Lkft-triage

lkft-triage@lists.linaro.org

53 participants
34048 discussions

by Greg Kroah-Hartman

This is the start of the stable review cycle for the 6.18.20 release. There are 212 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know. Responses should be made by Wed, 25 Mar 2026 13:44:33 +0000. Anything received after that time might be too late. The whole patch series can be found in one patch at: https://www.kernel.org/pub/linux/kernel/v6.x/stable-review/patch-6.18.20-rc… or in the git tree and branch at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-6.18.y and the diffstat can be found below. thanks, greg k-h ------------- Pseudo-Shortlog of commits: Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> Linux 6.18.20-rc1 Guenter Roeck <linux(a)roeck-us.net> hwmon: (max6639) Fix pulses-per-revolution implementation Suzuki K Poulose <suzuki.poulose(a)arm.com> arm64: realm: Fix PTE_NS_SHARED for 52bit PA support Josh Law <objecting(a)objecting.org> tools/bootconfig: fix fd leak in load_xbc_file() on fstat failure Josh Law <objecting(a)objecting.org> lib/bootconfig: check xbc_init_node() return in override path Kees Cook <kees(a)kernel.org> fs/tests: exec: Remove bad test vector Rahul Bukte <rahul.bukte(a)sony.com> drm/i915/gt: Check set_default_submission() before deferencing Hyunwoo Kim <imv4bel(a)gmail.com> ksmbd: fix use-after-free in durable v2 replay of active file handles Hyunwoo Kim <imv4bel(a)gmail.com> ksmbd: fix use-after-free of share_conf in compound request Jonas Karlman <jonas(a)kwiboo.se> drm/bridge: dw-hdmi-qp: fix multi-channel audio output Andy Nguyen <theofficialflow1996(a)gmail.com> drm/amd: fix dcn 2.01 check Srinivasan Shanmugam <srinivasan.shanmugam(a)amd.com> drm/amd/display: Fix DisplayID not-found handling in parse_edid_displayid_vrr() Lizhi Hou <lizhi.hou(a)amd.com> iommu/sva: Fix crash in iommu_sva_unbind_device() Ian Forbes <ian.forbes(a)broadcom.com> drm/vmwgfx: Don't overwrite KMS surface dirty tracker Felix Gu <ustc.gu(a)gmail.com> spi: amlogic-spisg: Fix memory leak in aml_spisg_probe() Felix Gu <ustc.gu(a)gmail.com> spi: amlogic: spifc-a4: Remove redundant clock cleanup Kamal Dasu <kamal.dasu(a)broadcom.com> mtd: rawnand: brcmnand: skip DMA during panic write Kamal Dasu <kamal.dasu(a)broadcom.com> mtd: rawnand: serialize lock/unlock against other NAND operations Andrei Vagin <avagin(a)google.com> binfmt_elf_fdpic: fix AUXV size calculation for ELF_HWCAP3 and ELF_HWCAP4 Steven Rostedt <rostedt(a)goodmis.org> tracing: Fix trace_marker copy link list updates Kyle Meyer <kyle.meyer(a)hpe.com> x86/platform/uv: Handle deconfigured sockets Steven Rostedt <rostedt(a)goodmis.org> tracing: Fix failure to read user space from system call trace events Masami Hiramatsu (Google) <mhiramat(a)kernel.org> ring-buffer: Fix to update per-subbuf entries of persistent ring buffer Breno Leitao <leitao(a)debian.org> perf/x86: Move event pointer setup earlier in x86_pmu_enable() Dapeng Mi <dapeng1.mi(a)linux.intel.com> perf/x86/intel: Add missing branch counters constraint apply Felix Gu <ustc.gu(a)gmail.com> irqchip/riscv-rpmi-sysmsi: Fix mailbox channel leak in rpmi_sysmsi_probe() Gabor Juhos <j4g8y7(a)gmail.com> i2c: pxa: defer reset on Armada 3700 when recovery is used Christophe JAILLET <christophe.jaillet(a)wanadoo.fr> i2c: fsi: Fix a potential leak in fsi_i2c_probe() Johan Hovold <johan(a)kernel.org> i2c: cp2615: fix serial string NULL-deref at probe Ji-Ze Hong (Peter Hong) <peter_hong(a)fintek.com.tw> USB: serial: f81232: fix incomplete serial port generation Sanman Pradhan <psanman(a)juniper.net> hwmon: (pmbus/isl68137) Fix unchecked return value and use sysfs_emit() Sanman Pradhan <psanman(a)juniper.net> hwmon: (pmbus/mp2869) Check pmbus_read_byte_data() before using its return value Sanman Pradhan <psanman(a)juniper.net> hwmon: (pmbus/mp2975) Add error check for pmbus_read_word_data() return value Sanman Pradhan <psanman(a)juniper.net> hwmon: (pmbus/ina233) Add error check for pmbus_read_word_data() return value Li Xiasong <lixiasong1(a)huawei.com> MPTCP: fix lock class name family in pm_nl_create_listen_socket Weiming Shi <bestswngs(a)gmail.com> icmp: fix NULL pointer dereference in icmp_tag_validation() Anas Iqbal <mohd.abd.6602(a)gmail.com> net: dsa: bcm_sf2: fix missing clk_disable_unprepare() in error paths Jakub Kicinski <kuba(a)kernel.org> net: shaper: protect from late creation of hierarchy Jakub Kicinski <kuba(a)kernel.org> net: shaper: protect late read accesses to the hierarchy Muhammad Hammad Ijaz <mhijaz(a)amazon.com> net: mvpp2: guard flow control update with global_tx_fc in buffer switching Weiming Shi <bestswngs(a)gmail.com> nfnetlink_osf: validate individual option lengths in fingerprints Pablo Neira Ayuso <pablo(a)netfilter.org> netfilter: nf_tables: release flowtable after rcu grace period on error Florian Westphal <fw(a)strlen.de> netfilter: bpf: defer hook memory release until rcu readers are done Xiang Mei <xmei5(a)asu.edu> net: bonding: fix NULL deref in bond_debug_rlb_hash_show Xiang Mei <xmei5(a)asu.edu> udp_tunnel: fix NULL deref caused by udp_sock_create6 when CONFIG_IPV6=n Jianbo Liu <jianbol(a)nvidia.com> net/mlx5e: Fix race condition during IPSec ESN update Jianbo Liu <jianbol(a)nvidia.com> net/mlx5e: Prevent concurrent access to IPSec ASO context Cosmin Ratiu <cratiu(a)nvidia.com> net/mlx5: qos: Restrict RTNL area to avoid a lock cycle Fedor Pchelkin <pchelkin(a)ispras.ru> net: macb: fix uninitialized rx_fs_lock Wesley Atwell <atwellwea(a)gmail.com> netdevsim: drop PSP ext ref on forward failure Rafael J. Wysocki <rafael.j.wysocki(a)intel.com> ACPI: processor: Fix previous acpi_processor_errata_piix4() fix Felix Fietkau <nbd(a)nbd.name> wifi: mac80211: always free skb on ieee80211_tx_prepare_skb() failure Guenter Roeck <linux(a)roeck-us.net> wifi: wlcore: Return -ENOMEM instead of -EAGAIN if there is not enough headroom Xiang Mei <xmei5(a)asu.edu> wifi: mac80211: fix NULL deref in mesh_matches_local() Michal Swiatkowski <michal.swiatkowski(a)linux.intel.com> libie: prevent memleak in fwlog code Petr Oros <poros(a)redhat.com> iavf: fix VLAN filter lost on add/delete race Zdenek Bouska <zdenek.bouska(a)siemens.com> igc: fix page fault in XDP TX timestamps handling Kohei Enju <kohei(a)enjuk.jp> igc: fix missing update of skb->tail in igc_xmit_frame() Saket Dumbre <saket.dumbre(a)intel.com> ACPICA: Update the format of Arg3 of _DSM Nikola Z. Ivanov <zlatistiv(a)gmail.com> net: usb: aqc111: Do not perform PM inside suspend callback Daniel Borkmann <daniel(a)iogearbox.net> clsact: Fix use-after-free in init/destroy rollback asymmetry Tobi Gaertner <tob.gaertner(a)me.com> net: usb: cdc_ncm: add ndpoffset to NDP32 nframes bounds check Tobi Gaertner <tob.gaertner(a)me.com> net: usb: cdc_ncm: add ndpoffset to NDP16 nframes bounds check Lorenzo Bianconi <lorenzo(a)kernel.org> net: airoha: Remove airoha_dev_stop() in airoha_remove() Jamal Hadi Salim <jhs(a)mojatatu.com> net/sched: teql: Fix double-free in teql_master_xmit Jiayuan Chen <jiayuan.chen(a)shopee.com> net/smc: fix NULL dereference and UAF in smc_tcp_syn_recv_sock() Eric Dumazet <edumazet(a)google.com> bonding: prevent potential infinite loop in bond_header_parse() Bart Van Assche <bvanassche(a)acm.org> PM: runtime: Fix a race condition related to device removal Rafael J. Wysocki <rafael.j.wysocki(a)intel.com> sched: idle: Consolidate the handling of two special cases Dipayaan Roy <dipayanroy(a)linux.microsoft.com> net: mana: fix use-after-free in mana_hwc_destroy_channel() by reordering teardown Justin Chen <justin.chen(a)broadcom.com> net: bcmgenet: increase WoL poll timeout Guenter Roeck <linux(a)roeck-us.net> crypto: ccp - Fix leaking the same page twice Jenny Guanni Qu <qguanni(a)gmail.com> netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() Jenny Guanni Qu <qguanni(a)gmail.com> netfilter: xt_time: use unsigned int for monthday bit shift Pablo Neira Ayuso <pablo(a)netfilter.org> netfilter: xt_CT: drop pending enqueued packets on template removal Pablo Neira Ayuso <pablo(a)netfilter.org> netfilter: nft_ct: drop pending enqueued packets on removal Pablo Neira Ayuso <pablo(a)netfilter.org> nf_tables: nft_dynset: fix possible stateful expression memleak in error path Jenny Guanni Qu <qguanni(a)gmail.com> netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case Lukas Johannes Möller <research(a)johannes-moeller.dev> netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() Hyunwoo Kim <imv4bel(a)gmail.com> netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() Sabrina Dubroca <sd(a)queasysnail.net> mpls: add missing unregister_netdevice_notifier to mpls_init Jiayuan Chen <jiayuan.chen(a)shopee.com> net/rose: fix NULL pointer dereference in rose_transmit_link on reconnect Hyunwoo Kim <imv4bel(a)gmail.com> bridge: cfm: Fix race condition in peer_mep deletion Dmitry Baryshkov <dmitry.baryshkov(a)oss.qualcomm.com> Bluetooth: qca: fix ROM version reading on WCN3998 chips Shaurya Rane <ssrane_b23(a)ee.vjti.ac.in> Bluetooth: L2CAP: Fix use-after-free in l2cap_unregister_user Luiz Augusto von Dentz <luiz.von.dentz(a)intel.com> Bluetooth: HIDP: Fix possible UAF Wang Tao <wangtao554(a)huawei.com> Bluetooth: MGMT: Fix list corruption and UAF in command complete handlers Michael Grzeschik <m.grzeschik(a)pengutronix.de> Bluetooth: hci_sync: Fix hci_le_create_conn_sync Luiz Augusto von Dentz <luiz.von.dentz(a)intel.com> Bluetooth: ISO: Fix defer tests being unstable Christian Eggers <ceggers(a)arri.de> Bluetooth: SMP: make SM/PER/KDU/BI-04-C happy Christian Eggers <ceggers(a)arri.de> Bluetooth: LE L2CAP: Disconnect if sum of payload sizes exceed SDU Christian Eggers <ceggers(a)arri.de> Bluetooth: LE L2CAP: Disconnect if received packet's SDU exceeds IMTU Cristian Marussi <cristian.marussi(a)arm.com> firmware: arm_scmi: Fix NULL dereference on notify error path Felix Gu <ustc.gu(a)gmail.com> firmware: arm_scpi: Fix device_node reference leak in probe path Yeoreum Yun <yeoreum.yun(a)arm.com> firmware: arm_ffa: Remove vm_id argument in ffa_rxtx_unmap() Claudiu Beznea <claudiu.beznea.uj(a)bp.renesas.com> arm64: dts: renesas: rzg3s-smarc-som: Set bypass for Versa3 PLL2 Lad Prabhakar <prabhakar.mahadev-lad.rj(a)bp.renesas.com> arm64: dts: renesas: r9a09g087: Fix CPG register region sizes Lad Prabhakar <prabhakar.mahadev-lad.rj(a)bp.renesas.com> arm64: dts: renesas: r9a09g077: Fix CPG register region sizes Fabrizio Castro <fabrizio.castro.jz(a)renesas.com> arm64: dts: renesas: r9a09g057: Remove wdt{0,2,3} nodes Ovidiu Panait <ovidiu.panait.rb(a)renesas.com> arm64: dts: renesas: r9a09g057: Add RTC node Lad Prabhakar <prabhakar.mahadev-lad.rj(a)bp.renesas.com> arm64: dts: renesas: rzv2-evk-cn15-sd: Add ramp delay for SD0 regulator Lad Prabhakar <prabhakar.mahadev-lad.rj(a)bp.renesas.com> arm64: dts: renesas: rzt2h-n2h-evk: Add ramp delay for SD0 card regulator Peddolla Harshavardhan Reddy <peddolla.reddy(a)oss.qualcomm.com> wifi: cfg80211: cancel pmsr_free_wk in cfg80211_pmsr_wdev_down Kuniyuki Iwashima <kuniyu(a)google.com> wifi: mac80211: Fix static_branch_dec() underflow for aql_disable. Nicolas Cavallari <nicolas.cavallari(a)green-communications.fr> wifi: mac80211: use jiffies_delta_to_msecs() for sta_info inactive times Johannes Berg <johannes.berg(a)intel.com> wifi: mac80211: remove keys after disabling beaconing Matthew Wilcox <willy(a)infradead.org> tee: shm: Remove refcounting of kernel pages Chen Ni <nichen(a)iscas.ac.cn> soc: fsl: cpm1: qmc: Fix error check for devm_ioremap_resource() in qmc_qe_init_resources() Richard Genoud <richard.genoud(a)bootlin.com> soc: fsl: qbman: fix race condition in qman_destroy_fq Shawn Lin <shawn.lin(a)rock-chips.com> soc: rockchip: grf: Add missing of_node_put() when returning Felix Gu <ustc.gu(a)gmail.com> cache: ax45mp: Fix device node reference leak in ax45mp_cache_init() Felix Gu <ustc.gu(a)gmail.com> cache: starfive: fix device node leak in starlink_cache_init() Zilin Guan <zilin(a)seu.edu.cn> soc: microchip: mpfs: Fix memory leak in mpfs_sys_controller_probe() ZhengYuan Huang <gality369(a)gmail.com> btrfs: tree-checker: fix misleading root drop_level error message Filipe Manana <fdmanana(a)suse.com> btrfs: log new dentries when logging parent dir of a conflicting inode Jouni Högander <jouni.hogander(a)intel.com> drm/i915/psr: Compute PSR entry_setup_frames into intel_crtc_state Luiz Augusto von Dentz <luiz.von.dentz(a)intel.com> Bluetooth: L2CAP: Fix accepting multiple L2CAP_ECRED_CONN_REQ Matthew Brost <matthew.brost(a)intel.com> drm/xe: Open-code GGTT MMIO access protection Ashutosh Dixit <ashutosh.dixit(a)intel.com> drm/xe/oa: Allow reading after disabling OA stream Zhanjun Dong <zhanjun.dong(a)intel.com> drm/xe/guc: Ensure CT state transitions via STOP before DISABLED Imre Deak <imre.deak(a)intel.com> drm/i915/dmc: Fix an unlikely NULL pointer deference at probe Jesse.Zhang <Jesse.Zhang(a)amd.com> drm/amdgpu: Limit BO list entry count to prevent resource exhaustion Alex Deucher <alexander.deucher(a)amd.com> drm/amdgpu: apply state adjust rules to some additional HAINAN vairants Alex Deucher <alexander.deucher(a)amd.com> drm/radeon: apply state adjust rules to some additional HAINAN vairants Alessio Belle <alessio.belle(a)imgtec.com> drm/imagination: Synchronize interrupts before suspending the GPU Alessio Belle <alessio.belle(a)imgtec.com> drm/imagination: Fix deadlock in soft reset sequence Alex Deucher <alexander.deucher(a)amd.com> drm/amdgpu/mmhub4.1.0: add bounds checking for cid Alex Deucher <alexander.deucher(a)amd.com> drm/amdgpu/mmhub3.0: add bounds checking for cid Alex Deucher <alexander.deucher(a)amd.com> drm/amdgpu/mmhub3.0.2: add bounds checking for cid Alex Deucher <alexander.deucher(a)amd.com> drm/amdgpu/mmhub3.0.1: add bounds checking for cid Alex Deucher <alexander.deucher(a)amd.com> drm/amdgpu/mmhub2.3: add bounds checking for cid Alex Deucher <alexander.deucher(a)amd.com> drm/amdgpu/mmhub2.0: add bounds checking for cid Alex Deucher <alexander.deucher(a)amd.com> drm/amdgpu/gmc9.0: add bounds checking for cid Xi Ruoyao <xry111(a)xry111.site> drm/amd/display: Wrap dcn32_override_min_req_memclk() in DC_FP_{START, END} Maarten Lankhorst <dev(a)lankhorst.se> drm: Fix use-after-free on framebuffers and property blobs when calling drm_dev_unplug Maciej Andrzejewski ICEYE <maciej.andrzejewski(a)m-works.net> serial: uartlite: fix PM runtime usage count underflow on probe Jiayuan Chen <jiayuan.chen(a)shopee.com> serial: core: fix infinite loop in handle_tx() for PORT_UNKNOWN Ilpo Järvinen <ilpo.jarvinen(a)linux.intel.com> serial: 8250_dw: Ensure BUSY is deasserted Ilpo Järvinen <ilpo.jarvinen(a)linux.intel.com> serial: 8250: Add late synchronize_irq() to shutdown to handle DW UART BUSY Ilpo Järvinen <ilpo.jarvinen(a)linux.intel.com> serial: 8250_dw: Rework IIR_NO_INT handling to stop interrupt storm Ilpo Järvinen <ilpo.jarvinen(a)linux.intel.com> serial: 8250_dw: Rework dw8250_handle_irq() locking and IIR handling Ilpo Järvinen <ilpo.jarvinen(a)linux.intel.com> serial: 8250: Add serial8250_handle_irq_locked() Ilpo Järvinen <ilpo.jarvinen(a)linux.intel.com> serial: 8250_dw: Avoid unnecessary LCR writes Ilpo Järvinen <ilpo.jarvinen(a)linux.intel.com> serial: 8250: Protect LCR write in shutdown Peng Zhang <zhangpeng.00(a)bytedance.com> serial: 8250: always disable IRQ during THRE test Raul E Rangel <rrangel(a)chromium.org> serial: 8250: Fix TX deadlock when using DMA Martin Roukala (né Peres) <martin.roukala(a)mupuf.org> serial: 8250_pci: add support for the AX99100 Nicolas Pitre <npitre(a)baylibre.com> vt: save/restore unicode screen buffer for alternate screen Jens Axboe <axboe(a)kernel.dk> io_uring/kbuf: propagate BUF_MORE through early buffer commit path Jens Axboe <axboe(a)kernel.dk> io_uring/kbuf: fix missing BUF_MORE for incremental buffers at EOF Jens Axboe <axboe(a)kernel.dk> io_uring/poll: fix multishot recv missing EOF on wakeup race Lu Baolu <baolu.lu(a)linux.intel.com> iommu/vt-d: Only handle IOPF for SVA when PRI is supported Guanghui Feng <guanghuifeng(a)linux.alibaba.com> iommu/vt-d: Fix intel iommu iotlb sync hardlockup and retry Finn Thain <fthain(a)linux-m68k.org> mtd: Avoid boot crash in RedBoot partition table parser Chen Ni <nichen(a)iscas.ac.cn> mtd: rawnand: cadence: Fix error check for dma_alloc_coherent() in cadence_nand_init() Olivier Sobrie <olivier(a)sobrie.be> mtd: rawnand: pl353: make sure optimal timings are applied Johan Hovold <johan(a)kernel.org> spi: fix statistics allocation Johan Hovold <johan(a)kernel.org> spi: fix use-after-free on controller registration failure Maíra Canal <mcanal(a)igalia.com> pmdomain: bcm: bcm2835-power: Increase ASB control timeout Luke Wang <ziniu.wang_1(a)nxp.com> mmc: sdhci: fix timing selection for 1-bit bus width Matthew Schwartz <matthew.schwartz(a)linux.dev> mmc: sdhci-pci-gli: fix GL9750 DMA write corruption Damien Le Moal <dlemoal(a)kernel.org> ata: libata-scsi: report correct sense field pointer in ata_scsiop_maint_in() Damien Le Moal <dlemoal(a)kernel.org> ata: libata-core: disable LPM on ADATA SU680 SSD Zi Yan <ziy(a)nvidia.com> mm/huge_memory: fix a folio_split() race condition with folio_try_get() Corey Minyard <corey(a)minyard.net> ipmi:msghandler: Handle error returns from the SMI sender Corey Minyard <corey(a)minyard.net> ipmi: Consolidate the run to completion checking for xmit msgs lock Tejun Heo <tj(a)kernel.org> sched_ext: Disable preemption between scx_claim_exit() and kicking helper work Tejun Heo <tj(a)kernel.org> sched_ext: Simplify breather mechanism with scx_aborting flag Tejun Heo <tj(a)kernel.org> sched_ext: Fix starvation of scx_enable() under fair-class saturation Christian Brauner <brauner(a)kernel.org> nsfs: tighten permission checks for ns iteration ioctls Shuicheng Lin <shuicheng.lin(a)intel.com> drm/xe/sync: Fix user fence leak on alloc failure Shengming Hu <hu.shengming(a)zte.com.cn> fgraph: Fix thresh_return nosleeptime double-adjust Thorsten Blum <thorsten.blum(a)linux.dev> ksmbd: Don't log keys in SMB3 signing and encryption key generation Kevin Hao <haokexin(a)gmail.com> net: macb: Shuffle the tx ring before enabling tx Théo Lebrun <theo.lebrun(a)bootlin.com> net: macb: sort #includes Ville Syrjälä <ville.syrjala(a)linux.intel.com> drm/i915/vrr: Configure VRR timings after enabling TRANS_DDI_FUNC_CTL Ville Syrjälä <ville.syrjala(a)linux.intel.com> drm/i915/vrr: Move HAS_VRR() check into intel_vrr_set_transcoder_timings() Varun Gupta <varun.gupta(a)intel.com> drm/xe: Fix memory leak in xe_vm_madvise_ioctl Shyam Prasad N <sprasad(a)microsoft.com> cifs: open files should not hold ref on superblock Thorsten Blum <thorsten.blum(a)linux.dev> crypto: atmel-sha204a - Fix OOM ->tfm_count leak Breno Leitao <leitao(a)debian.org> netconsole: fix sysdata_release_enabled_show checking wrong flag Mehul Rao <mehulrao(a)gmail.com> ublk: fix NULL pointer dereference in ublk_ctrl_set_size() Tiezhu Yang <yangtiezhu(a)loongson.cn> LoongArch: Check return values for set_memory_{rw,rox} Kevin Hao <haokexin(a)gmail.com> net: macb: Reinitialize tx/rx queue pointer registers and rx ring during resume Kevin Hao <haokexin(a)gmail.com> net: macb: Introduce gem_init_rx_ring() Jouni Högander <jouni.hogander(a)intel.com> drm/i915/psr: Write DSC parameters on Selective Update in ET mode Jouni Högander <jouni.hogander(a)intel.com> drm/i915/dsc: Add helper for writing DSC Selective Update ET parameters Jouni Högander <jouni.hogander(a)intel.com> drm/i915/dsc: Add Selective Update register definitions Namjae Jeon <linkinjeon(a)kernel.org> ksmbd: use volume UUID in FS_OBJECT_ID_INFORMATION Namjae Jeon <linkinjeon(a)kernel.org> ksmbd: unset conn->binding on failed binding request Paulo Alcantara <pc(a)manguebit.org> smb: client: fix krb5 mount with username option Lukas Johannes Möller <research(a)johannes-moeller.dev> Bluetooth: L2CAP: Validate L2CAP_INFO_RSP payload length before access Lukas Johannes Möller <research(a)johannes-moeller.dev> Bluetooth: L2CAP: Fix type confusion in l2cap_ecred_reconf_rsp() AlanSong-oc <AlanSong-oc(a)zhaoxin.com> crypto: padlock-sha - Disable for Zhaoxin processor Felix Fietkau <nbd(a)nbd.name> mac80211: fix crash in ieee80211_chan_bw_change for AP_VLAN stations Yang Yang <n05ec(a)lzu.edu.cn> batman-adv: avoid OGM aggregation when skb tailroom is insufficient Helge Deller <deller(a)gmx.de> parisc: Flush correct cache in cacheflush() syscall Junrui Luo <moonafterrain(a)outlook.com> bnxt_en: fix OOB access in DBG_BUF_PRODUCER async event handler Fedor Pchelkin <pchelkin(a)ispras.ru> net: macb: fix use-after-free access to PTP clock Ian Ray <ian.ray(a)gehealthcare.com> NFC: nxp-nci: allow GPIOs to sleep Tiezhu Yang <yangtiezhu(a)loongson.cn> LoongArch: No need to flush icache if text copy failed Tiezhu Yang <yangtiezhu(a)loongson.cn> LoongArch: Give more information if kmem access failed Wei Yang <richard.weiyang(a)gmail.com> mm/huge_memory: fix early failure try_to_migrate() when split huge pmd for shared THP Chris Down <chris(a)chrisdown.name> mm/huge_memory: fix use of NULL folio in move_pages_huge_pmd() Dev Jain <dev.jain(a)arm.com> mm/rmap: fix incorrect pte restoration for lazyfree folios Thorsten Blum <thorsten.blum(a)linux.dev> crash_dump: don't log dm-crypt key bytes in read_key_from_user_keying Ira Weiny <ira.weiny(a)intel.com> nvdimm/bus: Fix potential use after free in asynchronous initialization Jeff Layton <jlayton(a)kernel.org> sunrpc: fix cache_request leak in cache_release Benjamin Tissoires <bentiss(a)kernel.org> HID: bpf: prevent buffer overflow in hid_hw_request Benjamin Tissoires <bentiss(a)kernel.org> selftests/hid: fix compilation when bpf_wq and hid_device are not exported Jeff Layton <jlayton(a)kernel.org> nfsd: fix heap overflow in NFSv4.0 LOCK replay cache Chuck Lever <chuck.lever(a)oracle.com> NFSD: Hold net reference for the lifetime of /proc/fs/nfs/exports fd Chuck Lever <chuck.lever(a)oracle.com> NFSD: Defer sub-object cleanup in export put callbacks ------------- Diffstat: Documentation/netlink/specs/net_shaper.yaml | 12 +- Makefile | 4 +- arch/arm64/boot/dts/renesas/r9a09g057.dtsi | 37 +-- arch/arm64/boot/dts/renesas/r9a09g077.dtsi | 4 +- arch/arm64/boot/dts/renesas/r9a09g087.dtsi | 4 +- arch/arm64/boot/dts/renesas/rzg3s-smarc-som.dtsi | 2 +- .../boot/dts/renesas/rzt2h-n2h-evk-common.dtsi | 1 + arch/arm64/boot/dts/renesas/rzv2-evk-cn15-sd.dtso | 1 + arch/arm64/kernel/rsi.c | 3 +- arch/loongarch/include/asm/uaccess.h | 14 +- arch/loongarch/kernel/inst.c | 21 +- arch/parisc/kernel/cache.c | 4 +- arch/x86/events/core.c | 3 +- arch/x86/events/intel/core.c | 31 ++- arch/x86/kernel/apic/x2apic_uv_x.c | 18 +- drivers/acpi/acpi_processor.c | 15 +- drivers/acpi/acpica/acpredef.h | 2 +- drivers/ata/libata-core.c | 3 + drivers/ata/libata-scsi.c | 2 +- drivers/base/power/runtime.c | 1 + drivers/block/ublk_drv.c | 12 +- drivers/bluetooth/btqca.c | 2 + drivers/cache/ax45mp_cache.c | 4 +- drivers/cache/starfive_starlink_cache.c | 4 +- drivers/char/ipmi/ipmi_msghandler.c | 144 ++++++---- drivers/crypto/atmel-sha204a.c | 5 +- drivers/crypto/ccp/sev-dev.c | 4 +- drivers/crypto/padlock-sha.c | 7 + drivers/firewire/net.c | 5 +- drivers/firmware/arm_ffa/driver.c | 8 +- drivers/firmware/arm_scmi/notify.c | 4 +- drivers/firmware/arm_scpi.c | 5 +- drivers/gpu/drm/amd/amdgpu/amdgpu_bo_list.c | 4 + drivers/gpu/drm/amd/amdgpu/gmc_v9_0.c | 21 +- drivers/gpu/drm/amd/amdgpu/mmhub_v2_0.c | 9 +- drivers/gpu/drm/amd/amdgpu/mmhub_v2_3.c | 3 +- drivers/gpu/drm/amd/amdgpu/mmhub_v3_0.c | 3 +- drivers/gpu/drm/amd/amdgpu/mmhub_v3_0_1.c | 3 +- drivers/gpu/drm/amd/amdgpu/mmhub_v3_0_2.c | 3 +- drivers/gpu/drm/amd/amdgpu/mmhub_v4_1_0.c | 3 +- drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm.c | 4 +- drivers/gpu/drm/amd/display/dc/clk_mgr/clk_mgr.c | 8 +- .../amd/display/dc/resource/dcn32/dcn32_resource.c | 3 + drivers/gpu/drm/amd/pm/legacy-dpm/si_dpm.c | 4 +- drivers/gpu/drm/bridge/synopsys/dw-hdmi-qp.c | 2 +- drivers/gpu/drm/drm_file.c | 5 +- drivers/gpu/drm/drm_mode_config.c | 9 +- drivers/gpu/drm/i915/display/intel_display.c | 2 - .../drm/i915/display/intel_display_power_well.c | 2 +- drivers/gpu/drm/i915/display/intel_display_types.h | 1 + drivers/gpu/drm/i915/display/intel_dmc.c | 3 +- drivers/gpu/drm/i915/display/intel_psr.c | 16 +- drivers/gpu/drm/i915/display/intel_vdsc.c | 23 ++ drivers/gpu/drm/i915/display/intel_vdsc.h | 3 + drivers/gpu/drm/i915/display/intel_vdsc_regs.h | 12 + drivers/gpu/drm/i915/display/intel_vrr.c | 17 ++ drivers/gpu/drm/i915/gt/intel_engine_cs.c | 3 +- drivers/gpu/drm/imagination/pvr_device.c | 17 -- drivers/gpu/drm/imagination/pvr_power.c | 22 +- drivers/gpu/drm/radeon/si_dpm.c | 4 +- drivers/gpu/drm/vmwgfx/vmwgfx_kms.c | 3 +- drivers/gpu/drm/xe/xe_ggtt.c | 10 +- drivers/gpu/drm/xe/xe_ggtt_types.h | 5 +- drivers/gpu/drm/xe/xe_guc_ct.c | 1 + drivers/gpu/drm/xe/xe_oa.c | 7 +- drivers/gpu/drm/xe/xe_sync.c | 6 +- drivers/gpu/drm/xe/xe_vm_madvise.c | 3 +- drivers/hid/bpf/hid_bpf_dispatch.c | 2 + drivers/hwmon/max6639.c | 10 +- drivers/hwmon/pmbus/ina233.c | 2 + drivers/hwmon/pmbus/isl68137.c | 7 +- drivers/hwmon/pmbus/mp2869.c | 35 ++- drivers/hwmon/pmbus/mp2975.c | 2 + drivers/i2c/busses/i2c-cp2615.c | 3 + drivers/i2c/busses/i2c-fsi.c | 1 + drivers/i2c/busses/i2c-pxa.c | 17 +- drivers/iommu/intel/dmar.c | 3 +- drivers/iommu/intel/svm.c | 12 +- drivers/iommu/iommu-sva.c | 12 +- drivers/irqchip/irq-riscv-rpmi-sysmsi.c | 1 + drivers/mmc/host/sdhci-pci-gli.c | 9 + drivers/mmc/host/sdhci.c | 9 +- drivers/mtd/nand/raw/brcmnand/brcmnand.c | 6 +- drivers/mtd/nand/raw/cadence-nand-controller.c | 2 +- drivers/mtd/nand/raw/nand_base.c | 14 +- drivers/mtd/nand/raw/pl35x-nand-controller.c | 3 + drivers/mtd/parsers/redboot.c | 6 +- drivers/net/bonding/bond_debugfs.c | 16 +- drivers/net/bonding/bond_main.c | 8 +- drivers/net/dsa/bcm_sf2.c | 8 +- drivers/net/ethernet/airoha/airoha_eth.c | 1 - drivers/net/ethernet/broadcom/bnxt/bnxt.c | 2 + drivers/net/ethernet/broadcom/bnxt/bnxt.h | 2 +- drivers/net/ethernet/broadcom/genet/bcmgenet_wol.c | 2 +- drivers/net/ethernet/cadence/macb_main.c | 161 +++++++++-- drivers/net/ethernet/cadence/macb_ptp.c | 4 +- drivers/net/ethernet/intel/iavf/iavf_main.c | 9 +- drivers/net/ethernet/intel/igc/igc.h | 2 + drivers/net/ethernet/intel/igc/igc_main.c | 14 +- drivers/net/ethernet/intel/igc/igc_ptp.c | 33 +++ drivers/net/ethernet/intel/libie/fwlog.c | 49 +++- drivers/net/ethernet/marvell/mvpp2/mvpp2_main.c | 4 +- .../ethernet/mellanox/mlx5/core/en_accel/ipsec.h | 1 + .../mellanox/mlx5/core/en_accel/ipsec_offload.c | 52 ++-- drivers/net/ethernet/mellanox/mlx5/core/esw/qos.c | 23 +- drivers/net/ethernet/microsoft/mana/hw_channel.c | 6 +- drivers/net/netconsole.c | 2 +- drivers/net/netdevsim/netdev.c | 5 +- drivers/net/usb/aqc111.c | 12 +- drivers/net/usb/cdc_ncm.c | 10 +- drivers/net/wireless/ath/ath9k/channel.c | 6 +- drivers/net/wireless/mediatek/mt76/scan.c | 4 +- drivers/net/wireless/ti/wlcore/tx.c | 2 +- drivers/net/wireless/virtual/mac80211_hwsim.c | 1 - drivers/nfc/nxp-nci/i2c.c | 4 +- drivers/nvdimm/bus.c | 5 +- drivers/pmdomain/bcm/bcm2835-power.c | 12 +- drivers/soc/fsl/qbman/qman.c | 24 +- drivers/soc/fsl/qe/qmc.c | 4 +- drivers/soc/microchip/mpfs-sys-controller.c | 13 +- drivers/soc/rockchip/grf.c | 1 + drivers/spi/spi-amlogic-spifc-a4.c | 46 +--- drivers/spi/spi-amlogic-spisg.c | 12 +- drivers/spi/spi.c | 25 +- drivers/tee/tee_shm.c | 27 -- drivers/tty/serial/8250/8250.h | 25 ++ drivers/tty/serial/8250/8250_dma.c | 15 + drivers/tty/serial/8250/8250_dw.c | 304 ++++++++++++++++----- drivers/tty/serial/8250/8250_pci.c | 17 ++ drivers/tty/serial/8250/8250_port.c | 75 +++-- drivers/tty/serial/serial_core.c | 5 +- drivers/tty/serial/uartlite.c | 1 + drivers/tty/vt/vt.c | 8 + drivers/usb/serial/f81232.c | 77 ++++-- fs/binfmt_elf_fdpic.c | 6 + fs/btrfs/tree-checker.c | 2 +- fs/btrfs/tree-log.c | 6 + fs/nfsd/export.c | 63 ++++- fs/nfsd/export.h | 7 +- fs/nfsd/nfs4xdr.c | 9 +- fs/nfsd/nfsctl.c | 22 +- fs/nfsd/state.h | 17 +- fs/nsfs.c | 13 + fs/smb/client/cifsfs.c | 7 +- fs/smb/client/cifsproto.h | 1 + fs/smb/client/connect.c | 4 + fs/smb/client/file.c | 11 - fs/smb/client/misc.c | 42 +++ fs/smb/client/trace.h | 2 + fs/smb/server/auth.c | 22 +- fs/smb/server/smb2pdu.c | 17 +- fs/tests/exec_kunit.c | 3 - include/linux/auxvec.h | 2 +- include/linux/console_struct.h | 1 + include/linux/etherdevice.h | 3 +- include/linux/if_ether.h | 3 +- include/linux/io_uring_types.h | 3 + include/linux/netdevice.h | 6 +- include/linux/ns_common.h | 2 + include/linux/serial_8250.h | 1 + include/net/mac80211.h | 4 +- include/net/netfilter/nf_tables.h | 2 + include/net/sch_generic.h | 33 +++ include/net/udp_tunnel.h | 2 +- io_uring/kbuf.c | 14 +- io_uring/poll.c | 9 +- kernel/crash_dump_dm_crypt.c | 4 +- kernel/nscommon.c | 6 + kernel/sched/ext.c | 132 ++++++--- kernel/sched/idle.c | 30 +- kernel/trace/ring_buffer.c | 2 +- kernel/trace/trace.c | 36 ++- kernel/trace/trace_functions_graph.c | 15 +- lib/bootconfig.c | 3 +- mm/huge_memory.c | 12 +- mm/rmap.c | 21 +- net/batman-adv/bat_iv_ogm.c | 3 + net/bluetooth/hci_conn.c | 4 +- net/bluetooth/hci_sync.c | 2 +- net/bluetooth/hidp/core.c | 16 +- net/bluetooth/l2cap_core.c | 51 ++-- net/bluetooth/mgmt.c | 7 +- net/bluetooth/smp.c | 2 +- net/bridge/br_cfm.c | 4 +- net/ethernet/eth.c | 9 +- net/ipv4/icmp.c | 4 +- net/ipv4/ip_gre.c | 3 +- net/mac80211/cfg.c | 12 +- net/mac80211/chan.c | 6 +- net/mac80211/debugfs.c | 14 +- net/mac80211/mesh.c | 3 + net/mac80211/sta_info.c | 7 +- net/mac80211/tx.c | 4 +- net/mac802154/iface.c | 4 +- net/mpls/af_mpls.c | 1 + net/mptcp/pm_kernel.c | 2 +- net/netfilter/nf_bpf_link.c | 2 +- net/netfilter/nf_conntrack_h323_asn1.c | 4 + net/netfilter/nf_conntrack_netlink.c | 26 +- net/netfilter/nf_conntrack_sip.c | 6 +- net/netfilter/nf_tables_api.c | 5 +- net/netfilter/nfnetlink_osf.c | 13 + net/netfilter/nft_ct.c | 4 + net/netfilter/nft_dynset.c | 10 +- net/netfilter/xt_CT.c | 4 + net/netfilter/xt_time.c | 4 +- net/phonet/af_phonet.c | 5 +- net/rose/af_rose.c | 5 + net/sched/sch_generic.c | 27 -- net/sched/sch_ingress.c | 14 +- net/sched/sch_teql.c | 7 +- net/shaper/shaper.c | 160 ++++++----- net/shaper/shaper_nl_gen.c | 12 +- net/shaper/shaper_nl_gen.h | 5 + net/smc/af_smc.c | 23 +- net/smc/smc.h | 5 + net/smc/smc_close.c | 2 +- net/sunrpc/cache.c | 26 +- net/wireless/pmsr.c | 1 + tools/bootconfig/main.c | 7 +- .../testing/selftests/hid/progs/hid_bpf_helpers.h | 12 + 221 files changed, 2109 insertions(+), 963 deletions(-)

