Lkft-triage

lkft-triage@lists.linaro.org

43 participants
34118 discussions

by Greg Kroah-Hartman

This is the start of the stable review cycle for the 7.0.11 release. There are 461 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know. Responses should be made by Sat, 30 May 2026 19:45:49 +0000. Anything received after that time might be too late. The whole patch series can be found in one patch at: https://www.kernel.org/pub/linux/kernel/v7.x/stable-review/patch-7.0.11-rc1… or in the git tree and branch at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-7.0.y and the diffstat can be found below. thanks, greg k-h ------------- Pseudo-Shortlog of commits: Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> Linux 7.0.11-rc1 Armin Wolf <W_Armin(a)gmx.de> platform/x86: uniwill-laptop: Do not enable the charging limit even when forced Werner Sembach <wse(a)tuxedocomputers.com> Documentation: laptops: Update documentation for uniwill laptops Damien Le Moal <dlemoal(a)kernel.org> block: avoid use-after-free in disk_free_zone_resources() Tiezhu Yang <yangtiezhu(a)loongson.cn> LoongArch: kprobes: Fix handling of fatal unrecoverable recursions Junyi Liu <moss80199(a)gmail.com> ksmbd: fix durable reconnect error path file lifetime Keith Busch <kbusch(a)kernel.org> blk-mq: pop cached request if it is usable Alexander A. Klimov <grandmaster(a)al2klimov.de> io_uring/nop: pass all errors to userspace Wei Fang <wei.fang(a)nxp.com> net: enetc: fix missing error code when pf->vf_state allocation fails Sabrina Dubroca <sd(a)queasysnail.net> net: gro: don't merge zcopy skbs Nikhil P. Rao <nikhil.rao(a)amd.com> pds_core: ensure null-termination for firmware version strings Lorenzo Bianconi <lorenzo(a)kernel.org> net: airoha: Disable GDM2 forwarding before configuring GDM2 loopback Weiming Shi <bestswngs(a)gmail.com> tap: fix stack info leak in tap_ioctl() SIOCGIFHWADDR Aditya Garg <gargaditya(a)linux.microsoft.com> net: mana: validate rx_req_idx to prevent out-of-bounds array access Ratheesh Kannoth <rkannoth(a)marvell.com> octeontx2-af: npc: Fix allmulticast skip logic for LBK and SDP VFs Keith Busch <kbusch(a)kernel.org> nvme-pci: fix dma mapping leak on data setup error Keith Busch <kbusch(a)kernel.org> nvme-pci: fix dma_vecs leak on p2p memory Nimrod Oren <noren(a)nvidia.com> selftests: net: Fix checksums in xdp_native Richard Fitzgerald <rf(a)opensource.cirrus.com> ASoC: cs-amp-lib: Fix missing dput() after debugfs_lookup() Richard Fitzgerald <rf(a)opensource.cirrus.com> ASoC: cs-amp-lib: Fix wrong sizeof() in _cs_amp_set_efi_calibration_data() Shuicheng Lin <shuicheng.lin(a)intel.com> drm/xe/oa: Fix exec_queue leak on width check in stream open Richard Fitzgerald <rf(a)opensource.cirrus.com> ASoC: cs35l56: Fix flushing of IRQ work in cs35l56_sdw_remove() Bartosz Golaszewski <bartosz.golaszewski(a)oss.qualcomm.com> gpio: aggregator: lock device when calling device_is_bound() Bartosz Golaszewski <bartosz.golaszewski(a)oss.qualcomm.com> gpio: aggregator: remove the software node when deactivating the aggregator Bartosz Golaszewski <bartosz.golaszewski(a)oss.qualcomm.com> gpio: aggregator: stop using dev-sync-probe Bartosz Golaszewski <bartosz.golaszewski(a)oss.qualcomm.com> gpio: aggregator: fix a potential use-after-free Bartosz Golaszewski <bartosz.golaszewski(a)oss.qualcomm.com> gpio: cdev: check if uAPI v2 config attributes are correctly zeroed Zhi Li <lizhi2(a)eswincomputing.com> net: stmmac: eswin: validate RGMII delay values Zhi Li <lizhi2(a)eswincomputing.com> net: stmmac: eswin: correct RGMII delay granularity to 20 ps Zhi Li <lizhi2(a)eswincomputing.com> net: stmmac: eswin: clear TXD and RXD delay registers during initialization Zhi Li <lizhi2(a)eswincomputing.com> net: stmmac: eswin: fix HSP CSR init ordering after clock enable Eric Dumazet <edumazet(a)google.com> tcp: fix stale per-CPU tcp_tw_isn leak enabling ISN prediction Xingwang Xiang <v3rdant.xiang(a)gmail.com> bpf, skmsg: fix verdict sk_data_ready racing with ktls rx Rosen Penev <rosenp(a)gmail.com> net: ag71xx: check error for platform_get_irq David Howells <dhowells(a)redhat.com> rxrpc: Fix DATA decrypt vs splice() by copying data to buffer in recvmsg David Howells <dhowells(a)redhat.com> crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks Jakub Kicinski <kuba(a)kernel.org> net: shaper: rework the VALID marking (again) Jakub Kicinski <kuba(a)kernel.org> net: shaper: annotate the data races Prathamesh Deshpande <prathameshdeshpande7(a)gmail.com> net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA Gal Pressman <gal(a)nvidia.com> udp: Fix UDP length on last GSO_PARTIAL segment Alice Mikityanska <alice(a)isovalent.com> udp: gso: Fix handling checksum in __udp_gso_segment Jiajia Liu <liujiajia(a)kylinos.cn> Bluetooth: btmtk: fix urb->setup_packet leak in error paths Kiran K <kiran.k(a)intel.com> Bluetooth: btintel_pcie: Fix incorrect MAC access programming Luiz Augusto von Dentz <luiz.von.dentz(a)intel.com> Bluetooth: hci_sync: Fix not setting mask for HCI_EVT_LE_ALL_REMOTE_FEATURES_COMPLETE David Carlier <devnexen(a)gmail.com> tracing: Avoid NULL return from hist_field_name() on truncation Cunlong Li <shenxiaogll(a)gmail.com> cgroup: rstat: relax NMI guard after switch to try_cmpxchg Zhang Cen <rollkingzzc(a)gmail.com> ALSA: seq: Serialize UMP output teardown with event_input Shitalkumar Gandhi <shital.gandhi45(a)gmail.com> wifi: wilc1000: fix dma_buffer leak on bus acquire failure Johannes Berg <johannes.berg(a)intel.com> wifi: mac80211: fix multi-link element inheritance Johannes Berg <johannes.berg(a)intel.com> wifi: mac80211: fix MLE defragmentation Alexandru Hossu <hossu.alexandru(a)gmail.com> wifi: mac80211: bounds-check link_id in ieee80211_ml_epcs Jia Zhu <zhujia.zj(a)bytedance.com> erofs: fix metabuf leak in inode xattr initialization Utkal Singh <singhutkal015(a)gmail.com> erofs: harden h_shared_count in erofs_init_inode_xattrs() Gao Xiang <xiang(a)kernel.org> erofs: fix managed cache race for unaligned extents Nikhil P. Rao <nikhil.rao(a)amd.com> pds_core: fix debugfs_lookup dentry leak and error handling Nikhil P. Rao <nikhil.rao(a)amd.com> pds_core: fix error handling in pdsc_devcmd_wait Christian Marangi <ansuelsmth(a)gmail.com> net: airoha: Fix NPU RX DMA descriptor bits Nicolai Buchwitz <nb(a)tipi-net.de> net: phy: honor eee_disabled_modes in phy_advertise_eee_all() Nicolai Buchwitz <nb(a)tipi-net.de> net: phy: honor eee_disabled_modes in phy_support_eee() Ido Schimmel <idosch(a)nvidia.com> bridge: mcast: Fix a possible use-after-free when removing a bridge port Guangshuo Li <lgs201920130244(a)gmail.com> RDMA/rtrs: Fix use-after-free in path file creation cleanup Shiraz Saleem <shirazsaleem(a)microsoft.com> RDMA/mana_ib: Report max_msg_sz in mana_ib_query_port Timur Kristóf <timur.kristof(a)gmail.com> drm/amdgpu/vce1: Fix VCE 1 firmware size and offsets Timur Kristóf <timur.kristof(a)gmail.com> drm/amdgpu/vce1: Check that the GPU address is < 128 MiB Timur Kristóf <timur.kristof(a)gmail.com> drm/amdgpu: Align amdgpu_gtt_mgr entries to TLB size on Tahiti (v2) Robertus Diawan Chris <robertusdchris(a)gmail.com> ASoC: soc-utils: Add missing va_end in snd_soc_ret() Ahmed Yaseen <yaseen(a)ghoul.dev> platform/x86: asus-armoury: fix mini-LED mode get/set on MODE2 devices Armin Wolf <W_Armin(a)gmx.de> platform/x86: uniwill-laptop: Fix behavior of "force" module param Armin Wolf <W_Armin(a)gmx.de> platform/x86: uniwill-laptop: Accept charging threshold of 0 Armin Wolf <W_Armin(a)gmx.de> platform/x86: uniwill-laptop: Properly initialize charging threshold Rafael J. Wysocki <rafael.j.wysocki(a)intel.com> platform/x86: intel-vbtn: Check ACPI_HANDLE() against NULL Rafael J. Wysocki <rafael.j.wysocki(a)intel.com> platform/x86: intel_sar: Check ACPI_HANDLE() against NULL Rafael J. Wysocki <rafael.j.wysocki(a)intel.com> platform/x86: intel-hid: Check ACPI_HANDLE() against NULL Rafael J. Wysocki <rafael.j.wysocki(a)intel.com> platform/x86: hp_accel: Check ACPI_COMPANION() against NULL Rafael J. Wysocki <rafael.j.wysocki(a)intel.com> platform/x86: adv_swbutton: Check ACPI_HANDLE() against NULL Oliver White <oliverjwhite07(a)gmail.com> platform/surface: aggregator_registry: omit battery & AC nodes on Surface Laptop 7 Erni Sri Satya Vennela <ernis(a)linux.microsoft.com> net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer Daniel Golle <daniel(a)makrotopia.org> net: dsa: mt7530: preserve VLAN tags on trapped link-local frames Daniel Golle <daniel(a)makrotopia.org> net: dsa: mt7530: fix FDB entries not aging out with short timeout Viktor Jägersküpper <viktor_jaegerskuepper(a)freenet.de> kbuild: pacman-pkg: make "rc" releases adhere to pacman versioning scheme Xiangxu Yin <xiangxu.yin(a)oss.qualcomm.com> phy: qcom: qmp-usbc: Fix out-of-bounds array access in dp swing config Ankit Nautiyal <ankit.k.nautiyal(a)intel.com> drm/i915/dp: Fix readback for target_rr in Adaptive Sync SDP Kohei Enju <kohei(a)enjuk.jp> igc: set tx buffer type for SMD frames Grzegorz Nitka <grzegorz.nitka(a)intel.com> ice: ptp: use primary NAC semaphore on E825 Grzegorz Nitka <grzegorz.nitka(a)intel.com> ice: ptp: serialize E825 PHY timer start with PTP lock David Howells <dhowells(a)redhat.com> cifs: Fix undefined variables Dragos Tatulea <dtatulea(a)nvidia.com> net/mlx5e: xsk: Fix unlocked writing to ICOSQ Qing Ming <a0yami(a)mailbox.org> cgroup/rstat: validate cpu before css_rstat_cpu() access Paul E. McKenney <paulmck(a)kernel.org> srcu: Don't queue workqueue handlers to never-online CPUs Michael Bommarito <michael.bommarito(a)gmail.com> io_uring: propagate array_index_nospec opcode into req->opcode Louis-Alexis Eyraud <louisalexis.eyraud(a)collabora.com> drm/mediatek: mtk_hdmi_ddc: Fix non-static global variable Louis-Alexis Eyraud <louisalexis.eyraud(a)collabora.com> drm/mediatek: mtk_cec: Fix non-static global variable Louis-Alexis Eyraud <louisalexis.eyraud(a)collabora.com> drm/mediatek: mtk_hdmi_v2: Fix non-static global variable Louis-Alexis Eyraud <louisalexis.eyraud(a)collabora.com> drm/mediatek: mtk_hdmi_ddc_v2: Fix non-static global variable Baochen Qiang <baochen.qiang(a)oss.qualcomm.com> wifi: ath12k: fix EHT TX MCS limitation due to wrong 20 MHz-only parsing Matthew Leach <matthew.leach(a)collabora.com> wifi: ath11k: fix peer resolution on rx path when peer_id=0 Gustavo Sousa <gustavo.sousa(a)intel.com> drm/xe: Define and use MCR version of COMMON_SLICE_CHICKEN4 Matt Roper <matthew.d.roper(a)intel.com> drm/xe/tuning: Apply windower hardware filtering setting on Xe3 and Xe3p Gustavo Sousa <gustavo.sousa(a)intel.com> drm/xe: Define and use MCR version of COMMON_SLICE_CHICKEN1 Matt Roper <matthew.d.roper(a)intel.com> drm/xe: Consolidate workaround entries for Wa_18033852989 Matt Roper <matthew.d.roper(a)intel.com> drm/xe: Consolidate workaround entries for Wa_14019988906 Mohanram Meenakshisundaram <mohanram.meenakshisundaram(a)intel.com> drm/xe/pf: Fix CFI failure in debugfs access Michal Wajdeczko <michal.wajdeczko(a)intel.com> drm/xe/vf: Fix signature of print functions Shuicheng Lin <shuicheng.lin(a)intel.com> drm/xe/gsc: Fix double-free of managed BO in error path Boris Brezillon <boris.brezillon(a)collabora.com> drm/gem: Make the GEM LRU lock part of drm_device Jianpeng Chang <jianpeng.chang.cn(a)windriver.com> dma-mapping: move dma_map_resource() sanity check into debug code Miri Korenblit <miriam.rachel.korenblit(a)intel.com> wifi: iwlwifi: mld: don't dereference a pointer before NULL checking it Cole Leavitt <cole(a)unwrap.rs> wifi: iwlwifi: mld: fix TSO segmentation explosion when AMSDU is disabled Guenter Roeck <linux(a)roeck-us.net> hwmon: (lm90) Add lock protection to lm90_alert Guenter Roeck <linux(a)roeck-us.net> hwmon: (lm90) Stop work before releasing hwmon device Dmitry Baryshkov <dmitry.baryshkov(a)oss.qualcomm.com> drm/msm/snapshot: fix dumping of the unaligned regions Eric Naim <dnaim(a)cachyos.org> ALSA: hda/realtek: Use ALC287_FIXUP_TXNW2781_I2C for ASUS Strix Gxx5 Florian Westphal <fw(a)strlen.de> netfilter: nft_inner: release local_lock before re-enabling softirqs Felix Gu <ustc.gu(a)gmail.com> spi: mtk-snfi: Fix resource leak in mtk_snand_read_page_cache() Cássio Gabriel <cassiogabrielcontato(a)gmail.com> ASoC: amd: acp-sdw-legacy: check CPU DAI name before logging Boris Burkov <boris(a)bur.io> btrfs: fix squota accounting during enable generation Boris Burkov <boris(a)bur.io> btrfs: check for subvolume before deleting squota qgroup Stefano Garzarella <sgarzare(a)redhat.com> vsock/virtio: fix zerocopy completion for multi-skb sends Jens Axboe <axboe(a)kernel.dk> io_uring/net: punt IORING_OP_BIND async if it needs file create Hongling Zeng <zenghongling(a)kylinos.cn> cachefiles: Fix error return when vfs_mkdir() fails Matt DeVillier <matt.devillier(a)gmail.com> ALSA: hda/ca0132: Disable auto-detect on manual output select Robertus Diawan Chris <robertusdchris(a)gmail.com> ALSA: scarlett2: Add missing error check when initialise Autogain Status Jason Gunthorpe <jgg(a)ziepe.ca> iommupt: Fix the end_index calculation in __map_range_leaf() Jason Gunthorpe <jgg(a)ziepe.ca> iommupt: Check for missing PAGE_SIZE in the pgsize_bitmap Jason Gunthorpe <jgg(a)ziepe.ca> iommu: Handle unmap error when iommu_debug is enabled Jason Gunthorpe <jgg(a)ziepe.ca> iommu: Fix up map/unmap debugging for iommupt domains Jason Gunthorpe <jgg(a)ziepe.ca> iommu: Fix loss of errno on map failure for classic ops Jason Gunthorpe <jgg(a)ziepe.ca> iommupt: Avoid rewalking during map Jason Gunthorpe <jgg(a)ziepe.ca> iommupt: Directly call iommupt's unmap_range() Alexander A. Klimov <grandmaster(a)al2klimov.de> ASoC: codecs: fs210x: fix possible buffer overflow Mike Christie <michael.christie(a)oracle.com> scsi: sd: Fix return code handling in sd_spinup_disk() Or Har-Toov <ohartoov(a)nvidia.com> net/mlx5: Skip disabled vports when setting max TX speed Jeroen Massar <jmassar(a)nvidia.com> net/mlx5: Do not restore destination-less TC rules Chuck Lever <chuck.lever(a)oracle.com> tls: Preserve sk_err across recvmsg() when data has been copied Ralf Lici <ralf(a)mandelbit.com> ovpn: disable BHs when updating device stats Matt Evans <mattev(a)meta.com> vfio/pci: Check BAR resources before exporting a DMABUF Juergen Gross <jgross(a)suse.com> x86/xen: Fix xen_e820_swap_entry_with_ram() Kees Cook <kees(a)kernel.org> gcc-plugins: Always define CONST_CAST_GIMPLE and CONST_CAST_TREE David Carlier <devnexen(a)gmail.com> phy: apple: atc: Fix typec switch/mux leak on unbind DaeMyung Kang <charsyam(a)gmail.com> cifs: client: stage smb3_reconfigure() updates and restore ctx on failure Antonio Quartulli <antonio(a)openvpn.net> ovpn: fix race between deleting interface and adding new peer David Carlier <devnexen(a)gmail.com> ovpn: respect peer refcount in CMD_NEW_PEER error path David Carlier <devnexen(a)gmail.com> ovpn: tcp - use cached peer pointer in ovpn_tcp_close() Sven Schuchmann <schuchmann(a)schleissheimer.de> net: phy: DP83TC811: add reading of abilities Jakub Kicinski <kuba(a)kernel.org> net: tls: prevent chain-after-chain in plain text SG Jakub Kicinski <kuba(a)kernel.org> net: tls: fix off-by-one in sg_chain entry count for wrapped sk_msg ring Xiang Mei <xmei5(a)asu.edu> net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot Sayali Patil <sayalip(a)linux.ibm.com> powerpc/time: Remove redundant preempt_disable|enable() calls from arch_irq_work_raise() Randy Dunlap <rdunlap(a)infradead.org> riscv: Docs: fix unmatched quote warning Cássio Gabriel <cassiogabrielcontato(a)gmail.com> ASoC: sdw_utils: Check speaker component string allocation Maciej Strozek <mstrozek(a)opensource.cirrus.com> ASoC: sdw_utils: cs42l43: allow spk component names to be combined Maciej Strozek <mstrozek(a)opensource.cirrus.com> ASoC: intel: sof_sdw: Prepare for configuration without a jack Chen Ni <nichen(a)iscas.ac.cn> drm/msm/a6xx: Check kzalloc return in a8xx_hfi_send_perf_table Mikko Perttunen <mperttunen(a)nvidia.com> drm/msm: Fix iommu_map_sgtable() return value check and avoid WARN Rob Clark <robin.clark(a)oss.qualcomm.com> drm/msm/a6xx: Restore sysprof_active Dmitry Baryshkov <dmitry.baryshkov(a)oss.qualcomm.com> drm/msm/adreno: fix userspace-triggered crash on a2xx-a4xx Felix Gu <ustc.gu(a)gmail.com> drm/msm/adreno: Fix a reference leak in a6xx_gpu_init() Akhil P Oommen <akhilpo(a)oss.qualcomm.com> drm/msm/a6xx: Add soft fuse detection support Alexander Koskovich <akoskovich(a)pm.me> drm/msm: Fix GMEM_BASE for A650 Ricardo Neri <ricardo.neri-calderon(a)linux.intel.com> Documentation: intel_pstate: Fix description of asymmetric packing with SMT Borislav Petkov (AMD) <bp(a)alien8.de> x86/mce: Restore MCA polling interval halving Ming Lei <tom.leiming(a)gmail.com> selftests: ublk: cap nthreads to kernel's actual nr_hw_queues Damien Le Moal <dlemoal(a)kernel.org> block: fix handling of dead zone write plugs Damien Le Moal <dlemoal(a)kernel.org> block: allow submitting all zone writes from a single context Damien Le Moal <dlemoal(a)kernel.org> block: rename struct gendisk zone_wplugs_lock field Dmitry Baryshkov <dmitry.baryshkov(a)oss.qualcomm.com> drm/msm/dpu: don't mix devm and drmm functions Dmitry Baryshkov <dmitry.baryshkov(a)oss.qualcomm.com> drm/msm/dsi: don't dump registers past the mapped region Mahadevan P <mahadevan.p(a)oss.qualcomm.com> drm/msm/dpu: Fix Kaanapali CWB register configuration Neil Armstrong <neil.armstrong(a)linaro.org> drm/msm/dpu: fix UV scanlines calculation for YUV UBWC formats Chenguang Zhao <zhaochenguang(a)kylinos.cn> ethtool: fix ethnl_bitmap32_not_zero() bit interval semantics Xiang Mei <xmei5(a)asu.edu> net/smc: avoid NULL deref of conn->lnk in smc_msg_event tracepoint Zack McKevitt <zachary.mckevitt(a)oss.qualcomm.com> accel/qaic: Add overflow check to remap_pfn_range during mmap Sungwoo Kim <iam(a)sung-woo.kim> block: bio-integrity: Fix null-ptr-deref in bio_integrity_map_user() Lukas Bulwahn <lukas.bulwahn(a)redhat.com> HID: quirks: really enable the intended work around for appledisplay Casey Chen <cachen(a)purestorage.com> block: recompute nr_integrity_segments in blk_insert_cloned_request David Carlier <devnexen(a)gmail.com> block: don't overwrite bip_vcnt in bio_integrity_copy_user() Jakub Kicinski <kuba(a)kernel.org> net: shaper: reject QUEUE scope handle with missing id Jakub Kicinski <kuba(a)kernel.org> net: shaper: enforce singleton NETDEV scope with id 0 Jakub Kicinski <kuba(a)kernel.org> net: shaper: reject handle IDs exceeding internal bit-width Jakub Kicinski <kuba(a)kernel.org> net: shaper: fix undersized reply skb allocation in GROUP command Jakub Kicinski <kuba(a)kernel.org> net: shaper: set ret to -ENOMEM when genlmsg_new() fails in group_doit Jakub Kicinski <kuba(a)kernel.org> net: shaper: reject duplicate leaves in GROUP request Jakub Kicinski <kuba(a)kernel.org> net: shaper: fix trivial ordering issue in net_shaper_commit() Jakub Kicinski <kuba(a)kernel.org> net: shaper: flip the polarity of the valid flag Kang Yang <kang.yang(a)oss.qualcomm.com> wifi: ath10k: skip WMI and beacon transmission when device is wedged Nicolas Escande <nico.escande(a)gmail.com> wifi: ath11k: fix error path leak in ath11k_tm_cmd_wmi_ftm() Nicolas Escande <nico.escande(a)gmail.com> wifi: ath11k: fix error path leaks in some WMI WOW calls Ethan Nelson-Moore <enelsonmoore(a)gmail.com> net: ethernet: cs89x0: remove stale CONFIG_MACH_MX31ADS reference Linus Walleij <linusw(a)kernel.org> net: ethernet: cortina: Carry over frag counter Andreas Haarmann-Thiemann <eitschman(a)nebelreich.de> net: ethernet: cortina: Drop half-assembled SKB Linus Walleij <linusw(a)kernel.org> net: ethernet: cortina: Make RX SKB per-port David Howells <dhowells(a)redhat.com> afs: Fix the locking used by afs_get_link() David Howells <dhowells(a)redhat.com> netfs, afs: Fix write skipping in dir/link writepages David Howells <dhowells(a)redhat.com> netfs: Fix netfs_read_folio() to wait on writeback David Howells <dhowells(a)redhat.com> netfs: Fix folio->private handling in netfs_perform_write() David Howells <dhowells(a)redhat.com> netfs: Fix partial invalidation of streaming-write folio David Howells <dhowells(a)redhat.com> netfs: Fix potential UAF in netfs_unlock_abandoned_read_pages() David Howells <dhowells(a)redhat.com> netfs: Fix leak of request in netfs_write_begin() error handling David Howells <dhowells(a)redhat.com> netfs: Fix early put of sink folio in netfs_read_gaps() David Howells <dhowells(a)redhat.com> netfs: Fix write streaming disablement if fd open O_RDWR David Howells <dhowells(a)redhat.com> netfs: Fix read-gaps to remove netfs_folio from filled folio David Howells <dhowells(a)redhat.com> netfs: Fix potential deadlock in write-through mode David Howells <dhowells(a)redhat.com> netfs: Fix streaming write being overwritten David Howells <dhowells(a)redhat.com> netfs: Defer the emission of trace_netfs_folio() David Howells <dhowells(a)redhat.com> netfs: Fix netfs_invalidate_folio() to clear dirty bit if all changes gone David Howells <dhowells(a)redhat.com> netfs: Fix overrun check in netfs_extract_user_iter() Viacheslav Dubeyko <Slava.Dubeyko(a)ibm.com> netfs: fix VM_BUG_ON_FOLIO() issue in netfs_write_begin() call David Howells <dhowells(a)redhat.com> netfs: Fix zeropoint update where i_size > remote_i_size David Howells <dhowells(a)redhat.com> netfs: Fix potential for tearing in ->remote_i_size and ->zero_point David Howells <dhowells(a)redhat.com> netfs: Fix netfs_read_to_pagecache() to pause on subreq failure David Howells <dhowells(a)redhat.com> netfs: Fix missing barriers when accessing stream->subrequests locklessly David Howells <dhowells(a)redhat.com> netfs: Fix missing locking around retry adding new subreqs David Howells <dhowells(a)redhat.com> netfs: Fix cancellation of a DIO and single read subrequests Aboorva Devarajan <aboorvad(a)linux.ibm.com> powerpc/hv-gpci: fix preempt count leak in sysfs show paths Julian Braha <julianbraha(a)gmail.com> powerpc: fix dead default for GUEST_STATE_BUFFER_TEST Ally Heev <allyheev(a)gmail.com> powerpc: 82xx: fix uninitialized pointers with free attribute Mario Limonciello <mario.limonciello(a)amd.com> ASoC: SOF: amd: Fix error code handling in psp_send_cmd() Kuniyuki Iwashima <kuniyu(a)google.com> tcp: Fix out-of-bounds access for twsk in tcp_ao_established_key(). Johannes Thumshirn <johannes.thumshirn(a)wdc.com> zonefs: handle integer overflow in zonefs_fname_to_fno Chia-Lin Kao (AceLan) <acelan.kao(a)canonical.com> nvme-pci: fix use-after-free in nvme_free_host_mem() Keith Busch <kbusch(a)kernel.org> nvme: fix bio leak on mapping failure Jiayuan Chen <jiayuan.chen(a)linux.dev> irq_work: Fix use-after-free in irq_work_single() on PREEMPT_RT Zhihao Cheng <chengzhihao1(a)huawei.com> nsfs: fix wrong error code returned for pidns ioctls Ming Lei <tom.leiming(a)gmail.com> ublk: reject max_sectors smaller than PAGE_SECTORS in parameter validation Pankaj Raghav <p.raghav(a)samsung.com> fs: fix forced iversion increment on lazytime timestamp updates Rosen Penev <rosenp(a)gmail.com> irqchip/ath79-cpu: Remove unused function Hongling Zeng <zenghongling(a)kylinos.cn> fs: Fix return in jfs_mkdir and orangefs_mkdir Junyoung Jang <graypanda.inzag(a)gmail.com> fs/statmount: fix slab out-of-bounds write in statmount_mnt_idmap Masami Hiramatsu (Google) <mhiramat(a)kernel.org> fprobe: Fix unregister_fprobe() to wait for RCU grace period Mac Chiang <mac.chiang(a)intel.corp-partner.google.com> ASoC: sdw_utils: Add quirk to ignore RT721 CODEC_MIC Mac Chiang <mac.chiang(a)intel.com> ASoC: sdw_utils: Add quirk to ignore RT712 CODEC_MIC Chuck Lever <chuck.lever(a)oracle.com> NFSD: Fix infinite loop in layout state revocation Felix Gu <ustc.gu(a)gmail.com> phy: spacemit: Remove incorrect clk_disable() in spacemit_usb2phy_init() Gabor Juhos <j4g8y7(a)gmail.com> phy: marvell: mvebu-a3700-utmi: fix incorrect USB2_PHY_CTRL register access Shitalkumar Gandhi <shital.gandhi45(a)gmail.com> net: ti: icssm-prueth: fix eth_ports_node leak in probe Myeonghun Pak <mhun512(a)gmail.com> net: lan966x: avoid unregistering netdev on register failure Ivan Vecera <ivecera(a)redhat.com> ice: dpll: fix misplaced header macros Ivan Vecera <ivecera(a)redhat.com> ice: dpll: fix rclk pin state get for E810 Bart Van Assche <bvanassche(a)acm.org> ice: fix locking in ice_dcb_rebuild() Marcin Szycik <marcin.szycik(a)linux.intel.com> ice: fix setting RSS VSI hash for E830 Emil Tantilov <emil.s.tantilov(a)intel.com> idpf: fix read_dev_clk_lock spinlock init in idpf_ptp_init() Mohsin Bashir <hmohsin(a)meta.com> net: shaper: Reject reparenting of existing nodes Dragos Tatulea <dtatulea(a)nvidia.com> net: napi: Avoid gro timer misfiring at end of busypoll Kuniyuki Iwashima <kuniyu(a)google.com> tcp: Fix imbalanced icsk_accept_queue count. Martin Kaiser <martin(a)kaiser.cx> test_kprobes: clear kprobes between test runs Jianpeng Chang <jianpeng.chang.cn(a)windriver.com> kprobes: skip non-symbol addresses in kprobe_add_ksym_blacklist() Pablo Neira Ayuso <pablo(a)netfilter.org> netfilter: nf_conntrack_expect: restore helper propagation via expectation Florian Westphal <fw(a)strlen.de> netfilter: bridge: eb_tables: close module init race Florian Westphal <fw(a)strlen.de> netfilter: x_tables: close dangling table module init race Florian Westphal <fw(a)strlen.de> netfilter: ebtables: close dangling table module init race Florian Westphal <fw(a)strlen.de> netfilter: ebtables: move to two-stage removal scheme Florian Westphal <fw(a)strlen.de> netfilter: x_tables: add and use xtables_unregister_table_exit Florian Westphal <fw(a)strlen.de> netfilter: x_tables: add and use xt_unregister_table_pre_exit Florian Westphal <fw(a)strlen.de> netfilter: x_tables: unregister the templates first Florian Westphal <fw(a)strlen.de> netfilter: x_tables: allocate hook ops while under mutex Florian Westphal <fw(a)strlen.de> netfilter: x_tables: allow initial table replace without emitting audit log message Filipe Manana <fdmanana(a)suse.com> btrfs: tracepoints: fix sleep while in atomic context in btrfs_sync_file() Shuhao Fu <sfual(a)cse.ust.hk> ALSA: hda: cs35l41: Put ACPI device on missing physical node Shuhao Fu <sfual(a)cse.ust.hk> ALSA: hda: cs35l56: Put ACPI device after setting companion Guenter Roeck <linux(a)roeck-us.net> ARM: integrator: Fix early initialization Sudeep Holla <sudeep.holla(a)kernel.org> firmware: arm_ffa: Fix sched-recv callback partition lookup Sudeep Holla <sudeep.holla(a)kernel.org> firmware: arm_ffa: Snapshot notifier callbacks under lock Sudeep Holla <sudeep.holla(a)kernel.org> firmware: arm_ffa: Align RxTx buffer size before mapping Sudeep Holla <sudeep.holla(a)kernel.org> firmware: arm_ffa: Validate framework notification message layout Sudeep Holla <sudeep.holla(a)kernel.org> firmware: arm_ffa: Keep framework RX release under lock Sudeep Holla <sudeep.holla(a)kernel.org> firmware: arm_ffa: Bound PARTITION_INFO_GET_REGS copies Maulik Shah <maulik.shah(a)oss.qualcomm.com> pinctrl: qcom: Fix wakeirq map by removing disconnected irqs for sm8150 David Gow <david(a)davidgow.net> kunit: config: KUNIT_DEBUGFS should depend on DEBUG_FS David Gow <david(a)davidgow.net> kunit: config: Enable KUNIT_DEBUGFS by default Guo Ren (Alibaba DAMO Academy) <guoren(a)kernel.org> riscv: mm: Fixup no5lvl failure when vaddr is invalid Michael Neuling <mikey(a)neuling.org> riscv: Fix register corruption from uninitialized cregs on error Michael Neuling <mikey(a)neuling.org> riscv: errata: Fix bitwise vs logical AND in MIPS errata patching Sudeep Holla <sudeep.holla(a)kernel.org> firmware: arm_ffa: Unregister bus notifier on teardown for FF-A v1.0 Sudeep Holla <sudeep.holla(a)kernel.org> firmware: arm_ffa: Fix per-vcpu self notifications handling in workqueue Sudeep Holla <sudeep.holla(a)kernel.org> firmware: arm_ffa: Skip free_pages on RX buffer alloc failure Sudeep Holla <sudeep.holla(a)kernel.org> firmware: arm_ffa: Check for NULL FF-A ID table while driver registration Takashi Iwai <tiwai(a)suse.de> HID: uclogic: Fix regression of input name assignment Dan Carpenter <error27(a)gmail.com> HID: intel-thc-hid: Intel-quickspi: Fix some error codes David Carlier <devnexen(a)gmail.com> mm/memfd_luo: report error when restoring a folio fails mid-loop Evangelos Petrongonas <epetron(a)amazon.de> kho: skip KHO for crash kernel Maulik Shah <maulik.shah(a)oss.qualcomm.com> pinctrl: qcom: Fix GPIO to PDC wake irq map for qcs615 Xianwei Zhao <xianwei.zhao(a)amlogic.com> pinctrl: meson: amlogic-a4: fix deadlock issue Lad Prabhakar <prabhakar.mahadev-lad.rj(a)bp.renesas.com> pinctrl: renesas: rzg2l: Fix SMT register cache handling Biju Das <biju.das.jz(a)bp.renesas.com> pinctrl: renesas: rzg2l: Fix incorrect PUPD register offset for high pins during suspend/resume Marek Vasut <marek.vasut+renesas(a)mailbox.org> ARM: dts: renesas: rskrza1: Drop superfluous cells Marek Vasut <marek.vasut+renesas(a)mailbox.org> ARM: dts: renesas: genmai: Drop superfluous cells Geert Uytterhoeven <geert+renesas(a)glider.be> arm64: dts: renesas: r8a78000: Fix SCIF brg_int clocks Til Kaiser <mail(a)tk154.de> pinctrl: qcom: ipq4019: mark gpio as a GPIO pin function Bartosz Golaszewski <bartosz.golaszewski(a)oss.qualcomm.com> pinctrl: mediatek: moore: implement gpio_chip::get_direction() Abdurrahman Hussain <abdurrahman(a)nexthop.ai> hwmon: (pmbus/adm1266) reject short block-read responses in the GPIO accessors Abdurrahman Hussain <abdurrahman(a)nexthop.ai> hwmon: (pmbus/adm1266) register the nvmem device after pmbus_do_probe() Abdurrahman Hussain <abdurrahman(a)nexthop.ai> hwmon: (pmbus/adm1266) register the gpio_chip after pmbus_do_probe() Abdurrahman Hussain <abdurrahman(a)nexthop.ai> hwmon: (pmbus/adm1266) don't clobber GPIO bits before PDIO read in get_multiple Abdurrahman Hussain <abdurrahman(a)nexthop.ai> hwmon: (pmbus/adm1266) cap PDIO scan in get_multiple at ADM1266_PDIO_NR Abdurrahman Hussain <abdurrahman(a)nexthop.ai> hwmon: (pmbus/adm1266) bounce blackbox records through a protocol-sized buffer Abdurrahman Hussain <abdurrahman(a)nexthop.ai> hwmon: (pmbus/adm1266) include PEC byte in pmbus_block_xfer read buffer Abdurrahman Hussain <abdurrahman(a)nexthop.ai> hwmon: (pmbus/adm1266) reject implausible blackbox record_count Abdurrahman Hussain <abdurrahman(a)nexthop.ai> hwmon: (pmbus/adm1266) seed timestamp from the real-time clock Sven Eckelmann <sven(a)narfation.org> batman-adv: tt: prevent TVLV entry number overflow Sven Eckelmann <sven(a)narfation.org> batman-adv: tt: fix negative tt_buff_len Sven Eckelmann <sven(a)narfation.org> batman-adv: tt: fix negative last_changeset_len Sven Eckelmann <sven(a)narfation.org> batman-adv: tt: avoid empty VLAN responses Sven Eckelmann <sven(a)narfation.org> batman-adv: tt: reject oversized local TVLV buffers Sven Eckelmann <sven(a)narfation.org> batman-adv: tt: fix TOCTOU race for reported vlans Sven Eckelmann <sven(a)narfation.org> batman-adv: tp_meter: avoid role confusion in tp_list Sven Eckelmann <sven(a)narfation.org> batman-adv: tp_meter: fix race condition in send error reporting Sven Eckelmann <sven(a)narfation.org> batman-adv: tp_meter: fix tp_vars reference leak in receiver shutdown Sven Eckelmann <sven(a)narfation.org> batman-adv: tp_meter: directly shut down timer on cleanup Sven Eckelmann <sven(a)narfation.org> batman-adv: tp_meter: avoid use of uninit sender vars Sven Eckelmann <sven(a)narfation.org> batman-adv: bla: avoid NULL-ptr deref for claim via dropped interface Sven Eckelmann <sven(a)narfation.org> batman-adv: bla: avoid double decrement of bla.num_requests Sven Eckelmann <sven(a)narfation.org> batman-adv: bla: fix report_work leak on backbone_gw purge Sven Eckelmann <sven(a)narfation.org> batman-adv: frag: disallow unicast fragment in fragment Luxiao Xu <rakukuip(a)gmail.com> batman-adv: fix tp_meter counter underflow during shutdown Ruide Cao <caoruide123(a)gmail.com> batman-adv: fix fragment reassembly length accounting Sven Eckelmann <sven(a)narfation.org> batman-adv: dat: handle forward allocation error Ruijie Li <ruijieli51(a)gmail.com> batman-adv: clear current gateway during teardown Sven Eckelmann <sven(a)narfation.org> batman-adv: mcast: fix use-after-free in orig_node RCU release Sven Eckelmann <sven(a)narfation.org> batman-adv: iv: recover OGM scheduling after forward packet error Sven Eckelmann <sven(a)narfation.org> batman-adv: tvlv: reject oversized TVLV packets Sven Eckelmann <sven(a)narfation.org> batman-adv: tvlv: abort OGM send on tvlv append failure Sven Eckelmann <sven(a)narfation.org> batman-adv: v: stop OGMv2 on disabled interface Harry Wentland <harry.wentland(a)amd.com> drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async Harry Wentland <harry.wentland(a)amd.com> drm/amd/display: Validate GPIO pin LUT table size before iterating Harry Wentland <harry.wentland(a)amd.com> drm/amd/display: Fix integer overflow in bios_get_image() Osama Abdelkader <osama.abdelkader(a)gmail.com> drm/bridge: megachips: remove bridge when irq request fails Julien Chauveau <chauveau.julien(a)gmail.com> drm/bridge: it66121: acquire reset GPIO in probe Alan Liu <haoping.liu(a)amd.com> drm/amdgpu/vpe: Force collaborate sync after TRAP Niranjana Vishwanathapura <niranjana.vishwanathapura(a)intel.com> drm/xe/multi_queue: Fix secondary queue error case Deepanshu Kartikey <kartikey406(a)gmail.com> drm/virtio: use uninterruptible resv lock for plane updates Maíra Canal <mcanal(a)igalia.com> drm/v3d: Release indirect CSD GEM reference on CPU job free Maíra Canal <mcanal(a)igalia.com> drm/v3d: Fix use-after-free of CPU job query arrays on error path Daniel J Blueman <daniel(a)quora.org> drm/msm: Fix shrinker deadlock Chaitanya Kumar Borah <chaitanya.kumar.borah(a)intel.com> drm/i915/display: Copy color pipeline from plane in the primary joiner pipe Bartosz Golaszewski <bartosz.golaszewski(a)oss.qualcomm.com> device property: set fwnode->secondary to NULL in fwnode_init() Rafael J. Wysocki <rafael.j.wysocki(a)intel.com> cpufreq: intel_pstate: Use correct scaling factor on Raptor Lake-E Huacai Chen <chenhuacai(a)kernel.org> LoongArch: Remove unused code to avoid build warning Tiezhu Yang <yangtiezhu(a)loongson.cn> LoongArch: kprobes: Use larch_insn_text_copy() to patch instructions Heechan Kang <gganji11(a)naver.com> fwctl: pds: Validate RPC input size before parsing Thomas Richter <tmricht(a)linux.ibm.com> s390/pai: Fix missing PAI counter increments under heavy load Thomas Richter <tmricht(a)linux.ibm.com> s390/pai: Disable duplicate read of kernel PAI counter value Peter Oberparleiter <oberpar(a)linux.ibm.com> s390/cio: Restore GFP_DMA for CHSC allocation Michael Bommarito <michael.bommarito(a)gmail.com> RDMA/siw: Reject MPA FPDU length underflow before signed receive math Qing Wang <wangqing7171(a)gmail.com> mm/slub: hold cpus_read_lock around flush_rcu_sheaves_on_cache() Johan Hovold <johan(a)kernel.org> spi: ti-qspi: fix use-after-free after DMA setup failure Johan Hovold <johan(a)kernel.org> spi: sprd: fix error pointer deref after DMA setup failure Johan Hovold <johan(a)kernel.org> spi: ep93xx: fix error pointer deref after DMA setup failure Michael Bommarito <michael.bommarito(a)gmail.com> scsi: isci: Fix use-after-free in device removal path Yongxing Mou <yongxing.mou(a)oss.qualcomm.com> phy: qcom: edp: Fix AUX_CFG8 programming for DP mode Yongxing Mou <yongxing.mou(a)oss.qualcomm.com> phy: qcom: edp: Add eDP/DP mode switch support Yongxing Mou <yongxing.mou(a)oss.qualcomm.com> phy: qcom: edp: Unify generic DP/eDP swing and pre-emphasis tables Nitin Rawat <nitin.rawat(a)oss.qualcomm.com> phy: qcom-qmp-ufs: Fix kaanapali PHY PLL lock failure after SM8650 G4 fix Wayne Chang <waynec(a)nvidia.com> phy: tegra: xusb: Fix per-pad high-speed termination calibration Łukasz Lebiedziński <kernel(a)lvkasz.us> phy: exynos5-usbdrd: fix USB 2.0 HS PHY tuning values for Exynos7870 Johan Hovold <johan(a)kernel.org> spi: qup: fix error pointer deref after DMA setup failure Osama Abdelkader <osama.abdelkader(a)gmail.com> drm/bridge: chipone-icn6211: use devm_drm_bridge_add in i2c probe Saurav Sachidanand <sauravsc(a)amazon.com> i2c: tegra: fix pm_runtime leak on mutex_lock failure Carlos López <clopez(a)suse.de> virt: sev-guest: Explicitly leak pages in unknown state Osama Abdelkader <osama.abdelkader(a)gmail.com> riscv: kvm: return SBI_ERR_FAILURE for pmu_event_info() when OOM Osama Abdelkader <osama.abdelkader(a)gmail.com> riscv: kvm: return SBI_ERR_FAILURE for pmu_snapshot_set_shmem() when OOM Tina Zhang <zhang_wei(a)open-hieco.net> KVM: SVM: Disable AVIC IPI virtualization on Hygon Family 18h (erratum #1235) Michael Bommarito <michael.bommarito(a)gmail.com> KVM: arm64: vgic: Free private_irqs when init fails after allocation Michael Bommarito <michael.bommarito(a)gmail.com> KVM: arm64: vgic-its: Reject restored DTE with out-of-range num_eventid_bits Vladimir Murzin <vladimir.murzin(a)arm.com> arm64: probes: Handle probes on hinted conditional branch instructions Jeongjun Park <aha310510(a)gmail.com> ASoC: codecs: pcm512x: fix null-ptr dereference in pcm512x_overclock_xxx_put() Masami Hiramatsu (Google) <mhiramat(a)kernel.org> tracing: Do not call map->ops->elt_free() if elt_alloc() fails Zhihao Cheng <chengzhihao1(a)huawei.com> cifs: Fix busy dentry used after unmounting Dawei Feng <dawei.feng(a)seu.edu.cn> octeontx2-pf: avoid double free of pool->stack on AQ init failure Michael Bommarito <michael.bommarito(a)gmail.com> wifi: mac80211: consume only present negotiated TTLM maps Jann Horn <jannh(a)google.com> af_unix: Fix UAF read of tail->len in unix_stream_data_wait() John Walker <johnwalker0(a)gmail.com> wifi: cfg80211: advance loop vars in cfg80211_merge_profile() Grzegorz Nitka <grzegorz.nitka(a)intel.com> ice: restore PTP Rx timestamp config after ethtool set-channels Marcin Szycik <marcin.szycik(a)intel.com> ice: fix setting promisc mode while adding VID filter Jacob Keller <jacob.e.keller(a)intel.com> ice: fix locking around wait_event_interruptible_locked_irq Kohei Enju <kohei(a)enjuk.jp> igc: fix potential skb leak in igc_fpe_xmit_smd_frame() Dawei Feng <dawei.feng(a)seu.edu.cn> octeontx2-pf: fix double free in rvu_rep_rsrc_init() Sam Daly <sam(a)samdaly.ie> octeontx2-af: CGX: add bounds check to cgx_speed_mbps index Stephen Smalley <stephen.smalley.work(a)gmail.com> lsm: hold cred_guard_mutex for lsm_set_self_attr() Paolo Abeni <pabeni(a)redhat.com> mptcp: reset rcv wnd on disconnect Shardul Bankar <shardul.b(a)mpiricsoftware.com> mptcp: do not drop partial packets Ilya Dryomov <idryomov(a)gmail.com> rbd: eliminate a race in lock_dwork draining on unmap Michael Bommarito <michael.bommarito(a)gmail.com> ixgbevf: fix use-after-free in VEPA multicast source pruning Michael Bommarito <michael.bommarito(a)gmail.com> ipv4: raw: reject IP_HDRINCL packets with ihl < 5 Sheroz Juraev <goodmartiandev(a)gmail.com> wifi: iwlwifi: mld: stop TX during firmware restart Johannes Berg <johannes.berg(a)intel.com> wifi: iwlwifi: mvm: fix driver-set TX rates on old devices Kyle Farnung <kfarnung(a)gmail.com> wifi: ath11k: clear shared SRNG pointer state on restart Jose Ignacio Tornos Martinez <jtornosm(a)redhat.com> ice: fix VF queue configuration with low MTU values Stefano Garzarella <sgarzare(a)redhat.com> vsock/virtio: reset connection on receiving queue overflow Minh Nguyen <minhnguyen.080505(a)gmail.com> vsock/vmci: fix UAF when peer resets connection during handshake Li Xiasong <lixiasong1(a)huawei.com> mptcp: pm: fix ADD_ADDR timer infinite retry on option space insufficient Matthieu Baerts (NGI0) <matttbe(a)kernel.org> selftests: mptcp: drop nanoseconds width specifier Justin Iurman <justin.iurman(a)gmail.com> ipv6: ioam: add NULL check for idev in ipv6_hop_ioam() Zhao Li <enderaoelyther(a)gmail.com> wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb Masami Hiramatsu (Google) <mhiramat(a)kernel.org> ring-buffer: Flush and stop persistent ring buffer on panic Steven Rostedt <rostedt(a)goodmis.org> ring-buffer: Fix reporting of missed events in iterator Dawei Feng <dawei.feng(a)seu.edu.cn> qed: fix double free in qed_cxt_tables_alloc() Michael Bommarito <michael.bommarito(a)gmail.com> l2tp: use list_del_rcu in l2tp_session_unhash Tejun Heo <tj(a)kernel.org> sched_ext: Avoid UAF in scx_root_enable_workfn() init failure path Samuele Mariotti <smariotti(a)disroot.org> sched_ext: Fix missing warning in scx_set_task_state() default case Rafael J. Wysocki <rafael.j.wysocki(a)intel.com> ACPI: driver: Check ACPI_COMPANION() against NULL during probe David Carlier <devnexen(a)gmail.com> net: ethtool: phy: avoid NULL deref when PHY driver is unbound Quan Sun <2022090917019(a)std.uestc.edu.cn> net: ethtool: fix NULL pointer dereference in phy_reply_size Yizhou Zhao <zhaoyz24(a)mails.tsinghua.edu.cn> netfilter: nft_inner: Fix IPv6 inner_thoff desync Nan Li <tonanli66(a)gmail.com> netfilter: ipset: stop hash:* range iteration at end Haoze Xie <royenheart(a)gmail.com> netfilter: nf_queue: hold bridge skb->dev while queued Zhengchuan Liang <zcliangcn(a)gmail.com> netfilter: ip6t_hbh: reject oversized option lists Jonas Jelonek <jelonek.jonas(a)gmail.com> net: pse-pd: fix sign on -ENOENT check in of_load_pse_pis() Michael Bommarito <michael.bommarito(a)gmail.com> net: ifb: report ethtool stats over num_tx_queues Matt Fleming <mfleming(a)cloudflare.com> net/mlx5e: Fix use-after-free in mlx5e_tx_reporter_timeout_recover Michael Bommarito <michael.bommarito(a)gmail.com> net: hsr: defer node table free until after RCU readers Nerijus Bendžiūnas <nerijus.bendziunas(a)gmail.com> net: phy: skip EEE advertisement write when autoneg is disabled David Carlier <devnexen(a)gmail.com> net: devmem: reject dma-buf bind with non-page-aligned size or SG length Nicolai Buchwitz <nb(a)tipi-net.de> net: bcmgenet: keep RBUF EEE/PM disabled Zijing Yin <yzjaurora(a)gmail.com> phonet/pep: disable BH around forwarded sk_receive_skb() Jiexun Wang <wangjiexun2025(a)gmail.com> Bluetooth: serialize accept_q access Michael Bommarito <michael.bommarito(a)gmail.com> Bluetooth: MGMT: validate Add Extended Advertising Data length Shuai Zhang <shuai.zhang(a)oss.qualcomm.com> Bluetooth: hci_qca: Convert timeout from jiffies to ms Michael Bommarito <michael.bommarito(a)gmail.com> Bluetooth: L2CAP: ecred_reconfigure: send packed pdu, not stack pointer Mingyu Wang <25181214217(a)stu.xidian.edu.cn> Bluetooth: hci_uart: fix UAFs and race conditions in close and init paths Jann Horn <jannh(a)google.com> Bluetooth: bnep: Fix UAF read of dev->name David Carlier <devnexen(a)gmail.com> Bluetooth: ISO: drop ISO_END frames received without prior ISO_START Safa Karakuş <safa.karakus(a)secunnix.com> Bluetooth: fix UAF in l2cap_sock_cleanup_listen() vs l2cap_conn_del() Abdun Nihaal <nihaal(a)cse.iitm.ac.in> net: wwan: iosm: fix potential memory leaks in ipc_imem_init() SeongJae Park <sj(a)kernel.org> mm/damon: fix damos_stat tracepoint format for sz_applied Luiz Capitulino <luizcap(a)redhat.com> selftests/mm: run_vmtests.sh: fix destructive tests invocation Sunny Patel <nueralspacetech(a)gmail.com> mm/migrate_device: fix spinlock leak in migrate_vma_insert_huge_pmd_page David Hildenbrand (Arm) <david(a)kernel.org> mm/page_alloc: fix initialization of tags of the huge zero folio with init_on_free Muchun Song <muchun.song(a)linux.dev> mm/memory_hotplug: fix memory block reference leak on remove David Hildenbrand (Arm) <david(a)kernel.org> mm: fix __vm_normal_page() to handle missing support for pmd_special()/pud_special() Alistair Popple <apopple(a)nvidia.com> mm/memory: fix spurious warning when unmapping device-private/exclusive pages Justin Iurman <justin.iurman(a)gmail.com> ipv6: ioam: refresh hdr pointer before ioam6_event() Muchun Song <muchun.song(a)linux.dev> drivers/base/memory: fix memory block reference leak in poison accounting Heechan Kang <gganji11(a)naver.com> io_uring/waitid: clear waitid info before copying it to userspace Krishnamoorthi M <krishnamoorthi.m(a)amd.com> spi: amd: Set correct bus number in ACPI probe path Ard Biesheuvel <ardb(a)kernel.org> efi: Allocate runtime workqueue before ACPI init Rafael J. Wysocki <rafael.j.wysocki(a)intel.com> ACPI: battery: Fix system wakeup on critical battery status Cássio Gabriel <cassiogabrielcontato(a)gmail.com> ALSA: scarlett2: Allow flash writes ending at segment boundary Takashi Iwai <tiwai(a)suse.de> ALSA: asihpi: Fix potential OOB array access at reading cache Takashi Iwai <tiwai(a)suse.de> ALSA: pcm: Don't setup bogus iov_iter for silencing Cássio Gabriel <cassiogabrielcontato(a)gmail.com> ALSA: ua101: Reject too-short USB descriptors Abdurrahman Hussain <abdurrahman(a)nexthop.ai> hwmon: (pmbus/adm1266) widen blackbox-info buffer to I2C_SMBUS_BLOCK_MAX ChenXiaoSong <chenxiaosong(a)kylinos.cn> smb/server: promote S_DEL_ON_CLS to S_DEL_PENDING when close Jeremy Erazo <mendozayt13(a)gmail.com> smb: client: use data_len for SMB2 READ encrypted folioq copy Henrique Carvalho <henrique.carvalho(a)suse.com> smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() Michael Bommarito <michael.bommarito(a)gmail.com> smb: client: require net admin for CIFS SWN netlink Illia Ostapyshyn <illia(a)yshyn.com> scripts/gdb: mm: cast untyped symbols in x86_page_ops Tom Lendacky <thomas.lendacky(a)amd.com> x86/mm: Disable broadcast TLB flush when PCID is disabled Alexander Sverdlin <alexander.sverdlin(a)gmail.com> regulator: tps65219: fix irq_data.rdev not being assigned Junyi Liu <moss80199(a)gmail.com> ksmbd: validate SID in parent security descriptor during ACL inheritance Ferry Meng <mengferry(a)linux.alibaba.com> ksmbd: fix SID memory leak in set_posix_acl_entries_dacl() on overflow Jeremy Laratro <research(a)aradex.io> ksmbd: fix null pointer dereference in proc_show_files() Jeremy Laratro <research(a)aradex.io> ksmbd: fix null pointer dereference in compare_guid_key() SeongJae Park <sj(a)kernel.org> mm/damon/sysfs-schemes: call missing mem_cgroup_iter_break() Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> sysfs: don't remove existing directory on update failure Niklas Cassel <cassel(a)kernel.org> ata: libata-scsi: do not needlessly defer commands when using PMP with FBS Niklas Cassel <cassel(a)kernel.org> ata: libata-scsi: do not use the deferred QC feature on PMPs with CBS Niklas Cassel <cassel(a)kernel.org> ata: libata-scsi: do not use the deferred QC feature for ATA_DEFER_PORT Niklas Cassel <cassel(a)kernel.org> ata: libata-scsi: improve readability of ata_scsi_qc_issue() Asim Viladi Oglu Manizada <manizada(a)pm.me> smb: client: reject userspace cifs.spnego descriptions DaeMyung Kang <charsyam(a)gmail.com> ksmbd: close durable scavenger races against m_fp_list lookups Eder Zulian <ezulian(a)redhat.com> iommu/amd: Remove latent out-of-bounds access in IOMMU debugfs Guanghui Feng <guanghuifeng(a)linux.alibaba.com> iommu/amd: Fix illegal cap/mmio access in IOMMU debugfs ------------- Diffstat: .../ABI/testing/sysfs-driver-uniwill-laptop | 27 ++ .../admin-guide/laptops/uniwill-laptop.rst | 22 ++ Documentation/admin-guide/pm/intel_pstate.rst | 11 +- Documentation/arch/riscv/zicfilp.rst | 2 +- Documentation/crypto/krb5.rst | 17 +- Documentation/netlink/specs/net_shaper.yaml | 7 + Makefile | 4 +- arch/alpha/include/asm/Kbuild | 1 + arch/arc/include/asm/Kbuild | 1 + arch/arm/boot/dts/renesas/r7s72100-genmai.dts | 3 - arch/arm/boot/dts/renesas/r7s72100-rskrza1.dts | 2 - arch/arm/include/asm/Kbuild | 1 + arch/arm/mach-versatile/integrator_cp.c | 13 +- arch/arm64/boot/dts/renesas/r8a78000.dtsi | 8 +- arch/arm64/include/asm/insn.h | 2 +- arch/arm64/include/asm/page.h | 2 +- arch/arm64/include/asm/ring_buffer.h | 10 + arch/arm64/kvm/arm.c | 4 +- arch/arm64/kvm/vgic/vgic-its.c | 4 + arch/arm64/mm/fault.c | 11 +- arch/csky/include/asm/Kbuild | 1 + arch/hexagon/include/asm/Kbuild | 1 + arch/loongarch/include/asm/Kbuild | 1 + arch/loongarch/kernel/kprobes.c | 14 +- arch/loongarch/mm/init.c | 4 - arch/m68k/include/asm/Kbuild | 1 + arch/microblaze/include/asm/Kbuild | 1 + arch/mips/include/asm/Kbuild | 1 + arch/nios2/include/asm/Kbuild | 1 + arch/openrisc/include/asm/Kbuild | 1 + arch/parisc/include/asm/Kbuild | 1 + arch/powerpc/Kconfig.debug | 3 +- arch/powerpc/include/asm/Kbuild | 1 + arch/powerpc/kernel/time.c | 6 +- arch/powerpc/perf/hv-gpci.c | 24 +- arch/powerpc/platforms/82xx/km82xx.c | 4 +- arch/riscv/errata/mips/errata.c | 2 +- arch/riscv/include/asm/Kbuild | 1 + arch/riscv/kernel/compat_signal.c | 2 + arch/riscv/kernel/ptrace.c | 4 +- arch/riscv/kvm/vcpu_pmu.c | 12 +- arch/riscv/mm/init.c | 25 ++ arch/s390/include/asm/Kbuild | 1 + arch/s390/kernel/perf_pai.c | 31 ++- arch/sh/include/asm/Kbuild | 1 + arch/sparc/include/asm/Kbuild | 1 + arch/um/include/asm/Kbuild | 1 + arch/x86/include/asm/Kbuild | 1 + arch/x86/kernel/cpu/cpuid-deps.c | 1 + arch/x86/kernel/cpu/mce/core.c | 33 +-- arch/x86/kvm/svm/avic.c | 12 +- arch/x86/xen/setup.c | 2 +- arch/xtensa/include/asm/Kbuild | 1 + block/bio-integrity.c | 19 +- block/blk-cgroup.c | 2 +- block/blk-mq-debugfs.c | 1 + block/blk-mq.c | 53 ++-- block/blk-sysfs.c | 35 ++- block/blk-zoned.c | 250 ++++++++++++++--- crypto/krb5/krb5_api.c | 54 +++- drivers/accel/qaic/qaic_data.c | 23 +- drivers/acpi/ac.c | 6 +- drivers/acpi/acpi_pad.c | 6 +- drivers/acpi/acpi_tad.c | 6 +- drivers/acpi/battery.c | 10 +- drivers/acpi/button.c | 9 +- drivers/acpi/ec.c | 6 +- drivers/acpi/hed.c | 6 +- drivers/acpi/nfit/core.c | 6 +- drivers/acpi/pfr_telemetry.c | 6 +- drivers/acpi/pfr_update.c | 6 +- drivers/acpi/sbs.c | 6 +- drivers/acpi/sbshc.c | 6 +- drivers/acpi/thermal.c | 2 +- drivers/acpi/tiny-power-button.c | 6 +- drivers/ata/libata-core.c | 9 +- drivers/ata/libata-eh.c | 8 +- drivers/ata/libata-pmp.c | 18 +- drivers/ata/libata-scsi.c | 102 ++++--- drivers/ata/sata_sil24.c | 6 +- drivers/base/memory.c | 8 +- drivers/block/rbd.c | 20 +- drivers/block/ublk_drv.c | 3 + drivers/bluetooth/btintel_pcie.c | 20 +- drivers/bluetooth/btintel_pcie.h | 3 - drivers/bluetooth/btmtk.c | 2 + drivers/bluetooth/hci_ldisc.c | 48 +++- drivers/bluetooth/hci_qca.c | 33 ++- drivers/cpufreq/intel_pstate.c | 2 +- drivers/firmware/arm_ffa/bus.c | 4 +- drivers/firmware/arm_ffa/driver.c | 133 +++++++--- drivers/firmware/efi/efi.c | 28 +- drivers/fwctl/pds/main.c | 3 + drivers/gpio/Kconfig | 1 - drivers/gpio/gpio-aggregator.c | 47 ++-- drivers/gpio/gpiolib-cdev.c | 13 + drivers/gpu/drm/amd/amdgpu/amdgpu_gtt_mgr.c | 9 +- drivers/gpu/drm/amd/amdgpu/amdgpu_vpe.c | 7 +- drivers/gpu/drm/amd/amdgpu/vce_v1_0.c | 31 ++- drivers/gpu/drm/amd/display/dc/bios/bios_parser2.c | 9 + .../drm/amd/display/dc/bios/bios_parser_helper.c | 9 +- drivers/gpu/drm/amd/display/dc/core/dc.c | 6 +- drivers/gpu/drm/bridge/chipone-icn6211.c | 4 +- drivers/gpu/drm/bridge/ite-it66121.c | 5 + .../drm/bridge/megachips-stdpxxxx-ge-b850v3-fw.c | 16 +- drivers/gpu/drm/drm_drv.c | 2 + drivers/gpu/drm/drm_gem.c | 36 ++- drivers/gpu/drm/i915/display/intel_dp.c | 2 +- drivers/gpu/drm/i915/display/intel_plane.c | 2 +- drivers/gpu/drm/mediatek/mtk_cec.c | 2 +- drivers/gpu/drm/mediatek/mtk_hdmi_ddc.c | 2 +- drivers/gpu/drm/mediatek/mtk_hdmi_ddc_v2.c | 2 +- drivers/gpu/drm/mediatek/mtk_hdmi_v2.c | 2 +- drivers/gpu/drm/msm/adreno/a5xx_gpu.c | 6 + drivers/gpu/drm/msm/adreno/a6xx_gpu.c | 48 +++- drivers/gpu/drm/msm/adreno/a6xx_hfi.c | 2 + drivers/gpu/drm/msm/adreno/adreno_gpu.c | 13 +- drivers/gpu/drm/msm/adreno/adreno_gpu.h | 1 + .../drm/msm/disp/dpu1/catalog/dpu_13_0_kaanapali.h | 2 +- drivers/gpu/drm/msm/disp/dpu1/dpu_formats.c | 12 +- drivers/gpu/drm/msm/disp/dpu1/dpu_writeback.c | 3 +- drivers/gpu/drm/msm/disp/msm_disp_snapshot_util.c | 24 +- drivers/gpu/drm/msm/dsi/dsi_host.c | 1 + drivers/gpu/drm/msm/msm_drv.c | 11 +- drivers/gpu/drm/msm/msm_drv.h | 7 - drivers/gpu/drm/msm/msm_gem.c | 33 ++- drivers/gpu/drm/msm/msm_gem_shrinker.c | 44 ++- drivers/gpu/drm/msm/msm_gem_submit.c | 6 +- drivers/gpu/drm/msm/msm_gem_vma.c | 12 +- drivers/gpu/drm/msm/msm_iommu.c | 5 +- drivers/gpu/drm/msm/msm_ringbuffer.c | 6 +- drivers/gpu/drm/msm/registers/adreno/a6xx.xml | 4 + drivers/gpu/drm/v3d/v3d_sched.c | 16 +- drivers/gpu/drm/v3d/v3d_submit.c | 22 +- drivers/gpu/drm/virtio/virtgpu_drv.h | 1 + drivers/gpu/drm/virtio/virtgpu_gem.c | 17 ++ drivers/gpu/drm/virtio/virtgpu_plane.c | 10 +- drivers/gpu/drm/xe/regs/xe_gt_regs.h | 3 + drivers/gpu/drm/xe/xe_gsc.c | 5 +- drivers/gpu/drm/xe/xe_gt_sriov_pf_monitor.c | 6 +- drivers/gpu/drm/xe/xe_gt_sriov_pf_monitor.h | 2 +- drivers/gpu/drm/xe/xe_gt_sriov_vf.c | 24 +- drivers/gpu/drm/xe/xe_gt_sriov_vf.h | 6 +- drivers/gpu/drm/xe/xe_guc_submit.c | 16 +- drivers/gpu/drm/xe/xe_oa.c | 6 +- drivers/gpu/drm/xe/xe_tuning.c | 5 + drivers/gpu/drm/xe/xe_wa.c | 28 +- drivers/hid/hid-quirks.c | 2 +- drivers/hid/hid-uclogic-core.c | 4 +- .../intel-quickspi/quickspi-protocol.c | 4 +- drivers/hwmon/lm90.c | 26 +- drivers/hwmon/pmbus/adm1266.c | 32 ++- drivers/i2c/busses/i2c-tegra.c | 4 +- drivers/infiniband/hw/mana/main.c | 1 + drivers/infiniband/sw/siw/siw_qp_rx.c | 15 ++ drivers/infiniband/ulp/rtrs/rtrs-srv-sysfs.c | 2 +- drivers/iommu/amd/debugfs.c | 43 ++- drivers/iommu/generic_pt/iommu_pt.h | 176 ++++++------ drivers/iommu/generic_pt/kunit_generic_pt.h | 12 + drivers/iommu/generic_pt/pt_iter.h | 22 ++ drivers/iommu/iommu.c | 118 +++++---- drivers/irqchip/irq-ath79-cpu.c | 7 - drivers/net/dsa/mt7530.c | 47 ++-- drivers/net/ethernet/airoha/airoha_eth.c | 10 +- drivers/net/ethernet/amd/pds_core/debugfs.c | 7 +- drivers/net/ethernet/amd/pds_core/dev.c | 11 +- drivers/net/ethernet/amd/pds_core/devlink.c | 6 +- drivers/net/ethernet/atheros/ag71xx.c | 3 + drivers/net/ethernet/broadcom/genet/bcmgenet.c | 9 +- drivers/net/ethernet/cirrus/cs89x0.c | 2 - drivers/net/ethernet/cortina/gemini.c | 21 +- drivers/net/ethernet/freescale/enetc/enetc_pf.c | 4 +- drivers/net/ethernet/intel/ice/ice_dcb_lib.c | 4 +- drivers/net/ethernet/intel/ice/ice_dpll.c | 5 + drivers/net/ethernet/intel/ice/ice_dpll.h | 32 +-- drivers/net/ethernet/intel/ice/ice_main.c | 10 +- drivers/net/ethernet/intel/ice/ice_ptp_hw.c | 33 ++- drivers/net/ethernet/intel/ice/virt/queues.c | 2 +- drivers/net/ethernet/intel/idpf/idpf_ptp.c | 4 +- drivers/net/ethernet/intel/igc/igc_tsn.c | 9 +- drivers/net/ethernet/intel/ixgbevf/ixgbevf_main.c | 1 + drivers/net/ethernet/marvell/octeontx2/af/cgx.c | 7 +- .../net/ethernet/marvell/octeontx2/af/rvu_npc.c | 2 +- drivers/net/ethernet/marvell/octeontx2/nic/cn20k.c | 2 + .../ethernet/marvell/octeontx2/nic/otx2_common.c | 2 + drivers/net/ethernet/marvell/octeontx2/nic/rep.c | 3 +- .../ethernet/mellanox/mlx5/core/en/reporter_tx.c | 6 +- .../ethernet/mellanox/mlx5/core/en_accel/ipsec.c | 7 +- drivers/net/ethernet/mellanox/mlx5/core/en_txrx.c | 2 +- .../net/ethernet/mellanox/mlx5/core/esw/ipsec_fs.c | 3 +- drivers/net/ethernet/mellanox/mlx5/core/eswitch.c | 21 ++ drivers/net/ethernet/mellanox/mlx5/core/eswitch.h | 1 + drivers/net/ethernet/mellanox/mlx5/core/lag/lag.c | 5 + .../net/ethernet/microchip/lan966x/lan966x_main.c | 8 +- drivers/net/ethernet/microsoft/mana/hw_channel.c | 35 ++- drivers/net/ethernet/qlogic/qed/qed_cxt.c | 2 + .../net/ethernet/stmicro/stmmac/dwmac-eic7700.c | 128 ++++++--- drivers/net/ethernet/ti/icssm/icssm_prueth.c | 1 + drivers/net/ifb.c | 11 +- drivers/net/ovpn/io.c | 12 +- drivers/net/ovpn/main.c | 12 +- drivers/net/ovpn/netlink.c | 8 +- drivers/net/ovpn/peer.c | 23 +- drivers/net/ovpn/peer.h | 1 - drivers/net/ovpn/stats.h | 16 ++ drivers/net/ovpn/tcp.c | 19 +- drivers/net/ovpn/udp.c | 2 +- drivers/net/phy/dp83tc811.c | 1 + drivers/net/phy/phy-c45.c | 8 + drivers/net/phy/phy_device.c | 6 +- drivers/net/pse-pd/pse_core.c | 2 +- drivers/net/tap.c | 2 +- drivers/net/wireless/ath/ath10k/wmi.c | 17 +- drivers/net/wireless/ath/ath11k/dp_rx.c | 3 +- drivers/net/wireless/ath/ath11k/hal.c | 14 +- drivers/net/wireless/ath/ath11k/hal_rx.c | 5 +- drivers/net/wireless/ath/ath11k/testmode.c | 1 + drivers/net/wireless/ath/ath11k/wmi.c | 19 +- drivers/net/wireless/ath/ath12k/mac.c | 8 +- drivers/net/wireless/intel/iwlwifi/mld/link.c | 13 +- drivers/net/wireless/intel/iwlwifi/mld/tx.c | 15 +- drivers/net/wireless/intel/iwlwifi/mvm/mac-ctxt.c | 27 +- drivers/net/wireless/intel/iwlwifi/mvm/utils.c | 14 +- drivers/net/wireless/microchip/wilc1000/wlan.c | 2 +- drivers/net/wwan/iosm/iosm_ipc_imem.c | 2 + drivers/nvme/host/ioctl.c | 5 +- drivers/nvme/host/pci.c | 40 ++- drivers/phy/apple/atc.c | 27 +- drivers/phy/marvell/phy-mvebu-a3700-utmi.c | 5 +- drivers/phy/qualcomm/phy-qcom-edp.c | 88 +++--- drivers/phy/qualcomm/phy-qcom-qmp-ufs.c | 1 + drivers/phy/qualcomm/phy-qcom-qmp-usbc.c | 2 +- drivers/phy/samsung/phy-exynos5-usbdrd.c | 7 +- drivers/phy/spacemit/phy-k1-usb2.c | 1 - drivers/phy/tegra/xusb-tegra186.c | 33 ++- drivers/phy/tegra/xusb.h | 1 + drivers/pinctrl/mediatek/pinctrl-moore.c | 18 ++ drivers/pinctrl/meson/pinctrl-amlogic-a4.c | 6 +- drivers/pinctrl/qcom/pinctrl-ipq4019.c | 2 +- drivers/pinctrl/qcom/pinctrl-msm.h | 5 + drivers/pinctrl/qcom/pinctrl-qcs615.c | 6 +- drivers/pinctrl/qcom/pinctrl-sm8150.c | 8 +- drivers/pinctrl/renesas/pinctrl-rzg2l.c | 23 +- .../platform/surface/surface_aggregator_registry.c | 2 - drivers/platform/x86/adv_swbutton.c | 6 +- drivers/platform/x86/asus-armoury.c | 16 +- drivers/platform/x86/hp/hp_accel.c | 3 + drivers/platform/x86/intel/hid.c | 6 +- drivers/platform/x86/intel/int1092/intel_sar.c | 7 +- drivers/platform/x86/intel/vbtn.c | 6 +- drivers/platform/x86/uniwill/uniwill-acpi.c | 47 +++- drivers/regulator/tps65219-regulator.c | 135 +++++++--- drivers/s390/cio/chsc.c | 4 +- drivers/s390/cio/chsc_sch.c | 20 +- drivers/s390/cio/scm.c | 2 +- drivers/scsi/isci/host.c | 3 + drivers/scsi/sd.c | 3 +- drivers/spi/spi-amd.c | 2 +- drivers/spi/spi-ep93xx.c | 2 + drivers/spi/spi-mtk-snfi.c | 2 +- drivers/spi/spi-qup.c | 3 + drivers/spi/spi-sprd.c | 3 +- drivers/spi/spi-ti-qspi.c | 1 + drivers/vfio/pci/vfio_pci_dmabuf.c | 6 +- drivers/virt/coco/sev-guest/sev-guest.c | 10 +- fs/9p/v9fs_vfs.h | 13 - fs/9p/vfs_inode.c | 6 +- fs/9p/vfs_inode_dotl.c | 12 +- fs/afs/Makefile | 1 + fs/afs/dir.c | 79 +++--- fs/afs/file.c | 24 +- fs/afs/fsclient.c | 4 +- fs/afs/inode.c | 127 ++------- fs/afs/internal.h | 45 ++-- fs/afs/symlink.c | 278 +++++++++++++++++++ fs/afs/validation.c | 14 +- fs/afs/write.c | 2 +- fs/afs/yfsclient.c | 4 +- fs/btrfs/fs.h | 1 + fs/btrfs/qgroup.c | 81 ++++-- fs/cachefiles/namei.c | 2 + fs/erofs/xattr.c | 10 +- fs/erofs/zdata.c | 15 +- fs/inode.c | 8 +- fs/jfs/namei.c | 2 +- fs/mnt_idmapping.c | 2 + fs/netfs/buffered_read.c | 73 ++--- fs/netfs/buffered_write.c | 174 +++++++----- fs/netfs/direct_read.c | 42 +-- fs/netfs/direct_write.c | 6 +- fs/netfs/internal.h | 3 + fs/netfs/iterator.c | 26 +- fs/netfs/misc.c | 41 ++- fs/netfs/read_collect.c | 19 +- fs/netfs/read_retry.c | 17 +- fs/netfs/read_single.c | 23 +- fs/netfs/write_collect.c | 15 +- fs/netfs/write_issue.c | 51 ++-- fs/netfs/write_retry.c | 6 +- fs/nfsd/nfs4state.c | 7 + fs/nsfs.c | 2 +- fs/orangefs/namei.c | 2 +- fs/smb/client/cifs_spnego.c | 16 ++ fs/smb/client/cifsfs.c | 42 ++- fs/smb/client/cifssmb.c | 3 +- fs/smb/client/file.c | 13 +- fs/smb/client/fs_context.c | 163 ++++++++---- fs/smb/client/inode.c | 14 +- fs/smb/client/netlink.c | 6 +- fs/smb/client/readdir.c | 3 +- fs/smb/client/smb2ops.c | 46 ++-- fs/smb/client/smb2pdu.c | 3 +- fs/smb/client/smb2transport.c | 2 + fs/smb/server/oplock.c | 6 +- fs/smb/server/smb2pdu.c | 15 +- fs/smb/server/smbacl.c | 78 ++++-- fs/smb/server/vfs_cache.c | 120 ++++++--- fs/sysfs/group.c | 2 +- fs/zonefs/super.c | 6 +- include/asm-generic/kprobes.h | 2 +- include/asm-generic/ring_buffer.h | 13 + include/crypto/krb5.h | 9 +- include/drm/drm_device.h | 7 + include/drm/drm_gem.h | 20 +- include/linux/blkdev.h | 10 +- include/linux/cgroup.h | 1 + include/linux/fprobe.h | 5 + include/linux/fwnode.h | 1 + include/linux/generic_pt/iommu.h | 69 ++++- include/linux/gfp_types.h | 10 +- include/linux/highmem.h | 7 +- include/linux/iommu.h | 1 + include/linux/libata.h | 7 +- include/linux/list.h | 37 +++ include/linux/netfilter/x_tables.h | 4 +- include/linux/netfilter_arp/arp_tables.h | 1 - include/linux/netfilter_ipv4/ip_tables.h | 1 - include/linux/netfilter_ipv6/ip6_tables.h | 1 - include/linux/netfs.h | 295 ++++++++++++++++++++- include/linux/soc/airoha/airoha_offload.h | 6 +- include/net/bluetooth/bluetooth.h | 1 + include/net/net_shaper.h | 1 + include/net/netfilter/nf_conntrack_expect.h | 5 +- include/net/netfilter/nf_queue.h | 1 + include/net/tcp.h | 7 +- include/trace/events/btrfs.h | 4 +- include/trace/events/damon.h | 2 +- include/trace/events/netfs.h | 8 + include/trace/events/rxrpc.h | 1 + io_uring/io_uring.c | 9 +- io_uring/net.c | 26 +- io_uring/nop.c | 4 +- io_uring/waitid.c | 1 + kernel/cgroup/rstat.c | 37 ++- kernel/dma/debug.c | 9 +- kernel/dma/mapping.c | 4 - kernel/irq_work.c | 7 + kernel/liveupdate/kexec_handover.c | 2 +- kernel/rcu/srcutree.c | 12 +- kernel/sched/ext.c | 5 +- kernel/trace/bpf_trace.c | 3 +- kernel/trace/fprobe.c | 23 +- kernel/trace/ring_buffer.c | 30 ++- kernel/trace/trace_events_hist.c | 6 +- kernel/trace/tracing_map.c | 17 +- lib/kunit/Kconfig | 5 +- lib/tests/test_kprobes.c | 29 +- mm/damon/sysfs-schemes.c | 1 + mm/memcontrol.c | 6 +- mm/memfd_luo.c | 1 + mm/memory.c | 24 +- mm/memory_hotplug.c | 2 + mm/migrate_device.c | 2 +- mm/page_alloc.c | 8 +- mm/slab_common.c | 2 + mm/slub.c | 1 + net/batman-adv/bat_iv_ogm.c | 82 ++++-- net/batman-adv/bat_v_ogm.c | 59 +++-- net/batman-adv/bridge_loop_avoidance.c | 109 +++++--- net/batman-adv/distributed-arp-table.c | 3 + net/batman-adv/fragmentation.c | 58 +++- net/batman-adv/gateway_client.c | 4 + net/batman-adv/mesh-interface.c | 1 + net/batman-adv/originator.c | 4 +- net/batman-adv/tp_meter.c | 117 +++++--- net/batman-adv/translation-table.c | 55 +++- net/batman-adv/tvlv.c | 28 +- net/batman-adv/tvlv.h | 2 +- net/batman-adv/types.h | 59 +++-- net/bluetooth/af_bluetooth.c | 99 +++++-- net/bluetooth/bnep/core.c | 2 +- net/bluetooth/hci_sync.c | 6 +- net/bluetooth/iso.c | 14 +- net/bluetooth/l2cap_core.c | 2 +- net/bluetooth/l2cap_sock.c | 51 +++- net/bluetooth/mgmt.c | 6 + net/bluetooth/rfcomm/sock.c | 9 +- net/bluetooth/sco.c | 9 +- net/bridge/br_multicast.c | 22 +- net/bridge/netfilter/ebtable_broute.c | 14 +- net/bridge/netfilter/ebtable_filter.c | 14 +- net/bridge/netfilter/ebtable_nat.c | 12 +- net/bridge/netfilter/ebtables.c | 71 +++-- net/core/dev.c | 21 +- net/core/devmem.c | 11 + net/core/gro.c | 3 + net/core/skmsg.c | 9 +- net/ethtool/bitset.c | 8 +- net/ethtool/phy.c | 36 ++- net/hsr/hsr_framereg.c | 4 +- net/ipv4/inet_connection_sock.c | 2 +- net/ipv4/netfilter/arp_tables.c | 53 +--- net/ipv4/netfilter/arptable_filter.c | 27 +- net/ipv4/netfilter/ip_tables.c | 59 +---- net/ipv4/netfilter/iptable_filter.c | 27 +- net/ipv4/netfilter/iptable_mangle.c | 29 +- net/ipv4/netfilter/iptable_nat.c | 6 +- net/ipv4/netfilter/iptable_raw.c | 26 +- net/ipv4/netfilter/iptable_security.c | 27 +- net/ipv4/raw.c | 2 +- net/ipv4/tcp.c | 3 - net/ipv4/tcp_ao.c | 3 +- net/ipv4/tcp_input.c | 15 +- net/ipv4/tcp_ipv4.c | 3 +- net/ipv4/udp_offload.c | 22 +- net/ipv6/exthdrs.c | 21 +- net/ipv6/netfilter/ip6_tables.c | 56 +--- net/ipv6/netfilter/ip6t_hbh.c | 4 + net/ipv6/netfilter/ip6table_filter.c | 26 +- net/ipv6/netfilter/ip6table_mangle.c | 27 +- net/ipv6/netfilter/ip6table_nat.c | 6 +- net/ipv6/netfilter/ip6table_raw.c | 24 +- net/ipv6/netfilter/ip6table_security.c | 27 +- net/ipv6/tcp_ipv6.c | 3 +- net/l2tp/l2tp_core.c | 2 +- net/mac80211/mlme.c | 5 +- net/mac80211/parse.c | 107 +++++--- net/mac80211/rx.c | 6 +- net/mptcp/pm.c | 56 +++- net/mptcp/protocol.c | 25 +- net/netfilter/ipset/ip_set_hash_ipmark.c | 6 +- net/netfilter/ipset/ip_set_hash_ipport.c | 5 +- net/netfilter/ipset/ip_set_hash_ipportip.c | 5 +- net/netfilter/ipset/ip_set_hash_ipportnet.c | 5 +- net/netfilter/nf_conntrack_broadcast.c | 1 + net/netfilter/nf_conntrack_core.c | 7 +- net/netfilter/nf_conntrack_expect.c | 1 + net/netfilter/nf_conntrack_h323_main.c | 12 +- net/netfilter/nf_conntrack_helper.c | 5 + net/netfilter/nf_conntrack_netlink.c | 18 +- net/netfilter/nf_conntrack_sip.c | 2 +- net/netfilter/nf_queue.c | 4 +- net/netfilter/nfnetlink_queue.c | 2 + net/netfilter/nft_inner.c | 3 +- net/netfilter/x_tables.c | 177 ++++++++++--- net/phonet/pep.c | 19 +- net/rxrpc/ar-internal.h | 7 +- net/rxrpc/call_event.c | 22 +- net/rxrpc/call_object.c | 2 + net/rxrpc/insecure.c | 3 - net/rxrpc/recvmsg.c | 68 ++++- net/rxrpc/rxgk.c | 62 +++-- net/rxrpc/rxgk_common.h | 82 ++++++ net/rxrpc/rxkad.c | 86 +++--- net/shaper/shaper.c | 224 +++++++++++----- net/shaper/shaper_nl_gen.c | 7 +- net/shaper/shaper_nl_gen.h | 2 + net/smc/af_smc.c | 3 +- net/smc/smc_tracepoint.h | 2 +- net/tls/tls_sw.c | 46 +++- net/unix/af_unix.c | 11 +- net/vmw_vsock/virtio_transport_common.c | 103 ++++--- net/vmw_vsock/vmci_transport.c | 2 +- net/wireless/scan.c | 3 + scripts/gcc-plugins/gcc-common.h | 4 +- scripts/gdb/linux/mm.py | 6 +- scripts/package/PKGBUILD | 2 +- security/lsm_syscalls.c | 9 +- sound/core/pcm_lib.c | 3 + sound/core/seq/seq_ump_client.c | 22 +- sound/hda/codecs/ca0132.c | 44 ++- sound/hda/codecs/realtek/alc269.c | 12 +- sound/hda/codecs/side-codecs/cs35l41_hda.c | 4 +- sound/hda/codecs/side-codecs/cs35l56_hda.c | 1 + sound/pci/asihpi/hpicmn.c | 6 + sound/soc/amd/acp/acp-sdw-legacy-mach.c | 2 +- sound/soc/codecs/cs-amp-lib.c | 15 +- sound/soc/codecs/cs35l56-sdw.c | 3 +- sound/soc/codecs/fs210x.c | 2 +- sound/soc/codecs/pcm512x.c | 6 +- sound/soc/sdw_utils/soc_sdw_bridge_cs35l56.c | 6 - sound/soc/sdw_utils/soc_sdw_cs42l43.c | 20 +- sound/soc/sdw_utils/soc_sdw_utils.c | 34 ++- sound/soc/soc-utils.c | 1 + sound/soc/sof/amd/acp.c | 2 +- sound/usb/misc/ua101.c | 5 +- sound/usb/mixer_scarlett2.c | 9 +- tools/testing/selftests/mm/hmm-tests.c | 50 ++++ tools/testing/selftests/mm/run_vmtests.sh | 2 +- tools/testing/selftests/net/lib/xdp_native.bpf.c | 55 ++-- tools/testing/selftests/net/mptcp/mptcp_connect.sh | 6 +- tools/testing/selftests/net/mptcp/mptcp_lib.sh | 10 +- tools/testing/selftests/ublk/kublk.c | 11 + 503 files changed, 6399 insertions(+), 2940 deletions(-)

