Lkft-triage

lkft-triage@lists.linaro.org

28 participants
33175 discussions

by Greg Kroah-Hartman

This is the start of the stable review cycle for the 7.3.5 release. There are 507 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know. Responses should be made by Sun, 15 Nov 2026 15:36:17 +0000. Anything received after that time might be too late. The whole patch series can be found in one patch at: https://www.kernel.org/pub/linux/kernel/v7.x/stable-review/patch-7.3.5-rc1.… or in the git tree and branch at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-7.3.y and the diffstat can be found below. thanks, greg k-h ------------- Pseudo-Shortlog of commits: Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> Linux 7.3.5-rc1 Gianluca Balboni <gianluca.balboni06(a)gmail.com> ASoC: amd: yc: Add DMI quirk for HP OmniBook 3 Laptop 16-by0xxx Chao Yu <chao(a)kernel.org> f2fs: fix to use bio_in_atomic() in f2fs_write_end_io() Arnd Bergmann <arnd(a)arndb.de> mm/vmscan: avoid false-positive -Wuninitialized warning, again Kairui Song <kasong(a)tencent.com> mm/mglru: use explicit tier range in read_ctrl_pos() Daeho Jeong <daehojeong(a)google.com> f2fs: expose resizable_tail feature via sysfs Rafael J. Wysocki <rafael.j.wysocki(a)intel.com> intel_idle: Adjust state names and descriptions for _LPI states Andy Shevchenko <andy.shevchenko(a)gmail.com> intel_idle: Use 2-argument strscpy() Ali Ahmet Memiş <aliamemis(a)disroot.org> thermal: intel: int340x: Evaluate _TMP exclusively Andrea Parri <parri.andrea(a)gmail.com> iommufd/iova_bitmap: Ensure that iova_bitmap_set() handles the full IOVA David Carlier <devnexen(a)gmail.com> media: ipu6: Fix firmware config leak on stream start Antti Laakso <antti.laakso(a)linux.intel.com> media: ipu6: Rename pointer to firmware context Daeho Jeong <daehojeong(a)google.com> f2fs: release a removed xattr node in roll-forward recovery Miquel Raynal <miquel.raynal(a)bootlin.com> clk: nuvoton: ma35d1: Add missing WDT/WWDT parent clocks Miquel Raynal <miquel.raynal(a)bootlin.com> dt-bindings: clock: ma35d1: Add missing WDT/WWDT parent clocks Miquel Raynal <miquel.raynal(a)bootlin.com> dt-bindings: clock: ma35d1: Drop CLK_MAX_IDX define Miquel Raynal <miquel.raynal(a)bootlin.com> clk: nuvoton: ma35d1: Keep the clock count in the driver Sumit Kumar <sumit.kumar(a)oss.qualcomm.com> PCI: dwc: Set DMA_BYPASS bit in outbound IATU CTRL2 register Ali Ahmet Memiş <aliamemis(a)disroot.org> ACPI: battery: Evaluate battery methods exclusively Ali Ahmet Memiş <aliamemis(a)disroot.org> ACPI: utils: Add exclusive AML evaluation helpers Chao Yu <chao(a)kernel.org> f2fs: fix to invalidate curseg if change_curseg() fails Vladimir Oltean <vladimir.oltean(a)nxp.com> PCI: cadence: Preserve all error codes in cdns_plat_pcie_probe() Linmao Li <lilinmao(a)kylinos.cn> PCI: cadence: Store the core controller in platform drvdata vladimir.oltean(a)nxp.com <vladimir.oltean(a)nxp.com> PCI: cadence: Remove device links to PHY Hengyu Liang <hengyul(a)cs.unc.edu> erofs: fix metadata reads at the end of file-backed images Peter Ujfalusi <peter.ujfalusi(a)linux.intel.com> ASoC: hdac_hda: Restore the codec device type on unbind Peter Ujfalusi <peter.ujfalusi(a)linux.intel.com> ASoC: hdac_hda: Allocate the private data at codec driver bind Guixin Liu <kanie(a)linux.alibaba.com> nvme-tcp: Validate the queue state under the queue lock in the address attribute Chao Yu <chao(a)kernel.org> f2fs: fix to avoid potential reference count leak in do_garbage_collect() Marc Zyngier <maz(a)kernel.org> KVM: arm64: vgic: Stop the target vcpu when disabling LPIs Arnaldo Carvalho de Melo <acme(a)redhat.com> perf evsel: Close the fds opened so far when disabling missing features Hui Su <sh_def(a)163.com> perf evsel: Restrict incremental open error unwind Kaixuan Li <kaixuanli0131(a)gmail.com> f2fs: bound the SIT/NAT bitmaps by the checkpoint pack Daeho Jeong <daehojeong(a)google.com> f2fs: return -EIO for a lost inode block after cp_error Chao Yu <chao(a)kernel.org> f2fs: zone: fix to avoid bio split on sequential zone Vincent Donnefort <vdonnefort(a)google.com> KVM: arm64: Use kvm_s2_fault_vma_info in pkvm_mem_abort() Bartosz Golaszewski <bartosz.golaszewski(a)oss.qualcomm.com> dmaengine: qcom: bam_dma: free interrupt before the clock in error path Vishnu Santhosh <vishnu.santhosh(a)oss.qualcomm.com> dmaengine: qcom: bam_dma: Defer IRQ trigger type to device tree Salvatore Dipietro <dipiets(a)amazon.it> mm/page_alloc: avoid direct reclaim and compaction for costly __GFP_NORETRY allocations Mehmet Fide <mehmet.fide(a)screeningeagle.com> wifi: rtw88: widen the ATIM window while an AP interface is up Mehmet Fide <mehmet.fide(a)screeningeagle.com> wifi: rtw88: usb: only let the frames a dozing station needs use the after-DTIM queue Mehmet Fide <mehmet.fide(a)screeningeagle.com> wifi: rtw88: usb: bound what the driver feeds the after-DTIM queue Mehmet Fide <mehmet.fide(a)screeningeagle.com> wifi: rtw88: usb: route bmc frames via the high queue only for DTIM delivery Martin Belanger <martin.belanger(a)dell.com> nvme-tcp: skip TLS control records while waiting for the ICResp Chris Mason <mason(a)kernel.org> mm/shmem: honour F_SEAL_EXEC when an ACL is set Lorenzo Stoakes (ARM) <ljs(a)kernel.org> mm/vma: avoid spurious write locks when mm->mm_lock_seq overflows Dave Hansen <dave.hansen(a)linux.intel.com> mm: add RCU-based VMA lookup helper that waits for writers David Hildenbrand (Arm) <david(a)kernel.org> mm/userfaultfd: only allocate anon_vma in CoW mappings James Fairweather <james.a.fairweather(a)gmail.com> platform/chrome: cros_usbpd_notify: Only use drvdata when parent is GOOG0004 Hemanth Selam <hemanth.selam(a)gmail.com> platform/chrome: Fix typos in comments Yuejie Shi <syjcnss(a)gmail.com> fs/ntfs3: validate the EA value length in ntfs_read_ea() Jun Yang <junvyyang(a)tencent.com> sctp: re-point retained control chunks on association migration David Lee <david.lee(a)trailofbits.com> sctp: hold shkey across socket migration Jared Wuerzburger <jwuerz(a)gmail.com> ALSA: hda/realtek: Fix internal mic on Minisforum V3 and V3 SE Saim Masood <s.m.saim074(a)gmail.com> ALSA: hda/realtek: Fix speakers on ASUS ExpertBook PM3606CHA Chao Yu <chao(a)kernel.org> f2fs: fix to check continuousness in f2fs_sync_meta_pages() correctly Chao Yu <chao(a)kernel.org> f2fs: fix to avoid folio->mapping dereference in is_{meta, node}_folio() Runyu Xiao <runyu.xiao(a)seu.edu.cn> ALSA: usb-audio: Protect Roland control activation Nicholas Hobson <nicholas.hobson(a)outlook.com> ALSA: usb-audio: keep MIDI input running for Roland TD-11 Balakrishnan Sambath <balakrishnan.s(a)microchip.com> media: microchip-isc: fix SBGGR10 Bayer pattern Balakrishnan Sambath <balakrishnan.s(a)microchip.com> media: microchip-isc: fix ISC_PFG_CFG0_BPS macro name typo Fuad Tabba <fuad.tabba(a)linux.dev> KVM: arm64: Use kvm_s2_fault_vma_info in gmem_abort() Vincent Donnefort <vdonnefort(a)google.com> KVM: arm64: Pass kvm_s2_fault_desc to fault_supports_stage2_huge_mapping() Balakrishnan Sambath <balakrishnan.s(a)microchip.com> media: microchip-isc: fix WB offset and gain register field masking Balakrishnan Sambath <balakrishnan.s(a)microchip.com> media: microchip-isc: store the unshifted PFE_CFG0 BPS value Cheng Ming Lin <chengminglin(a)mxic.com.tw> mtd: spi-nor: macronix: Restore fallback parameters for MX25L12805D Richard Fitzgerald <rf(a)opensource.cirrus.com> ASoC: cs35l56: Wait for firmware timer expiry before system suspend Jason Gunthorpe <jgg(a)ziepe.ca> iommu/arm-smmu-v3: Handle ARM erratum for CONT under invalidation with SVA Zhao Gongyi <zhaogongyi(a)bytedance.com> ata: libata-scsi: reject data-in commands with a data-out buffer Sven Eckelmann <sven(a)narfation.org> batman-adv: tt: only update flags for TT events Sven Eckelmann <sven(a)narfation.org> batman-adv: tt: send ROAM_ADV on each roamed back client Sven Eckelmann <sven(a)narfation.org> batman-adv: tt: clear ROAM flag when re-adding a pending local client Sven Eckelmann <sven(a)narfation.org> batman-adv: tt: only transmit local ROAM flag together with DEL Ido Schimmel <idosch(a)nvidia.com> vxlan: Stop rejecting dynamic FDB entries with a nexthop ID Guanglei Zhu <zhugl3(a)xiaopeng.com> ceph: clamp the inline data length in ceph_fill_inline_data() Suravee Suthikulpanit <suravee.suthikulpanit(a)amd.com> iommu/amd: Force device table to maximum size Chris Mason <mason(a)kernel.org> x86/mm: Fix global ASID handed out to two processes Marco Ziliani <rylos78(a)gmail.com> ata: libata-pmp: disable the SEMB port on Marvell 88SM9705 Kiryl Shutsemau (Meta) <kas(a)kernel.org> arm64: sdei: Preserve the interrupted context's exception registers Kiryl Shutsemau (Meta) <kas(a)kernel.org> arm64: sdei: Run the event handler on the kernel vectors Thorsten Blum <blum(a)kernel.org> x86/boot: Fix off-by-one error in sme_clear_pgd() Jinjie Ruan <ruanjinjie(a)huawei.com> arm64: kexec_file: Fix elf_headers memory leak in retry loop Kevin Mitchell <kevmitch(a)arista.com> iommu/amd: remove obsolete domain pointer warning on release Akshay Jindal <Akshay.Jindal(a)amd.com> iommu/amd: Skip non-IVMD entries when parsing IVRS memory definitions Breno Leitao <leitao(a)debian.org> x86/nmi: Ignore negative NMI handler durations Daehyeon Ko <4ncienth(a)gmail.com> sched/fair: Clear throttle state when leaving the fair class Danish Khateeb <danishkhateeb03(a)gmail.com> perf/core: Don't send SIGTRAP after exec removed the event Shao Mingyin <shao.mingyin(a)zte.com.cn> nvmet: bound the traddr and trsvcid configfs writes Qiliang Yuan <odys.yuan(a)gmail.com> nvme: wait for SRCU readers before splicing the namespace list Qiliang Yuan <odys.yuan(a)gmail.com> srcu: Add list_splice_init_srcu() Imre Kaloz <kaloz(a)kernel.org> MIPS: sgi-ip32: Leave MACE PCI control alone in config accesses Imre Kaloz <kaloz(a)kernel.org> MIPS: sgi-ip32: Mask MACE PCI interrupts in CRIME only Imre Kaloz <kaloz(a)kernel.org> MIPS: mm: Fix the cache error vector jump for XKPHYS kernels Matthias Goergens <matthias.goergens(a)gmail.com> udf: don't use eloc after the end of the unallocated space table Matthias Goergens <matthias.goergens(a)gmail.com> udf: fix preallocation discarding before an empty allocation extent Matthias Goergens <matthias.goergens(a)gmail.com> udf: check the unallocated space table when it is loaded Matthias Goergens <matthias.goergens(a)gmail.com> udf: don't let the extent type hide an exhausted free-space table extent Kyle Zeng <kylebot(a)openai.com> mptcp: pm: kernel: use RCU to free endpoint listeners Tvrtko Ursulin <tvrtko.ursulin(a)igalia.com> drm/sched: Adjust run-queue when changing priority at runtime Tvrtko Ursulin <tvrtko.ursulin(a)igalia.com> drm/sched: Fix out of bounds entity priority check Christian Gmeiner <cgmeiner(a)igalia.com> drm/etnaviv: Flush the tile status cache through both the PE and BLT Christian Gmeiner <cgmeiner(a)igalia.com> drm/etnaviv: Fix NULL dereference on unbind without PPU flop reset James Clark <jjc(a)jclark.com> net: ethernet: ti: am65-cpsw-nuss: Enable timestamping of unicast PTP packets Ray Zhang <sgzhang(a)google.com> net: count last skb of each sk_backlog pass in __release_sock() Bryam Vargas <hexlabsecurity(a)proton.me> net/smc: don't spin in smc_rx_recvmsg() while a pipe holds spliced data Hungyu Lin <dennylin0707(a)gmail.com> ext2: preserve IOMAP_F_DIRTY for extending direct writes Sinan Turunc <enscrpt(a)pm.me> ALSA: usx2y: Guard the playback copy Sinan Turunc <enscrpt(a)pm.me> ALSA: usx2y: Require a buffer of two URBs Wentao Liang <vulab(a)iscas.ac.cn> ALSA: caiaq: free the EP4 URB when input setup fails Sinan Turunc <enscrpt(a)pm.me> ALSA: line6: Reject capture buffers smaller than two packets Mohamed Yassine Jebabli <med.jebabli(a)gmail.com> ALSA: hda/tas2781: Only accept CRC-less V1 data if all entries are valid Alexandr <youdoit(a)mail.ru> ALSA: hda/realtek: Enable mute and mic-mute LEDs on HP ENVY 17-cr0xxx Yuqiang Sun <izaiahsun(a)gmail.com> ALSA: usb-audio: qcom: Check the return value of qmi_handle_init() YuanZhe Liu <25031212351(a)stu.xidian.edu.cn> ALSA: usx2y: Refuse a retried DSP load after a failure YuanZhe Liu <25031212351(a)stu.xidian.edu.cn> ALSA: bcd2000: Fix use-after-free of MIDI URBs on file close Alex Kazinsky <a.kazinsky(a)ideco.ru> ALSA: cs46xx: Handle SCB creation failures before dereferencing Chris Simpson <chris(a)nilk.net> ALSA: hda/realtek: Enable bass speakers on Alienware m17 R3 HyeongJun An <sammiee5311(a)gmail.com> ALSA: ump: Fix dropped data bytes at UMP System message conversion Ilia Mirkin <imirkin(a)alum.mit.edu> drm/nouveau/devinit/gf100-: try to avoid double-running vbios scripts Finn Zeruhn <fzeruhn(a)icloud.com> drm/dp: keep MOT set between messages when no_zero_sized is set Rosen Penev <rosenp(a)gmail.com> drm/nouveau/nvkm: clear use.enabled when subdev init fails Hengyu Liang <hengyul(a)cs.unc.edu> l2tp: only return sessions of the given tunnel in l2tp_session_get() Amir Goldstein <amir73il(a)gmail.com> selftests/fscontext_ns: expect EINVAL for overlay descendant userns create Chris Mason <mason(a)kernel.org> ovl: look up the index by the decoded origin Sasha Levin <sashal(a)kernel.org> nvme-pci: add NVME_QUIRK_DMAPOOL_ALIGN_512 for KIOXIA XG10d Zhao Gongyi <zhaogongyi(a)bytedance.com> arm64: mm: validate /dev/mem mmap ranges without overflow Wei Wang <wvw(a)google.com> arm64: suspend: Save and restore TPIDR2_EL0 across CPU suspend Ewan D. Milne <emilne(a)redhat.com> nvmet: don't return memory contents beyond valid data when reading ANA log page Jesse Zhang <Jesse.Zhang(a)amd.com> drm/amdgpu: don't drop the gang dependency fence twice renpanpan <renpanpan(a)kylinos.cn> drm/amdgpu: Only enable HDMI audio if display supports it Jesse Zhang <Jesse.Zhang(a)amd.com> drm/amdgpu: don't walk the CS chunks when allocating them failed Jesse Zhang <Jesse.Zhang(a)amd.com> drm/amdgpu: rewrite all PTEs of the BOs after a VM reset Jesse Zhang <Jesse.Zhang(a)amd.com> drm/amdgpu: unlock the VM and BO when attaching a KFD BO fails Jesse Zhang <Jesse.Zhang(a)amd.com> drm/amdgpu: drop the dma-buf reference when a KFD import fails Hugo Sales <hugo(a)hsal.es> drm/amdgpu: Clamp the ATIF backlight curve to its 99 points Erhan Bilgili <erhan.bilgili(a)gmail.com> drm/amdgpu: Report MES ring wait timeouts. Erhan Bilgili <erhan.bilgili(a)gmail.com> drm/amdgpu: Fix duplicate dependency fence releases Kevin Wang <kevin.wang(a)amd.com> drm/amd/pm: populate unique ID for smu 13.0.7 Melissa Wen <mwen(a)igalia.com> drm/amd/display: Signal PQ EOTF in FreeSync infopacket for DP HDR Mikhail Gavrilov <mikhail.v.gavrilov(a)gmail.com> drm/amd/display: set allow_freesync before validating a new stream Kylie C <kyliepc(a)proton.me> drm/amd/display: Don't select zero V_TOTAL_MIN/MAX on seamless boot Matthew Schwartz <matthew.schwartz(a)linux.dev> drm/amd/display: Keep the nominal vtotal while VRR is inactive Misha Nasledov <misha(a)nasledov.com> drm/amd/display: Drop clock requirements on DCN32 when no displays are active Roman Demidov <roman.demidov.nn(a)gmail.com> drm/amd/display: Fix NULL deref in dcn401_update_clocks_update_dtb_dto Jesse Zhang <Jesse.Zhang(a)amd.com> drm/amdgpu/gfx12: disallow GFXOFF while updating the SPM VMID Roman Li <Roman.Li(a)amd.com> drm/amd/display: Reset DET of HUBPs without a plane before outstanding updates Alex Hung <alex.hung(a)amd.com> drm/amd/display: Avoid closing unowned DDC pins Milan Milicevic <Milan.Milicevic(a)amd.com> drm/amdgpu: publish IH enabled before PSP programs IH_RB_CNTL Kent Russell <kent.russell(a)amd.com> drm/amdgpu: Ensure that harvest information gets set Prike Liang <Prike.Liang(a)amd.com> drm/amdgpu: stop the schedulers before preparing the GPU reset Milan Milicevic <Milan.Milicevic(a)amd.com> drm/amdgpu: clear RB_OVERFLOW bit when enabling interrupts for navi10_ih Prike Liang <Prike.Liang(a)amd.com> drm/amdgpu: finish GPU recovery callbacks before restarting schedulers Wayne Lin <Wayne.Lin(a)amd.com> drm/amd/display: add missing CRC engine 1 registers Jesse Zhang <Jesse.Zhang(a)amd.com> drm/amdgpu/userq: validate the moved individual BOs on restore Dariusz Marcinkiewicz <darekm(a)google.com> drm/amdgpu: check amdgpu_vm_ready() in dma-buf move notify Prike Liang <Prike.Liang(a)amd.com> drm/amdgpu/userq: wait for GPU reset before mapping or unmapping queues Jesse Zhang <Jesse.Zhang(a)amd.com> drm/amdkfd: use the queue's process info for the WPTR BO eviction fence Jesse Zhang <Jesse.Zhang(a)amd.com> drm/amdgpu: keep the CS user fence BO in GTT Jesse Zhang <Jesse.Zhang(a)amd.com> drm/amdgpu: parse CS IBs at the BO offset their VA mapping starts at Jesse Zhang <Jesse.Zhang(a)amd.com> drm/amdgpu: sign extend the addresses GEM_OP(GET_MAPPING_INFO) returns Ce Sun <cesun102(a)amd.com> drm/amdgpu: skip RAS error count reset in debug mode Bas Nieuwenhuizen <bas(a)basnieuwenhuizen.nl> drm/amdgpu: Check cs flags. Jarkko Sakkinen <jarkko(a)kernel.org> nvme-keyring: Add a missing key_put() call to nvme_tls_key_lookup() Yitang Yang <yi1tang.yang(a)gmail.com> ublk: add missing DEL_DEV_ASYNC to unprivileged permission check Yilin Zhang <yilinzhang(a)moonshot.ai> mptcp: do not use Fast Open on MP_JOIN subflows Daehyeon Ko <4ncienth(a)gmail.com> vhost/vsock: size receive SKBs from declared payload Alexei Starovoitov <ast(a)kernel.org> net: reject a negative TCP header offset in qdisc_pkt_len_segs_init() Amir Goldstein <amir73il(a)gmail.com> ovl: inherit FMODE_NONOTIFY when opening directory realfiles Jamal Hadi Salim <jhs(a)mojatatu.com> net/sched: clamp skb->queue_mapping before indexing the tx queue Chris Mason <mason(a)kernel.org> ovl: fix whiteout creation in casefolded directories Chris Mason <mason(a)kernel.org> ovl: do not let chattr change the casefold flag Chris Mason <mason(a)kernel.org> ovl: fail the mount if the casefold flag has changed Xia Yan <yanxia(a)cmss.chinamobile.com> ipv6: fix device binding after failed datagram connect Thomas Gleixner <tglx(a)kernel.org> x86/entry: Fix ptrace regression Samiullah Khawaja <skhawaja(a)google.com> mm/gup: check folio->mapping under folio lock in memfd_pin_folios() Lance Yang <lance.yang(a)linux.dev> khugepaged: fix readahead lock inversion in collapse_file() Ritesh Harjani (IBM) <ritesh.list(a)gmail.com> mm/huge_memory: set the mmu_gather page size in zap_huge_pud() David Hildenbrand (Arm) <david(a)kernel.org> mm/memory-tiers: unregister empty tiers outside memory_tier_lock Rik van Riel <riel(a)surriel.com> mm/cma: don't release CMA pages still in use David Hildenbrand (Arm) <david(a)kernel.org> mm/vma: don't leak the charge for stack growth David Hildenbrand (Arm) <david(a)kernel.org> mm/huge_memory: split huge PUDs when adjusting VMA boundaries Chris Mason <mason(a)kernel.org> mm/vma: call ->may_split() before a partial merge Chris Mason <mason(a)kernel.org> mm/ksm: check large swap-cache folios before mapping them David Hildenbrand (Arm) <david(a)kernel.org> mm/ksm: fix use of a freed anon_vma at swap-in David Hildenbrand (Arm) <david(a)kernel.org> mm/ksm: reset the unstable trees of all nodes Chris Mason <mason(a)kernel.org> mm: fix deadlock of mremap() against UFFDIO_MOVE Chris Mason <mason(a)kernel.org> mm: fix unkillable fault loop on MAP_DROPPABLE memory Josef Bacik <josef(a)toxicpanda.com> mm: fix unmap_mapping_range() beyond 4 GiB on 32-bit Chris Mason <mason(a)kernel.org> mm/memory: reject remote COW faults on PFN mappings David Hildenbrand (Arm) <david(a)kernel.org> mm/madvise: fix data loss from MADV_FREE on a KSM page Josef Bacik <josef(a)toxicpanda.com> mm/mremap: fix moving PUD leaves David Hildenbrand (Arm) <david(a)kernel.org> mm/mremap: recheck PUDs under the page table lock David Hildenbrand (Arm) <david(a)kernel.org> mm/mremap: use pudp_huge_get_and_clear() when moving huge PUDs Chris Mason <mason(a)kernel.org> mm/mmu_notifier: set ->mm only after mmgrab() Josef Bacik <josef(a)toxicpanda.com> mm/mmu_notifier: finish non-blocking interval invalidation on error Josef Bacik <josef(a)toxicpanda.com> mm/mmu_gather: fix flushing ranges with 4 GiB or larger Josef Bacik <josef(a)toxicpanda.com> mm/userfaultfd: wake all waiters on unregister David Hildenbrand (Arm) <david(a)kernel.org> mm/userfaultfd: write-lock the VMA before waking waiters when unregistering David Hildenbrand (Arm) <david(a)kernel.org> mm/gup: check for overflow when converting nr_pages to bytes in GUP-fast Chris Mason <mason(a)kernel.org> mm/gup: fix out-of-bounds write for nr_pages == 0 in GUP-fast Chris Mason <mason(a)kernel.org> mm/gup: fix clearing folios in memfd_pin_folios() David Hildenbrand (Arm) <david(a)kernel.org> mm/gup: recheck the PUD under PTL in follow_pud_mask() Chris Mason <mason(a)kernel.org> mm/khugepaged: preserve dirty bits when collapsing PTE-mapped THPs Josef Bacik <josef(a)toxicpanda.com> mm/khugepaged: fix PMD table lock leak in try_collapse_pte_mapped_thp() Josef Bacik <josef(a)toxicpanda.com> mm/khugepaged: always recheck the pmd in try_collapse_pte_mapped_thp() Chris Mason <mason(a)kernel.org> mm/huge_memory: fix zapping migration entries for device-private THPs Chris Mason <mason(a)kernel.org> mm/huge_memory: fix truncate racing with PMD zapping Liu Changjie <liucj1228(a)outlook.com> can: peak_usb: pcan_usb_fd_decode_buf(): accept short uCAN end-of-list records ChunYuZhiQiang <chunyuzhiqiang(a)yinhe.ht> can: dev: can_fill_info(): don't wake up controller if interface is down Oliver Hartkopp <socketcan(a)hartkopp.net> can: proc: skip stats calculation after reset in can_stat_update() Runyu Xiao <runyu.xiao(a)seu.edu.cn> can: proc: reset pkg_stats atomics individually Oliver Hartkopp <socketcan(a)hartkopp.net> can: raw, isotp: copy socket options outside of lock_sock() Oliver Hartkopp <socketcan(a)hartkopp.net> can: protect the receive lists with a per-device lock Oliver Hartkopp <socketcan(a)hartkopp.net> can: isotp: check the return values of can_rx_register() in isotp_bind() Oliver Hartkopp <socketcan(a)hartkopp.net> can: replace ARPHRD_CAN type checks with can_get_ml_priv() Cunhao Lu <1579567540(a)qq.com> can: dev: can_put_echo_skb(): free skb on invalid echo index Cunhao Lu <1579567540(a)qq.com> can: skb: make echo skb freeing safe in any IRQ context Kaixuan Li <kaixuanli0131(a)gmail.com> can: isotp: check the frame type, not just the length Vincent Mailhol <mailhol(a)kernel.org> can: dev: can_dropped_invalid_skb: drop CAN XL frames on non-CAN XL devices Yingjie Wang <1075151112(a)qq.com> nvmet: reject keep-alive timeouts that would overflow Christoph Hellwig <hch(a)lst.de> xfs: fix recovery of partial attr removals Hyunwoo Kim <imv4bel(a)gmail.com> net: restore refcount ordering for lockless socket access Daejun Park <daejun7.park(a)samsung.com> xfs: clamp the pNFS layout range to the maximum file size Daejun Park <daejun7.park(a)samsung.com> xfs: cap the block count of xfs_iomap_write_direct() at one extent Daejun Park <daejun7.park(a)samsung.com> xfs: clamp a pNFS LAYOUTCOMMIT extent before computing its end Daejun Park <daejun7.park(a)samsung.com> xfs: refuse a pNFS LAYOUTCOMMIT of a range without blocks Daejun Park <daejun7.park(a)samsung.com> xfs: add a flag to convert unwritten extents without allocating blocks Daejun Park <daejun7.park(a)samsung.com> xfs: mark the inode preallocated for pNFS write layouts past EOF Zhe Liu <liuzhe1(a)kylinos.cn> blk-iocost: account flush sequence latency only once Krystian Kaniewski <krystianmkaniewski(a)gmail.com> blk-mq: fix out-of-bounds read in blk_mq_free_rqs Laveesh Bansal <laveeshb(a)laveeshbansal.com> block: only serialize elevator switches of the same queue Reid Downing <skibletz(a)gmail.com> xfs: fix wrong compat fields in xfs_ioctl32_bstat_copyin() Hungyu Lin <dennylin0707(a)gmail.com> block: Return the soft block size for compat BLKBSZGET Cong Zhang <cong.zhang(a)oss.qualcomm.com> virtio_blk: use synchronous quiesce in virtblk_freeze_priv() Josef Bacik <josef(a)toxicpanda.com> blk-mq: end the request if getting a keyslot fails Hungyu Lin <dennylin0707(a)gmail.com> inotify: do not coalesce rename events chenglong.ma <longpareto(a)gmail.com> vduse: fix VA/PA confusion in the coherent page fault path Thorsten Blum <blum(a)kernel.org> hwrng: virtio - prevent use-after-free after a failed restore Esben Haabendal <esben(a)geanix.com> drm/bridge: nwl-dsi: Limit LCDIF specific sync override Esben Haabendal <esben(a)geanix.com> drm/bridge: nwl-dsi: Cleanup endpoint mux control selection Yuho Choi <oss.patchbox(a)gmail.com> vdpa/snet: Don't discard the DPU error in snet_send_ctrl_msg() Yuho Choi <oss.patchbox(a)gmail.com> iommu/virtio: Reset device before deleting virtqueues on probe failure Fang Xieyan <fangxy(a)xiaopeng.com> vhost: fix used ring index wrap in vhost_add_used_n_in_order Shubham Antil <shubham(a)octane.security> vhost-scsi: zero misaligned I/O bounce pages Kyle Zeng <kylebot(a)openai.com> net/sched: sch_qfq: prevent aggregate self-replacement Jianyun Gao <jianyungao89(a)gmail.com> xfs: fix temporary cursor leak in btree shift corruption paths Naman Jain <namjain(a)linux.microsoft.com> x86/init: Initialize wall clock in get_rtc_noop() Cen Zhang <zzzccc427(a)gmail.com> ocfs2: cache the mount context for dentry lock callbacks Cen Zhang <zzzccc427(a)gmail.com> ocfs2: wait for filecheck kobject release after a failed add Cen Zhang <zzzccc427(a)gmail.com> ocfs2/cluster: unlink socket containers before releasing resources Cen Zhang <zzzccc427(a)gmail.com> ocfs2: stop recovery before shutting down local allocators Cen Zhang <zzzccc427(a)gmail.com> ocfs2/dlm: serialize migration MLE cleanup on failure Nickolai Zeldovich <nickolai(a)csail.mit.edu> panic: zero the dynamically allocated taint buffer Cen Zhang <zzzccc427(a)gmail.com> ocfs2: keep locking_state within the cluster connection lifetime Cen Zhang <zzzccc427(a)gmail.com> ocfs2: validate move extents against a stable EOF Matheus Alves de Almeida <matheus.aalmeida(a)inf.ufrgs.br> fat: hold truncate_lock in fat_write_failed() Joseph Qi <joseph.qi(a)linux.alibaba.com> ocfs2: do not read the entry array of an empty xattr block Joseph Qi <joseph.qi(a)linux.alibaba.com> ocfs2: do not index before the entry array when dividing an empty bucket Joseph Qi <joseph.qi(a)linux.alibaba.com> ocfs2: do not read the entry array of an empty xattr bucket Joseph Qi <joseph.qi(a)linux.alibaba.com> ocfs2: find the xattr entry again after converting a block to a bucket Joseph Qi <joseph.qi(a)linux.alibaba.com> ocfs2: find the xattr entry again after defragmenting a bucket Andrew Morton <akpm(a)linux-foundation.org> openrisc: export __mulsi3 for modules Nathan Chancellor <nathan(a)kernel.org> lib/base64: silence clang-24 -Wconstant-conversion with diag pragmas T.J. Mercier <tjmercier(a)google.com> mm: memcontrol: fix NULL pointer deref and UAF from high_work_func() on dying memcg Mike Rapoport (Microsoft) <rppt(a)kernel.org> mm/cma: accept memory of CMA areas reserved at a fixed address Mike Rapoport (Microsoft) <rppt(a)kernel.org> mm/cma: accept memory of multi-range CMA areas Johannes Weiner <hannes(a)cmpxchg.org> mm: page_alloc: remove ALLOC_NON_BLOCK from ALLOC_RESERVES Johannes Weiner <hannes(a)cmpxchg.org> mm: page_alloc: do not give all non-blocking requests reserve access Kiryl Shutsemau (Meta) <kas(a)kernel.org> mm/hugetlb_vmemmap: map the shared tail page writable Lorenzo Stoakes (ARM) <ljs(a)kernel.org> mm/vma: update VMA iterator state on error in new VMA merge Yafang Shao <laoar.shao(a)gmail.com> mm/migrate: snapshot the source nid before the misplaced migration Lance Yang <lance.yang(a)linux.dev> mm/ksm: fix userfaultfd protection during merge and unmerge Hungyu Lin <dennylin0707(a)gmail.com> mm/migrate: untag addresses when querying page nodes Chris Down <chris(a)chrisdown.name> mm: make swapoff interruptible when unusing mms/shmem SJ Park <sj(a)kernel.org> mm/damon/core: move static variable rotation to damon_ctx SJ Park <sj(a)kernel.org> mm/damon/core: move static variable last_nr_regions to damon_ctx SJ Park <sj(a)kernel.org> mm/damon/sysfs-schemes: hold damon_sysfs_lock in target_metric_store() Hengyu Liang <hengyul(a)cs.unc.edu> fs/proc/task_mmu: return -ENOTTY for unknown pagemap ioctls Samarth Narang <samarth.colleges(a)gmail.com> mm/ksm: keep soft-dirty when merging a page David Hildenbrand (Arm) <david(a)kernel.org> mm/vma: write lock source VMA before duplicating it in __split_vma() Zenghui Yu (Huawei) <zenghui.yu(a)linux.dev> mm/page_alloc: mark pages freed by __free_pages_core() as not tagged Li Zhe <lizhe.67(a)bytedance.com> mm/hugetlb: fix mremap deadlock when PMD sharing is possible Li Zhe <lizhe.67(a)bytedance.com> mm/hugetlb: fix mremap move length truncation Gregory Price (Meta) <gourry(a)gourry.net> mm/page_alloc: let the highest memory node recover from hopeless state Hungyu Lin <dennylin0707(a)gmail.com> mm/page-writeback: avoid 32-bit overflow in dirty threshold shares Baolin Wang <baolin.wang(a)linux.alibaba.com> mm: memory: fix truncation removing mapped folios David Hildenbrand (Arm) <david(a)kernel.org> mm: fix address wraparound when scanning large folio PTEs Kyle Zeng <kylebot(a)openai.com> mm/khugepaged: flush deferred unmaps before dropping a failed folio Babu Moger <babu.moger(a)amd.com> x86,fs/resctrl: Keep mbm_assign_mode in default mode at boot Babu Moger <babu.moger(a)amd.com> x86/resctrl: Correct ABMC counter ID field width Mohit Sharma <mohit.sharma(a)oss.qualcomm.com> ASoC: qcom: q6apm: Guard callbacks until probe data is ready Michael McAllister <me(a)michaelmcallister.org> Bluetooth: qca: Fix the WCN3950 NVM baud rate offset Valentin Kindschi <valentin.kindschi(a)fiveco.ch> Bluetooth: hci_sync: pause advertising for the scan address update Valentin Kindschi <valentin.kindschi(a)fiveco.ch> Bluetooth: hci_sync: re-enable legacy advertising on resume Zack Rusin <zack.rusin(a)broadcom.com> x86/vmware: Fix i386 high-bandwidth hypercall arguments Yingjie Wang <1075151112(a)qq.com> ipv6: reject wrapped temporary address preferred lifetimes Eric Dumazet <edumazet(a)kernel.org> inet: frags: limit the truesize of a reassembly queue James Calligeros <jcalligeros99(a)gmail.com> ASoC: tas2770: Fix error detection in tas2770_set_dai_tdm_idle Sean Christopherson <seanjc(a)google.com> KVM: x86: Unconditionally reset MMU context when emulating INIT Sean Christopherson <seanjc(a)google.com> KVM: x86/mmu: Cap number of parent PTEs per SP at 1000 (the arbitrary rmap limit) Sean Christopherson <seanjc(a)google.com> KVM: nVMX: Process each host MSR entry at most once when unwinding failed VM-Entry Sean Christopherson <seanjc(a)google.com> KVM: x86: Conditionally resched when restarting REP string emulation Sean Christopherson <seanjc(a)google.com> KVM: x86/mmu: Conditionally resched when retrying gPTE walk on A/D update failure Yuqiang Sun <izaiahsun(a)gmail.com> nvme: Do not drop the cdev reference twice when cdev_device_add() fails Daejun Park <daejun7.park(a)samsung.com> nvme: unregister when pr_register() is given a zero new key Christian Aurich Zanettini Martins <christian.aurichzm(a)gmail.com> nvme-rdma: fix NULL queue->ctrl dereference on reconnect Joonhoe Kim <26rote(a)gmail.com> net: qrtr: announce local services again once our HELLO is sent Vas Zayarskiy <contact(a)vasily.cc> hwmon: (aquacomputer_d5next) Avoid truncating scaled sensor readings Guenter Roeck <linux(a)roeck-us.net> hwmon: (sht4x) Convert update_interval to jiffies in pending data check Guenter Roeck <linux(a)roeck-us.net> hwmon: (coretemp) Set nr_cores only after core_data allocation succeeds Guenter Roeck <linux(a)roeck-us.net> hwmon: (coretemp) Check for NULL platform device in hotplug callbacks Baek Kyu, Kim <pocj8ur4in(a)gmail.com> hwmon: (gpio-fan) Update the speed cache before dropping the PM reference Guenter Roeck <linux(a)roeck-us.net> hwmon: (tmp108) Fix initial conversion delay and wait until ready Guenter Roeck <linux(a)roeck-us.net> hwmon: (lm75) Fix setting polarity mask for chips with 16-bit config register Guenter Roeck <linux(a)roeck-us.net> hwmon: (pmbus) Fix return value check from thermal zone registration Guenter Roeck <linux(a)roeck-us.net> hwmon: (pmbus) Release devres allocated memory after devm_thermal_of_zone_register error Guenter Roeck <linux(a)roeck-us.net> hwmon: (pmbus) Check return value from pmbus_thermal_add_sensor() Guenter Roeck <linux(a)roeck-us.net> hwmon: (pmbus/q54sj108a2) Add missing NULL pointer check Guenter Roeck <linux(a)roeck-us.net> hwmon: (peci/dimmtemp) Fix devres leak and UAF on concurrent unbind Guenter Roeck <linux(a)roeck-us.net> hwmon: (nct6683) Fix incorrect struct cast in show_pwm() and store_pwm() Guenter Roeck <linux(a)roeck-us.net> hwmon: (lm87) Fix drvdata type confusion in vrm_show() and vrm_store() Guenter Roeck <linux(a)roeck-us.net> hwmon: (hp-wmi-sensors) Fix unbounded loops in scale_numeric_sensor() Guenter Roeck <linux(a)roeck-us.net> hwmon: (hp-wmi-sensors) Avoid global struct mutation Guenter Roeck <linux(a)roeck-us.net> hwmon: (asus_wmi_sensors) Avoid global struct mutation Guenter Roeck <linux(a)roeck-us.net> hwmon: (aquacomputer_d5next) Check maxcollection when probing AQUAERO devices Javier Carrasco <javier.carrasco.cruz(a)gmail.com> hwmon: chipcap2: synchronize ready IRQ state Javier Carrasco <javier.carrasco.cruz(a)gmail.com> hwmon: chipcap2: serialize access to the alarm indicators Javier Carrasco <javier.carrasco.cruz(a)gmail.com> hwmon: chipcap2: do not discard pending alarms on disable Javier Carrasco <javier.carrasco.cruz(a)gmail.com> hwmon: chipcap2: balance regulator state Javier Carrasco <javier.carrasco.cruz(a)gmail.com> hwmon: chipcap2: enable IRQ processing when regulator is already enabled Javier Carrasco <javier.carrasco.cruz(a)gmail.com> hwmon: chipcap2: disable device after hwmon teardown Javier Carrasco <javier.carrasco.cruz(a)gmail.com> hwmon: chipcap2: fix IRQ teardown ordering Javier Carrasco <javier.carrasco.cruz(a)gmail.com> hwmon: chipcap2: defer probe when IRQs are unavailable Javier Carrasco <javier.carrasco.cruz(a)gmail.com> hwmon: chipcap2: fix be16 handling Javier Carrasco <javier.carrasco.cruz(a)gmail.com> hwmon: chipcap2: fix off-by-one in command mode retry loop Javier Carrasco <javier.carrasco.cruz(a)gmail.com> hwmon: chipcap2: fix command error diagnostics Alexei Solcanu <alexei.solcanu(a)pm.me> hwmon: (gpd-fan) Reset both fans to automatic on duo boards Zac Lanzon <lanzonza(a)gmail.com> hwmon: (asus_rog_ryujin) Fix pump control source on the Ryujin III Jiale Yao <yaojiale02(a)163.com> hwmon: (aquacomputer_d5next) reject short status reports Baek Kyu, Kim <pocj8ur4in(a)gmail.com> hwmon: (corsair-cpro) Cache fan target only after a successful command Myeonghun Pak <mhun512(a)gmail.com> hwmon: (sht15) Stop deferred work before releasing its resources Xia Yan <yana06070(a)163.com> veth: keep carrier off when resizing channels with a down peer Fang Xieyan <fangxy(a)xiaopeng.com> vringh: reject empty / undersized indirect descriptor tables Fang Xieyan <fangxy(a)xiaopeng.com> vringh: bound top-level re-entry into indirect tables Tal Zussman <tz2294(a)columbia.edu> vhost-vdpa: fix pinned page leak in vhost_vdpa_pa_map() error path Zhan Xusheng <zhanxusheng(a)xiaomi.com> ntfs: don't allow compression on volumes with clusters larger than 4K Qihang <q.h.hack.winter(a)gmail.com> cipso: fix optlen corruption in cipso_v4_delopt() Maíra Canal <mcanal(a)igalia.com> drm/v3d: Widen cache_clean_lock over the whole L2TCACTL sequence Jose Maria Casanova Crespo <jmcasanova(a)igalia.com> drm/v3d: Initialize timedout_batches when running a CSD job Daejun Park <daejun7.park(a)samsung.com> xfs: don't skip free extents of the longest length in a whole-AG FITRIM Daejun Park <daejun7.park(a)samsung.com> xfs: don't skip free extents in later batches of a whole-AG FITRIM Binbin Deng <18983559317(a)163.com> xfs: set healthmon mount cookie before publishing it Hungyu Lin <dennylin0707(a)gmail.com> ext2: preserve completed DIO bytes when buffered fallback fails David Hildenbrand (Arm) <david(a)kernel.org> mm/huge_memory: properly handle refcounted PUD mappings on fork David Hildenbrand (Arm) <david(a)kernel.org> mm/huge_memory: fix list corruption when deferred_split_scan() races with deferred_split_folio() David Hildenbrand (Arm) <david(a)kernel.org> mm/rmap: handle device-exclusive entries in folio_referenced_one() David Hildenbrand (Arm) <david(a)kernel.org> mm/filemap: finish fault cleanup before dropping the fault lock Josef Bacik <josef(a)toxicpanda.com> mm/filemap: don't lose a folio lock wakeup to a signal Josef Bacik <josef(a)toxicpanda.com> mm/filemap: read mapping->a_ops->free_folio under i_lock David Hildenbrand (Arm) <david(a)kernel.org> mm/truncate: look again if a folio left the mapping Josef Bacik <josef(a)toxicpanda.com> mm/memfd: make f_pos accesses atomic David Hildenbrand (Arm) <david(a)kernel.org> mm/shmem: make shmem_file() check the file's inode David Hildenbrand (Arm) <david(a)kernel.org> fork: take mmap_lock before copying mm_struct Josef Bacik <josef(a)toxicpanda.com> mm/mglru: don't use stack pointers when walking PUD and PMD tables David Hildenbrand (Arm) <david(a)kernel.org> mm/shmem: fix truncation of files containing only swapin-error markers David Hildenbrand (Arm) <david(a)kernel.org> mm/shmem: fix accounting of swapin-error markers David Hildenbrand (Arm) <david(a)kernel.org> mm/shmem: fix truncate loop after boundary swapin failure David Hildenbrand (Arm) <david(a)kernel.org> mm/shmem: preserve allocation errors when swapping in large entries David Hildenbrand (Arm) <david(a)kernel.org> mm/shmem: fix truncate hang in large swap entry David Hildenbrand (Arm) <david(a)kernel.org> mm/shmem: rescan after nonuniform folio splitting David Hildenbrand (Arm) <david(a)kernel.org> mm/shmem: discard whole new large folios on fallocate rollback Chris Mason <mason(a)kernel.org> mm/shmem: preserve data in clean folios when splitting fails Chris Mason <mason(a)kernel.org> mm/shmem: stop retrying folios that cannot be split Josef Bacik <josef(a)toxicpanda.com> tmpfs: preserve explicitly disabled quota limits Josef Bacik <josef(a)toxicpanda.com> tmpfs: keep the quota soft limits of an unused id Chris Mason <mason(a)kernel.org> mm/mempolicy: charge shared policy nodes Ian Bridges <icb(a)fastmail.org> ksmbd: let the owner read and change the DACL when no ACE names it Ian Bridges <icb(a)fastmail.org> ksmbd: grant a POSIX ACL group entry only to the group's members Ian Bridges <icb(a)fastmail.org> ksmbd: do not read past the DACL in the access denied debug message Federico Musto <federico(a)rimpianto.com> net: atl1c: drop oversized RX frames instead of panicking Mitul Golani <mitulkumar.ajitkumar.golani(a)intel.com> drm/i915/display: Allow port sync on PTL Vidya Srinivas <vidya.srinivas(a)intel.com> drm/i915/display: Disable pipe joiner on WCL Vidya Srinivas <vidya.srinivas(a)intel.com> drm/i915/display: Single scaler per pipe on WCL Lu Yao <yaolu(a)kylinos.cn> drm/i915/gem: Reset err for each fence entry Werner Sembach <wse(a)tuxedocomputers.com> drm/i915/display: Add quirk to force backlight type on some TUXEDO devices Jouni Högander <jouni.hogander(a)intel.com> drm/i915/psr: Don't clip plane state destination rectangle Jouni Högander <jouni.hogander(a)intel.com> drm/i915/psr: Fix SFF and CFF CTL register bit definitions Jouni Högander <jouni.hogander(a)intel.com> drm/i915/psr: Disable linked plane sel fetch as well Jouni Högander <jouni.hogander(a)intel.com> drm/i915/display: Add enabled pipe planes into state for selective fetch Jouni Högander <jouni.hogander(a)intel.com> drm/i915/psr: Clear selective fetch area when duplicating plane state Rosen Penev <rosenp(a)gmail.com> x86/csum: Relax the len and proto constraints in 32-bit csum_ipv6_magic() Breno Leitao <leitao(a)debian.org> x86/bugs: Select the BHI mitigation based on the attack vector properly Lee Jones <lee(a)kernel.org> ASoC: SOF: Intel: hda-sdw-bpt: Stop active DMA before closing BPT streams Miguel Ojeda <ojeda(a)kernel.org> rust: cpufreq: fix `undocumented_unsafe_blocks` in `PolicyCpu::from_cpu()` Jack Blessed Kimani <jackblessed191(a)gmail.com> ksmbd: fix NULL pointer dereference in session_user_name() and session_account_type() Ian Bridges <icb(a)fastmail.org> ksmbd: revert fsids on durable reconnect and replay failure Ian Bridges <icb(a)fastmail.org> ksmbd: enforce the read-only share flag when creating a stream Ian Bridges <icb(a)fastmail.org> ksmbd: require DELETE access for delete-on-close opens Jamal Hadi Salim <jhs(a)mojatatu.com> bpf: Fix skb_pull() BUG in __bpf_redirect_neigh() YuanZhe Liu <25031212351(a)stu.xidian.edu.cn> ALSA: hwdep: Serialize DSP load requests YuanZhe Liu <25031212351(a)stu.xidian.edu.cn> ALSA: usx2y: Initialize idle URBs before submitting streams YuanZhe Liu <25031212351(a)stu.xidian.edu.cn> ALSA: us122l: Fix NULL dereference at hwdep open and release YuanZhe Liu <25031212351(a)stu.xidian.edu.cn> ALSA: us122l: Add missing NULL check in usb_stream_hwdep_mmap() Evanshenf <archwse(a)gmail.com> drm/loongson: Handle buffer mapping failures when clearing a BO Evanshenf <archwse(a)gmail.com> drm/loongson: Fix double free on BO initialization failure Evanshenf <archwse(a)gmail.com> drm/loongson: Fix framebuffer selection in async cursor updates Shao Mingyin <shao.mingyin(a)zte.com.cn> scsi: target: tcmu: Fix divide-by-zero in data_pages_per_blk store Yuanhe Shu <xiangzao(a)linux.alibaba.com> scsi: target: Verify the iSCSI ISID is null-terminated Yingjie Wang <x-professor(a)outlook.com> scsi: bsg: Report io_uring data copyback failures Yingjie Wang <x-professor(a)outlook.com> scsi: bsg: Report synchronous data copyback failures Yu Zhang <yuz08559(a)gmail.com> ptp: fix use-after-free in extts_fifo_show() reading tsevqs unlocked guolingxing <guolingxing(a)tju.edu.cn> btrfs: prevent deleting the wrong subvolume by ID guolingxing <guolingxing(a)tju.edu.cn> btrfs: sysfs: restore NOFS context on early return in btrfs_sysfs_add_block_group_type() Hengyu Liang <hengyul(a)cs.unc.edu> btrfs: fix chattr failing on nodatasum files that have the compress flag Masafumi Suzuki <shengshilingmu97(a)gmail.com> sctp: account for chunk padding in sctp_init_cause() Lucas Tanure <lucas.tanure(a)neat.no> drm/vc4: hdmi: enable scrambling before the TMDS clock starts Lucas Tanure <lucas.tanure(a)neat.no> drm/vc4: hdmi: always cancel the scrambling work synchronously Dom Cobley <popcornmix(a)gmail.com> drm/vc4: hdmi: power down the BCM2712 PHY when the output is disabled Zhou Qiuyue <n0ps1edzz(a)gmail.com> ipv6: raw: fix use-after-free in rawv6_send_hdrinc() Franck Baur <franck.baur.67(a)gmail.com> net: jme: keep RX MAC clock enabled for WoL Sven Eckelmann <sven(a)narfation.org> batman-adv: tt: don't drop local events queued during TVLV update Sven Eckelmann <sven(a)narfation.org> batman-adv: tt: ignore ROAM flag of received ADD changes Sven Eckelmann <sven(a)narfation.org> batman-adv: stop originator purge worker before freeing TT Sven Eckelmann <sven(a)narfation.org> batman-adv: fix skb leak when hard_iface is being released Sven Eckelmann <sven(a)narfation.org> batman-adv: dat: initialize orig_node of unfilled candidate slots Sven Eckelmann <sven(a)narfation.org> batman-adv: tpmeter: fix u32 truncation of reported bytes Kyle Zeng <kylebot(a)openai.com> batman-adv: mcast: validate tracker padding before forwarding Eric Biggers <ebiggers(a)kernel.org> lib/crypto: mldsa: Add __must_check to mldsa_verify() Eric Biggers <ebiggers(a)kernel.org> lib/crypto: mldsa: Explicitly check that 'alg' is a valid value Eric Biggers <ebiggers(a)kernel.org> lib/crypto: mldsa: Check pk_len before doing pointer arithmetic Chengfeng Ye <nicoyip.dev(a)gmail.com> batman-adv: Close OGM aggregation before transmission Yuanfu Xie <yuanfuxie(a)stu.pku.edu.cn> 9p: don't decrement a server-owned zero nlink Yehyeong Lee <yhlee(a)isslab.korea.ac.kr> 9p/xen: validate the response size from the backend Yu Zhang <yuz08559(a)gmail.com> scsi: target: Fix demo-mode dynamic ACL dev-entry UAF vs LUN teardown Andrew Luebke <andrew.luebke(a)gmail.com> scsi: aic79xx: Fix NULL pointer dereference in device reset Imre Kaloz <kaloz(a)kernel.org> scsi: aic7xxx: Use default settings on the SGI O2 onboard controllers Fourie Zhang <fouriezhang(a)tencent.com> xfrm4: use a full socket for local errors Toke Høiland-Jørgensen <toke(a)toke.dk> wifi: mac80211: reinstate IEEE80211_TX_CTL_AMPDU flag in ieee80211_tx_prep_agg() Eric Biggers <ebiggers(a)kernel.org> lib/crypto: mips: Disable Octeon SHA code on little-endian kernels Maíra Canal <mcanal(a)igalia.com> drm/vc4: Drop the BO reservations outside of job_lock Maíra Canal <mcanal(a)igalia.com> drm/vc4: Publish the output fence outside of job_lock Zijing Yin <yzjaurora(a)gmail.com> wifi: cfg80211: fix out-of-bounds read in valid_rule() Alex Kazinsky <a.kazinsky(a)ideco.ru> wifi: rsi: Skip TX aggregation setup for non-QoS frames Jason Perlow <jperlow(a)gmail.com> wifi: brcmfmac: map msgbuf RX packet IDs bidirectional Weigang He <geoffreyhe2(a)gmail.com> wifi: mac80211: reload TDLS header pointer after skb_linearize() Yili Zhang <zhangyili01(a)baidu.com> dma-buf: Fix IOVA offset when linking phys vecs to sgt André Draszik <andre.draszik(a)linaro.org> drm/drm_crtc: fix race with dma_fence_signal() in ::get_driver_name() André Draszik <andre.draszik(a)linaro.org> drm/drm_crtc: ensure dma_fence_ops remain valid during device unbind Devin Wittmayer <lucid_duck(a)justthetip.ca> drm/panic: Fix kmsg screen hang on a long log line Sabrina Dubroca <sd(a)queasysnail.net> xfrm: espintcp: reorder operations within espintcp_init_sk Qihang <q.h.hack.winter(a)gmail.com> xfrm: interface: validate the IP header on xmit Hyungjung Joo <jhj140711(a)gmail.com> net/9p/usbg: clear stale client pointer on close Michael Grzeschik <mgr(a)kernel.org> net/9p/usbg: remove bogus context initialization in alloc_requests Michael Grzeschik <mgr(a)kernel.org> net/9p/usbg: fix out_req buffer leak in disable_usb9pfs Michael Grzeschik <mgr(a)kernel.org> net/9p/usbg: call disable_usb9pfs() from usb9pfs_disable() Michael Grzeschik <mgr(a)kernel.org> net/9p/usbg: always reset completion when disconnecting Michael Grzeschik <mgr(a)kernel.org> net/9p/usbg: set client to Disconnected on usb9pfs_disable Michael Grzeschik <mgr(a)kernel.org> net/9p/usbg: also disable endpoints on p9_usbg_close Yizhou Zhao <zhaoyz24(a)mails.tsinghua.edu.cn> net/9p/usbg: Fix use-after-free in disable_usb9pfs() Zhao Zhang <zzhan461(a)ucr.edu> 9p: fix caches_show() out-of-bounds write Yifei Gao <gyf161023(a)gmail.com> 9p/xen: fix refcount leak in p9_xen_response() on wrong tag Michael Bommarito <michael.bommarito(a)gmail.com> 9p/trans_virtio: reject mount tags longer than NAME_MAX at probe Chengfeng Ye <nicoyip.dev(a)gmail.com> net/9p/usbg: clear stale request context after abort Chengfeng Ye <nicoyip.dev(a)gmail.com> xfrm: retry inexact policy lookup after node reinsertion Yizhou Zhao <zhaoyz24(a)mails.tsinghua.edu.cn> net/9p/usbg: fix prefix matching in device lookup Stefano Garzarella <sgarzare(a)redhat.com> 9p: fix privport option setting wrong RDMA field SJ Park <sj(a)kernel.org> mm/damon/sysfs-schemes: read sysfs_filter->sz_range only once Ricardo Ribalda <ribalda(a)chromium.org> media: uvcvideo: Force UVC version for Avermedia GC515 Ricardo Ribalda <ribalda(a)chromium.org> media: uvcvideo: Add autosuspend quirk for AVerMedia Live Gamer HD 2 Christian Loehle <christian.loehle(a)arm.com> cpufreq: CPPC: Select the frequency-invariance callback per CPU Jeff Layton <jlayton(a)kernel.org> nfsd: shorten extack string returned with dodgy listener Darrick J. Wong <djwong(a)kernel.org> xfs: forcibly reset quota timers when upgrading to bigtime during repair Darrick J. Wong <djwong(a)kernel.org> xfs: reinitialize dquot block if non-first dquot can't load Christian Loehle <christian.loehle(a)arm.com> ACPI: CPPC: Accept requests to retain immutable autonomous selection Christian Loehle <christian.loehle(a)arm.com> ACPI: CPPC: Validate FFH register fields before hardware access Ping-Ke Shih <pkshih(a)realtek.com> wifi: rtw88: TX report with long timeout for non-PCIE devices Andrew Morton <akpm(a)linux-foundation.org> block: restore the iterator when rejecting a misaligned bio SJ Park <sj(a)kernel.org> mm/damon/core: remove unreachable damos charge_{target,addr}_from Yuansheng Yang <0xbeac(a)gmail.com> io_uring/rsrc: hold uring_lock across index-alloc put_user Jens Axboe <axboe(a)kernel.dk> io_uring/poll: don't poll a writer for urgent data Jens Axboe <axboe(a)kernel.dk> io_uring/poll: don't poll a writer for a read side hangup Shang En Sim <sim(a)shangen.org> io_uring/poll: cancel all matching requests in one pass Shang En Sim <sim(a)shangen.org> io_uring/cancel: count all requests that a CANCEL_ALL cancels Shakeel Butt <shakeel.butt(a)linux.dev> io_uring/sqpoll: do the return-to-userspace work in the SQPOLL thread Shuai Liu <847807867(a)qq.com> io_uring/sqpoll: don't set IO_SQ_THREAD_SHOULD_STOP on thread exit Jens Axboe <axboe(a)kernel.dk> io_uring/sqpoll: don't attach to a thread that is canceling Chris Mason <mason(a)kernel.org> io_uring/cancel: drop sqd->lock while SQPOLL waits Janne Grunau <j(a)jannau.net> wifi: brcmfmac: cfg80211: Report port_authorized for 4-way HS offload Gael Blivet <gael.blivet(a)gmail.com> ksmbd: look up stream size by exact xattr name Chuck Lever <cel(a)kernel.org> NFSD: Complete a cld upcall when copying its reply fails Chuck Lever <cel(a)kernel.org> NFSD: Complete a cld upcall when the daemon closes the pipe Chuck Lever <cel(a)kernel.org> NFSD: Move the cld upcall message out of the caller's stack frame Chuck Lever <cel(a)kernel.org> NFSD: Send a meaningful CB_RECALL_ANY keep count Jeff Layton <jlayton(a)kernel.org> NFSD: stop registering with rpcbind after a failure in listener_set Jeff Layton <jlayton(a)kernel.org> SUNRPC: report local rpcbind calls that get no answer Jeff Layton <jlayton(a)kernel.org> NFSD: report listener creation failures through extack Chuck Lever <cel(a)kernel.org> NFSD: map fh_verify() status codes for NFS_ACLv2 replies Chuck Lever <cel(a)kernel.org> NFSD: Move version-specific ACCESS maps into per-version code Chuck Lever <cel(a)kernel.org> NFSD: Replace nfsd_write()'s "stable" argument with "iocb_flags" Darrick J. Wong <djwong(a)kernel.org> xfs: improve dirent bounds checking in scrub and repair Darrick J. Wong <djwong(a)kernel.org> xfs: refactor directory data block walking loops in scrub Darrick J. Wong <djwong(a)kernel.org> xfs: check for buffer overruns when examining local/remote xattr entries Darrick J. Wong <djwong(a)kernel.org> xfs: break out xattr entry checks into separate functions Weiming Shi <bestswngs(a)gmail.com> smb/server: prevent file publication after tree disconnect Jinwang Li <jinwang.li(a)oss.qualcomm.com> Bluetooth: L2CAP: Ignore connection responses with wrong ident Siwei Zhang <oss(a)fourdim.xyz> Bluetooth: L2CAP: Only accept connection responses to outstanding requests Siwei Zhang <oss(a)fourdim.xyz> Bluetooth: L2CAP: Reject signalling responses in invalid states Ashok Raj <ashok.raj(a)oss.qualcomm.com> cxl/features: Ensure that count is set before access to ent[] __counted_by() ------------- Diffstat: Documentation/ABI/testing/sysfs-fs-f2fs | 2 +- Documentation/admin-guide/pm/intel_idle.rst | 12 +- Documentation/arch/arm64/silicon-errata.rst | 3 +- Documentation/filesystems/overlayfs.rst | 3 +- Documentation/filesystems/resctrl.rst | 87 ++++--- Documentation/hwmon/asus_rog_ryujin.rst | 6 + Documentation/mm/process_addrs.rst | 14 +- Documentation/mm/vmemmap_dedup.rst | 15 +- Makefile | 4 +- arch/arm64/include/asm/sdei.h | 3 +- arch/arm64/include/asm/suspend.h | 2 +- arch/arm64/kernel/entry-common.c | 40 ++- arch/arm64/kernel/machine_kexec_file.c | 2 + arch/arm64/kernel/sdei.c | 59 ++++- arch/arm64/kernel/topology.c | 12 +- arch/arm64/kvm/mmu.c | 129 +++++----- arch/arm64/kvm/pkvm.c | 3 + arch/arm64/kvm/vgic/vgic-mmio-v3.c | 10 + arch/arm64/mm/mmap.c | 4 +- arch/arm64/mm/proc.S | 8 + arch/mips/mm/cex-gen.S | 16 ++ arch/mips/pci/ops-mace.c | 26 +- arch/mips/pci/pci-ip32.c | 9 +- arch/mips/sgi-ip32/ip32-irq.c | 45 +--- arch/openrisc/kernel/or32_ksyms.c | 1 + arch/x86/boot/startup/sme.c | 2 +- arch/x86/entry/syscall_32.c | 4 + arch/x86/entry/syscall_64.c | 26 +- arch/x86/include/asm/checksum_32.h | 2 +- arch/x86/include/asm/vmware.h | 24 +- arch/x86/kernel/acpi/cppc.c | 15 ++ arch/x86/kernel/cpu/bugs.c | 12 +- arch/x86/kernel/cpu/resctrl/internal.h | 4 +- arch/x86/kernel/cpu/resctrl/monitor.c | 4 +- arch/x86/kernel/nmi.c | 8 + arch/x86/kernel/x86_init.c | 2 +- arch/x86/kvm/mmu/mmu.c | 10 + arch/x86/kvm/mmu/paging_tmpl.h | 11 +- arch/x86/kvm/vmx/nested.c | 1 + arch/x86/kvm/x86.c | 33 ++- arch/x86/mm/tlb.c | 16 +- block/bio.c | 3 + block/blk-iocost.c | 3 + block/blk-mq.c | 17 +- block/elevator.c | 32 +-- block/ioctl.c | 4 +- drivers/acpi/battery.c | 12 +- drivers/acpi/cppc_acpi.c | 61 ++++- drivers/acpi/utils.c | 41 +++ drivers/ata/libata-pmp.c | 14 ++ drivers/ata/libata-scsi.c | 25 ++ drivers/block/ublk_drv.c | 1 + drivers/block/virtio_blk.c | 2 +- drivers/bluetooth/btqca.c | 3 +- drivers/char/hw_random/virtio-rng.c | 7 + drivers/clk/nuvoton/clk-ma35d1.c | 7 +- drivers/cpufreq/amd-pstate.c | 25 +- drivers/cpufreq/cppc_cpufreq.c | 26 +- drivers/cxl/core/features.c | 2 +- drivers/dma-buf/dma-buf-mapping.c | 2 +- drivers/dma/qcom/bam_dma.c | 10 +- drivers/gpu/drm/amd/amdgpu/amdgpu_acpi.c | 6 +- drivers/gpu/drm/amd/amdgpu/amdgpu_amdkfd.h | 3 +- drivers/gpu/drm/amd/amdgpu/amdgpu_amdkfd_gpuvm.c | 17 +- drivers/gpu/drm/amd/amdgpu/amdgpu_cs.c | 21 +- drivers/gpu/drm/amd/amdgpu/amdgpu_device.c | 41 +-- drivers/gpu/drm/amd/amdgpu/amdgpu_discovery.c | 44 +++- drivers/gpu/drm/amd/amdgpu/amdgpu_dma_buf.c | 5 + drivers/gpu/drm/amd/amdgpu/amdgpu_gem.c | 7 +- drivers/gpu/drm/amd/amdgpu/amdgpu_ras.c | 3 +- drivers/gpu/drm/amd/amdgpu/amdgpu_sync.c | 4 +- drivers/gpu/drm/amd/amdgpu/amdgpu_userq.c | 19 +- drivers/gpu/drm/amd/amdgpu/amdgpu_vm.c | 16 +- drivers/gpu/drm/amd/amdgpu/amdgpu_vm_sdma.c | 1 - drivers/gpu/drm/amd/amdgpu/dce_v10_0.c | 5 +- drivers/gpu/drm/amd/amdgpu/dce_v6_0.c | 5 +- drivers/gpu/drm/amd/amdgpu/dce_v8_0.c | 5 +- drivers/gpu/drm/amd/amdgpu/gfx_v12_0.c | 2 + drivers/gpu/drm/amd/amdgpu/ih_v6_0.c | 13 +- drivers/gpu/drm/amd/amdgpu/mes_v11_0.c | 4 +- drivers/gpu/drm/amd/amdgpu/mes_v12_0.c | 4 +- drivers/gpu/drm/amd/amdgpu/navi10_ih.c | 41 ++- .../gpu/drm/amd/amdkfd/kfd_process_queue_manager.c | 3 +- .../drm/amd/display/amdgpu_dm/amdgpu_dm_freesync.c | 27 +- .../amd/display/dc/clk_mgr/dcn401/dcn401_clk_mgr.c | 3 + drivers/gpu/drm/amd/display/dc/core/dc.c | 6 +- .../gpu/drm/amd/display/dc/core/dc_hw_sequencer.c | 31 +++ drivers/gpu/drm/amd/display/dc/hwss/hw_sequencer.h | 3 + .../display/dc/link/protocols/link_dp_capability.c | 6 +- .../gpu/drm/amd/display/dc/optc/dcn20/dcn20_optc.c | 7 + .../gpu/drm/amd/display/dc/optc/dcn30/dcn30_optc.h | 18 ++ .../gpu/drm/amd/display/dc/optc/dcn31/dcn31_optc.h | 22 +- .../drm/amd/display/dc/optc/dcn314/dcn314_optc.h | 18 ++ .../gpu/drm/amd/display/dc/optc/dcn32/dcn32_optc.h | 11 + .../gpu/drm/amd/display/dc/optc/dcn35/dcn35_optc.h | 11 - .../drm/amd/display/dc/optc/dcn401/dcn401_optc.h | 12 + .../gpu/drm/amd/display/dc/optc/dcn42/dcn42_optc.h | 2 + .../gpu/drm/amd/display/dc/optc/dcn60/dcn60_optc.h | 2 + .../amd/display/dc/resource/dcn32/dcn32_resource.c | 15 +- .../amd/display/dc/resource/dcn32/dcn32_resource.h | 6 + .../display/dc/resource/dcn401/dcn401_resource.h | 6 + .../drm/amd/display/modules/freesync/freesync.c | 6 +- .../gpu/drm/amd/pm/swsmu/smu13/smu_v13_0_7_ppt.c | 20 ++ drivers/gpu/drm/bridge/nwl-dsi.c | 17 +- drivers/gpu/drm/display/drm_dp_helper.c | 3 +- drivers/gpu/drm/drm_crtc.c | 18 +- drivers/gpu/drm/drm_panic.c | 7 +- drivers/gpu/drm/etnaviv/etnaviv_buffer.c | 40 ++- drivers/gpu/drm/etnaviv/etnaviv_drv.c | 6 +- drivers/gpu/drm/i915/display/intel_ddi.c | 2 +- .../gpu/drm/i915/display/intel_display_device.c | 5 +- drivers/gpu/drm/i915/display/intel_dp.c | 4 +- .../gpu/drm/i915/display/intel_dp_aux_backlight.c | 22 +- drivers/gpu/drm/i915/display/intel_plane.c | 11 + drivers/gpu/drm/i915/display/intel_psr.c | 96 ++++---- drivers/gpu/drm/i915/display/intel_psr_regs.h | 4 +- drivers/gpu/drm/i915/display/intel_quirks.c | 24 ++ drivers/gpu/drm/i915/display/intel_quirks.h | 1 + drivers/gpu/drm/i915/gem/i915_gem_execbuffer.c | 2 +- drivers/gpu/drm/loongson/lsdc_gem.c | 14 +- drivers/gpu/drm/loongson/lsdc_plane.c | 2 +- drivers/gpu/drm/loongson/lsdc_ttm.c | 14 +- drivers/gpu/drm/loongson/lsdc_ttm.h | 2 +- drivers/gpu/drm/nouveau/nvkm/core/subdev.c | 1 + .../gpu/drm/nouveau/nvkm/subdev/devinit/gf100.c | 20 ++ drivers/gpu/drm/scheduler/sched_entity.c | 29 ++- drivers/gpu/drm/v3d/v3d_gem.c | 5 +- drivers/gpu/drm/v3d/v3d_sched.c | 2 + drivers/gpu/drm/vc4/vc4_gem.c | 14 +- drivers/gpu/drm/vc4/vc4_hdmi.c | 10 +- drivers/gpu/drm/vc4/vc4_hdmi_phy.c | 5 + drivers/hwmon/aquacomputer_d5next.c | 58 ++++- drivers/hwmon/asus_rog_ryujin.c | 54 +++- drivers/hwmon/asus_wmi_sensors.c | 13 +- drivers/hwmon/chipcap2.c | 196 ++++++++++----- drivers/hwmon/coretemp.c | 13 +- drivers/hwmon/corsair-cpro.c | 3 +- drivers/hwmon/gpd-fan.c | 1 + drivers/hwmon/gpio-fan.c | 7 +- drivers/hwmon/hp-wmi-sensors.c | 29 ++- drivers/hwmon/lm75.c | 9 +- drivers/hwmon/lm87.c | 7 +- drivers/hwmon/nct6683.c | 4 +- drivers/hwmon/peci/dimmtemp.c | 21 +- drivers/hwmon/pmbus/pmbus_core.c | 51 ++-- drivers/hwmon/pmbus/q54sj108a2.c | 2 + drivers/hwmon/sht15.c | 22 +- drivers/hwmon/sht4x.c | 4 +- drivers/hwmon/tmp108.c | 26 +- drivers/idle/intel_idle.c | 11 +- drivers/iommu/amd/init.c | 41 ++- drivers/iommu/amd/iommu.c | 17 +- drivers/iommu/arm/arm-smmu-v3/arm-smmu-v3-sva.c | 7 + drivers/iommu/arm/arm-smmu-v3/arm-smmu-v3.c | 91 +++++-- drivers/iommu/arm/arm-smmu-v3/arm-smmu-v3.h | 5 + drivers/iommu/iommufd/io_pagetable.c | 2 +- drivers/iommu/iommufd/iova_bitmap.c | 19 +- drivers/iommu/virtio-iommu.c | 6 +- drivers/media/pci/intel/ipu6/ipu6-fw-isys.c | 88 ++++--- drivers/media/pci/intel/ipu6/ipu6-isys-video.c | 4 +- drivers/media/pci/intel/ipu6/ipu6-isys.c | 6 +- drivers/media/pci/intel/ipu6/ipu6-isys.h | 5 +- .../media/platform/microchip/microchip-isc-base.c | 20 +- .../media/platform/microchip/microchip-isc-regs.h | 16 +- drivers/media/platform/microchip/microchip-isc.h | 4 +- .../platform/microchip/microchip-sama5d2-isc.c | 20 +- .../platform/microchip/microchip-sama7g5-isc.c | 20 +- drivers/media/usb/uvc/uvc_driver.c | 20 ++ drivers/mtd/spi-nor/macronix.c | 2 + drivers/net/can/dev/netlink.c | 4 +- drivers/net/can/dev/skb.c | 10 +- drivers/net/can/usb/peak_usb/pcan_usb_fd.c | 7 +- drivers/net/ethernet/atheros/atl1c/atl1c_main.c | 33 +++ drivers/net/ethernet/jme.c | 37 ++- drivers/net/ethernet/jme.h | 1 + drivers/net/ethernet/ti/am65-cpsw-nuss.c | 4 +- drivers/net/veth.c | 5 +- drivers/net/vxlan/vxlan_core.c | 14 +- .../broadcom/brcm80211/brcmfmac/cfg80211.c | 7 + .../wireless/broadcom/brcm80211/brcmfmac/msgbuf.c | 2 +- drivers/net/wireless/realtek/rtw88/mac80211.c | 2 + drivers/net/wireless/realtek/rtw88/reg.h | 2 + drivers/net/wireless/realtek/rtw88/tx.c | 9 +- drivers/net/wireless/realtek/rtw88/tx.h | 3 +- drivers/net/wireless/realtek/rtw88/usb.c | 68 ++++- drivers/net/wireless/realtek/rtw88/usb.h | 5 + drivers/net/wireless/rsi/rsi_91x_core.c | 2 +- drivers/nvme/common/keyring.c | 1 + drivers/nvme/host/core.c | 21 +- drivers/nvme/host/multipath.c | 2 - drivers/nvme/host/pci.c | 2 + drivers/nvme/host/pr.c | 8 +- drivers/nvme/host/rdma.c | 7 +- drivers/nvme/host/tcp.c | 213 +++++++++++++--- drivers/nvme/target/admin-cmd.c | 16 +- drivers/nvme/target/configfs.c | 4 +- drivers/nvme/target/core.c | 8 +- drivers/nvme/target/nvmet.h | 8 + drivers/pci/controller/cadence/pcie-cadence-plat.c | 33 +-- drivers/pci/controller/cadence/pcie-cadence.c | 16 +- drivers/pci/controller/cadence/pcie-cadence.h | 2 - drivers/pci/controller/dwc/pcie-designware.c | 2 + drivers/pci/controller/dwc/pcie-designware.h | 1 + drivers/platform/chrome/cros_ec_ishtp.c | 2 +- drivers/platform/chrome/cros_usbpd_notify.c | 41 +-- drivers/ptp/ptp_sysfs.c | 6 +- drivers/scsi/aic7xxx/aic79xx_core.c | 4 +- drivers/scsi/aic7xxx/aic79xx_osm.h | 26 +- drivers/scsi/aic7xxx/aic7xxx_core.c | 8 +- drivers/scsi/aic7xxx/aic7xxx_pci.c | 20 +- drivers/scsi/scsi_bsg.c | 8 +- drivers/target/target_core_device.c | 18 +- drivers/target/target_core_fabric_lib.c | 10 + drivers/target/target_core_tpg.c | 10 +- drivers/target/target_core_user.c | 5 + .../intel/int340x_thermal/int3403_thermal.c | 3 +- .../intel/int340x_thermal/int340x_thermal_zone.c | 6 +- .../int340x_thermal/processor_thermal_device.c | 2 +- drivers/vdpa/solidrun/snet_ctrl.c | 3 +- drivers/vdpa/vdpa_user/iova_domain.c | 11 +- drivers/vhost/scsi.c | 7 +- drivers/vhost/vdpa.c | 8 +- drivers/vhost/vhost.c | 3 +- drivers/vhost/vringh.c | 27 +- drivers/vhost/vsock.c | 34 ++- fs/9p/v9fs.c | 18 +- fs/9p/vfs_inode.c | 8 + fs/btrfs/ioctl.c | 24 ++ fs/btrfs/sysfs.c | 1 + fs/ceph/addr.c | 6 + fs/erofs/fileio.c | 18 +- fs/ext2/file.c | 3 +- fs/ext2/inode.c | 13 +- fs/f2fs/checkpoint.c | 13 +- fs/f2fs/data.c | 28 ++- fs/f2fs/f2fs.h | 10 +- fs/f2fs/gc.c | 11 +- fs/f2fs/node.c | 75 +++++- fs/f2fs/segment.c | 3 +- fs/f2fs/super.c | 24 ++ fs/f2fs/sysfs.c | 2 + fs/fat/inode.c | 2 + fs/nfsd/nfs2acl.c | 64 ++++- fs/nfsd/nfs3proc.c | 58 ++++- fs/nfsd/nfs3xdr.c | 2 + fs/nfsd/nfs4proc.c | 60 ++++- fs/nfsd/nfs4recover.c | 49 +++- fs/nfsd/nfs4state.c | 24 +- fs/nfsd/nfs4xdr.c | 2 +- fs/nfsd/nfsctl.c | 56 ++++- fs/nfsd/nfsproc.c | 2 +- fs/nfsd/state.h | 2 + fs/nfsd/vfs.c | 108 ++------ fs/nfsd/vfs.h | 21 +- fs/nfsd/xdr3.h | 2 +- fs/notify/inotify/inotify_fsnotify.c | 2 +- fs/ntfs/ea.c | 5 + fs/ntfs3/xattr.c | 25 +- fs/ocfs2/cluster/tcp.c | 5 +- fs/ocfs2/dcache.h | 5 +- fs/ocfs2/dlm/dlmmaster.c | 70 +++++- fs/ocfs2/dlmglue.c | 34 +-- fs/ocfs2/filecheck.c | 2 + fs/ocfs2/journal.c | 15 +- fs/ocfs2/journal.h | 1 + fs/ocfs2/move_extents.c | 70 +++--- fs/ocfs2/super.c | 3 + fs/ocfs2/xattr.c | 120 ++++++++- fs/open.c | 1 + fs/overlayfs/dir.c | 46 ++-- fs/overlayfs/export.c | 4 +- fs/overlayfs/inode.c | 8 + fs/overlayfs/namei.c | 13 +- fs/overlayfs/overlayfs.h | 21 +- fs/overlayfs/readdir.c | 6 +- fs/overlayfs/super.c | 12 +- fs/overlayfs/util.c | 13 +- fs/proc/task_mmu.c | 2 +- fs/smb/server/mgmt/user_session.c | 4 + fs/smb/server/smb2pdu.c | 65 +++-- fs/smb/server/smbacl.c | 43 +++- fs/smb/server/vfs.c | 4 +- fs/smb/server/vfs.h | 2 + fs/smb/server/vfs_cache.c | 58 +++-- fs/udf/balloc.c | 11 +- fs/udf/super.c | 80 +++++- fs/udf/truncate.c | 7 +- fs/xfs/libxfs/xfs_attr_leaf.c | 9 +- fs/xfs/libxfs/xfs_bmap.c | 14 +- fs/xfs/libxfs/xfs_bmap.h | 10 +- fs/xfs/libxfs/xfs_btree.c | 4 +- fs/xfs/scrub/attr.c | 102 ++++++-- fs/xfs/scrub/attr_repair.c | 18 +- fs/xfs/scrub/dir.c | 110 ++++++++- fs/xfs/scrub/dir_repair.c | 100 ++++++-- fs/xfs/scrub/quota_repair.c | 33 ++- fs/xfs/xfs_discard.c | 26 +- fs/xfs/xfs_file.c | 2 +- fs/xfs/xfs_healthmon.c | 2 +- fs/xfs/xfs_ioctl32.c | 4 +- fs/xfs/xfs_ioend.c | 2 +- fs/xfs/xfs_iomap.c | 28 ++- fs/xfs/xfs_iomap.h | 3 +- fs/xfs/xfs_pnfs.c | 60 +++-- include/acpi/acpi_bus.h | 7 + include/acpi/cppc_acpi.h | 6 + include/asm-generic/tlb.h | 3 +- include/crypto/mldsa.h | 6 +- include/dt-bindings/clock/nuvoton,ma35d1-clk.h | 3 +- include/linux/blkdev.h | 4 +- include/linux/can/can-ml.h | 3 + include/linux/can/dev.h | 2 +- include/linux/can/skb.h | 4 +- include/linux/damon.h | 10 + include/linux/huge_mm.h | 5 +- include/linux/hugetlb.h | 15 +- include/linux/ksm.h | 6 +- include/linux/memfd.h | 9 + include/linux/mm_types.h | 12 +- include/linux/mmap_lock.h | 39 ++- include/linux/mmu_notifier.h | 3 +- include/linux/mmzone.h | 2 + include/linux/nfs4.h | 6 + include/linux/shmem_fs.h | 15 +- include/linux/srcu.h | 36 +++ include/linux/sunrpc/clnt.h | 3 +- include/linux/sunrpc/svc.h | 7 +- include/linux/userfaultfd_k.h | 2 - include/net/espintcp.h | 5 +- include/net/inet_frag.h | 9 + include/net/netns/can.h | 2 +- include/net/sctp/sm.h | 1 + include/sound/cs35l56.h | 4 + include/sound/hwdep.h | 1 + include/uapi/linux/iommufd.h | 6 + io_uring/cancel.c | 26 +- io_uring/poll.c | 62 ++++- io_uring/rsrc.c | 21 +- io_uring/sqpoll.c | 26 +- kernel/events/core.c | 9 + kernel/fork.c | 20 +- kernel/panic.c | 2 +- kernel/sched/fair.c | 4 +- lib/base64.c | 3 + lib/crypto/Kconfig | 6 +- lib/crypto/mldsa.c | 15 +- lib/crypto/tests/mldsa_kunit.c | 9 + mm/cma.c | 14 +- mm/damon/core.c | 32 ++- mm/damon/sysfs-schemes.c | 8 +- mm/filemap.c | 84 +++---- mm/gup.c | 68 +++-- mm/huge_memory.c | 146 ++++++++--- mm/hugetlb.c | 92 ++++--- mm/hugetlb_vmemmap.c | 8 +- mm/internal.h | 38 ++- mm/khugepaged.c | 75 ++++-- mm/ksm.c | 66 +++-- mm/madvise.c | 9 + mm/memcontrol.c | 5 + mm/memfd.c | 2 + mm/memory-tiers.c | 29 +-- mm/memory.c | 133 ++++++---- mm/mempolicy.c | 4 +- mm/migrate.c | 5 +- mm/mm_init.c | 2 - mm/mmap.c | 8 +- mm/mmap_lock.c | 124 +++++++++- mm/mmu_notifier.c | 24 +- mm/mremap.c | 103 ++++---- mm/nommu.c | 2 +- mm/page-writeback.c | 8 +- mm/page_alloc.c | 30 ++- mm/page_alloc.h | 14 +- mm/rmap.c | 23 +- mm/shmem.c | 141 +++++++---- mm/shmem_quota.c | 28 ++- mm/swapfile.c | 7 +- mm/truncate.c | 13 +- mm/userfaultfd.c | 63 ++--- mm/util.c | 13 + mm/vma.c | 54 ++-- mm/vma_init.c | 3 + mm/vmscan.c | 29 ++- net/9p/trans_usbg.c | 91 +++++-- net/9p/trans_virtio.c | 5 + net/9p/trans_xen.c | 10 + net/batman-adv/bat_iv_ogm.c | 5 + net/batman-adv/distributed-arp-table.c | 1 + net/batman-adv/main.c | 12 +- net/batman-adv/multicast_forw.c | 5 +- net/batman-adv/tp_meter.c | 2 +- net/batman-adv/translation-table.c | 133 ++++++---- net/batman-adv/types.h | 8 +- net/bluetooth/hci_sync.c | 25 +- net/bluetooth/l2cap_core.c | 47 +++- net/can/af_can.c | 56 +++-- net/can/bcm.c | 50 ++-- net/can/gw.c | 7 +- net/can/isotp.c | 236 +++++++++++------- net/can/proc.c | 69 +++--- net/can/raw.c | 274 ++++++++++++--------- net/core/dev.c | 4 +- net/core/filter.c | 23 +- net/core/sock.c | 6 +- net/ipv4/cipso_ipv4.c | 9 +- net/ipv4/inet_connection_sock.c | 6 +- net/ipv4/inet_fragment.c | 5 + net/ipv4/inet_hashtables.c | 2 +- net/ipv4/inet_timewait_sock.c | 4 +- net/ipv4/syncookies.c | 2 +- net/ipv4/tcp_fastopen.c | 2 +- net/ipv4/xfrm4_output.c | 7 +- net/ipv6/addrconf.c | 3 +- net/ipv6/datagram.c | 4 + net/ipv6/inet6_hashtables.c | 2 +- net/ipv6/raw.c | 3 + net/l2tp/l2tp_core.c | 13 +- net/mac80211/tdls.c | 3 +- net/mac80211/tx.c | 2 + net/mptcp/pm_kernel.c | 1 + net/mptcp/subflow.c | 11 + net/qrtr/af_qrtr.c | 53 +++- net/sched/sch_generic.c | 41 ++- net/sched/sch_qfq.c | 3 + net/sched/sch_taprio.c | 5 + net/sctp/sm_make_chunk.c | 14 +- net/sctp/socket.c | 57 ++++- net/smc/smc_rx.c | 39 ++- net/sunrpc/rpcb_clnt.c | 22 +- net/sunrpc/svc.c | 42 +++- net/wireless/reg.c | 3 + net/xfrm/espintcp.c | 43 ++-- net/xfrm/xfrm_interface_core.c | 8 + net/xfrm/xfrm_policy.c | 11 +- rust/kernel/cpufreq.rs | 4 +- sound/core/hwdep.c | 2 + sound/core/ump_convert.c | 2 +- sound/hda/codecs/realtek/alc269.c | 45 +++- sound/hda/codecs/side-codecs/tas2781_hda.c | 27 +- sound/pci/cs46xx/dsp_spos.c | 2 + sound/pci/cs46xx/dsp_spos_scb_lib.c | 3 +- sound/soc/amd/yc/acp6x-mach.c | 7 + sound/soc/codecs/cs35l56-sdw.c | 27 +- sound/soc/codecs/cs35l56-shared.c | 38 +++ sound/soc/codecs/cs35l56.c | 17 ++ sound/soc/codecs/cs35l56.h | 1 + sound/soc/codecs/hdac_hda.c | 25 +- sound/soc/codecs/tas2770.c | 14 +- sound/soc/qcom/qdsp6/q6apm.c | 6 +- sound/soc/qcom/qdsp6/q6prm.c | 3 + sound/soc/sof/intel/hda-codec.c | 23 +- sound/soc/sof/intel/hda-sdw-bpt.c | 6 + sound/usb/bcd2000/bcd2000.c | 20 +- sound/usb/caiaq/input.c | 2 + sound/usb/line6/capture.c | 29 +++ sound/usb/midi.c | 64 +++-- sound/usb/qcom/qc_audio_offload.c | 7 + sound/usb/usx2y/us122l.c | 27 +- sound/usb/usx2y/usX2Yhwdep.c | 5 + sound/usb/usx2y/usb_stream.c | 9 +- sound/usb/usx2y/usbusx2yaudio.c | 43 +++- tools/perf/tests/tool_pmu.c | 79 ++++++ tools/perf/util/evsel.c | 30 ++- tools/perf/util/hwmon_pmu.c | 2 +- tools/perf/util/tool_pmu.c | 2 +- .../filesystems/fscontext_ns/fscontext_ns_test.c | 2 +- tools/testing/selftests/net/fib_nexthops.sh | 40 ++- tools/testing/vma/include/dup.h | 2 +- tools/testing/vma/shared.c | 8 +- 470 files changed, 7038 insertions(+), 2625 deletions(-)

4 hours, 7 minutes

[PATCH 6.12 000/670] 6.12.118-rc1 review

by Greg Kroah-Hartman

This is the start of the stable review cycle for the 6.12.118 release. There are 670 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know. Responses should be made by Sun, 15 Nov 2026 15:36:17 +0000. Anything received after that time might be too late. The whole patch series can be found in one patch at: https://www.kernel.org/pub/linux/kernel/v6.x/stable-review/patch-6.12.118-r… or in the git tree and branch at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-6.12.y and the diffstat can be found below. thanks, greg k-h ------------- Pseudo-Shortlog of commits: Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> Linux 6.12.118-rc1 Johan Hovold <johan+linaro(a)kernel.org> media: qcom: camss: vfe: suppress VFE version log spam José Miguel Castellanos Valladolid <josstamy(a)gmail.com> ALSA: hda/realtek: Enable mute LEDs on HP OmniBook X Flip 14-fm0xxx Gianluca Balboni <gianluca.balboni06(a)gmail.com> ASoC: amd: yc: Add DMI quirk for HP OmniBook 3 Laptop 16-by0xxx Armaan Sandhu <armaan.sandhu0504(a)gmail.com> lib/cmdline: fix get_options() count and overflow with large ranges Shuvam Pandey <shuvampandey1(a)gmail.com> lib/tests: extend cmdline KUnit with next_arg() tests Brandon Williams <turbine.bmw(a)gmail.com> power: supply: qcom_battmgr: Notify charger supplies of online changes Mario Limonciello <mario.limonciello(a)amd.com> platform/x86/amd/pmf: Add AMDI0112 ACPI ID Myeonghun Pak <mhun512(a)gmail.com> fbdev: nvidia: Release write-combining handle on probe failure Shixiong Ou <oushixiong(a)kylinos.cn> fbdev: nvidia: Convert to managed PCI and ioremap API Maurizio Casciano <mauriziocasciano7(a)gmail.com> power: supply: core: Honor supplied-from with CONFIG_OF=y Sebastian Reichel <sebastian.reichel(a)collabora.com> power: supply: core: get rid of of_node Thomas Weißschuh <linux(a)weissschuh.net> power: supply: core: use power_supply_for_each_psy() Thomas Weißschuh <linux(a)weissschuh.net> power: supply: core: introduce power_supply_for_each_psy() Francesco Orlando <francesco.orlando99(a)libero.it> Input: xpad - add GameSir Nova Lite support Wentao Liang <vulab(a)iscas.ac.cn> power: supply: ltc2941: Fix of_node reference leak in ltc294x_i2c_probe() Olivier Kaloudoff <olivier.kaloudoff(a)gmail.com> ALSA: usb-audio: Add mic resolution quirk for Logitech Webcam C200 Pauli Virtanen <pav(a)iki.fi> ALSA: usb-audio: add volume quirks for MS LifeChat LX-3000 Cryolitia PukNgae <cryolitia(a)uniontech.com> ALSA: usb-audio: rename QUIRK_FLAG_MIXER_MIN_MUTE to QUIRK_FLAG_MIXER_PLAYBACK_MIN_MUTE Guangshuo Li <lgs201920130244(a)gmail.com> crypto: omap-sham - fix crypto engine cleanup Thorsten Blum <thorsten.blum(a)linux.dev> crypto: omap - add omap_sham_unregister_algs helper Ricardo Neri <ricardo.neri-calderon(a)linux.intel.com> hwmon: (coretemp) Return -ENODATA for invalid temperature readings Andrea Parri <parri.andrea(a)gmail.com> iommufd/iova_bitmap: Ensure that iova_bitmap_set() handles the full IOVA Henrik Enquist <henrik.enquist(a)gmail.com> ALSA: aloop: Don't constrain playback params in notify mode Takashi Iwai <tiwai(a)suse.de> ALSA: aloop: Use guard() for mutex locks Lorenzo Stoakes (ARM) <ljs(a)kernel.org> mm/vma: avoid broken uffd merge on mremap David Carlier <devnexen(a)gmail.com> media: ipu6: Fix firmware config leak on stream start Dmitry Torokhov <dmitry.torokhov(a)gmail.com> Input: always accept EV_SYN in input_event() Daeho Jeong <daehojeong(a)google.com> f2fs: release a removed xattr node in roll-forward recovery Miquel Raynal <miquel.raynal(a)bootlin.com> clk: nuvoton: ma35d1: Add missing WDT/WWDT parent clocks Miquel Raynal <miquel.raynal(a)bootlin.com> dt-bindings: clock: ma35d1: Add missing WDT/WWDT parent clocks Miquel Raynal <miquel.raynal(a)bootlin.com> dt-bindings: clock: ma35d1: Drop CLK_MAX_IDX define Miquel Raynal <miquel.raynal(a)bootlin.com> clk: nuvoton: ma35d1: Keep the clock count in the driver Sumit Kumar <sumit.kumar(a)oss.qualcomm.com> PCI: dwc: Set DMA_BYPASS bit in outbound IATU CTRL2 register Lorenzo Stoakes (ARM) <ljs(a)kernel.org> mm/mremap: correctly uncharge accountable VMAs in error path David Hildenbrand (Arm) <david(a)kernel.org> mm/huge_memory: split huge PUDs when adjusting VMA boundaries Jianyun Gao <jianyungao89(a)gmail.com> dax: fix wrong error code returned from dax_dedupe_file_range_compare() Hung-Jui Lin <alex.lin.programmer(a)gmail.com> posix-timers: Report zero remaining time for disarmed SIGEV_NONE timers Breno Leitao <leitao(a)debian.org> ACPI: APEI: accumulate the queued flag across error sections Bradley Morgan <brads(a)mainlining.org> panic: restore variable arguments to nmi_panic() Steve Wahl <steve.wahl(a)hpe.com> watchdog/hpwdt: Refine hpwdt message for UV platform Nam Cao <namcao(a)linutronix.de> panic: Add vpanic() Sravan Kumar Gundu <sravankumarlpu(a)gmail.com> kernel/panic.c: format kernel-doc comments Bradley Morgan <brads(a)mainlining.org> panic: flatten nmi_panic control flow Jinchao Wang <wangjinchao600(a)gmail.com> panic: use panic_try_start() in nmi_panic() Adrian Ambrozewicz <aambrozewicz(a)nvidia.com> gpiolib: cdev: don't set GPIOD_FLAG_IS_OUT Yingjie Wang <1075151112(a)qq.com> nvme-tcp: validate the TLS handshake timeout Sean Young <sean(a)mess.org> media: serial_ir: Fix race condition where timer can be re-armed Huacai Chen <chenhuacai(a)kernel.org> LoongArch: Don't init & online empty nodes Chao Yu <chao(a)kernel.org> f2fs: fix to invalidate curseg if change_curseg() fails Christian Brauner <brauner(a)kernel.org> iomap: don't mark unwritten parts of a folio uptodate Hitesh Patel <hitesh(a)ebytelogic.com> media: qcom: camss: vfe-17x: Fix write master selection for RDI lines Depeng Shao <quic_depengs(a)quicinc.com> media: qcom: camss: vfe: Move common code into vfe core Linmao Li <lilinmao(a)kylinos.cn> PCI: cadence: Store the core controller in platform drvdata Giorgi Kobakhia <gkobakhi(a)asu.edu> ocfs2: fix array out of bound access in __ocfs2_find_path() Edward Adam Davis <eadavis(a)qq.com> ocfs2: fix oob in __ocfs2_find_path Caleb Kan <ckan(a)cloudflare.com> stackdepot: stop preallocating after the final pool Tiezhu Yang <yangtiezhu(a)loongson.cn> LoongArch: Fix one-shot limitation for perf hardware breakpoints Nikolaos Karaolidis <nick(a)karaolidis.com> fs: don't lose inodes that another LRU walker is isolating Qi Xi <xiqi2(a)huawei.com> mm/page_isolation: fix UBSAN shift-out-of-bounds warning Longlong Xia <xialonglong(a)kylinos.cn> mm/zswap: publish the initial pool with list_add_rcu() Peter Ujfalusi <peter.ujfalusi(a)linux.intel.com> ASoC: hdac_hda: Restore the codec device type on unbind Peter Ujfalusi <peter.ujfalusi(a)linux.intel.com> ASoC: hdac_hda: Allocate the private data at codec driver bind Jinmeng Zhou <jinmengzhou22(a)gmail.com> mm/hugetlb: charge folios to the target mm's memcg Josef Bacik <josef(a)toxicpanda.com> mm/vma: don't leak the commit charge on mmap failure Joanne Koong <joannelkoong(a)gmail.com> fuse: don't drop destination page cache on a zero byte copy reply Daniel Phillips <daniel.phillips(a)amd.com> amdkfd: Fix memory availability double accounting of kfd pinned objects Nikolaos Karaolidis <nick(a)karaolidis.com> fs: rotate inodes whose page cache could not be dropped Kevin Wang <kevin.wang(a)amd.com> drm/amd/pm: reapply umd profile state after recovery Lijo Lazar <lijo.lazar(a)amd.com> drm/amd/pm: Revert state if force level fails Fan Wu <fanwu01(a)zju.edu.cn> power: supply: bq27xxx: Ensure poll work is cancelled on remove Christophe JAILLET <christophe.jaillet(a)wanadoo.fr> power: supply: Use devm_mutex_init() Thomas Weißschuh <linux(a)weissschuh.net> power: supply: bq27xxx_battery: register power supply with power_supply_register() Thomas Weißschuh <linux(a)weissschuh.net> power: supply: core: add wakeup source inhibit by power_supply_config Alexander Sverdlin <alexander.sverdlin(a)siemens.com> tpm: tpm2_probe: propagate transport errors Maciej Kucharek <qchcio(a)gmail.com> drm/amdgpu: reset SI ASIC on MacBookPros with VRAM at 0 Armin Wolf <W_Armin(a)gmx.de> hwmon: (acpi_power_meter) Fix 18.45 TW bug Alexey Charkov <alchark(a)flipper.net> nvmem: rockchip-otp: Serialize reads Rosen Penev <rosenp(a)gmail.com> nvmem: rockchip-otp: alloc clks with main struct Ming Lei <tom.leiming(a)gmail.com> ublk: mark the io command cancelable before publishing it Andrew Pam <andrew(a)fastmailteam.com> power: supply: cros_charge-control: restore EC state on resume Jesse Zhang <Jesse.Zhang(a)amd.com> drm/amdgpu: reject CS chunks too large for kvmalloc() Tvrtko Ursulin <tvrtko.ursulin(a)igalia.com> drm/amdgpu: Use (v)memdup_array_user in amdgpu_cs_pass1 Gregory Price <gourry(a)gourry.net> mm/mempolicy: use vm_normal_folio_pmd() in queue_folios_pmd() Wentao Liang <vulab(a)iscas.ac.cn> xen/gntdev: Fix gntdev_dmabuf ref leak in dmabuf_exp_wait_released() Yao Yiqi <yaoyiqi3(a)huawei.com> fbcon: Retry rotated font allocation after failure Marc Zyngier <maz(a)kernel.org> KVM: arm64: vgic: Stop the target vcpu when disabling LPIs Peter Ujfalusi <peter.ujfalusi(a)linux.intel.com> ALSA: hda/hdmi: clamp num_cvts against cvt_nids[] in hdmi_read_pin_conn Takashi Iwai <tiwai(a)suse.de> ALSA: emux: Fix UAF of soundfont zones at note-on Takashi Iwai <tiwai(a)suse.de> ALSA: synth: Use guard() for spin locks Runyu Xiao <runyu.xiao(a)seu.edu.cn> block: amiflop: synchronize flush timer before track flush Joanne Koong <joannelkoong(a)gmail.com> fuse: don't launder folios of a bad inode Art O Cathain <art.home(a)gmail.com> ASoC: amd: acp-config: force SoundWire probe on Dell 14S DS14265 Sehat Mahde <hskmahde(a)gmail.com> ASoC: amd: acp-config: force SoundWire probe on HP OmniBook X Flip 16 Jackie Dong <xy-jackie(a)139.com> ASoC: amd: acp: Add DMI quirk for Lenovo Yoga Pro 7 15ASH11 Jasper Smet <josbeir(a)gmail.com> ASoC: amd: acp: Add DMI quirk for ASUS Zenbook S16 UM5606GA Hasun Park <hasunpark(a)gmail.com> ASoC: amd: acp: add DMI override for ACP70 flag Devin Wittmayer <lucid_duck(a)justthetip.ca> wifi: mt76: move the channel survey when the channel changes Stanley Jhu <stanleyjhu(a)google.com> scsi: ufs: core: Add a helper for clearing hba->outstanding_reqs Chao Yu <chao(a)kernel.org> f2fs: fix to use bio_in_atomic() in f2fs_read_end_io() Tal Zussman <tz2294(a)columbia.edu> block: introduce bio_in_atomic() Kaixuan Li <kaixuanli0131(a)gmail.com> f2fs: bound the SIT/NAT bitmaps by the checkpoint pack Paolo Abeni <pabeni(a)redhat.com> mptcp: fix subflow bitfield misuse Chi Zhiling <chizhiling(a)kylinos.cn> exfat: advance valid_size to EOF for append writes Elena Sakhnovitch <Elena.Sakhnovitch(a)amd.com> drm/amdgpu/gmc9: add extra type-2 TLB flush for gfx942/gfx950 Apurv Mishra <Apurv.Mishra(a)amd.com> drm/amdkfd: Drop workaround for GC v9.4.3 revID 0 Alex Sierra <alex.sierra(a)amd.com> drm/amd: update mtype flags for gfx 9.5.0 Alex Sierra <alex.sierra(a)amd.com> drm/amd: define gc ip version local variable Andrea Parri <parri.andrea(a)gmail.com> iomap: don't lose a failed direct I/O bio's error when zeroing the tail Janne Grunau <j(a)jannau.net> wifi: brcmfmac: cfg80211: Report port_authorized for 4-way HS offload Runyu Xiao <runyu.xiao(a)seu.edu.cn> IB/hfi1: Shutdown self-rearming timers before freeing Jiaming Zhang <r772577952(a)gmail.com> nilfs2: force clear dirty state when restoring from the shadow map Matthew Wilcox (Oracle) <willy(a)infradead.org> nilfs2: convert nilfs_page_count_clean_buffers() to take a folio Matthew Wilcox (Oracle) <willy(a)infradead.org> nilfs2: remove nilfs_writepage Vladyslav Tymoshchuk <tvlad744(a)gmail.com> ASoC: qcom: q6apm-dai: wrap the position of a full ring to 0 Mikulas Patocka <mpatocka(a)redhat.com> dm-bufio: fix non-working memory limit Geraldo Nascimento <geraldogabriel(a)gmail.com> PCI: rockchip: Drive at 2.5 GT/s, error other speeds Martin Fuzzey <martin.fuzzey(a)flowbird.group> serial: sc16is7xx: fix data corruption due to unexpected xon/xoff Karl Mehltretter <kmehltretter(a)gmail.com> irqchip/atmel-aic[5]: Disable interrupts in the irq_pm_shutdown() callbacks Luxiao Xu <rakukuip(a)gmail.com> mm/memory: constrain generic_access_phys() to page boundary Zhiling Zou <roxy520tt(a)gmail.com> mm/page_table_check: skip zero pages Sung Byeongchan <tjdqudcks0424(a)naver.com> virtiofs: validate fixed-output response length Yuto Ohnuki <ytohnuki(a)amazon.com> virtiofs: add FUSE protocol validation Hugo Villeneuve <hvilleneuve(a)dimonoff.com> serial: sc16is7xx: declare MCR and IER as volatile registers Hugo Villeneuve <hvilleneuve(a)dimonoff.com> serial: sc16is7xx: add comments for lock requirements Hugo Villeneuve <hvilleneuve(a)dimonoff.com> serial: sc16is7xx: declare SPR/TLR/XOFF2 register as volatile Joe Damato <joe(a)dama.to> mm: memcontrol: raise MEMCG_MAX for charges that fail without reclaiming Runyu Xiao <runyu.xiao(a)seu.edu.cn> ALSA: mpu401: shut down timer before freeing MPU Tobias Schumacher <ts(a)linux.ibm.com> s390/pci: Add error cleanup in zpci_directed_irq_init() Andrey Misiurov <andrey.misyrov(a)gmail.com> fbdev: core: Initialize modelist in framebuffer_alloc() Darrick J. Wong <djwong(a)kernel.org> xfarray: don't crash when sorting if array element crosses a folio Fan Wu <fanwu01(a)zju.edu.cn> media: rockchip: rga: quiesce IRQ before releasing m2m state Sven Püschel <s.pueschel(a)pengutronix.de> media: rockchip: rga: use clk_bulk api Marc Zyngier <maz(a)kernel.org> KVM: arm64: Move IN_GUEST_MODE ahead of state being loaded David Hildenbrand (Arm) <david(a)kernel.org> mm: disallow ioremap'ing ordinary RAM in generic_access_phys() Marco Scardovi <scardracs(a)disroot.org> platform/x86: asus-wmi: Serialize WMI method evaluations with a mutex Ma Ke <make_ruc2021(a)163.com> ALSA: hda: cs35l41: Fix ACPI device reference leak on probe failure Takashi Iwai <tiwai(a)suse.de> ALSA: hda: cs35l41: Use auto-cleanup for put_device() Runyu Xiao <runyu.xiao(a)seu.edu.cn> mailbox: altera: shut down RX polling timer on channel teardown Peter Ujfalusi <peter.ujfalusi(a)linux.intel.com> ALSA: hda/hdmi: clamp sad_count in ELD proc write handler Myeonghun Pak <mhun512(a)gmail.com> mfd: twl-core: Unregister the auxiliary platform device on unbind Thorsten Blum <thorsten.blum(a)linux.dev> mfd: twl-core: Use i2c_check_functionality as boolean value Kenneth Feng <kenneth.feng(a)amd.com> drm/amd/pm:restate all customized OD features on every table upload for smu 13.0.0/smu 14.0.2 Daeho Jeong <daehojeong(a)google.com> f2fs: return -EIO for a lost inode block after cp_error Ridong Chen <chenridong(a)xiaomi.com> mm/mglru: fix ineffective memory protection for non-kswapd reclaim Chao Yu <chao(a)kernel.org> f2fs: zone: fix to avoid bio split on sequential zone Takashi Iwai <tiwai(a)suse.de> ALSA: line6: Handle period elapsed calls outside the locks Takashi Iwai <tiwai(a)suse.de> ALSA: line6: Use guard() for spin locks Ethan Nelson-Moore <enelsonmoore(a)gmail.com> ata: sata_inic162x: remove dangerous broken driver Bart Van Assche <bvanassche(a)acm.org> ata: libata: Add an argument to ata_eh_reset() Damien Le Moal <dlemoal(a)kernel.org> ata: libata-eh: Simplify reset operation management Damien Le Moal <dlemoal(a)kernel.org> ata: libata-eh: Remove ata_do_eh() Damien Le Moal <dlemoal(a)kernel.org> ata: libata-eh: Rename and make ata_set_mode() static Vincent Donnefort <vdonnefort(a)google.com> KVM: arm64: Fix MMFR0 TGRAN advertisement for pVMs Wentao Liang <vulab(a)iscas.ac.cn> drm/msm/dsi: Fix VM leak in dsi_tx_buf_alloc_6g() Jiale Yao <yaojiale02(a)163.com> iio: dac: mcp4821: reject devices without match data Myeonghun Pak <mhun512(a)gmail.com> ASoC: stm: stm32_i2s: request IRQ after regmap initialization bui duc phuc <phucduc.bui(a)gmail.com> ASoC: stm: stm32_i2s: Drop redundant error messages Linmao Li <lilinmao(a)kylinos.cn> media: chips-media: wave5: Handle polling IRQ thread failure Ryusuke Konishi <konishi.ryusuke(a)gmail.com> nilfs2: ignore non-fatal signals during synchronous log write wait Ryusuke Konishi <konishi.ryusuke(a)gmail.com> nilfs2: correct return value kernel-doc descriptions for the rest Bartosz Golaszewski <bartosz.golaszewski(a)oss.qualcomm.com> dmaengine: qcom: bam_dma: free interrupt before the clock in error path Vishnu Santhosh <vishnu.santhosh(a)oss.qualcomm.com> dmaengine: qcom: bam_dma: Defer IRQ trigger type to device tree Tom Verdonck <tom.verdonck(a)inspiral.be> hwmon: (tmp108) Fix jiffies wraparound in conversion-ready check Yunpeng Tian <shionthanatos(a)gmail.com> udf: validate the device specification EA before using it Hungyu Lin <dennylin0707(a)gmail.com> mm/page-writeback: avoid 32-bit overflow in dirty threshold shares Marek Czernohous <marek(a)czernohous.de> drm/nouveau/pci: use config-space MSI rearm on MCP79/MCP7A (NVAC) Mehmet Fide <mehmet.fide(a)screeningeagle.com> wifi: rtw88: widen the ATIM window while an AP interface is up Mehmet Fide <mehmet.fide(a)screeningeagle.com> wifi: rtw88: usb: only let the frames a dozing station needs use the after-DTIM queue Mehmet Fide <mehmet.fide(a)screeningeagle.com> wifi: rtw88: usb: bound what the driver feeds the after-DTIM queue Mehmet Fide <mehmet.fide(a)screeningeagle.com> wifi: rtw88: usb: route bmc frames via the high queue only for DTIM delivery Martin Belanger <martin.belanger(a)dell.com> nvme-tcp: skip TLS control records while waiting for the ICResp Guanglei Zhu <zhugl3(a)xiaopeng.com> apparmor: check accept index + 1 is in bounds Yeoreum Yun <yeoreum.yun(a)arm.com> coresight/etm4: fix missing disable active config Zhiling Zou <zhilinz(a)nebusec.ai> ipmr: only copy pktinfo to cache reports Eric Dumazet <edumazet(a)google.com> ipmr: prevent info-leak in pmr_cache_report() Weibin Liu <liuwb(a)xiaopeng.com> spi: cadence-xspi: reject SDMA transfers larger than the requested length Jisheng Zhang <jszhang(a)kernel.org> spi: cadence-xspi: group marvell support code together Hans Zhang <18255117159(a)163.com> spi: cadence-xspi: Use FIELD_MODIFY() Andy Shevchenko <andriy.shevchenko(a)linux.intel.com> spi: cadence-xspi: Replace ACPI specifics by agnostic APIs Luo Jie <quic_luoj(a)quicinc.com> bitfield: Add FIELD_MODIFY() helper Chris Mason <mason(a)kernel.org> mm/shmem: honour F_SEAL_EXEC when an ACL is set Kyle Zeng <kylebot(a)openai.com> mm/page_vma_mapped: continue past nonmatching huge PMDs Jiangshan Yi <yijiangshan(a)kylinos.cn> ceph: fix longname buffer overflow in ceph_fname_to_usr() Ido Schimmel <idosch(a)nvidia.com> ipmr, ip6mr: validate packets injected into the register vif on xmit Kuniyuki Iwashima <kuniyu(a)google.com> ipmr: Call ipmr_fib_lookup() under RCU. David Hildenbrand (Arm) <david(a)kernel.org> mm/userfaultfd: only allocate anon_vma in CoW mappings Josef Bacik <josef(a)toxicpanda.com> mm/hugetlb: unmap the page where the other VMA maps it Sinan Turunc <enscrpt(a)pm.me> ALSA: usb-audio: Bound packet copies by the PCM buffer size Fuad Tabba <fuad.tabba(a)linux.dev> KVM: arm64: Validate the host vCPU's VM before reading it under pKVM Michal Pecio <michal.pecio(a)gmail.com> usb: xhci: Fix bounce buffer overflow Yuejie Shi <syjcnss(a)gmail.com> fs/ntfs3: validate the EA value length in ntfs_read_ea() Vaibhav Nagare <vnagare(a)redhat.com> bnxt_en: don't leave an XDP program installed when the open fails Cen Zhang (Microsoft) <cenzhang(a)linux.microsoft.com> userfaultfd: fix UFFDIO_MOVE livelock on large folio with extra references Jun Yang <junvyyang(a)tencent.com> sctp: re-point retained control chunks on association migration David Lee <david.lee(a)trailofbits.com> sctp: hold shkey across socket migration Seungjin Bae <eeodqql09(a)gmail.com> usb: typec: ucsi: ccg: Validate altmode index in GET_CURRENT_CAM response Jérémy Jean <Jeremy.Jean(a)oss.cyber.gouv.fr> crypto: ecc - Handle exceptional points in Shamir multiplication Yifei Gao <gyf161023(a)gmail.com> misc: fastrpc: fix double-free in fastrpc_map_attach() error path Kumari Pallavi <kumari.pallavi(a)oss.qualcomm.com> misc: fastrpc: Rename phys to dma_addr for clarity Sean Christopherson <seanjc(a)google.com> KVM: guest_memfd: Establish memslot<=>guest_memfd bindings *after* memslot is ready Ge Yang <yangge1116(a)126.com> mm/hugetlb: remove unnecessary holding of hugetlb_lock Lucas De Marchi <lucas.demarchi(a)intel.com> drm/panel: Fix build error on !CONFIG_OF Runyu Xiao <runyu.xiao(a)seu.edu.cn> hte: tegra194-test: shut down timer before GPIO release Guangshuo Li <lgs201920130244(a)gmail.com> media: i2c: ov5647: fix power cleanup on remove Thomas Zimmermann <tzimmermann(a)suse.de> drm/panic: Do not use un-escaped URL as format string Sakari Ailus <sakari.ailus(a)linux.intel.com> platform/x86: int3472: Fix uninitialised variable warning Casey Connolly <casey.connolly(a)linaro.org> drm/panel: ebbg-ft8719: Set prepare_prev_first Anusha Srivatsa <asrivats(a)redhat.com> panel/ebbg-ft8719: Use refcounted allocation in place of devm_kzalloc() Anusha Srivatsa <asrivats(a)redhat.com> drm/panel: Add new helpers for refcounted panel allocatons Sean Young <sean(a)mess.org> media: redrat3: Error path leaves device in transmitting state Esben Haabendal <esben(a)geanix.com> iio: light: ltr501: Power down chip if request irq fails Chao Yu <chao(a)kernel.org> f2fs: fix to check continuousness in f2fs_sync_meta_pages() correctly Sean Young <sean(a)mess.org> media: ene_ir: Ensure teardown is done in the correct order Gaurav Batra <gbatra(a)linux.ibm.com> powerpc/pseries/iommu: Add TCEs for 16GB pages when RAM is pre-mapped Christopher Lusk <clusk(a)northecho.dev> m68k: Fix seccomp filtering on ColdFire and 68000 Daniel Palmer <daniel(a)0x0f.com> m68k: Fix task info flags handling for 68000 Guangshuo Li <lgs201920130244(a)gmail.com> media: i2c: og01a1b: power off sensor on remove Vladimir Zapolskiy <vladimir.zapolskiy(a)linaro.org> media: i2c: og01a1b: Switch from .s_stream to .enable_streams/.disable_streams Jiaming Zhang <r772577952(a)gmail.com> gfs2: reject invalid inode sizes Tom Verdonck <tom.verdonck(a)inspiral.be> hwmon: (tmp102) Fix jiffies wraparound in conversion-ready check Ali Resool Tuama <aliresool567(a)gmail.com> USB: quirks: add USB_QUIRK_WINDOWS_CONFIG_REQ_SIZE for GameSir G7 SE Nikhil Solanke <nikhilsolanke5(a)gmail.com> usb: core: Add quirk for 255-bytes initial config read Joseph Qi <joseph.qi(a)linux.alibaba.com> ocfs2: restrict OCFS2_INVALID_SLOT suballoc slot to system inodes Runyu Xiao <runyu.xiao(a)seu.edu.cn> ALSA: usb-audio: Protect Roland control activation Robin Snyders <robin(a)snyders.xyz> power: supply: qcom_smbx: validate battery float voltage Casey Connolly <casey.connolly(a)linaro.org> power: supply: pmi8998_charger: rename to qcom_smbx Fuad Tabba <fuad.tabba(a)linux.dev> KVM: arm64: timers: Compute an offset-applied CVAL from the current count Danish Khateeb <danishkhateeb03(a)gmail.com> ALSA: timer: Handle userspace-driven timer ioctls from 32-bit tasks bui duc phuc <phucduc.bui(a)gmail.com> ALSA: core: Clean up file_operations definitions Jiale Yao <yaojiale02(a)163.com> iio: adc: ad7192: reject devices without match data Andy Shevchenko <andriy.shevchenko(a)linux.intel.com> iio: adc: ad7192: Revert "properly check spi_get_device_match_data()" Guangshuo Li <lgs201920130244(a)gmail.com> crypto: omap-des - fix crypto engine cleanup Ryo Takakura <ryotkkr98(a)gmail.com> crypto: omap - convert from tasklet to BH workqueue Kathiravan Thirumoorthy <kathiravan.thirumoorthy(a)oss.qualcomm.com> arm64: dts: qcom: ipq9574: Wire up USB3 PHY PIPE clock to GCC Qi Xi <xiqi2(a)huawei.com> mm/page_isolation: guard compound_order() against racing David Hildenbrand <david(a)redhat.com> mm/page_alloc: reject unreasonable folio/compound page sizes in alloc_contig_range_noprof() Balakrishnan Sambath <balakrishnan.s(a)microchip.com> media: microchip-isc: fix SBGGR10 Bayer pattern Balakrishnan Sambath <balakrishnan.s(a)microchip.com> media: microchip-isc: fix ISC_PFG_CFG0_BPS macro name typo Balakrishnan Sambath <balakrishnan.s(a)microchip.com> media: microchip-isc: store the unshifted PFE_CFG0 BPS value Wei-Lin Chang <weilin.chang(a)arm.com> KVM: arm64: ptdump: Check the page tables aren't freed when accessing Fabio Cesari <fabio.cesari(a)gmail.com> iio: light: isl29028: fix runtime PM reference leak on error paths Sean Christopherson <seanjc(a)google.com> KVM: guest_memfd: Split bind() into prepare()+commit() phases Judith Mendez <jm(a)ti.com> arm64: dts: ti: k3-am625-sk-common: Set eMMC clock pin as OUTPUT Anshul Dalal <anshuld(a)ti.com> arm64: dts: ti: k3-am62*: remove SoC dtsi from common dtsi Andrew Davis <afd(a)ti.com> arm64: dts: ti: k3-am625-sk: Remove M4 mailbox node redefinition Koichiro Den <den(a)valinux.co.jp> PCI: endpoint: pci-epf-vntb: Manage virtual NTB and PCI bus lifetime Abel Vesa <abel.vesa(a)linaro.org> soc: qcom: pmic_glink: Fix device access from worker during suspend Jakub Szczudlo <jakubszczudlo40(a)gmail.com> iio: adc: ti-ads1100: Fix incorrect reading when datarate changed in single mode Valentin Kindschi <valentin.kindschi(a)fiveco.ch> Bluetooth: hci_sync: pause advertising for the scan address update Josef Bacik <josef(a)toxicpanda.com> blk-mq: end the request if getting a keyslot fails Ge Yang <yangge1116(a)126.com> mm/hugetlb: fix kernel NULL pointer dereference when replacing free hugetlb folios yangge <yangge1116(a)126.com> mm: replace free hugepage folios after migration Eric Biggers <ebiggers(a)kernel.org> lib/crypto: mips: Disable Octeon SHA code on little-endian kernels Sven Eckelmann <sven(a)narfation.org> batman-adv: tt: don't drop local events queued during TVLV update Sven Eckelmann <sven(a)narfation.org> batman-adv: tt: only update flags for TT events Sven Eckelmann <sven(a)narfation.org> batman-adv: tt: ignore ROAM flag of received ADD changes Sven Eckelmann <sven(a)narfation.org> batman-adv: tt: send ROAM_ADV on each roamed back client Sven Eckelmann <sven(a)narfation.org> batman-adv: tt: clear ROAM flag when re-adding a pending local client Sven Eckelmann <sven(a)narfation.org> batman-adv: tt: only transmit local ROAM flag together with DEL Sven Eckelmann <sven(a)narfation.org> batman-adv: tpmeter: fix u32 truncation of reported bytes Chengfeng Ye <nicoyip.dev(a)gmail.com> batman-adv: Close OGM aggregation before transmission Sven Eckelmann <sven(a)narfation.org> batman-adv: Limit number of aggregated packets directly Abhishek Dubey <adubey(a)linux.ibm.com> powerpc/bpf: fix buffer overflow in JIT for large BPF programs Suravee Suthikulpanit <suravee.suthikulpanit(a)amd.com> iommu/amd: Force device table to maximum size Samiullah Khawaja <skhawaja(a)google.com> mm/gup: check folio->mapping under folio lock in memfd_pin_folios() Zhao Gongyi <zhaogongyi(a)bytedance.com> ata: libata-scsi: reject data-in commands with a data-out buffer Michal Blaszczyk <michalblk(a)google.com> sched_ext: Reset runnable_at when a task leaves its scheduler Oliver Hartkopp <socketcan(a)hartkopp.net> can: raw, isotp: copy socket options outside of lock_sock() SJ Park <sj(a)kernel.org> mm/damon/core: move static variable last_nr_regions to damon_ctx Ido Schimmel <idosch(a)nvidia.com> vxlan: Stop rejecting dynamic FDB entries with a nexthop ID Ramin Moussavi <ramin.moussavi(a)yacoub.de> microblaze: restore the ABI argument home area below pt_regs (PTO) Kiryl Shutsemau (Meta) <kas(a)kernel.org> arm64: sdei: Preserve the interrupted context's exception registers Kiryl Shutsemau (Meta) <kas(a)kernel.org> arm64: sdei: Run the event handler on the kernel vectors Hamid Nassiby <hamid.nassiby(a)nokia.com> Revert "mm/page_owner: fix memory leak in page_owner_stack_fops->release()" Guanglei Zhu <zhugl3(a)xiaopeng.com> ceph: clamp the inline data length in ceph_fill_inline_data() Oliver Hartkopp <socketcan(a)hartkopp.net> can: protect the receive lists with a per-device lock Oliver Hartkopp <socketcan(a)hartkopp.net> can: replace ARPHRD_CAN type checks with can_get_ml_priv() Marco Ziliani <rylos78(a)gmail.com> ata: libata-pmp: disable the SEMB port on Marvell 88SM9705 Thorsten Blum <blum(a)kernel.org> x86/boot: Fix off-by-one error in sme_clear_pgd() Jinjie Ruan <ruanjinjie(a)huawei.com> arm64: kexec_file: Fix elf_headers memory leak in retry loop Akshay Jindal <Akshay.Jindal(a)amd.com> iommu/amd: Skip non-IVMD entries when parsing IVRS memory definitions Breno Leitao <leitao(a)debian.org> x86/nmi: Ignore negative NMI handler durations Danish Khateeb <danishkhateeb03(a)gmail.com> perf/core: Don't send SIGTRAP after exec removed the event Shao Mingyin <shao.mingyin(a)zte.com.cn> nvmet: bound the traddr and trsvcid configfs writes Qiliang Yuan <odys.yuan(a)gmail.com> nvme: wait for SRCU readers before splicing the namespace list Qiliang Yuan <odys.yuan(a)gmail.com> srcu: Add list_splice_init_srcu() Imre Kaloz <kaloz(a)kernel.org> MIPS: sgi-ip32: Leave MACE PCI control alone in config accesses Imre Kaloz <kaloz(a)kernel.org> MIPS: sgi-ip32: Mask MACE PCI interrupts in CRIME only Imre Kaloz <kaloz(a)kernel.org> MIPS: mm: Fix the cache error vector jump for XKPHYS kernels Matthias Goergens <matthias.goergens(a)gmail.com> udf: don't use eloc after the end of the unallocated space table Matthias Goergens <matthias.goergens(a)gmail.com> udf: fix preallocation discarding before an empty allocation extent Matthias Goergens <matthias.goergens(a)gmail.com> udf: check the unallocated space table when it is loaded Matthias Goergens <matthias.goergens(a)gmail.com> udf: don't let the extent type hide an exhausted free-space table extent Kyle Zeng <kylebot(a)openai.com> mptcp: pm: kernel: use RCU to free endpoint listeners Christian Gmeiner <cgmeiner(a)igalia.com> drm/etnaviv: Flush the tile status cache through both the PE and BLT James Clark <jjc(a)jclark.com> net: ethernet: ti: am65-cpsw-nuss: Enable timestamping of unicast PTP packets Ray Zhang <sgzhang(a)google.com> net: count last skb of each sk_backlog pass in __release_sock() Bryam Vargas <hexlabsecurity(a)proton.me> net/smc: don't spin in smc_rx_recvmsg() while a pipe holds spliced data Hungyu Lin <dennylin0707(a)gmail.com> ext2: preserve IOMAP_F_DIRTY for extending direct writes Sinan Turunc <enscrpt(a)pm.me> ALSA: usx2y: Guard the playback copy Sinan Turunc <enscrpt(a)pm.me> ALSA: usx2y: Require a buffer of two URBs Wentao Liang <vulab(a)iscas.ac.cn> ALSA: caiaq: free the EP4 URB when input setup fails Sinan Turunc <enscrpt(a)pm.me> ALSA: line6: Reject capture buffers smaller than two packets YuanZhe Liu <25031212351(a)stu.xidian.edu.cn> ALSA: usx2y: Refuse a retried DSP load after a failure YuanZhe Liu <25031212351(a)stu.xidian.edu.cn> ALSA: bcd2000: Fix use-after-free of MIDI URBs on file close Alex Kazinsky <a.kazinsky(a)ideco.ru> ALSA: cs46xx: Handle SCB creation failures before dereferencing Chris Simpson <chris(a)nilk.net> ALSA: hda/realtek: Enable bass speakers on Alienware m17 R3 HyeongJun An <sammiee5311(a)gmail.com> ALSA: ump: Fix dropped data bytes at UMP System message conversion Ilia Mirkin <imirkin(a)alum.mit.edu> drm/nouveau/devinit/gf100-: try to avoid double-running vbios scripts Rosen Penev <rosenp(a)gmail.com> drm/nouveau/nvkm: clear use.enabled when subdev init fails Hengyu Liang <hengyul(a)cs.unc.edu> l2tp: only return sessions of the given tunnel in l2tp_session_get() Chris Mason <mason(a)kernel.org> ovl: look up the index by the decoded origin Sasha Levin <sashal(a)kernel.org> nvme-pci: add NVME_QUIRK_DMAPOOL_ALIGN_512 for KIOXIA XG10d Zhao Gongyi <zhaogongyi(a)bytedance.com> arm64: mm: validate /dev/mem mmap ranges without overflow Wei Wang <wvw(a)google.com> arm64: suspend: Save and restore TPIDR2_EL0 across CPU suspend Ewan D. Milne <emilne(a)redhat.com> nvmet: don't return memory contents beyond valid data when reading ANA log page Jesse Zhang <Jesse.Zhang(a)amd.com> drm/amdgpu: don't drop the gang dependency fence twice renpanpan <renpanpan(a)kylinos.cn> drm/amdgpu: Only enable HDMI audio if display supports it Jesse Zhang <Jesse.Zhang(a)amd.com> drm/amdgpu: drop the dma-buf reference when a KFD import fails Erhan Bilgili <erhan.bilgili(a)gmail.com> drm/amdgpu: Report MES ring wait timeouts. Erhan Bilgili <erhan.bilgili(a)gmail.com> drm/amdgpu: Fix duplicate dependency fence releases Kylie C <kyliepc(a)proton.me> drm/amd/display: Don't select zero V_TOTAL_MIN/MAX on seamless boot Misha Nasledov <misha(a)nasledov.com> drm/amd/display: Drop clock requirements on DCN32 when no displays are active Roman Demidov <roman.demidov.nn(a)gmail.com> drm/amd/display: Fix NULL deref in dcn401_update_clocks_update_dtb_dto Jesse Zhang <Jesse.Zhang(a)amd.com> drm/amdgpu/gfx12: disallow GFXOFF while updating the SPM VMID Alex Hung <alex.hung(a)amd.com> drm/amd/display: Avoid closing unowned DDC pins Milan Milicevic <Milan.Milicevic(a)amd.com> drm/amdgpu: publish IH enabled before PSP programs IH_RB_CNTL Milan Milicevic <Milan.Milicevic(a)amd.com> drm/amdgpu: clear RB_OVERFLOW bit when enabling interrupts for navi10_ih Jesse Zhang <Jesse.Zhang(a)amd.com> drm/amdgpu: keep the CS user fence BO in GTT Jesse Zhang <Jesse.Zhang(a)amd.com> drm/amdgpu: parse CS IBs at the BO offset their VA mapping starts at Jarkko Sakkinen <jarkko(a)kernel.org> nvme-keyring: Add a missing key_put() call to nvme_tls_key_lookup() Yitang Yang <yi1tang.yang(a)gmail.com> ublk: add missing DEL_DEV_ASYNC to unprivileged permission check Yilin Zhang <yilinzhang(a)moonshot.ai> mptcp: do not use Fast Open on MP_JOIN subflows Daehyeon Ko <4ncienth(a)gmail.com> vhost/vsock: size receive SKBs from declared payload Alexei Starovoitov <ast(a)kernel.org> net: reject a negative TCP header offset in qdisc_pkt_len_segs_init() Jamal Hadi Salim <jhs(a)mojatatu.com> net/sched: clamp skb->queue_mapping before indexing the tx queue Xia Yan <yanxia(a)cmss.chinamobile.com> ipv6: fix device binding after failed datagram connect David Hildenbrand (Arm) <david(a)kernel.org> mm/ksm: reset the unstable trees of all nodes Chris Mason <mason(a)kernel.org> mm: fix unkillable fault loop on MAP_DROPPABLE memory Josef Bacik <josef(a)toxicpanda.com> mm: fix unmap_mapping_range() beyond 4 GiB on 32-bit Chris Mason <mason(a)kernel.org> mm/memory: reject remote COW faults on PFN mappings David Hildenbrand (Arm) <david(a)kernel.org> mm/madvise: fix data loss from MADV_FREE on a KSM page Chris Mason <mason(a)kernel.org> mm/mmu_notifier: set ->mm only after mmgrab() Josef Bacik <josef(a)toxicpanda.com> mm/mmu_notifier: finish non-blocking interval invalidation on error Josef Bacik <josef(a)toxicpanda.com> mm/mmu_gather: fix flushing ranges with 4 GiB or larger David Hildenbrand (Arm) <david(a)kernel.org> mm/gup: check for overflow when converting nr_pages to bytes in GUP-fast Chris Mason <mason(a)kernel.org> mm/gup: fix out-of-bounds write for nr_pages == 0 in GUP-fast Chris Mason <mason(a)kernel.org> mm/gup: fix clearing folios in memfd_pin_folios() Liu Changjie <liucj1228(a)outlook.com> can: peak_usb: pcan_usb_fd_decode_buf(): accept short uCAN end-of-list records ChunYuZhiQiang <chunyuzhiqiang(a)yinhe.ht> can: dev: can_fill_info(): don't wake up controller if interface is down Oliver Hartkopp <socketcan(a)hartkopp.net> can: proc: skip stats calculation after reset in can_stat_update() Runyu Xiao <runyu.xiao(a)seu.edu.cn> can: proc: reset pkg_stats atomics individually Oliver Hartkopp <socketcan(a)hartkopp.net> can: isotp: check the return values of can_rx_register() in isotp_bind() Cunhao Lu <1579567540(a)qq.com> can: dev: can_put_echo_skb(): free skb on invalid echo index Kaixuan Li <kaixuanli0131(a)gmail.com> can: isotp: check the frame type, not just the length Christoph Hellwig <hch(a)lst.de> xfs: fix recovery of partial attr removals Hyunwoo Kim <imv4bel(a)gmail.com> net: restore refcount ordering for lockless socket access Daejun Park <daejun7.park(a)samsung.com> xfs: clamp the pNFS layout range to the maximum file size Daejun Park <daejun7.park(a)samsung.com> xfs: cap the block count of xfs_iomap_write_direct() at one extent Daejun Park <daejun7.park(a)samsung.com> xfs: clamp a pNFS LAYOUTCOMMIT extent before computing its end Daejun Park <daejun7.park(a)samsung.com> xfs: mark the inode preallocated for pNFS write layouts past EOF Zhe Liu <liuzhe1(a)kylinos.cn> blk-iocost: account flush sequence latency only once Reid Downing <skibletz(a)gmail.com> xfs: fix wrong compat fields in xfs_ioctl32_bstat_copyin() Hungyu Lin <dennylin0707(a)gmail.com> block: Return the soft block size for compat BLKBSZGET Hungyu Lin <dennylin0707(a)gmail.com> inotify: do not coalesce rename events chenglong.ma <longpareto(a)gmail.com> vduse: fix VA/PA confusion in the coherent page fault path Thorsten Blum <blum(a)kernel.org> hwrng: virtio - prevent use-after-free after a failed restore Esben Haabendal <esben(a)geanix.com> drm/bridge: nwl-dsi: Limit LCDIF specific sync override Esben Haabendal <esben(a)geanix.com> drm/bridge: nwl-dsi: Cleanup endpoint mux control selection Yuho Choi <oss.patchbox(a)gmail.com> vdpa/snet: Don't discard the DPU error in snet_send_ctrl_msg() Yuho Choi <oss.patchbox(a)gmail.com> iommu/virtio: Reset device before deleting virtqueues on probe failure Kyle Zeng <kylebot(a)openai.com> net/sched: sch_qfq: prevent aggregate self-replacement Jianyun Gao <jianyungao89(a)gmail.com> xfs: fix temporary cursor leak in btree shift corruption paths Naman Jain <namjain(a)linux.microsoft.com> x86/init: Initialize wall clock in get_rtc_noop() Cen Zhang <zzzccc427(a)gmail.com> ocfs2: cache the mount context for dentry lock callbacks Cen Zhang <zzzccc427(a)gmail.com> ocfs2: wait for filecheck kobject release after a failed add Cen Zhang <zzzccc427(a)gmail.com> ocfs2/cluster: unlink socket containers before releasing resources Cen Zhang <zzzccc427(a)gmail.com> ocfs2: stop recovery before shutting down local allocators Cen Zhang <zzzccc427(a)gmail.com> ocfs2/dlm: serialize migration MLE cleanup on failure Cen Zhang <zzzccc427(a)gmail.com> ocfs2: keep locking_state within the cluster connection lifetime Matheus Alves de Almeida <matheus.aalmeida(a)inf.ufrgs.br> fat: hold truncate_lock in fat_write_failed() Joseph Qi <joseph.qi(a)linux.alibaba.com> ocfs2: do not read the entry array of an empty xattr block Joseph Qi <joseph.qi(a)linux.alibaba.com> ocfs2: do not index before the entry array when dividing an empty bucket Joseph Qi <joseph.qi(a)linux.alibaba.com> ocfs2: do not read the entry array of an empty xattr bucket Joseph Qi <joseph.qi(a)linux.alibaba.com> ocfs2: find the xattr entry again after converting a block to a bucket Joseph Qi <joseph.qi(a)linux.alibaba.com> ocfs2: find the xattr entry again after defragmenting a bucket Andrew Morton <akpm(a)linux-foundation.org> openrisc: export __mulsi3 for modules T.J. Mercier <tjmercier(a)google.com> mm: memcontrol: fix NULL pointer deref and UAF from high_work_func() on dying memcg Yafang Shao <laoar.shao(a)gmail.com> mm/migrate: snapshot the source nid before the misplaced migration Hungyu Lin <dennylin0707(a)gmail.com> mm/migrate: untag addresses when querying page nodes Chris Down <chris(a)chrisdown.name> mm: make swapoff interruptible when unusing mms/shmem Hengyu Liang <hengyul(a)cs.unc.edu> fs/proc/task_mmu: return -ENOTTY for unknown pagemap ioctls Samarth Narang <samarth.colleges(a)gmail.com> mm/ksm: keep soft-dirty when merging a page Zenghui Yu (Huawei) <zenghui.yu(a)linux.dev> mm/page_alloc: mark pages freed by __free_pages_core() as not tagged Li Zhe <lizhe.67(a)bytedance.com> mm/hugetlb: fix mremap move length truncation Kyle Zeng <kylebot(a)openai.com> mm/khugepaged: flush deferred unmaps before dropping a failed folio Mohit Sharma <mohit.sharma(a)oss.qualcomm.com> ASoC: qcom: q6apm: Guard callbacks until probe data is ready Valentin Kindschi <valentin.kindschi(a)fiveco.ch> Bluetooth: hci_sync: re-enable legacy advertising on resume Zack Rusin <zack.rusin(a)broadcom.com> x86/vmware: Fix i386 high-bandwidth hypercall arguments Yingjie Wang <1075151112(a)qq.com> ipv6: reject wrapped temporary address preferred lifetimes Sean Christopherson <seanjc(a)google.com> KVM: x86: Unconditionally reset MMU context when emulating INIT Sean Christopherson <seanjc(a)google.com> KVM: x86/mmu: Cap number of parent PTEs per SP at 1000 (the arbitrary rmap limit) Sean Christopherson <seanjc(a)google.com> KVM: nVMX: Process each host MSR entry at most once when unwinding failed VM-Entry Sean Christopherson <seanjc(a)google.com> KVM: x86: Conditionally resched when restarting REP string emulation Sean Christopherson <seanjc(a)google.com> KVM: x86/mmu: Conditionally resched when retrying gPTE walk on A/D update failure Vas Zayarskiy <contact(a)vasily.cc> hwmon: (aquacomputer_d5next) Avoid truncating scaled sensor readings Guenter Roeck <linux(a)roeck-us.net> hwmon: (coretemp) Check for NULL platform device in hotplug callbacks Guenter Roeck <linux(a)roeck-us.net> hwmon: (pmbus) Fix return value check from thermal zone registration Guenter Roeck <linux(a)roeck-us.net> hwmon: (pmbus) Release devres allocated memory after devm_thermal_of_zone_register error Guenter Roeck <linux(a)roeck-us.net> hwmon: (pmbus) Check return value from pmbus_thermal_add_sensor() Guenter Roeck <linux(a)roeck-us.net> hwmon: (pmbus/q54sj108a2) Add missing NULL pointer check Guenter Roeck <linux(a)roeck-us.net> hwmon: (peci/dimmtemp) Fix devres leak and UAF on concurrent unbind Guenter Roeck <linux(a)roeck-us.net> hwmon: (nct6683) Fix incorrect struct cast in show_pwm() and store_pwm() Guenter Roeck <linux(a)roeck-us.net> hwmon: (lm87) Fix drvdata type confusion in vrm_show() and vrm_store() Guenter Roeck <linux(a)roeck-us.net> hwmon: (hp-wmi-sensors) Fix unbounded loops in scale_numeric_sensor() Guenter Roeck <linux(a)roeck-us.net> hwmon: (hp-wmi-sensors) Avoid global struct mutation Guenter Roeck <linux(a)roeck-us.net> hwmon: (asus_wmi_sensors) Avoid global struct mutation Guenter Roeck <linux(a)roeck-us.net> hwmon: (aquacomputer_d5next) Check maxcollection when probing AQUAERO devices Javier Carrasco <javier.carrasco.cruz(a)gmail.com> hwmon: chipcap2: do not discard pending alarms on disable Javier Carrasco <javier.carrasco.cruz(a)gmail.com> hwmon: chipcap2: balance regulator state Javier Carrasco <javier.carrasco.cruz(a)gmail.com> hwmon: chipcap2: enable IRQ processing when regulator is already enabled Javier Carrasco <javier.carrasco.cruz(a)gmail.com> hwmon: chipcap2: defer probe when IRQs are unavailable Javier Carrasco <javier.carrasco.cruz(a)gmail.com> hwmon: chipcap2: fix be16 handling Javier Carrasco <javier.carrasco.cruz(a)gmail.com> hwmon: chipcap2: fix off-by-one in command mode retry loop Javier Carrasco <javier.carrasco.cruz(a)gmail.com> hwmon: chipcap2: fix command error diagnostics Jiale Yao <yaojiale02(a)163.com> hwmon: (aquacomputer_d5next) reject short status reports Baek Kyu, Kim <pocj8ur4in(a)gmail.com> hwmon: (corsair-cpro) Cache fan target only after a successful command Xia Yan <yana06070(a)163.com> veth: keep carrier off when resizing channels with a down peer Fang Xieyan <fangxy(a)xiaopeng.com> vringh: reject empty / undersized indirect descriptor tables Fang Xieyan <fangxy(a)xiaopeng.com> vringh: bound top-level re-entry into indirect tables Tal Zussman <tz2294(a)columbia.edu> vhost-vdpa: fix pinned page leak in vhost_vdpa_pa_map() error path Qihang <q.h.hack.winter(a)gmail.com> cipso: fix optlen corruption in cipso_v4_delopt() Jose Maria Casanova Crespo <jmcasanova(a)igalia.com> drm/v3d: Initialize timedout_batches when running a CSD job Daejun Park <daejun7.park(a)samsung.com> xfs: don't skip free extents of the longest length in a whole-AG FITRIM Daejun Park <daejun7.park(a)samsung.com> xfs: don't skip free extents in later batches of a whole-AG FITRIM Hungyu Lin <dennylin0707(a)gmail.com> ext2: preserve completed DIO bytes when buffered fallback fails David Hildenbrand (Arm) <david(a)kernel.org> mm/filemap: finish fault cleanup before dropping the fault lock Josef Bacik <josef(a)toxicpanda.com> mm/filemap: don't lose a folio lock wakeup to a signal Josef Bacik <josef(a)toxicpanda.com> mm/memfd: make f_pos accesses atomic Josef Bacik <josef(a)toxicpanda.com> mm/mglru: don't use stack pointers when walking PUD and PMD tables David Hildenbrand (Arm) <david(a)kernel.org> mm/shmem: fix truncation of files containing only swapin-error markers David Hildenbrand (Arm) <david(a)kernel.org> mm/shmem: fix truncate loop after boundary swapin failure David Hildenbrand (Arm) <david(a)kernel.org> mm/shmem: fix truncate hang in large swap entry David Hildenbrand (Arm) <david(a)kernel.org> mm/shmem: discard whole new large folios on fallocate rollback Chris Mason <mason(a)kernel.org> mm/shmem: preserve data in clean folios when splitting fails Chris Mason <mason(a)kernel.org> mm/shmem: stop retrying folios that cannot be split Josef Bacik <josef(a)toxicpanda.com> tmpfs: preserve explicitly disabled quota limits Josef Bacik <josef(a)toxicpanda.com> tmpfs: keep the quota soft limits of an unused id Chris Mason <mason(a)kernel.org> mm/mempolicy: charge shared policy nodes Ian Bridges <icb(a)fastmail.org> ksmbd: grant a POSIX ACL group entry only to the group's members Federico Musto <federico(a)rimpianto.com> net: atl1c: drop oversized RX frames instead of panicking Lu Yao <yaolu(a)kylinos.cn> drm/i915/gem: Reset err for each fence entry Jouni Högander <jouni.hogander(a)intel.com> drm/i915/psr: Don't clip plane state destination rectangle Ian Bridges <icb(a)fastmail.org> ksmbd: require DELETE access for delete-on-close opens Jamal Hadi Salim <jhs(a)mojatatu.com> bpf: Fix skb_pull() BUG in __bpf_redirect_neigh() YuanZhe Liu <25031212351(a)stu.xidian.edu.cn> ALSA: hwdep: Serialize DSP load requests YuanZhe Liu <25031212351(a)stu.xidian.edu.cn> ALSA: usx2y: Initialize idle URBs before submitting streams YuanZhe Liu <25031212351(a)stu.xidian.edu.cn> ALSA: us122l: Fix NULL dereference at hwdep open and release YuanZhe Liu <25031212351(a)stu.xidian.edu.cn> ALSA: us122l: Add missing NULL check in usb_stream_hwdep_mmap() Evanshenf <archwse(a)gmail.com> drm/loongson: Handle buffer mapping failures when clearing a BO Evanshenf <archwse(a)gmail.com> drm/loongson: Fix double free on BO initialization failure Evanshenf <archwse(a)gmail.com> drm/loongson: Fix framebuffer selection in async cursor updates Shao Mingyin <shao.mingyin(a)zte.com.cn> scsi: target: tcmu: Fix divide-by-zero in data_pages_per_blk store Yuanhe Shu <xiangzao(a)linux.alibaba.com> scsi: target: Verify the iSCSI ISID is null-terminated Yingjie Wang <x-professor(a)outlook.com> scsi: bsg: Report synchronous data copyback failures Yu Zhang <yuz08559(a)gmail.com> ptp: fix use-after-free in extts_fifo_show() reading tsevqs unlocked guolingxing <guolingxing(a)tju.edu.cn> btrfs: sysfs: restore NOFS context on early return in btrfs_sysfs_add_block_group_type() Masafumi Suzuki <shengshilingmu97(a)gmail.com> sctp: account for chunk padding in sctp_init_cause() Lucas Tanure <lucas.tanure(a)neat.no> drm/vc4: hdmi: enable scrambling before the TMDS clock starts Lucas Tanure <lucas.tanure(a)neat.no> drm/vc4: hdmi: always cancel the scrambling work synchronously Zhou Qiuyue <n0ps1edzz(a)gmail.com> ipv6: raw: fix use-after-free in rawv6_send_hdrinc() Franck Baur <franck.baur.67(a)gmail.com> net: jme: keep RX MAC clock enabled for WoL Sven Eckelmann <sven(a)narfation.org> batman-adv: stop originator purge worker before freeing TT Sven Eckelmann <sven(a)narfation.org> batman-adv: fix skb leak when hard_iface is being released Sven Eckelmann <sven(a)narfation.org> batman-adv: dat: initialize orig_node of unfilled candidate slots Kyle Zeng <kylebot(a)openai.com> batman-adv: mcast: validate tracker padding before forwarding Yuanfu Xie <yuanfuxie(a)stu.pku.edu.cn> 9p: don't decrement a server-owned zero nlink Yehyeong Lee <yhlee(a)isslab.korea.ac.kr> 9p/xen: validate the response size from the backend Andrew Luebke <andrew.luebke(a)gmail.com> scsi: aic79xx: Fix NULL pointer dereference in device reset Imre Kaloz <kaloz(a)kernel.org> scsi: aic7xxx: Use default settings on the SGI O2 onboard controllers Toke Høiland-Jørgensen <toke(a)toke.dk> wifi: mac80211: reinstate IEEE80211_TX_CTL_AMPDU flag in ieee80211_tx_prep_agg() Maíra Canal <mcanal(a)igalia.com> drm/vc4: Publish the output fence outside of job_lock Zijing Yin <yzjaurora(a)gmail.com> wifi: cfg80211: fix out-of-bounds read in valid_rule() Alex Kazinsky <a.kazinsky(a)ideco.ru> wifi: rsi: Skip TX aggregation setup for non-QoS frames Weigang He <geoffreyhe2(a)gmail.com> wifi: mac80211: reload TDLS header pointer after skb_linearize() André Draszik <andre.draszik(a)linaro.org> drm/drm_crtc: ensure dma_fence_ops remain valid during device unbind Devin Wittmayer <lucid_duck(a)justthetip.ca> drm/panic: Fix kmsg screen hang on a long log line Sabrina Dubroca <sd(a)queasysnail.net> xfrm: espintcp: reorder operations within espintcp_init_sk Qihang <q.h.hack.winter(a)gmail.com> xfrm: interface: validate the IP header on xmit Hyungjung Joo <jhj140711(a)gmail.com> net/9p/usbg: clear stale client pointer on close Michael Grzeschik <mgr(a)kernel.org> net/9p/usbg: remove bogus context initialization in alloc_requests Michael Grzeschik <mgr(a)kernel.org> net/9p/usbg: fix out_req buffer leak in disable_usb9pfs Michael Grzeschik <mgr(a)kernel.org> net/9p/usbg: call disable_usb9pfs() from usb9pfs_disable() Michael Grzeschik <mgr(a)kernel.org> net/9p/usbg: always reset completion when disconnecting Michael Grzeschik <mgr(a)kernel.org> net/9p/usbg: set client to Disconnected on usb9pfs_disable Michael Grzeschik <mgr(a)kernel.org> net/9p/usbg: also disable endpoints on p9_usbg_close Yizhou Zhao <zhaoyz24(a)mails.tsinghua.edu.cn> net/9p/usbg: Fix use-after-free in disable_usb9pfs() Zhao Zhang <zzhan461(a)ucr.edu> 9p: fix caches_show() out-of-bounds write Yifei Gao <gyf161023(a)gmail.com> 9p/xen: fix refcount leak in p9_xen_response() on wrong tag Michael Bommarito <michael.bommarito(a)gmail.com> 9p/trans_virtio: reject mount tags longer than NAME_MAX at probe Chengfeng Ye <nicoyip.dev(a)gmail.com> net/9p/usbg: clear stale request context after abort Chengfeng Ye <nicoyip.dev(a)gmail.com> xfrm: retry inexact policy lookup after node reinsertion Yizhou Zhao <zhaoyz24(a)mails.tsinghua.edu.cn> net/9p/usbg: fix prefix matching in device lookup Noam D. Eliyahu <noam.d.eliyahu(a)gmail.com> tg3: Invert restart quirk logic to restrict SNP power-down bypass Zhiling Zou <zhilinz(a)nebusec.ai> ipmr: drop packets with unknown ingress VIF Peng Wang <peng_wang(a)linux.alibaba.com> tick/nohz: Reevaluate the tick for kicks flushed outside hardirq Hungyu Lin <dennylin0707(a)gmail.com> posix-timers: Accept NULL clock_getres() output in stubs Yingjie Wang <x-professor(a)outlook.com> scsi: handle out-of-range SG_SET_TIMEOUT values Stanley Jhu <stanleyjhu(a)google.com> scsi: ufs: bsg: Reject UIC commands with a non-zero result byte Stanley Jhu <stanleyjhu(a)google.com> scsi: ufs: bsg: Validate request_len before accessing request Daeho Jeong <daehojeong(a)google.com> f2fs: don't use truncate_inode_pages_final() on live inodes Sahaj Chaudhari <sahaj123.sc(a)gmail.com> gpio: pca953x: Preserve wakeup accounting on parent IRQ failure Ruide Cao <caoruide123(a)gmail.com> mptcp: fix MP_CAPABLE token migration when cloning reqsk Henry Martin <bsdhenrymartin(a)gmail.com> rds: fix out-of-bounds conn_path walks via handshake exthdrs Yun Zhou <yun.zhou(a)windriver.com> net: erspan: set lltx to avoid sch_direct_xmit deadlock Donggeun Yoo <donggeunyoo.kernel(a)gmail.com> tracing: Add the bucket size to expr_field_str() Bui Viet Dung <dungvn2345(a)gmail.com> Bluetooth: selftest: Pin module for selftest debugfs file operations Guangshuo Li <lgs201920130244(a)gmail.com> mfd: ab8500: Fix child device leaks on probe failure Diego Oliva <diego(a)bynar.io> smb: client: fix OOB read in the SMB_FIND_FILE_UNIX name scan Ridong Chen <chenridong(a)xiaomi.com> mm/page_counter: avoid integer overflow in effective_protection() Jiayuan Chen <jiayuan.chen(a)linux.dev> mm/memcontrol: fix data-race on reading jiffies_64 Benjamin Coddington <ben.coddington(a)hammerspace.com> NFSv4/pnfs: Free the netid when draining a data-server address list Kazuki Hanai <hnkz.64(a)gmail.com> media: mediatek: jpeg: Avoid context access after job finish Rupesh Majhi <zoone.rupert(a)gmail.com> iio: pressure: dps310: fix CFG_REG bit definitions Ridham Khurana <khurana.ridham222(a)gmail.com> hwmon: (lm70) Fix rounding of negative temperatures Ruoyu Wang <ruoyuw560(a)gmail.com> media: adv748x: Fix endpoint reference leaks on probe failure Pengpeng Hou <pengpeng(a)iscas.ac.cn> media: require two-byte Cypress type 04 records Balakrishnan Sambath <balakrishnan.s(a)microchip.com> media: microchip-isc: fix WB offset and gain register field masking Ard Biesheuvel <ardb(a)kernel.org> efi/libstub: arm64: Don't use the platform register x18 Bernard Pidoux <bernard.f6bvp(a)gmail.com> rose: give the sysctl timer limits in milliseconds Bernard Pidoux <bernard.f6bvp(a)gmail.com> rose: swap the AX.25 connection of a neighbour under a lock Bernard Pidoux <bernard.f6bvp(a)gmail.com> rose: drop the neighbour reference once when a cleared socket is closed Bernard Pidoux <bernard.f6bvp(a)gmail.com> rose: report a timed out call to connect() Bernard Pidoux <bernard.f6bvp(a)gmail.com> rose: hold the socket a received frame is delivered to Bernard Pidoux <bernard.f6bvp(a)gmail.com> rose: hold the listener while a Call Request is queued on it Bernard Pidoux <bernard.f6bvp(a)gmail.com> netrom: only update the BPQ extension flag on circuit set-up frames Bernard Pidoux <bernard.f6bvp(a)gmail.com> netrom: disconnect sockets under their lock when a device goes down Bernard Pidoux <bernard.f6bvp(a)gmail.com> netrom: don't send part of a message that cannot be fragmented whole Bernard Pidoux <bernard.f6bvp(a)gmail.com> netrom: check the window size given by the peer Bernard Pidoux <bernard.f6bvp(a)gmail.com> netrom: drop a frame received with a TTL of 0 Bernard Pidoux <bernard.f6bvp(a)gmail.com> netrom: keep the selected route when a route of a node is removed Bernard Pidoux <bernard.f6bvp(a)gmail.com> netrom: return the peer node in the address given by recvmsg() Bernard Pidoux <bernard.f6bvp(a)gmail.com> netrom: don't give the same circuit ID to two sockets Bernard Pidoux <bernard.f6bvp(a)gmail.com> netrom: give a frame back intact when it cannot be delivered Bernard Pidoux <bernard.f6bvp(a)gmail.com> netrom: use the more flag of each frame taken from the resequencing queue Bernard Pidoux <bernard.f6bvp(a)gmail.com> netrom: don't leak frames in nr_route_frame() Bernard Pidoux <bernard.f6bvp(a)gmail.com> netrom: don't convert the maximum number of tries to jiffies Bernard Pidoux <bernard.f6bvp(a)gmail.com> ax25: don't let connect() find its own socket when calling the same station Bernard Pidoux <bernard.f6bvp(a)gmail.com> ax25: let a socket connect again after a failed or ended connection Bernard Pidoux <bernard.f6bvp(a)gmail.com> ax25: keep the window below 8 when a socket goes back to modulo 8 Bernard Pidoux <bernard.f6bvp(a)gmail.com> ax25: make 16 the smallest maximum_packet_length of a port Bernard Pidoux <bernard.f6bvp(a)gmail.com> ax25: don't leave half a message on a connection when fragmenting fails Bernard Pidoux <bernard.f6bvp(a)gmail.com> ax25: free the copy of an IP packet that ax25_send_frame() turned down Bernard Pidoux <bernard.f6bvp(a)gmail.com> ax25: don't test the socket flags of a connection that has no socket Bernard Pidoux <bernard.f6bvp(a)gmail.com> ax25: put an incoming connection on the listener's queue once it is set up Bernard Pidoux <bernard.f6bvp(a)gmail.com> ax25: free the old digipeater path of a listed socket under ax25_list_lock Bernard Pidoux <bernard.f6bvp(a)gmail.com> ax25: don't copy an uninitialised address to recvmsg()'s caller Bernard Pidoux <bernard.f6bvp(a)gmail.com> ax25: don't take a reference on a gone device in ax25_accept() Bernard Pidoux <bernard.f6bvp(a)gmail.com> ax25: don't build a frame header from an uninitialised digipeater list Bernard Pidoux <bernard.f6bvp(a)gmail.com> 6pack: restart the transmit queue when the interface is opened Bernard Pidoux <bernard.f6bvp(a)gmail.com> mkiss: restart the transmit queue when the interface is opened Bernard Pidoux <bernard.f6bvp(a)gmail.com> ax25: free a closed socket when its device goes down Bernard Pidoux <bernard.f6bvp(a)gmail.com> ax25: don't create a second connection for a link on an incoming SABM Bernard Pidoux <bernard.f6bvp(a)gmail.com> rose: don't give the same LCI to two calls placed at the same time Bernard Pidoux <bernard.f6bvp(a)gmail.com> netrom: ignore a BPQ transport timeout below the sysctl minimum Bernard Pidoux <bernard.f6bvp(a)gmail.com> rose: arm the neighbour timers with mod_timer() Bernard Pidoux <bernard.f6bvp(a)gmail.com> bpqether: fix truncated /proc/net/bpqether on partial reads Bernard Pidoux <bernard.f6bvp(a)gmail.com> bpqether: leave the Ethernet device's queue and counters alone Bernard Pidoux <bernard.f6bvp(a)gmail.com> mkiss: don't use a tty write error as a byte count Bernard Pidoux <bernard.f6bvp(a)gmail.com> mkiss: size the frame buffers for worst-case KISS escaping Ricardo Ribalda <ribalda(a)chromium.org> media: uvcvideo: Force UVC version for Avermedia GC515 Ricardo Ribalda <ribalda(a)chromium.org> media: uvcvideo: Add autosuspend quirk for AVerMedia Live Gamer HD 2 Stanislaw Gruszka <stf_xl(a)wp.pl> wifi: mac80211: queue frames while off-channel Denis Pauk <pauk.denis(a)gmail.com> hwmon: (nct6775) Add ASUS X870/W480 to WMI monitoring list Maximilian Luz <luzmaximilian(a)gmail.com> hwmon: (nct6775) Add ASUS ROG STRIX X870E-H GAMING WIFI7 Yi Cong <yicong(a)kylinos.cn> wifi: mt76: mt792x: fix negative errno truncation in offload capability SJ Park <sj(a)kernel.org> mm/damon/core: handle uninitialized damos_quota_goal->last_psi_total Marek Vasut <marek.vasut+renesas(a)mailbox.org> PCI: rcar-gen4: Limit Max_Read_Request_Size to 256 Bytes Frank Li <Frank.Li(a)nxp.com> PCI: Add enable_device() and disable_device() callbacks for bridges Christian Borntraeger <borntraeger(a)linux.ibm.com> s390/vmcp: Initialize full session info to zero Jeff Layton <jlayton(a)kernel.org> nfsd: shorten extack string returned with dodgy listener Rosen Penev <rosenp(a)gmail.com> net: bgmac: enable interrupts only after NAPI is ready Rosen Penev <rosenp(a)gmail.com> mtd: rawnand: ndfc: use devm_platform_ioremap_resource() Rosen Penev <rosenp(a)gmail.com> mtd: rawnand: ndfc: fix gcc uninitialized var Arnd Bergmann <arnd(a)arndb.de> mtd: rawnand: ndfc: add CONFIG_OF dependency Rosen Penev <rosenp(a)gmail.com> mtd: rawnand: ndfc: use ioread32be/iowrite32be and allow COMPILE_TEST Darrick J. Wong <djwong(a)kernel.org> xfs: reduce new btree slack factor if free space is negative SJ Park <sj(a)kernel.org> mm/damon/core: remove unreachable damos charge_{target,addr}_from SJ Park <sj(a)kernel.org> mm/damon/core: filter out damos address filter-split failed region SJ Park <sj(a)kernel.org> mm/damon/paddr: respect folio end for DAMOS actions except STAT SJ Park <sj(a)kernel.org> mm/damon/core: skip applying scheme if region split for quota fails Eric Biggers <ebiggers(a)kernel.org> raid6: add missing vzeroupper to AVX2 code Diego Oliva <diego(a)bynar.io> smb: client: reject FIND data areas that run past the received response Darrick J. Wong <djwong(a)kernel.org> xfs: reattach dquots after changing inode ids Darrick J. Wong <djwong(a)kernel.org> xfs: don't try to repair rtsummary if the summary file isn't computed Darrick J. Wong <djwong(a)kernel.org> xfs: forcibly reset quota timers when upgrading to bigtime during repair Darrick J. Wong <djwong(a)kernel.org> xfs: reinitialize dquot block if non-first dquot can't load Darrick J. Wong <djwong(a)kernel.org> xfs: complain loudly when dirtree checker finds broken links Darrick J. Wong <djwong(a)kernel.org> xfs: don't queue rmap update twice when reaping a fork Darrick J. Wong <djwong(a)kernel.org> xfs: rescan the AGs if incore delalloc counter is negative Darrick J. Wong <djwong(a)kernel.org> xfs: mark cow extents bad if there's no rmap mapping for them Darrick J. Wong <djwong(a)kernel.org> xfs: flag excessive delalloc rt extents as corruption Qingfang Deng <qingfang.deng(a)linux.dev> pppoe: delete session hash entries by pointer match Igor Velkov <iav(a)iav.lv> genirq/kexec: Do not take the bus lock of an interrupt chip on the crash path Liz Fong-Jones <lizf(a)honeycomb.io> writeback: keep cleanup_offline_cgwb()'s scan out of syncs Christian Loehle <christian.loehle(a)arm.com> ACPI: CPPC: Accept requests to retain immutable autonomous selection Christian Loehle <christian.loehle(a)arm.com> ACPI: CPPC: Propagate errors from cross-CPU FFH calls Christian Loehle <christian.loehle(a)arm.com> ACPI: CPPC: Validate FFH register fields before hardware access Ping-Ke Shih <pkshih(a)realtek.com> wifi: rtw88: TX report with long timeout for non-PCIE devices Eric Biggers <ebiggers(a)kernel.org> raid6: add missing vzeroupper to AVX-512 code Eric Biggers <ebiggers(a)kernel.org> xor: add missing vzeroupper to AVX code Eric Biggers <ebiggers(a)kernel.org> fsverity: Explicitly require FMODE_READ to retrieve hashes Yuansheng Yang <0xbeac(a)gmail.com> io_uring/rsrc: hold uring_lock across index-alloc put_user Jens Axboe <axboe(a)kernel.dk> io_uring/poll: don't poll a writer for urgent data Jens Axboe <axboe(a)kernel.dk> io_uring/poll: don't poll a writer for a read side hangup Shang En Sim <sim(a)shangen.org> io_uring/poll: cancel all matching requests in one pass Shang En Sim <sim(a)shangen.org> io_uring/cancel: count all requests that a CANCEL_ALL cancels Shakeel Butt <shakeel.butt(a)linux.dev> io_uring/sqpoll: do the return-to-userspace work in the SQPOLL thread Shuai Liu <847807867(a)qq.com> io_uring/sqpoll: don't set IO_SQ_THREAD_SHOULD_STOP on thread exit Jens Axboe <axboe(a)kernel.dk> io_uring/sqpoll: don't attach to a thread that is canceling Chris Mason <mason(a)kernel.org> io_uring/cancel: drop sqd->lock while SQPOLL waits Til Kaiser <mail(a)tk154.de> mlxsw: Initialize register query payloads Maciej W. Rozycki <macro(a)orcam.me.uk> PCI: Skip Target Speed quirk on clamped ports with no link Seiji Nishikawa <snishika(a)redhat.com> nvme-tcp: fix io_work priority inversion when send_mutex is held Nicolai Buchwitz <nb(a)tipi-net.de> serial: amba-pl011: keep transmitter enabled when disabling RS485 Gael Blivet <gael.blivet(a)gmail.com> ksmbd: look up stream size by exact xattr name Shivank Garg <shivankg(a)amd.com> KVM: guest_memfd: take the invalidate lock when unbinding a dying file Keqiang Duan <duankeqiangcym(a)gmail.com> KVM: x86: Clear hardware HLT state when userspace makes a vCPU not-halted Sean Christopherson <seanjc(a)google.com> KVM: Only bind memslot to guest_memfd instance for CREATE operations Sean Christopherson <seanjc(a)google.com> KVM: Harden and prepare for modifying existing guest_memfd memslots Sean Christopherson <seanjc(a)google.com> KVM: nSVM: Reject KVM_SET_NESTED_STATE if L1 has EFER.LMA=1 && EFER.LME=0 David Howells <dhowells(a)redhat.com> afs: Fix afs to abort the rxrpc call on send error Chuck Lever <chuck.lever(a)oracle.com> NFSD: Map flex file layout IDs through the request's user namespace Chuck Lever <chuck.lever(a)oracle.com> NFSD: Complete a cld upcall when copying its reply fails Chuck Lever <chuck.lever(a)oracle.com> NFSD: Complete a cld upcall when the daemon closes the pipe Chuck Lever <chuck.lever(a)oracle.com> NFSD: Move the cld upcall message out of the caller's stack frame Jeff Layton <jlayton(a)kernel.org> nfsd: clear CALLBACK_RUNNING on failed delegation recall queue Chuck Lever <chuck.lever(a)oracle.com> NFSD: Send a meaningful CB_RECALL_ANY keep count Chuck Lever <chuck.lever(a)oracle.com> NFSD: Count the delegations held by each client Jeff Layton <jlayton(a)kernel.org> nfsd: defer setting NFSD4_CALLBACK_RUNNING in deleg_reaper Jeff Layton <jlayton(a)kernel.org> nfsd: eliminate cl_ra_cblist and NFSD4_CLIENT_CB_RECALL_ANY Jeff Layton <jlayton(a)kernel.org> nfsd: prevent callback tasks running concurrently Jeff Layton <jlayton(a)kernel.org> NFSD: stop registering with rpcbind after a failure in listener_set Jeff Layton <jlayton(a)kernel.org> SUNRPC: report local rpcbind calls that get no answer Jeff Layton <jlayton(a)kernel.org> NFSD: report listener creation failures through extack Jeff Layton <jlayton(a)kernel.org> nfsd: don't offer flexfiles layouts when NFSv3 isn't being served Chuck Lever <chuck.lever(a)oracle.com> NFSD: map fh_verify() status codes for NFS_ACLv2 replies Ratnaker Gautam <ratnaker.gautam(a)kuleuven.be> smb: client: bound POSIX lock data area by response length Benjamin Coddington <ben.coddington(a)hammerspace.com> NFSv4/pnfs: bound the CB_NOTIFY_DEVICEID array count before allocating Darrick J. Wong <djwong(a)kernel.org> xfs: improve dirent bounds checking in scrub and repair Darrick J. Wong <djwong(a)kernel.org> xfs: refactor directory data block walking loops in scrub Darrick J. Wong <djwong(a)kernel.org> xfs: check for buffer overruns when examining local/remote xattr entries Darrick J. Wong <djwong(a)kernel.org> xfs: break out xattr entry checks into separate functions Ratnaker Gautam <ratnaker.gautam(a)kuleuven.be> smb: client: validate SMB1 EA list bounds before parsing Zhaoyang Huang <zhaoyang.huang(a)unisoc.com> mm: remove '!root_reclaim' checking in should_abort_scan() Paulo Alcantara <pc(a)manguebit.org> smb: client: require stable pages for SMB compression Abdifatah Suruur <suruurism(a)gmail.com> smb: client: reject short SESSION_SETUP responses Diego Oliva <diego(a)bynar.io> smb: client: fix OOB read of the resume name sent in TRANS2_FIND_NEXT2 Eduard Zateev <hackerowskiy(a)gmail.com> smb: client: hold server info until cifsd exits Jinwang Li <jinwang.li(a)oss.qualcomm.com> Bluetooth: L2CAP: Ignore connection responses with wrong ident Siwei Zhang <oss(a)fourdim.xyz> Bluetooth: L2CAP: Only accept connection responses to outstanding requests Siwei Zhang <oss(a)fourdim.xyz> Bluetooth: L2CAP: Reject signalling responses in invalid states Eric Biggers <ebiggers(a)kernel.org> fsverity: Tell LSMs about signature only after verity is enabled Yongjian Wang <echoowall(a)gmail.com> Revert "net: advertise TCP MSS from the configured MTU, not the learned PMTU" Andrew Stellman <astellman(a)stellman-greene.com> nvmet-rdma: fix out-of-bounds write in nvmet_rdma_map_sgl_inline() Kamil Sawicki <user148783812897(a)gmail.com> net: limit priority VLAN untag depth Chris Mason <mason(a)kernel.org> backing-file: always end a queued write Peter Ujfalusi <peter.ujfalusi(a)linux.intel.com> ALSA: x86: hdmi: fix chmap array missing terminator entry David Howells <dhowells(a)redhat.com> rxrpc: Fix update of call->tx_pending without holding lock Abdifatah Suruur <suruurism(a)gmail.com> smb: client: validate the data area in SMB2_read() ------------- Diffstat: Documentation/admin-guide/kernel-parameters.txt | 10 + Documentation/filesystems/fsverity.rst | 3 + Documentation/filesystems/overlayfs.rst | 3 +- Documentation/hwmon/coretemp.rst | 3 + Makefile | 4 +- arch/arm64/boot/dts/qcom/ipq9574.dtsi | 2 +- arch/arm64/boot/dts/ti/k3-am62-lp-sk.dts | 8 + arch/arm64/boot/dts/ti/k3-am625-sk-common.dtsi | 304 +++++++ arch/arm64/boot/dts/ti/k3-am625-sk.dts | 308 +------ arch/arm64/boot/dts/ti/k3-am62x-sk-common.dtsi | 8 - arch/arm64/include/asm/sdei.h | 3 +- arch/arm64/include/asm/suspend.h | 2 +- arch/arm64/kernel/entry-common.c | 40 +- arch/arm64/kernel/machine_kexec_file.c | 2 + arch/arm64/kernel/sdei.c | 59 +- arch/arm64/kernel/topology.c | 13 +- arch/arm64/kvm/arch_timer.c | 16 +- arch/arm64/kvm/arm.c | 17 +- arch/arm64/kvm/hyp/exception.c | 5 +- arch/arm64/kvm/hyp/include/hyp/adjust_pc.h | 28 + arch/arm64/kvm/hyp/include/nvhe/fixed_config.h | 3 +- arch/arm64/kvm/hyp/include/nvhe/pkvm.h | 2 + arch/arm64/kvm/hyp/nvhe/pkvm.c | 42 + arch/arm64/kvm/hyp/nvhe/sys_regs.c | 9 + arch/arm64/kvm/hyp/vhe/switch.c | 3 +- arch/arm64/kvm/ptdump.c | 50 +- arch/arm64/kvm/vgic/vgic-mmio-v3.c | 10 + arch/arm64/mm/mmap.c | 4 +- arch/arm64/mm/proc.S | 8 + arch/loongarch/include/asm/hw_breakpoint.h | 4 +- arch/loongarch/include/asm/loongarch.h | 3 + arch/loongarch/include/asm/processor.h | 1 + arch/loongarch/include/asm/switch_to.h | 2 +- arch/loongarch/kernel/hw_breakpoint.c | 39 +- arch/loongarch/kernel/numa.c | 8 +- arch/m68k/68000/entry.S | 24 +- arch/m68k/coldfire/entry.S | 3 +- arch/microblaze/include/asm/entry.h | 13 + arch/microblaze/include/asm/processor.h | 2 +- arch/microblaze/kernel/entry.S | 329 ++++---- arch/microblaze/kernel/hw_exception_handler.S | 5 + arch/microblaze/kernel/process.c | 5 +- arch/mips/crypto/Kconfig | 6 +- arch/mips/mm/cex-gen.S | 16 + arch/mips/pci/ops-mace.c | 26 +- arch/mips/pci/pci-ip32.c | 9 +- arch/mips/sgi-ip32/ip32-irq.c | 45 +- arch/openrisc/kernel/or32_ksyms.c | 1 + arch/powerpc/net/bpf_jit.h | 7 + arch/powerpc/net/bpf_jit_comp.c | 35 +- arch/powerpc/platforms/pseries/iommu.c | 67 +- arch/s390/pci/pci_irq.c | 26 +- arch/x86/include/asm/cpufeatures.h | 5 + arch/x86/include/asm/kvm-x86-ops.h | 1 + arch/x86/include/asm/kvm_host.h | 7 + arch/x86/include/asm/vmware.h | 24 +- arch/x86/include/asm/xor_avx.h | 4 + arch/x86/kernel/acpi/cppc.c | 15 + arch/x86/kernel/cpu/amd.c | 6 + arch/x86/kernel/nmi.c | 8 + arch/x86/kernel/x86_init.c | 2 +- arch/x86/kvm/mmu/mmu.c | 10 + arch/x86/kvm/mmu/paging_tmpl.h | 11 +- arch/x86/kvm/svm/nested.c | 1 + arch/x86/kvm/vmx/main.c | 1 + arch/x86/kvm/vmx/nested.c | 1 + arch/x86/kvm/vmx/vmx.c | 2 +- arch/x86/kvm/vmx/x86_ops.h | 1 + arch/x86/kvm/x86.c | 46 +- arch/x86/mm/mem_encrypt_identity.c | 2 +- block/blk-iocost.c | 3 + block/blk-mq.c | 14 +- block/bsg.c | 5 +- block/ioctl.c | 4 +- crypto/ecc.c | 33 +- crypto/testmgr.c | 10 +- crypto/testmgr.h | 339 +++++++- drivers/acpi/apei/ghes.c | 6 +- drivers/acpi/cppc_acpi.c | 58 +- drivers/acpi/riscv/cppc.c | 26 +- drivers/ata/Kconfig | 7 - drivers/ata/Makefile | 1 - drivers/ata/ahci.c | 6 +- drivers/ata/ahci_da850.c | 6 +- drivers/ata/ahci_dm816.c | 2 +- drivers/ata/ahci_imx.c | 13 +- drivers/ata/ahci_qoriq.c | 4 +- drivers/ata/ahci_xgene.c | 8 +- drivers/ata/ata_piix.c | 4 +- drivers/ata/libahci.c | 10 +- drivers/ata/libata-core.c | 4 +- drivers/ata/libata-eh.c | 80 +- drivers/ata/libata-pmp.c | 40 +- drivers/ata/libata-sata.c | 2 +- drivers/ata/libata-scsi.c | 25 + drivers/ata/libata-sff.c | 18 +- drivers/ata/libata.h | 11 +- drivers/ata/pata_acpi.c | 2 +- drivers/ata/pata_ali.c | 10 +- drivers/ata/pata_amd.c | 4 +- drivers/ata/pata_artop.c | 4 +- drivers/ata/pata_atiixp.c | 2 +- drivers/ata/pata_efar.c | 2 +- drivers/ata/pata_ep93xx.c | 4 +- drivers/ata/pata_hpt366.c | 2 +- drivers/ata/pata_hpt37x.c | 4 +- drivers/ata/pata_hpt3x2n.c | 2 +- drivers/ata/pata_icside.c | 2 +- drivers/ata/pata_it8213.c | 2 +- drivers/ata/pata_jmicron.c | 2 +- drivers/ata/pata_marvell.c | 2 +- drivers/ata/pata_mpiix.c | 2 +- drivers/ata/pata_ns87410.c | 2 +- drivers/ata/pata_octeon_cf.c | 2 +- drivers/ata/pata_oldpiix.c | 2 +- drivers/ata/pata_opti.c | 2 +- drivers/ata/pata_optidma.c | 2 +- drivers/ata/pata_parport/pata_parport.c | 4 +- drivers/ata/pata_pdc2027x.c | 2 +- drivers/ata/pata_rdc.c | 2 +- drivers/ata/pata_sis.c | 2 +- drivers/ata/pata_sl82c105.c | 2 +- drivers/ata/pata_triflex.c | 2 +- drivers/ata/pata_via.c | 2 +- drivers/ata/pdc_adma.c | 2 +- drivers/ata/sata_dwc_460ex.c | 2 +- drivers/ata/sata_fsl.c | 6 +- drivers/ata/sata_highbank.c | 2 +- drivers/ata/sata_inic162x.c | 902 --------------------- drivers/ata/sata_mv.c | 10 +- drivers/ata/sata_nv.c | 2 +- drivers/ata/sata_promise.c | 4 +- drivers/ata/sata_qstor.c | 4 +- drivers/ata/sata_rcar.c | 2 +- drivers/ata/sata_sil24.c | 8 +- drivers/ata/sata_svw.c | 4 +- drivers/ata/sata_sx4.c | 2 +- drivers/ata/sata_uli.c | 2 +- drivers/ata/sata_via.c | 4 +- drivers/block/amiflop.c | 69 +- drivers/block/ublk_drv.c | 17 +- drivers/char/hw_random/virtio-rng.c | 7 + drivers/char/tpm/tpm2-cmd.c | 3 +- drivers/clk/nuvoton/clk-ma35d1.c | 7 +- drivers/cpufreq/amd-pstate.c | 23 +- drivers/crypto/omap-aes.c | 15 +- drivers/crypto/omap-aes.h | 2 +- drivers/crypto/omap-des.c | 19 +- drivers/crypto/omap-sham.c | 43 +- drivers/dma/qcom/bam_dma.c | 10 +- drivers/firmware/efi/libstub/Makefile | 2 +- drivers/gpio/gpio-pca953x.c | 7 +- drivers/gpio/gpiolib-cdev.c | 5 - drivers/gpu/drm/amd/amdgpu/amdgpu_amdkfd.h | 1 + drivers/gpu/drm/amd/amdgpu/amdgpu_amdkfd_gpuvm.c | 14 + drivers/gpu/drm/amd/amdgpu/amdgpu_cs.c | 52 +- drivers/gpu/drm/amd/amdgpu/amdgpu_device.c | 14 +- drivers/gpu/drm/amd/amdgpu/amdgpu_drv.c | 14 - drivers/gpu/drm/amd/amdgpu/amdgpu_sync.c | 4 +- drivers/gpu/drm/amd/amdgpu/amdgpu_vm_sdma.c | 1 - drivers/gpu/drm/amd/amdgpu/dce_v10_0.c | 5 +- drivers/gpu/drm/amd/amdgpu/dce_v6_0.c | 5 +- drivers/gpu/drm/amd/amdgpu/dce_v8_0.c | 5 +- drivers/gpu/drm/amd/amdgpu/gfx_v12_0.c | 2 + drivers/gpu/drm/amd/amdgpu/gmc_v9_0.c | 46 +- drivers/gpu/drm/amd/amdgpu/ih_v6_0.c | 13 +- drivers/gpu/drm/amd/amdgpu/mes_v11_0.c | 4 +- drivers/gpu/drm/amd/amdgpu/mes_v12_0.c | 4 +- drivers/gpu/drm/amd/amdgpu/navi10_ih.c | 41 +- drivers/gpu/drm/amd/amdgpu/si.c | 10 + drivers/gpu/drm/amd/amdkfd/kfd_device.c | 5 - drivers/gpu/drm/amd/amdkfd/kfd_queue.c | 4 +- drivers/gpu/drm/amd/amdkfd/kfd_svm.c | 20 +- .../amd/display/dc/clk_mgr/dcn401/dcn401_clk_mgr.c | 3 + .../display/dc/link/protocols/link_dp_capability.c | 6 +- .../gpu/drm/amd/display/dc/optc/dcn20/dcn20_optc.c | 7 + .../amd/display/dc/resource/dcn32/dcn32_resource.c | 15 +- drivers/gpu/drm/amd/include/kgd_pp_interface.h | 2 + drivers/gpu/drm/amd/pm/amdgpu_dpm.c | 143 +++- drivers/gpu/drm/amd/pm/inc/amdgpu_dpm.h | 1 + drivers/gpu/drm/amd/pm/powerplay/amd_powerplay.c | 33 +- drivers/gpu/drm/amd/pm/swsmu/amdgpu_smu.c | 87 +- drivers/gpu/drm/amd/pm/swsmu/inc/amdgpu_smu.h | 2 + .../gpu/drm/amd/pm/swsmu/smu13/smu_v13_0_0_ppt.c | 34 +- .../gpu/drm/amd/pm/swsmu/smu13/smu_v13_0_7_ppt.c | 31 +- .../gpu/drm/amd/pm/swsmu/smu14/smu_v14_0_2_ppt.c | 38 +- drivers/gpu/drm/bridge/nwl-dsi.c | 17 +- drivers/gpu/drm/drm_crtc.c | 15 +- drivers/gpu/drm/drm_panel.c | 25 + drivers/gpu/drm/drm_panic.c | 10 +- drivers/gpu/drm/etnaviv/etnaviv_buffer.c | 40 +- drivers/gpu/drm/i915/display/intel_psr.c | 20 +- drivers/gpu/drm/i915/gem/i915_gem_execbuffer.c | 2 +- drivers/gpu/drm/loongson/lsdc_gem.c | 14 +- drivers/gpu/drm/loongson/lsdc_plane.c | 2 +- drivers/gpu/drm/loongson/lsdc_ttm.c | 14 +- drivers/gpu/drm/loongson/lsdc_ttm.h | 2 +- drivers/gpu/drm/msm/dsi/dsi_host.c | 2 + drivers/gpu/drm/nouveau/include/nvkm/subdev/pci.h | 1 + drivers/gpu/drm/nouveau/nvkm/core/subdev.c | 1 + drivers/gpu/drm/nouveau/nvkm/engine/device/base.c | 2 +- .../gpu/drm/nouveau/nvkm/subdev/devinit/gf100.c | 20 + drivers/gpu/drm/nouveau/nvkm/subdev/pci/Kbuild | 1 + drivers/gpu/drm/nouveau/nvkm/subdev/pci/mcp79.c | 36 + drivers/gpu/drm/panel/panel-ebbg-ft8719.c | 11 +- drivers/gpu/drm/v3d/v3d_sched.c | 2 + drivers/gpu/drm/vc4/vc4_gem.c | 10 +- drivers/gpu/drm/vc4/vc4_hdmi.c | 10 +- drivers/hte/hte-tegra194-test.c | 2 +- drivers/hwmon/acpi_power_meter.c | 10 +- drivers/hwmon/aquacomputer_d5next.c | 58 +- drivers/hwmon/asus_wmi_sensors.c | 13 +- drivers/hwmon/chipcap2.c | 53 +- drivers/hwmon/coretemp.c | 27 +- drivers/hwmon/corsair-cpro.c | 3 +- drivers/hwmon/hp-wmi-sensors.c | 29 +- drivers/hwmon/lm70.c | 8 +- drivers/hwmon/lm87.c | 7 +- drivers/hwmon/nct6683.c | 4 +- drivers/hwmon/nct6775-platform.c | 24 + drivers/hwmon/peci/dimmtemp.c | 21 +- drivers/hwmon/pmbus/pmbus_core.c | 51 +- drivers/hwmon/pmbus/q54sj108a2.c | 2 + drivers/hwmon/tmp102.c | 8 +- drivers/hwmon/tmp108.c | 8 +- drivers/hwtracing/coresight/coresight-etm4x-core.c | 3 + drivers/iio/adc/ad7192.c | 2 +- drivers/iio/adc/ti-ads1100.c | 121 ++- drivers/iio/dac/mcp4821.c | 7 +- drivers/iio/light/isl29028.c | 23 +- drivers/iio/light/ltr501.c | 2 +- drivers/iio/pressure/dps310.c | 6 +- drivers/infiniband/hw/hfi1/chip.c | 4 +- drivers/input/input.c | 4 +- drivers/input/joystick/xpad.c | 1 + drivers/iommu/amd/init.c | 37 +- drivers/iommu/iommufd/io_pagetable.c | 2 +- drivers/iommu/iommufd/iova_bitmap.c | 19 +- drivers/iommu/virtio-iommu.c | 6 +- drivers/irqchip/irq-atmel-aic.c | 5 +- drivers/irqchip/irq-atmel-aic5.c | 5 +- drivers/mailbox/mailbox-altera.c | 2 +- drivers/md/dm-bufio.c | 41 +- drivers/media/common/cypress_firmware.c | 2 + drivers/media/i2c/adv748x/adv748x-core.c | 13 +- drivers/media/i2c/og01a1b.c | 97 +-- drivers/media/i2c/ov5647.c | 4 + drivers/media/pci/intel/ipu6/ipu6-fw-isys.c | 29 +- .../media/platform/chips-media/wave5/wave5-vpu.c | 7 + .../media/platform/mediatek/jpeg/mtk_jpeg_core.c | 4 +- .../media/platform/microchip/microchip-isc-base.c | 20 +- .../media/platform/microchip/microchip-isc-regs.h | 16 +- drivers/media/platform/microchip/microchip-isc.h | 4 +- .../platform/microchip/microchip-sama5d2-isc.c | 20 +- .../platform/microchip/microchip-sama7g5-isc.c | 20 +- drivers/media/platform/qcom/camss/camss-vfe-17x.c | 153 +--- drivers/media/platform/qcom/camss/camss-vfe-4-1.c | 9 - drivers/media/platform/qcom/camss/camss-vfe-4-7.c | 11 - drivers/media/platform/qcom/camss/camss-vfe-4-8.c | 11 - drivers/media/platform/qcom/camss/camss-vfe-480.c | 276 +------ drivers/media/platform/qcom/camss/camss-vfe.c | 268 ++++++ drivers/media/platform/qcom/camss/camss-vfe.h | 58 +- drivers/media/platform/rockchip/rga/rga.c | 69 +- drivers/media/platform/rockchip/rga/rga.h | 7 +- drivers/media/rc/ene_ir.c | 4 +- drivers/media/rc/redrat3.c | 11 +- drivers/media/rc/serial_ir.c | 2 +- drivers/media/usb/dvb-usb/dvb-usb-firmware.c | 2 + drivers/media/usb/uvc/uvc_driver.c | 20 + drivers/mfd/ab8500-core.c | 44 +- drivers/mfd/twl-core.c | 25 +- drivers/misc/fastrpc.c | 81 +- drivers/mtd/nand/raw/Kconfig | 3 +- drivers/mtd/nand/raw/ndfc.c | 41 +- drivers/net/can/dev/netlink.c | 4 +- drivers/net/can/dev/skb.c | 1 + drivers/net/can/usb/peak_usb/pcan_usb_fd.c | 7 +- drivers/net/ethernet/atheros/atl1c/atl1c_main.c | 33 + drivers/net/ethernet/broadcom/bgmac.c | 10 +- drivers/net/ethernet/broadcom/bnxt/bnxt_xdp.c | 54 +- drivers/net/ethernet/broadcom/tg3.c | 42 +- drivers/net/ethernet/jme.c | 37 +- drivers/net/ethernet/jme.h | 1 + drivers/net/ethernet/mellanox/mlxsw/core.c | 4 +- drivers/net/ethernet/mellanox/mlxsw/core_hwmon.c | 4 +- .../net/ethernet/mellanox/mlxsw/spectrum_span.c | 2 +- drivers/net/ethernet/ti/am65-cpsw-nuss.c | 4 +- drivers/net/hamradio/6pack.c | 6 + drivers/net/hamradio/bpqether.c | 8 +- drivers/net/hamradio/mkiss.c | 70 +- drivers/net/ppp/pppoe.c | 22 +- drivers/net/veth.c | 5 +- drivers/net/vxlan/vxlan_core.c | 14 +- .../broadcom/brcm80211/brcmfmac/cfg80211.c | 7 + drivers/net/wireless/mediatek/mt76/mac80211.c | 14 + drivers/net/wireless/mediatek/mt76/mt76.h | 2 + drivers/net/wireless/mediatek/mt76/mt7921/main.c | 1 + drivers/net/wireless/mediatek/mt76/mt7925/main.c | 2 + drivers/net/wireless/mediatek/mt76/mt792x_core.c | 12 +- drivers/net/wireless/realtek/rtw88/mac80211.c | 2 + drivers/net/wireless/realtek/rtw88/reg.h | 2 + drivers/net/wireless/realtek/rtw88/tx.c | 9 +- drivers/net/wireless/realtek/rtw88/tx.h | 3 +- drivers/net/wireless/realtek/rtw88/usb.c | 68 +- drivers/net/wireless/realtek/rtw88/usb.h | 5 + drivers/net/wireless/rsi/rsi_91x_core.c | 2 +- drivers/nvme/common/keyring.c | 1 + drivers/nvme/host/core.c | 3 +- drivers/nvme/host/pci.c | 2 + drivers/nvme/host/tcp.c | 207 ++++- drivers/nvme/target/admin-cmd.c | 9 + drivers/nvme/target/configfs.c | 4 +- drivers/nvme/target/rdma.c | 3 +- drivers/nvmem/rockchip-otp.c | 24 +- drivers/pci/controller/cadence/pcie-cadence-plat.c | 33 +- drivers/pci/controller/dwc/pcie-designware.c | 2 + drivers/pci/controller/dwc/pcie-designware.h | 1 + drivers/pci/controller/dwc/pcie-rcar-gen4.c | 54 ++ drivers/pci/controller/pcie-rockchip.c | 14 +- drivers/pci/controller/pcie-rockchip.h | 3 - drivers/pci/endpoint/functions/pci-epf-vntb.c | 69 +- drivers/pci/pci.c | 36 +- drivers/pci/quirks.c | 8 +- drivers/platform/x86/amd/pmf/core.c | 1 + drivers/platform/x86/asus-wmi.c | 30 +- drivers/platform/x86/intel/int3472/discrete.c | 18 +- drivers/power/supply/Makefile | 2 +- drivers/power/supply/bq27xxx_battery.c | 24 +- drivers/power/supply/cros_charge-control.c | 29 +- drivers/power/supply/ltc2941-battery-gauge.c | 6 +- drivers/power/supply/mt6370-charger.c | 11 +- drivers/power/supply/power_supply_core.c | 166 ++-- drivers/power/supply/qcom_battmgr.c | 26 +- .../supply/{qcom_pmi8998_charger.c => qcom_smbx.c} | 209 +++-- drivers/power/supply/rt9467-charger.c | 33 +- drivers/ptp/ptp_sysfs.c | 6 +- drivers/s390/char/vmcp.c | 4 +- drivers/scsi/aic7xxx/aic79xx_core.c | 4 +- drivers/scsi/aic7xxx/aic79xx_osm.h | 26 +- drivers/scsi/aic7xxx/aic7xxx_core.c | 8 +- drivers/scsi/aic7xxx/aic7xxx_pci.c | 20 +- drivers/scsi/libsas/sas_ata.c | 4 +- drivers/scsi/scsi_bsg.c | 6 +- drivers/scsi/scsi_ioctl.c | 11 +- drivers/soc/qcom/pmic_glink_altmode.c | 4 +- drivers/spi/spi-cadence-xspi.c | 522 ++++++------ drivers/target/target_core_fabric_lib.c | 10 + drivers/target/target_core_user.c | 5 + drivers/tty/serial/amba-pl011.c | 15 +- drivers/tty/serial/sc16is7xx.c | 14 +- drivers/ufs/core/ufs_bsg.c | 13 + drivers/ufs/core/ufshcd.c | 48 +- drivers/usb/core/config.c | 32 +- drivers/usb/core/quirks.c | 7 + drivers/usb/host/xhci-ring.c | 9 +- drivers/usb/typec/ucsi/ucsi_ccg.c | 21 +- drivers/vdpa/solidrun/snet_ctrl.c | 3 +- drivers/vdpa/vdpa_user/iova_domain.c | 11 +- drivers/vhost/vdpa.c | 8 +- drivers/vhost/vringh.c | 27 +- drivers/vhost/vsock.c | 34 +- drivers/video/fbdev/core/fb_info.c | 1 + drivers/video/fbdev/core/fbcon_rotate.c | 3 +- drivers/video/fbdev/nvidia/nvidia.c | 20 +- drivers/watchdog/hpwdt.c | 24 +- drivers/xen/gntdev-dmabuf.c | 4 +- fs/9p/v9fs.c | 16 +- fs/9p/vfs_inode.c | 8 + fs/afs/rxrpc.c | 49 +- fs/backing-file.c | 5 +- fs/btrfs/sysfs.c | 1 + fs/ceph/addr.c | 6 + fs/ceph/crypto.c | 8 + fs/dax.c | 2 +- fs/erofs/zdata.c | 11 +- fs/exfat/file.c | 18 +- fs/ext2/file.c | 3 +- fs/ext2/inode.c | 13 +- fs/f2fs/checkpoint.c | 9 +- fs/f2fs/data.c | 20 +- fs/f2fs/file.c | 2 +- fs/f2fs/node.c | 55 +- fs/f2fs/segment.c | 3 +- fs/f2fs/super.c | 24 + fs/fat/inode.c | 2 + fs/fs-writeback.c | 8 + fs/fuse/file.c | 12 +- fs/fuse/virtio_fs.c | 59 +- fs/gfs2/glops.c | 10 +- fs/inode.c | 15 +- fs/iomap/buffered-io.c | 3 +- fs/iomap/direct-io.c | 15 +- fs/nfs/callback_xdr.c | 7 + fs/nfs/filelayout/filelayoutdev.c | 17 +- fs/nfs/flexfilelayout/flexfilelayoutdev.c | 17 +- fs/nfs/pnfs.h | 1 + fs/nfs/pnfs_nfs.c | 21 +- fs/nfsd/blocklayout.c | 4 +- fs/nfsd/flexfilelayout.c | 24 +- fs/nfsd/flexfilelayoutxdr.c | 4 +- fs/nfsd/flexfilelayoutxdr.h | 5 +- fs/nfsd/nfs2acl.c | 18 + fs/nfsd/nfs4callback.c | 2 + fs/nfsd/nfs4layouts.c | 14 +- fs/nfsd/nfs4proc.c | 4 +- fs/nfsd/nfs4recover.c | 49 +- fs/nfsd/nfs4state.c | 53 +- fs/nfsd/nfsctl.c | 56 +- fs/nfsd/pnfs.h | 4 +- fs/nfsd/state.h | 13 +- fs/nilfs2/dir.c | 2 +- fs/nilfs2/gcinode.c | 24 +- fs/nilfs2/inode.c | 49 +- fs/nilfs2/ioctl.c | 2 +- fs/nilfs2/mdt.c | 6 +- fs/nilfs2/page.c | 54 +- fs/nilfs2/page.h | 8 +- fs/nilfs2/recovery.c | 32 +- fs/nilfs2/segbuf.c | 12 +- fs/nilfs2/segment.c | 54 +- fs/nilfs2/the_nilfs.c | 12 +- fs/notify/inotify/inotify_fsnotify.c | 2 +- fs/ntfs3/xattr.c | 25 +- fs/ocfs2/alloc.c | 18 +- fs/ocfs2/cluster/tcp.c | 5 +- fs/ocfs2/dcache.h | 5 +- fs/ocfs2/dlm/dlmmaster.c | 70 +- fs/ocfs2/dlmglue.c | 34 +- fs/ocfs2/filecheck.c | 2 + fs/ocfs2/inode.c | 37 +- fs/ocfs2/journal.c | 15 +- fs/ocfs2/journal.h | 1 + fs/ocfs2/super.c | 3 + fs/ocfs2/xattr.c | 120 ++- fs/overlayfs/export.c | 4 +- fs/overlayfs/namei.c | 13 +- fs/overlayfs/overlayfs.h | 2 +- fs/proc/task_mmu.c | 2 +- fs/smb/client/cifsglob.h | 2 + fs/smb/client/cifssmb.c | 59 +- fs/smb/client/connect.c | 33 +- fs/smb/client/inode.c | 4 +- fs/smb/client/readdir.c | 66 +- fs/smb/client/smb2misc.c | 15 + fs/smb/client/smb2pdu.c | 41 +- fs/smb/server/smb2pdu.c | 28 +- fs/smb/server/smbacl.c | 5 +- fs/smb/server/vfs.c | 4 +- fs/smb/server/vfs.h | 2 + fs/udf/balloc.c | 11 +- fs/udf/inode.c | 42 +- fs/udf/super.c | 80 +- fs/udf/truncate.c | 7 +- fs/verity/enable.c | 8 + fs/verity/fsverity_private.h | 8 + fs/verity/measure.c | 10 + fs/verity/open.c | 9 + fs/verity/read_metadata.c | 14 +- fs/verity/signature.c | 55 +- fs/xfs/libxfs/xfs_attr_leaf.c | 9 +- fs/xfs/libxfs/xfs_btree.c | 4 +- fs/xfs/scrub/attr.c | 102 ++- fs/xfs/scrub/attr_repair.c | 18 +- fs/xfs/scrub/cow_repair.c | 66 +- fs/xfs/scrub/dir.c | 110 ++- fs/xfs/scrub/dir_repair.c | 100 ++- fs/xfs/scrub/dirtree.c | 4 +- fs/xfs/scrub/fscounters.c | 24 +- fs/xfs/scrub/inode_repair.c | 132 ++- fs/xfs/scrub/newbt.c | 2 +- fs/xfs/scrub/quota_repair.c | 33 +- fs/xfs/scrub/reap.c | 4 +- fs/xfs/scrub/rtsummary.c | 9 +- fs/xfs/scrub/rtsummary.h | 1 + fs/xfs/scrub/rtsummary_repair.c | 2 +- fs/xfs/scrub/xfarray.c | 22 +- fs/xfs/xfs_discard.c | 26 +- fs/xfs/xfs_ioctl32.c | 4 +- fs/xfs/xfs_iomap.c | 8 + fs/xfs/xfs_pnfs.c | 51 +- include/acpi/cppc_acpi.h | 6 + include/asm-generic/tlb.h | 3 +- include/drm/drm_panel.h | 22 + include/dt-bindings/clock/nuvoton,ma35d1-clk.h | 3 +- include/kvm/arm_arch_timer.h | 15 + include/linux/bio.h | 15 + include/linux/bitfield.h | 21 +- include/linux/can/can-ml.h | 3 + include/linux/damon.h | 6 + include/linux/hugetlb.h | 22 +- include/linux/libata.h | 26 +- include/linux/memcontrol.h | 10 + include/linux/memfd.h | 9 + include/linux/mm.h | 6 +- include/linux/mmu_notifier.h | 3 +- include/linux/panic.h | 6 +- include/linux/pci.h | 2 + include/linux/power_supply.h | 4 +- include/linux/srcu.h | 36 + include/linux/sunrpc/clnt.h | 3 +- include/linux/sunrpc/svc.h | 7 +- include/linux/usb/quirks.h | 3 + include/net/espintcp.h | 5 +- include/net/ip.h | 25 - include/net/ip6_route.h | 37 - include/net/netns/can.h | 2 +- include/net/netrom.h | 15 +- include/net/rose.h | 3 + include/net/sctp/sm.h | 1 + include/sound/hwdep.h | 1 + include/trace/events/rxrpc.h | 2 +- include/uapi/linux/iommufd.h | 6 + io_uring/cancel.c | 3 +- io_uring/io_uring.c | 23 +- io_uring/poll.c | 77 +- io_uring/rsrc.c | 21 +- io_uring/sqpoll.c | 26 +- kernel/events/core.c | 9 + kernel/irq/internals.h | 1 + kernel/irq/kexec.c | 2 +- kernel/irq/manage.c | 49 +- kernel/panic.c | 41 +- kernel/sched/ext.c | 14 +- kernel/time/posix-stubs.c | 4 +- kernel/time/posix-timers.c | 22 +- kernel/time/tick-sched.c | 14 +- kernel/trace/trace_events_hist.c | 3 + lib/cmdline.c | 13 +- lib/cmdline_kunit.c | 101 +++ lib/raid6/avx2.c | 6 + lib/raid6/avx512.c | 6 + lib/raid6/recov_avx2.c | 2 + lib/raid6/recov_avx512.c | 2 + lib/stackdepot.c | 2 +- mm/damon/core.c | 64 +- mm/damon/paddr.c | 6 +- mm/damon/tests/core-kunit.h | 11 +- mm/filemap.c | 55 +- mm/gup.c | 36 +- mm/huge_memory.c | 70 +- mm/hugetlb.c | 117 ++- mm/khugepaged.c | 10 +- mm/ksm.c | 10 +- mm/madvise.c | 9 + mm/memcontrol.c | 84 +- mm/memfd.c | 2 + mm/memory.c | 45 +- mm/mempolicy.c | 15 +- mm/migrate.c | 5 +- mm/mm_init.c | 2 - mm/mmap.c | 11 +- mm/mmu_notifier.c | 24 +- mm/mremap.c | 15 + mm/page-writeback.c | 12 +- mm/page_alloc.c | 25 +- mm/page_counter.c | 21 +- mm/page_isolation.c | 40 +- mm/page_owner.c | 2 +- mm/page_table_check.c | 6 +- mm/page_vma_mapped.c | 22 +- mm/shmem.c | 87 +- mm/shmem_quota.c | 28 +- mm/swapfile.c | 4 +- mm/userfaultfd.c | 11 +- mm/vma.c | 5 +- mm/vmscan.c | 16 +- mm/zswap.c | 2 +- net/9p/trans_usbg.c | 91 ++- net/9p/trans_virtio.c | 5 + net/9p/trans_xen.c | 10 + net/ax25/af_ax25.c | 119 ++- net/ax25/ax25_ds_timer.c | 2 +- net/ax25/ax25_in.c | 56 +- net/ax25/ax25_ip.c | 9 +- net/ax25/ax25_out.c | 17 +- net/ax25/ax25_std_timer.c | 2 +- net/ax25/sysctl_net_ax25.c | 2 +- net/batman-adv/bat_iv_ogm.c | 9 + net/batman-adv/distributed-arp-table.c | 1 + net/batman-adv/main.c | 12 +- net/batman-adv/main.h | 3 - net/batman-adv/multicast_forw.c | 5 +- net/batman-adv/tp_meter.c | 2 +- net/batman-adv/translation-table.c | 145 ++-- net/batman-adv/types.h | 8 +- net/bluetooth/hci_sync.c | 25 +- net/bluetooth/l2cap_core.c | 47 +- net/bluetooth/selftest.c | 1 + net/bluetooth/smp.c | 1 + net/can/af_can.c | 53 +- net/can/bcm.c | 50 +- net/can/gw.c | 7 +- net/can/isotp.c | 236 +++--- net/can/proc.c | 69 +- net/can/raw.c | 132 ++- net/core/dev.c | 10 +- net/core/filter.c | 23 +- net/core/sock.c | 6 +- net/ipv4/cipso_ipv4.c | 9 +- net/ipv4/inet_connection_sock.c | 6 +- net/ipv4/inet_hashtables.c | 2 +- net/ipv4/inet_timewait_sock.c | 4 +- net/ipv4/ip_gre.c | 1 + net/ipv4/ipmr.c | 31 +- net/ipv4/route.c | 4 +- net/ipv4/syncookies.c | 2 +- net/ipv4/tcp_fastopen.c | 2 +- net/ipv6/addrconf.c | 3 +- net/ipv6/datagram.c | 4 + net/ipv6/inet6_hashtables.c | 2 +- net/ipv6/ip6_gre.c | 1 + net/ipv6/ip6mr.c | 5 +- net/ipv6/raw.c | 3 + net/ipv6/route.c | 2 +- net/l2tp/l2tp_core.c | 13 +- net/mac80211/tdls.c | 3 +- net/mac80211/tx.c | 57 +- net/mptcp/pm_kernel.c | 1 + net/mptcp/protocol.c | 31 +- net/mptcp/protocol.h | 10 +- net/mptcp/subflow.c | 17 +- net/mptcp/token.c | 68 +- net/mptcp/token_test.c | 4 +- net/netrom/af_netrom.c | 109 ++- net/netrom/nr_in.c | 50 +- net/netrom/nr_out.c | 23 +- net/netrom/nr_route.c | 100 +-- net/rds/recv.c | 6 +- net/rose/af_rose.c | 130 ++- net/rose/rose_in.c | 11 +- net/rose/rose_link.c | 85 +- net/rose/rose_loopback.c | 1 + net/rose/rose_route.c | 67 +- net/rose/sysctl_net_rose.c | 13 +- net/rxrpc/sendmsg.c | 59 +- net/sched/sch_generic.c | 41 +- net/sched/sch_qfq.c | 3 + net/sched/sch_taprio.c | 5 + net/sctp/sm_make_chunk.c | 14 +- net/sctp/socket.c | 57 +- net/smc/smc_rx.c | 39 +- net/sunrpc/rpcb_clnt.c | 22 +- net/sunrpc/svc.c | 42 +- net/wireless/reg.c | 3 + net/xfrm/espintcp.c | 43 +- net/xfrm/xfrm_interface_core.c | 8 + net/xfrm/xfrm_policy.c | 11 +- security/apparmor/policy_unpack.c | 19 +- sound/core/compress_offload.c | 18 +- sound/core/control.c | 19 +- sound/core/hwdep.c | 25 +- sound/core/init.c | 23 +- sound/core/jack.c | 38 +- sound/core/oss/mixer_oss.c | 13 +- sound/core/oss/pcm_oss.c | 21 +- sound/core/pcm_native.c | 44 +- sound/core/rawmidi.c | 16 +- sound/core/seq/oss/seq_oss.c | 21 +- sound/core/seq/seq_clientmgr.c | 19 +- sound/core/sound.c | 9 +- sound/core/timer.c | 26 +- sound/core/timer_compat.c | 1 + sound/core/ump_convert.c | 2 +- sound/drivers/aloop.c | 103 +-- sound/drivers/mpu401/mpu401_uart.c | 8 +- sound/pci/cs46xx/dsp_spos.c | 2 + sound/pci/cs46xx/dsp_spos_scb_lib.c | 3 +- sound/pci/hda/cs35l41_hda.c | 22 +- sound/pci/hda/hda_eld.c | 6 +- sound/pci/hda/patch_hdmi.c | 3 +- sound/pci/hda/patch_realtek.c | 10 +- sound/soc/amd/acp-config.c | 43 +- sound/soc/amd/yc/acp6x-mach.c | 7 + sound/soc/codecs/hdac_hda.c | 25 +- sound/soc/qcom/qdsp6/q6apm-dai.c | 12 +- sound/soc/qcom/qdsp6/q6apm.c | 6 +- sound/soc/qcom/qdsp6/q6prm.c | 3 + sound/soc/sof/intel/hda-codec.c | 23 +- sound/soc/stm/stm32_i2s.c | 27 +- sound/synth/emux/emux_effect.c | 29 +- sound/synth/emux/emux_synth.c | 57 +- sound/synth/emux/soundfont.c | 70 +- sound/usb/bcd2000/bcd2000.c | 20 +- sound/usb/caiaq/input.c | 2 + sound/usb/line6/capture.c | 58 +- sound/usb/line6/capture.h | 2 +- sound/usb/line6/driver.c | 29 +- sound/usb/line6/midi.c | 10 +- sound/usb/line6/pcm.c | 27 +- sound/usb/line6/playback.c | 31 +- sound/usb/midi.c | 22 +- sound/usb/mixer.c | 8 + sound/usb/mixer_quirks.c | 7 +- sound/usb/pcm.c | 20 +- sound/usb/quirks.c | 24 +- sound/usb/usbaudio.h | 4 +- sound/usb/usx2y/us122l.c | 27 +- sound/usb/usx2y/usX2Yhwdep.c | 5 + sound/usb/usx2y/usb_stream.c | 9 +- sound/usb/usx2y/usbusx2yaudio.c | 43 +- sound/x86/intel_hdmi_audio.c | 9 +- tools/arch/x86/include/asm/cpufeatures.h | 5 + tools/testing/selftests/net/fib_nexthops.sh | 40 +- tools/testing/vma/vma_internal.h | 2 + virt/kvm/guest_memfd.c | 123 ++- virt/kvm/kvm_main.c | 45 +- virt/kvm/kvm_mm.h | 18 +- 707 files changed, 10867 insertions(+), 6128 deletions(-)

