet/microsoft/mana/mana_bpf.c | 8 +- drivers/net/ethernet/microsoft/mana/mana_en.c | 60 ++++++++++---- drivers/net/ethernet/microsoft/mana/mana_ethtool.c | 95 +++++++++++++--------- drivers/net/wireless/ath/ath9k/wmi.c | 16 +--- drivers/net/wireless/ath/ath9k/wmi.h | 1 - fs/nfsd/nfs4proc.c | 2 + fs/nullfs.c | 30 +++++++ fs/readdir.c | 13 ++- include/linux/fs.h | 2 + include/net/mana/mana.h | 14 +++- include/sound/cs35l56.h | 1 + kernel/sched/ext/ext.c | 29 ++++++- kernel/sched/sched.h | 5 +- sound/soc/codecs/cs35l56-sdw.c | 9 +- sound/soc/codecs/cs35l56.c | 54 ++++++++++++ 17 files changed, 312 insertions(+), 86 deletions(-)

2 weeks, 3 days

[PATCH 7.2 000/428] 7.2.10-rc1 review

by Greg Kroah-Hartman

This is the start of the stable review cycle for the 7.2.10 release. There are 428 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know. Responses should be made by Sun, 11 Oct 2026 14:08:23 +0000. Anything received after that time might be too late. The whole patch series can be found in one patch at: https://www.kernel.org/pub/linux/kernel/v7.x/stable-review/patch-7.2.10-rc1… or in the git tree and branch at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-7.2.y and the diffstat can be found below. thanks, greg k-h ------------- Pseudo-Shortlog of commits: Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> Linux 7.2.10-rc1 Michael Hennerich <michael.hennerich(a)analog.com> iio: buffer-dmaengine: fix sg entry iteration when building dma_vecs Josef Bacik <josef(a)toxicpanda.com> xen/netfront: drop RX packets with a short Ethernet header Gilberto Conde <gilbertorconde(a)gmail.com> net: usb: qmi_wwan: add Quectel EG120K-EA Paulo Alcantara <pc(a)manguebit.org> smb: client: only require read lease for size-extending preallocate Beata Michalska <beata.michalska(a)arm.com> arm64: errata: Add Cortex-A725 erratum 3821522 workaround Beata Michalska <beata.michalska(a)arm.com> arm64: errata: Factor out broken AMU const counter cap Zhengchuan Liang <zcliangcn(a)gmail.com> perf: Require kernel access for text poke events Dapeng Mi <dapeng1.mi(a)linux.intel.com> perf/core: Check kernel access when kernel callchains are requested Francisco Beltrán Millalén <fbeltranmillalen(a)gmail.com> drm/amdgpu: reset VI ASIC on MacBookPro14,3 Andre Eikmeyer <dev(a)deq.rocks> drm/amdgpu: reset VI ASIC on MacBookPro15,1 Ray Wu <ray.wu(a)amd.com> drm/amd/display: map PWM brightness through custom backlight curve Alice Ryhl <aliceryhl(a)google.com> rust: irq: pass RegistrationInner as cookie to request_irq Mehmet Fide <mehmet.fide(a)screeningeagle.com> mtd: rawnand: vf610_nfc: fix false bitflips on reads of erased pages Matthieu Baerts (NGI0) <matttbe(a)kernel.org> mptcp: fix msk->timer_ival reset Fan Wu <fanwu01(a)zju.edu.cn> iio: trigger: cancel reenable_work before freeing trigger Donggeun Yoo <donggeunyoo.kernel(a)gmail.com> iio: proximity: vl53l0x-i2c: claim direct mode for raw reads Salah Triki <salah.triki(a)gmail.com> iio: proximity: vcnl3020: fix ISR bitmask check in IRQ handler Zhang Jie <zhangjie14(a)huaqin.corp-partner.google.com> iio: proximity: sx9324: Correct proximity channel resolution Cong Nguyen <congnt264(a)gmail.com> iio: proximity: pulsedlight: fix iio_device left registered on PM setup failure Salah Triki <salah.triki(a)gmail.com> iio: proximity: isl29501: Fix return type of isl29501_register_write Laxman Acharya Padhya <acharyalaxman8848(a)gmail.com> iio: proximity: aw96103: validate firmware data length Matti Vaittinen <mazziesaccount(a)gmail.com> iio: pressure: rohm-bm1390: Return error when read fails Hui Su <sh_def(a)163.com> iio: pressure: bmp280: fix out-of-bounds access in sampling frequency lookup Matti Vaittinen <mazziesaccount(a)gmail.com> iio: light: rohm-bu27034: Fix infinite delay on error Fan Wu <fanwu01(a)zju.edu.cn> iio: light: gp2ap020a00f: drain irq_work after free_irq Arka Mondal <arkamondalofficial(a)gmail.com> iio: imu: adis16480: fix unprotected debugfs reads Arka Mondal <arkamondalofficial(a)gmail.com> iio: imu: adis16400: fix unprotected debugfs reads Marco Chen <marcochen.dev(a)gmail.com> iio: health: max30102: fix NULL dereference in interrupt handler Arka Mondal <arkamondalofficial(a)gmail.com> iio: gyro: adis16136: fix unprotected debugfs reads Salah Triki <salah.triki(a)gmail.com> iio: frequency: admv1013: fix wrong channel field used in admv1013_read_raw() Geert Uytterhoeven <geert+renesas(a)glider.be> iio: frequency: adf4377: Fully initialize clk_init_data and clk_parent_data Pengpeng Hou <hppiscas(a)163.com> iio: cdc: ad7150: fix OF matching and publish module aliases Jonathan Cameron <jonathan.cameron(a)oss.qualcomm.com> iio: buffer: Ensure bounce buffer used for unaligned case is zeroed. Jinseob Kim <kimjinseob88(a)gmail.com> iio: buffer: serialize buffer teardown with mode claims Runyu Xiao <runyu.xiao(a)seu.edu.cn> iio: admv1013: initialize callback mutex before registering notifier Fan Wu <fanwu01(a)zju.edu.cn> iio: adc: xilinx-xadc: free IRQ before cancelling the unmask worker on unbind Felix Gu <ustc.gu(a)gmail.com> iio: adc: sun4i-gpadc-iio: drop underflowing pm_runtime_put() calls Felix Gu <ustc.gu(a)gmail.com> iio: adc: sun4i-gpadc-iio: clean up on thermal zone registration failure Fabrice Gasnier <fabrice.gasnier(a)foss.st.com> iio: adc: stm32-adc: fix possible division by zero in processed channel Fabrice Gasnier <fabrice.gasnier(a)foss.st.com> iio: adc: stm32-adc: fix check on internal channel availability Matti Vaittinen <mazziesaccount(a)gmail.com> iio: adc: rohm-bd79124: Fix rising alarm Matti Vaittinen <mazziesaccount(a)gmail.com> iio: adc: rohm-bd79124: Fix GPIO mask check Matti Vaittinen <mazziesaccount(a)gmail.com> iio: adc: rohm-bd79124: Fix channel initialization Matti Vaittinen <mazziesaccount(a)gmail.com> iio: adc: rohm-bd79124: Catch regmap errors at measurement start/stop Slavin Liu <bolin.liu(a)seu.edu.cn> iio: adc: pac1934: check ACPI label duplication Cong Nguyen <congnt264(a)gmail.com> iio: adc: max1363: sign-extend bipolar differential channel reads Vladyslav Ivashchenko <cactucatu4eckuu(a)gmail.com> iio: adc: axp288: Add TS bias override for Haier HV103H Pengpeng Hou <pengpeng(a)iscas.ac.cn> iio: adc: aspeed: propagate reset deassert errors Janani Sunil <janani.sunil(a)analog.com> iio: adc: adi-axi-adc: Initialize state mutex Antoniu Miclaus <antoniu.miclaus(a)analog.com> iio: adc: ade9000: request interrupts after powering the device Antoniu Miclaus <antoniu.miclaus(a)analog.com> iio: adc: ade9000: handle Phase C dip events in IRQ1 handler Antoniu Miclaus <antoniu.miclaus(a)analog.com> iio: adc: ade9000: fix overlapping scan_index for current and voltage channels Linmao Li <lilinmao(a)kylinos.cn> iio: adc: ade9000: fix NULL pointer dereference in clkout registration Fan Wu <fanwu01(a)zju.edu.cn> iio: adc: ad_sigma_delta: fix use-after-free on unbind Marcelo Schmitt <marcelo.schmitt(a)analog.com> iio: adc: ad7173: Fix digital filter configuration Salah Triki <salah.triki(a)gmail.com> iio: adc: ad4030: fix invalid oversampling_ratio validation Salah Triki <salah.triki(a)gmail.com> iio: accel: sca3000: fix frequency divider condition check Jiale Yao <yaojiale02(a)163.com> iio: accel: kxcjk-1013: reject duplicate event disable Matti Vaittinen <mazziesaccount(a)gmail.com> iio: accel: kionix-kx022a: Prevent memory leak and fix state Frank Sorenson <sorenson(a)redhat.com> smb: client: split cifsFileInfo bitfields to avoid shared-byte RMW races Paulo Alcantara <pc(a)manguebit.org> smb: client: require stable pages for signed connections Paulo Alcantara <pc(a)manguebit.org> smb: client: drain and invalidate before server-side copy/clone Paulo Alcantara <pc(a)manguebit.org> smb: client: distinguish real EOF from a stale remote_i_size on read Paulo Alcantara <pc(a)manguebit.org> smb: client: flush dirty data before zeroing a range Paulo Alcantara <pc(a)manguebit.org> smb: client: only require read lease for size-extending zero range Paulo Alcantara <pc(a)manguebit.org> smb: client: flush and commit data before querying allocated ranges Paulo Alcantara <pc(a)manguebit.org> smb: client: discard post-EOF pagecache when extending a file via clone range Paulo Alcantara <pc(a)manguebit.org> smb: client: discard post-EOF pagecache when extending a file via copy range Paulo Alcantara <pc(a)manguebit.org> smb: client: discard post-EOF pagecache when extending a file via zero range Daehyeon Ko <4ncienth(a)gmail.com> thunderbolt: Reject oversized XDomain properties responses Kurt Lieber <kurt(a)lieber.org> thunderbolt: Disable CL states for the Anker Prime TB5 dock Fedor Pchelkin <pchelkin(a)ispras.ru> thunderbolt: Fix NULL dereference in tb_remove_work() Sven Peter <sven(a)kernel.org> thunderbolt: Don't access a DP tunnel after its DPRX read was canceled Sven Peter <sven(a)kernel.org> thunderbolt: Fix domain reference leak when DPRX read is canceled Sven Peter <sven(a)kernel.org> thunderbolt: Tear down inactive DP tunnels when the domain is stopped Sven Peter <sven(a)kernel.org> thunderbolt: Mark discovered tunnels as active Sven Peter <sven(a)kernel.org> thunderbolt: Make the DP tunnel activation callback mandatory Sven Peter <sven(a)kernel.org> thunderbolt: Hold a router reference for each allocated HopID Mika Westerberg <mika.westerberg(a)linux.intel.com> thunderbolt: Fix KASAN reported use-after-free when request is canceled Ian Lin <ian.lin(a)jetone.com.tw> USB: serial: option: add Compal EXC-T1 support Sebastian Sjoholm <sebastian.sjoholm(a)gmail.com> USB: serial: option: add Quectel RG660QB Ian Lin <jisayme(a)gmail.com> USB: serial: option: add Compal EXM-G1x support Carlo Szelinsky <github(a)szelinsky.de> USB: serial: option: add Quectel EG060W Zhao Dongdong <zhaodongdong(a)kylinos.cn> USB: serial: option: add support for SIMCom SIM8260C Johan Hovold <johan(a)kernel.org> USB: serial: fix ioctl hangup race Johan Hovold <johan(a)kernel.org> USB: serial: fix driver deregistration order Johan Hovold <johan(a)kernel.org> USB: serial: fix dynamic id driver deregistration race Johan Hovold <johan(a)kernel.org> USB: serial: ssu100: fix baud rate overflow Johan Hovold <johan(a)kernel.org> USB: serial: quatech2: fix baud rate overflow Jérémy Carrat <jeremy.carrat(a)icloud.com> USB: serial: cp210x: add Corsair AX1500i Power Supply Yuqi Xu <xuyuqiabc(a)gmail.com> wifi: mac80211: handle empty FILS association request payload Zihan Xi <zihanx(a)nebusec.ai> wifi: mac80211: fix mesh fast xmit path deletion UAF Felix Fietkau <nbd(a)nbd.name> wifi: mac80211: set info->band for 802.3 encap offload frames Zhao Li <enderaoelyther(a)gmail.com> wifi: mac80211: release mesh path quota on failed additions Ruide Cao <caoruide123(a)gmail.com> wifi: mac80211: reject invalid 320 MHz CSA bandwidth Yuqi Xu <xuyuqiabc(a)gmail.com> wifi: mac80211: minstrel_ht: validate fixed rate index Zhao Li <enderaoelyther(a)gmail.com> wifi: mac80211: keep fallback association elements alive Zhao Li <enderaoelyther(a)gmail.com> wifi: mac80211: account proxy paths against the mesh path limit Zhao Li <enderaoelyther(a)gmail.com> wifi: mac80211: drain PS delivery work during station teardown Zhao Li <enderaoelyther(a)gmail.com> wifi: mac80211: shut down RX BA session timer on teardown Zhiling Zou <zhilinz(a)nebusec.ai> wifi: mac80211: keep paired old chanctx alive Zhiling Zou <zhilinz(a)nebusec.ai> wifi: mac80211: count only matching reservations in reserved switch Guangshuo Li <lgs201920130244(a)gmail.com> wifi: iwlegacy: 3945: free EEPROM data on remove Tianchu Chen <flynnnchen(a)tencent.com> wifi: cw1200: fix TX padding OOB read leaking heap data to device Stanislaw Gruszka <stf_xl(a)wp.pl> wifi: cfg80211: fix RTS threshold setting for single-radio PHY Mostafa Saleh <smostafa(a)google.com> KVM: arm64: Use stage-1 leaf size for VM_PFNMAP Marc Zyngier <maz(a)kernel.org> KVM: arm64: vgic-its: Fix MOVALL handling of source redistributor Marc Zyngier <maz(a)kernel.org> KVM: arm64: vgic: Take a refcount on IRQs referenced by last_lr_irq Marc Zyngier <maz(a)kernel.org> KVM: arm64: vgic: Allow last_lr_irq to be NULL when LRs are not overflowing Fuad Tabba <fuad.tabba(a)linux.dev> KVM: arm64: Apply the fine-grained UNDEFs without FEAT_FGT Fuad Tabba <fuad.tabba(a)linux.dev> KVM: arm64: Clear HCR_EL2.RW for 32-bit non-protected vCPUs Sean Christopherson <seanjc(a)google.com> KVM: SVM: Update control fields on #VMEXIT if and only if VMRUN succeeded Sean Christopherson <seanjc(a)google.com> KVM: SVM: Preserve TLB control (i.e. pending TLB flush) on failed VMRUN Sean Christopherson <seanjc(a)google.com> KVM: SVM: Use the active VMCB's MSR bitmap when checking if MSR is intercepted Sean Christopherson <seanjc(a)google.com> KVM: x86/mmu: Bail from shadow walks if the root is invalid or a dummy Sean Christopherson <seanjc(a)google.com> KVM: SEV: Do cache maintenance on the source VM *before* clearing SEV state Sean Christopherson <seanjc(a)google.com> KVM: SEV: Nullify "have run CPUs" mask pointer when freeing it Sean Christopherson <seanjc(a)google.com> KVM: nVMX: Force MSR bitmap refresh if runtime eVMCS controls are modified Sagnik Sasmal <sagnik(a)sagnik.me> mtd: spinand: Do not update the QE bit on devices without one Nuno Sá <nuno.sa(a)analog.com> mtd: spinand: fix zero oobavail when no ECC engine is used Nuno Sá <nuno.sa(a)analog.com> mtd: spinand: fix NULL pointer dereference with no ECC engine Han Xu <han.xu(a)nxp.com> mtd: spinand: Enable QE on all dies Runyu Xiao <runyu.xiao(a)seu.edu.cn> mtd: spi-nor: core: Fix mutex leak in spi_nor_rww_start_exclusive() Mehmet Fide <mehmet.fide(a)screeningeagle.com> mtd: rawnand: vf610_nfc: fix reads on chips with more than 64 bytes of OOB Runyu Xiao <runyu.xiao(a)seu.edu.cn> mtd: rawnand: cadence: Initialize IRQ state before requesting IRQ Menachem Adin <menachem.adin(a)intel.com> mtd: mtd_intel_dg: reset poll counter for each erase Pei Xiao <xiaopei01(a)kylinos.cn> mtd: block2mtd: Fix divide error when erase_size is zero Guixin Liu <kanie(a)linux.alibaba.com> nvmet: copy the hostid into the ctrl before creating PR pc_refs Daehyeon Ko <4ncienth(a)gmail.com> nvmet: pci-epf: reject too-short SGL segments Weiming Shi <bestswngs(a)gmail.com> nvmet-auth: fix out-of-bounds write in nvmet_auth_challenge() Bean Huo <beanhuo(a)micron.com> nvme-pci: add NVME_QUIRK_DMAPOOL_ALIGN_512 for Micron 4100AT Daehyeon Ko <4ncienth(a)gmail.com> nvme-multipath: fix underflow in ANA log bounds checks Guixin Liu <kanie(a)linux.alibaba.com> nvme-multipath: set BLK_FEAT_ZONED only after the zone info is known Jiangshan Yi <yijiangshan(a)kylinos.cn> tpm: fix off-by-four bounds check in tpm2_get_random() Mikhail Gavrilov <mikhail.v.gavrilov(a)gmail.com> x86/mm: Drop unnecessary PMD page copy when freeing Laurent Wandrebeck <l.wandrebeck(a)quelquesmots.fr> x86/mm: Don't apply va_align to hugetlb mappings on AMD F15h Chandrashekar Devegowda <chandrashekar.devegowda(a)intel.com> Bluetooth: btintel_pcie: reject oversized TX packets in send_frame() Chandrashekar Devegowda <chandrashekar.devegowda(a)intel.com> Bluetooth: btintel_pcie: fix plen overflow in btintel_pcie_recv_frame() Chandrashekar Devegowda <chandrashekar.devegowda(a)intel.com> Bluetooth: btintel: fix buffer over-read in btintel_hw_error() Chengfeng Ye <nicoyip.dev(a)gmail.com> Bluetooth: hci_core: Serialize fragmented ISO packet queueing Chengfeng Ye <nicoyip.dev(a)gmail.com> Bluetooth: hci_core: Serialize SCO and ISO scheduling with teardown Chengfeng Ye <nicoyip.dev(a)gmail.com> Bluetooth: hci_core: Serialize ACL scheduling with channel deletion Linmao Li <lilinmao(a)kylinos.cn> Bluetooth: hci_core: Fix inquiry cache timestamps on 64-bit systems Chengfeng Ye <nicoyip.dev(a)gmail.com> Bluetooth: hci_conn: Lock parent access during enhanced SCO setup Chengfeng Ye <nicoyip.dev(a)gmail.com> Bluetooth: hci_sync: Fix inquiry cache use-after-free Chengfeng Ye <nicoyip.dev(a)gmail.com> Bluetooth: Serialize SMP remote OOB data access Chengfeng Ye <nicoyip.dev(a)gmail.com> Bluetooth: RFCOMM: Fix initial port reference race Abdurrahman Hussain <abdurrahman(a)nexthop.ai> i2c: xiic: don't clobber msg->len to signal block-read completion Abdurrahman Hussain <abdurrahman(a)nexthop.ai> i2c: xiic: defer RX_FULL until all trailing bytes are in FIFO Abdurrahman Hussain <abdurrahman(a)nexthop.ai> i2c: xiic: preserve PEC byte length in SMBus block read setup Rounak Das <rounakdas2025(a)gmail.com> EDAC/altera: Fix device node reference leaks in the SDMMC ECC setup Dinh Nguyen <dinguyen(a)kernel.org> EDAC/altera: Fix use-after-free in error paths Dinh Nguyen <dinguyen(a)kernel.org> EDAC/altera: Fix memory leak on dci allocation failure Dinh Nguyen <dinguyen(a)kernel.org> EDAC/altera: Drop __init from ECC setup paths for re-probe safety Dinh Nguyen <dinguyen(a)kernel.org> EDAC/altera: Do not allow driver unbinding Guangshuo Li <lgs201920130244(a)gmail.com> EDAC/versalnet: Drop remote processor handle refcount on driver removal Jakub Gawlik <jakubgawlik13(a)gmail.com> ALSA: hda/realtek: Add micmute LED quirk for Acer Swift SFG16-72 Yu-Hsiang Tseng <asas1asas200(a)gmail.com> ALSA: hda/realtek: Fix silent speaker on Higole F9B Zhang Heng <zhangheng(a)kylinos.cn> ALSA: hda/realtek: Fix square wave output on ASUS Strix G615LR Xiang Mei <xmei5(a)asu.edu> ALSA: ua101: reject mismatched capture/playback packet sizes Kyle Zeng <kylebot(a)openai.com> ALSA: seq: Serialize compat port-info ioctls Aaron Kling <webgeek1234(a)gmail.com> ALSA: hda/tegra: Re-enable SDO workaround for Tegra194 Zimeng Li <me(a)lizi.moe> ASoC: qcom: lpass-cpu: use DAI table index for playback constraints Jiangshan Yi <yijiangshan(a)kylinos.cn> ASoC: codecs: rt1017-sdca-sdw: fix uninitialized stream_config->type Jiangshan Yi <yijiangshan(a)kylinos.cn> ASoC: codecs: max98363: fix uninitialized stream_config->type Liviu Nicoara <lnicoara(a)thinkoid.org> ASoC: codecs: lpass-wsa-macro: rewrite the interpolator volume after enabling clocks Andrea Parri <parri.andrea(a)gmail.com> arm64: mm: Fix the break-before-make flush range for erratum 2645198 Mark Rutland <mark.rutland(a)arm.com> arm64/fpsimd: signal: Forbid non-streaming SVE payload on SME-only systems Paul Mbewe <paultyson.mbewe(a)ziehl-abegg.de> serial: sc16is7xx: refill TX FIFO below trigger using fresh TXLVL Paul Mbewe <paultyson.mbewe(a)ziehl-abegg.de> serial: sc16is7xx: fix TX gap caused by kfifo circular buffer wrap-around Wentao Liang <vulab(a)iscas.ac.cn> serial: vt8500: Fix clock reference leak in vt8500_serial_probe() Simon Gassner <simon.gassner(a)noxsystems.com> serial: tegra: don't clear the Tx FIFO on an Rx-only reset Wentao Liang <vulab(a)iscas.ac.cn> serial: ma35d1: Fix clock reference leak in ma35d1serial_probe() Johan Hovold <johan(a)kernel.org> serial: fix TIOCMIWAIT race Johan Hovold <johan(a)kernel.org> serial: fix ioctl hangup race Johan Hovold <johan(a)kernel.org> serial: revert guards in uart_wait_modem_status() Ruslan Valiyev <linuxoid(a)gmail.com> serial: core: fix NULL pointer dereference in serial_core_unregister_port() Johan Hovold <johan(a)kernel.org> serial: abort TIOCMIWAIT on hangup Kendall Willis <k-willis(a)ti.com> serial: 8250_omap: fix wake irq cleared during suspend Fan Wu <fanwu01(a)zju.edu.cn> serial: 8250_bcm7271: fix use-after-free in brcmuart_remove() Ian Rogers <irogers(a)google.com> perf: Replace perf_event_header__init_id with full header init Fan Wu <fanwu01(a)zju.edu.cn> tty: serial: max3100: shut down timer before freeing port Johan Hovold <johan(a)kernel.org> tty: fix saved termios reset race Johan Hovold <johan(a)kernel.org> tty: abort break signalling on hangup Viken Dadhaniya <viken.dadhaniya(a)oss.qualcomm.com> tty: serial: qcom_geni_serial: Keep console RX functional after deep idle Johan Hovold <johan(a)kernel.org> tty: port: fix tty_port_tty_vhangup() race Johan Hovold <johan(a)kernel.org> tty: tty_port: restore TTY_IO_ERROR on activation failure Daniel Starke <daniel.starke(a)siemens.com> tty: n_gsm: fix missing modem controls after DLCI open in convergence layer type 2 Joshua Rogers <linux(a)joshua.hu> tty: vcc: hold port lock when clearing tty pointer in vcc_cleanup Joshua Rogers <linux(a)joshua.hu> tty: vcc: zero-initialize control packet in vcc_send_ctl() Johan Hovold <johan(a)kernel.org> tty: amiserial: fix broken TIOCMIWAIT Mingyu Wang <25181214217(a)stu.xidian.edu.cn> tty: vt: fix memory leak in vc_allocate() Jie Deng <dengjie03(a)kylinos.cn> usb: cdns3: Fix NULL pointer dereference in cdns3_pci_probe Fan Wu <fanwu01(a)zju.edu.cn> usb: cdns3: fix use-after-free in cdns3_gadget_exit() Jameson Thies <jthies(a)google.com> usb: typec: ucsi: displayport: Current CAM OOB index fixup Prashanth K <prashanth.k(a)oss.qualcomm.com> usb: typec: ucsi: Get the connector fwnode based on reg value Pannarat Wiriyaarritham <pannarat.wiriyaarritham(a)danielcorp.dev> usb: typec: ucsi: acpi: Assume UCSI 1.2 on Acer Nitro ANV15-41 Fan Wu <fanwu01(a)zju.edu.cn> usb: typec: ucsi: glink: fix use-after-free of ucsi on remove Radhey Shyam Pandey <radhey.shyam.pandey(a)amd.com> usb: typec: tipd: fix uninitialized typec_partner_desc in cd321x_update_work() Radhey Shyam Pandey <radhey.shyam.pandey(a)amd.com> usb: typec: tipd: fix uninitialized typec_partner_desc in tps6598x_connect() Marian Rotariu <marian.c.rotariu(a)gmail.com> usb: typec: tipd: don't send GAID when probe fails in APP mode Amit Sunil Dhamne <amitsd(a)google.com> usb: typec: tcpm: recover after failure to start the frs ams Runyu Xiao <runyu.xiao(a)seu.edu.cn> USB: dwc2: shut down wakeup timer before freeing HCD state Hui Peng <benquike(a)gmail.com> usb: core: clear both ep_in and ep_out for non-ep0 control endpoints Myeonghun Pak <mhun512(a)gmail.com> usb: chipidea: tegra: disable runtime PM on resume failure Yuchao Zhang <ndaugoing(a)gmail.com> usb: gadget: f_fs: Fix NULL pointer dereference in FUNCTIONFS_ENDPOINT_DESC Alan Stern <stern(a)rowland.harvard.edu> USB: gadget: dummy-hcd: Fix wait for outstanding request completions Fan Wu <fanwu01(a)zju.edu.cn> usb: gadget: aspeed-vhub: cancel wake work on device removal Jiazi Liu <jiazi.liu1984(a)gmail.com> usb: dwc3: gadget: fix IRQ storm on invalid event buffer count Radhey Shyam Pandey <radhey.shyam.pandey(a)amd.com> usb: dwc3: am62: Fix runtime PM usage count leak on probe error path Marek Maslanka <mmaslanka(a)google.com> usb: typec: port-mapper: Only match USB4 port if host interface is available Linkai Gong <gonglinkai(a)kylinos.cn> usb: typec: anx7411 - stop the IRQ before destroying the workqueue Liu Chao <liuc63(a)xiaopeng.com> usb: gadget: f_uac1_legacy: validate bRequest index in generic_{set,get}_cmd Takashi Iwai <tiwai(a)suse.de> usb: gadget: midi2: Fix the jack descriptor array sizes Myeonghun Pak <mhun512(a)gmail.com> usb: ohci-st: disable controller wakeup on removal Myeonghun Pak <mhun512(a)gmail.com> usb: ohci-spear: disable controller wakeup on removal Myeonghun Pak <mhun512(a)gmail.com> usb: ohci-s3c2410: disable controller wakeup on removal Myeonghun Pak <mhun512(a)gmail.com> usb: ohci-da8xx: disable controller wakeup on cleanup Orgad Shaneh <orgads(a)gmail.com> usb: octeon-hcd: fix the FIFO-flush timeout computation Lovekesh Solanki <lovekeshsolanki00(a)gmail.com> usb: hub: use shorter 120ms post resume hold for SS root hubs Syed Labeeq Sajid Bukhari <syedlabeeq(a)gmail.com> usb: storage: sierra_ms: reject short SWoC info transfers Johan Hovold <johan(a)kernel.org> USB: serial: fix port tear down use-after-free Yuchao Zhang <ndaugoing(a)gmail.com> USB: cdc-acm: skip URB restart in port_shutdown if disconnected Johan Hovold <johan(a)kernel.org> USB: cdc-acm: fix racy TIOCMIWAIT implementation Viken Dadhaniya <viken.dadhaniya(a)oss.qualcomm.com> soc: qcom: geni-se: Correct QUP Core ICC vote constants Alice Ryhl <aliceryhl(a)google.com> rust_binder: reschedule node refcount update on thread exit Alice Ryhl <aliceryhl(a)google.com> rust_binder: cancel deferred work items in thread exit Yuxiao Wang <yuxiao.wang(a)certik.com> nitro_enclaves: fix use-after-free on SLOT_ALLOC failure Raphaël Larocque <rlarocque(a)disroot.org> Input: synaptics - limit T440p InterTouch quirk to LEN0036 Lovekesh Solanki <lovekeshsolanki00(a)gmail.com> Input: synaptics - add LEN205b entry to smbus_pnp_ids for ThinkPad T490 David Heidelberg <david(a)ixit.cz> Input: s6sy761 - fix resume ordering and restore sensing Lovekesh Solanki <lovekeshsolanki00(a)gmail.com> Input: i8042 - add nomux quirk for Fujitsu LIFEBOOK U7410 Martino Papero <martino.papero(a)lcb.to.it> Input: atkbd - skip deactivate for Lenovo IdeaPad Slim 3 15IWC11 Wentao Liang <vulab(a)iscas.ac.cn> kgdboc: Fix tty driver reference leak in configure_kgdboc() Karl Mehltretter <kmehltretter(a)gmail.com> hrtimer: Use the mask to clear TIF_HRTIMER_REARM from the exit work Troy Mitchell <troy.mitchell(a)linux.spacemit.com> clk: spacemit: k3: add CPU PLL rate tables Peiyang He <peiyang_he(a)smail.nju.edu.cn> binderfs: fix UAF write in binder_add_device Tomer Pomeranc <tomerpo(a)gmail.com> binder: fix leaked fd fixups on TF_UPDATE_TXN supersede Tomer Pomeranc <tomerpo(a)gmail.com> binder: fix is_failure flag for superseded transaction cleanup Theo Andersen Carton <andersen.theo(a)gmail.com> drm/amdgpu: skip the noirq suspend reset for a switcheroo-parked GPU Guangshuo Li <lgs201920130244(a)gmail.com> drm/amdgpu: fix ACP MFD device leak on init failure Alex Deucher <alexander.deucher(a)amd.com> drm/amdgpu: drop userq callback assignment for sdma 7.1 Pierre-Eric Pelloux-Prayer <pierre-eric.pelloux-prayer(a)amd.com> drm/amdgpu: implement workaround for sdma dcc corruption Guangshuo Li <lgs201920130244(a)gmail.com> drm/amdgpu: fix IP instance memory leak on kobject add failure Wentao Liang <vulab(a)iscas.ac.cn> drm/mediatek: Fix pdev reference leak in mtk_drm_bind() Guangshuo Li <lgs201920130244(a)gmail.com> drm/mediatek: Fix ovl adaptor platform device leak Haojie Li <lihaojie(a)kylinos.cn> drm/mediatek: Add missing IS_ERR check for ovl_adaptor platform device Imre Kaloz <kaloz(a)kernel.org> drm/radeon: Read the VRAM VBIOS signature with readb() Mitul Golani <mitulkumar.ajitkumar.golani(a)intel.com> drm/i915/vrr: Disable DC balance by default Alex Deucher <alexander.deucher(a)amd.com> drm/amdgpu/gmc12: properly pass flush_type to gmc_v12_0_flush_vm_hub() Alex Deucher <alexander.deucher(a)amd.com> drm/amdgpu/gmc12.1: properly pass flush_type to gmc_v12_1_flush_vm_hub() Willian Oliveira <williandossantosdeoliveira287(a)gmail.com> drm/amdgpu/gfx6: fix firmware leak on teardown Timur Kristóf <timur.kristof(a)gmail.com> drm/amd/pm/si: Fix updating clock limits on AC/DC Timur Kristóf <timur.kristof(a)gmail.com> drm/amd/pm/si: Check AMD_IS_MOBILITY flag for PPSMC_SYSTEMFLAG_GPIO_DC Timur Kristóf <timur.kristof(a)gmail.com> drm/amd/display: Mark DCE 6.4 as not APU Simon Polack <spolack+git(a)mailbox.org> drm/amd/display: Fix stale replay_events after mod_power stream removal Timur Kristóf <timur.kristof(a)gmail.com> drm/amd/display: Fix fast updates on DCE 8.1 Timur Kristóf <timur.kristof(a)gmail.com> drm/amd/display: Fix fast updates on DCE 6.x Jiangshan Yi <yijiangshan(a)kylinos.cn> drm/amd/display: check dc_state_create_copy() for NULL in dm_suspend Arthur Heymans <arthur(a)aheymans.xyz> drm/amd/display: Preserve eDP mode on initial ASSR failure Hari Mishal <harimishal1(a)gmail.com> drm/amd/display: guard dc_sink dereferences in MST mode validation Nikola Prica <nikola.prica(a)amd.com> PCI: Accept AtomicOps already enabled by the hypervisor Ömer Mete Kaya <omermetekaya0(a)gmail.com> bpf: Fix missing migration protection in __rhtab_map_lookup_and_delete_batch() Chris Mason <mason(a)kernel.org> futex: Fix private hash use-after-free on resize Wentao Liang <vulab(a)iscas.ac.cn> drm/mediatek: Fix runtime PM leak in mtk_hdmi_ddc_v2_probe() Alexei Starovoitov <ast(a)kernel.org> bpf: Fix objects stuck in free_by_rcu_ttrace Alexei Starovoitov <ast(a)kernel.org> bpf: Factor out __do_call_rcu_ttrace() Richard Fitzgerald <rf(a)opensource.cirrus.com> spi: cs42l43: Workaround for wrong speaker ID on Dell XPS 13 DX13260 Takashi Iwai <tiwai(a)suse.de> ALSA: ice1712: Fix the error handling via auto-cleanup at probe Takashi Iwai <tiwai(a)suse.de> ALSA: core: Define auto-cleanup for snd_card_free() Luo Gengkun <luogengkun2(a)huawei.com> perf: Fix race between perf_event_exit_task() and perf_pending_task() Hongjian Dai <daihongjian(a)kylinsec.com.cn> i2c: at91: release DMA channels when probe defers Lorenzo Bianconi <lorenzo.bianconi(a)oss.qualcomm.com> net: mvneta: clear XDP pfmemalloc flag between frames Eric Dumazet <edumazet(a)kernel.org> ipv6: sr: use skb_get_hash_net() in seg6_make_flowlabel() Prathamesh Deshpande <prathameshdeshpande7(a)gmail.com> net/mlx5e: Fix AF_XDP TX timestamp teardown NULL dereference Quentin Freimanis <quentin(a)q-lab.dev> net: sparx5: make ports inherit the switch base mac address type Yuho Choi <oss.patchbox(a)gmail.com> of: Put coreboot node after compatibility check Harshit Mogalapalli <harshit.m.mogalapalli(a)oracle.com> net: microchip: vcap: stop scanning after deleting key field Pablo Neira Ayuso <pablo(a)netfilter.org> netfilter: flowtable: generalize pending status bit Fernando Fernandez Mancera <fmancera(a)suse.de> netfilter: bpf: reject invalid NAT manipulation types Julian Anastasov <ja(a)ssi.bg> ipvs: filter some flags received in the backup server Julian Anastasov <ja(a)ssi.bg> ipvs: do not create invisible templates Julian Anastasov <ja(a)ssi.bg> ipvs: fix missing counter decrement in lblc Jeff Jo <jeffjo(a)openai.com> tcp: refresh TS.Recent for accepted old ACKs Quentin Freimanis <quentin(a)q-lab.dev> net: sparx5: skip ptp deinit if init was skipped Yongzhao Chen <yongzhao.derek(a)gmail.com> net: phy: qcom: at803x: Fix IPQ5018 short-cable DAC values Sandeep Haemoon <sandeeph(a)loljews.com> net: ethernet: mtk_eth_soc: allocate dummy netdev sooner Jamal Hadi Salim <jhs(a)mojatatu.com> net: cap skb->queue_mapping when the tx queue is picked Nicolai Buchwitz <nb(a)tipi-net.de> net: bcmgenet: fix NULL dereference in set_coalesce before first open Yoshihisa Yamamoto <yoshihisa.yamamoto.xn(a)renesas.com> net: pcs: rzn1-miic: Clear MIIC protection state before unprotect sequence Niklas Cassel <cassel(a)kernel.org> virtio_blk: set the zone write granularity Takashi Iwai <tiwai(a)suse.de> ALSA: usb-audio: Apply boot quirk for Behringer models generically Sebastian Dalfuß <sd(a)sedf.de> ALSA: usb-audio: Add boot quirk for Behringer CM1A Jamal Hadi Salim <jhs(a)mojatatu.com> net/sched: sch_codel: match the no-drop threshold to the packet size Jamal Hadi Salim <jhs(a)mojatatu.com> net/sched: fq_codel: match the no-drop threshold to the packet size Hannu Varjoranta <hannu(a)varjosoft.com> gve: DQO: accept TSO packets with non-protocol gso_type bits Florent Revest (Anthropic) <florent.revest(a)linux.dev> bpf: Skip detached progs in trampoline images that are still in use Florent Revest (Anthropic) <florent.revest(a)linux.dev> bpf: Wait for an RCU tasks grace period before freeing trampoline progs Eric Dumazet <edumazet(a)google.com> net: restrict SO_RESERVE_MEM to TCP sockets and cap max value Nicolai Buchwitz <nb(a)tipi-net.de> net: ethtool: let tsconfig reach a PHY-only timestamp provider Andrea Mayer <andrea.mayer(a)uniroma2.it> seg6: ensure packet data is writable before modifying SRH and IPv6 DA Lorenzo Bianconi <lorenzo.bianconi(a)oss.qualcomm.com> net: stmmac: fix rx Scatter-Gather support Mina Almasry <almasrymina(a)google.com> net: page_pool: fix use-after-free in page_pool_recycle_ring_bulk() Jérémy Jean <Jeremy.Jean(a)oss.cyber.gouv.fr> tipc: prevent GCM nonce reuse on peer key changes Baha Mesleh <baha.mesleh(a)nokia.com> octeontx2-af: mcs: Fix SC resource cleanup loop Geetha sowjanya <gakula(a)marvell.com> octeontx2-pf: Fix aura BPID assignment when CONFIG_DCB is enabled Anirudh Virdi <avirdi(a)redhat.com> net/mlx5: Fix slab-out-of-bounds when handling team device events Florian Fainelli <florian.fainelli(a)broadcom.com> net: systemport: Fix RUNT MIB counter register offset calculation Florian Fainelli <florian.fainelli(a)broadcom.com> net: systemport: Fix buffer overflow in bcm_sysport_get_stats() Julien Stephan <jstephan(a)baylibre.com> drm/mediatek: mtk_hdmi_v2: fix VID_DOWNSAMPLE_CONFIG register offset Nguyen Ngoc Thang <ngocthang2710.1999(a)gmail.com> Bluetooth: hci_sync: don't drain cmd_sync backlog on unregister Marcin Bernatowicz <marcin.bernatowicz(a)linux.intel.com> drm/xe/pf: Keep VF LMEM BAR size low if no VFs enabled Michal Wajdeczko <michal.wajdeczko(a)intel.com> drm/xe/pf: Refactor VF LMEM BAR resize helper function Kailang Yang <kailang(a)realtek.com> ALSA: hda/realtek - Add headset mode for Dell Pro QC1255 Cen Zhang (Microsoft) <cenzhang(a)linux.microsoft.com> wifi: mac80211: fix slab-out-of-bounds read in ieee80211_monitor_select_queue() Florian Westphal <fw(a)strlen.de> netfilter: ipset: do not update comments from kernel-side adds Qishuai Liu <lqs(a)lqs.me> ipv6: fix prefix route expiry in modify_prefix_route() Nicolai Buchwitz <nb(a)tipi-net.de> net: bcmgenet: allocate RX buffers as page fragments Jamal Hadi Salim <jhs(a)mojatatu.com> net/sched: cls_api: reclaim an empty proto on the error path Binbin Deng <18983559317(a)163.com> net/mctp: publish the mctp_dev only after it is initialised Kumar Kartikeya Dwivedi <memxor(a)gmail.com> bpf: Hold map BTF for the memory allocator destructor record Yao Sang <sangyao(a)kylinos.cn> nvme: fix command effects log lifetime for multipath heads Arnd Bergmann <arnd(a)arndb.de> nvme: work around -Wformat-security warning John Garry <john.g.garry(a)oracle.com> nvme: fix cdev lifetime John Garry <john.garry(a)linux.dev> nvme: add nvme_get_ns_head() Vineet Gupta <vgupta(a)kernel.org> ARC: arch_cmpxchg_relaxed to use size of pointed type not pointer Alexei Starovoitov <ast(a)kernel.org> bpf: Fix overflow of jump offset in constant blinding Arnd Bergmann <arnd(a)arndb.de> drbd: remove unused drbd_nl_mcgrps[] array Maciej Strozek <mstrozek(a)opensource.cirrus.com> ASoC: SDCA: Add better pm_runtime error handling in func probe Maciej Strozek <mstrozek(a)opensource.cirrus.com> ASoC: SDCA: Set suspended flag after resuming within system suspend Oleg Keri <okerixx(a)gmail.com> arm64: topology: fix arch_freq_get_on_cpu() overflow above 4.19 GHz Harry Yoo (Meta) <harry(a)kernel.org> mm/slab: do not wake up kswapd in __kfree_rcu_sheaf() Harry Yoo (Oracle) <harry(a)kernel.org> mm/slab: handle the !allow_spin case in kfree_rcu_sheaf() Sai Teja Aluvala <aluvala.sai.teja(a)intel.com> Bluetooth: btintel: validate DDC record lengths Sang-Hoon Choi <csh0052(a)gmail.com> Bluetooth: hci_core: free the HCI ID if naming fails Keith Busch <kbusch(a)kernel.org> blk-mq: set RQF_USE_SCHED when the operation is known Yang Xiuwei <yangxiuwei(a)kylinos.cn> block: reject polled dio with user integrity metadata Cezary Rojewski <cezary.rojewski(a)intel.com> ASoC: codecs: rt274: Fix format setting for 44100 rate Cezary Rojewski <cezary.rojewski(a)intel.com> ASoC: codecs: rt286: Revert delay value for jack setup Felix Fietkau <nbd(a)nbd.name> wifi: mac80211: prevent AP VLAN tx from other interfaces Zhao Li <enderaoelyther(a)gmail.com> wifi: cfg80211: preserve hidden-group beacon IE ownership Yuqi Xu <xuyuqiabc(a)gmail.com> wifi: mac80211: validate TX status rate metadata Manush Prajwal <manushprajwal555(a)gmail.com> rtc: mpfs: fix unchecked devm_clk_get() error pointer in probe() Aamir Ahmed <elb12345(a)hotmail.co.uk> rtc: ac100: Fix clock provider use-after-free on probe failure Liu Dalin <liudalin(a)kylinsec.com.cn> rtc: dev: zero-initialize struct rtc_wkalrm to prevent information leak Georgios Karantzas <gck.kara(a)gmail.com> wifi: ath9k_htc: bound TX aggregation to MAX_TX_BUF_SIZE Pengpeng Hou <pengpeng(a)iscas.ac.cn> wifi: ath9k: reject short WMI command responses Toke Høiland-Jørgensen <toke(a)redhat.com> wifi: ath9k: Clean up device initialisation guards Nicolas Escande <nico.escande(a)gmail.com> wifi: ath11k: reset ar->num_stations on hardware start Yuchao Zhang <ndaugoing(a)gmail.com> wifi: mac80211: drop oversized fragments to avoid extra_len overflow Sheetal <sheetal(a)nvidia.com> ASoC: tegra: Fix ASRC Stream6 input threshold control Aamir Ahmed <elb12345(a)hotmail.co.uk> wifi: wfx: validate MIB read length before copying to caller HyeongJun An <sammiee5311(a)gmail.com> ASoC: wm8903: Move the DRC QR threshold to the register that holds it Abdurrahman Hussain <abdurrahman(a)nexthop.ai> of/overlay: don't create "//" paths for fragments targeting the root Abdurrahman Hussain <abdurrahman(a)nexthop.ai> of/overlay: don't leak fragment references when changeset init fails Karl Mehltretter <kmehltretter(a)gmail.com> random: fix vgetrandom_opaque_params kernel-doc Hao Zhang <zhanghao1(a)kylinos.cn> blk-cgroup: save IRQ state in blkg_tryget_closest() Julian Sun <sunjunchao(a)bytedance.com> nvmet: preserve device path on allocation failure Karl Mehltretter <kmehltretter(a)gmail.com> mtd: core: call _get_device() with the master MTD Karl Mehltretter <kmehltretter(a)gmail.com> mtd: core: avoid double-free of OTP NVMEM device Matti Vaittinen <mazziesaccount(a)gmail.com> iio: accel: kionix-kx022a: Fix array boundary check Matti Vaittinen <mazziesaccount(a)gmail.com> iio: light: rohm-bu27034: Fix error return Matti Vaittinen <mazziesaccount(a)gmail.com> iio: dac: rohm-bd79703: Do not allow writing SCALE Alberto Garcia <berto(a)igalia.com> ext4: don't enable large folios on encrypted inodes Xiang Mei <xmei5(a)asu.edu> ALSA: line6: reject oversized playback packets Harin Lee <me(a)harin.net> ALSA: ctxfi: Fix silent playback on Titanium HD (SB1270) Nguyen Ngoc Thang <ngocthang2710.1999(a)gmail.com> ALSA: caiaq: unregister the input device when probe fails Wentao Liang <vulab(a)iscas.ac.cn> wifi: wlcore: Fix runtime PM leak in wlcore_remove() Zizhi Wo <wozizhi(a)huawei.com> vt: skip screen update for DEC alignment test on backgroup consoles Hui Peng <benquike(a)gmail.com> vt: selection: Fix unsigned underflow and slab-out-of-bounds read in paste_selection() Yi Yang <yiyang13(a)huawei.com> vc_screen: reload vc pointer before if (ret) in vcs_write() to avoid UAF Baolin Wang <baolin.wang(a)linux.alibaba.com> mm: shmem: ignore sysfs configs for shmem forced collapse Lorenzo Stoakes (ARM) <ljs(a)kernel.org> mm/vma: predicate setting mmap_prepare VMA fields on new vma alloc SJ Park <sj(a)kernel.org> mm/damon/core: don't skip damos_adjust_quota() while esz is not zero Zhichen Wang <wangzhichen(a)manus.ai> virt: vmgenid: set driver_data before registering notification handlers Vitaly Kuznetsov <vkuznets(a)redhat.com> virt: vmgenid: remap memory as decrypted Hao Ge <hao.ge(a)linux.dev> module: fix lost error code from codetag_load_module() Paulo Alcantara <pc(a)manguebit.org> netfs: zero the tail of a short DIO/unbuffered read Paulo Alcantara <pc(a)manguebit.org> netfs: zero gaps in read-gaps folio to avoid writing back stale data Paulo Alcantara <pc(a)manguebit.org> netfs: clear post-EOF pagecache when extending a file via write Surendran Kanagaraj <surenkj(a)amazon.com> tpm: Disable TPM on null key name mismatch Zhan Xusheng <zhanxusheng1024(a)gmail.com> time/jiffies: Saturate in mult_hz() instead of wrapping Zhan Xusheng <zhanxusheng1024(a)gmail.com> sysctl: Negate before converting in the int read path Jun Yang <junvyyang(a)tencent.com> sctp: check RCV_SHUTDOWN after the sendmsg connect wait Runyu Xiao <runyu.xiao(a)seu.edu.cn> rtc: spear: initialize IRQ state before requesting alarm IRQ Aamir Ahmed <elb12345(a)hotmail.co.uk> rtc: ac100: Assign .num before accessing .hws Nathan Chancellor <nathan(a)kernel.org> random: vDSO: avoid call to memset() when zeroing reserved parameter Oleksij Rempel <o.rempel(a)pengutronix.de> r8169: disable EEE on RTL8168h/8111h Xuanqiang Luo <luoxuanqiang(a)kylinos.cn> pfcp: fix socket lifetime on netdevice registration failure Ilkka Lappeteläinen <ilkka.lappetelainen(a)gmail.com> net/packet: prevent TX_RING byte count overflow Aohan Mei <henrymei(a)tencent.com> netfilter: nft_flow_offload: drop flowtable reference on init error path Bartosz Golaszewski <bartosz.golaszewski(a)oss.qualcomm.com> net: phy: aquantia: fix system interface type not updated in forced mode Alireza Asgari <alireza(a)asgari.net> net: fix checksum offsets in skb_splice_from_iter() Willem de Bruijn <willemb(a)google.com> net: extend IPv6 exthdr detection of tunneled packets Zihan Xi <zihanx(a)nebusec.ai> net: gso: limit recursive IP-in-IP segmentation Abdurrahman Hussain <abdurrahman(a)nexthop.ai> of/overlay: only treat a positive changeset id as registered Abdurrahman Hussain <abdurrahman(a)nexthop.ai> of/overlay: put property on deadprops only after changeset add succeeds Wentao Liang <vulab(a)iscas.ac.cn> of/irq: Fix remaining refcount leaks in of_irq_init() Jari Seppälä <jase(a)nocloud.org> octeontx2-pf: Fix RSS indirection table size Leon Hwang <leon.hwang(a)linux.dev> kprobes: Skip disarmed probes when checking optkprobe overlap Andrey Ryabinin <ryabinin.a.a(a)gmail.com> kasan: unpoison task stack below watermark only in generic mode Zhiling Zou <zhilinz(a)nebusec.ai> ipvs: bound LBLCR and LBLC cache growth Jens Axboe <axboe(a)kernel.dk> io_uring: fix task_work add use-after-free with SQPOLL Junyuan Feng <a(a)lollipopkit.com> io_uring/zcrx: requeue multishot receives stopped by a local resource lollipopkit <a(a)lolli.tech> io_uring/cmd_net: end TX_TIMESTAMP multishot when the CQ is full Aldo Ariel Panzardo <qwe.aldo(a)gmail.com> HID: multitouch: stop the release timer from being rearmed on remove Benjamin Tissoires <bentiss(a)kernel.org> HID: bpf: cast size to ssize_t when checking hid_bpf_hw_request Masami Hiramatsu (Google) <mhiramat(a)kernel.org> fprobe: Use guard(rcu_sched_notrace) and check rcu_is_watching() Mohamad Raizudeen <raizudeen.kerneldev(a)gmail.com> crypto: x86/aes-gcm - fix always true check for last AAD segment Jérémy Jean <Jeremy.Jean(a)oss.cyber.gouv.fr> audit: fix exe mark UAF in kill_rules() Takashi Iwai <tiwai(a)suse.de> ALSA: usb-audio: Apply IGNORE_CTL_ERROR quirk to all Audient devices Sean Christopherson <seanjc(a)google.com> KVM: x86: Fill kvm_run exit fields in common get_nested_state_pages() error paths Tibor Harcsa <silurust(a)gmail.com> Bluetooth: btusb: Add IMC Networks QCA9377 to quirks table Richard Fitzgerald <rf(a)opensource.cirrus.com> ASoC: sdw_utils: Set snd_soc_dai_link_ch_map.codec_ch_mask for capture Sean Christopherson <seanjc(a)google.com> KVM: x86: Re-pend GET_NESTED_STATE_PAGES if getting said pages fails Tejun Heo <tj(a)kernel.org> sched_ext: Wait for SCX_OPSS_DISPATCHING before reenqueueing a task fangqiurong <fangqiurong(a)kylinos.cn> sched_ext: Don't run ops.dequeue() with a DSQ lock held Tejun Heo <tj(a)kernel.org> sched_ext: Add a size argument to scx_bpf_cid_topo() so struct scx_cid_topo can grow Tejun Heo <tj(a)kernel.org> sched_ext: Build the cid tables privately and publish them with RCU Chen Yu <yu.c.chen(a)intel.com> sched/cache: Skip kernel threads for cache aware scheduling to rubustify the code Tim Chen <tim.c.chen(a)linux.intel.com> sched/cache: Introduce task_struct->sched_cache_grp to fix UAF Lu Wang <wanglu.priv(a)gmail.com> sched/cache: Honor migrate_llc_task semantics in active load balance, to fix LLC mis-scheduling bug Tim Chen <tim.c.chen(a)linux.intel.com> sched/cache: Keep nr_pref_llc_running in the runnable domain, to fix LLC mis-scheduling bug Tim Chen <tim.c.chen(a)linux.intel.com> sched/fair: Avoid creating misfits during cache-aware balancing Joshua Hahn <joshua.hahnjy(a)gmail.com> selftests/cgroup: account for zswap shrinker writeback Heikki Krogerus <heikki.krogerus(a)linux.intel.com> drm/xe/i2c: Keep the i2c controller always enabled Bryam Vargas <hexlabsecurity(a)proton.me> dm-pcache: bound the logical key offset from persistent memory Bryam Vargas <hexlabsecurity(a)proton.me> dm-pcache: reject a kset that overruns its segment ------------- Diffstat: Documentation/arch/arm64/silicon-errata.rst | 2 + Documentation/filesystems/netfs_library.rst | 26 ++ Makefile | 4 +- arch/arc/include/asm/atomic64-arcv2.h | 6 + arch/arc/include/asm/cmpxchg.h | 4 +- arch/arm64/Kconfig | 30 ++ arch/arm64/kernel/cpu_errata.c | 24 +- arch/arm64/kernel/cpufeature.c | 2 +- arch/arm64/kernel/signal.c | 34 +- arch/arm64/kernel/topology.c | 17 +- arch/arm64/kernel/vdso/Makefile | 2 +- arch/arm64/kvm/emulate-nested.c | 3 - arch/arm64/kvm/hyp/nvhe/pkvm.c | 9 + arch/arm64/kvm/mmu.c | 47 +-- arch/arm64/kvm/vgic/vgic-its.c | 12 +- arch/arm64/kvm/vgic/vgic-v2.c | 6 +- arch/arm64/kvm/vgic/vgic-v3.c | 6 +- arch/arm64/kvm/vgic/vgic.c | 21 +- arch/arm64/mm/mmu.c | 2 +- arch/arm64/net/bpf_jit_comp.c | 37 +- arch/arm64/tools/cpucaps | 2 +- arch/loongarch/net/bpf_jit.c | 60 ++-- arch/loongarch/vdso/Makefile | 1 + arch/powerpc/kernel/vdso/Makefile | 1 + arch/powerpc/net/bpf_jit_comp.c | 45 +-- arch/powerpc/perf/imc-pmu.c | 23 +- arch/riscv/kernel/vdso/Makefile | 1 + arch/riscv/net/bpf_jit_comp64.c | 56 +++- arch/s390/kernel/vdso/Makefile | 1 + arch/s390/net/bpf_jit_comp.c | 46 ++- arch/x86/crypto/aesni-intel_glue.c | 2 +- arch/x86/entry/vdso/vdso64/Makefile | 2 +- arch/x86/kernel/sys_x86_64.c | 15 +- arch/x86/kvm/mmu/mmu.c | 6 + arch/x86/kvm/svm/nested.c | 7 +- arch/x86/kvm/svm/sev.c | 46 ++- arch/x86/kvm/svm/svm.c | 38 +-- arch/x86/kvm/svm/svm.h | 1 + arch/x86/kvm/vmx/nested.c | 21 +- arch/x86/kvm/x86.c | 4 + arch/x86/mm/pgtable.c | 38 +-- arch/x86/net/bpf_jit_comp.c | 26 +- block/blk-cgroup.c | 5 +- block/blk-mq.c | 59 ++-- block/fops.c | 5 + block/mq-deadline.c | 2 +- drivers/android/binder.c | 3 +- drivers/android/binder/node.rs | 20 +- drivers/android/binder/node/wrapper.rs | 34 +- drivers/android/binder/thread.rs | 8 +- drivers/android/binderfs.c | 3 +- drivers/block/drbd/drbd_nl_gen.c | 4 - drivers/block/virtio_blk.c | 1 + drivers/bluetooth/btintel.c | 15 +- drivers/bluetooth/btintel_pcie.c | 12 +- drivers/bluetooth/btusb.c | 2 + drivers/char/tpm/tpm2-cmd.c | 2 +- drivers/char/tpm/tpm2-sessions.c | 1 + drivers/clk/spacemit/ccu-k3.c | 92 +++++ drivers/edac/altera_edac.c | 67 ++-- drivers/edac/versalnet_edac.c | 1 + drivers/gpu/drm/amd/amdgpu/amdgpu_acp.c | 13 +- drivers/gpu/drm/amd/amdgpu/amdgpu_discovery.c | 2 + drivers/gpu/drm/amd/amdgpu/amdgpu_drv.c | 8 + drivers/gpu/drm/amd/amdgpu/amdgpu_ttm.c | 8 +- drivers/gpu/drm/amd/amdgpu/gfx_v6_0.c | 9 + drivers/gpu/drm/amd/amdgpu/gmc_v12_0.c | 2 +- drivers/gpu/drm/amd/amdgpu/gmc_v12_1.c | 2 +- drivers/gpu/drm/amd/amdgpu/sdma_v7_1.c | 4 - drivers/gpu/drm/amd/amdgpu/vi.c | 21 ++ drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm.c | 103 +++++- .../amd/display/amdgpu_dm/amdgpu_dm_mst_types.c | 6 +- drivers/gpu/drm/amd/display/dc/dc.h | 1 + .../dc/link/protocols/link_edp_panel_control.c | 4 +- .../amd/display/dc/resource/dce60/dce60_resource.c | 13 +- .../amd/display/dc/resource/dce80/dce80_resource.c | 2 + drivers/gpu/drm/amd/display/modules/power/power.c | 2 + drivers/gpu/drm/amd/pm/legacy-dpm/si_dpm.c | 39 +-- .../gpu/drm/i915/display/intel_display_params.c | 4 + .../gpu/drm/i915/display/intel_display_params.h | 1 + drivers/gpu/drm/i915/display/intel_vrr.c | 4 +- drivers/gpu/drm/mediatek/mtk_drm_drv.c | 17 +- drivers/gpu/drm/mediatek/mtk_hdmi_ddc_v2.c | 4 +- drivers/gpu/drm/mediatek/mtk_hdmi_regs_v2.h | 2 +- drivers/gpu/drm/radeon/radeon_bios.c | 6 +- drivers/gpu/drm/xe/xe_i2c.c | 49 ++- drivers/gpu/drm/xe/xe_i2c.h | 1 + drivers/gpu/drm/xe/xe_pci_sriov.c | 30 +- drivers/hid/bpf/hid_bpf_dispatch.c | 2 +- drivers/hid/hid-multitouch.c | 2 +- drivers/i2c/busses/i2c-at91-master.c | 8 +- drivers/i2c/busses/i2c-xiic.c | 61 +++- drivers/iio/accel/kionix-kx022a.c | 30 +- drivers/iio/accel/kxcjk-1013.c | 2 +- drivers/iio/accel/sca3000.c | 2 +- drivers/iio/adc/ad4030.c | 11 +- drivers/iio/adc/ad7173.c | 4 +- drivers/iio/adc/ad_sigma_delta.c | 31 +- drivers/iio/adc/ade9000.c | 36 +- drivers/iio/adc/adi-axi-adc.c | 4 + drivers/iio/adc/aspeed_adc.c | 4 +- drivers/iio/adc/axp288_adc.c | 8 + drivers/iio/adc/max1363.c | 8 + drivers/iio/adc/pac1934.c | 4 + drivers/iio/adc/rohm-bd79124.c | 20 +- drivers/iio/adc/stm32-adc.c | 47 +-- drivers/iio/adc/sun4i-gpadc-iio.c | 10 +- drivers/iio/adc/xilinx-xadc-core.c | 9 +- drivers/iio/buffer/industrialio-buffer-dmaengine.c | 16 +- drivers/iio/cdc/ad7150.c | 8 +- drivers/iio/dac/rohm-bd79703.c | 3 + drivers/iio/frequency/adf4377.c | 4 +- drivers/iio/frequency/admv1013.c | 9 +- drivers/iio/gyro/adis16136.c | 2 +- drivers/iio/health/max30102.c | 12 +- drivers/iio/imu/adis16400.c | 2 +- drivers/iio/imu/adis16480.c | 4 +- drivers/iio/industrialio-buffer.c | 7 +- drivers/iio/industrialio-trigger.c | 2 + drivers/iio/light/gp2ap020a00f.c | 2 + drivers/iio/light/rohm-bu27034.c | 62 ++-- drivers/iio/pressure/bmp280-core.c | 2 +- drivers/iio/pressure/rohm-bm1390.c | 2 +- drivers/iio/proximity/aw96103.c | 30 +- drivers/iio/proximity/isl29501.c | 2 +- drivers/iio/proximity/pulsedlight-lidar-lite-v2.c | 4 +- drivers/iio/proximity/sx9324.c | 2 +- drivers/iio/proximity/vcnl3020.c | 24 +- drivers/iio/proximity/vl53l0x-i2c.c | 3 + drivers/input/keyboard/atkbd.c | 8 + drivers/input/mouse/synaptics.c | 7 +- drivers/input/serio/i8042-acpipnpio.h | 9 + drivers/input/touchscreen/s6sy761.c | 14 +- drivers/md/dm-pcache/cache_gc.c | 5 + drivers/md/dm-pcache/cache_key.c | 14 + drivers/md/dm-pcache/cache_writeback.c | 5 + drivers/mtd/devices/block2mtd.c | 2 +- drivers/mtd/devices/mtd_intel_dg.c | 3 +- drivers/mtd/mtdcore.c | 3 +- drivers/mtd/nand/ecc.c | 7 + drivers/mtd/nand/raw/cadence-nand-controller.c | 6 +- drivers/mtd/nand/raw/vf610_nfc.c | 85 ++++- drivers/mtd/nand/spi/core.c | 53 ++- drivers/mtd/spi-nor/core.c | 2 +- drivers/net/ethernet/broadcom/bcmsysport.c | 8 +- drivers/net/ethernet/broadcom/genet/bcmgenet.c | 34 +- drivers/net/ethernet/broadcom/genet/bcmgenet.h | 2 + drivers/net/ethernet/google/gve/gve_tx_dqo.c | 14 +- drivers/net/ethernet/marvell/mvneta.c | 2 +- drivers/net/ethernet/marvell/octeontx2/af/mcs.c | 4 +- drivers/net/ethernet/marvell/octeontx2/nic/cn20k.c | 11 +- .../ethernet/marvell/octeontx2/nic/otx2_common.c | 18 +- .../ethernet/marvell/octeontx2/nic/otx2_common.h | 9 + drivers/net/ethernet/mediatek/mtk_eth_soc.c | 38 ++- drivers/net/ethernet/mellanox/mlx5/core/en/xdp.c | 3 + drivers/net/ethernet/mellanox/mlx5/core/lag/lag.c | 10 +- .../net/ethernet/microchip/sparx5/sparx5_main.c | 1 + .../net/ethernet/microchip/sparx5/sparx5_main.h | 1 + .../net/ethernet/microchip/sparx5/sparx5_netdev.c | 1 + drivers/net/ethernet/microchip/sparx5/sparx5_ptp.c | 3 + drivers/net/ethernet/microchip/vcap/vcap_api.c | 2 +- drivers/net/ethernet/realtek/r8169_main.c | 6 + drivers/net/ethernet/stmicro/stmmac/stmmac_main.c | 83 +++-- drivers/net/pcs/pcs-rzn1-miic.c | 3 + drivers/net/pfcp.c | 3 + drivers/net/phy/aquantia/aquantia_main.c | 5 +- drivers/net/phy/qcom/at803x.c | 8 +- drivers/net/usb/qmi_wwan.c | 1 + drivers/net/wireless/ath/ath11k/mac.c | 1 + drivers/net/wireless/ath/ath9k/hif_usb.c | 21 +- drivers/net/wireless/ath/ath9k/htc.h | 1 - drivers/net/wireless/ath/ath9k/htc_drv_init.c | 7 +- drivers/net/wireless/ath/ath9k/htc_drv_txrx.c | 8 +- drivers/net/wireless/ath/ath9k/wmi.c | 28 +- drivers/net/wireless/ath/ath9k/wmi.h | 1 + drivers/net/wireless/intel/iwlegacy/3945-mac.c | 1 + drivers/net/wireless/silabs/wfx/hif_tx.c | 4 +- drivers/net/wireless/st/cw1200/bh.c | 8 +- drivers/net/wireless/st/cw1200/txrx.c | 14 + drivers/net/wireless/ti/wlcore/main.c | 4 +- drivers/net/xen-netfront.c | 12 +- drivers/nvme/host/core.c | 74 ++-- drivers/nvme/host/multipath.c | 43 +-- drivers/nvme/host/nvme.h | 10 +- drivers/nvme/host/pci.c | 2 + drivers/nvme/target/configfs.c | 9 +- drivers/nvme/target/core.c | 5 +- drivers/nvme/target/fabrics-cmd-auth.c | 2 +- drivers/nvme/target/pci-epf.c | 3 + drivers/of/base.c | 10 +- drivers/of/irq.c | 2 + drivers/of/overlay.c | 17 +- drivers/pci/pci.c | 15 +- drivers/rtc/dev.c | 2 +- drivers/rtc/rtc-ac100.c | 39 +-- drivers/rtc/rtc-mpfs.c | 6 +- drivers/rtc/rtc-spear.c | 11 +- drivers/spi/spi-cs42l43.c | 97 ++++++ drivers/staging/greybus/uart.c | 3 +- drivers/thunderbolt/ctl.c | 63 ++-- drivers/thunderbolt/quirks.c | 3 + drivers/thunderbolt/switch.c | 9 +- drivers/thunderbolt/tb.c | 37 +- drivers/thunderbolt/test.c | 58 +++- drivers/thunderbolt/tunnel.c | 73 ++-- drivers/thunderbolt/tunnel.h | 8 +- drivers/thunderbolt/xdomain.c | 4 + drivers/tty/amiserial.c | 9 +- drivers/tty/n_gsm.c | 47 +-- drivers/tty/serial/8250/8250_bcm7271.c | 2 +- drivers/tty/serial/8250/8250_omap.c | 15 +- drivers/tty/serial/kgdboc.c | 9 + drivers/tty/serial/ma35d1_serial.c | 6 +- drivers/tty/serial/max3100.c | 13 +- drivers/tty/serial/qcom_geni_serial.c | 5 +- drivers/tty/serial/sc16is7xx.c | 53 ++- drivers/tty/serial/serial-tegra.c | 18 +- drivers/tty/serial/serial_core.c | 76 +++-- drivers/tty/serial/vt8500_serial.c | 1 + drivers/tty/tty_io.c | 54 ++- drivers/tty/tty_port.c | 91 +++-- drivers/tty/vcc.c | 5 +- drivers/tty/vt/selection.c | 4 +- drivers/tty/vt/vc_screen.c | 23 +- drivers/tty/vt/vt.c | 5 +- drivers/usb/cdns3/cdns3-gadget.c | 4 + drivers/usb/cdns3/cdns3-pci-wrap.c | 5 + drivers/usb/chipidea/ci_hdrc_tegra.c | 4 +- drivers/usb/class/cdc-acm.c | 41 ++- drivers/usb/class/cdc-acm.h | 1 - drivers/usb/core/hub.c | 7 +- drivers/usb/core/message.c | 8 +- drivers/usb/dwc2/hcd.c | 3 +- drivers/usb/dwc3/core.h | 19 ++ drivers/usb/dwc3/dwc3-am62.c | 1 + drivers/usb/dwc3/ep0.c | 9 + drivers/usb/dwc3/gadget.c | 108 +++++- drivers/usb/gadget/function/f_fs.c | 15 +- drivers/usb/gadget/function/f_midi2.c | 4 +- drivers/usb/gadget/function/f_uac1_legacy.c | 6 + drivers/usb/gadget/udc/aspeed-vhub/core.c | 4 + drivers/usb/gadget/udc/aspeed-vhub/dev.c | 2 +- drivers/usb/gadget/udc/aspeed-vhub/hub.c | 5 +- drivers/usb/gadget/udc/aspeed-vhub/vhub.h | 1 + drivers/usb/gadget/udc/dummy_hcd.c | 4 + drivers/usb/host/octeon-hcd.c | 2 +- drivers/usb/host/ohci-da8xx.c | 2 + drivers/usb/host/ohci-s3c2410.c | 1 + drivers/usb/host/ohci-spear.c | 1 + drivers/usb/host/ohci-st.c | 1 + drivers/usb/serial/bus.c | 6 +- drivers/usb/serial/cp210x.c | 1 + drivers/usb/serial/generic.c | 10 +- drivers/usb/serial/option.c | 14 + drivers/usb/serial/quatech2.c | 19 +- drivers/usb/serial/ssu100.c | 18 +- drivers/usb/serial/usb-serial.c | 127 +++++-- drivers/usb/serial/xr_serial.c | 10 +- drivers/usb/storage/sierra_ms.c | 7 + drivers/usb/typec/anx7411.c | 5 +- drivers/usb/typec/port-mapper.c | 21 +- drivers/usb/typec/tcpm/tcpm.c | 2 +- drivers/usb/typec/tipd/core.c | 11 +- drivers/usb/typec/ucsi/displayport.c | 9 +- drivers/usb/typec/ucsi/ucsi.c | 17 +- drivers/usb/typec/ucsi/ucsi_acpi.c | 34 ++ drivers/usb/typec/ucsi/ucsi_glink.c | 15 +- drivers/virt/nitro_enclaves/ne_misc_dev.c | 1 + drivers/virt/vmgenid.c | 9 +- fs/exec.c | 1 + fs/ext4/inode.c | 3 +- fs/netfs/buffered_read.c | 7 + fs/netfs/buffered_write.c | 9 + fs/netfs/direct_write.c | 9 + fs/netfs/internal.h | 2 + fs/netfs/misc.c | 99 ++++++ fs/netfs/read_collect.c | 24 ++ fs/smb/client/cifsfs.c | 41 ++- fs/smb/client/cifsglob.h | 10 +- fs/smb/client/inode.c | 2 + fs/smb/client/smb2ops.c | 114 +++++-- fs/smb/client/smb2pdu.c | 10 +- include/linux/bpf.h | 45 ++- include/linux/hrtimer_rearm.h | 2 +- include/linux/mtd/nand.h | 2 + include/linux/netfilter_netdev.h | 2 +- include/linux/netfs.h | 2 + include/linux/perf_event.h | 7 +- include/linux/rtnetlink.h | 7 +- include/linux/sched.h | 14 + include/linux/skbuff.h | 2 +- include/linux/soc/qcom/geni-se.h | 15 +- include/linux/tty.h | 1 + include/linux/tty_driver.h | 6 + include/linux/tty_port.h | 22 +- include/linux/usb/serial.h | 1 + include/net/bluetooth/hci_core.h | 5 +- include/net/gso.h | 8 + include/net/netfilter/nf_flow_table.h | 2 +- include/net/sch_generic.h | 9 + include/net/xdp.h | 5 + include/sound/core.h | 9 + include/uapi/linux/random.h | 2 +- init/Kconfig | 5 + io_uring/cmd_net.c | 19 +- io_uring/io_uring.c | 4 +- io_uring/tw.c | 3 + io_uring/zcrx.c | 9 +- kernel/audit_tree.c | 36 +- kernel/bpf/core.c | 10 +- kernel/bpf/hashtab.c | 19 +- kernel/bpf/memalloc.c | 57 +++- kernel/bpf/syscall.c | 19 +- kernel/bpf/trampoline.c | 85 ++++- kernel/events/core.c | 313 ++++++++--------- kernel/events/ring_buffer.c | 7 +- kernel/exit.c | 33 +- kernel/fork.c | 2 + kernel/futex/core.c | 10 +- kernel/kprobes.c | 8 +- kernel/module/main.c | 8 +- kernel/sched/ext/cid.c | 138 +++++--- kernel/sched/ext/cid.h | 2 +- kernel/sched/ext/ext.c | 77 +++-- kernel/sched/ext/types.h | 4 + kernel/sched/fair.c | 372 ++++++++++++++++----- kernel/sysctl.c | 2 +- kernel/time/jiffies.c | 2 + kernel/trace/fprobe.c | 26 +- mm/damon/core.c | 2 +- mm/kasan/common.c | 13 +- mm/shmem.c | 7 +- mm/slab.h | 18 +- mm/slab_common.c | 2 +- mm/slub.c | 37 +- mm/vma.c | 4 +- net/bluetooth/hci_conn.c | 18 +- net/bluetooth/hci_core.c | 54 ++- net/bluetooth/hci_debugfs.c | 2 +- net/bluetooth/hci_sync.c | 19 +- net/bluetooth/rfcomm/tty.c | 7 +- net/bluetooth/smp.c | 2 + net/core/dev.c | 78 +++-- net/core/dev_ioctl.c | 3 +- net/core/gso.c | 1 + net/core/page_pool.c | 2 +- net/core/skbuff.c | 8 +- net/core/sock.c | 4 +- net/ethtool/tsconfig.c | 24 +- net/ipv4/af_inet.c | 3 + net/ipv4/tcp_input.c | 6 + net/ipv6/addrconf.c | 2 +- net/ipv6/ip6_offload.c | 4 + net/ipv6/seg6_iptunnel.c | 2 +- net/ipv6/seg6_local.c | 140 ++++++-- net/mac80211/agg-rx.c | 2 +- net/mac80211/chan.c | 50 ++- net/mac80211/drop.h | 1 + net/mac80211/fils_aead.c | 8 + net/mac80211/ieee80211_i.h | 2 +- net/mac80211/iface.c | 4 +- net/mac80211/mesh_pathtbl.c | 30 +- net/mac80211/mlme.c | 4 +- net/mac80211/rc80211_minstrel_ht.c | 89 ++++- net/mac80211/rx.c | 6 + net/mac80211/spectmgmt.c | 4 +- net/mac80211/sta_info.c | 6 +- net/mac80211/status.c | 70 ++++ net/mac80211/tx.c | 45 ++- net/mctp/device.c | 6 +- net/mptcp/protocol.c | 2 +- net/netfilter/ipset/ip_set_bitmap_gen.h | 2 +- net/netfilter/ipvs/ip_vs_conn.c | 3 + net/netfilter/ipvs/ip_vs_lblc.c | 4 + net/netfilter/ipvs/ip_vs_lblcr.c | 3 + net/netfilter/ipvs/ip_vs_sync.c | 33 +- net/netfilter/nf_flow_table_core.c | 7 +- net/netfilter/nf_flow_table_offload.c | 14 +- net/netfilter/nf_nat_bpf.c | 3 + net/netfilter/nf_nat_core.c | 5 +- net/netfilter/nft_flow_offload.c | 7 +- net/packet/af_packet.c | 3 + net/sched/act_ct.c | 2 +- net/sched/act_skbedit.c | 5 +- net/sched/cls_api.c | 15 +- net/sched/sch_codel.c | 2 +- net/sched/sch_fq_codel.c | 4 +- net/sctp/socket.c | 2 +- net/tipc/crypto.c | 20 +- net/wireless/nl80211.c | 11 +- net/wireless/scan.c | 22 +- rust/kernel/irq/request.rs | 89 +++-- sound/core/seq/seq_compat.c | 4 +- sound/hda/codecs/realtek/alc269.c | 6 +- sound/hda/controllers/tegra.c | 3 +- sound/pci/ctxfi/cthw20k2.c | 2 + sound/pci/ice1712/ice1712.c | 2 +- sound/soc/codecs/lpass-wsa-macro.c | 3 + sound/soc/codecs/max98363.c | 2 +- sound/soc/codecs/rt1017-sdca-sdw.c | 27 +- sound/soc/codecs/rt274.c | 4 +- sound/soc/codecs/rt286.c | 2 +- sound/soc/codecs/wm8903.c | 2 +- sound/soc/qcom/lpass-cpu.c | 4 +- sound/soc/sdca/sdca_class_function.c | 19 +- sound/soc/sdw_utils/soc_sdw_utils.c | 20 +- sound/soc/tegra/tegra186_asrc.c | 2 +- sound/usb/caiaq/device.c | 3 + sound/usb/line6/playback.c | 7 + sound/usb/misc/ua101.c | 9 + sound/usb/quirks.c | 29 +- tools/sched_ext/include/scx/common.bpf.h | 4 +- tools/testing/selftests/cgroup/test_zswap.c | 28 +- 413 files changed, 5137 insertions(+), 2033 deletions(-)

