Lkft-triage

lkft-triage@lists.linaro.org

34052 discussions

by Greg Kroah-Hartman

This is the start of the stable review cycle for the 6.19.11 release. There are 342 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know. Responses should be made by Thu, 02 Apr 2026 16:16:56 +0000. Anything received after that time might be too late. The whole patch series can be found in one patch at: https://www.kernel.org/pub/linux/kernel/v6.x/stable-review/patch-6.19.11-rc… or in the git tree and branch at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-6.19.y and the diffstat can be found below. thanks, greg k-h ------------- Pseudo-Shortlog of commits: Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> Linux 6.19.11-rc1 Luiz Augusto von Dentz <luiz.von.dentz(a)intel.com> Bluetooth: L2CAP: Fix regressions caused by reusing ident Arnd Bergmann <arnd(a)arndb.de> bug: avoid format attribute warning for clang as well Ye Bin <yebin10(a)huawei.com> ext4: fix mballoc-test.c is not compiled when EXT4_KUNIT_TESTS=M Ye Bin <yebin10(a)huawei.com> ext4: introduce EXPORT_SYMBOL_FOR_EXT4_TEST() helper Hao-Yu Yang <naup96721(a)gmail.com> futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() Peter Zijlstra <peterz(a)infradead.org> futex: Require sys_futex_requeue() to have identical flags Biju Das <biju.das.jz(a)bp.renesas.com> irqchip/renesas-rzv2h: Fix error path in rzv2h_icu_probe_common() David Howells <dhowells(a)redhat.com> netfs: Fix the handling of stream->front by removing it GuoHan Zhao <zhaoguohan(a)kylinos.cn> xen/privcmd: unregister xenstore notifier on module exit Filipe Manana <fdmanana(a)suse.com> btrfs: fix lost error when running device stats on multiple devices fs Shin'ichiro Kawasaki <shinichiro.kawasaki(a)wdc.com> btrfs: fix leak of kobject name for sub-group space_info Mark Harmstone <mark(a)harmstone.com> btrfs: fix super block offset in error message in btrfs_validate_super() David Howells <dhowells(a)redhat.com> netfs: Fix read abandonment during retry Christian Brauner <brauner(a)kernel.org> selftests/mount_setattr: increase tmpfs size for idmapped mount tests Tomi Valkeinen <tomi.valkeinen(a)ideasonboard.com> dmaengine: xilinx_dma: Fix reset related timeout with two-channel AXIDMA Marek Vasut <marex(a)nabladev.com> dmaengine: xilinx: xilinx_dma: Fix unmasked residue subtraction Marek Vasut <marex(a)nabladev.com> dmaengine: xilinx: xilinx_dma: Fix residue calculation for cyclic DMA Marek Vasut <marex(a)nabladev.com> dmaengine: xilinx: xilinx_dma: Fix dma_device directions Tuo Li <islituo(a)gmail.com> dmaengine: idxd: fix possible wrong descriptor completion in llist_abort_desc() Deepanshu Kartikey <kartikey406(a)gmail.com> netfs: Fix NULL pointer dereference in netfs_unbuffered_write() on retry Deepanshu Kartikey <kartikey406(a)gmail.com> netfs: Fix kernel BUG in netfs_limit_iter() for ITER_KVEC iterators Alexander Stein <alexander.stein(a)ew.tq-group.com> dmaengine: xilinx: xdma: Fix regmap init error handling LUO Haowen <luo-hw(a)foxmail.com> dmaengine: dw-edma: Fix multiple times setting of the CYCLE_STATE and CYCLE_BIT bits for HDMA. Felix Gu <ustc.gu(a)gmail.com> phy: ti: j721e-wiz: Fix device node reference leak in wiz_get_lane_phy_types() Vinicius Costa Gomes <vinicius.gomes(a)intel.com> dmaengine: idxd: Fix leaking event log memory Vinicius Costa Gomes <vinicius.gomes(a)intel.com> dmaengine: idxd: Fix freeing the allocated ida too late Vinicius Costa Gomes <vinicius.gomes(a)intel.com> dmaengine: idxd: Fix memory leak when a wq is reset Vinicius Costa Gomes <vinicius.gomes(a)intel.com> dmaengine: idxd: Fix not releasing workqueue on .release() Vinicius Costa Gomes <vinicius.gomes(a)intel.com> dmaengine: idxd: Fix possible invalid memory access after FLR Vinicius Costa Gomes <vinicius.gomes(a)intel.com> dmaengine: idxd: Fix crash when the event log is disabled Werner Kasselman <werner(a)verivus.com> ksmbd: fix use-after-free and NULL deref in smb_grant_oplock() Benno Lossin <lossin(a)kernel.org> rust: pin-init: internal: init: document load-bearing fact of field accessors SeongJae Park <sj(a)kernel.org> mm/damon/core: avoid use of half-online-committed context Hari Bathini <hbathini(a)linux.ibm.com> powerpc64/bpf: do not increment tailcall count when prog is NULL Markus Niebel <Markus.Niebel(a)ew.tq-group.com> arm64: dts: imx8mn-tqma8mqnl: fix LDO5 power off Theodore Ts'o <tytso(a)mit.edu> ext4: always drain queued discard work in ext4_mb_release() Baokun Li <libaokun(a)linux.alibaba.com> ext4: fix iloc.bh leak in ext4_fc_replay_inode() error paths Theodore Ts'o <tytso(a)mit.edu> ext4: handle wraparound when searching for blocks for indirect mapped blocks Zqiang <qiang.zhang(a)linux.dev> ext4: fix the might_sleep() warnings in kvfree() Jiayuan Chen <jiayuan.chen(a)shopee.com> ext4: fix use-after-free in update_super_work when racing with umount Helen Koike <koike(a)igalia.com> ext4: reject mount if bigalloc with s_first_data_block != 0 Ye Bin <yebin10(a)huawei.com> ext4: avoid allocate block from corrupted group in ext4_mb_find_by_goal() Edward Adam Davis <eadavis(a)qq.com> ext4: avoid infinite loops caused by residual data Tejas Bharambe <tejas.bharambe(a)outlook.com> ext4: validate p_idx bounds in ext4_ext_correct_indexes Ye Bin <yebin10(a)huawei.com> ext4: test if inode's all dirty pages are submitted to disk Li Chen <me(a)linux.beauty> ext4: publish jinode after initialization Yuto Ohnuki <ytohnuki(a)amazon.com> ext4: replace BUG_ON with proper error handling in ext4_read_inline_folio Jan Kara <jack(a)suse.cz> ext4: make recently_deleted() properly work with lazy itable initialization Jan Kara <jack(a)suse.cz> ext4: fix fsync(2) for nojournal mode Zhang Yi <yi.zhang(a)huawei.com> ext4: do not check fast symlink during orphan recovery Jan Kara <jack(a)suse.cz> ext4: fix stale xarray tags after writeback Deepanshu Kartikey <kartikey406(a)gmail.com> ext4: convert inline data to extents when truncate exceeds inline size Simon Weber <simon.weber.39(a)gmail.com> ext4: fix journal credit check when setting fscrypt context Darrick J. Wong <djwong(a)kernel.org> xfs: remove file_path tracepoint data Darrick J. Wong <djwong(a)kernel.org> xfs: don't irele after failing to iget in xfs_attri_recover_work Long Li <leo.lilong(a)huawei.com> xfs: fix ri_total validation in xlog_recover_attri_commit_pass2 hongao <hongao(a)uniontech.com> xfs: scrub: unlock dquot before early return in quota scrub Yuto Ohnuki <ytohnuki(a)amazon.com> xfs: avoid dereferencing log items after push callbacks Yuto Ohnuki <ytohnuki(a)amazon.com> xfs: save ailp before dropping the AIL lock in push callbacks Yuto Ohnuki <ytohnuki(a)amazon.com> xfs: stop reclaim before pushing AIL during unmount Max Boone <mboone(a)akamai.com> mm/pagewalk: fix race between concurrent split and refault Josh Law <objecting(a)objecting.org> mm/damon/sysfs: check contexts->nr in repeat_call_fn Josh Law <objecting(a)objecting.org> mm/damon/sysfs: check contexts->nr before accessing contexts_arr[0] Josh Law <objecting(a)objecting.org> mm/damon/sysfs: fix param_ctx leak on damon_sysfs_new_test_ctx() failure Lorenzo Stoakes (Oracle) <ljs(a)kernel.org> mm/mseal: update VMA end correctly on merge David Hildenbrand (Arm) <david(a)kernel.org> mm/memory: fix PMD/PUD checks in follow_pfnmap_start() Asad Kamal <asad.kamal(a)amd.com> drm/amd/pm: Return -EOPNOTSUPP for unsupported OD_MCLK on smu_v13_0_6 Huacai Chen <chenhuacai(a)kernel.org> LoongArch: KVM: Handle the case that EIOINTC's coremap is empty Bibo Mao <maobibo(a)loongson.cn> LoongArch: KVM: Fix base address calculation in kvm_eiointc_regs_access() Huacai Chen <chenhuacai(a)kernel.org> LoongArch: KVM: Make kvm_get_vcpu_by_cpuid() more robust Huacai Chen <chenhuacai(a)kernel.org> LoongArch: Workaround LS2K/LS7A GPU DMA hang bug Xi Ruoyao <xry111(a)xry111.site> LoongArch: vDSO: Emit GNU_EH_FRAME correctly Li Jun <lijun01(a)kylinos.cn> LoongArch: Fix missing NULL checks for kstrdup() Ville Syrjälä <ville.syrjala(a)linux.intel.com> drm/i915: Unlink NV12 planes earlier Ville Syrjälä <ville.syrjala(a)linux.intel.com> drm/i915: Order OP vs. timeout correctly in __wait_for() Imre Deak <imre.deak(a)intel.com> drm/i915/dp_tunnel: Fix error handling when clearing stream BW in atomic state Alex Deucher <alexander.deucher(a)amd.com> drm/amd/display: check if ext_caps is valid in BL setup Alex Hung <alex.hung(a)amd.com> drm/amd/display: Fix drm_edid leak in amdgpu_dm Alex Deucher <alexander.deucher(a)amd.com> drm/amd/display: Fix DCE LVDS handling Ruijing Dong <ruijing.dong(a)amd.com> drm/amdgpu: fix strsep() corrupting lockup_timeout on multi-GPU (v3) Eric Huang <jinhuieric.huang(a)amd.com> drm/amdgpu: prevent immediate PASID reuse case Claudiu Beznea <claudiu.beznea(a)tuxon.dev> dmaengine: sh: rz-dmac: Move CHCTRL updates under spinlock Claudiu Beznea <claudiu.beznea(a)tuxon.dev> dmaengine: sh: rz-dmac: Protect the driver specific lists Joy Zou <joy.zou(a)nxp.com> dmaengine: fsl-edma: fix channel parameter config for fixed channel requests Stefan Eichenberger <stefan.eichenberger(a)toradex.com> i2c: imx: ensure no clock is generated after last read Stefan Eichenberger <stefan.eichenberger(a)toradex.com> i2c: imx: fix i2c issue when reading multiple messages Davidlohr Bueso <dave(a)stgolabs.net> futex: Clear stale exiting pointer in futex_lock_pi() retry path Pratap Nirujogi <pratap.nirujogi(a)amd.com> i2c: designware: amdisp: Fix resume-probe race condition issue Joanne Koong <joannelkoong(a)gmail.com> iomap: fix invalid folio access when i_blkbits differs from I/O granularity Jassi Brar <jassisinghbrar(a)gmail.com> irqchip/qcom-mpm: Add missing mailbox TX done acknowledgment Milos Nikic <nikic.milos(a)gmail.com> jbd2: gracefully abort on checkpointing state corruptions Sean Christopherson <seanjc(a)google.com> KVM: x86/mmu: Only WARN in direct MMUs when overwriting shadow-present SPTE Sean Christopherson <seanjc(a)google.com> KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE Kevin Hao <haokexin(a)gmail.com> net: macb: Use dev_consume_skb_any() to free TX SKBs Kevin Hao <haokexin(a)gmail.com> net: macb: Protect access to net_device::ip_ptr with RCU lock Kevin Hao <haokexin(a)gmail.com> net: macb: Move devm_{free,request}_irq() out of spin lock area Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> scsi: ses: Handle positive SCSI error from ses_recv_diag() Tyllis Xu <livelycarpet87(a)gmail.com> scsi: ibmvfc: Fix OOB access in ibmvfc_discover_targets_done() Amir Goldstein <amir73il(a)gmail.com> ovl: fix wrong detection of 32bit inode numbers Fei Lv <feilv(a)asrmicro.com> ovl: make fsync after metadata copy-up opt-in mount option Abel Vesa <abel.vesa(a)oss.qualcomm.com> phy: qcom: qmp-ufs: Fix SM8650 PCS table for Gear 4 Nikunj A Dadhania <nikunj(a)amd.com> x86/fred: Fix early boot failures on SEV-ES/SNP guests Borislav Petkov (AMD) <bp(a)alien8.de> x86/cpu: Remove X86_CR4_FRED from the CR4 pinned bits mask Nikunj A Dadhania <nikunj(a)amd.com> x86/cpu: Enable FSGSBASE early in cpu_init_exception_handling() Joanne Koong <joannelkoong(a)gmail.com> writeback: don't block sync for filesystems with no data integrity guarantees Jinjiang Tu <tujinjiang(a)huawei.com> mm/huge_memory: fix folio isn't locked in softleaf_to_folio() Zhan Xusheng <zhanxusheng1024(a)gmail.com> alarmtimer: Fix argument order in alarm_timer_forward() Jiucheng Xu <jiucheng.xu(a)amlogic.com> erofs: add GFP_NOIO in the bio completion if needed Alex Williamson <alex.williamson(a)nvidia.com> vfio/pci: Fix double free in dma-buf feature xietangxin <xietangxin(a)yeah.net> virtio_net: Fix UAF on dst_ops when IFF_XMIT_DST_RELEASE is cleared and napi_tx is false Zubin Mithra <zsm(a)google.com> virt: tdx-guest: Fix handling of host controlled 'quote' buffer length Paul Moses <p(a)1g4.org> xfrm: iptfs: only publish mode_data after clone setup Roshan Kumar <roshaen09(a)gmail.com> xfrm: iptfs: validate inner IPv4 header length in IPTFS payload Ming Qian <ming.qian(a)oss.nxp.com> media: verisilicon: Fix kernel panic due to __initconst misuse Yuchan Nam <entropy1110(a)gmail.com> media: mc, v4l2: serialize REINIT and REQBUFS with req_queue_mutex Sanman Pradhan <psanman(a)juniper.net> hwmon: (peci/cputemp) Fix off-by-one in cputemp_is_visible() Sanman Pradhan <psanman(a)juniper.net> hwmon: (peci/cputemp) Fix crit_hyst returning delta instead of absolute temperature Sanman Pradhan <psanman(a)juniper.net> hwmon: (pmbus/isl68137) Add mutex protection for AVS enable sysfs attributes Sanman Pradhan <psanman(a)juniper.net> hwmon: (pmbus/ina233) Fix error handling and sign extension in shunt voltage read Zenghui Yu (Huawei) <zenghui.yu(a)linux.dev> KVM: arm64: Fix the descriptor address in __kvm_at_swap_desc() Marc Zyngier <maz(a)kernel.org> KVM: arm64: Discard PC update state on vcpu reset Srinivas Pandruvada <srinivas.pandruvada(a)linux.intel.com> platform/x86: ISST: Correct locked bit width Abhijit Gangurde <abhijit.gangurde(a)amd.com> RDMA/ionic: Preserve and set Ethernet source MAC after ib_ud_header_init() Srinivas Pandruvada <srinivas.pandruvada(a)linux.intel.com> thermal: intel: int340x: soc_slider: Set offset only for balanced mode SeongJae Park <sj(a)kernel.org> mm/damon/stat: monitor all System RAM resources Charles Mirabile <cmirabil(a)redhat.com> kbuild: Delete .builtin-dtbs.S when running make clean Viresh Kumar <viresh.kumar(a)linaro.org> cpufreq: conservative: Reset requested_freq on limits change Viresh Kumar <viresh.kumar(a)linaro.org> cpufreq: Don't skip cpufreq_frequency_table_cpuinfo() Marc Kleine-Budde <mkl(a)pengutronix.de> can: netlink: can_changelink(): add missing error handling to call can_ctrlmode_changelink() Oliver Hartkopp <socketcan(a)hartkopp.net> can: isotp: fix tx.buf use-after-free in isotp_sendmsg() Ali Norouzi <ali.norouzi(a)keysight.com> can: gw: fix OOB heap access in cgw_csum_crc8_rel() Peter Ujfalusi <peter.ujfalusi(a)linux.intel.com> ASoC: SOF: ipc4-topology: Allow bytes controls without initial payload Guangshuo Li <lgs201920130244(a)gmail.com> ASoC: sma1307: fix double free of devm_kzalloc() memory Srinivas Kandagatla <srinivas.kandagatla(a)oss.qualcomm.com> ASoC: codecs: wcd934x: fix typo in dt parsing Karol Wachowski <karol.wachowski(a)linux.intel.com> accel/ivpu: Add disable clock relinquish workaround for NVL-A0 Alexey Nepomnyashih <sdl(a)nppct.ru> ALSA: firewire-lib: fix uninitialized local variable Zhang Heng <zhangheng(a)kylinos.cn> ALSA: hda/realtek: add quirk for ASUS Strix G16 G615JMR Mario Limonciello <mario.limonciello(a)amd.com> Revert "ALSA: hda/intel: Add MSI X870E Tomahawk to denylist" Hyunwoo Kim <imv4bel(a)gmail.com> ksmbd: do not expire session on binding failure Werner Kasselman <werner(a)verivus.com> ksmbd: fix memory leaks and NULL deref in smb2_lock() Namjae Jeon <linkinjeon(a)kernel.org> ksmbd: fix potencial OOB in get_file_all_info() for compound requests Namjae Jeon <linkinjeon(a)kernel.org> ksmbd: replace hardcoded hdr2_len with offsetof() in smb2_calc_max_out_buf_len() Matthew Auld <matthew.auld(a)intel.com> drm/xe: always keep track of remap prev/next Luo Haiyang <luo.haiyang(a)zte.com.cn> tracing: Fix potential deadlock in cpu hotplug with osnoise Wesley Atwell <atwellwea(a)gmail.com> tracing: Drain deferred trigger frees if kthread creation fails Vasily Gorbik <gor(a)linux.ibm.com> s390/entry: Scrub r12 register on kernel entry Vasily Gorbik <gor(a)linux.ibm.com> s390/barrier: Make array_index_mask_nospec() __always_inline Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> s390/syscalls: Add spectre boundary for syscall dispatch table Geoffrey D. Bennett <g(a)b4.vu> ALSA: usb-audio: Exclude Scarlett 2i4 1st Gen from SKIP_IFACE_SETUP Nicholas Carlini <nicholas(a)carlini.com> io_uring/fdinfo: fix OOB read in SQE_MIXED wrap check Jens Axboe <axboe(a)kernel.dk> io_uring/fdinfo: fix SQE_MIXED SQE