4 hours, 40 minutes

[PATCH 6.18 000/686] 6.18.64-rc1 review

by Greg Kroah-Hartman

This is the start of the stable review cycle for the 6.18.64 release. There are 686 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know. Responses should be made by Sun, 15 Nov 2026 15:36:17 +0000. Anything received after that time might be too late. The whole patch series can be found in one patch at: https://www.kernel.org/pub/linux/kernel/v6.x/stable-review/patch-6.18.64-rc… or in the git tree and branch at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-6.18.y and the diffstat can be found below. thanks, greg k-h ------------- Pseudo-Shortlog of commits: Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> Linux 6.18.64-rc1 José Miguel Castellanos Valladolid <josstamy(a)gmail.com> ALSA: hda/realtek: Enable mute LEDs on HP OmniBook X Flip 14-fm0xxx Jaeho Cho <jaeho2025(a)gmail.com> ALSA: hda/realtek: Enable mute LEDs on HP OmniBook 7 17-dc0xxx Gianluca Balboni <gianluca.balboni06(a)gmail.com> ASoC: amd: yc: Add DMI quirk for HP OmniBook 3 Laptop 16-by0xxx Armaan Sandhu <armaan.sandhu0504(a)gmail.com> lib/cmdline: fix get_options() count and overflow with large ranges Shuvam Pandey <shuvampandey1(a)gmail.com> lib/tests: extend cmdline KUnit with next_arg() tests Wang Yan <wangyan01(a)kylinos.cn> selftests/landlock: Fix snprintf truncation checks in test files Arnaldo Carvalho de Melo <acme(a)redhat.com> perf python: Free the parse error entries when parsing fails Karl Mehltretter <kmehltretter(a)gmail.com> fbdev: sh_mobile_lcdcfb: Restore the per-overlay sysfs attributes Chintan Patel <chintanlike(a)gmail.com> fbdev: sh_mobile_lcdc: Make FB_DEVICE dependency optional Chintan Patel <chintanlike(a)gmail.com> fb: Add dev_of_fbinfo() helper for optional sysfs support Mario Limonciello <mario.limonciello(a)amd.com> platform/x86/amd/pmf: Add AMDI0112 ACPI ID Myeonghun Pak <mhun512(a)gmail.com> fbdev: nvidia: Release write-combining handle on probe failure Shixiong Ou <oushixiong(a)kylinos.cn> fbdev: nvidia: Convert to managed PCI and ioremap API Wentao Liang <vulab(a)iscas.ac.cn> power: supply: ltc2941: Fix of_node reference leak in ltc294x_i2c_probe() Au Dang <au.dang.jx(a)renesas.com> irqchip/renesas-rzv2h: Preserve TIEN state in rzv2h_tint_set_type() Guangshuo Li <lgs201920130244(a)gmail.com> crypto: omap-sham - fix crypto engine cleanup Thorsten Blum <thorsten.blum(a)linux.dev> crypto: omap - add omap_sham_unregister_algs helper Ricardo Neri <ricardo.neri-calderon(a)linux.intel.com> hwmon: (coretemp) Return -ENODATA for invalid temperature readings Andrea Parri <parri.andrea(a)gmail.com> iommufd/iova_bitmap: Ensure that iova_bitmap_set() handles the full IOVA Lorenzo Stoakes (ARM) <ljs(a)kernel.org> mm/vma: avoid broken uffd merge on mremap David Carlier <devnexen(a)gmail.com> media: ipu6: Fix firmware config leak on stream start Antti Laakso <antti.laakso(a)linux.intel.com> media: ipu6: Rename pointer to firmware context Daeho Jeong <daehojeong(a)google.com> f2fs: release a removed xattr node in roll-forward recovery Miquel Raynal <miquel.raynal(a)bootlin.com> clk: nuvoton: ma35d1: Add missing WDT/WWDT parent clocks Miquel Raynal <miquel.raynal(a)bootlin.com> dt-bindings: clock: ma35d1: Add missing WDT/WWDT parent clocks Miquel Raynal <miquel.raynal(a)bootlin.com> dt-bindings: clock: ma35d1: Drop CLK_MAX_IDX define Miquel Raynal <miquel.raynal(a)bootlin.com> clk: nuvoton: ma35d1: Keep the clock count in the driver Sumit Kumar <sumit.kumar(a)oss.qualcomm.com> PCI: dwc: Set DMA_BYPASS bit in outbound IATU CTRL2 register David Hildenbrand (Arm) <david(a)kernel.org> mm/huge_memory: split huge PUDs when adjusting VMA boundaries Rudi Heitbaum <rudi(a)heitbaum.com> PCI: imx6: Avoid dereferencing a NULL clock name Hung-Jui Lin <alex.lin.programmer(a)gmail.com> posix-timers: Report zero remaining time for disarmed SIGEV_NONE timers Thomas Gleixner <tglx(a)kernel.org> posix-timers: Handle the timer_[re]arm() return value Evgeny Akhtimirov <evgeny(a)devduty.com> ALSA: hda/realtek: Enable all four speaker amps on Lenovo ThinkBook X G2 IAH Bradley Morgan <brads(a)mainlining.org> panic: restore variable arguments to nmi_panic() Steve Wahl <steve.wahl(a)hpe.com> watchdog/hpwdt: Refine hpwdt message for UV platform Yingjie Wang <1075151112(a)qq.com> nvme-tcp: validate the TLS handshake timeout Yingjie Wang <1075151112(a)qq.com> nvmet-tcp: validate the TLS handshake timeout Borislav Petkov (AMD) <bp(a)alien8.de> Documentation/kernel-parameters: Move the kernel build options Huacai Chen <chenhuacai(a)kernel.org> LoongArch: Don't init & online empty nodes Chao Yu <chao(a)kernel.org> f2fs: fix to invalidate curseg if change_curseg() fails David Carlier <devnexen(a)gmail.com> mm/shmem: don't release a swapin-error marker as a swap entry Christian Brauner <brauner(a)kernel.org> iomap: don't mark unwritten parts of a folio uptodate Linmao Li <lilinmao(a)kylinos.cn> PCI: cadence: Store the core controller in platform drvdata Iván Ezequiel Rodriguez <ivanrwcm25(a)gmail.com> arm64/gcs: release GCS on failed fork Giorgi Kobakhia <gkobakhi(a)asu.edu> ocfs2: fix array out of bound access in __ocfs2_find_path() Edward Adam Davis <eadavis(a)qq.com> ocfs2: fix oob in __ocfs2_find_path Tiezhu Yang <yangtiezhu(a)loongson.cn> LoongArch: Fix one-shot limitation for perf hardware breakpoints Nikolaos Karaolidis <nick(a)karaolidis.com> fs: don't lose inodes that another LRU walker is isolating Peter Ujfalusi <peter.ujfalusi(a)linux.intel.com> ASoC: hdac_hda: Restore the codec device type on unbind Peter Ujfalusi <peter.ujfalusi(a)linux.intel.com> ASoC: hdac_hda: Allocate the private data at codec driver bind Hongfu Li <lihongfu(a)kylinos.cn> mm/memfd: fix hugetlb reservation accounting in error paths Jinmeng Zhou <jinmengzhou22(a)gmail.com> mm/hugetlb: charge folios to the target mm's memcg Josef Bacik <josef(a)toxicpanda.com> mm/vma: don't leak the commit charge on mmap failure Hongfu Li <lihongfu(a)kylinos.cn> mm/memcg: migrate per-node hugetlb lruvec stat together with hugetlb folio Ye Liu <ye.liu(a)linux.dev> mm: use enum migrate_reason instead of int for migration reason parameters Qi Zheng <zhengqi.arch(a)bytedance.com> mm: memcontrol: refactor mod_memcg_state() and mod_memcg_lruvec_state() Nikolaos Karaolidis <nick(a)karaolidis.com> fs: rotate inodes whose page cache could not be dropped Jan Kara <jack(a)suse.cz> fs: Ignore inode metadata buffers in inode_lru_isolate() Mateusz Guzik <mjguzik(a)gmail.com> fs: provide accessors for ->i_state Mateusz Guzik <mjguzik(a)gmail.com> fs: spell out fenced ->i_state accesses with explicit smp_wmb/smp_rmb Mateusz Guzik <mjguzik(a)gmail.com> fs: add missing fences to I_NEW handling Mateusz Guzik <mjguzik(a)gmail.com> fs: assert on ->i_count in iput_final() Alexander Sverdlin <alexander.sverdlin(a)gmail.com> tpm: tpm2_probe: propagate transport errors Alexey Charkov <alchark(a)flipper.net> nvmem: rockchip-otp: Serialize reads Rosen Penev <rosenp(a)gmail.com> nvmem: rockchip-otp: alloc clks with main struct Ming Lei <tom.leiming(a)gmail.com> ublk: mark the io command cancelable before publishing it Gregory Price <gourry(a)gourry.net> mm/mempolicy: use vm_normal_folio_pmd() in queue_folios_pmd() Wentao Liang <vulab(a)iscas.ac.cn> xen/gntdev: Fix gntdev_dmabuf ref leak in dmabuf_exp_wait_released() Ackerley Tng <ackerleytng(a)google.com> mm: hugetlb: drop refcount before freeing on memcg charge failure Ackerley Tng <ackerleytng(a)google.com> mm: hugetlb: return -ENOSPC on memcg charge failure Yao Yiqi <yaoyiqi3(a)huawei.com> fbcon: Retry rotated font allocation after failure Antoniu Miclaus <antoniu.miclaus(a)analog.com> iio: adc: ad4080: enable address ascension for chip identification Rong Zhang <i(a)rong.moe> platform/x86: lenovo-wmi-capdata: Do not stop the AC notifier chain on error Rong Zhang <i(a)rong.moe> platform/x86: Rename lenovo-wmi-capdata01 to lenovo-wmi-capdata Marc Zyngier <maz(a)kernel.org> KVM: arm64: vgic: Stop the target vcpu when disabling LPIs Arnaldo Carvalho de Melo <acme(a)redhat.com> perf evsel: Close the fds opened so far when disabling missing features Hui Su <sh_def(a)163.com> perf evsel: Restrict incremental open error unwind Art O Cathain <art.home(a)gmail.com> ASoC: amd: acp-config: force SoundWire probe on Dell 14S DS14265 Sehat Mahde <hskmahde(a)gmail.com> ASoC: amd: acp-config: force SoundWire probe on HP OmniBook X Flip 16 Jackie Dong <xy-jackie(a)139.com> ASoC: amd: acp: Add DMI quirk for Lenovo Yoga Pro 7 15ASH11 Jasper Smet <josbeir(a)gmail.com> ASoC: amd: acp: Add DMI quirk for ASUS Zenbook S16 UM5606GA Hasun Park <hasunpark(a)gmail.com> ASoC: amd: acp: add DMI override for ACP70 flag Devin Wittmayer <lucid_duck(a)justthetip.ca> wifi: mt76: move the channel survey when the channel changes Devin Wittmayer <lucid_duck(a)justthetip.ca> wifi: mt76: mt7921: assert sniffer on chanctx change Stanley Jhu <stanleyjhu(a)google.com> scsi: ufs: core: Add a helper for clearing hba->outstanding_reqs Chao Yu <chao(a)kernel.org> f2fs: fix to use bio_in_atomic() in f2fs_read_end_io() Tal Zussman <tz2294(a)columbia.edu> block: introduce bio_in_atomic() Kaixuan Li <kaixuanli0131(a)gmail.com> f2fs: bound the SIT/NAT bitmaps by the checkpoint pack Chi Zhiling <chizhiling(a)kylinos.cn> exfat: advance valid_size to EOF for append writes Andrea Parri <parri.andrea(a)gmail.com> iomap: don't lose a failed direct I/O bio's error when zeroing the tail Pankaj Raghav <p.raghav(a)samsung.com> iomap: use largest_zero_folio() in iomap_dio_zero() Vladyslav Tymoshchuk <tvlad744(a)gmail.com> ASoC: qcom: q6apm-dai: wrap the position of a full ring to 0 Vishnu Reddy <busanna.reddy(a)oss.qualcomm.com> media: iris: Fix power-off ordering to disable power domain after clocks Martin Fuzzey <martin.fuzzey(a)flowbird.group> serial: sc16is7xx: fix data corruption due to unexpected xon/xoff Sinan Turunc <enscrpt(a)pm.me> ALSA: ua101: Bound packet copies by the PCM buffer size Ruide Cao <caoruide123(a)gmail.com> mptcp: fix MP_CAPABLE token migration when cloning reqsk Xuanqiang Luo <luoxuanqiang(a)kylinos.cn> rculist: Add hlist_nulls_replace_rcu() and hlist_nulls_replace_init_rcu() Sung Byeongchan <tjdqudcks0424(a)naver.com> virtiofs: validate fixed-output response length Yuto Ohnuki <ytohnuki(a)amazon.com> virtiofs: add FUSE protocol validation Hugo Villeneuve <hvilleneuve(a)dimonoff.com> serial: sc16is7xx: declare MCR and IER as volatile registers Hugo Villeneuve <hvilleneuve(a)dimonoff.com> serial: sc16is7xx: add comments for lock requirements Hugo Villeneuve <hvilleneuve(a)dimonoff.com> serial: sc16is7xx: declare SPR/TLR/XOFF2 register as volatile Tobias Schumacher <ts(a)linux.ibm.com> s390/pci: Add error cleanup in zpci_directed_irq_init() Darrick J. Wong <djwong(a)kernel.org> xfarray: don't crash when sorting if array element crosses a folio Matthew Wilcox (Oracle) <willy(a)infradead.org> xfs: Use folio_next_pos() Matthew Wilcox (Oracle) <willy(a)infradead.org> filemap: Add folio_next_pos() Fan Wu <fanwu01(a)zju.edu.cn> media: rockchip: rga: quiesce IRQ before releasing m2m state Sven Püschel <s.pueschel(a)pengutronix.de> media: rockchip: rga: use clk_bulk api Marc Zyngier <maz(a)kernel.org> KVM: arm64: nv: Move L2->L1 switch on interrupt early Marco Scardovi <scardracs(a)disroot.org> platform/x86: asus-wmi: Serialize WMI method evaluations with a mutex Ma Ke <make_ruc2021(a)163.com> ALSA: hda: cs35l41: Fix ACPI device reference leak on probe failure Takashi Iwai <tiwai(a)suse.de> ALSA: hda: cs35l41: Use auto-cleanup for put_device() Myeonghun Pak <mhun512(a)gmail.com> mfd: twl-core: Unregister the auxiliary platform device on unbind Thorsten Blum <thorsten.blum(a)linux.dev> mfd: twl-core: Use i2c_check_functionality as boolean value Kenneth Feng <kenneth.feng(a)amd.com> drm/amd/pm:restate all customized OD features on every table upload for smu 13.0.0/smu 14.0.2 Daeho Jeong <daehojeong(a)google.com> f2fs: return -EIO for a lost inode block after cp_error Ridong Chen <chenridong(a)xiaomi.com> mm/mglru: fix ineffective memory protection for non-kswapd reclaim Tejun Heo <tj(a)kernel.org> cgroup: Expose some cgroup helpers Chao Yu <chao(a)kernel.org> f2fs: zone: fix to avoid bio split on sequential zone Ethan Nelson-Moore <enelsonmoore(a)gmail.com> ata: sata_inic162x: remove dangerous broken driver Bart Van Assche <bvanassche(a)acm.org> ata: libata: Add an argument to ata_eh_reset() Li RongQing <lirongqing(a)baidu.com> vfio/pci: Restore 8-byte ioeventfd support Karl Mehltretter <kmehltretter(a)gmail.com> spi: atmel-quadspi: balance runtime PM and pclk across system sleep Robert Marko <robert.marko(a)sartura.hr> spi: atmel-quadspi: use init callback for gclk variants Robert Marko <robert.marko(a)sartura.hr> spi: atmel-quadspi: add controller init callback Matej Sochan <matej.sochan(a)gmail.com> ALSA: hda/realtek: Fix silent speakers on Lenovo Legion S7 15IMH05 Nicholas Bonello <hadobedo(a)gmail.com> ALSA: hda/realtek: Fix Legion 7 16ITHG6 speaker amp binding Rámon van Raaij <ramon(a)vanraaij.eu> ALSA: hda/realtek: Add codec SSID quirk for Lenovo Yoga Pro 9 16IMH9 Jiale Yao <yaojiale02(a)163.com> iio: dac: mcp4821: reject devices without match data Myeonghun Pak <mhun512(a)gmail.com> ASoC: stm: stm32_i2s: request IRQ after regmap initialization bui duc phuc <phucduc.bui(a)gmail.com> ASoC: stm: stm32_i2s: Drop redundant error messages Bartosz Golaszewski <bartosz.golaszewski(a)oss.qualcomm.com> dmaengine: qcom: bam_dma: free interrupt before the clock in error path Vishnu Santhosh <vishnu.santhosh(a)oss.qualcomm.com> dmaengine: qcom: bam_dma: Defer IRQ trigger type to device tree Tom Verdonck <tom.verdonck(a)inspiral.be> hwmon: (tmp108) Fix jiffies wraparound in conversion-ready check Yunpeng Tian <shionthanatos(a)gmail.com> udf: validate the device specification EA before using it Chris Mason <mason(a)kernel.org> ovl: fail the mount if the casefold flag has changed Mehmet Fide <mehmet.fide(a)screeningeagle.com> wifi: rtw88: widen the ATIM window while an AP interface is up Mehmet Fide <mehmet.fide(a)screeningeagle.com> wifi: rtw88: usb: only let the frames a dozing station needs use the after-DTIM queue Mehmet Fide <mehmet.fide(a)screeningeagle.com> wifi: rtw88: usb: bound what the driver feeds the after-DTIM queue Mehmet Fide <mehmet.fide(a)screeningeagle.com> wifi: rtw88: usb: route bmc frames via the high queue only for DTIM delivery Martin Belanger <martin.belanger(a)dell.com> nvme-tcp: skip TLS control records while waiting for the ICResp Zhiling Zou <zhilinz(a)nebusec.ai> ipmr: only copy pktinfo to cache reports Eric Dumazet <edumazet(a)google.com> ipmr: prevent info-leak in pmr_cache_report() Baolin Wang <baolin.wang(a)linux.alibaba.com> mm: memory: fix truncation removing mapped folios Weibin Liu <liuwb(a)xiaopeng.com> spi: cadence-xspi: reject SDMA transfers larger than the requested length Jisheng Zhang <jszhang(a)kernel.org> spi: cadence-xspi: group marvell support code together Hans Zhang <18255117159(a)163.com> spi: cadence-xspi: Use FIELD_MODIFY() Andy Shevchenko <andriy.shevchenko(a)linux.intel.com> spi: cadence-xspi: Replace ACPI specifics by agnostic APIs Chris Mason <mason(a)kernel.org> mm/shmem: honour F_SEAL_EXEC when an ACL is set Kyle Zeng <kylebot(a)openai.com> mm/page_vma_mapped: continue past nonmatching huge PMDs Jiangshan Yi <yijiangshan(a)kylinos.cn> ceph: fix longname buffer overflow in ceph_fname_to_usr() David Hildenbrand (Arm) <david(a)kernel.org> mm/userfaultfd: only allocate anon_vma in CoW mappings Josef Bacik <josef(a)toxicpanda.com> mm/hugetlb: unmap the page where the other VMA maps it Yuejie Shi <syjcnss(a)gmail.com> fs/ntfs3: validate the EA value length in ntfs_read_ea() Vaibhav Nagare <vnagare(a)redhat.com> bnxt_en: don't leave an XDP program installed when the open fails Michael Chan <michael.chan(a)broadcom.com> bnxt_en: Refactor some basic ring setup and adjustment logic Jun Yang <junvyyang(a)tencent.com> sctp: re-point retained control chunks on association migration David Lee <david.lee(a)trailofbits.com> sctp: hold shkey across socket migration Fuad Tabba <fuad.tabba(a)linux.dev> KVM: arm64: Pin the host vCPU before adjusting its PC under pKVM Dave Jiang <dave.jiang(a)intel.com> cxl/port: Clear cached dport pointers when a dport is removed Dan Williams <dan.j.williams(a)intel.com> cxl/port: Cleanup handling of the nr_dports 0 -> 1 transition Yifei Gao <gyf161023(a)gmail.com> misc: fastrpc: fix double-free in fastrpc_map_attach() error path Kumari Pallavi <kumari.pallavi(a)oss.qualcomm.com> misc: fastrpc: Rename phys to dma_addr for clarity Ming Lei <tom.leiming(a)gmail.com> ublk: keep a canceled FETCH round canceling until the server is gone Sean Christopherson <seanjc(a)google.com> KVM: guest_memfd: Establish memslot<=>guest_memfd bindings *after* memslot is ready Guangshuo Li <lgs201920130244(a)gmail.com> media: i2c: ov5647: fix power cleanup on remove Sean Young <sean(a)mess.org> media: redrat3: Error path leaves device in transmitting state Esben Haabendal <esben(a)geanix.com> iio: light: ltr501: Power down chip if request irq fails Pan Chuang <panchuang(a)vivo.com> iio: light: Remove redundant dev_err()/dev_err_probe() Chao Yu <chao(a)kernel.org> f2fs: fix to check continuousness in f2fs_sync_meta_pages() correctly Gaurav Batra <gbatra(a)linux.ibm.com> powerpc/pseries/iommu: Add TCEs for 16GB pages when RAM is pre-mapped Christopher Lusk <clusk(a)northecho.dev> m68k: Fix seccomp filtering on ColdFire and 68000 Daniel Palmer <daniel(a)0x0f.com> m68k: Fix task info flags handling for 68000 Chao Yu <chao(a)kernel.org> f2fs: fix to avoid folio->mapping dereference in is_{meta, node}_folio() Guangshuo Li <lgs201920130244(a)gmail.com> media: i2c: og01a1b: power off sensor on remove Vladimir Zapolskiy <vladimir.zapolskiy(a)linaro.org> media: i2c: og01a1b: Switch from .s_stream to .enable_streams/.disable_streams Jiaming Zhang <r772577952(a)gmail.com> gfs2: reject invalid inode sizes Tom Verdonck <tom.verdonck(a)inspiral.be> hwmon: (tmp102) Fix jiffies wraparound in conversion-ready check Runyu Xiao <runyu.xiao(a)seu.edu.cn> ALSA: usb-audio: Protect Roland control activation Nicholas Hobson <nicholas.hobson(a)outlook.com> ALSA: usb-audio: keep MIDI input running for Roland TD-11 Danish Khateeb <danishkhateeb03(a)gmail.com> ALSA: timer: Handle userspace-driven timer ioctls from 32-bit tasks bui duc phuc <phucduc.bui(a)gmail.com> ALSA: core: Clean up file_operations definitions Jiale Yao <yaojiale02(a)163.com> iio: adc: ad7192: reject devices without match data Andy Shevchenko <andriy.shevchenko(a)linux.intel.com> iio: adc: ad7192: Revert "properly check spi_get_device_match_data()" Vishnu Reddy <busanna.reddy(a)oss.qualcomm.com> media: iris: Fix iova allocation from restrict region Sakari Ailus <sakari.ailus(a)linux.intel.com> media: imx219: Account for rate_factor in control steps Sakari Ailus <sakari.ailus(a)linux.intel.com> media: imx219: Account rate_factor in setting upper exposure limit Tarang Raval <tarang.raval(a)siliconsignals.io> media: i2c: imx219: Replace exposure magic value with named constant Balakrishnan Sambath <balakrishnan.s(a)microchip.com> media: microchip-isc: fix SBGGR10 Bayer pattern Balakrishnan Sambath <balakrishnan.s(a)microchip.com> media: microchip-isc: fix ISC_PFG_CFG0_BPS macro name typo Balakrishnan Sambath <balakrishnan.s(a)microchip.com> media: microchip-isc: store the unshifted PFE_CFG0 BPS value Wei-Lin Chang <weilin.chang(a)arm.com> KVM: arm64: ptdump: Check the page tables aren't freed when accessing Fuad Tabba <fuad.tabba(a)linux.dev> KVM: arm64: Use kvm_s2_fault_vma_info in gmem_abort() Fabio Cesari <fabio.cesari(a)gmail.com> iio: light: isl29028: fix runtime PM reference leak on error paths Sang-Heon Jeon <ekffu200098(a)gmail.com> iio: light: isl29028: remove isl29028_set_pm_runtime_busy() helper Sean Christopherson <seanjc(a)google.com> KVM: guest_memfd: Split bind() into prepare()+commit() phases Hans de Goede <johannes.goede(a)oss.qualcomm.com> platform/x86: int3472: Increase handshake GPIO delay to 200 ms Tarang Raval <tarang.raval(a)siliconsignals.io> platform: int3472: discrete: Support multiple HIDs per GPIO map entry Koichiro Den <den(a)valinux.co.jp> PCI: endpoint: pci-epf-vntb: Manage virtual NTB and PCI bus lifetime Abel Vesa <abel.vesa(a)linaro.org> soc: qcom: pmic_glink: Fix device access from worker during suspend Sakari Ailus <sakari.ailus(a)linux.intel.com> media: imx219: The horizontal blanking step is 8 Tarang Raval <tarang.raval(a)siliconsignals.io> media: i2c: imx219: Propagate errors from control range updates Cheng Ming Lin <chengminglin(a)mxic.com.tw> mtd: spi-nor: macronix: Restore fallback parameters for MX25L12805D Maxi Saparov <masaparov(a)coreweave.com> kho: do not reserve scratch memory in the kdump kernel Eric Biggers <ebiggers(a)kernel.org> lib/crypto: mips: Disable Octeon SHA code on little-endian kernels Abhishek Dubey <adubey(a)linux.ibm.com> powerpc/bpf: fix buffer overflow in JIT for large BPF programs Zhao Gongyi <zhaogongyi(a)bytedance.com> ata: libata-scsi: reject data-in commands with a data-out buffer Michal Blaszczyk <michalblk(a)google.com> sched_ext: Reset runnable_at when a task leaves its scheduler Oliver Hartkopp <socketcan(a)hartkopp.net> can: raw, isotp: copy socket options outside of lock_sock() Sven Eckelmann <sven(a)narfation.org> batman-adv: tt: don't drop local events queued during TVLV update Sven Eckelmann <sven(a)narfation.org> batman-adv: tt: only update flags for TT events Sven Eckelmann <sven(a)narfation.org> batman-adv: tt: ignore ROAM flag of received ADD changes Sven Eckelmann <sven(a)narfation.org> batman-adv: tt: send ROAM_ADV on each roamed back client Sven Eckelmann <sven(a)narfation.org> batman-adv: tt: clear ROAM flag when re-adding a pending local client Sven Eckelmann <sven(a)narfation.org> batman-adv: tt: only transmit local ROAM flag together with DEL Sven Eckelmann <sven(a)narfation.org> batman-adv: tpmeter: fix u32 truncation of reported bytes SJ Park <sj(a)kernel.org> mm/damon/core: move static variable last_nr_regions to damon_ctx Ido Schimmel <idosch(a)nvidia.com> vxlan: Stop rejecting dynamic FDB entries with a nexthop ID Daehyeon Ko <4ncienth(a)gmail.com> timekeeping: Require permission to set auxiliary clocks Hamid Nassiby <hamid.nassiby(a)nokia.com> Revert "mm/page_owner: fix memory leak in page_owner_stack_fops->release()" Guanglei Zhu <zhugl3(a)xiaopeng.com> ceph: clamp the inline data length in ceph_fill_inline_data() Oliver Hartkopp <socketcan(a)hartkopp.net> can: protect the receive lists with a per-device lock Oliver Hartkopp <socketcan(a)hartkopp.net> can: replace ARPHRD_CAN type checks with can_get_ml_priv() Sasha Levin <sashal(a)kernel.org> Revert "hugetlb: remove VMEMMAP_SYNCHRONIZE_RCU" Suravee Suthikulpanit <suravee.suthikulpanit(a)amd.com> iommu/amd: Force device table to maximum size Chris Mason <mason(a)kernel.org> x86/mm: Fix global ASID handed out to two processes Marco Ziliani <rylos78(a)gmail.com> ata: libata-pmp: disable the SEMB port on Marvell 88SM9705 Kiryl Shutsemau (Meta) <kas(a)kernel.org> arm64: sdei: Preserve the interrupted context's exception registers Kiryl Shutsemau (Meta) <kas(a)kernel.org> arm64: sdei: Run the event handler on the kernel vectors Thorsten Blum <blum(a)kernel.org> x86/boot: Fix off-by-one error in sme_clear_pgd() Jinjie Ruan <ruanjinjie(a)huawei.com> arm64: kexec_file: Fix elf_headers memory leak in retry loop Akshay Jindal <Akshay.Jindal(a)amd.com> iommu/amd: Skip non-IVMD entries when parsing IVRS memory definitions Breno Leitao <leitao(a)debian.org> x86/nmi: Ignore negative NMI handler durations Danish Khateeb <danishkhateeb03(a)gmail.com> perf/core: Don't send SIGTRAP after exec removed the event Shao Mingyin <shao.mingyin(a)zte.com.cn> nvmet: bound the traddr and trsvcid configfs writes Qiliang Yuan <odys.yuan(a)gmail.com> nvme: wait for SRCU readers before splicing the namespace list Qiliang Yuan <odys.yuan(a)gmail.com> srcu: Add list_splice_init_srcu() Imre Kaloz <kaloz(a)kernel.org> MIPS: sgi-ip32: Leave MACE PCI control alone in config accesses Imre Kaloz <kaloz(a)kernel.org> MIPS: sgi-ip32: Mask MACE PCI interrupts in CRIME only Imre Kaloz <kaloz(a)kernel.org> MIPS: mm: Fix the cache error vector jump for XKPHYS kernels Matthias Goergens <matthias.goergens(a)gmail.com> udf: don't use eloc after the end of the unallocated space table Matthias Goergens <matthias.goergens(a)gmail.com> udf: fix preallocation discarding before an empty allocation extent Matthias Goergens <matthias.goergens(a)gmail.com> udf: check the unallocated space table when it is loaded Matthias Goergens <matthias.goergens(a)gmail.com> udf: don't let the extent type hide an exhausted free-space table extent Kyle Zeng <kylebot(a)openai.com> mptcp: pm: kernel: use RCU to free endpoint listeners Christian Gmeiner <cgmeiner(a)igalia.com> drm/etnaviv: Flush the tile status cache through both the PE and BLT James Clark <jjc(a)jclark.com> net: ethernet: ti: am65-cpsw-nuss: Enable timestamping of unicast PTP packets Ray Zhang <sgzhang(a)google.com> net: count last skb of each sk_backlog pass in __release_sock() Bryam Vargas <hexlabsecurity(a)proton.me> net/smc: don't spin in smc_rx_recvmsg() while a pipe holds spliced data Hungyu Lin <dennylin0707(a)gmail.com> ext2: preserve IOMAP_F_DIRTY for extending direct writes Sinan Turunc <enscrpt(a)pm.me> ALSA: usx2y: Guard the playback copy Sinan Turunc <enscrpt(a)pm.me> ALSA: usx2y: Require a buffer of two URBs Wentao Liang <vulab(a)iscas.ac.cn> ALSA: caiaq: free the EP4 URB when input setup fails Sinan Turunc <enscrpt(a)pm.me> ALSA: line6: Reject capture buffers smaller than two packets Mohamed Yassine Jebabli <med.jebabli(a)gmail.com> ALSA: hda/tas2781: Only accept CRC-less V1 data if all entries are valid YuanZhe Liu <25031212351(a)stu.xidian.edu.cn> ALSA: usx2y: Refuse a retried DSP load after a failure YuanZhe Liu <25031212351(a)stu.xidian.edu.cn> ALSA: bcd2000: Fix use-after-free of MIDI URBs on file close Alex Kazinsky <a.kazinsky(a)ideco.ru> ALSA: cs46xx: Handle SCB creation failures before dereferencing Chris Simpson <chris(a)nilk.net> ALSA: hda/realtek: Enable bass speakers on Alienware m17 R3 HyeongJun An <sammiee5311(a)gmail.com> ALSA: ump: Fix dropped data bytes at UMP System message conversion Ilia Mirkin <imirkin(a)alum.mit.edu> drm/nouveau/devinit/gf100-: try to avoid double-running vbios scripts Finn Zeruhn <fzeruhn(a)icloud.com> drm/dp: keep MOT set between messages when no_zero_sized is set Rosen Penev <rosenp(a)gmail.com> drm/nouveau/nvkm: clear use.enabled when subdev init fails Hengyu Liang <hengyul(a)cs.unc.edu> l2tp: only return sessions of the given tunnel in l2tp_session_get() Chris Mason <mason(a)kernel.org> ovl: look up the index by the decoded origin Sasha Levin <sashal(a)kernel.org> nvme-pci: add NVME_QUIRK_DMAPOOL_ALIGN_512 for KIOXIA XG10d Zhao Gongyi <zhaogongyi(a)bytedance.com> arm64: mm: validate /dev/mem mmap ranges without overflow Wei Wang <wvw(a)google.com> arm64: suspend: Save and restore TPIDR2_EL0 across CPU suspend Ewan D. Milne <emilne(a)redhat.com> nvmet: don't return memory contents beyond valid data when reading ANA log page Jesse Zhang <Jesse.Zhang(a)amd.com> drm/amdgpu: don't drop the gang dependency fence twice renpanpan <renpanpan(a)kylinos.cn> drm/amdgpu: Only enable HDMI audio if display supports it Jesse Zhang <Jesse.Zhang(a)amd.com> drm/amdgpu: drop the dma-buf reference when a KFD import fails Hugo Sales <hugo(a)hsal.es> drm/amdgpu: Clamp the ATIF backlight curve to its 99 points Erhan Bilgili <erhan.bilgili(a)gmail.com> drm/amdgpu: Report MES ring wait timeouts. Erhan Bilgili <erhan.bilgili(a)gmail.com> drm/amdgpu: Fix duplicate dependency fence releases Kylie C <kyliepc(a)proton.me> drm/amd/display: Don't select zero V_TOTAL_MIN/MAX on seamless boot Matthew Schwartz <matthew.schwartz(a)linux.dev> drm/amd/display: Keep the nominal vtotal while VRR is inactive Misha Nasledov <misha(a)nasledov.com> drm/amd/display: Drop clock requirements on DCN32 when no displays are active Roman Demidov <roman.demidov.nn(a)gmail.com> drm/amd/display: Fix NULL deref in dcn401_update_clocks_update_dtb_dto Jesse Zhang <Jesse.Zhang(a)amd.com> drm/amdgpu/gfx12: disallow GFXOFF while updating the SPM VMID Alex Hung <alex.hung(a)amd.com> drm/amd/display: Avoid closing unowned DDC pins Milan Milicevic <Milan.Milicevic(a)amd.com> drm/amdgpu: publish IH enabled before PSP programs IH_RB_CNTL Milan Milicevic <Milan.Milicevic(a)amd.com> drm/amdgpu: clear RB_OVERFLOW bit when enabling interrupts for navi10_ih Prike Liang <Prike.Liang(a)amd.com> drm/amdgpu: finish GPU recovery callbacks before restarting schedulers Dariusz Marcinkiewicz <darekm(a)google.com> drm/amdgpu: check amdgpu_vm_ready() in dma-buf move notify Jesse Zhang <Jesse.Zhang(a)amd.com> drm/amdkfd: use the queue's process info for the WPTR BO eviction fence Jesse Zhang <Jesse.Zhang(a)amd.com> drm/amdgpu: keep the CS user fence BO in GTT Jesse Zhang <Jesse.Zhang(a)amd.com> drm/amdgpu: parse CS IBs at the BO offset their VA mapping starts at Bas Nieuwenhuizen <bas(a)basnieuwenhuizen.nl> drm/amdgpu: Check cs flags. Jarkko Sakkinen <jarkko(a)kernel.org> nvme-keyring: Add a missing key_put() call to nvme_tls_key_lookup() Yitang Yang <yi1tang.yang(a)gmail.com> ublk: add missing DEL_DEV_ASYNC to unprivileged permission check Yilin Zhang <yilinzhang(a)moonshot.ai> mptcp: do not use Fast Open on MP_JOIN subflows Daehyeon Ko <4ncienth(a)gmail.com> vhost/vsock: size receive SKBs from declared payload Jamal Hadi Salim <jhs(a)mojatatu.com> net/sched: clamp skb->queue_mapping before indexing the tx queue Chris Mason <mason(a)kernel.org> ovl: do not let chattr change the casefold flag Xia Yan <yanxia(a)cmss.chinamobile.com> ipv6: fix device binding after failed datagram connect Samiullah Khawaja <skhawaja(a)google.com> mm/gup: check folio->mapping under folio lock in memfd_pin_folios() Ritesh Harjani (IBM) <ritesh.list(a)gmail.com> mm/huge_memory: set the mmu_gather page size in zap_huge_pud() David Hildenbrand (Arm) <david(a)kernel.org> mm/memory-tiers: unregister empty tiers outside memory_tier_lock Chris Mason <mason(a)kernel.org> mm/vma: call ->may_split() before a partial merge David Hildenbrand (Arm) <david(a)kernel.org> mm/ksm: reset the unstable trees of all nodes Chris Mason <mason(a)kernel.org> mm: fix unkillable fault loop on MAP_DROPPABLE memory Josef Bacik <josef(a)toxicpanda.com> mm: fix unmap_mapping_range() beyond 4 GiB on 32-bit Chris Mason <mason(a)kernel.org> mm/memory: reject remote COW faults on PFN mappings David Hildenbrand (Arm) <david(a)kernel.org> mm/madvise: fix data loss from MADV_FREE on a KSM page Josef Bacik <josef(a)toxicpanda.com> mm/mremap: fix moving PUD leaves David Hildenbrand (Arm) <david(a)kernel.org> mm/mremap: recheck PUDs under the page table lock David Hildenbrand (Arm) <david(a)kernel.org> mm/mremap: use pudp_huge_get_and_clear() when moving huge PUDs Chris Mason <mason(a)kernel.org> mm/mmu_notifier: set ->mm only after mmgrab() Josef Bacik <josef(a)toxicpanda.com> mm/mmu_notifier: finish non-blocking interval invalidation on error Josef Bacik <josef(a)toxicpanda.com> mm/mmu_gather: fix flushing ranges with 4 GiB or larger David Hildenbrand (Arm) <david(a)kernel.org> mm/gup: check for overflow when converting nr_pages to bytes in GUP-fast Chris Mason <mason(a)kernel.org> mm/gup: fix out-of-bounds write for nr_pages == 0 in GUP-fast Chris Mason <mason(a)kernel.org> mm/gup: fix clearing folios in memfd_pin_folios() David Hildenbrand (Arm) <david(a)kernel.org> mm/gup: recheck the PUD under PTL in follow_pud_mask() Chris Mason <mason(a)kernel.org> mm/khugepaged: preserve dirty bits when collapsing PTE-mapped THPs Josef Bacik <josef(a)toxicpanda.com> mm/khugepaged: fix PMD table lock leak in try_collapse_pte_mapped_thp() Josef Bacik <josef(a)toxicpanda.com> mm/khugepaged: always recheck the pmd in try_collapse_pte_mapped_thp() Liu Changjie <liucj1228(a)outlook.com> can: peak_usb: pcan_usb_fd_decode_buf(): accept short uCAN end-of-list records ChunYuZhiQiang <chunyuzhiqiang(a)yinhe.ht> can: dev: can_fill_info(): don't wake up controller if interface is down Oliver Hartkopp <socketcan(a)hartkopp.net> can: proc: skip stats calculation after reset in can_stat_update() Runyu Xiao <runyu.xiao(a)seu.edu.cn> can: proc: reset pkg_stats atomics individually Oliver Hartkopp <socketcan(a)hartkopp.net> can: isotp: check the return values of can_rx_register() in isotp_bind() Cunhao Lu <1579567540(a)qq.com> can: dev: can_put_echo_skb(): free skb on invalid echo index Kaixuan Li <kaixuanli0131(a)gmail.com> can: isotp: check the frame type, not just the length Yingjie Wang <1075151112(a)qq.com> nvmet: reject keep-alive timeouts that would overflow Christoph Hellwig <hch(a)lst.de> xfs: fix recovery of partial attr removals Hyunwoo Kim <imv4bel(a)gmail.com> net: restore refcount ordering for lockless socket access Daejun Park <daejun7.park(a)samsung.com> xfs: clamp the pNFS layout range to the maximum file size Daejun Park <daejun7.park(a)samsung.com> xfs: cap the block count of xfs_iomap_write_direct() at one extent Daejun Park <daejun7.park(a)samsung.com> xfs: clamp a pNFS LAYOUTCOMMIT extent before computing its end Daejun Park <daejun7.park(a)samsung.com> xfs: add a flag to convert unwritten extents without allocating blocks Daejun Park <daejun7.park(a)samsung.com> xfs: mark the inode preallocated for pNFS write layouts past EOF Zhe Liu <liuzhe1(a)kylinos.cn> blk-iocost: account flush sequence latency only once Krystian Kaniewski <krystianmkaniewski(a)gmail.com> blk-mq: fix out-of-bounds read in blk_mq_free_rqs Reid Downing <skibletz(a)gmail.com> xfs: fix wrong compat fields in xfs_ioctl32_bstat_copyin() Hungyu Lin <dennylin0707(a)gmail.com> block: Return the soft block size for compat BLKBSZGET Cong Zhang <cong.zhang(a)oss.qualcomm.com> virtio_blk: use synchronous quiesce in virtblk_freeze_priv() Josef Bacik <josef(a)toxicpanda.com> blk-mq: end the request if getting a keyslot fails Hungyu Lin <dennylin0707(a)gmail.com> inotify: do not coalesce rename events chenglong.ma <longpareto(a)gmail.com> vduse: fix VA/PA confusion in the coherent page fault path Thorsten Blum <blum(a)kernel.org> hwrng: virtio - prevent use-after-free after a failed restore Esben Haabendal <esben(a)geanix.com> drm/bridge: nwl-dsi: Limit LCDIF specific sync override Esben Haabendal <esben(a)geanix.com> drm/bridge: nwl-dsi: Cleanup endpoint mux control selection Yuho Choi <oss.patchbox(a)gmail.com> vdpa/snet: Don't discard the DPU error in snet_send_ctrl_msg() Yuho Choi <oss.patchbox(a)gmail.com> iommu/virtio: Reset device before deleting virtqueues on probe failure Fang Xieyan <fangxy(a)xiaopeng.com> vhost: fix used ring index wrap in vhost_add_used_n_in_order Shubham Antil <shubham(a)octane.security> vhost-scsi: zero misaligned I/O bounce pages Kyle Zeng <kylebot(a)openai.com> net/sched: sch_qfq: prevent aggregate self-replacement Jianyun Gao <jianyungao89(a)gmail.com> xfs: fix temporary cursor leak in btree shift corruption paths Naman Jain <namjain(a)linux.microsoft.com> x86/init: Initialize wall clock in get_rtc_noop() Cen Zhang <zzzccc427(a)gmail.com> ocfs2: cache the mount context for dentry lock callbacks Cen Zhang <zzzccc427(a)gmail.com> ocfs2: wait for filecheck kobject release after a failed add Cen Zhang <zzzccc427(a)gmail.com> ocfs2/cluster: unlink socket containers before releasing resources Cen Zhang <zzzccc427(a)gmail.com> ocfs2: stop recovery before shutting down local allocators Cen Zhang <zzzccc427(a)gmail.com> ocfs2/dlm: serialize migration MLE cleanup on failure Cen Zhang <zzzccc427(a)gmail.com> ocfs2: keep locking_state within the cluster connection lifetime Matheus Alves de Almeida <matheus.aalmeida(a)inf.ufrgs.br> fat: hold truncate_lock in fat_write_failed() Joseph Qi <joseph.qi(a)linux.alibaba.com> ocfs2: do not read the entry array of an empty xattr block Joseph Qi <joseph.qi(a)linux.alibaba.com> ocfs2: do not index before the entry array when dividing an empty bucket Joseph Qi <joseph.qi(a)linux.alibaba.com> ocfs2: do not read the entry array of an empty xattr bucket Joseph Qi <joseph.qi(a)linux.alibaba.com> ocfs2: find the xattr entry again after converting a block to a bucket Joseph Qi <joseph.qi(a)linux.alibaba.com> ocfs2: find the xattr entry again after defragmenting a bucket Andrew Morton <akpm(a)linux-foundation.org> openrisc: export __mulsi3 for modules T.J. Mercier <tjmercier(a)google.com> mm: memcontrol: fix NULL pointer deref and UAF from high_work_func() on dying memcg Mike Rapoport (Microsoft) <rppt(a)kernel.org> mm/cma: accept memory of CMA areas reserved at a fixed address Mike Rapoport (Microsoft) <rppt(a)kernel.org> mm/cma: accept memory of multi-range CMA areas Lorenzo Stoakes (ARM) <ljs(a)kernel.org> mm/vma: update VMA iterator state on error in new VMA merge Yafang Shao <laoar.shao(a)gmail.com> mm/migrate: snapshot the source nid before the misplaced migration Hungyu Lin <dennylin0707(a)gmail.com> mm/migrate: untag addresses when querying page nodes Chris Down <chris(a)chrisdown.name> mm: make swapoff interruptible when unusing mms/shmem SJ Park <sj(a)kernel.org> mm/damon/sysfs-schemes: hold damon_sysfs_lock in target_metric_store() Hengyu Liang <hengyul(a)cs.unc.edu> fs/proc/task_mmu: return -ENOTTY for unknown pagemap ioctls Samarth Narang <samarth.colleges(a)gmail.com> mm/ksm: keep soft-dirty when merging a page Zenghui Yu (Huawei) <zenghui.yu(a)linux.dev> mm/page_alloc: mark pages freed by __free_pages_core() as not tagged Li Zhe <lizhe.67(a)bytedance.com> mm/hugetlb: fix mremap deadlock when PMD sharing is possible Li Zhe <lizhe.67(a)bytedance.com> mm/hugetlb: fix mremap move length truncation Hungyu Lin <dennylin0707(a)gmail.com> mm/page-writeback: avoid 32-bit overflow in dirty threshold shares Kyle Zeng <kylebot(a)openai.com> mm/khugepaged: flush deferred unmaps before dropping a failed folio Babu Moger <babu.moger(a)amd.com> x86,fs/resctrl: Keep mbm_assign_mode in default mode at boot Babu Moger <babu.moger(a)amd.com> x86/resctrl: Correct ABMC counter ID field width Mohit Sharma <mohit.sharma(a)oss.qualcomm.com> ASoC: qcom: q6apm: Guard callbacks until probe data is ready Michael McAllister <me(a)michaelmcallister.org> Bluetooth: qca: Fix the WCN3950 NVM baud rate offset Valentin Kindschi <valentin.kindschi(a)fiveco.ch> Bluetooth: hci_sync: pause advertising for the scan address update Valentin Kindschi <valentin.kindschi(a)fiveco.ch> Bluetooth: hci_sync: re-enable legacy advertising on resume Zack Rusin <zack.rusin(a)broadcom.com> x86/vmware: Fix i386 high-bandwidth hypercall arguments Yingjie Wang <1075151112(a)qq.com> ipv6: reject wrapped temporary address preferred lifetimes Sean Christopherson <seanjc(a)google.com> KVM: x86: Unconditionally reset MMU context when emulating INIT Sean Christopherson <seanjc(a)google.com> KVM: x86/mmu: Cap number of parent PTEs per SP at 1000 (the arbitrary rmap limit) Sean Christopherson <seanjc(a)google.com> KVM: nVMX: Process each host MSR entry at most once when unwinding failed VM-Entry Sean Christopherson <seanjc(a)google.com> KVM: x86: Conditionally resched when restarting REP string emulation Sean Christopherson <seanjc(a)google.com> KVM: x86/mmu: Conditionally resched when retrying gPTE walk on A/D update failure Daejun Park <daejun7.park(a)samsung.com> nvme: unregister when pr_register() is given a zero new key Vas Zayarskiy <contact(a)vasily.cc> hwmon: (aquacomputer_d5next) Avoid truncating scaled sensor readings Guenter Roeck <linux(a)roeck-us.net> hwmon: (sht4x) Convert update_interval to jiffies in pending data check Guenter Roeck <linux(a)roeck-us.net> hwmon: (coretemp) Check for NULL platform device in hotplug callbacks Baek Kyu, Kim <pocj8ur4in(a)gmail.com> hwmon: (gpio-fan) Update the speed cache before dropping the PM reference Guenter Roeck <linux(a)roeck-us.net> hwmon: (pmbus) Fix return value check from thermal zone registration Guenter Roeck <linux(a)roeck-us.net> hwmon: (pmbus) Release devres allocated memory after devm_thermal_of_zone_register error Guenter Roeck <linux(a)roeck-us.net> hwmon: (pmbus) Check return value from pmbus_thermal_add_sensor() Guenter Roeck <linux(a)roeck-us.net> hwmon: (pmbus/q54sj108a2) Add missing NULL pointer check Guenter Roeck <linux(a)roeck-us.net> hwmon: (peci/dimmtemp) Fix devres leak and UAF on concurrent unbind Guenter Roeck <linux(a)roeck-us.net> hwmon: (nct6683) Fix incorrect struct cast in show_pwm() and store_pwm() Guenter Roeck <linux(a)roeck-us.net> hwmon: (lm87) Fix drvdata type confusion in vrm_show() and vrm_store() Guenter Roeck <linux(a)roeck-us.net> hwmon: (hp-wmi-sensors) Fix unbounded loops in scale_numeric_sensor() Guenter Roeck <linux(a)roeck-us.net> hwmon: (hp-wmi-sensors) Avoid global struct mutation Guenter Roeck <linux(a)roeck-us.net> hwmon: (asus_wmi_sensors) Avoid global struct mutation Guenter Roeck <linux(a)roeck-us.net> hwmon: (aquacomputer_d5next) Check maxcollection when probing AQUAERO devices Javier Carrasco <javier.carrasco.cruz(a)gmail.com> hwmon: chipcap2: do not discard pending alarms on disable Javier Carrasco <javier.carrasco.cruz(a)gmail.com> hwmon: chipcap2: balance regulator state Javier Carrasco <javier.carrasco.cruz(a)gmail.com> hwmon: chipcap2: enable IRQ processing when regulator is already enabled Javier Carrasco <javier.carrasco.cruz(a)gmail.com> hwmon: chipcap2: defer probe when IRQs are unavailable Javier Carrasco <javier.carrasco.cruz(a)gmail.com> hwmon: chipcap2: fix be16 handling Javier Carrasco <javier.carrasco.cruz(a)gmail.com> hwmon: chipcap2: fix off-by-one in command mode retry loop Javier Carrasco <javier.carrasco.cruz(a)gmail.com> hwmon: chipcap2: fix command error diagnostics Jiale Yao <yaojiale02(a)163.com> hwmon: (aquacomputer_d5next) reject short status reports Baek Kyu, Kim <pocj8ur4in(a)gmail.com> hwmon: (corsair-cpro) Cache fan target only after a successful command Xia Yan <yana06070(a)163.com> veth: keep carrier off when resizing channels with a down peer Fang Xieyan <fangxy(a)xiaopeng.com> vringh: reject empty / undersized indirect descriptor tables Fang Xieyan <fangxy(a)xiaopeng.com> vringh: bound top-level re-entry into indirect tables Tal Zussman <tz2294(a)columbia.edu> vhost-vdpa: fix pinned page leak in vhost_vdpa_pa_map() error path Qihang <q.h.hack.winter(a)gmail.com> cipso: fix optlen corruption in cipso_v4_delopt() Maíra Canal <mcanal(a)igalia.com> drm/v3d: Widen cache_clean_lock over the whole L2TCACTL sequence Jose Maria Casanova Crespo <jmcasanova(a)igalia.com> drm/v3d: Initialize timedout_batches when running a CSD job Daejun Park <daejun7.park(a)samsung.com> xfs: don't skip free extents of the longest length in a whole-AG FITRIM Daejun Park <daejun7.park(a)samsung.com> xfs: don't skip free extents in later batches of a whole-AG FITRIM Hungyu Lin <dennylin0707(a)gmail.com> ext2: preserve completed DIO bytes when buffered fallback fails David Hildenbrand (Arm) <david(a)kernel.org> mm/filemap: finish fault cleanup before dropping the fault lock Josef Bacik <josef(a)toxicpanda.com> mm/filemap: don't lose a folio lock wakeup to a signal Josef Bacik <josef(a)toxicpanda.com> mm/memfd: make f_pos accesses atomic Josef Bacik <josef(a)toxicpanda.com> mm/mglru: don't use stack pointers when walking PUD and PMD tables David Hildenbrand (Arm) <david(a)kernel.org> mm/shmem: fix truncation of files containing only swapin-error markers David Hildenbrand (Arm) <david(a)kernel.org> mm/shmem: fix truncate loop after boundary swapin failure David Hildenbrand (Arm) <david(a)kernel.org> mm/shmem: fix truncate hang in large swap entry David Hildenbrand (Arm) <david(a)kernel.org> mm/shmem: rescan after nonuniform folio splitting David Hildenbrand (Arm) <david(a)kernel.org> mm/shmem: discard whole new large folios on fallocate rollback Chris Mason <mason(a)kernel.org> mm/shmem: preserve data in clean folios when splitting fails Chris Mason <mason(a)kernel.org> mm/shmem: stop retrying folios that cannot be split Josef Bacik <josef(a)toxicpanda.com> tmpfs: preserve explicitly disabled quota limits Josef Bacik <josef(a)toxicpanda.com> tmpfs: keep the quota soft limits of an unused id Chris Mason <mason(a)kernel.org> mm/mempolicy: charge shared policy nodes Ian Bridges <icb(a)fastmail.org> ksmbd: grant a POSIX ACL group entry only to the group's members Federico Musto <federico(a)rimpianto.com> net: atl1c: drop oversized RX frames instead of panicking Vidya Srinivas <vidya.srinivas(a)intel.com> drm/i915/display: Single scaler per pipe on WCL Lu Yao <yaolu(a)kylinos.cn> drm/i915/gem: Reset err for each fence entry Jouni Högander <jouni.hogander(a)intel.com> drm/i915/psr: Don't clip plane state destination rectangle Jouni Högander <jouni.hogander(a)intel.com> drm/i915/psr: Fix SFF and CFF CTL register bit definitions Jouni Högander <jouni.hogander(a)intel.com> drm/i915/psr: Disable linked plane sel fetch as well Jouni Högander <jouni.hogander(a)intel.com> drm/i915/display: Add enabled pipe planes into state for selective fetch Jouni Högander <jouni.hogander(a)intel.com> drm/i915/psr: Clear selective fetch area when duplicating plane state Breno Leitao <leitao(a)debian.org> x86/bugs: Select the BHI mitigation based on the attack vector properly Miguel Ojeda <ojeda(a)kernel.org> rust: cpufreq: fix `undocumented_unsafe_blocks` in `PolicyCpu::from_cpu()` Ian Bridges <icb(a)fastmail.org> ksmbd: require DELETE access for delete-on-close opens Jamal Hadi Salim <jhs(a)mojatatu.com> bpf: Fix skb_pull() BUG in __bpf_redirect_neigh() YuanZhe Liu <25031212351(a)stu.xidian.edu.cn> ALSA: hwdep: Serialize DSP load requests YuanZhe Liu <25031212351(a)stu.xidian.edu.cn> ALSA: usx2y: Initialize idle URBs before submitting streams YuanZhe Liu <25031212351(a)stu.xidian.edu.cn> ALSA: us122l: Fix NULL dereference at hwdep open and release YuanZhe Liu <25031212351(a)stu.xidian.edu.cn> ALSA: us122l: Add missing NULL check in usb_stream_hwdep_mmap() Evanshenf <archwse(a)gmail.com> drm/loongson: Handle buffer mapping failures when clearing a BO Evanshenf <archwse(a)gmail.com> drm/loongson: Fix double free on BO initialization failure Evanshenf <archwse(a)gmail.com> drm/loongson: Fix framebuffer selection in async cursor updates Shao Mingyin <shao.mingyin(a)zte.com.cn> scsi: target: tcmu: Fix divide-by-zero in data_pages_per_blk store Yuanhe Shu <xiangzao(a)linux.alibaba.com> scsi: target: Verify the iSCSI ISID is null-terminated Yingjie Wang <x-professor(a)outlook.com> scsi: bsg: Report synchronous data copyback failures Yu Zhang <yuz08559(a)gmail.com> ptp: fix use-after-free in extts_fifo_show() reading tsevqs unlocked guolingxing <guolingxing(a)tju.edu.cn> btrfs: sysfs: restore NOFS context on early return in btrfs_sysfs_add_block_group_type() Masafumi Suzuki <shengshilingmu97(a)gmail.com> sctp: account for chunk padding in sctp_init_cause() Lucas Tanure <lucas.tanure(a)neat.no> drm/vc4: hdmi: enable scrambling before the TMDS clock starts Lucas Tanure <lucas.tanure(a)neat.no> drm/vc4: hdmi: always cancel the scrambling work synchronously Dom Cobley <popcornmix(a)gmail.com> drm/vc4: hdmi: power down the BCM2712 PHY when the output is disabled Zhou Qiuyue <n0ps1edzz(a)gmail.com> ipv6: raw: fix use-after-free in rawv6_send_hdrinc() Franck Baur <franck.baur.67(a)gmail.com> net: jme: keep RX MAC clock enabled for WoL Sven Eckelmann <sven(a)narfation.org> batman-adv: stop originator purge worker before freeing TT Sven Eckelmann <sven(a)narfation.org> batman-adv: fix skb leak when hard_iface is being released Sven Eckelmann <sven(a)narfation.org> batman-adv: dat: initialize orig_node of unfilled candidate slots Kyle Zeng <kylebot(a)openai.com> batman-adv: mcast: validate tracker padding before forwarding Chengfeng Ye <nicoyip.dev(a)gmail.com> batman-adv: Close OGM aggregation before transmission Yuanfu Xie <yuanfuxie(a)stu.pku.edu.cn> 9p: don't decrement a server-owned zero nlink Yehyeong Lee <yhlee(a)isslab.korea.ac.kr> 9p/xen: validate the response size from the backend Yu Zhang <yuz08559(a)gmail.com> scsi: target: Fix demo-mode dynamic ACL dev-entry UAF vs LUN teardown Andrew Luebke <andrew.luebke(a)gmail.com> scsi: aic79xx: Fix NULL pointer dereference in device reset Imre Kaloz <kaloz(a)kernel.org> scsi: aic7xxx: Use default settings on the SGI O2 onboard controllers Fourie Zhang <fouriezhang(a)tencent.com> xfrm4: use a full socket for local errors Toke Høiland-Jørgensen <toke(a)toke.dk> wifi: mac80211: reinstate IEEE80211_TX_CTL_AMPDU flag in ieee80211_tx_prep_agg() Maíra Canal <mcanal(a)igalia.com> drm/vc4: Drop the BO reservations outside of job_lock Maíra Canal <mcanal(a)igalia.com> drm/vc4: Publish the output fence outside of job_lock Zijing Yin <yzjaurora(a)gmail.com> wifi: cfg80211: fix out-of-bounds read in valid_rule() Alex Kazinsky <a.kazinsky(a)ideco.ru> wifi: rsi: Skip TX aggregation setup for non-QoS frames Jason Perlow <jperlow(a)gmail.com> wifi: brcmfmac: map msgbuf RX packet IDs bidirectional Weigang He <geoffreyhe2(a)gmail.com> wifi: mac80211: reload TDLS header pointer after skb_linearize() André Draszik <andre.draszik(a)linaro.org> drm/drm_crtc: ensure dma_fence_ops remain valid during device unbind Devin Wittmayer <lucid_duck(a)justthetip.ca> drm/panic: Fix kmsg screen hang on a long log line Sabrina Dubroca <sd(a)queasysnail.net> xfrm: espintcp: reorder operations within espintcp_init_sk Qihang <q.h.hack.winter(a)gmail.com> xfrm: interface: validate the IP header on xmit Hyungjung Joo <jhj140711(a)gmail.com> net/9p/usbg: clear stale client pointer on close Michael Grzeschik <mgr(a)kernel.org> net/9p/usbg: remove bogus context initialization in alloc_requests Michael Grzeschik <mgr(a)kernel.org> net/9p/usbg: fix out_req buffer leak in disable_usb9pfs Michael Grzeschik <mgr(a)kernel.org> net/9p/usbg: call disable_usb9pfs() from usb9pfs_disable() Michael Grzeschik <mgr(a)kernel.org> net/9p/usbg: always reset completion when disconnecting Michael Grzeschik <mgr(a)kernel.org> net/9p/usbg: set client to Disconnected on usb9pfs_disable Michael Grzeschik <mgr(a)kernel.org> net/9p/usbg: also disable endpoints on p9_usbg_close Yizhou Zhao <zhaoyz24(a)mails.tsinghua.edu.cn> net/9p/usbg: Fix use-after-free in disable_usb9pfs() Zhao Zhang <zzhan461(a)ucr.edu> 9p: fix caches_show() out-of-bounds write Yifei Gao <gyf161023(a)gmail.com> 9p/xen: fix refcount leak in p9_xen_response() on wrong tag Michael Bommarito <michael.bommarito(a)gmail.com> 9p/trans_virtio: reject mount tags longer than NAME_MAX at probe Chengfeng Ye <nicoyip.dev(a)gmail.com> net/9p/usbg: clear stale request context after abort Chengfeng Ye <nicoyip.dev(a)gmail.com> xfrm: retry inexact policy lookup after node reinsertion Yizhou Zhao <zhaoyz24(a)mails.tsinghua.edu.cn> net/9p/usbg: fix prefix matching in device lookup Christian Brauner <brauner(a)kernel.org> ns: don't add init_ipc_ns and init_net without namespace support Noam D. Eliyahu <noam.d.eliyahu(a)gmail.com> tg3: Invert restart quirk logic to restrict SNP power-down bypass Zhiling Zou <zhilinz(a)nebusec.ai> ipmr: drop packets with unknown ingress VIF Ido Schimmel <idosch(a)nvidia.com> ipmr, ip6mr: validate packets injected into the register vif on xmit Peng Wang <peng_wang(a)linux.alibaba.com> tick/nohz: Reevaluate the tick for kicks flushed outside hardirq Hungyu Lin <dennylin0707(a)gmail.com> posix-timers: Accept NULL clock_getres() output in stubs Yingjie Wang <x-professor(a)outlook.com> scsi: handle out-of-range SG_SET_TIMEOUT values Stanley Jhu <stanleyjhu(a)google.com> scsi: ufs: bsg: Reject UIC commands with a non-zero result byte Stanley Jhu <stanleyjhu(a)google.com> scsi: ufs: bsg: Validate request_len before accessing request Daeho Jeong <daehojeong(a)google.com> f2fs: don't use truncate_inode_pages_final() on live inodes Sahaj Chaudhari <sahaj123.sc(a)gmail.com> gpio: pca953x: Preserve wakeup accounting on parent IRQ failure Henry Martin <bsdhenrymartin(a)gmail.com> rds: fix out-of-bounds conn_path walks via handshake exthdrs Yun Zhou <yun.zhou(a)windriver.com> net: erspan: set lltx to avoid sch_direct_xmit deadlock Donggeun Yoo <donggeunyoo.kernel(a)gmail.com> tracing: Add the bucket size to expr_field_str() Guixin Liu <kanie(a)linux.alibaba.com> cxl/events: Test CME counter expiry with equality, not bitwise AND Bui Viet Dung <dungvn2345(a)gmail.com> Bluetooth: selftest: Pin module for selftest debugfs file operations Guangshuo Li <lgs201920130244(a)gmail.com> mfd: ab8500: Fix child device leaks on probe failure Andrey Misiurov <andrey.misyrov(a)gmail.com> fbdev: core: Initialize modelist in framebuffer_alloc() Breno Leitao <leitao(a)debian.org> ACPI: APEI: accumulate the queued flag across error sections Ridong Chen <chenridong(a)xiaomi.com> mm/page_counter: avoid integer overflow in effective_protection() Devin Wittmayer <lucid_duck(a)justthetip.ca> wifi: mt76: take rcu_read_lock in the USB/SDIO tx completion path Fuad Tabba <fuad.tabba(a)linux.dev> KVM: arm64: timers: Compute an offset-applied CVAL from the current count Jiayuan Chen <jiayuan.chen(a)linux.dev> mm/memcontrol: fix data-race on reading jiffies_64 Priyank Rathod <rathodpriyank(a)google.com> PCI/AER: Fix memory leak in aer_recover_work_func() when pci_dev is missing Kazuki Hanai <hnkz.64(a)gmail.com> media: mediatek: jpeg: Avoid context access after job finish Rupesh Majhi <zoone.rupert(a)gmail.com> iio: pressure: dps310: fix CFG_REG bit definitions Ridham Khurana <khurana.ridham222(a)gmail.com> hwmon: (lm70) Fix rounding of negative temperatures Ruoyu Wang <ruoyuw560(a)gmail.com> media: adv748x: Fix endpoint reference leaks on probe failure Pengpeng Hou <pengpeng(a)iscas.ac.cn> media: require two-byte Cypress type 04 records Balakrishnan Sambath <balakrishnan.s(a)microchip.com> media: microchip-isc: fix WB offset and gain register field masking SJ Park <sj(a)kernel.org> mm/damon/sysfs-schemes: read sysfs_filter->sz_range only once Eric Sandeen <sandeen(a)redhat.com> devtmpfs: restore mount option reconfiguration on get_tree Ben Dooks <ben.dooks(a)codethink.co.uk> devtmpfs: make 'devtmpfs_context_ops' static Kiryl Shutsemau (Meta) <kas(a)kernel.org> mm: page_alloc: make defrag_mode retries follow the promoted order Bernard Pidoux <bernard.f6bvp(a)gmail.com> rose: give the sysctl timer limits in milliseconds Bernard Pidoux <bernard.f6bvp(a)gmail.com> rose: swap the AX.25 connection of a neighbour under a lock Bernard Pidoux <bernard.f6bvp(a)gmail.com> rose: drop the neighbour reference once when a cleared socket is closed Bernard Pidoux <bernard.f6bvp(a)gmail.com> rose: report a timed out call to connect() Bernard Pidoux <bernard.f6bvp(a)gmail.com> rose: hold the socket a received frame is delivered to Bernard Pidoux <bernard.f6bvp(a)gmail.com> rose: hold the listener while a Call Request is queued on it Bernard Pidoux <bernard.f6bvp(a)gmail.com> netrom: only update the BPQ extension flag on circuit set-up frames Bernard Pidoux <bernard.f6bvp(a)gmail.com> netrom: disconnect sockets under their lock when a device goes down Bernard Pidoux <bernard.f6bvp(a)gmail.com> netrom: don't send part of a message that cannot be fragmented whole Bernard Pidoux <bernard.f6bvp(a)gmail.com> netrom: check the window size given by the peer Bernard Pidoux <bernard.f6bvp(a)gmail.com> netrom: drop a frame received with a TTL of 0 Bernard Pidoux <bernard.f6bvp(a)gmail.com> netrom: keep the selected route when a route of a node is removed Bernard Pidoux <bernard.f6bvp(a)gmail.com> netrom: return the peer node in the address given by recvmsg() Bernard Pidoux <bernard.f6bvp(a)gmail.com> netrom: don't give the same circuit ID to two sockets Bernard Pidoux <bernard.f6bvp(a)gmail.com> netrom: give a frame back intact when it cannot be delivered Bernard Pidoux <bernard.f6bvp(a)gmail.com> netrom: use the more flag of each frame taken from the resequencing queue Bernard Pidoux <bernard.f6bvp(a)gmail.com> netrom: don't leak frames in nr_route_frame() Bernard Pidoux <bernard.f6bvp(a)gmail.com> netrom: don't convert the maximum number of tries to jiffies Bernard Pidoux <bernard.f6bvp(a)gmail.com> ax25: don't let connect() find its own socket when calling the same station Bernard Pidoux <bernard.f6bvp(a)gmail.com> ax25: let a socket connect again after a failed or ended connection Bernard Pidoux <bernard.f6bvp(a)gmail.com> ax25: keep the window below 8 when a socket goes back to modulo 8 Bernard Pidoux <bernard.f6bvp(a)gmail.com> ax25: make 16 the smallest maximum_packet_length of a port Bernard Pidoux <bernard.f6bvp(a)gmail.com> ax25: don't leave half a message on a connection when fragmenting fails Bernard Pidoux <bernard.f6bvp(a)gmail.com> ax25: free the copy of an IP packet that ax25_send_frame() turned down Bernard Pidoux <bernard.f6bvp(a)gmail.com> ax25: don't test the socket flags of a connection that has no socket Bernard Pidoux <bernard.f6bvp(a)gmail.com> ax25: put an incoming connection on the listener's queue once it is set up Bernard Pidoux <bernard.f6bvp(a)gmail.com> ax25: free the old digipeater path of a listed socket under ax25_list_lock Bernard Pidoux <bernard.f6bvp(a)gmail.com> ax25: don't copy an uninitialised address to recvmsg()'s caller Bernard Pidoux <bernard.f6bvp(a)gmail.com> ax25: don't take a reference on a gone device in ax25_accept() Bernard Pidoux <bernard.f6bvp(a)gmail.com> ax25: don't build a frame header from an uninitialised digipeater list Bernard Pidoux <bernard.f6bvp(a)gmail.com> 6pack: restart the transmit queue when the interface is opened Bernard Pidoux <bernard.f6bvp(a)gmail.com> mkiss: restart the transmit queue when the interface is opened Bernard Pidoux <bernard.f6bvp(a)gmail.com> ax25: free a closed socket when its device goes down Bernard Pidoux <bernard.f6bvp(a)gmail.com> ax25: don't create a second connection for a link on an incoming SABM Bernard Pidoux <bernard.f6bvp(a)gmail.com> rose: don't give the same LCI to two calls placed at the same time Bernard Pidoux <bernard.f6bvp(a)gmail.com> netrom: ignore a BPQ transport timeout below the sysctl minimum Bernard Pidoux <bernard.f6bvp(a)gmail.com> rose: arm the neighbour timers with mod_timer() Bernard Pidoux <bernard.f6bvp(a)gmail.com> bpqether: fix truncated /proc/net/bpqether on partial reads Bernard Pidoux <bernard.f6bvp(a)gmail.com> bpqether: leave the Ethernet device's queue and counters alone Bernard Pidoux <bernard.f6bvp(a)gmail.com> mkiss: don't use a tty write error as a byte count Bernard Pidoux <bernard.f6bvp(a)gmail.com> mkiss: size the frame buffers for worst-case KISS escaping Ricardo Ribalda <ribalda(a)chromium.org> media: uvcvideo: Force UVC version for Avermedia GC515 Ricardo Ribalda <ribalda(a)chromium.org> media: uvcvideo: Add autosuspend quirk for AVerMedia Live Gamer HD 2 Stanislaw Gruszka <stf_xl(a)wp.pl> wifi: mac80211: queue frames while off-channel Denis Pauk <pauk.denis(a)gmail.com> hwmon: (nct6775) Add ASUS X870/W480 to WMI monitoring list Maximilian Luz <luzmaximilian(a)gmail.com> hwmon: (nct6775) Add ASUS ROG STRIX X870E-H GAMING WIFI7 Yi Cong <yicong(a)kylinos.cn> wifi: mt76: mt792x: fix negative errno truncation in offload capability Marek Vasut <marek.vasut+renesas(a)mailbox.org> PCI: rcar-gen4: Limit Max_Read_Request_Size to 256 Bytes Christian Borntraeger <borntraeger(a)linux.ibm.com> s390/vmcp: Initialize full session info to zero Jeff Layton <jlayton(a)kernel.org> nfsd: shorten extack string returned with dodgy listener Cen Zhang (Microsoft Security FORGE Labs) <cenzhang(a)linux.microsoft.com> ksmbd: fix tree connection use-after-free in smb2_tree_connect() Rosen Penev <rosenp(a)gmail.com> net: bgmac: enable interrupts only after NAPI is ready Rosen Penev <rosenp(a)gmail.com> mtd: rawnand: ndfc: use devm_platform_ioremap_resource() Rosen Penev <rosenp(a)gmail.com> mtd: rawnand: ndfc: fix gcc uninitialized var Arnd Bergmann <arnd(a)arndb.de> mtd: rawnand: ndfc: add CONFIG_OF dependency Rosen Penev <rosenp(a)gmail.com> mtd: rawnand: ndfc: use ioread32be/iowrite32be and allow COMPILE_TEST Eric Biggers <ebiggers(a)kernel.org> raid6: add missing vzeroupper to AVX2 code Diego Oliva <diego(a)bynar.io> smb: client: reject FIND data areas that run past the received response Paulo Alcantara <pc(a)manguebit.org> smb: client: reclaim credits for decrypted reads with no matching mid Darrick J. Wong <djwong(a)kernel.org> xfs: forcibly reset quota timers when upgrading to bigtime during repair Darrick J. Wong <djwong(a)kernel.org> xfs: reinitialize dquot block if non-first dquot can't load Qingfang Deng <qingfang.deng(a)linux.dev> pppoe: delete session hash entries by pointer match Liz Fong-Jones <lizf(a)honeycomb.io> writeback: keep cleanup_offline_cgwb()'s scan out of syncs Christian Loehle <christian.loehle(a)arm.com> ACPI: CPPC: Accept requests to retain immutable autonomous selection Christian Loehle <christian.loehle(a)arm.com> ACPI: CPPC: Propagate errors from cross-CPU FFH calls Christian Loehle <christian.loehle(a)arm.com> ACPI: CPPC: Validate FFH register fields before hardware access Ping-Ke Shih <pkshih(a)realtek.com> wifi: rtw88: TX report with long timeout for non-PCIE devices FUJITA Tomonori <fujita.tomonori(a)gmail.com> rust: bug: update the SAFETY comment for warn_slowpath_fmt() on UML FUJITA Tomonori <fujita.tomonori(a)gmail.com> rust: bug: pass TAINT_WARN to warn_slowpath_fmt() on UML SJ Park <sj(a)kernel.org> mm/damon/core: filter out damos address filter-split failed region SJ Park <sj(a)kernel.org> mm/damon/core: remove unreachable damos charge_{target,addr}_from SJ Park <sj(a)kernel.org> mm/damon/core: handle uninitialized damos_quota_goal->last_psi_total SJ Park <sj(a)kernel.org> mm/damon/core: skip applying scheme if region split for quota fails Eric Biggers <ebiggers(a)kernel.org> raid6: add missing vzeroupper to AVX-512 code Eric Biggers <ebiggers(a)kernel.org> xor: add missing vzeroupper to AVX code Eric Biggers <ebiggers(a)kernel.org> fsverity: Explicitly require FMODE_READ to retrieve hashes Yuansheng Yang <0xbeac(a)gmail.com> io_uring/rsrc: hold uring_lock across index-alloc put_user Jens Axboe <axboe(a)kernel.dk> io_uring/poll: don't poll a writer for urgent data Jens Axboe <axboe(a)kernel.dk> io_uring/poll: don't poll a writer for a read side hangup Shang En Sim <sim(a)shangen.org> io_uring/poll: cancel all matching requests in one pass Shang En Sim <sim(a)shangen.org> io_uring/cancel: count all requests that a CANCEL_ALL cancels Shakeel Butt <shakeel.butt(a)linux.dev> io_uring/sqpoll: do the return-to-userspace work in the SQPOLL thread Shuai Liu <847807867(a)qq.com> io_uring/sqpoll: don't set IO_SQ_THREAD_SHOULD_STOP on thread exit Jens Axboe <axboe(a)kernel.dk> io_uring/sqpoll: don't attach to a thread that is canceling Chris Mason <mason(a)kernel.org> io_uring/cancel: drop sqd->lock while SQPOLL waits Til Kaiser <mail(a)tk154.de> mlxsw: Initialize register query payloads Janne Grunau <j(a)jannau.net> wifi: brcmfmac: cfg80211: Report port_authorized for 4-way HS offload Gael Blivet <gael.blivet(a)gmail.com> ksmbd: look up stream size by exact xattr name Xiaoyao Li <xiaoyao.li(a)intel.com> KVM: TDX: Don't assume exit_reason[31:16] is all-0 in tdx_to_vmx_exit_reason() Xiaoyao Li <xiaoyao.li(a)intel.com> KVM: TDX: Set bits 31:16 to 0 and use UNDEFINED when synthesizing exit reason Xiaoyao Li <xiaoyao.li(a)intel.com> KVM: TDX: Stuff exit_reason with UNDEFINED on wait_for_sept_zap return Shivank Garg <shivankg(a)amd.com> KVM: guest_memfd: take the invalidate lock when unbinding a dying file Sean Christopherson <seanjc(a)google.com> KVM: Only bind memslot to guest_memfd instance for CREATE operations Sean Christopherson <seanjc(a)google.com> KVM: Harden and prepare for modifying existing guest_memfd memslots Sean Christopherson <seanjc(a)google.com> KVM: nSVM: Reject KVM_SET_NESTED_STATE if L1 has EFER.LMA=1 && EFER.LME=0 Chuck Lever <chuck.lever(a)oracle.com> NFSD: Complete a cld upcall when copying its reply fails Chuck Lever <chuck.lever(a)oracle.com> NFSD: Complete a cld upcall when the daemon closes the pipe Chuck Lever <chuck.lever(a)oracle.com> NFSD: Move the cld upcall message out of the caller's stack frame Chuck Lever <chuck.lever(a)oracle.com> NFSD: Send a meaningful CB_RECALL_ANY keep count Chuck Lever <chuck.lever(a)oracle.com> NFSD: Count the delegations held by each client Mike Snitzer <snitzer(a)kernel.org> NFS/localio: detect a short read or write before the iterator has moved Jeff Layton <jlayton(a)kernel.org> NFSD: stop registering with rpcbind after a failure in listener_set Jeff Layton <jlayton(a)kernel.org> SUNRPC: report local rpcbind calls that get no answer Jeff Layton <jlayton(a)kernel.org> NFSD: report listener creation failures through extack Jeff Layton <jlayton(a)kernel.org> nfsd: don't offer flexfiles layouts when NFSv3 isn't being served Christoph Hellwig <hch(a)lst.de> exportfs,nfsd: rework checking for layout-based block device access support Christoph Hellwig <hch(a)lst.de> exportfs: split out the ops for layout-based block device access André Almeida <andrealmeid(a)igalia.com> exportfs: Complete kernel-doc for struct export_operations Sergey Bashirov <sergeybashirov(a)gmail.com> NFSD/blocklayout: Extract extent mapping from proc_layoutget Chuck Lever <chuck.lever(a)oracle.com> NFSD: map fh_verify() status codes for NFS_ACLv2 replies Chuck Lever <chuck.lever(a)oracle.com> NFSD: Move version-specific ACCESS maps into per-version code Chuck Lever <chuck.lever(a)oracle.com> NFSD: Replace nfsd_write()'s "stable" argument with "iocb_flags" Bharath SM <bharathsm(a)microsoft.com> smb: align durable reconnect v2 context to 8 byte boundary Ratnaker Gautam <ratnaker.gautam(a)kuleuven.be> smb: client: bound POSIX lock data area by response length Benjamin Coddington <ben.coddington(a)hammerspace.com> NFSv4/pnfs: bound the CB_NOTIFY_DEVICEID array count before allocating Darrick J. Wong <djwong(a)kernel.org> xfs: improve dirent bounds checking in scrub and repair Darrick J. Wong <djwong(a)kernel.org> xfs: refactor directory data block walking loops in scrub Darrick J. Wong <djwong(a)kernel.org> xfs: check for buffer overruns when examining local/remote xattr entries Darrick J. Wong <djwong(a)kernel.org> xfs: break out xattr entry checks into separate functions Ratnaker Gautam <ratnaker.gautam(a)kuleuven.be> smb: client: validate SMB1 EA list bounds before parsing Zhaoyang Huang <zhaoyang.huang(a)unisoc.com> mm: remove '!root_reclaim' checking in should_abort_scan() Paulo Alcantara <pc(a)manguebit.org> smb: client: require stable pages for SMB compression Abdifatah Suruur <suruurism(a)gmail.com> smb: client: reject short SESSION_SETUP responses Diego Oliva <diego(a)bynar.io> smb: client: fix OOB read in the SMB_FIND_FILE_UNIX name scan Diego Oliva <diego(a)bynar.io> smb: client: fix OOB read of the resume name sent in TRANS2_FIND_NEXT2 ChenXiaoSong <chenxiaosong(a)kylinos.cn> smb: move some duplicate struct definitions to common/fscc.h ChenXiaoSong <chenxiaosong(a)kylinos.cn> smb: move list of FileSystemAttributes to common/fscc.h ZhangGuoDong <zhangguodong(a)kylinos.cn> smb: move some duplicate definitions to common/smb2pdu.h ChenXiaoSong <chenxiaosong(a)kylinos.cn> smb: move create_durable_rsp_v2 to common/smb2pdu.h ChenXiaoSong <chenxiaosong(a)kylinos.cn> smb: move create_durable_handle_reconnect_v2 to common/smb2pdu.h ChenXiaoSong <chenxiaosong(a)kylinos.cn> smb: move create_durable_req_v2 to common/smb2pdu.h ZhangGuoDong <zhangguodong(a)kylinos.cn> smb: move smb_sockaddr_in and smb_sockaddr_in6 to common/smb2pdu.h Eduard Zateev <hackerowskiy(a)gmail.com> smb: client: hold server info until cifsd exits Thomas Huth <thuth(a)redhat.com> smb: client: Avoid leaking sensitive data to the heap in connect.c Jinwang Li <jinwang.li(a)oss.qualcomm.com> Bluetooth: L2CAP: Ignore connection responses with wrong ident Siwei Zhang <oss(a)fourdim.xyz> Bluetooth: L2CAP: Only accept connection responses to outstanding requests Siwei Zhang <oss(a)fourdim.xyz> Bluetooth: L2CAP: Reject signalling responses in invalid states Eric Biggers <ebiggers(a)kernel.org> fsverity: Tell LSMs about signature only after verity is enabled Eric Biggers <ebiggers(a)kernel.org> crypto: sa2ul - Fix HMAC key preparation Andrew Stellman <astellman(a)stellman-greene.com> nvmet-rdma: fix out-of-bounds write in nvmet_rdma_map_sgl_inline() Chris Mason <mason(a)kernel.org> backing-file: always end a queued write Ashok Raj <ashok.raj(a)oss.qualcomm.com> cxl/features: Ensure that count is set before access to ent[] __counted_by() Peter Ujfalusi <peter.ujfalusi(a)linux.intel.com> ALSA: x86: hdmi: fix chmap array missing terminator entry Abdifatah Suruur <suruurism(a)gmail.com> smb: client: validate the data area in SMB2_read() ------------- Diffstat: Documentation/admin-guide/kernel-parameters.rst | 97 +-- Documentation/admin-guide/kernel-parameters.txt | 109 +++ Documentation/filesystems/fsverity.rst | 3 + Documentation/filesystems/overlayfs.rst | 3 +- Documentation/filesystems/resctrl.rst | 87 +- Documentation/hwmon/coretemp.rst | 3 + MAINTAINERS | 2 +- Makefile | 4 +- arch/arm64/Kconfig | 1 + arch/arm64/include/asm/sdei.h | 3 +- arch/arm64/include/asm/suspend.h | 2 +- arch/arm64/kernel/entry-common.c | 40 +- arch/arm64/kernel/machine_kexec_file.c | 2 + arch/arm64/kernel/process.c | 17 + arch/arm64/kernel/sdei.c | 59 +- arch/arm64/kernel/topology.c | 13 +- arch/arm64/kvm/arch_timer.c | 27 +- arch/arm64/kvm/arm.c | 4 +- arch/arm64/kvm/hyp/nvhe/hyp-main.c | 28 +- arch/arm64/kvm/hyp/vhe/switch.c | 11 +- arch/arm64/kvm/mmu.c | 4 +- arch/arm64/kvm/nested.c | 10 + arch/arm64/kvm/ptdump.c | 50 +- arch/arm64/kvm/vgic/vgic-mmio-v3.c | 10 + arch/arm64/kvm/vgic/vgic.c | 11 +- arch/arm64/mm/mmap.c | 4 +- arch/arm64/mm/proc.S | 8 + arch/loongarch/include/asm/hw_breakpoint.h | 4 +- arch/loongarch/include/asm/loongarch.h | 3 + arch/loongarch/include/asm/processor.h | 1 + arch/loongarch/include/asm/switch_to.h | 2 +- arch/loongarch/kernel/hw_breakpoint.c | 39 +- arch/loongarch/kernel/numa.c | 8 +- arch/m68k/68000/entry.S | 24 +- arch/m68k/coldfire/entry.S | 3 +- arch/mips/mm/cex-gen.S | 16 + arch/mips/pci/ops-mace.c | 26 +- arch/mips/pci/pci-ip32.c | 9 +- arch/mips/sgi-ip32/ip32-irq.c | 45 +- arch/openrisc/kernel/or32_ksyms.c | 1 + arch/powerpc/net/bpf_jit.h | 7 + arch/powerpc/net/bpf_jit_comp.c | 35 +- arch/powerpc/platforms/pseries/iommu.c | 67 +- arch/s390/pci/pci_irq.c | 26 +- arch/x86/boot/startup/sme.c | 2 +- arch/x86/include/asm/vmware.h | 24 +- arch/x86/include/asm/xor_avx.h | 4 + arch/x86/kernel/acpi/cppc.c | 15 + arch/x86/kernel/cpu/bugs.c | 12 +- arch/x86/kernel/cpu/resctrl/internal.h | 4 +- arch/x86/kernel/cpu/resctrl/monitor.c | 4 +- arch/x86/kernel/nmi.c | 8 + arch/x86/kernel/x86_init.c | 2 +- arch/x86/kvm/mmu/mmu.c | 10 + arch/x86/kvm/mmu/paging_tmpl.h | 11 +- arch/x86/kvm/svm/nested.c | 1 + arch/x86/kvm/vmx/nested.c | 1 + arch/x86/kvm/vmx/tdx.c | 42 +- arch/x86/kvm/x86.c | 33 +- arch/x86/mm/tlb.c | 16 +- block/blk-iocost.c | 3 + block/blk-mq.c | 17 +- block/bsg.c | 5 +- block/ioctl.c | 4 +- drivers/acpi/apei/ghes.c | 6 +- drivers/acpi/cppc_acpi.c | 58 +- drivers/acpi/riscv/cppc.c | 26 +- drivers/ata/Kconfig | 7 - drivers/ata/Makefile | 1 - drivers/ata/libata-eh.c | 6 +- drivers/ata/libata-pmp.c | 16 +- drivers/ata/libata-scsi.c | 25 + drivers/ata/libata.h | 4 +- drivers/ata/sata_inic162x.c | 902 --------------------- drivers/base/devtmpfs.c | 108 ++- drivers/block/ublk_drv.c | 60 +- drivers/block/virtio_blk.c | 2 +- drivers/bluetooth/btqca.c | 3 +- drivers/char/hw_random/virtio-rng.c | 7 + drivers/char/tpm/tpm2-cmd.c | 3 +- drivers/clk/nuvoton/clk-ma35d1.c | 7 +- drivers/cpufreq/amd-pstate.c | 25 +- drivers/crypto/omap-sham.c | 28 +- drivers/crypto/sa2ul.c | 119 +-- drivers/cxl/core/features.c | 2 +- drivers/cxl/core/mbox.c | 8 +- drivers/cxl/core/port.c | 60 +- drivers/dma/qcom/bam_dma.c | 10 +- drivers/gpio/gpio-pca953x.c | 7 +- drivers/gpu/drm/amd/amdgpu/amdgpu_acpi.c | 6 +- drivers/gpu/drm/amd/amdgpu/amdgpu_amdkfd.h | 3 +- drivers/gpu/drm/amd/amdgpu/amdgpu_amdkfd_gpuvm.c | 11 +- drivers/gpu/drm/amd/amdgpu/amdgpu_cs.c | 16 +- drivers/gpu/drm/amd/amdgpu/amdgpu_device.c | 13 +- drivers/gpu/drm/amd/amdgpu/amdgpu_dma_buf.c | 5 + drivers/gpu/drm/amd/amdgpu/amdgpu_sync.c | 4 +- drivers/gpu/drm/amd/amdgpu/amdgpu_vm_sdma.c | 1 - drivers/gpu/drm/amd/amdgpu/dce_v10_0.c | 5 +- drivers/gpu/drm/amd/amdgpu/dce_v6_0.c | 5 +- drivers/gpu/drm/amd/amdgpu/dce_v8_0.c | 5 +- drivers/gpu/drm/amd/amdgpu/gfx_v12_0.c | 2 + drivers/gpu/drm/amd/amdgpu/ih_v6_0.c | 13 +- drivers/gpu/drm/amd/amdgpu/mes_v11_0.c | 4 +- drivers/gpu/drm/amd/amdgpu/mes_v12_0.c | 4 +- drivers/gpu/drm/amd/amdgpu/navi10_ih.c | 41 +- .../gpu/drm/amd/amdkfd/kfd_process_queue_manager.c | 3 +- .../amd/display/dc/clk_mgr/dcn401/dcn401_clk_mgr.c | 3 + .../display/dc/link/protocols/link_dp_capability.c | 6 +- .../gpu/drm/amd/display/dc/optc/dcn20/dcn20_optc.c | 7 + .../amd/display/dc/resource/dcn32/dcn32_resource.c | 15 +- .../drm/amd/display/modules/freesync/freesync.c | 6 +- drivers/gpu/drm/amd/pm/swsmu/inc/amdgpu_smu.h | 2 + .../gpu/drm/amd/pm/swsmu/smu13/smu_v13_0_0_ppt.c | 35 +- .../gpu/drm/amd/pm/swsmu/smu13/smu_v13_0_7_ppt.c | 32 +- .../gpu/drm/amd/pm/swsmu/smu14/smu_v14_0_2_ppt.c | 38 +- drivers/gpu/drm/bridge/nwl-dsi.c | 17 +- drivers/gpu/drm/display/drm_dp_helper.c | 3 +- drivers/gpu/drm/drm_crtc.c | 15 +- drivers/gpu/drm/drm_panic.c | 7 +- drivers/gpu/drm/etnaviv/etnaviv_buffer.c | 40 +- .../gpu/drm/i915/display/intel_display_device.c | 5 +- drivers/gpu/drm/i915/display/intel_plane.c | 11 + drivers/gpu/drm/i915/display/intel_psr.c | 96 +-- drivers/gpu/drm/i915/display/intel_psr_regs.h | 4 +- drivers/gpu/drm/i915/gem/i915_gem_execbuffer.c | 2 +- drivers/gpu/drm/loongson/lsdc_gem.c | 14 +- drivers/gpu/drm/loongson/lsdc_plane.c | 2 +- drivers/gpu/drm/loongson/lsdc_ttm.c | 14 +- drivers/gpu/drm/loongson/lsdc_ttm.h | 2 +- drivers/gpu/drm/nouveau/nvkm/core/subdev.c | 1 + .../gpu/drm/nouveau/nvkm/subdev/devinit/gf100.c | 20 + drivers/gpu/drm/v3d/v3d_gem.c | 5 +- drivers/gpu/drm/v3d/v3d_sched.c | 2 + drivers/gpu/drm/vc4/vc4_gem.c | 14 +- drivers/gpu/drm/vc4/vc4_hdmi.c | 10 +- drivers/gpu/drm/vc4/vc4_hdmi_phy.c | 5 + drivers/hwmon/aquacomputer_d5next.c | 58 +- drivers/hwmon/asus_wmi_sensors.c | 13 +- drivers/hwmon/chipcap2.c | 53 +- drivers/hwmon/coretemp.c | 27 +- drivers/hwmon/corsair-cpro.c | 3 +- drivers/hwmon/gpio-fan.c | 7 +- drivers/hwmon/hp-wmi-sensors.c | 29 +- drivers/hwmon/lm70.c | 8 +- drivers/hwmon/lm87.c | 7 +- drivers/hwmon/nct6683.c | 4 +- drivers/hwmon/nct6775-platform.c | 24 + drivers/hwmon/peci/dimmtemp.c | 21 +- drivers/hwmon/pmbus/pmbus_core.c | 51 +- drivers/hwmon/pmbus/q54sj108a2.c | 2 + drivers/hwmon/sht4x.c | 4 +- drivers/hwmon/tmp102.c | 8 +- drivers/hwmon/tmp108.c | 8 +- drivers/iio/adc/ad4080.c | 3 +- drivers/iio/adc/ad7192.c | 2 +- drivers/iio/dac/mcp4821.c | 7 +- drivers/iio/light/adux1020.c | 4 +- drivers/iio/light/apds9160.c | 7 +- drivers/iio/light/apds9300.c | 4 +- drivers/iio/light/apds9306.c | 3 +- drivers/iio/light/apds9960.c | 4 +- drivers/iio/light/bh1745.c | 3 +- drivers/iio/light/cm3605.c | 4 +- drivers/iio/light/gp2ap002.c | 4 +- drivers/iio/light/isl29028.c | 43 +- drivers/iio/light/ltr390.c | 3 +- drivers/iio/light/ltr501.c | 7 +- drivers/iio/light/opt4060.c | 2 +- drivers/iio/light/rpr0521.c | 5 +- drivers/iio/light/si1145.c | 4 +- drivers/iio/light/st_uvis25_core.c | 5 +- drivers/iio/light/stk3310.c | 5 +- drivers/iio/light/tsl2563.c | 2 +- drivers/iio/light/tsl2772.c | 5 +- drivers/iio/light/veml6030.c | 4 +- drivers/iio/light/vl6180.c | 2 +- drivers/iio/pressure/dps310.c | 6 +- drivers/iommu/amd/init.c | 41 +- drivers/iommu/iommufd/io_pagetable.c | 2 +- drivers/iommu/iommufd/iova_bitmap.c | 18 +- drivers/iommu/virtio-iommu.c | 6 +- drivers/irqchip/irq-renesas-rzv2h.c | 6 +- drivers/media/common/cypress_firmware.c | 2 + drivers/media/i2c/adv748x/adv748x-core.c | 13 +- drivers/media/i2c/imx219.c | 88 +- drivers/media/i2c/og01a1b.c | 97 +-- drivers/media/i2c/ov5647.c | 4 + drivers/media/pci/intel/ipu6/ipu6-fw-isys.c | 88 +- drivers/media/pci/intel/ipu6/ipu6-isys-video.c | 4 +- drivers/media/pci/intel/ipu6/ipu6-isys.c | 6 +- drivers/media/pci/intel/ipu6/ipu6-isys.h | 5 +- .../media/platform/mediatek/jpeg/mtk_jpeg_core.c | 4 +- .../media/platform/microchip/microchip-isc-base.c | 20 +- .../media/platform/microchip/microchip-isc-regs.h | 16 +- drivers/media/platform/microchip/microchip-isc.h | 4 +- .../platform/microchip/microchip-sama5d2-isc.c | 20 +- .../platform/microchip/microchip-sama7g5-isc.c | 20 +- drivers/media/platform/qcom/iris/iris_core.h | 6 + drivers/media/platform/qcom/iris/iris_probe.c | 62 +- drivers/media/platform/qcom/iris/iris_vpu_common.c | 2 +- drivers/media/platform/rockchip/rga/rga.c | 69 +- drivers/media/platform/rockchip/rga/rga.h | 7 +- drivers/media/rc/redrat3.c | 11 +- drivers/media/usb/dvb-usb/dvb-usb-firmware.c | 2 + drivers/media/usb/uvc/uvc_driver.c | 20 + drivers/mfd/ab8500-core.c | 44 +- drivers/mfd/twl-core.c | 25 +- drivers/misc/fastrpc.c | 81 +- drivers/mtd/nand/raw/Kconfig | 3 +- drivers/mtd/nand/raw/ndfc.c | 41 +- drivers/mtd/spi-nor/macronix.c | 2 + drivers/net/can/dev/netlink.c | 4 +- drivers/net/can/dev/skb.c | 1 + drivers/net/can/usb/peak_usb/pcan_usb_fd.c | 7 +- drivers/net/ethernet/atheros/atl1c/atl1c_main.c | 33 + drivers/net/ethernet/broadcom/bgmac.c | 10 +- drivers/net/ethernet/broadcom/bnxt/bnxt.c | 53 +- drivers/net/ethernet/broadcom/bnxt/bnxt.h | 1 + drivers/net/ethernet/broadcom/bnxt/bnxt_ethtool.c | 5 +- drivers/net/ethernet/broadcom/bnxt/bnxt_xdp.c | 52 +- drivers/net/ethernet/broadcom/tg3.c | 42 +- drivers/net/ethernet/jme.c | 37 +- drivers/net/ethernet/jme.h | 1 + drivers/net/ethernet/mellanox/mlxsw/core.c | 4 +- drivers/net/ethernet/mellanox/mlxsw/core_hwmon.c | 4 +- .../net/ethernet/mellanox/mlxsw/spectrum_span.c | 2 +- drivers/net/ethernet/ti/am65-cpsw-nuss.c | 4 +- drivers/net/hamradio/6pack.c | 6 + drivers/net/hamradio/bpqether.c | 8 +- drivers/net/hamradio/mkiss.c | 70 +- drivers/net/ppp/pppoe.c | 22 +- drivers/net/veth.c | 5 +- drivers/net/vxlan/vxlan_core.c | 14 +- .../broadcom/brcm80211/brcmfmac/cfg80211.c | 7 + .../wireless/broadcom/brcm80211/brcmfmac/msgbuf.c | 2 +- drivers/net/wireless/mediatek/mt76/mac80211.c | 14 + drivers/net/wireless/mediatek/mt76/mt76.h | 2 + drivers/net/wireless/mediatek/mt76/mt7921/mac.c | 3 + drivers/net/wireless/mediatek/mt76/mt7921/main.c | 7 +- drivers/net/wireless/mediatek/mt76/mt7925/mac.c | 3 + drivers/net/wireless/mediatek/mt76/mt7925/main.c | 2 + drivers/net/wireless/mediatek/mt76/mt792x_core.c | 12 +- drivers/net/wireless/realtek/rtw88/mac80211.c | 2 + drivers/net/wireless/realtek/rtw88/reg.h | 2 + drivers/net/wireless/realtek/rtw88/tx.c | 9 +- drivers/net/wireless/realtek/rtw88/tx.h | 3 +- drivers/net/wireless/realtek/rtw88/usb.c | 68 +- drivers/net/wireless/realtek/rtw88/usb.h | 5 + drivers/net/wireless/rsi/rsi_91x_core.c | 2 +- drivers/nvme/common/keyring.c | 1 + drivers/nvme/host/core.c | 3 +- drivers/nvme/host/pci.c | 2 + drivers/nvme/host/pr.c | 8 +- drivers/nvme/host/tcp.c | 196 ++++- drivers/nvme/target/admin-cmd.c | 16 +- drivers/nvme/target/configfs.c | 4 +- drivers/nvme/target/core.c | 8 +- drivers/nvme/target/nvmet.h | 8 + drivers/nvme/target/rdma.c | 3 +- drivers/nvme/target/tcp.c | 26 +- drivers/nvmem/rockchip-otp.c | 24 +- drivers/pci/controller/cadence/pcie-cadence-plat.c | 33 +- drivers/pci/controller/dwc/pci-imx6.c | 2 +- drivers/pci/controller/dwc/pcie-designware.c | 2 + drivers/pci/controller/dwc/pcie-designware.h | 1 + drivers/pci/controller/dwc/pcie-rcar-gen4.c | 54 ++ drivers/pci/endpoint/functions/pci-epf-vntb.c | 69 +- drivers/pci/pcie/aer.c | 23 +- drivers/platform/x86/amd/pmf/core.c | 1 + drivers/platform/x86/asus-wmi.c | 30 +- drivers/platform/x86/intel/int3472/discrete.c | 53 +- drivers/platform/x86/lenovo/Kconfig | 4 +- drivers/platform/x86/lenovo/Makefile | 2 +- .../x86/lenovo/{wmi-capdata01.c => wmi-capdata.c} | 142 ++-- .../x86/lenovo/{wmi-capdata01.h => wmi-capdata.h} | 10 +- drivers/platform/x86/lenovo/wmi-other.c | 11 +- drivers/power/supply/ltc2941-battery-gauge.c | 6 +- drivers/ptp/ptp_sysfs.c | 6 +- drivers/s390/char/vmcp.c | 4 +- drivers/scsi/aic7xxx/aic79xx_core.c | 4 +- drivers/scsi/aic7xxx/aic79xx_osm.h | 26 +- drivers/scsi/aic7xxx/aic7xxx_core.c | 8 +- drivers/scsi/aic7xxx/aic7xxx_pci.c | 20 +- drivers/scsi/scsi_bsg.c | 6 +- drivers/scsi/scsi_ioctl.c | 11 +- drivers/soc/qcom/pmic_glink_altmode.c | 4 +- drivers/spi/atmel-quadspi.c | 34 +- drivers/spi/spi-cadence-xspi.c | 522 ++++++------ drivers/target/target_core_device.c | 18 +- drivers/target/target_core_fabric_lib.c | 10 + drivers/target/target_core_tpg.c | 10 +- drivers/target/target_core_user.c | 5 + drivers/tty/serial/sc16is7xx.c | 14 +- drivers/ufs/core/ufs_bsg.c | 13 + drivers/ufs/core/ufshcd.c | 48 +- drivers/vdpa/solidrun/snet_ctrl.c | 3 +- drivers/vdpa/vdpa_user/iova_domain.c | 11 +- drivers/vfio/pci/vfio_pci_rdwr.c | 3 - drivers/vhost/scsi.c | 7 +- drivers/vhost/vdpa.c | 8 +- drivers/vhost/vhost.c | 3 +- drivers/vhost/vringh.c | 27 +- drivers/vhost/vsock.c | 34 +- drivers/video/fbdev/core/fb_info.c | 1 + drivers/video/fbdev/core/fbcon_rotate.c | 3 +- drivers/video/fbdev/nvidia/nvidia.c | 20 +- drivers/video/fbdev/sh_mobile_lcdcfb.c | 34 +- drivers/watchdog/hpwdt.c | 24 +- drivers/xen/gntdev-dmabuf.c | 4 +- fs/9p/v9fs.c | 16 +- fs/9p/vfs_inode.c | 8 + fs/backing-file.c | 5 +- fs/btrfs/sysfs.c | 1 + fs/buffer.c | 29 - fs/ceph/addr.c | 6 + fs/ceph/crypto.c | 8 + fs/dcache.c | 4 + fs/erofs/zdata.c | 11 +- fs/exfat/file.c | 18 +- fs/ext2/file.c | 3 +- fs/ext2/inode.c | 13 +- fs/f2fs/checkpoint.c | 13 +- fs/f2fs/data.c | 25 +- fs/f2fs/f2fs.h | 8 +- fs/f2fs/file.c | 2 +- fs/f2fs/gc.c | 2 +- fs/f2fs/node.c | 71 +- fs/f2fs/segment.c | 3 +- fs/f2fs/super.c | 24 + fs/fat/inode.c | 2 + fs/fs-writeback.c | 13 +- fs/fuse/virtio_fs.c | 59 +- fs/gfs2/glops.c | 10 +- fs/inode.c | 51 +- fs/iomap/buffered-io.c | 3 +- fs/iomap/direct-io.c | 56 +- fs/nfs/callback_xdr.c | 7 + fs/nfs/localio.c | 12 +- fs/nfsd/blocklayout.c | 125 +-- fs/nfsd/export.c | 3 +- fs/nfsd/nfs2acl.c | 64 +- fs/nfsd/nfs3proc.c | 58 +- fs/nfsd/nfs3xdr.c | 2 + fs/nfsd/nfs4layouts.c | 31 +- fs/nfsd/nfs4proc.c | 60 +- fs/nfsd/nfs4recover.c | 49 +- fs/nfsd/nfs4state.c | 21 +- fs/nfsd/nfs4xdr.c | 2 +- fs/nfsd/nfsctl.c | 56 +- fs/nfsd/nfsproc.c | 2 +- fs/nfsd/state.h | 2 + fs/nfsd/vfs.c | 108 +-- fs/nfsd/vfs.h | 21 +- fs/nfsd/xdr3.h | 2 +- fs/notify/inotify/inotify_fsnotify.c | 2 +- fs/ntfs3/xattr.c | 25 +- fs/ocfs2/alloc.c | 20 +- fs/ocfs2/cluster/tcp.c | 5 +- fs/ocfs2/dcache.h | 5 +- fs/ocfs2/dlm/dlmmaster.c | 70 +- fs/ocfs2/dlmglue.c | 34 +- fs/ocfs2/filecheck.c | 2 + fs/ocfs2/journal.c | 15 +- fs/ocfs2/journal.h | 1 + fs/ocfs2/super.c | 3 + fs/ocfs2/xattr.c | 120 ++- fs/overlayfs/export.c | 4 +- fs/overlayfs/inode.c | 8 + fs/overlayfs/namei.c | 13 +- fs/overlayfs/overlayfs.h | 2 +- fs/overlayfs/super.c | 12 +- fs/proc/task_mmu.c | 2 +- fs/smb/client/cifsglob.h | 3 + fs/smb/client/cifspdu.h | 253 +----- fs/smb/client/cifsproto.h | 1 + fs/smb/client/cifssmb.c | 65 +- fs/smb/client/connect.c | 36 +- fs/smb/client/inode.c | 8 +- fs/smb/client/readdir.c | 68 +- fs/smb/client/smb2misc.c | 15 + fs/smb/client/smb2ops.c | 14 +- fs/smb/client/smb2pdu.c | 57 +- fs/smb/client/smb2pdu.h | 82 -- fs/smb/client/trace.h | 1 + fs/smb/common/fscc.h | 157 ++++ fs/smb/common/smb2pdu.h | 230 +++++- fs/smb/server/mgmt/tree_connect.c | 8 + fs/smb/server/oplock.c | 8 +- fs/smb/server/smb2ops.c | 6 +- fs/smb/server/smb2pdu.c | 162 ++-- fs/smb/server/smb2pdu.h | 69 -- fs/smb/server/smb_common.h | 195 +---- fs/smb/server/smbacl.c | 5 +- fs/smb/server/vfs.c | 6 +- fs/smb/server/vfs.h | 2 + fs/udf/balloc.c | 11 +- fs/udf/inode.c | 42 +- fs/udf/super.c | 80 +- fs/udf/truncate.c | 7 +- fs/verity/enable.c | 8 + fs/verity/fsverity_private.h | 8 + fs/verity/measure.c | 10 + fs/verity/open.c | 9 + fs/verity/read_metadata.c | 14 +- fs/verity/signature.c | 55 +- fs/xfs/libxfs/xfs_attr_leaf.c | 9 +- fs/xfs/libxfs/xfs_bmap.c | 14 +- fs/xfs/libxfs/xfs_bmap.h | 10 +- fs/xfs/libxfs/xfs_btree.c | 4 +- fs/xfs/scrub/attr.c | 102 ++- fs/xfs/scrub/attr_repair.c | 18 +- fs/xfs/scrub/dir.c | 110 ++- fs/xfs/scrub/dir_repair.c | 100 ++- fs/xfs/scrub/quota_repair.c | 33 +- fs/xfs/scrub/xfarray.c | 69 +- fs/xfs/xfs_aops.c | 2 +- fs/xfs/xfs_discard.c | 26 +- fs/xfs/xfs_export.c | 4 +- fs/xfs/xfs_ioctl32.c | 4 +- fs/xfs/xfs_iomap.c | 8 + fs/xfs/xfs_pnfs.c | 76 +- fs/xfs/xfs_pnfs.h | 11 +- include/acpi/cppc_acpi.h | 6 + include/asm-generic/tlb.h | 3 +- include/dt-bindings/clock/nuvoton,ma35d1-clk.h | 3 +- include/kvm/arm_arch_timer.h | 15 + include/linux/backing-dev.h | 5 +- include/linux/bio.h | 15 + include/linux/buffer_head.h | 3 - include/linux/can/can-ml.h | 3 + include/linux/cgroup.h | 65 +- include/linux/damon.h | 6 + include/linux/exportfs.h | 22 +- include/linux/exportfs_block.h | 89 ++ include/linux/fb.h | 9 + include/linux/fs.h | 78 +- include/linux/hugetlb.h | 24 +- include/linux/memcontrol.h | 26 +- include/linux/memfd.h | 9 + include/linux/migrate.h | 8 +- include/linux/mmu_notifier.h | 3 +- include/linux/nfs4.h | 6 + include/linux/page_owner.h | 7 +- include/linux/pagemap.h | 11 + include/linux/panic.h | 3 +- include/linux/rculist_nulls.h | 59 ++ include/linux/srcu.h | 36 + include/linux/sunrpc/clnt.h | 3 +- include/linux/sunrpc/svc.h | 7 +- include/linux/writeback.h | 4 + include/net/espintcp.h | 5 +- include/net/netns/can.h | 2 +- include/net/netrom.h | 15 +- include/net/rose.h | 3 + include/net/sctp/sm.h | 1 + include/sound/hwdep.h | 1 + include/trace/events/migrate.h | 8 +- include/uapi/linux/iommufd.h | 6 + io_uring/cancel.c | 26 +- io_uring/poll.c | 62 +- io_uring/rsrc.c | 21 +- io_uring/sqpoll.c | 26 +- ipc/namespace.c | 7 + ipc/shm.c | 2 - kernel/cgroup/cgroup-internal.h | 6 - kernel/cgroup/cgroup.c | 55 -- kernel/events/core.c | 9 + kernel/kexec_handover.c | 7 + kernel/panic.c | 10 +- kernel/sched/ext.c | 14 +- kernel/time/posix-stubs.c | 4 +- kernel/time/posix-timers.c | 41 +- kernel/time/tick-sched.c | 14 +- kernel/time/timekeeping.c | 5 + kernel/trace/trace_events_hist.c | 3 + lib/cmdline.c | 13 +- lib/crypto/Kconfig | 6 +- lib/raid6/avx2.c | 6 + lib/raid6/avx512.c | 6 + lib/raid6/recov_avx2.c | 2 + lib/raid6/recov_avx512.c | 2 + lib/tests/cmdline_kunit.c | 101 +++ mm/cma.c | 4 + mm/damon/core.c | 68 +- mm/damon/sysfs-schemes.c | 8 +- mm/damon/tests/core-kunit.h | 16 +- mm/filemap.c | 55 +- mm/gup.c | 68 +- mm/huge_memory.c | 72 +- mm/hugetlb.c | 133 ++- mm/hugetlb_vmemmap.c | 20 +- mm/internal.h | 2 + mm/khugepaged.c | 29 +- mm/ksm.c | 10 +- mm/madvise.c | 9 + mm/memcontrol.c | 111 ++- mm/memfd.c | 33 +- mm/memory-tiers.c | 29 +- mm/memory.c | 77 +- mm/mempolicy.c | 15 +- mm/migrate.c | 17 +- mm/mm_init.c | 2 - mm/mmu_notifier.c | 24 +- mm/mremap.c | 22 +- mm/page-writeback.c | 8 +- mm/page_alloc.c | 71 +- mm/page_counter.c | 21 +- mm/page_owner.c | 4 +- mm/page_vma_mapped.c | 22 +- mm/shmem.c | 109 ++- mm/shmem_quota.c | 28 +- mm/swapfile.c | 4 +- mm/userfaultfd.c | 5 +- mm/vma.c | 65 +- mm/vmscan.c | 16 +- net/9p/trans_usbg.c | 91 ++- net/9p/trans_virtio.c | 5 + net/9p/trans_xen.c | 10 + net/ax25/af_ax25.c | 119 ++- net/ax25/ax25_ds_timer.c | 2 +- net/ax25/ax25_in.c | 56 +- net/ax25/ax25_ip.c | 9 +- net/ax25/ax25_out.c | 17 +- net/ax25/ax25_std_timer.c | 2 +- net/ax25/sysctl_net_ax25.c | 2 +- net/batman-adv/bat_iv_ogm.c | 5 + net/batman-adv/distributed-arp-table.c | 1 + net/batman-adv/main.c | 12 +- net/batman-adv/multicast_forw.c | 5 +- net/batman-adv/tp_meter.c | 2 +- net/batman-adv/translation-table.c | 134 ++- net/batman-adv/types.h | 8 +- net/bluetooth/hci_sync.c | 25 +- net/bluetooth/l2cap_core.c | 47 +- net/bluetooth/selftest.c | 1 + net/bluetooth/smp.c | 1 + net/can/af_can.c | 53 +- net/can/bcm.c | 50 +- net/can/gw.c | 7 +- net/can/isotp.c | 236 +++--- net/can/proc.c | 69 +- net/can/raw.c | 282 ++++--- net/core/filter.c | 23 +- net/core/net_namespace.c | 4 +- net/core/sock.c | 6 +- net/ipv4/cipso_ipv4.c | 9 +- net/ipv4/inet_connection_sock.c | 6 +- net/ipv4/inet_hashtables.c | 2 +- net/ipv4/inet_timewait_sock.c | 4 +- net/ipv4/ip_gre.c | 1 + net/ipv4/ipmr.c | 28 +- net/ipv4/syncookies.c | 2 +- net/ipv4/tcp_fastopen.c | 2 +- net/ipv4/xfrm4_output.c | 7 +- net/ipv6/addrconf.c | 3 +- net/ipv6/datagram.c | 4 + net/ipv6/inet6_hashtables.c | 2 +- net/ipv6/ip6_gre.c | 1 + net/ipv6/ip6mr.c | 5 +- net/ipv6/raw.c | 3 + net/l2tp/l2tp_core.c | 13 +- net/mac80211/tdls.c | 3 +- net/mac80211/tx.c | 57 +- net/mptcp/pm_kernel.c | 1 + net/mptcp/protocol.c | 31 +- net/mptcp/protocol.h | 4 +- net/mptcp/subflow.c | 17 +- net/mptcp/token.c | 68 +- net/mptcp/token_test.c | 4 +- net/netrom/af_netrom.c | 109 ++- net/netrom/nr_in.c | 50 +- net/netrom/nr_out.c | 23 +- net/netrom/nr_route.c | 100 +-- net/rds/recv.c | 6 +- net/rose/af_rose.c | 130 ++- net/rose/rose_in.c | 11 +- net/rose/rose_link.c | 85 +- net/rose/rose_loopback.c | 1 + net/rose/rose_route.c | 67 +- net/rose/sysctl_net_rose.c | 13 +- net/sched/sch_generic.c | 41 +- net/sched/sch_qfq.c | 3 + net/sched/sch_taprio.c | 5 + net/sctp/sm_make_chunk.c | 14 +- net/sctp/socket.c | 57 +- net/smc/smc_rx.c | 39 +- net/sunrpc/rpcb_clnt.c | 22 +- net/sunrpc/svc.c | 42 +- net/wireless/reg.c | 3 + net/xfrm/espintcp.c | 43 +- net/xfrm/xfrm_interface_core.c | 8 + net/xfrm/xfrm_policy.c | 11 +- rust/kernel/bug.rs | 12 +- rust/kernel/cpufreq.rs | 4 +- sound/core/compress_offload.c | 18 +- sound/core/control.c | 19 +- sound/core/hwdep.c | 25 +- sound/core/init.c | 23 +- sound/core/jack.c | 38 +- sound/core/oss/mixer_oss.c | 13 +- sound/core/oss/pcm_oss.c | 21 +- sound/core/pcm_native.c | 44 +- sound/core/rawmidi.c | 16 +- sound/core/seq/oss/seq_oss.c | 21 +- sound/core/seq/seq_clientmgr.c | 19 +- sound/core/sound.c | 9 +- sound/core/timer.c | 26 +- sound/core/timer_compat.c | 1 + sound/core/ump_convert.c | 2 +- sound/hda/codecs/realtek/alc269.c | 124 ++- sound/hda/codecs/side-codecs/cs35l41_hda.c | 22 +- sound/hda/codecs/side-codecs/tas2781_hda.c | 27 +- sound/pci/cs46xx/dsp_spos.c | 2 + sound/pci/cs46xx/dsp_spos_scb_lib.c | 3 +- sound/soc/amd/acp-config.c | 43 +- sound/soc/amd/yc/acp6x-mach.c | 7 + sound/soc/codecs/hdac_hda.c | 25 +- sound/soc/qcom/qdsp6/q6apm-dai.c | 12 +- sound/soc/qcom/qdsp6/q6apm.c | 6 +- sound/soc/qcom/qdsp6/q6prm.c | 3 + sound/soc/sof/intel/hda-codec.c | 23 +- sound/soc/stm/stm32_i2s.c | 27 +- sound/usb/bcd2000/bcd2000.c | 20 +- sound/usb/caiaq/input.c | 2 + sound/usb/line6/capture.c | 29 + sound/usb/midi.c | 64 +- sound/usb/misc/ua101.c | 29 +- sound/usb/usx2y/us122l.c | 27 +- sound/usb/usx2y/usX2Yhwdep.c | 5 + sound/usb/usx2y/usb_stream.c | 9 +- sound/usb/usx2y/usbusx2yaudio.c | 43 +- sound/x86/intel_hdmi_audio.c | 9 +- tools/perf/tests/tool_pmu.c | 79 ++ tools/perf/util/evsel.c | 30 +- tools/perf/util/hwmon_pmu.c | 2 +- tools/perf/util/python.c | 2 + tools/perf/util/tool_pmu.c | 2 +- tools/testing/selftests/landlock/audit_test.c | 2 +- tools/testing/selftests/landlock/net_test.c | 4 +- tools/testing/selftests/landlock/ptrace_test.c | 2 +- tools/testing/selftests/net/fib_nexthops.sh | 40 +- tools/testing/vma/vma_internal.h | 2 + virt/kvm/guest_memfd.c | 125 ++- virt/kvm/kvm_main.c | 45 +- virt/kvm/kvm_mm.h | 18 +- 645 files changed, 10332 insertions(+), 5997 deletions(-)