12 hours, 57 minutes

[PATCH 6.1 000/481] 6.1.167-rc1 review

by Greg Kroah-Hartman

This is the start of the stable review cycle for the 6.1.167 release. There are 481 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know. Responses should be made by Wed, 25 Mar 2026 13:44:33 +0000. Anything received after that time might be too late. The whole patch series can be found in one patch at: https://www.kernel.org/pub/linux/kernel/v6.x/stable-review/patch-6.1.167-rc… or in the git tree and branch at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-6.1.y and the diffstat can be found below. thanks, greg k-h ------------- Pseudo-Shortlog of commits: Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> Linux 6.1.167-rc1 Nathan Gao <zcgao(a)amazon.com> Revert "selftests: net: amt: wait longer for connection before sending packets" Jaskaran Singh <jsingh(a)cloudlinux.com> nvme: nvme-fc: Ensure ->ioerr_work is cancelled in nvme_fc_delete_ctrl() Jaskaran Singh <jsingh(a)cloudlinux.com> Revert "nvme: nvme-fc: Ensure ->ioerr_work is cancelled in nvme_fc_delete_ctrl()" Johan Hovold <johan(a)kernel.org> i2c: cp2615: fix serial string NULL-deref at probe Justin Stitt <justinstitt(a)google.com> i2c: cp2615: replace deprecated strncpy with strscpy Chunyan Zhang <zhangchunyan(a)iscas.ac.cn> riscv: stacktrace: Disable KASAN checks for non-current tasks Duoming Zhou <duoming(a)zju.edu.cn> wifi: brcmfmac: fix use-after-free when rescheduling brcmf_btcoex_info work Pablo Neira Ayuso <pablo(a)netfilter.org> netfilter: nft_set_pipapo: prevent overflow in lookup table allocation Pablo Neira Ayuso <pablo(a)netfilter.org> netfilter: nf_tables: missing objects with no memcg accounting Alexander Aring <aahringo(a)redhat.com> dlm: fix possible lkb_resource null dereference Matthieu Baerts (NGI0) <matttbe(a)kernel.org> mptcp: pm: in-kernel: always set ID as avail when rm endp Russell King (Oracle) <rmk+kernel(a)armlinux.org.uk> net: stmmac: fix TSO DMA API usage causing oops Chao Yu <chao(a)kernel.org> f2fs: fix to trigger foreground gc during f2fs_map_blocks() in lfs mode Keith Busch <kbusch(a)kernel.org> nvme: fix admin request_queue lifetime Pedro Demarchi Gomes <pedrodemargomes(a)gmail.com> ntfs: set dummy blocksize to read boot_block when mounting Zqiang <qiang.zhang1211(a)gmail.com> rcu/nocb: Fix possible invalid rdp's->nocb_cb_kthread pointer access Jibin Zhang <jibin.zhang(a)mediatek.com> net: fix segmentation of forwarding fraglist GRO Felix Fietkau <nbd(a)nbd.name> net: gso: fix tcp fraglist segmentation after pull from frag_list Felix Fietkau <nbd(a)nbd.name> net: add support for segmenting TCP fraglist GSO packets Timur Kristóf <timur.kristof(a)gmail.com> drm/amd/pm: Use pm_display_cfg in legacy DPM (v2) Timur Kristóf <timur.kristof(a)gmail.com> drm/amd/display: Add pixel_clock to amd_pp_display_configuration Alex Deucher <alexander.deucher(a)amd.com> drm/amdgpu: clarify DC checks Alex Deucher <alexander.deucher(a)amd.com> drm/amdgpu: use proper DC check in amdgpu_display_supported_domains() Jakub Kicinski <kuba(a)kernel.org> net: clear the dst when changing skb protocol Heiko Carstens <hca(a)linux.ibm.com> s390/xor: Fix xor_xc_2() inline assembly constraints Guodong Xu <guodong(a)riscstar.com> dmaengine: mmp_pdma: Fix race condition in mmp_pdma_residue() Florian Westphal <fw(a)strlen.de> netfilter: nft_set_pipapo: split gc into unlink and reclaim phase Florian Westphal <fw(a)strlen.de> netfilter: nf_tables: de-constify set commit ops function argument Josh Law <objecting(a)objecting.org> tools/bootconfig: fix fd leak in load_xbc_file() on fstat failure Josh Law <objecting(a)objecting.org> lib/bootconfig: check xbc_init_node() return in override path Rahul Bukte <rahul.bukte(a)sony.com> drm/i915/gt: Check set_default_submission() before deferencing Hyunwoo Kim <imv4bel(a)gmail.com> ksmbd: fix use-after-free of share_conf in compound request Kamal Dasu <kamal.dasu(a)broadcom.com> mtd: rawnand: brcmnand: skip DMA during panic write Kamal Dasu <kamal.dasu(a)broadcom.com> mtd: rawnand: serialize lock/unlock against other NAND operations Christophe JAILLET <christophe.jaillet(a)wanadoo.fr> i2c: fsi: Fix a potential leak in fsi_i2c_probe() Ji-Ze Hong (Peter Hong) <peter_hong(a)fintek.com.tw> USB: serial: f81232: fix incomplete serial port generation Vincent Guittot <vincent.guittot(a)linaro.org> sched/fair: Fix pelt clock sync when entering idle Joonwon Kang <joonwonkang(a)google.com> mailbox: Prevent out-of-bounds access in of_mbox_index_xlate() Kuniyuki Iwashima <kuniyu(a)google.com> Bluetooth: hci_core: Fix use-after-free in vhci_flush() Maarten Lankhorst <dev(a)lankhorst.se> drm: Fix use-after-free on framebuffers and property blobs when calling drm_dev_unplug Luiz Augusto von Dentz <luiz.von.dentz(a)intel.com> Bluetooth: L2CAP: Fix accepting multiple L2CAP_ECRED_CONN_REQ Sanman Pradhan <psanman(a)juniper.net> hwmon: (pmbus/isl68137) Fix unchecked return value and use sysfs_emit() Weiming Shi <bestswngs(a)gmail.com> icmp: fix NULL pointer dereference in icmp_tag_validation() Anas Iqbal <mohd.abd.6602(a)gmail.com> net: dsa: bcm_sf2: fix missing clk_disable_unprepare() in error paths Muhammad Hammad Ijaz <mhijaz(a)amazon.com> net: mvpp2: guard flow control update with global_tx_fc in buffer switching Weiming Shi <bestswngs(a)gmail.com> nfnetlink_osf: validate individual option lengths in fingerprints Pablo Neira Ayuso <pablo(a)netfilter.org> netfilter: nf_tables: release flowtable after rcu grace period on error Xiang Mei <xmei5(a)asu.edu> net: bonding: fix NULL deref in bond_debug_rlb_hash_show Xiang Mei <xmei5(a)asu.edu> udp_tunnel: fix NULL deref caused by udp_sock_create6 when CONFIG_IPV6=n Fedor Pchelkin <pchelkin(a)ispras.ru> net: macb: fix uninitialized rx_fs_lock Rafael J. Wysocki <rafael.j.wysocki(a)intel.com> ACPI: processor: Fix previous acpi_processor_errata_piix4() fix Guenter Roeck <linux(a)roeck-us.net> wifi: wlcore: Return -ENOMEM instead of -EAGAIN if there is not enough headroom Xiang Mei <xmei5(a)asu.edu> wifi: mac80211: fix NULL deref in mesh_matches_local() Petr Oros <poros(a)redhat.com> iavf: fix VLAN filter lost on add/delete race Kohei Enju <kohei(a)enjuk.jp> igc: fix missing update of skb->tail in igc_xmit_frame() Nikola Z. Ivanov <zlatistiv(a)gmail.com> net: usb: aqc111: Do not perform PM inside suspend callback Jamal Hadi Salim <jhs(a)mojatatu.com> net/sched: teql: Fix double-free in teql_master_xmit Jiayuan Chen <jiayuan.chen(a)shopee.com> net/smc: fix NULL dereference and UAF in smc_tcp_syn_recv_sock() Bart Van Assche <bvanassche(a)acm.org> PM: runtime: Fix a race condition related to device removal Rafael J. Wysocki <rafael.j.wysocki(a)intel.com> sched: idle: Consolidate the handling of two special cases Dipayaan Roy <dipayanroy(a)linux.microsoft.com> net: mana: fix use-after-free in mana_hwc_destroy_channel() by reordering teardown Justin Chen <justin.chen(a)broadcom.com> net: bcmgenet: increase WoL poll timeout Jenny Guanni Qu <qguanni(a)gmail.com> netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() Jenny Guanni Qu <qguanni(a)gmail.com> netfilter: xt_time: use unsigned int for monthday bit shift Pablo Neira Ayuso <pablo(a)netfilter.org> netfilter: xt_CT: drop pending enqueued packets on template removal Pablo Neira Ayuso <pablo(a)netfilter.org> netfilter: nft_ct: drop pending enqueued packets on removal Andrii Melnychenko <a.melnychenko(a)vyos.io> netfilter: nft_ct: add seqadj extension for natted connections Jenny Guanni Qu <qguanni(a)gmail.com> netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case Lukas Johannes Möller <research(a)johannes-moeller.dev> netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() Hyunwoo Kim <imv4bel(a)gmail.com> netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() Florian Westphal <fw(a)strlen.de> netfilter: ctnetlink: remove refcounting in expectation dumpers Jiayuan Chen <jiayuan.chen(a)shopee.com> net/rose: fix NULL pointer dereference in rose_transmit_link on reconnect Dmitry Baryshkov <dmitry.baryshkov(a)oss.qualcomm.com> Bluetooth: qca: fix ROM version reading on WCN3998 chips Luiz Augusto von Dentz <luiz.von.dentz(a)intel.com> Bluetooth: HIDP: Fix possible UAF Michael Grzeschik <m.grzeschik(a)pengutronix.de> Bluetooth: hci_sync: Fix hci_le_create_conn_sync Christian Eggers <ceggers(a)arri.de> Bluetooth: SMP: make SM/PER/KDU/BI-04-C happy Christian Eggers <ceggers(a)arri.de> Bluetooth: LE L2CAP: Disconnect if sum of payload sizes exceed SDU Christian Eggers <ceggers(a)arri.de> Bluetooth: LE L2CAP: Disconnect if received packet's SDU exceeds IMTU Felix Gu <ustc.gu(a)gmail.com> firmware: arm_scpi: Fix device_node reference leak in probe path Peddolla Harshavardhan Reddy <peddolla.reddy(a)oss.qualcomm.com> wifi: cfg80211: cancel pmsr_free_wk in cfg80211_pmsr_wdev_down Kuniyuki Iwashima <kuniyu(a)google.com> wifi: mac80211: Fix static_branch_dec() underflow for aql_disable. Richard Genoud <richard.genoud(a)bootlin.com> soc: fsl: qbman: fix race condition in qman_destroy_fq ZhengYuan Huang <gality369(a)gmail.com> btrfs: tree-checker: fix misleading root drop_level error message Zilin Guan <zilin(a)seu.edu.cn> binfmt_misc: restore write access before closing files opened by open_exec() Håkon Bugge <haakon.bugge(a)oracle.com> PCI/ACPI: Restrict program_hpx_type2() to AER bits Russell King (Oracle) <rmk+kernel(a)armlinux.org.uk> net: stmmac: remove support for lpi_intr_o Guchun Chen <guchun.chen(a)amd.com> drm/amdgpu: drop redundant sched job cleanup when cs is aborted Khairul Anuar Romli <khairul.anuar.romli(a)altera.com> spi: cadence-quadspi: Implement refcount to handle unbind during busy Jakub Kicinski <kuba(a)kernel.org> eth: bnxt: always recalculate features after XDP clearing, fix null-deref Qu Wenruo <wqu(a)suse.com> btrfs: do not strictly require dirty metadata threshold for metadata writepages Qu Wenruo <wqu(a)suse.com> btrfs: send: check for inline extents in range_is_hole_in_parent() Oleg Nesterov <oleg(a)redhat.com> x86/uprobes: Fix XOL allocation failure for 32-bit tasks Jeongjun Park <aha310510(a)gmail.com> drm/exynos: vidi: use ctx->lock to protect struct vidi_context member variables related to memory alloc/free Jeongjun Park <aha310510(a)gmail.com> drm/exynos: vidi: fix to avoid directly dereferencing user pointer Jeongjun Park <aha310510(a)gmail.com> drm/exynos: vidi: use priv->vidi_dev for ctx lookup in vidi_connection_ioctl() Ankit Garg <nktgrg(a)google.com> gve: defer interrupt enabling until NAPI registration Frederic Weisbecker <frederic(a)kernel.org> net: Handle napi_schedule() calls from non-interrupt Huacai Chen <chenhuacai(a)kernel.org> net: stmmac: dwmac-loongson: Set clk_csr_i to 100-150MHz Bart Van Assche <bvanassche(a)acm.org> scsi: ufs: core: Fix handling of lrbp->cmd Eric Dumazet <edumazet(a)google.com> net/sched: cls_u32: use skb_header_pointer_careful() Eric Dumazet <edumazet(a)google.com> net: add skb_header_pointer_careful() helper Mikulas Patocka <mpatocka(a)redhat.com> dm-verity: disable recursive forward error correction Wei Fang <wei.fang(a)nxp.com> net: enetc: allocate vf_state during PF probes Vladimir Oltean <vladimir.oltean(a)nxp.com> net: enetc: reimplement RFS/RSS memory clearing as PCI quirk Daniel Golle <daniel(a)makrotopia.org> mtd: spinand: macronix: use scratch buffer for DMA operation Eric Biggers <ebiggers(a)kernel.org> net/tcp-md5: Fix MAC comparison to be constant-time Eric Biggers <ebiggers(a)kernel.org> ksmbd: Compare MACs in constant time Eric Biggers <ebiggers(a)kernel.org> smb: client: Compare MACs in constant time Andreas Gruenbacher <agruenba(a)redhat.com> gfs2: No more self recovery Kevin Groeneveld <kgroeneveld(a)lenbrook.com> net: fec: handle page_pool_dev_alloc_pages error Vladimir Oltean <vladimir.oltean(a)nxp.com> net: dsa: improve shutdown sequence Lang Yu <Lang.Yu(a)amd.com> drm/amdgpu: unmap and remove csa_va properly Takashi Iwai <tiwai(a)suse.de> ALSA: usb-audio: Kill timer properly at removal Jean-Baptiste Maneyrol <jean-baptiste.maneyrol(a)tdk.com> iio: imu: inv_icm42600: fix odr switch when turning buffer off Jakub Staniszewski <jakub.staniszewski(a)linux.intel.com> ice: reintroduce retry mechanism for indirect AQ Michal Schmidt <mschmidt(a)redhat.com> ice: sleep, don't busy-wait, in the SQ send retry loop Michal Schmidt <mschmidt(a)redhat.com> ice: remove unused buffer copy code in ice_sq_send_cmd_retry() Maíra Canal <mcanal(a)igalia.com> pmdomain: bcm: bcm2835-power: Increase ASB control timeout Kevin Hao <haokexin(a)gmail.com> net: macb: Reinitialize tx/rx queue pointer registers and rx ring during resume Kevin Hao <haokexin(a)gmail.com> net: macb: Introduce gem_init_rx_ring() Vineeth Karumanchi <vineeth.karumanchi(a)amd.com> net: macb: queue tie-off or disable during WOL suspend Jeff Layton <jlayton(a)kernel.org> nfsd: fix heap overflow in NFSv4.0 LOCK replay cache Chuck Lever <chuck.lever(a)oracle.com> NFSD: Hold net reference for the lifetime of /proc/fs/nfs/exports fd Tom Rix <trix(a)redhat.com> nfsd: define exports_proc_ops with CONFIG_PROC_FS Yang Yang <n05ec(a)lzu.edu.cn> batman-adv: avoid OGM aggregation when skb tailroom is insufficient Antoniu Miclaus <antoniu.miclaus(a)analog.com> iio: light: bh1780: fix PM runtime leak on error path Filipe Manana <fdmanana(a)suse.com> btrfs: fix transaction abort on set received ioctl due to item overflow Filipe Manana <fdmanana(a)suse.com> btrfs: fix transaction abort when snapshotting received subvolumes Nuno Sá <nuno.sa(a)analog.com> iio: buffer: Fix wait_queue not being removed Nuno Sá <nuno.sa(a)analog.com> iio: buffer: fix coding style warnings Masami Hiramatsu (Google) <mhiramat(a)kernel.org> kprobes: Remove unneeded warnings from __arm_kprobe_ftrace() Masami Hiramatsu (Google) <mhiramat(a)kernel.org> kprobes: Remove unneeded goto Shyam Prasad N <sprasad(a)microsoft.com> cifs: open files should not hold ref on superblock Thorsten Blum <thorsten.blum(a)linux.dev> crypto: atmel-sha204a - Fix OOM ->tfm_count leak Long Li <leo.lilong(a)huawei.com> xfs: ensure dquot item is deleted from AIL only after log shutdown Long Li <leo.lilong(a)huawei.com> xfs: fix integer overflow in bmap intent sort comparator Harald Freudenberger <freude(a)linux.ibm.com> s390/zcrypt: Enable AUTOSEL_DOM for CCA serialnr sysfs attribute Kevin Hao <haokexin(a)gmail.com> net: macb: Shuffle the tx ring before enabling tx Luca Ceresoli <luca.ceresoli(a)bootlin.com> drm/bridge: ti-sn65dsi83: halve horizontal syncs for dual LVDS output Thomas Fourier <fourier.thomas(a)gmail.com> drm/msm: Fix dma_free_attrs() buffer size Thorsten Blum <thorsten.blum(a)linux.dev> ksmbd: Don't log keys in SMB3 signing and encryption key generation Catalin Marinas <catalin.marinas(a)arm.com> arm64: mm: Add PTE_DIRTY back to PAGE_KERNEL* to fix kexec/hibernation Joey Gouly <joey.gouly(a)arm.com> arm64: reorganise PAGE_/PROT_ macros Maíra Canal <mcanal(a)igalia.com> pmdomain: bcm: bcm2835-power: Fix broken reset status read Huiwen He <hehuiwen(a)kylinos.cn> tracing: Fix syscall events activation by ensuring refcount hits zero Darrick J. Wong <djwong(a)kernel.org> iomap: reject delalloc mappings during writeback Alexander Potapenko <glider(a)google.com> mm/kfence: disable KFENCE upon KASAN HW tags enablement Alexander Potapenko <glider(a)google.com> mm/kfence: fix KASAN hardware tag faults during late enablement Ravi Hothi <ravi.hothi(a)oss.qualcomm.com> ASoC: qcom: qdsp6: Fix q6apm remove ordering during ADSP stop and start Xu Yang <xu.yang_2(a)nxp.com> usb: roles: get usb role switch from parent only for usb-b-connector Jiasheng Jiang <jiashengjiangcool(a)gmail.com> usb: gadget: f_tcm: Fix NULL pointer dereferences in nexus handling Sean Christopherson <seanjc(a)google.com> KVM: SVM: Set/clear CR8 write interception when AVIC is (de)activated Marc Kleine-Budde <mkl(a)pengutronix.de> can: gs_usb: gs_can_open(): always configure bitrates before starting device Mehul Rao <mehulrao(a)gmail.com> ALSA: pcm: fix use-after-free on linked stream runtime in snd_pcm_drain() Oswald Buddenhagen <oswald.buddenhagen(a)gmx.de> ALSA: pcm: fix wait_time calculations Paul Moses <p(a)1g4.org> net/sched: act_gate: snapshot parameters with RCU on replace Matthieu Baerts (NGI0) <matttbe(a)kernel.org> selftests: mptcp: join: check RM_ADDR not sent over same subflow Matthieu Baerts (NGI0) <matttbe(a)kernel.org> mptcp: pm: in-kernel: always mark signal+subflow endp as used Matthieu Baerts (NGI0) <matttbe(a)kernel.org> mptcp: pm: avoid sending RM_ADDR over same subflow Natalie Vock <natalie.vock(a)gmx.de> drm/amd/display: Use GFP_ATOMIC in dc_create_stream_for_sink Andrew Lunn <andrew(a)lunn.ch> net: phy: register phy led_triggers during probe to avoid AB-BA deadlock Kim Phillips <kim.phillips(a)amd.com> x86/sev: Allow IBPB-on-Entry feature for SNP guests Daniil Dulov <d.dulov(a)aladdin.ru> wifi: cfg80211: cancel rfkill_block work in wiphy_unregister() Johannes Berg <johannes.berg(a)intel.com> wifi: cfg80211: move scan done work to wiphy work Daniel Hodges <git(a)danielhodges.dev> wifi: libertas: fix use-after-free in lbs_free_adapter() Jan Kara <jack(a)suse.cz> ext4: always allocate blocks only from groups inode can use Brian Foster <bfoster(a)redhat.com> ext4: fix dirtyclusters double decrement on fs shutdown Fedor Pchelkin <pchelkin(a)ispras.ru> ksmbd: call ksmbd_vfs_kern_path_end_removing() on some error paths David Hildenbrand (Red Hat) <david(a)kernel.org> mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather David Hildenbrand (Red Hat) <david(a)kernel.org> mm/hugetlb: fix two comments related to huge_pmd_unshare() David Hildenbrand (Red Hat) <david(a)kernel.org> mm/hugetlb: fix hugetlb_pmd_shared() Jane Chu <jane.chu(a)oracle.com> mm/hugetlb: fix copy_hugetlb_page_range() to use ->pt_share_count Alex Deucher <alexander.deucher(a)amd.com> drm/amdgpu: apply state adjust rules to some additional HAINAN vairants Alex Deucher <alexander.deucher(a)amd.com> drm/radeon: apply state adjust rules to some additional HAINAN vairants Alex Deucher <alexander.deucher(a)amd.com> drm/amdgpu/mmhub3.0: add bounds checking for cid Alex Deucher <alexander.deucher(a)amd.com> drm/amdgpu/mmhub3.0.2: add bounds checking for cid Alex Deucher <alexander.deucher(a)amd.com> drm/amdgpu/mmhub3.0.1: add bounds checking for cid Alex Deucher <alexander.deucher(a)amd.com> drm/amdgpu/mmhub2.3: add bounds checking for cid Alex Deucher <alexander.deucher(a)amd.com> drm/amdgpu/mmhub2.0: add bounds checking for cid Maciej Andrzejewski ICEYE <maciej.andrzejewski(a)m-works.net> serial: uartlite: fix PM runtime usage count underflow on probe Ilpo Järvinen <ilpo.jarvinen(a)linux.intel.com> serial: 8250: Add late synchronize_irq() to shutdown to handle DW UART BUSY Raul E Rangel <rrangel(a)chromium.org> serial: 8250: Fix TX deadlock when using DMA Martin Roukala (né Peres) <martin.roukala(a)mupuf.org> serial: 8250_pci: add support for the AX99100 Guanghui Feng <guanghuifeng(a)linux.alibaba.com> iommu/vt-d: Fix intel iommu iotlb sync hardlockup and retry Finn Thain <fthain(a)linux-m68k.org> mtd: Avoid boot crash in RedBoot partition table parser Chen Ni <nichen(a)iscas.ac.cn> mtd: rawnand: cadence: Fix error check for dma_alloc_coherent() in cadence_nand_init() Olivier Sobrie <olivier(a)sobrie.be> mtd: rawnand: pl353: make sure optimal timings are applied Johan Hovold <johan(a)kernel.org> spi: fix statistics allocation Johan Hovold <johan(a)kernel.org> spi: fix use-after-free on controller registration failure Luke Wang <ziniu.wang_1(a)nxp.com> mmc: sdhci: fix timing selection for 1-bit bus width Matthew Schwartz <matthew.schwartz(a)linux.dev> mmc: sdhci-pci-gli: fix GL9750 DMA write corruption Namjae Jeon <linkinjeon(a)kernel.org> ksmbd: unset conn->binding on failed binding request Paulo Alcantara <pc(a)manguebit.org> smb: client: fix krb5 mount with username option Lukas Johannes Möller <research(a)johannes-moeller.dev> Bluetooth: L2CAP: Validate L2CAP_INFO_RSP payload length before access Lukas Johannes Möller <research(a)johannes-moeller.dev> Bluetooth: L2CAP: Fix type confusion in l2cap_ecred_reconf_rsp() Fedor Pchelkin <pchelkin(a)ispras.ru> net: macb: fix use-after-free access to PTP clock Ian Ray <ian.ray(a)gehealthcare.com> NFC: nxp-nci: allow GPIOs to sleep Tiezhu Yang <yangtiezhu(a)loongson.cn> LoongArch: Give more information if kmem access failed Ira Weiny <ira.weiny(a)intel.com> nvdimm/bus: Fix potential use after free in asynchronous initialization Jeff Layton <jlayton(a)kernel.org> sunrpc: fix cache_request leak in cache_release Jens Axboe <axboe(a)kernel.dk> io_uring/kbuf: check if target buffer list is still legacy on recycle Jens Axboe <axboe(a)kernel.dk> io_uring/io-wq: check IO_WQ_BIT_EXIT inside work run loop Eric Dumazet <edumazet(a)google.com> l2tp: do not use sock_hold() in pppol2tp_session_get_sock() Paul Chaignon <paul.chaignon(a)gmail.com> bpf: Forget ranges when refining tnum after JSET Eric Dumazet <edumazet(a)google.com> ipv6: use RCU in ip6_xmit() John Ripple <john.ripple(a)keysight.com> drm/bridge: ti-sn65dsi86: Add support for DisplayPort mode with HPD Adrian Hunter <adrian.hunter(a)intel.com> i3c: mipi-i3c-hci: Add missing TID field to no-op command descriptor Adrian Hunter <adrian.hunter(a)intel.com> i3c: mipi-i3c-hci: Restart DMA ring correctly after dequeue abort Adrian Hunter <adrian.hunter(a)intel.com> i3c: mipi-i3c-hci: Use ETIMEDOUT instead of ETIME for timeout errors Jean-Baptiste Maneyrol <jean-baptiste.maneyrol(a)tdk.com> iio: imu: inv_icm42600: fix odr switch to the same value Antoniu Miclaus <antoniu.miclaus(a)analog.com> iio: gyro: mpu3050-i2c: fix pm_runtime error handling Antoniu Miclaus <antoniu.miclaus(a)analog.com> iio: gyro: mpu3050-core: fix pm_runtime error handling Chris Spencer <spencercw(a)gmail.com> iio: chemical: bme680: Fix measurement wait duration calculation Lukas Schmid <lukas.schmid(a)netcube.li> iio: potentiometer: mcp4131: fix double application of wiper shift Antoniu Miclaus <antoniu.miclaus(a)analog.com> iio: chemical: sps30_i2c: fix buffer size in sps30_i2c_read_meas() Antoniu Miclaus <antoniu.miclaus(a)analog.com> iio: chemical: sps30_serial: fix buffer size in sps30_serial_read_meas() Oleksij Rempel <linux(a)rempel-privat.de> iio: dac: ds4424: reject -128 RAW value Filipe Manana <fdmanana(a)suse.com> btrfs: abort transaction on failure to update root in the received subvol ioctl Filipe Manana <fdmanana(a)suse.com> btrfs: fix transaction abort on file creation due to name hash collision Henrique Carvalho <henrique.carvalho(a)suse.com> smb: client: fix iface port assignment in parse_server_interfaces Paulo Alcantara <pc(a)manguebit.org> smb: client: fix atomic open with O_DIRECT & O_SYNC Josh Law <objecting(a)objecting.org> lib/bootconfig: check bounds before writing in __xbc_open_brace() Josh Law <objecting(a)objecting.org> lib/bootconfig: fix snprintf truncation check in xbc_node_compose_key_after() Shashank Balaji <shashank.mahadasyam(a)sony.com> x86/apic: Disable x2apic on resume if the kernel expects so Junxiao Bi <junxiao.bi(a)oracle.com> scsi: core: Fix error handling for scsi_alloc_sdev() Josh Law <objecting(a)objecting.org> lib/bootconfig: fix off-by-one in xbc_verify_tree() unclosed brace error Stefan Haberland <sth(a)linux.ibm.com> s390/dasd: Copy detected format information to secondary device Stefan Haberland <sth(a)linux.ibm.com> s390/dasd: Move quiesce state with pprc swap Darrick J. Wong <djwong(a)kernel.org> xfs: fix undersized l_iclog_roundoff values Calvin Owens <calvin(a)wbinvd.org> tracing: Fix trace_buf_size= cmdline parameter with sizes >= 2G Luca Ceresoli <luca.ceresoli(a)bootlin.com> drm/bridge: ti-sn65dsi83: fix CHA_DSI_CLK_RANGE rounding Mario Limonciello <mario.limonciello(a)amd.com> drm/amd: Set num IP blocks to 0 if discovery fails Alysa Liu <Alysa.Liu(a)amd.com> drm/amdgpu: Fix use-after-free race in VM acquire Fan Wu <fanwu01(a)zju.edu.cn> net: ethernet: arc: emac: quiesce interrupts before requesting IRQ Jian Zhang <zhangjian.3032(a)bytedance.com> net: ncsi: fix skb leak in error paths Marios Makassikis <mmakassikis(a)freebox.fr> smb: server: fix use-after-free in smb2_open() Helge Deller <deller(a)gmx.de> parisc: Check kernel mapping earlier at bootup Helge Deller <deller(a)gmx.de> parisc: Fix initial page table creation for boot Sanman Pradhan <psanman(a)juniper.net> hwmon: (pmbus/q54sj108a2) fix stack overflow in debugfs read Dave Airlie <airlied(a)redhat.com> nouveau/dpcd: return EBUSY for aux xfer if the device is asleep Helge Deller <deller(a)gmx.de> parisc: Increase initial mapping to 64 MB with KALLSYMS Sven Eckelmann <sven(a)narfation.org> batman-adv: Avoid double-rtnl_lock ELP metric worker Jakub Staniszewski <jakub.staniszewski(a)linux.intel.com> ice: fix retry for AQ command 0x06EE Long Li <longli(a)microsoft.com> net: mana: Ring doorbell at 4 CQ wraparounds Ariel Silver <arielsilver77(a)gmail.com> media: dvb-net: fix OOB access in ULE extension header tables Luka Gejak <luka.gejak(a)linux.dev> staging: rtl8723bs: fix potential out-of-bounds read in rtw_restruct_wmm_ie Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> staging: rtl8723bs: properly validate the data in rtw_get_ie_ex() Jedrzej Jagielski <jedrzej.jagielski(a)intel.com> ixgbevf: fix link setup issue Marc Zyngier <maz(a)kernel.org> irqchip/gic-v3-its: Limit number of per-device MSIs to the range the ITS supports Andy Shevchenko <andriy.shevchenko(a)linux.intel.com> device property: Allow secondary lookup in fwnode_get_next_child_node() Franz Schnyder <franz.schnyder(a)toradex.com> drm/bridge: ti-sn65dsi86: Enable HPD polling if IRQ is not used Steven Rostedt <rostedt(a)goodmis.org> time/jiffies: Mark jiffies_64_to_clock_t() notrace Randy Dunlap <rdunlap(a)infradead.org> time: add kernel-doc in time.c Max Kellermann <max.kellermann(a)ionos.com> ceph: fix i_nlink underrun during async unlink Ilya Dryomov <idryomov(a)gmail.com> libceph: admit message frames only in CEPH_CON_S_OPEN state Raphael Zimmer <raphael.zimmer(a)tu-ilmenau.de> libceph: Use u32 for non-negative values in ceph_monmap_decode() Ilya Dryomov <idryomov(a)gmail.com> libceph: prevent potential out-of-bounds reads in process_message_header() Ilya Dryomov <idryomov(a)gmail.com> libceph: reject preamble if control segment is empty Raphael Zimmer <raphael.zimmer(a)tu-ilmenau.de> libceph: Fix potential out-of-bounds access in ceph_handle_auth_reply() Mehul Rao <mehulrao(a)gmail.com> tipc: fix divide-by-zero in tipc_sk_filter_connect() Penghe Geng <pgeng(a)nvidia.com> mmc: core: Avoid bitfield RMW for claim/retune flags Felix Gu <ustc.gu(a)gmail.com> mmc: mmci: Fix device_node reference leak in of_get_dml_pipe_index() Kalesh Singh <kaleshsingh(a)google.com> mm/tracing: rss_stat: ensure curr is false from kthread context Ziyi Guo <n7l8m4(a)u.northwestern.edu> usb: image: mdc800: kill download URB on timeout Oliver Neukum <oneukum(a)suse.com> usb: mdc800: handle signal and read racing Fan Wu <fanwu01(a)zju.edu.cn> usb: renesas_usbhs: fix use-after-free in ISR during device removal Oliver Neukum <oneukum(a)suse.com> usb: class: cdc-wdm: fix reordering issue in read code path Alan Stern <stern(a)rowland.harvard.edu> USB: core: Limit the length of unkillable synchronous timeouts Alan Stern <stern(a)rowland.harvard.edu> USB: usbtmc: Use usb_bulk_msg_killable() with user-specified timeouts Alan Stern <stern(a)rowland.harvard.edu> USB: usbcore: Introduce usb_bulk_msg_killable() Marc Zyngier <maz(a)kernel.org> usb: cdc-acm: Restore CAP_BRK functionnality to CH343 Gabor Juhos <j4g8y7(a)gmail.com> usb: core: don't power off roothub PHYs if phy_set_mode() fails Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> usb: misc: uss720: properly clean up reference in uss720_probe() Oliver Neukum <oneukum(a)suse.com> usb: yurex: fix race in probe Zilin Guan <zilin(a)seu.edu.cn> usb: xhci: Fix memory leak in xhci_disable_slot() Vyacheslav Vahnenko <vahnenko2003(a)gmail.com> USB: ezcap401 needs USB_QUIRK_NO_BOS to function on 10gbs usb speed Christoffer Sandberg <cs(a)tuxedo.de> usb/core/quirks: Add Huawei ME906S-device to wakeup quirk A1RM4X <dev(a)a1rm4x.com> USB: add QUIRK_NO_BOS for video capture several devices Sean Christopherson <seanjc(a)google.com> KVM: SVM: Initialize AVIC VMCB fields if AVIC is enabled with in-kernel APIC Zhang Heng <zhangheng(a)kylinos.cn> ASoC: amd: yc: Add DMI quirk for ASUS EXPERTBOOK PM1503CDA Oleksij Rempel <linux(a)rempel-privat.de> net: usb: lan78xx: skip LTM configuration for LAN7850 Oleksij Rempel <linux(a)rempel-privat.de> net: usb: lan78xx: fix TX byte statistics for small packets Oleksij Rempel <linux(a)rempel-privat.de> net: usb: lan78xx: fix silent drop of packets with checksum errors Takashi Iwai <tiwai(a)suse.de> ALSA: usb-audio: Check endpoint numbers at parsing Scarlett2 mixer interfaces Qingye Zhao <zhaoqingye(a)honor.com> cgroup: fix race between task migration and iteration Sasha Levin <sashal(a)kernel.org> Revert "arm64: dts: qcom: sdm845-oneplus: Mark l14a regulator as boot-on" Seungjin Bae <eeodqql09(a)gmail.com> usb: gadget: f_mass_storage: Fix potential integer overflow in check_command_size_in_blocks() Alok Tiwari <alok.a.tiwari(a)oracle.com> octeontx2-af: devlink: fix NIX RAS reporter to use RAS interrupt status Przemek Kitszel <przemyslaw.kitszel(a)intel.com> octeontx2-af: devlink health: use retained error fmsg API Alok Tiwari <alok.a.tiwari(a)oracle.com> octeontx2-af: devlink: fix NIX RAS reporter recovery condition Ricardo B. Marlière <rbm(a)suse.com> net: bonding: Fix nd_tbl NULL dereference when IPv6 is disabled Casey Connolly <casey.connolly(a)linaro.org> ASoC: detect empty DMI strings Chen Ni <nichen(a)iscas.ac.cn> ASoC: amd: acp3x-rt5682-max9836: Add missing error check for clock acquisition Ben Dooks <ben.dooks(a)codethink.co.uk> ACPI: OSL: fix __iomem type on return from acpi_os_map_generic_address() Matt Vollrath <tactii(a)gmail.com> e1000/e1000e: Fix leak in DMA error cleanup Alok Tiwari <alok.a.tiwari(a)oracle.com> i40e: fix src IP mask checks and memcpy argument names in cloud filter Sungwoo Kim <iam(a)sung-woo.kim> nvme-pci: Fix race bug in nvme_poll_irqdisable() Sungwoo Kim <iam(a)sung-woo.kim> nvme-pci: Fix slab-out-of-bounds in nvme_dbbuf_set Rafael J. Wysocki <rafael.j.wysocki(a)intel.com> sched: idle: Make skipping governor callbacks more consistent Peng Fan <peng.fan(a)nxp.com> regulator: pca9450: Correct interrupt type Frieder Schrempf <frieder.schrempf(a)kontron.de> regulator: pca9450: Make IRQ optional Yuan Tan <tanyuan98(a)outlook.com> netfilter: xt_IDLETIMER: reject rev0 reuse of ALARM timer labels Hyunwoo Kim <imv4bel(a)gmail.com> netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() Hyunwoo Kim <imv4bel(a)gmail.com> netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path David Dull <monderasdor(a)gmail.com> netfilter: x_tables: guard option walkers against 1-byte tail reads Jenny Guanni Qu <qguanni(a)gmail.com> netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop() Chengfeng Ye <dg573847474(a)gmail.com> mctp: route: hold key->lock in mctp_flow_prepare_output() Wenyuan Li <2063309626(a)qq.com> can: hi311x: hi3110_open(): add check for hi3110_power_enable() return value Haiyue Wang <haiyuewa(a)163.com> mctp: i2c: fix skb memory leak in receive path Shuangpeng Bai <shuangpeng.kernel(a)gmail.com> serial: caif: hold tty->link reference in ldisc_open and ser_release matteo.cotifava <cotifavamatteo(a)gmail.com> ASoC: soc-core: flush delayed work before removing DAIs and widgets Amadeusz Sławiński <amadeuszx.slawinski(a)linux.intel.com> ASoC: core: Do not call link_exit() on uninitialized rtd objects Cezary Rojewski <cezary.rojewski(a)intel.com> ASoC: core: Exit all links before removing their components matteo.cotifava <cotifavamatteo(a)gmail.com> ASoC: soc-core: drop delayed_work_pending() check before flush Weiming Shi <bestswngs(a)gmail.com> net/sched: teql: fix NULL pointer dereference in iptunnel_xmit on TEQL slave xmit Gal Pressman <gal(a)nvidia.com> net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery Cosmin Ratiu <cratiu(a)nvidia.com> net/mlx5: Fix deadlock between devlink lock and esw->wq Daniel Jurgens <danielj(a)nvidia.com> net/mlx5: Query to see if host PF is disabled Daniel Jurgens <danielj(a)nvidia.com> net/mlx5: IFC updates for disabled host PF Hangbin Liu <liuhangbin(a)gmail.com> bonding: handle BOND_LINK_FAIL, BOND_LINK_BACK as valid link states Mieczyslaw Nalewaj <namiltd(a)yahoo.com> net: dsa: realtek: rtl8365mb: remove ifOutDiscards from rx_packets Eric Badger <ebadger(a)purestorage.com> xprtrdma: Decrement re_receiving on the early exit paths J. Neuschäfer <j.ne(a)posteo.net> powerpc: 83xx: km83xx: Fix keymile vendor prefix Tzung-Bi Shih <tzungbi(a)kernel.org> remoteproc: mediatek: Unprepare SCP clock during system suspend Bjorn Andersson <bjorn.andersson(a)oss.qualcomm.com> remoteproc: sysmon: Correct subsys_name_len type in QMI request Christophe Leroy (CS GROUP) <chleroy(a)kernel.org> powerpc/uaccess: Fix inline assembly for clang build on PPC32 Takashi Iwai <tiwai(a)suse.de> ALSA: usb-audio: Check max frame size for implicit feedback mode, too Takashi Iwai <tiwai(a)suse.de> ALSA: usb-audio: Avoid implicit feedback mode on DIYINHK USB Audio 2.0 Azamat Almazbek uulu <almazbek1608(a)gmail.com> ASoC: amd: yc: Add ASUS EXPERTBOOK BM1503CDA to quirk table Tomas Henzl <thenzl(a)redhat.com> scsi: ses: Fix devices attaching to different hosts Sofia Schneider <sofia(a)schn.dev> ACPI: OSI: Add DMI quirk for Acer Aspire One D255 Ramanathan Choodamani <quic_rchoodam(a)quicinc.com> wifi: mac80211: set default WMM parameters on all links Al Viro <viro(a)zeniv.linux.org.uk> unshare: fix unshare_fs() handling Ranjan Kumar <ranjan.kumar(a)broadcom.com> scsi: mpi3mr: Add NULL checks when resetting request and reply queues Piotr Mazek <pmazek(a)outlook.com> ACPI: PM: Save NVS memory on Lenovo G70-35 Jan Kiszka <jan.kiszka(a)siemens.com> scsi: storvsc: Fix scheduling while atomic on PREEMPT_RT Menglong Dong <menglong8.dong(a)gmail.com> net: tcp: accept old ack during closing Victor Nogueira <victor(a)mojatatu.com> net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks Guenter Roeck <linux(a)roeck-us.net> tracing: Add NULL pointer check to trigger_data_free() Larysa Zaremba <larysa.zaremba(a)intel.com> xdp: produce a warning when calculated tailroom is negative Larysa Zaremba <larysa.zaremba(a)intel.com> xdp: use modulo operation to calculate XDP frag tailroom Jamal Hadi Salim <jhs(a)mojatatu.com> net/sched: act_ife: Fix metalist update behavior Jiayuan Chen <jiayuan.chen(a)shopee.com> net: ipv6: fix panic when IPv4 route references loopback IPv6 nexthop Fernando Fernandez Mancera <fmancera(a)suse.de> net: vxlan: fix nd_tbl NULL dereference when IPv6 is disabled Fernando Fernandez Mancera <fmancera(a)suse.de> net: bridge: fix nd_tbl NULL dereference when IPv6 is disabled Lorenzo Bianconi <lorenzo(a)kernel.org> net: ethernet: mtk_eth_soc: Reset prog ptr to old_prog in case of error in mtk_xdp_setup() Ovidiu Panait <ovidiu.panait.rb(a)renesas.com> net: stmmac: Fix error handling in VLAN add and delete paths Jakub Kicinski <kuba(a)kernel.org> nfc: rawsock: cancel tx_work before socket teardown Jakub Kicinski <kuba(a)kernel.org> nfc: nci: clear NCI_DATA_EXCHANGE before calling completion callback Jakub Kicinski <kuba(a)kernel.org> nfc: nci: free skb on nci_transceive early error paths Ian Ray <ian.ray(a)gehealthcare.com> net: nfc: nci: Fix zero-length proprietary notifications Koichiro Den <den(a)valinux.co.jp> net: sched: avoid qdisc_reset_all_tx_gt() vs dequeue race for lockless qdiscs Raju Rangoju <Raju.Rangoju(a)amd.com> amd-xgbe: fix sleep while atomic on suspend/resume Jakub Kicinski <kuba(a)kernel.org> ipv6: fix NULL pointer deref in ip6_rt_get_dev_rcu() Lang Xu <xulang(a)uniontech.com> bpf: Fix a UAF issue in bpf_trampoline_link_cgroup_shim Kui-Feng Lee <thinker.li(a)gmail.com> bpf: export bpf_link_inc_not_zero. David Thomson <dt(a)linux-mail.net> xen/acpi-processor: fix _CST detection using undersized evaluation buffer Eric Dumazet <edumazet(a)google.com> indirect_call_wrapper: do not reevaluate function pointer Lorenzo Bianconi <lorenzo(a)kernel.org> wifi: mt76: Fix possible oob access in mt76_connac2_mac_write_txwi_80211() Bart Van Assche <bvanassche(a)acm.org> wifi: wlcore: Fix a locking bug Bart Van Assche <bvanassche(a)acm.org> wifi: cw1200: Fix locking in error paths Vimlesh Kumar <vimleshk(a)marvell.com> octeon_ep: avoid compiler and IQ/OQ reordering Vimlesh Kumar <vimleshk(a)marvell.com> octeon_ep: Relocate counter updates before NAPI Mieczyslaw Nalewaj <namiltd(a)yahoo.com> net: dsa: realtek: rtl8365mb: fix rtl8365mb_phy_ocp_write return value Shuvam Pandey <shuvampandey1(a)gmail.com> kunit: tool: copy caller args in run_kernel to prevent mutation Rae Moar <rmoar(a)google.com> kunit: tool: Add command line interface to filter and report attributes Daniel Latypov <dlatypov(a)google.com> kunit: tool: fix pre-existing `mypy --strict` errors and update run_checks.py Daniel Latypov <dlatypov(a)google.com> kunit: tool: remove unused imports and variables Alexander Pantyukhin <apantykhin(a)gmail.com> kunit: kunit.py extract handlers Daniel Latypov <dlatypov(a)google.com> kunit: tool: make parser preserve whitespace when printing test log Daniel Latypov <dlatypov(a)google.com> kunit: tool: don't include KTAP headers and the like in the test log Rae Moar <rmoar(a)google.com> kunit: tool: parse KTAP compliant test output Daniel Latypov <dlatypov(a)google.com> kunit: tool: make --json do nothing if --raw_ouput is set Daniel Latypov <dlatypov(a)google.com> kunit: tool: print summary of failed tests if a few failed out of a lot Alban Bedel <alban.bedel(a)lht.dlh.de> can: mcp251x: fix deadlock in error path of mcp251x_open Oliver Hartkopp <socketcan(a)hartkopp.net> can: bcm: fix locking for bcm_op runtime updates Jiayuan Chen <jiayuan.chen(a)shopee.com> atm: lec: fix null-ptr-deref in lec_arp_clear_vccs Guenter Roeck <linux(a)roeck-us.net> dpaa2-switch: Fix interrupt storm after receiving bad if_id in IRQ handler Ioana Ciornei <ioana.ciornei(a)nxp.com> dpaa2-switch: do not clear any interrupts automatically Vladimir Oltean <vladimir.oltean(a)nxp.com> net: dpaa2-switch: serialize changes to priv->mac with a mutex Vladimir Oltean <vladimir.oltean(a)nxp.com> net: dpaa2-switch replace direct MAC access with dpaa2_switch_port_has_mac() Vladimir Oltean <vladimir.oltean(a)nxp.com> net: dpaa2-switch: assign port_priv->mac after dpaa2_mac_connect() call Vladimir Oltean <vladimir.oltean(a)nxp.com> net: dpaa2: replace dpaa2_mac_is_type_fixed() with dpaa2_mac_is_type_phy() Chintan Vankar <c-vankar(a)ti.com> net: ethernet: ti: am65-cpsw-nuss/cpsw-ale: Fix multicast entry handling in ALE table Jonathan Teh <jonathan.teh(a)outlook.com> platform/x86: thinkpad_acpi: Fix errors reading battery thresholds Thomas Weißschuh <thomas.weissschuh(a)linutronix.de> ARM: clean up the memset64() C wrapper Matthieu Baerts (NGI0) <matttbe(a)kernel.org> selftests: mptcp: join: check removing signal+subflow endp Paolo Abeni <pabeni(a)redhat.com> selftests: mptcp: more stable simult_flows tests Junxiao Bi <junxiao.bi(a)oracle.com> scsi: core: Fix refcount leak for tagset_refcnt Thorsten Blum <thorsten.blum(a)linux.dev> smb: client: Don't log plaintext credentials in cifs_set_cifscreds Paulo Alcantara <pc(a)manguebit.org> smb: client: fix broken multichannel with krb5+signing Lars Ellenberg <lars.ellenberg(a)linbit.com> drbd: fix "LOGIC BUG" in drbd_al_begin_io_nonblock() Phillip Lougher <phillip(a)squashfs.org.uk> Squashfs: check metadata block offset is within range Prithvi Tambewagh <activprithvi(a)gmail.com> scsi: target: Fix recursive locking in __configfs_open_file() Davide Caratti <dcaratti(a)redhat.com> net/sched: ets: fix divide by zero in the offload path Jason Gunthorpe <jgg(a)ziepe.ca> RDMA/irdma: Fix kernel stack leak in irdma_create_user_ah() Jason Gunthorpe <jgg(a)ziepe.ca> IB/mthca: Add missed mthca_unmap_user_db() for mthca_create_srq() Vahagn Vardanian <vahagn(a)redrays.io> wifi: mac80211: fix NULL pointer dereference in mesh_rx_csa_frame() Johannes Berg <johannes.berg(a)intel.com> wifi: radiotap: reject radiotap with unknown bits Jun Seo <jun.seo.93(a)proton.me> ALSA: usb-audio: Use correct version for UAC3 header validation Kurt Borja <kuurtb(a)gmail.com> platform/x86: dell-wmi: Add audio/mic mute key codes Thorsten Blum <thorsten.blum(a)linux.dev> platform/x86: dell-wmi-sysman: Don't hex dump plaintext password data Mike Rapoport (Microsoft) <rppt(a)kernel.org> x86/efi: defer freeing of boot services memory Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> HID: Add HID_CLAIMED_INPUT guards in raw_event callbacks missing them Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> can: usb: etas_es58x: correctly anchor the urb in the read bulk callback Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> can: ucan: Fix infinite loop from zero-length messages Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> can: ems_usb: ems_usb_read_bulk_callback(): check the proper length of a message Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> net: usb: pegasus: validate USB endpoints Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> net: usb: kalmia: validate USB endpoints Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> net: usb: kaweth: validate USB endpoints Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> nfc: pn533: properly drop the usb interface reference on disconnect Jens Axboe <axboe(a)kernel.dk> media: dvb-core: fix wrong reinitialization of ringbuffer on reopen Jann Horn <jannh(a)google.com> eventpoll: Fix integer overflow in ep_loop_check_proc() Alex Deucher <alexander.deucher(a)amd.com> drm/amdgpu: keep vga memory on MacBooks with switchable graphics Mario Limonciello <mario.limonciello(a)amd.com> drm/amd: Drop special case for yellow carp without discovery Ethan Nelson-Moore <enelsonmoore(a)gmail.com> net: arcnet: com20020-pci: fix support for 2.5Mbit cards Takashi Iwai <tiwai(a)suse.de> ALSA: hda/conexant: Fix headphone jack handling on Acer Swift SF314 Gui-Dong Han <hanguidong02(a)gmail.com> hwmon: (max16065) Use READ/WRITE_ONCE to avoid compiler optimization induced race Takashi Iwai <tiwai(a)suse.de> ALSA: hda/conexant: Add quirk for HP ZBook Studio G4 Thomas Richard (TI) <thomas.richard(a)bootlin.com> usb: cdns3: fix role switching during resume Théo Lebrun <theo.lebrun(a)bootlin.com> usb: cdns3: call cdns_power_is_lost() only once in cdns_resume() Hongyu Xie <xiehongyu1(a)kylinos.cn> usb: cdns3: remove redundant if branch Johan Hovold <johan(a)kernel.org> clk: tegra: tegra124-emc: fix device leak on set_rate() Shawn Lin <shawn.lin(a)rock-chips.com> arm64: dts: rockchip: Fix rk356x PCIe range mappings Johan Hovold <johan(a)kernel.org> mfd: omap-usb-host: Fix OF populate on driver rebind Uwe Kleine-König <u.kleine-koenig(a)pengutronix.de> mfd: omap-usb-host: Convert to platform remove callback returning void Johan Hovold <johan(a)kernel.org> mfd: qcom-pm8xxx: Fix OF populate on driver rebind Uwe Kleine-König <u.kleine-koenig(a)pengutronix.de> mfd: qcom-pm8xxx: Convert to platform remove callback returning void Yongjian Sun <sunyongjian1(a)huawei.com> ext4: fix e4b bitmap inconsistency reports Matthew Wilcox (Oracle) <willy(a)infradead.org> ext4: convert bd_buddy_page to bd_buddy_folio Matthew Wilcox (Oracle) <willy(a)infradead.org> ext4: convert bd_bitmap_page to bd_bitmap_folio Gou Hao <gouhao(a)uniontech.com> ext4: delete redundant calculations in ext4_mb_get_buddy_page_lock() Theodore Ts'o <tytso(a)mit.edu> ext4: convert some BUG_ON's in mballoc to use WARN_RATELIMITED instead Kemeng Shi <shikemeng(a)huaweicloud.com> ext4: remove unnecessary e4b->bd_buddy_page check in ext4_mb_load_buddy_gfp Zhang Yi <yi.zhang(a)huawei.com> ext4: drop extent cache when splitting extent fails Zhang Yi <yi.zhang(a)huawei.com> ext4: drop extent cache after doing PARTIAL_VALID1 zeroout Zhang Yi <yi.zhang(a)huawei.com> ext4: don't zero the entire extent if EXT4_EXT_DATA_PARTIAL_VALID1 Zhang Yi <yi.zhang(a)huawei.com> ext4: subdivide EXT4_EXT_DATA_VALID1 Baokun Li <libaokun1(a)huawei.com> ext4: get rid of ppath in ext4_split_extent_at() Baokun Li <libaokun1(a)huawei.com> ext4: get rid of ppath in ext4_ext_insert_extent() Baokun Li <libaokun1(a)huawei.com> ext4: get rid of ppath in ext4_ext_create_new_leaf() Baokun Li <libaokun1(a)huawei.com> ext4: get rid of ppath in ext4_find_extent() Baokun Li <libaokun1(a)huawei.com> ext4: make ext4_es_remove_extent() return void Johan Hovold <johan(a)kernel.org> bus: omap-ocp2scp: fix OF populate on driver rebind Uwe Kleine-König <u.kleine-koenig(a)pengutronix.de> bus: omap-ocp2scp: Convert to platform remove callback returning void Johan Hovold <johan(a)kernel.org> drm/tegra: dsi: fix device leak on probe Sean Christopherson <seanjc(a)google.com> KVM: x86: Ignore -EBUSY when checking nested events from vcpu_block() Sean Christopherson <seanjc(a)google.com> KVM: x86: WARN if a vCPU gets a valid wakeup that KVM can't yet inject Alper Ak <alperyasinak1(a)gmail.com> media: qcom: camss: vfe: Fix out-of-bounds access in vfe_isr_reg_update() Milen Mitkov <quic_mmitkov(a)quicinc.com> media: camss: vfe-480: Multiple outputs support for SM8250 Zilin Guan <zilin(a)seu.edu.cn> media: tegra-video: Fix memory leak in __tegra_channel_try_format() Laurent Pinchart <laurent.pinchart(a)ideasonboard.com> media: tegra-video: Use accessors for pad config 'try_*' fields Sean Christopherson <seanjc(a)google.com> KVM: x86: Return "unsupported" instead of "invalid" on access to unsupported PV MSR Sean Christopherson <seanjc(a)google.com> KVM: x86: Rename KVM_MSR_RET_INVALID to KVM_MSR_RET_UNSUPPORTED Mathias Krause <minipli(a)grsecurity.net> KVM: x86: Fix KVM_GET_MSRS stack info leak Sean Christopherson <seanjc(a)google.com> KVM: x86/pmu: Provide "error" semantics for unsupported-but-known PMU MSRs Ilpo Järvinen <ilpo.jarvinen(a)linux.intel.com> PCI: Use resource_set_range() that correctly sets ->end Ilpo Järvinen <ilpo.jarvinen(a)linux.intel.com> resource: Add resource set range and size helpers Puranjay Mohan <puranjay12(a)gmail.com> PCI: Use resource names in PCI log messages Puranjay Mohan <puranjay12(a)gmail.com> PCI: Update BAR # and window messages Bjorn Helgaas <bhelgaas(a)google.com> PCI: Fix printk field formatting Mika Westerberg <mika.westerberg(a)linux.intel.com> PCI: Introduce pci_dev_for_each_resource() Johan Hovold <johan(a)kernel.org> memory: mtk-smi: fix device leak on larb probe Johan Hovold <johan(a)kernel.org> memory: mtk-smi: fix device leaks on common probe Uwe Kleine-König <u.kleine-koenig(a)pengutronix.de> memory: mtk-smi: Convert to platform remove callback returning void Kohei Enju <kohei(a)enjuk.jp> bpf: Fix stack-out-of-bounds write in devmap Mark Harmstone <mark(a)harmstone.com> btrfs: fix compat mask in error messages in btrfs_check_features() Mark Harmstone <mark(a)harmstone.com> btrfs: fix incorrect key offset in error message in check_dev_extent_item() Josef Bacik <josef(a)toxicpanda.com> btrfs: move btrfs_crc32c_final into free-space-cache.c Peter Zijlstra <peterz(a)infradead.org> perf: Fix __perf_event_overflow() vs perf_remove_from_context() race Takashi Iwai <tiwai(a)suse.de> ALSA: usb-audio: Use inclusive terms Takashi Iwai <tiwai(a)suse.de> ALSA: usb-audio: Cap the packet size pre-calculations Peter Wang <peter.wang(a)mediatek.com> scsi: ufs: core: Move link recovery for hibern8 exit failure to wl_resume Bart Van Assche <bvanassche(a)acm.org> scsi: ufs: core: Always initialize the UIC done completion Geoffrey D. Bennett <g(a)b4.vu> ALSA: usb-audio: Remove VALIDATE_RATES quirk for Focusrite devices Salomon Dushimirimana <salomondush(a)google.com> scsi: pm8001: Fix use-after-free in pm8001_queue_command() Mathias Krause <minipli(a)grsecurity.net> scsi: lpfc: Properly set WC for DPP mapping Nam Cao <namcao(a)linutronix.de> irqchip/sifive-plic: Fix frozen interrupt due to affinity setting Felix Gu <ustc.gu(a)gmail.com> drm/logicvc: Fix device node reference leak in logicvc_drm_config_parse() Ian Forbes <ian.forbes(a)broadcom.com> drm/vmwgfx: Return the correct value in vmw_translate_ptr functions Brad Spengler <brad.spengler(a)opensrcsec.com> drm/vmwgfx: Fix invalid kref_put callback in vmw_bo_dirty_release ------------- Diffstat: .clang-format | 1 + .../ethernet/freescale/dpaa2/mac-phy-support.rst | 9 +- Makefile | 4 +- arch/alpha/kernel/pci.c | 5 +- arch/arm/include/asm/string.h | 14 +- arch/arm/kernel/bios32.c | 16 +- arch/arm/mach-dove/pcie.c | 10 +- arch/arm/mach-mv78xx0/pcie.c | 10 +- arch/arm/mach-orion5x/pci.c | 10 +- .../arm64/boot/dts/qcom/sdm845-oneplus-common.dtsi | 1 - arch/arm64/boot/dts/rockchip/rk3568.dtsi | 4 +- arch/arm64/boot/dts/rockchip/rk356x.dtsi | 2 +- arch/arm64/include/asm/pgtable-prot.h | 76 ++-- arch/loongarch/include/asm/uaccess.h | 14 +- arch/mips/pci/ops-bcm63xx.c | 8 +- arch/mips/pci/pci-legacy.c | 3 +- arch/parisc/include/asm/pgtable.h | 2 +- arch/parisc/kernel/head.S | 7 +- arch/parisc/kernel/setup.c | 20 +- arch/powerpc/include/asm/uaccess.h | 2 +- arch/powerpc/kernel/pci-common.c | 21 +- arch/powerpc/platforms/4xx/pci.c | 8 +- arch/powerpc/platforms/52xx/mpc52xx_pci.c | 5 +- arch/powerpc/platforms/83xx/km83xx.c | 4 +- arch/powerpc/platforms/pseries/pci.c | 16 +- arch/riscv/kernel/stacktrace.c | 21 +- arch/s390/lib/xor.c | 4 +- arch/sh/drivers/pci/pcie-sh7786.c | 10 +- arch/sparc/kernel/leon_pci.c | 5 +- arch/sparc/kernel/pci.c | 10 +- arch/sparc/kernel/pcic.c | 5 +- arch/x86/boot/compressed/sev.c | 1 + arch/x86/include/asm/efi.h | 2 +- arch/x86/include/asm/msr-index.h | 5 +- arch/x86/kernel/apic/apic.c | 6 + arch/x86/kernel/uprobes.c | 24 ++ arch/x86/kvm/svm/avic.c | 8 +- arch/x86/kvm/svm/svm.c | 11 +- arch/x86/kvm/vmx/vmx.c | 2 +- arch/x86/kvm/x86.c | 120 +++--- arch/x86/kvm/x86.h | 15 +- arch/x86/platform/efi/efi.c | 2 +- arch/x86/platform/efi/quirks.c | 55 ++- drivers/acpi/acpi_processor.c | 15 +- drivers/acpi/osi.c | 13 + drivers/acpi/osl.c | 2 +- drivers/acpi/sleep.c | 8 + drivers/base/power/runtime.c | 1 + drivers/base/property.c | 27 +- drivers/block/drbd/drbd_actlog.c | 53 +-- drivers/block/drbd/drbd_interval.h | 5 +- drivers/bluetooth/btqca.c | 2 + drivers/bus/omap-ocp2scp.c | 19 +- drivers/clk/tegra/clk-tegra124-emc.c | 2 +- drivers/cpuidle/cpuidle.c | 10 - drivers/crypto/atmel-sha204a.c | 5 +- drivers/dma/mmp_pdma.c | 6 + drivers/firmware/arm_scpi.c | 5 +- drivers/firmware/efi/mokvar-table.c | 2 +- drivers/gpu/drm/amd/amdgpu/amdgpu.h | 1 + drivers/gpu/drm/amd/amdgpu/amdgpu_acpi.c | 2 +- drivers/gpu/drm/amd/amdgpu/amdgpu_amdkfd_gpuvm.c | 6 +- drivers/gpu/drm/amd/amdgpu/amdgpu_cs.c | 13 +- drivers/gpu/drm/amd/amdgpu/amdgpu_csa.c | 38 ++ drivers/gpu/drm/amd/amdgpu/amdgpu_csa.h | 3 + drivers/gpu/drm/amd/amdgpu/amdgpu_debugfs.c | 2 +- drivers/gpu/drm/amd/amdgpu/amdgpu_device.c | 36 +- drivers/gpu/drm/amd/amdgpu/amdgpu_display.c | 4 +- drivers/gpu/drm/amd/amdgpu/amdgpu_drv.c | 2 +- drivers/gpu/drm/amd/amdgpu/amdgpu_gmc.c | 14 +- drivers/gpu/drm/amd/amdgpu/amdgpu_kms.c | 12 +- drivers/gpu/drm/amd/amdgpu/mmhub_v2_0.c | 9 +- drivers/gpu/drm/amd/amdgpu/mmhub_v2_3.c | 3 +- drivers/gpu/drm/amd/amdgpu/mmhub_v3_0.c | 3 +- drivers/gpu/drm/amd/amdgpu/mmhub_v3_0_1.c | 3 +- drivers/gpu/drm/amd/amdgpu/mmhub_v3_0_2.c | 3 +- drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm.c | 1 + .../drm/amd/display/amdgpu_dm/amdgpu_dm_pp_smu.c | 1 + .../amd/display/dc/clk_mgr/dce110/dce110_clk_mgr.c | 2 +- drivers/gpu/drm/amd/display/dc/core/dc_stream.c | 2 +- drivers/gpu/drm/amd/display/dc/dm_services_types.h | 2 +- drivers/gpu/drm/amd/include/dm_pp_interface.h | 1 + drivers/gpu/drm/amd/pm/amdgpu_dpm_internal.c | 67 +++ drivers/gpu/drm/amd/pm/inc/amdgpu_dpm_internal.h | 2 + drivers/gpu/drm/amd/pm/legacy-dpm/kv_dpm.c | 4 +- drivers/gpu/drm/amd/pm/legacy-dpm/legacy_dpm.c | 6 +- drivers/gpu/drm/amd/pm/legacy-dpm/si_dpm.c | 69 ++- drivers/gpu/drm/amd/pm/powerplay/amd_powerplay.c | 13 +- drivers/gpu/drm/bridge/ti-sn65dsi83.c | 13 +- drivers/gpu/drm/bridge/ti-sn65dsi86.c | 118 +++++- drivers/gpu/drm/drm_file.c | 5 +- drivers/gpu/drm/drm_mode_config.c | 9 +- drivers/gpu/drm/exynos/exynos_drm_drv.h | 1 + drivers/gpu/drm/exynos/exynos_drm_vidi.c | 72 +++- drivers/gpu/drm/i915/gt/intel_engine_cs.c | 3 +- drivers/gpu/drm/logicvc/logicvc_drm.c | 4 +- drivers/gpu/drm/msm/msm_gpummu.c | 2 +- drivers/gpu/drm/nouveau/nouveau_connector.c | 3 + drivers/gpu/drm/radeon/si_dpm.c | 4 +- drivers/gpu/drm/tegra/dsi.c | 6 +- drivers/gpu/drm/vmwgfx/vmwgfx_execbuf.c | 4 +- drivers/gpu/drm/vmwgfx/vmwgfx_page_dirty.c | 9 +- drivers/hid/hid-cmedia.c | 2 +- drivers/hid/hid-creative-sb0540.c | 2 +- drivers/hid/hid-zydacron.c | 2 +- drivers/hwmon/max16065.c | 26 +- drivers/hwmon/pmbus/isl68137.c | 7 +- drivers/hwmon/pmbus/q54sj108a2.c | 19 +- drivers/i2c/busses/i2c-cp2615.c | 5 +- drivers/i2c/busses/i2c-fsi.c | 1 + drivers/i3c/master/mipi-i3c-hci/cmd.h | 1 + drivers/i3c/master/mipi-i3c-hci/cmd_v1.c | 2 +- drivers/i3c/master/mipi-i3c-hci/cmd_v2.c | 2 +- drivers/i3c/master/mipi-i3c-hci/core.c | 6 +- drivers/i3c/master/mipi-i3c-hci/dma.c | 4 +- drivers/iio/chemical/bme680_core.c | 2 +- drivers/iio/chemical/sps30_i2c.c | 2 +- drivers/iio/chemical/sps30_serial.c | 2 +- drivers/iio/dac/ds4424.c | 2 +- drivers/iio/gyro/mpu3050-core.c | 18 +- drivers/iio/gyro/mpu3050-i2c.c | 3 +- drivers/iio/imu/inv_icm42600/inv_icm42600_accel.c | 2 + drivers/iio/imu/inv_icm42600/inv_icm42600_buffer.c | 3 + drivers/iio/imu/inv_icm42600/inv_icm42600_gyro.c | 2 + drivers/iio/industrialio-buffer.c | 102 ++--- drivers/iio/light/bh1780.c | 4 +- drivers/iio/potentiometer/mcp4131.c | 2 +- drivers/infiniband/hw/irdma/verbs.c | 2 +- drivers/infiniband/hw/mthca/mthca_provider.c | 5 +- drivers/iommu/intel/dmar.c | 3 +- drivers/irqchip/irq-gic-v3-its.c | 4 + drivers/irqchip/irq-sifive-plic.c | 7 +- drivers/mailbox/mailbox.c | 6 +- drivers/md/dm-verity-fec.c | 4 +- drivers/md/dm-verity-fec.h | 3 - drivers/media/dvb-core/dmxdev.c | 4 +- drivers/media/dvb-core/dvb_net.c | 3 + drivers/media/platform/qcom/camss/camss-vfe-480.c | 59 ++- drivers/memory/mtk-smi.c | 13 +- drivers/mfd/omap-usb-host.c | 11 +- drivers/mfd/qcom-pm8xxx.c | 14 +- drivers/mmc/host/mmci_qcom_dml.c | 1 + drivers/mmc/host/sdhci-pci-gli.c | 9 + drivers/mmc/host/sdhci.c | 9 +- drivers/mtd/nand/raw/brcmnand/brcmnand.c | 6 +- drivers/mtd/nand/raw/cadence-nand-controller.c | 2 +- drivers/mtd/nand/raw/nand_base.c | 14 +- drivers/mtd/nand/raw/pl35x-nand-controller.c | 3 + drivers/mtd/nand/spi/macronix.c | 3 +- drivers/mtd/parsers/redboot.c | 6 +- drivers/net/arcnet/com20020-pci.c | 16 +- drivers/net/bonding/bond_debugfs.c | 16 +- drivers/net/bonding/bond_main.c | 10 +- drivers/net/caif/caif_serial.c | 3 + drivers/net/can/spi/hi311x.c | 5 +- drivers/net/can/spi/mcp251x.c | 15 +- drivers/net/can/usb/ems_usb.c | 7 +- drivers/net/can/usb/etas_es58x/es58x_core.c | 8 +- drivers/net/can/usb/gs_usb.c | 22 +- drivers/net/can/usb/ucan.c | 2 +- drivers/net/dsa/bcm_sf2.c | 8 +- drivers/net/dsa/realtek/rtl8365mb.c | 5 +- drivers/net/ethernet/amd/xgbe/xgbe-drv.c | 10 - drivers/net/ethernet/amd/xgbe/xgbe-main.c | 1 - drivers/net/ethernet/amd/xgbe/xgbe.h | 3 - drivers/net/ethernet/arc/emac_main.c | 11 + drivers/net/ethernet/broadcom/bnxt/bnxt.c | 25 +- drivers/net/ethernet/broadcom/bnxt/bnxt.h | 2 +- drivers/net/ethernet/broadcom/bnxt/bnxt_xdp.c | 7 - drivers/net/ethernet/broadcom/genet/bcmgenet_wol.c | 2 +- drivers/net/ethernet/cadence/macb.h | 7 + drivers/net/ethernet/cadence/macb_main.c | 184 +++++++- drivers/net/ethernet/cadence/macb_ptp.c | 4 +- drivers/net/ethernet/freescale/dpaa2/dpaa2-eth.h | 7 +- drivers/net/ethernet/freescale/dpaa2/dpaa2-mac.h | 10 +- .../freescale/dpaa2/dpaa2-switch-ethtool.c | 34 +- .../net/ethernet/freescale/dpaa2/dpaa2-switch.c | 57 ++- .../net/ethernet/freescale/dpaa2/dpaa2-switch.h | 9 +- drivers/net/ethernet/freescale/enetc/enetc_pf.c | 131 ++++-- drivers/net/ethernet/freescale/fec_main.c | 19 +- drivers/net/ethernet/google/gve/gve.h | 1 + drivers/net/ethernet/google/gve/gve_main.c | 5 +- drivers/net/ethernet/intel/e1000/e1000_main.c | 2 - drivers/net/ethernet/intel/e1000e/netdev.c | 2 - drivers/net/ethernet/intel/i40e/i40e_virtchnl_pf.c | 14 +- drivers/net/ethernet/intel/iavf/iavf_main.c | 9 +- drivers/net/ethernet/intel/ice/ice_common.c | 8 +- drivers/net/ethernet/intel/ice/ice_ethtool.c | 35 +- drivers/net/ethernet/intel/igc/igc_main.c | 7 +- drivers/net/ethernet/intel/ixgbevf/vf.c | 3 +- drivers/net/ethernet/marvell/mvpp2/mvpp2_main.c | 4 +- .../net/ethernet/marvell/octeon_ep/octep_main.c | 48 ++- drivers/net/ethernet/marvell/octeon_ep/octep_rx.c | 27 +- .../ethernet/marvell/octeontx2/af/rvu_devlink.c | 468 ++++++--------------- drivers/net/ethernet/mediatek/mtk_eth_soc.c | 15 +- .../ethernet/mellanox/mlx5/core/en/reporter_tx.c | 1 - drivers/net/ethernet/mellanox/mlx5/core/eswitch.c | 30 +- drivers/net/ethernet/mellanox/mlx5/core/eswitch.h | 3 + .../ethernet/mellanox/mlx5/core/eswitch_offloads.c | 18 +- drivers/net/ethernet/microsoft/mana/hw_channel.c | 6 +- drivers/net/ethernet/microsoft/mana/mana_en.c | 23 +- drivers/net/ethernet/stmicro/stmmac/common.h | 1 - drivers/net/ethernet/stmicro/stmmac/dwmac-intel.c | 4 - .../net/ethernet/stmicro/stmmac/dwmac-loongson.c | 9 +- drivers/net/ethernet/stmicro/stmmac/stmmac.h | 2 - drivers/net/ethernet/stmicro/stmmac/stmmac_main.c | 61 +-- .../net/ethernet/stmicro/stmmac/stmmac_platform.c | 8 - drivers/net/ethernet/ti/am65-cpsw-nuss.c | 2 +- drivers/net/ethernet/ti/cpsw_ale.c | 9 +- drivers/net/mctp/mctp-i2c.c | 1 + drivers/net/phy/phy_device.c | 13 +- drivers/net/usb/aqc111.c | 12 +- drivers/net/usb/kalmia.c | 7 + drivers/net/usb/kaweth.c | 13 + drivers/net/usb/lan78xx.c | 10 +- drivers/net/usb/lan78xx.h | 3 + drivers/net/usb/pegasus.c | 13 +- drivers/net/vxlan/vxlan_core.c | 5 + .../wireless/broadcom/brcm80211/brcmfmac/btcoex.c | 6 +- drivers/net/wireless/marvell/libertas/main.c | 4 +- .../net/wireless/mediatek/mt76/mt76_connac_mac.c | 1 + drivers/net/wireless/st/cw1200/pm.c | 2 + drivers/net/wireless/ti/wlcore/main.c | 4 +- drivers/net/wireless/ti/wlcore/tx.c | 2 +- drivers/nfc/nxp-nci/i2c.c | 4 +- drivers/nfc/pn533/usb.c | 1 + drivers/nvdimm/bus.c | 5 +- drivers/nvme/host/core.c | 2 + drivers/nvme/host/fc.c | 2 +- drivers/nvme/host/pci.c | 8 +- drivers/pci/iov.c | 7 +- drivers/pci/pci-acpi.c | 59 ++- drivers/pci/pci.c | 85 +++- drivers/pci/pci.h | 5 + drivers/pci/pcie/aer.c | 3 - drivers/pci/probe.c | 32 +- drivers/pci/quirks.c | 15 +- drivers/pci/remove.c | 5 +- drivers/pci/setup-bus.c | 57 +-- drivers/pci/setup-res.c | 74 ++-- drivers/pci/vgaarb.c | 17 +- drivers/pci/xen-pcifront.c | 4 +- drivers/platform/x86/dell/dell-wmi-base.c | 6 + .../dell/dell-wmi-sysman/passwordattr-interface.c | 1 - drivers/platform/x86/thinkpad_acpi.c | 6 +- drivers/pnp/quirks.c | 29 +- drivers/regulator/pca9450-regulator.c | 41 +- drivers/remoteproc/mtk_scp.c | 39 ++ drivers/remoteproc/qcom_sysmon.c | 2 +- drivers/s390/block/dasd_eckd.c | 16 + drivers/s390/crypto/zcrypt_ccamisc.c | 12 +- drivers/s390/crypto/zcrypt_cex4.c | 3 +- drivers/scsi/lpfc/lpfc_init.c | 2 + drivers/scsi/lpfc/lpfc_sli.c | 36 +- drivers/scsi/lpfc/lpfc_sli4.h | 3 + drivers/scsi/mpi3mr/mpi3mr_fw.c | 32 +- drivers/scsi/pm8001/pm8001_sas.c | 5 +- drivers/scsi/scsi_scan.c | 7 +- drivers/scsi/ses.c | 5 +- drivers/scsi/storvsc_drv.c | 5 +- drivers/soc/bcm/bcm2835-power.c | 18 +- drivers/soc/fsl/qbman/qman.c | 24 +- drivers/spi/spi-cadence-quadspi.c | 34 ++ drivers/spi/spi.c | 25 +- drivers/staging/media/tegra-video/vi.c | 27 +- drivers/staging/rtl8723bs/core/rtw_ieee80211.c | 15 +- drivers/staging/rtl8723bs/core/rtw_mlme.c | 5 +- drivers/target/target_core_configfs.c | 15 +- drivers/tty/serial/8250/8250_dma.c | 15 + drivers/tty/serial/8250/8250_pci.c | 17 + drivers/tty/serial/8250/8250_port.c | 6 + drivers/tty/serial/uartlite.c | 1 + drivers/ufs/core/ufshcd.c | 35 +- drivers/usb/cdns3/core.c | 11 +- drivers/usb/class/cdc-acm.c | 5 + drivers/usb/class/cdc-acm.h | 1 + drivers/usb/class/cdc-wdm.c | 4 +- drivers/usb/class/usbtmc.c | 6 +- drivers/usb/core/message.c | 100 ++++- drivers/usb/core/phy.c | 8 +- drivers/usb/core/quirks.c | 16 + drivers/usb/gadget/function/f_mass_storage.c | 12 +- drivers/usb/gadget/function/f_tcm.c | 14 + drivers/usb/host/xhci.c | 4 +- drivers/usb/image/mdc800.c | 6 +- drivers/usb/misc/uss720.c | 2 +- drivers/usb/misc/yurex.c | 2 +- drivers/usb/renesas_usbhs/common.c | 9 + drivers/usb/roles/class.c | 7 +- drivers/usb/serial/f81232.c | 77 ++-- drivers/xen/xen-acpi-processor.c | 7 +- fs/binfmt_misc.c | 4 +- fs/btrfs/ctree.h | 7 +- fs/btrfs/disk-io.c | 28 +- fs/btrfs/extent_io.c | 3 +- fs/btrfs/extent_io.h | 3 +- fs/btrfs/free-space-cache.c | 5 + fs/btrfs/inode.c | 19 + fs/btrfs/ioctl.c | 24 +- fs/btrfs/send.c | 4 + fs/btrfs/transaction.c | 16 + fs/btrfs/tree-checker.c | 4 +- fs/btrfs/uuid-tree.c | 46 ++ fs/ceph/dir.c | 15 +- fs/dlm/lock.c | 10 +- fs/eventpoll.c | 5 +- fs/ext4/ext4.h | 9 +- fs/ext4/extents.c | 312 ++++++++------ fs/ext4/extents_status.c | 12 +- fs/ext4/extents_status.h | 4 +- fs/ext4/fast_commit.c | 8 +- fs/ext4/inline.c | 12 +- fs/ext4/inode.c | 8 +- fs/ext4/mballoc.c | 258 ++++++------ fs/ext4/mballoc.h | 4 +- fs/ext4/migrate.c | 5 +- fs/ext4/move_extent.c | 7 +- fs/f2fs/data.c | 5 +- fs/gfs2/util.c | 31 +- fs/iomap/buffered-io.c | 7 +- fs/nfsd/nfs4xdr.c | 9 +- fs/nfsd/nfsctl.c | 31 +- fs/nfsd/state.h | 17 +- fs/ntfs3/super.c | 5 + fs/smb/client/cifsencrypt.c | 3 +- fs/smb/client/cifsfs.c | 9 +- fs/smb/client/cifsglob.h | 11 + fs/smb/client/cifsproto.h | 1 + fs/smb/client/connect.c | 5 +- fs/smb/client/dir.c | 1 + fs/smb/client/file.c | 29 +- fs/smb/client/misc.c | 41 ++ fs/smb/client/smb2ops.c | 14 +- fs/smb/client/smb2pdu.c | 22 +- fs/smb/client/smb2transport.c | 4 +- fs/smb/server/auth.c | 26 +- fs/smb/server/smb2pdu.c | 17 +- fs/squashfs/cache.c | 3 + fs/xfs/xfs_bmap_item.c | 3 +- fs/xfs/xfs_dquot.c | 8 +- fs/xfs/xfs_log.c | 2 + include/asm-generic/tlb.h | 77 +++- include/linux/bpf.h | 6 + include/linux/hugetlb.h | 17 +- include/linux/indirect_call_wrapper.h | 18 +- include/linux/ioport.h | 32 ++ include/linux/irqchip/arm-gic-v3.h | 1 + include/linux/mlx5/mlx5_ifc.h | 4 +- include/linux/mm_types.h | 1 + include/linux/mmc/host.h | 9 +- include/linux/pci.h | 14 + include/linux/skbuff.h | 12 + include/linux/stmmac.h | 1 - include/linux/uprobes.h | 1 + include/linux/usb.h | 8 +- include/net/act_api.h | 1 + include/net/bluetooth/hci_core.h | 3 + include/net/netfilter/nf_tables.h | 7 +- include/net/sch_generic.h | 38 ++ include/net/tc_act/tc_gate.h | 33 +- include/net/tc_act/tc_ife.h | 4 +- include/net/udp_tunnel.h | 2 +- include/sound/soc.h | 2 + include/trace/events/kmem.h | 8 +- io_uring/io-wq.c | 2 +- io_uring/kbuf.c | 8 +- kernel/bpf/devmap.c | 22 +- kernel/bpf/syscall.c | 3 +- kernel/bpf/trampoline.c | 4 +- kernel/bpf/verifier.c | 4 + kernel/cgroup/cgroup.c | 1 + kernel/events/core.c | 42 +- kernel/events/uprobes.c | 10 +- kernel/fork.c | 2 +- kernel/kprobes.c | 47 +-- kernel/rcu/tree_nocb.h | 5 +- kernel/sched/fair.c | 6 - kernel/sched/idle.c | 45 +- kernel/time/time.c | 171 +++++++- kernel/trace/trace.c | 6 +- kernel/trace/trace_events.c | 51 ++- kernel/trace/trace_events_trigger.c | 3 + lib/bootconfig.c | 9 +- mm/hugetlb.c | 143 ++++--- mm/kfence/core.c | 22 +- mm/mmu_gather.c | 33 ++ mm/rmap.c | 25 +- net/atm/lec.c | 26 +- net/batman-adv/bat_iv_ogm.c | 3 + net/batman-adv/bat_v_elp.c | 10 +- net/batman-adv/hard-interface.c | 8 +- net/batman-adv/hard-interface.h | 1 + net/bluetooth/hci_core.c | 34 +- net/bluetooth/hci_sync.c | 2 +- net/bluetooth/hidp/core.c | 16 +- net/bluetooth/l2cap_core.c | 31 +- net/bluetooth/smp.c | 2 +- net/bridge/br_device.c | 2 +- net/bridge/br_input.c | 2 +- net/can/bcm.c | 1 + net/ceph/auth.c | 6 +- net/ceph/messenger_v2.c | 31 +- net/ceph/mon_client.c | 6 +- net/core/dev.c | 2 +- net/core/filter.c | 23 +- net/dsa/dsa2.c | 7 + net/ipv4/icmp.c | 4 +- net/ipv4/tcp.c | 3 +- net/ipv4/tcp_input.c | 18 +- net/ipv4/tcp_ipv4.c | 3 +- net/ipv4/tcp_offload.c | 74 ++++ net/ipv4/udp_offload.c | 3 +- net/ipv6/ip6_output.c | 35 +- net/ipv6/route.c | 11 +- net/ipv6/tcp_ipv6.c | 3 +- net/ipv6/tcpv6_offload.c | 65 +++ net/l2tp/l2tp_ppp.c | 25 +- net/mac80211/debugfs.c | 14 +- net/mac80211/link.c | 2 + net/mac80211/mesh.c | 6 + net/mctp/route.c | 13 +- net/mptcp/pm.c | 2 +- net/mptcp/pm_netlink.c | 72 +++- net/mptcp/protocol.h | 2 + net/ncsi/ncsi-aen.c | 3 +- net/ncsi/ncsi-rsp.c | 16 +- net/netfilter/nf_conntrack_h323_asn1.c | 4 + net/netfilter/nf_conntrack_netlink.c | 67 +-- net/netfilter/nf_conntrack_sip.c | 6 +- net/netfilter/nf_tables_api.c | 8 +- net/netfilter/nfnetlink_cthelper.c | 8 +- net/netfilter/nfnetlink_osf.c | 13 + net/netfilter/nfnetlink_queue.c | 4 +- net/netfilter/nft_compat.c | 6 +- net/netfilter/nft_ct.c | 9 + net/netfilter/nft_log.c | 2 +- net/netfilter/nft_meta.c | 2 +- net/netfilter/nft_numgen.c | 2 +- net/netfilter/nft_set_pipapo.c | 123 ++++-- net/netfilter/nft_set_pipapo.h | 2 + net/netfilter/nft_tunnel.c | 5 +- net/netfilter/xt_CT.c | 4 + net/netfilter/xt_IDLETIMER.c | 6 + net/netfilter/xt_dccp.c | 4 +- net/netfilter/xt_tcpudp.c | 6 +- net/netfilter/xt_time.c | 4 +- net/nfc/nci/core.c | 21 +- net/nfc/nci/data.c | 12 +- net/nfc/rawsock.c | 11 + net/rose/af_rose.c | 5 + net/sched/act_ct.c | 6 + net/sched/act_gate.c | 264 ++++++++---- net/sched/act_ife.c | 93 ++-- net/sched/cls_api.c | 7 + net/sched/cls_u32.c | 13 +- net/sched/sch_ets.c | 12 +- net/sched/sch_generic.c | 27 -- net/sched/sch_teql.c | 8 +- net/smc/af_smc.c | 23 +- net/smc/smc.h | 5 + net/smc/smc_close.c | 2 +- net/sunrpc/cache.c | 26 +- net/sunrpc/xprtrdma/verbs.c | 7 +- net/tipc/socket.c | 2 + net/wireless/core.c | 4 +- net/wireless/core.h | 4 +- net/wireless/pmsr.c | 1 + net/wireless/radiotap.c | 4 +- net/wireless/scan.c | 14 +- sound/core/pcm_lib.c | 11 +- sound/core/pcm_native.c | 25 +- sound/pci/hda/patch_conexant.c | 11 + sound/soc/amd/acp3x-rt5682-max9836.c | 9 +- sound/soc/amd/yc/acp6x-mach.c | 14 + sound/soc/qcom/qdsp6/q6apm-dai.c | 1 + sound/soc/qcom/qdsp6/q6apm-lpass-dais.c | 1 + sound/soc/qcom/qdsp6/q6apm.c | 1 + sound/soc/soc-core.c | 35 +- sound/usb/endpoint.c | 10 +- sound/usb/midi.c | 3 +- sound/usb/mixer_scarlett2.c | 2 + sound/usb/quirks.c | 4 +- sound/usb/validate.c | 2 +- tools/bootconfig/main.c | 7 +- tools/testing/kunit/kunit.py | 279 +++++++----- tools/testing/kunit/kunit_config.py | 4 +- tools/testing/kunit/kunit_kernel.py | 42 +- tools/testing/kunit/kunit_parser.py | 171 +++++--- tools/testing/kunit/kunit_tool_test.py | 120 +++++- tools/testing/kunit/run_checks.py | 4 +- .../kunit/test_data/test_parse_ktap_output.log | 8 + .../kunit/test_data/test_parse_subtest_header.log | 7 + tools/testing/selftests/net/amt.sh | 7 +- tools/testing/selftests/net/mptcp/mptcp_join.sh | 49 +++ tools/testing/selftests/net/mptcp/simult_flows.sh | 11 +- 495 files changed, 5835 insertions(+), 3013 deletions(-)