2 weeks, 6 days

Re: [PATCH 6.18 000/632] 6.18.57-rc2 review

by Jon Hunter

On 15/10/2026 14:13, Jon Hunter wrote: > On Wed, 14 Oct 2026 14:50:40 +0200, Greg Kroah-Hartman wrote: >> This is the start of the stable review cycle for the 6.18.57 release. >> There are 632 patches in this series, all will be posted as a response >> to this one. If anyone has any issues with these being applied, please >> let me know. >> >> Responses should be made by Fri, 16 Oct 2026 12:37:22 +0000. >> Anything received after that time might be too late. >> >> The whole patch series can be found in one patch at: >> https://www.kernel.org/pub/linux/kernel/v6.x/stable-review/patch-6.18.57-rc… >> or in the git tree and branch at: >> git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-6.18.y >> and the diffstat can be found below. >> >> thanks, >> >> greg k-h > > Failures detected for Tegra ... > > Test results for stable-v6.18: > builds: 11 pass, 0 fail > boots: 28 pass, 0 fail > tests: 163 pass, 1 fail > > Linux version: 6.18.57-rc2-gfea86ab6861e > Boards tested: tegra20-ventana > tegra30-cardhu-a04 > tegra124-jetson-tk1 > tegra210-p2371-2180 > tegra210-p3450-0000 > tegra186-p2771-0000 > tegra186-p3509-0000+p3636-0001 > tegra194-p2972-0000 > tegra194-p3509-0000+p3668-0000 > tegra234-p3737-0000+p3701-0000 > tegra234-p3768-0000+p3767-0005 > > Test failures: tegra194-p2972-0000: boot.py This is the same kernel warning reported by Peter Schneider. WARNING KERN Driver 'ufs_device_wlun' needs updating - please use bus_type methods Jon -- nvpublic