34 minutes

[PATCH 6.12 000/272] 6.12.92-rc1 review

by Greg Kroah-Hartman

This is the start of the stable review cycle for the 6.12.92 release. There are 272 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know. Responses should be made by Sat, 30 May 2026 19:45:52 +0000. Anything received after that time might be too late. The whole patch series can be found in one patch at: https://www.kernel.org/pub/linux/kernel/v6.x/stable-review/patch-6.12.92-rc… or in the git tree and branch at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-6.12.y and the diffstat can be found below. thanks, greg k-h ------------- Pseudo-Shortlog of commits: Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> Linux 6.12.92-rc1 Matthieu Buffet <matthieu(a)buffet.re> landlock: Fix TCP handling of short AF_UNSPEC addresses Tiezhu Yang <yangtiezhu(a)loongson.cn> LoongArch: kprobes: Fix handling of fatal unrecoverable recursions Sabrina Dubroca <sd(a)queasysnail.net> net: gro: don't merge zcopy skbs Nikhil P. Rao <nikhil.rao(a)amd.com> pds_core: ensure null-termination for firmware version strings Aditya Garg <gargaditya(a)linux.microsoft.com> net: mana: validate rx_req_idx to prevent out-of-bounds array access Ratheesh Kannoth <rkannoth(a)marvell.com> octeontx2-af: npc: Fix allmulticast skip logic for LBK and SDP VFs Shuicheng Lin <shuicheng.lin(a)intel.com> drm/xe/oa: Fix exec_queue leak on width check in stream open Richard Fitzgerald <rf(a)opensource.cirrus.com> ASoC: cs35l56: Fix flushing of IRQ work in cs35l56_sdw_remove() Bartosz Golaszewski <bartosz.golaszewski(a)oss.qualcomm.com> gpio: cdev: check if uAPI v2 config attributes are correctly zeroed Andy Shevchenko <andy.shevchenko(a)gmail.com> gpiolib: cdev: use !mem_is_zero() instead of memchr_inv(s, 0, n) Xingwang Xiang <v3rdant.xiang(a)gmail.com> bpf, skmsg: fix verdict sk_data_ready racing with ktls rx Rosen Penev <rosenp(a)gmail.com> net: ag71xx: check error for platform_get_irq Jiajia Liu <liujiajia(a)kylinos.cn> Bluetooth: btmtk: fix urb->setup_packet leak in error paths David Carlier <devnexen(a)gmail.com> tracing: Avoid NULL return from hist_field_name() on truncation Zhang Cen <rollkingzzc(a)gmail.com> ALSA: seq: Serialize UMP output teardown with event_input Johannes Berg <johannes.berg(a)intel.com> wifi: mac80211: fix MLE defragmentation Nikhil P. Rao <nikhil.rao(a)amd.com> pds_core: fix debugfs_lookup dentry leak and error handling Nikhil P. Rao <nikhil.rao(a)amd.com> pds_core: fix error handling in pdsc_devcmd_wait Ido Schimmel <idosch(a)nvidia.com> bridge: mcast: Fix a possible use-after-free when removing a bridge port Petr Machata <petrm(a)nvidia.com> net: bridge: Flush multicast groups when snooping is disabled Guangshuo Li <lgs201920130244(a)gmail.com> RDMA/rtrs: Fix use-after-free in path file creation cleanup Rafael J. Wysocki <rafael.j.wysocki(a)intel.com> platform/x86: intel-vbtn: Check ACPI_HANDLE() against NULL Rafael J. Wysocki <rafael.j.wysocki(a)intel.com> platform/x86: intel-hid: Check ACPI_HANDLE() against NULL Rafael J. Wysocki <rafael.j.wysocki(a)intel.com> platform/x86: hp_accel: Check ACPI_COMPANION() against NULL Rafael J. Wysocki <rafael.j.wysocki(a)intel.com> platform/x86: adv_swbutton: Check ACPI_HANDLE() against NULL Oliver White <oliverjwhite07(a)gmail.com> platform/surface: aggregator_registry: omit battery & AC nodes on Surface Laptop 7 Erni Sri Satya Vennela <ernis(a)linux.microsoft.com> net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer Daniel Golle <daniel(a)makrotopia.org> net: dsa: mt7530: preserve VLAN tags on trapped link-local frames Daniel Golle <daniel(a)makrotopia.org> net: dsa: mt7530: fix FDB entries not aging out with short timeout Viktor Jägersküpper <viktor_jaegerskuepper(a)freenet.de> kbuild: pacman-pkg: make "rc" releases adhere to pacman versioning scheme Ankit Nautiyal <ankit.k.nautiyal(a)intel.com> drm/i915/dp: Fix readback for target_rr in Adaptive Sync SDP Grzegorz Nitka <grzegorz.nitka(a)intel.com> ice: ptp: serialize E825 PHY timer start with PTP lock Matthew Leach <matthew.leach(a)collabora.com> wifi: ath11k: fix peer resolution on rx path when peer_id=0 Mohanram Meenakshisundaram <mohanram.meenakshisundaram(a)intel.com> drm/xe/pf: Fix CFI failure in debugfs access Michal Wajdeczko <michal.wajdeczko(a)intel.com> drm/xe/vf: Fix signature of print functions Shuicheng Lin <shuicheng.lin(a)intel.com> drm/xe/gsc: Fix double-free of managed BO in error path Dmitry Baryshkov <dmitry.baryshkov(a)oss.qualcomm.com> drm/msm/snapshot: fix dumping of the unaligned regions Felix Gu <ustc.gu(a)gmail.com> spi: mtk-snfi: Fix resource leak in mtk_snand_read_page_cache() Boris Burkov <boris(a)bur.io> btrfs: fix squota accounting during enable generation Jens Axboe <axboe(a)kernel.dk> io_uring/net: punt IORING_OP_BIND async if it needs file create Robertus Diawan Chris <robertusdchris(a)gmail.com> ALSA: scarlett2: Add missing error check when initialise Autogain Status Mike Christie <michael.christie(a)oracle.com> scsi: sd: Fix return code handling in sd_spinup_disk() Jeroen Massar <jmassar(a)nvidia.com> net/mlx5: Do not restore destination-less TC rules Chuck Lever <chuck.lever(a)oracle.com> tls: Preserve sk_err across recvmsg() when data has been copied Juergen Gross <jgross(a)suse.com> x86/xen: Fix xen_e820_swap_entry_with_ram() Sven Schuchmann <schuchmann(a)schleissheimer.de> net: phy: DP83TC811: add reading of abilities Jakub Kicinski <kuba(a)kernel.org> net: tls: prevent chain-after-chain in plain text SG Jakub Kicinski <kuba(a)kernel.org> net: tls: fix off-by-one in sg_chain entry count for wrapped sk_msg ring Xiang Mei <xmei5(a)asu.edu> net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot Sayali Patil <sayalip(a)linux.ibm.com> powerpc/time: Remove redundant preempt_disable|enable() calls from arch_irq_work_raise() Mikko Perttunen <mperttunen(a)nvidia.com> drm/msm: Fix iommu_map_sgtable() return value check and avoid WARN Dmitry Baryshkov <dmitry.baryshkov(a)oss.qualcomm.com> drm/msm/dsi: don't dump registers past the mapped region Chenguang Zhao <zhaochenguang(a)kylinos.cn> ethtool: fix ethnl_bitmap32_not_zero() bit interval semantics Xiang Mei <xmei5(a)asu.edu> net/smc: avoid NULL deref of conn->lnk in smc_msg_event tracepoint Zack McKevitt <zachary.mckevitt(a)oss.qualcomm.com> accel/qaic: Add overflow check to remap_pfn_range during mmap Sungwoo Kim <iam(a)sung-woo.kim> block: bio-integrity: Fix null-ptr-deref in bio_integrity_map_user() Keith Busch <kbusch(a)kernel.org> blk-integrity: enable p2p source and destination Keith Busch <kbusch(a)kernel.org> blk-integrity: use simpler alignment check Caleb Sander Mateos <csander(a)purestorage.com> block: drop direction param from bio_integrity_copy_user() Anuj Gupta <anuj20.g(a)samsung.com> block: modify bio_integrity_map_user to accept iov_iter as argument Lukas Bulwahn <lukas.bulwahn(a)redhat.com> HID: quirks: really enable the intended work around for appledisplay Casey Chen <cachen(a)purestorage.com> block: recompute nr_integrity_segments in blk_insert_cloned_request David Carlier <devnexen(a)gmail.com> block: don't overwrite bip_vcnt in bio_integrity_copy_user() Keith Busch <kbusch(a)kernel.org> blk-integrity: remove seed for user mapped buffers Kang Yang <kang.yang(a)oss.qualcomm.com> wifi: ath10k: skip WMI and beacon transmission when device is wedged Nicolas Escande <nico.escande(a)gmail.com> wifi: ath11k: fix error path leak in ath11k_tm_cmd_wmi_ftm() Nicolas Escande <nico.escande(a)gmail.com> wifi: ath11k: fix error path leaks in some WMI WOW calls Ethan Nelson-Moore <enelsonmoore(a)gmail.com> net: ethernet: cs89x0: remove stale CONFIG_MACH_MX31ADS reference Linus Walleij <linusw(a)kernel.org> net: ethernet: cortina: Carry over frag counter Andreas Haarmann-Thiemann <eitschman(a)nebelreich.de> net: ethernet: cortina: Drop half-assembled SKB Linus Walleij <linusw(a)kernel.org> net: ethernet: cortina: Make RX SKB per-port David Howells <dhowells(a)redhat.com> netfs: Fix folio->private handling in netfs_perform_write() Matthew Wilcox (Oracle) <willy(a)infradead.org> netfs: Remove unnecessary references to pages Matthew Wilcox (Oracle) <willy(a)infradead.org> netfs: Fix a few minor bugs in netfs_page_mkwrite() David Howells <dhowells(a)redhat.com> netfs: Fix partial invalidation of streaming-write folio David Howells <dhowells(a)redhat.com> netfs: Fix early put of sink folio in netfs_read_gaps() David Howells <dhowells(a)redhat.com> netfs: Fix write streaming disablement if fd open O_RDWR David Howells <dhowells(a)redhat.com> netfs: Fix potential deadlock in write-through mode David Howells <dhowells(a)redhat.com> netfs: Fix streaming write being overwritten David Howells <dhowells(a)redhat.com> netfs: Defer the emission of trace_netfs_folio() David Howells <dhowells(a)redhat.com> netfs: Fix netfs_invalidate_folio() to clear dirty bit if all changes gone David Howells <dhowells(a)redhat.com> netfs: Fix overrun check in netfs_extract_user_iter() Viacheslav Dubeyko <Slava.Dubeyko(a)ibm.com> netfs: fix VM_BUG_ON_FOLIO() issue in netfs_write_begin() call Julian Braha <julianbraha(a)gmail.com> powerpc: fix dead default for GUEST_STATE_BUFFER_TEST Kuniyuki Iwashima <kuniyu(a)google.com> tcp: Fix out-of-bounds access for twsk in tcp_ao_established_key(). Johannes Thumshirn <johannes.thumshirn(a)wdc.com> zonefs: handle integer overflow in zonefs_fname_to_fno Jiayuan Chen <jiayuan.chen(a)linux.dev> irq_work: Fix use-after-free in irq_work_single() on PREEMPT_RT Zhihao Cheng <chengzhihao1(a)huawei.com> nsfs: fix wrong error code returned for pidns ioctls Ming Lei <tom.leiming(a)gmail.com> ublk: reject max_sectors smaller than PAGE_SECTORS in parameter validation Rosen Penev <rosenp(a)gmail.com> irqchip/ath79-cpu: Remove unused function Chuck Lever <chuck.lever(a)oracle.com> NFSD: Fix infinite loop in layout state revocation Gabor Juhos <j4g8y7(a)gmail.com> phy: marvell: mvebu-a3700-utmi: fix incorrect USB2_PHY_CTRL register access Myeonghun Pak <mhun512(a)gmail.com> net: lan966x: avoid unregistering netdev on register failure Bart Van Assche <bvanassche(a)acm.org> ice: fix locking in ice_dcb_rebuild() Marcin Szycik <marcin.szycik(a)linux.intel.com> ice: fix setting RSS VSI hash for E830 Kuniyuki Iwashima <kuniyu(a)google.com> tcp: Fix imbalanced icsk_accept_queue count. Martin Kaiser <martin(a)kaiser.cx> test_kprobes: clear kprobes between test runs Jianpeng Chang <jianpeng.chang.cn(a)windriver.com> kprobes: skip non-symbol addresses in kprobe_add_ksym_blacklist() Florian Westphal <fw(a)strlen.de> netfilter: bridge: eb_tables: close module init race Florian Westphal <fw(a)strlen.de> netfilter: x_tables: close dangling table module init race Florian Westphal <fw(a)strlen.de> netfilter: ebtables: close dangling table module init race Florian Westphal <fw(a)strlen.de> netfilter: ebtables: move to two-stage removal scheme Florian Westphal <fw(a)strlen.de> netfilter: x_tables: add and use xtables_unregister_table_exit Florian Westphal <fw(a)strlen.de> netfilter: x_tables: add and use xt_unregister_table_pre_exit Pablo Neira Ayuso <pablo(a)netfilter.org> netfilter: Exclude LEGACY TABLES on PREEMPT_RT. Breno Leitao <leitao(a)debian.org> netfilter: Make legacy configs user selectable Florian Westphal <fw(a)strlen.de> netfilter: x_tables: unregister the templates first Filipe Manana <fdmanana(a)suse.com> btrfs: tracepoints: fix sleep while in atomic context in btrfs_sync_file() Shuhao Fu <sfual(a)cse.ust.hk> ALSA: hda: cs35l41: Put ACPI device on missing physical node Shuhao Fu <sfual(a)cse.ust.hk> ALSA: hda: cs35l56: Put ACPI device after setting companion Guenter Roeck <linux(a)roeck-us.net> ARM: integrator: Fix early initialization Sudeep Holla <sudeep.holla(a)kernel.org> firmware: arm_ffa: Fix sched-recv callback partition lookup Sudeep Holla <sudeep.holla(a)kernel.org> firmware: arm_ffa: Align RxTx buffer size before mapping Sudeep Holla <sudeep.holla(a)kernel.org> firmware: arm_ffa: Bound PARTITION_INFO_GET_REGS copies Sudeep Holla <sudeep.holla(a)arm.com> firmware: arm_ffa: Fix big-endian support in __ffa_partition_info_regs_get() Maulik Shah <maulik.shah(a)oss.qualcomm.com> pinctrl: qcom: Fix wakeirq map by removing disconnected irqs for sm8150 David Gow <david(a)davidgow.net> kunit: config: KUNIT_DEBUGFS should depend on DEBUG_FS David Gow <david(a)davidgow.net> kunit: config: Enable KUNIT_DEBUGFS by default Guo Ren (Alibaba DAMO Academy) <guoren(a)kernel.org> riscv: mm: Fixup no5lvl failure when vaddr is invalid Sudeep Holla <sudeep.holla(a)kernel.org> firmware: arm_ffa: Unregister bus notifier on teardown for FF-A v1.0 Sudeep Holla <sudeep.holla(a)arm.com> firmware: arm_ffa: Allow multiple UUIDs per partition to register SRI callback Sudeep Holla <sudeep.holla(a)arm.com> firmware: arm_ffa: Remove unnecessary declaration of ffa_partitions_cleanup() Sudeep Holla <sudeep.holla(a)arm.com> firmware: arm_ffa: Unregister the FF-A devices when cleaning up the partitions Viresh Kumar <viresh.kumar(a)linaro.org> firmware: arm_ffa: Refactor addition of partition information into XArray Sudeep Holla <sudeep.holla(a)kernel.org> firmware: arm_ffa: Fix per-vcpu self notifications handling in workqueue Sudeep Holla <sudeep.holla(a)kernel.org> firmware: arm_ffa: Skip free_pages on RX buffer alloc failure Sudeep Holla <sudeep.holla(a)kernel.org> firmware: arm_ffa: Check for NULL FF-A ID table while driver registration Takashi Iwai <tiwai(a)suse.de> HID: uclogic: Fix regression of input name assignment Biju Das <biju.das.jz(a)bp.renesas.com> pinctrl: renesas: rzg2l: Fix incorrect PUPD register offset for high pins during suspend/resume Marek Vasut <marek.vasut+renesas(a)mailbox.org> ARM: dts: renesas: rskrza1: Drop superfluous cells Marek Vasut <marek.vasut+renesas(a)mailbox.org> ARM: dts: renesas: genmai: Drop superfluous cells Abdurrahman Hussain <abdurrahman(a)nexthop.ai> hwmon: (pmbus/adm1266) reject short block-read responses in the GPIO accessors Abdurrahman Hussain <abdurrahman(a)nexthop.ai> hwmon: (pmbus/adm1266) register the nvmem device after pmbus_do_probe() Abdurrahman Hussain <abdurrahman(a)nexthop.ai> hwmon: (pmbus/adm1266) register the gpio_chip after pmbus_do_probe() Abdurrahman Hussain <abdurrahman(a)nexthop.ai> hwmon: (pmbus/adm1266) don't clobber GPIO bits before PDIO read in get_multiple Abdurrahman Hussain <abdurrahman(a)nexthop.ai> hwmon: (pmbus/adm1266) cap PDIO scan in get_multiple at ADM1266_PDIO_NR Abdurrahman Hussain <abdurrahman(a)nexthop.ai> hwmon: (pmbus/adm1266) bounce blackbox records through a protocol-sized buffer Abdurrahman Hussain <abdurrahman(a)nexthop.ai> hwmon: (pmbus/adm1266) include PEC byte in pmbus_block_xfer read buffer Abdurrahman Hussain <abdurrahman(a)nexthop.ai> hwmon: (pmbus/adm1266) reject implausible blackbox record_count Abdurrahman Hussain <abdurrahman(a)nexthop.ai> hwmon: (pmbus/adm1266) seed timestamp from the real-time clock Sven Eckelmann <sven(a)narfation.org> batman-adv: tt: fix negative tt_buff_len Sven Eckelmann <sven(a)narfation.org> batman-adv: tt: fix negative last_changeset_len Sven Eckelmann <sven(a)narfation.org> batman-adv: tp_meter: fix race condition in send error reporting Sven Eckelmann <sven(a)narfation.org> batman-adv: tp_meter: fix tp_vars reference leak in receiver shutdown Sven Eckelmann <sven(a)narfation.org> batman-adv: tp_meter: avoid use of uninit sender vars Sven Eckelmann <sven(a)narfation.org> batman-adv: bla: fix report_work leak on backbone_gw purge Sven Eckelmann <sven(a)narfation.org> batman-adv: frag: disallow unicast fragment in fragment Luxiao Xu <rakukuip(a)gmail.com> batman-adv: fix tp_meter counter underflow during shutdown Ruide Cao <caoruide123(a)gmail.com> batman-adv: fix fragment reassembly length accounting Sven Eckelmann <sven(a)narfation.org> batman-adv: dat: handle forward allocation error Ruijie Li <ruijieli51(a)gmail.com> batman-adv: clear current gateway during teardown Sven Eckelmann <sven(a)narfation.org> batman-adv: mcast: fix use-after-free in orig_node RCU release Harry Wentland <harry.wentland(a)amd.com> drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async Harry Wentland <harry.wentland(a)amd.com> drm/amd/display: Validate GPIO pin LUT table size before iterating Harry Wentland <harry.wentland(a)amd.com> drm/amd/display: Fix integer overflow in bios_get_image() Osama Abdelkader <osama.abdelkader(a)gmail.com> drm/bridge: megachips: remove bridge when irq request fails Julien Chauveau <chauveau.julien(a)gmail.com> drm/bridge: it66121: acquire reset GPIO in probe Alan Liu <haoping.liu(a)amd.com> drm/amdgpu/vpe: Force collaborate sync after TRAP Deepanshu Kartikey <kartikey406(a)gmail.com> drm/virtio: use uninterruptible resv lock for plane updates Bartosz Golaszewski <bartosz.golaszewski(a)oss.qualcomm.com> device property: set fwnode->secondary to NULL in fwnode_init() Huacai Chen <chenhuacai(a)kernel.org> LoongArch: Remove unused code to avoid build warning Michael Bommarito <michael.bommarito(a)gmail.com> RDMA/siw: Reject MPA FPDU length underflow before signed receive math Johan Hovold <johan(a)kernel.org> spi: ti-qspi: fix use-after-free after DMA setup failure Johan Hovold <johan(a)kernel.org> spi: sprd: fix error pointer deref after DMA setup failure Johan Hovold <johan(a)kernel.org> spi: ep93xx: fix error pointer deref after DMA setup failure Michael Bommarito <michael.bommarito(a)gmail.com> scsi: isci: Fix use-after-free in device removal path Wayne Chang <waynec(a)nvidia.com> phy: tegra: xusb: Fix per-pad high-speed termination calibration Johan Hovold <johan(a)kernel.org> spi: qup: fix error pointer deref after DMA setup failure Osama Abdelkader <osama.abdelkader(a)gmail.com> drm/bridge: chipone-icn6211: use devm_drm_bridge_add in i2c probe Osama Abdelkader <osama.abdelkader(a)gmail.com> riscv: kvm: return SBI_ERR_FAILURE for pmu_snapshot_set_shmem() when OOM Michael Bommarito <michael.bommarito(a)gmail.com> KVM: arm64: vgic: Free private_irqs when init fails after allocation Michael Bommarito <michael.bommarito(a)gmail.com> KVM: arm64: vgic-its: Reject restored DTE with out-of-range num_eventid_bits Vladimir Murzin <vladimir.murzin(a)arm.com> arm64: probes: Handle probes on hinted conditional branch instructions Masami Hiramatsu (Google) <mhiramat(a)kernel.org> tracing: Do not call map->ops->elt_free() if elt_alloc() fails Zhihao Cheng <chengzhihao1(a)huawei.com> cifs: Fix busy dentry used after unmounting Michael Bommarito <michael.bommarito(a)gmail.com> wifi: mac80211: consume only present negotiated TTLM maps Jann Horn <jannh(a)google.com> af_unix: Fix UAF read of tail->len in unix_stream_data_wait() John Walker <johnwalker0(a)gmail.com> wifi: cfg80211: advance loop vars in cfg80211_merge_profile() Grzegorz Nitka <grzegorz.nitka(a)intel.com> ice: restore PTP Rx timestamp config after ethtool set-channels Marcin Szycik <marcin.szycik(a)intel.com> ice: fix setting promisc mode while adding VID filter Sam Daly <sam(a)samdaly.ie> octeontx2-af: CGX: add bounds check to cgx_speed_mbps index Stephen Smalley <stephen.smalley.work(a)gmail.com> lsm: hold cred_guard_mutex for lsm_set_self_attr() Ilya Dryomov <idryomov(a)gmail.com> rbd: eliminate a race in lock_dwork draining on unmap Michael Bommarito <michael.bommarito(a)gmail.com> ixgbevf: fix use-after-free in VEPA multicast source pruning Michael Bommarito <michael.bommarito(a)gmail.com> ipv4: raw: reject IP_HDRINCL packets with ihl < 5 Kyle Farnung <kfarnung(a)gmail.com> wifi: ath11k: clear shared SRNG pointer state on restart Stefano Garzarella <sgarzare(a)redhat.com> vsock/virtio: reset connection on receiving queue overflow Minh Nguyen <minhnguyen.080505(a)gmail.com> vsock/vmci: fix UAF when peer resets connection during handshake Justin Iurman <justin.iurman(a)gmail.com> ipv6: ioam: add NULL check for idev in ipv6_hop_ioam() Steven Rostedt <rostedt(a)goodmis.org> ring-buffer: Fix reporting of missed events in iterator Dawei Feng <dawei.feng(a)seu.edu.cn> qed: fix double free in qed_cxt_tables_alloc() Michael Bommarito <michael.bommarito(a)gmail.com> l2tp: use list_del_rcu in l2tp_session_unhash Konstantin Komarov <almaz.alexandrovich(a)paragon-software.com> fs/ntfs3: handle attr_set_size() errors when truncating files Guopeng Zhang <zhangguopeng(a)kylinos.cn> cgroup/cpuset: Reset DL migration state on can_attach() failure Tejun Heo <tj(a)kernel.org> sched_ext: Avoid UAF in scx_root_enable_workfn() init failure path Samuele Mariotti <smariotti(a)disroot.org> sched_ext: Fix missing warning in scx_set_task_state() default case Yizhou Zhao <zhaoyz24(a)mails.tsinghua.edu.cn> netfilter: nft_inner: Fix IPv6 inner_thoff desync Nan Li <tonanli66(a)gmail.com> netfilter: ipset: stop hash:* range iteration at end Haoze Xie <royenheart(a)gmail.com> netfilter: nf_queue: hold bridge skb->dev while queued Zhengchuan Liang <zcliangcn(a)gmail.com> netfilter: ip6t_hbh: reject oversized option lists Jonas Jelonek <jelonek.jonas(a)gmail.com> net: pse-pd: fix sign on -ENOENT check in of_load_pse_pis() Michael Bommarito <michael.bommarito(a)gmail.com> net: ifb: report ethtool stats over num_tx_queues Nicolai Buchwitz <nb(a)tipi-net.de> net: bcmgenet: keep RBUF EEE/PM disabled Zijing Yin <yzjaurora(a)gmail.com> phonet/pep: disable BH around forwarded sk_receive_skb() Jiexun Wang <wangjiexun2025(a)gmail.com> Bluetooth: serialize accept_q access Michael Bommarito <michael.bommarito(a)gmail.com> Bluetooth: MGMT: validate Add Extended Advertising Data length Michael Bommarito <michael.bommarito(a)gmail.com> Bluetooth: L2CAP: ecred_reconfigure: send packed pdu, not stack pointer Mingyu Wang <25181214217(a)stu.xidian.edu.cn> Bluetooth: hci_uart: fix UAFs and race conditions in close and init paths Jann Horn <jannh(a)google.com> Bluetooth: bnep: Fix UAF read of dev->name David Carlier <devnexen(a)gmail.com> Bluetooth: ISO: drop ISO_END frames received without prior ISO_START Safa Karakuş <safa.karakus(a)secunnix.com> Bluetooth: fix UAF in l2cap_sock_cleanup_listen() vs l2cap_conn_del() Abdun Nihaal <nihaal(a)cse.iitm.ac.in> net: wwan: iosm: fix potential memory leaks in ipc_imem_init() Luiz Capitulino <luizcap(a)redhat.com> selftests/mm: run_vmtests.sh: fix destructive tests invocation Muchun Song <muchun.song(a)linux.dev> mm/memory_hotplug: fix memory block reference leak on remove Justin Iurman <justin.iurman(a)gmail.com> ipv6: ioam: refresh hdr pointer before ioam6_event() Muchun Song <muchun.song(a)linux.dev> drivers/base/memory: fix memory block reference leak in poison accounting Heechan Kang <gganji11(a)naver.com> io_uring/waitid: clear waitid info before copying it to userspace Ard Biesheuvel <ardb(a)kernel.org> efi: Allocate runtime workqueue before ACPI init Takashi Iwai <tiwai(a)suse.de> ALSA: asihpi: Fix potential OOB array access at reading cache Takashi Iwai <tiwai(a)suse.de> ALSA: pcm: Don't setup bogus iov_iter for silencing Cássio Gabriel <cassiogabrielcontato(a)gmail.com> ALSA: ua101: Reject too-short USB descriptors Abdurrahman Hussain <abdurrahman(a)nexthop.ai> hwmon: (pmbus/adm1266) widen blackbox-info buffer to I2C_SMBUS_BLOCK_MAX ChenXiaoSong <chenxiaosong(a)kylinos.cn> smb/server: promote S_DEL_ON_CLS to S_DEL_PENDING when close Jeremy Erazo <mendozayt13(a)gmail.com> smb: client: use data_len for SMB2 READ encrypted folioq copy Henrique Carvalho <henrique.carvalho(a)suse.com> smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() Michael Bommarito <michael.bommarito(a)gmail.com> smb: client: require net admin for CIFS SWN netlink Junyi Liu <moss80199(a)gmail.com> ksmbd: validate SID in parent security descriptor during ACL inheritance Ferry Meng <mengferry(a)linux.alibaba.com> ksmbd: fix SID memory leak in set_posix_acl_entries_dacl() on overflow Jeremy Laratro <research(a)aradex.io> ksmbd: fix null pointer dereference in compare_guid_key() SeongJae Park <sj(a)kernel.org> mm/damon/sysfs-schemes: call missing mem_cgroup_iter_break() Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> sysfs: don't remove existing directory on update failure Adrian Hunter <adrian.hunter(a)intel.com> i3c: mipi-i3c-hci: Correct RING_CTRL_ABORT handling in DMA dequeue Lukas Bulwahn <lukas.bulwahn(a)redhat.com> arm64: Kconfig: Remove selecting replaced HAVE_FUNCTION_GRAPH_RETVAL Guenter Roeck <linux(a)roeck-us.net> hwmon: (pmbus/core) Protect regulator operations with mutex Pu Lehui <pulehui(a)huawei.com> riscv: fgraph: Fix stack layout to match __arch_ftrace_regs argument of ftrace_return_to_handler Pu Lehui <pulehui(a)huawei.com> riscv: fgraph: Select HAVE_FUNCTION_GRAPH_TRACER depends on HAVE_DYNAMIC_FTRACE_WITH_ARGS Lu Baolu <baolu.lu(a)linux.intel.com> iommu/vt-d: Draining PRQ in sva unbind path when FPD bit set Jiri Olsa <jolsa(a)kernel.org> x86/fgraph: Fix return_to_handler regs.rsp value Jianbo Liu <jianbol(a)nvidia.com> net/mlx5e: Use ip6_dst_lookup instead of ipv6_dst_lookup_flow for MAC init Jianbo Liu <jianbol(a)nvidia.com> net/mlx5e: Trigger neighbor resolution for unresolved destinations Feng Yang <yangfeng(a)kylinos.cn> tracing: Fix the bug where bpf_get_stackid returns -EFAULT on the ARM64 Sasha Levin <sashal(a)kernel.org> Revert "ice: Remove jumbo_remove step from TX path" Sasha Levin <sashal(a)kernel.org> Revert "ice: fix double-free of tx_buf skb" Ian Rogers <irogers(a)google.com> perf parse-events: Expose/rename config_term_name Niklas Cassel <cassel(a)kernel.org> ata: libata-scsi: do not needlessly defer commands when using PMP with FBS Niklas Cassel <cassel(a)kernel.org> ata: libata-scsi: do not use the deferred QC feature on PMPs with CBS Niklas Cassel <cassel(a)kernel.org> ata: libata-scsi: do not use the deferred QC feature for ATA_DEFER_PORT Niklas Cassel <cassel(a)kernel.org> ata: libata-scsi: improve readability of ata_scsi_qc_issue() Asim Viladi Oglu Manizada <manizada(a)pm.me> smb: client: reject userspace cifs.spnego descriptions Alessio Belle <alessio.belle(a)imgtec.com> drm/imagination: Synchronize interrupts before suspending the GPU Kuniyuki Iwashima <kuniyu(a)google.com> af_unix: Give up GC if MSG_PEEK intervened. DaeMyung Kang <charsyam(a)gmail.com> ksmbd: close durable scavenger races against m_fp_list lookups Peter Zijlstra (Intel) <peterz(a)infradead.org> sched/deadline: Stop dl_server before CPU goes offline Peter Zijlstra <peterz(a)infradead.org> sched/deadline: Fix dl_server behaviour Peter Zijlstra <peterz(a)infradead.org> sched/deadline: Fix dl_server getting stuck Juri Lelli <juri.lelli(a)redhat.com> sched/deadline: Always stop dl-server before changing parameters Huacai Chen <chenhuacai(a)kernel.org> sched/deadline: Fix dl_server_stopped() Peter Zijlstra <peterz(a)infradead.org> sched/deadline: Less agressive dl_server handling Sasha Levin <sashal(a)kernel.org> Revert "x86/vdso: Fix output operand size of RDPID" Vladimir Yakovlev <vovchkir(a)gmail.com> spi: spi-dw-dma: fix print error log when wait finish transaction Xiang Mei <xmei5(a)asu.edu> bridge: mrp: reject zero test interval to avoid OOM panic Sasha Levin <sashal(a)kernel.org> Revert "perf tool_pmu: Factor tool events into their own PMU" Sasha Levin <sashal(a)kernel.org> Revert "perf python: Add parse_events function" Sasha Levin <sashal(a)kernel.org> Revert "perf tool_pmu: Fix aggregation on duration_time" Sasha Levin <sashal(a)kernel.org> Revert "perf cgroup: Update metric leader in evlist__expand_cgroup" Pengpeng Hou <pengpeng(a)iscas.ac.cn> s390/debug: Reject zero-length input before trimming a newline Gustavo Sousa <gustavo.sousa(a)intel.com> drm/xe/hdcp: Add NULL check for media_gt in intel_hdcp_gsc_check_status() Namjae Jeon <linkinjeon(a)kernel.org> ksmbd: validate owner of durable handle on reconnect Matthieu Baerts (NGI0) <matttbe(a)kernel.org> mptcp: pm: ADD_ADDR rtx: free sk if last Matthieu Baerts (NGI0) <matttbe(a)kernel.org> mptcp: pm: ADD_ADDR rtx: always decrease sk refcount Matthieu Baerts (NGI0) <matttbe(a)kernel.org> mptcp: pm: ADD_ADDR rtx: allow ID 0 Gang Yan <yangang(a)kylinos.cn> mptcp: sync the msk->sndbuf at accept() time ------------- Diffstat: Makefile | 4 +- arch/arm/boot/dts/renesas/r7s72100-genmai.dts | 3 - arch/arm/boot/dts/renesas/r7s72100-rskrza1.dts | 2 - arch/arm/mach-versatile/integrator_cp.c | 13 +- arch/arm64/Kconfig | 1 - arch/arm64/include/asm/ftrace.h | 1 + arch/arm64/include/asm/insn.h | 2 +- arch/arm64/kvm/arm.c | 4 +- arch/arm64/kvm/vgic/vgic-its.c | 4 + arch/loongarch/kernel/kprobes.c | 4 +- arch/loongarch/mm/init.c | 4 - arch/powerpc/Kconfig.debug | 3 +- arch/powerpc/kernel/time.c | 6 +- arch/riscv/Kconfig | 2 +- arch/riscv/kernel/mcount.S | 24 +- arch/riscv/kvm/vcpu_pmu.c | 6 +- arch/riscv/mm/init.c | 25 ++ arch/s390/kernel/debug.c | 3 + arch/x86/include/asm/segment.h | 8 +- arch/x86/kernel/ftrace_64.S | 5 +- arch/x86/xen/setup.c | 2 +- block/bio-integrity.c | 76 ++-- block/blk-integrity.c | 12 +- block/blk-mq.c | 19 + drivers/accel/qaic/qaic_data.c | 23 +- drivers/ata/libata-core.c | 9 +- drivers/ata/libata-eh.c | 8 +- drivers/ata/libata-pmp.c | 18 +- drivers/ata/libata-scsi.c | 102 ++--- drivers/ata/sata_sil24.c | 6 +- drivers/base/memory.c | 8 +- drivers/block/rbd.c | 20 +- drivers/block/ublk_drv.c | 3 + drivers/bluetooth/btmtk.c | 2 + drivers/bluetooth/hci_ldisc.c | 48 ++- drivers/firmware/arm_ffa/bus.c | 7 +- drivers/firmware/arm_ffa/driver.c | 292 +++++++++++---- drivers/firmware/efi/efi.c | 28 +- drivers/gpio/gpiolib-cdev.c | 21 +- drivers/gpu/drm/amd/amdgpu/amdgpu_vpe.c | 7 +- drivers/gpu/drm/amd/display/dc/bios/bios_parser2.c | 9 + .../drm/amd/display/dc/bios/bios_parser_helper.c | 9 +- drivers/gpu/drm/amd/display/dc/core/dc.c | 6 +- drivers/gpu/drm/bridge/chipone-icn6211.c | 4 +- drivers/gpu/drm/bridge/ite-it66121.c | 5 + .../drm/bridge/megachips-stdpxxxx-ge-b850v3-fw.c | 16 +- drivers/gpu/drm/i915/display/intel_dp.c | 2 +- drivers/gpu/drm/imagination/pvr_power.c | 11 +- drivers/gpu/drm/msm/disp/msm_disp_snapshot_util.c | 24 +- drivers/gpu/drm/msm/dsi/dsi_host.c | 1 + drivers/gpu/drm/msm/msm_iommu.c | 5 +- drivers/gpu/drm/virtio/virtgpu_drv.h | 1 + drivers/gpu/drm/virtio/virtgpu_gem.c | 17 + drivers/gpu/drm/virtio/virtgpu_plane.c | 10 +- drivers/gpu/drm/xe/display/xe_hdcp_gsc.c | 12 +- drivers/gpu/drm/xe/xe_gsc.c | 5 +- drivers/gpu/drm/xe/xe_gt_sriov_pf_monitor.c | 6 +- drivers/gpu/drm/xe/xe_gt_sriov_pf_monitor.h | 2 +- drivers/gpu/drm/xe/xe_gt_sriov_vf.c | 24 +- drivers/gpu/drm/xe/xe_gt_sriov_vf.h | 6 +- drivers/gpu/drm/xe/xe_oa.c | 6 +- drivers/hid/hid-quirks.c | 2 +- drivers/hid/hid-uclogic-core.c | 4 +- drivers/hwmon/pmbus/adm1266.c | 32 +- drivers/hwmon/pmbus/pmbus_core.c | 117 ++++-- drivers/i3c/master/mipi-i3c-hci/dma.c | 25 +- drivers/infiniband/sw/siw/siw_qp_rx.c | 15 + drivers/infiniband/ulp/rtrs/rtrs-srv-sysfs.c | 2 +- drivers/iommu/intel/pasid.c | 22 +- drivers/iommu/intel/pasid.h | 6 + drivers/irqchip/irq-ath79-cpu.c | 7 - drivers/net/dsa/mt7530.c | 47 ++- drivers/net/ethernet/amd/pds_core/debugfs.c | 7 +- drivers/net/ethernet/amd/pds_core/dev.c | 11 +- drivers/net/ethernet/amd/pds_core/devlink.c | 6 +- drivers/net/ethernet/atheros/ag71xx.c | 3 + drivers/net/ethernet/broadcom/genet/bcmgenet.c | 9 +- drivers/net/ethernet/cirrus/cs89x0.c | 2 - drivers/net/ethernet/cortina/gemini.c | 21 +- drivers/net/ethernet/intel/ice/ice_dcb_lib.c | 4 +- drivers/net/ethernet/intel/ice/ice_main.c | 10 +- drivers/net/ethernet/intel/ice/ice_ptp_hw.c | 15 +- drivers/net/ethernet/intel/ice/ice_txrx.c | 7 +- drivers/net/ethernet/intel/ixgbevf/ixgbevf_main.c | 1 + drivers/net/ethernet/marvell/octeontx2/af/cgx.c | 7 +- .../net/ethernet/marvell/octeontx2/af/rvu_npc.c | 2 +- .../ethernet/mellanox/mlx5/core/en_accel/ipsec.c | 8 +- .../net/ethernet/mellanox/mlx5/core/esw/ipsec_fs.c | 3 +- .../net/ethernet/microchip/lan966x/lan966x_main.c | 8 +- drivers/net/ethernet/microsoft/mana/hw_channel.c | 35 +- drivers/net/ethernet/qlogic/qed/qed_cxt.c | 2 + drivers/net/ifb.c | 11 +- drivers/net/phy/dp83tc811.c | 1 + drivers/net/pse-pd/pse_core.c | 2 +- drivers/net/wireless/ath/ath10k/wmi.c | 17 +- drivers/net/wireless/ath/ath11k/dp_rx.c | 3 +- drivers/net/wireless/ath/ath11k/hal.c | 14 +- drivers/net/wireless/ath/ath11k/hal_rx.c | 5 +- drivers/net/wireless/ath/ath11k/testmode.c | 1 + drivers/net/wireless/ath/ath11k/wmi.c | 19 +- drivers/net/wwan/iosm/iosm_ipc_imem.c | 2 + drivers/nvme/host/ioctl.c | 17 +- drivers/phy/marvell/phy-mvebu-a3700-utmi.c | 5 +- drivers/phy/tegra/xusb-tegra186.c | 33 +- drivers/phy/tegra/xusb.h | 1 + drivers/pinctrl/qcom/pinctrl-sm8150.c | 8 +- drivers/pinctrl/renesas/pinctrl-rzg2l.c | 2 +- .../platform/surface/surface_aggregator_registry.c | 2 - drivers/platform/x86/adv_swbutton.c | 6 +- drivers/platform/x86/hp/hp_accel.c | 3 + drivers/platform/x86/intel/hid.c | 6 +- drivers/platform/x86/intel/vbtn.c | 6 +- drivers/scsi/isci/host.c | 3 + drivers/scsi/sd.c | 3 +- drivers/spi/spi-dw-dma.c | 2 +- drivers/spi/spi-ep93xx.c | 2 + drivers/spi/spi-mtk-snfi.c | 2 +- drivers/spi/spi-qup.c | 3 + drivers/spi/spi-sprd.c | 3 +- drivers/spi/spi-ti-qspi.c | 1 + fs/btrfs/fs.h | 1 + fs/btrfs/qgroup.c | 31 +- fs/netfs/buffered_read.c | 14 +- fs/netfs/buffered_write.c | 213 +++++++---- fs/netfs/iterator.c | 26 +- fs/netfs/misc.c | 8 +- fs/netfs/read_retry.c | 11 +- fs/netfs/write_issue.c | 41 +- fs/nfsd/nfs4state.c | 7 + fs/nsfs.c | 2 +- fs/ntfs3/file.c | 12 +- fs/smb/client/cifs_spnego.c | 16 + fs/smb/client/cifsfs.c | 2 + fs/smb/client/netlink.c | 6 +- fs/smb/client/smb2ops.c | 4 +- fs/smb/client/smb2transport.c | 2 + fs/smb/server/mgmt/user_session.c | 7 +- fs/smb/server/oplock.c | 13 +- fs/smb/server/oplock.h | 1 + fs/smb/server/smb2pdu.c | 3 +- fs/smb/server/smbacl.c | 78 +++- fs/smb/server/vfs_cache.c | 205 ++++++++-- fs/smb/server/vfs_cache.h | 12 +- fs/sysfs/group.c | 2 +- fs/zonefs/super.c | 6 +- include/asm-generic/kprobes.h | 2 +- include/linux/arm_ffa.h | 3 + include/linux/bio-integrity.h | 5 +- include/linux/blk-integrity.h | 5 +- include/linux/fwnode.h | 1 + include/linux/libata.h | 7 +- include/linux/netfilter/x_tables.h | 3 +- include/linux/netfilter_arp/arp_tables.h | 1 - include/linux/netfilter_ipv4/ip_tables.h | 1 - include/linux/netfilter_ipv6/ip6_tables.h | 1 - include/linux/sched.h | 1 - include/net/af_unix.h | 1 + include/net/bluetooth/bluetooth.h | 1 + include/net/netfilter/nf_queue.h | 1 + include/trace/events/btrfs.h | 4 +- include/trace/events/netfs.h | 8 + io_uring/net.c | 26 +- io_uring/waitid.c | 1 + kernel/cgroup/cpuset.c | 8 +- kernel/irq_work.c | 7 + kernel/sched/core.c | 2 + kernel/sched/deadline.c | 19 +- kernel/sched/debug.c | 6 +- kernel/sched/ext.c | 5 +- kernel/sched/fair.c | 16 +- kernel/sched/sched.h | 37 +- kernel/trace/ring_buffer.c | 8 +- kernel/trace/trace_events_hist.c | 6 +- kernel/trace/tracing_map.c | 17 +- lib/kunit/Kconfig | 5 +- lib/test_kprobes.c | 29 +- mm/damon/sysfs-schemes.c | 1 + mm/memory_hotplug.c | 2 + net/batman-adv/bridge_loop_avoidance.c | 54 ++- net/batman-adv/distributed-arp-table.c | 3 + net/batman-adv/fragmentation.c | 58 ++- net/batman-adv/gateway_client.c | 4 + net/batman-adv/originator.c | 4 +- net/batman-adv/tp_meter.c | 64 +++- net/batman-adv/types.h | 17 +- net/bluetooth/af_bluetooth.c | 99 +++-- net/bluetooth/bnep/core.c | 2 +- net/bluetooth/iso.c | 14 +- net/bluetooth/l2cap_core.c | 2 +- net/bluetooth/l2cap_sock.c | 51 ++- net/bluetooth/mgmt.c | 6 + net/bluetooth/rfcomm/sock.c | 9 +- net/bluetooth/sco.c | 9 +- net/bridge/br_mrp_netlink.c | 4 +- net/bridge/br_multicast.c | 27 +- net/bridge/netfilter/Kconfig | 14 +- net/bridge/netfilter/ebtable_broute.c | 14 +- net/bridge/netfilter/ebtable_filter.c | 14 +- net/bridge/netfilter/ebtable_nat.c | 12 +- net/bridge/netfilter/ebtables.c | 71 ++-- net/core/gro.c | 3 + net/core/skmsg.c | 9 +- net/ethtool/bitset.c | 8 +- net/ipv4/inet_connection_sock.c | 2 +- net/ipv4/netfilter/Kconfig | 32 +- net/ipv4/netfilter/arp_tables.c | 18 +- net/ipv4/netfilter/arptable_filter.c | 27 +- net/ipv4/netfilter/ip_tables.c | 18 +- net/ipv4/netfilter/iptable_filter.c | 27 +- net/ipv4/netfilter/iptable_mangle.c | 29 +- net/ipv4/netfilter/iptable_nat.c | 6 +- net/ipv4/netfilter/iptable_raw.c | 26 +- net/ipv4/netfilter/iptable_security.c | 27 +- net/ipv4/raw.c | 2 +- net/ipv4/tcp_ao.c | 3 +- net/ipv6/exthdrs.c | 21 +- net/ipv6/netfilter/Kconfig | 22 +- net/ipv6/netfilter/ip6_tables.c | 18 +- net/ipv6/netfilter/ip6t_hbh.c | 4 + net/ipv6/netfilter/ip6table_filter.c | 26 +- net/ipv6/netfilter/ip6table_mangle.c | 27 +- net/ipv6/netfilter/ip6table_nat.c | 6 +- net/ipv6/netfilter/ip6table_raw.c | 24 +- net/ipv6/netfilter/ip6table_security.c | 27 +- net/l2tp/l2tp_core.c | 2 +- net/mac80211/mlme.c | 2 +- net/mac80211/parse.c | 71 ++-- net/mptcp/pm_netlink.c | 35 +- net/mptcp/protocol.c | 3 +- net/netfilter/Kconfig | 10 + net/netfilter/ipset/ip_set_hash_ipmark.c | 6 +- net/netfilter/ipset/ip_set_hash_ipport.c | 5 +- net/netfilter/ipset/ip_set_hash_ipportip.c | 5 +- net/netfilter/ipset/ip_set_hash_ipportnet.c | 5 +- net/netfilter/nf_queue.c | 4 +- net/netfilter/nfnetlink_queue.c | 2 + net/netfilter/nft_inner.c | 1 - net/netfilter/x_tables.c | 116 +++++- net/phonet/pep.c | 19 +- net/smc/af_smc.c | 3 +- net/smc/smc_tracepoint.h | 2 +- net/tls/tls_sw.c | 46 ++- net/unix/af_unix.c | 13 +- net/unix/garbage.c | 79 ++-- net/vmw_vsock/virtio_transport_common.c | 20 +- net/vmw_vsock/vmci_transport.c | 2 +- net/wireless/scan.c | 3 + scripts/package/PKGBUILD | 2 +- security/landlock/net.c | 118 +++--- security/lsm_syscalls.c | 9 +- sound/core/pcm_lib.c | 3 + sound/core/seq/seq_ump_client.c | 22 +- sound/pci/asihpi/hpicmn.c | 6 + sound/pci/hda/cs35l41_hda.c | 4 +- sound/pci/hda/cs35l56_hda.c | 1 + sound/soc/codecs/cs35l56-sdw.c | 3 +- sound/usb/misc/ua101.c | 5 +- sound/usb/mixer_scarlett2.c | 2 + tools/perf/builtin-list.c | 13 +- tools/perf/builtin-stat.c | 1 - tools/perf/util/Build | 1 - tools/perf/util/cgroup.c | 30 +- tools/perf/util/evsel.c | 291 ++++++++++++-- tools/perf/util/evsel.h | 30 +- tools/perf/util/metricgroup.c | 1 - tools/perf/util/parse-events.c | 59 ++- tools/perf/util/parse-events.h | 5 + tools/perf/util/parse-events.l | 11 + tools/perf/util/parse-events.y | 16 + tools/perf/util/pmu.c | 20 +- tools/perf/util/pmu.h | 2 - tools/perf/util/pmus.c | 9 - tools/perf/util/print-events.c | 36 +- tools/perf/util/print-events.h | 1 + tools/perf/util/python.c | 61 --- tools/perf/util/stat-display.c | 6 +- tools/perf/util/stat-shadow.c | 1 - tools/perf/util/tool_pmu.c | 417 --------------------- tools/perf/util/tool_pmu.h | 51 --- tools/testing/selftests/mm/run_vmtests.sh | 2 +- 280 files changed, 3293 insertions(+), 1966 deletions(-)