displaying Marc Kleine-Budde <mkl(a)pengutronix.de> spi: spi-fsl-lpspi: fix teardown order issue (UAF) Jihed Chaibi <jihed.chaibi.dev(a)gmail.com> ASoC: adau1372: Fix clock leak on PLL lock failure Jihed Chaibi <jihed.chaibi.dev(a)gmail.com> ASoC: adau1372: Fix unchecked clk_prepare_enable() return value Marc Buerg <buermarc(a)googlemail.com> sysctl: fix uninitialized variable in proc_do_large_bitmap Guenter Roeck <linux(a)roeck-us.net> hwmon: (pmbus/core) Protect regulator operations with mutex Guenter Roeck <linux(a)roeck-us.net> hwmon: (pmbus) Introduce the concept of "write-only" attributes Guenter Roeck <linux(a)roeck-us.net> hwmon: (pmbus) Mark lowest/average/highest/rated attributes as read-only Shuming Fan <shumingf(a)realtek.com> ASoC: SDCA: fix finding wrong entity Sanman Pradhan <psanman(a)juniper.net> hwmon: (adm1177) fix sysfs ABI violation and current unit conversion Srinivasan Shanmugam <srinivasan.shanmugam(a)amd.com> drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib Weiming Shi <bestswngs(a)gmail.com> ACPI: EC: clean up handlers on probe failure in acpi_ec_setup() Danilo Krummrich <dakr(a)kernel.org> spi: use generic driver_override infrastructure Matt Roper <matthew.d.roper(a)intel.com> drm/xe: Implement recent spec updates to Wa_16025250150 Alice Ryhl <aliceryhl(a)google.com> rust: regulator: do not assume that regulator_get() returns non-null Jihed Chaibi <jihed.chaibi.dev(a)gmail.com> ASoC: dt-bindings: stm32: Fix incorrect compatible string in stm32h7-sai match Yussuf Khalil <dev(a)pp3345.net> drm/amd/display: Do not skip unrelated mode changes in DSC validation Felix Gu <ustc.gu(a)gmail.com> spi: meson-spicc: Fix double-put in remove path Cezary Rojewski <cezary.rojewski(a)intel.com> ASoC: Intel: catpt: Fix the device initialization Felix Gu <ustc.gu(a)gmail.com> spi: sn-f-ospi: Fix resource leak in f_ospi_probe() Michał Winiarski <michal.winiarski(a)intel.com> drm/xe/pf: Fix use-after-free in migration restore Youngjun Park <youngjun.park(a)lge.com> PM: sleep: Drop spurious WARN_ON() from pm_restore_gfp_mask() Alberto Garcia <berto(a)igalia.com> PM: hibernate: Drain trailing zero pages on userspace restore Samasth Norway Ananda <samasth.norway.ananda(a)oracle.com> drm/i915/gmbus: fix spurious timeout on 512-byte burst reads Luca Leonardo Scorcia <l.scorcia(a)gmail.com> drm/mediatek: dsi: Store driver data before invoking mipi_dsi_host_register Mike Rapoport (Microsoft) <rppt(a)kernel.org> x86/efi: efi_unmap_boot_services: fix calculation of ranges_to_free size Yihang Li <liyihang9(a)huawei.com> scsi: scsi_transport_sas: Fix the maximum channel scanning issue Shengjiu Wang <shengjiu.wang(a)nxp.com> ASoC: fsl: imx-card: initialize playback_only and capture_only Shengjiu Wang <shengjiu.wang(a)nxp.com> ASoC: simple-card-utils: Check value of is_playback_only and is_capture_only Shiraz Saleem <shiraz.saleem(a)intel.com> RDMA/irdma: Harden depth calculation functions Tatyana Nikolova <tatyana.e.nikolova(a)intel.com> RDMA/irdma: Return EINVAL for invalid arp index error Anil Samal <anil.samal(a)intel.com> RDMA/irdma: Fix deadlock during netdev reset with active connections Tatyana Nikolova <tatyana.e.nikolova(a)intel.com> RDMA/irdma: Remove reset check from irdma_modify_qp_to_err() Ivan Barrera <ivan.d.barrera(a)intel.com> RDMA/irdma: Clean up unnecessary dereference of event->cm_node Tatyana Nikolova <tatyana.e.nikolova(a)intel.com> RDMA/irdma: Remove a NOP wait_event() in irdma_modify_qp_roce() Tatyana Nikolova <tatyana.e.nikolova(a)intel.com> RDMA/irdma: Update ibqp state to error if QP is already in error state Jacob Moroni <jmoroni(a)google.com> RDMA/irdma: Initialize free_qp completion before using it Geoffrey D. Bennett <g(a)b4.vu> ALSA: usb-audio: Exclude Scarlett 2i2 1st Gen from SKIP_IFACE_SETUP Ethan Tidmore <ethantidmore06(a)gmail.com> RDMA/efa: Fix possible deadlock Chuck Lever <chuck.lever(a)oracle.com> RDMA/rw: Fall back to direct SGE on MR pool exhaustion Sean Rhodes <sean(a)starlabs.systems> ALSA: hda/realtek: Sequence GPIO2 on Star Labs StarFighter Andy Shevchenko <andriy.shevchenko(a)linux.intel.com> regmap: Synchronize cache for the page selector Yonatan Nachum <ynachum(a)amazon.com> RDMA/efa: Fix use of completion ctx after free Yonatan Nachum <ynachum(a)amazon.com> RDMA/efa: Improve admin completion context state machine Yonatan Nachum <ynachum(a)amazon.com> RDMA/efa: Check stored completion CTX command ID with received one Kamal Heib <kheib(a)redhat.com> RDMA/bng_re: Fix silent failure in HWRM version query Paolo Valerio <pvalerio(a)redhat.com> net: macb: use the current queue number for stats David Carlier <devnexen(a)gmail.com> netfilter: ctnetlink: use netlink policy range checks Weiming Shi <bestswngs(a)gmail.com> netfilter: nf_conntrack_sip: fix use of uninitialized rtp_addr in process_sdp Pablo Neira Ayuso <pablo(a)netfilter.org> netfilter: nf_conntrack_expect: skip expectations in other netns via proc Pablo Neira Ayuso <pablo(a)netfilter.org> netfilter: nft_set_rbtree: revisit array resize logic Ren Wei <n05ec(a)lzu.edu.cn> netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() Weiming Shi <bestswngs(a)gmail.com> netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD Chuck Lever <chuck.lever(a)oracle.com> tls: Purge async_hold in tls_decrypt_async_wait() Pengpeng Hou <pengpeng(a)iscas.ac.cn> Bluetooth: btusb: clamp SCO altsetting table indices Hyunwoo Kim <imv4bel(a)gmail.com> Bluetooth: L2CAP: Fix ERTM re-init and zero pdu_len infinite loop Hyunwoo Kim <imv4bel(a)gmail.com> Bluetooth: L2CAP: Fix deadlock in l2cap_conn_del() Luiz Augusto von Dentz <luiz.von.dentz(a)intel.com> Bluetooth: L2CAP: Fix not tracking outstanding TX ident Cen Zhang <zzzccc427(a)gmail.com> Bluetooth: btintel: serialize btintel_hw_error() with hci_req_sync_lock Zhang Chen <zhangchen01(a)kylinos.cn> Bluetooth: L2CAP: Fix send LE flow credits in ACL link Miguel Ojeda <ojeda(a)kernel.org> dma-mapping: add missing `inline` for `dma_free_attrs` Jonas Köppeler <j.koeppeler(a)tu-berlin.de> net_sched: codel: fix stale state for empty flows in fq_codel Sabrina Dubroca <sd(a)queasysnail.net> rtnetlink: fix leak of SRCU struct in rtnl_link_register Thangaraj Samynathan <thangaraj.s(a)microchip.com> net: lan743x: fix duplex configuration in mac_link_up David Carlier <devnexen(a)gmail.com> net: ti: icssg-prueth: fix use-after-free of CPPI descriptor in RX path Jiayuan Chen <jiayuan.chen(a)shopee.com> team: fix header_ops type confusion with non-Ethernet ports Xuan Zhuo <xuanzhuo(a)linux.alibaba.com> virtio-net: correct hdr_len handling for tunnel gso Xuan Zhuo <xuanzhuo(a)linux.alibaba.com> virtio-net: correct hdr_len handling for VIRTIO_NET_F_GUEST_HDRLEN Wei Fang <wei.fang(a)nxp.com> net: enetc: fix the output issue of 'ethtool --show-ring' Martin KaFai Lau <martin.lau(a)kernel.org> udp: Fix wildcard bind conflict check when using hash2 Arnd Bergmann <arnd(a)arndb.de> net: b44: always select CONFIG_FIXED_PHY Qingfang Deng <dqfext(a)gmail.com> net: airoha: add RCU lock around dev_fill_forward_path Yochai Eisenrich <echelonh(a)gmail.com> net: fix fanout UAF in packet_release() via NETDEV_UP race Kuniyuki Iwashima <kuniyu(a)google.com> ipv6: Don't remove permanent routes with exceptions from tb6_gc_hlist. Kuniyuki Iwashima <kuniyu(a)google.com> ipv6: Remove permanent routes from tb6_gc_hlist when all exceptions expire. Kohei Enju <kohei(a)enjuk.jp> iavf: fix out-of-bounds writes in iavf_get_ethtool_stats() Petr Oros <poros(a)redhat.com> ice: use ice_update_eth_stats() for representor stats Petr Oros <poros(a)redhat.com> ice: fix inverted ready check for VF representors David McFarland <corngood(a)gmail.com> platform/x86: intel-hid: disable wakeup_mode during hibernation Alok Tiwari <alok.a.tiwari(a)oracle.com> platform/olpc: olpc-xo175-ec: Fix overflow error message to print inlen Nathan Chancellor <nathan(a)kernel.org> platform/x86: lenovo: wmi-gamezone: Drop gz_chain_head Li RongQing <lirongqing(a)baidu.com> platform/x86: ISST: Check HWP support before MSR access Justin Chen <justin.chen(a)broadcom.com> net: bcmasp: fix double disable of clk Justin Chen <justin.chen(a)broadcom.com> net: bcmasp: fix double free of WoL irq Justin Chen <justin.chen(a)broadcom.com> net: bcmasp: streamline early exit in probe Sabrina Dubroca <sd(a)queasysnail.net> rtnetlink: count IFLA_INFO_SLAVE_KIND in if_nlmsg_size Sabrina Dubroca <sd(a)queasysnail.net> rtnetlink: count IFLA_PARENT_DEV_{NAME,BUS_NAME} in if_nlmsg_size Qi Tang <tpluszz77(a)gmail.com> net/smc: fix double-free of smc_spd_priv when tee() duplicates splice pipe buffer Yang Yang <n05ec(a)lzu.edu.cn> openvswitch: validate MPLS set/set_masked payload length Yang Yang <n05ec(a)lzu.edu.cn> openvswitch: defer tunnel netdev_put to RCU release Toke Høiland-Jørgensen <toke(a)redhat.com> net: openvswitch: Avoid releasing netdev before teardown completes Jakub Kicinski <kuba(a)kernel.org> nfc: nci: fix circular locking dependency in nci_close_device Mohammad Heib <mheib(a)redhat.com> ionic: fix persistent MAC address override on PF Luca Leonardo Scorcia <l.scorcia(a)gmail.com> pinctrl: mediatek: common: Fix probe failure for devices without EINT Helen Koike <koike(a)igalia.com> Bluetooth: L2CAP: Fix null-ptr-deref on l2cap_sock_ready_cb Anas Iqbal <mohd.abd.6602(a)gmail.com> Bluetooth: hci_ll: Fix firmware leak on error path Luiz Augusto von Dentz <luiz.von.dentz(a)intel.com> Bluetooth: MGMT: Fix dangling pointer on mgmt_add_adv_patterns_monitor_complete Hyunwoo Kim <imv4bel(a)gmail.com> Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold Hyunwoo Kim <imv4bel(a)gmail.com> Bluetooth: L2CAP: Validate PDU length before reading SDU length in l2cap_ecred_data_rcv() Minseo Park <jacob.park.9436(a)gmail.com> Bluetooth: L2CAP: Fix stack-out-of-bounds read in l2cap_ecred_conn_req Amelie Delaunay <amelie.delaunay(a)foss.st.com> pinctrl: stm32: fix HDP driver dependency on GPIO_GENERIC Oliver Hartkopp <socketcan(a)hartkopp.net> can: statistics: add missing atomic access in hot path Sheng Yong <shengyong1(a)xiaomi.com> erofs: set fileio bio failed in short read case Shigeru Yoshida <syoshida(a)redhat.com> dma: swiotlb: add KMSAN annotations to swiotlb_bounce() Eric Dumazet <edumazet(a)google.com> af_key: validate families in pfkey_send_migrate() Minwoo Ra <raminwo0202(a)gmail.com> xfrm: prevent policy_hthresh.work from racing with netns teardown Hyunwoo Kim <imv4bel(a)gmail.com> xfrm: Fix work re-schedule after cancel in xfrm_nat_keepalive_net_fini() Dmitry Torokhov <dmitry.torokhov(a)gmail.com> pinctrl: renesas: rza1: Normalize return value of gpio_get() Neil Armstrong <neil.armstrong(a)linaro.org> pinctrl: qcom: spmi-gpio: implement .get_direction() Fernando Fernandez Mancera <fmancera(a)suse.de> xfrm: iptfs: fix skb_put() panic on non-linear skb during reassembly Felix Gu <ustc.gu(a)gmail.com> pinctrl: renesas: rzt2h: Fix device node leak in rzt2h_gpio_register() Sabrina Dubroca <sd(a)queasysnail.net> esp: fix skb leak with espintcp and async crypto Sabrina Dubroca <sd(a)queasysnail.net> xfrm: call xdo_dev_state_delete during state update Sabrina Dubroca <sd(a)queasysnail.net> xfrm: fix the condition on x->pcpu_num in xfrm_sa_len Sabrina Dubroca <sd(a)queasysnail.net> xfrm: add missing extack for XFRMA_SA_PCPU in add_acquire and allocspi Peter Yin <peteryin.openbmc(a)gmail.com> i3c: master: dw-i3c: Fix missing of_node for virtual I2C adapter Zhang Heng <zhangheng(a)kylinos.cn> ALSA: hda/realtek: add quirk for ASUS UM6702RC Lianqin Hu <hulianqin(a)vivo.com> ALSA: usb-audio: Add iface reset and delay quirk for SPACETOUCH USB Audio Alan Borzeszkowski <alan.borzeszkowski(a)linux.intel.com> spi: intel-pci: Add support for Nova Lake mobile SPI flash Jie Deng <dengjie03(a)kylinos.cn> usb: core: new quirk to handle devices with zero configurations Yang Wang <kevinyang.wang(a)amd.com> drm/amdgpu: fix gpu idle power consumption issue for gfx v12 Chaitanya Kulkarni <kch(a)nvidia.com> nvmet: move async event work off nvmet-wq Josh Poimboeuf <jpoimboe(a)kernel.org> objtool: Handle Clang RSP musical chairs Uzair Mughal <contact(a)uzair.is-a.dev> ALSA: hda/realtek: Add headset jack quirk for Thinkpad X390 Zhang Heng <zhangheng(a)kylinos.cn> ALSA: hda/realtek: Add quirk for Gigabyte Technology to fix headphone Josh Poimboeuf <jpoimboe(a)kernel.org> objtool/klp: Disable unsupported pr_debug() usage Liucheng Lu <luliucheng100(a)outlook.com> ALSA: hda/realtek: add HP Laptop 14s-dr5xxx mute LED quirk Hari Bathini <hbathini(a)linux.ibm.com> powerpc64/ftrace: fix OOL stub count with clang HONG Yifan <elsk(a)google.com> objtool: Use HOSTCFLAGS for HAVE_XXHASH test Boris Burkov <boris(a)bur.io> btrfs: set BTRFS_ROOT_ORPHAN_CLEANUP during subvol create zhidao su <soolaugust(a)gmail.com> sched_ext: Use WRITE_ONCE() for the write side of dsq->seq update Günther Noack <gnoack(a)google.com> HID: apple: avoid memory leak in apple_report_fixup() Eduard Zingerman <eddyz87(a)gmail.com> bpf: Fix u32/s32 bounds when ranges cross min/max boundary Simon Trimmer <simont(a)opensource.cirrus.com> ASoC: amd: acp: Add ACP6.3 match entries for Cirrus Logic parts Maarten Lankhorst <dev(a)lankhorst.se> drm/ttm/tests: Fix build failure on PREEMPT_RT wangdicheng <wangdicheng(a)kylinos.cn> ALSA: hda/senary: Ensure EAPD is enabled during init Nilay Shroff <nilay(a)linux.ibm.com> block: break pcpu_alloc_mutex dependency on freeze_lock Isaac J. Manjarres <isaacmanjarres(a)google.com> dma-buf: Include ioctl.h in UAPI header Vladimir Yakovlev <vovchkir(a)gmail.com> spi: spi-dw-dma: fix print error log when wait finish transaction Richard Fitzgerald <rf(a)opensource.cirrus.com> ASoC: cs35l56: Only patch ASP registers if the DAI is part of a DAIlink Mark Brown <broonie(a)kernel.org> ASoC: fsl_easrc: Fix event generation in fsl_easrc_iec958_put_bits() Sheetal <sheetal(a)nvidia.com> ALSA: hda/hdmi: Add Tegra238 HDA codec device ID Oliver Freyermuth <o.freyermuth(a)googlemail.com> ASoC: Intel: sof_sdw: Add quirk for Alienware Area 51 (2025) 0CCD SKU Florian Fuchs <fuchsfl(a)gmail.com> scsi: devinfo: Add BLIST_SKIP_IO_HINTS for Iomega ZIP Shuming Fan <shumingf(a)realtek.com> ASoC: rt1321: fix DMIC ch2/3 mask issue Ranjan Kumar <ranjan.kumar(a)broadcom.com> scsi: mpi3mr: Clear reset history on ready and recheck state after timeout Mark Brown <broonie(a)kernel.org> ASoC: fsl_easrc: Fix event generation in fsl_easrc_iec958_set_reg() Ihor Solodrai <ihor.solodrai(a)linux.dev> module: Fix kernel panic when a symbol st_shndx is out of bounds Denis Benato <denis.benato(a)linux.dev> HID: asus: add xg mobile 2023 external hardware support Romain Sioen <romain.sioen(a)microchip.com> HID: mcp2221: cancel last I2C command on read error Antheas Kapenekakis <lkml(a)antheas.dev> platform/x86: oxpec: Add support for OneXPlayer X1 Air Antheas Kapenekakis <lkml(a)antheas.dev> platform/x86: oxpec: Add support for Aokzoe A2 Pro Thomas Weißschuh <thomas.weissschuh(a)linutronix.de> kbuild: install-extmod-build: Package resolve_btfids if necessary Valentin Spreckels <valentin(a)spreckels.dev> net: usb: r8152: add TRENDnet TUC-ET2G Antheas Kapenekakis <lkml(a)antheas.dev> platform/x86: oxpec: Add support for OneXPlayer X1z Takashi Iwai <tiwai(a)suse.de> HID: apple: Add EPOMAKER TH87 to the non-apple keyboards list Antheas Kapenekakis <lkml(a)antheas.dev> platform/x86: oxpec: Add support for OneXPlayer APEX Zhang Lixu <lixu.zhang(a)intel.com> HID: intel-ish-hid: ipc: Add Nova Lake-H/S PCI device IDs Victor Lattaro Volpini <victorlattaro(a)proton.me> platform/x86: hp-wmi: Add Victus 16-d0xxx support Günther Noack <gnoack(a)google.com> HID: magicmouse: avoid memory leak in magicmouse_report_fixup() Julius Lehmann <lehmanju(a)devpi.de> HID: magicmouse: fix battery reporting for Apple Magic Trackpad 2 Keith Busch <kbusch(a)kernel.org> nvme-pci: ensure