3 weeks

[PATCH 6.18 000/632] 6.18.57-rc2 review

by Greg Kroah-Hartman

This is the start of the stable review cycle for the 6.18.57 release. There are 632 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know. Responses should be made by Fri, 16 Oct 2026 12:37:22 +0000. Anything received after that time might be too late. The whole patch series can be found in one patch at: https://www.kernel.org/pub/linux/kernel/v6.x/stable-review/patch-6.18.57-rc… or in the git tree and branch at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-6.18.y and the diffstat can be found below. thanks, greg k-h ------------- Pseudo-Shortlog of commits: Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> Linux 6.18.57-rc2 Vicki Pfau <vi(a)endrift.com> HID: steam: Clean up locking Vicki Pfau <vi(a)endrift.com> HID: steam: Refactor registration Vicki Pfau <vi(a)endrift.com> HID: steam: Rearrange teardown sequence Vicki Pfau <vi(a)endrift.com> HID: steam: Fully unregister controller when hidraw is opened Kuba Piecuch <jpiecuch(a)google.com> sched_ext: Generate qseq from a per-task counter Adrian Betschart <adrian.betschart(a)cinemaone.ch> drm/amd/display: Don't replace a sink mode that shares the native totals Alexey Charkov <alchark(a)flipper.net> regulator: of: fill in supply names in of_regulator_bulk_get_all() Chuck Lever <chuck.lever(a)oracle.com> SUNRPC: Add Kconfig dependency on CRYPTO_KRB5 Oliver Hartkopp <socketcan(a)hartkopp.net> can: fix unique skb identifier regression under RPS Darrick J. Wong <djwong(a)kernel.org> xfs: fix exchange-range-to-eof file size exchange Norbert Szetei <norbert(a)doyensec.com> xfs: stop exchanging reflink flags when exchanging mappings Jiangshan Yi <yijiangshan(a)kylinos.cn> xfs: remove duplicate INO1_WRITTEN check Rafael J. Wysocki <rafael.j.wysocki(a)intel.com> ACPI: scan: Use acpi_setup_gpe_for_wake() for buttons Rafael J. Wysocki <rafael.j.wysocki(a)intel.com> ACPI: scan: Do not mark button ACPI devices as wakeup-capable Tejun Heo <tj(a)kernel.org> workqueue: Annotate alloc_workqueue_va() with __printf(1, 0) Lizhi Hou <lizhi.hou(a)amd.com> accel/amdxdna: Fix crash when destroying a suspended hardware context Lizhi Hou <lizhi.hou(a)amd.com> accel/amdxdna: Fix race condition when checking rpm_on Lizhi Hou <lizhi.hou(a)amd.com> accel/amdxdna: Resume power for creating and destroying hardware context Harald Freudenberger <freude(a)linux.ibm.com> s390/zcrypt: Pad trailing CCA or EP11 message with zeros Harald Freudenberger <freude(a)linux.ibm.com> s390/zcrypt: Improve EP11 CPRB domain handling with ASN.1 parsing Harald Freudenberger <freude(a)linux.ibm.com> s390/zcrypt: Improve EP11 CPRB length and overflow checks Harald Freudenberger <freude(a)linux.ibm.com> s390/zcrypt: Improve CCA CPRB length and overflow checks Alexander Lobakin <aleksander.lobakin(a)intel.com> ice: fix broken Rx on VFs Breno Leitao <leitao(a)debian.org> workqueue: fix devm_alloc_workqueue() va_list misuse Hao Ge <hao.ge(a)linux.dev> netfs: Fix missing alloc tagging of direct mempool allocations Eric Dumazet <edumazet(a)google.com> net: fix backlog_unlock_irq_restore() vs CONFIG_PREEMPT_RT Ming Qian <ming.qian(a)oss.nxp.com> media: verisilicon: Fix kernel panic due to __initconst misuse David Howells <dhowells(a)redhat.com> netfs, afs: Fix symlink reading Frank Sorenson <sorenson(a)redhat.com> cifs: consolidate time_last_write stamp into _cifsFileInfo_put() Qu Wenruo <wqu(a)suse.com> btrfs: make sure EXTENT_BUFFER_READING is cleared under refs_lock Osama Abdelkader <osama.abdelkader(a)gmail.com> drm/panthor: validate userspace queue count against initialized firmware slot count Borislav Petkov (AMD) <bp(a)alien8.de> x86/CPU/AMD: Fix AMD TLBI Erratum #1718 Maíra Canal <mcanal(a)igalia.com> drm/vc4: Fix binner slot allocation failing on an idle GPU Ilia Gavrilov <Ilia.Gavrilov(a)infotecs.ru> vsock: Fix memory leak in vmci_transport_recv_dgram_cb() Fernando Fernandez Mancera <fmancera(a)suse.de> net: openvswitch: validate transport header presence in set_ipv6_addr Vadim Fedorenko <vadim.fedorenko(a)linux.dev> ptp: ocp: fix PCIe delay estimation calculation Willem de Bruijn <willemb(a)google.com> net/packet: call packet_parse_headers after virtio_net_hdr_to_skb Petr Machata <petrm(a)nvidia.com> mlxsw: spectrum_flower: Fix port range register leak in tmplt_create() Li RongQing <lirongqing(a)baidu.com> net/mlx5e: Order ICOSQ cc update after CQ doorbell Tianyi Gao <tianyi(a)cloudflare.com> veth: fix peer NETDEV_XDP_ACT_NDO_XMIT after GRO is toggled while down Gyeyoung Baek <gye976(a)gmail.com> drm/imagination: Fix reference and vm_bo handling in remap() Eric Dumazet <edumazet(a)kernel.org> flow_dissector: avoid u16 truncation of hlen in bpf_flow_dissect() Pavan Chebbi <pavan.chebbi(a)broadcom.com> bnxt_en: Re-write the BARs following any type of PCIe errors Lukas Wunner <lukas(a)wunner.de> bnxt_en: Drop pci_save_state() after pci_restore_state() Michael Chan <michael.chan(a)broadcom.com> bnxt_en: Delay for 5 seconds after AER DPC for all chips Michael Chan <michael.chan(a)broadcom.com> bnxt_en: Fix driver init in kdump kernel Michael Chan <michael.chan(a)broadcom.com> bnxt_en: Add bnxt_clear_bars() helper Haishuang Yan <yanhaishuang(a)cmss.chinamobile.com> pfcp: make sure the SEID is linear before reading it Justin Chen <justin.chen(a)broadcom.com> net: bcmgenet: if UMAC was suspended in SW_RESET, restore it to SW_RESET Or Har-Toov <ohartoov(a)nvidia.com> Revert "net/mlx5: E-Switch, preserve max tx speed on vport state modification" Victor Nogueira <victor(a)mojatatu.com> net/sched: cls_route: reject change with no routing attribute Haishuang Yan <yanhaishuang(a)cmss.chinamobile.com> devlink: fix devlink_rel reference leak when notify work is pending Quentin Freimanis <quentin(a)q-lab.dev> net: sparx5: start the TOD counters on non-PTP lan969x variants Eric Dumazet <edumazet(a)kernel.org> flow_dissector: avoid u16 truncation of skb->len when computing thoff Waiman Long <longman(a)redhat.com> cgroup/cpuset: Call is_in_v2_mode() after acquiring cpuset_mutex in cpuset_handle_hotplug() Han Gao <gaohan(a)iscas.ac.cn> spi: sg2044-nor: Honor SPI clock limits Han Gao <gaohan(a)iscas.ac.cn> spi: sg2044-nor: Return transfer errors Marek Szyprowski <m.szyprowski(a)samsung.com> ASoC: samsung: i2s: enable op_clk in probe to balance runtime PM Alvin Šipraga <alvin.sipraga(a)analog.com> ASoC: adau1372: fix invalid default state of output ASRC and DAC muxes Alvin Šipraga <alvin.sipraga(a)analog.com> ASoC: adau1372: allow sleepy powerdown GPIOs Yingying Tang <yingying.tang(a)oss.qualcomm.com> Revert "wifi: ath12k: add panic handler" Devin Wittmayer <lucid_duck(a)justthetip.ca> wifi: mt76: mt792x: pick the SAR table layout from the table itself Junjie Cao <junjie.cao(a)intel.com> wifi: mt76: mt792x: treat 0xff ACPI SAR entries as no limit Devin Wittmayer <lucid_duck(a)justthetip.ca> wifi: mt76: mt7925: don't put the band auto marker in TGID Nicolas Cavallari <nicolas.cavallari(a)green-communications.fr> wifi: mt76: mt7915: disable rx napi when removing device Tao Gong <gongtao0607(a)gmail.com> wifi: mt76: mt7996: fix struct mt7996_mcu_wed_rro_ba_delete_event layout Aaron Ma <aaron.ma(a)canonical.com> wifi: mt76: mt7925: restore the legacy BSS after MLO teardown Felix Fietkau <nbd(a)nbd.name> wifi: mt76: use ALTX queue for packets to disassociated stations Felix Fietkau <nbd(a)nbd.name> wifi: mt76: route nullfunc frames to PSD/ALTX queue Felix Fietkau <nbd(a)nbd.name> wifi: mt76: account non-AQL frames per peer rather than per link Felix Fietkau <nbd(a)nbd.name> wifi: mt76: add PS buffering support for HW-managed TIM drivers Felix Fietkau <nbd(a)nbd.name> wifi: mac80211: add ieee80211_txq_aql_pending() Felix Fietkau <nbd(a)nbd.name> wifi: mac80211: add AQL support for multicast packets David Bauer <mail(a)david-bauer.net> wifi: mt76: don't return TXQ when exceeding max non-AQL packets Aurelien Jarno <aurelien(a)aurel32.net> riscv: vector: Fix output operands in context save Troy Mitchell <troy.mitchell(a)linux.dev> riscv: vector: Fix data pointer constraints in context save/restore Jakub Kicinski <kuba(a)kernel.org> net: make dev_xdp_sb_prog_count() see programs attached through a link Alan Previn <alan.previn.teres.alexis(a)intel.com> drm/xe/mmio: Fix xe_mmio_wait32() to honor delay/sleep maximums Filipe Manana <fdmanana(a)suse.com> btrfs: fix lost error return value in btrfs_listxattr() Filipe Manana <fdmanana(a)suse.com> btrfs: fix xattr replace when multiple xattrs are packed in the same item Yang Xiuwei <yangxiuwei(a)kylinos.cn> btrfs: unlock inode and extent in caller when io_uring read extent fails Yang Xiuwei <yangxiuwei(a)kylinos.cn> btrfs: free iov when btrfs_uring_read_extent() fails Yang Xiuwei <yangxiuwei(a)kylinos.cn> btrfs: always return -EIOCBQUEUED after btrfs_uring_read_extent_endio Shin'ichiro Kawasaki <shinichiro.kawasaki(a)wdc.com> zloop: zero out only the unread tail of short reads Fuad Tabba <fuad.tabba(a)linux.dev> arm64/boot: Don't set PMUv3p9 FGT2 bits without PMUv3 Sang-Hoon Choi <csh0052(a)gmail.com> nvmet: use the local P2P device on metadata allocation failure Guixin Liu <kanie(a)linux.alibaba.com> nvmet: return Invalid Field for invalid NSIDs feature 82h Bryan Fraschetti <bryan.fraschetti(a)canonical.com> ice: Restore Ordered MMIO Writes for Tx Doorbells Mahantesh Salimath <mahantesh(a)nvidia.com> tee: optee: ffa: support shared memory offsets on large-page kernels Rodrigo Zaiden <rodrigoffzz(a)gmail.com> tee: optee: fix kernel-doc warnings Sang-Hoon Choi <csh0052(a)gmail.com> cxgb4/ch_ktls: disable softirqs around tid_list erases Omar Ramadan <omar(a)blockcast.net> amt: send the relay's General Query directly from the receive path Jamal Hadi Salim <jhs(a)mojatatu.com> net/sched: em_text: reject unterminated algo before autoload Maíra Canal <mcanal(a)igalia.com> drm/vc4: Free the BO cache size list on teardown Myeonghun Pak <mhun512(a)gmail.com> drm/aspeed: Balance the display clock enable on teardown Sang-Hoon Choi <csh0052(a)gmail.com> gpio: exar: initialize the ID before registering its cleanup Oleg Keri <okerixx(a)gmail.com> drm/dp: don't mark the AUX backlight enabled when enabling failed Sai Teja Aluvala <aluvala.sai.teja(a)intel.com> Bluetooth: btintel_pcie: Add shared HW reset for clean start Ravindra <ravindra(a)intel.com> Bluetooth: btintel_pcie: fix TX descriptor bounds check Christian Brauner <brauner(a)kernel.org> fs: don't let a migrating task hide its reference from do_umount() Mateusz Guzik <mjguzik(a)gmail.com> fs: move mntput_no_expire() slowpath into a dedicated routine Christian Brauner <brauner(a)kernel.org> mount: refuse MOVE_MOUNT_SET_GROUP on an unbindable mount Vincent Jardin <vjardin(a)free.fr> arm64: dts: lx2160a: fix the iic5 spi3 pinmux offset and value Vincent Jardin <vjardin(a)free.fr> arm64: dts: lx2160a: fix IIC1 pinmux submask rejected by pinctrl-single Vincent Jardin <vjardin(a)free.fr> arm64: dts: lx2160a: fix incorrect pinmux Ze Tan <tanze(a)kylinos.cn> smb/server: fix tree connection leak in smb2_tree_connect() Namjae Jeon <linkinjeon(a)kernel.org> ksmbd: convert tree_conns_lock to rw_semaphore Tetsuo Handa <penguin-kernel(a)I-love.SAKURA.ne.jp> printk: Don't WARN on kthread_run failure. Eduard Zingerman <eddyz87(a)gmail.com> bpf: check_cond_jmp_op(): properly infer if register is null Lorenzo Bianconi <lorenzo.bianconi(a)oss.qualcomm.com> net: stmmac: fix dma mapping leak in stmmac_tso_xmit() Eric Dumazet <edumazet(a)google.com> ipv6: mcast: use rcu_assign_pointer() for __rcu list updates Yuyang Huang <sigefriedhyy(a)gmail.com> ipv6: mcast: annotate data-races around mca_users Eduard Zingerman <eddyz87(a)gmail.com> bpf: backtrack_insn(): Handle ld_{abs,ind} subprog exit edge Eduard Zingerman <eddyz87(a)gmail.com> bpf: backtracking shouldn't clear outer frame R1-R5 for callbacks Kumar Kartikeya Dwivedi <memxor(a)gmail.com> bpf: Mark syscall helpers as sleepable Steven Rostedt <rostedt(a)goodmis.org> ring-buffer: Add checking nr_subbufs to persistent ring buffer validation Masami Hiramatsu (Google) <mhiramat(a)kernel.org> ring-buffer: Skip invalid sub-buffers when validating persistent ring buffer Eduard Zingerman <eddyz87(a)gmail.com> bpf: zero extend the result of an arena 32-bit cmpxchg Eduard Zingerman <eddyz87(a)gmail.com> bpf: don't rewrite bpf_fastcall patterns entered by a jump Eduard Zingerman <eddyz87(a)gmail.com> bpf: Don't infer non-NULL from a pointer with an unbounded offset Ning Ding <dingning04(a)gmail.com> bpf: Keep refcount_acquire nullable for borrowed RCU kptrs Kumar Kartikeya Dwivedi <memxor(a)gmail.com> bpf: Mark NULL kptr stores precise Kumar Kartikeya Dwivedi <memxor(a)gmail.com> bpf: Preserve inner map identity in callback frames Vincent Donnefort <vdonnefort(a)google.com> tracing: Fix subbuf resize races with trace_pipe_raw readers Eduard Zingerman <eddyz87(a)gmail.com> bpf: mark a NULL call argument precise Fangyu Yu <fangyu.yu(a)linux.alibaba.com> iommu/riscv: Serialize command queue publishing Alexander Graf <graf(a)amazon.com> virtio_ring: fix stale descriptor flags after a failed packed add Jia Jia <physicalmtea(a)gmail.com> vduse: validate virtqueue alignment Jia Jia <physicalmtea(a)gmail.com> vhost: invalidate vring access on IOTLB transitions Steven Rostedt <rostedt(a)goodmis.org> tracing: Take trace_array reference when opening a tracer options file Arunpravin Paneer Selvam <Arunpravin.PaneerSelvam(a)amd.com> drm/amdgpu: skip the VMID 0 flush for VRAM Paulo Alcantara <pc(a)manguebit.org> smb: client: honor forceuid/forcegid when mapping SIDs to uid/gid Paulo Alcantara <pc(a)manguebit.org> smb: client: avoid using uninitialized SIDs in cifs_posix_to_fattr() Namjae Jeon <linkinjeon(a)kernel.org> ksmbd: fix maximum allowed access checks Alexey Velichayshiy <a.velichayshiy(a)ispras.ru> ksmbd: remove redundant DACL check in smb_check_perm_dacl Val Packett <val(a)packett.cool> remoteproc: qcom_wcnss: Fix handling the lack of PD regulators in v3 Gou Hao <gouhao(a)uniontech.com> powerpc/xive: propagate IPI init errors to prevent use-after-free Gou Hao <gouhao(a)uniontech.com> powerpc/xive: add error return value to xive_smp_probe() Rafael J. Wysocki <rafael.j.wysocki(a)intel.com> ACPI: bus: Introduce acpi_bus_get_primary_device() Nitin Gote <nitin.r.gote(a)intel.com> drm/xe: don't WARN on kernel job timeout when device already wedged Chris Mason <clm(a)meta.com> nfsd: convert nfsd_net boolean flags to unsigned long flags word NeilBrown <neil(a)brown.name> nfsd: use workqueue enable/disable APIs for v4_end_grace sync Bryam Vargas <hexlabsecurity(a)proton.me> dm-pcache: validate seg_id fields from persistent memory Evgenii Burenchev <evg28bur(a)yandex.ru> drm/amd/display: Fix dangling pointer in plane reset function Evgenii Burenchev <evg28bur(a)yandex.ru> drm/amd/display: Fix dangling pointer in CRTC reset function Alex Bereza <alex(a)bereza.email> dmaengine: xilinx_dma: Fix CPU stall in xilinx_dma_poll_timeout Jiri Olsa <jolsa(a)kernel.org> uprobes/x86: Move optimized uprobe from nop5 to nop10 Yiyang Chen <chenyy23(a)mails.tsinghua.edu.cn> bpf: Reject MEM_ALLOC BTF accesses past object bounds Nicholas Dudar <main.kalliope(a)gmail.com> bpf: Reject writes through untrusted BTF pointers Armin Wolf <W_Armin(a)gmx.de> platform/x86: dell-wmi-base: Fix handling of ultra performance key Nicholas Dudar <main.kalliope(a)gmail.com> bpf: Reject rdonly/rdwr_buf_size kfunc arguments that exceed u32 max Qing Ming <a0yami(a)mailbox.org> usb: gadget: uac: validate rate list length before storing Marco Scardovi <scardracs(a)disroot.org> platform/x86: asus-wmi: fix resource leaks on probe failure Maher Azzouzi <maherazz04(a)gmail.com> esp: do not unref managed frag pages in esp_ssg_unref() Leon Romanovsky <leon(a)kernel.org> RDMA/rvt: Return NULL after port allocation failure Reinette Chatre <reinette.chatre(a)intel.com> fs/resctrl: Fix UAF from worker threads when domains are removed Dave Jiang <dave.jiang(a)intel.com> cxl/features: Serialize multi-part Get/Set Feature transfers Sudeep Holla <sudeep.holla(a)kernel.org> firmware: arm_scmi: Fix SCMI device destroy lifetimes Sudeep Holla <sudeep.holla(a)kernel.org> firmware: arm_scmi: Fix OF node reference handling Sudeep Holla <sudeep.holla(a)kernel.org> firmware: arm_scmi: Clear SystemPower flag on create failure Aditya Prakash Srivastava <aditya.ansh182(a)gmail.com> ext4: fix ABBA deadlock in ext4_xattr_inode_cache_find() Leon Hwang <leon.hwang(a)linux.dev> bpf: Fix WARNING in bpf_tracing_link_release Justin Yeh <justin.yeh(a)mediatek.com> pinctrl: mediatek: use devm_gpiochip_add_data() for GPIO chip Li Qiang <liqiang01(a)kylinos.cn> scsi: ufs: core: Validate string descriptors Bean Huo <beanhuo(a)micron.com> scsi: ufs: core: Convert string descriptor format macros to enum Nicolin Chen <nicolinc(a)nvidia.com> iommu/tegra241-cmdqv: Don't fall back to a freed smmu after devm_krealloc() Gary Guo <gary(a)garyguo.net> PCI: Fix UAF when probe runs concurrent to dyn ID removal Gary Guo <gary(a)garyguo.net> PCI: Fix dyn_id add TOCTOU Gary Guo <gary(a)garyguo.net> PCI: Make pci_match_one_device() match on ID instead of device Leon Romanovsky <leon(a)kernel.org> RDMA/cxgb4: Fix dereg_skb leak and double free in write_tpt_entry() Guixin Liu <kanie(a)linux.alibaba.com> nvmet: fix return status of RMI log page on allocation failure Adrián Larumbe <adrian.larumbe(a)collabora.com> drm/panthor: Add vm_bind region with kbo range overlap check Jeff Johnson <jeff.johnson(a)oss.qualcomm.com> wifi: ath12k: fix overreads in ath12k_wmi_process_csa_switch_count_event() Abd-Alrhman Masalkhi <abd.masalkhi(a)gmail.com> md: remove REQ_NOWAIT support from raid1/10/456 Shayne Chen <shayne.chen(a)mediatek.com> wifi: mt76: fix handling channel context with different bands in mt76_switch_vif_chanctx() Eason Lai <Eason.Lai(a)mediatek.com> wifi: mt76: mt792x: fix use-after-free in mt76_rx_poll_complete Felix Fietkau <nbd(a)nbd.name> wifi: mt76: cancel reset and rc work on device unregister Yonghong Song <yonghong.song(a)linux.dev> bpf: Reject >8 byte return values on return-reading trampoline paths Felix Fietkau <nbd(a)nbd.name> wifi: mt76: mt7996: clear stale link state on full reset Will Deacon <will(a)kernel.org> arm64: ptrace: Keep 'orig_x0' in-sync with x0 on syscall entry Zhao Li <enderaoelyther(a)gmail.com> wifi: nl80211: clean up color-change beacon data on errors Jason Huang <jason.huang2(a)infineon.com> wifi: brcmfmac: fix P2P action frame handling without device vif Karl Mehltretter <kmehltretter(a)gmail.com> serial: core: do fallible allocations before the console can be registered Karl Mehltretter <kmehltretter(a)gmail.com> serial: core: clear freed pointers on uart_register_driver() failure Karl Mehltretter <kmehltretter(a)gmail.com> tty: skip cdev_del() when no cdev is registered Haoxiang Li <haoxiang_li2024(a)163.com> HID: logitech-hidpp: Fix FF device cleanup on init failure Yang Xiuwei <yangxiuwei(a)kylinos.cn> ublk: validate auto buf reg before taking uring_cmd Ning Ding <dingning04(a)gmail.com> bpf: Invalidate RCU pointers after final spin unlock Krzysztof Wilczyński <kwilczynski(a)kernel.org> PCI/sysfs: Add lockdown checks to legacy I/O and memory handlers Rafael J. Wysocki <rafael.j.wysocki(a)intel.com> thermal: hwmon: Remove hwmon class device along with its parent Cen Zhang <zzzccc427(a)gmail.com> ocfs2: o2hb: quiesce negotiate handlers and timeout work Yufan Chen <ericterminal(a)gmail.com> ocfs2/heartbeat: fix slot mapping rollback leaks on error paths Jiri Olsa <jolsa(a)kernel.org> bpf: Clear buf on error in __bpf_get_task_stack Jiri Olsa <jolsa(a)kernel.org> bpf: Remove trace_in argument from __bpf_get_stack Jiri Olsa <jolsa(a)kernel.org> bpf: Factor callchain_finalize function from __bpf_get_stack Jiri Olsa <jolsa(a)kernel.org> bpf: Factor callchain_store function from __bpf_get_stack Harry Wentland <harry.wentland(a)amd.com> drm/amd/display: Resize MST HDCP per-connector arrays to 32 Ray Wu <ray.wu(a)amd.com> drm/amd/display: disable replay when crc source is enabled Yeoreum Yun <yeoreum.yun(a)arm.com> coresight: etm4x: missing cscfg_csdev_disable_active_config() in perf enable Yang Xiuwei <yangxiuwei(a)kylinos.cn> scsi: sd: Fix special_vec mempool leak when scsi_alloc_sgtables() fails Bart Van Assche <bvanassche(a)acm.org> scsi: sd: Move the sd_config_discard() function definition Bart Van Assche <bvanassche(a)acm.org> scsi: sd: Move the sd_remove() function definition Uwe Kleine-König <u.kleine-koenig(a)baylibre.com> scsi: sd: Convert to SCSI bus methods Uwe Kleine-König <u.kleine-koenig(a)baylibre.com> scsi: core: sysfs: Make use of bus callbacks Uwe Kleine-König <u.kleine-koenig(a)baylibre.com> scsi: core: Pass a struct scsi_driver to scsi_{,un}register_driver() Sun YangKai <sunyangkai(a)fnnas.com> btrfs: check if root is readonly when setting posix acl Miquel Sabaté Solà <mssola(a)mssola.com> btrfs: apply the AUTO_K(V)FREE macros throughout the code Johannes Thumshirn <johannes.thumshirn(a)wdc.com> btrfs: zoned: flush active metadata block group at btree_writepages() start Lu Baolu <baolu.lu(a)linux.intel.com> iommu/vt-d: Fix iopf_refcount leak on RID domain replacement Nicolin Chen <nicolinc(a)nvidia.com> iommu: Pass in old domain to attach_dev callback functions Chuck Lever <chuck.lever(a)oracle.com> NFS: Return a delegation the client fails to record Ning Ding <dingning04(a)gmail.com> bpf: Compare iterator types during state pruning Daniel Borkmann <daniel(a)iogearbox.net> bpf, s390: Clear fetch destination on faulting arena atomic Marek Szyprowski <m.szyprowski(a)samsung.com> clocksource/drivers/samsung_pwm: Switch to raw_spinlock_t type Maurizio Lombardi <mlombard(a)redhat.com> nvmet: fix max_qid race between configfs and controller allocation Usama Arif <usama.arif(a)linux.dev> blk-iolatency: clear delay state when freeing policy data Usama Arif <usama.arif(a)linux.dev> blk-iocost: clear delay state when freeing policy data Yu Kuai <yukuai(a)fygo.io> blk-cgroup: delay freeing policy data after rcu grace period Yiyang Chen <chenyy23(a)mails.tsinghua.edu.cn> bpf: Check pointer type for all atomic RMW paths Yunseong Kim <yunseong.kim(a)est.tech> ksmbd: fix slab-out-of-bounds read in ksmbd_alloc_user() Namjae Jeon <linkinjeon(a)kernel.org> ksmbd: serialize oplock close with pending break ownership Ilan Dudnik <ilan.dudnik(a)safebreach.com> ksmbd: defer publishing granted locks to prevent UAF/double-free race Namjae Jeon <linkinjeon(a)kernel.org> ksmbd: safely discard unregistered deferred locks Namjae Jeon <linkinjeon(a)kernel.org> ksmbd: detach blocked lock requests before freeing Namjae Jeon <linkinjeon(a)kernel.org> ksmbd: scope session state changes to bound connections Petr Oros <poros(a)redhat.com> dpll: fix NULL deref in dpll_device_ops() during teardown race Anton Protopopov <a.s.protopopov(a)gmail.com> virtio_net: Fix resize of the RX ring Sascha Bischoff <Sascha.Bischoff(a)arm.com> irqchip/gic-v5: Clear per-CPU IRS data on teardown Eric Dumazet <edumazet(a)google.com> ip6mr: do not clone dst in ip6mr_cache_report() Nikolay Aleksandrov <razor(a)blackwall.org> net: bridge: arp/nd proxy: fix reading neigh ha Nikolay Aleksandrov <razor(a)blackwall.org> vxlan: fix reading neigh ha Jérémy Jean <Jeremy.Jean(a)oss.cyber.gouv.fr> NFSv4.1: zero referring call lists before decoding Jamal Hadi Salim <jhs(a)mojatatu.com> net/sched: account classifier filter allocations to memcg Bernd Schubert <bernd(a)bsbernd.com> fuse: Fix the condition to enable over-io-uring Pauli Virtanen <pav(a)iki.fi> Bluetooth: L2CAP: access chan->conn safely in get/setsockopt Radek Podgorny <radek(a)podgorny.cz> Bluetooth: do not leak an hci_conn when a second LE connect is rejected Long Li <longli(a)microsoft.com> net: mana: Cap MSI-X vectors to the device MSI-X table size Sai Krishna <saikrishnag(a)marvell.com> octeontx2-af: fix cn20k mailbox lifetime on repeated rvu_mbox_init() Pablo Neira Ayuso <pablo(a)netfilter.org> netfilter: nf_tables: skip double clone set expressions on element insert Sean Christopherson <seanjc(a)google.com> KVM: SEV: Forcefully invalidate SNP VMSA if its backing gmem page is zapped Zeng Chi <zengchi(a)kylinos.cn> LoongArch: KVM: Validate MSI data before routing it to EIOINTC Bibo Mao <maobibo(a)loongson.cn> LoongArch: KVM: Get VM PMU capability from HW GCFG register Jackson Lee <jackson.lee(a)chipsnmedia.com> media: chips-media: wave5: Resume device before setting EOS flag Jesse Zhang <Jesse.Zhang(a)amd.com> drm/amdgpu: force complete the KIQ ring fences on reset Jesse Zhang <Jesse.Zhang(a)amd.com> drm/amdgpu: force complete the MES ring fences on reset Longlong Xia <xialonglong(a)kylinos.cn> zram: fix out-of-bounds access in writeback_store() Jeff Layton <jlayton(a)kernel.org> lockd, nfsd: RCU-protect nlmsvc_ops dispatch Jeff Layton <jlayton(a)kernel.org> nfsd: restore rq_status_counter to even on all nfsd_dispatch() exit paths Xiubo Li <xiubo.li(a)clyso.com> ceph: fix UAF in check_new_map() on session freed during unlock Frank Sorenson <sorenson(a)redhat.com> cifs: call pagecache_isize_extended() in cifs_setsize() when extending Jan Kara <jack(a)suse.cz> ext2: Fix lost inode updates for IS_SYNC inodes Pratyush Yadav (Google) <pratyush(a)kernel.org> kho: fix size calculation in kho_preserved_memory_reserve() Chuck Lever <chuck.lever(a)oracle.com> SUNRPC: Reject short RFC 4121 MIC tokens in gss_krb5_verify_mic_v2 Chuck Lever <chuck.lever(a)oracle.com> SUNRPC: Switch MIC token verification to crypto/krb5 Chuck Lever <chuck.lever(a)oracle.com> SUNRPC: Switch MIC token generation to crypto/krb5 Chuck Lever <chuck.lever(a)oracle.com> SUNRPC: Switch wrap token decryption to crypto/krb5 Chuck Lever <chuck.lever(a)oracle.com> SUNRPC: Switch wrap token encryption to crypto/krb5 Chuck Lever <chuck.lever(a)oracle.com> SUNRPC: Prepare crypto/krb5 encryption and checksum handles Chuck Lever <chuck.lever(a)oracle.com> SUNRPC: Add errno-to-GSS status conversion helper Chuck Lever <chuck.lever(a)oracle.com> SUNRPC: Add crypto/krb5 enctype lookup to krb5_ctx Chuck Lever <chuck.lever(a)oracle.com> svcrdma: Clear sc_cm_id when ADDR_CHANGE replacement fails Chuck Lever <chuck.lever(a)oracle.com> svcrdma: wake sq waiters when the transport closes Chuck Lever <chuck.lever(a)oracle.com> svcrdma: Add Write chunk WRs to the RPC's Send WR chain Guidong Han <2045gemini(a)gmail.com> RISC-V: KVM: Fix PMU event info array size overflow Lukas Gerlach <lukas.gerlach(a)cispa.de> KVM: riscv: Fix Spectre-v1 in PMU counter access Leon Romanovsky <leon(a)kernel.org> ntb: Store original DMA address for future release Koichiro Den <den(a)valinux.co.jp> NTB: ntb_transport: Use ntb_get_dma_dev() for DMA buffers Koichiro Den <den(a)valinux.co.jp> NTB: core: Add .get_dma_dev() callback to ntb_dev_ops Eric Dumazet <edumazet(a)google.com> tipc: avoid busy looping in tipc_exit_net() Thomas Zimmermann <tzimmermann(a)suse.de> fbdev: Wrap user-invoked calls to fb_set_var() in helper William Palacek <William.Palacek(a)amd.com> drm/amdkfd: Add bounds check for CRAT subtype length Yongqiang Sun <Yongqiang.Sun(a)amd.com> drm/amdkfd: Fix infinite loop parsing CRAT with zero subtype length Luxiao Xu <rakukuip(a)gmail.com> bpf: Check sk_state before sk_protocol in bpf_tcp_*_syncookie Alex Deucher <alexander.deucher(a)amd.com> drm/amd/display: check if dml21_add_phantom_plane() is successful Yuho Choi <dbgh9129(a)gmail.com> dmaengine: idxd: fix double free of wq, engine, and group structs Michael Bommarito <michael.bommarito(a)gmail.com> idpf: bound interrupt-vector register fill to the allocated array Pauli Virtanen <pav(a)iki.fi> Bluetooth: hci_sync: hold conn in hci_connect_acl/le_sync() callbacks Prasanna Kumar T S M <ptsm(a)linux.microsoft.com> soc: xilinx: Fix race condition in event registration Jay Buddhabhatti <jay.buddhabhatti(a)amd.com> drivers: firmware: xilinx: Switch to new family code in zynqmp_pm_get_family_info() Jay Buddhabhatti <jay.buddhabhatti(a)amd.com> drivers: firmware: xilinx: Add unique family code for all platforms David Carlier <devnexen(a)gmail.com> netfilter: flowtable: avoid num_encaps underflow on bridge VLAN untag Weiming Shi <bestswngs(a)gmail.com> btrfs: lzo: reject compressed segment that overflows the compressed input Mostafa Saleh <smostafa(a)google.com> optee: ffa: Add NULL check in optee_ffa_lend_protmem Hongjie Fang <hongjiefang(a)asrmicro.com> scsi: core: pair EH runtime PM get and put Ralf Lici <ralf(a)mandelbit.com> ovpn: defer key slot crypto freeing to workqueue Julian Anastasov <ja(a)ssi.bg> ipvs: revalidate ihl to prevent out-of-bounds access Jakub Kicinski <kuba(a)kernel.org> eth: bnxt: avoid deadlock when canceling IRQ affinity notifier Jakub Kicinski <kuba(a)kernel.org> eth: bnxt: decrease indent in bnxt_request_irq() Mark Tomlinson <mark.tomlinson(a)alliedtelesis.co.nz> gpio: pca953x: fix pca953x_irq_bus_sync_unlock regmap lock Karthikeyan KS <karthiproffesional(a)gmail.com> soc: aspeed: lpc-snoop: Fix usercopy overflow in snoop_file_read David Lee <david.lee(a)trailofbits.com> btrfs: lzo: reject inline extents without valid headers Lizhi Hou <lizhi.hou(a)amd.com> accel/amdxdna: Fix locally exploitable BUG_ON in amdxdna_insert_pages() Lizhi Hou <lizhi.hou(a)amd.com> accel/amxdna: Fix page-insertion errors in amdxdna_insert_pages() Chengfeng Ye <nicoyip.dev(a)gmail.com> bpf: Fix netns reference imbalance in conntrack kfuncs Linfeng Sun <linfeng.sun.dev(a)gamil.com> vhost_iotlb: bound map allocation in add_range Steven Rostedt <rostedt(a)goodmis.org> eventfs: Use children field for rcu head and add memory barriers Dongjiang Zhu <zhudongjiang(a)fnnas.com> btrfs: skip global block reserve accounting for rescue mounts Qu Wenruo <wqu(a)suse.com> btrfs: warn about extent buffer that can not be released Qu Wenruo <wqu(a)suse.com> btrfs: only invalidate btree inode pages after all ebs are released David Sterba <dsterba(a)suse.com> btrfs: split btrfs_fs_closing() and change return type to bool Carlos López <clopez(a)suse.de> KVM: arm64: vgic: Fix race between LPI release and re-registration Xiang Mei (Microsoft) <xmei5(a)asu.edu> nexthop: take nh->lock for f6i_list walks in replace check and notify Xiang Mei (Microsoft) <xmei5(a)asu.edu> nexthop: avoid unlocked f6i_list walk in nh_rt_cache_flush Maciej Fijalkowski <maciej.fijalkowski(a)intel.com> xsk: reclaim invalid Tx descriptors in ZC batch path Maciej Fijalkowski <maciej.fijalkowski(a)intel.com> xsk: provide sufficient space in pool->tx_descs Cen Zhang (Microsoft) <blbllhy(a)gmail.com> net/sched: cls_u32: validate offshift to prevent shift-out-of-bounds David Howells <dhowells(a)redhat.com> netfs: Fix folio_queue ENOMEM in writeback by adding a mempool Pauli Virtanen <pav(a)iki.fi> Bluetooth: hci_sync: hold conn in hci_connect_big_sync() callback Luiz Augusto von Dentz <luiz.von.dentz(a)intel.com> Bluetooth: hci_conn: Fix using conn->le_{tx,rx}_phy as supported PHYs Kees Cook <kees(a)kernel.org> net: Convert proto_ops bind() callbacks to use sockaddr_unsized Kriish Sharma <kriish.sharma2006(a)gmail.com> hdlc_ppp: fix potential null pointer in ppp_cp_event logging Pauli Virtanen <pav(a)iki.fi> Bluetooth: hci_sync: hold conn in hci_connect_pa_sync() callback Hariprasad Kelam <hkelam(a)marvell.com> octeontx2-af: Block VFs from clobbering special CGX PKIND state Harald Freudenberger <freude(a)linux.ibm.com> s390/zcrypt: Close speculative mem read possibility Harald Freudenberger <freude(a)linux.ibm.com> s390/zcrypt: Rework domain processing within zcrypt device driver Harald Freudenberger <freude(a)linux.ibm.com> s390/zcrypt: Move inline function rng_type6cprb_msgx from header to code George Zhang <george.zhang(a)amd.com> drm/amd/display: Fix divide-by-zero in calculate_mcache_setting on zero viewport Abd-Alrhman Masalkhi <abd.masalkhi(a)gmail.com> md/raid1,raid10: fix error-path detection with md_cloned_bio() Abd-Alrhman Masalkhi <abd.masalkhi(a)gmail.com> md/raid1,raid10: fix bio accounting for split md cloned bios Abd-Alrhman Masalkhi <abd.masalkhi(a)gmail.com> md/raid1,raid10: fix deadlock in read error recovery path Abd-Alrhman Masalkhi <abd.masalkhi(a)gmail.com> md: replace wait loop with wait_event() in md_handle_request() Miaoqing Pan <miaoqing.pan(a)oss.qualcomm.com> wifi: ath12k: fix memory leak in ath12k_wifi7_dp_rx_h_verify_tkip_mic() Wei Zhang <wei.zhang(a)oss.qualcomm.com> wifi: ath12k: fix inconsistent arvif state in vdev_create error paths Zhang Cen <rollkingzzc(a)gmail.com> ocfs2: validate fast symlink target during inode read David Windsor <dwindsor(a)gmail.com> bpf: Reject sleepable BPF_LSM_CGROUP programs at load time Bryam Vargas <hexlabsecurity(a)proton.me> wifi: mac80211: bound S1G TIM PVB walk to the TIM element Johannes Berg <johannes.berg(a)intel.com> wifi: ieee80211: split S1G definitions out Larysa Zaremba <larysa.zaremba(a)intel.com> ixgbe: do not configure xps for XDP queues Yun Zhou <yun.zhou(a)windriver.com> ext4: validate donor file superblock early in EXT4_IOC_MOVE_EXT Zhang Yi <yi.zhang(a)huawei.com> ext4: add mext_check_validity() to do basic check Li RongQing <lirongqing(a)baidu.com> iommu/dma-iommu: Fix wrong scatterlist length assignment in P2PDMA path Dan Williams <djbw(a)kernel.org> cxl/region: Block region delete during region creation Pablo Neira Ayuso <pablo(a)netfilter.org> netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them Weiming Shi <bestswngs(a)gmail.com> netfilter: nft_fwd_netdev: use recursion counter in neigh egress path Pablo Neira Ayuso <pablo(a)netfilter.org> netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding Selvin Xavier <selvin.xavier(a)broadcom.com> RDMA/bnxt_re: Free CQ toggle page after firmware teardown Selvin Xavier <selvin.xavier(a)broadcom.com> RDMA/bnxt_re: Add a max slot check for SQ Eric Dumazet <edumazet(a)google.com> net: serialize netif_running() check in enqueue_to_backlog() Eric Dumazet <edumazet(a)google.com> net: fully inline backlog_unlock_irq_restore() Eric Dumazet <edumazet(a)google.com> net: optimize enqueue_to_backlog() for the fast path Helen Koike <koike(a)igalia.com> fs/ntfs3: call _ntfs_bad_inode() when failing to rename Konstantin Komarov <almaz.alexandrovich(a)paragon-software.com> fs/ntfs3: Reformat code and update terminology Adrian Hunter <adrian.hunter(a)intel.com> i3c: mipi-i3c-hci: Fix race in i3c_hci_addr_to_dev() Abd-Alrhman Masalkhi <abd.masalkhi(a)gmail.com> md/raid1: fix writes_pending and barrier reference leaks on write failures Abd-Alrhman Masalkhi <abd.masalkhi(a)gmail.com> md/raid10: fix writes_pending leak on write request failures Yiyang Chen <chenyy23(a)mails.tsinghua.edu.cn> bpf: Guard conntrack opts error writes Puranjay Mohan <puranjay(a)kernel.org> bpf: net: netfilter: drop dead NULL checks Eric Dumazet <edumazet(a)google.com> tipc: fix UAF in cleanup_bearer() due to premature dst_cache_destroy() Boris Brezillon <boris.brezillon(a)collabora.com> drm/panthor: Always use the IRQ-safe variant when acquiring the fence lock Michael Bommarito <michael.bommarito(a)gmail.com> xen/pvcalls: bound backend response req_id before indexing rsp[] Fengnan Chang <changfengnan(a)bytedance.com> iomap: release pages on atomic dio size mismatch Shay Drory <shayd(a)nvidia.com> net/mlx5: LAG, Fix off-by-one in single-FDB error rollback Cen Zhang <zzzccc427(a)gmail.com> Bluetooth: 6lowpan: avoid untracked enable work Lizhi Hou <lizhi.hou(a)amd.com> accel/amdxdna: Fix VMA access race Max Zhen <max.zhen(a)amd.com> accel/amdxdna: Refactor GEM BO handling and add helper APIs for address retrieval Lizhi Hou <lizhi.hou(a)amd.com> accel/amdxdna: Fill invalid payload for failed command Yuho Choi <dbgh9129(a)gmail.com> net/liquidio: drop cached VF pci_dev LUT Doruk Tan Ozturk <doruk(a)0sec.ai> accel/amdxdna: reject user command submission without a command BO Bryam Vargas <hexlabsecurity(a)proton.me> ata: libata-core: Add NOLPM quirk for PNY CS900 1TB SSD Niklas Cassel <cassel(a)kernel.org> ata: libata-core: Disable LPM on Silicon Motion MD619{H,G}XCLDE3TC Zhao Li <enderaoelyther(a)gmail.com> wifi: mac80211: validate extension-frame layout before RX Jamal Hadi Salim <jhs(a)mojatatu.com> net/sched: Handle TC_ACT_REDIRECT from qdisc filter chains Honglei Huang <honghuan(a)amd.com> drm/amd/display: use kvzalloc to allocate struct dc Cen Zhang <zzzccc427(a)gmail.com> wifi: cfg80211: use wiphy work for socket owner autodisconnect Matt Bobrowski <mattbobrowski(a)google.com> bpf: Fix UAF in sock clone early bailouts Fushuai Wang <wangfushuai(a)baidu.com> bpf: Use rcu_read_lock_dont_migrate in bpf_sk_storage.c Arvind Yadav <arvind.yadav(a)intel.com> drm/xe/guc: Keep scheduler timeline name alive Arvind Yadav <arvind.yadav(a)intel.com> drm/xe/guc: Hold device ref until queue teardown completes Ruoyu Wang <ruoyuw560(a)gmail.com> bnxt_en: Handle partially initialized auxiliary devices Pavan Chebbi <pavan.chebbi(a)broadcom.com> fwctl/bnxt_en: Refactor aux bus functions to be more generic Weiming Shi <bestswngs(a)gmail.com> tipc: serialize udp bearer replicast list updates Frank Sorenson <sorenson(a)redhat.com> cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths Frank Sorenson <sorenson(a)redhat.com> cifs: prevent readdir from changing file size due to stale directory metadata Satyanarayana K V P <satyanarayana.k.v.p(a)intel.com> drm/xe/vf: Add drm_dev guards when detaching CCS read/write buffers Nicholas Dudar <main.kalliope(a)gmail.com> LoongArch: BPF: Zero-extend signed ALU32 div/mod results Emil Tantilov <emil.s.tantilov(a)intel.com> idpf: fix max_vport related crash on allocation error during init Joonas Lahtinen <joonas.lahtinen(a)linux.intel.com> drm/i915/gt: Fix NULL deref on sched_engine alloc failure Harish Kasiviswanathan <Harish.Kasiviswanathan(a)amd.com> drm/amdgpu: Fix kernel panic during driver load failure Namjae Jeon <linkinjeon(a)kernel.org> ksmbd: prevent path traversal bypass by restricting caseless retry Ralph Boehme <slow(a)samba.org> smb/client: fix chown/chgrp with SMB3 POSIX Extensions Arjan van de Ven <arjan(a)linux.intel.com> wifi: mt76: mt7921/mt7925: fix NULL dereference in CSA beacon Sean Christopherson <seanjc(a)google.com> KVM: guest_memfd: Treat memslot binding offset+size as unsigned values David Howells <dhowells(a)redhat.com> netfs: Fix zeropoint update where i_size > remote_i_size Felix Gu <ustc.gu(a)gmail.com> drm/msm/adreno: Fix a reference leak in a6xx_gpu_init() Jia Zhu <zhujia.zj(a)bytedance.com> erofs: fix metabuf leak in inode xattr initialization Michael Bommarito <michael.bommarito(a)gmail.com> net: hsr: defer node table free until after RCU readers Zhao Li <enderaoelyther(a)gmail.com> wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb Sarika Sharma <sarika.sharma(a)oss.qualcomm.com> wifi: mac80211: fix missing RX bitrate update for mesh forwarding path Florian Westphal <fw(a)strlen.de> netfilter: x_tables: allocate hook ops while under mutex Florian Westphal <fw(a)strlen.de> netfilter: x_tables: allow initial table replace without emitting audit log message David Howells <dhowells(a)redhat.com> netfs: Fix missing barriers when accessing stream->subrequests locklessly David Howells <dhowells(a)redhat.com> afs: Fix the locking used by afs_get_link() Hongling Zeng <zenghongling(a)kylinos.cn> cachefiles: Fix error return when vfs_mkdir() fails Keith Busch <kbusch(a)kernel.org> nvme-pci: fix dma_vecs leak on p2p memory Keith Busch <kbusch(a)kernel.org> nvme-pci: fix dma mapping leak on data setup error Rafael J. Wysocki <rafael.j.wysocki(a)intel.com> ACPI: button: Fix ACPI GPE handler leak during removal Rafael J. Wysocki <rafael.j.wysocki(a)intel.com> ACPI: button: Tweak acpi_button_remove() Rafael J. Wysocki <rafael.j.wysocki(a)intel.com> ACPI: button: Convert the driver to a platform one Rafael J. Wysocki <rafael.j.wysocki(a)intel.com> ACPI: button: Adjust event notification routines Jamal Hadi Salim <jhs(a)mojatatu.com> net/sched: fix packet loop on netem when duplicate is on Jamal Hadi Salim <jhs(a)mojatatu.com> net: Introduce skb tc depth field to track packet loops Mark Brown <broonie(a)kernel.org> KVM: arm64: Correctly cap ZCR_EL2 provided by a guest hypervisor Christian König <christian.koenig(a)amd.com> drm/amdgpu: fix amdgpu_hmm_range_get_pages Pablo Neira Ayuso <pablo(a)netfilter.org> netfilter: nf_tables: add hook transactions for device deletions Mikhail Lobanov <m.lobanov(a)rosa.ru> f2fs: read COW data with the original inode during atomic write Hongling Zeng <zenghongling(a)kylinos.cn> fbdev: omap2: fix use-after-free in omapfb_mmap Hongling Zeng <zenghongling(a)kylinos.cn> fbdev: omap2: fix inconsistent lock returns in omapfb_mmap Krzysztof Kozlowski <krzysztof.kozlowski(a)oss.qualcomm.com> power: supply: max77705: Free allocated workqueue and fix removal order Krzysztof Kozlowski <krzysztof.kozlowski(a)oss.qualcomm.com> power: supply: max77705: Drop duplicated IRQ error message Krzysztof Kozlowski <krzysztof.kozlowski(a)oss.qualcomm.com> workqueue: devres: Add device-managed allocate workqueue Morduan Zang <zhangdandan(a)uniontech.com> net: phonet: do not BUG_ON() in pn_socket_autobind() on failed bind Mikhail Gavrilov <mikhail.v.gavrilov(a)gmail.com> drm/amd/display: Wrap DCN32 phantom-plane allocation in DC_RUN_WITH_PREEMPTION_ENABLED Johannes Berg <johannes.berg(a)intel.com> wifi: cfg80211: enforce HE/EHT cap/oper consistency Vadim Fedorenko <vadim.fedorenko(a)linux.dev> ptp: ocp: fix resource freeing order Andy Shevchenko <andriy.shevchenko(a)linux.intel.com> ptp: ocp: Make ptp_ocp_unregister_ext() NULL-aware Uday Shankar <ushankar(a)purestorage.com> ublk: reset per-IO canceled flag on each fetch Ritesh Harjani (IBM) <ritesh.list(a)gmail.com> powerpc/64s: Fix unmap race with PMD migration entries Damien Riégel <damien.riegel(a)silabs.com> greybus: raw: fix use-after-free on cdev close Yongpeng Yang <yangyongpeng(a)xiaomi.com> f2fs: fix data loss caused by incorrect use of nat_entry flag Michal Schmidt <mschmidt(a)redhat.com> ice: fix double-free of tx_buf skb Kohei Enju <kohei(a)enjuk.jp> ice: fix potential NULL pointer deref in error path of ice_set_ringparam() Keita Morisaki <kmta1236(a)gmail.com> ice: fix race condition in TX timestamp ring cleanup Alexander Lobakin <aleksander.lobakin(a)intel.com> ice: reshuffle and group Rx and Tx queue fields by cachelines Hristo Venev <hristo(a)venev.name> ceph: put folios not suitable for writeback Raphael Zimmer <raphael.zimmer(a)tu-ilmenau.de> libceph: Fix potential out-of-bounds access in __ceph_x_decrypt() Thomas Hellström <thomas.hellstrom(a)linux.intel.com> drm/ttm: Fix ttm_bo_shrink() infinite LRU walk on backup failure Thomas Hellström <thomas.hellstrom(a)linux.intel.com> drm/ttm: Fix ttm_bo_swapout() infinite LRU walk on swapout failure D. Wythe <alibuda(a)linux.alibaba.com> Revert "net/smc: Introduce TCP ULP support" Sunil Khatri <sunil.khatri(a)amd.com> drm/amdgpu/userq: fix access to stale wptr mapping Ritesh Harjani (IBM) <ritesh.list(a)gmail.com> pseries/papr-hvpipe: Fix race with interrupt handler Christian Brauner <brauner(a)kernel.org> papr-hvpipe: convert papr_hvpipe_dev_create_handle() to FD_PREPARE() Srinivasan Shanmugam <srinivasan.shanmugam(a)amd.com> drm/amd/display: Fix dc_link NULL handling in HPD init Vishnu Reddy <busanna.reddy(a)oss.qualcomm.com> media: iris: fix use-after-free of fmt_src during MBPF check Dmitry Baryshkov <dmitry.baryshkov(a)oss.qualcomm.com> media: iris: turn platform caps into constants Yosry Ahmed <yosry(a)kernel.org> KVM: nSVM: Triple fault if restore host CR3 fails on nested #VMEXIT Seohyeon Maeng <bioloidgp(a)gmail.com> udf: fix partition descriptor append bookkeeping Deepanshu Kartikey <kartikey406(a)gmail.com> gfs2: fix memory leaks in gfs2_fill_super error path Andreas Gruenbacher <agruenba(a)redhat.com> gfs2: Rename gfs2_{withdrawing_or_ => }withdrawn Andreas Gruenbacher <agruenba(a)redhat.com> gfs2: Get rid of delayed withdraws Andreas Gruenbacher <agruenba(a)redhat.com> gfs2: Asynchronous withdraw Andreas Gruenbacher <agruenba(a)redhat.com> gfs2: Add clean argument to lm_unmount hook Andreas Gruenbacher <agruenba(a)redhat.com> gfs2: Clean up quotad timeout handling Utkarsh Singh <utkarsh.singh.em(a)gmail.com> gfs2/sysfs: Replace sprintf/snprintf with sysfs_emit Chen Ni <nichen(a)iscas.ac.cn> ASoC: amd: acp-mach-common: Add missing error check for clock acquisition Vladimir Riabchun <ferr.lambarginio(a)gmail.com> scsi: qla2xxx: Completely fix fcport double free Prathamesh Shete <pshete(a)nvidia.com> soc/tegra: pmc: Fix unsafe generic_handle_irq() call Ming Qian <ming.qian(a)oss.nxp.com> media: verisilicon: Avoid G2 bus error while decoding H.264 and HEVC Nicolas Dufresne <nicolas.dufresne(a)collabora.com> media: v4l2-mem2mem: Add a kref to the v4l2_m2m_dev structure Filipe Manana <fdmanana(a)suse.com> btrfs: don't BUG() on unexpected delayed ref type in run_one_delayed_ref() Filipe Manana <fdmanana(a)suse.com> btrfs: remove 'reserved' argument from btrfs_pin_extent() Qu Wenruo <wqu(a)suse.com> btrfs: do not ASSERT() when the fs flips RO inside btrfs_repair_io_failure() Jori Koolstra <jkoolstra(a)xs4all.nl> hfs: Replace BUG_ON with error handling for CNID count checks Cédric Bellegarde <cedric.bellegarde(a)adishatz.org> ASoC: qcom: q6asm: drop DSP responses for closed data streams Srinivas Kandagatla <srinivas.kandagatla(a)oss.qualcomm.com> ASoC: qcom: q6asm: handle the responses after closing Nicholas Kazlauskas <nicholas.kazlauskas(a)amd.com> drm/amd/display: Adjust PHY FSM transition to TX_EN-to-PLL_ON for TMDS on DCN35 Nicholas Kazlauskas <nicholas.kazlauskas(a)amd.com> drm/amd/display: Rename FAMS2 global control lock to DMUB HW control lock Joel Fernandes <joelagnelf(a)nvidia.com> srcu: Use irq_work to start GP in tiny SRCU Stanislav Kinsburskii <skinsburskii(a)linux.microsoft.com> mshv: Fix error handling in mshv_region_pin Stanislav Kinsburskii <skinsburskii(a)linux.microsoft.com> mshv: Move region management to mshv_regions.c Stanislav Kinsburskii <skinsburskii(a)linux.microsoft.com> mshv: Centralize guest memory region destruction Stanislav Kinsburskii <skinsburskii(a)linux.microsoft.com> mshv: Refactor and rename memory region handling functions Naman Jain <namjain(a)linux.microsoft.com> static_call: allow using STATIC_CALL_TRAMP_STR() from assembly Pauli Virtanen <pav(a)iki.fi> Bluetooth: hci_sync: hci_cmd_sync_queue_once() return -EEXIST if exists Takashi Iwai <tiwai(a)suse.de> ALSA: ctxfi: Check the error for index mapping Harin Lee <me(a)harin.net> ALSA: ctxfi: Refactor resource alloc for sparse mappings Harin Lee <me(a)harin.net> ALSA: ctxfi: Use explicit output flag for DAIO resources Harin Lee <me(a)harin.net> ALSA: ctxfi: Add hw parameter to daio_mgr_dao_init() Oleh Konko <security(a)1seal.org> Bluetooth: hci_event: move wake reason storage into validated event handlers David Carlier <devnexen(a)gmail.com> net: ti: icssg-prueth: fix use-after-free of CPPI descriptor in RX path Meghana Malladi <m-malladi(a)ti.com> net: ti: icssg-prueth: Make emac_run_xdp function independent of page Meghana Malladi <m-malladi(a)ti.com> net: ti: icssg-prueth: Add functions to create and destroy Rx/Tx queues Vadim Fedorenko <vadim.fedorenko(a)linux.dev> ti: icssg: convert to ndo_hwtstamp API Larysa Zaremba <larysa.zaremba(a)intel.com> ice: change XDP RxQ frag_size from DMA write length to xdp.frame_sz Larysa Zaremba <larysa.zaremba(a)intel.com> ice: fix rxq info registering in mbuf packets Michal Schmidt <mschmidt(a)redhat.com> ice: fix crash in ethtool offline loopback test Michal Kubiak <michal.kubiak(a)intel.com> ice: drop page splitting