15 hours, 26 minutes

[PATCH 6.12 000/460] 6.12.78-rc1 review

by Greg Kroah-Hartman

This is the start of the stable review cycle for the 6.12.78 release. There are 460 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know. Responses should be made by Wed, 25 Mar 2026 13:44:33 +0000. Anything received after that time might be too late. The whole patch series can be found in one patch at: https://www.kernel.org/pub/linux/kernel/v6.x/stable-review/patch-6.12.78-rc… or in the git tree and branch at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-6.12.y and the diffstat can be found below. thanks, greg k-h ------------- Pseudo-Shortlog of commits: Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> Linux 6.12.78-rc1 Dapeng Mi <dapeng1.mi(a)linux.intel.com> perf/x86/intel: Add missing branch counters constraint apply Guenter Roeck <linux(a)roeck-us.net> hwmon: (max6639) Fix pulses-per-revolution implementation Josh Law <objecting(a)objecting.org> tools/bootconfig: fix fd leak in load_xbc_file() on fstat failure Josh Law <objecting(a)objecting.org> lib/bootconfig: check xbc_init_node() return in override path Kees Cook <kees(a)kernel.org> fs/tests: exec: Remove bad test vector Rahul Bukte <rahul.bukte(a)sony.com> drm/i915/gt: Check set_default_submission() before deferencing Hyunwoo Kim <imv4bel(a)gmail.com> ksmbd: fix use-after-free in durable v2 replay of active file handles Hyunwoo Kim <imv4bel(a)gmail.com> ksmbd: fix use-after-free of share_conf in compound request Andy Nguyen <theofficialflow1996(a)gmail.com> drm/amd: fix dcn 2.01 check Srinivasan Shanmugam <srinivasan.shanmugam(a)amd.com> drm/amd/display: Fix DisplayID not-found handling in parse_edid_displayid_vrr() Kamal Dasu <kamal.dasu(a)broadcom.com> mtd: rawnand: brcmnand: skip DMA during panic write Kamal Dasu <kamal.dasu(a)broadcom.com> mtd: rawnand: serialize lock/unlock against other NAND operations Kairui Song <kasong(a)tencent.com> mm/shmem, swap: avoid redundant Xarray lookup during swapin Kairui Song <kasong(a)tencent.com> mm/shmem, swap: improve cached mTHP handling and fix potential hang Kemeng Shi <shikemeng(a)huaweicloud.com> mm: shmem: avoid unpaired folio_unlock() in shmem_swapin_folio() Baolin Wang <baolin.wang(a)linux.alibaba.com> mm: shmem: fix potential data corruption during shmem swapin Pratyush Yadav <p.yadav(a)ti.com> mtd: spi-nor: core: avoid odd length/address writes in 8D-8D-8D mode Pratyush Yadav <p.yadav(a)ti.com> mtd: spi-nor: core: avoid odd length/address reads on 8D-8D-8D mode Kyle Meyer <kyle.meyer(a)hpe.com> x86/platform/uv: Handle deconfigured sockets Masami Hiramatsu (Google) <mhiramat(a)kernel.org> ring-buffer: Fix to update per-subbuf entries of persistent ring buffer Gabor Juhos <j4g8y7(a)gmail.com> i2c: pxa: defer reset on Armada 3700 when recovery is used Christophe JAILLET <christophe.jaillet(a)wanadoo.fr> i2c: fsi: Fix a potential leak in fsi_i2c_probe() Johan Hovold <johan(a)kernel.org> i2c: cp2615: fix serial string NULL-deref at probe Ji-Ze Hong (Peter Hong) <peter_hong(a)fintek.com.tw> USB: serial: f81232: fix incomplete serial port generation Jouni Högander <jouni.hogander(a)intel.com> drm/i915/psr: Compute PSR entry_setup_frames into intel_crtc_state Sanman Pradhan <psanman(a)juniper.net> hwmon: (pmbus/isl68137) Fix unchecked return value and use sysfs_emit() Sanman Pradhan <psanman(a)juniper.net> hwmon: (pmbus/mp2975) Add error check for pmbus_read_word_data() return value Weiming Shi <bestswngs(a)gmail.com> icmp: fix NULL pointer dereference in icmp_tag_validation() Anas Iqbal <mohd.abd.6602(a)gmail.com> net: dsa: bcm_sf2: fix missing clk_disable_unprepare() in error paths Muhammad Hammad Ijaz <mhijaz(a)amazon.com> net: mvpp2: guard flow control update with global_tx_fc in buffer switching Weiming Shi <bestswngs(a)gmail.com> nfnetlink_osf: validate individual option lengths in fingerprints Pablo Neira Ayuso <pablo(a)netfilter.org> netfilter: nf_tables: release flowtable after rcu grace period on error Florian Westphal <fw(a)strlen.de> netfilter: bpf: defer hook memory release until rcu readers are done Xiang Mei <xmei5(a)asu.edu> net: bonding: fix NULL deref in bond_debug_rlb_hash_show Xiang Mei <xmei5(a)asu.edu> udp_tunnel: fix NULL deref caused by udp_sock_create6 when CONFIG_IPV6=n Jianbo Liu <jianbol(a)nvidia.com> net/mlx5e: Fix race condition during IPSec ESN update Jianbo Liu <jianbol(a)nvidia.com> net/mlx5e: Prevent concurrent access to IPSec ASO context Cosmin Ratiu <cratiu(a)nvidia.com> net/mlx5: qos: Restrict RTNL area to avoid a lock cycle Fedor Pchelkin <pchelkin(a)ispras.ru> net: macb: fix uninitialized rx_fs_lock Rafael J. Wysocki <rafael.j.wysocki(a)intel.com> ACPI: processor: Fix previous acpi_processor_errata_piix4() fix Guenter Roeck <linux(a)roeck-us.net> wifi: wlcore: Return -ENOMEM instead of -EAGAIN if there is not enough headroom Xiang Mei <xmei5(a)asu.edu> wifi: mac80211: fix NULL deref in mesh_matches_local() Petr Oros <poros(a)redhat.com> iavf: fix VLAN filter lost on add/delete race Zdenek Bouska <zdenek.bouska(a)siemens.com> igc: fix page fault in XDP TX timestamps handling Kohei Enju <kohei(a)enjuk.jp> igc: fix missing update of skb->tail in igc_xmit_frame() Nikola Z. Ivanov <zlatistiv(a)gmail.com> net: usb: aqc111: Do not perform PM inside suspend callback Daniel Borkmann <daniel(a)iogearbox.net> clsact: Fix use-after-free in init/destroy rollback asymmetry Tobi Gaertner <tob.gaertner(a)me.com> net: usb: cdc_ncm: add ndpoffset to NDP32 nframes bounds check Tobi Gaertner <tob.gaertner(a)me.com> net: usb: cdc_ncm: add ndpoffset to NDP16 nframes bounds check Lorenzo Bianconi <lorenzo(a)kernel.org> net: airoha: Remove airoha_dev_stop() in airoha_remove() Lorenzo Bianconi <lorenzo(a)kernel.org> net: airoha: Read completion queue data in airoha_qdma_tx_napi_poll() Lorenzo Bianconi <lorenzo(a)kernel.org> net: airoha: fix PSE memory configuration in airoha_fe_pse_ports_init() Lorenzo Bianconi <lorenzo(a)kernel.org> net: airoha: read default PSE reserved pages value before updating Jamal Hadi Salim <jhs(a)mojatatu.com> net/sched: teql: Fix double-free in teql_master_xmit Jiayuan Chen <jiayuan.chen(a)shopee.com> net/smc: fix NULL dereference and UAF in smc_tcp_syn_recv_sock() Eric Dumazet <edumazet(a)google.com> bonding: prevent potential infinite loop in bond_header_parse() Bart Van Assche <bvanassche(a)acm.org> PM: runtime: Fix a race condition related to device removal Rafael J. Wysocki <rafael.j.wysocki(a)intel.com> sched: idle: Consolidate the handling of two special cases Dipayaan Roy <dipayanroy(a)linux.microsoft.com> net: mana: fix use-after-free in mana_hwc_destroy_channel() by reordering teardown Justin Chen <justin.chen(a)broadcom.com> net: bcmgenet: increase WoL poll timeout Jenny Guanni Qu <qguanni(a)gmail.com> netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() Jenny Guanni Qu <qguanni(a)gmail.com> netfilter: xt_time: use unsigned int for monthday bit shift Pablo Neira Ayuso <pablo(a)netfilter.org> netfilter: xt_CT: drop pending enqueued packets on template removal Pablo Neira Ayuso <pablo(a)netfilter.org> netfilter: nft_ct: drop pending enqueued packets on removal Pablo Neira Ayuso <pablo(a)netfilter.org> nf_tables: nft_dynset: fix possible stateful expression memleak in error path Jenny Guanni Qu <qguanni(a)gmail.com> netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case Lukas Johannes Möller <research(a)johannes-moeller.dev> netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() Hyunwoo Kim <imv4bel(a)gmail.com> netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() Florian Westphal <fw(a)strlen.de> netfilter: ctnetlink: remove refcounting in expectation dumpers Sabrina Dubroca <sd(a)queasysnail.net> mpls: add missing unregister_netdevice_notifier to mpls_init Jiayuan Chen <jiayuan.chen(a)shopee.com> net/rose: fix NULL pointer dereference in rose_transmit_link on reconnect Hyunwoo Kim <imv4bel(a)gmail.com> bridge: cfm: Fix race condition in peer_mep deletion Dmitry Baryshkov <dmitry.baryshkov(a)oss.qualcomm.com> Bluetooth: qca: fix ROM version reading on WCN3998 chips Shaurya Rane <ssrane_b23(a)ee.vjti.ac.in> Bluetooth: L2CAP: Fix use-after-free in l2cap_unregister_user Luiz Augusto von Dentz <luiz.von.dentz(a)intel.com> Bluetooth: HIDP: Fix possible UAF Wang Tao <wangtao554(a)huawei.com> Bluetooth: MGMT: Fix list corruption and UAF in command complete handlers Michael Grzeschik <m.grzeschik(a)pengutronix.de> Bluetooth: hci_sync: Fix hci_le_create_conn_sync Luiz Augusto von Dentz <luiz.von.dentz(a)intel.com> Bluetooth: ISO: Fix defer tests being unstable Christian Eggers <ceggers(a)arri.de> Bluetooth: SMP: make SM/PER/KDU/BI-04-C happy Christian Eggers <ceggers(a)arri.de> Bluetooth: LE L2CAP: Disconnect if sum of payload sizes exceed SDU Christian Eggers <ceggers(a)arri.de> Bluetooth: LE L2CAP: Disconnect if received packet's SDU exceeds IMTU Felix Gu <ustc.gu(a)gmail.com> firmware: arm_scpi: Fix device_node reference leak in probe path Yeoreum Yun <yeoreum.yun(a)arm.com> firmware: arm_ffa: Remove vm_id argument in ffa_rxtx_unmap() Fabrizio Castro <fabrizio.castro.jz(a)renesas.com> arm64: dts: renesas: r9a09g057: Remove wdt{0,2,3} nodes Ovidiu Panait <ovidiu.panait.rb(a)renesas.com> arm64: dts: renesas: r9a09g057: Add RTC node Peddolla Harshavardhan Reddy <peddolla.reddy(a)oss.qualcomm.com> wifi: cfg80211: cancel pmsr_free_wk in cfg80211_pmsr_wdev_down Kuniyuki Iwashima <kuniyu(a)google.com> wifi: mac80211: Fix static_branch_dec() underflow for aql_disable. Chen Ni <nichen(a)iscas.ac.cn> soc: fsl: cpm1: qmc: Fix error check for devm_ioremap_resource() in qmc_qe_init_resources() Richard Genoud <richard.genoud(a)bootlin.com> soc: fsl: qbman: fix race condition in qman_destroy_fq Shawn Lin <shawn.lin(a)rock-chips.com> soc: rockchip: grf: Add missing of_node_put() when returning Felix Gu <ustc.gu(a)gmail.com> cache: ax45mp: Fix device node reference leak in ax45mp_cache_init() Felix Gu <ustc.gu(a)gmail.com> cache: starfive: fix device node leak in starlink_cache_init() Zilin Guan <zilin(a)seu.edu.cn> soc: microchip: mpfs: Fix memory leak in mpfs_sys_controller_probe() ZhengYuan Huang <gality369(a)gmail.com> btrfs: tree-checker: fix misleading root drop_level error message Filipe Manana <fdmanana(a)suse.com> btrfs: log new dentries when logging parent dir of a conflicting inode Damien Le Moal <dlemoal(a)kernel.org> ata: libata-scsi: report correct sense field pointer in ata_scsiop_maint_in() Damien Le Moal <dlemoal(a)kernel.org> ata: libata-scsi: Return residual for emulated SCSI commands Luiz Augusto von Dentz <luiz.von.dentz(a)intel.com> Bluetooth: L2CAP: Fix accepting multiple L2CAP_ECRED_CONN_REQ Matthew Brost <matthew.brost(a)intel.com> drm/xe: Open-code GGTT MMIO access protection Ashutosh Dixit <ashutosh.dixit(a)intel.com> drm/xe/oa: Allow reading after disabling OA stream Alex Deucher <alexander.deucher(a)amd.com> drm/amdgpu: apply state adjust rules to some additional HAINAN vairants Alex Deucher <alexander.deucher(a)amd.com> drm/radeon: apply state adjust rules to some additional HAINAN vairants Alessio Belle <alessio.belle(a)imgtec.com> drm/imagination: Fix deadlock in soft reset sequence Alex Deucher <alexander.deucher(a)amd.com> drm/amdgpu/mmhub4.1.0: add bounds checking for cid Alex Deucher <alexander.deucher(a)amd.com> drm/amdgpu/mmhub3.0: add bounds checking for cid Alex Deucher <alexander.deucher(a)amd.com> drm/amdgpu/mmhub3.0.2: add bounds checking for cid Alex Deucher <alexander.deucher(a)amd.com> drm/amdgpu/mmhub3.0.1: add bounds checking for cid Alex Deucher <alexander.deucher(a)amd.com> drm/amdgpu/mmhub2.3: add bounds checking for cid Alex Deucher <alexander.deucher(a)amd.com> drm/amdgpu/mmhub2.0: add bounds checking for cid Alex Deucher <alexander.deucher(a)amd.com> drm/amdgpu/gmc9.0: add bounds checking for cid Xi Ruoyao <xry111(a)xry111.site> drm/amd/display: Wrap dcn32_override_min_req_memclk() in DC_FP_{START, END} Maarten Lankhorst <dev(a)lankhorst.se> drm: Fix use-after-free on framebuffers and property blobs when calling drm_dev_unplug Jens Axboe <axboe(a)kernel.dk> io_uring/kbuf: propagate BUF_MORE through early buffer commit path Maciej Andrzejewski ICEYE <maciej.andrzejewski(a)m-works.net> serial: uartlite: fix PM runtime usage count underflow on probe Ilpo Järvinen <ilpo.jarvinen(a)linux.intel.com> serial: 8250: Add late synchronize_irq() to shutdown to handle DW UART BUSY Raul E Rangel <rrangel(a)chromium.org> serial: 8250: Fix TX deadlock when using DMA Martin Roukala (né Peres) <martin.roukala(a)mupuf.org> serial: 8250_pci: add support for the AX99100 Guanghui Feng <guanghuifeng(a)linux.alibaba.com> iommu/vt-d: Fix intel iommu iotlb sync hardlockup and retry Finn Thain <fthain(a)linux-m68k.org> mtd: Avoid boot crash in RedBoot partition table parser Chen Ni <nichen(a)iscas.ac.cn> mtd: rawnand: cadence: Fix error check for dma_alloc_coherent() in cadence_nand_init() Olivier Sobrie <olivier(a)sobrie.be> mtd: rawnand: pl353: make sure optimal timings are applied Johan Hovold <johan(a)kernel.org> spi: fix statistics allocation Johan Hovold <johan(a)kernel.org> spi: fix use-after-free on controller registration failure Maíra Canal <mcanal(a)igalia.com> pmdomain: bcm: bcm2835-power: Increase ASB control timeout Luke Wang <ziniu.wang_1(a)nxp.com> mmc: sdhci: fix timing selection for 1-bit bus width Matthew Schwartz <matthew.schwartz(a)linux.dev> mmc: sdhci-pci-gli: fix GL9750 DMA write corruption Damien Le Moal <dlemoal(a)kernel.org> ata: libata-core: disable LPM on ADATA SU680 SSD Kevin Hao <haokexin(a)gmail.com> net: macb: Reinitialize tx/rx queue pointer registers and rx ring during resume Kevin Hao <haokexin(a)gmail.com> net: macb: Introduce gem_init_rx_ring() Yang Yang <n05ec(a)lzu.edu.cn> batman-adv: avoid OGM aggregation when skb tailroom is insufficient Filipe Manana <fdmanana(a)suse.com> btrfs: fix transaction abort when snapshotting received subvolumes Masami Hiramatsu (Google) <mhiramat(a)kernel.org> kprobes: Remove unneeded warnings from __arm_kprobe_ftrace() Masami Hiramatsu (Google) <mhiramat(a)kernel.org> kprobes: Remove unneeded goto Hari Bathini <hbathini(a)linux.ibm.com> powerpc64/bpf: fix kfunc call support Naveen N Rao <naveen(a)kernel.org> powerpc64/bpf: Fold bpf_jit_emit_func_call_hlp() into bpf_jit_emit_func_call_rel() Harald Freudenberger <freude(a)linux.ibm.com> s390/zcrypt: Enable AUTOSEL_DOM for CCA serialnr sysfs attribute Jouni Högander <jouni.hogander(a)intel.com> drm/i915/psr: Write DSC parameters on Selective Update in ET mode Jouni Högander <jouni.hogander(a)intel.com> drm/i915/dsc: Add helper for writing DSC Selective Update ET parameters Jouni Högander <jouni.hogander(a)intel.com> drm/i915/dsc: Add Selective Update register definitions Namjae Jeon <linkinjeon(a)kernel.org> ksmbd: use volume UUID in FS_OBJECT_ID_INFORMATION Namjae Jeon <linkinjeon(a)kernel.org> ksmbd: unset conn->binding on failed binding request Paulo Alcantara <pc(a)manguebit.org> smb: client: fix krb5 mount with username option Lukas Johannes Möller <research(a)johannes-moeller.dev> Bluetooth: L2CAP: Validate L2CAP_INFO_RSP payload length before access Lukas Johannes Möller <research(a)johannes-moeller.dev> Bluetooth: L2CAP: Fix type confusion in l2cap_ecred_reconf_rsp() Felix Fietkau <nbd(a)nbd.name> mac80211: fix crash in ieee80211_chan_bw_change for AP_VLAN stations Helge Deller <deller(a)gmx.de> parisc: Flush correct cache in cacheflush() syscall Fedor Pchelkin <pchelkin(a)ispras.ru> net: macb: fix use-after-free access to PTP clock Ian Ray <ian.ray(a)gehealthcare.com> NFC: nxp-nci: allow GPIOs to sleep Tiezhu Yang <yangtiezhu(a)loongson.cn> LoongArch: Give more information if kmem access failed Ira Weiny <ira.weiny(a)intel.com> nvdimm/bus: Fix potential use after free in asynchronous initialization Jeff Layton <jlayton(a)kernel.org> sunrpc: fix cache_request leak in cache_release Benjamin Tissoires <bentiss(a)kernel.org> HID: bpf: prevent buffer overflow in hid_hw_request Benjamin Tissoires <bentiss(a)kernel.org> selftests/hid: fix compilation when bpf_wq and hid_device are not exported Jeff Layton <jlayton(a)kernel.org> nfsd: fix heap overflow in NFSv4.0 LOCK replay cache Chuck Lever <chuck.lever(a)oracle.com> NFSD: Hold net reference for the lifetime of /proc/fs/nfs/exports fd Lijo Lazar <lijo.lazar(a)amd.com> drm/amdgpu: Add basic validation for RAS header Timur Kristóf <timur.kristof(a)gmail.com> drm/amd/pm: Use pm_display_cfg in legacy DPM (v2) Timur Kristóf <timur.kristof(a)gmail.com> drm/amd/display: Add pixel_clock to amd_pp_display_configuration Jouni Högander <jouni.hogander(a)intel.com> drm/i915/psr: Repeat Selective Update area alignment Jouni Högander <jouni.hogander(a)intel.com> drm/i915/alpm: ALPM disable fixes Heiko Carstens <hca(a)linux.ibm.com> s390/xor: Fix xor_xc_2() inline assembly constraints Heiko Carstens <hca(a)linux.ibm.com> s390/stackleak: Fix __stackleak_poison() inline assembly constraint Peter Zijlstra <peterz(a)infradead.org> sched/fair: Fix zero_vruntime tracking Jens Axboe <axboe(a)kernel.dk> io_uring/kbuf: check if target buffer list is still legacy on recycle Cheng-Yang Chou <yphbchou0911(a)gmail.com> sched_ext: Remove redundant css_put() in scx_cgroup_init() Deepanshu Kartikey <kartikey406(a)gmail.com> mm: thp: deny THP for files on anonymous inodes Gao Xiang <xiang(a)kernel.org> erofs: fix inline data read failure for ztailpacking pclusters Darrick J. Wong <djwong(a)kernel.org> xfs: get rid of the xchk_xfile_*_descr calls Zilin Guan <zilin(a)seu.edu.cn> binfmt_misc: restore write access before closing files opened by open_exec() Vladimir Oltean <vladimir.oltean(a)nxp.com> net: dsa: properly keep track of conduit reference Guodong Xu <guodong(a)riscstar.com> dmaengine: mmp_pdma: Fix race condition in mmp_pdma_residue() Han Guangjiang <hanguangjiang(a)lixiang.com> blk-throttle: fix access race during throttle policy activation Chao Yu <chao(a)kernel.org> f2fs: fix to avoid migrating empty section Zhiguo Niu <zhiguo.niu(a)unisoc.com> f2fs: compress: fix UAF of f2fs_inode_info in f2fs_free_dic Zhiguo Niu <zhiguo.niu(a)unisoc.com> f2fs: compress: change the first parameter of page_array_{alloc,free} to sbi Russell King (Oracle) <rmk+kernel(a)armlinux.org.uk> net: stmmac: remove support for lpi_intr_o Matthieu Baerts (NGI0) <matttbe(a)kernel.org> mptcp: pm: in-kernel: always set ID as avail when rm endp Antheas Kapenekakis <lkml(a)antheas.dev> platform/x86/amd/pmc: Add support for Van Gogh SoC Oleg Nesterov <oleg(a)redhat.com> x86/uprobes: Fix XOL allocation failure for 32-bit tasks Asbjørn Sloth Tønnesen <ast(a)fiberby.net> io_uring/uring_cmd: fix too strict requirement on ioctl Hariprasad Kelam <hkelam(a)marvell.com> Octeontx2-af: Add proper checks for fwdata Steven Rostedt <rostedt(a)goodmis.org> tracing: Add recursion protection in kernel stack trace recording Paul Greenwalt <paul.greenwalt(a)intel.com> ice: fix devlink reload call trace Qu Wenruo <wqu(a)suse.com> btrfs: do not strictly require dirty metadata threshold for metadata writepages David Howells <dhowells(a)redhat.com> rxrpc: Fix recvmsg() unconditional requeue Mikulas Patocka <mpatocka(a)redhat.com> dm-verity: disable recursive forward error correction Eric Dumazet <edumazet(a)google.com> ipv6: use RCU in ip6_xmit() Shuicheng Lin <shuicheng.lin(a)intel.com> drm/xe/sync: Cleanup partially initialized sync on parse failure Long Li <leo.lilong(a)huawei.com> xfs: fix integer overflow in bmap intent sort comparator Thorsten Blum <thorsten.blum(a)linux.dev> crypto: atmel-sha204a - Fix OOM ->tfm_count leak Shyam Prasad N <sprasad(a)microsoft.com> cifs: open files should not hold ref on superblock Kevin Hao <haokexin(a)gmail.com> net: macb: Shuffle the tx ring before enabling tx Luca Ceresoli <luca.ceresoli(a)bootlin.com> drm/bridge: ti-sn65dsi83: halve horizontal syncs for dual LVDS output Thorsten Blum <thorsten.blum(a)linux.dev> ksmbd: Don't log keys in SMB3 signing and encryption key generation Jim Mattson <jmattson(a)google.com> KVM: x86: Introduce KVM_X86_QUIRK_VMCS12_ALLOW_FREEZE_IN_SMM Chao Gao <chao.gao(a)intel.com> KVM: nVMX: Add consistency checks for CR0.WP and CR4.CET Yan Zhao <yan.y.zhao(a)intel.com> KVM: x86: Introduce Intel specific quirk KVM_X86_QUIRK_IGNORE_GUEST_PAT Yan Zhao <yan.y.zhao(a)intel.com> KVM: x86: Introduce supported_quirks to block disabling quirks Paolo Bonzini <pbonzini(a)redhat.com> KVM: x86: Allow vendor code to disable quirks Paolo Bonzini <pbonzini(a)redhat.com> KVM: x86: do not allow re-enabling quirks Sean Christopherson <seanjc(a)google.com> KVM: x86: Quirk initialization of feature MSRs to KVM's max configuration Sean Christopherson <seanjc(a)google.com> KVM: x86: Co-locate initialization of feature MSRs in kvm_arch_vcpu_create() Shengming Hu <hu.shengming(a)zte.com.cn> fgraph: Fix thresh_return clear per-task notrace Darrick J. Wong <djwong(a)kernel.org> iomap: reject delalloc mappings during writeback Tejun Heo <tj(a)kernel.org> sched_ext: Fix starvation of scx_enable() under fair-class saturation Tejun Heo <tj(a)kernel.org> sched_ext: Disable preemption between scx_claim_exit() and kicking helper work Christian Brauner <brauner(a)kernel.org> nsfs: tighten permission checks for ns iteration ioctls Alexander Potapenko <glider(a)google.com> mm/kfence: fix KASAN hardware tag faults during late enablement David Hildenbrand <david(a)redhat.com> mm/page_alloc: forward the gfp flags from alloc_contig_range() to post_alloc_hook() David Hildenbrand <david(a)redhat.com> mm/page_alloc: sort out the alloc_contig_range() gfp flags mess Matthew Wilcox (Oracle) <willy(a)infradead.org> mm/page_alloc: move set_page_refcounted() to callers of post_alloc_hook() Shawn Lin <shawn.lin(a)rock-chips.com> mmc: dw_mmc-rockchip: Fix runtime PM support for internal phase support Shawn Lin <shawn.lin(a)rock-chips.com> mmc: dw_mmc-rockchip: Add memory clock auto-gating support Jisheng Zhang <jszhang(a)kernel.org> mmc: dw_mmc-rockchip: use modern PM macros Sean Christopherson <seanjc(a)google.com> KVM: SVM: Set/clear CR8 write interception when AVIC is (de)activated Naveen N Rao <naveen(a)kernel.org> KVM: SVM: Add a helper to look up the max physical ID for AVIC Naveen N Rao <naveen(a)kernel.org> KVM: SVM: Limit AVIC physical max index based on configured max_vcpu_ids Jiasheng Jiang <jiashengjiangcool(a)gmail.com> usb: gadget: f_tcm: Fix NULL pointer dereferences in nexus handling Kuen-Han Tsai <khtsai(a)google.com> usb: gadget: f_ncm: Fix net_device lifecycle with device_move Thomas Gleixner <tglx(a)linutronix.de> cleanup: Provide retain_and_null_ptr() Marc Kleine-Budde <mkl(a)pengutronix.de> can: gs_usb: gs_can_open(): always configure bitrates before starting device Ethan Tidmore <ethantidmore06(a)gmail.com> xfs: Fix error pointer dereference Paul Moses <p(a)1g4.org> net/sched: act_gate: snapshot parameters with RCU on replace Nathan Chancellor <nathan(a)kernel.org> kbuild: Leave objtool binary around with 'make clean' Matthieu Baerts (NGI0) <matttbe(a)kernel.org> selftests: mptcp: join: check RM_ADDR not sent over same subflow Gang Yan <yangang(a)kylinos.cn> selftests: mptcp: add a check for 'add_addr_accepted' Natalie Vock <natalie.vock(a)gmx.de> drm/amd/display: Use GFP_ATOMIC in dc_create_stream_for_sink Matthieu Baerts (NGI0) <matttbe(a)kernel.org> mptcp: pm: avoid sending RM_ADDR over same subflow Matthieu Baerts (NGI0) <matttbe(a)kernel.org> mptcp: pm: in-kernel: always mark signal+subflow endp as used Zide Chen <zide.chen(a)intel.com> perf/x86/intel/uncore: Add per-scheduler IMC CAS count events Kan Liang <kan.liang(a)linux.intel.com> perf/x86/intel/uncore: Support more units on Granite Rapids Daniel Hodges <git(a)danielhodges.dev> wifi: libertas: fix use-after-free in lbs_free_adapter() Mario Limonciello <mario.limonciello(a)amd.com> platform/x86: hp-bioscfg: Support allocations of larger data Kim Phillips <kim.phillips(a)amd.com> x86/sev: Allow IBPB-on-Entry feature for SNP guests Andrew Lunn <andrew(a)lunn.ch> net: phy: register phy led_triggers during probe to avoid AB-BA deadlock Ankit Garg <nktgrg(a)google.com> gve: fix incorrect buffer cleanup in gve_tx_clean_pending_packets for QPL Khairul Anuar Romli <khairul.anuar.romli(a)altera.com> spi: cadence-quadspi: Implement refcount to handle unbind during busy Fedor Pchelkin <pchelkin(a)ispras.ru> ksmbd: call ksmbd_vfs_kern_path_end_removing() on some error paths Eric Dumazet <edumazet(a)google.com> dst: fix races in rt6_uncached_list_del() and rt_del_uncached_list() Eric Biggers <ebiggers(a)kernel.org> smb: client: Compare MACs in constant time Eric Biggers <ebiggers(a)kernel.org> ksmbd: Compare MACs in constant time Eric Biggers <ebiggers(a)kernel.org> net/tcp-md5: Fix MAC comparison to be constant-time John Ripple <john.ripple(a)keysight.com> drm/bridge: ti-sn65dsi86: Add support for DisplayPort mode with HPD Adrian Hunter <adrian.hunter(a)intel.com> i3c: mipi-i3c-hci: Add missing TID field to no-op command descriptor Adrian Hunter <adrian.hunter(a)intel.com> i3c: mipi-i3c-hci: Restart DMA ring correctly after dequeue abort Adrian Hunter <adrian.hunter(a)intel.com> i3c: mipi-i3c-hci: Use ETIMEDOUT instead of ETIME for timeout errors Yasin Lee <yasin.lee.x(a)gmail.com> iio: proximity: hx9023s: Protect against division by zero in set_samp_freq Jean-Baptiste Maneyrol <jean-baptiste.maneyrol(a)tdk.com> iio: imu: inv_icm42600: fix odr switch when turning buffer off Jean-Baptiste Maneyrol <jean-baptiste.maneyrol(a)tdk.com> iio: imu: inv_icm42600: fix odr switch to the same value Antoniu Miclaus <antoniu.miclaus(a)analog.com> iio: gyro: mpu3050-i2c: fix pm_runtime error handling Antoniu Miclaus <antoniu.miclaus(a)analog.com> iio: gyro: mpu3050-core: fix pm_runtime error handling Nuno Sá <nuno.sa(a)analog.com> iio: buffer: Fix wait_queue not being removed Chris Spencer <spencercw(a)gmail.com> iio: chemical: bme680: Fix measurement wait duration calculation Lukas Schmid <lukas.schmid(a)netcube.li> iio: potentiometer: mcp4131: fix double application of wiper shift Antoniu Miclaus <antoniu.miclaus(a)analog.com> iio: chemical: sps30_i2c: fix buffer size in sps30_i2c_read_meas() Antoniu Miclaus <antoniu.miclaus(a)analog.com> iio: chemical: sps30_serial: fix buffer size in sps30_serial_read_meas() SeungJu Cheon <suunj1331(a)gmail.com> iio: frequency: adf4377: Fix duplicated soft reset mask Oleksij Rempel <o.rempel(a)pengutronix.de> iio: dac: ds4424: reject -128 RAW value Filipe Manana <fdmanana(a)suse.com> btrfs: abort transaction on failure to update root in the received subvol ioctl Filipe Manana <fdmanana(a)suse.com> btrfs: fix transaction abort on set received ioctl due to item overflow Filipe Manana <fdmanana(a)suse.com> btrfs: fix transaction abort on file creation due to name hash collision Henrique Carvalho <henrique.carvalho(a)suse.com> smb: client: fix iface port assignment in parse_server_interfaces Bharath SM <bharathsm(a)microsoft.com> smb: client: fix in-place encryption corruption in SMB2_write() Paulo Alcantara <pc(a)manguebit.org> smb: client: fix atomic open with O_DIRECT & O_SYNC Josh Law <objecting(a)objecting.org> lib/bootconfig: check bounds before writing in __xbc_open_brace() Josh Law <objecting(a)objecting.org> lib/bootconfig: fix snprintf truncation check in xbc_node_compose_key_after() Shashank Balaji <shashank.mahadasyam(a)sony.com> x86/apic: Disable x2apic on resume if the kernel expects so Junxiao Bi <junxiao.bi(a)oracle.com> scsi: core: Fix error handling for scsi_alloc_sdev() Josh Law <objecting(a)objecting.org> lib/bootconfig: fix off-by-one in xbc_verify_tree() unclosed brace error Stefan Haberland <sth(a)linux.ibm.com> s390/dasd: Copy detected format information to secondary device Stefan Haberland <sth(a)linux.ibm.com> s390/dasd: Move quiesce state with pprc swap Long Li <leo.lilong(a)huawei.com> xfs: ensure dquot item is deleted from AIL only after log shutdown Darrick J. Wong <djwong(a)kernel.org> xfs: fix undersized l_iclog_roundoff values Carlos Maiolino <cem(a)kernel.org> xfs: fix returned valued from xfs_defer_can_append Shyam Prasad N <sprasad(a)microsoft.com> cifs: make default value of retrans as zero Laurent Vivier <lvivier(a)redhat.com> qmi_wwan: allow max_mtu above hard_mtu to control rx_urb_size Calvin Owens <calvin(a)wbinvd.org> tracing: Fix trace_buf_size= cmdline parameter with sizes >= 2G Andrei-Alexandru Tachici <andrei-alexandru.tachici(a)oss.qualcomm.com> tracing: Fix enabling multiple events on the kernel command line and bootconfig Thomas Fourier <fourier.thomas(a)gmail.com> drm/msm: Fix dma_free_attrs() buffer size Janusz Krzysztofik <janusz.krzysztofik(a)linux.intel.com> drm/i915: Fix potential overflow of shmem scatterlist length Luca Ceresoli <luca.ceresoli(a)bootlin.com> drm/bridge: ti-sn65dsi83: fix CHA_DSI_CLK_RANGE rounding Mario Limonciello <mario.limonciello(a)amd.com> drm/amd: Set num IP blocks to 0 if discovery fails Alysa Liu <Alysa.Liu(a)amd.com> drm/amdgpu: Fix use-after-free race in VM acquire Yang Wang <kevinyang.wang(a)amd.com> drm/amd/pm: remove invalid gpu_metrics.energy_accumulator on smu v13.0.x Bastien Curutchet (Schneider Electric) <bastien.curutchet(a)bootlin.com> net: dsa: microchip: Fix error path in PTP IRQ setup Fan Wu <fanwu01(a)zju.edu.cn> net: ethernet: arc: emac: quiesce interrupts before requesting IRQ Jian Zhang <zhangjian.3032(a)bytedance.com> net: ncsi: fix skb leak in error paths Mehul Rao <mehulrao(a)gmail.com> net: nexthop: fix percpu use-after-free in remove_nh_grp_entry Namjae Jeon <linkinjeon(a)kernel.org> ksmbd: fix use-after-free by using call_rcu() for oplock_info Marios Makassikis <mmakassikis(a)freebox.fr> smb: server: fix use-after-free in smb2_open() Namjae Jeon <linkinjeon(a)kernel.org> ksmbd: fix use-after-free in smb_lazy_parent_lease_break_close() Dillon Varone <Dillon.Varone(a)amd.com> drm/amd/display: Fallback to boot snapshot for dispclk Maximilian Pezzullo <maximilianpezzullo(a)gmail.com> ata: libata-core: Disable LPM on ST1000DM010-2EP102 Maíra Canal <mcanal(a)igalia.com> pmdomain: bcm: bcm2835-power: Fix broken reset status read Helge Deller <deller(a)gmx.de> parisc: Check kernel mapping earlier at bootup Piotr Jaroszynski <pjaroszynski(a)nvidia.com> arm64: contpte: fix set_access_flags() no-op check for SMMU/ATS faults Helge Deller <deller(a)gmx.de> parisc: Fix initial page table creation for boot Sanman Pradhan <psanman(a)juniper.net> hwmon: (pmbus/q54sj108a2) fix stack overflow in debugfs read Catalin Marinas <catalin.marinas(a)arm.com> arm64: mm: Add PTE_DIRTY back to PAGE_KERNEL* to fix kexec/hibernation Dave Airlie <airlied(a)redhat.com> nouveau/dpcd: return EBUSY for aux xfer if the device is asleep Helge Deller <deller(a)gmx.de> parisc: Increase initial mapping to 64 MB with KALLSYMS Sven Eckelmann <sven(a)narfation.org> batman-adv: Avoid double-rtnl_lock ELP metric worker Eric Biggers <ebiggers(a)kernel.org> net/tcp-ao: Fix MAC comparison to be constant-time Huiwen He <hehuiwen(a)kylinos.cn> tracing: Fix syscall events activation by ensuring refcount hits zero Jakub Staniszewski <jakub.staniszewski(a)linux.intel.com> ice: fix retry for AQ command 0x06EE Long Li <longli(a)microsoft.com> net: mana: Ring doorbell at 4 CQ wraparounds Ariel Silver <arielsilver77(a)gmail.com> media: dvb-net: fix OOB access in ULE extension header tables Luka Gejak <luka.gejak(a)linux.dev> staging: rtl8723bs: fix potential out-of-bounds read in rtw_restruct_wmm_ie Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> staging: rtl8723bs: properly validate the data in rtw_get_ie_ex() Jedrzej Jagielski <jedrzej.jagielski(a)intel.com> ixgbevf: fix link setup issue Jakub Staniszewski <jakub.staniszewski(a)linux.intel.com> ice: reintroduce retry mechanism for indirect AQ Mark Harmstone <mark(a)harmstone.com> btrfs: fix chunk map leak in btrfs_map_block() after btrfs_chunk_map_num_copies() Marc Zyngier <maz(a)kernel.org> irqchip/gic-v3-its: Limit number of per-device MSIs to the range the ITS supports Andy Shevchenko <andriy.shevchenko(a)linux.intel.com> device property: Allow secondary lookup in fwnode_get_next_child_node() Kuniyuki Iwashima <kuniyu(a)google.com> nfsd: Fix cred ref leak in nfsd_nl_listener_set_doit(). Alexander Gordeev <agordeev(a)linux.ibm.com> s390/pfault: Fix virtual vs physical address confusion Franz Schnyder <franz.schnyder(a)toradex.com> drm/bridge: ti-sn65dsi86: Enable HPD polling if IRQ is not used Osama Abdelkader <osama.abdelkader(a)gmail.com> drm/bridge: samsung-dsim: Fix memory leak in error path Mario Limonciello <mario.limonciello(a)amd.com> drm/amd: Disable MES LR compute W/A Xu Yang <xu.yang_2(a)nxp.com> Revert "tcpm: allow looking for role_sw device in the main node" Linus Torvalds <torvalds(a)linux-foundation.org> Fix CC_HAS_ASM_GOTO_OUTPUT on non-x86 architectures Thomas Gleixner <tglx(a)linutronix.de> kbuild: Disable CC_HAS_ASM_GOTO_OUTPUT on clang < 17 Xingui Yang <yangxingui(a)huawei.com> scsi: hisi_sas: Fix NULL pointer exception during user_scan() Yihang Li <liyihang9(a)huawei.com> scsi: hisi_sas: Use macro instead of magic number Xingui Yang <yangxingui(a)huawei.com> scsi: hisi_sas: Add time interval between two H2D FIS following soft reset spec Wang Shuaiwei <wangshuaiwei1(a)xiaomi.com> scsi: ufs: core: Fix SError in ufshcd_rtc_work() during UFS suspend Adrian Ng Ho Yin <adrianhoyin.ng(a)altera.com> i3c: dw-i3c-master: Set SIR_REJECT in DAT on device attach and reattach Steven Rostedt <rostedt(a)goodmis.org> time/jiffies: Mark jiffies_64_to_clock_t() notrace Max Kellermann <max.kellermann(a)ionos.com> ceph: fix memory leaks in ceph_mdsc_build_path() Max Kellermann <max.kellermann(a)ionos.com> ceph: fix i_nlink underrun during async unlink Ilya Dryomov <idryomov(a)gmail.com> libceph: admit message frames only in CEPH_CON_S_OPEN state Raphael Zimmer <raphael.zimmer(a)tu-ilmenau.de> libceph: Use u32 for non-negative values in ceph_monmap_decode() Ilya Dryomov <idryomov(a)gmail.com> libceph: prevent potential out-of-bounds reads in process_message_header() Ilya Dryomov <idryomov(a)gmail.com> libceph: reject preamble if control segment is empty Raphael Zimmer <raphael.zimmer(a)tu-ilmenau.de> libceph: Fix potential out-of-bounds access in ceph_handle_auth_reply() Max Kellermann <max.kellermann(a)ionos.com> ceph: add a bunch of missing ceph_path_info initializers Masami Hiramatsu (Google) <mhiramat(a)kernel.org> kprobes: avoid crash when rmmod/insmod after ftrace killed Mehul Rao <mehulrao(a)gmail.com> tipc: fix divide-by-zero in tipc_sk_filter_connect() Ravi Hothi <ravi.hothi(a)oss.qualcomm.com> ASoC: qcom: qdsp6: Fix q6apm remove ordering during ADSP stop and start Penghe Geng <pgeng(a)nvidia.com> mmc: core: Avoid bitfield RMW for claim/retune flags Alexander Potapenko <glider(a)google.com> mm/kfence: disable KFENCE upon KASAN HW tags enablement Felix Gu <ustc.gu(a)gmail.com> mmc: mmci: Fix device_node reference leak in of_get_dml_pipe_index() Kalesh Singh <kaleshsingh(a)google.com> mm/tracing: rss_stat: ensure curr is false from kthread context Miguel Ojeda <ojeda(a)kernel.org> rust: kbuild: allow `unused_features` Ziyi Guo <n7l8m4(a)u.northwestern.edu> usb: image: mdc800: kill download URB on timeout Oliver Neukum <oneukum(a)suse.com> usb: mdc800: handle signal and read racing Fan Wu <fanwu01(a)zju.edu.cn> usb: renesas_usbhs: fix use-after-free in ISR during device removal Oliver Neukum <oneukum(a)suse.com> usb: class: cdc-wdm: fix reordering issue in read code path Alan Stern <stern(a)rowland.harvard.edu> USB: core: Limit the length of unkillable synchronous timeouts Alan Stern <stern(a)rowland.harvard.edu> USB: usbtmc: Use usb_bulk_msg_killable() with user-specified timeouts Alan Stern <stern(a)rowland.harvard.edu> USB: usbcore: Introduce usb_bulk_msg_killable() RD Babiera <rdbabiera(a)google.com> usb: typec: altmode/displayport: set displayport signaling rate in configure message Xu Yang <xu.yang_2(a)nxp.com> usb: roles: get usb role switch from parent only for usb-b-connector Marc Zyngier <maz(a)kernel.org> usb: cdc-acm: Restore CAP_BRK functionnality to CH343 Gabor Juhos <j4g8y7(a)gmail.com> usb: core: don't power off roothub PHYs if phy_set_mode() fails Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> usb: misc: uss720: properly clean up reference in uss720_probe() Heikki Krogerus <heikki.krogerus(a)linux.intel.com> usb: dwc3: pci: add support for the Intel Nova Lake -H Oliver Neukum <oneukum(a)suse.com> usb: yurex: fix race in probe Dayu Jiang <jiangdayu(a)xiaomi.com> usb: xhci: Prevent interrupt storm on host controller error (HCE) Zilin Guan <zilin(a)seu.edu.cn> usb: xhci: Fix memory leak in xhci_disable_slot() Vyacheslav Vahnenko <vahnenko2003(a)gmail.com> USB: ezcap401 needs USB_QUIRK_NO_BOS to function on 10gbs usb speed Christoffer Sandberg <cs(a)tuxedo.de> usb/core/quirks: Add Huawei ME906S-device to wakeup quirk A1RM4X <dev(a)a1rm4x.com> USB: add QUIRK_NO_BOS for video capture several devices Sean Christopherson <seanjc(a)google.com> KVM: SVM: Initialize AVIC VMCB fields if AVIC is enabled with in-kernel APIC Zhang Heng <zhangheng(a)kylinos.cn> ASoC: amd: yc: Add DMI quirk for ASUS EXPERTBOOK PM1503CDA Pedro Falcato <pfalcato(a)suse.de> ata: libata-core: Add BRIDGE_OK quirk for QEMU drives Oleksij Rempel <o.rempel(a)pengutronix.de> net: usb: lan78xx: skip LTM configuration for LAN7850 Oleksij Rempel <o.rempel(a)pengutronix.de> net: usb: lan78xx: fix TX byte statistics for small packets Oleksij Rempel <o.rempel(a)pengutronix.de> net: usb: lan78xx: fix silent drop of packets with checksum errors Takashi Iwai <tiwai(a)suse.de> ALSA: usb-audio: Check endpoint numbers at parsing Scarlett2 mixer interfaces Mehul Rao <mehulrao(a)gmail.com> ALSA: pcm: fix use-after-free on linked stream runtime in snd_pcm_drain() Qingye Zhao <zhaoqingye(a)honor.com> cgroup: fix race between task migration and iteration Sasha Levin <sashal(a)kernel.org> Revert "arm64: dts: qcom: sdm845-oneplus: Mark l14a regulator as boot-on" Seungjin Bae <eeodqql09(a)gmail.com> usb: gadget: f_mass_storage: Fix potential integer overflow in check_command_size_in_blocks() Andreas Kemnade <andreas(a)kemnade.info> iio: imu: inv-mpu9150: fix irq ack preventing irq storms Eric Dumazet <edumazet(a)google.com> net: prevent NULL deref in ip[6]tunnel_xmit() Alok Tiwari <alok.a.tiwari(a)oracle.com> octeontx2-af: devlink: fix NIX RAS reporter to use RAS interrupt status Alok Tiwari <alok.a.tiwari(a)oracle.com> octeontx2-af: devlink: fix NIX RAS reporter recovery condition Marek Behún <kabel(a)kernel.org> net: dsa: realtek: Fix LED group port bit for non-zero LED group Ricardo B. Marlière <rbm(a)suse.com> net: bonding: Fix nd_tbl NULL dereference when IPv6 is disabled Philip Yang <Philip.Yang(a)amd.com> drm/amdkfd: Unreserve bo if queue update failed Casey Connolly <casey.connolly(a)linaro.org> ASoC: detect empty DMI strings Chen Ni <nichen(a)iscas.ac.cn> ASoC: amd: acp3x-rt5682-max9836: Add missing error check for clock acquisition Ben Dooks <ben.dooks(a)codethink.co.uk> ACPI: OSL: fix __iomem type on return from acpi_os_map_generic_address() Nicolai Buchwitz <nb(a)tipi-net.de> net: bcmgenet: fix broken EEE by converting to phylib-managed state Matt Vollrath <tactii(a)gmail.com> e1000/e1000e: Fix leak in DMA error cleanup Alok Tiwari <alok.a.tiwari(a)oracle.com> i40e: fix src IP mask checks and memcpy argument names in cloud filter Sungwoo Kim <iam(a)sung-woo.kim> nvme-pci: Fix race bug in nvme_poll_irqdisable() Sungwoo Kim <iam(a)sung-woo.kim> nvme-pci: Fix slab-out-of-bounds in nvme_dbbuf_set Rafael J. Wysocki <rafael.j.wysocki(a)intel.com> sched: idle: Make skipping governor callbacks more consistent Chen Ni <nichen(a)iscas.ac.cn> perf ftrace: Fix hashmap__new() error checking Peng Fan <peng.fan(a)nxp.com> regulator: pca9450: Correct interrupt type Chen Ni <nichen(a)iscas.ac.cn> perf annotate: Fix hashmap__new() error checking Yuan Tan <tanyuan98(a)outlook.com> netfilter: xt_IDLETIMER: reject rev0 reuse of ALARM timer labels Hyunwoo Kim <imv4bel(a)gmail.com> netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() Hyunwoo Kim <imv4bel(a)gmail.com> netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path David Dull <monderasdor(a)gmail.com> netfilter: x_tables: guard option walkers against 1-byte tail reads Jenny Guanni Qu <qguanni(a)gmail.com> netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop() Florian Westphal <fw(a)strlen.de> netfilter: nf_tables: always walk all pending catchall elements Weiming Shi <bestswngs(a)gmail.com> net: add xmit recursion limit to tunnel xmit functions Toke Høiland-Jørgensen <toke(a)redhat.com> xdp: register system page pool as an XDP memory model Alexander Lobakin <aleksander.lobakin(a)intel.com> xdp: allow attaching already registered memory model to xdp_rxq_info Raju Rangoju <Raju.Rangoju(a)amd.com> amd-xgbe: prevent CRC errors during RX adaptation with AN disabled Raju Rangoju <Raju.Rangoju(a)amd.com> amd-xgbe: fix link status handling in xgbe_rx_adaptation Chengfeng Ye <dg573847474(a)gmail.com> mctp: route: hold key->lock in mctp_flow_prepare_output() Jiayuan Chen <jiayuan.chen(a)shopee.com> bonding: fix type confusion in bond_setup_by_slave() Hangbin Liu <liuhangbin(a)gmail.com> bonding: use common function to compute the features Hangbin Liu <liuhangbin(a)gmail.com> net: add a common function to compute features for upper devices Cosmin Ratiu <cratiu(a)nvidia.com> bonding: Correctly support GSO ESP offload Jianbo Liu <jianbol(a)nvidia.com> bonding: add ESP offload features when slaves support Wenyuan Li <2063309626(a)qq.com> can: hi311x: hi3110_open(): add check for hi3110_power_enable() return value Haiyue Wang <haiyuewa(a)163.com> mctp: i2c: fix skb memory leak in receive path Pavan Chebbi <pavan.chebbi(a)broadcom.com> bnxt_en: Fix RSS table size check when changing ethtool channels Shuangpeng Bai <shuangpeng.kernel(a)gmail.com> serial: caif: hold tty->link reference in ldisc_open and ser_release Álvaro Fernández Rojas <noltari(a)gmail.com> net: sfp: improve Huawei MA5671a fixup Sen Wang <sen(a)ti.com> ASoC: simple-card-utils: fix graph_util_is_ports0() for DT overlays Kuninori Morimoto <kuninori.morimoto.gx(a)renesas.com> ASoC: simple-card-utils: use __free(device_node) for device node matteo.cotifava <cotifavamatteo(a)gmail.com> ASoC: soc-core: flush delayed work before removing DAIs and widgets matteo.cotifava <cotifavamatteo(a)gmail.com> ASoC: soc-core: drop delayed_work_pending() check before flush David Lechner <dlechner(a)baylibre.com> drm/sitronix/st7586: fix bad pixel data due to byte swap Weiming Shi <bestswngs(a)gmail.com> net/sched: teql: fix NULL pointer dereference in iptunnel_xmit on TEQL slave xmit Gal Pressman <gal(a)nvidia.com> net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery Patrisious Haddad <phaddad(a)nvidia.com> net/mlx5: Fix crash when moving to switchdev mode Cosmin Ratiu <cratiu(a)nvidia.com> net/mlx5: Fix deadlock between devlink lock and esw->wq Daniel Jurgens <danielj(a)nvidia.com> net/mlx5: Query to see if host PF is disabled Daniel Jurgens <danielj(a)nvidia.com> net/mlx5: IFC updates for disabled host PF Hangbin Liu <liuhangbin(a)gmail.com> bonding: handle BOND_LINK_FAIL, BOND_LINK_BACK as valid link states Yang Wang <kevinyang.wang(a)amd.com> drm/amd/pm: add missing od setting PP_OD_FEATURE_ZERO_FAN_BIT for smu v14 Pengyu Luo <mitltlatltl(a)gmail.com> drm/msm/dsi: fix pclk rate calculation for bonded dsi Mieczyslaw Nalewaj <namiltd(a)yahoo.com> net: dsa: realtek: rtl8365mb: remove ifOutDiscards from rx_packets Peter Collingbourne <pcc(a)google.com> perf disasm: Fix off-by-one bug in outside check Breno Leitao <leitao(a)debian.org> workqueue: Use POOL_BH instead of WQ_BH when checking pool flags Sun YangKai <sunk67188(a)gmail.com> btrfs: hold space_info->lock when clearing periodic reclaim ready Eric Badger <ebadger(a)purestorage.com> xprtrdma: Decrement re_receiving on the early exit paths Pengyu Luo <mitltlatltl(a)gmail.com> drm/msm/dsi: fix hdisplay calculation when programming dsi registers Roberto Bergantinos Corpas <rbergant(a)redhat.com> nfs: return EISDIR on nfs3_proc_create if d_alias is a dir Guenter Roeck <linux(a)roeck-us.net> smb/server: Fix another refcount leak in smb2_open() J. Neuschäfer <j.ne(a)posteo.net> powerpc: 83xx: km83xx: Fix keymile vendor prefix Tzung-Bi Shih <tzungbi(a)kernel.org> remoteproc: mediatek: Unprepare SCP clock during system suspend Bjorn Andersson <bjorn.andersson(a)oss.qualcomm.com> remoteproc: sysmon: Correct subsys_name_len type in QMI request Sourabh Jain <sourabhjain(a)linux.ibm.com> powerpc/crash: adjust the elfcorehdr size Sourabh Jain <sourabhjain(a)linux.ibm.com> powerpc/kexec/core: use big-endian types for crash variables Ben Collins <bcollins(a)kernel.org> kexec: Include kernel-end even without crashkernel Eliav Farber <farbere(a)amazon.com> kexec: Consolidate machine_kexec_mask_interrupts() implementation Christophe Leroy (CS GROUP) <chleroy(a)kernel.org> powerpc/uaccess: Fix inline assembly for clang build on PPC32 Takashi Iwai <tiwai(a)suse.de> ALSA: usb-audio: Check max frame size for implicit feedback mode, too sguttula <suresh.guttula(a)amd.com> drm/amdgpu/vcn5: Add SMU dpm interface type Takashi Iwai <tiwai(a)suse.de> ALSA: usb-audio: Avoid implicit feedback mode on DIYINHK USB Audio 2.0 wangshuaiwei <wangshuaiwei1(a)xiaomi.com> scsi: ufs: core: Fix shift out of bounds when MAXQ=32 Peter Wang <peter.wang(a)mediatek.com> scsi: ufs: core: Fix possible NULL pointer dereference in ufshcd_add_command_trace() Charles Keepax <ckeepax(a)opensource.cirrus.com> ASoC: cs42l43: Report insert for exotic peripherals Azamat Almazbek uulu <almazbek1608(a)gmail.com> ASoC: amd: yc: Add ASUS EXPERTBOOK BM1503CDA to quirk table Tomas Henzl <thenzl(a)redhat.com> scsi: ses: Fix devices attaching to different hosts Sofia Schneider <sofia(a)schn.dev> ACPI: OSI: Add DMI quirk for Acer Aspire One D255 Ramanathan Choodamani <quic_rchoodam(a)quicinc.com> wifi: mac80211: set default WMM parameters on all links Al Viro <viro(a)zeniv.linux.org.uk> unshare: fix unshare_fs() handling Sean Rhodes <sean(a)starlabs.systems> ALSA: hda/realtek: Fix speaker pop on Star Labs StarFighter Ranjan Kumar <ranjan.kumar(a)broadcom.com> scsi: mpi3mr: Add NULL checks when resetting request and reply queues Piotr Mazek <pmazek(a)outlook.com> ACPI: PM: Save NVS memory on Lenovo G70-35 Jan Kiszka <jan.kiszka(a)siemens.com> scsi: storvsc: Fix scheduling while atomic on PREEMPT_RT ------------- Diffstat: Documentation/virt/kvm/api.rst | 52 ++++ Makefile | 13 +- arch/arm/kernel/machine_kexec.c | 23 -- arch/arm64/Kconfig | 1 + .../arm64/boot/dts/qcom/sdm845-oneplus-common.dtsi | 1 - arch/arm64/boot/dts/renesas/r9a09g057.dtsi | 37 +-- arch/arm64/include/asm/pgtable-prot.h | 10 +- arch/arm64/kernel/machine_kexec.c | 31 --- arch/arm64/mm/contpte.c | 53 ++++- arch/loongarch/include/asm/uaccess.h | 14 +- arch/parisc/include/asm/pgtable.h | 2 +- arch/parisc/kernel/cache.c | 4 +- arch/parisc/kernel/head.S | 7 +- arch/parisc/kernel/setup.c | 20 +- arch/powerpc/include/asm/kexec.h | 1 - arch/powerpc/include/asm/uaccess.h | 2 +- arch/powerpc/kexec/core.c | 60 ++--- arch/powerpc/kexec/core_32.c | 1 + arch/powerpc/kexec/file_load_64.c | 14 +- arch/powerpc/net/bpf_jit_comp.c | 2 +- arch/powerpc/net/bpf_jit_comp64.c | 140 +++++++---- arch/powerpc/platforms/83xx/km83xx.c | 4 +- arch/riscv/kernel/machine_kexec.c | 23 -- arch/s390/include/asm/processor.h | 2 +- arch/s390/lib/xor.c | 4 +- arch/s390/mm/pfault.c | 4 +- arch/x86/boot/compressed/sev.c | 1 + arch/x86/coco/sev/core.c | 1 + arch/x86/events/intel/core.c | 25 +- arch/x86/events/intel/uncore_snbep.c | 78 ++++-- arch/x86/include/asm/kvm_host.h | 9 +- arch/x86/include/asm/msr-index.h | 5 +- arch/x86/include/uapi/asm/kvm.h | 3 + arch/x86/kernel/apic/apic.c | 6 + arch/x86/kernel/apic/x2apic_uv_x.c | 18 +- arch/x86/kernel/uprobes.c | 24 ++ arch/x86/kvm/mmu.h | 2 +- arch/x86/kvm/mmu/mmu.c | 10 +- arch/x86/kvm/svm/avic.c | 30 ++- arch/x86/kvm/svm/svm.c | 14 +- arch/x86/kvm/vmx/nested.c | 26 +- arch/x86/kvm/vmx/vmx.c | 50 +++- arch/x86/kvm/x86.c | 23 +- arch/x86/kvm/x86.h | 3 + block/blk-cgroup.c | 6 - block/blk-cgroup.h | 6 + block/blk-throttle.c | 6 +- block/blk-throttle.h | 18 +- drivers/acpi/acpi_processor.c | 15 +- drivers/acpi/osi.c | 13 + drivers/acpi/osl.c | 2 +- drivers/acpi/sleep.c | 8 + drivers/ata/libata-core.c | 5 + drivers/ata/libata-scsi.c | 83 ++++--- drivers/base/power/runtime.c | 1 + drivers/base/property.c | 27 +-- drivers/bluetooth/btqca.c | 2 + drivers/cache/ax45mp_cache.c | 4 +- drivers/cache/starfive_starlink_cache.c | 4 +- drivers/cpuidle/cpuidle.c | 10 - drivers/crypto/atmel-sha204a.c | 5 +- drivers/dma/mmp_pdma.c | 6 + drivers/firewire/net.c | 5 +- drivers/firmware/arm_ffa/driver.c | 8 +- drivers/firmware/arm_scpi.c | 5 +- drivers/gpu/drm/amd/amdgpu/amdgpu_amdkfd_gpuvm.c | 6 +- drivers/gpu/drm/amd/amdgpu/amdgpu_device.c | 4 +- drivers/gpu/drm/amd/amdgpu/amdgpu_kms.c | 2 +- drivers/gpu/drm/amd/amdgpu/amdgpu_ras_eeprom.c | 20 +- drivers/gpu/drm/amd/amdgpu/gmc_v9_0.c | 21 +- drivers/gpu/drm/amd/amdgpu/mes_v11_0.c | 5 - drivers/gpu/drm/amd/amdgpu/mes_v12_0.c | 5 - drivers/gpu/drm/amd/amdgpu/mmhub_v2_0.c | 9 +- drivers/gpu/drm/amd/amdgpu/mmhub_v2_3.c | 3 +- drivers/gpu/drm/amd/amdgpu/mmhub_v3_0.c | 3 +- drivers/gpu/drm/amd/amdgpu/mmhub_v3_0_1.c | 3 +- drivers/gpu/drm/amd/amdgpu/mmhub_v3_0_2.c | 3 +- drivers/gpu/drm/amd/amdgpu/mmhub_v4_1_0.c | 3 +- drivers/gpu/drm/amd/amdgpu/vcn_v5_0_0.c | 4 + .../gpu/drm/amd/amdkfd/kfd_process_queue_manager.c | 1 + drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm.c | 4 +- .../drm/amd/display/amdgpu_dm/amdgpu_dm_pp_smu.c | 1 + drivers/gpu/drm/amd/display/dc/clk_mgr/clk_mgr.c | 8 +- .../amd/display/dc/clk_mgr/dce110/dce110_clk_mgr.c | 2 +- drivers/gpu/drm/amd/display/dc/core/dc_stream.c | 2 +- drivers/gpu/drm/amd/display/dc/dm_services_types.h | 2 +- .../drm/amd/display/dc/hwss/dcn401/dcn401_hwseq.c | 6 +- .../amd/display/dc/resource/dcn32/dcn32_resource.c | 3 + drivers/gpu/drm/amd/include/dm_pp_interface.h | 1 + drivers/gpu/drm/amd/pm/amdgpu_dpm_internal.c | 67 ++++++ drivers/gpu/drm/amd/pm/inc/amdgpu_dpm_internal.h | 2 + drivers/gpu/drm/amd/pm/legacy-dpm/kv_dpm.c | 4 +- drivers/gpu/drm/amd/pm/legacy-dpm/legacy_dpm.c | 6 +- drivers/gpu/drm/amd/pm/legacy-dpm/si_dpm.c | 69 ++---- drivers/gpu/drm/amd/pm/powerplay/amd_powerplay.c | 11 +- .../gpu/drm/amd/pm/swsmu/smu13/smu_v13_0_0_ppt.c | 8 +- .../gpu/drm/amd/pm/swsmu/smu13/smu_v13_0_7_ppt.c | 3 +- .../gpu/drm/amd/pm/swsmu/smu14/smu_v14_0_2_ppt.c | 3 +- drivers/gpu/drm/bridge/samsung-dsim.c | 25 +- drivers/gpu/drm/bridge/ti-sn65dsi83.c | 13 +- drivers/gpu/drm/bridge/ti-sn65dsi86.c | 118 ++++++++- drivers/gpu/drm/drm_file.c | 5 +- drivers/gpu/drm/drm_mode_config.c | 9 +- drivers/gpu/drm/i915/display/intel_display_types.h | 1 + drivers/gpu/drm/i915/display/intel_psr.c | 71 ++++-- drivers/gpu/drm/i915/display/intel_vdsc.c | 23 ++ drivers/gpu/drm/i915/display/intel_vdsc.h | 3 + drivers/gpu/drm/i915/display/intel_vdsc_regs.h | 12 + drivers/gpu/drm/i915/gem/i915_gem_shmem.c | 12 +- drivers/gpu/drm/i915/gt/intel_engine_cs.c | 3 +- drivers/gpu/drm/imagination/pvr_power.c | 11 +- drivers/gpu/drm/msm/adreno/a2xx_gpummu.c | 2 +- drivers/gpu/drm/msm/dsi/dsi_host.c | 43 +++- drivers/gpu/drm/nouveau/nouveau_connector.c | 3 + drivers/gpu/drm/radeon/si_dpm.c | 4 +- drivers/gpu/drm/tiny/st7586.c | 15 +- drivers/gpu/drm/xe/xe_ggtt.c | 10 +- drivers/gpu/drm/xe/xe_ggtt_types.h | 5 +- drivers/gpu/drm/xe/xe_oa.c | 7 +- drivers/gpu/drm/xe/xe_sync.c | 24 +- drivers/hid/bpf/hid_bpf_dispatch.c | 2 + drivers/hwmon/max6639.c | 10 +- drivers/hwmon/pmbus/isl68137.c | 7 +- drivers/hwmon/pmbus/mp2975.c | 2 + drivers/hwmon/pmbus/q54sj108a2.c | 19 +- drivers/i2c/busses/i2c-cp2615.c | 3 + drivers/i2c/busses/i2c-fsi.c | 1 + drivers/i2c/busses/i2c-pxa.c | 17 +- drivers/i3c/master/dw-i3c-master.c | 4 +- drivers/i3c/master/mipi-i3c-hci/cmd.h | 1 + drivers/i3c/master/mipi-i3c-hci/cmd_v1.c | 2 +- drivers/i3c/master/mipi-i3c-hci/cmd_v2.c | 2 +- drivers/i3c/master/mipi-i3c-hci/core.c | 6 +- drivers/i3c/master/mipi-i3c-hci/dma.c | 4 +- drivers/iio/chemical/bme680_core.c | 2 +- drivers/iio/chemical/sps30_i2c.c | 2 +- drivers/iio/chemical/sps30_serial.c | 2 +- drivers/iio/dac/ds4424.c | 2 +- drivers/iio/frequency/adf4377.c | 2 +- drivers/iio/gyro/mpu3050-core.c | 18 +- drivers/iio/gyro/mpu3050-i2c.c | 3 +- drivers/iio/imu/inv_icm42600/inv_icm42600_accel.c | 2 + drivers/iio/imu/inv_icm42600/inv_icm42600_buffer.c | 4 + drivers/iio/imu/inv_icm42600/inv_icm42600_gyro.c | 2 + drivers/iio/imu/inv_mpu6050/inv_mpu_core.c | 8 + drivers/iio/imu/inv_mpu6050/inv_mpu_iio.h | 2 + drivers/iio/imu/inv_mpu6050/inv_mpu_trigger.c | 5 +- drivers/iio/industrialio-buffer.c | 6 +- drivers/iio/potentiometer/mcp4131.c | 2 +- drivers/iio/proximity/hx9023s.c | 3 + drivers/iommu/intel/dmar.c | 3 +- drivers/irqchip/irq-gic-v3-its.c | 4 + drivers/md/dm-verity-fec.c | 4 +- drivers/md/dm-verity-fec.h | 3 - drivers/media/dvb-core/dvb_net.c | 3 + drivers/mmc/host/dw_mmc-rockchip.c | 51 +++- drivers/mmc/host/mmci_qcom_dml.c | 1 + drivers/mmc/host/sdhci-pci-gli.c | 9 + drivers/mmc/host/sdhci.c | 9 +- drivers/mtd/nand/raw/brcmnand/brcmnand.c | 6 +- drivers/mtd/nand/raw/cadence-nand-controller.c | 2 +- drivers/mtd/nand/raw/nand_base.c | 14 +- drivers/mtd/nand/raw/pl35x-nand-controller.c | 3 + drivers/mtd/parsers/redboot.c | 6 +- drivers/mtd/spi-nor/core.c | 145 ++++++++++- drivers/net/bonding/bond_debugfs.c | 16 +- drivers/net/bonding/bond_main.c | 138 +++++------ drivers/net/caif/caif_serial.c | 3 + drivers/net/can/spi/hi311x.c | 5 +- drivers/net/can/usb/gs_usb.c | 22 +- drivers/net/dsa/bcm_sf2.c | 8 +- drivers/net/dsa/microchip/ksz_ptp.c | 11 +- drivers/net/dsa/realtek/rtl8365mb.c | 3 +- drivers/net/dsa/realtek/rtl8366rb-leds.c | 6 +- drivers/net/ethernet/amd/xgbe/xgbe-drv.c | 4 + drivers/net/ethernet/amd/xgbe/xgbe-phy-v2.c | 82 ++++++- drivers/net/ethernet/amd/xgbe/xgbe.h | 4 + drivers/net/ethernet/arc/emac_main.c | 11 + drivers/net/ethernet/broadcom/bnxt/bnxt_ethtool.c | 4 +- drivers/net/ethernet/broadcom/genet/bcmgenet.c | 31 +-- drivers/net/ethernet/broadcom/genet/bcmgenet.h | 5 +- drivers/net/ethernet/broadcom/genet/bcmgenet_wol.c | 2 +- drivers/net/ethernet/broadcom/genet/bcmmii.c | 10 +- drivers/net/ethernet/cadence/macb_main.c | 124 +++++++++- drivers/net/ethernet/cadence/macb_ptp.c | 4 +- drivers/net/ethernet/google/gve/gve_tx_dqo.c | 52 ++-- drivers/net/ethernet/intel/e1000/e1000_main.c | 2 - drivers/net/ethernet/intel/e1000e/netdev.c | 2 - drivers/net/ethernet/intel/i40e/i40e_virtchnl_pf.c | 14 +- drivers/net/ethernet/intel/iavf/iavf_main.c | 9 +- drivers/net/ethernet/intel/ice/ice_common.c | 13 +- drivers/net/ethernet/intel/ice/ice_ethtool.c | 35 ++- drivers/net/ethernet/intel/ice/ice_main.c | 3 +- drivers/net/ethernet/intel/igc/igc.h | 2 + drivers/net/ethernet/intel/igc/igc_main.c | 14 +- drivers/net/ethernet/intel/igc/igc_ptp.c | 33 +++ drivers/net/ethernet/intel/ixgbevf/vf.c | 3 +- drivers/net/ethernet/marvell/mvpp2/mvpp2_main.c | 4 +- .../net/ethernet/marvell/octeontx2/af/rvu_cgx.c | 3 + .../ethernet/marvell/octeontx2/af/rvu_devlink.c | 6 +- .../net/ethernet/marvell/octeontx2/af/rvu_sdp.c | 2 +- drivers/net/ethernet/mediatek/airoha_eth.c | 52 ++-- .../ethernet/mellanox/mlx5/core/en/reporter_tx.c | 1 - .../ethernet/mellanox/mlx5/core/en_accel/ipsec.h | 1 + .../mellanox/mlx5/core/en_accel/ipsec_fs.c | 2 +- .../mellanox/mlx5/core/en_accel/ipsec_offload.c | 52 ++-- drivers/net/ethernet/mellanox/mlx5/core/esw/qos.c | 23 +- drivers/net/ethernet/mellanox/mlx5/core/eswitch.c | 30 ++- drivers/net/ethernet/mellanox/mlx5/core/eswitch.h | 3 + .../ethernet/mellanox/mlx5/core/eswitch_offloads.c | 18 +- drivers/net/ethernet/microsoft/mana/hw_channel.c | 6 +- drivers/net/ethernet/microsoft/mana/mana_en.c | 23 +- drivers/net/ethernet/stmicro/stmmac/common.h | 1 - drivers/net/ethernet/stmicro/stmmac/dwmac-intel.c | 4 - .../net/ethernet/stmicro/stmmac/dwmac-loongson.c | 7 - drivers/net/ethernet/stmicro/stmmac/stmmac.h | 2 - drivers/net/ethernet/stmicro/stmmac/stmmac_main.c | 36 --- .../net/ethernet/stmicro/stmmac/stmmac_platform.c | 8 - drivers/net/mctp/mctp-i2c.c | 1 + drivers/net/phy/phy_device.c | 25 +- drivers/net/phy/sfp.c | 8 +- drivers/net/usb/aqc111.c | 12 +- drivers/net/usb/cdc_ncm.c | 10 +- drivers/net/usb/lan78xx.c | 10 +- drivers/net/usb/lan78xx.h | 3 + drivers/net/usb/qmi_wwan.c | 4 +- drivers/net/usb/usbnet.c | 7 +- drivers/net/wireless/marvell/libertas/main.c | 4 +- drivers/net/wireless/ti/wlcore/tx.c | 2 +- drivers/nfc/nxp-nci/i2c.c | 4 +- drivers/nvdimm/bus.c | 5 +- drivers/nvme/host/pci.c | 8 +- drivers/platform/x86/amd/pmc/pmc.c | 3 + drivers/platform/x86/amd/pmc/pmc.h | 1 + .../platform/x86/hp/hp-bioscfg/enum-attributes.c | 9 +- drivers/pmdomain/bcm/bcm2835-power.c | 18 +- drivers/regulator/pca9450-regulator.c | 2 +- drivers/remoteproc/mtk_scp.c | 39 +++ drivers/remoteproc/qcom_sysmon.c | 2 +- drivers/s390/block/dasd_eckd.c | 16 ++ drivers/s390/crypto/zcrypt_ccamisc.c | 12 +- drivers/s390/crypto/zcrypt_cex4.c | 3 +- drivers/scsi/hisi_sas/hisi_sas.h | 43 +++- drivers/scsi/hisi_sas/hisi_sas_main.c | 42 +++- drivers/scsi/hisi_sas/hisi_sas_v3_hw.c | 246 ++++++++++++------- drivers/scsi/mpi3mr/mpi3mr_fw.c | 32 +-- drivers/scsi/scsi_scan.c | 8 +- drivers/scsi/ses.c | 5 +- drivers/scsi/storvsc_drv.c | 5 +- drivers/soc/fsl/qbman/qman.c | 24 +- drivers/soc/fsl/qe/qmc.c | 4 +- drivers/soc/microchip/mpfs-sys-controller.c | 13 +- drivers/soc/rockchip/grf.c | 1 + drivers/spi/spi-cadence-quadspi.c | 33 +++ drivers/spi/spi.c | 25 +- drivers/staging/rtl8723bs/core/rtw_ieee80211.c | 15 +- drivers/staging/rtl8723bs/core/rtw_mlme.c | 5 +- drivers/tty/serial/8250/8250_dma.c | 15 ++ drivers/tty/serial/8250/8250_pci.c | 17 ++ drivers/tty/serial/8250/8250_port.c | 6 + drivers/tty/serial/uartlite.c | 1 + drivers/ufs/core/ufshcd.c | 8 +- drivers/usb/class/cdc-acm.c | 5 + drivers/usb/class/cdc-acm.h | 1 + drivers/usb/class/cdc-wdm.c | 4 +- drivers/usb/class/usbtmc.c | 6 +- drivers/usb/core/message.c | 100 ++++++-- drivers/usb/core/phy.c | 8 +- drivers/usb/core/quirks.c | 16 ++ drivers/usb/dwc3/dwc3-pci.c | 2 + drivers/usb/gadget/function/f_mass_storage.c | 12 +- drivers/usb/gadget/function/f_ncm.c | 36 ++- drivers/usb/gadget/function/f_tcm.c | 14 ++ drivers/usb/gadget/function/u_ether.c | 22 ++ drivers/usb/gadget/function/u_ether.h | 26 ++ drivers/usb/gadget/function/u_ncm.h | 2 +- drivers/usb/host/xhci-ring.c | 1 + drivers/usb/host/xhci.c | 4 +- drivers/usb/image/mdc800.c | 6 +- drivers/usb/misc/uss720.c | 2 +- drivers/usb/misc/yurex.c | 2 +- drivers/usb/renesas_usbhs/common.c | 9 + drivers/usb/roles/class.c | 7 +- drivers/usb/serial/f81232.c | 77 +++--- drivers/usb/typec/altmodes/displayport.c | 7 +- drivers/usb/typec/tcpm/tcpm.c | 2 +- fs/binfmt_misc.c | 4 +- fs/btrfs/disk-io.c | 22 -- fs/btrfs/extent_io.c | 3 +- fs/btrfs/extent_io.h | 3 +- fs/btrfs/inode.c | 19 ++ fs/btrfs/ioctl.c | 24 +- fs/btrfs/space-info.c | 5 +- fs/btrfs/transaction.c | 16 ++ fs/btrfs/tree-checker.c | 2 +- fs/btrfs/tree-log.c | 6 + fs/btrfs/uuid-tree.c | 38 +++ fs/btrfs/uuid-tree.h | 2 + fs/btrfs/volumes.c | 6 +- fs/ceph/debugfs.c | 4 +- fs/ceph/dir.c | 17 +- fs/ceph/file.c | 4 +- fs/ceph/inode.c | 2 +- fs/ceph/mds_client.c | 3 + fs/erofs/zdata.c | 21 +- fs/f2fs/compress.c | 74 +++--- fs/f2fs/f2fs.h | 2 + fs/f2fs/gc.c | 16 +- fs/iomap/buffered-io.c | 15 +- fs/nfs/nfs3proc.c | 7 +- fs/nfsd/nfs4xdr.c | 9 +- fs/nfsd/nfsctl.c | 16 +- fs/nfsd/state.h | 17 +- fs/nsfs.c | 21 ++ fs/smb/client/cifsencrypt.c | 3 +- fs/smb/client/cifsfs.c | 7 +- fs/smb/client/cifsglob.h | 11 + fs/smb/client/cifsproto.h | 1 + fs/smb/client/connect.c | 4 + fs/smb/client/dir.c | 1 + fs/smb/client/file.c | 29 +-- fs/smb/client/fs_context.c | 2 +- fs/smb/client/misc.c | 42 ++++ fs/smb/client/smb2ops.c | 14 +- fs/smb/client/smb2pdu.c | 5 +- fs/smb/client/smb2transport.c | 4 +- fs/smb/client/trace.h | 2 + fs/smb/server/Kconfig | 1 + fs/smb/server/auth.c | 26 +- fs/smb/server/oplock.c | 35 ++- fs/smb/server/oplock.h | 5 +- fs/smb/server/smb2pdu.c | 34 ++- fs/tests/exec_kunit.c | 3 - fs/xfs/libxfs/xfs_defer.c | 2 +- fs/xfs/scrub/agheader_repair.c | 13 +- fs/xfs/scrub/alloc_repair.c | 5 +- fs/xfs/scrub/attr_repair.c | 20 +- fs/xfs/scrub/bmap_repair.c | 6 +- fs/xfs/scrub/common.h | 18 -- fs/xfs/scrub/dir.c | 13 +- fs/xfs/scrub/dir_repair.c | 11 +- fs/xfs/scrub/dirtree.c | 11 +- fs/xfs/scrub/ialloc_repair.c | 5 +- fs/xfs/scrub/nlinks.c | 6 +- fs/xfs/scrub/orphanage.c | 7 +- fs/xfs/scrub/parent.c | 11 +- fs/xfs/scrub/parent_repair.c | 23 +- fs/xfs/scrub/quotacheck.c | 13 +- fs/xfs/scrub/refcount_repair.c | 13 +- fs/xfs/scrub/rmap_repair.c | 5 +- fs/xfs/scrub/rtsummary.c | 7 +- fs/xfs/xfs_bmap_item.c | 3 +- fs/xfs/xfs_dquot.c | 8 +- fs/xfs/xfs_log.c | 2 + include/linux/cleanup.h | 19 ++ include/linux/etherdevice.h | 3 +- include/linux/huge_mm.h | 4 + include/linux/if_ether.h | 3 +- include/linux/io_uring_types.h | 3 + include/linux/irq.h | 3 + include/linux/irqchip/arm-gic-v3.h | 1 + include/linux/mlx5/mlx5_ifc.h | 4 +- include/linux/mmc/host.h | 9 +- include/linux/netdev_features.h | 18 ++ include/linux/netdevice.h | 40 +++- include/linux/stmmac.h | 1 - include/linux/trace_recursion.h | 9 + include/linux/uprobes.h | 1 + include/linux/usb.h | 8 +- include/linux/usb/usbnet.h | 1 + include/net/dsa.h | 1 + include/net/ip6_tunnel.h | 14 ++ include/net/ip_tunnels.h | 7 + include/net/netfilter/nf_tables.h | 2 + include/net/sch_generic.h | 33 +++ include/net/tc_act/tc_gate.h | 33 ++- include/net/udp_tunnel.h | 2 +- include/net/xdp.h | 32 +++ include/trace/events/kmem.h | 8 +- include/trace/events/rxrpc.h | 4 + init/Kconfig | 3 + io_uring/kbuf.c | 18 +- io_uring/kbuf.h | 4 +- io_uring/uring_cmd.c | 9 +- kernel/cgroup/cgroup.c | 1 + kernel/events/uprobes.c | 10 +- kernel/fork.c | 2 +- kernel/irq/Kconfig | 6 + kernel/irq/Makefile | 2 +- kernel/irq/kexec.c | 40 ++++ kernel/kprobes.c | 51 ++-- kernel/sched/ext.c | 89 +++++-- kernel/sched/fair.c | 84 ++++--- kernel/sched/idle.c | 39 ++- kernel/time/time.c | 2 +- kernel/trace/ring_buffer.c | 2 +- kernel/trace/trace.c | 12 +- kernel/trace/trace_events.c | 58 +++-- kernel/trace/trace_functions_graph.c | 6 +- kernel/workqueue.c | 2 +- lib/bootconfig.c | 9 +- mm/compaction.c | 2 + mm/internal.h | 3 +- mm/kfence/core.c | 29 ++- mm/page_alloc.c | 59 ++++- mm/shmem.c | 97 ++++++-- net/batman-adv/bat_iv_ogm.c | 3 + net/batman-adv/bat_v_elp.c | 10 +- net/batman-adv/hard-interface.c | 8 +- net/batman-adv/hard-interface.h | 1 + net/bluetooth/hci_conn.c | 4 +- net/bluetooth/hci_sync.c | 2 +- net/bluetooth/hidp/core.c | 16 +- net/bluetooth/l2cap_core.c | 51 ++-- net/bluetooth/mgmt.c | 7 +- net/bluetooth/smp.c | 2 +- net/bridge/br_cfm.c | 4 +- net/ceph/auth.c | 6 +- net/ceph/messenger_v2.c | 31 ++- net/ceph/mon_client.c | 6 +- net/core/dev.c | 98 +++++++- net/core/dev.h | 35 --- net/core/dst.c | 1 + net/core/xdp.c | 56 +++++ net/dsa/dsa.c | 59 +++-- net/ethernet/eth.c | 9 +- net/ipv4/Kconfig | 1 + net/ipv4/icmp.c | 4 +- net/ipv4/ip_gre.c | 3 +- net/ipv4/ip_tunnel_core.c | 15 ++ net/ipv4/nexthop.c | 14 +- net/ipv4/route.c | 4 +- net/ipv4/tcp.c | 3 +- net/ipv4/tcp_ao.c | 3 +- net/ipv4/tcp_ipv4.c | 3 +- net/ipv6/ip6_output.c | 35 +-- net/ipv6/route.c | 4 +- net/ipv6/tcp_ipv6.c | 3 +- net/mac80211/chan.c | 6 +- net/mac80211/debugfs.c | 14 +- net/mac80211/link.c | 2 + net/mac80211/mesh.c | 3 + net/mac802154/iface.c | 4 +- net/mctp/route.c | 13 +- net/mpls/af_mpls.c | 1 + net/mptcp/pm.c | 2 +- net/mptcp/pm_netlink.c | 72 ++++-- net/mptcp/protocol.h | 2 + net/ncsi/ncsi-aen.c | 3 +- net/ncsi/ncsi-rsp.c | 16 +- net/netfilter/nf_bpf_link.c | 2 +- net/netfilter/nf_conntrack_h323_asn1.c | 4 + net/netfilter/nf_conntrack_netlink.c | 67 ++++-- net/netfilter/nf_conntrack_sip.c | 6 +- net/netfilter/nf_tables_api.c | 7 +- net/netfilter/nfnetlink_cthelper.c | 8 +- net/netfilter/nfnetlink_osf.c | 13 + net/netfilter/nfnetlink_queue.c | 4 +- net/netfilter/nft_ct.c | 4 + net/netfilter/nft_dynset.c | 10 +- net/netfilter/nft_set_pipapo.c | 3 +- net/netfilter/xt_CT.c | 4 + net/netfilter/xt_IDLETIMER.c | 6 + net/netfilter/xt_dccp.c | 4 +- net/netfilter/xt_tcpudp.c | 6 +- net/netfilter/xt_time.c | 4 +- net/phonet/af_phonet.c | 5 +- net/rose/af_rose.c | 5 + net/rxrpc/recvmsg.c | 19 +- net/sched/act_gate.c | 264 +++++++++++++++------ net/sched/sch_generic.c | 27 --- net/sched/sch_ingress.c | 14 +- net/sched/sch_teql.c | 8 +- net/smc/af_smc.c | 23 +- net/smc/smc.h | 5 + net/smc/smc_close.c | 2 +- net/sunrpc/cache.c | 26 +- net/sunrpc/xprtrdma/verbs.c | 7 +- net/tipc/socket.c | 2 + net/wireless/pmsr.c | 1 + sound/core/pcm_native.c | 19 +- sound/pci/hda/patch_realtek.c | 25 ++ sound/soc/amd/acp3x-rt5682-max9836.c | 9 +- sound/soc/amd/yc/acp6x-mach.c | 14 ++ sound/soc/codecs/cs42l43-jack.c | 1 + sound/soc/generic/simple-card-utils.c | 48 ++-- sound/soc/qcom/qdsp6/q6apm-dai.c | 1 + sound/soc/qcom/qdsp6/q6apm-lpass-dais.c | 1 + sound/soc/qcom/qdsp6/q6apm.c | 1 + sound/soc/soc-core.c | 11 +- sound/usb/endpoint.c | 1 + sound/usb/mixer_scarlett2.c | 2 + sound/usb/quirks.c | 2 + tools/bootconfig/main.c | 7 +- tools/objtool/Makefile | 8 +- tools/perf/builtin-ftrace.c | 9 +- tools/perf/util/annotate.c | 5 +- tools/perf/util/disasm.c | 2 +- .../testing/selftests/hid/progs/hid_bpf_helpers.h | 12 + tools/testing/selftests/net/mptcp/mptcp_join.sh | 43 ++++ 500 files changed, 5178 insertions(+), 2252 deletions(-)