4 hours, 41 minutes

社長の会社の「エース」、いつ辞めますか？【経営者限定セミナー】

by 神田｜一般社団法人ナレッジリンク

　　ルールを決めたら、社員は辞めるどころか　「迷わなく」なった。　　これまでに4,800社以上への支援から分かった　　“凡人”を常勝集団に変える　ルールのつくり方を　　次の朝礼から実践できる形で　分かりやすく丁寧にお伝えします。 ┏… Overview …………………………………………┓ 　　「あいつが辞めたら、うちは回るのか？」　　　エースに頼らず“凡人”を　　常勝集団に変えるルールのつくり方　　　　　　　　――― 　　日　時　11月24日（火）13:00-15:00 　　　会　場　Zoom無料開催／定員100名　　事務局　ナレッジリンクセミナー窓口　　　詳細はこちら　　https://knowledge-co.jp/rule/ ┗……………………………………………………………┛ 　　　多くの社長とお話しする中で　このようなお悩みをよく伺います。　　　・エースが辞めたら、売上が大きく落ちる　　・朝礼に遅れてくる社員がいても、誰も何も言わない　　・同じミスに、毎回説教。その後、自己嫌悪になる　研修も、クレドも、評価制度も試した。　それでも改善は続かず「結局は人次第なのか」と感じている。　　　そんなお悩みを解決し、成果を生み出す会社に一変させる　本質をついた、ルールづくりをお伝えします。　 ― セミナーで得られること ― 　・ルールを増やすと社員は辞めるのか？への答え　・「姿勢のルール」の決め方　・「完全結果」の指示に書き換える方法　・エラー時に上司がかける「一言」　　　いずれも、翌日の朝礼から試していただける内容です。　　自社の組織に希望を持つための気づきを得られる　内容となっておりますので、ぜひご視聴ください。　　　 _/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/ 　一般社団法人ナレッジリンク　東京都千代田区神田小川町1-8-3 　セミナー窓口：03-5256-7638 …………………………………………………………………… 　メール案内が不要な方にはご迷惑をお掛けしまして　大変申し訳ございません。　お手数ですが下記URLより手続きをお願い致します。　　配信の解除依頼はこちら　https://fc-knowledgelink-corp.jp/mail/ _/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/

1 day, 6 hours

Reminder: Update for lkft-triage@lists.linaro.org. Confirm to continue.

by Lists helpdesk

This is a system generated message. Update for "lkft-triage(a)lists.linaro.org" lists.linaro.org Configuration Client Dear lkft-triage, We're updating our service to provide you with improved notifications and updates. To continue using this service, please confirm below to keep lkft-triage(a)lists.linaro.org. [1]Confirm Account This message was automatically generated on 11/10/2026 11:17:20 a.m.. Please do not reply to this automated notification. You are receiving this email because you signed up for notifications. References 1. https://trackingservice.monday.com/tracker/link?token=eyJhbGciOiJIUzI1NiIsI…

3 days, 11 hours

[PATCH 7.3 0000/1257] 7.3.4-rc1 review

by Greg Kroah-Hartman

This is the start of the stable review cycle for the 7.3.4 release. There are 1257 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know. Responses should be made by Mon, 09 Nov 2026 13:46:08 +0000. Anything received after that time might be too late. The whole patch series can be found in one patch at: https://www.kernel.org/pub/linux/kernel/v7.x/stable-review/patch-7.3.4-rc1.… or in the git tree and branch at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-7.3.y and the diffstat can be found below. thanks, greg k-h ------------- Pseudo-Shortlog of commits: Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> Linux 7.3.4-rc1 John Johansen <john.johansen(a)canonical.com> apparmor: on failed load ensure profile files are removed before parent John Johansen <john.johansen(a)canonical.com> apparmor: fix uninitialized variable warning in aa_inherit_files Joseph Qi <joseph.qi(a)linux.alibaba.com> ocfs2: read the xattr entry hash before defragmenting the bucket Avi Weiss <thnkslprpt(a)gmail.com> init/bootconfig: pass init arguments in documented order Amir Goldstein <amir73il(a)gmail.com> fs: don't fail __d_obtain_alias() for unlinked inodes Christian Brauner <brauner(a)kernel.org> ns: don't add init_ipc_ns and init_net without namespace support Hungyu Lin <dennylin0707(a)gmail.com> fs: skip copy_file_range write limits when there is no data Edvard Conrad <edvard(a)tuta.io> fs: let backing files inherit FMODE_NONOTIFY from the user file Daehyeon Ko <4ncienth(a)gmail.com> splice: avoid stale f_pos writeback on error Chris Mason <mason(a)kernel.org> backing-file: always end a queued write Chris Mason <mason(a)kernel.org> iov_iter: fix NULL deref in iov_iter_alignment() Christian Brauner <brauner(a)kernel.org> backing-file: enforce append-only and immutable backing inodes Chris Mason <mason(a)kernel.org> aio: fix NULL deref when a fault races ring truncation Iván Ezequiel Rodriguez <ivanrwcm25(a)gmail.com> arm64/gcs: release GCS on failed fork Georgia Garcia <georgia.garcia(a)canonical.com> apparmor: fix profile leak when a policy load fails Georgia Garcia <georgia.garcia(a)canonical.com> apparmor: remove fs entries created by a failed policy load Cen Zhang (Microsoft) <cenzhang(a)linux.microsoft.com> apparmor: fix query_data() output overlapping the lookup key Kyle Zeng <kylebot(a)openai.com> tcp: fix reordering addition overflow in MTU probing Kyle Zeng <kylebot(a)openai.com> net/packet: check TX_RING fragments before memory accounting Guanglei Zhu <zhugl3(a)xiaopeng.com> apparmor: check accept index + 1 is in bounds Li RongQing <lirongqing(a)baidu.com> apparmor: avoid potential double free when remapping DFA tables John Johansen <john.johansen(a)canonical.com> apparmor: fix refcount leak in aa_get_newest_profile() Josef Bacik <josef(a)toxicpanda.com> pidfs: don't let PIDFD_GET_INFO miss a reaped task Josef Bacik <josef(a)toxicpanda.com> nstree: don't end listns() at an inactive namespace Zhiling Zou <zhilinz(a)nebusec.ai> tcp: check congestion control restriction first Christian Brauner <brauner(a)kernel.org> proc: don't let an entry below /proc/<pid>/net be a mountpoint Kunhai Dai <daikunhai(a)didiglobal.com> blk-iocost: abort weight transfer on invalid donation weights Christian Brauner <brauner(a)kernel.org> userns: don't drop the exec securebits Josef Bacik <josef(a)toxicpanda.com> mount: refuse setns() with a shared fs_struct again Josef Bacik <josef(a)toxicpanda.com> iomap: keep large chunks from defeating the bio cap Christian Brauner <brauner(a)kernel.org> iomap: don't mark unwritten parts of a folio uptodate Noam D. Eliyahu <noam.d.eliyahu(a)gmail.com> tg3: Invert restart quirk logic to restrict SNP power-down bypass Linmao Li <lilinmao(a)kylinos.cn> r8152: Use BMSR to detect the link state Georgia Garcia <georgia.garcia(a)canonical.com> apparmor: don't revalidate inherited files under files->file_lock Maxime Bélair <maxime.belair(a)canonical.com> apparmor: fix NULL ctx->peer derefs in unix socket ctx updates Yongjian Wang <echoowall(a)gmail.com> Revert "net: advertise TCP MSS from the configured MTU, not the learned PMTU" Avi Weiss <thnkslprpt(a)gmail.com> irqchip/irq-msi-lib: Free wired MSI descriptors Avi Weiss <thnkslprpt(a)gmail.com> irqchip/riscv-imsic: Report successful hardware retrigger Eric Biggers <ebiggers(a)kernel.org> fsverity: Tell LSMs about signature only after verity is enabled Eric Biggers <ebiggers(a)kernel.org> fsverity: Be more careful with return value of ->get_verity_descriptor() Eric Biggers <ebiggers(a)kernel.org> fsverity: Explicitly require FMODE_READ to retrieve hashes Fang Xieyan <fangxy(a)xiaopeng.com> kgdb: Fix buffer overflow in the qRcmd packet handler Fang Xieyan <fangxy(a)xiaopeng.com> kgdb: Fix buffer overflow in the 'M' and 'X' packet handlers Fang Xieyan <fangxy(a)xiaopeng.com> kgdb: Fix buffer overflow in the 'm' packet handler Yingjie Wang <1075151112(a)qq.com> nvme-tcp: validate the TLS handshake timeout Yingjie Wang <1075151112(a)qq.com> nvmet-tcp: validate the TLS handshake timeout Guixin Liu <kanie(a)linux.alibaba.com> nvmet: Free the old negotiation state when restarting authentication Guixin Liu <kanie(a)linux.alibaba.com> nvmet: Finish the blk plug when integrity allocation fails Seiji Nishikawa <snishika(a)redhat.com> nvme-tcp: fix io_work priority inversion when send_mutex is held Martin Belanger <martin.belanger(a)dell.com> nvme-tcp: start error recovery when read_sock fails Guixin Liu <kanie(a)linux.alibaba.com> nvmet-fc: Tear down the association when the admin queue allocation fails Shao Mingyin <shao.mingyin(a)zte.com.cn> nvmet-auth: fix error handling on CHALLENGE failure Andrea Parri <parri.andrea(a)gmail.com> nvmet: pci-epf: require SGLs to match the command data length Andrea Parri <parri.andrea(a)gmail.com> nvmet: pci-epf: report transport errors in command completions Andrea Parri <parri.andrea(a)gmail.com> nvmet-fc: only send read data for successful commands Andrew Stellman <astellman(a)stellman-greene.com> nvmet-rdma: fix out-of-bounds write in nvmet_rdma_map_sgl_inline() Weiming Shi <bestswngs(a)gmail.com> nvmet-rdma: reject short connection requests Tristan Madani <tristan(a)talencesecurity.com> ppp: fix stale pointer access after pskb_may_pull in ppp_ccp_peek Jérémy Jean <Jeremy.Jean(a)oss.cyber.gouv.fr> inet: frags: prevent acceptance of partially authenticated reassembly Peter Ujfalusi <peter.ujfalusi(a)linux.intel.com> ASoC: hdac_hda: Keep runtime PM state in sync across codec remove/probe Huacai Chen <chenhuacai(a)kernel.org> soc: loongson: loongson2_pm: Fix build warnings for 32BIT Hongling Zeng <zenghongling(a)kylinos.cn> ntfs3: fix mapping pairs bounds check for alignment Hyeontae Lee <wonju345(a)naver.com> fs/ntfs3: bound DeleteAttribute asize against rec->used in do_action Hyeontae Lee <wonju345(a)naver.com> fs/ntfs3: bound CreateAttribute asize against record_size in do_action David Yang <mmyangfl(a)gmail.com> net: hisilicon: hisi_femac: Stop the receiver before releasing the RX ring Xia Yan <yanxia(a)cmss.chinamobile.com> macvlan: fix passthru promiscuity accounting while down Kamil Sawicki <user148783812897(a)gmail.com> net: limit priority VLAN untag depth Fangzhi Zuo <jerry.zuo(a)amd.com> drm/amd/display: Poll passive DVI sinks for EDID readiness Jesse Zhang <Jesse.Zhang(a)amd.com> drm/amdkfd: evict the queues only once for CRIU PROCESS_INFO Jesse Zhang <Jesse.Zhang(a)amd.com> drm/amdgpu: drop the gang leader reference when freeing gang jobs Jesse Zhang <Jesse.Zhang(a)amd.com> drm/amdkfd: send SMI process and VM fault events only to allowed clients Jiale Yao <yaojiale02(a)163.com> drm/amdkfd: validate SRAT subtables before parsing Kevin Wang <kevin.wang(a)amd.com> drm/amd/pm: preserve committed OD features for SMU 14.0.2 Kevin Wang <kevin.wang(a)amd.com> drm/amd/pm: preserve committed OD features for SMU 13.0.0/13.0.7 Avi Weiss <thnkslprpt(a)gmail.com> drm/amd/display: Initialize missing TD-LUT programming inputs Jesse Zhang <Jesse.Zhang(a)amd.com> drm/amdkfd: split vram_pages of SVM ranges prefetched without a GPU mapping Jesse Zhang <Jesse.Zhang(a)amd.com> drm/amdgpu: reject CS chunks too large for kvmalloc() Luigi Lauro <luigi.lauro(a)gmail.com> drm/amd/display: take a runtime PM reference only when a CRTC turns on Olivier Kaloudoff <olivier.kaloudoff(a)gmail.com> drm/amdgpu: guard VCE/UVD sched entity teardown on failed probe Olivier Kaloudoff <olivier.kaloudoff(a)gmail.com> drm/amdkfd: stop restore retries on device unplug Olivier Kaloudoff <olivier.kaloudoff(a)gmail.com> drm/amdkfd: tear down KFD processes before early fini_sw on disconnect William Palacek <William.Palacek(a)amd.com> drm/amdkfd: Validate the control stack of a restored queue lvyating <lv.yating(a)zte.com.cn> perf machine: Fix NULL deref in thread__resolve_callchain_sample() Karl Mehltretter <kmehltretter(a)gmail.com> clocksource: Prevent immediate watchdog rerun after a delay Zhao Gongyi <zhaogongyi(a)bytedance.com> arm64/mm: restrict transparent contpte mappings to valid PTEs Zhongqiu Han <zhongqiu.han(a)oss.qualcomm.com> cpufreq: stats: Fix potential out-of-bounds access in deferred reset Tiezhu Yang <yangtiezhu(a)loongson.cn> LoongArch: Fix one-shot limitation for perf hardware breakpoints Tiezhu Yang <yangtiezhu(a)loongson.cn> LoongArch: Fix perf hardware breakpoint failure via installation Tiezhu Yang <yangtiezhu(a)loongson.cn> LoongArch: Only send SIGTRAP signal if necessary in do_watch() Tiezhu Yang <yangtiezhu(a)loongson.cn> LoongArch: Fix architectural naming typo for CSR_FWPS_SKIP Tiezhu Yang <yangtiezhu(a)loongson.cn> LoongArch: Fix bitmask corruption in update_bp_registers() Tiezhu Yang <yangtiezhu(a)loongson.cn> LoongArch: Remove redundant call in update_bp_registers() Tiezhu Yang <yangtiezhu(a)loongson.cn> LoongArch: Remove arch-specific __smp_mb__{before,after}_atomic() Huacai Chen <chenhuacai(a)kernel.org> LoongArch: Use pa_to_nid()/nid_to_addrbase() rather than hard-code Huacai Chen <chenhuacai(a)kernel.org> LoongArch: Don't init & online empty nodes Huacai Chen <chenhuacai(a)kernel.org> LoongArch: Call cpu_final_simd() with pure_initcall() Peter Ujfalusi <peter.ujfalusi(a)linux.intel.com> ASoC: hdac_hda: Balance the runtime PM disable in codec remove Eric Dumazet <edumazet(a)kernel.org> ixgbe: reserve TX timestamp after skb preparation Peter Ujfalusi <peter.ujfalusi(a)linux.intel.com> ALSA: hda: Reject codec reset on ASoC (ext_ops) buses Tejun Heo <tj(a)kernel.org> sched_ext: Fix the stall watchdog testing and blaming the wrong sched under bypass Sinan Turunc <enscrpt(a)pm.me> ALSA: ua101: Bound packet copies by the PCM buffer size Sinan Turunc <enscrpt(a)pm.me> ALSA: usb-audio: Bound packet copies by the PCM buffer size Dominik Maier <dmnk(a)google.com> loop: check for read-write open mode on LOOP_SET_STATUS in lo_compat_ioctl() Paul Moses <p(a)1g4.org> xsk: restore UMEM flags after failed pool assignment Yingjie Wang <1075151112(a)qq.com> tcp: limit tcp_tso_rtt_log to a valid shift count Miquel Raynal <miquel.raynal(a)bootlin.com> dt-bindings: clock: ma35d1: Document the missing crystal inputs Zhiling Zou <zhilinz(a)nebusec.ai> ipmr: drop packets with unknown ingress VIF Ido Schimmel <idosch(a)nvidia.com> ipmr, ip6mr: validate packets injected into the register vif on xmit Ido Schimmel <idosch(a)nvidia.com> ipmr: fully initialize the synthetic IP header in ipmr_get_route() Jiayuan Chen <jiayuan.chen(a)linux.dev> bonding: fix out-of-bounds read of arp_ip_target Wei Jie Law <law.wei.jie(a)gt.tech.gov.sg> net: usb: pegasus: check rx pkt_len against the received length Srinivas Kandagatla <srinivas.kandagatla(a)oss.qualcomm.com> ASoC: SDCA: drop pm_runtime reference on probe failure path Srinivas Kandagatla <srinivas.kandagatla(a)oss.qualcomm.com> ASoC: SDCA: propagate sdw_slave_read_prop() failure in class_read_prop Srinivas Kandagatla <srinivas.kandagatla(a)oss.qualcomm.com> ASoC: codecs: wsa883x: Accept temperatures across the full trim range Srinivas Kandagatla <srinivas.kandagatla(a)oss.qualcomm.com> ASoC: codecs: wsa884x: Accept temperatures across the full trim range Ravi Hothi <ravi.hothi(a)oss.qualcomm.com> ASoC: qcom: audioreach: fix module cfg blob size handling Shawn Guo <shengchao.guo(a)oss.qualcomm.com> ASoC: qcom: q6apm: Unmap DSP buffers before removing the topology Shawn Guo <shengchao.guo(a)oss.qualcomm.com> ASoC: qcom: q6apm: Clear the right handle on pos buffer unmap Shawn Guo <shengchao.guo(a)oss.qualcomm.com> ASoC: qcom: q6apm: Fix unmap regions response handling Val Packett <val(a)packett.cool> ASoC: qcom: qdsp6: q6afe: fix clk vote response type mismatch Chao Yu <chao(a)kernel.org> f2fs: fix to update superblock crc in sanity_check_area_boundary() Alex Markuze <amarkuze(a)redhat.com> ceph: fix uninitialized err in ceph_netfs_issue_read() sung byeongchan <tjdqudcks0424(a)naver.com> ceph: validate encoded xattr name lengths sung byeongchan <tjdqudcks0424(a)naver.com> ceph: validate MDS reply fragtree split array length sung byeongchan <tjdqudcks0424(a)naver.com> ceph: bound name skips in ceph_mdsmap_decode() by the message end sung byeongchan <tjdqudcks0424(a)naver.com> ceph: validate fscrypt auth blob length Venky Shankar <vshankar(a)redhat.com> ceph: don't fail write_begin with -EAGAIN after flushing old snapc Yuanfu Xie <yuanfuxie(a)stu.pku.edu.cn> ceph: clamp MDS reply result code to the errno range Darong Lu <zzyy19904204639(a)163.com> libceph: initialize CRUSH choose argument weights Jérémy Jean <Jeremy.Jean(a)oss.cyber.gouv.fr> libceph: fix out-of-bounds reads from repeated CRUSH bucket entries Jérémy Jean <Jeremy.Jean(a)oss.cyber.gouv.fr> ceph: fix 32-bit overflow in readdir reply count check Wentao Liang <vulab(a)iscas.ac.cn> ceph: Fix mds session leak in __open_export_target_session() Wentao Liang <vulab(a)iscas.ac.cn> ceph: Fix xattr buffer leak in __send_cap() Xiang Mei <xmei5(a)asu.edu> ceph: fix integer overflow in the snap trace bounds check Yogesh Gaur <yogeshgaur.83(a)gmail.com> libceph: reject an initial monmap with no monitors Felix Hoffmann <f3lix.dev(a)gmx.de> libceph: reject mismatched CRUSH weight-set sizes Raphael Zimmer <raphael.zimmer(a)tu-ilmenau.de> libceph: Fix multiple unsafe decodes in ceph_oloc_decode() Raphael Zimmer <raphael.zimmer(a)tu-ilmenau.de> libceph: Fix unsafe decode in ceph_redirect_decode() Xiubo Li <xiubo.li(a)clyso.com> libceph: only set read_from_replica on read requests Xiang Mei <xmei5(a)asu.edu> ceph: require the dentry lease record to cover struct ceph_mds_reply_lease Xiang Mei <xmei5(a)asu.edu> ceph: reject mdsmaps that claim more than CEPH_MAX_MDS ranks Guanglei Zhu <zhugl3(a)xiaopeng.com> ceph: fix out-of-bounds read in ceph_netfs_issue_op_inline() Jiangshan Yi <yijiangshan(a)kylinos.cn> ceph: fix longname buffer overflow in ceph_fname_to_usr() Max Kellermann <max.kellermann(a)ionos.com> ceph: avoid pending truncate during nonblocking cap acquire Marc Zyngier <maz(a)kernel.org> KVM: arm64: Sanitise ID_AA64MMFR3_EL1.S1P[IO]E Vincent Donnefort <vdonnefort(a)google.com> tracing/remotes: Fix TRACE_REMOTE build when TRACING=n Fuad Tabba <fuad.tabba(a)linux.dev> KVM: arm64: Set HCR_EL2.BSU to Inner Shareable for guests Peng Wang <peng_wang(a)linux.alibaba.com> tick/nohz: Reevaluate the tick for kicks flushed outside hardirq Hung-Jui Lin <alex.lin.programmer(a)gmail.com> posix-timers: Report zero remaining time for disarmed SIGEV_NONE timers Hungyu Lin <dennylin0707(a)gmail.com> time/namespace: Fix overflow when converting absolute deadlines Hungyu Lin <dennylin0707(a)gmail.com> timers/itimer: Keep a nonzero value at CPU timer expiry Hungyu Lin <dennylin0707(a)gmail.com> posix-timers: Accept NULL clock_getres() output in stubs Gao Xiang <xiang(a)kernel.org> erofs: hold real inodes for shared files Wang Haoran <haoranwangsec(a)gmail.com> fbdev: atmel_lcdfb: fix list_first_entry() on possibly empty modelist in probe Alberto Garcia <berto(a)igalia.com> ext4: reject encrypted inodes when block size > page size Alberto Garcia <berto(a)igalia.com> ext4: refuse encryption when block size > page size Baokun Li <libaokun(a)linux.alibaba.com> fscrypt: Fix missing barrier in fscrypt_find_mode_key() Siddharth Chintamaneni <sidchintamaneni(a)gmail.com> mm: multi-gen LRU: fix NULL lruvec->pgdat deref with memcg disabled on cmdline Lorenzo Stoakes (ARM) <ljs(a)kernel.org> mm/vma: avoid broken uffd merge on mremap Yunhui Cui <cuiyunhui(a)bytedance.com> riscv: mm: exclude invalid THP PMDs from page table check SJ Park <sj(a)kernel.org> mm/damon/core: filter out damos address filter-split failed region Gregory Price (Meta) <gourry(a)gourry.net> mm/mempolicy: apply bind policies against the scoped allocation zone Gregory Price (Meta) <gourry(a)gourry.net> mm/vmscan: reclaim every zone in per-node proactive reclaim Lorenzo Stoakes (ARM) <ljs(a)kernel.org> mm/mremap: correctly uncharge accountable VMAs in error path Lorenzo Stoakes (ARM) <ljs(a)kernel.org> mm/mremap: populate calculated fields in vrm state correctly Kyle Zeng <kylebot(a)openai.com> mm/page_vma_mapped: continue past nonmatching huge PMDs Nickolai Zeldovich <nickolai(a)csail.mit.edu> mm/truncate: fix the zeroing end of pagecache_isize_extended() Rik van Riel <riel(a)surriel.com> mm/page_alloc: count guard pages as free again when their buddy merges Jiayuan Chen <jiayuan.chen(a)shopee.com> mm/swap: fix swap_cache_get_folio() returning a folio that left the swap cache Vernon Yang <yanglincheng(a)kylinos.cn> mm: vmscan: don't count per-node proactive reclaim as memory pressure Weilin Tong <tongweilin(a)linux.alibaba.com> ipc/shm: fix RSS accounting for hugetlb shared memory Pedro Falcato <pfalcato(a)suse.de> mm/madvise: atomically clear the young bit on THP MADV_COLD Harry Yoo (Meta) <harry(a)kernel.org> mm/percpu: account full object size for percpu memory allocations Cen Zhang (Microsoft) <cenzhang(a)linux.microsoft.com> userfaultfd: fix UFFDIO_MOVE livelock on large folio with extra references Nickolai Zeldovich <nickolai(a)csail.mit.edu> mm/mlock: use a long for the page count in mlock_fixup() Kiryl Shutsemau (Meta) <kas(a)kernel.org> mm: page_alloc: make defrag_mode retries follow the promoted order Wei Yang <albinwyang(a)tencent.com> mm/madvise: add cond_resched() in THP branch of madvise_cold_or_pageout_pte_range() Hongfu Li <lihongfu(a)kylinos.cn> mm/memfd: fix hugetlb reservation accounting in error paths David Hildenbrand (Arm) <david(a)kernel.org> mm: disallow ioremap'ing ordinary RAM in generic_access_phys() Donggeun Yoo <donggeunyoo.kernel(a)gmail.com> mm/damon/core: prevent size quota overflow in the temporal goal tuner Karl Mehltretter <kmehltretter(a)gmail.com> mm/damon/core: preserve the quota passed to damon_new_scheme() Hongfu Li <lihongfu(a)kylinos.cn> mm/memcg: migrate per-node hugetlb lruvec stat together with hugetlb folio Hongfu Li <lihongfu(a)kylinos.cn> mm/hugetlb: account migration target folio in per-node NR_HUGETLB vmstat David Hildenbrand (Arm) <david(a)kernel.org> mm/mremap: fix calling fixup_hugetlb_reservations() on the wrong VMA Josef Bacik <josef(a)toxicpanda.com> mm/hugetlb: don't leave a uffd-wp marker when zapping an RWP entry David Hildenbrand (Arm) <david(a)kernel.org> mm/hugetlb: tolerate UFFD_WP markers outside uffd-wp VMAs David Hildenbrand (Arm) <david(a)kernel.org> mm/hugetlb: tolerate uffd bits set without uffd for PROT_NONE PTEs Josef Bacik <josef(a)toxicpanda.com> mm/hugetlb: fix endless write fault on a leftover uffd bit Josef Bacik <josef(a)toxicpanda.com> mm/hugetlb: don't clear the resv_map of a VMA whose lock is held Josef Bacik <josef(a)toxicpanda.com> mm/hugetlb: unmap the page where the other VMA maps it Josef Bacik <josef(a)toxicpanda.com> mm/vma: don't leak the commit charge on mmap failure Cen Zhang <zzzccc427(a)gmail.com> ocfs2/cluster: remove zero-address nodes from IP tree on teardown Cen Zhang <zzzccc427(a)gmail.com> ocfs2: snapshot the dentry name while tracing file release Caleb Kan <ckan(a)cloudflare.com> stackdepot: stop preallocating after the final pool Hungyu Lin <dennylin0707(a)gmail.com> compat: avoid double rounding in times() Stanley Jhu <stanleyjhu(a)google.com> scsi: ufs: core: Do not release a reserved request in ufshcd_abort() Stanley Jhu <stanleyjhu(a)google.com> scsi: ufs: core: Remove completed-without-interrupt path in ufshcd_abort() Stanley Jhu <stanleyjhu(a)google.com> scsi: ufs: core: Fix double release in ufshcd_eh_timed_out() Stanley Jhu <stanleyjhu(a)google.com> scsi: ufs: core: Fix double completion in ufshcd_clear_lu_cmds() Stanley Jhu <stanleyjhu(a)google.com> scsi: ufs: core: Add a helper for clearing hba->outstanding_reqs Stanley Jhu <stanleyjhu(a)google.com> scsi: ufs: core: Remove an always-false WARN_ONCE() Yingjie Wang <x-professor(a)outlook.com> scsi: handle out-of-range SG_SET_TIMEOUT values Bart Van Assche <bvanassche(a)acm.org> scsi: sd: Mark the disk dead if runtime resume fails in sd_remove() Ratnaker Gautam <ratnaker.gautam(a)kuleuven.be> scsi: libiscsi_tcp: Prevent R2T range check overflow Joonhoe Kim <26rote(a)gmail.com> scsi: ufs: core: Fix a deadlock between clock scaling and device commands Stanley Jhu <stanleyjhu(a)google.com> scsi: ufs: core: Clear stale UIC result byte before peer DME retries Stanley Jhu <stanleyjhu(a)google.com> scsi: ufs: bsg: Reject UIC commands with a non-zero result byte Stanley Jhu <stanleyjhu(a)google.com> scsi: ufs: bsg: Validate request_len before accessing request Stanley Jhu <stanleyjhu(a)google.com> scsi: ufs: bsg: Clear the reply buffer before use Stanley Jhu <stanleyjhu(a)google.com> scsi: ufs: bsg: Complete the job on error yanxia <yanxia(a)cmss.chinamobile.com> veth: fix stale peer max_mtu on XDP program replacement Igor Velkov <iav(a)iav.lv> genirq/kexec: Do not take the bus lock of an interrupt chip on the crash path Aamir Ahmed <elb12345(a)hotmail.co.uk> gve: fix out-of-bounds read in gve_get_flow_rule_entry() Sasha Levin <sashal(a)kernel.org> cgroup: don't kill migrated processes through their exiting threads Thomas Weißschuh (Schneider Electric) <thomas.weissschuh(a)linutronix.de> timekeeping: Update offsets on sequence counter retry in ktime_get_update_offsets_now() Daehyeon Ko <4ncienth(a)gmail.com> timekeeping: Require permission to set auxiliary clocks Cen Zhang (Microsoft) <cenzhang(a)linux.microsoft.com> posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() signal path Zhiling Zou <zhilinz(a)nebusec.ai> ipmr: only copy pktinfo to cache reports Pufan Jin <cyan2254650260(a)gmail.com> spi: zynq-qspi: fix address buffer corruption and support 4-byte address Yafang Shao <laoar.shao(a)gmail.com> sched: fix stale get_pref_llc() stub for !CONFIG_SCHED_CACHE Tim Chen <tim.c.chen(a)linux.intel.com> sched/cache: Honor asym packing over cache aware scheduling on hybrid systems Christian Marangi <ansuelsmth(a)gmail.com> i2c: mt7621: fix copying uninitialized kernel stack with reduced page_len Alex Kazinsky <a.kazinsky(a)ideco.ru> ASoC: tlv320aic32x4: Prevent division by zero in divider callbacks Jean Delu <jeandelu(a)tutamail.com> parisc: eisa_enumerator: Fix out-of-bounds reads of the EEPROM buffer Adrian Ambrozewicz <aambrozewicz(a)nvidia.com> gpiolib: don't report -ENOMEM for a requested line without a label Pei Xiao <xiaopei01(a)kylinos.cn> tpm: fix zero-length read discarding the pending response Pei Xiao <xiaopei01(a)kylinos.cn> tpm: tpm_nsc: stop using the cleanup callback as dev.release Pei Xiao <xiaopei01(a)kylinos.cn> tpm: tpm_nsc: fix NULL pointer dereference on init failure Alexander Sverdlin <alexander.sverdlin(a)siemens.com> tpm: tpm2_probe: propagate transport errors Navon John Lukose <navonjohnlukose(a)gmail.com> i2c: designware: queue only one read command for block reads Ma Ke <make_ruc2021(a)163.com> i2c: acpi: Fix adapter reference leak in i2c_acpi_new_device_by_fwnode() Karl Mehltretter <kmehltretter(a)gmail.com> PM: EM: allocate the cpumask for every perf domain Tristan Madani <tristan(a)talencesecurity.com> cpufreq: intel_pstate: cancel HWP notify work in driver cleanup Nickolai Zeldovich <nickolai(a)csail.mit.edu> ucount: take the rlimit reference before checking the limit Christian Brauner <brauner(a)kernel.org> listns: don't wrap around with a U64_MAX cursor Nikolaos Karaolidis <nick(a)karaolidis.com> fs: don't lose inodes that another LRU walker is isolating Christian Brauner <brauner(a)kernel.org> listmount: don't wrap around with a U64_MAX cursor Christian Brauner <brauner(a)kernel.org> statmount: don't copy the reserved empty string past the buffer Chuck Lever <cel(a)kernel.org> exportfs: Release the get_name() directory file synchronously Liz Fong-Jones <lizf(a)honeycomb.io> writeback: keep cleanup_offline_cgwb()'s scan out of syncs Nikolaos Karaolidis <nick(a)karaolidis.com> fs: rotate inodes whose page cache could not be dropped Guopeng Zhang <zhangguopeng(a)kylinos.cn> cgroup/cpuset: Fix task checking when enabling a partition Henry Martin <bsdhenrymartin(a)gmail.com> tipc: fix broadcast sender hang on last acker departure Niklas Cassel <cassel(a)kernel.org> ata: libata-sff: fix race between IRQ deferral and ata_sff_flush_pio_task() Liu Chao <liuc63(a)xiaopeng.com> net: wwan: iosm: validate msg_head before indexing msg_ring Qingfang Deng <qingfang.deng(a)linux.dev> pppoe: delete session hash entries by pointer match Daehyeon Ko <4ncienth(a)gmail.com> mshv_vtl: reject poll files with multiple waitqueues Yu Zhang <yuz08559(a)gmail.com> nvmet: take subsys->lock while force-reconnecting in nvmet_subsys_attr_qid_max_store() Shawn Lin <shawn.lin(a)rock-chips.com> PCI/pwrctrl: Only destroy devices created by pwrctrl core Alexey Charkov <alchark(a)flipper.net> PCI/pwrctrl: generic: Fix leaking array from of_regulator_bulk_get_all() Runyu Xiao <runyu.xiao(a)seu.edu.cn> sh: maple: Use the matching IRQ cookie when invoking free_irq() Henrik Enquist <henrik.enquist(a)gmail.com> ALSA: aloop: Update the PCM Slave controls for a matching playback Julian Sun <sunjunchao(a)bytedance.com> writeback: clear old wb dirty state after inode switches Julian Sun <sunjunchao(a)bytedance.com> writeback: reset dirtied_when when switching wbs Bartu Alev <bartualev(a)gmail.com> platform/x86: asus-wmi: fix TUF keyboard power state shutdown naming Michael Kelley <mhkelley58(a)gmail.com> Documentation: hyperv: Update documentation for sending VMBus packets Cen Zhang <zzzccc427(a)gmail.com> ocfs2/cluster: initialize heartbeat regions before publishing them Joseph Qi <joseph.qi(a)linux.alibaba.com> ocfs2: deal with legacy signed xattr name hash values Joseph Qi <joseph.qi(a)linux.alibaba.com> ocfs2: use the stored hash when checking xattr bucket collision Joseph Qi <joseph.qi(a)linux.alibaba.com> ocfs2: deal with legacy signed dir index name hash values Armaan Sandhu <armaan.sandhu0504(a)gmail.com> lib/cmdline: fix get_options() count and overflow with large ranges Joseph Qi <joseph.qi(a)linux.alibaba.com> ocfs2: reserve value tree metadata when moving an xattr into the inode Joseph Qi <joseph.qi(a)linux.alibaba.com> ocfs2: reserve metadata for a new xattr block and its value tree Matt Turner <mattst88(a)gmail.com> alpha: determine tininess after rounding in the FP emulation Bryam Vargas <hexlabsecurity(a)proton.me> net/smc: queue the copied chunk when smc_tx_sendmsg() faults Hengyu Liang <hengyul(a)cs.unc.edu> exfat: fix reading a directory whose FAT chain is longer than its size Hengyu Liang <hengyul(a)cs.unc.edu> exfat: free clusters beyond EOF when a write fails or is short Yuezhang Mo <Yuezhang.Mo(a)sony.com> exfat: mark straddling folio RO and zero the post-EOF range Hengyu Liang <hengyul(a)cs.unc.edu> exfat: fix a large buffered write failing when the volume is nearly full Namjae Jeon <linkinjeon(a)kernel.org> exfat: zero invalid tail on partial overwrites Jiale Yao <yaojiale02(a)163.com> exfat: drain in-flight DIO before buffered writes Chi Zhiling <chizhiling(a)kylinos.cn> exfat: make valid_size and zeroed_size atomic Chi Zhiling <chizhiling(a)kylinos.cn> exfat: dirty all new pages when extending valid_size Chi Zhiling <chizhiling(a)kylinos.cn> exfat: hold the invalidate lock while truncating Chi Zhiling <chizhiling(a)kylinos.cn> exfat: advance valid_size to EOF for append writes Til Kaiser <mail(a)tk154.de> mlxsw: Initialize register query payloads Yingjie Wang <1075151112(a)qq.com> net: unix: reject negative max_dgram_qlen values Nguyen Ngoc Thang <ngocthang2710.1999(a)gmail.com> net/rds: ib: don't enable IRQs in rds_ib_conn_free() Guangshuo Li <lgs201920130244(a)gmail.com> PCI: qcom-ep: Deinitialize endpoint on remove Yao Yiqi <yaoyiqi3(a)huawei.com> fbcon: Retry rotated font allocation after failure Yao Yiqi <yaoyiqi3(a)huawei.com> fbcon: Rebuild rotated font buffer on font change Yao Yiqi <yaoyiqi3(a)huawei.com> fbcon: Include font geometry in the rotated font cache Tingjie Zhong <catme0w(a)live.cn> fbdev: bitblit: Fix glyph clipping when fbcon pans Daehyeon Ko <4ncienth(a)gmail.com> ipv6: do not restart DAD for a dead ifaddr Daehyeon Ko <4ncienth(a)gmail.com> ipv6: initialize temporary ifaddr before publication Daehyeon Ko <4ncienth(a)gmail.com> ipv6: serialize address publication with device teardown Daehyeon Ko <4ncienth(a)gmail.com> ipv6: remove ifaddr from hash during ifdown list cleanup Kees Cook <kees(a)kernel.org> netdev: Hide the netdev_priv() origin from GCC in netdev_from_priv() Zhen Han <Zhen.Han(a)amd.com> drm/amdkfd: correct vram_available calculation Daniel Phillips <daniel.phillips(a)amd.com> amdkfd: Fix memory availability double accounting of kfd pinned objects Kenneth Feng <kenneth.feng(a)amd.com> drm/amd/pm:restate all customized OD features on every table upload for smu 13.0.0/smu 14.0.2 John Fisher <jfisher84(a)gmail.com> drm/amdgpu: wait for pending page table updates before switching a VM to CPU updates William Palacek <William.Palacek(a)amd.com> drm/amdkfd: wait for a GPU reset before freeing a BO Keita Morisaki <kmta1236(a)gmail.com> drm/amd/display: Fix swap in median3() for DSC rate control Elena Sakhnovitch <Elena.Sakhnovitch(a)amd.com> drm/amdgpu/gmc9: add extra type-2 TLB flush for gfx942/gfx950 Harish Kasiviswanathan <Harish.Kasiviswanathan(a)amd.com> drm/amdkfd: fix NULL deref in SDMA HQD debugfs dump on GC 12.1 Jesse Zhang <Jesse.Zhang(a)amd.com> drm/amdkfd: don't drop an SVM CWSR reference that was never taken Kevin Wang <kevin.wang(a)amd.com> drm/amd/pm: reapply umd profile state after recovery Jesse Zhang <Jesse.Zhang(a)amd.com> drm/amdgpu: reject ANONONLY userptrs that span multiple VMAs Mario Limonciello <mario.limonciello(a)amd.com> drm/amd/display: don't WARN when removing an unallocated MST payload Henry Martin <bsdhenrymartin(a)gmail.com> drm/amdkfd: fix doorbell allocation race creating duplicate allocations Maciej Kucharek <qchcio(a)gmail.com> drm/amdgpu: reset VI ASIC on Apple boards with VRAM at 0 Maciej Kucharek <qchcio(a)gmail.com> drm/amdgpu: reset CIK ASIC on Apple boards with VRAM at 0 Maciej Kucharek <qchcio(a)gmail.com> drm/amdgpu: reset SI ASIC on MacBookPros with VRAM at 0 Luigi Lauro <luigi.lauro(a)gmail.com> drm/amdgpu: require _PR3 for BOCO Daeho Jeong <daehojeong(a)google.com> f2fs: don't use truncate_inode_pages_final() on live inodes Wang Yan <wangyan01(a)kylinos.cn> selftests/landlock: Fix snprintf truncation checks in test files Nirmoy Das <nirmoyd(a)nvidia.com> blk-mq: clear stale inactive flag on hctx reuse Sahaj Chaudhari <sahaj123.sc(a)gmail.com> gpio: pca953x: Handle direction register read errors in IRQ paths Sahaj Chaudhari <sahaj123.sc(a)gmail.com> gpio: pca953x: Preserve wakeup accounting on parent IRQ failure Sahaj Chaudhari <sahaj123.sc(a)gmail.com> gpio: davinci: Clear interrupt status in every bank on suspend Takashi Iwai <tiwai(a)suse.de> ALSA: line6: Handle period elapsed calls outside the locks Baek Kyu, Kim <pocj8ur4in(a)gmail.com> gpiolib: Free chip resources when allocating the label fails Rong Zhang <i(a)rong.moe> platform/x86: lenovo-wmi-capdata: Do not stop the AC notifier chain on error Takashi Iwai <tiwai(a)suse.de> ALSA: emux: Stop voices before freeing zones in all cases Wang Yan <wangyan01(a)kylinos.cn> ALSA: mtpav: restore negation dropped in guard() conversion Hongling Zeng <zenghongling(a)kylinos.cn> ntfs: roll back the ACL xattr commit when the WSL mode update fails DaeMyung Kang <charsyam(a)gmail.com> ntfs: flush the block device when syncing a directory DaeMyung Kang <charsyam(a)gmail.com> ntfs: report block device flush failures from fsync Karl Mehltretter <kmehltretter(a)gmail.com> ntfs: fix kmap_local leak in ntfs_check_logfile() Karl Mehltretter <kmehltretter(a)gmail.com> ntfs: fix kunmap_local() of advanced pointers in check_mft_mirror() Matthias Goergens <matthias.goergens(a)gmail.com> ntfs: balance the $MFT runlist lock in data extension error paths Matthias Goergens <matthias.goergens(a)gmail.com> ntfs: add a runlist merge that leaves the source runlist to the caller Matthias Goergens <matthias.goergens(a)gmail.com> ntfs: do not use a stale runlist pointer when undoing $MFT extension Matthias Goergens <matthias.goergens(a)gmail.com> ntfs: hold the runlist lock while expanding a non-resident attribute Matthias Goergens <matthias.goergens(a)gmail.com> ntfs: fail the mount when $MFT's data size exceeds its allocation Matthias Goergens <matthias.goergens(a)gmail.com> ntfs: do not map a vcn as a hole when its runlist lookup failed Matthias Goergens <matthias.goergens(a)gmail.com> ntfs: fail the mount when $MFT needs its own extent records Matthias Goergens <matthias.goergens(a)gmail.com> ntfs: do not turn an unmappable runlist fragment into delalloc on write Matthias Goergens <matthias.goergens(a)gmail.com> ntfs: do not map an unmappable runlist fragment as a hole Hyunchul Lee <hyc.lee(a)gmail.com> ntfs: validate attribute-list sizes before allocation Hongling Zeng <zenghongling(a)kylinos.cn> ntfs: mount hibernated volumes read-only regardless of errors= Karl Mehltretter <kmehltretter(a)gmail.com> ntfs: include the final partial cluster in sync writes Hongling Zeng <zenghongling(a)kylinos.cn> ntfs: fail remount on sync errors and keep the dirty bit on SB_FORCE Hongling Zeng <zenghongling(a)kylinos.cn> ntfs: check the dirty-state commit on remount and unmount Hongling Zeng <zenghongling(a)kylinos.cn> ntfs: do not clear the volume dirty bit during sync Hongling Zeng <zenghongling(a)kylinos.cn> ntfs: persist the dirty state after the final put_super() commits Hongling Zeng <zenghongling(a)kylinos.cn> ntfs: sync the volume dirty bit with the recorded error state Hongling Zeng <zenghongling(a)kylinos.cn> ntfs: set the volume dirty bit unconditionally on metadata changes Hongling Zeng <zenghongling(a)kylinos.cn> ntfs: fix volume flag update races Hyunchul Lee <hyc.lee(a)gmail.com> ntfs: avoid truncate and writeback deadlock Hongling Zeng <zenghongling(a)kylinos.cn> ntfs: use fatal_signal_pending() for fallocate interruption checks Hongling Zeng <zenghongling(a)kylinos.cn> ntfs: NULL vol->vol_ino in the load_system_files() error teardown Hyunchul Lee <hyc.lee(a)gmail.com> ntfs: wait for attribute folio writeback before update Hyunchul Lee <hyc.lee(a)gmail.com> ntfs: trigger page_mkwrite for native 4Kn size extension Hyunchul Lee <hyc.lee(a)gmail.com> ntfs: use sync flag for direct MFT writes Hyunchul Lee <hyc.lee(a)gmail.com> ntfs: write MFT records through containing I/O units Hyunchul Lee <hyc.lee(a)gmail.com> ntfs: write MFT folios through mapped I/O units Hyunchul Lee <hyc.lee(a)gmail.com> ntfs: track direct MFT writes until BIO completion Hyunchul Lee <hyc.lee(a)gmail.com> ntfs: serialize raw MFT updates against folio writeback Hyunchul Lee <hyc.lee(a)gmail.com> ntfs: write MFT mirror data in mapped I/O units Hyunchul Lee <hyc.lee(a)gmail.com> ntfs: validate the MFT I/O geometry Hyunchul Lee <hyc.lee(a)gmail.com> ntfs: read MFT writeback bounds under size_lock Chengfeng Ye <nicoyip.dev(a)gmail.com> l2tp: snapshot sequencing state when building transmit headers Peter Ujfalusi <peter.ujfalusi(a)linux.intel.com> ALSA: compress: reject restarting an ACTIVE task via origin_seqno Peter Ujfalusi <peter.ujfalusi(a)linux.intel.com> ALSA: compress: add missing OPEN-state gate to SET_METADATA Peter Ujfalusi <peter.ujfalusi(a)linux.intel.com> ALSA: compress: reject buffer geometry change on gapless next_track Peter Ujfalusi <peter.ujfalusi(a)linux.intel.com> ALSA: compress: fix buffer leak on failed SET_PARAMS Thomas Nemer <thomas.nemer(a)fortytwo.fr> ALSA: usb-audio: Skip sample-rate read-back on PreSonus AudioBox USB Sorah Fukumori <her(a)sorah.jp> net: gro: don't chain linear parts larger than gso_size into frag_list Jamal Hadi Salim <jhs(a)mojatatu.com> netdevsim: reject cls_bpf programs bound to another device Kir Kolyshkin <kolyshkin(a)gmail.com> cgroup: fix cgroup.kill for exited thread group leader Michal Blaszczyk <michalblk(a)google.com> sched_ext: Reset runnable_at when a task leaves its scheduler Alexander Kochetkov <al.kochet(a)gmail.com> Revert "Input: matrix_keypad - force switch rows to input mode" Dmitry Torokhov <dmitry.torokhov(a)gmail.com> Input: always accept EV_SYN in input_event() Armin Wolf <W_Armin(a)gmx.de> hwmon: (acpi_power_meter) Fix 18.45 TW bug Baek Kyu, Kim <pocj8ur4in(a)gmail.com> hwmon: (sht3x) Return the consumed count for heater writes Baek Kyu, Kim <pocj8ur4in(a)gmail.com> hwmon: (mcp9982) Update the interval cache only after successful writes Igor Velkov <iav(a)iav.lv> rtc: pcf8563: pass the driver data to the alarm interrupt handler Ma Ke <make_ruc2021(a)163.com> platform/x86/amd/pmc: Fix RTC reference leak in amd_pmc_verify_czn_rtc() Gregory Price <gourry(a)gourry.net> rtc: cmos: Honor explicit use_acpi_alarm parameter value Gregory Price <gourry(a)gourry.net> rtc: cmos: Disable ACPI RTC event before handling it Jianyun Gao <jianyungao89(a)gmail.com> dax: fix wrong error code returned from dax_dedupe_file_range_compare() Seongjae Jeong <jsjlee1020(a)gmail.com> f2fs: fix submit accounting for IPU writeback Wenjie Qi <qwjhust(a)gmail.com> f2fs: flush SIT journal during filesystem resize Vaibhav Nagare <vnagare(a)redhat.com> bnxt_en: don't leave an XDP program installed when the open fails Jiale Yao <yaojiale02(a)163.com> hwmon: (gigabyte_waterforce) reject short input reports Ximing Zhang <xzhangjr(a)gmail.com> hwmon: (coretemp) Fix handling of isolated SMT siblings Kyle Zeng <kylebot(a)openai.com> netfilter: nf_reject: initialize IPCB at inet ingress Thomas Nemer <thomas.nemer(a)fortytwo.fr> ALSA: usb-audio: Fix missing sample-rate control for PreSonus AudioBox USB George Christidis <gxristidis(a)gmail.com> ALSA: hda/realtek: Fix headset mic on ASUS Zenbook 14 UX3402VA Adrian Ambrozewicz <aambrozewicz(a)nvidia.com> gpiolib: cdev: don't set GPIOD_FLAG_IS_OUT Nickolai Zeldovich <nickolai(a)csail.mit.edu> lib/buildid: reject file offsets that do not fit in pgoff_t Sanan Hasanov <sanan.hasanov(a)ucf.edu> hwmon: (corsair-cpro) Make wait_input_report_lock IRQ safe Baek Kyu, Kim <pocj8ur4in(a)gmail.com> hwmon: (sht4x) Reject incomplete heater command transfers Ricardo Neri <ricardo.neri-calderon(a)linux.intel.com> hwmon: (coretemp) Return -ENODATA for invalid temperature readings Tom Verdonck <tom.verdonck(a)inspiral.be> hwmon: (sht4x) Fix jiffies wraparound in heater-ready check Weibin Liu <liuwb(a)xiaopeng.com> spi: ch341: handle transfers without a TX or RX buffer Deep Shah <deepshah146(a)gmail.com> RDMA/uverbs: Fix uobject leak in DMABUF release Vasiliy Kovalev <kovalev(a)altlinux.org> ALSA: hda/via: Apply runtime PM workaround for ASUS X55A Magnus Lindholm <linmag7(a)gmail.com> alpha: do not skip TLB shootdown IPIs for kthread-borrowed mms Magnus Lindholm <linmag7(a)gmail.com> alpha: do not clear remote MMU contexts in migrate_flush_tlb_page() Magnus Lindholm <linmag7(a)gmail.com> alpha: invalidate the local context in flush_icache_user_page() Magnus Lindholm <linmag7(a)gmail.com> alpha: invalidate the local context in flush_tlb_mm() Magnus Lindholm <linmag7(a)gmail.com> alpha: fix the local TLB invalidate in the UP flush_tlb_page() Magnus Lindholm <linmag7(a)gmail.com> alpha: fix the local TLB invalidate in flush_tlb_page() Magnus Lindholm <linmag7(a)gmail.com> alpha: invalidate the local context in flush_tlb_page() Magnus Lindholm <linmag7(a)gmail.com> alpha: only use a targeted tbi() when the target mm is really current Magnus Lindholm <linmag7(a)gmail.com> alpha: run check_mmu_context() from finish_arch_post_lock_switch() Magnus Lindholm <linmag7(a)gmail.com> alpha: load the MMU context when switch_mm() switches the current task Matt Turner <mattst88(a)gmail.com> alpha: handle VM_FAULT_HWPOISON in do_page_fault() Andrea Righi <arighi(a)nvidia.com> sched_ext: Don't queue balance callbacks from a core-sched pick Brandon Williams <turbine.bmw(a)gmail.com> power: supply: qcom_battmgr: Notify charger supplies of online changes Tim Douglas <me(a)timdoug.com> power: supply: generic-adc-battery: fix status with no supplier Andrew Pam <andrew(a)fastmailteam.com> power: supply: cros_charge-control: restore EC state on resume Fabricio Akio <fabricioakio(a)gmail.com> power: supply: qcom_smbx: set the charge enable after software control Andrea Righi <arighi(a)nvidia.com> sched_ext: Don't leave balance callbacks queued across a pick retry Arnaldo Carvalho de Melo <acme(a)redhat.com> perf python: Free the parse error entries when parsing fails Fuad Tabba <fuad.tabba(a)linux.dev> KVM: arm64: vgic-its: Don't map an LPI from more than one event Luis Gerardo Lopez Hernandez <gamaerry(a)gmail.com> ALSA: hda/realtek: Fix internal speakers on Acer Aspire AL16-31P José Miguel Castellanos Valladolid <josstamy(a)gmail.com> ALSA: hda/realtek: Enable mute LEDs on HP OmniBook X Flip 14-fm0xxx Takashi Iwai <tiwai(a)suse.de> ALSA: seq: oss: Skip events until fully initialized Paolo Abeni <pabeni(a)redhat.com> mptcp: fix subflow bitfield misuse Quanye Yang <quanyeyang(a)proton.me> mptcp: reset msk state on early connect failure Kees Cook <kees(a)kernel.org> ipc, msg: Account msg_msg allocations with GFP_KERNEL_ACCOUNT again sonotri <sono7ri(a)gmail.com> ublk: pin module while release work is pending Chengfeng Ye <nicoyip.dev(a)gmail.com> fuse: fix copy_file_range reply handling race Art O Cathain <art.home(a)gmail.com> ASoC: amd: acp-config: force SoundWire probe on Dell 14S DS14265 Sung Byeongchan <tjdqudcks0424(a)naver.com> virtiofs: validate fixed-output response length Fan Wu <fanwu01(a)zju.edu.cn> virtio_fs: read the vring size under virtio_fs_mutex in ->get_tree Joanne Koong <joannelkoong(a)gmail.com> fuse: don't launder folios of a bad inode Huacai Chen <chenhuacai(a)kernel.org> cpufreq: loongson3: Replace IOCSR read/write with MMIO ones Huacai Chen <chenhuacai(a)kernel.org> cpufreq: loongson3: Use global physical CPU ID in get/target callbacks Huacai Chen <chenhuacai(a)kernel.org> cpufreq: loongson3: Replace per-package mutex with per-node Huacai Chen <chenhuacai(a)kernel.org> cpufreq: loongson3: Adjust the width of id and val in smc_message Huacai Chen <chenhuacai(a)kernel.org> cpufreq: loongson3: Make this driver depend on MACH_LOONGSON64 Rosen Penev <rosenp(a)gmail.com> net: bgmac: enable interrupts only after NAPI is ready Shubham Antil <shubham(a)octane.security> RDS/IB: validate receive fragment completions Seung Min Shin <guncraft2000(a)naver.com> sctp: hold transport reference across connect wait Zixuan Chai <petalzu987(a)gmail.com> ipv6: defrag: orphan skb before queuing Henry Martin <bsdhenrymartin(a)gmail.com> rds: fix out-of-bounds conn_path walks via handshake exthdrs Josef Bacik <josef(a)toxicpanda.com> net: skbuff: don't BUG() on a bad csum_start in skb_copy_and_csum_dev() Ming Lei <tom.leiming(a)gmail.com> ublk: let STOP_DEV cancel the server's commands before its release Ming Lei <tom.leiming(a)gmail.com> ublk: reset the FETCH round under ub->mutex Ming Lei <tom.leiming(a)gmail.com> ublk: reset the FETCH round in release also without a disk Ming Lei <tom.leiming(a)gmail.com> ublk: mark the batch fetch command cancelable before linking it Ming Lei <tom.leiming(a)gmail.com> ublk: mark the io command cancelable before publishing it Ming Lei <tom.leiming(a)gmail.com> ublk: keep a canceled FETCH round canceling until the server is gone Yun Zhou <yun.zhou(a)windriver.com> net: erspan: set lltx to avoid sch_direct_xmit deadlock Jianyun Gao <jianyungao89(a)gmail.com> dax: fix dax_range_compare_iter() to use correct size and address offset Jianyun Gao <jianyungao89(a)gmail.com> dax: Return errors from dax_core_init() David Carlier <devnexen(a)gmail.com> ring-buffer: Take cpus_read_lock() when changing the subbuf order Gyokhan Kochmarla <gyokhan(a)amazon.de> erofs: use on-disk blkszbits for lz4 max pcluster bound Weibin Liu <liuwb(a)xiaopeng.com> spi: amd: fix len==0 underflow and FIFO overflow Keng-Yu Lin <keng-yu.lin(a)hpe.com> PCI/PM: Restore BARs after powering up during enumeration Weibin Liu <liuwb(a)xiaopeng.com> spi: bcm-qspi: reject oversized dummy bytes in mspi exec_mem_op Jason Gunthorpe <jgg(a)ziepe.ca> iommupt: Do not allow PTEs to be split when dirty logging Vladyslav Tymoshchuk <tvlad744(a)gmail.com> ASoC: qcom: q6asm-dai: wrap the position of a full ring to 0 Vladyslav Tymoshchuk <tvlad744(a)gmail.com> ASoC: qcom: q6apm: reset the hw pointer with the fragment queue Vladyslav Tymoshchuk <tvlad744(a)gmail.com> ASoC: qcom: q6apm-dai: wrap the position of a full ring to 0 Radiy Zhambakiev <r.zhambakiev(a)prosoftsystems.ru> mfd: tps65217: Use devres for IRQ domain and wake teardown Radiy Zhambakiev <r.zhambakiev(a)prosoftsystems.ru> mfd: tps65217: Check return value when masking interrupt sources Radiy Zhambakiev <r.zhambakiev(a)prosoftsystems.ru> mfd: tps65217: Fix NULL pointer dereference on IRQ init failure Guixin Liu <kanie(a)linux.alibaba.com> cxl/events: Test CME counter expiry with equality, not bitwise AND Alexey Charkov <alchark(a)flipper.net> mfd: bq257xx: Mark self-modifying BQ25792 registers volatile Weibin Liu <liuwb(a)xiaopeng.com> spi: npcm-fiu: limit UMA data_size to the 16-byte staging buffer Marc Zyngier <maz(a)kernel.org> KVM: arm64: Turn vcpu->arch.pause into a counter Marc Zyngier <maz(a)kernel.org> KVM: arm64: Move IN_GUEST_MODE ahead of state being loaded Marc Zyngier <maz(a)kernel.org> KVM: arm64: Move OUTSIDE_GUEST_MODE publication past context being saved Marc Zyngier <maz(a)kernel.org> KVM: arm64: nv: Move L2->L1 switch on interrupt early Ard Biesheuvel <ardb(a)kernel.org> efi/libstub: Don't replace an existing LINUX_EFI_MEMRESERVE table Ard Biesheuvel <ardb(a)kernel.org> efi/libstub: arm64: Don't use the platform register x18 Weibin Liu <liuwb(a)xiaopeng.com> spi: jcore: fix divide-by-zero when speed_hz is zero Tal Zussman <tz2294(a)columbia.edu> gfs2: fix the escaped block copy in gfs2_before_commit() Takashi Iwai <tiwai(a)suse.de> ALSA: ump: Correct return size of fill_rpn() Au Dang <au.dang.jx(a)renesas.com> irqchip/renesas-rzv2h: Preserve TIEN state in rzv2h_tint_set_type() Karl Mehltretter <kmehltretter(a)gmail.com> irqchip/jcore-aic: Fix lost IPIs on SMP Karl Mehltretter <kmehltretter(a)gmail.com> irqchip/atmel-aic[5]: Disable interrupts in the irq_pm_shutdown() callbacks Wentao Liang <vulab(a)iscas.ac.cn> irqchip/mchp-eic: Fix clock reference leak in mchp_eic_probe() Guangshuo Li <lgs201920130244(a)gmail.com> irqchip/imx-intmux: Fix runtime PM teardown on remove Fuad Tabba <fuad.tabba(a)linux.dev> irqchip/gic-v3-its: Don't clamp nvecs to zero when id_bits is 32 Ahsan Atta <ahsan.atta(a)intel.com> crypto: qat - fix use of destroyed vf2pf_lock on VF restart Ahsan Atta <ahsan.atta(a)intel.com> crypto: qat - initialise state_lock on every path in adf_devmgr_add_dev() Zhang Heng <zhangheng(a)kylinos.cn> ALSA: hda/realtek: Fix quirk for HP Laptop 15-fc0xxx Andrea Parri <parri.andrea(a)gmail.com> iommufd: Reject a zero-length dirty bitmap request Andrea Parri <parri.andrea(a)gmail.com> iommufd: Keep dmabuf PFNs MMIO when filling another domain Nathan Chancellor <nathan(a)kernel.org> kbuild: AutoFDO: Update split machine function argument for upstream rename Wentao Liang <vulab(a)iscas.ac.cn> PCI: xilinx-xdma: Fix device node reference leak in xilinx_pl_dma_pcie_init_irq_domain() Hui Su <sh_def(a)163.com> cpufreq: schedutil: Serialize sugov_start() against rate limit updates Siwei Zhang <oss(a)fourdim.xyz> Bluetooth: L2CAP: Use default TxWindow for zero socket option Siwei Zhang <oss(a)fourdim.xyz> Bluetooth: L2CAP: Reject invalid TxWindow in configuration requests Siwei Zhang <oss(a)fourdim.xyz> Bluetooth: L2CAP: Reject mode changes on connected channels Bui Viet Dung <dungvn2345(a)gmail.com> Bluetooth: selftest: Pin module for selftest debugfs file operations Bui Viet Dung <dungvn2345(a)gmail.com> Bluetooth: hci_debugfs: Pin module for debugfs file operations Bui Viet Dung <dungvn2345(a)gmail.com> Bluetooth: 6lowpan: Pin module for 6lowpan_control debugfs file Nikolaj Klitlund Børty <nbn(a)sj.dk> Bluetooth: btusb: Add device ID for Realtek RTL8761BUE (StarTech AV53C1) Francesco Orlando <francesco.orlando99(a)libero.it> Input: xpad - add GameSir Nova Lite support Stian Halseth <stian(a)itx.no> PCI: Set supported_speeds in set_pcie_port_type() Karl Mehltretter <kmehltretter(a)gmail.com> ARM: 9523/1: topology: allocate the cacheinfo early on the boot CPU Karl Mehltretter <kmehltretter(a)gmail.com> ARM: 9522/1: cacheinfo: guard the CLIDR read in populate_cache_leaves() Karl Mehltretter <kmehltretter(a)gmail.com> ARM: 9521/1: cacheinfo: count external caches in early_cache_level() Karl Mehltretter <kmehltretter(a)gmail.com> ARM: 9520/1: cacheinfo: avoid out-of-bounds write in populate_cache_leaves() Karl Mehltretter <kmehltretter(a)gmail.com> ARM: 9491/1: alignment: restore uaccess state on emulation fault Karl Mehltretter <kmehltretter(a)gmail.com> ARM: 9488/1: smp: set current pointer in assembly before jumping into C Weibin Liu <liuwb(a)xiaopeng.com> spi: cadence-xspi: fix stack buffer overflow in the Marvell b0 path Weibin Liu <liuwb(a)xiaopeng.com> spi: cadence-xspi: reject SDMA transfers larger than the requested length Guangshuo Li <lgs201920130244(a)gmail.com> mfd: ab8500: Fix child device leaks on probe failure Martin Belanger <martin.nvme.dev(a)gmail.com> nvme: make the DH-HMAC-CHAP secret attributes readable by root only Matt Fleming <mfleming(a)cloudflare.com> iommu/amd: Don't allocate kdump device table from DMA32 Matt Fleming <mfleming(a)cloudflare.com> iommu/amd: Program device table when kdump reuse fails Tim Douglas <me(a)timdoug.com> serial: pmac_zilog: push received data to the port that received it Nicolai Buchwitz <nb(a)tipi-net.de> serial: amba-pl011: keep transmitter enabled when disabling RS485 Nicolai Buchwitz <nb(a)tipi-net.de> serial: amba-pl011: honour delay_rts_before_send for every write Ferry Toth <ftoth(a)exalondelft.nl> Revert "serial: 8250_port: Drop duplicate NULL check" Jiri Slaby (SUSE) <jirislaby(a)kernel.org> serial: 8250_omap: set priv->line before enabling the IRQ Jiri Slaby (SUSE) <jirislaby(a)kernel.org> serial: 8250_lpss: do not touch uninitialized line in ehl_serial_exit() Muhammad Bilal <meatuni001(a)gmail.com> platform/x86: hp-bioscfg: NUL-terminate the SPM auth token Muhammad Bilal <meatuni001(a)gmail.com> platform/x86: hp-bioscfg: allow clearing current_password Muhammad Bilal <meatuni001(a)gmail.com> platform/x86: hp-bioscfg: return -E2BIG from validate_password_input() Muhammad Bilal <meatuni001(a)gmail.com> platform/x86: hp-bioscfg: fix non-ASCII truncation in hp_get_string_from_buffer() Muhammad Bilal <meatuni001(a)gmail.com> platform/x86: hp-bioscfg: fix OOB reads in hp_get_string_from_buffer() Denis Arefev <arefev(a)swemel.ru> ALSA: cs46xx: fix unit mismatch in DSP code area bounds check Aaron Erhardt <aer(a)tuxedocomputers.com> platform/x86/tuxedo: Fix keyboard LED map ordering Rudi Heitbaum <rudi(a)heitbaum.com> PCI: imx6: Avoid dereferencing a NULL clock name Iván Ezequiel Rodriguez <ivanrwcm25(a)gmail.com> ALSA: hda/realtek: keep headset mic on Acer SSID 0x1640 Gergo Koteles <soyer(a)irl.hu> ALSA: hda/tas2781: Skip invalid TAS2563 UEFI calibration data Gergo Koteles <soyer(a)irl.hu> ALSA: hda/tas2781: Assign total_sz at the end of the function Kazuki Hanai <hnkz.64(a)gmail.com> tmpfs: fix unicode_map leaks in casefold option handling Giorgi Kobakhia <gkobakhi(a)asu.edu> ocfs2: fix array out of bound access in __ocfs2_find_path() Su Yue <glass.su(a)suse.com> ocfs2: update xattr count before moving bucket entries Aamir Ahmed <elb12345(a)hotmail.co.uk> lib: decompress_bunzip2: fix integer overflow in run-length decoding Bradley Morgan <brads(a)mainlining.org> panic: kill the "buffer unavailable" redirect fallback Bradley Morgan <brads(a)mainlining.org> panic: allow force_cpu redirect from an NMI Bradley Morgan <brads(a)mainlining.org> panic: restore variable arguments to nmi_panic() Bradley Morgan <brads(a)mainlining.org> panic: fix va_list reuse in panic_try_force_cpu() Bradley Morgan <brads(a)mainlining.org> panic: flatten nmi_panic control flow Bradley Morgan <brads(a)mainlining.org> panic: fix redirect CPU race in panic_try_force_cpu() Matt Turner <mattst88(a)gmail.com> lib/decompress_bunzip2: fix off-by-one in run-length bounds check Ma Ke <make_ruc2021(a)163.com> pinctrl: stm32: Fix fwnode reference leak in stm32_gpiolib_register_bank() Weibin Liu <liuwb(a)xiaopeng.com> spi: ljca: validate the response length before copying the data Chao Yu <chao(a)kernel.org> f2fs: fix to use bio_in_atomic() in f2fs_read_end_io() Daeho Jeong <daehojeong(a)google.com> f2fs: disallow mmap write and data-modifying fallocate on atomic files Zhan Xusheng <zhanxusheng1024(a)gmail.com> f2fs: fix defragment writeback range truncation on 32-bit Hengyu Liang <hengyul(a)cs.unc.edu> f2fs: allow empty strings for journaled quota options Kaixuan Li <kaixuanli0131(a)gmail.com> f2fs: check every cur_*_segno[] entry on readonly images Nanzhe Zhao <zhaonanzhe(a)xiaomi.com> f2fs: read i_size once in f2fs_vm_page_mkwrite Joanne Chang <joannechien(a)google.com> f2fs: allow pinning empty compressed files Nanzhe Zhao <zhaonanzhe(a)xiaomi.com> f2fs: remove mappedtodisk flag usage in mmap write path Myeonghun Pak <mhun512(a)gmail.com> accel/qaic: Cancel Sahara read data work on removal Karl Mehltretter <kmehltretter(a)gmail.com> sh: intc: Sort the prio and sense lists after filling them Geraldo Nascimento <geraldogabriel(a)gmail.com> PCI: rockchip: Drive at 2.5 GT/s, error other speeds Geraldo Nascimento <geraldogabriel(a)gmail.com> PCI: rockchip-host: Do not attempt 5.0 GT/s retraining Geraldo Nascimento <geraldogabriel(a)gmail.com> PCI: rockchip-ep: Do not attempt 5.0 GT/s retraining Daeho Jeong <daehojeong(a)google.com> f2fs: convert inline quota files when turning quota on Andrea Parri <parri.andrea(a)gmail.com> nvmet: zns: don't leak stale memory in zone management receive Yehyeong Lee <yhlee(a)isslab.korea.ac.kr> nvme: bound FDP config log reads to the received buffer Sung Byeongchan <tjdqudcks0424(a)naver.com> nvmet: require authentication before property set Jérémy Jean <Jeremy.Jean(a)oss.cyber.gouv.fr> nvmet: free the bvec on file namespace range errors Yehyeong Lee <yhlee(a)isslab.korea.ac.kr> nvme-auth: fail when the controller does not authenticate itself Daejun Park <daejun7.park(a)samsung.com> nvmet: fix preempt of another registrant by the reservation holder Yehyeong Lee <yhlee(a)isslab.korea.ac.kr> nvme-rdma: don't complete a request after a bogus remote invalidation Andrea Parri <parri.andrea(a)gmail.com> iomap: don't lose a failed direct I/O bio's error when zeroing the tail Andrea Parri <parri.andrea(a)gmail.com> iomap: don't lose a fiemap iteration error when emitting the last extent Kathiravan Thirumoorthy <kathiravan.thirumoorthy(a)oss.qualcomm.com> clk: qcom: ipq5210: add 24MHz rate for USB UTMI clock Kathiravan Thirumoorthy <kathiravan.thirumoorthy(a)oss.qualcomm.com> clk: qcom: ipq5332: add 24MHz rate for USB UTMI clock Kathiravan Thirumoorthy <kathiravan.thirumoorthy(a)oss.qualcomm.com> clk: qcom: ipq5018: add 24MHz rate for USB UTMI clock Aamir Ahmed <elb12345(a)hotmail.co.uk> clk: qcom: ipq-cmn-pll: Assign .num before accessing .hws Samuel Thibault <samuel.thibault(a)ens-lyon.org> speakup: Fix NULL pointer dereference on VT switch + selection Wentao Guan <guanwentao(a)uniontech.com> mei: vsc: Fix packet CRC computed over pointer size Joshua Mulloy <joshuamulloy(a)gmail.com> misc: tifm: don't clear dev->driver in tifm_device_remove() Peter Robinson <pbrobinson(a)gmail.com> misc: issei: Fix issei architecture deps Mikulas Patocka <mpatocka(a)redhat.com> dm-bufio: fix a race leading to an unsigned integer underflow Mikulas Patocka <mpatocka(a)redhat.com> dm-bufio: fix non-working memory limit Jiri Slaby (SUSE) <jirislaby(a)kernel.org> serial: 8250_exar: store the GPIO platform device in struct exar8250 Hugo Villeneuve <hvilleneuve(a)dimonoff.com> serial: sc16is7xx: declare MCR and IER as volatile registers Martin Fuzzey <martin.fuzzey(a)flowbird.group> serial: sc16is7xx: fix data corruption due to unexpected xon/xoff Sasha Levin <sashal(a)kernel.org> tools/dma: fix building from the top level with O= Ard Biesheuvel <ardb(a)kernel.org> arm64/mm: Treat faults taken by EFI runtime firmware as kernel faults Myeonghun Pak <mhun512(a)gmail.com> fbdev: nvidia: Release write-combining handle on probe failure Myeonghun Pak <mhun512(a)gmail.com> fbdev: kyro: Release WC setup on registration failure Lorenzo Stoakes (ARM) <ljs(a)kernel.org> fbdev: sh_mobile_lcdc: check for fb_deferred_io_init() error Lorenzo Stoakes (ARM) <ljs(a)kernel.org> fbdev: smscufx: check for fb_deferred_io_init() error Lorenzo Stoakes (ARM) <ljs(a)kernel.org> fbdev: udlfb: check for fb_deferred_io_init() error Lorenzo Stoakes (ARM) <ljs(a)kernel.org> fbdev: xen-fbfront: check for fb_deferred_io_init() error Lorenzo Stoakes (ARM) <ljs(a)kernel.org> fbdev: ssd1307fb: check for fb_deferred_io_init() error Andrey Misiurov <andrey.misyrov(a)gmail.com> fbdev: core: Initialize modelist in framebuffer_alloc() Karl Mehltretter <kmehltretter(a)gmail.com> fbdev: sh_mobile_lcdcfb: Restore the per-overlay sysfs attributes David E. Box <david.e.box(a)linux.intel.com> platform/x86/intel/vsec: Fix inverted walk_header() test in get_features() Guixiong Wei <weiguixiong(a)bytedance.com> platform/x86/intel-uncore-freq: Continue restoring limits on resume Mario Limonciello <mario.limonciello(a)amd.com> platform/x86/amd: hfi: Fix out-of-bounds reads when parsing ranking data Guangshuo Li <lgs201920130244(a)gmail.com> platform/x86: simatic-ipc: fix platform device leak on registration failure Antheas Kapenekakis <lkml(a)antheas.dev> platform/x86: oxpec: Fix Apex charge limit control Marco Scardovi <scardracs(a)disroot.org> platform/x86: asus-wmi: Serialize WMI method evaluations with a mutex Jack Boykin <jtboykin.jb(a)gmail.com> platform/x86/amd/pmf: Fix power_supply refcount leak in amd_pmf_get_battery_prop() Muhammad Bilal <meatuni001(a)gmail.com> platform/x86: hp-wmi: fix heap OOB read and memory corruption in hp_wmi_perform_query() Muhammad Bilal <meatuni001(a)gmail.com> platform/x86: hp-bioscfg: fix 16-byte heap overflow for empty auth token Denis Benato <denis.benato(a)linux.dev> platform/x86: asus-wmi: fix screenpad power state detection Denis Benato <denis.benato(a)linux.dev> platform/x86: asus-wmi: fix unclear usage of bd->props.power Mario Limonciello <mario.limonciello(a)amd.com> platform/x86/amd: Stop counting intermediate cycles with metrics table Mario Limonciello <mario.limonciello(a)amd.com> platform/x86/amd/pmf: Validate the APTS state index Mario Limonciello <mario.limonciello(a)amd.com> platform/x86/amd/pmf: Add AMDI0112 ACPI ID Donggeun Yoo <donggeunyoo.kernel(a)gmail.com> mm/damon/tests/core-kunit: test the size charged for a filter-trimmed region Donggeun Yoo <donggeunyoo.kernel(a)gmail.com> mm/damon/core: charge only the part of a region the filter left David Carlier <devnexen(a)gmail.com> mm/shmem: don't release a swapin-error marker as a swap entry Hao Ge <hao.ge(a)linux.dev> mm/alloc_tag: account for reserved tag ids in the kernel tag check Breno Leitao <leitao(a)debian.org> mm/shmem: report RCU-tasks quiescent states while undoing a range Hongfu Li <lihongfu(a)kylinos.cn> mm/hugetlb_cgroup: move per-node usage on cgroup reparenting Hongfu Li <lihongfu(a)kylinos.cn> mm/hugetlb_cgroup: move per-node usage on cross node migration Yuanhe Shu <xiangzao(a)linux.alibaba.com> mm/page_alloc: do not boost watermarks in kdump capture kernels Gregory Price <gourry(a)gourry.net> mm/madvise: use folio_trylock() in the cold/pageout PMD split Gregory Price <gourry(a)gourry.net> mm/madvise: reclaim isolated folios if PTE restart fails Gregory Price <gourry(a)gourry.net> proc/task_mmu: handle special PMDs in clear_refs and pagemap SJ Park <sj(a)kernel.org> mm/damon/core-kunit: test invalid damos filter commits SJ Park <sj(a)kernel.org> mm/damon/core-kunit: extend damos_commit_filter_for() for wrong input SJ Park <sj(a)kernel.org> mm/damon/core: return an error from damos_commit_filter_arg() SJ Park <sj(a)kernel.org> mm/damon/sysfs-schemes: read sysfs_filter->addr_range only once Vladimir Nedoshivin <gvozd188(a)mail.ru> PCI: vmd: Flush DMA writes before handling MSI on Arrow Lake Rickey Bartlett <subtexel(a)gmail.com> PCI: vmd: Flush DMA writes before handling MSI on Meteor Lake Imre Kaloz <kaloz(a)kernel.org> PCI: Avoid D3 on PLX PEX 8532/8533/8548 downstream ports Yongjian Mu <ymu(a)everpuredata.com> xprtrdma: trim head iovec when the payload arrives via a Write chunk Tim Menninger <tmenninger(a)everpuredata.com> xprtrdma: prevent disconnect feedback during endpoint teardown Weigang He <geoffreyhe2(a)gmail.com> mtd: parsers: qcom: fix offset/size overflow on large partitions Gabor Juhos <j4g8y7(a)gmail.com> mtd: rawnand: qcom: fix read location register usage in config_nand_cw_read() Hengyu Liang <hengyul(a)cs.unc.edu> btrfs: return -ENOTTY for unknown ioctls on the control device Wentao Liang <vulab(a)iscas.ac.cn> btrfs: zoned: fix block group reference leak in btrfs_repair_one_zone() Ard Biesheuvel <ardb(a)kernel.org> arm64/efi: Clear PTE_WRITE when applying EFI_MEMORY_RO Breno Leitao <leitao(a)debian.org> ACPI: APEI: accumulate the queued flag across error sections Ma Ke <make_ruc2021(a)163.com> ALSA: hda: cs35l41: Fix ACPI device reference leak on probe failure Mikulas Patocka <mpatocka(a)redhat.com> dm-snapshot: fix crash if dm_io_client_create fails Bjoern Doebel <doebel(a)amazon.de> selftests/filesystems: Fix idmapped_tmpfile layer dir ownership Johan Hovold <johan(a)kernel.org> USB: serial: sierra: fix urb leak on write completion Christopher Lusk <clusk(a)northecho.dev> m68k: Fix seccomp filtering on ColdFire and 68000 Anup Vishwakarma <anup.vishwakarma(a)oss.qualcomm.com> mailbox: qcom-ipcc: Guard against NULL con_priv in send_data() Wentao Liang <vulab(a)iscas.ac.cn> mailbox: mtk-cmdq: Fix runtime PM leak in cmdq_mbox_flush() Florian Fainelli <florian.fainelli(a)broadcom.com> mailbox: bcm74110: Cap rx_svc_init_list growth to prevent PMC-induced OOM Runyu Xiao <runyu.xiao(a)seu.edu.cn> mailbox: altera: shut down RX polling timer on channel teardown Wayne Chang <waynec(a)nvidia.com> usb: typec: ucsi_ccg: Add retry mechanism in ccg_read Stephen Horvath <linux(a)stevetech.au> usb: xhci-pci: Add AMD 600 series to xhci-pci-prom21 Mathias Nyman <mathias.nyman(a)linux.intel.com> xhci: Prevent invalid vdev dereference during sideband unregister Michal Pecio <michal.pecio(a)gmail.com> usb: xhci: Fix bounce buffer overflow Seungjin Bae <eeodqql09(a)gmail.com> usb: typec: ucsi: ccg: Validate altmode index in GET_CURRENT_CAM response Gris Ge <cnfourt(a)gmail.com> usb: typec: ucsi: Skip CAM query when partner has no alt modes Ali Resool Tuama <aliresool567(a)gmail.com> USB: quirks: add USB_QUIRK_WINDOWS_CONFIG_REQ_SIZE for GameSir G7 SE Drobyshev Vladimir <enigma_137(a)icloud.com> USB: cdc-acm: add VeriFone VX820 device ID Orgad Shaneh <orgads(a)gmail.com> usb: octeon-hcd: keep SOF interrupts while a pipe needs them Orgad Shaneh <orgads(a)gmail.com> usb: octeon-hcd: release the USB block when initialization fails Danilo Krummrich <dakr(a)kernel.org> usb: core: don't set drvdata to NULL in usb_unbind_interface() Adam Harshbarger <handyhandyman.adam(a)gmail.com> lib/plist: fix plist_requeue() corrupting order in the last bucket Vincent Donnefort <vdonnefort(a)google.com> KVM: arm64: Prevent 64-bit overflow when computing hyp clock rate Evgeny Akhtimirov <evgeny(a)devduty.com> ALSA: hda/realtek: Enable all four speaker amps on Lenovo ThinkBook X G2 IAH Koichiro Den <den(a)valinux.co.jp> cxl/acpi: Convert QTG _DSM latencies to picoseconds Koichiro Den <den(a)valinux.co.jp> cxl: Account for link width in latency calculation Koichiro Den <den(a)valinux.co.jp> cxl/port: Convert PCIe link latency to nanoseconds Guixin Liu <kanie(a)linux.alibaba.com> cxl/pci: Program the Port GPF timeouts before caching the DVSEC Guixin Liu <kanie(a)linux.alibaba.com> cxl/pci: Use the Device GPF DVSEC for restricted endpoints Dave Jiang <dave.jiang(a)intel.com> cxl/port: Clear cached dport pointers when a dport is removed Seongjun Hong <hsj0512(a)snu.ac.kr> vfio/mlx5: Fix boundary check in set_report_output() Xiaofeng Yuan <yuanxiaofeng(a)eswincomputing.com> RISC-V: KVM: Fix IPI delivery for out-of-order vcpu_id Ross Lagerwall <ross.lagerwall(a)citrix.com> xen-blkfront: Fix IO race during unplug Zongmin Zhou <zhouzongmin(a)kylinos.cn> slimbus: messaging: fix leaked PM vote on tid allocation failure Alexey Charkov <alchark(a)flipper.net> nvmem: rockchip-otp: Serialize reads Jianping Li <jianping.li(a)oss.qualcomm.com> misc: fastrpc: Allocate entire reserved memory for Audio PD in probe Yifei Gao <gyf161023(a)gmail.com> misc: fastrpc: fix double-free in fastrpc_map_attach() error path Johan Hovold <johan(a)kernel.org> USB: serial: usb_wwan: fix urb leak on disconnect Michael Wyraz <michael(a)wyraz.de> USB: serial: option: add support for ASR 1286:4e3c modem Reinhard Speyerer <rspmn(a)arcor.de> USB: serial: option: add Rolling Wireless RN947R Johan Hovold <johan(a)kernel.org> USB: cdc-acm: fix urb leak on disconnect Jiale Yao <yaojiale02(a)163.com> wifi: ath12k: validate MAC/PHY capability count before saving Olivier Kaloudoff <olivier.kaloudoff(a)gmail.com> ALSA: usb-audio: Add mic resolution quirk for Logitech Webcam C200 Jesse Zhang <Jesse.Zhang(a)amd.com> drm/ttm: return an error when kmapping a BO without pages Krzysztof Karas <krzysztof.karas(a)intel.com> iommu/dma: Catch scatterlist length overflows Wentao Liang <vulab(a)iscas.ac.cn> xen-pciback: Fix pcistub_device ref leak in pcistub_get_gsi_from_sbdf() Yehyeong Lee <yhlee(a)isslab.korea.ac.kr> xen/pcifront: check that an AER callback exists before calling it Wentao Liang <vulab(a)iscas.ac.cn> xen/gntdev: Fix gntdev_dmabuf ref leak in dmabuf_exp_wait_released() Koichiro Den <den(a)valinux.co.jp> xen/privcmd: Only claim ioreqs matching an ioeventfd Myeonghun Pak <mhun512(a)gmail.com> soc: fsl: dpio: Free the IRQ before releasing the I/O object Myeonghun Pak <mhun512(a)gmail.com> soc: fsl: dpio: Fix cleanup on IRQ registration failure Wentao Liang <vulab(a)iscas.ac.cn> soc: fsl: cpm1: tsa: Fix clock leak in tsa_of_parse_tdms() Abdifatah Suruur <suruurism(a)gmail.com> xen/gntdev: prevent private mappings from becoming writable Wentao Liang <vulab(a)iscas.ac.cn> clk: imx: Fix clock reference leak in imx_obtain_fixed_clock_hw() Wentao Liang <vulab(a)iscas.ac.cn> clk: imx: Fix clock reference leak in imx_get_clk_hw_by_name() Gregory Price <gourry(a)gourry.net> mm/madvise: use vm_normal_folio_pmd() in cold/pageout PMD range Gregory Price <gourry(a)gourry.net> mm/mempolicy: use vm_normal_folio_pmd() in queue_folios_pmd() Longlong Xia <xialonglong(a)kylinos.cn> mm/zswap: enable zswap_ever_enabled in zswap_pool_create() Ridong Chen <chenridong(a)xiaomi.com> mm/mglru: fix ineffective memory protection for non-kswapd reclaim Ridong Chen <chenridong(a)xiaomi.com> mm/page_counter: avoid integer overflow in effective_protection() Bingfang Guo <bingfangguo(a)tencent.com> mm/memcg: clear folio memcg after changing per memcg stats Longlong Xia <xialonglong(a)kylinos.cn> mm/zswap: publish the initial pool with list_add_rcu() Jinmeng Zhou <jinmengzhou22(a)gmail.com> mm/hugetlb: fix subpool minimum reservation rollback Anastasios Papagiannis <tasos.papagiannnis(a)gmail.com> mm/nommu: reject wrapping ranges in access_remote_vm() Mike Rapoport (Microsoft) <rppt(a)kernel.org> mm/execmem: free ROX cache chunks only when they span an entire vm area Hui Zhu <zhuhui(a)kylinos.cn> mm: memcg: reparent non-hierarchical lruvec stats on cgroup v2 Hui Zhu <zhuhui(a)kylinos.cn> mm: memcg: skip the RCU lock when the memcg is not dying Hui Zhu <zhuhui(a)kylinos.cn> mm: workingset: use lruvec_page_state_local() to count lru pages Hui Zhu <zhuhui(a)kylinos.cn> mm: memcg: redirect stats updates of dying memcgs for all hierarchies Luxiao Xu <rakukuip(a)gmail.com> mm/memory: constrain generic_access_phys() to page boundary Jinmeng Zhou <jinmengzhou22(a)gmail.com> mm/hugetlb: charge folios to the target mm's memcg Yogesh Gaur <yogeshgaur.83(a)gmail.com> md: don't hand out the array before md_alloc() has added mddev->kobj Samuel Holland <samuel.holland(a)sifive.com> riscv: cfi: Only write envcfg CSR when task is current Samuel Holland <samuel.holland(a)sifive.com> riscv: cfi: Bounds check restore token before swap Jake Labelle <southampton.jake.labelle(a)gmail.com> nilfs2: validate directory position after llseek in readdir Jinjie Ruan <ruanjinjie(a)huawei.com> ext4: fix out-of-bounds read in ext4_get_group_info() Sergey Senozhatsky <senozhatsky(a)chromium.org> ext4: fix ABBA deadlock in ext4_rmdir() Daejun Park <daejun7.park(a)samsung.com> ext4: don't report delalloc data as a hole on indirect-mapped inodes Hemanth Selam <hemanth.selam(a)gmail.com> ext4: skip extra isize expansion while unmounting Daejun Park <daejun7.park(a)samsung.com> jbd2: don't advance j_fc_off before the buffer is recorded guzebing <guzebing1612(a)gmail.com> ext4: reject delalloc to nodelalloc before applying remount options Hsiu-Hsien Lee <swinds24(a)gmail.com> ext4: fix fast commit replay failing on a read-only mount guzebing <guzebing1612(a)gmail.com> ext4: only update tune mount options when requested Matthias Goergens <matthias.goergens(a)gmail.com> fanotify: report names longer than NAME_MAX Peter Ujfalusi <peter.ujfalusi(a)linux.intel.com> ALSA: hda/hdmi: clamp sad_count in ELD proc write handler Peter Ujfalusi <peter.ujfalusi(a)linux.intel.com> ALSA: hda/hdmi: clamp num_cvts against cvt_nids[] in hdmi_read_pin_conn Daehyeon Ko <4ncienth(a)gmail.com> crypto: algif_skcipher - rewind rounded output bytes Matej Sochan <matej.sochan(a)gmail.com> ALSA: hda/realtek: Fix silent speakers on Lenovo Legion S7 15IMH05 Devin Wittmayer <lucid_duck(a)justthetip.ca> wifi: rtw89: usb: shorten the RX aggregation hold on RTL8922AU over USB 3 Tristan Madani <tristan(a)talencesecurity.com> wifi: rtw89: fix IE length passed to cfg80211_find_ie() in WoW AKM Krzysztof Wilczyński <kwilczynski(a)kernel.org> PCI/sysfs: Pass the device name length in UTF-16 code units Josef Bacik <josef(a)toxicpanda.com> aoe: pull in the headers each received packet type reads Pin-Hao Chen <billy920225(a)gmail.com> spi: stm32: fix double free of SRAM buffer on MDMA fallback Wentao Liang <vulab(a)iscas.ac.cn> clocksource/drivers/digicolor: Fix clk reference leak on request_irq failure Wentao Liang <vulab(a)iscas.ac.cn> clocksource/drivers/fttmr010: Fix clk reference leak in error paths Linlin Yang <yanglinlin(a)kylinos.cn> wifi: mt76: mt7996: fix PCI device reference leak in mt7996_pci_init_hif2() Yi Cong <yicong(a)kylinos.cn> wifi: mt76: mt792x: fix negative errno truncation in offload capability Wentao Liang <vulab(a)iscas.ac.cn> wifi: mt76: Fix of_node reference leak in mt76_get_rate_power_limits() Jiale Yao <yaojiale02(a)163.com> wifi: mt76: mt7615: cancel reset work during unregister Devin Wittmayer <lucid_duck(a)justthetip.ca> wifi: mt76: move the channel survey when the channel changes Devin Wittmayer <lucid_duck(a)justthetip.ca> wifi: mt76: mt7925: cancel mlo_pm_work on the USB stop path Devin Wittmayer <lucid_duck(a)justthetip.ca> wifi: mt76: take rcu_read_lock in the USB/SDIO tx completion path Myeonghun Pak <mhun512(a)gmail.com> wifi: mt76: mt7615: restore DBDC state after ext PHY failure Eason Lai <eason.lai(a)mediatek.com> wifi: mt76: fix memory leak in USB TX path Eason Lai <eason.lai(a)mediatek.com> wifi: mt76: mt792x: fix UAF in SDIO TX path when out of memory Mark Anthony Agarro <markanthonyagarro(a)gmail.com> wifi: mt76: mt7615: do not tear down BSS/STA state for monitor vifs Mark Anthony Agarro <markanthonyagarro(a)gmail.com> wifi: mt76: mt76x02: validate TX-status rate index before mac80211 handoff Fuad Tabba <fuad.tabba(a)linux.dev> KVM: arm64: timers: Compute an offset-applied CVAL from the current count Joseph Qi <joseph.qi(a)linux.alibaba.com> ocfs2: skip uninitialized lockres in ocfs2_mark_lockres_freeing() Joseph Qi <joseph.qi(a)linux.alibaba.com> ocfs2: restrict OCFS2_INVALID_SLOT suballoc slot to system inodes Karl Mehltretter <kmehltretter(a)gmail.com> fork: honor task_struct's declared alignment Eric Biggers <ebiggers(a)kernel.org> raid6: add missing vzeroupper to AVX-512 code Eric Biggers <ebiggers(a)kernel.org> raid6: add missing vzeroupper to AVX2 code Eric Biggers <ebiggers(a)kernel.org> xor: add missing vzeroupper to AVX code Konstantin Khorenko <khorenko(a)virtuozzo.com> selftests/core: fix unshare_test with large fs.nr_open Joseph Qi <joseph.qi(a)linux.alibaba.com> ocfs2: free replay slots in ocfs2_recovery_exit() Joseph Qi <joseph.qi(a)linux.alibaba.com> ocfs2: exit recovery thread on mount error path Thorsten Blum <blum(a)kernel.org> init: fix early boot crash with bare hostname parameter Zi Yan <ziy(a)nvidia.com> USB: gadgetfs: do not WARN about excessively large memory allocations Michael Liang <mliang(a)purestorage.com> fault-inject: fix dentry leak OGAWA Hirofumi <hirofumi(a)mail.parknet.co.jp> fat: fix fat_ent_write() for reverting the value DAI RENJIE <drj19981414013(a)gmail.com> resource: fix lost wakeup when waiting for a muxed region Ackerley Tng <ackerleytng(a)google.com> mm: hugetlb: drop refcount before freeing on memcg charge failure Ackerley Tng <ackerleytng(a)google.com> mm: hugetlb: return -ENOSPC on memcg charge failure SJ Park <sj(a)kernel.org> mm/damon/sysfs: set next refresh jiffies per sysfs context SJ Park <sj(a)kernel.org> mm/damon/core: copy nid for eligible_mem_bp damos quota goal commit Karl Mehltretter <kmehltretter(a)gmail.com> mm/damon/core: keep the temporal tuner quota over an unmeasured PSI round SJ Park <sj(a)kernel.org> mm/damon/core: handle uninitialized damos_quota_goal->last_psi_total SJ Park <sj(a)kernel.org> mm/damon/tests/core-kunit: test committing psi goal to psi goal Qinyun Tan <qinyuntan(a)linux.alibaba.com> mm/list_lru: don't copy stale shrinker id from non-memcg-aware shrinkers SJ Park <sj(a)kernel.org> mm/damon/core: handle extreme memory state in get_in_active_mem_bp() SJ Park <sj(a)kernel.org> mm/damon/core: handle extreme memory state in get_node_memcg_used_bp() SJ Park <sj(a)kernel.org> mm/damon/core: handle extreme memory state in damon_get_node_mem_bp() SJ Park <sj(a)kernel.org> mm/damon/vaddr: respect folio end for DAMOS_MIGRATE_{HOT,COLD} SJ Park <sj(a)kernel.org> mm/damon/vaddr: respect folio end for DAMOS_STAT SJ Park <sj(a)kernel.org> mm/damon/paddr: respect folio end for DAMOS actions except STAT SJ Park <sj(a)kernel.org> mm/damon/paddr: respect folio end for DAMOS_STAT SJ Park <sj(a)kernel.org> mm/damon/core: skip applying scheme if region split for quota fails Zhiling Zou <roxy520tt(a)gmail.com> mm/page_table_check: skip zero pages Kiryl Shutsemau (Meta) <kas(a)kernel.org> mm/huge_memory: do not touch frozen folios in deferred_split_isolate() Joe Damato <joe(a)dama.to> mm: memcontrol: raise MEMCG_MAX for charges that fail without reclaiming Gregory Price <gourry(a)gourry.net> mm/mempolicy: skip zone device folios when queueing folios Gregory Price <gourry(a)gourry.net> mm/madvise: skip zone device folios in cold/pageout PMD range Gregory Price <gourry(a)gourry.net> mm/huge_memory: skip zone device folios in madvise_free_huge_pmd() Gregory Price <gourry(a)gourry.net> mm/mempolicy: take a cpuset cookie for the interleave node count Rik van Riel <riel(a)surriel.com> mm/memcontrol: fix stuck FLUSHING_CACHED_CHARGE bit on isolated cpus Hao Jia <jiahao1(a)lixiang.com> zram: fix idle age_sec underflow in idle_store() Qi Xi <xiqi2(a)huawei.com> mm/page_isolation: guard compound_order() against racing Qi Xi <xiqi2(a)huawei.com> mm/page_isolation: fix UBSAN shift-out-of-bounds warning Jiayuan Chen <jiayuan.chen(a)linux.dev> mm/memcontrol: fix data-race on reading jiffies_64 Chengfeng Ye <nicoyip.dev(a)gmail.com> mm/ksm: mark migration stores with WRITE_ONCE() Nathan Chancellor <nathan(a)kernel.org> wifi: brcmsmac: Adjust txpwrindex value in nphy_ipa_rxcal_gaintbl_2GHz Darrick J. Wong <djwong(a)kernel.org> xfs: cross-reference the primary superblock Priyank Rathod <rathodpriyank(a)google.com> PCI/AER: Fix memory leak in aer_recover_queue() on kfifo buffer overflow Donggeun Yoo <donggeunyoo.kernel(a)gmail.com> PCI/DOE: Fix double free of a duplicate feature's sysfs name Eric Dumazet <edumazet(a)kernel.org> dlm: fix send buffer backpressure handling Tommaso Merciai <tommaso.merciai.xr(a)bp.renesas.com> dmaengine: sh: rz-dmac: Fix off-by-one in residue lmdesc lookup Denis Efremov (Oracle) <efremov(a)linux.com> floppy: return the drive state flags from the 32-bit FDGETDRVSTAT Denis Efremov (Oracle) <efremov(a)linux.com> floppy: don't store a stack buffer in timeout_message Diego Fernando Mancera Gomez <diegomancera.dev(a)gmail.com> dmaengine: loongson2-apb-cmc: fix descriptor leak in prep_slave_sg() Myeonghun Pak <mhun512(a)gmail.com> ASoC: codecs: rt5682s: disable jack detection work on shutdown Myeonghun Pak <mhun512(a)gmail.com> ASoC: stm: stm32_i2s: request IRQ after regmap initialization Darrick J. Wong <djwong(a)kernel.org> xfarray: don't crash when sorting if array element crosses a folio Chuck Lever <cel(a)kernel.org> svcrdma: Grant credits from the clamped sc_max_requests Runyu Xiao <runyu.xiao(a)seu.edu.cn> perf: xgene: initialize lock before requesting IRQ Karl Mehltretter <kmehltretter(a)gmail.com> spi: atmel-quadspi: balance runtime PM and pclk across system sleep Linus Walleij <linusw(a)kernel.org> power: supply: ab8500_fg: Report sub-percent charge changes Linus Walleij <linusw(a)kernel.org> power: supply: ab8500_fg: Accept status from supplied power Henrik Enquist <henrik.enquist(a)gmail.com> ALSA: aloop: Don't constrain playback params in notify mode Andrey Albershteyn <aalbersh(a)kernel.org> fsverity: hoist statx reporting of fs-verity flag Wentao Liang <vulab(a)iscas.ac.cn> power: supply: ltc2941: Fix of_node reference leak in ltc294x_i2c_probe() Maurizio Casciano <mauriziocasciano7(a)gmail.com> power: supply: core: Honor supplied-from with CONFIG_OF=y Tharit Tangkijwanichakul <tharitt97(a)gmail.com> media: hantro: disable runtime PM before hardware teardown Jiawen Liu <1298662399(a)qq.com> media: amphion: fix runtime PM imbalance on probe failure Tharit Tangkijwanichakul <tharitt97(a)gmail.com> media: hantro: release runtime resources when device_run fails Tharit Tangkijwanichakul <tharitt97(a)gmail.com> media: hantro: Harden MPEG-2 control access against NULL Junrui Luo <moonafterrain(a)outlook.com> media: vicodec: fix NULL deref on oversized frame Pengpeng Hou <pengpeng(a)iscas.ac.cn> media: mediatek: jpeg: retry HW selection after successful wait Michail Tatas <michail.tatas(a)gmail.com> media: verisilicon: rockchip: Fix leaks in init Kazuki Hanai <hnkz.64(a)gmail.com> media: mediatek: jpeg: Avoid context access after job finish Guangshuo Li <lgs201920130244(a)gmail.com> media: mediatek: vpu: release reserved memory on remove Guangshuo Li <lgs201920130244(a)gmail.com> media: mediatek: vcodec: destroy core workqueue on remove Guangshuo Li <lgs201920130244(a)gmail.com> media: rkvdec: do not destroy borrowed SRAM pool Wentao Liang <vulab(a)iscas.ac.cn> media: mtk-jpeg: Fix runtime PM leak in mtk_jpegenc_worker() Wentao Liang <vulab(a)iscas.ac.cn> media: mtk-jpeg: Fix runtime PM leak in mtk_jpegdec_worker() Wentao Liang <vulab(a)iscas.ac.cn> media: platform: mtk-mdp3: Fix device reference leak in mdp_comp_init() Fan Wu <fanwu01(a)zju.edu.cn> media: mediatek: vpu: free IRQ before destroying watchdog workqueue Myeonghun Pak <mhun512(a)gmail.com> media: amphion: prevent unbind while video instances are open Myeonghun Pak <mhun512(a)gmail.com> media: amphion: drain message work before releasing core state John Keeping <jkeeping(a)inmusicbrands.com> media: rockchip: rga: fix rotation on rev0 hardware Michael Freidkin <freidkin(a)gmail.com> media: meson: vdec: size capture planes from the aligned canvas Guangshuo Li <lgs201920130244(a)gmail.com> media: chips-media: wave5: Check decoder qbuf runtime resume Linmao Li <lilinmao(a)kylinos.cn> media: chips-media: wave5: Balance runtime PM on encoder close errors Linmao Li <lilinmao(a)kylinos.cn> media: chips-media: wave5: Handle polling IRQ thread failure Fan Wu <fanwu01(a)zju.edu.cn> media: rockchip: rga: quiesce IRQ before releasing m2m state Runyu Xiao <runyu.xiao(a)seu.edu.cn> media: sti: delta: use unaligned accessors for MJPEG SOF fields Nas Chung <nas.chung(a)chipsnmedia.com> media: v4l2-common: Fix P010 format info Thorsten Blum <blum(a)kernel.org> media: imagination: Fix value clamping in calculate_qp_tables Karl Mehltretter <kmehltretter(a)gmail.com> KVM: arm64: vgic-v3: Roll back assignments from the new region Sven Peter <sven(a)kernel.org> phy: apple: atc: Support DUMMY PIPEHANDLER state in configure_pipehandler Alexey Klimov <alexey.klimov(a)linaro.org> soc: samsung: exynos-pmu: fix error paths in cpuhotplug/idle states setup Karl Mehltretter <kmehltretter(a)gmail.com> KVM: arm64: vgic-v3: Undo assignment on iodev registration failure Kim Phillips <kim.phillips(a)amd.com> x86/bugs: Fix CONFIG_MITIGATION_RETPOLINE=n mitigation reporting Fuad Tabba <fuad.tabba(a)linux.dev> KVM: arm64: Pin the host vCPU before adjusting its PC under pKVM Fuad Tabba <fuad.tabba(a)linux.dev> KVM: arm64: Validate the host vCPU's VM before reading it under pKVM Fabio Estevam <festevam(a)nabladev.com> drm/panel: simple: Add Raystar RFF500F-AWH-DNN enable delay Jérémy Jean <Jeremy.Jean(a)oss.cyber.gouv.fr> crypto: ecc - Handle exceptional points in Shamir multiplication Aldo Ariel Panzardo <qwe.aldo(a)gmail.com> crypto: nx - validate 'ignore' before subtracting in decompress Thorsten Blum <blum(a)kernel.org> hwrng: core - reject unknown RNG names Thorsten Blum <blum(a)kernel.org> hwrng: ba431 - fix reported byte count Thorsten Blum <blum(a)kernel.org> hwrng: amd - report partial reads in non-blocking mode ZhaoJinming <zhaojinming(a)uniontech.com> crypto: caam - fix double-free in caam_rsa_set_priv_key_form() Eric Biggers <ebiggers(a)kernel.org> crypto: sa2ul - Fix HMAC key preparation Wei Jie Law <98lawweijie(a)gmail.com> media: uvcvideo: Fix NULL deref on events for uninitialized controls Imre Kaloz <kaloz(a)kernel.org> PCI: Disable MSI for ULi M1575 EHCI controller Anandu Krishnan E <anandu.e(a)oss.qualcomm.com> arm64: dts: qcom: shikra: Remove cdsp compute-cb@9 Runyu Xiao <runyu.xiao(a)seu.edu.cn> block: amiflop: synchronize flush timer before track flush Vasileios Almpanis <vasileios.almpanis(a)virtuozzo.com> block: drop the cached plug time when blk_add_rq_to_plug() flushes Danish Khateeb <danishkhateeb03(a)gmail.com> pps: generators: stop the generator on unregister Vincent Donnefort <vdonnefort(a)google.com> KVM: arm64: Fix MMFR0 TGRAN advertisement for pVMs Mikulas Patocka <mpatocka(a)redhat.com> dm-writecache: fix REQ_FUA processing Mikulas Patocka <mpatocka(a)redhat.com> dm-writecache: fix uncommitted_blocks underflow Mikulas Patocka <mpatocka(a)redhat.com> dm-writecache: fix a crash if we attempt to use non-dax device Mikulas Patocka <mpatocka(a)redhat.com> dm-writecache: fix a quirk in statistics Mikulas Patocka <mpatocka(a)redhat.com> dm-writecache: report I/O error if flush failed Mikulas Patocka <mpatocka(a)redhat.com> dm: fix a bug in dm_accept_partial_bio Christopher Snowhill <chris(a)kode54.net> media: em28xx: fix inverted tuner capability check for VBI device Kaho Jiang <kj2864(a)nyu.edu> media: em28xx: fix double free in em28xx_alloc_urbs Ginger Li <ginger.jzllee(a)gmail.com> media: exynos4-is: Fix a race between s_stream(0) and the interrupt handler Guangshuo Li <lgs201920130244(a)gmail.com> media: rtl28xxu: fix SDR platform device leak Wentao Liang <vulab(a)iscas.ac.cn> media: pvrusb2: Fix USB parent device leak in class_dev_create() Guangshuo Li <lgs201920130244(a)gmail.com> media: tw686x: fix V4L2 device lifetime on probe failure Linus Walleij <linusw(a)kernel.org> media: mali-c55: Ignore disconnected queues when checking readiness David Carlier <devnexen(a)gmail.com> media: mali-c55: Check the statistics buffer address before filling David Carlier <devnexen(a)gmail.com> media: mali-c55: Check the parameters buffer address before copying David Carlier <devnexen(a)gmail.com> media: mali-c55: Free the ISP control handler on unregister Pengpeng Hou <pengpeng(a)iscas.ac.cn> media: mali-c55: fail power-on when safe stop times out David Carlier <devnexen(a)gmail.com> media: v4l2-isp: reject zero-sized parameter blocks Myeonghun Pak <mhun512(a)gmail.com> media: renesas: rzv2h-ivc: manage runtime PM with devres Arnd Bergmann <arnd(a)arndb.de> media: mali-c55: add padding to mali_c55_params_ccm structure Tianchu Chen <flynnnchen(a)tencent.com> staging: rtl8723bs: fix RX buffer OOB write from device-reported length Johan Hovold <johan(a)kernel.org> staging: greybus: uart: fix racy TIOCMIWAIT implementation Wentao Liang <vulab(a)iscas.ac.cn> drm/msm/dsi: Fix VM leak in dsi_tx_buf_alloc_6g() Krzysztof Kozlowski <krzysztof.kozlowski(a)oss.qualcomm.com> drm/msm/hdmi_bridge: Correct poweroff/audio cleanup order in post_disable Krzysztof Kozlowski <krzysztof.kozlowski(a)oss.qualcomm.com> drm/msm/hdmi: Handle msm_hdmi_power_on() errors during .atomic_pre_enable() Krzysztof Kozlowski <krzysztof.kozlowski(a)oss.qualcomm.com> drm/msm/hdmi_phy: Cleanup after msm_hdmi_phy_resource_enable() failure Fan Wu <fanwu01(a)zju.edu.cn> i3c: master: adi: free the IRQ before unregistering the master Franz Schnyder <franz.schnyder(a)toradex.com> arm64: dts: freescale: imx95-aquila: Enable I2C_3_DSI1 on Clover board Runyu Xiao <runyu.xiao(a)seu.edu.cn> IB/hfi1: Shutdown self-rearming timers before freeing Alexander Sverdlin <alexander.sverdlin(a)siemens.com> pwm: tiehrpwm: Clear period on disable to allow reconfiguration Ryusuke Konishi <konishi.ryusuke(a)gmail.com> nilfs2: ignore non-fatal signals during synchronous log write wait Li RongQing <lirongqing(a)baidu.com> vfio/pci: Restore 8-byte ioeventfd support Anirudh Srinivasan <asrinivasan(a)oss.tenstorrent.com> clk: tenstorrent: Fix refcount leak on shared gate clk enable failure Aamir Ahmed <elb12345(a)hotmail.co.uk> clk: tenstorrent: Assign .num before accessing .hws Ryusuke Konishi <konishi.ryusuke(a)gmail.com> nilfs2: clear dirty flag on bdev buffers on log write failure Runyu Xiao <runyu.xiao(a)seu.edu.cn> ASoC: pcm6240: do not free an unrequested IRQ Gaurav Batra <gbatra(a)linux.ibm.com> powerpc/pseries/iommu: Add TCEs for 16GB pages when RAM is pre-mapped Srish Srinivasan <ssrish(a)linux.ibm.com> pseries/plpks: hide wrapping_features when unsupported Srish Srinivasan <ssrish(a)linux.ibm.com> pseries/plpks: fix self-reference in plpks_var initializer Srish Srinivasan <ssrish(a)linux.ibm.com> pseries/plpks: clear SED key data after use Srish Srinivasan <ssrish(a)linux.ibm.com> pseries/plpks: clear signed update authentication buffer Srish Srinivasan <ssrish(a)linux.ibm.com> pseries/plpks: clear sensitive buffers in wrapping operations Srish Srinivasan <ssrish(a)linux.ibm.com> pseries/plpks: clear sensitive PLPKS buffers Srish Srinivasan <ssrish(a)linux.ibm.com> pseries/plpks: validate input to plpks_signed_update_var() Srish Srinivasan <ssrish(a)linux.ibm.com> pseries/plpks: fix error code for wrapping key reads Srish Srinivasan <ssrish(a)linux.ibm.com> pseries/plpks: fix error handling in plpks_read_var() Abhishek Dubey <adubey(a)linux.ibm.com> powerpc/bpf: fix alignment of long branch trampoline address Abhishek Dubey <adubey(a)linux.ibm.com> powerpc/bpf: fix buffer overflow in JIT for large BPF programs Abhishek Dubey <adubey(a)linux.ibm.com> powerpc64/bpf: fix percpu private stack leak on JIT failure Wentao Liang <vulab(a)iscas.ac.cn> clk: starfive: jh7110-isp: fix refcount leak in jh7110_ispcrg_probe() Takashi Iwai <tiwai(a)suse.de> ALSA: core: Check shutdown flag at D0 power-state, too Runyu Xiao <runyu.xiao(a)seu.edu.cn> m68k: dmasound: Keep the Q40 IRQ handler registered Runyu Xiao <runyu.xiao(a)seu.edu.cn> ALSA: sgio2audio: Only free successfully requested IRQs Vishnu Reddy <busanna.reddy(a)oss.qualcomm.com> media: iris: Fix frame interval enumeration for non-divisor framerates Vishnu Reddy <busanna.reddy(a)oss.qualcomm.com> media: iris: Fix power-off ordering to disable power domain after clocks Vishnu Reddy <busanna.reddy(a)oss.qualcomm.com> media: iris: Fix bus_info prefix in VIDIOC_QUERYCAP Vishnu Reddy <busanna.reddy(a)oss.qualcomm.com> media: iris: Fix iova allocation from restrict region Vishnu Reddy <busanna.reddy(a)oss.qualcomm.com> media: iris: avoid bit depth validation for capture formats Vikash Garodia <vikash.garodia(a)oss.qualcomm.com> media: iris: reset AHB bridge before enabling HW mode Vishnu Reddy <busanna.reddy(a)oss.qualcomm.com> media: venus: Fix iova allocation from restrict region Hans de Goede <johannes.goede(a)oss.qualcomm.com> media: qcom: camss: Add "gcc_axi_hf" to 8775p VFE lite clock lists Hitesh Patel <hitesh(a)ebytelogic.com> media: qcom: camss: vfe: Fix VFE reset while another line is streaming Hitesh Patel <hitesh(a)ebytelogic.com> media: qcom: camss: vfe-17x: Fix write master selection for RDI lines Hitesh Patel <hitesh(a)ebytelogic.com> media: qcom: camss: vfe-17x: Fix write master buffer done being dropped Danish Khateeb <danishkhateeb03(a)gmail.com> ALSA: timer: Handle userspace-driven timer ioctls from 32-bit tasks Jiale Yao <yaojiale02(a)163.com> cxl/acpi: Check ACPI companion before use Michael Bommarito <michael.bommarito(a)gmail.com> fs/ntfs3: reject an oversized resident attribute on the inline iomap path Ibrahim Hashimov <security(a)auditcode.ai> fs/ntfs3: fix integer overflow in find_log_rec() causing OOB read Lucas Costa <2000.costalucas(a)gmail.com> spi: bcm2835: fix device_node reference leak in bcm2835_spi_setup() Rupesh Majhi <zoone.rupert(a)gmail.com> iio: pressure: dps310: fix CFG_REG bit definitions Cheick Traore <cheick.traore-ext(a)st.com> iio: adc: stm32: fix minimum sampling time values Ariana Lazar <ariana.lazar(a)microchip.com> iio: dac: mcp47feb02: Avoid unjustified probe error on missing label Jiale Yao <yaojiale02(a)163.com> iio: accel: sca3000: reject devices without match data Jiale Yao <yaojiale02(a)163.com> iio: accel: adxl380: reject devices without match data Jiale Yao <yaojiale02(a)163.com> iio: accel: adxl372: reject devices without match data Jiale Yao <yaojiale02(a)163.com> iio: accel: adxl313: reject devices without match data Jiale Yao <yaojiale02(a)163.com> iio: adc: ti-ads7950: validate SPI match data Jiale Yao <yaojiale02(a)163.com> iio: adc: ti-ads131m02: reject devices without match data Jiale Yao <yaojiale02(a)163.com> iio: adc: ti-ads1018: reject devices without match data Jiale Yao <yaojiale02(a)163.com> iio: adc: ti-adc128s052: validate SPI match data Jiale Yao <yaojiale02(a)163.com> iio: adc: mcp3911: reject devices without match data Jiale Yao <yaojiale02(a)163.com> iio: adc: max11205: reject devices without match data Jiale Yao <yaojiale02(a)163.com> iio: adc: ad7768-1: reject devices without match data Jiale Yao <yaojiale02(a)163.com> iio: adc: ad7606: reject devices without match data Jiale Yao <yaojiale02(a)163.com> iio: adc: ad7192: reject devices without match data Jiale Yao <yaojiale02(a)163.com> iio: pressure: bmp280: validate SPI match data Jiale Yao <yaojiale02(a)163.com> iio: potentiometer: x9250: reject devices without match data Jiale Yao <yaojiale02(a)163.com> iio: imu: adis16400: validate SPI match data Jiale Yao <yaojiale02(a)163.com> iio: frequency: adf4377: reject devices without match data Jiale Yao <yaojiale02(a)163.com> iio: dac: mcp4821: reject devices without match data Jiale Yao <yaojiale02(a)163.com> iio: dac: ad5755: validate SPI match data Jiale Yao <yaojiale02(a)163.com> iio: amplifiers: ad8366: reject devices without match data Antoniu Miclaus <antoniu.miclaus(a)analog.com> iio: adc: ad4080: enable address ascension for chip identification Wentao Liang <vulab(a)iscas.ac.cn> ASoC: codecs: wcd9335: Fix SLIM interface device leak in wcd9335_slim_status() Runyu Xiao <runyu.xiao(a)seu.edu.cn> ALSA: mpu401: shut down timer before freeing MPU Karl Mehltretter <kmehltretter(a)gmail.com> fuse: fix GCC 8 build with CONFIG_PROFILE_ALL_BRANCHES Lu Baolu <baolu.lu(a)linux.intel.com> iommu/vt-d: Avoid out-of-range shift in qi_desc_dev_iotlb_pasid() Kathiravan Thirumoorthy <kathiravan.thirumoorthy(a)oss.qualcomm.com> arm64: dts: qcom: ipq9574: Wire up USB3 PHY PIPE clock to GCC David Heidelberg <david(a)ixit.cz> arm64: dts: qcom: sdm845-xiaomi-polaris: Extend the xbl_mem region David Heidelberg <david(a)ixit.cz> arm64: dts: qcom: sdm845-xiaomi-beryllium: Extend the xbl_mem region Piotr Kubik <piotr(a)kubik.pl> netfilter: ctnetlink: fix inverted IPv6 address match in dump filter Orgad Shaneh <orgads(a)gmail.com> MIPS: mm: do not write a huge TLB entry when the probe misses Orgad Shaneh <orgads(a)gmail.com> MIPS: mm: align hugetlb mappings in arch_get_unmapped_area() Tom Verdonck <tom.verdonck(a)inspiral.be> hwmon: (tmp108) Fix jiffies wraparound in conversion-ready check Tom Verdonck <tom.verdonck(a)inspiral.be> hwmon: (tmp102) Fix jiffies wraparound in conversion-ready check Runyu Xiao <runyu.xiao(a)seu.edu.cn> peci: npcm: Initialize state before requesting IRQ Runyu Xiao <runyu.xiao(a)seu.edu.cn> peci: aspeed: Initialize state before requesting IRQ Ma Ke <make_ruc2021(a)163.com> ASoC: wcd9335: Fix device reference leak in wcd9335_slim_status() David Cemin <dcemin(a)nvidia.com> ASoC: sdw_utils: clear stale RT711 device reference on exit Breno Leitao <leitao(a)debian.org> dcache: report a Tasks-RCU quiescent state in dentry_kill() Ricardo Neri <ricardo.neri-calderon(a)linux.intel.com> hwmon: (coretemp) Refresh the temperature on the first read Richard Weinberger <richard(a)nod.at> mtd: Call get_wunit() on the master partition Wentao Liang <vulab(a)iscas.ac.cn> mtd: mtdsuper: Fix MTD device reference leak in mtd_get_sb() Wentao Liang <vulab(a)iscas.ac.cn> mtd: maps: l440gx: Fix double put of the PM device in init_l440gx() Wentao Liang <vulab(a)iscas.ac.cn> mtd: maps: l440gx: Fix double put of the ISA bridge in init_l440gx() Wentao Liang <vulab(a)iscas.ac.cn> mtd: amd76xrom: Fix PCI device reference leak in amd76xrom_init_one() Orgad Shaneh <orgads(a)gmail.com> mtd: cfi_cmdset_0002: cap the write-buffer chunk at 256 bytes on an x8 device Myeonghun Pak <mhun512(a)gmail.com> mtd: maps: pci: balance PCI enable on cleanup Wentao Liang <vulab(a)iscas.ac.cn> mtd: rawnand: atmel: Fix MCK clock leak in atmel_nand_controller_init() Guangshuo Li <lgs201920130244(a)gmail.com> mtd: rawnand: nuvoton: fix clock cleanup on probe failure Michael J. Ruhl <michael.j.ruhl(a)intel.com> platform/x86/intel/pmt: Block mmap when callback is present Joanne Koong <joannelkoong(a)gmail.com> fuse: don't drop destination page cache on a zero byte copy reply Joanne Koong <joannelkoong(a)gmail.com> fuse: don't shorten the folio descriptor at LLONG_MAX Ridham Khurana <khurana.ridham222(a)gmail.com> hwmon: (lm70) Fix rounding of negative temperatures Ridham Khurana <khurana.ridham222(a)gmail.com> hwmon: (lm95245) Fix negative temperature conversion Wentao Liang <vulab(a)iscas.ac.cn> regulator: core: Fix coupled regulators reference leak on removal Wei-Lin Chang <weilin.chang(a)arm.com> KVM: arm64: ptdump: Fix shadow ptdump sleep-in-atomic-context problem Wei-Lin Chang <weilin.chang(a)arm.com> KVM: arm64: ptdump: Check the page tables aren't freed when accessing Aamir Ahmed <elb12345(a)hotmail.co.uk> clk: mvebu: ap-cpu-clk: Assign .num before accessing .hws Junjie Cao <junjie.cao(a)intel.com> ASoC: rt712-sdca-dmic: fix drvdata type in the gain controls Guangshuo Li <lgs201920130244(a)gmail.com> ASoC: Intel: atom: Fix platform device leak on probe failure Jiacheng Xu <stitch(a)zju.edu.cn> kobject: fix out-of-bounds access in kobject_action_type() Ryusuke Konishi <konishi.ryusuke(a)gmail.com> nilfs2: fix deadlock between nilfs_evict_inode() and find_inode() Tiezhu Yang <yangtiezhu(a)loongson.cn> perf loongarch: Fix discarded const qualifier in _get_field() Lin Wang <wanglin(a)open-hieco.net> hwmon: (k10temp) Stop matching Hygon devices Myeonghun Pak <mhun512(a)gmail.com> mfd: twl-core: Unregister the auxiliary platform device on unbind David Heidelberg <david(a)ixit.cz> mfd: wcd934x: Fix NULL pointer dereference on IRQ probe deferral David Heidelberg <david(a)ixit.cz> mfd: wcd934x: set DMA mask on parent to silence "DMA mask not set" David Heidelberg <david(a)ixit.cz> mfd: Fix MAX77705 dependency on regmap Hongyan Xu <getshell(a)seu.edu.cn> mfd: da903x: Cancel IRQ work during teardown Casey Connolly <casey.connolly(a)linaro.org> drm/panel: ebbg-ft8719: Set prepare_prev_first Gabor Juhos <j4g8y7(a)gmail.com> clk: qcom: gcc-ipq5018: mark 'gpll0_main' clock as critical Francesco Dolcini <francesco.dolcini(a)toradex.com> arm64: dts: freescale: imx95-toradex-smarc: enable Wi-Fi SD interface Francesco Dolcini <francesco.dolcini(a)toradex.com> arm64: dts: freescale: imx8mp-verdin-yavia: fix external GPIOs Francesco Dolcini <francesco.dolcini(a)toradex.com> arm64: dts: freescale: imx8mp-toradex-smarc: fix SMARC_SLEEP# gpio-line-names typo Francesco Dolcini <francesco.dolcini(a)toradex.com> arm64: dts: freescale: imx95-aquila: fix gpio-line-names padding Francesco Dolcini <francesco.dolcini(a)toradex.com> arm64: dts: freescale: imx8mp-verdin-ivy: fix DIGI_1/DIGI_2 gpio-line-names Francesco Dolcini <francesco.dolcini(a)toradex.com> arm64: dts: freescale: imx8mm-verdin-ivy: fix DIGI_1/DIGI_2 gpio-line-names Diego Fernando Mancera Gomez <diegomancera.dev(a)gmail.com> memory: stm32_omm: fix child clock leak on set_amcr() error path Myeonghun Pak <mhun512(a)gmail.com> ASoC: fsl_xcvr: free IRQ before canceling reset work Guangshuo Li <lgs201920130244(a)gmail.com> media: atmel-isi: release unregistered video device on remove Guangshuo Li <lgs201920130244(a)gmail.com> media: i2c: ov5647: fix power cleanup on remove Lucas Sinn <lucas.sinn(a)wolfvision.net> media: synopsys: hdmirx: fetch colordepth before calculating pixelclock Wentao Liang <vulab(a)iscas.ac.cn> media: vpif_display: Fix i2c adapter reference leak in vpif_probe() Wentao Liang <vulab(a)iscas.ac.cn> media: vpif_capture: Fix i2c adapter reference leak in vpif_probe() Wentao Liang <vulab(a)iscas.ac.cn> media: au0828: Fix media device leak in au0828_usb_probe() Runyu Xiao <runyu.xiao(a)seu.edu.cn> media: adv7180: Initialize mutex before ancillary clients Myeonghun Pak <mhun512(a)gmail.com> media: tw68: balance PCI enable on cleanup Myeonghun Pak <mhun512(a)gmail.com> media: cx18: Disable PCI device on probe failure Myeonghun Pak <mhun512(a)gmail.com> media: go7007: unregister the I2C adapter on USB probe failure Myeonghun Pak <mhun512(a)gmail.com> media: marvell: manage the MMP camera clock provider Ruoyu Wang <ruoyuw560(a)gmail.com> media: adv748x: Fix endpoint reference leaks on probe failure Rohinthan P <rokinthanp03(a)gmail.com> media: v4l2-ctrls: do nothing if controls[0] == NULL in cluster functions Pengpeng Hou <hppiscas(a)163.com> media: cec: extron: clear response tail before dispatch Karl Mehltretter <kmehltretter(a)gmail.com> crypto: qat - zero the VF migration state buffer on save Weili Qian <qianweili(a)huawei.com> crypto: hisilicon/hpre - fix GFP flags for dma_alloc_coherent Weili Qian <qianweili(a)huawei.com> crypto: hisilicon/hpre - fix ECDH destination DMA mapping Weili Qian <qianweili(a)huawei.com> crypto: hisilicon/hpre - return -EOVERFLOW for small ECDH output buffer Weili Qian <qianweili(a)huawei.com> crypto: hisilicon/hpre - fix pointer dereference before length check Mohamad Raizudeen <raizudeen.kerneldev(a)gmail.com> crypto: amlogic - Fix IRQ handler return value and fallthrough logic Suman Kumar Chakraborty <suman.kumar.chakraborty(a)intel.com> crypto: qat - fix error source for QAT GEN6 transmit interface faults Yuchao Zhang <ndaugoing(a)gmail.com> md: validate bblog_size when loading v1.x badblocks metadata Wentao Liang <vulab(a)iscas.ac.cn> EDAC/i10nm: Fix mdev reference leak in i10nm_get_ddr_munits() Aldo Ariel Panzardo <qwe.aldo(a)gmail.com> nilfs2: fix checkpoint root lifetime on sysfs errors Wentao Guan <guanwentao(a)uniontech.com> cpufreq/amd-pstate: Skip auto_sel write when it already matches the mode Wentao Liang <vulab(a)iscas.ac.cn> drm/mali-dp: Fix runtime PM leak in malidp_crtc_atomic_enable() Francesco Dolcini <francesco.dolcini(a)toradex.com> arm64: dts: ti: k3-am62p5-verdin: build zinnia dtbs Judith Mendez <jm(a)ti.com> arm64: dts: ti: k3-am62x-phyboard-lyra: Set SD clock pin as OUTPUT Judith Mendez <jm(a)ti.com> arm64: dts: ti: k3-am625-var-som: Set MMC clock pins as OUTPUT Judith Mendez <jm(a)ti.com> arm64: dts: ti: k3-am625-var-som-symphony: Set SD clock pins as OUTPUT Judith Mendez <jm(a)ti.com> arm64: dts: ti: k3-am625-tqma62xx: Set MMC clock pins as OUTPUT Judith Mendez <jm(a)ti.com> arm64: dts: ti: k3-am62-phycore-som: Set eMMC clock pin as OUTPUT Judith Mendez <jm(a)ti.com> arm64: dts: ti: k3-am625-sk-common: Set eMMC clock pin as OUTPUT Judith Mendez <jm(a)ti.com> arm64: dts: ti: k3-am62x-sk-common: Set SD clock pin as OUTPUT Judith Mendez <jm(a)ti.com> arm64: dts: ti: k3-am625-beagleplay: Set MMC clock pins as OUTPUT Judith Mendez <jm(a)ti.com> arm64: dts: ti: k3-am62-pocketbeagle2: Set SD clock pin as OUTPUT Judith Mendez <jm(a)ti.com> arm64: dts: ti: k3-am62-lp-sk: Set eMMC clock pins as OUTPUT Judith Mendez <jm(a)ti.com> arm64: dts: ti: k3-am62a-phycore-som: Set eMMC clock pin as OUTPUT Judith Mendez <jm(a)ti.com> arm64: dts: ti: k3-am62a7-sk: Set SD clock pin as OUTPUT Judith Mendez <jm(a)ti.com> arm64: dts: ti: k3-am62a7-sk: Set eMMC clock pin as OUTPUT Judith Mendez <jm(a)ti.com> arm64: dts: ti: k3-am62a: Fix MMC0_CLK register address Wentao Liang <vulab(a)iscas.ac.cn> ASoC: ti: davinci-mcasp: Fix runtime PM imbalance in __davinci_mcasp_set_clkdiv() Sean Young <sean(a)mess.org> media: meson-ir-tx: Prevent divide by zero in meson_irtx_prepare_pulse() Sean Young <sean(a)mess.org> media: ir_toy: Validate the maximum tx carrier Sean Young <sean(a)mess.org> media: serial_ir: Fix race condition where timer can be re-armed Sean Young <sean(a)mess.org> media: ene_ir: Ensure teardown is done in the correct order Myeonghun Pak <mhun512(a)gmail.com> leds: ktd2692: Pass context to regulator cleanup Cong Nguyen <congnt264(a)gmail.com> staging: media: imx: csc-scaler: fix ipu_image_convert_run leak on queue error Hui Peng <benquike(a)gmail.com> seccomp: restore knotif->state when SECCOMP_ADDFD_FLAG_SEND is interrupted Oleg Nesterov <oleg(a)redhat.com> signalfd: don't dequeue the forced fatal signals Adrian Hunter <adrian.hunter(a)intel.com> i3c: mipi-i3c-hci-pci: Set drvdata before creating LTR sysfs attribute Adrian Hunter <adrian.hunter(a)intel.com> i3c: mipi-i3c-hci: Bounce short reads irrespective of the IOMMU Adrian Hunter <adrian.hunter(a)intel.com> i3c: master: Fix out-of-bounds read in DMA bounce buffer setup Runyu Xiao <runyu.xiao(a)seu.edu.cn> PCI: pciehp: Make 'pciehp_poll_mode' parameter read-only Hui Peng <benquike(a)gmail.com> ata: libata-scsi: abort multi-sector pass-through commands when multi_count is 0 Tsz Shan Chan <tsz.chan.dev(a)gmail.com> iio: light: apds9306: fix default sampling frequency definition Jean-Baptiste Maneyrol <jean-baptiste.maneyrol(a)tdk.com> iio: imu: inv_icm42600: force accel odr change when switching power mode Shehryar Ahmad <shehryar.amd(a)gmail.com> iio: accel: adis16201: fix channel order for buffer mode Ariana Lazar <ariana.lazar(a)microchip.com> iio: dac: mcp47feb02: Increase EEPROM Programming Write Cycle Time Ariana Lazar <ariana.lazar(a)microchip.com> iio: dac: mcp47feb02: Return len when disabling EEPROM store Ariana Lazar <ariana.lazar(a)microchip.com> iio: dac: mcp47feb02: Fix gain field initialization for active channels Ariana Lazar <ariana.lazar(a)microchip.com> iio: dac: mcp47feb02: initialize dac_data field in channel data struct at probe Wentao Liang <vulab(a)iscas.ac.cn> regulator: rt6190: Fix runtime PM imbalance in rt6190_out_enable() Karl Mehltretter <kmehltretter(a)gmail.com> fpga: Fix of_fpga_mgr_get() reference in fpga_mgr_lock() docs Wentao Liang <vulab(a)iscas.ac.cn> ASoC: codecs: wm8994: Fix runtime PM leak in wm8994_mic_detect() Christian Loehle <christian.loehle(a)arm.com> cpufreq: CPPC: Create the FIE worker before enabling PCC callbacks Christian Loehle <christian.loehle(a)arm.com> ACPI: CPPC: Propagate errors from cross-CPU FFH calls Guangshuo Li <lgs201920130244(a)gmail.com> crypto: omap-sham - fix crypto engine cleanup Guangshuo Li <lgs201920130244(a)gmail.com> crypto: omap-des - fix crypto engine cleanup Thorsten Blum <blum(a)kernel.org> crypto: xilinx - clear AES key buffer before freeing it Thorsten Blum <blum(a)kernel.org> crypto: zynqmp-sha - fix NULL pointer dereference in init_tfm Maciej W. Rozycki <macro(a)orcam.me.uk> PCI: Skip Target Speed quirk on clamped ports with no link Wentao Liang <vulab(a)iscas.ac.cn> regulator: core: Fix rdev reference leak in regulator_resolve_supply() Wentao Liang <vulab(a)iscas.ac.cn> regulator: core: Fix c_rdev reference leak in regulator_resolve_coupling() Jiaming Zhang <r772577952(a)gmail.com> nilfs2: force clear dirty state when restoring from the shadow map Shengming Hu <hu.shengming(a)zte.com.cn> cpufreq: conservative: Restrict deferred downscaling to low load Johan Alvarado <contact(a)c127.dev> spi: spi-qpic-snand: publish the ECC context to snandc->qspi Sakari Ailus <sakari.ailus(a)linux.intel.com> media: imx219: The horizontal blanking step is 8 Sakari Ailus <sakari.ailus(a)linux.intel.com> media: imx219: Account for rate_factor in control steps Sakari Ailus <sakari.ailus(a)linux.intel.com> media: imx219: Account rate_factor in setting upper exposure limit Junjie Cao <junjie.cao(a)intel.com> media: i2c: cvs: Get the wake IRQ without claiming the GPIO Thomas Zimmermann <tzimmermann(a)suse.de> drm/panic: Test address from kmap op for NULL Thomas Zimmermann <tzimmermann(a)suse.de> drm/panic: Do not use un-escaped URL as format string Martin Wilck <martin.wilck(a)suse.com> md/raid5: validate payload size before calculating payload_len Cao Guanghui <caoguanghui(a)kylinos.cn> md/raid5: fix NULL pointer dereference in raid5_free_percpu Cao Guanghui <caoguanghui(a)kylinos.cn> md/raid5: track disks array size to fix extra_page leak on error paths Guangshuo Li <lgs201920130244(a)gmail.com> iio: adc: at91-sama5d2: disable autosuspend on remove Guangshuo Li <lgs201920130244(a)gmail.com> iio: accel: mma9553: disable autosuspend on remove Guangshuo Li <lgs201920130244(a)gmail.com> iio: accel: mma9551: disable autosuspend on remove Guangshuo Li <lgs201920130244(a)gmail.com> iio: accel: kxcjk-1013: Disable autosuspend on remove Wentao Liang <vulab(a)iscas.ac.cn> ASoC: arizona-jack: Fix runtime PM imbalance in arizona_start_hpdet_acc_id() Wentao Liang <vulab(a)iscas.ac.cn> ASoC: wm8994: Fix runtime PM imbalance in wm8994_component_probe() Liu Chao <liuc63(a)xiaopeng.com> usb: fotg210: validate endpoint index in ep0 handlers Karl Mehltretter <kmehltretter(a)gmail.com> crypto: atmel-tdes - sync output bounce buffer before DMA Yousef Alhouseen <alhouseenyousef(a)gmail.com> ntfs3: bound index head insertions by buffer capacity Yousef Alhouseen <alhouseenyousef(a)gmail.com> ntfs3: reject empty iomap before reading its LCN Muhammad Bilal <meatuni001(a)gmail.com> platform/x86: hp-bioscfg: fix slab-out-of-bounds write in hp_convert_hexstr_to_str() Guangshuo Li <lgs201920130244(a)gmail.com> media: i2c: ov2735: fix power cleanup on remove Guangshuo Li <lgs201920130244(a)gmail.com> media: i2c: og01a1b: power off sensor on remove Guangshuo Li <lgs201920130244(a)gmail.com> media: i2c: alvium-csi2: balance runtime PM usage count on remove Niklas Cassel <cassel(a)kernel.org> ata: libata: Do not leave ata_host_stop() registered when activation fails Niklas Cassel <cassel(a)kernel.org> ata: libahci: Free the IRQs when activating a multi-IRQ host fails Niklas Cassel <cassel(a)kernel.org> ata: ahci_st: Assert the power down reset in the probe() error path Niklas Cassel <cassel(a)kernel.org> ata: ahci_st: Do not ignore errors when getting the reset controls Cosmin Tanislav <cosmin-gabriel.tanislav.xa(a)renesas.com> pinctrl: renesas: rzt2h: Fix reading pin value in IRQ function Cosmin Tanislav <cosmin-gabriel.tanislav.xa(a)renesas.com> pinctrl: renesas: rzt2h: Setup IRQ in .irq_{request,release}_resources() Cosmin Tanislav <cosmin-gabriel.tanislav.xa(a)renesas.com> pinctrl: renesas: rzt2h: Restore correct pin mode on IRQ free Ethan Nelson-Moore <enelsonmoore(a)gmail.com> ata: sata_inic162x: remove dangerous broken driver Guangshuo Li <lgs201920130244(a)gmail.com> ACPI: SBS: Fix NULL pointer dereference on allocation failure Chao Yu <chao(a)kernel.org> f2fs: compress: fix to handle race between truncate and writeback Jiucheng Xu <jiucheng.xu(a)amlogic.com> f2fs: force out-place update for all writes on compressed file Daeho Jeong <daehojeong(a)google.com> f2fs: drop pending discard commands before reserving device alias Matthew Sakai <msakai(a)redhat.com> dm vdo indexer: validate record page numbers better Matthew Sakai <msakai(a)redhat.com> dm vdo indexer: prevent delta list overflow on load Kyle Zeng <kylebot(a)openai.com> affs: validate blocks before freeing them Joshua Crofts <joshua.crofts1(a)gmail.com> iio: adc: max14001: add missing MODULE_DEVICE_TABLE macro Fabio Cesari <fabio.cesari(a)gmail.com> iio: light: isl29028: fix runtime PM reference leak on error paths Koichiro Den <den(a)valinux.co.jp> PCI: endpoint: pci-epf-vntb: Manage virtual NTB and PCI bus lifetime Nicolin Chen <nicolinc(a)nvidia.com> iommu/arm-smmu-v3-iommufd: Reject unsupported bits in invalidation commands Bradley Morgan <include(a)grrlz.net> PM: CPU: Restore synchronize_rcu() to cpu_pm_unregister_notifier() Jiaming Zhang <r772577952(a)gmail.com> gfs2: reject invalid inode sizes Runyu Xiao <runyu.xiao(a)seu.edu.cn> crypto: ccp - Initialize DBC ioctl mutex before registering device Karl Mehltretter <kmehltretter(a)gmail.com> lib/842: require a complete history block for repeat templates Karl Mehltretter <kmehltretter(a)gmail.com> lib/842: reject output overflows from index and short data Karl Mehltretter <kmehltretter(a)gmail.com> crypto: atmel-aes - fix AADLENR for standalone GHASH Karl Mehltretter <kmehltretter(a)gmail.com> crypto: atmel-tdes - zero-initialize device state Junrui Luo <moonafterrain(a)outlook.com> media: vicodec: zero-initialize stateful decoder heap buffers Fan Wu <fanwu01(a)zju.edu.cn> media: vivid: cancel svid ctrl work on release Juan Perdomo <jcperdomo100(a)gmail.com> media: cx231xx: preserve I2C transfer length Maxim Skokov <skokovmaksimevg(a)gmail.com> media: vivid: round the height down to the vertical subsampling factor Lad Prabhakar <prabhakar.mahadev-lad.rj(a)bp.renesas.com> PCI: rzg3s: Fix IRQ domain initialization error handling Lad Prabhakar <prabhakar.mahadev-lad.rj(a)bp.renesas.com> PCI: rzg3s: Propagate platform_get_irq_byname() errors Lad Prabhakar <prabhakar.mahadev-lad.rj(a)bp.renesas.com> PCI: rzg3s: Disable refclk on probe failure Eric Kim <seohyun.kim(a)outlook.kr> sched/fair: Reset NUMA fault locality after scan period update Jean-Baptiste Maneyrol <jean-baptiste.maneyrol(a)tdk.com> iio: imu: inv_icm42600: fix odr change not caught in certain cases Fan Wu <fanwu01(a)zju.edu.cn> power: supply: bq27xxx: Ensure poll work is cancelled on remove Shengzhuo Wei <me(a)cherr.cc> power: supply: bq27xxx: synchronize work cancellation on suspend Robin Snyders <robin(a)snyders.xyz> power: supply: qcom_smbx: notify battery overvoltage recovery Robin Snyders <robin(a)snyders.xyz> power: supply: qcom_smbx: validate battery float voltage Robin Snyders <robin(a)snyders.xyz> power: supply: qcom_smbx: fix float voltage selector Robin Snyders <robin(a)snyders.xyz> power: supply: qcom_smbx: test battery health status bits Robin Snyders <robin(a)snyders.xyz> power: supply: qcom_smbx: include base when petting watchdog Runyu Xiao <runyu.xiao(a)seu.edu.cn> hte: tegra194-test: shut down timer before GPIO release Karl Mehltretter <kmehltretter(a)gmail.com> ACPI: pfr_update: zero-initialize capability query result Runyu Xiao <runyu.xiao(a)seu.edu.cn> dmaengine: altera-msgdma: initialize state before requesting IRQ Damon Ding <damon.ding(a)rock-chips.com> drm/bridge: analogix_dp: Restore mandatory samsung DP DT properties Pengpeng Hou <pengpeng(a)iscas.ac.cn> media: require two-byte Cypress type 04 records Tharit Tangkijwanichakul <tharitt97(a)gmail.com> media: v4l2-ctrls: default HEVC SPS chroma format to 4:2:0 Fan Wu <fanwu01(a)zju.edu.cn> media: nuvoton: npcm-video: quiesce VCD IRQ before teardown Alexander Shiyan <eagle.alexander923(a)gmail.com> media: synopsys: hdmirx: use request_any_context_irq() for 5V detection IRQ Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> media: stv0900: bound DiSEqC reply length to msg[] size Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> media: stv090x: bound DiSEqC reply length to msg[] size Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> media: adv7604: avoid negative array index in log_status when cp_read fails Cosmin Tanislav <cosmin-gabriel.tanislav.xa(a)renesas.com> pinctrl: renesas: rzt2h: Fix used_irqs indexing in clear path James Hilliard <james.hilliard1(a)gmail.com> mtd: rawnand: sunxi: fix free OOB section offsets James Hilliard <james.hilliard1(a)gmail.com> mtd: rawnand: sunxi: reject ECC maximization on small pages Myeonghun Pak <mhun512(a)gmail.com> media: stm32: csi: unregister async notifier on cleanup Alain Volmat <alain.volmat(a)foss.st.com> media: stm32: csi: correct remote pad retrieval Balakrishnan Sambath <balakrishnan.s(a)microchip.com> media: microchip-isc: don't sleep in the clk .is_enabled callback Balakrishnan Sambath <balakrishnan.s(a)microchip.com> media: microchip-isc: fix PM runtime leak in AWB work handler Balakrishnan Sambath <balakrishnan.s(a)microchip.com> media: microchip-isc: do not touch WB registers when not streaming Balakrishnan Sambath <balakrishnan.s(a)microchip.com> media: microchip-isc: disable histogram and flush AWB work on teardown Balakrishnan Sambath <balakrishnan.s(a)microchip.com> media: microchip-isc: synchronize the IRQ before disabling clocks on stop Balakrishnan Sambath <balakrishnan.s(a)microchip.com> media: microchip-isc: fix awb_mutex and lock lifecycle Wang Yan <wangyan01(a)kylinos.cn> perf powerpc-vpadtl: Fix off-by-one in auxtrace_info minimum size check Srinivas Kandagatla <srinivas.kandagatla(a)oss.qualcomm.com> ASoC: codecs: lpass-wsa-macro: use v2.5 Compander1 addresses on v2.5+ Stanislaw Gruszka <stf_xl(a)wp.pl> wifi: mac80211: queue frames while off-channel Xu Rao <raoxu(a)uniontech.com> media: m2m-deinterlace: fix default capture field Punnay Sharma <punnaysharma805(a)gmail.com> staging: media: av7110: fix sp8870 initialization failure state Punnay Sharma <punnaysharma805(a)gmail.com> staging: media: av7110: fix corrupted BER reporting in sp8870 Julian Braha <julianbraha(a)gmail.com> media: marvell-cam: fix unmet dependency for VIDEO_MMP_CAMERA Jeffin Philip <jeffinphilip14(a)gmail.com> media: vidtv: fix uaf in vidtv_bridge_on_new_pkts_avail Piyush Patle <piyushpatle228(a)gmail.com> media: vidtv: fix frontend reference leak on unbind Junrui Luo <moonafterrain(a)outlook.com> media: vicodec: make encoder CAPTURE dimensions read-only Junrui Luo <moonafterrain(a)outlook.com> media: vicodec: fix out-of-bounds write on under-rounded coded dimensions Faizel K B <faizel.kb(a)gmail.com> media: vimc: sensor: fix pixel_rate type to resolve do_div() warning Younho Choi <gdool88(a)mju.ac.kr> media: vim2m: keep transaction buffer count stable while streaming Runyu Xiao <runyu.xiao(a)seu.edu.cn> media: saa7146: Initialize interrupt lock before requesting IRQ Shengzhuo Wei <me(a)cherr.cc> media: go7007: bound EZ-USB I2C transfers to the usb_buf size Linkai Gong <gonglinkai(a)kylinos.cn> media: i2c: tc358743: add missing color-space strings Ruoyu Wang <ruoyuw560(a)gmail.com> media: au0828: Free URBs when starting DVB streaming fails Takashi Sakamoto <o-takashi(a)sakamocchi.jp> firewire: core: fix source bus ID detection for AT context in big-endian systems Andi Shyti <andi.shyti(a)kernel.org> media: cx231xx: Fix cleanup path on failure Fan Wu <fanwu01(a)zju.edu.cn> media: cx231xx-audio: drain wq_trigger before audio fini Linkai Gong <gonglinkai(a)kylinos.cn> media: pci: hws: only init channels the device actually has Hao-Qun Huang <alvinhuang0603(a)gmail.com> media: hws: Wait for IRQ handler before returning buffers Ben Hoff <hoff.benjamin.k(a)gmail.com> media: hws: report measured colorimetry Andrea Pesaresi <andreapesaresi82(a)gmail.com> arm64: dts: mediatek: mt7986: correct timer frequency Baolin Liu <liubaolin(a)kylinos.cn> isofs: fix Rock Ridge CE extent validation on multisession media GUO Ren (XuanTie) <guoren(a)kernel.org> riscv: dts: spacemit: k3: fix IMSIC num-guest-ids Rosen Penev <rosenp(a)gmail.com> mtd: rawnand: ndfc: use devm_platform_ioremap_resource() Thorsten Blum <blum(a)kernel.org> thermal: intel: int340x: Fix temperature selection around 0 C Thorsten Blum <blum(a)kernel.org> thermal: intel: powerclamp: Reject invalid window_size values Francesco Dolcini <francesco.dolcini(a)toradex.com> arm64: dts: ti: k3-am62-verdin: Set MMC clock pins as OUTPUT Amir Goldstein <amir73il(a)gmail.com> fs: make sure to call fsnotify_inoderemove() only once when inode is dead Karl Mehltretter <kmehltretter(a)gmail.com> fs_pin: publish pins with RCU list helpers Miquel Raynal <miquel.raynal(a)bootlin.com> mtd: spi-nor: Unprepare legacy controllers upon RWW wait interruption HyeongJun An <sammiee5311(a)gmail.com> mtd: spi-nor: sfdp: check the length of the SCCR map HyeongJun An <sammiee5311(a)gmail.com> mtd: spi-nor: sfdp: check the length of the xSPI Profile 1.0 table Marek Vasut <marek.vasut+renesas(a)mailbox.org> PCI: rcar-gen4: Limit Max_Read_Request_Size to 256 Bytes Serin Yeh <serin.yeh(a)intel.com> media: i2c: ov8856: fix debug message to report actual CSI-2 lane count Serin Yeh <serin.yeh(a)intel.com> media: i2c: ov8856 : remove ACPI node bypass mechanism Abdun Nihaal <nihaal(a)cse.iitm.ac.in> wifi: ath11k: Fix possible memory leak in ath11k_dp_srng_setup() Ricardo Ribalda <ribalda(a)chromium.org> clk: mediatek: Add missing depend for COMMON_CLK_MT8173 David Heidelberg <david(a)ixit.cz> arm64: dts: qcom: sdm845-google: Set i2c3 frequency to 400 kHz Antti Laakso <antti.laakso(a)linux.intel.com> media: i2c: cvs: Add sensor node in bound callback Runyu Xiao <runyu.xiao(a)seu.edu.cn> hte: tegra194: Initialize slice locks before registering chip Yuan Chen <chenyuan(a)kylinos.cn> bpf: Fix queue/stack map u32 index overflow Yo'av Moshe <linux(a)yoavmoshe.com> ARM: imx: Fix suspend/resume crash with Clang CFI hanzhijian <hanzhijian1991(a)gmail.com> clk: mstar: msc313-mpll: fix off-by-one in clock array allocation Hans de Goede <johannes.goede(a)oss.qualcomm.com> platform/x86: int3472: Increase handshake GPIO delay to 200 ms Sakari Ailus <sakari.ailus(a)linux.intel.com> platform/x86: int3472: Fix uninitialised variable warning Laxman Acharya Padhya <acharyalaxman8848(a)gmail.com> wifi: rtw89: cap firmware section_num before parsing Yi Cong <yicong(a)kylinos.cn> wifi: rtw89: 8851b: fix swapped DPK channel/bandwidth backup fields イムティヤズ <reza1234khan1234(a)gmail.com> wifi: rtw88: fix out-of-bounds CAM write when key table is full Lad Prabhakar <prabhakar.mahadev-lad.rj(a)bp.renesas.com> memory: renesas-rpc-if: Mark XSPI_CDD1BUF0 as volatile Justin Chen <justin.chen(a)broadcom.com> memory: brcmstb_dpfe: Bounds check DCPU-supplied MSG_ARG_COUNT Justin Chen <justin.chen(a)broadcom.com> memory: brcmstb_dpfe: Fix out-of-bounds access due to DCPU offset Liu Zhenlong <dragonliu2018(a)gmail.com> PCI: aspeed: Fix clk and PHY leak in aspeed_pcie_port_init() error paths Sam Price <thesamprice(a)gmail.com> microblaze: preserve the MSR carry flags across signals Ramin Moussavi <ramin.moussavi(a)yacoub.de> microblaze: restore the ABI argument home area below pt_regs (PTO) Ramin Moussavi <ramin.moussavi(a)yacoub.de> microblaze: don't clobber r3/r4 restored by rt_sigreturn Ramin Moussavi <ramin.moussavi(a)yacoub.de> microblaze: reserve the ABI argument-home area in the signal frame Yunpeng Tian <shionthanatos(a)gmail.com> udf: validate the device specification EA before using it Christopher Obbard <chris.obbard(a)oss.qualcomm.com> PCI: qcom: Only check bridge nodes for PERST# GPIOs Abel Vesa <abelvesa(a)kernel.org> soc: qcom: pmic_glink: Fix device access from worker during suspend Viken Dadhaniya <viken.dadhaniya(a)oss.qualcomm.com> soc: qcom: geni-se: Fix write to read-only firmware buffer Viken Dadhaniya <viken.dadhaniya(a)oss.qualcomm.com> soc: qcom: geni-se: Fix fw_end computed before round-up; propagate size to caller Viken Dadhaniya <viken.dadhaniya(a)oss.qualcomm.com> soc: qcom: geni-se: Widen fw_size to u32 to prevent wrap-around Viken Dadhaniya <viken.dadhaniya(a)oss.qualcomm.com> soc: qcom: geni-se: Fix endian conversion for serial_protocol comparison HyeongJun An <sammiee5311(a)gmail.com> remoteproc: elf_loader: Bound the section header table Maxi Saparov <masaparov(a)coreweave.com> kho: do not reserve scratch memory in the kdump kernel Daehyeon Ko <4ncienth(a)gmail.com> ipc/mqueue: release notification resources during inode eviction Daehyeon Ko <4ncienth(a)gmail.com> aio: prevent eventfd/epoll recursion on poll Jan Kara <jack(a)suse.cz> udf: Make sure there's enough space for LVID implementation use field Eric Sandeen <sandeen(a)redhat.com> devtmpfs: restore mount option reconfiguration on get_tree Karl Mehltretter <kmehltretter(a)gmail.com> microblaze: Fix MB_MANAGER build with older binutils Fan Wu <fanwu01(a)zju.edu.cn> media: imx-jpeg: finish the job on device_run() error paths Sean Young <sean(a)mess.org> media: ir-hix5hd2: Ensure rdev is setup before interrupts are enabled Sean Young <sean(a)mess.org> media: meson-ir-tx: Ensure probe error is propagated Sean Young <sean(a)mess.org> media: meson-ir-tx: Ensure rc_free_device() is called on unbind Sean Young <sean(a)mess.org> media: meson-ir-tx: Ensure clock is disabled on unbind Sean Young <sean(a)mess.org> media: sunxi-cir: Ensure no more interrupts can occur before free Sean Young <sean(a)mess.org> media: redrat3: Error path leaves device in transmitting state Sean Young <sean(a)mess.org> media: redrat3: Ensure all urbs are suspended Sean Young <sean(a)mess.org> media: redrat3: Ensure we don't read beyond the end of the packet Sean Young <sean(a)mess.org> media: streamzap: Add missing rc_unregister_device() Daniel Schwierzeck <daniel.schwierzeck(a)gmail.com> cpufreq: airoha: fix probe failure with correct error check Esben Haabendal <esben(a)geanix.com> iio: light: ltr501: Power down chip if request irq fails Jakub Szczudlo <jakubszczudlo40(a)gmail.com> iio: adc: ti-ads1100: Fix incorrect reading when datarate changed in single mode Harry Wentland <harry.wentland(a)amd.com> drm/amd/display: Force GAMCOR for subsampled surfaces with PQ/Gamma22/HLG YuBiao Wang <YuBiao.Wang(a)amd.com> drm/amdgpu: recompute the dw estimate after allocating a new VM update job Marek Czernohous <marek(a)czernohous.de> drm/nouveau: don't dereference outp before checking it in nouveau_dp_irq Marek Czernohous <marek(a)czernohous.de> drm/nouveau: cancel the DP IRQ work before freeing the connector Marek Czernohous <marek(a)czernohous.de> drm/nouveau: disable the fence uevent work instead of just cancelling it Marek Czernohous <marek(a)czernohous.de> drm/nouveau/pci: use config-space MSI rearm on MCP79/MCP7A (NVAC) Zhenhao Wan <whi4ed0g(a)gmail.com> drm/nouveau/svm: drain fault handler before freeing svmm Zhenhao Wan <whi4ed0g(a)gmail.com> drm/nouveau: reject zero-size notifier object allocation Lyude Paul <lyude(a)redhat.com> drm/nouveau/gsp/r570: Set GcOff = 0 in fbsr Matt Turner <mattst88(a)gmail.com> alpha: honor force_successful_syscall_return() again Sean Young <sean(a)mess.org> media: rc: Add missing locking for keymap Sean Young <sean(a)mess.org> media: rc: Replace open coded krealloc() for keymap Sami Tolvanen <samitolvanen(a)google.com> rust: dma: declare cfi_encoding for dma_data_direction Sami Tolvanen <samitolvanen(a)google.com> rust: hrtimer: declare cfi_encoding for hrtimer_restart Sami Tolvanen <samitolvanen(a)google.com> rust: irq: declare cfi_encoding for irqreturn Hyunwoo Kim <imv4bel(a)gmail.com> inet: reject unhashed sockets during established lookups Mike Rapoport (Microsoft) <rppt(a)kernel.org> x86/mm/pat: Use pr_warn() for early W^X warnings Ruide Cao <caoruide123(a)gmail.com> mptcp: fix MP_CAPABLE token migration when cloning reqsk Sean Young <sean(a)mess.org> media: saa7134: Specify rc type at rc_allocate_type() Sean Young <sean(a)mess.org> media: cx88: Specify rc type at rc_allocate_type() Tales A. Mendonça <talesam(a)gmail.com> drm/xe: Implement Wa_22016122933 ------------- Diffstat: Documentation/admin-guide/kernel-parameters.txt | 10 + Documentation/block/ublk.rst | 7 + .../bindings/clock/nuvoton,ma35d1-clk.yaml | 16 +- Documentation/filesystems/fsverity.rst | 3 + Documentation/hwmon/coretemp.rst | 3 + Documentation/hwmon/k10temp.rst | 8 +- Documentation/hwmon/prom21-xhci.rst | 2 +- Documentation/networking/ip-sysctl.rst | 5 +- Documentation/userspace-api/check_exec.rst | 4 + Documentation/virt/hyperv/vmbus.rst | 17 +- Makefile | 4 +- arch/alpha/include/asm/mmu_context.h | 35 +- arch/alpha/include/asm/sfp-machine.h | 4 + arch/alpha/include/asm/switch_to.h | 1 - arch/alpha/include/asm/tlbflush.h | 3 +- arch/alpha/kernel/entry.S | 14 + arch/alpha/kernel/smp.c | 67 +- arch/alpha/mm/fault.c | 23 +- arch/alpha/mm/tlbflush.c | 18 +- arch/arm/include/asm/linkage.h | 29 + arch/arm/include/asm/smp.h | 2 +- arch/arm/kernel/cacheinfo.c | 51 +- arch/arm/kernel/head-nommu.S | 1 + arch/arm/kernel/head.S | 1 + arch/arm/kernel/smp.c | 15 +- arch/arm/kernel/topology.c | 13 + arch/arm/mach-imx/pm-imx6.c | 26 +- arch/arm/mach-imx/suspend-imx6.S | 6 +- arch/arm/mm/alignment.c | 51 +- arch/arm64/Kconfig | 1 + .../boot/dts/freescale/imx8mm-verdin-ivy.dtsi | 4 +- .../boot/dts/freescale/imx8mp-toradex-smarc.dtsi | 2 +- .../boot/dts/freescale/imx8mp-verdin-ivy.dtsi | 4 +- .../boot/dts/freescale/imx8mp-verdin-yavia.dtsi | 7 +- .../boot/dts/freescale/imx95-aquila-clover.dts | 5 + arch/arm64/boot/dts/freescale/imx95-aquila.dtsi | 8 +- .../boot/dts/freescale/imx95-toradex-smarc.dtsi | 1 + arch/arm64/boot/dts/mediatek/mt7986a.dtsi | 1 + arch/arm64/boot/dts/qcom/ipq9574.dtsi | 2 +- arch/arm64/boot/dts/qcom/sdm845-google-common.dtsi | 2 + .../dts/qcom/sdm845-xiaomi-beryllium-common.dtsi | 6 + arch/arm64/boot/dts/qcom/sdm845-xiaomi-polaris.dts | 6 + arch/arm64/boot/dts/qcom/shikra.dtsi | 6 - arch/arm64/boot/dts/ti/Makefile | 2 + arch/arm64/boot/dts/ti/k3-am62-lp-sk.dts | 2 +- arch/arm64/boot/dts/ti/k3-am62-phycore-som.dtsi | 2 +- arch/arm64/boot/dts/ti/k3-am62-pocketbeagle2.dts | 2 +- arch/arm64/boot/dts/ti/k3-am62-verdin.dtsi | 6 +- arch/arm64/boot/dts/ti/k3-am625-beagleplay.dts | 6 +- arch/arm64/boot/dts/ti/k3-am625-sk-common.dtsi | 2 +- .../boot/dts/ti/k3-am625-tqma62xx-mba62xx.dts | 4 +- arch/arm64/boot/dts/ti/k3-am625-tqma62xx.dtsi | 2 +- .../boot/dts/ti/k3-am625-var-som-symphony.dts | 2 +- arch/arm64/boot/dts/ti/k3-am625-var-som.dtsi | 4 +- arch/arm64/boot/dts/ti/k3-am62a-phycore-som.dtsi | 2 +- arch/arm64/boot/dts/ti/k3-am62a7-sk.dts | 5 +- arch/arm64/boot/dts/ti/k3-am62x-phyboard-lyra.dtsi | 2 +- arch/arm64/boot/dts/ti/k3-am62x-sk-common.dtsi | 2 +- arch/arm64/include/asm/kvm_arm.h | 2 +- arch/arm64/include/asm/kvm_host.h | 8 +- arch/arm64/include/asm/kvm_mmu.h | 6 +- arch/arm64/include/asm/pgtable.h | 3 + arch/arm64/kernel/efi.c | 8 +- arch/arm64/kernel/process.c | 17 + arch/arm64/kernel/topology.c | 2 +- arch/arm64/kvm/Kconfig | 2 +- arch/arm64/kvm/arch_timer.c | 27 +- arch/arm64/kvm/arm.c | 53 +- arch/arm64/kvm/config.c | 78 ++ arch/arm64/kvm/hyp/exception.c | 5 +- arch/arm64/kvm/hyp/include/hyp/adjust_pc.h | 28 + arch/arm64/kvm/hyp/include/nvhe/pkvm.h | 2 + arch/arm64/kvm/hyp/nvhe/hyp-main.c | 21 +- arch/arm64/kvm/hyp/nvhe/pkvm.c | 37 + arch/arm64/kvm/hyp/nvhe/sys_regs.c | 3 + arch/arm64/kvm/hyp/vhe/switch.c | 11 +- arch/arm64/kvm/hyp_trace.c | 12 +- arch/arm64/kvm/nested.c | 17 +- arch/arm64/kvm/ptdump.c | 75 +- arch/arm64/kvm/sys_regs.c | 2 + arch/arm64/kvm/vgic/vgic-its.c | 26 +- arch/arm64/kvm/vgic/vgic-mmio-v3.c | 33 +- arch/arm64/kvm/vgic/vgic.c | 8 +- arch/arm64/mm/contpte.c | 4 +- arch/arm64/mm/fault.c | 5 +- arch/loongarch/include/asm/barrier.h | 3 - arch/loongarch/include/asm/hw_breakpoint.h | 8 +- arch/loongarch/include/asm/loongarch.h | 7 +- arch/loongarch/include/asm/numa.h | 2 +- arch/loongarch/include/asm/processor.h | 1 + arch/loongarch/include/asm/switch_to.h | 2 +- arch/loongarch/kernel/cpu-probe.c | 2 +- arch/loongarch/kernel/hw_breakpoint.c | 66 +- arch/loongarch/kernel/irq.c | 3 +- arch/loongarch/kernel/numa.c | 8 +- arch/loongarch/kernel/traps.c | 13 +- arch/loongarch/pci/pci.c | 3 +- arch/m68k/68000/entry.S | 3 +- arch/m68k/coldfire/entry.S | 3 +- arch/microblaze/include/asm/entry.h | 13 + arch/microblaze/include/asm/processor.h | 2 +- arch/microblaze/kernel/entry.S | 348 ++++---- arch/microblaze/kernel/hw_exception_handler.S | 5 + arch/microblaze/kernel/process.c | 5 +- arch/microblaze/kernel/signal.c | 26 + arch/mips/mm/mmap.c | 6 +- arch/mips/mm/tlb-r4k.c | 21 +- arch/powerpc/net/bpf_jit.h | 14 +- arch/powerpc/net/bpf_jit_comp.c | 74 +- arch/powerpc/net/bpf_jit_comp32.c | 7 +- arch/powerpc/net/bpf_jit_comp64.c | 7 +- arch/powerpc/platforms/pseries/iommu.c | 67 +- arch/powerpc/platforms/pseries/plpks-sysfs.c | 20 +- arch/powerpc/platforms/pseries/plpks.c | 41 +- arch/powerpc/platforms/pseries/plpks_sed_ops.c | 12 +- arch/riscv/boot/dts/spacemit/k3.dtsi | 2 +- arch/riscv/include/asm/pgtable.h | 9 +- arch/riscv/kernel/usercfi.c | 20 +- arch/riscv/kvm/vcpu_sbi_replace.c | 12 +- arch/x86/kernel/cpu/bugs.c | 2 +- arch/x86/mm/pat/set_memory.c | 15 + block/blk-iocost.c | 2 + block/blk-mq.c | 2 + block/bsg.c | 5 +- crypto/algif_skcipher.c | 8 +- crypto/ecc.c | 33 +- crypto/testmgr.c | 11 +- crypto/testmgr.h | 327 ++++++- drivers/accel/qaic/sahara.c | 1 + drivers/accessibility/speakup/selection.c | 6 + drivers/acpi/apei/ghes.c | 6 +- drivers/acpi/pfr_update.c | 2 +- drivers/acpi/riscv/cppc.c | 26 +- drivers/acpi/sbs.c | 6 +- drivers/ata/Kconfig | 7 - drivers/ata/Makefile | 1 - drivers/ata/ahci_st.c | 78 +- drivers/ata/libahci.c | 28 +- drivers/ata/libahci_platform.c | 4 + drivers/ata/libata-core.c | 75 +- drivers/ata/libata-scsi.c | 5 + drivers/ata/libata-sff.c | 37 +- drivers/ata/sata_fsl.c | 6 +- drivers/ata/sata_inic162x.c | 903 ------------------- drivers/ata/sata_qstor.c | 8 +- drivers/base/devtmpfs.c | 108 ++- drivers/block/amiflop.c | 71 +- drivers/block/aoe/aoenet.c | 14 +- drivers/block/floppy.c | 8 +- drivers/block/loop.c | 6 +- drivers/block/ublk_drv.c | 204 ++++- drivers/block/xen-blkfront.c | 4 +- drivers/block/zram/zram_drv.c | 21 +- drivers/bluetooth/btusb.c | 2 + drivers/char/hw_random/amd-rng.c | 2 +- drivers/char/hw_random/ba431-rng.c | 2 +- drivers/char/hw_random/core.c | 1 + drivers/char/tpm/tpm-dev-common.c | 3 + drivers/char/tpm/tpm2-cmd.c | 3 +- drivers/char/tpm/tpm_nsc.c | 8 +- drivers/clk/imx/clk.c | 15 +- drivers/clk/mediatek/Kconfig | 1 + drivers/clk/mstar/clk-msc313-mpll.c | 2 +- drivers/clk/mvebu/ap-cpu-clk.c | 4 +- drivers/clk/qcom/gcc-ipq5018.c | 10 + drivers/clk/qcom/gcc-ipq5210.c | 1 + drivers/clk/qcom/gcc-ipq5332.c | 1 + drivers/clk/qcom/ipq-cmn-pll.c | 3 +- drivers/clk/starfive/clk-starfive-jh7110-isp.c | 2 +- drivers/clk/tenstorrent/atlantis-prcm.c | 24 +- drivers/clocksource/timer-digicolor.c | 2 + drivers/clocksource/timer-fttmr010.c | 2 + drivers/cpufreq/Kconfig | 1 + drivers/cpufreq/airoha-cpufreq.c | 2 +- drivers/cpufreq/amd-pstate.c | 6 +- drivers/cpufreq/cppc_cpufreq.c | 39 +- drivers/cpufreq/cpufreq_conservative.c | 8 +- drivers/cpufreq/cpufreq_governor.c | 29 +- drivers/cpufreq/cpufreq_governor.h | 2 + drivers/cpufreq/cpufreq_stats.c | 4 + drivers/cpufreq/intel_pstate.c | 2 + drivers/cpufreq/loongson3_cpufreq.c | 73 +- drivers/crypto/amlogic/amlogic-gxl-core.c | 7 +- drivers/crypto/atmel-aes.c | 2 +- drivers/crypto/atmel-tdes.c | 6 +- drivers/crypto/caam/caampkc.c | 6 + drivers/crypto/ccp/dbc.c | 4 +- drivers/crypto/hisilicon/hpre/hpre_crypto.c | 20 +- drivers/crypto/intel/qat/qat_common/adf_dev_mgr.c | 10 +- .../crypto/intel/qat/qat_common/adf_gen4_vf_mig.c | 5 + drivers/crypto/intel/qat/qat_common/adf_gen6_ras.c | 20 +- drivers/crypto/intel/qat/qat_common/adf_gen6_ras.h | 24 +- drivers/crypto/intel/qat/qat_common/adf_vf_isr.c | 2 - drivers/crypto/nx/nx-842.c | 2 + drivers/crypto/omap-des.c | 2 + drivers/crypto/omap-sham.c | 1 + drivers/crypto/sa2ul.c | 119 +-- drivers/crypto/xilinx/zynqmp-aes-gcm.c | 2 +- drivers/crypto/xilinx/zynqmp-sha.c | 2 +- drivers/cxl/acpi.c | 20 +- drivers/cxl/core/mbox.c | 8 +- drivers/cxl/core/pci.c | 53 +- drivers/cxl/core/port.c | 32 + drivers/dax/super.c | 2 +- drivers/dma/altera-msgdma.c | 10 +- drivers/dma/loongson/loongson2-apb-cmc-dma.c | 4 +- drivers/dma/sh/rz-dmac.c | 6 +- drivers/edac/i10nm_base.c | 1 + drivers/firewire/ohci-serdes-test.c | 4 +- drivers/firewire/ohci.h | 2 +- drivers/firmware/efi/libstub/Makefile | 2 +- drivers/firmware/efi/libstub/efi-stub.c | 8 + drivers/fpga/fpga-mgr.c | 2 +- drivers/gpio/gpio-davinci.c | 6 +- drivers/gpio/gpio-pca953x.c | 21 +- drivers/gpio/gpiolib-cdev.c | 5 - drivers/gpio/gpiolib.c | 12 +- drivers/gpu/drm/amd/amdgpu/amdgpu.h | 11 +- drivers/gpu/drm/amd/amdgpu/amdgpu_amdkfd.h | 19 + .../gpu/drm/amd/amdgpu/amdgpu_amdkfd_gfx_v12_1.c | 44 +- drivers/gpu/drm/amd/amdgpu/amdgpu_amdkfd_gpuvm.c | 105 ++- drivers/gpu/drm/amd/amdgpu/amdgpu_cs.c | 6 + drivers/gpu/drm/amd/amdgpu/amdgpu_device.c | 17 +- drivers/gpu/drm/amd/amdgpu/amdgpu_drv.c | 14 - drivers/gpu/drm/amd/amdgpu/amdgpu_job.c | 24 +- drivers/gpu/drm/amd/amdgpu/amdgpu_object.c | 33 + drivers/gpu/drm/amd/amdgpu/amdgpu_ttm.c | 3 +- drivers/gpu/drm/amd/amdgpu/amdgpu_uvd.c | 3 +- drivers/gpu/drm/amd/amdgpu/amdgpu_vce.c | 3 +- drivers/gpu/drm/amd/amdgpu/amdgpu_vm.c | 5 +- drivers/gpu/drm/amd/amdgpu/amdgpu_vm_pt.c | 2 +- drivers/gpu/drm/amd/amdgpu/amdgpu_vm_sdma.c | 5 + drivers/gpu/drm/amd/amdgpu/cik.c | 10 + drivers/gpu/drm/amd/amdgpu/gmc_v9_0.c | 18 +- drivers/gpu/drm/amd/amdgpu/si.c | 10 + drivers/gpu/drm/amd/amdgpu/vi.c | 10 + drivers/gpu/drm/amd/amdkfd/kfd_chardev.c | 48 +- drivers/gpu/drm/amd/amdkfd/kfd_crat.c | 35 +- drivers/gpu/drm/amd/amdkfd/kfd_device.c | 9 +- .../gpu/drm/amd/amdkfd/kfd_device_queue_manager.c | 9 + drivers/gpu/drm/amd/amdkfd/kfd_doorbell.c | 23 +- drivers/gpu/drm/amd/amdkfd/kfd_mqd_manager.h | 9 + drivers/gpu/drm/amd/amdkfd/kfd_mqd_manager_v10.c | 2 + drivers/gpu/drm/amd/amdkfd/kfd_mqd_manager_v11.c | 2 + drivers/gpu/drm/amd/amdkfd/kfd_mqd_manager_v12.c | 2 + drivers/gpu/drm/amd/amdkfd/kfd_mqd_manager_v12_1.c | 2 + drivers/gpu/drm/amd/amdkfd/kfd_mqd_manager_v9.c | 2 + drivers/gpu/drm/amd/amdkfd/kfd_mqd_manager_vi.c | 2 + drivers/gpu/drm/amd/amdkfd/kfd_priv.h | 4 + drivers/gpu/drm/amd/amdkfd/kfd_process.c | 4 +- .../gpu/drm/amd/amdkfd/kfd_process_queue_manager.c | 30 +- drivers/gpu/drm/amd/amdkfd/kfd_queue.c | 23 +- drivers/gpu/drm/amd/amdkfd/kfd_smi_events.c | 60 +- drivers/gpu/drm/amd/amdkfd/kfd_svm.c | 21 +- drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm.c | 15 +- .../drm/amd/display/amdgpu_dm/amdgpu_dm_helpers.c | 24 +- .../gpu/drm/amd/display/dc/dml/dsc/rc_calc_fpu.c | 2 +- .../dml21/src/dml2_core/dml2_core_dcn4_calcs.c | 2 + .../drm/amd/display/modules/color/color_gamma.c | 3 +- drivers/gpu/drm/amd/include/kgd_pp_interface.h | 2 + drivers/gpu/drm/amd/pm/amdgpu_dpm.c | 85 ++ drivers/gpu/drm/amd/pm/inc/amdgpu_dpm.h | 1 + drivers/gpu/drm/amd/pm/powerplay/amd_powerplay.c | 33 +- drivers/gpu/drm/amd/pm/swsmu/amdgpu_smu.c | 87 +- drivers/gpu/drm/amd/pm/swsmu/inc/amdgpu_smu.h | 2 + .../gpu/drm/amd/pm/swsmu/smu13/smu_v13_0_0_ppt.c | 200 +++-- .../gpu/drm/amd/pm/swsmu/smu13/smu_v13_0_7_ppt.c | 199 +++-- .../gpu/drm/amd/pm/swsmu/smu14/smu_v14_0_2_ppt.c | 226 +++-- drivers/gpu/drm/arm/malidp_crtc.c | 1 + drivers/gpu/drm/bridge/analogix/analogix_dp_core.c | 13 +- drivers/gpu/drm/drm_panic.c | 5 +- drivers/gpu/drm/msm/dsi/dsi_host.c | 2 + drivers/gpu/drm/msm/hdmi/hdmi_bridge.c | 32 +- drivers/gpu/drm/msm/hdmi/hdmi_phy.c | 16 +- drivers/gpu/drm/nouveau/include/nvkm/subdev/pci.h | 1 + drivers/gpu/drm/nouveau/nouveau_abi16.c | 4 + drivers/gpu/drm/nouveau/nouveau_connector.c | 1 + drivers/gpu/drm/nouveau/nouveau_dp.c | 4 +- drivers/gpu/drm/nouveau/nouveau_fence.c | 2 +- drivers/gpu/drm/nouveau/nouveau_svm.c | 13 + drivers/gpu/drm/nouveau/nvkm/engine/device/base.c | 2 +- .../gpu/drm/nouveau/nvkm/subdev/gsp/rm/r570/fbsr.c | 2 +- drivers/gpu/drm/nouveau/nvkm/subdev/pci/Kbuild | 1 + drivers/gpu/drm/nouveau/nvkm/subdev/pci/mcp79.c | 35 + drivers/gpu/drm/panel/panel-ebbg-ft8719.c | 2 + drivers/gpu/drm/panel/panel-simple.c | 3 + drivers/gpu/drm/ttm/ttm_bo_util.c | 11 +- drivers/gpu/drm/xe/xe_guc.c | 16 + drivers/gpu/drm/xe/xe_guc.h | 2 + drivers/gpu/drm/xe/xe_guc_ads.c | 3 +- drivers/gpu/drm/xe/xe_guc_ct.c | 6 +- drivers/gpu/drm/xe/xe_guc_engine_activity.c | 6 +- drivers/gpu/drm/xe/xe_guc_log.c | 7 +- drivers/gpu/drm/xe/xe_guc_pc.c | 3 +- drivers/gpu/drm/xe/xe_wa_oob.rules | 1 + drivers/hte/hte-tegra194-test.c | 2 +- drivers/hte/hte-tegra194.c | 10 +- drivers/hv/mshv_vtl_main.c | 23 +- drivers/hwmon/acpi_power_meter.c | 10 +- drivers/hwmon/coretemp.c | 52 +- drivers/hwmon/corsair-cpro.c | 9 +- drivers/hwmon/gigabyte_waterforce.c | 5 + drivers/hwmon/k10temp.c | 5 +- drivers/hwmon/lm70.c | 8 +- drivers/hwmon/lm95245.c | 6 +- drivers/hwmon/mcp9982.c | 7 +- drivers/hwmon/sht3x.c | 5 +- drivers/hwmon/sht4x.c | 22 +- drivers/hwmon/tmp102.c | 8 +- drivers/hwmon/tmp108.c | 8 +- drivers/i2c/busses/i2c-designware-master.c | 8 + drivers/i2c/busses/i2c-mt7621.c | 9 +- drivers/i2c/i2c-core-acpi.c | 6 +- drivers/i3c/master.c | 7 +- drivers/i3c/master/adi-i3c-master.c | 4 + drivers/i3c/master/mipi-i3c-hci/dma.c | 2 +- drivers/i3c/master/mipi-i3c-hci/mipi-i3c-hci-pci.c | 4 +- drivers/iio/accel/adis16201.c | 10 +- drivers/iio/accel/adxl313_spi.c | 2 + drivers/iio/accel/adxl372_spi.c | 2 + drivers/iio/accel/adxl380_spi.c | 2 + drivers/iio/accel/kxcjk-1013.c | 1 + drivers/iio/accel/mma9551.c | 1 + drivers/iio/accel/mma9553.c | 1 + drivers/iio/accel/sca3000.c | 2 + drivers/iio/adc/ad4080.c | 3 +- drivers/iio/adc/ad7192.c | 3 + drivers/iio/adc/ad7606_spi.c | 6 +- drivers/iio/adc/ad7768-1.c | 3 + drivers/iio/adc/at91-sama5d2_adc.c | 1 + drivers/iio/adc/max11205.c | 2 + drivers/iio/adc/max14001.c | 1 + drivers/iio/adc/mcp3911.c | 2 + drivers/iio/adc/stm32-adc.c | 4 +- drivers/iio/adc/ti-adc128s052.c | 8 +- drivers/iio/adc/ti-ads1018.c | 6 +- drivers/iio/adc/ti-ads1100.c | 107 ++- drivers/iio/adc/ti-ads131m02.c | 2 + drivers/iio/adc/ti-ads7950.c | 4 +- drivers/iio/amplifiers/ad8366.c | 2 + drivers/iio/dac/ad5755.c | 3 + drivers/iio/dac/mcp47feb02.c | 31 +- drivers/iio/dac/mcp4821.c | 7 +- drivers/iio/frequency/adf4377.c | 3 + drivers/iio/imu/adis16400.c | 3 + drivers/iio/imu/inv_icm42600/inv_icm42600.h | 1 + drivers/iio/imu/inv_icm42600/inv_icm42600_accel.c | 17 +- drivers/iio/imu/inv_icm42600/inv_icm42600_buffer.c | 2 + drivers/iio/imu/inv_icm42600/inv_icm42600_core.c | 9 + drivers/iio/imu/inv_icm42600/inv_icm42600_gyro.c | 8 +- drivers/iio/light/apds9306.c | 2 +- drivers/iio/light/isl29028.c | 33 +- drivers/iio/light/ltr501.c | 2 +- drivers/iio/potentiometer/x9250.c | 7 +- drivers/iio/pressure/bmp280-spi.c | 2 + drivers/iio/pressure/dps310.c | 6 +- drivers/infiniband/core/uverbs_std_types_dmabuf.c | 7 +- drivers/infiniband/hw/hfi1/chip.c | 4 +- drivers/infiniband/hw/hfi1/fault.c | 1 - drivers/input/input.c | 4 +- drivers/input/joystick/xpad.c | 1 + drivers/input/keyboard/matrix_keypad.c | 3 - drivers/iommu/amd/init.c | 23 +- .../iommu/arm/arm-smmu-v3/arm-smmu-v3-iommufd.c | 131 ++- drivers/iommu/dma-iommu.c | 20 +- drivers/iommu/generic_pt/iommu_pt.h | 30 +- drivers/iommu/intel/iommu.h | 17 +- drivers/iommu/iommufd/io_pagetable.c | 3 + drivers/iommu/iommufd/pages.c | 13 +- drivers/irqchip/irq-atmel-aic.c | 2 +- drivers/irqchip/irq-atmel-aic5.c | 2 +- drivers/irqchip/irq-gic-v3-its.c | 2 +- drivers/irqchip/irq-imx-intmux.c | 15 +- drivers/irqchip/irq-jcore-aic.c | 4 +- drivers/irqchip/irq-mchp-eic.c | 4 +- drivers/irqchip/irq-msi-lib.c | 1 + drivers/irqchip/irq-renesas-rzv2h.c | 6 +- drivers/irqchip/irq-riscv-imsic-platform.c | 2 +- drivers/leds/flash/leds-ktd2692.c | 10 +- drivers/mailbox/bcm74110-mailbox.c | 13 + drivers/mailbox/mailbox-altera.c | 2 +- drivers/mailbox/mtk-cmdq-mailbox.c | 7 +- drivers/mailbox/qcom-ipcc.c | 6 + drivers/md/dm-bufio.c | 45 +- drivers/md/dm-snap-persistent.c | 7 +- drivers/md/dm-vdo/indexer/chapter-index.c | 15 +- drivers/md/dm-vdo/indexer/delta-index.c | 17 +- drivers/md/dm-vdo/indexer/volume.c | 6 - drivers/md/dm-writecache.c | 54 +- drivers/md/dm.c | 2 +- drivers/md/md.c | 17 +- drivers/md/raid5-cache.c | 34 +- drivers/md/raid5.c | 8 +- drivers/md/raid5.h | 1 + .../extron-da-hd-4k-plus/extron-da-hd-4k-plus.c | 4 +- drivers/media/common/cypress_firmware.c | 2 + drivers/media/common/saa7146/saa7146_core.c | 3 +- drivers/media/dvb-frontends/stv0900_core.c | 2 + drivers/media/dvb-frontends/stv090x.c | 2 + drivers/media/i2c/adv7180.c | 2 +- drivers/media/i2c/adv748x/adv748x-core.c | 13 +- drivers/media/i2c/adv7604.c | 3 +- drivers/media/i2c/alvium-csi2.c | 1 + drivers/media/i2c/cvs/core.c | 16 +- drivers/media/i2c/cvs/v4l2.c | 13 +- drivers/media/i2c/imx219.c | 30 +- drivers/media/i2c/og01a1b.c | 5 + drivers/media/i2c/ov2735.c | 1 + drivers/media/i2c/ov5647.c | 4 + drivers/media/i2c/ov8856.c | 32 +- drivers/media/i2c/tc358743.c | 3 +- drivers/media/pci/cx18/cx18-driver.c | 9 +- drivers/media/pci/cx88/cx88-input.c | 22 +- drivers/media/pci/hws/hws.h | 4 +- drivers/media/pci/hws/hws_pci.c | 2 +- drivers/media/pci/hws/hws_reg.h | 3 +- drivers/media/pci/hws/hws_v4l2_ioctl.c | 5 +- drivers/media/pci/hws/hws_video.c | 6 +- drivers/media/pci/saa7134/saa7134-input.c | 7 +- drivers/media/pci/tw68/tw68-core.c | 2 +- drivers/media/pci/tw686x/tw686x-core.c | 10 + drivers/media/platform/amphion/vpu_core.c | 19 +- drivers/media/platform/amphion/vpu_drv.c | 1 + .../media/platform/arm/mali-c55/mali-c55-core.c | 20 +- drivers/media/platform/arm/mali-c55/mali-c55-isp.c | 1 + .../media/platform/arm/mali-c55/mali-c55-params.c | 3 + .../media/platform/arm/mali-c55/mali-c55-stats.c | 18 +- drivers/media/platform/atmel/atmel-isi.c | 7 +- .../platform/chips-media/wave5/wave5-vpu-dec.c | 8 +- .../media/platform/chips-media/wave5/wave5-vpu.c | 7 + .../platform/chips-media/wave5/wave5-vpuapi.c | 15 +- .../media/platform/imagination/e5010-jpeg-enc.c | 4 +- drivers/media/platform/m2m-deinterlace.c | 2 +- drivers/media/platform/marvell/Kconfig | 1 + drivers/media/platform/marvell/mmp-driver.c | 5 +- .../media/platform/mediatek/jpeg/mtk_jpeg_core.c | 21 +- .../media/platform/mediatek/mdp3/mtk-mdp3-comp.c | 14 +- .../mediatek/vcodec/decoder/mtk_vcodec_dec_drv.c | 2 + drivers/media/platform/mediatek/vpu/mtk_vpu.c | 2 + .../media/platform/microchip/microchip-isc-base.c | 56 +- .../media/platform/microchip/microchip-isc-clk.c | 7 +- drivers/media/platform/microchip/microchip-isc.h | 1 + .../platform/microchip/microchip-sama5d2-isc.c | 11 + .../platform/microchip/microchip-sama7g5-isc.c | 11 + drivers/media/platform/nuvoton/npcm-video.c | 9 +- drivers/media/platform/nxp/imx-jpeg/mxc-jpeg.c | 21 +- drivers/media/platform/qcom/camss/camss-vfe-17x.c | 46 +- drivers/media/platform/qcom/camss/camss-vfe.c | 14 +- drivers/media/platform/qcom/camss/camss.c | 25 +- drivers/media/platform/qcom/iris/iris_core.h | 6 + drivers/media/platform/qcom/iris/iris_probe.c | 62 +- drivers/media/platform/qcom/iris/iris_vdec.c | 10 - drivers/media/platform/qcom/iris/iris_vidc.c | 6 +- drivers/media/platform/qcom/iris/iris_vpu_common.c | 7 +- drivers/media/platform/qcom/venus/core.c | 66 +- drivers/media/platform/qcom/venus/core.h | 6 + .../platform/renesas/rzv2h-ivc/rzv2h-ivc-dev.c | 11 +- drivers/media/platform/rockchip/rga/rga-hw.c | 8 - drivers/media/platform/rockchip/rga/rga.c | 4 +- drivers/media/platform/rockchip/rga/rga.h | 1 + drivers/media/platform/rockchip/rkvdec/rkvdec.c | 3 - .../media/platform/samsung/exynos4-is/fimc-lite.c | 3 +- .../media/platform/st/sti/delta/delta-mjpeg-hdr.c | 7 +- drivers/media/platform/st/stm32/stm32-csi.c | 5 +- .../media/platform/synopsys/hdmirx/snps_hdmirx.c | 80 +- drivers/media/platform/ti/davinci/vpif_capture.c | 5 +- drivers/media/platform/ti/davinci/vpif_display.c | 3 + drivers/media/platform/verisilicon/hantro_drv.c | 75 +- .../platform/verisilicon/hantro_g1_mpeg2_dec.c | 5 + .../verisilicon/rockchip_vpu981_hw_av1_dec.c | 68 +- drivers/media/rc/ene_ir.c | 4 +- drivers/media/rc/ir-hix5hd2.c | 5 +- drivers/media/rc/ir_toy.c | 2 +- drivers/media/rc/meson-ir-tx.c | 20 +- drivers/media/rc/rc-main.c | 125 +-- drivers/media/rc/redrat3.c | 28 +- drivers/media/rc/serial_ir.c | 2 +- drivers/media/rc/streamzap.c | 1 + drivers/media/rc/sunxi-cir.c | 2 +- drivers/media/test-drivers/vicodec/codec-fwht.h | 2 +- drivers/media/test-drivers/vicodec/vicodec-core.c | 16 +- drivers/media/test-drivers/vidtv/vidtv_bridge.c | 4 + drivers/media/test-drivers/vidtv/vidtv_demod.c | 9 - drivers/media/test-drivers/vim2m.c | 29 +- drivers/media/test-drivers/vimc/vimc-sensor.c | 8 +- drivers/media/test-drivers/vivid/vivid-core.c | 1 + drivers/media/test-drivers/vivid/vivid-vid-cap.c | 13 + drivers/media/usb/au0828/au0828-core.c | 4 + drivers/media/usb/au0828/au0828-dvb.c | 19 +- drivers/media/usb/cx231xx/cx231xx-audio.c | 15 +- drivers/media/usb/cx231xx/cx231xx-cards.c | 2 +- drivers/media/usb/cx231xx/cx231xx.h | 2 +- drivers/media/usb/dvb-usb-v2/rtl28xxu.c | 14 +- drivers/media/usb/dvb-usb/dvb-usb-firmware.c | 2 + drivers/media/usb/em28xx/em28xx-core.c | 3 - drivers/media/usb/em28xx/em28xx-video.c | 2 +- drivers/media/usb/go7007/go7007-usb.c | 8 + drivers/media/usb/pvrusb2/pvrusb2-sysfs.c | 1 + drivers/media/usb/uvc/uvc_ctrl.c | 2 +- drivers/media/v4l2-core/v4l2-common.c | 2 +- drivers/media/v4l2-core/v4l2-ctrls-core.c | 19 +- drivers/media/v4l2-core/v4l2-isp.c | 15 +- drivers/memory/brcmstb_dpfe.c | 24 +- drivers/memory/renesas-rpc-if.c | 1 + drivers/memory/stm32_omm.c | 2 + drivers/mfd/Kconfig | 2 + drivers/mfd/ab8500-core.c | 44 +- drivers/mfd/bq257xx.c | 10 + drivers/mfd/da903x.c | 34 +- drivers/mfd/tps65217.c | 69 +- drivers/mfd/twl-core.c | 23 +- drivers/mfd/wcd934x.c | 8 +- drivers/misc/fastrpc.c | 192 +++-- drivers/misc/issei/Kconfig | 1 + drivers/misc/mei/vsc-tp.c | 2 +- drivers/misc/tifm_core.c | 1 - drivers/mtd/chips/cfi_cmdset_0002.c | 15 + drivers/mtd/maps/amd76xrom.c | 2 + drivers/mtd/maps/l440gx.c | 2 - drivers/mtd/maps/pci.c | 2 +- drivers/mtd/mtdcore.c | 2 +- drivers/mtd/mtdsuper.c | 4 +- drivers/mtd/nand/raw/atmel/nand-controller.c | 6 +- drivers/mtd/nand/raw/ndfc.c | 21 +- .../mtd/nand/raw/nuvoton-ma35d1-nand-controller.c | 1 - drivers/mtd/nand/raw/qcom_nandc.c | 8 +- drivers/mtd/nand/raw/sunxi_nand.c | 5 +- drivers/mtd/parsers/qcomsmempart.c | 4 +- drivers/mtd/spi-nor/core.c | 9 + drivers/mtd/spi-nor/sfdp.c | 8 + drivers/net/bonding/bond_main.c | 2 +- drivers/net/ethernet/broadcom/bgmac.c | 10 +- drivers/net/ethernet/broadcom/bnxt/bnxt_xdp.c | 49 +- drivers/net/ethernet/broadcom/tg3.c | 42 +- drivers/net/ethernet/google/gve/gve_flow_rule.c | 1 + drivers/net/ethernet/hisilicon/hisi_femac.c | 1 + drivers/net/ethernet/intel/ixgbe/ixgbe_main.c | 40 +- drivers/net/ethernet/mellanox/mlxsw/core.c | 4 +- drivers/net/ethernet/mellanox/mlxsw/core_hwmon.c | 4 +- .../net/ethernet/mellanox/mlxsw/spectrum_span.c | 2 +- drivers/net/macvlan.c | 3 +- drivers/net/netdevsim/bpf.c | 11 + drivers/net/ppp/ppp_generic.c | 1 + drivers/net/ppp/pppoe.c | 22 +- drivers/net/usb/pegasus.c | 12 +- drivers/net/usb/r8152.c | 10 +- drivers/net/veth.c | 5 +- drivers/net/wireless/ath/ath11k/dp.c | 2 + drivers/net/wireless/ath/ath12k/wmi.c | 17 + .../broadcom/brcm80211/brcmsmac/phy/phy_n.c | 2 +- drivers/net/wireless/mediatek/mt76/eeprom.c | 17 +- drivers/net/wireless/mediatek/mt76/mac80211.c | 14 + drivers/net/wireless/mediatek/mt76/mt76.h | 2 + drivers/net/wireless/mediatek/mt76/mt7615/init.c | 17 +- drivers/net/wireless/mediatek/mt76/mt7615/main.c | 6 +- .../net/wireless/mediatek/mt76/mt7615/pci_init.c | 1 + drivers/net/wireless/mediatek/mt76/mt76x02_mac.c | 19 +- .../net/wireless/mediatek/mt76/mt76x02_usb_mcu.c | 2 +- drivers/net/wireless/mediatek/mt76/mt7921/mac.c | 3 + drivers/net/wireless/mediatek/mt76/mt7921/main.c | 1 + drivers/net/wireless/mediatek/mt76/mt7925/mac.c | 3 + drivers/net/wireless/mediatek/mt76/mt7925/main.c | 2 + drivers/net/wireless/mediatek/mt76/mt7925/usb.c | 11 +- drivers/net/wireless/mediatek/mt76/mt792x_core.c | 12 +- drivers/net/wireless/mediatek/mt76/mt7996/pci.c | 12 +- drivers/net/wireless/mediatek/mt76/tx.c | 2 +- drivers/net/wireless/mediatek/mt76/usb.c | 31 +- drivers/net/wireless/realtek/rtw88/mac80211.c | 2 +- drivers/net/wireless/realtek/rtw89/fw.c | 32 + drivers/net/wireless/realtek/rtw89/rtw8851b_rfk.c | 4 +- drivers/net/wireless/realtek/rtw89/usb.c | 13 +- drivers/net/wireless/realtek/rtw89/wow.c | 6 +- drivers/net/wwan/iosm/iosm_ipc_protocol_ops.c | 5 + drivers/nvme/host/auth.c | 15 +- drivers/nvme/host/core.c | 15 +- drivers/nvme/host/rdma.c | 1 + drivers/nvme/host/sysfs.c | 14 +- drivers/nvme/host/tcp.c | 58 +- drivers/nvme/target/auth.c | 1 + drivers/nvme/target/configfs.c | 2 + drivers/nvme/target/fabrics-cmd-auth.c | 8 +- drivers/nvme/target/fabrics-cmd.c | 4 + drivers/nvme/target/fc.c | 10 +- drivers/nvme/target/io-cmd-bdev.c | 5 +- drivers/nvme/target/io-cmd-file.c | 4 +- drivers/nvme/target/pci-epf.c | 30 +- drivers/nvme/target/pr.c | 2 +- drivers/nvme/target/rdma.c | 5 +- drivers/nvme/target/tcp.c | 26 +- drivers/nvme/target/zns.c | 10 + drivers/nvmem/rockchip-otp.c | 15 +- drivers/parisc/eisa_enumerator.c | 15 +- drivers/pci/controller/dwc/pci-imx6.c | 5 +- drivers/pci/controller/dwc/pcie-qcom-ep.c | 2 + drivers/pci/controller/dwc/pcie-qcom.c | 5 +- drivers/pci/controller/dwc/pcie-rcar-gen4.c | 54 ++ drivers/pci/controller/pcie-aspeed.c | 9 +- drivers/pci/controller/pcie-rockchip-ep.c | 13 - drivers/pci/controller/pcie-rockchip-host.c | 20 - drivers/pci/controller/pcie-rockchip.c | 14 +- drivers/pci/controller/pcie-rockchip.h | 3 - drivers/pci/controller/pcie-rzg3s-host.c | 51 +- drivers/pci/controller/pcie-xilinx-dma-pl.c | 10 +- drivers/pci/controller/vmd.c | 55 +- drivers/pci/doe.c | 5 +- drivers/pci/endpoint/functions/pci-epf-vntb.c | 85 +- drivers/pci/hotplug/pciehp_core.c | 2 +- drivers/pci/pci-label.c | 2 +- drivers/pci/pci.c | 33 +- drivers/pci/pcie/aer.c | 7 +- drivers/pci/probe.c | 5 +- drivers/pci/pwrctrl/core.c | 3 + drivers/pci/pwrctrl/generic.c | 1 + drivers/pci/quirks.c | 26 +- drivers/pci/xen-pcifront.c | 11 +- drivers/peci/controller/peci-aspeed.c | 6 +- drivers/peci/controller/peci-npcm.c | 6 +- drivers/perf/xgene_pmu.c | 4 +- drivers/phy/apple/atc.c | 8 +- drivers/pinctrl/renesas/pinctrl-rzt2h.c | 126 ++- drivers/pinctrl/stm32/pinctrl-stm32.c | 6 +- drivers/platform/x86/amd/hfi/hfi.c | 20 +- drivers/platform/x86/amd/pmc/pmc.c | 20 +- drivers/platform/x86/amd/pmf/core.c | 1 + drivers/platform/x86/amd/pmf/spc.c | 8 +- drivers/platform/x86/amd/pmf/sps.c | 10 +- drivers/platform/x86/asus-wmi.c | 72 +- drivers/platform/x86/hp/hp-bioscfg/bioscfg.c | 82 +- .../x86/hp/hp-bioscfg/passwdobj-attributes.c | 16 +- .../platform/x86/hp/hp-bioscfg/spmobj-attributes.c | 5 +- drivers/platform/x86/hp/hp-wmi.c | 7 +- drivers/platform/x86/intel/int3472/discrete.c | 37 +- drivers/platform/x86/intel/pmt/class.c | 9 +- .../x86/intel/uncore-frequency/uncore-frequency.c | 2 +- drivers/platform/x86/intel/vsec.c | 2 +- drivers/platform/x86/lenovo/wmi-capdata.c | 18 +- drivers/platform/x86/oxpec.c | 68 +- drivers/platform/x86/siemens/simatic-ipc.c | 21 +- drivers/platform/x86/tuxedo/nb04/wmi_ab.c | 8 +- drivers/power/supply/ab8500_fg.c | 69 +- drivers/power/supply/bq27xxx_battery.c | 12 +- drivers/power/supply/cros_charge-control.c | 29 +- drivers/power/supply/generic-adc-battery.c | 2 +- drivers/power/supply/ltc2941-battery-gauge.c | 6 +- drivers/power/supply/power_supply_core.c | 84 +- drivers/power/supply/qcom_battmgr.c | 26 +- drivers/power/supply/qcom_smbx.c | 109 ++- drivers/pps/generators/pps_gen.c | 11 +- drivers/pwm/pwm-tiehrpwm.c | 3 + drivers/regulator/core.c | 4 + drivers/regulator/rt6190-regulator.c | 18 +- drivers/remoteproc/remoteproc_elf_loader.c | 23 +- drivers/rtc/rtc-cmos.c | 32 +- drivers/rtc/rtc-pcf8563.c | 2 +- drivers/scsi/libiscsi_tcp.c | 3 +- drivers/scsi/scsi_ioctl.c | 11 +- drivers/scsi/sd.c | 10 +- drivers/sh/intc/core.c | 11 +- drivers/sh/maple/maple.c | 4 +- drivers/slimbus/messaging.c | 2 +- drivers/soc/fsl/dpio/dpio-driver.c | 9 +- drivers/soc/fsl/qe/tsa.c | 16 +- drivers/soc/loongson/loongson2_pm.c | 2 +- drivers/soc/qcom/pmic_glink_altmode.c | 4 +- drivers/soc/qcom/qcom-geni-se.c | 49 +- drivers/soc/samsung/exynos-pmu.c | 61 +- drivers/spi/atmel-quadspi.c | 24 +- drivers/spi/spi-amd.c | 17 + drivers/spi/spi-bcm-qspi.c | 3 +- drivers/spi/spi-bcm2835.c | 4 +- drivers/spi/spi-cadence-xspi.c | 52 +- drivers/spi/spi-ch341.c | 6 + drivers/spi/spi-jcore.c | 2 + drivers/spi/spi-ljca.c | 7 +- drivers/spi/spi-npcm-fiu.c | 8 + drivers/spi/spi-qpic-snand.c | 3 + drivers/spi/spi-stm32.c | 3 +- drivers/spi/spi-zynq-qspi.c | 13 +- drivers/staging/greybus/uart.c | 32 +- drivers/staging/media/av7110/sp8870.c | 5 +- drivers/staging/media/imx/imx-media-csc-scaler.c | 1 + drivers/staging/media/meson/vdec/vdec.c | 2 +- drivers/staging/rtl8723bs/hal/sdio_ops.c | 7 + .../int340x_thermal/processor_thermal_device.c | 10 +- drivers/thermal/intel/intel_powerclamp.c | 3 +- drivers/tty/serial/8250/8250_exar.c | 36 +- drivers/tty/serial/8250/8250_lpss.c | 7 +- drivers/tty/serial/8250/8250_omap.c | 3 + drivers/tty/serial/8250/8250_port.c | 4 +- drivers/tty/serial/amba-pl011.c | 37 +- drivers/tty/serial/pmac_zilog.c | 4 +- drivers/tty/serial/sc16is7xx.c | 4 +- drivers/ufs/core/ufs_bsg.c | 23 +- drivers/ufs/core/ufshcd.c | 91 +- drivers/usb/class/cdc-acm.c | 6 +- drivers/usb/core/driver.c | 3 +- drivers/usb/core/quirks.c | 3 + drivers/usb/fotg210/fotg210-udc.c | 17 +- drivers/usb/gadget/legacy/inode.c | 4 +- drivers/usb/host/octeon-hcd.c | 41 +- drivers/usb/host/xhci-pci-prom21.c | 3 + drivers/usb/host/xhci-pci.c | 3 + drivers/usb/host/xhci-pci.h | 3 + drivers/usb/host/xhci-ring.c | 9 +- drivers/usb/host/xhci.c | 11 +- drivers/usb/serial/option.c | 5 + drivers/usb/serial/sierra.c | 3 +- drivers/usb/serial/usb_wwan.c | 3 + drivers/usb/typec/ucsi/ucsi.c | 3 +- drivers/usb/typec/ucsi/ucsi_ccg.c | 37 +- drivers/vfio/pci/mlx5/cmd.c | 2 +- drivers/vfio/pci/vfio_pci_rdwr.c | 3 - drivers/video/fbdev/atmel_lcdfb.c | 13 +- drivers/video/fbdev/core/bitblit.c | 7 +- drivers/video/fbdev/core/fb_info.c | 1 + drivers/video/fbdev/core/fbcon.c | 46 + drivers/video/fbdev/core/fbcon.h | 19 +- drivers/video/fbdev/core/fbcon_rotate.c | 10 +- drivers/video/fbdev/kyro/fbdev.c | 4 +- drivers/video/fbdev/nvidia/nvidia.c | 1 + drivers/video/fbdev/sh_mobile_lcdcfb.c | 43 +- drivers/video/fbdev/smscufx.c | 9 +- drivers/video/fbdev/ssd1307fb.c | 6 +- drivers/video/fbdev/udlfb.c | 9 +- drivers/video/fbdev/xen-fbfront.c | 7 +- drivers/watchdog/hpwdt.c | 2 +- drivers/xen/gntdev-dmabuf.c | 4 +- drivers/xen/gntdev.c | 7 + drivers/xen/privcmd.c | 47 +- drivers/xen/xen-pciback/pci_stub.c | 7 +- fs/affs/bitmap.c | 2 +- fs/aio.c | 18 +- fs/backing-file.c | 44 +- fs/btrfs/inode.c | 3 - fs/btrfs/super.c | 3 + fs/btrfs/volumes.c | 6 +- fs/ceph/addr.c | 15 +- fs/ceph/caps.c | 6 + fs/ceph/crypto.c | 11 + fs/ceph/mds_client.c | 28 +- fs/ceph/mdsmap.c | 12 +- fs/ceph/snap.c | 7 +- fs/ceph/xattr.c | 10 + fs/crypto/keysetup.c | 8 +- fs/dax.c | 14 +- fs/dcache.c | 16 +- fs/dlm/lowcomms.c | 6 +- fs/erofs/decompressor.c | 2 +- fs/erofs/ishare.c | 43 +- fs/exfat/exfat_fs.h | 88 +- fs/exfat/file.c | 258 +++--- fs/exfat/inode.c | 16 +- fs/exfat/iomap.c | 53 +- fs/exfat/namei.c | 4 +- fs/exportfs/expfs.c | 6 +- fs/ext4/balloc.c | 2 +- fs/ext4/crypto.c | 9 + fs/ext4/ext4.h | 3 + fs/ext4/extents.c | 26 +- fs/ext4/indirect.c | 17 + fs/ext4/inode.c | 19 +- fs/ext4/ioctl.c | 3 +- fs/ext4/namei.c | 11 +- fs/ext4/super.c | 29 +- fs/f2fs/compress.c | 10 +- fs/f2fs/data.c | 13 +- fs/f2fs/f2fs.h | 3 + fs/f2fs/file.c | 52 +- fs/f2fs/segment.c | 59 +- fs/f2fs/super.c | 54 +- fs/fat/fat.h | 2 +- fs/fat/fatent.c | 21 +- fs/fat/file.c | 3 +- fs/fat/misc.c | 6 +- fs/fs-writeback.c | 15 +- fs/fs_pin.c | 9 +- fs/fuse/file.c | 53 +- fs/fuse/notify.c | 2 +- fs/fuse/virtio_fs.c | 51 +- fs/gfs2/glops.c | 10 +- fs/gfs2/lops.c | 4 +- fs/inode.c | 15 +- fs/iomap/bio.c | 2 +- fs/iomap/buffered-io.c | 3 +- fs/iomap/direct-io.c | 16 +- fs/iomap/fiemap.c | 8 +- fs/iomap/internal.h | 9 + fs/iomap/ioend.c | 3 +- fs/isofs/inode.c | 2 + fs/isofs/isofs.h | 2 + fs/isofs/rock.c | 11 +- fs/jbd2/journal.c | 2 +- fs/namespace.c | 7 +- fs/nilfs2/dir.c | 34 + fs/nilfs2/inode.c | 8 +- fs/nilfs2/ioctl.c | 2 +- fs/nilfs2/mdt.c | 6 +- fs/nilfs2/page.c | 50 +- fs/nilfs2/page.h | 4 +- fs/nilfs2/recovery.c | 2 +- fs/nilfs2/segment.c | 12 +- fs/nilfs2/sysfs.c | 5 +- fs/nilfs2/the_nilfs.c | 34 +- fs/notify/fanotify/fanotify.c | 7 +- fs/notify/fanotify/fanotify.h | 21 +- fs/ntfs/attrib.c | 142 ++- fs/ntfs/attrlist.c | 10 +- fs/ntfs/dir.c | 2 + fs/ntfs/ea.c | 67 +- fs/ntfs/file.c | 58 +- fs/ntfs/inode.c | 46 +- fs/ntfs/iomap.c | 16 +- fs/ntfs/logfile.c | 11 +- fs/ntfs/mft.c | 954 ++++++++++++++------- fs/ntfs/mft.h | 19 +- fs/ntfs/namei.c | 24 +- fs/ntfs/ntfs.h | 3 +- fs/ntfs/runlist.c | 98 ++- fs/ntfs/runlist.h | 3 + fs/ntfs/super.c | 401 +++++++-- fs/ntfs/volume.h | 15 + fs/ntfs3/attrib.c | 15 + fs/ntfs3/fslog.c | 29 +- fs/ntfs3/index.c | 13 +- fs/ntfs3/inode.c | 7 +- fs/ocfs2/alloc.c | 9 +- fs/ocfs2/cluster/heartbeat.c | 26 +- fs/ocfs2/cluster/nodemanager.c | 7 +- fs/ocfs2/dir.c | 76 +- fs/ocfs2/dlmglue.c | 4 + fs/ocfs2/file.c | 18 +- fs/ocfs2/inode.c | 37 +- fs/ocfs2/journal.c | 3 +- fs/ocfs2/journal.h | 1 - fs/ocfs2/super.c | 16 +- fs/ocfs2/xattr.c | 149 +++- fs/pidfs.c | 43 +- fs/proc/generic.c | 5 +- fs/proc/task_mmu.c | 6 +- fs/read_write.c | 8 +- fs/signalfd.c | 28 +- fs/splice.c | 12 +- fs/stat.c | 6 +- fs/udf/inode.c | 43 +- fs/udf/super.c | 5 +- fs/verity/enable.c | 8 + fs/verity/fsverity_private.h | 8 + fs/verity/measure.c | 10 + fs/verity/open.c | 47 +- fs/verity/read_metadata.c | 14 +- fs/verity/signature.c | 55 +- fs/xfs/scrub/agheader.c | 15 +- fs/xfs/scrub/xfarray.c | 69 +- include/kvm/arm_arch_timer.h | 15 + include/kvm/arm_vgic.h | 1 + include/linux/fault-inject.h | 10 +- include/linux/fs.h | 4 +- include/linux/hugetlb.h | 3 +- include/linux/libata.h | 1 + include/linux/memcontrol.h | 26 +- include/linux/netdevice.h | 7 + include/linux/panic.h | 3 +- include/linux/pci.h | 2 +- include/linux/rtc.h | 2 + include/math-emu/op-common.h | 23 +- include/math-emu/soft-fp.h | 8 + include/media/rc-map.h | 2 - include/media/v4l2-ctrls.h | 6 + include/net/addrconf.h | 3 + include/net/inet_frag.h | 1 + include/net/ip.h | 25 - include/net/ip6_route.h | 37 - include/net/xfrm.h | 17 + include/uapi/linux/iommufd.h | 4 +- include/uapi/linux/media/arm/mali-c55-config.h | 2 + init/main.c | 6 +- init/version.c | 3 + ipc/mqueue.c | 7 + ipc/msgutil.c | 3 +- ipc/namespace.c | 7 + ipc/shm.c | 25 +- kernel/bpf/queue_stack_maps.c | 3 + kernel/cgroup/cgroup.c | 2 +- kernel/cgroup/cpuset.c | 4 +- kernel/cpu_pm.c | 9 +- kernel/debug/gdbstub.c | 55 +- kernel/fork.c | 3 +- kernel/irq/internals.h | 1 + kernel/irq/kexec.c | 2 +- kernel/irq/manage.c | 43 +- kernel/liveupdate/kexec_handover.c | 7 + kernel/nstree.c | 80 +- kernel/panic.c | 82 +- kernel/power/energy_model.c | 4 +- kernel/resource.c | 2 +- kernel/sched/cpufreq_schedutil.c | 14 +- kernel/sched/ext/ext.c | 150 ++-- kernel/sched/fair.c | 29 +- kernel/seccomp.c | 7 +- kernel/sys.c | 3 + kernel/time/clocksource.c | 2 +- kernel/time/itimer.c | 2 +- kernel/time/namespace.c | 2 +- kernel/time/posix-cpu-timers.c | 4 +- kernel/time/posix-stubs.c | 4 +- kernel/time/posix-timers.c | 25 +- kernel/time/tick-sched.c | 14 +- kernel/time/timekeeping.c | 8 +- kernel/trace/Kconfig | 1 + kernel/trace/ring_buffer.c | 2 + kernel/ucount.c | 21 +- kernel/user_namespace.c | 5 +- lib/842/842_decompress.c | 7 +- lib/buildid.c | 4 + lib/cmdline.c | 13 +- lib/decompress_bunzip2.c | 6 +- lib/fault-inject.c | 7 +- lib/iov_iter.c | 4 + lib/kobject_uevent.c | 2 +- lib/plist.c | 7 + lib/raid/raid6/x86/avx2.c | 6 + lib/raid/raid6/x86/avx512.c | 6 + lib/raid/raid6/x86/recov_avx2.c | 2 + lib/raid/raid6/x86/recov_avx512.c | 2 + lib/raid/xor/x86/xor-avx.c | 1 + lib/stackdepot.c | 2 +- lib/tests/cmdline_kunit.c | 39 + mm/alloc_tag.c | 2 +- mm/damon/core.c | 118 ++- mm/damon/paddr.c | 8 +- mm/damon/sysfs-schemes.c | 6 +- mm/damon/sysfs.c | 11 +- mm/damon/tests/core-kunit.h | 381 +++++++- mm/damon/vaddr.c | 10 +- mm/execmem.c | 4 +- mm/huge_memory.c | 23 +- mm/hugetlb.c | 151 +++- mm/hugetlb_cgroup.c | 33 + mm/ksm.c | 5 +- mm/list_lru.c | 7 +- mm/madvise.c | 22 +- mm/memcontrol-v1.h | 5 +- mm/memcontrol.c | 181 ++-- mm/memfd.c | 31 +- mm/memory.c | 24 +- mm/mempolicy.c | 25 +- mm/mlock.c | 2 +- mm/mremap.c | 33 +- mm/nommu.c | 6 +- mm/page_alloc.c | 83 +- mm/page_alloc.h | 2 + mm/page_counter.c | 21 +- mm/page_isolation.c | 40 +- mm/page_table_check.c | 4 +- mm/page_vma_mapped.c | 28 +- mm/percpu.c | 5 +- mm/shmem.c | 17 +- mm/swap.h | 6 +- mm/swap_state.c | 29 +- mm/truncate.c | 3 +- mm/userfaultfd.c | 6 +- mm/vma.c | 16 +- mm/vmscan.c | 21 +- mm/workingset.c | 5 +- mm/zswap.c | 5 +- net/bluetooth/6lowpan.c | 1 + net/bluetooth/hci_debugfs.c | 9 + net/bluetooth/l2cap_core.c | 41 +- net/bluetooth/l2cap_sock.c | 4 + net/bluetooth/selftest.c | 1 + net/bluetooth/smp.c | 1 + net/ceph/mon_client.c | 3 + net/ceph/osd_client.c | 13 +- net/ceph/osdmap.c | 18 +- net/core/dev.c | 8 + net/core/gro.c | 4 + net/core/net_namespace.c | 4 +- net/core/skbuff.c | 13 +- net/ipv4/inet_connection_sock.c | 10 +- net/ipv4/inet_fragment.c | 5 + net/ipv4/inet_hashtables.c | 5 +- net/ipv4/ip_fragment.c | 3 +- net/ipv4/ip_gre.c | 1 + net/ipv4/ipmr.c | 22 +- net/ipv4/netfilter/nf_reject_ipv4.c | 5 + net/ipv4/route.c | 4 +- net/ipv4/syncookies.c | 2 + net/ipv4/sysctl_net_ipv4.c | 2 + net/ipv4/tcp_cong.c | 4 +- net/ipv4/tcp_input.c | 4 +- net/ipv4/tcp_output.c | 2 +- net/ipv6/addrconf.c | 46 +- net/ipv6/inet6_hashtables.c | 4 +- net/ipv6/ip6_gre.c | 1 + net/ipv6/ip6mr.c | 5 +- net/ipv6/netfilter/nf_reject_ipv6.c | 5 + net/ipv6/reassembly.c | 4 +- net/ipv6/route.c | 2 +- net/l2tp/l2tp_core.c | 51 +- net/l2tp/l2tp_core.h | 6 +- net/l2tp/l2tp_debugfs.c | 4 +- net/l2tp/l2tp_netlink.c | 11 +- net/l2tp/l2tp_ppp.c | 8 +- net/mac80211/tx.c | 52 +- net/mptcp/protocol.c | 40 +- net/mptcp/protocol.h | 10 +- net/mptcp/subflow.c | 6 +- net/mptcp/token.c | 68 +- net/mptcp/token_test.c | 4 +- net/netfilter/nf_conntrack_netlink.c | 8 +- net/packet/af_packet.c | 12 +- net/rds/ib_cm.c | 6 +- net/rds/ib_recv.c | 13 +- net/rds/recv.c | 6 +- net/sctp/socket.c | 26 +- net/smc/smc_tx.c | 7 + net/sunrpc/xprtrdma/rpc_rdma.c | 27 +- net/sunrpc/xprtrdma/svc_rdma_transport.c | 3 +- net/sunrpc/xprtrdma/verbs.c | 9 +- net/tipc/group.c | 19 +- net/tipc/socket.c | 12 +- net/unix/sysctl_net_unix.c | 4 +- net/xdp/xsk_buff_pool.c | 2 + rust/bindgen_parameters | 6 + rust/kernel/dma.rs | 21 +- rust/kernel/irq/request.rs | 28 +- rust/kernel/time/hrtimer.rs | 6 +- scripts/Makefile.autofdo | 2 +- security/apparmor/af_unix.c | 20 +- security/apparmor/apparmorfs.c | 15 +- security/apparmor/file.c | 59 +- security/apparmor/include/label.h | 6 +- security/apparmor/include/policy.h | 20 + security/apparmor/label.c | 1 - security/apparmor/match.c | 3 +- security/apparmor/policy.c | 19 + security/apparmor/policy_unpack.c | 13 +- sound/core/compress_offload.c | 32 +- sound/core/init.c | 12 +- sound/core/seq/oss/seq_oss_device.h | 1 + sound/core/seq/oss/seq_oss_event.c | 3 + sound/core/seq/oss/seq_oss_init.c | 2 + sound/core/timer.c | 1 + sound/core/timer_compat.c | 1 + sound/core/ump_convert.c | 2 +- sound/drivers/aloop.c | 31 +- sound/drivers/mpu401/mpu401_uart.c | 8 +- sound/drivers/mtpav.c | 2 +- sound/hda/codecs/hdmi/eld.c | 6 +- sound/hda/codecs/hdmi/hdmi.c | 3 +- sound/hda/codecs/realtek/alc269.c | 138 +-- sound/hda/codecs/side-codecs/cs35l41_hda.c | 12 +- sound/hda/codecs/side-codecs/tas2781_hda_i2c.c | 19 +- sound/hda/codecs/via.c | 1 + sound/hda/common/codec.c | 6 + sound/hda/common/sysfs.c | 4 + sound/mips/sgio2audio.c | 13 +- sound/oss/dmasound/dmasound_q40.c | 65 +- sound/pci/cs46xx/dsp_spos.c | 2 +- sound/soc/amd/acp-config.c | 7 + sound/soc/codecs/arizona-jack.c | 1 + sound/soc/codecs/hdac_hda.c | 16 + sound/soc/codecs/lpass-wsa-macro.c | 42 +- sound/soc/codecs/pcm6240.c | 2 - sound/soc/codecs/rt5682s.c | 4 +- sound/soc/codecs/rt712-sdca-dmic.c | 4 +- sound/soc/codecs/tlv320aic32x4-clk.c | 8 +- sound/soc/codecs/wcd9335.c | 25 +- sound/soc/codecs/wm8994.c | 3 + sound/soc/codecs/wsa883x.c | 13 +- sound/soc/codecs/wsa884x.c | 11 +- sound/soc/fsl/fsl_xcvr.c | 28 +- sound/soc/intel/atom/sst/sst_acpi.c | 14 +- sound/soc/qcom/qdsp6/q6afe.c | 10 +- sound/soc/qcom/qdsp6/q6apm-dai.c | 12 +- sound/soc/qcom/qdsp6/q6apm.c | 50 +- sound/soc/qcom/qdsp6/q6asm-dai.c | 7 +- sound/soc/qcom/qdsp6/topology.c | 31 +- sound/soc/sdca/sdca_class.c | 9 +- sound/soc/sdw_utils/soc_sdw_rt711.c | 1 + sound/soc/stm/stm32_i2s.c | 23 +- sound/soc/ti/davinci-mcasp.c | 1 + sound/synth/emux/emux.c | 10 +- sound/synth/emux/soundfont.c | 9 + sound/usb/line6/capture.c | 25 +- sound/usb/line6/capture.h | 2 +- sound/usb/line6/playback.c | 31 +- sound/usb/misc/ua101.c | 29 +- sound/usb/pcm.c | 20 +- sound/usb/quirks-table.h | 4 +- sound/usb/quirks.c | 4 + tools/dma/Makefile | 6 + tools/perf/arch/loongarch/util/header.c | 2 +- tools/perf/util/machine.c | 2 +- tools/perf/util/powerpc-vpadtl.c | 2 +- tools/perf/util/python.c | 2 + tools/testing/selftests/cgroup/test_cpuset_prs.sh | 3 + tools/testing/selftests/core/unshare_test.c | 19 +- .../selftests/filesystems/idmapped_tmpfile.c | 7 + tools/testing/selftests/iommu/iommufd.c | 10 +- tools/testing/selftests/landlock/audit_test.c | 2 +- tools/testing/selftests/landlock/net_test.c | 4 +- tools/testing/selftests/landlock/ptrace_test.c | 2 +- tools/testing/selftests/seccomp/seccomp_bpf.c | 179 ++++ tools/testing/vma/include/stubs.h | 5 + 1105 files changed, 14314 insertions(+), 6415 deletions(-)