and recycling Michal Kubiak <michal.kubiak(a)intel.com> ice: remove legacy Rx and construct SKB Chaitanya Kulkarni <kch(a)nvidia.com> blktrace: fix __this_cpu_read/write in preemptible context Lizhi Hou <lizhi.hou(a)amd.com> accel/amdxdna: Fix NULL pointer dereference of mgmt_chann Haotian Zhang <vulab(a)iscas.ac.cn> PCI: endpoint: Add missing NULL check for alloc_workqueue() Marco Crivellari <marco.crivellari(a)suse.com> PCI: Add WQ_PERCPU to alloc_workqueue() users Lizhi Hou <lizhi.hou(a)amd.com> accel/amdxdna: Fix potential NULL pointer dereference in context cleanup Lizhi Hou <lizhi.hou(a)amd.com> accel/amdxdna: Add hardware specific attributes Lizhi Hou <lizhi.hou(a)amd.com> accel/amdxdna: Enhance runtime power management Hengyu Liang <hengyul(a)cs.unc.edu> ata: libata-scsi: do not lose CHECK CONDITION for failed ATAPI commands Christian Brauner <brauner(a)kernel.org> namespace: handle mount locking for automounts correctly Christian Brauner <brauner(a)kernel.org> namespace: never expire a locked mount Christian Brauner <brauner(a)kernel.org> namespace: refuse an automount below a mount that is in no namespace Christian Brauner <brauner(a)kernel.org> fcntl: refuse F_SET_RW_HINT on an immutable inode Christian Brauner <brauner(a)kernel.org> namei: don't reveal overmounted entries in refwalk Christian Brauner <brauner(a)kernel.org> namespace: unhash a dentry before detaching the mounts on it Christian Brauner <brauner(a)kernel.org> namespace: don't let a pseudo dentry become the root of a mount Christian Brauner <brauner(a)kernel.org> dcache: don't put a mountpoint on a dentry that's being removed Christian Brauner <brauner(a)kernel.org> namespace: check the mounts before reading their parents in pivot_root() Christian Brauner <brauner(a)kernel.org> namespace: remove the fsnotify marks of a mount namespace in process context Christian Brauner <brauner(a)kernel.org> namespace: look at the topmost mount for a mount namespace file Christian Brauner <brauner(a)kernel.org> namespace: check a recursive bind mount for mount namespace loops Christian Brauner <brauner(a)kernel.org> namespace: check a submount for references right before unmounting it Christian Brauner <brauner(a)kernel.org> namespace: queue a mount only once for mount notifications Christian Brauner <brauner(a)kernel.org> namespace: check the target before walking it in do_mount_setattr() Christian Brauner <brauner(a)kernel.org> fs: refuse fspick() on internal superblocks Christian Brauner <brauner(a)kernel.org> namespace: don't copy an unmounted mount tree Christian Brauner <brauner(a)kernel.org> namespace: don't inherit MNT_UMOUNT in clone_mnt() Christian Brauner <brauner(a)kernel.org> namespace: reset the old parent's ->overmount in mnt_change_mountpoint() Christian Brauner <brauner(a)kernel.org> fs: don't silently unmount busy mounts Christian Brauner <brauner(a)kernel.org> mount: keep a copied mount unbindable Leo Li <sunpeng.li(a)amd.com> drm/amd/display: Fix direct scanout alpha on some DRM_FORMATs Jesse Zhang <Jesse.Zhang(a)amd.com> drm/amdgpu/userq: return the memdup_user() error for the user MQD Jesse Zhang <Jesse.Zhang(a)amd.com> drm/amdgpu/userq: only accept doorbell BOs as queue doorbell Mikhail Gavrilov <mikhail.v.gavrilov(a)gmail.com> drm/amdgpu: copy debugfs register data outside the GRBM/SRBM locks Alex Deucher <alexander.deucher(a)amd.com> drm/amdgpu: make Mac FB workaround generic Vitaly Prosyak <vitaly.prosyak(a)amd.com> drm/amdgpu: serialize vblank counter reads against GPU reset Haojie Li <lihaojie(a)kylinos.cn> drm/amdkfd: fix dma_buf reference leak in get_dmabuf_info Saleel Kudchadker <Saleel.Kudchadker(a)amd.com> drm/amdkfd: align SDMA doorbell base for shader doorbell writes Thomas Hellström <thomas.hellstrom(a)linux.intel.com> drm/xe: Fix stale pinned_link entry when fb-pin performs the final unpin Thomas Hellström <thomas.hellstrom(a)linux.intel.com> drm/xe: Fix shrinker accounting double-subtraction on nested external pins Zack Rusin <zack.rusin(a)broadcom.com> drm/vmwgfx: validate pitch coming from userspace Wentao Liang <vulab(a)iscas.ac.cn> drm/vc4: Fix firmware reference leak in vc4_drm_bind() Fan Wu <fanwu01(a)zju.edu.cn> drm/vc4: drain the hangcheck timer and works on V3D unbind Gyeyoung Baek <gye976(a)gmail.com> drm/imagination: Size page table preallocation by device address Krzysztof Karas <krzysztof.karas(a)intel.com> drm/i915/gt: Unmask interrupts only when ACTIVE is true Krzysztof Karas <krzysztof.karas(a)intel.com> drm/i915/gem: Prevent overstepping exec array boundary Sajal Gupta <sajal2005gupta(a)gmail.com> drm/gud: don't keep a connector without a CRTC as connector_state Nguyen Ngoc Thang <ngocthang2710.1999(a)gmail.com> drm/fb-helper: defer setup when fbdev_probe() fails, not just on -EAGAIN Palla Raghunath <raghunathpalla.0209(a)gmail.com> Bluetooth: RFCOMM: Fix NULL tty_dev dereference in rfcomm_dev_shutdown Maxim Skokov <skokovmaksimevg(a)gmail.com> Bluetooth: RFCOMM: free the skb when the DLC has no owner Aldo Ariel Panzardo <qwe.aldo(a)gmail.com> Bluetooth: SCO: serialise sco_conn lifetime against sco_recv_scodata() Iaroslav Voitovych <yaroslav.voytovych(a)gmail.com> Bluetooth: MGMT: Fix status of pending commands flushed on power off Chengfeng Ye <nicoyip.dev(a)gmail.com> Bluetooth: ISO: Serialize concurrent connect calls Chengfeng Ye <nicoyip.dev(a)gmail.com> Bluetooth: ISO: Reject concurrent BIS listener setup Chengfeng Ye <nicoyip.dev(a)gmail.com> Bluetooth: hci_sync: Fix command skb lifetime during scan setup Chengfeng Ye <nicoyip.dev(a)gmail.com> Bluetooth: hci_sock: Serialize dead-device detachment Runyu Xiao <runyu.xiao(a)seu.edu.cn> Bluetooth: btintel_pcie: use managed IRQ teardown Zongmin Zhou <zhouzongmin(a)kylinos.cn> riscv: hwprobe: use _BITULL() rather than BIT() in MIPS vendor uapi header Ziyi Guo <guoziyi114(a)gmail.com> riscv: futex: untag the user pointer before the atomic access Karl Mehltretter <kmehltretter(a)gmail.com> riscv: fix load_unaligned_zeropad() fixup for RV32 Zongmin Zhou <zhouzongmin(a)kylinos.cn> riscv: errata: select RISCV_ALTERNATIVE_EARLY for THEAD GHOSTWRITE Ziyi Guo <guoziyi114(a)gmail.com> riscv: entry: gate shadow call stack reload on sstatus.SPP, not tp Runyu Xiao <runyu.xiao(a)seu.edu.cn> scsi: qedi: Initialize callback state before registration Shawn Lin <shawn.lin(a)rock-chips.com> pmdomain: rockchip: propagate subdomain add errors Shawn Lin <shawn.lin(a)rock-chips.com> pmdomain: rockchip: fix clock leak on domain probe failure Shawn Lin <shawn.lin(a)rock-chips.com> pmdomain: rockchip: don't ignore clock lookup errors on attach Ming Qian <ming.qian(a)oss.nxp.com> pmdomain: imx8m-blk-ctrl: Serialize power on/off across sibling domains Ridham Khurana <khurana.ridham222(a)gmail.com> regulator: tps6594-regulator: Fix n_linear_ranges for TPS65224 BUCK2-4 Abhishek Ojha <Abhishek.ojha(a)savoirfairelinux.com> regulator: ltc3676: don't read the write-only HRST and CLIRQ registers Shao-Fu Chen <shf.chen(a)mediatek.com> optee: register TEE devices only once fully initialized Denis V. Lunev <den(a)openvz.org> openvswitch: fix soft lockup in the netlink flow dump Karl Bonde Torp <k.torp(a)samsung.com> nvme: fix swapped ZRASF zone state values for full and read only Weiming Shi <bestswngs(a)gmail.com> net: team: free skb when broadcast has no txable port Weiming Shi <bestswngs(a)gmail.com> net: team: stop reusing skb after queue override Fredrik Nyberg <fredrik.nyberg(a)volvocars.com> net: usb: ax88179_178a: fix rx frame length for non-last packets Daniel Machon <daniel.machon(a)microchip.com> net: sparx5: free the matchall entry on destroy Josef Bacik <josef(a)toxicpanda.com> net: skbuff: don't leave stale bytes in skb_copy_and_csum_bits() Sebastien Royen <sebastien.royen(a)armadeus.com> net: dsa: microchip: fix KSZ8765 fiber detection Zixuan Chai <petalzu987(a)gmail.com> net: bridge: avoid recursive multicast port cleanup Chengfeng Ye <nicoyip.dev(a)gmail.com> net/smc: protect clcsock lifetime in smc_getname Quchaosheng <quchaosheng000406(a)163.com> net/packet: guard the ll header push in packet_rcv_spkt() Guangshuo Li <lgs201920130244(a)gmail.com> mmc: sdhci-sprd: disable runtime PM on remove Yibo Tan <lhfff(a)tju.edu.cn> mmc: mtk-sd: Cancel request timeout work on remove Guangshuo Li <lgs201920130244(a)gmail.com> mmc: cavium-thunderx: destroy slot platform devices on remove Guangshuo Li <lgs201920130244(a)gmail.com> mmc: cavium-octeon: destroy slot platform devices on remove Mikulas Patocka <mpatocka(a)redhat.com> dm: fix reading free memory in do_resume Ma Xinmeng <1564938642(a)qq.com> dm-snap: reject the transient exception store for snapshot-merge Ben Cressey <ben(a)cressey.dev> dm-integrity: fix buffer overflow in inline mode with large tag size Ben Cressey <ben(a)cressey.dev> dm-crypt: reject the lmk IV mode with AEAD ciphers Mikhail Gavrilov <mikhail.v.gavrilov(a)gmail.com> mm: don't schedule deferred kernel page table freeing while booting Nguyen Ngoc Thang <ngocthang2710.1999(a)gmail.com> memstick: rtsx_usb_ms: complete requests after eject instead of dropping them Raj Ojha <rajojha047(a)gmail.com> memstick: core: wait for request completion before freeing card 성병찬 <tjdqudcks0424(a)naver.com> KEYS: Fix add_key() race with keyring restriction Karl Mehltretter <kmehltretter(a)gmail.com> keys: finalize persistent keyring timeout after link attempt Tristan Madani <tristan(a)talencesecurity.com> ice: fix metadata_dst refcount handling on representor teardown Xuanqiang Luo <luoxuanqiang(a)kylinos.cn> ice: fix use-after-free in dynamic port cleanup Mingming Cao <mmc(a)linux.ibm.com> ibmveth: fix TX LTB and filter unwind on open-fail Mingming Cao <mmc(a)linux.ibm.com> ibmveth: h_free logical LAN on open-fail after register Joshua Washington <joshwash(a)google.com> gve: fix XSK buffer leak on error descriptor Joshua Washington <joshwash(a)google.com> gve: fix XSK buffer leak when rings are stopped Joshua Washington <joshwash(a)google.com> gve: fix napi_disable deadlock when attempting to disable XSK pools Ridham Khurana <khurana.ridham222(a)gmail.com> gpio: xilinx: fix runtime PM leak on request error path Fan Wu <fanwu01(a)zju.edu.cn> gpio: mpsse: fix race when arming the IRQ poll worker Vishal Badole <Vishal.Badole(a)amd.com> EDAC/amd64: Mask UMC chip select to the four implemented selects Hui Peng <benquike(a)gmail.com> sctp: copy zeroed stats to user in sctp_getsockopt_pr_streamstatus() when !streamoute Stephen Smalley <stephen.smalley.work(a)gmail.com> selinux: preserve NATIVE_LABELS on already-initialized sb in set_mnt_opts Christian Göttsche <cgzones(a)googlemail.com> selinux: fix data race on AVC latest_notif Johannes Berg <johannes.berg(a)intel.com> Revert "wifi: libertas: reject short monitor TX frames" Chengfeng Ye <nicoyip.dev(a)gmail.com> tipc: hold a reference to nodes found by link name Yuqi Xu <xuyuqiabc(a)gmail.com> tipc: destroy topsrv workqueues before closing connections Daehyeon Ko <4ncienth(a)gmail.com> tcp: reject net_iov in zerocopy receive mapping hints Marek Szyprowski <m.szyprowski(a)samsung.com> swiotlb: fix default_swiotlb_limit() for non-growable default pool Sabrina Dubroca <sd(a)queasysnail.net> strparser: make sure __strp_recv isn't running before tearing down the parser Georgiy Osokin <g.osokin(a)auroraos.dev> tee: shm: reject zero-sized allocations in tee_dyn_shm_alloc_helper() Josef Bacik <josef(a)toxicpanda.com> xen/netfront: don't leak the skb when xennet_fill_frags() fails Pavankumar Kondeti <pavan.kondeti(a)oss.qualcomm.com> workqueue: Fix NULL current_pwq deref in chained work check Jason A. Donenfeld <Jason(a)zx2c4.com> wireguard: noise: reject response consumption after intermediate initiation Ramses de Norre <ramses(a)well-founded.dev> wireguard: queueing: preserve tstamp_type when encapsulating packet Lu Huang <huanglu(a)kylinos.cn> wifi: mt76: mt7996: fix uninitialized buf read in mt7996_variant_fem_init() Cristian Papa <pcristian292(a)gmail.com> wifi: mt76: mt7603: initialize global station WCID Michele Dionisio <michele.dionisio(a)gmail.com> wifi: brcmfmac: fix P2P device removal race in brcmf_detach() Daehyeon Ko <4ncienth(a)gmail.com> vsock/virtio: account only unread bytes in read_skb() Ji-Ze Hong (Peter Hong) <peter_hong(a)fintek.com.tw> usb: f81604: fix struct f81604_int_data size mismatch Palla Raghunath <raghunathpalla.0209(a)gmail.com> dm ioctl: don't let data_start run past the buffer Daehyeon Ko <4ncienth(a)gmail.com> cipso: adjust cached option offsets when removing CIPSO Waiman Long <longman(a)redhat.com> cgroup/cpuset: Handle cpu hotplug race in guarantee_active_cpus() Wentao Liang <vulab(a)iscas.ac.cn> btrfs: scrub: fix local_root reference leak in scrub_print_warning_inode() Michael Garland <minimelkav(a)gmail.com> ASoC: amd: yc: Add DMI quirk for Acer Aspire Go 15 (AG15-21P) Karl Mehltretter <kmehltretter(a)gmail.com> arm64: irq: exclude the softirq stack switch from KCOV Mohamed Yassine Jebabli <med.jebabli(a)gmail.com> ALSA: hda/tas2781: Accept V1 calibration data without CRC Harin Lee <me(a)harin.net> ALSA: ctxfi: Fix memory leakage when clearing DAO input mappers Krzysztof Furman <krisfur(a)proton.me> Input: xpad - add support for Corsair Novablade Pro Bihaan Sen <stevewholikesthings(a)gmail.com> Input: xpad - add support for 8BitDo Pro 2 Wired Controller for Xbox Haotian Zhang <vulab(a)iscas.ac.cn> Input: ati_remote2 - fix type confusion in device attribute handlers Daehyeon Ko <4ncienth(a)gmail.com> ipv6: do not warn on route notification size race Daehyeon Ko <4ncienth(a)gmail.com> ipv4: do not warn on route notification size race Daehyeon Ko <4ncienth(a)gmail.com> ipv4: stop route notification sizing when nexthop group shrinks Daehyeon Ko <4ncienth(a)gmail.com> ipv4: stop exception dump when nexthop group shrinks Daehyeon Ko <4ncienth(a)gmail.com> ipv4: stop PMTU walk when nexthop group shrinks Alice Ryhl <aliceryhl(a)google.com> rust_binder: reschedule node refcount update on thread exit Michael S. Tsirkin <mst(a)redhat.com> ipv4: validate checksum_start before completing checksum Ido Schimmel <idosch(a)nvidia.com> ipv6: Fix redirect exception creation for UDP/RAW sockets Eric Biggers <ebiggers(a)kernel.org> crypto: drbg - Fix ineffective sanity check Daniel Golle <daniel(a)makrotopia.org> net: dsa: mt7530: fix .get_stats64 sleeping in atomic context Chao Yu <chao(a)kernel.org> f2fs: fix to reset all pinned status during fggc Chao Yu <chao(a)kernel.org> f2fs: fix to shrink gc_lock coverage in f2fs_gc_range() Eva Crystal <0xiviel(a)gmail.com> accel/amdxdna: Bound the sync_bo flush range to the BO size Donald Hunter <donald.hunter(a)gmail.com> ynl: fix schema check errors Remy D. Farley <one-d-wide(a)protonmail.com> doc/netlink: netlink-raw: Add max check Paulo Alcantara <pc(a)manguebit.org> netfs: zero the tail of a short DIO/unbuffered read Dipayaan Roy <dipayanroy(a)linux.microsoft.com> net: mana: Skip WQ object destruction for uninitialized RXQ Dipayaan Roy <dipayanroy(a)linux.microsoft.com> net: mana: check xdp_rxq registration before unreg in mana_destroy_rxq() Jerome Tollet <jtollet(a)cisco.com> net/mlx5e: Prevent stale XSK buffer release on MPWQE refill retry Jerome Tollet <jtollet(a)cisco.com> net/mlx5e: Prevent stale XSK buffer release on refill retry Matthew Wilcox (Oracle) <willy(a)infradead.org> fs: Free any excess xarray nodes in clear_inode() Eric Dumazet <edumazet(a)kernel.org> bnxt_en: fix DMA mapping length for padded small packets ------------- Diffstat: Documentation/driver-api/driver-model/devres.rst | 4 + Documentation/netlink/netlink-raw.yaml | 11 +- Documentation/netlink/specs/conntrack.yaml | 2 +- Documentation/netlink/specs/nftables.yaml | 2 +- Documentation/networking/af_xdp.rst | 54 +- Documentation/networking/strparser.rst | 2 +- Makefile | 4 +- arch/arm64/boot/dts/freescale/fsl-lx2160a.dtsi | 19 +- arch/arm64/include/asm/el2_setup.h | 5 +- arch/arm64/include/asm/kvm_host.h | 2 +- arch/arm64/kernel/Makefile | 3 + arch/arm64/kernel/ptrace.c | 50 ++ arch/arm64/kvm/hyp/include/hyp/switch.h | 16 +- arch/arm64/kvm/nested.c | 4 + arch/arm64/kvm/sys_regs.c | 11 +- arch/arm64/kvm/vgic/vgic-its.c | 24 +- arch/arm64/kvm/vgic/vgic.c | 18 +- arch/loongarch/include/asm/kvm_host.h | 8 + arch/loongarch/include/asm/loongarch.h | 2 + arch/loongarch/kvm/intc/pch_pic.c | 3 + arch/loongarch/kvm/vm.c | 40 +- arch/loongarch/net/bpf_jit.c | 8 +- arch/powerpc/include/asm/book3s/64/pgtable.h | 15 + arch/powerpc/include/asm/xive.h | 4 +- arch/powerpc/kernel/iommu.c | 5 +- arch/powerpc/mm/book3s64/pgtable.c | 13 +- arch/powerpc/platforms/powernv/smp.c | 8 +- arch/powerpc/platforms/pseries/papr-hvpipe.c | 59 +-- arch/powerpc/platforms/pseries/smp.c | 8 +- arch/powerpc/sysdev/xive/common.c | 10 +- arch/riscv/Kconfig.errata | 1 + arch/riscv/include/asm/futex.h | 2 + arch/riscv/include/asm/scs.h | 17 +- arch/riscv/include/asm/vector.h | 8 +- arch/riscv/include/uapi/asm/vendor/mips.h | 4 +- arch/riscv/kernel/entry.S | 2 +- arch/riscv/kvm/vcpu_pmu.c | 28 +- arch/riscv/mm/extable.c | 4 +- arch/s390/net/bpf_jit_comp.c | 11 + arch/x86/include/asm/cpufeatures.h | 4 + arch/x86/include/asm/kvm-x86-ops.h | 4 + arch/x86/include/asm/kvm_host.h | 6 + arch/x86/include/asm/tlb.h | 6 + arch/x86/kernel/cpu/amd.c | 4 + arch/x86/kernel/uprobes.c | 294 ++++++++--- arch/x86/kvm/mmu/mmu.c | 5 + arch/x86/kvm/svm/nested.c | 10 +- arch/x86/kvm/svm/sev.c | 80 ++- arch/x86/kvm/svm/svm.c | 13 +- arch/x86/kvm/svm/svm.h | 8 +- arch/x86/kvm/x86.c | 6 + block/bfq-cgroup.c | 9 +- block/blk-cgroup.h | 2 + block/blk-iocost.c | 21 +- block/blk-iolatency.c | 19 +- block/blk-throttle.c | 15 +- crypto/af_alg.c | 2 +- crypto/drbg.c | 11 +- drivers/accel/amdxdna/Makefile | 1 + drivers/accel/amdxdna/aie2_ctx.c | 76 ++- drivers/accel/amdxdna/aie2_message.c | 93 ++-- drivers/accel/amdxdna/aie2_pci.c | 88 ++-- drivers/accel/amdxdna/aie2_pci.h | 8 +- drivers/accel/amdxdna/aie2_pm.c | 17 +- drivers/accel/amdxdna/aie2_smu.c | 12 + drivers/accel/amdxdna/amdxdna_ctx.c | 98 ++-- drivers/accel/amdxdna/amdxdna_ctx.h | 3 + drivers/accel/amdxdna/amdxdna_gem.c | 97 ++-- drivers/accel/amdxdna/amdxdna_gem.h | 1 - drivers/accel/amdxdna/amdxdna_mailbox.c | 13 +- drivers/accel/amdxdna/amdxdna_pci_drv.c | 56 +- drivers/accel/amdxdna/amdxdna_pci_drv.h | 1 + drivers/accel/amdxdna/amdxdna_pm.c | 76 +++ drivers/accel/amdxdna/amdxdna_pm.h | 18 + drivers/accel/amdxdna/npu1_regs.c | 1 + drivers/accel/amdxdna/npu2_regs.c | 1 + drivers/accel/amdxdna/npu4_regs.c | 1 + drivers/accel/amdxdna/npu5_regs.c | 1 + drivers/accel/amdxdna/npu6_regs.c | 1 + drivers/acpi/bus.c | 54 +- drivers/acpi/button.c | 132 ++--- drivers/acpi/scan.c | 19 +- drivers/android/binder/node.rs | 20 +- drivers/android/binder/node/wrapper.rs | 34 +- drivers/ata/libata-core.c | 7 + drivers/ata/libata-scsi.c | 10 +- drivers/block/drbd/drbd_receiver.c | 4 +- drivers/block/ublk_drv.c | 103 ++-- drivers/block/zloop.c | 31 +- drivers/block/zram/zram_drv.c | 7 +- drivers/bluetooth/btintel_pcie.c | 17 +- drivers/clocksource/samsung_pwm_timer.c | 22 +- drivers/cxl/core/features.c | 3 + drivers/cxl/core/mbox.c | 1 + drivers/cxl/core/port.c | 2 +- drivers/cxl/core/region.c | 12 +- drivers/cxl/cxl.h | 4 +- drivers/dma/idxd/init.c | 36 +- drivers/dma/xilinx/xilinx_dma.c | 14 +- drivers/dpll/dpll_core.c | 12 +- drivers/dpll/dpll_netlink.c | 68 ++- drivers/edac/amd64_edac.c | 4 +- drivers/firmware/arm_scmi/bus.c | 95 ++-- drivers/firmware/arm_scmi/driver.c | 4 - drivers/firmware/xilinx/zynqmp.c | 68 ++- drivers/gpio/gpio-exar.c | 2 +- drivers/gpio/gpio-mpsse.c | 24 +- drivers/gpio/gpio-pca953x.c | 20 +- drivers/gpio/gpio-xilinx.c | 9 +- drivers/gpu/drm/amd/amdgpu/amdgpu_amdkfd.c | 8 +- drivers/gpu/drm/amd/amdgpu/amdgpu_debugfs.c | 77 +-- drivers/gpu/drm/amd/amdgpu/amdgpu_device.c | 25 + drivers/gpu/drm/amd/amdgpu/amdgpu_gmc.c | 17 +- drivers/gpu/drm/amd/amdgpu/amdgpu_hmm.c | 14 +- drivers/gpu/drm/amd/amdgpu/amdgpu_kms.c | 5 + drivers/gpu/drm/amd/amdgpu/amdgpu_ttm.c | 25 +- drivers/gpu/drm/amd/amdgpu/amdgpu_userq.c | 13 +- drivers/gpu/drm/amd/amdgpu/gfx_v12_0.c | 13 +- drivers/gpu/drm/amd/amdgpu/mes_userqueue.c | 91 ++-- drivers/gpu/drm/amd/amdkfd/kfd_crat.c | 17 + .../gpu/drm/amd/amdkfd/kfd_device_queue_manager.c | 32 +- drivers/gpu/drm/amd/amdkfd/kfd_priv.h | 7 + drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm.c | 7 +- drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm.h | 3 +- .../gpu/drm/amd/display/amdgpu_dm/amdgpu_dm_crc.c | 25 +- .../gpu/drm/amd/display/amdgpu_dm/amdgpu_dm_crtc.c | 8 +- .../gpu/drm/amd/display/amdgpu_dm/amdgpu_dm_hdcp.c | 10 +- .../gpu/drm/amd/display/amdgpu_dm/amdgpu_dm_hdcp.h | 8 +- .../gpu/drm/amd/display/amdgpu_dm/amdgpu_dm_irq.c | 2 + .../drm/amd/display/amdgpu_dm/amdgpu_dm_plane.c | 32 +- .../drm/amd/display/amdgpu_dm/amdgpu_dm_replay.c | 7 + drivers/gpu/drm/amd/display/dc/core/dc.c | 35 +- .../gpu/drm/amd/display/dc/core/dc_hw_sequencer.c | 24 +- .../drm/amd/display/dc/dml2/dml21/dml21_utils.c | 15 +- .../dml21/src/dml2_core/dml2_core_dcn4_calcs.c | 31 +- .../drm/amd/display/dc/hwss/dcn35/dcn35_hwseq.c | 52 ++ .../drm/amd/display/dc/hwss/dcn35/dcn35_hwseq.h | 4 + .../gpu/drm/amd/display/dc/hwss/dcn35/dcn35_init.c | 2 +- .../drm/amd/display/dc/hwss/dcn401/dcn401_hwseq.c | 18 +- .../drm/amd/display/dc/hwss/dcn401/dcn401_hwseq.h | 4 +- .../drm/amd/display/dc/hwss/dcn401/dcn401_init.c | 4 +- drivers/gpu/drm/amd/display/dc/hwss/hw_sequencer.h | 10 +- .../amd/display/dc/resource/dcn32/dcn32_resource.c | 8 +- drivers/gpu/drm/aspeed/aspeed_gfx_drv.c | 5 +- drivers/gpu/drm/display/drm_dp_helper.c | 4 +- drivers/gpu/drm/drm_fb_helper.c | 6 +- drivers/gpu/drm/gud/gud_pipe.c | 1 + drivers/gpu/drm/i915/gem/i915_gem_execbuffer.c | 2 +- .../gpu/drm/i915/gt/intel_execlists_submission.c | 19 +- drivers/gpu/drm/i915/gt/intel_rps.c | 3 +- drivers/gpu/drm/imagination/pvr_mmu.c | 25 +- drivers/gpu/drm/imagination/pvr_vm.c | 8 +- drivers/gpu/drm/msm/adreno/a6xx_gpu.c | 5 +- drivers/gpu/drm/panthor/panthor_mmu.c | 9 + drivers/gpu/drm/panthor/panthor_sched.c | 37 +- drivers/gpu/drm/ttm/ttm_bo.c | 16 +- drivers/gpu/drm/ttm/ttm_bo_util.c | 11 +- drivers/gpu/drm/ttm/ttm_resource.c | 13 + drivers/gpu/drm/vc4/vc4_bo.c | 1 + drivers/gpu/drm/vc4/vc4_drv.c | 5 +- drivers/gpu/drm/vc4/vc4_drv.h | 2 +- drivers/gpu/drm/vc4/vc4_gem.c | 8 +- drivers/gpu/drm/vc4/vc4_irq.c | 6 +- drivers/gpu/drm/vc4/vc4_v3d.c | 52 +- drivers/gpu/drm/vc4/vc4_validate.c | 2 +- drivers/gpu/drm/vmwgfx/vmwgfx_cursor_plane.c | 26 +- drivers/gpu/drm/xe/display/xe_fb_pin.c | 6 +- drivers/gpu/drm/xe/xe_bo.c | 139 +++-- drivers/gpu/drm/xe/xe_bo.h | 2 + drivers/gpu/drm/xe/xe_device.c | 2 +- drivers/gpu/drm/xe/xe_device_types.h | 2 +- drivers/gpu/drm/xe/xe_guc_exec_queue_types.h | 5 + drivers/gpu/drm/xe/xe_guc_submit.c | 74 ++- drivers/gpu/drm/xe/xe_guc_types.h | 2 - drivers/gpu/drm/xe/xe_migrate.c | 17 +- drivers/gpu/drm/xe/xe_migrate.h | 3 +- drivers/gpu/drm/xe/xe_mmio.c | 5 +- drivers/gpu/drm/xe/xe_module.c | 49 ++ drivers/gpu/drm/xe/xe_module.h | 5 + drivers/gpu/drm/xe/xe_pci.c | 6 + drivers/gpu/drm/xe/xe_sriov_vf_ccs.c | 14 +- drivers/hid/hid-logitech-hidpp.c | 23 +- drivers/hid/hid-steam.c | 252 +++++---- drivers/hv/Makefile | 2 +- drivers/hv/mshv_regions.c | 177 +++++++ drivers/hv/mshv_root.h | 10 + drivers/hv/mshv_root_main.c | 225 ++------ drivers/hwtracing/coresight/coresight-etm4x-core.c | 51 +- drivers/i3c/master/mipi-i3c-hci/core.c | 37 +- drivers/i3c/master/mipi-i3c-hci/dma.c | 12 +- drivers/i3c/master/mipi-i3c-hci/hci.h | 1 + drivers/i3c/master/mipi-i3c-hci/ibi.h | 13 +- drivers/i3c/master/mipi-i3c-hci/pio.c | 7 +- drivers/infiniband/hw/bnxt_re/ib_verbs.c | 9 +- drivers/infiniband/hw/bnxt_re/qplib_sp.h | 1 + drivers/infiniband/hw/cxgb4/mem.c | 46 +- drivers/infiniband/hw/erdma/erdma_cm.c | 4 +- drivers/infiniband/sw/rdmavt/vt.c | 4 +- drivers/infiniband/sw/siw/siw_cm.c | 6 +- drivers/input/joystick/xpad.c | 4 + drivers/input/misc/ati_remote2.c | 12 +- drivers/iommu/amd/iommu.c | 11 +- drivers/iommu/apple-dart.c | 9 +- .../iommu/arm/arm-smmu-v3/arm-smmu-v3-iommufd.c | 5 +- drivers/iommu/arm/arm-smmu-v3/arm-smmu-v3.c | 31 +- drivers/iommu/arm/arm-smmu-v3/tegra241-cmdqv.c | 54 +- drivers/iommu/arm/arm-smmu/arm-smmu.c | 9 +- drivers/iommu/arm/arm-smmu/qcom_iommu.c | 11 +- drivers/iommu/dma-iommu.c | 2 +- drivers/iommu/exynos-iommu.c | 11 +- drivers/iommu/fsl_pamu_domain.c | 12 +- drivers/iommu/intel/iommu.c | 23 +- drivers/iommu/intel/nested.c | 2 +- drivers/iommu/iommu.c | 25 +- drivers/iommu/iommufd/selftest.c | 2 +- drivers/iommu/ipmmu-vmsa.c | 10 +- drivers/iommu/msm_iommu.c | 11 +- drivers/iommu/mtk_iommu.c | 8 +- drivers/iommu/mtk_iommu_v1.c | 7 +- drivers/iommu/omap-iommu.c | 12 +- drivers/iommu/riscv/iommu.c | 111 ++-- drivers/iommu/rockchip-iommu.c | 20 +- drivers/iommu/s390-iommu.c | 13 +- drivers/iommu/sprd-iommu.c | 3 +- drivers/iommu/sun50i-iommu.c | 8 +- drivers/iommu/tegra-smmu.c | 10 +- drivers/iommu/virtio-iommu.c | 6 +- drivers/irqchip/irq-gic-v5-irs.c | 14 + drivers/isdn/mISDN/l1oip_core.c | 2 +- drivers/isdn/mISDN/socket.c | 4 +- drivers/md/dm-crypt.c | 7 +- drivers/md/dm-integrity.c | 4 +- drivers/md/dm-ioctl.c | 14 +- drivers/md/dm-pcache/cache.c | 4 + drivers/md/dm-pcache/cache.h | 14 + drivers/md/dm-pcache/cache_gc.c | 16 +- drivers/md/dm-pcache/cache_key.c | 11 + drivers/md/dm-pcache/cache_writeback.c | 20 +- drivers/md/dm-snap.c | 14 + drivers/md/md-bitmap.c | 9 +- drivers/md/md-bitmap.h | 2 +- drivers/md/md-linear.c | 1 + drivers/md/md-llbitmap.c | 10 +- drivers/md/md.c | 39 +- drivers/md/md.h | 5 + drivers/md/raid0.c | 1 + drivers/md/raid1-10.c | 8 +- drivers/md/raid1.c | 116 ++-- drivers/md/raid10.c | 143 ++--- drivers/md/raid5.c | 12 - .../platform/chips-media/wave5/wave5-vpu-dec.c | 19 + drivers/media/platform/qcom/iris/iris_ctrls.c | 2 +- .../platform/qcom/iris/iris_platform_common.h | 4 +- .../media/platform/qcom/iris/iris_platform_gen2.c | 4 +- .../platform/qcom/iris/iris_platform_qcs8300.h | 4 +- .../platform/qcom/iris/iris_platform_sm8250.c | 4 +- drivers/media/platform/qcom/iris/iris_vdec.c | 6 - drivers/media/platform/qcom/iris/iris_vdec.h | 1 - drivers/media/platform/qcom/iris/iris_venc.c | 6 - drivers/media/platform/qcom/iris/iris_venc.h | 1 - drivers/media/platform/qcom/iris/iris_vidc.c | 6 +- drivers/media/platform/verisilicon/hantro.h | 2 + drivers/media/platform/verisilicon/hantro_drv.c | 42 +- drivers/media/platform/verisilicon/imx8m_vpu_hw.c | 8 + drivers/media/v4l2-core/v4l2-mem2mem.c | 23 + drivers/memstick/core/memstick.c | 8 +- drivers/memstick/host/rtsx_usb_ms.c | 31 +- drivers/mmc/host/cavium-octeon.c | 5 +- drivers/mmc/host/cavium-thunderx.c | 5 +- drivers/mmc/host/mtk-sd.c | 1 + drivers/mmc/host/sdhci-sprd.c | 4 + drivers/net/amt.c | 48 +- drivers/net/can/dev/skb.c | 2 + drivers/net/can/usb/f81604.c | 2 +- drivers/net/dsa/microchip/ksz_common.h | 2 +- drivers/net/dsa/mt7530.c | 75 ++- drivers/net/dsa/mt7530.h | 8 + drivers/net/ethernet/broadcom/bnxt/bnxt.c | 346 +++++++----- drivers/net/ethernet/broadcom/bnxt/bnxt.h | 23 +- drivers/net/ethernet/broadcom/bnxt/bnxt_devlink.c | 8 +- drivers/net/ethernet/broadcom/bnxt/bnxt_ethtool.c | 2 +- drivers/net/ethernet/broadcom/bnxt/bnxt_ulp.c | 350 +++++++----- drivers/net/ethernet/broadcom/genet/bcmgenet_wol.c | 11 + drivers/net/ethernet/cavium/liquidio/lio_main.c | 27 - .../net/ethernet/cavium/liquidio/octeon_device.h | 3 - .../net/ethernet/cavium/liquidio/octeon_mailbox.c | 33 +- .../chelsio/inline_crypto/ch_ktls/chcr_ktls.c | 4 +- drivers/net/ethernet/google/gve/gve_main.c | 8 +- drivers/net/ethernet/google/gve/gve_rx_dqo.c | 13 +- drivers/net/ethernet/ibm/ibmveth.c | 22 +- drivers/net/ethernet/intel/ice/devlink/port.c | 2 +- drivers/net/ethernet/intel/ice/ice.h | 7 +- drivers/net/ethernet/intel/ice/ice_base.c | 79 +-- drivers/net/ethernet/intel/ice/ice_dcb_lib.c | 2 +- drivers/net/ethernet/intel/ice/ice_eswitch.c | 2 +- drivers/net/ethernet/intel/ice/ice_ethtool.c | 11 +- drivers/net/ethernet/intel/ice/ice_lib.c | 19 +- drivers/net/ethernet/intel/ice/ice_main.c | 11 +- drivers/net/ethernet/intel/ice/ice_txrx.c | 266 ++-------- drivers/net/ethernet/intel/ice/ice_txrx.h | 149 ++---- drivers/net/ethernet/intel/ice/ice_xsk.c | 75 +-- drivers/net/ethernet/intel/ice/virt/queues.c | 6 +- drivers/net/ethernet/intel/idpf/idpf_dev.c | 2 +- drivers/net/ethernet/intel/idpf/idpf_vf_dev.c | 2 +- drivers/net/ethernet/intel/idpf/idpf_virtchnl.c | 12 +- drivers/net/ethernet/intel/idpf/idpf_virtchnl.h | 2 +- drivers/net/ethernet/intel/ixgbe/ixgbe_main.c | 3 +- drivers/net/ethernet/marvell/octeontx2/af/cgx.c | 12 + drivers/net/ethernet/marvell/octeontx2/af/cgx.h | 1 + .../net/ethernet/marvell/octeontx2/af/cn20k/api.h | 1 + .../marvell/octeontx2/af/cn20k/mbox_init.c | 21 +- drivers/net/ethernet/marvell/octeontx2/af/rvu.c | 39 +- drivers/net/ethernet/marvell/octeontx2/af/rvu.h | 2 + .../net/ethernet/marvell/octeontx2/af/rvu_cgx.c | 79 +++ .../net/ethernet/marvell/octeontx2/af/rvu_nix.c | 22 +- .../net/ethernet/marvell/octeontx2/af/rvu_npc.c | 29 +- .../net/ethernet/mellanox/mlx5/core/en/xsk/rx.c | 2 + drivers/net/ethernet/mellanox/mlx5/core/en_rx.c | 13 +- .../ethernet/mellanox/mlx5/core/esw/adj_vport.c | 20 - drivers/net/ethernet/mellanox/mlx5/core/lag/lag.c | 2 +- drivers/net/ethernet/mellanox/mlx5/core/vport.c | 24 - drivers/net/ethernet/mellanox/mlxsw/spectrum.h | 2 + drivers/net/ethernet/mellanox/mlxsw/spectrum_acl.c | 10 +- .../net/ethernet/mellanox/mlxsw/spectrum_flower.c | 9 +- drivers/net/ethernet/microchip/sparx5/sparx5_ptp.c | 28 +- .../ethernet/microchip/sparx5/sparx5_tc_matchall.c | 1 + drivers/net/ethernet/microsoft/mana/gdma_main.c | 19 + drivers/net/ethernet/microsoft/mana/mana_en.c | 7 +- drivers/net/ethernet/stmicro/stmmac/stmmac_main.c | 67 ++- drivers/net/ethernet/ti/icssg/icssg_common.c | 86 ++- drivers/net/ethernet/ti/icssg/icssg_prueth.c | 184 ++++--- drivers/net/ethernet/ti/icssg/icssg_prueth.h | 17 +- drivers/net/ethernet/ti/icssg/icssg_prueth_sr1.c | 4 +- drivers/net/ovpn/crypto.c | 10 +- drivers/net/ovpn/crypto.h | 4 +- drivers/net/ovpn/crypto_aead.c | 19 +- drivers/net/ovpn/crypto_aead.h | 1 - drivers/net/pfcp.c | 7 + drivers/net/ppp/pptp.c | 4 +- drivers/net/team/team_core.c | 16 +- drivers/net/team/team_mode_broadcast.c | 2 + drivers/net/usb/ax88179_178a.c | 6 +- drivers/net/veth.c | 1 + drivers/net/virtio_net.c | 14 + drivers/net/vxlan/vxlan_core.c | 20 +- drivers/net/wan/hdlc_ppp.c | 4 +- drivers/net/wireguard/noise.c | 7 +- drivers/net/wireguard/queueing.h | 2 + drivers/net/wireless/ath/ath12k/core.c | 33 +- drivers/net/wireless/ath/ath12k/core.h | 3 - drivers/net/wireless/ath/ath12k/dp_rx.c | 4 +- drivers/net/wireless/ath/ath12k/hif.h | 9 - drivers/net/wireless/ath/ath12k/mac.c | 7 +- drivers/net/wireless/ath/ath12k/pci.c | 8 - drivers/net/wireless/ath/ath12k/wmi.c | 16 + .../wireless/broadcom/brcm80211/brcmfmac/core.c | 27 +- .../net/wireless/broadcom/brcm80211/brcmfmac/p2p.c | 4 + drivers/net/wireless/marvell/libertas/tx.c | 7 - drivers/net/wireless/mediatek/mt76/channel.c | 98 ++-- drivers/net/wireless/mediatek/mt76/mt76.h | 10 + drivers/net/wireless/mediatek/mt76/mt7603/init.c | 1 + .../net/wireless/mediatek/mt76/mt76_connac_mcu.h | 1 + drivers/net/wireless/mediatek/mt76/mt7915/init.c | 8 + drivers/net/wireless/mediatek/mt76/mt7915/main.c | 2 + drivers/net/wireless/mediatek/mt76/mt7921/main.c | 3 + drivers/net/wireless/mediatek/mt76/mt7925/mac.c | 3 +- drivers/net/wireless/mediatek/mt76/mt7925/main.c | 48 +- .../net/wireless/mediatek/mt76/mt792x_acpi_sar.c | 134 +++-- .../net/wireless/mediatek/mt76/mt792x_acpi_sar.h | 2 + drivers/net/wireless/mediatek/mt76/mt7996/init.c | 4 +- drivers/net/wireless/mediatek/mt76/mt7996/mac.c | 3 + drivers/net/wireless/mediatek/mt76/mt7996/main.c | 1 + drivers/net/wireless/mediatek/mt76/mt7996/mcu.h | 3 + drivers/net/wireless/mediatek/mt76/tx.c | 101 +++- drivers/net/xen-netfront.c | 4 +- drivers/ntb/ntb_transport.c | 18 +- drivers/nvme/host/pci.c | 28 +- drivers/nvme/host/tcp.c | 2 +- drivers/nvme/target/admin-cmd.c | 12 +- drivers/nvme/target/core.c | 59 ++- drivers/nvme/target/fabrics-cmd.c | 2 +- drivers/nvme/target/nvmet.h | 6 + drivers/nvme/target/pci-epf.c | 2 +- drivers/nvme/target/pr.c | 4 + drivers/nvme/target/tcp.c | 2 +- drivers/pci/endpoint/functions/pci-epf-mhi.c | 2 +- drivers/pci/endpoint/functions/pci-epf-ntb.c | 9 +- drivers/pci/endpoint/functions/pci-epf-test.c | 2 +- drivers/pci/endpoint/functions/pci-epf-vntb.c | 9 +- drivers/pci/hotplug/pnv_php.c | 2 +- drivers/pci/hotplug/shpchp_core.c | 3 +- drivers/pci/pci-driver.c | 192 ++++--- drivers/pci/pci-sysfs.c | 15 + drivers/pci/pci.h | 41 +- drivers/pci/search.c | 8 +- drivers/pinctrl/mediatek/pinctrl-moore.c | 6 +- drivers/pinctrl/mediatek/pinctrl-mtk-common.c | 14 +- drivers/pinctrl/mediatek/pinctrl-paris.c | 2 +- drivers/pinctrl/pinctrl-zynqmp.c | 7 +- drivers/platform/x86/asus-wmi.c | 6 +- drivers/platform/x86/dell/dell-wmi-base.c | 2 +- drivers/pmdomain/imx/imx8m-blk-ctrl.c | 15 + drivers/pmdomain/rockchip/pm-domains.c | 20 +- drivers/power/supply/max77705_charger.c | 30 +- drivers/ptp/ptp_ocp.c | 38 +- drivers/pwm/pwm-samsung.c | 22 +- drivers/regulator/ltc3676.c | 15 +- drivers/regulator/of_regulator.c | 26 +- drivers/regulator/tps6594-regulator.c | 6 +- drivers/remoteproc/qcom_wcnss.c | 23 +- drivers/s390/crypto/zcrypt_api.c | 38 +- drivers/s390/crypto/zcrypt_msgtype6.c | 431 ++++++++++----- drivers/s390/crypto/zcrypt_msgtype6.h | 51 +- drivers/scsi/ch.c | 4 +- drivers/scsi/qedi/qedi_main.c | 3 +- drivers/scsi/qla2xxx/qla_iocb.c | 2 - drivers/scsi/scsi_error.c | 6 +- drivers/scsi/scsi_sysfs.c | 77 ++- drivers/scsi/sd.c | 213 ++++---- drivers/scsi/ses.c | 4 +- drivers/scsi/sr.c | 4 +- drivers/scsi/st.c | 4 +- drivers/soc/aspeed/aspeed-lpc-snoop.c | 29 +- drivers/soc/tegra/pmc.c | 104 ++-- drivers/soc/xilinx/xlnx_event_manager.c | 8 +- drivers/soc/xilinx/zynqmp_power.c | 53 +- drivers/spi/spi-sg2044-nor.c | 60 ++- drivers/staging/greybus/raw.c | 67 ++- drivers/target/iscsi/iscsi_target_login.c | 2 +- drivers/tee/optee/ffa_abi.c | 41 +- drivers/tee/optee/optee_msg.h | 50 +- drivers/tee/optee/optee_private.h | 120 +++-- drivers/tee/optee/smc_abi.c | 17 +- drivers/tee/tee_shm.c | 4 + drivers/thermal/thermal_hwmon.c | 89 ++-- drivers/tty/serial/serial_core.c | 33 +- drivers/tty/tty_io.c | 2 +- drivers/ufs/core/ufshcd-priv.h | 14 +- drivers/ufs/core/ufshcd.c | 40 +- drivers/usb/gadget/function/f_uac1.c | 13 +- drivers/usb/gadget/function/f_uac2.c | 13 +- drivers/vdpa/mlx5/core/mlx5_vdpa.h | 2 + drivers/vdpa/mlx5/core/mr.c | 5 +- drivers/vdpa/mlx5/core/resources.c | 11 +- drivers/vdpa/vdpa_sim/vdpa_sim.c | 14 +- drivers/vdpa/vdpa_user/iova_domain.c | 11 +- drivers/vdpa/vdpa_user/vduse_dev.c | 4 +- drivers/vhost/iotlb.c | 47 +- drivers/vhost/net.c | 2 + drivers/vhost/vdpa.c | 9 +- drivers/vhost/vhost.c | 65 ++- drivers/vhost/vhost.h | 1 + drivers/vhost/vsock.c | 2 + drivers/video/fbdev/core/fb_chrdev.c | 6 +- drivers/video/fbdev/core/fbcon.c | 2 - drivers/video/fbdev/core/fbmem.c | 13 + drivers/video/fbdev/core/fbsysfs.c | 4 +- drivers/video/fbdev/omap2/omapfb/omapfb-main.c | 11 +- drivers/video/fbdev/ps3fb.c | 5 +- drivers/video/fbdev/sh_mobile_lcdcfb.c | 5 +- drivers/virtio/virtio_ring.c | 19 +- drivers/xen/pvcalls-back.c | 2 +- drivers/xen/pvcalls-front.c | 88 +++- fs/afs/Makefile | 1 + fs/afs/dir.c | 68 +-- fs/afs/fsclient.c | 4 +- fs/afs/inode.c | 96 +--- fs/afs/internal.h | 34 +- fs/afs/rxrpc.c | 6 +- fs/afs/symlink.c | 278 ++++++++++ fs/afs/validation.c | 14 +- fs/afs/yfsclient.c | 4 +- fs/btrfs/acl.c | 29 +- fs/btrfs/bio.c | 8 +- fs/btrfs/block-group.c | 2 +- fs/btrfs/block-rsv.c | 19 +- fs/btrfs/delayed-inode.c | 15 +- fs/btrfs/disk-io.c | 82 ++- fs/btrfs/extent-tree.c | 52 +- fs/btrfs/extent-tree.h | 3 +- fs/btrfs/extent_io.c | 162 ++++-- fs/btrfs/extent_io.h | 6 + fs/btrfs/fs.h | 27 +- fs/btrfs/inode.c | 7 +- fs/btrfs/ioctl.c | 50 +- fs/btrfs/lzo.c | 14 +- fs/btrfs/qgroup.c | 3 +- fs/btrfs/raid-stripe-tree.c | 14 +- fs/btrfs/reflink.c | 7 +- fs/btrfs/relocation.c | 34 +- fs/btrfs/scrub.c | 4 +- fs/btrfs/send.c | 50 +- fs/btrfs/super.c | 3 +- fs/btrfs/tests/extent-io-tests.c | 3 +- fs/btrfs/tests/extent-map-tests.c | 6 +- fs/btrfs/tree-log.c | 43 +- fs/btrfs/volumes.c | 28 +- fs/btrfs/xattr.c | 15 +- fs/btrfs/zoned.c | 3 +- fs/cachefiles/namei.c | 7 +- fs/ceph/addr.c | 2 + fs/ceph/mds_client.c | 6 + fs/dcache.c | 4 +- fs/dlm/lowcomms.c | 6 +- fs/erofs/xattr.c | 6 +- fs/ext2/inode.c | 3 +- fs/ext2/xattr.c | 4 +- fs/ext4/ext4.h | 3 +- fs/ext4/inode.c | 35 +- fs/ext4/ioctl.c | 11 +- fs/ext4/move_extent.c | 102 ++-- fs/ext4/xattr.c | 2 +- fs/f2fs/data.c | 27 +- fs/f2fs/f2fs.h | 2 +- fs/f2fs/gc.c | 36 +- fs/f2fs/node.c | 2 + fs/f2fs/segment.c | 4 +- fs/fcntl.c | 3 + fs/fsopen.c | 3 + fs/fuse/dev_uring.c | 30 +- fs/fuse/inode.c | 4 - fs/gfs2/aops.c | 2 +- fs/gfs2/file.c | 2 +- fs/gfs2/glock.c | 10 +- fs/gfs2/glock.h | 2 +- fs/gfs2/glops.c | 13 +- fs/gfs2/incore.h | 2 +- fs/gfs2/lock_dlm.c | 22 +- fs/gfs2/log.c | 43 +- fs/gfs2/lops.c | 2 +- fs/gfs2/meta_io.c | 6 +- fs/gfs2/ops_fstype.c | 8 +- fs/gfs2/quota.c | 66 ++- fs/gfs2/recovery.c | 2 +- fs/gfs2/super.c | 14 +- fs/gfs2/sys.c | 34 +- fs/gfs2/trans.c | 2 +- fs/gfs2/util.c | 74 ++- fs/gfs2/util.h | 43 +- fs/hfs/dir.c | 15 +- fs/hfs/hfs_fs.h | 1 + fs/hfs/inode.c | 30 +- fs/hfs/mdb.c | 31 +- fs/hfs/super.c | 3 + fs/inode.c | 23 +- fs/iomap/direct-io.c | 1 + fs/lockd/svc.c | 4 +- fs/lockd/svc4proc.c | 4 +- fs/lockd/svcproc.c | 4 +- fs/lockd/svcsubs.c | 52 +- fs/mount.h | 6 +- fs/namei.c | 29 + fs/namespace.c | 232 +++++--- fs/netfs/buffered_read.c | 9 +- fs/netfs/internal.h | 1 + fs/netfs/main.c | 7 + fs/netfs/misc.c | 3 +- fs/netfs/objects.c | 30 +- fs/netfs/read_collect.c | 35 +- fs/netfs/read_pgpriv2.c | 2 +- fs/netfs/rolling_buffer.c | 22 +- fs/netfs/write_collect.c | 6 +- fs/netfs/write_issue.c | 13 +- fs/nfs/callback_xdr.c | 6 +- fs/nfs/delegation.c | 18 +- fs/nfsd/lockd.c | 6 +- fs/nfsd/netns.h | 20 +- fs/nfsd/nfs4proc.c | 2 +- fs/nfsd/nfs4recover.c | 12 +- fs/nfsd/nfs4state.c | 60 ++- fs/nfsd/nfsctl.c | 4 +- fs/nfsd/nfssvc.c | 45 +- fs/ntfs3/dir.c | 3 +- fs/ntfs3/file.c | 6 +- fs/ntfs3/frecord.c | 7 +- fs/ntfs3/inode.c | 19 +- fs/ntfs3/namei.c | 6 +- fs/ntfs3/ntfs_fs.h | 6 +- fs/ntfs3/super.c | 31 +- fs/ocfs2/cluster/heartbeat.c | 139 +++-- fs/ocfs2/cluster/tcp.c | 107 +++- fs/ocfs2/cluster/tcp.h | 1 + fs/ocfs2/inode.c | 23 + fs/pnode.c | 108 +++- fs/resctrl/monitor.c | 60 ++- fs/resctrl/rdtgroup.c | 48 +- fs/smb/client/cifsacl.c | 28 +- fs/smb/client/cifsfs.c | 1 + fs/smb/client/cifsglob.h | 1 + fs/smb/client/connect.c | 2 +- fs/smb/client/file.c | 65 ++- fs/smb/client/inode.c | 24 +- fs/smb/client/misc.c | 35 +- fs/smb/client/readdir.c | 17 +- fs/smb/server/connection.c | 37 +- fs/smb/server/connection.h | 6 +- fs/smb/server/mgmt/tree_connect.c | 33 +- fs/smb/server/mgmt/user_config.c | 11 + fs/smb/server/mgmt/user_session.c | 10 +- fs/smb/server/mgmt/user_session.h | 2 +- fs/smb/server/oplock.c | 81 ++- fs/smb/server/oplock.h | 1 + fs/smb/server/smb2pdu.c | 106 ++-- fs/smb/server/smbacl.c | 88 ++-- fs/smb/server/smbacl.h | 2 +- fs/smb/server/transport_tcp.c | 4 +- fs/smb/server/vfs.c | 2 +- fs/smb/server/vfs_cache.c | 8 +- fs/tracefs/event_inode.c | 24 + fs/tracefs/internal.h | 4 +- fs/udf/super.c | 4 +- fs/xfs/libxfs/xfs_exchmaps.c | 103 +--- fs/xfs/libxfs/xfs_log_format.h | 4 +- fs/xfs/xfs_bmap_util.c | 15 +- fs/xfs/xfs_exchrange.c | 51 +- include/acpi/acpi_bus.h | 6 + include/clocksource/samsung_pwm.h | 2 +- include/cxl/mailbox.h | 2 + include/drm/ttm/ttm_resource.h | 2 + include/kvm/arm_vgic.h | 3 - include/linux/bnxt/ulp.h | 25 +- include/linux/bpf.h | 5 +- include/linux/bpf_verifier.h | 2 + include/linux/can/skb.h | 2 + include/linux/compiler_types.h | 8 +- include/linux/fb.h | 2 + include/linux/firmware/xlnx-zynqmp.h | 18 +- include/linux/ieee80211-s1g.h | 575 ++++++++++++++++++++ include/linux/ieee80211.h | 585 +-------------------- include/linux/iommu.h | 3 +- include/linux/kvm_host.h | 1 + include/linux/list.h | 37 ++ include/linux/lockd/bind.h | 12 +- include/linux/mempool.h | 7 + include/linux/mount.h | 2 +- include/linux/net.h | 4 +- include/linux/netfilter/x_tables.h | 1 + include/linux/netfs.h | 1 + include/linux/ntb.h | 24 + include/linux/nvme.h | 4 +- include/linux/pci.h | 1 + include/linux/ring_buffer.h | 5 +- include/linux/rolling_buffer.h | 6 +- include/linux/sched/ext.h | 1 + include/linux/skbuff.h | 2 + include/linux/socket.h | 17 + include/linux/srcutiny.h | 4 + include/linux/static_call_types.h | 4 + include/linux/sunrpc/svc_rdma.h | 14 +- include/linux/workqueue.h | 24 + include/media/v4l2-mem2mem.h | 21 + include/net/amt.h | 4 - include/net/bluetooth/hci_core.h | 2 + include/net/cfg80211.h | 3 +- include/net/inet_common.h | 2 +- include/net/ip.h | 7 + include/net/ip_vs.h | 2 +- include/net/ipv6.h | 2 +- include/net/mac80211.h | 14 +- include/net/netfilter/nf_dup_netdev.h | 37 ++ include/net/netfilter/nf_tables.h | 15 +- include/net/pkt_cls.h | 14 +- include/net/sock.h | 2 +- include/net/strparser.h | 10 +- include/net/xsk_buff_pool.h | 9 +- include/scsi/scsi_driver.h | 7 +- include/scsi/scsi_host.h | 7 +- include/ufs/ufshcd.h | 4 - kernel/bpf/bpf_struct_ops.c | 12 + kernel/bpf/btf.c | 17 +- kernel/bpf/stackmap.c | 120 +++-- kernel/bpf/syscall.c | 2 + kernel/bpf/trampoline.c | 7 + kernel/bpf/verifier.c | 215 ++++++-- kernel/cgroup/cpuset.c | 29 +- kernel/dma/swiotlb.c | 6 +- kernel/kexec_handover.c | 2 +- kernel/printk/nbcon.c | 2 +- kernel/printk/printk.c | 2 +- kernel/rcu/srcutiny.c | 19 +- kernel/sched/ext.c | 15 +- kernel/sched/ext_internal.h | 5 + kernel/sched/sched.h | 1 - kernel/trace/blktrace.c | 4 +- kernel/trace/ring_buffer.c | 260 +++++---- kernel/trace/ring_buffer_benchmark.c | 6 +- kernel/trace/trace.c | 156 +++--- kernel/trace/trace.h | 1 + kernel/workqueue.c | 51 +- mm/pgtable-generic.c | 20 +- net/9p/trans_fd.c | 2 +- net/appletalk/ddp.c | 2 +- net/atm/pvc.c | 4 +- net/atm/svc.c | 2 +- net/ax25/af_ax25.c | 2 +- net/bluetooth/6lowpan.c | 27 +- net/bluetooth/hci_conn.c | 17 +- net/bluetooth/hci_core.c | 4 + net/bluetooth/hci_event.c | 108 ++-- net/bluetooth/hci_sock.c | 4 +- net/bluetooth/hci_sync.c | 103 +++- net/bluetooth/iso.c | 56 +- net/bluetooth/l2cap_sock.c | 59 ++- net/bluetooth/mgmt.c | 2 +- net/bluetooth/rfcomm/core.c | 4 +- net/bluetooth/rfcomm/sock.c | 7 +- net/bluetooth/rfcomm/tty.c | 2 +- net/bluetooth/sco.c | 89 +++- net/bridge/br_arp_nd_proxy.c | 24 +- net/bridge/br_multicast.c | 23 +- net/bridge/netfilter/nf_conntrack_bridge.c | 10 +- net/can/af_can.c | 6 +- net/can/bcm.c | 2 + net/can/isotp.c | 13 +- net/can/j1939/socket.c | 3 +- net/can/j1939/transport.c | 2 + net/can/raw.c | 9 +- net/ceph/auth_x.c | 5 + net/core/bpf_sk_storage.c | 14 +- net/core/dev.c | 59 ++- net/core/filter.c | 4 +- net/core/flow_dissector.c | 11 +- net/core/skbuff.c | 6 +- net/core/sock.c | 5 +- net/devlink/core.c | 10 +- net/hsr/hsr_framereg.c | 6 +- net/ieee802154/socket.c | 4 +- net/ipv4/af_inet.c | 4 +- net/ipv4/cipso_ipv4.c | 8 + net/ipv4/esp4.c | 7 + net/ipv4/fib_semantics.c | 3 + net/ipv4/fib_trie.c | 2 - net/ipv4/ip_output.c | 10 +- net/ipv4/netfilter/arp_tables.c | 35 +- net/ipv4/netfilter/ip_tables.c | 41 +- net/ipv4/nexthop.c | 22 +- net/ipv4/route.c | 5 + net/ipv4/tcp.c | 2 + net/ipv4/udp_tunnel_core.c | 2 +- net/ipv6/af_inet6.c | 4 +- net/ipv6/esp6.c | 7 + net/ipv6/ip6_udp_tunnel.c | 2 +- net/ipv6/ip6mr.c | 3 +- net/ipv6/mcast.c | 31 +- net/ipv6/netfilter/ip6_tables.c | 38 +- net/ipv6/route.c | 4 +- net/iucv/af_iucv.c | 2 +- net/l2tp/l2tp_core.c | 4 +- net/llc/af_llc.c | 2 +- net/mac80211/debugfs.c | 13 +- net/mac80211/ieee80211_i.h | 2 + net/mac80211/main.c | 1 + net/mac80211/rx.c | 50 +- net/mac80211/sta_info.c | 17 +- net/mac80211/sta_info.h | 3 +- net/mac80211/status.c | 5 +- net/mac80211/tx.c | 70 ++- net/mac80211/util.c | 3 + net/mctp/af_mctp.c | 2 +- net/mctp/test/route-test.c | 2 +- net/mctp/test/utils.c | 2 +- net/mptcp/protocol.c | 6 +- net/mptcp/subflow.c | 2 +- net/netfilter/ipvs/ip_vs_core.c | 11 +- net/netfilter/ipvs/ip_vs_sync.c | 4 +- net/netfilter/ipvs/ip_vs_xmit.c | 3 +- net/netfilter/nf_conntrack_bpf.c | 113 ++-- net/netfilter/nf_dup_netdev.c | 31 +- net/netfilter/nf_flow_table_path.c | 3 +- net/netfilter/nf_tables_api.c | 320 +++++++---- net/netfilter/nfnetlink_queue.c | 7 + net/netfilter/nft_dynset.c | 25 +- net/netfilter/nft_fwd_netdev.c | 27 +- net/netfilter/x_tables.c | 77 ++- net/netfilter/xt_CHECKSUM.c | 6 +- net/netlink/af_netlink.c | 2 +- net/netrom/af_netrom.c | 2 +- net/nfc/llcp_sock.c | 4 +- net/openvswitch/actions.c | 7 +- net/openvswitch/datapath.c | 8 + net/packet/af_packet.c | 39 +- net/phonet/socket.c | 18 +- net/qrtr/af_qrtr.c | 2 +- net/qrtr/ns.c | 2 +- net/rds/bind.c | 2 +- net/rds/rds.h | 2 +- net/rds/tcp_connect.c | 2 +- net/rds/tcp_listen.c | 2 +- net/rose/af_rose.c | 2 +- net/rxrpc/af_rxrpc.c | 2 +- net/rxrpc/rxperf.c | 2 +- net/sched/cls_api.c | 6 +- net/sched/cls_basic.c | 6 +- net/sched/cls_bpf.c | 6 +- net/sched/cls_cgroup.c | 2 +- net/sched/cls_flow.c | 2 +- net/sched/cls_flower.c | 4 +- net/sched/cls_fw.c | 4 +- net/sched/cls_matchall.c | 4 +- net/sched/cls_route.c | 10 +- net/sched/cls_u32.c | 18 +- net/sched/em_text.c | 3 + net/sched/sch_cake.c | 2 +- net/sched/sch_drr.c | 2 +- net/sched/sch_dualpi2.c | 2 +- net/sched/sch_ets.c | 2 +- net/sched/sch_fq_codel.c | 2 +- net/sched/sch_fq_pie.c | 2 +- net/sched/sch_hfsc.c | 2 +- net/sched/sch_htb.c | 2 +- net/sched/sch_multiq.c | 2 +- net/sched/sch_netem.c | 7 +- net/sched/sch_prio.c | 2 +- net/sched/sch_qfq.c | 2 +- net/sched/sch_sfb.c | 2 +- net/sched/sch_sfq.c | 2 +- net/sctp/socket.c | 6 +- net/smc/af_smc.c | 100 +--- net/smc/smc.h | 2 +- net/socket.c | 6 +- net/strparser/strparser.c | 6 +- net/sunrpc/Kconfig | 1 + net/sunrpc/auth_gss/gss_krb5_crypto.c | 232 ++++++++ net/sunrpc/auth_gss/gss_krb5_internal.h | 20 + net/sunrpc/auth_gss/gss_krb5_mech.c | 96 +++- net/sunrpc/auth_gss/gss_krb5_seal.c | 45 +- net/sunrpc/auth_gss/gss_krb5_unseal.c | 39 +- net/sunrpc/clnt.c | 4 +- net/sunrpc/svcsock.c | 2 +- net/sunrpc/xprtrdma/svc_rdma_recvfrom.c | 4 +- net/sunrpc/xprtrdma/svc_rdma_rw.c | 100 +++- net/sunrpc/xprtrdma/svc_rdma_sendto.c | 16 +- net/sunrpc/xprtrdma/svc_rdma_transport.c | 32 +- net/sunrpc/xprtsock.c | 4 +- net/tipc/core.c | 4 +- net/tipc/node.c | 10 +- net/tipc/socket.c | 4 +- net/tipc/topsrv.c | 80 ++- net/tipc/udp_media.c | 75 +-- net/unix/af_unix.c | 4 +- net/vmw_vsock/af_vsock.c | 6 +- net/vmw_vsock/virtio_transport_common.c | 4 +- net/wireless/core.c | 7 +- net/wireless/core.h | 2 +- net/wireless/nl80211.c | 19 +- net/wireless/sme.c | 6 +- net/x25/af_x25.c | 2 +- net/xdp/xsk.c | 201 ++++++- net/xdp/xsk_buff_pool.c | 13 +- net/xdp/xsk_queue.h | 65 ++- net/xfrm/xfrm_output.c | 16 +- security/keys/key.c | 6 +- security/keys/persistent.c | 55 +- security/selinux/avc.c | 5 +- security/selinux/hooks.c | 9 +- sound/hda/codecs/side-codecs/tas2781_hda.c | 18 +- sound/pci/ctxfi/ctatc.c | 63 ++- sound/pci/ctxfi/ctatc.h | 4 - sound/pci/ctxfi/ctdaio.c | 97 ++-- sound/pci/ctxfi/ctdaio.h | 2 + sound/pci/ctxfi/cthardware.h | 2 +- sound/pci/ctxfi/cthw20k1.c | 2 +- sound/pci/ctxfi/cthw20k2.c | 2 +- sound/soc/amd/acp/acp-mach-common.c | 18 +- sound/soc/amd/yc/acp6x-mach.c | 7 + sound/soc/codecs/adau1372.c | 18 +- sound/soc/qcom/qdsp6/q6asm.c | 5 + sound/soc/samsung/i2s.c | 8 + tools/include/linux/static_call_types.h | 4 + .../bpf/progs/verifier_subprog_precision.c | 12 +- .../testing/selftests/bpf/test_kmods/bpf_testmod.c | 2 +- virt/kvm/guest_memfd.c | 12 +- virt/kvm/kvm_mm.h | 7 +- 873 files changed, 13528 insertions(+), 7761 deletions(-)