21 hours, 44 minutes

[PATCH 5.10 000/334] 5.10.252-rc2 review

by Sasha Levin

This is the start of the stable review cycle for the 5.10.252 release. There are 334 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know. Responses should be made by Wed Mar 4 04:10:05 PM UTC 2026. Anything received after that time might be too late. The whole patch series can be found in one patch at: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git/… or in the git tree and branch at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-5.10.y and the diffstat can be found below. Thanks, Sasha ------------- Pseudo-Shortlog of commits: Abdun Nihaal (2): media: i2c/tw9903: Fix potential memory leak in tw9903_probe() media: i2c/tw9906: Fix potential memory leak in tw9906_probe() Aboorva Devarajan (1): cpuidle: Skip governor when only one idle state is available Aleksei Oladko (1): selftests: forwarding: vxlan_bridge_1d: fix test failure with br_netfilter enabled Alex Deucher (1): drm/amdgpu: keep vga memory on MacBooks with switchable graphics Alex Williamson (1): PCI: Mark ASM1164 SATA controller to avoid bus reset Alexander Grest (1): iommu/arm-smmu-v3: Improve CMDQ lock fairness and efficiency Alexander Koskovich (1): power: reset: nvmem-reboot-mode: respect cell size for nvmem_cell_write Allison Henderson (1): net/rds: rds_sendmsg should not discard payload_len Alok Tiwari (1): mtd: rawnand: cadence: Fix return type of CDMA send-and-wait helper Alper Ak (2): tpm: tpm_i2c_infineon: Fix locality leak on get_burstcount() failure tpm: st33zp24: Fix missing cleanup on get_burstcount() error Andreas Gruenbacher (6): gfs2: Add new gfs2_iomap_get helper gfs2: Turn gfs2_extent_map into gfs2_{get,alloc}_extent gfs2: Replace gfs2_lblk_to_dblk with gfs2_get_extent gfs2: Add wrapper for iomap_file_buffered_write gfs2: Move the inode glock locking to gfs2_file_buffered_write gfs2: Add metapath_dibh helper Andreas Larsson (1): sparc: Synchronize user stack on fork and clone André Draszik (1): regulator: core: move supply check earlier in set_machine_constraints() AngeloGioacchino Del Regno (2): arm64: dts: qcom: sdm630: Add qfprom subnodes dmaengine: mediatek: uart-apdma: Fix above 4G addressing TX/RX Anshumali Gaur (1): octeontx2-af: Fix PF driver crash with kexec kernel booting Anthony Iliopoulos (2): nfsd: never defer requests during idmap lookup nfsd: fix return error code for nfsd_map_name_to_[ug]id Anthony Pighin (Nokia) (1): rtc: interface: Alarm race handling should not discard preceding error Antonio Borneo (1): coresight: etm3x: Fix cpulocked warning on cpuhp Antoniu Miclaus (1): iio: gyro: itg3200: Fix unchecked return value in read_raw Archie Pusaka (1): Bluetooth: Enforce key size of 16 bytes on FIPS level Armin Wolf (1): ACPICA: Abort AML bytecode execution when executing AML_FATAL_OP Arnd Bergmann (2): vmw_vsock: bypass false-positive Wnonnull warning with gcc-16 myri10ge: avoid uninitialized variable use Artem Shimko (1): serial: 8250_dw: handle clock enable errors in runtime_resume Bartosz Golaszewski (1): clocksource/drivers/timer-integrator-ap: Add missing Kconfig dependency on OF Ben Dooks (1): fs: add <linux/init_task.h> for 'init_fs' Benjamin Marzinski (1): dm mpath: make pg_init_delay_msecs settable Billy Tsai (2): i3c: Move device name assignment after i3c_bus_init gpio: aspeed-sgpio: Change the macro to support deferred probe Brian Masney (2): openrisc: define arch-specific version of nop() clk: microchip: core: correct return value on *_get_parent() Carl Lee (1): nfc: nxp-nci: remove interrupt trigger type Chaitanya Mishra (1): staging: greybus: lights: avoid NULL deref Chen Jinghuang (1): sched/rt: Skip currently executing CPU in rto_next_cpu() Chen-Yu Tsai (1): ARM: dts: allwinner: sun5i-a13-utoo-p66: delete "power-gpios" property Chin-Ting Kuo (1): spi: spi-mem: Protect dirmap_create() with spi_mem_access_start/end Christian Kohlschütter (1): regulator: core: Fix off-on-delay-us for always-on/boot-on regulators Christoph Hellwig (1): iomap: fix submission side handling of completion side errors Chuck Lever (10): svcrdma: Add a batch Receive posting mechanism svcrdma: Use svc_rdma_refresh_recvs() in wc_receive svcrdma: Maintain a Receive water mark RDMA/core: Fix a couple of obvious typos in comments svcrdma: Remove queue-shortening warnings svcrdma: Clean up comment in svc_rdma_accept() svcrdma: Increase the per-transport rw_ctx count svcrdma: Reduce the number of rdma_rw contexts per-QP RDMA/core: add rdma_rw_max_sge() helper for SQ sizing SUNRPC: auth_gss: fix memory leaks in XDR decoding error paths Colin Ian King (1): scsi: csiostor: Fix dereference of null pointer rn Cupertino Miranda (1): bpf: verifier improvement in 32bit shift sign extension pattern Dan Carpenter (2): EDAC/i5000: Fix snprintf() size calculation in calculate_dimm_size() EDAC/i5400: Fix snprintf() limit calculation in calculate_dimm_size() Daniel Hodges (2): SUNRPC: fix gss_auth kref leak in gss_alloc_msg error path tipc: fix RCU dereference race in tipc_aead_users_dec() Daniel Palmer (1): m68k: nommu: fix memmove() with differently aligned src and dest for 68000 Darrick J. Wong (4): xfs: mark data structures corrupt on EIO and ENODATA xfs: delete attr leaf freemap entries when empty xfs: fix freemap adjustments when adding xattrs to leaf blocks xfs: fix remote xattr valuelblk check Davide Caratti (1): selftests: forwarding: tc_actions: cleanup temporary files when test is aborted Deepanshu Kartikey (1): gfs2: Fix use-after-free in iomap inline data write path Ding Hui (1): dm: remove fake timeout to avoid leak request Diogo Ivo (1): arm64: tegra: smaug: Add usb-role-switch support Dmitry Baryshkov (3): arm64: dts: qcom: sdm630: fix gpu_speed_bin size arm64: dts: qcom: sdm845-db845c: specify power for WiFi CH1 clk: qcom: dispcc-sdm845: convert to parent data Dmytro Maluka (1): iommu/vt-d: Flush cache for PASID table before using it Douglas Anderson (1): regulator: core: Shorten off-on-delay-us for always-on/boot-on by time since booted Duoming Zhou (2): net: wan: farsync: Fix use-after-free bugs caused by unfinished tasklets atm: fore200e: fix use-after-free in tasklets during device removal Eric Biggers (1): dm-verity: correctly handle dm_bufio_client_create() failure Eric Dumazet (3): tcp: tcp_tx_timestamp() must look at the rtx queue ipv6: fix a race in ip6_sock_set_v6only() macvlan: observe an RCU grace period in macvlan_common_newlink() error path Eric Joyner (1): ionic: Rate limit unknown xcvr type messages Ethan Nelson-Moore (3): net: usb: sr9700: remove code to drive nonexistent multicast filter net: ethernet: marvell: skge: remove incorrect conflicting PCI ID net: intel: fix PCI device ID conflict between i40e and ipw2200 Felix Gu (2): fbdev: au1200fb: Fix a memory leak in au1200fb_drv_probe() pinctrl: equilibrium: Fix device node reference leak in pinbank_init() Fernando Fernandez Mancera (3): netfilter: nf_conncount: make nf_conncount_gc_list() to disable BH netfilter: nf_conncount: increase the connection clean up limit to 64 netfilter: nf_conncount: fix tracking of connections from localhost Filipe Manana (2): btrfs: qgroup: return correct error when deleting qgroup relation item btrfs: fix invalid leaf access in btrfs_quota_enable() if ref key not found Florian Westphal (3): netfilter: nft_set_hash: fix get operation on big endian netfilter: nf_conntrack_h323: don't pass uninitialised l3num value netfilter: xt_tcpmss: check remaining length before reading optlen Francesco Lavra (1): spi: tools: Add include folder to .gitignore Frédéric Danis (1): Bluetooth: l2cap: Check encryption key size on incoming connection Geert Uytterhoeven (1): clk: Move clk_{save,restore}_context() to COMMON_CLK section Geetha sowjanya (1): octeontx2-af: Workaround SQM/PSE stalls by disabling sticky Georgia Garcia (1): apparmor: fix invalid deref of rawdata when export_binary is unset Gerd Rausch (1): net/rds: No shortcut out of RDS_CONN_ERROR Greg Kroah-Hartman (1): Revert "mmc: rtsx_pci_sdmmc: increase power-on settling delay to 5ms" Guenter Roeck (1): Revert "hwmon: (ibmpex) fix use-after-free in high/low store" Gui-Dong Han (2): PM: sleep: wakeirq: harden dev_pm_clear_wake_irq() against races rpmsg: core: fix race in driver_override_show() and use core helper Günther Noack (3): HID: magicmouse: Do not crash on missing msc->input HID: prodikeys: Check presence of pm->input_ep82 HID: logitech-hidpp: Check maxfield in hidpp_get_report_length() Hangbin Liu (1): bonding: alb: fix UAF in rlb_arp_recv during bond up/down Hans Verkuil (4): media: dvb-core: dmxdevfilter must always flush bufs media: omap3isp: isp_video_mbus_to_pix/pix_to_mbus fixes media: omap3isp: isppreview: always clamp in preview_try_format() media: omap3isp: set initial format Haotian Zhang (6): clk: qcom: Return correct error code in qcom_cc_probe_by_index() soc: qcom: cmd-db: Use devm_memremap() to fix memory leak in cmd_db_dev_probe PCI: mediatek: Fix IRQ domain leak when MSI allocation fails power: supply: bq27xxx: fix wrong errno when bus ops are unsupported mfd: arizona: Fix regulator resource leak on wm5102_clear_write_sequencer() failure jfs: Add missing set_freezable() for freezable kthread Haotien Hsu (1): usb: gadget: tegra-xudc: Add handling for BLCG_COREPLL_PWRDN Haoxiang Li (10): media: cx25821: Fix a resource leak in cx25821_dev_setup() media: mtk-mdp: Fix error handling in probe function media: mtk-mdp: Fix a reference leak bug in mtk_mdp_remove() media: cx88: Add missing unmap in snd_cx88_hw_params() media: cx23885: Add missing unmap in snd_cx23885_hw_params() media: cx25821: Add missing unmap in snd_cx25821_hw_params() clk: tegra: tegra124-emc: Fix potential memory leak in tegra124_clk_register_emc() bus: fsl-mc: fix an error handling in fsl_mc_device_add() rapidio: replace rio_free_net() with kfree() in rio_scan_alloc_net() parisc: kernel: replace kfree() with put_device() in create_tree_node() Harshit Mogalapalli (1): iio: sca3000: Fix a resource leak in sca3000_probe() Heiko Carstens (1): s390/purgatory: Add -Wno-default-const-init-unsafe to KBUILD_CFLAGS Helge Deller (1): parisc: Prevent interrupts during reboot Heming Zhao (1): ocfs2: fix reflink preserve cleanup issue Honggang LI (1): RDMA/rtrs: server: remove dead code Hou Wenlong (1): x86/xen/pvh: Enable PAE mode for 32-bit guest only when CONFIG_X86_PAE is set Hsieh Hung-En (1): ASoC: es8328: Add error unwind in resume Håkon Bugge (3): PCI: Do not attempt to set ExtTag for VFs PCI: Initialize RCB from pci_configure_device() net/rds: Clear reconnect pending bit Ian Rogers (1): perf callchain: Fix srcline printing with inlines Ido Schimmel (2): selftests: mlxsw: tc_restrictions: Fix test failure with new iproute2 selftests: forwarding: tc_actions: Use ncat instead of nc Jack Wang (1): md/bitmap: fix GPF in write_page caused by resize race Jacopo Scannella (1): Bluetooth: btusb: Add device ID for Realtek RTL8761BU Jakub Kicinski (1): net: consume xmit errors of GSO frames Jamie Iles (1): i3c: remove i2c board info from i2c_dev_desc Jason Andryuk (1): xenbus: Use .freeze/.thaw to handle xenbus devices Jason Gunthorpe (1): RDMA/efa: Fix typo in efa_alloc_mr() Jeffrey Bencteux (2): audit: add fchmodat2() to change attributes class audit: add missing syscalls to read class Jerome Brunet (4): arm64: dts: amlogic: axg: assign the MMC signal clocks arm64: dts: amlogic: gx: assign the MMC signal clocks arm64: dts: amlogic: g12: assign the MMC B and C signal clocks arm64: dts: amlogic: g12: assign the MMC A signal clock Jiasheng Jiang (1): RDMA/rxe: Fix double free in rxe_srq_from_init Jiaxun Yang (1): MIPS: rb532: Fix MMIO UART resource registration Jiayuan Chen (3): net: atm: fix crash due to unvalidated vcc pointer in sigd_send() serial: caif: fix use-after-free in caif_serial ldisc_close() xfrm6: fix uninitialized saddr in xfrm6_get_saddr() Jinhui Guo (2): iommu/vt-d: Flush dev-IOTLB only when PCIe device is accessible in scalable mode PCI: Fix pci_slot_trylock() error handling Jinliang Zheng (1): procfs: fix missing RCU protection when reading real_parent in do_task_stat() Jinqian Yang (1): arm64: Add support for TSV110 Spectre-BHB mitigation Jiri Pirko (1): RDMA/core: Fix stale RoCE GIDs during netdev events at registration Jisheng Zhang (1): usb: dwc2: fix resume failure if dr_mode is host Johan Hovold (1): soc: ti: k3-socinfo: Fix regmap leak on probe failure Johannes Berg (1): wifi: cfg80211: wext: fix IGTK key ID off-by-one John Efstathiades (3): lan78xx: Remove unused pause frame queue lan78xx: Fix race condition in disconnect handling lan78xx: Fix memory allocation bug John Garry (1): MIPS: Loongson: Make cpumask_of_node() robust against NUMA_NO_NODE John Johansen (2): apparmor: fix NULL sock in aa_sock_file_perm apparmor: fix rlimit for posix cpu timers Johnny-CC Chang (1): PCI: Mark Nvidia GB10 to avoid bus reset Jori Koolstra (2): minix: Add required sanity checking to minix_check_superblock() jfs: nlink overflow in jfs_rename Jun Yan (1): arm64: dts: rockchip: Do not enable hdmi_sound node on Pinebook Pro Justin Chen (1): usb: bdc: fix sleep during atomic Jörg Wedekind (1): PCI: Mark 3ware-9650SA Root Port Extended Tags as broken Kaushlendra Kumar (2): drm/i915/acpi: free _DSM package when no connectors tools/power cpupower: Reset errno before strtoull() Kees Cook (1): media: solo6x10: Check for out of bounds chip_id Keith Busch (1): PCI: Fix pci_slot_lock () device locking Kevin Hao (1): net: cpsw_new: Fix unnecessary netdev unregistration in cpsw_probe() error path Koichiro Den (1): NTB: ntb_transport: Fix too small buffer for debugfs_name Konstantin Andreev (2): smack: /smack/doi must be > 0 smack: /smack/doi: accept previously used values Krishna Chaitanya Chundru (1): PCI: Add ACS quirk for Qualcomm Hamoa & Glymur Krzysztof Kozlowski (1): arm64: dts: qcom: sdm630: correct QFPROM byte offsets Kuniyuki Iwashima (1): ipv4: fib: Annotate access to struct fib_alias.fa_state. Lee Jones (1): RDMA/core: device: Fix formatting in worthy kernel-doc header and demote another Li Chen (2): nvdimm: virtio_pmem: serialize flush requests kexec: derive purgatory entry from symbol Li Nan (1): md/raid10: fix any_working flag handling in raid10_sync_request Li Wang (1): selftests/mm/charge_reserved_hugetlb: drop mount size for hugetlbfs Linus Walleij (2): power: supply: wm97xx_battery: Convert to GPIO descriptor ata: pata_ftide010: Fix some DMA timings Luca Ceresoli (1): drm: of: drm_of_panel_bridge_remove(): fix device_node leak Ludovic Desroches (2): drm/atmel-hlcdc: fix memory leak from the atomic_destroy_state callback drm/atmel-hlcdc: fix use-after-free of drm_crtc_commit after release Luiz Augusto von Dentz (4): Bluetooth: L2CAP: Fix invalid response to L2CAP_ECRED_RECONF_REQ Bluetooth: L2CAP: Fix response to L2CAP_ECRED_CONN_REQ Bluetooth: L2CAP: Fix not checking l2cap_chan security level Bluetooth: L2CAP: Fix missing key size check for L2CAP_LE_CONN_REQ Maciej Grochowski (2): ntb: ntb_hw_switchtec: Fix array-index-out-of-bounds access ntb: ntb_hw_switchtec: Fix shift-out-of-bounds for 0 mw lut Manivannan Sadhasivam (1): PCI: Enable ACS after configuring IOMMU for OF platforms Marcus Folkesson (1): Revert "mfd: da9052-spi: Change read-mask to write-mask" Mario Limonciello (AMD) (1): crypto: ccp - Add an S4 restore flow Mark Brown (1): regulator: Flag uncontrollable regulators as always_on Martin Blumenstingl (1): clk: meson: gxbb: Limit the HDMI PLL OD to /4 on GXL/GXM SoCs Martin Pålsson (1): net: usb: lan78xx: scan all MDIO addresses on LAN7801 Matt Whitlock (1): dm-unstripe: fix mapping bug when there are multiple targets in a table Matthew Schwartz (1): mmc: rtsx_pci_sdmmc: increase power-on settling delay to 5ms Matthias Kaehlcke (1): regulator: core: Use ktime_get_boottime() to determine how long a regulator was off Mauro Carvalho Chehab (3): EFI/CPER: don't dump the entire memory region APEI/GHES: ensure that won't go past CPER allocated record EFI/CPER: don't go past the ARM processor CPER record buffer Md Haris Iqbal (1): rnbd-srv: Zero the rsp buffer before using it Michael Liang (1): dm: clear cloned request bio pointer when last clone bio completes Mikulas Patocka (1): dm-integrity: fix a typo in the code for write/discard race Mingj Ye (1): net: usb: r8152: fix transmit queue timeout Miri Korenblit (1): wifi: cfg80211: stop NAN and P2P in cfg80211_leave Moteen Shah (1): serial: 8250: 8250_omap.c: Clear DMA RX running status only after DMA termination is done Narayana Murty N (1): powerpc/eeh: fix recursive pci_lock_rescan_remove locking in EEH event handling Niklas Schnelle (2): Revert "PCI/IOV: Add PCI rescan-remove locking when enabling/disabling SR-IOV" PCI/IOV: Fix race between SR-IOV enable/disable and hotplug Niklas Söderlund (1): clocksource/drivers/sh_tmu: Always leave device running after probe Nuno Sá (1): dma: dma-axi-dmac: fix SW cyclic transfers Olga Kornievskaia (1): pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN Oliver Neukum (2): usbb: catc: use correct API for MAC addresses HID: hid-pl: handle probe errors Ondrej Mosnacek (1): ucount: check for CAP_SYS_RESOURCE using ns_capable_noaudit() Otto Pflüger (1): mailbox: sprd: clear delivery flag before handling TX done Pablo Neira Ayuso (1): netfilter: nft_set_rbtree: check for partial overlaps in anonymous sets Paul Cercueil (2): PM: core: Redefine pm_ptr() macro PM: core: Add new *_PM_OPS macros, deprecate old ones Petr Hodina (1): clk: qcom: dispcc-sdm845: Enable parents for pixel clocks Phil Sutter (1): include: uapi: netfilter_bridge.h: Cover for musl libc Qing Wang (1): ovl: Fix uninit-value in ovl_fill_real Randy Dunlap (2): serial: imx: change SERIAL_IMX_CONSOLE to bool serial: SH_SCI: improve "DMA support" prompt Renjiang Han (1): media: venus: vdec: fix error state assignment for zero bytesused René Rebe (3): modpost: Amend ppc64 save/restfpr symnames for -Os build fix it87_wdt early reboot by reporting running timer fbdev: ffb: fix corrupted video output on Sun FFB1 Rui Feng (1): misc: rtsx: Add SD Express mode support for RTS5261 Ruipeng Qi (1): pstore: ram_core: fix incorrect success return when vmap() fails Sai Ritvik Tanksalkar (1): pstore/ram: fix buffer overflow in persistent_ram_save_old() Salah Triki (1): s390/cio: Fix device lifecycle handling in css_alloc_subchannel() Sam James (1): sparc: don't reference obsolete termio struct for TC* constants Samuel Wu (1): PM: wakeup: Handle empty list in wakeup_sources_walk_start() Sasha Levin (1): Linux 5.10.252-rc2 Sebastian Andrzej Siewior (4): EDAC/altera: Remove IRQF_ONESHOT mfd: wm8350-core: Use IRQF_ONESHOT mailbox: bcm-ferxrm-mailbox: Use default primary handler iio: magnetometer: Remove IRQF_ONESHOT Sebastian Krzyszkowiak (2): ASoC: wm8962: Add WM8962_ADC_MONOMIX to "3D Coefficients" mask ASoC: wm8962: Don't report a microphone if it's shorted to ground on plug Shardul Bankar (1): hfsplus: return error when node already exists in hfs_bnode_create Shaurya Rane (1): media: radio-keene: fix memory leak in error path Srinivasan Shanmugam (1): drm/amdgpu: Use explicit VCN instance 0 in SR-IOV init Stefan Sørensen (1): Bluetooth: hci_conn: use mod_delayed_work for active mode timeout Steven Rostedt (1): tracing: Remove duplicate ENABLE_EVENT_STR and DISABLE_EVENT_STR macros Sunday Clement (1): drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() Svyatoslav Ryhel (1): drivers: iio: mpu3050: use dev_err_probe for regulator request Szymon Wilczek (2): media: pvrusb2: fix URB leak in pvr2_send_request_ex wifi: libertas: fix WARNING in usb_tx_block Tetsuo Handa (1): hfsplus: pretend special inodes as regular files Thadeu Lima de Souza Cascardo (1): fpga: dfl: use subsys_initcall to allow built-in drivers to be added Thomas Bogendoerfer (1): bonding: only set speed/duplex to unknown, if getting speed failed Thomas Fourier (6): auxdisplay: arm-charlcd: fix release_mem_region() size crypto: cavium - fix dma_free_coherent() size crypto: octeontx - fix dma_free_coherent() size net: wan/fsl_ucc_hdlc: Fix dma_free_coherent() in uhdlc_memclean() fbdev: vt8500lcdfb: fix missing dma_free_coherent() net: ethernet: ec_bhf: Fix dma_free_coherent() dma handle Thomas Gleixner (1): hrtimer: Fix trace oddity Thomas Richter (1): s390/perf: Disable register readout on sampling events Thomas Weissschuh (1): ARM: 9467/1: mm: Don't use %pK through printk Thomas Weißschuh (4): ARM: VDSO: Patch out __vdso_clock_getres() if unavailable hyper-v: Mark inner union in hv_kvp_exchg_msg_value as packed virt: vbox: uapi: Mark inner unions in packed structs as packed binder: don't use %pK through printk Thorsten Schmelzer (2): media: adv7180: fix frame interval in progressive mode HID: multitouch: add eGalaxTouch EXC3188 support Tzung-Bi Shih (1): platform/chrome: cros_ec_lightbar: Fix response size initialization Ulf Hansson (1): mmc: core: Initial support for SD express card/host Uwe Kleine-König (1): PCI/portdrv: Fix potential resource leak Vahagn Vardanian (1): netfilter: nf_conntrack_h323: fix OOB read in decode_choice() Viacheslav Dubeyko (1): hfsplus: fix volume corruption issue for generic/498 Vincent Whitchurch (2): regulator: core: Respect off_on_delay at startup regulator: core: Fix off_on_delay handling Vladimir Zapolskiy (2): ARM: dts: lpc32xx: Set motor PWM #pwm-cells property value to 3 cells arm: dts: lpc32xx: add clocks property to Motor Control PWM device tree node Vlastimil Babka (1): mm, page_alloc, thp: prevent reclaim for __GFP_THISNODE THP allocations Waqar Hameed (7): power: supply: act8945a: Fix use-after-free in power_supply_changed() power: supply: bq25980: Fix use-after-free in power_supply_changed() power: supply: cpcap-battery: Fix use-after-free in power_supply_changed() power: supply: goldfish: Fix use-after-free in power_supply_changed() power: supply: rt9455: Fix use-after-free in power_supply_changed() power: supply: sbs-battery: Fix use-after-free in power_supply_changed() power: supply: wm97xx: Fix NULL pointer dereference in power_supply_changed() Wayne Lin (1): drm/amd/display: Avoid updating surface with the same surface under MPO Wei Li (1): pinctrl: single: fix refcount leak in pcs_add_gpio_func() Weigang He (1): fbdev: of: display_timing: fix refcount leak in of_get_display_timings() Wentao Liang (1): soc: ti: pruss: Fix double free in pruss_clk_mux_setup() Xiao Kan (1): drm: Account property blob allocations to memcg Xu Yang (1): phy: fsl-imx8mq-usb: disable bind/unbind platform driver feature Yao Zi (1): MIPS: Work around LLVM bug when gp is used as global register variable Yi Liu (2): RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send RDMA/uverbs: Add __GFP_NOWARN to ib_uverbs_unmarshall_recv() kmalloc Yu Kuai (1): blk-mq-debugfs: add missing debugfs_mutex in blk_mq_debugfs_register_hctxs() YunJe Shin (2): RDMA/siw: Fix potential NULL pointer dereference in header processing RDMA/umad: Reject negative data_len in ib_umad_write Yuto Hamaguchi (1): netfilter: nf_conntrack: Add allow_clash to generic protocol handler Zhang Yi (1): ext4: don't cache extent during splitting extent Zhiyu Zhang (1): fat: avoid parent link count underflow in rmdir Zilin Guan (1): ext4: fix memory leak in ext4_ext_shift_extents() Ziyi Guo (8): wifi: ath10k: sdio: add missing lock protection in ath10k_sdio_fw_crashed_dump() net: usb: catc: enable basic endpoint checking xen-netback: reject zero-queue configuration from guest wifi: iwlegacy: add missing mutex protection in il4965_store_tx_power() wifi: iwlegacy: add missing mutex protection in il3945_store_measurement() wifi: ath10k: fix lock protection in ath10k_wmi_event_peer_sta_ps_state_chg() net: usb: kaweth: remove TX queue manipulation in kaweth_set_rx_mode net: usb: pegasus: enable basic endpoint checking decce6 (2): drm/amdgpu: Add HAINAN clock adjustment drm/radeon: Add HAINAN clock adjustment ethanwu (1): ceph: supply snapshot context in ceph_zero_partial_object() jinbaohong (1): btrfs: continue trimming remaining devices on failure Makefile | 4 +- arch/arm/boot/dts/lpc32xx.dtsi | 3 +- arch/arm/boot/dts/sun5i-a13-utoo-p66.dts | 1 + arch/arm/kernel/vdso.c | 1 + arch/arm/mach-pxa/mioa701.c | 1 - arch/arm/mach-pxa/palm27x.c | 1 - arch/arm/mach-pxa/palmte2.c | 1 - arch/arm/mm/physaddr.c | 2 +- arch/arm64/boot/dts/amlogic/meson-axg.dtsi | 6 + .../boot/dts/amlogic/meson-g12-common.dtsi | 9 + arch/arm64/boot/dts/amlogic/meson-gxbb.dtsi | 9 + arch/arm64/boot/dts/amlogic/meson-gxl.dtsi | 9 + arch/arm64/boot/dts/nvidia/tegra210-smaug.dts | 2 + arch/arm64/boot/dts/qcom/sdm630.dtsi | 10 + arch/arm64/boot/dts/qcom/sdm845-db845c.dts | 7 + .../boot/dts/rockchip/rk3399-pinebook-pro.dts | 4 - arch/arm64/kernel/proton-pack.c | 1 + arch/m68k/lib/memmove.c | 18 ++ .../include/asm/mach-loongson64/topology.h | 2 +- arch/mips/kernel/relocate.c | 13 + arch/mips/rb532/devices.c | 5 +- arch/openrisc/include/asm/barrier.h | 2 + arch/parisc/kernel/drivers.c | 2 +- arch/parisc/kernel/process.c | 3 + arch/powerpc/include/asm/eeh.h | 2 + arch/powerpc/kernel/eeh_driver.c | 11 +- arch/powerpc/kernel/eeh_pe.c | 74 +++++- arch/s390/kernel/perf_cpum_sf.c | 2 +- arch/s390/purgatory/Makefile | 1 + arch/sparc/include/uapi/asm/ioctls.h | 8 +- arch/sparc/kernel/process.c | 38 +-- arch/x86/platform/pvh/head.S | 2 + block/blk-mq-debugfs.c | 2 + drivers/acpi/acpica/exoparg3.c | 46 ++-- drivers/acpi/apei/ghes.c | 6 +- drivers/android/binder.c | 2 +- drivers/android/binder_alloc.c | 6 +- drivers/ata/pata_ftide010.c | 6 +- drivers/atm/fore200e.c | 4 + drivers/auxdisplay/arm-charlcd.c | 2 +- drivers/base/power/wakeirq.c | 9 +- drivers/base/power/wakeup.c | 4 +- drivers/block/rnbd/rnbd-srv.c | 3 + drivers/bluetooth/btusb.c | 1 + drivers/bus/fsl-mc/fsl-mc-bus.c | 6 +- drivers/char/tpm/st33zp24/st33zp24.c | 6 +- drivers/char/tpm/tpm_i2c_infineon.c | 6 +- drivers/clk/meson/gxbb.c | 17 +- drivers/clk/microchip/clk-core.c | 25 +- drivers/clk/qcom/common.c | 2 +- drivers/clk/qcom/dispcc-sdm845.c | 220 ++++++++--------- drivers/clk/tegra/clk-tegra124-emc.c | 4 +- drivers/clocksource/Kconfig | 1 + drivers/clocksource/sh_tmu.c | 18 -- drivers/cpuidle/cpuidle.c | 10 + drivers/crypto/cavium/cpt/cptvf_main.c | 3 +- drivers/crypto/ccp/psp-dev.c | 11 + drivers/crypto/ccp/sp-dev.c | 12 + drivers/crypto/ccp/sp-dev.h | 3 + drivers/crypto/ccp/sp-pci.c | 16 +- drivers/crypto/ccp/tee-dev.c | 5 + drivers/crypto/ccp/tee-dev.h | 1 + .../crypto/marvell/octeontx/otx_cptvf_main.c | 3 +- drivers/dma/dma-axi-dmac.c | 3 +- drivers/dma/mediatek/mtk-uart-apdma.c | 10 +- drivers/edac/altera_edac.c | 11 +- drivers/edac/i5000_edac.c | 1 + drivers/edac/i5400_edac.c | 2 +- drivers/firmware/efi/cper-arm.c | 12 +- drivers/firmware/efi/cper.c | 8 +- drivers/fpga/dfl.c | 2 +- drivers/gpio/gpio-aspeed-sgpio.c | 5 +- drivers/gpu/drm/amd/amdgpu/amdgpu_gmc.c | 10 + drivers/gpu/drm/amd/amdgpu/vcn_v2_0.c | 45 ++-- drivers/gpu/drm/amd/amdkfd/kfd_events.c | 6 + .../gpu/drm/amd/display/amdgpu_dm/amdgpu_dm.c | 2 +- drivers/gpu/drm/amd/pm/powerplay/si_dpm.c | 5 + .../gpu/drm/atmel-hlcdc/atmel_hlcdc_plane.c | 6 +- drivers/gpu/drm/drm_property.c | 2 +- drivers/gpu/drm/i915/display/intel_acpi.c | 1 + drivers/gpu/drm/radeon/si_dpm.c | 5 + drivers/hid/hid-ids.h | 1 + drivers/hid/hid-logitech-hidpp.c | 2 +- drivers/hid/hid-magicmouse.c | 5 + drivers/hid/hid-multitouch.c | 3 + drivers/hid/hid-pl.c | 7 +- drivers/hid/hid-prodikeys.c | 4 + drivers/hwmon/ibmpex.c | 9 +- .../coresight/coresight-etm3x-core.c | 12 +- drivers/i3c/master.c | 21 +- drivers/iio/accel/sca3000.c | 6 +- drivers/iio/gyro/itg3200_core.c | 2 + drivers/iio/gyro/mpu3050-core.c | 6 +- drivers/iio/magnetometer/ak8975.c | 2 +- drivers/infiniband/core/cache.c | 13 + drivers/infiniband/core/core_priv.h | 3 + drivers/infiniband/core/device.c | 40 ++- drivers/infiniband/core/rw.c | 53 ++-- drivers/infiniband/core/user_mad.c | 8 +- drivers/infiniband/core/uverbs_cmd.c | 7 +- drivers/infiniband/hw/efa/efa_verbs.c | 2 +- drivers/infiniband/sw/rxe/rxe_srq.c | 3 + drivers/infiniband/sw/siw/siw_qp_rx.c | 3 +- drivers/infiniband/ulp/rtrs/rtrs-srv.c | 8 +- drivers/iommu/arm/arm-smmu-v3/arm-smmu-v3.c | 31 ++- drivers/iommu/intel/pasid.c | 9 +- drivers/mailbox/bcm-flexrm-mailbox.c | 14 +- drivers/mailbox/sprd-mailbox.c | 10 +- drivers/md/dm-integrity.c | 2 +- drivers/md/dm-mpath.c | 2 +- drivers/md/dm-rq.c | 16 +- drivers/md/dm-unstripe.c | 2 +- drivers/md/dm-verity-fec.c | 4 +- drivers/md/md-bitmap.c | 3 +- drivers/md/raid10.c | 2 +- drivers/media/dvb-core/dmxdev.c | 8 +- drivers/media/dvb-core/dvb_vb2.c | 5 +- drivers/media/i2c/adv7180.c | 7 + drivers/media/i2c/tw9903.c | 1 + drivers/media/i2c/tw9906.c | 1 + drivers/media/pci/cx23885/cx23885-alsa.c | 4 +- drivers/media/pci/cx25821/cx25821-alsa.c | 1 + drivers/media/pci/cx25821/cx25821-core.c | 1 + drivers/media/pci/cx88/cx88-alsa.c | 4 +- drivers/media/pci/solo6x10/solo6x10-tw28.c | 8 +- drivers/media/platform/mtk-mdp/mtk_mdp_core.c | 17 +- drivers/media/platform/omap3isp/isppreview.c | 21 +- drivers/media/platform/omap3isp/ispvideo.c | 14 +- drivers/media/platform/qcom/venus/vdec.c | 6 +- drivers/media/radio/radio-keene.c | 2 +- drivers/media/usb/pvrusb2/pvrusb2-hdw.c | 5 + drivers/mfd/arizona-core.c | 2 +- drivers/mfd/da9052-spi.c | 2 +- drivers/misc/cardreader/rts5261.c | 4 + drivers/misc/cardreader/rts5261.h | 23 -- drivers/misc/cardreader/rtsx_pcr.c | 5 + drivers/mmc/core/core.c | 15 +- drivers/mmc/core/host.h | 6 + drivers/mmc/core/sd_ops.c | 49 +++- drivers/mmc/core/sd_ops.h | 1 + .../mtd/nand/raw/cadence-nand-controller.c | 2 +- drivers/net/bonding/bond_main.c | 21 +- drivers/net/caif/caif_serial.c | 5 +- drivers/net/ethernet/ec_bhf.c | 2 +- drivers/net/ethernet/intel/i40e/i40e_main.c | 8 +- .../net/ethernet/marvell/octeontx2/af/rvu.c | 11 + .../ethernet/marvell/octeontx2/af/rvu_nix.c | 12 +- drivers/net/ethernet/marvell/skge.c | 1 - .../net/ethernet/myricom/myri10ge/myri10ge.c | 28 ++- .../ethernet/pensando/ionic/ionic_ethtool.c | 7 +- drivers/net/ethernet/ti/cpsw_new.c | 12 +- drivers/net/macvlan.c | 5 + drivers/net/usb/Kconfig | 1 - drivers/net/usb/catc.c | 59 ++++- drivers/net/usb/kaweth.c | 2 - drivers/net/usb/lan78xx.c | 115 ++++++--- drivers/net/usb/pegasus.c | 35 ++- drivers/net/usb/r8152.c | 2 + drivers/net/usb/sr9700.c | 25 +- drivers/net/usb/sr9700.h | 7 +- drivers/net/wan/farsync.c | 2 + drivers/net/wan/fsl_ucc_hdlc.c | 8 +- drivers/net/wireless/ath/ath10k/sdio.c | 6 + drivers/net/wireless/ath/ath10k/wmi.c | 4 +- drivers/net/wireless/intel/ipw2x00/ipw2200.c | 8 +- .../net/wireless/intel/iwlegacy/3945-mac.c | 2 + .../net/wireless/intel/iwlegacy/4965-mac.c | 2 + .../net/wireless/marvell/libertas/if_usb.c | 2 + drivers/net/xen-netback/xenbus.c | 5 +- drivers/nfc/nxp-nci/i2c.c | 2 +- drivers/ntb/hw/mscc/ntb_hw_switchtec.c | 12 +- drivers/ntb/ntb_transport.c | 4 +- drivers/nvdimm/nd_virtio.c | 3 +- drivers/nvdimm/virtio_pmem.c | 1 + drivers/nvdimm/virtio_pmem.h | 4 + drivers/pci/controller/pcie-mediatek.c | 4 +- drivers/pci/iov.c | 9 +- drivers/pci/pci-driver.c | 8 + drivers/pci/pci.c | 37 +-- drivers/pci/pci.h | 1 + drivers/pci/pcie/portdrv_core.c | 6 +- drivers/pci/probe.c | 35 ++- drivers/pci/quirks.c | 23 ++ drivers/phy/freescale/phy-fsl-imx8mq-usb.c | 1 + drivers/pinctrl/pinctrl-equilibrium.c | 1 + drivers/pinctrl/pinctrl-single.c | 2 + drivers/platform/chrome/cros_ec_lightbar.c | 2 +- drivers/power/reset/nvmem-reboot-mode.c | 15 +- drivers/power/supply/act8945a_charger.c | 16 +- drivers/power/supply/bq25980_charger.c | 12 +- drivers/power/supply/bq27xxx_battery.c | 6 +- drivers/power/supply/cpcap-battery.c | 8 +- drivers/power/supply/goldfish_battery.c | 12 +- drivers/power/supply/rt9455_charger.c | 17 +- drivers/power/supply/sbs-battery.c | 36 +-- drivers/power/supply/wm97xx_battery.c | 69 +++--- drivers/rapidio/rio-scan.c | 3 +- drivers/regulator/core.c | 68 +++--- drivers/rpmsg/rpmsg_core.c | 66 +++-- drivers/rtc/interface.c | 2 +- drivers/s390/cio/css.c | 2 +- drivers/scsi/csiostor/csio_scsi.c | 3 +- drivers/soc/qcom/cmd-db.c | 7 +- drivers/soc/ti/k3-socinfo.c | 2 +- drivers/soc/ti/pruss.c | 6 +- drivers/spi/spi-mem.c | 11 +- drivers/staging/greybus/light.c | 8 +- drivers/tty/serial/8250/8250_dw.c | 11 +- drivers/tty/serial/8250/8250_omap.c | 2 +- drivers/tty/serial/Kconfig | 8 +- drivers/usb/dwc2/core.c | 1 + drivers/usb/gadget/udc/bdc/bdc_core.c | 4 +- drivers/usb/gadget/udc/tegra-xudc.c | 12 +- drivers/video/fbdev/au1200fb.c | 6 +- drivers/video/fbdev/ffb.c | 14 +- drivers/video/fbdev/vt8500lcdfb.c | 5 +- drivers/video/of_display_timing.c | 4 +- drivers/watchdog/it87_wdt.c | 12 + drivers/xen/xenbus/xenbus_probe_frontend.c | 4 +- fs/btrfs/extent-tree.c | 2 +- fs/btrfs/qgroup.c | 15 +- fs/ceph/file.c | 17 +- fs/ext4/extents.c | 9 +- fs/fat/namei_msdos.c | 7 +- fs/fat/namei_vfat.c | 7 +- fs/fs_struct.c | 1 + fs/gfs2/bmap.c | 227 +++++++----------- fs/gfs2/bmap.h | 13 +- fs/gfs2/dir.c | 13 +- fs/gfs2/file.c | 59 ++++- fs/gfs2/log.c | 6 +- fs/gfs2/quota.c | 4 +- fs/gfs2/recovery.c | 4 +- fs/hfsplus/bnode.c | 2 +- fs/hfsplus/inode.c | 12 +- fs/hfsplus/super.c | 6 + fs/iomap/direct-io.c | 10 +- fs/jfs/jfs_logmgr.c | 1 + fs/jfs/namei.c | 6 +- fs/minix/inode.c | 50 ++-- fs/nfs/pnfs.c | 3 +- fs/nfsd/nfs4idmap.c | 52 +++- fs/nfsd/nfs4proc.c | 2 - fs/nfsd/nfs4xdr.c | 16 ++ fs/ocfs2/xattr.c | 4 + fs/overlayfs/readdir.c | 2 +- fs/proc/array.c | 2 +- fs/pstore/ram_core.c | 18 ++ fs/xfs/libxfs/xfs_attr_leaf.c | 49 +++- fs/xfs/scrub/attr.c | 5 +- fs/xfs/scrub/btree.c | 2 + fs/xfs/scrub/common.c | 4 + fs/xfs/scrub/dabtree.c | 2 + include/acpi/ghes.h | 1 + include/asm-generic/audit_change_attr.h | 3 + include/asm-generic/audit_read.h | 6 + include/drm/drm_of.h | 3 + include/linux/clk.h | 48 ++-- include/linux/cper.h | 3 +- include/linux/i3c/master.h | 1 - include/linux/mfd/wm8350/core.h | 2 +- include/linux/mmc/host.h | 7 + include/linux/pm.h | 80 +++--- include/linux/regulator/driver.h | 2 +- include/linux/rtsx_pci.h | 23 ++ include/linux/sunrpc/svc_rdma.h | 2 + include/linux/wm97xx.h | 1 - include/media/dvb_vb2.h | 6 +- include/net/bluetooth/l2cap.h | 2 + include/net/ipv6.h | 11 +- include/net/netfilter/nf_conntrack_count.h | 1 + include/rdma/ib_verbs.h | 2 +- include/rdma/rw.h | 2 + include/uapi/linux/hyperv.h | 2 +- include/uapi/linux/netfilter_bridge.h | 4 + include/uapi/linux/vbox_vmmdev_types.h | 4 +- kernel/bpf/verifier.c | 18 +- kernel/kexec_file.c | 131 +++++----- kernel/sched/rt.c | 5 + kernel/time/hrtimer.c | 2 +- kernel/trace/trace_events.c | 5 - kernel/ucount.c | 2 +- mm/page_alloc.c | 14 ++ net/atm/signaling.c | 56 ++++- net/bluetooth/hci_conn.c | 4 +- net/bluetooth/l2cap_core.c | 95 ++++++-- net/core/dev.c | 23 +- net/ipv4/fib_lookup.h | 6 +- net/ipv4/fib_trie.c | 4 +- net/ipv4/tcp.c | 3 + net/ipv6/xfrm6_policy.c | 7 +- net/netfilter/nf_conncount.c | 54 +++-- net/netfilter/nf_conntrack_h323_asn1.c | 2 +- net/netfilter/nf_conntrack_h323_main.c | 10 +- net/netfilter/nf_conntrack_proto_generic.c | 1 + net/netfilter/nft_connlimit.c | 7 +- net/netfilter/nft_set_hash.c | 9 +- net/netfilter/nft_set_rbtree.c | 30 ++- net/netfilter/xt_tcpmss.c | 2 +- net/rds/connection.c | 4 + net/rds/send.c | 6 +- net/rds/tcp_listen.c | 5 - net/sunrpc/auth_gss/auth_gss.c | 3 + net/sunrpc/auth_gss/gss_rpc_xdr.c | 82 +++++-- net/sunrpc/xprtrdma/svc_rdma_recvfrom.c | 89 ++++--- net/sunrpc/xprtrdma/svc_rdma_transport.c | 46 ++-- net/tipc/crypto.c | 2 +- net/vmw_vsock/vmci_transport.c | 2 +- net/wireless/core.c | 4 +- net/wireless/wext-compat.c | 2 +- scripts/mod/modpost.c | 4 + security/apparmor/apparmorfs.c | 9 + security/apparmor/net.c | 6 +- security/apparmor/resource.c | 5 + security/smack/smackfs.c | 79 +++--- sound/soc/codecs/es8328.c | 10 +- sound/soc/codecs/wm8962.c | 12 +- tools/perf/util/evsel_fprintf.c | 8 +- tools/power/cpupower/lib/cpuidle.c | 1 + tools/spi/.gitignore | 1 + .../drivers/net/mlxsw/tc_restrictions.sh | 4 +- .../selftests/net/forwarding/tc_actions.sh | 18 +- .../net/forwarding/vxlan_bridge_1d.sh | 26 +- .../selftests/vm/charge_reserved_hugetlb.sh | 4 +- 324 files changed, 2762 insertions(+), 1391 deletions(-) -- 2.51.0

4 days, 17 hours

本業そのまま。社員1人で年商1億

by 石嶋紗季

　新規事業をお探しの経営者様・事業オーナー様へ　〜“仕入れた瞬間に利益が確定する” 　　ユニークなビジネスモデルをご存じでしょうか〜　買取大吉だけの買取システムをご紹介する　30分セミナーのご案内です。　　　この事業は、今いる社員1人で、1日5人の来店なのに　売上1億超を狙えます。　　在庫リスクをほぼゼロに抑えて　スタートできるため、　業界未経験でも成功の再現性が高いモデルです。　　ぜひこの機会に買取ビジネスの　儲けのカラクリをご確認ください。 ------------------------------- FCオンライン説明会 ------ 　全国1,700店舗突破！10年間の店舗継続率96.4％　　　　 “買取専門”だからこそ可能になる　　　　低リスク × 高収益のビジネスモデル　　　　　　＜視聴予約はこちら＞　　　https://fc-daikichi-kaitori.biz/26/ 　提供：株式会社エンパワー（買取大吉FC本部）　日程：　3月27日（金）14:00-14:30　残り4枠　　　　　4月16日（木）14:00-14:30 　　　　　4月23日（木）14:00-14:30 　　　　　※内容は同じです。 --------------------------------------------------------- 　◇ 説明会コンテンツ　・仕入れた瞬間に利益確定の仕組み　・リサイクル店との“本質的な違い” 　・未経験でも査定できる仕組み　・メルカリ、ヤフオクとの競争優位性　・新規事業としての収益性／リスク／継続性　◇ 在庫・価格変動・資金不足の“三大リスク”を排除　一般的なリユース事業は、仕入れ後、販売まで在庫を抱えるため、　　・在庫リスク　　・価格変動リスク　　・資金不足リスク　この3つが避けられません。　　しかし、買取大吉の“買取専門”モデルはここを完全に断ち切ることで　「買い取り＝利益確定」が成立します。　少人数・小スペースで成立するため、　全国1,700店舗まで拡大する、高い収益性と継続性を実証しています。　◇ 市場は伸び続け、しかし店舗は不足しています　リユース市場は拡大を続けていますが、　その需要に対して店舗数が追いついていないのが現状です。　今回の説明会では、儲けのカラクリ・収益性・リスク構造・継続性について　オーナー視点で実例に基づいて解説いたします。　　新規事業の立ち上げをご検討中の方は、　ぜひご視聴ください。　　▼ 詳細はこちら　https://fc-daikichi-kaitori.biz/26/ 　 ━━━━━━━━━━━━━━━━━━━━━━ フランチャイズセミナー運営事務局電話：0120-889-859 住所：東京都中央区銀座7-13-6 ━━━━━━━━━━━━━━━━━━━━━━ 今後ご案内が不要な方は下記にてお手続きをお願いいたします。 https://fc-daikichi-kaitori.biz/mail/ ━━━━━━━━━━━━━━━━━━━━━━