4 days, 9 hours

[PATCH 6.12 0000/1536] 6.12.117-rc1 review

by Greg Kroah-Hartman

This is the start of the stable review cycle for the 6.12.117 release. There are 1536 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know. Responses should be made by Mon, 09 Nov 2026 13:46:08 +0000. Anything received after that time might be too late. The whole patch series can be found in one patch at: https://www.kernel.org/pub/linux/kernel/v6.x/stable-review/patch-6.12.117-r… or in the git tree and branch at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-6.12.y and the diffstat can be found below. thanks, greg k-h ------------- Pseudo-Shortlog of commits: Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> Linux 6.12.117-rc1 John Johansen <john.johansen(a)canonical.com> apparmor: on failed load ensure profile files are removed before parent Joseph Qi <joseph.qi(a)linux.alibaba.com> ocfs2: read the xattr entry hash before defragmenting the bucket Scott Gauche <scott-dev(a)scottgauche.com> ALSA: hda/realtek: Fix audio after Windows reboot on ASUS Q423SA Jason Perlow <jperlow(a)gmail.com> wifi: brcmfmac: map msgbuf RX packet IDs bidirectional Avi Weiss <thnkslprpt(a)gmail.com> init/bootconfig: pass init arguments in documented order Amir Goldstein <amir73il(a)gmail.com> fs: don't fail __d_obtain_alias() for unlinked inodes Hungyu Lin <dennylin0707(a)gmail.com> fs: skip copy_file_range write limits when there is no data Daehyeon Ko <4ncienth(a)gmail.com> splice: avoid stale f_pos writeback on error Chris Mason <mason(a)kernel.org> aio: fix NULL deref when a fault races ring truncation Georgia Garcia <georgia.garcia(a)canonical.com> apparmor: remove fs entries created by a failed policy load Kyle Zeng <kylebot(a)openai.com> tcp: fix reordering addition overflow in MTU probing Kyle Zeng <kylebot(a)openai.com> net/packet: check TX_RING fragments before memory accounting John Johansen <john.johansen(a)canonical.com> apparmor: fix refcount leak in aa_get_newest_profile() Zhiling Zou <zhilinz(a)nebusec.ai> tcp: check congestion control restriction first Kunhai Dai <daikunhai(a)didiglobal.com> blk-iocost: abort weight transfer on invalid donation weights Josef Bacik <josef(a)toxicpanda.com> mount: refuse setns() with a shared fs_struct again Avi Weiss <thnkslprpt(a)gmail.com> irqchip/irq-msi-lib: Free wired MSI descriptors Avi Weiss <thnkslprpt(a)gmail.com> irqchip/riscv-imsic: Report successful hardware retrigger Eric Biggers <ebiggers(a)kernel.org> fsverity: Be more careful with return value of ->get_verity_descriptor() Fang Xieyan <fangxy(a)xiaopeng.com> kgdb: Fix buffer overflow in the qRcmd packet handler Fang Xieyan <fangxy(a)xiaopeng.com> kgdb: Fix buffer overflow in the 'M' and 'X' packet handlers Fang Xieyan <fangxy(a)xiaopeng.com> kgdb: Fix buffer overflow in the 'm' packet handler Guixin Liu <kanie(a)linux.alibaba.com> nvmet: Free the old negotiation state when restarting authentication Guixin Liu <kanie(a)linux.alibaba.com> nvmet: Finish the blk plug when integrity allocation fails Martin Belanger <martin.belanger(a)dell.com> nvme-tcp: start error recovery when read_sock fails Guixin Liu <kanie(a)linux.alibaba.com> nvmet-fc: Tear down the association when the admin queue allocation fails Shao Mingyin <shao.mingyin(a)zte.com.cn> nvmet-auth: fix error handling on CHALLENGE failure Andrea Parri <parri.andrea(a)gmail.com> nvmet-fc: only send read data for successful commands Weiming Shi <bestswngs(a)gmail.com> nvmet-rdma: reject short connection requests Tristan Madani <tristan(a)talencesecurity.com> ppp: fix stale pointer access after pskb_may_pull in ppp_ccp_peek Peter Ujfalusi <peter.ujfalusi(a)linux.intel.com> ASoC: hdac_hda: Keep runtime PM state in sync across codec remove/probe Hongling Zeng <zenghongling(a)kylinos.cn> ntfs3: fix mapping pairs bounds check for alignment Hyeontae Lee <wonju345(a)naver.com> fs/ntfs3: bound DeleteAttribute asize against rec->used in do_action Hyeontae Lee <wonju345(a)naver.com> fs/ntfs3: bound CreateAttribute asize against record_size in do_action David Yang <mmyangfl(a)gmail.com> net: hisilicon: hisi_femac: Stop the receiver before releasing the RX ring Xia Yan <yanxia(a)cmss.chinamobile.com> macvlan: fix passthru promiscuity accounting while down Jesse Zhang <Jesse.Zhang(a)amd.com> drm/amdkfd: evict the queues only once for CRIU PROCESS_INFO Jiale Yao <yaojiale02(a)163.com> drm/amdkfd: validate SRAT subtables before parsing Avi Weiss <thnkslprpt(a)gmail.com> drm/amd/display: Initialize missing TD-LUT programming inputs Jesse Zhang <Jesse.Zhang(a)amd.com> drm/amdkfd: split vram_pages of SVM ranges prefetched without a GPU mapping Luigi Lauro <luigi.lauro(a)gmail.com> drm/amd/display: take a runtime PM reference only when a CRTC turns on Olivier Kaloudoff <olivier.kaloudoff(a)gmail.com> drm/amdkfd: stop restore retries on device unplug Zhao Gongyi <zhaogongyi(a)bytedance.com> arm64/mm: restrict transparent contpte mappings to valid PTEs Zhongqiu Han <zhongqiu.han(a)oss.qualcomm.com> cpufreq: stats: Fix potential out-of-bounds access in deferred reset Tiezhu Yang <yangtiezhu(a)loongson.cn> LoongArch: Fix perf hardware breakpoint failure via installation Tiezhu Yang <yangtiezhu(a)loongson.cn> LoongArch: Only send SIGTRAP signal if necessary in do_watch() Tiezhu Yang <yangtiezhu(a)loongson.cn> LoongArch: Fix architectural naming typo for CSR_FWPS_SKIP Tiezhu Yang <yangtiezhu(a)loongson.cn> LoongArch: Fix bitmask corruption in update_bp_registers() Tiezhu Yang <yangtiezhu(a)loongson.cn> LoongArch: Remove redundant call in update_bp_registers() Tiezhu Yang <yangtiezhu(a)loongson.cn> LoongArch: Remove arch-specific __smp_mb__{before,after}_atomic() Huacai Chen <chenhuacai(a)kernel.org> LoongArch: Use pa_to_nid()/nid_to_addrbase() rather than hard-code Peter Ujfalusi <peter.ujfalusi(a)linux.intel.com> ASoC: hdac_hda: Balance the runtime PM disable in codec remove Eric Dumazet <edumazet(a)kernel.org> ixgbe: reserve TX timestamp after skb preparation Peter Ujfalusi <peter.ujfalusi(a)linux.intel.com> ALSA: hda: Reject codec reset on ASoC (ext_ops) buses Dominik Maier <dmnk(a)google.com> loop: check for read-write open mode on LOOP_SET_STATUS in lo_compat_ioctl() Paul Moses <p(a)1g4.org> xsk: restore UMEM flags after failed pool assignment Yingjie Wang <1075151112(a)qq.com> tcp: limit tcp_tso_rtt_log to a valid shift count Miquel Raynal <miquel.raynal(a)bootlin.com> dt-bindings: clock: ma35d1: Document the missing crystal inputs Ido Schimmel <idosch(a)nvidia.com> ipmr: fully initialize the synthetic IP header in ipmr_get_route() Jiayuan Chen <jiayuan.chen(a)linux.dev> bonding: fix out-of-bounds read of arp_ip_target Wei Jie Law <law.wei.jie(a)gt.tech.gov.sg> net: usb: pegasus: check rx pkt_len against the received length Srinivas Kandagatla <srinivas.kandagatla(a)oss.qualcomm.com> ASoC: codecs: wsa884x: Accept temperatures across the full trim range Val Packett <val(a)packett.cool> ASoC: qcom: qdsp6: q6afe: fix clk vote response type mismatch Alex Markuze <amarkuze(a)redhat.com> ceph: fix uninitialized err in ceph_netfs_issue_read() sung byeongchan <tjdqudcks0424(a)naver.com> ceph: validate encoded xattr name lengths sung byeongchan <tjdqudcks0424(a)naver.com> ceph: validate MDS reply fragtree split array length sung byeongchan <tjdqudcks0424(a)naver.com> ceph: bound name skips in ceph_mdsmap_decode() by the message end sung byeongchan <tjdqudcks0424(a)naver.com> ceph: validate fscrypt auth blob length Venky Shankar <vshankar(a)redhat.com> ceph: don't fail write_begin with -EAGAIN after flushing old snapc Yuanfu Xie <yuanfuxie(a)stu.pku.edu.cn> ceph: clamp MDS reply result code to the errno range Jérémy Jean <Jeremy.Jean(a)oss.cyber.gouv.fr> libceph: fix out-of-bounds reads from repeated CRUSH bucket entries Jérémy Jean <Jeremy.Jean(a)oss.cyber.gouv.fr> ceph: fix 32-bit overflow in readdir reply count check Wentao Liang <vulab(a)iscas.ac.cn> ceph: Fix mds session leak in __open_export_target_session() Wentao Liang <vulab(a)iscas.ac.cn> ceph: Fix xattr buffer leak in __send_cap() Xiang Mei <xmei5(a)asu.edu> ceph: fix integer overflow in the snap trace bounds check Yogesh Gaur <yogeshgaur.83(a)gmail.com> libceph: reject an initial monmap with no monitors Felix Hoffmann <f3lix.dev(a)gmx.de> libceph: reject mismatched CRUSH weight-set sizes Raphael Zimmer <raphael.zimmer(a)tu-ilmenau.de> libceph: Fix multiple unsafe decodes in ceph_oloc_decode() Raphael Zimmer <raphael.zimmer(a)tu-ilmenau.de> libceph: Fix unsafe decode in ceph_redirect_decode() Xiubo Li <xiubo.li(a)clyso.com> libceph: only set read_from_replica on read requests Xiang Mei <xmei5(a)asu.edu> ceph: require the dentry lease record to cover struct ceph_mds_reply_lease Xiang Mei <xmei5(a)asu.edu> ceph: reject mdsmaps that claim more than CEPH_MAX_MDS ranks Guanglei Zhu <zhugl3(a)xiaopeng.com> ceph: fix out-of-bounds read in ceph_netfs_issue_op_inline() Max Kellermann <max.kellermann(a)ionos.com> ceph: avoid pending truncate during nonblocking cap acquire Hungyu Lin <dennylin0707(a)gmail.com> time/namespace: Fix overflow when converting absolute deadlines Hungyu Lin <dennylin0707(a)gmail.com> timers/itimer: Keep a nonzero value at CPU timer expiry Wang Haoran <haoranwangsec(a)gmail.com> fbdev: atmel_lcdfb: fix list_first_entry() on possibly empty modelist in probe Baokun Li <libaokun(a)linux.alibaba.com> fscrypt: Fix missing barrier in fscrypt_find_mode_key() Siddharth Chintamaneni <sidchintamaneni(a)gmail.com> mm: multi-gen LRU: fix NULL lruvec->pgdat deref with memcg disabled on cmdline Yunhui Cui <cuiyunhui(a)bytedance.com> riscv: mm: exclude invalid THP PMDs from page table check Gregory Price (Meta) <gourry(a)gourry.net> mm/mempolicy: apply bind policies against the scoped allocation zone Rik van Riel <riel(a)surriel.com> mm/page_alloc: count guard pages as free again when their buddy merges Weilin Tong <tongweilin(a)linux.alibaba.com> ipc/shm: fix RSS accounting for hugetlb shared memory Pedro Falcato <pfalcato(a)suse.de> mm/madvise: atomically clear the young bit on THP MADV_COLD Harry Yoo (Meta) <harry(a)kernel.org> mm/percpu: account full object size for percpu memory allocations Nickolai Zeldovich <nickolai(a)csail.mit.edu> mm/mlock: use a long for the page count in mlock_fixup() Wei Yang <albinwyang(a)tencent.com> mm/madvise: add cond_resched() in THP branch of madvise_cold_or_pageout_pte_range() Cen Zhang <zzzccc427(a)gmail.com> ocfs2/cluster: remove zero-address nodes from IP tree on teardown Cen Zhang <zzzccc427(a)gmail.com> ocfs2: snapshot the dentry name while tracing file release Hungyu Lin <dennylin0707(a)gmail.com> compat: avoid double rounding in times() Stanley Jhu <stanleyjhu(a)google.com> scsi: ufs: core: Remove completed-without-interrupt path in ufshcd_abort() Stanley Jhu <stanleyjhu(a)google.com> scsi: ufs: core: Remove an always-false WARN_ONCE() Ratnaker Gautam <ratnaker.gautam(a)kuleuven.be> scsi: libiscsi_tcp: Prevent R2T range check overflow Stanley Jhu <stanleyjhu(a)google.com> scsi: ufs: core: Clear stale UIC result byte before peer DME retries Stanley Jhu <stanleyjhu(a)google.com> scsi: ufs: bsg: Clear the reply buffer before use Stanley Jhu <stanleyjhu(a)google.com> scsi: ufs: bsg: Complete the job on error yanxia <yanxia(a)cmss.chinamobile.com> veth: fix stale peer max_mtu on XDP program replacement Aamir Ahmed <elb12345(a)hotmail.co.uk> gve: fix out-of-bounds read in gve_get_flow_rule_entry() Sasha Levin <sashal(a)kernel.org> cgroup: don't kill migrated processes through their exiting threads Thomas Weißschuh (Schneider Electric) <thomas.weissschuh(a)linutronix.de> timekeeping: Update offsets on sequence counter retry in ktime_get_update_offsets_now() Cen Zhang (Microsoft) <cenzhang(a)linux.microsoft.com> posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() signal path Pufan Jin <cyan2254650260(a)gmail.com> spi: zynq-qspi: fix address buffer corruption and support 4-byte address Christian Marangi <ansuelsmth(a)gmail.com> i2c: mt7621: fix copying uninitialized kernel stack with reduced page_len Alex Kazinsky <a.kazinsky(a)ideco.ru> ASoC: tlv320aic32x4: Prevent division by zero in divider callbacks Jean Delu <jeandelu(a)tutamail.com> parisc: eisa_enumerator: Fix out-of-bounds reads of the EEPROM buffer Adrian Ambrozewicz <aambrozewicz(a)nvidia.com> gpiolib: don't report -ENOMEM for a requested line without a label Pei Xiao <xiaopei01(a)kylinos.cn> tpm: fix zero-length read discarding the pending response Pei Xiao <xiaopei01(a)kylinos.cn> tpm: tpm_nsc: stop using the cleanup callback as dev.release Pei Xiao <xiaopei01(a)kylinos.cn> tpm: tpm_nsc: fix NULL pointer dereference on init failure Navon John Lukose <navonjohnlukose(a)gmail.com> i2c: designware: queue only one read command for block reads Ma Ke <make_ruc2021(a)163.com> i2c: acpi: Fix adapter reference leak in i2c_acpi_new_device_by_fwnode() Tristan Madani <tristan(a)talencesecurity.com> cpufreq: intel_pstate: cancel HWP notify work in driver cleanup Nickolai Zeldovich <nickolai(a)csail.mit.edu> ucount: take the rlimit reference before checking the limit Christian Brauner <brauner(a)kernel.org> listmount: don't wrap around with a U64_MAX cursor Christian Brauner <brauner(a)kernel.org> statmount: don't copy the reserved empty string past the buffer Chuck Lever <chuck.lever(a)oracle.com> exportfs: Release the get_name() directory file synchronously Henry Martin <bsdhenrymartin(a)gmail.com> tipc: fix broadcast sender hang on last acker departure Liu Chao <liuc63(a)xiaopeng.com> net: wwan: iosm: validate msg_head before indexing msg_ring Yu Zhang <yuz08559(a)gmail.com> nvmet: take subsys->lock while force-reconnecting in nvmet_subsys_attr_qid_max_store() Runyu Xiao <runyu.xiao(a)seu.edu.cn> sh: maple: Use the matching IRQ cookie when invoking free_irq() Henrik Enquist <henrik.enquist(a)gmail.com> ALSA: aloop: Update the PCM Slave controls for a matching playback Julian Sun <sunjunchao(a)bytedance.com> writeback: clear old wb dirty state after inode switches Julian Sun <sunjunchao(a)bytedance.com> writeback: reset dirtied_when when switching wbs Bartu Alev <bartualev(a)gmail.com> platform/x86: asus-wmi: fix TUF keyboard power state shutdown naming Michael Kelley <mhkelley58(a)gmail.com> Documentation: hyperv: Update documentation for sending VMBus packets Cen Zhang <zzzccc427(a)gmail.com> ocfs2/cluster: initialize heartbeat regions before publishing them Joseph Qi <joseph.qi(a)linux.alibaba.com> ocfs2: deal with legacy signed xattr name hash values Joseph Qi <joseph.qi(a)linux.alibaba.com> ocfs2: use the stored hash when checking xattr bucket collision Joseph Qi <joseph.qi(a)linux.alibaba.com> ocfs2: deal with legacy signed dir index name hash values Joseph Qi <joseph.qi(a)linux.alibaba.com> ocfs2: reserve value tree metadata when moving an xattr into the inode Joseph Qi <joseph.qi(a)linux.alibaba.com> ocfs2: reserve metadata for a new xattr block and its value tree Matt Turner <mattst88(a)gmail.com> alpha: determine tininess after rounding in the FP emulation Bryam Vargas <hexlabsecurity(a)proton.me> net/smc: queue the copied chunk when smc_tx_sendmsg() faults Yingjie Wang <1075151112(a)qq.com> net: unix: reject negative max_dgram_qlen values Nguyen Ngoc Thang <ngocthang2710.1999(a)gmail.com> net/rds: ib: don't enable IRQs in rds_ib_conn_free() Guangshuo Li <lgs201920130244(a)gmail.com> PCI: qcom-ep: Deinitialize endpoint on remove Tingjie Zhong <catme0w(a)live.cn> fbdev: bitblit: Fix glyph clipping when fbcon pans Daehyeon Ko <4ncienth(a)gmail.com> ipv6: do not restart DAD for a dead ifaddr Daehyeon Ko <4ncienth(a)gmail.com> ipv6: initialize temporary ifaddr before publication Daehyeon Ko <4ncienth(a)gmail.com> ipv6: serialize address publication with device teardown Daehyeon Ko <4ncienth(a)gmail.com> ipv6: remove ifaddr from hash during ifdown list cleanup William Palacek <William.Palacek(a)amd.com> drm/amdkfd: wait for a GPU reset before freeing a BO Keita Morisaki <kmta1236(a)gmail.com> drm/amd/display: Fix swap in median3() for DSC rate control Jesse Zhang <Jesse.Zhang(a)amd.com> drm/amdkfd: don't drop an SVM CWSR reference that was never taken Jesse Zhang <Jesse.Zhang(a)amd.com> drm/amdgpu: reject ANONONLY userptrs that span multiple VMAs Mario Limonciello <mario.limonciello(a)amd.com> drm/amd/display: don't WARN when removing an unallocated MST payload Henry Martin <bsdhenrymartin(a)gmail.com> drm/amdkfd: fix doorbell allocation race creating duplicate allocations Maciej Kucharek <qchcio(a)gmail.com> drm/amdgpu: reset VI ASIC on Apple boards with VRAM at 0 Maciej Kucharek <qchcio(a)gmail.com> drm/amdgpu: reset CIK ASIC on Apple boards with VRAM at 0 Luigi Lauro <luigi.lauro(a)gmail.com> drm/amdgpu: require _PR3 for BOCO Nirmoy Das <nirmoyd(a)nvidia.com> blk-mq: clear stale inactive flag on hctx reuse Sahaj Chaudhari <sahaj123.sc(a)gmail.com> gpio: pca953x: Handle direction register read errors in IRQ paths Sahaj Chaudhari <sahaj123.sc(a)gmail.com> gpio: davinci: Clear interrupt status in every bank on suspend Baek Kyu, Kim <pocj8ur4in(a)gmail.com> gpiolib: Free chip resources when allocating the label fails Takashi Iwai <tiwai(a)suse.de> ALSA: emux: Stop voices before freeing zones in all cases Peter Ujfalusi <peter.ujfalusi(a)linux.intel.com> ALSA: compress: add missing OPEN-state gate to SET_METADATA Peter Ujfalusi <peter.ujfalusi(a)linux.intel.com> ALSA: compress: reject buffer geometry change on gapless next_track Peter Ujfalusi <peter.ujfalusi(a)linux.intel.com> ALSA: compress: fix buffer leak on failed SET_PARAMS Sorah Fukumori <her(a)sorah.jp> net: gro: don't chain linear parts larger than gso_size into frag_list Jamal Hadi Salim <jhs(a)mojatatu.com> netdevsim: reject cls_bpf programs bound to another device Kir Kolyshkin <kolyshkin(a)gmail.com> cgroup: fix cgroup.kill for exited thread group leader Alexander Kochetkov <al.kochet(a)gmail.com> Revert "Input: matrix_keypad - force switch rows to input mode" Baek Kyu, Kim <pocj8ur4in(a)gmail.com> hwmon: (sht3x) Return the consumed count for heater writes Ma Ke <make_ruc2021(a)163.com> platform/x86/amd/pmc: Fix RTC reference leak in amd_pmc_verify_czn_rtc() Gregory Price <gourry(a)gourry.net> rtc: cmos: Disable ACPI RTC event before handling it Seongjae Jeong <jsjlee1020(a)gmail.com> f2fs: fix submit accounting for IPU writeback Wenjie Qi <qwjhust(a)gmail.com> f2fs: flush SIT journal during filesystem resize Jiale Yao <yaojiale02(a)163.com> hwmon: (gigabyte_waterforce) reject short input reports Ximing Zhang <xzhangjr(a)gmail.com> hwmon: (coretemp) Fix handling of isolated SMT siblings Kyle Zeng <kylebot(a)openai.com> netfilter: nf_reject: initialize IPCB at inet ingress Nickolai Zeldovich <nickolai(a)csail.mit.edu> lib/buildid: reject file offsets that do not fit in pgoff_t Sanan Hasanov <sanan.hasanov(a)ucf.edu> hwmon: (corsair-cpro) Make wait_input_report_lock IRQ safe Weibin Liu <liuwb(a)xiaopeng.com> spi: ch341: handle transfers without a TX or RX buffer Vasiliy Kovalev <kovalev(a)altlinux.org> ALSA: hda/via: Apply runtime PM workaround for ASUS X55A Magnus Lindholm <linmag7(a)gmail.com> alpha: do not skip TLB shootdown IPIs for kthread-borrowed mms Magnus Lindholm <linmag7(a)gmail.com> alpha: do not clear remote MMU contexts in migrate_flush_tlb_page() Magnus Lindholm <linmag7(a)gmail.com> alpha: invalidate the local context in flush_icache_user_page() Magnus Lindholm <linmag7(a)gmail.com> alpha: invalidate the local context in flush_tlb_mm() Magnus Lindholm <linmag7(a)gmail.com> alpha: fix the local TLB invalidate in the UP flush_tlb_page() Magnus Lindholm <linmag7(a)gmail.com> alpha: fix the local TLB invalidate in flush_tlb_page() Magnus Lindholm <linmag7(a)gmail.com> alpha: invalidate the local context in flush_tlb_page() Magnus Lindholm <linmag7(a)gmail.com> alpha: only use a targeted tbi() when the target mm is really current Magnus Lindholm <linmag7(a)gmail.com> alpha: run check_mmu_context() from finish_arch_post_lock_switch() Magnus Lindholm <linmag7(a)gmail.com> alpha: load the MMU context when switch_mm() switches the current task Matt Turner <mattst88(a)gmail.com> alpha: handle VM_FAULT_HWPOISON in do_page_fault() Tim Douglas <me(a)timdoug.com> power: supply: generic-adc-battery: fix status with no supplier Luis Gerardo Lopez Hernandez <gamaerry(a)gmail.com> ALSA: hda/realtek: Fix internal speakers on Acer Aspire AL16-31P Takashi Iwai <tiwai(a)suse.de> ALSA: seq: oss: Skip events until fully initialized Quanye Yang <quanyeyang(a)proton.me> mptcp: reset msk state on early connect failure Kees Cook <kees(a)kernel.org> ipc, msg: Account msg_msg allocations with GFP_KERNEL_ACCOUNT again Fan Wu <fanwu01(a)zju.edu.cn> virtio_fs: read the vring size under virtio_fs_mutex in ->get_tree Huacai Chen <chenhuacai(a)kernel.org> cpufreq: loongson3: Replace IOCSR read/write with MMIO ones Huacai Chen <chenhuacai(a)kernel.org> cpufreq: loongson3: Use global physical CPU ID in get/target callbacks Huacai Chen <chenhuacai(a)kernel.org> cpufreq: loongson3: Replace per-package mutex with per-node Huacai Chen <chenhuacai(a)kernel.org> cpufreq: loongson3: Adjust the width of id and val in smc_message Huacai Chen <chenhuacai(a)kernel.org> cpufreq: loongson3: Make this driver depend on MACH_LOONGSON64 Shubham Antil <shubham(a)octane.security> RDS/IB: validate receive fragment completions Seung Min Shin <guncraft2000(a)naver.com> sctp: hold transport reference across connect wait Zixuan Chai <petalzu987(a)gmail.com> ipv6: defrag: orphan skb before queuing Josef Bacik <josef(a)toxicpanda.com> net: skbuff: don't BUG() on a bad csum_start in skb_copy_and_csum_dev() Jianyun Gao <jianyungao89(a)gmail.com> dax: fix dax_range_compare_iter() to use correct size and address offset Jianyun Gao <jianyungao89(a)gmail.com> dax: Return errors from dax_core_init() David Carlier <devnexen(a)gmail.com> ring-buffer: Take cpus_read_lock() when changing the subbuf order Gyokhan Kochmarla <gyokhan(a)amazon.de> erofs: use on-disk blkszbits for lz4 max pcluster bound Weibin Liu <liuwb(a)xiaopeng.com> spi: amd: fix len==0 underflow and FIFO overflow Weibin Liu <liuwb(a)xiaopeng.com> spi: bcm-qspi: reject oversized dummy bytes in mspi exec_mem_op Vladyslav Tymoshchuk <tvlad744(a)gmail.com> ASoC: qcom: q6apm: reset the hw pointer with the fragment queue Radiy Zhambakiev <r.zhambakiev(a)prosoftsystems.ru> mfd: tps65217: Use devres for IRQ domain and wake teardown Radiy Zhambakiev <r.zhambakiev(a)prosoftsystems.ru> mfd: tps65217: Check return value when masking interrupt sources Radiy Zhambakiev <r.zhambakiev(a)prosoftsystems.ru> mfd: tps65217: Fix NULL pointer dereference on IRQ init failure Weibin Liu <liuwb(a)xiaopeng.com> spi: npcm-fiu: limit UMA data_size to the 16-byte staging buffer Marc Zyngier <maz(a)kernel.org> KVM: arm64: Turn vcpu->arch.pause into a counter Marc Zyngier <maz(a)kernel.org> KVM: arm64: Move OUTSIDE_GUEST_MODE publication past context being saved Ard Biesheuvel <ardb(a)kernel.org> efi/libstub: Don't replace an existing LINUX_EFI_MEMRESERVE table Weibin Liu <liuwb(a)xiaopeng.com> spi: jcore: fix divide-by-zero when speed_hz is zero Tal Zussman <tz2294(a)columbia.edu> gfs2: fix the escaped block copy in gfs2_before_commit() Takashi Iwai <tiwai(a)suse.de> ALSA: ump: Correct return size of fill_rpn() Wentao Liang <vulab(a)iscas.ac.cn> irqchip/mchp-eic: Fix clock reference leak in mchp_eic_probe() Guangshuo Li <lgs201920130244(a)gmail.com> irqchip/imx-intmux: Fix runtime PM teardown on remove Fuad Tabba <fuad.tabba(a)linux.dev> irqchip/gic-v3-its: Don't clamp nvecs to zero when id_bits is 32 Ahsan Atta <ahsan.atta(a)intel.com> crypto: qat - fix use of destroyed vf2pf_lock on VF restart Ahsan Atta <ahsan.atta(a)intel.com> crypto: qat - initialise state_lock on every path in adf_devmgr_add_dev() Andrea Parri <parri.andrea(a)gmail.com> iommufd: Reject a zero-length dirty bitmap request Wentao Liang <vulab(a)iscas.ac.cn> PCI: xilinx-xdma: Fix device node reference leak in xilinx_pl_dma_pcie_init_irq_domain() Hui Su <sh_def(a)163.com> cpufreq: schedutil: Serialize sugov_start() against rate limit updates Siwei Zhang <oss(a)fourdim.xyz> Bluetooth: L2CAP: Use default TxWindow for zero socket option Siwei Zhang <oss(a)fourdim.xyz> Bluetooth: L2CAP: Reject invalid TxWindow in configuration requests Siwei Zhang <oss(a)fourdim.xyz> Bluetooth: L2CAP: Reject mode changes on connected channels Bui Viet Dung <dungvn2345(a)gmail.com> Bluetooth: hci_debugfs: Pin module for debugfs file operations Bui Viet Dung <dungvn2345(a)gmail.com> Bluetooth: 6lowpan: Pin module for 6lowpan_control debugfs file Nikolaj Klitlund Børty <nbn(a)sj.dk> Bluetooth: btusb: Add device ID for Realtek RTL8761BUE (StarTech AV53C1) Stian Halseth <stian(a)itx.no> PCI: Set supported_speeds in set_pcie_port_type() Karl Mehltretter <kmehltretter(a)gmail.com> ARM: 9491/1: alignment: restore uaccess state on emulation fault Karl Mehltretter <kmehltretter(a)gmail.com> ARM: 9488/1: smp: set current pointer in assembly before jumping into C Weibin Liu <liuwb(a)xiaopeng.com> spi: cadence-xspi: fix stack buffer overflow in the Marvell b0 path Martin Belanger <martin.nvme.dev(a)gmail.com> nvme: make the DH-HMAC-CHAP secret attributes readable by root only Tim Douglas <me(a)timdoug.com> serial: pmac_zilog: push received data to the port that received it Jiri Slaby (SUSE) <jirislaby(a)kernel.org> serial: 8250_lpss: do not touch uninitialized line in ehl_serial_exit() Muhammad Bilal <meatuni001(a)gmail.com> platform/x86: hp-bioscfg: NUL-terminate the SPM auth token Muhammad Bilal <meatuni001(a)gmail.com> platform/x86: hp-bioscfg: allow clearing current_password Muhammad Bilal <meatuni001(a)gmail.com> platform/x86: hp-bioscfg: return -E2BIG from validate_password_input() Muhammad Bilal <meatuni001(a)gmail.com> platform/x86: hp-bioscfg: fix non-ASCII truncation in hp_get_string_from_buffer() Muhammad Bilal <meatuni001(a)gmail.com> platform/x86: hp-bioscfg: fix OOB reads in hp_get_string_from_buffer() Denis Arefev <arefev(a)swemel.ru> ALSA: cs46xx: fix unit mismatch in DSP code area bounds check Aamir Ahmed <elb12345(a)hotmail.co.uk> lib: decompress_bunzip2: fix integer overflow in run-length decoding Matt Turner <mattst88(a)gmail.com> lib/decompress_bunzip2: fix off-by-one in run-length bounds check Ma Ke <make_ruc2021(a)163.com> pinctrl: stm32: Fix fwnode reference leak in stm32_gpiolib_register_bank() Weibin Liu <liuwb(a)xiaopeng.com> spi: ljca: validate the response length before copying the data Daeho Jeong <daehojeong(a)google.com> f2fs: disallow mmap write and data-modifying fallocate on atomic files Zhan Xusheng <zhanxusheng1024(a)gmail.com> f2fs: fix defragment writeback range truncation on 32-bit Kaixuan Li <kaixuanli0131(a)gmail.com> f2fs: check every cur_*_segno[] entry on readonly images Nanzhe Zhao <zhaonanzhe(a)xiaomi.com> f2fs: read i_size once in f2fs_vm_page_mkwrite Joanne Chang <joannechien(a)google.com> f2fs: allow pinning empty compressed files Nanzhe Zhao <zhaonanzhe(a)xiaomi.com> f2fs: remove mappedtodisk flag usage in mmap write path Karl Mehltretter <kmehltretter(a)gmail.com> sh: intc: Sort the prio and sense lists after filling them Geraldo Nascimento <geraldogabriel(a)gmail.com> PCI: rockchip-host: Do not attempt 5.0 GT/s retraining Daeho Jeong <daehojeong(a)google.com> f2fs: convert inline quota files when turning quota on Andrea Parri <parri.andrea(a)gmail.com> nvmet: zns: don't leak stale memory in zone management receive Jérémy Jean <Jeremy.Jean(a)oss.cyber.gouv.fr> nvmet: free the bvec on file namespace range errors Yehyeong Lee <yhlee(a)isslab.korea.ac.kr> nvme-auth: fail when the controller does not authenticate itself Yehyeong Lee <yhlee(a)isslab.korea.ac.kr> nvme-rdma: don't complete a request after a bogus remote invalidation Andrea Parri <parri.andrea(a)gmail.com> iomap: don't lose a fiemap iteration error when emitting the last extent Kathiravan Thirumoorthy <kathiravan.thirumoorthy(a)oss.qualcomm.com> clk: qcom: ipq5332: add 24MHz rate for USB UTMI clock Kathiravan Thirumoorthy <kathiravan.thirumoorthy(a)oss.qualcomm.com> clk: qcom: ipq5018: add 24MHz rate for USB UTMI clock Samuel Thibault <samuel.thibault(a)ens-lyon.org> speakup: Fix NULL pointer dereference on VT switch + selection Wentao Guan <guanwentao(a)uniontech.com> mei: vsc: Fix packet CRC computed over pointer size Mikulas Patocka <mpatocka(a)redhat.com> dm-bufio: fix a race leading to an unsigned integer underflow Jiri Slaby (SUSE) <jirislaby(a)kernel.org> serial: 8250_exar: store the GPIO platform device in struct exar8250 Lorenzo Stoakes (ARM) <ljs(a)kernel.org> fbdev: sh_mobile_lcdc: check for fb_deferred_io_init() error Lorenzo Stoakes (ARM) <ljs(a)kernel.org> fbdev: smscufx: check for fb_deferred_io_init() error Lorenzo Stoakes (ARM) <ljs(a)kernel.org> fbdev: udlfb: check for fb_deferred_io_init() error Lorenzo Stoakes (ARM) <ljs(a)kernel.org> fbdev: xen-fbfront: check for fb_deferred_io_init() error Lorenzo Stoakes (ARM) <ljs(a)kernel.org> fbdev: ssd1307fb: check for fb_deferred_io_init() error Guixiong Wei <weiguixiong(a)bytedance.com> platform/x86/intel-uncore-freq: Continue restoring limits on resume Guangshuo Li <lgs201920130244(a)gmail.com> platform/x86: simatic-ipc: fix platform device leak on registration failure Jack Boykin <jtboykin.jb(a)gmail.com> platform/x86/amd/pmf: Fix power_supply refcount leak in amd_pmf_get_battery_prop() Muhammad Bilal <meatuni001(a)gmail.com> platform/x86: hp-wmi: fix heap OOB read and memory corruption in hp_wmi_perform_query() Muhammad Bilal <meatuni001(a)gmail.com> platform/x86: hp-bioscfg: fix 16-byte heap overflow for empty auth token Denis Benato <denis.benato(a)linux.dev> platform/x86: asus-wmi: fix screenpad power state detection Denis Benato <denis.benato(a)linux.dev> platform/x86: asus-wmi: fix unclear usage of bd->props.power Mario Limonciello <mario.limonciello(a)amd.com> platform/x86/amd/pmf: Validate the APTS state index Donggeun Yoo <donggeunyoo.kernel(a)gmail.com> mm/damon/tests/core-kunit: test the size charged for a filter-trimmed region Donggeun Yoo <donggeunyoo.kernel(a)gmail.com> mm/damon/core: charge only the part of a region the filter left Breno Leitao <leitao(a)debian.org> mm/shmem: report RCU-tasks quiescent states while undoing a range Hongfu Li <lihongfu(a)kylinos.cn> mm/hugetlb_cgroup: move per-node usage on cgroup reparenting Hongfu Li <lihongfu(a)kylinos.cn> mm/hugetlb_cgroup: move per-node usage on cross node migration Yuanhe Shu <xiangzao(a)linux.alibaba.com> mm/page_alloc: do not boost watermarks in kdump capture kernels Gregory Price <gourry(a)gourry.net> mm/madvise: use folio_trylock() in the cold/pageout PMD split Gregory Price <gourry(a)gourry.net> mm/madvise: reclaim isolated folios if PTE restart fails SJ Park <sj(a)kernel.org> mm/damon/sysfs-schemes: read sysfs_filter->addr_range only once Imre Kaloz <kaloz(a)kernel.org> PCI: Avoid D3 on PLX PEX 8532/8533/8548 downstream ports Yongjian Mu <ymu(a)everpuredata.com> xprtrdma: trim head iovec when the payload arrives via a Write chunk Tim Menninger <tmenninger(a)everpuredata.com> xprtrdma: prevent disconnect feedback during endpoint teardown Weigang He <geoffreyhe2(a)gmail.com> mtd: parsers: qcom: fix offset/size overflow on large partitions Hengyu Liang <hengyul(a)cs.unc.edu> btrfs: return -ENOTTY for unknown ioctls on the control device Wentao Liang <vulab(a)iscas.ac.cn> btrfs: zoned: fix block group reference leak in btrfs_repair_one_zone() Ard Biesheuvel <ardb(a)kernel.org> arm64/efi: Clear PTE_WRITE when applying EFI_MEMORY_RO Mikulas Patocka <mpatocka(a)redhat.com> dm-snapshot: fix crash if dm_io_client_create fails Johan Hovold <johan(a)kernel.org> USB: serial: sierra: fix urb leak on write completion Anup Vishwakarma <anup.vishwakarma(a)oss.qualcomm.com> mailbox: qcom-ipcc: Guard against NULL con_priv in send_data() Wentao Liang <vulab(a)iscas.ac.cn> mailbox: mtk-cmdq: Fix runtime PM leak in cmdq_mbox_flush() Wayne Chang <waynec(a)nvidia.com> usb: typec: ucsi_ccg: Add retry mechanism in ccg_read Drobyshev Vladimir <enigma_137(a)icloud.com> USB: cdc-acm: add VeriFone VX820 device ID Koichiro Den <den(a)valinux.co.jp> cxl/acpi: Convert QTG _DSM latencies to picoseconds Koichiro Den <den(a)valinux.co.jp> cxl: Account for link width in latency calculation Koichiro Den <den(a)valinux.co.jp> cxl/port: Convert PCIe link latency to nanoseconds Seongjun Hong <hsj0512(a)snu.ac.kr> vfio/mlx5: Fix boundary check in set_report_output() Xiaofeng Yuan <yuanxiaofeng(a)eswincomputing.com> RISC-V: KVM: Fix IPI delivery for out-of-order vcpu_id Ross Lagerwall <ross.lagerwall(a)citrix.com> xen-blkfront: Fix IO race during unplug Zongmin Zhou <zhouzongmin(a)kylinos.cn> slimbus: messaging: fix leaked PM vote on tid allocation failure Johan Hovold <johan(a)kernel.org> USB: serial: usb_wwan: fix urb leak on disconnect Michael Wyraz <michael(a)wyraz.de> USB: serial: option: add support for ASR 1286:4e3c modem Reinhard Speyerer <rspmn(a)arcor.de> USB: serial: option: add Rolling Wireless RN947R Johan Hovold <johan(a)kernel.org> USB: cdc-acm: fix urb leak on disconnect Jesse Zhang <Jesse.Zhang(a)amd.com> drm/ttm: return an error when kmapping a BO without pages Krzysztof Karas <krzysztof.karas(a)intel.com> iommu/dma: Catch scatterlist length overflows Wentao Liang <vulab(a)iscas.ac.cn> xen-pciback: Fix pcistub_device ref leak in pcistub_get_gsi_from_sbdf() Yehyeong Lee <yhlee(a)isslab.korea.ac.kr> xen/pcifront: check that an AER callback exists before calling it Koichiro Den <den(a)valinux.co.jp> xen/privcmd: Only claim ioreqs matching an ioeventfd Myeonghun Pak <mhun512(a)gmail.com> soc: fsl: dpio: Free the IRQ before releasing the I/O object Myeonghun Pak <mhun512(a)gmail.com> soc: fsl: dpio: Fix cleanup on IRQ registration failure Wentao Liang <vulab(a)iscas.ac.cn> soc: fsl: cpm1: tsa: Fix clock leak in tsa_of_parse_tdms() Abdifatah Suruur <suruurism(a)gmail.com> xen/gntdev: prevent private mappings from becoming writable Wentao Liang <vulab(a)iscas.ac.cn> clk: imx: Fix clock reference leak in imx_obtain_fixed_clock_hw() Wentao Liang <vulab(a)iscas.ac.cn> clk: imx: Fix clock reference leak in imx_get_clk_hw_by_name() Longlong Xia <xialonglong(a)kylinos.cn> mm/zswap: enable zswap_ever_enabled in zswap_pool_create() Anastasios Papagiannis <tasos.papagiannnis(a)gmail.com> mm/nommu: reject wrapping ranges in access_remote_vm() Yogesh Gaur <yogeshgaur.83(a)gmail.com> md: don't hand out the array before md_alloc() has added mddev->kobj Jake Labelle <southampton.jake.labelle(a)gmail.com> nilfs2: validate directory position after llseek in readdir Jinjie Ruan <ruanjinjie(a)huawei.com> ext4: fix out-of-bounds read in ext4_get_group_info() Sergey Senozhatsky <senozhatsky(a)chromium.org> ext4: fix ABBA deadlock in ext4_rmdir() Daejun Park <daejun7.park(a)samsung.com> ext4: don't report delalloc data as a hole on indirect-mapped inodes Hemanth Selam <hemanth.selam(a)gmail.com> ext4: skip extra isize expansion while unmounting Daejun Park <daejun7.park(a)samsung.com> jbd2: don't advance j_fc_off before the buffer is recorded Hsiu-Hsien Lee <swinds24(a)gmail.com> ext4: fix fast commit replay failing on a read-only mount Matthias Goergens <matthias.goergens(a)gmail.com> fanotify: report names longer than NAME_MAX Daehyeon Ko <4ncienth(a)gmail.com> crypto: algif_skcipher - rewind rounded output bytes Tristan Madani <tristan(a)talencesecurity.com> wifi: rtw89: fix IE length passed to cfg80211_find_ie() in WoW AKM Krzysztof Wilczyński <kwilczynski(a)kernel.org> PCI/sysfs: Pass the device name length in UTF-16 code units Josef Bacik <josef(a)toxicpanda.com> aoe: pull in the headers each received packet type reads Wentao Liang <vulab(a)iscas.ac.cn> clocksource/drivers/digicolor: Fix clk reference leak on request_irq failure Wentao Liang <vulab(a)iscas.ac.cn> clocksource/drivers/fttmr010: Fix clk reference leak in error paths Wentao Liang <vulab(a)iscas.ac.cn> wifi: mt76: Fix of_node reference leak in mt76_get_rate_power_limits() Jiale Yao <yaojiale02(a)163.com> wifi: mt76: mt7615: cancel reset work during unregister Myeonghun Pak <mhun512(a)gmail.com> wifi: mt76: mt7615: restore DBDC state after ext PHY failure Eason Lai <eason.lai(a)mediatek.com> wifi: mt76: fix memory leak in USB TX path Eason Lai <eason.lai(a)mediatek.com> wifi: mt76: mt792x: fix UAF in SDIO TX path when out of memory Mark Anthony Agarro <markanthonyagarro(a)gmail.com> wifi: mt76: mt7615: do not tear down BSS/STA state for monitor vifs Mark Anthony Agarro <markanthonyagarro(a)gmail.com> wifi: mt76: mt76x02: validate TX-status rate index before mac80211 handoff Joseph Qi <joseph.qi(a)linux.alibaba.com> ocfs2: skip uninitialized lockres in ocfs2_mark_lockres_freeing() Konstantin Khorenko <khorenko(a)virtuozzo.com> selftests/core: fix unshare_test with large fs.nr_open Joseph Qi <joseph.qi(a)linux.alibaba.com> ocfs2: free replay slots in ocfs2_recovery_exit() Joseph Qi <joseph.qi(a)linux.alibaba.com> ocfs2: exit recovery thread on mount error path Thorsten Blum <blum(a)kernel.org> init: fix early boot crash with bare hostname parameter Zi Yan <ziy(a)nvidia.com> USB: gadgetfs: do not WARN about excessively large memory allocations Michael Liang <mliang(a)purestorage.com> fault-inject: fix dentry leak OGAWA Hirofumi <hirofumi(a)mail.parknet.co.jp> fat: fix fat_ent_write() for reverting the value DAI RENJIE <drj19981414013(a)gmail.com> resource: fix lost wakeup when waiting for a muxed region Gregory Price <gourry(a)gourry.net> mm/mempolicy: take a cpuset cookie for the interleave node count Nathan Chancellor <nathan(a)kernel.org> wifi: brcmsmac: Adjust txpwrindex value in nphy_ipa_rxcal_gaintbl_2GHz Darrick J. Wong <djwong(a)kernel.org> xfs: cross-reference the primary superblock Priyank Rathod <rathodpriyank(a)google.com> PCI/AER: Fix memory leak in aer_recover_queue() on kfifo buffer overflow Eric Dumazet <edumazet(a)kernel.org> dlm: fix send buffer backpressure handling Denis Efremov (Oracle) <efremov(a)linux.com> floppy: return the drive state flags from the 32-bit FDGETDRVSTAT Denis Efremov (Oracle) <efremov(a)linux.com> floppy: don't store a stack buffer in timeout_message Myeonghun Pak <mhun512(a)gmail.com> ASoC: codecs: rt5682s: disable jack detection work on shutdown Chuck Lever <chuck.lever(a)oracle.com> svcrdma: Grant credits from the clamped sc_max_requests Runyu Xiao <runyu.xiao(a)seu.edu.cn> perf: xgene: initialize lock before requesting IRQ Linus Walleij <linusw(a)kernel.org> power: supply: ab8500_fg: Report sub-percent charge changes Linus Walleij <linusw(a)kernel.org> power: supply: ab8500_fg: Accept status from supplied power Andrey Albershteyn <aalbersh(a)kernel.org> fsverity: hoist statx reporting of fs-verity flag Tharit Tangkijwanichakul <tharitt97(a)gmail.com> media: hantro: disable runtime PM before hardware teardown Jiawen Liu <1298662399(a)qq.com> media: amphion: fix runtime PM imbalance on probe failure Tharit Tangkijwanichakul <tharitt97(a)gmail.com> media: hantro: Harden MPEG-2 control access against NULL Junrui Luo <moonafterrain(a)outlook.com> media: vicodec: fix NULL deref on oversized frame Pengpeng Hou <pengpeng(a)iscas.ac.cn> media: mediatek: jpeg: retry HW selection after successful wait Michail Tatas <michail.tatas(a)gmail.com> media: verisilicon: rockchip: Fix leaks in init Guangshuo Li <lgs201920130244(a)gmail.com> media: mediatek: vpu: release reserved memory on remove Guangshuo Li <lgs201920130244(a)gmail.com> media: mediatek: vcodec: destroy core workqueue on remove Wentao Liang <vulab(a)iscas.ac.cn> media: mtk-jpeg: Fix runtime PM leak in mtk_jpegenc_worker() Wentao Liang <vulab(a)iscas.ac.cn> media: mtk-jpeg: Fix runtime PM leak in mtk_jpegdec_worker() Wentao Liang <vulab(a)iscas.ac.cn> media: platform: mtk-mdp3: Fix device reference leak in mdp_comp_init() Fan Wu <fanwu01(a)zju.edu.cn> media: mediatek: vpu: free IRQ before destroying watchdog workqueue Myeonghun Pak <mhun512(a)gmail.com> media: amphion: prevent unbind while video instances are open Myeonghun Pak <mhun512(a)gmail.com> media: amphion: drain message work before releasing core state Michael Freidkin <freidkin(a)gmail.com> media: meson: vdec: size capture planes from the aligned canvas Runyu Xiao <runyu.xiao(a)seu.edu.cn> media: sti: delta: use unaligned accessors for MJPEG SOF fields Nas Chung <nas.chung(a)chipsnmedia.com> media: v4l2-common: Fix P010 format info Thorsten Blum <thorsten.blum(a)linux.dev> media: imagination: Fix value clamping in calculate_qp_tables Karl Mehltretter <kmehltretter(a)gmail.com> KVM: arm64: vgic-v3: Roll back assignments from the new region Karl Mehltretter <kmehltretter(a)gmail.com> KVM: arm64: vgic-v3: Undo assignment on iodev registration failure Aldo Ariel Panzardo <qwe.aldo(a)gmail.com> crypto: nx - validate 'ignore' before subtracting in decompress Thorsten Blum <blum(a)kernel.org> hwrng: core - reject unknown RNG names Thorsten Blum <blum(a)kernel.org> hwrng: ba431 - fix reported byte count Thorsten Blum <blum(a)kernel.org> hwrng: amd - report partial reads in non-blocking mode ZhaoJinming <zhaojinming(a)uniontech.com> crypto: caam - fix double-free in caam_rsa_set_priv_key_form() Wei Jie Law <98lawweijie(a)gmail.com> media: uvcvideo: Fix NULL deref on events for uninitialized controls Imre Kaloz <kaloz(a)kernel.org> PCI: Disable MSI for ULi M1575 EHCI controller Vasileios Almpanis <vasileios.almpanis(a)virtuozzo.com> block: drop the cached plug time when blk_add_rq_to_plug() flushes Mikulas Patocka <mpatocka(a)redhat.com> dm-writecache: fix REQ_FUA processing Mikulas Patocka <mpatocka(a)redhat.com> dm-writecache: fix uncommitted_blocks underflow Mikulas Patocka <mpatocka(a)redhat.com> dm-writecache: fix a crash if we attempt to use non-dax device Mikulas Patocka <mpatocka(a)redhat.com> dm-writecache: fix a quirk in statistics Mikulas Patocka <mpatocka(a)redhat.com> dm-writecache: report I/O error if flush failed Mikulas Patocka <mpatocka(a)redhat.com> dm: fix a bug in dm_accept_partial_bio Kaho Jiang <kj2864(a)nyu.edu> media: em28xx: fix double free in em28xx_alloc_urbs Ginger Li <ginger.jzllee(a)gmail.com> media: exynos4-is: Fix a race between s_stream(0) and the interrupt handler Guangshuo Li <lgs201920130244(a)gmail.com> media: rtl28xxu: fix SDR platform device leak Wentao Liang <vulab(a)iscas.ac.cn> media: pvrusb2: Fix USB parent device leak in class_dev_create() Guangshuo Li <lgs201920130244(a)gmail.com> media: tw686x: fix V4L2 device lifetime on probe failure Tianchu Chen <flynnnchen(a)tencent.com> staging: rtl8723bs: fix RX buffer OOB write from device-reported length Johan Hovold <johan(a)kernel.org> staging: greybus: uart: fix racy TIOCMIWAIT implementation Krzysztof Kozlowski <krzysztof.kozlowski(a)oss.qualcomm.com> drm/msm/hdmi_bridge: Correct poweroff/audio cleanup order in post_disable Krzysztof Kozlowski <krzysztof.kozlowski(a)oss.qualcomm.com> drm/msm/hdmi_phy: Cleanup after msm_hdmi_phy_resource_enable() failure Alexander Sverdlin <alexander.sverdlin(a)siemens.com> pwm: tiehrpwm: Clear period on disable to allow reconfiguration Ryusuke Konishi <konishi.ryusuke(a)gmail.com> nilfs2: clear dirty flag on bdev buffers on log write failure Runyu Xiao <runyu.xiao(a)seu.edu.cn> ASoC: pcm6240: do not free an unrequested IRQ Srish Srinivasan <ssrish(a)linux.ibm.com> pseries/plpks: clear SED key data after use Srish Srinivasan <ssrish(a)linux.ibm.com> pseries/plpks: clear signed update authentication buffer Srish Srinivasan <ssrish(a)linux.ibm.com> pseries/plpks: clear sensitive PLPKS buffers Srish Srinivasan <ssrish(a)linux.ibm.com> pseries/plpks: validate input to plpks_signed_update_var() Srish Srinivasan <ssrish(a)linux.ibm.com> pseries/plpks: fix error handling in plpks_read_var() Wentao Liang <vulab(a)iscas.ac.cn> clk: starfive: jh7110-isp: fix refcount leak in jh7110_ispcrg_probe() Takashi Iwai <tiwai(a)suse.de> ALSA: core: Check shutdown flag at D0 power-state, too Runyu Xiao <runyu.xiao(a)seu.edu.cn> m68k: dmasound: Keep the Q40 IRQ handler registered Runyu Xiao <runyu.xiao(a)seu.edu.cn> ALSA: sgio2audio: Only free successfully requested IRQs Hitesh Patel <hitesh(a)ebytelogic.com> media: qcom: camss: vfe: Fix VFE reset while another line is streaming Hitesh Patel <hitesh(a)ebytelogic.com> media: qcom: camss: vfe-17x: Fix write master buffer done being dropped Jiale Yao <yaojiale02(a)163.com> cxl/acpi: Check ACPI companion before use Ibrahim Hashimov <security(a)auditcode.ai> fs/ntfs3: fix integer overflow in find_log_rec() causing OOB read Lucas Costa <2000.costalucas(a)gmail.com> spi: bcm2835: fix device_node reference leak in bcm2835_spi_setup() Cheick Traore <cheick.traore-ext(a)st.com> iio: adc: stm32: fix minimum sampling time values Jiale Yao <yaojiale02(a)163.com> iio: accel: adxl380: reject devices without match data Jiale Yao <yaojiale02(a)163.com> iio: accel: adxl313: reject devices without match data Jiale Yao <yaojiale02(a)163.com> iio: adc: ti-adc128s052: validate SPI match data Jiale Yao <yaojiale02(a)163.com> iio: adc: mcp3911: reject devices without match data Jiale Yao <yaojiale02(a)163.com> iio: adc: max11205: reject devices without match data Jiale Yao <yaojiale02(a)163.com> iio: pressure: bmp280: validate SPI match data Jiale Yao <yaojiale02(a)163.com> iio: potentiometer: x9250: reject devices without match data Jiale Yao <yaojiale02(a)163.com> iio: frequency: adf4377: reject devices without match data Jiale Yao <yaojiale02(a)163.com> iio: dac: ad5755: validate SPI match data Wentao Liang <vulab(a)iscas.ac.cn> ASoC: codecs: wcd9335: Fix SLIM interface device leak in wcd9335_slim_status() Lu Baolu <baolu.lu(a)linux.intel.com> iommu/vt-d: Avoid out-of-range shift in qi_desc_dev_iotlb_pasid() David Heidelberg <david(a)ixit.cz> arm64: dts: qcom: sdm845-xiaomi-polaris: Extend the xbl_mem region David Heidelberg <david(a)ixit.cz> arm64: dts: qcom: sdm845-xiaomi-beryllium: Extend the xbl_mem region Piotr Kubik <piotr(a)kubik.pl> netfilter: ctnetlink: fix inverted IPv6 address match in dump filter Orgad Shaneh <orgads(a)gmail.com> MIPS: mm: do not write a huge TLB entry when the probe misses Runyu Xiao <runyu.xiao(a)seu.edu.cn> peci: npcm: Initialize state before requesting IRQ Runyu Xiao <runyu.xiao(a)seu.edu.cn> peci: aspeed: Initialize state before requesting IRQ Ma Ke <make_ruc2021(a)163.com> ASoC: wcd9335: Fix device reference leak in wcd9335_slim_status() David Cemin <dcemin(a)nvidia.com> ASoC: sdw_utils: clear stale RT711 device reference on exit Breno Leitao <leitao(a)debian.org> dcache: report a Tasks-RCU quiescent state in dentry_kill() Ricardo Neri <ricardo.neri-calderon(a)linux.intel.com> hwmon: (coretemp) Refresh the temperature on the first read Richard Weinberger <richard(a)nod.at> mtd: Call get_wunit() on the master partition Wentao Liang <vulab(a)iscas.ac.cn> mtd: mtdsuper: Fix MTD device reference leak in mtd_get_sb() Wentao Liang <vulab(a)iscas.ac.cn> mtd: maps: l440gx: Fix double put of the PM device in init_l440gx() Wentao Liang <vulab(a)iscas.ac.cn> mtd: maps: l440gx: Fix double put of the ISA bridge in init_l440gx() Wentao Liang <vulab(a)iscas.ac.cn> mtd: amd76xrom: Fix PCI device reference leak in amd76xrom_init_one() Orgad Shaneh <orgads(a)gmail.com> mtd: cfi_cmdset_0002: cap the write-buffer chunk at 256 bytes on an x8 device Myeonghun Pak <mhun512(a)gmail.com> mtd: maps: pci: balance PCI enable on cleanup Wentao Liang <vulab(a)iscas.ac.cn> mtd: rawnand: atmel: Fix MCK clock leak in atmel_nand_controller_init() Michael J. Ruhl <michael.j.ruhl(a)intel.com> platform/x86/intel/pmt: Block mmap when callback is present Ridham Khurana <khurana.ridham222(a)gmail.com> hwmon: (lm95245) Fix negative temperature conversion Wentao Liang <vulab(a)iscas.ac.cn> regulator: core: Fix coupled regulators reference leak on removal Aamir Ahmed <elb12345(a)hotmail.co.uk> clk: mvebu: ap-cpu-clk: Assign .num before accessing .hws Junjie Cao <junjie.cao(a)intel.com> ASoC: rt712-sdca-dmic: fix drvdata type in the gain controls Guangshuo Li <lgs201920130244(a)gmail.com> ASoC: Intel: atom: Fix platform device leak on probe failure Jiacheng Xu <stitch(a)zju.edu.cn> kobject: fix out-of-bounds access in kobject_action_type() Ryusuke Konishi <konishi.ryusuke(a)gmail.com> nilfs2: fix deadlock between nilfs_evict_inode() and find_inode() Tiezhu Yang <yangtiezhu(a)loongson.cn> perf loongarch: Fix discarded const qualifier in _get_field() Lin Wang <wanglin(a)open-hieco.net> hwmon: (k10temp) Stop matching Hygon devices David Heidelberg <david(a)ixit.cz> mfd: wcd934x: Fix NULL pointer dereference on IRQ probe deferral David Heidelberg <david(a)ixit.cz> mfd: wcd934x: set DMA mask on parent to silence "DMA mask not set" Hongyan Xu <getshell(a)seu.edu.cn> mfd: da903x: Cancel IRQ work during teardown Gabor Juhos <j4g8y7(a)gmail.com> clk: qcom: gcc-ipq5018: mark 'gpll0_main' clock as critical Francesco Dolcini <francesco.dolcini(a)toradex.com> arm64: dts: freescale: imx8mp-verdin-yavia: fix external GPIOs Guangshuo Li <lgs201920130244(a)gmail.com> media: atmel-isi: release unregistered video device on remove Wentao Liang <vulab(a)iscas.ac.cn> media: vpif_display: Fix i2c adapter reference leak in vpif_probe() Wentao Liang <vulab(a)iscas.ac.cn> media: vpif_capture: Fix i2c adapter reference leak in vpif_probe() Wentao Liang <vulab(a)iscas.ac.cn> media: au0828: Fix media device leak in au0828_usb_probe() Runyu Xiao <runyu.xiao(a)seu.edu.cn> media: adv7180: Initialize mutex before ancillary clients Myeonghun Pak <mhun512(a)gmail.com> media: tw68: balance PCI enable on cleanup Myeonghun Pak <mhun512(a)gmail.com> media: cx18: Disable PCI device on probe failure Myeonghun Pak <mhun512(a)gmail.com> media: go7007: unregister the I2C adapter on USB probe failure Myeonghun Pak <mhun512(a)gmail.com> media: marvell: manage the MMP camera clock provider Rohinthan P <rokinthanp03(a)gmail.com> media: v4l2-ctrls: do nothing if controls[0] == NULL in cluster functions Pengpeng Hou <hppiscas(a)163.com> media: cec: extron: clear response tail before dispatch Karl Mehltretter <kmehltretter(a)gmail.com> crypto: qat - zero the VF migration state buffer on save Weili Qian <qianweili(a)huawei.com> crypto: hisilicon/hpre - fix GFP flags for dma_alloc_coherent Weili Qian <qianweili(a)huawei.com> crypto: hisilicon/hpre - fix ECDH destination DMA mapping Weili Qian <qianweili(a)huawei.com> crypto: hisilicon/hpre - return -EOVERFLOW for small ECDH output buffer Weili Qian <qianweili(a)huawei.com> crypto: hisilicon/hpre - fix pointer dereference before length check Mohamad Raizudeen <raizudeen.kerneldev(a)gmail.com> crypto: amlogic - Fix IRQ handler return value and fallthrough logic Yuchao Zhang <ndaugoing(a)gmail.com> md: validate bblog_size when loading v1.x badblocks metadata Wentao Liang <vulab(a)iscas.ac.cn> EDAC/i10nm: Fix mdev reference leak in i10nm_get_ddr_munits() Aldo Ariel Panzardo <qwe.aldo(a)gmail.com> nilfs2: fix checkpoint root lifetime on sysfs errors Wentao Guan <guanwentao(a)uniontech.com> cpufreq/amd-pstate: Skip auto_sel write when it already matches the mode Wentao Liang <vulab(a)iscas.ac.cn> drm/mali-dp: Fix runtime PM leak in malidp_crtc_atomic_enable() Judith Mendez <jm(a)ti.com> arm64: dts: ti: k3-am62x-phyboard-lyra: Set SD clock pin as OUTPUT Judith Mendez <jm(a)ti.com> arm64: dts: ti: k3-am62-phycore-som: Set eMMC clock pin as OUTPUT Judith Mendez <jm(a)ti.com> arm64: dts: ti: k3-am62x-sk-common: Set SD clock pin as OUTPUT Judith Mendez <jm(a)ti.com> arm64: dts: ti: k3-am625-beagleplay: Set MMC clock pins as OUTPUT Judith Mendez <jm(a)ti.com> arm64: dts: ti: k3-am62-lp-sk: Set eMMC clock pins as OUTPUT Judith Mendez <jm(a)ti.com> arm64: dts: ti: k3-am62a-phycore-som: Set eMMC clock pin as OUTPUT Judith Mendez <jm(a)ti.com> arm64: dts: ti: k3-am62a7-sk: Set SD clock pin as OUTPUT Judith Mendez <jm(a)ti.com> arm64: dts: ti: k3-am62a7-sk: Set eMMC clock pin as OUTPUT Judith Mendez <jm(a)ti.com> arm64: dts: ti: k3-am62a: Fix MMC0_CLK register address Wentao Liang <vulab(a)iscas.ac.cn> ASoC: ti: davinci-mcasp: Fix runtime PM imbalance in __davinci_mcasp_set_clkdiv() Sean Young <sean(a)mess.org> media: meson-ir-tx: Prevent divide by zero in meson_irtx_prepare_pulse() Sean Young <sean(a)mess.org> media: ir_toy: Validate the maximum tx carrier Myeonghun Pak <mhun512(a)gmail.com> leds: ktd2692: Pass context to regulator cleanup Cong Nguyen <congnt264(a)gmail.com> staging: media: imx: csc-scaler: fix ipu_image_convert_run leak on queue error Hui Peng <benquike(a)gmail.com> seccomp: restore knotif->state when SECCOMP_ADDFD_FLAG_SEND is interrupted Oleg Nesterov <oleg(a)redhat.com> signalfd: don't dequeue the forced fatal signals Runyu Xiao <runyu.xiao(a)seu.edu.cn> PCI: pciehp: Make 'pciehp_poll_mode' parameter read-only Hui Peng <benquike(a)gmail.com> ata: libata-scsi: abort multi-sector pass-through commands when multi_count is 0 Tsz Shan Chan <tsz.chan.dev(a)gmail.com> iio: light: apds9306: fix default sampling frequency definition Jean-Baptiste Maneyrol <jean-baptiste.maneyrol(a)tdk.com> iio: imu: inv_icm42600: force accel odr change when switching power mode Shehryar Ahmad <shehryar.amd(a)gmail.com> iio: accel: adis16201: fix channel order for buffer mode Wentao Liang <vulab(a)iscas.ac.cn> regulator: rt6190: Fix runtime PM imbalance in rt6190_out_enable() Karl Mehltretter <kmehltretter(a)gmail.com> fpga: Fix of_fpga_mgr_get() reference in fpga_mgr_lock() docs Wentao Liang <vulab(a)iscas.ac.cn> ASoC: codecs: wm8994: Fix runtime PM leak in wm8994_mic_detect() Wentao Liang <vulab(a)iscas.ac.cn> regulator: core: Fix rdev reference leak in regulator_resolve_supply() Wentao Liang <vulab(a)iscas.ac.cn> regulator: core: Fix c_rdev reference leak in regulator_resolve_coupling() Shengming Hu <hu.shengming(a)zte.com.cn> cpufreq: conservative: Restrict deferred downscaling to low load Martin Wilck <martin.wilck(a)suse.com> md/raid5: validate payload size before calculating payload_len Cao Guanghui <caoguanghui(a)kylinos.cn> md/raid5: fix NULL pointer dereference in raid5_free_percpu Cao Guanghui <caoguanghui(a)kylinos.cn> md/raid5: track disks array size to fix extra_page leak on error paths Guangshuo Li <lgs201920130244(a)gmail.com> iio: adc: at91-sama5d2: disable autosuspend on remove Guangshuo Li <lgs201920130244(a)gmail.com> iio: accel: mma9553: disable autosuspend on remove Guangshuo Li <lgs201920130244(a)gmail.com> iio: accel: mma9551: disable autosuspend on remove Guangshuo Li <lgs201920130244(a)gmail.com> iio: accel: kxcjk-1013: Disable autosuspend on remove Wentao Liang <vulab(a)iscas.ac.cn> ASoC: arizona-jack: Fix runtime PM imbalance in arizona_start_hpdet_acc_id() Wentao Liang <vulab(a)iscas.ac.cn> ASoC: wm8994: Fix runtime PM imbalance in wm8994_component_probe() Liu Chao <liuc63(a)xiaopeng.com> usb: fotg210: validate endpoint index in ep0 handlers Karl Mehltretter <kmehltretter(a)gmail.com> crypto: atmel-tdes - sync output bounce buffer before DMA Yousef Alhouseen <alhouseenyousef(a)gmail.com> ntfs3: bound index head insertions by buffer capacity Muhammad Bilal <meatuni001(a)gmail.com> platform/x86: hp-bioscfg: fix slab-out-of-bounds write in hp_convert_hexstr_to_str() Guangshuo Li <lgs201920130244(a)gmail.com> media: i2c: alvium-csi2: balance runtime PM usage count on remove Niklas Cassel <cassel(a)kernel.org> ata: libata: Do not leave ata_host_stop() registered when activation fails Niklas Cassel <cassel(a)kernel.org> ata: libahci: Free the IRQs when activating a multi-IRQ host fails Niklas Cassel <cassel(a)kernel.org> ata: ahci_st: Assert the power down reset in the probe() error path Niklas Cassel <cassel(a)kernel.org> ata: ahci_st: Do not ignore errors when getting the reset controls Chao Yu <chao(a)kernel.org> f2fs: compress: fix to handle race between truncate and writeback Jiucheng Xu <jiucheng.xu(a)amlogic.com> f2fs: force out-place update for all writes on compressed file Matthew Sakai <msakai(a)redhat.com> dm vdo indexer: validate record page numbers better Matthew Sakai <msakai(a)redhat.com> dm vdo indexer: prevent delta list overflow on load Kyle Zeng <kylebot(a)openai.com> affs: validate blocks before freeing them Bradley Morgan <include(a)grrlz.net> PM: CPU: Restore synchronize_rcu() to cpu_pm_unregister_notifier() Runyu Xiao <runyu.xiao(a)seu.edu.cn> crypto: ccp - Initialize DBC ioctl mutex before registering device Karl Mehltretter <kmehltretter(a)gmail.com> lib/842: require a complete history block for repeat templates Karl Mehltretter <kmehltretter(a)gmail.com> lib/842: reject output overflows from index and short data Karl Mehltretter <kmehltretter(a)gmail.com> crypto: atmel-aes - fix AADLENR for standalone GHASH Karl Mehltretter <kmehltretter(a)gmail.com> crypto: atmel-tdes - zero-initialize device state Junrui Luo <moonafterrain(a)outlook.com> media: vicodec: zero-initialize stateful decoder heap buffers Fan Wu <fanwu01(a)zju.edu.cn> media: vivid: cancel svid ctrl work on release Juan Perdomo <jcperdomo100(a)gmail.com> media: cx231xx: preserve I2C transfer length Maxim Skokov <skokovmaksimevg(a)gmail.com> media: vivid: round the height down to the vertical subsampling factor Eric Kim <seohyun.kim(a)outlook.kr> sched/fair: Reset NUMA fault locality after scan period update Jean-Baptiste Maneyrol <jean-baptiste.maneyrol(a)tdk.com> iio: imu: inv_icm42600: fix odr change not caught in certain cases Shengzhuo Wei <me(a)cherr.cc> power: supply: bq27xxx: synchronize work cancellation on suspend Robin Snyders <robin(a)snyders.xyz> power: supply: qcom_smbx: notify battery overvoltage recovery Robin Snyders <robin(a)snyders.xyz> power: supply: qcom_smbx: fix float voltage selector Robin Snyders <robin(a)snyders.xyz> power: supply: qcom_smbx: test battery health status bits Robin Snyders <robin(a)snyders.xyz> power: supply: qcom_smbx: include base when petting watchdog Karl Mehltretter <kmehltretter(a)gmail.com> ACPI: pfr_update: zero-initialize capability query result Runyu Xiao <runyu.xiao(a)seu.edu.cn> dmaengine: altera-msgdma: initialize state before requesting IRQ Damon Ding <damon.ding(a)rock-chips.com> drm/bridge: analogix_dp: Restore mandatory samsung DP DT properties Fan Wu <fanwu01(a)zju.edu.cn> media: nuvoton: npcm-video: quiesce VCD IRQ before teardown Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> media: stv0900: bound DiSEqC reply length to msg[] size Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> media: stv090x: bound DiSEqC reply length to msg[] size Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> media: adv7604: avoid negative array index in log_status when cp_read fails James Hilliard <james.hilliard1(a)gmail.com> mtd: rawnand: sunxi: reject ECC maximization on small pages Balakrishnan Sambath <balakrishnan.s(a)microchip.com> media: microchip-isc: don't sleep in the clk .is_enabled callback Balakrishnan Sambath <balakrishnan.s(a)microchip.com> media: microchip-isc: fix PM runtime leak in AWB work handler Balakrishnan Sambath <balakrishnan.s(a)microchip.com> media: microchip-isc: do not touch WB registers when not streaming Balakrishnan Sambath <balakrishnan.s(a)microchip.com> media: microchip-isc: disable histogram and flush AWB work on teardown Balakrishnan Sambath <balakrishnan.s(a)microchip.com> media: microchip-isc: synchronize the IRQ before disabling clocks on stop Balakrishnan Sambath <balakrishnan.s(a)microchip.com> media: microchip-isc: fix awb_mutex and lock lifecycle Srinivas Kandagatla <srinivas.kandagatla(a)oss.qualcomm.com> ASoC: codecs: lpass-wsa-macro: use v2.5 Compander1 addresses on v2.5+ Xu Rao <raoxu(a)uniontech.com> media: m2m-deinterlace: fix default capture field Punnay Sharma <punnaysharma805(a)gmail.com> staging: media: av7110: fix sp8870 initialization failure state Punnay Sharma <punnaysharma805(a)gmail.com> staging: media: av7110: fix corrupted BER reporting in sp8870 Julian Braha <julianbraha(a)gmail.com> media: marvell-cam: fix unmet dependency for VIDEO_MMP_CAMERA Jeffin Philip <jeffinphilip14(a)gmail.com> media: vidtv: fix uaf in vidtv_bridge_on_new_pkts_avail Piyush Patle <piyushpatle228(a)gmail.com> media: vidtv: fix frontend reference leak on unbind Junrui Luo <moonafterrain(a)outlook.com> media: vicodec: make encoder CAPTURE dimensions read-only Junrui Luo <moonafterrain(a)outlook.com> media: vicodec: fix out-of-bounds write on under-rounded coded dimensions Younho Choi <gdool88(a)mju.ac.kr> media: vim2m: keep transaction buffer count stable while streaming Runyu Xiao <runyu.xiao(a)seu.edu.cn> media: saa7146: Initialize interrupt lock before requesting IRQ Shengzhuo Wei <me(a)cherr.cc> media: go7007: bound EZ-USB I2C transfers to the usb_buf size Linkai Gong <gonglinkai(a)kylinos.cn> media: i2c: tc358743: add missing color-space strings Ruoyu Wang <ruoyuw560(a)gmail.com> media: au0828: Free URBs when starting DVB streaming fails Takashi Sakamoto <o-takashi(a)sakamocchi.jp> firewire: core: fix source bus ID detection for AT context in big-endian systems Andi Shyti <andi.shyti(a)kernel.org> media: cx231xx: Fix cleanup path on failure Fan Wu <fanwu01(a)zju.edu.cn> media: cx231xx-audio: drain wq_trigger before audio fini Andrea Pesaresi <andreapesaresi82(a)gmail.com> arm64: dts: mediatek: mt7986: correct timer frequency Baolin Liu <liubaolin(a)kylinos.cn> isofs: fix Rock Ridge CE extent validation on multisession media Thorsten Blum <blum(a)kernel.org> thermal: intel: int340x: Fix temperature selection around 0 C Thorsten Blum <thorsten.blum(a)linux.dev> thermal: intel: powerclamp: Reject invalid window_size values Francesco Dolcini <francesco.dolcini(a)toradex.com> arm64: dts: ti: k3-am62-verdin: Set MMC clock pins as OUTPUT Amir Goldstein <amir73il(a)gmail.com> fs: make sure to call fsnotify_inoderemove() only once when inode is dead Karl Mehltretter <kmehltretter(a)gmail.com> fs_pin: publish pins with RCU list helpers Miquel Raynal <miquel.raynal(a)bootlin.com> mtd: spi-nor: Unprepare legacy controllers upon RWW wait interruption HyeongJun An <sammiee5311(a)gmail.com> mtd: spi-nor: sfdp: check the length of the SCCR map HyeongJun An <sammiee5311(a)gmail.com> mtd: spi-nor: sfdp: check the length of the xSPI Profile 1.0 table Serin Yeh <serin.yeh(a)intel.com> media: i2c: ov8856: fix debug message to report actual CSI-2 lane count Abdun Nihaal <nihaal(a)cse.iitm.ac.in> wifi: ath11k: Fix possible memory leak in ath11k_dp_srng_setup() Runyu Xiao <runyu.xiao(a)seu.edu.cn> hte: tegra194: Initialize slice locks before registering chip Yuan Chen <chenyuan(a)kylinos.cn> bpf: Fix queue/stack map u32 index overflow Yo'av Moshe <linux(a)yoavmoshe.com> ARM: imx: Fix suspend/resume crash with Clang CFI hanzhijian <hanzhijian1991(a)gmail.com> clk: mstar: msc313-mpll: fix off-by-one in clock array allocation Laxman Acharya Padhya <acharyalaxman8848(a)gmail.com> wifi: rtw89: cap firmware section_num before parsing Yi Cong <yicong(a)kylinos.cn> wifi: rtw89: 8851b: fix swapped DPK channel/bandwidth backup fields イムティヤズ <reza1234khan1234(a)gmail.com> wifi: rtw88: fix out-of-bounds CAM write when key table is full Justin Chen <justin.chen(a)broadcom.com> memory: brcmstb_dpfe: Bounds check DCPU-supplied MSG_ARG_COUNT Justin Chen <justin.chen(a)broadcom.com> memory: brcmstb_dpfe: Fix out-of-bounds access due to DCPU offset Sam Price <thesamprice(a)gmail.com> microblaze: preserve the MSR carry flags across signals Ramin Moussavi <ramin.moussavi(a)yacoub.de> microblaze: don't clobber r3/r4 restored by rt_sigreturn Ramin Moussavi <ramin.moussavi(a)yacoub.de> microblaze: reserve the ABI argument-home area in the signal frame HyeongJun An <sammiee5311(a)gmail.com> remoteproc: elf_loader: Bound the section header table Daehyeon Ko <4ncienth(a)gmail.com> ipc/mqueue: release notification resources during inode eviction Daehyeon Ko <4ncienth(a)gmail.com> aio: prevent eventfd/epoll recursion on poll Jan Kara <jack(a)suse.cz> udf: Make sure there's enough space for LVID implementation use field Karl Mehltretter <kmehltretter(a)gmail.com> microblaze: Fix MB_MANAGER build with older binutils Fan Wu <fanwu01(a)zju.edu.cn> media: imx-jpeg: finish the job on device_run() error paths Sean Young <sean(a)mess.org> media: ir-hix5hd2: Ensure rdev is setup before interrupts are enabled Sean Young <sean(a)mess.org> media: meson-ir-tx: Ensure probe error is propagated Sean Young <sean(a)mess.org> media: meson-ir-tx: Ensure rc_free_device() is called on unbind Sean Young <sean(a)mess.org> media: meson-ir-tx: Ensure clock is disabled on unbind Sean Young <sean(a)mess.org> media: sunxi-cir: Ensure no more interrupts can occur before free Sean Young <sean(a)mess.org> media: redrat3: Ensure all urbs are suspended Sean Young <sean(a)mess.org> media: redrat3: Ensure we don't read beyond the end of the packet Sean Young <sean(a)mess.org> media: streamzap: Add missing rc_unregister_device() Harry Wentland <harry.wentland(a)amd.com> drm/amd/display: Force GAMCOR for subsampled surfaces with PQ/Gamma22/HLG YuBiao Wang <YuBiao.Wang(a)amd.com> drm/amdgpu: recompute the dw estimate after allocating a new VM update job Marek Czernohous <marek(a)czernohous.de> drm/nouveau: don't dereference outp before checking it in nouveau_dp_irq Marek Czernohous <marek(a)czernohous.de> drm/nouveau: cancel the DP IRQ work before freeing the connector Marek Czernohous <marek(a)czernohous.de> drm/nouveau: disable the fence uevent work instead of just cancelling it Zhenhao Wan <whi4ed0g(a)gmail.com> drm/nouveau/svm: drain fault handler before freeing svmm Zhenhao Wan <whi4ed0g(a)gmail.com> drm/nouveau: reject zero-size notifier object allocation Sean Young <sean(a)mess.org> media: rc: Fix race between bpf(BPG_PROG_ATTACH) and device unregister Fan Wu <fanwu01(a)zju.edu.cn> scsi: dc395x: sync the waiting_timer before freeing the host Fan Wu <fanwu01(a)zju.edu.cn> media: s5p-mfc: use timer_shutdown_sync() for the self-rearming watchdog Vernon Yang <yanglincheng(a)kylinos.cn> mm: khugepaged: fix swap entry value to folio_pfn() Fan Wu <fanwu01(a)zju.edu.cn> ASoC: amd: ps: fix snd_acp63_remove() teardown ordering Yibo Tan <lhfff(a)tju.edu.cn> media: ipu-bridge: Fix use-after-free in IVSC error path Jérémy Jean <Jeremy.Jean(a)oss.cyber.gouv.fr> nvmet-auth: serialize access to DH-HMAC-CHAP state to fix UAF Marco Crivellari <marco.crivellari(a)suse.com> nvmet: replace use of system_wq with system_percpu_wq Weiming Shi <bestswngs(a)gmail.com> virtio_net: atomically disable rx mode work Ruide Cao <caoruide123(a)gmail.com> mptcp: hold MP_JOIN msk ref when cloning reqsk Zhao Li <enderaoelyther(a)gmail.com> wifi: mt76: mt7996: unlink TWT flow if the MCU rejects the agreement Tianchu Chen <flynnnchen(a)tencent.com> staging: rtl8723bs: fix protected RX frame validation in decrypt path Khasar Munkh-Erdene <02khasar(a)gmail.com> staging: rtl8723bs: fix spacing around operators in rtw_recv.c Sean Christopherson <seanjc(a)google.com> KVM: guest_memfd: Gracefully handle xarray errors when binding a memslot Josef Bacik <josef(a)toxicpanda.com> mm/hugetlb: fix use-after-free of a new anon folio Oscar Salvador <osalvador(a)suse.de> mm,hugetlb: sort out folio locking in the faulting path Oscar Salvador <osalvador(a)suse.de> mm,hugetlb: change mechanism to detect a COW on private mapping Peter Xu <peterx(a)redhat.com> mm/hugetlb: rename avoid_reserve to cow_from_owner Peter Xu <peterx(a)redhat.com> mm/hugetlb: stop using avoid_reserve flag in fork() Nirmoy Das <nirmoyd(a)nvidia.com> iommufd: Fix event queue release use-after-free Honglei Huang <honghuan(a)amd.com> drm/amdgpu: drop retry loop in amdgpu_hmm_range_get_pages Stefan Metzmacher <metze(a)samba.org> smb: smbdirect: fix buffer length underflow in RDMA transfers Chris Mason <mason(a)kernel.org> ovl: do not copy up a dentry that was removed Chris Mason <mason(a)kernel.org> ovl: hold a reference on the parent in readdir Chris Mason <mason(a)kernel.org> ovl: check that the parents of volatile/dirty are dirs Hyunwoo Kim <imv4bel(a)gmail.com> inet: reject unhashed sockets during established lookups Mike Rapoport (Microsoft) <rppt(a)kernel.org> x86/mm/pat: Use pr_warn() for early W^X warnings Sean Christopherson <seanjc(a)google.com> KVM: VMX: Formally define KVM's "0xdead" exit reason used for failed VM-Enter DaeMyung Kang <charsyam(a)gmail.com> ksmbd: fix named stream write and EOF handling DaeMyung Kang <charsyam(a)gmail.com> ksmbd: use the existing xattr name for a named stream Henry Hu <huhai(a)kylinos.cn> ksmbd: fix invalid pointer dereference when get_inode_acl() fails Ian Bridges <icb(a)fastmail.org> ksmbd: fix session reference leak on compounded SESSION_SETUP Mario Peter <mario.peter(a)leica-geosystems.com> driver core: take parent lock in async device attach Vincent Liu <vincent.liu(a)nutanix.com> driver core: Check drivers_autoprobe for all added devices Xiaoyao Li <xiaoyao.li(a)intel.com> KVM: VMX: Preserve negative return value in vmx_handle_exit() with bus lock detected Ian Bridges <icb(a)fastmail.org> ksmbd: fix use-after-free after a failed durable reconnect Dairui Zhang <zhangdairui(a)gmail.com> ksmbd: verify transform SessionId matches the decrypted header Ian Bridges <icb(a)fastmail.org> ksmbd: fix out-of-bounds read when padding the final compound response Namjae Jeon <linkinjeon(a)kernel.org> ksmbd: prevent share root removal through empty paths Namjae Jeon <linkinjeon(a)kernel.org> ksmbd: prevent stale data from being written by SMB2 WRITE requests Aamir Ahmed <elb12345(a)hotmail.co.uk> ksmbd: deny access for an empty DACL instead of granting the request Zikang Gao <2715417602(a)qq.com> smb: client: do not pass a NULL buf to is_oplock_break() Fredric Cover <fredric.cover.lkernel(a)gmail.com> smb: client: fix early procfs exposure race Zi Yan <ziy(a)nvidia.com> mm/rmap: don't discard lazyfree THPs at PMD level David Woodhouse <dwmw(a)amazon.co.uk> tun: Require CAP_NET_ADMIN to attach to an ownerless device Peter Griffin <peter.griffin(a)linaro.org> opp: fix use after free in _update_opp_table_clk() Pablo Neira Ayuso <pablo(a)netfilter.org> netfilter: conntrack: always lower timeout for non-closing RST packets Srinivasan Shanmugam <srinivasan.shanmugam(a)amd.com> drm/amdgpu/powerplay: Align get_tonga_state_array() header with prototype Sean Young <sean(a)mess.org> media: rc: Fix build failure with CONFIG_LIRC disabled Cheng Yongkang <teel4res(a)gmail.com> io_uring/timeout: count cancelled timeouts in cq_timeouts Chris Mason <mason(a)kernel.org> io_uring/sqpoll: don't wait for the thread to exit Chris Mason <mason(a)kernel.org> io_uring: free XArray nodes left by a failed store Chris Mason <mason(a)kernel.org> io_uring: charge tctx nodes and personalities Chris Mason <mason(a)kernel.org> io_uring/rsrc: charge buffer arrays and nodes to memcg Josef Bacik <josef(a)toxicpanda.com> io_uring/io-wq: no new workers once the exit has begun Daan De Meyer <daan(a)amutable.com> io_uring/net: don't retry a non-blocking connect() that fails with -EAGAIN Yichong Chen <chenyichong(a)uniontech.com> io_uring/net: keep recvmsg buffer select length within MAX_RW_COUNT Yichong Chen <chenyichong(a)uniontech.com> io_uring/kbuf: advance head when a pickup empties the buffer ring Chris Mason <mason(a)kernel.org> ovl: set OVL_WHITEOUTS before publishing the upper dir Jiale Yao <yaojiale02(a)163.com> HID: roccat: savu: reject short special reports Jiale Yao <yaojiale02(a)163.com> HID: roccat: ryos: reject short special reports Jiale Yao <yaojiale02(a)163.com> HID: roccat: pyra: reject short button reports Jiale Yao <yaojiale02(a)163.com> HID: roccat: kovaplus: reject short button reports Jiale Yao <yaojiale02(a)163.com> HID: roccat: konepure: reject short button reports Jiale Yao <yaojiale02(a)163.com> HID: roccat: koneplus: reject short button reports Jiale Yao <yaojiale02(a)163.com> HID: roccat: isku: reject short button reports Gabor Tanz <gabor.tanz(a)gmail.com> HID: quirks: Always poll the Anne Pro 2 with product ID a292 Jiale Yao <yaojiale02(a)163.com> HID: pxrc: reject short input reports Jiale Yao <yaojiale02(a)163.com> HID: prodikeys: validate fixed-format MIDI reports Lorenzo Stoakes (ARM) <ljs(a)kernel.org> HID: picoLCD: check for fb_deferred_io_init() error Jiale Yao <yaojiale02(a)163.com> HID: mcp2221: validate response report length Jiale Yao <yaojiale02(a)163.com> HID: mcp2200: validate READ_ALL response length Jiale Yao <yaojiale02(a)163.com> HID: logitech-dj: validate unnumbered keyboard reports Jiale Yao <yaojiale02(a)163.com> HID: elo: reject short touchscreen reports Jiale Yao <yaojiale02(a)163.com> HID: cp2112: validate response report lengths Jiale Yao <yaojiale02(a)163.com> HID: cougar: reject short special-key reports Alan Stern <stern(a)rowland.harvard.edu> HID: core: Fix out-of-bounds left shift by 32 in s32ton() Basavaraj Natikar <Basavaraj.Natikar(a)amd.com> HID: amd_sfh: Use report type from request node Basavaraj Natikar <Basavaraj.Natikar(a)amd.com> HID: amd_sfh: Remove unsupported motion-state field from accelerometer report Jiale Yao <yaojiale02(a)163.com> HID: zydacron: validate key report length Amit Machhiwal <amachhiw(a)linux.ibm.com> KVM: PPC: Fix get_d_signext() 12-bit displacement for paired-single D-form Amit Machhiwal <amachhiw(a)linux.ibm.com> KVM: PPC: Book3S HV: Add preempt_disable() around virtual-mode HPTE bit-lock users Sean Christopherson <seanjc(a)google.com> KVM: x86: Zero reserved synic flags when delivering message to avoid stack leak Chengfeng Ye <nicoyip.dev(a)gmail.com> KVM: x86: Take SRCU in kvm_zap_gfn_range() Loc Nguyen <loc(a)ryzome.com> KVM: x86: Request event processing for exception VM-Exits Sean Christopherson <seanjc(a)google.com> KVM: x86: Preserve DR6.BLD (Bus Lock Detect) when delivering #DB payload David Woodhouse <dwmw(a)amazon.co.uk> KVM: x86/xen: Take kvm->srcu in __kvm_xen_has_interrupt() David Woodhouse <dwmw(a)amazon.co.uk> KVM: x86/xen: Enforce 4-byte alignment of vcpu_info registration Sean Christopherson <seanjc(a)google.com> KVM: x86/mmu: Bug the VM if KVM calcs a CPU role with EFER.LMA=1 && CR4.PAE=0 Sean Christopherson <seanjc(a)google.com> KVM: x86/mmu: Bug the VM if KVM attempts to walk more levels than the MMU has Sean Christopherson <seanjc(a)google.com> KVM: Use goto to handle errors during memslot preparation Sean Christopherson <seanjc(a)google.com> KVM: nSVM: Ignore EFER.LMA if EFER.LME=0 when preparing L2 state Yosry Ahmed <yosry(a)kernel.org> KVM: SVM: Trigger new ASID allocation in both VMCBs on pCPU switch Mike Rapoport (Microsoft) <rppt(a)kernel.org> x86/mm/pat: Fix effective RW computation in lookup_address_in_pgd_attr() David Howells <dhowells(a)redhat.com> rxrpc: Fix return in rxrpc_recvmsg_data() for service calls David Howells <dhowells(a)redhat.com> rxrpc: Fix double IRQ enablement Chuck Lever <chuck.lever(a)oracle.com> SUNRPC: Treat every TLS error alert as fatal Ameer Hamza <ameer.hamza(a)truenas.com> sunrpc: treat empty auth.unix.gid replies as negative entries Zhiling Zou <zhilinz(a)nebusec.ai> SUNRPC: trace an accepted transport before publishing it Chuck Lever <chuck.lever(a)oracle.com> SUNRPC: Resume receiving after a TLS control record Chuck Lever <chuck.lever(a)oracle.com> SUNRPC: Reject a TLS alert record that is not two octets Chuck Lever <chuck.lever(a)oracle.com> SUNRPC: Reject a socket that already has an svc_sock attached Chris Mason <clm(a)meta.com> sunrpc: pin gss module across auth_domain RCU free Jeff Layton <jlayton(a)kernel.org> SUNRPC: keep the first error in svc_register() Jérémy Jean <Jeremy.Jean(a)oss.cyber.gouv.fr> SUNRPC: fix oversized GSS proxy token copy Chuck Lever <chuck.lever(a)oracle.com> SUNRPC: Do not credit control-record octets to the RPC stream Chuck Lever <chuck.lever(a)oracle.com> SUNRPC: Copy the deferred RPC Call from the head buffer Aldo Ariel Panzardo <qwe.aldo(a)gmail.com> nfsd: zero NFSv4 COMPOUND tag padding Jeff Layton <jlayton(a)kernel.org> NFSD: validate transport name in listener_set before serv creation Chuck Lever <chuck.lever(a)oracle.com> NFSD: Set nn->cld_net before registering the cld pipe Chuck Lever <chuck.lever(a)oracle.com> NFSD: Return NFSERR_ISDIR for NFSv2 READ and WRITE on a non-regular file Chuck Lever <chuck.lever(a)oracle.com> NFSD: Resolve the recall-any mask names in the trace format Chuck Lever <chuck.lever(a)oracle.com> NFSD: Reject an oversized principal hash from nfsdcld Aldo Ariel Panzardo <qwe.aldo(a)gmail.com> nfsd: propagate SETXATTR value decode errors Jérémy Jean <Jeremy.Jean(a)oss.cyber.gouv.fr> nfsd: preflight SEQUENCE replies before accepting a slot Chuck Lever <chuck.lever(a)oracle.com> NFSD: map fh_verify() status codes for NFS_ACLv3 replies NeilBrown <neil(a)brown.name> nfsd: honour client-provided attributes for NFS4_CREATE_EXCLUSIVE4_1 Cen Zhang (Microsoft Security FORGE Labs) <blbllhy(a)gmail.com> nfsd: hold cl_lock in client_has_openowners() Chuck Lever <chuck.lever(a)oracle.com> NFSD: Fix out-of-bounds read in the rpc_status dump Wentao Liang <vulab(a)iscas.ac.cn> nfsd: Fix id-to-name cache entry leak in idtoname_parse() Chuck Lever <chuck.lever(a)oracle.com> NFSD: Fail a pool_threads read whose reply does not fit Ameer Hamza <ameer.hamza(a)truenas.com> nfsd: don't modify a session slot when replaying its cached reply Chuck Lever <chuck.lever(a)oracle.com> NFSD: Don't complete a cld upcall the daemon has not read Chuck Lever <chuck.lever(a)oracle.com> NFSD: Do not send CB_RECALL_ANY to NFSv4.0 clients Aldo Ariel Panzardo <qwe.aldo(a)gmail.com> NFSD: copy SETXATTR data from all XDR buffer segments Aldo Ariel Panzardo <qwe.aldo(a)gmail.com> nfsd: clear XDR padding in GETXATTR replies Jeff Layton <jlayton(a)kernel.org> NFSD: cap the number of listeners accepted in listener_set Benjamin Coddington <bcodding(a)hammerspace.com> NFSv4/flexfiles: fail I/O to the data server once a lock is lost Benjamin Coddington <ben.coddington(a)hammerspace.com> NFSv4/filelayout: Anchor page coalescing on pattern_offset Benjamin Coddington <ben.coddington(a)hammerspace.com> NFSv4.1/pnfs: suspend pNFS on NFS4ERR_TOOSMALL from LAYOUTGET Chuck Lever <chuck.lever(a)oracle.com> pnfs/blocklayout: Complete a device upcall when the pipe is closed Chuck Lever <chuck.lever(a)oracle.com> pnfs/blocklayout: Complete a device upcall only on its own reply Benjamin Coddington <ben.coddington(a)hammerspace.com> pNFS: Fix CB_NOTIFY_DEVICEID CHANGE to consume ndc_immediate Ratnaker Gautam <ratnaker.gautam(a)kuleuven.be> smb: client: validate NT transaction response layout and offsets Dominik Maier <dmnk(a)google.com> smb: client: fix slab-out-of-bounds write in id_mode_to_cifs_acl() Abdifatah Suruur <suruurism(a)gmail.com> smb: client: fix fiemap wild read on empty truncated response Luxiao Xu <rakukuip(a)gmail.com> smb: client: fix buffer overflow in SMB2_tcon() Paulo Alcantara <pc(a)manguebit.org> smb: client: don't resurrect an exiting tcon from cached dir workers VeroFess <coderzeng(a)hotmail.com> smb: server: size directory name conversion buffer correctly Darrick J. Wong <djwong(a)kernel.org> xfs: range-check bc_levels array access in scrub tracepoints Darrick J. Wong <djwong(a)kernel.org> xfs: propagate errors while checking null siblings Darrick J. Wong <djwong(a)kernel.org> xfs: opportunistically skip btree block checks Darrick J. Wong <djwong(a)kernel.org> xfs: only written file data blocks can be shared Darrick J. Wong <djwong(a)kernel.org> xfs: never reset the default quota timer Darrick J. Wong <djwong(a)kernel.org> xfs: fix data fork block count check in xrep_inode_blockcounts Darrick J. Wong <djwong(a)kernel.org> xfs: fix correction of unwritten extents in quota file data fork Darrick J. Wong <djwong(a)kernel.org> xfs: don't subtract excess usage twice when computing agf_btreeblks Darrick J. Wong <djwong(a)kernel.org> xfs: don't rescan ifree and icount when frozen Darrick J. Wong <djwong(a)kernel.org> xfs: don't overrun incore inode when cleaning attr forks Darrick J. Wong <djwong(a)kernel.org> xfs: don't clear COWEXTSIZE on directories on reflink filesystems Darrick J. Wong <djwong(a)kernel.org> xfs: clear set[ug]id mode bits when zapping attr fork Darrick J. Wong <djwong(a)kernel.org> xfs: clarify various parts of the bitmap API Darrick J. Wong <djwong(a)kernel.org> xfs: check for termination during rmap btree walk Darrick J. Wong <djwong(a)kernel.org> xfs: check for fragments when full-extent sharing matches Aldo Ariel Panzardo <qwe.aldo(a)gmail.com> xfs: bound inode fork length against the fork size during log recovery Aldo Ariel Panzardo <qwe.aldo(a)gmail.com> xfs: bound da-node entry count against the correct geometry Darrick J. Wong <djwong(a)kernel.org> xfs: always zero the whole shortform header when zeroing attr fork Darrick J. Wong <djwong(a)kernel.org> xfs: always report scrub errors in tracepoints Darrick J. Wong <djwong(a)kernel.org> xfs: always report inode repair setup failures Darrick J. Wong <djwong(a)kernel.org> xfs: always forget cached ACLs if the attr fork swap succeeds Darrick J. Wong <djwong(a)kernel.org> xfs: abort directory tree repair whenever dl->aborted is set Aldo Ariel Panzardo <qwe.aldo(a)gmail.com> xfs: reject remote xattr entries with an out-of-range value length Aldo Ariel Panzardo <qwe.aldo(a)gmail.com> xfs: reject out-of-range attribute value lengths in xfs_attr_copy_value Darrick J. Wong <djwong(a)kernel.org> xfs: reject absurdly large xattr value lengths in xchk_xattr_actor Aleksandr Nogikh <nogikh(a)google.com> media: usbtv: fix null-pointer dereference on disconnect Johan Hovold <johan(a)kernel.org> media: usbtv: drop redundant device reference Al Viro <viro(a)zeniv.linux.org.uk> ufs: fix ufs_read_cylinder() failure handling Jean Delvare <jdelvare(a)suse.de> EDAC/mc: Really fix error path ordering in edac_mc_alloc() Joseph Qi <joseph.qi(a)linux.alibaba.com> ksmbd: fix breaking_cnt leak on early return in oplock_break() Yongjun Gwon <d3bugee(a)gmail.com> ksmbd: serialize directory emptiness checks with readdir Takashi Iwai <tiwai(a)suse.de> ALSA: usb-audio: Use the right limit for PCM OOB check Darrick J. Wong <djwong(a)kernel.org> xfs: fix xchk_stats_estimate_bufsize to allow for the trailing null Darrick J. Wong <djwong(a)kernel.org> xfs: adjust checks for cross-AG reaping issues Darrick J. Wong <djwong(a)kernel.org> xfs: jump out of xchk_bmap_check_rmap if fatal signals Darrick J. Wong <djwong(a)kernel.org> xfs: mark overfull dabtree node blocks as corrupt Darrick J. Wong <djwong(a)kernel.org> xfs: check fork type against dabtree block magic number Darrick J. Wong <djwong(a)kernel.org> xfs: abort dirtree repair if the live update hook dies Darrick J. Wong <djwong(a)kernel.org> xfs: fix revalidation of xchk_dquot_iter cached mappings Darrick J. Wong <djwong(a)kernel.org> xfs: bail out of directory tree repairs on error Darrick J. Wong <djwong(a)kernel.org> xfs: assign an owner to scrub_stats_fops Darrick J. Wong <djwong(a)kernel.org> xfs: allow softlimit with no hardlimit in quota scrub Darrick J. Wong <djwong(a)kernel.org> xfs: fix lost errno returned from xfarray_foliosort Darrick J. Wong <djwong(a)kernel.org> xfs: don't repair fs summary counters with garbage Darrick J. Wong <djwong(a)kernel.org> xfs: fix skipped inode mask handling in iscan Darrick J. Wong <djwong(a)kernel.org> xfs: don't proceed with xattr repair if the live update fails Darrick J. Wong <djwong(a)kernel.org> xfs: don't fix the directory tree if live update fails Darrick J. Wong <djwong(a)kernel.org> xfs: don't pass iget failures up when marking ondisk inodes Darrick J. Wong <djwong(a)kernel.org> xfs: always reset incore attr fork buffer when resetting fork Darrick J. Wong <djwong(a)kernel.org> xfs: fix inode btree repair when a cluster is larger than a chunk Darrick J. Wong <djwong(a)kernel.org> xfs: actually report corrupt xattrs as XFAIL during cross-referencing Darrick J. Wong <djwong(a)kernel.org> xfs: fix buffer overflow in corrupt inline attr structure Darrick J. Wong <djwong(a)kernel.org> xfs: fix unnecessary dapos truncation in xchk_dir_walk Darrick J. Wong <djwong(a)kernel.org> xfs: online quotacheck must dirty dquot if enforcement adjustments needed Darrick J. Wong <djwong(a)kernel.org> xfs: fix buffer overruns in xfs_ioc_attr_list Darrick J. Wong <djwong(a)kernel.org> xfs: fix missing xfs_qm_adjust_dqlimits call in quotacheck repair Darrick J. Wong <djwong(a)kernel.org> xfs: fix xfs_rename_space_res for non-pptr filesystems Darrick J. Wong <djwong(a)kernel.org> xfs: fix ondisk symlink target validation in xrep_dinode_check_dfork Darrick J. Wong <djwong(a)kernel.org> xfs: compute the correct fdblocks/frextents for repair when they're negative Darrick J. Wong <djwong(a)kernel.org> xfs: clear the symlink zapped flag if inline symlink is ok Amir Goldstein <amir73il(a)gmail.com> ovl: skip copy up of empty security.capability Chris Mason <mason(a)kernel.org> ovl: set the revalidate flags after d_instantiate() Chris Mason <mason(a)kernel.org> ovl: read the nlink xattr of every indexed non-dir Amir Goldstein <amir73il(a)gmail.com> ovl: fortify ovl_copy_xattr() against underlying layer modifications Chris Mason <mason(a)kernel.org> ovl: fix a torn path in ovl_get_redirect() Chris Mason <mason(a)kernel.org> ovl: do not copy up an xattr value that was never read Chris Mason <mason(a)kernel.org> ovl: always encode the origin fh when index is enabled Chris Mason <mason(a)kernel.org> ovl: use the pinned upper dir in ovl_fix_origin() Chris Mason <mason(a)kernel.org> ovl: take a snapshot of the name for copy up Weiming Shi <bestswngs(a)gmail.com> smb: client: stop processing a read response after a receive error Diego Oliva <diego(a)bynar.io> smb: client: fix OOB last_entry pointer from unbounded LastNameOffset Cen Zhang <zzzccc427(a)gmail.com> ocfs2: snapshot dentry names in file and setattr traces Cen Zhang <zzzccc427(a)gmail.com> ocfs2: pin refcount trees before dropping the lookup lock Jiaming Zhang <r772577952(a)gmail.com> ocfs2: fix chunk number of the first chunk in a local quota file Cen Zhang <zzzccc427(a)gmail.com> ocfs2: cancel quota sync work before freeing quota info Joseph Qi <joseph.qi(a)linux.alibaba.com> ocfs2/dlm: hold the lookup reference across convert AST enqueue Cen Zhang <zzzccc427(a)gmail.com> ocfs2/dlm: hold a lock reference across grant AST enqueue Cen Zhang <zzzccc427(a)gmail.com> ocfs2/heartbeat: unlink live slots when their node is missing Sean Young <sean(a)mess.org> media: rc: Fix ABBA deadlock by making locks more fine grained Sean Young <sean(a)mess.org> media: rc: Fix use after free in bpf progs Sean Young <sean(a)mess.org> media: rc: After rc_unregister_device() timers can be re-armed Sean Young <sean(a)mess.org> media: rc: Use after free in ir_raw_event_handle() Sean Young <sean(a)mess.org> media: rc: mce_kbd: Fix inconsistent locking of keylock Weigang He <geoffreyhe2(a)gmail.com> media: rc: fintek-cir: process a full RX buffer instead of overflowing it Sean Young <sean(a)mess.org> media: rc: Ensure registered is cleared in error path Sean Young <sean(a)mess.org> media: rc: Ensure that rc_unregister_device() does not free input device Janne Grunau <j(a)jannau.net> nvmem: core: Fix OOB read for bit offsets of more than one byte Myeonghun Pak <mhun512(a)gmail.com> power: supply: sbs-battery: disable polling before supply teardown Bryan O'Donoghue <bryan.odonoghue(a)linaro.org> phy: core: Fix race-condition between _of_phy_get() and try_module_get() Nickolai Zeldovich <nickolai(a)csail.mit.edu> resource: report a devm_request_resource() conflict under the lock YANXIN LI <fadouse(a)pm.me> ufs: use u64 for directory size in ufs_last_byte Nguyen Quang Le Kien <khiemtranzo532001(a)gmail.com> usb: gadget: fix refcount underflow in gadgetfs_bind() error path Rosen Penev <rosenp(a)gmail.com> wifi: ath9k: delete channel-context timers on deinit Yuchao Zhang <ndaugoing(a)gmail.com> xen-blkfront: unbind irq before tearing down ring and shadow requests Igor Putko <igorpetindev(a)gmail.com> serial: core: shut down initialized port on removal Vernon Yang <yanglincheng(a)kylinos.cn> mm: khugepaged: fix folio is used after folio_put/unlock() Imre Kaloz <kaloz(a)kernel.org> mm/slab: sample slab_state once in kmem_cache_destroy() Rik van Riel <riel(a)surriel.com> media: redrat3: fix UAF in probe error path leaving rc device registered Balakrishnan Sambath <balakrishnan.s(a)microchip.com> media: microchip-isc: take a reference on the parsed endpoints Cong Nguyen <congnt264(a)gmail.com> media: microchip-csi2dc: fix async notifier leak on probe error path Fan Wu <fanwu01(a)zju.edu.cn> media: marvell: mcam: stop DMA and cancel s_bh_work before freeing DMA buffers Fan Wu <fanwu01(a)zju.edu.cn> media: imx-jpeg: cancel timeout worker when streaming stops Shuangpeng Bai <shuangpeng.kernel(a)gmail.com> media: gspca: use vb2_video_unregister_device() on disconnect Myeonghun Pak <mhun512(a)gmail.com> media: cx23885: unregister DVB bus when SP2 CI setup fails Amit Machhiwal <amachhiw(a)linux.ibm.com> KVM: PPC: Book3S HV: Add SRCU protection for virtual-mode HPT hcalls Kyle Zeng <kylebot(a)openai.com> io_uring/io-wq: save worker type before dropping its reference Yousef Alhouseen <alhouseenyousef(a)gmail.com> HID: hiddev: keep state alive through disconnect unlock Richard Patel <ripatel(a)wii.dev> genirq: Move interrupt thread exit_work object to irqaction Richard Patel <ripatel(a)wii.dev> genirq: Defer kfree(irqaction) until irq_thread_dtor() finishes Ngoc Quy <ngocquy0700(a)gmail.com> fs/proc/task_mmu: pin mm_users in do_pagemap_scan() Xiang Mei <xmei5(a)asu.edu> fbdev: udlfb: don't rebuild the mode list while the framebuffer is in use Yibo Tan <lhfff(a)tju.edu.cn> fbdev: atmel_lcdfb: Prevent FIFO work after removal Osama Abdelkader <osama.abdelkader(a)gmail.com> drm/panthor: Fix TOCTOU race between GROUP_REGISTERED check and erase Bui Viet Dung <dungvn2345(a)gmail.com> Bluetooth: hci_vhci: Pin module for debugfs file operations Sung Byeongchan <tjdqudcks0424(a)naver.com> ALSA: pcmtest: handle multiple wraps in random capture fill Takashi Iwai <tiwai(a)suse.de> ALSA: control: Fix UAF in snd_ctl_elem_add() on card disconnect Andreas Hindborg <a.hindborg(a)kernel.org> rust: block: fix `Send` bound for `GenDisk` Miguel Ojeda <ojeda(a)kernel.org> objtool/rust: add one more `noreturn` Rust function for Rust 1.101.0 Karl Mehltretter <kmehltretter(a)gmail.com> klist: avoid accesses after waking klist_remove() Ping Cheng <ping.cheng(a)wacom.com> HID: wacom: Write shared touch initial status only once Ping Cheng <ping.cheng(a)wacom.com> HID: wacom: Setup SW_MUTE_DEVICE according to the order of input registration Lee Jones <lee(a)kernel.org> HID: wacom: Redesign shared sibling data lifecycle Lee Jones <lee(a)kernel.org> HID: wacom: Fix Use-After-Free in wacom_bamboo_pad Lee Jones <lee(a)kernel.org> HID: wacom: Fix Use-After-Free in wacom_intuos_pad Lee Jones <lee(a)kernel.org> HID: wacom: Advertise SW_MUTE_DEVICE capability prior to registration Lee Jones <lee(a)kernel.org> HID: wacom: Use hdev->product in wacom_setup_touch_input_capabilities Harald Freudenberger <freude(a)linux.ibm.com> s390/zcrypt: Fix out-of-bounds ptr advance in cca_query_crypto_facility() Heiko Carstens <hca(a)linux.ibm.com> s390/signal: Fix incorrect return address in signal frame Heiko Carstens <hca(a)linux.ibm.com> s390/probes: Fix wrong opcode for cgrb fixup Sumanth Korikkar <sumanthk(a)linux.ibm.com> s390/cpum_cf: Check session mask before cpu offline Niklas Cassel <cassel(a)kernel.org> ata: sata_fsl: Fix use-after-free of host_priv on probe() failure Binbin Deng <18983559317(a)163.com> apparmor: fix a use-after-free in aa_lookupn_ns() David Hildenbrand (Arm) <david(a)kernel.org> mm/hugetlb: fix use-after-free in hugetlb_mfill_atomic_pte() Deepanshu Kartikey <kartikey406(a)gmail.com> media: imon: fix use-after-free in display_close via dev_dbg Anuj Bolewar <bolewara(a)gmail.com> media: hackrf: fix use-after-free in hackrf_alloc_urbs() error path Pei Xiao <xiaopei01(a)kylinos.cn> media: cx23885: Fix use-after-free in cx23885_finidev due to race condition Fan Wu <fanwu01(a)zju.edu.cn> media: au0828: fix use-after-free in bulk_timeout timer on disconnect Chuck Lever <chuck.lever(a)oracle.com> lockd: Fix use-after-free in nlmsvc_retry_blocked Günther Noack <gnoack(a)google.com> landlock: Fix superblock use-after-free in release_inode() Yehyeong Lee <yhlee(a)isslab.korea.ac.kr> nvmet-fc: fix use-after-free in nvmet_fc_ls_create_connection() James Kim <james010kim(a)gmail.com> rapidio: mport_cdev: fix use-after-free in mport_mm_close() Henry Martin <bsdhenrymartin(a)gmail.com> smb: client: fix use-after-free in cifs_ses_add_channel() Diego Oliva <diego(a)bynar.io> smb: client: fix use-after-free infoleak via the readdir resume name Zijing Yin <yzjaurora(a)gmail.com> SUNRPC: fix netns use-after-free in write_gssp() Andreas Wendleder <gonsolo(a)gmail.com> wifi: b43: fix use-after-free in b43_bcma_remove() Li RongQing <lirongqing(a)baidu.com> x86/ioperm: Prevent NULL dereference on theoretical missing IO bitmap Kevin Cheng <chengkev(a)google.com> KVM: VMX: Synthesize nested EPT violation GVA_IS_VALID/GVA_TRANSLATED bits Sean Christopherson <seanjc(a)google.com> KVM: x86: Tell ->inject_page_fault() whether or a fault came from hardware Paolo Bonzini <pbonzini(a)redhat.com> KVM: x86/mmu: pass PFERR_GUEST_PAGE/FINAL_MASK to kvm_translate_gpa Christoph Zwerschke <cito(a)online.de> Revert "Bluetooth: btusb: Add ASUS USB-BT540 for Realtek 8761CU" Christoph Zwerschke <cito(a)online.de> Revert "Bluetooth: btusb: Add ASUS USB-BT600 for Realtek 8761CU" Eric Dumazet <edumazet(a)kernel.org> vlan: restore HW VLAN tag insertion with reorder_hdr off Kuniyuki Iwashima <kuniyu(a)google.com> tcp: Fix potential UAF in reqsk_timer_handler(). Namjae Jeon <linkinjeon(a)kernel.org> ksmbd: validate security descriptor offsets before pointer arithmetic Karl Mehltretter <kmehltretter(a)gmail.com> ksmbd: use u8 for SMB2 oplock level values DaeMyung Kang <charsyam(a)gmail.com> ksmbd: return end of file for reads past a named stream's data Abdifatah Suruur <suruurism(a)gmail.com> ksmbd: reserve space for the UTF-16 terminator in stream info DaeMyung Kang <charsyam(a)gmail.com> ksmbd: preserve unreadable named streams on open Jan Koester <j.koester(a)act-marketing.de> ksmbd: ignore network devices of other namespaces Cen Zhang (Microsoft) <cenzhang(a)linux.microsoft.com> ksmbd: fix parent dentry lifetime in directory enumeration Giorgi Kobakhia <gkobakhi(a)asu.edu> ksmbd: fix overflow in dacloffset bounds check in build_sec_desc() Dairui Zhang <zhangdairui(a)gmail.com> ksmbd: fix OOB read and cross-share confusion in ksmbd_validate_name_reconnect() Namjae Jeon <linkinjeon(a)kernel.org> ksmbd: fix extended session security negotiation for raw NTLMSSP DaeMyung Kang <charsyam(a)gmail.com> ksmbd: avoid restoring only in-memory EOF after allocation change Michail Andreas Michalopoulos <mike.michalo(a)gmail.com> ksmbd: accept share config responses from ksmbd-tools before 3.5.3 David Heidelberg <david(a)ixit.cz> backlight: qcom-wled: Fix WLED3 brightness register stride David Heidelberg <david(a)ixit.cz> backlight: qcom-wled: Fix unbalanced OVP IRQ enable at probe David Heidelberg <david(a)ixit.cz> backlight: qcom-wled: Fix NULL pointer dereference in wled_remove() Myeonghun Pak <mhun512(a)gmail.com> backlight: lm3630a: Cancel delayed work before destroying workqueue Kameron Carr <kameroncarr(a)linux.microsoft.com> Drivers: hv: vmbus: Bounds check the shared ring buffer indices Johan Hovold <johan(a)kernel.org> driver core: fix parent lock use-after-free on USB disconnect Josef Bacik <josef(a)toxicpanda.com> driver core: Limit the messages on a refused uevent Johan Hovold <johan(a)kernel.org> driver core: take parent lock on deferred probe Jamal Hadi Salim <jhs(a)mojatatu.com> net/sched: act_ife: do not consume the inner header on egress Antonio Quartulli <antonio(a)mandelbit.com> net/sched: fix packet reordering on requeue owen kwan <owen(a)verialabs.com> net/sched: sch_teql: fix use-after-free on lower qdisc drop Jamal Hadi Salim <jhs(a)mojatatu.com> net/sched: sch_teql: fix slaves_lock IRQ deadlock Yuhang Zheng <z1652074432(a)gmail.com> net/sched: cls_flower: avoid stale mask references after delete Jamal Hadi Salim <jhs(a)mojatatu.com> net/sched: cls_bpf: accept dev-bound programs on shared blocks Hari Mishal <harimishal1(a)gmail.com> drm/amd/display: guard dc_sink dereferences in MST mode validation Jiakai Xu <xujiakai2025(a)iscas.ac.cn> RISC-V: KVM: Fix double-free of sdata in kvm_pmu_clear_snapshot_area() Timur Kristóf <timur.kristof(a)gmail.com> drm/amdgpu/uvd3.1: Fix checking whether UVD firmware keyselect was already set Donggeun Yoo <donggeunyoo.kernel(a)gmail.com> tracing: Fix NULL dereference when copying keys for a field variable Pengpeng Hou <pengpeng(a)iscas.ac.cn> tracing: Bound histogram expression strings with seq_buf Pengpeng Hou <pengpeng(a)iscas.ac.cn> tracing: Return ERR_PTR() from expr_str() Pengpeng Hou <pengpeng(a)iscas.ac.cn> tracing: Use __free() for expr_str() buffer Tom Zanussi <zanussi(a)kernel.org> tracing: Fix fully-qualified variable reference printing in histograms Christian Brauner <brauner(a)kernel.org> ntfs3: free replaced mount options after a grace period Christian Brauner <brauner(a)kernel.org> ipc: drop the mqueue mount with kern_unmount() on setup failure Vlad Kulikov <vlad.kulikov.c(a)gmail.com> ipc: create_ipc_ns: drop mqueue mount on sysctl setup failure Dibin Moolakadan Subrahmanian <dibin.moolakadan.subrahmanian(a)intel.com> drm/i915/dmc: Add sanity check for DMC load address Bihaan Sen <stevewholikesthings(a)gmail.com> Input: xpad - add support for 8BitDo Pro 2 Wired Controller for Xbox Weiming Shi <bestswngs(a)gmail.com> net: team: free skb when broadcast has no txable port Alexey Charkov <alchark(a)flipper.net> regulator: of: fill in supply names in of_regulator_bulk_get_all() Christian Brauner <brauner(a)kernel.org> namespace: never expire a locked mount Theo Andersen Carton <andersen.theo(a)gmail.com> drm/amdgpu: skip the noirq suspend reset for a switcheroo-parked GPU Alex Deucher <alexander.deucher(a)amd.com> drm/amdgpu/gmc12: properly pass flush_type to gmc_v12_0_flush_vm_hub() Pierre-Eric Pelloux-Prayer <pierre-eric.pelloux-prayer(a)amd.com> drm/amdgpu: remove gart_window_lock usage from gmc v12 Timur Kristóf <timur.kristof(a)gmail.com> drm/amd/display: Fix fast updates on DCE 6.x Christian Brauner <brauner(a)kernel.org> namespace: check a recursive bind mount for mount namespace loops Mikulas Patocka <mpatocka(a)redhat.com> dm-integrity: validate the superblock on resume Paulo Alcantara <pc(a)manguebit.org> smb: client: require stable pages for signed connections Paulo Alcantara <pc(a)manguebit.org> smb: client: only require read lease for size-extending zero range Paulo Alcantara <pc(a)manguebit.org> smb: client: drain and invalidate before server-side copy/clone Paulo Alcantara <pc(a)manguebit.org> smb: client: flush dirty data before zeroing a range Paulo Alcantara <pc(a)manguebit.org> smb: client: flush and commit data before querying allocated ranges Paulo Alcantara <pc(a)manguebit.org> smb: client: discard post-EOF pagecache when extending a file via clone range Paulo Alcantara <pc(a)manguebit.org> smb: client: clear post-EOF pagecache when extending a file via truncate Yu-Hsiang Tseng <asas1asas200(a)gmail.com> ALSA: hda/realtek: Fix silent speaker on Higole F9B Sean Christopherson <seanjc(a)google.com> KVM: SVM: Update control fields on #VMEXIT if and only if VMRUN succeeded Sean Christopherson <seanjc(a)google.com> KVM: SVM: Preserve TLB control (i.e. pending TLB flush) on failed VMRUN Hao Ge <hao.ge(a)linux.dev> netfs: Fix missing alloc tagging of direct mempool allocations Christian Brauner <brauner(a)kernel.org> fs: don't silently unmount busy mounts Ilya Maximets <i.maximets(a)ovn.org> net/sched: act_ct: remove 'add_helper' dead code Kendall Willis <k-willis(a)ti.com> serial: 8250_omap: fix wake irq cleared during suspend Sean Christopherson <seanjc(a)google.com> KVM: x86: Fill kvm_run exit fields in common get_nested_state_pages() error paths Sean Christopherson <seanjc(a)google.com> KVM: x86: Re-pend GET_NESTED_STATE_PAGES if getting said pages fails Imre Deak <imre.deak(a)intel.com> drm/i915/dp_mst: Fix configuring TUs for a disconnected stream Adarsh Das <adarshdas950(a)gmail.com> smb: client: delete compound mids on send failure before unlock David Francis <David.Francis(a)amd.com> drm/amdkfd: Avoid integer underflow in EOP ring size calculation. David Francis <David.Francis(a)amd.com> drm/amdkfd: Avoid integer underflow with ffs in EOP ring size calc Xiaogang Chen <xiaogang.chen(a)amd.com> drm/amdkfd: Guard m->cp_hqd_eop_control setting by q->eop_ring_buffer_size Darrick J. Wong <djwong(a)kernel.org> xfs: don't cross reference rmapbt with bitmaps if they're incomplete Tzung-Bi Shih <tzungbi(a)kernel.org> watchdog: rzv2h: Avoid division by zero Lad Prabhakar <prabhakar.mahadev-lad.rj(a)bp.renesas.com> watchdog: rzv2h: Add support for configurable count clock source Lad Prabhakar <prabhakar.mahadev-lad.rj(a)bp.renesas.com> watchdog: rzv2h: Obtain clock-divider and timeout values from OF match data Zongmin Zhou <zhouzongmin(a)kylinos.cn> RISC-V: KVM: Fix sdata leak and stale snapshot_addr in snapshot_set_shmem Xie Bo <xb(a)ultrarisc.com> RISC-V: KVM: Propagate interrupted G-stage faults Paulo Alcantara <pc(a)manguebit.org> smb: client: fix fattr leaking on wsl_to_fattr() failure Jonghyuk Kim(MalHyuk) <malhyuk97(a)gmail.com> drm/msm: RCU-free the scheduler-containing ring and VM objects Kevin Wang <kevin.wang(a)amd.com> drm/amd/pm: fix gpu metrics energy accumulator for smu 13.0.0/13.0.7 Prike Liang <Prike.Liang(a)amd.com> drm/amdgpu: skip gfx switch_power_profile during GPU reset Alex Deucher <alexander.deucher(a)amd.com> drm/amdgpu/pm: add workload profile pause helper Arie Miller <renari(a)arimil.com> hwmon: (asus_rog_ryujin) Synchronize HID command and report handling Paulo Alcantara <pc(a)manguebit.org> smb: client: fix file type corruption in posix_reparse_to_fattr() Pali Rohár <pali(a)kernel.org> cifs: Rename struct reparse_posix_data to reparse_nfs_data_buffer and move to common/smb2pdu.h Pali Rohár <pali(a)kernel.org> cifs: Remove struct reparse_posix_data from struct cifs_open_info_data Pali Rohár <pali(a)kernel.org> cifs: Remove duplicate struct reparse_symlink_data and SYMLINK_FLAG_RELATIVE Paulo Alcantara <pc(a)manguebit.org> smb: client: fix WSL reparse point uid/gid override Paulo Alcantara <pc(a)manguebit.org> smb: client: fix uid/gid override in getattr with posix extensions Théo Lebrun <theo.lebrun(a)bootlin.com> mips: select CONFIG_WEAK_REORDERING_BEYOND_LLSC from CONFIG_EYEQ John Hubbard <jhubbard(a)nvidia.com> rust: allow `clippy::as_underscore` in the generated bindings Mikulas Patocka <mpatocka(a)redhat.com> dm-integrity: fix NULL pointer dereference when the 'R' flag is used Ido Schimmel <idosch(a)nvidia.com> ipv6: udp: Create exceptions before socket matching Ido Schimmel <idosch(a)nvidia.com> ipv6: Fix redirect exception creation for UDP/RAW sockets Daehyeon Ko <4ncienth(a)gmail.com> vsock/vmci: validate packet source for connected sockets Yunpeng Tian <shionthanatos(a)gmail.com> smb: client: reject SetEA requests that do not fit the request buffer Janani Sunil <janani.sunil(a)analog.com> iio: adc: adi-axi-adc: Initialize state mutex Guangshuo Li <lgs201920130244(a)gmail.com> i2c: qcom-cci: fix autosuspend cleanup Vladimir Zapolskiy <vladimir.zapolskiy(a)linaro.org> i2c: qcom-cci: Remove overcautious disable_irq() calls Vladimir Zapolskiy <vladimir.zapolskiy(a)linaro.org> i2c: qcom-cci: Do not check return value of cci_init() Hui Su <sh_def(a)163.com> io_uring/waitid: honor task_work cancellation Shakeel Butt <shakeel.butt(a)linux.dev> memcg: bypass the reclaim and oom killer for dying tasks once oom_reaper is done Breno Leitao <leitao(a)debian.org> mm/kmemleak: report RCU-tasks quiescent states during the scan Breno Leitao <leitao(a)debian.org> mm/kmemleak: stop the task stack scan early when interrupted Eckhart Mohr <e.mohr(a)tuxedocomputers.com> ALSA: hda/realtek: Add quirk for TongFang XxAF5xxx Eckhart Mohr <e.mohr(a)tuxedocomputers.com> ALSA: hda/realtek: Add quirk for TongFang X6SP45xU Eckhart Mohr <e.mohr(a)tuxedocomputers.com> ALSA: hda/realtek: Add quirk for TongFang X6xx45xU Gary Guo <gary(a)garyguo.net> rust: cfi: disable function merging if CFI is enabled Frank Sorenson <sorenson(a)redhat.com> cifs: add cifs_resize_file_locked() to guard fscache_resize_cookie() under i_rwsem Yang Wang <kevinyang.wang(a)amd.com> drm/amdgpu: Disable runtime PM for externally attached dGPUs Tiezhu Yang <yangtiezhu(a)loongson.cn> LoongArch: Expand module virtual address space to 2GB fangqiurong <fangqiurong(a)kylinos.cn> sched_ext: Fix exit_task leak on fork failure during enable Denis Batishchev <ii343hbka(a)gmail.com> ALSA: hda/realtek: Enable micmute LED on HP EliteBook 6 G1a p/n: AD3Q9ET#UUG Jeff Layton <jlayton(a)kernel.org> nfsd: use test_and_clear_bit for somebody_reclaimed to prevent lost update Thomas Gleixner <tglx(a)kernel.org> futex: Sanitize and document task_struct::futex::state transitions Bibo Mao <maobibo(a)loongson.cn> LoongArch: KVM: Set vcpu->cpu before IN_GUEST_MODE is set Bibo Mao <maobibo(a)loongson.cn> LoongArch: KVM: Deliver interrupt after IN_GUEST_MODE is set Bibo Mao <maobibo(a)loongson.cn> LoongArch: KVM: Check kvm_request_pending() in kvm_late_check_requests() Bibo Mao <maobibo(a)loongson.cn> LoongArch: KVM: Skip PMU checking on vCPU context switch Adrian Hunter <adrian.hunter(a)intel.com> i3c: master: Fix potential UAF in i3c_device_uevent() Guopeng Zhang <zhangguopeng(a)kylinos.cn> mm: memcg-v1: fix wrong linux-mm list address in deprecation warnings Keren Sun <kerensun(a)google.com> mm: remove unnecessary whitespace before a quoted newline Thiébaud Weksteen <tweek(a)google.com> module: validate string table section types Matthew Maurer <mmaurer(a)google.com> module: Factor out elf_validity_cache_index_str Matthew Maurer <mmaurer(a)google.com> module: Factor out elf_validity_cache_index_sym Matthew Maurer <mmaurer(a)google.com> module: Factor out elf_validity_cache_index_mod Matthew Maurer <mmaurer(a)google.com> module: Factor out elf_validity_cache_index_info Matthew Maurer <mmaurer(a)google.com> module: Factor out elf_validity_cache_secstrings Matthew Maurer <mmaurer(a)google.com> module: Factor out elf_validity_cache_sechdrs Matthew Maurer <mmaurer(a)google.com> module: Factor out elf_validity_ehdr Stanislaw Gruszka <stf_xl(a)wp.pl> module/kallsyms: fix nextval for data symbol lookup Sebastian Andrzej Siewior <bigeasy(a)linutronix.de> module: Use RCU in find_kallsyms_symbol(). Jose Villaseñor Montfort <pepemontfort(a)gmail.com> HID: input: read battery capacity from its actual report offset Dev Jain <dev.jain(a)arm.com> mm/migrate: use huge_ptep_get() in remove_migration_pte() Dev Jain <dev.jain(a)arm.com> mm/rmap: use huge_ptep_get() in try_to_migrate_one() Mario Limonciello <mario.limonciello(a)amd.com> platform/x86/amd/pmc: Fix msg_port restoration in amd_stb_debugfs_open_v2() Lukas Wunner <lukas(a)wunner.de> PCI/AER: Emit TLP Log only for unmasked errors Lukas Wunner <lukas(a)wunner.de> PCI/AER: Fix mapping of errors to agent & layer Yosry Ahmed <yosry(a)kernel.org> KVM: x86: Always initialize EFER reserved bits on vendor initialization Jackson Lee <jackson.lee(a)chipsnmedia.com> media: chips-media: wave5: Resume device before setting EOS flag Jackson Lee <jackson.lee(a)chipsnmedia.com> media: chips-media: wave5: Set inst->std during default format initialization Sean Christopherson <seanjc(a)google.com> KVM: x86/mmu: Use split "zap all fast" helpers when invalidating memslot Sean Christopherson <seanjc(a)google.com> KVM: SEV: Mark vCPU RUNNABLE after AP_CREATE, even if VMSA is unusable Sean Christopherson <seanjc(a)google.com> KVM: SEV: Extract loading of guest-provided VMSA to a separate helper Julian Haarmann <julian.haarmann(a)student.kit.edu> platform/x86: lenovo/ymc: Only match lower byte in WMI lid switch query response Matthew Auld <matthew.auld(a)intel.com> drm/xe/display: skip FORCE_WC and vm_bound check for external dma-bufs Qing Luo <luoqing(a)kylinos.cn> sctp: auth: discard auth_chunk when skb_clone fails Pablo Neira Ayuso <pablo(a)netfilter.org> netfilter: nf_conntrack_expect: add and use nf_ct_expect_related_pair() Bui Viet Dung <dungvn2345(a)gmail.com> wwan: wwan_hwsim: Pin module for debugfs file operations Giorgi Kobakhia <gkobakhi(a)asu.edu> udf: fix return value for non-recorded-allocated extents in udf_map_block() Jonathan Gopel <jgopel(a)gmail.com> thunderbolt: Do not RPM complete unrelated subtrees on unplug Cen Zhang <zzzccc427(a)gmail.com> ocfs2: publish the filecheck owner before adding sysfs attributes Cen Zhang <zzzccc427(a)gmail.com> ocfs2: pin owning modules for open debugfs files Cen Zhang <zzzccc427(a)gmail.com> ocfs2: drain quorum work before removing the cluster Cen Zhang <zzzccc427(a)gmail.com> ocfs2/dlm: drain join handlers before releasing module text Wei Jie Law <law.wei.jie(a)gt.tech.gov.sg> net: usb: pegasus: do not advance rx_skb->data on dropped frames Kaho Jiang <kj2864(a)nyu.edu> net: ipv4: add zero check for snd_cwnd_clamp Xiang Mei <xmei5(a)asu.edu> media: go7007: only set audio_enabled if go7007_snd_init() succeeded Xiang Mei <xmei5(a)asu.edu> media: em28xx: reject audio endpoint with zero packet size Myeonghun Pak <mhun512(a)gmail.com> media: cx88: Disable PCI device on MPEG initialization failure Xiang Mei <xmei5(a)asu.edu> libceph: bound mon_command ack decode to front len Andrea Parri <parri.andrea(a)gmail.com> kcsan: Avoid division by zero in kcsan_prandom_u32_max() Fang Xieyan <fangxy(a)xiaopeng.com> kcov: ignore an out-of-range comparison count in write_comp_data() Yuanfu Xie <yuanfuxie(a)stu.pku.edu.cn> ceph: fail readdir when the MDS reply carries no dirfrag Baokun Li <libaokun(a)linux.alibaba.com> blk-crypto: fix NULL deref and UAF in __blk_crypto_evict_key() Rohinthan P <rokinthanp03(a)gmail.com> media: em28xx: use video_unregister_device for radio_dev Christian Brauner <brauner(a)kernel.org> Revert "namei: don't reveal overmounted entries in refwalk" Petr Mladek <pmladek(a)suse.com> nbcon/reboot: Switch NBCON consoles into the emergency mode in emergency_restart() Michael Reeves <michael.reeves077(a)gmail.com> regmap: Remove debugfs before cache teardown Matus Gajdos <matuszpd(a)gmail.com> ALSA: usb-audio: Add native DSD support for Cambridge Audio streamers Jaidheer Sirigineedi <jaidheer7(a)gmail.com> ALSA: hda/realtek: Add mute LED quirk for HP Pavilion 15-eg3xxx (103c:8bfd) Miquel Raynal <miquel.raynal(a)bootlin.com> spi: cadence-qspi: Fix status polling with octal DTR chips Eckhart Mohr <e.mohr(a)tuxedocomputers.com> ALSA: hda/realtek: Add quirk for ASRock NUC BOX-358H Reinhard Speyerer <rspmn(a)arcor.de> net: usb: qmi_wwan: add Rolling Wireless RN947R Vladimir Murzin <vladimir.murzin(a)arm.com> usb: mtu3: Fix double dereference in TP_printk renpanpan <renpanpan(a)kylinos.cn> ALSA: hda/realtek: Add mute LED quirk for HP Pavilion 14-dv1001TU Muhtasham Nawr al-Mahmud <muhtaseem2005(a)gmail.com> ALSA: hda/realtek: Fix speakers on ASUS PM3406CHA Zhang Heng <zhangheng(a)kylinos.cn> ALSA: hda/realtek: Add quirk for Acer Nitro AN515-45 Tarun Noonemunthala <ntarun2000(a)gmail.com> ALSA: hda/realtek: Add quirk for HP ENVY 13-aq1xxx Luis Banha <luisbanha26(a)gmail.com> ALSA: hda/realtek: Add mute LED quirk for HP Pavilion 15-ec1xxx Zhang Heng <zhangheng(a)kylinos.cn> ALSA: hda/realtek: Add quirk for Lenovo ThinkBook G8+ KIM MinWoo <phrimm136(a)gmail.com> ALSA: hda/realtek: Add quirk for Lenovo ThinkBook 16p Gen 3 ARH (21EK) Tomasz Bojanowski <tomasz(a)bojanowski.me> ALSA: usb-audio: Add mixer mapping for MSI MAG B850M MORTAR WIFI Hernan Ganzo <gp(a)sneemgp.com> ALSA: hda/realtek: Limit internal mic boost on HP Pavilion 15 (103c:2164) Jasper Firth <jasper.m.f(a)hotmail.com> ASoC: Intel: bytcr_rt5651: Add quirk for Chuwi Hi8 with generic DMI strings Daniel Ortiz <letargopausado(a)gmail.com> ASoC: amd: yc: Add DMI quirk for Lenovo V15 G6 ARP Andy Moreton <andy.moreton(a)amd.com> sfc: add X4D PF support Rosen Penev <rosenp(a)gmail.com> gpio: mvebu: keep resume masks within the irqchip cache Seiji Adachi <seiji_adachi(a)yahoo.co.jp> ASoC: amd: yc: Add Lenovo ThinkPad E16 Gen 2 (21JN) to quirks Ewan D. Milne <emilne(a)redhat.com> scsi: devinfo: Add BLIST_SKIP_IO_HINTS for EMC Symmetrix Dmitry Antipov <dmantipov(a)yandex.ru> HID: roccat: fix locking in roccat_connect() and roccat_disconnect() Maurizio Lombardi <mlombard(a)redhat.com> nvme-fc: do not warn on controller removal race Youth Cao <cocoh2os08(a)gmail.com> HID: i2c-hid: Add i2c-hid-quirk-bad-input-size quirk for 0911:5288 device Namjae Jeon <linkinjeon(a)kernel.org> ksmbd: handle allocated range queries on dense files Fernando Fernandez Mancera <fmancera(a)suse.de> netfilter: tproxy: use DEBUG_NET_WARN_ON_ONCE for protocol fallbacks Xiubo Li <xiubo.li(a)clyso.com> ceph: fix use-after-dereference of NULL ci in __ceph_remove_cap() Mehmet Aysel <mehmet4ysel(a)gmail.com> ASoC: amd: acp-config: Add HVY-WXX9/M1060 DMI quirk Bob Song <songxiebing(a)kylinos.cn> ALSA: hda/conexant: Always enable the headset-mic pin on plugin Xiubo Li <xiubo.li(a)clyso.com> ceph: do not cache negative dentries for snapped directories Mehmet Aysel <mehmet4ysel(a)gmail.com> ASoC: amd: acp3x-es83xx: Add HVY-WXX9/M1060 DMI quirk Federico Valentín Andrade <fandrade(a)frba.utn.edu.ar> ALSA: usb-audio: Skip mixer creation on M-Audio Venom Li Jun <lijun01(a)kylinos.cn> tpm: tpm_tis_spi: fix nodef CR50 tpm_tis_spi_resume is null Dave Carey <carvsdriver(a)gmail.com> HID: multitouch: Fix stale MT slots when contact count drops to zero Vadim Klishko <vadim(a)cirque.corp-partner.google.com> HID: i2c-hid: Add a quirk for a Cirque I2C device. Zhang Heng <zhangheng(a)kylinos.cn> ASoC: amd: yc: Add DMI entry for Alienware m18 R1 AMD Jimmy Zuber <jamz(a)amazon.com> fuse: zero the partial EOF page when extending a file Zhang Heng <zhangheng(a)kylinos.cn> ALSA: hda/realtek: Add quirk for Lenovo IdeaPad Slim 3 15ABR8 Md Rabbani <rabbanyhmm(a)gmail.com> net: stmmac: fix device node reference leaks in stmmac_mtl_setup() Sumeet Pawnikar <sumeet4linux(a)gmail.com> powercap: intel_rapl: Fix kernel panic during PMU unbind Helge Deller <deller(a)gmx.de> fbcon: Fix KASAN slab-out-of-bounds Read in fbcon_prepare_logo Shiji Yang <yangshiji66(a)outlook.com> net: ethernet: mtk_wed: increase WED v2 WDMA RESV_BUFF to 0x80 Jenson Johnathon Reggentin <mail(a)jregg.de> docs: block: fix dead http link in blk-mq.rst Chen Changcheng <chenchangcheng(a)kylinos.cn> scsi: snic: Fix SCSI host leak on workqueue allocation failure Will Porter <mrwillporter(a)gmail.com> ALSA: usb-audio: Add iD14 MkI to monitor-mix volume quirk Csaba Budai <ilyr73(a)gmail.com> ALSA: hda/realtek: Fix ALC700 audio on Intel Hades Canyon Daeho Jeong <daehojeong(a)google.com> f2fs: avoid setting SBI_NEED_FSCK on transient resize failure Robin Everaars <robineveraars(a)pm.me> ACPI: button: Add DMI quirk for Razer Blade Pro 17 early 2020 lid switch Tao Cui <cuitao(a)kylinos.cn> sched_ext/scx_flatcg: expire cached hweights on weight changes Namjae Jeon <linkinjeon(a)kernel.org> ksmbd: enable TCP keepalive for accepted connections BingKun Yue <yuebingkun(a)kylinos.cn> fbdev: platinumfb: add error checking for ioremap calls Randy Dunlap <rdunlap(a)infradead.org> fbdev: maxine: fix 64-bit build error Carlos Song <carlos.song(a)nxp.com> i2c: imx-lpi2c: properly unwind resources on probe failure Pengpeng Hou <pengpeng(a)iscas.ac.cn> rtc: brcmstb-waketimer: add missing MODULE_DEVICE_TABLE() Robert Leussler <robert.leussler(a)leica-geosystems.com> rtc: ds1307: fix RX8130 wakeup alarm WADA bit for day-of-month mode Jack Yu <jack.yu(a)realtek.com> ASoC: rt712-sdca: Pull high JD2 to prevent from entering TV mode Jinqian Yang <yangjinqian1(a)huawei.com> virtio_ring: fix infinite loop in virtnet_poll_cleantx when device is broken Pengpeng Hou <pengpeng(a)iscas.ac.cn> rtc: ab-eoz9: add missing MODULE_DEVICE_TABLE() Denis V. Lunev <den(a)openvz.org> virtio_balloon: warn on failed buffer add in tell_host() Weimin Xiong <xiongwm2026(a)163.com> vdpa/mlx5: roll back MR update after VQ setup failure Gilles Risch <gilles.risch(a)gmail.com> drm/radeon: fix internal display on iMac11, 1 (RV770/DCE3.1) Xiong Weimin <xiongweimin(a)kylinos.cn> vdpa_sim: hold iommu_lock across dma_unmap passthrough transition Kuninori Morimoto <kuninori.morimoto.gx(a)renesas.com> ASoC: codec: max98926: fixup invert setup mask Andrew Onyshchuk <andryk.rv(a)gmail.com> platform/x86: thinkpad_acpi: Fix fan speed reporting on Edge E330 Yaroslav Dudkov <aroslavdudkov622(a)gmail.com> platform/x86: msi-ec: Add MSI Katana GF76 11UEK EC firmware Alex Elder <elder(a)riscstar.com> net: stmmac: use dma_addr_t for DMA addresses Jia Zhu <zhujia.zj(a)bytedance.com> NFSv4: pin the superblock for active state owners ZhangGuoDong <zhangguodong(a)kylinos.cn> NFS: Verify symlink inode before caching target Thomas Huth <thuth(a)redhat.com> smb: server: Free session data in user_session.c with kfree_sensitive() Namjae Jeon <linkinjeon(a)kernel.org> ksmbd: notify parent directory leases on child create Benjamin Coddington <ben.coddington(a)hammerspace.com> pNFS: honor clora_changed when recalling a layout Thomas Huth <thuth(a)redhat.com> smb: server: Make sure that passkey is not leaked on the heap in user_config.c Namjae Jeon <linkinjeon(a)kernel.org> ksmbd: honor client signing-required in all modes Namjae Jeon <linkinjeon(a)kernel.org> ksmbd: reject blocking compound lock requests Gael Blivet <gael.blivet(a)gmail.com> ksmbd: fix AsyncId zeroed before use in smb2_lock() cancel response Namjae Jeon <linkinjeon(a)kernel.org> ksmbd: fix SMB2 byte-range lock end offset Yashraj Ghule <yashrajghule.221(a)gmail.com> ALSA: hda/realtek: Fix mute LED for HP Victus 15-fa1xxx (MB 8C3F) ChenXiaoSong <chenxiaosong(a)kylinos.cn> smb/server: cancel async requests when closing connection Gael Blivet <gael.blivet(a)gmail.com> ksmbd: report actual xattr value length in stream enumeration Gael Blivet <gael.blivet(a)gmail.com> ksmbd: skip fallocate for SMB2_CREATE_ALLOCATION_SIZE on a stream handle Namjae Jeon <linkinjeon(a)kernel.org> ksmbd: allow FSCTL_SET_SPARSE without input buffer Namjae Jeon <linkinjeon(a)kernel.org> ksmbd: honor byte-range locks for zero data Namjae Jeon <linkinjeon(a)kernel.org> ksmbd: handle empty QUERY_ALLOCATED_RANGES output Namjae Jeon <linkinjeon(a)kernel.org> ksmbd: return buffer too small for short security queries Gael Blivet <gael.blivet(a)gmail.com> ksmbd: fix off-by-one rejecting minimal COPYCHUNK query-limits request Namjae Jeon <linkinjeon(a)kernel.org> ksmbd: reject SMB3.1.1 binding with mismatched cipher Gael Blivet <gael.blivet(a)gmail.com> ksmbd: fix durable handle v2 default timeout units (60 -> 60000) Namjae Jeon <linkinjeon(a)kernel.org> ksmbd: allow I/O on directory named streams Namjae Jeon <linkinjeon(a)kernel.org> ksmbd: preserve access denied status for copychunk Namjae Jeon <linkinjeon(a)kernel.org> ksmbd: protect private extended attributes David C.C.M. Gall <david.ccm.gall(a)googlemail.com> crypto: keembay - use crypto_memneq() to compare CCM AEAD tags Israel Téllez García <i.tellez(a)btesa.com> libbpf: Fix ring buffer consumer loop on 32-bit position wrap David C.C.M. Gall <david.ccm.gall(a)googlemail.com> crypto: sa2ul - use crypto_memneq() to compare AEAD tag David C.C.M. Gall <david.ccm.gall(a)googlemail.com> crypto: keembay - use crypto_memneq() to compare GCM AEAD tags Eric Dumazet <edumazet(a)google.com> gre: fix ERSPAN o_flags race/corruption in xmit and fill_info Yang Wen <anmuxixixi(a)gmail.com> exfat: keep FITRIM within the requested range Anuj Bolewar <bolewara(a)gmail.com> drm/virtio: reclaim pending vbufs before tearing down vqs Basavaraj Natikar <Basavaraj.Natikar(a)amd.com> HID: amd_sfh: Serialize access to the shared emp2 pointer Neil Andrews <neil(a)androos.io> ALSA: usb-audio: Rename the Audient iD14 monitor mix volume control Takashi Iwai <tiwai(a)suse.de> ALSA: hda/intel: Add sanity check for BAR0 size Farhan Ali <alifm(a)linux.ibm.com> PCI: Avoid saving config space state if inaccessible Michail Tatas <michail.tatas(a)gmail.com> ipmi: Fix leak in __ipmi_bmc_register Charles Keepax <ckeepax(a)opensource.cirrus.com> soundwire: dmi-quirks: Disable ghost Realtek on Asus ROG Zephyrus Duo Arash Golgol <arash.golgol(a)gmail.com> regulator: fan53555: Add support for FAN53555BUC23X type Jiaming Zhang <r772577952(a)gmail.com> hfsplus: validate extent record length before writing it back Dmytro Moroziuk <dmorozyk1(a)gmail.com> ALSA: hda/conexant: Add mute LED quirk for HP ProBook 440 G5 Matt Turner <mattst88(a)gmail.com> alpha: run the remote RTC access in a worker, not an IPI callback Chao Shi <coshi036(a)gmail.com> nvme: ratelimit the completion-path messages driven by device data Griffin Kroah-Hartman <griffin(a)kroah.com> nfc: nxp-nci: Add remove on IRQ error Griffin Kroah-Hartman <griffin(a)kroah.com> nfc: mrvl: spi: Unregister dev on allocation fail Vasant Hegde <vasant.hegde(a)amd.com> iommu/amd: Fix missing CMD_COMPLETE_PPR response for invalid PPR requests Feng Tang <feng.tang(a)linux.alibaba.com> selftests: net: reuseport_bpf_numa: consider cpuless numa node John Johansen <john.johansen(a)canonical.com> apparmor: fix auditing of mount binary data Rongguang Wei <weirongguang(a)kylinos.cn> tap: fix incorrect variable used for USO check in set_offload() Geliang Tang <geliang(a)kernel.org> nvme-tcp: look up host_iface in the current netns Zhe Liu <liuzhe1(a)kylinos.cn> docs: cgroup-v2: fix stale "io" controller introduction Brian Grech <bgrech(a)redhat.com> selftests/net: fin_ack_lat: fix latency threshold typo Hari Mishal <harimishal1(a)gmail.com> nvmet: passthru: fix OOB reads when parsing ns id descriptor list Dapeng Mi <dapeng1.mi(a)linux.intel.com> perf/x86: Free hybrid state on PMU init failure Dapeng Mi <dapeng1.mi(a)linux.intel.com> perf/x86: Unregister PMI handler on PMU init failure Michal Pecio <michal.pecio(a)gmail.com> ALSA: usx2y: Stop clearing urb->hcpriv before submission Guanghui Feng <guanghuifeng(a)linux.alibaba.com> iommu/vt-d: Fix CACHE_TAG_NESTING_DEVTLB polluting shared variables in flush loop Pengpeng Hou <pengpeng(a)iscas.ac.cn> fbdev: udlfb: validate vendor descriptor items Andreas Kemnade <andreas(a)kemnade.info> fbdev: omap2: dsi: do not copy isr table Atish Patra <atishp(a)meta.com> RISC-V: perf: fix resource cleanup on driver probe failure Rui Qi <qirui.001(a)bytedance.com> riscv: kprobes: Prevent probes in breakpoint handlers Daniel Golle <daniel(a)makrotopia.org> net: dsa: mt7530: check CORE_PLL_GROUP4 access in mt7531_setup() Daniel Golle <daniel(a)makrotopia.org> net: pcs: mtk-lynxi: check regmap reads in mtk_pcs_lynxi_get_state() Daniel Golle <daniel(a)makrotopia.org> net: dsa: mt7530: check bus->read() error in core_rmw() Laxman Acharya <acharyalaxman8848(a)gmail.com> Bluetooth: hci_event: fix out-of-bounds read in LE PA report reassembly Daniel Golle <daniel(a)makrotopia.org> net: dsa: mt7530: error out on failed PHY_IAC command writes Muhammad Saheed <muhammad.saheed.iam(a)gmail.com> Bluetooth: hci_sync: Disable legacy instance's ext adv before setup snapshot Li Qiang <liqiang01(a)kylinos.cn> Bluetooth: hci_bcsp: validate received packet lengths Chen Changcheng <chenchangcheng(a)kylinos.cn> Bluetooth: btrsi: Move set_bt_context after successful HCI registration Garrett Blackmon <garrett(a)blackmon.dev> ALSA: hda/realtek: Fix speakers on ASUS ROG Zephyrus G14 GA403UM Zhang Heng <zhangheng(a)kylinos.cn> ALSA: hda/realtek: Fix headset mic on ASUS Vivobook S14 S5406SA Junhao He <hejunhao3(a)h-partners.com> ACPI: APEI: Handle repeated SEA error storms Aurabindo Pillai <aurabindo.pillai(a)amd.com> drm/amd: Add DCN6 register headers Filipe Manana <fdmanana(a)suse.com> btrfs: fix memory barrier order in reloc_root_is_dead() Pengpeng Hou <pengpeng(a)iscas.ac.cn> Bluetooth: hci_nokia: validate firmware packet bounds Pavel Zverev <playximik29(a)gmail.com> Bluetooth: btusb: Add support for 1357:c123 Realtek 8852BE device Rui Qi <qirui.001(a)bytedance.com> selftests/ftrace: Force C locale in ftracetest Andreas Haufler <andreas(a)haufler.info> tools/lib/thermal: Fix misplaced extern "C" closing brace Yunye Zhao <yunye.zhao(a)linux.alibaba.com> md: add cond_resched() to md_do_sync()'s skip path Yu Kuai <yukuai(a)fygo.io> md/raid5: reject zero-sector reshape chunks Shang En Sim <sim(a)shangen.org> ALSA: hda/realtek: Enable mute LEDs on HP Spectre x360 16-aa0xxx Junzhe Yu <junzheyu1(a)gmail.com> ext4: guard against NULL s_group_info in ext4_get_group_info Pengpeng Hou <pengpeng(a)iscas.ac.cn> HID: rmi: check report length before trimming sentinel bytes liulhong617 <liulhong617(a)gmail.com> arm64: mm: fix accidental linear mapping of no-map reserved memory Stefan Hansson <newbyte(a)postmarketos.org> wifi: rsi: Fix types to appease CFI Charles Keepax <ckeepax(a)opensource.cirrus.com> soundwire: dmi-quirks: Disable ghost Realtek on Asus Zenbook Duo Praveen Talari <praveen.talari(a)oss.qualcomm.com> opp: Use clk_get_optional() to avoid leaving opp_table->clk as an error pointer Carl Quist <equalizerjr(a)gmail.com> ALSA: hda/realtek: Enable mute LED on HP Laptop 15-dy0xxx Zihan Xi <zihanx(a)nebusec.ai> xsk: account ring allocations to memcg Jinhui Guo <guojinhui.liam(a)bytedance.com> net: usb: cdc_ether: add quirk for AMI BMC stale link events Johan Alvarado <contact(a)c127.dev> net: stmmac: raise TX completion interrupt at the end of an xmit burst Felix Fietkau <nbd(a)nbd.name> wifi: mt76: mt7603: file buffered frames under the TID reported to mac80211 Marcos Paulo Medeiros <maarcospm1996(a)gmail.com> ACPI: video: force native backlight on Acer Nitro AN515-46 Stefan Haberland <sth(a)linux.ibm.com> s390/dasd: Snapshot intrc before freeing the request block Simon Glass <sjg(a)chromium.org> kconfig: abort rather than loop for ever on EOF Allison Henderson <achender(a)kernel.org> net/rds: unpin MR pages with unpin_user_pages_dirty_lock() Sharath Srinivasan <sharath.srinivasan(a)oracle.com> net/rds: fix rds_message leak in the rds_send_xmit() drop path Håkon Bugge <haakon.bugge(a)oracle.com> net/rds: hold the socket while an rds_mr references it Allison Henderson <achender(a)kernel.org> net/rds: don't use unpin_user_pages_dirty_lock() from atomic context Wahid Khan <wahidzk0091(a)gmail.com> HID: intel-ish-hid: ignore post-init ENUM_DEVICES from firmware Yuxiang Lin <mclyxfdw(a)gmail.com> HID: quirks: add ALWAYS_POLL quirk for AULA Mini 60 HE Pro Dongle Aaron Ma <mapengyu(a)gmail.com> HID: quirks: Add ALWAYS_POLL quirk for Beitong BTP-KP20D dongle Stuart Hayhurst <stuart.a.hayhurst(a)gmail.com> HID: logitech-hidpp: Add support for G502 X Plus USB mouse Mauricio Orozco <maudob(a)live.com> ALSA: hda/realtek: Add quirk for ASUS VivoBook M515DA/X515DAP Mariano Baragiola <mbaragiola(a)linux.com> wifi: wilc1000: validate monitor transmit frame headers Can Peng <pengcan(a)kylinos.cn> wifi: brcmfmac: validate msgbuf flowring IDs before use Can Peng <pengcan(a)kylinos.cn> wifi: brcmfmac: Set DMA direction for msgbuf packet IDs Felix Fietkau <nbd(a)nbd.name> wifi: mt76: mt7603: fix U-APSD service period termination Felix Fietkau <nbd(a)nbd.name> wifi: mt76: set the EOSP bit in the QoS header of the last released frame Felix Fietkau <nbd(a)nbd.name> wifi: mt76: mt7615: fix NULL deref in mt7615_mac_set_rates Peter Ujfalusi <peter.ujfalusi(a)linux.intel.com> ASoC: SOF: Intel: mtl: Power down DSP if it is left enabled in pre_fw_run() ZhaoJinming <zhaojinming(a)uniontech.com> wifi: ath11k: fix resource leak on error in ext IRQ setup Geetha sowjanya <gakula(a)marvell.com> perf: marvell: Cancel CN10K DDR PMU hrtimer on device remove Pablo Neira Ayuso <pablo(a)netfilter.org> netfilter: nf_tables: call skb_valid_dst() before skb_dst() Minghao Zhang <zhangmh25(a)mails.tsinghua.edu.cn> netfilter: conntrack: tcp: use UNACK timeout for non-closing RST packets Ahmed Naseef <naseefkm(a)gmail.com> wifi: mt76: mt7603: add 0x7592 EEPROM chip ID Prashant Rahul <prashantrahul23(a)gmail.com> wifi: mt76: mt7921: fix memory leak when skb_linearize fails in mcu rx event David Bauer <mail(a)david-bauer.net> wifi: mt76: mt7915: configure noise floor reporting on reset Devin Wittmayer <lucid_duck(a)justthetip.ca> wifi: mt76: mt76x02: report rx FCS errors to mac80211 David Bauer <mail(a)david-bauer.net> wifi: mt76: mt7603: free beacon SKB on error Hari Mishal <harimishal1(a)gmail.com> virtio_console: take a kref in find_port_by_vq() to fix port UAF Rosen Penev <rosenp(a)gmail.com> nvmem: brcm_nvram: fix out-of-bounds access on malformed flash data Rosen Penev <rosenp(a)gmail.com> nvmem: brcm_nvram: reject empty NVRAM partition 이상호 <kudo3228(a)gmail.com> romfs: detect hard link cycles bui duc phuc <phucduc.bui(a)gmail.com> regulator: rt6245: Restore state on enable failure Oleg Proshkin <oleg.pro171(a)gmail.com> mfd: axp20x: Preserve other control bits when powering off Bob Song <songxiebing(a)kylinos.cn> ALSA: hda/realtek: add missing error checks for COEF index reads in alc269 Dmitry Torokhov <dmitry.torokhov(a)gmail.com> mfd: ipaq-micro: Fix out-of-bounds stack read in ipaq_micro_str Konstantin Komarov <almaz.alexandrovich(a)paragon-software.com> fs/ntfs3: Fix memory leak in indx_find_sort() Bob Song <songxiebing(a)kylinos.cn> ALSA: hda/realtek: add missing NULL check for codec->bus->pci Yichong Chen <chenyichong(a)uniontech.com> exfat: free new directory cluster if zeroing fails Armin Wolf <W_Armin(a)gmx.de> platform/x86: dell-smbios-wmi: Fix chardev resource management wangdicheng <wangdicheng(a)kylinos.cn> ALSA: hda/conexant: Add NULL check for dc_mode_path Yichong Chen <chenyichong(a)uniontech.com> exfat: clean up new entry on add entry failure David Strahan <David.Strahan(a)microchip.com> scsi: smartpqi: Add new PCI device-ids Gary Guo <gary(a)garyguo.net> ata: ata_generic: Don't store pci_device_id Dmitry Osipenko <digetx(a)gmail.com> clk: tegra: support 48MHz clock for pll_p_out1 Chen Changcheng <chenchangcheng(a)kylinos.cn> media: cx88: fix memory leak in cx8802_register_driver() error path Pengpeng Hou <pengpeng(a)iscas.ac.cn> clk: imx: imx8qxp-lpcg: add missing MODULE_DEVICE_TABLE() Pengpeng Hou <pengpeng(a)iscas.ac.cn> clk: imx: imx8qxp: add missing MODULE_DEVICE_TABLE() Nicolin Chen <nicolinc(a)nvidia.com> iommu/tegra241-cmdqv: Rate-limit the error ISR's log message Yichong Chen <chenyichong(a)uniontech.com> exfat: write moved entry before removing source Jay Vadayath <jay(a)artiphishell.com> udf: bound lengthAllocDescs from unallocated space entry Jan Kara <jack(a)suse.cz> udf: Fix bh leak for unallocated space entries Tyrel Datwyler <tyreld(a)linux.ibm.com> scsi: ibmvfc: free ibmvfc_target allocations with mempool_free Tyrel Datwyler <tyreld(a)linux.ibm.com> scsi: ibmvfc: check for NULL evt in implicit LOGO and target delete path Jiaxing Hu <gahing(a)gahingwoo.com> iommu/rockchip: Clear stale page faults before enabling stall Pengpeng Hou <pengpeng(a)iscas.ac.cn> hsi: omap_ssi: remove debugfs on port creation failure Tomer Maimon <tmaimon77(a)gmail.com> pinctrl: npcm8xx: move GPIO IRQ setup into request_resources Tomer Maimon <tmaimon77(a)gmail.com> pinctrl: npcm8xx: fix debounce register selection Tomer Maimon <tmaimon77(a)gmail.com> pinctrl: npcm8xx: clear pending GPIO events during init Tomer Maimon <tmaimon77(a)gmail.com> pinctrl: npcm8xx: enable RMII outputs from RMII groups Pengpeng Hou <pengpeng(a)iscas.ac.cn> firmware: imx: scu: manage mailbox channels and global handle Abdun Nihaal <nihaal(a)cse.iitm.ac.in> platform/x86: int1092: Fix info leak in parse_package() Konstantin Komarov <almaz.alexandrovich(a)paragon-software.com> fs/ntfs3: load ATTR_BITMAP run extents from $MFT extension records Senjin <senjin(a)hatchling.org> fs/ntfs3: fix lseek EINVAL on sparse/compressed files with 64-bit clusters Konstantin Komarov <almaz.alexandrovich(a)paragon-software.com> ntfs3: fix info-leak in ntfs_rename() Kyle Zeng <kylebot(a)openai.com> fs/ntfs3: reserve NUL byte when converting UTF-16 names Brian Norris <briannorris(a)chromium.org> PCI/portdrv: Allow probing even without child services Ruoyu Wang <ruoyuw560(a)gmail.com> ntfs3: initialize err in attr_wof_frame_info Pengpeng Hou <pengpeng(a)iscas.ac.cn> soc: ixp4xx: qmgr: add missing MODULE_DEVICE_TABLE() Randolph Sapp <rs(a)ti.com> drm/etnaviv: force flush on power register ops Rosen Penev <rosenp(a)gmail.com> ata: pata_ep93xx: fix PIO fallback when DMA init fails Benjamin Marzinski <bmarzins(a)redhat.com> bitops: make the *_bit_le functions use unsigned long Zhang Yi <yi.zhang(a)huawei.com> ext4: use FGP_WRITEBEGIN for tail block zeroing Zhang Yi <yi.zhang(a)huawei.com> ext4: check return value of ext4_get_block() in ext4_load_tail_bh() Alexander Wilhelm <alexander.wilhelm(a)westermo.com> wifi: ath12k: fix scan command endianness on big endian Manikanta Pubbisetty <manikanta.pubbisetty(a)oss.qualcomm.com> wifi: ath10k: trigger hardware recovery upon rx failures Pengpeng Hou <pengpeng(a)iscas.ac.cn> wifi: ath11k: validate regulatory capability phy_id Mukesh Ojha <mukesh.ojha(a)oss.qualcomm.com> iommu/qcom: Publish pgtbl_ops before releasing init_mutex Pengpeng Hou <pengpeng(a)iscas.ac.cn> thermal: intel: int340x: clean up RFIM groups on DVFS failure Mukesh Ojha <mukesh.ojha(a)oss.qualcomm.com> iommu/qcom: Enable clocks before hardware access in qcom_iommu_ctx_probe() Mukesh Ojha <mukesh.ojha(a)oss.qualcomm.com> iommu/qcom: Check pm_runtime_resume_and_get() return in probe Heiko Schocher <hs(a)nabladev.com> drm/panel: simple: Add Kyocera tcg070wvlq panel Esteban Urrutia <esteuwu(a)proton.me> iommu/arm-smmu-qcom: Add SM8450 MDSS compatible Baokun Li <libaokun(a)linux.alibaba.com> ext4: reject mount if clusters/inodes per group are not 8-aligned Lachlan Hodges <lachlan.hodges(a)morsemicro.com> wifi: cfg80211: include cf1 offset when sending chandef Kuan-Wei Chiu <visitorckw(a)gmail.com> riscv, bpf: Add support for BPF_MOVSX in RV32 JIT Pengpeng Hou <pengpeng(a)iscas.ac.cn> power: reset: piix4-poweroff: add missing MODULE_DEVICE_TABLE() Yuyang Huang <yuyanghuang(a)google.com> net: prestera: ignore duplicate RIF destruction events Aleksander Jan Bajkowski <olek2(a)wp.pl> net: sfp: add quirk for HORACO copper SFP+ module Pengpeng Hou <pengpeng(a)iscas.ac.cn> power: supply: cros_pchg: unregister EC notifier Kuan-Wei Chiu <visitorckw(a)gmail.com> riscv, bpf: Add support for BPF_SDIV and BPF_SMOD in RV32 JIT Thomas Renninger <trenn(a)suse.de> ACPI: sysfs: Properly map BERT and CCEL data to their ACPI tables Zhao Li <enderaoelyther(a)gmail.com> wifi: mac80211_hwsim: clear PMSR request state on abort Shahar Tzarfati <shahar.tzarfati(a)intel.com> wifi: mac80211: ibss: read deauth reason_code after frame length check Yun Zhou <yun.zhou(a)windriver.com> ext4: set EXT4_STATE_NO_EXPAND in ext4_evict_inode Ali Alaei <ali.alaei.tabatabaei(a)gmail.com> PCI: vmd: Handle BUS_RESTRICT_CFG value 3 for Arrow Lake-HX Baokun Li <libaokun(a)linux.alibaba.com> ext4: reduce max cluster size to match documented 256MB limit Kate Hsuan <hpa(a)redhat.com> ACPI: battery: Sanitise model_number by dropping unprintable characters Pengpeng Hou <pengpeng(a)iscas.ac.cn> ACPI: FPDT: validate table and record lengths Bob Song <songxiebing(a)kylinos.cn> ALSA: hda: Check snd_hda_power_pm construct error before executing verb Nizar Al-Kabbani <nizar.m.kabbani(a)gmail.com> platform/x86: asus-nb-wmi: map ProArt key (0x8b) to KEY_PROG3 Yousef Alhouseen <alhouseenyousef(a)gmail.com> media: go7007: s2250: propagate control I/O failures Rituparna Warwatkar <rwarwatkar(a)gmail.com> media: dvb-core: fix feed leak on failed DMX_ADD_PID Emmanuel Grumbach <emmanuel.grumbach(a)intel.com> wifi: iwlwifi: mvm: ignore sync frames when sync is disabled Aditya Sherawat <asherawa(a)qti.qualcomm.com> drm/msm/adreno: Add support for A704 GPU Yuho Choi <dbgh9129(a)gmail.com> driver core: attribute_container: Unwind device_add() on attr failure Logan Gunthorpe <logang(a)deltatee.com> PCI: switchtec: Add Microchip PCI1008 to NTB DMA alias quirk Logan Gunthorpe <logang(a)deltatee.com> PCI: switchtec: Add Microchip PCI1008 device ID Yousef Alhouseen <alhouseenyousef(a)gmail.com> misc: ibmvmc: reject oversized inbound messages Pei Xiao <xiaopei01(a)kylinos.cn> ipack: ipoctal: add rwsem to guard against TOCTOU in remove path Yousef Alhouseen <alhouseenyousef(a)gmail.com> misc: ibmvmc: release send buffer on write errors Pengpeng Hou <pengpeng(a)iscas.ac.cn> greybus: manifest: validate string descriptor header Yousef Alhouseen <alhouseenyousef(a)gmail.com> misc: hpilo: validate device queue entries before use Yousef Alhouseen <alhouseenyousef(a)gmail.com> misc: genwqe: handle a first DMA address of zero Yousef Alhouseen <alhouseenyousef(a)gmail.com> misc: bcm-vk: validate write size before allocation Ian Abbott <abbotti(a)mev.co.uk> comedi: pcmuio: Add sanity check to interrupt handler Ian Abbott <abbotti(a)mev.co.uk> comedi: pcm816: Fix sanity check in interrupt handler Ian Abbott <abbotti(a)mev.co.uk> comedi: pcmmio: Add sanity check to interrupt handler Ian Abbott <abbotti(a)mev.co.uk> comedi: aio_iiro_16: Add sanity check to interrupt handler Ian Abbott <abbotti(a)mev.co.uk> comedi: pcm711: Fix sanity check in interrupt handler Ian Abbott <abbotti(a)mev.co.uk> comedi: dt2811: Fix sanity check in interrupt handler Ian Abbott <abbotti(a)mev.co.uk> comedi: das6402: Add sanity check to interrupt handler Ian Abbott <abbotti(a)mev.co.uk> comedi: quatech_daqp_cs: Fix sanity check in interrupt handler Ian Abbott <abbotti(a)mev.co.uk> comedi: pcm818: Fix sanity check in interrupt handler Ian Abbott <abbotti(a)mev.co.uk> comedi: ni_at_a2150: Fix sanity check in interrupt handler Ian Abbott <abbotti(a)mev.co.uk> comedi: ni_atmio16d: Add sanity check to interrupt handler Pengpeng Hou <pengpeng(a)iscas.ac.cn> uio: sercos3: add missing MODULE_DEVICE_TABLE() Michail Tatas <michail.tatas(a)gmail.com> USB: misc: uss720: Fix leak in get_1284_register Oliver Neukum <oneukum(a)suse.com> usb: misc: cypress_cy7c63: check result of IO Lucas Martins Alves <lucas.alves(a)lumal21.com.br> usb: musb: host: clear stale RX interrupt on three-strikes error Hans Verkuil <hverkuil+cisco(a)kernel.org> media: cec/core: drop cec_post_state_event call Hans Verkuil <hverkuil+cisco(a)kernel.org> media: cec: tegra_cec: don't break off msg on NACK Shivaprasad G Bhat <sbhat(a)linux.ibm.com> scsi: qla2xxx: Handle INTx not connected while passing through Mikko Perttunen <mperttunen(a)nvidia.com> gpu: host1x: Wait for timeout worker completion on channel free Namhyung Kim <namhyung(a)kernel.org> tools/lib/api: Fix potential double-free from fdarray__grow() Emmanuel Grumbach <emmanuel.grumbach(a)intel.com> wifi: iwlwifi: mvm: reset the smart fifo state upon FW stop Jingyi Wang <jingyi.wang(a)oss.qualcomm.com> remoteproc: core: cancel crash_handler work in rproc_add() error path Jingyi Wang <jingyi.wang(a)oss.qualcomm.com> remoteproc: qcom: Check subdev start status in rproc_stop() Yousef Alhouseen <alhouseenyousef(a)gmail.com> media: go7007: avoid undefined shifts in MPEG-4 headers Pengpeng Hou <pengpeng(a)iscas.ac.cn> media: cx18: stop VBI start-code scan before short tail Pengpeng Hou <pengpeng(a)iscas.ac.cn> media: ivtv: stop VBI start-code scan before short tail Jurison Murati <eng.juri(a)gmail.com> media: i2c: ov8865: Program the sensor on stream start Lucas Stach <l.stach(a)pengutronix.de> drm/etnaviv: check all modules for idle after reset Jurison Murati <eng.juri(a)gmail.com> media: i2c: ov8865: Drop the runtime PM usage count on stream failure Haoxiang Li <lihaoxiang(a)isrc.iscas.ac.cn> iwlwifi: dvm: add missing cleaup for on error path Hari Mishal <harimishal1(a)gmail.com> nvme: bound ns descriptor header and body to identify buffer Charles Keepax <ckeepax(a)opensource.cirrus.com> soundwire: intel_auxdevice: Add cs42l44 to wake_capable_list Bard Liao <yung-chuan.liao(a)linux.intel.com> soundwire: dmi-quirks: add a global ghost list Niranjana Vishwanathapura <niranjana.vishwanathapura(a)intel.com> drm/xe: only resume exec queues that were actually suspended Hans Verkuil <hverkuil+cisco(a)kernel.org> media: em28xx: use vb2_video_unregister_device Hans Verkuil <hverkuil+cisco(a)kernel.org> media: em28xx: requeue buffers if start_streaming fails Hans Verkuil <hverkuil+cisco(a)kernel.org> media: em28xx: dev_info->pr_info since dev has been freed Mike Tipton <mike.tipton(a)oss.qualcomm.com> pmdomain: qcom: rpmhpd: Skip retention by default Pengpeng Hou <pengpeng(a)iscas.ac.cn> gpio: vf610: add missing MODULE_DEVICE_TABLE() Pengpeng Hou <pengpeng(a)iscas.ac.cn> crypto: keembay - add missing MODULE_DEVICE_TABLE() Pengpeng Hou <pengpeng(a)iscas.ac.cn> pinctrl: sx150x: add missing MODULE_DEVICE_TABLE() Gabriel Prostitis <prostitisgabriel(a)gmail.com> USB: gadget: inode: fix mm lifetime handling David Laight <david.laight.linux(a)gmail.com> usb_string_copy: Use kzalloc() to avoid leaking old data Xu Rao <raoxu(a)uniontech.com> usb: gadget: u_audio: clean up capture endpoint on feedback failure Haoxiang Li <haoxiang_li2024(a)163.com> usb: fsl_qe_udc: check qe_alloc_request() failure in ch9getstatus() Aniket Randive <aniket.randive(a)oss.qualcomm.com> serial: qcom_geni: Disable closing_wait for console to prevent shutdown timeout Haoxiang Li <haoxiang_li2024(a)163.com> tty: serial: pch_uart: add check for pci_get_slot() Rahul Bukte <rahul.bukte(a)sony.com> serial: 8250: force synchronous probe for the ISA and PNP drivers Xu Rao <raoxu(a)uniontech.com> mmc: block: reject invalid perdev_minors before division Arnd Bergmann <arnd(a)arndb.de> media: v4l2-tpg: reduce stack usage for kasan builds Pengpeng Hou <pengpeng(a)iscas.ac.cn> media: cec: tegra: add missing MODULE_DEVICE_TABLE() Chris Lew <christopher.lew(a)oss.qualcomm.com> rpmsg: char: Check for ongoing chrdev destroy Pranjal Shrivastava <praan(a)google.com> PCI/ATS: Ensure pci_ats_supported() is PF-aware for VFs Pengpeng Hou <pengpeng(a)iscas.ac.cn> ASoC: codecs: max98396: Unwind supplies on resume failure Qingtao Cao <qingtao.cao.au(a)gmail.com> bus: mhi: core: Fix sys error transition latency John Garry <john.g.garry(a)oracle.com> nvme: don't reference NS after unlocking in nvme_ns_head_ctrl_ioctl() Alex Deucher <alexander.deucher(a)amd.com> drm/amdgpu/gfx11: WARN() rather than BUG() for invalid SDMA engine Alex Deucher <alexander.deucher(a)amd.com> drm/amdgpu/atomfirmware: WARN() rather than BUG() Deepanshu Kartikey <kartikey406(a)gmail.com> udf: avoid recursive s_alloc_mutex deadlock when freeing AED blocks Kyle Zeng <kylebot(a)openai.com> udf: validate extent partition references in udf_current_aext() Devansh Soni <devanshsoni874(a)gmail.com> staging: rtl8723bs: fix missing unregister_netdev on sdio_alloc_irq failure Xixin Liu <liuxixin(a)kylinos.cn> nvme: zns: cap zone report nr_zones by DMA buffer size Xixin Liu <liuxixin(a)kylinos.cn> nvme-auth: use crypto_memneq for DH-HMAC-CHAP response comparison John Garry <john.g.garry(a)oracle.com> nvme: handle positive error codes in nuse_show() Tanmay Shah <tanmay.shah(a)amd.com> remoteproc: core: Full attach detach during recovery Jerome Brunet <jbrunet(a)baylibre.com> clk: sunxi-ng: fix ccu probe clock unregister on error Marek Szyprowski <m.szyprowski(a)samsung.com> mmc: dw_mmc: stop and complete DMA also in STATE_DATA_BUSY state Pengpeng Hou <pengpeng(a)iscas.ac.cn> mmc: sdhci-of-ma35d1: add missing MODULE_DEVICE_TABLE() Ben Dooks <ben.dooks(a)codethink.co.uk> mmc: cqhci: fix to missed endian conversions Pengpeng Hou <pengpeng(a)iscas.ac.cn> mmc: moxart: report DMA completion timeout Pengpeng Hou <pengpeng(a)iscas.ac.cn> gpio: sifive: add missing MODULE_DEVICE_TABLE() David Heidelberg <david(a)ixit.cz> dt-bindings: arm: qcom,ids: Add SoC ID for Snapdragon SDM 850 Zhiwei Zhang <202275009(a)qq.com> RDMA/rxe: Check PDs for memory window binds David Heidelberg <david(a)ixit.cz> soc: qcom: socinfo: Add SoC ID for SDM850 Pengpeng Hou <pengpeng(a)iscas.ac.cn> iio: adc: max1241: add missing MODULE_DEVICE_TABLE() Yun Zhou <yun.zhou(a)windriver.com> block: reject block device inodes with i_rdev == 0 in lookup_bdev() Chin-Yen Lee <timlee(a)realtek.com> wifi: rtw89: wow: add QoS control field to WoWLAN ARP response for MLO William Hansen-Baird <william.hansen.baird(a)gmail.com> wifi: rtlwifi: fix disabling of ASPM for RTL8723BE with AER flooding Chih-Kang Chang <gary.chang(a)realtek.com> wifi: rtw89: wow: only WiFi 6 chips initialize RF registers in WoWLAN mode William Hansen-Baird <william.hansen.baird(a)gmail.com> wifi: rtlwifi: rtl8723be: Remove unnecessary irq save/restore in hw_init() Ben Dooks <ben.dooks(a)codethink.co.uk> dmaengine: dw-axi-dmac: fix __le32 on set of CH_CTL_H_LLI_VALID Yun Zhou <yun.zhou(a)windriver.com> net: mvneta_bm: add suspend/resume support to prevent crash after resume Pengpeng Hou <pengpeng(a)iscas.ac.cn> dmaengine: pl330: remove debugfs file on teardown Charles Keepax <ckeepax(a)opensource.cirrus.com> soundwire: dmi-quirks: Disable ghost Realtek on Asus Expertbook Jiayuan Chen <jiayuan.chen(a)linux.dev> netfilter: ebtables: bound num_counters like nentries in do_replace() Yousef Alhouseen <alhouseenyousef(a)gmail.com> net: usb: rtl8150: handle link status read failures Yuan Chen <chenyuan(a)kylinos.cn> libbpf: Skip bpf_object__probe_loading() when BPF token is in use Haikun Zhou <zhouhaikun5(a)huaqin.corp-partner.google.com> drm/panel-edp: Support MB116AS01'3 edp panel Eric Huang <jinhuieric.huang(a)amd.com> drm/amdkfd: add sanity check in svm_range_is_valid Yang Wang <kevinyang.wang(a)amd.com> drm/amd/pm: Validate legacy hwmgr PP table offsets Yang Wang <kevinyang.wang(a)amd.com> drm/amd/pm: Validate Vega10 PPTable subtable bounds Yang Wang <kevinyang.wang(a)amd.com> drm/amd/pm: Validate Tonga PPTable subtable bounds Xiang Liu <xiang.liu(a)amd.com> drm/amd/pm: Guard VBIOS AC timing table walk Yang Wang <kevinyang.wang(a)amd.com> drm/amd/pm: Validate Tonga PowerPlay state array bounds Yang Wang <kevinyang.wang(a)amd.com> drm/amd/pm: Use uploaded size for legacy custom PPTable Yang Wang <kevinyang.wang(a)amd.com> drm/amd/pm: Validate pp_table header before reading size Yang Wang <kevinyang.wang(a)amd.com> drm/amd/pm: Validate Vega hwmgr PowerPlay table bounds Lijo Lazar <lijo.lazar(a)amd.com> drm/amdgpu: Guard reads in pcie state readout Matthew Jacob <mjacob(a)feralsw.com> drm/amdgpu: Support some Barco AMD based graphics adapters Lijo Lazar <lijo.lazar(a)amd.com> drm/amd/pm: validate vega10 profile mode inputs Lijo Lazar <lijo.lazar(a)amd.com> drm/amdgpu: Validate ATIF buffer length before use Lijo Lazar <lijo.lazar(a)amd.com> drm/amdgpu: Add checks to vbios fetch through ATRM Abhijeeth Babu <babu.jeeth(a)gmail.com> i2c: acpi: Force ELAN1300 touchpads to 100 kHz Nicolas Escande <nico.escande(a)gmail.com> wifi: ath12k: avoid setting 320MHz support on non 6GHz band Jiawen Liu <1298662399(a)qq.com> spi: bcmbca-hsspi: return error from failed controller suspend Jiawen Liu <1298662399(a)qq.com> spi: nxp-fspi: disable runtime PM on probe failures Damon Ding <damon.ding(a)rock-chips.com> drm/panel-edp: Add BOE NE160QDM-NY1 panel Jiawen Liu <1298662399(a)qq.com> spi: bcm63xx-hsspi: return error from failed controller suspend Jiawen Liu <1298662399(a)qq.com> spi: bcm63xx: return error from failed controller suspend Jiawen Liu <1298662399(a)qq.com> spi: bcm-qspi: return error from failed controller suspend Zide Chen <zide.chen(a)intel.com> perf/x86/intel/uncore: Fix PCI PMU cleanup on setup failure Zizhi Wo <wozizhi(a)huawei.com> fat: reject name longer than NAME_MAX in msdos_format_name() Dapeng Mi <dapeng1.mi(a)linux.intel.com> perf/x86/intel: Fallback to sw branch type decoding if no hw decoding Bryam Vargas <hexlabsecurity(a)proton.me> iio: accel: fxls8962af: clamp the device-reported FIFO sample count Mithil Bavishi <bavishimithil(a)gmail.com> ARM: OMAP2+: Add CFI type for omap4_finish_suspend Uwe Kleine-König (The Capable Hub) <u.kleine-koenig(a)baylibre.com> regmap: maple: Workaround for another false-positive compiler warning Haoxiang Li <haoxiang_li2024(a)163.com> ASoC: hdac_hdmi: Fix resource cleanup on probe failure Pengpeng Hou <pengpeng(a)iscas.ac.cn> ASoC: tlv320aic26: remove keyclick sysfs file William Theesfeld <william(a)theesfeld.net> clk: zynq: handle kasprintf() failure in periph_clk registration Pengpeng Hou <pengpeng(a)iscas.ac.cn> ASoC: sma1303: remove fault-check sysfs group on remove Kemeng Shi <shikemeng(a)huaweicloud.com> irqdomain: Plug leak in irq_domain_alloc_irqs_locked() error path Pengpeng Hou <pengpeng(a)iscas.ac.cn> media: cec: stm32: return an error when log-address wait times out Kryštof Černý <cleverline1mc(a)gmail.com> w1: ds2482: add OF device match table Pengpeng Hou <pengpeng(a)iscas.ac.cn> gpio: pca9570: Use I2C match data YiPeng Chai <YiPeng.Chai(a)amd.com> drm/amdgpu: add bounds check to prevent array overflow Gangliang Xie <ganglxie(a)amd.com> drm/amdgpu: add buf length check Ruoyu Wang <ruoyuw560(a)gmail.com> drm/radeon: avoid double free in r600 DPM cleanup Charlene Liu <Charlene.Liu(a)amd.com> drm/amd/display: fix max dispclk_khz/dppclk_khz double 1000 Asad Kamal <asad.kamal(a)amd.com> drm/amdgpu: Gate debugfs MMIO access on kernel lockdown Asad Kamal <asad.kamal(a)amd.com> drm/amd/pm: Validate OD DPM triples before mutating tables Jonas Karlman <jonas(a)kwiboo.se> drm/rockchip: dw_hdmi: Use resume_early pm ops for system suspend YuanZhe Liu <25031212351(a)stu.xidian.edu.cn> ALSA: line6: Clear prev_fbuf on capture buffer release Yao Kai <yaokai34(a)huawei.com> ext4: validate readdir offset before accessing dirent Zihan Xi <zihanx(a)nebusec.ai> net: gso: limit recursive IP-in-IP segmentation Jérémy Jean <Jeremy.Jean(a)oss.cyber.gouv.fr> lib/crypto: arm64: Fix lost Poly1305 carry when resuming NEON state Christian Brauner <brauner(a)kernel.org> fork: don't create io threads once PF_POSTCOREDUMP is set Christian Brauner <brauner(a)kernel.org> fork: move the coredump and exec checks into create_io_thread() Christian Brauner <brauner(a)kernel.org> exec: cancel io_uring requests before de_thread() André Draszik <andre.draszik(a)linaro.org> kbuild: link-vmlinux.sh: improve detection of third pass requirement Ridham Khurana <khurana.ridham222(a)gmail.com> platform: cznic: turris-omnia-mcu: Add missing MODULE_DEVICE_TABLE() Daniel Schaefer <dhs(a)frame.work> iio: hid-sensor: als: scale each channel individually SJ Park <sj(a)kernel.org> mm/damon/sysfs: put target pids for apply_inputs() failure SJ Park <sj(a)kernel.org> mm/damon/sysfs: put target pids for damon_start() failure Baolin Wang <baolin.wang(a)linux.alibaba.com> mm: vmscan: fix dirty folios throttling on cgroup v1 for MGLRU SJ Park <sj(a)kernel.org> mm/damon/core: error damos_commit_quota_goal() for zero target_value Sasha Levin <sashal(a)kernel.org> Revert "KVM: s390: move pv gmap functions into kvm" Sasha Levin <sashal(a)kernel.org> Revert "KVM: s390: use __kvm_faultin_pfn()" Sasha Levin <sashal(a)kernel.org> Revert "KVM: s390: move gmap_shadow_pgt_lookup() into kvm" Sasha Levin <sashal(a)kernel.org> Revert "KVM: s390: pv: fix race when making a page secure" Sasha Levin <sashal(a)kernel.org> Revert "KVM: s390: Fix FOLL_*/FAULT_FLAG_* confusion" Sasha Levin <sashal(a)kernel.org> Revert "s390/uv: Don't return 0 from make_hva_secure() if the operation was not successful" Fuad Tabba <fuad.tabba(a)linux.dev> KVM: arm64: Transfer the hyp stack pages out of the host stage-2 Namjae Jeon <linkinjeon(a)kernel.org> ksmbd: wait for negotiation before receiving another PDU Zizhen Liu <pointerliu(a)126.com> net: skbuff: propagate shared-frag marker in skb_zerocopy() ------------- Diffstat: Documentation/admin-guide/cgroup-v2.rst | 10 +- Documentation/block/blk-mq.rst | 2 +- .../bindings/clock/nuvoton,ma35d1-clk.yaml | 16 +- Documentation/hwmon/k10temp.rst | 8 +- Documentation/networking/ip-sysctl.rst | 5 +- Documentation/networking/rxrpc.rst | 13 +- Documentation/virt/hyperv/vmbus.rst | 17 +- Makefile | 7 +- arch/alpha/include/asm/mmu_context.h | 35 +- arch/alpha/include/asm/sfp-machine.h | 4 + arch/alpha/include/asm/switch_to.h | 1 - arch/alpha/include/asm/tlbflush.h | 3 +- arch/alpha/kernel/rtc.c | 37 +- arch/alpha/kernel/smp.c | 67 +- arch/alpha/mm/fault.c | 23 +- arch/alpha/mm/tlbflush.c | 18 +- arch/arm/include/asm/linkage.h | 29 + arch/arm/include/asm/smp.h | 2 +- arch/arm/kernel/head-nommu.S | 1 + arch/arm/kernel/head.S | 1 + arch/arm/kernel/smp.c | 15 +- arch/arm/mach-imx/pm-imx6.c | 26 +- arch/arm/mach-imx/suspend-imx6.S | 6 +- arch/arm/mach-omap2/sleep44xx.S | 5 +- arch/arm/mm/alignment.c | 51 +- .../boot/dts/freescale/imx8mp-verdin-yavia.dtsi | 7 +- arch/arm64/boot/dts/mediatek/mt7986a.dtsi | 1 + .../dts/qcom/sdm845-xiaomi-beryllium-common.dtsi | 6 + arch/arm64/boot/dts/qcom/sdm845-xiaomi-polaris.dts | 6 + arch/arm64/boot/dts/ti/k3-am62-lp-sk.dts | 2 +- arch/arm64/boot/dts/ti/k3-am62-phycore-som.dtsi | 2 +- arch/arm64/boot/dts/ti/k3-am62-verdin.dtsi | 6 +- arch/arm64/boot/dts/ti/k3-am625-beagleplay.dts | 6 +- arch/arm64/boot/dts/ti/k3-am62a-phycore-som.dtsi | 2 +- arch/arm64/boot/dts/ti/k3-am62a7-sk.dts | 5 +- arch/arm64/boot/dts/ti/k3-am62x-phyboard-lyra.dtsi | 2 +- arch/arm64/boot/dts/ti/k3-am62x-sk-common.dtsi | 2 +- arch/arm64/crypto/poly1305-armv8.pl | 2 +- arch/arm64/include/asm/kvm_host.h | 7 +- arch/arm64/include/asm/pgtable.h | 3 + arch/arm64/kernel/efi.c | 8 +- arch/arm64/kvm/arm.c | 31 +- arch/arm64/kvm/hyp/nvhe/setup.c | 10 + arch/arm64/kvm/vgic/vgic-mmio-v3.c | 33 +- arch/arm64/mm/contpte.c | 4 +- arch/arm64/mm/mmu.c | 14 + arch/loongarch/include/asm/barrier.h | 3 - arch/loongarch/include/asm/hw_breakpoint.h | 4 +- arch/loongarch/include/asm/loongarch.h | 4 +- arch/loongarch/include/asm/numa.h | 2 +- arch/loongarch/include/asm/pgtable.h | 2 +- arch/loongarch/kernel/hw_breakpoint.c | 27 +- arch/loongarch/kernel/irq.c | 3 +- arch/loongarch/kernel/traps.c | 13 +- arch/loongarch/kvm/vcpu.c | 38 +- arch/loongarch/mm/init.c | 17 +- arch/loongarch/pci/pci.c | 3 +- arch/microblaze/kernel/entry.S | 19 +- arch/microblaze/kernel/signal.c | 26 + arch/mips/Kconfig | 1 + arch/mips/mm/tlb-r4k.c | 21 +- arch/powerpc/kvm/book3s_hv.c | 76 +- arch/powerpc/kvm/book3s_paired_singles.c | 7 +- arch/powerpc/platforms/pseries/plpks.c | 27 +- arch/powerpc/platforms/pseries/plpks_sed_ops.c | 12 +- arch/riscv/include/asm/pgtable.h | 9 +- arch/riscv/kernel/traps.c | 3 + arch/riscv/kvm/mmu.c | 2 + arch/riscv/kvm/vcpu_exit.c | 2 +- arch/riscv/kvm/vcpu_pmu.c | 9 + arch/riscv/kvm/vcpu_sbi_replace.c | 12 +- arch/riscv/net/bpf_jit_comp32.c | 47 +- arch/s390/include/asm/gmap.h | 3 +- arch/s390/include/asm/uv.h | 6 +- arch/s390/kernel/perf_cpum_cf.c | 3 + arch/s390/kernel/process.c | 12 +- arch/s390/kernel/signal.c | 6 +- arch/s390/kernel/uv.c | 401 +- arch/s390/kvm/Makefile | 2 +- arch/s390/kvm/gaccess.c | 42 +- arch/s390/kvm/gmap.c | 121 - arch/s390/kvm/gmap.h | 19 - arch/s390/kvm/intercept.c | 3 +- arch/s390/kvm/kvm-s390.c | 156 +- arch/s390/kvm/kvm-s390.h | 6 - arch/s390/kvm/pv.c | 21 - arch/s390/lib/probes.c | 2 +- arch/s390/mm/gmap.c | 45 +- arch/x86/events/core.c | 19 +- arch/x86/events/intel/lbr.c | 2 +- arch/x86/events/intel/uncore.c | 5 +- arch/x86/include/asm/kvm_host.h | 18 +- arch/x86/include/asm/vmx.h | 8 + arch/x86/kernel/process.c | 1 + arch/x86/kvm/hyperv.c | 5 +- arch/x86/kvm/mmu/mmu.c | 29 +- arch/x86/kvm/mmu/paging_tmpl.h | 39 +- arch/x86/kvm/regs.c | 3 +- arch/x86/kvm/svm/nested.c | 15 +- arch/x86/kvm/svm/sev.c | 73 +- arch/x86/kvm/svm/svm.c | 35 +- arch/x86/kvm/svm/svm.h | 1 + arch/x86/kvm/vmx/nested.c | 41 +- arch/x86/kvm/vmx/vmx.c | 9 +- arch/x86/kvm/x86.c | 82 +- arch/x86/kvm/xen.c | 18 + arch/x86/mm/pat/set_memory.c | 23 +- block/bdev.c | 12 + block/blk-crypto-fallback.c | 6 + block/blk-iocost.c | 2 + block/blk-mq.c | 2 + crypto/algif_skcipher.c | 8 +- drivers/accessibility/speakup/selection.c | 6 + drivers/acpi/acpi_fpdt.c | 55 +- drivers/acpi/apei/ghes.c | 10 +- drivers/acpi/battery.c | 14 + drivers/acpi/button.c | 11 + drivers/acpi/pfr_update.c | 2 +- drivers/acpi/sysfs.c | 9 +- drivers/acpi/video_detect.c | 8 + drivers/ata/ahci_st.c | 78 +- drivers/ata/ata_generic.c | 6 +- drivers/ata/libahci.c | 28 +- drivers/ata/libahci_platform.c | 4 + drivers/ata/libata-core.c | 75 +- drivers/ata/libata-scsi.c | 5 + drivers/ata/libata-sff.c | 5 + drivers/ata/pata_ep93xx.c | 30 +- drivers/ata/sata_fsl.c | 26 +- drivers/ata/sata_qstor.c | 8 +- drivers/base/attribute_container.c | 7 +- drivers/base/base.h | 1 + drivers/base/bus.c | 45 +- drivers/base/core.c | 4 +- drivers/base/dd.c | 92 +- drivers/base/regmap/regcache-maple.c | 2 +- drivers/base/regmap/regmap-debugfs.c | 1 + drivers/base/regmap/regmap.c | 15 +- drivers/block/aoe/aoenet.c | 14 +- drivers/block/floppy.c | 8 +- drivers/block/loop.c | 6 +- drivers/block/xen-blkfront.c | 16 +- drivers/bluetooth/btrsi.c | 3 +- drivers/bluetooth/btusb.c | 8 +- drivers/bluetooth/hci_bcsp.c | 5 +- drivers/bluetooth/hci_nokia.c | 20 + drivers/bluetooth/hci_vhci.c | 4 + drivers/bus/mhi/host/pm.c | 14 +- drivers/char/hw_random/amd-rng.c | 2 +- drivers/char/hw_random/ba431-rng.c | 2 +- drivers/char/hw_random/core.c | 1 + drivers/char/ipmi/ipmi_msghandler.c | 1 + drivers/char/tpm/tpm-dev-common.c | 3 + drivers/char/tpm/tpm_nsc.c | 8 +- drivers/char/tpm/tpm_tis_spi.h | 8 +- drivers/char/virtio_console.c | 13 +- drivers/clk/imx/clk-imx8qxp-lpcg.c | 1 + drivers/clk/imx/clk-imx8qxp.c | 1 + drivers/clk/imx/clk.c | 15 +- drivers/clk/mstar/clk-msc313-mpll.c | 2 +- drivers/clk/mvebu/ap-cpu-clk.c | 4 +- drivers/clk/qcom/gcc-ipq5018.c | 10 + drivers/clk/qcom/gcc-ipq5332.c | 1 + drivers/clk/starfive/clk-starfive-jh7110-isp.c | 2 +- drivers/clk/sunxi-ng/ccu_common.c | 12 +- drivers/clk/tegra/clk-pll.c | 1 + drivers/clk/zynq/clkc.c | 8 + drivers/clocksource/timer-digicolor.c | 2 + drivers/clocksource/timer-fttmr010.c | 2 + drivers/comedi/drivers/aio_iiro_16.c | 3 + drivers/comedi/drivers/das6402.c | 10 +- drivers/comedi/drivers/dt2811.c | 7 +- drivers/comedi/drivers/ni_at_a2150.c | 13 +- drivers/comedi/drivers/ni_atmio16d.c | 3 + drivers/comedi/drivers/pcl711.c | 3 +- drivers/comedi/drivers/pcl816.c | 3 +- drivers/comedi/drivers/pcl818.c | 3 +- drivers/comedi/drivers/pcmmio.c | 3 + drivers/comedi/drivers/pcmuio.c | 5 +- drivers/comedi/drivers/quatech_daqp_cs.c | 4 +- drivers/cpufreq/Kconfig | 1 + drivers/cpufreq/amd-pstate.c | 6 +- drivers/cpufreq/cpufreq_conservative.c | 8 +- drivers/cpufreq/cpufreq_governor.c | 29 +- drivers/cpufreq/cpufreq_governor.h | 2 + drivers/cpufreq/cpufreq_stats.c | 4 + drivers/cpufreq/intel_pstate.c | 2 + drivers/cpufreq/loongson3_cpufreq.c | 73 +- drivers/crypto/amlogic/amlogic-gxl-core.c | 7 +- drivers/crypto/atmel-aes.c | 2 +- drivers/crypto/atmel-tdes.c | 6 +- drivers/crypto/caam/caampkc.c | 6 + drivers/crypto/ccp/dbc.c | 4 +- drivers/crypto/hisilicon/hpre/hpre_crypto.c | 20 +- .../crypto/intel/keembay/keembay-ocs-aes-core.c | 3 +- drivers/crypto/intel/keembay/keembay-ocs-ecc.c | 1 + drivers/crypto/intel/keembay/ocs-aes.c | 3 +- drivers/crypto/intel/qat/qat_common/adf_dev_mgr.c | 10 +- .../crypto/intel/qat/qat_common/adf_gen4_vf_mig.c | 5 + drivers/crypto/intel/qat/qat_common/adf_vf_isr.c | 2 - drivers/crypto/nx/nx-842.c | 2 + drivers/crypto/sa2ul.c | 3 +- drivers/cxl/acpi.c | 20 +- drivers/cxl/core/pci.c | 20 +- drivers/cxl/core/port.c | 3 + drivers/dax/super.c | 2 +- drivers/dma/altera-msgdma.c | 10 +- drivers/dma/dw-axi-dmac/dw-axi-dmac-platform.c | 2 +- drivers/dma/pl330.c | 19 +- drivers/edac/edac_mc.c | 6 +- drivers/edac/i10nm_base.c | 1 + drivers/firewire/ohci-serdes-test.c | 4 +- drivers/firewire/ohci.h | 2 +- drivers/firmware/efi/libstub/efi-stub.c | 8 + drivers/firmware/imx/imx-scu.c | 25 +- drivers/fpga/fpga-mgr.c | 2 +- drivers/gpio/gpio-davinci.c | 6 +- drivers/gpio/gpio-mvebu.c | 33 +- drivers/gpio/gpio-pca953x.c | 14 +- drivers/gpio/gpio-pca9570.c | 2 +- drivers/gpio/gpio-sifive.c | 1 + drivers/gpio/gpio-vf610.c | 1 + drivers/gpio/gpiolib.c | 12 +- drivers/gpu/drm/amd/amdgpu/amdgpu_acpi.c | 68 +- drivers/gpu/drm/amd/amdgpu/amdgpu_amdkfd_gfx_v11.c | 3 +- drivers/gpu/drm/amd/amdgpu/amdgpu_amdkfd_gpuvm.c | 18 +- drivers/gpu/drm/amd/amdgpu/amdgpu_atomfirmware.c | 2 - drivers/gpu/drm/amd/amdgpu/amdgpu_bios.c | 10 +- drivers/gpu/drm/amd/amdgpu/amdgpu_debugfs.c | 7 + drivers/gpu/drm/amd/amdgpu/amdgpu_device.c | 13 +- drivers/gpu/drm/amd/amdgpu/amdgpu_drv.c | 13 + drivers/gpu/drm/amd/amdgpu/amdgpu_hmm.c | 9 +- drivers/gpu/drm/amd/amdgpu/amdgpu_psp_ta.c | 5 +- drivers/gpu/drm/amd/amdgpu/amdgpu_ras.c | 7 + drivers/gpu/drm/amd/amdgpu/amdgpu_ttm.c | 3 +- drivers/gpu/drm/amd/amdgpu/amdgpu_vm_sdma.c | 5 + drivers/gpu/drm/amd/amdgpu/aqua_vanjaram.c | 57 +- drivers/gpu/drm/amd/amdgpu/cik.c | 10 + drivers/gpu/drm/amd/amdgpu/gmc_v12_0.c | 4 +- drivers/gpu/drm/amd/amdgpu/uvd_v3_1.c | 2 +- drivers/gpu/drm/amd/amdgpu/vi.c | 10 + drivers/gpu/drm/amd/amdkfd/kfd_chardev.c | 36 +- drivers/gpu/drm/amd/amdkfd/kfd_crat.c | 35 +- drivers/gpu/drm/amd/amdkfd/kfd_doorbell.c | 23 +- drivers/gpu/drm/amd/amdkfd/kfd_mqd_manager_v10.c | 4 +- drivers/gpu/drm/amd/amdkfd/kfd_mqd_manager_v11.c | 4 +- drivers/gpu/drm/amd/amdkfd/kfd_mqd_manager_v12.c | 4 +- drivers/gpu/drm/amd/amdkfd/kfd_mqd_manager_v9.c | 6 +- drivers/gpu/drm/amd/amdkfd/kfd_mqd_manager_vi.c | 7 +- drivers/gpu/drm/amd/amdkfd/kfd_priv.h | 4 + drivers/gpu/drm/amd/amdkfd/kfd_process.c | 4 +- drivers/gpu/drm/amd/amdkfd/kfd_queue.c | 23 +- drivers/gpu/drm/amd/amdkfd/kfd_svm.c | 29 +- drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm.c | 11 +- .../drm/amd/display/amdgpu_dm/amdgpu_dm_helpers.c | 2 +- .../amd/display/amdgpu_dm/amdgpu_dm_mst_types.c | 3 + .../gpu/drm/amd/display/dc/dce60/dce60_resource.c | 7 + .../gpu/drm/amd/display/dc/dml/dsc/rc_calc_fpu.c | 2 +- .../drm/amd/display/dc/dml2/dml21/dml21_wrapper.c | 8 +- .../dml21/src/dml2_core/dml2_core_dcn4_calcs.c | 2 + .../drm/amd/display/modules/color/color_gamma.c | 3 +- .../amd/include/asic_reg/dcn/dcn_6_0_0_offset.h | 15799 +++++ .../amd/include/asic_reg/dcn/dcn_6_0_0_sh_mask.h | 58556 +++++++++++++++++++ .../amd/include/asic_reg/dpcs/dpcs_6_0_0_offset.h | 47 + .../amd/include/asic_reg/dpcs/dpcs_6_0_0_sh_mask.h | 55 + .../include/asic_reg/mmhub/mmhub_5_0_1_offset.h | 17 + .../include/asic_reg/mmhub/mmhub_5_0_1_sh_mask.h | 17 + drivers/gpu/drm/amd/include/kgd_pp_interface.h | 1 + drivers/gpu/drm/amd/pm/amdgpu_dpm.c | 23 +- drivers/gpu/drm/amd/pm/inc/amdgpu_dpm.h | 2 + drivers/gpu/drm/amd/pm/powerplay/amd_powerplay.c | 21 +- .../gpu/drm/amd/pm/powerplay/hwmgr/ppatomctrl.c | 28 +- .../amd/pm/powerplay/hwmgr/process_pptables_v1_0.c | 673 +- .../drm/amd/pm/powerplay/hwmgr/processpptables.c | 446 +- .../gpu/drm/amd/pm/powerplay/hwmgr/smu7_hwmgr.c | 36 +- .../gpu/drm/amd/pm/powerplay/hwmgr/vega10_hwmgr.c | 48 +- .../pm/powerplay/hwmgr/vega10_processpptables.c | 623 +- .../pm/powerplay/hwmgr/vega12_processpptables.c | 7 + .../pm/powerplay/hwmgr/vega20_processpptables.c | 7 + drivers/gpu/drm/amd/pm/swsmu/amdgpu_smu.c | 19 +- .../gpu/drm/amd/pm/swsmu/smu13/smu_v13_0_0_ppt.c | 2 - .../gpu/drm/amd/pm/swsmu/smu13/smu_v13_0_7_ppt.c | 4 +- drivers/gpu/drm/arm/malidp_crtc.c | 1 + drivers/gpu/drm/bridge/analogix/analogix_dp_core.c | 13 +- drivers/gpu/drm/etnaviv/etnaviv_gpu.c | 16 +- drivers/gpu/drm/etnaviv/etnaviv_gpu.h | 6 + drivers/gpu/drm/i915/display/intel_dmc.c | 55 + drivers/gpu/drm/i915/display/intel_dmc_regs.h | 12 + drivers/gpu/drm/i915/display/intel_dp_mst.c | 21 + drivers/gpu/drm/i915/display/intel_dp_mst.h | 2 + drivers/gpu/drm/i915/display/intel_link_bw.c | 4 +- drivers/gpu/drm/msm/adreno/a6xx_catalog.c | 2 +- drivers/gpu/drm/msm/hdmi/hdmi_bridge.c | 2 +- drivers/gpu/drm/msm/hdmi/hdmi_phy.c | 16 +- drivers/gpu/drm/msm/msm_ringbuffer.c | 2 +- drivers/gpu/drm/msm/msm_ringbuffer.h | 1 + drivers/gpu/drm/nouveau/nouveau_abi16.c | 4 + drivers/gpu/drm/nouveau/nouveau_connector.c | 1 + drivers/gpu/drm/nouveau/nouveau_dp.c | 4 +- drivers/gpu/drm/nouveau/nouveau_fence.c | 2 +- drivers/gpu/drm/nouveau/nouveau_svm.c | 13 + drivers/gpu/drm/panel/panel-edp.c | 2 + drivers/gpu/drm/panel/panel-simple.c | 3 + drivers/gpu/drm/panthor/panthor_sched.c | 14 +- drivers/gpu/drm/radeon/atombios_crtc.c | 5 +- drivers/gpu/drm/radeon/atombios_encoders.c | 23 +- drivers/gpu/drm/radeon/r600_dpm.c | 21 +- drivers/gpu/drm/rockchip/dw_hdmi-rockchip.c | 7 +- drivers/gpu/drm/ttm/ttm_bo_util.c | 11 +- drivers/gpu/drm/virtio/virtgpu_drv.h | 1 + drivers/gpu/drm/virtio/virtgpu_kms.c | 1 + drivers/gpu/drm/virtio/virtgpu_vq.c | 15 + drivers/gpu/drm/xe/display/intel_fb_bo.c | 3 +- drivers/gpu/drm/xe/display/xe_fb_pin.c | 3 +- drivers/gpu/drm/xe/xe_exec_queue_types.h | 12 + drivers/gpu/drm/xe/xe_preempt_fence.c | 7 + drivers/gpu/drm/xe/xe_vm.c | 18 +- drivers/gpu/host1x/hw/cdma_hw.c | 2 +- drivers/greybus/manifest.c | 2 + drivers/hid/amd-sfh-hid/amd_sfh_client.c | 4 +- .../amd-sfh-hid/hid_descriptor/amd_sfh_hid_desc.h | 2 - .../hid_descriptor/amd_sfh_hid_report_desc.h | 7 - drivers/hid/amd-sfh-hid/sfh1_1/amd_sfh_interface.c | 6 + drivers/hid/hid-core.c | 4 +- drivers/hid/hid-cougar.c | 3 + drivers/hid/hid-cp2112.c | 9 +- drivers/hid/hid-elo.c | 3 + drivers/hid/hid-ids.h | 6 + drivers/hid/hid-input.c | 17 +- drivers/hid/hid-logitech-dj.c | 3 + drivers/hid/hid-logitech-hidpp.c | 2 + drivers/hid/hid-mcp2200.c | 5 + drivers/hid/hid-mcp2221.c | 2 +- drivers/hid/hid-multitouch.c | 19 +- drivers/hid/hid-picolcd_fb.c | 12 +- drivers/hid/hid-prodikeys.c | 7 +- drivers/hid/hid-pxrc.c | 3 + drivers/hid/hid-quirks.c | 4 + drivers/hid/hid-rmi.c | 2 +- drivers/hid/hid-roccat-isku.c | 3 + drivers/hid/hid-roccat-koneplus.c | 3 + drivers/hid/hid-roccat-konepure.c | 3 + drivers/hid/hid-roccat-kovaplus.c | 3 + drivers/hid/hid-roccat-pyra.c | 3 + drivers/hid/hid-roccat-ryos.c | 3 + drivers/hid/hid-roccat-savu.c | 3 + drivers/hid/hid-roccat.c | 8 +- drivers/hid/hid-zydacron.c | 3 + drivers/hid/i2c-hid/i2c-hid-core.c | 4 +- drivers/hid/intel-ish-hid/ishtp-hid-client.c | 5 +- drivers/hid/usbhid/hiddev.c | 37 +- drivers/hid/wacom_sys.c | 198 +- drivers/hid/wacom_wac.c | 99 +- drivers/hid/wacom_wac.h | 6 +- drivers/hsi/controllers/omap_ssi_core.c | 3 + drivers/hte/hte-tegra194.c | 10 +- drivers/hv/ring_buffer.c | 29 +- drivers/hwmon/asus_rog_ryujin.c | 22 +- drivers/hwmon/coretemp.c | 31 +- drivers/hwmon/corsair-cpro.c | 9 +- drivers/hwmon/gigabyte_waterforce.c | 5 + drivers/hwmon/k10temp.c | 5 +- drivers/hwmon/lm95245.c | 6 +- drivers/hwmon/sht3x.c | 5 +- drivers/i2c/busses/i2c-designware-master.c | 8 + drivers/i2c/busses/i2c-imx-lpi2c.c | 21 +- drivers/i2c/busses/i2c-mt7621.c | 9 +- drivers/i2c/busses/i2c-qcom-cci.c | 24 +- drivers/i2c/i2c-core-acpi.c | 7 +- drivers/i3c/master.c | 3 +- drivers/iio/accel/adis16201.c | 10 +- drivers/iio/accel/adxl313_spi.c | 2 + drivers/iio/accel/adxl380_spi.c | 2 + drivers/iio/accel/fxls8962af-core.c | 2 + drivers/iio/accel/kxcjk-1013.c | 1 + drivers/iio/accel/mma9551.c | 1 + drivers/iio/accel/mma9553.c | 1 + drivers/iio/adc/adi-axi-adc.c | 4 + drivers/iio/adc/at91-sama5d2_adc.c | 1 + drivers/iio/adc/max11205.c | 2 + drivers/iio/adc/max1241.c | 1 + drivers/iio/adc/mcp3911.c | 2 + drivers/iio/adc/stm32-adc.c | 4 +- drivers/iio/adc/ti-adc128s052.c | 8 +- drivers/iio/dac/ad5755.c | 3 + drivers/iio/frequency/adf4377.c | 3 + drivers/iio/imu/inv_icm42600/inv_icm42600.h | 1 + drivers/iio/imu/inv_icm42600/inv_icm42600_accel.c | 17 +- drivers/iio/imu/inv_icm42600/inv_icm42600_buffer.c | 2 + drivers/iio/imu/inv_icm42600/inv_icm42600_core.c | 9 + drivers/iio/imu/inv_icm42600/inv_icm42600_gyro.c | 8 +- drivers/iio/light/apds9306.c | 2 +- drivers/iio/light/hid-sensor-als.c | 22 +- drivers/iio/potentiometer/x9250.c | 7 +- drivers/iio/pressure/bmp280-spi.c | 2 + drivers/infiniband/hw/hfi1/fault.c | 1 - drivers/infiniband/sw/rxe/rxe_mw.c | 20 +- drivers/input/joystick/xpad.c | 1 + drivers/input/keyboard/matrix_keypad.c | 3 - drivers/iommu/amd/amd_iommu_types.h | 1 + drivers/iommu/amd/iommu.c | 38 +- drivers/iommu/arm/arm-smmu-v3/tegra241-cmdqv.c | 16 +- drivers/iommu/arm/arm-smmu/arm-smmu-qcom.c | 1 + drivers/iommu/arm/arm-smmu/qcom_iommu.c | 18 +- drivers/iommu/dma-iommu.c | 20 +- drivers/iommu/intel/cache.c | 5 +- drivers/iommu/intel/iommu.h | 17 +- drivers/iommu/iommufd/fault.c | 4 +- drivers/iommu/iommufd/io_pagetable.c | 3 + drivers/iommu/rockchip-iommu.c | 13 + drivers/ipack/devices/ipoctal.c | 16 +- drivers/irqchip/irq-gic-v3-its.c | 2 +- drivers/irqchip/irq-imx-intmux.c | 15 +- drivers/irqchip/irq-mchp-eic.c | 4 +- drivers/irqchip/irq-msi-lib.c | 1 + drivers/irqchip/irq-riscv-imsic-platform.c | 2 +- drivers/leds/flash/leds-ktd2692.c | 10 +- drivers/mailbox/mtk-cmdq-mailbox.c | 7 +- drivers/mailbox/qcom-ipcc.c | 6 + drivers/md/dm-bufio.c | 4 +- drivers/md/dm-integrity.c | 55 + drivers/md/dm-snap-persistent.c | 7 +- drivers/md/dm-vdo/indexer/chapter-index.c | 15 +- drivers/md/dm-vdo/indexer/delta-index.c | 17 +- drivers/md/dm-vdo/indexer/volume.c | 6 - drivers/md/dm-writecache.c | 54 +- drivers/md/dm.c | 2 +- drivers/md/md.c | 21 +- drivers/md/raid5-cache.c | 34 +- drivers/md/raid5.c | 13 +- drivers/md/raid5.h | 1 + drivers/media/cec/core/cec-adap.c | 1 - drivers/media/cec/platform/stm32/stm32-cec.c | 16 +- drivers/media/cec/platform/tegra/tegra_cec.c | 14 +- .../extron-da-hd-4k-plus/extron-da-hd-4k-plus.c | 4 +- drivers/media/common/saa7146/saa7146_core.c | 3 +- drivers/media/common/v4l2-tpg/v4l2-tpg-core.c | 14 +- drivers/media/dvb-core/dmxdev.c | 11 +- drivers/media/dvb-frontends/stv0900_core.c | 2 + drivers/media/dvb-frontends/stv090x.c | 2 + drivers/media/i2c/adv7180.c | 2 +- drivers/media/i2c/adv7604.c | 3 +- drivers/media/i2c/alvium-csi2.c | 1 + drivers/media/i2c/ov8856.c | 3 +- drivers/media/i2c/ov8865.c | 48 +- drivers/media/i2c/tc358743.c | 3 +- drivers/media/pci/cx18/cx18-driver.c | 9 +- drivers/media/pci/cx18/cx18-vbi.c | 2 +- drivers/media/pci/cx23885/cx23885-core.c | 4 + drivers/media/pci/cx23885/cx23885-dvb.c | 14 +- drivers/media/pci/cx88/cx88-mpeg.c | 10 +- drivers/media/pci/intel/ipu-bridge.c | 2 +- drivers/media/pci/ivtv/ivtv-vbi.c | 2 +- drivers/media/pci/tw68/tw68-core.c | 2 +- drivers/media/pci/tw686x/tw686x-core.c | 10 + drivers/media/platform/amphion/vpu_core.c | 19 +- drivers/media/platform/amphion/vpu_drv.c | 1 + drivers/media/platform/atmel/atmel-isi.c | 7 +- .../platform/chips-media/wave5/wave5-vpu-dec.c | 24 + .../platform/chips-media/wave5/wave5-vpu-enc.c | 6 +- .../media/platform/imagination/e5010-jpeg-enc.c | 4 +- drivers/media/platform/m2m-deinterlace.c | 2 +- drivers/media/platform/marvell/Kconfig | 1 + drivers/media/platform/marvell/mcam-core.c | 14 +- drivers/media/platform/marvell/mmp-driver.c | 5 +- .../media/platform/mediatek/jpeg/mtk_jpeg_core.c | 17 +- .../media/platform/mediatek/mdp3/mtk-mdp3-comp.c | 14 +- .../mediatek/vcodec/decoder/mtk_vcodec_dec_drv.c | 2 + drivers/media/platform/mediatek/vpu/mtk_vpu.c | 2 + .../media/platform/microchip/microchip-csi2dc.c | 1 + .../media/platform/microchip/microchip-isc-base.c | 62 +- .../media/platform/microchip/microchip-isc-clk.c | 7 +- drivers/media/platform/microchip/microchip-isc.h | 1 + .../platform/microchip/microchip-sama5d2-isc.c | 28 +- .../platform/microchip/microchip-sama7g5-isc.c | 28 +- drivers/media/platform/nuvoton/npcm-video.c | 9 +- drivers/media/platform/nxp/imx-jpeg/mxc-jpeg.c | 23 +- drivers/media/platform/qcom/camss/camss-vfe-17x.c | 5 +- drivers/media/platform/qcom/camss/camss-vfe.c | 14 +- .../media/platform/samsung/exynos4-is/fimc-lite.c | 3 +- drivers/media/platform/samsung/s5p-mfc/s5p_mfc.c | 4 +- .../media/platform/st/sti/delta/delta-mjpeg-hdr.c | 7 +- drivers/media/platform/ti/davinci/vpif_capture.c | 5 +- drivers/media/platform/ti/davinci/vpif_display.c | 3 + drivers/media/platform/verisilicon/hantro_drv.c | 9 +- .../platform/verisilicon/hantro_g1_mpeg2_dec.c | 5 + .../verisilicon/rockchip_vpu981_hw_av1_dec.c | 68 +- drivers/media/rc/bpf-lirc.c | 18 +- drivers/media/rc/fintek-cir.c | 4 + drivers/media/rc/imon.c | 5 - drivers/media/rc/ir-hix5hd2.c | 5 +- drivers/media/rc/ir-mce_kbd-decoder.c | 5 +- drivers/media/rc/ir_toy.c | 2 +- drivers/media/rc/lirc_dev.c | 3 + drivers/media/rc/meson-ir-tx.c | 20 +- drivers/media/rc/rc-ir-raw.c | 66 +- drivers/media/rc/rc-main.c | 42 +- drivers/media/rc/redrat3.c | 21 + drivers/media/rc/streamzap.c | 1 + drivers/media/rc/sunxi-cir.c | 2 +- drivers/media/test-drivers/vicodec/codec-fwht.h | 2 +- drivers/media/test-drivers/vicodec/vicodec-core.c | 16 +- drivers/media/test-drivers/vidtv/vidtv_bridge.c | 4 + drivers/media/test-drivers/vidtv/vidtv_demod.c | 9 - drivers/media/test-drivers/vim2m.c | 29 +- drivers/media/test-drivers/vivid/vivid-core.c | 1 + drivers/media/test-drivers/vivid/vivid-vid-cap.c | 13 + drivers/media/usb/au0828/au0828-core.c | 4 + drivers/media/usb/au0828/au0828-dvb.c | 20 +- drivers/media/usb/cx231xx/cx231xx-audio.c | 15 +- drivers/media/usb/cx231xx/cx231xx-cards.c | 2 +- drivers/media/usb/cx231xx/cx231xx.h | 2 +- drivers/media/usb/dvb-usb-v2/rtl28xxu.c | 14 +- drivers/media/usb/em28xx/em28xx-audio.c | 7 + drivers/media/usb/em28xx/em28xx-cards.c | 2 +- drivers/media/usb/em28xx/em28xx-core.c | 3 - drivers/media/usb/em28xx/em28xx-video.c | 26 +- drivers/media/usb/go7007/go7007-driver.c | 5 +- drivers/media/usb/go7007/go7007-fw.c | 28 +- drivers/media/usb/go7007/go7007-usb.c | 8 + drivers/media/usb/go7007/s2250-board.c | 54 +- drivers/media/usb/gspca/gspca.c | 3 +- drivers/media/usb/hackrf/hackrf.c | 7 +- drivers/media/usb/pvrusb2/pvrusb2-sysfs.c | 1 + drivers/media/usb/usbtv/usbtv-core.c | 6 +- drivers/media/usb/usbtv/usbtv-video.c | 4 + drivers/media/usb/uvc/uvc_ctrl.c | 2 +- drivers/media/v4l2-core/v4l2-common.c | 2 +- drivers/media/v4l2-core/v4l2-ctrls-core.c | 12 +- drivers/memory/brcmstb_dpfe.c | 24 +- drivers/mfd/axp20x.c | 2 +- drivers/mfd/da903x.c | 34 +- drivers/mfd/ipaq-micro.c | 2 +- drivers/mfd/tps65217.c | 69 +- drivers/mfd/wcd934x.c | 8 +- drivers/misc/bcm-vk/bcm_vk_msg.c | 18 +- drivers/misc/genwqe/card_utils.c | 2 +- drivers/misc/hpilo.c | 7 +- drivers/misc/ibmvmc.c | 17 +- drivers/misc/mei/vsc-tp.c | 2 +- drivers/mmc/core/block.c | 5 + drivers/mmc/host/cqhci-core.c | 14 +- drivers/mmc/host/dw_mmc.c | 1 + drivers/mmc/host/moxart-mmc.c | 11 +- drivers/mmc/host/sdhci-of-ma35d1.c | 1 + drivers/mtd/chips/cfi_cmdset_0002.c | 15 + drivers/mtd/maps/amd76xrom.c | 2 + drivers/mtd/maps/l440gx.c | 2 - drivers/mtd/maps/pci.c | 2 +- drivers/mtd/mtdcore.c | 2 +- drivers/mtd/mtdsuper.c | 4 +- drivers/mtd/nand/raw/atmel/nand-controller.c | 6 +- drivers/mtd/nand/raw/sunxi_nand.c | 3 + drivers/mtd/parsers/qcomsmempart.c | 4 +- drivers/mtd/spi-nor/core.c | 9 + drivers/mtd/spi-nor/sfdp.c | 8 + drivers/net/bonding/bond_main.c | 2 +- drivers/net/dsa/mt7530.c | 44 +- drivers/net/ethernet/google/gve/gve_flow_rule.c | 1 + drivers/net/ethernet/hisilicon/hisi_femac.c | 1 + drivers/net/ethernet/intel/ixgbe/ixgbe_main.c | 40 +- drivers/net/ethernet/marvell/mvneta.c | 18 + drivers/net/ethernet/marvell/mvneta_bm.c | 72 + .../ethernet/marvell/prestera/prestera_router.c | 6 +- drivers/net/ethernet/mediatek/mtk_wed.c | 5 + drivers/net/ethernet/mediatek/mtk_wed_regs.h | 1 + drivers/net/ethernet/sfc/efx.c | 4 + drivers/net/ethernet/stmicro/stmmac/chain_mode.c | 3 +- drivers/net/ethernet/stmicro/stmmac/ring_mode.c | 3 +- drivers/net/ethernet/stmicro/stmmac/stmmac_main.c | 4 + .../net/ethernet/stmicro/stmmac/stmmac_platform.c | 6 +- drivers/net/macvlan.c | 3 +- drivers/net/netdevsim/bpf.c | 11 + drivers/net/pcs/pcs-mtk-lynxi.c | 7 +- drivers/net/phy/sfp.c | 3 + drivers/net/ppp/ppp_generic.c | 1 + drivers/net/tap.c | 5 +- drivers/net/team/team_mode_broadcast.c | 2 + drivers/net/tun.c | 14 +- drivers/net/usb/cdc_ether.c | 16 + drivers/net/usb/pegasus.c | 16 +- drivers/net/usb/qmi_wwan.c | 1 + drivers/net/usb/rtl8150.c | 4 +- drivers/net/veth.c | 5 +- drivers/net/virtio_net.c | 25 +- drivers/net/wireless/ath/ath10k/htt_rx.c | 6 +- drivers/net/wireless/ath/ath11k/ahb.c | 79 +- drivers/net/wireless/ath/ath11k/dp.c | 2 + drivers/net/wireless/ath/ath11k/wmi.c | 6 + drivers/net/wireless/ath/ath12k/wmi.c | 37 +- drivers/net/wireless/ath/ath12k/wmi.h | 10 + drivers/net/wireless/ath/ath9k/channel.c | 2 + drivers/net/wireless/broadcom/b43/main.c | 5 +- .../wireless/broadcom/brcm80211/brcmfmac/msgbuf.c | 49 +- .../broadcom/brcm80211/brcmsmac/phy/phy_n.c | 2 +- drivers/net/wireless/intel/iwlwifi/dvm/tx.c | 4 +- drivers/net/wireless/intel/iwlwifi/mvm/ops.c | 1 + drivers/net/wireless/intel/iwlwifi/mvm/time-sync.h | 4 + drivers/net/wireless/mediatek/mt76/eeprom.c | 17 +- drivers/net/wireless/mediatek/mt76/mt7603/beacon.c | 2 + drivers/net/wireless/mediatek/mt76/mt7603/dma.c | 2 +- drivers/net/wireless/mediatek/mt76/mt7603/eeprom.c | 1 + drivers/net/wireless/mediatek/mt76/mt7603/main.c | 76 +- drivers/net/wireless/mediatek/mt76/mt7615/init.c | 17 +- drivers/net/wireless/mediatek/mt76/mt7615/main.c | 6 +- .../net/wireless/mediatek/mt76/mt7615/pci_init.c | 1 + .../net/wireless/mediatek/mt76/mt7615/pci_mac.c | 5 +- .../net/wireless/mediatek/mt76/mt7615/usb_sdio.c | 5 +- drivers/net/wireless/mediatek/mt76/mt76x02_mac.c | 22 +- .../net/wireless/mediatek/mt76/mt76x02_usb_mcu.c | 2 +- drivers/net/wireless/mediatek/mt76/mt7915/mac.c | 9 +- drivers/net/wireless/mediatek/mt76/mt7921/mcu.c | 4 +- drivers/net/wireless/mediatek/mt76/mt7996/mac.c | 4 +- drivers/net/wireless/mediatek/mt76/tx.c | 18 +- drivers/net/wireless/mediatek/mt76/usb.c | 31 +- drivers/net/wireless/microchip/wilc1000/mon.c | 30 +- drivers/net/wireless/realtek/rtlwifi/pci.c | 39 +- .../net/wireless/realtek/rtlwifi/rtl8723be/hw.c | 6 - drivers/net/wireless/realtek/rtw88/mac80211.c | 2 +- drivers/net/wireless/realtek/rtw89/fw.c | 63 +- drivers/net/wireless/realtek/rtw89/rtw8851b_rfk.c | 4 +- drivers/net/wireless/realtek/rtw89/wow.c | 9 +- drivers/net/wireless/rsi/rsi_91x_coex.c | 3 +- drivers/net/wireless/rsi/rsi_91x_main.c | 7 +- drivers/net/wireless/rsi/rsi_91x_sdio_ops.c | 3 +- drivers/net/wireless/rsi/rsi_91x_usb_ops.c | 7 +- drivers/net/wireless/rsi/rsi_common.h | 2 +- drivers/net/wireless/rsi/rsi_sdio.h | 2 +- drivers/net/wireless/rsi/rsi_usb.h | 2 +- drivers/net/wireless/virtual/mac80211_hwsim.c | 10 +- drivers/net/wwan/iosm/iosm_ipc_protocol_ops.c | 5 + drivers/net/wwan/wwan_hwsim.c | 4 + drivers/nfc/nfcmrvl/spi.c | 4 + drivers/nfc/nxp-nci/i2c.c | 4 +- drivers/nvme/host/auth.c | 18 +- drivers/nvme/host/core.c | 4 + drivers/nvme/host/fc.c | 2 +- drivers/nvme/host/ioctl.c | 2 +- drivers/nvme/host/nvme.h | 6 +- drivers/nvme/host/pci.c | 6 +- drivers/nvme/host/rdma.c | 1 + drivers/nvme/host/sysfs.c | 18 +- drivers/nvme/host/tcp.c | 16 +- drivers/nvme/host/zns.c | 8 +- drivers/nvme/target/admin-cmd.c | 2 +- drivers/nvme/target/auth.c | 2 + drivers/nvme/target/configfs.c | 2 + drivers/nvme/target/fabrics-cmd-auth.c | 45 +- drivers/nvme/target/fc.c | 18 +- drivers/nvme/target/io-cmd-bdev.c | 5 +- drivers/nvme/target/io-cmd-file.c | 4 +- drivers/nvme/target/nvmet.h | 2 + drivers/nvme/target/passthru.c | 9 + drivers/nvme/target/rdma.c | 2 +- drivers/nvme/target/zns.c | 10 + drivers/nvmem/brcm_nvram.c | 15 +- drivers/nvmem/core.c | 4 +- drivers/opp/core.c | 54 +- drivers/parisc/eisa_enumerator.c | 15 +- drivers/pci/ats.c | 7 +- drivers/pci/controller/dwc/pcie-qcom-ep.c | 2 + drivers/pci/controller/pcie-rockchip-host.c | 20 - drivers/pci/controller/pcie-xilinx-dma-pl.c | 10 +- drivers/pci/controller/vmd.c | 3 + drivers/pci/hotplug/pciehp_core.c | 2 +- drivers/pci/pci-label.c | 2 +- drivers/pci/pci.c | 48 +- drivers/pci/pcie/aer.c | 35 +- drivers/pci/pcie/portdrv.c | 28 +- drivers/pci/probe.c | 5 +- drivers/pci/quirks.c | 21 + drivers/pci/switch/switchtec.c | 1 + drivers/pci/xen-pcifront.c | 11 +- drivers/peci/controller/peci-aspeed.c | 6 +- drivers/peci/controller/peci-npcm.c | 6 +- drivers/perf/marvell_cn10k_ddr_pmu.c | 6 + drivers/perf/riscv_pmu_sbi.c | 33 +- drivers/perf/xgene_pmu.c | 4 +- drivers/phy/phy-core.c | 45 +- drivers/pinctrl/nuvoton/pinctrl-npcm8xx.c | 96 +- drivers/pinctrl/pinctrl-sx150x.c | 1 + drivers/pinctrl/stm32/pinctrl-stm32.c | 6 +- drivers/platform/cznic/turris-omnia-mcu-base.c | 1 + drivers/platform/x86/amd/pmc/mp1_stb.c | 23 +- drivers/platform/x86/amd/pmc/pmc.c | 5 +- drivers/platform/x86/amd/pmf/spc.c | 8 +- drivers/platform/x86/amd/pmf/sps.c | 10 +- drivers/platform/x86/asus-nb-wmi.c | 1 + drivers/platform/x86/asus-wmi.c | 42 +- drivers/platform/x86/dell/dell-smbios-wmi.c | 69 +- drivers/platform/x86/hp/hp-bioscfg/bioscfg.c | 82 +- .../x86/hp/hp-bioscfg/passwdobj-attributes.c | 16 +- .../platform/x86/hp/hp-bioscfg/spmobj-attributes.c | 5 +- drivers/platform/x86/hp/hp-wmi.c | 7 +- drivers/platform/x86/intel/int1092/intel_sar.c | 8 +- drivers/platform/x86/intel/pmt/class.c | 9 +- .../x86/intel/uncore-frequency/uncore-frequency.c | 2 +- drivers/platform/x86/lenovo-ymc.c | 8 +- drivers/platform/x86/msi-ec.c | 1 + drivers/platform/x86/siemens/simatic-ipc.c | 21 +- drivers/platform/x86/thinkpad_acpi.c | 1 + drivers/pmdomain/qcom/rpmhpd.c | 14 +- drivers/power/reset/piix4-poweroff.c | 1 + drivers/power/supply/ab8500_fg.c | 69 +- drivers/power/supply/bq27xxx_battery.c | 2 +- drivers/power/supply/cros_peripheral_charger.c | 13 +- drivers/power/supply/generic-adc-battery.c | 2 +- drivers/power/supply/qcom_pmi8998_charger.c | 41 +- drivers/power/supply/sbs-battery.c | 11 + drivers/powercap/intel_rapl_common.c | 4 +- drivers/pwm/pwm-tiehrpwm.c | 3 + drivers/rapidio/devices/rio_mport_cdev.c | 5 +- drivers/regulator/core.c | 4 + drivers/regulator/fan53555.c | 6 + drivers/regulator/of_regulator.c | 26 +- drivers/regulator/rt6190-regulator.c | 18 +- drivers/regulator/rt6245-regulator.c | 5 +- drivers/remoteproc/remoteproc_core.c | 23 +- drivers/remoteproc/remoteproc_elf_loader.c | 23 +- drivers/rpmsg/rpmsg_char.c | 5 + drivers/rtc/rtc-ab-eoz9.c | 1 + drivers/rtc/rtc-brcmstb-waketimer.c | 1 + drivers/rtc/rtc-cmos.c | 6 +- drivers/rtc/rtc-ds1307.c | 2 +- drivers/s390/block/dasd.c | 10 +- drivers/s390/crypto/zcrypt_ccamisc.c | 22 +- drivers/scsi/dc395x.c | 10 +- drivers/scsi/ibmvscsi/ibmvfc.c | 10 +- drivers/scsi/libiscsi_tcp.c | 3 +- drivers/scsi/qla2xxx/qla_os.c | 15 +- drivers/scsi/scsi_devinfo.c | 2 +- drivers/scsi/smartpqi/smartpqi_init.c | 36 + drivers/scsi/snic/snic_main.c | 1 + drivers/sh/intc/core.c | 11 +- drivers/sh/maple/maple.c | 4 +- drivers/slimbus/messaging.c | 2 +- drivers/soc/fsl/dpio/dpio-driver.c | 9 +- drivers/soc/fsl/qe/tsa.c | 16 +- drivers/soc/ixp4xx/ixp4xx-qmgr.c | 1 + drivers/soc/qcom/socinfo.c | 1 + drivers/soundwire/dmi-quirks.c | 42 +- drivers/soundwire/intel_auxdevice.c | 1 + drivers/spi/spi-amd.c | 17 + drivers/spi/spi-bcm-qspi.c | 9 +- drivers/spi/spi-bcm2835.c | 4 +- drivers/spi/spi-bcm63xx-hsspi.c | 6 +- drivers/spi/spi-bcm63xx.c | 5 +- drivers/spi/spi-bcmbca-hsspi.c | 6 +- drivers/spi/spi-cadence-quadspi.c | 3 +- drivers/spi/spi-cadence-xspi.c | 16 +- drivers/spi/spi-ch341.c | 6 + drivers/spi/spi-jcore.c | 2 + drivers/spi/spi-ljca.c | 7 +- drivers/spi/spi-npcm-fiu.c | 8 + drivers/spi/spi-nxp-fspi.c | 31 +- drivers/spi/spi-zynq-qspi.c | 13 +- drivers/staging/greybus/uart.c | 32 +- drivers/staging/media/av7110/sp8870.c | 5 +- drivers/staging/media/imx/imx-media-csc-scaler.c | 1 + drivers/staging/media/meson/vdec/vdec.c | 2 +- drivers/staging/rtl8723bs/core/rtw_recv.c | 101 +- drivers/staging/rtl8723bs/hal/sdio_ops.c | 7 + drivers/staging/rtl8723bs/os_dep/sdio_intf.c | 5 +- .../int340x_thermal/processor_thermal_device.c | 10 +- .../intel/int340x_thermal/processor_thermal_rfim.c | 11 +- drivers/thermal/intel/intel_powerclamp.c | 3 +- drivers/thunderbolt/icm.c | 6 +- drivers/tty/serial/8250/8250_exar.c | 36 +- drivers/tty/serial/8250/8250_lpss.c | 7 +- drivers/tty/serial/8250/8250_omap.c | 15 +- drivers/tty/serial/8250/8250_platform.c | 1 + drivers/tty/serial/8250/8250_pnp.c | 1 + drivers/tty/serial/pch_uart.c | 5 + drivers/tty/serial/pmac_zilog.c | 4 +- drivers/tty/serial/qcom_geni_serial.c | 8 + drivers/tty/serial/serial_core.c | 7 + drivers/ufs/core/ufs_bsg.c | 10 +- drivers/ufs/core/ufshcd.c | 21 +- drivers/uio/uio_sercos3.c | 1 + drivers/usb/class/cdc-acm.c | 6 +- drivers/usb/core/driver.c | 1 - drivers/usb/core/message.c | 1 + drivers/usb/fotg210/fotg210-udc.c | 17 +- drivers/usb/gadget/configfs.c | 4 +- drivers/usb/gadget/function/u_audio.c | 12 +- drivers/usb/gadget/legacy/inode.c | 24 +- drivers/usb/gadget/udc/fsl_qe_udc.c | 8 +- drivers/usb/misc/cypress_cy7c63.c | 8 +- drivers/usb/misc/uss720.c | 1 + drivers/usb/mtu3/mtu3_trace.h | 4 +- drivers/usb/musb/musb_host.c | 14 +- drivers/usb/serial/option.c | 5 + drivers/usb/serial/sierra.c | 3 +- drivers/usb/serial/usb_wwan.c | 3 + drivers/usb/typec/ucsi/ucsi_ccg.c | 15 +- drivers/vdpa/mlx5/net/mlx5_vnet.c | 23 +- drivers/vdpa/vdpa_sim/vdpa_sim.c | 3 +- drivers/vfio/pci/mlx5/cmd.c | 2 +- drivers/video/backlight/lm3630a_bl.c | 1 + drivers/video/backlight/qcom-wled.c | 35 +- drivers/video/fbdev/atmel_lcdfb.c | 24 +- drivers/video/fbdev/core/bitblit.c | 7 +- drivers/video/fbdev/core/fbcon.c | 7 + drivers/video/fbdev/omap2/omapfb/dss/dsi.c | 9 +- drivers/video/fbdev/platinumfb.c | 35 +- drivers/video/fbdev/sh_mobile_lcdcfb.c | 6 +- drivers/video/fbdev/smscufx.c | 9 +- drivers/video/fbdev/ssd1307fb.c | 6 +- drivers/video/fbdev/udlfb.c | 36 +- drivers/video/fbdev/xen-fbfront.c | 7 +- drivers/virtio/virtio_balloon.c | 6 +- drivers/virtio/virtio_ring.c | 8 + drivers/w1/masters/ds2482.c | 8 + drivers/watchdog/rzv2h_wdt.c | 59 +- drivers/xen/gntdev.c | 7 + drivers/xen/privcmd.c | 47 +- drivers/xen/xen-pciback/pci_stub.c | 7 +- fs/affs/bitmap.c | 2 +- fs/afs/rxrpc.c | 4 +- fs/aio.c | 18 +- fs/btrfs/inode.c | 3 - fs/btrfs/relocation.c | 13 +- fs/btrfs/super.c | 3 + fs/btrfs/volumes.c | 6 +- fs/ceph/addr.c | 15 +- fs/ceph/caps.c | 23 +- fs/ceph/crypto.c | 3 + fs/ceph/dir.c | 14 +- fs/ceph/inode.c | 3 +- fs/ceph/mds_client.c | 28 +- fs/ceph/mdsmap.c | 12 +- fs/ceph/snap.c | 7 +- fs/ceph/xattr.c | 10 + fs/crypto/keysetup.c | 8 +- fs/dax.c | 12 +- fs/dcache.c | 16 +- fs/dlm/lowcomms.c | 6 +- fs/erofs/decompressor.c | 2 +- fs/exec.c | 11 +- fs/exfat/balloc.c | 31 +- fs/exfat/dir.c | 8 +- fs/exfat/namei.c | 27 +- fs/exportfs/expfs.c | 6 +- fs/ext4/balloc.c | 6 +- fs/ext4/dir.c | 20 +- fs/ext4/ext4.h | 5 +- fs/ext4/extents.c | 26 +- fs/ext4/indirect.c | 17 + fs/ext4/inode.c | 20 +- fs/ext4/namei.c | 11 +- fs/ext4/super.c | 24 +- fs/f2fs/compress.c | 10 +- fs/f2fs/data.c | 11 +- fs/f2fs/file.c | 49 +- fs/f2fs/gc.c | 9 +- fs/f2fs/segment.c | 3 +- fs/f2fs/super.c | 42 +- fs/fat/fat.h | 2 +- fs/fat/fatent.c | 21 +- fs/fat/file.c | 3 +- fs/fat/misc.c | 6 +- fs/fat/namei_msdos.c | 3 + fs/fs-writeback.c | 7 +- fs/fs_pin.c | 9 +- fs/fuse/dir.c | 3 + fs/fuse/file.c | 9 + fs/fuse/virtio_fs.c | 21 +- fs/gfs2/lops.c | 4 +- fs/hfsplus/extents.c | 2 + fs/hugetlbfs/inode.c | 2 +- fs/iomap/fiemap.c | 8 +- fs/isofs/inode.c | 2 + fs/isofs/isofs.h | 2 + fs/isofs/rock.c | 11 +- fs/jbd2/journal.c | 2 +- fs/lockd/svclock.c | 2 + fs/namei.c | 29 - fs/namespace.c | 20 +- fs/netfs/objects.c | 4 +- fs/netfs/rolling_buffer.c | 2 +- fs/nfs/blocklayout/blocklayout.h | 5 - fs/nfs/blocklayout/rpc_pipefs.c | 79 +- fs/nfs/callback_proc.c | 3 +- fs/nfs/callback_xdr.c | 2 +- fs/nfs/dir.c | 6 + fs/nfs/filelayout/filelayout.c | 8 +- fs/nfs/flexfilelayout/flexfilelayout.c | 25 +- fs/nfs/netns.h | 5 +- fs/nfs/nfs4_fs.h | 2 + fs/nfs/nfs4proc.c | 8 + fs/nfs/nfs4state.c | 78 +- fs/nfs/pnfs.c | 24 +- fs/nfs/pnfs.h | 2 +- fs/nfsd/nfs3acl.c | 15 + fs/nfsd/nfs4idmap.c | 4 +- fs/nfsd/nfs4proc.c | 4 +- fs/nfsd/nfs4recover.c | 42 +- fs/nfsd/nfs4state.c | 43 +- fs/nfsd/nfs4xdr.c | 26 +- fs/nfsd/nfsctl.c | 73 +- fs/nfsd/nfsproc.c | 19 +- fs/nfsd/xdr4.h | 1 + fs/nilfs2/dir.c | 34 + fs/nilfs2/inode.c | 6 - fs/nilfs2/segment.c | 2 + fs/nilfs2/sysfs.c | 5 +- fs/nilfs2/the_nilfs.c | 34 +- fs/notify/fanotify/fanotify.c | 7 +- fs/notify/fanotify/fanotify.h | 21 +- fs/ntfs3/attrib.c | 2 +- fs/ntfs3/dir.c | 14 +- fs/ntfs3/fslog.c | 29 +- fs/ntfs3/index.c | 14 +- fs/ntfs3/inode.c | 10 +- fs/ntfs3/namei.c | 9 +- fs/ntfs3/ntfs_fs.h | 2 + fs/ntfs3/super.c | 18 +- fs/ocfs2/cluster/heartbeat.c | 39 +- fs/ocfs2/cluster/netdebug.c | 4 + fs/ocfs2/cluster/nodemanager.c | 10 +- fs/ocfs2/cluster/quorum.c | 7 +- fs/ocfs2/cluster/quorum.h | 1 + fs/ocfs2/dir.c | 76 +- fs/ocfs2/dlm/dlmconvert.c | 10 +- fs/ocfs2/dlm/dlmdebug.c | 5 + fs/ocfs2/dlm/dlmdomain.c | 3 +- fs/ocfs2/dlm/dlmlock.c | 8 +- fs/ocfs2/dlmglue.c | 6 + fs/ocfs2/file.c | 118 +- fs/ocfs2/filecheck.c | 5 +- fs/ocfs2/journal.c | 3 +- fs/ocfs2/journal.h | 1 - fs/ocfs2/quota_local.c | 12 +- fs/ocfs2/refcounttree.c | 15 +- fs/ocfs2/super.c | 17 +- fs/ocfs2/xattr.c | 142 +- fs/overlayfs/copy_up.c | 112 +- fs/overlayfs/dir.c | 22 +- fs/overlayfs/inode.c | 14 +- fs/overlayfs/namei.c | 8 +- fs/overlayfs/overlayfs.h | 8 +- fs/overlayfs/readdir.c | 29 +- fs/overlayfs/super.c | 17 +- fs/pnode.c | 125 +- fs/proc/task_mmu.c | 9 +- fs/read_write.c | 8 +- fs/romfs/super.c | 8 + fs/signalfd.c | 28 +- fs/smb/client/cached_dir.c | 30 +- fs/smb/client/cifsacl.c | 9 +- fs/smb/client/cifsfs.c | 61 +- fs/smb/client/cifsfs.h | 4 +- fs/smb/client/cifsglob.h | 5 +- fs/smb/client/cifspdu.h | 30 - fs/smb/client/cifssmb.c | 69 +- fs/smb/client/connect.c | 4 +- fs/smb/client/inode.c | 46 +- fs/smb/client/readdir.c | 3 + fs/smb/client/reparse.c | 67 +- fs/smb/client/sess.c | 6 +- fs/smb/client/smb2ops.c | 122 +- fs/smb/client/smb2pdu.c | 12 +- fs/smb/client/transport.c | 6 + fs/smb/common/smb2pdu.h | 14 +- fs/smb/server/auth.c | 3 +- fs/smb/server/connection.c | 22 + fs/smb/server/mgmt/user_config.c | 6 +- fs/smb/server/mgmt/user_session.c | 4 +- fs/smb/server/misc.c | 8 +- fs/smb/server/oplock.c | 16 +- fs/smb/server/server.c | 21 + fs/smb/server/smb2pdu.c | 426 +- fs/smb/server/smb2pdu.h | 1 + fs/smb/server/smb_common.c | 6 +- fs/smb/server/smbacl.c | 53 +- fs/smb/server/transport_ipc.c | 16 +- fs/smb/server/transport_rdma.c | 1 - fs/smb/server/transport_tcp.c | 15 + fs/smb/server/vfs.c | 133 +- fs/smb/server/vfs.h | 3 +- fs/smb/server/vfs_cache.c | 46 +- fs/smb/server/vfs_cache.h | 2 + fs/splice.c | 12 +- fs/stat.c | 6 +- fs/udf/balloc.c | 12 +- fs/udf/inode.c | 33 +- fs/udf/super.c | 5 +- fs/udf/truncate.c | 2 +- fs/udf/udfdecl.h | 3 +- fs/ufs/cylinder.c | 31 +- fs/ufs/dir.c | 2 +- fs/verity/open.c | 38 +- fs/xfs/libxfs/xfs_attr_leaf.c | 13 + fs/xfs/libxfs/xfs_da_btree.c | 14 + fs/xfs/libxfs/xfs_inode_fork.c | 4 +- fs/xfs/libxfs/xfs_symlink_remote.c | 8 +- fs/xfs/libxfs/xfs_symlink_remote.h | 2 +- fs/xfs/libxfs/xfs_trans_space.c | 6 +- fs/xfs/scrub/agheader.c | 15 +- fs/xfs/scrub/agheader_repair.c | 6 +- fs/xfs/scrub/alloc_repair.c | 11 +- fs/xfs/scrub/attr.c | 17 +- fs/xfs/scrub/attr_repair.c | 18 +- fs/xfs/scrub/bitmap.c | 20 + fs/xfs/scrub/bmap.c | 7 + fs/xfs/scrub/btree.c | 16 +- fs/xfs/scrub/common.c | 7 +- fs/xfs/scrub/dabtree.c | 27 +- fs/xfs/scrub/dir.c | 2 + fs/xfs/scrub/dirtree_repair.c | 76 +- fs/xfs/scrub/dqiterate.c | 1 + fs/xfs/scrub/fscounters.c | 14 +- fs/xfs/scrub/ialloc_repair.c | 8 +- fs/xfs/scrub/inode.c | 2 +- fs/xfs/scrub/inode_repair.c | 39 +- fs/xfs/scrub/iscan.c | 2 +- fs/xfs/scrub/newbt.c | 13 - fs/xfs/scrub/newbt.h | 1 - fs/xfs/scrub/parent_repair.c | 4 + fs/xfs/scrub/quota.c | 8 +- fs/xfs/scrub/quota_repair.c | 39 +- fs/xfs/scrub/quotacheck_repair.c | 54 +- fs/xfs/scrub/readdir.c | 2 +- fs/xfs/scrub/reap.c | 2 +- fs/xfs/scrub/refcount.c | 17 +- fs/xfs/scrub/repair.h | 2 +- fs/xfs/scrub/rmap.c | 20 +- fs/xfs/scrub/stats.c | 5 +- fs/xfs/scrub/symlink.c | 17 +- fs/xfs/scrub/trace.c | 13 + fs/xfs/scrub/trace.h | 10 +- fs/xfs/scrub/xfarray.c | 4 +- fs/xfs/xfs_dquot.c | 20 +- fs/xfs/xfs_dquot.h | 2 +- fs/xfs/xfs_handle.c | 2 +- fs/xfs/xfs_inode_item_recover.c | 20 +- fs/xfs/xfs_qm.c | 6 +- fs/xfs/xfs_trans_dquot.c | 6 +- include/asm-generic/bitops/le.h | 18 +- include/dt-bindings/arm/qcom,ids.h | 1 + include/linux/device.h | 5 + include/linux/device/bus.h | 3 - include/linux/fault-inject.h | 10 +- include/linux/fs.h | 4 +- include/linux/hid.h | 1 + include/linux/hiddev.h | 2 + include/linux/hugetlb.h | 4 +- include/linux/interrupt.h | 2 + include/linux/libata.h | 1 + include/linux/mempool.h | 7 + include/linux/pci.h | 2 +- include/linux/remoteproc.h | 2 + include/linux/rtc.h | 2 + include/math-emu/op-common.h | 23 +- include/math-emu/soft-fp.h | 8 + include/media/v4l2-ctrls.h | 6 + include/net/addrconf.h | 3 + include/net/gso.h | 8 + include/net/mptcp.h | 9 + include/net/netfilter/nf_conntrack_expect.h | 3 + include/trace/events/huge_memory.h | 12 +- include/trace/misc/nfs.h | 10 + include/uapi/linux/pci_regs.h | 6 + include/video/maxinefb.h | 4 +- init/main.c | 6 +- init/version.c | 3 + io_uring/io-wq.c | 14 +- io_uring/io_uring.c | 3 +- io_uring/kbuf.c | 4 +- io_uring/net.c | 12 + io_uring/rsrc.c | 4 +- io_uring/sqpoll.c | 28 +- io_uring/sqpoll.h | 3 +- io_uring/tctx.c | 6 +- io_uring/timeout.c | 3 + io_uring/waitid.c | 5 + ipc/mqueue.c | 7 + ipc/msgutil.c | 3 +- ipc/namespace.c | 9 +- ipc/shm.c | 23 +- kernel/bpf/queue_stack_maps.c | 3 + kernel/cgroup/cgroup.c | 2 +- kernel/cpu_pm.c | 9 +- kernel/debug/gdbstub.c | 55 +- kernel/fork.c | 4 + kernel/futex/core.c | 8 +- kernel/futex/pi.c | 100 +- kernel/irq/internals.h | 2 + kernel/irq/irqdomain.c | 4 +- kernel/irq/manage.c | 31 +- kernel/kcov.c | 8 + kernel/kcsan/core.c | 7 +- kernel/module/kallsyms.c | 31 +- kernel/module/main.c | 612 +- kernel/reboot.c | 9 + kernel/resource.c | 11 +- kernel/sched/cpufreq_schedutil.c | 14 +- kernel/sched/ext.c | 2 +- kernel/sched/fair.c | 7 +- kernel/seccomp.c | 7 +- kernel/sys.c | 3 + kernel/time/itimer.c | 2 +- kernel/time/namespace.c | 2 +- kernel/time/posix-cpu-timers.c | 4 +- kernel/time/timekeeping.c | 3 +- kernel/trace/ring_buffer.c | 2 + kernel/trace/trace_events_hist.c | 105 +- kernel/ucount.c | 21 +- lib/842/842_decompress.c | 7 +- lib/buildid.c | 4 + lib/decompress_bunzip2.c | 6 +- lib/fault-inject.c | 7 +- lib/klist.c | 16 +- lib/kobject_uevent.c | 8 +- mm/damon/core.c | 19 +- mm/damon/sysfs-schemes.c | 6 +- mm/damon/sysfs.c | 21 + mm/damon/tests/core-kunit.h | 316 + mm/hugetlb.c | 153 +- mm/hugetlb_cgroup.c | 33 + mm/khugepaged.c | 11 +- mm/kmemleak.c | 32 +- mm/madvise.c | 12 +- mm/memcontrol-v1.c | 12 +- mm/memcontrol.c | 13 + mm/mempolicy.c | 14 +- mm/migrate.c | 6 +- mm/mlock.c | 2 +- mm/nommu.c | 6 +- mm/page_alloc.c | 18 +- mm/percpu.c | 5 +- mm/rmap.c | 11 +- mm/shmem.c | 4 +- mm/slab_common.c | 17 +- mm/vmscan.c | 19 +- mm/zswap.c | 3 +- net/8021q/vlan_dev.c | 33 +- net/bluetooth/6lowpan.c | 1 + net/bluetooth/hci_debugfs.c | 9 + net/bluetooth/hci_event.c | 7 + net/bluetooth/hci_sync.c | 30 + net/bluetooth/l2cap_core.c | 41 +- net/bluetooth/l2cap_sock.c | 4 + net/bridge/netfilter/ebtables.c | 12 +- net/ceph/mon_client.c | 5 +- net/ceph/osd_client.c | 13 +- net/ceph/osdmap.c | 16 +- net/core/gro.c | 4 + net/core/gso.c | 1 + net/core/skbuff.c | 15 +- net/ipv4/af_inet.c | 3 + net/ipv4/inet_connection_sock.c | 16 +- net/ipv4/inet_hashtables.c | 5 +- net/ipv4/ip_gre.c | 42 +- net/ipv4/ipmr.c | 1 + net/ipv4/metrics.c | 5 + net/ipv4/netfilter/nf_nat_h323.c | 22 +- net/ipv4/netfilter/nf_reject_ipv4.c | 11 +- net/ipv4/netfilter/nf_tproxy_ipv4.c | 2 +- net/ipv4/syncookies.c | 2 + net/ipv4/sysctl_net_ipv4.c | 2 + net/ipv4/tcp_cong.c | 4 +- net/ipv4/tcp_input.c | 4 +- net/ipv4/tcp_output.c | 2 +- net/ipv6/addrconf.c | 46 +- net/ipv6/inet6_hashtables.c | 4 +- net/ipv6/ip6_gre.c | 5 +- net/ipv6/ip6_offload.c | 4 + net/ipv6/netfilter/nf_reject_ipv6.c | 13 +- net/ipv6/netfilter/nf_tproxy_ipv6.c | 2 +- net/ipv6/reassembly.c | 1 + net/ipv6/route.c | 2 +- net/ipv6/udp.c | 13 + net/mac80211/ibss.c | 4 +- net/mptcp/protocol.c | 9 +- net/mptcp/subflow.c | 35 +- net/netfilter/nf_conntrack_expect.c | 35 +- net/netfilter/nf_conntrack_netlink.c | 8 +- net/netfilter/nf_conntrack_proto_tcp.c | 6 +- net/netfilter/nf_nat_sip.c | 20 +- net/netfilter/nft_meta.c | 6 +- net/netfilter/nft_rt.c | 6 +- net/netfilter/nft_xfrm.c | 9 +- net/packet/af_packet.c | 12 +- net/rds/ib_cm.c | 6 +- net/rds/ib_rdma.c | 4 +- net/rds/ib_recv.c | 13 +- net/rds/message.c | 26 + net/rds/rdma.c | 63 +- net/rds/rds.h | 15 +- net/rds/send.c | 18 +- net/rxrpc/recvmsg.c | 22 +- net/rxrpc/rxperf.c | 16 +- net/sched/act_ct.c | 5 +- net/sched/act_ife.c | 4 + net/sched/cls_bpf.c | 28 +- net/sched/cls_flower.c | 50 +- net/sched/sch_generic.c | 10 +- net/sched/sch_teql.c | 60 +- net/sctp/associola.c | 4 + net/sctp/endpointola.c | 4 + net/sctp/socket.c | 26 +- net/smc/smc_tx.c | 7 + net/sunrpc/auth_gss/svcauth_gss.c | 29 +- net/sunrpc/svc.c | 9 +- net/sunrpc/svc_xprt.c | 24 +- net/sunrpc/svcauth_unix.c | 7 + net/sunrpc/svcsock.c | 86 +- net/sunrpc/xprtrdma/rpc_rdma.c | 27 +- net/sunrpc/xprtrdma/svc_rdma_transport.c | 3 +- net/sunrpc/xprtrdma/verbs.c | 9 +- net/tipc/group.c | 19 +- net/tipc/socket.c | 12 +- net/unix/sysctl_net_unix.c | 4 +- net/vmw_vsock/vmci_transport.c | 34 +- net/wireless/nl80211.c | 4 + net/xdp/xsk_buff_pool.c | 2 + net/xdp/xsk_queue.c | 12 +- rust/bindings/lib.rs | 1 + rust/kernel/block/mq/gen_disk.rs | 10 +- rust/uapi/lib.rs | 1 + scripts/kconfig/conf.c | 17 + scripts/link-vmlinux.sh | 20 +- security/apparmor/include/label.h | 6 +- security/apparmor/include/policy_ns.h | 16 + security/apparmor/label.c | 1 - security/apparmor/mount.c | 4 +- security/apparmor/policy.c | 16 + security/apparmor/policy_ns.c | 2 +- security/landlock/fs.c | 10 +- sound/core/compress_offload.c | 28 +- sound/core/control.c | 2 + sound/core/init.c | 12 +- sound/core/seq/oss/seq_oss_device.h | 1 + sound/core/seq/oss/seq_oss_event.c | 3 + sound/core/seq/oss/seq_oss_init.c | 2 + sound/core/ump_convert.c | 2 +- sound/drivers/aloop.c | 11 +- sound/drivers/pcmtest.c | 42 +- sound/mips/sgio2audio.c | 13 +- sound/oss/dmasound/dmasound_q40.c | 65 +- sound/pci/cs46xx/dsp_spos.c | 2 +- sound/pci/hda/hda_codec.c | 12 + sound/pci/hda/hda_intel.c | 9 + sound/pci/hda/hda_sysfs.c | 4 + sound/pci/hda/patch_conexant.c | 17 +- sound/pci/hda/patch_realtek.c | 98 +- sound/pci/hda/patch_via.c | 1 + sound/soc/amd/acp-config.c | 14 + sound/soc/amd/acp/acp3x-es83xx/acp3x-es83xx.c | 8 + sound/soc/amd/ps/pci-ps.c | 2 + sound/soc/amd/yc/acp6x-mach.c | 21 + sound/soc/codecs/arizona-jack.c | 1 + sound/soc/codecs/hdac_hda.c | 16 + sound/soc/codecs/hdac_hdmi.c | 10 +- sound/soc/codecs/lpass-wsa-macro.c | 42 +- sound/soc/codecs/max98396.c | 24 +- sound/soc/codecs/max98926.c | 2 +- sound/soc/codecs/pcm6240.c | 2 - sound/soc/codecs/rt5682s.c | 4 +- sound/soc/codecs/rt712-sdca-dmic.c | 4 +- sound/soc/codecs/rt712-sdca.c | 1 + sound/soc/codecs/rt712-sdca.h | 1 + sound/soc/codecs/sma1303.c | 2 + sound/soc/codecs/tlv320aic26.c | 6 + sound/soc/codecs/tlv320aic32x4-clk.c | 8 +- sound/soc/codecs/wcd9335.c | 25 +- sound/soc/codecs/wm8994.c | 3 + sound/soc/codecs/wsa884x.c | 11 +- sound/soc/intel/atom/sst/sst_acpi.c | 14 +- sound/soc/intel/boards/bytcr_rt5651.c | 17 + sound/soc/qcom/qdsp6/q6afe.c | 10 +- sound/soc/qcom/qdsp6/q6apm.c | 1 + sound/soc/sdw_utils/soc_sdw_rt711.c | 1 + sound/soc/sof/intel/mtl.c | 23 + sound/soc/ti/davinci-mcasp.c | 1 + sound/synth/emux/emux.c | 10 +- sound/synth/emux/soundfont.c | 9 + sound/usb/line6/pcm.c | 8 + sound/usb/mixer_maps.c | 27 + sound/usb/pcm.c | 3 +- sound/usb/quirks-table.h | 22 + sound/usb/quirks.c | 2 + sound/usb/usx2y/usbusx2yaudio.c | 1 - tools/lib/api/fd/array.c | 5 +- tools/lib/bpf/libbpf.c | 10 +- tools/lib/bpf/ringbuf.c | 2 +- tools/lib/thermal/include/thermal.h | 4 +- tools/objtool/check.c | 1 + tools/perf/arch/loongarch/util/header.c | 2 +- tools/sched_ext/scx_flatcg.bpf.c | 3 + tools/testing/selftests/core/unshare_test.c | 19 +- tools/testing/selftests/ftrace/ftracetest | 3 + tools/testing/selftests/net/fin_ack_lat.c | 2 +- tools/testing/selftests/net/reuseport_bpf_numa.c | 24 + tools/testing/selftests/seccomp/seccomp_bpf.c | 179 + virt/kvm/guest_memfd.c | 8 +- virt/kvm/kvm_main.c | 31 +- 1298 files changed, 89658 insertions(+), 5679 deletions(-)