3 weeks

[PATCH 7.2 000/284] 7.2.11-rc2 review

by Greg Kroah-Hartman

This is the start of the stable review cycle for the 7.2.11 release. There are 284 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know. Responses should be made by Fri, 16 Oct 2026 12:37:26 +0000. Anything received after that time might be too late. The whole patch series can be found in one patch at: https://www.kernel.org/pub/linux/kernel/v7.x/stable-review/patch-7.2.11-rc2… or in the git tree and branch at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-7.2.y and the diffstat can be found below. thanks, greg k-h ------------- Pseudo-Shortlog of commits: Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> Linux 7.2.11-rc2 Vicki Pfau <vi(a)endrift.com> HID: steam: Clean up locking Vicki Pfau <vi(a)endrift.com> HID: steam: Refactor registration Vicki Pfau <vi(a)endrift.com> HID: steam: Rearrange teardown sequence Vicki Pfau <vi(a)endrift.com> HID: steam: Fully unregister controller when hidraw is opened Lorenzo Stoakes (ARM) <ljs(a)kernel.org> mm/mremap: fix locked_vm leak from MREMAP_DONTUNMAP self-merge Jens Axboe <axboe(a)kernel.dk> io_uring/kbuf: don't charge provided buffer rings to RLIMIT_MEMLOCK Hengyu Liang <hengyul(a)cs.unc.edu> io_uring: do not charge the SQ/CQ rings to RLIMIT_MEMLOCK Ali Ahmet Memis <ali(a)iusegentoo.com> io_uring/memmap: account the pages a compound region really uses Adrian Betschart <adrian.betschart(a)cinemaone.ch> drm/amd/display: Don't replace a sink mode that shares the native totals Kuba Piecuch <jpiecuch(a)google.com> sched_ext: Call ops.dequeue() when a task arrives on a remote local DSQ Kuba Piecuch <jpiecuch(a)google.com> sched_ext: Generate qseq from a per-task counter Maíra Canal <mcanal(a)igalia.com> drm/vc4: Fix binner slot allocation failing on an idle GPU Maíra Canal <mcanal(a)igalia.com> drm/vc4: Disable the V3D interrupt across runtime suspend Ilia Gavrilov <Ilia.Gavrilov(a)infotecs.ru> vsock: Fix memory leak in vmci_transport_recv_dgram_cb() Fernando Fernandez Mancera <fmancera(a)suse.de> net: openvswitch: validate transport header presence in set_ipv6_addr Vadim Fedorenko <vadim.fedorenko(a)linux.dev> ptp: ocp: fix PCIe delay estimation calculation Willem de Bruijn <willemb(a)google.com> net/packet: call packet_parse_headers after virtio_net_hdr_to_skb Petr Machata <petrm(a)nvidia.com> mlxsw: spectrum_flower: Fix port range register leak in tmplt_create() Li RongQing <lirongqing(a)baidu.com> net/mlx5e: Order ICOSQ cc update after CQ doorbell Tianyi Gao <tianyi(a)cloudflare.com> veth: fix peer NETDEV_XDP_ACT_NDO_XMIT after GRO is toggled while down Gyeyoung Baek <gye976(a)gmail.com> drm/imagination: Fix reference and vm_bo handling in remap() Haishuang Yan <yanhaishuang(a)cmss.chinamobile.com> bareudp: set the inner protocol to the protocol of the packet Eric Dumazet <edumazet(a)kernel.org> flow_dissector: avoid u16 truncation of hlen in bpf_flow_dissect() Pavan Chebbi <pavan.chebbi(a)broadcom.com> bnxt_en: Re-write the BARs following any type of PCIe errors Michael Chan <michael.chan(a)broadcom.com> bnxt_en: Fix driver init in kdump kernel Michael Chan <michael.chan(a)broadcom.com> bnxt_en: Add bnxt_clear_bars() helper Zongmin Zhou <zhouzongmin(a)kylinos.cn> riscv: ptrace: Zero-initialize regset buffers before copyin Leo Yu-Chi Liang <leo.liang(a)sifive.com> riscv: fix NR_CPUS range leaking 64-bit default onto 32-bit builds Richard Fitzgerald <rf(a)opensource.cirrus.com> ASoC: sdw_utils: Switch CS35L56/57/62/63 to use OT25 DAI Stefan Binding <sbinding(a)opensource.cirrus.com> ASoC: sdw_utils: Add codec info for CS35L62 Haishuang Yan <yanhaishuang(a)cmss.chinamobile.com> pfcp: make sure the SEID is linear before reading it Justin Chen <justin.chen(a)broadcom.com> net: bcmgenet: if UMAC was suspended in SW_RESET, restore it to SW_RESET Or Har-Toov <ohartoov(a)nvidia.com> Revert "net/mlx5: E-Switch, preserve max tx speed on vport state modification" Victor Nogueira <victor(a)mojatatu.com> net/sched: cls_route: reject change with no routing attribute Haishuang Yan <yanhaishuang(a)cmss.chinamobile.com> devlink: fix devlink_rel reference leak when notify work is pending Quentin Freimanis <quentin(a)q-lab.dev> net: sparx5: start the TOD counters on non-PTP lan969x variants Eric Dumazet <edumazet(a)kernel.org> net: always dissect GSO packets in __virtio_net_hdr_to_skb() Eric Dumazet <edumazet(a)kernel.org> flow_dissector: avoid u16 truncation of skb->len when computing thoff Waiman Long <longman(a)redhat.com> cgroup/cpuset: Call is_in_v2_mode() after acquiring cpuset_mutex in cpuset_handle_hotplug() Han Gao <gaohan(a)iscas.ac.cn> spi: sg2044-nor: Honor SPI clock limits Han Gao <gaohan(a)iscas.ac.cn> spi: sg2044-nor: Return transfer errors Marek Szyprowski <m.szyprowski(a)samsung.com> ASoC: samsung: i2s: enable op_clk in probe to balance runtime PM Alvin Šipraga <alvin.sipraga(a)analog.com> ASoC: adau1372: fix invalid default state of output ASRC and DAC muxes Alvin Šipraga <alvin.sipraga(a)analog.com> ASoC: adau1372: allow sleepy powerdown GPIOs Yingying Tang <yingying.tang(a)oss.qualcomm.com> Revert "wifi: ath12k: add panic handler" Mallesh Koujalagi <mallesh.koujalagi(a)intel.com> drm/xe/sysctrl: Fix mailbox header handling Devin Wittmayer <lucid_duck(a)justthetip.ca> wifi: mt76: mt792x: pick the SAR table layout from the table itself Junjie Cao <junjie.cao(a)intel.com> wifi: mt76: mt792x: treat 0xff ACPI SAR entries as no limit Devin Wittmayer <lucid_duck(a)justthetip.ca> wifi: mt76: mt7925: don't put the band auto marker in TGID Nicolas Cavallari <nicolas.cavallari(a)green-communications.fr> wifi: mt76: mt7915: disable rx napi when removing device Tao Gong <gongtao0607(a)gmail.com> wifi: mt76: mt7996: fix struct mt7996_mcu_wed_rro_ba_delete_event layout Aaron Ma <aaron.ma(a)canonical.com> wifi: mt76: mt7925: restore the legacy BSS after MLO teardown Felix Fietkau <nbd(a)nbd.name> wifi: mt76: use ALTX queue for packets to disassociated stations Felix Fietkau <nbd(a)nbd.name> wifi: mt76: account non-AQL frames per peer rather than per link Felix Fietkau <nbd(a)nbd.name> wifi: mt76: add PS buffering support for HW-managed TIM drivers Felix Fietkau <nbd(a)nbd.name> wifi: mac80211: add ieee80211_txq_aql_pending() Felix Fietkau <nbd(a)nbd.name> wifi: mac80211: add AQL support for multicast packets Felix Fietkau <nbd(a)nbd.name> wifi: mt76: mt7996: take over connection monitoring Pengpeng Hou <hppiscas(a)163.com> scsi: ufs: mediatek: Handle mPHY power-on failures Jakub Kicinski <kuba(a)kernel.org> Revert "net: stmmac: propagate PTP addend and system time programming errors" Aurelien Jarno <aurelien(a)aurel32.net> riscv: vector: Fix output operands in context save Troy Mitchell <troy.mitchell(a)linux.dev> riscv: vector: Fix data pointer constraints in context save/restore Leto Liu (刘涛) <Leto.Liu(a)airoha.com> net: airoha: Add retry mechanism to airoha_qdma_set_trtcm_param() Ovidiu Panait <ovidiu.panait.rb(a)renesas.com> net: stmmac: Disable S-Tag processing on dwmac4 Ovidiu Panait <ovidiu.panait.rb(a)renesas.com> net: stmmac: Do not advertise S-VLAN stripping when it is disabled Or Har-Toov <ohartoov(a)nvidia.com> net/mlx5: Lag, split aggregate speed into oper and max helpers Jakub Kicinski <kuba(a)kernel.org> net: make dev_xdp_sb_prog_count() see programs attached through a link Tvrtko Ursulin <tvrtko.ursulin(a)igalia.com> drm/xe: Do not emit Wa_16010904313 twice Alan Previn <alan.previn.teres.alexis(a)intel.com> drm/xe/mmio: Fix xe_mmio_wait32() to honor delay/sleep maximums Filipe Manana <fdmanana(a)suse.com> btrfs: fix lost error return value in btrfs_listxattr() Filipe Manana <fdmanana(a)suse.com> btrfs: fix xattr replace when multiple xattrs are packed in the same item Yang Xiuwei <yangxiuwei(a)kylinos.cn> btrfs: don't stash io_uring encoded data across -EAGAIN Yang Xiuwei <yangxiuwei(a)kylinos.cn> btrfs: unlock inode and extent in caller when io_uring read extent fails Yang Xiuwei <yangxiuwei(a)kylinos.cn> btrfs: free iov when btrfs_uring_read_extent() fails Yang Xiuwei <yangxiuwei(a)kylinos.cn> btrfs: always return -EIOCBQUEUED after btrfs_uring_read_extent_endio Shin'ichiro Kawasaki <shinichiro.kawasaki(a)wdc.com> zloop: zero out only the unread tail of short reads Haibo Chen <haibo.chen(a)nxp.com> spi: spi-nxp-fspi: exit stop mode before waiting for DLL lock Fuad Tabba <fuad.tabba(a)linux.dev> arm64/boot: Don't set PMUv3p9 FGT2 bits without PMUv3 Sang-Hoon Choi <csh0052(a)gmail.com> nvmet: use the local P2P device on metadata allocation failure Guixin Liu <kanie(a)linux.alibaba.com> nvmet: return Invalid Field for invalid NSIDs feature 82h Bryan Fraschetti <bryan.fraschetti(a)canonical.com> ice: Restore Ordered MMIO Writes for Tx Doorbells Jakub Kicinski <kuba(a)kernel.org> bonding: fix the program leak when XDP is replaced Mahantesh Salimath <mahantesh(a)nvidia.com> tee: optee: ffa: support shared memory offsets on large-page kernels Lorenzo Bianconi <lorenzo.bianconi(a)oss.qualcomm.com> net: stmmac: propagate PTP addend and system time programming errors Felix Fietkau <nbd(a)nbd.name> wifi: mt76: mt7996: program a link again if the driver holds it Sang-Hoon Choi <csh0052(a)gmail.com> cxgb4/ch_ktls: disable softirqs around tid_list erases Shashank Mohan Jain <jain.sm(a)gmail.com> lib/dim: fix 32-bit overflow in dim_calc_stats() rates Omar Ramadan <omar(a)blockcast.net> amt: send the relay's General Query directly from the receive path Jamal Hadi Salim <jhs(a)mojatatu.com> net/sched: em_text: reject unterminated algo before autoload Maíra Canal <mcanal(a)igalia.com> drm/vc4: Use kvmalloc_objs() for the BO cache size list Maíra Canal <mcanal(a)igalia.com> drm/vc4: Free the BO cache size list on teardown Myeonghun Pak <mhun512(a)gmail.com> drm/aspeed: Balance the display clock enable on teardown Sang-Hoon Choi <csh0052(a)gmail.com> gpio: exar: initialize the ID before registering its cleanup Oleg Keri <okerixx(a)gmail.com> drm/dp: don't mark the AUX backlight enabled when enabling failed Waiman Long <longman(a)redhat.com> cgroup/cpuset: Don't access cpuset_cgrp_subsys.root in is_in_v2_mode() Cristian Ciocaltea <cristian.ciocaltea(a)collabora.com> drm/bridge: Fix unlocked list access in drm_bridge_attach() Cristian Ciocaltea <cristian.ciocaltea(a)collabora.com> drm/bridge: Fix unlocked list_del in drm_bridge_add() Sai Teja Aluvala <aluvala.sai.teja(a)intel.com> Bluetooth: btintel_pcie: Add shared HW reset for clean start Ravindra <ravindra(a)intel.com> Bluetooth: btintel_pcie: fix TX descriptor bounds check Naomi Chu <naomi.chu(a)mediatek.com> scsi: ufs: core: Hold a clock reference across the probe Christian Brauner <brauner(a)kernel.org> fs: don't let a migrating task hide its reference from do_umount() Christian Brauner <brauner(a)kernel.org> mount: refuse MOVE_MOUNT_SET_GROUP on an unbindable mount Peng Fan <peng.fan(a)nxp.com> iommu/dma: skip swiotlb bounce for DMA_ATTR_MMIO in iommu_dma_map_phys Vincent Jardin <vjardin(a)free.fr> arm64: dts: lx2160a: fix the iic5 spi3 pinmux offset and value Vincent Jardin <vjardin(a)free.fr> arm64: dts: lx2160a: fix IIC1 pinmux submask rejected by pinctrl-single Vincent Jardin <vjardin(a)free.fr> arm64: dts: lx2160a: fix incorrect pinmux Taniya Das <taniya.das(a)oss.qualcomm.com> clk: qcom: gpucc-kaanapali: Mark the GPU CX GDSC as votable Taniya Das <taniya.das(a)oss.qualcomm.com> clk: qcom: gpucc-glymur: Mark the GPU CX GDSC as votable Luca Weiss <luca.weiss(a)fairphone.com> clk: qcom: gcc-kaanapali: Fix always-enabling PCIE_RSCC clocks Luca Weiss <luca.weiss(a)fairphone.com> clk: qcom: gcc-eliza: Fix always-enabling PCIE_RSCC clocks Darrick J. Wong <djwong(a)kernel.org> xfs: fix exchange-range-to-eof file size exchange Norbert Szetei <norbert(a)doyensec.com> xfs: stop exchanging reflink flags when exchanging mappings Christian Brauner <brauner(a)kernel.org> namespace: keep the lock on a mount that a propagated copy is moved beneath Christian Brauner <brauner(a)kernel.org> namespace: handle mount locking for automounts correctly Christian Brauner <brauner(a)kernel.org> namespace: never expire a locked mount Christian Brauner <brauner(a)kernel.org> nullfs: don't update the access time Christian Brauner <brauner(a)kernel.org> namespace: refuse an automount below a mount that is in no namespace Christian Brauner <brauner(a)kernel.org> fcntl: refuse F_SET_RW_HINT on an immutable inode Christian Brauner <brauner(a)kernel.org> namei: don't reveal overmounted entries in refwalk Christian Brauner <brauner(a)kernel.org> namespace: unhash a dentry before detaching the mounts on it Christian Brauner <brauner(a)kernel.org> namespace: don't let a pseudo dentry become the root of a mount Christian Brauner <brauner(a)kernel.org> unshare: don't drop active namespace references that were never taken Christian Brauner <brauner(a)kernel.org> dcache: don't put a mountpoint on a dentry that's being removed Christian Brauner <brauner(a)kernel.org> namespace: check the mounts before reading their parents in pivot_root() Christian Brauner <brauner(a)kernel.org> namespace: remove the fsnotify marks of a mount namespace in process context Christian Brauner <brauner(a)kernel.org> namespace: don't reconfigure internal superblocks via remount and umount Christian Brauner <brauner(a)kernel.org> namespace: look at the topmost mount for a mount namespace file Christian Brauner <brauner(a)kernel.org> namespace: keep covered mounts covered in OPEN_TREE_NAMESPACE Christian Brauner <brauner(a)kernel.org> namespace: check a recursive bind mount for mount namespace loops Christian Brauner <brauner(a)kernel.org> namespace: check a submount for references right before unmounting it Christian Brauner <brauner(a)kernel.org> namespace: queue a mount only once for mount notifications Christian Brauner <brauner(a)kernel.org> namespace: check the target before walking it in do_mount_setattr() Christian Brauner <brauner(a)kernel.org> fs: refuse fspick() on internal superblocks Christian Brauner <brauner(a)kernel.org> namespace: don't copy an unmounted mount tree Christian Brauner <brauner(a)kernel.org> namespace: don't inherit MNT_UMOUNT in clone_mnt() Christian Brauner <brauner(a)kernel.org> statmount: read the parent of an unmounted mount under mount_lock Christian Brauner <brauner(a)kernel.org> namespace: reset the old parent's ->overmount in mnt_change_mountpoint() Christian Brauner <brauner(a)kernel.org> fs: don't silently unmount busy mounts Christian Brauner <brauner(a)kernel.org> mount: keep a copied mount unbindable Leo Li <sunpeng.li(a)amd.com> drm/amd/display: disable self-refresh on tearing flips Leo Li <sunpeng.li(a)amd.com> drm/amd/display: Fix direct scanout alpha on some DRM_FORMATs Jesse Zhang <Jesse.Zhang(a)amd.com> drm/amdgpu/userq: return the memdup_user() error for the user MQD Jesse Zhang <Jesse.Zhang(a)amd.com> drm/amdgpu/userq: only accept doorbell BOs as queue doorbell Mikhail Gavrilov <mikhail.v.gavrilov(a)gmail.com> drm/amdgpu: copy debugfs register data outside the GRBM/SRBM locks Alex Deucher <alexander.deucher(a)amd.com> drm/amdgpu: make Mac FB workaround generic Vitaly Prosyak <vitaly.prosyak(a)amd.com> drm/amdgpu: serialize vblank counter reads against GPU reset Haojie Li <lihaojie(a)kylinos.cn> drm/amdkfd: fix dma_buf reference leak in get_dmabuf_info Saleel Kudchadker <Saleel.Kudchadker(a)amd.com> drm/amdkfd: align SDMA doorbell base for shader doorbell writes Felix Gu <ustc.gu(a)gmail.com> drm/bridge: th1520-dw-hdmi: Fix remove() callback Felix Gu <ustc.gu(a)gmail.com> drm/bridge: th1520-dw-hdmi: Fix error check on dw_hdmi_probe() return value Thomas Hellström <thomas.hellstrom(a)linux.intel.com> drm/xe: Fix stale pinned_link entry when fb-pin performs the final unpin Thomas Hellström <thomas.hellstrom(a)linux.intel.com> drm/xe: Fix shrinker accounting double-subtraction on nested external pins Fan Wu <fanwu01(a)zju.edu.cn> drm/xe/i2c: cancel the client work on remove Zack Rusin <zack.rusin(a)broadcom.com> drm/vmwgfx: validate pitch coming from userspace Wentao Liang <vulab(a)iscas.ac.cn> drm/vc4: Fix firmware reference leak in vc4_drm_bind() Fan Wu <fanwu01(a)zju.edu.cn> drm/vc4: drain the hangcheck timer and works on V3D unbind Osama Abdelkader <osama.abdelkader(a)gmail.com> drm/panthor: validate userspace queue count against initialized firmware slot count Gyeyoung Baek <gye976(a)gmail.com> drm/imagination: Size page table preallocation by device address Krzysztof Karas <krzysztof.karas(a)intel.com> drm/i915/gt: Unmask interrupts only when ACTIVE is true Krzysztof Karas <krzysztof.karas(a)intel.com> drm/i915/gem: Prevent overstepping exec array boundary Sajal Gupta <sajal2005gupta(a)gmail.com> drm/gud: don't keep a connector without a CRTC as connector_state Nguyen Ngoc Thang <ngocthang2710.1999(a)gmail.com> drm/fb-helper: defer setup when fbdev_probe() fails, not just on -EAGAIN Palla Raghunath <raghunathpalla.0209(a)gmail.com> Bluetooth: RFCOMM: Fix NULL tty_dev dereference in rfcomm_dev_shutdown Mikhail Gavrilov <mikhail.v.gavrilov(a)gmail.com> Bluetooth: RFCOMM: connect the session socket without rfcomm_mutex Maxim Skokov <skokovmaksimevg(a)gmail.com> Bluetooth: RFCOMM: free the skb when the DLC has no owner Aldo Ariel Panzardo <qwe.aldo(a)gmail.com> Bluetooth: SCO: serialise sco_conn lifetime against sco_recv_scodata() Iaroslav Voitovych <yaroslav.voytovych(a)gmail.com> Bluetooth: MGMT: Fix status of pending commands flushed on power off Chengfeng Ye <nicoyip.dev(a)gmail.com> Bluetooth: ISO: Serialize concurrent connect calls Chengfeng Ye <nicoyip.dev(a)gmail.com> Bluetooth: ISO: Reject concurrent BIS listener setup Chengfeng Ye <nicoyip.dev(a)gmail.com> Bluetooth: hci_sync: Fix command skb lifetime during scan setup Chengfeng Ye <nicoyip.dev(a)gmail.com> Bluetooth: hci_sock: Serialize dead-device detachment Runyu Xiao <runyu.xiao(a)seu.edu.cn> Bluetooth: btintel_pcie: use managed IRQ teardown Chen Pei <cp0613(a)linux.alibaba.com> riscv: ptrace: reject CFI regset access when extensions are absent Wei-Jie Hung <imbigking12(a)gmail.com> riscv: patch: fix handling of bpf-jit execmem addresses Shao Mingyin <shao.mingyin(a)zte.com.cn> riscv: lib: Fix ZBB strnlen wrap-around regression on huge counts Zongmin Zhou <zhouzongmin(a)kylinos.cn> riscv: hwprobe: use _BITULL() rather than BIT() in MIPS vendor uapi header Ziyi Guo <guoziyi114(a)gmail.com> riscv: futex: untag the user pointer before the atomic access Karl Mehltretter <kmehltretter(a)gmail.com> riscv: fix load_unaligned_zeropad() fixup for RV32 Zongmin Zhou <zhouzongmin(a)kylinos.cn> riscv: errata: select RISCV_ALTERNATIVE_EARLY for THEAD GHOSTWRITE Ziyi Guo <guoziyi114(a)gmail.com> riscv: entry: gate shadow call stack reload on sstatus.SPP, not tp Stanley Jhu <stanleyjhu(a)google.com> scsi: ufs: core: Decouple CQ sweep from request iterator in MCQ Stanley Jhu <stanleyjhu(a)google.com> scsi: ufs: core: Avoid unsafe MMIO reads in ufshcd_mcq_compl_all_cqes_lock() Runyu Xiao <runyu.xiao(a)seu.edu.cn> scsi: qedi: Initialize callback state before registration Ahmed Abdelhaleem Ahmed <ahmedhal(a)gmail.com> scsi: ch: Do not keep references to data transfer element devices Shawn Lin <shawn.lin(a)rock-chips.com> pmdomain: rockchip: propagate subdomain add errors Shawn Lin <shawn.lin(a)rock-chips.com> pmdomain: rockchip: fix clock leak on domain probe failure Shawn Lin <shawn.lin(a)rock-chips.com> pmdomain: rockchip: don't ignore clock lookup errors on attach Ming Qian <ming.qian(a)oss.nxp.com> pmdomain: imx8m-blk-ctrl: Serialize power on/off across sibling domains Ridham Khurana <khurana.ridham222(a)gmail.com> regulator: tps6594-regulator: Fix n_linear_ranges for TPS65224 BUCK2-4 Alexey Charkov <alchark(a)flipper.net> regulator: of: fill in supply names in of_regulator_bulk_get_all() Abhishek Ojha <Abhishek.ojha(a)savoirfairelinux.com> regulator: ltc3676: don't read the write-only HRST and CLIRQ registers Alexey Charkov <alchark(a)flipper.net> power: sequencing: pcie-m2: Fix leaking array from of_regulator_bulk_get_all() Shao-Fu Chen <shf.chen(a)mediatek.com> optee: register TEE devices only once fully initialized Denis V. Lunev <den(a)openvz.org> openvswitch: fix soft lockup in the netlink flow dump Karl Bonde Torp <k.torp(a)samsung.com> nvme: fix swapped ZRASF zone state values for full and read only Weiming Shi <bestswngs(a)gmail.com> net: team: free skb when broadcast has no txable port Weiming Shi <bestswngs(a)gmail.com> net: team: stop reusing skb after queue override Suraj Gupta <suraj.gupta2(a)amd.com> net: xilinx: axienet: Free outstanding DMA buffers on dmaengine stop Fredrik Nyberg <fredrik.nyberg(a)volvocars.com> net: usb: ax88179_178a: fix rx frame length for non-last packets Daniel Machon <daniel.machon(a)microchip.com> net: sparx5: free the matchall entry on destroy Josef Bacik <josef(a)toxicpanda.com> net: skbuff: don't leave stale bytes in skb_copy_and_csum_bits() Sebastien Royen <sebastien.royen(a)armadeus.com> net: dsa: microchip: fix KSZ8765 fiber detection Zixuan Chai <petalzu987(a)gmail.com> net: bridge: avoid recursive multicast port cleanup Chengfeng Ye <nicoyip.dev(a)gmail.com> net/smc: protect clcsock lifetime in smc_getname Quchaosheng <quchaosheng000406(a)163.com> net/packet: guard the ll header push in packet_rcv_spkt() Guangshuo Li <lgs201920130244(a)gmail.com> mmc: sdhci-sprd: disable runtime PM on remove Yibo Tan <lhfff(a)tju.edu.cn> mmc: mtk-sd: Cancel request timeout work on remove Guangshuo Li <lgs201920130244(a)gmail.com> mmc: cavium-thunderx: destroy slot platform devices on remove Guangshuo Li <lgs201920130244(a)gmail.com> mmc: cavium-octeon: destroy slot platform devices on remove Mikulas Patocka <mpatocka(a)redhat.com> dm: fix reading free memory in do_resume Ma Xinmeng <1564938642(a)qq.com> dm-snap: reject the transient exception store for snapshot-merge Ben Cressey <ben(a)cressey.dev> dm-integrity: fix buffer overflow in inline mode with large tag size Ben Cressey <ben(a)cressey.dev> dm-crypt: reject the lmk IV mode with AEAD ciphers Mikhail Gavrilov <mikhail.v.gavrilov(a)gmail.com> mm: don't schedule deferred kernel page table freeing while booting Lorenzo Stoakes (ARM) <ljs(a)kernel.org> mm/mremap: fix locked_vm leak by splitting VMA for MREMAP_DONTUNMAP Nguyen Ngoc Thang <ngocthang2710.1999(a)gmail.com> memstick: rtsx_usb_ms: complete requests after eject instead of dropping them Raj Ojha <rajojha047(a)gmail.com> memstick: core: wait for request completion before freeing card 성병찬 <tjdqudcks0424(a)naver.com> KEYS: Fix add_key() race with keyring restriction Karl Mehltretter <kmehltretter(a)gmail.com> keys: finalize persistent keyring timeout after link attempt Daehyeon Ko <4ncienth(a)gmail.com> ip6_gre: remove obsolete ERSPAN PMTU update Natasha Klaus <natalie.klaus(a)runtimeverification.com> io_uring/net: populate CONNECT filter fields for 24-byte sockaddr_in6 Eugene Gvozdetsky <gvozdet(a)gmail.com> io_uring/register: don't exempt disabled rings from task restrictions Tristan Madani <tristan(a)talencesecurity.com> ice: fix metadata_dst refcount handling on representor teardown Xuanqiang Luo <luoxuanqiang(a)kylinos.cn> ice: fix use-after-free in dynamic port cleanup Mingming Cao <mmc(a)linux.ibm.com> ibmveth: fix TX LTB and filter unwind on open-fail Mingming Cao <mmc(a)linux.ibm.com> ibmveth: h_free logical LAN on open-fail after register Joshua Washington <joshwash(a)google.com> gve: fix XSK buffer leak on error descriptor Joshua Washington <joshwash(a)google.com> gve: fix XSK buffer leak when rings are stopped Joshua Washington <joshwash(a)google.com> gve: fix napi_disable deadlock when attempting to disable XSK pools Jose Ignacio Tornos Martinez <jtornosm(a)redhat.com> iavf: send MAC change request synchronously Ridham Khurana <khurana.ridham222(a)gmail.com> gpio: xilinx: fix runtime PM leak on request error path Fan Wu <fanwu01(a)zju.edu.cn> gpio: mpsse: fix race when arming the IRQ poll worker Eric Biggers <ebiggers(a)kernel.org> fsverity: RCU-delay the freeing of struct fsverity_info Vishal Badole <Vishal.Badole(a)amd.com> EDAC/amd64: Mask UMC chip select to the four implemented selects Tony Nguyen <anthony.l.nguyen(a)intel.com> e1000e: add system to disable K1 list Carlos Llamas <cmllamas(a)google.com> selftests/mm: cleanup -Wformat issues in hugetlb-mmap Hui Peng <benquike(a)gmail.com> sctp: copy zeroed stats to user in sctp_getsockopt_pr_streamstatus() when !streamoute Stephen Smalley <stephen.smalley.work(a)gmail.com> selinux: preserve NATIVE_LABELS on already-initialized sb in set_mnt_opts Christian Göttsche <cgzones(a)googlemail.com> selinux: fix data race on AVC latest_notif Johannes Berg <johannes.berg(a)intel.com> Revert "wifi: libertas: reject short monitor TX frames" Chengfeng Ye <nicoyip.dev(a)gmail.com> tipc: hold a reference to nodes found by link name Yuqi Xu <xuyuqiabc(a)gmail.com> tipc: destroy topsrv workqueues before closing connections Daehyeon Ko <4ncienth(a)gmail.com> tcp: reject net_iov in zerocopy receive mapping hints Marek Szyprowski <m.szyprowski(a)samsung.com> swiotlb: fix default_swiotlb_limit() for non-growable default pool Sabrina Dubroca <sd(a)queasysnail.net> strparser: make sure __strp_recv isn't running before tearing down the parser Georgiy Osokin <g.osokin(a)auroraos.dev> tee: shm: reject zero-sized allocations in tee_dyn_shm_alloc_helper() Josef Bacik <josef(a)toxicpanda.com> xen/netfront: don't leak the skb when xennet_fill_frags() fails Borislav Petkov (AMD) <bp(a)alien8.de> x86/CPU/AMD: Fix AMD TLBI Erratum #1718 Pavankumar Kondeti <pavan.kondeti(a)oss.qualcomm.com> workqueue: Fix NULL current_pwq deref in chained work check Jason A. Donenfeld <Jason(a)zx2c4.com> wireguard: noise: reject response consumption after intermediate initiation Ramses de Norre <ramses(a)well-founded.dev> wireguard: queueing: preserve tstamp_type when encapsulating packet Lu Huang <huanglu(a)kylinos.cn> wifi: mt76: mt7996: fix uninitialized buf read in mt7996_variant_fem_init() Cristian Papa <pcristian292(a)gmail.com> wifi: mt76: mt7603: initialize global station WCID Michele Dionisio <michele.dionisio(a)gmail.com> wifi: brcmfmac: fix P2P device removal race in brcmf_detach() Daehyeon Ko <4ncienth(a)gmail.com> vsock/virtio: account only unread bytes in read_skb() Ji-Ze Hong (Peter Hong) <peter_hong(a)fintek.com.tw> usb: f81604: fix struct f81604_int_data size mismatch Palla Raghunath <raghunathpalla.0209(a)gmail.com> dm ioctl: don't let data_start run past the buffer Daehyeon Ko <4ncienth(a)gmail.com> cipso: adjust cached option offsets when removing CIPSO Waiman Long <longman(a)redhat.com> cgroup/cpuset: Handle cpu hotplug race in guarantee_active_cpus() Oliver Hartkopp <socketcan(a)hartkopp.net> can: fix unique skb identifier regression under RPS zjamg <ndaugoing(a)gmail.com> can: dev: init_can_skb(): restore skb header initialization Wentao Liang <vulab(a)iscas.ac.cn> btrfs: scrub: fix local_root reference leak in scrub_print_warning_inode() Hengyu Liang <hengyul(a)cs.unc.edu> ata: libata-scsi: do not lose CHECK CONDITION for failed ATAPI commands Michael Garland <minimelkav(a)gmail.com> ASoC: amd: yc: Add DMI quirk for Acer Aspire Go 15 (AG15-21P) Karl Mehltretter <kmehltretter(a)gmail.com> arm64: irq: exclude the softirq stack switch from KCOV Mohamed Yassine Jebabli <med.jebabli(a)gmail.com> ALSA: hda/tas2781: Accept V1 calibration data without CRC Harin Lee <me(a)harin.net> ALSA: ctxfi: Fix memory leakage when clearing DAO input mappers Krzysztof Furman <krisfur(a)proton.me> Input: xpad - add support for Corsair Novablade Pro Bihaan Sen <stevewholikesthings(a)gmail.com> Input: xpad - add support for 8BitDo Pro 2 Wired Controller for Xbox Haotian Zhang <vulab(a)iscas.ac.cn> Input: ati_remote2 - fix type confusion in device attribute handlers Daehyeon Ko <4ncienth(a)gmail.com> ipv6: do not warn on route notification size race Daehyeon Ko <4ncienth(a)gmail.com> ipv4: do not warn on route notification size race Daehyeon Ko <4ncienth(a)gmail.com> ipv4: stop route notification sizing when nexthop group shrinks Daehyeon Ko <4ncienth(a)gmail.com> ipv4: stop exception dump when nexthop group shrinks Daehyeon Ko <4ncienth(a)gmail.com> ipv4: stop PMTU walk when nexthop group shrinks Alice Ryhl <aliceryhl(a)google.com> rust_binder: reschedule node refcount update on thread exit Michael S. Tsirkin <mst(a)redhat.com> ipv4: validate checksum_start before completing checksum Ido Schimmel <idosch(a)nvidia.com> ipv6: udp: Create exceptions before socket matching Ido Schimmel <idosch(a)nvidia.com> ipv4: udp: Create exceptions before socket matching Ido Schimmel <idosch(a)nvidia.com> ipv6: Fix redirect exception creation for UDP/RAW sockets Jerome Tollet <jtollet(a)cisco.com> net/mlx5e: Prevent stale XSK buffer release on MPWQE refill retry Jerome Tollet <jtollet(a)cisco.com> net/mlx5e: Prevent stale XSK buffer release on refill retry Matthew Wilcox (Oracle) <willy(a)infradead.org> fs: Free any excess xarray nodes in clear_inode() Eric Dumazet <edumazet(a)kernel.org> bnxt_en: fix DMA mapping length for padded small packets ------------- Diffstat: Documentation/networking/strparser.rst | 2 +- Makefile | 4 +- arch/arm64/boot/dts/freescale/fsl-lx2160a.dtsi | 19 +- arch/arm64/include/asm/el2_setup.h | 5 +- arch/arm64/kernel/Makefile | 3 + arch/riscv/Kconfig | 5 +- arch/riscv/Kconfig.errata | 1 + arch/riscv/include/asm/futex.h | 2 + arch/riscv/include/asm/scs.h | 17 +- arch/riscv/include/asm/vector.h | 8 +- arch/riscv/include/uapi/asm/vendor/mips.h | 4 +- arch/riscv/kernel/entry.S | 2 +- arch/riscv/kernel/patch.c | 2 +- arch/riscv/kernel/ptrace.c | 8 + arch/riscv/lib/strnlen.S | 20 +- arch/riscv/mm/extable.c | 4 +- arch/um/drivers/vector_transports.c | 1 + arch/x86/include/asm/cpufeatures.h | 3 + arch/x86/include/asm/tlb.h | 6 + arch/x86/kernel/cpu/amd.c | 4 + drivers/android/binder/node.rs | 20 +- drivers/android/binder/node/wrapper.rs | 34 ++- drivers/ata/libata-scsi.c | 13 +- drivers/block/zloop.c | 31 ++- drivers/bluetooth/btintel_pcie.c | 17 +- drivers/clk/qcom/gcc-eliza.c | 6 +- drivers/clk/qcom/gcc-kaanapali.c | 6 +- drivers/clk/qcom/gpucc-glymur.c | 2 +- drivers/clk/qcom/gpucc-kaanapali.c | 2 +- drivers/edac/amd64_edac.c | 4 +- drivers/gpio/gpio-exar.c | 2 +- drivers/gpio/gpio-mpsse.c | 24 +- drivers/gpio/gpio-xilinx.c | 9 +- drivers/gpu/drm/amd/amdgpu/amdgpu_amdkfd.c | 8 +- drivers/gpu/drm/amd/amdgpu/amdgpu_debugfs.c | 77 ++++--- drivers/gpu/drm/amd/amdgpu/amdgpu_gmc.c | 17 +- drivers/gpu/drm/amd/amdgpu/amdgpu_kms.c | 5 + drivers/gpu/drm/amd/amdgpu/amdgpu_userq.c | 13 +- drivers/gpu/drm/amd/amdgpu/mes_userqueue.c | 9 +- .../gpu/drm/amd/amdkfd/kfd_device_queue_manager.c | 32 ++- drivers/gpu/drm/amd/amdkfd/kfd_priv.h | 7 + drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm.c | 26 ++- .../drm/amd/display/amdgpu_dm/amdgpu_dm_plane.c | 20 +- drivers/gpu/drm/aspeed/aspeed_gfx_drv.c | 5 +- drivers/gpu/drm/bridge/th1520-dw-hdmi.c | 8 +- drivers/gpu/drm/display/drm_dp_helper.c | 4 +- drivers/gpu/drm/drm_bridge.c | 8 +- drivers/gpu/drm/drm_fb_helper.c | 6 +- drivers/gpu/drm/gud/gud_pipe.c | 1 + drivers/gpu/drm/i915/gem/i915_gem_execbuffer.c | 2 +- drivers/gpu/drm/i915/gt/intel_rps.c | 3 +- drivers/gpu/drm/imagination/pvr_mmu.c | 25 +- drivers/gpu/drm/imagination/pvr_vm.c | 8 +- drivers/gpu/drm/panthor/panthor_sched.c | 3 + drivers/gpu/drm/vc4/vc4_bo.c | 5 +- drivers/gpu/drm/vc4/vc4_drv.c | 5 +- drivers/gpu/drm/vc4/vc4_drv.h | 2 +- drivers/gpu/drm/vc4/vc4_gem.c | 8 +- drivers/gpu/drm/vc4/vc4_irq.c | 24 +- drivers/gpu/drm/vc4/vc4_v3d.c | 65 +++--- drivers/gpu/drm/vc4/vc4_validate.c | 2 +- drivers/gpu/drm/vmwgfx/vmwgfx_cursor_plane.c | 26 ++- drivers/gpu/drm/xe/display/xe_fb_pin.c | 6 +- drivers/gpu/drm/xe/xe_bo.c | 139 ++++++++--- drivers/gpu/drm/xe/xe_bo.h | 2 + drivers/gpu/drm/xe/xe_i2c.c | 5 +- drivers/gpu/drm/xe/xe_lrc.c | 38 +-- drivers/gpu/drm/xe/xe_mmio.c | 5 +- drivers/gpu/drm/xe/xe_sysctrl_mailbox.c | 16 +- drivers/hid/hid-steam.c | 252 ++++++++++---------- drivers/input/joystick/xpad.c | 4 + drivers/input/misc/ati_remote2.c | 12 +- drivers/iommu/dma-iommu.c | 4 +- drivers/md/dm-crypt.c | 7 +- drivers/md/dm-integrity.c | 4 +- drivers/md/dm-ioctl.c | 14 +- drivers/md/dm-snap.c | 14 ++ drivers/memstick/core/memstick.c | 8 +- drivers/memstick/host/rtsx_usb_ms.c | 31 +-- drivers/mmc/host/cavium-octeon.c | 5 +- drivers/mmc/host/cavium-thunderx.c | 5 +- drivers/mmc/host/mtk-sd.c | 1 + drivers/mmc/host/sdhci-sprd.c | 4 + drivers/net/amt.c | 48 ++-- drivers/net/bareudp.c | 3 +- drivers/net/bonding/bond_main.c | 8 +- drivers/net/can/dev/skb.c | 4 + drivers/net/can/usb/f81604.c | 2 +- drivers/net/can/vxcan.c | 3 + drivers/net/dsa/microchip/ksz_common.h | 2 +- drivers/net/ethernet/airoha/airoha_eth.c | 32 ++- drivers/net/ethernet/airoha/airoha_eth.h | 2 + drivers/net/ethernet/broadcom/bnxt/bnxt.c | 199 ++++++++++------ drivers/net/ethernet/broadcom/bnxt/bnxt.h | 1 - drivers/net/ethernet/broadcom/genet/bcmgenet_wol.c | 11 + .../chelsio/inline_crypto/ch_ktls/chcr_ktls.c | 4 +- drivers/net/ethernet/google/gve/gve_main.c | 8 +- drivers/net/ethernet/google/gve/gve_rx_dqo.c | 13 +- drivers/net/ethernet/ibm/ibmveth.c | 22 +- drivers/net/ethernet/intel/e1000e/netdev.c | 7 + drivers/net/ethernet/intel/iavf/iavf.h | 11 +- drivers/net/ethernet/intel/iavf/iavf_main.c | 85 +++++-- drivers/net/ethernet/intel/iavf/iavf_virtchnl.c | 99 +++++++- drivers/net/ethernet/intel/ice/devlink/port.c | 2 +- drivers/net/ethernet/intel/ice/ice_eswitch.c | 2 +- drivers/net/ethernet/intel/ice/ice_txrx.c | 4 +- .../net/ethernet/mellanox/mlx5/core/en/xsk/rx.c | 2 + drivers/net/ethernet/mellanox/mlx5/core/en_rx.c | 13 +- .../ethernet/mellanox/mlx5/core/esw/adj_vport.c | 20 -- drivers/net/ethernet/mellanox/mlx5/core/lag/lag.c | 79 +++++-- drivers/net/ethernet/mellanox/mlx5/core/vport.c | 24 -- drivers/net/ethernet/mellanox/mlxsw/spectrum.h | 2 + drivers/net/ethernet/mellanox/mlxsw/spectrum_acl.c | 10 +- .../net/ethernet/mellanox/mlxsw/spectrum_flower.c | 9 +- drivers/net/ethernet/microchip/sparx5/sparx5_ptp.c | 28 ++- .../ethernet/microchip/sparx5/sparx5_tc_matchall.c | 1 + drivers/net/ethernet/stmicro/stmmac/stmmac_main.c | 15 +- drivers/net/ethernet/xilinx/xilinx_axienet.h | 7 +- drivers/net/ethernet/xilinx/xilinx_axienet_main.c | 53 ++++- drivers/net/pfcp.c | 7 + drivers/net/team/team_core.c | 16 +- drivers/net/team/team_mode_broadcast.c | 2 + drivers/net/tun.c | 23 +- drivers/net/usb/ax88179_178a.c | 6 +- drivers/net/veth.c | 1 + drivers/net/virtio_net.c | 2 + drivers/net/wireguard/noise.c | 7 +- drivers/net/wireguard/queueing.h | 2 + drivers/net/wireless/ath/ath12k/core.c | 33 +-- drivers/net/wireless/ath/ath12k/core.h | 3 - drivers/net/wireless/ath/ath12k/hif.h | 9 - drivers/net/wireless/ath/ath12k/pci.c | 8 - .../wireless/broadcom/brcm80211/brcmfmac/core.c | 27 ++- drivers/net/wireless/marvell/libertas/tx.c | 7 - drivers/net/wireless/mediatek/mt76/mt76.h | 10 + drivers/net/wireless/mediatek/mt76/mt7603/init.c | 1 + .../net/wireless/mediatek/mt76/mt76_connac_mcu.h | 1 + drivers/net/wireless/mediatek/mt76/mt7915/init.c | 6 + drivers/net/wireless/mediatek/mt76/mt7915/main.c | 2 + drivers/net/wireless/mediatek/mt76/mt7925/mac.c | 3 +- drivers/net/wireless/mediatek/mt76/mt7925/main.c | 12 + .../net/wireless/mediatek/mt76/mt792x_acpi_sar.c | 134 +++++++---- .../net/wireless/mediatek/mt76/mt792x_acpi_sar.h | 2 + drivers/net/wireless/mediatek/mt76/mt7996/init.c | 3 +- drivers/net/wireless/mediatek/mt76/mt7996/main.c | 10 +- drivers/net/wireless/mediatek/mt76/mt7996/mcu.h | 3 + drivers/net/wireless/mediatek/mt76/tx.c | 89 +++++++- drivers/net/xen-netfront.c | 4 +- drivers/nvme/target/core.c | 2 +- drivers/nvme/target/pr.c | 4 + drivers/pmdomain/imx/imx8m-blk-ctrl.c | 15 ++ drivers/pmdomain/rockchip/pm-domains.c | 20 +- drivers/power/sequencing/pwrseq-pcie-m2.c | 2 + drivers/ptp/ptp_ocp.c | 2 +- drivers/regulator/ltc3676.c | 15 +- drivers/regulator/of_regulator.c | 24 +- drivers/regulator/tps6594-regulator.c | 6 +- drivers/scsi/ch.c | 29 +-- drivers/scsi/qedi/qedi_main.c | 3 +- drivers/spi/spi-nxp-fspi.c | 22 +- drivers/spi/spi-sg2044-nor.c | 60 ++++- drivers/tee/optee/ffa_abi.c | 38 ++- drivers/tee/optee/optee_msg.h | 4 +- drivers/tee/optee/smc_abi.c | 17 +- drivers/tee/tee_shm.c | 4 + drivers/ufs/core/ufs-mcq.c | 30 +-- drivers/ufs/core/ufshcd.c | 53 +++-- drivers/ufs/host/ufs-mediatek.c | 18 +- fs/btrfs/inode.c | 7 +- fs/btrfs/ioctl.c | 31 +-- fs/btrfs/scrub.c | 4 +- fs/btrfs/xattr.c | 15 +- fs/dcache.c | 4 +- fs/fcntl.c | 3 + fs/fs_context.c | 4 + fs/inode.c | 23 +- fs/mount.h | 6 +- fs/namei.c | 29 +++ fs/namespace.c | 254 ++++++++++++++++----- fs/nullfs.c | 4 +- fs/pnode.c | 108 +++++++-- fs/verity/fsverity_private.h | 15 +- fs/verity/open.c | 13 +- fs/xfs/libxfs/xfs_exchmaps.c | 103 ++------- fs/xfs/libxfs/xfs_log_format.h | 4 +- fs/xfs/xfs_bmap_util.c | 15 +- fs/xfs/xfs_exchrange.c | 51 +++-- include/linux/can/core.h | 3 +- include/linux/can/skb.h | 4 +- include/linux/io_uring_types.h | 2 + include/linux/mount.h | 2 +- include/linux/nsproxy.h | 1 + include/linux/nvme.h | 4 +- include/linux/sched/ext.h | 1 + include/linux/virtio_net.h | 64 +++--- include/net/amt.h | 4 - include/net/bluetooth/rfcomm.h | 1 + include/net/can.h | 2 + include/net/cfg80211.h | 1 + include/net/ip.h | 7 + include/net/mac80211.h | 14 +- include/net/strparser.h | 10 +- io_uring/io_uring.c | 13 +- io_uring/kbuf.c | 6 +- io_uring/memmap.c | 47 +++- io_uring/memmap.h | 2 +- io_uring/net.c | 4 +- io_uring/register.c | 21 +- io_uring/zcrx.c | 2 +- kernel/cgroup/cpuset.c | 40 +++- kernel/dma/swiotlb.c | 6 +- kernel/fork.c | 3 +- kernel/nsproxy.c | 2 +- kernel/sched/ext/ext.c | 25 +- kernel/sched/ext/internal.h | 5 + kernel/sched/sched.h | 1 - kernel/workqueue.c | 2 +- lib/dim/dim.c | 10 +- mm/mremap.c | 70 ++++-- mm/pgtable-generic.c | 20 +- mm/vma.c | 21 +- mm/vma.h | 7 +- net/bluetooth/hci_core.c | 4 + net/bluetooth/hci_sock.c | 2 + net/bluetooth/hci_sync.c | 10 +- net/bluetooth/iso.c | 52 ++++- net/bluetooth/mgmt.c | 2 +- net/bluetooth/rfcomm/core.c | 134 +++++++---- net/bluetooth/rfcomm/sock.c | 5 +- net/bluetooth/rfcomm/tty.c | 2 +- net/bluetooth/sco.c | 87 +++++-- net/bridge/br_multicast.c | 23 +- net/bridge/netfilter/nf_conntrack_bridge.c | 10 +- net/can/af_can.c | 47 +++- net/can/gw.c | 3 + net/can/isotp.c | 16 +- net/can/raw.c | 10 +- net/core/dev.c | 11 +- net/core/flow_dissector.c | 11 +- net/core/skbuff.c | 6 +- net/devlink/core.c | 10 +- net/ipv4/cipso_ipv4.c | 8 + net/ipv4/fib_semantics.c | 3 + net/ipv4/fib_trie.c | 2 - net/ipv4/ip_output.c | 10 +- net/ipv4/route.c | 5 + net/ipv4/tcp.c | 2 + net/ipv4/udp.c | 11 + net/ipv6/ip6_gre.c | 7 - net/ipv6/route.c | 4 +- net/ipv6/udp.c | 13 ++ net/mac80211/debugfs.c | 13 +- net/mac80211/ieee80211_i.h | 2 + net/mac80211/main.c | 1 + net/mac80211/sta_info.c | 17 +- net/mac80211/sta_info.h | 3 +- net/mac80211/status.c | 5 +- net/mac80211/tx.c | 70 ++++-- net/netfilter/nfnetlink_queue.c | 7 + net/netfilter/xt_CHECKSUM.c | 6 +- net/openvswitch/actions.c | 7 +- net/openvswitch/datapath.c | 8 + net/packet/af_packet.c | 28 ++- net/sched/cls_route.c | 6 + net/sched/em_text.c | 3 + net/sctp/socket.c | 6 +- net/smc/af_smc.c | 7 +- net/strparser/strparser.c | 6 +- net/tipc/node.c | 10 +- net/tipc/topsrv.c | 80 +++++-- net/vmw_vsock/af_vsock.c | 2 + net/vmw_vsock/virtio_transport_common.c | 4 +- net/xfrm/xfrm_output.c | 16 +- security/keys/key.c | 6 +- security/keys/persistent.c | 55 +++-- security/selinux/avc.c | 5 +- security/selinux/hooks.c | 9 +- sound/hda/codecs/side-codecs/tas2781_hda.c | 18 +- sound/pci/ctxfi/ctdaio.c | 6 +- sound/soc/amd/yc/acp6x-mach.c | 7 + sound/soc/codecs/adau1372.c | 18 +- sound/soc/samsung/i2s.c | 8 + sound/soc/sdw_utils/soc_sdw_utils.c | 35 ++- tools/testing/selftests/mm/hugetlb-mmap.c | 4 +- tools/testing/vma/tests/vma.c | 4 +- 285 files changed, 3420 insertions(+), 1618 deletions(-)