5 days, 4 hours

[PATCH 6.6 000/567] 6.6.130-rc1 review

by Greg Kroah-Hartman

This is the start of the stable review cycle for the 6.6.130 release. There are 567 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know. Responses should be made by Wed, 25 Mar 2026 13:44:33 +0000. Anything received after that time might be too late. The whole patch series can be found in one patch at: https://www.kernel.org/pub/linux/kernel/v6.x/stable-review/patch-6.6.130-rc… or in the git tree and branch at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-6.6.y and the diffstat can be found below. thanks, greg k-h ------------- Pseudo-Shortlog of commits: Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> Linux 6.6.130-rc1 Josh Law <objecting(a)objecting.org> tools/bootconfig: fix fd leak in load_xbc_file() on fstat failure Josh Law <objecting(a)objecting.org> lib/bootconfig: check xbc_init_node() return in override path Rahul Bukte <rahul.bukte(a)sony.com> drm/i915/gt: Check set_default_submission() before deferencing Hyunwoo Kim <imv4bel(a)gmail.com> ksmbd: fix use-after-free in durable v2 replay of active file handles Hyunwoo Kim <imv4bel(a)gmail.com> ksmbd: fix use-after-free of share_conf in compound request Srinivasan Shanmugam <srinivasan.shanmugam(a)amd.com> drm/amd/display: Fix DisplayID not-found handling in parse_edid_displayid_vrr() Kamal Dasu <kamal.dasu(a)broadcom.com> mtd: rawnand: brcmnand: skip DMA during panic write Kamal Dasu <kamal.dasu(a)broadcom.com> mtd: rawnand: serialize lock/unlock against other NAND operations Johan Hovold <johan(a)kernel.org> i2c: cp2615: fix serial string NULL-deref at probe Justin Stitt <justinstitt(a)google.com> i2c: cp2615: replace deprecated strncpy with strscpy Florian Westphal <fw(a)strlen.de> netfilter: nft_set_pipapo: split gc into unlink and reclaim phase Kyle Meyer <kyle.meyer(a)hpe.com> x86/platform/uv: Handle deconfigured sockets Gabor Juhos <j4g8y7(a)gmail.com> i2c: pxa: defer reset on Armada 3700 when recovery is used Christophe JAILLET <christophe.jaillet(a)wanadoo.fr> i2c: fsi: Fix a potential leak in fsi_i2c_probe() Ji-Ze Hong (Peter Hong) <peter_hong(a)fintek.com.tw> USB: serial: f81232: fix incomplete serial port generation Luiz Augusto von Dentz <luiz.von.dentz(a)intel.com> Bluetooth: L2CAP: Fix accepting multiple L2CAP_ECRED_CONN_REQ Maarten Lankhorst <dev(a)lankhorst.se> drm: Fix use-after-free on framebuffers and property blobs when calling drm_dev_unplug Sanman Pradhan <psanman(a)juniper.net> hwmon: (pmbus/isl68137) Fix unchecked return value and use sysfs_emit() Sanman Pradhan <psanman(a)juniper.net> hwmon: (pmbus/mp2975) Add error check for pmbus_read_word_data() return value Weiming Shi <bestswngs(a)gmail.com> icmp: fix NULL pointer dereference in icmp_tag_validation() Anas Iqbal <mohd.abd.6602(a)gmail.com> net: dsa: bcm_sf2: fix missing clk_disable_unprepare() in error paths Muhammad Hammad Ijaz <mhijaz(a)amazon.com> net: mvpp2: guard flow control update with global_tx_fc in buffer switching Weiming Shi <bestswngs(a)gmail.com> nfnetlink_osf: validate individual option lengths in fingerprints Pablo Neira Ayuso <pablo(a)netfilter.org> netfilter: nf_tables: release flowtable after rcu grace period on error Florian Westphal <fw(a)strlen.de> netfilter: bpf: defer hook memory release until rcu readers are done Xiang Mei <xmei5(a)asu.edu> net: bonding: fix NULL deref in bond_debug_rlb_hash_show Xiang Mei <xmei5(a)asu.edu> udp_tunnel: fix NULL deref caused by udp_sock_create6 when CONFIG_IPV6=n Jianbo Liu <jianbol(a)nvidia.com> net/mlx5e: Fix race condition during IPSec ESN update Jianbo Liu <jianbol(a)nvidia.com> net/mlx5e: Prevent concurrent access to IPSec ASO context Cosmin Ratiu <cratiu(a)nvidia.com> net/mlx5: qos: Restrict RTNL area to avoid a lock cycle Fedor Pchelkin <pchelkin(a)ispras.ru> net: macb: fix uninitialized rx_fs_lock Rafael J. Wysocki <rafael.j.wysocki(a)intel.com> ACPI: processor: Fix previous acpi_processor_errata_piix4() fix Guenter Roeck <linux(a)roeck-us.net> wifi: wlcore: Return -ENOMEM instead of -EAGAIN if there is not enough headroom Xiang Mei <xmei5(a)asu.edu> wifi: mac80211: fix NULL deref in mesh_matches_local() Petr Oros <poros(a)redhat.com> iavf: fix VLAN filter lost on add/delete race Kohei Enju <kohei(a)enjuk.jp> igc: fix missing update of skb->tail in igc_xmit_frame() Nikola Z. Ivanov <zlatistiv(a)gmail.com> net: usb: aqc111: Do not perform PM inside suspend callback Daniel Borkmann <daniel(a)iogearbox.net> clsact: Fix use-after-free in init/destroy rollback asymmetry Tobi Gaertner <tob.gaertner(a)me.com> net: usb: cdc_ncm: add ndpoffset to NDP32 nframes bounds check Tobi Gaertner <tob.gaertner(a)me.com> net: usb: cdc_ncm: add ndpoffset to NDP16 nframes bounds check Jamal Hadi Salim <jhs(a)mojatatu.com> net/sched: teql: Fix double-free in teql_master_xmit Jiayuan Chen <jiayuan.chen(a)shopee.com> net/smc: fix NULL dereference and UAF in smc_tcp_syn_recv_sock() Bart Van Assche <bvanassche(a)acm.org> PM: runtime: Fix a race condition related to device removal Rafael J. Wysocki <rafael.j.wysocki(a)intel.com> sched: idle: Consolidate the handling of two special cases Dipayaan Roy <dipayanroy(a)linux.microsoft.com> net: mana: fix use-after-free in mana_hwc_destroy_channel() by reordering teardown Justin Chen <justin.chen(a)broadcom.com> net: bcmgenet: increase WoL poll timeout Jenny Guanni Qu <qguanni(a)gmail.com> netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() Jenny Guanni Qu <qguanni(a)gmail.com> netfilter: xt_time: use unsigned int for monthday bit shift Pablo Neira Ayuso <pablo(a)netfilter.org> netfilter: xt_CT: drop pending enqueued packets on template removal Pablo Neira Ayuso <pablo(a)netfilter.org> netfilter: nft_ct: drop pending enqueued packets on removal Andrii Melnychenko <a.melnychenko(a)vyos.io> netfilter: nft_ct: add seqadj extension for natted connections Jenny Guanni Qu <qguanni(a)gmail.com> netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case Lukas Johannes Möller <research(a)johannes-moeller.dev> netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() Hyunwoo Kim <imv4bel(a)gmail.com> netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() Florian Westphal <fw(a)strlen.de> netfilter: ctnetlink: remove refcounting in expectation dumpers Sabrina Dubroca <sd(a)queasysnail.net> mpls: add missing unregister_netdevice_notifier to mpls_init Jiayuan Chen <jiayuan.chen(a)shopee.com> net/rose: fix NULL pointer dereference in rose_transmit_link on reconnect Dmitry Baryshkov <dmitry.baryshkov(a)oss.qualcomm.com> Bluetooth: qca: fix ROM version reading on WCN3998 chips Shaurya Rane <ssrane_b23(a)ee.vjti.ac.in> Bluetooth: L2CAP: Fix use-after-free in l2cap_unregister_user Luiz Augusto von Dentz <luiz.von.dentz(a)intel.com> Bluetooth: HIDP: Fix possible UAF Michael Grzeschik <m.grzeschik(a)pengutronix.de> Bluetooth: hci_sync: Fix hci_le_create_conn_sync Luiz Augusto von Dentz <luiz.von.dentz(a)intel.com> Bluetooth: ISO: Fix defer tests being unstable Christian Eggers <ceggers(a)arri.de> Bluetooth: SMP: make SM/PER/KDU/BI-04-C happy Christian Eggers <ceggers(a)arri.de> Bluetooth: LE L2CAP: Disconnect if sum of payload sizes exceed SDU Christian Eggers <ceggers(a)arri.de> Bluetooth: LE L2CAP: Disconnect if received packet's SDU exceeds IMTU Felix Gu <ustc.gu(a)gmail.com> firmware: arm_scpi: Fix device_node reference leak in probe path Peddolla Harshavardhan Reddy <peddolla.reddy(a)oss.qualcomm.com> wifi: cfg80211: cancel pmsr_free_wk in cfg80211_pmsr_wdev_down Kuniyuki Iwashima <kuniyu(a)google.com> wifi: mac80211: Fix static_branch_dec() underflow for aql_disable. Richard Genoud <richard.genoud(a)bootlin.com> soc: fsl: qbman: fix race condition in qman_destroy_fq Felix Gu <ustc.gu(a)gmail.com> cache: ax45mp: Fix device node reference leak in ax45mp_cache_init() ZhengYuan Huang <gality369(a)gmail.com> btrfs: tree-checker: fix misleading root drop_level error message Filipe Manana <fdmanana(a)suse.com> btrfs: log new dentries when logging parent dir of a conflicting inode Xi Ruoyao <xry111(a)xry111.site> drm/amd/display: Wrap dcn32_override_min_req_memclk() in DC_FP_{START, END} Alex Deucher <alexander.deucher(a)amd.com> drm/amdgpu: apply state adjust rules to some additional HAINAN vairants Alex Deucher <alexander.deucher(a)amd.com> drm/radeon: apply state adjust rules to some additional HAINAN vairants Alex Deucher <alexander.deucher(a)amd.com> drm/amdgpu/mmhub3.0: add bounds checking for cid Alex Deucher <alexander.deucher(a)amd.com> drm/amdgpu/mmhub3.0.2: add bounds checking for cid Alex Deucher <alexander.deucher(a)amd.com> drm/amdgpu/mmhub3.0.1: add bounds checking for cid Alex Deucher <alexander.deucher(a)amd.com> drm/amdgpu/mmhub2.3: add bounds checking for cid Alex Deucher <alexander.deucher(a)amd.com> drm/amdgpu/mmhub2.0: add bounds checking for cid Alex Deucher <alexander.deucher(a)amd.com> drm/amdgpu/gmc9.0: add bounds checking for cid Maciej Andrzejewski ICEYE <maciej.andrzejewski(a)m-works.net> serial: uartlite: fix PM runtime usage count underflow on probe Ilpo Järvinen <ilpo.jarvinen(a)linux.intel.com> serial: 8250: Add late synchronize_irq() to shutdown to handle DW UART BUSY Raul E Rangel <rrangel(a)chromium.org> serial: 8250: Fix TX deadlock when using DMA Martin Roukala (né Peres) <martin.roukala(a)mupuf.org> serial: 8250_pci: add support for the AX99100 Guanghui Feng <guanghuifeng(a)linux.alibaba.com> iommu/vt-d: Fix intel iommu iotlb sync hardlockup and retry Finn Thain <fthain(a)linux-m68k.org> mtd: Avoid boot crash in RedBoot partition table parser Chen Ni <nichen(a)iscas.ac.cn> mtd: rawnand: cadence: Fix error check for dma_alloc_coherent() in cadence_nand_init() Olivier Sobrie <olivier(a)sobrie.be> mtd: rawnand: pl353: make sure optimal timings are applied Johan Hovold <johan(a)kernel.org> spi: fix statistics allocation Johan Hovold <johan(a)kernel.org> spi: fix use-after-free on controller registration failure Maíra Canal <mcanal(a)igalia.com> pmdomain: bcm: bcm2835-power: Increase ASB control timeout Luke Wang <ziniu.wang_1(a)nxp.com> mmc: sdhci: fix timing selection for 1-bit bus width Matthew Schwartz <matthew.schwartz(a)linux.dev> mmc: sdhci-pci-gli: fix GL9750 DMA write corruption Kevin Hao <haokexin(a)gmail.com> net: macb: Reinitialize tx/rx queue pointer registers and rx ring during resume Kevin Hao <haokexin(a)gmail.com> net: macb: Introduce gem_init_rx_ring() Vineeth Karumanchi <vineeth.karumanchi(a)amd.com> net: macb: queue tie-off or disable during WOL suspend Jeff Layton <jlayton(a)kernel.org> nfsd: fix heap overflow in NFSv4.0 LOCK replay cache Yang Yang <n05ec(a)lzu.edu.cn> batman-adv: avoid OGM aggregation when skb tailroom is insufficient Antoniu Miclaus <antoniu.miclaus(a)analog.com> iio: light: bh1780: fix PM runtime leak on error path Filipe Manana <fdmanana(a)suse.com> btrfs: fix transaction abort on file creation due to name hash collision Filipe Manana <fdmanana(a)suse.com> btrfs: fix transaction abort on set received ioctl due to item overflow Filipe Manana <fdmanana(a)suse.com> btrfs: fix transaction abort when snapshotting received subvolumes Masami Hiramatsu (Google) <mhiramat(a)kernel.org> kprobes: Remove unneeded warnings from __arm_kprobe_ftrace() Masami Hiramatsu (Google) <mhiramat(a)kernel.org> kprobes: Remove unneeded goto Namjae Jeon <linkinjeon(a)kernel.org> ksmbd: unset conn->binding on failed binding request Paulo Alcantara <pc(a)manguebit.org> smb: client: fix krb5 mount with username option Lukas Johannes Möller <research(a)johannes-moeller.dev> Bluetooth: L2CAP: Validate L2CAP_INFO_RSP payload length before access Lukas Johannes Möller <research(a)johannes-moeller.dev> Bluetooth: L2CAP: Fix type confusion in l2cap_ecred_reconf_rsp() Helge Deller <deller(a)gmx.de> parisc: Flush correct cache in cacheflush() syscall Fedor Pchelkin <pchelkin(a)ispras.ru> net: macb: fix use-after-free access to PTP clock Ian Ray <ian.ray(a)gehealthcare.com> NFC: nxp-nci: allow GPIOs to sleep Tiezhu Yang <yangtiezhu(a)loongson.cn> LoongArch: Give more information if kmem access failed Ira Weiny <ira.weiny(a)intel.com> nvdimm/bus: Fix potential use after free in asynchronous initialization Jeff Layton <jlayton(a)kernel.org> sunrpc: fix cache_request leak in cache_release Chuck Lever <chuck.lever(a)oracle.com> NFSD: Hold net reference for the lifetime of /proc/fs/nfs/exports fd Jens Axboe <axboe(a)kernel.dk> io_uring/kbuf: check if target buffer list is still legacy on recycle David Hildenbrand (Arm) <david(a)kernel.org> mm/mempolicy: fix wrong mmap_read_unlock() in migrate_to_node() Harald Freudenberger <freude(a)linux.ibm.com> s390/zcrypt: Enable AUTOSEL_DOM for CCA serialnr sysfs attribute Heiko Carstens <hca(a)linux.ibm.com> s390/stackleak: Fix __stackleak_poison() inline assembly constraint Heiko Carstens <hca(a)linux.ibm.com> s390/xor: Fix xor_xc_2() inline assembly constraints Matthieu Baerts (NGI0) <matttbe(a)kernel.org> mptcp: pm: in-kernel: always set ID as avail when rm endp Russell King (Oracle) <rmk+kernel(a)armlinux.org.uk> net: stmmac: remove support for lpi_intr_o Zilin Guan <zilin(a)seu.edu.cn> binfmt_misc: restore write access before closing files opened by open_exec() Vincent Guittot <vincent.guittot(a)linaro.org> sched/fair: Fix pelt clock sync when entering idle Chao Yu <chao(a)kernel.org> f2fs: zone: fix to avoid inconsistence in between SIT and SSA Zqiang <qiang.zhang1211(a)gmail.com> rcu/nocb: Fix possible invalid rdp's->nocb_cb_kthread pointer access Antheas Kapenekakis <lkml(a)antheas.dev> platform/x86/amd/pmc: Add support for Van Gogh SoC Oleg Nesterov <oleg(a)redhat.com> x86/uprobes: Fix XOL allocation failure for 32-bit tasks Eric Dumazet <edumazet(a)google.com> net: use dst_dev_rcu() in sk_setup_caps() Eric Dumazet <edumazet(a)google.com> net: dst: introduce dst->dev_rcu Eric Dumazet <edumazet(a)google.com> net: dst: add four helpers to annotate data-races around dst->dev Jeongjun Park <aha310510(a)gmail.com> drm/exynos: vidi: use ctx->lock to protect struct vidi_context member variables related to memory alloc/free Jeongjun Park <aha310510(a)gmail.com> drm/exynos: vidi: fix to avoid directly dereferencing user pointer Jeongjun Park <aha310510(a)gmail.com> drm/exynos: vidi: use priv->vidi_dev for ctx lookup in vidi_connection_ioctl() Lijo Lazar <lijo.lazar(a)amd.com> drm/amdgpu: Add basic validation for RAS header Eric Dumazet <edumazet(a)google.com> l2tp: do not use sock_hold() in pppol2tp_session_get_sock() Timur Kristóf <timur.kristof(a)gmail.com> drm/amd/pm: Use pm_display_cfg in legacy DPM (v2) Timur Kristóf <timur.kristof(a)gmail.com> drm/amd/display: Add pixel_clock to amd_pp_display_configuration Vladimir Oltean <vladimir.oltean(a)nxp.com> net: dsa: properly keep track of conduit reference Paul Chaignon <paul.chaignon(a)gmail.com> bpf: Forget ranges when refining tnum after JSET Jibin Zhang <jibin.zhang(a)mediatek.com> net: fix segmentation of forwarding fraglist GRO Felix Fietkau <nbd(a)nbd.name> net: gso: fix tcp fraglist segmentation after pull from frag_list Felix Fietkau <nbd(a)nbd.name> net: add support for segmenting TCP fraglist GSO packets Steven Rostedt <rostedt(a)goodmis.org> tracing: Add recursion protection in kernel stack trace recording Guodong Xu <guodong(a)riscstar.com> dmaengine: mmp_pdma: Fix race condition in mmp_pdma_residue() Lukas Gerlach <lukas.gerlach(a)cispa.de> riscv: Sanitize syscall table indexing under speculation Qu Wenruo <wqu(a)suse.com> btrfs: do not strictly require dirty metadata threshold for metadata writepages Christoph Hellwig <hch(a)lst.de> iomap: allocate s_dio_done_wq for async reads as well David Howells <dhowells(a)redhat.com> rxrpc: Fix data-race warning and potential load/store tearing Tom Lendacky <thomas.lendacky(a)amd.com> x86/sev: Check for MWAITX and MONITORX opcodes in the #VC handler Borislav Petkov (AMD) <bp(a)alien8.de> x86/sev: Harden #VC instruction emulation somewhat Eric Dumazet <edumazet(a)google.com> ipv6: use RCU in ip6_xmit() Mikulas Patocka <mpatocka(a)redhat.com> dm-verity: disable recursive forward error correction David Howells <dhowells(a)redhat.com> rxrpc: Fix recvmsg() unconditional requeue Jan Kara <jack(a)suse.cz> ext4: always allocate blocks only from groups inode can use Jakub Kicinski <kuba(a)kernel.org> eth: bnxt: always recalculate features after XDP clearing, fix null-deref Bjorn Andersson <quic_bjorande(a)quicinc.com> usb: typec: ucsi: Move unregister out of atomic section Trond Myklebust <trond.myklebust(a)hammerspace.com> pNFS: Fix a deadlock when returning a delegation during open() Trond Myklebust <trond.myklebust(a)hammerspace.com> NFS: Fix a deadlock involving nfs_release_folio() Christoph Hellwig <hch(a)lst.de> nfs: pass explicit offset/count to trace events Eric Dumazet <edumazet(a)google.com> dst: fix races in rt6_uncached_list_del() and rt_del_uncached_list() Miquel Sabaté Solà <mssola(a)mssola.com> btrfs: fix NULL dereference on root when tracing inode eviction Ryan Roberts <ryan.roberts(a)arm.com> arm64: mm: Don't remap pgtables for allocate vs populate Ryan Roberts <ryan.roberts(a)arm.com> arm64: mm: Batch dsb and isb when populating pgtables Ryan Roberts <ryan.roberts(a)arm.com> arm64: mm: Don't remap pgtables per-cont(pte|pmd) block Huacai Chen <chenhuacai(a)kernel.org> net: stmmac: dwmac-loongson: Set clk_csr_i to 100-150MHz Qu Wenruo <wqu(a)suse.com> btrfs: always fallback to buffered write if the inode requires checksum Brian Foster <bfoster(a)redhat.com> ext4: fix dirtyclusters double decrement on fs shutdown Chao Yu <chao(a)kernel.org> f2fs: fix to avoid migrating empty section Eric Biggers <ebiggers(a)kernel.org> net/tcp-md5: Fix MAC comparison to be constant-time Eric Biggers <ebiggers(a)kernel.org> ksmbd: Compare MACs in constant time Eric Biggers <ebiggers(a)kernel.org> smb: client: Compare MACs in constant time Long Li <leo.lilong(a)huawei.com> xfs: ensure dquot item is deleted from AIL only after log shutdown Long Li <leo.lilong(a)huawei.com> xfs: fix integer overflow in bmap intent sort comparator Thorsten Blum <thorsten.blum(a)linux.dev> crypto: atmel-sha204a - Fix OOM ->tfm_count leak Shyam Prasad N <sprasad(a)microsoft.com> cifs: open files should not hold ref on superblock Kevin Hao <haokexin(a)gmail.com> net: macb: Shuffle the tx ring before enabling tx Luca Ceresoli <luca.ceresoli(a)bootlin.com> drm/bridge: ti-sn65dsi83: halve horizontal syncs for dual LVDS output Thomas Fourier <fourier.thomas(a)gmail.com> drm/msm: Fix dma_free_attrs() buffer size Thorsten Blum <thorsten.blum(a)linux.dev> ksmbd: Don't log keys in SMB3 signing and encryption key generation Darrick J. Wong <djwong(a)kernel.org> iomap: reject delalloc mappings during writeback Alexander Potapenko <glider(a)google.com> mm/kfence: fix KASAN hardware tag faults during late enablement Sean Christopherson <seanjc(a)google.com> KVM: SVM: Set/clear CR8 write interception when AVIC is (de)activated Naveen N Rao <naveen(a)kernel.org> KVM: SVM: Add a helper to look up the max physical ID for AVIC Naveen N Rao <naveen(a)kernel.org> KVM: SVM: Limit AVIC physical max index based on configured max_vcpu_ids Jiasheng Jiang <jiashengjiangcool(a)gmail.com> usb: gadget: f_tcm: Fix NULL pointer dereferences in nexus handling Marc Kleine-Budde <mkl(a)pengutronix.de> can: gs_usb: gs_can_open(): always configure bitrates before starting device Paul Moses <p(a)1g4.org> net/sched: act_gate: snapshot parameters with RCU on replace Nathan Chancellor <nathan(a)kernel.org> kbuild: Leave objtool binary around with 'make clean' Matthieu Baerts (NGI0) <matttbe(a)kernel.org> selftests: mptcp: join: check RM_ADDR not sent over same subflow Gang Yan <yangang(a)kylinos.cn> selftests: mptcp: add a check for 'add_addr_accepted' Matthieu Baerts (NGI0) <matttbe(a)kernel.org> mptcp: pm: in-kernel: always mark signal+subflow endp as used Matthieu Baerts (NGI0) <matttbe(a)kernel.org> mptcp: pm: avoid sending RM_ADDR over same subflow Natalie Vock <natalie.vock(a)gmx.de> drm/amd/display: Use GFP_ATOMIC in dc_create_stream_for_sink Andrew Lunn <andrew(a)lunn.ch> net: phy: register phy led_triggers during probe to avoid AB-BA deadlock Ankit Garg <nktgrg(a)google.com> gve: fix incorrect buffer cleanup in gve_tx_clean_pending_packets for QPL Kim Phillips <kim.phillips(a)amd.com> x86/sev: Allow IBPB-on-Entry feature for SNP guests Mario Limonciello <mario.limonciello(a)amd.com> platform/x86: hp-bioscfg: Support allocations of larger data Daniel Hodges <git(a)danielhodges.dev> wifi: libertas: fix use-after-free in lbs_free_adapter() Fedor Pchelkin <pchelkin(a)ispras.ru> ksmbd: call ksmbd_vfs_kern_path_end_removing() on some error paths Ankit Garg <nktgrg(a)google.com> gve: defer interrupt enabling until NAPI registration John Ripple <john.ripple(a)keysight.com> drm/bridge: ti-sn65dsi86: Add support for DisplayPort mode with HPD Adrian Hunter <adrian.hunter(a)intel.com> i3c: mipi-i3c-hci: Add missing TID field to no-op command descriptor Adrian Hunter <adrian.hunter(a)intel.com> i3c: mipi-i3c-hci: Restart DMA ring correctly after dequeue abort Adrian Hunter <adrian.hunter(a)intel.com> i3c: mipi-i3c-hci: Use ETIMEDOUT instead of ETIME for timeout errors Jean-Baptiste Maneyrol <jean-baptiste.maneyrol(a)tdk.com> iio: imu: inv_icm42600: fix odr switch to the same value Antoniu Miclaus <antoniu.miclaus(a)analog.com> iio: gyro: mpu3050-i2c: fix pm_runtime error handling Antoniu Miclaus <antoniu.miclaus(a)analog.com> iio: gyro: mpu3050-core: fix pm_runtime error handling Nuno Sá <nuno.sa(a)analog.com> iio: buffer: Fix wait_queue not being removed Chris Spencer <spencercw(a)gmail.com> iio: chemical: bme680: Fix measurement wait duration calculation Lukas Schmid <lukas.schmid(a)netcube.li> iio: potentiometer: mcp4131: fix double application of wiper shift Antoniu Miclaus <antoniu.miclaus(a)analog.com> iio: chemical: sps30_i2c: fix buffer size in sps30_i2c_read_meas() Antoniu Miclaus <antoniu.miclaus(a)analog.com> iio: chemical: sps30_serial: fix buffer size in sps30_serial_read_meas() SeungJu Cheon <suunj1331(a)gmail.com> iio: frequency: adf4377: Fix duplicated soft reset mask Oleksij Rempel <o.rempel(a)pengutronix.de> iio: dac: ds4424: reject -128 RAW value Filipe Manana <fdmanana(a)suse.com> btrfs: abort transaction on failure to update root in the received subvol ioctl Henrique Carvalho <henrique.carvalho(a)suse.com> smb: client: fix iface port assignment in parse_server_interfaces Bharath SM <bharathsm(a)microsoft.com> smb: client: fix in-place encryption corruption in SMB2_write() Paulo Alcantara <pc(a)manguebit.org> smb: client: fix atomic open with O_DIRECT & O_SYNC Josh Law <objecting(a)objecting.org> lib/bootconfig: check bounds before writing in __xbc_open_brace() Josh Law <objecting(a)objecting.org> lib/bootconfig: fix snprintf truncation check in xbc_node_compose_key_after() Shashank Balaji <shashank.mahadasyam(a)sony.com> x86/apic: Disable x2apic on resume if the kernel expects so Junxiao Bi <junxiao.bi(a)oracle.com> scsi: core: Fix error handling for scsi_alloc_sdev() Josh Law <objecting(a)objecting.org> lib/bootconfig: fix off-by-one in xbc_verify_tree() unclosed brace error Stefan Haberland <sth(a)linux.ibm.com> s390/dasd: Copy detected format information to secondary device Stefan Haberland <sth(a)linux.ibm.com> s390/dasd: Move quiesce state with pprc swap Darrick J. Wong <djwong(a)kernel.org> xfs: fix undersized l_iclog_roundoff values Shyam Prasad N <sprasad(a)microsoft.com> cifs: make default value of retrans as zero Calvin Owens <calvin(a)wbinvd.org> tracing: Fix trace_buf_size= cmdline parameter with sizes >= 2G Janusz Krzysztofik <janusz.krzysztofik(a)linux.intel.com> drm/i915: Fix potential overflow of shmem scatterlist length Luca Ceresoli <luca.ceresoli(a)bootlin.com> drm/bridge: ti-sn65dsi83: fix CHA_DSI_CLK_RANGE rounding Mario Limonciello <mario.limonciello(a)amd.com> drm/amd: Set num IP blocks to 0 if discovery fails Alysa Liu <Alysa.Liu(a)amd.com> drm/amdgpu: Fix use-after-free race in VM acquire Bastien Curutchet (Schneider Electric) <bastien.curutchet(a)bootlin.com> net: dsa: microchip: Fix error path in PTP IRQ setup Fan Wu <fanwu01(a)zju.edu.cn> net: ethernet: arc: emac: quiesce interrupts before requesting IRQ Jian Zhang <zhangjian.3032(a)bytedance.com> net: ncsi: fix skb leak in error paths Namjae Jeon <linkinjeon(a)kernel.org> ksmbd: fix use-after-free by using call_rcu() for oplock_info Marios Makassikis <mmakassikis(a)freebox.fr> smb: server: fix use-after-free in smb2_open() Namjae Jeon <linkinjeon(a)kernel.org> ksmbd: fix use-after-free in smb_lazy_parent_lease_break_close() Maíra Canal <mcanal(a)igalia.com> pmdomain: bcm: bcm2835-power: Fix broken reset status read Helge Deller <deller(a)gmx.de> parisc: Check kernel mapping earlier at bootup Helge Deller <deller(a)gmx.de> parisc: Fix initial page table creation for boot Sanman Pradhan <psanman(a)juniper.net> hwmon: (pmbus/q54sj108a2) fix stack overflow in debugfs read Catalin Marinas <catalin.marinas(a)arm.com> arm64: mm: Add PTE_DIRTY back to PAGE_KERNEL* to fix kexec/hibernation Dave Airlie <airlied(a)redhat.com> nouveau/dpcd: return EBUSY for aux xfer if the device is asleep Helge Deller <deller(a)gmx.de> parisc: Increase initial mapping to 64 MB with KALLSYMS Sven Eckelmann <sven(a)narfation.org> batman-adv: Avoid double-rtnl_lock ELP metric worker Huiwen He <hehuiwen(a)kylinos.cn> tracing: Fix syscall events activation by ensuring refcount hits zero Jakub Staniszewski <jakub.staniszewski(a)linux.intel.com> ice: fix retry for AQ command 0x06EE Long Li <longli(a)microsoft.com> net: mana: Ring doorbell at 4 CQ wraparounds Ariel Silver <arielsilver77(a)gmail.com> media: dvb-net: fix OOB access in ULE extension header tables Luka Gejak <luka.gejak(a)linux.dev> staging: rtl8723bs: fix potential out-of-bounds read in rtw_restruct_wmm_ie Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> staging: rtl8723bs: properly validate the data in rtw_get_ie_ex() Jedrzej Jagielski <jedrzej.jagielski(a)intel.com> ixgbevf: fix link setup issue Jakub Staniszewski <jakub.staniszewski(a)linux.intel.com> ice: reintroduce retry mechanism for indirect AQ Marc Zyngier <maz(a)kernel.org> irqchip/gic-v3-its: Limit number of per-device MSIs to the range the ITS supports Andy Shevchenko <andriy.shevchenko(a)linux.intel.com> device property: Allow secondary lookup in fwnode_get_next_child_node() Franz Schnyder <franz.schnyder(a)toradex.com> drm/bridge: ti-sn65dsi86: Enable HPD polling if IRQ is not used Osama Abdelkader <osama.abdelkader(a)gmail.com> drm/bridge: samsung-dsim: Fix memory leak in error path Xu Yang <xu.yang_2(a)nxp.com> Revert "tcpm: allow looking for role_sw device in the main node" Xingui Yang <yangxingui(a)huawei.com> scsi: hisi_sas: Fix NULL pointer exception during user_scan() Yihang Li <liyihang9(a)huawei.com> scsi: hisi_sas: Use macro instead of magic number Xingui Yang <yangxingui(a)huawei.com> scsi: hisi_sas: Add time interval between two H2D FIS following soft reset spec Wang Shuaiwei <wangshuaiwei1(a)xiaomi.com> scsi: ufs: core: Fix SError in ufshcd_rtc_work() during UFS suspend Adrian Ng Ho Yin <adrianhoyin.ng(a)altera.com> i3c: dw-i3c-master: Set SIR_REJECT in DAT on device attach and reattach Steven Rostedt <rostedt(a)goodmis.org> time/jiffies: Mark jiffies_64_to_clock_t() notrace Max Kellermann <max.kellermann(a)ionos.com> ceph: fix memory leaks in ceph_mdsc_build_path() Max Kellermann <max.kellermann(a)ionos.com> ceph: fix i_nlink underrun during async unlink Ilya Dryomov <idryomov(a)gmail.com> libceph: admit message frames only in CEPH_CON_S_OPEN state Raphael Zimmer <raphael.zimmer(a)tu-ilmenau.de> libceph: Use u32 for non-negative values in ceph_monmap_decode() Ilya Dryomov <idryomov(a)gmail.com> libceph: prevent potential out-of-bounds reads in process_message_header() Ilya Dryomov <idryomov(a)gmail.com> libceph: reject preamble if control segment is empty Raphael Zimmer <raphael.zimmer(a)tu-ilmenau.de> libceph: Fix potential out-of-bounds access in ceph_handle_auth_reply() Masami Hiramatsu (Google) <mhiramat(a)kernel.org> kprobes: avoid crash when rmmod/insmod after ftrace killed Mehul Rao <mehulrao(a)gmail.com> tipc: fix divide-by-zero in tipc_sk_filter_connect() Ravi Hothi <ravi.hothi(a)oss.qualcomm.com> ASoC: qcom: qdsp6: Fix q6apm remove ordering during ADSP stop and start Penghe Geng <pgeng(a)nvidia.com> mmc: core: Avoid bitfield RMW for claim/retune flags Alexander Potapenko <glider(a)google.com> mm/kfence: disable KFENCE upon KASAN HW tags enablement Felix Gu <ustc.gu(a)gmail.com> mmc: mmci: Fix device_node reference leak in of_get_dml_pipe_index() Kalesh Singh <kaleshsingh(a)google.com> mm/tracing: rss_stat: ensure curr is false from kthread context Ziyi Guo <n7l8m4(a)u.northwestern.edu> usb: image: mdc800: kill download URB on timeout Oliver Neukum <oneukum(a)suse.com> usb: mdc800: handle signal and read racing Fan Wu <fanwu01(a)zju.edu.cn> usb: renesas_usbhs: fix use-after-free in ISR during device removal Oliver Neukum <oneukum(a)suse.com> usb: class: cdc-wdm: fix reordering issue in read code path Alan Stern <stern(a)rowland.harvard.edu> USB: core: Limit the length of unkillable synchronous timeouts Alan Stern <stern(a)rowland.harvard.edu> USB: usbtmc: Use usb_bulk_msg_killable() with user-specified timeouts Alan Stern <stern(a)rowland.harvard.edu> USB: usbcore: Introduce usb_bulk_msg_killable() Xu Yang <xu.yang_2(a)nxp.com> usb: roles: get usb role switch from parent only for usb-b-connector Marc Zyngier <maz(a)kernel.org> usb: cdc-acm: Restore CAP_BRK functionnality to CH343 Gabor Juhos <j4g8y7(a)gmail.com> usb: core: don't power off roothub PHYs if phy_set_mode() fails Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> usb: misc: uss720: properly clean up reference in uss720_probe() Heikki Krogerus <heikki.krogerus(a)linux.intel.com> usb: dwc3: pci: add support for the Intel Nova Lake -H Oliver Neukum <oneukum(a)suse.com> usb: yurex: fix race in probe Dayu Jiang <jiangdayu(a)xiaomi.com> usb: xhci: Prevent interrupt storm on host controller error (HCE) Zilin Guan <zilin(a)seu.edu.cn> usb: xhci: Fix memory leak in xhci_disable_slot() Vyacheslav Vahnenko <vahnenko2003(a)gmail.com> USB: ezcap401 needs USB_QUIRK_NO_BOS to function on 10gbs usb speed Christoffer Sandberg <cs(a)tuxedo.de> usb/core/quirks: Add Huawei ME906S-device to wakeup quirk A1RM4X <dev(a)a1rm4x.com> USB: add QUIRK_NO_BOS for video capture several devices Sean Christopherson <seanjc(a)google.com> KVM: SVM: Initialize AVIC VMCB fields if AVIC is enabled with in-kernel APIC Zhang Heng <zhangheng(a)kylinos.cn> ASoC: amd: yc: Add DMI quirk for ASUS EXPERTBOOK PM1503CDA Oleksij Rempel <o.rempel(a)pengutronix.de> net: usb: lan78xx: skip LTM configuration for LAN7850 Oleksij Rempel <o.rempel(a)pengutronix.de> net: usb: lan78xx: fix TX byte statistics for small packets Oleksij Rempel <o.rempel(a)pengutronix.de> net: usb: lan78xx: fix silent drop of packets with checksum errors Takashi Iwai <tiwai(a)suse.de> ALSA: usb-audio: Check endpoint numbers at parsing Scarlett2 mixer interfaces Mehul Rao <mehulrao(a)gmail.com> ALSA: pcm: fix use-after-free on linked stream runtime in snd_pcm_drain() Qingye Zhao <zhaoqingye(a)honor.com> cgroup: fix race between task migration and iteration Sasha Levin <sashal(a)kernel.org> Revert "arm64: dts: qcom: sdm845-oneplus: Mark l14a regulator as boot-on" Seungjin Bae <eeodqql09(a)gmail.com> usb: gadget: f_mass_storage: Fix potential integer overflow in check_command_size_in_blocks() Alok Tiwari <alok.a.tiwari(a)oracle.com> octeontx2-af: devlink: fix NIX RAS reporter to use RAS interrupt status Przemek Kitszel <przemyslaw.kitszel(a)intel.com> octeontx2-af: devlink health: use retained error fmsg API Alok Tiwari <alok.a.tiwari(a)oracle.com> octeontx2-af: devlink: fix NIX RAS reporter recovery condition Ricardo B. Marlière <rbm(a)suse.com> net: bonding: Fix nd_tbl NULL dereference when IPv6 is disabled Casey Connolly <casey.connolly(a)linaro.org> ASoC: detect empty DMI strings Chen Ni <nichen(a)iscas.ac.cn> ASoC: amd: acp3x-rt5682-max9836: Add missing error check for clock acquisition Ben Dooks <ben.dooks(a)codethink.co.uk> ACPI: OSL: fix __iomem type on return from acpi_os_map_generic_address() Matt Vollrath <tactii(a)gmail.com> e1000/e1000e: Fix leak in DMA error cleanup Alok Tiwari <alok.a.tiwari(a)oracle.com> i40e: fix src IP mask checks and memcpy argument names in cloud filter Sungwoo Kim <iam(a)sung-woo.kim> nvme-pci: Fix race bug in nvme_poll_irqdisable() Sungwoo Kim <iam(a)sung-woo.kim> nvme-pci: Fix slab-out-of-bounds in nvme_dbbuf_set Rafael J. Wysocki <rafael.j.wysocki(a)intel.com> sched: idle: Make skipping governor callbacks more consistent Peng Fan <peng.fan(a)nxp.com> regulator: pca9450: Correct interrupt type Frieder Schrempf <frieder.schrempf(a)kontron.de> regulator: pca9450: Make IRQ optional Yuan Tan <tanyuan98(a)outlook.com> netfilter: xt_IDLETIMER: reject rev0 reuse of ALARM timer labels Hyunwoo Kim <imv4bel(a)gmail.com> netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() Hyunwoo Kim <imv4bel(a)gmail.com> netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path David Dull <monderasdor(a)gmail.com> netfilter: x_tables: guard option walkers against 1-byte tail reads Jenny Guanni Qu <qguanni(a)gmail.com> netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop() Raju Rangoju <Raju.Rangoju(a)amd.com> amd-xgbe: prevent CRC errors during RX adaptation with AN disabled Raju Rangoju <Raju.Rangoju(a)amd.com> amd-xgbe: fix link status handling in xgbe_rx_adaptation Chengfeng Ye <dg573847474(a)gmail.com> mctp: route: hold key->lock in mctp_flow_prepare_output() Wenyuan Li <2063309626(a)qq.com> can: hi311x: hi3110_open(): add check for hi3110_power_enable() return value Haiyue Wang <haiyuewa(a)163.com> mctp: i2c: fix skb memory leak in receive path Shuangpeng Bai <shuangpeng.kernel(a)gmail.com> serial: caif: hold tty->link reference in ldisc_open and ser_release Álvaro Fernández Rojas <noltari(a)gmail.com> net: sfp: improve Huawei MA5671a fixup Chris Morgan <macromorgan(a)hotmail.com> net: sfp: add quirk for Potron SFP+ XGSPON ONU Stick Russell King (Oracle) <rmk+kernel(a)armlinux.org.uk> net: sfp: improve Nokia GPON sfp fixup Russell King (Oracle) <rmk+kernel(a)armlinux.org.uk> net: sfp: re-implement ignoring the hardware TX_FAULT signal Sen Wang <sen(a)ti.com> ASoC: simple-card-utils: fix graph_util_is_ports0() for DT overlays Kuninori Morimoto <kuninori.morimoto.gx(a)renesas.com> ASoC: simple-card-utils: use __free(device_node) for device node matteo.cotifava <cotifavamatteo(a)gmail.com> ASoC: soc-core: flush delayed work before removing DAIs and widgets matteo.cotifava <cotifavamatteo(a)gmail.com> ASoC: soc-core: drop delayed_work_pending() check before flush Weiming Shi <bestswngs(a)gmail.com> net/sched: teql: fix NULL pointer dereference in iptunnel_xmit on TEQL slave xmit Gal Pressman <gal(a)nvidia.com> net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery Cosmin Ratiu <cratiu(a)nvidia.com> net/mlx5: Fix deadlock between devlink lock and esw->wq Daniel Jurgens <danielj(a)nvidia.com> net/mlx5: Query to see if host PF is disabled Daniel Jurgens <danielj(a)nvidia.com> net/mlx5: IFC updates for disabled host PF Hangbin Liu <liuhangbin(a)gmail.com> bonding: handle BOND_LINK_FAIL, BOND_LINK_BACK as valid link states Pengyu Luo <mitltlatltl(a)gmail.com> drm/msm/dsi: fix pclk rate calculation for bonded dsi Dmitry Baryshkov <dmitry.baryshkov(a)linaro.org> drm/msm/dsi: Document DSC related pclk_rate and hdisplay calculations Mieczyslaw Nalewaj <namiltd(a)yahoo.com> net: dsa: realtek: rtl8365mb: remove ifOutDiscards from rx_packets Eric Badger <ebadger(a)purestorage.com> xprtrdma: Decrement re_receiving on the early exit paths Guenter Roeck <linux(a)roeck-us.net> smb/server: Fix another refcount leak in smb2_open() J. Neuschäfer <j.ne(a)posteo.net> powerpc: 83xx: km83xx: Fix keymile vendor prefix Tzung-Bi Shih <tzungbi(a)kernel.org> remoteproc: mediatek: Unprepare SCP clock during system suspend Bjorn Andersson <bjorn.andersson(a)oss.qualcomm.com> remoteproc: sysmon: Correct subsys_name_len type in QMI request Christophe Leroy (CS GROUP) <chleroy(a)kernel.org> powerpc/uaccess: Fix inline assembly for clang build on PPC32 Takashi Iwai <tiwai(a)suse.de> ALSA: usb-audio: Check max frame size for implicit feedback mode, too Takashi Iwai <tiwai(a)suse.de> ALSA: usb-audio: Avoid implicit feedback mode on DIYINHK USB Audio 2.0 wangshuaiwei <wangshuaiwei1(a)xiaomi.com> scsi: ufs: core: Fix shift out of bounds when MAXQ=32 Peter Wang <peter.wang(a)mediatek.com> scsi: ufs: core: Fix possible NULL pointer dereference in ufshcd_add_command_trace() Charles Keepax <ckeepax(a)opensource.cirrus.com> ASoC: cs42l43: Report insert for exotic peripherals Azamat Almazbek uulu <almazbek1608(a)gmail.com> ASoC: amd: yc: Add ASUS EXPERTBOOK BM1503CDA to quirk table Tomas Henzl <thenzl(a)redhat.com> scsi: ses: Fix devices attaching to different hosts Sofia Schneider <sofia(a)schn.dev> ACPI: OSI: Add DMI quirk for Acer Aspire One D255 Ramanathan Choodamani <quic_rchoodam(a)quicinc.com> wifi: mac80211: set default WMM parameters on all links Al Viro <viro(a)zeniv.linux.org.uk> unshare: fix unshare_fs() handling Ranjan Kumar <ranjan.kumar(a)broadcom.com> scsi: mpi3mr: Add NULL checks when resetting request and reply queues Piotr Mazek <pmazek(a)outlook.com> ACPI: PM: Save NVS memory on Lenovo G70-35 Jan Kiszka <jan.kiszka(a)siemens.com> scsi: storvsc: Fix scheduling while atomic on PREEMPT_RT John Johansen <john.johansen(a)canonical.com> apparmor: fix race between freeing data and fs accessing it John Johansen <john.johansen(a)canonical.com> apparmor: fix race on rawdata dereference John Johansen <john.johansen(a)canonical.com> apparmor: fix differential encoding verification John Johansen <john.johansen(a)canonical.com> apparmor: fix unprivileged local user can do privileged policy management John Johansen <john.johansen(a)canonical.com> apparmor: Fix double free of ns_name in aa_replace_profiles() Massimiliano Pellizzer <massimiliano.pellizzer(a)canonical.com> apparmor: fix missing bounds check on DEFAULT table in verify_dfa() Massimiliano Pellizzer <massimiliano.pellizzer(a)canonical.com> apparmor: fix side-effect bug in match_char() macro usage John Johansen <john.johansen(a)canonical.com> apparmor: fix: limit the number of levels of policy namespaces Massimiliano Pellizzer <massimiliano.pellizzer(a)canonical.com> apparmor: replace recursive profile removal with iterative approach Massimiliano Pellizzer <massimiliano.pellizzer(a)canonical.com> apparmor: fix memory leak in verify_header Massimiliano Pellizzer <massimiliano.pellizzer(a)canonical.com> apparmor: validate DFA start states are in bounds in unpack_pdb Menglong Dong <menglong8.dong(a)gmail.com> net: tcp: accept old ack during closing Victor Nogueira <victor(a)mojatatu.com> net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks Guenter Roeck <linux(a)roeck-us.net> tracing: Add NULL pointer check to trigger_data_free() Yifan Wu <wuyifan50(a)huawei.com> selftest/arm64: Fix sve2p1_sigill() to hwcap test Larysa Zaremba <larysa.zaremba(a)intel.com> xdp: produce a warning when calculated tailroom is negative Larysa Zaremba <larysa.zaremba(a)intel.com> i40e: use xdp.frame_sz as XDP RxQ info frag_size Larysa Zaremba <larysa.zaremba(a)intel.com> i40e: fix registering XDP RxQ info Larysa Zaremba <larysa.zaremba(a)intel.com> xsk: introduce helper to determine rxq->frag_size Larysa Zaremba <larysa.zaremba(a)intel.com> xdp: use modulo operation to calculate XDP frag tailroom Jamal Hadi Salim <jhs(a)mojatatu.com> net/sched: act_ife: Fix metalist update behavior Jiayuan Chen <jiayuan.chen(a)shopee.com> net: ipv6: fix panic when IPv4 route references loopback IPv6 nexthop Fernando Fernandez Mancera <fmancera(a)suse.de> net: vxlan: fix nd_tbl NULL dereference when IPv6 is disabled Fernando Fernandez Mancera <fmancera(a)suse.de> net: bridge: fix nd_tbl NULL dereference when IPv6 is disabled Lorenzo Bianconi <lorenzo(a)kernel.org> net: ethernet: mtk_eth_soc: Reset prog ptr to old_prog in case of error in mtk_xdp_setup() Ovidiu Panait <ovidiu.panait.rb(a)renesas.com> net: stmmac: Fix error handling in VLAN add and delete paths Jakub Kicinski <kuba(a)kernel.org> nfc: rawsock: cancel tx_work before socket teardown Jakub Kicinski <kuba(a)kernel.org> nfc: nci: clear NCI_DATA_EXCHANGE before calling completion callback Jakub Kicinski <kuba(a)kernel.org> nfc: nci: free skb on nci_transceive early error paths Ian Ray <ian.ray(a)gehealthcare.com> net: nfc: nci: Fix zero-length proprietary notifications Koichiro Den <den(a)valinux.co.jp> net: sched: avoid qdisc_reset_all_tx_gt() vs dequeue race for lockless qdiscs Sungwoo Kim <iam(a)sung-woo.kim> nvme: fix memory allocation in nvme_pr_read_keys() Stefan Hajnoczi <stefanha(a)redhat.com> nvme: reject invalid pr_read_keys() num_keys values Yujie Liu <yujie.liu(a)intel.com> drm/sched: Fix kernel-doc warning for drm_sched_job_done() Raju Rangoju <Raju.Rangoju(a)amd.com> amd-xgbe: fix sleep while atomic on suspend/resume Jakub Kicinski <kuba(a)kernel.org> ipv6: fix NULL pointer deref in ip6_rt_get_dev_rcu() ZhangGuoDong <zhangguodong(a)kylinos.cn> smb/client: fix buffer size for smb311_posix_qinfo in SMB311_posix_query_info() ZhangGuoDong <zhangguodong(a)kylinos.cn> smb/client: fix buffer size for smb311_posix_qinfo in smb2_compound_op() Lang Xu <xulang(a)uniontech.com> bpf: Fix a UAF issue in bpf_trampoline_link_cgroup_shim Kui-Feng Lee <thinker.li(a)gmail.com> bpf: export bpf_link_inc_not_zero. David Thomson <dt(a)linux-mail.net> xen/acpi-processor: fix _CST detection using undersized evaluation buffer Allison Henderson <achender(a)kernel.org> net/rds: Fix circular locking dependency in rds_tcp_tune Eric Dumazet <edumazet(a)google.com> indirect_call_wrapper: do not reevaluate function pointer Lorenzo Bianconi <lorenzo(a)kernel.org> wifi: mt76: Fix possible oob access in mt76_connac2_mac_write_txwi_80211() Lorenzo Bianconi <lorenzo(a)kernel.org> wifi: mt76: mt7996: Fix possible oob access in mt7996_mac_write_txwi_80211() Bart Van Assche <bvanassche(a)acm.org> wifi: wlcore: Fix a locking bug Bart Van Assche <bvanassche(a)acm.org> wifi: cw1200: Fix locking in error paths Vimlesh Kumar <vimleshk(a)marvell.com> octeon_ep: avoid compiler and IQ/OQ reordering Vimlesh Kumar <vimleshk(a)marvell.com> octeon_ep: Relocate counter updates before NAPI Jiayuan Chen <jiayuan.chen(a)shopee.com> bpf/bonding: reject vlan+srcmac xmit_hash_policy change when XDP is loaded Mieczyslaw Nalewaj <namiltd(a)yahoo.com> net: dsa: realtek: rtl8365mb: fix rtl8365mb_phy_ocp_write return value Shuvam Pandey <shuvampandey1(a)gmail.com> kunit: tool: copy caller args in run_kernel to prevent mutation Alexandre Courbot <acourbot(a)nvidia.com> rust: kunit: fix warning when !CONFIG_PRINTK Alban Bedel <alban.bedel(a)lht.dlh.de> can: mcp251x: fix deadlock in error path of mcp251x_open Oliver Hartkopp <socketcan(a)hartkopp.net> can: bcm: fix locking for bcm_op runtime updates Raju Rangoju <Raju.Rangoju(a)amd.com> amd-xgbe: fix MAC_TCR_SS register width for 2.5G and 10M speeds Jiayuan Chen <jiayuan.chen(a)shopee.com> atm: lec: fix null-ptr-deref in lec_arp_clear_vccs Guenter Roeck <linux(a)roeck-us.net> dpaa2-switch: Fix interrupt storm after receiving bad if_id in IRQ handler Ioana Ciornei <ioana.ciornei(a)nxp.com> dpaa2-switch: do not clear any interrupts automatically Nikhil P. Rao <nikhil.rao(a)amd.com> xsk: Fix zero-copy AF_XDP fragment drop Nikhil P. Rao <nikhil.rao(a)amd.com> xsk: Fix fragment node deletion to prevent buffer leak Maciej Fijalkowski <maciej.fijalkowski(a)intel.com> xsk: s/free_list_node/list_node/ Maciej Fijalkowski <maciej.fijalkowski(a)intel.com> xsk: Get rid of xdp_buff_xsk::xskb_list_node Chintan Vankar <c-vankar(a)ti.com> net: ethernet: ti: am65-cpsw-nuss/cpsw-ale: Fix multicast entry handling in ALE table Francesco Lavra <flavra(a)baylibre.com> drm/solomon: Fix page start when updating rectangle in page addressing mode Javier Martinez Canillas <javierm(a)redhat.com> drm/ssd130x: Replace .page_height field in device info with a constant Javier Martinez Canillas <javierm(a)redhat.com> drm/ssd130x: Store the HW buffer in the driver-private CRTC state Geert Uytterhoeven <geert(a)linux-m68k.org> drm/ssd130x: Use bool for ssd130x_deviceinfo flags Vitaly Lifshits <vitaly.lifshits(a)intel.com> e1000e: clear DPG_EN after reset to avoid autonomous power-gating Bart Van Assche <bvanassche(a)acm.org> hwmon: (it87) Check the it87_lock() return value Felix Gu <ustc.gu(a)gmail.com> pinctrl: cirrus: cs42l43: Fix double-put in cs42l43_pin_probe() Jonathan Teh <jonathan.teh(a)outlook.com> platform/x86: thinkpad_acpi: Fix errors reading battery thresholds Florian Eckert <fe(a)dev.tdt.de> pinctrl: equilibrium: fix warning trace on load Florian Eckert <fe(a)dev.tdt.de> pinctrl: equilibrium: rename irq_chip function callbacks Hao Yu <haoyufine(a)gmail.com> hwmon: (aht10) Fix initialization commands for AHT20 Akhilesh Patil <akhilesh(a)ee.iitb.ac.in> hwmon: (aht10) Add support for dht20 Thomas Weißschuh <thomas.weissschuh(a)linutronix.de> ARM: clean up the memset64() C wrapper Matthieu Baerts (NGI0) <matttbe(a)kernel.org> selftests: mptcp: join: check removing signal+subflow endp Paolo Abeni <pabeni(a)redhat.com> selftests: mptcp: more stable simult_flows tests Junxiao Bi <junxiao.bi(a)oracle.com> scsi: core: Fix refcount leak for tagset_refcnt Thorsten Blum <thorsten.blum(a)linux.dev> smb: client: Don't log plaintext credentials in cifs_set_cifscreds Paulo Alcantara <pc(a)manguebit.org> smb: client: fix broken multichannel with krb5+signing Henrique Carvalho <henrique.carvalho(a)suse.com> smb: client: fix cifs_pick_channel when channels are equally loaded Christoph Böhmwalder <christoph.boehmwalder(a)linbit.com> drbd: fix null-pointer dereference on local read error Lars Ellenberg <lars.ellenberg(a)linbit.com> drbd: fix "LOGIC BUG" in drbd_al_begin_io_nonblock() Phillip Lougher <phillip(a)squashfs.org.uk> Squashfs: check metadata block offset is within range Prithvi Tambewagh <activprithvi(a)gmail.com> scsi: target: Fix recursive locking in __configfs_open_file() Davide Caratti <dcaratti(a)redhat.com> net/sched: ets: fix divide by zero in the offload path Jason Gunthorpe <jgg(a)ziepe.ca> RDMA/irdma: Fix kernel stack leak in irdma_create_user_ah() Jason Gunthorpe <jgg(a)ziepe.ca> IB/mthca: Add missed mthca_unmap_user_db() for mthca_create_srq() Vahagn Vardanian <vahagn(a)redrays.io> wifi: mac80211: fix NULL pointer dereference in mesh_rx_csa_frame() Ariel Silver <arielsilver77(a)gmail.com> wifi: mac80211: bounds-check link_id in ieee80211_ml_reconfiguration Daniil Dulov <d.dulov(a)aladdin.ru> wifi: cfg80211: cancel rfkill_block work in wiphy_unregister() Johannes Berg <johannes.berg(a)intel.com> wifi: radiotap: reject radiotap with unknown bits Jun Seo <jun.seo.93(a)proton.me> ALSA: usb-audio: Use correct version for UAC3 header validation Kurt Borja <kuurtb(a)gmail.com> platform/x86: dell-wmi: Add audio/mic mute key codes Thorsten Blum <thorsten.blum(a)linux.dev> platform/x86: dell-wmi-sysman: Don't hex dump plaintext password data Mike Rapoport (Microsoft) <rppt(a)kernel.org> x86/efi: defer freeing of boot services memory Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> HID: Add HID_CLAIMED_INPUT guards in raw_event callbacks missing them Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> can: usb: f81604: handle bulk write errors properly Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> can: usb: f81604: handle short interrupt urb messages properly Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> can: usb: etas_es58x: correctly anchor the urb in the read bulk callback Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> can: ucan: Fix infinite loop from zero-length messages Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> can: usb: f81604: correctly anchor the urb in the read bulk callback Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> can: ems_usb: ems_usb_read_bulk_callback(): check the proper length of a message Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> net: usb: pegasus: validate USB endpoints Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> net: usb: kalmia: validate USB endpoints Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> net: usb: kaweth: validate USB endpoints Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> nfc: pn533: properly drop the usb interface reference on disconnect Jens Axboe <axboe(a)kernel.dk> media: dvb-core: fix wrong reinitialization of ringbuffer on reopen Jann Horn <jannh(a)google.com> eventpoll: Fix integer overflow in ep_loop_check_proc() Alex Deucher <alexander.deucher(a)amd.com> drm/amdgpu: keep vga memory on MacBooks with switchable graphics Mario Limonciello <mario.limonciello(a)amd.com> drm/amd: Drop special case for yellow carp without discovery Ethan Nelson-Moore <enelsonmoore(a)gmail.com> net: arcnet: com20020-pci: fix support for 2.5Mbit cards Takashi Iwai <tiwai(a)suse.de> ALSA: hda/conexant: Fix headphone jack handling on Acer Swift SF314 Gui-Dong Han <hanguidong02(a)gmail.com> hwmon: (max16065) Use READ/WRITE_ONCE to avoid compiler optimization induced race Takashi Iwai <tiwai(a)suse.de> ALSA: hda/conexant: Add quirk for HP ZBook Studio G4 Mario Limonciello <mario.limonciello(a)amd.com> drm/amd: Fix hang on amdgpu unload by using pci_dev_is_disconnected() Thomas Richard (TI) <thomas.richard(a)bootlin.com> usb: cdns3: fix role switching during resume Théo Lebrun <theo.lebrun(a)bootlin.com> usb: cdns3: call cdns_power_is_lost() only once in cdns_resume() Hongyu Xie <xiehongyu1(a)kylinos.cn> usb: cdns3: remove redundant if branch Johan Hovold <johan(a)kernel.org> clk: tegra: tegra124-emc: fix device leak on set_rate() Shawn Lin <shawn.lin(a)rock-chips.com> arm64: dts: rockchip: Fix rk356x PCIe range mappings Johan Hovold <johan(a)kernel.org> mfd: omap-usb-host: Fix OF populate on driver rebind Uwe Kleine-König <u.kleine-koenig(a)pengutronix.de> mfd: omap-usb-host: Convert to platform remove callback returning void Johan Hovold <johan(a)kernel.org> mfd: qcom-pm8xxx: Fix OF populate on driver rebind Uwe Kleine-König <u.kleine-koenig(a)pengutronix.de> mfd: qcom-pm8xxx: Convert to platform remove callback returning void Yongjian Sun <sunyongjian1(a)huawei.com> ext4: fix e4b bitmap inconsistency reports Matthew Wilcox (Oracle) <willy(a)infradead.org> ext4: convert bd_buddy_page to bd_buddy_folio Matthew Wilcox (Oracle) <willy(a)infradead.org> ext4: convert bd_bitmap_page to bd_bitmap_folio Gou Hao <gouhao(a)uniontech.com> ext4: delete redundant calculations in ext4_mb_get_buddy_page_lock() Joonwon Kang <joonwonkang(a)google.com> mailbox: Prevent out-of-bounds access in fw_mbox_index_xlate() Anup Patel <apatel(a)ventanamicro.com> mailbox: Allow controller specific mapping using fwnode Peng Fan <peng.fan(a)nxp.com> mailbox: Use guard/scoped_guard for con_mutex Peng Fan <peng.fan(a)nxp.com> mailbox: Use dev_err when there is error Tudor Ambarus <tudor.ambarus(a)linaro.org> mailbox: remove unused header files Tudor Ambarus <tudor.ambarus(a)linaro.org> mailbox: sort headers alphabetically Tudor Ambarus <tudor.ambarus(a)linaro.org> mailbox: don't protect of_parse_phandle_with_args with con_mutex Rob Herring (Arm) <robh(a)kernel.org> mailbox: Use of_property_match_string() instead of open-coding Zhang Yi <yi.zhang(a)huawei.com> ext4: drop extent cache when splitting extent fails Zhang Yi <yi.zhang(a)huawei.com> ext4: drop extent cache after doing PARTIAL_VALID1 zeroout Zhang Yi <yi.zhang(a)huawei.com> ext4: don't set EXT4_GET_BLOCKS_CONVERT when splitting before submitting I/O Yang Erkun <yangerkun(a)huawei.com> ext4: correct the comments place for EXT4_EXT_MAY_ZEROOUT Baokun Li <libaokun1(a)huawei.com> ext4: get rid of ppath in ext4_ext_handle_unwritten_extents() Baokun Li <libaokun1(a)huawei.com> ext4: get rid of ppath in ext4_ext_convert_to_initialized() Baokun Li <libaokun1(a)huawei.com> ext4: get rid of ppath in ext4_convert_unwritten_extents_endio() Baokun Li <libaokun1(a)huawei.com> ext4: get rid of ppath in ext4_split_convert_extents() Baokun Li <libaokun1(a)huawei.com> ext4: get rid of ppath in ext4_split_extent() Zhang Yi <yi.zhang(a)huawei.com> ext4: don't zero the entire extent if EXT4_EXT_DATA_PARTIAL_VALID1 Zhang Yi <yi.zhang(a)huawei.com> ext4: subdivide EXT4_EXT_DATA_VALID1 Baokun Li <libaokun1(a)huawei.com> ext4: get rid of ppath in ext4_split_extent_at() Baokun Li <libaokun1(a)huawei.com> ext4: get rid of ppath in ext4_ext_insert_extent() Baokun Li <libaokun1(a)huawei.com> ext4: get rid of ppath in ext4_ext_create_new_leaf() Baokun Li <libaokun1(a)huawei.com> ext4: get rid of ppath in ext4_find_extent() Johan Hovold <johan(a)kernel.org> bus: omap-ocp2scp: fix OF populate on driver rebind Uwe Kleine-König <u.kleine-koenig(a)pengutronix.de> bus: omap-ocp2scp: Convert to platform remove callback returning void Johan Hovold <johan(a)kernel.org> drm/tegra: dsi: fix device leak on probe Sean Christopherson <seanjc(a)google.com> KVM: x86: Ignore -EBUSY when checking nested events from vcpu_block() Sean Christopherson <seanjc(a)google.com> KVM: x86: WARN if a vCPU gets a valid wakeup that KVM can't yet inject Zilin Guan <zilin(a)seu.edu.cn> media: tegra-video: Fix memory leak in __tegra_channel_try_format() Laurent Pinchart <laurent.pinchart(a)ideasonboard.com> media: tegra-video: Use accessors for pad config 'try_*' fields Sean Christopherson <seanjc(a)google.com> KVM: x86: Return "unsupported" instead of "invalid" on access to unsupported PV MSR Sean Christopherson <seanjc(a)google.com> KVM: x86: Rename KVM_MSR_RET_INVALID to KVM_MSR_RET_UNSUPPORTED Mathias Krause <minipli(a)grsecurity.net> KVM: x86: Fix KVM_GET_MSRS stack info leak Ilpo Järvinen <ilpo.jarvinen(a)linux.intel.com> PCI: Use resource_set_range() that correctly sets ->end Ilpo Järvinen <ilpo.jarvinen(a)linux.intel.com> resource: Add resource set range and size helpers Puranjay Mohan <puranjay12(a)gmail.com> PCI: Use resource names in PCI log messages Puranjay Mohan <puranjay12(a)gmail.com> PCI: Update BAR # and window messages Johan Hovold <johan(a)kernel.org> memory: mtk-smi: fix device leak on larb probe Johan Hovold <johan(a)kernel.org> memory: mtk-smi: fix device leaks on common probe Uwe Kleine-König <u.kleine-koenig(a)pengutronix.de> memory: mtk-smi: Convert to platform remove callback returning void Bjorn Helgaas <bhelgaas(a)google.com> PCI: Correct PCI_CAP_EXP_ENDPOINT_SIZEOF_V2 value Kohei Enju <kohei(a)enjuk.jp> bpf: Fix stack-out-of-bounds write in devmap Mark Harmstone <mark(a)harmstone.com> btrfs: fix compat mask in error messages in btrfs_check_features() Mark Harmstone <mark(a)harmstone.com> btrfs: fix warning in scrub_verify_one_metadata() Mark Harmstone <mark(a)harmstone.com> btrfs: fix objectid value in error message in check_extent_data_ref() Mark Harmstone <mark(a)harmstone.com> btrfs: fix incorrect key offset in error message in check_dev_extent_item() Johannes Thumshirn <johannes.thumshirn(a)wdc.com> btrfs: add support for inserting raid stripe extents Johannes Thumshirn <johannes.thumshirn(a)wdc.com> btrfs: read raid stripe tree from disk Johannes Thumshirn <johannes.thumshirn(a)wdc.com> btrfs: add raid stripe tree definitions Josef Bacik <josef(a)toxicpanda.com> btrfs: move btrfs_extref_hash into inode-item.h Josef Bacik <josef(a)toxicpanda.com> btrfs: remove btrfs_crc32c wrapper Josef Bacik <josef(a)toxicpanda.com> btrfs: move btrfs_crc32c_final into free-space-cache.c Richard Fitzgerald <rf(a)opensource.cirrus.com> ALSA: hda: cs35l56: Fix signedness error in cs35l56_hda_posture_put() Kuninori Morimoto <kuninori.morimoto.gx(a)renesas.com> ALSA: pci: hda: use snd_kcontrol_chip() Peter Zijlstra <peterz(a)infradead.org> perf: Fix __perf_event_overflow() vs perf_remove_from_context() race Takashi Iwai <tiwai(a)suse.de> ALSA: usb-audio: Use inclusive terms Takashi Iwai <tiwai(a)suse.de> ALSA: usb-audio: Cap the packet size pre-calculations Peter Wang <peter.wang(a)mediatek.com> scsi: ufs: core: Move link recovery for hibern8 exit failure to wl_resume Mathieu Desnoyers <mathieu.desnoyers(a)efficios.com> rseq: Clarify rseq registration rseq_size bound check comment Geoffrey D. Bennett <g(a)b4.vu> ALSA: usb-audio: Remove VALIDATE_RATES quirk for Focusrite devices Salomon Dushimirimana <salomondush(a)google.com> scsi: pm8001: Fix use-after-free in pm8001_queue_command() Mathias Krause <minipli(a)grsecurity.net> scsi: lpfc: Properly set WC for DPP mapping Nam Cao <namcao(a)linutronix.de> irqchip/sifive-plic: Fix frozen interrupt due to affinity setting Felix Gu <ustc.gu(a)gmail.com> drm/logicvc: Fix device node reference leak in logicvc_drm_config_parse() Ian Forbes <ian.forbes(a)broadcom.com> drm/vmwgfx: Return the correct value in vmw_translate_ptr functions Brad Spengler <brad.spengler(a)opensrcsec.com> drm/vmwgfx: Fix invalid kref_put callback in vmw_bo_dirty_release ------------- Diffstat: Documentation/hwmon/aht10.rst | 10 +- Makefile | 12 +- arch/arm/include/asm/string.h | 14 +- .../arm64/boot/dts/qcom/sdm845-oneplus-common.dtsi | 1 - arch/arm64/boot/dts/rockchip/rk3568.dtsi | 4 +- arch/arm64/boot/dts/rockchip/rk356x.dtsi | 2 +- arch/arm64/include/asm/pgtable-prot.h | 10 +- arch/arm64/include/asm/pgtable.h | 7 +- arch/arm64/mm/mmu.c | 92 ++-- arch/loongarch/include/asm/uaccess.h | 14 +- arch/parisc/include/asm/pgtable.h | 2 +- arch/parisc/kernel/cache.c | 4 +- arch/parisc/kernel/head.S | 7 +- arch/parisc/kernel/setup.c | 20 +- arch/powerpc/include/asm/uaccess.h | 2 +- arch/powerpc/platforms/83xx/km83xx.c | 4 +- arch/riscv/kernel/traps.c | 5 +- arch/s390/include/asm/processor.h | 2 +- arch/s390/lib/xor.c | 4 +- arch/x86/boot/compressed/sev.c | 5 + arch/x86/include/asm/efi.h | 2 +- arch/x86/include/asm/msr-index.h | 5 +- arch/x86/kernel/apic/apic.c | 6 + arch/x86/kernel/apic/x2apic_uv_x.c | 18 +- arch/x86/kernel/sev-shared.c | 104 +++- arch/x86/kernel/sev.c | 5 +- arch/x86/kernel/uprobes.c | 24 + arch/x86/kvm/svm/avic.c | 30 +- arch/x86/kvm/svm/svm.c | 11 +- arch/x86/kvm/vmx/vmx.c | 2 +- arch/x86/kvm/x86.c | 69 ++- arch/x86/kvm/x86.h | 15 +- arch/x86/platform/efi/efi.c | 2 +- arch/x86/platform/efi/quirks.c | 55 ++- drivers/acpi/acpi_processor.c | 15 +- drivers/acpi/osi.c | 13 + drivers/acpi/osl.c | 2 +- drivers/acpi/sleep.c | 8 + drivers/base/power/runtime.c | 1 + drivers/base/property.c | 27 +- drivers/block/drbd/drbd_actlog.c | 53 +- drivers/block/drbd/drbd_interval.h | 5 +- drivers/block/drbd/drbd_req.c | 3 +- drivers/bluetooth/btqca.c | 2 + drivers/bus/omap-ocp2scp.c | 19 +- drivers/cache/ax45mp_cache.c | 4 +- drivers/clk/tegra/clk-tegra124-emc.c | 2 +- drivers/cpuidle/cpuidle.c | 10 - drivers/crypto/atmel-sha204a.c | 5 +- drivers/dma/mmp_pdma.c | 6 + drivers/firmware/arm_scpi.c | 5 +- drivers/firmware/efi/mokvar-table.c | 2 +- drivers/gpu/drm/amd/amdgpu/amdgpu_amdkfd_gpuvm.c | 6 +- drivers/gpu/drm/amd/amdgpu/amdgpu_device.c | 8 +- drivers/gpu/drm/amd/amdgpu/amdgpu_gmc.c | 14 +- drivers/gpu/drm/amd/amdgpu/amdgpu_kms.c | 2 +- drivers/gpu/drm/amd/amdgpu/amdgpu_ras_eeprom.c | 20 +- drivers/gpu/drm/amd/amdgpu/gmc_v9_0.c | 21 +- drivers/gpu/drm/amd/amdgpu/mmhub_v2_0.c | 9 +- drivers/gpu/drm/amd/amdgpu/mmhub_v2_3.c | 3 +- drivers/gpu/drm/amd/amdgpu/mmhub_v3_0.c | 3 +- drivers/gpu/drm/amd/amdgpu/mmhub_v3_0_1.c | 3 +- drivers/gpu/drm/amd/amdgpu/mmhub_v3_0_2.c | 3 +- drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm.c | 4 +- .../drm/amd/display/amdgpu_dm/amdgpu_dm_pp_smu.c | 1 + .../amd/display/dc/clk_mgr/dce110/dce110_clk_mgr.c | 2 +- drivers/gpu/drm/amd/display/dc/core/dc_stream.c | 2 +- .../gpu/drm/amd/display/dc/dcn32/dcn32_resource.c | 2 + drivers/gpu/drm/amd/display/dc/dm_services_types.h | 2 +- drivers/gpu/drm/amd/include/dm_pp_interface.h | 1 + drivers/gpu/drm/amd/pm/amdgpu_dpm_internal.c | 67 +++ drivers/gpu/drm/amd/pm/inc/amdgpu_dpm_internal.h | 2 + drivers/gpu/drm/amd/pm/legacy-dpm/kv_dpm.c | 4 +- drivers/gpu/drm/amd/pm/legacy-dpm/legacy_dpm.c | 6 +- drivers/gpu/drm/amd/pm/legacy-dpm/si_dpm.c | 69 +-- drivers/gpu/drm/amd/pm/powerplay/amd_powerplay.c | 11 +- drivers/gpu/drm/bridge/samsung-dsim.c | 25 +- drivers/gpu/drm/bridge/ti-sn65dsi83.c | 13 +- drivers/gpu/drm/bridge/ti-sn65dsi86.c | 118 ++++- drivers/gpu/drm/drm_file.c | 5 +- drivers/gpu/drm/drm_mode_config.c | 9 +- drivers/gpu/drm/exynos/exynos_drm_drv.h | 1 + drivers/gpu/drm/exynos/exynos_drm_vidi.c | 72 ++- drivers/gpu/drm/i915/gem/i915_gem_shmem.c | 12 +- drivers/gpu/drm/i915/gt/intel_engine_cs.c | 3 +- drivers/gpu/drm/logicvc/logicvc_drm.c | 4 +- drivers/gpu/drm/msm/dsi/dsi_host.c | 62 ++- drivers/gpu/drm/msm/msm_gpummu.c | 2 +- drivers/gpu/drm/nouveau/nouveau_connector.c | 3 + drivers/gpu/drm/radeon/si_dpm.c | 4 +- drivers/gpu/drm/scheduler/sched_main.c | 1 + drivers/gpu/drm/solomon/ssd130x.c | 186 +++++-- drivers/gpu/drm/solomon/ssd130x.h | 5 +- drivers/gpu/drm/tegra/dsi.c | 6 +- drivers/gpu/drm/vmwgfx/vmwgfx_execbuf.c | 4 +- drivers/gpu/drm/vmwgfx/vmwgfx_page_dirty.c | 9 +- drivers/hid/hid-cmedia.c | 2 +- drivers/hid/hid-creative-sb0540.c | 2 +- drivers/hid/hid-zydacron.c | 2 +- drivers/hwmon/Kconfig | 6 +- drivers/hwmon/aht10.c | 21 +- drivers/hwmon/it87.c | 5 +- drivers/hwmon/max16065.c | 26 +- drivers/hwmon/pmbus/isl68137.c | 7 +- drivers/hwmon/pmbus/mp2975.c | 2 + drivers/hwmon/pmbus/q54sj108a2.c | 19 +- drivers/i2c/busses/i2c-cp2615.c | 5 +- drivers/i2c/busses/i2c-fsi.c | 1 + drivers/i2c/busses/i2c-pxa.c | 17 +- drivers/i3c/master/dw-i3c-master.c | 4 +- drivers/i3c/master/mipi-i3c-hci/cmd.h | 1 + drivers/i3c/master/mipi-i3c-hci/cmd_v1.c | 2 +- drivers/i3c/master/mipi-i3c-hci/cmd_v2.c | 2 +- drivers/i3c/master/mipi-i3c-hci/core.c | 6 +- drivers/i3c/master/mipi-i3c-hci/dma.c | 4 +- drivers/iio/chemical/bme680_core.c | 2 +- drivers/iio/chemical/sps30_i2c.c | 2 +- drivers/iio/chemical/sps30_serial.c | 2 +- drivers/iio/dac/ds4424.c | 2 +- drivers/iio/frequency/adf4377.c | 2 +- drivers/iio/gyro/mpu3050-core.c | 18 +- drivers/iio/gyro/mpu3050-i2c.c | 3 +- drivers/iio/imu/inv_icm42600/inv_icm42600_accel.c | 2 + drivers/iio/imu/inv_icm42600/inv_icm42600_gyro.c | 2 + drivers/iio/industrialio-buffer.c | 6 +- drivers/iio/light/bh1780.c | 4 +- drivers/iio/potentiometer/mcp4131.c | 2 +- drivers/infiniband/hw/irdma/verbs.c | 2 +- drivers/infiniband/hw/mthca/mthca_provider.c | 5 +- drivers/iommu/intel/dmar.c | 3 +- drivers/irqchip/irq-gic-v3-its.c | 4 + drivers/irqchip/irq-sifive-plic.c | 7 +- drivers/mailbox/mailbox.c | 150 +++--- drivers/md/dm-verity-fec.c | 4 +- drivers/md/dm-verity-fec.h | 3 - drivers/media/dvb-core/dmxdev.c | 4 +- drivers/media/dvb-core/dvb_net.c | 3 + drivers/memory/mtk-smi.c | 13 +- drivers/mfd/omap-usb-host.c | 11 +- drivers/mfd/qcom-pm8xxx.c | 14 +- drivers/mmc/host/mmci_qcom_dml.c | 1 + drivers/mmc/host/sdhci-pci-gli.c | 9 + drivers/mmc/host/sdhci.c | 9 +- drivers/mtd/nand/raw/brcmnand/brcmnand.c | 6 +- drivers/mtd/nand/raw/cadence-nand-controller.c | 2 +- drivers/mtd/nand/raw/nand_base.c | 14 +- drivers/mtd/nand/raw/pl35x-nand-controller.c | 3 + drivers/mtd/parsers/redboot.c | 6 +- drivers/net/arcnet/com20020-pci.c | 16 +- drivers/net/bonding/bond_debugfs.c | 16 +- drivers/net/bonding/bond_main.c | 19 +- drivers/net/bonding/bond_options.c | 2 + drivers/net/caif/caif_serial.c | 3 + drivers/net/can/spi/hi311x.c | 5 +- drivers/net/can/spi/mcp251x.c | 15 +- drivers/net/can/usb/ems_usb.c | 7 +- drivers/net/can/usb/etas_es58x/es58x_core.c | 8 +- drivers/net/can/usb/f81604.c | 45 +- drivers/net/can/usb/gs_usb.c | 22 +- drivers/net/can/usb/ucan.c | 2 +- drivers/net/dsa/bcm_sf2.c | 8 +- drivers/net/dsa/microchip/ksz_ptp.c | 11 +- drivers/net/dsa/realtek/rtl8365mb.c | 5 +- drivers/net/ethernet/amd/xgbe/xgbe-common.h | 2 +- drivers/net/ethernet/amd/xgbe/xgbe-drv.c | 14 +- drivers/net/ethernet/amd/xgbe/xgbe-main.c | 1 - drivers/net/ethernet/amd/xgbe/xgbe-phy-v2.c | 82 +++- drivers/net/ethernet/amd/xgbe/xgbe.h | 7 +- drivers/net/ethernet/arc/emac_main.c | 11 + drivers/net/ethernet/broadcom/bnxt/bnxt.c | 25 +- drivers/net/ethernet/broadcom/bnxt/bnxt.h | 2 +- drivers/net/ethernet/broadcom/bnxt/bnxt_xdp.c | 7 - drivers/net/ethernet/broadcom/genet/bcmgenet_wol.c | 2 +- drivers/net/ethernet/cadence/macb.h | 7 + drivers/net/ethernet/cadence/macb_main.c | 184 ++++++- drivers/net/ethernet/cadence/macb_ptp.c | 4 +- .../net/ethernet/freescale/dpaa2/dpaa2-switch.c | 7 +- drivers/net/ethernet/google/gve/gve.h | 1 + drivers/net/ethernet/google/gve/gve_main.c | 5 +- drivers/net/ethernet/google/gve/gve_tx_dqo.c | 52 +- drivers/net/ethernet/intel/e1000/e1000_main.c | 2 - drivers/net/ethernet/intel/e1000e/defines.h | 1 + drivers/net/ethernet/intel/e1000e/ich8lan.c | 9 + drivers/net/ethernet/intel/e1000e/netdev.c | 2 - drivers/net/ethernet/intel/i40e/i40e_main.c | 41 +- drivers/net/ethernet/intel/i40e/i40e_txrx.c | 5 +- drivers/net/ethernet/intel/i40e/i40e_virtchnl_pf.c | 14 +- drivers/net/ethernet/intel/iavf/iavf_main.c | 9 +- drivers/net/ethernet/intel/ice/ice_common.c | 13 +- drivers/net/ethernet/intel/ice/ice_ethtool.c | 35 +- drivers/net/ethernet/intel/igc/igc_main.c | 7 +- drivers/net/ethernet/intel/ixgbevf/vf.c | 3 +- drivers/net/ethernet/marvell/mvpp2/mvpp2_main.c | 4 +- .../net/ethernet/marvell/octeon_ep/octep_main.c | 48 +- drivers/net/ethernet/marvell/octeon_ep/octep_rx.c | 27 +- .../ethernet/marvell/octeontx2/af/rvu_devlink.c | 468 ++++++------------ drivers/net/ethernet/mediatek/mtk_eth_soc.c | 15 +- .../ethernet/mellanox/mlx5/core/en/reporter_tx.c | 1 - .../ethernet/mellanox/mlx5/core/en_accel/ipsec.h | 1 + .../mellanox/mlx5/core/en_accel/ipsec_offload.c | 52 +- drivers/net/ethernet/mellanox/mlx5/core/esw/qos.c | 23 +- drivers/net/ethernet/mellanox/mlx5/core/eswitch.c | 30 +- drivers/net/ethernet/mellanox/mlx5/core/eswitch.h | 3 + .../ethernet/mellanox/mlx5/core/eswitch_offloads.c | 18 +- drivers/net/ethernet/microsoft/mana/hw_channel.c | 6 +- drivers/net/ethernet/microsoft/mana/mana_en.c | 23 +- drivers/net/ethernet/stmicro/stmmac/common.h | 1 - drivers/net/ethernet/stmicro/stmmac/dwmac-intel.c | 4 - .../net/ethernet/stmicro/stmmac/dwmac-loongson.c | 9 +- drivers/net/ethernet/stmicro/stmmac/stmmac.h | 2 - drivers/net/ethernet/stmicro/stmmac/stmmac_main.c | 54 +-- .../net/ethernet/stmicro/stmmac/stmmac_platform.c | 8 - drivers/net/ethernet/ti/am65-cpsw-nuss.c | 2 +- drivers/net/ethernet/ti/cpsw_ale.c | 9 +- drivers/net/mctp/mctp-i2c.c | 1 + drivers/net/phy/phy_device.c | 25 +- drivers/net/phy/sfp.c | 62 ++- drivers/net/usb/aqc111.c | 12 +- drivers/net/usb/cdc_ncm.c | 10 +- drivers/net/usb/kalmia.c | 7 + drivers/net/usb/kaweth.c | 13 + drivers/net/usb/lan78xx.c | 10 +- drivers/net/usb/lan78xx.h | 3 + drivers/net/usb/pegasus.c | 13 +- drivers/net/vxlan/vxlan_core.c | 5 + drivers/net/wireless/marvell/libertas/main.c | 4 +- .../net/wireless/mediatek/mt76/mt76_connac_mac.c | 1 + drivers/net/wireless/mediatek/mt76/mt7996/mac.c | 1 + drivers/net/wireless/st/cw1200/pm.c | 2 + drivers/net/wireless/ti/wlcore/main.c | 4 +- drivers/net/wireless/ti/wlcore/tx.c | 2 +- drivers/nfc/nxp-nci/i2c.c | 4 +- drivers/nfc/pn533/usb.c | 1 + drivers/nvdimm/bus.c | 5 +- drivers/nvme/host/pci.c | 8 +- drivers/nvme/host/pr.c | 10 +- drivers/pci/iov.c | 7 +- drivers/pci/pci.c | 85 +++- drivers/pci/pci.h | 2 + drivers/pci/probe.c | 32 +- drivers/pci/quirks.c | 15 +- drivers/pci/setup-bus.c | 30 +- drivers/pci/setup-res.c | 72 +-- drivers/pinctrl/cirrus/pinctrl-cs42l43.c | 5 +- drivers/pinctrl/pinctrl-equilibrium.c | 31 +- drivers/platform/x86/amd/pmc/pmc.c | 3 + drivers/platform/x86/amd/pmc/pmc.h | 1 + drivers/platform/x86/dell/dell-wmi-base.c | 6 + .../dell/dell-wmi-sysman/passwordattr-interface.c | 1 - .../platform/x86/hp/hp-bioscfg/enum-attributes.c | 9 +- drivers/platform/x86/thinkpad_acpi.c | 6 +- drivers/pmdomain/bcm/bcm2835-power.c | 18 +- drivers/regulator/pca9450-regulator.c | 41 +- drivers/remoteproc/mtk_scp.c | 39 ++ drivers/remoteproc/qcom_sysmon.c | 2 +- drivers/s390/block/dasd_eckd.c | 16 + drivers/s390/crypto/zcrypt_ccamisc.c | 12 +- drivers/s390/crypto/zcrypt_cex4.c | 3 +- drivers/scsi/hisi_sas/hisi_sas.h | 43 +- drivers/scsi/hisi_sas/hisi_sas_main.c | 42 +- drivers/scsi/hisi_sas/hisi_sas_v3_hw.c | 246 ++++++---- drivers/scsi/lpfc/lpfc_init.c | 2 + drivers/scsi/lpfc/lpfc_sli.c | 36 +- drivers/scsi/lpfc/lpfc_sli4.h | 3 + drivers/scsi/mpi3mr/mpi3mr_fw.c | 32 +- drivers/scsi/pm8001/pm8001_sas.c | 5 +- drivers/scsi/scsi_scan.c | 7 +- drivers/scsi/ses.c | 5 +- drivers/scsi/storvsc_drv.c | 5 +- drivers/soc/fsl/qbman/qman.c | 24 +- drivers/soc/qcom/pmic_glink.c | 10 +- drivers/spi/spi.c | 25 +- drivers/staging/media/tegra-video/vi.c | 27 +- drivers/staging/rtl8723bs/core/rtw_ieee80211.c | 15 +- drivers/staging/rtl8723bs/core/rtw_mlme.c | 5 +- drivers/target/target_core_configfs.c | 15 +- drivers/tty/serial/8250/8250_dma.c | 15 + drivers/tty/serial/8250/8250_pci.c | 17 + drivers/tty/serial/8250/8250_port.c | 6 + drivers/tty/serial/uartlite.c | 1 + drivers/ufs/core/ufshcd.c | 26 +- drivers/usb/cdns3/core.c | 11 +- drivers/usb/class/cdc-acm.c | 5 + drivers/usb/class/cdc-acm.h | 1 + drivers/usb/class/cdc-wdm.c | 4 +- drivers/usb/class/usbtmc.c | 6 +- drivers/usb/core/message.c | 100 +++- drivers/usb/core/phy.c | 8 +- drivers/usb/core/quirks.c | 16 + drivers/usb/dwc3/dwc3-pci.c | 2 + drivers/usb/gadget/function/f_mass_storage.c | 12 +- drivers/usb/gadget/function/f_tcm.c | 14 + drivers/usb/host/xhci-ring.c | 1 + drivers/usb/host/xhci.c | 4 +- drivers/usb/image/mdc800.c | 6 +- drivers/usb/misc/uss720.c | 2 +- drivers/usb/misc/yurex.c | 2 +- drivers/usb/renesas_usbhs/common.c | 9 + drivers/usb/roles/class.c | 7 +- drivers/usb/serial/f81232.c | 77 +-- drivers/usb/typec/tcpm/tcpm.c | 2 +- drivers/usb/typec/ucsi/ucsi_glink.c | 27 +- drivers/xen/xen-acpi-processor.c | 7 +- fs/binfmt_misc.c | 4 +- fs/btrfs/Makefile | 2 +- fs/btrfs/accessors.h | 8 + fs/btrfs/bio.c | 21 + fs/btrfs/block-rsv.c | 6 + fs/btrfs/ctree.h | 19 - fs/btrfs/disk-io.c | 46 +- fs/btrfs/extent-tree.c | 7 +- fs/btrfs/extent_io.c | 3 +- fs/btrfs/extent_io.h | 3 +- fs/btrfs/file.c | 16 + fs/btrfs/free-space-cache.c | 9 +- fs/btrfs/fs.h | 1 + fs/btrfs/inode-item.h | 7 + fs/btrfs/inode.c | 27 +- fs/btrfs/ioctl.c | 24 +- fs/btrfs/locking.c | 1 + fs/btrfs/ordered-data.c | 1 + fs/btrfs/ordered-data.h | 2 + fs/btrfs/raid-stripe-tree.c | 87 ++++ fs/btrfs/raid-stripe-tree.h | 35 ++ fs/btrfs/scrub.c | 2 +- fs/btrfs/send.c | 6 +- fs/btrfs/transaction.c | 16 + fs/btrfs/tree-checker.c | 6 +- fs/btrfs/tree-log.c | 6 + fs/btrfs/uuid-tree.c | 43 ++ fs/btrfs/uuid-tree.h | 2 + fs/btrfs/volumes.c | 4 +- fs/btrfs/volumes.h | 16 +- fs/ceph/dir.c | 15 +- fs/ceph/mds_client.c | 3 + fs/eventpoll.c | 5 +- fs/ext4/ext4.h | 9 +- fs/ext4/extents.c | 536 ++++++++++++--------- fs/ext4/fast_commit.c | 8 +- fs/ext4/mballoc.c | 242 +++++----- fs/ext4/mballoc.h | 4 +- fs/ext4/migrate.c | 5 +- fs/ext4/move_extent.c | 7 +- fs/f2fs/gc.c | 19 +- fs/iomap/buffered-io.c | 15 +- fs/iomap/direct-io.c | 10 +- fs/nfs/file.c | 8 +- fs/nfs/nfs4proc.c | 6 +- fs/nfs/nfstrace.h | 39 +- fs/nfs/pnfs.c | 58 ++- fs/nfs/pnfs.h | 17 +- fs/nfs/read.c | 8 +- fs/nfs/write.c | 43 +- fs/nfsd/nfs4xdr.c | 9 +- fs/nfsd/nfsctl.c | 14 +- fs/nfsd/state.h | 17 +- fs/smb/client/cifsencrypt.c | 3 +- fs/smb/client/cifsfs.c | 7 +- fs/smb/client/cifsglob.h | 11 + fs/smb/client/cifsproto.h | 1 + fs/smb/client/connect.c | 5 +- fs/smb/client/dir.c | 1 + fs/smb/client/file.c | 29 +- fs/smb/client/fs_context.c | 2 +- fs/smb/client/misc.c | 43 ++ fs/smb/client/smb2inode.c | 4 +- fs/smb/client/smb2ops.c | 14 +- fs/smb/client/smb2pdu.c | 29 +- fs/smb/client/smb2transport.c | 4 +- fs/smb/client/trace.h | 2 + fs/smb/client/transport.c | 21 +- fs/smb/server/Kconfig | 1 + fs/smb/server/auth.c | 26 +- fs/smb/server/oplock.c | 35 +- fs/smb/server/oplock.h | 5 +- fs/smb/server/smb2pdu.c | 26 +- fs/squashfs/cache.c | 3 + fs/xfs/xfs_bmap_item.c | 3 +- fs/xfs/xfs_dquot.c | 8 +- fs/xfs/xfs_log.c | 2 + include/linux/bpf.h | 6 + include/linux/indirect_call_wrapper.h | 18 +- include/linux/ioport.h | 32 ++ include/linux/irqchip/arm-gic-v3.h | 1 + include/linux/mailbox_client.h | 2 +- include/linux/mailbox_controller.h | 9 +- include/linux/mlx5/mlx5_ifc.h | 4 +- include/linux/mmc/host.h | 9 +- include/linux/nfs_fs.h | 1 + include/linux/stmmac.h | 1 - include/linux/trace_recursion.h | 9 + include/linux/uprobes.h | 1 + include/linux/usb.h | 8 +- include/net/act_api.h | 1 + include/net/bonding.h | 1 + include/net/dsa.h | 1 + include/net/dst.h | 34 +- include/net/ip.h | 7 +- include/net/ip6_route.h | 2 +- include/net/netfilter/nf_tables.h | 5 + include/net/route.h | 2 +- include/net/sch_generic.h | 43 ++ include/net/tc_act/tc_gate.h | 33 +- include/net/tc_act/tc_ife.h | 4 +- include/net/udp_tunnel.h | 2 +- include/net/xdp_sock_drv.h | 24 +- include/net/xsk_buff_pool.h | 3 +- include/trace/events/btrfs.h | 4 +- include/trace/events/kmem.h | 8 +- include/trace/events/rxrpc.h | 4 + include/uapi/linux/btrfs.h | 1 + include/uapi/linux/btrfs_tree.h | 29 ++ include/uapi/linux/pci_regs.h | 2 +- io_uring/kbuf.c | 8 +- kernel/bpf/devmap.c | 22 +- kernel/bpf/syscall.c | 3 +- kernel/bpf/trampoline.c | 4 +- kernel/bpf/verifier.c | 4 + kernel/cgroup/cgroup.c | 1 + kernel/events/core.c | 42 +- kernel/events/uprobes.c | 10 +- kernel/fork.c | 2 +- kernel/kprobes.c | 51 +- kernel/rcu/tree_nocb.h | 5 +- kernel/rseq.c | 5 +- kernel/sched/fair.c | 6 - kernel/sched/idle.c | 45 +- kernel/time/time.c | 2 +- kernel/trace/trace.c | 12 +- kernel/trace/trace_events.c | 52 +- kernel/trace/trace_events_trigger.c | 3 + lib/bootconfig.c | 9 +- mm/kfence/core.c | 29 +- mm/mempolicy.c | 4 +- net/atm/lec.c | 26 +- net/batman-adv/bat_iv_ogm.c | 3 + net/batman-adv/bat_v_elp.c | 10 +- net/batman-adv/hard-interface.c | 8 +- net/batman-adv/hard-interface.h | 1 + net/bluetooth/hci_conn.c | 4 +- net/bluetooth/hci_sync.c | 2 +- net/bluetooth/hidp/core.c | 16 +- net/bluetooth/l2cap_core.c | 51 +- net/bluetooth/smp.c | 2 +- net/bridge/br_device.c | 2 +- net/bridge/br_input.c | 2 +- net/can/bcm.c | 1 + net/ceph/auth.c | 6 +- net/ceph/messenger_v2.c | 31 +- net/ceph/mon_client.c | 6 +- net/core/dst.c | 5 +- net/core/filter.c | 8 +- net/core/sock.c | 16 +- net/dsa/dsa.c | 59 ++- net/ipv4/icmp.c | 4 +- net/ipv4/route.c | 8 +- net/ipv4/tcp.c | 3 +- net/ipv4/tcp_input.c | 18 +- net/ipv4/tcp_ipv4.c | 3 +- net/ipv4/tcp_offload.c | 74 +++ net/ipv4/udp_offload.c | 3 +- net/ipv6/ip6_output.c | 35 +- net/ipv6/route.c | 15 +- net/ipv6/tcp_ipv6.c | 3 +- net/ipv6/tcpv6_offload.c | 65 +++ net/l2tp/l2tp_ppp.c | 25 +- net/mac80211/debugfs.c | 14 +- net/mac80211/link.c | 2 + net/mac80211/mesh.c | 6 + net/mac80211/mlme.c | 3 + net/mctp/route.c | 13 +- net/mpls/af_mpls.c | 1 + net/mptcp/pm.c | 2 +- net/mptcp/pm_netlink.c | 72 ++- net/mptcp/protocol.h | 2 + net/ncsi/ncsi-aen.c | 3 +- net/ncsi/ncsi-rsp.c | 16 +- net/netfilter/nf_bpf_link.c | 2 +- net/netfilter/nf_conntrack_h323_asn1.c | 4 + net/netfilter/nf_conntrack_netlink.c | 67 ++- net/netfilter/nf_conntrack_sip.c | 6 +- net/netfilter/nf_tables_api.c | 6 +- net/netfilter/nfnetlink_cthelper.c | 8 +- net/netfilter/nfnetlink_osf.c | 13 + net/netfilter/nfnetlink_queue.c | 4 +- net/netfilter/nft_ct.c | 9 + net/netfilter/nft_set_pipapo.c | 54 ++- net/netfilter/nft_set_pipapo.h | 2 + net/netfilter/xt_CT.c | 4 + net/netfilter/xt_IDLETIMER.c | 6 + net/netfilter/xt_dccp.c | 4 +- net/netfilter/xt_tcpudp.c | 6 +- net/netfilter/xt_time.c | 4 +- net/nfc/nci/core.c | 21 +- net/nfc/nci/data.c | 12 +- net/nfc/rawsock.c | 11 + net/rds/tcp.c | 14 +- net/rose/af_rose.c | 5 + net/rxrpc/ar-internal.h | 9 +- net/rxrpc/conn_event.c | 2 +- net/rxrpc/output.c | 11 +- net/rxrpc/peer_event.c | 17 +- net/rxrpc/proc.c | 4 +- net/rxrpc/recvmsg.c | 19 +- net/rxrpc/rxkad.c | 2 +- net/sched/act_ct.c | 6 + net/sched/act_gate.c | 264 +++++++--- net/sched/act_ife.c | 93 ++-- net/sched/cls_api.c | 7 + net/sched/sch_ets.c | 12 +- net/sched/sch_generic.c | 27 -- net/sched/sch_ingress.c | 14 +- net/sched/sch_teql.c | 8 +- net/smc/af_smc.c | 23 +- net/smc/smc.h | 5 + net/smc/smc_close.c | 2 +- net/sunrpc/cache.c | 26 +- net/sunrpc/xprtrdma/verbs.c | 7 +- net/tipc/socket.c | 2 + net/wireless/core.c | 1 + net/wireless/pmsr.c | 1 + net/wireless/radiotap.c | 4 +- net/xdp/xsk.c | 30 +- net/xdp/xsk_buff_pool.c | 15 +- rust/kernel/kunit.rs | 8 + security/apparmor/apparmorfs.c | 225 +++++---- security/apparmor/include/label.h | 16 +- security/apparmor/include/lib.h | 12 + security/apparmor/include/match.h | 1 + security/apparmor/include/policy.h | 10 +- security/apparmor/include/policy_ns.h | 2 + security/apparmor/include/policy_unpack.h | 83 ++-- security/apparmor/label.c | 12 +- security/apparmor/match.c | 58 ++- security/apparmor/policy.c | 77 ++- security/apparmor/policy_ns.c | 2 + security/apparmor/policy_unpack.c | 65 ++- sound/core/pcm_native.c | 19 +- sound/pci/hda/cs35l56_hda.c | 14 +- sound/pci/hda/patch_conexant.c | 11 + sound/soc/amd/acp3x-rt5682-max9836.c | 9 +- sound/soc/amd/yc/acp6x-mach.c | 14 + sound/soc/codecs/cs42l43-jack.c | 1 + sound/soc/generic/simple-card-utils.c | 48 +- sound/soc/qcom/qdsp6/q6apm-dai.c | 1 + sound/soc/qcom/qdsp6/q6apm-lpass-dais.c | 1 + sound/soc/qcom/qdsp6/q6apm.c | 1 + sound/soc/soc-core.c | 11 +- sound/usb/endpoint.c | 10 +- sound/usb/mixer_scarlett2.c | 2 + sound/usb/quirks.c | 4 +- sound/usb/validate.c | 2 +- tools/bootconfig/main.c | 7 +- tools/objtool/Makefile | 8 +- tools/testing/kunit/kunit_kernel.py | 6 +- tools/testing/kunit/kunit_tool_test.py | 26 + tools/testing/selftests/arm64/abi/hwcap.c | 4 +- tools/testing/selftests/net/mptcp/mptcp_join.sh | 56 +++ tools/testing/selftests/net/mptcp/simult_flows.sh | 11 +- 559 files changed, 6672 insertions(+), 3263 deletions(-)