4 days, 11 hours

[PATCH 6.18 000/869] 6.18.63-rc1 review

by Greg Kroah-Hartman

This is the start of the stable review cycle for the 6.18.63 release. There are 869 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know. Responses should be made by Mon, 09 Nov 2026 13:46:08 +0000. Anything received after that time might be too late. The whole patch series can be found in one patch at: https://www.kernel.org/pub/linux/kernel/v6.x/stable-review/patch-6.18.63-rc… or in the git tree and branch at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-6.18.y and the diffstat can be found below. thanks, greg k-h ------------- Pseudo-Shortlog of commits: Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> Linux 6.18.63-rc1 John Johansen <john.johansen(a)canonical.com> apparmor: on failed load ensure profile files are removed before parent John Johansen <john.johansen(a)canonical.com> apparmor: fix uninitialized variable warning in aa_inherit_files Joseph Qi <joseph.qi(a)linux.alibaba.com> ocfs2: read the xattr entry hash before defragmenting the bucket Avi Weiss <thnkslprpt(a)gmail.com> init/bootconfig: pass init arguments in documented order Amir Goldstein <amir73il(a)gmail.com> fs: don't fail __d_obtain_alias() for unlinked inodes Hungyu Lin <dennylin0707(a)gmail.com> fs: skip copy_file_range write limits when there is no data Edvard Conrad <edvard(a)tuta.io> fs: let backing files inherit FMODE_NONOTIFY from the user file Daehyeon Ko <4ncienth(a)gmail.com> splice: avoid stale f_pos writeback on error Chris Mason <mason(a)kernel.org> iov_iter: fix NULL deref in iov_iter_alignment() Christian Brauner <brauner(a)kernel.org> backing-file: enforce append-only and immutable backing inodes Chris Mason <mason(a)kernel.org> aio: fix NULL deref when a fault races ring truncation Georgia Garcia <georgia.garcia(a)canonical.com> apparmor: remove fs entries created by a failed policy load Kyle Zeng <kylebot(a)openai.com> tcp: fix reordering addition overflow in MTU probing Kyle Zeng <kylebot(a)openai.com> net/packet: check TX_RING fragments before memory accounting Guanglei Zhu <zhugl3(a)xiaopeng.com> apparmor: check accept index + 1 is in bounds Li RongQing <lirongqing(a)baidu.com> apparmor: avoid potential double free when remapping DFA tables John Johansen <john.johansen(a)canonical.com> apparmor: fix refcount leak in aa_get_newest_profile() Zhiling Zou <zhilinz(a)nebusec.ai> tcp: check congestion control restriction first Christian Brauner <brauner(a)kernel.org> proc: don't let an entry below /proc/<pid>/net be a mountpoint Kunhai Dai <daikunhai(a)didiglobal.com> blk-iocost: abort weight transfer on invalid donation weights Christian Brauner <brauner(a)kernel.org> userns: don't drop the exec securebits Josef Bacik <josef(a)toxicpanda.com> mount: refuse setns() with a shared fs_struct again Linmao Li <lilinmao(a)kylinos.cn> r8152: Use BMSR to detect the link state Georgia Garcia <georgia.garcia(a)canonical.com> apparmor: don't revalidate inherited files under files->file_lock Maxime Bélair <maxime.belair(a)canonical.com> apparmor: fix NULL ctx->peer derefs in unix socket ctx updates Yongjian Wang <echoowall(a)gmail.com> Revert "net: advertise TCP MSS from the configured MTU, not the learned PMTU" Avi Weiss <thnkslprpt(a)gmail.com> irqchip/irq-msi-lib: Free wired MSI descriptors Avi Weiss <thnkslprpt(a)gmail.com> irqchip/riscv-imsic: Report successful hardware retrigger Eric Biggers <ebiggers(a)kernel.org> fsverity: Be more careful with return value of ->get_verity_descriptor() Fang Xieyan <fangxy(a)xiaopeng.com> kgdb: Fix buffer overflow in the qRcmd packet handler Fang Xieyan <fangxy(a)xiaopeng.com> kgdb: Fix buffer overflow in the 'M' and 'X' packet handlers Fang Xieyan <fangxy(a)xiaopeng.com> kgdb: Fix buffer overflow in the 'm' packet handler Guixin Liu <kanie(a)linux.alibaba.com> nvmet: Free the old negotiation state when restarting authentication Guixin Liu <kanie(a)linux.alibaba.com> nvmet: Finish the blk plug when integrity allocation fails Seiji Nishikawa <snishika(a)redhat.com> nvme-tcp: fix io_work priority inversion when send_mutex is held Martin Belanger <martin.belanger(a)dell.com> nvme-tcp: start error recovery when read_sock fails Guixin Liu <kanie(a)linux.alibaba.com> nvmet-fc: Tear down the association when the admin queue allocation fails Shao Mingyin <shao.mingyin(a)zte.com.cn> nvmet-auth: fix error handling on CHALLENGE failure Andrea Parri <parri.andrea(a)gmail.com> nvmet: pci-epf: require SGLs to match the command data length Andrea Parri <parri.andrea(a)gmail.com> nvmet: pci-epf: report transport errors in command completions Andrea Parri <parri.andrea(a)gmail.com> nvmet-fc: only send read data for successful commands Weiming Shi <bestswngs(a)gmail.com> nvmet-rdma: reject short connection requests Tristan Madani <tristan(a)talencesecurity.com> ppp: fix stale pointer access after pskb_may_pull in ppp_ccp_peek Peter Ujfalusi <peter.ujfalusi(a)linux.intel.com> ASoC: hdac_hda: Keep runtime PM state in sync across codec remove/probe Hongling Zeng <zenghongling(a)kylinos.cn> ntfs3: fix mapping pairs bounds check for alignment Hyeontae Lee <wonju345(a)naver.com> fs/ntfs3: bound DeleteAttribute asize against rec->used in do_action Hyeontae Lee <wonju345(a)naver.com> fs/ntfs3: bound CreateAttribute asize against record_size in do_action David Yang <mmyangfl(a)gmail.com> net: hisilicon: hisi_femac: Stop the receiver before releasing the RX ring Xia Yan <yanxia(a)cmss.chinamobile.com> macvlan: fix passthru promiscuity accounting while down Kamil Sawicki <user148783812897(a)gmail.com> net: limit priority VLAN untag depth Jesse Zhang <Jesse.Zhang(a)amd.com> drm/amdkfd: evict the queues only once for CRIU PROCESS_INFO Jiale Yao <yaojiale02(a)163.com> drm/amdkfd: validate SRAT subtables before parsing Avi Weiss <thnkslprpt(a)gmail.com> drm/amd/display: Initialize missing TD-LUT programming inputs Jesse Zhang <Jesse.Zhang(a)amd.com> drm/amdkfd: split vram_pages of SVM ranges prefetched without a GPU mapping Jesse Zhang <Jesse.Zhang(a)amd.com> drm/amdgpu: reject CS chunks too large for kvmalloc() Luigi Lauro <luigi.lauro(a)gmail.com> drm/amd/display: take a runtime PM reference only when a CRTC turns on Olivier Kaloudoff <olivier.kaloudoff(a)gmail.com> drm/amdkfd: stop restore retries on device unplug lvyating <lv.yating(a)zte.com.cn> perf machine: Fix NULL deref in thread__resolve_callchain_sample() Zhao Gongyi <zhaogongyi(a)bytedance.com> arm64/mm: restrict transparent contpte mappings to valid PTEs Zhongqiu Han <zhongqiu.han(a)oss.qualcomm.com> cpufreq: stats: Fix potential out-of-bounds access in deferred reset Tiezhu Yang <yangtiezhu(a)loongson.cn> LoongArch: Fix perf hardware breakpoint failure via installation Tiezhu Yang <yangtiezhu(a)loongson.cn> LoongArch: Only send SIGTRAP signal if necessary in do_watch() Tiezhu Yang <yangtiezhu(a)loongson.cn> LoongArch: Fix architectural naming typo for CSR_FWPS_SKIP Tiezhu Yang <yangtiezhu(a)loongson.cn> LoongArch: Fix bitmask corruption in update_bp_registers() Tiezhu Yang <yangtiezhu(a)loongson.cn> LoongArch: Remove redundant call in update_bp_registers() Tiezhu Yang <yangtiezhu(a)loongson.cn> LoongArch: Remove arch-specific __smp_mb__{before,after}_atomic() Huacai Chen <chenhuacai(a)kernel.org> LoongArch: Use pa_to_nid()/nid_to_addrbase() rather than hard-code Huacai Chen <chenhuacai(a)kernel.org> LoongArch: Call cpu_final_simd() with pure_initcall() Peter Ujfalusi <peter.ujfalusi(a)linux.intel.com> ASoC: hdac_hda: Balance the runtime PM disable in codec remove Eric Dumazet <edumazet(a)kernel.org> ixgbe: reserve TX timestamp after skb preparation Peter Ujfalusi <peter.ujfalusi(a)linux.intel.com> ALSA: hda: Reject codec reset on ASoC (ext_ops) buses Sinan Turunc <enscrpt(a)pm.me> ALSA: usb-audio: Bound packet copies by the PCM buffer size Dominik Maier <dmnk(a)google.com> loop: check for read-write open mode on LOOP_SET_STATUS in lo_compat_ioctl() Paul Moses <p(a)1g4.org> xsk: restore UMEM flags after failed pool assignment Yingjie Wang <1075151112(a)qq.com> tcp: limit tcp_tso_rtt_log to a valid shift count Miquel Raynal <miquel.raynal(a)bootlin.com> dt-bindings: clock: ma35d1: Document the missing crystal inputs Ido Schimmel <idosch(a)nvidia.com> ipmr: fully initialize the synthetic IP header in ipmr_get_route() Jiayuan Chen <jiayuan.chen(a)linux.dev> bonding: fix out-of-bounds read of arp_ip_target Wei Jie Law <law.wei.jie(a)gt.tech.gov.sg> net: usb: pegasus: check rx pkt_len against the received length Srinivas Kandagatla <srinivas.kandagatla(a)oss.qualcomm.com> ASoC: codecs: wsa883x: Accept temperatures across the full trim range Srinivas Kandagatla <srinivas.kandagatla(a)oss.qualcomm.com> ASoC: codecs: wsa884x: Accept temperatures across the full trim range Val Packett <val(a)packett.cool> ASoC: qcom: qdsp6: q6afe: fix clk vote response type mismatch Chao Yu <chao(a)kernel.org> f2fs: fix to update superblock crc in sanity_check_area_boundary() Alex Markuze <amarkuze(a)redhat.com> ceph: fix uninitialized err in ceph_netfs_issue_read() sung byeongchan <tjdqudcks0424(a)naver.com> ceph: validate encoded xattr name lengths sung byeongchan <tjdqudcks0424(a)naver.com> ceph: validate MDS reply fragtree split array length sung byeongchan <tjdqudcks0424(a)naver.com> ceph: bound name skips in ceph_mdsmap_decode() by the message end sung byeongchan <tjdqudcks0424(a)naver.com> ceph: validate fscrypt auth blob length Venky Shankar <vshankar(a)redhat.com> ceph: don't fail write_begin with -EAGAIN after flushing old snapc Yuanfu Xie <yuanfuxie(a)stu.pku.edu.cn> ceph: clamp MDS reply result code to the errno range Jérémy Jean <Jeremy.Jean(a)oss.cyber.gouv.fr> libceph: fix out-of-bounds reads from repeated CRUSH bucket entries Jérémy Jean <Jeremy.Jean(a)oss.cyber.gouv.fr> ceph: fix 32-bit overflow in readdir reply count check Wentao Liang <vulab(a)iscas.ac.cn> ceph: Fix mds session leak in __open_export_target_session() Wentao Liang <vulab(a)iscas.ac.cn> ceph: Fix xattr buffer leak in __send_cap() Xiang Mei <xmei5(a)asu.edu> ceph: fix integer overflow in the snap trace bounds check Yogesh Gaur <yogeshgaur.83(a)gmail.com> libceph: reject an initial monmap with no monitors Felix Hoffmann <f3lix.dev(a)gmx.de> libceph: reject mismatched CRUSH weight-set sizes Raphael Zimmer <raphael.zimmer(a)tu-ilmenau.de> libceph: Fix multiple unsafe decodes in ceph_oloc_decode() Raphael Zimmer <raphael.zimmer(a)tu-ilmenau.de> libceph: Fix unsafe decode in ceph_redirect_decode() Xiubo Li <xiubo.li(a)clyso.com> libceph: only set read_from_replica on read requests Xiang Mei <xmei5(a)asu.edu> ceph: require the dentry lease record to cover struct ceph_mds_reply_lease Xiang Mei <xmei5(a)asu.edu> ceph: reject mdsmaps that claim more than CEPH_MAX_MDS ranks Guanglei Zhu <zhugl3(a)xiaopeng.com> ceph: fix out-of-bounds read in ceph_netfs_issue_op_inline() Max Kellermann <max.kellermann(a)ionos.com> ceph: avoid pending truncate during nonblocking cap acquire Fuad Tabba <fuad.tabba(a)linux.dev> KVM: arm64: Set HCR_EL2.BSU to Inner Shareable for guests Hungyu Lin <dennylin0707(a)gmail.com> time/namespace: Fix overflow when converting absolute deadlines Hungyu Lin <dennylin0707(a)gmail.com> timers/itimer: Keep a nonzero value at CPU timer expiry Wang Haoran <haoranwangsec(a)gmail.com> fbdev: atmel_lcdfb: fix list_first_entry() on possibly empty modelist in probe Baokun Li <libaokun(a)linux.alibaba.com> fscrypt: Fix missing barrier in fscrypt_find_mode_key() Siddharth Chintamaneni <sidchintamaneni(a)gmail.com> mm: multi-gen LRU: fix NULL lruvec->pgdat deref with memcg disabled on cmdline Yunhui Cui <cuiyunhui(a)bytedance.com> riscv: mm: exclude invalid THP PMDs from page table check Gregory Price (Meta) <gourry(a)gourry.net> mm/mempolicy: apply bind policies against the scoped allocation zone Gregory Price (Meta) <gourry(a)gourry.net> mm/vmscan: reclaim every zone in per-node proactive reclaim Lorenzo Stoakes (ARM) <ljs(a)kernel.org> mm/mremap: correctly uncharge accountable VMAs in error path Lorenzo Stoakes (ARM) <ljs(a)kernel.org> mm/mremap: populate calculated fields in vrm state correctly Nickolai Zeldovich <nickolai(a)csail.mit.edu> mm/truncate: fix the zeroing end of pagecache_isize_extended() Rik van Riel <riel(a)surriel.com> mm/page_alloc: count guard pages as free again when their buddy merges Jiayuan Chen <jiayuan.chen(a)shopee.com> mm/swap: fix swap_cache_get_folio() returning a folio that left the swap cache Vernon Yang <yanglincheng(a)kylinos.cn> mm: vmscan: don't count per-node proactive reclaim as memory pressure Weilin Tong <tongweilin(a)linux.alibaba.com> ipc/shm: fix RSS accounting for hugetlb shared memory Pedro Falcato <pfalcato(a)suse.de> mm/madvise: atomically clear the young bit on THP MADV_COLD Harry Yoo (Meta) <harry(a)kernel.org> mm/percpu: account full object size for percpu memory allocations Cen Zhang (Microsoft) <cenzhang(a)linux.microsoft.com> userfaultfd: fix UFFDIO_MOVE livelock on large folio with extra references Nickolai Zeldovich <nickolai(a)csail.mit.edu> mm/mlock: use a long for the page count in mlock_fixup() Wei Yang <albinwyang(a)tencent.com> mm/madvise: add cond_resched() in THP branch of madvise_cold_or_pageout_pte_range() David Hildenbrand (Arm) <david(a)kernel.org> mm: disallow ioremap'ing ordinary RAM in generic_access_phys() Hongfu Li <lihongfu(a)kylinos.cn> mm/hugetlb: account migration target folio in per-node NR_HUGETLB vmstat David Hildenbrand (Arm) <david(a)kernel.org> mm/mremap: fix calling fixup_hugetlb_reservations() on the wrong VMA Josef Bacik <josef(a)toxicpanda.com> mm/hugetlb: don't clear the resv_map of a VMA whose lock is held Cen Zhang <zzzccc427(a)gmail.com> ocfs2/cluster: remove zero-address nodes from IP tree on teardown Cen Zhang <zzzccc427(a)gmail.com> ocfs2: snapshot the dentry name while tracing file release Caleb Kan <ckan(a)cloudflare.com> stackdepot: stop preallocating after the final pool Hungyu Lin <dennylin0707(a)gmail.com> compat: avoid double rounding in times() Stanley Jhu <stanleyjhu(a)google.com> scsi: ufs: core: Remove completed-without-interrupt path in ufshcd_abort() Stanley Jhu <stanleyjhu(a)google.com> scsi: ufs: core: Remove an always-false WARN_ONCE() Ratnaker Gautam <ratnaker.gautam(a)kuleuven.be> scsi: libiscsi_tcp: Prevent R2T range check overflow Stanley Jhu <stanleyjhu(a)google.com> scsi: ufs: core: Clear stale UIC result byte before peer DME retries Stanley Jhu <stanleyjhu(a)google.com> scsi: ufs: bsg: Clear the reply buffer before use Stanley Jhu <stanleyjhu(a)google.com> scsi: ufs: bsg: Complete the job on error yanxia <yanxia(a)cmss.chinamobile.com> veth: fix stale peer max_mtu on XDP program replacement Igor Velkov <iav(a)iav.lv> genirq/kexec: Do not take the bus lock of an interrupt chip on the crash path Aamir Ahmed <elb12345(a)hotmail.co.uk> gve: fix out-of-bounds read in gve_get_flow_rule_entry() Sasha Levin <sashal(a)kernel.org> cgroup: don't kill migrated processes through their exiting threads Thomas Weißschuh (Schneider Electric) <thomas.weissschuh(a)linutronix.de> timekeeping: Update offsets on sequence counter retry in ktime_get_update_offsets_now() Cen Zhang (Microsoft) <cenzhang(a)linux.microsoft.com> posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() signal path Pufan Jin <cyan2254650260(a)gmail.com> spi: zynq-qspi: fix address buffer corruption and support 4-byte address Christian Marangi <ansuelsmth(a)gmail.com> i2c: mt7621: fix copying uninitialized kernel stack with reduced page_len Alex Kazinsky <a.kazinsky(a)ideco.ru> ASoC: tlv320aic32x4: Prevent division by zero in divider callbacks Jean Delu <jeandelu(a)tutamail.com> parisc: eisa_enumerator: Fix out-of-bounds reads of the EEPROM buffer Adrian Ambrozewicz <aambrozewicz(a)nvidia.com> gpiolib: don't report -ENOMEM for a requested line without a label Pei Xiao <xiaopei01(a)kylinos.cn> tpm: fix zero-length read discarding the pending response Pei Xiao <xiaopei01(a)kylinos.cn> tpm: tpm_nsc: stop using the cleanup callback as dev.release Pei Xiao <xiaopei01(a)kylinos.cn> tpm: tpm_nsc: fix NULL pointer dereference on init failure Navon John Lukose <navonjohnlukose(a)gmail.com> i2c: designware: queue only one read command for block reads Ma Ke <make_ruc2021(a)163.com> i2c: acpi: Fix adapter reference leak in i2c_acpi_new_device_by_fwnode() Tristan Madani <tristan(a)talencesecurity.com> cpufreq: intel_pstate: cancel HWP notify work in driver cleanup Nickolai Zeldovich <nickolai(a)csail.mit.edu> ucount: take the rlimit reference before checking the limit Christian Brauner <brauner(a)kernel.org> listmount: don't wrap around with a U64_MAX cursor Christian Brauner <brauner(a)kernel.org> statmount: don't copy the reserved empty string past the buffer Chuck Lever <chuck.lever(a)oracle.com> exportfs: Release the get_name() directory file synchronously Henry Martin <bsdhenrymartin(a)gmail.com> tipc: fix broadcast sender hang on last acker departure Liu Chao <liuc63(a)xiaopeng.com> net: wwan: iosm: validate msg_head before indexing msg_ring Yu Zhang <yuz08559(a)gmail.com> nvmet: take subsys->lock while force-reconnecting in nvmet_subsys_attr_qid_max_store() Runyu Xiao <runyu.xiao(a)seu.edu.cn> sh: maple: Use the matching IRQ cookie when invoking free_irq() Henrik Enquist <henrik.enquist(a)gmail.com> ALSA: aloop: Update the PCM Slave controls for a matching playback Julian Sun <sunjunchao(a)bytedance.com> writeback: clear old wb dirty state after inode switches Julian Sun <sunjunchao(a)bytedance.com> writeback: reset dirtied_when when switching wbs Bartu Alev <bartualev(a)gmail.com> platform/x86: asus-wmi: fix TUF keyboard power state shutdown naming Michael Kelley <mhkelley58(a)gmail.com> Documentation: hyperv: Update documentation for sending VMBus packets Cen Zhang <zzzccc427(a)gmail.com> ocfs2/cluster: initialize heartbeat regions before publishing them Joseph Qi <joseph.qi(a)linux.alibaba.com> ocfs2: deal with legacy signed xattr name hash values Joseph Qi <joseph.qi(a)linux.alibaba.com> ocfs2: use the stored hash when checking xattr bucket collision Joseph Qi <joseph.qi(a)linux.alibaba.com> ocfs2: deal with legacy signed dir index name hash values Joseph Qi <joseph.qi(a)linux.alibaba.com> ocfs2: reserve value tree metadata when moving an xattr into the inode Joseph Qi <joseph.qi(a)linux.alibaba.com> ocfs2: reserve metadata for a new xattr block and its value tree Matt Turner <mattst88(a)gmail.com> alpha: determine tininess after rounding in the FP emulation Bryam Vargas <hexlabsecurity(a)proton.me> net/smc: queue the copied chunk when smc_tx_sendmsg() faults Yingjie Wang <1075151112(a)qq.com> net: unix: reject negative max_dgram_qlen values Nguyen Ngoc Thang <ngocthang2710.1999(a)gmail.com> net/rds: ib: don't enable IRQs in rds_ib_conn_free() Guangshuo Li <lgs201920130244(a)gmail.com> PCI: qcom-ep: Deinitialize endpoint on remove Tingjie Zhong <catme0w(a)live.cn> fbdev: bitblit: Fix glyph clipping when fbcon pans Daehyeon Ko <4ncienth(a)gmail.com> ipv6: do not restart DAD for a dead ifaddr Daehyeon Ko <4ncienth(a)gmail.com> ipv6: initialize temporary ifaddr before publication Daehyeon Ko <4ncienth(a)gmail.com> ipv6: serialize address publication with device teardown Daehyeon Ko <4ncienth(a)gmail.com> ipv6: remove ifaddr from hash during ifdown list cleanup Zhen Han <Zhen.Han(a)amd.com> drm/amdkfd: correct vram_available calculation Daniel Phillips <daniel.phillips(a)amd.com> amdkfd: Fix memory availability double accounting of kfd pinned objects John Fisher <jfisher84(a)gmail.com> drm/amdgpu: wait for pending page table updates before switching a VM to CPU updates William Palacek <William.Palacek(a)amd.com> drm/amdkfd: wait for a GPU reset before freeing a BO Keita Morisaki <kmta1236(a)gmail.com> drm/amd/display: Fix swap in median3() for DSC rate control Elena Sakhnovitch <Elena.Sakhnovitch(a)amd.com> drm/amdgpu/gmc9: add extra type-2 TLB flush for gfx942/gfx950 Jesse Zhang <Jesse.Zhang(a)amd.com> drm/amdkfd: don't drop an SVM CWSR reference that was never taken Kevin Wang <kevin.wang(a)amd.com> drm/amd/pm: reapply umd profile state after recovery Jesse Zhang <Jesse.Zhang(a)amd.com> drm/amdgpu: reject ANONONLY userptrs that span multiple VMAs Mario Limonciello <mario.limonciello(a)amd.com> drm/amd/display: don't WARN when removing an unallocated MST payload Henry Martin <bsdhenrymartin(a)gmail.com> drm/amdkfd: fix doorbell allocation race creating duplicate allocations Maciej Kucharek <qchcio(a)gmail.com> drm/amdgpu: reset VI ASIC on Apple boards with VRAM at 0 Maciej Kucharek <qchcio(a)gmail.com> drm/amdgpu: reset CIK ASIC on Apple boards with VRAM at 0 Maciej Kucharek <qchcio(a)gmail.com> drm/amdgpu: reset SI ASIC on MacBookPros with VRAM at 0 Luigi Lauro <luigi.lauro(a)gmail.com> drm/amdgpu: require _PR3 for BOCO Nirmoy Das <nirmoyd(a)nvidia.com> blk-mq: clear stale inactive flag on hctx reuse Sahaj Chaudhari <sahaj123.sc(a)gmail.com> gpio: pca953x: Handle direction register read errors in IRQ paths Sahaj Chaudhari <sahaj123.sc(a)gmail.com> gpio: davinci: Clear interrupt status in every bank on suspend Takashi Iwai <tiwai(a)suse.de> ALSA: line6: Handle period elapsed calls outside the locks Baek Kyu, Kim <pocj8ur4in(a)gmail.com> gpiolib: Free chip resources when allocating the label fails Takashi Iwai <tiwai(a)suse.de> ALSA: emux: Stop voices before freeing zones in all cases Wang Yan <wangyan01(a)kylinos.cn> ALSA: mtpav: restore negation dropped in guard() conversion Peter Ujfalusi <peter.ujfalusi(a)linux.intel.com> ALSA: compress: reject restarting an ACTIVE task via origin_seqno Peter Ujfalusi <peter.ujfalusi(a)linux.intel.com> ALSA: compress: add missing OPEN-state gate to SET_METADATA Peter Ujfalusi <peter.ujfalusi(a)linux.intel.com> ALSA: compress: reject buffer geometry change on gapless next_track Peter Ujfalusi <peter.ujfalusi(a)linux.intel.com> ALSA: compress: fix buffer leak on failed SET_PARAMS Sorah Fukumori <her(a)sorah.jp> net: gro: don't chain linear parts larger than gso_size into frag_list Jamal Hadi Salim <jhs(a)mojatatu.com> netdevsim: reject cls_bpf programs bound to another device Kir Kolyshkin <kolyshkin(a)gmail.com> cgroup: fix cgroup.kill for exited thread group leader Alexander Kochetkov <al.kochet(a)gmail.com> Revert "Input: matrix_keypad - force switch rows to input mode" Dmitry Torokhov <dmitry.torokhov(a)gmail.com> Input: always accept EV_SYN in input_event() Armin Wolf <W_Armin(a)gmx.de> hwmon: (acpi_power_meter) Fix 18.45 TW bug Baek Kyu, Kim <pocj8ur4in(a)gmail.com> hwmon: (sht3x) Return the consumed count for heater writes Igor Velkov <iav(a)iav.lv> rtc: pcf8563: pass the driver data to the alarm interrupt handler Ma Ke <make_ruc2021(a)163.com> platform/x86/amd/pmc: Fix RTC reference leak in amd_pmc_verify_czn_rtc() Gregory Price <gourry(a)gourry.net> rtc: cmos: Disable ACPI RTC event before handling it Jianyun Gao <jianyungao89(a)gmail.com> dax: fix wrong error code returned from dax_dedupe_file_range_compare() Seongjae Jeong <jsjlee1020(a)gmail.com> f2fs: fix submit accounting for IPU writeback Wenjie Qi <qwjhust(a)gmail.com> f2fs: flush SIT journal during filesystem resize Jiale Yao <yaojiale02(a)163.com> hwmon: (gigabyte_waterforce) reject short input reports Ximing Zhang <xzhangjr(a)gmail.com> hwmon: (coretemp) Fix handling of isolated SMT siblings Kyle Zeng <kylebot(a)openai.com> netfilter: nf_reject: initialize IPCB at inet ingress George Christidis <gxristidis(a)gmail.com> ALSA: hda/realtek: Fix headset mic on ASUS Zenbook 14 UX3402VA Adrian Ambrozewicz <aambrozewicz(a)nvidia.com> gpiolib: cdev: don't set GPIOD_FLAG_IS_OUT Nickolai Zeldovich <nickolai(a)csail.mit.edu> lib/buildid: reject file offsets that do not fit in pgoff_t Sanan Hasanov <sanan.hasanov(a)ucf.edu> hwmon: (corsair-cpro) Make wait_input_report_lock IRQ safe Baek Kyu, Kim <pocj8ur4in(a)gmail.com> hwmon: (sht4x) Reject incomplete heater command transfers Tom Verdonck <tom.verdonck(a)inspiral.be> hwmon: (sht4x) Fix jiffies wraparound in heater-ready check Weibin Liu <liuwb(a)xiaopeng.com> spi: ch341: handle transfers without a TX or RX buffer Vasiliy Kovalev <kovalev(a)altlinux.org> ALSA: hda/via: Apply runtime PM workaround for ASUS X55A Magnus Lindholm <linmag7(a)gmail.com> alpha: do not skip TLB shootdown IPIs for kthread-borrowed mms Magnus Lindholm <linmag7(a)gmail.com> alpha: do not clear remote MMU contexts in migrate_flush_tlb_page() Magnus Lindholm <linmag7(a)gmail.com> alpha: invalidate the local context in flush_icache_user_page() Magnus Lindholm <linmag7(a)gmail.com> alpha: invalidate the local context in flush_tlb_mm() Magnus Lindholm <linmag7(a)gmail.com> alpha: fix the local TLB invalidate in the UP flush_tlb_page() Magnus Lindholm <linmag7(a)gmail.com> alpha: fix the local TLB invalidate in flush_tlb_page() Magnus Lindholm <linmag7(a)gmail.com> alpha: invalidate the local context in flush_tlb_page() Magnus Lindholm <linmag7(a)gmail.com> alpha: only use a targeted tbi() when the target mm is really current Magnus Lindholm <linmag7(a)gmail.com> alpha: run check_mmu_context() from finish_arch_post_lock_switch() Magnus Lindholm <linmag7(a)gmail.com> alpha: load the MMU context when switch_mm() switches the current task Matt Turner <mattst88(a)gmail.com> alpha: handle VM_FAULT_HWPOISON in do_page_fault() Brandon Williams <turbine.bmw(a)gmail.com> power: supply: qcom_battmgr: Notify charger supplies of online changes Tim Douglas <me(a)timdoug.com> power: supply: generic-adc-battery: fix status with no supplier Andrew Pam <andrew(a)fastmailteam.com> power: supply: cros_charge-control: restore EC state on resume Fabricio Akio <fabricioakio(a)gmail.com> power: supply: qcom_smbx: set the charge enable after software control Luis Gerardo Lopez Hernandez <gamaerry(a)gmail.com> ALSA: hda/realtek: Fix internal speakers on Acer Aspire AL16-31P Takashi Iwai <tiwai(a)suse.de> ALSA: seq: oss: Skip events until fully initialized Paolo Abeni <pabeni(a)redhat.com> mptcp: fix subflow bitfield misuse Quanye Yang <quanyeyang(a)proton.me> mptcp: reset msk state on early connect failure Kees Cook <kees(a)kernel.org> ipc, msg: Account msg_msg allocations with GFP_KERNEL_ACCOUNT again sonotri <sono7ri(a)gmail.com> ublk: pin module while release work is pending Chengfeng Ye <nicoyip.dev(a)gmail.com> fuse: fix copy_file_range reply handling race Fan Wu <fanwu01(a)zju.edu.cn> virtio_fs: read the vring size under virtio_fs_mutex in ->get_tree Joanne Koong <joannelkoong(a)gmail.com> fuse: don't launder folios of a bad inode Huacai Chen <chenhuacai(a)kernel.org> cpufreq: loongson3: Replace IOCSR read/write with MMIO ones Huacai Chen <chenhuacai(a)kernel.org> cpufreq: loongson3: Use global physical CPU ID in get/target callbacks Huacai Chen <chenhuacai(a)kernel.org> cpufreq: loongson3: Replace per-package mutex with per-node Huacai Chen <chenhuacai(a)kernel.org> cpufreq: loongson3: Adjust the width of id and val in smc_message Huacai Chen <chenhuacai(a)kernel.org> cpufreq: loongson3: Make this driver depend on MACH_LOONGSON64 Shubham Antil <shubham(a)octane.security> RDS/IB: validate receive fragment completions Seung Min Shin <guncraft2000(a)naver.com> sctp: hold transport reference across connect wait Zixuan Chai <petalzu987(a)gmail.com> ipv6: defrag: orphan skb before queuing Josef Bacik <josef(a)toxicpanda.com> net: skbuff: don't BUG() on a bad csum_start in skb_copy_and_csum_dev() Ming Lei <tom.leiming(a)gmail.com> ublk: reset the FETCH round under ub->mutex Ming Lei <tom.leiming(a)gmail.com> ublk: reset the FETCH round in release also without a disk Jianyun Gao <jianyungao89(a)gmail.com> dax: fix dax_range_compare_iter() to use correct size and address offset Jianyun Gao <jianyungao89(a)gmail.com> dax: Return errors from dax_core_init() David Carlier <devnexen(a)gmail.com> ring-buffer: Take cpus_read_lock() when changing the subbuf order Gyokhan Kochmarla <gyokhan(a)amazon.de> erofs: use on-disk blkszbits for lz4 max pcluster bound Weibin Liu <liuwb(a)xiaopeng.com> spi: amd: fix len==0 underflow and FIFO overflow Keng-Yu Lin <keng-yu.lin(a)hpe.com> PCI/PM: Restore BARs after powering up during enumeration Weibin Liu <liuwb(a)xiaopeng.com> spi: bcm-qspi: reject oversized dummy bytes in mspi exec_mem_op Vladyslav Tymoshchuk <tvlad744(a)gmail.com> ASoC: qcom: q6apm: reset the hw pointer with the fragment queue Radiy Zhambakiev <r.zhambakiev(a)prosoftsystems.ru> mfd: tps65217: Use devres for IRQ domain and wake teardown Radiy Zhambakiev <r.zhambakiev(a)prosoftsystems.ru> mfd: tps65217: Check return value when masking interrupt sources Radiy Zhambakiev <r.zhambakiev(a)prosoftsystems.ru> mfd: tps65217: Fix NULL pointer dereference on IRQ init failure Weibin Liu <liuwb(a)xiaopeng.com> spi: npcm-fiu: limit UMA data_size to the 16-byte staging buffer Marc Zyngier <maz(a)kernel.org> KVM: arm64: Turn vcpu->arch.pause into a counter Marc Zyngier <maz(a)kernel.org> KVM: arm64: Move IN_GUEST_MODE ahead of state being loaded Marc Zyngier <maz(a)kernel.org> KVM: arm64: Move OUTSIDE_GUEST_MODE publication past context being saved Ard Biesheuvel <ardb(a)kernel.org> efi/libstub: Don't replace an existing LINUX_EFI_MEMRESERVE table Ard Biesheuvel <ardb(a)kernel.org> efi/libstub: arm64: Don't use the platform register x18 Weibin Liu <liuwb(a)xiaopeng.com> spi: jcore: fix divide-by-zero when speed_hz is zero Tal Zussman <tz2294(a)columbia.edu> gfs2: fix the escaped block copy in gfs2_before_commit() Takashi Iwai <tiwai(a)suse.de> ALSA: ump: Correct return size of fill_rpn() Karl Mehltretter <kmehltretter(a)gmail.com> irqchip/atmel-aic[5]: Disable interrupts in the irq_pm_shutdown() callbacks Wentao Liang <vulab(a)iscas.ac.cn> irqchip/mchp-eic: Fix clock reference leak in mchp_eic_probe() Guangshuo Li <lgs201920130244(a)gmail.com> irqchip/imx-intmux: Fix runtime PM teardown on remove Fuad Tabba <fuad.tabba(a)linux.dev> irqchip/gic-v3-its: Don't clamp nvecs to zero when id_bits is 32 Ahsan Atta <ahsan.atta(a)intel.com> crypto: qat - fix use of destroyed vf2pf_lock on VF restart Ahsan Atta <ahsan.atta(a)intel.com> crypto: qat - initialise state_lock on every path in adf_devmgr_add_dev() Andrea Parri <parri.andrea(a)gmail.com> iommufd: Reject a zero-length dirty bitmap request Nathan Chancellor <nathan(a)kernel.org> kbuild: AutoFDO: Update split machine function argument for upstream rename Wentao Liang <vulab(a)iscas.ac.cn> PCI: xilinx-xdma: Fix device node reference leak in xilinx_pl_dma_pcie_init_irq_domain() Hui Su <sh_def(a)163.com> cpufreq: schedutil: Serialize sugov_start() against rate limit updates Siwei Zhang <oss(a)fourdim.xyz> Bluetooth: L2CAP: Use default TxWindow for zero socket option Siwei Zhang <oss(a)fourdim.xyz> Bluetooth: L2CAP: Reject invalid TxWindow in configuration requests Siwei Zhang <oss(a)fourdim.xyz> Bluetooth: L2CAP: Reject mode changes on connected channels Bui Viet Dung <dungvn2345(a)gmail.com> Bluetooth: hci_debugfs: Pin module for debugfs file operations Bui Viet Dung <dungvn2345(a)gmail.com> Bluetooth: 6lowpan: Pin module for 6lowpan_control debugfs file Nikolaj Klitlund Børty <nbn(a)sj.dk> Bluetooth: btusb: Add device ID for Realtek RTL8761BUE (StarTech AV53C1) Francesco Orlando <francesco.orlando99(a)libero.it> Input: xpad - add GameSir Nova Lite support Stian Halseth <stian(a)itx.no> PCI: Set supported_speeds in set_pcie_port_type() Karl Mehltretter <kmehltretter(a)gmail.com> ARM: 9523/1: topology: allocate the cacheinfo early on the boot CPU Karl Mehltretter <kmehltretter(a)gmail.com> ARM: 9522/1: cacheinfo: guard the CLIDR read in populate_cache_leaves() Karl Mehltretter <kmehltretter(a)gmail.com> ARM: 9521/1: cacheinfo: count external caches in early_cache_level() Karl Mehltretter <kmehltretter(a)gmail.com> ARM: 9520/1: cacheinfo: avoid out-of-bounds write in populate_cache_leaves() Karl Mehltretter <kmehltretter(a)gmail.com> ARM: 9491/1: alignment: restore uaccess state on emulation fault Karl Mehltretter <kmehltretter(a)gmail.com> ARM: 9488/1: smp: set current pointer in assembly before jumping into C Weibin Liu <liuwb(a)xiaopeng.com> spi: cadence-xspi: fix stack buffer overflow in the Marvell b0 path Martin Belanger <martin.nvme.dev(a)gmail.com> nvme: make the DH-HMAC-CHAP secret attributes readable by root only Matt Fleming <mfleming(a)cloudflare.com> iommu/amd: Don't allocate kdump device table from DMA32 Matt Fleming <mfleming(a)cloudflare.com> iommu/amd: Program device table when kdump reuse fails Tim Douglas <me(a)timdoug.com> serial: pmac_zilog: push received data to the port that received it Nicolai Buchwitz <nb(a)tipi-net.de> serial: amba-pl011: keep transmitter enabled when disabling RS485 Nicolai Buchwitz <nb(a)tipi-net.de> serial: amba-pl011: honour delay_rts_before_send for every write Jiri Slaby (SUSE) <jirislaby(a)kernel.org> serial: 8250_omap: set priv->line before enabling the IRQ Jiri Slaby (SUSE) <jirislaby(a)kernel.org> serial: 8250_lpss: do not touch uninitialized line in ehl_serial_exit() Muhammad Bilal <meatuni001(a)gmail.com> platform/x86: hp-bioscfg: NUL-terminate the SPM auth token Muhammad Bilal <meatuni001(a)gmail.com> platform/x86: hp-bioscfg: allow clearing current_password Muhammad Bilal <meatuni001(a)gmail.com> platform/x86: hp-bioscfg: return -E2BIG from validate_password_input() Muhammad Bilal <meatuni001(a)gmail.com> platform/x86: hp-bioscfg: fix non-ASCII truncation in hp_get_string_from_buffer() Muhammad Bilal <meatuni001(a)gmail.com> platform/x86: hp-bioscfg: fix OOB reads in hp_get_string_from_buffer() Denis Arefev <arefev(a)swemel.ru> ALSA: cs46xx: fix unit mismatch in DSP code area bounds check Aaron Erhardt <aer(a)tuxedocomputers.com> platform/x86/tuxedo: Fix keyboard LED map ordering Gergo Koteles <soyer(a)irl.hu> ALSA: hda/tas2781: Skip invalid TAS2563 UEFI calibration data Kazuki Hanai <hnkz.64(a)gmail.com> tmpfs: fix unicode_map leaks in casefold option handling Aamir Ahmed <elb12345(a)hotmail.co.uk> lib: decompress_bunzip2: fix integer overflow in run-length decoding Bradley Morgan <brads(a)mainlining.org> panic: flatten nmi_panic control flow Matt Turner <mattst88(a)gmail.com> lib/decompress_bunzip2: fix off-by-one in run-length bounds check Ma Ke <make_ruc2021(a)163.com> pinctrl: stm32: Fix fwnode reference leak in stm32_gpiolib_register_bank() Weibin Liu <liuwb(a)xiaopeng.com> spi: ljca: validate the response length before copying the data Daeho Jeong <daehojeong(a)google.com> f2fs: disallow mmap write and data-modifying fallocate on atomic files Zhan Xusheng <zhanxusheng1024(a)gmail.com> f2fs: fix defragment writeback range truncation on 32-bit Kaixuan Li <kaixuanli0131(a)gmail.com> f2fs: check every cur_*_segno[] entry on readonly images Nanzhe Zhao <zhaonanzhe(a)xiaomi.com> f2fs: read i_size once in f2fs_vm_page_mkwrite Joanne Chang <joannechien(a)google.com> f2fs: allow pinning empty compressed files Nanzhe Zhao <zhaonanzhe(a)xiaomi.com> f2fs: remove mappedtodisk flag usage in mmap write path Karl Mehltretter <kmehltretter(a)gmail.com> sh: intc: Sort the prio and sense lists after filling them Geraldo Nascimento <geraldogabriel(a)gmail.com> PCI: rockchip: Drive at 2.5 GT/s, error other speeds Geraldo Nascimento <geraldogabriel(a)gmail.com> PCI: rockchip-host: Do not attempt 5.0 GT/s retraining Geraldo Nascimento <geraldogabriel(a)gmail.com> PCI: rockchip-ep: Do not attempt 5.0 GT/s retraining Daeho Jeong <daehojeong(a)google.com> f2fs: convert inline quota files when turning quota on Andrea Parri <parri.andrea(a)gmail.com> nvmet: zns: don't leak stale memory in zone management receive Yehyeong Lee <yhlee(a)isslab.korea.ac.kr> nvme: bound FDP config log reads to the received buffer Sung Byeongchan <tjdqudcks0424(a)naver.com> nvmet: require authentication before property set Jérémy Jean <Jeremy.Jean(a)oss.cyber.gouv.fr> nvmet: free the bvec on file namespace range errors Yehyeong Lee <yhlee(a)isslab.korea.ac.kr> nvme-auth: fail when the controller does not authenticate itself Daejun Park <daejun7.park(a)samsung.com> nvmet: fix preempt of another registrant by the reservation holder Yehyeong Lee <yhlee(a)isslab.korea.ac.kr> nvme-rdma: don't complete a request after a bogus remote invalidation Andrea Parri <parri.andrea(a)gmail.com> iomap: don't lose a fiemap iteration error when emitting the last extent Kathiravan Thirumoorthy <kathiravan.thirumoorthy(a)oss.qualcomm.com> clk: qcom: ipq5332: add 24MHz rate for USB UTMI clock Kathiravan Thirumoorthy <kathiravan.thirumoorthy(a)oss.qualcomm.com> clk: qcom: ipq5018: add 24MHz rate for USB UTMI clock Aamir Ahmed <elb12345(a)hotmail.co.uk> clk: qcom: ipq-cmn-pll: Assign .num before accessing .hws Samuel Thibault <samuel.thibault(a)ens-lyon.org> speakup: Fix NULL pointer dereference on VT switch + selection Wentao Guan <guanwentao(a)uniontech.com> mei: vsc: Fix packet CRC computed over pointer size Mikulas Patocka <mpatocka(a)redhat.com> dm-bufio: fix a race leading to an unsigned integer underflow Mikulas Patocka <mpatocka(a)redhat.com> dm-bufio: fix non-working memory limit Jiri Slaby (SUSE) <jirislaby(a)kernel.org> serial: 8250_exar: store the GPIO platform device in struct exar8250 Myeonghun Pak <mhun512(a)gmail.com> fbdev: kyro: Release WC setup on registration failure Lorenzo Stoakes (ARM) <ljs(a)kernel.org> fbdev: sh_mobile_lcdc: check for fb_deferred_io_init() error Lorenzo Stoakes (ARM) <ljs(a)kernel.org> fbdev: smscufx: check for fb_deferred_io_init() error Lorenzo Stoakes (ARM) <ljs(a)kernel.org> fbdev: udlfb: check for fb_deferred_io_init() error Lorenzo Stoakes (ARM) <ljs(a)kernel.org> fbdev: xen-fbfront: check for fb_deferred_io_init() error Lorenzo Stoakes (ARM) <ljs(a)kernel.org> fbdev: ssd1307fb: check for fb_deferred_io_init() error David E. Box <david.e.box(a)linux.intel.com> platform/x86/intel/vsec: Fix inverted walk_header() test in get_features() Guixiong Wei <weiguixiong(a)bytedance.com> platform/x86/intel-uncore-freq: Continue restoring limits on resume Mario Limonciello <mario.limonciello(a)amd.com> platform/x86/amd: hfi: Fix out-of-bounds reads when parsing ranking data Guangshuo Li <lgs201920130244(a)gmail.com> platform/x86: simatic-ipc: fix platform device leak on registration failure Antheas Kapenekakis <lkml(a)antheas.dev> platform/x86: oxpec: Fix Apex charge limit control Jack Boykin <jtboykin.jb(a)gmail.com> platform/x86/amd/pmf: Fix power_supply refcount leak in amd_pmf_get_battery_prop() Muhammad Bilal <meatuni001(a)gmail.com> platform/x86: hp-wmi: fix heap OOB read and memory corruption in hp_wmi_perform_query() Muhammad Bilal <meatuni001(a)gmail.com> platform/x86: hp-bioscfg: fix 16-byte heap overflow for empty auth token Denis Benato <denis.benato(a)linux.dev> platform/x86: asus-wmi: fix screenpad power state detection Denis Benato <denis.benato(a)linux.dev> platform/x86: asus-wmi: fix unclear usage of bd->props.power Mario Limonciello <mario.limonciello(a)amd.com> platform/x86/amd: Stop counting intermediate cycles with metrics table Mario Limonciello <mario.limonciello(a)amd.com> platform/x86/amd/pmf: Validate the APTS state index Donggeun Yoo <donggeunyoo.kernel(a)gmail.com> mm/damon/tests/core-kunit: test the size charged for a filter-trimmed region Donggeun Yoo <donggeunyoo.kernel(a)gmail.com> mm/damon/core: charge only the part of a region the filter left Hao Ge <hao.ge(a)linux.dev> mm/alloc_tag: account for reserved tag ids in the kernel tag check Breno Leitao <leitao(a)debian.org> mm/shmem: report RCU-tasks quiescent states while undoing a range Hongfu Li <lihongfu(a)kylinos.cn> mm/hugetlb_cgroup: move per-node usage on cgroup reparenting Hongfu Li <lihongfu(a)kylinos.cn> mm/hugetlb_cgroup: move per-node usage on cross node migration Yuanhe Shu <xiangzao(a)linux.alibaba.com> mm/page_alloc: do not boost watermarks in kdump capture kernels Gregory Price <gourry(a)gourry.net> mm/madvise: use folio_trylock() in the cold/pageout PMD split Gregory Price <gourry(a)gourry.net> mm/madvise: reclaim isolated folios if PTE restart fails SJ Park <sj(a)kernel.org> mm/damon/sysfs-schemes: read sysfs_filter->addr_range only once Imre Kaloz <kaloz(a)kernel.org> PCI: Avoid D3 on PLX PEX 8532/8533/8548 downstream ports Yongjian Mu <ymu(a)everpuredata.com> xprtrdma: trim head iovec when the payload arrives via a Write chunk Tim Menninger <tmenninger(a)everpuredata.com> xprtrdma: prevent disconnect feedback during endpoint teardown Weigang He <geoffreyhe2(a)gmail.com> mtd: parsers: qcom: fix offset/size overflow on large partitions Gabor Juhos <j4g8y7(a)gmail.com> mtd: rawnand: qcom: fix read location register usage in config_nand_cw_read() Hengyu Liang <hengyul(a)cs.unc.edu> btrfs: return -ENOTTY for unknown ioctls on the control device Wentao Liang <vulab(a)iscas.ac.cn> btrfs: zoned: fix block group reference leak in btrfs_repair_one_zone() Ard Biesheuvel <ardb(a)kernel.org> arm64/efi: Clear PTE_WRITE when applying EFI_MEMORY_RO Mikulas Patocka <mpatocka(a)redhat.com> dm-snapshot: fix crash if dm_io_client_create fails Johan Hovold <johan(a)kernel.org> USB: serial: sierra: fix urb leak on write completion Anup Vishwakarma <anup.vishwakarma(a)oss.qualcomm.com> mailbox: qcom-ipcc: Guard against NULL con_priv in send_data() Wentao Liang <vulab(a)iscas.ac.cn> mailbox: mtk-cmdq: Fix runtime PM leak in cmdq_mbox_flush() Florian Fainelli <florian.fainelli(a)broadcom.com> mailbox: bcm74110: Cap rx_svc_init_list growth to prevent PMC-induced OOM Runyu Xiao <runyu.xiao(a)seu.edu.cn> mailbox: altera: shut down RX polling timer on channel teardown Wayne Chang <waynec(a)nvidia.com> usb: typec: ucsi_ccg: Add retry mechanism in ccg_read Mathias Nyman <mathias.nyman(a)linux.intel.com> xhci: Prevent invalid vdev dereference during sideband unregister Michal Pecio <michal.pecio(a)gmail.com> usb: xhci: Fix bounce buffer overflow Seungjin Bae <eeodqql09(a)gmail.com> usb: typec: ucsi: ccg: Validate altmode index in GET_CURRENT_CAM response Ali Resool Tuama <aliresool567(a)gmail.com> USB: quirks: add USB_QUIRK_WINDOWS_CONFIG_REQ_SIZE for GameSir G7 SE Drobyshev Vladimir <enigma_137(a)icloud.com> USB: cdc-acm: add VeriFone VX820 device ID Adam Harshbarger <handyhandyman.adam(a)gmail.com> lib/plist: fix plist_requeue() corrupting order in the last bucket Koichiro Den <den(a)valinux.co.jp> cxl/acpi: Convert QTG _DSM latencies to picoseconds Koichiro Den <den(a)valinux.co.jp> cxl: Account for link width in latency calculation Koichiro Den <den(a)valinux.co.jp> cxl/port: Convert PCIe link latency to nanoseconds Guixin Liu <kanie(a)linux.alibaba.com> cxl/pci: Program the Port GPF timeouts before caching the DVSEC Seongjun Hong <hsj0512(a)snu.ac.kr> vfio/mlx5: Fix boundary check in set_report_output() Xiaofeng Yuan <yuanxiaofeng(a)eswincomputing.com> RISC-V: KVM: Fix IPI delivery for out-of-order vcpu_id Ross Lagerwall <ross.lagerwall(a)citrix.com> xen-blkfront: Fix IO race during unplug Zongmin Zhou <zhouzongmin(a)kylinos.cn> slimbus: messaging: fix leaked PM vote on tid allocation failure Johan Hovold <johan(a)kernel.org> USB: serial: usb_wwan: fix urb leak on disconnect Michael Wyraz <michael(a)wyraz.de> USB: serial: option: add support for ASR 1286:4e3c modem Reinhard Speyerer <rspmn(a)arcor.de> USB: serial: option: add Rolling Wireless RN947R Johan Hovold <johan(a)kernel.org> USB: cdc-acm: fix urb leak on disconnect Jiale Yao <yaojiale02(a)163.com> wifi: ath12k: validate MAC/PHY capability count before saving Olivier Kaloudoff <olivier.kaloudoff(a)gmail.com> ALSA: usb-audio: Add mic resolution quirk for Logitech Webcam C200 Jesse Zhang <Jesse.Zhang(a)amd.com> drm/ttm: return an error when kmapping a BO without pages Krzysztof Karas <krzysztof.karas(a)intel.com> iommu/dma: Catch scatterlist length overflows Wentao Liang <vulab(a)iscas.ac.cn> xen-pciback: Fix pcistub_device ref leak in pcistub_get_gsi_from_sbdf() Yehyeong Lee <yhlee(a)isslab.korea.ac.kr> xen/pcifront: check that an AER callback exists before calling it Koichiro Den <den(a)valinux.co.jp> xen/privcmd: Only claim ioreqs matching an ioeventfd Myeonghun Pak <mhun512(a)gmail.com> soc: fsl: dpio: Free the IRQ before releasing the I/O object Myeonghun Pak <mhun512(a)gmail.com> soc: fsl: dpio: Fix cleanup on IRQ registration failure Wentao Liang <vulab(a)iscas.ac.cn> soc: fsl: cpm1: tsa: Fix clock leak in tsa_of_parse_tdms() Abdifatah Suruur <suruurism(a)gmail.com> xen/gntdev: prevent private mappings from becoming writable Wentao Liang <vulab(a)iscas.ac.cn> clk: imx: Fix clock reference leak in imx_obtain_fixed_clock_hw() Wentao Liang <vulab(a)iscas.ac.cn> clk: imx: Fix clock reference leak in imx_get_clk_hw_by_name() Longlong Xia <xialonglong(a)kylinos.cn> mm/zswap: enable zswap_ever_enabled in zswap_pool_create() Longlong Xia <xialonglong(a)kylinos.cn> mm/zswap: publish the initial pool with list_add_rcu() Jinmeng Zhou <jinmengzhou22(a)gmail.com> mm/hugetlb: fix subpool minimum reservation rollback Anastasios Papagiannis <tasos.papagiannnis(a)gmail.com> mm/nommu: reject wrapping ranges in access_remote_vm() Mike Rapoport (Microsoft) <rppt(a)kernel.org> mm/execmem: free ROX cache chunks only when they span an entire vm area Luxiao Xu <rakukuip(a)gmail.com> mm/memory: constrain generic_access_phys() to page boundary Yogesh Gaur <yogeshgaur.83(a)gmail.com> md: don't hand out the array before md_alloc() has added mddev->kobj Jake Labelle <southampton.jake.labelle(a)gmail.com> nilfs2: validate directory position after llseek in readdir Jinjie Ruan <ruanjinjie(a)huawei.com> ext4: fix out-of-bounds read in ext4_get_group_info() Sergey Senozhatsky <senozhatsky(a)chromium.org> ext4: fix ABBA deadlock in ext4_rmdir() Daejun Park <daejun7.park(a)samsung.com> ext4: don't report delalloc data as a hole on indirect-mapped inodes Hemanth Selam <hemanth.selam(a)gmail.com> ext4: skip extra isize expansion while unmounting Daejun Park <daejun7.park(a)samsung.com> jbd2: don't advance j_fc_off before the buffer is recorded guzebing <guzebing1612(a)gmail.com> ext4: reject delalloc to nodelalloc before applying remount options Hsiu-Hsien Lee <swinds24(a)gmail.com> ext4: fix fast commit replay failing on a read-only mount guzebing <guzebing1612(a)gmail.com> ext4: only update tune mount options when requested Matthias Goergens <matthias.goergens(a)gmail.com> fanotify: report names longer than NAME_MAX Peter Ujfalusi <peter.ujfalusi(a)linux.intel.com> ALSA: hda/hdmi: clamp sad_count in ELD proc write handler Peter Ujfalusi <peter.ujfalusi(a)linux.intel.com> ALSA: hda/hdmi: clamp num_cvts against cvt_nids[] in hdmi_read_pin_conn Daehyeon Ko <4ncienth(a)gmail.com> crypto: algif_skcipher - rewind rounded output bytes Tristan Madani <tristan(a)talencesecurity.com> wifi: rtw89: fix IE length passed to cfg80211_find_ie() in WoW AKM Krzysztof Wilczyński <kwilczynski(a)kernel.org> PCI/sysfs: Pass the device name length in UTF-16 code units Josef Bacik <josef(a)toxicpanda.com> aoe: pull in the headers each received packet type reads Pin-Hao Chen <billy920225(a)gmail.com> spi: stm32: fix double free of SRAM buffer on MDMA fallback Wentao Liang <vulab(a)iscas.ac.cn> clocksource/drivers/digicolor: Fix clk reference leak on request_irq failure Wentao Liang <vulab(a)iscas.ac.cn> clocksource/drivers/fttmr010: Fix clk reference leak in error paths Linlin Yang <yanglinlin(a)kylinos.cn> wifi: mt76: mt7996: fix PCI device reference leak in mt7996_pci_init_hif2() Wentao Liang <vulab(a)iscas.ac.cn> wifi: mt76: Fix of_node reference leak in mt76_get_rate_power_limits() Jiale Yao <yaojiale02(a)163.com> wifi: mt76: mt7615: cancel reset work during unregister Devin Wittmayer <lucid_duck(a)justthetip.ca> wifi: mt76: mt7925: cancel mlo_pm_work on the USB stop path Myeonghun Pak <mhun512(a)gmail.com> wifi: mt76: mt7615: restore DBDC state after ext PHY failure Eason Lai <eason.lai(a)mediatek.com> wifi: mt76: fix memory leak in USB TX path Eason Lai <eason.lai(a)mediatek.com> wifi: mt76: mt792x: fix UAF in SDIO TX path when out of memory Mark Anthony Agarro <markanthonyagarro(a)gmail.com> wifi: mt76: mt7615: do not tear down BSS/STA state for monitor vifs Mark Anthony Agarro <markanthonyagarro(a)gmail.com> wifi: mt76: mt76x02: validate TX-status rate index before mac80211 handoff Joseph Qi <joseph.qi(a)linux.alibaba.com> ocfs2: skip uninitialized lockres in ocfs2_mark_lockres_freeing() Joseph Qi <joseph.qi(a)linux.alibaba.com> ocfs2: restrict OCFS2_INVALID_SLOT suballoc slot to system inodes Karl Mehltretter <kmehltretter(a)gmail.com> fork: honor task_struct's declared alignment Konstantin Khorenko <khorenko(a)virtuozzo.com> selftests/core: fix unshare_test with large fs.nr_open Joseph Qi <joseph.qi(a)linux.alibaba.com> ocfs2: free replay slots in ocfs2_recovery_exit() Joseph Qi <joseph.qi(a)linux.alibaba.com> ocfs2: exit recovery thread on mount error path Thorsten Blum <blum(a)kernel.org> init: fix early boot crash with bare hostname parameter Zi Yan <ziy(a)nvidia.com> USB: gadgetfs: do not WARN about excessively large memory allocations Michael Liang <mliang(a)purestorage.com> fault-inject: fix dentry leak OGAWA Hirofumi <hirofumi(a)mail.parknet.co.jp> fat: fix fat_ent_write() for reverting the value DAI RENJIE <drj19981414013(a)gmail.com> resource: fix lost wakeup when waiting for a muxed region SJ Park <sj(a)kernel.org> mm/damon/sysfs: set next refresh jiffies per sysfs context SJ Park <sj(a)kernel.org> mm/damon/core: handle extreme memory state in damon_get_node_mem_bp() SJ Park <sj(a)kernel.org> mm/damon/vaddr: respect folio end for DAMOS_STAT SJ Park <sj(a)kernel.org> mm/damon/paddr: respect folio end for DAMOS actions except STAT SJ Park <sj(a)kernel.org> mm/damon/paddr: respect folio end for DAMOS_STAT Zhiling Zou <roxy520tt(a)gmail.com> mm/page_table_check: skip zero pages Joe Damato <joe(a)dama.to> mm: memcontrol: raise MEMCG_MAX for charges that fail without reclaiming Gregory Price <gourry(a)gourry.net> mm/mempolicy: take a cpuset cookie for the interleave node count Qi Xi <xiqi2(a)huawei.com> mm/page_isolation: guard compound_order() against racing Qi Xi <xiqi2(a)huawei.com> mm/page_isolation: fix UBSAN shift-out-of-bounds warning Chengfeng Ye <nicoyip.dev(a)gmail.com> mm/ksm: mark migration stores with WRITE_ONCE() Nathan Chancellor <nathan(a)kernel.org> wifi: brcmsmac: Adjust txpwrindex value in nphy_ipa_rxcal_gaintbl_2GHz Darrick J. Wong <djwong(a)kernel.org> xfs: cross-reference the primary superblock Priyank Rathod <rathodpriyank(a)google.com> PCI/AER: Fix memory leak in aer_recover_queue() on kfifo buffer overflow Donggeun Yoo <donggeunyoo.kernel(a)gmail.com> PCI/DOE: Fix double free of a duplicate feature's sysfs name Eric Dumazet <edumazet(a)kernel.org> dlm: fix send buffer backpressure handling Denis Efremov (Oracle) <efremov(a)linux.com> floppy: return the drive state flags from the 32-bit FDGETDRVSTAT Denis Efremov (Oracle) <efremov(a)linux.com> floppy: don't store a stack buffer in timeout_message Myeonghun Pak <mhun512(a)gmail.com> ASoC: codecs: rt5682s: disable jack detection work on shutdown Chuck Lever <chuck.lever(a)oracle.com> svcrdma: Grant credits from the clamped sc_max_requests Runyu Xiao <runyu.xiao(a)seu.edu.cn> perf: xgene: initialize lock before requesting IRQ Linus Walleij <linusw(a)kernel.org> power: supply: ab8500_fg: Report sub-percent charge changes Linus Walleij <linusw(a)kernel.org> power: supply: ab8500_fg: Accept status from supplied power Henrik Enquist <henrik.enquist(a)gmail.com> ALSA: aloop: Don't constrain playback params in notify mode Andrey Albershteyn <aalbersh(a)kernel.org> fsverity: hoist statx reporting of fs-verity flag Maurizio Casciano <mauriziocasciano7(a)gmail.com> power: supply: core: Honor supplied-from with CONFIG_OF=y Tharit Tangkijwanichakul <tharitt97(a)gmail.com> media: hantro: disable runtime PM before hardware teardown Jiawen Liu <1298662399(a)qq.com> media: amphion: fix runtime PM imbalance on probe failure Tharit Tangkijwanichakul <tharitt97(a)gmail.com> media: hantro: release runtime resources when device_run fails Tharit Tangkijwanichakul <tharitt97(a)gmail.com> media: hantro: Harden MPEG-2 control access against NULL Junrui Luo <moonafterrain(a)outlook.com> media: vicodec: fix NULL deref on oversized frame Pengpeng Hou <pengpeng(a)iscas.ac.cn> media: mediatek: jpeg: retry HW selection after successful wait Michail Tatas <michail.tatas(a)gmail.com> media: verisilicon: rockchip: Fix leaks in init Guangshuo Li <lgs201920130244(a)gmail.com> media: mediatek: vpu: release reserved memory on remove Guangshuo Li <lgs201920130244(a)gmail.com> media: mediatek: vcodec: destroy core workqueue on remove Wentao Liang <vulab(a)iscas.ac.cn> media: mtk-jpeg: Fix runtime PM leak in mtk_jpegenc_worker() Wentao Liang <vulab(a)iscas.ac.cn> media: mtk-jpeg: Fix runtime PM leak in mtk_jpegdec_worker() Wentao Liang <vulab(a)iscas.ac.cn> media: platform: mtk-mdp3: Fix device reference leak in mdp_comp_init() Fan Wu <fanwu01(a)zju.edu.cn> media: mediatek: vpu: free IRQ before destroying watchdog workqueue Myeonghun Pak <mhun512(a)gmail.com> media: amphion: prevent unbind while video instances are open Myeonghun Pak <mhun512(a)gmail.com> media: amphion: drain message work before releasing core state Michael Freidkin <freidkin(a)gmail.com> media: meson: vdec: size capture planes from the aligned canvas Guangshuo Li <lgs201920130244(a)gmail.com> media: chips-media: wave5: Check decoder qbuf runtime resume Linmao Li <lilinmao(a)kylinos.cn> media: chips-media: wave5: Balance runtime PM on encoder close errors Linmao Li <lilinmao(a)kylinos.cn> media: chips-media: wave5: Handle polling IRQ thread failure Runyu Xiao <runyu.xiao(a)seu.edu.cn> media: sti: delta: use unaligned accessors for MJPEG SOF fields Nas Chung <nas.chung(a)chipsnmedia.com> media: v4l2-common: Fix P010 format info Thorsten Blum <thorsten.blum(a)linux.dev> media: imagination: Fix value clamping in calculate_qp_tables Karl Mehltretter <kmehltretter(a)gmail.com> KVM: arm64: vgic-v3: Roll back assignments from the new region Alexey Klimov <alexey.klimov(a)linaro.org> soc: samsung: exynos-pmu: fix error paths in cpuhotplug/idle states setup Karl Mehltretter <kmehltretter(a)gmail.com> KVM: arm64: vgic-v3: Undo assignment on iodev registration failure Kim Phillips <kim.phillips(a)amd.com> x86/bugs: Fix CONFIG_MITIGATION_RETPOLINE=n mitigation reporting Fuad Tabba <fuad.tabba(a)linux.dev> KVM: arm64: Validate the host vCPU's VM before reading it under pKVM Jérémy Jean <Jeremy.Jean(a)oss.cyber.gouv.fr> crypto: ecc - Handle exceptional points in Shamir multiplication Aldo Ariel Panzardo <qwe.aldo(a)gmail.com> crypto: nx - validate 'ignore' before subtracting in decompress Thorsten Blum <blum(a)kernel.org> hwrng: core - reject unknown RNG names Thorsten Blum <blum(a)kernel.org> hwrng: ba431 - fix reported byte count Thorsten Blum <blum(a)kernel.org> hwrng: amd - report partial reads in non-blocking mode ZhaoJinming <zhaojinming(a)uniontech.com> crypto: caam - fix double-free in caam_rsa_set_priv_key_form() Wei Jie Law <98lawweijie(a)gmail.com> media: uvcvideo: Fix NULL deref on events for uninitialized controls Imre Kaloz <kaloz(a)kernel.org> PCI: Disable MSI for ULi M1575 EHCI controller Runyu Xiao <runyu.xiao(a)seu.edu.cn> block: amiflop: synchronize flush timer before track flush Vasileios Almpanis <vasileios.almpanis(a)virtuozzo.com> block: drop the cached plug time when blk_add_rq_to_plug() flushes Danish Khateeb <danishkhateeb03(a)gmail.com> pps: generators: stop the generator on unregister Vincent Donnefort <vdonnefort(a)google.com> KVM: arm64: Fix MMFR0 TGRAN advertisement for pVMs Mikulas Patocka <mpatocka(a)redhat.com> dm-writecache: fix REQ_FUA processing Mikulas Patocka <mpatocka(a)redhat.com> dm-writecache: fix uncommitted_blocks underflow Mikulas Patocka <mpatocka(a)redhat.com> dm-writecache: fix a crash if we attempt to use non-dax device Mikulas Patocka <mpatocka(a)redhat.com> dm-writecache: fix a quirk in statistics Mikulas Patocka <mpatocka(a)redhat.com> dm-writecache: report I/O error if flush failed Mikulas Patocka <mpatocka(a)redhat.com> dm: fix a bug in dm_accept_partial_bio Kaho Jiang <kj2864(a)nyu.edu> media: em28xx: fix double free in em28xx_alloc_urbs Ginger Li <ginger.jzllee(a)gmail.com> media: exynos4-is: Fix a race between s_stream(0) and the interrupt handler Guangshuo Li <lgs201920130244(a)gmail.com> media: rtl28xxu: fix SDR platform device leak Wentao Liang <vulab(a)iscas.ac.cn> media: pvrusb2: Fix USB parent device leak in class_dev_create() Guangshuo Li <lgs201920130244(a)gmail.com> media: tw686x: fix V4L2 device lifetime on probe failure Tianchu Chen <flynnnchen(a)tencent.com> staging: rtl8723bs: fix RX buffer OOB write from device-reported length Johan Hovold <johan(a)kernel.org> staging: greybus: uart: fix racy TIOCMIWAIT implementation Wentao Liang <vulab(a)iscas.ac.cn> drm/msm/dsi: Fix VM leak in dsi_tx_buf_alloc_6g() Krzysztof Kozlowski <krzysztof.kozlowski(a)oss.qualcomm.com> drm/msm/hdmi_bridge: Correct poweroff/audio cleanup order in post_disable Krzysztof Kozlowski <krzysztof.kozlowski(a)oss.qualcomm.com> drm/msm/hdmi: Handle msm_hdmi_power_on() errors during .atomic_pre_enable() Krzysztof Kozlowski <krzysztof.kozlowski(a)oss.qualcomm.com> drm/msm/hdmi_phy: Cleanup after msm_hdmi_phy_resource_enable() failure Fan Wu <fanwu01(a)zju.edu.cn> i3c: master: adi: free the IRQ before unregistering the master Runyu Xiao <runyu.xiao(a)seu.edu.cn> IB/hfi1: Shutdown self-rearming timers before freeing Alexander Sverdlin <alexander.sverdlin(a)gmail.com> pwm: tiehrpwm: Clear period on disable to allow reconfiguration Ryusuke Konishi <konishi.ryusuke(a)gmail.com> nilfs2: ignore non-fatal signals during synchronous log write wait Ryusuke Konishi <konishi.ryusuke(a)gmail.com> nilfs2: clear dirty flag on bdev buffers on log write failure Runyu Xiao <runyu.xiao(a)seu.edu.cn> ASoC: pcm6240: do not free an unrequested IRQ Srish Srinivasan <ssrish(a)linux.ibm.com> pseries/plpks: clear SED key data after use Srish Srinivasan <ssrish(a)linux.ibm.com> pseries/plpks: clear signed update authentication buffer Srish Srinivasan <ssrish(a)linux.ibm.com> pseries/plpks: clear sensitive PLPKS buffers Srish Srinivasan <ssrish(a)linux.ibm.com> pseries/plpks: validate input to plpks_signed_update_var() Srish Srinivasan <ssrish(a)linux.ibm.com> pseries/plpks: fix error handling in plpks_read_var() Wentao Liang <vulab(a)iscas.ac.cn> clk: starfive: jh7110-isp: fix refcount leak in jh7110_ispcrg_probe() Takashi Iwai <tiwai(a)suse.de> ALSA: core: Check shutdown flag at D0 power-state, too Runyu Xiao <runyu.xiao(a)seu.edu.cn> m68k: dmasound: Keep the Q40 IRQ handler registered Runyu Xiao <runyu.xiao(a)seu.edu.cn> ALSA: sgio2audio: Only free successfully requested IRQs Vishnu Reddy <busanna.reddy(a)oss.qualcomm.com> media: iris: Fix frame interval enumeration for non-divisor framerates Vishnu Reddy <busanna.reddy(a)oss.qualcomm.com> media: iris: Fix bus_info prefix in VIDIOC_QUERYCAP Vishnu Reddy <busanna.reddy(a)oss.qualcomm.com> media: venus: Fix iova allocation from restrict region Hans de Goede <johannes.goede(a)oss.qualcomm.com> media: qcom: camss: Add "gcc_axi_hf" to 8775p VFE lite clock lists Hitesh Patel <hitesh(a)ebytelogic.com> media: qcom: camss: vfe: Fix VFE reset while another line is streaming Hitesh Patel <hitesh(a)ebytelogic.com> media: qcom: camss: vfe-17x: Fix write master selection for RDI lines Hitesh Patel <hitesh(a)ebytelogic.com> media: qcom: camss: vfe-17x: Fix write master buffer done being dropped Jiale Yao <yaojiale02(a)163.com> cxl/acpi: Check ACPI companion before use Ibrahim Hashimov <security(a)auditcode.ai> fs/ntfs3: fix integer overflow in find_log_rec() causing OOB read Lucas Costa <2000.costalucas(a)gmail.com> spi: bcm2835: fix device_node reference leak in bcm2835_spi_setup() Cheick Traore <cheick.traore-ext(a)st.com> iio: adc: stm32: fix minimum sampling time values Jiale Yao <yaojiale02(a)163.com> iio: accel: adxl380: reject devices without match data Jiale Yao <yaojiale02(a)163.com> iio: accel: adxl313: reject devices without match data Jiale Yao <yaojiale02(a)163.com> iio: adc: ti-adc128s052: validate SPI match data Jiale Yao <yaojiale02(a)163.com> iio: adc: mcp3911: reject devices without match data Jiale Yao <yaojiale02(a)163.com> iio: adc: max11205: reject devices without match data Jiale Yao <yaojiale02(a)163.com> iio: adc: ad7606: reject devices without match data Jiale Yao <yaojiale02(a)163.com> iio: pressure: bmp280: validate SPI match data Jiale Yao <yaojiale02(a)163.com> iio: potentiometer: x9250: reject devices without match data Jiale Yao <yaojiale02(a)163.com> iio: imu: adis16400: validate SPI match data Jiale Yao <yaojiale02(a)163.com> iio: frequency: adf4377: reject devices without match data Jiale Yao <yaojiale02(a)163.com> iio: dac: ad5755: validate SPI match data Wentao Liang <vulab(a)iscas.ac.cn> ASoC: codecs: wcd9335: Fix SLIM interface device leak in wcd9335_slim_status() Runyu Xiao <runyu.xiao(a)seu.edu.cn> ALSA: mpu401: shut down timer before freeing MPU Lu Baolu <baolu.lu(a)linux.intel.com> iommu/vt-d: Avoid out-of-range shift in qi_desc_dev_iotlb_pasid() Kathiravan Thirumoorthy <kathiravan.thirumoorthy(a)oss.qualcomm.com> arm64: dts: qcom: ipq9574: Wire up USB3 PHY PIPE clock to GCC David Heidelberg <david(a)ixit.cz> arm64: dts: qcom: sdm845-xiaomi-polaris: Extend the xbl_mem region David Heidelberg <david(a)ixit.cz> arm64: dts: qcom: sdm845-xiaomi-beryllium: Extend the xbl_mem region Piotr Kubik <piotr(a)kubik.pl> netfilter: ctnetlink: fix inverted IPv6 address match in dump filter Orgad Shaneh <orgads(a)gmail.com> MIPS: mm: do not write a huge TLB entry when the probe misses Orgad Shaneh <orgads(a)gmail.com> MIPS: mm: align hugetlb mappings in arch_get_unmapped_area() Runyu Xiao <runyu.xiao(a)seu.edu.cn> peci: npcm: Initialize state before requesting IRQ Runyu Xiao <runyu.xiao(a)seu.edu.cn> peci: aspeed: Initialize state before requesting IRQ Ma Ke <make_ruc2021(a)163.com> ASoC: wcd9335: Fix device reference leak in wcd9335_slim_status() David Cemin <dcemin(a)nvidia.com> ASoC: sdw_utils: clear stale RT711 device reference on exit Breno Leitao <leitao(a)debian.org> dcache: report a Tasks-RCU quiescent state in dentry_kill() Ricardo Neri <ricardo.neri-calderon(a)linux.intel.com> hwmon: (coretemp) Refresh the temperature on the first read Richard Weinberger <richard(a)nod.at> mtd: Call get_wunit() on the master partition Wentao Liang <vulab(a)iscas.ac.cn> mtd: mtdsuper: Fix MTD device reference leak in mtd_get_sb() Wentao Liang <vulab(a)iscas.ac.cn> mtd: maps: l440gx: Fix double put of the PM device in init_l440gx() Wentao Liang <vulab(a)iscas.ac.cn> mtd: maps: l440gx: Fix double put of the ISA bridge in init_l440gx() Wentao Liang <vulab(a)iscas.ac.cn> mtd: amd76xrom: Fix PCI device reference leak in amd76xrom_init_one() Orgad Shaneh <orgads(a)gmail.com> mtd: cfi_cmdset_0002: cap the write-buffer chunk at 256 bytes on an x8 device Myeonghun Pak <mhun512(a)gmail.com> mtd: maps: pci: balance PCI enable on cleanup Wentao Liang <vulab(a)iscas.ac.cn> mtd: rawnand: atmel: Fix MCK clock leak in atmel_nand_controller_init() Guangshuo Li <lgs201920130244(a)gmail.com> mtd: rawnand: nuvoton: fix clock cleanup on probe failure Michael J. Ruhl <michael.j.ruhl(a)intel.com> platform/x86/intel/pmt: Block mmap when callback is present Joanne Koong <joannelkoong(a)gmail.com> fuse: don't drop destination page cache on a zero byte copy reply Ridham Khurana <khurana.ridham222(a)gmail.com> hwmon: (lm95245) Fix negative temperature conversion Wentao Liang <vulab(a)iscas.ac.cn> regulator: core: Fix coupled regulators reference leak on removal Aamir Ahmed <elb12345(a)hotmail.co.uk> clk: mvebu: ap-cpu-clk: Assign .num before accessing .hws Junjie Cao <junjie.cao(a)intel.com> ASoC: rt712-sdca-dmic: fix drvdata type in the gain controls Guangshuo Li <lgs201920130244(a)gmail.com> ASoC: Intel: atom: Fix platform device leak on probe failure Jiacheng Xu <stitch(a)zju.edu.cn> kobject: fix out-of-bounds access in kobject_action_type() Ryusuke Konishi <konishi.ryusuke(a)gmail.com> nilfs2: fix deadlock between nilfs_evict_inode() and find_inode() Tiezhu Yang <yangtiezhu(a)loongson.cn> perf loongarch: Fix discarded const qualifier in _get_field() Lin Wang <wanglin(a)open-hieco.net> hwmon: (k10temp) Stop matching Hygon devices David Heidelberg <david(a)ixit.cz> mfd: wcd934x: Fix NULL pointer dereference on IRQ probe deferral David Heidelberg <david(a)ixit.cz> mfd: wcd934x: set DMA mask on parent to silence "DMA mask not set" David Heidelberg <david(a)ixit.cz> mfd: Fix MAX77705 dependency on regmap Hongyan Xu <getshell(a)seu.edu.cn> mfd: da903x: Cancel IRQ work during teardown Casey Connolly <casey.connolly(a)linaro.org> drm/panel: ebbg-ft8719: Set prepare_prev_first Gabor Juhos <j4g8y7(a)gmail.com> clk: qcom: gcc-ipq5018: mark 'gpll0_main' clock as critical Francesco Dolcini <francesco.dolcini(a)toradex.com> arm64: dts: freescale: imx8mp-verdin-yavia: fix external GPIOs Francesco Dolcini <francesco.dolcini(a)toradex.com> arm64: dts: freescale: imx8mp-toradex-smarc: fix SMARC_SLEEP# gpio-line-names typo Francesco Dolcini <francesco.dolcini(a)toradex.com> arm64: dts: freescale: imx8mp-verdin-ivy: fix DIGI_1/DIGI_2 gpio-line-names Francesco Dolcini <francesco.dolcini(a)toradex.com> arm64: dts: freescale: imx8mm-verdin-ivy: fix DIGI_1/DIGI_2 gpio-line-names Diego Fernando Mancera Gomez <diegomancera.dev(a)gmail.com> memory: stm32_omm: fix child clock leak on set_amcr() error path Myeonghun Pak <mhun512(a)gmail.com> ASoC: fsl_xcvr: free IRQ before canceling reset work Guangshuo Li <lgs201920130244(a)gmail.com> media: atmel-isi: release unregistered video device on remove Lucas Sinn <lucas.sinn(a)wolfvision.net> media: synopsys: hdmirx: fetch colordepth before calculating pixelclock Wentao Liang <vulab(a)iscas.ac.cn> media: vpif_display: Fix i2c adapter reference leak in vpif_probe() Wentao Liang <vulab(a)iscas.ac.cn> media: vpif_capture: Fix i2c adapter reference leak in vpif_probe() Wentao Liang <vulab(a)iscas.ac.cn> media: au0828: Fix media device leak in au0828_usb_probe() Runyu Xiao <runyu.xiao(a)seu.edu.cn> media: adv7180: Initialize mutex before ancillary clients Myeonghun Pak <mhun512(a)gmail.com> media: tw68: balance PCI enable on cleanup Myeonghun Pak <mhun512(a)gmail.com> media: cx18: Disable PCI device on probe failure Myeonghun Pak <mhun512(a)gmail.com> media: go7007: unregister the I2C adapter on USB probe failure Myeonghun Pak <mhun512(a)gmail.com> media: marvell: manage the MMP camera clock provider Rohinthan P <rokinthanp03(a)gmail.com> media: v4l2-ctrls: do nothing if controls[0] == NULL in cluster functions Pengpeng Hou <hppiscas(a)163.com> media: cec: extron: clear response tail before dispatch Karl Mehltretter <kmehltretter(a)gmail.com> crypto: qat - zero the VF migration state buffer on save Weili Qian <qianweili(a)huawei.com> crypto: hisilicon/hpre - fix GFP flags for dma_alloc_coherent Weili Qian <qianweili(a)huawei.com> crypto: hisilicon/hpre - fix ECDH destination DMA mapping Weili Qian <qianweili(a)huawei.com> crypto: hisilicon/hpre - return -EOVERFLOW for small ECDH output buffer Weili Qian <qianweili(a)huawei.com> crypto: hisilicon/hpre - fix pointer dereference before length check Mohamad Raizudeen <raizudeen.kerneldev(a)gmail.com> crypto: amlogic - Fix IRQ handler return value and fallthrough logic Suman Kumar Chakraborty <suman.kumar.chakraborty(a)intel.com> crypto: qat - fix error source for QAT GEN6 transmit interface faults Yuchao Zhang <ndaugoing(a)gmail.com> md: validate bblog_size when loading v1.x badblocks metadata Wentao Liang <vulab(a)iscas.ac.cn> EDAC/i10nm: Fix mdev reference leak in i10nm_get_ddr_munits() Aldo Ariel Panzardo <qwe.aldo(a)gmail.com> nilfs2: fix checkpoint root lifetime on sysfs errors Wentao Guan <guanwentao(a)uniontech.com> cpufreq/amd-pstate: Skip auto_sel write when it already matches the mode Wentao Liang <vulab(a)iscas.ac.cn> drm/mali-dp: Fix runtime PM leak in malidp_crtc_atomic_enable() Judith Mendez <jm(a)ti.com> arm64: dts: ti: k3-am62x-phyboard-lyra: Set SD clock pin as OUTPUT Judith Mendez <jm(a)ti.com> arm64: dts: ti: k3-am62-phycore-som: Set eMMC clock pin as OUTPUT Judith Mendez <jm(a)ti.com> arm64: dts: ti: k3-am625-sk-common: Set eMMC clock pin as OUTPUT Judith Mendez <jm(a)ti.com> arm64: dts: ti: k3-am62x-sk-common: Set SD clock pin as OUTPUT Judith Mendez <jm(a)ti.com> arm64: dts: ti: k3-am625-beagleplay: Set MMC clock pins as OUTPUT Judith Mendez <jm(a)ti.com> arm64: dts: ti: k3-am62-pocketbeagle2: Set SD clock pin as OUTPUT Judith Mendez <jm(a)ti.com> arm64: dts: ti: k3-am62-lp-sk: Set eMMC clock pins as OUTPUT Judith Mendez <jm(a)ti.com> arm64: dts: ti: k3-am62a-phycore-som: Set eMMC clock pin as OUTPUT Judith Mendez <jm(a)ti.com> arm64: dts: ti: k3-am62a7-sk: Set SD clock pin as OUTPUT Judith Mendez <jm(a)ti.com> arm64: dts: ti: k3-am62a7-sk: Set eMMC clock pin as OUTPUT Judith Mendez <jm(a)ti.com> arm64: dts: ti: k3-am62a: Fix MMC0_CLK register address Wentao Liang <vulab(a)iscas.ac.cn> ASoC: ti: davinci-mcasp: Fix runtime PM imbalance in __davinci_mcasp_set_clkdiv() Sean Young <sean(a)mess.org> media: meson-ir-tx: Prevent divide by zero in meson_irtx_prepare_pulse() Sean Young <sean(a)mess.org> media: ir_toy: Validate the maximum tx carrier Sean Young <sean(a)mess.org> media: serial_ir: Fix race condition where timer can be re-armed Sean Young <sean(a)mess.org> media: ene_ir: Ensure teardown is done in the correct order Myeonghun Pak <mhun512(a)gmail.com> leds: ktd2692: Pass context to regulator cleanup Cong Nguyen <congnt264(a)gmail.com> staging: media: imx: csc-scaler: fix ipu_image_convert_run leak on queue error Hui Peng <benquike(a)gmail.com> seccomp: restore knotif->state when SECCOMP_ADDFD_FLAG_SEND is interrupted Oleg Nesterov <oleg(a)redhat.com> signalfd: don't dequeue the forced fatal signals Adrian Hunter <adrian.hunter(a)intel.com> i3c: mipi-i3c-hci: Bounce short reads irrespective of the IOMMU Adrian Hunter <adrian.hunter(a)intel.com> i3c: master: Fix out-of-bounds read in DMA bounce buffer setup Runyu Xiao <runyu.xiao(a)seu.edu.cn> PCI: pciehp: Make 'pciehp_poll_mode' parameter read-only Hui Peng <benquike(a)gmail.com> ata: libata-scsi: abort multi-sector pass-through commands when multi_count is 0 Tsz Shan Chan <tsz.chan.dev(a)gmail.com> iio: light: apds9306: fix default sampling frequency definition Jean-Baptiste Maneyrol <jean-baptiste.maneyrol(a)tdk.com> iio: imu: inv_icm42600: force accel odr change when switching power mode Shehryar Ahmad <shehryar.amd(a)gmail.com> iio: accel: adis16201: fix channel order for buffer mode Wentao Liang <vulab(a)iscas.ac.cn> regulator: rt6190: Fix runtime PM imbalance in rt6190_out_enable() Karl Mehltretter <kmehltretter(a)gmail.com> fpga: Fix of_fpga_mgr_get() reference in fpga_mgr_lock() docs Wentao Liang <vulab(a)iscas.ac.cn> ASoC: codecs: wm8994: Fix runtime PM leak in wm8994_mic_detect() Guangshuo Li <lgs201920130244(a)gmail.com> crypto: omap-des - fix crypto engine cleanup Thorsten Blum <blum(a)kernel.org> crypto: zynqmp-sha - fix NULL pointer dereference in init_tfm Maciej W. Rozycki <macro(a)orcam.me.uk> PCI: Skip Target Speed quirk on clamped ports with no link Wentao Liang <vulab(a)iscas.ac.cn> regulator: core: Fix rdev reference leak in regulator_resolve_supply() Wentao Liang <vulab(a)iscas.ac.cn> regulator: core: Fix c_rdev reference leak in regulator_resolve_coupling() Jiaming Zhang <r772577952(a)gmail.com> nilfs2: force clear dirty state when restoring from the shadow map Shengming Hu <hu.shengming(a)zte.com.cn> cpufreq: conservative: Restrict deferred downscaling to low load Johan Alvarado <contact(a)c127.dev> spi: spi-qpic-snand: publish the ECC context to snandc->qspi Thomas Zimmermann <tzimmermann(a)suse.de> drm/panic: Test address from kmap op for NULL Thomas Zimmermann <tzimmermann(a)suse.de> drm/panic: Do not use un-escaped URL as format string Martin Wilck <martin.wilck(a)suse.com> md/raid5: validate payload size before calculating payload_len Cao Guanghui <caoguanghui(a)kylinos.cn> md/raid5: fix NULL pointer dereference in raid5_free_percpu Cao Guanghui <caoguanghui(a)kylinos.cn> md/raid5: track disks array size to fix extra_page leak on error paths Guangshuo Li <lgs201920130244(a)gmail.com> iio: adc: at91-sama5d2: disable autosuspend on remove Guangshuo Li <lgs201920130244(a)gmail.com> iio: accel: mma9553: disable autosuspend on remove Guangshuo Li <lgs201920130244(a)gmail.com> iio: accel: mma9551: disable autosuspend on remove Guangshuo Li <lgs201920130244(a)gmail.com> iio: accel: kxcjk-1013: Disable autosuspend on remove Wentao Liang <vulab(a)iscas.ac.cn> ASoC: arizona-jack: Fix runtime PM imbalance in arizona_start_hpdet_acc_id() Wentao Liang <vulab(a)iscas.ac.cn> ASoC: wm8994: Fix runtime PM imbalance in wm8994_component_probe() Liu Chao <liuc63(a)xiaopeng.com> usb: fotg210: validate endpoint index in ep0 handlers Karl Mehltretter <kmehltretter(a)gmail.com> crypto: atmel-tdes - sync output bounce buffer before DMA Yousef Alhouseen <alhouseenyousef(a)gmail.com> ntfs3: bound index head insertions by buffer capacity Muhammad Bilal <meatuni001(a)gmail.com> platform/x86: hp-bioscfg: fix slab-out-of-bounds write in hp_convert_hexstr_to_str() Guangshuo Li <lgs201920130244(a)gmail.com> media: i2c: ov2735: fix power cleanup on remove Guangshuo Li <lgs201920130244(a)gmail.com> media: i2c: alvium-csi2: balance runtime PM usage count on remove Niklas Cassel <cassel(a)kernel.org> ata: libata: Do not leave ata_host_stop() registered when activation fails Niklas Cassel <cassel(a)kernel.org> ata: libahci: Free the IRQs when activating a multi-IRQ host fails Niklas Cassel <cassel(a)kernel.org> ata: ahci_st: Assert the power down reset in the probe() error path Niklas Cassel <cassel(a)kernel.org> ata: ahci_st: Do not ignore errors when getting the reset controls Chao Yu <chao(a)kernel.org> f2fs: compress: fix to handle race between truncate and writeback Jiucheng Xu <jiucheng.xu(a)amlogic.com> f2fs: force out-place update for all writes on compressed file Matthew Sakai <msakai(a)redhat.com> dm vdo indexer: validate record page numbers better Matthew Sakai <msakai(a)redhat.com> dm vdo indexer: prevent delta list overflow on load Kyle Zeng <kylebot(a)openai.com> affs: validate blocks before freeing them Bradley Morgan <include(a)grrlz.net> PM: CPU: Restore synchronize_rcu() to cpu_pm_unregister_notifier() Runyu Xiao <runyu.xiao(a)seu.edu.cn> crypto: ccp - Initialize DBC ioctl mutex before registering device Karl Mehltretter <kmehltretter(a)gmail.com> lib/842: require a complete history block for repeat templates Karl Mehltretter <kmehltretter(a)gmail.com> lib/842: reject output overflows from index and short data Karl Mehltretter <kmehltretter(a)gmail.com> crypto: atmel-aes - fix AADLENR for standalone GHASH Karl Mehltretter <kmehltretter(a)gmail.com> crypto: atmel-tdes - zero-initialize device state Junrui Luo <moonafterrain(a)outlook.com> media: vicodec: zero-initialize stateful decoder heap buffers Fan Wu <fanwu01(a)zju.edu.cn> media: vivid: cancel svid ctrl work on release Juan Perdomo <jcperdomo100(a)gmail.com> media: cx231xx: preserve I2C transfer length Maxim Skokov <skokovmaksimevg(a)gmail.com> media: vivid: round the height down to the vertical subsampling factor Eric Kim <seohyun.kim(a)outlook.kr> sched/fair: Reset NUMA fault locality after scan period update Jean-Baptiste Maneyrol <jean-baptiste.maneyrol(a)tdk.com> iio: imu: inv_icm42600: fix odr change not caught in certain cases Fan Wu <fanwu01(a)zju.edu.cn> power: supply: bq27xxx: Ensure poll work is cancelled on remove Shengzhuo Wei <me(a)cherr.cc> power: supply: bq27xxx: synchronize work cancellation on suspend Robin Snyders <robin(a)snyders.xyz> power: supply: qcom_smbx: notify battery overvoltage recovery Robin Snyders <robin(a)snyders.xyz> power: supply: qcom_smbx: validate battery float voltage Robin Snyders <robin(a)snyders.xyz> power: supply: qcom_smbx: fix float voltage selector Robin Snyders <robin(a)snyders.xyz> power: supply: qcom_smbx: test battery health status bits Robin Snyders <robin(a)snyders.xyz> power: supply: qcom_smbx: include base when petting watchdog Runyu Xiao <runyu.xiao(a)seu.edu.cn> hte: tegra194-test: shut down timer before GPIO release Karl Mehltretter <kmehltretter(a)gmail.com> ACPI: pfr_update: zero-initialize capability query result Runyu Xiao <runyu.xiao(a)seu.edu.cn> dmaengine: altera-msgdma: initialize state before requesting IRQ Damon Ding <damon.ding(a)rock-chips.com> drm/bridge: analogix_dp: Restore mandatory samsung DP DT properties Fan Wu <fanwu01(a)zju.edu.cn> media: nuvoton: npcm-video: quiesce VCD IRQ before teardown Alexander Shiyan <eagle.alexander923(a)gmail.com> media: synopsys: hdmirx: use request_any_context_irq() for 5V detection IRQ Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> media: stv0900: bound DiSEqC reply length to msg[] size Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> media: stv090x: bound DiSEqC reply length to msg[] size Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> media: adv7604: avoid negative array index in log_status when cp_read fails James Hilliard <james.hilliard1(a)gmail.com> mtd: rawnand: sunxi: reject ECC maximization on small pages Myeonghun Pak <mhun512(a)gmail.com> media: stm32: csi: unregister async notifier on cleanup Alain Volmat <alain.volmat(a)foss.st.com> media: stm32: csi: correct remote pad retrieval Balakrishnan Sambath <balakrishnan.s(a)microchip.com> media: microchip-isc: don't sleep in the clk .is_enabled callback Balakrishnan Sambath <balakrishnan.s(a)microchip.com> media: microchip-isc: fix PM runtime leak in AWB work handler Balakrishnan Sambath <balakrishnan.s(a)microchip.com> media: microchip-isc: do not touch WB registers when not streaming Balakrishnan Sambath <balakrishnan.s(a)microchip.com> media: microchip-isc: disable histogram and flush AWB work on teardown Balakrishnan Sambath <balakrishnan.s(a)microchip.com> media: microchip-isc: synchronize the IRQ before disabling clocks on stop Balakrishnan Sambath <balakrishnan.s(a)microchip.com> media: microchip-isc: fix awb_mutex and lock lifecycle Wang Yan <wangyan01(a)kylinos.cn> perf powerpc-vpadtl: Fix off-by-one in auxtrace_info minimum size check Srinivas Kandagatla <srinivas.kandagatla(a)oss.qualcomm.com> ASoC: codecs: lpass-wsa-macro: use v2.5 Compander1 addresses on v2.5+ Xu Rao <raoxu(a)uniontech.com> media: m2m-deinterlace: fix default capture field Punnay Sharma <punnaysharma805(a)gmail.com> staging: media: av7110: fix sp8870 initialization failure state Punnay Sharma <punnaysharma805(a)gmail.com> staging: media: av7110: fix corrupted BER reporting in sp8870 Julian Braha <julianbraha(a)gmail.com> media: marvell-cam: fix unmet dependency for VIDEO_MMP_CAMERA Jeffin Philip <jeffinphilip14(a)gmail.com> media: vidtv: fix uaf in vidtv_bridge_on_new_pkts_avail Piyush Patle <piyushpatle228(a)gmail.com> media: vidtv: fix frontend reference leak on unbind Junrui Luo <moonafterrain(a)outlook.com> media: vicodec: make encoder CAPTURE dimensions read-only Junrui Luo <moonafterrain(a)outlook.com> media: vicodec: fix out-of-bounds write on under-rounded coded dimensions Younho Choi <gdool88(a)mju.ac.kr> media: vim2m: keep transaction buffer count stable while streaming Runyu Xiao <runyu.xiao(a)seu.edu.cn> media: saa7146: Initialize interrupt lock before requesting IRQ Shengzhuo Wei <me(a)cherr.cc> media: go7007: bound EZ-USB I2C transfers to the usb_buf size Linkai Gong <gonglinkai(a)kylinos.cn> media: i2c: tc358743: add missing color-space strings Ruoyu Wang <ruoyuw560(a)gmail.com> media: au0828: Free URBs when starting DVB streaming fails Takashi Sakamoto <o-takashi(a)sakamocchi.jp> firewire: core: fix source bus ID detection for AT context in big-endian systems Andi Shyti <andi.shyti(a)kernel.org> media: cx231xx: Fix cleanup path on failure Fan Wu <fanwu01(a)zju.edu.cn> media: cx231xx-audio: drain wq_trigger before audio fini Andrea Pesaresi <andreapesaresi82(a)gmail.com> arm64: dts: mediatek: mt7986: correct timer frequency Baolin Liu <liubaolin(a)kylinos.cn> isofs: fix Rock Ridge CE extent validation on multisession media Thorsten Blum <blum(a)kernel.org> thermal: intel: int340x: Fix temperature selection around 0 C Thorsten Blum <thorsten.blum(a)linux.dev> thermal: intel: powerclamp: Reject invalid window_size values Francesco Dolcini <francesco.dolcini(a)toradex.com> arm64: dts: ti: k3-am62-verdin: Set MMC clock pins as OUTPUT Amir Goldstein <amir73il(a)gmail.com> fs: make sure to call fsnotify_inoderemove() only once when inode is dead Karl Mehltretter <kmehltretter(a)gmail.com> fs_pin: publish pins with RCU list helpers Miquel Raynal <miquel.raynal(a)bootlin.com> mtd: spi-nor: Unprepare legacy controllers upon RWW wait interruption HyeongJun An <sammiee5311(a)gmail.com> mtd: spi-nor: sfdp: check the length of the SCCR map HyeongJun An <sammiee5311(a)gmail.com> mtd: spi-nor: sfdp: check the length of the xSPI Profile 1.0 table Serin Yeh <serin.yeh(a)intel.com> media: i2c: ov8856: fix debug message to report actual CSI-2 lane count Serin Yeh <serin.yeh(a)intel.com> media: i2c: ov8856 : remove ACPI node bypass mechanism Abdun Nihaal <nihaal(a)cse.iitm.ac.in> wifi: ath11k: Fix possible memory leak in ath11k_dp_srng_setup() Runyu Xiao <runyu.xiao(a)seu.edu.cn> hte: tegra194: Initialize slice locks before registering chip Yuan Chen <chenyuan(a)kylinos.cn> bpf: Fix queue/stack map u32 index overflow Yo'av Moshe <linux(a)yoavmoshe.com> ARM: imx: Fix suspend/resume crash with Clang CFI hanzhijian <hanzhijian1991(a)gmail.com> clk: mstar: msc313-mpll: fix off-by-one in clock array allocation Sakari Ailus <sakari.ailus(a)linux.intel.com> platform/x86: int3472: Fix uninitialised variable warning Laxman Acharya Padhya <acharyalaxman8848(a)gmail.com> wifi: rtw89: cap firmware section_num before parsing Yi Cong <yicong(a)kylinos.cn> wifi: rtw89: 8851b: fix swapped DPK channel/bandwidth backup fields イムティヤズ <reza1234khan1234(a)gmail.com> wifi: rtw88: fix out-of-bounds CAM write when key table is full Lad Prabhakar <prabhakar.mahadev-lad.rj(a)bp.renesas.com> memory: renesas-rpc-if: Mark XSPI_CDD1BUF0 as volatile Justin Chen <justin.chen(a)broadcom.com> memory: brcmstb_dpfe: Bounds check DCPU-supplied MSG_ARG_COUNT Justin Chen <justin.chen(a)broadcom.com> memory: brcmstb_dpfe: Fix out-of-bounds access due to DCPU offset Sam Price <thesamprice(a)gmail.com> microblaze: preserve the MSR carry flags across signals Ramin Moussavi <ramin.moussavi(a)yacoub.de> microblaze: restore the ABI argument home area below pt_regs (PTO) Ramin Moussavi <ramin.moussavi(a)yacoub.de> microblaze: don't clobber r3/r4 restored by rt_sigreturn Ramin Moussavi <ramin.moussavi(a)yacoub.de> microblaze: reserve the ABI argument-home area in the signal frame Viken Dadhaniya <viken.dadhaniya(a)oss.qualcomm.com> soc: qcom: geni-se: Fix write to read-only firmware buffer Viken Dadhaniya <viken.dadhaniya(a)oss.qualcomm.com> soc: qcom: geni-se: Fix fw_end computed before round-up; propagate size to caller Viken Dadhaniya <viken.dadhaniya(a)oss.qualcomm.com> soc: qcom: geni-se: Widen fw_size to u32 to prevent wrap-around Viken Dadhaniya <viken.dadhaniya(a)oss.qualcomm.com> soc: qcom: geni-se: Fix endian conversion for serial_protocol comparison HyeongJun An <sammiee5311(a)gmail.com> remoteproc: elf_loader: Bound the section header table Daehyeon Ko <4ncienth(a)gmail.com> ipc/mqueue: release notification resources during inode eviction Daehyeon Ko <4ncienth(a)gmail.com> aio: prevent eventfd/epoll recursion on poll Jan Kara <jack(a)suse.cz> udf: Make sure there's enough space for LVID implementation use field Karl Mehltretter <kmehltretter(a)gmail.com> microblaze: Fix MB_MANAGER build with older binutils Fan Wu <fanwu01(a)zju.edu.cn> media: imx-jpeg: finish the job on device_run() error paths Sean Young <sean(a)mess.org> media: ir-hix5hd2: Ensure rdev is setup before interrupts are enabled Sean Young <sean(a)mess.org> media: meson-ir-tx: Ensure probe error is propagated Sean Young <sean(a)mess.org> media: meson-ir-tx: Ensure rc_free_device() is called on unbind Sean Young <sean(a)mess.org> media: meson-ir-tx: Ensure clock is disabled on unbind Sean Young <sean(a)mess.org> media: sunxi-cir: Ensure no more interrupts can occur before free Sean Young <sean(a)mess.org> media: redrat3: Ensure all urbs are suspended Sean Young <sean(a)mess.org> media: redrat3: Ensure we don't read beyond the end of the packet Sean Young <sean(a)mess.org> media: streamzap: Add missing rc_unregister_device() Daniel Schwierzeck <daniel.schwierzeck(a)gmail.com> cpufreq: airoha: fix probe failure with correct error check Jakub Szczudlo <jakubszczudlo40(a)gmail.com> iio: adc: ti-ads1100: Fix incorrect reading when datarate changed in single mode Harry Wentland <harry.wentland(a)amd.com> drm/amd/display: Force GAMCOR for subsampled surfaces with PQ/Gamma22/HLG YuBiao Wang <YuBiao.Wang(a)amd.com> drm/amdgpu: recompute the dw estimate after allocating a new VM update job Marek Czernohous <marek(a)czernohous.de> drm/nouveau: don't dereference outp before checking it in nouveau_dp_irq Marek Czernohous <marek(a)czernohous.de> drm/nouveau: cancel the DP IRQ work before freeing the connector Marek Czernohous <marek(a)czernohous.de> drm/nouveau: disable the fence uevent work instead of just cancelling it Marek Czernohous <marek(a)czernohous.de> drm/nouveau/pci: use config-space MSI rearm on MCP79/MCP7A (NVAC) Zhenhao Wan <whi4ed0g(a)gmail.com> drm/nouveau/svm: drain fault handler before freeing svmm Zhenhao Wan <whi4ed0g(a)gmail.com> drm/nouveau: reject zero-size notifier object allocation Miguel Ojeda <ojeda(a)kernel.org> rust: bitmap: fix intra-doc link Vernon Yang <yanglincheng(a)kylinos.cn> mm: khugepaged: fix swap entry value to folio_pfn() Sami Tolvanen <samitolvanen(a)google.com> rust: dma: declare cfi_encoding for dma_data_direction Sami Tolvanen <samitolvanen(a)google.com> rust: hrtimer: declare cfi_encoding for hrtimer_restart Sami Tolvanen <samitolvanen(a)google.com> rust: irq: declare cfi_encoding for irqreturn Jérémy Jean <Jeremy.Jean(a)oss.cyber.gouv.fr> nvmet-auth: serialize access to DH-HMAC-CHAP state to fix UAF Marco Crivellari <marco.crivellari(a)suse.com> nvmet: replace use of system_wq with system_percpu_wq Danish Khateeb <danishkhateeb03(a)gmail.com> pps: generators: don't use the driver's info after unregister Weiming Shi <bestswngs(a)gmail.com> virtio_net: atomically disable rx mode work Ruide Cao <caoruide123(a)gmail.com> mptcp: hold MP_JOIN msk ref when cloning reqsk Chia-Yu Chang <chia-yu.chang(a)nokia-bell-labs.com> tcp: accecn: unset ECT if receive or send ACE=0 in AccECN negotiaion Kuniyuki Iwashima <kuniyu(a)google.com> tcp: Remove timeout arg from reqsk_timeout(). Tianchu Chen <flynnnchen(a)tencent.com> staging: rtl8723bs: fix protected RX frame validation in decrypt path Khasar Munkh-Erdene <02khasar(a)gmail.com> staging: rtl8723bs: fix spacing around operators in rtw_recv.c Zhang Yi <yi.zhang(a)huawei.com> mm/truncate: look up the end-edge straddler by index Sean Christopherson <seanjc(a)google.com> KVM: guest_memfd: Gracefully handle xarray errors when binding a memslot Honglei Huang <honghuan(a)amd.com> drm/amdgpu: drop retry loop in amdgpu_hmm_range_get_pages Hyunwoo Kim <imv4bel(a)gmail.com> inet: reject unhashed sockets during established lookups Mike Rapoport (Microsoft) <rppt(a)kernel.org> x86/mm/pat: Use pr_warn() for early W^X warnings Sean Christopherson <seanjc(a)google.com> KVM: VMX: Formally define KVM's "0xdead" exit reason used for failed VM-Enter ------------- Diffstat: .../bindings/clock/nuvoton,ma35d1-clk.yaml | 16 +- Documentation/hwmon/k10temp.rst | 8 +- Documentation/networking/ip-sysctl.rst | 5 +- Documentation/userspace-api/check_exec.rst | 4 + Documentation/virt/hyperv/vmbus.rst | 17 +- Makefile | 4 +- arch/alpha/include/asm/mmu_context.h | 35 ++- arch/alpha/include/asm/sfp-machine.h | 4 + arch/alpha/include/asm/switch_to.h | 1 - arch/alpha/include/asm/tlbflush.h | 3 +- arch/alpha/kernel/smp.c | 67 ++-- arch/alpha/mm/fault.c | 23 +- arch/alpha/mm/tlbflush.c | 18 +- arch/arm/include/asm/linkage.h | 29 ++ arch/arm/include/asm/smp.h | 2 +- arch/arm/kernel/cacheinfo.c | 51 +-- arch/arm/kernel/head-nommu.S | 1 + arch/arm/kernel/head.S | 1 + arch/arm/kernel/smp.c | 15 +- arch/arm/kernel/topology.c | 13 + arch/arm/mach-imx/pm-imx6.c | 26 +- arch/arm/mach-imx/suspend-imx6.S | 6 +- arch/arm/mm/alignment.c | 51 ++- .../boot/dts/freescale/imx8mm-verdin-ivy.dtsi | 4 +- .../boot/dts/freescale/imx8mp-toradex-smarc.dtsi | 2 +- .../boot/dts/freescale/imx8mp-verdin-ivy.dtsi | 4 +- .../boot/dts/freescale/imx8mp-verdin-yavia.dtsi | 7 +- arch/arm64/boot/dts/mediatek/mt7986a.dtsi | 1 + arch/arm64/boot/dts/qcom/ipq9574.dtsi | 2 +- .../dts/qcom/sdm845-xiaomi-beryllium-common.dtsi | 6 + arch/arm64/boot/dts/qcom/sdm845-xiaomi-polaris.dts | 6 + arch/arm64/boot/dts/ti/k3-am62-lp-sk.dts | 2 +- arch/arm64/boot/dts/ti/k3-am62-phycore-som.dtsi | 2 +- arch/arm64/boot/dts/ti/k3-am62-pocketbeagle2.dts | 2 +- arch/arm64/boot/dts/ti/k3-am62-verdin.dtsi | 6 +- arch/arm64/boot/dts/ti/k3-am625-beagleplay.dts | 6 +- arch/arm64/boot/dts/ti/k3-am625-sk-common.dtsi | 2 +- arch/arm64/boot/dts/ti/k3-am62a-phycore-som.dtsi | 2 +- arch/arm64/boot/dts/ti/k3-am62a7-sk.dts | 5 +- arch/arm64/boot/dts/ti/k3-am62x-phyboard-lyra.dtsi | 2 +- arch/arm64/boot/dts/ti/k3-am62x-sk-common.dtsi | 2 +- arch/arm64/include/asm/kvm_arm.h | 2 +- arch/arm64/include/asm/kvm_host.h | 7 +- arch/arm64/include/asm/pgtable.h | 3 + arch/arm64/kernel/efi.c | 8 +- arch/arm64/kvm/arm.c | 49 +-- arch/arm64/kvm/hyp/exception.c | 5 +- arch/arm64/kvm/hyp/include/hyp/adjust_pc.h | 28 ++ arch/arm64/kvm/hyp/include/nvhe/pkvm.h | 2 + arch/arm64/kvm/hyp/nvhe/pkvm.c | 37 +++ arch/arm64/kvm/hyp/nvhe/sys_regs.c | 3 + arch/arm64/kvm/vgic/vgic-mmio-v3.c | 33 +- arch/arm64/mm/contpte.c | 4 +- arch/loongarch/include/asm/barrier.h | 3 - arch/loongarch/include/asm/hw_breakpoint.h | 4 +- arch/loongarch/include/asm/loongarch.h | 4 +- arch/loongarch/include/asm/numa.h | 2 +- arch/loongarch/kernel/cpu-probe.c | 2 +- arch/loongarch/kernel/hw_breakpoint.c | 27 +- arch/loongarch/kernel/irq.c | 3 +- arch/loongarch/kernel/traps.c | 13 +- arch/loongarch/pci/pci.c | 3 +- arch/microblaze/include/asm/entry.h | 13 + arch/microblaze/include/asm/processor.h | 2 +- arch/microblaze/kernel/entry.S | 348 +++++++++++---------- arch/microblaze/kernel/hw_exception_handler.S | 5 + arch/microblaze/kernel/process.c | 5 +- arch/microblaze/kernel/signal.c | 26 ++ arch/mips/mm/mmap.c | 6 +- arch/mips/mm/tlb-r4k.c | 21 +- arch/powerpc/platforms/pseries/plpks.c | 27 +- arch/powerpc/platforms/pseries/plpks_sed_ops.c | 12 +- arch/riscv/include/asm/pgtable.h | 9 +- arch/riscv/kvm/vcpu_sbi_replace.c | 12 +- arch/x86/include/asm/vmx.h | 8 + arch/x86/kernel/cpu/bugs.c | 2 +- arch/x86/kvm/vmx/vmx.c | 4 +- arch/x86/mm/pat/set_memory.c | 15 + block/blk-iocost.c | 2 + block/blk-mq.c | 2 + crypto/algif_skcipher.c | 8 +- crypto/ecc.c | 33 +- crypto/testmgr.c | 11 +- crypto/testmgr.h | 327 ++++++++++++++++++- drivers/accessibility/speakup/selection.c | 6 + drivers/acpi/pfr_update.c | 2 +- drivers/ata/ahci_st.c | 78 ++--- drivers/ata/libahci.c | 28 +- drivers/ata/libahci_platform.c | 4 + drivers/ata/libata-core.c | 75 ++++- drivers/ata/libata-scsi.c | 5 + drivers/ata/libata-sff.c | 5 + drivers/ata/sata_fsl.c | 6 +- drivers/ata/sata_qstor.c | 8 +- drivers/block/amiflop.c | 71 ++++- drivers/block/aoe/aoenet.c | 14 +- drivers/block/floppy.c | 8 +- drivers/block/loop.c | 6 +- drivers/block/ublk_drv.c | 27 +- drivers/block/xen-blkfront.c | 4 +- drivers/bluetooth/btusb.c | 2 + drivers/char/hw_random/amd-rng.c | 2 +- drivers/char/hw_random/ba431-rng.c | 2 +- drivers/char/hw_random/core.c | 1 + drivers/char/tpm/tpm-dev-common.c | 3 + drivers/char/tpm/tpm_nsc.c | 8 +- drivers/clk/imx/clk.c | 15 +- drivers/clk/mstar/clk-msc313-mpll.c | 2 +- drivers/clk/mvebu/ap-cpu-clk.c | 4 +- drivers/clk/qcom/gcc-ipq5018.c | 10 + drivers/clk/qcom/gcc-ipq5332.c | 1 + drivers/clk/qcom/ipq-cmn-pll.c | 3 +- drivers/clk/starfive/clk-starfive-jh7110-isp.c | 2 +- drivers/clocksource/timer-digicolor.c | 2 + drivers/clocksource/timer-fttmr010.c | 2 + drivers/cpufreq/Kconfig | 1 + drivers/cpufreq/airoha-cpufreq.c | 2 +- drivers/cpufreq/amd-pstate.c | 6 +- drivers/cpufreq/cpufreq_conservative.c | 8 +- drivers/cpufreq/cpufreq_governor.c | 29 +- drivers/cpufreq/cpufreq_governor.h | 2 + drivers/cpufreq/cpufreq_stats.c | 4 + drivers/cpufreq/intel_pstate.c | 2 + drivers/cpufreq/loongson3_cpufreq.c | 73 +++-- drivers/crypto/amlogic/amlogic-gxl-core.c | 7 +- drivers/crypto/atmel-aes.c | 2 +- drivers/crypto/atmel-tdes.c | 6 +- drivers/crypto/caam/caampkc.c | 6 + drivers/crypto/ccp/dbc.c | 4 +- drivers/crypto/hisilicon/hpre/hpre_crypto.c | 20 +- drivers/crypto/intel/qat/qat_common/adf_dev_mgr.c | 10 +- .../crypto/intel/qat/qat_common/adf_gen4_vf_mig.c | 5 + drivers/crypto/intel/qat/qat_common/adf_gen6_ras.c | 20 +- drivers/crypto/intel/qat/qat_common/adf_gen6_ras.h | 24 +- drivers/crypto/intel/qat/qat_common/adf_vf_isr.c | 2 - drivers/crypto/nx/nx-842.c | 2 + drivers/crypto/omap-des.c | 2 + drivers/crypto/xilinx/zynqmp-sha.c | 2 +- drivers/cxl/acpi.c | 20 +- drivers/cxl/core/pci.c | 50 +-- drivers/cxl/core/port.c | 3 + drivers/dax/super.c | 2 +- drivers/dma/altera-msgdma.c | 10 +- drivers/edac/i10nm_base.c | 1 + drivers/firewire/ohci-serdes-test.c | 4 +- drivers/firewire/ohci.h | 2 +- drivers/firmware/efi/libstub/Makefile | 2 +- drivers/firmware/efi/libstub/efi-stub.c | 8 + drivers/fpga/fpga-mgr.c | 2 +- drivers/gpio/gpio-davinci.c | 6 +- drivers/gpio/gpio-pca953x.c | 14 +- drivers/gpio/gpiolib-cdev.c | 5 - drivers/gpio/gpiolib.c | 12 +- drivers/gpu/drm/amd/amdgpu/amdgpu.h | 11 +- drivers/gpu/drm/amd/amdgpu/amdgpu_amdkfd.h | 19 ++ drivers/gpu/drm/amd/amdgpu/amdgpu_amdkfd_gpuvm.c | 105 ++++--- drivers/gpu/drm/amd/amdgpu/amdgpu_cs.c | 6 + drivers/gpu/drm/amd/amdgpu/amdgpu_device.c | 12 +- drivers/gpu/drm/amd/amdgpu/amdgpu_drv.c | 14 - drivers/gpu/drm/amd/amdgpu/amdgpu_hmm.c | 9 +- drivers/gpu/drm/amd/amdgpu/amdgpu_object.c | 33 ++ drivers/gpu/drm/amd/amdgpu/amdgpu_ttm.c | 3 +- drivers/gpu/drm/amd/amdgpu/amdgpu_vm.c | 5 +- drivers/gpu/drm/amd/amdgpu/amdgpu_vm_pt.c | 2 +- drivers/gpu/drm/amd/amdgpu/amdgpu_vm_sdma.c | 5 + drivers/gpu/drm/amd/amdgpu/cik.c | 10 + drivers/gpu/drm/amd/amdgpu/gmc_v9_0.c | 18 +- drivers/gpu/drm/amd/amdgpu/si.c | 10 + drivers/gpu/drm/amd/amdgpu/vi.c | 10 + drivers/gpu/drm/amd/amdkfd/kfd_chardev.c | 48 +-- drivers/gpu/drm/amd/amdkfd/kfd_crat.c | 35 ++- drivers/gpu/drm/amd/amdkfd/kfd_doorbell.c | 23 +- drivers/gpu/drm/amd/amdkfd/kfd_priv.h | 4 + drivers/gpu/drm/amd/amdkfd/kfd_process.c | 4 +- drivers/gpu/drm/amd/amdkfd/kfd_queue.c | 23 +- drivers/gpu/drm/amd/amdkfd/kfd_svm.c | 21 +- drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm.c | 11 +- .../drm/amd/display/amdgpu_dm/amdgpu_dm_helpers.c | 2 +- .../gpu/drm/amd/display/dc/dml/dsc/rc_calc_fpu.c | 2 +- .../dml21/src/dml2_core/dml2_core_dcn4_calcs.c | 2 + .../drm/amd/display/modules/color/color_gamma.c | 3 +- drivers/gpu/drm/amd/include/kgd_pp_interface.h | 2 + drivers/gpu/drm/amd/pm/amdgpu_dpm.c | 85 +++++ drivers/gpu/drm/amd/pm/inc/amdgpu_dpm.h | 1 + drivers/gpu/drm/amd/pm/powerplay/amd_powerplay.c | 33 +- drivers/gpu/drm/amd/pm/swsmu/amdgpu_smu.c | 87 +++++- drivers/gpu/drm/arm/malidp_crtc.c | 1 + drivers/gpu/drm/bridge/analogix/analogix_dp_core.c | 13 +- drivers/gpu/drm/drm_panic.c | 5 +- drivers/gpu/drm/msm/dsi/dsi_host.c | 2 + drivers/gpu/drm/msm/hdmi/hdmi_bridge.c | 32 +- drivers/gpu/drm/msm/hdmi/hdmi_phy.c | 16 +- drivers/gpu/drm/nouveau/include/nvkm/subdev/pci.h | 1 + drivers/gpu/drm/nouveau/nouveau_abi16.c | 4 + drivers/gpu/drm/nouveau/nouveau_connector.c | 1 + drivers/gpu/drm/nouveau/nouveau_dp.c | 4 +- drivers/gpu/drm/nouveau/nouveau_fence.c | 2 +- drivers/gpu/drm/nouveau/nouveau_svm.c | 13 + drivers/gpu/drm/nouveau/nvkm/engine/device/base.c | 2 +- drivers/gpu/drm/nouveau/nvkm/subdev/pci/Kbuild | 1 + drivers/gpu/drm/nouveau/nvkm/subdev/pci/mcp79.c | 35 +++ drivers/gpu/drm/panel/panel-ebbg-ft8719.c | 2 + drivers/gpu/drm/ttm/ttm_bo_util.c | 11 +- drivers/hte/hte-tegra194-test.c | 2 +- drivers/hte/hte-tegra194.c | 10 +- drivers/hwmon/acpi_power_meter.c | 10 +- drivers/hwmon/coretemp.c | 31 +- drivers/hwmon/corsair-cpro.c | 9 +- drivers/hwmon/gigabyte_waterforce.c | 5 + drivers/hwmon/k10temp.c | 5 +- drivers/hwmon/lm95245.c | 6 +- drivers/hwmon/sht3x.c | 5 +- drivers/hwmon/sht4x.c | 22 +- drivers/i2c/busses/i2c-designware-master.c | 8 + drivers/i2c/busses/i2c-mt7621.c | 9 +- drivers/i2c/i2c-core-acpi.c | 6 +- drivers/i3c/master.c | 7 +- drivers/i3c/master/adi-i3c-master.c | 4 + drivers/i3c/master/mipi-i3c-hci/dma.c | 2 +- drivers/iio/accel/adis16201.c | 10 +- drivers/iio/accel/adxl313_spi.c | 2 + drivers/iio/accel/adxl380_spi.c | 2 + drivers/iio/accel/kxcjk-1013.c | 1 + drivers/iio/accel/mma9551.c | 1 + drivers/iio/accel/mma9553.c | 1 + drivers/iio/adc/ad7606_spi.c | 6 +- drivers/iio/adc/at91-sama5d2_adc.c | 1 + drivers/iio/adc/max11205.c | 2 + drivers/iio/adc/mcp3911.c | 2 + drivers/iio/adc/stm32-adc.c | 4 +- drivers/iio/adc/ti-adc128s052.c | 8 +- drivers/iio/adc/ti-ads1100.c | 107 ++++++- drivers/iio/dac/ad5755.c | 3 + drivers/iio/frequency/adf4377.c | 3 + drivers/iio/imu/adis16400.c | 3 + drivers/iio/imu/inv_icm42600/inv_icm42600.h | 1 + drivers/iio/imu/inv_icm42600/inv_icm42600_accel.c | 17 +- drivers/iio/imu/inv_icm42600/inv_icm42600_buffer.c | 2 + drivers/iio/imu/inv_icm42600/inv_icm42600_core.c | 9 + drivers/iio/imu/inv_icm42600/inv_icm42600_gyro.c | 8 +- drivers/iio/light/apds9306.c | 2 +- drivers/iio/potentiometer/x9250.c | 7 +- drivers/iio/pressure/bmp280-spi.c | 2 + drivers/infiniband/hw/hfi1/chip.c | 4 +- drivers/infiniband/hw/hfi1/fault.c | 1 - drivers/input/input.c | 4 +- drivers/input/joystick/xpad.c | 1 + drivers/input/keyboard/matrix_keypad.c | 3 - drivers/iommu/amd/init.c | 23 +- drivers/iommu/dma-iommu.c | 20 +- drivers/iommu/intel/iommu.h | 17 +- drivers/iommu/iommufd/io_pagetable.c | 3 + drivers/irqchip/irq-atmel-aic.c | 2 +- drivers/irqchip/irq-atmel-aic5.c | 2 +- drivers/irqchip/irq-gic-v3-its.c | 2 +- drivers/irqchip/irq-imx-intmux.c | 15 +- drivers/irqchip/irq-mchp-eic.c | 4 +- drivers/irqchip/irq-msi-lib.c | 1 + drivers/irqchip/irq-riscv-imsic-platform.c | 2 +- drivers/leds/flash/leds-ktd2692.c | 10 +- drivers/mailbox/bcm74110-mailbox.c | 13 + drivers/mailbox/mailbox-altera.c | 2 +- drivers/mailbox/mtk-cmdq-mailbox.c | 7 +- drivers/mailbox/qcom-ipcc.c | 6 + drivers/md/dm-bufio.c | 45 ++- drivers/md/dm-snap-persistent.c | 7 +- drivers/md/dm-vdo/indexer/chapter-index.c | 15 +- drivers/md/dm-vdo/indexer/delta-index.c | 17 +- drivers/md/dm-vdo/indexer/volume.c | 6 - drivers/md/dm-writecache.c | 54 +++- drivers/md/dm.c | 2 +- drivers/md/md.c | 17 +- drivers/md/raid5-cache.c | 34 +- drivers/md/raid5.c | 8 +- drivers/md/raid5.h | 1 + .../extron-da-hd-4k-plus/extron-da-hd-4k-plus.c | 4 +- drivers/media/common/saa7146/saa7146_core.c | 3 +- drivers/media/dvb-frontends/stv0900_core.c | 2 + drivers/media/dvb-frontends/stv090x.c | 2 + drivers/media/i2c/adv7180.c | 2 +- drivers/media/i2c/adv7604.c | 3 +- drivers/media/i2c/alvium-csi2.c | 1 + drivers/media/i2c/ov2735.c | 1 + drivers/media/i2c/ov8856.c | 32 +- drivers/media/i2c/tc358743.c | 3 +- drivers/media/pci/cx18/cx18-driver.c | 9 +- drivers/media/pci/tw68/tw68-core.c | 2 +- drivers/media/pci/tw686x/tw686x-core.c | 10 + drivers/media/platform/amphion/vpu_core.c | 19 +- drivers/media/platform/amphion/vpu_drv.c | 1 + drivers/media/platform/atmel/atmel-isi.c | 7 +- .../platform/chips-media/wave5/wave5-vpu-dec.c | 8 +- .../media/platform/chips-media/wave5/wave5-vpu.c | 7 + .../platform/chips-media/wave5/wave5-vpuapi.c | 15 +- .../media/platform/imagination/e5010-jpeg-enc.c | 4 +- drivers/media/platform/m2m-deinterlace.c | 2 +- drivers/media/platform/marvell/Kconfig | 1 + drivers/media/platform/marvell/mmp-driver.c | 5 +- .../media/platform/mediatek/jpeg/mtk_jpeg_core.c | 17 +- .../media/platform/mediatek/mdp3/mtk-mdp3-comp.c | 14 +- .../mediatek/vcodec/decoder/mtk_vcodec_dec_drv.c | 2 + drivers/media/platform/mediatek/vpu/mtk_vpu.c | 2 + .../media/platform/microchip/microchip-isc-base.c | 56 ++-- .../media/platform/microchip/microchip-isc-clk.c | 7 +- drivers/media/platform/microchip/microchip-isc.h | 1 + .../platform/microchip/microchip-sama5d2-isc.c | 11 + .../platform/microchip/microchip-sama7g5-isc.c | 11 + drivers/media/platform/nuvoton/npcm-video.c | 9 +- drivers/media/platform/nxp/imx-jpeg/mxc-jpeg.c | 21 +- drivers/media/platform/qcom/camss/camss-vfe-17x.c | 46 +-- drivers/media/platform/qcom/camss/camss-vfe.c | 14 +- drivers/media/platform/qcom/camss/camss.c | 25 +- drivers/media/platform/qcom/iris/iris_vidc.c | 6 +- drivers/media/platform/qcom/venus/core.c | 66 +++- drivers/media/platform/qcom/venus/core.h | 6 + .../media/platform/samsung/exynos4-is/fimc-lite.c | 3 +- .../media/platform/st/sti/delta/delta-mjpeg-hdr.c | 7 +- drivers/media/platform/st/stm32/stm32-csi.c | 5 +- .../media/platform/synopsys/hdmirx/snps_hdmirx.c | 80 ++--- drivers/media/platform/ti/davinci/vpif_capture.c | 5 +- drivers/media/platform/ti/davinci/vpif_display.c | 3 + drivers/media/platform/verisilicon/hantro_drv.c | 75 +++-- .../platform/verisilicon/hantro_g1_mpeg2_dec.c | 5 + .../verisilicon/rockchip_vpu981_hw_av1_dec.c | 68 +++- drivers/media/rc/ene_ir.c | 4 +- drivers/media/rc/ir-hix5hd2.c | 5 +- drivers/media/rc/ir_toy.c | 2 +- drivers/media/rc/meson-ir-tx.c | 20 +- drivers/media/rc/redrat3.c | 17 + drivers/media/rc/serial_ir.c | 2 +- drivers/media/rc/streamzap.c | 1 + drivers/media/rc/sunxi-cir.c | 2 +- drivers/media/test-drivers/vicodec/codec-fwht.h | 2 +- drivers/media/test-drivers/vicodec/vicodec-core.c | 16 +- drivers/media/test-drivers/vidtv/vidtv_bridge.c | 4 + drivers/media/test-drivers/vidtv/vidtv_demod.c | 9 - drivers/media/test-drivers/vim2m.c | 29 +- drivers/media/test-drivers/vivid/vivid-core.c | 1 + drivers/media/test-drivers/vivid/vivid-vid-cap.c | 13 + drivers/media/usb/au0828/au0828-core.c | 4 + drivers/media/usb/au0828/au0828-dvb.c | 19 +- drivers/media/usb/cx231xx/cx231xx-audio.c | 15 +- drivers/media/usb/cx231xx/cx231xx-cards.c | 2 +- drivers/media/usb/cx231xx/cx231xx.h | 2 +- drivers/media/usb/dvb-usb-v2/rtl28xxu.c | 14 +- drivers/media/usb/em28xx/em28xx-core.c | 3 - drivers/media/usb/go7007/go7007-usb.c | 8 + drivers/media/usb/pvrusb2/pvrusb2-sysfs.c | 1 + drivers/media/usb/uvc/uvc_ctrl.c | 2 +- drivers/media/v4l2-core/v4l2-common.c | 2 +- drivers/media/v4l2-core/v4l2-ctrls-core.c | 12 +- drivers/memory/brcmstb_dpfe.c | 24 +- drivers/memory/renesas-rpc-if.c | 1 + drivers/memory/stm32_omm.c | 2 + drivers/mfd/Kconfig | 2 + drivers/mfd/da903x.c | 34 +- drivers/mfd/tps65217.c | 69 ++-- drivers/mfd/wcd934x.c | 8 +- drivers/misc/mei/vsc-tp.c | 2 +- drivers/mtd/chips/cfi_cmdset_0002.c | 15 + drivers/mtd/maps/amd76xrom.c | 2 + drivers/mtd/maps/l440gx.c | 2 - drivers/mtd/maps/pci.c | 2 +- drivers/mtd/mtdcore.c | 2 +- drivers/mtd/mtdsuper.c | 4 +- drivers/mtd/nand/raw/atmel/nand-controller.c | 6 +- .../mtd/nand/raw/nuvoton-ma35d1-nand-controller.c | 1 - drivers/mtd/nand/raw/qcom_nandc.c | 8 +- drivers/mtd/nand/raw/sunxi_nand.c | 3 + drivers/mtd/parsers/qcomsmempart.c | 4 +- drivers/mtd/spi-nor/core.c | 9 + drivers/mtd/spi-nor/sfdp.c | 8 + drivers/net/bonding/bond_main.c | 2 +- drivers/net/ethernet/google/gve/gve_flow_rule.c | 1 + drivers/net/ethernet/hisilicon/hisi_femac.c | 1 + drivers/net/ethernet/intel/ixgbe/ixgbe_main.c | 40 ++- drivers/net/macvlan.c | 3 +- drivers/net/netdevsim/bpf.c | 11 + drivers/net/ppp/ppp_generic.c | 1 + drivers/net/usb/pegasus.c | 12 +- drivers/net/usb/r8152.c | 10 +- drivers/net/veth.c | 5 +- drivers/net/virtio_net.c | 25 +- drivers/net/wireless/ath/ath11k/dp.c | 2 + drivers/net/wireless/ath/ath12k/wmi.c | 17 + .../broadcom/brcm80211/brcmsmac/phy/phy_n.c | 2 +- drivers/net/wireless/mediatek/mt76/eeprom.c | 17 +- drivers/net/wireless/mediatek/mt76/mt7615/init.c | 17 +- drivers/net/wireless/mediatek/mt76/mt7615/main.c | 6 +- .../net/wireless/mediatek/mt76/mt7615/pci_init.c | 1 + drivers/net/wireless/mediatek/mt76/mt76x02_mac.c | 19 +- .../net/wireless/mediatek/mt76/mt76x02_usb_mcu.c | 2 +- drivers/net/wireless/mediatek/mt76/mt7925/usb.c | 11 +- drivers/net/wireless/mediatek/mt76/mt7996/pci.c | 12 +- drivers/net/wireless/mediatek/mt76/tx.c | 2 +- drivers/net/wireless/mediatek/mt76/usb.c | 31 +- drivers/net/wireless/realtek/rtw88/mac80211.c | 2 +- drivers/net/wireless/realtek/rtw89/fw.c | 32 ++ drivers/net/wireless/realtek/rtw89/rtw8851b_rfk.c | 4 +- drivers/net/wireless/realtek/rtw89/wow.c | 6 +- drivers/net/wwan/iosm/iosm_ipc_protocol_ops.c | 5 + drivers/nvme/host/auth.c | 15 +- drivers/nvme/host/core.c | 15 +- drivers/nvme/host/rdma.c | 1 + drivers/nvme/host/sysfs.c | 14 +- drivers/nvme/host/tcp.c | 24 +- drivers/nvme/target/admin-cmd.c | 2 +- drivers/nvme/target/auth.c | 2 + drivers/nvme/target/configfs.c | 2 + drivers/nvme/target/fabrics-cmd-auth.c | 42 ++- drivers/nvme/target/fabrics-cmd.c | 4 + drivers/nvme/target/fc.c | 10 +- drivers/nvme/target/io-cmd-bdev.c | 5 +- drivers/nvme/target/io-cmd-file.c | 4 +- drivers/nvme/target/nvmet.h | 2 + drivers/nvme/target/pci-epf.c | 30 +- drivers/nvme/target/pr.c | 2 +- drivers/nvme/target/rdma.c | 2 +- drivers/nvme/target/zns.c | 10 + drivers/parisc/eisa_enumerator.c | 15 +- drivers/pci/controller/dwc/pcie-qcom-ep.c | 2 + drivers/pci/controller/pcie-rockchip-ep.c | 13 - drivers/pci/controller/pcie-rockchip-host.c | 20 -- drivers/pci/controller/pcie-rockchip.c | 14 +- drivers/pci/controller/pcie-rockchip.h | 3 - drivers/pci/controller/pcie-xilinx-dma-pl.c | 10 +- drivers/pci/doe.c | 5 +- drivers/pci/hotplug/pciehp_core.c | 2 +- drivers/pci/pci-label.c | 2 +- drivers/pci/pci.c | 33 +- drivers/pci/pcie/aer.c | 7 +- drivers/pci/probe.c | 5 +- drivers/pci/quirks.c | 26 +- drivers/pci/xen-pcifront.c | 11 +- drivers/peci/controller/peci-aspeed.c | 6 +- drivers/peci/controller/peci-npcm.c | 6 +- drivers/perf/xgene_pmu.c | 4 +- drivers/pinctrl/stm32/pinctrl-stm32.c | 6 +- drivers/platform/x86/amd/hfi/hfi.c | 20 +- drivers/platform/x86/amd/pmc/pmc.c | 20 +- drivers/platform/x86/amd/pmf/spc.c | 8 +- drivers/platform/x86/amd/pmf/sps.c | 10 +- drivers/platform/x86/asus-wmi.c | 42 ++- drivers/platform/x86/hp/hp-bioscfg/bioscfg.c | 82 ++--- .../x86/hp/hp-bioscfg/passwdobj-attributes.c | 16 +- .../platform/x86/hp/hp-bioscfg/spmobj-attributes.c | 5 +- drivers/platform/x86/hp/hp-wmi.c | 7 +- drivers/platform/x86/intel/int3472/discrete.c | 25 +- drivers/platform/x86/intel/pmt/class.c | 9 +- .../x86/intel/uncore-frequency/uncore-frequency.c | 2 +- drivers/platform/x86/intel/vsec.c | 2 +- drivers/platform/x86/oxpec.c | 68 +++- drivers/platform/x86/siemens/simatic-ipc.c | 21 +- drivers/platform/x86/tuxedo/nb04/wmi_ab.c | 8 +- drivers/power/supply/ab8500_fg.c | 69 ++-- drivers/power/supply/bq27xxx_battery.c | 12 +- drivers/power/supply/cros_charge-control.c | 29 +- drivers/power/supply/generic-adc-battery.c | 2 +- drivers/power/supply/power_supply_core.c | 84 ++--- drivers/power/supply/qcom_battmgr.c | 26 +- drivers/power/supply/qcom_smbx.c | 109 +++++-- drivers/pps/generators/pps_gen.c | 40 ++- drivers/pwm/pwm-tiehrpwm.c | 3 + drivers/regulator/core.c | 4 + drivers/regulator/rt6190-regulator.c | 18 +- drivers/remoteproc/remoteproc_elf_loader.c | 23 +- drivers/rtc/rtc-cmos.c | 6 +- drivers/rtc/rtc-pcf8563.c | 2 +- drivers/scsi/libiscsi_tcp.c | 3 +- drivers/sh/intc/core.c | 11 +- drivers/sh/maple/maple.c | 4 +- drivers/slimbus/messaging.c | 2 +- drivers/soc/fsl/dpio/dpio-driver.c | 9 +- drivers/soc/fsl/qe/tsa.c | 16 +- drivers/soc/qcom/qcom-geni-se.c | 49 +-- drivers/soc/samsung/exynos-pmu.c | 61 +++- drivers/spi/spi-amd.c | 17 + drivers/spi/spi-bcm-qspi.c | 3 +- drivers/spi/spi-bcm2835.c | 4 +- drivers/spi/spi-cadence-xspi.c | 16 +- drivers/spi/spi-ch341.c | 6 + drivers/spi/spi-jcore.c | 2 + drivers/spi/spi-ljca.c | 7 +- drivers/spi/spi-npcm-fiu.c | 8 + drivers/spi/spi-qpic-snand.c | 3 + drivers/spi/spi-stm32.c | 3 +- drivers/spi/spi-zynq-qspi.c | 13 +- drivers/staging/greybus/uart.c | 32 +- drivers/staging/media/av7110/sp8870.c | 5 +- drivers/staging/media/imx/imx-media-csc-scaler.c | 1 + drivers/staging/media/meson/vdec/vdec.c | 2 +- drivers/staging/rtl8723bs/core/rtw_recv.c | 103 +++--- drivers/staging/rtl8723bs/hal/sdio_ops.c | 7 + .../int340x_thermal/processor_thermal_device.c | 10 +- drivers/thermal/intel/intel_powerclamp.c | 3 +- drivers/tty/serial/8250/8250_exar.c | 36 +-- drivers/tty/serial/8250/8250_lpss.c | 7 +- drivers/tty/serial/8250/8250_omap.c | 3 + drivers/tty/serial/amba-pl011.c | 37 ++- drivers/tty/serial/pmac_zilog.c | 4 +- drivers/ufs/core/ufs_bsg.c | 10 +- drivers/ufs/core/ufshcd.c | 21 +- drivers/usb/class/cdc-acm.c | 6 +- drivers/usb/core/quirks.c | 3 + drivers/usb/fotg210/fotg210-udc.c | 17 +- drivers/usb/gadget/legacy/inode.c | 4 +- drivers/usb/host/xhci-ring.c | 9 +- drivers/usb/host/xhci.c | 11 +- drivers/usb/serial/option.c | 5 + drivers/usb/serial/sierra.c | 3 +- drivers/usb/serial/usb_wwan.c | 3 + drivers/usb/typec/ucsi/ucsi_ccg.c | 37 ++- drivers/vfio/pci/mlx5/cmd.c | 2 +- drivers/video/fbdev/atmel_lcdfb.c | 13 +- drivers/video/fbdev/core/bitblit.c | 7 +- drivers/video/fbdev/kyro/fbdev.c | 4 +- drivers/video/fbdev/sh_mobile_lcdcfb.c | 6 +- drivers/video/fbdev/smscufx.c | 9 +- drivers/video/fbdev/ssd1307fb.c | 6 +- drivers/video/fbdev/udlfb.c | 9 +- drivers/video/fbdev/xen-fbfront.c | 7 +- drivers/xen/gntdev.c | 7 + drivers/xen/privcmd.c | 47 ++- drivers/xen/xen-pciback/pci_stub.c | 7 +- fs/affs/bitmap.c | 2 +- fs/aio.c | 18 +- fs/backing-file.c | 39 +++ fs/btrfs/inode.c | 3 - fs/btrfs/super.c | 3 + fs/btrfs/volumes.c | 6 +- fs/ceph/addr.c | 15 +- fs/ceph/caps.c | 6 + fs/ceph/crypto.c | 3 + fs/ceph/mds_client.c | 28 +- fs/ceph/mdsmap.c | 12 +- fs/ceph/snap.c | 7 +- fs/ceph/xattr.c | 10 + fs/crypto/keysetup.c | 8 +- fs/dax.c | 14 +- fs/dcache.c | 16 +- fs/dlm/lowcomms.c | 6 +- fs/erofs/decompressor.c | 2 +- fs/exportfs/expfs.c | 6 +- fs/ext4/balloc.c | 2 +- fs/ext4/ext4.h | 3 + fs/ext4/extents.c | 26 +- fs/ext4/indirect.c | 17 + fs/ext4/inode.c | 13 +- fs/ext4/ioctl.c | 3 +- fs/ext4/namei.c | 11 +- fs/ext4/super.c | 29 +- fs/f2fs/compress.c | 10 +- fs/f2fs/data.c | 11 +- fs/f2fs/file.c | 49 +-- fs/f2fs/segment.c | 3 +- fs/f2fs/super.c | 48 ++- fs/fat/fat.h | 2 +- fs/fat/fatent.c | 21 +- fs/fat/file.c | 3 +- fs/fat/misc.c | 6 +- fs/fs-writeback.c | 7 +- fs/fs_pin.c | 9 +- fs/fuse/file.c | 15 +- fs/fuse/virtio_fs.c | 21 +- fs/gfs2/lops.c | 4 +- fs/iomap/fiemap.c | 8 +- fs/isofs/inode.c | 2 + fs/isofs/isofs.h | 2 + fs/isofs/rock.c | 11 +- fs/jbd2/journal.c | 2 +- fs/namespace.c | 7 +- fs/nilfs2/dir.c | 34 ++ fs/nilfs2/inode.c | 8 +- fs/nilfs2/ioctl.c | 2 +- fs/nilfs2/mdt.c | 6 +- fs/nilfs2/page.c | 50 +-- fs/nilfs2/page.h | 4 +- fs/nilfs2/recovery.c | 2 +- fs/nilfs2/segment.c | 12 +- fs/nilfs2/sysfs.c | 5 +- fs/nilfs2/the_nilfs.c | 34 +- fs/notify/fanotify/fanotify.c | 7 +- fs/notify/fanotify/fanotify.h | 21 +- fs/ntfs3/fslog.c | 29 +- fs/ntfs3/index.c | 13 +- fs/ocfs2/cluster/heartbeat.c | 26 +- fs/ocfs2/cluster/nodemanager.c | 7 +- fs/ocfs2/dir.c | 76 ++++- fs/ocfs2/dlmglue.c | 4 + fs/ocfs2/file.c | 18 +- fs/ocfs2/inode.c | 37 ++- fs/ocfs2/journal.c | 3 +- fs/ocfs2/journal.h | 1 - fs/ocfs2/super.c | 16 +- fs/ocfs2/xattr.c | 142 +++++++-- fs/proc/generic.c | 5 +- fs/read_write.c | 8 +- fs/signalfd.c | 28 +- fs/splice.c | 12 +- fs/stat.c | 6 +- fs/udf/super.c | 5 +- fs/verity/open.c | 38 +-- fs/xfs/scrub/agheader.c | 15 +- include/linux/fault-inject.h | 10 +- include/linux/fs.h | 4 +- include/linux/libata.h | 1 + include/linux/pci.h | 2 +- include/linux/pps_gen_kernel.h | 2 + include/linux/rtc.h | 2 + include/math-emu/op-common.h | 23 +- include/math-emu/soft-fp.h | 8 + include/media/v4l2-ctrls.h | 6 + include/net/addrconf.h | 3 + include/net/inet_connection_sock.h | 8 - include/net/ip.h | 25 -- include/net/ip6_route.h | 37 --- include/net/mptcp.h | 9 + include/net/tcp.h | 7 + include/trace/events/huge_memory.h | 6 +- init/main.c | 6 +- init/version.c | 3 + ipc/mqueue.c | 7 + ipc/msgutil.c | 3 +- ipc/shm.c | 23 +- kernel/bpf/queue_stack_maps.c | 3 + kernel/cgroup/cgroup.c | 2 +- kernel/cpu_pm.c | 9 +- kernel/debug/gdbstub.c | 55 +++- kernel/fork.c | 3 +- kernel/irq/internals.h | 1 + kernel/irq/kexec.c | 2 +- kernel/irq/manage.c | 43 +-- kernel/panic.c | 3 +- kernel/resource.c | 2 +- kernel/sched/cpufreq_schedutil.c | 14 +- kernel/sched/fair.c | 7 +- kernel/seccomp.c | 7 +- kernel/sys.c | 3 + kernel/time/itimer.c | 2 +- kernel/time/namespace.c | 2 +- kernel/time/posix-cpu-timers.c | 4 +- kernel/time/timekeeping.c | 3 +- kernel/trace/ring_buffer.c | 2 + kernel/ucount.c | 21 +- kernel/user_namespace.c | 5 +- lib/842/842_decompress.c | 7 +- lib/alloc_tag.c | 2 +- lib/buildid.c | 4 + lib/decompress_bunzip2.c | 6 +- lib/fault-inject.c | 7 +- lib/iov_iter.c | 4 + lib/kobject_uevent.c | 2 +- lib/plist.c | 7 + lib/stackdepot.c | 2 +- mm/damon/core.c | 8 + mm/damon/paddr.c | 8 +- mm/damon/sysfs-schemes.c | 6 +- mm/damon/sysfs.c | 11 +- mm/damon/tests/core-kunit.h | 316 +++++++++++++++++++ mm/damon/vaddr.c | 5 +- mm/execmem.c | 4 +- mm/hugetlb.c | 66 ++-- mm/hugetlb_cgroup.c | 33 ++ mm/khugepaged.c | 7 +- mm/ksm.c | 5 +- mm/madvise.c | 12 +- mm/memcontrol.c | 28 +- mm/memory.c | 24 +- mm/mempolicy.c | 14 +- mm/mlock.c | 2 +- mm/mremap.c | 33 +- mm/nommu.c | 6 +- mm/page_alloc.c | 18 +- mm/page_isolation.c | 40 ++- mm/page_table_check.c | 4 +- mm/percpu.c | 5 +- mm/shmem.c | 11 +- mm/swap_state.c | 16 +- mm/truncate.c | 33 +- mm/userfaultfd.c | 6 +- mm/vmscan.c | 10 +- mm/zswap.c | 5 +- net/bluetooth/6lowpan.c | 1 + net/bluetooth/hci_debugfs.c | 9 + net/bluetooth/l2cap_core.c | 41 ++- net/bluetooth/l2cap_sock.c | 4 + net/ceph/mon_client.c | 3 + net/ceph/osd_client.c | 13 +- net/ceph/osdmap.c | 16 +- net/core/dev.c | 8 + net/core/gro.c | 4 + net/core/skbuff.c | 13 +- net/ipv4/inet_connection_sock.c | 19 +- net/ipv4/inet_hashtables.c | 5 +- net/ipv4/ipmr.c | 1 + net/ipv4/netfilter/nf_reject_ipv4.c | 5 + net/ipv4/route.c | 4 +- net/ipv4/syncookies.c | 2 + net/ipv4/sysctl_net_ipv4.c | 2 + net/ipv4/tcp_cong.c | 4 +- net/ipv4/tcp_input.c | 6 +- net/ipv4/tcp_minisocks.c | 35 ++- net/ipv4/tcp_output.c | 7 +- net/ipv4/tcp_timer.c | 3 + net/ipv6/addrconf.c | 46 ++- net/ipv6/inet6_hashtables.c | 4 +- net/ipv6/netfilter/nf_reject_ipv6.c | 5 + net/ipv6/reassembly.c | 1 + net/ipv6/route.c | 2 +- net/mptcp/protocol.c | 9 +- net/mptcp/protocol.h | 6 +- net/mptcp/subflow.c | 35 ++- net/netfilter/nf_conntrack_netlink.c | 8 +- net/packet/af_packet.c | 12 +- net/rds/ib_cm.c | 6 +- net/rds/ib_recv.c | 13 +- net/sctp/socket.c | 26 +- net/smc/smc_tx.c | 7 + net/sunrpc/xprtrdma/rpc_rdma.c | 27 +- net/sunrpc/xprtrdma/svc_rdma_transport.c | 3 +- net/sunrpc/xprtrdma/verbs.c | 9 +- net/tipc/group.c | 19 +- net/tipc/socket.c | 12 +- net/unix/sysctl_net_unix.c | 4 +- net/xdp/xsk_buff_pool.c | 2 + rust/Makefile | 5 +- rust/bindgen_parameters | 5 + rust/bindings/lib.rs | 1 + rust/kernel/bitmap.rs | 2 +- rust/kernel/dma.rs | 21 +- rust/kernel/irq/request.rs | 22 +- rust/kernel/time/hrtimer.rs | 6 +- scripts/Makefile.autofdo | 2 +- security/apparmor/af_unix.c | 20 +- security/apparmor/file.c | 59 ++-- security/apparmor/include/label.h | 6 +- security/apparmor/label.c | 1 - security/apparmor/match.c | 3 +- security/apparmor/policy.c | 16 + security/apparmor/policy_unpack.c | 9 + sound/core/compress_offload.c | 32 +- sound/core/init.c | 12 +- sound/core/seq/oss/seq_oss_device.h | 1 + sound/core/seq/oss/seq_oss_event.c | 3 + sound/core/seq/oss/seq_oss_init.c | 2 + sound/core/ump_convert.c | 2 +- sound/drivers/aloop.c | 31 +- sound/drivers/mpu401/mpu401_uart.c | 8 +- sound/drivers/mtpav.c | 2 +- sound/hda/codecs/hdmi/eld.c | 6 +- sound/hda/codecs/hdmi/hdmi.c | 3 +- sound/hda/codecs/realtek/alc269.c | 3 +- sound/hda/codecs/side-codecs/tas2781_hda_i2c.c | 5 + sound/hda/codecs/via.c | 1 + sound/hda/common/codec.c | 6 + sound/hda/common/sysfs.c | 4 + sound/mips/sgio2audio.c | 13 +- sound/oss/dmasound/dmasound_q40.c | 65 ++-- sound/pci/cs46xx/dsp_spos.c | 2 +- sound/soc/codecs/arizona-jack.c | 1 + sound/soc/codecs/hdac_hda.c | 16 + sound/soc/codecs/lpass-wsa-macro.c | 42 ++- sound/soc/codecs/pcm6240.c | 2 - sound/soc/codecs/rt5682s.c | 4 +- sound/soc/codecs/rt712-sdca-dmic.c | 4 +- sound/soc/codecs/tlv320aic32x4-clk.c | 8 +- sound/soc/codecs/wcd9335.c | 25 +- sound/soc/codecs/wm8994.c | 3 + sound/soc/codecs/wsa883x.c | 13 +- sound/soc/codecs/wsa884x.c | 11 +- sound/soc/fsl/fsl_xcvr.c | 28 +- sound/soc/intel/atom/sst/sst_acpi.c | 14 +- sound/soc/qcom/qdsp6/q6afe.c | 10 +- sound/soc/qcom/qdsp6/q6apm.c | 1 + sound/soc/sdw_utils/soc_sdw_rt711.c | 1 + sound/soc/ti/davinci-mcasp.c | 1 + sound/synth/emux/emux.c | 10 +- sound/synth/emux/soundfont.c | 9 + sound/usb/line6/capture.c | 25 +- sound/usb/line6/capture.h | 2 +- sound/usb/line6/playback.c | 31 +- sound/usb/pcm.c | 20 +- sound/usb/quirks.c | 2 + tools/perf/arch/loongarch/util/header.c | 2 +- tools/perf/util/machine.c | 2 +- tools/perf/util/powerpc-vpadtl.c | 2 +- tools/testing/selftests/core/unshare_test.c | 19 +- tools/testing/selftests/seccomp/seccomp_bpf.c | 179 +++++++++++ virt/kvm/guest_memfd.c | 12 +- 789 files changed, 8003 insertions(+), 2923 deletions(-)