3 weeks

[PATCH 6.12 000/505] 6.12.113-rc2 review

by Greg Kroah-Hartman

This is the start of the stable review cycle for the 6.12.113 release. There are 505 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know. Responses should be made by Fri, 16 Oct 2026 12:37:19 +0000. Anything received after that time might be too late. The whole patch series can be found in one patch at: https://www.kernel.org/pub/linux/kernel/v6.x/stable-review/patch-6.12.113-r… or in the git tree and branch at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-6.12.y and the diffstat can be found below. thanks, greg k-h ------------- Pseudo-Shortlog of commits: Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> Linux 6.12.113-rc2 Vicki Pfau <vi(a)endrift.com> HID: steam: Clean up locking Vicki Pfau <vi(a)endrift.com> HID: steam: Refactor registration Vicki Pfau <vi(a)endrift.com> HID: steam: Rearrange teardown sequence Vicki Pfau <vi(a)endrift.com> HID: steam: Fully unregister controller when hidraw is opened Kuba Piecuch <jpiecuch(a)google.com> sched_ext: Generate qseq from a per-task counter Adrian Betschart <adrian.betschart(a)cinemaone.ch> drm/amd/display: Don't replace a sink mode that shares the native totals Oliver Hartkopp <socketcan(a)hartkopp.net> can: fix unique skb identifier regression under RPS Cristian Papa <pcristian292(a)gmail.com> wifi: mt76: mt7603: initialize global station WCID Adrian Bente <adibente(a)gmail.com> netfilter: flowtable: fix offloaded ct timeout never being extended Florian Westphal <fw(a)strlen.de> netfilter: conntrack: fix erronous removal of offload bit Jens Axboe <axboe(a)kernel.dk> io_uring/waitid: fix KCSAN warning on io_waitid->head Jens Axboe <axboe(a)kernel.dk> io_uring/waitid: use io_waitid_remove_wq() consistently Osama Abdelkader <osama.abdelkader(a)gmail.com> drm/panthor: validate userspace queue count against initialized firmware slot count Maíra Canal <mcanal(a)igalia.com> drm/vc4: Fix binner slot allocation failing on an idle GPU Maxime Ripard <mripard(a)kernel.org> drm/vc4: Make v3d paths unavailable on any generation newer than vc4 Ilia Gavrilov <Ilia.Gavrilov(a)infotecs.ru> vsock: Fix memory leak in vmci_transport_recv_dgram_cb() Fernando Fernandez Mancera <fmancera(a)suse.de> net: openvswitch: validate transport header presence in set_ipv6_addr Vadim Fedorenko <vadim.fedorenko(a)linux.dev> ptp: ocp: fix PCIe delay estimation calculation Willem de Bruijn <willemb(a)google.com> net/packet: call packet_parse_headers after virtio_net_hdr_to_skb Petr Machata <petrm(a)nvidia.com> mlxsw: spectrum_flower: Fix port range register leak in tmplt_create() Li RongQing <lirongqing(a)baidu.com> net/mlx5e: Order ICOSQ cc update after CQ doorbell Tianyi Gao <tianyi(a)cloudflare.com> veth: fix peer NETDEV_XDP_ACT_NDO_XMIT after GRO is toggled while down Gyeyoung Baek <gye976(a)gmail.com> drm/imagination: Fix reference and vm_bo handling in remap() Eric Dumazet <edumazet(a)kernel.org> flow_dissector: avoid u16 truncation of hlen in bpf_flow_dissect() Michael Chan <michael.chan(a)broadcom.com> bnxt_en: Fix driver init in kdump kernel Michael Chan <michael.chan(a)broadcom.com> bnxt_en: Add bnxt_clear_bars() helper Haishuang Yan <yanhaishuang(a)cmss.chinamobile.com> pfcp: make sure the SEID is linear before reading it Victor Nogueira <victor(a)mojatatu.com> net/sched: cls_route: reject change with no routing attribute Haishuang Yan <yanhaishuang(a)cmss.chinamobile.com> devlink: fix devlink_rel reference leak when notify work is pending Eric Dumazet <edumazet(a)kernel.org> flow_dissector: avoid u16 truncation of skb->len when computing thoff Waiman Long <longman(a)redhat.com> cgroup/cpuset: Call is_in_v2_mode() after acquiring cpuset_mutex in cpuset_handle_hotplug() Chen Ridong <chenridong(a)huawei.com> cpuset: separate tmpmasks and cpuset allocation logic Marek Szyprowski <m.szyprowski(a)samsung.com> ASoC: samsung: i2s: enable op_clk in probe to balance runtime PM Alvin Šipraga <alvin.sipraga(a)analog.com> ASoC: adau1372: fix invalid default state of output ASRC and DAC muxes Alvin Šipraga <alvin.sipraga(a)analog.com> ASoC: adau1372: allow sleepy powerdown GPIOs Devin Wittmayer <lucid_duck(a)justthetip.ca> wifi: mt76: mt792x: pick the SAR table layout from the table itself Junjie Cao <junjie.cao(a)intel.com> wifi: mt76: mt792x: treat 0xff ACPI SAR entries as no limit Devin Wittmayer <lucid_duck(a)justthetip.ca> wifi: mt76: mt7925: don't put the band auto marker in TGID Nicolas Cavallari <nicolas.cavallari(a)green-communications.fr> wifi: mt76: mt7915: disable rx napi when removing device Tao Gong <gongtao0607(a)gmail.com> wifi: mt76: mt7996: fix struct mt7996_mcu_wed_rro_ba_delete_event layout Aaron Ma <aaron.ma(a)canonical.com> wifi: mt76: mt7925: restore the legacy BSS after MLO teardown Filipe Manana <fdmanana(a)suse.com> btrfs: fix lost error return value in btrfs_listxattr() Filipe Manana <fdmanana(a)suse.com> btrfs: fix xattr replace when multiple xattrs are packed in the same item Fuad Tabba <fuad.tabba(a)linux.dev> arm64/boot: Don't set PMUv3p9 FGT2 bits without PMUv3 Sang-Hoon Choi <csh0052(a)gmail.com> nvmet: use the local P2P device on metadata allocation failure Mahantesh Salimath <mahantesh(a)nvidia.com> tee: optee: ffa: support shared memory offsets on large-page kernels Rodrigo Zaiden <rodrigoffzz(a)gmail.com> tee: optee: fix kernel-doc warnings Jens Wiklander <jens.wiklander(a)linaro.org> optee: sync secure world ABI headers Sang-Hoon Choi <csh0052(a)gmail.com> cxgb4/ch_ktls: disable softirqs around tid_list erases Omar Ramadan <omar(a)blockcast.net> amt: send the relay's General Query directly from the receive path Jamal Hadi Salim <jhs(a)mojatatu.com> net/sched: em_text: reject unterminated algo before autoload Maíra Canal <mcanal(a)igalia.com> drm/vc4: Free the BO cache size list on teardown Myeonghun Pak <mhun512(a)gmail.com> drm/aspeed: Balance the display clock enable on teardown Sang-Hoon Choi <csh0052(a)gmail.com> gpio: exar: initialize the ID before registering its cleanup Oleg Keri <okerixx(a)gmail.com> drm/dp: don't mark the AUX backlight enabled when enabling failed Sai Teja Aluvala <aluvala.sai.teja(a)intel.com> Bluetooth: btintel_pcie: Add shared HW reset for clean start Kiran K <kiran.k(a)intel.com> Bluetooth: btintel_pcie: Add recovery mechanism Ravindra <ravindra(a)intel.com> Bluetooth: btintel_pcie: fix TX descriptor bounds check Vincent Jardin <vjardin(a)free.fr> arm64: dts: lx2160a: fix the iic5 spi3 pinmux offset and value Vincent Jardin <vjardin(a)free.fr> arm64: dts: lx2160a: fix IIC1 pinmux submask rejected by pinctrl-single Vincent Jardin <vjardin(a)free.fr> arm64: dts: lx2160a: fix incorrect pinmux Christian Brauner <brauner(a)kernel.org> namespace: refuse an automount below a mount that is in no namespace Christian Brauner <brauner(a)kernel.org> namei: don't reveal overmounted entries in refwalk Christian Brauner <brauner(a)kernel.org> namespace: don't let a pseudo dentry become the root of a mount Christian Brauner <brauner(a)kernel.org> dcache: don't put a mountpoint on a dentry that's being removed Christian Brauner <brauner(a)kernel.org> namespace: check a submount for references right before unmounting it Christian Brauner <brauner(a)kernel.org> fs: refuse fspick() on internal superblocks Christian Brauner <brauner(a)kernel.org> namespace: don't copy an unmounted mount tree Leo Li <sunpeng.li(a)amd.com> drm/amd/display: Fix direct scanout alpha on some DRM_FORMATs Mikhail Gavrilov <mikhail.v.gavrilov(a)gmail.com> drm/amdgpu: copy debugfs register data outside the GRBM/SRBM locks Alex Deucher <alexander.deucher(a)amd.com> drm/amdgpu: make Mac FB workaround generic Vitaly Prosyak <vitaly.prosyak(a)amd.com> drm/amdgpu: serialize vblank counter reads against GPU reset Haojie Li <lihaojie(a)kylinos.cn> drm/amdkfd: fix dma_buf reference leak in get_dmabuf_info Saleel Kudchadker <Saleel.Kudchadker(a)amd.com> drm/amdkfd: align SDMA doorbell base for shader doorbell writes Fan Wu <fanwu01(a)zju.edu.cn> drm/vc4: drain the hangcheck timer and works on V3D unbind Gyeyoung Baek <gye976(a)gmail.com> drm/imagination: Size page table preallocation by device address Krzysztof Karas <krzysztof.karas(a)intel.com> drm/i915/gt: Unmask interrupts only when ACTIVE is true Krzysztof Karas <krzysztof.karas(a)intel.com> drm/i915/gem: Prevent overstepping exec array boundary Sajal Gupta <sajal2005gupta(a)gmail.com> drm/gud: don't keep a connector without a CRTC as connector_state Nguyen Ngoc Thang <ngocthang2710.1999(a)gmail.com> drm/fb-helper: defer setup when fbdev_probe() fails, not just on -EAGAIN Palla Raghunath <raghunathpalla.0209(a)gmail.com> Bluetooth: RFCOMM: Fix NULL tty_dev dereference in rfcomm_dev_shutdown Maxim Skokov <skokovmaksimevg(a)gmail.com> Bluetooth: RFCOMM: free the skb when the DLC has no owner Iaroslav Voitovych <yaroslav.voytovych(a)gmail.com> Bluetooth: MGMT: Fix status of pending commands flushed on power off Chengfeng Ye <nicoyip.dev(a)gmail.com> Bluetooth: ISO: Serialize concurrent connect calls Chengfeng Ye <nicoyip.dev(a)gmail.com> Bluetooth: ISO: Reject concurrent BIS listener setup Chengfeng Ye <nicoyip.dev(a)gmail.com> Bluetooth: hci_sock: Serialize dead-device detachment Runyu Xiao <runyu.xiao(a)seu.edu.cn> Bluetooth: btintel_pcie: use managed IRQ teardown Karl Mehltretter <kmehltretter(a)gmail.com> riscv: fix load_unaligned_zeropad() fixup for RV32 Ziyi Guo <guoziyi114(a)gmail.com> riscv: entry: gate shadow call stack reload on sstatus.SPP, not tp Runyu Xiao <runyu.xiao(a)seu.edu.cn> scsi: qedi: Initialize callback state before registration Shawn Lin <shawn.lin(a)rock-chips.com> pmdomain: rockchip: propagate subdomain add errors Shawn Lin <shawn.lin(a)rock-chips.com> pmdomain: rockchip: fix clock leak on domain probe failure Shawn Lin <shawn.lin(a)rock-chips.com> pmdomain: rockchip: don't ignore clock lookup errors on attach Ming Qian <ming.qian(a)oss.nxp.com> pmdomain: imx8m-blk-ctrl: Serialize power on/off across sibling domains Ridham Khurana <khurana.ridham222(a)gmail.com> regulator: tps6594-regulator: Fix n_linear_ranges for TPS65224 BUCK2-4 Abhishek Ojha <Abhishek.ojha(a)savoirfairelinux.com> regulator: ltc3676: don't read the write-only HRST and CLIRQ registers Shao-Fu Chen <shf.chen(a)mediatek.com> optee: register TEE devices only once fully initialized Denis V. Lunev <den(a)openvz.org> openvswitch: fix soft lockup in the netlink flow dump Karl Bonde Torp <k.torp(a)samsung.com> nvme: fix swapped ZRASF zone state values for full and read only Weiming Shi <bestswngs(a)gmail.com> net: team: free skb when broadcast has no txable port Fredrik Nyberg <fredrik.nyberg(a)volvocars.com> net: usb: ax88179_178a: fix rx frame length for non-last packets Daniel Machon <daniel.machon(a)microchip.com> net: sparx5: free the matchall entry on destroy Josef Bacik <josef(a)toxicpanda.com> net: skbuff: don't leave stale bytes in skb_copy_and_csum_bits() Sebastien Royen <sebastien.royen(a)armadeus.com> net: dsa: microchip: fix KSZ8765 fiber detection Zixuan Chai <petalzu987(a)gmail.com> net: bridge: avoid recursive multicast port cleanup Chengfeng Ye <nicoyip.dev(a)gmail.com> net/smc: protect clcsock lifetime in smc_getname Quchaosheng <quchaosheng000406(a)163.com> net/packet: guard the ll header push in packet_rcv_spkt() Guangshuo Li <lgs201920130244(a)gmail.com> mmc: sdhci-sprd: disable runtime PM on remove Yibo Tan <lhfff(a)tju.edu.cn> mmc: mtk-sd: Cancel request timeout work on remove Guangshuo Li <lgs201920130244(a)gmail.com> mmc: cavium-thunderx: destroy slot platform devices on remove Guangshuo Li <lgs201920130244(a)gmail.com> mmc: cavium-octeon: destroy slot platform devices on remove Mikulas Patocka <mpatocka(a)redhat.com> dm: fix reading free memory in do_resume Ma Xinmeng <1564938642(a)qq.com> dm-snap: reject the transient exception store for snapshot-merge Ben Cressey <ben(a)cressey.dev> dm-crypt: reject the lmk IV mode with AEAD ciphers Nguyen Ngoc Thang <ngocthang2710.1999(a)gmail.com> memstick: rtsx_usb_ms: complete requests after eject instead of dropping them Raj Ojha <rajojha047(a)gmail.com> memstick: core: wait for request completion before freeing card 성병찬 <tjdqudcks0424(a)naver.com> KEYS: Fix add_key() race with keyring restriction Karl Mehltretter <kmehltretter(a)gmail.com> keys: finalize persistent keyring timeout after link attempt Tristan Madani <tristan(a)talencesecurity.com> ice: fix metadata_dst refcount handling on representor teardown Mingming Cao <mmc(a)linux.ibm.com> ibmveth: fix TX LTB and filter unwind on open-fail Mingming Cao <mmc(a)linux.ibm.com> ibmveth: h_free logical LAN on open-fail after register Ridham Khurana <khurana.ridham222(a)gmail.com> gpio: xilinx: fix runtime PM leak on request error path Vishal Badole <Vishal.Badole(a)amd.com> EDAC/amd64: Mask UMC chip select to the four implemented selects Hui Peng <benquike(a)gmail.com> sctp: copy zeroed stats to user in sctp_getsockopt_pr_streamstatus() when !streamoute Stephen Smalley <stephen.smalley.work(a)gmail.com> selinux: preserve NATIVE_LABELS on already-initialized sb in set_mnt_opts Christian Göttsche <cgzones(a)googlemail.com> selinux: fix data race on AVC latest_notif Johannes Berg <johannes.berg(a)intel.com> Revert "wifi: libertas: reject short monitor TX frames" Chengfeng Ye <nicoyip.dev(a)gmail.com> tipc: hold a reference to nodes found by link name Yuqi Xu <xuyuqiabc(a)gmail.com> tipc: destroy topsrv workqueues before closing connections Daehyeon Ko <4ncienth(a)gmail.com> tcp: reject net_iov in zerocopy receive mapping hints Marek Szyprowski <m.szyprowski(a)samsung.com> swiotlb: fix default_swiotlb_limit() for non-growable default pool Sabrina Dubroca <sd(a)queasysnail.net> strparser: make sure __strp_recv isn't running before tearing down the parser Georgiy Osokin <g.osokin(a)auroraos.dev> tee: shm: reject zero-sized allocations in tee_dyn_shm_alloc_helper() Josef Bacik <josef(a)toxicpanda.com> xen/netfront: don't leak the skb when xennet_fill_frags() fails Pavankumar Kondeti <pavan.kondeti(a)oss.qualcomm.com> workqueue: Fix NULL current_pwq deref in chained work check Jason A. Donenfeld <Jason(a)zx2c4.com> wireguard: noise: reject response consumption after intermediate initiation Ramses de Norre <ramses(a)well-founded.dev> wireguard: queueing: preserve tstamp_type when encapsulating packet Michele Dionisio <michele.dionisio(a)gmail.com> wifi: brcmfmac: fix P2P device removal race in brcmf_detach() Daehyeon Ko <4ncienth(a)gmail.com> vsock/virtio: account only unread bytes in read_skb() Ji-Ze Hong (Peter Hong) <peter_hong(a)fintek.com.tw> usb: f81604: fix struct f81604_int_data size mismatch Palla Raghunath <raghunathpalla.0209(a)gmail.com> dm ioctl: don't let data_start run past the buffer Daehyeon Ko <4ncienth(a)gmail.com> cipso: adjust cached option offsets when removing CIPSO Wentao Liang <vulab(a)iscas.ac.cn> btrfs: scrub: fix local_root reference leak in scrub_print_warning_inode() Michael Garland <minimelkav(a)gmail.com> ASoC: amd: yc: Add DMI quirk for Acer Aspire Go 15 (AG15-21P) Karl Mehltretter <kmehltretter(a)gmail.com> arm64: irq: exclude the softirq stack switch from KCOV Krzysztof Furman <krisfur(a)proton.me> Input: xpad - add support for Corsair Novablade Pro Haotian Zhang <vulab(a)iscas.ac.cn> Input: ati_remote2 - fix type confusion in device attribute handlers Daehyeon Ko <4ncienth(a)gmail.com> ipv6: do not warn on route notification size race Daehyeon Ko <4ncienth(a)gmail.com> ipv4: do not warn on route notification size race Daehyeon Ko <4ncienth(a)gmail.com> ipv4: stop route notification sizing when nexthop group shrinks Daehyeon Ko <4ncienth(a)gmail.com> ipv4: stop exception dump when nexthop group shrinks Daehyeon Ko <4ncienth(a)gmail.com> ipv4: stop PMTU walk when nexthop group shrinks Michael S. Tsirkin <mst(a)redhat.com> ipv4: validate checksum_start before completing checksum Eric Biggers <ebiggers(a)kernel.org> crypto: drbg - Fix ineffective sanity check Baochen Qiang <baochen.qiang(a)oss.qualcomm.com> wifi: ath12k: fix reusing m3 memory Jiajia Liu <liujiajia(a)kylinos.cn> Bluetooth: hci_event: fix simultaneous discovery stuck in FINDING Liew Rui Yan <aethernet65535(a)gmail.com> mm/damon/core: fix unconditionally skip last region SeongJae Park <sj(a)kernel.org> mm/damon/core: do non-safe region walk on kdamond_apply_schemes() Chao Yu <chao(a)kernel.org> f2fs: fix to reset all pinned status during fggc Chao Yu <chao(a)kernel.org> f2fs: fix to shrink gc_lock coverage in f2fs_gc_range() Chao Yu <chao(a)kernel.org> f2fs: fix to reclaim space in f2fs_allocate_pinning_section() Remy D. Farley <one-d-wide(a)protonmail.com> doc/netlink: netlink-raw: Add max check Jakub Kicinski <kuba(a)kernel.org> tools: ynl: add scope qualifier for definitions Jakub Kicinski <kuba(a)kernel.org> tools: ynl-gen: support limits using definitions Jakub Kicinski <kuba(a)kernel.org> tools: ynl-gen: use names of constants in generated limits Matti Vaittinen <mazziesaccount(a)gmail.com> iio: light: rohm-bu27034: Fix error return Matti Vaittinen <mazziesaccount(a)gmail.com> iio: light: rohm-bu27034: Fix infinite delay on error Matti Vaittinen <mazziesaccount(a)gmail.com> iio: bu27034: simplify using guard(mutex) Pengpeng Hou <hppiscas(a)163.com> iio: cdc: ad7150: fix OF matching and publish module aliases Michael Hennerich <michael.hennerich(a)analog.com> iio: buffer-dmaengine: fix sg entry iteration when building dma_vecs Paulo Alcantara <pc(a)manguebit.org> smb: client: only require read lease for size-extending preallocate Fabrice Gasnier <fabrice.gasnier(a)foss.st.com> iio: adc: stm32-adc: fix possible division by zero in processed channel Vladyslav Ivashchenko <cactucatu4eckuu(a)gmail.com> iio: adc: axp288: Add TS bias override for Haier HV103H Cong Nguyen <congnt264(a)gmail.com> iio: adc: max1363: sign-extend bipolar differential channel reads Pengpeng Hou <pengpeng(a)iscas.ac.cn> iio: adc: aspeed: propagate reset deassert errors Krzysztof Kozlowski <krzysztof.kozlowski(a)oss.qualcomm.com> iio: adc: aspeed: Simplify with dev_err_probe Fan Wu <fanwu01(a)zju.edu.cn> iio: adc: ad_sigma_delta: fix use-after-free on unbind Matti Vaittinen <mazziesaccount(a)gmail.com> iio: accel: kionix-kx022a: Prevent memory leak and fix state Matti Vaittinen <mazziesaccount(a)gmail.com> iio: accel: kx022a: Use cleanup.h helpers Felix Fietkau <nbd(a)nbd.name> wifi: mac80211: set info->band for 802.3 encap offload frames Tamizh Chelvam Raja <tamizh.raja(a)oss.qualcomm.com> wifi: mac80211: Add sta pointer sanity check in ieee80211_8023_xmit() Sean Christopherson <seanjc(a)google.com> KVM: SVM: Use the active VMCB's MSR bitmap when checking if MSR is intercepted Dipayaan Roy <dipayanroy(a)linux.microsoft.com> net: mana: remove double CQ cleanup in mana_create_rxq error path Dipayaan Roy <dipayanroy(a)linux.microsoft.com> net: mana: Skip WQ object destruction for uninitialized RXQ Dipayaan Roy <dipayanroy(a)linux.microsoft.com> net: mana: check xdp_rxq registration before unreg in mana_destroy_rxq() Jerome Tollet <jtollet(a)cisco.com> net/mlx5e: Prevent stale XSK buffer release on MPWQE refill retry Jerome Tollet <jtollet(a)cisco.com> net/mlx5e: Prevent stale XSK buffer release on refill retry Matthew Wilcox (Oracle) <willy(a)infradead.org> fs: Free any excess xarray nodes in clear_inode() Zhiling Zou <zhilinz(a)nebusec.ai> wifi: mac80211: count only matching reservations in reserved switch Johan Hovold <johan(a)kernel.org> tty: port: fix tty_port_tty_vhangup() race Eric Dumazet <edumazet(a)kernel.org> bnxt_en: fix DMA mapping length for padded small packets Eric Dumazet <edumazet(a)kernel.org> ipv4: free inet_opt and ireq_opt after an RCU grace period Fuad Tabba <fuad.tabba(a)linux.dev> KVM: arm64: Apply the fine-grained UNDEFs without FEAT_FGT Guixin Liu <kanie(a)linux.alibaba.com> nvme-multipath: set BLK_FEAT_ZONED only after the zone info is known Han Xu <han.xu(a)nxp.com> mtd: spinand: Enable QE on all dies Zhao Li <enderaoelyther(a)gmail.com> wifi: mac80211: shut down RX BA session timer on teardown Nuno Sá <nuno.sa(a)analog.com> mtd: spinand: fix NULL pointer dereference with no ECC engine Timur Kristóf <timur.kristof(a)gmail.com> drm/amd/display: Mark DCE 6.4 as not APU Abdurrahman Hussain <abdurrahman(a)nexthop.ai> i2c: xiic: preserve PEC byte length in SMBus block read setup Manikanta Guntupalli <manikanta.guntupalli(a)amd.com> i2c: xiic: Relocate xiic_i2c_runtime_suspend and xiic_i2c_runtime_resume to facilitate atomic mode Aaron Kling <webgeek1234(a)gmail.com> ALSA: hda/tegra: Re-enable SDO workaround for Tegra194 Ian Rogers <irogers(a)google.com> perf: Replace perf_event_header__init_id with full header init Daniel Starke <daniel.starke(a)siemens.com> tty: n_gsm: fix missing modem controls after DLCI open in convergence layer type 2 Johan Hovold <johan(a)kernel.org> tty: tty_port: restore TTY_IO_ERROR on activation failure Jiri Slaby (SUSE) <jirislaby(a)kernel.org> tty: tty_port: use guard()s Jiri Slaby (SUSE) <jirislaby(a)kernel.org> tty: introduce tty_port_tty guard() Pannarat Wiriyaarritham <pannarat.wiriyaarritham(a)danielcorp.dev> usb: typec: ucsi: acpi: Assume UCSI 1.2 on Acer Nitro ANV15-41 Arthur Heymans <arthur(a)aheymans.xyz> drm/amd/display: Preserve eDP mode on initial ASSR failure Runyu Xiao <runyu.xiao(a)seu.edu.cn> USB: dwc2: shut down wakeup timer before freeing HCD state Myeonghun Pak <mhun512(a)gmail.com> usb: ohci-spear: disable controller wakeup on removal Chen Ni <nichen(a)iscas.ac.cn> usb: ohci-spear: Remove unnecessary NULL check before clk_disable_unprepare() Francisco Beltrán Millalén <fbeltranmillalen(a)gmail.com> drm/amdgpu: reset VI ASIC on MacBookPro14,3 Andre Eikmeyer <dev(a)deq.rocks> drm/amdgpu: reset VI ASIC on MacBookPro15,1 Eric Biggers <ebiggers(a)kernel.org> fsverity: add dependency on 64K or smaller pages Mostafa Saleh <smostafa(a)google.com> KVM: arm64: Use stage-1 leaf size for VM_PFNMAP Beata Michalska <beata.michalska(a)arm.com> arm64: errata: Add Cortex-A725 erratum 3821522 workaround Beata Michalska <beata.michalska(a)arm.com> arm64: errata: Factor out broken AMU const counter cap Chengfeng Ye <nicoyip.dev(a)gmail.com> Bluetooth: Serialize SMP remote OOB data access Chengfeng Ye <nicoyip.dev(a)gmail.com> Bluetooth: hci_core: Serialize SCO and ISO scheduling with teardown Mark Rutland <mark.rutland(a)arm.com> arm64/fpsimd: signal: Forbid non-streaming SVE payload on SME-only systems Mark Rutland <mark.rutland(a)arm.com> arm64/fpsimd: signal: Consistently read FPSIMD context Mark Rutland <mark.rutland(a)arm.com> arm64/fpsimd: signal: Mandate SVE payload for streaming-mode state Mark Rutland <mark.rutland(a)arm.com> arm64/fpsimd: signal: Clear PSTATE.SM when restoring FPSIMD frame only Zhengchuan Liang <zcliangcn(a)gmail.com> perf: Require kernel access for text poke events Dapeng Mi <dapeng1.mi(a)linux.intel.com> perf/core: Check kernel access when kernel callchains are requested Luo Gengkun <luogengkun(a)huaweicloud.com> perf: Remove unnecessary parameter of security check Johan Hovold <johan(a)kernel.org> tty: fix saved termios reset race Jiazi Liu <jiazi.liu1984(a)gmail.com> usb: dwc3: gadget: fix IRQ storm on invalid event buffer count Timur Kristóf <timur.kristof(a)gmail.com> drm/amd/display: Fix fast updates on DCE 8.1 Andrey Albershteyn <aalbersh(a)kernel.org> fs,fsverity: remove check for fsverity being enabled in setattr_prepare() Christoph Hellwig <hch(a)lst.de> fs,fsverity: reject size changes on fsverity files in setattr_prepare Josef Bacik <josef(a)toxicpanda.com> xen/netfront: drop RX packets with a short Ethernet header Gilberto Conde <gilbertorconde(a)gmail.com> net: usb: qmi_wwan: add Quectel EG120K-EA David Howells <dhowells(a)redhat.com> cifs: Fix handling of a beyond-EOF DIO/unbuffered read over SMB1 Marc Zyngier <maz(a)kernel.org> KVM: arm64: vgic-its: Fix MOVALL handling of source redistributor Baolin Wang <baolin.wang(a)linux.alibaba.com> mm: shmem: ignore sysfs configs for shmem forced collapse Baolin Wang <baolin.wang(a)linux.alibaba.com> mm: shmem: change shmem_huge_global_enabled() to return huge order bitmap Baolin Wang <baolin.wang(a)linux.alibaba.com> mm: factor out the order calculation into a new helper Kefeng Wang <wangkefeng.wang(a)huawei.com> mm: shmem: remove __shmem_huge_global_enabled() Paulo Alcantara <pc(a)manguebit.org> netfs: clear post-EOF pagecache when extending a file via write Xuanqiang Luo <luoxuanqiang(a)kylinos.cn> pfcp: fix socket lifetime on netdevice registration failure Bartosz Golaszewski <bartosz.golaszewski(a)oss.qualcomm.com> net: phy: aquantia: fix system interface type not updated in forced mode Paolo Abeni <pabeni(a)redhat.com> mptcp: prevent race between disconnect() and rtx Mehmet Fide <mehmet.fide(a)screeningeagle.com> mtd: rawnand: vf610_nfc: fix false bitflips on reads of erased pages Yi Yang <yiyang13(a)huawei.com> vc_screen: reload vc pointer before if (ret) in vcs_write() to avoid UAF Jiri Slaby (SUSE) <jirislaby(a)kernel.org> tty/vt: use guard()s Jiri Slaby (SUSE) <jirislaby(a)kernel.org> console: introduce console_lock guard()s Asad Kamal <asad.kamal(a)amd.com> drm/amd/powerplay: fix VoltageObjectInfo zero-stride loop and OOB read Chuck Lever <chuck.lever(a)oracle.com> svcrdma: Use svc_xprt_put to free listener on create failure Fuad Tabba <fuad.tabba(a)linux.dev> KVM: arm64: vgic-its: Don't dereference a NULL collection on ITT save Aditya Dutt <duttaditya18(a)gmail.com> jfs: fix array-index-out-of-bounds read in add_missing_indices Eric Dumazet <edumazet(a)google.com> ipv6: use RCU in ip6_output() Fan Wu <fanwu01(a)zju.edu.cn> iio: trigger: cancel reenable_work before freeing trigger Salah Triki <salah.triki(a)gmail.com> iio: proximity: vcnl3020: fix ISR bitmask check in IRQ handler Zhang Jie <zhangjie14(a)huaqin.corp-partner.google.com> iio: proximity: sx9324: Correct proximity channel resolution Cong Nguyen <congnt264(a)gmail.com> iio: proximity: pulsedlight: fix iio_device left registered on PM setup failure Salah Triki <salah.triki(a)gmail.com> iio: proximity: isl29501: Fix return type of isl29501_register_write Laxman Acharya Padhya <acharyalaxman8848(a)gmail.com> iio: proximity: aw96103: validate firmware data length Hui Su <sh_def(a)163.com> iio: pressure: bmp280: fix out-of-bounds access in sampling frequency lookup Fan Wu <fanwu01(a)zju.edu.cn> iio: light: gp2ap020a00f: drain irq_work after free_irq Arka Mondal <arkamondalofficial(a)gmail.com> iio: imu: adis16480: fix unprotected debugfs reads Arka Mondal <arkamondalofficial(a)gmail.com> iio: imu: adis16400: fix unprotected debugfs reads Marco Chen <marcochen.dev(a)gmail.com> iio: health: max30102: fix NULL dereference in interrupt handler Arka Mondal <arkamondalofficial(a)gmail.com> iio: gyro: adis16136: fix unprotected debugfs reads Salah Triki <salah.triki(a)gmail.com> iio: frequency: admv1013: fix wrong channel field used in admv1013_read_raw() Jonathan Cameron <jonathan.cameron(a)oss.qualcomm.com> iio: buffer: Ensure bounce buffer used for unaligned case is zeroed. Jinseob Kim <kimjinseob88(a)gmail.com> iio: buffer: serialize buffer teardown with mode claims Runyu Xiao <runyu.xiao(a)seu.edu.cn> iio: admv1013: initialize callback mutex before registering notifier Fan Wu <fanwu01(a)zju.edu.cn> iio: adc: xilinx-xadc: free IRQ before cancelling the unmask worker on unbind Felix Gu <ustc.gu(a)gmail.com> iio: adc: sun4i-gpadc-iio: drop underflowing pm_runtime_put() calls Felix Gu <ustc.gu(a)gmail.com> iio: adc: sun4i-gpadc-iio: clean up on thermal zone registration failure Fabrice Gasnier <fabrice.gasnier(a)foss.st.com> iio: adc: stm32-adc: fix check on internal channel availability Slavin Liu <bolin.liu(a)seu.edu.cn> iio: adc: pac1934: check ACPI label duplication Salah Triki <salah.triki(a)gmail.com> iio: accel: sca3000: fix frequency divider condition check Jiale Yao <yaojiale02(a)163.com> iio: accel: kxcjk-1013: reject duplicate event disable Frank Sorenson <sorenson(a)redhat.com> smb: client: split cifsFileInfo bitfields to avoid shared-byte RMW races Paulo Alcantara <pc(a)manguebit.org> smb: client: discard post-EOF pagecache when extending a file via copy range Paulo Alcantara <pc(a)manguebit.org> smb: client: discard post-EOF pagecache when extending a file via zero range Daehyeon Ko <4ncienth(a)gmail.com> thunderbolt: Reject oversized XDomain properties responses Kurt Lieber <kurt(a)lieber.org> thunderbolt: Disable CL states for the Anker Prime TB5 dock Mika Westerberg <mika.westerberg(a)linux.intel.com> thunderbolt: Fix KASAN reported use-after-free when request is canceled Ian Lin <ian.lin(a)jetone.com.tw> USB: serial: option: add Compal EXC-T1 support Sebastian Sjoholm <sebastian.sjoholm(a)gmail.com> USB: serial: option: add Quectel RG660QB Ian Lin <jisayme(a)gmail.com> USB: serial: option: add Compal EXM-G1x support Carlo Szelinsky <github(a)szelinsky.de> USB: serial: option: add Quectel EG060W Zhao Dongdong <zhaodongdong(a)kylinos.cn> USB: serial: option: add support for SIMCom SIM8260C Johan Hovold <johan(a)kernel.org> USB: serial: fix ioctl hangup race Johan Hovold <johan(a)kernel.org> USB: serial: fix driver deregistration order Johan Hovold <johan(a)kernel.org> USB: serial: fix dynamic id driver deregistration race Johan Hovold <johan(a)kernel.org> USB: serial: ssu100: fix baud rate overflow Johan Hovold <johan(a)kernel.org> USB: serial: quatech2: fix baud rate overflow Jérémy Carrat <jeremy.carrat(a)icloud.com> USB: serial: cp210x: add Corsair AX1500i Power Supply Yuqi Xu <xuyuqiabc(a)gmail.com> wifi: mac80211: handle empty FILS association request payload Zihan Xi <zihanx(a)nebusec.ai> wifi: mac80211: fix mesh fast xmit path deletion UAF Zhao Li <enderaoelyther(a)gmail.com> wifi: mac80211: release mesh path quota on failed additions Ruide Cao <caoruide123(a)gmail.com> wifi: mac80211: reject invalid 320 MHz CSA bandwidth Yuqi Xu <xuyuqiabc(a)gmail.com> wifi: mac80211: minstrel_ht: validate fixed rate index Zhao Li <enderaoelyther(a)gmail.com> wifi: mac80211: keep fallback association elements alive Zhao Li <enderaoelyther(a)gmail.com> wifi: mac80211: account proxy paths against the mesh path limit Zhao Li <enderaoelyther(a)gmail.com> wifi: mac80211: drain PS delivery work during station teardown Zhiling Zou <zhilinz(a)nebusec.ai> wifi: mac80211: keep paired old chanctx alive Guangshuo Li <lgs201920130244(a)gmail.com> wifi: iwlegacy: 3945: free EEPROM data on remove Tianchu Chen <flynnnchen(a)tencent.com> wifi: cw1200: fix TX padding OOB read leaking heap data to device Sean Christopherson <seanjc(a)google.com> KVM: x86/mmu: Bail from shadow walks if the root is invalid or a dummy Sean Christopherson <seanjc(a)google.com> KVM: nVMX: Force MSR bitmap refresh if runtime eVMCS controls are modified Nuno Sá <nuno.sa(a)analog.com> mtd: spinand: fix zero oobavail when no ECC engine is used Mehmet Fide <mehmet.fide(a)screeningeagle.com> mtd: rawnand: vf610_nfc: fix reads on chips with more than 64 bytes of OOB Runyu Xiao <runyu.xiao(a)seu.edu.cn> mtd: rawnand: cadence: Initialize IRQ state before requesting IRQ Pei Xiao <xiaopei01(a)kylinos.cn> mtd: block2mtd: Fix divide error when erase_size is zero Weiming Shi <bestswngs(a)gmail.com> nvmet-auth: fix out-of-bounds write in nvmet_auth_challenge() Bean Huo <beanhuo(a)micron.com> nvme-pci: add NVME_QUIRK_DMAPOOL_ALIGN_512 for Micron 4100AT Daehyeon Ko <4ncienth(a)gmail.com> nvme-multipath: fix underflow in ANA log bounds checks Jiangshan Yi <yijiangshan(a)kylinos.cn> tpm: fix off-by-four bounds check in tpm2_get_random() Willem de Bruijn <willemb(a)google.com> net: extend IPv6 exthdr detection of tunneled packets Aldo Ariel Panzardo <qwe.aldo(a)gmail.com> HID: multitouch: stop the release timer from being rearmed on remove Zhiling Zou <zhilinz(a)nebusec.ai> ipvs: bound LBLCR and LBLC cache growth Jens Axboe <axboe(a)kernel.dk> io_uring: fix task_work add use-after-free with SQPOLL Chandrashekar Devegowda <chandrashekar.devegowda(a)intel.com> Bluetooth: btintel_pcie: reject oversized TX packets in send_frame() Chandrashekar Devegowda <chandrashekar.devegowda(a)intel.com> Bluetooth: btintel_pcie: fix plen overflow in btintel_pcie_recv_frame() Chandrashekar Devegowda <chandrashekar.devegowda(a)intel.com> Bluetooth: btintel: fix buffer over-read in btintel_hw_error() Chengfeng Ye <nicoyip.dev(a)gmail.com> Bluetooth: hci_core: Serialize fragmented ISO packet queueing Chengfeng Ye <nicoyip.dev(a)gmail.com> Bluetooth: hci_core: Serialize ACL scheduling with channel deletion Linmao Li <lilinmao(a)kylinos.cn> Bluetooth: hci_core: Fix inquiry cache timestamps on 64-bit systems Chengfeng Ye <nicoyip.dev(a)gmail.com> Bluetooth: hci_conn: Lock parent access during enhanced SCO setup Chengfeng Ye <nicoyip.dev(a)gmail.com> Bluetooth: hci_sync: Fix inquiry cache use-after-free Chengfeng Ye <nicoyip.dev(a)gmail.com> Bluetooth: RFCOMM: Fix initial port reference race Abdurrahman Hussain <abdurrahman(a)nexthop.ai> i2c: xiic: don't clobber msg->len to signal block-read completion Dinh Nguyen <dinguyen(a)kernel.org> EDAC/altera: Fix memory leak on dci allocation failure Xiang Mei <xmei5(a)asu.edu> ALSA: ua101: reject mismatched capture/playback packet sizes Kyle Zeng <kylebot(a)openai.com> ALSA: seq: Serialize compat port-info ioctls Zimeng Li <me(a)lizi.moe> ASoC: qcom: lpass-cpu: use DAI table index for playback constraints Jiangshan Yi <yijiangshan(a)kylinos.cn> ASoC: codecs: rt1017-sdca-sdw: fix uninitialized stream_config->type Jiangshan Yi <yijiangshan(a)kylinos.cn> ASoC: codecs: max98363: fix uninitialized stream_config->type Paul Mbewe <paultyson.mbewe(a)ziehl-abegg.de> serial: sc16is7xx: refill TX FIFO below trigger using fresh TXLVL Paul Mbewe <paultyson.mbewe(a)ziehl-abegg.de> serial: sc16is7xx: fix TX gap caused by kfifo circular buffer wrap-around Wentao Liang <vulab(a)iscas.ac.cn> serial: vt8500: Fix clock reference leak in vt8500_serial_probe() Simon Gassner <simon.gassner(a)noxsystems.com> serial: tegra: don't clear the Tx FIFO on an Rx-only reset Wentao Liang <vulab(a)iscas.ac.cn> serial: ma35d1: Fix clock reference leak in ma35d1serial_probe() Johan Hovold <johan(a)kernel.org> serial: fix TIOCMIWAIT race Fan Wu <fanwu01(a)zju.edu.cn> serial: 8250_bcm7271: fix use-after-free in brcmuart_remove() Fan Wu <fanwu01(a)zju.edu.cn> tty: serial: max3100: shut down timer before freeing port Johan Hovold <johan(a)kernel.org> tty: abort break signalling on hangup Viken Dadhaniya <viken.dadhaniya(a)oss.qualcomm.com> tty: serial: qcom_geni_serial: Keep console RX functional after deep idle Joshua Rogers <linux(a)joshua.hu> tty: vcc: hold port lock when clearing tty pointer in vcc_cleanup Joshua Rogers <linux(a)joshua.hu> tty: vcc: zero-initialize control packet in vcc_send_ctl() Johan Hovold <johan(a)kernel.org> tty: amiserial: fix broken TIOCMIWAIT Mingyu Wang <25181214217(a)stu.xidian.edu.cn> tty: vt: fix memory leak in vc_allocate() Jie Deng <dengjie03(a)kylinos.cn> usb: cdns3: Fix NULL pointer dereference in cdns3_pci_probe Fan Wu <fanwu01(a)zju.edu.cn> usb: cdns3: fix use-after-free in cdns3_gadget_exit() Jameson Thies <jthies(a)google.com> usb: typec: ucsi: displayport: Current CAM OOB index fixup Prashanth K <prashanth.k(a)oss.qualcomm.com> usb: typec: ucsi: Get the connector fwnode based on reg value Fan Wu <fanwu01(a)zju.edu.cn> usb: typec: ucsi: glink: fix use-after-free of ucsi on remove Radhey Shyam Pandey <radhey.shyam.pandey(a)amd.com> usb: typec: tipd: fix uninitialized typec_partner_desc in tps6598x_connect() Marian Rotariu <marian.c.rotariu(a)gmail.com> usb: typec: tipd: don't send GAID when probe fails in APP mode Amit Sunil Dhamne <amitsd(a)google.com> usb: typec: tcpm: recover after failure to start the frs ams Hui Peng <benquike(a)gmail.com> usb: core: clear both ep_in and ep_out for non-ep0 control endpoints Myeonghun Pak <mhun512(a)gmail.com> usb: chipidea: tegra: disable runtime PM on resume failure Yuchao Zhang <ndaugoing(a)gmail.com> usb: gadget: f_fs: Fix NULL pointer dereference in FUNCTIONFS_ENDPOINT_DESC Alan Stern <stern(a)rowland.harvard.edu> USB: gadget: dummy-hcd: Fix wait for outstanding request completions Fan Wu <fanwu01(a)zju.edu.cn> usb: gadget: aspeed-vhub: cancel wake work on device removal Radhey Shyam Pandey <radhey.shyam.pandey(a)amd.com> usb: dwc3: am62: Fix runtime PM usage count leak on probe error path Linkai Gong <gonglinkai(a)kylinos.cn> usb: typec: anx7411 - stop the IRQ before destroying the workqueue Liu Chao <liuc63(a)xiaopeng.com> usb: gadget: f_uac1_legacy: validate bRequest index in generic_{set,get}_cmd Takashi Iwai <tiwai(a)suse.de> usb: gadget: midi2: Fix the jack descriptor array sizes Myeonghun Pak <mhun512(a)gmail.com> usb: ohci-st: disable controller wakeup on removal Myeonghun Pak <mhun512(a)gmail.com> usb: ohci-s3c2410: disable controller wakeup on removal Myeonghun Pak <mhun512(a)gmail.com> usb: ohci-da8xx: disable controller wakeup on cleanup Orgad Shaneh <orgads(a)gmail.com> usb: octeon-hcd: fix the FIFO-flush timeout computation Lovekesh Solanki <lovekeshsolanki00(a)gmail.com> usb: hub: use shorter 120ms post resume hold for SS root hubs Syed Labeeq Sajid Bukhari <syedlabeeq(a)gmail.com> usb: storage: sierra_ms: reject short SWoC info transfers Johan Hovold <johan(a)kernel.org> USB: serial: fix port tear down use-after-free Yuchao Zhang <ndaugoing(a)gmail.com> USB: cdc-acm: skip URB restart in port_shutdown if disconnected Johan Hovold <johan(a)kernel.org> USB: cdc-acm: fix racy TIOCMIWAIT implementation Viken Dadhaniya <viken.dadhaniya(a)oss.qualcomm.com> soc: qcom: geni-se: Correct QUP Core ICC vote constants Yuxiao Wang <yuxiao.wang(a)certik.com> nitro_enclaves: fix use-after-free on SLOT_ALLOC failure Raphaël Larocque <rlarocque(a)disroot.org> Input: synaptics - limit T440p InterTouch quirk to LEN0036 Lovekesh Solanki <lovekeshsolanki00(a)gmail.com> Input: synaptics - add LEN205b entry to smbus_pnp_ids for ThinkPad T490 David Heidelberg <david(a)ixit.cz> Input: s6sy761 - fix resume ordering and restore sensing Lovekesh Solanki <lovekeshsolanki00(a)gmail.com> Input: i8042 - add nomux quirk for Fujitsu LIFEBOOK U7410 Martino Papero <martino.papero(a)lcb.to.it> Input: atkbd - skip deactivate for Lenovo IdeaPad Slim 3 15IWC11 Wentao Liang <vulab(a)iscas.ac.cn> kgdboc: Fix tty driver reference leak in configure_kgdboc() Tomer Pomeranc <tomerpo(a)gmail.com> binder: fix leaked fd fixups on TF_UPDATE_TXN supersede Tomer Pomeranc <tomerpo(a)gmail.com> binder: fix is_failure flag for superseded transaction cleanup Guangshuo Li <lgs201920130244(a)gmail.com> drm/amdgpu: fix ACP MFD device leak on init failure Guangshuo Li <lgs201920130244(a)gmail.com> drm/amdgpu: fix IP instance memory leak on kobject add failure Wentao Liang <vulab(a)iscas.ac.cn> drm/mediatek: Fix pdev reference leak in mtk_drm_bind() Guangshuo Li <lgs201920130244(a)gmail.com> drm/mediatek: Fix ovl adaptor platform device leak Haojie Li <lihaojie(a)kylinos.cn> drm/mediatek: Add missing IS_ERR check for ovl_adaptor platform device Imre Kaloz <kaloz(a)kernel.org> drm/radeon: Read the VRAM VBIOS signature with readb() Willian Oliveira <williandossantosdeoliveira287(a)gmail.com> drm/amdgpu/gfx6: fix firmware leak on teardown Timur Kristóf <timur.kristof(a)gmail.com> drm/amd/pm/si: Fix updating clock limits on AC/DC Timur Kristóf <timur.kristof(a)gmail.com> drm/amd/pm/si: Check AMD_IS_MOBILITY flag for PPSMC_SYSTEMFLAG_GPIO_DC Jiangshan Yi <yijiangshan(a)kylinos.cn> drm/amd/display: check dc_state_create_copy() for NULL in dm_suspend Nikola Prica <nikola.prica(a)amd.com> PCI: Accept AtomicOps already enabled by the hypervisor Takashi Iwai <tiwai(a)suse.de> ALSA: ice1712: Fix the error handling via auto-cleanup at probe Takashi Iwai <tiwai(a)suse.de> ALSA: core: Define auto-cleanup for snd_card_free() Luo Gengkun <luogengkun2(a)huawei.com> perf: Fix race between perf_event_exit_task() and perf_pending_task() Hongjian Dai <daihongjian(a)kylinsec.com.cn> i2c: at91: release DMA channels when probe defers Lorenzo Bianconi <lorenzo.bianconi(a)oss.qualcomm.com> net: mvneta: clear XDP pfmemalloc flag between frames Alexander Lobakin <aleksander.lobakin(a)intel.com> xdp, xsk: constify read-only arguments of some static inline helpers Eric Dumazet <edumazet(a)kernel.org> ipv6: sr: use skb_get_hash_net() in seg6_make_flowlabel() Prathamesh Deshpande <prathameshdeshpande7(a)gmail.com> net/mlx5e: Fix AF_XDP TX timestamp teardown NULL dereference Quentin Freimanis <quentin(a)q-lab.dev> net: sparx5: make ports inherit the switch base mac address type Harshit Mogalapalli <harshit.m.mogalapalli(a)oracle.com> net: microchip: vcap: stop scanning after deleting key field Pablo Neira Ayuso <pablo(a)netfilter.org> netfilter: flowtable: generalize pending status bit Florian Westphal <fw(a)strlen.de> netfilter: conntrack: rework offload nf_conn timeout extension logic Florian Westphal <fw(a)strlen.de> netfilter: conntrack: remove skb argument from nf_ct_refresh Fernando Fernandez Mancera <fmancera(a)suse.de> netfilter: bpf: reject invalid NAT manipulation types Julian Anastasov <ja(a)ssi.bg> ipvs: filter some flags received in the backup server Julian Anastasov <ja(a)ssi.bg> ipvs: do not create invisible templates Julian Anastasov <ja(a)ssi.bg> ipvs: fix missing counter decrement in lblc Jeff Jo <jeffjo(a)openai.com> tcp: refresh TS.Recent for accepted old ACKs Sandeep Haemoon <sandeeph(a)loljews.com> net: ethernet: mtk_eth_soc: allocate dummy netdev sooner Jamal Hadi Salim <jhs(a)mojatatu.com> net: cap skb->queue_mapping when the tx queue is picked Nicolai Buchwitz <nb(a)tipi-net.de> net: bcmgenet: fix NULL dereference in set_coalesce before first open Niklas Cassel <cassel(a)kernel.org> virtio_blk: set the zone write granularity Jamal Hadi Salim <jhs(a)mojatatu.com> net/sched: sch_codel: match the no-drop threshold to the packet size Jamal Hadi Salim <jhs(a)mojatatu.com> net/sched: fq_codel: match the no-drop threshold to the packet size Eric Dumazet <edumazet(a)google.com> net: restrict SO_RESERVE_MEM to TCP sockets and cap max value Kuniyuki Iwashima <kuniyu(a)google.com> net-memcg: Introduce mem_cgroup_sk_enabled(). Kuniyuki Iwashima <kuniyu(a)google.com> net-memcg: Introduce mem_cgroup_from_sk(). Kuniyuki Iwashima <kuniyu(a)google.com> net: Clean up __sk_mem_raise_allocated(). Kuniyuki Iwashima <kuniyu(a)google.com> mptcp: Fix up subflow's memcg when CONFIG_SOCK_CGROUP_DATA=n. Kuniyuki Iwashima <kuniyu(a)google.com> memcg: convert memcg->socket_pressure to u64 Jérémy Jean <Jeremy.Jean(a)oss.cyber.gouv.fr> tipc: prevent GCM nonce reuse on peer key changes Baha Mesleh <baha.mesleh(a)nokia.com> octeontx2-af: mcs: Fix SC resource cleanup loop Anirudh Virdi <avirdi(a)redhat.com> net/mlx5: Fix slab-out-of-bounds when handling team device events Rongwei Liu <rongweil(a)nvidia.com> net/mlx5: LAG, Refactor lag logic Florian Fainelli <florian.fainelli(a)broadcom.com> net: systemport: Fix RUNT MIB counter register offset calculation Florian Fainelli <florian.fainelli(a)broadcom.com> net: systemport: Fix buffer overflow in bcm_sysport_get_stats() Nguyen Ngoc Thang <ngocthang2710.1999(a)gmail.com> Bluetooth: hci_sync: don't drain cmd_sync backlog on unregister Florian Westphal <fw(a)strlen.de> netfilter: ipset: do not update comments from kernel-side adds Qishuai Liu <lqs(a)lqs.me> ipv6: fix prefix route expiry in modify_prefix_route() Jamal Hadi Salim <jhs(a)mojatatu.com> net/sched: cls_api: reclaim an empty proto on the error path Binbin Deng <18983559317(a)163.com> net/mctp: publish the mctp_dev only after it is initialised Sai Teja Aluvala <aluvala.sai.teja(a)intel.com> Bluetooth: btintel: validate DDC record lengths Sang-Hoon Choi <csh0052(a)gmail.com> Bluetooth: hci_core: free the HCI ID if naming fails Cezary Rojewski <cezary.rojewski(a)intel.com> ASoC: codecs: rt274: Fix format setting for 44100 rate Cezary Rojewski <cezary.rojewski(a)intel.com> ASoC: codecs: rt286: Revert delay value for jack setup Felix Fietkau <nbd(a)nbd.name> wifi: mac80211: prevent AP VLAN tx from other interfaces Tamizh Chelvam Raja <tamizh.raja(a)oss.qualcomm.com> wifi: mac80211: Add 802.3 multicast encapsulation offload support Tamizh Chelvam Raja <tamizh.raja(a)oss.qualcomm.com> wifi: mac80211: Add multicast to unicast support for 802.3 path Zhao Li <enderaoelyther(a)gmail.com> wifi: cfg80211: preserve hidden-group beacon IE ownership Manush Prajwal <manushprajwal555(a)gmail.com> rtc: mpfs: fix unchecked devm_clk_get() error pointer in probe() Aamir Ahmed <elb12345(a)hotmail.co.uk> rtc: ac100: Fix clock provider use-after-free on probe failure Uwe Kleine-König <u.kleine-koenig(a)baylibre.com> rtc: Switch back to struct platform_driver::remove() Liu Dalin <liudalin(a)kylinsec.com.cn> rtc: dev: zero-initialize struct rtc_wkalrm to prevent information leak Georgios Karantzas <gck.kara(a)gmail.com> wifi: ath9k_htc: bound TX aggregation to MAX_TX_BUF_SIZE Pengpeng Hou <pengpeng(a)iscas.ac.cn> wifi: ath9k: reject short WMI command responses Nicolas Escande <nico.escande(a)gmail.com> wifi: ath11k: reset ar->num_stations on hardware start Sheetal <sheetal(a)nvidia.com> ASoC: tegra: Fix ASRC Stream6 input threshold control Aamir Ahmed <elb12345(a)hotmail.co.uk> wifi: wfx: validate MIB read length before copying to caller HyeongJun An <sammiee5311(a)gmail.com> ASoC: wm8903: Move the DRC QR threshold to the register that holds it Abdurrahman Hussain <abdurrahman(a)nexthop.ai> of/overlay: don't create "//" paths for fragments targeting the root Abdurrahman Hussain <abdurrahman(a)nexthop.ai> of/overlay: don't leak fragment references when changeset init fails Karl Mehltretter <kmehltretter(a)gmail.com> random: fix vgetrandom_opaque_params kernel-doc Julian Sun <sunjunchao(a)bytedance.com> nvmet: preserve device path on allocation failure Karl Mehltretter <kmehltretter(a)gmail.com> mtd: core: call _get_device() with the master MTD Matti Vaittinen <mazziesaccount(a)gmail.com> iio: accel: kionix-kx022a: Fix array boundary check SJ Park <sj(a)kernel.org> mm/damon/core: don't skip damos_adjust_quota() while esz is not zero Nathan Chancellor <nathan(a)kernel.org> random: vDSO: avoid call to memset() when zeroing reserved parameter Tetsuo Handa <penguin-kernel(a)I-love.SAKURA.ne.jp> perf/core: Fix WARN in perf_sigtrap() Lorenzo Stoakes (ARM) <ljs(a)kernel.org> mm/secretmem: properly account locked pages Xiang Mei <xmei5(a)asu.edu> ALSA: line6: reject oversized playback packets Nguyen Ngoc Thang <ngocthang2710.1999(a)gmail.com> ALSA: caiaq: unregister the input device when probe fails Wentao Liang <vulab(a)iscas.ac.cn> wifi: wlcore: Fix runtime PM leak in wlcore_remove() Zizhi Wo <wozizhi(a)huawei.com> vt: skip screen update for DEC alignment test on backgroup consoles Maoyi Xie <maoyixie.tju(a)gmail.com> rds_tcp: close NULL deref window in rds_tcp_set_callbacks Jiangshan Yi <yijiangshan(a)kylinos.cn> smb: client: clear setuid/setgid bit on write with cifsacl/modefromsid/posix extensions Zhichen Wang <wangzhichen(a)manus.ai> virt: vmgenid: set driver_data before registering notification handlers Surendran Kanagaraj <surenkj(a)amazon.com> tpm: Disable TPM on null key name mismatch Jun Yang <junvyyang(a)tencent.com> sctp: check RCV_SHUTDOWN after the sendmsg connect wait Runyu Xiao <runyu.xiao(a)seu.edu.cn> rtc: spear: initialize IRQ state before requesting alarm IRQ Aamir Ahmed <elb12345(a)hotmail.co.uk> rtc: ac100: Assign .num before accessing .hws Ilkka Lappeteläinen <ilkka.lappetelainen(a)gmail.com> net/packet: prevent TX_RING byte count overflow Aohan Mei <henrymei(a)tencent.com> netfilter: nft_flow_offload: drop flowtable reference on init error path Alireza Asgari <alireza(a)asgari.net> net: fix checksum offsets in skb_splice_from_iter() Abdurrahman Hussain <abdurrahman(a)nexthop.ai> of/overlay: only treat a positive changeset id as registered Abdurrahman Hussain <abdurrahman(a)nexthop.ai> of/overlay: put property on deadprops only after changeset add succeeds Wentao Liang <vulab(a)iscas.ac.cn> of/irq: Fix remaining refcount leaks in of_irq_init() Leon Hwang <leon.hwang(a)linux.dev> kprobes: Skip disarmed probes when checking optkprobe overlap Benjamin Tissoires <bentiss(a)kernel.org> HID: bpf: cast size to ssize_t when checking hid_bpf_hw_request Jérémy Jean <Jeremy.Jean(a)oss.cyber.gouv.fr> audit: fix exe mark UAF in kill_rules() Takashi Iwai <tiwai(a)suse.de> ALSA: usb-audio: Apply IGNORE_CTL_ERROR quirk to all Audient devices Kuniyuki Iwashima <kuniyu(a)google.com> neighbour: Skip default parms when resumed in neightbl_dump_info(). Darrick J. Wong <djwong(a)kernel.org> xfs: fix cursor and pointer handling when recovering iunlink buckets Zihan Xi <zihanx(a)nebusec.ai> smb: client: close completed creates on compound wait errors Aldo Ariel Panzardo <qwe.aldo(a)gmail.com> Bluetooth: ISO: release unused CIS holds after channel attach SeungJu Cheon <suunj1331(a)gmail.com> Bluetooth: ISO: Fix data-race on iso_pi(sk) in socket and HCI event paths Zihan Xi <zihanx(a)nebusec.ai> smb: client: close handle after create-context parsing failure ChenXiaoSong <chenxiaosong(a)kylinos.cn> smb/client: pass cifs_open_info_data to SMB2_open() ChenXiaoSong <chenxiaosong(a)kylinos.cn> smb/client: use stack-allocated smb2_file_all_info in smb3_query_mf_symlink() Peter Ujfalusi <peter.ujfalusi(a)linux.intel.com> ASoC: SOF: ipc4/Intel: Add support for library restore firmware functionality Peter Ujfalusi <peter.ujfalusi(a)linux.intel.com> ASoC: SOF: ipc4-priv: Add kernel doc for fw_context_save of sof_ipc4_fw_data Tibor Harcsa <silurust(a)gmail.com> Bluetooth: btusb: Add IMC Networks QCA9377 to quirks table Richard Fitzgerald <rf(a)opensource.cirrus.com> ASoC: sdw_utils: Set snd_soc_dai_link_ch_map.codec_ch_mask for capture Jiayuan Chen <jiayuan.chen(a)linux.dev> bpf, xdp: move offload check into dev_xdp_install() Jiakai Xu <jiakaipeanut(a)gmail.com> RISC-V: KVM: Fix null pointer dereference in kvm_riscv_aia_imsic_has_attr() Darrick J. Wong <djwong(a)kernel.org> xfs: don't let memory failures leak blocks and kill repairs Namjae Jeon <linkinjeon(a)kernel.org> smb: client: use finish_no_open() for non-regular inodes Mike Rapoport (Microsoft) <rppt(a)kernel.org> selftests/mm: hugetlb-mremap: add setup of HugeTLB pages Marc Zyngier <maz(a)kernel.org> KVM: arm64: nv: Delay freeing of shadow S2 structures until VM destruction Marc Zyngier <maz(a)kernel.org> KVM: arm64: nv: Fix life cycle of the nested_mmus array Fan Wu <fanwu01(a)zju.edu.cn> smb: client: fix cifsFileInfo reference leak in deferred close Frank Sorenson <sorenson(a)redhat.com> smb: client: fix OOB read/write from unvalidated DataOffset in coalesce_t2() ------------- Diffstat: Documentation/arch/arm64/silicon-errata.rst | 2 + Documentation/filesystems/netfs_library.rst | 26 ++ Documentation/netlink/genetlink-c.yaml | 14 +- Documentation/netlink/genetlink-legacy.yaml | 14 +- Documentation/netlink/genetlink.yaml | 14 +- Documentation/netlink/netlink-raw.yaml | 20 +- Documentation/networking/strparser.rst | 2 +- Makefile | 4 +- arch/arm64/Kconfig | 30 ++ arch/arm64/boot/dts/freescale/fsl-lx2160a.dtsi | 19 +- arch/arm64/include/asm/el2_setup.h | 5 +- arch/arm64/include/asm/kvm_host.h | 2 +- arch/arm64/include/asm/kvm_nested.h | 3 +- arch/arm64/kernel/Makefile | 3 + arch/arm64/kernel/cpu_errata.c | 24 +- arch/arm64/kernel/cpufeature.c | 2 +- arch/arm64/kernel/signal.c | 85 +++--- arch/arm64/kernel/topology.c | 11 +- arch/arm64/kernel/vdso/Makefile | 2 +- arch/arm64/kvm/arm.c | 10 +- arch/arm64/kvm/emulate-nested.c | 4 - arch/arm64/kvm/mmu.c | 46 +-- arch/arm64/kvm/nested.c | 95 +++--- arch/arm64/kvm/vgic/vgic-its.c | 22 +- arch/arm64/tools/cpucaps | 2 +- arch/loongarch/vdso/Makefile | 1 + arch/powerpc/kernel/vdso/Makefile | 1 + arch/powerpc/perf/imc-pmu.c | 23 +- arch/riscv/include/asm/scs.h | 17 +- arch/riscv/kernel/entry.S | 2 +- arch/riscv/kvm/aia_imsic.c | 5 +- arch/riscv/mm/extable.c | 4 +- arch/s390/kernel/vdso64/Makefile | 1 + arch/x86/entry/vdso/Makefile | 1 + arch/x86/events/intel/bts.c | 2 +- arch/x86/events/intel/core.c | 2 +- arch/x86/events/intel/p4.c | 2 +- arch/x86/kvm/mmu/mmu.c | 6 + arch/x86/kvm/svm/svm.c | 12 +- arch/x86/kvm/vmx/nested.c | 6 + crypto/drbg.c | 11 +- drivers/android/binder.c | 3 +- drivers/block/virtio_blk.c | 1 + drivers/bluetooth/btintel.c | 29 +- drivers/bluetooth/btintel_pcie.c | 138 ++++++--- drivers/bluetooth/btintel_pcie.h | 2 + drivers/bluetooth/btusb.c | 2 + drivers/char/tpm/tpm2-cmd.c | 2 +- drivers/char/tpm/tpm2-sessions.c | 1 + drivers/edac/altera_edac.c | 4 +- drivers/edac/amd64_edac.c | 4 +- drivers/gpio/gpio-exar.c | 2 +- drivers/gpio/gpio-xilinx.c | 9 +- drivers/gpu/drm/amd/amdgpu/amdgpu_acp.c | 13 +- drivers/gpu/drm/amd/amdgpu/amdgpu_amdkfd.c | 8 +- drivers/gpu/drm/amd/amdgpu/amdgpu_debugfs.c | 77 +++-- drivers/gpu/drm/amd/amdgpu/amdgpu_discovery.c | 2 + drivers/gpu/drm/amd/amdgpu/amdgpu_gmc.c | 17 +- drivers/gpu/drm/amd/amdgpu/amdgpu_kms.c | 5 + drivers/gpu/drm/amd/amdgpu/gfx_v6_0.c | 9 + drivers/gpu/drm/amd/amdgpu/vi.c | 21 ++ .../gpu/drm/amd/amdkfd/kfd_device_queue_manager.c | 32 ++- drivers/gpu/drm/amd/amdkfd/kfd_priv.h | 7 + drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm.c | 16 +- .../drm/amd/display/amdgpu_dm/amdgpu_dm_plane.c | 20 +- drivers/gpu/drm/amd/display/dc/dc.h | 1 + .../gpu/drm/amd/display/dc/dce60/dce60_resource.c | 1 - .../dc/link/protocols/link_edp_panel_control.c | 4 +- .../amd/display/dc/resource/dce80/dce80_resource.c | 1 + drivers/gpu/drm/amd/pm/legacy-dpm/si_dpm.c | 39 +-- .../gpu/drm/amd/pm/powerplay/hwmgr/ppatomctrl.c | 10 +- .../gpu/drm/amd/pm/powerplay/hwmgr/ppatomfwctrl.c | 11 +- drivers/gpu/drm/aspeed/aspeed_gfx_drv.c | 5 +- drivers/gpu/drm/display/drm_dp_helper.c | 4 +- drivers/gpu/drm/drm_fb_helper.c | 6 +- drivers/gpu/drm/gud/gud_pipe.c | 1 + drivers/gpu/drm/i915/gem/i915_gem_execbuffer.c | 2 +- drivers/gpu/drm/i915/gt/intel_rps.c | 3 +- drivers/gpu/drm/imagination/pvr_mmu.c | 25 +- drivers/gpu/drm/imagination/pvr_vm.c | 8 +- drivers/gpu/drm/mediatek/mtk_drm_drv.c | 17 +- drivers/gpu/drm/panthor/panthor_sched.c | 3 + drivers/gpu/drm/radeon/radeon_bios.c | 6 +- drivers/gpu/drm/vc4/vc4_bo.c | 29 +- drivers/gpu/drm/vc4/vc4_crtc.c | 4 +- drivers/gpu/drm/vc4/vc4_drv.c | 8 +- drivers/gpu/drm/vc4/vc4_drv.h | 2 +- drivers/gpu/drm/vc4/vc4_gem.c | 32 ++- drivers/gpu/drm/vc4/vc4_irq.c | 16 +- drivers/gpu/drm/vc4/vc4_kms.c | 2 +- drivers/gpu/drm/vc4/vc4_perfmon.c | 20 +- drivers/gpu/drm/vc4/vc4_render_cl.c | 2 +- drivers/gpu/drm/vc4/vc4_v3d.c | 60 ++-- drivers/gpu/drm/vc4/vc4_validate.c | 10 +- drivers/gpu/drm/vc4/vc4_validate_shaders.c | 2 +- drivers/hid/bpf/hid_bpf_dispatch.c | 2 +- drivers/hid/hid-multitouch.c | 2 +- drivers/hid/hid-steam.c | 230 +++++++-------- drivers/i2c/busses/i2c-at91-master.c | 8 +- drivers/i2c/busses/i2c-xiic.c | 98 ++++--- drivers/iio/accel/kionix-kx022a.c | 77 ++--- drivers/iio/accel/kxcjk-1013.c | 2 +- drivers/iio/accel/sca3000.c | 2 +- drivers/iio/adc/ad_sigma_delta.c | 27 +- drivers/iio/adc/aspeed_adc.c | 13 +- drivers/iio/adc/axp288_adc.c | 8 + drivers/iio/adc/max1363.c | 8 + drivers/iio/adc/pac1934.c | 4 + drivers/iio/adc/stm32-adc.c | 47 +-- drivers/iio/adc/sun4i-gpadc-iio.c | 10 +- drivers/iio/adc/xilinx-xadc-core.c | 9 +- drivers/iio/buffer/industrialio-buffer-dmaengine.c | 16 +- drivers/iio/cdc/ad7150.c | 8 +- drivers/iio/frequency/admv1013.c | 9 +- drivers/iio/gyro/adis16136.c | 2 +- drivers/iio/health/max30102.c | 12 +- drivers/iio/imu/adis16400.c | 2 +- drivers/iio/imu/adis16480.c | 4 +- drivers/iio/industrialio-buffer.c | 7 +- drivers/iio/industrialio-trigger.c | 2 + drivers/iio/light/gp2ap020a00f.c | 2 + drivers/iio/light/rohm-bu27034.c | 133 ++++----- drivers/iio/pressure/bmp280-core.c | 2 +- drivers/iio/proximity/aw96103.c | 30 +- drivers/iio/proximity/isl29501.c | 2 +- drivers/iio/proximity/pulsedlight-lidar-lite-v2.c | 4 +- drivers/iio/proximity/sx9324.c | 2 +- drivers/iio/proximity/vcnl3020.c | 24 +- drivers/input/joystick/xpad.c | 3 + drivers/input/keyboard/atkbd.c | 8 + drivers/input/misc/ati_remote2.c | 12 +- drivers/input/mouse/synaptics.c | 7 +- drivers/input/serio/i8042-acpipnpio.h | 9 + drivers/input/touchscreen/s6sy761.c | 14 +- drivers/md/dm-crypt.c | 7 +- drivers/md/dm-ioctl.c | 14 +- drivers/md/dm-snap.c | 14 + drivers/memstick/core/memstick.c | 8 +- drivers/memstick/host/rtsx_usb_ms.c | 31 +- drivers/mmc/host/cavium-octeon.c | 5 +- drivers/mmc/host/cavium-thunderx.c | 5 +- drivers/mmc/host/mtk-sd.c | 1 + drivers/mmc/host/sdhci-sprd.c | 4 + drivers/mtd/devices/block2mtd.c | 2 +- drivers/mtd/mtdcore.c | 2 +- drivers/mtd/nand/raw/cadence-nand-controller.c | 6 +- drivers/mtd/nand/raw/vf610_nfc.c | 85 +++++- drivers/mtd/nand/spi/core.c | 37 ++- drivers/net/amt.c | 48 +--- drivers/net/can/dev/skb.c | 2 + drivers/net/can/usb/f81604.c | 2 +- drivers/net/dsa/microchip/ksz_common.h | 2 +- drivers/net/ethernet/broadcom/bcmsysport.c | 8 +- drivers/net/ethernet/broadcom/bnxt/bnxt.c | 84 ++++-- drivers/net/ethernet/broadcom/genet/bcmgenet.c | 5 +- .../chelsio/inline_crypto/ch_ktls/chcr_ktls.c | 4 +- drivers/net/ethernet/ibm/ibmveth.c | 22 +- drivers/net/ethernet/intel/ice/ice_eswitch.c | 2 +- drivers/net/ethernet/marvell/mvneta.c | 2 +- drivers/net/ethernet/marvell/octeontx2/af/mcs.c | 4 +- drivers/net/ethernet/mediatek/mtk_eth_soc.c | 38 ++- drivers/net/ethernet/mellanox/mlx5/core/en/xdp.c | 3 + .../net/ethernet/mellanox/mlx5/core/en/xsk/rx.c | 2 + drivers/net/ethernet/mellanox/mlx5/core/en_rx.c | 13 +- .../net/ethernet/mellanox/mlx5/core/lag/debugfs.c | 13 +- drivers/net/ethernet/mellanox/mlx5/core/lag/lag.c | 191 +++++++------ drivers/net/ethernet/mellanox/mlx5/core/lag/lag.h | 14 +- drivers/net/ethernet/mellanox/mlx5/core/lag/mp.c | 24 +- .../net/ethernet/mellanox/mlx5/core/lag/mpesw.c | 10 +- .../net/ethernet/mellanox/mlx5/core/lag/port_sel.c | 16 +- drivers/net/ethernet/mellanox/mlxsw/spectrum.h | 2 + drivers/net/ethernet/mellanox/mlxsw/spectrum_acl.c | 10 +- .../net/ethernet/mellanox/mlxsw/spectrum_flower.c | 9 +- .../net/ethernet/microchip/sparx5/sparx5_main.c | 1 + .../net/ethernet/microchip/sparx5/sparx5_main.h | 1 + .../net/ethernet/microchip/sparx5/sparx5_netdev.c | 1 + .../ethernet/microchip/sparx5/sparx5_tc_matchall.c | 1 + drivers/net/ethernet/microchip/vcap/vcap_api.c | 2 +- drivers/net/ethernet/microsoft/mana/mana_en.c | 10 +- drivers/net/pfcp.c | 10 + drivers/net/phy/aquantia/aquantia_main.c | 5 +- drivers/net/team/team_mode_broadcast.c | 2 + drivers/net/usb/ax88179_178a.c | 6 +- drivers/net/usb/qmi_wwan.c | 1 + drivers/net/veth.c | 1 + drivers/net/wireguard/noise.c | 7 +- drivers/net/wireguard/queueing.h | 2 + drivers/net/wireless/ath/ath11k/mac.c | 1 + drivers/net/wireless/ath/ath12k/qmi.c | 9 +- drivers/net/wireless/ath/ath12k/qmi.h | 3 + drivers/net/wireless/ath/ath9k/hif_usb.c | 21 +- drivers/net/wireless/ath/ath9k/wmi.c | 16 +- drivers/net/wireless/ath/ath9k/wmi.h | 1 + .../wireless/broadcom/brcm80211/brcmfmac/core.c | 27 +- drivers/net/wireless/intel/iwlegacy/3945-mac.c | 1 + drivers/net/wireless/marvell/libertas/tx.c | 7 - drivers/net/wireless/mediatek/mt76/mt7603/init.c | 1 + drivers/net/wireless/mediatek/mt76/mt7915/init.c | 6 + drivers/net/wireless/mediatek/mt76/mt7925/mac.c | 3 +- drivers/net/wireless/mediatek/mt76/mt7925/main.c | 12 + .../net/wireless/mediatek/mt76/mt792x_acpi_sar.c | 134 ++++++--- .../net/wireless/mediatek/mt76/mt792x_acpi_sar.h | 2 + drivers/net/wireless/mediatek/mt76/mt7996/mcu.h | 3 + drivers/net/wireless/silabs/wfx/hif_tx.c | 4 +- drivers/net/wireless/st/cw1200/bh.c | 8 +- drivers/net/wireless/st/cw1200/txrx.c | 14 + drivers/net/wireless/ti/wlcore/main.c | 4 +- drivers/net/xen-netfront.c | 16 +- drivers/nvme/host/multipath.c | 10 +- drivers/nvme/host/pci.c | 2 + drivers/nvme/target/configfs.c | 9 +- drivers/nvme/target/core.c | 2 +- drivers/nvme/target/fabrics-cmd-auth.c | 2 +- drivers/of/irq.c | 2 + drivers/of/overlay.c | 17 +- drivers/pci/pci.c | 15 +- drivers/perf/arm_spe_pmu.c | 4 +- drivers/pmdomain/imx/imx8m-blk-ctrl.c | 15 + drivers/pmdomain/rockchip/pm-domains.c | 20 +- drivers/ptp/ptp_ocp.c | 2 +- drivers/regulator/ltc3676.c | 15 +- drivers/regulator/tps6594-regulator.c | 6 +- drivers/rtc/dev.c | 2 +- drivers/rtc/rtc-88pm80x.c | 2 +- drivers/rtc/rtc-88pm860x.c | 2 +- drivers/rtc/rtc-ab8500.c | 2 +- drivers/rtc/rtc-ac100.c | 39 +-- drivers/rtc/rtc-asm9260.c | 2 +- drivers/rtc/rtc-at91rm9200.c | 2 +- drivers/rtc/rtc-at91sam9.c | 2 +- drivers/rtc/rtc-brcmstb-waketimer.c | 2 +- drivers/rtc/rtc-cadence.c | 2 +- drivers/rtc/rtc-cmos.c | 2 +- drivers/rtc/rtc-cros-ec.c | 2 +- drivers/rtc/rtc-ds1685.c | 2 +- drivers/rtc/rtc-ftrtc010.c | 2 +- drivers/rtc/rtc-hid-sensor-time.c | 2 +- drivers/rtc/rtc-imxdi.c | 2 +- drivers/rtc/rtc-loongson.c | 2 +- drivers/rtc/rtc-lpc24xx.c | 2 +- drivers/rtc/rtc-max77686.c | 2 +- drivers/rtc/rtc-mc13xxx.c | 2 +- drivers/rtc/rtc-mpc5121.c | 2 +- drivers/rtc/rtc-mpfs.c | 8 +- drivers/rtc/rtc-mt7622.c | 2 +- drivers/rtc/rtc-mv.c | 2 +- drivers/rtc/rtc-mxc_v2.c | 2 +- drivers/rtc/rtc-omap.c | 2 +- drivers/rtc/rtc-palmas.c | 2 +- drivers/rtc/rtc-pcf50633.c | 2 +- drivers/rtc/rtc-pic32.c | 2 +- drivers/rtc/rtc-pm8xxx.c | 2 +- drivers/rtc/rtc-pxa.c | 2 +- drivers/rtc/rtc-rc5t583.c | 2 +- drivers/rtc/rtc-rtd119x.c | 2 +- drivers/rtc/rtc-rzn1.c | 2 +- drivers/rtc/rtc-s3c.c | 2 +- drivers/rtc/rtc-sa1100.c | 2 +- drivers/rtc/rtc-sh.c | 2 +- drivers/rtc/rtc-spear.c | 13 +- drivers/rtc/rtc-stm32.c | 2 +- drivers/rtc/rtc-stmp3xxx.c | 2 +- drivers/rtc/rtc-sunplus.c | 2 +- drivers/rtc/rtc-tegra.c | 2 +- drivers/rtc/rtc-tps6586x.c | 2 +- drivers/rtc/rtc-twl.c | 2 +- drivers/rtc/rtc-vt8500.c | 2 +- drivers/rtc/rtc-wm8350.c | 2 +- drivers/rtc/rtc-xgene.c | 2 +- drivers/rtc/rtc-zynqmp.c | 2 +- drivers/scsi/qedi/qedi_main.c | 3 +- drivers/staging/greybus/uart.c | 3 +- drivers/tee/optee/ffa_abi.c | 38 ++- drivers/tee/optee/optee_ffa.h | 29 +- drivers/tee/optee/optee_msg.h | 132 ++++++--- drivers/tee/optee/optee_private.h | 120 ++++---- drivers/tee/optee/optee_smc.h | 37 ++- drivers/tee/optee/smc_abi.c | 17 +- drivers/tee/tee_shm.c | 4 + drivers/thunderbolt/ctl.c | 63 ++-- drivers/thunderbolt/quirks.c | 3 + drivers/thunderbolt/xdomain.c | 4 + drivers/tty/amiserial.c | 9 +- drivers/tty/n_gsm.c | 47 +-- drivers/tty/serial/8250/8250_bcm7271.c | 2 +- drivers/tty/serial/kgdboc.c | 9 + drivers/tty/serial/ma35d1_serial.c | 6 +- drivers/tty/serial/max3100.c | 13 +- drivers/tty/serial/qcom_geni_serial.c | 5 +- drivers/tty/serial/sc16is7xx.c | 53 +++- drivers/tty/serial/serial-tegra.c | 18 +- drivers/tty/serial/serial_core.c | 4 +- drivers/tty/serial/vt8500_serial.c | 1 + drivers/tty/tty_io.c | 54 ++-- drivers/tty/tty_port.c | 205 ++++++------- drivers/tty/vcc.c | 5 +- drivers/tty/vt/vc_screen.c | 50 ++-- drivers/tty/vt/vt.c | 5 +- drivers/usb/cdns3/cdns3-gadget.c | 4 + drivers/usb/cdns3/cdns3-pci-wrap.c | 5 + drivers/usb/chipidea/ci_hdrc_tegra.c | 4 +- drivers/usb/class/cdc-acm.c | 41 +-- drivers/usb/class/cdc-acm.h | 1 - drivers/usb/core/hub.c | 7 +- drivers/usb/core/message.c | 8 +- drivers/usb/dwc2/hcd.c | 3 +- drivers/usb/dwc3/core.h | 19 ++ drivers/usb/dwc3/dwc3-am62.c | 1 + drivers/usb/dwc3/ep0.c | 9 + drivers/usb/dwc3/gadget.c | 108 ++++++- drivers/usb/gadget/function/f_fs.c | 15 +- drivers/usb/gadget/function/f_midi2.c | 4 +- drivers/usb/gadget/function/f_uac1_legacy.c | 6 + drivers/usb/gadget/udc/aspeed-vhub/core.c | 4 + drivers/usb/gadget/udc/aspeed-vhub/dev.c | 2 +- drivers/usb/gadget/udc/aspeed-vhub/hub.c | 5 +- drivers/usb/gadget/udc/aspeed-vhub/vhub.h | 1 + drivers/usb/gadget/udc/dummy_hcd.c | 4 + drivers/usb/host/octeon-hcd.c | 2 +- drivers/usb/host/ohci-da8xx.c | 2 + drivers/usb/host/ohci-s3c2410.c | 1 + drivers/usb/host/ohci-spear.c | 4 +- drivers/usb/host/ohci-st.c | 1 + drivers/usb/serial/bus.c | 6 +- drivers/usb/serial/cp210x.c | 1 + drivers/usb/serial/generic.c | 10 +- drivers/usb/serial/option.c | 14 + drivers/usb/serial/quatech2.c | 19 +- drivers/usb/serial/ssu100.c | 18 +- drivers/usb/serial/usb-serial.c | 127 ++++++-- drivers/usb/serial/xr_serial.c | 10 +- drivers/usb/storage/sierra_ms.c | 7 + drivers/usb/typec/anx7411.c | 5 +- drivers/usb/typec/tcpm/tcpm.c | 2 +- drivers/usb/typec/tipd/core.c | 8 +- drivers/usb/typec/ucsi/displayport.c | 9 +- drivers/usb/typec/ucsi/ucsi.c | 17 +- drivers/usb/typec/ucsi/ucsi_acpi.c | 33 +++ drivers/usb/typec/ucsi/ucsi_glink.c | 15 +- drivers/virt/nitro_enclaves/ne_misc_dev.c | 1 + drivers/virt/vmgenid.c | 6 +- fs/attr.c | 12 +- fs/btrfs/scrub.c | 4 +- fs/btrfs/xattr.c | 15 +- fs/dcache.c | 4 +- fs/ext4/inode.c | 4 - fs/f2fs/f2fs.h | 2 +- fs/f2fs/file.c | 4 - fs/f2fs/gc.c | 36 ++- fs/f2fs/segment.c | 13 +- fs/fsopen.c | 3 + fs/inode.c | 23 +- fs/jfs/jfs_dtree.c | 18 +- fs/namei.c | 29 ++ fs/namespace.c | 87 ++++-- fs/netfs/buffered_write.c | 9 + fs/netfs/direct_write.c | 9 + fs/netfs/internal.h | 2 + fs/netfs/misc.c | 99 +++++++ fs/smb/client/cifsfs.c | 7 +- fs/smb/client/cifsglob.h | 10 +- fs/smb/client/cifssmb.c | 2 +- fs/smb/client/dir.c | 39 ++- fs/smb/client/file.c | 17 +- fs/smb/client/inode.c | 30 +- fs/smb/client/link.c | 15 +- fs/smb/client/smb1ops.c | 21 +- fs/smb/client/smb2file.c | 19 +- fs/smb/client/smb2misc.c | 9 +- fs/smb/client/smb2ops.c | 38 ++- fs/smb/client/smb2pdu.c | 38 +-- fs/smb/client/smb2proto.h | 2 +- fs/smb/client/trace.h | 16 +- fs/smb/client/transport.c | 69 +++-- fs/verity/Kconfig | 3 + fs/verity/open.c | 8 - fs/xfs/scrub/newbt.c | 8 +- fs/xfs/xfs_log_recover.c | 13 +- include/linux/can/skb.h | 2 + include/linux/console.h | 2 + include/linux/fsverity.h | 25 -- include/linux/lsm_hook_defs.h | 2 +- include/linux/memcontrol.h | 50 +++- include/linux/netfilter_netdev.h | 2 +- include/linux/netfs.h | 2 + include/linux/nvme.h | 4 +- include/linux/pagemap.h | 16 +- include/linux/perf_event.h | 17 +- include/linux/rtnetlink.h | 7 +- include/linux/sched/ext.h | 1 + include/linux/sched/user.h | 3 +- include/linux/security.h | 5 +- include/linux/skbuff.h | 2 +- include/linux/soc/qcom/geni-se.h | 15 +- include/linux/tty.h | 1 + include/linux/tty_driver.h | 6 + include/linux/tty_port.h | 30 +- include/linux/usb/serial.h | 1 + include/net/amt.h | 4 - include/net/bluetooth/hci_core.h | 5 +- include/net/ip.h | 7 + include/net/mac80211.h | 4 + include/net/netfilter/nf_conntrack.h | 18 +- include/net/netfilter/nf_flow_table.h | 2 +- include/net/proto_memory.h | 2 +- include/net/sch_generic.h | 9 + include/net/sock.h | 22 ++ include/net/strparser.h | 10 +- include/net/tcp.h | 2 +- include/net/xdp.h | 34 ++- include/net/xdp_sock_drv.h | 11 +- include/net/xsk_buff_pool.h | 2 +- include/sound/core.h | 9 + include/sound/sof/ipc4/header.h | 2 + include/uapi/linux/random.h | 2 +- init/Kconfig | 5 + io_uring/io_uring.c | 7 +- io_uring/waitid.c | 19 +- kernel/audit_tree.c | 36 ++- kernel/cgroup/cpuset.c | 134 +++++---- kernel/dma/swiotlb.c | 6 +- kernel/events/core.c | 318 +++++++++------------ kernel/events/ring_buffer.c | 7 +- kernel/kprobes.c | 8 +- kernel/sched/ext.c | 20 +- kernel/sched/sched.h | 1 - kernel/trace/trace_event_perf.c | 4 +- kernel/workqueue.c | 2 +- mm/damon/core.c | 48 ++-- mm/memcontrol.c | 27 +- mm/secretmem.c | 117 +++++++- mm/shmem.c | 70 ++--- mm/vmpressure.c | 2 +- net/bluetooth/hci_conn.c | 18 +- net/bluetooth/hci_core.c | 55 +++- net/bluetooth/hci_debugfs.c | 2 +- net/bluetooth/hci_event.c | 7 + net/bluetooth/hci_sock.c | 2 + net/bluetooth/hci_sync.c | 19 +- net/bluetooth/iso.c | 153 +++++++--- net/bluetooth/mgmt.c | 2 +- net/bluetooth/rfcomm/sock.c | 5 +- net/bluetooth/rfcomm/tty.c | 9 +- net/bluetooth/smp.c | 2 + net/bridge/br_multicast.c | 23 +- net/bridge/netfilter/nf_conntrack_bridge.c | 10 +- net/can/af_can.c | 6 +- net/can/bcm.c | 2 + net/can/isotp.c | 11 +- net/can/j1939/socket.c | 1 + net/can/j1939/transport.c | 2 + net/can/raw.c | 7 +- net/core/dev.c | 137 +++++---- net/core/flow_dissector.c | 11 +- net/core/neighbour.c | 12 +- net/core/netdev-genl-gen.c | 4 +- net/core/skbuff.c | 14 +- net/core/sock.c | 15 +- net/devlink/core.c | 10 +- net/ipv4/af_inet.c | 2 +- net/ipv4/cipso_ipv4.c | 8 + net/ipv4/fib_semantics.c | 3 + net/ipv4/fib_trie.c | 2 - net/ipv4/inet_connection_sock.c | 2 +- net/ipv4/ip_output.c | 10 +- net/ipv4/route.c | 5 + net/ipv4/tcp.c | 2 + net/ipv4/tcp_input.c | 6 + net/ipv4/tcp_ipv4.c | 2 +- net/ipv4/tcp_output.c | 2 +- net/ipv6/addrconf.c | 2 +- net/ipv6/ip6_output.c | 29 +- net/ipv6/route.c | 2 - net/ipv6/seg6_iptunnel.c | 2 +- net/mac80211/agg-rx.c | 2 +- net/mac80211/chan.c | 45 ++- net/mac80211/fils_aead.c | 8 + net/mac80211/ieee80211_i.h | 2 +- net/mac80211/mesh_pathtbl.c | 30 +- net/mac80211/mlme.c | 4 +- net/mac80211/rc80211_minstrel_ht.c | 30 +- net/mac80211/spectmgmt.c | 4 +- net/mac80211/sta_info.c | 6 +- net/mac80211/tx.c | 128 +++++++-- net/mctp/device.c | 6 +- net/mptcp/protocol.c | 10 +- net/mptcp/subflow.c | 11 +- net/netfilter/ipset/ip_set_bitmap_gen.h | 2 +- net/netfilter/ipvs/ip_vs_conn.c | 3 + net/netfilter/ipvs/ip_vs_lblc.c | 4 + net/netfilter/ipvs/ip_vs_lblcr.c | 3 + net/netfilter/ipvs/ip_vs_sync.c | 33 ++- net/netfilter/nf_conntrack_amanda.c | 2 +- net/netfilter/nf_conntrack_broadcast.c | 2 +- net/netfilter/nf_conntrack_core.c | 13 +- net/netfilter/nf_conntrack_h323_main.c | 4 +- net/netfilter/nf_conntrack_sip.c | 4 +- net/netfilter/nf_flow_table_core.c | 123 +++++++- net/netfilter/nf_flow_table_offload.c | 14 +- net/netfilter/nf_nat_bpf.c | 3 + net/netfilter/nf_nat_core.c | 5 +- net/netfilter/nfnetlink_queue.c | 7 + net/netfilter/nft_ct.c | 2 +- net/netfilter/nft_flow_offload.c | 7 +- net/netfilter/xt_CHECKSUM.c | 6 +- net/openvswitch/actions.c | 7 +- net/openvswitch/datapath.c | 8 + net/packet/af_packet.c | 31 +- net/rds/tcp.c | 9 +- net/sched/act_ct.c | 2 +- net/sched/act_skbedit.c | 5 +- net/sched/cls_api.c | 15 +- net/sched/cls_route.c | 6 + net/sched/em_text.c | 3 + net/sched/sch_codel.c | 2 +- net/sched/sch_fq_codel.c | 4 +- net/sctp/socket.c | 8 +- net/smc/af_smc.c | 7 +- net/strparser/strparser.c | 6 +- net/sunrpc/xprtrdma/svc_rdma_transport.c | 8 +- net/tipc/crypto.c | 20 +- net/tipc/node.c | 10 +- net/tipc/topsrv.c | 80 +++++- net/vmw_vsock/af_vsock.c | 2 + net/vmw_vsock/virtio_transport_common.c | 4 +- net/wireless/scan.c | 22 +- net/xfrm/xfrm_output.c | 16 +- security/keys/key.c | 6 +- security/keys/persistent.c | 55 ++-- security/security.c | 5 +- security/selinux/avc.c | 5 +- security/selinux/hooks.c | 11 +- sound/core/seq/seq_compat.c | 4 +- sound/pci/hda/hda_tegra.c | 3 +- sound/pci/ice1712/ice1712.c | 2 +- sound/soc/amd/yc/acp6x-mach.c | 7 + sound/soc/codecs/adau1372.c | 18 +- sound/soc/codecs/max98363.c | 2 +- sound/soc/codecs/rt1017-sdca-sdw.c | 27 +- sound/soc/codecs/rt274.c | 4 +- sound/soc/codecs/rt286.c | 2 +- sound/soc/codecs/wm8903.c | 2 +- sound/soc/qcom/lpass-cpu.c | 4 +- sound/soc/samsung/i2s.c | 8 + sound/soc/sdw_utils/soc_sdw_utils.c | 20 +- sound/soc/sof/intel/hda-loader.c | 7 +- sound/soc/sof/ipc4-loader.c | 6 + sound/soc/sof/ipc4-priv.h | 3 + sound/soc/sof/ipc4.c | 14 +- sound/soc/tegra/tegra186_asrc.c | 2 +- sound/usb/caiaq/device.c | 3 + sound/usb/line6/playback.c | 7 + sound/usb/misc/ua101.c | 9 + sound/usb/quirks.c | 4 +- tools/net/ynl/ynl-gen-c.py | 70 ++++- tools/testing/selftests/mm/hugepage-mremap.c | 5 + tools/testing/selftests/mm/memfd_secret.c | 30 +- 557 files changed, 5782 insertions(+), 2934 deletions(-)