1 hour, 20 minutes

[PATCH 6.18 000/377] 6.18.34-rc1 review

by Greg Kroah-Hartman

This is the start of the stable review cycle for the 6.18.34 release. There are 377 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know. Responses should be made by Sat, 30 May 2026 19:45:50 +0000. Anything received after that time might be too late. The whole patch series can be found in one patch at: https://www.kernel.org/pub/linux/kernel/v6.x/stable-review/patch-6.18.34-rc… or in the git tree and branch at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-6.18.y and the diffstat can be found below. thanks, greg k-h ------------- Pseudo-Shortlog of commits: Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> Linux 6.18.34-rc1 Tiezhu Yang <yangtiezhu(a)loongson.cn> LoongArch: kprobes: Fix handling of fatal unrecoverable recursions Junyi Liu <moss80199(a)gmail.com> ksmbd: fix durable reconnect error path file lifetime Alexander A. Klimov <grandmaster(a)al2klimov.de> io_uring/nop: pass all errors to userspace Sabrina Dubroca <sd(a)queasysnail.net> net: gro: don't merge zcopy skbs Nikhil P. Rao <nikhil.rao(a)amd.com> pds_core: ensure null-termination for firmware version strings Lorenzo Bianconi <lorenzo(a)kernel.org> net: airoha: Disable GDM2 forwarding before configuring GDM2 loopback Weiming Shi <bestswngs(a)gmail.com> tap: fix stack info leak in tap_ioctl() SIOCGIFHWADDR Aditya Garg <gargaditya(a)linux.microsoft.com> net: mana: validate rx_req_idx to prevent out-of-bounds array access Ratheesh Kannoth <rkannoth(a)marvell.com> octeontx2-af: npc: Fix allmulticast skip logic for LBK and SDP VFs Nimrod Oren <noren(a)nvidia.com> selftests: net: Fix checksums in xdp_native Shuicheng Lin <shuicheng.lin(a)intel.com> drm/xe/oa: Fix exec_queue leak on width check in stream open Richard Fitzgerald <rf(a)opensource.cirrus.com> ASoC: cs35l56: Fix flushing of IRQ work in cs35l56_sdw_remove() Bartosz Golaszewski <bartosz.golaszewski(a)oss.qualcomm.com> gpio: aggregator: lock device when calling device_is_bound() Bartosz Golaszewski <bartosz.golaszewski(a)oss.qualcomm.com> gpio: aggregator: remove the software node when deactivating the aggregator Bartosz Golaszewski <bartosz.golaszewski(a)oss.qualcomm.com> gpio: aggregator: stop using dev-sync-probe Bartosz Golaszewski <bartosz.golaszewski(a)oss.qualcomm.com> gpio: aggregator: fix a potential use-after-free Bartosz Golaszewski <bartosz.golaszewski(a)oss.qualcomm.com> gpio: cdev: check if uAPI v2 config attributes are correctly zeroed Eric Dumazet <edumazet(a)google.com> tcp: fix stale per-CPU tcp_tw_isn leak enabling ISN prediction Xingwang Xiang <v3rdant.xiang(a)gmail.com> bpf, skmsg: fix verdict sk_data_ready racing with ktls rx Rosen Penev <rosenp(a)gmail.com> net: ag71xx: check error for platform_get_irq David Howells <dhowells(a)redhat.com> crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks Jakub Kicinski <kuba(a)kernel.org> net: shaper: rework the VALID marking (again) Jakub Kicinski <kuba(a)kernel.org> net: shaper: annotate the data races Prathamesh Deshpande <prathameshdeshpande7(a)gmail.com> net/mlx5e: Fix eswitch mode block underflow on IPsec acquire SA Jiajia Liu <liujiajia(a)kylinos.cn> Bluetooth: btmtk: fix urb->setup_packet leak in error paths Kiran K <kiran.k(a)intel.com> Bluetooth: btintel_pcie: Fix incorrect MAC access programming David Carlier <devnexen(a)gmail.com> tracing: Avoid NULL return from hist_field_name() on truncation Cunlong Li <shenxiaogll(a)gmail.com> cgroup: rstat: relax NMI guard after switch to try_cmpxchg Zhang Cen <rollkingzzc(a)gmail.com> ALSA: seq: Serialize UMP output teardown with event_input Shitalkumar Gandhi <shital.gandhi45(a)gmail.com> wifi: wilc1000: fix dma_buffer leak on bus acquire failure Johannes Berg <johannes.berg(a)intel.com> wifi: mac80211: fix MLE defragmentation Alexandru Hossu <hossu.alexandru(a)gmail.com> wifi: mac80211: bounds-check link_id in ieee80211_ml_epcs Gao Xiang <xiang(a)kernel.org> erofs: fix managed cache race for unaligned extents Nikhil P. Rao <nikhil.rao(a)amd.com> pds_core: fix debugfs_lookup dentry leak and error handling Nikhil P. Rao <nikhil.rao(a)amd.com> pds_core: fix error handling in pdsc_devcmd_wait Christian Marangi <ansuelsmth(a)gmail.com> net: airoha: Fix NPU RX DMA descriptor bits Nicolai Buchwitz <nb(a)tipi-net.de> net: phy: honor eee_disabled_modes in phy_advertise_eee_all() Nicolai Buchwitz <nb(a)tipi-net.de> net: phy: honor eee_disabled_modes in phy_support_eee() Ido Schimmel <idosch(a)nvidia.com> bridge: mcast: Fix a possible use-after-free when removing a bridge port Petr Machata <petrm(a)nvidia.com> net: bridge: Flush multicast groups when snooping is disabled Guangshuo Li <lgs201920130244(a)gmail.com> RDMA/rtrs: Fix use-after-free in path file creation cleanup Shiraz Saleem <shirazsaleem(a)microsoft.com> RDMA/mana_ib: Report max_msg_sz in mana_ib_query_port Robertus Diawan Chris <robertusdchris(a)gmail.com> ASoC: soc-utils: Add missing va_end in snd_soc_ret() Rafael J. Wysocki <rafael.j.wysocki(a)intel.com> platform/x86: intel-vbtn: Check ACPI_HANDLE() against NULL Rafael J. Wysocki <rafael.j.wysocki(a)intel.com> platform/x86: intel-hid: Check ACPI_HANDLE() against NULL Rafael J. Wysocki <rafael.j.wysocki(a)intel.com> platform/x86: hp_accel: Check ACPI_COMPANION() against NULL Rafael J. Wysocki <rafael.j.wysocki(a)intel.com> platform/x86: adv_swbutton: Check ACPI_HANDLE() against NULL Oliver White <oliverjwhite07(a)gmail.com> platform/surface: aggregator_registry: omit battery & AC nodes on Surface Laptop 7 Erni Sri Satya Vennela <ernis(a)linux.microsoft.com> net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer Daniel Golle <daniel(a)makrotopia.org> net: dsa: mt7530: preserve VLAN tags on trapped link-local frames Daniel Golle <daniel(a)makrotopia.org> net: dsa: mt7530: fix FDB entries not aging out with short timeout Viktor Jägersküpper <viktor_jaegerskuepper(a)freenet.de> kbuild: pacman-pkg: make "rc" releases adhere to pacman versioning scheme Ankit Nautiyal <ankit.k.nautiyal(a)intel.com> drm/i915/dp: Fix readback for target_rr in Adaptive Sync SDP Kohei Enju <kohei(a)enjuk.jp> igc: set tx buffer type for SMD frames Grzegorz Nitka <grzegorz.nitka(a)intel.com> ice: ptp: use primary NAC semaphore on E825 Grzegorz Nitka <grzegorz.nitka(a)intel.com> ice: ptp: serialize E825 PHY timer start with PTP lock Qing Ming <a0yami(a)mailbox.org> cgroup/rstat: validate cpu before css_rstat_cpu() access Louis-Alexis Eyraud <louisalexis.eyraud(a)collabora.com> drm/mediatek: mtk_hdmi_ddc: Fix non-static global variable Louis-Alexis Eyraud <louisalexis.eyraud(a)collabora.com> drm/mediatek: mtk_cec: Fix non-static global variable Matthew Leach <matthew.leach(a)collabora.com> wifi: ath11k: fix peer resolution on rx path when peer_id=0 Mohanram Meenakshisundaram <mohanram.meenakshisundaram(a)intel.com> drm/xe/pf: Fix CFI failure in debugfs access Michal Wajdeczko <michal.wajdeczko(a)intel.com> drm/xe/vf: Fix signature of print functions Shuicheng Lin <shuicheng.lin(a)intel.com> drm/xe/gsc: Fix double-free of managed BO in error path Jianpeng Chang <jianpeng.chang.cn(a)windriver.com> dma-mapping: move dma_map_resource() sanity check into debug code Miri Korenblit <miriam.rachel.korenblit(a)intel.com> wifi: iwlwifi: mld: don't dereference a pointer before NULL checking it Cole Leavitt <cole(a)unwrap.rs> wifi: iwlwifi: mld: fix TSO segmentation explosion when AMSDU is disabled Guenter Roeck <linux(a)roeck-us.net> hwmon: (lm90) Add lock protection to lm90_alert Guenter Roeck <linux(a)roeck-us.net> hwmon: (lm90) Stop work before releasing hwmon device Dmitry Baryshkov <dmitry.baryshkov(a)oss.qualcomm.com> drm/msm/snapshot: fix dumping of the unaligned regions Eric Naim <dnaim(a)cachyos.org> ALSA: hda/realtek: Use ALC287_FIXUP_TXNW2781_I2C for ASUS Strix Gxx5 Florian Westphal <fw(a)strlen.de> netfilter: nft_inner: release local_lock before re-enabling softirqs Felix Gu <ustc.gu(a)gmail.com> spi: mtk-snfi: Fix resource leak in mtk_snand_read_page_cache() Cássio Gabriel <cassiogabrielcontato(a)gmail.com> ASoC: amd: acp-sdw-legacy: check CPU DAI name before logging Boris Burkov <boris(a)bur.io> btrfs: fix squota accounting during enable generation Boris Burkov <boris(a)bur.io> btrfs: check for subvolume before deleting squota qgroup Boris Burkov <boris(a)bur.io> btrfs: relax squota parent qgroup deletion rule Boris Burkov <boris(a)bur.io> btrfs: check squota parent usage on membership change David Sterba <dsterba(a)suse.com> btrfs: remaining BTRFS_PATH_AUTO_FREE conversions Josef Bacik <josef(a)toxicpanda.com> btrfs: don't search back for dir inode item in INO_LOOKUP_USER Filipe Manana <fdmanana(a)suse.com> btrfs: use the key format macros when printing keys Filipe Manana <fdmanana(a)suse.com> btrfs: add macros to facilitate printing of keys Stefano Garzarella <sgarzare(a)redhat.com> vsock/virtio: fix zerocopy completion for multi-skb sends Jens Axboe <axboe(a)kernel.dk> io_uring/net: punt IORING_OP_BIND async if it needs file create Robertus Diawan Chris <robertusdchris(a)gmail.com> ALSA: scarlett2: Add missing error check when initialise Autogain Status Alexander A. Klimov <grandmaster(a)al2klimov.de> ASoC: codecs: fs210x: fix possible buffer overflow Mike Christie <michael.christie(a)oracle.com> scsi: sd: Fix return code handling in sd_spinup_disk() Jeroen Massar <jmassar(a)nvidia.com> net/mlx5: Do not restore destination-less TC rules Chuck Lever <chuck.lever(a)oracle.com> tls: Preserve sk_err across recvmsg() when data has been copied Ralf Lici <ralf(a)mandelbit.com> ovpn: disable BHs when updating device stats Juergen Gross <jgross(a)suse.com> x86/xen: Fix xen_e820_swap_entry_with_ram() Kees Cook <kees(a)kernel.org> gcc-plugins: Always define CONST_CAST_GIMPLE and CONST_CAST_TREE Antonio Quartulli <antonio(a)openvpn.net> ovpn: fix race between deleting interface and adding new peer David Carlier <devnexen(a)gmail.com> ovpn: respect peer refcount in CMD_NEW_PEER error path David Carlier <devnexen(a)gmail.com> ovpn: tcp - use cached peer pointer in ovpn_tcp_close() Sven Schuchmann <schuchmann(a)schleissheimer.de> net: phy: DP83TC811: add reading of abilities Jakub Kicinski <kuba(a)kernel.org> net: tls: prevent chain-after-chain in plain text SG Jakub Kicinski <kuba(a)kernel.org> net: tls: fix off-by-one in sg_chain entry count for wrapped sk_msg ring Xiang Mei <xmei5(a)asu.edu> net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot Sayali Patil <sayalip(a)linux.ibm.com> powerpc/time: Remove redundant preempt_disable|enable() calls from arch_irq_work_raise() Mikko Perttunen <mperttunen(a)nvidia.com> drm/msm: Fix iommu_map_sgtable() return value check and avoid WARN Dmitry Baryshkov <dmitry.baryshkov(a)oss.qualcomm.com> drm/msm/adreno: fix userspace-triggered crash on a2xx-a4xx Ricardo Neri <ricardo.neri-calderon(a)linux.intel.com> Documentation: intel_pstate: Fix description of asymmetric packing with SMT Borislav Petkov (AMD) <bp(a)alien8.de> x86/mce: Restore MCA polling interval halving Ming Lei <tom.leiming(a)gmail.com> selftests: ublk: cap nthreads to kernel's actual nr_hw_queues Dmitry Baryshkov <dmitry.baryshkov(a)oss.qualcomm.com> drm/msm/dpu: don't mix devm and drmm functions Dmitry Baryshkov <dmitry.baryshkov(a)oss.qualcomm.com> drm/msm/dsi: don't dump registers past the mapped region Chenguang Zhao <zhaochenguang(a)kylinos.cn> ethtool: fix ethnl_bitmap32_not_zero() bit interval semantics Xiang Mei <xmei5(a)asu.edu> net/smc: avoid NULL deref of conn->lnk in smc_msg_event tracepoint Zack McKevitt <zachary.mckevitt(a)oss.qualcomm.com> accel/qaic: Add overflow check to remap_pfn_range during mmap Sungwoo Kim <iam(a)sung-woo.kim> block: bio-integrity: Fix null-ptr-deref in bio_integrity_map_user() Lukas Bulwahn <lukas.bulwahn(a)redhat.com> HID: quirks: really enable the intended work around for appledisplay Casey Chen <cachen(a)purestorage.com> block: recompute nr_integrity_segments in blk_insert_cloned_request David Carlier <devnexen(a)gmail.com> block: don't overwrite bip_vcnt in bio_integrity_copy_user() Jakub Kicinski <kuba(a)kernel.org> net: shaper: reject QUEUE scope handle with missing id Jakub Kicinski <kuba(a)kernel.org> net: shaper: enforce singleton NETDEV scope with id 0 Jakub Kicinski <kuba(a)kernel.org> net: shaper: reject handle IDs exceeding internal bit-width Jakub Kicinski <kuba(a)kernel.org> net: shaper: fix undersized reply skb allocation in GROUP command Jakub Kicinski <kuba(a)kernel.org> net: shaper: set ret to -ENOMEM when genlmsg_new() fails in group_doit Jakub Kicinski <kuba(a)kernel.org> net: shaper: reject duplicate leaves in GROUP request Jakub Kicinski <kuba(a)kernel.org> net: shaper: fix trivial ordering issue in net_shaper_commit() Jakub Kicinski <kuba(a)kernel.org> net: shaper: flip the polarity of the valid flag Kang Yang <kang.yang(a)oss.qualcomm.com> wifi: ath10k: skip WMI and beacon transmission when device is wedged Nicolas Escande <nico.escande(a)gmail.com> wifi: ath11k: fix error path leak in ath11k_tm_cmd_wmi_ftm() Nicolas Escande <nico.escande(a)gmail.com> wifi: ath11k: fix error path leaks in some WMI WOW calls Ethan Nelson-Moore <enelsonmoore(a)gmail.com> net: ethernet: cs89x0: remove stale CONFIG_MACH_MX31ADS reference Linus Walleij <linusw(a)kernel.org> net: ethernet: cortina: Carry over frag counter Andreas Haarmann-Thiemann <eitschman(a)nebelreich.de> net: ethernet: cortina: Drop half-assembled SKB Linus Walleij <linusw(a)kernel.org> net: ethernet: cortina: Make RX SKB per-port David Howells <dhowells(a)redhat.com> netfs, afs: Fix write skipping in dir/link writepages David Howells <dhowells(a)redhat.com> netfs: Fix netfs_read_folio() to wait on writeback David Howells <dhowells(a)redhat.com> netfs: Fix folio->private handling in netfs_perform_write() David Howells <dhowells(a)redhat.com> netfs: Fix partial invalidation of streaming-write folio David Howells <dhowells(a)redhat.com> netfs: Fix potential UAF in netfs_unlock_abandoned_read_pages() David Howells <dhowells(a)redhat.com> netfs: Fix leak of request in netfs_write_begin() error handling David Howells <dhowells(a)redhat.com> netfs: Fix early put of sink folio in netfs_read_gaps() David Howells <dhowells(a)redhat.com> netfs: Fix write streaming disablement if fd open O_RDWR David Howells <dhowells(a)redhat.com> netfs: Fix read-gaps to remove netfs_folio from filled folio David Howells <dhowells(a)redhat.com> netfs: Fix potential deadlock in write-through mode David Howells <dhowells(a)redhat.com> netfs: Fix streaming write being overwritten David Howells <dhowells(a)redhat.com> netfs: Defer the emission of trace_netfs_folio() David Howells <dhowells(a)redhat.com> netfs: Fix netfs_invalidate_folio() to clear dirty bit if all changes gone David Howells <dhowells(a)redhat.com> netfs: Fix overrun check in netfs_extract_user_iter() Viacheslav Dubeyko <Slava.Dubeyko(a)ibm.com> netfs: fix VM_BUG_ON_FOLIO() issue in netfs_write_begin() call David Howells <dhowells(a)redhat.com> netfs: Fix netfs_read_to_pagecache() to pause on subreq failure David Howells <dhowells(a)redhat.com> netfs: Fix cancellation of a DIO and single read subrequests Julian Braha <julianbraha(a)gmail.com> powerpc: fix dead default for GUEST_STATE_BUFFER_TEST Ally Heev <allyheev(a)gmail.com> powerpc: 82xx: fix uninitialized pointers with free attribute Mario Limonciello <mario.limonciello(a)amd.com> ASoC: SOF: amd: Fix error code handling in psp_send_cmd() Kuniyuki Iwashima <kuniyu(a)google.com> tcp: Fix out-of-bounds access for twsk in tcp_ao_established_key(). Johannes Thumshirn <johannes.thumshirn(a)wdc.com> zonefs: handle integer overflow in zonefs_fname_to_fno Chia-Lin Kao (AceLan) <acelan.kao(a)canonical.com> nvme-pci: fix use-after-free in nvme_free_host_mem() Keith Busch <kbusch(a)kernel.org> nvme: fix bio leak on mapping failure Jiayuan Chen <jiayuan.chen(a)linux.dev> irq_work: Fix use-after-free in irq_work_single() on PREEMPT_RT Zhihao Cheng <chengzhihao1(a)huawei.com> nsfs: fix wrong error code returned for pidns ioctls Ming Lei <tom.leiming(a)gmail.com> ublk: reject max_sectors smaller than PAGE_SECTORS in parameter validation Rosen Penev <rosenp(a)gmail.com> irqchip/ath79-cpu: Remove unused function Hongling Zeng <zenghongling(a)kylinos.cn> fs: Fix return in jfs_mkdir and orangefs_mkdir Junyoung Jang <graypanda.inzag(a)gmail.com> fs/statmount: fix slab out-of-bounds write in statmount_mnt_idmap Masami Hiramatsu (Google) <mhiramat(a)kernel.org> fprobe: Fix unregister_fprobe() to wait for RCU grace period Mac Chiang <mac.chiang(a)intel.corp-partner.google.com> ASoC: sdw_utils: Add quirk to ignore RT721 CODEC_MIC Mac Chiang <mac.chiang(a)intel.com> ASoC: sdw_utils: Add quirk to ignore RT712 CODEC_MIC Chuck Lever <chuck.lever(a)oracle.com> NFSD: Fix infinite loop in layout state revocation Gabor Juhos <j4g8y7(a)gmail.com> phy: marvell: mvebu-a3700-utmi: fix incorrect USB2_PHY_CTRL register access Shitalkumar Gandhi <shital.gandhi45(a)gmail.com> net: ti: icssm-prueth: fix eth_ports_node leak in probe Myeonghun Pak <mhun512(a)gmail.com> net: lan966x: avoid unregistering netdev on register failure Bart Van Assche <bvanassche(a)acm.org> ice: fix locking in ice_dcb_rebuild() Marcin Szycik <marcin.szycik(a)linux.intel.com> ice: fix setting RSS VSI hash for E830 Emil Tantilov <emil.s.tantilov(a)intel.com> idpf: fix read_dev_clk_lock spinlock init in idpf_ptp_init() Mohsin Bashir <hmohsin(a)meta.com> net: shaper: Reject reparenting of existing nodes Dragos Tatulea <dtatulea(a)nvidia.com> net: napi: Avoid gro timer misfiring at end of busypoll Kuniyuki Iwashima <kuniyu(a)google.com> tcp: Fix imbalanced icsk_accept_queue count. Martin Kaiser <martin(a)kaiser.cx> test_kprobes: clear kprobes between test runs Jianpeng Chang <jianpeng.chang.cn(a)windriver.com> kprobes: skip non-symbol addresses in kprobe_add_ksym_blacklist() Florian Westphal <fw(a)strlen.de> netfilter: bridge: eb_tables: close module init race Florian Westphal <fw(a)strlen.de> netfilter: x_tables: close dangling table module init race Florian Westphal <fw(a)strlen.de> netfilter: ebtables: close dangling table module init race Florian Westphal <fw(a)strlen.de> netfilter: ebtables: move to two-stage removal scheme Florian Westphal <fw(a)strlen.de> netfilter: x_tables: add and use xtables_unregister_table_exit Florian Westphal <fw(a)strlen.de> netfilter: x_tables: add and use xt_unregister_table_pre_exit Florian Westphal <fw(a)strlen.de> netfilter: x_tables: unregister the templates first Filipe Manana <fdmanana(a)suse.com> btrfs: tracepoints: fix sleep while in atomic context in btrfs_sync_file() Shuhao Fu <sfual(a)cse.ust.hk> ALSA: hda: cs35l41: Put ACPI device on missing physical node Shuhao Fu <sfual(a)cse.ust.hk> ALSA: hda: cs35l56: Put ACPI device after setting companion Guenter Roeck <linux(a)roeck-us.net> ARM: integrator: Fix early initialization Sudeep Holla <sudeep.holla(a)kernel.org> firmware: arm_ffa: Fix sched-recv callback partition lookup Sudeep Holla <sudeep.holla(a)kernel.org> firmware: arm_ffa: Snapshot notifier callbacks under lock Sudeep Holla <sudeep.holla(a)kernel.org> firmware: arm_ffa: Align RxTx buffer size before mapping Sudeep Holla <sudeep.holla(a)kernel.org> firmware: arm_ffa: Validate framework notification message layout Sudeep Holla <sudeep.holla(a)kernel.org> firmware: arm_ffa: Keep framework RX release under lock Sudeep Holla <sudeep.holla(a)kernel.org> firmware: arm_ffa: Bound PARTITION_INFO_GET_REGS copies Maulik Shah <maulik.shah(a)oss.qualcomm.com> pinctrl: qcom: Fix wakeirq map by removing disconnected irqs for sm8150 David Gow <david(a)davidgow.net> kunit: config: KUNIT_DEBUGFS should depend on DEBUG_FS David Gow <david(a)davidgow.net> kunit: config: Enable KUNIT_DEBUGFS by default Guo Ren (Alibaba DAMO Academy) <guoren(a)kernel.org> riscv: mm: Fixup no5lvl failure when vaddr is invalid Michael Neuling <mikey(a)neuling.org> riscv: errata: Fix bitwise vs logical AND in MIPS errata patching Sudeep Holla <sudeep.holla(a)kernel.org> firmware: arm_ffa: Unregister bus notifier on teardown for FF-A v1.0 Sudeep Holla <sudeep.holla(a)kernel.org> firmware: arm_ffa: Fix per-vcpu self notifications handling in workqueue Sudeep Holla <sudeep.holla(a)kernel.org> firmware: arm_ffa: Skip free_pages on RX buffer alloc failure Sudeep Holla <sudeep.holla(a)kernel.org> firmware: arm_ffa: Check for NULL FF-A ID table while driver registration Takashi Iwai <tiwai(a)suse.de> HID: uclogic: Fix regression of input name assignment Dan Carpenter <error27(a)gmail.com> HID: intel-thc-hid: Intel-quickspi: Fix some error codes Maulik Shah <maulik.shah(a)oss.qualcomm.com> pinctrl: qcom: Fix GPIO to PDC wake irq map for qcs615 Xianwei Zhao <xianwei.zhao(a)amlogic.com> pinctrl: meson: amlogic-a4: fix deadlock issue Lad Prabhakar <prabhakar.mahadev-lad.rj(a)bp.renesas.com> pinctrl: renesas: rzg2l: Fix SMT register cache handling Biju Das <biju.das.jz(a)bp.renesas.com> pinctrl: renesas: rzg2l: Fix incorrect PUPD register offset for high pins during suspend/resume Marek Vasut <marek.vasut+renesas(a)mailbox.org> ARM: dts: renesas: rskrza1: Drop superfluous cells Marek Vasut <marek.vasut+renesas(a)mailbox.org> ARM: dts: renesas: genmai: Drop superfluous cells Til Kaiser <mail(a)tk154.de> pinctrl: qcom: ipq4019: mark gpio as a GPIO pin function Abdurrahman Hussain <abdurrahman(a)nexthop.ai> hwmon: (pmbus/adm1266) reject short block-read responses in the GPIO accessors Abdurrahman Hussain <abdurrahman(a)nexthop.ai> hwmon: (pmbus/adm1266) register the nvmem device after pmbus_do_probe() Abdurrahman Hussain <abdurrahman(a)nexthop.ai> hwmon: (pmbus/adm1266) register the gpio_chip after pmbus_do_probe() Abdurrahman Hussain <abdurrahman(a)nexthop.ai> hwmon: (pmbus/adm1266) don't clobber GPIO bits before PDIO read in get_multiple Abdurrahman Hussain <abdurrahman(a)nexthop.ai> hwmon: (pmbus/adm1266) cap PDIO scan in get_multiple at ADM1266_PDIO_NR Abdurrahman Hussain <abdurrahman(a)nexthop.ai> hwmon: (pmbus/adm1266) bounce blackbox records through a protocol-sized buffer Abdurrahman Hussain <abdurrahman(a)nexthop.ai> hwmon: (pmbus/adm1266) include PEC byte in pmbus_block_xfer read buffer Abdurrahman Hussain <abdurrahman(a)nexthop.ai> hwmon: (pmbus/adm1266) reject implausible blackbox record_count Abdurrahman Hussain <abdurrahman(a)nexthop.ai> hwmon: (pmbus/adm1266) seed timestamp from the real-time clock Sven Eckelmann <sven(a)narfation.org> batman-adv: tt: prevent TVLV entry number overflow Sven Eckelmann <sven(a)narfation.org> batman-adv: tt: fix negative tt_buff_len Sven Eckelmann <sven(a)narfation.org> batman-adv: tt: fix negative last_changeset_len Sven Eckelmann <sven(a)narfation.org> batman-adv: tt: avoid empty VLAN responses Sven Eckelmann <sven(a)narfation.org> batman-adv: tt: reject oversized local TVLV buffers Sven Eckelmann <sven(a)narfation.org> batman-adv: tt: fix TOCTOU race for reported vlans Sven Eckelmann <sven(a)narfation.org> batman-adv: tp_meter: avoid role confusion in tp_list Sven Eckelmann <sven(a)narfation.org> batman-adv: tp_meter: fix race condition in send error reporting Sven Eckelmann <sven(a)narfation.org> batman-adv: tp_meter: fix tp_vars reference leak in receiver shutdown Sven Eckelmann <sven(a)narfation.org> batman-adv: tp_meter: directly shut down timer on cleanup Sven Eckelmann <sven(a)narfation.org> batman-adv: tp_meter: avoid use of uninit sender vars Sven Eckelmann <sven(a)narfation.org> batman-adv: bla: avoid NULL-ptr deref for claim via dropped interface Sven Eckelmann <sven(a)narfation.org> batman-adv: bla: avoid double decrement of bla.num_requests Sven Eckelmann <sven(a)narfation.org> batman-adv: bla: fix report_work leak on backbone_gw purge Sven Eckelmann <sven(a)narfation.org> batman-adv: frag: disallow unicast fragment in fragment Luxiao Xu <rakukuip(a)gmail.com> batman-adv: fix tp_meter counter underflow during shutdown Ruide Cao <caoruide123(a)gmail.com> batman-adv: fix fragment reassembly length accounting Sven Eckelmann <sven(a)narfation.org> batman-adv: dat: handle forward allocation error Ruijie Li <ruijieli51(a)gmail.com> batman-adv: clear current gateway during teardown Sven Eckelmann <sven(a)narfation.org> batman-adv: mcast: fix use-after-free in orig_node RCU release Sven Eckelmann <sven(a)narfation.org> batman-adv: iv: recover OGM scheduling after forward packet error Sven Eckelmann <sven(a)narfation.org> batman-adv: tvlv: reject oversized TVLV packets Sven Eckelmann <sven(a)narfation.org> batman-adv: tvlv: abort OGM send on tvlv append failure Sven Eckelmann <sven(a)narfation.org> batman-adv: v: stop OGMv2 on disabled interface Harry Wentland <harry.wentland(a)amd.com> drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async Harry Wentland <harry.wentland(a)amd.com> drm/amd/display: Validate GPIO pin LUT table size before iterating Harry Wentland <harry.wentland(a)amd.com> drm/amd/display: Fix integer overflow in bios_get_image() Osama Abdelkader <osama.abdelkader(a)gmail.com> drm/bridge: megachips: remove bridge when irq request fails Julien Chauveau <chauveau.julien(a)gmail.com> drm/bridge: it66121: acquire reset GPIO in probe Alan Liu <haoping.liu(a)amd.com> drm/amdgpu/vpe: Force collaborate sync after TRAP Deepanshu Kartikey <kartikey406(a)gmail.com> drm/virtio: use uninterruptible resv lock for plane updates Maíra Canal <mcanal(a)igalia.com> drm/v3d: Release indirect CSD GEM reference on CPU job free Maíra Canal <mcanal(a)igalia.com> drm/v3d: Fix use-after-free of CPU job query arrays on error path Daniel J Blueman <daniel(a)quora.org> drm/msm: Fix shrinker deadlock Bartosz Golaszewski <bartosz.golaszewski(a)oss.qualcomm.com> device property: set fwnode->secondary to NULL in fwnode_init() Huacai Chen <chenhuacai(a)kernel.org> LoongArch: Remove unused code to avoid build warning Tiezhu Yang <yangtiezhu(a)loongson.cn> LoongArch: kprobes: Use larch_insn_text_copy() to patch instructions Heechan Kang <gganji11(a)naver.com> fwctl: pds: Validate RPC input size before parsing Michael Bommarito <michael.bommarito(a)gmail.com> RDMA/siw: Reject MPA FPDU length underflow before signed receive math Johan Hovold <johan(a)kernel.org> spi: ti-qspi: fix use-after-free after DMA setup failure Johan Hovold <johan(a)kernel.org> spi: sprd: fix error pointer deref after DMA setup failure Johan Hovold <johan(a)kernel.org> spi: ep93xx: fix error pointer deref after DMA setup failure Michael Bommarito <michael.bommarito(a)gmail.com> scsi: isci: Fix use-after-free in device removal path Nitin Rawat <nitin.rawat(a)oss.qualcomm.com> phy: qcom-qmp-ufs: Fix kaanapali PHY PLL lock failure after SM8650 G4 fix Wayne Chang <waynec(a)nvidia.com> phy: tegra: xusb: Fix per-pad high-speed termination calibration Łukasz Lebiedziński <kernel(a)lvkasz.us> phy: exynos5-usbdrd: fix USB 2.0 HS PHY tuning values for Exynos7870 Johan Hovold <johan(a)kernel.org> spi: qup: fix error pointer deref after DMA setup failure Osama Abdelkader <osama.abdelkader(a)gmail.com> drm/bridge: chipone-icn6211: use devm_drm_bridge_add in i2c probe Carlos López <clopez(a)suse.de> virt: sev-guest: Explicitly leak pages in unknown state Osama Abdelkader <osama.abdelkader(a)gmail.com> riscv: kvm: return SBI_ERR_FAILURE for pmu_event_info() when OOM Osama Abdelkader <osama.abdelkader(a)gmail.com> riscv: kvm: return SBI_ERR_FAILURE for pmu_snapshot_set_shmem() when OOM Tina Zhang <zhang_wei(a)open-hieco.net> KVM: SVM: Disable AVIC IPI virtualization on Hygon Family 18h (erratum #1235) Michael Bommarito <michael.bommarito(a)gmail.com> KVM: arm64: vgic: Free private_irqs when init fails after allocation Michael Bommarito <michael.bommarito(a)gmail.com> KVM: arm64: vgic-its: Reject restored DTE with out-of-range num_eventid_bits Vladimir Murzin <vladimir.murzin(a)arm.com> arm64: probes: Handle probes on hinted conditional branch instructions Masami Hiramatsu (Google) <mhiramat(a)kernel.org> tracing: Do not call map->ops->elt_free() if elt_alloc() fails Zhihao Cheng <chengzhihao1(a)huawei.com> cifs: Fix busy dentry used after unmounting Michael Bommarito <michael.bommarito(a)gmail.com> wifi: mac80211: consume only present negotiated TTLM maps Jann Horn <jannh(a)google.com> af_unix: Fix UAF read of tail->len in unix_stream_data_wait() John Walker <johnwalker0(a)gmail.com> wifi: cfg80211: advance loop vars in cfg80211_merge_profile() Grzegorz Nitka <grzegorz.nitka(a)intel.com> ice: restore PTP Rx timestamp config after ethtool set-channels Marcin Szycik <marcin.szycik(a)intel.com> ice: fix setting promisc mode while adding VID filter Jacob Keller <jacob.e.keller(a)intel.com> ice: fix locking around wait_event_interruptible_locked_irq Kohei Enju <kohei(a)enjuk.jp> igc: fix potential skb leak in igc_fpe_xmit_smd_frame() Dawei Feng <dawei.feng(a)seu.edu.cn> octeontx2-pf: fix double free in rvu_rep_rsrc_init() Sam Daly <sam(a)samdaly.ie> octeontx2-af: CGX: add bounds check to cgx_speed_mbps index Stephen Smalley <stephen.smalley.work(a)gmail.com> lsm: hold cred_guard_mutex for lsm_set_self_attr() Ilya Dryomov <idryomov(a)gmail.com> rbd: eliminate a race in lock_dwork draining on unmap Michael Bommarito <michael.bommarito(a)gmail.com> ixgbevf: fix use-after-free in VEPA multicast source pruning Michael Bommarito <michael.bommarito(a)gmail.com> ipv4: raw: reject IP_HDRINCL packets with ihl < 5 Sheroz Juraev <goodmartiandev(a)gmail.com> wifi: iwlwifi: mld: stop TX during firmware restart Johannes Berg <johannes.berg(a)intel.com> wifi: iwlwifi: mvm: fix driver-set TX rates on old devices Kyle Farnung <kfarnung(a)gmail.com> wifi: ath11k: clear shared SRNG pointer state on restart Jose Ignacio Tornos Martinez <jtornosm(a)redhat.com> ice: fix VF queue configuration with low MTU values Stefano Garzarella <sgarzare(a)redhat.com> vsock/virtio: reset connection on receiving queue overflow Minh Nguyen <minhnguyen.080505(a)gmail.com> vsock/vmci: fix UAF when peer resets connection during handshake Li Xiasong <lixiasong1(a)huawei.com> mptcp: pm: fix ADD_ADDR timer infinite retry on option space insufficient Justin Iurman <justin.iurman(a)gmail.com> ipv6: ioam: add NULL check for idev in ipv6_hop_ioam() Masami Hiramatsu (Google) <mhiramat(a)kernel.org> ring-buffer: Flush and stop persistent ring buffer on panic Steven Rostedt <rostedt(a)goodmis.org> ring-buffer: Fix reporting of missed events in iterator Dawei Feng <dawei.feng(a)seu.edu.cn> qed: fix double free in qed_cxt_tables_alloc() Michael Bommarito <michael.bommarito(a)gmail.com> l2tp: use list_del_rcu in l2tp_session_unhash Konstantin Komarov <almaz.alexandrovich(a)paragon-software.com> fs/ntfs3: handle attr_set_size() errors when truncating files David Carlier <devnexen(a)gmail.com> net: ethtool: phy: avoid NULL deref when PHY driver is unbound Quan Sun <2022090917019(a)std.uestc.edu.cn> net: ethtool: fix NULL pointer dereference in phy_reply_size Guopeng Zhang <zhangguopeng(a)kylinos.cn> cgroup/cpuset: Reset DL migration state on can_attach() failure Masami Hiramatsu (Google) <mhiramat(a)kernel.org> tracing/fprobe: Check the same type fprobe on table as the unregistered one Masami Hiramatsu (Google) <mhiramat(a)kernel.org> tracing/fprobe: Avoid kcalloc() in rcu_read_lock section Menglong Dong <menglong8.dong(a)gmail.com> tracing: fprobe: use ftrace if CONFIG_DYNAMIC_FTRACE_WITH_ARGS Masami Hiramatsu (Google) <mhiramat(a)kernel.org> tracing: fprobe: Remove unused local variable Tejun Heo <tj(a)kernel.org> sched_ext: Avoid UAF in scx_root_enable_workfn() init failure path Samuele Mariotti <smariotti(a)disroot.org> sched_ext: Fix missing warning in scx_set_task_state() default case Yizhou Zhao <zhaoyz24(a)mails.tsinghua.edu.cn> netfilter: nft_inner: Fix IPv6 inner_thoff desync Nan Li <tonanli66(a)gmail.com> netfilter: ipset: stop hash:* range iteration at end Haoze Xie <royenheart(a)gmail.com> netfilter: nf_queue: hold bridge skb->dev while queued Zhengchuan Liang <zcliangcn(a)gmail.com> netfilter: ip6t_hbh: reject oversized option lists Jonas Jelonek <jelonek.jonas(a)gmail.com> net: pse-pd: fix sign on -ENOENT check in of_load_pse_pis() Michael Bommarito <michael.bommarito(a)gmail.com> net: ifb: report ethtool stats over num_tx_queues Matt Fleming <mfleming(a)cloudflare.com> net/mlx5e: Fix use-after-free in mlx5e_tx_reporter_timeout_recover Nerijus Bendžiūnas <nerijus.bendziunas(a)gmail.com> net: phy: skip EEE advertisement write when autoneg is disabled Nicolai Buchwitz <nb(a)tipi-net.de> net: bcmgenet: keep RBUF EEE/PM disabled Zijing Yin <yzjaurora(a)gmail.com> phonet/pep: disable BH around forwarded sk_receive_skb() Jiexun Wang <wangjiexun2025(a)gmail.com> Bluetooth: serialize accept_q access Michael Bommarito <michael.bommarito(a)gmail.com> Bluetooth: MGMT: validate Add Extended Advertising Data length Michael Bommarito <michael.bommarito(a)gmail.com> Bluetooth: L2CAP: ecred_reconfigure: send packed pdu, not stack pointer Mingyu Wang <25181214217(a)stu.xidian.edu.cn> Bluetooth: hci_uart: fix UAFs and race conditions in close and init paths Jann Horn <jannh(a)google.com> Bluetooth: bnep: Fix UAF read of dev->name David Carlier <devnexen(a)gmail.com> Bluetooth: ISO: drop ISO_END frames received without prior ISO_START Safa Karakuş <safa.karakus(a)secunnix.com> Bluetooth: fix UAF in l2cap_sock_cleanup_listen() vs l2cap_conn_del() Abdun Nihaal <nihaal(a)cse.iitm.ac.in> net: wwan: iosm: fix potential memory leaks in ipc_imem_init() Luiz Capitulino <luizcap(a)redhat.com> selftests/mm: run_vmtests.sh: fix destructive tests invocation David Hildenbrand (Arm) <david(a)kernel.org> mm/page_alloc: fix initialization of tags of the huge zero folio with init_on_free Muchun Song <muchun.song(a)linux.dev> mm/memory_hotplug: fix memory block reference leak on remove David Hildenbrand (Arm) <david(a)kernel.org> mm: fix __vm_normal_page() to handle missing support for pmd_special()/pud_special() Alistair Popple <apopple(a)nvidia.com> mm/memory: fix spurious warning when unmapping device-private/exclusive pages Justin Iurman <justin.iurman(a)gmail.com> ipv6: ioam: refresh hdr pointer before ioam6_event() Muchun Song <muchun.song(a)linux.dev> drivers/base/memory: fix memory block reference leak in poison accounting Heechan Kang <gganji11(a)naver.com> io_uring/waitid: clear waitid info before copying it to userspace Krishnamoorthi M <krishnamoorthi.m(a)amd.com> spi: amd: Set correct bus number in ACPI probe path Ard Biesheuvel <ardb(a)kernel.org> efi: Allocate runtime workqueue before ACPI init Cássio Gabriel <cassiogabrielcontato(a)gmail.com> ALSA: scarlett2: Allow flash writes ending at segment boundary Takashi Iwai <tiwai(a)suse.de> ALSA: asihpi: Fix potential OOB array access at reading cache Takashi Iwai <tiwai(a)suse.de> ALSA: pcm: Don't setup bogus iov_iter for silencing Cássio Gabriel <cassiogabrielcontato(a)gmail.com> ALSA: ua101: Reject too-short USB descriptors Abdurrahman Hussain <abdurrahman(a)nexthop.ai> hwmon: (pmbus/adm1266) widen blackbox-info buffer to I2C_SMBUS_BLOCK_MAX ChenXiaoSong <chenxiaosong(a)kylinos.cn> smb/server: promote S_DEL_ON_CLS to S_DEL_PENDING when close Jeremy Erazo <mendozayt13(a)gmail.com> smb: client: use data_len for SMB2 READ encrypted folioq copy Henrique Carvalho <henrique.carvalho(a)suse.com> smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() Michael Bommarito <michael.bommarito(a)gmail.com> smb: client: require net admin for CIFS SWN netlink Alexander Sverdlin <alexander.sverdlin(a)gmail.com> regulator: tps65219: fix irq_data.rdev not being assigned Junyi Liu <moss80199(a)gmail.com> ksmbd: validate SID in parent security descriptor during ACL inheritance Ferry Meng <mengferry(a)linux.alibaba.com> ksmbd: fix SID memory leak in set_posix_acl_entries_dacl() on overflow Jeremy Laratro <research(a)aradex.io> ksmbd: fix null pointer dereference in compare_guid_key() SeongJae Park <sj(a)kernel.org> mm/damon/sysfs-schemes: call missing mem_cgroup_iter_break() Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> sysfs: don't remove existing directory on update failure Thomas Zimmermann <tzimmermann(a)suse.de> drm/vblank: Fix kernel docs for vblank timer Thomas Zimmermann <tzimmermann(a)suse.de> drm/atomic: Increase timeout in drm_atomic_helper_wait_for_vblanks() Thomas Zimmermann <tzimmermann(a)suse.de> drm/vkms: Convert to DRM's vblank timer Thomas Zimmermann <tzimmermann(a)suse.de> drm/vblank: Add CRTC helpers for simple use cases Thomas Zimmermann <tzimmermann(a)suse.de> drm/vblank: Add vblank timer Sasha Levin <sashal(a)kernel.org> Revert "ice: Remove jumbo_remove step from TX path" Sasha Levin <sashal(a)kernel.org> Revert "ice: fix double-free of tx_buf skb" Niklas Cassel <cassel(a)kernel.org> ata: libata-scsi: do not needlessly defer commands when using PMP with FBS Niklas Cassel <cassel(a)kernel.org> ata: libata-scsi: do not use the deferred QC feature on PMPs with CBS Niklas Cassel <cassel(a)kernel.org> ata: libata-scsi: do not use the deferred QC feature for ATA_DEFER_PORT Niklas Cassel <cassel(a)kernel.org> ata: libata-scsi: improve readability of ata_scsi_qc_issue() Stanimir Varbanov <svarbanov(a)suse.de> mfd: bcm2835-pm: Add support for BCM2712 Stanimir Varbanov <svarbanov(a)suse.de> arm64: dts: broadcom: bcm2712: Add watchdog DT node Stanimir Varbanov <svarbanov(a)suse.de> dt-bindings: soc: bcm: Add bcm2712 compatible Asim Viladi Oglu Manizada <manizada(a)pm.me> smb: client: reject userspace cifs.spnego descriptions DaeMyung Kang <charsyam(a)gmail.com> ksmbd: close durable scavenger races against m_fp_list lookups Vladimir Yakovlev <vovchkir(a)gmail.com> spi: spi-dw-dma: fix print error log when wait finish transaction Xiang Mei <xmei5(a)asu.edu> bridge: mrp: reject zero test interval to avoid OOM panic Juri Lelli <juri.lelli(a)redhat.com> sched/deadline: Fix missing ENQUEUE_REPLENISH during PI de-boosting Peter Zijlstra <peterz(a)infradead.org> sched: Employ sched_change guards Davidlohr Bueso <dave(a)stgolabs.net> cxl/mbox: validate payload size before accessing contents in cxl_payload_from_user_allowed() Luis Henriques <luis(a)igalia.com> fuse: fix uninit-value in fuse_dentry_revalidate() Eder Zulian <ezulian(a)redhat.com> iommu/amd: Remove latent out-of-bounds access in IOMMU debugfs Guanghui Feng <guanghuifeng(a)linux.alibaba.com> iommu/amd: Fix illegal cap/mmio access in IOMMU debugfs Gustavo Sousa <gustavo.sousa(a)intel.com> drm/xe/hdcp: Add NULL check for media_gt in intel_hdcp_gsc_check_status() ------------- Diffstat: Documentation/admin-guide/pm/intel_pstate.rst | 11 +- Documentation/crypto/krb5.rst | 17 +- .../bindings/soc/bcm/brcm,bcm2835-pm.yaml | 38 ++- Documentation/gpu/drm-kms-helpers.rst | 12 + Documentation/netlink/specs/net_shaper.yaml | 7 + Makefile | 4 +- arch/alpha/include/asm/Kbuild | 1 + arch/arc/include/asm/Kbuild | 1 + arch/arm/boot/dts/renesas/r7s72100-genmai.dts | 3 - arch/arm/boot/dts/renesas/r7s72100-rskrza1.dts | 2 - arch/arm/include/asm/Kbuild | 1 + arch/arm/mach-versatile/integrator_cp.c | 13 +- arch/arm64/boot/dts/broadcom/bcm2712.dtsi | 9 + arch/arm64/include/asm/insn.h | 2 +- arch/arm64/include/asm/page.h | 2 +- arch/arm64/include/asm/ring_buffer.h | 10 + arch/arm64/kvm/arm.c | 4 +- arch/arm64/kvm/vgic/vgic-its.c | 4 + arch/arm64/mm/fault.c | 11 +- arch/csky/include/asm/Kbuild | 1 + arch/hexagon/include/asm/Kbuild | 1 + arch/loongarch/include/asm/Kbuild | 1 + arch/loongarch/kernel/kprobes.c | 14 +- arch/loongarch/mm/init.c | 4 - arch/m68k/include/asm/Kbuild | 1 + arch/microblaze/include/asm/Kbuild | 1 + arch/mips/include/asm/Kbuild | 1 + arch/nios2/include/asm/Kbuild | 1 + arch/openrisc/include/asm/Kbuild | 1 + arch/parisc/include/asm/Kbuild | 1 + arch/powerpc/Kconfig.debug | 3 +- arch/powerpc/include/asm/Kbuild | 1 + arch/powerpc/kernel/time.c | 6 +- arch/powerpc/platforms/82xx/km82xx.c | 4 +- arch/riscv/errata/mips/errata.c | 2 +- arch/riscv/include/asm/Kbuild | 1 + arch/riscv/kvm/vcpu_pmu.c | 12 +- arch/riscv/mm/init.c | 25 ++ arch/s390/include/asm/Kbuild | 1 + arch/sh/include/asm/Kbuild | 1 + arch/sparc/include/asm/Kbuild | 1 + arch/um/include/asm/Kbuild | 1 + arch/x86/include/asm/Kbuild | 1 + arch/x86/kernel/cpu/mce/core.c | 33 +-- arch/x86/kvm/svm/avic.c | 12 +- arch/x86/xen/setup.c | 2 +- arch/xtensa/include/asm/Kbuild | 1 + block/bio-integrity.c | 19 +- block/blk-cgroup.c | 2 +- block/blk-mq.c | 19 ++ crypto/krb5/krb5_api.c | 54 +++- drivers/accel/qaic/qaic_data.c | 23 +- drivers/ata/libata-core.c | 9 +- drivers/ata/libata-eh.c | 8 +- drivers/ata/libata-pmp.c | 18 +- drivers/ata/libata-scsi.c | 102 ++++---- drivers/ata/sata_sil24.c | 6 +- drivers/base/memory.c | 8 +- drivers/block/rbd.c | 20 +- drivers/block/ublk_drv.c | 3 + drivers/bluetooth/btintel_pcie.c | 20 +- drivers/bluetooth/btintel_pcie.h | 3 - drivers/bluetooth/btmtk.c | 2 + drivers/bluetooth/hci_ldisc.c | 48 +++- drivers/cxl/core/mbox.c | 11 +- drivers/firmware/arm_ffa/bus.c | 4 +- drivers/firmware/arm_ffa/driver.c | 133 +++++++--- drivers/firmware/efi/efi.c | 28 ++- drivers/fwctl/pds/main.c | 3 + drivers/gpio/Kconfig | 1 - drivers/gpio/gpio-aggregator.c | 47 ++-- drivers/gpio/gpiolib-cdev.c | 13 + drivers/gpu/drm/Makefile | 3 +- drivers/gpu/drm/amd/amdgpu/amdgpu_vpe.c | 7 +- drivers/gpu/drm/amd/display/dc/bios/bios_parser2.c | 9 + .../drm/amd/display/dc/bios/bios_parser_helper.c | 9 +- drivers/gpu/drm/amd/display/dc/core/dc.c | 6 +- drivers/gpu/drm/bridge/chipone-icn6211.c | 4 +- drivers/gpu/drm/bridge/ite-it66121.c | 5 + .../drm/bridge/megachips-stdpxxxx-ge-b850v3-fw.c | 16 +- drivers/gpu/drm/drm_atomic_helper.c | 2 +- drivers/gpu/drm/drm_vblank.c | 172 ++++++++++++- drivers/gpu/drm/drm_vblank_helper.c | 176 +++++++++++++ drivers/gpu/drm/i915/display/intel_dp.c | 2 +- drivers/gpu/drm/mediatek/mtk_cec.c | 2 +- drivers/gpu/drm/mediatek/mtk_hdmi_ddc.c | 2 +- drivers/gpu/drm/msm/adreno/adreno_gpu.c | 6 + drivers/gpu/drm/msm/disp/dpu1/dpu_writeback.c | 3 +- drivers/gpu/drm/msm/disp/msm_disp_snapshot_util.c | 24 +- drivers/gpu/drm/msm/dsi/dsi_host.c | 1 + drivers/gpu/drm/msm/msm_gem_shrinker.c | 40 ++- drivers/gpu/drm/msm/msm_iommu.c | 5 +- drivers/gpu/drm/v3d/v3d_sched.c | 16 +- drivers/gpu/drm/v3d/v3d_submit.c | 22 +- drivers/gpu/drm/virtio/virtgpu_drv.h | 1 + drivers/gpu/drm/virtio/virtgpu_gem.c | 17 ++ drivers/gpu/drm/virtio/virtgpu_plane.c | 10 +- drivers/gpu/drm/vkms/vkms_crtc.c | 83 +------ drivers/gpu/drm/vkms/vkms_drv.h | 2 - drivers/gpu/drm/xe/display/xe_hdcp_gsc.c | 12 +- drivers/gpu/drm/xe/xe_gsc.c | 5 +- drivers/gpu/drm/xe/xe_gt_sriov_pf_monitor.c | 6 +- drivers/gpu/drm/xe/xe_gt_sriov_pf_monitor.h | 2 +- drivers/gpu/drm/xe/xe_gt_sriov_vf.c | 24 +- drivers/gpu/drm/xe/xe_gt_sriov_vf.h | 6 +- drivers/gpu/drm/xe/xe_oa.c | 6 +- drivers/hid/hid-quirks.c | 2 +- drivers/hid/hid-uclogic-core.c | 4 +- .../intel-quickspi/quickspi-protocol.c | 4 +- drivers/hwmon/lm90.c | 26 +- drivers/hwmon/pmbus/adm1266.c | 32 ++- drivers/infiniband/hw/mana/main.c | 1 + drivers/infiniband/sw/siw/siw_qp_rx.c | 15 ++ drivers/infiniband/ulp/rtrs/rtrs-srv-sysfs.c | 2 +- drivers/iommu/amd/debugfs.c | 43 ++-- drivers/irqchip/irq-ath79-cpu.c | 7 - drivers/mfd/bcm2835-pm.c | 1 + drivers/net/dsa/mt7530.c | 47 ++-- drivers/net/ethernet/airoha/airoha_eth.c | 10 +- drivers/net/ethernet/amd/pds_core/debugfs.c | 7 +- drivers/net/ethernet/amd/pds_core/dev.c | 11 +- drivers/net/ethernet/amd/pds_core/devlink.c | 6 +- drivers/net/ethernet/atheros/ag71xx.c | 3 + drivers/net/ethernet/broadcom/genet/bcmgenet.c | 9 +- drivers/net/ethernet/cirrus/cs89x0.c | 2 - drivers/net/ethernet/cortina/gemini.c | 21 +- drivers/net/ethernet/intel/ice/ice_dcb_lib.c | 4 +- drivers/net/ethernet/intel/ice/ice_main.c | 10 +- drivers/net/ethernet/intel/ice/ice_ptp_hw.c | 33 ++- drivers/net/ethernet/intel/ice/ice_txrx.c | 7 +- drivers/net/ethernet/intel/ice/virt/queues.c | 2 +- drivers/net/ethernet/intel/idpf/idpf_ptp.c | 4 +- drivers/net/ethernet/intel/igc/igc_tsn.c | 9 +- drivers/net/ethernet/intel/ixgbevf/ixgbevf_main.c | 1 + drivers/net/ethernet/marvell/octeontx2/af/cgx.c | 7 +- .../net/ethernet/marvell/octeontx2/af/rvu_npc.c | 2 +- drivers/net/ethernet/marvell/octeontx2/nic/rep.c | 3 +- .../ethernet/mellanox/mlx5/core/en/reporter_tx.c | 6 +- .../ethernet/mellanox/mlx5/core/en_accel/ipsec.c | 7 +- .../net/ethernet/mellanox/mlx5/core/esw/ipsec_fs.c | 3 +- .../net/ethernet/microchip/lan966x/lan966x_main.c | 8 +- drivers/net/ethernet/microsoft/mana/hw_channel.c | 35 ++- drivers/net/ethernet/qlogic/qed/qed_cxt.c | 2 + drivers/net/ethernet/ti/icssm/icssm_prueth.c | 1 + drivers/net/ifb.c | 11 +- drivers/net/ovpn/io.c | 12 +- drivers/net/ovpn/main.c | 12 +- drivers/net/ovpn/netlink.c | 8 +- drivers/net/ovpn/peer.c | 23 +- drivers/net/ovpn/peer.h | 1 - drivers/net/ovpn/stats.h | 16 ++ drivers/net/ovpn/tcp.c | 19 +- drivers/net/ovpn/udp.c | 2 +- drivers/net/phy/dp83tc811.c | 1 + drivers/net/phy/phy-c45.c | 8 + drivers/net/phy/phy_device.c | 6 +- drivers/net/pse-pd/pse_core.c | 2 +- drivers/net/tap.c | 2 +- drivers/net/wireless/ath/ath10k/wmi.c | 17 +- drivers/net/wireless/ath/ath11k/dp_rx.c | 3 +- drivers/net/wireless/ath/ath11k/hal.c | 14 +- drivers/net/wireless/ath/ath11k/hal_rx.c | 5 +- drivers/net/wireless/ath/ath11k/testmode.c | 1 + drivers/net/wireless/ath/ath11k/wmi.c | 19 +- drivers/net/wireless/intel/iwlwifi/mld/link.c | 13 +- drivers/net/wireless/intel/iwlwifi/mld/tx.c | 15 +- drivers/net/wireless/intel/iwlwifi/mvm/mac-ctxt.c | 27 +- drivers/net/wireless/intel/iwlwifi/mvm/utils.c | 14 +- drivers/net/wireless/microchip/wilc1000/wlan.c | 2 +- drivers/net/wwan/iosm/iosm_ipc_imem.c | 2 + drivers/nvme/host/ioctl.c | 5 +- drivers/nvme/host/pci.c | 6 +- drivers/phy/marvell/phy-mvebu-a3700-utmi.c | 5 +- drivers/phy/qualcomm/phy-qcom-qmp-ufs.c | 1 + drivers/phy/samsung/phy-exynos5-usbdrd.c | 7 +- drivers/phy/tegra/xusb-tegra186.c | 33 ++- drivers/phy/tegra/xusb.h | 1 + drivers/pinctrl/meson/pinctrl-amlogic-a4.c | 6 +- drivers/pinctrl/qcom/pinctrl-ipq4019.c | 2 +- drivers/pinctrl/qcom/pinctrl-msm.h | 5 + drivers/pinctrl/qcom/pinctrl-qcs615.c | 6 +- drivers/pinctrl/qcom/pinctrl-sm8150.c | 8 +- drivers/pinctrl/renesas/pinctrl-rzg2l.c | 23 +- .../platform/surface/surface_aggregator_registry.c | 2 - drivers/platform/x86/adv_swbutton.c | 6 +- drivers/platform/x86/hp/hp_accel.c | 3 + drivers/platform/x86/intel/hid.c | 6 +- drivers/platform/x86/intel/vbtn.c | 6 +- drivers/regulator/tps65219-regulator.c | 135 +++++++--- drivers/scsi/isci/host.c | 3 + drivers/scsi/sd.c | 3 +- drivers/spi/spi-amd.c | 2 +- drivers/spi/spi-dw-dma.c | 2 +- drivers/spi/spi-ep93xx.c | 2 + drivers/spi/spi-mtk-snfi.c | 2 +- drivers/spi/spi-qup.c | 3 + drivers/spi/spi-sprd.c | 3 +- drivers/spi/spi-ti-qspi.c | 1 + drivers/virt/coco/sev-guest/sev-guest.c | 10 +- fs/afs/dir.c | 11 +- fs/btrfs/backref.c | 11 +- fs/btrfs/block-group.c | 3 +- fs/btrfs/ctree.c | 17 +- fs/btrfs/dir-item.c | 3 +- fs/btrfs/extent-tree.c | 55 ++--- fs/btrfs/free-space-tree.c | 29 +-- fs/btrfs/fs.h | 4 + fs/btrfs/inode-item.c | 3 +- fs/btrfs/inode.c | 7 +- fs/btrfs/ioctl.c | 60 ++--- fs/btrfs/print-tree.c | 14 +- fs/btrfs/qgroup.c | 272 ++++++++++++--------- fs/btrfs/relocation.c | 4 +- fs/btrfs/root-tree.c | 4 +- fs/btrfs/send.c | 10 +- fs/btrfs/super.c | 10 +- fs/btrfs/tree-checker.c | 21 +- fs/btrfs/tree-log.c | 42 ++-- fs/btrfs/volumes.c | 3 +- fs/btrfs/xattr.c | 3 +- fs/erofs/zdata.c | 15 +- fs/fuse/dir.c | 20 +- fs/jfs/namei.c | 2 +- fs/mnt_idmapping.c | 2 + fs/netfs/buffered_read.c | 64 ++--- fs/netfs/buffered_write.c | 172 ++++++++----- fs/netfs/direct_read.c | 42 +--- fs/netfs/internal.h | 3 + fs/netfs/iterator.c | 26 +- fs/netfs/misc.c | 8 +- fs/netfs/read_collect.c | 13 +- fs/netfs/read_retry.c | 11 +- fs/netfs/read_single.c | 23 +- fs/netfs/write_issue.c | 48 ++-- fs/nfsd/nfs4state.c | 7 + fs/nsfs.c | 2 +- fs/ntfs3/file.c | 12 +- fs/orangefs/namei.c | 2 +- fs/smb/client/cifs_spnego.c | 16 ++ fs/smb/client/cifsfs.c | 2 + fs/smb/client/netlink.c | 6 +- fs/smb/client/smb2ops.c | 4 +- fs/smb/client/smb2transport.c | 2 + fs/smb/server/oplock.c | 6 +- fs/smb/server/smb2pdu.c | 15 +- fs/smb/server/smbacl.c | 78 ++++-- fs/smb/server/vfs_cache.c | 118 ++++++--- fs/sysfs/group.c | 2 +- fs/zonefs/super.c | 6 +- include/asm-generic/kprobes.h | 2 +- include/asm-generic/ring_buffer.h | 13 + include/crypto/krb5.h | 9 +- include/drm/drm_modeset_helper_vtables.h | 12 + include/drm/drm_vblank.h | 32 +++ include/drm/drm_vblank_helper.h | 56 +++++ include/linux/cgroup.h | 1 + include/linux/cleanup.h | 5 + include/linux/fprobe.h | 5 + include/linux/fwnode.h | 1 + include/linux/gfp_types.h | 10 +- include/linux/highmem.h | 7 +- include/linux/libata.h | 7 +- include/linux/netfilter/x_tables.h | 3 +- include/linux/netfilter_arp/arp_tables.h | 1 - include/linux/netfilter_ipv4/ip_tables.h | 1 - include/linux/netfilter_ipv6/ip6_tables.h | 1 - include/linux/netfs.h | 2 +- include/linux/soc/airoha/airoha_offload.h | 6 +- include/net/bluetooth/bluetooth.h | 1 + include/net/net_shaper.h | 1 + include/net/netfilter/nf_queue.h | 1 + include/net/tcp.h | 7 +- include/trace/events/btrfs.h | 4 +- include/trace/events/netfs.h | 8 + include/trace/events/rxrpc.h | 1 + io_uring/net.c | 26 +- io_uring/nop.c | 4 +- io_uring/waitid.c | 1 + kernel/cgroup/cpuset.c | 8 +- kernel/cgroup/rstat.c | 37 +-- kernel/dma/debug.c | 9 +- kernel/dma/mapping.c | 4 - kernel/irq_work.c | 7 + kernel/sched/core.c | 163 +++++------- kernel/sched/ext.c | 44 ++-- kernel/sched/sched.h | 33 ++- kernel/sched/syscalls.c | 97 ++++---- kernel/trace/bpf_trace.c | 3 +- kernel/trace/fprobe.c | 200 ++++++++++----- kernel/trace/ring_buffer.c | 30 ++- kernel/trace/trace_events_hist.c | 6 +- kernel/trace/tracing_map.c | 17 +- lib/kunit/Kconfig | 5 +- lib/tests/test_kprobes.c | 29 ++- mm/damon/sysfs-schemes.c | 1 + mm/memcontrol.c | 6 +- mm/memory.c | 24 +- mm/memory_hotplug.c | 2 + mm/page_alloc.c | 8 +- net/batman-adv/bat_iv_ogm.c | 82 +++++-- net/batman-adv/bat_v_ogm.c | 59 +++-- net/batman-adv/bridge_loop_avoidance.c | 109 ++++++--- net/batman-adv/distributed-arp-table.c | 3 + net/batman-adv/fragmentation.c | 58 ++++- net/batman-adv/gateway_client.c | 4 + net/batman-adv/mesh-interface.c | 1 + net/batman-adv/originator.c | 4 +- net/batman-adv/tp_meter.c | 117 +++++---- net/batman-adv/translation-table.c | 55 ++++- net/batman-adv/tvlv.c | 28 ++- net/batman-adv/tvlv.h | 2 +- net/batman-adv/types.h | 59 +++-- net/bluetooth/af_bluetooth.c | 99 ++++++-- net/bluetooth/bnep/core.c | 2 +- net/bluetooth/iso.c | 14 +- net/bluetooth/l2cap_core.c | 2 +- net/bluetooth/l2cap_sock.c | 51 +++- net/bluetooth/mgmt.c | 6 + net/bluetooth/rfcomm/sock.c | 9 +- net/bluetooth/sco.c | 9 +- net/bridge/br_mrp_netlink.c | 4 +- net/bridge/br_multicast.c | 27 +- net/bridge/netfilter/ebtable_broute.c | 14 +- net/bridge/netfilter/ebtable_filter.c | 14 +- net/bridge/netfilter/ebtable_nat.c | 12 +- net/bridge/netfilter/ebtables.c | 71 +++--- net/core/dev.c | 21 +- net/core/gro.c | 3 + net/core/skmsg.c | 9 +- net/ethtool/bitset.c | 8 +- net/ethtool/phy.c | 36 ++- net/ipv4/inet_connection_sock.c | 2 +- net/ipv4/netfilter/arp_tables.c | 18 +- net/ipv4/netfilter/arptable_filter.c | 27 +- net/ipv4/netfilter/ip_tables.c | 18 +- net/ipv4/netfilter/iptable_filter.c | 27 +- net/ipv4/netfilter/iptable_mangle.c | 29 +-- net/ipv4/netfilter/iptable_nat.c | 6 +- net/ipv4/netfilter/iptable_raw.c | 26 +- net/ipv4/netfilter/iptable_security.c | 27 +- net/ipv4/raw.c | 2 +- net/ipv4/tcp.c | 3 - net/ipv4/tcp_ao.c | 3 +- net/ipv4/tcp_input.c | 15 +- net/ipv4/tcp_ipv4.c | 3 +- net/ipv6/exthdrs.c | 21 +- net/ipv6/netfilter/ip6_tables.c | 18 +- net/ipv6/netfilter/ip6t_hbh.c | 4 + net/ipv6/netfilter/ip6table_filter.c | 26 +- net/ipv6/netfilter/ip6table_mangle.c | 27 +- net/ipv6/netfilter/ip6table_nat.c | 6 +- net/ipv6/netfilter/ip6table_raw.c | 24 +- net/ipv6/netfilter/ip6table_security.c | 27 +- net/ipv6/tcp_ipv6.c | 3 +- net/l2tp/l2tp_core.c | 2 +- net/mac80211/mlme.c | 5 +- net/mac80211/parse.c | 71 +++--- net/mptcp/pm.c | 56 ++++- net/netfilter/ipset/ip_set_hash_ipmark.c | 6 +- net/netfilter/ipset/ip_set_hash_ipport.c | 5 +- net/netfilter/ipset/ip_set_hash_ipportip.c | 5 +- net/netfilter/ipset/ip_set_hash_ipportnet.c | 5 +- net/netfilter/nf_queue.c | 4 +- net/netfilter/nfnetlink_queue.c | 2 + net/netfilter/nft_inner.c | 3 +- net/netfilter/x_tables.c | 100 ++++++-- net/phonet/pep.c | 19 +- net/rxrpc/rxgk.c | 15 +- net/shaper/shaper.c | 224 ++++++++++++----- net/shaper/shaper_nl_gen.c | 7 +- net/shaper/shaper_nl_gen.h | 2 + net/smc/af_smc.c | 3 +- net/smc/smc_tracepoint.h | 2 +- net/tls/tls_sw.c | 46 ++-- net/unix/af_unix.c | 11 +- net/vmw_vsock/virtio_transport_common.c | 103 ++++---- net/vmw_vsock/vmci_transport.c | 2 +- net/wireless/scan.c | 3 + scripts/gcc-plugins/gcc-common.h | 4 +- scripts/package/PKGBUILD | 2 +- security/lsm_syscalls.c | 9 +- sound/core/pcm_lib.c | 3 + sound/core/seq/seq_ump_client.c | 22 +- sound/hda/codecs/realtek/alc269.c | 12 +- sound/hda/codecs/side-codecs/cs35l41_hda.c | 4 +- sound/hda/codecs/side-codecs/cs35l56_hda.c | 1 + sound/pci/asihpi/hpicmn.c | 6 + sound/soc/amd/acp/acp-sdw-legacy-mach.c | 2 +- sound/soc/codecs/cs35l56-sdw.c | 3 +- sound/soc/codecs/fs210x.c | 2 +- sound/soc/sdw_utils/soc_sdw_utils.c | 4 + sound/soc/soc-utils.c | 1 + sound/soc/sof/amd/acp.c | 2 +- sound/usb/misc/ua101.c | 5 +- sound/usb/mixer_scarlett2.c | 9 +- tools/testing/selftests/mm/hmm-tests.c | 50 ++++ tools/testing/selftests/mm/run_vmtests.sh | 2 +- tools/testing/selftests/net/lib/xdp_native.bpf.c | 55 +++-- tools/testing/selftests/ublk/kublk.c | 11 + 399 files changed, 4735 insertions(+), 2348 deletions(-)