5 days, 19 hours

[PATCH 6.19 000/220] 6.19.10-rc1 review

by Greg Kroah-Hartman

This is the start of the stable review cycle for the 6.19.10 release. There are 220 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know. Responses should be made by Wed, 25 Mar 2026 13:44:33 +0000. Anything received after that time might be too late. The whole patch series can be found in one patch at: https://www.kernel.org/pub/linux/kernel/v6.x/stable-review/patch-6.19.10-rc… or in the git tree and branch at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-6.19.y and the diffstat can be found below. thanks, greg k-h ------------- Pseudo-Shortlog of commits: Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> Linux 6.19.10-rc1 Guenter Roeck <linux(a)roeck-us.net> hwmon: (max6639) Fix pulses-per-revolution implementation Daniele Ceraolo Spurio <daniele.ceraolospurio(a)intel.com> drm/xe/guc: Fail immediately on GuC load error Suzuki K Poulose <suzuki.poulose(a)arm.com> arm64: realm: Fix PTE_NS_SHARED for 52bit PA support Josh Law <objecting(a)objecting.org> tools/bootconfig: fix fd leak in load_xbc_file() on fstat failure Josh Law <objecting(a)objecting.org> lib/bootconfig: check xbc_init_node() return in override path Kees Cook <kees(a)kernel.org> fs/tests: exec: Remove bad test vector Rahul Bukte <rahul.bukte(a)sony.com> drm/i915/gt: Check set_default_submission() before deferencing Hyunwoo Kim <imv4bel(a)gmail.com> ksmbd: fix use-after-free in durable v2 replay of active file handles Hyunwoo Kim <imv4bel(a)gmail.com> ksmbd: fix use-after-free of share_conf in compound request Jonas Karlman <jonas(a)kwiboo.se> drm/bridge: dw-hdmi-qp: fix multi-channel audio output Andy Nguyen <theofficialflow1996(a)gmail.com> drm/amd: fix dcn 2.01 check Srinivasan Shanmugam <srinivasan.shanmugam(a)amd.com> drm/amd/display: Fix DisplayID not-found handling in parse_edid_displayid_vrr() Joe Damato <joe(a)dama.to> iommu/amd: Block identity domain when SNP enabled Lizhi Hou <lizhi.hou(a)amd.com> iommu/sva: Fix crash in iommu_sva_unbind_device() Antheas Kapenekakis <lkml(a)antheas.dev> iommu: Fix mapping check for 0x0 to avoid re-mapping it Ian Forbes <ian.forbes(a)broadcom.com> drm/vmwgfx: Don't overwrite KMS surface dirty tracker Felix Gu <ustc.gu(a)gmail.com> spi: amlogic-spisg: Fix memory leak in aml_spisg_probe() Felix Gu <ustc.gu(a)gmail.com> spi: amlogic: spifc-a4: Remove redundant clock cleanup Stanislav Kinsburskii <skinsburskii(a)linux.microsoft.com> mshv: Fix use-after-free in mshv_map_user_memory error path Ben Horgan <ben.horgan(a)arm.com> arm_mpam: Fix null pointer dereference when restoring bandwidth counters Ard Biesheuvel <ardb(a)kernel.org> x86/hyperv: Use __naked attribute to fix stackless C function Kamal Dasu <kamal.dasu(a)broadcom.com> mtd: rawnand: brcmnand: skip DMA during panic write Kamal Dasu <kamal.dasu(a)broadcom.com> mtd: rawnand: serialize lock/unlock against other NAND operations Andrei Vagin <avagin(a)google.com> binfmt_elf_fdpic: fix AUXV size calculation for ELF_HWCAP3 and ELF_HWCAP4 Kyle Meyer <kyle.meyer(a)hpe.com> x86/platform/uv: Handle deconfigured sockets William Roche <william.roche(a)oracle.com> x86/mce/amd: Check SMCA feature bit before accessing SMCA MSRs Steven Rostedt <rostedt(a)goodmis.org> tracing: Fix trace_marker copy link list updates Steven Rostedt <rostedt(a)goodmis.org> tracing: Fix failure to read user space from system call trace events Masami Hiramatsu (Google) <mhiramat(a)kernel.org> ring-buffer: Fix to update per-subbuf entries of persistent ring buffer Breno Leitao <leitao(a)debian.org> perf/x86: Move event pointer setup earlier in x86_pmu_enable() Dapeng Mi <dapeng1.mi(a)linux.intel.com> perf/x86/intel: Add missing branch counters constraint apply Felix Gu <ustc.gu(a)gmail.com> irqchip/riscv-rpmi-sysmsi: Fix mailbox channel leak in rpmi_sysmsi_probe() Gabor Juhos <j4g8y7(a)gmail.com> i2c: pxa: defer reset on Armada 3700 when recovery is used Christophe JAILLET <christophe.jaillet(a)wanadoo.fr> i2c: fsi: Fix a potential leak in fsi_i2c_probe() Johan Hovold <johan(a)kernel.org> i2c: cp2615: fix serial string NULL-deref at probe Sanman Pradhan <psanman(a)juniper.net> hwmon: (pmbus/isl68137) Fix unchecked return value and use sysfs_emit() Sanman Pradhan <psanman(a)juniper.net> hwmon: (pmbus/mp2869) Check pmbus_read_byte_data() before using its return value Sanman Pradhan <psanman(a)juniper.net> hwmon: (pmbus/mp2975) Add error check for pmbus_read_word_data() return value Sanman Pradhan <psanman(a)juniper.net> hwmon: (pmbus/ina233) Add error check for pmbus_read_word_data() return value Li Xiasong <lixiasong1(a)huawei.com> MPTCP: fix lock class name family in pm_nl_create_listen_socket Weiming Shi <bestswngs(a)gmail.com> icmp: fix NULL pointer dereference in icmp_tag_validation() Anas Iqbal <mohd.abd.6602(a)gmail.com> net: dsa: bcm_sf2: fix missing clk_disable_unprepare() in error paths Jakub Kicinski <kuba(a)kernel.org> net: shaper: protect from late creation of hierarchy Jakub Kicinski <kuba(a)kernel.org> net: shaper: protect late read accesses to the hierarchy Muhammad Hammad Ijaz <mhijaz(a)amazon.com> net: mvpp2: guard flow control update with global_tx_fc in buffer switching Weiming Shi <bestswngs(a)gmail.com> nfnetlink_osf: validate individual option lengths in fingerprints Pablo Neira Ayuso <pablo(a)netfilter.org> netfilter: nf_tables: release flowtable after rcu grace period on error Florian Westphal <fw(a)strlen.de> netfilter: bpf: defer hook memory release until rcu readers are done Xiang Mei <xmei5(a)asu.edu> net: bonding: fix NULL deref in bond_debug_rlb_hash_show Xiang Mei <xmei5(a)asu.edu> udp_tunnel: fix NULL deref caused by udp_sock_create6 when CONFIG_IPV6=n Jianbo Liu <jianbol(a)nvidia.com> net/mlx5e: Fix race condition during IPSec ESN update Jianbo Liu <jianbol(a)nvidia.com> net/mlx5e: Prevent concurrent access to IPSec ASO context Cosmin Ratiu <cratiu(a)nvidia.com> net/mlx5: qos: Restrict RTNL area to avoid a lock cycle Minhong He <heminhong(a)kylinos.cn> ipv6: add NULL checks for idev in SRv6 paths Fedor Pchelkin <pchelkin(a)ispras.ru> net: macb: fix uninitialized rx_fs_lock Wesley Atwell <atwellwea(a)gmail.com> netdevsim: drop PSP ext ref on forward failure Rafael J. Wysocki <rafael.j.wysocki(a)intel.com> ACPI: processor: Fix previous acpi_processor_errata_piix4() fix Felix Fietkau <nbd(a)nbd.name> wifi: mac80211: always free skb on ieee80211_tx_prepare_skb() failure Guenter Roeck <linux(a)roeck-us.net> wifi: wlcore: Return -ENOMEM instead of -EAGAIN if there is not enough headroom Xiang Mei <xmei5(a)asu.edu> wifi: mac80211: fix NULL deref in mesh_matches_local() Michal Swiatkowski <michal.swiatkowski(a)linux.intel.com> libie: prevent memleak in fwlog code Petr Oros <poros(a)redhat.com> iavf: fix VLAN filter lost on add/delete race Zdenek Bouska <zdenek.bouska(a)siemens.com> igc: fix page fault in XDP TX timestamps handling Kohei Enju <kohei(a)enjuk.jp> igc: fix missing update of skb->tail in igc_xmit_frame() Saket Dumbre <saket.dumbre(a)intel.com> ACPICA: Update the format of Arg3 of _DSM Nikola Z. Ivanov <zlatistiv(a)gmail.com> net: usb: aqc111: Do not perform PM inside suspend callback Daniel Borkmann <daniel(a)iogearbox.net> clsact: Fix use-after-free in init/destroy rollback asymmetry Tobi Gaertner <tob.gaertner(a)me.com> net: usb: cdc_ncm: add ndpoffset to NDP32 nframes bounds check Tobi Gaertner <tob.gaertner(a)me.com> net: usb: cdc_ncm: add ndpoffset to NDP16 nframes bounds check Lorenzo Bianconi <lorenzo(a)kernel.org> net: airoha: Remove airoha_dev_stop() in airoha_remove() Jamal Hadi Salim <jhs(a)mojatatu.com> net/sched: teql: Fix double-free in teql_master_xmit Jiayuan Chen <jiayuan.chen(a)shopee.com> net/smc: fix NULL dereference and UAF in smc_tcp_syn_recv_sock() Eric Dumazet <edumazet(a)google.com> bonding: prevent potential infinite loop in bond_header_parse() Bart Van Assche <bvanassche(a)acm.org> PM: runtime: Fix a race condition related to device removal Rafael J. Wysocki <rafael.j.wysocki(a)intel.com> sched: idle: Consolidate the handling of two special cases Meghana Malladi <m-malladi(a)ti.com> net: ti: icssg-prueth: Fix memory leak in XDP_DROP for non-zero-copy mode Dipayaan Roy <dipayanroy(a)linux.microsoft.com> net: mana: fix use-after-free in mana_hwc_destroy_channel() by reordering teardown Justin Chen <justin.chen(a)broadcom.com> net: bcmgenet: increase WoL poll timeout Guenter Roeck <linux(a)roeck-us.net> crypto: ccp - Fix leaking the same page twice Jenny Guanni Qu <qguanni(a)gmail.com> netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() Jenny Guanni Qu <qguanni(a)gmail.com> netfilter: xt_time: use unsigned int for monthday bit shift Pablo Neira Ayuso <pablo(a)netfilter.org> netfilter: xt_CT: drop pending enqueued packets on template removal Pablo Neira Ayuso <pablo(a)netfilter.org> netfilter: nft_ct: drop pending enqueued packets on removal Pablo Neira Ayuso <pablo(a)netfilter.org> nf_tables: nft_dynset: fix possible stateful expression memleak in error path Jenny Guanni Qu <qguanni(a)gmail.com> netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case Eric Woudstra <ericwouds(a)gmail.com> netfilter: nf_flow_table_ip: reset mac header before vlan push Lukas Johannes Möller <research(a)johannes-moeller.dev> netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() Florian Westphal <fw(a)strlen.de> netfilter: conntrack: add missing netlink policy validations Hyunwoo Kim <imv4bel(a)gmail.com> netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() Sabrina Dubroca <sd(a)queasysnail.net> mpls: add missing unregister_netdevice_notifier to mpls_init Eric Dumazet <edumazet(a)google.com> ip_tunnel: adapt iptunnel_xmit_stats() to NETDEV_PCPU_STAT_DSTATS Jiayuan Chen <jiayuan.chen(a)shopee.com> net/rose: fix NULL pointer dereference in rose_transmit_link on reconnect Hyunwoo Kim <imv4bel(a)gmail.com> bridge: cfm: Fix race condition in peer_mep deletion Kuniyuki Iwashima <kuniyu(a)google.com> af_unix: Give up GC if MSG_PEEK intervened. Dmitry Baryshkov <dmitry.baryshkov(a)oss.qualcomm.com> Bluetooth: qca: fix ROM version reading on WCN3998 chips Shaurya Rane <ssrane_b23(a)ee.vjti.ac.in> Bluetooth: L2CAP: Fix use-after-free in l2cap_unregister_user Luiz Augusto von Dentz <luiz.von.dentz(a)intel.com> Bluetooth: HIDP: Fix possible UAF Wang Tao <wangtao554(a)huawei.com> Bluetooth: MGMT: Fix list corruption and UAF in command complete handlers Michael Grzeschik <m.grzeschik(a)pengutronix.de> Bluetooth: hci_sync: Fix hci_le_create_conn_sync Luiz Augusto von Dentz <luiz.von.dentz(a)intel.com> Bluetooth: ISO: Fix defer tests being unstable Christian Eggers <ceggers(a)arri.de> Bluetooth: SMP: make SM/PER/KDU/BI-04-C happy Christian Eggers <ceggers(a)arri.de> Bluetooth: LE L2CAP: Disconnect if sum of payload sizes exceed SDU Christian Eggers <ceggers(a)arri.de> Bluetooth: LE L2CAP: Disconnect if received packet's SDU exceeds IMTU Cristian Marussi <cristian.marussi(a)arm.com> firmware: arm_scmi: Fix NULL dereference on notify error path Felix Gu <ustc.gu(a)gmail.com> firmware: arm_scpi: Fix device_node reference leak in probe path Yeoreum Yun <yeoreum.yun(a)arm.com> firmware: arm_ffa: Remove vm_id argument in ffa_rxtx_unmap() Geert Uytterhoeven <geert+renesas(a)glider.be> arm64: dts: renesas: r8a78000: Fix out-of-range SPI interrupt numbers Claudiu Beznea <claudiu.beznea.uj(a)bp.renesas.com> arm64: dts: renesas: rzg3s-smarc-som: Set bypass for Versa3 PLL2 Lad Prabhakar <prabhakar.mahadev-lad.rj(a)bp.renesas.com> arm64: dts: renesas: r9a09g087: Fix CPG register region sizes Lad Prabhakar <prabhakar.mahadev-lad.rj(a)bp.renesas.com> arm64: dts: renesas: r9a09g077: Fix CPG register region sizes Fabrizio Castro <fabrizio.castro.jz(a)renesas.com> arm64: dts: renesas: r9a09g057: Remove wdt{0,2,3} nodes Lad Prabhakar <prabhakar.mahadev-lad.rj(a)bp.renesas.com> arm64: dts: renesas: rzv2-evk-cn15-sd: Add ramp delay for SD0 regulator Lad Prabhakar <prabhakar.mahadev-lad.rj(a)bp.renesas.com> arm64: dts: renesas: rzt2h-n2h-evk: Add ramp delay for SD0 card regulator Peddolla Harshavardhan Reddy <peddolla.reddy(a)oss.qualcomm.com> wifi: cfg80211: cancel pmsr_free_wk in cfg80211_pmsr_wdev_down Kuniyuki Iwashima <kuniyu(a)google.com> wifi: mac80211: Fix static_branch_dec() underflow for aql_disable. Nicolas Cavallari <nicolas.cavallari(a)green-communications.fr> wifi: mac80211: use jiffies_delta_to_msecs() for sta_info inactive times Johannes Berg <johannes.berg(a)intel.com> wifi: mac80211: remove keys after disabling beaconing Matthew Wilcox <willy(a)infradead.org> tee: shm: Remove refcounting of kernel pages Chen Ni <nichen(a)iscas.ac.cn> soc: fsl: cpm1: qmc: Fix error check for devm_ioremap_resource() in qmc_qe_init_resources() Richard Genoud <richard.genoud(a)bootlin.com> soc: fsl: qbman: fix race condition in qman_destroy_fq Shawn Lin <shawn.lin(a)rock-chips.com> soc: rockchip: grf: Add missing of_node_put() when returning Felix Gu <ustc.gu(a)gmail.com> cache: ax45mp: Fix device node reference leak in ax45mp_cache_init() Felix Gu <ustc.gu(a)gmail.com> cache: starfive: fix device node leak in starlink_cache_init() Zilin Guan <zilin(a)seu.edu.cn> soc: microchip: mpfs: Fix memory leak in mpfs_sys_controller_probe() ZhengYuan Huang <gality369(a)gmail.com> btrfs: tree-checker: fix misleading root drop_level error message Filipe Manana <fdmanana(a)suse.com> btrfs: log new dentries when logging parent dir of a conflicting inode Luiz Augusto von Dentz <luiz.von.dentz(a)intel.com> Bluetooth: L2CAP: Fix accepting multiple L2CAP_ECRED_CONN_REQ Matthew Brost <matthew.brost(a)intel.com> drm/xe: Open-code GGTT MMIO access protection Sanjay Yadav <sanjay.kumar.yadav(a)intel.com> drm/xe: Fix missing runtime PM reference in ccs_mode_store Matthew Brost <matthew.brost(a)intel.com> drm/xe: Always kill exec queues in xe_guc_submit_pause_abort Ashutosh Dixit <ashutosh.dixit(a)intel.com> drm/xe/oa: Allow reading after disabling OA stream Zhanjun Dong <zhanjun.dong(a)intel.com> drm/xe/guc: Ensure CT state transitions via STOP before DISABLED Jouni Högander <jouni.hogander(a)intel.com> drm/i915/psr: Disable PSR on update_m_n and update_lrr Jouni Högander <jouni.hogander(a)intel.com> drm/i915/psr: Compute PSR entry_setup_frames into intel_crtc_state Imre Deak <imre.deak(a)intel.com> drm/i915/dmc: Fix an unlikely NULL pointer deference at probe Alex Deucher <alexander.deucher(a)amd.com> drm/amdgpu: rework how we handle TLB fences Jesse.Zhang <Jesse.Zhang(a)amd.com> drm/amdgpu: Limit BO list entry count to prevent resource exhaustion Alex Deucher <alexander.deucher(a)amd.com> drm/amdgpu: apply state adjust rules to some additional HAINAN vairants Alex Deucher <alexander.deucher(a)amd.com> drm/radeon: apply state adjust rules to some additional HAINAN vairants Alessio Belle <alessio.belle(a)imgtec.com> drm/imagination: Synchronize interrupts before suspending the GPU Alessio Belle <alessio.belle(a)imgtec.com> drm/imagination: Fix deadlock in soft reset sequence Alex Deucher <alexander.deucher(a)amd.com> drm/amdgpu/mmhub4.1.0: add bounds checking for cid Alex Deucher <alexander.deucher(a)amd.com> drm/amdgpu/mmhub3.0: add bounds checking for cid Alex Deucher <alexander.deucher(a)amd.com> drm/amdgpu/mmhub3.0.2: add bounds checking for cid Alex Deucher <alexander.deucher(a)amd.com> drm/amdgpu/mmhub3.0.1: add bounds checking for cid Alex Deucher <alexander.deucher(a)amd.com> drm/amdgpu/mmhub2.3: add bounds checking for cid Alex Deucher <alexander.deucher(a)amd.com> drm/amdgpu/mmhub2.0: add bounds checking for cid Alex Deucher <alexander.deucher(a)amd.com> drm/amdgpu/gmc9.0: add bounds checking for cid Xi Ruoyao <xry111(a)xry111.site> drm/amd/display: Wrap dcn32_override_min_req_memclk() in DC_FP_{START, END} Maarten Lankhorst <dev(a)lankhorst.se> drm: Fix use-after-free on framebuffers and property blobs when calling drm_dev_unplug Maciej Andrzejewski ICEYE <maciej.andrzejewski(a)m-works.net> serial: uartlite: fix PM runtime usage count underflow on probe Jiayuan Chen <jiayuan.chen(a)shopee.com> serial: core: fix infinite loop in handle_tx() for PORT_UNKNOWN Ilpo Järvinen <ilpo.jarvinen(a)linux.intel.com> serial: 8250_dw: Ensure BUSY is deasserted Ilpo Järvinen <ilpo.jarvinen(a)linux.intel.com> serial: 8250: Add late synchronize_irq() to shutdown to handle DW UART BUSY Ilpo Järvinen <ilpo.jarvinen(a)linux.intel.com> serial: 8250_dw: Rework IIR_NO_INT handling to stop interrupt storm Ilpo Järvinen <ilpo.jarvinen(a)linux.intel.com> serial: 8250_dw: Rework dw8250_handle_irq() locking and IIR handling Ilpo Järvinen <ilpo.jarvinen(a)linux.intel.com> serial: 8250: Add serial8250_handle_irq_locked() Ilpo Järvinen <ilpo.jarvinen(a)linux.intel.com> serial: 8250_dw: Avoid unnecessary LCR writes Ilpo Järvinen <ilpo.jarvinen(a)linux.intel.com> serial: 8250: Protect LCR write in shutdown Peng Zhang <zhangpeng.00(a)bytedance.com> serial: 8250: always disable IRQ during THRE test Raul E Rangel <rrangel(a)chromium.org> serial: 8250: Fix TX deadlock when using DMA Martin Roukala (né Peres) <martin.roukala(a)mupuf.org> serial: 8250_pci: add support for the AX99100 Nicolas Pitre <npitre(a)baylibre.com> vt: save/restore unicode screen buffer for alternate screen Jens Axboe <axboe(a)kernel.dk> io_uring/kbuf: propagate BUF_MORE through early buffer commit path Jens Axboe <axboe(a)kernel.dk> io_uring/kbuf: fix missing BUF_MORE for incremental buffers at EOF Jens Axboe <axboe(a)kernel.dk> io_uring/poll: fix multishot recv missing EOF on wakeup race Lu Baolu <baolu.lu(a)linux.intel.com> iommu/vt-d: Only handle IOPF for SVA when PRI is supported Guanghui Feng <guanghuifeng(a)linux.alibaba.com> iommu/vt-d: Fix intel iommu iotlb sync hardlockup and retry Finn Thain <fthain(a)linux-m68k.org> mtd: Avoid boot crash in RedBoot partition table parser Chen Ni <nichen(a)iscas.ac.cn> mtd: rawnand: cadence: Fix error check for dma_alloc_coherent() in cadence_nand_init() Olivier Sobrie <olivier(a)sobrie.be> mtd: rawnand: pl353: make sure optimal timings are applied Miquel Raynal <miquel.raynal(a)bootlin.com> mtd: spi-nor: Fix RDCR controller capability core check Johan Hovold <johan(a)kernel.org> spi: fix statistics allocation Johan Hovold <johan(a)kernel.org> spi: fix use-after-free on controller registration failure Maíra Canal <mcanal(a)igalia.com> pmdomain: bcm: bcm2835-power: Increase ASB control timeout Adam Ford <aford173(a)gmail.com> pmdomain: mediatek: Fix power domain count Luke Wang <ziniu.wang_1(a)nxp.com> mmc: sdhci: fix timing selection for 1-bit bus width Matthew Schwartz <matthew.schwartz(a)linux.dev> mmc: sdhci-pci-gli: fix GL9750 DMA write corruption Damien Le Moal <dlemoal(a)kernel.org> ata: libata-scsi: report correct sense field pointer in ata_scsiop_maint_in() Damien Le Moal <dlemoal(a)kernel.org> ata: libata-core: disable LPM on ADATA SU680 SSD Corey Minyard <corey(a)minyard.net> ipmi:msghandler: Handle error returns from the SMI sender Corey Minyard <corey(a)minyard.net> ipmi: Consolidate the run to completion checking for xmit msgs lock Varun Gupta <varun.gupta(a)intel.com> drm/xe: Fix memory leak in xe_vm_madvise_ioctl Shyam Prasad N <sprasad(a)microsoft.com> cifs: open files should not hold ref on superblock Thorsten Blum <thorsten.blum(a)linux.dev> crypto: atmel-sha204a - Fix OOM ->tfm_count leak Breno Leitao <leitao(a)debian.org> netconsole: fix sysdata_release_enabled_show checking wrong flag Muhammad Amirul Asyraf Mohamad Jamian <muhammad.amirul.asyraf.mohamad.jamian(a)altera.com> firmware: stratix10-svc: Add Multi SVC clients support Dan Carpenter <dan.carpenter(a)linaro.org> firmware: stratix10-svc: Delete some stray tabs Kevin Hao <haokexin(a)gmail.com> net: macb: Reinitialize tx/rx queue pointer registers and rx ring during resume Kevin Hao <haokexin(a)gmail.com> net: macb: Introduce gem_init_rx_ring() Tiezhu Yang <yangtiezhu(a)loongson.cn> LoongArch: Check return values for set_memory_{rw,rox} Jouni Högander <jouni.hogander(a)intel.com> drm/i915/psr: Write DSC parameters on Selective Update in ET mode Jouni Högander <jouni.hogander(a)intel.com> drm/i915/dsc: Add helper for writing DSC Selective Update ET parameters Jouni Högander <jouni.hogander(a)intel.com> drm/i915/dsc: Add Selective Update register definitions Namjae Jeon <linkinjeon(a)kernel.org> ksmbd: use volume UUID in FS_OBJECT_ID_INFORMATION Namjae Jeon <linkinjeon(a)kernel.org> ksmbd: unset conn->binding on failed binding request Paulo Alcantara <pc(a)manguebit.org> smb: client: fix krb5 mount with username option Mario Limonciello <mario.limonciello(a)amd.com> drm/amd: Fix hang on amdgpu unload by using pci_dev_is_disconnected() Lukas Johannes Möller <research(a)johannes-moeller.dev> Bluetooth: L2CAP: Validate L2CAP_INFO_RSP payload length before access Lukas Johannes Möller <research(a)johannes-moeller.dev> Bluetooth: L2CAP: Fix type confusion in l2cap_ecred_reconf_rsp() AlanSong-oc <AlanSong-oc(a)zhaoxin.com> crypto: padlock-sha - Disable for Zhaoxin processor Felix Fietkau <nbd(a)nbd.name> mac80211: fix crash in ieee80211_chan_bw_change for AP_VLAN stations Yang Yang <n05ec(a)lzu.edu.cn> batman-adv: avoid OGM aggregation when skb tailroom is insufficient Helge Deller <deller(a)gmx.de> parisc: Flush correct cache in cacheflush() syscall Junrui Luo <moonafterrain(a)outlook.com> bnxt_en: fix OOB access in DBG_BUF_PRODUCER async event handler Fedor Pchelkin <pchelkin(a)ispras.ru> net: macb: fix use-after-free access to PTP clock Ian Ray <ian.ray(a)gehealthcare.com> NFC: nxp-nci: allow GPIOs to sleep Tiezhu Yang <yangtiezhu(a)loongson.cn> LoongArch: No need to flush icache if text copy failed Tiezhu Yang <yangtiezhu(a)loongson.cn> LoongArch: Give more information if kmem access failed Wei Yang <richard.weiyang(a)gmail.com> mm/huge_memory: fix early failure try_to_migrate() when split huge pmd for shared THP Chris Down <chris(a)chrisdown.name> mm/huge_memory: fix use of NULL folio in move_pages_huge_pmd() Dev Jain <dev.jain(a)arm.com> mm/rmap: fix incorrect pte restoration for lazyfree folios Thorsten Blum <thorsten.blum(a)linux.dev> crash_dump: don't log dm-crypt key bytes in read_key_from_user_keying Ira Weiny <ira.weiny(a)intel.com> nvdimm/bus: Fix potential use after free in asynchronous initialization Jeff Layton <jlayton(a)kernel.org> sunrpc: fix cache_request leak in cache_release Benjamin Tissoires <bentiss(a)kernel.org> HID: bpf: prevent buffer overflow in hid_hw_request Benjamin Tissoires <bentiss(a)kernel.org> selftests/hid: fix compilation when bpf_wq and hid_device are not exported Jeff Layton <jlayton(a)kernel.org> nfsd: fix heap overflow in NFSv4.0 LOCK replay cache Chuck Lever <chuck.lever(a)oracle.com> NFSD: Hold net reference for the lifetime of /proc/fs/nfs/exports fd Chuck Lever <chuck.lever(a)oracle.com> NFSD: Defer sub-object cleanup in export put callbacks ------------- Diffstat: Documentation/netlink/specs/net_shaper.yaml | 12 +- Makefile | 4 +- arch/arm64/boot/dts/renesas/r8a78000.dtsi | 16 +- arch/arm64/boot/dts/renesas/r9a09g057.dtsi | 30 -- arch/arm64/boot/dts/renesas/r9a09g077.dtsi | 4 +- arch/arm64/boot/dts/renesas/r9a09g087.dtsi | 4 +- arch/arm64/boot/dts/renesas/rzg3s-smarc-som.dtsi | 2 +- .../boot/dts/renesas/rzt2h-n2h-evk-common.dtsi | 1 + arch/arm64/boot/dts/renesas/rzv2-evk-cn15-sd.dtso | 1 + arch/arm64/kernel/rsi.c | 3 +- arch/loongarch/include/asm/uaccess.h | 14 +- arch/loongarch/kernel/inst.c | 21 +- arch/parisc/kernel/cache.c | 4 +- arch/x86/events/core.c | 3 +- arch/x86/events/intel/core.c | 31 ++- arch/x86/hyperv/hv_crash.c | 100 +++---- arch/x86/kernel/apic/x2apic_uv_x.c | 18 +- arch/x86/kernel/cpu/mce/amd.c | 17 +- drivers/acpi/acpi_processor.c | 15 +- drivers/acpi/acpica/acpredef.h | 2 +- drivers/ata/libata-core.c | 3 + drivers/ata/libata-scsi.c | 2 +- drivers/base/power/runtime.c | 1 + drivers/bluetooth/btqca.c | 2 + drivers/cache/ax45mp_cache.c | 4 +- drivers/cache/starfive_starlink_cache.c | 4 +- drivers/char/ipmi/ipmi_msghandler.c | 144 ++++++---- drivers/crypto/atmel-sha204a.c | 5 +- drivers/crypto/ccp/sev-dev.c | 4 +- drivers/crypto/padlock-sha.c | 7 + drivers/firewire/net.c | 5 +- drivers/firmware/arm_ffa/driver.c | 8 +- drivers/firmware/arm_scmi/notify.c | 4 +- drivers/firmware/arm_scpi.c | 5 +- drivers/firmware/stratix10-svc.c | 240 ++++++++-------- drivers/gpu/drm/amd/amdgpu/amdgpu_bo_list.c | 4 + drivers/gpu/drm/amd/amdgpu/amdgpu_device.c | 4 +- drivers/gpu/drm/amd/amdgpu/amdgpu_vm.c | 7 +- drivers/gpu/drm/amd/amdgpu/amdgpu_vm.h | 2 + drivers/gpu/drm/amd/amdgpu/gmc_v9_0.c | 21 +- drivers/gpu/drm/amd/amdgpu/mmhub_v2_0.c | 9 +- drivers/gpu/drm/amd/amdgpu/mmhub_v2_3.c | 3 +- drivers/gpu/drm/amd/amdgpu/mmhub_v3_0.c | 3 +- drivers/gpu/drm/amd/amdgpu/mmhub_v3_0_1.c | 3 +- drivers/gpu/drm/amd/amdgpu/mmhub_v3_0_2.c | 3 +- drivers/gpu/drm/amd/amdgpu/mmhub_v4_1_0.c | 3 +- drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm.c | 4 +- drivers/gpu/drm/amd/display/dc/clk_mgr/clk_mgr.c | 8 +- .../amd/display/dc/resource/dcn32/dcn32_resource.c | 3 + drivers/gpu/drm/amd/pm/legacy-dpm/si_dpm.c | 4 +- drivers/gpu/drm/bridge/synopsys/dw-hdmi-qp.c | 2 +- drivers/gpu/drm/drm_file.c | 5 +- drivers/gpu/drm/drm_mode_config.c | 9 +- .../drm/i915/display/intel_display_power_well.c | 2 +- drivers/gpu/drm/i915/display/intel_display_types.h | 1 + drivers/gpu/drm/i915/display/intel_dmc.c | 3 +- drivers/gpu/drm/i915/display/intel_psr.c | 17 +- drivers/gpu/drm/i915/display/intel_vdsc.c | 23 ++ drivers/gpu/drm/i915/display/intel_vdsc.h | 3 + drivers/gpu/drm/i915/display/intel_vdsc_regs.h | 12 + drivers/gpu/drm/i915/gt/intel_engine_cs.c | 3 +- drivers/gpu/drm/imagination/pvr_device.c | 17 -- drivers/gpu/drm/imagination/pvr_power.c | 22 +- drivers/gpu/drm/radeon/si_dpm.c | 4 +- drivers/gpu/drm/vmwgfx/vmwgfx_kms.c | 3 +- drivers/gpu/drm/xe/xe_ggtt.c | 10 +- drivers/gpu/drm/xe/xe_ggtt_types.h | 5 +- drivers/gpu/drm/xe/xe_gt_ccs_mode.c | 2 + drivers/gpu/drm/xe/xe_guc.c | 6 +- drivers/gpu/drm/xe/xe_guc_ct.c | 1 + drivers/gpu/drm/xe/xe_guc_submit.c | 3 +- drivers/gpu/drm/xe/xe_oa.c | 7 +- drivers/gpu/drm/xe/xe_vm_madvise.c | 3 +- drivers/hid/bpf/hid_bpf_dispatch.c | 2 + drivers/hv/mshv_root_main.c | 2 +- drivers/hwmon/max6639.c | 10 +- drivers/hwmon/pmbus/ina233.c | 2 + drivers/hwmon/pmbus/isl68137.c | 7 +- drivers/hwmon/pmbus/mp2869.c | 35 ++- drivers/hwmon/pmbus/mp2975.c | 2 + drivers/i2c/busses/i2c-cp2615.c | 3 + drivers/i2c/busses/i2c-fsi.c | 1 + drivers/i2c/busses/i2c-pxa.c | 17 +- drivers/iommu/amd/iommu.c | 15 +- drivers/iommu/intel/dmar.c | 3 +- drivers/iommu/intel/svm.c | 12 +- drivers/iommu/iommu-sva.c | 12 +- drivers/iommu/iommu.c | 6 +- drivers/irqchip/irq-riscv-rpmi-sysmsi.c | 1 + drivers/mmc/host/sdhci-pci-gli.c | 9 + drivers/mmc/host/sdhci.c | 9 +- drivers/mtd/nand/raw/brcmnand/brcmnand.c | 6 +- drivers/mtd/nand/raw/cadence-nand-controller.c | 2 +- drivers/mtd/nand/raw/nand_base.c | 14 +- drivers/mtd/nand/raw/pl35x-nand-controller.c | 3 + drivers/mtd/parsers/redboot.c | 6 +- drivers/mtd/spi-nor/core.c | 2 +- drivers/net/bonding/bond_debugfs.c | 16 +- drivers/net/bonding/bond_main.c | 8 +- drivers/net/dsa/bcm_sf2.c | 8 +- drivers/net/ethernet/airoha/airoha_eth.c | 1 - drivers/net/ethernet/broadcom/bnxt/bnxt.c | 2 + drivers/net/ethernet/broadcom/bnxt/bnxt.h | 2 +- drivers/net/ethernet/broadcom/genet/bcmgenet_wol.c | 2 +- drivers/net/ethernet/cadence/macb_main.c | 26 +- drivers/net/ethernet/cadence/macb_ptp.c | 4 +- drivers/net/ethernet/intel/iavf/iavf_main.c | 9 +- drivers/net/ethernet/intel/igc/igc.h | 2 + drivers/net/ethernet/intel/igc/igc_main.c | 14 +- drivers/net/ethernet/intel/igc/igc_ptp.c | 33 +++ drivers/net/ethernet/intel/libie/fwlog.c | 49 +++- drivers/net/ethernet/marvell/mvpp2/mvpp2_main.c | 4 +- .../ethernet/mellanox/mlx5/core/en_accel/ipsec.h | 1 + .../mellanox/mlx5/core/en_accel/ipsec_offload.c | 52 ++-- drivers/net/ethernet/mellanox/mlx5/core/esw/qos.c | 23 +- drivers/net/ethernet/microsoft/mana/hw_channel.c | 6 +- drivers/net/ethernet/ti/icssg/icssg_common.c | 5 + drivers/net/netconsole.c | 2 +- drivers/net/netdevsim/netdev.c | 5 +- drivers/net/usb/aqc111.c | 12 +- drivers/net/usb/cdc_ncm.c | 10 +- drivers/net/wireless/ath/ath9k/channel.c | 6 +- drivers/net/wireless/mediatek/mt76/scan.c | 4 +- drivers/net/wireless/ti/wlcore/tx.c | 2 +- drivers/net/wireless/virtual/mac80211_hwsim.c | 1 - drivers/nfc/nxp-nci/i2c.c | 4 +- drivers/nvdimm/bus.c | 5 +- drivers/pmdomain/bcm/bcm2835-power.c | 12 +- drivers/pmdomain/mediatek/mtk-pm-domains.c | 2 +- drivers/resctrl/mpam_devices.c | 2 + drivers/soc/fsl/qbman/qman.c | 24 +- drivers/soc/fsl/qe/qmc.c | 4 +- drivers/soc/microchip/mpfs-sys-controller.c | 13 +- drivers/soc/rockchip/grf.c | 1 + drivers/spi/spi-amlogic-spifc-a4.c | 46 +--- drivers/spi/spi-amlogic-spisg.c | 12 +- drivers/spi/spi.c | 25 +- drivers/tee/tee_shm.c | 27 -- drivers/tty/serial/8250/8250.h | 25 ++ drivers/tty/serial/8250/8250_dma.c | 15 + drivers/tty/serial/8250/8250_dw.c | 304 ++++++++++++++++----- drivers/tty/serial/8250/8250_pci.c | 17 ++ drivers/tty/serial/8250/8250_port.c | 75 +++-- drivers/tty/serial/serial_core.c | 5 +- drivers/tty/serial/uartlite.c | 1 + drivers/tty/vt/vt.c | 8 + fs/binfmt_elf_fdpic.c | 6 + fs/btrfs/tree-checker.c | 2 +- fs/btrfs/tree-log.c | 6 + fs/nfsd/export.c | 63 ++++- fs/nfsd/export.h | 7 +- fs/nfsd/nfs4xdr.c | 9 +- fs/nfsd/nfsctl.c | 22 +- fs/nfsd/state.h | 17 +- fs/smb/client/cifsfs.c | 7 +- fs/smb/client/cifsproto.h | 1 + fs/smb/client/connect.c | 4 + fs/smb/client/file.c | 11 - fs/smb/client/misc.c | 42 +++ fs/smb/client/trace.h | 2 + fs/smb/server/smb2pdu.c | 17 +- fs/tests/exec_kunit.c | 3 - include/linux/auxvec.h | 2 +- include/linux/console_struct.h | 1 + include/linux/etherdevice.h | 3 +- .../linux/firmware/intel/stratix10-svc-client.h | 8 +- include/linux/if_ether.h | 3 +- include/linux/io_uring_types.h | 3 + include/linux/netdevice.h | 9 +- include/linux/serial_8250.h | 1 + include/net/ip_tunnels.h | 28 +- include/net/mac80211.h | 4 +- include/net/netfilter/nf_tables.h | 2 + include/net/sch_generic.h | 33 +++ include/net/udp_tunnel.h | 2 +- io_uring/kbuf.c | 14 +- io_uring/poll.c | 9 +- kernel/crash_dump_dm_crypt.c | 4 +- kernel/sched/idle.c | 30 +- kernel/trace/ring_buffer.c | 2 +- kernel/trace/trace.c | 36 ++- lib/bootconfig.c | 3 +- mm/huge_memory.c | 3 +- mm/rmap.c | 21 +- net/batman-adv/bat_iv_ogm.c | 3 + net/bluetooth/hci_conn.c | 4 +- net/bluetooth/hci_sync.c | 2 +- net/bluetooth/hidp/core.c | 16 +- net/bluetooth/l2cap_core.c | 51 ++-- net/bluetooth/mgmt.c | 7 +- net/bluetooth/smp.c | 2 +- net/bridge/br_cfm.c | 4 +- net/ethernet/eth.c | 9 +- net/ipv4/icmp.c | 4 +- net/ipv4/ip_gre.c | 3 +- net/ipv6/exthdrs.c | 4 + net/ipv6/seg6_hmac.c | 2 + net/mac80211/cfg.c | 12 +- net/mac80211/chan.c | 6 +- net/mac80211/debugfs.c | 14 +- net/mac80211/mesh.c | 3 + net/mac80211/sta_info.c | 7 +- net/mac80211/tx.c | 4 +- net/mac802154/iface.c | 4 +- net/mpls/af_mpls.c | 1 + net/mptcp/pm_kernel.c | 2 +- net/netfilter/nf_bpf_link.c | 2 +- net/netfilter/nf_conntrack_h323_asn1.c | 4 + net/netfilter/nf_conntrack_netlink.c | 28 +- net/netfilter/nf_conntrack_proto_sctp.c | 3 +- net/netfilter/nf_conntrack_sip.c | 6 +- net/netfilter/nf_flow_table_ip.c | 1 + net/netfilter/nf_tables_api.c | 5 +- net/netfilter/nfnetlink_osf.c | 13 + net/netfilter/nft_ct.c | 4 + net/netfilter/nft_dynset.c | 10 +- net/netfilter/xt_CT.c | 4 + net/netfilter/xt_time.c | 4 +- net/phonet/af_phonet.c | 5 +- net/rose/af_rose.c | 5 + net/sched/sch_generic.c | 27 -- net/sched/sch_ingress.c | 14 +- net/sched/sch_teql.c | 7 +- net/shaper/shaper.c | 160 ++++++----- net/shaper/shaper_nl_gen.c | 12 +- net/shaper/shaper_nl_gen.h | 5 + net/smc/af_smc.c | 23 +- net/smc/smc.h | 5 + net/smc/smc_close.c | 2 +- net/sunrpc/cache.c | 26 +- net/unix/af_unix.c | 2 + net/unix/af_unix.h | 1 + net/unix/garbage.c | 79 ++++-- net/wireless/pmsr.c | 1 + tools/bootconfig/main.c | 7 +- .../testing/selftests/hid/progs/hid_bpf_helpers.h | 12 + 236 files changed, 2113 insertions(+), 1069 deletions(-)