3 weeks

[PATCH 7.2 000/281] 7.2.11-rc1 review

by Greg Kroah-Hartman

This is the start of the stable review cycle for the 7.2.11 release. There are 281 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know. Responses should be made by Thu, 15 Oct 2026 11:28:22 +0000. Anything received after that time might be too late. The whole patch series can be found in one patch at: https://www.kernel.org/pub/linux/kernel/v7.x/stable-review/patch-7.2.11-rc1… or in the git tree and branch at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-7.2.y and the diffstat can be found below. thanks, greg k-h ------------- Pseudo-Shortlog of commits: Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> Linux 7.2.11-rc1 Lorenzo Stoakes (ARM) <ljs(a)kernel.org> mm/mremap: fix locked_vm leak from MREMAP_DONTUNMAP self-merge Jens Axboe <axboe(a)kernel.dk> io_uring/kbuf: don't charge provided buffer rings to RLIMIT_MEMLOCK Hengyu Liang <hengyul(a)cs.unc.edu> io_uring: do not charge the SQ/CQ rings to RLIMIT_MEMLOCK Ali Ahmet Memis <ali(a)iusegentoo.com> io_uring/memmap: account the pages a compound region really uses Adrian Betschart <adrian.betschart(a)cinemaone.ch> drm/amd/display: Don't replace a sink mode that shares the native totals Kuba Piecuch <jpiecuch(a)google.com> sched_ext: Call ops.dequeue() when a task arrives on a remote local DSQ Kuba Piecuch <jpiecuch(a)google.com> sched_ext: Generate qseq from a per-task counter Maíra Canal <mcanal(a)igalia.com> drm/vc4: Fix binner slot allocation failing on an idle GPU Maíra Canal <mcanal(a)igalia.com> drm/vc4: Disable the V3D interrupt across runtime suspend Ilia Gavrilov <Ilia.Gavrilov(a)infotecs.ru> vsock: Fix memory leak in vmci_transport_recv_dgram_cb() Fernando Fernandez Mancera <fmancera(a)suse.de> net: openvswitch: validate transport header presence in set_ipv6_addr Vadim Fedorenko <vadim.fedorenko(a)linux.dev> ptp: ocp: fix PCIe delay estimation calculation Willem de Bruijn <willemb(a)google.com> net/packet: call packet_parse_headers after virtio_net_hdr_to_skb Petr Machata <petrm(a)nvidia.com> mlxsw: spectrum_flower: Fix port range register leak in tmplt_create() Li RongQing <lirongqing(a)baidu.com> net/mlx5e: Order ICOSQ cc update after CQ doorbell Tianyi Gao <tianyi(a)cloudflare.com> veth: fix peer NETDEV_XDP_ACT_NDO_XMIT after GRO is toggled while down Gyeyoung Baek <gye976(a)gmail.com> drm/imagination: Fix reference and vm_bo handling in remap() Haishuang Yan <yanhaishuang(a)cmss.chinamobile.com> bareudp: set the inner protocol to the protocol of the packet Eric Dumazet <edumazet(a)kernel.org> flow_dissector: avoid u16 truncation of hlen in bpf_flow_dissect() Pavan Chebbi <pavan.chebbi(a)broadcom.com> bnxt_en: Re-write the BARs following any type of PCIe errors Michael Chan <michael.chan(a)broadcom.com> bnxt_en: Fix driver init in kdump kernel Michael Chan <michael.chan(a)broadcom.com> bnxt_en: Add bnxt_clear_bars() helper Zongmin Zhou <zhouzongmin(a)kylinos.cn> riscv: ptrace: Zero-initialize regset buffers before copyin Leo Yu-Chi Liang <leo.liang(a)sifive.com> riscv: fix NR_CPUS range leaking 64-bit default onto 32-bit builds Richard Fitzgerald <rf(a)opensource.cirrus.com> ASoC: sdw_utils: Switch CS35L56/57/62/63 to use OT25 DAI Stefan Binding <sbinding(a)opensource.cirrus.com> ASoC: sdw_utils: Add codec info for CS35L62 Haishuang Yan <yanhaishuang(a)cmss.chinamobile.com> pfcp: make sure the SEID is linear before reading it Justin Chen <justin.chen(a)broadcom.com> net: bcmgenet: if UMAC was suspended in SW_RESET, restore it to SW_RESET Or Har-Toov <ohartoov(a)nvidia.com> Revert "net/mlx5: E-Switch, preserve max tx speed on vport state modification" Victor Nogueira <victor(a)mojatatu.com> net/sched: cls_route: reject change with no routing attribute Haishuang Yan <yanhaishuang(a)cmss.chinamobile.com> devlink: fix devlink_rel reference leak when notify work is pending Quentin Freimanis <quentin(a)q-lab.dev> net: sparx5: start the TOD counters on non-PTP lan969x variants Eric Dumazet <edumazet(a)kernel.org> net: always dissect GSO packets in __virtio_net_hdr_to_skb() Eric Dumazet <edumazet(a)kernel.org> flow_dissector: avoid u16 truncation of skb->len when computing thoff Waiman Long <longman(a)redhat.com> cgroup/cpuset: Call is_in_v2_mode() after acquiring cpuset_mutex in cpuset_handle_hotplug() Han Gao <gaohan(a)iscas.ac.cn> spi: sg2044-nor: Honor SPI clock limits Han Gao <gaohan(a)iscas.ac.cn> spi: sg2044-nor: Return transfer errors Marek Szyprowski <m.szyprowski(a)samsung.com> ASoC: samsung: i2s: enable op_clk in probe to balance runtime PM Alvin Šipraga <alvin.sipraga(a)analog.com> ASoC: adau1372: fix invalid default state of output ASRC and DAC muxes Alvin Šipraga <alvin.sipraga(a)analog.com> ASoC: adau1372: allow sleepy powerdown GPIOs Yingying Tang <yingying.tang(a)oss.qualcomm.com> Revert "wifi: ath12k: add panic handler" Mallesh Koujalagi <mallesh.koujalagi(a)intel.com> drm/xe/sysctrl: Fix mailbox header handling Devin Wittmayer <lucid_duck(a)justthetip.ca> wifi: mt76: mt792x: pick the SAR table layout from the table itself Junjie Cao <junjie.cao(a)intel.com> wifi: mt76: mt792x: treat 0xff ACPI SAR entries as no limit Devin Wittmayer <lucid_duck(a)justthetip.ca> wifi: mt76: mt7925: don't put the band auto marker in TGID Nicolas Cavallari <nicolas.cavallari(a)green-communications.fr> wifi: mt76: mt7915: disable rx napi when removing device Tao Gong <gongtao0607(a)gmail.com> wifi: mt76: mt7996: fix struct mt7996_mcu_wed_rro_ba_delete_event layout Aaron Ma <aaron.ma(a)canonical.com> wifi: mt76: mt7925: restore the legacy BSS after MLO teardown Felix Fietkau <nbd(a)nbd.name> wifi: mt76: use ALTX queue for packets to disassociated stations Felix Fietkau <nbd(a)nbd.name> wifi: mt76: account non-AQL frames per peer rather than per link Felix Fietkau <nbd(a)nbd.name> wifi: mt76: add PS buffering support for HW-managed TIM drivers Felix Fietkau <nbd(a)nbd.name> wifi: mac80211: add ieee80211_txq_aql_pending() Felix Fietkau <nbd(a)nbd.name> wifi: mac80211: add AQL support for multicast packets Felix Fietkau <nbd(a)nbd.name> wifi: mt76: mt7996: take over connection monitoring Pengpeng Hou <hppiscas(a)163.com> scsi: ufs: mediatek: Handle mPHY power-on failures Jakub Kicinski <kuba(a)kernel.org> Revert "net: stmmac: propagate PTP addend and system time programming errors" Aurelien Jarno <aurelien(a)aurel32.net> riscv: vector: Fix output operands in context save Troy Mitchell <troy.mitchell(a)linux.dev> riscv: vector: Fix data pointer constraints in context save/restore Leto Liu (刘涛) <Leto.Liu(a)airoha.com> net: airoha: Add retry mechanism to airoha_qdma_set_trtcm_param() Ovidiu Panait <ovidiu.panait.rb(a)renesas.com> net: stmmac: Disable S-Tag processing on dwmac4 Ovidiu Panait <ovidiu.panait.rb(a)renesas.com> net: stmmac: Do not advertise S-VLAN stripping when it is disabled Or Har-Toov <ohartoov(a)nvidia.com> net/mlx5: Lag, split aggregate speed into oper and max helpers Jakub Kicinski <kuba(a)kernel.org> net: make dev_xdp_sb_prog_count() see programs attached through a link Tvrtko Ursulin <tvrtko.ursulin(a)igalia.com> drm/xe: Do not emit Wa_16010904313 twice Alan Previn <alan.previn.teres.alexis(a)intel.com> drm/xe/mmio: Fix xe_mmio_wait32() to honor delay/sleep maximums Filipe Manana <fdmanana(a)suse.com> btrfs: fix lost error return value in btrfs_listxattr() Filipe Manana <fdmanana(a)suse.com> btrfs: fix xattr replace when multiple xattrs are packed in the same item Yang Xiuwei <yangxiuwei(a)kylinos.cn> btrfs: don't stash io_uring encoded data across -EAGAIN Yang Xiuwei <yangxiuwei(a)kylinos.cn> btrfs: unlock inode and extent in caller when io_uring read extent fails Yang Xiuwei <yangxiuwei(a)kylinos.cn> btrfs: free iov when btrfs_uring_read_extent() fails Yang Xiuwei <yangxiuwei(a)kylinos.cn> btrfs: always return -EIOCBQUEUED after btrfs_uring_read_extent_endio Shin'ichiro Kawasaki <shinichiro.kawasaki(a)wdc.com> zloop: zero out only the unread tail of short reads Haibo Chen <haibo.chen(a)nxp.com> spi: spi-nxp-fspi: exit stop mode before waiting for DLL lock Fuad Tabba <fuad.tabba(a)linux.dev> arm64/boot: Don't set PMUv3p9 FGT2 bits without PMUv3 Sang-Hoon Choi <csh0052(a)gmail.com> nvmet: use the local P2P device on metadata allocation failure Guixin Liu <kanie(a)linux.alibaba.com> nvmet: return Invalid Field for invalid NSIDs feature 82h Bryan Fraschetti <bryan.fraschetti(a)canonical.com> ice: Restore Ordered MMIO Writes for Tx Doorbells Jakub Kicinski <kuba(a)kernel.org> bonding: fix the program leak when XDP is replaced Mahantesh Salimath <mahantesh(a)nvidia.com> tee: optee: ffa: support shared memory offsets on large-page kernels Lorenzo Bianconi <lorenzo.bianconi(a)oss.qualcomm.com> net: stmmac: propagate PTP addend and system time programming errors Felix Fietkau <nbd(a)nbd.name> wifi: mt76: mt7996: program a link again if the driver holds it Sang-Hoon Choi <csh0052(a)gmail.com> cxgb4/ch_ktls: disable softirqs around tid_list erases Shashank Mohan Jain <jain.sm(a)gmail.com> lib/dim: fix 32-bit overflow in dim_calc_stats() rates Omar Ramadan <omar(a)blockcast.net> amt: send the relay's General Query directly from the receive path Jamal Hadi Salim <jhs(a)mojatatu.com> net/sched: em_text: reject unterminated algo before autoload Maíra Canal <mcanal(a)igalia.com> drm/vc4: Use kvmalloc_objs() for the BO cache size list Maíra Canal <mcanal(a)igalia.com> drm/vc4: Free the BO cache size list on teardown Myeonghun Pak <mhun512(a)gmail.com> drm/aspeed: Balance the display clock enable on teardown Sang-Hoon Choi <csh0052(a)gmail.com> gpio: exar: initialize the ID before registering its cleanup Oleg Keri <okerixx(a)gmail.com> drm/dp: don't mark the AUX backlight enabled when enabling failed Waiman Long <longman(a)redhat.com> cgroup/cpuset: Don't access cpuset_cgrp_subsys.root in is_in_v2_mode() Cristian Ciocaltea <cristian.ciocaltea(a)collabora.com> drm/bridge: Fix unlocked list access in drm_bridge_attach() Cristian Ciocaltea <cristian.ciocaltea(a)collabora.com> drm/bridge: Fix unlocked list_del in drm_bridge_add() Sai Teja Aluvala <aluvala.sai.teja(a)intel.com> Bluetooth: btintel_pcie: Add shared HW reset for clean start Ravindra <ravindra(a)intel.com> Bluetooth: btintel_pcie: fix TX descriptor bounds check Naomi Chu <naomi.chu(a)mediatek.com> scsi: ufs: core: Hold a clock reference across the probe Christian Brauner <brauner(a)kernel.org> fs: don't let a migrating task hide its reference from do_umount() Christian Brauner <brauner(a)kernel.org> mount: refuse MOVE_MOUNT_SET_GROUP on an unbindable mount Peng Fan <peng.fan(a)nxp.com> iommu/dma: skip swiotlb bounce for DMA_ATTR_MMIO in iommu_dma_map_phys Vincent Jardin <vjardin(a)free.fr> arm64: dts: lx2160a: fix the iic5 spi3 pinmux offset and value Vincent Jardin <vjardin(a)free.fr> arm64: dts: lx2160a: fix IIC1 pinmux submask rejected by pinctrl-single Vincent Jardin <vjardin(a)free.fr> arm64: dts: lx2160a: fix incorrect pinmux Taniya Das <taniya.das(a)oss.qualcomm.com> clk: qcom: gpucc-kaanapali: Mark the GPU CX GDSC as votable Taniya Das <taniya.das(a)oss.qualcomm.com> clk: qcom: gpucc-glymur: Mark the GPU CX GDSC as votable Luca Weiss <luca.weiss(a)fairphone.com> clk: qcom: gcc-kaanapali: Fix always-enabling PCIE_RSCC clocks Luca Weiss <luca.weiss(a)fairphone.com> clk: qcom: gcc-eliza: Fix always-enabling PCIE_RSCC clocks Darrick J. Wong <djwong(a)kernel.org> xfs: fix exchange-range-to-eof file size exchange Norbert Szetei <norbert(a)doyensec.com> xfs: stop exchanging reflink flags when exchanging mappings Christian Brauner <brauner(a)kernel.org> namespace: keep the lock on a mount that a propagated copy is moved beneath Christian Brauner <brauner(a)kernel.org> namespace: handle mount locking for automounts correctly Christian Brauner <brauner(a)kernel.org> namespace: never expire a locked mount Christian Brauner <brauner(a)kernel.org> nullfs: don't update the access time Christian Brauner <brauner(a)kernel.org> namespace: refuse an automount below a mount that is in no namespace Christian Brauner <brauner(a)kernel.org> fcntl: refuse F_SET_RW_HINT on an immutable inode Christian Brauner <brauner(a)kernel.org> namei: don't reveal overmounted entries in refwalk Christian Brauner <brauner(a)kernel.org> namespace: unhash a dentry before detaching the mounts on it Christian Brauner <brauner(a)kernel.org> namespace: don't let a pseudo dentry become the root of a mount Christian Brauner <brauner(a)kernel.org> unshare: don't drop active namespace references that were never taken Christian Brauner <brauner(a)kernel.org> dcache: don't put a mountpoint on a dentry that's being removed Christian Brauner <brauner(a)kernel.org> namespace: check the mounts before reading their parents in pivot_root() Christian Brauner <brauner(a)kernel.org> namespace: remove the fsnotify marks of a mount namespace in process context Christian Brauner <brauner(a)kernel.org> namespace: don't reconfigure internal superblocks via remount and umount Christian Brauner <brauner(a)kernel.org> namespace: look at the topmost mount for a mount namespace file Christian Brauner <brauner(a)kernel.org> namespace: keep covered mounts covered in OPEN_TREE_NAMESPACE Christian Brauner <brauner(a)kernel.org> namespace: check a recursive bind mount for mount namespace loops Christian Brauner <brauner(a)kernel.org> namespace: check a submount for references right before unmounting it Christian Brauner <brauner(a)kernel.org> namespace: queue a mount only once for mount notifications Christian Brauner <brauner(a)kernel.org> namespace: check the target before walking it in do_mount_setattr() Christian Brauner <brauner(a)kernel.org> fs: refuse fspick() on internal superblocks Christian Brauner <brauner(a)kernel.org> namespace: don't copy an unmounted mount tree Christian Brauner <brauner(a)kernel.org> namespace: don't inherit MNT_UMOUNT in clone_mnt() Christian Brauner <brauner(a)kernel.org> statmount: read the parent of an unmounted mount under mount_lock Christian Brauner <brauner(a)kernel.org> namespace: reset the old parent's ->overmount in mnt_change_mountpoint() Christian Brauner <brauner(a)kernel.org> fs: don't silently unmount busy mounts Christian Brauner <brauner(a)kernel.org> mount: keep a copied mount unbindable Leo Li <sunpeng.li(a)amd.com> drm/amd/display: disable self-refresh on tearing flips Leo Li <sunpeng.li(a)amd.com> drm/amd/display: Fix direct scanout alpha on some DRM_FORMATs Jesse Zhang <Jesse.Zhang(a)amd.com> drm/amdgpu/userq: return the memdup_user() error for the user MQD Jesse Zhang <Jesse.Zhang(a)amd.com> drm/amdgpu/userq: only accept doorbell BOs as queue doorbell Mikhail Gavrilov <mikhail.v.gavrilov(a)gmail.com> drm/amdgpu: copy debugfs register data outside the GRBM/SRBM locks Alex Deucher <alexander.deucher(a)amd.com> drm/amdgpu: make Mac FB workaround generic Vitaly Prosyak <vitaly.prosyak(a)amd.com> drm/amdgpu: serialize vblank counter reads against GPU reset Haojie Li <lihaojie(a)kylinos.cn> drm/amdkfd: fix dma_buf reference leak in get_dmabuf_info Saleel Kudchadker <Saleel.Kudchadker(a)amd.com> drm/amdkfd: align SDMA doorbell base for shader doorbell writes Felix Gu <ustc.gu(a)gmail.com> drm/bridge: th1520-dw-hdmi: Fix remove() callback Felix Gu <ustc.gu(a)gmail.com> drm/bridge: th1520-dw-hdmi: Fix error check on dw_hdmi_probe() return value Thomas Hellström <thomas.hellstrom(a)linux.intel.com> drm/xe: Fix stale pinned_link entry when fb-pin performs the final unpin Thomas Hellström <thomas.hellstrom(a)linux.intel.com> drm/xe: Fix shrinker accounting double-subtraction on nested external pins Fan Wu <fanwu01(a)zju.edu.cn> drm/xe/i2c: cancel the client work on remove Zack Rusin <zack.rusin(a)broadcom.com> drm/vmwgfx: validate pitch coming from userspace Wentao Liang <vulab(a)iscas.ac.cn> drm/vc4: Fix firmware reference leak in vc4_drm_bind() Fan Wu <fanwu01(a)zju.edu.cn> drm/vc4: drain the hangcheck timer and works on V3D unbind Osama Abdelkader <osama.abdelkader(a)gmail.com> drm/panthor: validate userspace queue count against initialized firmware slot count Gyeyoung Baek <gye976(a)gmail.com> drm/imagination: Size page table preallocation by device address Krzysztof Karas <krzysztof.karas(a)intel.com> drm/i915/gt: Unmask interrupts only when ACTIVE is true Krzysztof Karas <krzysztof.karas(a)intel.com> drm/i915/gem: Prevent overstepping exec array boundary Sajal Gupta <sajal2005gupta(a)gmail.com> drm/gud: don't keep a connector without a CRTC as connector_state Nguyen Ngoc Thang <ngocthang2710.1999(a)gmail.com> drm/fb-helper: defer setup when fbdev_probe() fails, not just on -EAGAIN Palla Raghunath <raghunathpalla.0209(a)gmail.com> Bluetooth: RFCOMM: Fix NULL tty_dev dereference in rfcomm_dev_shutdown Mikhail Gavrilov <mikhail.v.gavrilov(a)gmail.com> Bluetooth: RFCOMM: connect the session socket without rfcomm_mutex Maxim Skokov <skokovmaksimevg(a)gmail.com> Bluetooth: RFCOMM: free the skb when the DLC has no owner Aldo Ariel Panzardo <qwe.aldo(a)gmail.com> Bluetooth: SCO: serialise sco_conn lifetime against sco_recv_scodata() Iaroslav Voitovych <yaroslav.voytovych(a)gmail.com> Bluetooth: MGMT: Fix status of pending commands flushed on power off Chengfeng Ye <nicoyip.dev(a)gmail.com> Bluetooth: ISO: Serialize concurrent connect calls Chengfeng Ye <nicoyip.dev(a)gmail.com> Bluetooth: ISO: Reject concurrent BIS listener setup Chengfeng Ye <nicoyip.dev(a)gmail.com> Bluetooth: hci_sync: Fix command skb lifetime during scan setup Chengfeng Ye <nicoyip.dev(a)gmail.com> Bluetooth: hci_sock: Serialize dead-device detachment Runyu Xiao <runyu.xiao(a)seu.edu.cn> Bluetooth: btintel_pcie: use managed IRQ teardown Chen Pei <cp0613(a)linux.alibaba.com> riscv: ptrace: reject CFI regset access when extensions are absent Wei-Jie Hung <imbigking12(a)gmail.com> riscv: patch: fix handling of bpf-jit execmem addresses Shao Mingyin <shao.mingyin(a)zte.com.cn> riscv: lib: Fix ZBB strnlen wrap-around regression on huge counts Zongmin Zhou <zhouzongmin(a)kylinos.cn> riscv: hwprobe: use _BITULL() rather than BIT() in MIPS vendor uapi header Ziyi Guo <guoziyi114(a)gmail.com> riscv: futex: untag the user pointer before the atomic access Karl Mehltretter <kmehltretter(a)gmail.com> riscv: fix load_unaligned_zeropad() fixup for RV32 Zongmin Zhou <zhouzongmin(a)kylinos.cn> riscv: errata: select RISCV_ALTERNATIVE_EARLY for THEAD GHOSTWRITE Ziyi Guo <guoziyi114(a)gmail.com> riscv: entry: gate shadow call stack reload on sstatus.SPP, not tp Stanley Jhu <stanleyjhu(a)google.com> scsi: ufs: core: Decouple CQ sweep from request iterator in MCQ Stanley Jhu <stanleyjhu(a)google.com> scsi: ufs: core: Avoid unsafe MMIO reads in ufshcd_mcq_compl_all_cqes_lock() Runyu Xiao <runyu.xiao(a)seu.edu.cn> scsi: qedi: Initialize callback state before registration Ahmed Abdelhaleem Ahmed <ahmedhal(a)gmail.com> scsi: ch: Do not keep references to data transfer element devices Shawn Lin <shawn.lin(a)rock-chips.com> pmdomain: rockchip: propagate subdomain add errors Shawn Lin <shawn.lin(a)rock-chips.com> pmdomain: rockchip: fix clock leak on domain probe failure Shawn Lin <shawn.lin(a)rock-chips.com> pmdomain: rockchip: don't ignore clock lookup errors on attach Ming Qian <ming.qian(a)oss.nxp.com> pmdomain: imx8m-blk-ctrl: Serialize power on/off across sibling domains Ridham Khurana <khurana.ridham222(a)gmail.com> regulator: tps6594-regulator: Fix n_linear_ranges for TPS65224 BUCK2-4 Alexey Charkov <alchark(a)flipper.net> regulator: of: fill in supply names in of_regulator_bulk_get_all() Abhishek Ojha <Abhishek.ojha(a)savoirfairelinux.com> regulator: ltc3676: don't read the write-only HRST and CLIRQ registers Alexey Charkov <alchark(a)flipper.net> power: sequencing: pcie-m2: Fix leaking array from of_regulator_bulk_get_all() Shao-Fu Chen <shf.chen(a)mediatek.com> optee: register TEE devices only once fully initialized Denis V. Lunev <den(a)openvz.org> openvswitch: fix soft lockup in the netlink flow dump Karl Bonde Torp <k.torp(a)samsung.com> nvme: fix swapped ZRASF zone state values for full and read only Weiming Shi <bestswngs(a)gmail.com> net: team: free skb when broadcast has no txable port Weiming Shi <bestswngs(a)gmail.com> net: team: stop reusing skb after queue override Suraj Gupta <suraj.gupta2(a)amd.com> net: xilinx: axienet: Free outstanding DMA buffers on dmaengine stop Fredrik Nyberg <fredrik.nyberg(a)volvocars.com> net: usb: ax88179_178a: fix rx frame length for non-last packets Daniel Machon <daniel.machon(a)microchip.com> net: sparx5: free the matchall entry on destroy Josef Bacik <josef(a)toxicpanda.com> net: skbuff: don't leave stale bytes in skb_copy_and_csum_bits() Sebastien Royen <sebastien.royen(a)armadeus.com> net: dsa: microchip: fix KSZ8765 fiber detection Zixuan Chai <petalzu987(a)gmail.com> net: bridge: avoid recursive multicast port cleanup Chengfeng Ye <nicoyip.dev(a)gmail.com> net/smc: protect clcsock lifetime in smc_getname Quchaosheng <quchaosheng000406(a)163.com> net/packet: guard the ll header push in packet_rcv_spkt() Guangshuo Li <lgs201920130244(a)gmail.com> mmc: sdhci-sprd: disable runtime PM on remove Yibo Tan <lhfff(a)tju.edu.cn> mmc: mtk-sd: Cancel request timeout work on remove Guangshuo Li <lgs201920130244(a)gmail.com> mmc: cavium-thunderx: destroy slot platform devices on remove Guangshuo Li <lgs201920130244(a)gmail.com> mmc: cavium-octeon: destroy slot platform devices on remove Mikulas Patocka <mpatocka(a)redhat.com> dm: fix reading free memory in do_resume Ma Xinmeng <1564938642(a)qq.com> dm-snap: reject the transient exception store for snapshot-merge Ben Cressey <ben(a)cressey.dev> dm-integrity: fix buffer overflow in inline mode with large tag size Ben Cressey <ben(a)cressey.dev> dm-crypt: reject the lmk IV mode with AEAD ciphers Mikhail Gavrilov <mikhail.v.gavrilov(a)gmail.com> mm: don't schedule deferred kernel page table freeing while booting Lorenzo Stoakes (ARM) <ljs(a)kernel.org> mm/mremap: fix locked_vm leak by splitting VMA for MREMAP_DONTUNMAP Nguyen Ngoc Thang <ngocthang2710.1999(a)gmail.com> memstick: rtsx_usb_ms: complete requests after eject instead of dropping them Raj Ojha <rajojha047(a)gmail.com> memstick: core: wait for request completion before freeing card 성병찬 <tjdqudcks0424(a)naver.com> KEYS: Fix add_key() race with keyring restriction Karl Mehltretter <kmehltretter(a)gmail.com> keys: finalize persistent keyring timeout after link attempt Daehyeon Ko <4ncienth(a)gmail.com> ip6_gre: remove obsolete ERSPAN PMTU update Natasha Klaus <natalie.klaus(a)runtimeverification.com> io_uring/net: populate CONNECT filter fields for 24-byte sockaddr_in6 Eugene Gvozdetsky <gvozdet(a)gmail.com> io_uring/register: don't exempt disabled rings from task restrictions Tristan Madani <tristan(a)talencesecurity.com> ice: fix metadata_dst refcount handling on representor teardown Xuanqiang Luo <luoxuanqiang(a)kylinos.cn> ice: fix use-after-free in dynamic port cleanup Mingming Cao <mmc(a)linux.ibm.com> ibmveth: fix TX LTB and filter unwind on open-fail Mingming Cao <mmc(a)linux.ibm.com> ibmveth: h_free logical LAN on open-fail after register Joshua Washington <joshwash(a)google.com> gve: fix XSK buffer leak on error descriptor Joshua Washington <joshwash(a)google.com> gve: fix XSK buffer leak when rings are stopped Joshua Washington <joshwash(a)google.com> gve: fix napi_disable deadlock when attempting to disable XSK pools Jose Ignacio Tornos Martinez <jtornosm(a)redhat.com> iavf: send MAC change request synchronously Ridham Khurana <khurana.ridham222(a)gmail.com> gpio: xilinx: fix runtime PM leak on request error path Fan Wu <fanwu01(a)zju.edu.cn> gpio: mpsse: fix race when arming the IRQ poll worker Eric Biggers <ebiggers(a)kernel.org> fsverity: RCU-delay the freeing of struct fsverity_info Vishal Badole <Vishal.Badole(a)amd.com> EDAC/amd64: Mask UMC chip select to the four implemented selects Tony Nguyen <anthony.l.nguyen(a)intel.com> e1000e: add system to disable K1 list Carlos Llamas <cmllamas(a)google.com> selftests/mm: cleanup -Wformat issues in hugetlb-mmap Hui Peng <benquike(a)gmail.com> sctp: copy zeroed stats to user in sctp_getsockopt_pr_streamstatus() when !streamoute Stephen Smalley <stephen.smalley.work(a)gmail.com> selinux: preserve NATIVE_LABELS on already-initialized sb in set_mnt_opts Christian Göttsche <cgzones(a)googlemail.com> selinux: fix data race on AVC latest_notif Yong-Xuan Wang <yongxuan.wang(a)sifive.com> RISC-V: Clear HSTATUS.HU on CPU initialization Johannes Berg <johannes.berg(a)intel.com> Revert "wifi: libertas: reject short monitor TX frames" Chengfeng Ye <nicoyip.dev(a)gmail.com> tipc: hold a reference to nodes found by link name Yuqi Xu <xuyuqiabc(a)gmail.com> tipc: destroy topsrv workqueues before closing connections Daehyeon Ko <4ncienth(a)gmail.com> tcp: reject net_iov in zerocopy receive mapping hints Marek Szyprowski <m.szyprowski(a)samsung.com> swiotlb: fix default_swiotlb_limit() for non-growable default pool Sabrina Dubroca <sd(a)queasysnail.net> strparser: make sure __strp_recv isn't running before tearing down the parser Georgiy Osokin <g.osokin(a)auroraos.dev> tee: shm: reject zero-sized allocations in tee_dyn_shm_alloc_helper() Josef Bacik <josef(a)toxicpanda.com> xen/netfront: don't leak the skb when xennet_fill_frags() fails Borislav Petkov (AMD) <bp(a)alien8.de> x86/CPU/AMD: Fix AMD TLBI Erratum #1718 Pavankumar Kondeti <pavan.kondeti(a)oss.qualcomm.com> workqueue: Fix NULL current_pwq deref in chained work check Jason A. Donenfeld <Jason(a)zx2c4.com> wireguard: noise: reject response consumption after intermediate initiation Ramses de Norre <ramses(a)well-founded.dev> wireguard: queueing: preserve tstamp_type when encapsulating packet Lu Huang <huanglu(a)kylinos.cn> wifi: mt76: mt7996: fix uninitialized buf read in mt7996_variant_fem_init() Cristian Papa <pcristian292(a)gmail.com> wifi: mt76: mt7603: initialize global station WCID Michele Dionisio <michele.dionisio(a)gmail.com> wifi: brcmfmac: fix P2P device removal race in brcmf_detach() Daehyeon Ko <4ncienth(a)gmail.com> vsock/virtio: account only unread bytes in read_skb() Ji-Ze Hong (Peter Hong) <peter_hong(a)fintek.com.tw> usb: f81604: fix struct f81604_int_data size mismatch Palla Raghunath <raghunathpalla.0209(a)gmail.com> dm ioctl: don't let data_start run past the buffer Daehyeon Ko <4ncienth(a)gmail.com> cipso: adjust cached option offsets when removing CIPSO Waiman Long <longman(a)redhat.com> cgroup/cpuset: Handle cpu hotplug race in guarantee_active_cpus() Oliver Hartkopp <socketcan(a)hartkopp.net> can: fix unique skb identifier regression under RPS zjamg <ndaugoing(a)gmail.com> can: dev: init_can_skb(): restore skb header initialization Wentao Liang <vulab(a)iscas.ac.cn> btrfs: scrub: fix local_root reference leak in scrub_print_warning_inode() Hengyu Liang <hengyul(a)cs.unc.edu> ata: libata-scsi: do not lose CHECK CONDITION for failed ATAPI commands Michael Garland <minimelkav(a)gmail.com> ASoC: amd: yc: Add DMI quirk for Acer Aspire Go 15 (AG15-21P) Karl Mehltretter <kmehltretter(a)gmail.com> arm64: irq: exclude the softirq stack switch from KCOV Mohamed Yassine Jebabli <med.jebabli(a)gmail.com> ALSA: hda/tas2781: Accept V1 calibration data without CRC Harin Lee <me(a)harin.net> ALSA: ctxfi: Fix memory leakage when clearing DAO input mappers Krzysztof Furman <krisfur(a)proton.me> Input: xpad - add support for Corsair Novablade Pro Bihaan Sen <stevewholikesthings(a)gmail.com> Input: xpad - add support for 8BitDo Pro 2 Wired Controller for Xbox Haotian Zhang <vulab(a)iscas.ac.cn> Input: ati_remote2 - fix type confusion in device attribute handlers Daehyeon Ko <4ncienth(a)gmail.com> ipv6: do not warn on route notification size race Daehyeon Ko <4ncienth(a)gmail.com> ipv4: do not warn on route notification size race Daehyeon Ko <4ncienth(a)gmail.com> ipv4: stop route notification sizing when nexthop group shrinks Daehyeon Ko <4ncienth(a)gmail.com> ipv4: stop exception dump when nexthop group shrinks Daehyeon Ko <4ncienth(a)gmail.com> ipv4: stop PMTU walk when nexthop group shrinks Alice Ryhl <aliceryhl(a)google.com> rust_binder: reschedule node refcount update on thread exit Michael S. Tsirkin <mst(a)redhat.com> ipv4: validate checksum_start before completing checksum Ido Schimmel <idosch(a)nvidia.com> ipv6: udp: Create exceptions before socket matching Ido Schimmel <idosch(a)nvidia.com> ipv4: udp: Create exceptions before socket matching Ido Schimmel <idosch(a)nvidia.com> ipv6: Fix redirect exception creation for UDP/RAW sockets Jerome Tollet <jtollet(a)cisco.com> net/mlx5e: Prevent stale XSK buffer release on MPWQE refill retry Jerome Tollet <jtollet(a)cisco.com> net/mlx5e: Prevent stale XSK buffer release on refill retry Matthew Wilcox (Oracle) <willy(a)infradead.org> fs: Free any excess xarray nodes in clear_inode() Eric Dumazet <edumazet(a)kernel.org> bnxt_en: fix DMA mapping length for padded small packets ------------- Diffstat: Documentation/networking/strparser.rst | 2 +- Makefile | 4 +- arch/arm64/boot/dts/freescale/fsl-lx2160a.dtsi | 19 +- arch/arm64/include/asm/el2_setup.h | 5 +- arch/arm64/kernel/Makefile | 3 + arch/riscv/Kconfig | 5 +- arch/riscv/Kconfig.errata | 1 + arch/riscv/include/asm/cpufeature.h | 2 + arch/riscv/include/asm/futex.h | 2 + arch/riscv/include/asm/scs.h | 17 +- arch/riscv/include/asm/vector.h | 8 +- arch/riscv/include/uapi/asm/vendor/mips.h | 4 +- arch/riscv/kernel/cpufeature.c | 12 + arch/riscv/kernel/entry.S | 2 +- arch/riscv/kernel/patch.c | 2 +- arch/riscv/kernel/ptrace.c | 8 + arch/riscv/kernel/setup.c | 2 + arch/riscv/kernel/smpboot.c | 2 + arch/riscv/kernel/suspend.c | 2 + arch/riscv/lib/strnlen.S | 20 +- arch/riscv/mm/extable.c | 4 +- arch/um/drivers/vector_transports.c | 1 + arch/x86/include/asm/cpufeatures.h | 3 + arch/x86/include/asm/tlb.h | 6 + arch/x86/kernel/cpu/amd.c | 4 + drivers/android/binder/node.rs | 20 +- drivers/android/binder/node/wrapper.rs | 34 ++- drivers/ata/libata-scsi.c | 13 +- drivers/block/zloop.c | 31 ++- drivers/bluetooth/btintel_pcie.c | 17 +- drivers/clk/qcom/gcc-eliza.c | 6 +- drivers/clk/qcom/gcc-kaanapali.c | 6 +- drivers/clk/qcom/gpucc-glymur.c | 2 +- drivers/clk/qcom/gpucc-kaanapali.c | 2 +- drivers/edac/amd64_edac.c | 4 +- drivers/gpio/gpio-exar.c | 2 +- drivers/gpio/gpio-mpsse.c | 24 +- drivers/gpio/gpio-xilinx.c | 9 +- drivers/gpu/drm/amd/amdgpu/amdgpu_amdkfd.c | 8 +- drivers/gpu/drm/amd/amdgpu/amdgpu_debugfs.c | 77 ++++--- drivers/gpu/drm/amd/amdgpu/amdgpu_gmc.c | 17 +- drivers/gpu/drm/amd/amdgpu/amdgpu_kms.c | 5 + drivers/gpu/drm/amd/amdgpu/amdgpu_userq.c | 13 +- drivers/gpu/drm/amd/amdgpu/mes_userqueue.c | 9 +- .../gpu/drm/amd/amdkfd/kfd_device_queue_manager.c | 32 ++- drivers/gpu/drm/amd/amdkfd/kfd_priv.h | 7 + drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm.c | 26 ++- .../drm/amd/display/amdgpu_dm/amdgpu_dm_plane.c | 20 +- drivers/gpu/drm/aspeed/aspeed_gfx_drv.c | 5 +- drivers/gpu/drm/bridge/th1520-dw-hdmi.c | 8 +- drivers/gpu/drm/display/drm_dp_helper.c | 4 +- drivers/gpu/drm/drm_bridge.c | 8 +- drivers/gpu/drm/drm_fb_helper.c | 6 +- drivers/gpu/drm/gud/gud_pipe.c | 1 + drivers/gpu/drm/i915/gem/i915_gem_execbuffer.c | 2 +- drivers/gpu/drm/i915/gt/intel_rps.c | 3 +- drivers/gpu/drm/imagination/pvr_mmu.c | 25 +- drivers/gpu/drm/imagination/pvr_vm.c | 8 +- drivers/gpu/drm/panthor/panthor_sched.c | 3 + drivers/gpu/drm/vc4/vc4_bo.c | 5 +- drivers/gpu/drm/vc4/vc4_drv.c | 5 +- drivers/gpu/drm/vc4/vc4_drv.h | 2 +- drivers/gpu/drm/vc4/vc4_gem.c | 8 +- drivers/gpu/drm/vc4/vc4_irq.c | 24 +- drivers/gpu/drm/vc4/vc4_v3d.c | 65 +++--- drivers/gpu/drm/vc4/vc4_validate.c | 2 +- drivers/gpu/drm/vmwgfx/vmwgfx_cursor_plane.c | 26 ++- drivers/gpu/drm/xe/display/xe_fb_pin.c | 6 +- drivers/gpu/drm/xe/xe_bo.c | 139 ++++++++--- drivers/gpu/drm/xe/xe_bo.h | 2 + drivers/gpu/drm/xe/xe_i2c.c | 5 +- drivers/gpu/drm/xe/xe_lrc.c | 38 +-- drivers/gpu/drm/xe/xe_mmio.c | 5 +- drivers/gpu/drm/xe/xe_sysctrl_mailbox.c | 16 +- drivers/input/joystick/xpad.c | 4 + drivers/input/misc/ati_remote2.c | 12 +- drivers/iommu/dma-iommu.c | 4 +- drivers/md/dm-crypt.c | 7 +- drivers/md/dm-integrity.c | 4 +- drivers/md/dm-ioctl.c | 14 +- drivers/md/dm-snap.c | 14 ++ drivers/memstick/core/memstick.c | 8 +- drivers/memstick/host/rtsx_usb_ms.c | 31 +-- drivers/mmc/host/cavium-octeon.c | 5 +- drivers/mmc/host/cavium-thunderx.c | 5 +- drivers/mmc/host/mtk-sd.c | 1 + drivers/mmc/host/sdhci-sprd.c | 4 + drivers/net/amt.c | 48 ++-- drivers/net/bareudp.c | 3 +- drivers/net/bonding/bond_main.c | 8 +- drivers/net/can/dev/skb.c | 4 + drivers/net/can/usb/f81604.c | 2 +- drivers/net/can/vxcan.c | 3 + drivers/net/dsa/microchip/ksz_common.h | 2 +- drivers/net/ethernet/airoha/airoha_eth.c | 32 ++- drivers/net/ethernet/airoha/airoha_eth.h | 2 + drivers/net/ethernet/broadcom/bnxt/bnxt.c | 199 ++++++++++------ drivers/net/ethernet/broadcom/bnxt/bnxt.h | 1 - drivers/net/ethernet/broadcom/genet/bcmgenet_wol.c | 11 + .../chelsio/inline_crypto/ch_ktls/chcr_ktls.c | 4 +- drivers/net/ethernet/google/gve/gve_main.c | 8 +- drivers/net/ethernet/google/gve/gve_rx_dqo.c | 13 +- drivers/net/ethernet/ibm/ibmveth.c | 22 +- drivers/net/ethernet/intel/e1000e/netdev.c | 7 + drivers/net/ethernet/intel/iavf/iavf.h | 11 +- drivers/net/ethernet/intel/iavf/iavf_main.c | 85 +++++-- drivers/net/ethernet/intel/iavf/iavf_virtchnl.c | 99 +++++++- drivers/net/ethernet/intel/ice/devlink/port.c | 2 +- drivers/net/ethernet/intel/ice/ice_eswitch.c | 2 +- drivers/net/ethernet/intel/ice/ice_txrx.c | 4 +- .../net/ethernet/mellanox/mlx5/core/en/xsk/rx.c | 2 + drivers/net/ethernet/mellanox/mlx5/core/en_rx.c | 13 +- .../ethernet/mellanox/mlx5/core/esw/adj_vport.c | 20 -- drivers/net/ethernet/mellanox/mlx5/core/lag/lag.c | 79 +++++-- drivers/net/ethernet/mellanox/mlx5/core/vport.c | 24 -- drivers/net/ethernet/mellanox/mlxsw/spectrum.h | 2 + drivers/net/ethernet/mellanox/mlxsw/spectrum_acl.c | 10 +- .../net/ethernet/mellanox/mlxsw/spectrum_flower.c | 9 +- drivers/net/ethernet/microchip/sparx5/sparx5_ptp.c | 28 ++- .../ethernet/microchip/sparx5/sparx5_tc_matchall.c | 1 + drivers/net/ethernet/stmicro/stmmac/stmmac_main.c | 15 +- drivers/net/ethernet/xilinx/xilinx_axienet.h | 7 +- drivers/net/ethernet/xilinx/xilinx_axienet_main.c | 53 ++++- drivers/net/pfcp.c | 7 + drivers/net/team/team_core.c | 16 +- drivers/net/team/team_mode_broadcast.c | 2 + drivers/net/tun.c | 23 +- drivers/net/usb/ax88179_178a.c | 6 +- drivers/net/veth.c | 1 + drivers/net/virtio_net.c | 2 + drivers/net/wireguard/noise.c | 7 +- drivers/net/wireguard/queueing.h | 2 + drivers/net/wireless/ath/ath12k/core.c | 33 +-- drivers/net/wireless/ath/ath12k/core.h | 3 - drivers/net/wireless/ath/ath12k/hif.h | 9 - drivers/net/wireless/ath/ath12k/pci.c | 8 - .../wireless/broadcom/brcm80211/brcmfmac/core.c | 27 ++- drivers/net/wireless/marvell/libertas/tx.c | 7 - drivers/net/wireless/mediatek/mt76/mt76.h | 10 + drivers/net/wireless/mediatek/mt76/mt7603/init.c | 1 + .../net/wireless/mediatek/mt76/mt76_connac_mcu.h | 1 + drivers/net/wireless/mediatek/mt76/mt7915/init.c | 6 + drivers/net/wireless/mediatek/mt76/mt7915/main.c | 2 + drivers/net/wireless/mediatek/mt76/mt7925/mac.c | 3 +- drivers/net/wireless/mediatek/mt76/mt7925/main.c | 12 + .../net/wireless/mediatek/mt76/mt792x_acpi_sar.c | 134 +++++++---- .../net/wireless/mediatek/mt76/mt792x_acpi_sar.h | 2 + drivers/net/wireless/mediatek/mt76/mt7996/init.c | 3 +- drivers/net/wireless/mediatek/mt76/mt7996/main.c | 10 +- drivers/net/wireless/mediatek/mt76/mt7996/mcu.h | 3 + drivers/net/wireless/mediatek/mt76/tx.c | 89 +++++++- drivers/net/xen-netfront.c | 4 +- drivers/nvme/target/core.c | 2 +- drivers/nvme/target/pr.c | 4 + drivers/pmdomain/imx/imx8m-blk-ctrl.c | 15 ++ drivers/pmdomain/rockchip/pm-domains.c | 20 +- drivers/power/sequencing/pwrseq-pcie-m2.c | 2 + drivers/ptp/ptp_ocp.c | 2 +- drivers/regulator/ltc3676.c | 15 +- drivers/regulator/of_regulator.c | 24 +- drivers/regulator/tps6594-regulator.c | 6 +- drivers/scsi/ch.c | 29 +-- drivers/scsi/qedi/qedi_main.c | 3 +- drivers/spi/spi-nxp-fspi.c | 22 +- drivers/spi/spi-sg2044-nor.c | 60 ++++- drivers/tee/optee/ffa_abi.c | 38 ++- drivers/tee/optee/optee_msg.h | 4 +- drivers/tee/optee/smc_abi.c | 17 +- drivers/tee/tee_shm.c | 4 + drivers/ufs/core/ufs-mcq.c | 30 +-- drivers/ufs/core/ufshcd.c | 53 +++-- drivers/ufs/host/ufs-mediatek.c | 18 +- fs/btrfs/inode.c | 7 +- fs/btrfs/ioctl.c | 31 +-- fs/btrfs/scrub.c | 4 +- fs/btrfs/xattr.c | 15 +- fs/dcache.c | 4 +- fs/fcntl.c | 3 + fs/fs_context.c | 4 + fs/inode.c | 23 +- fs/mount.h | 6 +- fs/namei.c | 29 +++ fs/namespace.c | 254 ++++++++++++++++----- fs/nullfs.c | 4 +- fs/pnode.c | 108 +++++++-- fs/verity/fsverity_private.h | 15 +- fs/verity/open.c | 13 +- fs/xfs/libxfs/xfs_exchmaps.c | 103 ++------- fs/xfs/libxfs/xfs_log_format.h | 4 +- fs/xfs/xfs_bmap_util.c | 15 +- fs/xfs/xfs_exchrange.c | 51 +++-- include/linux/can/core.h | 3 +- include/linux/can/skb.h | 4 +- include/linux/io_uring_types.h | 2 + include/linux/mount.h | 2 +- include/linux/nsproxy.h | 1 + include/linux/nvme.h | 4 +- include/linux/sched/ext.h | 1 + include/linux/virtio_net.h | 64 +++--- include/net/amt.h | 4 - include/net/bluetooth/rfcomm.h | 1 + include/net/can.h | 2 + include/net/cfg80211.h | 1 + include/net/ip.h | 7 + include/net/mac80211.h | 14 +- include/net/strparser.h | 10 +- io_uring/io_uring.c | 13 +- io_uring/kbuf.c | 6 +- io_uring/memmap.c | 47 +++- io_uring/memmap.h | 2 +- io_uring/net.c | 4 +- io_uring/register.c | 21 +- io_uring/zcrx.c | 2 +- kernel/cgroup/cpuset.c | 40 +++- kernel/dma/swiotlb.c | 6 +- kernel/fork.c | 3 +- kernel/nsproxy.c | 2 +- kernel/sched/ext/ext.c | 25 +- kernel/sched/ext/internal.h | 5 + kernel/sched/sched.h | 1 - kernel/workqueue.c | 2 +- lib/dim/dim.c | 10 +- mm/mremap.c | 70 ++++-- mm/pgtable-generic.c | 20 +- mm/vma.c | 21 +- mm/vma.h | 7 +- net/bluetooth/hci_core.c | 4 + net/bluetooth/hci_sock.c | 2 + net/bluetooth/hci_sync.c | 10 +- net/bluetooth/iso.c | 52 ++++- net/bluetooth/mgmt.c | 2 +- net/bluetooth/rfcomm/core.c | 134 +++++++---- net/bluetooth/rfcomm/sock.c | 5 +- net/bluetooth/rfcomm/tty.c | 2 +- net/bluetooth/sco.c | 87 +++++-- net/bridge/br_multicast.c | 23 +- net/bridge/netfilter/nf_conntrack_bridge.c | 10 +- net/can/af_can.c | 47 +++- net/can/gw.c | 3 + net/can/isotp.c | 16 +- net/can/raw.c | 10 +- net/core/dev.c | 11 +- net/core/flow_dissector.c | 11 +- net/core/skbuff.c | 6 +- net/devlink/core.c | 10 +- net/ipv4/cipso_ipv4.c | 8 + net/ipv4/fib_semantics.c | 3 + net/ipv4/fib_trie.c | 2 - net/ipv4/ip_output.c | 10 +- net/ipv4/route.c | 5 + net/ipv4/tcp.c | 2 + net/ipv4/udp.c | 11 + net/ipv6/ip6_gre.c | 7 - net/ipv6/route.c | 4 +- net/ipv6/udp.c | 13 ++ net/mac80211/debugfs.c | 13 +- net/mac80211/ieee80211_i.h | 2 + net/mac80211/main.c | 1 + net/mac80211/sta_info.c | 17 +- net/mac80211/sta_info.h | 3 +- net/mac80211/status.c | 5 +- net/mac80211/tx.c | 70 ++++-- net/netfilter/nfnetlink_queue.c | 7 + net/netfilter/xt_CHECKSUM.c | 6 +- net/openvswitch/actions.c | 7 +- net/openvswitch/datapath.c | 8 + net/packet/af_packet.c | 28 ++- net/sched/cls_route.c | 6 + net/sched/em_text.c | 3 + net/sctp/socket.c | 6 +- net/smc/af_smc.c | 7 +- net/strparser/strparser.c | 6 +- net/tipc/node.c | 10 +- net/tipc/topsrv.c | 80 +++++-- net/vmw_vsock/af_vsock.c | 2 + net/vmw_vsock/virtio_transport_common.c | 4 +- net/xfrm/xfrm_output.c | 16 +- security/keys/key.c | 6 +- security/keys/persistent.c | 55 +++-- security/selinux/avc.c | 5 +- security/selinux/hooks.c | 9 +- sound/hda/codecs/side-codecs/tas2781_hda.c | 18 +- sound/pci/ctxfi/ctdaio.c | 6 +- sound/soc/amd/yc/acp6x-mach.c | 7 + sound/soc/codecs/adau1372.c | 18 +- sound/soc/samsung/i2s.c | 8 + sound/soc/sdw_utils/soc_sdw_utils.c | 35 ++- tools/testing/selftests/mm/hugetlb-mmap.c | 4 +- tools/testing/vma/tests/vma.c | 4 +- 289 files changed, 3322 insertions(+), 1484 deletions(-)