we're polling a polled queue Anton Plotnikov <plotnikovanton(a)gmail.com> platform/x86: hp-wmi: add Omen 14-fb1xxx (board 8E41) support Hans de Goede <johannes.goede(a)oss.qualcomm.com> platform/x86: touchscreen_dmi: Add quirk for y-inverted Goodix touchscreen on SUPI S10 Leif Skunberg <diamondback(a)cohunt.app> platform/x86: intel-hid: Enable 5-button array on ThinkPad X1 Fold 16 Gen 1 Krishna Chomal <krishna.chomal108(a)gmail.com> platform/x86: hp-wmi: Add Omen 16-xd0xxx fan and thermal support Daniel Hodges <hodgesd(a)meta.com> nvme-fabrics: use kfree_sensitive() for DHCHAP secrets Keith Busch <kbusch(a)kernel.org> nvme-pci: cap queue creation to used queues Peter Metz <peter.metz(a)unarin.com> platform/x86: intel-hid: Add Dell 14 Plus 2-in-1 to dmi_vgbs_allow_list Günther Noack <gnoack(a)google.com> HID: asus: avoid memory leak in asus_report_fixup() Krishna Chomal <krishna.chomal108(a)gmail.com> platform/x86: hp-wmi: Add Omen 16-wf0xxx fan and thermal support Xuewen Yan <xuewen.yan(a)unisoc.com> tracing: Revert "tracing: Remove pid in task_rename tracing output" Daniel Wade <danjwade95(a)gmail.com> bpf: Fix unsound scalar forking in maybe_fork_scalars() for BPF_OR Jenny Guanni Qu <qguanni(a)gmail.com> bpf: Fix undefined behavior in interpreter sdiv/smod for INT_MIN Ihor Solodrai <ihor.solodrai(a)linux.dev> bpf: Fix exception exit lock checking for subprogs Cui Chao <cuichao1753(a)phytium.com.cn> cxl: Adjust the startup priority of cxl_pmem to be higher than that of cxl_acpi Kumar Kartikeya Dwivedi <memxor(a)gmail.com> bpf: Release module BTF IDR before module unload Ian Rogers <irogers(a)google.com> perf metricgroup: Fix metricgroup__has_metric_or_groups() Danilo Krummrich <dakr(a)kernel.org> driver core: platform: use generic driver_override infrastructure Danilo Krummrich <dakr(a)kernel.org> driver core: generalize driver_override in struct device Danilo Krummrich <dakr(a)kernel.org> sh: platform_early: remove pdev->driver_override check Danilo Krummrich <dakr(a)kernel.org> hwmon: axi-fan: don't use driver_override as IRQ name Smita Koralahalli <Smita.KoralahalliChannabasappa(a)amd.com> cxl/hdm: Avoid incorrect DVSEC fallback when HDM decoders are enabled Josh Poimboeuf <jpoimboe(a)kernel.org> livepatch/klp-build: Fix inconsistent kernel version Joe Lawrence <joe.lawrence(a)redhat.com> objtool/klp: fix data alignment in __clone_symbol() Janosch Frank <frankja(a)linux.ibm.com> s390/mm: Add missing secure storage access fixups for donated memory Peter Zijlstra <peterz(a)infradead.org> perf: Make sure to use pmu_ctx->pmu for groups Peter Zijlstra <peterz(a)infradead.org> x86/perf: Make sure to program the counter value for stopped events on migration Sachin Kumar <xcyfun(a)protonmail.com> bpf: Fix constant blinding for PROBE_MEM32 stores Yazhou Tang <tangyazhou518(a)outlook.com> bpf: Reset register ID for BPF_END value tracking Davidlohr Bueso <dave(a)stgolabs.net> cxl/region: Fix leakage in __construct_region() Alison Schofield <alison.schofield(a)intel.com> cxl/port: Fix use after free of parent_port in cxl_detach_ep() ------------- Diffstat: Documentation/admin-guide/kernel-parameters.txt | 3 + .../devicetree/bindings/sound/st,stm32-sai.yaml | 2 +- Documentation/filesystems/overlayfs.rst | 50 +++ Documentation/hwmon/adm1177.rst | 8 +- Documentation/hwmon/peci-cputemp.rst | 10 +- Makefile | 6 +- .../boot/dts/freescale/imx8mn-tqma8mqnl-mba8mx.dts | 13 +- .../arm64/boot/dts/freescale/imx8mn-tqma8mqnl.dtsi | 22 ++ arch/arm64/kvm/at.c | 2 +- arch/arm64/kvm/reset.c | 14 + arch/loongarch/include/asm/linkage.h | 36 ++ arch/loongarch/include/asm/sigframe.h | 9 + arch/loongarch/kernel/asm-offsets.c | 2 + arch/loongarch/kernel/env.c | 7 +- arch/loongarch/kernel/signal.c | 6 +- arch/loongarch/kvm/intc/eiointc.c | 16 +- arch/loongarch/kvm/vcpu.c | 3 + arch/loongarch/pci/pci.c | 80 ++++ arch/loongarch/vdso/Makefile | 4 +- arch/loongarch/vdso/sigreturn.S | 6 +- arch/powerpc/net/bpf_jit_comp64.c | 23 +- arch/powerpc/tools/ftrace-gen-ool-stubs.sh | 4 +- arch/s390/include/asm/barrier.h | 4 +- arch/s390/kernel/entry.S | 3 + arch/s390/kernel/syscall.c | 5 +- arch/s390/mm/fault.c | 11 +- arch/sh/drivers/platform_early.c | 4 - arch/x86/coco/sev/noinstr.c | 6 + arch/x86/entry/entry_fred.c | 14 + arch/x86/events/core.c | 4 +- arch/x86/kernel/cpu/common.c | 20 +- arch/x86/kvm/mmu/mmu.c | 17 +- arch/x86/platform/efi/quirks.c | 2 +- block/blk-mq.c | 45 ++- drivers/accel/ivpu/ivpu_drv.h | 1 + drivers/accel/ivpu/ivpu_hw.c | 6 +- drivers/acpi/ec.c | 2 + drivers/base/bus.c | 43 ++- drivers/base/core.c | 2 + drivers/base/dd.c | 60 +++ drivers/base/platform.c | 37 +- drivers/base/regmap/regmap.c | 30 +- drivers/bluetooth/btintel.c | 11 +- drivers/bluetooth/btusb.c | 5 +- drivers/bluetooth/hci_ll.c | 2 + drivers/bus/simple-pm-bus.c | 4 +- drivers/clk/imx/clk-scu.c | 3 +- drivers/cpufreq/cpufreq.c | 9 +- drivers/cpufreq/cpufreq_conservative.c | 12 + drivers/cpufreq/cpufreq_governor.c | 3 + drivers/cpufreq/cpufreq_governor.h | 1 + drivers/cpufreq/freq_table.c | 4 + drivers/cxl/core/hdm.c | 25 +- drivers/cxl/core/port.c | 8 +- drivers/cxl/core/region.c | 4 +- drivers/cxl/pmem.c | 2 +- drivers/dma/dw-edma/dw-hdma-v0-core.c | 6 +- drivers/dma/fsl-edma-main.c | 26 +- drivers/dma/idxd/cdev.c | 8 +- drivers/dma/idxd/device.c | 6 +- drivers/dma/idxd/init.c | 4 +- drivers/dma/idxd/submit.c | 2 +- drivers/dma/idxd/sysfs.c | 1 + drivers/dma/sh/rz-dmac.c | 68 ++-- drivers/dma/xilinx/xdma.c | 4 +- drivers/dma/xilinx/xilinx_dma.c | 46 ++- drivers/gpu/drm/amd/amdgpu/amdgpu_amdkfd.c | 4 +- drivers/gpu/drm/amd/amdgpu/amdgpu_device.c | 13 +- drivers/gpu/drm/amd/amdgpu/amdgpu_ids.c | 45 ++- drivers/gpu/drm/amd/amdgpu/amdgpu_ids.h | 1 + drivers/gpu/drm/amd/amdgpu/amdgpu_vm.c | 1 + drivers/gpu/drm/amd/amdgpu/mes_v12_0.c | 5 +- drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm.c | 10 +- drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm.h | 1 + .../amd/display/amdgpu_dm/amdgpu_dm_mst_types.c | 4 +- .../display/dc/resource/dce100/dce100_resource.c | 6 +- .../display/dc/resource/dce110/dce110_resource.c | 5 +- .../display/dc/resource/dce112/dce112_resource.c | 5 +- .../display/dc/resource/dce120/dce120_resource.c | 5 +- .../amd/display/dc/resource/dce60/dce60_resource.c | 14 +- .../amd/display/dc/resource/dce80/dce80_resource.c | 6 +- .../gpu/drm/amd/pm/swsmu/smu13/smu_v13_0_6_ppt.c | 2 +- drivers/gpu/drm/i915/display/intel_display.c | 8 +- drivers/gpu/drm/i915/display/intel_dp_tunnel.c | 20 +- drivers/gpu/drm/i915/display/intel_dp_tunnel.h | 11 +- drivers/gpu/drm/i915/display/intel_gmbus.c | 4 +- drivers/gpu/drm/i915/display/intel_plane.c | 11 +- drivers/gpu/drm/i915/i915_wait_util.h | 2 +- drivers/gpu/drm/mediatek/mtk_dsi.c | 9 +- drivers/gpu/drm/ttm/tests/ttm_bo_test.c | 4 +- drivers/gpu/drm/xe/regs/xe_gt_regs.h | 1 + drivers/gpu/drm/xe/xe_pt.c | 12 +- drivers/gpu/drm/xe/xe_sriov_packet.c | 2 + drivers/gpu/drm/xe/xe_vm.c | 22 +- drivers/gpu/drm/xe/xe_vm_types.h | 4 + drivers/gpu/drm/xe/xe_wa.c | 3 +- drivers/hid/hid-apple.c | 7 +- drivers/hid/hid-asus.c | 18 +- drivers/hid/hid-ids.h | 1 + drivers/hid/hid-magicmouse.c | 6 +- drivers/hid/hid-mcp2221.c | 2 + drivers/hid/intel-ish-hid/ipc/hw-ish.h | 2 + drivers/hid/intel-ish-hid/ipc/pci-ish.c | 12 + drivers/hwmon/adm1177.c | 54 +-- drivers/hwmon/axi-fan-control.c | 2 +- drivers/hwmon/peci/cputemp.c | 4 +- drivers/hwmon/pmbus/ina233.c | 3 +- drivers/hwmon/pmbus/isl68137.c | 21 +- drivers/hwmon/pmbus/pmbus_core.c | 192 ++++++++-- drivers/i2c/busses/i2c-designware-amdisp.c | 11 +- drivers/i2c/busses/i2c-imx.c | 51 ++- drivers/i3c/master/dw-i3c-master.c | 2 + drivers/infiniband/core/rw.c | 27 +- drivers/infiniband/hw/bng_re/bng_dev.c | 14 +- drivers/infiniband/hw/efa/efa_com.c | 175 ++++----- drivers/infiniband/hw/ionic/ionic_controlpath.c | 4 +- drivers/infiniband/hw/irdma/cm.c | 29 +- drivers/infiniband/hw/irdma/uk.c | 39 +- drivers/infiniband/hw/irdma/utils.c | 2 - drivers/infiniband/hw/irdma/verbs.c | 9 +- drivers/irqchip/irq-qcom-mpm.c | 3 + drivers/irqchip/irq-renesas-rzv2h.c | 2 +- drivers/media/mc/mc-request.c | 5 + drivers/media/platform/verisilicon/imx8m_vpu_hw.c | 2 +- drivers/media/v4l2-core/v4l2-ioctl.c | 5 +- drivers/net/can/dev/netlink.c | 4 +- drivers/net/ethernet/airoha/airoha_ppe.c | 2 + drivers/net/ethernet/broadcom/Kconfig | 2 +- drivers/net/ethernet/broadcom/asp2/bcmasp.c | 66 ++-- drivers/net/ethernet/cadence/macb_main.c | 41 +- .../net/ethernet/freescale/enetc/enetc_ethtool.c | 2 + drivers/net/ethernet/intel/iavf/iavf_ethtool.c | 31 +- drivers/net/ethernet/intel/ice/ice_ethtool.c | 14 +- drivers/net/ethernet/intel/ice/ice_repr.c | 5 +- drivers/net/ethernet/microchip/lan743x_main.c | 5 + drivers/net/ethernet/pensando/ionic/ionic_lif.c | 17 +- drivers/net/ethernet/ti/icssg/icssg_common.c | 4 +- drivers/net/team/team_core.c | 65 +++- drivers/net/tun_vnet.h | 2 +- drivers/net/usb/r8152.c | 1 + drivers/net/virtio_net.c | 7 +- drivers/nvme/host/fabrics.c | 4 +- drivers/nvme/host/pci.c | 11 +- drivers/nvme/target/admin-cmd.c | 2 +- drivers/nvme/target/core.c | 14 +- drivers/nvme/target/nvmet.h | 1 + drivers/nvme/target/rdma.c | 1 + drivers/phy/qualcomm/phy-qcom-qmp-ufs.c | 3 +- drivers/phy/ti/phy-j721e-wiz.c | 2 + drivers/pinctrl/mediatek/pinctrl-mtk-common.c | 9 +- drivers/pinctrl/qcom/pinctrl-spmi-gpio.c | 16 + drivers/pinctrl/renesas/pinctrl-rza1.c | 2 +- drivers/pinctrl/renesas/pinctrl-rzt2h.c | 1 + drivers/pinctrl/stm32/Kconfig | 1 + drivers/platform/olpc/olpc-xo175-ec.c | 2 +- drivers/platform/x86/hp/hp-wmi.c | 12 +- drivers/platform/x86/intel/hid.c | 23 +- .../x86/intel/speed_select_if/isst_tpmi_core.c | 5 +- drivers/platform/x86/lenovo/wmi-gamezone.c | 2 - drivers/platform/x86/oxpec.c | 30 +- drivers/platform/x86/touchscreen_dmi.c | 18 + drivers/scsi/ibmvscsi/ibmvfc.c | 3 +- drivers/scsi/mpi3mr/mpi3mr_fw.c | 10 + drivers/scsi/scsi_devinfo.c | 2 +- drivers/scsi/scsi_transport_sas.c | 2 +- drivers/scsi/ses.c | 2 +- drivers/slimbus/qcom-ngd-ctrl.c | 6 +- drivers/spi/spi-dw-dma.c | 2 +- drivers/spi/spi-fsl-lpspi.c | 3 +- drivers/spi/spi-intel-pci.c | 1 + drivers/spi/spi-meson-spicc.c | 2 - drivers/spi/spi-sn-f-ospi.c | 17 +- drivers/spi/spi.c | 19 +- .../int340x_thermal/processor_thermal_soc_slider.c | 8 +- drivers/usb/core/config.c | 6 +- drivers/usb/core/quirks.c | 5 + drivers/vfio/pci/vfio_pci_dmabuf.c | 5 +- drivers/virt/coco/tdx-guest/tdx-guest.c | 12 +- drivers/xen/privcmd.c | 3 + fs/btrfs/block-group.c | 2 +- fs/btrfs/disk-io.c | 4 +- fs/btrfs/ioctl.c | 7 + fs/btrfs/volumes.c | 5 +- fs/erofs/fileio.c | 6 +- fs/erofs/zdata.c | 3 + fs/ext4/Makefile | 4 +- fs/ext4/crypto.c | 9 +- fs/ext4/ext4.h | 6 + fs/ext4/extents.c | 23 +- fs/ext4/fast_commit.c | 17 +- fs/ext4/fsync.c | 16 +- fs/ext4/ialloc.c | 6 + fs/ext4/inline.c | 10 +- fs/ext4/inode.c | 75 +++- fs/ext4/mballoc-test.c | 81 ++-- fs/ext4/mballoc.c | 132 ++++++- fs/ext4/mballoc.h | 30 ++ fs/ext4/page-io.c | 10 +- fs/ext4/super.c | 16 +- fs/ext4/sysfs.c | 10 +- fs/fs-writeback.c | 18 +- fs/fuse/file.c | 4 +- fs/fuse/inode.c | 1 + fs/iomap/buffered-io.c | 15 +- fs/jbd2/checkpoint.c | 15 +- fs/netfs/buffered_read.c | 3 +- fs/netfs/direct_read.c | 3 +- fs/netfs/direct_write.c | 15 +- fs/netfs/iterator.c | 43 +++ fs/netfs/read_collect.c | 4 +- fs/netfs/read_retry.c | 5 +- fs/netfs/read_single.c | 1 - fs/netfs/write_collect.c | 4 +- fs/netfs/write_issue.c | 3 +- fs/overlayfs/copy_up.c | 6 +- fs/overlayfs/overlayfs.h | 21 ++ fs/overlayfs/ovl_entry.h | 7 +- fs/overlayfs/params.c | 33 +- fs/overlayfs/super.c | 2 +- fs/overlayfs/util.c | 5 +- fs/smb/server/oplock.c | 72 ++-- fs/smb/server/smb2pdu.c | 73 ++-- fs/xfs/scrub/quota.c | 4 +- fs/xfs/scrub/trace.h | 12 +- fs/xfs/xfs_attr_item.c | 5 +- fs/xfs/xfs_dquot_item.c | 9 +- fs/xfs/xfs_inode_item.c | 9 +- fs/xfs/xfs_mount.c | 7 +- fs/xfs/xfs_trace.h | 47 ++- fs/xfs/xfs_trans_ail.c | 26 +- include/linux/damon.h | 7 + include/linux/device.h | 54 +++ include/linux/device/bus.h | 4 + include/linux/dma-mapping.h | 4 +- include/linux/fs/super_types.h | 1 + include/linux/leafops.h | 32 +- include/linux/mempolicy.h | 1 + include/linux/netfs.h | 1 - include/linux/pagemap.h | 11 - include/linux/platform_device.h | 5 - include/linux/spi/spi.h | 5 - include/linux/usb/quirks.h | 3 + include/linux/usb/r8152.h | 1 + include/linux/virtio_net.h | 53 ++- include/net/bluetooth/l2cap.h | 2 +- include/net/codel_impl.h | 1 + include/net/inet_hashtables.h | 14 + include/net/ip6_fib.h | 21 +- include/sound/cs35l56.h | 1 + include/trace/events/netfs.h | 8 +- include/trace/events/task.h | 7 +- include/uapi/linux/dma-buf.h | 1 + include/uapi/linux/netfilter/nf_conntrack_common.h | 4 + io_uring/fdinfo.c | 4 +- kernel/bpf/btf.c | 24 +- kernel/bpf/core.c | 43 ++- kernel/bpf/verifier.c | 36 +- kernel/dma/swiotlb.c | 21 +- kernel/events/core.c | 19 +- kernel/futex/core.c | 2 +- kernel/futex/pi.c | 3 +- kernel/futex/syscalls.c | 8 + kernel/module/main.c | 7 + kernel/power/main.c | 2 +- kernel/power/snapshot.c | 11 + kernel/sched/ext.c | 2 +- kernel/sysctl.c | 2 +- kernel/time/alarmtimer.c | 2 +- kernel/trace/trace_events_trigger.c | 85 ++++- kernel/trace/trace_osnoise.c | 10 +- lib/bug.c | 7 +- mm/damon/core.c | 9 +- mm/damon/stat.c | 53 ++- mm/damon/sysfs.c | 10 +- mm/memory.c | 18 +- mm/mempolicy.c | 10 +- mm/mseal.c | 3 +- mm/pagewalk.c | 25 +- net/bluetooth/l2cap_core.c | 103 +++-- net/bluetooth/l2cap_sock.c | 3 + net/bluetooth/mgmt.c | 2 +- net/bluetooth/sco.c | 10 +- net/can/af_can.c | 4 +- net/can/af_can.h | 2 +- net/can/gw.c | 6 +- net/can/isotp.c | 24 +- net/can/proc.c | 3 +- net/core/rtnetlink.c | 28 +- net/ipv4/esp4.c | 9 +- net/ipv4/inet_connection_sock.c | 20 +- net/ipv4/udp.c | 2 +- net/ipv6/addrconf.c | 4 +- net/ipv6/esp6.c | 9 +- net/ipv6/ip6_fib.c | 15 +- net/ipv6/netfilter/ip6t_rt.c | 4 + net/ipv6/route.c | 2 +- net/key/af_key.c | 19 +- net/netfilter/nf_conntrack_expect.c | 4 + net/netfilter/nf_conntrack_netlink.c | 16 +- net/netfilter/nf_conntrack_proto_tcp.c | 10 +- net/netfilter/nf_conntrack_sip.c | 14 +- net/netfilter/nfnetlink_log.c | 8 +- net/netfilter/nft_set_rbtree.c | 92 ++++- net/nfc/nci/core.c | 10 +- net/openvswitch/flow_netlink.c | 2 + net/openvswitch/vport-netdev.c | 11 +- net/packet/af_packet.c | 1 + net/smc/smc_rx.c | 9 +- net/tls/tls_sw.c | 2 +- net/xfrm/xfrm_iptfs.c | 17 +- net/xfrm/xfrm_nat_keepalive.c | 2 +- net/xfrm/xfrm_policy.c | 2 + net/xfrm/xfrm_state.c | 1 + net/xfrm/xfrm_user.c | 7 +- rust/kernel/regulator.rs | 33 +- rust/pin-init/src/macros.rs | 16 + scripts/livepatch/klp-build | 9 +- scripts/package/install-extmod-build | 4 + sound/firewire/amdtp-stream.c | 2 +- sound/hda/codecs/hdmi/tegrahdmi.c | 1 + sound/hda/codecs/realtek/alc269.c | 42 ++- sound/hda/codecs/realtek/alc662.c | 9 + sound/hda/codecs/senarytech.c | 5 + sound/hda/controllers/intel.c | 1 - sound/soc/amd/acp/amd-acp63-acpi-match.c | 413 +++++++++++++++++++++ sound/soc/codecs/adau1372.c | 34 +- sound/soc/codecs/cs35l56-shared.c | 16 +- sound/soc/codecs/cs35l56.c | 8 + sound/soc/codecs/rt1320-sdw.c | 5 +- sound/soc/codecs/sma1307.c | 6 +- sound/soc/codecs/wcd934x.c | 2 +- sound/soc/fsl/fsl_easrc.c | 14 +- sound/soc/fsl/imx-card.c | 2 + sound/soc/generic/simple-card-utils.c | 4 +- sound/soc/intel/boards/sof_sdw.c | 8 + sound/soc/intel/catpt/device.c | 10 +- sound/soc/intel/catpt/dsp.c | 3 - sound/soc/samsung/i2s.c | 6 +- sound/soc/sdca/sdca_functions.c | 11 +- sound/soc/sof/ipc4-topology.c | 2 +- sound/usb/quirks.c | 4 + tools/objtool/Makefile | 2 +- tools/objtool/arch/x86/decode.c | 68 ++-- tools/objtool/check.c | 14 + tools/objtool/klp-diff.c | 26 +- tools/perf/util/metricgroup.c | 6 +- .../testing/selftests/bpf/prog_tests/reg_bounds.c | 62 +++- .../testing/selftests/bpf/progs/exceptions_fail.c | 9 +- .../selftests/mount_setattr/mount_setattr_test.c | 2 +- 349 files changed, 3991 insertions(+), 1331 deletions(-)