5 days, 19 hours

[PATCH 6.19 000/379] 6.19.9-rc2 review

by Greg Kroah-Hartman

This is the start of the stable review cycle for the 6.19.9 release. There are 379 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know. Responses should be made by Fri, 20 Mar 2026 12:24:39 +0000. Anything received after that time might be too late. The whole patch series can be found in one patch at: https://www.kernel.org/pub/linux/kernel/v6.x/stable-review/patch-6.19.9-rc2… or in the git tree and branch at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-6.19.y and the diffstat can be found below. thanks, greg k-h ------------- Pseudo-Shortlog of commits: Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> Linux 6.19.9-rc2 Christian Loehle <christian.loehle(a)arm.com> bpf: drop kthread_exit from noreturn_deny Keith Busch <kbusch(a)kernel.org> cxl/acpi: Fix CXL_ACPI and CXL_PMEM Kconfig tristate mismatch Jens Axboe <axboe(a)kernel.dk> io_uring/eventfd: use ctx->rings_rcu for flags checking Jens Axboe <axboe(a)kernel.dk> io_uring: ensure ctx->rings is stable for task work flags manipulation Marc Zyngier <maz(a)kernel.org> KVM: arm64: Eagerly init vgic dist/redist on vgic creation Sascha Bischoff <Sascha.Bischoff(a)arm.com> KVM: arm64: gic: Set vgic_model before initing private IRQs SeongJae Park <sj(a)kernel.org> mm/damon/core: disallow non-power of two min_region_sz SeongJae Park <sj(a)kernel.org> mm/damon: rename min_sz_region of damon_ctx to min_region_sz SeongJae Park <sj(a)kernel.org> mm/damon: rename DAMON_MIN_REGION to DAMON_MIN_REGION_SZ Adrian Hunter <adrian.hunter(a)intel.com> i3c: mipi-i3c-hci: Correct RING_CTRL_ABORT handling in DMA dequeue Adrian Hunter <adrian.hunter(a)intel.com> i3c: mipi-i3c-hci: Fix race in DMA ring dequeue Adrian Hunter <adrian.hunter(a)intel.com> i3c: mipi-i3c-hci: Add missing TID field to no-op command descriptor Adrian Hunter <adrian.hunter(a)intel.com> i3c: mipi-i3c-hci: Restart DMA ring correctly after dequeue abort Adrian Hunter <adrian.hunter(a)intel.com> i3c: mipi-i3c-hci: Consolidate spinlocks Adrian Hunter <adrian.hunter(a)intel.com> i3c: mipi-i3c-hci: Factor out DMA mapping from queuing path Adrian Hunter <adrian.hunter(a)intel.com> i3c: mipi-i3c-hci: Use ETIMEDOUT instead of ETIME for timeout errors Yasin Lee <yasin.lee.x(a)gmail.com> iio: proximity: hx9023s: Protect against division by zero in set_samp_freq Yasin Lee <yasin.lee.x(a)gmail.com> iio: proximity: hx9023s: fix assignment order for __counted_by Jean-Baptiste Maneyrol <jean-baptiste.maneyrol(a)tdk.com> iio: imu: inv_icm42600: fix odr switch when turning buffer off Jean-Baptiste Maneyrol <jean-baptiste.maneyrol(a)tdk.com> iio: imu: inv_icm42600: fix odr switch to the same value Jean-Baptiste Maneyrol <jean-baptiste.maneyrol(a)tdk.com> iio: imu: inv_icm45600: fix INT1 drive bit inverted Antoniu Miclaus <antoniu.miclaus(a)analog.com> iio: light: bh1780: fix PM runtime leak on error path Jean-Baptiste Maneyrol <jean-baptiste.maneyrol(a)tdk.com> iio: imu: inv_icm45600: fix regulator put warning when probe fails Antoniu Miclaus <antoniu.miclaus(a)analog.com> iio: gyro: mpu3050-i2c: fix pm_runtime error handling Radu Sabau <radu.sabau(a)analog.com> iio: imu: adis: Fix NULL pointer dereference in adis_init Antoniu Miclaus <antoniu.miclaus(a)analog.com> iio: gyro: mpu3050-core: fix pm_runtime error handling Nuno Sá <nuno.sa(a)analog.com> iio: buffer: Fix wait_queue not being removed Chris Spencer <spencercw(a)gmail.com> iio: chemical: bme680: Fix measurement wait duration calculation Lukas Schmid <lukas.schmid(a)netcube.li> iio: potentiometer: mcp4131: fix double application of wiper shift Antoniu Miclaus <antoniu.miclaus(a)analog.com> iio: magnetometer: tlv493d: remove erroneous shift in X-axis data Antoniu Miclaus <antoniu.miclaus(a)analog.com> iio: chemical: sps30_i2c: fix buffer size in sps30_i2c_read_meas() Antoniu Miclaus <antoniu.miclaus(a)analog.com> iio: chemical: sps30_serial: fix buffer size in sps30_serial_read_meas() SeungJu Cheon <suunj1331(a)gmail.com> iio: frequency: adf4377: Fix duplicated soft reset mask Oleksij Rempel <o.rempel(a)pengutronix.de> iio: dac: ds4424: reject -128 RAW value Filipe Manana <fdmanana(a)suse.com> btrfs: abort transaction on failure to update root in the received subvol ioctl Bart Van Assche <bvanassche(a)acm.org> btrfs: add missing RCU unlock in error path in try_release_subpage_extent_buffer() Filipe Manana <fdmanana(a)suse.com> btrfs: fix transaction abort on set received ioctl due to item overflow Filipe Manana <fdmanana(a)suse.com> btrfs: fix transaction abort on file creation due to name hash collision Filipe Manana <fdmanana(a)suse.com> btrfs: fix transaction abort when snapshotting received subvolumes Henrique Carvalho <henrique.carvalho(a)suse.com> smb: client: fix iface port assignment in parse_server_interfaces Bharath SM <bharathsm(a)microsoft.com> smb: client: fix in-place encryption corruption in SMB2_write() Paulo Alcantara <pc(a)manguebit.org> smb: client: fix atomic open with O_DIRECT & O_SYNC Josh Law <objecting(a)objecting.org> lib/bootconfig: check bounds before writing in __xbc_open_brace() Josh Law <objecting(a)objecting.org> lib/bootconfig: fix snprintf truncation check in xbc_node_compose_key_after() Masami Hiramatsu (Google) <mhiramat(a)kernel.org> kprobes: Remove unneeded warnings from __arm_kprobe_ftrace() Shashank Balaji <shashank.mahadasyam(a)sony.com> x86/apic: Disable x2apic on resume if the kernel expects so Junxiao Bi <junxiao.bi(a)oracle.com> scsi: core: Fix error handling for scsi_alloc_sdev() Josh Law <objecting(a)objecting.org> lib/bootconfig: fix off-by-one in xbc_verify_tree() unclosed brace error Hari Bathini <hbathini(a)linux.ibm.com> powerpc64/bpf: fix the address returned by bpf_get_func_ip Hari Bathini <hbathini(a)linux.ibm.com> powerpc64/bpf: fix kfunc call support Nam Cao <namcao(a)linutronix.de> powerpc/pseries: Correct MSI allocation tracking Stefan Haberland <sth(a)linux.ibm.com> s390/dasd: Copy detected format information to secondary device Stefan Haberland <sth(a)linux.ibm.com> s390/dasd: Move quiesce state with pprc swap Mehul Rao <mehulrao(a)gmail.com> ublk: fix NULL pointer dereference in ublk_ctrl_set_size() Abel Vesa <abel.vesa(a)oss.qualcomm.com> dt-bindings: display: msm: Fix reg ranges and clocks on Glymur Harald Freudenberger <freude(a)linux.ibm.com> s390/zcrypt: Enable AUTOSEL_DOM for CCA serialnr sysfs attribute Tejun Heo <tj(a)kernel.org> sched_ext: Fix enqueue_task_scx() truncation of upper enqueue flags Long Li <leo.lilong(a)huawei.com> xfs: ensure dquot item is deleted from AIL only after log shutdown Darrick J. Wong <djwong(a)kernel.org> xfs: fix undersized l_iclog_roundoff values Carlos Maiolino <cem(a)kernel.org> xfs: fix returned valued from xfs_defer_can_append Long Li <leo.lilong(a)huawei.com> xfs: fix integer overflow in bmap intent sort comparator Shyam Prasad N <sprasad(a)microsoft.com> cifs: make default value of retrans as zero Jens Axboe <axboe(a)kernel.dk> io_uring/kbuf: check if target buffer list is still legacy on recycle Haibo Chen <haibo.chen(a)nxp.com> can: dev: keep the max bitrate error at 5% Laurent Vivier <lvivier(a)redhat.com> qmi_wwan: allow max_mtu above hard_mtu to control rx_urb_size Paul Moses <p(a)1g4.org> net-shapers: don't free reply skb after genlmsg_reply() Calvin Owens <calvin(a)wbinvd.org> tracing: Fix trace_buf_size= cmdline parameter with sizes >= 2G Andrei-Alexandru Tachici <andrei-alexandru.tachici(a)oss.qualcomm.com> tracing: Fix enabling multiple events on the kernel command line and bootconfig Ville Syrjälä <ville.syrjala(a)linux.intel.com> drm/i915/vrr: Configure VRR timings after enabling TRANS_DDI_FUNC_CTL Abhinav Kumar <quic_abhinavk(a)quicinc.com> drm/msm/dpu: Correct the SA8775P intr_underrun/intr_underrun index Mario Limonciello <mario.limonciello(a)amd.com> drm/amd: Fix a few more NULL pointer dereference in device cleanup Thomas Fourier <fourier.thomas(a)gmail.com> drm/msm: Fix dma_free_attrs() buffer size Jouni Högander <jouni.hogander(a)intel.com> drm/i915/psr: Repeat Selective Update area alignment Janusz Krzysztofik <janusz.krzysztofik(a)linux.intel.com> drm/i915: Fix potential overflow of shmem scatterlist length Luca Ceresoli <luca.ceresoli(a)bootlin.com> drm/bridge: ti-sn65dsi83: halve horizontal syncs for dual LVDS output Luca Ceresoli <luca.ceresoli(a)bootlin.com> drm/bridge: ti-sn65dsi83: fix CHA_DSI_CLK_RANGE rounding Mario Limonciello <mario.limonciello(a)amd.com> drm/amd: Fix NULL pointer dereference in device cleanup Mario Limonciello <mario.limonciello(a)amd.com> drm/amd: Set num IP blocks to 0 if discovery fails Alysa Liu <Alysa.Liu(a)amd.com> drm/amdgpu: Fix use-after-free race in VM acquire Yang Wang <kevinyang.wang(a)amd.com> drm/amd/pm: remove invalid gpu_metrics.energy_accumulator on smu v13.0.x Kevin Hao <haokexin(a)gmail.com> net: macb: Shuffle the tx ring before enabling tx Bastien Curutchet (Schneider Electric) <bastien.curutchet(a)bootlin.com> net: dsa: microchip: Fix error path in PTP IRQ setup Fan Wu <fanwu01(a)zju.edu.cn> net: ethernet: arc: emac: quiesce interrupts before requesting IRQ Jian Zhang <zhangjian.3032(a)bytedance.com> net: ncsi: fix skb leak in error paths Mehul Rao <mehulrao(a)gmail.com> net: nexthop: fix percpu use-after-free in remove_nh_grp_entry Johan Hovold <johan(a)kernel.org> net: mctp: fix device leak on probe failure Namjae Jeon <linkinjeon(a)kernel.org> ksmbd: fix use-after-free by using call_rcu() for oplock_info Thorsten Blum <thorsten.blum(a)linux.dev> ksmbd: Don't log keys in SMB3 signing and encryption key generation Marios Makassikis <mmakassikis(a)freebox.fr> smb: server: fix use-after-free in smb2_open() Namjae Jeon <linkinjeon(a)kernel.org> ksmbd: fix use-after-free in smb_lazy_parent_lease_break_close() Hao Li <hao.li(a)linux.dev> memcg: fix slab accounting in refill_obj_stock() trylock path Vlastimil Babka <vbabka(a)suse.cz> slab: distinguish lock and trylock for sheaf_flush_main() Vasily Gorbik <gor(a)linux.ibm.com> s390/xor: Fix xor_xc_5() inline assembly Dillon Varone <Dillon.Varone(a)amd.com> drm/amd/display: Fallback to boot snapshot for dispclk Heiko Carstens <hca(a)linux.ibm.com> s390/xor: Fix xor_xc_2() inline assembly constraints Maximilian Pezzullo <maximilianpezzullo(a)gmail.com> ata: libata-core: Disable LPM on ST1000DM010-2EP102 Heiko Carstens <hca(a)linux.ibm.com> s390/stackleak: Fix __stackleak_poison() inline assembly constraint Ashish Kalra <ashish.kalra(a)amd.com> crypto: ccp - allow callers to use HV-Fixed page API when SEV is disabled Tvrtko Ursulin <tvrtko.ursulin(a)igalia.com> drm/ttm: Fix ttm_pool_beneficial_order() return type Maíra Canal <mcanal(a)igalia.com> pmdomain: bcm: bcm2835-power: Fix broken reset status read Franz Schnyder <franz.schnyder(a)toradex.com> regulator: pf9453: Respect IRQ trigger settings from firmware Pavel Begunkov <asml.silence(a)gmail.com> io_uring/net: reject SEND_VECTORIZED when unsupported Helge Deller <deller(a)gmx.de> parisc: Check kernel mapping earlier at bootup Piotr Jaroszynski <pjaroszynski(a)nvidia.com> arm64: contpte: fix set_access_flags() no-op check for SMMU/ATS faults Helge Deller <deller(a)gmx.de> parisc: Fix initial page table creation for boot Pavel Begunkov <asml.silence(a)gmail.com> io_uring/zcrx: use READ_ONCE with user shared RQEs Sanman Pradhan <psanman(a)juniper.net> hwmon: (pmbus/q54sj108a2) fix stack overflow in debugfs read Catalin Marinas <catalin.marinas(a)arm.com> arm64: mm: Add PTE_DIRTY back to PAGE_KERNEL* to fix kexec/hibernation Dave Airlie <airlied(a)redhat.com> nouveau/dpcd: return EBUSY for aux xfer if the device is asleep Helge Deller <deller(a)gmx.de> parisc: Increase initial mapping to 64 MB with KALLSYMS Shawn Lin <shawn.lin(a)rock-chips.com> pmdomain: rockchip: Fix PD_VCODEC for RK3588 Matt Roper <matthew.d.roper(a)intel.com> drm/xe/xe2_hpg: Correct implementation of Wa_16025250150 Sven Eckelmann <sven(a)narfation.org> batman-adv: Avoid double-rtnl_lock ELP metric worker Eric Biggers <ebiggers(a)kernel.org> net/tcp-md5: Fix MAC comparison to be constant-time Shengming Hu <hu.shengming(a)zte.com.cn> fgraph: Fix thresh_return nosleeptime double-adjust Eric Biggers <ebiggers(a)kernel.org> net/tcp-ao: Fix MAC comparison to be constant-time Huiwen He <hehuiwen(a)kylinos.cn> tracing: Fix syscall events activation by ensuring refcount hits zero Shengming Hu <hu.shengming(a)zte.com.cn> fgraph: Fix thresh_return clear per-task notrace Jakub Staniszewski <jakub.staniszewski(a)linux.intel.com> ice: fix retry for AQ command 0x06EE YiFei Zhu <zhuyifei(a)google.com> net: Fix rcu_tasks stall in threaded busypoll Long Li <longli(a)microsoft.com> net: mana: Ring doorbell at 4 CQ wraparounds Ariel Silver <arielsilver77(a)gmail.com> media: dvb-net: fix OOB access in ULE extension header tables Christian Brauner <brauner(a)kernel.org> selftests: fix mntns iteration selftests Andy Shevchenko <andriy.shevchenko(a)linux.intel.com> pinctrl: cy8c95x0: Don't miss reading the last bank registers Luka Gejak <luka.gejak(a)linux.dev> staging: rtl8723bs: fix potential out-of-bounds read in rtw_restruct_wmm_ie Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> staging: rtl8723bs: properly validate the data in rtw_get_ie_ex() Artem Lytkin <iprintercanon(a)gmail.com> staging: sm750fb: add missing pci_release_region on error and removal Harry Yoo <harry.yoo(a)oracle.com> mm/slab: fix an incorrect check in obj_exts_alloc_size() Raul Pazemecxas De Andrade <raul_pazemecxas(a)hotmail.com> mm/damon/core: clear walk_control on inactive context in damos_walk() Zi Yan <ziy(a)nvidia.com> mm/huge_memory: fix a folio_split() race condition with folio_try_get() Pratyush Yadav (Google) <pratyush(a)kernel.org> mm: memfd_luo: always dirty all folios Pratyush Yadav (Google) <pratyush(a)kernel.org> mm: memfd_luo: always make all folios uptodate Jedrzej Jagielski <jedrzej.jagielski(a)intel.com> ixgbevf: fix link setup issue Eric Biggers <ebiggers(a)kernel.org> kunit: irq: Ensure timer doesn't fire too frequently Jakub Staniszewski <jakub.staniszewski(a)linux.intel.com> ice: reintroduce retry mechanism for indirect AQ Christian Brauner <brauner(a)kernel.org> nstree: tighten permission checks for listing Christian Brauner <brauner(a)kernel.org> nsfs: tighten permission checks for handle opening Darrick J. Wong <djwong(a)kernel.org> iomap: reject delalloc mappings during writeback Joanne Koong <joannelkoong(a)gmail.com> iomap: don't mark folio uptodate if read IO has bytes pending Tejun Heo <tj(a)kernel.org> sched_ext: Fix starvation of scx_enable() under fair-class saturation Tejun Heo <tj(a)kernel.org> sched_ext: Disable preemption between scx_claim_exit() and kicking helper work Mark Harmstone <mark(a)harmstone.com> btrfs: fix chunk map leak in btrfs_map_block() after btrfs_chunk_map_num_copies() Marc Zyngier <maz(a)kernel.org> irqchip/gic-v3-its: Limit number of per-device MSIs to the range the ITS supports Andy Shevchenko <andriy.shevchenko(a)linux.intel.com> device property: Allow secondary lookup in fwnode_get_next_child_node() Kuniyuki Iwashima <kuniyu(a)google.com> nfsd: Fix cred ref leak in nfsd_nl_listener_set_doit(). Catalin Marinas <catalin.marinas(a)arm.com> arm64: gcs: Honour mprotect(PROT_NONE) on shadow stack mappings Jiri Olsa <jolsa(a)kernel.org> bpf: Fix kprobe_multi cookies access in show_fdinfo callback Alexander Gordeev <agordeev(a)linux.ibm.com> s390/pfault: Fix virtual vs physical address confusion Shuicheng Lin <shuicheng.lin(a)intel.com> drm/xe/sync: Cleanup partially initialized sync on parse failure Shuicheng Lin <shuicheng.lin(a)intel.com> drm/xe/sync: Fix user fence leak on alloc failure Corey Minyard <corey(a)minyard.net> ipmi:si: Fix check for a misbehaving BMC Bartosz Golaszewski <bartosz.golaszewski(a)oss.qualcomm.com> gpiolib: normalize the return value of gc->get() on behalf of buggy drivers Jouni Högander <jouni.hogander(a)intel.com> drm/i915/alpm: ALPM disable fixes Dave Airlie <airlied(a)redhat.com> nouveau/gsp: drop WARN_ON in ACPI probes Corey Minyard <corey(a)minyard.net> ipmi:si: Handle waiting messages when BMC failure detected Franz Schnyder <franz.schnyder(a)toradex.com> drm/bridge: ti-sn65dsi86: Enable HPD polling if IRQ is not used Osama Abdelkader <osama.abdelkader(a)gmail.com> drm/bridge: samsung-dsim: Fix memory leak in error path Corey Minyard <corey(a)minyard.net> ipmi:si: Use a long timeout when the BMC is misbehaving Corey Minyard <corey(a)minyard.net> ipmi:si: Don't block module unload if the BMC is messed up Mario Limonciello <mario.limonciello(a)amd.com> drm/amd: Disable MES LR compute W/A Sunil Khatri <sunil.khatri(a)amd.com> drm/amdgpu: add upper bound check on user inputs in wait ioctl Tvrtko Ursulin <tvrtko.ursulin(a)igalia.com> drm/amdgpu/userq: Fix reference leak in amdgpu_userq_wait_ioctl Sunil Khatri <sunil.khatri(a)amd.com> drm/amdgpu: add upper bound check on user inputs in signal ioctl David Arcari <darcari(a)redhat.com> cpufreq: intel_pstate: Fix NULL pointer dereference in update_cpu_qos_request() Christian Brauner <brauner(a)kernel.org> kthread: consolidate kthread exit paths to prevent use-after-free Pratyush Yadav (Google) <pratyush(a)kernel.org> liveupdate: luo_file: remember retrieve() status Christian Brauner <brauner(a)kernel.org> nsfs: tighten permission checks for ns iteration ioctls Thomas Hellström <thomas.hellstrom(a)linux.intel.com> mm: Fix a hmm_range_fault() livelock / starvation problem Axel Rasmussen <axelrasmussen(a)google.com> Revert "ptdesc: remove references to folios from __pagetable_ctor() and pagetable_dtor()" Xu Yang <xu.yang_2(a)nxp.com> Revert "tcpm: allow looking for role_sw device in the main node" Ilya Dryomov <idryomov(a)gmail.com> libceph: admit message frames only in CEPH_CON_S_OPEN state Raphael Zimmer <raphael.zimmer(a)tu-ilmenau.de> libceph: Use u32 for non-negative values in ceph_monmap_decode() Ilya Dryomov <idryomov(a)gmail.com> libceph: prevent potential out-of-bounds reads in process_message_header() Ilya Dryomov <idryomov(a)gmail.com> libceph: reject preamble if control segment is empty Raphael Zimmer <raphael.zimmer(a)tu-ilmenau.de> libceph: Fix potential out-of-bounds access in ceph_handle_auth_reply() Max Kellermann <max.kellermann(a)ionos.com> ceph: add a bunch of missing ceph_path_info initializers Masami Hiramatsu (Google) <mhiramat(a)kernel.org> kprobes: avoid crash when rmmod/insmod after ftrace killed Liwei Song <liwei.song(a)windriver.com> firmware: stratix10-rsu: Fix NULL pointer dereference when RSU is disabled Mehul Rao <mehulrao(a)gmail.com> tipc: fix divide-by-zero in tipc_sk_filter_connect() Ravi Hothi <ravi.hothi(a)oss.qualcomm.com> ASoC: qcom: qdsp6: Fix q6apm remove ordering during ADSP stop and start Penghe Geng <pgeng(a)nvidia.com> mmc: core: Avoid bitfield RMW for claim/retune flags Shawn Lin <shawn.lin(a)rock-chips.com> mmc: dw_mmc-rockchip: Fix runtime PM support for internal phase support Kamal Dasu <kamal.dasu(a)broadcom.com> mmc: sdhci-brcmstb: use correct register offset for V1 pin_sel restore Alexander Potapenko <glider(a)google.com> mm/kfence: disable KFENCE upon KASAN HW tags enablement Felix Gu <ustc.gu(a)gmail.com> mmc: mmci: Fix device_node reference leak in of_get_dml_pipe_index() Alexander Potapenko <glider(a)google.com> mm/kfence: fix KASAN hardware tag faults during late enablement Xingui Yang <yangxingui(a)huawei.com> scsi: hisi_sas: Fix NULL pointer exception during user_scan() Vladimir Riabchun <ferr.lambarginio(a)gmail.com> scsi: qla2xxx: Completely fix fcport double free Wang Shuaiwei <wangshuaiwei1(a)xiaomi.com> scsi: ufs: core: Fix SError in ufshcd_rtc_work() during UFS suspend Viktor Malik <vmalik(a)redhat.com> powerpc, perf: Check that current->mm is alive before getting user callchain Adrian Ng Ho Yin <adrianhoyin.ng(a)altera.com> i3c: dw-i3c-master: Set SIR_REJECT in DAT on device attach and reattach Thomas Gleixner <tglx(a)kernel.org> sched/mmcid: Avoid full tasklist walks Thomas Gleixner <tglx(a)kernel.org> sched/mmcid: Remove pointless preempt guard Thomas Gleixner <tglx(a)kernel.org> sched/mmcid: Handle vfork()/CLONE_VM correctly Thomas Gleixner <tglx(a)kernel.org> sched/mmcid: Prevent CID stalls due to concurrent forks Steven Rostedt <rostedt(a)goodmis.org> time/jiffies: Mark jiffies_64_to_clock_t() notrace Jessica Liu <liu.xuemei1(a)zte.com.cn> irqchip/riscv-aplic: Register syscore operations only once Jessica Liu <liu.xuemei1(a)zte.com.cn> irqchip/riscv-aplic: Do not clear ACPI dependencies on probe failure Nick Hu <nick.hu(a)sifive.com> irqchip/riscv-aplic: Preserve APLIC states across suspend/resume Josh Poimboeuf <jpoimboe(a)kernel.org> objtool: Fix another stack overflow in validate_branch() Josh Poimboeuf <jpoimboe(a)kernel.org> objtool: Fix data alignment in elf_add_data() Josh Poimboeuf <jpoimboe(a)kernel.org> objtool/klp: Fix detection of corrupt static branch/call entries Geoffrey D. Bennett <g(a)b4.vu> ALSA: usb-audio: Improve Focusrite sample rate filtering Max Kellermann <max.kellermann(a)ionos.com> ceph: fix memory leaks in ceph_mdsc_build_path() Hristo Venev <hristo(a)venev.name> ceph: do not skip the first folio of the next object in writeback Max Kellermann <max.kellermann(a)ionos.com> ceph: fix i_nlink underrun during async unlink Kalesh Singh <kaleshsingh(a)google.com> mm/tracing: rss_stat: ensure curr is false from kthread context Kuen-Han Tsai <khtsai(a)google.com> usb: gadget: f_ncm: Fix net_device lifecycle with device_move Kuen-Han Tsai <khtsai(a)google.com> Revert "usb: gadget: u_ether: add gether_opts for config caching" Kuen-Han Tsai <khtsai(a)google.com> Revert "usb: gadget: f_ncm: align net_device lifecycle with bind/unbind" Kuen-Han Tsai <khtsai(a)google.com> Revert "usb: gadget: u_ether: Add auto-cleanup helper for freeing net_device" Kuen-Han Tsai <khtsai(a)google.com> Revert "usb: legacy: ncm: Fix NPE in gncm_bind" Kuen-Han Tsai <khtsai(a)google.com> Revert "usb: gadget: f_ncm: Fix atomic context locking issue" Kuen-Han Tsai <khtsai(a)google.com> usb: legacy: ncm: Fix NPE in gncm_bind Kuen-Han Tsai <khtsai(a)google.com> usb: gadget: f_ncm: Fix atomic context locking issue Jiasheng Jiang <jiashengjiangcool(a)gmail.com> usb: gadget: f_tcm: Fix NULL pointer dereferences in nexus handling Ziyi Guo <n7l8m4(a)u.northwestern.edu> usb: image: mdc800: kill download URB on timeout Junzhong Pan <panjunzhong(a)linux.spacemit.com> usb: gadget: uvc: fix interval_duration calculation Oliver Neukum <oneukum(a)suse.com> usb: mdc800: handle signal and read racing John Keeping <jkeeping(a)inmusicbrands.com> usb: gadget: f_hid: fix SuperSpeed descriptors Fan Wu <fanwu01(a)zju.edu.cn> usb: renesas_usbhs: fix use-after-free in ISR during device removal Oliver Neukum <oneukum(a)suse.com> usb: class: cdc-wdm: fix reordering issue in read code path Alan Stern <stern(a)rowland.harvard.edu> USB: core: Limit the length of unkillable synchronous timeouts Alan Stern <stern(a)rowland.harvard.edu> USB: usbtmc: Use usb_bulk_msg_killable() with user-specified timeouts Alan Stern <stern(a)rowland.harvard.edu> USB: usbcore: Introduce usb_bulk_msg_killable() RD Babiera <rdbabiera(a)google.com> usb: typec: altmode/displayport: set displayport signaling rate in configure message Xu Yang <xu.yang_2(a)nxp.com> usb: roles: get usb role switch from parent only for usb-b-connector Marc Zyngier <maz(a)kernel.org> usb: cdc-acm: Restore CAP_BRK functionnality to CH343 Gabor Juhos <j4g8y7(a)gmail.com> usb: core: don't power off roothub PHYs if phy_set_mode() fails Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> usb: misc: uss720: properly clean up reference in uss720_probe() Heikki Krogerus <heikki.krogerus(a)linux.intel.com> usb: dwc3: pci: add support for the Intel Nova Lake -H Oliver Neukum <oneukum(a)suse.com> usb: yurex: fix race in probe Mathias Nyman <mathias.nyman(a)linux.intel.com> xhci: Fix NULL pointer dereference when reading portli debugfs files Dayu Jiang <jiangdayu(a)xiaomi.com> usb: xhci: Prevent interrupt storm on host controller error (HCE) Zilin Guan <zilin(a)seu.edu.cn> usb: xhci: Fix memory leak in xhci_disable_slot() Vyacheslav Vahnenko <vahnenko2003(a)gmail.com> USB: ezcap401 needs USB_QUIRK_NO_BOS to function on 10gbs usb speed Christoffer Sandberg <cs(a)tuxedo.de> usb/core/quirks: Add Huawei ME906S-device to wakeup quirk A1RM4X <dev(a)a1rm4x.com> USB: add QUIRK_NO_BOS for video capture several devices Marc Zyngier <maz(a)kernel.org> KVM: arm64: pkvm: Don't reprobe for ICH_VTR_EL2.TDS on CPU hotplug Marc Zyngier <maz(a)kernel.org> KVM: arm64: vgic: Pick EOIcount deactivations from AP-list tail Marc Zyngier <maz(a)kernel.org> KVM: arm64: pkvm: Fallback to level-3 mapping on host stage-2 fault Sean Christopherson <seanjc(a)google.com> KVM: SVM: Set/clear CR8 write interception when AVIC is (de)activated Sean Christopherson <seanjc(a)google.com> KVM: SVM: Initialize AVIC VMCB fields if AVIC is enabled with in-kernel APIC Jim Mattson <jmattson(a)google.com> KVM: x86: Introduce KVM_X86_QUIRK_VMCS12_ALLOW_FREEZE_IN_SMM Marc Zyngier <maz(a)kernel.org> KVM: arm64: Fix protected mode handling of pages larger than 4kB Zhang Heng <zhangheng(a)kylinos.cn> ASoC: amd: yc: Add DMI quirk for ASUS EXPERTBOOK PM1503CDA Pedro Falcato <pfalcato(a)suse.de> ata: libata-core: Add BRIDGE_OK quirk for QEMU drives Alexandre Courbot <acourbot(a)nvidia.com> rust: str: make NullTerminatedFormatter public Gary Guo <gary(a)garyguo.net> rust: kbuild: emit dep-info into $(depfile) directly Miguel Ojeda <ojeda(a)kernel.org> rust: kbuild: allow `unused_features` Alice Ryhl <aliceryhl(a)google.com> rust_binder: call set_notification_done() without proc lock Alice Ryhl <aliceryhl(a)google.com> rust_binder: avoid reading the written value in offsets array Alice Ryhl <aliceryhl(a)google.com> rust_binder: check ownership before using vma Carlos Llamas <cmllamas(a)google.com> rust_binder: fix oneway spam detection Johan Hovold <johan(a)kernel.org> gpib: lpvo_usb: fix unintended binding of FTDI 8U232AM devices Oleksij Rempel <o.rempel(a)pengutronix.de> net: usb: lan78xx: skip LTM configuration for LAN7850 Oleksij Rempel <o.rempel(a)pengutronix.de> net: usb: lan78xx: fix WARN in __netif_napi_del_locked on disconnect Oleksij Rempel <o.rempel(a)pengutronix.de> net: usb: lan78xx: fix TX byte statistics for small packets Oleksij Rempel <o.rempel(a)pengutronix.de> net: usb: lan78xx: fix silent drop of packets with checksum errors Marc Kleine-Budde <mkl(a)pengutronix.de> can: gs_usb: gs_can_open(): always configure bitrates before starting device Takashi Iwai <tiwai(a)suse.de> ALSA: usb-audio: Check endpoint numbers at parsing Scarlett2 mixer interfaces Mehul Rao <mehulrao(a)gmail.com> ALSA: pcm: fix use-after-free on linked stream runtime in snd_pcm_drain() Sebastian Andrzej Siewior <bigeasy(a)linutronix.de> cgroup: Don't expose dead tasks in cgroup Cheng-Yang Chou <yphbchou0911(a)gmail.com> sched_ext: Remove redundant css_put() in scx_cgroup_init() Qingye Zhao <zhaoqingye(a)honor.com> cgroup: fix race between task migration and iteration Perry Yuan <perry.yuan(a)amd.com> drm/amdgpu: ensure no_hw_access is visible before MMIO Seungjin Bae <eeodqql09(a)gmail.com> usb: gadget: f_mass_storage: Fix potential integer overflow in check_command_size_in_blocks() Andreas Kemnade <andreas(a)kemnade.info> iio: imu: inv-mpu9150: fix irq ack preventing irq storms Eric Dumazet <edumazet(a)google.com> net: prevent NULL deref in ip[6]tunnel_xmit() Alok Tiwari <alok.a.tiwari(a)oracle.com> octeontx2-af: devlink: fix NIX RAS reporter to use RAS interrupt status Alok Tiwari <alok.a.tiwari(a)oracle.com> octeontx2-af: devlink: fix NIX RAS reporter recovery condition Chintan Vankar <c-vankar(a)ti.com> net: ethernet: ti: am65-cpsw-nuss: Fix rx_filter value for PTP support Shiraz Saleem <shirazsaleem(a)microsoft.com> net/mana: Null service_wq on setup error to prevent double destroy Sabrina Dubroca <sd(a)queasysnail.net> neighbour: restore protocol != 0 check in pneigh update Marek Behún <kabel(a)kernel.org> net: dsa: realtek: Fix LED group port bit for non-zero LED group Ricardo B. Marlière <rbm(a)suse.com> net: bonding: Fix nd_tbl NULL dereference when IPv6 is disabled Chuck Lever <chuck.lever(a)oracle.com> perf synthetic-events: Fix stale build ID in module MMAP2 records Tom Ryan <ryan36005(a)gmail.com> io_uring: fix physical SQE bounds check for SQE_MIXED 128-byte ops Chen Ni <nichen(a)iscas.ac.cn> ASoC: amd: acp-mach-common: Add missing error check for clock acquisition Philip Yang <Philip.Yang(a)amd.com> drm/amdkfd: Unreserve bo if queue update failed Casey Connolly <casey.connolly(a)linaro.org> ASoC: detect empty DMI strings Chen Ni <nichen(a)iscas.ac.cn> ASoC: amd: acp3x-rt5682-max9836: Add missing error check for clock acquisition Ben Dooks <ben.dooks(a)codethink.co.uk> ACPI: OSL: fix __iomem type on return from acpi_os_map_generic_address() Nicolai Buchwitz <nb(a)tipi-net.de> net: bcmgenet: fix broken EEE by converting to phylib-managed state Jakub Kicinski <kuba(a)kernel.org> page_pool: store detach_time as ktime_t to avoid false-negatives Matt Vollrath <tactii(a)gmail.com> e1000/e1000e: Fix leak in DMA error cleanup Alok Tiwari <alok.a.tiwari(a)oracle.com> i40e: fix src IP mask checks and memcpy argument names in cloud filter Peter Ujfalusi <peter.ujfalusi(a)linux.intel.com> ASoC: codecs: rt1011: Use component to get the dapm context in spk_mode_put Lizhi Hou <lizhi.hou(a)amd.com> accel/amdxdna: Fix runtime suspend deadlock when there is pending job Petr Oros <poros(a)redhat.com> iavf: fix incorrect reset handling in callbacks Petr Oros <poros(a)redhat.com> iavf: fix PTP use-after-free during reset Nikolay Aleksandrov <razor(a)blackwall.org> drivers: net: ice: fix devlink parameters get without irdma Sungwoo Kim <iam(a)sung-woo.kim> nvme-pci: Fix race bug in nvme_poll_irqdisable() Sungwoo Kim <iam(a)sung-woo.kim> nvme-pci: Fix slab-out-of-bounds in nvme_dbbuf_set Rafael J. Wysocki <rafael.j.wysocki(a)intel.com> sched: idle: Make skipping governor callbacks more consistent Chen Ni <nichen(a)iscas.ac.cn> perf ftrace: Fix hashmap__new() error checking Peng Fan <peng.fan(a)nxp.com> regulator: pca9450: Correct probed name for PCA9452 Peng Fan <peng.fan(a)nxp.com> regulator: pca9450: Correct interrupt type Chen Ni <nichen(a)iscas.ac.cn> perf annotate: Fix hashmap__new() error checking Yuan Tan <tanyuan98(a)outlook.com> netfilter: xt_IDLETIMER: reject rev0 reuse of ALARM timer labels Hyunwoo Kim <imv4bel(a)gmail.com> netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() Hyunwoo Kim <imv4bel(a)gmail.com> netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path David Dull <monderasdor(a)gmail.com> netfilter: x_tables: guard option walkers against 1-byte tail reads Jenny Guanni Qu <qguanni(a)gmail.com> netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop() Florian Westphal <fw(a)strlen.de> netfilter: nf_tables: always walk all pending catchall elements Phil Sutter <phil(a)nwl.cc> netfilter: nf_tables: Fix for duplicate device in netdev hooks Weiming Shi <bestswngs(a)gmail.com> net: add xmit recursion limit to tunnel xmit functions Raju Rangoju <Raju.Rangoju(a)amd.com> amd-xgbe: reset PHY settings before starting PHY Raju Rangoju <Raju.Rangoju(a)amd.com> amd-xgbe: prevent CRC errors during RX adaptation with AN disabled Raju Rangoju <Raju.Rangoju(a)amd.com> amd-xgbe: fix link status handling in xgbe_rx_adaptation Chengfeng Ye <dg573847474(a)gmail.com> mctp: route: hold key->lock in mctp_flow_prepare_output() Jiayuan Chen <jiayuan.chen(a)shopee.com> bonding: fix type confusion in bond_setup_by_slave() Wenyuan Li <2063309626(a)qq.com> can: hi311x: hi3110_open(): add check for hi3110_power_enable() return value Haiyue Wang <haiyuewa(a)163.com> mctp: i2c: fix skb memory leak in receive path Wei Fang <wei.fang(a)nxp.com> net: enetc: do not skip setting LaBCR[MDIO_PHYAD_PRTAD] for addr 0 Wei Fang <wei.fang(a)nxp.com> net: enetc: fix incorrect fallback PHY address handling Arun R Murthy <arun.r.murthy(a)intel.com> drm/i915/dp: Read ALPM caps after DPCD init Pavan Chebbi <pavan.chebbi(a)broadcom.com> bnxt_en: Fix RSS table size check when changing ethtool channels Shuangpeng Bai <shuangpeng.kernel(a)gmail.com> serial: caif: hold tty->link reference in ldisc_open and ser_release Álvaro Fernández Rojas <noltari(a)gmail.com> net: sfp: improve Huawei MA5671a fixup Sen Wang <sen(a)ti.com> ASoC: simple-card-utils: fix graph_util_is_ports0() for DT overlays matteo.cotifava <cotifavamatteo(a)gmail.com> ASoC: soc-core: flush delayed work before removing DAIs and widgets matteo.cotifava <cotifavamatteo(a)gmail.com> ASoC: soc-core: drop delayed_work_pending() check before flush Felix Gu <ustc.gu(a)gmail.com> spi: rockchip-sfc: Fix double-free in remove() callback Felix Gu <ustc.gu(a)gmail.com> spi: amlogic: spifc-a4: Fix DMA mapping error handling Richard Fitzgerald <rf(a)opensource.cirrus.com> firmware: cs_dsp: Fix fragmentation regression in firmware download David Lechner <dlechner(a)baylibre.com> drm/sitronix/st7586: fix bad pixel data due to byte swap Vivian Wang <wangruikang(a)iscas.ac.cn> net: spacemit: Fix error handling in emac_tx_mem_map() Vivian Wang <wangruikang(a)iscas.ac.cn> net: spacemit: Fix error handling in emac_alloc_rx_desc_buffers() Miaoqian Lin <linmq006(a)gmail.com> rxrpc, afs: Fix missing error pointer check after rxrpc_kernel_lookup_peer() Weiming Shi <bestswngs(a)gmail.com> net/sched: teql: fix NULL pointer dereference in iptunnel_xmit on TEQL slave xmit Dragos Tatulea <dtatulea(a)nvidia.com> net/mlx5e: RX, Fix XDP multi-buf frag counting for legacy RQ Dragos Tatulea <dtatulea(a)nvidia.com> net/mlx5e: RX, Fix XDP multi-buf frag counting for striding RQ Gal Pressman <gal(a)nvidia.com> net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery Carolina Jubran <cjubran(a)nvidia.com> net/mlx5: Fix peer miss rules host disabled checks Patrisious Haddad <phaddad(a)nvidia.com> net/mlx5: Fix crash when moving to switchdev mode Cosmin Ratiu <cratiu(a)nvidia.com> net/mlx5: Fix deadlock between devlink lock and esw->wq Hangbin Liu <liuhangbin(a)gmail.com> bonding: handle BOND_LINK_FAIL, BOND_LINK_BACK as valid link states Hangbin Liu <liuhangbin(a)gmail.com> bonding: do not set usable_slaves for broadcast mode Cristian Ciocaltea <cristian.ciocaltea(a)collabora.com> drm/amdgpu: Fix kernel-doc comments for some LUT properties Yang Wang <kevinyang.wang(a)amd.com> drm/amd/pm: add missing od setting PP_OD_FEATURE_ZERO_FAN_BIT for smu v14 Yang Wang <kevinyang.wang(a)amd.com> drm/amd/pm: add missing od setting PP_OD_FEATURE_ZERO_FAN_BIT for smu v13 Pengyu Luo <mitltlatltl(a)gmail.com> drm/msm/dsi: fix pclk rate calculation for bonded dsi Mieczyslaw Nalewaj <namiltd(a)yahoo.com> net: dsa: realtek: rtl8365mb: remove ifOutDiscards from rx_packets Krzysztof Kozlowski <krzysztof.kozlowski(a)oss.qualcomm.com> dt-bindings: display/msm: qcom,sm8750-mdss: Fix model typo Akhil P Oommen <akhilpo(a)oss.qualcomm.com> drm/msm/a8xx: Fix ubwc config related to swizzling Peter Collingbourne <pcc(a)google.com> perf disasm: Fix off-by-one bug in outside check Breno Leitao <leitao(a)debian.org> workqueue: Use POOL_BH instead of WQ_BH when checking pool flags Akhil P Oommen <akhilpo(a)oss.qualcomm.com> drm/msm/a6xx: Fix the bogus protect error on X2-85 Sun YangKai <sunk67188(a)gmail.com> btrfs: hold space_info->lock when clearing periodic reclaim ready Eric Badger <ebadger(a)purestorage.com> xprtrdma: Decrement re_receiving on the early exit paths Pengyu Luo <mitltlatltl(a)gmail.com> drm/msm/dsi: fix hdisplay calculation when programming dsi registers Konrad Dybcio <konrad.dybcio(a)oss.qualcomm.com> drm/msm/dpu: Fix LM size on a number of platforms Roberto Bergantinos Corpas <rbergant(a)redhat.com> nfs: return EISDIR on nfs3_proc_create if d_alias is a dir Takashi Iwai <tiwai(a)suse.de> ALSA: usb-audio: Check max frame size for implicit feedback mode, too sguttula <suresh.guttula(a)amd.com> drm/amdgpu/vcn5: Add SMU dpm interface type Takashi Iwai <tiwai(a)suse.de> ALSA: usb-audio: Avoid implicit feedback mode on DIYINHK USB Audio 2.0 wangshuaiwei <wangshuaiwei1(a)xiaomi.com> scsi: ufs: core: Fix shift out of bounds when MAXQ=32 Peter Wang <peter.wang(a)mediatek.com> scsi: ufs: core: Fix possible NULL pointer dereference in ufshcd_add_command_trace() Charles Keepax <ckeepax(a)opensource.cirrus.com> ASoC: cs42l43: Report insert for exotic peripherals Azamat Almazbek uulu <almazbek1608(a)gmail.com> ASoC: amd: yc: Add ASUS EXPERTBOOK BM1503CDA to quirk table Tomas Henzl <thenzl(a)redhat.com> scsi: ses: Fix devices attaching to different hosts Sofia Schneider <sofia(a)schn.dev> ACPI: OSI: Add DMI quirk for Acer Aspire One D255 Ramanathan Choodamani <quic_rchoodam(a)quicinc.com> wifi: mac80211: set default WMM parameters on all links Al Viro <viro(a)zeniv.linux.org.uk> unshare: fix unshare_fs() handling Sean Rhodes <sean(a)starlabs.systems> ALSA: hda/realtek: Fix speaker pop on Star Labs StarFighter Ranjan Kumar <ranjan.kumar(a)broadcom.com> scsi: mpi3mr: Add NULL checks when resetting request and reply queues Edward Adam Davis <eadavis(a)qq.com> fs: init flags_valid before calling vfs_fileattr_get Won Jung <wone.jung(a)samsung.com> scsi: ufs: core: Reset urgent_bkops_lvl to allow runtime PM power mode Piotr Mazek <pmazek(a)outlook.com> ACPI: PM: Save NVS memory on Lenovo G70-35 Jan Kiszka <jan.kiszka(a)siemens.com> scsi: storvsc: Fix scheduling while atomic on PREEMPT_RT Guenter Roeck <linux(a)roeck-us.net> smb/server: Fix another refcount leak in smb2_open() J. Neuschäfer <j.ne(a)posteo.net> powerpc: 83xx: km83xx: Fix keymile vendor prefix Tzung-Bi Shih <tzungbi(a)kernel.org> remoteproc: mediatek: Unprepare SCP clock during system suspend Bjorn Andersson <bjorn.andersson(a)oss.qualcomm.com> remoteproc: sysmon: Correct subsys_name_len type in QMI request Sourabh Jain <sourabhjain(a)linux.ibm.com> powerpc/crash: adjust the elfcorehdr size Sourabh Jain <sourabhjain(a)linux.ibm.com> powerpc/kexec/core: use big-endian types for crash variables Christophe Leroy (CS GROUP) <chleroy(a)kernel.org> powerpc/uaccess: Fix inline assembly for clang build on PPC32 Rob Herring (Arm) <robh(a)kernel.org> remoteproc: qcom_wcnss: Fix reserved region mapping failure ------------- Diffstat: .../bindings/display/msm/dp-controller.yaml | 21 ++- .../bindings/display/msm/qcom,glymur-mdss.yaml | 16 +- .../bindings/display/msm/qcom,sm8750-mdss.yaml | 2 +- Documentation/virt/kvm/api.rst | 8 + Makefile | 5 +- arch/arm64/include/asm/kvm_host.h | 3 + arch/arm64/include/asm/pgtable-prot.h | 10 +- arch/arm64/kernel/cpufeature.c | 9 + arch/arm64/kvm/hyp/nvhe/mem_protect.c | 2 +- arch/arm64/kvm/mmu.c | 12 +- arch/arm64/kvm/vgic/vgic-init.c | 34 ++-- arch/arm64/kvm/vgic/vgic-v2.c | 4 +- arch/arm64/kvm/vgic/vgic-v3.c | 12 +- arch/arm64/kvm/vgic/vgic.c | 6 + arch/arm64/mm/contpte.c | 53 +++++- arch/arm64/mm/mmap.c | 6 +- arch/parisc/include/asm/pgtable.h | 2 +- arch/parisc/kernel/head.S | 7 +- arch/parisc/kernel/setup.c | 20 ++- arch/powerpc/include/asm/uaccess.h | 2 +- arch/powerpc/kexec/core.c | 17 +- arch/powerpc/kexec/file_load_64.c | 14 +- arch/powerpc/net/bpf_jit_comp.c | 30 ++-- arch/powerpc/net/bpf_jit_comp64.c | 101 ++++++++++- arch/powerpc/perf/callchain.c | 5 + arch/powerpc/perf/callchain_32.c | 1 - arch/powerpc/perf/callchain_64.c | 1 - arch/powerpc/platforms/83xx/km83xx.c | 4 +- arch/powerpc/platforms/pseries/msi.c | 2 +- arch/s390/include/asm/processor.h | 2 +- arch/s390/lib/xor.c | 5 +- arch/s390/mm/pfault.c | 4 +- arch/x86/include/asm/kvm_host.h | 3 +- arch/x86/include/uapi/asm/kvm.h | 1 + arch/x86/kernel/apic/apic.c | 6 + arch/x86/kvm/svm/avic.c | 9 +- arch/x86/kvm/svm/svm.c | 9 +- arch/x86/kvm/vmx/nested.c | 22 ++- drivers/accel/amdxdna/aie2_ctx.c | 14 +- drivers/accel/amdxdna/amdxdna_ctx.c | 10 ++ drivers/acpi/osi.c | 13 ++ drivers/acpi/osl.c | 2 +- drivers/acpi/sleep.c | 8 + drivers/android/binder/page_range.rs | 83 ++++++--- drivers/android/binder/process.rs | 3 +- drivers/android/binder/range_alloc/array.rs | 35 +++- drivers/android/binder/range_alloc/mod.rs | 4 +- drivers/android/binder/range_alloc/tree.rs | 18 +- drivers/android/binder/thread.rs | 17 +- drivers/ata/libata-core.c | 2 + drivers/base/property.c | 27 ++- drivers/block/ublk_drv.c | 12 +- drivers/char/ipmi/ipmi_si_intf.c | 37 ++-- drivers/cpufreq/intel_pstate.c | 4 +- drivers/cpuidle/cpuidle.c | 10 -- drivers/crypto/ccp/sev-dev.c | 10 +- drivers/cxl/Kconfig | 1 + drivers/firmware/cirrus/cs_dsp.c | 24 ++- drivers/firmware/stratix10-rsu.c | 2 + drivers/gpib/lpvo_usb_gpib/lpvo_usb_gpib.c | 7 +- drivers/gpio/gpiolib.c | 8 +- drivers/gpu/drm/amd/amdgpu/amdgpu_amdkfd_gpuvm.c | 6 +- drivers/gpu/drm/amd/amdgpu/amdgpu_device.c | 17 +- drivers/gpu/drm/amd/amdgpu/amdgpu_kms.c | 2 +- drivers/gpu/drm/amd/amdgpu/amdgpu_mode.h | 16 +- drivers/gpu/drm/amd/amdgpu/amdgpu_userq_fence.c | 14 ++ drivers/gpu/drm/amd/amdgpu/mes_v11_0.c | 5 - drivers/gpu/drm/amd/amdgpu/mes_v12_0.c | 5 - drivers/gpu/drm/amd/amdgpu/vcn_v5_0_0.c | 4 + .../gpu/drm/amd/amdkfd/kfd_process_queue_manager.c | 1 + .../drm/amd/display/dc/hwss/dcn401/dcn401_hwseq.c | 6 +- .../gpu/drm/amd/pm/swsmu/smu13/smu_v13_0_0_ppt.c | 11 +- .../gpu/drm/amd/pm/swsmu/smu13/smu_v13_0_7_ppt.c | 6 +- .../gpu/drm/amd/pm/swsmu/smu14/smu_v14_0_2_ppt.c | 3 +- drivers/gpu/drm/bridge/samsung-dsim.c | 25 ++- drivers/gpu/drm/bridge/ti-sn65dsi83.c | 13 +- drivers/gpu/drm/bridge/ti-sn65dsi86.c | 6 +- drivers/gpu/drm/i915/display/intel_alpm.c | 13 +- drivers/gpu/drm/i915/display/intel_display.c | 1 - drivers/gpu/drm/i915/display/intel_dp.c | 7 + drivers/gpu/drm/i915/display/intel_psr.c | 50 ++++-- drivers/gpu/drm/i915/display/intel_vrr.c | 14 ++ drivers/gpu/drm/i915/gem/i915_gem_shmem.c | 12 +- drivers/gpu/drm/msm/adreno/a2xx_gpummu.c | 2 +- drivers/gpu/drm/msm/adreno/a6xx_catalog.c | 3 +- drivers/gpu/drm/msm/adreno/a8xx_gpu.c | 14 +- .../drm/msm/disp/dpu1/catalog/dpu_8_0_sc8280xp.h | 12 +- .../gpu/drm/msm/disp/dpu1/catalog/dpu_8_1_sm8450.h | 12 +- .../drm/msm/disp/dpu1/catalog/dpu_8_4_sa8775p.h | 4 +- .../gpu/drm/msm/disp/dpu1/catalog/dpu_9_0_sm8550.h | 12 +- .../drm/msm/disp/dpu1/catalog/dpu_9_1_sar2130p.h | 12 +- .../drm/msm/disp/dpu1/catalog/dpu_9_2_x1e80100.h | 12 +- drivers/gpu/drm/msm/dsi/dsi_host.c | 43 +++-- drivers/gpu/drm/nouveau/nouveau_connector.c | 3 + .../gpu/drm/nouveau/nvkm/subdev/gsp/rm/r535/gsp.c | 12 +- drivers/gpu/drm/sitronix/st7586.c | 15 +- drivers/gpu/drm/ttm/ttm_pool_internal.h | 2 +- drivers/gpu/drm/xe/xe_sync.c | 30 +++- drivers/gpu/drm/xe/xe_wa.c | 13 +- drivers/hwmon/pmbus/q54sj108a2.c | 19 ++- drivers/i3c/master/dw-i3c-master.c | 4 +- drivers/i3c/master/mipi-i3c-hci/cmd.h | 1 + drivers/i3c/master/mipi-i3c-hci/cmd_v1.c | 2 +- drivers/i3c/master/mipi-i3c-hci/cmd_v2.c | 2 +- drivers/i3c/master/mipi-i3c-hci/core.c | 9 +- drivers/i3c/master/mipi-i3c-hci/dma.c | 94 +++++++---- drivers/i3c/master/mipi-i3c-hci/hci.h | 2 + drivers/i3c/master/mipi-i3c-hci/pio.c | 16 +- drivers/iio/chemical/bme680_core.c | 2 +- drivers/iio/chemical/sps30_i2c.c | 2 +- drivers/iio/chemical/sps30_serial.c | 2 +- drivers/iio/dac/ds4424.c | 2 +- drivers/iio/frequency/adf4377.c | 2 +- drivers/iio/gyro/mpu3050-core.c | 18 +- drivers/iio/gyro/mpu3050-i2c.c | 3 +- drivers/iio/imu/adis.c | 2 +- drivers/iio/imu/inv_icm42600/inv_icm42600_accel.c | 2 + drivers/iio/imu/inv_icm42600/inv_icm42600_buffer.c | 4 + drivers/iio/imu/inv_icm42600/inv_icm42600_gyro.c | 2 + drivers/iio/imu/inv_icm45600/inv_icm45600.h | 2 +- drivers/iio/imu/inv_icm45600/inv_icm45600_core.c | 11 +- drivers/iio/imu/inv_mpu6050/inv_mpu_core.c | 8 + drivers/iio/imu/inv_mpu6050/inv_mpu_iio.h | 2 + drivers/iio/imu/inv_mpu6050/inv_mpu_trigger.c | 5 +- drivers/iio/industrialio-buffer.c | 6 +- drivers/iio/light/bh1780.c | 2 +- drivers/iio/magnetometer/tlv493d.c | 2 +- drivers/iio/potentiometer/mcp4131.c | 2 +- drivers/iio/proximity/hx9023s.c | 6 +- drivers/irqchip/irq-gic-v3-its.c | 4 + drivers/irqchip/irq-riscv-aplic-direct.c | 10 ++ drivers/irqchip/irq-riscv-aplic-main.c | 187 ++++++++++++++++++++- drivers/irqchip/irq-riscv-aplic-main.h | 19 +++ drivers/media/dvb-core/dvb_net.c | 3 + drivers/mmc/host/dw_mmc-rockchip.c | 38 ++++- drivers/mmc/host/mmci_qcom_dml.c | 1 + drivers/mmc/host/sdhci-brcmstb.c | 2 +- drivers/net/bonding/bond_main.c | 70 +++++++- drivers/net/caif/caif_serial.c | 3 + drivers/net/can/dev/calc_bittiming.c | 2 +- drivers/net/can/spi/hi311x.c | 5 +- drivers/net/can/usb/gs_usb.c | 22 ++- drivers/net/dsa/microchip/ksz_ptp.c | 11 +- drivers/net/dsa/realtek/rtl8365mb.c | 3 +- drivers/net/dsa/realtek/rtl8366rb-leds.c | 6 +- drivers/net/ethernet/amd/xgbe/xgbe-drv.c | 19 ++- drivers/net/ethernet/amd/xgbe/xgbe-phy-v2.c | 82 ++++++++- drivers/net/ethernet/amd/xgbe/xgbe.h | 4 + drivers/net/ethernet/arc/emac_main.c | 11 ++ drivers/net/ethernet/broadcom/bnxt/bnxt_ethtool.c | 4 +- drivers/net/ethernet/broadcom/genet/bcmgenet.c | 31 ++-- drivers/net/ethernet/broadcom/genet/bcmgenet.h | 5 +- drivers/net/ethernet/broadcom/genet/bcmmii.c | 10 +- drivers/net/ethernet/cadence/macb_main.c | 98 ++++++++++- .../net/ethernet/freescale/enetc/netc_blk_ctrl.c | 24 ++- drivers/net/ethernet/intel/e1000/e1000_main.c | 2 - drivers/net/ethernet/intel/e1000e/netdev.c | 2 - drivers/net/ethernet/intel/i40e/i40e_virtchnl_pf.c | 14 +- drivers/net/ethernet/intel/iavf/iavf.h | 3 +- drivers/net/ethernet/intel/iavf/iavf_ethtool.c | 19 +-- drivers/net/ethernet/intel/iavf/iavf_main.c | 81 +++------ drivers/net/ethernet/intel/iavf/iavf_virtchnl.c | 1 - drivers/net/ethernet/intel/ice/devlink/devlink.c | 4 +- drivers/net/ethernet/intel/ice/ice_common.c | 13 +- drivers/net/ethernet/intel/ice/ice_ethtool.c | 35 ++-- drivers/net/ethernet/intel/ixgbevf/vf.c | 3 +- .../ethernet/marvell/octeontx2/af/rvu_devlink.c | 6 +- .../ethernet/mellanox/mlx5/core/en/reporter_tx.c | 1 - .../mellanox/mlx5/core/en_accel/ipsec_fs.c | 2 +- drivers/net/ethernet/mellanox/mlx5/core/en_rx.c | 23 +-- drivers/net/ethernet/mellanox/mlx5/core/eswitch.c | 7 +- drivers/net/ethernet/mellanox/mlx5/core/eswitch.h | 2 + .../ethernet/mellanox/mlx5/core/eswitch_offloads.c | 45 ++--- drivers/net/ethernet/microsoft/mana/gdma_main.c | 1 + drivers/net/ethernet/microsoft/mana/mana_en.c | 23 ++- drivers/net/ethernet/spacemit/k1_emac.c | 19 ++- drivers/net/ethernet/ti/am65-cpsw-nuss.c | 16 +- drivers/net/ethernet/ti/am65-cpsw-nuss.h | 2 +- drivers/net/mctp/mctp-i2c.c | 1 + drivers/net/mctp/mctp-usb.c | 3 +- drivers/net/phy/sfp.c | 8 +- drivers/net/usb/lan78xx.c | 12 +- drivers/net/usb/lan78xx.h | 3 + drivers/net/usb/qmi_wwan.c | 4 +- drivers/net/usb/usbnet.c | 7 +- drivers/nvme/host/pci.c | 8 +- drivers/pinctrl/pinctrl-cy8c95x0.c | 4 +- drivers/pmdomain/bcm/bcm2835-power.c | 6 +- drivers/pmdomain/rockchip/pm-domains.c | 2 +- drivers/regulator/pca9450-regulator.c | 14 +- drivers/regulator/pf9453-regulator.c | 2 +- drivers/remoteproc/mtk_scp.c | 39 +++++ drivers/remoteproc/qcom_sysmon.c | 2 +- drivers/remoteproc/qcom_wcnss.c | 2 +- drivers/s390/block/dasd_eckd.c | 16 ++ drivers/s390/crypto/zcrypt_ccamisc.c | 12 +- drivers/s390/crypto/zcrypt_cex4.c | 3 +- drivers/scsi/hisi_sas/hisi_sas_main.c | 2 +- drivers/scsi/hisi_sas/hisi_sas_v3_hw.c | 2 +- drivers/scsi/mpi3mr/mpi3mr_fw.c | 32 ++-- drivers/scsi/qla2xxx/qla_iocb.c | 2 - drivers/scsi/scsi_scan.c | 8 +- drivers/scsi/ses.c | 5 +- drivers/scsi/storvsc_drv.c | 5 +- drivers/spi/spi-amlogic-spifc-a4.c | 5 +- drivers/spi/spi-rockchip-sfc.c | 2 +- drivers/staging/rtl8723bs/core/rtw_ieee80211.c | 15 +- drivers/staging/rtl8723bs/core/rtw_mlme.c | 5 +- drivers/staging/sm750fb/sm750.c | 1 + drivers/staging/sm750fb/sm750_hw.c | 22 +-- drivers/ufs/core/ufshcd.c | 11 +- drivers/usb/class/cdc-acm.c | 5 + drivers/usb/class/cdc-acm.h | 1 + drivers/usb/class/cdc-wdm.c | 4 +- drivers/usb/class/usbtmc.c | 6 +- drivers/usb/core/message.c | 100 ++++++++--- drivers/usb/core/phy.c | 8 +- drivers/usb/core/quirks.c | 16 ++ drivers/usb/dwc3/dwc3-pci.c | 2 + drivers/usb/gadget/function/f_hid.c | 4 + drivers/usb/gadget/function/f_mass_storage.c | 12 +- drivers/usb/gadget/function/f_ncm.c | 144 +++++++++------- drivers/usb/gadget/function/f_tcm.c | 14 ++ drivers/usb/gadget/function/u_ether.c | 67 +++----- drivers/usb/gadget/function/u_ether.h | 56 +++--- drivers/usb/gadget/function/u_ether_configfs.h | 176 ------------------- drivers/usb/gadget/function/u_ncm.h | 4 +- drivers/usb/gadget/function/uvc_video.c | 2 +- drivers/usb/host/xhci-debugfs.c | 10 +- drivers/usb/host/xhci-ring.c | 1 + drivers/usb/host/xhci.c | 4 +- drivers/usb/image/mdc800.c | 6 +- drivers/usb/misc/uss720.c | 2 +- drivers/usb/misc/yurex.c | 2 +- drivers/usb/renesas_usbhs/common.c | 9 + drivers/usb/roles/class.c | 7 +- drivers/usb/typec/altmodes/displayport.c | 7 +- drivers/usb/typec/tcpm/tcpm.c | 2 +- fs/afs/addr_list.c | 8 +- fs/btrfs/extent_io.c | 1 + fs/btrfs/inode.c | 19 +++ fs/btrfs/ioctl.c | 24 ++- fs/btrfs/space-info.c | 5 +- fs/btrfs/transaction.c | 16 ++ fs/btrfs/uuid-tree.c | 38 +++++ fs/btrfs/uuid-tree.h | 2 + fs/btrfs/volumes.c | 6 +- fs/ceph/addr.c | 1 - fs/ceph/debugfs.c | 4 +- fs/ceph/dir.c | 17 +- fs/ceph/file.c | 4 +- fs/ceph/inode.c | 2 +- fs/ceph/mds_client.c | 3 + fs/file_attr.c | 2 +- fs/iomap/buffered-io.c | 15 +- fs/iomap/ioend.c | 13 +- fs/nfs/nfs3proc.c | 7 +- fs/nfsd/nfsctl.c | 2 +- fs/nsfs.c | 15 +- fs/smb/client/cifsglob.h | 11 ++ fs/smb/client/dir.c | 1 + fs/smb/client/file.c | 18 +- fs/smb/client/fs_context.c | 2 +- fs/smb/client/smb2ops.c | 14 +- fs/smb/client/smb2pdu.c | 5 +- fs/smb/server/auth.c | 22 +-- fs/smb/server/oplock.c | 35 ++-- fs/smb/server/oplock.h | 5 +- fs/smb/server/smb2pdu.c | 8 +- fs/xfs/libxfs/xfs_defer.c | 2 +- fs/xfs/xfs_bmap_item.c | 2 +- fs/xfs/xfs_dquot.c | 8 +- fs/xfs/xfs_log.c | 2 + include/kunit/run-in-irq-context.h | 44 +++-- include/linux/damon.h | 10 +- include/linux/io_uring_types.h | 1 + include/linux/irqchip/arm-gic-v3.h | 1 + include/linux/kthread.h | 21 ++- include/linux/liveupdate.h | 9 +- include/linux/migrate.h | 10 +- include/linux/mm.h | 17 +- include/linux/mmc/host.h | 9 +- include/linux/netdevice.h | 32 ++++ include/linux/ns_common.h | 2 + include/linux/rseq_types.h | 6 +- include/linux/sched.h | 2 - include/linux/usb.h | 8 +- include/linux/usb/usbnet.h | 1 + include/net/ip6_tunnel.h | 14 ++ include/net/ip_tunnels.h | 7 + include/net/page_pool/types.h | 2 +- include/trace/events/kmem.h | 8 +- io_uring/eventfd.c | 10 +- io_uring/io_uring.c | 26 ++- io_uring/kbuf.c | 13 +- io_uring/net.c | 2 + io_uring/register.c | 12 ++ io_uring/zcrx.c | 5 +- kernel/bpf/verifier.c | 1 - kernel/cgroup/cgroup.c | 7 + kernel/exit.c | 6 + kernel/fork.c | 5 +- kernel/kprobes.c | 8 +- kernel/kthread.c | 41 +---- kernel/liveupdate/luo_file.c | 41 +++-- kernel/nscommon.c | 6 + kernel/nstree.c | 29 +--- kernel/sched/core.c | 81 ++++----- kernel/sched/ext.c | 84 +++++++-- kernel/sched/idle.c | 11 +- kernel/time/time.c | 2 +- kernel/trace/bpf_trace.c | 4 +- kernel/trace/trace.c | 6 +- kernel/trace/trace_events.c | 58 +++++-- kernel/trace/trace_functions_graph.c | 19 ++- kernel/workqueue.c | 2 +- lib/bootconfig.c | 6 +- mm/damon/core.c | 79 +++++---- mm/damon/lru_sort.c | 4 +- mm/damon/reclaim.c | 4 +- mm/damon/stat.c | 2 +- mm/damon/sysfs.c | 11 +- mm/damon/tests/vaddr-kunit.h | 2 +- mm/damon/vaddr.c | 24 +-- mm/filemap.c | 15 +- mm/huge_memory.c | 13 +- mm/kfence/core.c | 29 +++- mm/memcontrol.c | 2 +- mm/memfd_luo.c | 56 +++++- mm/memory.c | 3 +- mm/migrate.c | 8 +- mm/migrate_device.c | 2 +- mm/page_alloc.c | 3 +- mm/slub.c | 54 ++++-- net/batman-adv/bat_v_elp.c | 10 +- net/batman-adv/hard-interface.c | 8 +- net/batman-adv/hard-interface.h | 1 + net/ceph/auth.c | 6 +- net/ceph/messenger_v2.c | 31 ++-- net/ceph/mon_client.c | 6 +- net/core/dev.c | 17 +- net/core/dev.h | 35 ---- net/core/neighbour.c | 3 +- net/core/page_pool_user.c | 4 +- net/ipv4/Kconfig | 2 + net/ipv4/ip_tunnel_core.c | 15 ++ net/ipv4/nexthop.c | 14 +- net/ipv4/tcp.c | 3 +- net/ipv4/tcp_ao.c | 3 +- net/ipv4/tcp_ipv4.c | 3 +- net/ipv6/tcp_ipv6.c | 3 +- net/mac80211/link.c | 2 + net/mctp/route.c | 13 +- net/ncsi/ncsi-aen.c | 3 +- net/ncsi/ncsi-rsp.c | 16 +- net/netfilter/nf_tables_api.c | 4 +- net/netfilter/nfnetlink_cthelper.c | 8 +- net/netfilter/nfnetlink_queue.c | 4 +- net/netfilter/nft_chain_filter.c | 2 +- net/netfilter/nft_set_pipapo.c | 3 +- net/netfilter/xt_IDLETIMER.c | 6 + net/netfilter/xt_dccp.c | 4 +- net/netfilter/xt_tcpudp.c | 6 +- net/rxrpc/af_rxrpc.c | 8 +- net/sched/sch_teql.c | 1 + net/shaper/shaper.c | 11 +- net/sunrpc/xprtrdma/verbs.c | 7 +- net/tipc/socket.c | 2 + rust/Makefile | 6 +- rust/kernel/str.rs | 4 +- sound/core/pcm_native.c | 19 ++- sound/hda/codecs/realtek/alc269.c | 25 +++ sound/soc/amd/acp/acp-mach-common.c | 18 +- sound/soc/amd/acp3x-rt5682-max9836.c | 9 +- sound/soc/amd/yc/acp6x-mach.c | 14 ++ sound/soc/codecs/cs42l43-jack.c | 1 + sound/soc/codecs/rt1011.c | 2 +- sound/soc/generic/simple-card-utils.c | 12 +- sound/soc/qcom/qdsp6/q6apm-dai.c | 1 + sound/soc/qcom/qdsp6/q6apm-lpass-dais.c | 1 + sound/soc/qcom/qdsp6/q6apm.c | 1 + sound/soc/soc-core.c | 11 +- sound/usb/endpoint.c | 1 + sound/usb/format.c | 70 +++++++- sound/usb/mixer_scarlett2.c | 2 + sound/usb/quirks.c | 2 + tools/objtool/check.c | 10 +- tools/objtool/elf.c | 2 +- tools/objtool/klp-diff.c | 3 + tools/perf/builtin-ftrace.c | 9 +- tools/perf/util/annotate.c | 5 +- tools/perf/util/disasm.c | 2 +- tools/perf/util/synthetic-events.c | 5 + .../selftests/filesystems/nsfs/iterate_mntns.c | 25 +-- 394 files changed, 3522 insertions(+), 1770 deletions(-)