3 weeks, 1 day

[PATCH 6.12 000/497] 6.12.113-rc1 review

by Greg Kroah-Hartman

This is the start of the stable review cycle for the 6.12.113 release. There are 497 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know. Responses should be made by Thu, 15 Oct 2026 11:28:22 +0000. Anything received after that time might be too late. The whole patch series can be found in one patch at: https://www.kernel.org/pub/linux/kernel/v6.x/stable-review/patch-6.12.113-r… or in the git tree and branch at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-6.12.y and the diffstat can be found below. thanks, greg k-h ------------- Pseudo-Shortlog of commits: Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> Linux 6.12.113-rc1 Adrian Bente <adibente(a)gmail.com> netfilter: flowtable: fix offloaded ct timeout never being extended Florian Westphal <fw(a)strlen.de> netfilter: conntrack: fix erronous removal of offload bit Jens Axboe <axboe(a)kernel.dk> io_uring/waitid: fix KCSAN warning on io_waitid->head Jens Axboe <axboe(a)kernel.dk> io_uring/waitid: use io_waitid_remove_wq() consistently Osama Abdelkader <osama.abdelkader(a)gmail.com> drm/panthor: validate userspace queue count against initialized firmware slot count Maíra Canal <mcanal(a)igalia.com> drm/vc4: Fix binner slot allocation failing on an idle GPU Maxime Ripard <mripard(a)kernel.org> drm/vc4: Make v3d paths unavailable on any generation newer than vc4 Ilia Gavrilov <Ilia.Gavrilov(a)infotecs.ru> vsock: Fix memory leak in vmci_transport_recv_dgram_cb() Fernando Fernandez Mancera <fmancera(a)suse.de> net: openvswitch: validate transport header presence in set_ipv6_addr Vadim Fedorenko <vadim.fedorenko(a)linux.dev> ptp: ocp: fix PCIe delay estimation calculation Willem de Bruijn <willemb(a)google.com> net/packet: call packet_parse_headers after virtio_net_hdr_to_skb Petr Machata <petrm(a)nvidia.com> mlxsw: spectrum_flower: Fix port range register leak in tmplt_create() Li RongQing <lirongqing(a)baidu.com> net/mlx5e: Order ICOSQ cc update after CQ doorbell Tianyi Gao <tianyi(a)cloudflare.com> veth: fix peer NETDEV_XDP_ACT_NDO_XMIT after GRO is toggled while down Gyeyoung Baek <gye976(a)gmail.com> drm/imagination: Fix reference and vm_bo handling in remap() Eric Dumazet <edumazet(a)kernel.org> flow_dissector: avoid u16 truncation of hlen in bpf_flow_dissect() Michael Chan <michael.chan(a)broadcom.com> bnxt_en: Fix driver init in kdump kernel Michael Chan <michael.chan(a)broadcom.com> bnxt_en: Add bnxt_clear_bars() helper Haishuang Yan <yanhaishuang(a)cmss.chinamobile.com> pfcp: make sure the SEID is linear before reading it Victor Nogueira <victor(a)mojatatu.com> net/sched: cls_route: reject change with no routing attribute Haishuang Yan <yanhaishuang(a)cmss.chinamobile.com> devlink: fix devlink_rel reference leak when notify work is pending Eric Dumazet <edumazet(a)kernel.org> flow_dissector: avoid u16 truncation of skb->len when computing thoff Waiman Long <longman(a)redhat.com> cgroup/cpuset: Call is_in_v2_mode() after acquiring cpuset_mutex in cpuset_handle_hotplug() Chen Ridong <chenridong(a)huawei.com> cpuset: separate tmpmasks and cpuset allocation logic Marek Szyprowski <m.szyprowski(a)samsung.com> ASoC: samsung: i2s: enable op_clk in probe to balance runtime PM Alvin Šipraga <alvin.sipraga(a)analog.com> ASoC: adau1372: fix invalid default state of output ASRC and DAC muxes Alvin Šipraga <alvin.sipraga(a)analog.com> ASoC: adau1372: allow sleepy powerdown GPIOs Devin Wittmayer <lucid_duck(a)justthetip.ca> wifi: mt76: mt792x: pick the SAR table layout from the table itself Junjie Cao <junjie.cao(a)intel.com> wifi: mt76: mt792x: treat 0xff ACPI SAR entries as no limit Devin Wittmayer <lucid_duck(a)justthetip.ca> wifi: mt76: mt7925: don't put the band auto marker in TGID Nicolas Cavallari <nicolas.cavallari(a)green-communications.fr> wifi: mt76: mt7915: disable rx napi when removing device Tao Gong <gongtao0607(a)gmail.com> wifi: mt76: mt7996: fix struct mt7996_mcu_wed_rro_ba_delete_event layout Aaron Ma <aaron.ma(a)canonical.com> wifi: mt76: mt7925: restore the legacy BSS after MLO teardown Filipe Manana <fdmanana(a)suse.com> btrfs: fix lost error return value in btrfs_listxattr() Filipe Manana <fdmanana(a)suse.com> btrfs: fix xattr replace when multiple xattrs are packed in the same item Fuad Tabba <fuad.tabba(a)linux.dev> arm64/boot: Don't set PMUv3p9 FGT2 bits without PMUv3 Sang-Hoon Choi <csh0052(a)gmail.com> nvmet: use the local P2P device on metadata allocation failure Mahantesh Salimath <mahantesh(a)nvidia.com> tee: optee: ffa: support shared memory offsets on large-page kernels Rodrigo Zaiden <rodrigoffzz(a)gmail.com> tee: optee: fix kernel-doc warnings Jens Wiklander <jens.wiklander(a)linaro.org> optee: sync secure world ABI headers Sang-Hoon Choi <csh0052(a)gmail.com> cxgb4/ch_ktls: disable softirqs around tid_list erases Omar Ramadan <omar(a)blockcast.net> amt: send the relay's General Query directly from the receive path Jamal Hadi Salim <jhs(a)mojatatu.com> net/sched: em_text: reject unterminated algo before autoload Maíra Canal <mcanal(a)igalia.com> drm/vc4: Free the BO cache size list on teardown Myeonghun Pak <mhun512(a)gmail.com> drm/aspeed: Balance the display clock enable on teardown Sang-Hoon Choi <csh0052(a)gmail.com> gpio: exar: initialize the ID before registering its cleanup Oleg Keri <okerixx(a)gmail.com> drm/dp: don't mark the AUX backlight enabled when enabling failed Sai Teja Aluvala <aluvala.sai.teja(a)intel.com> Bluetooth: btintel_pcie: Add shared HW reset for clean start Kiran K <kiran.k(a)intel.com> Bluetooth: btintel_pcie: Add recovery mechanism Ravindra <ravindra(a)intel.com> Bluetooth: btintel_pcie: fix TX descriptor bounds check Vincent Jardin <vjardin(a)free.fr> arm64: dts: lx2160a: fix the iic5 spi3 pinmux offset and value Vincent Jardin <vjardin(a)free.fr> arm64: dts: lx2160a: fix IIC1 pinmux submask rejected by pinctrl-single Vincent Jardin <vjardin(a)free.fr> arm64: dts: lx2160a: fix incorrect pinmux Christian Brauner <brauner(a)kernel.org> namespace: refuse an automount below a mount that is in no namespace Christian Brauner <brauner(a)kernel.org> namei: don't reveal overmounted entries in refwalk Christian Brauner <brauner(a)kernel.org> namespace: don't let a pseudo dentry become the root of a mount Christian Brauner <brauner(a)kernel.org> dcache: don't put a mountpoint on a dentry that's being removed Christian Brauner <brauner(a)kernel.org> namespace: check a submount for references right before unmounting it Christian Brauner <brauner(a)kernel.org> fs: refuse fspick() on internal superblocks Christian Brauner <brauner(a)kernel.org> namespace: don't copy an unmounted mount tree Leo Li <sunpeng.li(a)amd.com> drm/amd/display: Fix direct scanout alpha on some DRM_FORMATs Mikhail Gavrilov <mikhail.v.gavrilov(a)gmail.com> drm/amdgpu: copy debugfs register data outside the GRBM/SRBM locks Alex Deucher <alexander.deucher(a)amd.com> drm/amdgpu: make Mac FB workaround generic Vitaly Prosyak <vitaly.prosyak(a)amd.com> drm/amdgpu: serialize vblank counter reads against GPU reset Haojie Li <lihaojie(a)kylinos.cn> drm/amdkfd: fix dma_buf reference leak in get_dmabuf_info Saleel Kudchadker <Saleel.Kudchadker(a)amd.com> drm/amdkfd: align SDMA doorbell base for shader doorbell writes Fan Wu <fanwu01(a)zju.edu.cn> drm/vc4: drain the hangcheck timer and works on V3D unbind Gyeyoung Baek <gye976(a)gmail.com> drm/imagination: Size page table preallocation by device address Krzysztof Karas <krzysztof.karas(a)intel.com> drm/i915/gt: Unmask interrupts only when ACTIVE is true Krzysztof Karas <krzysztof.karas(a)intel.com> drm/i915/gem: Prevent overstepping exec array boundary Sajal Gupta <sajal2005gupta(a)gmail.com> drm/gud: don't keep a connector without a CRTC as connector_state Nguyen Ngoc Thang <ngocthang2710.1999(a)gmail.com> drm/fb-helper: defer setup when fbdev_probe() fails, not just on -EAGAIN Palla Raghunath <raghunathpalla.0209(a)gmail.com> Bluetooth: RFCOMM: Fix NULL tty_dev dereference in rfcomm_dev_shutdown Maxim Skokov <skokovmaksimevg(a)gmail.com> Bluetooth: RFCOMM: free the skb when the DLC has no owner Iaroslav Voitovych <yaroslav.voytovych(a)gmail.com> Bluetooth: MGMT: Fix status of pending commands flushed on power off Chengfeng Ye <nicoyip.dev(a)gmail.com> Bluetooth: ISO: Serialize concurrent connect calls Chengfeng Ye <nicoyip.dev(a)gmail.com> Bluetooth: ISO: Reject concurrent BIS listener setup Chengfeng Ye <nicoyip.dev(a)gmail.com> Bluetooth: hci_sock: Serialize dead-device detachment Runyu Xiao <runyu.xiao(a)seu.edu.cn> Bluetooth: btintel_pcie: use managed IRQ teardown Karl Mehltretter <kmehltretter(a)gmail.com> riscv: fix load_unaligned_zeropad() fixup for RV32 Ziyi Guo <guoziyi114(a)gmail.com> riscv: entry: gate shadow call stack reload on sstatus.SPP, not tp Runyu Xiao <runyu.xiao(a)seu.edu.cn> scsi: qedi: Initialize callback state before registration Shawn Lin <shawn.lin(a)rock-chips.com> pmdomain: rockchip: propagate subdomain add errors Shawn Lin <shawn.lin(a)rock-chips.com> pmdomain: rockchip: fix clock leak on domain probe failure Shawn Lin <shawn.lin(a)rock-chips.com> pmdomain: rockchip: don't ignore clock lookup errors on attach Ming Qian <ming.qian(a)oss.nxp.com> pmdomain: imx8m-blk-ctrl: Serialize power on/off across sibling domains Ridham Khurana <khurana.ridham222(a)gmail.com> regulator: tps6594-regulator: Fix n_linear_ranges for TPS65224 BUCK2-4 Abhishek Ojha <Abhishek.ojha(a)savoirfairelinux.com> regulator: ltc3676: don't read the write-only HRST and CLIRQ registers Shao-Fu Chen <shf.chen(a)mediatek.com> optee: register TEE devices only once fully initialized Denis V. Lunev <den(a)openvz.org> openvswitch: fix soft lockup in the netlink flow dump Karl Bonde Torp <k.torp(a)samsung.com> nvme: fix swapped ZRASF zone state values for full and read only Weiming Shi <bestswngs(a)gmail.com> net: team: free skb when broadcast has no txable port Fredrik Nyberg <fredrik.nyberg(a)volvocars.com> net: usb: ax88179_178a: fix rx frame length for non-last packets Daniel Machon <daniel.machon(a)microchip.com> net: sparx5: free the matchall entry on destroy Josef Bacik <josef(a)toxicpanda.com> net: skbuff: don't leave stale bytes in skb_copy_and_csum_bits() Sebastien Royen <sebastien.royen(a)armadeus.com> net: dsa: microchip: fix KSZ8765 fiber detection Zixuan Chai <petalzu987(a)gmail.com> net: bridge: avoid recursive multicast port cleanup Chengfeng Ye <nicoyip.dev(a)gmail.com> net/smc: protect clcsock lifetime in smc_getname Quchaosheng <quchaosheng000406(a)163.com> net/packet: guard the ll header push in packet_rcv_spkt() Guangshuo Li <lgs201920130244(a)gmail.com> mmc: sdhci-sprd: disable runtime PM on remove Yibo Tan <lhfff(a)tju.edu.cn> mmc: mtk-sd: Cancel request timeout work on remove Guangshuo Li <lgs201920130244(a)gmail.com> mmc: cavium-thunderx: destroy slot platform devices on remove Guangshuo Li <lgs201920130244(a)gmail.com> mmc: cavium-octeon: destroy slot platform devices on remove Mikulas Patocka <mpatocka(a)redhat.com> dm: fix reading free memory in do_resume Ma Xinmeng <1564938642(a)qq.com> dm-snap: reject the transient exception store for snapshot-merge Ben Cressey <ben(a)cressey.dev> dm-crypt: reject the lmk IV mode with AEAD ciphers Nguyen Ngoc Thang <ngocthang2710.1999(a)gmail.com> memstick: rtsx_usb_ms: complete requests after eject instead of dropping them Raj Ojha <rajojha047(a)gmail.com> memstick: core: wait for request completion before freeing card 성병찬 <tjdqudcks0424(a)naver.com> KEYS: Fix add_key() race with keyring restriction Karl Mehltretter <kmehltretter(a)gmail.com> keys: finalize persistent keyring timeout after link attempt Tristan Madani <tristan(a)talencesecurity.com> ice: fix metadata_dst refcount handling on representor teardown Mingming Cao <mmc(a)linux.ibm.com> ibmveth: fix TX LTB and filter unwind on open-fail Mingming Cao <mmc(a)linux.ibm.com> ibmveth: h_free logical LAN on open-fail after register Ridham Khurana <khurana.ridham222(a)gmail.com> gpio: xilinx: fix runtime PM leak on request error path Vishal Badole <Vishal.Badole(a)amd.com> EDAC/amd64: Mask UMC chip select to the four implemented selects Hui Peng <benquike(a)gmail.com> sctp: copy zeroed stats to user in sctp_getsockopt_pr_streamstatus() when !streamoute Stephen Smalley <stephen.smalley.work(a)gmail.com> selinux: preserve NATIVE_LABELS on already-initialized sb in set_mnt_opts Christian Göttsche <cgzones(a)googlemail.com> selinux: fix data race on AVC latest_notif Johannes Berg <johannes.berg(a)intel.com> Revert "wifi: libertas: reject short monitor TX frames" Chengfeng Ye <nicoyip.dev(a)gmail.com> tipc: hold a reference to nodes found by link name Yuqi Xu <xuyuqiabc(a)gmail.com> tipc: destroy topsrv workqueues before closing connections Daehyeon Ko <4ncienth(a)gmail.com> tcp: reject net_iov in zerocopy receive mapping hints Marek Szyprowski <m.szyprowski(a)samsung.com> swiotlb: fix default_swiotlb_limit() for non-growable default pool Sabrina Dubroca <sd(a)queasysnail.net> strparser: make sure __strp_recv isn't running before tearing down the parser Georgiy Osokin <g.osokin(a)auroraos.dev> tee: shm: reject zero-sized allocations in tee_dyn_shm_alloc_helper() Josef Bacik <josef(a)toxicpanda.com> xen/netfront: don't leak the skb when xennet_fill_frags() fails Pavankumar Kondeti <pavan.kondeti(a)oss.qualcomm.com> workqueue: Fix NULL current_pwq deref in chained work check Jason A. Donenfeld <Jason(a)zx2c4.com> wireguard: noise: reject response consumption after intermediate initiation Ramses de Norre <ramses(a)well-founded.dev> wireguard: queueing: preserve tstamp_type when encapsulating packet Michele Dionisio <michele.dionisio(a)gmail.com> wifi: brcmfmac: fix P2P device removal race in brcmf_detach() Daehyeon Ko <4ncienth(a)gmail.com> vsock/virtio: account only unread bytes in read_skb() Ji-Ze Hong (Peter Hong) <peter_hong(a)fintek.com.tw> usb: f81604: fix struct f81604_int_data size mismatch Palla Raghunath <raghunathpalla.0209(a)gmail.com> dm ioctl: don't let data_start run past the buffer Daehyeon Ko <4ncienth(a)gmail.com> cipso: adjust cached option offsets when removing CIPSO Wentao Liang <vulab(a)iscas.ac.cn> btrfs: scrub: fix local_root reference leak in scrub_print_warning_inode() Michael Garland <minimelkav(a)gmail.com> ASoC: amd: yc: Add DMI quirk for Acer Aspire Go 15 (AG15-21P) Karl Mehltretter <kmehltretter(a)gmail.com> arm64: irq: exclude the softirq stack switch from KCOV Krzysztof Furman <krisfur(a)proton.me> Input: xpad - add support for Corsair Novablade Pro Haotian Zhang <vulab(a)iscas.ac.cn> Input: ati_remote2 - fix type confusion in device attribute handlers Daehyeon Ko <4ncienth(a)gmail.com> ipv6: do not warn on route notification size race Daehyeon Ko <4ncienth(a)gmail.com> ipv4: do not warn on route notification size race Daehyeon Ko <4ncienth(a)gmail.com> ipv4: stop route notification sizing when nexthop group shrinks Daehyeon Ko <4ncienth(a)gmail.com> ipv4: stop exception dump when nexthop group shrinks Daehyeon Ko <4ncienth(a)gmail.com> ipv4: stop PMTU walk when nexthop group shrinks Michael S. Tsirkin <mst(a)redhat.com> ipv4: validate checksum_start before completing checksum Eric Biggers <ebiggers(a)kernel.org> crypto: drbg - Fix ineffective sanity check Baochen Qiang <baochen.qiang(a)oss.qualcomm.com> wifi: ath12k: fix reusing m3 memory Jiajia Liu <liujiajia(a)kylinos.cn> Bluetooth: hci_event: fix simultaneous discovery stuck in FINDING Liew Rui Yan <aethernet65535(a)gmail.com> mm/damon/core: fix unconditionally skip last region SeongJae Park <sj(a)kernel.org> mm/damon/core: do non-safe region walk on kdamond_apply_schemes() Chao Yu <chao(a)kernel.org> f2fs: fix to reset all pinned status during fggc Chao Yu <chao(a)kernel.org> f2fs: fix to shrink gc_lock coverage in f2fs_gc_range() Chao Yu <chao(a)kernel.org> f2fs: fix to reclaim space in f2fs_allocate_pinning_section() Remy D. Farley <one-d-wide(a)protonmail.com> doc/netlink: netlink-raw: Add max check Jakub Kicinski <kuba(a)kernel.org> tools: ynl: add scope qualifier for definitions Jakub Kicinski <kuba(a)kernel.org> tools: ynl-gen: support limits using definitions Jakub Kicinski <kuba(a)kernel.org> tools: ynl-gen: use names of constants in generated limits Matti Vaittinen <mazziesaccount(a)gmail.com> iio: light: rohm-bu27034: Fix error return Matti Vaittinen <mazziesaccount(a)gmail.com> iio: light: rohm-bu27034: Fix infinite delay on error Matti Vaittinen <mazziesaccount(a)gmail.com> iio: bu27034: simplify using guard(mutex) Pengpeng Hou <hppiscas(a)163.com> iio: cdc: ad7150: fix OF matching and publish module aliases Michael Hennerich <michael.hennerich(a)analog.com> iio: buffer-dmaengine: fix sg entry iteration when building dma_vecs Paulo Alcantara <pc(a)manguebit.org> smb: client: only require read lease for size-extending preallocate Fabrice Gasnier <fabrice.gasnier(a)foss.st.com> iio: adc: stm32-adc: fix possible division by zero in processed channel Vladyslav Ivashchenko <cactucatu4eckuu(a)gmail.com> iio: adc: axp288: Add TS bias override for Haier HV103H Cong Nguyen <congnt264(a)gmail.com> iio: adc: max1363: sign-extend bipolar differential channel reads Pengpeng Hou <pengpeng(a)iscas.ac.cn> iio: adc: aspeed: propagate reset deassert errors Krzysztof Kozlowski <krzysztof.kozlowski(a)oss.qualcomm.com> iio: adc: aspeed: Simplify with dev_err_probe Fan Wu <fanwu01(a)zju.edu.cn> iio: adc: ad_sigma_delta: fix use-after-free on unbind Matti Vaittinen <mazziesaccount(a)gmail.com> iio: accel: kionix-kx022a: Prevent memory leak and fix state Matti Vaittinen <mazziesaccount(a)gmail.com> iio: accel: kx022a: Use cleanup.h helpers Felix Fietkau <nbd(a)nbd.name> wifi: mac80211: set info->band for 802.3 encap offload frames Tamizh Chelvam Raja <tamizh.raja(a)oss.qualcomm.com> wifi: mac80211: Add sta pointer sanity check in ieee80211_8023_xmit() Sean Christopherson <seanjc(a)google.com> KVM: SVM: Use the active VMCB's MSR bitmap when checking if MSR is intercepted Dipayaan Roy <dipayanroy(a)linux.microsoft.com> net: mana: remove double CQ cleanup in mana_create_rxq error path Dipayaan Roy <dipayanroy(a)linux.microsoft.com> net: mana: Skip WQ object destruction for uninitialized RXQ Dipayaan Roy <dipayanroy(a)linux.microsoft.com> net: mana: check xdp_rxq registration before unreg in mana_destroy_rxq() Jerome Tollet <jtollet(a)cisco.com> net/mlx5e: Prevent stale XSK buffer release on MPWQE refill retry Jerome Tollet <jtollet(a)cisco.com> net/mlx5e: Prevent stale XSK buffer release on refill retry Matthew Wilcox (Oracle) <willy(a)infradead.org> fs: Free any excess xarray nodes in clear_inode() Zhiling Zou <zhilinz(a)nebusec.ai> wifi: mac80211: count only matching reservations in reserved switch Johan Hovold <johan(a)kernel.org> tty: port: fix tty_port_tty_vhangup() race Eric Dumazet <edumazet(a)kernel.org> bnxt_en: fix DMA mapping length for padded small packets Eric Dumazet <edumazet(a)kernel.org> ipv4: free inet_opt and ireq_opt after an RCU grace period Fuad Tabba <fuad.tabba(a)linux.dev> KVM: arm64: Apply the fine-grained UNDEFs without FEAT_FGT Guixin Liu <kanie(a)linux.alibaba.com> nvme-multipath: set BLK_FEAT_ZONED only after the zone info is known Han Xu <han.xu(a)nxp.com> mtd: spinand: Enable QE on all dies Zhao Li <enderaoelyther(a)gmail.com> wifi: mac80211: shut down RX BA session timer on teardown Nuno Sá <nuno.sa(a)analog.com> mtd: spinand: fix NULL pointer dereference with no ECC engine Timur Kristóf <timur.kristof(a)gmail.com> drm/amd/display: Mark DCE 6.4 as not APU Abdurrahman Hussain <abdurrahman(a)nexthop.ai> i2c: xiic: preserve PEC byte length in SMBus block read setup Manikanta Guntupalli <manikanta.guntupalli(a)amd.com> i2c: xiic: Relocate xiic_i2c_runtime_suspend and xiic_i2c_runtime_resume to facilitate atomic mode Aaron Kling <webgeek1234(a)gmail.com> ALSA: hda/tegra: Re-enable SDO workaround for Tegra194 Ian Rogers <irogers(a)google.com> perf: Replace perf_event_header__init_id with full header init Daniel Starke <daniel.starke(a)siemens.com> tty: n_gsm: fix missing modem controls after DLCI open in convergence layer type 2 Johan Hovold <johan(a)kernel.org> tty: tty_port: restore TTY_IO_ERROR on activation failure Jiri Slaby (SUSE) <jirislaby(a)kernel.org> tty: tty_port: use guard()s Jiri Slaby (SUSE) <jirislaby(a)kernel.org> tty: introduce tty_port_tty guard() Pannarat Wiriyaarritham <pannarat.wiriyaarritham(a)danielcorp.dev> usb: typec: ucsi: acpi: Assume UCSI 1.2 on Acer Nitro ANV15-41 Arthur Heymans <arthur(a)aheymans.xyz> drm/amd/display: Preserve eDP mode on initial ASSR failure Runyu Xiao <runyu.xiao(a)seu.edu.cn> USB: dwc2: shut down wakeup timer before freeing HCD state Myeonghun Pak <mhun512(a)gmail.com> usb: ohci-spear: disable controller wakeup on removal Chen Ni <nichen(a)iscas.ac.cn> usb: ohci-spear: Remove unnecessary NULL check before clk_disable_unprepare() Francisco Beltrán Millalén <fbeltranmillalen(a)gmail.com> drm/amdgpu: reset VI ASIC on MacBookPro14,3 Andre Eikmeyer <dev(a)deq.rocks> drm/amdgpu: reset VI ASIC on MacBookPro15,1 Eric Biggers <ebiggers(a)kernel.org> fsverity: add dependency on 64K or smaller pages Mostafa Saleh <smostafa(a)google.com> KVM: arm64: Use stage-1 leaf size for VM_PFNMAP Beata Michalska <beata.michalska(a)arm.com> arm64: errata: Add Cortex-A725 erratum 3821522 workaround Beata Michalska <beata.michalska(a)arm.com> arm64: errata: Factor out broken AMU const counter cap Chengfeng Ye <nicoyip.dev(a)gmail.com> Bluetooth: Serialize SMP remote OOB data access Chengfeng Ye <nicoyip.dev(a)gmail.com> Bluetooth: hci_core: Serialize SCO and ISO scheduling with teardown Mark Rutland <mark.rutland(a)arm.com> arm64/fpsimd: signal: Forbid non-streaming SVE payload on SME-only systems Mark Rutland <mark.rutland(a)arm.com> arm64/fpsimd: signal: Consistently read FPSIMD context Mark Rutland <mark.rutland(a)arm.com> arm64/fpsimd: signal: Mandate SVE payload for streaming-mode state Mark Rutland <mark.rutland(a)arm.com> arm64/fpsimd: signal: Clear PSTATE.SM when restoring FPSIMD frame only Zhengchuan Liang <zcliangcn(a)gmail.com> perf: Require kernel access for text poke events Dapeng Mi <dapeng1.mi(a)linux.intel.com> perf/core: Check kernel access when kernel callchains are requested Luo Gengkun <luogengkun(a)huaweicloud.com> perf: Remove unnecessary parameter of security check Johan Hovold <johan(a)kernel.org> tty: fix saved termios reset race Jiazi Liu <jiazi.liu1984(a)gmail.com> usb: dwc3: gadget: fix IRQ storm on invalid event buffer count Timur Kristóf <timur.kristof(a)gmail.com> drm/amd/display: Fix fast updates on DCE 8.1 Andrey Albershteyn <aalbersh(a)kernel.org> fs,fsverity: remove check for fsverity being enabled in setattr_prepare() Christoph Hellwig <hch(a)lst.de> fs,fsverity: reject size changes on fsverity files in setattr_prepare Josef Bacik <josef(a)toxicpanda.com> xen/netfront: drop RX packets with a short Ethernet header Gilberto Conde <gilbertorconde(a)gmail.com> net: usb: qmi_wwan: add Quectel EG120K-EA David Howells <dhowells(a)redhat.com> cifs: Fix handling of a beyond-EOF DIO/unbuffered read over SMB1 Marc Zyngier <maz(a)kernel.org> KVM: arm64: vgic-its: Fix MOVALL handling of source redistributor Baolin Wang <baolin.wang(a)linux.alibaba.com> mm: shmem: ignore sysfs configs for shmem forced collapse Baolin Wang <baolin.wang(a)linux.alibaba.com> mm: shmem: change shmem_huge_global_enabled() to return huge order bitmap Baolin Wang <baolin.wang(a)linux.alibaba.com> mm: factor out the order calculation into a new helper Kefeng Wang <wangkefeng.wang(a)huawei.com> mm: shmem: remove __shmem_huge_global_enabled() Paulo Alcantara <pc(a)manguebit.org> netfs: clear post-EOF pagecache when extending a file via write Xuanqiang Luo <luoxuanqiang(a)kylinos.cn> pfcp: fix socket lifetime on netdevice registration failure Bartosz Golaszewski <bartosz.golaszewski(a)oss.qualcomm.com> net: phy: aquantia: fix system interface type not updated in forced mode Paolo Abeni <pabeni(a)redhat.com> mptcp: prevent race between disconnect() and rtx Mehmet Fide <mehmet.fide(a)screeningeagle.com> mtd: rawnand: vf610_nfc: fix false bitflips on reads of erased pages Yi Yang <yiyang13(a)huawei.com> vc_screen: reload vc pointer before if (ret) in vcs_write() to avoid UAF Jiri Slaby (SUSE) <jirislaby(a)kernel.org> tty/vt: use guard()s Jiri Slaby (SUSE) <jirislaby(a)kernel.org> console: introduce console_lock guard()s Asad Kamal <asad.kamal(a)amd.com> drm/amd/powerplay: fix VoltageObjectInfo zero-stride loop and OOB read Chuck Lever <chuck.lever(a)oracle.com> svcrdma: Use svc_xprt_put to free listener on create failure Fuad Tabba <fuad.tabba(a)linux.dev> KVM: arm64: vgic-its: Don't dereference a NULL collection on ITT save Aditya Dutt <duttaditya18(a)gmail.com> jfs: fix array-index-out-of-bounds read in add_missing_indices Eric Dumazet <edumazet(a)google.com> ipv6: use RCU in ip6_output() Fan Wu <fanwu01(a)zju.edu.cn> iio: trigger: cancel reenable_work before freeing trigger Salah Triki <salah.triki(a)gmail.com> iio: proximity: vcnl3020: fix ISR bitmask check in IRQ handler Zhang Jie <zhangjie14(a)huaqin.corp-partner.google.com> iio: proximity: sx9324: Correct proximity channel resolution Cong Nguyen <congnt264(a)gmail.com> iio: proximity: pulsedlight: fix iio_device left registered on PM setup failure Salah Triki <salah.triki(a)gmail.com> iio: proximity: isl29501: Fix return type of isl29501_register_write Laxman Acharya Padhya <acharyalaxman8848(a)gmail.com> iio: proximity: aw96103: validate firmware data length Hui Su <sh_def(a)163.com> iio: pressure: bmp280: fix out-of-bounds access in sampling frequency lookup Fan Wu <fanwu01(a)zju.edu.cn> iio: light: gp2ap020a00f: drain irq_work after free_irq Arka Mondal <arkamondalofficial(a)gmail.com> iio: imu: adis16480: fix unprotected debugfs reads Arka Mondal <arkamondalofficial(a)gmail.com> iio: imu: adis16400: fix unprotected debugfs reads Marco Chen <marcochen.dev(a)gmail.com> iio: health: max30102: fix NULL dereference in interrupt handler Arka Mondal <arkamondalofficial(a)gmail.com> iio: gyro: adis16136: fix unprotected debugfs reads Salah Triki <salah.triki(a)gmail.com> iio: frequency: admv1013: fix wrong channel field used in admv1013_read_raw() Jonathan Cameron <jonathan.cameron(a)oss.qualcomm.com> iio: buffer: Ensure bounce buffer used for unaligned case is zeroed. Jinseob Kim <kimjinseob88(a)gmail.com> iio: buffer: serialize buffer teardown with mode claims Runyu Xiao <runyu.xiao(a)seu.edu.cn> iio: admv1013: initialize callback mutex before registering notifier Fan Wu <fanwu01(a)zju.edu.cn> iio: adc: xilinx-xadc: free IRQ before cancelling the unmask worker on unbind Felix Gu <ustc.gu(a)gmail.com> iio: adc: sun4i-gpadc-iio: drop underflowing pm_runtime_put() calls Felix Gu <ustc.gu(a)gmail.com> iio: adc: sun4i-gpadc-iio: clean up on thermal zone registration failure Fabrice Gasnier <fabrice.gasnier(a)foss.st.com> iio: adc: stm32-adc: fix check on internal channel availability Slavin Liu <bolin.liu(a)seu.edu.cn> iio: adc: pac1934: check ACPI label duplication Salah Triki <salah.triki(a)gmail.com> iio: accel: sca3000: fix frequency divider condition check Jiale Yao <yaojiale02(a)163.com> iio: accel: kxcjk-1013: reject duplicate event disable Frank Sorenson <sorenson(a)redhat.com> smb: client: split cifsFileInfo bitfields to avoid shared-byte RMW races Paulo Alcantara <pc(a)manguebit.org> smb: client: discard post-EOF pagecache when extending a file via copy range Paulo Alcantara <pc(a)manguebit.org> smb: client: discard post-EOF pagecache when extending a file via zero range Daehyeon Ko <4ncienth(a)gmail.com> thunderbolt: Reject oversized XDomain properties responses Kurt Lieber <kurt(a)lieber.org> thunderbolt: Disable CL states for the Anker Prime TB5 dock Mika Westerberg <mika.westerberg(a)linux.intel.com> thunderbolt: Fix KASAN reported use-after-free when request is canceled Ian Lin <ian.lin(a)jetone.com.tw> USB: serial: option: add Compal EXC-T1 support Sebastian Sjoholm <sebastian.sjoholm(a)gmail.com> USB: serial: option: add Quectel RG660QB Ian Lin <jisayme(a)gmail.com> USB: serial: option: add Compal EXM-G1x support Carlo Szelinsky <github(a)szelinsky.de> USB: serial: option: add Quectel EG060W Zhao Dongdong <zhaodongdong(a)kylinos.cn> USB: serial: option: add support for SIMCom SIM8260C Johan Hovold <johan(a)kernel.org> USB: serial: fix ioctl hangup race Johan Hovold <johan(a)kernel.org> USB: serial: fix driver deregistration order Johan Hovold <johan(a)kernel.org> USB: serial: fix dynamic id driver deregistration race Johan Hovold <johan(a)kernel.org> USB: serial: ssu100: fix baud rate overflow Johan Hovold <johan(a)kernel.org> USB: serial: quatech2: fix baud rate overflow Jérémy Carrat <jeremy.carrat(a)icloud.com> USB: serial: cp210x: add Corsair AX1500i Power Supply Yuqi Xu <xuyuqiabc(a)gmail.com> wifi: mac80211: handle empty FILS association request payload Zihan Xi <zihanx(a)nebusec.ai> wifi: mac80211: fix mesh fast xmit path deletion UAF Zhao Li <enderaoelyther(a)gmail.com> wifi: mac80211: release mesh path quota on failed additions Ruide Cao <caoruide123(a)gmail.com> wifi: mac80211: reject invalid 320 MHz CSA bandwidth Yuqi Xu <xuyuqiabc(a)gmail.com> wifi: mac80211: minstrel_ht: validate fixed rate index Zhao Li <enderaoelyther(a)gmail.com> wifi: mac80211: keep fallback association elements alive Zhao Li <enderaoelyther(a)gmail.com> wifi: mac80211: account proxy paths against the mesh path limit Zhao Li <enderaoelyther(a)gmail.com> wifi: mac80211: drain PS delivery work during station teardown Zhiling Zou <zhilinz(a)nebusec.ai> wifi: mac80211: keep paired old chanctx alive Guangshuo Li <lgs201920130244(a)gmail.com> wifi: iwlegacy: 3945: free EEPROM data on remove Tianchu Chen <flynnnchen(a)tencent.com> wifi: cw1200: fix TX padding OOB read leaking heap data to device Sean Christopherson <seanjc(a)google.com> KVM: x86/mmu: Bail from shadow walks if the root is invalid or a dummy Sean Christopherson <seanjc(a)google.com> KVM: nVMX: Force MSR bitmap refresh if runtime eVMCS controls are modified Nuno Sá <nuno.sa(a)analog.com> mtd: spinand: fix zero oobavail when no ECC engine is used Mehmet Fide <mehmet.fide(a)screeningeagle.com> mtd: rawnand: vf610_nfc: fix reads on chips with more than 64 bytes of OOB Runyu Xiao <runyu.xiao(a)seu.edu.cn> mtd: rawnand: cadence: Initialize IRQ state before requesting IRQ Pei Xiao <xiaopei01(a)kylinos.cn> mtd: block2mtd: Fix divide error when erase_size is zero Weiming Shi <bestswngs(a)gmail.com> nvmet-auth: fix out-of-bounds write in nvmet_auth_challenge() Bean Huo <beanhuo(a)micron.com> nvme-pci: add NVME_QUIRK_DMAPOOL_ALIGN_512 for Micron 4100AT Daehyeon Ko <4ncienth(a)gmail.com> nvme-multipath: fix underflow in ANA log bounds checks Jiangshan Yi <yijiangshan(a)kylinos.cn> tpm: fix off-by-four bounds check in tpm2_get_random() Willem de Bruijn <willemb(a)google.com> net: extend IPv6 exthdr detection of tunneled packets Aldo Ariel Panzardo <qwe.aldo(a)gmail.com> HID: multitouch: stop the release timer from being rearmed on remove Zhiling Zou <zhilinz(a)nebusec.ai> ipvs: bound LBLCR and LBLC cache growth Jens Axboe <axboe(a)kernel.dk> io_uring: fix task_work add use-after-free with SQPOLL Chandrashekar Devegowda <chandrashekar.devegowda(a)intel.com> Bluetooth: btintel_pcie: reject oversized TX packets in send_frame() Chandrashekar Devegowda <chandrashekar.devegowda(a)intel.com> Bluetooth: btintel_pcie: fix plen overflow in btintel_pcie_recv_frame() Chandrashekar Devegowda <chandrashekar.devegowda(a)intel.com> Bluetooth: btintel: fix buffer over-read in btintel_hw_error() Chengfeng Ye <nicoyip.dev(a)gmail.com> Bluetooth: hci_core: Serialize fragmented ISO packet queueing Chengfeng Ye <nicoyip.dev(a)gmail.com> Bluetooth: hci_core: Serialize ACL scheduling with channel deletion Linmao Li <lilinmao(a)kylinos.cn> Bluetooth: hci_core: Fix inquiry cache timestamps on 64-bit systems Chengfeng Ye <nicoyip.dev(a)gmail.com> Bluetooth: hci_conn: Lock parent access during enhanced SCO setup Chengfeng Ye <nicoyip.dev(a)gmail.com> Bluetooth: hci_sync: Fix inquiry cache use-after-free Chengfeng Ye <nicoyip.dev(a)gmail.com> Bluetooth: RFCOMM: Fix initial port reference race Abdurrahman Hussain <abdurrahman(a)nexthop.ai> i2c: xiic: don't clobber msg->len to signal block-read completion Dinh Nguyen <dinguyen(a)kernel.org> EDAC/altera: Fix memory leak on dci allocation failure Xiang Mei <xmei5(a)asu.edu> ALSA: ua101: reject mismatched capture/playback packet sizes Kyle Zeng <kylebot(a)openai.com> ALSA: seq: Serialize compat port-info ioctls Zimeng Li <me(a)lizi.moe> ASoC: qcom: lpass-cpu: use DAI table index for playback constraints Jiangshan Yi <yijiangshan(a)kylinos.cn> ASoC: codecs: rt1017-sdca-sdw: fix uninitialized stream_config->type Jiangshan Yi <yijiangshan(a)kylinos.cn> ASoC: codecs: max98363: fix uninitialized stream_config->type Paul Mbewe <paultyson.mbewe(a)ziehl-abegg.de> serial: sc16is7xx: refill TX FIFO below trigger using fresh TXLVL Paul Mbewe <paultyson.mbewe(a)ziehl-abegg.de> serial: sc16is7xx: fix TX gap caused by kfifo circular buffer wrap-around Wentao Liang <vulab(a)iscas.ac.cn> serial: vt8500: Fix clock reference leak in vt8500_serial_probe() Simon Gassner <simon.gassner(a)noxsystems.com> serial: tegra: don't clear the Tx FIFO on an Rx-only reset Wentao Liang <vulab(a)iscas.ac.cn> serial: ma35d1: Fix clock reference leak in ma35d1serial_probe() Johan Hovold <johan(a)kernel.org> serial: fix TIOCMIWAIT race Fan Wu <fanwu01(a)zju.edu.cn> serial: 8250_bcm7271: fix use-after-free in brcmuart_remove() Fan Wu <fanwu01(a)zju.edu.cn> tty: serial: max3100: shut down timer before freeing port Johan Hovold <johan(a)kernel.org> tty: abort break signalling on hangup Viken Dadhaniya <viken.dadhaniya(a)oss.qualcomm.com> tty: serial: qcom_geni_serial: Keep console RX functional after deep idle Joshua Rogers <linux(a)joshua.hu> tty: vcc: hold port lock when clearing tty pointer in vcc_cleanup Joshua Rogers <linux(a)joshua.hu> tty: vcc: zero-initialize control packet in vcc_send_ctl() Johan Hovold <johan(a)kernel.org> tty: amiserial: fix broken TIOCMIWAIT Mingyu Wang <25181214217(a)stu.xidian.edu.cn> tty: vt: fix memory leak in vc_allocate() Jie Deng <dengjie03(a)kylinos.cn> usb: cdns3: Fix NULL pointer dereference in cdns3_pci_probe Fan Wu <fanwu01(a)zju.edu.cn> usb: cdns3: fix use-after-free in cdns3_gadget_exit() Jameson Thies <jthies(a)google.com> usb: typec: ucsi: displayport: Current CAM OOB index fixup Prashanth K <prashanth.k(a)oss.qualcomm.com> usb: typec: ucsi: Get the connector fwnode based on reg value Fan Wu <fanwu01(a)zju.edu.cn> usb: typec: ucsi: glink: fix use-after-free of ucsi on remove Radhey Shyam Pandey <radhey.shyam.pandey(a)amd.com> usb: typec: tipd: fix uninitialized typec_partner_desc in tps6598x_connect() Marian Rotariu <marian.c.rotariu(a)gmail.com> usb: typec: tipd: don't send GAID when probe fails in APP mode Amit Sunil Dhamne <amitsd(a)google.com> usb: typec: tcpm: recover after failure to start the frs ams Hui Peng <benquike(a)gmail.com> usb: core: clear both ep_in and ep_out for non-ep0 control endpoints Myeonghun Pak <mhun512(a)gmail.com> usb: chipidea: tegra: disable runtime PM on resume failure Yuchao Zhang <ndaugoing(a)gmail.com> usb: gadget: f_fs: Fix NULL pointer dereference in FUNCTIONFS_ENDPOINT_DESC Alan Stern <stern(a)rowland.harvard.edu> USB: gadget: dummy-hcd: Fix wait for outstanding request completions Fan Wu <fanwu01(a)zju.edu.cn> usb: gadget: aspeed-vhub: cancel wake work on device removal Radhey Shyam Pandey <radhey.shyam.pandey(a)amd.com> usb: dwc3: am62: Fix runtime PM usage count leak on probe error path Linkai Gong <gonglinkai(a)kylinos.cn> usb: typec: anx7411 - stop the IRQ before destroying the workqueue Liu Chao <liuc63(a)xiaopeng.com> usb: gadget: f_uac1_legacy: validate bRequest index in generic_{set,get}_cmd Takashi Iwai <tiwai(a)suse.de> usb: gadget: midi2: Fix the jack descriptor array sizes Myeonghun Pak <mhun512(a)gmail.com> usb: ohci-st: disable controller wakeup on removal Myeonghun Pak <mhun512(a)gmail.com> usb: ohci-s3c2410: disable controller wakeup on removal Myeonghun Pak <mhun512(a)gmail.com> usb: ohci-da8xx: disable controller wakeup on cleanup Orgad Shaneh <orgads(a)gmail.com> usb: octeon-hcd: fix the FIFO-flush timeout computation Lovekesh Solanki <lovekeshsolanki00(a)gmail.com> usb: hub: use shorter 120ms post resume hold for SS root hubs Syed Labeeq Sajid Bukhari <syedlabeeq(a)gmail.com> usb: storage: sierra_ms: reject short SWoC info transfers Johan Hovold <johan(a)kernel.org> USB: serial: fix port tear down use-after-free Yuchao Zhang <ndaugoing(a)gmail.com> USB: cdc-acm: skip URB restart in port_shutdown if disconnected Johan Hovold <johan(a)kernel.org> USB: cdc-acm: fix racy TIOCMIWAIT implementation Viken Dadhaniya <viken.dadhaniya(a)oss.qualcomm.com> soc: qcom: geni-se: Correct QUP Core ICC vote constants Yuxiao Wang <yuxiao.wang(a)certik.com> nitro_enclaves: fix use-after-free on SLOT_ALLOC failure Raphaël Larocque <rlarocque(a)disroot.org> Input: synaptics - limit T440p InterTouch quirk to LEN0036 Lovekesh Solanki <lovekeshsolanki00(a)gmail.com> Input: synaptics - add LEN205b entry to smbus_pnp_ids for ThinkPad T490 David Heidelberg <david(a)ixit.cz> Input: s6sy761 - fix resume ordering and restore sensing Lovekesh Solanki <lovekeshsolanki00(a)gmail.com> Input: i8042 - add nomux quirk for Fujitsu LIFEBOOK U7410 Martino Papero <martino.papero(a)lcb.to.it> Input: atkbd - skip deactivate for Lenovo IdeaPad Slim 3 15IWC11 Wentao Liang <vulab(a)iscas.ac.cn> kgdboc: Fix tty driver reference leak in configure_kgdboc() Tomer Pomeranc <tomerpo(a)gmail.com> binder: fix leaked fd fixups on TF_UPDATE_TXN supersede Tomer Pomeranc <tomerpo(a)gmail.com> binder: fix is_failure flag for superseded transaction cleanup Guangshuo Li <lgs201920130244(a)gmail.com> drm/amdgpu: fix ACP MFD device leak on init failure Guangshuo Li <lgs201920130244(a)gmail.com> drm/amdgpu: fix IP instance memory leak on kobject add failure Wentao Liang <vulab(a)iscas.ac.cn> drm/mediatek: Fix pdev reference leak in mtk_drm_bind() Guangshuo Li <lgs201920130244(a)gmail.com> drm/mediatek: Fix ovl adaptor platform device leak Haojie Li <lihaojie(a)kylinos.cn> drm/mediatek: Add missing IS_ERR check for ovl_adaptor platform device Imre Kaloz <kaloz(a)kernel.org> drm/radeon: Read the VRAM VBIOS signature with readb() Willian Oliveira <williandossantosdeoliveira287(a)gmail.com> drm/amdgpu/gfx6: fix firmware leak on teardown Timur Kristóf <timur.kristof(a)gmail.com> drm/amd/pm/si: Fix updating clock limits on AC/DC Timur Kristóf <timur.kristof(a)gmail.com> drm/amd/pm/si: Check AMD_IS_MOBILITY flag for PPSMC_SYSTEMFLAG_GPIO_DC Jiangshan Yi <yijiangshan(a)kylinos.cn> drm/amd/display: check dc_state_create_copy() for NULL in dm_suspend Nikola Prica <nikola.prica(a)amd.com> PCI: Accept AtomicOps already enabled by the hypervisor Takashi Iwai <tiwai(a)suse.de> ALSA: ice1712: Fix the error handling via auto-cleanup at probe Takashi Iwai <tiwai(a)suse.de> ALSA: core: Define auto-cleanup for snd_card_free() Luo Gengkun <luogengkun2(a)huawei.com> perf: Fix race between perf_event_exit_task() and perf_pending_task() Hongjian Dai <daihongjian(a)kylinsec.com.cn> i2c: at91: release DMA channels when probe defers Lorenzo Bianconi <lorenzo.bianconi(a)oss.qualcomm.com> net: mvneta: clear XDP pfmemalloc flag between frames Alexander Lobakin <aleksander.lobakin(a)intel.com> xdp, xsk: constify read-only arguments of some static inline helpers Eric Dumazet <edumazet(a)kernel.org> ipv6: sr: use skb_get_hash_net() in seg6_make_flowlabel() Prathamesh Deshpande <prathameshdeshpande7(a)gmail.com> net/mlx5e: Fix AF_XDP TX timestamp teardown NULL dereference Quentin Freimanis <quentin(a)q-lab.dev> net: sparx5: make ports inherit the switch base mac address type Harshit Mogalapalli <harshit.m.mogalapalli(a)oracle.com> net: microchip: vcap: stop scanning after deleting key field Pablo Neira Ayuso <pablo(a)netfilter.org> netfilter: flowtable: generalize pending status bit Florian Westphal <fw(a)strlen.de> netfilter: conntrack: rework offload nf_conn timeout extension logic Florian Westphal <fw(a)strlen.de> netfilter: conntrack: remove skb argument from nf_ct_refresh Fernando Fernandez Mancera <fmancera(a)suse.de> netfilter: bpf: reject invalid NAT manipulation types Julian Anastasov <ja(a)ssi.bg> ipvs: filter some flags received in the backup server Julian Anastasov <ja(a)ssi.bg> ipvs: do not create invisible templates Julian Anastasov <ja(a)ssi.bg> ipvs: fix missing counter decrement in lblc Jeff Jo <jeffjo(a)openai.com> tcp: refresh TS.Recent for accepted old ACKs Sandeep Haemoon <sandeeph(a)loljews.com> net: ethernet: mtk_eth_soc: allocate dummy netdev sooner Jamal Hadi Salim <jhs(a)mojatatu.com> net: cap skb->queue_mapping when the tx queue is picked Nicolai Buchwitz <nb(a)tipi-net.de> net: bcmgenet: fix NULL dereference in set_coalesce before first open Niklas Cassel <cassel(a)kernel.org> virtio_blk: set the zone write granularity Jamal Hadi Salim <jhs(a)mojatatu.com> net/sched: sch_codel: match the no-drop threshold to the packet size Jamal Hadi Salim <jhs(a)mojatatu.com> net/sched: fq_codel: match the no-drop threshold to the packet size Eric Dumazet <edumazet(a)google.com> net: restrict SO_RESERVE_MEM to TCP sockets and cap max value Kuniyuki Iwashima <kuniyu(a)google.com> net-memcg: Introduce mem_cgroup_sk_enabled(). Kuniyuki Iwashima <kuniyu(a)google.com> net-memcg: Introduce mem_cgroup_from_sk(). Kuniyuki Iwashima <kuniyu(a)google.com> net: Clean up __sk_mem_raise_allocated(). Kuniyuki Iwashima <kuniyu(a)google.com> mptcp: Fix up subflow's memcg when CONFIG_SOCK_CGROUP_DATA=n. Kuniyuki Iwashima <kuniyu(a)google.com> memcg: convert memcg->socket_pressure to u64 Jérémy Jean <Jeremy.Jean(a)oss.cyber.gouv.fr> tipc: prevent GCM nonce reuse on peer key changes Baha Mesleh <baha.mesleh(a)nokia.com> octeontx2-af: mcs: Fix SC resource cleanup loop Anirudh Virdi <avirdi(a)redhat.com> net/mlx5: Fix slab-out-of-bounds when handling team device events Rongwei Liu <rongweil(a)nvidia.com> net/mlx5: LAG, Refactor lag logic Florian Fainelli <florian.fainelli(a)broadcom.com> net: systemport: Fix RUNT MIB counter register offset calculation Florian Fainelli <florian.fainelli(a)broadcom.com> net: systemport: Fix buffer overflow in bcm_sysport_get_stats() Nguyen Ngoc Thang <ngocthang2710.1999(a)gmail.com> Bluetooth: hci_sync: don't drain cmd_sync backlog on unregister Florian Westphal <fw(a)strlen.de> netfilter: ipset: do not update comments from kernel-side adds Qishuai Liu <lqs(a)lqs.me> ipv6: fix prefix route expiry in modify_prefix_route() Jamal Hadi Salim <jhs(a)mojatatu.com> net/sched: cls_api: reclaim an empty proto on the error path Binbin Deng <18983559317(a)163.com> net/mctp: publish the mctp_dev only after it is initialised Sai Teja Aluvala <aluvala.sai.teja(a)intel.com> Bluetooth: btintel: validate DDC record lengths Sang-Hoon Choi <csh0052(a)gmail.com> Bluetooth: hci_core: free the HCI ID if naming fails Cezary Rojewski <cezary.rojewski(a)intel.com> ASoC: codecs: rt274: Fix format setting for 44100 rate Cezary Rojewski <cezary.rojewski(a)intel.com> ASoC: codecs: rt286: Revert delay value for jack setup Felix Fietkau <nbd(a)nbd.name> wifi: mac80211: prevent AP VLAN tx from other interfaces Tamizh Chelvam Raja <tamizh.raja(a)oss.qualcomm.com> wifi: mac80211: Add 802.3 multicast encapsulation offload support Tamizh Chelvam Raja <tamizh.raja(a)oss.qualcomm.com> wifi: mac80211: Add multicast to unicast support for 802.3 path Zhao Li <enderaoelyther(a)gmail.com> wifi: cfg80211: preserve hidden-group beacon IE ownership Manush Prajwal <manushprajwal555(a)gmail.com> rtc: mpfs: fix unchecked devm_clk_get() error pointer in probe() Aamir Ahmed <elb12345(a)hotmail.co.uk> rtc: ac100: Fix clock provider use-after-free on probe failure Uwe Kleine-König <u.kleine-koenig(a)baylibre.com> rtc: Switch back to struct platform_driver::remove() Liu Dalin <liudalin(a)kylinsec.com.cn> rtc: dev: zero-initialize struct rtc_wkalrm to prevent information leak Georgios Karantzas <gck.kara(a)gmail.com> wifi: ath9k_htc: bound TX aggregation to MAX_TX_BUF_SIZE Pengpeng Hou <pengpeng(a)iscas.ac.cn> wifi: ath9k: reject short WMI command responses Nicolas Escande <nico.escande(a)gmail.com> wifi: ath11k: reset ar->num_stations on hardware start Sheetal <sheetal(a)nvidia.com> ASoC: tegra: Fix ASRC Stream6 input threshold control Aamir Ahmed <elb12345(a)hotmail.co.uk> wifi: wfx: validate MIB read length before copying to caller HyeongJun An <sammiee5311(a)gmail.com> ASoC: wm8903: Move the DRC QR threshold to the register that holds it Abdurrahman Hussain <abdurrahman(a)nexthop.ai> of/overlay: don't create "//" paths for fragments targeting the root Abdurrahman Hussain <abdurrahman(a)nexthop.ai> of/overlay: don't leak fragment references when changeset init fails Karl Mehltretter <kmehltretter(a)gmail.com> random: fix vgetrandom_opaque_params kernel-doc Julian Sun <sunjunchao(a)bytedance.com> nvmet: preserve device path on allocation failure Karl Mehltretter <kmehltretter(a)gmail.com> mtd: core: call _get_device() with the master MTD Matti Vaittinen <mazziesaccount(a)gmail.com> iio: accel: kionix-kx022a: Fix array boundary check SJ Park <sj(a)kernel.org> mm/damon/core: don't skip damos_adjust_quota() while esz is not zero Nathan Chancellor <nathan(a)kernel.org> random: vDSO: avoid call to memset() when zeroing reserved parameter Tetsuo Handa <penguin-kernel(a)I-love.SAKURA.ne.jp> perf/core: Fix WARN in perf_sigtrap() Lorenzo Stoakes (ARM) <ljs(a)kernel.org> mm/secretmem: properly account locked pages Xiang Mei <xmei5(a)asu.edu> ALSA: line6: reject oversized playback packets Nguyen Ngoc Thang <ngocthang2710.1999(a)gmail.com> ALSA: caiaq: unregister the input device when probe fails Wentao Liang <vulab(a)iscas.ac.cn> wifi: wlcore: Fix runtime PM leak in wlcore_remove() Zizhi Wo <wozizhi(a)huawei.com> vt: skip screen update for DEC alignment test on backgroup consoles Maoyi Xie <maoyixie.tju(a)gmail.com> rds_tcp: close NULL deref window in rds_tcp_set_callbacks Jiangshan Yi <yijiangshan(a)kylinos.cn> smb: client: clear setuid/setgid bit on write with cifsacl/modefromsid/posix extensions Zhichen Wang <wangzhichen(a)manus.ai> virt: vmgenid: set driver_data before registering notification handlers Surendran Kanagaraj <surenkj(a)amazon.com> tpm: Disable TPM on null key name mismatch Jun Yang <junvyyang(a)tencent.com> sctp: check RCV_SHUTDOWN after the sendmsg connect wait Runyu Xiao <runyu.xiao(a)seu.edu.cn> rtc: spear: initialize IRQ state before requesting alarm IRQ Aamir Ahmed <elb12345(a)hotmail.co.uk> rtc: ac100: Assign .num before accessing .hws Ilkka Lappeteläinen <ilkka.lappetelainen(a)gmail.com> net/packet: prevent TX_RING byte count overflow Aohan Mei <henrymei(a)tencent.com> netfilter: nft_flow_offload: drop flowtable reference on init error path Alireza Asgari <alireza(a)asgari.net> net: fix checksum offsets in skb_splice_from_iter() Abdurrahman Hussain <abdurrahman(a)nexthop.ai> of/overlay: only treat a positive changeset id as registered Abdurrahman Hussain <abdurrahman(a)nexthop.ai> of/overlay: put property on deadprops only after changeset add succeeds Wentao Liang <vulab(a)iscas.ac.cn> of/irq: Fix remaining refcount leaks in of_irq_init() Leon Hwang <leon.hwang(a)linux.dev> kprobes: Skip disarmed probes when checking optkprobe overlap Benjamin Tissoires <bentiss(a)kernel.org> HID: bpf: cast size to ssize_t when checking hid_bpf_hw_request Jérémy Jean <Jeremy.Jean(a)oss.cyber.gouv.fr> audit: fix exe mark UAF in kill_rules() Takashi Iwai <tiwai(a)suse.de> ALSA: usb-audio: Apply IGNORE_CTL_ERROR quirk to all Audient devices Kuniyuki Iwashima <kuniyu(a)google.com> neighbour: Skip default parms when resumed in neightbl_dump_info(). Darrick J. Wong <djwong(a)kernel.org> xfs: fix cursor and pointer handling when recovering iunlink buckets Zihan Xi <zihanx(a)nebusec.ai> smb: client: close completed creates on compound wait errors Aldo Ariel Panzardo <qwe.aldo(a)gmail.com> Bluetooth: ISO: release unused CIS holds after channel attach SeungJu Cheon <suunj1331(a)gmail.com> Bluetooth: ISO: Fix data-race on iso_pi(sk) in socket and HCI event paths Zihan Xi <zihanx(a)nebusec.ai> smb: client: close handle after create-context parsing failure ChenXiaoSong <chenxiaosong(a)kylinos.cn> smb/client: pass cifs_open_info_data to SMB2_open() ChenXiaoSong <chenxiaosong(a)kylinos.cn> smb/client: use stack-allocated smb2_file_all_info in smb3_query_mf_symlink() Peter Ujfalusi <peter.ujfalusi(a)linux.intel.com> ASoC: SOF: ipc4/Intel: Add support for library restore firmware functionality Peter Ujfalusi <peter.ujfalusi(a)linux.intel.com> ASoC: SOF: ipc4-priv: Add kernel doc for fw_context_save of sof_ipc4_fw_data Tibor Harcsa <silurust(a)gmail.com> Bluetooth: btusb: Add IMC Networks QCA9377 to quirks table Richard Fitzgerald <rf(a)opensource.cirrus.com> ASoC: sdw_utils: Set snd_soc_dai_link_ch_map.codec_ch_mask for capture Jiayuan Chen <jiayuan.chen(a)linux.dev> bpf, xdp: move offload check into dev_xdp_install() Jiakai Xu <jiakaipeanut(a)gmail.com> RISC-V: KVM: Fix null pointer dereference in kvm_riscv_aia_imsic_has_attr() Darrick J. Wong <djwong(a)kernel.org> xfs: don't let memory failures leak blocks and kill repairs Namjae Jeon <linkinjeon(a)kernel.org> smb: client: use finish_no_open() for non-regular inodes Mike Rapoport (Microsoft) <rppt(a)kernel.org> selftests/mm: hugetlb-mremap: add setup of HugeTLB pages Marc Zyngier <maz(a)kernel.org> KVM: arm64: nv: Delay freeing of shadow S2 structures until VM destruction Marc Zyngier <maz(a)kernel.org> KVM: arm64: nv: Fix life cycle of the nested_mmus array Fan Wu <fanwu01(a)zju.edu.cn> smb: client: fix cifsFileInfo reference leak in deferred close Frank Sorenson <sorenson(a)redhat.com> smb: client: fix OOB read/write from unvalidated DataOffset in coalesce_t2() ------------- Diffstat: Documentation/arch/arm64/silicon-errata.rst | 2 + Documentation/filesystems/netfs_library.rst | 26 ++ Documentation/netlink/genetlink-c.yaml | 14 +- Documentation/netlink/genetlink-legacy.yaml | 14 +- Documentation/netlink/genetlink.yaml | 14 +- Documentation/netlink/netlink-raw.yaml | 20 +- Documentation/networking/strparser.rst | 2 +- Makefile | 4 +- arch/arm64/Kconfig | 30 ++ arch/arm64/boot/dts/freescale/fsl-lx2160a.dtsi | 19 +- arch/arm64/include/asm/el2_setup.h | 5 +- arch/arm64/include/asm/kvm_host.h | 2 +- arch/arm64/include/asm/kvm_nested.h | 3 +- arch/arm64/kernel/Makefile | 3 + arch/arm64/kernel/cpu_errata.c | 24 +- arch/arm64/kernel/cpufeature.c | 2 +- arch/arm64/kernel/signal.c | 85 +++--- arch/arm64/kernel/topology.c | 11 +- arch/arm64/kernel/vdso/Makefile | 2 +- arch/arm64/kvm/arm.c | 10 +- arch/arm64/kvm/emulate-nested.c | 4 - arch/arm64/kvm/mmu.c | 46 +-- arch/arm64/kvm/nested.c | 95 +++--- arch/arm64/kvm/vgic/vgic-its.c | 22 +- arch/arm64/tools/cpucaps | 2 +- arch/loongarch/vdso/Makefile | 1 + arch/powerpc/kernel/vdso/Makefile | 1 + arch/powerpc/perf/imc-pmu.c | 23 +- arch/riscv/include/asm/scs.h | 17 +- arch/riscv/kernel/entry.S | 2 +- arch/riscv/kvm/aia_imsic.c | 5 +- arch/riscv/mm/extable.c | 4 +- arch/s390/kernel/vdso64/Makefile | 1 + arch/x86/entry/vdso/Makefile | 1 + arch/x86/events/intel/bts.c | 2 +- arch/x86/events/intel/core.c | 2 +- arch/x86/events/intel/p4.c | 2 +- arch/x86/kvm/mmu/mmu.c | 6 + arch/x86/kvm/svm/svm.c | 12 +- arch/x86/kvm/vmx/nested.c | 6 + crypto/drbg.c | 11 +- drivers/android/binder.c | 3 +- drivers/block/virtio_blk.c | 1 + drivers/bluetooth/btintel.c | 29 +- drivers/bluetooth/btintel_pcie.c | 138 ++++++--- drivers/bluetooth/btintel_pcie.h | 2 + drivers/bluetooth/btusb.c | 2 + drivers/char/tpm/tpm2-cmd.c | 2 +- drivers/char/tpm/tpm2-sessions.c | 1 + drivers/edac/altera_edac.c | 4 +- drivers/edac/amd64_edac.c | 4 +- drivers/gpio/gpio-exar.c | 2 +- drivers/gpio/gpio-xilinx.c | 9 +- drivers/gpu/drm/amd/amdgpu/amdgpu_acp.c | 13 +- drivers/gpu/drm/amd/amdgpu/amdgpu_amdkfd.c | 8 +- drivers/gpu/drm/amd/amdgpu/amdgpu_debugfs.c | 77 +++-- drivers/gpu/drm/amd/amdgpu/amdgpu_discovery.c | 2 + drivers/gpu/drm/amd/amdgpu/amdgpu_gmc.c | 17 +- drivers/gpu/drm/amd/amdgpu/amdgpu_kms.c | 5 + drivers/gpu/drm/amd/amdgpu/gfx_v6_0.c | 9 + drivers/gpu/drm/amd/amdgpu/vi.c | 21 ++ .../gpu/drm/amd/amdkfd/kfd_device_queue_manager.c | 32 ++- drivers/gpu/drm/amd/amdkfd/kfd_priv.h | 7 + drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm.c | 9 +- .../drm/amd/display/amdgpu_dm/amdgpu_dm_plane.c | 20 +- drivers/gpu/drm/amd/display/dc/dc.h | 1 + .../gpu/drm/amd/display/dc/dce60/dce60_resource.c | 1 - .../dc/link/protocols/link_edp_panel_control.c | 4 +- .../amd/display/dc/resource/dce80/dce80_resource.c | 1 + drivers/gpu/drm/amd/pm/legacy-dpm/si_dpm.c | 39 +-- .../gpu/drm/amd/pm/powerplay/hwmgr/ppatomctrl.c | 10 +- .../gpu/drm/amd/pm/powerplay/hwmgr/ppatomfwctrl.c | 11 +- drivers/gpu/drm/aspeed/aspeed_gfx_drv.c | 5 +- drivers/gpu/drm/display/drm_dp_helper.c | 4 +- drivers/gpu/drm/drm_fb_helper.c | 6 +- drivers/gpu/drm/gud/gud_pipe.c | 1 + drivers/gpu/drm/i915/gem/i915_gem_execbuffer.c | 2 +- drivers/gpu/drm/i915/gt/intel_rps.c | 3 +- drivers/gpu/drm/imagination/pvr_mmu.c | 25 +- drivers/gpu/drm/imagination/pvr_vm.c | 8 +- drivers/gpu/drm/mediatek/mtk_drm_drv.c | 17 +- drivers/gpu/drm/panthor/panthor_sched.c | 3 + drivers/gpu/drm/radeon/radeon_bios.c | 6 +- drivers/gpu/drm/vc4/vc4_bo.c | 29 +- drivers/gpu/drm/vc4/vc4_crtc.c | 4 +- drivers/gpu/drm/vc4/vc4_drv.c | 8 +- drivers/gpu/drm/vc4/vc4_drv.h | 2 +- drivers/gpu/drm/vc4/vc4_gem.c | 32 ++- drivers/gpu/drm/vc4/vc4_irq.c | 16 +- drivers/gpu/drm/vc4/vc4_kms.c | 2 +- drivers/gpu/drm/vc4/vc4_perfmon.c | 20 +- drivers/gpu/drm/vc4/vc4_render_cl.c | 2 +- drivers/gpu/drm/vc4/vc4_v3d.c | 60 ++-- drivers/gpu/drm/vc4/vc4_validate.c | 10 +- drivers/gpu/drm/vc4/vc4_validate_shaders.c | 2 +- drivers/hid/bpf/hid_bpf_dispatch.c | 2 +- drivers/hid/hid-multitouch.c | 2 +- drivers/i2c/busses/i2c-at91-master.c | 8 +- drivers/i2c/busses/i2c-xiic.c | 98 ++++--- drivers/iio/accel/kionix-kx022a.c | 77 ++--- drivers/iio/accel/kxcjk-1013.c | 2 +- drivers/iio/accel/sca3000.c | 2 +- drivers/iio/adc/ad_sigma_delta.c | 27 +- drivers/iio/adc/aspeed_adc.c | 13 +- drivers/iio/adc/axp288_adc.c | 8 + drivers/iio/adc/max1363.c | 8 + drivers/iio/adc/pac1934.c | 4 + drivers/iio/adc/stm32-adc.c | 47 +-- drivers/iio/adc/sun4i-gpadc-iio.c | 10 +- drivers/iio/adc/xilinx-xadc-core.c | 9 +- drivers/iio/buffer/industrialio-buffer-dmaengine.c | 16 +- drivers/iio/cdc/ad7150.c | 8 +- drivers/iio/frequency/admv1013.c | 9 +- drivers/iio/gyro/adis16136.c | 2 +- drivers/iio/health/max30102.c | 12 +- drivers/iio/imu/adis16400.c | 2 +- drivers/iio/imu/adis16480.c | 4 +- drivers/iio/industrialio-buffer.c | 7 +- drivers/iio/industrialio-trigger.c | 2 + drivers/iio/light/gp2ap020a00f.c | 2 + drivers/iio/light/rohm-bu27034.c | 133 ++++----- drivers/iio/pressure/bmp280-core.c | 2 +- drivers/iio/proximity/aw96103.c | 30 +- drivers/iio/proximity/isl29501.c | 2 +- drivers/iio/proximity/pulsedlight-lidar-lite-v2.c | 4 +- drivers/iio/proximity/sx9324.c | 2 +- drivers/iio/proximity/vcnl3020.c | 24 +- drivers/input/joystick/xpad.c | 3 + drivers/input/keyboard/atkbd.c | 8 + drivers/input/misc/ati_remote2.c | 12 +- drivers/input/mouse/synaptics.c | 7 +- drivers/input/serio/i8042-acpipnpio.h | 9 + drivers/input/touchscreen/s6sy761.c | 14 +- drivers/md/dm-crypt.c | 7 +- drivers/md/dm-ioctl.c | 14 +- drivers/md/dm-snap.c | 14 + drivers/memstick/core/memstick.c | 8 +- drivers/memstick/host/rtsx_usb_ms.c | 31 +- drivers/mmc/host/cavium-octeon.c | 5 +- drivers/mmc/host/cavium-thunderx.c | 5 +- drivers/mmc/host/mtk-sd.c | 1 + drivers/mmc/host/sdhci-sprd.c | 4 + drivers/mtd/devices/block2mtd.c | 2 +- drivers/mtd/mtdcore.c | 2 +- drivers/mtd/nand/raw/cadence-nand-controller.c | 6 +- drivers/mtd/nand/raw/vf610_nfc.c | 85 +++++- drivers/mtd/nand/spi/core.c | 37 ++- drivers/net/amt.c | 48 +--- drivers/net/can/usb/f81604.c | 2 +- drivers/net/dsa/microchip/ksz_common.h | 2 +- drivers/net/ethernet/broadcom/bcmsysport.c | 8 +- drivers/net/ethernet/broadcom/bnxt/bnxt.c | 84 ++++-- drivers/net/ethernet/broadcom/genet/bcmgenet.c | 5 +- .../chelsio/inline_crypto/ch_ktls/chcr_ktls.c | 4 +- drivers/net/ethernet/ibm/ibmveth.c | 22 +- drivers/net/ethernet/intel/ice/ice_eswitch.c | 2 +- drivers/net/ethernet/marvell/mvneta.c | 2 +- drivers/net/ethernet/marvell/octeontx2/af/mcs.c | 4 +- drivers/net/ethernet/mediatek/mtk_eth_soc.c | 38 ++- drivers/net/ethernet/mellanox/mlx5/core/en/xdp.c | 3 + .../net/ethernet/mellanox/mlx5/core/en/xsk/rx.c | 2 + drivers/net/ethernet/mellanox/mlx5/core/en_rx.c | 13 +- .../net/ethernet/mellanox/mlx5/core/lag/debugfs.c | 13 +- drivers/net/ethernet/mellanox/mlx5/core/lag/lag.c | 191 +++++++------ drivers/net/ethernet/mellanox/mlx5/core/lag/lag.h | 14 +- drivers/net/ethernet/mellanox/mlx5/core/lag/mp.c | 24 +- .../net/ethernet/mellanox/mlx5/core/lag/mpesw.c | 10 +- .../net/ethernet/mellanox/mlx5/core/lag/port_sel.c | 16 +- drivers/net/ethernet/mellanox/mlxsw/spectrum.h | 2 + drivers/net/ethernet/mellanox/mlxsw/spectrum_acl.c | 10 +- .../net/ethernet/mellanox/mlxsw/spectrum_flower.c | 9 +- .../net/ethernet/microchip/sparx5/sparx5_main.c | 1 + .../net/ethernet/microchip/sparx5/sparx5_main.h | 1 + .../net/ethernet/microchip/sparx5/sparx5_netdev.c | 1 + .../ethernet/microchip/sparx5/sparx5_tc_matchall.c | 1 + drivers/net/ethernet/microchip/vcap/vcap_api.c | 2 +- drivers/net/ethernet/microsoft/mana/mana_en.c | 10 +- drivers/net/pfcp.c | 10 + drivers/net/phy/aquantia/aquantia_main.c | 5 +- drivers/net/team/team_mode_broadcast.c | 2 + drivers/net/usb/ax88179_178a.c | 6 +- drivers/net/usb/qmi_wwan.c | 1 + drivers/net/veth.c | 1 + drivers/net/wireguard/noise.c | 7 +- drivers/net/wireguard/queueing.h | 2 + drivers/net/wireless/ath/ath11k/mac.c | 1 + drivers/net/wireless/ath/ath12k/qmi.c | 9 +- drivers/net/wireless/ath/ath12k/qmi.h | 3 + drivers/net/wireless/ath/ath9k/hif_usb.c | 21 +- drivers/net/wireless/ath/ath9k/wmi.c | 16 +- drivers/net/wireless/ath/ath9k/wmi.h | 1 + .../wireless/broadcom/brcm80211/brcmfmac/core.c | 27 +- drivers/net/wireless/intel/iwlegacy/3945-mac.c | 1 + drivers/net/wireless/marvell/libertas/tx.c | 7 - drivers/net/wireless/mediatek/mt76/mt7915/init.c | 6 + drivers/net/wireless/mediatek/mt76/mt7925/mac.c | 3 +- drivers/net/wireless/mediatek/mt76/mt7925/main.c | 12 + .../net/wireless/mediatek/mt76/mt792x_acpi_sar.c | 134 ++++++--- .../net/wireless/mediatek/mt76/mt792x_acpi_sar.h | 2 + drivers/net/wireless/mediatek/mt76/mt7996/mcu.h | 3 + drivers/net/wireless/silabs/wfx/hif_tx.c | 4 +- drivers/net/wireless/st/cw1200/bh.c | 8 +- drivers/net/wireless/st/cw1200/txrx.c | 14 + drivers/net/wireless/ti/wlcore/main.c | 4 +- drivers/net/xen-netfront.c | 16 +- drivers/nvme/host/multipath.c | 10 +- drivers/nvme/host/pci.c | 2 + drivers/nvme/target/configfs.c | 9 +- drivers/nvme/target/core.c | 2 +- drivers/nvme/target/fabrics-cmd-auth.c | 2 +- drivers/of/irq.c | 2 + drivers/of/overlay.c | 17 +- drivers/pci/pci.c | 15 +- drivers/perf/arm_spe_pmu.c | 4 +- drivers/pmdomain/imx/imx8m-blk-ctrl.c | 15 + drivers/pmdomain/rockchip/pm-domains.c | 20 +- drivers/ptp/ptp_ocp.c | 2 +- drivers/regulator/ltc3676.c | 15 +- drivers/regulator/tps6594-regulator.c | 6 +- drivers/rtc/dev.c | 2 +- drivers/rtc/rtc-88pm80x.c | 2 +- drivers/rtc/rtc-88pm860x.c | 2 +- drivers/rtc/rtc-ab8500.c | 2 +- drivers/rtc/rtc-ac100.c | 39 +-- drivers/rtc/rtc-asm9260.c | 2 +- drivers/rtc/rtc-at91rm9200.c | 2 +- drivers/rtc/rtc-at91sam9.c | 2 +- drivers/rtc/rtc-brcmstb-waketimer.c | 2 +- drivers/rtc/rtc-cadence.c | 2 +- drivers/rtc/rtc-cmos.c | 2 +- drivers/rtc/rtc-cros-ec.c | 2 +- drivers/rtc/rtc-ds1685.c | 2 +- drivers/rtc/rtc-ftrtc010.c | 2 +- drivers/rtc/rtc-hid-sensor-time.c | 2 +- drivers/rtc/rtc-imxdi.c | 2 +- drivers/rtc/rtc-loongson.c | 2 +- drivers/rtc/rtc-lpc24xx.c | 2 +- drivers/rtc/rtc-max77686.c | 2 +- drivers/rtc/rtc-mc13xxx.c | 2 +- drivers/rtc/rtc-mpc5121.c | 2 +- drivers/rtc/rtc-mpfs.c | 8 +- drivers/rtc/rtc-mt7622.c | 2 +- drivers/rtc/rtc-mv.c | 2 +- drivers/rtc/rtc-mxc_v2.c | 2 +- drivers/rtc/rtc-omap.c | 2 +- drivers/rtc/rtc-palmas.c | 2 +- drivers/rtc/rtc-pcf50633.c | 2 +- drivers/rtc/rtc-pic32.c | 2 +- drivers/rtc/rtc-pm8xxx.c | 2 +- drivers/rtc/rtc-pxa.c | 2 +- drivers/rtc/rtc-rc5t583.c | 2 +- drivers/rtc/rtc-rtd119x.c | 2 +- drivers/rtc/rtc-rzn1.c | 2 +- drivers/rtc/rtc-s3c.c | 2 +- drivers/rtc/rtc-sa1100.c | 2 +- drivers/rtc/rtc-sh.c | 2 +- drivers/rtc/rtc-spear.c | 13 +- drivers/rtc/rtc-stm32.c | 2 +- drivers/rtc/rtc-stmp3xxx.c | 2 +- drivers/rtc/rtc-sunplus.c | 2 +- drivers/rtc/rtc-tegra.c | 2 +- drivers/rtc/rtc-tps6586x.c | 2 +- drivers/rtc/rtc-twl.c | 2 +- drivers/rtc/rtc-vt8500.c | 2 +- drivers/rtc/rtc-wm8350.c | 2 +- drivers/rtc/rtc-xgene.c | 2 +- drivers/rtc/rtc-zynqmp.c | 2 +- drivers/scsi/qedi/qedi_main.c | 3 +- drivers/staging/greybus/uart.c | 3 +- drivers/tee/optee/ffa_abi.c | 38 ++- drivers/tee/optee/optee_ffa.h | 29 +- drivers/tee/optee/optee_msg.h | 132 ++++++--- drivers/tee/optee/optee_private.h | 120 ++++---- drivers/tee/optee/optee_smc.h | 37 ++- drivers/tee/optee/smc_abi.c | 17 +- drivers/tee/tee_shm.c | 4 + drivers/thunderbolt/ctl.c | 63 ++-- drivers/thunderbolt/quirks.c | 3 + drivers/thunderbolt/xdomain.c | 4 + drivers/tty/amiserial.c | 9 +- drivers/tty/n_gsm.c | 47 +-- drivers/tty/serial/8250/8250_bcm7271.c | 2 +- drivers/tty/serial/kgdboc.c | 9 + drivers/tty/serial/ma35d1_serial.c | 6 +- drivers/tty/serial/max3100.c | 13 +- drivers/tty/serial/qcom_geni_serial.c | 5 +- drivers/tty/serial/sc16is7xx.c | 53 +++- drivers/tty/serial/serial-tegra.c | 18 +- drivers/tty/serial/serial_core.c | 4 +- drivers/tty/serial/vt8500_serial.c | 1 + drivers/tty/tty_io.c | 54 ++-- drivers/tty/tty_port.c | 205 ++++++------- drivers/tty/vcc.c | 5 +- drivers/tty/vt/vc_screen.c | 50 ++-- drivers/tty/vt/vt.c | 5 +- drivers/usb/cdns3/cdns3-gadget.c | 4 + drivers/usb/cdns3/cdns3-pci-wrap.c | 5 + drivers/usb/chipidea/ci_hdrc_tegra.c | 4 +- drivers/usb/class/cdc-acm.c | 41 +-- drivers/usb/class/cdc-acm.h | 1 - drivers/usb/core/hub.c | 7 +- drivers/usb/core/message.c | 8 +- drivers/usb/dwc2/hcd.c | 3 +- drivers/usb/dwc3/core.h | 19 ++ drivers/usb/dwc3/dwc3-am62.c | 1 + drivers/usb/dwc3/ep0.c | 9 + drivers/usb/dwc3/gadget.c | 108 ++++++- drivers/usb/gadget/function/f_fs.c | 15 +- drivers/usb/gadget/function/f_midi2.c | 4 +- drivers/usb/gadget/function/f_uac1_legacy.c | 6 + drivers/usb/gadget/udc/aspeed-vhub/core.c | 4 + drivers/usb/gadget/udc/aspeed-vhub/dev.c | 2 +- drivers/usb/gadget/udc/aspeed-vhub/hub.c | 5 +- drivers/usb/gadget/udc/aspeed-vhub/vhub.h | 1 + drivers/usb/gadget/udc/dummy_hcd.c | 4 + drivers/usb/host/octeon-hcd.c | 2 +- drivers/usb/host/ohci-da8xx.c | 2 + drivers/usb/host/ohci-s3c2410.c | 1 + drivers/usb/host/ohci-spear.c | 4 +- drivers/usb/host/ohci-st.c | 1 + drivers/usb/serial/bus.c | 6 +- drivers/usb/serial/cp210x.c | 1 + drivers/usb/serial/generic.c | 10 +- drivers/usb/serial/option.c | 14 + drivers/usb/serial/quatech2.c | 19 +- drivers/usb/serial/ssu100.c | 18 +- drivers/usb/serial/usb-serial.c | 127 ++++++-- drivers/usb/serial/xr_serial.c | 10 +- drivers/usb/storage/sierra_ms.c | 7 + drivers/usb/typec/anx7411.c | 5 +- drivers/usb/typec/tcpm/tcpm.c | 2 +- drivers/usb/typec/tipd/core.c | 8 +- drivers/usb/typec/ucsi/displayport.c | 9 +- drivers/usb/typec/ucsi/ucsi.c | 17 +- drivers/usb/typec/ucsi/ucsi_acpi.c | 33 +++ drivers/usb/typec/ucsi/ucsi_glink.c | 15 +- drivers/virt/nitro_enclaves/ne_misc_dev.c | 1 + drivers/virt/vmgenid.c | 6 +- fs/attr.c | 12 +- fs/btrfs/scrub.c | 4 +- fs/btrfs/xattr.c | 15 +- fs/dcache.c | 4 +- fs/ext4/inode.c | 4 - fs/f2fs/f2fs.h | 2 +- fs/f2fs/file.c | 4 - fs/f2fs/gc.c | 36 ++- fs/f2fs/segment.c | 13 +- fs/fsopen.c | 3 + fs/inode.c | 23 +- fs/jfs/jfs_dtree.c | 18 +- fs/namei.c | 29 ++ fs/namespace.c | 87 ++++-- fs/netfs/buffered_write.c | 9 + fs/netfs/direct_write.c | 9 + fs/netfs/internal.h | 2 + fs/netfs/misc.c | 99 +++++++ fs/smb/client/cifsfs.c | 7 +- fs/smb/client/cifsglob.h | 10 +- fs/smb/client/cifssmb.c | 2 +- fs/smb/client/dir.c | 39 ++- fs/smb/client/file.c | 17 +- fs/smb/client/inode.c | 30 +- fs/smb/client/link.c | 15 +- fs/smb/client/smb1ops.c | 21 +- fs/smb/client/smb2file.c | 19 +- fs/smb/client/smb2misc.c | 9 +- fs/smb/client/smb2ops.c | 38 ++- fs/smb/client/smb2pdu.c | 38 +-- fs/smb/client/smb2proto.h | 2 +- fs/smb/client/trace.h | 16 +- fs/smb/client/transport.c | 69 +++-- fs/verity/Kconfig | 3 + fs/verity/open.c | 8 - fs/xfs/scrub/newbt.c | 8 +- fs/xfs/xfs_log_recover.c | 13 +- include/linux/console.h | 2 + include/linux/fsverity.h | 25 -- include/linux/lsm_hook_defs.h | 2 +- include/linux/memcontrol.h | 50 +++- include/linux/netfilter_netdev.h | 2 +- include/linux/netfs.h | 2 + include/linux/nvme.h | 4 +- include/linux/pagemap.h | 16 +- include/linux/perf_event.h | 17 +- include/linux/rtnetlink.h | 7 +- include/linux/sched/user.h | 3 +- include/linux/security.h | 5 +- include/linux/skbuff.h | 2 +- include/linux/soc/qcom/geni-se.h | 15 +- include/linux/tty.h | 1 + include/linux/tty_driver.h | 6 + include/linux/tty_port.h | 30 +- include/linux/usb/serial.h | 1 + include/net/amt.h | 4 - include/net/bluetooth/hci_core.h | 5 +- include/net/ip.h | 7 + include/net/mac80211.h | 4 + include/net/netfilter/nf_conntrack.h | 18 +- include/net/netfilter/nf_flow_table.h | 2 +- include/net/proto_memory.h | 2 +- include/net/sch_generic.h | 9 + include/net/sock.h | 22 ++ include/net/strparser.h | 10 +- include/net/tcp.h | 2 +- include/net/xdp.h | 34 ++- include/net/xdp_sock_drv.h | 11 +- include/net/xsk_buff_pool.h | 2 +- include/sound/core.h | 9 + include/sound/sof/ipc4/header.h | 2 + include/uapi/linux/random.h | 2 +- init/Kconfig | 5 + io_uring/io_uring.c | 7 +- io_uring/waitid.c | 19 +- kernel/audit_tree.c | 36 ++- kernel/cgroup/cpuset.c | 134 +++++---- kernel/dma/swiotlb.c | 6 +- kernel/events/core.c | 318 +++++++++------------ kernel/events/ring_buffer.c | 7 +- kernel/kprobes.c | 8 +- kernel/trace/trace_event_perf.c | 4 +- kernel/workqueue.c | 2 +- mm/damon/core.c | 48 ++-- mm/memcontrol.c | 27 +- mm/secretmem.c | 117 +++++++- mm/shmem.c | 70 ++--- mm/vmpressure.c | 2 +- net/bluetooth/hci_conn.c | 18 +- net/bluetooth/hci_core.c | 55 +++- net/bluetooth/hci_debugfs.c | 2 +- net/bluetooth/hci_event.c | 7 + net/bluetooth/hci_sock.c | 2 + net/bluetooth/hci_sync.c | 19 +- net/bluetooth/iso.c | 153 +++++++--- net/bluetooth/mgmt.c | 2 +- net/bluetooth/rfcomm/sock.c | 5 +- net/bluetooth/rfcomm/tty.c | 9 +- net/bluetooth/smp.c | 2 + net/bridge/br_multicast.c | 23 +- net/bridge/netfilter/nf_conntrack_bridge.c | 10 +- net/core/dev.c | 137 +++++---- net/core/flow_dissector.c | 11 +- net/core/neighbour.c | 12 +- net/core/netdev-genl-gen.c | 4 +- net/core/skbuff.c | 14 +- net/core/sock.c | 15 +- net/devlink/core.c | 10 +- net/ipv4/af_inet.c | 2 +- net/ipv4/cipso_ipv4.c | 8 + net/ipv4/fib_semantics.c | 3 + net/ipv4/fib_trie.c | 2 - net/ipv4/inet_connection_sock.c | 2 +- net/ipv4/ip_output.c | 10 +- net/ipv4/route.c | 5 + net/ipv4/tcp.c | 2 + net/ipv4/tcp_input.c | 6 + net/ipv4/tcp_ipv4.c | 2 +- net/ipv4/tcp_output.c | 2 +- net/ipv6/addrconf.c | 2 +- net/ipv6/ip6_output.c | 29 +- net/ipv6/route.c | 2 - net/ipv6/seg6_iptunnel.c | 2 +- net/mac80211/agg-rx.c | 2 +- net/mac80211/chan.c | 45 ++- net/mac80211/fils_aead.c | 8 + net/mac80211/ieee80211_i.h | 2 +- net/mac80211/mesh_pathtbl.c | 30 +- net/mac80211/mlme.c | 4 +- net/mac80211/rc80211_minstrel_ht.c | 30 +- net/mac80211/spectmgmt.c | 4 +- net/mac80211/sta_info.c | 6 +- net/mac80211/tx.c | 128 +++++++-- net/mctp/device.c | 6 +- net/mptcp/protocol.c | 10 +- net/mptcp/subflow.c | 11 +- net/netfilter/ipset/ip_set_bitmap_gen.h | 2 +- net/netfilter/ipvs/ip_vs_conn.c | 3 + net/netfilter/ipvs/ip_vs_lblc.c | 4 + net/netfilter/ipvs/ip_vs_lblcr.c | 3 + net/netfilter/ipvs/ip_vs_sync.c | 33 ++- net/netfilter/nf_conntrack_amanda.c | 2 +- net/netfilter/nf_conntrack_broadcast.c | 2 +- net/netfilter/nf_conntrack_core.c | 13 +- net/netfilter/nf_conntrack_h323_main.c | 4 +- net/netfilter/nf_conntrack_sip.c | 4 +- net/netfilter/nf_flow_table_core.c | 123 +++++++- net/netfilter/nf_flow_table_offload.c | 14 +- net/netfilter/nf_nat_bpf.c | 3 + net/netfilter/nf_nat_core.c | 5 +- net/netfilter/nfnetlink_queue.c | 7 + net/netfilter/nft_ct.c | 2 +- net/netfilter/nft_flow_offload.c | 7 +- net/netfilter/xt_CHECKSUM.c | 6 +- net/openvswitch/actions.c | 7 +- net/openvswitch/datapath.c | 8 + net/packet/af_packet.c | 31 +- net/rds/tcp.c | 9 +- net/sched/act_ct.c | 2 +- net/sched/act_skbedit.c | 5 +- net/sched/cls_api.c | 15 +- net/sched/cls_route.c | 6 + net/sched/em_text.c | 3 + net/sched/sch_codel.c | 2 +- net/sched/sch_fq_codel.c | 4 +- net/sctp/socket.c | 8 +- net/smc/af_smc.c | 7 +- net/strparser/strparser.c | 6 +- net/sunrpc/xprtrdma/svc_rdma_transport.c | 8 +- net/tipc/crypto.c | 20 +- net/tipc/node.c | 10 +- net/tipc/topsrv.c | 80 +++++- net/vmw_vsock/af_vsock.c | 2 + net/vmw_vsock/virtio_transport_common.c | 4 +- net/wireless/scan.c | 22 +- net/xfrm/xfrm_output.c | 16 +- security/keys/key.c | 6 +- security/keys/persistent.c | 55 ++-- security/security.c | 5 +- security/selinux/avc.c | 5 +- security/selinux/hooks.c | 11 +- sound/core/seq/seq_compat.c | 4 +- sound/pci/hda/hda_tegra.c | 3 +- sound/pci/ice1712/ice1712.c | 2 +- sound/soc/amd/yc/acp6x-mach.c | 7 + sound/soc/codecs/adau1372.c | 18 +- sound/soc/codecs/max98363.c | 2 +- sound/soc/codecs/rt1017-sdca-sdw.c | 27 +- sound/soc/codecs/rt274.c | 4 +- sound/soc/codecs/rt286.c | 2 +- sound/soc/codecs/wm8903.c | 2 +- sound/soc/qcom/lpass-cpu.c | 4 +- sound/soc/samsung/i2s.c | 8 + sound/soc/sdw_utils/soc_sdw_utils.c | 20 +- sound/soc/sof/intel/hda-loader.c | 7 +- sound/soc/sof/ipc4-loader.c | 6 + sound/soc/sof/ipc4-priv.h | 3 + sound/soc/sof/ipc4.c | 14 +- sound/soc/tegra/tegra186_asrc.c | 2 +- sound/usb/caiaq/device.c | 3 + sound/usb/line6/playback.c | 7 + sound/usb/misc/ua101.c | 9 + sound/usb/quirks.c | 4 +- tools/net/ynl/ynl-gen-c.py | 70 ++++- tools/testing/selftests/mm/hugepage-mremap.c | 5 + tools/testing/selftests/mm/memfd_secret.c | 30 +- 544 files changed, 5630 insertions(+), 2793 deletions(-)

3 weeks, 1 day

2026

2025

2024

2023

2022

2021

2020

2019

2018

2017

Lkft-triage October 2026