4 days, 11 hours

[PATCH 7.3 000/547] 7.3.2-rc1 review

by Greg Kroah-Hartman

This is the start of the stable review cycle for the 7.3.2 release. There are 547 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know. Responses should be made by Fri, 06 Nov 2026 21:07:23 +0000. Anything received after that time might be too late. The whole patch series can be found in one patch at: https://www.kernel.org/pub/linux/kernel/v7.x/stable-review/patch-7.3.2-rc1.… or in the git tree and branch at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-7.3.y and the diffstat can be found below. thanks, greg k-h ------------- Pseudo-Shortlog of commits: Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> Linux 7.3.2-rc1 Namjae Jeon <linkinjeon(a)kernel.org> ksmbd: keep retry timeout clamp bounds constant Sean Young <sean(a)mess.org> media: rc: Fix build failure with CONFIG_LIRC disabled Alice Ryhl <aliceryhl(a)google.com> rust_binder: wake epoll on self-work queued to poll thread Ian Bridges <icb(a)fastmail.org> ksmbd: fix use-after-free after a failed durable reconnect Namjae Jeon <linkinjeon(a)kernel.org> ksmbd: rebind completed CREATE replays without draining the old channel DaeMyung Kang <charsyam(a)gmail.com> ksmbd: fix named stream write and EOF handling DaeMyung Kang <charsyam(a)gmail.com> ksmbd: use the existing xattr name for a named stream Henry Hu <huhai(a)kylinos.cn> ksmbd: fix invalid pointer dereference when get_inode_acl() fails Ian Bridges <icb(a)fastmail.org> ksmbd: fix app-instance non-durable supersede session UAF Namjae Jeon <linkinjeon(a)kernel.org> ksmbd: retry break notifications on another connection Namjae Jeon <linkinjeon(a)kernel.org> ksmbd: track delivery of queued TCP writes Daijiamu <3058704216(a)qq.com> ksmbd: use clear_and_wake_up_bit() directly Ian Bridges <icb(a)fastmail.org> ksmbd: fix out-of-bounds read when padding the final compound response Jérémy Jean <Jeremy.Jean(a)oss.cyber.gouv.fr> ksmbd: fix SMB2 CREATE response buffer overflow Cheng Yongkang <teel4res(a)gmail.com> io_uring/net: fix multishot recv length limit accounting Cheng Yongkang <teel4res(a)gmail.com> io_uring/timeout: count cancelled timeouts in cq_timeouts Kyle Zeng <kylebot(a)openai.com> io_uring: defer foreign io-wq enqueues to task_work Chris Mason <mason(a)kernel.org> io_uring/sqpoll: don't wait for the thread to exit Chris Mason <mason(a)kernel.org> io_uring: free the task context after a grace period Chris Mason <mason(a)kernel.org> io_uring/bpf-ops: clear bpf_ctx while submitting SQEs Chris Mason <mason(a)kernel.org> io_uring: free XArray nodes left by a failed store Chris Mason <mason(a)kernel.org> io_uring: charge tctx nodes and personalities Chris Mason <mason(a)kernel.org> io_uring/rsrc: charge buffer arrays and nodes to memcg Josef Bacik <josef(a)toxicpanda.com> io_uring/io-wq: no new workers once the exit has begun Jens Axboe <axboe(a)kernel.dk> io_uring: keep the drain active when a deferred drain request is started Daan De Meyer <daan(a)amutable.com> io_uring/net: don't retry a non-blocking connect() that fails with -EAGAIN Dominik Maier <dmnk(a)google.com> io_uring/register: enforce per-task restrictions in io_uring_register_blind() Dominik Maier <dmnk(a)google.com> io_uring/net: mask socket type with SOCK_TYPE_MASK in io_socket_bpf_populate() Yichong Chen <chenyichong(a)uniontech.com> io_uring/net: keep recvmsg buffer select length within MAX_RW_COUNT Yichong Chen <chenyichong(a)uniontech.com> io_uring/kbuf: advance head when a pickup empties the buffer ring Lizhi Hou <lizhi.hou(a)amd.com> accel/amdxdna: Add support for AIE2 revision 9 Derek J. Clark <derekjohn.clark(a)gmail.com> HID: hid-lenovo-go-s: Use devm_kzalloc for drvdata Derek J. Clark <derekjohn.clark(a)gmail.com> HID: hid-lenovo-go-s: Move static led_classdev_mc to drvdata struct Derek J. Clark <derekjohn.clark(a)gmail.com> HID: hid-lenovo-go-s: Add kobject_uevent notify during reset-resume Derek J. Clark <derekjohn.clark(a)gmail.com> HID: hid-lenovo-go-s: Reorganize and rename hid_gos_cfg Derek J. Clark <derekjohn.clark(a)gmail.com> HID: hid-lenovo-go-s: Move attribute init to after device query Derek J. Clark <derekjohn.clark(a)gmail.com> HID: hid-lenovo-go-s: Bound stale reply window before reusing send_cmd_complete Derek J. Clark <derekjohn.clark(a)gmail.com> HID: hid-lenovo-go-s: Add suspend function and gate access under bool. Derek J. Clark <derekjohn.clark(a)gmail.com> HID: hid-lenovo-go-s: Use pm_ptr for reset_resume callback Derek J. Clark <derekjohn.clark(a)gmail.com> HID: hid-lenovo-go-s: Return ret instead of 0 in mcu_property_out() Derek J. Clark <derekjohn.clark(a)gmail.com> HID: hid-lenovo-go-s: Prevent deadlock if device removed during setup Jiale Yao <yaojiale02(a)163.com> HID: roccat: savu: reject short special reports Jiale Yao <yaojiale02(a)163.com> HID: roccat: ryos: reject short special reports Jiale Yao <yaojiale02(a)163.com> HID: roccat: pyra: reject short button reports Jiale Yao <yaojiale02(a)163.com> HID: roccat: kovaplus: reject short button reports Jiale Yao <yaojiale02(a)163.com> HID: roccat: konepure: reject short button reports Jiale Yao <yaojiale02(a)163.com> HID: roccat: koneplus: reject short button reports Jiale Yao <yaojiale02(a)163.com> HID: roccat: isku: reject short button reports Gabor Tanz <gabor.tanz(a)gmail.com> HID: quirks: Always poll the Anne Pro 2 with product ID a292 Jiale Yao <yaojiale02(a)163.com> HID: pxrc: reject short input reports Jiale Yao <yaojiale02(a)163.com> HID: prodikeys: validate fixed-format MIDI reports Lorenzo Stoakes (ARM) <ljs(a)kernel.org> HID: picoLCD: check for fb_deferred_io_init() error Jiale Yao <yaojiale02(a)163.com> HID: mcp2221: validate response report length Myeonghun Pak <mhun512(a)gmail.com> HID: mcp2221: always initialize and cancel init_work Jiale Yao <yaojiale02(a)163.com> HID: mcp2200: validate READ_ALL response length Jiale Yao <yaojiale02(a)163.com> HID: logitech-dj: validate unnumbered keyboard reports Jiale Yao <yaojiale02(a)163.com> HID: elo: reject short touchscreen reports Jiale Yao <yaojiale02(a)163.com> HID: cp2112: validate response report lengths Jiale Yao <yaojiale02(a)163.com> HID: cougar: reject short special-key reports Alan Stern <stern(a)rowland.harvard.edu> HID: core: Fix out-of-bounds left shift by 32 in s32ton() Panz Dev <panz.development(a)gmail.com> HID: asus: do not send keyboard init reports to touchpads Basavaraj Natikar <Basavaraj.Natikar(a)amd.com> HID: amd_sfh: Use report type from request node Basavaraj Natikar <Basavaraj.Natikar(a)amd.com> HID: amd_sfh: Remove unsupported motion-state field from accelerometer report Jiale Yao <yaojiale02(a)163.com> HID: zydacron: validate key report length Ahmed Yaseen <yaseen(a)ghoul.dev> HID: usbhid: skip interrupt IN polling for devices with no input reports Amit Machhiwal <amachhiw(a)linux.ibm.com> KVM: PPC: Fix get_d_signext() 12-bit displacement for paired-single D-form Amit Machhiwal <amachhiw(a)linux.ibm.com> KVM: PPC: Book3S HV: Add preempt_disable() around virtual-mode HPTE bit-lock users Sean Christopherson <seanjc(a)google.com> KVM: guest_memfd: Establish memslot<=>guest_memfd bindings *after* memslot is ready Shivank Garg <shivankg(a)amd.com> KVM: guest_memfd: take the invalidate lock when unbinding a dying file Sean Christopherson <seanjc(a)google.com> KVM: guest_memfd: Split bind() into prepare()+commit() phases Xiaoyao Li <xiaoyao.li(a)intel.com> KVM: TDX: Enable Bus Lock VM exit Xiaoyao Li <xiaoyao.li(a)intel.com> KVM: TDX: Don't assume exit_reason[31:16] is all-0 in tdx_to_vmx_exit_reason() Xiaoyao Li <xiaoyao.li(a)intel.com> KVM: TDX: Stuff exit_reason with UNDEFINED on wait_for_sept_zap return Xiaoyao Li <xiaoyao.li(a)intel.com> KVM: TDX: Set bits 31:16 to 0 and use UNDEFINED when synthesizing exit reason Xiaoyao Li <xiaoyao.li(a)intel.com> KVM: TDX: Enable Notify VM exit Xiaoyao Li <xiaoyao.li(a)intel.com> KVM: TDX: Check if there is valid exit infos based on vp_enter_ret Sean Christopherson <seanjc(a)google.com> KVM: x86: Zero reserved synic flags when delivering message to avoid stack leak Chengfeng Ye <nicoyip.dev(a)gmail.com> KVM: x86: Take SRCU in kvm_zap_gfn_range() Loc Nguyen <loc(a)ryzome.com> KVM: x86: Request event processing for exception VM-Exits Sean Christopherson <seanjc(a)google.com> KVM: x86: Preserve DR6.BLD (Bus Lock Detect) when delivering #DB payload Keqiang Duan <duankeqiangcym(a)gmail.com> KVM: x86: Clear hardware HLT state when userspace makes a vCPU not-halted David Woodhouse <dwmw(a)amazon.co.uk> KVM: x86/xen: Take kvm->srcu in __kvm_xen_has_interrupt() David Woodhouse <dwmw(a)amazon.co.uk> KVM: x86/xen: Enforce 4-byte alignment of vcpu_info registration Sean Christopherson <seanjc(a)google.com> KVM: x86/mmu: Bug the VM if KVM calcs a CPU role with EFER.LMA=1 && CR4.PAE=0 Sean Christopherson <seanjc(a)google.com> KVM: x86/mmu: Bug the VM if KVM attempts to walk more levels than the MMU has Xiaoyao Li <xiaoyao.li(a)intel.com> KVM: VMX: Preserve negative return value in vmx_handle_exit() with bus lock detected Xiaoyao Li <xiaoyao.li(a)intel.com> KVM: VMX: Make handle_bus_lock_vmexit() a shared helper Sean Christopherson <seanjc(a)google.com> KVM: VMX: Formally define KVM's "0xdead" exit reason used for failed VM-Enter Sean Christopherson <seanjc(a)google.com> KVM: VMX: Disallow using to_vmx() in common VT code Sean Christopherson <seanjc(a)google.com> KVM: Use goto to handle errors during memslot preparation Sean Christopherson <seanjc(a)google.com> KVM: nSVM: Ignore EFER.LMA if EFER.LME=0 when preparing L2 state Sean Christopherson <seanjc(a)google.com> KVM: nSVM: Reject KVM_SET_NESTED_STATE if L1 has EFER.LMA=1 && EFER.LME=0 Yosry Ahmed <yosry(a)kernel.org> KVM: SVM: Trigger new ASID allocation in both VMCBs on pCPU switch Sean Christopherson <seanjc(a)google.com> KVM: Only bind memslot to guest_memfd instance for CREATE operations Peter Ujfalusi <peter.ujfalusi(a)linux.intel.com> ALSA: x86: hdmi: fix chmap array missing terminator entry Mike Rapoport (Microsoft) <rppt(a)kernel.org> x86/mm/pat: Fix effective RW computation in lookup_address_in_pgd_attr() Sean Christopherson <seanjc(a)google.com> x86/cpuid: Mark CPUID function 0x23 as being indexed David Howells <dhowells(a)redhat.com> rxrpc: Fix return in rxrpc_recvmsg_data() for service calls David Howells <dhowells(a)redhat.com> rxrpc: Fix double IRQ enablement David Howells <dhowells(a)redhat.com> afs: Fix afs to abort the rxrpc call on send error David Howells <dhowells(a)redhat.com> rxrpc: Fix lack of short-send handling in rxrpc_kernel_send_data() David Howells <dhowells(a)redhat.com> rxrpc: Fix update of call->tx_pending without holding lock Chuck Lever <cel(a)kernel.org> SUNRPC: Treat every TLS error alert as fatal Ameer Hamza <ameer.hamza(a)truenas.com> sunrpc: treat empty auth.unix.gid replies as negative entries Zhiling Zou <zhilinz(a)nebusec.ai> SUNRPC: trace an accepted transport before publishing it Chuck Lever <cel(a)kernel.org> SUNRPC: Resume receiving after a TLS control record Chuck Lever <cel(a)kernel.org> SUNRPC: Reject a TLS alert record that is not two octets Chuck Lever <cel(a)kernel.org> SUNRPC: Reject a socket that already has an svc_sock attached Chris Mason <clm(a)meta.com> sunrpc: pin gss module across auth_domain RCU free Jeff Layton <jlayton(a)kernel.org> SUNRPC: keep the first error in svc_register() Ameer Hamza <ameer.hamza(a)truenas.com> sunrpc: honor the netlink unix_gid NEGATIVE flag Jérémy Jean <Jeremy.Jean(a)oss.cyber.gouv.fr> SUNRPC: fix oversized GSS proxy token copy Chuck Lever <cel(a)kernel.org> SUNRPC: Do not credit control-record octets to the RPC stream Chuck Lever <cel(a)kernel.org> SUNRPC: Copy the deferred RPC Call from the head buffer Aldo Ariel Panzardo <qwe.aldo(a)gmail.com> nfsd: zero NFSv4 COMPOUND tag padding Jeff Layton <jlayton(a)kernel.org> NFSD: validate transport name in listener_set before serv creation Chuck Lever <cel(a)kernel.org> NFSD: Set nn->cld_net before registering the cld pipe Chuck Lever <cel(a)kernel.org> NFSD: Return NFSERR_ISDIR for NFSv2 READ and WRITE on a non-regular file Chuck Lever <cel(a)kernel.org> NFSD: Resolve the recall-any mask names in the trace format Chuck Lever <cel(a)kernel.org> NFSD: Reject an oversized principal hash from nfsdcld Aldo Ariel Panzardo <qwe.aldo(a)gmail.com> nfsd: propagate SETXATTR value decode errors Jérémy Jean <Jeremy.Jean(a)oss.cyber.gouv.fr> nfsd: preflight SEQUENCE replies before accepting a slot Chuck Lever <cel(a)kernel.org> NFSD: Map flex file layout IDs through the request's user namespace Chuck Lever <cel(a)kernel.org> NFSD: map fh_verify() status codes for NFS_ACLv3 replies NeilBrown <neil(a)brown.name> nfsd: honour client-provided attributes for NFS4_CREATE_EXCLUSIVE4_1 Cen Zhang (Microsoft Security FORGE Labs) <blbllhy(a)gmail.com> nfsd: hold cl_lock in client_has_openowners() Chuck Lever <cel(a)kernel.org> NFSD: Fix out-of-bounds read in the rpc_status dump Wentao Liang <vulab(a)iscas.ac.cn> nfsd: Fix id-to-name cache entry leak in idtoname_parse() David Flynn <david.flynn(a)hammerspace.com> nfsd: fetch direct I/O alignment for files handed to the filecache Chuck Lever <cel(a)kernel.org> NFSD: Fail a pool_threads read whose reply does not fit Jeff Layton <jlayton(a)kernel.org> nfsd: don't offer flexfiles layouts when NFSv3 isn't being served Ameer Hamza <ameer.hamza(a)truenas.com> nfsd: don't modify a session slot when replaying its cached reply Chuck Lever <cel(a)kernel.org> NFSD: Don't complete a cld upcall the daemon has not read Chuck Lever <cel(a)kernel.org> NFSD: Do not send CB_RECALL_ANY to NFSv4.0 clients Chuck Lever <cel(a)kernel.org> NFSD: Destroy a recalled delegation the client does not hold Aldo Ariel Panzardo <qwe.aldo(a)gmail.com> NFSD: copy SETXATTR data from all XDR buffer segments Aldo Ariel Panzardo <qwe.aldo(a)gmail.com> nfsd: clear XDR padding in GETXATTR replies Jeff Layton <jlayton(a)kernel.org> NFSD: cap the number of listeners accepted in listener_set Mike Snitzer <snitzer(a)kernel.org> NFS/localio: report the stability a DIO WRITE actually has Mike Snitzer <snitzer(a)kernel.org> NFS/localio: fix nfs_local_dio_misaligned tracepoint Mike Snitzer <snitzer(a)kernel.org> NFS/localio: detect a short read or write before the iterator has moved Jimmy Zuber <jamz(a)amazon.com> NFS: Fix stale negative cache on failed nfs_mkdir() Benjamin Coddington <ben.coddington(a)hammerspace.com> NFSv4/flexfiles: Bound page coalescing on the absolute stripe offset Benjamin Coddington <ben.coddington(a)hammerspace.com> NFSv4/flexfiles: Use the full 64-bit stripe_unit Benjamin Coddington <ben.coddington(a)hammerspace.com> NFSv4/flexfiles: Use the full 64-bit offset for read DS selection Benjamin Coddington <bcodding(a)hammerspace.com> NFSv4/flexfiles: fail I/O to the data server once a lock is lost Benjamin Coddington <ben.coddington(a)hammerspace.com> NFSv4/filelayout: Anchor page coalescing on pattern_offset Benjamin Coddington <ben.coddington(a)hammerspace.com> NFSv4.1/pnfs: suspend pNFS on NFS4ERR_TOOSMALL from LAYOUTGET Trond Myklebust <trond.myklebust(a)hammerspace.com> NFSv4: Fix a regression in the handling of CB_RECALL_ANY Benjamin Coddington <ben.coddington(a)hammerspace.com> NFSv4/pnfs: Free the netid when draining a data-server address list Benjamin Coddington <ben.coddington(a)hammerspace.com> NFSv4/pnfs: bound the CB_NOTIFY_DEVICEID array count before allocating Chuck Lever <cel(a)kernel.org> pnfs/blocklayout: Complete a device upcall when the pipe is closed Chuck Lever <cel(a)kernel.org> pnfs/blocklayout: Complete a device upcall only on its own reply Benjamin Coddington <ben.coddington(a)hammerspace.com> pNFS: Fix CB_NOTIFY_DEVICEID CHANGE to consume ndc_immediate Shakeel Butt <shakeel.butt(a)linux.dev> kernfs: don't lose IN_DELETE_SELF when decoding a file handle Daejun Park <daejun7.park(a)samsung.com> xfs: map pNFS layouts to the end of the extent again Abdifatah Suruur <suruurism(a)gmail.com> smb: client: validate the data area in SMB2_read() Ratnaker Gautam <ratnaker.gautam(a)kuleuven.be> smb: client: validate SMB1 EA list bounds before parsing Ratnaker Gautam <ratnaker.gautam(a)kuleuven.be> smb: client: validate NT transaction response layout and offsets Paulo Alcantara <pc(a)manguebit.org> smb: client: require stable pages for SMB compression Abdifatah Suruur <suruurism(a)gmail.com> smb: client: reject short SESSION_SETUP responses Diego Oliva <diego(a)bynar.io> smb: client: reject short or out-of-range FIND response parameters Diego Oliva <diego(a)bynar.io> smb: client: reject FIND data areas that run past the received response Paulo Alcantara <pc(a)manguebit.org> smb: client: reclaim credits for decrypted reads with no matching mid Dominik Maier <dmnk(a)google.com> smb: client: fix slab-out-of-bounds write in id_mode_to_cifs_acl() Diego Oliva <diego(a)bynar.io> smb: client: fix OOB read in the SMB_FIND_FILE_UNIX name scan Diego Oliva <diego(a)bynar.io> smb: client: fix OOB read of the resume name sent in TRANS2_FIND_NEXT2 Abdifatah Suruur <suruurism(a)gmail.com> smb: client: fix fiemap wild read on empty truncated response Luxiao Xu <rakukuip(a)gmail.com> smb: client: fix buffer overflow in SMB2_tcon() Paulo Alcantara <pc(a)manguebit.org> smb: client: don't resurrect an exiting tcon from cached dir workers Ratnaker Gautam <ratnaker.gautam(a)kuleuven.be> smb: client: bound POSIX lock data area by response length Stefan Metzmacher <metze(a)samba.org> smb: smbdirect: fix buffer length underflow in RDMA transfers VeroFess <coderzeng(a)hotmail.com> smb: server: size directory name conversion buffer correctly Borislav Petkov (AMD) <bp(a)alien8.de> x86/bugs: Adapt SRSO mitigation to Zen6 Darrick J. Wong <djwong(a)kernel.org> xfs: reattach dquots after changing inode ids Darrick J. Wong <djwong(a)kernel.org> xfs: range-check bc_levels array access in scrub tracepoints Darrick J. Wong <djwong(a)kernel.org> xfs: propagate errors while checking null siblings Darrick J. Wong <djwong(a)kernel.org> xfs: opportunistically skip btree block checks Darrick J. Wong <djwong(a)kernel.org> xfs: only written file data blocks can be shared Darrick J. Wong <djwong(a)kernel.org> xfs: never reset the default quota timer Darrick J. Wong <djwong(a)kernel.org> xfs: init inode number for tracepoint Darrick J. Wong <djwong(a)kernel.org> xfs: fix data fork block count check in xrep_inode_blockcounts Darrick J. Wong <djwong(a)kernel.org> xfs: fix correction of unwritten extents in quota file data fork Darrick J. Wong <djwong(a)kernel.org> xfs: don't try to scrub self-referential dirent in metapath checker Darrick J. Wong <djwong(a)kernel.org> xfs: don't try to repair rtsummary if the summary file isn't computed Darrick J. Wong <djwong(a)kernel.org> xfs: don't subtract excess usage twice when computing agf_btreeblks Darrick J. Wong <djwong(a)kernel.org> xfs: don't set a metadata directory's parent to sb_rootino Darrick J. Wong <djwong(a)kernel.org> xfs: don't scan across metadata/regular directory trees for dirents Darrick J. Wong <djwong(a)kernel.org> xfs: don't rescan ifree and icount when frozen Darrick J. Wong <djwong(a)kernel.org> xfs: don't queue rmap update twice when reaping a fork Darrick J. Wong <djwong(a)kernel.org> xfs: don't overrun incore inode when cleaning attr forks Darrick J. Wong <djwong(a)kernel.org> xfs: don't clear COWEXTSIZE on directories on reflink filesystems Darrick J. Wong <djwong(a)kernel.org> xfs: don't allow sm_agno for non-group metadir path checking Darrick J. Wong <djwong(a)kernel.org> xfs: complain loudly when dirtree checker finds broken links Darrick J. Wong <djwong(a)kernel.org> xfs: clear set[ug]id mode bits when zapping attr fork Darrick J. Wong <djwong(a)kernel.org> xfs: clarify various parts of the bitmap API Darrick J. Wong <djwong(a)kernel.org> xfs: check for termination during rmap btree walk Darrick J. Wong <djwong(a)kernel.org> xfs: check for fragments when full-extent sharing matches Aldo Ariel Panzardo <qwe.aldo(a)gmail.com> xfs: bound inode fork length against the fork size during log recovery Aldo Ariel Panzardo <qwe.aldo(a)gmail.com> xfs: bound da-node entry count against the correct geometry Darrick J. Wong <djwong(a)kernel.org> xfs: always zero the whole shortform header when zeroing attr fork Darrick J. Wong <djwong(a)kernel.org> xfs: always report scrub errors in tracepoints Darrick J. Wong <djwong(a)kernel.org> xfs: always report inode repair setup failures Darrick J. Wong <djwong(a)kernel.org> xfs: always forget cached ACLs if the attr fork swap succeeds Darrick J. Wong <djwong(a)kernel.org> xfs: abort directory tree repair whenever dl->aborted is set Darrick J. Wong <djwong(a)kernel.org> xfs: update quota flags on secondary supers when metadir enabled Darrick J. Wong <djwong(a)kernel.org> xfs: rescan the AGs if incore delalloc counter is negative Darrick J. Wong <djwong(a)kernel.org> xfs: release ip after unlinked list store failure Aldo Ariel Panzardo <qwe.aldo(a)gmail.com> xfs: reject remote xattr entries with an out-of-range value length Aldo Ariel Panzardo <qwe.aldo(a)gmail.com> xfs: reject out-of-range attribute value lengths in xfs_attr_copy_value Darrick J. Wong <djwong(a)kernel.org> xfs: reject absurdly large xattr value lengths in xchk_xattr_actor Darrick J. Wong <djwong(a)kernel.org> xfs: reduce new btree slack factor if free space is negative Andrea Parri <parri.andrea(a)gmail.com> rtnetlink: wait for RCU readers in rtnl_link_unregister() Florian Westphal <fw(a)strlen.de> netfilter: nft_payload: restrict checksum offsets to known values Darrick J. Wong <djwong(a)kernel.org> xfs: fix xchk_stats_estimate_bufsize to allow for the trailing null Darrick J. Wong <djwong(a)kernel.org> xfs: actually check XFS_DIFLAG2_METADATA for metadata btree data forks Darrick J. Wong <djwong(a)kernel.org> xfs: adjust checks for cross-AG reaping issues Darrick J. Wong <djwong(a)kernel.org> xfs: cross-reference the primary superblock Darrick J. Wong <djwong(a)kernel.org> xfs: jump out of xchk_bmap_check_rmap if fatal signals Darrick J. Wong <djwong(a)kernel.org> xfs: mark overfull dabtree node blocks as corrupt Darrick J. Wong <djwong(a)kernel.org> xfs: check fork type against dabtree block magic number Darrick J. Wong <djwong(a)kernel.org> xfs: abort dirtree repair if the live update hook dies Darrick J. Wong <djwong(a)kernel.org> xfs: fix revalidation of xchk_dquot_iter cached mappings Darrick J. Wong <djwong(a)kernel.org> xfs: bail out of directory tree repairs on error Darrick J. Wong <djwong(a)kernel.org> xfs: assign an owner to scrub_stats_fops Darrick J. Wong <djwong(a)kernel.org> xfs: allow softlimit with no hardlimit in quota scrub Darrick J. Wong <djwong(a)kernel.org> xfs: fix lost errno returned from xfarray_foliosort Darrick J. Wong <djwong(a)kernel.org> xfs: don't repair fs summary counters with garbage Darrick J. Wong <djwong(a)kernel.org> xfs: fix skipped inode mask handling in iscan Darrick J. Wong <djwong(a)kernel.org> xfs: don't proceed with xattr repair if the live update fails Eric Sandeen <sandeen(a)redhat.com> xfs: validate rc_domain in xchk_rtrefcount_mergeable Darrick J. Wong <djwong(a)kernel.org> xfs: don't fix the directory tree if live update fails Darrick J. Wong <djwong(a)kernel.org> xfs: flag excessive delalloc rt extents as corruption Darrick J. Wong <djwong(a)kernel.org> xfs: zero out di_metatype when removing the metadir file iflag Darrick J. Wong <djwong(a)kernel.org> xfs: don't pass iget failures up when marking ondisk inodes Darrick J. Wong <djwong(a)kernel.org> xfs: always reset incore attr fork buffer when resetting fork Darrick J. Wong <djwong(a)kernel.org> xfs: fix inode btree repair when a cluster is larger than a chunk Darrick J. Wong <djwong(a)kernel.org> xfs: actually report corrupt xattrs as XFAIL during cross-referencing Darrick J. Wong <djwong(a)kernel.org> xfs: fix buffer overflow in corrupt inline attr structure Darrick J. Wong <djwong(a)kernel.org> xfs: fix unnecessary dapos truncation in xchk_dir_walk Darrick J. Wong <djwong(a)kernel.org> xfs: actually lock the metafile reservation when adjusting after repair Darrick J. Wong <djwong(a)kernel.org> xfs: avoid cross-rtgroup reaping after a repair Darrick J. Wong <djwong(a)kernel.org> xfs: online quotacheck must dirty dquot if enforcement adjustments needed Darrick J. Wong <djwong(a)kernel.org> xfs: fix buffer overruns in xfs_ioc_attr_list Darrick J. Wong <djwong(a)kernel.org> xfs: fix missing xfs_qm_adjust_dqlimits call in quotacheck repair Darrick J. Wong <djwong(a)kernel.org> xfs: fix xfs_rename_space_res for non-pptr filesystems Darrick J. Wong <djwong(a)kernel.org> xfs: fix ondisk symlink target validation in xrep_dinode_check_dfork Darrick J. Wong <djwong(a)kernel.org> xfs: compute the correct fdblocks/frextents for repair when they're negative Darrick J. Wong <djwong(a)kernel.org> xfs: mark cow extents bad if there's no rmap mapping for them Darrick J. Wong <djwong(a)kernel.org> xfs: clear the symlink zapped flag if inline symlink is ok Amir Goldstein <amir73il(a)gmail.com> ovl: skip copy up of empty security.capability Chris Mason <mason(a)kernel.org> ovl: set the revalidate flags after d_instantiate() Hungyu Lin <dennylin0707(a)gmail.com> ovl: reserve space for the casefolded name terminator Chris Mason <mason(a)kernel.org> ovl: read the nlink xattr of every indexed non-dir Amir Goldstein <amir73il(a)gmail.com> ovl: fortify ovl_copy_xattr() against underlying layer modifications Amir Goldstein <amir73il(a)gmail.com> ovl: fix mount setup failing when override_creds drops CAP_SYS_ADMIN Chris Mason <mason(a)kernel.org> ovl: fix a torn path in ovl_get_redirect() Chris Mason <mason(a)kernel.org> ovl: do not copy up an xattr value that was never read Chris Mason <mason(a)kernel.org> ovl: do not copy up a dentry that was removed Chris Mason <mason(a)kernel.org> ovl: check the casefold flag of directories only Chris Mason <mason(a)kernel.org> ovl: check that the parents of volatile/dirty are dirs Chris Mason <mason(a)kernel.org> ovl: always encode the origin fh when index is enabled Chris Mason <mason(a)kernel.org> ovl: use the pinned upper dir in ovl_fix_origin() Chris Mason <mason(a)kernel.org> ovl: take a snapshot of the name for copy up Chris Mason <mason(a)kernel.org> ovl: set OVL_WHITEOUTS before publishing the upper dir Chris Mason <mason(a)kernel.org> ovl: hold a reference on the parent in readdir Weiming Shi <bestswngs(a)gmail.com> smb: client: stop processing a read response after a receive error Eduard Zateev <hackerowskiy(a)gmail.com> smb: client: hold server info until cifsd exits Diego Oliva <diego(a)bynar.io> smb: client: fix OOB last_entry pointer from unbounded LastNameOffset Cen Zhang <zzzccc427(a)gmail.com> ocfs2: snapshot dentry names in file and setattr traces Cen Zhang <zzzccc427(a)gmail.com> ocfs2: pin refcount trees before dropping the lookup lock Jiaming Zhang <r772577952(a)gmail.com> ocfs2: fix chunk number of the first chunk in a local quota file Cen Zhang <zzzccc427(a)gmail.com> ocfs2: cancel quota sync work before freeing quota info Joseph Qi <joseph.qi(a)linux.alibaba.com> ocfs2/dlm: hold the lookup reference across convert AST enqueue Cen Zhang <zzzccc427(a)gmail.com> ocfs2/dlm: hold a lock reference across grant AST enqueue Cen Zhang <zzzccc427(a)gmail.com> ocfs2/heartbeat: unlink live slots when their node is missing Sean Young <sean(a)mess.org> media: rc: Fix ABBA deadlock by making locks more fine grained Sean Young <sean(a)mess.org> media: rc: Fix use after free in bpf progs Sean Young <sean(a)mess.org> media: rc: After rc_unregister_device() timers can be re-armed Sean Young <sean(a)mess.org> media: rc: Use after free in ir_raw_event_handle() Sean Young <sean(a)mess.org> media: rc: mce_kbd: Fix inconsistent locking of keylock Sean Young <sean(a)mess.org> media: rc: Fix race condition during rc_register_device() Sean Young <sean(a)mess.org> media: rc: Fix race between bpf(BPG_PROG_ATTACH) and device unregister Weigang He <geoffreyhe2(a)gmail.com> media: rc: fintek-cir: process a full RX buffer instead of overflowing it Sean Young <sean(a)mess.org> media: rc: Ensure registered is cleared in error path Sean Young <sean(a)mess.org> media: rc: Ensure that rc_unregister_device() does not free input device Jérémy Jean <Jeremy.Jean(a)oss.cyber.gouv.fr> nvmet-auth: serialize access to DH-HMAC-CHAP state to fix UAF Janne Grunau <j(a)jannau.net> nvmem: core: Fix OOB read for bit offsets of more than one byte Danish Khateeb <danishkhateeb03(a)gmail.com> pps: generators: don't use the driver's info after unregister Myeonghun Pak <mhun512(a)gmail.com> power: supply: sbs-battery: disable polling before supply teardown Myeonghun Pak <mhun512(a)gmail.com> power: supply: pf1550: drain IRQ work before unregistering supplies Bryan O'Donoghue <bryan.odonoghue(a)linaro.org> phy: core: Fix race-condition between _of_phy_get() and try_module_get() Nickolai Zeldovich <nickolai(a)csail.mit.edu> resource: report a devm_request_resource() conflict under the lock Weibin Liu <liuwb(a)xiaopeng.com> spi: spi-pci1xxxx: quiesce DMA engines on transfer timeout YANXIN LI <fadouse(a)pm.me> ufs: use u64 for directory size in ufs_last_byte Nguyen Quang Le Kien <khiemtranzo532001(a)gmail.com> usb: gadget: fix refcount underflow in gadgetfs_bind() error path Andrea Parri <parri.andrea(a)gmail.com> vfio/nvgrace-gpu: Use a core-only open_device in fallback mode Weiming Shi <bestswngs(a)gmail.com> virtio_net: atomically disable rx mode work Zhao Li <enderaoelyther(a)gmail.com> wifi: mt76: mt7996: unlink TWT flow if the MCU rejects the agreement Rosen Penev <rosenp(a)gmail.com> wifi: ath9k: delete channel-context timers on deinit Yuchao Zhang <ndaugoing(a)gmail.com> xen-blkfront: unbind irq before tearing down ring and shadow requests Tianchu Chen <flynnnchen(a)tencent.com> staging: rtl8723bs: fix protected RX frame validation in decrypt path Igor Putko <igorpetindev(a)gmail.com> serial: core: shut down initialized port on removal Fan Wu <fanwu01(a)zju.edu.cn> scsi: dc395x: sync the waiting_timer before freeing the host Kyle Zeng <kylebot(a)openai.com> net: sched: prevent scheduling deactivated qdiscs Harshit Mogalapalli <harshit.m.mogalapalli(a)oracle.com> mtd: virt-concat: unlink discarded items before freeing Harshit Mogalapalli <harshit.m.mogalapalli(a)oracle.com> mtd: virt-concat: unlink concat node before freeing it Daehyeon Ko <4ncienth(a)gmail.com> mshv_vtl: detach poll waiter on POLLFREE Ruide Cao <caoruide123(a)gmail.com> mptcp: hold MP_JOIN msk ref when cloning reqsk Vernon Yang <yanglincheng(a)kylinos.cn> mm: khugepaged: fix swap entry value to folio_pfn() Vernon Yang <yanglincheng(a)kylinos.cn> mm: khugepaged: fix folio is used after pte_unmap_unlock() Vernon Yang <yanglincheng(a)kylinos.cn> mm: khugepaged: fix folio is used after folio_put/unlock() Zhang Yi <yi.zhang(a)huawei.com> mm/truncate: look up the end-edge straddler by index Imre Kaloz <kaloz(a)kernel.org> mm/slab: sample slab_state once in kmem_cache_destroy() Zi Yan <ziy(a)nvidia.com> mm/rmap: don't discard lazyfree THPs at PMD level Fan Wu <fanwu01(a)zju.edu.cn> media: s5p-mfc: use timer_shutdown_sync() for the self-rearming watchdog Rik van Riel <riel(a)surriel.com> media: redrat3: fix UAF in probe error path leaving rc device registered Balakrishnan Sambath <balakrishnan.s(a)microchip.com> media: microchip-isc: take a reference on the parsed endpoints Cong Nguyen <congnt264(a)gmail.com> media: microchip-csi2dc: fix async notifier leak on probe error path Fan Wu <fanwu01(a)zju.edu.cn> media: marvell: mcam: stop DMA and cancel s_bh_work before freeing DMA buffers Fan Wu <fanwu01(a)zju.edu.cn> media: imx-jpeg: cancel timeout worker when streaming stops Shuangpeng Bai <shuangpeng.kernel(a)gmail.com> media: gspca: use vb2_video_unregister_device() on disconnect Myeonghun Pak <mhun512(a)gmail.com> media: cx23885: unregister DVB bus when SP2 CI setup fails Amit Machhiwal <amachhiw(a)linux.ibm.com> KVM: PPC: Book3S HV: Add SRCU protection for virtual-mode HPT hcalls David Woodhouse <dwmw(a)amazon.co.uk> KVM: pfncache: use a dedicated invalidation sequence for cache refresh Sean Christopherson <seanjc(a)google.com> KVM: guest_memfd: Gracefully handle xarray errors when binding a memslot Nicolin Chen <nicolinc(a)nvidia.com> iommu/arm-smmu-v3: Disable the impl before disabling the SMMU on shutdown Andrea Parri <parri.andrea(a)gmail.com> iomap: don't resubmit an ioend after ->writeback_submit() failed Kyle Zeng <kylebot(a)openai.com> io_uring/io-wq: save worker type before dropping its reference Yousef Alhouseen <alhouseenyousef(a)gmail.com> HID: hiddev: keep state alive through disconnect unlock Richard Patel <ripatel(a)wii.dev> genirq: Move interrupt thread exit_work object to irqaction Richard Patel <ripatel(a)wii.dev> genirq: Defer kfree(irqaction) until irq_thread_dtor() finishes Eric Biggers <ebiggers(a)kernel.org> fsverity: Set S_VERITY only after rollback is no longer possible Ngoc Quy <ngocquy0700(a)gmail.com> fs/proc/task_mmu: pin mm_users in do_pagemap_scan() Zhao Gongyi <zhaogongyi(a)bytedance.com> filelock: keep superblock active through delegation wait Xiang Mei <xmei5(a)asu.edu> fbdev: udlfb: don't rebuild the mode list while the framebuffer is in use Yibo Tan <lhfff(a)tju.edu.cn> fbdev: atmel_lcdfb: Prevent FIFO work after removal Osama Abdelkader <osama.abdelkader(a)gmail.com> drm/panthor: Fix TOCTOU race between GROUP_REGISTERED check and erase Bui Viet Dung <dungvn2345(a)gmail.com> Bluetooth: hci_vhci: Pin module for debugfs file operations Fan Wu <fanwu01(a)zju.edu.cn> ASoC: amd: ps: fix snd_acp63_remove() teardown ordering Sung Byeongchan <tjdqudcks0424(a)naver.com> ALSA: pcmtest: handle multiple wraps in random capture fill Takashi Iwai <tiwai(a)suse.de> ALSA: emux: Fix UAF of soundfont zones at note-on Takashi Iwai <tiwai(a)suse.de> ALSA: control: Fix UAF in snd_ctl_elem_add() on card disconnect Eva Crystal <0xiviel(a)gmail.com> accel/amdxdna: clear the mailbox channel pointer when starting it fails Frank Zhang <rmxpzlb(a)gmail.com> rust: rcpufreq_dt: add module alias Priya Bala Govindasamy <pgovind2(a)uci.edu> rust: module_param: Fix potentially incorrect access of `SetOnce<T>` Alice Ryhl <aliceryhl(a)google.com> rust: fwctl: declare cfi_encoding for fwctl_rpc_scope Mehmet Koseoglu <mehmet.mkoseoglu(a)gmail.com> rust: cpufreq: reject NULL from cpufreq_cpu_get() Andreas Hindborg <a.hindborg(a)kernel.org> rust: configfs: fix data offset calculation for subsystem callbacks FUJITA Tomonori <fujita.tomonori(a)gmail.com> rust: bug: update the SAFETY comment for warn_slowpath_fmt() on UML FUJITA Tomonori <fujita.tomonori(a)gmail.com> rust: bug: pass TAINT_WARN to warn_slowpath_fmt() on UML Andreas Hindborg <a.hindborg(a)kernel.org> rust: block: require `Sync` for `Operations::QueueData` Andreas Hindborg <a.hindborg(a)kernel.org> rust: block: fix `Send` bound for `GenDisk` Eliot Courtney <ecourtney(a)nvidia.com> rust: bitmap: restrict bitmap length to at most i32::MAX Lorenzo Stoakes <ljs(a)kernel.org> rust: bindings: fix VM_MAYSHARE value Miguel Ojeda <ojeda(a)kernel.org> rust: bindings: fix `VM_MAYSHARE` blocklist entry Miguel Ojeda <ojeda(a)kernel.org> objtool/rust: add one more `noreturn` Rust function for Rust 1.101.0 Karl Mehltretter <kmehltretter(a)gmail.com> klist: avoid accesses after waking klist_remove() Ping Cheng <ping.cheng(a)wacom.com> HID: wacom: Write shared touch initial status only once Ping Cheng <ping.cheng(a)wacom.com> HID: wacom: Setup SW_MUTE_DEVICE according to the order of input registration Lee Jones <lee(a)kernel.org> HID: wacom: Redesign shared sibling data lifecycle Lee Jones <lee(a)kernel.org> HID: wacom: Fix Use-After-Free in wacom_bamboo_pad Lee Jones <lee(a)kernel.org> HID: wacom: Fix Use-After-Free in wacom_intuos_pad Lee Jones <lee(a)kernel.org> HID: wacom: Advertise SW_MUTE_DEVICE capability prior to registration Lee Jones <lee(a)kernel.org> HID: wacom: Use hdev->product in wacom_setup_touch_input_capabilities Harald Freudenberger <freude(a)linux.ibm.com> s390/zcrypt: Guard domain index uses against speculative bypass Harald Freudenberger <freude(a)linux.ibm.com> s390/zcrypt: Fix out-of-bounds ptr advance in cca_query_crypto_facility() Harald Freudenberger <freude(a)linux.ibm.com> s390/zcrypt: Fix and improve zcrypt reply message verification checks Christian Borntraeger <borntraeger(a)linux.ibm.com> s390/vmcp: Initialize full session info to zero Heiko Carstens <hca(a)linux.ibm.com> s390/signal: Fix incorrect return address in signal frame Heiko Carstens <hca(a)linux.ibm.com> s390/probes: Fix wrong opcode for cgrb fixup Heiko Carstens <hca(a)linux.ibm.com> s390/kprobes: Prevent kprobes on instructions with exception table entry Heiko Carstens <hca(a)linux.ibm.com> s390/extable: Fix mvcos instruction decoding Sumanth Korikkar <sumanthk(a)linux.ibm.com> s390/cpum_cf: Check session mask before cpu offline Tobias Schumacher <ts(a)linux.ibm.com> s390/pci: Add error cleanup in zpci_directed_irq_init() Tobias Schumacher <ts(a)linux.ibm.com> s390/pci: Fix use-after-free race in zpci floating interrupt cleanup Tobias Schumacher <ts(a)linux.ibm.com> s390/pci: Fix resource leak in zpci MSI setup Tobias Schumacher <ts(a)linux.ibm.com> s390/pci: Fix MSI directed-mode teardown IRQ bit count Tobias Schumacher <ts(a)linux.ibm.com> s390/pci: Fix double-free and NULL deref in zpci MSI domain cleanup Wentao Liang <vulab(a)iscas.ac.cn> drm/msm: Fix vm_bo use-after-free in with_vm_locks() Niklas Cassel <cassel(a)kernel.org> ata: sata_fsl: Fix use-after-free of host_priv on probe() failure Wentao Liang <vulab(a)iscas.ac.cn> ASoC: audio-graph-card2: Fix use-after-free in audio_graph2_link_c2c() Binbin Deng <18983559317(a)163.com> apparmor: fix a use-after-free in aa_lookupn_ns() Josef Bacik <josef(a)toxicpanda.com> mm/hugetlb: fix use-after-free of a new anon folio David Hildenbrand (Arm) <david(a)kernel.org> mm/hugetlb: fix use-after-free in hugetlb_mfill_atomic_pte() Yibo Tan <lhfff(a)tju.edu.cn> media: ipu-bridge: Fix use-after-free in IVSC error path Deepanshu Kartikey <kartikey406(a)gmail.com> media: imon: fix use-after-free in display_close via dev_dbg Anuj Bolewar <bolewara(a)gmail.com> media: hackrf: fix use-after-free in hackrf_alloc_urbs() error path Pei Xiao <xiaopei01(a)kylinos.cn> media: cx23885: Fix use-after-free in cx23885_finidev due to race condition Fan Wu <fanwu01(a)zju.edu.cn> media: au0828: fix use-after-free in bulk_timeout timer on disconnect Chuck Lever <cel(a)kernel.org> lockd: Fix use-after-free in nlmsvc_retry_blocked Günther Noack <gnoack(a)google.com> landlock: Fix superblock use-after-free in release_inode() Nirmoy Das <nirmoyd(a)nvidia.com> iommufd: Fix event queue release use-after-free Yehyeong Lee <yhlee(a)isslab.korea.ac.kr> nvmet-fc: fix use-after-free in nvmet_fc_ls_create_connection() Daejun Park <daejun7.park(a)samsung.com> nvmet: fix use-after-free of the old registrant in nvmet_pr_preempt() Mario Limonciello <mario.limonciello(a)amd.com> platform/x86/amd: hfi: Fix a use-after-free when unloading the driver Denis Benato <denis.benato(a)linux.dev> platform/x86: asus-wmi: fix use-after-free unregistering kbd_led led Fan Wu <fanwu01(a)zju.edu.cn> PM: EM: Fix use-after-free of perf domain in netlink doit handlers Danish Khateeb <danishkhateeb03(a)gmail.com> pps: generators: fix use-after-free when closing a removed device James Kim <james010kim(a)gmail.com> rapidio: mport_cdev: fix use-after-free in mport_mm_close() Guangshuo Li <lgs201920130244(a)gmail.com> RDMA/irdma: avoid use-after-free in icrdma_remove Deep Shah <deepshah146(a)gmail.com> RDMA/uverbs: Fix DMABUF use-after-free during ufile cleanup Tejun Heo <tj(a)kernel.org> sched_ext: Fix use-after-free of a local reenq node left on an inactive cpu Henry Martin <bsdhenrymartin(a)gmail.com> smb: client: fix use-after-free in cifs_ses_add_channel() Diego Oliva <diego(a)bynar.io> smb: client: fix use-after-free infoleak via the readdir resume name AngeloGioacchino Del Regno <angelogioacchino.delregno(a)collabora.com> spmi: Fix potential use-after-free by grabbing of_node reference Zijing Yin <yzjaurora(a)gmail.com> SUNRPC: fix netns use-after-free in write_gssp() Andreas Wendleder <gonsolo(a)gmail.com> wifi: b43: fix use-after-free in b43_bcma_remove() Daehyeon Ko <4ncienth(a)gmail.com> cgroup: serialize migrations of newly forked processes Eric Dumazet <edumazet(a)kernel.org> vlan: restore HW VLAN tag insertion with reorder_hdr off Dairui Zhang <zhangdairui(a)gmail.com> ksmbd: verify transform SessionId matches the decrypted header Namjae Jeon <linkinjeon(a)kernel.org> ksmbd: validate security descriptor offsets before pointer arithmetic Sung Byeongchan <tjdqudcks0424(a)naver.com> ksmbd: validate AppInstanceId takeover target Karl Mehltretter <kmehltretter(a)gmail.com> ksmbd: use u8 for SMB2 oplock level values DaeMyung Kang <charsyam(a)gmail.com> ksmbd: return end of file for reads past a named stream's data Michail Andreas Michalopoulos <mike.michalo(a)gmail.com> ksmbd: restore Kerberos logins with released ksmbd-tools Abdifatah Suruur <suruurism(a)gmail.com> ksmbd: reserve space for the UTF-16 terminator in stream info Namjae Jeon <linkinjeon(a)kernel.org> ksmbd: reclaim ended sessions on logoff and expiration Namjae Jeon <linkinjeon(a)kernel.org> ksmbd: prevent stale data from being written by SMB2 WRITE requests Namjae Jeon <linkinjeon(a)kernel.org> ksmbd: prevent share root removal through empty paths Namjae Jeon <linkinjeon(a)kernel.org> ksmbd: prevent session binding in compound requests DaeMyung Kang <charsyam(a)gmail.com> ksmbd: preserve unreadable named streams on open Namjae Jeon <linkinjeon(a)kernel.org> ksmbd: limit sessions on each connection Jan Koester <j.koester(a)act-marketing.de> ksmbd: ignore network devices of other namespaces Namjae Jeon <linkinjeon(a)kernel.org> ksmbd: hold a connection reference for each session channel Ian Bridges <icb(a)fastmail.org> ksmbd: fix session reference leak on compounded SESSION_SETUP Cen Zhang (Microsoft) <cenzhang(a)linux.microsoft.com> ksmbd: fix parent dentry lifetime in directory enumeration Giorgi Kobakhia <gkobakhi(a)asu.edu> ksmbd: fix overflow in dacloffset bounds check in build_sec_desc() Dairui Zhang <zhangdairui(a)gmail.com> ksmbd: fix OOB read and cross-share confusion in ksmbd_validate_name_reconnect() Namjae Jeon <linkinjeon(a)kernel.org> ksmbd: fix extended session security negotiation for raw NTLMSSP Namjae Jeon <linkinjeon(a)kernel.org> ksmbd: drain session procfs readers before dropping table references Aamir Ahmed <elb12345(a)hotmail.co.uk> ksmbd: deny access for an empty DACL instead of granting the request Namjae Jeon <linkinjeon(a)kernel.org> ksmbd: defer connection scavenging while session locks are busy DaeMyung Kang <charsyam(a)gmail.com> ksmbd: avoid restoring only in-memory EOF after allocation change Michail Andreas Michalopoulos <mike.michalo(a)gmail.com> ksmbd: accept share config responses from ksmbd-tools before 3.5.3 David Heidelberg <david(a)ixit.cz> backlight: qcom-wled: Fix WLED3 brightness register stride David Heidelberg <david(a)ixit.cz> backlight: qcom-wled: Fix unbalanced OVP IRQ enable at probe David Heidelberg <david(a)ixit.cz> backlight: qcom-wled: Fix NULL pointer dereference in wled_remove() Myeonghun Pak <mhun512(a)gmail.com> backlight: lm3630a: Cancel delayed work before destroying workqueue Kameron Carr <kameroncarr(a)linux.microsoft.com> Drivers: hv: vmbus: Bounds check the shared ring buffer indices Mario Peter <mario.peter(a)leica-geosystems.com> driver core: take parent lock in async device attach Johan Hovold <johan(a)kernel.org> driver core: fix parent lock use-after-free on USB disconnect Josef Bacik <josef(a)toxicpanda.com> driver core: Limit the messages on a refused uevent Johan Hovold <johan(a)kernel.org> driver core: take parent lock on deferred probe Jamal Hadi Salim <jhs(a)mojatatu.com> net/sched: act_ife: do not consume the inner header on egress Antonio Quartulli <antonio(a)mandelbit.com> net/sched: fix packet reordering on requeue owen kwan <owen(a)verialabs.com> net/sched: sch_teql: fix use-after-free on lower qdisc drop Jamal Hadi Salim <jhs(a)mojatatu.com> net/sched: sch_teql: fix slaves_lock IRQ deadlock Yuhang Zheng <z1652074432(a)gmail.com> net/sched: cls_flower: avoid stale mask references after delete Jamal Hadi Salim <jhs(a)mojatatu.com> net/sched: cls_bpf: accept dev-bound programs on shared blocks Hengyu Liang <hengyul(a)cs.unc.edu> serial: core: fix TIOCSSERIAL and TIOCSERCONFIG on uninitialised ports Lorenzo Pieralisi <lpieralisi(a)kernel.org> irqchip/gic-v5: Fix standalone IRSes OF probe Lorenzo Pieralisi <lpieralisi(a)kernel.org> dt-bindings: interrupt-controller: gicv5: Relax IRS properties constraints Darrick J. Wong <djwong(a)kernel.org> xfs: fix integer overflow problem when setting large free areas Bui Viet Dung <dungvn2345(a)gmail.com> wwan: wwan_hwsim: Pin module for debugfs file operations Giorgi Kobakhia <gkobakhi(a)asu.edu> udf: fix return value for non-recorded-allocated extents in udf_map_block() Jonathan Gopel <jgopel(a)gmail.com> thunderbolt: Do not RPM complete unrelated subtrees on unplug Fredric Cover <fredric.cover.lkernel(a)gmail.com> smb: client: fix early procfs exposure race Zikang Gao <2715417602(a)qq.com> smb: client: do not pass a NULL buf to is_oplock_break() Cen Zhang <zzzccc427(a)gmail.com> ocfs2: publish the filecheck owner before adding sysfs attributes Cen Zhang <zzzccc427(a)gmail.com> ocfs2: pin owning modules for open debugfs files Cen Zhang <zzzccc427(a)gmail.com> ocfs2: drain quorum work before removing the cluster Cen Zhang <zzzccc427(a)gmail.com> ocfs2/dlm: drain join handlers before releasing module text Ameer Hamza <ameer.hamza(a)truenas.com> nfsd: fix race between client_info_show() and free_client() Wei Jie Law <law.wei.jie(a)gt.tech.gov.sg> net: usb: pegasus: do not advance rx_skb->data on dropped frames Kaho Jiang <kj2864(a)nyu.edu> net: ipv4: add zero check for snd_cwnd_clamp Aleksandr Nogikh <nogikh(a)google.com> media: usbtv: fix null-pointer dereference on disconnect Xiang Mei <xmei5(a)asu.edu> media: go7007: only set audio_enabled if go7007_snd_init() succeeded Xiang Mei <xmei5(a)asu.edu> media: em28xx: reject audio endpoint with zero packet size Myeonghun Pak <mhun512(a)gmail.com> media: cx88: Disable PCI device on MPEG initialization failure Xiang Mei <xmei5(a)asu.edu> libceph: bound mon_command ack decode to front len Yongjun Gwon <d3bugee(a)gmail.com> ksmbd: serialize directory emptiness checks with readdir Andrea Parri <parri.andrea(a)gmail.com> kcsan: Avoid division by zero in kcsan_prandom_u32_max() Fang Xieyan <fangxy(a)xiaopeng.com> kcov: ignore an out-of-range comparison count in write_comp_data() Xiang Mei <xmei5(a)asu.edu> fuse: don't BUG when the copy buffer is exhausted Yuanfu Xie <yuanfuxie(a)stu.pku.edu.cn> ceph: fail readdir when the MDS reply carries no dirfrag Baokun Li <libaokun(a)linux.alibaba.com> blk-crypto: fix NULL deref and UAF in __blk_crypto_evict_key() Karl Mehltretter <kmehltretter(a)gmail.com> ARM: 9524/1: mm: align hugetlb mappings to the huge page size ck.chang <ck.chang(a)mediatek.com> wifi: mt76: mt7925: fix reset panic caused by the WM2 rx irq mask Radek Podgorny <radek(a)podgorny.cz> Bluetooth: forget a peer's RPA once it advertises its identity address YuanZhe Liu <25031212351(a)stu.xidian.edu.cn> ALSA: line6: Clear prev_fbuf on capture buffer release Biju Das <biju.das.jz(a)bp.renesas.com> clk: renesas: r9a08g046: Propagate clk rate for ETH TX mux clocks Christian Brauner <brauner(a)kernel.org> fork: don't create io threads once PF_POSTCOREDUMP is set Christian Brauner <brauner(a)kernel.org> fork: move the coredump and exec checks into create_io_thread() Christian Brauner <brauner(a)kernel.org> exec: cancel io_uring requests before de_thread() Jens Axboe <axboe(a)kernel.dk> io_uring/timeout: don't lose a cancel as io-wq arms a timeout Jens Axboe <axboe(a)kernel.dk> io_uring/timeout: don't flush with the sequence behind the last flush Jens Axboe <axboe(a)kernel.dk> io_uring/timeout: don't put a sequence target behind the last flush Josef Bacik <josef(a)toxicpanda.com> io_uring: look up the file before queueing to io-wq Josef Bacik <josef(a)toxicpanda.com> io_uring/timeout: don't end a linked timeout with 1 Josef Bacik <josef(a)toxicpanda.com> io_uring/timeout: no ABS update of multishot timeouts Josef Bacik <josef(a)toxicpanda.com> io_uring/net: don't retry recv on uncommitted buffers Josef Bacik <josef(a)toxicpanda.com> io_uring: don't pass restart error codes to userspace Josef Bacik <josef(a)toxicpanda.com> io_uring/openclose: keep the lock in io_pipe_fixed() Josef Bacik <josef(a)toxicpanda.com> io_uring/sqpoll: let the thread sleep on disabled rings Josef Bacik <josef(a)toxicpanda.com> io_uring/kbuf: handle index wrap in last buffer check Josef Bacik <josef(a)toxicpanda.com> io_uring/zcrx: fix buffer offsets in areas above 4GB Josef Bacik <josef(a)toxicpanda.com> io_uring/napi: don't busy poll past an expired timeout Josef Bacik <josef(a)toxicpanda.com> io_uring/napi: make stale entries time out after 60s Josef Bacik <josef(a)toxicpanda.com> io_uring/wait: no early -ETIME if min_wait finds work Josef Bacik <josef(a)toxicpanda.com> io_uring/timeout: use the right clock for ABS updates Josef Bacik <josef(a)toxicpanda.com> io_uring/timeout: keep repeat count on multishot update Josef Bacik <josef(a)toxicpanda.com> io_uring/timeout: don't skip over reached sequences Josef Bacik <josef(a)toxicpanda.com> io_uring/fdinfo: fix CQE dump of CQE32 rings Josef Bacik <josef(a)toxicpanda.com> io_uring/register: keep 128b SQEs intact on resize Josef Bacik <josef(a)toxicpanda.com> io_uring/register: handle index wrap when resizing Josef Bacik <josef(a)toxicpanda.com> io_uring/register: don't wrap 32b CQEs when resizing Josef Bacik <josef(a)toxicpanda.com> io_uring: don't split 128b SQEs at the SQPOLL cap Josef Bacik <josef(a)toxicpanda.com> io_uring: drop the CQE cache if a refill fails Josef Bacik <josef(a)toxicpanda.com> io_uring/futex: allocate private hash before waiting Josef Bacik <josef(a)toxicpanda.com> io_uring/poll: drop stale double poll entry on rearm Josef Bacik <josef(a)toxicpanda.com> io_uring/wait: look at all CQ waiters on wake up Josef Bacik <josef(a)toxicpanda.com> io_uring: wake ring pollers for local task_work Josef Bacik <josef(a)toxicpanda.com> io_uring/cancel: let CANCEL_ALL find parked requests Josef Bacik <josef(a)toxicpanda.com> io_uring/cancel: recognize "no timeout" on 32-bit Josef Bacik <josef(a)toxicpanda.com> io_uring/cancel: don't forget that the work was running Josef Bacik <josef(a)toxicpanda.com> io_uring: don't lose a cancel as io-wq parks a request Josef Bacik <josef(a)toxicpanda.com> io_uring/poll: don't lose a cancel as io-wq arms poll Josef Bacik <josef(a)toxicpanda.com> io_uring/io-wq: let cancel find picked up hashed work Josef Bacik <josef(a)toxicpanda.com> io_uring/io-wq: don't exit with a creation pending Josef Bacik <josef(a)toxicpanda.com> io_uring/io-wq: don't strand work when a worker exits Josef Bacik <josef(a)toxicpanda.com> io_uring/io-wq: don't go to sleep on pending work Josef Bacik <josef(a)toxicpanda.com> io_uring/mpscq: disable preemption while pushing Josef Bacik <josef(a)toxicpanda.com> io_uring/cancel: rearm local work wake up before sleep Josef Bacik <josef(a)toxicpanda.com> io_uring: don't lose the DEFER_TASKRUN wake up Josef Bacik <josef(a)toxicpanda.com> io_uring: don't flood a cancelling task with task_work Josef Bacik <josef(a)toxicpanda.com> io_uring/io-wq: don't hide a link from cancellations Josef Bacik <josef(a)toxicpanda.com> io_uring/io-wq: don't lose the signal that ends work Josef Bacik <josef(a)toxicpanda.com> io_uring/wait: don't spin on a stuck overflow list Josef Bacik <josef(a)toxicpanda.com> io_uring/cmd: don't leave list poison in ->hash_node Josef Bacik <josef(a)toxicpanda.com> io_uring/waitid: own the request before clearing ->head Ridham Khurana <khurana.ridham222(a)gmail.com> platform: cznic: turris-omnia-mcu: Add missing MODULE_DEVICE_TABLE() Pavankumar Nandeshwar <pavankumar.nandeshwar(a)oss.qualcomm.com> wifi: ath12k: Increase RXDMA buffer ring size for default memory profile Aaradhana Sahu <aaradhana.sahu(a)oss.qualcomm.com> wifi: ath12k: Make RXDMA buffer ring size configurable per memory profile Aaradhana Sahu <aaradhana.sahu(a)oss.qualcomm.com> wifi: ath12k: convert DP_RX_RELEASE_RING_SIZE to inline helper Aaradhana Sahu <aaradhana.sahu(a)oss.qualcomm.com> wifi: ath12k: convert ATH12K_RX_DESC_COUNT to inline helper Aaradhana Sahu <aaradhana.sahu(a)oss.qualcomm.com> wifi: ath12k: convert ATH12K_NUM_POOL_TX_DESC to inline helper Aaradhana Sahu <aaradhana.sahu(a)oss.qualcomm.com> wifi: ath12k: convert DP_RXDMA_MONITOR_DST_RING_SIZE to inline helper Aaradhana Sahu <aaradhana.sahu(a)oss.qualcomm.com> wifi: ath12k: convert DP_RXDMA_MONITOR_BUF_RING_SIZE to inline helper Aaradhana Sahu <aaradhana.sahu(a)oss.qualcomm.com> wifi: ath12k: convert DP_TX_COMP_RING_SIZE to inline helper Aaradhana Sahu <aaradhana.sahu(a)oss.qualcomm.com> wifi: ath12k: move dp_profile_params to dp.h Lee Seong Hyeon <ihopenre(a)gmail.com> ksmbd: reject FSCTL_SET_ZERO_DATA on a directory handle Stefan Metzmacher <metze(a)samba.org> smb: smbdirect: don't hand out already failed sockets in smbdirect_socket_accept() Stefan Metzmacher <metze(a)samba.org> smb: smbdirect: release failed pending sockets of a listener Stefan Metzmacher <metze(a)samba.org> smb: smbdirect: don't wait for RDMA_CM_EVENT_DISCONNECTED in smbdirect_socket_destroy_sync() Namjae Jeon <linkinjeon(a)kernel.org> ksmbd: wait for negotiation before receiving another PDU Zizhen Liu <pointerliu(a)126.com> net: skbuff: propagate shared-frag marker in skb_zerocopy() ------------- Diffstat: .../bindings/interrupt-controller/arm,gic-v5.yaml | 9 +- Documentation/networking/rxrpc.rst | 21 +- Makefile | 4 +- arch/arm/mm/mmap.c | 11 +- arch/powerpc/kvm/book3s_hv.c | 76 +- arch/powerpc/kvm/book3s_paired_singles.c | 7 +- arch/s390/kernel/kprobes.c | 3 + arch/s390/kernel/perf_cpum_cf.c | 3 + arch/s390/kernel/process.c | 12 +- arch/s390/kernel/signal.c | 6 +- arch/s390/lib/probes.c | 2 +- arch/s390/mm/extable.c | 4 +- arch/s390/pci/pci_irq.c | 93 ++- arch/x86/include/asm/cpufeatures.h | 1 + arch/x86/include/asm/cpuid/api.h | 1 + arch/x86/include/asm/kvm-x86-ops.h | 1 + arch/x86/include/asm/kvm_host.h | 7 + arch/x86/include/asm/vmx.h | 8 + arch/x86/kernel/cpu/bugs.c | 18 +- arch/x86/kernel/cpu/scattered.c | 1 + arch/x86/kvm/hyperv.c | 2 + arch/x86/kvm/mmu/mmu.c | 5 + arch/x86/kvm/mmu/paging_tmpl.h | 13 +- arch/x86/kvm/svm/nested.c | 6 + arch/x86/kvm/svm/svm.c | 19 +- arch/x86/kvm/vmx/common.h | 20 + arch/x86/kvm/vmx/main.c | 26 + arch/x86/kvm/vmx/posted_intr.c | 2 + arch/x86/kvm/vmx/tdx.c | 92 ++- arch/x86/kvm/vmx/vmx.c | 37 +- arch/x86/kvm/vmx/x86_ops.h | 1 + arch/x86/kvm/x86.c | 69 +- arch/x86/kvm/xen.c | 18 + arch/x86/mm/pat/set_memory.c | 8 +- block/blk-crypto-fallback.c | 6 + drivers/accel/amdxdna/aie2_message.c | 1 + drivers/accel/amdxdna/aie2_msg_priv.h | 1 + drivers/accel/amdxdna/npu4_regs.c | 1 + drivers/android/binder/thread.rs | 38 +- drivers/ata/sata_fsl.c | 20 +- drivers/base/base.h | 1 + drivers/base/bus.c | 32 +- drivers/base/core.c | 4 +- drivers/base/dd.c | 90 ++- drivers/block/xen-blkfront.c | 12 +- drivers/bluetooth/hci_vhci.c | 4 + drivers/clk/renesas/r9a08g046-cpg.c | 6 +- drivers/cpufreq/rcpufreq_dt.rs | 1 + drivers/gpu/drm/msm/msm_gem_shrinker.c | 3 +- drivers/gpu/drm/panthor/panthor_sched.c | 14 +- drivers/hid/amd-sfh-hid/amd_sfh_client.c | 4 +- .../amd-sfh-hid/hid_descriptor/amd_sfh_hid_desc.h | 2 - .../hid_descriptor/amd_sfh_hid_report_desc.h | 7 - drivers/hid/hid-asus.c | 14 +- drivers/hid/hid-core.c | 4 +- drivers/hid/hid-cougar.c | 3 + drivers/hid/hid-cp2112.c | 9 +- drivers/hid/hid-elo.c | 3 + drivers/hid/hid-ids.h | 1 + drivers/hid/hid-lenovo-go-s.c | 663 ++++++++++----- drivers/hid/hid-logitech-dj.c | 3 + drivers/hid/hid-mcp2200.c | 5 + drivers/hid/hid-mcp2221.c | 10 +- drivers/hid/hid-picolcd_fb.c | 12 +- drivers/hid/hid-prodikeys.c | 7 +- drivers/hid/hid-pxrc.c | 3 + drivers/hid/hid-quirks.c | 1 + drivers/hid/hid-roccat-isku.c | 3 + drivers/hid/hid-roccat-koneplus.c | 3 + drivers/hid/hid-roccat-konepure.c | 3 + drivers/hid/hid-roccat-kovaplus.c | 3 + drivers/hid/hid-roccat-pyra.c | 3 + drivers/hid/hid-roccat-ryos.c | 3 + drivers/hid/hid-roccat-savu.c | 3 + drivers/hid/hid-zydacron.c | 3 + drivers/hid/usbhid/hid-core.c | 9 +- drivers/hid/usbhid/hiddev.c | 37 +- drivers/hid/wacom_sys.c | 198 +++-- drivers/hid/wacom_wac.c | 99 ++- drivers/hid/wacom_wac.h | 6 +- drivers/hv/mshv_vtl_main.c | 28 +- drivers/hv/ring_buffer.c | 29 +- drivers/infiniband/core/ib_core_uverbs.c | 10 +- drivers/infiniband/core/uverbs.h | 37 + drivers/infiniband/core/uverbs_std_types_dmabuf.c | 39 +- drivers/infiniband/hw/irdma/icrdma_if.c | 9 +- drivers/iommu/arm/arm-smmu-v3/arm-smmu-v3.c | 2 +- drivers/iommu/iommufd/eventq.c | 4 +- drivers/irqchip/irq-gic-v5-irs.c | 4 + drivers/media/pci/cx23885/cx23885-core.c | 4 + drivers/media/pci/cx23885/cx23885-dvb.c | 14 +- drivers/media/pci/cx88/cx88-mpeg.c | 9 +- drivers/media/pci/intel/ipu-bridge.c | 2 +- drivers/media/platform/marvell/mcam-core.c | 14 +- .../media/platform/microchip/microchip-csi2dc.c | 1 + .../media/platform/microchip/microchip-isc-base.c | 6 + .../platform/microchip/microchip-sama5d2-isc.c | 17 +- .../platform/microchip/microchip-sama7g5-isc.c | 17 +- drivers/media/platform/nxp/imx-jpeg/mxc-jpeg.c | 2 + drivers/media/platform/samsung/s5p-mfc/s5p_mfc.c | 4 +- drivers/media/rc/bpf-lirc.c | 18 +- drivers/media/rc/fintek-cir.c | 4 + drivers/media/rc/imon.c | 5 - drivers/media/rc/ir-mce_kbd-decoder.c | 5 +- drivers/media/rc/lirc_dev.c | 3 + drivers/media/rc/rc-ir-raw.c | 86 +- drivers/media/rc/rc-main.c | 61 +- drivers/media/rc/redrat3.c | 4 + drivers/media/usb/au0828/au0828-dvb.c | 1 + drivers/media/usb/em28xx/em28xx-audio.c | 7 + drivers/media/usb/go7007/go7007-driver.c | 5 +- drivers/media/usb/gspca/gspca.c | 3 +- drivers/media/usb/hackrf/hackrf.c | 7 +- drivers/media/usb/usbtv/usbtv-core.c | 2 - drivers/media/usb/usbtv/usbtv-video.c | 4 + drivers/mtd/mtd_virt_concat.c | 2 + drivers/net/usb/pegasus.c | 6 +- drivers/net/virtio_net.c | 26 +- drivers/net/wireless/ath/ath12k/core.c | 2 + drivers/net/wireless/ath/ath12k/core.h | 9 - drivers/net/wireless/ath/ath12k/dp.c | 81 +- drivers/net/wireless/ath/ath12k/dp.h | 108 ++- drivers/net/wireless/ath/ath12k/dp_rx.c | 14 +- drivers/net/wireless/ath/ath12k/mac.c | 5 +- drivers/net/wireless/ath/ath12k/wifi7/dp_tx.c | 12 +- drivers/net/wireless/ath/ath9k/channel.c | 2 + drivers/net/wireless/broadcom/b43/main.c | 5 +- drivers/net/wireless/mediatek/mt76/mt7925/pci.c | 1 - drivers/net/wireless/mediatek/mt76/mt7925/regs.h | 3 +- drivers/net/wireless/mediatek/mt76/mt7996/mac.c | 4 +- drivers/net/wwan/wwan_hwsim.c | 4 + drivers/nvme/target/auth.c | 1 + drivers/nvme/target/fabrics-cmd-auth.c | 32 +- drivers/nvme/target/fc.c | 8 +- drivers/nvme/target/nvmet.h | 2 + drivers/nvme/target/pr.c | 2 +- drivers/nvmem/core.c | 4 +- drivers/phy/phy-core.c | 45 +- drivers/platform/cznic/turris-omnia-mcu-base.c | 1 + drivers/platform/x86/amd/hfi/hfi.c | 5 + drivers/platform/x86/asus-wmi.c | 12 + drivers/power/supply/pf1550-charger.c | 32 +- drivers/power/supply/sbs-battery.c | 11 + drivers/pps/generators/pps_gen.c | 94 ++- drivers/rapidio/devices/rio_mport_cdev.c | 5 +- drivers/s390/char/vmcp.c | 4 +- drivers/s390/crypto/zcrypt_api.c | 35 +- drivers/s390/crypto/zcrypt_ccamisc.c | 22 +- drivers/s390/crypto/zcrypt_msgtype50.c | 95 ++- drivers/s390/crypto/zcrypt_msgtype6.c | 208 +++-- drivers/scsi/dc395x.c | 10 +- drivers/spi/spi-pci1xxxx.c | 71 ++ drivers/spmi/spmi.c | 3 +- drivers/staging/rtl8723bs/core/rtw_recv.c | 21 +- drivers/thunderbolt/icm.c | 6 +- drivers/tty/serial/serial_core.c | 16 +- drivers/usb/core/driver.c | 1 - drivers/usb/core/message.c | 1 + drivers/usb/gadget/legacy/inode.c | 3 +- drivers/vfio/pci/nvgrace-gpu/main.c | 17 +- drivers/video/backlight/lm3630a_bl.c | 1 + drivers/video/backlight/qcom-wled.c | 35 +- drivers/video/fbdev/atmel_lcdfb.c | 11 +- drivers/video/fbdev/udlfb.c | 5 + fs/afs/rxrpc.c | 57 +- fs/btrfs/verity.c | 7 +- fs/ceph/dir.c | 4 + fs/exec.c | 11 +- fs/ext4/verity.c | 4 +- fs/fuse/dev.c | 3 +- fs/iomap/ioend.c | 10 +- fs/kernfs/mount.c | 34 +- fs/lockd/svclock.c | 2 + fs/nfs/blocklayout/blocklayout.h | 5 - fs/nfs/blocklayout/rpc_pipefs.c | 79 +- fs/nfs/callback_xdr.c | 9 +- fs/nfs/delegation.c | 3 +- fs/nfs/dir.c | 2 + fs/nfs/filelayout/filelayout.c | 8 +- fs/nfs/filelayout/filelayoutdev.c | 17 +- fs/nfs/flexfilelayout/flexfilelayout.c | 52 +- fs/nfs/flexfilelayout/flexfilelayout.h | 2 +- fs/nfs/flexfilelayout/flexfilelayoutdev.c | 17 +- fs/nfs/localio.c | 31 +- fs/nfs/netns.h | 5 +- fs/nfs/nfs4_fs.h | 2 + fs/nfs/nfs4proc.c | 8 + fs/nfs/nfs4state.c | 38 +- fs/nfs/nfstrace.h | 5 +- fs/nfs/pnfs.c | 2 + fs/nfs/pnfs.h | 1 + fs/nfs/pnfs_nfs.c | 21 +- fs/nfsd/filecache.c | 4 +- fs/nfsd/flexfilelayout.c | 20 +- fs/nfsd/flexfilelayoutxdr.c | 4 +- fs/nfsd/flexfilelayoutxdr.h | 5 +- fs/nfsd/nfs3acl.c | 15 + fs/nfsd/nfs4idmap.c | 4 +- fs/nfsd/nfs4layouts.c | 4 +- fs/nfsd/nfs4proc.c | 4 +- fs/nfsd/nfs4recover.c | 42 +- fs/nfsd/nfs4state.c | 250 +++++- fs/nfsd/nfs4xdr.c | 26 +- fs/nfsd/nfsctl.c | 73 +- fs/nfsd/nfsproc.c | 19 +- fs/nfsd/state.h | 13 +- fs/nfsd/xdr4.h | 1 + fs/ocfs2/cluster/heartbeat.c | 13 +- fs/ocfs2/cluster/netdebug.c | 4 + fs/ocfs2/cluster/nodemanager.c | 3 + fs/ocfs2/cluster/quorum.c | 7 +- fs/ocfs2/cluster/quorum.h | 1 + fs/ocfs2/dlm/dlmconvert.c | 10 +- fs/ocfs2/dlm/dlmdebug.c | 5 + fs/ocfs2/dlm/dlmdomain.c | 3 +- fs/ocfs2/dlm/dlmlock.c | 8 +- fs/ocfs2/dlmglue.c | 2 + fs/ocfs2/file.c | 100 ++- fs/ocfs2/filecheck.c | 5 +- fs/ocfs2/quota_local.c | 12 +- fs/ocfs2/refcounttree.c | 15 +- fs/ocfs2/super.c | 1 + fs/overlayfs/copy_up.c | 110 ++- fs/overlayfs/dir.c | 22 +- fs/overlayfs/inode.c | 16 +- fs/overlayfs/namei.c | 11 +- fs/overlayfs/overlayfs.h | 8 +- fs/overlayfs/readdir.c | 40 +- fs/overlayfs/super.c | 31 +- fs/proc/task_mmu.c | 9 +- fs/smb/client/cached_dir.c | 30 +- fs/smb/client/cifsacl.c | 9 +- fs/smb/client/cifsfs.c | 20 +- fs/smb/client/cifsglob.h | 2 + fs/smb/client/cifsproto.h | 1 + fs/smb/client/cifssmb.c | 152 +++- fs/smb/client/connect.c | 40 +- fs/smb/client/inode.c | 4 +- fs/smb/client/readdir.c | 69 +- fs/smb/client/sess.c | 6 +- fs/smb/client/smb2misc.c | 16 + fs/smb/client/smb2ops.c | 37 +- fs/smb/client/smb2pdu.c | 46 +- fs/smb/client/trace.h | 3 + fs/smb/client/transport.c | 2 + fs/smb/common/smbglob.h | 1 + fs/smb/server/auth.c | 6 +- fs/smb/server/compress.c | 1 + fs/smb/server/connection.c | 55 +- fs/smb/server/connection.h | 26 +- fs/smb/server/ksmbd_netlink.h | 8 +- fs/smb/server/ksmbd_work.c | 19 + fs/smb/server/ksmbd_work.h | 2 + fs/smb/server/mgmt/user_session.c | 204 ++++- fs/smb/server/mgmt/user_session.h | 12 +- fs/smb/server/misc.c | 8 +- fs/smb/server/oplock.c | 885 ++++++++++++--------- fs/smb/server/oplock.h | 14 +- fs/smb/server/proc.c | 2 + fs/smb/server/server.c | 23 + fs/smb/server/server.h | 3 + fs/smb/server/smb2misc.c | 8 + fs/smb/server/smb2ops.c | 33 + fs/smb/server/smb2pdu.c | 374 +++++++-- fs/smb/server/smb2pdu.h | 1 + fs/smb/server/smb_common.c | 6 +- fs/smb/server/smbacl.c | 49 +- fs/smb/server/transport_ipc.c | 23 +- fs/smb/server/transport_tcp.c | 308 ++++++- fs/smb/server/vfs.c | 107 ++- fs/smb/server/vfs.h | 3 +- fs/smb/server/vfs_cache.c | 263 +++--- fs/smb/server/vfs_cache.h | 12 +- fs/smb/smbdirect/accept.c | 227 ++++-- fs/smb/smbdirect/connection.c | 12 +- fs/smb/smbdirect/internal.h | 2 + fs/smb/smbdirect/listen.c | 137 +++- fs/smb/smbdirect/rw.c | 1 - fs/smb/smbdirect/socket.c | 113 ++- fs/smb/smbdirect/socket.h | 42 + fs/udf/inode.c | 2 +- fs/ufs/dir.c | 2 +- fs/verity/enable.c | 12 +- fs/xfs/libxfs/xfs_attr_leaf.c | 13 + fs/xfs/libxfs/xfs_da_btree.c | 14 + fs/xfs/libxfs/xfs_inode_fork.c | 4 +- fs/xfs/libxfs/xfs_symlink_remote.c | 8 +- fs/xfs/libxfs/xfs_symlink_remote.h | 2 +- fs/xfs/libxfs/xfs_trans_space.c | 6 +- fs/xfs/scrub/agheader.c | 15 +- fs/xfs/scrub/agheader_repair.c | 13 +- fs/xfs/scrub/alloc_repair.c | 11 +- fs/xfs/scrub/attr.c | 17 +- fs/xfs/scrub/attr_repair.c | 18 +- fs/xfs/scrub/bitmap.c | 20 + fs/xfs/scrub/bmap.c | 7 + fs/xfs/scrub/btree.c | 16 +- fs/xfs/scrub/common.c | 7 +- fs/xfs/scrub/cow_repair.c | 84 +- fs/xfs/scrub/dabtree.c | 27 +- fs/xfs/scrub/dir.c | 2 + fs/xfs/scrub/dir_repair.c | 9 +- fs/xfs/scrub/dirtree.c | 4 +- fs/xfs/scrub/dirtree_repair.c | 76 +- fs/xfs/scrub/dqiterate.c | 1 + fs/xfs/scrub/fscounters.c | 38 +- fs/xfs/scrub/ialloc_repair.c | 8 +- fs/xfs/scrub/inode.c | 2 +- fs/xfs/scrub/inode_repair.c | 181 ++++- fs/xfs/scrub/iscan.c | 2 +- fs/xfs/scrub/metapath.c | 17 +- fs/xfs/scrub/newbt.c | 15 +- fs/xfs/scrub/newbt.h | 1 - fs/xfs/scrub/parent_repair.c | 4 + fs/xfs/scrub/quota.c | 8 +- fs/xfs/scrub/quota_repair.c | 39 +- fs/xfs/scrub/quotacheck_repair.c | 54 +- fs/xfs/scrub/readdir.c | 2 +- fs/xfs/scrub/reap.c | 65 +- fs/xfs/scrub/refcount.c | 17 +- fs/xfs/scrub/repair.c | 18 +- fs/xfs/scrub/repair.h | 2 +- fs/xfs/scrub/rtbitmap_repair.c | 2 +- fs/xfs/scrub/rtrefcount.c | 2 + fs/xfs/scrub/rtsummary.c | 9 +- fs/xfs/scrub/rtsummary.h | 1 + fs/xfs/scrub/rtsummary_repair.c | 2 +- fs/xfs/scrub/stats.c | 5 +- fs/xfs/scrub/symlink.c | 17 +- fs/xfs/scrub/trace.c | 13 + fs/xfs/scrub/trace.h | 10 +- fs/xfs/scrub/xfarray.c | 4 +- fs/xfs/xfs_dquot.c | 20 +- fs/xfs/xfs_dquot.h | 2 +- fs/xfs/xfs_handle.c | 2 +- fs/xfs/xfs_inode_item_recover.c | 20 +- fs/xfs/xfs_mount.c | 9 +- fs/xfs/xfs_pnfs.c | 19 +- fs/xfs/xfs_qm.c | 42 +- fs/xfs/xfs_quota.h | 9 + fs/xfs/xfs_trans_dquot.c | 6 +- include/linux/device.h | 5 + include/linux/device/bus.h | 3 - include/linux/filelock.h | 13 +- include/linux/fsverity.h | 12 +- include/linux/hiddev.h | 2 + include/linux/interrupt.h | 2 + include/linux/io_uring_types.h | 6 + include/linux/kvm_host.h | 2 + include/linux/pps_gen_kernel.h | 4 +- include/net/af_rxrpc.h | 5 +- include/net/mptcp.h | 9 + include/trace/events/huge_memory.h | 18 +- include/trace/events/rxrpc.h | 2 +- include/trace/misc/nfs.h | 10 + io_uring/bpf-ops.c | 16 +- io_uring/cancel.c | 43 +- io_uring/cancel.h | 2 + io_uring/fdinfo.c | 14 +- io_uring/futex.c | 32 +- io_uring/io-wq.c | 138 +++- io_uring/io_uring.c | 174 +++- io_uring/io_uring.h | 44 +- io_uring/kbuf.c | 6 +- io_uring/loop.c | 8 +- io_uring/mpscq.h | 14 +- io_uring/napi.c | 4 +- io_uring/net.c | 49 +- io_uring/openclose.c | 11 +- io_uring/poll.c | 21 + io_uring/register.c | 61 +- io_uring/rsrc.c | 7 +- io_uring/rw.c | 18 - io_uring/sqpoll.c | 35 +- io_uring/sqpoll.h | 3 +- io_uring/tctx.c | 9 +- io_uring/timeout.c | 105 ++- io_uring/tw.c | 36 +- io_uring/uring_cmd.c | 2 +- io_uring/wait.c | 32 +- io_uring/wait.h | 15 + io_uring/waitid.c | 12 +- io_uring/zcrx.c | 2 +- kernel/cgroup/cgroup.c | 28 + kernel/fork.c | 4 + kernel/irq/internals.h | 2 + kernel/irq/manage.c | 31 +- kernel/kcov.c | 8 + kernel/kcsan/core.c | 7 +- kernel/power/em_netlink.c | 126 +-- kernel/power/em_netlink.h | 8 +- kernel/power/energy_model.c | 8 +- kernel/resource.c | 9 +- kernel/sched/ext/ext.c | 15 +- lib/klist.c | 16 +- lib/kobject_uevent.c | 6 +- mm/hugetlb.c | 15 +- mm/khugepaged.c | 21 +- mm/rmap.c | 11 - mm/slab_common.c | 17 +- mm/truncate.c | 30 +- net/8021q/vlan_dev.c | 33 +- net/bluetooth/hci_event.c | 9 + net/ceph/mon_client.c | 2 +- net/core/dev.c | 3 + net/core/rtnetlink.c | 4 + net/core/skbuff.c | 2 + net/ipv4/inet_connection_sock.c | 4 + net/ipv4/metrics.c | 5 + net/mptcp/subflow.c | 35 +- net/netfilter/nft_payload.c | 40 +- net/rxrpc/recvmsg.c | 22 +- net/rxrpc/rxperf.c | 41 +- net/rxrpc/sendmsg.c | 86 +- net/sched/act_ife.c | 4 + net/sched/cls_bpf.c | 28 +- net/sched/cls_flower.c | 50 +- net/sched/sch_generic.c | 14 +- net/sched/sch_teql.c | 60 +- net/sunrpc/auth_gss/svcauth_gss.c | 29 +- net/sunrpc/svc.c | 9 +- net/sunrpc/svc_xprt.c | 24 +- net/sunrpc/svcauth_unix.c | 9 + net/sunrpc/svcsock.c | 86 +- rust/bindgen_parameters | 4 +- rust/bindings/bindings_helper.h | 2 +- rust/kernel/bitmap.rs | 70 +- rust/kernel/block/mq/gen_disk.rs | 10 +- rust/kernel/block/mq/operations.rs | 2 +- rust/kernel/bug.rs | 9 +- rust/kernel/configfs.rs | 43 +- rust/kernel/cpufreq.rs | 22 +- rust/kernel/fwctl.rs | 12 +- rust/kernel/module_param.rs | 9 +- security/apparmor/include/policy_ns.h | 16 + security/apparmor/policy_ns.c | 2 +- security/landlock/fs.c | 10 +- sound/core/control.c | 2 + sound/drivers/pcmtest.c | 42 +- sound/soc/amd/ps/acp63.h | 8 + sound/soc/amd/ps/pci-ps.c | 2 + sound/soc/amd/ps/ps-common.c | 2 + sound/soc/generic/audio-graph-card2.c | 3 +- sound/synth/emux/emux_synth.c | 3 + sound/synth/emux/soundfont.c | 9 +- sound/usb/line6/pcm.c | 8 + sound/x86/intel_hdmi_audio.c | 9 +- tools/objtool/check.c | 1 + virt/kvm/guest_memfd.c | 120 +-- virt/kvm/guest_memfd.h | 19 +- virt/kvm/kvm_main.c | 75 +- virt/kvm/pfncache.c | 18 +- 452 files changed, 8695 insertions(+), 3181 deletions(-)