1 hour, 56 minutes

[PATCH 6.18 000/309] 6.18.21-rc1 review

by Greg Kroah-Hartman

This is the start of the stable review cycle for the 6.18.21 release. There are 309 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know. Responses should be made by Thu, 02 Apr 2026 16:16:56 +0000. Anything received after that time might be too late. The whole patch series can be found in one patch at: https://www.kernel.org/pub/linux/kernel/v6.x/stable-review/patch-6.18.21-rc… or in the git tree and branch at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-6.18.y and the diffstat can be found below. thanks, greg k-h ------------- Pseudo-Shortlog of commits: Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> Linux 6.18.21-rc1 Luiz Augusto von Dentz <luiz.von.dentz(a)intel.com> Bluetooth: L2CAP: Fix regressions caused by reusing ident Hao-Yu Yang <naup96721(a)gmail.com> futex: Fix UaF between futex_key_to_node_opt() and vma_replace_policy() Peter Zijlstra <peterz(a)infradead.org> futex: Require sys_futex_requeue() to have identical flags Biju Das <biju.das.jz(a)bp.renesas.com> irqchip/renesas-rzv2h: Fix error path in rzv2h_icu_probe_common() David Howells <dhowells(a)redhat.com> netfs: Fix the handling of stream->front by removing it GuoHan Zhao <zhaoguohan(a)kylinos.cn> xen/privcmd: unregister xenstore notifier on module exit Filipe Manana <fdmanana(a)suse.com> btrfs: fix lost error when running device stats on multiple devices fs Shin'ichiro Kawasaki <shinichiro.kawasaki(a)wdc.com> btrfs: fix leak of kobject name for sub-group space_info Mark Harmstone <mark(a)harmstone.com> btrfs: fix super block offset in error message in btrfs_validate_super() David Howells <dhowells(a)redhat.com> netfs: Fix read abandonment during retry Christian Brauner <brauner(a)kernel.org> selftests/mount_setattr: increase tmpfs size for idmapped mount tests Tomi Valkeinen <tomi.valkeinen(a)ideasonboard.com> dmaengine: xilinx_dma: Fix reset related timeout with two-channel AXIDMA Marek Vasut <marex(a)nabladev.com> dmaengine: xilinx: xilinx_dma: Fix unmasked residue subtraction Marek Vasut <marex(a)nabladev.com> dmaengine: xilinx: xilinx_dma: Fix residue calculation for cyclic DMA Marek Vasut <marex(a)nabladev.com> dmaengine: xilinx: xilinx_dma: Fix dma_device directions Tuo Li <islituo(a)gmail.com> dmaengine: idxd: fix possible wrong descriptor completion in llist_abort_desc() Deepanshu Kartikey <kartikey406(a)gmail.com> netfs: Fix NULL pointer dereference in netfs_unbuffered_write() on retry Deepanshu Kartikey <kartikey406(a)gmail.com> netfs: Fix kernel BUG in netfs_limit_iter() for ITER_KVEC iterators Alexander Stein <alexander.stein(a)ew.tq-group.com> dmaengine: xilinx: xdma: Fix regmap init error handling LUO Haowen <luo-hw(a)foxmail.com> dmaengine: dw-edma: Fix multiple times setting of the CYCLE_STATE and CYCLE_BIT bits for HDMA. Felix Gu <ustc.gu(a)gmail.com> phy: ti: j721e-wiz: Fix device node reference leak in wiz_get_lane_phy_types() Vinicius Costa Gomes <vinicius.gomes(a)intel.com> dmaengine: idxd: Fix leaking event log memory Vinicius Costa Gomes <vinicius.gomes(a)intel.com> dmaengine: idxd: Fix freeing the allocated ida too late Vinicius Costa Gomes <vinicius.gomes(a)intel.com> dmaengine: idxd: Fix memory leak when a wq is reset Vinicius Costa Gomes <vinicius.gomes(a)intel.com> dmaengine: idxd: Fix not releasing workqueue on .release() Vinicius Costa Gomes <vinicius.gomes(a)intel.com> dmaengine: idxd: Fix possible invalid memory access after FLR Vinicius Costa Gomes <vinicius.gomes(a)intel.com> dmaengine: idxd: Fix crash when the event log is disabled Lorenzo Stoakes (Oracle) <ljs(a)kernel.org> mm/mseal: update VMA end correctly on merge Werner Kasselman <werner(a)verivus.com> ksmbd: fix use-after-free and NULL deref in smb_grant_oplock() Jinjiang Tu <tujinjiang(a)huawei.com> mm/huge_memory: fix folio isn't locked in softleaf_to_folio() Josh Law <objecting(a)objecting.org> mm/damon/sysfs: fix param_ctx leak on damon_sysfs_new_test_ctx() failure SeongJae Park <sj(a)kernel.org> mm/damon/core: avoid use of half-online-committed context SeongJae Park <sj(a)kernel.org> mm/damon/stat: monitor all System RAM resources Yang Wang <kevinyang.wang(a)amd.com> drm/amd/pm: fix amdgpu_irq enabled counter unbalanced on smu v11.0 Benno Lossin <lossin(a)kernel.org> rust: pin-init: internal: init: document load-bearing fact of field accessors Peter Zijlstra <peterz(a)infradead.org> unwind_user/x86: Fix arch=um build Hari Bathini <hbathini(a)linux.ibm.com> powerpc64/bpf: do not increment tailcall count when prog is NULL Markus Niebel <Markus.Niebel(a)ew.tq-group.com> arm64: dts: imx8mn-tqma8mqnl: fix LDO5 power off Theodore Ts'o <tytso(a)mit.edu> ext4: always drain queued discard work in ext4_mb_release() Baokun Li <libaokun(a)linux.alibaba.com> ext4: fix iloc.bh leak in ext4_fc_replay_inode() error paths Theodore Ts'o <tytso(a)mit.edu> ext4: handle wraparound when searching for blocks for indirect mapped blocks Zqiang <qiang.zhang(a)linux.dev> ext4: fix the might_sleep() warnings in kvfree() Jiayuan Chen <jiayuan.chen(a)shopee.com> ext4: fix use-after-free in update_super_work when racing with umount Helen Koike <koike(a)igalia.com> ext4: reject mount if bigalloc with s_first_data_block != 0 Ye Bin <yebin10(a)huawei.com> ext4: avoid allocate block from corrupted group in ext4_mb_find_by_goal() Edward Adam Davis <eadavis(a)qq.com> ext4: avoid infinite loops caused by residual data Tejas Bharambe <tejas.bharambe(a)outlook.com> ext4: validate p_idx bounds in ext4_ext_correct_indexes Ye Bin <yebin10(a)huawei.com> ext4: test if inode's all dirty pages are submitted to disk Li Chen <me(a)linux.beauty> ext4: publish jinode after initialization Yuto Ohnuki <ytohnuki(a)amazon.com> ext4: replace BUG_ON with proper error handling in ext4_read_inline_folio Jan Kara <jack(a)suse.cz> ext4: make recently_deleted() properly work with lazy itable initialization Jan Kara <jack(a)suse.cz> ext4: fix fsync(2) for nojournal mode Zhang Yi <yi.zhang(a)huawei.com> ext4: do not check fast symlink during orphan recovery Jan Kara <jack(a)suse.cz> ext4: fix stale xarray tags after writeback Deepanshu Kartikey <kartikey406(a)gmail.com> ext4: convert inline data to extents when truncate exceeds inline size Simon Weber <simon.weber.39(a)gmail.com> ext4: fix journal credit check when setting fscrypt context Darrick J. Wong <djwong(a)kernel.org> xfs: remove file_path tracepoint data Darrick J. Wong <djwong(a)kernel.org> xfs: don't irele after failing to iget in xfs_attri_recover_work Long Li <leo.lilong(a)huawei.com> xfs: fix ri_total validation in xlog_recover_attri_commit_pass2 hongao <hongao(a)uniontech.com> xfs: scrub: unlock dquot before early return in quota scrub Yuto Ohnuki <ytohnuki(a)amazon.com> xfs: avoid dereferencing log items after push callbacks Yuto Ohnuki <ytohnuki(a)amazon.com> xfs: save ailp before dropping the AIL lock in push callbacks Yuto Ohnuki <ytohnuki(a)amazon.com> xfs: stop reclaim before pushing AIL during unmount Max Boone <mboone(a)akamai.com> mm/pagewalk: fix race between concurrent split and refault Josh Law <objecting(a)objecting.org> mm/damon/sysfs: check contexts->nr in repeat_call_fn Josh Law <objecting(a)objecting.org> mm/damon/sysfs: check contexts->nr before accessing contexts_arr[0] Asad Kamal <asad.kamal(a)amd.com> drm/amd/pm: Return -EOPNOTSUPP for unsupported OD_MCLK on smu_v13_0_6 Huacai Chen <chenhuacai(a)kernel.org> LoongArch: KVM: Handle the case that EIOINTC's coremap is empty Huacai Chen <chenhuacai(a)kernel.org> LoongArch: KVM: Make kvm_get_vcpu_by_cpuid() more robust Huacai Chen <chenhuacai(a)kernel.org> LoongArch: Workaround LS2K/LS7A GPU DMA hang bug Xi Ruoyao <xry111(a)xry111.site> LoongArch: vDSO: Emit GNU_EH_FRAME correctly Li Jun <lijun01(a)kylinos.cn> LoongArch: Fix missing NULL checks for kstrdup() Ville Syrjälä <ville.syrjala(a)linux.intel.com> drm/i915: Unlink NV12 planes earlier Ville Syrjälä <ville.syrjala(a)linux.intel.com> drm/i915: Order OP vs. timeout correctly in __wait_for() Imre Deak <imre.deak(a)intel.com> drm/i915/dp_tunnel: Fix error handling when clearing stream BW in atomic state Alex Hung <alex.hung(a)amd.com> drm/amd/display: Fix drm_edid leak in amdgpu_dm Eric Huang <jinhuieric.huang(a)amd.com> drm/amdgpu: prevent immediate PASID reuse case Claudiu Beznea <claudiu.beznea(a)tuxon.dev> dmaengine: sh: rz-dmac: Move CHCTRL updates under spinlock Claudiu Beznea <claudiu.beznea(a)tuxon.dev> dmaengine: sh: rz-dmac: Protect the driver specific lists Joy Zou <joy.zou(a)nxp.com> dmaengine: fsl-edma: fix channel parameter config for fixed channel requests Stefan Eichenberger <stefan.eichenberger(a)toradex.com> i2c: imx: ensure no clock is generated after last read Stefan Eichenberger <stefan.eichenberger(a)toradex.com> i2c: imx: fix i2c issue when reading multiple messages Davidlohr Bueso <dave(a)stgolabs.net> futex: Clear stale exiting pointer in futex_lock_pi() retry path Pratap Nirujogi <pratap.nirujogi(a)amd.com> i2c: designware: amdisp: Fix resume-probe race condition issue Jassi Brar <jassisinghbrar(a)gmail.com> irqchip/qcom-mpm: Add missing mailbox TX done acknowledgment Milos Nikic <nikic.milos(a)gmail.com> jbd2: gracefully abort on checkpointing state corruptions Sean Christopherson <seanjc(a)google.com> KVM: x86/mmu: Only WARN in direct MMUs when overwriting shadow-present SPTE Sean Christopherson <seanjc(a)google.com> KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE Kevin Hao <haokexin(a)gmail.com> net: macb: Use dev_consume_skb_any() to free TX SKBs Kevin Hao <haokexin(a)gmail.com> net: macb: Protect access to net_device::ip_ptr with RCU lock Kevin Hao <haokexin(a)gmail.com> net: macb: Move devm_{free,request}_irq() out of spin lock area Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> scsi: ses: Handle positive SCSI error from ses_recv_diag() Tyllis Xu <livelycarpet87(a)gmail.com> scsi: ibmvfc: Fix OOB access in ibmvfc_discover_targets_done() Amir Goldstein <amir73il(a)gmail.com> ovl: fix wrong detection of 32bit inode numbers Fei Lv <feilv(a)asrmicro.com> ovl: make fsync after metadata copy-up opt-in mount option Abel Vesa <abel.vesa(a)oss.qualcomm.com> phy: qcom: qmp-ufs: Fix SM8650 PCS table for Gear 4 Nikunj A Dadhania <nikunj(a)amd.com> x86/fred: Fix early boot failures on SEV-ES/SNP guests Borislav Petkov (AMD) <bp(a)alien8.de> x86/cpu: Remove X86_CR4_FRED from the CR4 pinned bits mask Nikunj A Dadhania <nikunj(a)amd.com> x86/cpu: Enable FSGSBASE early in cpu_init_exception_handling() Joanne Koong <joannelkoong(a)gmail.com> writeback: don't block sync for filesystems with no data integrity guarantees Zhan Xusheng <zhanxusheng1024(a)gmail.com> alarmtimer: Fix argument order in alarm_timer_forward() Jiucheng Xu <jiucheng.xu(a)amlogic.com> erofs: add GFP_NOIO in the bio completion if needed xietangxin <xietangxin(a)yeah.net> virtio_net: Fix UAF on dst_ops when IFF_XMIT_DST_RELEASE is cleared and napi_tx is false Zubin Mithra <zsm(a)google.com> virt: tdx-guest: Fix handling of host controlled 'quote' buffer length Paul Moses <p(a)1g4.org> xfrm: iptfs: only publish mode_data after clone setup Roshan Kumar <roshaen09(a)gmail.com> xfrm: iptfs: validate inner IPv4 header length in IPTFS payload Yuchan Nam <entropy1110(a)gmail.com> media: mc, v4l2: serialize REINIT and REQBUFS with req_queue_mutex Sanman Pradhan <psanman(a)juniper.net> hwmon: (peci/cputemp) Fix off-by-one in cputemp_is_visible() Sanman Pradhan <psanman(a)juniper.net> hwmon: (peci/cputemp) Fix crit_hyst returning delta instead of absolute temperature Sanman Pradhan <psanman(a)juniper.net> hwmon: (pmbus/isl68137) Add mutex protection for AVS enable sysfs attributes Sanman Pradhan <psanman(a)juniper.net> hwmon: (pmbus/ina233) Fix error handling and sign extension in shunt voltage read Marc Zyngier <maz(a)kernel.org> KVM: arm64: Discard PC update state on vcpu reset Srinivas Pandruvada <srinivas.pandruvada(a)linux.intel.com> platform/x86: ISST: Correct locked bit width Abhijit Gangurde <abhijit.gangurde(a)amd.com> RDMA/ionic: Preserve and set Ethernet source MAC after ib_ud_header_init() Srinivas Pandruvada <srinivas.pandruvada(a)linux.intel.com> thermal: intel: int340x: soc_slider: Set offset only for balanced mode Charles Mirabile <cmirabil(a)redhat.com> kbuild: Delete .builtin-dtbs.S when running make clean Viresh Kumar <viresh.kumar(a)linaro.org> cpufreq: conservative: Reset requested_freq on limits change Marc Kleine-Budde <mkl(a)pengutronix.de> can: netlink: can_changelink(): add missing error handling to call can_ctrlmode_changelink() Oliver Hartkopp <socketcan(a)hartkopp.net> can: isotp: fix tx.buf use-after-free in isotp_sendmsg() Ali Norouzi <ali.norouzi(a)keysight.com> can: gw: fix OOB heap access in cgw_csum_crc8_rel() Peter Ujfalusi <peter.ujfalusi(a)linux.intel.com> ASoC: SOF: ipc4-topology: Allow bytes controls without initial payload Guangshuo Li <lgs201920130244(a)gmail.com> ASoC: sma1307: fix double free of devm_kzalloc() memory Srinivas Kandagatla <srinivas.kandagatla(a)oss.qualcomm.com> ASoC: codecs: wcd934x: fix typo in dt parsing Alexey Nepomnyashih <sdl(a)nppct.ru> ALSA: firewire-lib: fix uninitialized local variable Zhang Heng <zhangheng(a)kylinos.cn> ALSA: hda/realtek: add quirk for ASUS Strix G16 G615JMR Mario Limonciello <mario.limonciello(a)amd.com> Revert "ALSA: hda/intel: Add MSI X870E Tomahawk to denylist" Hyunwoo Kim <imv4bel(a)gmail.com> ksmbd: do not expire session on binding failure Werner Kasselman <werner(a)verivus.com> ksmbd: fix memory leaks and NULL deref in smb2_lock() Namjae Jeon <linkinjeon(a)kernel.org> ksmbd: fix potencial OOB in get_file_all_info() for compound requests Namjae Jeon <linkinjeon(a)kernel.org> ksmbd: replace hardcoded hdr2_len with offsetof() in smb2_calc_max_out_buf_len() Matthew Auld <matthew.auld(a)intel.com> drm/xe: always keep track of remap prev/next Luo Haiyang <luo.haiyang(a)zte.com.cn> tracing: Fix potential deadlock in cpu hotplug with osnoise Vasily Gorbik <gor(a)linux.ibm.com> s390/entry: Scrub r12 register on kernel entry Vasily Gorbik <gor(a)linux.ibm.com> s390/barrier: Make array_index_mask_nospec() __always_inline Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> s390/syscalls: Add spectre boundary for syscall dispatch table Geoffrey D. Bennett <g(a)b4.vu> ALSA: usb-audio: Exclude Scarlett 2i4 1st Gen from SKIP_IFACE_SETUP Marc Kleine-Budde <mkl(a)pengutronix.de> spi: spi-fsl-lpspi: fix teardown order issue (UAF) Jihed Chaibi <jihed.chaibi.dev(a)gmail.com> ASoC: adau1372: Fix clock leak on PLL lock failure Jihed Chaibi <jihed.chaibi.dev(a)gmail.com> ASoC: adau1372: Fix unchecked clk_prepare_enable() return value Marc Buerg <buermarc(a)googlemail.com> sysctl: fix uninitialized variable in proc_do_large_bitmap Guenter Roeck <linux(a)roeck-us.net> hwmon: (pmbus/core) Protect regulator operations with mutex Guenter Roeck <linux(a)roeck-us.net> hwmon: (pmbus) Introduce the concept of "write-only" attributes Guenter Roeck <linux(a)roeck-us.net> hwmon: (pmbus) Mark lowest/average/highest/rated attributes as read-only Sanman Pradhan <psanman(a)juniper.net> hwmon: (adm1177) fix sysfs ABI violation and current unit conversion Srinivasan Shanmugam <srinivasan.shanmugam(a)amd.com> drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib Weiming Shi <bestswngs(a)gmail.com> ACPI: EC: clean up handlers on probe failure in acpi_ec_setup() Danilo Krummrich <dakr(a)kernel.org> spi: use generic driver_override infrastructure Matt Roper <matthew.d.roper(a)intel.com> drm/xe: Implement recent spec updates to Wa_16025250150 Alice Ryhl <aliceryhl(a)google.com> rust: regulator: do not assume that regulator_get() returns non-null Jihed Chaibi <jihed.chaibi.dev(a)gmail.com> ASoC: dt-bindings: stm32: Fix incorrect compatible string in stm32h7-sai match Yussuf Khalil <dev(a)pp3345.net> drm/amd/display: Do not skip unrelated mode changes in DSC validation Felix Gu <ustc.gu(a)gmail.com> spi: meson-spicc: Fix double-put in remove path Cezary Rojewski <cezary.rojewski(a)intel.com> ASoC: Intel: catpt: Fix the device initialization Felix Gu <ustc.gu(a)gmail.com> spi: sn-f-ospi: Fix resource leak in f_ospi_probe() Youngjun Park <youngjun.park(a)lge.com> PM: sleep: Drop spurious WARN_ON() from pm_restore_gfp_mask() Alberto Garcia <berto(a)igalia.com> PM: hibernate: Drain trailing zero pages on userspace restore Samasth Norway Ananda <samasth.norway.ananda(a)oracle.com> drm/i915/gmbus: fix spurious timeout on 512-byte burst reads Luca Leonardo Scorcia <l.scorcia(a)gmail.com> drm/mediatek: dsi: Store driver data before invoking mipi_dsi_host_register Mike Rapoport (Microsoft) <rppt(a)kernel.org> x86/efi: efi_unmap_boot_services: fix calculation of ranges_to_free size Yihang Li <liyihang9(a)huawei.com> scsi: scsi_transport_sas: Fix the maximum channel scanning issue Shengjiu Wang <shengjiu.wang(a)nxp.com> ASoC: fsl: imx-card: initialize playback_only and capture_only Shiraz Saleem <shiraz.saleem(a)intel.com> RDMA/irdma: Harden depth calculation functions Tatyana Nikolova <tatyana.e.nikolova(a)intel.com> RDMA/irdma: Return EINVAL for invalid arp index error Anil Samal <anil.samal(a)intel.com> RDMA/irdma: Fix deadlock during netdev reset with active connections Tatyana Nikolova <tatyana.e.nikolova(a)intel.com> RDMA/irdma: Remove reset check from irdma_modify_qp_to_err() Ivan Barrera <ivan.d.barrera(a)intel.com> RDMA/irdma: Clean up unnecessary dereference of event->cm_node Tatyana Nikolova <tatyana.e.nikolova(a)intel.com> RDMA/irdma: Remove a NOP wait_event() in irdma_modify_qp_roce() Tatyana Nikolova <tatyana.e.nikolova(a)intel.com> RDMA/irdma: Update ibqp state to error if QP is already in error state Jacob Moroni <jmoroni(a)google.com> RDMA/irdma: Initialize free_qp completion before using it Geoffrey D. Bennett <g(a)b4.vu> ALSA: usb-audio: Exclude Scarlett 2i2 1st Gen from SKIP_IFACE_SETUP Ethan Tidmore <ethantidmore06(a)gmail.com> RDMA/efa: Fix possible deadlock Chuck Lever <chuck.lever(a)oracle.com> RDMA/rw: Fall back to direct SGE on MR pool exhaustion Sean Rhodes <sean(a)starlabs.systems> ALSA: hda/realtek: Sequence GPIO2 on Star Labs StarFighter Andy Shevchenko <andriy.shevchenko(a)linux.intel.com> regmap: Synchronize cache for the page selector Yonatan Nachum <ynachum(a)amazon.com> RDMA/efa: Fix use of completion ctx after free Yonatan Nachum <ynachum(a)amazon.com> RDMA/efa: Improve admin completion context state machine Yonatan Nachum <ynachum(a)amazon.com> RDMA/efa: Check stored completion CTX command ID with received one Paolo Valerio <pvalerio(a)redhat.com> net: macb: use the current queue number for stats David Carlier <devnexen(a)gmail.com> netfilter: ctnetlink: use netlink policy range checks Weiming Shi <bestswngs(a)gmail.com> netfilter: nf_conntrack_sip: fix use of uninitialized rtp_addr in process_sdp Pablo Neira Ayuso <pablo(a)netfilter.org> netfilter: nf_conntrack_expect: skip expectations in other netns via proc Pablo Neira Ayuso <pablo(a)netfilter.org> netfilter: nft_set_rbtree: revisit array resize logic Ren Wei <n05ec(a)lzu.edu.cn> netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() Weiming Shi <bestswngs(a)gmail.com> netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD Chuck Lever <chuck.lever(a)oracle.com> tls: Purge async_hold in tls_decrypt_async_wait() Pengpeng Hou <pengpeng(a)iscas.ac.cn> Bluetooth: btusb: clamp SCO altsetting table indices Hyunwoo Kim <imv4bel(a)gmail.com> Bluetooth: L2CAP: Fix ERTM re-init and zero pdu_len infinite loop Hyunwoo Kim <imv4bel(a)gmail.com> Bluetooth: L2CAP: Fix deadlock in l2cap_conn_del() Luiz Augusto von Dentz <luiz.von.dentz(a)intel.com> Bluetooth: L2CAP: Fix not tracking outstanding TX ident Cen Zhang <zzzccc427(a)gmail.com> Bluetooth: btintel: serialize btintel_hw_error() with hci_req_sync_lock Zhang Chen <zhangchen01(a)kylinos.cn> Bluetooth: L2CAP: Fix send LE flow credits in ACL link Miguel Ojeda <ojeda(a)kernel.org> dma-mapping: add missing `inline` for `dma_free_attrs` Sabrina Dubroca <sd(a)queasysnail.net> rtnetlink: fix leak of SRCU struct in rtnl_link_register Thangaraj Samynathan <thangaraj.s(a)microchip.com> net: lan743x: fix duplex configuration in mac_link_up Jiayuan Chen <jiayuan.chen(a)shopee.com> team: fix header_ops type confusion with non-Ethernet ports Xuan Zhuo <xuanzhuo(a)linux.alibaba.com> virtio-net: correct hdr_len handling for tunnel gso Xuan Zhuo <xuanzhuo(a)linux.alibaba.com> virtio-net: correct hdr_len handling for VIRTIO_NET_F_GUEST_HDRLEN Wei Fang <wei.fang(a)nxp.com> net: enetc: fix the output issue of 'ethtool --show-ring' Martin KaFai Lau <martin.lau(a)kernel.org> udp: Fix wildcard bind conflict check when using hash2 Qingfang Deng <dqfext(a)gmail.com> net: airoha: add RCU lock around dev_fill_forward_path Yochai Eisenrich <echelonh(a)gmail.com> net: fix fanout UAF in packet_release() via NETDEV_UP race Kuniyuki Iwashima <kuniyu(a)google.com> ipv6: Don't remove permanent routes with exceptions from tb6_gc_hlist. Kuniyuki Iwashima <kuniyu(a)google.com> ipv6: Remove permanent routes from tb6_gc_hlist when all exceptions expire. Kohei Enju <kohei(a)enjuk.jp> iavf: fix out-of-bounds writes in iavf_get_ethtool_stats() Petr Oros <poros(a)redhat.com> ice: use ice_update_eth_stats() for representor stats Petr Oros <poros(a)redhat.com> ice: fix inverted ready check for VF representors David McFarland <corngood(a)gmail.com> platform/x86: intel-hid: disable wakeup_mode during hibernation Alok Tiwari <alok.a.tiwari(a)oracle.com> platform/olpc: olpc-xo175-ec: Fix overflow error message to print inlen Nathan Chancellor <nathan(a)kernel.org> platform/x86: lenovo: wmi-gamezone: Drop gz_chain_head Li RongQing <lirongqing(a)baidu.com> platform/x86: ISST: Check HWP support before MSR access Justin Chen <justin.chen(a)broadcom.com> net: bcmasp: fix double disable of clk Justin Chen <justin.chen(a)broadcom.com> net: bcmasp: fix double free of WoL irq Justin Chen <justin.chen(a)broadcom.com> net: bcmasp: streamline early exit in probe Sabrina Dubroca <sd(a)queasysnail.net> rtnetlink: count IFLA_INFO_SLAVE_KIND in if_nlmsg_size Sabrina Dubroca <sd(a)queasysnail.net> rtnetlink: count IFLA_PARENT_DEV_{NAME,BUS_NAME} in if_nlmsg_size Qi Tang <tpluszz77(a)gmail.com> net/smc: fix double-free of smc_spd_priv when tee() duplicates splice pipe buffer Yang Yang <n05ec(a)lzu.edu.cn> openvswitch: validate MPLS set/set_masked payload length Yang Yang <n05ec(a)lzu.edu.cn> openvswitch: defer tunnel netdev_put to RCU release Toke Høiland-Jørgensen <toke(a)redhat.com> net: openvswitch: Avoid releasing netdev before teardown completes Jakub Kicinski <kuba(a)kernel.org> nfc: nci: fix circular locking dependency in nci_close_device Mohammad Heib <mheib(a)redhat.com> ionic: fix persistent MAC address override on PF Luca Leonardo Scorcia <l.scorcia(a)gmail.com> pinctrl: mediatek: common: Fix probe failure for devices without EINT Helen Koike <koike(a)igalia.com> Bluetooth: L2CAP: Fix null-ptr-deref on l2cap_sock_ready_cb Anas Iqbal <mohd.abd.6602(a)gmail.com> Bluetooth: hci_ll: Fix firmware leak on error path Luiz Augusto von Dentz <luiz.von.dentz(a)intel.com> Bluetooth: MGMT: Fix dangling pointer on mgmt_add_adv_patterns_monitor_complete Hyunwoo Kim <imv4bel(a)gmail.com> Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold Hyunwoo Kim <imv4bel(a)gmail.com> Bluetooth: L2CAP: Validate PDU length before reading SDU length in l2cap_ecred_data_rcv() Minseo Park <jacob.park.9436(a)gmail.com> Bluetooth: L2CAP: Fix stack-out-of-bounds read in l2cap_ecred_conn_req Amelie Delaunay <amelie.delaunay(a)foss.st.com> pinctrl: stm32: fix HDP driver dependency on GPIO_GENERIC Oliver Hartkopp <socketcan(a)hartkopp.net> can: statistics: add missing atomic access in hot path Sheng Yong <shengyong1(a)xiaomi.com> erofs: set fileio bio failed in short read case Shigeru Yoshida <syoshida(a)redhat.com> dma: swiotlb: add KMSAN annotations to swiotlb_bounce() Eric Dumazet <edumazet(a)google.com> af_key: validate families in pfkey_send_migrate() Minwoo Ra <raminwo0202(a)gmail.com> xfrm: prevent policy_hthresh.work from racing with netns teardown Hyunwoo Kim <imv4bel(a)gmail.com> xfrm: Fix work re-schedule after cancel in xfrm_nat_keepalive_net_fini() Dmitry Torokhov <dmitry.torokhov(a)gmail.com> pinctrl: renesas: rza1: Normalize return value of gpio_get() Fernando Fernandez Mancera <fmancera(a)suse.de> xfrm: iptfs: fix skb_put() panic on non-linear skb during reassembly Felix Gu <ustc.gu(a)gmail.com> pinctrl: renesas: rzt2h: Fix device node leak in rzt2h_gpio_register() Sabrina Dubroca <sd(a)queasysnail.net> esp: fix skb leak with espintcp and async crypto Sabrina Dubroca <sd(a)queasysnail.net> xfrm: call xdo_dev_state_delete during state update Sabrina Dubroca <sd(a)queasysnail.net> xfrm: fix the condition on x->pcpu_num in xfrm_sa_len Sabrina Dubroca <sd(a)queasysnail.net> xfrm: add missing extack for XFRMA_SA_PCPU in add_acquire and allocspi Peter Yin <peteryin.openbmc(a)gmail.com> i3c: master: dw-i3c: Fix missing of_node for virtual I2C adapter Zhang Heng <zhangheng(a)kylinos.cn> ALSA: hda/realtek: add quirk for ASUS UM6702RC Alan Borzeszkowski <alan.borzeszkowski(a)linux.intel.com> spi: intel-pci: Add support for Nova Lake mobile SPI flash Jie Deng <dengjie03(a)kylinos.cn> usb: core: new quirk to handle devices with zero configurations Yang Wang <kevinyang.wang(a)amd.com> drm/amdgpu: fix gpu idle power consumption issue for gfx v12 Chaitanya Kulkarni <kch(a)nvidia.com> nvmet: move async event work off nvmet-wq Josh Poimboeuf <jpoimboe(a)kernel.org> objtool: Handle Clang RSP musical chairs Uzair Mughal <contact(a)uzair.is-a.dev> ALSA: hda/realtek: Add headset jack quirk for Thinkpad X390 Zhang Heng <zhangheng(a)kylinos.cn> ALSA: hda/realtek: Add quirk for Gigabyte Technology to fix headphone Liucheng Lu <luliucheng100(a)outlook.com> ALSA: hda/realtek: add HP Laptop 14s-dr5xxx mute LED quirk Hari Bathini <hbathini(a)linux.ibm.com> powerpc64/ftrace: fix OOL stub count with clang Boris Burkov <boris(a)bur.io> btrfs: set BTRFS_ROOT_ORPHAN_CLEANUP during subvol create zhidao su <soolaugust(a)gmail.com> sched_ext: Use WRITE_ONCE() for the write side of dsq->seq update Günther Noack <gnoack(a)google.com> HID: apple: avoid memory leak in apple_report_fixup() Eduard Zingerman <eddyz87(a)gmail.com> bpf: Fix u32/s32 bounds when ranges cross min/max boundary Simon Trimmer <simont(a)opensource.cirrus.com> ASoC: amd: acp: Add ACP6.3 match entries for Cirrus Logic parts Maarten Lankhorst <dev(a)lankhorst.se> drm/ttm/tests: Fix build failure on PREEMPT_RT wangdicheng <wangdicheng(a)kylinos.cn> ALSA: hda/senary: Ensure EAPD is enabled during init Nilay Shroff <nilay(a)linux.ibm.com> block: break pcpu_alloc_mutex dependency on freeze_lock Isaac J. Manjarres <isaacmanjarres(a)google.com> dma-buf: Include ioctl.h in UAPI header Richard Fitzgerald <rf(a)opensource.cirrus.com> ASoC: cs35l56: Only patch ASP registers if the DAI is part of a DAIlink Mark Brown <broonie(a)kernel.org> ASoC: fsl_easrc: Fix event generation in fsl_easrc_iec958_put_bits() Sheetal <sheetal(a)nvidia.com> ALSA: hda/hdmi: Add Tegra238 HDA codec device ID Oliver Freyermuth <o.freyermuth(a)googlemail.com> ASoC: Intel: sof_sdw: Add quirk for Alienware Area 51 (2025) 0CCD SKU Florian Fuchs <fuchsfl(a)gmail.com> scsi: devinfo: Add BLIST_SKIP_IO_HINTS for Iomega ZIP Shuming Fan <shumingf(a)realtek.com> ASoC: rt1321: fix DMIC ch2/3 mask issue Ranjan Kumar <ranjan.kumar(a)broadcom.com> scsi: mpi3mr: Clear reset history on ready and recheck state after timeout Mark Brown <broonie(a)kernel.org> ASoC: fsl_easrc: Fix event generation in fsl_easrc_iec958_set_reg() Ihor Solodrai <ihor.solodrai(a)linux.dev> module: Fix kernel panic when a symbol st_shndx is out of bounds Denis Benato <denis.benato(a)linux.dev> HID: asus: add xg mobile 2023 external hardware support Romain Sioen <romain.sioen(a)microchip.com> HID: mcp2221: cancel last I2C command on read error Antheas Kapenekakis <lkml(a)antheas.dev> platform/x86: oxpec: Add support for OneXPlayer X1 Air Antheas Kapenekakis <lkml(a)antheas.dev> platform/x86: oxpec: Add support for Aokzoe A2 Pro Thomas Weißschuh <thomas.weissschuh(a)linutronix.de> kbuild: install-extmod-build: Package resolve_btfids if necessary Valentin Spreckels <valentin(a)spreckels.dev> net: usb: r8152: add TRENDnet TUC-ET2G Antheas Kapenekakis <lkml(a)antheas.dev> platform/x86: oxpec: Add support for OneXPlayer X1z Takashi Iwai <tiwai(a)suse.de> HID: apple: Add EPOMAKER TH87 to the non-apple keyboards list Antheas Kapenekakis <lkml(a)antheas.dev> platform/x86: oxpec: Add support for OneXPlayer APEX Zhang Lixu <lixu.zhang(a)intel.com> HID: intel-ish-hid: ipc: Add Nova Lake-H/S PCI device IDs Günther Noack <gnoack(a)google.com> HID: magicmouse: avoid memory leak in magicmouse_report_fixup() Julius Lehmann <lehmanju(a)devpi.de> HID: magicmouse: fix battery reporting for Apple Magic Trackpad 2 Keith Busch <kbusch(a)kernel.org> nvme-pci: ensure we're polling a polled queue Hans de Goede <johannes.goede(a)oss.qualcomm.com> platform/x86: touchscreen_dmi: Add quirk for y-inverted Goodix touchscreen on SUPI S10 Leif Skunberg <diamondback(a)cohunt.app> platform/x86: intel-hid: Enable 5-button array on ThinkPad X1 Fold 16 Gen 1 Krishna Chomal <krishna.chomal108(a)gmail.com> platform/x86: hp-wmi: Add Omen 16-xd0xxx fan and thermal support Daniel Hodges <hodgesd(a)meta.com> nvme-fabrics: use kfree_sensitive() for DHCHAP secrets Keith Busch <kbusch(a)kernel.org> nvme-pci: cap queue creation to used queues Peter Metz <peter.metz(a)unarin.com> platform/x86: intel-hid: Add Dell 14 Plus 2-in-1 to dmi_vgbs_allow_list Günther Noack <gnoack(a)google.com> HID: asus: avoid memory leak in asus_report_fixup() Krishna Chomal <krishna.chomal108(a)gmail.com> platform/x86: hp-wmi: Add Omen 16-wf0xxx fan and thermal support Xuewen Yan <xuewen.yan(a)unisoc.com> tracing: Revert "tracing: Remove pid in task_rename tracing output" Daniel Wade <danjwade95(a)gmail.com> bpf: Fix unsound scalar forking in maybe_fork_scalars() for BPF_OR Jenny Guanni Qu <qguanni(a)gmail.com> bpf: Fix undefined behavior in interpreter sdiv/smod for INT_MIN Ihor Solodrai <ihor.solodrai(a)linux.dev> bpf: Fix exception exit lock checking for subprogs Cui Chao <cuichao1753(a)phytium.com.cn> cxl: Adjust the startup priority of cxl_pmem to be higher than that of cxl_acpi Kumar Kartikeya Dwivedi <memxor(a)gmail.com> bpf: Release module BTF IDR before module unload Danilo Krummrich <dakr(a)kernel.org> driver core: platform: use generic driver_override infrastructure Danilo Krummrich <dakr(a)kernel.org> driver core: generalize driver_override in struct device Danilo Krummrich <dakr(a)kernel.org> sh: platform_early: remove pdev->driver_override check Danilo Krummrich <dakr(a)kernel.org> hwmon: axi-fan: don't use driver_override as IRQ name Smita Koralahalli <Smita.KoralahalliChannabasappa(a)amd.com> cxl/hdm: Avoid incorrect DVSEC fallback when HDM decoders are enabled Janosch Frank <frankja(a)linux.ibm.com> s390/mm: Add missing secure storage access fixups for donated memory Peter Zijlstra <peterz(a)infradead.org> perf: Make sure to use pmu_ctx->pmu for groups Peter Zijlstra <peterz(a)infradead.org> x86/perf: Make sure to program the counter value for stopped events on migration Sachin Kumar <xcyfun(a)protonmail.com> bpf: Fix constant blinding for PROBE_MEM32 stores Yazhou Tang <tangyazhou518(a)outlook.com> bpf: Reset register ID for BPF_END value tracking Alison Schofield <alison.schofield(a)intel.com> cxl/port: Fix use after free of parent_port in cxl_detach_ep() ------------- Diffstat: Documentation/admin-guide/kernel-parameters.txt | 3 + .../devicetree/bindings/sound/st,stm32-sai.yaml | 2 +- Documentation/filesystems/overlayfs.rst | 50 +++ Documentation/hwmon/adm1177.rst | 8 +- Documentation/hwmon/peci-cputemp.rst | 10 +- Makefile | 6 +- .../boot/dts/freescale/imx8mn-tqma8mqnl-mba8mx.dts | 13 +- .../arm64/boot/dts/freescale/imx8mn-tqma8mqnl.dtsi | 22 ++ arch/arm64/kvm/reset.c | 14 + arch/loongarch/include/asm/linkage.h | 36 ++ arch/loongarch/include/asm/sigframe.h | 9 + arch/loongarch/kernel/asm-offsets.c | 2 + arch/loongarch/kernel/env.c | 7 +- arch/loongarch/kernel/signal.c | 6 +- arch/loongarch/kvm/intc/eiointc.c | 2 +- arch/loongarch/kvm/vcpu.c | 3 + arch/loongarch/pci/pci.c | 80 ++++ arch/loongarch/vdso/Makefile | 4 +- arch/loongarch/vdso/sigreturn.S | 6 +- arch/powerpc/net/bpf_jit_comp64.c | 23 +- arch/powerpc/tools/ftrace-gen-ool-stubs.sh | 4 +- arch/s390/include/asm/barrier.h | 4 +- arch/s390/kernel/entry.S | 3 + arch/s390/kernel/syscall.c | 5 +- arch/s390/mm/fault.c | 11 +- arch/sh/drivers/platform_early.c | 4 - arch/x86/coco/sev/noinstr.c | 6 + arch/x86/entry/entry_fred.c | 14 + arch/x86/events/core.c | 4 +- arch/x86/include/asm/unwind_user.h | 4 + arch/x86/kernel/cpu/common.c | 20 +- arch/x86/kvm/mmu/mmu.c | 17 +- arch/x86/platform/efi/quirks.c | 2 +- block/blk-mq.c | 45 ++- drivers/acpi/ec.c | 2 + drivers/base/bus.c | 43 ++- drivers/base/core.c | 2 + drivers/base/dd.c | 60 +++ drivers/base/platform.c | 37 +- drivers/base/regmap/regmap.c | 30 +- drivers/bluetooth/btintel.c | 11 +- drivers/bluetooth/btusb.c | 5 +- drivers/bluetooth/hci_ll.c | 2 + drivers/bus/simple-pm-bus.c | 4 +- drivers/clk/imx/clk-scu.c | 3 +- drivers/cpufreq/cpufreq_conservative.c | 12 + drivers/cpufreq/cpufreq_governor.c | 3 + drivers/cpufreq/cpufreq_governor.h | 1 + drivers/cxl/core/hdm.c | 25 +- drivers/cxl/core/port.c | 8 +- drivers/cxl/pmem.c | 2 +- drivers/dma/dw-edma/dw-hdma-v0-core.c | 6 +- drivers/dma/fsl-edma-main.c | 26 +- drivers/dma/idxd/cdev.c | 8 +- drivers/dma/idxd/device.c | 6 +- drivers/dma/idxd/init.c | 4 +- drivers/dma/idxd/submit.c | 2 +- drivers/dma/idxd/sysfs.c | 1 + drivers/dma/sh/rz-dmac.c | 68 ++-- drivers/dma/xilinx/xdma.c | 4 +- drivers/dma/xilinx/xilinx_dma.c | 46 ++- drivers/gpu/drm/amd/amdgpu/amdgpu_amdkfd.c | 4 +- drivers/gpu/drm/amd/amdgpu/amdgpu_ids.c | 45 ++- drivers/gpu/drm/amd/amdgpu/amdgpu_ids.h | 1 + drivers/gpu/drm/amd/amdgpu/amdgpu_vm.c | 1 + drivers/gpu/drm/amd/amdgpu/mes_v12_0.c | 5 +- drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm.c | 8 +- drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm.h | 1 + .../amd/display/amdgpu_dm/amdgpu_dm_mst_types.c | 4 +- drivers/gpu/drm/amd/pm/swsmu/amdgpu_smu.c | 7 +- drivers/gpu/drm/amd/pm/swsmu/smu11/smu_v11_0.c | 7 +- .../gpu/drm/amd/pm/swsmu/smu13/smu_v13_0_6_ppt.c | 2 +- drivers/gpu/drm/i915/display/intel_display.c | 8 +- drivers/gpu/drm/i915/display/intel_dp_tunnel.c | 20 +- drivers/gpu/drm/i915/display/intel_dp_tunnel.h | 11 +- drivers/gpu/drm/i915/display/intel_gmbus.c | 4 +- drivers/gpu/drm/i915/display/intel_plane.c | 11 +- drivers/gpu/drm/i915/i915_wait_util.h | 2 +- drivers/gpu/drm/mediatek/mtk_dsi.c | 9 +- drivers/gpu/drm/ttm/tests/ttm_bo_test.c | 4 +- drivers/gpu/drm/xe/regs/xe_gt_regs.h | 1 + drivers/gpu/drm/xe/xe_pt.c | 12 +- drivers/gpu/drm/xe/xe_vm.c | 22 +- drivers/gpu/drm/xe/xe_vm_types.h | 4 + drivers/gpu/drm/xe/xe_wa.c | 3 +- drivers/hid/hid-apple.c | 7 +- drivers/hid/hid-asus.c | 18 +- drivers/hid/hid-ids.h | 1 + drivers/hid/hid-magicmouse.c | 6 +- drivers/hid/hid-mcp2221.c | 2 + drivers/hid/intel-ish-hid/ipc/hw-ish.h | 2 + drivers/hid/intel-ish-hid/ipc/pci-ish.c | 12 + drivers/hwmon/adm1177.c | 54 +-- drivers/hwmon/axi-fan-control.c | 2 +- drivers/hwmon/peci/cputemp.c | 4 +- drivers/hwmon/pmbus/ina233.c | 3 +- drivers/hwmon/pmbus/isl68137.c | 21 +- drivers/hwmon/pmbus/pmbus_core.c | 192 ++++++++-- drivers/i2c/busses/i2c-designware-amdisp.c | 11 +- drivers/i2c/busses/i2c-imx.c | 51 ++- drivers/i3c/master/dw-i3c-master.c | 2 + drivers/infiniband/core/rw.c | 27 +- drivers/infiniband/hw/efa/efa_com.c | 175 ++++----- drivers/infiniband/hw/ionic/ionic_controlpath.c | 4 +- drivers/infiniband/hw/irdma/cm.c | 29 +- drivers/infiniband/hw/irdma/uk.c | 39 +- drivers/infiniband/hw/irdma/utils.c | 2 - drivers/infiniband/hw/irdma/verbs.c | 9 +- drivers/irqchip/irq-qcom-mpm.c | 3 + drivers/irqchip/irq-renesas-rzv2h.c | 2 +- drivers/media/mc/mc-request.c | 5 + drivers/media/v4l2-core/v4l2-ioctl.c | 5 +- drivers/net/can/dev/netlink.c | 4 +- drivers/net/ethernet/airoha/airoha_ppe.c | 2 + drivers/net/ethernet/broadcom/asp2/bcmasp.c | 66 ++-- drivers/net/ethernet/cadence/macb_main.c | 41 +- .../net/ethernet/freescale/enetc/enetc_ethtool.c | 2 + drivers/net/ethernet/intel/iavf/iavf_ethtool.c | 31 +- drivers/net/ethernet/intel/ice/ice_ethtool.c | 14 +- drivers/net/ethernet/intel/ice/ice_repr.c | 5 +- drivers/net/ethernet/microchip/lan743x_main.c | 5 + drivers/net/ethernet/pensando/ionic/ionic_lif.c | 17 +- drivers/net/team/team_core.c | 65 +++- drivers/net/tun_vnet.h | 2 +- drivers/net/usb/r8152.c | 1 + drivers/net/virtio_net.c | 7 +- drivers/nvme/host/fabrics.c | 4 +- drivers/nvme/host/pci.c | 11 +- drivers/nvme/target/admin-cmd.c | 2 +- drivers/nvme/target/core.c | 14 +- drivers/nvme/target/nvmet.h | 1 + drivers/nvme/target/rdma.c | 1 + drivers/phy/qualcomm/phy-qcom-qmp-ufs.c | 3 +- drivers/phy/ti/phy-j721e-wiz.c | 2 + drivers/pinctrl/mediatek/pinctrl-mtk-common.c | 9 +- drivers/pinctrl/renesas/pinctrl-rza1.c | 2 +- drivers/pinctrl/renesas/pinctrl-rzt2h.c | 1 + drivers/pinctrl/stm32/Kconfig | 1 + drivers/platform/olpc/olpc-xo175-ec.c | 2 +- drivers/platform/x86/hp/hp-wmi.c | 8 + drivers/platform/x86/intel/hid.c | 23 +- .../x86/intel/speed_select_if/isst_tpmi_core.c | 5 +- drivers/platform/x86/lenovo/wmi-gamezone.c | 2 - drivers/platform/x86/oxpec.c | 30 +- drivers/platform/x86/touchscreen_dmi.c | 18 + drivers/scsi/ibmvscsi/ibmvfc.c | 3 +- drivers/scsi/mpi3mr/mpi3mr_fw.c | 10 + drivers/scsi/scsi_devinfo.c | 2 +- drivers/scsi/scsi_transport_sas.c | 2 +- drivers/scsi/ses.c | 2 +- drivers/slimbus/qcom-ngd-ctrl.c | 6 +- drivers/spi/spi-fsl-lpspi.c | 3 +- drivers/spi/spi-intel-pci.c | 1 + drivers/spi/spi-meson-spicc.c | 2 - drivers/spi/spi-sn-f-ospi.c | 17 +- drivers/spi/spi.c | 19 +- .../int340x_thermal/processor_thermal_soc_slider.c | 8 +- drivers/usb/core/config.c | 6 +- drivers/usb/core/quirks.c | 5 + drivers/virt/coco/tdx-guest/tdx-guest.c | 12 +- drivers/xen/privcmd.c | 3 + fs/btrfs/block-group.c | 2 +- fs/btrfs/disk-io.c | 4 +- fs/btrfs/ioctl.c | 7 + fs/btrfs/volumes.c | 5 +- fs/erofs/fileio.c | 6 +- fs/erofs/zdata.c | 3 + fs/ext4/crypto.c | 9 +- fs/ext4/ext4.h | 1 + fs/ext4/extents.c | 23 +- fs/ext4/fast_commit.c | 17 +- fs/ext4/fsync.c | 16 +- fs/ext4/ialloc.c | 6 + fs/ext4/inline.c | 10 +- fs/ext4/inode.c | 75 +++- fs/ext4/mballoc.c | 30 +- fs/ext4/page-io.c | 10 +- fs/ext4/super.c | 16 +- fs/ext4/sysfs.c | 10 +- fs/fs-writeback.c | 18 +- fs/fuse/file.c | 4 +- fs/fuse/inode.c | 1 + fs/jbd2/checkpoint.c | 15 +- fs/netfs/buffered_read.c | 3 +- fs/netfs/direct_read.c | 3 +- fs/netfs/direct_write.c | 15 +- fs/netfs/iterator.c | 43 +++ fs/netfs/read_collect.c | 4 +- fs/netfs/read_retry.c | 5 +- fs/netfs/read_single.c | 1 - fs/netfs/write_collect.c | 4 +- fs/netfs/write_issue.c | 3 +- fs/overlayfs/copy_up.c | 6 +- fs/overlayfs/overlayfs.h | 21 ++ fs/overlayfs/ovl_entry.h | 7 +- fs/overlayfs/params.c | 33 +- fs/overlayfs/super.c | 2 +- fs/overlayfs/util.c | 5 +- fs/smb/server/oplock.c | 72 ++-- fs/smb/server/smb2pdu.c | 73 ++-- fs/xfs/scrub/quota.c | 4 +- fs/xfs/scrub/trace.h | 12 +- fs/xfs/xfs_attr_item.c | 5 +- fs/xfs/xfs_dquot_item.c | 9 +- fs/xfs/xfs_inode_item.c | 9 +- fs/xfs/xfs_mount.c | 7 +- fs/xfs/xfs_trace.h | 47 ++- fs/xfs/xfs_trans_ail.c | 26 +- include/linux/damon.h | 6 + include/linux/device.h | 54 +++ include/linux/device/bus.h | 4 + include/linux/dma-mapping.h | 4 +- include/linux/fs.h | 1 + include/linux/mempolicy.h | 1 + include/linux/netfs.h | 1 - include/linux/pagemap.h | 11 - include/linux/platform_device.h | 5 - include/linux/spi/spi.h | 5 - include/linux/swapops.h | 27 +- include/linux/usb/quirks.h | 3 + include/linux/usb/r8152.h | 1 + include/linux/virtio_net.h | 53 ++- include/net/bluetooth/l2cap.h | 2 +- include/net/inet_hashtables.h | 14 + include/net/ip6_fib.h | 21 +- include/sound/cs35l56.h | 1 + include/trace/events/netfs.h | 8 +- include/trace/events/task.h | 7 +- include/uapi/linux/dma-buf.h | 1 + include/uapi/linux/netfilter/nf_conntrack_common.h | 4 + kernel/bpf/btf.c | 24 +- kernel/bpf/core.c | 43 ++- kernel/bpf/verifier.c | 36 +- kernel/dma/swiotlb.c | 21 +- kernel/events/core.c | 19 +- kernel/futex/core.c | 2 +- kernel/futex/pi.c | 3 +- kernel/futex/syscalls.c | 8 + kernel/module/main.c | 7 + kernel/power/main.c | 2 +- kernel/power/snapshot.c | 11 + kernel/sched/ext.c | 2 +- kernel/sysctl.c | 2 +- kernel/time/alarmtimer.c | 2 +- kernel/trace/trace_osnoise.c | 10 +- mm/damon/core.c | 8 + mm/damon/stat.c | 36 +- mm/damon/sysfs.c | 10 +- mm/mempolicy.c | 10 +- mm/mseal.c | 5 +- mm/pagewalk.c | 25 +- net/bluetooth/l2cap_core.c | 103 +++-- net/bluetooth/l2cap_sock.c | 3 + net/bluetooth/mgmt.c | 2 +- net/bluetooth/sco.c | 10 +- net/can/af_can.c | 4 +- net/can/af_can.h | 2 +- net/can/gw.c | 6 +- net/can/isotp.c | 24 +- net/can/proc.c | 3 +- net/core/rtnetlink.c | 28 +- net/ipv4/esp4.c | 9 +- net/ipv4/inet_connection_sock.c | 20 +- net/ipv4/udp.c | 2 +- net/ipv6/addrconf.c | 4 +- net/ipv6/esp6.c | 9 +- net/ipv6/ip6_fib.c | 15 +- net/ipv6/netfilter/ip6t_rt.c | 4 + net/ipv6/route.c | 2 +- net/key/af_key.c | 19 +- net/netfilter/nf_conntrack_expect.c | 4 + net/netfilter/nf_conntrack_netlink.c | 16 +- net/netfilter/nf_conntrack_proto_tcp.c | 10 +- net/netfilter/nf_conntrack_sip.c | 14 +- net/netfilter/nfnetlink_log.c | 8 +- net/netfilter/nft_set_rbtree.c | 92 ++++- net/nfc/nci/core.c | 10 +- net/openvswitch/flow_netlink.c | 2 + net/openvswitch/vport-netdev.c | 11 +- net/packet/af_packet.c | 1 + net/smc/smc_rx.c | 9 +- net/tls/tls_sw.c | 2 +- net/xfrm/xfrm_iptfs.c | 17 +- net/xfrm/xfrm_nat_keepalive.c | 2 +- net/xfrm/xfrm_policy.c | 2 + net/xfrm/xfrm_state.c | 1 + net/xfrm/xfrm_user.c | 7 +- rust/kernel/regulator.rs | 33 +- rust/pin-init/src/macros.rs | 16 + scripts/package/install-extmod-build | 4 + sound/firewire/amdtp-stream.c | 2 +- sound/hda/codecs/hdmi/tegrahdmi.c | 1 + sound/hda/codecs/realtek/alc269.c | 42 ++- sound/hda/codecs/realtek/alc662.c | 9 + sound/hda/codecs/senarytech.c | 5 + sound/hda/controllers/intel.c | 1 - sound/soc/amd/acp/amd-acp63-acpi-match.c | 413 +++++++++++++++++++++ sound/soc/codecs/adau1372.c | 34 +- sound/soc/codecs/cs35l56-shared.c | 16 +- sound/soc/codecs/cs35l56.c | 8 + sound/soc/codecs/rt1320-sdw.c | 5 +- sound/soc/codecs/sma1307.c | 6 +- sound/soc/codecs/wcd934x.c | 2 +- sound/soc/fsl/fsl_easrc.c | 14 +- sound/soc/fsl/imx-card.c | 2 + sound/soc/intel/boards/sof_sdw.c | 8 + sound/soc/intel/catpt/device.c | 10 +- sound/soc/intel/catpt/dsp.c | 3 - sound/soc/samsung/i2s.c | 6 +- sound/soc/sof/ipc4-topology.c | 2 +- sound/usb/quirks.c | 2 + tools/objtool/arch/x86/decode.c | 68 ++-- tools/objtool/check.c | 14 + .../testing/selftests/bpf/prog_tests/reg_bounds.c | 62 +++- .../testing/selftests/bpf/progs/exceptions_fail.c | 9 +- .../selftests/mount_setattr/mount_setattr_test.c | 2 +- 316 files changed, 3581 insertions(+), 1178 deletions(-)