1 week, 3 days

[PATCH 6.18 000/335] 6.18.19-rc2 review

by Greg Kroah-Hartman

This is the start of the stable review cycle for the 6.18.19 release. There are 335 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know. Responses should be made by Fri, 20 Mar 2026 12:25:23 +0000. Anything received after that time might be too late. The whole patch series can be found in one patch at: https://www.kernel.org/pub/linux/kernel/v6.x/stable-review/patch-6.18.19-rc… or in the git tree and branch at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-6.18.y and the diffstat can be found below. thanks, greg k-h ------------- Pseudo-Shortlog of commits: Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> Linux 6.18.19-rc2 Christian Loehle <christian.loehle(a)arm.com> bpf: drop kthread_exit from noreturn_deny John Ripple <john.ripple(a)keysight.com> drm/bridge: ti-sn65dsi86: Add support for DisplayPort mode with HPD SeongJae Park <sj(a)kernel.org> mm/damon/core: disallow non-power of two min_region_sz Jens Axboe <axboe(a)kernel.dk> io_uring/eventfd: use ctx->rings_rcu for flags checking Jens Axboe <axboe(a)kernel.dk> io_uring: ensure ctx->rings is stable for task work flags manipulation Eric Biggers <ebiggers(a)kernel.org> net/tcp-md5: Fix MAC comparison to be constant-time Eric Biggers <ebiggers(a)kernel.org> lib/crypto: tests: Depend on library options rather than selecting them Eric Biggers <ebiggers(a)kernel.org> ksmbd: Compare MACs in constant time Eric Biggers <ebiggers(a)kernel.org> smb: client: Compare MACs in constant time Nathan Chancellor <nathan(a)kernel.org> kbuild: Leave objtool binary around with 'make clean' Sean Christopherson <seanjc(a)google.com> KVM: SVM: Set/clear CR8 write interception when AVIC is (de)activated Naveen N Rao <naveen(a)kernel.org> KVM: SVM: Add a helper to look up the max physical ID for AVIC Naveen N Rao <naveen(a)kernel.org> KVM: SVM: Limit AVIC physical max index based on configured max_vcpu_ids Marc Zyngier <maz(a)kernel.org> KVM: arm64: Eagerly init vgic dist/redist on vgic creation Sascha Bischoff <Sascha.Bischoff(a)arm.com> KVM: arm64: gic: Set vgic_model before initing private IRQs Shawn Lin <shawn.lin(a)rock-chips.com> mmc: dw_mmc-rockchip: Fix runtime PM support for internal phase support Shawn Lin <shawn.lin(a)rock-chips.com> mmc: dw_mmc-rockchip: Add memory clock auto-gating support Shenghao Yang <me(a)shenghaoyang.info> drm/gud: fix NULL crtc dereference on display disable Ruben Wauters <rubenru09(a)aol.com> drm/gud: rearrange gud_probe() to prepare for function splitting Thomas Hellström <thomas.hellstrom(a)linux.intel.com> mm: Fix a hmm_range_fault() livelock / starvation problem Keith Busch <kbusch(a)kernel.org> cxl/acpi: Fix CXL_ACPI and CXL_PMEM Kconfig tristate mismatch Adrian Hunter <adrian.hunter(a)intel.com> i3c: mipi-i3c-hci: Correct RING_CTRL_ABORT handling in DMA dequeue Adrian Hunter <adrian.hunter(a)intel.com> i3c: mipi-i3c-hci: Fix race in DMA ring dequeue Adrian Hunter <adrian.hunter(a)intel.com> i3c: mipi-i3c-hci: Add missing TID field to no-op command descriptor Adrian Hunter <adrian.hunter(a)intel.com> i3c: mipi-i3c-hci: Restart DMA ring correctly after dequeue abort Adrian Hunter <adrian.hunter(a)intel.com> i3c: mipi-i3c-hci: Consolidate spinlocks Adrian Hunter <adrian.hunter(a)intel.com> i3c: mipi-i3c-hci: Factor out DMA mapping from queuing path Adrian Hunter <adrian.hunter(a)intel.com> i3c: mipi-i3c-hci: Use ETIMEDOUT instead of ETIME for timeout errors Yasin Lee <yasin.lee.x(a)gmail.com> iio: proximity: hx9023s: Protect against division by zero in set_samp_freq Yasin Lee <yasin.lee.x(a)gmail.com> iio: proximity: hx9023s: fix assignment order for __counted_by Jean-Baptiste Maneyrol <jean-baptiste.maneyrol(a)tdk.com> iio: imu: inv_icm42600: fix odr switch when turning buffer off Jean-Baptiste Maneyrol <jean-baptiste.maneyrol(a)tdk.com> iio: imu: inv_icm42600: fix odr switch to the same value Antoniu Miclaus <antoniu.miclaus(a)analog.com> iio: light: bh1780: fix PM runtime leak on error path Antoniu Miclaus <antoniu.miclaus(a)analog.com> iio: gyro: mpu3050-i2c: fix pm_runtime error handling Radu Sabau <radu.sabau(a)analog.com> iio: imu: adis: Fix NULL pointer dereference in adis_init Antoniu Miclaus <antoniu.miclaus(a)analog.com> iio: gyro: mpu3050-core: fix pm_runtime error handling Nuno Sá <nuno.sa(a)analog.com> iio: buffer: Fix wait_queue not being removed Chris Spencer <spencercw(a)gmail.com> iio: chemical: bme680: Fix measurement wait duration calculation Lukas Schmid <lukas.schmid(a)netcube.li> iio: potentiometer: mcp4131: fix double application of wiper shift Antoniu Miclaus <antoniu.miclaus(a)analog.com> iio: magnetometer: tlv493d: remove erroneous shift in X-axis data Antoniu Miclaus <antoniu.miclaus(a)analog.com> iio: chemical: sps30_i2c: fix buffer size in sps30_i2c_read_meas() Antoniu Miclaus <antoniu.miclaus(a)analog.com> iio: chemical: sps30_serial: fix buffer size in sps30_serial_read_meas() SeungJu Cheon <suunj1331(a)gmail.com> iio: frequency: adf4377: Fix duplicated soft reset mask Oleksij Rempel <o.rempel(a)pengutronix.de> iio: dac: ds4424: reject -128 RAW value Filipe Manana <fdmanana(a)suse.com> btrfs: abort transaction on failure to update root in the received subvol ioctl Bart Van Assche <bvanassche(a)acm.org> btrfs: add missing RCU unlock in error path in try_release_subpage_extent_buffer() Filipe Manana <fdmanana(a)suse.com> btrfs: fix transaction abort on set received ioctl due to item overflow Filipe Manana <fdmanana(a)suse.com> btrfs: fix transaction abort on file creation due to name hash collision Filipe Manana <fdmanana(a)suse.com> btrfs: fix transaction abort when snapshotting received subvolumes Henrique Carvalho <henrique.carvalho(a)suse.com> smb: client: fix iface port assignment in parse_server_interfaces Bharath SM <bharathsm(a)microsoft.com> smb: client: fix in-place encryption corruption in SMB2_write() Paulo Alcantara <pc(a)manguebit.org> smb: client: fix atomic open with O_DIRECT & O_SYNC Josh Law <objecting(a)objecting.org> lib/bootconfig: check bounds before writing in __xbc_open_brace() Josh Law <objecting(a)objecting.org> lib/bootconfig: fix snprintf truncation check in xbc_node_compose_key_after() Masami Hiramatsu (Google) <mhiramat(a)kernel.org> kprobes: Remove unneeded warnings from __arm_kprobe_ftrace() Shashank Balaji <shashank.mahadasyam(a)sony.com> x86/apic: Disable x2apic on resume if the kernel expects so Junxiao Bi <junxiao.bi(a)oracle.com> scsi: core: Fix error handling for scsi_alloc_sdev() Josh Law <objecting(a)objecting.org> lib/bootconfig: fix off-by-one in xbc_verify_tree() unclosed brace error Hari Bathini <hbathini(a)linux.ibm.com> powerpc64/bpf: fix the address returned by bpf_get_func_ip Hari Bathini <hbathini(a)linux.ibm.com> powerpc64/bpf: fix kfunc call support Nam Cao <namcao(a)linutronix.de> powerpc/pseries: Correct MSI allocation tracking Stefan Haberland <sth(a)linux.ibm.com> s390/dasd: Copy detected format information to secondary device Stefan Haberland <sth(a)linux.ibm.com> s390/dasd: Move quiesce state with pprc swap Harald Freudenberger <freude(a)linux.ibm.com> s390/zcrypt: Enable AUTOSEL_DOM for CCA serialnr sysfs attribute Tejun Heo <tj(a)kernel.org> sched_ext: Fix enqueue_task_scx() truncation of upper enqueue flags Long Li <leo.lilong(a)huawei.com> xfs: ensure dquot item is deleted from AIL only after log shutdown Darrick J. Wong <djwong(a)kernel.org> xfs: fix undersized l_iclog_roundoff values Carlos Maiolino <cem(a)kernel.org> xfs: fix returned valued from xfs_defer_can_append Long Li <leo.lilong(a)huawei.com> xfs: fix integer overflow in bmap intent sort comparator Shyam Prasad N <sprasad(a)microsoft.com> cifs: make default value of retrans as zero Jens Axboe <axboe(a)kernel.dk> io_uring/kbuf: check if target buffer list is still legacy on recycle Laurent Vivier <lvivier(a)redhat.com> qmi_wwan: allow max_mtu above hard_mtu to control rx_urb_size Paul Moses <p(a)1g4.org> net-shapers: don't free reply skb after genlmsg_reply() Calvin Owens <calvin(a)wbinvd.org> tracing: Fix trace_buf_size= cmdline parameter with sizes >= 2G Andrei-Alexandru Tachici <andrei-alexandru.tachici(a)oss.qualcomm.com> tracing: Fix enabling multiple events on the kernel command line and bootconfig Abhinav Kumar <quic_abhinavk(a)quicinc.com> drm/msm/dpu: Correct the SA8775P intr_underrun/intr_underrun index Mario Limonciello <mario.limonciello(a)amd.com> drm/amd: Fix a few more NULL pointer dereference in device cleanup Thomas Fourier <fourier.thomas(a)gmail.com> drm/msm: Fix dma_free_attrs() buffer size Jouni Högander <jouni.hogander(a)intel.com> drm/i915/psr: Repeat Selective Update area alignment Janusz Krzysztofik <janusz.krzysztofik(a)linux.intel.com> drm/i915: Fix potential overflow of shmem scatterlist length Luca Ceresoli <luca.ceresoli(a)bootlin.com> drm/bridge: ti-sn65dsi83: halve horizontal syncs for dual LVDS output Luca Ceresoli <luca.ceresoli(a)bootlin.com> drm/bridge: ti-sn65dsi83: fix CHA_DSI_CLK_RANGE rounding Mario Limonciello <mario.limonciello(a)amd.com> drm/amd: Fix NULL pointer dereference in device cleanup Mario Limonciello <mario.limonciello(a)amd.com> drm/amd: Set num IP blocks to 0 if discovery fails Alysa Liu <Alysa.Liu(a)amd.com> drm/amdgpu: Fix use-after-free race in VM acquire Yang Wang <kevinyang.wang(a)amd.com> drm/amd/pm: remove invalid gpu_metrics.energy_accumulator on smu v13.0.x Bastien Curutchet (Schneider Electric) <bastien.curutchet(a)bootlin.com> net: dsa: microchip: Fix error path in PTP IRQ setup Fan Wu <fanwu01(a)zju.edu.cn> net: ethernet: arc: emac: quiesce interrupts before requesting IRQ Jian Zhang <zhangjian.3032(a)bytedance.com> net: ncsi: fix skb leak in error paths Mehul Rao <mehulrao(a)gmail.com> net: nexthop: fix percpu use-after-free in remove_nh_grp_entry Johan Hovold <johan(a)kernel.org> net: mctp: fix device leak on probe failure Namjae Jeon <linkinjeon(a)kernel.org> ksmbd: fix use-after-free by using call_rcu() for oplock_info Marios Makassikis <mmakassikis(a)freebox.fr> smb: server: fix use-after-free in smb2_open() Namjae Jeon <linkinjeon(a)kernel.org> ksmbd: fix use-after-free in smb_lazy_parent_lease_break_close() Hao Li <hao.li(a)linux.dev> memcg: fix slab accounting in refill_obj_stock() trylock path Vlastimil Babka <vbabka(a)suse.cz> slab: distinguish lock and trylock for sheaf_flush_main() Vasily Gorbik <gor(a)linux.ibm.com> s390/xor: Fix xor_xc_5() inline assembly Dillon Varone <Dillon.Varone(a)amd.com> drm/amd/display: Fallback to boot snapshot for dispclk Heiko Carstens <hca(a)linux.ibm.com> s390/xor: Fix xor_xc_2() inline assembly constraints Maximilian Pezzullo <maximilianpezzullo(a)gmail.com> ata: libata-core: Disable LPM on ST1000DM010-2EP102 Heiko Carstens <hca(a)linux.ibm.com> s390/stackleak: Fix __stackleak_poison() inline assembly constraint Ashish Kalra <ashish.kalra(a)amd.com> crypto: ccp - allow callers to use HV-Fixed page API when SEV is disabled Maíra Canal <mcanal(a)igalia.com> pmdomain: bcm: bcm2835-power: Fix broken reset status read Franz Schnyder <franz.schnyder(a)toradex.com> regulator: pf9453: Respect IRQ trigger settings from firmware Pavel Begunkov <asml.silence(a)gmail.com> io_uring/net: reject SEND_VECTORIZED when unsupported Helge Deller <deller(a)gmx.de> parisc: Check kernel mapping earlier at bootup Piotr Jaroszynski <pjaroszynski(a)nvidia.com> arm64: contpte: fix set_access_flags() no-op check for SMMU/ATS faults Helge Deller <deller(a)gmx.de> parisc: Fix initial page table creation for boot Pavel Begunkov <asml.silence(a)gmail.com> io_uring/zcrx: use READ_ONCE with user shared RQEs Sanman Pradhan <psanman(a)juniper.net> hwmon: (pmbus/q54sj108a2) fix stack overflow in debugfs read Catalin Marinas <catalin.marinas(a)arm.com> arm64: mm: Add PTE_DIRTY back to PAGE_KERNEL* to fix kexec/hibernation Dave Airlie <airlied(a)redhat.com> nouveau/dpcd: return EBUSY for aux xfer if the device is asleep Helge Deller <deller(a)gmx.de> parisc: Increase initial mapping to 64 MB with KALLSYMS Shawn Lin <shawn.lin(a)rock-chips.com> pmdomain: rockchip: Fix PD_VCODEC for RK3588 Matt Roper <matthew.d.roper(a)intel.com> drm/xe/xe2_hpg: Correct implementation of Wa_16025250150 Sven Eckelmann <sven(a)narfation.org> batman-adv: Avoid double-rtnl_lock ELP metric worker Eric Biggers <ebiggers(a)kernel.org> net/tcp-ao: Fix MAC comparison to be constant-time Huiwen He <hehuiwen(a)kylinos.cn> tracing: Fix syscall events activation by ensuring refcount hits zero Jakub Staniszewski <jakub.staniszewski(a)linux.intel.com> ice: fix retry for AQ command 0x06EE Long Li <longli(a)microsoft.com> net: mana: Ring doorbell at 4 CQ wraparounds Ariel Silver <arielsilver77(a)gmail.com> media: dvb-net: fix OOB access in ULE extension header tables Christian Brauner <brauner(a)kernel.org> selftests: fix mntns iteration selftests Andy Shevchenko <andriy.shevchenko(a)linux.intel.com> pinctrl: cy8c95x0: Don't miss reading the last bank registers Luka Gejak <luka.gejak(a)linux.dev> staging: rtl8723bs: fix potential out-of-bounds read in rtw_restruct_wmm_ie Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> staging: rtl8723bs: properly validate the data in rtw_get_ie_ex() Artem Lytkin <iprintercanon(a)gmail.com> staging: sm750fb: add missing pci_release_region on error and removal Harry Yoo <harry.yoo(a)oracle.com> mm/slab: fix an incorrect check in obj_exts_alloc_size() Raul Pazemecxas De Andrade <raul_pazemecxas(a)hotmail.com> mm/damon/core: clear walk_control on inactive context in damos_walk() Jedrzej Jagielski <jedrzej.jagielski(a)intel.com> ixgbevf: fix link setup issue Eric Biggers <ebiggers(a)kernel.org> kunit: irq: Ensure timer doesn't fire too frequently Jakub Staniszewski <jakub.staniszewski(a)linux.intel.com> ice: reintroduce retry mechanism for indirect AQ Darrick J. Wong <djwong(a)kernel.org> iomap: reject delalloc mappings during writeback Mark Harmstone <mark(a)harmstone.com> btrfs: fix chunk map leak in btrfs_map_block() after btrfs_chunk_map_num_copies() Marc Zyngier <maz(a)kernel.org> irqchip/gic-v3-its: Limit number of per-device MSIs to the range the ITS supports Andy Shevchenko <andriy.shevchenko(a)linux.intel.com> device property: Allow secondary lookup in fwnode_get_next_child_node() Kuniyuki Iwashima <kuniyu(a)google.com> nfsd: Fix cred ref leak in nfsd_nl_listener_set_doit(). Catalin Marinas <catalin.marinas(a)arm.com> arm64: gcs: Honour mprotect(PROT_NONE) on shadow stack mappings Jiri Olsa <jolsa(a)kernel.org> bpf: Fix kprobe_multi cookies access in show_fdinfo callback Alexander Gordeev <agordeev(a)linux.ibm.com> s390/pfault: Fix virtual vs physical address confusion Shuicheng Lin <shuicheng.lin(a)intel.com> drm/xe/sync: Cleanup partially initialized sync on parse failure Corey Minyard <corey(a)minyard.net> ipmi:si: Fix check for a misbehaving BMC Bartosz Golaszewski <bartosz.golaszewski(a)oss.qualcomm.com> gpiolib: normalize the return value of gc->get() on behalf of buggy drivers Jouni Högander <jouni.hogander(a)intel.com> drm/i915/alpm: ALPM disable fixes Dave Airlie <airlied(a)redhat.com> nouveau/gsp: drop WARN_ON in ACPI probes Corey Minyard <corey(a)minyard.net> ipmi:si: Handle waiting messages when BMC failure detected Franz Schnyder <franz.schnyder(a)toradex.com> drm/bridge: ti-sn65dsi86: Enable HPD polling if IRQ is not used Osama Abdelkader <osama.abdelkader(a)gmail.com> drm/bridge: samsung-dsim: Fix memory leak in error path Corey Minyard <corey(a)minyard.net> ipmi:si: Use a long timeout when the BMC is misbehaving Corey Minyard <corey(a)minyard.net> ipmi:si: Don't block module unload if the BMC is messed up Mario Limonciello <mario.limonciello(a)amd.com> drm/amd: Disable MES LR compute W/A Sunil Khatri <sunil.khatri(a)amd.com> drm/amdgpu: add upper bound check on user inputs in wait ioctl Tvrtko Ursulin <tvrtko.ursulin(a)igalia.com> drm/amdgpu/userq: Fix reference leak in amdgpu_userq_wait_ioctl Sunil Khatri <sunil.khatri(a)amd.com> drm/amdgpu: add upper bound check on user inputs in signal ioctl David Arcari <darcari(a)redhat.com> cpufreq: intel_pstate: Fix NULL pointer dereference in update_cpu_qos_request() Christian Brauner <brauner(a)kernel.org> kthread: consolidate kthread exit paths to prevent use-after-free Axel Rasmussen <axelrasmussen(a)google.com> Revert "ptdesc: remove references to folios from __pagetable_ctor() and pagetable_dtor()" Xu Yang <xu.yang_2(a)nxp.com> Revert "tcpm: allow looking for role_sw device in the main node" Xingui Yang <yangxingui(a)huawei.com> scsi: hisi_sas: Fix NULL pointer exception during user_scan() Wang Shuaiwei <wangshuaiwei1(a)xiaomi.com> scsi: ufs: core: Fix SError in ufshcd_rtc_work() during UFS suspend Viktor Malik <vmalik(a)redhat.com> powerpc, perf: Check that current->mm is alive before getting user callchain Adrian Ng Ho Yin <adrianhoyin.ng(a)altera.com> i3c: dw-i3c-master: Set SIR_REJECT in DAT on device attach and reattach Steven Rostedt <rostedt(a)goodmis.org> time/jiffies: Mark jiffies_64_to_clock_t() notrace Geoffrey D. Bennett <g(a)b4.vu> ALSA: usb-audio: Improve Focusrite sample rate filtering Max Kellermann <max.kellermann(a)ionos.com> ceph: fix memory leaks in ceph_mdsc_build_path() Hristo Venev <hristo(a)venev.name> ceph: do not skip the first folio of the next object in writeback Max Kellermann <max.kellermann(a)ionos.com> ceph: fix i_nlink underrun during async unlink Ilya Dryomov <idryomov(a)gmail.com> libceph: admit message frames only in CEPH_CON_S_OPEN state Raphael Zimmer <raphael.zimmer(a)tu-ilmenau.de> libceph: Use u32 for non-negative values in ceph_monmap_decode() Ilya Dryomov <idryomov(a)gmail.com> libceph: prevent potential out-of-bounds reads in process_message_header() Ilya Dryomov <idryomov(a)gmail.com> libceph: reject preamble if control segment is empty Raphael Zimmer <raphael.zimmer(a)tu-ilmenau.de> libceph: Fix potential out-of-bounds access in ceph_handle_auth_reply() Max Kellermann <max.kellermann(a)ionos.com> ceph: add a bunch of missing ceph_path_info initializers Masami Hiramatsu (Google) <mhiramat(a)kernel.org> kprobes: avoid crash when rmmod/insmod after ftrace killed Mehul Rao <mehulrao(a)gmail.com> tipc: fix divide-by-zero in tipc_sk_filter_connect() Ravi Hothi <ravi.hothi(a)oss.qualcomm.com> ASoC: qcom: qdsp6: Fix q6apm remove ordering during ADSP stop and start Penghe Geng <pgeng(a)nvidia.com> mmc: core: Avoid bitfield RMW for claim/retune flags Alexander Potapenko <glider(a)google.com> mm/kfence: disable KFENCE upon KASAN HW tags enablement Felix Gu <ustc.gu(a)gmail.com> mmc: mmci: Fix device_node reference leak in of_get_dml_pipe_index() Alexander Potapenko <glider(a)google.com> mm/kfence: fix KASAN hardware tag faults during late enablement Kalesh Singh <kaleshsingh(a)google.com> mm/tracing: rss_stat: ensure curr is false from kthread context Kuen-Han Tsai <khtsai(a)google.com> usb: gadget: f_ncm: Fix net_device lifecycle with device_move Kuen-Han Tsai <khtsai(a)google.com> Revert "usb: gadget: u_ether: add gether_opts for config caching" Kuen-Han Tsai <khtsai(a)google.com> Revert "usb: gadget: f_ncm: align net_device lifecycle with bind/unbind" Kuen-Han Tsai <khtsai(a)google.com> Revert "usb: gadget: u_ether: Add auto-cleanup helper for freeing net_device" Kuen-Han Tsai <khtsai(a)google.com> Revert "usb: legacy: ncm: Fix NPE in gncm_bind" Kuen-Han Tsai <khtsai(a)google.com> Revert "usb: gadget: f_ncm: Fix atomic context locking issue" Kuen-Han Tsai <khtsai(a)google.com> usb: legacy: ncm: Fix NPE in gncm_bind Kuen-Han Tsai <khtsai(a)google.com> usb: gadget: f_ncm: Fix atomic context locking issue Jiasheng Jiang <jiashengjiangcool(a)gmail.com> usb: gadget: f_tcm: Fix NULL pointer dereferences in nexus handling Ziyi Guo <n7l8m4(a)u.northwestern.edu> usb: image: mdc800: kill download URB on timeout Junzhong Pan <panjunzhong(a)linux.spacemit.com> usb: gadget: uvc: fix interval_duration calculation Oliver Neukum <oneukum(a)suse.com> usb: mdc800: handle signal and read racing John Keeping <jkeeping(a)inmusicbrands.com> usb: gadget: f_hid: fix SuperSpeed descriptors Fan Wu <fanwu01(a)zju.edu.cn> usb: renesas_usbhs: fix use-after-free in ISR during device removal Oliver Neukum <oneukum(a)suse.com> usb: class: cdc-wdm: fix reordering issue in read code path Alan Stern <stern(a)rowland.harvard.edu> USB: core: Limit the length of unkillable synchronous timeouts Alan Stern <stern(a)rowland.harvard.edu> USB: usbtmc: Use usb_bulk_msg_killable() with user-specified timeouts Alan Stern <stern(a)rowland.harvard.edu> USB: usbcore: Introduce usb_bulk_msg_killable() RD Babiera <rdbabiera(a)google.com> usb: typec: altmode/displayport: set displayport signaling rate in configure message Xu Yang <xu.yang_2(a)nxp.com> usb: roles: get usb role switch from parent only for usb-b-connector Marc Zyngier <maz(a)kernel.org> usb: cdc-acm: Restore CAP_BRK functionnality to CH343 Gabor Juhos <j4g8y7(a)gmail.com> usb: core: don't power off roothub PHYs if phy_set_mode() fails Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> usb: misc: uss720: properly clean up reference in uss720_probe() Heikki Krogerus <heikki.krogerus(a)linux.intel.com> usb: dwc3: pci: add support for the Intel Nova Lake -H Oliver Neukum <oneukum(a)suse.com> usb: yurex: fix race in probe Dayu Jiang <jiangdayu(a)xiaomi.com> usb: xhci: Prevent interrupt storm on host controller error (HCE) Zilin Guan <zilin(a)seu.edu.cn> usb: xhci: Fix memory leak in xhci_disable_slot() Vyacheslav Vahnenko <vahnenko2003(a)gmail.com> USB: ezcap401 needs USB_QUIRK_NO_BOS to function on 10gbs usb speed Christoffer Sandberg <cs(a)tuxedo.de> usb/core/quirks: Add Huawei ME906S-device to wakeup quirk A1RM4X <dev(a)a1rm4x.com> USB: add QUIRK_NO_BOS for video capture several devices Marc Zyngier <maz(a)kernel.org> KVM: arm64: pkvm: Fallback to level-3 mapping on host stage-2 fault Sean Christopherson <seanjc(a)google.com> KVM: SVM: Initialize AVIC VMCB fields if AVIC is enabled with in-kernel APIC Jim Mattson <jmattson(a)google.com> KVM: x86: Introduce KVM_X86_QUIRK_VMCS12_ALLOW_FREEZE_IN_SMM Marc Zyngier <maz(a)kernel.org> KVM: arm64: Fix protected mode handling of pages larger than 4kB Zhang Heng <zhangheng(a)kylinos.cn> ASoC: amd: yc: Add DMI quirk for ASUS EXPERTBOOK PM1503CDA Pedro Falcato <pfalcato(a)suse.de> ata: libata-core: Add BRIDGE_OK quirk for QEMU drives Alexandre Courbot <acourbot(a)nvidia.com> rust: str: make NullTerminatedFormatter public Miguel Ojeda <ojeda(a)kernel.org> rust: kbuild: allow `unused_features` Alice Ryhl <aliceryhl(a)google.com> rust_binder: call set_notification_done() without proc lock Alice Ryhl <aliceryhl(a)google.com> rust_binder: avoid reading the written value in offsets array Alice Ryhl <aliceryhl(a)google.com> rust_binder: check ownership before using vma Carlos Llamas <cmllamas(a)google.com> rust_binder: fix oneway spam detection Oleksij Rempel <o.rempel(a)pengutronix.de> net: usb: lan78xx: skip LTM configuration for LAN7850 Oleksij Rempel <o.rempel(a)pengutronix.de> net: usb: lan78xx: fix WARN in __netif_napi_del_locked on disconnect Oleksij Rempel <o.rempel(a)pengutronix.de> net: usb: lan78xx: fix TX byte statistics for small packets Oleksij Rempel <o.rempel(a)pengutronix.de> net: usb: lan78xx: fix silent drop of packets with checksum errors Marc Kleine-Budde <mkl(a)pengutronix.de> can: gs_usb: gs_can_open(): always configure bitrates before starting device Takashi Iwai <tiwai(a)suse.de> ALSA: usb-audio: Check endpoint numbers at parsing Scarlett2 mixer interfaces Mehul Rao <mehulrao(a)gmail.com> ALSA: pcm: fix use-after-free on linked stream runtime in snd_pcm_drain() Cheng-Yang Chou <yphbchou0911(a)gmail.com> sched_ext: Remove redundant css_put() in scx_cgroup_init() Qingye Zhao <zhaoqingye(a)honor.com> cgroup: fix race between task migration and iteration Perry Yuan <perry.yuan(a)amd.com> drm/amdgpu: ensure no_hw_access is visible before MMIO Seungjin Bae <eeodqql09(a)gmail.com> usb: gadget: f_mass_storage: Fix potential integer overflow in check_command_size_in_blocks() Andreas Kemnade <andreas(a)kemnade.info> iio: imu: inv-mpu9150: fix irq ack preventing irq storms Eric Dumazet <edumazet(a)google.com> net: prevent NULL deref in ip[6]tunnel_xmit() Alok Tiwari <alok.a.tiwari(a)oracle.com> octeontx2-af: devlink: fix NIX RAS reporter to use RAS interrupt status Alok Tiwari <alok.a.tiwari(a)oracle.com> octeontx2-af: devlink: fix NIX RAS reporter recovery condition Chintan Vankar <c-vankar(a)ti.com> net: ethernet: ti: am65-cpsw-nuss: Fix rx_filter value for PTP support Vadim Fedorenko <vadim.fedorenko(a)linux.dev> net: ti: am65-cpsw: move hw timestamping to ndo callback Shiraz Saleem <shirazsaleem(a)microsoft.com> net/mana: Null service_wq on setup error to prevent double destroy Sabrina Dubroca <sd(a)queasysnail.net> neighbour: restore protocol != 0 check in pneigh update Marek Behún <kabel(a)kernel.org> net: dsa: realtek: Fix LED group port bit for non-zero LED group Ricardo B. Marlière <rbm(a)suse.com> net: bonding: Fix nd_tbl NULL dereference when IPv6 is disabled Chuck Lever <chuck.lever(a)oracle.com> perf synthetic-events: Fix stale build ID in module MMAP2 records Philip Yang <Philip.Yang(a)amd.com> drm/amdkfd: Unreserve bo if queue update failed Casey Connolly <casey.connolly(a)linaro.org> ASoC: detect empty DMI strings Chen Ni <nichen(a)iscas.ac.cn> ASoC: amd: acp3x-rt5682-max9836: Add missing error check for clock acquisition Ben Dooks <ben.dooks(a)codethink.co.uk> ACPI: OSL: fix __iomem type on return from acpi_os_map_generic_address() Nicolai Buchwitz <nb(a)tipi-net.de> net: bcmgenet: fix broken EEE by converting to phylib-managed state Jakub Kicinski <kuba(a)kernel.org> page_pool: store detach_time as ktime_t to avoid false-negatives Matt Vollrath <tactii(a)gmail.com> e1000/e1000e: Fix leak in DMA error cleanup Alok Tiwari <alok.a.tiwari(a)oracle.com> i40e: fix src IP mask checks and memcpy argument names in cloud filter Petr Oros <poros(a)redhat.com> iavf: fix incorrect reset handling in callbacks Petr Oros <poros(a)redhat.com> iavf: fix PTP use-after-free during reset Nikolay Aleksandrov <razor(a)blackwall.org> drivers: net: ice: fix devlink parameters get without irdma Sungwoo Kim <iam(a)sung-woo.kim> nvme-pci: Fix race bug in nvme_poll_irqdisable() Sungwoo Kim <iam(a)sung-woo.kim> nvme-pci: Fix slab-out-of-bounds in nvme_dbbuf_set Rafael J. Wysocki <rafael.j.wysocki(a)intel.com> sched: idle: Make skipping governor callbacks more consistent Chen Ni <nichen(a)iscas.ac.cn> perf ftrace: Fix hashmap__new() error checking Peng Fan <peng.fan(a)nxp.com> regulator: pca9450: Correct probed name for PCA9452 Martijn de Gouw <martijn.de.gouw(a)prodrive-technologies.com> regulator: pca9450: Add support for setting debounce settings Peng Fan <peng.fan(a)nxp.com> regulator: pca9450: Correct interrupt type Chen Ni <nichen(a)iscas.ac.cn> perf annotate: Fix hashmap__new() error checking Yuan Tan <tanyuan98(a)outlook.com> netfilter: xt_IDLETIMER: reject rev0 reuse of ALARM timer labels Hyunwoo Kim <imv4bel(a)gmail.com> netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() Hyunwoo Kim <imv4bel(a)gmail.com> netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path David Dull <monderasdor(a)gmail.com> netfilter: x_tables: guard option walkers against 1-byte tail reads Jenny Guanni Qu <qguanni(a)gmail.com> netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop() Florian Westphal <fw(a)strlen.de> netfilter: nf_tables: always walk all pending catchall elements Phil Sutter <phil(a)nwl.cc> netfilter: nf_tables: Fix for duplicate device in netdev hooks Weiming Shi <bestswngs(a)gmail.com> net: add xmit recursion limit to tunnel xmit functions Raju Rangoju <Raju.Rangoju(a)amd.com> amd-xgbe: prevent CRC errors during RX adaptation with AN disabled Raju Rangoju <Raju.Rangoju(a)amd.com> amd-xgbe: fix link status handling in xgbe_rx_adaptation Chengfeng Ye <dg573847474(a)gmail.com> mctp: route: hold key->lock in mctp_flow_prepare_output() Jiayuan Chen <jiayuan.chen(a)shopee.com> bonding: fix type confusion in bond_setup_by_slave() Hangbin Liu <liuhangbin(a)gmail.com> bonding: use common function to compute the features Wenyuan Li <2063309626(a)qq.com> can: hi311x: hi3110_open(): add check for hi3110_power_enable() return value Haiyue Wang <haiyuewa(a)163.com> mctp: i2c: fix skb memory leak in receive path Pavan Chebbi <pavan.chebbi(a)broadcom.com> bnxt_en: Fix RSS table size check when changing ethtool channels Shuangpeng Bai <shuangpeng.kernel(a)gmail.com> serial: caif: hold tty->link reference in ldisc_open and ser_release Álvaro Fernández Rojas <noltari(a)gmail.com> net: sfp: improve Huawei MA5671a fixup Sen Wang <sen(a)ti.com> ASoC: simple-card-utils: fix graph_util_is_ports0() for DT overlays matteo.cotifava <cotifavamatteo(a)gmail.com> ASoC: soc-core: flush delayed work before removing DAIs and widgets matteo.cotifava <cotifavamatteo(a)gmail.com> ASoC: soc-core: drop delayed_work_pending() check before flush Felix Gu <ustc.gu(a)gmail.com> spi: rockchip-sfc: Fix double-free in remove() callback Felix Gu <ustc.gu(a)gmail.com> spi: amlogic: spifc-a4: Fix DMA mapping error handling David Lechner <dlechner(a)baylibre.com> drm/sitronix/st7586: fix bad pixel data due to byte swap Vivian Wang <wangruikang(a)iscas.ac.cn> net: spacemit: Fix error handling in emac_tx_mem_map() Vivian Wang <wangruikang(a)iscas.ac.cn> net: spacemit: Fix error handling in emac_alloc_rx_desc_buffers() Miaoqian Lin <linmq006(a)gmail.com> rxrpc, afs: Fix missing error pointer check after rxrpc_kernel_lookup_peer() Weiming Shi <bestswngs(a)gmail.com> net/sched: teql: fix NULL pointer dereference in iptunnel_xmit on TEQL slave xmit Dragos Tatulea <dtatulea(a)nvidia.com> net/mlx5e: RX, Fix XDP multi-buf frag counting for legacy RQ Dragos Tatulea <dtatulea(a)nvidia.com> net/mlx5e: RX, Fix XDP multi-buf frag counting for striding RQ Gal Pressman <gal(a)nvidia.com> net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery Carolina Jubran <cjubran(a)nvidia.com> net/mlx5: Fix peer miss rules host disabled checks Patrisious Haddad <phaddad(a)nvidia.com> net/mlx5: Fix crash when moving to switchdev mode Cosmin Ratiu <cratiu(a)nvidia.com> net/mlx5: Fix deadlock between devlink lock and esw->wq Hangbin Liu <liuhangbin(a)gmail.com> bonding: handle BOND_LINK_FAIL, BOND_LINK_BACK as valid link states Hangbin Liu <liuhangbin(a)gmail.com> bonding: do not set usable_slaves for broadcast mode Yang Wang <kevinyang.wang(a)amd.com> drm/amd/pm: add missing od setting PP_OD_FEATURE_ZERO_FAN_BIT for smu v14 Yang Wang <kevinyang.wang(a)amd.com> drm/amd/pm: add missing od setting PP_OD_FEATURE_ZERO_FAN_BIT for smu v13 Pengyu Luo <mitltlatltl(a)gmail.com> drm/msm/dsi: fix pclk rate calculation for bonded dsi Mieczyslaw Nalewaj <namiltd(a)yahoo.com> net: dsa: realtek: rtl8365mb: remove ifOutDiscards from rx_packets Krzysztof Kozlowski <krzysztof.kozlowski(a)oss.qualcomm.com> dt-bindings: display/msm: qcom,sm8750-mdss: Fix model typo Peter Collingbourne <pcc(a)google.com> perf disasm: Fix off-by-one bug in outside check Breno Leitao <leitao(a)debian.org> workqueue: Use POOL_BH instead of WQ_BH when checking pool flags Sun YangKai <sunk67188(a)gmail.com> btrfs: hold space_info->lock when clearing periodic reclaim ready Eric Badger <ebadger(a)purestorage.com> xprtrdma: Decrement re_receiving on the early exit paths Pengyu Luo <mitltlatltl(a)gmail.com> drm/msm/dsi: fix hdisplay calculation when programming dsi registers Roberto Bergantinos Corpas <rbergant(a)redhat.com> nfs: return EISDIR on nfs3_proc_create if d_alias is a dir Guenter Roeck <linux(a)roeck-us.net> smb/server: Fix another refcount leak in smb2_open() J. Neuschäfer <j.ne(a)posteo.net> powerpc: 83xx: km83xx: Fix keymile vendor prefix Tzung-Bi Shih <tzungbi(a)kernel.org> remoteproc: mediatek: Unprepare SCP clock during system suspend Bjorn Andersson <bjorn.andersson(a)oss.qualcomm.com> remoteproc: sysmon: Correct subsys_name_len type in QMI request Sourabh Jain <sourabhjain(a)linux.ibm.com> powerpc/crash: adjust the elfcorehdr size Sourabh Jain <sourabhjain(a)linux.ibm.com> powerpc/kexec/core: use big-endian types for crash variables Ben Collins <bcollins(a)kernel.org> kexec: Include kernel-end even without crashkernel Christophe Leroy (CS GROUP) <chleroy(a)kernel.org> powerpc/uaccess: Fix inline assembly for clang build on PPC32 Takashi Iwai <tiwai(a)suse.de> ALSA: usb-audio: Check max frame size for implicit feedback mode, too sguttula <suresh.guttula(a)amd.com> drm/amdgpu/vcn5: Add SMU dpm interface type Takashi Iwai <tiwai(a)suse.de> ALSA: usb-audio: Avoid implicit feedback mode on DIYINHK USB Audio 2.0 wangshuaiwei <wangshuaiwei1(a)xiaomi.com> scsi: ufs: core: Fix shift out of bounds when MAXQ=32 Peter Wang <peter.wang(a)mediatek.com> scsi: ufs: core: Fix possible NULL pointer dereference in ufshcd_add_command_trace() Charles Keepax <ckeepax(a)opensource.cirrus.com> ASoC: cs42l43: Report insert for exotic peripherals Azamat Almazbek uulu <almazbek1608(a)gmail.com> ASoC: amd: yc: Add ASUS EXPERTBOOK BM1503CDA to quirk table Tomas Henzl <thenzl(a)redhat.com> scsi: ses: Fix devices attaching to different hosts Sofia Schneider <sofia(a)schn.dev> ACPI: OSI: Add DMI quirk for Acer Aspire One D255 Ramanathan Choodamani <quic_rchoodam(a)quicinc.com> wifi: mac80211: set default WMM parameters on all links Al Viro <viro(a)zeniv.linux.org.uk> unshare: fix unshare_fs() handling Sean Rhodes <sean(a)starlabs.systems> ALSA: hda/realtek: Fix speaker pop on Star Labs StarFighter Ranjan Kumar <ranjan.kumar(a)broadcom.com> scsi: mpi3mr: Add NULL checks when resetting request and reply queues Edward Adam Davis <eadavis(a)qq.com> fs: init flags_valid before calling vfs_fileattr_get Won Jung <wone.jung(a)samsung.com> scsi: ufs: core: Reset urgent_bkops_lvl to allow runtime PM power mode Piotr Mazek <pmazek(a)outlook.com> ACPI: PM: Save NVS memory on Lenovo G70-35 Jan Kiszka <jan.kiszka(a)siemens.com> scsi: storvsc: Fix scheduling while atomic on PREEMPT_RT ------------- Diffstat: .../bindings/display/msm/qcom,sm8750-mdss.yaml | 2 +- Documentation/virt/kvm/api.rst | 8 + Makefile | 13 +- arch/arm64/include/asm/pgtable-prot.h | 10 +- arch/arm64/kvm/hyp/nvhe/mem_protect.c | 2 +- arch/arm64/kvm/mmu.c | 12 +- arch/arm64/kvm/vgic/vgic-init.c | 34 ++-- arch/arm64/mm/contpte.c | 53 ++++++- arch/arm64/mm/mmap.c | 6 +- arch/parisc/include/asm/pgtable.h | 2 +- arch/parisc/kernel/head.S | 7 +- arch/parisc/kernel/setup.c | 20 ++- arch/powerpc/include/asm/uaccess.h | 2 +- arch/powerpc/kexec/core.c | 40 ++--- arch/powerpc/kexec/file_load_64.c | 14 +- arch/powerpc/net/bpf_jit_comp.c | 30 ++-- arch/powerpc/net/bpf_jit_comp64.c | 101 +++++++++++- arch/powerpc/perf/callchain.c | 5 + arch/powerpc/perf/callchain_32.c | 1 - arch/powerpc/perf/callchain_64.c | 1 - arch/powerpc/platforms/83xx/km83xx.c | 4 +- arch/powerpc/platforms/pseries/msi.c | 2 +- arch/s390/include/asm/processor.h | 2 +- arch/s390/lib/xor.c | 5 +- arch/s390/mm/pfault.c | 4 +- arch/x86/include/asm/kvm_host.h | 3 +- arch/x86/include/uapi/asm/kvm.h | 1 + arch/x86/kernel/apic/apic.c | 6 + arch/x86/kvm/svm/avic.c | 30 +++- arch/x86/kvm/svm/svm.c | 9 +- arch/x86/kvm/vmx/nested.c | 22 ++- drivers/acpi/osi.c | 13 ++ drivers/acpi/osl.c | 2 +- drivers/acpi/sleep.c | 8 + drivers/android/binder/page_range.rs | 83 +++++++--- drivers/android/binder/process.rs | 3 +- drivers/android/binder/range_alloc/array.rs | 35 +++- drivers/android/binder/range_alloc/mod.rs | 4 +- drivers/android/binder/range_alloc/tree.rs | 18 +-- drivers/android/binder/thread.rs | 17 +- drivers/ata/libata-core.c | 2 + drivers/base/property.c | 27 ++-- drivers/char/ipmi/ipmi_si_intf.c | 37 +++-- drivers/cpufreq/intel_pstate.c | 4 +- drivers/cpuidle/cpuidle.c | 10 -- drivers/crypto/ccp/sev-dev.c | 10 +- drivers/cxl/Kconfig | 1 + drivers/gpio/gpiolib.c | 8 +- drivers/gpu/drm/amd/amdgpu/amdgpu_amdkfd_gpuvm.c | 6 +- drivers/gpu/drm/amd/amdgpu/amdgpu_device.c | 17 +- drivers/gpu/drm/amd/amdgpu/amdgpu_kms.c | 2 +- drivers/gpu/drm/amd/amdgpu/amdgpu_userq_fence.c | 14 ++ drivers/gpu/drm/amd/amdgpu/mes_v11_0.c | 5 - drivers/gpu/drm/amd/amdgpu/mes_v12_0.c | 5 - drivers/gpu/drm/amd/amdgpu/vcn_v5_0_0.c | 4 + .../gpu/drm/amd/amdkfd/kfd_process_queue_manager.c | 1 + .../drm/amd/display/dc/hwss/dcn401/dcn401_hwseq.c | 6 +- .../gpu/drm/amd/pm/swsmu/smu13/smu_v13_0_0_ppt.c | 11 +- .../gpu/drm/amd/pm/swsmu/smu13/smu_v13_0_7_ppt.c | 6 +- .../gpu/drm/amd/pm/swsmu/smu14/smu_v14_0_2_ppt.c | 3 +- drivers/gpu/drm/bridge/samsung-dsim.c | 25 +-- drivers/gpu/drm/bridge/ti-sn65dsi83.c | 13 +- drivers/gpu/drm/bridge/ti-sn65dsi86.c | 118 +++++++++++++- drivers/gpu/drm/gud/gud_drv.c | 54 ++++--- drivers/gpu/drm/gud/gud_internal.h | 4 + drivers/gpu/drm/gud/gud_pipe.c | 54 ++++--- drivers/gpu/drm/i915/display/intel_alpm.c | 7 +- drivers/gpu/drm/i915/display/intel_psr.c | 50 ++++-- drivers/gpu/drm/i915/gem/i915_gem_shmem.c | 12 +- drivers/gpu/drm/msm/adreno/a2xx_gpummu.c | 2 +- .../drm/msm/disp/dpu1/catalog/dpu_8_4_sa8775p.h | 4 +- drivers/gpu/drm/msm/dsi/dsi_host.c | 43 +++-- drivers/gpu/drm/nouveau/nouveau_connector.c | 3 + .../gpu/drm/nouveau/nvkm/subdev/gsp/rm/r535/gsp.c | 12 +- drivers/gpu/drm/sitronix/st7586.c | 15 +- drivers/gpu/drm/xe/xe_sync.c | 24 ++- drivers/gpu/drm/xe/xe_wa.c | 13 +- drivers/hwmon/pmbus/q54sj108a2.c | 19 +-- drivers/i3c/master/dw-i3c-master.c | 4 +- drivers/i3c/master/mipi-i3c-hci/cmd.h | 1 + drivers/i3c/master/mipi-i3c-hci/cmd_v1.c | 2 +- drivers/i3c/master/mipi-i3c-hci/cmd_v2.c | 2 +- drivers/i3c/master/mipi-i3c-hci/core.c | 9 +- drivers/i3c/master/mipi-i3c-hci/dma.c | 94 +++++++---- drivers/i3c/master/mipi-i3c-hci/hci.h | 2 + drivers/i3c/master/mipi-i3c-hci/pio.c | 16 +- drivers/iio/chemical/bme680_core.c | 2 +- drivers/iio/chemical/sps30_i2c.c | 2 +- drivers/iio/chemical/sps30_serial.c | 2 +- drivers/iio/dac/ds4424.c | 2 +- drivers/iio/frequency/adf4377.c | 2 +- drivers/iio/gyro/mpu3050-core.c | 18 ++- drivers/iio/gyro/mpu3050-i2c.c | 3 +- drivers/iio/imu/adis.c | 2 +- drivers/iio/imu/inv_icm42600/inv_icm42600_accel.c | 2 + drivers/iio/imu/inv_icm42600/inv_icm42600_buffer.c | 4 + drivers/iio/imu/inv_icm42600/inv_icm42600_gyro.c | 2 + drivers/iio/imu/inv_mpu6050/inv_mpu_core.c | 8 + drivers/iio/imu/inv_mpu6050/inv_mpu_iio.h | 2 + drivers/iio/imu/inv_mpu6050/inv_mpu_trigger.c | 5 +- drivers/iio/industrialio-buffer.c | 6 +- drivers/iio/light/bh1780.c | 2 +- drivers/iio/magnetometer/tlv493d.c | 2 +- drivers/iio/potentiometer/mcp4131.c | 2 +- drivers/iio/proximity/hx9023s.c | 6 +- drivers/irqchip/irq-gic-v3-its.c | 4 + drivers/media/dvb-core/dvb_net.c | 3 + drivers/mmc/host/dw_mmc-rockchip.c | 44 +++++- drivers/mmc/host/mmci_qcom_dml.c | 1 + drivers/net/bonding/bond_main.c | 157 +++++++----------- drivers/net/caif/caif_serial.c | 3 + drivers/net/can/spi/hi311x.c | 5 +- drivers/net/can/usb/gs_usb.c | 22 ++- drivers/net/dsa/microchip/ksz_ptp.c | 11 +- drivers/net/dsa/realtek/rtl8365mb.c | 3 +- drivers/net/dsa/realtek/rtl8366rb-leds.c | 6 +- drivers/net/ethernet/amd/xgbe/xgbe-drv.c | 4 + drivers/net/ethernet/amd/xgbe/xgbe-phy-v2.c | 82 +++++++++- drivers/net/ethernet/amd/xgbe/xgbe.h | 4 + drivers/net/ethernet/arc/emac_main.c | 11 ++ drivers/net/ethernet/broadcom/bnxt/bnxt_ethtool.c | 4 +- drivers/net/ethernet/broadcom/genet/bcmgenet.c | 31 ++-- drivers/net/ethernet/broadcom/genet/bcmgenet.h | 5 +- drivers/net/ethernet/broadcom/genet/bcmmii.c | 10 +- drivers/net/ethernet/intel/e1000/e1000_main.c | 2 - drivers/net/ethernet/intel/e1000e/netdev.c | 2 - drivers/net/ethernet/intel/i40e/i40e_virtchnl_pf.c | 14 +- drivers/net/ethernet/intel/iavf/iavf.h | 3 +- drivers/net/ethernet/intel/iavf/iavf_ethtool.c | 19 +-- drivers/net/ethernet/intel/iavf/iavf_main.c | 81 ++++------ drivers/net/ethernet/intel/iavf/iavf_virtchnl.c | 1 - drivers/net/ethernet/intel/ice/devlink/devlink.c | 4 +- drivers/net/ethernet/intel/ice/ice_common.c | 13 +- drivers/net/ethernet/intel/ice/ice_ethtool.c | 35 ++-- drivers/net/ethernet/intel/ixgbevf/vf.c | 3 +- .../ethernet/marvell/octeontx2/af/rvu_devlink.c | 6 +- .../ethernet/mellanox/mlx5/core/en/reporter_tx.c | 1 - .../mellanox/mlx5/core/en_accel/ipsec_fs.c | 2 +- drivers/net/ethernet/mellanox/mlx5/core/en_rx.c | 23 ++- drivers/net/ethernet/mellanox/mlx5/core/eswitch.c | 7 +- drivers/net/ethernet/mellanox/mlx5/core/eswitch.h | 2 + .../ethernet/mellanox/mlx5/core/eswitch_offloads.c | 45 +++--- drivers/net/ethernet/microsoft/mana/gdma_main.c | 1 + drivers/net/ethernet/microsoft/mana/mana_en.c | 23 ++- drivers/net/ethernet/spacemit/k1_emac.c | 19 ++- drivers/net/ethernet/ti/am65-cpsw-nuss.c | 56 ++++--- drivers/net/ethernet/ti/am65-cpsw-nuss.h | 2 +- drivers/net/mctp/mctp-i2c.c | 1 + drivers/net/mctp/mctp-usb.c | 3 +- drivers/net/phy/sfp.c | 8 +- drivers/net/usb/lan78xx.c | 12 +- drivers/net/usb/lan78xx.h | 3 + drivers/net/usb/qmi_wwan.c | 4 +- drivers/net/usb/usbnet.c | 7 +- drivers/nvme/host/pci.c | 8 +- drivers/pinctrl/pinctrl-cy8c95x0.c | 4 +- drivers/pmdomain/bcm/bcm2835-power.c | 6 +- drivers/pmdomain/rockchip/pm-domains.c | 2 +- drivers/regulator/pca9450-regulator.c | 172 +++++++++++++++++--- drivers/regulator/pf9453-regulator.c | 2 +- drivers/remoteproc/mtk_scp.c | 39 +++++ drivers/remoteproc/qcom_sysmon.c | 2 +- drivers/s390/block/dasd_eckd.c | 16 ++ drivers/s390/crypto/zcrypt_ccamisc.c | 12 +- drivers/s390/crypto/zcrypt_cex4.c | 3 +- drivers/scsi/hisi_sas/hisi_sas_main.c | 2 +- drivers/scsi/hisi_sas/hisi_sas_v3_hw.c | 2 +- drivers/scsi/mpi3mr/mpi3mr_fw.c | 32 ++-- drivers/scsi/scsi_scan.c | 8 +- drivers/scsi/ses.c | 5 +- drivers/scsi/storvsc_drv.c | 5 +- drivers/spi/spi-amlogic-spifc-a4.c | 5 +- drivers/spi/spi-rockchip-sfc.c | 2 +- drivers/staging/rtl8723bs/core/rtw_ieee80211.c | 15 +- drivers/staging/rtl8723bs/core/rtw_mlme.c | 5 +- drivers/staging/sm750fb/sm750.c | 1 + drivers/staging/sm750fb/sm750_hw.c | 22 +-- drivers/ufs/core/ufshcd.c | 11 +- drivers/usb/class/cdc-acm.c | 5 + drivers/usb/class/cdc-acm.h | 1 + drivers/usb/class/cdc-wdm.c | 4 +- drivers/usb/class/usbtmc.c | 6 +- drivers/usb/core/message.c | 100 +++++++++--- drivers/usb/core/phy.c | 8 +- drivers/usb/core/quirks.c | 16 ++ drivers/usb/dwc3/dwc3-pci.c | 2 + drivers/usb/gadget/function/f_hid.c | 4 + drivers/usb/gadget/function/f_mass_storage.c | 12 +- drivers/usb/gadget/function/f_ncm.c | 144 +++++++++-------- drivers/usb/gadget/function/f_tcm.c | 14 ++ drivers/usb/gadget/function/u_ether.c | 67 +++----- drivers/usb/gadget/function/u_ether.h | 56 +++---- drivers/usb/gadget/function/u_ether_configfs.h | 176 --------------------- drivers/usb/gadget/function/u_ncm.h | 4 +- drivers/usb/gadget/function/uvc_video.c | 2 +- drivers/usb/host/xhci-ring.c | 1 + drivers/usb/host/xhci.c | 4 +- drivers/usb/image/mdc800.c | 6 +- drivers/usb/misc/uss720.c | 2 +- drivers/usb/misc/yurex.c | 2 +- drivers/usb/renesas_usbhs/common.c | 9 ++ drivers/usb/roles/class.c | 7 +- drivers/usb/typec/altmodes/displayport.c | 7 +- drivers/usb/typec/tcpm/tcpm.c | 2 +- fs/afs/addr_list.c | 8 +- fs/btrfs/extent_io.c | 1 + fs/btrfs/inode.c | 19 +++ fs/btrfs/ioctl.c | 24 ++- fs/btrfs/space-info.c | 5 +- fs/btrfs/transaction.c | 16 ++ fs/btrfs/uuid-tree.c | 38 +++++ fs/btrfs/uuid-tree.h | 2 + fs/btrfs/volumes.c | 6 +- fs/ceph/addr.c | 1 - fs/ceph/debugfs.c | 4 +- fs/ceph/dir.c | 17 +- fs/ceph/file.c | 4 +- fs/ceph/inode.c | 2 +- fs/ceph/mds_client.c | 3 + fs/file_attr.c | 2 +- fs/iomap/ioend.c | 13 +- fs/nfs/nfs3proc.c | 7 +- fs/nfsd/nfsctl.c | 2 +- fs/smb/client/cifsencrypt.c | 3 +- fs/smb/client/cifsglob.h | 11 ++ fs/smb/client/dir.c | 1 + fs/smb/client/file.c | 18 +-- fs/smb/client/fs_context.c | 2 +- fs/smb/client/smb2ops.c | 14 +- fs/smb/client/smb2pdu.c | 5 +- fs/smb/client/smb2transport.c | 4 +- fs/smb/server/Kconfig | 1 + fs/smb/server/auth.c | 4 +- fs/smb/server/oplock.c | 35 ++-- fs/smb/server/oplock.h | 5 +- fs/smb/server/smb2pdu.c | 13 +- fs/xfs/libxfs/xfs_defer.c | 2 +- fs/xfs/xfs_bmap_item.c | 2 +- fs/xfs/xfs_dquot.c | 8 +- fs/xfs/xfs_log.c | 2 + include/kunit/run-in-irq-context.h | 44 ++++-- include/linux/io_uring_types.h | 1 + include/linux/irqchip/arm-gic-v3.h | 1 + include/linux/kthread.h | 21 ++- include/linux/migrate.h | 8 + include/linux/mm.h | 17 +- include/linux/mmc/host.h | 9 +- include/linux/netdevice.h | 32 ++++ include/linux/regulator/pca9450.h | 32 ++++ include/linux/usb.h | 8 +- include/linux/usb/usbnet.h | 1 + include/net/ip6_tunnel.h | 14 ++ include/net/ip_tunnels.h | 7 + include/net/page_pool/types.h | 2 +- include/trace/events/kmem.h | 8 +- io_uring/eventfd.c | 10 +- io_uring/io_uring.c | 25 ++- io_uring/kbuf.c | 13 +- io_uring/net.c | 2 + io_uring/register.c | 11 ++ io_uring/zcrx.c | 5 +- kernel/bpf/verifier.c | 1 - kernel/cgroup/cgroup.c | 1 + kernel/exit.c | 6 + kernel/fork.c | 2 +- kernel/kprobes.c | 8 +- kernel/kthread.c | 41 +---- kernel/sched/ext.c | 6 +- kernel/sched/idle.c | 11 +- kernel/time/time.c | 2 +- kernel/trace/bpf_trace.c | 4 +- kernel/trace/trace.c | 6 +- kernel/trace/trace_events.c | 58 +++++-- kernel/workqueue.c | 2 +- lib/bootconfig.c | 6 +- lib/crypto/tests/Kconfig | 20 +-- mm/damon/core.c | 10 +- mm/filemap.c | 13 +- mm/kfence/core.c | 29 +++- mm/memcontrol.c | 2 +- mm/memory.c | 3 +- mm/page_alloc.c | 3 +- mm/slub.c | 54 +++++-- net/batman-adv/bat_v_elp.c | 10 +- net/batman-adv/hard-interface.c | 8 +- net/batman-adv/hard-interface.h | 1 + net/ceph/auth.c | 6 +- net/ceph/messenger_v2.c | 31 ++-- net/ceph/mon_client.c | 6 +- net/core/dev.h | 35 ---- net/core/neighbour.c | 3 +- net/core/page_pool_user.c | 4 +- net/ipv4/Kconfig | 1 + net/ipv4/ip_tunnel_core.c | 15 ++ net/ipv4/nexthop.c | 14 +- net/ipv4/tcp.c | 3 +- net/ipv4/tcp_ao.c | 3 +- net/ipv4/tcp_ipv4.c | 3 +- net/ipv6/tcp_ipv6.c | 3 +- net/mac80211/link.c | 2 + net/mctp/route.c | 13 +- net/ncsi/ncsi-aen.c | 3 +- net/ncsi/ncsi-rsp.c | 16 +- net/netfilter/nf_tables_api.c | 4 +- net/netfilter/nfnetlink_cthelper.c | 8 +- net/netfilter/nfnetlink_queue.c | 4 +- net/netfilter/nft_chain_filter.c | 2 +- net/netfilter/nft_set_pipapo.c | 3 +- net/netfilter/xt_IDLETIMER.c | 6 + net/netfilter/xt_dccp.c | 4 +- net/netfilter/xt_tcpudp.c | 6 +- net/rxrpc/af_rxrpc.c | 8 +- net/sched/sch_teql.c | 1 + net/shaper/shaper.c | 11 +- net/sunrpc/xprtrdma/verbs.c | 7 +- net/tipc/socket.c | 2 + rust/kernel/str.rs | 4 +- sound/core/pcm_native.c | 19 ++- sound/hda/codecs/realtek/alc269.c | 25 +++ sound/soc/amd/acp3x-rt5682-max9836.c | 9 +- sound/soc/amd/yc/acp6x-mach.c | 14 ++ sound/soc/codecs/cs42l43-jack.c | 1 + sound/soc/generic/simple-card-utils.c | 12 +- sound/soc/qcom/qdsp6/q6apm-dai.c | 1 + sound/soc/qcom/qdsp6/q6apm-lpass-dais.c | 1 + sound/soc/qcom/qdsp6/q6apm.c | 1 + sound/soc/soc-core.c | 11 +- sound/usb/endpoint.c | 1 + sound/usb/format.c | 70 +++++++- sound/usb/mixer_scarlett2.c | 2 + sound/usb/quirks.c | 2 + tools/objtool/Makefile | 8 +- tools/perf/builtin-ftrace.c | 9 +- tools/perf/util/annotate.c | 5 +- tools/perf/util/disasm.c | 2 +- tools/perf/util/synthetic-events.c | 5 + .../selftests/filesystems/nsfs/iterate_mntns.c | 25 +-- 337 files changed, 3074 insertions(+), 1605 deletions(-)

1 week, 3 days

Product Inquiry

by Trade Globaira

Dear Sir/Madam, We are interested in learning more about your products and potential supply options. Please share your latest catalog, price list, and terms for bulk orders. Looking forward to your reply. Best regards, Trade Globaira Cannon Bridge House, 25 Dowgate Hill, London EC4R 2YA, Vereinigtes Königreich Email: sales(a)tradeglobaira.com No: +447575820880

1 week, 4 days

Jump to page:

2026

2025

2024

2023

2022

2021

2020

2019

2018

2017

Lkft-triage