1 hour, 22 minutes

[PATCH 6.6 000/186] 6.6.142-rc1 review

by Greg Kroah-Hartman

This is the start of the stable review cycle for the 6.6.142 release. There are 186 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know. Responses should be made by Sat, 30 May 2026 19:48:57 +0000. Anything received after that time might be too late. The whole patch series can be found in one patch at: https://www.kernel.org/pub/linux/kernel/v6.x/stable-review/patch-6.6.142-rc… or in the git tree and branch at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-6.6.y and the diffstat can be found below. thanks, greg k-h ------------- Pseudo-Shortlog of commits: Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> Linux 6.6.142-rc1 Tiezhu Yang <yangtiezhu(a)loongson.cn> LoongArch: kprobes: Fix handling of fatal unrecoverable recursions Sabrina Dubroca <sd(a)queasysnail.net> net: gro: don't merge zcopy skbs Nikhil P. Rao <nikhil.rao(a)amd.com> pds_core: ensure null-termination for firmware version strings Su Hui <suhui(a)nfschina.com> pds_core: add an error code check in pdsc_dl_info_get Aditya Garg <gargaditya(a)linux.microsoft.com> net: mana: validate rx_req_idx to prevent out-of-bounds array access Richard Fitzgerald <rf(a)opensource.cirrus.com> ASoC: cs35l56: Fix flushing of IRQ work in cs35l56_sdw_remove() Bartosz Golaszewski <bartosz.golaszewski(a)oss.qualcomm.com> gpio: cdev: check if uAPI v2 config attributes are correctly zeroed Andy Shevchenko <andy.shevchenko(a)gmail.com> gpiolib: cdev: use !mem_is_zero() instead of memchr_inv(s, 0, n) Jani Nikula <jani.nikula(a)intel.com> string: add mem_is_zero() helper to check if memory area is all zeros Xingwang Xiang <v3rdant.xiang(a)gmail.com> bpf, skmsg: fix verdict sk_data_ready racing with ktls rx Rosen Penev <rosenp(a)gmail.com> net: ag71xx: check error for platform_get_irq Jiajia Liu <liujiajia(a)kylinos.cn> Bluetooth: btmtk: fix urb->setup_packet leak in error paths Chris Lu <chris.lu(a)mediatek.com> Bluetooth: btmtk: move btusb_mtk_hci_wmt_sync to btmtk.c Chris Lu <chris.lu(a)mediatek.com> Bluetooth: btmtk: rename btmediatek_data Hao Qin <hao.qin(a)mediatek.com> Bluetooth: btusb: mediatek: refactor the function btusb_mtk_reset Sean Wang <sean.wang(a)mediatek.com> Bluetooth: btmtk: add the function to get the fw name David Carlier <devnexen(a)gmail.com> tracing: Avoid NULL return from hist_field_name() on truncation Zhang Cen <rollkingzzc(a)gmail.com> ALSA: seq: Serialize UMP output teardown with event_input Takashi Iwai <tiwai(a)suse.de> ALSA: seq: ump: Use guard() for locking Peter Zijlstra <peterz(a)infradead.org> ptrace: Convert ptrace_attach() to use lock guards Nikhil P. Rao <nikhil.rao(a)amd.com> pds_core: fix debugfs_lookup dentry leak and error handling Nikhil P. Rao <nikhil.rao(a)amd.com> pds_core: fix error handling in pdsc_devcmd_wait Ido Schimmel <idosch(a)nvidia.com> bridge: mcast: Fix a possible use-after-free when removing a bridge port Petr Machata <petrm(a)nvidia.com> net: bridge: Flush multicast groups when snooping is disabled Guangshuo Li <lgs201920130244(a)gmail.com> RDMA/rtrs: Fix use-after-free in path file creation cleanup Rafael J. Wysocki <rafael.j.wysocki(a)intel.com> platform/x86: intel-vbtn: Check ACPI_HANDLE() against NULL Rafael J. Wysocki <rafael.j.wysocki(a)intel.com> platform/x86: intel-hid: Check ACPI_HANDLE() against NULL Rafael J. Wysocki <rafael.j.wysocki(a)intel.com> platform/x86: hp_accel: Check ACPI_COMPANION() against NULL Rafael J. Wysocki <rafael.j.wysocki(a)intel.com> platform/x86: adv_swbutton: Check ACPI_HANDLE() against NULL Erni Sri Satya Vennela <ernis(a)linux.microsoft.com> net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer Daniel Golle <daniel(a)makrotopia.org> net: dsa: mt7530: preserve VLAN tags on trapped link-local frames Arınç ÜNAL <arinc.unal(a)arinc9.com> net: dsa: mt7530: rename mt753x_bpdu_port_fw enum to mt753x_to_cpu_fw Daniel Golle <daniel(a)makrotopia.org> net: dsa: mt7530: fix FDB entries not aging out with short timeout Matthew Leach <matthew.leach(a)collabora.com> wifi: ath11k: fix peer resolution on rx path when peer_id=0 Dmitry Baryshkov <dmitry.baryshkov(a)oss.qualcomm.com> drm/msm/snapshot: fix dumping of the unaligned regions Felix Gu <ustc.gu(a)gmail.com> spi: mtk-snfi: Fix resource leak in mtk_snand_read_page_cache() Jeroen Massar <jmassar(a)nvidia.com> net/mlx5: Do not restore destination-less TC rules Chuck Lever <chuck.lever(a)oracle.com> tls: Preserve sk_err across recvmsg() when data has been copied Juergen Gross <jgross(a)suse.com> x86/xen: Fix xen_e820_swap_entry_with_ram() Sven Schuchmann <schuchmann(a)schleissheimer.de> net: phy: DP83TC811: add reading of abilities Oleksij Rempel <o.rempel(a)pengutronix.de> net: phy: c45: add genphy_c45_pma_read_ext_abilities() function Jakub Kicinski <kuba(a)kernel.org> net: tls: prevent chain-after-chain in plain text SG Jakub Kicinski <kuba(a)kernel.org> net: tls: fix off-by-one in sg_chain entry count for wrapped sk_msg ring Xiang Mei <xmei5(a)asu.edu> net/smc: reject CHID-0 ACCEPT that matches an empty ism_dev slot Sayali Patil <sayalip(a)linux.ibm.com> powerpc/time: Remove redundant preempt_disable|enable() calls from arch_irq_work_raise() Mikko Perttunen <mperttunen(a)nvidia.com> drm/msm: Fix iommu_map_sgtable() return value check and avoid WARN Dmitry Baryshkov <dmitry.baryshkov(a)oss.qualcomm.com> drm/msm/dsi: don't dump registers past the mapped region Chenguang Zhao <zhaochenguang(a)kylinos.cn> ethtool: fix ethnl_bitmap32_not_zero() bit interval semantics Xiang Mei <xmei5(a)asu.edu> net/smc: avoid NULL deref of conn->lnk in smc_msg_event tracepoint Zack McKevitt <zachary.mckevitt(a)oss.qualcomm.com> accel/qaic: Add overflow check to remap_pfn_range during mmap Lukas Bulwahn <lukas.bulwahn(a)redhat.com> HID: quirks: really enable the intended work around for appledisplay Nicolas Escande <nico.escande(a)gmail.com> wifi: ath11k: fix error path leak in ath11k_tm_cmd_wmi_ftm() Nicolas Escande <nico.escande(a)gmail.com> wifi: ath11k: fix error path leaks in some WMI WOW calls Ethan Nelson-Moore <enelsonmoore(a)gmail.com> net: ethernet: cs89x0: remove stale CONFIG_MACH_MX31ADS reference Linus Walleij <linusw(a)kernel.org> net: ethernet: cortina: Carry over frag counter Andreas Haarmann-Thiemann <eitschman(a)nebelreich.de> net: ethernet: cortina: Drop half-assembled SKB Linus Walleij <linusw(a)kernel.org> net: ethernet: cortina: Make RX SKB per-port David Howells <dhowells(a)redhat.com> netfs: Fix overrun check in netfs_extract_user_iter() Johannes Thumshirn <johannes.thumshirn(a)wdc.com> zonefs: handle integer overflow in zonefs_fname_to_fno Jiayuan Chen <jiayuan.chen(a)linux.dev> irq_work: Fix use-after-free in irq_work_single() on PREEMPT_RT Rosen Penev <rosenp(a)gmail.com> irqchip/ath79-cpu: Remove unused function Gabor Juhos <j4g8y7(a)gmail.com> phy: marvell: mvebu-a3700-utmi: fix incorrect USB2_PHY_CTRL register access Myeonghun Pak <mhun512(a)gmail.com> net: lan966x: avoid unregistering netdev on register failure Bart Van Assche <bvanassche(a)acm.org> ice: fix locking in ice_dcb_rebuild() Kuniyuki Iwashima <kuniyu(a)google.com> tcp: Fix imbalanced icsk_accept_queue count. Martin Kaiser <martin(a)kaiser.cx> test_kprobes: clear kprobes between test runs Jianpeng Chang <jianpeng.chang.cn(a)windriver.com> kprobes: skip non-symbol addresses in kprobe_add_ksym_blacklist() Florian Westphal <fw(a)strlen.de> netfilter: bridge: eb_tables: close module init race Florian Westphal <fw(a)strlen.de> netfilter: x_tables: close dangling table module init race Florian Westphal <fw(a)strlen.de> netfilter: ebtables: close dangling table module init race Florian Westphal <fw(a)strlen.de> netfilter: ebtables: move to two-stage removal scheme Florian Westphal <fw(a)strlen.de> netfilter: x_tables: add and use xtables_unregister_table_exit Florian Westphal <fw(a)strlen.de> netfilter: x_tables: add and use xt_unregister_table_pre_exit Pablo Neira Ayuso <pablo(a)netfilter.org> netfilter: Exclude LEGACY TABLES on PREEMPT_RT. Breno Leitao <leitao(a)debian.org> netfilter: Make legacy configs user selectable Kuniyuki Iwashima <kuniyu(a)amazon.com> netfilter: arptables: Select NETFILTER_FAMILY_ARP when building arp_tables.c Florian Westphal <fw(a)strlen.de> netfilter: xtables: fix up kconfig dependencies Florian Westphal <fw(a)strlen.de> netfilter: ebtables: allow xtables-nft only builds Florian Westphal <fw(a)strlen.de> netfilter: xtables: allow xtables-nft only builds Florian Westphal <fw(a)strlen.de> netfilter: arptables: allow xtables-nft only builds Florian Westphal <fw(a)strlen.de> netfilter: x_tables: unregister the templates first Filipe Manana <fdmanana(a)suse.com> btrfs: tracepoints: fix sleep while in atomic context in btrfs_sync_file() Shuhao Fu <sfual(a)cse.ust.hk> ALSA: hda: cs35l56: Put ACPI device after setting companion Guenter Roeck <linux(a)roeck-us.net> ARM: integrator: Fix early initialization Maulik Shah <maulik.shah(a)oss.qualcomm.com> pinctrl: qcom: Fix wakeirq map by removing disconnected irqs for sm8150 David Gow <david(a)davidgow.net> kunit: config: KUNIT_DEBUGFS should depend on DEBUG_FS David Gow <david(a)davidgow.net> kunit: config: Enable KUNIT_DEBUGFS by default Sudeep Holla <sudeep.holla(a)kernel.org> firmware: arm_ffa: Skip free_pages on RX buffer alloc failure Sudeep Holla <sudeep.holla(a)kernel.org> firmware: arm_ffa: Check for NULL FF-A ID table while driver registration Takashi Iwai <tiwai(a)suse.de> HID: uclogic: Fix regression of input name assignment Abdurrahman Hussain <abdurrahman(a)nexthop.ai> hwmon: (pmbus/adm1266) reject short block-read responses in the GPIO accessors Abdurrahman Hussain <abdurrahman(a)nexthop.ai> hwmon: (pmbus/adm1266) register the nvmem device after pmbus_do_probe() Abdurrahman Hussain <abdurrahman(a)nexthop.ai> hwmon: (pmbus/adm1266) register the gpio_chip after pmbus_do_probe() Abdurrahman Hussain <abdurrahman(a)nexthop.ai> hwmon: (pmbus/adm1266) don't clobber GPIO bits before PDIO read in get_multiple Abdurrahman Hussain <abdurrahman(a)nexthop.ai> hwmon: (pmbus/adm1266) cap PDIO scan in get_multiple at ADM1266_PDIO_NR Abdurrahman Hussain <abdurrahman(a)nexthop.ai> hwmon: (pmbus/adm1266) bounce blackbox records through a protocol-sized buffer Abdurrahman Hussain <abdurrahman(a)nexthop.ai> hwmon: (pmbus/adm1266) include PEC byte in pmbus_block_xfer read buffer Abdurrahman Hussain <abdurrahman(a)nexthop.ai> hwmon: (pmbus/adm1266) reject implausible blackbox record_count Abdurrahman Hussain <abdurrahman(a)nexthop.ai> hwmon: (pmbus/adm1266) seed timestamp from the real-time clock Sven Eckelmann <sven(a)narfation.org> batman-adv: tt: fix negative tt_buff_len Sven Eckelmann <sven(a)narfation.org> batman-adv: tt: fix negative last_changeset_len Sven Eckelmann <sven(a)narfation.org> batman-adv: tp_meter: fix race condition in send error reporting Sven Eckelmann <sven(a)narfation.org> batman-adv: tp_meter: fix tp_vars reference leak in receiver shutdown Sven Eckelmann <sven(a)narfation.org> batman-adv: tp_meter: avoid use of uninit sender vars Sven Eckelmann <sven(a)narfation.org> batman-adv: bla: fix report_work leak on backbone_gw purge Sven Eckelmann <sven(a)narfation.org> batman-adv: frag: disallow unicast fragment in fragment Luxiao Xu <rakukuip(a)gmail.com> batman-adv: fix tp_meter counter underflow during shutdown Ruide Cao <caoruide123(a)gmail.com> batman-adv: fix fragment reassembly length accounting Sven Eckelmann <sven(a)narfation.org> batman-adv: dat: handle forward allocation error Ruijie Li <ruijieli51(a)gmail.com> batman-adv: clear current gateway during teardown Sven Eckelmann <sven(a)narfation.org> batman-adv: mcast: fix use-after-free in orig_node RCU release Harry Wentland <harry.wentland(a)amd.com> drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async Harry Wentland <harry.wentland(a)amd.com> drm/amd/display: Validate GPIO pin LUT table size before iterating Harry Wentland <harry.wentland(a)amd.com> drm/amd/display: Fix integer overflow in bios_get_image() Osama Abdelkader <osama.abdelkader(a)gmail.com> drm/bridge: megachips: remove bridge when irq request fails Julien Chauveau <chauveau.julien(a)gmail.com> drm/bridge: it66121: acquire reset GPIO in probe Deepanshu Kartikey <kartikey406(a)gmail.com> drm/virtio: use uninterruptible resv lock for plane updates Bartosz Golaszewski <bartosz.golaszewski(a)oss.qualcomm.com> device property: set fwnode->secondary to NULL in fwnode_init() Huacai Chen <chenhuacai(a)kernel.org> LoongArch: Remove unused code to avoid build warning Michael Bommarito <michael.bommarito(a)gmail.com> RDMA/siw: Reject MPA FPDU length underflow before signed receive math Johan Hovold <johan(a)kernel.org> spi: ti-qspi: fix use-after-free after DMA setup failure Johan Hovold <johan(a)kernel.org> spi: sprd: fix error pointer deref after DMA setup failure Michael Bommarito <michael.bommarito(a)gmail.com> scsi: isci: Fix use-after-free in device removal path Wayne Chang <waynec(a)nvidia.com> phy: tegra: xusb: Fix per-pad high-speed termination calibration Johan Hovold <johan(a)kernel.org> spi: qup: fix error pointer deref after DMA setup failure Osama Abdelkader <osama.abdelkader(a)gmail.com> drm/bridge: chipone-icn6211: use devm_drm_bridge_add in i2c probe Michael Bommarito <michael.bommarito(a)gmail.com> KVM: arm64: vgic-its: Reject restored DTE with out-of-range num_eventid_bits Vladimir Murzin <vladimir.murzin(a)arm.com> arm64: probes: Handle probes on hinted conditional branch instructions Masami Hiramatsu (Google) <mhiramat(a)kernel.org> tracing: Do not call map->ops->elt_free() if elt_alloc() fails Zhihao Cheng <chengzhihao1(a)huawei.com> cifs: Fix busy dentry used after unmounting John Walker <johnwalker0(a)gmail.com> wifi: cfg80211: advance loop vars in cfg80211_merge_profile() Marcin Szycik <marcin.szycik(a)intel.com> ice: fix setting promisc mode while adding VID filter Michael Bommarito <michael.bommarito(a)gmail.com> ixgbevf: fix use-after-free in VEPA multicast source pruning Michael Bommarito <michael.bommarito(a)gmail.com> ipv4: raw: reject IP_HDRINCL packets with ihl < 5 Kyle Farnung <kfarnung(a)gmail.com> wifi: ath11k: clear shared SRNG pointer state on restart Stefano Garzarella <sgarzare(a)redhat.com> vsock/virtio: reset connection on receiving queue overflow Minh Nguyen <minhnguyen.080505(a)gmail.com> vsock/vmci: fix UAF when peer resets connection during handshake Steven Rostedt <rostedt(a)goodmis.org> ring-buffer: Fix reporting of missed events in iterator Dawei Feng <dawei.feng(a)seu.edu.cn> qed: fix double free in qed_cxt_tables_alloc() Yizhou Zhao <zhaoyz24(a)mails.tsinghua.edu.cn> netfilter: nft_inner: Fix IPv6 inner_thoff desync Nan Li <tonanli66(a)gmail.com> netfilter: ipset: stop hash:* range iteration at end Haoze Xie <royenheart(a)gmail.com> netfilter: nf_queue: hold bridge skb->dev while queued Zhengchuan Liang <zcliangcn(a)gmail.com> netfilter: ip6t_hbh: reject oversized option lists Michael Bommarito <michael.bommarito(a)gmail.com> net: ifb: report ethtool stats over num_tx_queues Nicolai Buchwitz <nb(a)tipi-net.de> net: bcmgenet: keep RBUF EEE/PM disabled Zijing Yin <yzjaurora(a)gmail.com> phonet/pep: disable BH around forwarded sk_receive_skb() Jiexun Wang <wangjiexun2025(a)gmail.com> Bluetooth: serialize accept_q access Michael Bommarito <michael.bommarito(a)gmail.com> Bluetooth: MGMT: validate Add Extended Advertising Data length Mingyu Wang <25181214217(a)stu.xidian.edu.cn> Bluetooth: hci_uart: fix UAFs and race conditions in close and init paths Jann Horn <jannh(a)google.com> Bluetooth: bnep: Fix UAF read of dev->name David Carlier <devnexen(a)gmail.com> Bluetooth: ISO: drop ISO_END frames received without prior ISO_START Safa Karakuş <safa.karakus(a)secunnix.com> Bluetooth: fix UAF in l2cap_sock_cleanup_listen() vs l2cap_conn_del() Abdun Nihaal <nihaal(a)cse.iitm.ac.in> net: wwan: iosm: fix potential memory leaks in ipc_imem_init() Muchun Song <muchun.song(a)linux.dev> drivers/base/memory: fix memory block reference leak in poison accounting Ard Biesheuvel <ardb(a)kernel.org> efi: Allocate runtime workqueue before ACPI init Takashi Iwai <tiwai(a)suse.de> ALSA: asihpi: Fix potential OOB array access at reading cache Takashi Iwai <tiwai(a)suse.de> ALSA: pcm: Don't setup bogus iov_iter for silencing Cássio Gabriel <cassiogabrielcontato(a)gmail.com> ALSA: ua101: Reject too-short USB descriptors Abdurrahman Hussain <abdurrahman(a)nexthop.ai> hwmon: (pmbus/adm1266) widen blackbox-info buffer to I2C_SMBUS_BLOCK_MAX ChenXiaoSong <chenxiaosong(a)kylinos.cn> smb/server: promote S_DEL_ON_CLS to S_DEL_PENDING when close Henrique Carvalho <henrique.carvalho(a)suse.com> smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() Ferry Meng <mengferry(a)linux.alibaba.com> ksmbd: fix SID memory leak in set_posix_acl_entries_dacl() on overflow Jeremy Laratro <research(a)aradex.io> ksmbd: fix null pointer dereference in compare_guid_key() SeongJae Park <sj(a)kernel.org> mm/damon/sysfs-schemes: call missing mem_cgroup_iter_break() Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> sysfs: don't remove existing directory on update failure Adrian Hunter <adrian.hunter(a)intel.com> i3c: mipi-i3c-hci: Correct RING_CTRL_ABORT handling in DMA dequeue Sasha Levin <sashal(a)kernel.org> Revert "af_unix: Reject SIOCATMARK on non-stream sockets" Sasha Levin <sashal(a)kernel.org> Revert "s390/cio: Update purge function to unregister the unused subchannels" Sasha Levin <sashal(a)kernel.org> Revert "ice: Remove jumbo_remove step from TX path" Sasha Levin <sashal(a)kernel.org> Revert "ice: fix double-free of tx_buf skb" Asim Viladi Oglu Manizada <manizada(a)pm.me> smb: client: reject userspace cifs.spnego descriptions Kuniyuki Iwashima <kuniyu(a)google.com> af_unix: Give up GC if MSG_PEEK intervened. DaeMyung Kang <charsyam(a)gmail.com> ksmbd: close durable scavenger races against m_fp_list lookups Namjae Jeon <linkinjeon(a)kernel.org> ksmbd: validate owner of durable handle on reconnect Namjae Jeon <linkinjeon(a)kernel.org> ksmbd: add durable scavenger timer Namjae Jeon <linkinjeon(a)kernel.org> ksmbd: avoid reclaiming expired durable opens by the client Sasha Levin <sashal(a)kernel.org> Revert "x86/vdso: Fix output operand size of RDPID" Deepanshu Kartikey <kartikey406(a)gmail.com> wifi: mac80211: check tdls flag in ieee80211_tdls_oper Pengpeng Hou <pengpeng(a)iscas.ac.cn> s390/debug: Reject zero-length input before trimming a newline Danilo Krummrich <dakr(a)kernel.org> driver core: platform: use generic driver_override infrastructure Danilo Krummrich <dakr(a)kernel.org> driver core: generalize driver_override in struct device Fabian Godehardt <fg(a)emlix.com> spi: spidev: fix lock inversion between spi_lock and buf_lock Matthieu Baerts (NGI0) <matttbe(a)kernel.org> mptcp: pm: ADD_ADDR rtx: free sk if last Matthieu Baerts (NGI0) <matttbe(a)kernel.org> mptcp: pm: ADD_ADDR rtx: always decrease sk refcount Matthieu Baerts (NGI0) <matttbe(a)kernel.org> mptcp: pm: ADD_ADDR rtx: allow ID 0 Gang Yan <yangang(a)kylinos.cn> mptcp: sync the msk->sndbuf at accept() time ------------- Diffstat: Makefile | 4 +- arch/arm/mach-versatile/integrator_cp.c | 13 +- arch/arm64/include/asm/insn.h | 2 +- arch/arm64/kvm/vgic/vgic-its.c | 4 + arch/loongarch/kernel/kprobes.c | 4 +- arch/loongarch/mm/init.c | 4 - arch/powerpc/kernel/time.c | 6 +- arch/s390/kernel/debug.c | 3 + arch/x86/include/asm/segment.h | 8 +- arch/x86/xen/setup.c | 2 +- drivers/accel/qaic/qaic_data.c | 23 +- drivers/base/bus.c | 43 ++- drivers/base/core.c | 2 + drivers/base/dd.c | 60 ++++ drivers/base/memory.c | 8 +- drivers/base/platform.c | 37 +-- drivers/bluetooth/btmtk.c | 295 +++++++++++++++++- drivers/bluetooth/btmtk.h | 41 ++- drivers/bluetooth/btmtksdio.c | 1 + drivers/bluetooth/btmtkuart.c | 1 + drivers/bluetooth/btusb.c | 338 +++------------------ drivers/bluetooth/hci_ldisc.c | 48 ++- drivers/bus/simple-pm-bus.c | 4 +- drivers/clk/imx/clk-scu.c | 3 +- drivers/firmware/arm_ffa/bus.c | 4 +- drivers/firmware/arm_ffa/driver.c | 2 +- drivers/firmware/efi/efi.c | 28 +- drivers/gpio/gpiolib-cdev.c | 21 +- drivers/gpu/drm/amd/display/dc/bios/bios_parser2.c | 9 + .../drm/amd/display/dc/bios/bios_parser_helper.c | 9 +- drivers/gpu/drm/amd/display/dc/core/dc.c | 6 +- drivers/gpu/drm/bridge/chipone-icn6211.c | 4 +- drivers/gpu/drm/bridge/ite-it66121.c | 5 + .../drm/bridge/megachips-stdpxxxx-ge-b850v3-fw.c | 16 +- drivers/gpu/drm/msm/disp/msm_disp_snapshot_util.c | 24 +- drivers/gpu/drm/msm/dsi/dsi_host.c | 1 + drivers/gpu/drm/msm/msm_iommu.c | 5 +- drivers/gpu/drm/virtio/virtgpu_drv.h | 1 + drivers/gpu/drm/virtio/virtgpu_gem.c | 17 ++ drivers/gpu/drm/virtio/virtgpu_plane.c | 10 +- drivers/hid/hid-quirks.c | 2 +- drivers/hid/hid-uclogic-core.c | 4 +- drivers/hwmon/pmbus/adm1266.c | 32 +- drivers/i3c/master/mipi-i3c-hci/dma.c | 25 +- drivers/infiniband/sw/siw/siw_qp_rx.c | 15 + drivers/infiniband/ulp/rtrs/rtrs-srv-sysfs.c | 2 +- drivers/irqchip/irq-ath79-cpu.c | 7 - drivers/net/dsa/mt7530.c | 79 ++--- drivers/net/dsa/mt7530.h | 70 ++--- drivers/net/ethernet/amd/pds_core/debugfs.c | 7 +- drivers/net/ethernet/amd/pds_core/dev.c | 11 +- drivers/net/ethernet/amd/pds_core/devlink.c | 8 +- drivers/net/ethernet/atheros/ag71xx.c | 3 + drivers/net/ethernet/broadcom/genet/bcmgenet.c | 9 +- drivers/net/ethernet/cirrus/cs89x0.c | 2 - drivers/net/ethernet/cortina/gemini.c | 21 +- drivers/net/ethernet/intel/ice/ice_dcb_lib.c | 4 +- drivers/net/ethernet/intel/ice/ice_main.c | 2 +- drivers/net/ethernet/intel/ice/ice_txrx.c | 7 +- drivers/net/ethernet/intel/ixgbevf/ixgbevf_main.c | 1 + .../net/ethernet/mellanox/mlx5/core/esw/ipsec_fs.c | 3 +- .../net/ethernet/microchip/lan966x/lan966x_main.c | 8 +- drivers/net/ethernet/microsoft/mana/hw_channel.c | 35 ++- drivers/net/ethernet/qlogic/qed/qed_cxt.c | 2 + drivers/net/ifb.c | 11 +- drivers/net/phy/dp83tc811.c | 1 + drivers/net/phy/phy-c45.c | 129 ++++---- drivers/net/wireless/ath/ath11k/dp_rx.c | 3 +- drivers/net/wireless/ath/ath11k/hal.c | 14 +- drivers/net/wireless/ath/ath11k/hal_rx.c | 5 +- drivers/net/wireless/ath/ath11k/testmode.c | 1 + drivers/net/wireless/ath/ath11k/wmi.c | 19 +- drivers/net/wwan/iosm/iosm_ipc_imem.c | 2 + drivers/phy/marvell/phy-mvebu-a3700-utmi.c | 5 +- drivers/phy/tegra/xusb-tegra186.c | 33 +- drivers/phy/tegra/xusb.h | 1 + drivers/pinctrl/qcom/pinctrl-sm8150.c | 8 +- drivers/platform/x86/adv_swbutton.c | 6 +- drivers/platform/x86/hp/hp_accel.c | 3 + drivers/platform/x86/intel/hid.c | 6 +- drivers/platform/x86/intel/vbtn.c | 6 +- drivers/s390/cio/device.c | 37 +-- drivers/scsi/isci/host.c | 3 + drivers/slimbus/qcom-ngd-ctrl.c | 6 +- drivers/spi/spi-mtk-snfi.c | 2 +- drivers/spi/spi-qup.c | 3 + drivers/spi/spi-sprd.c | 3 +- drivers/spi/spi-ti-qspi.c | 1 + drivers/spi/spidev.c | 63 ++-- fs/netfs/iterator.c | 26 +- fs/smb/client/cifs_spnego.c | 16 + fs/smb/client/cifsfs.c | 2 + fs/smb/client/smb2transport.c | 2 + fs/smb/server/mgmt/user_session.c | 10 +- fs/smb/server/oplock.c | 13 +- fs/smb/server/oplock.h | 1 + fs/smb/server/server.c | 1 + fs/smb/server/server.h | 1 + fs/smb/server/smb2pdu.c | 5 +- fs/smb/server/smb2pdu.h | 2 + fs/smb/server/smbacl.c | 12 +- fs/smb/server/vfs_cache.c | 325 ++++++++++++++++++-- fs/smb/server/vfs_cache.h | 15 +- fs/sysfs/group.c | 2 +- fs/zonefs/super.c | 6 +- include/asm-generic/kprobes.h | 2 +- include/linux/device.h | 54 ++++ include/linux/device/bus.h | 4 + include/linux/fwnode.h | 1 + include/linux/netfilter/x_tables.h | 3 +- include/linux/netfilter_arp/arp_tables.h | 1 - include/linux/netfilter_ipv4/ip_tables.h | 1 - include/linux/netfilter_ipv6/ip6_tables.h | 1 - include/linux/phy.h | 1 + include/linux/platform_device.h | 5 - include/linux/sched/task.h | 2 + include/linux/spinlock.h | 26 ++ include/linux/string.h | 12 + include/net/af_unix.h | 1 + include/net/bluetooth/bluetooth.h | 1 + include/net/netfilter/nf_queue.h | 1 + include/trace/events/btrfs.h | 4 +- kernel/irq_work.c | 7 + kernel/ptrace.c | 154 +++++----- kernel/trace/ring_buffer.c | 8 +- kernel/trace/trace_events_hist.c | 6 +- kernel/trace/tracing_map.c | 17 +- lib/kunit/Kconfig | 5 +- lib/test_kprobes.c | 29 +- mm/damon/sysfs-schemes.c | 1 + net/batman-adv/bridge_loop_avoidance.c | 54 ++-- net/batman-adv/distributed-arp-table.c | 3 + net/batman-adv/fragmentation.c | 58 +++- net/batman-adv/gateway_client.c | 4 + net/batman-adv/originator.c | 4 +- net/batman-adv/tp_meter.c | 64 ++-- net/batman-adv/types.h | 17 +- net/bluetooth/af_bluetooth.c | 99 ++++-- net/bluetooth/bnep/core.c | 2 +- net/bluetooth/iso.c | 14 +- net/bluetooth/l2cap_sock.c | 51 +++- net/bluetooth/mgmt.c | 6 + net/bluetooth/rfcomm/sock.c | 9 +- net/bluetooth/sco.c | 9 +- net/bridge/br_multicast.c | 27 +- net/bridge/netfilter/Kconfig | 13 + net/bridge/netfilter/Makefile | 2 +- net/bridge/netfilter/ebtable_broute.c | 14 +- net/bridge/netfilter/ebtable_filter.c | 14 +- net/bridge/netfilter/ebtable_nat.c | 12 +- net/bridge/netfilter/ebtables.c | 71 +++-- net/core/gro.c | 3 + net/core/skmsg.c | 9 +- net/ethtool/bitset.c | 8 +- net/ipv4/inet_connection_sock.c | 2 +- net/ipv4/netfilter/Kconfig | 59 ++-- net/ipv4/netfilter/Makefile | 2 +- net/ipv4/netfilter/arp_tables.c | 18 +- net/ipv4/netfilter/arptable_filter.c | 27 +- net/ipv4/netfilter/ip_tables.c | 18 +- net/ipv4/netfilter/iptable_filter.c | 27 +- net/ipv4/netfilter/iptable_mangle.c | 29 +- net/ipv4/netfilter/iptable_nat.c | 6 +- net/ipv4/netfilter/iptable_raw.c | 26 +- net/ipv4/netfilter/iptable_security.c | 27 +- net/ipv4/raw.c | 2 +- net/ipv6/netfilter/Kconfig | 30 +- net/ipv6/netfilter/Makefile | 2 +- net/ipv6/netfilter/ip6_tables.c | 18 +- net/ipv6/netfilter/ip6t_hbh.c | 4 + net/ipv6/netfilter/ip6table_filter.c | 26 +- net/ipv6/netfilter/ip6table_mangle.c | 27 +- net/ipv6/netfilter/ip6table_nat.c | 6 +- net/ipv6/netfilter/ip6table_raw.c | 24 +- net/ipv6/netfilter/ip6table_security.c | 27 +- net/mac80211/tdls.c | 2 +- net/mptcp/pm_netlink.c | 35 +-- net/mptcp/protocol.c | 3 +- net/netfilter/Kconfig | 22 +- net/netfilter/ipset/ip_set_hash_ipmark.c | 6 +- net/netfilter/ipset/ip_set_hash_ipport.c | 5 +- net/netfilter/ipset/ip_set_hash_ipportip.c | 5 +- net/netfilter/ipset/ip_set_hash_ipportnet.c | 5 +- net/netfilter/nf_queue.c | 4 +- net/netfilter/nfnetlink_queue.c | 2 + net/netfilter/nft_inner.c | 1 - net/netfilter/x_tables.c | 116 +++++-- net/phonet/pep.c | 19 +- net/smc/af_smc.c | 3 +- net/smc/smc_tracepoint.h | 2 +- net/tls/tls_sw.c | 46 ++- net/unix/af_unix.c | 5 +- net/unix/garbage.c | 79 +++-- net/vmw_vsock/virtio_transport_common.c | 20 +- net/vmw_vsock/vmci_transport.c | 2 +- net/wireless/scan.c | 3 + sound/core/pcm_lib.c | 3 + sound/core/seq/seq_ump_client.c | 35 ++- sound/pci/asihpi/hpicmn.c | 6 + sound/pci/hda/cs35l56_hda.c | 1 + sound/soc/codecs/cs35l56-sdw.c | 3 +- sound/soc/samsung/i2s.c | 6 +- sound/usb/misc/ua101.c | 5 +- 203 files changed, 2704 insertions(+), 1346 deletions(-)