2 hours, 5 minutes

[PATCH 6.6 000/175] 6.6.131-rc1 review

by Greg Kroah-Hartman

This is the start of the stable review cycle for the 6.6.131 release. There are 175 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know. Responses should be made by Thu, 02 Apr 2026 16:16:56 +0000. Anything received after that time might be too late. The whole patch series can be found in one patch at: https://www.kernel.org/pub/linux/kernel/v6.x/stable-review/patch-6.6.131-rc… or in the git tree and branch at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-6.6.y and the diffstat can be found below. thanks, greg k-h ------------- Pseudo-Shortlog of commits: Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> Linux 6.6.131-rc1 Kuniyuki Iwashima <kuniyu(a)amazon.com> tcp: Fix bind() regression for v6-only wildcard and v4-mapped-v6 non-wildcard addresses. Davidlohr Bueso <dave(a)stgolabs.net> futex: Clear stale exiting pointer in futex_lock_pi() retry path Vinicius Costa Gomes <vinicius.gomes(a)intel.com> dmaengine: idxd: Fix freeing the allocated ida too late Christophe JAILLET <christophe.jaillet(a)wanadoo.fr> dmaengine: idxd: Remove usage of the deprecated ida_simple_xx() API Filipe Manana <fdmanana(a)suse.com> btrfs: fix lost error when running device stats on multiple devices fs Shin'ichiro Kawasaki <shinichiro.kawasaki(a)wdc.com> btrfs: fix leak of kobject name for sub-group space_info Mark Harmstone <mark(a)harmstone.com> btrfs: fix super block offset in error message in btrfs_validate_super() Tomi Valkeinen <tomi.valkeinen(a)ideasonboard.com> dmaengine: xilinx_dma: Fix reset related timeout with two-channel AXIDMA Marek Vasut <marex(a)nabladev.com> dmaengine: xilinx: xilinx_dma: Fix unmasked residue subtraction Marek Vasut <marex(a)nabladev.com> dmaengine: xilinx: xilinx_dma: Fix residue calculation for cyclic DMA Marek Vasut <marex(a)nabladev.com> dmaengine: xilinx: xilinx_dma: Fix dma_device directions Alexander Stein <alexander.stein(a)ew.tq-group.com> dmaengine: xilinx: xdma: Fix regmap init error handling LUO Haowen <luo-hw(a)foxmail.com> dmaengine: dw-edma: Fix multiple times setting of the CYCLE_STATE and CYCLE_BIT bits for HDMA. Felix Gu <ustc.gu(a)gmail.com> phy: ti: j721e-wiz: Fix device node reference leak in wiz_get_lane_phy_types() Vinicius Costa Gomes <vinicius.gomes(a)intel.com> dmaengine: idxd: Fix memory leak when a wq is reset Vinicius Costa Gomes <vinicius.gomes(a)intel.com> dmaengine: idxd: Fix not releasing workqueue on .release() Gao Xiang <xiang(a)kernel.org> erofs: fix "BUG: Bad page state in z_erofs_do_read_page" Yuto Ohnuki <ytohnuki(a)amazon.com> xfs: save ailp before dropping the AIL lock in push callbacks Yuto Ohnuki <ytohnuki(a)amazon.com> xfs: avoid dereferencing log items after push callbacks Josh Law <objecting(a)objecting.org> mm/damon/sysfs: check contexts->nr before accessing contexts_arr[0] Ming Lei <ming.lei(a)redhat.com> nvme: fix admin queue leak on controller reset Al Viro <viro(a)zeniv.linux.org.uk> xattr: switch to CLASS(fd) Mikhail Gavrilov <mikhail.v.gavrilov(a)gmail.com> libbpf: Fix -Wdiscarded-qualifiers under C23 Andreas Gruenbacher <agruenba(a)redhat.com> gfs2: Fix unlikely race in gdlm_put_lock Pratyush Yadav <p.yadav(a)ti.com> mtd: spi-nor: core: avoid odd length/address writes in 8D-8D-8D mode Pratyush Yadav <p.yadav(a)ti.com> mtd: spi-nor: core: avoid odd length/address reads on 8D-8D-8D mode Benno Lossin <lossin(a)kernel.org> rust: pin-init: internal: init: document load-bearing fact of field accessors Benno Lossin <lossin(a)kernel.org> rust: pin-init: add references to previously initialized fields Luo Haiyang <luo.haiyang(a)zte.com.cn> tracing: Fix potential deadlock in cpu hotplug with osnoise Steven Rostedt <rostedt(a)goodmis.org> tracing: Switch trace_osnoise.c code over to use guard() and __free() Werner Kasselman <werner(a)verivus.com> ksmbd: fix memory leaks and NULL deref in smb2_lock() Werner Kasselman <werner(a)verivus.com> ksmbd: fix use-after-free and NULL deref in smb_grant_oplock() Hari Bathini <hbathini(a)linux.ibm.com> powerpc64/bpf: do not increment tailcall count when prog is NULL Markus Niebel <Markus.Niebel(a)ew.tq-group.com> arm64: dts: imx8mn-tqma8mqnl: fix LDO5 power off Theodore Ts'o <tytso(a)mit.edu> ext4: always drain queued discard work in ext4_mb_release() Baokun Li <libaokun(a)linux.alibaba.com> ext4: fix iloc.bh leak in ext4_fc_replay_inode() error paths Zqiang <qiang.zhang(a)linux.dev> ext4: fix the might_sleep() warnings in kvfree() Jiayuan Chen <jiayuan.chen(a)shopee.com> ext4: fix use-after-free in update_super_work when racing with umount Helen Koike <koike(a)igalia.com> ext4: reject mount if bigalloc with s_first_data_block != 0 Ye Bin <yebin10(a)huawei.com> ext4: avoid allocate block from corrupted group in ext4_mb_find_by_goal() Edward Adam Davis <eadavis(a)qq.com> ext4: avoid infinite loops caused by residual data Yuto Ohnuki <ytohnuki(a)amazon.com> ext4: replace BUG_ON with proper error handling in ext4_read_inline_folio Jan Kara <jack(a)suse.cz> ext4: make recently_deleted() properly work with lazy itable initialization Jan Kara <jack(a)suse.cz> ext4: fix fsync(2) for nojournal mode Jan Kara <jack(a)suse.cz> ext4: fix stale xarray tags after writeback Deepanshu Kartikey <kartikey406(a)gmail.com> ext4: convert inline data to extents when truncate exceeds inline size Simon Weber <simon.weber.39(a)gmail.com> ext4: fix journal credit check when setting fscrypt context Long Li <leo.lilong(a)huawei.com> xfs: fix ri_total validation in xlog_recover_attri_commit_pass2 Yuto Ohnuki <ytohnuki(a)amazon.com> xfs: stop reclaim before pushing AIL during unmount Huacai Chen <chenhuacai(a)kernel.org> LoongArch: Workaround LS2K/LS7A GPU DMA hang bug Claudiu Beznea <claudiu.beznea(a)tuxon.dev> dmaengine: sh: rz-dmac: Move CHCTRL updates under spinlock Claudiu Beznea <claudiu.beznea(a)tuxon.dev> dmaengine: sh: rz-dmac: Protect the driver specific lists Jassi Brar <jassisinghbrar(a)gmail.com> irqchip/qcom-mpm: Add missing mailbox TX done acknowledgment Milos Nikic <nikic.milos(a)gmail.com> jbd2: gracefully abort on checkpointing state corruptions Sean Christopherson <seanjc(a)google.com> KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE Kevin Hao <haokexin(a)gmail.com> net: macb: Use dev_consume_skb_any() to free TX SKBs Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> scsi: ses: Handle positive SCSI error from ses_recv_diag() Tyllis Xu <livelycarpet87(a)gmail.com> scsi: ibmvfc: Fix OOB access in ibmvfc_discover_targets_done() Zhan Xusheng <zhanxusheng1024(a)gmail.com> alarmtimer: Fix argument order in alarm_timer_forward() Jiucheng Xu <jiucheng.xu(a)amlogic.com> erofs: add GFP_NOIO in the bio completion if needed Vasily Gorbik <gor(a)linux.ibm.com> s390/entry: Scrub r12 register on kernel entry xietangxin <xietangxin(a)yeah.net> virtio_net: Fix UAF on dst_ops when IFF_XMIT_DST_RELEASE is cleared and napi_tx is false Yuchan Nam <entropy1110(a)gmail.com> media: mc, v4l2: serialize REINIT and REQBUFS with req_queue_mutex Sanman Pradhan <psanman(a)juniper.net> hwmon: (peci/cputemp) Fix off-by-one in cputemp_is_visible() Sanman Pradhan <psanman(a)juniper.net> hwmon: (peci/cputemp) Fix crit_hyst returning delta instead of absolute temperature Sanman Pradhan <psanman(a)juniper.net> hwmon: (pmbus/isl68137) Add mutex protection for AVS enable sysfs attributes Marc Zyngier <maz(a)kernel.org> KVM: arm64: Discard PC update state on vcpu reset Srinivas Pandruvada <srinivas.pandruvada(a)linux.intel.com> platform/x86: ISST: Correct locked bit width Viresh Kumar <viresh.kumar(a)linaro.org> cpufreq: conservative: Reset requested_freq on limits change Oliver Hartkopp <socketcan(a)hartkopp.net> can: isotp: fix tx.buf use-after-free in isotp_sendmsg() Ali Norouzi <ali.norouzi(a)keysight.com> can: gw: fix OOB heap access in cgw_csum_crc8_rel() Peter Ujfalusi <peter.ujfalusi(a)linux.intel.com> ASoC: SOF: ipc4-topology: Allow bytes controls without initial payload Alexey Nepomnyashih <sdl(a)nppct.ru> ALSA: firewire-lib: fix uninitialized local variable Hyunwoo Kim <imv4bel(a)gmail.com> ksmbd: do not expire session on binding failure Namjae Jeon <linkinjeon(a)kernel.org> ksmbd: fix potencial OOB in get_file_all_info() for compound requests Namjae Jeon <linkinjeon(a)kernel.org> ksmbd: replace hardcoded hdr2_len with offsetof() in smb2_calc_max_out_buf_len() Vasily Gorbik <gor(a)linux.ibm.com> s390/barrier: Make array_index_mask_nospec() __always_inline Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> s390/syscalls: Add spectre boundary for syscall dispatch table Marc Kleine-Budde <mkl(a)pengutronix.de> spi: spi-fsl-lpspi: fix teardown order issue (UAF) Jihed Chaibi <jihed.chaibi.dev(a)gmail.com> ASoC: adau1372: Fix clock leak on PLL lock failure Jihed Chaibi <jihed.chaibi.dev(a)gmail.com> ASoC: adau1372: Fix unchecked clk_prepare_enable() return value Marc Buerg <buermarc(a)googlemail.com> sysctl: fix uninitialized variable in proc_do_large_bitmap Sanman Pradhan <psanman(a)juniper.net> hwmon: (adm1177) fix sysfs ABI violation and current unit conversion Srinivasan Shanmugam <srinivasan.shanmugam(a)amd.com> drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib Weiming Shi <bestswngs(a)gmail.com> ACPI: EC: clean up handlers on probe failure in acpi_ec_setup() Cezary Rojewski <cezary.rojewski(a)intel.com> ASoC: Intel: catpt: Fix the device initialization Felix Gu <ustc.gu(a)gmail.com> spi: sn-f-ospi: Fix resource leak in f_ospi_probe() Alberto Garcia <berto(a)igalia.com> PM: hibernate: Drain trailing zero pages on userspace restore Christophe Leroy <christophe.leroy(a)csgroup.eu> PM: hibernate: Don't ignore return from set_memory_ro() Samasth Norway Ananda <samasth.norway.ananda(a)oracle.com> drm/i915/gmbus: fix spurious timeout on 512-byte burst reads Mike Rapoport (Microsoft) <rppt(a)kernel.org> x86/efi: efi_unmap_boot_services: fix calculation of ranges_to_free size Yihang Li <liyihang9(a)huawei.com> scsi: scsi_transport_sas: Fix the maximum channel scanning issue Tatyana Nikolova <tatyana.e.nikolova(a)intel.com> RDMA/irdma: Return EINVAL for invalid arp index error Anil Samal <anil.samal(a)intel.com> RDMA/irdma: Fix deadlock during netdev reset with active connections Tatyana Nikolova <tatyana.e.nikolova(a)intel.com> RDMA/irdma: Remove reset check from irdma_modify_qp_to_err() Ivan Barrera <ivan.d.barrera(a)intel.com> RDMA/irdma: Clean up unnecessary dereference of event->cm_node Tatyana Nikolova <tatyana.e.nikolova(a)intel.com> RDMA/irdma: Remove a NOP wait_event() in irdma_modify_qp_roce() Tatyana Nikolova <tatyana.e.nikolova(a)intel.com> RDMA/irdma: Update ibqp state to error if QP is already in error state Jacob Moroni <jmoroni(a)google.com> RDMA/irdma: Initialize free_qp completion before using it Chuck Lever <chuck.lever(a)oracle.com> RDMA/rw: Fall back to direct SGE on MR pool exhaustion Andy Shevchenko <andriy.shevchenko(a)linux.intel.com> regmap: Synchronize cache for the page selector Paolo Valerio <pvalerio(a)redhat.com> net: macb: use the current queue number for stats David Carlier <devnexen(a)gmail.com> netfilter: ctnetlink: use netlink policy range checks Weiming Shi <bestswngs(a)gmail.com> netfilter: nf_conntrack_sip: fix use of uninitialized rtp_addr in process_sdp Pablo Neira Ayuso <pablo(a)netfilter.org> netfilter: nf_conntrack_expect: skip expectations in other netns via proc Ren Wei <n05ec(a)lzu.edu.cn> netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() Weiming Shi <bestswngs(a)gmail.com> netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD Chuck Lever <chuck.lever(a)oracle.com> tls: Purge async_hold in tls_decrypt_async_wait() Pengpeng Hou <pengpeng(a)iscas.ac.cn> Bluetooth: btusb: clamp SCO altsetting table indices Hyunwoo Kim <imv4bel(a)gmail.com> Bluetooth: L2CAP: Fix ERTM re-init and zero pdu_len infinite loop Cen Zhang <zzzccc427(a)gmail.com> Bluetooth: btintel: serialize btintel_hw_error() with hci_req_sync_lock Luiz Augusto von Dentz <luiz.von.dentz(a)intel.com> Bluetooth: hci_sync: Remove remaining dependencies of hci_request Zijun Hu <quic_zijuhu(a)quicinc.com> Bluetooth: Remove 3 repeated macro definitions Zhang Chen <zhangchen01(a)kylinos.cn> Bluetooth: L2CAP: Fix send LE flow credits in ACL link Miguel Ojeda <ojeda(a)kernel.org> dma-mapping: add missing `inline` for `dma_free_attrs` Wei Fang <wei.fang(a)nxp.com> net: enetc: fix the output issue of 'ethtool --show-ring' Martin KaFai Lau <martin.lau(a)kernel.org> udp: Fix wildcard bind conflict check when using hash2 Eric Dumazet <edumazet(a)google.com> tcp: optimize inet_use_bhash2_on_bind() Kuniyuki Iwashima <kuniyu(a)amazon.com> tcp: Rearrange tests in inet_csk_bind_conflict(). Kuniyuki Iwashima <kuniyu(a)amazon.com> tcp: Use bhash2 for v4-mapped-v6 non-wildcard address. Yochai Eisenrich <echelonh(a)gmail.com> net: fix fanout UAF in packet_release() via NETDEV_UP race Kuniyuki Iwashima <kuniyu(a)google.com> ipv6: Don't remove permanent routes with exceptions from tb6_gc_hlist. Kuniyuki Iwashima <kuniyu(a)google.com> ipv6: Remove permanent routes from tb6_gc_hlist when all exceptions expire. Petr Oros <poros(a)redhat.com> ice: use ice_update_eth_stats() for representor stats Alok Tiwari <alok.a.tiwari(a)oracle.com> platform/olpc: olpc-xo175-ec: Fix overflow error message to print inlen Sabrina Dubroca <sd(a)queasysnail.net> rtnetlink: count IFLA_INFO_SLAVE_KIND in if_nlmsg_size Qi Tang <tpluszz77(a)gmail.com> net/smc: fix double-free of smc_spd_priv when tee() duplicates splice pipe buffer Yang Yang <n05ec(a)lzu.edu.cn> openvswitch: validate MPLS set/set_masked payload length Yang Yang <n05ec(a)lzu.edu.cn> openvswitch: defer tunnel netdev_put to RCU release Toke Høiland-Jørgensen <toke(a)redhat.com> net: openvswitch: Avoid releasing netdev before teardown completes Jakub Kicinski <kuba(a)kernel.org> nfc: nci: fix circular locking dependency in nci_close_device Mohammad Heib <mheib(a)redhat.com> ionic: fix persistent MAC address override on PF Luca Leonardo Scorcia <l.scorcia(a)gmail.com> pinctrl: mediatek: common: Fix probe failure for devices without EINT Helen Koike <koike(a)igalia.com> Bluetooth: L2CAP: Fix null-ptr-deref on l2cap_sock_ready_cb Anas Iqbal <mohd.abd.6602(a)gmail.com> Bluetooth: hci_ll: Fix firmware leak on error path Hyunwoo Kim <imv4bel(a)gmail.com> Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold Hyunwoo Kim <imv4bel(a)gmail.com> Bluetooth: L2CAP: Validate PDU length before reading SDU length in l2cap_ecred_data_rcv() Oliver Hartkopp <socketcan(a)hartkopp.net> can: statistics: add missing atomic access in hot path Shigeru Yoshida <syoshida(a)redhat.com> dma: swiotlb: add KMSAN annotations to swiotlb_bounce() Eric Dumazet <edumazet(a)google.com> af_key: validate families in pfkey_send_migrate() Sabrina Dubroca <sd(a)queasysnail.net> esp: fix skb leak with espintcp and async crypto Steffen Klassert <steffen.klassert(a)secunet.com> xfrm: Fix the usage of skb->sk Sabrina Dubroca <sd(a)queasysnail.net> xfrm: call xdo_dev_state_delete during state update Alan Borzeszkowski <alan.borzeszkowski(a)linux.intel.com> spi: intel-pci: Add support for Nova Lake mobile SPI flash Jie Deng <dengjie03(a)kylinos.cn> usb: core: new quirk to handle devices with zero configurations Josh Poimboeuf <jpoimboe(a)kernel.org> objtool: Handle Clang RSP musical chairs Uzair Mughal <contact(a)uzair.is-a.dev> ALSA: hda/realtek: Add headset jack quirk for Thinkpad X390 Liucheng Lu <luliucheng100(a)outlook.com> ALSA: hda/realtek: add HP Laptop 14s-dr5xxx mute LED quirk Boris Burkov <boris(a)bur.io> btrfs: set BTRFS_ROOT_ORPHAN_CLEANUP during subvol create Günther Noack <gnoack(a)google.com> HID: apple: avoid memory leak in apple_report_fixup() Isaac J. Manjarres <isaacmanjarres(a)google.com> dma-buf: Include ioctl.h in UAPI header Mark Brown <broonie(a)kernel.org> ASoC: fsl_easrc: Fix event generation in fsl_easrc_iec958_put_bits() Mark Brown <broonie(a)kernel.org> ASoC: fsl_easrc: Fix event generation in fsl_easrc_iec958_set_reg() Ihor Solodrai <ihor.solodrai(a)linux.dev> module: Fix kernel panic when a symbol st_shndx is out of bounds Denis Benato <denis.benato(a)linux.dev> HID: asus: add xg mobile 2023 external hardware support Romain Sioen <romain.sioen(a)microchip.com> HID: mcp2221: cancel last I2C command on read error Valentin Spreckels <valentin(a)spreckels.dev> net: usb: r8152: add TRENDnet TUC-ET2G Günther Noack <gnoack(a)google.com> HID: magicmouse: avoid memory leak in magicmouse_report_fixup() Julius Lehmann <lehmanju(a)devpi.de> HID: magicmouse: fix battery reporting for Apple Magic Trackpad 2 Keith Busch <kbusch(a)kernel.org> nvme-pci: ensure we're polling a polled queue Hans de Goede <johannes.goede(a)oss.qualcomm.com> platform/x86: touchscreen_dmi: Add quirk for y-inverted Goodix touchscreen on SUPI S10 Leif Skunberg <diamondback(a)cohunt.app> platform/x86: intel-hid: Enable 5-button array on ThinkPad X1 Fold 16 Gen 1 Daniel Hodges <hodgesd(a)meta.com> nvme-fabrics: use kfree_sensitive() for DHCHAP secrets Keith Busch <kbusch(a)kernel.org> nvme-pci: cap queue creation to used queues Peter Metz <peter.metz(a)unarin.com> platform/x86: intel-hid: Add Dell 14 Plus 2-in-1 to dmi_vgbs_allow_list Günther Noack <gnoack(a)google.com> HID: asus: avoid memory leak in asus_report_fixup() Jenny Guanni Qu <qguanni(a)gmail.com> bpf: Fix undefined behavior in interpreter sdiv/smod for INT_MIN Kumar Kartikeya Dwivedi <memxor(a)gmail.com> bpf: Release module BTF IDR before module unload Danilo Krummrich <dakr(a)kernel.org> sh: platform_early: remove pdev->driver_override check Danilo Krummrich <dakr(a)kernel.org> hwmon: axi-fan: don't use driver_override as IRQ name Nuno Sa <nuno.sa(a)analog.com> hwmon: (axi-fan-control) Make use of dev_err_probe() Nuno Sa <nuno.sa(a)analog.com> hwmon: (axi-fan-control) Use device firmware agnostic API Smita Koralahalli <Smita.KoralahalliChannabasappa(a)amd.com> cxl/hdm: Avoid incorrect DVSEC fallback when HDM decoders are enabled Peter Zijlstra <peterz(a)infradead.org> perf: Make sure to use pmu_ctx->pmu for groups Peter Zijlstra <peterz(a)infradead.org> perf: Extract a few helpers ------------- Diffstat: Documentation/admin-guide/kernel-parameters.txt | 3 + Documentation/hwmon/adm1177.rst | 8 +- Documentation/hwmon/peci-cputemp.rst | 10 +- Makefile | 4 +- .../boot/dts/freescale/imx8mn-tqma8mqnl-mba8mx.dts | 13 +- .../arm64/boot/dts/freescale/imx8mn-tqma8mqnl.dtsi | 22 +++ arch/arm64/kvm/reset.c | 14 ++ arch/loongarch/pci/pci.c | 80 +++++++++++ arch/powerpc/net/bpf_jit_comp64.c | 23 +-- arch/s390/include/asm/barrier.h | 4 +- arch/s390/kernel/entry.S | 4 + arch/s390/kernel/syscall.c | 2 + arch/sh/drivers/platform_early.c | 4 - arch/x86/kvm/mmu/mmu.c | 14 +- arch/x86/platform/efi/quirks.c | 2 +- drivers/acpi/ec.c | 2 + drivers/base/regmap/regmap.c | 30 +++- drivers/bluetooth/btintel.c | 11 +- drivers/bluetooth/btusb.c | 5 +- drivers/bluetooth/hci_ll.c | 2 + drivers/cpufreq/cpufreq_conservative.c | 12 ++ drivers/cpufreq/cpufreq_governor.c | 3 + drivers/cpufreq/cpufreq_governor.h | 1 + drivers/cxl/core/hdm.c | 25 ++-- drivers/dma/dw-edma/dw-hdma-v0-core.c | 6 +- drivers/dma/idxd/cdev.c | 10 +- drivers/dma/idxd/device.c | 3 +- drivers/dma/idxd/sysfs.c | 1 + drivers/dma/sh/rz-dmac.c | 68 +++++---- drivers/dma/xilinx/xdma.c | 4 +- drivers/dma/xilinx/xilinx_dma.c | 46 +++--- drivers/gpu/drm/amd/amdgpu/amdgpu_amdkfd.c | 4 +- drivers/gpu/drm/i915/display/intel_gmbus.c | 4 +- drivers/hid/hid-apple.c | 4 +- drivers/hid/hid-asus.c | 18 ++- drivers/hid/hid-ids.h | 1 + drivers/hid/hid-magicmouse.c | 6 +- drivers/hid/hid-mcp2221.c | 2 + drivers/hwmon/adm1177.c | 54 ++++--- drivers/hwmon/axi-fan-control.c | 73 +++++----- drivers/hwmon/peci/cputemp.c | 4 +- drivers/hwmon/pmbus/isl68137.c | 21 ++- drivers/infiniband/core/rw.c | 27 +++- drivers/infiniband/hw/irdma/cm.c | 29 ++-- drivers/infiniband/hw/irdma/utils.c | 2 - drivers/infiniband/hw/irdma/verbs.c | 9 +- drivers/irqchip/irq-qcom-mpm.c | 3 + drivers/media/mc/mc-request.c | 5 + drivers/media/v4l2-core/v4l2-ioctl.c | 5 +- drivers/mtd/spi-nor/core.c | 145 ++++++++++++++++++- drivers/net/ethernet/cadence/macb_main.c | 4 +- .../net/ethernet/freescale/enetc/enetc_ethtool.c | 2 + drivers/net/ethernet/intel/ice/ice_ethtool.c | 14 +- drivers/net/ethernet/intel/ice/ice_repr.c | 3 +- drivers/net/ethernet/pensando/ionic/ionic_lif.c | 17 ++- drivers/net/usb/r8152.c | 1 + drivers/net/virtio_net.c | 1 + drivers/nvme/host/core.c | 7 + drivers/nvme/host/fabrics.c | 4 +- drivers/nvme/host/pci.c | 11 +- drivers/phy/ti/phy-j721e-wiz.c | 2 + drivers/pinctrl/mediatek/pinctrl-mtk-common.c | 9 +- drivers/platform/olpc/olpc-xo175-ec.c | 2 +- drivers/platform/x86/intel/hid.c | 13 ++ .../x86/intel/speed_select_if/isst_tpmi_core.c | 2 +- drivers/platform/x86/touchscreen_dmi.c | 18 +++ drivers/scsi/ibmvscsi/ibmvfc.c | 3 +- drivers/scsi/scsi_transport_sas.c | 2 +- drivers/scsi/ses.c | 2 +- drivers/spi/spi-fsl-lpspi.c | 3 +- drivers/spi/spi-intel-pci.c | 1 + drivers/spi/spi-sn-f-ospi.c | 17 +-- drivers/usb/core/config.c | 6 +- drivers/usb/core/quirks.c | 5 + fs/btrfs/block-group.c | 2 +- fs/btrfs/disk-io.c | 4 +- fs/btrfs/ioctl.c | 7 + fs/btrfs/volumes.c | 5 +- fs/erofs/zdata.c | 4 + fs/ext4/crypto.c | 9 +- fs/ext4/ext4.h | 1 + fs/ext4/extents.c | 8 +- fs/ext4/fast_commit.c | 13 +- fs/ext4/fsync.c | 16 ++- fs/ext4/ialloc.c | 6 + fs/ext4/inline.c | 10 +- fs/ext4/inode.c | 12 ++ fs/ext4/mballoc.c | 28 ++-- fs/ext4/page-io.c | 10 +- fs/ext4/super.c | 16 ++- fs/ext4/sysfs.c | 10 +- fs/gfs2/lock_dlm.c | 10 +- fs/jbd2/checkpoint.c | 15 +- fs/smb/server/oplock.c | 72 ++++++---- fs/smb/server/smb2pdu.c | 73 +++++++--- fs/xattr.c | 27 +--- fs/xfs/xfs_attr_item.c | 4 +- fs/xfs/xfs_dquot_item.c | 9 +- fs/xfs/xfs_inode_item.c | 9 +- fs/xfs/xfs_mount.c | 7 +- fs/xfs/xfs_trace.c | 1 + fs/xfs/xfs_trace.h | 36 ++++- fs/xfs/xfs_trans_ail.c | 26 +++- include/linux/dma-mapping.h | 4 +- include/linux/usb/quirks.h | 3 + include/linux/usb/r8152.h | 1 + include/net/bluetooth/hci_sync.h | 17 +++ include/net/inet_hashtables.h | 14 ++ include/net/ip6_fib.h | 21 ++- include/uapi/linux/dma-buf.h | 1 + include/uapi/linux/netfilter/nf_conntrack_common.h | 4 + kernel/bpf/btf.c | 24 +++- kernel/bpf/core.c | 22 +-- kernel/dma/swiotlb.c | 21 ++- kernel/events/core.c | 58 ++++---- kernel/futex/pi.c | 3 +- kernel/module/main.c | 7 + kernel/power/power.h | 2 +- kernel/power/snapshot.c | 36 +++-- kernel/power/swap.c | 8 +- kernel/power/user.c | 4 +- kernel/sysctl.c | 2 +- kernel/time/alarmtimer.c | 2 +- kernel/trace/trace_osnoise.c | 48 +++---- mm/damon/sysfs.c | 3 + net/bluetooth/hci_request.h | 21 --- net/bluetooth/hci_sync.c | 14 +- net/bluetooth/l2cap_core.c | 28 +++- net/bluetooth/l2cap_sock.c | 3 + net/bluetooth/sco.c | 10 +- net/can/af_can.c | 4 +- net/can/af_can.h | 2 +- net/can/gw.c | 6 +- net/can/isotp.c | 24 +++- net/can/proc.c | 3 +- net/core/rtnetlink.c | 9 +- net/ipv4/esp4.c | 11 +- net/ipv4/inet_connection_sock.c | 72 +++++----- net/ipv4/inet_hashtables.c | 3 +- net/ipv4/udp.c | 2 +- net/ipv6/addrconf.c | 4 +- net/ipv6/esp6.c | 11 +- net/ipv6/ip6_fib.c | 15 +- net/ipv6/netfilter/ip6t_rt.c | 4 + net/ipv6/route.c | 2 +- net/ipv6/xfrm6_output.c | 4 +- net/key/af_key.c | 19 ++- net/netfilter/nf_conntrack_expect.c | 4 + net/netfilter/nf_conntrack_netlink.c | 16 +-- net/netfilter/nf_conntrack_proto_tcp.c | 10 +- net/netfilter/nf_conntrack_sip.c | 14 +- net/netfilter/nfnetlink_log.c | 8 +- net/nfc/nci/core.c | 10 +- net/openvswitch/flow_netlink.c | 2 + net/openvswitch/vport-netdev.c | 11 +- net/packet/af_packet.c | 1 + net/smc/smc_rx.c | 9 +- net/tls/tls_sw.c | 2 +- net/xfrm/xfrm_interface_core.c | 2 +- net/xfrm/xfrm_output.c | 7 +- net/xfrm/xfrm_policy.c | 2 +- net/xfrm/xfrm_state.c | 1 + rust/kernel/init/macros.rs | 160 +++++++++++++++++---- sound/firewire/amdtp-stream.c | 2 +- sound/pci/hda/patch_realtek.c | 2 + sound/soc/codecs/adau1372.c | 34 +++-- sound/soc/fsl/fsl_easrc.c | 14 +- sound/soc/intel/catpt/device.c | 10 +- sound/soc/intel/catpt/dsp.c | 3 - sound/soc/sof/ipc4-topology.c | 2 +- tools/lib/bpf/libbpf.c | 2 +- tools/objtool/arch/x86/decode.c | 68 ++++----- tools/objtool/check.c | 14 ++ 173 files changed, 1689 insertions(+), 748 deletions(-)