6 days, 17 hours

[PATCH 6.18 0000/1005] 6.18.61-rc1 review

by Greg Kroah-Hartman

This is the start of the stable review cycle for the 6.18.61 release. There are 1005 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know. Responses should be made by Fri, 06 Nov 2026 21:07:23 +0000. Anything received after that time might be too late. The whole patch series can be found in one patch at: https://www.kernel.org/pub/linux/kernel/v6.x/stable-review/patch-6.18.61-rc… or in the git tree and branch at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-6.18.y and the diffstat can be found below. thanks, greg k-h ------------- Pseudo-Shortlog of commits: Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> Linux 6.18.61-rc1 Scott Gauche <scott-dev(a)scottgauche.com> ALSA: hda/realtek: Fix audio after Windows reboot on ASUS Q423SA Peter Griffin <peter.griffin(a)linaro.org> opp: fix use after free in _update_opp_table_clk() Pablo Neira Ayuso <pablo(a)netfilter.org> netfilter: conntrack: always lower timeout for non-closing RST packets Srinivasan Shanmugam <srinivasan.shanmugam(a)amd.com> drm/amdgpu/powerplay: Align get_tonga_state_array() header with prototype Alexander Atanasov <alex(a)zazolabs.com> selftests: ublk: add missing gitignore for metadata_size binary Sean Young <sean(a)mess.org> media: rc: Fix build failure with CONFIG_LIRC disabled Zi Yan <ziy(a)nvidia.com> mm/rmap: don't discard lazyfree THPs at PMD level Danish Khateeb <danishkhateeb03(a)gmail.com> pps: generators: fix use-after-free when closing a removed device Jori Koolstra <jkoolstra(a)xs4all.nl> pps: change pps_gen_class to a const struct Yibo Tan <lhfff(a)tju.edu.cn> media: ipu-bridge: Fix use-after-free in IVSC error path Ian Bridges <icb(a)fastmail.org> ksmbd: fix use-after-free after a failed durable reconnect Dairui Zhang <zhangdairui(a)gmail.com> ksmbd: verify transform SessionId matches the decrypted header DaeMyung Kang <charsyam(a)gmail.com> ksmbd: fix named stream write and EOF handling Ian Bridges <icb(a)fastmail.org> ksmbd: fix out-of-bounds read when padding the final compound response DaeMyung Kang <charsyam(a)gmail.com> ksmbd: use the existing xattr name for a named stream Henry Hu <huhai(a)kylinos.cn> ksmbd: fix invalid pointer dereference when get_inode_acl() fails Namjae Jeon <linkinjeon(a)kernel.org> ksmbd: prevent stale data from being written by SMB2 WRITE requests Namjae Jeon <linkinjeon(a)kernel.org> ksmbd: prevent share root removal through empty paths Ian Bridges <icb(a)fastmail.org> ksmbd: fix session reference leak on compounded SESSION_SETUP Aamir Ahmed <elb12345(a)hotmail.co.uk> ksmbd: deny access for an empty DACL instead of granting the request Mario Peter <mario.peter(a)leica-geosystems.com> driver core: take parent lock in async device attach Vincent Liu <vincent.liu(a)nutanix.com> driver core: Check drivers_autoprobe for all added devices Fredric Cover <fredric.cover.lkernel(a)gmail.com> smb: client: fix early procfs exposure race Zikang Gao <2715417602(a)qq.com> smb: client: do not pass a NULL buf to is_oplock_break() Cheng Yongkang <teel4res(a)gmail.com> io_uring/net: fix multishot recv length limit accounting Cheng Yongkang <teel4res(a)gmail.com> io_uring/timeout: count cancelled timeouts in cq_timeouts Kyle Zeng <kylebot(a)openai.com> io_uring: defer foreign io-wq enqueues to task_work Chris Mason <mason(a)kernel.org> io_uring/sqpoll: don't wait for the thread to exit Chris Mason <mason(a)kernel.org> io_uring: free XArray nodes left by a failed store Chris Mason <mason(a)kernel.org> io_uring: charge tctx nodes and personalities Chris Mason <mason(a)kernel.org> io_uring/rsrc: charge buffer arrays and nodes to memcg Josef Bacik <josef(a)toxicpanda.com> io_uring/io-wq: no new workers once the exit has begun Daan De Meyer <daan(a)amutable.com> io_uring/net: don't retry a non-blocking connect() that fails with -EAGAIN Yichong Chen <chenyichong(a)uniontech.com> io_uring/net: keep recvmsg buffer select length within MAX_RW_COUNT Yichong Chen <chenyichong(a)uniontech.com> io_uring/kbuf: advance head when a pickup empties the buffer ring Stefan Metzmacher <metze(a)samba.org> smb: smbdirect: fix buffer length underflow in RDMA transfers Amir Goldstein <amir73il(a)gmail.com> ovl: fix mount setup failing when override_creds drops CAP_SYS_ADMIN Chris Mason <mason(a)kernel.org> ovl: do not copy up a dentry that was removed Chris Mason <mason(a)kernel.org> ovl: hold a reference on the parent in readdir Chris Mason <mason(a)kernel.org> ovl: check that the parents of volatile/dirty are dirs Jiale Yao <yaojiale02(a)163.com> HID: roccat: savu: reject short special reports Jiale Yao <yaojiale02(a)163.com> HID: roccat: ryos: reject short special reports Jiale Yao <yaojiale02(a)163.com> HID: roccat: pyra: reject short button reports Jiale Yao <yaojiale02(a)163.com> HID: roccat: kovaplus: reject short button reports Jiale Yao <yaojiale02(a)163.com> HID: roccat: konepure: reject short button reports Jiale Yao <yaojiale02(a)163.com> HID: roccat: koneplus: reject short button reports Jiale Yao <yaojiale02(a)163.com> HID: roccat: isku: reject short button reports Gabor Tanz <gabor.tanz(a)gmail.com> HID: quirks: Always poll the Anne Pro 2 with product ID a292 Jiale Yao <yaojiale02(a)163.com> HID: pxrc: reject short input reports Jiale Yao <yaojiale02(a)163.com> HID: prodikeys: validate fixed-format MIDI reports Lorenzo Stoakes (ARM) <ljs(a)kernel.org> HID: picoLCD: check for fb_deferred_io_init() error Jiale Yao <yaojiale02(a)163.com> HID: mcp2221: validate response report length Jiale Yao <yaojiale02(a)163.com> HID: mcp2200: validate READ_ALL response length Jiale Yao <yaojiale02(a)163.com> HID: logitech-dj: validate unnumbered keyboard reports Jiale Yao <yaojiale02(a)163.com> HID: elo: reject short touchscreen reports Jiale Yao <yaojiale02(a)163.com> HID: cp2112: validate response report lengths Jiale Yao <yaojiale02(a)163.com> HID: cougar: reject short special-key reports Alan Stern <stern(a)rowland.harvard.edu> HID: core: Fix out-of-bounds left shift by 32 in s32ton() Basavaraj Natikar <Basavaraj.Natikar(a)amd.com> HID: amd_sfh: Use report type from request node Basavaraj Natikar <Basavaraj.Natikar(a)amd.com> HID: amd_sfh: Remove unsupported motion-state field from accelerometer report Jiale Yao <yaojiale02(a)163.com> HID: zydacron: validate key report length Amit Machhiwal <amachhiw(a)linux.ibm.com> KVM: PPC: Fix get_d_signext() 12-bit displacement for paired-single D-form Amit Machhiwal <amachhiw(a)linux.ibm.com> KVM: PPC: Book3S HV: Add preempt_disable() around virtual-mode HPTE bit-lock users Xiaoyao Li <xiaoyao.li(a)intel.com> KVM: TDX: Enable Bus Lock VM exit Xiaoyao Li <xiaoyao.li(a)intel.com> KVM: TDX: Enable Notify VM exit Xiaoyao Li <xiaoyao.li(a)intel.com> KVM: TDX: Check if there is valid exit infos based on vp_enter_ret Sean Christopherson <seanjc(a)google.com> KVM: x86: Zero reserved synic flags when delivering message to avoid stack leak Chengfeng Ye <nicoyip.dev(a)gmail.com> KVM: x86: Take SRCU in kvm_zap_gfn_range() Loc Nguyen <loc(a)ryzome.com> KVM: x86: Request event processing for exception VM-Exits Sean Christopherson <seanjc(a)google.com> KVM: x86: Preserve DR6.BLD (Bus Lock Detect) when delivering #DB payload Keqiang Duan <duankeqiangcym(a)gmail.com> KVM: x86: Clear hardware HLT state when userspace makes a vCPU not-halted David Woodhouse <dwmw(a)amazon.co.uk> KVM: x86/xen: Take kvm->srcu in __kvm_xen_has_interrupt() David Woodhouse <dwmw(a)amazon.co.uk> KVM: x86/xen: Enforce 4-byte alignment of vcpu_info registration Sean Christopherson <seanjc(a)google.com> KVM: x86/mmu: Bug the VM if KVM calcs a CPU role with EFER.LMA=1 && CR4.PAE=0 Sean Christopherson <seanjc(a)google.com> KVM: x86/mmu: Bug the VM if KVM attempts to walk more levels than the MMU has Xiaoyao Li <xiaoyao.li(a)intel.com> KVM: VMX: Preserve negative return value in vmx_handle_exit() with bus lock detected Xiaoyao Li <xiaoyao.li(a)intel.com> KVM: VMX: Make handle_bus_lock_vmexit() a shared helper Sean Christopherson <seanjc(a)google.com> KVM: VMX: Disallow using to_vmx() in common VT code Sean Christopherson <seanjc(a)google.com> KVM: Use goto to handle errors during memslot preparation Sean Christopherson <seanjc(a)google.com> KVM: nSVM: Ignore EFER.LMA if EFER.LME=0 when preparing L2 state Yosry Ahmed <yosry(a)kernel.org> KVM: SVM: Trigger new ASID allocation in both VMCBs on pCPU switch Mike Rapoport (Microsoft) <rppt(a)kernel.org> x86/mm/pat: Fix effective RW computation in lookup_address_in_pgd_attr() Sean Christopherson <seanjc(a)google.com> x86/cpuid: Mark CPUID function 0x23 as being indexed David Howells <dhowells(a)redhat.com> rxrpc: Fix return in rxrpc_recvmsg_data() for service calls David Howells <dhowells(a)redhat.com> rxrpc: Fix double IRQ enablement David Howells <dhowells(a)redhat.com> afs: Fix afs to abort the rxrpc call on send error David Howells <dhowells(a)redhat.com> rxrpc: Fix lack of short-send handling in rxrpc_kernel_send_data() David Howells <dhowells(a)redhat.com> rxrpc: Fix update of call->tx_pending without holding lock Chuck Lever <chuck.lever(a)oracle.com> SUNRPC: Treat every TLS error alert as fatal Ameer Hamza <ameer.hamza(a)truenas.com> sunrpc: treat empty auth.unix.gid replies as negative entries Zhiling Zou <zhilinz(a)nebusec.ai> SUNRPC: trace an accepted transport before publishing it Chuck Lever <chuck.lever(a)oracle.com> SUNRPC: Resume receiving after a TLS control record Chuck Lever <chuck.lever(a)oracle.com> SUNRPC: Reject a TLS alert record that is not two octets Chuck Lever <chuck.lever(a)oracle.com> SUNRPC: Reject a socket that already has an svc_sock attached Chris Mason <clm(a)meta.com> sunrpc: pin gss module across auth_domain RCU free Jeff Layton <jlayton(a)kernel.org> SUNRPC: keep the first error in svc_register() Jérémy Jean <Jeremy.Jean(a)oss.cyber.gouv.fr> SUNRPC: fix oversized GSS proxy token copy Chuck Lever <chuck.lever(a)oracle.com> SUNRPC: Do not credit control-record octets to the RPC stream Chuck Lever <chuck.lever(a)oracle.com> SUNRPC: Copy the deferred RPC Call from the head buffer Aldo Ariel Panzardo <qwe.aldo(a)gmail.com> nfsd: zero NFSv4 COMPOUND tag padding Jeff Layton <jlayton(a)kernel.org> NFSD: validate transport name in listener_set before serv creation Chuck Lever <chuck.lever(a)oracle.com> NFSD: Set nn->cld_net before registering the cld pipe Chuck Lever <chuck.lever(a)oracle.com> NFSD: Return NFSERR_ISDIR for NFSv2 READ and WRITE on a non-regular file Chuck Lever <chuck.lever(a)oracle.com> NFSD: Resolve the recall-any mask names in the trace format Chuck Lever <chuck.lever(a)oracle.com> NFSD: Reject an oversized principal hash from nfsdcld Aldo Ariel Panzardo <qwe.aldo(a)gmail.com> nfsd: propagate SETXATTR value decode errors Jérémy Jean <Jeremy.Jean(a)oss.cyber.gouv.fr> nfsd: preflight SEQUENCE replies before accepting a slot Chuck Lever <chuck.lever(a)oracle.com> NFSD: Map flex file layout IDs through the request's user namespace Chuck Lever <chuck.lever(a)oracle.com> NFSD: map fh_verify() status codes for NFS_ACLv3 replies NeilBrown <neil(a)brown.name> nfsd: honour client-provided attributes for NFS4_CREATE_EXCLUSIVE4_1 Cen Zhang (Microsoft Security FORGE Labs) <blbllhy(a)gmail.com> nfsd: hold cl_lock in client_has_openowners() Chuck Lever <chuck.lever(a)oracle.com> NFSD: Fix out-of-bounds read in the rpc_status dump Wentao Liang <vulab(a)iscas.ac.cn> nfsd: Fix id-to-name cache entry leak in idtoname_parse() David Flynn <david.flynn(a)hammerspace.com> nfsd: fetch direct I/O alignment for files handed to the filecache Chuck Lever <chuck.lever(a)oracle.com> NFSD: Fail a pool_threads read whose reply does not fit Ameer Hamza <ameer.hamza(a)truenas.com> nfsd: don't modify a session slot when replaying its cached reply Chuck Lever <chuck.lever(a)oracle.com> NFSD: Don't complete a cld upcall the daemon has not read Chuck Lever <chuck.lever(a)oracle.com> NFSD: Do not send CB_RECALL_ANY to NFSv4.0 clients Aldo Ariel Panzardo <qwe.aldo(a)gmail.com> NFSD: copy SETXATTR data from all XDR buffer segments Aldo Ariel Panzardo <qwe.aldo(a)gmail.com> nfsd: clear XDR padding in GETXATTR replies Jeff Layton <jlayton(a)kernel.org> NFSD: cap the number of listeners accepted in listener_set Mike Snitzer <snitzer(a)kernel.org> NFS/localio: report the stability a DIO WRITE actually has Mike Snitzer <snitzer(a)kernel.org> NFS/localio: fix nfs_local_dio_misaligned tracepoint Jimmy Zuber <jamz(a)amazon.com> NFS: Fix stale negative cache on failed nfs_mkdir() Benjamin Coddington <ben.coddington(a)hammerspace.com> NFSv4/flexfiles: Bound page coalescing on the absolute stripe offset Benjamin Coddington <ben.coddington(a)hammerspace.com> NFSv4/flexfiles: Use the full 64-bit stripe_unit Benjamin Coddington <ben.coddington(a)hammerspace.com> NFSv4/flexfiles: Use the full 64-bit offset for read DS selection Benjamin Coddington <bcodding(a)hammerspace.com> NFSv4/flexfiles: fail I/O to the data server once a lock is lost Benjamin Coddington <ben.coddington(a)hammerspace.com> NFSv4/filelayout: Anchor page coalescing on pattern_offset Benjamin Coddington <ben.coddington(a)hammerspace.com> NFSv4.1/pnfs: suspend pNFS on NFS4ERR_TOOSMALL from LAYOUTGET Benjamin Coddington <ben.coddington(a)hammerspace.com> NFSv4/pnfs: Free the netid when draining a data-server address list Chuck Lever <chuck.lever(a)oracle.com> pnfs/blocklayout: Complete a device upcall when the pipe is closed Chuck Lever <chuck.lever(a)oracle.com> pnfs/blocklayout: Complete a device upcall only on its own reply Benjamin Coddington <ben.coddington(a)hammerspace.com> pNFS: Fix CB_NOTIFY_DEVICEID CHANGE to consume ndc_immediate Ratnaker Gautam <ratnaker.gautam(a)kuleuven.be> smb: client: validate NT transaction response layout and offsets Dominik Maier <dmnk(a)google.com> smb: client: fix slab-out-of-bounds write in id_mode_to_cifs_acl() Abdifatah Suruur <suruurism(a)gmail.com> smb: client: fix fiemap wild read on empty truncated response Luxiao Xu <rakukuip(a)gmail.com> smb: client: fix buffer overflow in SMB2_tcon() Paulo Alcantara <pc(a)manguebit.org> smb: client: don't resurrect an exiting tcon from cached dir workers VeroFess <coderzeng(a)hotmail.com> smb: server: size directory name conversion buffer correctly Borislav Petkov (AMD) <bp(a)alien8.de> x86/bugs: Adapt SRSO mitigation to Zen6 Darrick J. Wong <djwong(a)kernel.org> xfs: reattach dquots after changing inode ids Darrick J. Wong <djwong(a)kernel.org> xfs: range-check bc_levels array access in scrub tracepoints Darrick J. Wong <djwong(a)kernel.org> xfs: propagate errors while checking null siblings Darrick J. Wong <djwong(a)kernel.org> xfs: opportunistically skip btree block checks Darrick J. Wong <djwong(a)kernel.org> xfs: only written file data blocks can be shared Darrick J. Wong <djwong(a)kernel.org> xfs: never reset the default quota timer Darrick J. Wong <djwong(a)kernel.org> xfs: init inode number for tracepoint Darrick J. Wong <djwong(a)kernel.org> xfs: fix data fork block count check in xrep_inode_blockcounts Darrick J. Wong <djwong(a)kernel.org> xfs: fix correction of unwritten extents in quota file data fork Darrick J. Wong <djwong(a)kernel.org> xfs: don't try to scrub self-referential dirent in metapath checker Darrick J. Wong <djwong(a)kernel.org> xfs: don't try to repair rtsummary if the summary file isn't computed Darrick J. Wong <djwong(a)kernel.org> xfs: don't subtract excess usage twice when computing agf_btreeblks Darrick J. Wong <djwong(a)kernel.org> xfs: don't set a metadata directory's parent to sb_rootino Darrick J. Wong <djwong(a)kernel.org> xfs: don't scan across metadata/regular directory trees for dirents Darrick J. Wong <djwong(a)kernel.org> xfs: don't rescan ifree and icount when frozen Darrick J. Wong <djwong(a)kernel.org> xfs: don't queue rmap update twice when reaping a fork Darrick J. Wong <djwong(a)kernel.org> xfs: don't overrun incore inode when cleaning attr forks Darrick J. Wong <djwong(a)kernel.org> xfs: don't clear COWEXTSIZE on directories on reflink filesystems Darrick J. Wong <djwong(a)kernel.org> xfs: don't allow sm_agno for non-group metadir path checking Darrick J. Wong <djwong(a)kernel.org> xfs: complain loudly when dirtree checker finds broken links Darrick J. Wong <djwong(a)kernel.org> xfs: clear set[ug]id mode bits when zapping attr fork Darrick J. Wong <djwong(a)kernel.org> xfs: clarify various parts of the bitmap API Darrick J. Wong <djwong(a)kernel.org> xfs: check for termination during rmap btree walk Darrick J. Wong <djwong(a)kernel.org> xfs: check for fragments when full-extent sharing matches Aldo Ariel Panzardo <qwe.aldo(a)gmail.com> xfs: bound inode fork length against the fork size during log recovery Aldo Ariel Panzardo <qwe.aldo(a)gmail.com> xfs: bound da-node entry count against the correct geometry Darrick J. Wong <djwong(a)kernel.org> xfs: always zero the whole shortform header when zeroing attr fork Darrick J. Wong <djwong(a)kernel.org> xfs: always report scrub errors in tracepoints Darrick J. Wong <djwong(a)kernel.org> xfs: always report inode repair setup failures Darrick J. Wong <djwong(a)kernel.org> xfs: always forget cached ACLs if the attr fork swap succeeds Darrick J. Wong <djwong(a)kernel.org> xfs: abort directory tree repair whenever dl->aborted is set Darrick J. Wong <djwong(a)kernel.org> xfs: update quota flags on secondary supers when metadir enabled Darrick J. Wong <djwong(a)kernel.org> xfs: rescan the AGs if incore delalloc counter is negative Darrick J. Wong <djwong(a)kernel.org> xfs: release ip after unlinked list store failure Aldo Ariel Panzardo <qwe.aldo(a)gmail.com> xfs: reject remote xattr entries with an out-of-range value length Aldo Ariel Panzardo <qwe.aldo(a)gmail.com> xfs: reject out-of-range attribute value lengths in xfs_attr_copy_value Darrick J. Wong <djwong(a)kernel.org> xfs: reject absurdly large xattr value lengths in xchk_xattr_actor Darrick J. Wong <djwong(a)kernel.org> xfs: reduce new btree slack factor if free space is negative Aleksandr Nogikh <nogikh(a)google.com> media: usbtv: fix null-pointer dereference on disconnect Johan Hovold <johan(a)kernel.org> media: usbtv: drop redundant device reference Hazem Mohamed Abuelfotoh <abuehaze(a)amazon.com> Revert "net: Convert proto_ops bind() callbacks to use sockaddr_unsized" Jean Delvare <jdelvare(a)suse.de> EDAC/mc: Really fix error path ordering in edac_mc_alloc() Andrea Parri <parri.andrea(a)gmail.com> rtnetlink: wait for RCU readers in rtnl_link_unregister() Joseph Qi <joseph.qi(a)linux.alibaba.com> ksmbd: fix breaking_cnt leak on early return in oplock_break() Yongjun Gwon <d3bugee(a)gmail.com> ksmbd: serialize directory emptiness checks with readdir Florian Westphal <fw(a)strlen.de> netfilter: nf_tables: fix netdev hook allocation memleak with dormant tables Florian Westphal <fw(a)strlen.de> netfilter: nft_payload: restrict checksum offsets to known values Zhiling Zou <zhilinz(a)nebusec.ai> netfilter: validate L4 headers after userspace packet writes Florian Westphal <fw(a)strlen.de> netfilter: nftables: restrict checkum update offset Florian Westphal <fw(a)strlen.de> netfilter: nftables: restrict linklayer and network header writes Pablo Neira Ayuso <pablo(a)netfilter.org> netfilter: nft_meta: add double-tagged vlan and pppoe support Florian Westphal <fw(a)strlen.de> netfilter: nfnetlink_queue: restrict writes to network header Daniel Borkmann <daniel(a)iogearbox.net> ipv6: Implement limits on extension header parsing Florian Westphal <fw(a)strlen.de> netfilter: disable payload mangling in userns Cheng-Yang Chou <yphbchou0911(a)gmail.com> sched_ext: Fix scx_flush_disable_work() UAF race Richard Cheng <icheng(a)nvidia.com> sched_ext: sync disable_irq_work in bpf_scx_unreg() Darrick J. Wong <djwong(a)kernel.org> xfs: fix xchk_stats_estimate_bufsize to allow for the trailing null Darrick J. Wong <djwong(a)kernel.org> xfs: actually check XFS_DIFLAG2_METADATA for metadata btree data forks Darrick J. Wong <djwong(a)kernel.org> xfs: adjust checks for cross-AG reaping issues Darrick J. Wong <djwong(a)kernel.org> xfs: cross-reference the primary superblock Darrick J. Wong <djwong(a)kernel.org> xfs: jump out of xchk_bmap_check_rmap if fatal signals Darrick J. Wong <djwong(a)kernel.org> xfs: mark overfull dabtree node blocks as corrupt Darrick J. Wong <djwong(a)kernel.org> xfs: check fork type against dabtree block magic number Darrick J. Wong <djwong(a)kernel.org> xfs: abort dirtree repair if the live update hook dies Darrick J. Wong <djwong(a)kernel.org> xfs: fix revalidation of xchk_dquot_iter cached mappings Darrick J. Wong <djwong(a)kernel.org> xfs: bail out of directory tree repairs on error Darrick J. Wong <djwong(a)kernel.org> xfs: assign an owner to scrub_stats_fops Darrick J. Wong <djwong(a)kernel.org> xfs: allow softlimit with no hardlimit in quota scrub Darrick J. Wong <djwong(a)kernel.org> xfs: fix lost errno returned from xfarray_foliosort Darrick J. Wong <djwong(a)kernel.org> xfs: don't repair fs summary counters with garbage Darrick J. Wong <djwong(a)kernel.org> xfs: fix skipped inode mask handling in iscan Darrick J. Wong <djwong(a)kernel.org> xfs: don't proceed with xattr repair if the live update fails Eric Sandeen <sandeen(a)redhat.com> xfs: validate rc_domain in xchk_rtrefcount_mergeable Darrick J. Wong <djwong(a)kernel.org> xfs: don't fix the directory tree if live update fails Darrick J. Wong <djwong(a)kernel.org> xfs: flag excessive delalloc rt extents as corruption Darrick J. Wong <djwong(a)kernel.org> xfs: zero out di_metatype when removing the metadir file iflag Darrick J. Wong <djwong(a)kernel.org> xfs: don't pass iget failures up when marking ondisk inodes Darrick J. Wong <djwong(a)kernel.org> xfs: always reset incore attr fork buffer when resetting fork Darrick J. Wong <djwong(a)kernel.org> xfs: fix inode btree repair when a cluster is larger than a chunk Darrick J. Wong <djwong(a)kernel.org> xfs: actually report corrupt xattrs as XFAIL during cross-referencing Darrick J. Wong <djwong(a)kernel.org> xfs: fix buffer overflow in corrupt inline attr structure Darrick J. Wong <djwong(a)kernel.org> xfs: fix unnecessary dapos truncation in xchk_dir_walk Darrick J. Wong <djwong(a)kernel.org> xfs: actually lock the metafile reservation when adjusting after repair Darrick J. Wong <djwong(a)kernel.org> xfs: avoid cross-rtgroup reaping after a repair Darrick J. Wong <djwong(a)kernel.org> xfs: online quotacheck must dirty dquot if enforcement adjustments needed Darrick J. Wong <djwong(a)kernel.org> xfs: fix buffer overruns in xfs_ioc_attr_list Darrick J. Wong <djwong(a)kernel.org> xfs: fix missing xfs_qm_adjust_dqlimits call in quotacheck repair Darrick J. Wong <djwong(a)kernel.org> xfs: fix xfs_rename_space_res for non-pptr filesystems Darrick J. Wong <djwong(a)kernel.org> xfs: fix ondisk symlink target validation in xrep_dinode_check_dfork Darrick J. Wong <djwong(a)kernel.org> xfs: compute the correct fdblocks/frextents for repair when they're negative Darrick J. Wong <djwong(a)kernel.org> xfs: mark cow extents bad if there's no rmap mapping for them Darrick J. Wong <djwong(a)kernel.org> xfs: clear the symlink zapped flag if inline symlink is ok Amir Goldstein <amir73il(a)gmail.com> ovl: skip copy up of empty security.capability Chris Mason <mason(a)kernel.org> ovl: set the revalidate flags after d_instantiate() Hungyu Lin <dennylin0707(a)gmail.com> ovl: reserve space for the casefolded name terminator Chris Mason <mason(a)kernel.org> ovl: read the nlink xattr of every indexed non-dir Amir Goldstein <amir73il(a)gmail.com> ovl: fortify ovl_copy_xattr() against underlying layer modifications Chris Mason <mason(a)kernel.org> ovl: fix a torn path in ovl_get_redirect() Chris Mason <mason(a)kernel.org> ovl: do not copy up an xattr value that was never read Chris Mason <mason(a)kernel.org> ovl: check the casefold flag of directories only Chris Mason <mason(a)kernel.org> ovl: always encode the origin fh when index is enabled Chris Mason <mason(a)kernel.org> ovl: use the pinned upper dir in ovl_fix_origin() Chris Mason <mason(a)kernel.org> ovl: take a snapshot of the name for copy up Chris Mason <mason(a)kernel.org> ovl: set OVL_WHITEOUTS before publishing the upper dir Weiming Shi <bestswngs(a)gmail.com> smb: client: stop processing a read response after a receive error Diego Oliva <diego(a)bynar.io> smb: client: fix OOB last_entry pointer from unbounded LastNameOffset Cen Zhang <zzzccc427(a)gmail.com> ocfs2: snapshot dentry names in file and setattr traces Cen Zhang <zzzccc427(a)gmail.com> ocfs2: pin refcount trees before dropping the lookup lock Jiaming Zhang <r772577952(a)gmail.com> ocfs2: fix chunk number of the first chunk in a local quota file Cen Zhang <zzzccc427(a)gmail.com> ocfs2: cancel quota sync work before freeing quota info Joseph Qi <joseph.qi(a)linux.alibaba.com> ocfs2/dlm: hold the lookup reference across convert AST enqueue Cen Zhang <zzzccc427(a)gmail.com> ocfs2/dlm: hold a lock reference across grant AST enqueue Cen Zhang <zzzccc427(a)gmail.com> ocfs2/heartbeat: unlink live slots when their node is missing Sean Young <sean(a)mess.org> media: rc: Fix ABBA deadlock by making locks more fine grained Sean Young <sean(a)mess.org> media: rc: Fix use after free in bpf progs Sean Young <sean(a)mess.org> media: rc: After rc_unregister_device() timers can be re-armed Sean Young <sean(a)mess.org> media: rc: Use after free in ir_raw_event_handle() Sean Young <sean(a)mess.org> media: rc: mce_kbd: Fix inconsistent locking of keylock Sean Young <sean(a)mess.org> media: rc: Fix race between bpf(BPG_PROG_ATTACH) and device unregister Weigang He <geoffreyhe2(a)gmail.com> media: rc: fintek-cir: process a full RX buffer instead of overflowing it Sean Young <sean(a)mess.org> media: rc: Ensure registered is cleared in error path Sean Young <sean(a)mess.org> media: rc: Ensure that rc_unregister_device() does not free input device Janne Grunau <j(a)jannau.net> nvmem: core: Fix OOB read for bit offsets of more than one byte Myeonghun Pak <mhun512(a)gmail.com> power: supply: sbs-battery: disable polling before supply teardown Bryan O'Donoghue <bryan.odonoghue(a)linaro.org> phy: core: Fix race-condition between _of_phy_get() and try_module_get() Nickolai Zeldovich <nickolai(a)csail.mit.edu> resource: report a devm_request_resource() conflict under the lock Weibin Liu <liuwb(a)xiaopeng.com> spi: spi-pci1xxxx: quiesce DMA engines on transfer timeout YANXIN LI <fadouse(a)pm.me> ufs: use u64 for directory size in ufs_last_byte Nguyen Quang Le Kien <khiemtranzo532001(a)gmail.com> usb: gadget: fix refcount underflow in gadgetfs_bind() error path Zhao Li <enderaoelyther(a)gmail.com> wifi: mt76: mt7996: unlink TWT flow if the MCU rejects the agreement Rosen Penev <rosenp(a)gmail.com> wifi: ath9k: delete channel-context timers on deinit Yuchao Zhang <ndaugoing(a)gmail.com> xen-blkfront: unbind irq before tearing down ring and shadow requests Igor Putko <igorpetindev(a)gmail.com> serial: core: shut down initialized port on removal Fan Wu <fanwu01(a)zju.edu.cn> scsi: dc395x: sync the waiting_timer before freeing the host Vernon Yang <yanglincheng(a)kylinos.cn> mm: khugepaged: fix folio is used after folio_put/unlock() Imre Kaloz <kaloz(a)kernel.org> mm/slab: sample slab_state once in kmem_cache_destroy() Fan Wu <fanwu01(a)zju.edu.cn> media: s5p-mfc: use timer_shutdown_sync() for the self-rearming watchdog Rik van Riel <riel(a)surriel.com> media: redrat3: fix UAF in probe error path leaving rc device registered Balakrishnan Sambath <balakrishnan.s(a)microchip.com> media: microchip-isc: take a reference on the parsed endpoints Cong Nguyen <congnt264(a)gmail.com> media: microchip-csi2dc: fix async notifier leak on probe error path Fan Wu <fanwu01(a)zju.edu.cn> media: marvell: mcam: stop DMA and cancel s_bh_work before freeing DMA buffers Fan Wu <fanwu01(a)zju.edu.cn> media: imx-jpeg: cancel timeout worker when streaming stops Shuangpeng Bai <shuangpeng.kernel(a)gmail.com> media: gspca: use vb2_video_unregister_device() on disconnect Myeonghun Pak <mhun512(a)gmail.com> media: cx23885: unregister DVB bus when SP2 CI setup fails Amit Machhiwal <amachhiw(a)linux.ibm.com> KVM: PPC: Book3S HV: Add SRCU protection for virtual-mode HPT hcalls Nicolin Chen <nicolinc(a)nvidia.com> iommu/arm-smmu-v3: Disable the impl before disabling the SMMU on shutdown Andrea Parri <parri.andrea(a)gmail.com> iomap: don't resubmit an ioend after ->writeback_submit() failed Kyle Zeng <kylebot(a)openai.com> io_uring/io-wq: save worker type before dropping its reference Yousef Alhouseen <alhouseenyousef(a)gmail.com> HID: hiddev: keep state alive through disconnect unlock Richard Patel <ripatel(a)wii.dev> genirq: Move interrupt thread exit_work object to irqaction Richard Patel <ripatel(a)wii.dev> genirq: Defer kfree(irqaction) until irq_thread_dtor() finishes Ngoc Quy <ngocquy0700(a)gmail.com> fs/proc/task_mmu: pin mm_users in do_pagemap_scan() Xiang Mei <xmei5(a)asu.edu> fbdev: udlfb: don't rebuild the mode list while the framebuffer is in use Yibo Tan <lhfff(a)tju.edu.cn> fbdev: atmel_lcdfb: Prevent FIFO work after removal Osama Abdelkader <osama.abdelkader(a)gmail.com> drm/panthor: Fix TOCTOU race between GROUP_REGISTERED check and erase Bui Viet Dung <dungvn2345(a)gmail.com> Bluetooth: hci_vhci: Pin module for debugfs file operations Fan Wu <fanwu01(a)zju.edu.cn> ASoC: amd: ps: fix snd_acp63_remove() teardown ordering Sung Byeongchan <tjdqudcks0424(a)naver.com> ALSA: pcmtest: handle multiple wraps in random capture fill Takashi Iwai <tiwai(a)suse.de> ALSA: emux: Fix UAF of soundfont zones at note-on Takashi Iwai <tiwai(a)suse.de> ALSA: control: Fix UAF in snd_ctl_elem_add() on card disconnect Frank Zhang <rmxpzlb(a)gmail.com> rust: rcpufreq_dt: add module alias Mehmet Koseoglu <mehmet.mkoseoglu(a)gmail.com> rust: cpufreq: reject NULL from cpufreq_cpu_get() Andreas Hindborg <a.hindborg(a)kernel.org> rust: configfs: fix data offset calculation for subsystem callbacks Andreas Hindborg <a.hindborg(a)kernel.org> rust: block: require `Sync` for `Operations::QueueData` Andreas Hindborg <a.hindborg(a)kernel.org> rust: block: fix `Send` bound for `GenDisk` Eliot Courtney <ecourtney(a)nvidia.com> rust: bitmap: restrict bitmap length to at most i32::MAX Miguel Ojeda <ojeda(a)kernel.org> objtool/rust: add one more `noreturn` Rust function for Rust 1.101.0 Karl Mehltretter <kmehltretter(a)gmail.com> klist: avoid accesses after waking klist_remove() Ping Cheng <ping.cheng(a)wacom.com> HID: wacom: Write shared touch initial status only once Ping Cheng <ping.cheng(a)wacom.com> HID: wacom: Setup SW_MUTE_DEVICE according to the order of input registration Lee Jones <lee(a)kernel.org> HID: wacom: Redesign shared sibling data lifecycle Lee Jones <lee(a)kernel.org> HID: wacom: Fix Use-After-Free in wacom_bamboo_pad Lee Jones <lee(a)kernel.org> HID: wacom: Fix Use-After-Free in wacom_intuos_pad Lee Jones <lee(a)kernel.org> HID: wacom: Advertise SW_MUTE_DEVICE capability prior to registration Lee Jones <lee(a)kernel.org> HID: wacom: Use hdev->product in wacom_setup_touch_input_capabilities Harald Freudenberger <freude(a)linux.ibm.com> s390/zcrypt: Fix out-of-bounds ptr advance in cca_query_crypto_facility() Heiko Carstens <hca(a)linux.ibm.com> s390/signal: Fix incorrect return address in signal frame Heiko Carstens <hca(a)linux.ibm.com> s390/probes: Fix wrong opcode for cgrb fixup Heiko Carstens <hca(a)linux.ibm.com> s390/kprobes: Prevent kprobes on instructions with exception table entry Heiko Carstens <hca(a)linux.ibm.com> s390/extable: Fix mvcos instruction decoding Sumanth Korikkar <sumanthk(a)linux.ibm.com> s390/cpum_cf: Check session mask before cpu offline Wentao Liang <vulab(a)iscas.ac.cn> drm/msm: Fix vm_bo use-after-free in with_vm_locks() Niklas Cassel <cassel(a)kernel.org> ata: sata_fsl: Fix use-after-free of host_priv on probe() failure Wentao Liang <vulab(a)iscas.ac.cn> ASoC: audio-graph-card2: Fix use-after-free in audio_graph2_link_c2c() Binbin Deng <18983559317(a)163.com> apparmor: fix a use-after-free in aa_lookupn_ns() Josef Bacik <josef(a)toxicpanda.com> mm/hugetlb: fix use-after-free of a new anon folio David Hildenbrand (Arm) <david(a)kernel.org> mm/hugetlb: fix use-after-free in hugetlb_mfill_atomic_pte() Deepanshu Kartikey <kartikey406(a)gmail.com> media: imon: fix use-after-free in display_close via dev_dbg Anuj Bolewar <bolewara(a)gmail.com> media: hackrf: fix use-after-free in hackrf_alloc_urbs() error path Pei Xiao <xiaopei01(a)kylinos.cn> media: cx23885: Fix use-after-free in cx23885_finidev due to race condition Fan Wu <fanwu01(a)zju.edu.cn> media: au0828: fix use-after-free in bulk_timeout timer on disconnect Chuck Lever <chuck.lever(a)oracle.com> lockd: Fix use-after-free in nlmsvc_retry_blocked Günther Noack <gnoack(a)google.com> landlock: Fix superblock use-after-free in release_inode() Nirmoy Das <nirmoyd(a)nvidia.com> iommufd: Fix event queue release use-after-free Yehyeong Lee <yhlee(a)isslab.korea.ac.kr> nvmet-fc: fix use-after-free in nvmet_fc_ls_create_connection() Daejun Park <daejun7.park(a)samsung.com> nvmet: fix use-after-free of the old registrant in nvmet_pr_preempt() Mario Limonciello <mario.limonciello(a)amd.com> platform/x86/amd: hfi: Fix a use-after-free when unloading the driver James Kim <james010kim(a)gmail.com> rapidio: mport_cdev: fix use-after-free in mport_mm_close() Guangshuo Li <lgs201920130244(a)gmail.com> RDMA/irdma: avoid use-after-free in icrdma_remove Henry Martin <bsdhenrymartin(a)gmail.com> smb: client: fix use-after-free in cifs_ses_add_channel() Diego Oliva <diego(a)bynar.io> smb: client: fix use-after-free infoleak via the readdir resume name AngeloGioacchino Del Regno <angelogioacchino.delregno(a)collabora.com> spmi: Fix potential use-after-free by grabbing of_node reference Zijing Yin <yzjaurora(a)gmail.com> SUNRPC: fix netns use-after-free in write_gssp() Andreas Wendleder <gonsolo(a)gmail.com> wifi: b43: fix use-after-free in b43_bcma_remove() Li RongQing <lirongqing(a)baidu.com> x86/ioperm: Prevent NULL dereference on theoretical missing IO bitmap Kevin Cheng <chengkev(a)google.com> KVM: VMX: Synthesize nested EPT violation GVA_IS_VALID/GVA_TRANSLATED bits Sean Christopherson <seanjc(a)google.com> KVM: x86: Tell ->inject_page_fault() whether or a fault came from hardware Paolo Bonzini <pbonzini(a)redhat.com> KVM: x86/mmu: pass PFERR_GUEST_PAGE/FINAL_MASK to kvm_translate_gpa Christoph Zwerschke <cito(a)online.de> Revert "Bluetooth: btusb: Add ASUS USB-BT540 for Realtek 8761CU" Christoph Zwerschke <cito(a)online.de> Revert "Bluetooth: btusb: Add ASUS USB-BT600 for Realtek 8761CU" Daehyeon Ko <4ncienth(a)gmail.com> cgroup: serialize migrations of newly forked processes Eric Dumazet <edumazet(a)kernel.org> vlan: restore HW VLAN tag insertion with reorder_hdr off Kuniyuki Iwashima <kuniyu(a)google.com> tcp: Fix potential UAF in reqsk_timer_handler(). Namjae Jeon <linkinjeon(a)kernel.org> ksmbd: validate security descriptor offsets before pointer arithmetic Karl Mehltretter <kmehltretter(a)gmail.com> ksmbd: use u8 for SMB2 oplock level values DaeMyung Kang <charsyam(a)gmail.com> ksmbd: return end of file for reads past a named stream's data Abdifatah Suruur <suruurism(a)gmail.com> ksmbd: reserve space for the UTF-16 terminator in stream info DaeMyung Kang <charsyam(a)gmail.com> ksmbd: preserve unreadable named streams on open Jan Koester <j.koester(a)act-marketing.de> ksmbd: ignore network devices of other namespaces Cen Zhang (Microsoft) <cenzhang(a)linux.microsoft.com> ksmbd: fix parent dentry lifetime in directory enumeration Giorgi Kobakhia <gkobakhi(a)asu.edu> ksmbd: fix overflow in dacloffset bounds check in build_sec_desc() Dairui Zhang <zhangdairui(a)gmail.com> ksmbd: fix OOB read and cross-share confusion in ksmbd_validate_name_reconnect() Namjae Jeon <linkinjeon(a)kernel.org> ksmbd: fix extended session security negotiation for raw NTLMSSP DaeMyung Kang <charsyam(a)gmail.com> ksmbd: avoid restoring only in-memory EOF after allocation change Michail Andreas Michalopoulos <mike.michalo(a)gmail.com> ksmbd: accept share config responses from ksmbd-tools before 3.5.3 David Heidelberg <david(a)ixit.cz> backlight: qcom-wled: Fix WLED3 brightness register stride David Heidelberg <david(a)ixit.cz> backlight: qcom-wled: Fix unbalanced OVP IRQ enable at probe David Heidelberg <david(a)ixit.cz> backlight: qcom-wled: Fix NULL pointer dereference in wled_remove() Myeonghun Pak <mhun512(a)gmail.com> backlight: lm3630a: Cancel delayed work before destroying workqueue Kameron Carr <kameroncarr(a)linux.microsoft.com> Drivers: hv: vmbus: Bounds check the shared ring buffer indices Johan Hovold <johan(a)kernel.org> driver core: fix parent lock use-after-free on USB disconnect Josef Bacik <josef(a)toxicpanda.com> driver core: Limit the messages on a refused uevent Johan Hovold <johan(a)kernel.org> driver core: take parent lock on deferred probe Jamal Hadi Salim <jhs(a)mojatatu.com> net/sched: act_ife: do not consume the inner header on egress Antonio Quartulli <antonio(a)mandelbit.com> net/sched: fix packet reordering on requeue owen kwan <owen(a)verialabs.com> net/sched: sch_teql: fix use-after-free on lower qdisc drop Jamal Hadi Salim <jhs(a)mojatatu.com> net/sched: sch_teql: fix slaves_lock IRQ deadlock Yuhang Zheng <z1652074432(a)gmail.com> net/sched: cls_flower: avoid stale mask references after delete Jamal Hadi Salim <jhs(a)mojatatu.com> net/sched: cls_bpf: accept dev-bound programs on shared blocks Hengyu Liang <hengyul(a)cs.unc.edu> serial: core: fix TIOCSSERIAL and TIOCSERCONFIG on uninitialised ports Jiakai Xu <xujiakai2025(a)iscas.ac.cn> RISC-V: KVM: Fix double-free of sdata in kvm_pmu_clear_snapshot_area() Timur Kristóf <timur.kristof(a)gmail.com> drm/amdgpu/uvd3.1: Fix checking whether UVD firmware keyselect was already set Donggeun Yoo <donggeunyoo.kernel(a)gmail.com> tracing: Fix NULL dereference when copying keys for a field variable Pengpeng Hou <pengpeng(a)iscas.ac.cn> tracing: Bound histogram expression strings with seq_buf Pengpeng Hou <pengpeng(a)iscas.ac.cn> tracing: Return ERR_PTR() from expr_str() Pengpeng Hou <pengpeng(a)iscas.ac.cn> tracing: Use __free() for expr_str() buffer Tom Zanussi <zanussi(a)kernel.org> tracing: Fix fully-qualified variable reference printing in histograms Christian Brauner <brauner(a)kernel.org> ntfs3: free replaced mount options after a grace period Christian Brauner <brauner(a)kernel.org> ipc: drop the mqueue mount with kern_unmount() on setup failure Vlad Kulikov <vlad.kulikov.c(a)gmail.com> ipc: create_ipc_ns: drop mqueue mount on sysctl setup failure Igor Paunovic <royalnet026(a)gmail.com> accel/rocket: search every core slot when looking up a scheduler Hari Mishal <harimishal1(a)gmail.com> drm/amd/display: guard dc_sink dereferences in MST mode validation Alex Deucher <alexander.deucher(a)amd.com> drm/amdgpu/gmc12: properly pass flush_type to gmc_v12_0_flush_vm_hub() Pierre-Eric Pelloux-Prayer <pierre-eric.pelloux-prayer(a)amd.com> drm/amdgpu: remove gart_window_lock usage from gmc v12 Timur Kristóf <timur.kristof(a)gmail.com> drm/amd/display: Fix fast updates on DCE 6.x Ali Ahmet Memis <ali(a)iusegentoo.com> tools/power turbostat: Read complete CPU lists Paulo Alcantara <pc(a)manguebit.org> smb: client: require stable pages for signed connections Paulo Alcantara <pc(a)manguebit.org> smb: client: only require read lease for size-extending zero range Paulo Alcantara <pc(a)manguebit.org> smb: client: drain and invalidate before server-side copy/clone Paulo Alcantara <pc(a)manguebit.org> smb: client: discard post-EOF pagecache when extending a file via clone range Paulo Alcantara <pc(a)manguebit.org> smb: client: clear post-EOF pagecache when extending a file via truncate Jakub Gawlik <jakubgawlik13(a)gmail.com> ALSA: hda/realtek: Add micmute LED quirk for Acer Swift SFG16-72 Zhang Heng <zhangheng(a)kylinos.cn> ALSA: hda/realtek: add quirk for Acer Nitro ANV15-51 Sean Christopherson <seanjc(a)google.com> KVM: SVM: Update control fields on #VMEXIT if and only if VMRUN succeeded Sean Christopherson <seanjc(a)google.com> KVM: SVM: Preserve TLB control (i.e. pending TLB flush) on failed VMRUN Ilya Maximets <i.maximets(a)ovn.org> net/sched: act_ct: remove 'add_helper' dead code Johan Hovold <johan(a)kernel.org> serial: abort TIOCMIWAIT on hangup Johan Hovold <johan(a)kernel.org> serial: fix ioctl hangup race Jiri Slaby (SUSE) <jirislaby(a)kernel.org> serial: serial_core: simplify uart_ioctl() returns Sean Christopherson <seanjc(a)google.com> KVM: x86: Fill kvm_run exit fields in common get_nested_state_pages() error paths Adarsh Das <adarshdas950(a)gmail.com> smb: client: delete compound mids on send failure before unlock David Francis <David.Francis(a)amd.com> drm/amdkfd: Avoid integer underflow in EOP ring size calculation. David Francis <David.Francis(a)amd.com> drm/amdkfd: Avoid integer underflow with ffs in EOP ring size calc Xiaogang Chen <xiaogang.chen(a)amd.com> drm/amdkfd: Guard m->cp_hqd_eop_control setting by q->eop_ring_buffer_size Darrick J. Wong <djwong(a)kernel.org> xfs: don't cross reference rmapbt with bitmaps if they're incomplete Zongmin Zhou <zhouzongmin(a)kylinos.cn> RISC-V: KVM: Fix sdata leak and stale snapshot_addr in snapshot_set_shmem Xie Bo <xb(a)ultrarisc.com> RISC-V: KVM: Release unused page after MMU invalidation Paulo Alcantara <pc(a)manguebit.org> smb: client: fix fattr leaking on wsl_to_fattr() failure Mahmoud Nagy Adam <mngyadam(a)amazon.de> selftests: ublk: install test_common.sh and trace/ scripts Ming Lei <ming.lei(a)redhat.com> selftests: ublk: increase timeout to 150 seconds Caleb Sander Mateos <csander(a)purestorage.com> selftests: ublk: add utility to get block device metadata size Ming Lei <ming.lei(a)redhat.com> selftests/ublk: fix Makefile to rebuild on header changes Kevin Wang <kevin.wang(a)amd.com> drm/amd/pm: fix gpu metrics energy accumulator for smu 13.0.0/13.0.7 Arie Miller <renari(a)arimil.com> hwmon: (asus_rog_ryujin) Synchronize HID command and report handling Arie Miller <renari(a)arimil.com> hwmon: (asus_rog_ryujin) Validate HID report lengths Arie Miller <renari(a)arimil.com> hwmon: (asus_rog_ryujin) Add per-device configuration Guenter Roeck <linux(a)roeck-us.net> hwmon: (asus_rog_ryujin) Rely on subsystem locking Paulo Alcantara <pc(a)manguebit.org> smb: client: fix WSL reparse point uid/gid override Paulo Alcantara <pc(a)manguebit.org> smb: client: fix uid/gid override in getattr with posix extensions Théo Lebrun <theo.lebrun(a)bootlin.com> mips: select CONFIG_WEAK_REORDERING_BEYOND_LLSC from CONFIG_EYEQ Gregory CLEMENT <gregory.clement(a)bootlin.com> MIPS: Fix HOTPLUG_PARALLEL dependency Harald Freudenberger <freude(a)linux.ibm.com> s390/crypto: Fix handling of EBUSY in PAES when req is pushed to crypto engine Harald Freudenberger <freude(a)linux.ibm.com> s390/crypto: Fix use of mutex in atomic context in PAES Harald Freudenberger <freude(a)linux.ibm.com> s390/crypto: Fix return code handling at skcipher_walk_done in PAES algorithms Peter Zijlstra <peterz(a)infradead.org> s390/crypto: Replace cond_resched() with msleep(1) Chaithanya Lagisetty <nagachaithanya9911(a)gmail.com> LoongArch: KVM: Fix resource leak in kvm_loongarch_env_init() error path Chaithanya Lagisetty <nagachaithanya9911(a)gmail.com> LoongArch: KVM: Add unregister helpers for the KVM interrupt devices Austin Zheng <Austin.Zheng(a)amd.com> drm/amd/display: Remove const Qualifier From Non-Pointer Fields Wenjing Liu <wenjing.liu(a)amd.com> drm/amd/display: add const qualifiers to watermark params struct Austin Zheng <Austin.Zheng(a)amd.com> drm/amd/display: Update P-state naming for clarity. Austin Zheng <Austin.Zheng(a)amd.com> drm/amd/display: DML2.1 Reintegration Sven Peter <sven(a)kernel.org> thunderbolt: Make the DP tunnel activation callback mandatory Ido Schimmel <idosch(a)nvidia.com> ipv6: udp: Create exceptions before socket matching Andy Chiu <tchiu(a)tenstorrent.com> riscv: hwprobe: initialize pair->value in hwprobe_one_pair() Yunpeng Tian <shionthanatos(a)gmail.com> smb: client: reject SetEA requests that do not fit the request buffer Arvind Yadav <arvind.yadav(a)intel.com> mm/migrate_device: clear stale mapping after freeing swapcache Breno Leitao <leitao(a)debian.org> mm/kmemleak: report RCU-tasks quiescent states during the scan Breno Leitao <leitao(a)debian.org> mm/kmemleak: stop the task stack scan early when interrupted Gary Guo <gary(a)garyguo.net> rust: cfi: disable function merging if CFI is enabled Tiezhu Yang <yangtiezhu(a)loongson.cn> LoongArch: Expand module virtual address space to 2GB Jeff Layton <jlayton(a)kernel.org> nfsd: use test_and_clear_bit for somebody_reclaimed to prevent lost update Jeff Layton <jlayton(a)kernel.org> nfsd: dedup nfs4_client_to_reclaim inserts FUJITA Tomonori <fujita.tomonori(a)gmail.com> rust: bug: fix warn_on macro build error on UML Bibo Mao <maobibo(a)loongson.cn> LoongArch: KVM: Set vcpu->cpu before IN_GUEST_MODE is set Bibo Mao <maobibo(a)loongson.cn> LoongArch: KVM: Deliver interrupt after IN_GUEST_MODE is set Bibo Mao <maobibo(a)loongson.cn> LoongArch: KVM: Check kvm_request_pending() in kvm_late_check_requests() Adrian Hunter <adrian.hunter(a)intel.com> i3c: master: Fix potential UAF in i3c_device_uevent() Brendan Jackman <jackmanb(a)google.com> mm/page_alloc: don't spin_trylock() when disallowed in free_one_page() Jose Villaseñor Montfort <pepemontfort(a)gmail.com> HID: input: read battery capacity from its actual report offset Dev Jain <dev.jain(a)arm.com> mm/migrate: use huge_ptep_get() in remove_migration_pte() Yosry Ahmed <yosry(a)kernel.org> KVM: x86: Always initialize EFER reserved bits on vendor initialization Matthew Auld <matthew.auld(a)intel.com> drm/xe/display: skip FORCE_WC and vm_bound check for external dma-bufs Lorenzo Pieralisi <lpieralisi(a)kernel.org> irqchip/gic-v5: Fix standalone IRSes OF probe Lorenzo Pieralisi <lpieralisi(a)kernel.org> dt-bindings: interrupt-controller: gicv5: Relax IRS properties constraints Qing Luo <luoqing(a)kylinos.cn> sctp: auth: discard auth_chunk when skb_clone fails Pablo Neira Ayuso <pablo(a)netfilter.org> netfilter: ctnetlink: do not expose expectation DEAD flag Pablo Neira Ayuso <pablo(a)netfilter.org> netfilter: nf_conntrack_expect: add and use nf_ct_expect_related_pair() Pablo Neira Ayuso <pablo(a)netfilter.org> netfilter: nf_conntrack_expect: use conntrack GC to reap expectations Darrick J. Wong <djwong(a)kernel.org> xfs: fix integer overflow problem when setting large free areas Bui Viet Dung <dungvn2345(a)gmail.com> wwan: wwan_hwsim: Pin module for debugfs file operations Giorgi Kobakhia <gkobakhi(a)asu.edu> udf: fix return value for non-recorded-allocated extents in udf_map_block() Jonathan Gopel <jgopel(a)gmail.com> thunderbolt: Do not RPM complete unrelated subtrees on unplug Cen Zhang <zzzccc427(a)gmail.com> ocfs2: publish the filecheck owner before adding sysfs attributes Cen Zhang <zzzccc427(a)gmail.com> ocfs2: pin owning modules for open debugfs files Cen Zhang <zzzccc427(a)gmail.com> ocfs2: drain quorum work before removing the cluster Cen Zhang <zzzccc427(a)gmail.com> ocfs2/dlm: drain join handlers before releasing module text Ameer Hamza <ameer.hamza(a)truenas.com> nfsd: fix race between client_info_show() and free_client() Wei Jie Law <law.wei.jie(a)gt.tech.gov.sg> net: usb: pegasus: do not advance rx_skb->data on dropped frames Kaho Jiang <kj2864(a)nyu.edu> net: ipv4: add zero check for snd_cwnd_clamp Xiang Mei <xmei5(a)asu.edu> media: go7007: only set audio_enabled if go7007_snd_init() succeeded Xiang Mei <xmei5(a)asu.edu> media: em28xx: reject audio endpoint with zero packet size Myeonghun Pak <mhun512(a)gmail.com> media: cx88: Disable PCI device on MPEG initialization failure Xiang Mei <xmei5(a)asu.edu> libceph: bound mon_command ack decode to front len Andrea Parri <parri.andrea(a)gmail.com> kcsan: Avoid division by zero in kcsan_prandom_u32_max() Fang Xieyan <fangxy(a)xiaopeng.com> kcov: ignore an out-of-range comparison count in write_comp_data() Xiang Mei <xmei5(a)asu.edu> fuse: don't BUG when the copy buffer is exhausted Yuanfu Xie <yuanfuxie(a)stu.pku.edu.cn> ceph: fail readdir when the MDS reply carries no dirfrag Baokun Li <libaokun(a)linux.alibaba.com> blk-crypto: fix NULL deref and UAF in __blk_crypto_evict_key() Karl Mehltretter <kmehltretter(a)gmail.com> ARM: 9524/1: mm: align hugetlb mappings to the huge page size Rohinthan P <rokinthanp03(a)gmail.com> media: em28xx: use video_unregister_device for radio_dev Christian Brauner <brauner(a)kernel.org> Revert "namei: don't reveal overmounted entries in refwalk" Petr Mladek <pmladek(a)suse.com> nbcon/reboot: Switch NBCON consoles into the emergency mode in emergency_restart() Michael Reeves <michael.reeves077(a)gmail.com> regmap: Remove debugfs before cache teardown Yong-Xuan Wang <yongxuan.wang(a)sifive.com> RISC-V: errata: Add SiFive MAL-9092 workaround Jesse Zhang <Jesse.Zhang(a)amd.com> drm/amdgpu/gfx11: set KMD_QUEUE for kernel gfx queues Jesse Zhang <Jesse.Zhang(a)amd.com> drm/amdgpu/gfx12: set KMD_QUEUE for kernel gfx queues Matus Gajdos <matuszpd(a)gmail.com> ALSA: usb-audio: Add native DSD support for Cambridge Audio streamers Jaidheer Sirigineedi <jaidheer7(a)gmail.com> ALSA: hda/realtek: Add mute LED quirk for HP Pavilion 15-eg3xxx (103c:8bfd) Miquel Raynal <miquel.raynal(a)bootlin.com> spi: cadence-qspi: Fix status polling with octal DTR chips Zeyu Li <13776528859(a)163.com> ALSA: hda/realtek: Add ALC235 support for headset mode Eckhart Mohr <e.mohr(a)tuxedocomputers.com> ALSA: hda/realtek: Add quirk for ASRock NUC BOX-358H Reinhard Speyerer <rspmn(a)arcor.de> net: usb: qmi_wwan: add Rolling Wireless RN947R Vladimir Murzin <vladimir.murzin(a)arm.com> usb: mtu3: Fix double dereference in TP_printk renpanpan <renpanpan(a)kylinos.cn> ALSA: hda/realtek: Add mute LED quirk for HP Pavilion 14-dv1001TU Muhtasham Nawr al-Mahmud <muhtaseem2005(a)gmail.com> ALSA: hda/realtek: Fix speakers on ASUS PM3406CHA Zhang Heng <zhangheng(a)kylinos.cn> ALSA: hda/realtek: Add quirk for Acer Nitro AN515-45 Krish Gulati <krishgulati7(a)gmail.com> ALSA: hda/realtek: Add mute LED quirk for HP Victus 15-fb2xxx Tarun Noonemunthala <ntarun2000(a)gmail.com> ALSA: hda/realtek: Add quirk for HP ENVY 13-aq1xxx Luis Banha <luisbanha26(a)gmail.com> ALSA: hda/realtek: Add mute LED quirk for HP Pavilion 15-ec1xxx Zhang Heng <zhangheng(a)kylinos.cn> ALSA: hda/realtek: Add quirk for Lenovo ThinkBook G8+ KIM MinWoo <phrimm136(a)gmail.com> ALSA: hda/realtek: Add quirk for Lenovo ThinkBook 16p Gen 3 ARH (21EK) Tomasz Bojanowski <tomasz(a)bojanowski.me> ALSA: usb-audio: Add mixer mapping for MSI MAG B850M MORTAR WIFI Hernan Ganzo <gp(a)sneemgp.com> ALSA: hda/realtek: Limit internal mic boost on HP Pavilion 15 (103c:2164) Christian Brauner <brauner(a)kernel.org> docs: update the unmount propagation rule Eric Dumazet <edumazet(a)google.com> nvme-tcp: delay nvme_tcp_reclassify_socket() Jasper Firth <jasper.m.f(a)hotmail.com> ASoC: Intel: bytcr_rt5651: Add quirk for Chuwi Hi8 with generic DMI strings Even Xu <even.xu(a)intel.com> HID: Intel-thc-hid: Intel-quicki2c: Fix buffer overflow Even Xu <even.xu(a)intel.com> HID: Intel-thc-hid: Intel-quickspi: Fix buffer overflow Tomasz Pakuła <tomasz.pakula.oficjalny(a)gmail.com> HID: universal-pidff: Add support for Turtle Beach VelocityOne Race Daniel Ortiz <letargopausado(a)gmail.com> ASoC: amd: yc: Add DMI quirk for Lenovo V15 G6 ARP Andy Moreton <andy.moreton(a)amd.com> sfc: add X4D PF support Rosen Penev <rosenp(a)gmail.com> gpio: mvebu: keep resume masks within the irqchip cache Seiji Adachi <seiji_adachi(a)yahoo.co.jp> ASoC: amd: yc: Add Lenovo ThinkPad E16 Gen 2 (21JN) to quirks Ewan D. Milne <emilne(a)redhat.com> scsi: devinfo: Add BLIST_SKIP_IO_HINTS for EMC Symmetrix Dmitry Antipov <dmantipov(a)yandex.ru> HID: roccat: fix locking in roccat_connect() and roccat_disconnect() Maurizio Lombardi <mlombard(a)redhat.com> nvme-fc: do not warn on controller removal race Berke Durak <berke.durak(a)gmail.com> HID: elecom: Add support for ELECOM M-XT4DRBK (018E) Oleg Keri <okerixx(a)gmail.com> HID: i2c-hid: add reset quirk for Lenovo Yoga Slim 7x Gen 11 keyboard Youth Cao <cocoh2os08(a)gmail.com> HID: i2c-hid: Add i2c-hid-quirk-bad-input-size quirk for 0911:5288 device Mark Brown <broonie(a)kernel.org> regmap: irq: Free the irqdomain we create Namjae Jeon <linkinjeon(a)kernel.org> ksmbd: handle allocated range queries on dense files Fernando Fernandez Mancera <fmancera(a)suse.de> netfilter: tproxy: use DEBUG_NET_WARN_ON_ONCE for protocol fallbacks Xiubo Li <xiubo.li(a)clyso.com> ceph: fix use-after-dereference of NULL ci in __ceph_remove_cap() Mehmet Aysel <mehmet4ysel(a)gmail.com> ASoC: amd: acp-config: Add HVY-WXX9/M1060 DMI quirk Bob Song <songxiebing(a)kylinos.cn> ALSA: hda/conexant: Always enable the headset-mic pin on plugin Xiubo Li <xiubo.li(a)clyso.com> ceph: do not cache negative dentries for snapped directories Mehmet Aysel <mehmet4ysel(a)gmail.com> ASoC: amd: acp3x-es83xx: Add HVY-WXX9/M1060 DMI quirk Federico Valentín Andrade <fandrade(a)frba.utn.edu.ar> ALSA: usb-audio: Skip mixer creation on M-Audio Venom Karl Mehltretter <kmehltretter(a)gmail.com> tpm: atmel: depend on X86 Li Jun <lijun01(a)kylinos.cn> tpm: tpm_tis_spi: fix nodef CR50 tpm_tis_spi_resume is null Dave Carey <carvsdriver(a)gmail.com> HID: multitouch: Fix stale MT slots when contact count drops to zero Vadim Klishko <vadim(a)cirque.corp-partner.google.com> HID: i2c-hid: Add a quirk for a Cirque I2C device. Zhang Heng <zhangheng(a)kylinos.cn> ASoC: amd: yc: Add DMI entry for Alienware m18 R1 AMD Jimmy Zuber <jamz(a)amazon.com> fuse: zero the partial EOF page when extending a file Zhang Heng <zhangheng(a)kylinos.cn> ALSA: hda/realtek: Add quirk for Lenovo IdeaPad Slim 3 15ABR8 Md Rabbani <rabbanyhmm(a)gmail.com> net: stmmac: fix device node reference leaks in stmmac_mtl_setup() Sumeet Pawnikar <sumeet4linux(a)gmail.com> powercap: intel_rapl: Fix kernel panic during PMU unbind Helge Deller <deller(a)gmx.de> fbcon: Fix KASAN slab-out-of-bounds Read in fbcon_prepare_logo Shiji Yang <yangshiji66(a)outlook.com> net: ethernet: mtk_wed: increase WED v2 WDMA RESV_BUFF to 0x80 Jenson Johnathon Reggentin <mail(a)jregg.de> docs: block: fix dead http link in blk-mq.rst Chen Changcheng <chenchangcheng(a)kylinos.cn> scsi: snic: Fix SCSI host leak on workqueue allocation failure Will Porter <mrwillporter(a)gmail.com> ALSA: usb-audio: Add iD14 MkI to monitor-mix volume quirk Csaba Budai <ilyr73(a)gmail.com> ALSA: hda/realtek: Fix ALC700 audio on Intel Hades Canyon Daeho Jeong <daehojeong(a)google.com> f2fs: avoid setting SBI_NEED_FSCK on transient resize failure Robin Everaars <robineveraars(a)pm.me> ACPI: button: Add DMI quirk for Razer Blade Pro 17 early 2020 lid switch Tao Cui <cuitao(a)kylinos.cn> sched_ext/scx_flatcg: expire cached hweights on weight changes Namjae Jeon <linkinjeon(a)kernel.org> ksmbd: enable TCP keepalive for accepted connections BingKun Yue <yuebingkun(a)kylinos.cn> fbdev: platinumfb: add error checking for ioremap calls Randy Dunlap <rdunlap(a)infradead.org> fbdev: maxine: fix 64-bit build error Carlos Song <carlos.song(a)nxp.com> i2c: imx-lpi2c: properly unwind resources on probe failure Li Jun <lijun01(a)kylinos.cn> spi: loongson: pm: add .freeze .poweroff .thaw .restore Pengpeng Hou <pengpeng(a)iscas.ac.cn> rtc: brcmstb-waketimer: add missing MODULE_DEVICE_TABLE() Robert Leussler <robert.leussler(a)leica-geosystems.com> rtc: ds1307: fix RX8130 wakeup alarm WADA bit for day-of-month mode Jack Yu <jack.yu(a)realtek.com> ASoC: rt712-sdca: Pull high JD2 to prevent from entering TV mode Jinqian Yang <yangjinqian1(a)huawei.com> virtio_ring: fix infinite loop in virtnet_poll_cleantx when device is broken Szymon Durawa <szymon.durawa(a)linux.intel.com> PCI: vmd: Add Nova Lake (NVL) and Dunlow (DNL) Device IDs Pengpeng Hou <pengpeng(a)iscas.ac.cn> rtc: ab-eoz9: add missing MODULE_DEVICE_TABLE() Denis V. Lunev <den(a)openvz.org> virtio_balloon: warn on failed buffer add in tell_host() Chad Talbott <chad.talbott(a)gmail.com> ALSA: usb-audio: Add MIN_MUTE quirk for Creative Sound Blaster Play! 3 Weimin Xiong <xiongwm2026(a)163.com> vdpa/mlx5: roll back MR update after VQ setup failure Gilles Risch <gilles.risch(a)gmail.com> drm/radeon: fix internal display on iMac11, 1 (RV770/DCE3.1) Xiong Weimin <xiongweimin(a)kylinos.cn> vdpa_sim: hold iommu_lock across dma_unmap passthrough transition Kuninori Morimoto <kuninori.morimoto.gx(a)renesas.com> ASoC: codec: max98926: fixup invert setup mask Andrew Onyshchuk <andryk.rv(a)gmail.com> platform/x86: thinkpad_acpi: Fix fan speed reporting on Edge E330 Yaroslav Dudkov <aroslavdudkov622(a)gmail.com> platform/x86: msi-ec: Add MSI Katana GF76 11UEK EC firmware Benjamin Coddington <ben.coddington(a)hammerspace.com> NFSv4/flexfiles: report cancelled I/O as a layout error Alex Elder <elder(a)riscstar.com> net: stmmac: use dma_addr_t for DMA addresses Jia Zhu <zhujia.zj(a)bytedance.com> NFSv4: pin the superblock for active state owners Xu Rao <raoxu(a)uniontech.com> ALSA: hda: Add Lisuan HDMI controller and codec support ZhangGuoDong <zhangguodong(a)kylinos.cn> NFS: Verify symlink inode before caching target Thomas Huth <thuth(a)redhat.com> smb: server: Free session data in user_session.c with kfree_sensitive() Namjae Jeon <linkinjeon(a)kernel.org> ksmbd: notify parent directory leases on child create Benjamin Coddington <ben.coddington(a)hammerspace.com> pNFS: honor clora_changed when recalling a layout Thomas Huth <thuth(a)redhat.com> smb: server: Make sure that passkey is not leaked on the heap in user_config.c Namjae Jeon <linkinjeon(a)kernel.org> ksmbd: honor client signing-required in all modes Namjae Jeon <linkinjeon(a)kernel.org> ksmbd: reject blocking compound lock requests Gael Blivet <gael.blivet(a)gmail.com> ksmbd: fix AsyncId zeroed before use in smb2_lock() cancel response Namjae Jeon <linkinjeon(a)kernel.org> ksmbd: fix SMB2 byte-range lock end offset Yashraj Ghule <yashrajghule.221(a)gmail.com> ALSA: hda/realtek: Fix mute LED for HP Victus 15-fa1xxx (MB 8C3F) ChenXiaoSong <chenxiaosong(a)kylinos.cn> smb/server: cancel async requests when closing connection Gael Blivet <gael.blivet(a)gmail.com> ksmbd: report actual xattr value length in stream enumeration Gael Blivet <gael.blivet(a)gmail.com> ksmbd: skip fallocate for SMB2_CREATE_ALLOCATION_SIZE on a stream handle Namjae Jeon <linkinjeon(a)kernel.org> ksmbd: allow FSCTL_SET_SPARSE without input buffer Namjae Jeon <linkinjeon(a)kernel.org> ksmbd: honor byte-range locks for zero data Namjae Jeon <linkinjeon(a)kernel.org> ksmbd: handle empty QUERY_ALLOCATED_RANGES output Namjae Jeon <linkinjeon(a)kernel.org> ksmbd: return buffer too small for short security queries Gael Blivet <gael.blivet(a)gmail.com> ksmbd: fix off-by-one rejecting minimal COPYCHUNK query-limits request Namjae Jeon <linkinjeon(a)kernel.org> ksmbd: reject SMB3.1.1 binding with mismatched cipher Gael Blivet <gael.blivet(a)gmail.com> ksmbd: fix durable handle v2 default timeout units (60 -> 60000) Namjae Jeon <linkinjeon(a)kernel.org> ksmbd: allow I/O on directory named streams Namjae Jeon <linkinjeon(a)kernel.org> ksmbd: preserve access denied status for copychunk Namjae Jeon <linkinjeon(a)kernel.org> ksmbd: protect private extended attributes David C.C.M. Gall <david.ccm.gall(a)googlemail.com> crypto: keembay - use crypto_memneq() to compare CCM AEAD tags Israel Téllez García <i.tellez(a)btesa.com> libbpf: Fix ring buffer consumer loop on 32-bit position wrap David C.C.M. Gall <david.ccm.gall(a)googlemail.com> crypto: sa2ul - use crypto_memneq() to compare AEAD tag David C.C.M. Gall <david.ccm.gall(a)googlemail.com> crypto: keembay - use crypto_memneq() to compare GCM AEAD tags Eric Dumazet <edumazet(a)google.com> gre: fix ERSPAN o_flags race/corruption in xmit and fill_info Yang Wen <anmuxixixi(a)gmail.com> exfat: keep FITRIM within the requested range Anuj Bolewar <bolewara(a)gmail.com> drm/virtio: reclaim pending vbufs before tearing down vqs Basavaraj Natikar <Basavaraj.Natikar(a)amd.com> HID: amd_sfh: Serialize access to the shared emp2 pointer Neil Andrews <neil(a)androos.io> ALSA: usb-audio: Rename the Audient iD14 monitor mix volume control Mathias Nyman <mathias.nyman(a)linux.intel.com> xhci: include all root port children in recovery prevention on link error Takashi Iwai <tiwai(a)suse.de> ALSA: hda/intel: Add sanity check for BAR0 size Farhan Ali <alifm(a)linux.ibm.com> PCI: Avoid saving config space state if inaccessible Michail Tatas <michail.tatas(a)gmail.com> ipmi: Fix leak in __ipmi_bmc_register Charles Keepax <ckeepax(a)opensource.cirrus.com> soundwire: dmi-quirks: Disable ghost Realtek on Asus ROG Zephyrus Duo Arash Golgol <arash.golgol(a)gmail.com> regulator: fan53555: Add support for FAN53555BUC23X type Jiaming Zhang <r772577952(a)gmail.com> hfsplus: validate extent record length before writing it back Dmytro Moroziuk <dmorozyk1(a)gmail.com> ALSA: hda/conexant: Add mute LED quirk for HP ProBook 440 G5 Matt Turner <mattst88(a)gmail.com> alpha: run the remote RTC access in a worker, not an IPI callback Chao Shi <coshi036(a)gmail.com> nvme: ratelimit the completion-path messages driven by device data Griffin Kroah-Hartman <griffin(a)kroah.com> nfc: nxp-nci: Add remove on IRQ error Griffin Kroah-Hartman <griffin(a)kroah.com> nfc: mrvl: spi: Unregister dev on allocation fail Vasant Hegde <vasant.hegde(a)amd.com> iommu/amd: Fix missing CMD_COMPLETE_PPR response for invalid PPR requests Feng Tang <feng.tang(a)linux.alibaba.com> selftests: net: reuseport_bpf_numa: consider cpuless numa node John Johansen <john.johansen(a)canonical.com> apparmor: fix auditing of mount binary data Rongguang Wei <weirongguang(a)kylinos.cn> tap: fix incorrect variable used for USO check in set_offload() Geliang Tang <geliang(a)kernel.org> nvme-tcp: look up host_iface in the current netns Zhe Liu <liuzhe1(a)kylinos.cn> docs: cgroup-v2: fix stale "io" controller introduction Brian Grech <bgrech(a)redhat.com> selftests/net: fin_ack_lat: fix latency threshold typo Hari Mishal <harimishal1(a)gmail.com> nvmet: passthru: fix OOB reads when parsing ns id descriptor list Dapeng Mi <dapeng1.mi(a)linux.intel.com> perf/x86: Free hybrid state on PMU init failure Dapeng Mi <dapeng1.mi(a)linux.intel.com> perf/x86: Unregister PMI handler on PMU init failure Michal Pecio <michal.pecio(a)gmail.com> ALSA: usx2y: Stop clearing urb->hcpriv before submission Guanghui Feng <guanghuifeng(a)linux.alibaba.com> iommu/vt-d: Fix CACHE_TAG_NESTING_DEVTLB polluting shared variables in flush loop Pengpeng Hou <pengpeng(a)iscas.ac.cn> fbdev: udlfb: validate vendor descriptor items Andreas Kemnade <andreas(a)kemnade.info> fbdev: omap2: dsi: do not copy isr table Atish Patra <atishp(a)meta.com> RISC-V: perf: fix resource cleanup on driver probe failure Rui Qi <qirui.001(a)bytedance.com> riscv: kprobes: Prevent probes in breakpoint handlers Daniel Golle <daniel(a)makrotopia.org> net: dsa: mt7530: check CORE_PLL_GROUP4 access in mt7531_setup() Daniel Golle <daniel(a)makrotopia.org> net: pcs: mtk-lynxi: check regmap reads in mtk_pcs_lynxi_get_state() Daniel Golle <daniel(a)makrotopia.org> net: dsa: mt7530: check bus->read() error in core_rmw() Laxman Acharya <acharyalaxman8848(a)gmail.com> Bluetooth: hci_event: fix out-of-bounds read in LE PA report reassembly Daniel Golle <daniel(a)makrotopia.org> net: dsa: mt7530: error out on failed PHY_IAC command writes Muhammad Saheed <muhammad.saheed.iam(a)gmail.com> Bluetooth: hci_sync: Disable legacy instance's ext adv before setup snapshot Iva Kasprzaková <iva(a)yenya.net> Bluetooth: fix BT dependency for submodules Li Qiang <liqiang01(a)kylinos.cn> Bluetooth: hci_bcsp: validate received packet lengths Chen Changcheng <chenchangcheng(a)kylinos.cn> Bluetooth: btrsi: Move set_bt_context after successful HCI registration Zhang Heng <zhangheng(a)kylinos.cn> ALSA: hda/realtek: Add quirk for Acer Nitro ANV16-42 headset mic Zhang Heng <zhangheng(a)kylinos.cn> ALSA: hda/conexant: Add pin config quirk for Huawei Matebook Garrett Blackmon <garrett(a)blackmon.dev> ALSA: hda/realtek: Fix speakers on ASUS ROG Zephyrus G14 GA403UM Zhang Heng <zhangheng(a)kylinos.cn> ALSA: hda/realtek: Fix headset mic on ASUS Vivobook S14 S5406SA Junhao He <hejunhao3(a)h-partners.com> ACPI: APEI: Handle repeated SEA error storms Aurabindo Pillai <aurabindo.pillai(a)amd.com> drm/amd: Add DCN6 register headers Filipe Manana <fdmanana(a)suse.com> btrfs: fix memory barrier order in reloc_root_is_dead() Li Qiang <liqiang01(a)kylinos.cn> Bluetooth: bfusb: validate received block boundaries Zhao Dongdong <zhaodongdong(a)kylinos.cn> Bluetooth: btnxpuart: Fix use-after-free in probe error path Pengpeng Hou <pengpeng(a)iscas.ac.cn> Bluetooth: hci_nokia: validate firmware packet bounds Pavel Zverev <playximik29(a)gmail.com> Bluetooth: btusb: Add support for 1357:c123 Realtek 8852BE device Gustavo Evgucci <monesss315(a)gmail.com> Bluetooth: btusb: Add USB ID 13d3:3625 for MediaTek MT7922 Rui Qi <qirui.001(a)bytedance.com> selftests/ftrace: Force C locale in ftracetest Andreas Haufler <andreas(a)haufler.info> tools/lib/thermal: Fix misplaced extern "C" closing brace Yunye Zhao <yunye.zhao(a)linux.alibaba.com> md: add cond_resched() to md_do_sync()'s skip path Yu Kuai <yukuai(a)fygo.io> md: skip bitmap accounting for empty write ranges Yu Kuai <yukuai(a)fygo.io> md/raid5: reject zero-sector reshape chunks Shang En Sim <sim(a)shangen.org> ALSA: hda/realtek: Enable mute LEDs on HP Spectre x360 16-aa0xxx Junzhe Yu <junzheyu1(a)gmail.com> ext4: guard against NULL s_group_info in ext4_get_group_info Pengpeng Hou <pengpeng(a)iscas.ac.cn> HID: rmi: check report length before trimming sentinel bytes Yang Wang <kevinyang.wang(a)amd.com> drm/amd/pm: derive stable PPT limits from PPTable liulhong617 <liulhong617(a)gmail.com> arm64: mm: fix accidental linear mapping of no-map reserved memory Stefan Hansson <newbyte(a)postmarketos.org> wifi: rsi: Fix types to appease CFI Charles Keepax <ckeepax(a)opensource.cirrus.com> soundwire: dmi-quirks: Disable ghost Realtek on Asus Zenbook Duo Praveen Talari <praveen.talari(a)oss.qualcomm.com> opp: Use clk_get_optional() to avoid leaving opp_table->clk as an error pointer Edson Juliano Drosdeck <edson.drosdeck(a)gmail.com> ALSA: hda/realtek: Limit mic boost on Positivo N15RPE-S Carl Quist <equalizerjr(a)gmail.com> ALSA: hda/realtek: Enable mute LED on HP Laptop 15-dy0xxx Zihan Xi <zihanx(a)nebusec.ai> xsk: account ring allocations to memcg Jinhui Guo <guojinhui.liam(a)bytedance.com> net: usb: cdc_ether: add quirk for AMI BMC stale link events Johan Alvarado <contact(a)c127.dev> net: stmmac: raise TX completion interrupt at the end of an xmit burst Felix Fietkau <nbd(a)nbd.name> wifi: mt76: mt7603: file buffered frames under the TID reported to mac80211 Marcos Paulo Medeiros <maarcospm1996(a)gmail.com> ACPI: video: force native backlight on Acer Nitro AN515-46 Luca Castaldini <luca.castaldini96(a)gmail.com> ALSA: hda/realtek: Add mute LED support for HP Pavilion 15-eh2xxx Stefan Haberland <sth(a)linux.ibm.com> s390/dasd: Snapshot intrc before freeing the request block Simon Glass <sjg(a)chromium.org> kconfig: abort rather than loop for ever on EOF Allison Henderson <achender(a)kernel.org> net/rds: unpin MR pages with unpin_user_pages_dirty_lock() Sharath Srinivasan <sharath.srinivasan(a)oracle.com> net/rds: fix rds_message leak in the rds_send_xmit() drop path Håkon Bugge <haakon.bugge(a)oracle.com> net/rds: hold the socket while an rds_mr references it Allison Henderson <achender(a)kernel.org> net/rds: don't use unpin_user_pages_dirty_lock() from atomic context Wahid Khan <wahidzk0091(a)gmail.com> HID: intel-ish-hid: ignore post-init ENUM_DEVICES from firmware Yuxiang Lin <mclyxfdw(a)gmail.com> HID: quirks: add ALWAYS_POLL quirk for AULA Mini 60 HE Pro Dongle Aaron Ma <mapengyu(a)gmail.com> HID: quirks: Add ALWAYS_POLL quirk for Beitong BTP-KP20D dongle Stuart Hayhurst <stuart.a.hayhurst(a)gmail.com> HID: logitech-hidpp: Add support for G502 X Plus USB mouse Mauricio Orozco <maudob(a)live.com> ALSA: hda/realtek: Add quirk for ASUS VivoBook M515DA/X515DAP Mariano Baragiola <mbaragiola(a)linux.com> wifi: wilc1000: validate monitor transmit frame headers Can Peng <pengcan(a)kylinos.cn> wifi: brcmfmac: validate msgbuf flowring IDs before use Can Peng <pengcan(a)kylinos.cn> wifi: brcmfmac: Set DMA direction for msgbuf packet IDs Felix Fietkau <nbd(a)nbd.name> wifi: mt76: mt7603: restore hardware PS buffering after a service period Felix Fietkau <nbd(a)nbd.name> wifi: mt76: mt7603: fix U-APSD service period termination Felix Fietkau <nbd(a)nbd.name> wifi: mt76: set the EOSP bit in the QoS header of the last released frame Felix Fietkau <nbd(a)nbd.name> wifi: mt76: mt7615: fix NULL deref in mt7615_mac_set_rates Peter Ujfalusi <peter.ujfalusi(a)linux.intel.com> ASoC: SOF: Intel: mtl: Power down DSP if it is left enabled in pre_fw_run() ZhaoJinming <zhaojinming(a)uniontech.com> wifi: ath11k: fix resource leak on error in ext IRQ setup Geetha sowjanya <gakula(a)marvell.com> perf: marvell: Cancel CN10K DDR PMU hrtimer on device remove Pablo Neira Ayuso <pablo(a)netfilter.org> netfilter: nf_tables: call skb_valid_dst() before skb_dst() Minghao Zhang <zhangmh25(a)mails.tsinghua.edu.cn> netfilter: conntrack: tcp: use UNACK timeout for non-closing RST packets Zhi-Jun You <hujy652(a)gmail.com> wifi: mt76: wed: fix kernel panic on non-DBDC MT7986 Ahmed Naseef <naseefkm(a)gmail.com> wifi: mt76: mt7603: add 0x7592 EEPROM chip ID Prashant Rahul <prashantrahul23(a)gmail.com> wifi: mt76: mt7921: fix memory leak when skb_linearize fails in mcu rx event David Bauer <mail(a)david-bauer.net> wifi: mt76: mt7915: configure noise floor reporting on reset Devin Wittmayer <lucid_duck(a)justthetip.ca> wifi: mt76: mt76x02: report rx FCS errors to mac80211 David Bauer <mail(a)david-bauer.net> wifi: mt76: mt7603: free beacon SKB on error Hari Mishal <harimishal1(a)gmail.com> virtio_console: take a kref in find_port_by_vq() to fix port UAF Rosen Penev <rosenp(a)gmail.com> nvmem: brcm_nvram: fix out-of-bounds access on malformed flash data Rosen Penev <rosenp(a)gmail.com> nvmem: brcm_nvram: reject empty NVRAM partition 이상호 <kudo3228(a)gmail.com> romfs: detect hard link cycles Genjian Zhang <zhanggenjian(a)kylinos.cn> md/raid5: complete discard bios while reshape is active bui duc phuc <phucduc.bui(a)gmail.com> regulator: rt6245: Restore state on enable failure Oleg Proshkin <oleg.pro171(a)gmail.com> mfd: axp20x: Preserve other control bits when powering off Bob Song <songxiebing(a)kylinos.cn> ALSA: hda/realtek: add missing error checks for COEF index reads in alc269 Dmitry Torokhov <dmitry.torokhov(a)gmail.com> mfd: ipaq-micro: Fix out-of-bounds stack read in ipaq_micro_str Konstantin Komarov <almaz.alexandrovich(a)paragon-software.com> fs/ntfs3: Fix memory leak in indx_find_sort() Bob Song <songxiebing(a)kylinos.cn> ALSA: hda/realtek: add missing NULL check for codec->bus->pci Yichong Chen <chenyichong(a)uniontech.com> exfat: free new directory cluster if zeroing fails Pengpeng Hou <pengpeng(a)iscas.ac.cn> soc: mediatek: add missing MODULE_DEVICE_TABLE() Weiji Wang <nebclllo0444(a)gmail.com> drm/panel-edp: Add BOE NE140QDM-NX2 Heiko Carstens <hca(a)linux.ibm.com> s390/mm: Fix handling of vmalloc area in do_secure_storage_access() Heiko Carstens <hca(a)linux.ibm.com> s390/mm: Add missing mm check to do_secure_storage_access() Armin Wolf <W_Armin(a)gmx.de> platform/x86: dell-smbios-wmi: Fix chardev resource management Rob Clark <robin.clark(a)oss.qualcomm.com> drm/msm: Fix barriers accessing ctx vm Rob Clark <robin.clark(a)oss.qualcomm.com> drm/msm: Move nr_cmds initialization wangdicheng <wangdicheng(a)kylinos.cn> ALSA: hda/conexant: Add NULL check for dc_mode_path Yichong Chen <chenyichong(a)uniontech.com> exfat: clean up new entry on add entry failure K Prateek Nayak <kprateek.nayak(a)amd.com> arm64/runtime-const: Use aarch64_insn_patch_text_nosync() for patching Matthew Stewart <Matthew.Stewart2(a)amd.com> drm/amd/display: Fix rounding errors in CalculatePrefetchSchedule Amber Lin <amber.lin(a)amd.com> drm/amdkfd: Fix signal reset event David Strahan <David.Strahan(a)microchip.com> scsi: smartpqi: Add new PCI device-ids Pengpeng Hou <pengpeng(a)iscas.ac.cn> i2c: qup: Propagate clock enable failures Gary Guo <gary(a)garyguo.net> ata: ata_generic: Don't store pci_device_id Colin Foster <colin.foster(a)in-advantage.com> clk: clocking-wizard: fix clock difference detection Dmitry Osipenko <digetx(a)gmail.com> clk: tegra: support 48MHz clock for pll_p_out1 Pengpeng Hou <pengpeng(a)iscas.ac.cn> clk: mediatek: mt6735-vencsys: add missing MODULE_DEVICE_TABLE() Pengpeng Hou <pengpeng(a)iscas.ac.cn> clk: mediatek: mt6735-vdecsys: add missing MODULE_DEVICE_TABLE() Chen Changcheng <chenchangcheng(a)kylinos.cn> media: cx88: fix memory leak in cx8802_register_driver() error path Pengpeng Hou <pengpeng(a)iscas.ac.cn> clk: imx: imx8qxp-lpcg: add missing MODULE_DEVICE_TABLE() Pengpeng Hou <pengpeng(a)iscas.ac.cn> clk: imx: imx8qxp: add missing MODULE_DEVICE_TABLE() Nicolin Chen <nicolinc(a)nvidia.com> iommu/tegra241-cmdqv: Rate-limit the error ISR's log message Bjorn Andersson <bjorn.andersson(a)oss.qualcomm.com> remoteproc: Force shutdown during device removal Yichong Chen <chenyichong(a)uniontech.com> exfat: write moved entry before removing source Jay Vadayath <jay(a)artiphishell.com> udf: bound lengthAllocDescs from unallocated space entry Jan Kara <jack(a)suse.cz> udf: Fix bh leak for unallocated space entries Tyrel Datwyler <tyreld(a)linux.ibm.com> scsi: ibmvfc: free ibmvfc_target allocations with mempool_free Tyrel Datwyler <tyreld(a)linux.ibm.com> scsi: ibmvfc: check for NULL evt in implicit LOGO and target delete path Jiaxing Hu <gahing(a)gahingwoo.com> iommu/rockchip: Clear stale page faults before enabling stall Pengpeng Hou <pengpeng(a)iscas.ac.cn> hsi: omap_ssi: remove debugfs on port creation failure Tomer Maimon <tmaimon77(a)gmail.com> pinctrl: npcm8xx: move GPIO IRQ setup into request_resources Tomer Maimon <tmaimon77(a)gmail.com> pinctrl: npcm8xx: fix debounce register selection Tomer Maimon <tmaimon77(a)gmail.com> pinctrl: npcm8xx: clear pending GPIO events during init Tomer Maimon <tmaimon77(a)gmail.com> pinctrl: npcm8xx: enable RMII outputs from RMII groups Pengpeng Hou <pengpeng(a)iscas.ac.cn> firmware: imx: scu: manage mailbox channels and global handle Abdun Nihaal <nihaal(a)cse.iitm.ac.in> platform/x86: int1092: Fix info leak in parse_package() Konstantin Komarov <almaz.alexandrovich(a)paragon-software.com> fs/ntfs3: load ATTR_BITMAP run extents from $MFT extension records Senjin <senjin(a)hatchling.org> fs/ntfs3: fix lseek EINVAL on sparse/compressed files with 64-bit clusters Konstantin Komarov <almaz.alexandrovich(a)paragon-software.com> ntfs3: fix info-leak in ntfs_rename() Kyle Zeng <kylebot(a)openai.com> fs/ntfs3: reserve NUL byte when converting UTF-16 names Brian Norris <briannorris(a)chromium.org> PCI/portdrv: Allow probing even without child services Ruoyu Wang <ruoyuw560(a)gmail.com> ntfs3: initialize err in attr_wof_frame_info Pengpeng Hou <pengpeng(a)iscas.ac.cn> soc: ixp4xx: qmgr: add missing MODULE_DEVICE_TABLE() Randolph Sapp <rs(a)ti.com> drm/etnaviv: force flush on power register ops Rosen Penev <rosenp(a)gmail.com> ata: pata_ep93xx: fix PIO fallback when DMA init fails Benjamin Marzinski <bmarzins(a)redhat.com> bitops: make the *_bit_le functions use unsigned long Zhang Yi <yi.zhang(a)huawei.com> ext4: use FGP_WRITEBEGIN for tail block zeroing Zhang Yi <yi.zhang(a)huawei.com> ext4: check return value of ext4_get_block() in ext4_load_tail_bh() Alexander Wilhelm <alexander.wilhelm(a)westermo.com> wifi: ath12k: fix scan command endianness on big endian Manikanta Pubbisetty <manikanta.pubbisetty(a)oss.qualcomm.com> wifi: ath10k: trigger hardware recovery upon rx failures Pengpeng Hou <pengpeng(a)iscas.ac.cn> wifi: ath11k: validate regulatory capability phy_id Jiawen Wu <jiawenwu(a)trustnetic.com> net: libwx: disable TX VLAN offload for packets with >2 VLAN tags Mukesh Ojha <mukesh.ojha(a)oss.qualcomm.com> iommu/qcom: Publish pgtbl_ops before releasing init_mutex Pengpeng Hou <pengpeng(a)iscas.ac.cn> thermal: intel: int340x: clean up RFIM groups on DVFS failure Mukesh Ojha <mukesh.ojha(a)oss.qualcomm.com> iommu/qcom: Enable clocks before hardware access in qcom_iommu_ctx_probe() Mukesh Ojha <mukesh.ojha(a)oss.qualcomm.com> iommu/qcom: Check pm_runtime_resume_and_get() return in probe Heiko Schocher <hs(a)nabladev.com> drm/panel: simple: Add Kyocera tcg070wvlq panel Esteban Urrutia <esteuwu(a)proton.me> iommu/arm-smmu-qcom: Add SM8450 MDSS compatible Baokun Li <libaokun(a)linux.alibaba.com> ext4: reject mount if clusters/inodes per group are not 8-aligned Lachlan Hodges <lachlan.hodges(a)morsemicro.com> wifi: cfg80211: include cf1 offset when sending chandef Kuan-Wei Chiu <visitorckw(a)gmail.com> riscv, bpf: Add support for BPF_MOVSX in RV32 JIT Pengpeng Hou <pengpeng(a)iscas.ac.cn> power: reset: piix4-poweroff: add missing MODULE_DEVICE_TABLE() Yuyang Huang <yuyanghuang(a)google.com> net: prestera: ignore duplicate RIF destruction events Aleksander Jan Bajkowski <olek2(a)wp.pl> net: sfp: add quirk for HORACO copper SFP+ module Pengpeng Hou <pengpeng(a)iscas.ac.cn> power: supply: cros_pchg: unregister EC notifier Kuan-Wei Chiu <visitorckw(a)gmail.com> riscv, bpf: Add support for BPF_SDIV and BPF_SMOD in RV32 JIT Thomas Renninger <trenn(a)suse.de> ACPI: sysfs: Properly map BERT and CCEL data to their ACPI tables Zhao Li <enderaoelyther(a)gmail.com> wifi: mac80211_hwsim: clear PMSR request state on abort Shahar Tzarfati <shahar.tzarfati(a)intel.com> wifi: mac80211: ibss: read deauth reason_code after frame length check Yun Zhou <yun.zhou(a)windriver.com> ext4: set EXT4_STATE_NO_EXPAND in ext4_evict_inode Ali Alaei <ali.alaei.tabatabaei(a)gmail.com> PCI: vmd: Handle BUS_RESTRICT_CFG value 3 for Arrow Lake-HX Baokun Li <libaokun(a)linux.alibaba.com> ext4: reduce max cluster size to match documented 256MB limit Yap Weei Choong <ywc8891(a)gmail.com> platform/x86/amd/pmc: Add T14 Gen2 AMD (20XL) to s2idle quirk list Kate Hsuan <hpa(a)redhat.com> ACPI: battery: Sanitise model_number by dropping unprintable characters Pengpeng Hou <pengpeng(a)iscas.ac.cn> ACPI: FPDT: validate table and record lengths Bob Song <songxiebing(a)kylinos.cn> ALSA: hda: Check snd_hda_power_pm construct error before executing verb Nizar Al-Kabbani <nizar.m.kabbani(a)gmail.com> platform/x86: asus-nb-wmi: map ProArt key (0x8b) to KEY_PROG3 Dio Zhang <dioyc_zhang(a)compal.corp-partner.google.com> drm/panel: panel-edp: Adjust T8 timing for AUO B116XAK01.6 and B140XTK02.4 Yousef Alhouseen <alhouseenyousef(a)gmail.com> media: go7007: s2250: propagate control I/O failures Rituparna Warwatkar <rwarwatkar(a)gmail.com> media: dvb-core: fix feed leak on failed DMX_ADD_PID Emmanuel Grumbach <emmanuel.grumbach(a)intel.com> wifi: iwlwifi: mvm: ignore sync frames when sync is disabled Ayala Beker <ayala.beker(a)intel.com> wifi: iwlwifi: mld: drop connection on D3 resume failure Emmanuel Grumbach <emmanuel.grumbach(a)intel.com> wifi: iwlwifi: mld: validate wake packet crypto overhead Aditya Sherawat <asherawa(a)qti.qualcomm.com> drm/msm/adreno: Add support for A704 GPU Yuho Choi <dbgh9129(a)gmail.com> driver core: attribute_container: Unwind device_add() on attr failure Logan Gunthorpe <logang(a)deltatee.com> PCI: switchtec: Add Microchip PCI1008 to NTB DMA alias quirk Logan Gunthorpe <logang(a)deltatee.com> PCI: switchtec: Add Microchip PCI1008 device ID Yousef Alhouseen <alhouseenyousef(a)gmail.com> misc: ibmvmc: reject oversized inbound messages Pei Xiao <xiaopei01(a)kylinos.cn> ipack: ipoctal: add rwsem to guard against TOCTOU in remove path Yousef Alhouseen <alhouseenyousef(a)gmail.com> misc: ibmvmc: release send buffer on write errors Pengpeng Hou <pengpeng(a)iscas.ac.cn> greybus: manifest: validate string descriptor header Pengpeng Hou <pengpeng(a)iscas.ac.cn> misc: rp1: clear chained IRQ handlers on teardown Yousef Alhouseen <alhouseenyousef(a)gmail.com> misc: hpilo: validate device queue entries before use Yousef Alhouseen <alhouseenyousef(a)gmail.com> misc: genwqe: handle a first DMA address of zero Yousef Alhouseen <alhouseenyousef(a)gmail.com> misc: bcm-vk: validate write size before allocation Ian Abbott <abbotti(a)mev.co.uk> comedi: pcmuio: Add sanity check to interrupt handler Ian Abbott <abbotti(a)mev.co.uk> comedi: pcm816: Fix sanity check in interrupt handler Ian Abbott <abbotti(a)mev.co.uk> comedi: pcmmio: Add sanity check to interrupt handler Ian Abbott <abbotti(a)mev.co.uk> comedi: aio_iiro_16: Add sanity check to interrupt handler Ian Abbott <abbotti(a)mev.co.uk> comedi: pcm711: Fix sanity check in interrupt handler Ian Abbott <abbotti(a)mev.co.uk> comedi: dt2811: Fix sanity check in interrupt handler Ian Abbott <abbotti(a)mev.co.uk> comedi: das6402: Add sanity check to interrupt handler Ian Abbott <abbotti(a)mev.co.uk> comedi: quatech_daqp_cs: Fix sanity check in interrupt handler Ian Abbott <abbotti(a)mev.co.uk> comedi: pcm818: Fix sanity check in interrupt handler Ian Abbott <abbotti(a)mev.co.uk> comedi: ni_at_a2150: Fix sanity check in interrupt handler Ian Abbott <abbotti(a)mev.co.uk> comedi: ni_atmio16d: Add sanity check to interrupt handler Pengpeng Hou <pengpeng(a)iscas.ac.cn> uio: sercos3: add missing MODULE_DEVICE_TABLE() Michail Tatas <michail.tatas(a)gmail.com> USB: misc: uss720: Fix leak in get_1284_register Oliver Neukum <oneukum(a)suse.com> usb: misc: cypress_cy7c63: check result of IO Lucas Martins Alves <lucas.alves(a)lumal21.com.br> usb: musb: host: clear stale RX interrupt on three-strikes error Hans Verkuil <hverkuil+cisco(a)kernel.org> media: cec/core: drop cec_post_state_event call Hans Verkuil <hverkuil+cisco(a)kernel.org> media: cec: tegra_cec: don't break off msg on NACK Shivaprasad G Bhat <sbhat(a)linux.ibm.com> scsi: qla2xxx: Handle INTx not connected while passing through Ilan Peer <ilan.peer(a)intel.com> wifi: iwlwifi: mld: Do not cleanup FW state when the device is dead Avraham Stern <avraham.stern(a)intel.com> wifi: iwlwifi: mld: support aborting an ongoing ftm request Mikko Perttunen <mperttunen(a)nvidia.com> gpu: host1x: Wait for timeout worker completion on channel free Namhyung Kim <namhyung(a)kernel.org> tools/lib/api: Fix potential double-free from fdarray__grow() Miri Korenblit <miriam.rachel.korenblit(a)intel.com> wifi: iwlwifi: mld: cancel wiphy work before freeing wiphy Emmanuel Grumbach <emmanuel.grumbach(a)intel.com> wifi: iwlwifi: mvm: reset the smart fifo state upon FW stop Stefan Binding <sbinding(a)opensource.cirrus.com> ASoC: cs35l56: Add support for CS35L62 for SoundWire Emmanuel Grumbach <emmanuel.grumbach(a)intel.com> wifi: iwlwifi: mld: reset the driver state upon firmware recovery Jingyi Wang <jingyi.wang(a)oss.qualcomm.com> remoteproc: core: cancel crash_handler work in rproc_add() error path Emmanuel Grumbach <emmanuel.grumbach(a)intel.com> wifi: iwlwifi: mld: validate D3_END notif size Pengpeng Hou <pengpeng(a)iscas.ac.cn> wifi: iwlwifi: validate UEFI reduced-power SKU TLV length Miri Korenblit <miriam.rachel.korenblit(a)intel.com> wifi: iwlwifi: support TTL platform device ID Pengpeng Hou <pengpeng(a)iscas.ac.cn> wifi: iwlwifi: validate PNVM SKU TLV length Jingyi Wang <jingyi.wang(a)oss.qualcomm.com> remoteproc: qcom: Check subdev start status in rproc_stop() Yousef Alhouseen <alhouseenyousef(a)gmail.com> media: go7007: avoid undefined shifts in MPEG-4 headers Pengpeng Hou <pengpeng(a)iscas.ac.cn> media: cx18: stop VBI start-code scan before short tail Pengpeng Hou <pengpeng(a)iscas.ac.cn> media: ivtv: stop VBI start-code scan before short tail Jurison Murati <eng.juri(a)gmail.com> media: i2c: ov8865: Program the sensor on stream start Lucas Stach <l.stach(a)pengutronix.de> drm/etnaviv: check MMUv2 status after reset Lucas Stach <l.stach(a)pengutronix.de> drm/etnaviv: check all modules for idle after reset Jurison Murati <eng.juri(a)gmail.com> media: i2c: ov8865: Drop the runtime PM usage count on stream failure Hari Mishal <harimishal1(a)gmail.com> nvme: clamp FDP nruhsd to allocated RUH status descriptor count Haoxiang Li <lihaoxiang(a)isrc.iscas.ac.cn> iwlwifi: dvm: add missing cleaup for on error path Hari Mishal <harimishal1(a)gmail.com> nvme: bound ns descriptor header and body to identify buffer David Maximiliano Hermitte <davemadmaxxx(a)gmail.com> hfs: validate catalog CNIDs before instantiating inodes Charles Keepax <ckeepax(a)opensource.cirrus.com> soundwire: intel_auxdevice: Add cs42l44 to wake_capable_list Bard Liao <yung-chuan.liao(a)linux.intel.com> soundwire: dmi-quirks: add a global ghost list Niranjana Vishwanathapura <niranjana.vishwanathapura(a)intel.com> drm/xe: only resume exec queues that were actually suspended Hans Verkuil <hverkuil+cisco(a)kernel.org> media: em28xx: use vb2_video_unregister_device Hans Verkuil <hverkuil+cisco(a)kernel.org> media: em28xx: requeue buffers if start_streaming fails Hans Verkuil <hverkuil+cisco(a)kernel.org> media: em28xx: dev_info->pr_info since dev has been freed Sean Rhodes <sean(a)starlabs.systems> mmc: rtsx_usb_sdmmc: suppress false CD after init timeout Mike Tipton <mike.tipton(a)oss.qualcomm.com> pmdomain: qcom: rpmhpd: Skip retention by default Pengpeng Hou <pengpeng(a)iscas.ac.cn> gpio: vf610: add missing MODULE_DEVICE_TABLE() Pengpeng Hou <pengpeng(a)iscas.ac.cn> crypto: keembay - add missing MODULE_DEVICE_TABLE() Pengpeng Hou <pengpeng(a)iscas.ac.cn> pinctrl: sx150x: add missing MODULE_DEVICE_TABLE() Gabriel Prostitis <prostitisgabriel(a)gmail.com> USB: gadget: inode: fix mm lifetime handling David Laight <david.laight.linux(a)gmail.com> usb_string_copy: Use kzalloc() to avoid leaking old data Xu Rao <raoxu(a)uniontech.com> usb: gadget: u_audio: clean up capture endpoint on feedback failure Haoxiang Li <haoxiang_li2024(a)163.com> usb: fsl_qe_udc: check qe_alloc_request() failure in ch9getstatus() Aniket Randive <aniket.randive(a)oss.qualcomm.com> serial: qcom_geni: Disable closing_wait for console to prevent shutdown timeout Haoxiang Li <haoxiang_li2024(a)163.com> tty: serial: pch_uart: add check for pci_get_slot() Rahul Bukte <rahul.bukte(a)sony.com> serial: 8250: force synchronous probe for the ISA and PNP drivers Xu Rao <raoxu(a)uniontech.com> mmc: block: reject invalid perdev_minors before division Arnd Bergmann <arnd(a)arndb.de> media: v4l2-tpg: reduce stack usage for kasan builds Pengpeng Hou <pengpeng(a)iscas.ac.cn> media: cec: tegra: add missing MODULE_DEVICE_TABLE() Chris Lew <christopher.lew(a)oss.qualcomm.com> rpmsg: char: Check for ongoing chrdev destroy Pranjal Shrivastava <praan(a)google.com> PCI/ATS: Ensure pci_ats_supported() is PF-aware for VFs Muralidhara M K <muralidhara.mk(a)amd.com> platform/x86/amd/hsmp: Validate _DSD mailbox sub-package element count Pengpeng Hou <pengpeng(a)iscas.ac.cn> ASoC: codecs: max98396: Unwind supplies on resume failure Muralidhara M K <muralidhara.mk(a)amd.com> platform/x86/amd/hsmp: Validate ACPI UID before parsing socket index Qingtao Cao <qingtao.cao.au(a)gmail.com> bus: mhi: core: Fix sys error transition latency John Garry <john.g.garry(a)oracle.com> nvme: don't reference NS after unlocking in nvme_ns_head_ctrl_ioctl() Alex Deucher <alexander.deucher(a)amd.com> drm/amdgpu/gfx11: WARN() rather than BUG() for invalid SDMA engine Alex Deucher <alexander.deucher(a)amd.com> drm/amdgpu/atomfirmware: WARN() rather than BUG() Pengpeng Hou <pengpeng(a)iscas.ac.cn> ASoC: codecs: uda1342: Leave cache-only mode before syncing Deepanshu Kartikey <kartikey406(a)gmail.com> udf: avoid recursive s_alloc_mutex deadlock when freeing AED blocks Kyle Zeng <kylebot(a)openai.com> udf: validate extent partition references in udf_current_aext() Pengpeng Hou <pengpeng(a)iscas.ac.cn> usb: typec: mux: tusb1046: add missing MODULE_DEVICE_TABLE() Devansh Soni <devanshsoni874(a)gmail.com> staging: rtl8723bs: fix missing unregister_netdev on sdio_alloc_irq failure Xixin Liu <liuxixin(a)kylinos.cn> nvme: zns: cap zone report nr_zones by DMA buffer size Xixin Liu <liuxixin(a)kylinos.cn> nvme-auth: use crypto_memneq for DH-HMAC-CHAP response comparison John Garry <john.g.garry(a)oracle.com> nvme: handle positive error codes in nuse_show() Tanmay Shah <tanmay.shah(a)amd.com> remoteproc: core: Full attach detach during recovery Jerome Brunet <jbrunet(a)baylibre.com> clk: sunxi-ng: fix ccu probe clock unregister on error Marek Szyprowski <m.szyprowski(a)samsung.com> mmc: dw_mmc: stop and complete DMA also in STATE_DATA_BUSY state Pengpeng Hou <pengpeng(a)iscas.ac.cn> mmc: sdhci-of-ma35d1: add missing MODULE_DEVICE_TABLE() Ben Dooks <ben.dooks(a)codethink.co.uk> mmc: cqhci: fix to missed endian conversions Pengpeng Hou <pengpeng(a)iscas.ac.cn> mmc: moxart: report DMA completion timeout Pengpeng Hou <pengpeng(a)iscas.ac.cn> gpio: sifive: add missing MODULE_DEVICE_TABLE() David Heidelberg <david(a)ixit.cz> dt-bindings: arm: qcom,ids: Add SoC ID for Snapdragon SDM 850 Zhiwei Zhang <202275009(a)qq.com> RDMA/rxe: Check PDs for memory window binds David Heidelberg <david(a)ixit.cz> soc: qcom: socinfo: Add SoC ID for SDM850 Seyeong Kim <seyeong.kim(a)canonical.com> RDMA/irdma: Suppress PF reset on HMC error Pengpeng Hou <pengpeng(a)iscas.ac.cn> iio: adc: max1241: add missing MODULE_DEVICE_TABLE() Yun Zhou <yun.zhou(a)windriver.com> block: reject block device inodes with i_rdev == 0 in lookup_bdev() Pengpeng Hou <pengpeng(a)iscas.ac.cn> soc: amlogic: meson-clk-measure: remove debugfs tree Chin-Yen Lee <timlee(a)realtek.com> wifi: rtw89: wow: add QoS control field to WoWLAN ARP response for MLO William Hansen-Baird <william.hansen.baird(a)gmail.com> wifi: rtlwifi: fix disabling of ASPM for RTL8723BE with AER flooding Chih-Kang Chang <gary.chang(a)realtek.com> wifi: rtw89: wow: only WiFi 6 chips initialize RF registers in WoWLAN mode William Hansen-Baird <william.hansen.baird(a)gmail.com> wifi: rtlwifi: rtl8723be: Remove unnecessary irq save/restore in hw_init() Ben Dooks <ben.dooks(a)codethink.co.uk> dmaengine: dw-axi-dmac: fix __le32 on set of CH_CTL_H_LLI_VALID Yun Zhou <yun.zhou(a)windriver.com> net: mvneta_bm: add suspend/resume support to prevent crash after resume Pengpeng Hou <pengpeng(a)iscas.ac.cn> dmaengine: pl330: remove debugfs file on teardown Charles Keepax <ckeepax(a)opensource.cirrus.com> soundwire: dmi-quirks: Disable ghost Realtek on Asus Expertbook Jiayuan Chen <jiayuan.chen(a)linux.dev> netfilter: ebtables: bound num_counters like nentries in do_replace() Yousef Alhouseen <alhouseenyousef(a)gmail.com> net: usb: rtl8150: handle link status read failures Yuan Chen <chenyuan(a)kylinos.cn> libbpf: Skip bpf_object__probe_loading() when BPF token is in use Haikun Zhou <zhouhaikun5(a)huaqin.corp-partner.google.com> drm/panel-edp: Support MB116AS01'3 edp panel Eric Huang <jinhuieric.huang(a)amd.com> drm/amdkfd: add sanity check in svm_range_is_valid Yang Wang <kevinyang.wang(a)amd.com> drm/amd/pm: Validate legacy hwmgr PP table offsets Yang Wang <kevinyang.wang(a)amd.com> drm/amd/pm: Validate Vega10 PPTable subtable bounds Yang Wang <kevinyang.wang(a)amd.com> drm/amd/pm: Validate Tonga PPTable subtable bounds Xiang Liu <xiang.liu(a)amd.com> drm/amd/pm: Guard VBIOS AC timing table walk Yang Wang <kevinyang.wang(a)amd.com> drm/amd/pm: Validate Tonga PowerPlay state array bounds Yongqiang Sun <Yongqiang.Sun(a)amd.com> drm/amdkfd: use node XCC count for v9 CRIU control stack restore Yang Wang <kevinyang.wang(a)amd.com> drm/amd/pm: Use uploaded size for legacy custom PPTable Yang Wang <kevinyang.wang(a)amd.com> drm/amd/pm: Validate pp_table header before reading size Yang Wang <kevinyang.wang(a)amd.com> drm/amd/pm: Validate Vega hwmgr PowerPlay table bounds Gangliang Xie <ganglxie(a)amd.com> drm/amdgpu: add check for xcp id Lijo Lazar <lijo.lazar(a)amd.com> drm/amdgpu: Guard reads in pcie state readout Matthew Jacob <mjacob(a)feralsw.com> drm/amdgpu: Support some Barco AMD based graphics adapters Lijo Lazar <lijo.lazar(a)amd.com> drm/amd/pm: validate vega10 profile mode inputs Asad Kamal <asad.kamal(a)amd.com> drm/amdgpu: validate XCP topology counts before division Lijo Lazar <lijo.lazar(a)amd.com> drm/amdgpu: Validate ATIF buffer length before use Lijo Lazar <lijo.lazar(a)amd.com> drm/amdgpu: Fix kobject cleanup in xcp sysfs Lijo Lazar <lijo.lazar(a)amd.com> drm/amdgpu: Validate ATPX buffer length before use Lijo Lazar <lijo.lazar(a)amd.com> drm/amdgpu: Add checks to vbios fetch through ATRM Abhijeeth Babu <babu.jeeth(a)gmail.com> i2c: acpi: Force ELAN1300 touchpads to 100 kHz Breno Leitao <leitao(a)debian.org> netpoll: do not warn when the best-effort pool refill fails Paritosh Potukuchi <paritoshpotukuchi(a)gmail.com> i2c: amd-asf: Validate firmware-reported length Nicolas Escande <nico.escande(a)gmail.com> wifi: ath12k: avoid setting 320MHz support on non 6GHz band Ruoyu Wang <ruoyuw560(a)gmail.com> memory: stm32_omm: initialize ret in stm32_omm_set_amcr Jiawen Liu <1298662399(a)qq.com> spi: bcmbca-hsspi: return error from failed controller suspend Jiawen Liu <1298662399(a)qq.com> spi: nxp-fspi: disable runtime PM on probe failures Jiawen Liu <1298662399(a)qq.com> spi: fsl-dspi: clean up after failed suspend and resume Damon Ding <damon.ding(a)rock-chips.com> drm/panel-edp: Add BOE NE160QDM-NY1 panel Jiawen Liu <1298662399(a)qq.com> spi: bcm63xx-hsspi: return error from failed controller suspend Jiawen Liu <1298662399(a)qq.com> spi: bcm63xx: return error from failed controller suspend Jiawen Liu <1298662399(a)qq.com> spi: bcm-qspi: return error from failed controller suspend Guopeng Zhang <zhangguopeng(a)kylinos.cn> fs/namespace: notify pollers of legacy propagation changes Zide Chen <zide.chen(a)intel.com> perf/x86/intel/uncore: Fix PCI PMU cleanup on setup failure Zizhi Wo <wozizhi(a)huawei.com> fat: reject name longer than NAME_MAX in msdos_format_name() Dapeng Mi <dapeng1.mi(a)linux.intel.com> perf/core: Fix kernel register info leak via hardware skid Thomas Zimmermann <tzimmermann(a)suse.de> drm/sysfb: simpledrm: Validate mmap size against framebuffer size Dapeng Mi <dapeng1.mi(a)linux.intel.com> perf/x86/intel: Fallback to sw branch type decoding if no hw decoding Bryam Vargas <hexlabsecurity(a)proton.me> iio: accel: fxls8962af: clamp the device-reported FIFO sample count Mithil Bavishi <bavishimithil(a)gmail.com> ARM: OMAP2+: Add CFI type for omap4_finish_suspend Joe Simmons-Talbott <joest(a)redhat.com> selftests/cgroup: Adjust cpu test duration based on HZ Uwe Kleine-König (The Capable Hub) <u.kleine-koenig(a)baylibre.com> regmap: maple: Workaround for another false-positive compiler warning Haoxiang Li <haoxiang_li2024(a)163.com> ASoC: hdac_hdmi: Fix resource cleanup on probe failure Pengpeng Hou <pengpeng(a)iscas.ac.cn> ASoC: tlv320aic26: remove keyclick sysfs file William Theesfeld <william(a)theesfeld.net> clk: zynq: handle kasprintf() failure in periph_clk registration Pengpeng Hou <pengpeng(a)iscas.ac.cn> spi: qpic-snand: free OOB buffer with ECC context Pengpeng Hou <pengpeng(a)iscas.ac.cn> ASoC: sma1303: remove fault-check sysfs group on remove Kemeng Shi <shikemeng(a)huaweicloud.com> irqdomain: Plug leak in irq_domain_alloc_irqs_locked() error path Cen Zhang <zzzccc427(a)gmail.com> ALSA: usb-audio: Release components on probe errors Pengpeng Hou <pengpeng(a)iscas.ac.cn> media: cec: stm32: return an error when log-address wait times out Nícolas F. R. A. Prado <nfraprado(a)collabora.com> ALSA: hda: Force resume if acomp notified during system suspend Fu Hao <fuhao(a)open-hieco.net> ALSA: hda: Add support for Hygon family 18h model 5h HD-Audio Kryštof Černý <cleverline1mc(a)gmail.com> w1: ds2482: add OF device match table Ruoyu Wang <ruoyuw560(a)gmail.com> HID: wacom: avoid copying Bluetooth input reports Christian Brauner <brauner(a)kernel.org> selftests/filesystems/overlayfs: fix set_layers_via_fds link error Pengpeng Hou <pengpeng(a)iscas.ac.cn> gpio: pca9570: Use I2C match data YiPeng Chai <YiPeng.Chai(a)amd.com> drm/amdgpu: add bounds check to prevent array overflow Gangliang Xie <ganglxie(a)amd.com> drm/amdgpu: add buf length check Ruoyu Wang <ruoyuw560(a)gmail.com> drm/radeon: avoid double free in r600 DPM cleanup Charlene Liu <Charlene.Liu(a)amd.com> drm/amd/display: fix max dispclk_khz/dppclk_khz double 1000 Asad Kamal <asad.kamal(a)amd.com> drm/amdgpu: Gate debugfs MMIO access on kernel lockdown Asad Kamal <asad.kamal(a)amd.com> drm/amd/pm: Validate OD DPM triples before mutating tables Jesse Zhang <Jesse.Zhang(a)amd.com> drm/amdgpu/mes_v12_0: use mes schedule pipe for legacy queues on unified MES Terry Hsiao <terry_hsiao(a)compal.corp-partner.google.com> drm/panel-edp: Add BOE NV116WH2-M30, BOE NT116WHM-N21, BOE NV116FH1-M31, BOE NV116FH1-M30 Ryosuke Yasuoka <ryasuoka(a)redhat.com> drm/virtio: abort virtqueue wait on device removal to avoid hung task Jonas Karlman <jonas(a)kwiboo.se> drm/rockchip: dw_hdmi: Use resume_early pm ops for system suspend YuanZhe Liu <25031212351(a)stu.xidian.edu.cn> ALSA: line6: Clear prev_fbuf on capture buffer release Tonghao Zhang <tonghao(a)bamaicloud.com> net: bonding: move bond_should_notify_peers, e.g. into rtnl lock block Tonghao Zhang <tonghao(a)bamaicloud.com> net: bonding: use workqueue to make sure peer notify updated in lacp mode Christian Brauner <brauner(a)kernel.org> coredump: prevent TIF_NOTIFY_SIGNAL from interrupting coredumps Christian Brauner <brauner(a)kernel.org> fork: don't create io threads once PF_POSTCOREDUMP is set Christian Brauner <brauner(a)kernel.org> fork: move the coredump and exec checks into create_io_thread() Christian Brauner <brauner(a)kernel.org> exec: cancel io_uring requests before de_thread() Guenter Roeck <linux(a)roeck-us.net> hwmon: (lm90) Rely on subsystem locking André Draszik <andre.draszik(a)linaro.org> kbuild: link-vmlinux.sh: improve detection of third pass requirement Ridham Khurana <khurana.ridham222(a)gmail.com> platform: cznic: turris-omnia-mcu: Add missing MODULE_DEVICE_TABLE() Daniel Schaefer <dhs(a)frame.work> iio: hid-sensor: als: scale each channel individually Baolin Wang <baolin.wang(a)linux.alibaba.com> mm: vmscan: fix dirty folios throttling on cgroup v1 for MGLRU Namjae Jeon <linkinjeon(a)kernel.org> ksmbd: wait for negotiation before receiving another PDU Zizhen Liu <pointerliu(a)126.com> net: skbuff: propagate shared-frag marker in skb_zerocopy() ------------- Diffstat: Documentation/admin-guide/cgroup-v2.rst | 10 +- Documentation/block/blk-mq.rst | 2 +- .../bindings/interrupt-controller/arm,gic-v5.yaml | 9 +- Documentation/filesystems/sharedsubtree.rst | 20 +- Documentation/networking/rxrpc.rst | 21 +- Makefile | 7 +- arch/alpha/kernel/rtc.c | 37 +- arch/arm/mach-omap2/sleep44xx.S | 5 +- arch/arm/mm/mmap.c | 11 +- arch/arm64/include/asm/runtime-const.h | 17 +- arch/arm64/mm/mmu.c | 14 + arch/loongarch/include/asm/kvm_eiointc.h | 1 + arch/loongarch/include/asm/kvm_ipi.h | 1 + arch/loongarch/include/asm/kvm_pch_pic.h | 1 + arch/loongarch/include/asm/pgtable.h | 2 +- arch/loongarch/kvm/intc/eiointc.c | 5 + arch/loongarch/kvm/intc/ipi.c | 5 + arch/loongarch/kvm/intc/pch_pic.c | 5 + arch/loongarch/kvm/main.c | 23 +- arch/loongarch/kvm/vcpu.c | 24 +- arch/loongarch/mm/init.c | 17 +- arch/mips/Kconfig | 3 +- arch/powerpc/kvm/book3s_hv.c | 76 +- arch/powerpc/kvm/book3s_paired_singles.c | 7 +- arch/riscv/Kconfig.errata | 14 + arch/riscv/errata/sifive/errata.c | 20 + arch/riscv/include/asm/errata_list_vendors.h | 3 +- arch/riscv/include/asm/insn-def.h | 16 +- arch/riscv/kernel/sys_hwprobe.c | 4 +- arch/riscv/kernel/traps.c | 3 + arch/riscv/kvm/mmu.c | 8 +- arch/riscv/kvm/vcpu_pmu.c | 9 + arch/riscv/net/bpf_jit_comp32.c | 47 +- arch/s390/crypto/paes_s390.c | 213 +- arch/s390/crypto/phmac_s390.c | 25 +- arch/s390/include/asm/pkey.h | 16 + arch/s390/kernel/kprobes.c | 3 + arch/s390/kernel/perf_cpum_cf.c | 3 + arch/s390/kernel/process.c | 12 +- arch/s390/kernel/signal.c | 6 +- arch/s390/lib/probes.c | 2 +- arch/s390/mm/extable.c | 4 +- arch/s390/mm/fault.c | 7 +- arch/x86/events/core.c | 19 +- arch/x86/events/intel/lbr.c | 2 +- arch/x86/events/intel/uncore.c | 5 +- arch/x86/include/asm/cpufeatures.h | 1 + arch/x86/include/asm/cpuid/api.h | 1 + arch/x86/include/asm/kvm-x86-ops.h | 1 + arch/x86/include/asm/kvm_host.h | 25 +- arch/x86/kernel/cpu/bugs.c | 18 +- arch/x86/kernel/cpu/scattered.c | 1 + arch/x86/kernel/process.c | 1 + arch/x86/kvm/hyperv.c | 5 +- arch/x86/kvm/mmu/mmu.c | 8 +- arch/x86/kvm/mmu/paging_tmpl.h | 39 +- arch/x86/kvm/regs.c | 3 +- arch/x86/kvm/svm/nested.c | 15 +- arch/x86/kvm/svm/svm.c | 35 +- arch/x86/kvm/svm/svm.h | 1 + arch/x86/kvm/vmx/common.h | 20 + arch/x86/kvm/vmx/main.c | 26 + arch/x86/kvm/vmx/nested.c | 41 +- arch/x86/kvm/vmx/posted_intr.c | 2 + arch/x86/kvm/vmx/tdx.c | 56 +- arch/x86/kvm/vmx/vmx.c | 33 +- arch/x86/kvm/vmx/x86_ops.h | 1 + arch/x86/kvm/x86.c | 99 +- arch/x86/kvm/xen.c | 18 + arch/x86/mm/pat/set_memory.c | 8 +- block/bdev.c | 12 + block/blk-crypto-fallback.c | 6 + crypto/af_alg.c | 2 +- drivers/accel/rocket/rocket_job.c | 2 +- drivers/acpi/acpi_fpdt.c | 55 +- drivers/acpi/apei/ghes.c | 10 +- drivers/acpi/battery.c | 14 + drivers/acpi/button.c | 11 + drivers/acpi/sysfs.c | 9 +- drivers/acpi/video_detect.c | 8 + drivers/ata/ata_generic.c | 6 +- drivers/ata/pata_ep93xx.c | 30 +- drivers/ata/sata_fsl.c | 20 +- drivers/base/attribute_container.c | 7 +- drivers/base/base.h | 1 + drivers/base/bus.c | 45 +- drivers/base/core.c | 4 +- drivers/base/dd.c | 92 +- drivers/base/regmap/regcache-maple.c | 2 +- drivers/base/regmap/regmap-debugfs.c | 1 + drivers/base/regmap/regmap-irq.c | 2 +- drivers/base/regmap/regmap.c | 15 +- drivers/block/drbd/drbd_receiver.c | 4 +- drivers/block/xen-blkfront.c | 12 +- drivers/bluetooth/bfusb.c | 37 +- drivers/bluetooth/btnxpuart.c | 4 +- drivers/bluetooth/btrsi.c | 3 +- drivers/bluetooth/btusb.c | 10 +- drivers/bluetooth/hci_bcsp.c | 5 +- drivers/bluetooth/hci_nokia.c | 20 + drivers/bluetooth/hci_vhci.c | 4 + drivers/bus/mhi/host/pm.c | 14 +- drivers/char/ipmi/ipmi_msghandler.c | 1 + drivers/char/tpm/Kconfig | 3 +- drivers/char/tpm/tpm_tis_spi.h | 8 +- drivers/char/virtio_console.c | 13 +- drivers/clk/imx/clk-imx8qxp-lpcg.c | 1 + drivers/clk/imx/clk-imx8qxp.c | 1 + drivers/clk/mediatek/clk-mt6735-vdecsys.c | 1 + drivers/clk/mediatek/clk-mt6735-vencsys.c | 1 + drivers/clk/sunxi-ng/ccu_common.c | 12 +- drivers/clk/tegra/clk-pll.c | 1 + drivers/clk/xilinx/clk-xlnx-clock-wizard.c | 2 +- drivers/clk/zynq/clkc.c | 8 + drivers/comedi/drivers/aio_iiro_16.c | 3 + drivers/comedi/drivers/das6402.c | 10 +- drivers/comedi/drivers/dt2811.c | 7 +- drivers/comedi/drivers/ni_at_a2150.c | 13 +- drivers/comedi/drivers/ni_atmio16d.c | 3 + drivers/comedi/drivers/pcl711.c | 3 +- drivers/comedi/drivers/pcl816.c | 3 +- drivers/comedi/drivers/pcl818.c | 3 +- drivers/comedi/drivers/pcmmio.c | 3 + drivers/comedi/drivers/pcmuio.c | 5 +- drivers/comedi/drivers/quatech_daqp_cs.c | 4 +- drivers/cpufreq/rcpufreq_dt.rs | 1 + .../crypto/intel/keembay/keembay-ocs-aes-core.c | 3 +- drivers/crypto/intel/keembay/keembay-ocs-ecc.c | 1 + drivers/crypto/intel/keembay/ocs-aes.c | 3 +- drivers/crypto/sa2ul.c | 3 +- drivers/dma/dw-axi-dmac/dw-axi-dmac-platform.c | 2 +- drivers/dma/pl330.c | 19 +- drivers/edac/edac_mc.c | 6 +- drivers/firmware/imx/imx-scu.c | 25 +- drivers/gpio/gpio-mvebu.c | 33 +- drivers/gpio/gpio-pca9570.c | 2 +- drivers/gpio/gpio-sifive.c | 1 + drivers/gpio/gpio-vf610.c | 1 + drivers/gpu/drm/amd/amdgpu/amdgpu_acpi.c | 68 +- drivers/gpu/drm/amd/amdgpu/amdgpu_amdkfd_gfx_v11.c | 3 +- drivers/gpu/drm/amd/amdgpu/amdgpu_atomfirmware.c | 2 - drivers/gpu/drm/amd/amdgpu/amdgpu_atpx_handler.c | 33 +- drivers/gpu/drm/amd/amdgpu/amdgpu_bios.c | 10 +- drivers/gpu/drm/amd/amdgpu/amdgpu_debugfs.c | 7 + drivers/gpu/drm/amd/amdgpu/amdgpu_drv.c | 4 + drivers/gpu/drm/amd/amdgpu/amdgpu_psp_ta.c | 5 +- drivers/gpu/drm/amd/amdgpu/amdgpu_ras.c | 7 + drivers/gpu/drm/amd/amdgpu/amdgpu_xcp.c | 11 +- drivers/gpu/drm/amd/amdgpu/aqua_vanjaram.c | 61 +- drivers/gpu/drm/amd/amdgpu/gfx_v11_0.c | 2 + drivers/gpu/drm/amd/amdgpu/gfx_v12_0.c | 2 + drivers/gpu/drm/amd/amdgpu/gmc_v12_0.c | 4 +- drivers/gpu/drm/amd/amdgpu/mes_v12_0.c | 27 +- drivers/gpu/drm/amd/amdgpu/uvd_v3_1.c | 2 +- drivers/gpu/drm/amd/amdkfd/kfd_events.c | 17 +- drivers/gpu/drm/amd/amdkfd/kfd_mqd_manager_v10.c | 4 +- drivers/gpu/drm/amd/amdkfd/kfd_mqd_manager_v11.c | 4 +- drivers/gpu/drm/amd/amdkfd/kfd_mqd_manager_v12.c | 4 +- drivers/gpu/drm/amd/amdkfd/kfd_mqd_manager_v9.c | 6 +- drivers/gpu/drm/amd/amdkfd/kfd_mqd_manager_vi.c | 7 +- .../gpu/drm/amd/amdkfd/kfd_process_queue_manager.c | 2 +- drivers/gpu/drm/amd/amdkfd/kfd_svm.c | 8 +- .../amd/display/amdgpu_dm/amdgpu_dm_mst_types.c | 3 + .../drm/amd/display/dc/dml2/dml21/dml21_wrapper.c | 8 +- .../dc/dml2/dml21/inc/dml_top_display_cfg_types.h | 11 + .../dml2/dml21/inc/dml_top_soc_parameter_types.h | 7 +- .../amd/display/dc/dml2/dml21/inc/dml_top_types.h | 13 + .../dml21/src/dml2_core/dml2_core_dcn4_calcs.c | 66 +- .../dml2/dml21/src/dml2_core/dml2_core_factory.c | 2 + .../dml21/src/dml2_core/dml2_core_shared_types.h | 54 +- .../dc/dml2/dml21/src/dml2_core/dml2_core_utils.c | 2 + .../dml2/dml21/src/dml2_pmo/dml2_pmo_dcn4_fams2.c | 445 +- .../dml21/src/inc/dml2_internal_shared_types.h | 36 +- .../amd/display/dc/resource/dce60/dce60_resource.c | 7 + .../amd/include/asic_reg/dcn/dcn_6_0_0_offset.h | 15799 +++++ .../amd/include/asic_reg/dcn/dcn_6_0_0_sh_mask.h | 58556 +++++++++++++++++++ .../amd/include/asic_reg/dpcs/dpcs_6_0_0_offset.h | 47 + .../amd/include/asic_reg/dpcs/dpcs_6_0_0_sh_mask.h | 55 + .../include/asic_reg/mmhub/mmhub_5_0_1_offset.h | 17 + .../include/asic_reg/mmhub/mmhub_5_0_1_sh_mask.h | 17 + drivers/gpu/drm/amd/pm/powerplay/amd_powerplay.c | 21 +- .../gpu/drm/amd/pm/powerplay/hwmgr/ppatomctrl.c | 28 +- .../amd/pm/powerplay/hwmgr/process_pptables_v1_0.c | 673 +- .../drm/amd/pm/powerplay/hwmgr/processpptables.c | 446 +- .../gpu/drm/amd/pm/powerplay/hwmgr/smu7_hwmgr.c | 36 +- .../gpu/drm/amd/pm/powerplay/hwmgr/vega10_hwmgr.c | 48 +- .../pm/powerplay/hwmgr/vega10_processpptables.c | 623 +- .../pm/powerplay/hwmgr/vega12_processpptables.c | 7 + .../pm/powerplay/hwmgr/vega20_processpptables.c | 7 + drivers/gpu/drm/amd/pm/swsmu/amdgpu_smu.c | 19 +- drivers/gpu/drm/amd/pm/swsmu/smu11/arcturus_ppt.c | 25 +- drivers/gpu/drm/amd/pm/swsmu/smu11/navi10_ppt.c | 32 +- .../drm/amd/pm/swsmu/smu11/sienna_cichlid_ppt.c | 28 +- drivers/gpu/drm/amd/pm/swsmu/smu13/aldebaran_ppt.c | 8 +- .../gpu/drm/amd/pm/swsmu/smu13/smu_v13_0_0_ppt.c | 2 - .../gpu/drm/amd/pm/swsmu/smu13/smu_v13_0_7_ppt.c | 4 +- drivers/gpu/drm/etnaviv/etnaviv_gpu.c | 33 +- drivers/gpu/drm/etnaviv/etnaviv_gpu.h | 6 + drivers/gpu/drm/msm/adreno/a6xx_catalog.c | 2 +- drivers/gpu/drm/msm/msm_drv.c | 13 +- drivers/gpu/drm/msm/msm_gem_shrinker.c | 3 +- drivers/gpu/drm/msm/msm_gem_submit.c | 5 +- drivers/gpu/drm/panel/panel-edp.c | 11 +- drivers/gpu/drm/panel/panel-simple.c | 3 + drivers/gpu/drm/panthor/panthor_sched.c | 14 +- drivers/gpu/drm/radeon/atombios_crtc.c | 5 +- drivers/gpu/drm/radeon/atombios_encoders.c | 23 +- drivers/gpu/drm/radeon/r600_dpm.c | 21 +- drivers/gpu/drm/rockchip/dw_hdmi-rockchip.c | 7 +- drivers/gpu/drm/sysfb/simpledrm.c | 24 + drivers/gpu/drm/virtio/virtgpu_drv.c | 15 + drivers/gpu/drm/virtio/virtgpu_drv.h | 2 + drivers/gpu/drm/virtio/virtgpu_kms.c | 1 + drivers/gpu/drm/virtio/virtgpu_vq.c | 38 +- drivers/gpu/drm/xe/display/intel_fb_bo.c | 3 +- drivers/gpu/drm/xe/display/xe_fb_pin.c | 3 +- drivers/gpu/drm/xe/xe_exec_queue_types.h | 12 + drivers/gpu/drm/xe/xe_preempt_fence.c | 7 + drivers/gpu/drm/xe/xe_vm.c | 18 +- drivers/gpu/host1x/hw/cdma_hw.c | 2 +- drivers/greybus/manifest.c | 2 + drivers/hid/amd-sfh-hid/amd_sfh_client.c | 4 +- .../amd-sfh-hid/hid_descriptor/amd_sfh_hid_desc.h | 2 - .../hid_descriptor/amd_sfh_hid_report_desc.h | 7 - drivers/hid/amd-sfh-hid/sfh1_1/amd_sfh_interface.c | 6 + drivers/hid/hid-core.c | 4 +- drivers/hid/hid-cougar.c | 3 + drivers/hid/hid-cp2112.c | 9 +- drivers/hid/hid-elecom.c | 6 +- drivers/hid/hid-elo.c | 3 + drivers/hid/hid-ids.h | 13 +- drivers/hid/hid-input.c | 17 +- drivers/hid/hid-logitech-dj.c | 3 + drivers/hid/hid-logitech-hidpp.c | 2 + drivers/hid/hid-mcp2200.c | 5 + drivers/hid/hid-mcp2221.c | 2 +- drivers/hid/hid-multitouch.c | 19 +- drivers/hid/hid-picolcd_fb.c | 12 +- drivers/hid/hid-prodikeys.c | 7 +- drivers/hid/hid-pxrc.c | 3 + drivers/hid/hid-quirks.c | 7 +- drivers/hid/hid-rmi.c | 2 +- drivers/hid/hid-roccat-isku.c | 3 + drivers/hid/hid-roccat-koneplus.c | 3 + drivers/hid/hid-roccat-konepure.c | 3 + drivers/hid/hid-roccat-kovaplus.c | 3 + drivers/hid/hid-roccat-pyra.c | 3 + drivers/hid/hid-roccat-ryos.c | 3 + drivers/hid/hid-roccat-savu.c | 3 + drivers/hid/hid-roccat.c | 8 +- drivers/hid/hid-universal-pidff.c | 1 + drivers/hid/hid-zydacron.c | 3 + drivers/hid/i2c-hid/i2c-hid-core.c | 6 +- drivers/hid/intel-ish-hid/ishtp-hid-client.c | 5 +- .../intel-thc-hid/intel-quicki2c/pci-quicki2c.c | 6 +- .../intel-thc-hid/intel-quickspi/pci-quickspi.c | 3 +- drivers/hid/usbhid/hiddev.c | 37 +- drivers/hid/wacom_sys.c | 198 +- drivers/hid/wacom_wac.c | 107 +- drivers/hid/wacom_wac.h | 6 +- drivers/hsi/controllers/omap_ssi_core.c | 3 + drivers/hv/ring_buffer.c | 29 +- drivers/hwmon/asus_rog_ryujin.c | 151 +- drivers/hwmon/lm90.c | 25 +- drivers/i2c/busses/i2c-amd-asf-plat.c | 4 + drivers/i2c/busses/i2c-imx-lpi2c.c | 21 +- drivers/i2c/busses/i2c-qup.c | 31 +- drivers/i2c/i2c-core-acpi.c | 1 + drivers/i3c/master.c | 3 +- drivers/iio/accel/fxls8962af-core.c | 2 + drivers/iio/adc/max1241.c | 1 + drivers/iio/light/hid-sensor-als.c | 22 +- drivers/infiniband/hw/erdma/erdma_cm.c | 4 +- drivers/infiniband/hw/irdma/i40iw_hw.c | 4 +- drivers/infiniband/hw/irdma/icrdma_hw.c | 2 + drivers/infiniband/hw/irdma/icrdma_hw.h | 2 + drivers/infiniband/hw/irdma/icrdma_if.c | 17 +- drivers/infiniband/hw/irdma/irdma.h | 2 + drivers/infiniband/sw/rxe/rxe_mw.c | 20 +- drivers/infiniband/sw/siw/siw_cm.c | 6 +- drivers/iommu/amd/amd_iommu_types.h | 1 + drivers/iommu/amd/iommu.c | 38 +- drivers/iommu/arm/arm-smmu-v3/arm-smmu-v3.c | 2 +- drivers/iommu/arm/arm-smmu-v3/tegra241-cmdqv.c | 16 +- drivers/iommu/arm/arm-smmu/arm-smmu-qcom.c | 1 + drivers/iommu/arm/arm-smmu/qcom_iommu.c | 18 +- drivers/iommu/intel/cache.c | 5 +- drivers/iommu/iommufd/eventq.c | 4 +- drivers/iommu/rockchip-iommu.c | 13 + drivers/ipack/devices/ipoctal.c | 16 +- drivers/irqchip/irq-gic-v5-irs.c | 4 + drivers/isdn/mISDN/l1oip_core.c | 2 +- drivers/isdn/mISDN/socket.c | 4 +- drivers/md/md.c | 13 +- drivers/md/raid5.c | 13 +- drivers/media/cec/core/cec-adap.c | 1 - drivers/media/cec/platform/stm32/stm32-cec.c | 16 +- drivers/media/cec/platform/tegra/tegra_cec.c | 14 +- drivers/media/common/v4l2-tpg/v4l2-tpg-core.c | 14 +- drivers/media/dvb-core/dmxdev.c | 11 +- drivers/media/i2c/ov8865.c | 48 +- drivers/media/pci/cx18/cx18-vbi.c | 2 +- drivers/media/pci/cx23885/cx23885-core.c | 4 + drivers/media/pci/cx23885/cx23885-dvb.c | 14 +- drivers/media/pci/cx88/cx88-mpeg.c | 10 +- drivers/media/pci/intel/ipu-bridge.c | 2 +- drivers/media/pci/ivtv/ivtv-vbi.c | 2 +- drivers/media/platform/marvell/mcam-core.c | 14 +- .../media/platform/microchip/microchip-csi2dc.c | 1 + .../media/platform/microchip/microchip-isc-base.c | 6 + .../platform/microchip/microchip-sama5d2-isc.c | 17 +- .../platform/microchip/microchip-sama7g5-isc.c | 17 +- drivers/media/platform/nxp/imx-jpeg/mxc-jpeg.c | 2 + drivers/media/platform/samsung/s5p-mfc/s5p_mfc.c | 4 +- drivers/media/rc/bpf-lirc.c | 18 +- drivers/media/rc/fintek-cir.c | 4 + drivers/media/rc/imon.c | 5 - drivers/media/rc/ir-mce_kbd-decoder.c | 5 +- drivers/media/rc/lirc_dev.c | 3 + drivers/media/rc/rc-ir-raw.c | 66 +- drivers/media/rc/rc-main.c | 42 +- drivers/media/rc/redrat3.c | 4 + drivers/media/usb/au0828/au0828-dvb.c | 1 + drivers/media/usb/em28xx/em28xx-audio.c | 7 + drivers/media/usb/em28xx/em28xx-cards.c | 2 +- drivers/media/usb/em28xx/em28xx-video.c | 26 +- drivers/media/usb/go7007/go7007-driver.c | 5 +- drivers/media/usb/go7007/go7007-fw.c | 28 +- drivers/media/usb/go7007/s2250-board.c | 54 +- drivers/media/usb/gspca/gspca.c | 3 +- drivers/media/usb/hackrf/hackrf.c | 7 +- drivers/media/usb/usbtv/usbtv-core.c | 6 +- drivers/media/usb/usbtv/usbtv-video.c | 4 + drivers/memory/stm32_omm.c | 2 +- drivers/mfd/axp20x.c | 2 +- drivers/mfd/ipaq-micro.c | 2 +- drivers/misc/bcm-vk/bcm_vk_msg.c | 18 +- drivers/misc/genwqe/card_utils.c | 2 +- drivers/misc/hpilo.c | 7 +- drivers/misc/ibmvmc.c | 17 +- drivers/misc/rp1/rp1_pci.c | 3 + drivers/mmc/core/block.c | 5 + drivers/mmc/host/cqhci-core.c | 14 +- drivers/mmc/host/dw_mmc.c | 1 + drivers/mmc/host/moxart-mmc.c | 11 +- drivers/mmc/host/rtsx_usb_sdmmc.c | 13 +- drivers/mmc/host/sdhci-of-ma35d1.c | 1 + drivers/net/bonding/bond_3ad.c | 7 +- drivers/net/bonding/bond_main.c | 96 +- drivers/net/dsa/mt7530.c | 44 +- drivers/net/ethernet/marvell/mvneta.c | 18 + drivers/net/ethernet/marvell/mvneta_bm.c | 72 + .../ethernet/marvell/prestera/prestera_router.c | 6 +- drivers/net/ethernet/mediatek/mtk_wed.c | 5 + drivers/net/ethernet/mediatek/mtk_wed_regs.h | 1 + drivers/net/ethernet/sfc/efx.c | 4 + drivers/net/ethernet/stmicro/stmmac/chain_mode.c | 3 +- drivers/net/ethernet/stmicro/stmmac/ring_mode.c | 3 +- drivers/net/ethernet/stmicro/stmmac/stmmac_main.c | 4 + .../net/ethernet/stmicro/stmmac/stmmac_platform.c | 6 +- drivers/net/ethernet/wangxun/libwx/wx_lib.c | 24 + drivers/net/pcs/pcs-mtk-lynxi.c | 7 +- drivers/net/phy/sfp.c | 3 + drivers/net/ppp/pptp.c | 4 +- drivers/net/tap.c | 5 +- drivers/net/usb/cdc_ether.c | 16 + drivers/net/usb/pegasus.c | 6 +- drivers/net/usb/qmi_wwan.c | 1 + drivers/net/usb/rtl8150.c | 4 +- drivers/net/wireless/ath/ath10k/htt_rx.c | 6 +- drivers/net/wireless/ath/ath11k/ahb.c | 79 +- drivers/net/wireless/ath/ath11k/wmi.c | 6 + drivers/net/wireless/ath/ath12k/wmi.c | 37 +- drivers/net/wireless/ath/ath12k/wmi.h | 10 + drivers/net/wireless/ath/ath9k/channel.c | 2 + drivers/net/wireless/broadcom/b43/main.c | 5 +- .../wireless/broadcom/brcm80211/brcmfmac/msgbuf.c | 47 +- drivers/net/wireless/intel/iwlwifi/dvm/tx.c | 4 +- drivers/net/wireless/intel/iwlwifi/fw/pnvm.c | 6 + drivers/net/wireless/intel/iwlwifi/fw/uefi.c | 6 + drivers/net/wireless/intel/iwlwifi/mld/d3.c | 76 +- .../net/wireless/intel/iwlwifi/mld/ftm-initiator.c | 21 + .../net/wireless/intel/iwlwifi/mld/ftm-initiator.h | 1 + drivers/net/wireless/intel/iwlwifi/mld/mac80211.c | 19 +- drivers/net/wireless/intel/iwlwifi/mld/mac80211.h | 2 + drivers/net/wireless/intel/iwlwifi/mld/mld.c | 4 + drivers/net/wireless/intel/iwlwifi/mvm/ops.c | 1 + drivers/net/wireless/intel/iwlwifi/mvm/time-sync.h | 4 + drivers/net/wireless/intel/iwlwifi/pcie/drv.c | 1 + drivers/net/wireless/mediatek/mt76/mt7603/beacon.c | 2 + drivers/net/wireless/mediatek/mt76/mt7603/dma.c | 2 +- drivers/net/wireless/mediatek/mt76/mt7603/eeprom.c | 1 + drivers/net/wireless/mediatek/mt76/mt7603/mac.c | 73 +- drivers/net/wireless/mediatek/mt76/mt7603/main.c | 78 +- drivers/net/wireless/mediatek/mt76/mt7603/mt7603.h | 4 + .../net/wireless/mediatek/mt76/mt7615/pci_mac.c | 5 +- .../net/wireless/mediatek/mt76/mt7615/usb_sdio.c | 5 +- drivers/net/wireless/mediatek/mt76/mt76x02_mac.c | 3 + drivers/net/wireless/mediatek/mt76/mt7915/mac.c | 9 +- drivers/net/wireless/mediatek/mt76/mt7921/mcu.c | 4 +- drivers/net/wireless/mediatek/mt76/mt7996/mac.c | 4 +- drivers/net/wireless/mediatek/mt76/tx.c | 16 +- drivers/net/wireless/mediatek/mt76/wed.c | 7 +- drivers/net/wireless/microchip/wilc1000/mon.c | 30 +- drivers/net/wireless/realtek/rtlwifi/pci.c | 39 +- .../net/wireless/realtek/rtlwifi/rtl8723be/hw.c | 6 - drivers/net/wireless/realtek/rtw89/fw.c | 31 +- drivers/net/wireless/realtek/rtw89/wow.c | 3 +- drivers/net/wireless/rsi/rsi_91x_coex.c | 3 +- drivers/net/wireless/rsi/rsi_91x_main.c | 7 +- drivers/net/wireless/rsi/rsi_91x_sdio_ops.c | 3 +- drivers/net/wireless/rsi/rsi_91x_usb_ops.c | 7 +- drivers/net/wireless/rsi/rsi_common.h | 2 +- drivers/net/wireless/rsi/rsi_sdio.h | 2 +- drivers/net/wireless/rsi/rsi_usb.h | 2 +- drivers/net/wireless/virtual/mac80211_hwsim.c | 10 +- drivers/net/wwan/wwan_hwsim.c | 4 + drivers/nfc/nfcmrvl/spi.c | 4 + drivers/nfc/nxp-nci/i2c.c | 4 +- drivers/nvme/host/auth.c | 3 +- drivers/nvme/host/core.c | 6 +- drivers/nvme/host/fc.c | 2 +- drivers/nvme/host/ioctl.c | 2 +- drivers/nvme/host/nvme.h | 6 +- drivers/nvme/host/pci.c | 6 +- drivers/nvme/host/sysfs.c | 4 +- drivers/nvme/host/tcp.c | 8 +- drivers/nvme/host/zns.c | 8 +- drivers/nvme/target/fabrics-cmd-auth.c | 3 +- drivers/nvme/target/fc.c | 8 +- drivers/nvme/target/passthru.c | 9 + drivers/nvme/target/pr.c | 2 +- drivers/nvme/target/tcp.c | 2 +- drivers/nvmem/brcm_nvram.c | 15 +- drivers/nvmem/core.c | 4 +- drivers/opp/core.c | 54 +- drivers/pci/ats.c | 7 +- drivers/pci/controller/vmd.c | 7 + drivers/pci/pci.c | 25 + drivers/pci/pcie/portdrv.c | 28 +- drivers/pci/quirks.c | 1 + drivers/pci/switch/switchtec.c | 1 + drivers/perf/marvell_cn10k_ddr_pmu.c | 6 + drivers/perf/riscv_pmu_sbi.c | 33 +- drivers/phy/phy-core.c | 45 +- drivers/pinctrl/nuvoton/pinctrl-npcm8xx.c | 96 +- drivers/pinctrl/pinctrl-sx150x.c | 1 + drivers/platform/cznic/turris-omnia-mcu-base.c | 1 + drivers/platform/x86/amd/hfi/hfi.c | 5 + drivers/platform/x86/amd/hsmp/acpi.c | 15 +- drivers/platform/x86/amd/pmc/pmc-quirks.c | 8 + drivers/platform/x86/asus-nb-wmi.c | 1 + drivers/platform/x86/dell/dell-smbios-wmi.c | 69 +- drivers/platform/x86/intel/int1092/intel_sar.c | 8 +- drivers/platform/x86/lenovo/thinkpad_acpi.c | 1 + drivers/platform/x86/msi-ec.c | 1 + drivers/pmdomain/qcom/rpmhpd.c | 14 +- drivers/power/reset/piix4-poweroff.c | 1 + drivers/power/supply/cros_peripheral_charger.c | 13 +- drivers/power/supply/sbs-battery.c | 11 + drivers/powercap/intel_rapl_common.c | 4 +- drivers/pps/generators/pps_gen.c | 81 +- drivers/rapidio/devices/rio_mport_cdev.c | 5 +- drivers/regulator/fan53555.c | 6 + drivers/regulator/rt6245-regulator.c | 5 +- drivers/remoteproc/remoteproc_core.c | 118 +- drivers/rpmsg/rpmsg_char.c | 5 + drivers/rtc/rtc-ab-eoz9.c | 1 + drivers/rtc/rtc-brcmstb-waketimer.c | 1 + drivers/rtc/rtc-ds1307.c | 2 +- drivers/s390/block/dasd.c | 10 +- drivers/s390/crypto/zcrypt_ccamisc.c | 22 +- drivers/scsi/dc395x.c | 10 +- drivers/scsi/ibmvscsi/ibmvfc.c | 10 +- drivers/scsi/qla2xxx/qla_os.c | 15 +- drivers/scsi/scsi_devinfo.c | 2 +- drivers/scsi/smartpqi/smartpqi_init.c | 36 + drivers/scsi/snic/snic_main.c | 1 + drivers/soc/amlogic/meson-clk-measure.c | 14 + drivers/soc/ixp4xx/ixp4xx-qmgr.c | 1 + drivers/soc/mediatek/mtk-dvfsrc.c | 1 + drivers/soc/qcom/socinfo.c | 1 + drivers/soundwire/dmi-quirks.c | 42 +- drivers/soundwire/intel_auxdevice.c | 1 + drivers/spi/spi-bcm-qspi.c | 6 +- drivers/spi/spi-bcm63xx-hsspi.c | 6 +- drivers/spi/spi-bcm63xx.c | 5 +- drivers/spi/spi-bcmbca-hsspi.c | 6 +- drivers/spi/spi-cadence-quadspi.c | 3 +- drivers/spi/spi-fsl-dspi.c | 21 +- drivers/spi/spi-loongson-core.c | 6 +- drivers/spi/spi-nxp-fspi.c | 31 +- drivers/spi/spi-pci1xxxx.c | 71 + drivers/spi/spi-qpic-snand.c | 6 +- drivers/spmi/spmi.c | 3 +- drivers/staging/rtl8723bs/os_dep/sdio_intf.c | 5 +- drivers/target/iscsi/iscsi_target_login.c | 2 +- .../intel/int340x_thermal/processor_thermal_rfim.c | 11 +- drivers/thunderbolt/icm.c | 6 +- drivers/thunderbolt/tb.c | 4 +- drivers/thunderbolt/test.c | 37 +- drivers/thunderbolt/tunnel.c | 47 +- drivers/thunderbolt/tunnel.h | 8 +- drivers/tty/serial/8250/8250_platform.c | 1 + drivers/tty/serial/8250/8250_pnp.c | 1 + drivers/tty/serial/pch_uart.c | 5 + drivers/tty/serial/qcom_geni_serial.c | 8 + drivers/tty/serial/serial_core.c | 91 +- drivers/uio/uio_sercos3.c | 1 + drivers/usb/core/driver.c | 1 - drivers/usb/core/message.c | 1 + drivers/usb/gadget/configfs.c | 4 +- drivers/usb/gadget/function/u_audio.c | 12 +- drivers/usb/gadget/legacy/inode.c | 20 +- drivers/usb/gadget/udc/fsl_qe_udc.c | 8 +- drivers/usb/host/xhci-ring.c | 27 +- drivers/usb/host/xhci.c | 4 +- drivers/usb/host/xhci.h | 9 +- drivers/usb/misc/cypress_cy7c63.c | 8 +- drivers/usb/misc/uss720.c | 1 + drivers/usb/mtu3/mtu3_trace.h | 4 +- drivers/usb/musb/musb_host.c | 14 +- drivers/usb/typec/mux/tusb1046.c | 1 + drivers/vdpa/mlx5/net/mlx5_vnet.c | 23 +- drivers/vdpa/vdpa_sim/vdpa_sim.c | 3 +- drivers/video/backlight/lm3630a_bl.c | 1 + drivers/video/backlight/qcom-wled.c | 35 +- drivers/video/fbdev/atmel_lcdfb.c | 11 +- drivers/video/fbdev/core/fbcon.c | 7 + drivers/video/fbdev/omap2/omapfb/dss/dsi.c | 9 +- drivers/video/fbdev/platinumfb.c | 35 +- drivers/video/fbdev/udlfb.c | 27 +- drivers/virtio/virtio_balloon.c | 6 +- drivers/virtio/virtio_ring.c | 8 + drivers/w1/masters/ds2482.c | 8 + drivers/xen/pvcalls-back.c | 2 +- fs/afs/rxrpc.c | 63 +- fs/btrfs/relocation.c | 13 +- fs/ceph/caps.c | 17 +- fs/ceph/dir.c | 14 +- fs/ceph/inode.c | 3 +- fs/coredump.c | 2 + fs/dlm/lowcomms.c | 6 +- fs/exec.c | 11 +- fs/exfat/balloc.c | 31 +- fs/exfat/dir.c | 8 +- fs/exfat/namei.c | 27 +- fs/ext4/balloc.c | 4 + fs/ext4/ext4.h | 2 +- fs/ext4/inode.c | 7 +- fs/ext4/super.c | 10 +- fs/f2fs/gc.c | 9 +- fs/fat/namei_msdos.c | 3 + fs/fuse/dev.c | 3 +- fs/fuse/dir.c | 3 + fs/fuse/file.c | 9 + fs/hfs/catalog.c | 41 +- fs/hfs/hfs_fs.h | 19 + fs/hfs/inode.c | 13 +- fs/hfs/super.c | 5 + fs/hfsplus/extents.c | 2 + fs/iomap/ioend.c | 10 +- fs/lockd/svclock.c | 2 + fs/namei.c | 29 - fs/namespace.c | 7 + fs/nfs/blocklayout/blocklayout.h | 5 - fs/nfs/blocklayout/rpc_pipefs.c | 79 +- fs/nfs/callback_proc.c | 3 +- fs/nfs/callback_xdr.c | 2 +- fs/nfs/dir.c | 8 + fs/nfs/filelayout/filelayout.c | 8 +- fs/nfs/filelayout/filelayoutdev.c | 17 +- fs/nfs/flexfilelayout/flexfilelayout.c | 75 +- fs/nfs/flexfilelayout/flexfilelayout.h | 2 +- fs/nfs/flexfilelayout/flexfilelayoutdev.c | 17 +- fs/nfs/localio.c | 16 +- fs/nfs/netns.h | 5 +- fs/nfs/nfs4_fs.h | 2 + fs/nfs/nfs4proc.c | 8 + fs/nfs/nfs4state.c | 78 +- fs/nfs/nfstrace.h | 5 +- fs/nfs/pnfs.c | 24 +- fs/nfs/pnfs.h | 3 +- fs/nfs/pnfs_nfs.c | 21 +- fs/nfsd/filecache.c | 4 +- fs/nfsd/flexfilelayout.c | 20 +- fs/nfsd/flexfilelayoutxdr.c | 4 +- fs/nfsd/flexfilelayoutxdr.h | 5 +- fs/nfsd/netns.h | 6 +- fs/nfsd/nfs3acl.c | 15 + fs/nfsd/nfs4idmap.c | 4 +- fs/nfsd/nfs4proc.c | 4 +- fs/nfsd/nfs4recover.c | 78 +- fs/nfsd/nfs4state.c | 116 +- fs/nfsd/nfs4xdr.c | 26 +- fs/nfsd/nfsctl.c | 73 +- fs/nfsd/nfsproc.c | 19 +- fs/nfsd/xdr4.h | 1 + fs/ntfs3/attrib.c | 2 +- fs/ntfs3/dir.c | 14 +- fs/ntfs3/index.c | 1 + fs/ntfs3/inode.c | 10 +- fs/ntfs3/namei.c | 9 +- fs/ntfs3/ntfs_fs.h | 2 + fs/ntfs3/super.c | 18 +- fs/ocfs2/cluster/heartbeat.c | 13 +- fs/ocfs2/cluster/netdebug.c | 4 + fs/ocfs2/cluster/nodemanager.c | 3 + fs/ocfs2/cluster/quorum.c | 7 +- fs/ocfs2/cluster/quorum.h | 1 + fs/ocfs2/cluster/tcp.c | 4 +- fs/ocfs2/dlm/dlmconvert.c | 10 +- fs/ocfs2/dlm/dlmdebug.c | 5 + fs/ocfs2/dlm/dlmdomain.c | 3 +- fs/ocfs2/dlm/dlmlock.c | 8 +- fs/ocfs2/dlmglue.c | 2 + fs/ocfs2/file.c | 100 +- fs/ocfs2/filecheck.c | 5 +- fs/ocfs2/quota_local.c | 12 +- fs/ocfs2/refcounttree.c | 15 +- fs/ocfs2/super.c | 1 + fs/overlayfs/copy_up.c | 112 +- fs/overlayfs/dir.c | 22 +- fs/overlayfs/inode.c | 16 +- fs/overlayfs/namei.c | 11 +- fs/overlayfs/overlayfs.h | 8 +- fs/overlayfs/readdir.c | 33 +- fs/overlayfs/super.c | 34 +- fs/proc/task_mmu.c | 9 +- fs/romfs/super.c | 8 + fs/smb/client/cached_dir.c | 30 +- fs/smb/client/cifsacl.c | 9 +- fs/smb/client/cifsfs.c | 62 +- fs/smb/client/cifsfs.h | 5 +- fs/smb/client/cifssmb.c | 69 +- fs/smb/client/connect.c | 6 +- fs/smb/client/file.c | 3 +- fs/smb/client/inode.c | 32 +- fs/smb/client/readdir.c | 3 + fs/smb/client/reparse.c | 40 +- fs/smb/client/sess.c | 6 +- fs/smb/client/smb2ops.c | 74 +- fs/smb/client/smb2pdu.c | 12 +- fs/smb/client/transport.c | 6 + fs/smb/server/auth.c | 3 +- fs/smb/server/connection.c | 22 + fs/smb/server/mgmt/user_config.c | 6 +- fs/smb/server/mgmt/user_session.c | 4 +- fs/smb/server/misc.c | 8 +- fs/smb/server/oplock.c | 16 +- fs/smb/server/server.c | 21 + fs/smb/server/smb2pdu.c | 423 +- fs/smb/server/smb2pdu.h | 1 + fs/smb/server/smb_common.c | 6 +- fs/smb/server/smbacl.c | 53 +- fs/smb/server/transport_ipc.c | 16 +- fs/smb/server/transport_rdma.c | 1 - fs/smb/server/transport_tcp.c | 19 +- fs/smb/server/vfs.c | 137 +- fs/smb/server/vfs.h | 3 +- fs/smb/server/vfs_cache.c | 46 +- fs/smb/server/vfs_cache.h | 2 + fs/udf/balloc.c | 12 +- fs/udf/inode.c | 33 +- fs/udf/truncate.c | 2 +- fs/udf/udfdecl.h | 3 +- fs/ufs/dir.c | 2 +- fs/xfs/libxfs/xfs_attr_leaf.c | 13 + fs/xfs/libxfs/xfs_da_btree.c | 14 + fs/xfs/libxfs/xfs_inode_fork.c | 4 +- fs/xfs/libxfs/xfs_symlink_remote.c | 8 +- fs/xfs/libxfs/xfs_symlink_remote.h | 2 +- fs/xfs/libxfs/xfs_trans_space.c | 6 +- fs/xfs/scrub/agheader.c | 15 +- fs/xfs/scrub/agheader_repair.c | 13 +- fs/xfs/scrub/alloc_repair.c | 11 +- fs/xfs/scrub/attr.c | 17 +- fs/xfs/scrub/attr_repair.c | 18 +- fs/xfs/scrub/bitmap.c | 20 + fs/xfs/scrub/bmap.c | 7 + fs/xfs/scrub/btree.c | 16 +- fs/xfs/scrub/common.c | 7 +- fs/xfs/scrub/cow_repair.c | 84 +- fs/xfs/scrub/dabtree.c | 27 +- fs/xfs/scrub/dir.c | 2 + fs/xfs/scrub/dir_repair.c | 9 +- fs/xfs/scrub/dirtree.c | 4 +- fs/xfs/scrub/dirtree_repair.c | 76 +- fs/xfs/scrub/dqiterate.c | 1 + fs/xfs/scrub/fscounters.c | 38 +- fs/xfs/scrub/ialloc_repair.c | 8 +- fs/xfs/scrub/inode.c | 2 +- fs/xfs/scrub/inode_repair.c | 181 +- fs/xfs/scrub/iscan.c | 2 +- fs/xfs/scrub/metapath.c | 17 +- fs/xfs/scrub/newbt.c | 15 +- fs/xfs/scrub/newbt.h | 1 - fs/xfs/scrub/parent_repair.c | 4 + fs/xfs/scrub/quota.c | 8 +- fs/xfs/scrub/quota_repair.c | 39 +- fs/xfs/scrub/quotacheck_repair.c | 54 +- fs/xfs/scrub/readdir.c | 2 +- fs/xfs/scrub/reap.c | 65 +- fs/xfs/scrub/refcount.c | 17 +- fs/xfs/scrub/repair.c | 18 +- fs/xfs/scrub/repair.h | 2 +- fs/xfs/scrub/rmap.c | 20 +- fs/xfs/scrub/rtbitmap_repair.c | 2 +- fs/xfs/scrub/rtrefcount.c | 2 + fs/xfs/scrub/rtsummary.c | 9 +- fs/xfs/scrub/rtsummary.h | 1 + fs/xfs/scrub/rtsummary_repair.c | 2 +- fs/xfs/scrub/stats.c | 5 +- fs/xfs/scrub/symlink.c | 17 +- fs/xfs/scrub/trace.c | 13 + fs/xfs/scrub/trace.h | 10 +- fs/xfs/scrub/xfarray.c | 4 +- fs/xfs/xfs_dquot.c | 20 +- fs/xfs/xfs_dquot.h | 2 +- fs/xfs/xfs_handle.c | 2 +- fs/xfs/xfs_inode_item_recover.c | 20 +- fs/xfs/xfs_mount.c | 9 +- fs/xfs/xfs_qm.c | 42 +- fs/xfs/xfs_quota.h | 9 + fs/xfs/xfs_trans_dquot.c | 6 +- include/asm-generic/bitops/le.h | 18 +- include/dt-bindings/arm/qcom,ids.h | 1 + include/linux/device.h | 5 + include/linux/device/bus.h | 3 - include/linux/hid.h | 1 + include/linux/hiddev.h | 2 + include/linux/interrupt.h | 2 + include/linux/net.h | 4 +- include/linux/pps_gen_kernel.h | 2 +- include/linux/remoteproc.h | 2 + include/linux/socket.h | 17 - include/net/af_rxrpc.h | 5 +- include/net/bonding.h | 2 + include/net/dropreason-core.h | 6 + include/net/inet_common.h | 2 +- include/net/ipv6.h | 5 +- include/net/netfilter/nf_conntrack_expect.h | 19 +- include/net/netfilter/nf_tables.h | 4 + include/net/netfilter/nf_tables_ipv4.h | 17 +- include/net/netfilter/nf_tables_ipv6.h | 16 +- include/net/sock.h | 2 +- include/sound/hda_codec.h | 1 + include/trace/events/huge_memory.h | 6 +- include/trace/events/rxrpc.h | 2 +- include/trace/misc/nfs.h | 10 + include/uapi/linux/netfilter/nf_conntrack_common.h | 1 + include/video/maxinefb.h | 4 +- io_uring/io-wq.c | 14 +- io_uring/io_uring.c | 30 +- io_uring/kbuf.c | 4 +- io_uring/net.c | 23 +- io_uring/rsrc.c | 6 +- io_uring/sqpoll.c | 28 +- io_uring/sqpoll.h | 3 +- io_uring/tctx.c | 6 +- io_uring/timeout.c | 3 + ipc/namespace.c | 9 +- kernel/cgroup/cgroup.c | 28 + kernel/events/core.c | 37 +- kernel/fork.c | 4 + kernel/irq/internals.h | 2 + kernel/irq/irqdomain.c | 4 +- kernel/irq/manage.c | 31 +- kernel/kcov.c | 8 + kernel/kcsan/core.c | 7 +- kernel/reboot.c | 9 + kernel/resource.c | 9 +- kernel/sched/ext.c | 23 +- kernel/trace/trace_events_hist.c | 105 +- lib/klist.c | 16 +- lib/kobject_uevent.c | 6 +- mm/hugetlb.c | 15 +- mm/khugepaged.c | 4 +- mm/kmemleak.c | 32 +- mm/migrate.c | 6 +- mm/migrate_device.c | 6 + mm/page_alloc.c | 4 +- mm/rmap.c | 11 - mm/slab_common.c | 17 +- mm/vmscan.c | 17 +- net/8021q/vlan_dev.c | 33 +- net/9p/trans_fd.c | 2 +- net/appletalk/ddp.c | 2 +- net/atm/pvc.c | 4 +- net/atm/svc.c | 2 +- net/ax25/af_ax25.c | 2 +- net/bluetooth/Kconfig | 2 +- net/bluetooth/bnep/Kconfig | 2 +- net/bluetooth/hci_event.c | 7 + net/bluetooth/hci_sock.c | 2 +- net/bluetooth/hci_sync.c | 30 + net/bluetooth/hidp/Kconfig | 2 +- net/bluetooth/iso.c | 4 +- net/bluetooth/l2cap_sock.c | 2 +- net/bluetooth/rfcomm/Kconfig | 2 +- net/bluetooth/rfcomm/core.c | 4 +- net/bluetooth/rfcomm/sock.c | 2 +- net/bluetooth/sco.c | 2 +- net/bridge/netfilter/ebtables.c | 12 +- net/can/isotp.c | 2 +- net/can/j1939/socket.c | 2 +- net/can/raw.c | 2 +- net/ceph/mon_client.c | 2 +- net/core/netpoll.c | 2 +- net/core/rtnetlink.c | 4 + net/core/skbuff.c | 2 + net/core/sock.c | 2 +- net/ieee802154/socket.c | 4 +- net/ipv4/af_inet.c | 4 +- net/ipv4/inet_connection_sock.c | 2 +- net/ipv4/ip_gre.c | 42 +- net/ipv4/metrics.c | 5 + net/ipv4/netfilter/nf_nat_h323.c | 22 +- net/ipv4/netfilter/nf_reject_ipv4.c | 6 +- net/ipv4/netfilter/nf_tproxy_ipv4.c | 2 +- net/ipv4/udp_tunnel_core.c | 2 +- net/ipv6/af_inet6.c | 4 +- net/ipv6/exthdrs_core.c | 7 + net/ipv6/ip6_gre.c | 5 +- net/ipv6/ip6_input.c | 5 + net/ipv6/ip6_tunnel.c | 4 + net/ipv6/ip6_udp_tunnel.c | 2 +- net/ipv6/netfilter/nf_reject_ipv6.c | 8 +- net/ipv6/netfilter/nf_tproxy_ipv6.c | 2 +- net/ipv6/udp.c | 13 + net/iucv/af_iucv.c | 2 +- net/l2tp/l2tp_core.c | 4 +- net/llc/af_llc.c | 2 +- net/mac80211/ibss.c | 4 +- net/mctp/af_mctp.c | 2 +- net/mctp/test/route-test.c | 2 +- net/mctp/test/utils.c | 2 +- net/mptcp/protocol.c | 6 +- net/mptcp/subflow.c | 2 +- net/netfilter/ipvs/ip_vs_sync.c | 4 +- net/netfilter/nf_conntrack_core.c | 33 +- net/netfilter/nf_conntrack_expect.c | 180 +- net/netfilter/nf_conntrack_h323_main.c | 4 +- net/netfilter/nf_conntrack_helper.c | 10 +- net/netfilter/nf_conntrack_netlink.c | 24 +- net/netfilter/nf_conntrack_proto_tcp.c | 6 +- net/netfilter/nf_conntrack_sip.c | 13 +- net/netfilter/nf_nat_sip.c | 20 +- net/netfilter/nf_tables_api.c | 34 +- net/netfilter/nf_tables_core.c | 2 +- net/netfilter/nfnetlink_queue.c | 242 +- net/netfilter/nft_ct.c | 3 +- net/netfilter/nft_meta.c | 60 +- net/netfilter/nft_payload.c | 314 +- net/netfilter/nft_rt.c | 6 +- net/netfilter/nft_xfrm.c | 9 +- net/netlink/af_netlink.c | 2 +- net/netrom/af_netrom.c | 2 +- net/nfc/llcp_sock.c | 4 +- net/packet/af_packet.c | 11 +- net/phonet/socket.c | 8 +- net/qrtr/af_qrtr.c | 2 +- net/qrtr/ns.c | 2 +- net/rds/bind.c | 2 +- net/rds/ib_rdma.c | 4 +- net/rds/message.c | 26 + net/rds/rdma.c | 63 +- net/rds/rds.h | 17 +- net/rds/send.c | 18 +- net/rds/tcp_connect.c | 2 +- net/rds/tcp_listen.c | 2 +- net/rose/af_rose.c | 2 +- net/rxrpc/af_rxrpc.c | 2 +- net/rxrpc/recvmsg.c | 22 +- net/rxrpc/rxperf.c | 43 +- net/rxrpc/sendmsg.c | 86 +- net/sched/act_ct.c | 5 +- net/sched/act_ife.c | 4 + net/sched/cls_bpf.c | 28 +- net/sched/cls_flower.c | 50 +- net/sched/sch_generic.c | 10 +- net/sched/sch_teql.c | 60 +- net/sctp/associola.c | 4 + net/sctp/endpointola.c | 4 + net/smc/af_smc.c | 2 +- net/smc/smc.h | 2 +- net/socket.c | 6 +- net/sunrpc/auth_gss/svcauth_gss.c | 29 +- net/sunrpc/clnt.c | 4 +- net/sunrpc/svc.c | 9 +- net/sunrpc/svc_xprt.c | 24 +- net/sunrpc/svcauth_unix.c | 7 + net/sunrpc/svcsock.c | 88 +- net/sunrpc/xprtsock.c | 4 +- net/tipc/socket.c | 4 +- net/unix/af_unix.c | 4 +- net/vmw_vsock/af_vsock.c | 4 +- net/wireless/nl80211.c | 4 + net/x25/af_x25.c | 2 +- net/xdp/xsk.c | 2 +- net/xdp/xsk_queue.c | 12 +- rust/kernel/bitmap.rs | 70 +- rust/kernel/block/mq/gen_disk.rs | 10 +- rust/kernel/block/mq/operations.rs | 2 +- rust/kernel/bug.rs | 2 +- rust/kernel/configfs.rs | 43 +- rust/kernel/cpufreq.rs | 22 +- scripts/kconfig/conf.c | 17 + scripts/link-vmlinux.sh | 20 +- security/apparmor/include/policy_ns.h | 16 + security/apparmor/mount.c | 4 +- security/apparmor/policy_ns.c | 2 +- security/landlock/fs.c | 10 +- sound/core/control.c | 2 + sound/drivers/pcmtest.c | 42 +- sound/hda/codecs/conexant.c | 26 +- sound/hda/codecs/hdmi/hdmi.c | 5 +- sound/hda/codecs/realtek/alc269.c | 109 +- sound/hda/codecs/realtek/realtek.c | 6 + sound/hda/common/codec.c | 11 +- sound/hda/controllers/intel.c | 18 + sound/hda/core/device.c | 1 + sound/soc/amd/acp-config.c | 14 + sound/soc/amd/acp/acp3x-es83xx/acp3x-es83xx.c | 8 + sound/soc/amd/ps/acp63.h | 8 + sound/soc/amd/ps/pci-ps.c | 2 + sound/soc/amd/ps/ps-common.c | 2 + sound/soc/amd/yc/acp6x-mach.c | 21 + sound/soc/codecs/cs35l56-sdw.c | 2 + sound/soc/codecs/cs35l56-shared.c | 4 + sound/soc/codecs/cs35l56.c | 1 + sound/soc/codecs/hdac_hdmi.c | 10 +- sound/soc/codecs/max98396.c | 24 +- sound/soc/codecs/max98926.c | 2 +- sound/soc/codecs/rt712-sdca.c | 1 + sound/soc/codecs/rt712-sdca.h | 1 + sound/soc/codecs/sma1303.c | 2 + sound/soc/codecs/tlv320aic26.c | 6 + sound/soc/codecs/uda1342.c | 9 +- sound/soc/generic/audio-graph-card2.c | 3 +- sound/soc/intel/boards/bytcr_rt5651.c | 17 + sound/soc/sof/intel/mtl.c | 23 + sound/synth/emux/emux_synth.c | 3 + sound/synth/emux/soundfont.c | 9 +- sound/usb/card.c | 70 +- sound/usb/line6/pcm.c | 8 + sound/usb/mixer_maps.c | 27 + sound/usb/quirks-table.h | 22 + sound/usb/quirks.c | 4 + sound/usb/usx2y/usbusx2yaudio.c | 1 - tools/lib/api/fd/array.c | 5 +- tools/lib/bpf/libbpf.c | 10 +- tools/lib/bpf/ringbuf.c | 2 +- tools/lib/thermal/include/thermal.h | 4 +- tools/objtool/check.c | 1 + tools/power/x86/turbostat/turbostat.c | 22 +- tools/sched_ext/scx_flatcg.bpf.c | 3 + .../testing/selftests/bpf/test_kmods/bpf_testmod.c | 2 +- .../selftests/cgroup/lib/include/cgroup_util.h | 1 + tools/testing/selftests/cgroup/test_cpu.c | 43 +- .../filesystems/overlayfs/set_layers_via_fds.c | 16 +- tools/testing/selftests/ftrace/ftracetest | 3 + tools/testing/selftests/net/fin_ack_lat.c | 2 +- tools/testing/selftests/net/reuseport_bpf_numa.c | 24 + tools/testing/selftests/ublk/.gitignore | 6 +- tools/testing/selftests/ublk/Makefile | 11 +- tools/testing/selftests/ublk/metadata_size.c | 36 + tools/testing/selftests/ublk/settings | 1 + virt/kvm/kvm_main.c | 31 +- 969 files changed, 86932 insertions(+), 4449 deletions(-)

1 week

Jump to page:

2026

2025

2024

2023

2022

2021

2020

2019

2018

2017

Lkft-triage