1 hour, 43 minutes

[PATCH 6.6 000/508] 6.6.141-rc1 review

by Greg Kroah-Hartman

This is the start of the stable review cycle for the 6.6.141 release. There are 508 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know. Responses should be made by Fri, 22 May 2026 16:20:16 +0000. Anything received after that time might be too late. The whole patch series can be found in one patch at: https://www.kernel.org/pub/linux/kernel/v6.x/stable-review/patch-6.6.141-rc… or in the git tree and branch at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-6.6.y and the diffstat can be found below. thanks, greg k-h ------------- Pseudo-Shortlog of commits: Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> Linux 6.6.141-rc1 Matthieu Baerts (NGI0) <matttbe(a)kernel.org> mptcp: pm: ADD_ADDR rtx: resched blocked ADD_ADDR quicker Matthieu Baerts (NGI0) <matttbe(a)kernel.org> mptcp: pm: ADD_ADDR rtx: fix potential data-race Johan Hovold <johan(a)kernel.org> spi: sifive: fix controller deregistration Pei Xiao <xiaopei01(a)kylinos.cn> spi: sifive: Simplify clock handling with devm_clk_get_enabled() Guoniu Zhou <guoniu.zhou(a)nxp.com> media: nxp: imx8-isi: Reduce minimum queued buffers from 2 to 0 Johan Hovold <johan(a)kernel.org> spi: st-ssc4: fix controller deregistration Yang Yingliang <yangyingliang(a)huawei.com> spi: st-ssc4: switch to use modern name Shota Zaizen <s(a)zaizen.me> ksmbd: validate inherited ACE SID length Jason Gunthorpe <jgg(a)ziepe.ca> RDMA/mana: Fix error unwind in mana_ib_create_qp_rss() Chao Yu <chao(a)kernel.org> f2fs: fix false alarm of lockdep on cp_global_sem lock Yongpeng Yang <yangyongpeng(a)xiaomi.com> f2fs: fix incorrect file address mapping when inline inode is unwritten Matthieu Baerts (NGI0) <matttbe(a)kernel.org> mptcp: pm: kernel: correctly retransmit ADD_ADDR ID 0 Matthieu Baerts (NGI0) <matttbe(a)kernel.org> mptcp: pm: prio: skip closed subflows Paolo Abeni <pabeni(a)redhat.com> mptcp: fix rx timestamp corruption on fastopen Paolo Abeni <pabeni(a)redhat.com> mptcp: drop __mptcp_fastopen_gen_msk_ackseq() Jason Gunthorpe <jgg(a)ziepe.ca> RDMA/mana: Validate rx_hash_key_len Filipe Manana <fdmanana(a)suse.com> btrfs: fix missing last_unlink_trans update when removing a directory Filipe Manana <fdmanana(a)suse.com> btrfs: use btrfs inodes in btrfs_rmdir() to avoid so much usage of BTRFS_I() Filipe Manana <fdmanana(a)suse.com> btrfs: use inode already stored in local variable at btrfs_rmdir() Piyush Sachdeva <s.piyush1024(a)gmail.com> smb: client: Use FullSessionKey for AES-256 encryption key derivation Ashutosh Desai <ashutoshdesai993(a)gmail.com> drm/v3d: Reject empty multisync extension to prevent infinite loop David Carlier <devnexen(a)gmail.com> eventfs: Use list_add_tail_rcu() for SRCU-protected children list Guangshuo Li <lgs201920130244(a)gmail.com> btrfs: fix double free in create_space_info_sub_group() error path Filipe Manana <fdmanana(a)suse.com> btrfs: remove fs_info argument from btrfs_sysfs_add_space_info_type() Ulf Hansson <ulf.hansson(a)linaro.org> pmdomain: core: Fix detach procedure for virtual devices in genpd Johan Hovold <johan(a)kernel.org> drm/gma500/oaktrail_lvds: fix i2c adapter leaks on init Johan Hovold <johan(a)kernel.org> drm/gma500/oaktrail_lvds: fix hang on init failure Johan Hovold <johan(a)kernel.org> drm/gma500/oaktrail_hdmi: fix i2c adapter leak on setup Gyeyoung Baek <gye976(a)gmail.com> drm/panfrost: Fix wait_bo ioctl leaking positive return from dma_resv_wait_timeout() Sebastian Brzezinka <sebastian.brzezinka(a)intel.com> drm/i915: skip __i915_request_skip() for already signaled requests Naval Alcalá <ari(a)naval.cat> iommu/vt-d: Disable DMAR for Intel Q35 IGFX Raphael Zimmer <raphael.zimmer(a)tu-ilmenau.de> libceph: handle rbtree insertion error in decode_choose_args() Raphael Zimmer <raphael.zimmer(a)tu-ilmenau.de> libceph: Fix potential out-of-bounds access in crush_decode() Raphael Zimmer <raphael.zimmer(a)tu-ilmenau.de> libceph: Fix potential null-ptr-deref in decode_choose_args() Raphael Zimmer <raphael.zimmer(a)tu-ilmenau.de> libceph: Fix potential out-of-bounds access in osdmap_decode() Paulo Alcantara <pc(a)manguebit.org> netfs: fix error handling in netfs_extract_user_iter() Ma Ke <make24(a)iscas.ac.cn> powerpc/warp: Fix error handling in pika_dtm_thread Nicholas Carlini <nicholas(a)carlini.com> io-wq: check that the predecessor is hashed in io_wq_remove_pending() Viacheslav Dubeyko <Slava.Dubeyko(a)ibm.com> ceph: fix a buffer leak in __ceph_setxattr() Cássio Gabriel <cassiogabrielcontato(a)gmail.com> ALSA: usb-audio: Bound MIDI endpoint descriptor scans Cássio Gabriel <cassiogabrielcontato(a)gmail.com> ALSA: usb-audio: Bound MIDI 2.0 endpoint descriptor scans Chaitanya Kumar Borah <chaitanya.kumar.borah(a)intel.com> drm/i915/dp: Fix VSC dynamic range signaling for RGB formats Ye Bin <yebin10(a)huawei.com> smb/client: fix possible infinite loop and oob read in symlink_data() Ranjani Sridharan <ranjani.sridharan(a)linux.intel.com> ASoC: SOF: Intel: hda: Fix NULL pointer dereference Pierre-Louis Bossart <pierre-louis.bossart(a)linux.intel.com> ASoC: SOF: Intel: hda-dai: add support for dspless mode beyond HDAudio Pierre-Louis Bossart <pierre-louis.bossart(a)linux.intel.com> ASoC: SOF: Intel: hda-dai: remove dspless special case Pablo Neira Ayuso <pablo(a)netfilter.org> netfilter: nf_tables: unconditionally bump set->nelems before insertion Qiang Ma <maqianga(a)uniontech.com> KVM: x86: Fix Xen hypercall tracepoint argument assignment Junrui Luo <moonafterrain(a)outlook.com> KVM: s390: pci: fix GAIT table indexing due to double-scaling pointer arithmetic Aaron Sacks <contact(a)xchglabs.com> KVM: Reject wrapped offset in kvm_reset_dirty_gfn() Sergio Correia <scorreia(a)redhat.com> audit: enforce AUDIT_LOCKED for AUDIT_TRIM and AUDIT_MAKE_EQUIV Zoran Ilievski <goodboy(a)rexbytes.com> net: atlantic: preserve PCI wake-from-D3 on shutdown when WOL enabled Li Xiasong <lixiasong1(a)huawei.com> netfilter: nft_ct: fix missing expect put in obj eval Sergio Correia <scorreia(a)redhat.com> audit: fix incorrect inheritable capability in CAPSET records Li Xiasong <lixiasong1(a)huawei.com> netfilter: nf_conntrack_sip: get helper before allocating expectation Breno Leitao <leitao(a)debian.org> workqueue: Fix wq->cpu_pwq leak in alloc_and_link_pwqs() WQ_UNBOUND path Matt Vollrath <tactii(a)gmail.com> i40e: Cleanup PTP pins on probe failure Herbert Xu <herbert(a)gondor.apana.org.au> crypto: af_alg - Cap AEAD AD length to 0x80000000 Hangbin Liu <liuhangbin(a)gmail.com> bonding: fix NULL pointer dereference in actor_port_prio setting Breno Leitao <leitao(a)debian.org> netconsole: avoid out-of-bounds access on empty string in trim_newline() Eric Dumazet <edumazet(a)google.com> net/sched: sch_pie: annotate more data-races in pie_dump_stats() Michael Bommarito <michael.bommarito(a)gmail.com> ksmbd: validate response sizes in ipc_validate_msg() Justin Chen <justin.chen(a)broadcom.com> net: bcmgenet: fix leaking free_bds Ryo Takakura <ryotkkr98(a)gmail.com> net: bcmgenet: Initialize u64 stats seq counter Thorsten Blum <thorsten.blum(a)linux.dev> crypto: nx - fix bounce buffer leaks in nx842_crypto_{alloc,free}_ctx Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> smb: client: fix OOB reads parsing symlink error response Liang Jie <liangjie(a)lixiang.com> smb: client: correctly handle ErrorContextData as a flexible array Sasha Levin <sashal(a)kernel.org> Revert "crypto: nx - Migrate to scomp API" Sasha Levin <sashal(a)kernel.org> Revert "crypto: nx - fix bounce buffer leaks in nx842_crypto_{alloc,free}_ctx" Sasha Levin <sashal(a)kernel.org> Revert "crypto: nx - fix context leak in nx842_crypto_free_ctx" Al Viro <viro(a)zeniv.linux.org.uk> ntfs: ->d_compare() must not block Paolo Abeni <pabeni(a)redhat.com> net/sched: cls_flower: revert unintended changes Dan Carpenter <error27(a)gmail.com> sfc: fix error code in efx_devlink_info_running_versions() Jakub Kicinski <kuba(a)kernel.org> net: tls: fix strparser anchor skb leak on offload RX setup failure Petr Oros <poros(a)redhat.com> ice: fix NULL pointer dereference in ice_reset_all_vfs() Petr Oros <poros(a)redhat.com> iavf: add VIRTCHNL_OP_ADD_VLAN to success completion handler Petr Oros <poros(a)redhat.com> iavf: wait for PF confirmation before removing VLAN filters Petr Oros <poros(a)redhat.com> iavf: stop removing VLAN filters from PF on interface down Petr Oros <poros(a)redhat.com> iavf: rename IAVF_VLAN_IS_NEW to IAVF_VLAN_ADDING Eric Dumazet <edumazet(a)google.com> bonding: 3ad: implement proper RCU rules for port->aggregator Hangbin Liu <liuhangbin(a)gmail.com> bonding: print churn state via netlink Hangbin Liu <liuhangbin(a)gmail.com> bonding: add support for per-port LACP actor priority Tonghao Zhang <tonghao(a)bamaicloud.com> net: bonding: add broadcast_neighbor option for 802.3ad Jones Syue 薛懷宗 <jonessyue(a)qnap.com> bonding: 802.3ad replace MAC_ADDRESS_EQUAL with __agg_has_partner Timur Kristóf <timur.kristof(a)gmail.com> drm/amd/display: Read EDID from VBIOS embedded panel info Timur Kristóf <timur.kristof(a)gmail.com> drm/amd/display: Allow DCE link encoder without AUX registers Sebastian Andrzej Siewior <bigeasy(a)linutronix.de> futex: Prevent lockup in requeue-PI during signal/ timeout wakeup wangdicheng <wangdicheng(a)kylinos.cn> ALSA: hda/conexant: Fix missing error check for jack detection wangdicheng <wangdicheng(a)kylinos.cn> ALSA: hda/conexant: Renaming the codec with device ID 0x1f86 and 0x1f87 Oldherl Oh <me(a)oldherl.one> ALSA: hda/conexant: fix some typos Breno Leitao <leitao(a)debian.org> netconsole: propagate device name truncation in dev_name_store() Matthew Wood <thepacketgeek(a)gmail.com> net: netconsole: move newline trimming to function Eric Dumazet <edumazet(a)google.com> net/sched: sch_cake: annotate data-races in cake_dump_stats() (V) Weiming Shi <bestswngs(a)gmail.com> bareudp: fix NULL pointer dereference in bareudp_fill_metadata_dst() Beniamino Galvani <b.galvani(a)gmail.com> ipv6: rename and move ip6_dst_lookup_tunnel() Beniamino Galvani <b.galvani(a)gmail.com> ipv4: add new arguments to udp_tunnel_dst_lookup() Beniamino Galvani <b.galvani(a)gmail.com> ipv4: remove "proto" argument from udp_tunnel_dst_lookup() Beniamino Galvani <b.galvani(a)gmail.com> ipv4: rename and move ip_route_output_tunnel() Xin Long <lucien.xin(a)gmail.com> sctp: discard stale INIT after handshake completion Xin Long <lucien.xin(a)gmail.com> netfilter: skip recording stale or retransmitted INIT Christian A. Ehrhardt <christian.ehrhardt(a)codasip.com> ASoC: codecs: ab8500: Fix casting of private data Yinjie Yao <yinjie.yao(a)amd.com> drm/amdgpu/jpeg: set no_user_fence for JPEG v4.0.3 ring Yinjie Yao <yinjie.yao(a)amd.com> drm/amdgpu/jpeg: set no_user_fence for JPEG v4.0 ring Yinjie Yao <yinjie.yao(a)amd.com> drm/amdgpu/jpeg: set no_user_fence for JPEG v3.0 ring Yinjie Yao <yinjie.yao(a)amd.com> drm/amdgpu/jpeg: set no_user_fence for JPEG v2.5 ring Yinjie Yao <yinjie.yao(a)amd.com> drm/amdgpu/jpeg: set no_user_fence for JPEG v2.0 ring Yinjie Yao <yinjie.yao(a)amd.com> drm/amdgpu/vcn: set no_user_fence for VCN v4.0.3 enc ring Yinjie Yao <yinjie.yao(a)amd.com> drm/amdgpu/vcn: set no_user_fence for VCN v3.0 enc/dec rings Yinjie Yao <yinjie.yao(a)amd.com> drm/amdgpu/vcn: set no_user_fence for VCN v2.5 enc/dec rings Yinjie Yao <yinjie.yao(a)amd.com> drm/amdgpu/vcn: set no_user_fence for VCN v2.0 enc/dec rings Heiko Schocher <hs(a)nabladev.com> net: phy: dp83869: fix setting CLK_O_SEL field. William A. Kennington III <william(a)wkennington.com> net: mctp i2c: check length before marking flow active Takashi Iwai <tiwai(a)suse.de> ALSA: usb-audio: Fix potential leak of pd at parsing UAC3 streams Florian Westphal <fw(a)strlen.de> neigh: let neigh_xmit take skb ownership Eric Dumazet <edumazet(a)google.com> neighbour: add RCU protection to neigh_tables[] Weiming Shi <bestswngs(a)gmail.com> net/sched: taprio: fix NULL pointer dereference in class dump Paul Geurts <paul.geurts(a)prodrive-technologies.com> NFC: trf7970a: Ignore antenna noise when checking for RF field Morduan Zang <zhangdandan(a)uniontech.com> net: usb: rtl8150: free skb on usb_submit_urb() failure in xmit Zhan Jun <zhanjun(a)uniontech.com> net: usb: rtl8150: fix use-after-free in rtl8150_start_xmit() Ido Schimmel <idosch(a)nvidia.com> vrf: Fix a potential NPD when removing a port from a VRF Eric Dumazet <edumazet(a)google.com> net/sched: sch_fq_pie: annotate data-races in fq_pie_dump_stats() Eric Dumazet <edumazet(a)google.com> net/sched: sch_choke: annotate data-races in choke_dump_stats() Stephen Hemminger <stephen(a)networkplumber.org> net/sched: netem: check for negative latency and jitter Stephen Hemminger <stephen(a)networkplumber.org> net/sched: netem: fix slot delay calculation overflow Stephen Hemminger <stephen(a)networkplumber.org> net/sched: netem: validate slot configuration Stephen Hemminger <stephen(a)networkplumber.org> net/sched: netem: only reseed PRNG when seed is explicitly provided Stephen Hemminger <stephen(a)networkplumber.org> net/sched: netem: fix queue limit check to include reordered packets Stephen Hemminger <stephen(a)networkplumber.org> net/sched: netem: fix probability gaps in 4-state loss model Nikola Z. Ivanov <zlatistiv(a)gmail.com> netdevsim: zero initialize struct iphdr in dummy sk_buff Daan De Meyer <daan(a)amutable.com> cdrom, scsi: sr: propagate read-only status to block layer via set_disk_ro() Wentao Guan <guanwentao(a)uniontech.com> arm64/scs: Fix potential sign extension issue of advance_loc4 Yuho Choi <dbgh9129(a)gmail.com> drm/sysfb: ofdrm: fix PCI device reference leaks John Madieu <john.madieu(a)gmail.com> spi: rockchip: Read ISR, not IMR, to detect cs-inactive IRQ Florian Westphal <fw(a)strlen.de> netfilter: nf_conntrack_sip: don't use simple_strtoul Jiexun Wang <wangjiexun2025(a)gmail.com> netfilter: xt_policy: fix strict mode inbound policy matching Timur Kristóf <timur.kristof(a)gmail.com> drm/amdgpu/gfx6: Support harvested SI chips with disabled TCCs (v2) Timur Kristóf <timur.kristof(a)gmail.com> drm/amdgpu/uvd3.1: Don't validate the firmware when already validated Alexandre Demers <alexandre.f.demers(a)gmail.com> drm/amdgpu: fix spelling typos Christian König <christian.koenig(a)amd.com> drm/amdgpu: fix AMDGPU_INFO_READ_MMR_REG Keith Busch <kbusch(a)kernel.org> nvme-pci: fix missed admin queue sq doorbell write Pablo Neira Ayuso <pablo(a)netfilter.org> netfilter: arp_tables: fix IEEE1394 ARP payload parsing Maurizio Lombardi <mlombard(a)redhat.com> nvmet-tcp: propagate nvmet_tcp_build_pdu_iovec() errors to its callers Breno Leitao <leitao(a)debian.org> tracing: branch: Fix inverted check on stat tracer registration Mark Harmstone <mark(a)harmstone.com> btrfs: fix double-decrement of bytes_may_use in submit_one_async_extent() Wolfram Sang <wsa+renesas(a)sang-engineering.com> mailbox: mailbox-test: make data_ready a per-instance variable Wolfram Sang <wsa+renesas(a)sang-engineering.com> mailbox: mailbox-test: initialize struct earlier Wolfram Sang <wsa+renesas(a)sang-engineering.com> mailbox: mailbox-test: don't free the reused channel Wolfram Sang <wsa+renesas(a)sang-engineering.com> mailbox: add sanity check for channel array cuitao <cuitao(a)kylinos.cn> cgroup/rdma: fix integer overflow in rdmacg_try_charge() Edward Adam Davis <eadavis(a)qq.com> sched/psi: fix race between file release and pressure write Wolfram Sang <wsa+renesas(a)sang-engineering.com> mailbox: mailbox-test: free channels on probe error Yuho Choi <dbgh9129(a)gmail.com> fbdev: offb: fix PCI device reference leak on probe failure Anthony Pighin (Nokia) <anthony.pighin(a)nokia.com> rtc: abx80x: Disable alarm feature if no interrupt attached Bae Yeonju <iwasbaeyz(a)gmail.com> fs/adfs: validate nzones in adfs_validate_bblk() Kohei Enju <kohei(a)enjuk.jp> vhost_net: fix sleeping with preempt-disabled in vhost_net_busy_poll() Lee Jones <lee(a)kernel.org> tipc: fix double-free in tipc_buf_append() Alexey Kodanev <aleksei.kodanev(a)bell-sw.com> nfp: fix swapped arguments in nfp_encode_basic_qdr() calls Mieczyslaw Nalewaj <namiltd(a)yahoo.com> net: dsa: realtek: rtl8365mb: fix mode mask calculation Eric Dumazet <edumazet(a)google.com> net/sched: sch_sfb: annotate data-races in sfb_dump_stats() Eric Dumazet <edumazet(a)google.com> net/sched: sch_red: annotate data-races in red_dump_stats() Eric Dumazet <edumazet(a)google.com> net/sched: sch_fq_codel: remove data-races from fq_codel_dump_stats() Eric Dumazet <edumazet(a)google.com> net/sched: sch_pie: annotate data-races in pie_dump_stats() Eric Dumazet <edumazet(a)google.com> net_sched: sch_hhf: annotate data-races in hhf_dump_stats() Michael Bommarito <michael.bommarito(a)gmail.com> net/rds: zero per-item info buffer before handing it to visitors Hyunwoo Kim <imv4bel(a)gmail.com> ksmbd: scope conn->binding slowpath to bound sessions only DaeMyung Kang <charsyam(a)gmail.com> ksmbd: fix durable fd leak on ClientGUID mismatch in durable v2 open DaeMyung Kang <charsyam(a)gmail.com> ksmbd: destroy async_ida in ksmbd_conn_free() Namjae Jeon <linkinjeon(a)kernel.org> ksmbd: add support for supplementary groups Thorsten Blum <thorsten.blum(a)linux.dev> ksmbd: Use struct_size() to improve smb_direct_rdma_xmit() DaeMyung Kang <charsyam(a)gmail.com> ksmbd: destroy tree_conn_ida in ksmbd_session_destroy() Jun Yan <jerrysteve1101(a)gmail.com> arm64: dts: meson-gxl-p230: fix ethernet PHY interrupt number Weiming Shi <bestswngs(a)gmail.com> slip: bound decode() reads against the compressed packet length Weiming Shi <bestswngs(a)gmail.com> slip: reject VJ receive packets on instances with no rstate array Fernando Fernandez Mancera <fmancera(a)suse.de> netfilter: nfnetlink_osf: fix potential NULL dereference in ttl check Fernando Fernandez Mancera <fmancera(a)suse.de> netfilter: nfnetlink_osf: fix out-of-bounds read on option matching Yingnan Zhang <342144303(a)qq.com> ipvs: fix MTU check for GSO packets in tunnel mode Pablo Neira Ayuso <pablo(a)netfilter.org> netfilter: xtables: restrict several matches to inet family Florian Westphal <fw(a)strlen.de> netfilter: conntrack: remove sprintf usage Xiang Mei <xmei5(a)asu.edu> netfilter: nfnetlink_osf: fix divide-by-zero in OSF_WSS_MODULO Pablo Neira Ayuso <pablo(a)netfilter.org> netfilter: nft_osf: restrict it to ipv4 Weiming Shi <bestswngs(a)gmail.com> openvswitch: cap upcall PID array size and pre-size vport replies Qingfang Deng <qingfang.deng(a)linux.dev> pppoe: drop PFC frames Michael Bommarito <michael.bommarito(a)gmail.com> sctp: fix OOB write to userspace in sctp_getsockopt_peer_auth_chunks Eric Dumazet <edumazet(a)google.com> ipv6: fix possible UAF in icmpv6_rcv() Matt Vollrath <tactii(a)gmail.com> e1000e: Unroll PTP in probe error handling Kohei Enju <kohei(a)enjuk.jp> i40e: don't advertise IFF_SUPP_NOFCS Michal Schmidt <mschmidt(a)redhat.com> ice: fix double-free of tx_buf skb Alice Mikityanska <alice(a)isovalent.com> ice: Remove jumbo_remove step from TX path Eric Dumazet <edumazet(a)google.com> tcp: annotate data-races around tp->plb_rehash Eric Dumazet <edumazet(a)google.com> tcp: annotate data-races around (tp->write_seq - tp->snd_nxt) Eric Dumazet <edumazet(a)google.com> tcp: annotate data-races around tp->dsack_dups Eric Dumazet <edumazet(a)google.com> tcp: annotate data-races around tp->bytes_retrans Eric Dumazet <edumazet(a)google.com> tcp: annotate data-races around tp->bytes_sent Eric Dumazet <edumazet(a)google.com> tcp: add data-race annotations around tp->data_segs_out and tp->total_retrans Vinicius Costa Gomes <vinicius.gomes(a)intel.com> net/sched: taprio: fix use-after-free in advance_sched() on schedule switch Jiayuan Chen <jiayuan.chen(a)linux.dev> nexthop: fix IPv6 route referencing IPv4 nexthop Dudu Lu <phx0fer(a)gmail.com> net/sched: sch_cake: fix NAT destination port not being updated in cake_update_flowkeys Dudu Lu <phx0fer(a)gmail.com> macvlan: fix macvlan_get_size() not reserving space for IFLA_MACVLAN_BC_CUTOFF Peng Fan <peng.fan(a)nxp.com> arm64: dts: imx8mm-tqma8mqml: Correct PAD settings for PMIC_nINT Peng Fan <peng.fan(a)nxp.com> arm64: dts: imx8mn-tqma8mqnl: Correct PAD settings for PMIC_nINT Peng Fan <peng.fan(a)nxp.com> arm64: dts: imx8mm-emtop-som: Correct PAD settings for PMIC_nINT René Rebe <rene(a)exactco.de> PCMCIA: Fix garbled log messages for KERN_CONT Peng Fan <peng.fan(a)nxp.com> arm64: dts: imx8mp-data-modul-edm-sbc: Correct PAD settings for PMIC_nINT Peng Fan <peng.fan(a)nxp.com> arm64: dts: imx8mp-dhcom-som: Correct PAD settings for PMIC_nINT Peng Fan <peng.fan(a)nxp.com> arm64: dts: imx8mp-icore-mx8mp: Correct PAD settings for PMIC_nINT Peng Fan <peng.fan(a)nxp.com> arm64: dts: imx8mp-debix-som-a: Correct PAD settings for PMIC_nINT Peng Fan <peng.fan(a)nxp.com> arm64: dts: imx8mp-debix-model-a: Correct PAD settings for PMIC_nINT Paul Moses <p(a)1g4.org> crypto: ccp - copy IV using skcipher ivsize T Pratham <t-pratham(a)ti.com> crypto: sa2ul - Fix AEAD fallback algorithm names Ville Syrjälä <ville.syrjala(a)linux.intel.com> drm/i915/wm: Verify the correct plane DDB entry Stanislav Lisovskiy <stanislav.lisovskiy(a)intel.com> drm/i915: Loop over all active pipes in intel_mbus_dbox_update Gustavo Sousa <gustavo.sousa(a)intel.com> drm/i915: Extract intel_dbuf_mdclk_cdclk_ratio_update() Ville Syrjälä <ville.syrjala(a)linux.intel.com> drm/i915: Simplify watermark state checker calling convention Ville Syrjälä <ville.syrjala(a)linux.intel.com> drm/i915: Constify watermark state checker Yongpeng Yang <yangyongpeng(a)xiaomi.com> f2fs: protect extension_list reading with sb_lock in f2fs_sbi_show() Christophe JAILLET <christophe.jaillet(a)wanadoo.fr> f2fs: Use sysfs_emit_at() to simplify code Brian Masney <bmasney(a)redhat.com> clk: visconti: pll: initialize clk_init_data to zero Geert Uytterhoeven <geert+renesas(a)glider.be> lib/hexdump: print_hex_dump_bytes() calls print_hex_dump_debug() Konrad Dybcio <konrad.dybcio(a)oss.qualcomm.com> clk: qcom: dispcc-sc7180: Add missing MDSS resets Konrad Dybcio <konrad.dybcio(a)oss.qualcomm.com> dt-bindings: clock: qcom,dispcc-sc7180: Define MDSS resets Geert Uytterhoeven <geert+renesas(a)glider.be> clk: xgene: Fix mapping leak in xgene_pllclk_init() Arnd Bergmann <arnd(a)arndb.de> clk: qoriq: avoid format string warning Sebastian Krzyszkowiak <sebastian.krzyszkowiak(a)puri.sm> clk: imx8mq: Correct the CSI PHY sels Felix Gu <ustc.gu(a)gmail.com> clk: imx: imx6q: Fix device node reference leak in of_assigned_ldb_sels() Felix Gu <ustc.gu(a)gmail.com> clk: imx: imx6q: Fix device node reference leak in pll6_bypassed() Val Packett <val(a)packett.cool> clk: qcom: dispcc-sm8250: Enable parents for pixel clocks Val Packett <val(a)packett.cool> clk: qcom: dispcc-sm8250: Use shared ops on the mdss vsync clk Val Packett <val(a)packett.cool> clk: qcom: gcc-sc8180x: Use retention for PCIe power domains Val Packett <val(a)packett.cool> clk: qcom: gcc-sc8180x: Use retention for USB power domains Val Packett <val(a)packett.cool> clk: qcom: gcc-sc8180x: Add missing GDSCs Val Packett <val(a)packett.cool> dt-bindings: clock: qcom,gcc-sc8180x: Add missing GDSCs Junrui Luo <moonafterrain(a)outlook.com> scsi: target: core: Fix integer overflow in UNMAP bounds check White Lewis <liu224806(a)gmail.com> clk: qcom: dispcc-sc8280xp: remove CLK_SET_RATE_PARENT from byte_div_clk_src dividers Yang Erkun <yangerkun(a)huawei.com> scsi: sg: Resolve soft lockup issue when opening /dev/sgX Yang Erkun <yangerkun(a)huawei.com> scsi: sg: Fix sysctl sg-big-buff register during sg_init() Ricardo B. Marliere <ricardo(a)marliere.net> scsi: sg: Make sg_sysfs_class constant Dmitry Baryshkov <dmitry.baryshkov(a)oss.qualcomm.com> clk: qcom: dispcc-sm8450: use RCG2 ops for DPTX1 AUX clock source Florian Westphal <fw(a)strlen.de> RDMA/core: Prefer NLA_NUL_STRING Pengpeng Hou <pengpeng(a)iscas.ac.cn> platform/x86: dell-wmi-sysman: bound enumeration string aggregation Fedor Pchelkin <pchelkin(a)ispras.ru> platform/x86: dell_rbu: avoid uninit value usage in packet_size_write() Pengpeng Hou <pengpeng(a)iscas.ac.cn> fs/ntfs3: terminate the cached volume label after UTF-8 conversion Andy Shevchenko <andriy.shevchenko(a)linux.intel.com> nfs/blocklayout: Fix compilation error (`make W=1`) in bl_write_pagelist() Abdun Nihaal <nihaal(a)cse.iitm.ac.in> mfd: mc13xxx-core: Fix memory leak in mc13xxx_add_subdevice_pdata() Rafael J. Wysocki <rafael.j.wysocki(a)intel.com> platform/x86: panasonic-laptop: Fix OPTD notifier registration and cleanup Randy Dunlap <rdunlap(a)infradead.org> tty: hvc_iucv: fix off-by-one in number of supported devices Chen Ni <nichen(a)iscas.ac.cn> leds: lgm-sso: Remove duplicate assignments for priv->mmap Rafael J. Wysocki <rafael.j.wysocki(a)intel.com> platform/surface: surfacepro3_button: Drop wakeup source on remove Chen Ni <nichen(a)iscas.ac.cn> backlight: sky81452-backlight: Check return value of devm_gpiod_get_optional() in sky81452_bl_parse_dt() Nuno Sa <nuno.sa(a)analog.com> dev_printk: add new dev_err_probe() helpers Billy Tsai <billy_tsai(a)aspeedtech.com> i3c: mipi-i3c-hci: fix IBI payload length calculation for final status Jorge Marques <jorge.marques(a)analog.com> i3c: master: Fix error codes at send_ccc_cmd Arnaldo Carvalho de Melo <acme(a)redhat.com> perf util: Kill die() prototype, dead for a long time Jian Zhang <zhangjian.3032(a)bytedance.com> ipmi: ssif_bmc: change log level to dbg in irq callback Jian Zhang <zhangjian.3032(a)bytedance.com> ipmi: ssif_bmc: fix message desynchronization after truncated response Jian Zhang <zhangjian.3032(a)bytedance.com> ipmi: ssif_bmc: fix missing check for copy_to_user() partial failure Leo Yan <leo.yan(a)arm.com> perf expr: Return -EINVAL for syntax error in expr__find_ids() Chuck Lever <chuck.lever(a)oracle.com> perf tools: Fix module symbol resolution for non-zero .text sh_addr Ian Rogers <irogers(a)google.com> perf lock: Fix option value type in parse_max_stack Yu-Chun Lin <eleanor15x(a)gmail.com> pinctrl: abx500: Fix type of 'argument' variable Mike Leach <mike.leach(a)arm.com> perf: tools: cs-etm: Fix print issue for Coresight debug in ETE/TRBE trace Ian Rogers <irogers(a)google.com> perf branch: Avoid incrementing NULL Andy Shevchenko <andriy.shevchenko(a)linux.intel.com> pinctrl: cy8c95x0: Avoid returning positive values to user space Andy Shevchenko <andriy.shevchenko(a)linux.intel.com> pinctrl: cy8c95x0: Unify messages with help of dev_err_probe() Andy Shevchenko <andriy.shevchenko(a)linux.intel.com> pinctrl: cy8c95x0: remove duplicate error message Ethan Tidmore <ethantidmore06(a)gmail.com> pinctrl: pinctrl-pic32: Fix resource leak Puranjay Mohan <puranjay(a)kernel.org> bpf, arm32: Reject BPF-to-BPF calls and callbacks in the JIT Yihan Ding <dingyihan(a)uniontech.com> bpf: allow UTF-8 literals in bpf_bprintf_prepare() Mykyta Yatsenko <yatsenko(a)meta.com> bpf: Fix NULL deref in map_kptr_match_type for scalar regs Daniel Borkmann <daniel(a)iogearbox.net> bpf: Fix precedence bug in convert_bpf_ld_abs alignment check Michal Luczaj <mhal(a)rbox.co> bpf, sockmap: Take state lock for af_unix iter Michal Luczaj <mhal(a)rbox.co> bpf, sockmap: Fix af_unix null-ptr-deref in proto update Michal Luczaj <mhal(a)rbox.co> bpf, sockmap: Fix af_unix iter deadlock Puranjay Mohan <puranjay(a)kernel.org> bpf, riscv: Remove redundant bpf_flush_icache() after pack allocator finalize Daniel Borkmann <daniel(a)iogearbox.net> bpf, arm64: Fix off-by-one in check_imm signed range check Oliver Neukum <oneukum(a)suse.com> HID: usbhid: fix deadlock in hid_post_reset() Richard Genoud <richard.genoud(a)bootlin.com> mtd: rawnand: sunxi: fix sunxi_nfc_hw_ecc_read_extra_oob Cosmin Tanislav <cosmin-gabriel.tanislav.xa(a)renesas.com> mtd: parsers: ofpart: call of_node_get() for dedicated subpartitions Cosmin Tanislav <cosmin-gabriel.tanislav.xa(a)renesas.com> mtd: parsers: ofpart: call of_node_put() only in ofpart_fail path Shiji Yang <yangshiji66(a)outlook.com> mtd: spi-nor: swp: check SR_TB flag when getting tb_mask Jonas Gorski <jonas.gorski(a)gmail.com> mtd: spi-nor: update spi_nor_fixups::post_sfdp() documentation Takahiro Kuwano <Takahiro.Kuwano(a)infineon.com> mtd: spi-nor: sfdp: introduce smpt_map_id fixup hook Takahiro Kuwano <Takahiro.Kuwano(a)infineon.com> mtd: spi-nor: sfdp: introduce smpt_read_dummy fixup hook Haibo Chen <haibo.chen(a)nxp.com> mtd: spi-nor: core: correct the op.dummy.nbytes when check read operations Geert Uytterhoeven <geert+renesas(a)glider.be> dt-bindings: interrupt-controller: arm,gic-v3: Fix EPPI range Chen Ni <nichen(a)iscas.ac.cn> mtd: physmap_of_gemini: Fix disabled pinctrl state check Denis Benato <denis.benato(a)linux.dev> HID: asus: do not abort probe when not necessary Denis Benato <denis.benato(a)linux.dev> HID: asus: make asus_resume adhere to linux kernel coding standards Daniel Hodges <hodgesd(a)meta.com> ima: check return value of crypto_shash_final() in boot aggregate Pengpeng Hou <pengpeng(a)iscas.ac.cn> tracing: Rebuild full_name on each hist_field_name() call Richard Fitzgerald <rf(a)opensource.cirrus.com> soundwire: cadence: Clear message complete before signaling waiting thread Frank Li <Frank.Li(a)nxp.com> dmaengine: mxs-dma: Fix missing return value from of_dma_controller_register() Cole Leavitt <cole(a)unwrap.rs> soundwire: bus: demote UNATTACHED state warnings to dev_dbg() Khairul Anuar Romli <karom.9560(a)gmail.com> dmaengine: dw-axi-dmac: Remove unnecessary return statement from void function ZhengYuan Huang <gality369(a)gmail.com> ocfs2: validate group add input before caching ZhengYuan Huang <gality369(a)gmail.com> ocfs2: validate bg_bits during freefrag scan ZhengYuan Huang <gality369(a)gmail.com> ocfs2: fix listxattr handling when the buffer is full Frank Li <Frank.Li(a)nxp.com> ARM: dts: imx27-eukrea: replace interrupts with interrupts-extended Christoph Hellwig <hch(a)lst.de> arm64/xor: fix conflicting attributes for xor_block_template Aaro Koskinen <aaro.koskinen(a)iki.fi> ARM: OMAP1: Fix DEBUG_LL and earlyprintk on OMAP16XX Alexander Koskovich <AKoskovich(a)pm.me> arm64: dts: qcom: sm8250: Add missing CPU7 3.09GHz OPP Alok Tiwari <alok.a.tiwari(a)oracle.com> soc: qcom: aoss: compare against normalized cooling state Alok Tiwari <alok.a.tiwari(a)oracle.com> soc: qcom: llcc: fix v1 SB syndrome register offset Junrui Luo <moonafterrain(a)outlook.com> ocfs2/dlm: fix off-by-one in dlm_match_regions() region comparison Junrui Luo <moonafterrain(a)outlook.com> ocfs2/dlm: validate qr_numregions in dlm_match_regions() Michal Grzedzicki <mge(a)meta.com> unshare: fix nsproxy leak in ksys_unshare() on set_cred_ucounts() failure Sumit Gupta <sumitg(a)nvidia.com> soc/tegra: cbb: Set ERD on resume for err interrupt Xu Yang <xu.yang_2(a)nxp.com> arm64: dts: imx8qxp-mek: switch Type-C connector power-role to dual David Heidelberg <david(a)ixit.cz> arm64: dts: qcom: sdm845-xiaomi-beryllium: Mark l1a regulator as powered during boot Luca Weiss <luca.weiss(a)fairphone.com> arm64: dts: qcom: sm7225-fairphone-fp4: Fix conflicting bias pinctrl Vladimir Zapolskiy <vladimir.zapolskiy(a)linaro.org> arm64: dts: qcom: sm8550: Enable UHS-I SDR50 and SDR104 SD card modes Vladimir Zapolskiy <vladimir.zapolskiy(a)linaro.org> arm64: dts: qcom: sm8450: Enable UHS-I SDR50 and SDR104 SD card modes Vladimir Zapolskiy <vladimir.zapolskiy(a)linaro.org> arm64: dts: qcom: sm8550: Fix xo clock supply of platform SD host controller Konrad Dybcio <konrad.dybcio(a)oss.qualcomm.com> arm64: dts: qcom: sm8550: Fix GIC_ITS range length Konrad Dybcio <konrad.dybcio(a)oss.qualcomm.com> arm64: dts: qcom: sm8450: Fix GIC_ITS range length Dmitry Baryshkov <dmitry.baryshkov(a)oss.qualcomm.com> soc: qcom: ocmem: return -EPROBE_DEFER is ocmem is not available Dmitry Baryshkov <dmitry.baryshkov(a)oss.qualcomm.com> soc: qcom: ocmem: register reasons for probe deferrals Krzysztof Kozlowski <krzysztof.kozlowski(a)linaro.org> soc: qcom: ocmem: use scoped device node handling to simplify error paths Dmitry Baryshkov <dmitry.baryshkov(a)oss.qualcomm.com> soc: qcom: ocmem: make the core clock optional Barnabás Czémán <barnabas.czeman(a)mainlining.org> arm64: dts: qcom: msm8953-xiaomi-daisy: fix backlight Barnabás Czémán <barnabas.czeman(a)mainlining.org> arm64: dts: qcom: msm8953-xiaomi-vince: correct wled ovp value Akari Tsuyukusa <akkun11.open(a)gmail.com> arm64: dts: mediatek: mt7986a: Fix gpio-ranges pin count Akari Tsuyukusa <akkun11.open(a)gmail.com> arm64: dts: mediatek: mt6795: Fix gpio-ranges pin count Jacob Pan <jacob.pan(a)linux.microsoft.com> iommufd: vfio compatibility extension check for noiommu mode Sherry Sun <sherry.sun(a)nxp.com> arm64: dts: imx8mp-evk: Enable pull select bit for PCIe regulator GPIO (M.2 W_DISABLE1) Francesco Dolcini <francesco.dolcini(a)toradex.com> arm64: dts: imx8-apalis: Fix LEDs name collision Mikko Perttunen <mperttunen(a)nvidia.com> memory: tegra30-emc: Fix dll_change check Mikko Perttunen <mperttunen(a)nvidia.com> memory: tegra124-emc: Fix dll_change check Rafał Miłecki <rafal(a)milecki.pl> ARM: dts: mediatek: mt7623: fix efuse fallback compatible Joshua Klinesmith <joshuaklinesmith(a)gmail.com> ksmbd: fix use-after-free from async crypto on Qualcomm crypto engine Thomas Huth <thuth(a)redhat.com> efi/capsule-loader: fix incorrect sizeof in phys array reallocation Andreas Gruenbacher <agruenba(a)redhat.com> gfs2: prevent NULL pointer dereference during unmount Andreas Gruenbacher <agruenba(a)redhat.com> gfs2: add some missing log locking Jan Kara <jack(a)suse.cz> quota: Fix race of dquot_scan_active() with quota deactivation Ricardo B. Marlière <rbm(a)suse.com> ktest: Run POST_KTEST hooks on failure and cancellation Ricardo B. Marlière <rbm(a)suse.com> ktest: Honor empty per-test option overrides Ricardo B. Marlière <rbm(a)suse.com> ktest: Avoid undef warning when WARNINGS_FILE is unset Andreas Gruenbacher <agruenba(a)redhat.com> gfs2: Call unlock_new_inode before d_instantiate Haixin Xu <jerryxucs(a)gmail.com> crypto: jitterentropy - replace long-held spinlock with mutex Ming-Hung Tsai <mtsai(a)redhat.com> dm cache: fix missing return in invalidate_committed's error path Cássio Gabriel <cassiogabrielcontato(a)gmail.com> ALSA: sc6000: Keep the programmed board state in card-private data Takashi Iwai <tiwai(a)suse.de> ALSA: sc6000: Use standard print API Pei Xiao <xiaopei01(a)kylinos.cn> spi: mtk-snfi: unregister ECC engine on probe failure and remove() callback Manikanta Maddireddy <mmaddireddy(a)nvidia.com> PCI: dwc: Apply ECRC workaround to DesignWare 5.00a as well Manikanta Maddireddy <mmaddireddy(a)nvidia.com> PCI: tegra194: Use DWC IP core version Vidya Sagar <vidyas(a)nvidia.com> PCI: tegra194: Allow system suspend when the Endpoint link is not up Vidya Sagar <vidyas(a)nvidia.com> PCI: tegra194: Disable direct speed change for Endpoint mode Vidya Sagar <vidyas(a)nvidia.com> PCI: tegra194: Use devm_gpiod_get_optional() to parse "nvidia,refclk-select" Manikanta Maddireddy <mmaddireddy(a)nvidia.com> PCI: tegra194: Disable PERST# IRQ only in Endpoint mode Vidya Sagar <vidyas(a)nvidia.com> PCI: tegra194: Don't force the device into the D0 state before L2 Manivannan Sadhasivam <manivannan.sadhasivam(a)oss.qualcomm.com> PCI: tegra194: Rename 'root_bus' to 'root_port_bus' in tegra_pcie_downstream_dev_to_D0() Manikanta Maddireddy <mmaddireddy(a)nvidia.com> PCI: tegra194: Disable LTSSM after transition to Detect on surprise link down Manikanta Maddireddy <mmaddireddy(a)nvidia.com> PCI: tegra194: Increase LTSSM poll time on surprise link down Vidya Sagar <vidyas(a)nvidia.com> PCI: tegra194: Fix polling delay for L2 state Cássio Gabriel <cassiogabrielcontato(a)gmail.com> ASoC: SOF: compress: return the configured codec from get_params Panagiotis Petrakopoulos <npetrakopoulos2003(a)gmail.com> ALSA: scarlett2: Add missing sentinel initializer field Waiman Long <longman(a)redhat.com> selftest: memcg: skip memcg_sock test if address family not supported Jane Chu <jane.chu(a)oracle.com> Documentation: fix a hugetlbfs reservation statement AnishMulay <anishm7030(a)gmail.com> selftests/mm: skip migration tests if NUMA is unavailable Chen-Yu Tsai <wenst(a)chromium.org> PCI: mediatek-gen3: Prevent leaking IRQ domains when IRQ not found Gerd Bayer <gbayer(a)linux.ibm.com> PCI: Enable AtomicOps only if Root Port supports them Denis Rastyogin <gerben(a)altlinux.org> ASoC: rsnd: Fix potential out-of-bounds access of component_dais[] Giovanni Cabiddu <giovanni.cabiddu(a)intel.com> crypto: qat - use swab32 macro Srinivas Kandagatla <srinivas.kandagatla(a)oss.qualcomm.com> ASoC: qcom: qdsp6: topology: check widget type before accessing data Shengjiu Wang <shengjiu.wang(a)nxp.com> ASoC: fsl_easrc: Change the type for iec958 channel status controls Shengjiu Wang <shengjiu.wang(a)nxp.com> ASoC: fsl_easrc: Fix value type in fsl_easrc_iec958_get_bits() Shengjiu Wang <shengjiu.wang(a)nxp.com> ASoC: fsl_easrc: Check the variable range in fsl_easrc_iec958_put_bits() Shengjiu Wang <shengjiu.wang(a)nxp.com> ASoC: fsl_xcvr: Fix event generation in fsl_xcvr_mode_put() Shengjiu Wang <shengjiu.wang(a)nxp.com> ASoC: fsl_xcvr: Fix event generation in fsl_xcvr_arc_mode_put() Shengjiu Wang <shengjiu.wang(a)nxp.com> ASoC: fsl_micfil: Fix event generation in micfil_quality_set() Shengjiu Wang <shengjiu.wang(a)nxp.com> ASoC: fsl_micfil: Fix event generation in micfil_put_dc_remover_state() Shengjiu Wang <shengjiu.wang(a)nxp.com> ASoC: fsl_micfil: Fix event generation in hwvad_put_init_mode() Shengjiu Wang <shengjiu.wang(a)nxp.com> ASoC: fsl_micfil: Fix event generation in hwvad_put_enable() Shengjiu Wang <shengjiu.wang(a)nxp.com> ASoC: fsl_micfil: Add access property for "VAD Detected" Felix Gu <ustc.gu(a)gmail.com> pmdomain: imx: scu-pd: Fix device_node reference leak during ->probe() Felix Gu <gu_0233(a)qq.com> pmdomain: ti: omap_prm: Fix a reference leak on device node Akhil P Oommen <akhilpo(a)oss.qualcomm.com> drm/msm/a6xx: Use barriers while updating HFI Q headers Rob Clark <robin.clark(a)oss.qualcomm.com> drm/msm/shrinker: Fix can_block() logic Rob Clark <robin.clark(a)oss.qualcomm.com> drm/msm/a6xx: Fix HLSQ register dumping Ethan Tidmore <ethantidmore06(a)gmail.com> ASoC: SOF: Intel: hda: Place check before dereference Lei Huang <huanglei(a)kylinos.cn> ALSA: hda/realtek: fix code style (ERROR: else should follow close brace '}') Timur Kristóf <timur.kristof(a)gmail.com> drm/amd/pm/smu7: Add SCLK cap for quirky Hawaii board Timur Kristóf <timur.kristof(a)gmail.com> drm/amd/pm/ci: Fill DW8 fields from SMC Timur Kristóf <timur.kristof(a)gmail.com> drm/amd/pm/ci: Clear EnabledForActivity field for memory levels Timur Kristóf <timur.kristof(a)gmail.com> drm/amd/pm/ci: Fix powertune defaults for Hawaii 0x67B0 Timur Kristóf <timur.kristof(a)gmail.com> drm/amd/pm/smu7: Fix SMU7 voltage dependency on display clock Timur Kristóf <timur.kristof(a)gmail.com> drm/amd/pm/ci: Disable MCLK DPM on problematic CI ASICs Timur Kristóf <timur.kristof(a)gmail.com> drm/amd/pm/ci: Use highest MCLK on CI when MCLK DPM is disabled Cássio Gabriel <cassiogabrielcontato(a)gmail.com> ALSA: core: Validate compress device numbers without dynamic minors Sebastian Reichel <sebastian.reichel(a)collabora.com> drm/panel: simple: Correct G190EAN01 prepare timing Dmitry Baryshkov <dmitry.baryshkov(a)oss.qualcomm.com> drm/panel: sharp-ls043t1le01: make use of prepare_prev_first Alexander Koskovich <akoskovich(a)pm.me> drm/msm/dsi: rename MSM8998 DSI version from V2_2_0 to V2_0_0 Pengyu Luo <mitltlatltl(a)gmail.com> drm/msm/dsi: add the missing parameter description Yuanjie Yang <yuanjie.yang(a)oss.qualcomm.com> drm/msm/dpu: fix mismatch between power and frequency Pei Xiao <xiaopei01(a)kylinos.cn> spi: hisi-kunpeng: prevent infinite while() loop in hisi_spi_flush_fifo Alex Deucher <alexander.deucher(a)amd.com> drm/amdgpu/gfx10: look at the right prop for gfx queue priority Daniel Jordan <daniel.m.jordan(a)oracle.com> padata: Put CPU offline callback in ONLINE section to allow failure Chuyi Zhou <zhouchuyi(a)bytedance.com> padata: Remove cpu online check from cpu add and removal Thorsten Blum <thorsten.blum(a)linux.dev> crypto: atmel-aes - guard unregister on error in atmel_aes_register_algs Thorsten Blum <thorsten.blum(a)linux.dev> crypto: atmel - Use unregister_{aeads,ahashes,skciphers} Herbert Xu <herbert(a)gondor.apana.org.au> crypto: atmel - Remove cfb and ofb Andy Shevchenko <andriy.shevchenko(a)linux.intel.com> fbdev: matroxfb: Mark variable with __maybe_unused to avoid W=1 build break Guillaume Gonnet <ggonnet.linux(a)gmail.com> dm init: ensure device probing has finished in dm-mod.waitfor= Srinivasan Shanmugam <srinivasan.shanmugam(a)amd.com> drm/amdgpu: Add default case in DVI mode validation Ethan Tidmore <ethantidmore06(a)gmail.com> drm/sun4i: Fix resource leaks Felix Gu <ustc.gu(a)gmail.com> spi: fsl-qspi: Use reinit_completion() for repeated operations Harikrishna Shenoy <h-shenoy(a)ti.com> drm/bridge: cadence: cdns-mhdp8546-core: Handle HDCP state in bridge atomic check Jayesh Choudhary <j-choudhary(a)ti.com> drm/bridge: cadence: cdns-mhdp8546-core: Add mode_valid hook to drm_bridge_funcs Jayesh Choudhary <j-choudhary(a)ti.com> drm/bridge: cadence: cdns-mhdp8546-core: Set the mhdp connector earlier in atomic_enable() Junrui Luo <moonafterrain(a)outlook.com> dm log: fix out-of-bounds write due to region_count overflow Ming-Hung Tsai <mtsai(a)redhat.com> dm cache metadata: fix memory leak on metadata abort retry Rafael J. Wysocki <rafael.j.wysocki(a)intel.com> platform/chrome: chromeos_tbmc: Drop wakeup source on remove Ming-Hung Tsai <mtsai(a)redhat.com> dm cache: fix dirty mapping checking in passthrough mode switching Ming-Hung Tsai <mtsai(a)redhat.com> dm cache: support shrinking the origin device Ming-Hung Tsai <mtsai(a)redhat.com> dm cache: fix concurrent write failure in passthrough mode Ming-Hung Tsai <mtsai(a)redhat.com> dm cache policy smq: fix missing locks in invalidating cache blocks Ming-Hung Tsai <mtsai(a)redhat.com> dm cache: fix write hang in passthrough mode Ming-Hung Tsai <mtsai(a)redhat.com> dm cache: fix write path cache coherency in passthrough mode Ming-Hung Tsai <mtsai(a)redhat.com> dm cache: fix null-deref with concurrent writes in passthrough mode Sander Vanheule <sander(a)svanheule.net> ASoC: sti: use managed regmap_field allocations Sander Vanheule <sander(a)svanheule.net> ASoC: sti: Return errors from regmap_field_alloc() Ethan Tidmore <ethantidmore06(a)gmail.com> drm/sun4i: backend: fix error pointer dereference Alexander Konyukhov <Alexander.Konyukhov(a)kaspersky.com> drm/komeda: fix integer overflow in AFBC framebuffer size check Jiayuan Chen <jiayuan.chen(a)linux.dev> net, bpf: fix null-ptr-deref in xdp_master_redirect() for down master Xin Long <lucien.xin(a)gmail.com> sctp: fix missing encap_port propagation for GSO fragments Maxime Chevallier <maxime.chevallier(a)bootlin.com> net: phy: qcom: at803x: Use the correct bit to disable extended next page Christian Marangi <ansuelsmth(a)gmail.com> net: phy: move at803x PHY driver to dedicated directory FUJITA Tomonori <fujita.tomonori(a)gmail.com> net: phy: add Rust Asix PHY driver Christian Marangi <ansuelsmth(a)gmail.com> net: phy: aquantia: move to separate directory Dudu Lu <phx0fer(a)gmail.com> Bluetooth: l2cap: Add missing chan lock in l2cap_ecred_reconf_rsp Pauli Virtanen <pav(a)iki.fi> Bluetooth: fix locking in hci_conn_request_evt() with HCI_PROTO_DEFER Jonathan Rissanen <jonathan.rissanen(a)axis.com> Bluetooth: hci_ldisc: Clear HCI_UART_PROTO_INIT on error Luiz Augusto von Dentz <luiz.von.dentz(a)intel.com> Bluetooth: L2CAP: Fix printing wrong information if SDU length exceeds MTU Sun Jian <sun.jian.kdev(a)gmail.com> bpf: reject short IPv4/IPv6 inputs in bpf_prog_test_run_skb Gal Pressman <gal(a)nvidia.com> net/mlx5e: IPsec, fix ASO poll timeout with read_poll_timeout_atomic() Gal Pressman <gal(a)nvidia.com> net/mlx5e: Fix features not applied during netdev registration Josua Mayer <josua(a)solid-run.com> dt-bindings: net: dsa: nxp,sja1105: make spi-cpol optional for sja1110 Luca Weiss <luca.weiss(a)fairphone.com> net: ipa: Fix decoding EV_PER_EE for IPA v5.0+ Luca Weiss <luca.weiss(a)fairphone.com> net: ipa: Fix programming of QTIME_TIMESTAMP_CFG Taegu Ha <hataegu0826(a)gmail.com> ppp: require CAP_NET_ADMIN in target netns for unattached ioctls Lang Xu <xulang(a)uniontech.com> bpf: Fix OOB in pcpu_init_value Greg Jumper <greg.jumper(a)oracle.com> net/rds: Restrict use of RDS/IB to the initial network namespace Håkon Bugge <haakon.bugge(a)oracle.com> net/rds: Optimize rds_ib_laddr_check Jamal Hadi Salim <jhs(a)mojatatu.com> net/sched: act_ct: Only release RCU read lock after ct_ft Mashiro Chen <mashiro.chen(a)mailbox.org> net: hamradio: 6pack: fix uninit-value in sixpack_receive_buf Jiri Slaby (SUSE) <jirislaby(a)kernel.org> 6pack: propagage new tty types Sechang Lim <rhkrqnwk98(a)gmail.com> bpf: Fix RCU stall in bpf_fd_array_map_clear() Florian Westphal <fw(a)strlen.de> netfilter: nft_fwd_netdev: check ttl/hl before forwarding Florian Westphal <fw(a)strlen.de> netfilter: xt_socket: enable defrag after all other checks Justin Chen <justin.chen(a)broadcom.com> net: bcmgenet: fix racing timeout handler Zak Kemble <zakkemble(a)gmail.com> net: bcmgenet: switch to use 64bit statistics Doug Berger <opendmb(a)gmail.com> net: bcmgenet: support reclaiming unsent Tx packets Doug Berger <opendmb(a)gmail.com> net: bcmgenet: move DESC_INDEX flow to ring 0 Doug Berger <opendmb(a)gmail.com> net: bcmgenet: add bcmgenet_has_* helpers Florian Fainelli <florian.fainelli(a)broadcom.com> net: bcmgenet: Remove custom ndo_poll_controller() Justin Chen <justin.chen(a)broadcom.com> net: bcmgenet: fix off-by-one in bcmgenet_put_txcb Wang Wensheng <wsw9603(a)163.com> arm64: kexec: Remove duplicate allocation for trans_pgd Haoyu Lu <hechushiguitu666(a)gmail.com> ACPI: AGDI: fix missing newline in error message Weiming Shi <bestswngs(a)gmail.com> bpf: reject negative CO-RE accessor indices in bpf_core_parse_spec() Jiayuan Chen <jiayuan.chen(a)linux.dev> bpf: Drop task_to_inode and inet_conn_established from lsm sleepable hooks Ethan Tidmore <ethantidmore06(a)gmail.com> wifi: brcmfmac: Fix error pointer dereference MingTao Huang <mintaohuang(a)tencent.com> bpf: Fix stale offload->prog pointer after constant blinding Weiming Shi <bestswngs(a)gmail.com> bpf: fix end-of-list detection in cgroup_storage_get_next_key() Eric Dumazet <edumazet(a)google.com> macvlan: annotate data-races around port->bc_queue_len_used Amit Machhiwal <amachhiw(a)linux.ibm.com> selftests/powerpc: Suppress -Wmaybe-uninitialized with GCC 15 Madhavan Srinivasan <maddy(a)linux.ibm.com> selftests/powerpc: Re-order *FLAGS to follow lib.mk Sourabh Jain <sourabhjain(a)linux.ibm.com> powerpc/crash: fix backup region offset update to elfcorehdr Chih Kai Hsu <hsu.chih.kai(a)realtek.com> r8152: fix incorrect register write to USB_UPHY_XTAL Alexey Velichayshiy <a.velichayshiy(a)ispras.ru> wifi: rtw89: phy: fix uninitialized variable access in rtw89_phy_cfo_set_crystal_cap() David Carlier <devnexen(a)gmail.com> bpf: Use RCU-safe iteration in dev_map_redirect_multi() SKB path Thorsten Blum <thorsten.blum(a)toblux.com> bpf, devmap: Remove unnecessary if check in for loop Duoming Zhou <duoming(a)zju.edu.cn> wifi: mt76: mt7915: fix use-after-free bugs in mt7915_mac_dump_work() StanleyYP Wang <StanleyYP.Wang(a)mediatek.com> wifi: mt76: mt7996: fix struct mt7996_mcu_uni_event James Clark <james.clark(a)linaro.org> arm64: cpufeature: Make PMUVer and PerfMon unsigned Alok Tiwari <alok.a.tiwari(a)oracle.com> wifi: mt76: mt7996: fix FCS error flag check in RX descriptor Ryder Lee <ryder.lee(a)mediatek.com> wifi: mt76: mt7915: fix use_cts_prot support Ryder Lee <ryder.lee(a)mediatek.com> wifi: mt76: mt7615: fix use_cts_prot support Sean Wang <sean.wang(a)mediatek.com> wifi: mt76: mt7921: Reset ampdu_state state in case of failure in mt76_connac2_tx_check_aggr() Petr Pavlu <petr.pavlu(a)suse.com> module: Fix freeing of charp module parameters when CONFIG_SYSFS=n Petr Pavlu <petr.pavlu(a)suse.com> params: Replace __modinit with __init_or_module Ilya Leoshkevich <iii(a)linux.ibm.com> s390/bpf: Zero-extend bpf prog return values and kfunc arguments Cai Xinchen <caixinchen1(a)huawei.com> dpaa2: compile dpaa2 even CONFIG_FSL_DPAA2_ETH=n Cai Xinchen <caixinchen1(a)huawei.com> dpaa2: add independent dependencies for FSL_DPAA2_SWITCH Feng Yang <yangfeng(a)kylinos.cn> bpf: test_run: Fix the null pointer dereference issue in bpf_lwt_xmit_push_encap Vadim Fedorenko <vadfed(a)meta.com> bpf: Add CHECKSUM_COMPLETE to bpf test progs Duoming Zhou <duoming(a)zju.edu.cn> wifi: rtlwifi: pci: fix possible use-after-free caused by unfinished irq_prepare_bcn_tasklet Zilin Guan <zilin(a)seu.edu.cn> wifi: mwifiex: Fix memory leak in mwifiex_11n_aggregate_pkt() Mario Limonciello (AMD) <superm1(a)kernel.org> firmware: dmi: Correct an indexing error in dmi.h Bart Van Assche <bvanassche(a)acm.org> locking: Fix rwlock support in <linux/spinlock_up.h> Thomas Gleixner <tglx(a)kernel.org> hrtimer: Reduce trace noise in hrtimer_start() Peter Zijlstra <peterz(a)infradead.org> hrtimer: Avoid pointless reprogramming in __hrtimer_start_range_ns() Richard Clark <richard.xnu.clark(a)gmail.com> hrtimers: Update the return type of enqueue_hrtimer() Brian Masney <bmasney(a)redhat.com> irqchip/irq-pic32-evic: Address warning related to wrong printf() formatter Danilo Krummrich <dakr(a)kernel.org> s390/cio: use generic driver_override infrastructure Li Zhijian <lizhijian(a)fujitsu.com> s390/cio: convert sprintf()/snprintf() to sysfs_emit() Halil Pasic <pasic(a)linux.ibm.com> s390/cio: make sch->lock spinlock pointer a member Gui-Dong Han <hanguidong02(a)gmail.com> debugfs: fix placement of EXPORT_SYMBOL_GPL for debugfs_create_str() Gui-Dong Han <hanguidong02(a)gmail.com> debugfs: check for NULL pointer in debugfs_create_str() Gopi Krishna Menon <krishnagopi487(a)gmail.com> thermal/drivers/spear: Fix error condition for reading st,thermal-flags Danilo Krummrich <dakr(a)kernel.org> devres: fix missing node debug info in devm_krealloc() Rafael J. Wysocki <rafael.j.wysocki(a)intel.com> ACPI: x86: cmos_rtc: Improve coordination with ACPI TAD driver Rafael J. Wysocki <rafael.j.wysocki(a)intel.com> ACPI: x86: cmos_rtc: Clean up address space handler driver Cole Leavitt <cole(a)unwrap.rs> pstore/ram: fix resource leak when ioremap() fails Jackie Liu <liuyun01(a)kylinos.cn> blk-cgroup: fix disk reference leak in blkcg_maybe_throttle_current() Deepanshu Kartikey <kartikey406(a)gmail.com> nilfs2: reject zero bd_oblocknr in nilfs_ioctl_mark_blocks_dirty() Daan De Meyer <daan.j.demeyer(a)gmail.com> loop: fix partition scan race between udev and loop_reread_partitions() Bart Van Assche <bvanassche(a)acm.org> drbd: Balance RCU calls in drbd_adm_dump_devices() HyungJung Joo <jhj140711(a)gmail.com> fs/omfs: reject s_sys_blocksize smaller than OMFS_DIR_START Ming Lei <ming.lei(a)redhat.com> blk-cgroup: wait for blkcg cleanup before initializing new disk ------------- Diffstat: .../bindings/interrupt-controller/arm,gic-v3.yaml | 2 +- .../devicetree/bindings/net/dsa/nxp,sja1105.yaml | 2 - Documentation/mm/hugetlbfs_reserv.rst | 2 +- Documentation/networking/bonding.rst | 15 + MAINTAINERS | 8 + Makefile | 4 +- arch/arm/boot/dts/mediatek/mt7623.dtsi | 2 +- .../boot/dts/nxp/imx/imx27-eukrea-cpuimx27.dtsi | 8 +- .../nxp/imx/imx27-eukrea-mbimxsd27-baseboard.dts | 2 +- arch/arm/mach-omap1/clock_data.c | 4 +- arch/arm/net/bpf_jit_32.c | 6 + .../boot/dts/amlogic/meson-gxl-s905d-p230.dts | 3 +- .../boot/dts/freescale/imx8-apalis-ixora-v1.1.dtsi | 4 + .../boot/dts/freescale/imx8-apalis-ixora-v1.2.dtsi | 4 + .../arm64/boot/dts/freescale/imx8mm-emtop-som.dtsi | 4 +- .../arm64/boot/dts/freescale/imx8mm-tqma8mqml.dtsi | 2 +- .../arm64/boot/dts/freescale/imx8mn-tqma8mqnl.dtsi | 2 +- .../dts/freescale/imx8mp-data-modul-edm-sbc.dts | 2 +- .../boot/dts/freescale/imx8mp-debix-model-a.dts | 2 +- .../dts/freescale/imx8mp-debix-som-a-bmb-08.dts | 2 +- .../boot/dts/freescale/imx8mp-debix-som-a.dtsi | 2 +- .../arm64/boot/dts/freescale/imx8mp-dhcom-som.dtsi | 2 +- arch/arm64/boot/dts/freescale/imx8mp-evk.dts | 2 +- .../boot/dts/freescale/imx8mp-icore-mx8mp.dtsi | 2 +- arch/arm64/boot/dts/freescale/imx8qxp-mek.dts | 10 +- arch/arm64/boot/dts/mediatek/mt6795.dtsi | 2 +- arch/arm64/boot/dts/mediatek/mt7986a.dtsi | 2 +- arch/arm64/boot/dts/qcom/msm8953-xiaomi-daisy.dts | 2 +- arch/arm64/boot/dts/qcom/msm8953-xiaomi-vince.dts | 2 +- .../dts/qcom/sdm845-xiaomi-beryllium-common.dtsi | 1 + arch/arm64/boot/dts/qcom/sm7225-fairphone-fp4.dts | 4 + arch/arm64/boot/dts/qcom/sm8250.dtsi | 5 + arch/arm64/boot/dts/qcom/sm8450.dtsi | 5 +- arch/arm64/boot/dts/qcom/sm8550.dtsi | 7 +- arch/arm64/include/asm/xor.h | 2 +- arch/arm64/kernel/cpufeature.c | 4 +- arch/arm64/kernel/machine_kexec.c | 3 - arch/arm64/kernel/patch-scs.c | 4 +- arch/arm64/net/bpf_jit_comp.c | 4 +- arch/powerpc/kexec/file_load_64.c | 2 +- arch/powerpc/platforms/44x/warp.c | 2 + arch/riscv/net/bpf_jit.h | 6 - arch/riscv/net/bpf_jit_core.c | 7 - arch/s390/kvm/interrupt.c | 3 +- arch/s390/kvm/pci.c | 6 +- arch/s390/net/bpf_jit_comp.c | 39 +- arch/x86/kvm/trace.h | 2 +- block/blk-cgroup.c | 16 + block/disk-events.c | 3 +- crypto/af_alg.c | 2 + crypto/jitterentropy-kcapi.c | 14 +- drivers/acpi/acpi_cmos_rtc.c | 79 ++- drivers/acpi/arm64/agdi.c | 2 +- drivers/base/devres.c | 2 + drivers/base/power/domain.c | 10 +- drivers/block/drbd/drbd_nl.c | 8 +- drivers/bluetooth/hci_ldisc.c | 3 + drivers/cdrom/cdrom.c | 73 ++- drivers/char/ipmi/ssif_bmc.c | 34 +- drivers/clk/clk-qoriq.c | 17 +- drivers/clk/clk-xgene.c | 2 + drivers/clk/imx/clk-imx6q.c | 12 +- drivers/clk/imx/clk-imx8mq.c | 4 +- drivers/clk/qcom/dispcc-sc7180.c | 8 + drivers/clk/qcom/dispcc-sc8280xp.c | 4 - drivers/clk/qcom/dispcc-sm8250.c | 6 +- drivers/clk/qcom/dispcc-sm8450.c | 2 +- drivers/clk/qcom/gcc-sc8180x.c | 64 +- drivers/clk/visconti/pll.c | 2 +- drivers/crypto/atmel-aes.c | 237 +------ drivers/crypto/atmel-sha.c | 27 +- drivers/crypto/atmel-tdes.c | 230 +------ drivers/crypto/ccp/ccp-crypto-aes.c | 7 +- .../intel/qat/qat_common/icp_qat_hw_20_comp.h | 10 +- drivers/crypto/nx/nx-842.c | 37 +- drivers/crypto/nx/nx-842.h | 15 +- drivers/crypto/nx/nx-common-powernv.c | 31 +- drivers/crypto/nx/nx-common-pseries.c | 33 +- drivers/crypto/sa2ul.c | 4 +- drivers/dma/dw-axi-dmac/dw-axi-dmac-platform.c | 2 - drivers/dma/mxs-dma.c | 1 + drivers/firmware/efi/capsule-loader.c | 2 +- drivers/gpu/drm/amd/amdgpu/amdgpu_connectors.c | 2 + drivers/gpu/drm/amd/amdgpu/amdgpu_gmc.c | 2 +- drivers/gpu/drm/amd/amdgpu/amdgpu_kms.c | 57 +- drivers/gpu/drm/amd/amdgpu/gfx_v10_0.c | 2 +- drivers/gpu/drm/amd/amdgpu/gfx_v6_0.c | 66 ++ drivers/gpu/drm/amd/amdgpu/jpeg_v2_0.c | 1 + drivers/gpu/drm/amd/amdgpu/jpeg_v2_5.c | 2 + drivers/gpu/drm/amd/amdgpu/jpeg_v3_0.c | 1 + drivers/gpu/drm/amd/amdgpu/jpeg_v4_0.c | 1 + drivers/gpu/drm/amd/amdgpu/jpeg_v4_0_3.c | 1 + drivers/gpu/drm/amd/amdgpu/uvd_v3_1.c | 16 +- drivers/gpu/drm/amd/amdgpu/uvd_v4_2.c | 3 +- drivers/gpu/drm/amd/amdgpu/vce_v2_0.c | 2 +- drivers/gpu/drm/amd/amdgpu/vcn_v2_0.c | 2 + drivers/gpu/drm/amd/amdgpu/vcn_v2_5.c | 2 + drivers/gpu/drm/amd/amdgpu/vcn_v3_0.c | 3 + drivers/gpu/drm/amd/amdgpu/vcn_v4_0_3.c | 1 + drivers/gpu/drm/amd/display/dc/bios/bios_parser.c | 62 ++ .../gpu/drm/amd/display/dc/dce/dce_link_encoder.c | 4 +- .../amd/display/include/grph_object_ctrl_defs.h | 4 + drivers/gpu/drm/amd/pm/powerplay/hwmgr/hwmgr.c | 15 + .../gpu/drm/amd/pm/powerplay/hwmgr/smu7_hwmgr.c | 118 +++- .../gpu/drm/amd/pm/powerplay/hwmgr/smu7_hwmgr.h | 1 + drivers/gpu/drm/amd/pm/powerplay/inc/hwmgr.h | 1 + .../gpu/drm/amd/pm/powerplay/smumgr/ci_smumgr.c | 15 +- .../drm/arm/display/komeda/komeda_framebuffer.c | 6 +- .../gpu/drm/bridge/cadence/cdns-mhdp8546-core.c | 72 ++- .../gpu/drm/bridge/cadence/cdns-mhdp8546-core.h | 1 + .../gpu/drm/bridge/cadence/cdns-mhdp8546-hdcp.c | 18 +- drivers/gpu/drm/gma500/oaktrail_hdmi.c | 1 + drivers/gpu/drm/gma500/oaktrail_lvds.c | 9 +- drivers/gpu/drm/i915/display/intel_dp.c | 9 +- .../gpu/drm/i915/display/intel_modeset_verify.c | 2 +- drivers/gpu/drm/i915/display/skl_watermark.c | 49 +- drivers/gpu/drm/i915/display/skl_watermark.h | 4 +- drivers/gpu/drm/i915/gt/intel_reset.c | 3 +- drivers/gpu/drm/msm/adreno/a6xx_gpu_state.c | 2 +- drivers/gpu/drm/msm/adreno/a6xx_hfi.c | 14 +- drivers/gpu/drm/msm/disp/dpu1/dpu_kms.c | 2 - drivers/gpu/drm/msm/dsi/dsi_cfg.c | 4 +- drivers/gpu/drm/msm/dsi/dsi_cfg.h | 2 +- drivers/gpu/drm/msm/dsi/dsi_host.c | 1 + drivers/gpu/drm/msm/msm_gem_shrinker.c | 5 +- drivers/gpu/drm/panel/panel-sharp-ls043t1le01.c | 1 + drivers/gpu/drm/panel/panel-simple.c | 2 +- drivers/gpu/drm/panfrost/panfrost_drv.c | 2 + drivers/gpu/drm/sun4i/sun4i_backend.c | 6 +- drivers/gpu/drm/tiny/ofdrm.c | 2 + drivers/gpu/drm/v3d/v3d_gem.c | 5 + drivers/hid/hid-asus.c | 28 +- drivers/hid/usbhid/hid-core.c | 2 +- drivers/i3c/master.c | 32 +- drivers/i3c/master/mipi-i3c-hci/dma.c | 5 +- drivers/infiniband/core/iwpm_msg.c | 6 +- drivers/infiniband/hw/mana/qp.c | 7 +- drivers/iommu/intel/iommu.c | 3 + drivers/iommu/iommufd/vfio_compat.c | 2 +- drivers/irqchip/irq-pic32-evic.c | 2 +- drivers/leds/blink/leds-lgm-sso.c | 2 - drivers/mailbox/mailbox-test.c | 39 +- drivers/mailbox/mailbox.c | 3 +- drivers/md/dm-cache-metadata.c | 24 +- drivers/md/dm-cache-metadata.h | 5 - drivers/md/dm-cache-policy-smq.c | 4 + drivers/md/dm-cache-target.c | 143 +++- drivers/md/dm-init.c | 4 +- drivers/md/dm-log.c | 6 +- .../media/platform/nxp/imx8-isi/imx8-isi-video.c | 2 +- drivers/memory/tegra/tegra124-emc.c | 2 +- drivers/memory/tegra/tegra30-emc.c | 6 +- drivers/mfd/mc13xxx-core.c | 2 +- drivers/mtd/maps/physmap-gemini.c | 2 +- drivers/mtd/nand/raw/sunxi_nand.c | 6 +- drivers/mtd/parsers/ofpart_core.c | 4 +- drivers/mtd/spi-nor/core.c | 2 +- drivers/mtd/spi-nor/core.h | 8 +- drivers/mtd/spi-nor/sfdp.c | 30 +- drivers/mtd/spi-nor/swp.c | 4 +- drivers/net/bareudp.c | 24 +- drivers/net/bonding/bond_3ad.c | 123 ++-- drivers/net/bonding/bond_main.c | 74 ++- drivers/net/bonding/bond_netlink.c | 37 +- drivers/net/bonding/bond_options.c | 71 ++ drivers/net/bonding/bond_procfs.c | 3 +- drivers/net/bonding/bond_sysfs_slave.c | 17 +- drivers/net/dsa/realtek/rtl8365mb.c | 2 +- .../net/ethernet/aquantia/atlantic/aq_pci_func.c | 2 +- drivers/net/ethernet/broadcom/genet/bcmgenet.c | 718 +++++++++------------ drivers/net/ethernet/broadcom/genet/bcmgenet.h | 68 +- drivers/net/ethernet/broadcom/genet/bcmgenet_wol.c | 4 +- drivers/net/ethernet/broadcom/genet/bcmmii.c | 6 +- drivers/net/ethernet/freescale/Makefile | 3 +- drivers/net/ethernet/freescale/dpaa2/Kconfig | 4 + drivers/net/ethernet/intel/e1000e/netdev.c | 1 + drivers/net/ethernet/intel/i40e/i40e.h | 1 + drivers/net/ethernet/intel/i40e/i40e_main.c | 2 +- drivers/net/ethernet/intel/i40e/i40e_ptp.c | 3 +- drivers/net/ethernet/intel/iavf/iavf.h | 9 +- drivers/net/ethernet/intel/iavf/iavf_main.c | 52 +- drivers/net/ethernet/intel/iavf/iavf_virtchnl.c | 76 ++- drivers/net/ethernet/intel/ice/ice_txrx.c | 7 +- drivers/net/ethernet/intel/ice/ice_vf_lib.c | 7 +- .../mellanox/mlx5/core/en_accel/ipsec_offload.c | 12 +- drivers/net/ethernet/mellanox/mlx5/core/en_main.c | 8 + .../ethernet/netronome/nfp/nfpcore/nfp_target.c | 17 +- drivers/net/ethernet/sfc/efx_devlink.c | 2 +- drivers/net/hamradio/6pack.c | 39 +- drivers/net/ipa/gsi.c | 1 + drivers/net/ipa/ipa_main.c | 6 +- drivers/net/macvlan.c | 9 +- drivers/net/mctp/mctp-i2c.c | 4 +- drivers/net/netconsole.c | 26 +- drivers/net/netdevsim/dev.c | 2 +- drivers/net/phy/Kconfig | 20 +- drivers/net/phy/Makefile | 12 +- drivers/net/phy/aquantia/Kconfig | 5 + drivers/net/phy/aquantia/Makefile | 6 + drivers/net/phy/{ => aquantia}/aquantia.h | 0 drivers/net/phy/{ => aquantia}/aquantia_hwmon.c | 0 drivers/net/phy/{ => aquantia}/aquantia_main.c | 0 drivers/net/phy/ax88796b_rust.rs | 135 ++++ drivers/net/phy/dp83869.c | 13 +- drivers/net/phy/qcom/Kconfig | 7 + drivers/net/phy/qcom/Makefile | 2 + drivers/net/phy/{ => qcom}/at803x.c | 2 +- drivers/net/ppp/ppp_generic.c | 5 +- drivers/net/ppp/pppoe.c | 8 +- drivers/net/slip/slhc.c | 49 +- drivers/net/usb/r8152.c | 2 +- drivers/net/usb/rtl8150.c | 12 +- drivers/net/vrf.c | 15 +- .../wireless/broadcom/brcm80211/brcmfmac/chip.c | 15 + drivers/net/wireless/marvell/mwifiex/11n_aggr.c | 1 + drivers/net/wireless/mediatek/mt76/mt7615/mac.c | 15 - drivers/net/wireless/mediatek/mt76/mt7615/main.c | 7 +- drivers/net/wireless/mediatek/mt76/mt7615/mcu.c | 47 ++ drivers/net/wireless/mediatek/mt76/mt7615/mt7615.h | 5 +- drivers/net/wireless/mediatek/mt76/mt7615/regs.h | 2 - .../net/wireless/mediatek/mt76/mt76_connac_mac.c | 6 +- drivers/net/wireless/mediatek/mt76/mt7915/init.c | 1 + drivers/net/wireless/mediatek/mt76/mt7915/mac.c | 13 - drivers/net/wireless/mediatek/mt76/mt7915/main.c | 7 +- drivers/net/wireless/mediatek/mt76/mt7915/mcu.c | 62 ++ drivers/net/wireless/mediatek/mt76/mt7915/mcu.h | 11 + drivers/net/wireless/mediatek/mt76/mt7915/mt7915.h | 4 + drivers/net/wireless/mediatek/mt76/mt7996/mac.c | 2 +- drivers/net/wireless/mediatek/mt76/mt7996/mcu.c | 2 +- drivers/net/wireless/mediatek/mt76/mt7996/mcu.h | 4 +- drivers/net/wireless/realtek/rtlwifi/pci.c | 1 + drivers/net/wireless/realtek/rtw89/phy.c | 2 +- drivers/nfc/trf7970a.c | 3 +- drivers/nvme/host/pci.c | 1 + drivers/nvme/target/tcp.c | 51 +- drivers/pci/controller/dwc/pcie-designware.c | 16 +- drivers/pci/controller/dwc/pcie-designware.h | 2 + drivers/pci/controller/dwc/pcie-tegra194.c | 155 +++-- drivers/pci/controller/pcie-mediatek-gen3.c | 8 +- drivers/pci/pci.c | 41 +- drivers/pcmcia/rsrc_nonstatic.c | 6 +- drivers/pinctrl/nomadik/pinctrl-abx500.c | 2 +- drivers/pinctrl/pinctrl-cy8c95x0.c | 27 +- drivers/pinctrl/pinctrl-pic32.c | 20 +- drivers/platform/chrome/chromeos_tbmc.c | 6 + drivers/platform/surface/surfacepro3_button.c | 1 + .../x86/dell/dell-wmi-sysman/enum-attributes.c | 34 +- drivers/platform/x86/dell/dell_rbu.c | 6 +- drivers/platform/x86/panasonic-laptop.c | 5 +- drivers/pmdomain/imx/scu-pd.c | 1 + drivers/pmdomain/ti/omap_prm.c | 1 + drivers/rtc/rtc-abx80x.c | 2 + drivers/s390/cio/chsc.c | 18 +- drivers/s390/cio/chsc_sch.c | 6 +- drivers/s390/cio/cio.c | 6 +- drivers/s390/cio/cio.h | 7 +- drivers/s390/cio/css.c | 82 +-- drivers/s390/cio/device.c | 66 +- drivers/s390/cio/device_pgid.c | 12 +- drivers/s390/cio/eadm_sch.c | 36 +- drivers/s390/cio/vfio_ccw_drv.c | 8 +- drivers/s390/cio/vfio_ccw_fsm.c | 24 +- drivers/scsi/sg.c | 49 +- drivers/scsi/sr.c | 11 +- drivers/scsi/sr.h | 1 - drivers/soc/qcom/llcc-qcom.c | 2 +- drivers/soc/qcom/ocmem.c | 24 +- drivers/soc/qcom/qcom_aoss.c | 2 +- drivers/soc/tegra/cbb/tegra234-cbb.c | 4 + drivers/soundwire/bus.c | 8 +- drivers/soundwire/cadence_master.c | 8 + drivers/spi/spi-fsl-qspi.c | 3 +- drivers/spi/spi-hisi-kunpeng.c | 12 +- drivers/spi/spi-mtk-snfi.c | 14 + drivers/spi/spi-rockchip.c | 3 +- drivers/spi/spi-sifive.c | 29 +- drivers/spi/spi-st-ssc4.c | 76 ++- drivers/target/target_core_sbc.c | 3 +- drivers/thermal/spear_thermal.c | 2 +- drivers/tty/hvc/hvc_iucv.c | 2 +- drivers/vhost/net.c | 4 +- drivers/video/backlight/sky81452-backlight.c | 3 + drivers/video/fbdev/matrox/g450_pll.c | 2 +- drivers/video/fbdev/offb.c | 7 +- fs/adfs/super.c | 3 + fs/btrfs/inode.c | 36 +- fs/btrfs/space-info.c | 8 +- fs/btrfs/sysfs.c | 5 +- fs/btrfs/sysfs.h | 3 +- fs/ceph/xattr.c | 1 + fs/debugfs/file.c | 7 +- fs/f2fs/f2fs.h | 3 + fs/f2fs/inline.c | 13 +- fs/f2fs/super.c | 11 + fs/f2fs/sysfs.c | 52 +- fs/gfs2/inode.c | 3 +- fs/gfs2/log.c | 33 +- fs/netfs/iterator.c | 13 +- fs/nfs/blocklayout/blocklayout.c | 4 +- fs/nilfs2/ioctl.c | 6 + fs/ntfs3/dir.c | 5 +- fs/ntfs3/fsntfs.c | 4 +- fs/ntfs3/inode.c | 13 +- fs/ntfs3/namei.c | 17 +- fs/ntfs3/super.c | 7 +- fs/ntfs3/xattr.c | 5 +- fs/ocfs2/dlm/dlmdomain.c | 10 +- fs/ocfs2/ioctl.c | 18 +- fs/ocfs2/resize.c | 12 +- fs/ocfs2/xattr.c | 4 +- fs/omfs/inode.c | 6 + fs/pstore/ram_core.c | 4 + fs/quota/dquot.c | 38 +- fs/smb/client/ioctl.c | 2 +- fs/smb/client/smb2file.c | 27 +- fs/smb/client/smb2pdu.h | 2 +- fs/smb/client/smb2transport.c | 32 +- fs/smb/server/auth.c | 17 +- fs/smb/server/connection.c | 9 + fs/smb/server/ksmbd_netlink.h | 17 + fs/smb/server/mgmt/user_config.c | 39 +- fs/smb/server/mgmt/user_config.h | 5 +- fs/smb/server/mgmt/user_session.c | 12 +- fs/smb/server/smb2pdu.c | 2 + fs/smb/server/smb_common.c | 15 +- fs/smb/server/smbacl.c | 66 +- fs/smb/server/transport_ipc.c | 80 ++- fs/smb/server/transport_ipc.h | 2 + fs/smb/server/transport_rdma.c | 4 +- fs/tracefs/event_inode.c | 2 +- include/dt-bindings/clock/qcom,dispcc-sc7180.h | 7 +- include/dt-bindings/clock/qcom,gcc-sc8180x.h | 5 + include/linux/cdrom.h | 1 + include/linux/cpuhotplug.h | 1 - include/linux/dev_printk.h | 8 + include/linux/dmi.h | 5 + include/linux/moduleparam.h | 11 +- include/linux/padata.h | 8 +- include/linux/ppp_defs.h | 16 + include/linux/printk.h | 5 +- include/linux/quotaops.h | 9 +- include/linux/spinlock_up.h | 20 +- include/net/bond_3ad.h | 3 +- include/net/bond_options.h | 2 + include/net/bonding.h | 3 + include/net/ipv6.h | 6 - include/net/pie.h | 2 +- include/net/route.h | 6 - include/net/udp_tunnel.h | 15 + include/trace/events/timer.h | 11 +- include/uapi/linux/bpf.h | 2 + include/uapi/linux/if_link.h | 3 + include/uapi/linux/mii.h | 3 +- io_uring/io-wq.c | 3 +- kernel/audit.c | 4 + kernel/auditsc.c | 2 +- kernel/bpf/arraymap.c | 4 +- kernel/bpf/bpf_lsm.c | 1 - kernel/bpf/core.c | 2 + kernel/bpf/devmap.c | 8 +- kernel/bpf/hashtab.c | 2 +- kernel/bpf/helpers.c | 17 +- kernel/bpf/local_storage.c | 2 +- kernel/bpf/verifier.c | 5 +- kernel/cgroup/cgroup.c | 24 +- kernel/cgroup/rdma.c | 2 +- kernel/fork.c | 11 +- kernel/futex/requeue.c | 13 +- kernel/module/main.c | 4 +- kernel/padata.c | 130 ++-- kernel/params.c | 42 +- kernel/time/hrtimer.c | 56 +- kernel/trace/trace_branch.c | 8 +- kernel/trace/trace_events_hist.c | 12 +- kernel/workqueue.c | 4 +- net/bluetooth/hci_event.c | 3 - net/bluetooth/l2cap_core.c | 8 +- net/bpf/test_run.c | 63 +- net/ceph/crush/crush.c | 6 +- net/ceph/osdmap.c | 14 +- net/core/filter.c | 4 +- net/core/neighbour.c | 34 +- net/ipv4/netfilter/arp_tables.c | 18 +- net/ipv4/netfilter/arpt_mangle.c | 8 + net/ipv4/nexthop.c | 4 +- net/ipv4/route.c | 48 -- net/ipv4/tcp.c | 18 +- net/ipv4/tcp_input.c | 2 +- net/ipv4/tcp_output.c | 13 +- net/ipv4/tcp_plb.c | 2 +- net/ipv4/udp_tunnel_core.c | 48 ++ net/ipv6/icmp.c | 10 +- net/ipv6/ip6_output.c | 68 -- net/ipv6/ip6_udp_tunnel.c | 69 ++ net/mptcp/fastopen.c | 28 +- net/mptcp/pm_netlink.c | 26 +- net/mptcp/protocol.c | 4 +- net/mptcp/protocol.h | 5 +- net/mptcp/subflow.c | 3 - net/netfilter/ipvs/ip_vs_xmit.c | 19 +- net/netfilter/nf_conntrack_proto_sctp.c | 10 +- net/netfilter/nf_conntrack_sip.c | 160 +++-- net/netfilter/nf_nat_amanda.c | 2 +- net/netfilter/nf_nat_sip.c | 34 +- net/netfilter/nf_tables_api.c | 28 +- net/netfilter/nfnetlink_osf.c | 45 +- net/netfilter/nft_ct.c | 2 + net/netfilter/nft_fwd_netdev.c | 10 + net/netfilter/nft_osf.c | 6 +- net/netfilter/xt_mac.c | 34 +- net/netfilter/xt_owner.c | 37 +- net/netfilter/xt_physdev.c | 29 +- net/netfilter/xt_policy.c | 2 +- net/netfilter/xt_realm.c | 2 +- net/netfilter/xt_socket.c | 23 +- net/openvswitch/datapath.c | 35 +- net/openvswitch/vport.c | 3 + net/rds/af_rds.c | 10 +- net/rds/connection.c | 14 + net/rds/ib.c | 24 +- net/rds/ib.h | 1 + net/rds/ib_rdma.c | 2 +- net/sched/act_ct.c | 8 +- net/sched/sch_cake.c | 15 +- net/sched/sch_choke.c | 26 +- net/sched/sch_fq_codel.c | 3 +- net/sched/sch_fq_pie.c | 19 +- net/sched/sch_hhf.c | 19 +- net/sched/sch_netem.c | 76 ++- net/sched/sch_pie.c | 52 +- net/sched/sch_red.c | 31 +- net/sched/sch_sfb.c | 54 +- net/sched/sch_taprio.c | 22 +- net/sctp/inqueue.c | 1 + net/sctp/sm_statefuns.c | 6 + net/sctp/socket.c | 2 +- net/tipc/msg.c | 14 +- net/tls/tls.h | 1 + net/tls/tls_strp.c | 6 + net/tls/tls_sw.c | 4 + net/unix/af_unix.c | 9 +- net/unix/unix_bpf.c | 3 + rust/uapi/uapi_helper.h | 2 + security/integrity/ima/ima_crypto.c | 2 +- sound/core/compress_offload.c | 7 - sound/core/sound.c | 7 + sound/isa/sc6000.c | 285 ++++---- sound/pci/hda/patch_conexant.c | 34 +- sound/pci/hda/patch_realtek.c | 4 +- sound/soc/codecs/ab8500-codec.c | 6 +- sound/soc/fsl/fsl_easrc.c | 123 +++- sound/soc/fsl/fsl_micfil.c | 60 +- sound/soc/fsl/fsl_xcvr.c | 22 +- sound/soc/qcom/qdsp6/topology.c | 8 +- sound/soc/sh/rcar/core.c | 2 +- sound/soc/sof/compress.c | 8 +- sound/soc/sof/intel/hda-dai.c | 29 +- sound/soc/sof/intel/hda-stream.c | 10 +- sound/soc/sof/sof-priv.h | 2 + sound/soc/sti/uniperif_player.c | 9 +- sound/usb/midi.c | 12 +- sound/usb/midi2.c | 12 +- sound/usb/mixer_scarlett2.c | 2 +- sound/usb/quirks.c | 2 +- sound/usb/stream.c | 58 +- sound/usb/stream.h | 3 +- tools/include/uapi/linux/bpf.h | 2 + tools/lib/bpf/relo_core.c | 2 + tools/perf/builtin-lock.c | 2 +- tools/perf/util/branch.h | 3 + tools/perf/util/cs-etm-decoder/cs-etm-decoder.c | 51 +- tools/perf/util/expr.c | 3 +- tools/perf/util/symbol-elf.c | 8 +- tools/perf/util/util.h | 1 - tools/testing/ktest/ktest.pl | 35 +- tools/testing/selftests/bpf/prog_tests/snprintf.c | 3 +- tools/testing/selftests/cgroup/test_memcontrol.c | 11 +- tools/testing/selftests/mm/migration.c | 3 +- .../testing/selftests/powerpc/benchmarks/Makefile | 4 +- tools/testing/selftests/powerpc/copyloops/Makefile | 20 +- tools/testing/selftests/powerpc/nx-gzip/Makefile | 4 +- tools/testing/selftests/powerpc/pmu/ebb/Makefile | 20 +- .../powerpc/pmu/event_code_tests/Makefile | 4 +- .../selftests/powerpc/pmu/sampling_tests/Makefile | 4 +- .../testing/selftests/powerpc/primitives/Makefile | 4 +- tools/testing/selftests/powerpc/security/Makefile | 4 +- tools/testing/selftests/powerpc/signal/Makefile | 3 +- .../testing/selftests/powerpc/stringloops/Makefile | 10 +- .../selftests/powerpc/switch_endian/Makefile | 4 +- tools/testing/selftests/powerpc/syscalls/Makefile | 4 +- tools/testing/selftests/powerpc/vphn/Makefile | 4 +- virt/kvm/dirty_ring.c | 3 +- 492 files changed, 5183 insertions(+), 3404 deletions(-)