2 hours, 26 minutes

[PATCH 6.12 000/244] 6.12.80-rc1 review

by Greg Kroah-Hartman

This is the start of the stable review cycle for the 6.12.80 release. There are 244 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know. Responses should be made by Thu, 02 Apr 2026 16:16:56 +0000. Anything received after that time might be too late. The whole patch series can be found in one patch at: https://www.kernel.org/pub/linux/kernel/v6.x/stable-review/patch-6.12.80-rc… or in the git tree and branch at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-6.12.y and the diffstat can be found below. thanks, greg k-h ------------- Pseudo-Shortlog of commits: Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> Linux 6.12.80-rc1 Li Li <boolli(a)google.com> idpf: nullify pointers after they are freed Justin Chen <justin.chen(a)broadcom.com> net: bcmasp: Fix network filter wake for asp-3.0 Florian Fainelli <florian.fainelli(a)broadcom.com> net: bcmasp: Restore programming of TX map vector register Vinicius Costa Gomes <vinicius.gomes(a)intel.com> dmaengine: idxd: Fix leaking event log memory Peter Zijlstra <peterz(a)infradead.org> futex: Require sys_futex_requeue() to have identical flags GuoHan Zhao <zhaoguohan(a)kylinos.cn> xen/privcmd: unregister xenstore notifier on module exit Filipe Manana <fdmanana(a)suse.com> btrfs: fix lost error when running device stats on multiple devices fs Shin'ichiro Kawasaki <shinichiro.kawasaki(a)wdc.com> btrfs: fix leak of kobject name for sub-group space_info Mark Harmstone <mark(a)harmstone.com> btrfs: fix super block offset in error message in btrfs_validate_super() Tomi Valkeinen <tomi.valkeinen(a)ideasonboard.com> dmaengine: xilinx_dma: Fix reset related timeout with two-channel AXIDMA Marek Vasut <marex(a)nabladev.com> dmaengine: xilinx: xilinx_dma: Fix unmasked residue subtraction Marek Vasut <marex(a)nabladev.com> dmaengine: xilinx: xilinx_dma: Fix residue calculation for cyclic DMA Marek Vasut <marex(a)nabladev.com> dmaengine: xilinx: xilinx_dma: Fix dma_device directions Tuo Li <islituo(a)gmail.com> dmaengine: idxd: fix possible wrong descriptor completion in llist_abort_desc() Deepanshu Kartikey <kartikey406(a)gmail.com> netfs: Fix kernel BUG in netfs_limit_iter() for ITER_KVEC iterators Alexander Stein <alexander.stein(a)ew.tq-group.com> dmaengine: xilinx: xdma: Fix regmap init error handling LUO Haowen <luo-hw(a)foxmail.com> dmaengine: dw-edma: Fix multiple times setting of the CYCLE_STATE and CYCLE_BIT bits for HDMA. Felix Gu <ustc.gu(a)gmail.com> phy: ti: j721e-wiz: Fix device node reference leak in wiz_get_lane_phy_types() Vinicius Costa Gomes <vinicius.gomes(a)intel.com> dmaengine: idxd: Fix freeing the allocated ida too late Vinicius Costa Gomes <vinicius.gomes(a)intel.com> dmaengine: idxd: Fix memory leak when a wq is reset Vinicius Costa Gomes <vinicius.gomes(a)intel.com> dmaengine: idxd: Fix not releasing workqueue on .release() Takashi Iwai <tiwai(a)suse.de> ASoC: ak4458: Convert to RUNTIME_PM_OPS() & co Sreedevi Joshi <sreedevi.joshi(a)intel.com> idpf: Fix RSS LUT NULL ptr issue after soft reset Sreedevi Joshi <sreedevi.joshi(a)intel.com> idpf: Fix RSS LUT NULL pointer crash on early ethtool operations Emil Tantilov <emil.s.tantilov(a)intel.com> idpf: detach and close netdevs while handling a reset Emil Tantilov <emil.s.tantilov(a)intel.com> idpf: check error for register_netdev() on init Aaron Ma <aaron.ma(a)canonical.com> ice: Fix PTP NULL pointer dereference during VSI rebuild Mateusz Polchlopek <mateusz.polchlopek(a)intel.com> ice: fix using untrusted value of pkt_len in ice_vc_fdir_parse_raw() Mickaël Salaün <mic(a)digikod.net> landlock: Fix handling of disconnected directories Mickaël Salaün <mic(a)digikod.net> landlock: Optimize file path walks and prepare for audit support Eric Dumazet <edumazet(a)google.com> net: add proper RCU protection to /proc/net/ptype Zubin Mithra <zsm(a)google.com> virt: tdx-guest: Fix handling of host controlled 'quote' buffer length Yuto Ohnuki <ytohnuki(a)amazon.com> xfs: avoid dereferencing log items after push callbacks Fei Lv <feilv(a)asrmicro.com> ovl: make fsync after metadata copy-up opt-in mount option Thorsten Blum <thorsten.blum(a)linux.dev> ovl: Use str_on_off() helper in ovl_show_options() Benno Lossin <lossin(a)kernel.org> rust: pin-init: internal: init: document load-bearing fact of field accessors Benno Lossin <lossin(a)kernel.org> rust: pin-init: add references to previously initialized fields Josh Law <objecting(a)objecting.org> mm/damon/sysfs: check contexts->nr before accessing contexts_arr[0] Richard Leitner <richard.leitner(a)linux.dev> media: nxp: imx8-isi: Fix streaming cleanup on release Breno Leitao <leitao(a)debian.org> spi: tegra210-quad: Protect curr_xfer check in IRQ handler Xi Ruoyao <xry111(a)xry111.site> LoongArch: vDSO: Emit GNU_EH_FRAME correctly Matthew Auld <matthew.auld(a)intel.com> drm/xe: always keep track of remap prev/next Luo Haiyang <luo.haiyang(a)zte.com.cn> tracing: Fix potential deadlock in cpu hotplug with osnoise Steven Rostedt <rostedt(a)goodmis.org> tracing: Switch trace_osnoise.c code over to use guard() and __free() Werner Kasselman <werner(a)verivus.com> ksmbd: fix use-after-free and NULL deref in smb_grant_oplock() Hari Bathini <hbathini(a)linux.ibm.com> powerpc64/bpf: do not increment tailcall count when prog is NULL Markus Niebel <Markus.Niebel(a)ew.tq-group.com> arm64: dts: imx8mn-tqma8mqnl: fix LDO5 power off Theodore Ts'o <tytso(a)mit.edu> ext4: always drain queued discard work in ext4_mb_release() Baokun Li <libaokun(a)linux.alibaba.com> ext4: fix iloc.bh leak in ext4_fc_replay_inode() error paths Theodore Ts'o <tytso(a)mit.edu> ext4: handle wraparound when searching for blocks for indirect mapped blocks Zqiang <qiang.zhang(a)linux.dev> ext4: fix the might_sleep() warnings in kvfree() Jiayuan Chen <jiayuan.chen(a)shopee.com> ext4: fix use-after-free in update_super_work when racing with umount Helen Koike <koike(a)igalia.com> ext4: reject mount if bigalloc with s_first_data_block != 0 Ye Bin <yebin10(a)huawei.com> ext4: avoid allocate block from corrupted group in ext4_mb_find_by_goal() Edward Adam Davis <eadavis(a)qq.com> ext4: avoid infinite loops caused by residual data Tejas Bharambe <tejas.bharambe(a)outlook.com> ext4: validate p_idx bounds in ext4_ext_correct_indexes Yuto Ohnuki <ytohnuki(a)amazon.com> ext4: replace BUG_ON with proper error handling in ext4_read_inline_folio Jan Kara <jack(a)suse.cz> ext4: make recently_deleted() properly work with lazy itable initialization Jan Kara <jack(a)suse.cz> ext4: fix fsync(2) for nojournal mode Jan Kara <jack(a)suse.cz> ext4: fix stale xarray tags after writeback Deepanshu Kartikey <kartikey406(a)gmail.com> ext4: convert inline data to extents when truncate exceeds inline size Simon Weber <simon.weber.39(a)gmail.com> ext4: fix journal credit check when setting fscrypt context Darrick J. Wong <djwong(a)kernel.org> xfs: remove file_path tracepoint data Darrick J. Wong <djwong(a)kernel.org> xfs: don't irele after failing to iget in xfs_attri_recover_work Long Li <leo.lilong(a)huawei.com> xfs: fix ri_total validation in xlog_recover_attri_commit_pass2 hongao <hongao(a)uniontech.com> xfs: scrub: unlock dquot before early return in quota scrub Yuto Ohnuki <ytohnuki(a)amazon.com> xfs: save ailp before dropping the AIL lock in push callbacks Yuto Ohnuki <ytohnuki(a)amazon.com> xfs: stop reclaim before pushing AIL during unmount Huacai Chen <chenhuacai(a)kernel.org> LoongArch: KVM: Make kvm_get_vcpu_by_cpuid() more robust Huacai Chen <chenhuacai(a)kernel.org> LoongArch: Workaround LS2K/LS7A GPU DMA hang bug Li Jun <lijun01(a)kylinos.cn> LoongArch: Fix missing NULL checks for kstrdup() Imre Deak <imre.deak(a)intel.com> drm/i915/dp_tunnel: Fix error handling when clearing stream BW in atomic state Eric Huang <jinhuieric.huang(a)amd.com> drm/amdgpu: prevent immediate PASID reuse case Claudiu Beznea <claudiu.beznea(a)tuxon.dev> dmaengine: sh: rz-dmac: Move CHCTRL updates under spinlock Claudiu Beznea <claudiu.beznea(a)tuxon.dev> dmaengine: sh: rz-dmac: Protect the driver specific lists Joy Zou <joy.zou(a)nxp.com> dmaengine: fsl-edma: fix channel parameter config for fixed channel requests Davidlohr Bueso <dave(a)stgolabs.net> futex: Clear stale exiting pointer in futex_lock_pi() retry path Jassi Brar <jassisinghbrar(a)gmail.com> irqchip/qcom-mpm: Add missing mailbox TX done acknowledgment Milos Nikic <nikic.milos(a)gmail.com> jbd2: gracefully abort on checkpointing state corruptions Sean Christopherson <seanjc(a)google.com> KVM: x86/mmu: Drop/zap existing present SPTE even when creating an MMIO SPTE Kevin Hao <haokexin(a)gmail.com> net: macb: Use dev_consume_skb_any() to free TX SKBs Kevin Hao <haokexin(a)gmail.com> net: macb: Protect access to net_device::ip_ptr with RCU lock Kevin Hao <haokexin(a)gmail.com> net: macb: Move devm_{free,request}_irq() out of spin lock area Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> scsi: ses: Handle positive SCSI error from ses_recv_diag() Tyllis Xu <livelycarpet87(a)gmail.com> scsi: ibmvfc: Fix OOB access in ibmvfc_discover_targets_done() Amir Goldstein <amir73il(a)gmail.com> ovl: fix wrong detection of 32bit inode numbers Abel Vesa <abel.vesa(a)oss.qualcomm.com> phy: qcom: qmp-ufs: Fix SM8650 PCS table for Gear 4 Borislav Petkov (AMD) <bp(a)alien8.de> x86/cpu: Remove X86_CR4_FRED from the CR4 pinned bits mask Nikunj A Dadhania <nikunj(a)amd.com> x86/cpu: Enable FSGSBASE early in cpu_init_exception_handling() Zhan Xusheng <zhanxusheng1024(a)gmail.com> alarmtimer: Fix argument order in alarm_timer_forward() Jiucheng Xu <jiucheng.xu(a)amlogic.com> erofs: add GFP_NOIO in the bio completion if needed xietangxin <xietangxin(a)yeah.net> virtio_net: Fix UAF on dst_ops when IFF_XMIT_DST_RELEASE is cleared and napi_tx is false Yuchan Nam <entropy1110(a)gmail.com> media: mc, v4l2: serialize REINIT and REQBUFS with req_queue_mutex Sanman Pradhan <psanman(a)juniper.net> hwmon: (peci/cputemp) Fix off-by-one in cputemp_is_visible() Sanman Pradhan <psanman(a)juniper.net> hwmon: (peci/cputemp) Fix crit_hyst returning delta instead of absolute temperature Sanman Pradhan <psanman(a)juniper.net> hwmon: (pmbus/isl68137) Add mutex protection for AVS enable sysfs attributes Marc Zyngier <maz(a)kernel.org> KVM: arm64: Discard PC update state on vcpu reset Srinivas Pandruvada <srinivas.pandruvada(a)linux.intel.com> platform/x86: ISST: Correct locked bit width Viresh Kumar <viresh.kumar(a)linaro.org> cpufreq: conservative: Reset requested_freq on limits change Oliver Hartkopp <socketcan(a)hartkopp.net> can: isotp: fix tx.buf use-after-free in isotp_sendmsg() Ali Norouzi <ali.norouzi(a)keysight.com> can: gw: fix OOB heap access in cgw_csum_crc8_rel() Peter Ujfalusi <peter.ujfalusi(a)linux.intel.com> ASoC: SOF: ipc4-topology: Allow bytes controls without initial payload Alexey Nepomnyashih <sdl(a)nppct.ru> ALSA: firewire-lib: fix uninitialized local variable Hyunwoo Kim <imv4bel(a)gmail.com> ksmbd: do not expire session on binding failure Werner Kasselman <werner(a)verivus.com> ksmbd: fix memory leaks and NULL deref in smb2_lock() Namjae Jeon <linkinjeon(a)kernel.org> ksmbd: fix potencial OOB in get_file_all_info() for compound requests Namjae Jeon <linkinjeon(a)kernel.org> ksmbd: replace hardcoded hdr2_len with offsetof() in smb2_calc_max_out_buf_len() Vasily Gorbik <gor(a)linux.ibm.com> s390/entry: Scrub r12 register on kernel entry Vasily Gorbik <gor(a)linux.ibm.com> s390/barrier: Make array_index_mask_nospec() __always_inline Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> s390/syscalls: Add spectre boundary for syscall dispatch table Marc Kleine-Budde <mkl(a)pengutronix.de> spi: spi-fsl-lpspi: fix teardown order issue (UAF) Jihed Chaibi <jihed.chaibi.dev(a)gmail.com> ASoC: adau1372: Fix clock leak on PLL lock failure Jihed Chaibi <jihed.chaibi.dev(a)gmail.com> ASoC: adau1372: Fix unchecked clk_prepare_enable() return value Marc Buerg <buermarc(a)googlemail.com> sysctl: fix uninitialized variable in proc_do_large_bitmap Guenter Roeck <linux(a)roeck-us.net> hwmon: (pmbus) Introduce the concept of "write-only" attributes Guenter Roeck <linux(a)roeck-us.net> hwmon: (pmbus) Mark lowest/average/highest/rated attributes as read-only Guenter Roeck <linux(a)roeck-us.net> hwmon: (pmbus/core) Fix various coding style issues Sanman Pradhan <psanman(a)juniper.net> hwmon: (adm1177) fix sysfs ABI violation and current unit conversion Srinivasan Shanmugam <srinivasan.shanmugam(a)amd.com> drm/amdgpu: Fix fence put before wait in amdgpu_amdkfd_submit_ib Weiming Shi <bestswngs(a)gmail.com> ACPI: EC: clean up handlers on probe failure in acpi_ec_setup() Danilo Krummrich <dakr(a)kernel.org> spi: use generic driver_override infrastructure Andy Shevchenko <andriy.shevchenko(a)linux.intel.com> spi: Group CS related fields in struct spi_device Yussuf Khalil <dev(a)pp3345.net> drm/amd/display: Do not skip unrelated mode changes in DSC validation Felix Gu <ustc.gu(a)gmail.com> spi: meson-spicc: Fix double-put in remove path Cezary Rojewski <cezary.rojewski(a)intel.com> ASoC: Intel: catpt: Fix the device initialization Felix Gu <ustc.gu(a)gmail.com> spi: sn-f-ospi: Fix resource leak in f_ospi_probe() Alberto Garcia <berto(a)igalia.com> PM: hibernate: Drain trailing zero pages on userspace restore Samasth Norway Ananda <samasth.norway.ananda(a)oracle.com> drm/i915/gmbus: fix spurious timeout on 512-byte burst reads Mike Rapoport (Microsoft) <rppt(a)kernel.org> x86/efi: efi_unmap_boot_services: fix calculation of ranges_to_free size Yihang Li <liyihang9(a)huawei.com> scsi: scsi_transport_sas: Fix the maximum channel scanning issue Tatyana Nikolova <tatyana.e.nikolova(a)intel.com> RDMA/irdma: Return EINVAL for invalid arp index error Anil Samal <anil.samal(a)intel.com> RDMA/irdma: Fix deadlock during netdev reset with active connections Tatyana Nikolova <tatyana.e.nikolova(a)intel.com> RDMA/irdma: Remove reset check from irdma_modify_qp_to_err() Ivan Barrera <ivan.d.barrera(a)intel.com> RDMA/irdma: Clean up unnecessary dereference of event->cm_node Tatyana Nikolova <tatyana.e.nikolova(a)intel.com> RDMA/irdma: Remove a NOP wait_event() in irdma_modify_qp_roce() Tatyana Nikolova <tatyana.e.nikolova(a)intel.com> RDMA/irdma: Update ibqp state to error if QP is already in error state Jacob Moroni <jmoroni(a)google.com> RDMA/irdma: Initialize free_qp completion before using it Chuck Lever <chuck.lever(a)oracle.com> RDMA/rw: Fall back to direct SGE on MR pool exhaustion Sean Rhodes <sean(a)starlabs.systems> ALSA: hda/realtek: Sequence GPIO2 on Star Labs StarFighter Andy Shevchenko <andriy.shevchenko(a)linux.intel.com> regmap: Synchronize cache for the page selector Paolo Valerio <pvalerio(a)redhat.com> net: macb: use the current queue number for stats David Carlier <devnexen(a)gmail.com> netfilter: ctnetlink: use netlink policy range checks Weiming Shi <bestswngs(a)gmail.com> netfilter: nf_conntrack_sip: fix use of uninitialized rtp_addr in process_sdp Pablo Neira Ayuso <pablo(a)netfilter.org> netfilter: nf_conntrack_expect: skip expectations in other netns via proc Ren Wei <n05ec(a)lzu.edu.cn> netfilter: ip6t_rt: reject oversized addrnr in rt_mt6_check() Weiming Shi <bestswngs(a)gmail.com> netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD Chuck Lever <chuck.lever(a)oracle.com> tls: Purge async_hold in