1 day, 7 hours

2026年上海MWC——参会者名录

by Brielle Carter

您好，我们目前正提供 MWC 上海 2026 大会参会者名单的访问权限，该名单包含了 46,753 位经过核实且已明确同意接收信息的参会联系人。数据内容涵盖姓名、职位、公司名称、电话号码及官方电子邮箱。阵亡将士纪念日特惠 —— 第二季度专享 8 折优惠如果您对此感兴趣，我很乐意为您提供更多详细信息，并可为您提供具体的报价方案。顺祝商祺！ Brielle Carter 高级市场经理如果您不希望继续接收此类通讯，请回复“不感兴趣”。

3 days, 18 hours

family accommodation request August 08-17

by Jiri MIkulec

Good afternoon, We will be visiting this year We would like to request accommodation with breakfasts for 10 night We have checked your website and decided this is the apartment we want to stay in. Please confirm if it is available as we want to book our flight tomorrow. [1]WEBSITE IMAGE1.JPG [2]WEBSITE IMAGE2.JPG Best regards, Jiri MIkulec References 1. https://mvzznwkg.formester.com/f/yim4Ofetz 2. https://mvzznwkg.formester.com/f/yim4Ofetz

3 days, 23 hours

ATTENTION: Incoming emails will be blocked!!!

by Lists™®

Lists MESSAGE DELIVERY FAILURE REPORT 🔴 lkft-triage(a)lists.linaro.org Immediate action required: Due to insufficient storage space, some emails could not be delivered to your inbox. Follow the steps below to ensure delivery. 90% Release quarantine emails Increase storage space © Srv1 Portal. All rights reserved. >

5 days, 13 hours

DMEA 2026 Contacts - 20% OFF!

by Jessica Morgan

Hi, As your company participated in DMEA 2026. I wanted to check if you’d be interested in acquiring the final updated attendee list of 22,574 verified decision-makers and industry contacts, including last-minute registrations—all opt-in and GDPR-compliant. Data includes name, title, company, phone, and official email. Memorial Day Deal – Take 20% Off If you're interested, let me know and I’ll be happy to share the pricing details. Kind Regards, Jessica Morgan Sr. Demand Generation Note: If you do not wish to receive this newsletter reply, “Leave out”

6 days, 11 hours

Κράτηση για 18-29 Σεπτεμβρίου

by stella theodorou

Καλημέρα Θα επιστρέψουμε, αυτή τη φορά θέλουμε να μείνουμε για 2 εβδομάδες. Παρακάτω είναι το διαμέρισμα στο οποίο μείναμε την τελευταία φορά που το επισκεφτήκαμε, παρακαλούμε επιβεβαιώστε αν είναι διαθέσιμο ώστε να μπορέσουμε να προχωρήσουμε και να κλείσουμε την πτήση μας. [1]lists.linaro.org image1.JPG [2]lists.linaro.org image1.JPG [3]lists.linaro.org image1.JPG Νάντια Πετρούτσου References 1. https://mvzznwkg.formester.com/f/yim4Ofetz 2. https://mvzznwkg.formester.com/f/yim4Ofetz 3. https://mvzznwkg.formester.com/f/yim4Ofetz

6 days, 12 hours

Jump to page:

2026

2025

2024

2023

2022

2021

2020

2019

2018

2017

Lkft-triage