tls_decrypt_async_wait() Pengpeng Hou <pengpeng(a)iscas.ac.cn> Bluetooth: btusb: clamp SCO altsetting table indices Hyunwoo Kim <imv4bel(a)gmail.com> Bluetooth: L2CAP: Fix ERTM re-init and zero pdu_len infinite loop Cen Zhang <zzzccc427(a)gmail.com> Bluetooth: btintel: serialize btintel_hw_error() with hci_req_sync_lock Zhang Chen <zhangchen01(a)kylinos.cn> Bluetooth: L2CAP: Fix send LE flow credits in ACL link Miguel Ojeda <ojeda(a)kernel.org> dma-mapping: add missing `inline` for `dma_free_attrs` Thangaraj Samynathan <thangaraj.s(a)microchip.com> net: lan743x: fix duplex configuration in mac_link_up Jiayuan Chen <jiayuan.chen(a)shopee.com> team: fix header_ops type confusion with non-Ethernet ports Wei Fang <wei.fang(a)nxp.com> net: enetc: fix the output issue of 'ethtool --show-ring' Martin KaFai Lau <martin.lau(a)kernel.org> udp: Fix wildcard bind conflict check when using hash2 Eric Dumazet <edumazet(a)google.com> tcp: optimize inet_use_bhash2_on_bind() Yochai Eisenrich <echelonh(a)gmail.com> net: fix fanout UAF in packet_release() via NETDEV_UP race Kuniyuki Iwashima <kuniyu(a)google.com> ipv6: Don't remove permanent routes with exceptions from tb6_gc_hlist. Kuniyuki Iwashima <kuniyu(a)google.com> ipv6: Remove permanent routes from tb6_gc_hlist when all exceptions expire. Kohei Enju <kohei(a)enjuk.jp> iavf: fix out-of-bounds writes in iavf_get_ethtool_stats() Petr Oros <poros(a)redhat.com> ice: use ice_update_eth_stats() for representor stats Petr Oros <poros(a)redhat.com> ice: fix inverted ready check for VF representors David McFarland <corngood(a)gmail.com> platform/x86: intel-hid: disable wakeup_mode during hibernation Alok Tiwari <alok.a.tiwari(a)oracle.com> platform/olpc: olpc-xo175-ec: Fix overflow error message to print inlen Justin Chen <justin.chen(a)broadcom.com> net: bcmasp: fix double disable of clk Justin Chen <justin.chen(a)broadcom.com> net: bcmasp: Add support for asp-v3.0 Justin Chen <justin.chen(a)broadcom.com> net: bcmasp: fix double free of WoL irq Justin Chen <justin.chen(a)broadcom.com> net: bcmasp: streamline early exit in probe Justin Chen <justin.chen(a)broadcom.com> net: bcmasp: Remove support for asp-v2.0 Russell King (Oracle) <rmk+kernel(a)armlinux.org.uk> net: bcm: asp2: convert to phylib managed EEE Russell King (Oracle) <rmk+kernel(a)armlinux.org.uk> net: bcm: asp2: remove tx_lpi_enabled Russell King (Oracle) <rmk+kernel(a)armlinux.org.uk> net: bcm: asp2: fix LPI timer handling Sabrina Dubroca <sd(a)queasysnail.net> rtnetlink: count IFLA_INFO_SLAVE_KIND in if_nlmsg_size Qi Tang <tpluszz77(a)gmail.com> net/smc: fix double-free of smc_spd_priv when tee() duplicates splice pipe buffer Yang Yang <n05ec(a)lzu.edu.cn> openvswitch: validate MPLS set/set_masked payload length Yang Yang <n05ec(a)lzu.edu.cn> openvswitch: defer tunnel netdev_put to RCU release Toke Høiland-Jørgensen <toke(a)redhat.com> net: openvswitch: Avoid releasing netdev before teardown completes Jakub Kicinski <kuba(a)kernel.org> nfc: nci: fix circular locking dependency in nci_close_device Mohammad Heib <mheib(a)redhat.com> ionic: fix persistent MAC address override on PF Luca Leonardo Scorcia <l.scorcia(a)gmail.com> pinctrl: mediatek: common: Fix probe failure for devices without EINT Helen Koike <koike(a)igalia.com> Bluetooth: L2CAP: Fix null-ptr-deref on l2cap_sock_ready_cb Anas Iqbal <mohd.abd.6602(a)gmail.com> Bluetooth: hci_ll: Fix firmware leak on error path Luiz Augusto von Dentz <luiz.von.dentz(a)intel.com> Bluetooth: MGMT: Fix dangling pointer on mgmt_add_adv_patterns_monitor_complete Hyunwoo Kim <imv4bel(a)gmail.com> Bluetooth: SCO: Fix use-after-free in sco_recv_frame() due to missing sock_hold Hyunwoo Kim <imv4bel(a)gmail.com> Bluetooth: L2CAP: Validate PDU length before reading SDU length in l2cap_ecred_data_rcv() Minseo Park <jacob.park.9436(a)gmail.com> Bluetooth: L2CAP: Fix stack-out-of-bounds read in l2cap_ecred_conn_req Oliver Hartkopp <socketcan(a)hartkopp.net> can: statistics: add missing atomic access in hot path Sheng Yong <shengyong1(a)xiaomi.com> erofs: set fileio bio failed in short read case Shigeru Yoshida <syoshida(a)redhat.com> dma: swiotlb: add KMSAN annotations to swiotlb_bounce() Eric Dumazet <edumazet(a)google.com> af_key: validate families in pfkey_send_migrate() Minwoo Ra <raminwo0202(a)gmail.com> xfrm: prevent policy_hthresh.work from racing with netns teardown Hyunwoo Kim <imv4bel(a)gmail.com> xfrm: Fix work re-schedule after cancel in xfrm_nat_keepalive_net_fini() Sabrina Dubroca <sd(a)queasysnail.net> esp: fix skb leak with espintcp and async crypto Steffen Klassert <steffen.klassert(a)secunet.com> xfrm: Fix the usage of skb->sk Sabrina Dubroca <sd(a)queasysnail.net> xfrm: call xdo_dev_state_delete during state update Sabrina Dubroca <sd(a)queasysnail.net> xfrm: fix the condition on x->pcpu_num in xfrm_sa_len Sabrina Dubroca <sd(a)queasysnail.net> xfrm: add missing extack for XFRMA_SA_PCPU in add_acquire and allocspi Peter Yin <peteryin.openbmc(a)gmail.com> i3c: master: dw-i3c: Fix missing of_node for virtual I2C adapter Zhang Heng <zhangheng(a)kylinos.cn> ALSA: hda/realtek: add quirk for ASUS UM6702RC Alan Borzeszkowski <alan.borzeszkowski(a)linux.intel.com> spi: intel-pci: Add support for Nova Lake mobile SPI flash Jie Deng <dengjie03(a)kylinos.cn> usb: core: new quirk to handle devices with zero configurations Yang Wang <kevinyang.wang(a)amd.com> drm/amdgpu: fix gpu idle power consumption issue for gfx v12 Chaitanya Kulkarni <kch(a)nvidia.com> nvmet: move async event work off nvmet-wq Josh Poimboeuf <jpoimboe(a)kernel.org> objtool: Handle Clang RSP musical chairs Uzair Mughal <contact(a)uzair.is-a.dev> ALSA: hda/realtek: Add headset jack quirk for Thinkpad X390 Liucheng Lu <luliucheng100(a)outlook.com> ALSA: hda/realtek: add HP Laptop 14s-dr5xxx mute LED quirk Boris Burkov <boris(a)bur.io> btrfs: set BTRFS_ROOT_ORPHAN_CLEANUP during subvol create zhidao su <soolaugust(a)gmail.com> sched_ext: Use WRITE_ONCE() for the write side of dsq->seq update Günther Noack <gnoack(a)google.com> HID: apple: avoid memory leak in apple_report_fixup() Eduard Zingerman <eddyz87(a)gmail.com> bpf: Fix u32/s32 bounds when ranges cross min/max boundary Maarten Lankhorst <dev(a)lankhorst.se> drm/ttm/tests: Fix build failure on PREEMPT_RT wangdicheng <wangdicheng(a)kylinos.cn> ALSA: hda/senary: Ensure EAPD is enabled during init Isaac J. Manjarres <isaacmanjarres(a)google.com> dma-buf: Include ioctl.h in UAPI header Mark Brown <broonie(a)kernel.org> ASoC: fsl_easrc: Fix event generation in fsl_easrc_iec958_put_bits() Florian Fuchs <fuchsfl(a)gmail.com> scsi: devinfo: Add BLIST_SKIP_IO_HINTS for Iomega ZIP Ranjan Kumar <ranjan.kumar(a)broadcom.com> scsi: mpi3mr: Clear reset history on ready and recheck state after timeout Mark Brown <broonie(a)kernel.org> ASoC: fsl_easrc: Fix event generation in fsl_easrc_iec958_set_reg() Ihor Solodrai <ihor.solodrai(a)linux.dev> module: Fix kernel panic when a symbol st_shndx is out of bounds Denis Benato <denis.benato(a)linux.dev> HID: asus: add xg mobile 2023 external hardware support Romain Sioen <romain.sioen(a)microchip.com> HID: mcp2221: cancel last I2C command on read error Thomas Weißschuh <thomas.weissschuh(a)linutronix.de> kbuild: install-extmod-build: Package resolve_btfids if necessary Valentin Spreckels <valentin(a)spreckels.dev> net: usb: r8152: add TRENDnet TUC-ET2G Takashi Iwai <tiwai(a)suse.de> HID: apple: Add EPOMAKER TH87 to the non-apple keyboards list Günther Noack <gnoack(a)google.com> HID: magicmouse: avoid memory leak in magicmouse_report_fixup() Julius Lehmann <lehmanju(a)devpi.de> HID: magicmouse: fix battery reporting for Apple Magic Trackpad 2 Keith Busch <kbusch(a)kernel.org> nvme-pci: ensure we're polling a polled queue Hans de Goede <johannes.goede(a)oss.qualcomm.com> platform/x86: touchscreen_dmi: Add quirk for y-inverted Goodix touchscreen on SUPI S10 Leif Skunberg <diamondback(a)cohunt.app> platform/x86: intel-hid: Enable 5-button array on ThinkPad X1 Fold 16 Gen 1 Daniel Hodges <hodgesd(a)meta.com> nvme-fabrics: use kfree_sensitive() for DHCHAP secrets Keith Busch <kbusch(a)kernel.org> nvme-pci: cap queue creation to used queues Peter Metz <peter.metz(a)unarin.com> platform/x86: intel-hid: Add Dell 14 Plus 2-in-1 to dmi_vgbs_allow_list Günther Noack <gnoack(a)google.com> HID: asus: avoid memory leak in asus_report_fixup() Daniel Wade <danjwade95(a)gmail.com> bpf: Fix unsound scalar forking in maybe_fork_scalars() for BPF_OR Jenny Guanni Qu <qguanni(a)gmail.com> bpf: Fix undefined behavior in interpreter sdiv/smod for INT_MIN Kumar Kartikeya Dwivedi <memxor(a)gmail.com> bpf: Release module BTF IDR before module unload Danilo Krummrich <dakr(a)kernel.org> driver core: platform: use generic driver_override infrastructure Danilo Krummrich <dakr(a)kernel.org> driver core: generalize driver_override in struct device Danilo Krummrich <dakr(a)kernel.org> sh: platform_early: remove pdev->driver_override check Danilo Krummrich <dakr(a)kernel.org> hwmon: axi-fan: don't use driver_override as IRQ name Smita Koralahalli <Smita.KoralahalliChannabasappa(a)amd.com> cxl/hdm: Avoid incorrect DVSEC fallback when HDM decoders are enabled Peter Zijlstra <peterz(a)infradead.org> perf: Make sure to use pmu_ctx->pmu for groups Sachin Kumar <xcyfun(a)protonmail.com> bpf: Fix constant blinding for PROBE_MEM32 stores Alison Schofield <alison.schofield(a)intel.com> cxl/port: Fix use after free of parent_port in cxl_detach_ep() ------------- Diffstat: Documentation/admin-guide/kernel-parameters.txt | 3 + Documentation/filesystems/overlayfs.rst | 50 +++++ Documentation/hwmon/adm1177.rst | 8 +- Documentation/hwmon/peci-cputemp.rst | 10 +- Makefile | 4 +- .../boot/dts/freescale/imx8mn-tqma8mqnl-mba8mx.dts | 13 +- .../arm64/boot/dts/freescale/imx8mn-tqma8mqnl.dtsi | 22 ++ arch/arm64/kvm/reset.c | 14 ++ arch/loongarch/include/asm/linkage.h | 36 ++++ arch/loongarch/include/asm/sigframe.h | 9 + arch/loongarch/kernel/asm-offsets.c | 2 + arch/loongarch/kernel/env.c | 7 +- arch/loongarch/kernel/signal.c | 6 +- arch/loongarch/kvm/vcpu.c | 3 + arch/loongarch/pci/pci.c | 80 +++++++ arch/loongarch/vdso/Makefile | 4 +- arch/loongarch/vdso/sigreturn.S | 6 +- arch/powerpc/net/bpf_jit_comp64.c | 23 +- arch/s390/include/asm/barrier.h | 4 +- arch/s390/kernel/entry.S | 3 + arch/s390/kernel/syscall.c | 2 + arch/sh/drivers/platform_early.c | 4 - arch/x86/kernel/cpu/common.c | 20 +- arch/x86/kvm/mmu/mmu.c | 14 +- arch/x86/platform/efi/quirks.c | 2 +- drivers/acpi/ec.c | 2 + drivers/base/bus.c | 43 +++- drivers/base/core.c | 2 + drivers/base/dd.c | 60 ++++++ drivers/base/platform.c | 37 +--- drivers/base/regmap/regmap.c | 30 ++- drivers/bluetooth/btintel.c | 11 +- drivers/bluetooth/btusb.c | 5 +- drivers/bluetooth/hci_ll.c | 2 + drivers/bus/simple-pm-bus.c | 4 +- drivers/clk/imx/clk-scu.c | 3 +- drivers/cpufreq/cpufreq_conservative.c | 12 ++ drivers/cpufreq/cpufreq_governor.c | 3 + drivers/cpufreq/cpufreq_governor.h | 1 + drivers/cxl/core/hdm.c | 25 +-- drivers/cxl/core/port.c | 8 +- drivers/dma/dw-edma/dw-hdma-v0-core.c | 6 +- drivers/dma/fsl-edma-main.c | 26 +-- drivers/dma/idxd/cdev.c | 8 +- drivers/dma/idxd/device.c | 7 +- drivers/dma/idxd/submit.c | 2 +- drivers/dma/idxd/sysfs.c | 1 + drivers/dma/sh/rz-dmac.c | 68 +++--- drivers/dma/xilinx/xdma.c | 4 +- drivers/dma/xilinx/xilinx_dma.c | 46 ++-- drivers/gpu/drm/amd/amdgpu/amdgpu_amdkfd.c | 4 +- drivers/gpu/drm/amd/amdgpu/amdgpu_ids.c | 45 ++-- drivers/gpu/drm/amd/amdgpu/amdgpu_ids.h | 1 + drivers/gpu/drm/amd/amdgpu/amdgpu_vm.c | 1 + drivers/gpu/drm/amd/amdgpu/mes_v12_0.c | 5 +- drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm.c | 5 + drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm.h | 1 + .../amd/display/amdgpu_dm/amdgpu_dm_mst_types.c | 4 +- drivers/gpu/drm/i915/display/intel_display.c | 8 +- drivers/gpu/drm/i915/display/intel_dp_tunnel.c | 20 +- drivers/gpu/drm/i915/display/intel_dp_tunnel.h | 11 +- drivers/gpu/drm/i915/display/intel_gmbus.c | 4 +- drivers/gpu/drm/ttm/tests/ttm_bo_test.c | 4 +- drivers/gpu/drm/xe/xe_pt.c | 12 +- drivers/gpu/drm/xe/xe_vm.c | 22 +- drivers/gpu/drm/xe/xe_vm_types.h | 4 + drivers/hid/hid-apple.c | 7 +- drivers/hid/hid-asus.c | 18 +- drivers/hid/hid-ids.h | 1 + drivers/hid/hid-magicmouse.c | 6 +- drivers/hid/hid-mcp2221.c | 2 + drivers/hwmon/adm1177.c | 54 +++-- drivers/hwmon/axi-fan-control.c | 2 +- drivers/hwmon/peci/cputemp.c | 4 +- drivers/hwmon/pmbus/isl68137.c | 21 +- drivers/hwmon/pmbus/pmbus_core.c | 117 +++++++---- drivers/i3c/master/dw-i3c-master.c | 2 + drivers/infiniband/core/rw.c | 27 ++- drivers/infiniband/hw/irdma/cm.c | 29 +-- drivers/infiniband/hw/irdma/utils.c | 2 - drivers/infiniband/hw/irdma/verbs.c | 9 +- drivers/irqchip/irq-qcom-mpm.c | 3 + drivers/media/mc/mc-request.c | 5 + .../media/platform/nxp/imx8-isi/imx8-isi-video.c | 156 +++++--------- drivers/media/v4l2-core/v4l2-ioctl.c | 5 +- drivers/net/ethernet/broadcom/asp2/bcmasp.c | 231 +++++++++----------- drivers/net/ethernet/broadcom/asp2/bcmasp.h | 82 ++++---- .../net/ethernet/broadcom/asp2/bcmasp_ethtool.c | 75 +------ drivers/net/ethernet/broadcom/asp2/bcmasp_intf.c | 38 ++-- .../net/ethernet/broadcom/asp2/bcmasp_intf_defs.h | 3 +- drivers/net/ethernet/cadence/macb_main.c | 41 ++-- .../net/ethernet/freescale/enetc/enetc_ethtool.c | 2 + drivers/net/ethernet/intel/iavf/iavf_ethtool.c | 31 ++- drivers/net/ethernet/intel/ice/ice_ethtool.c | 14 +- drivers/net/ethernet/intel/ice/ice_main.c | 3 + drivers/net/ethernet/intel/ice/ice_ptp.c | 17 +- drivers/net/ethernet/intel/ice/ice_ptp.h | 5 + drivers/net/ethernet/intel/ice/ice_repr.c | 5 +- drivers/net/ethernet/intel/ice/ice_virtchnl_fdir.c | 24 ++- drivers/net/ethernet/intel/idpf/idpf.h | 2 - drivers/net/ethernet/intel/idpf/idpf_lib.c | 233 +++++++++++---------- drivers/net/ethernet/intel/idpf/idpf_txrx.c | 38 ++-- drivers/net/ethernet/intel/idpf/idpf_txrx.h | 5 +- drivers/net/ethernet/intel/idpf/idpf_virtchnl.c | 9 +- drivers/net/ethernet/microchip/lan743x_main.c | 5 + drivers/net/ethernet/pensando/ionic/ionic_lif.c | 17 +- drivers/net/team/team_core.c | 65 +++++- drivers/net/usb/r8152.c | 1 + drivers/net/virtio_net.c | 1 + drivers/nvme/host/fabrics.c | 4 +- drivers/nvme/host/pci.c | 11 +- drivers/nvme/target/admin-cmd.c | 2 +- drivers/nvme/target/core.c | 14 +- drivers/nvme/target/nvmet.h | 1 + drivers/nvme/target/rdma.c | 1 + drivers/phy/qualcomm/phy-qcom-qmp-ufs.c | 3 +- drivers/phy/ti/phy-j721e-wiz.c | 2 + drivers/pinctrl/mediatek/pinctrl-mtk-common.c | 9 +- drivers/platform/olpc/olpc-xo175-ec.c | 2 +- drivers/platform/x86/intel/hid.c | 23 +- .../x86/intel/speed_select_if/isst_tpmi_core.c | 2 +- drivers/platform/x86/touchscreen_dmi.c | 18 ++ drivers/scsi/ibmvscsi/ibmvfc.c | 3 +- drivers/scsi/mpi3mr/mpi3mr_fw.c | 10 + drivers/scsi/scsi_devinfo.c | 2 +- drivers/scsi/scsi_transport_sas.c | 2 +- drivers/scsi/ses.c | 2 +- drivers/slimbus/qcom-ngd-ctrl.c | 6 +- drivers/spi/spi-fsl-lpspi.c | 3 +- drivers/spi/spi-intel-pci.c | 1 + drivers/spi/spi-meson-spicc.c | 2 - drivers/spi/spi-sn-f-ospi.c | 17 +- drivers/spi/spi-tegra210-quad.c | 20 ++ drivers/spi/spi.c | 19 +- drivers/usb/core/config.c | 6 +- drivers/usb/core/quirks.c | 5 + drivers/virt/coco/tdx-guest/tdx-guest.c | 14 +- drivers/xen/privcmd.c | 3 + fs/btrfs/block-group.c | 2 +- fs/btrfs/disk-io.c | 4 +- fs/btrfs/ioctl.c | 7 + fs/btrfs/volumes.c | 5 +- fs/erofs/fileio.c | 6 +- fs/erofs/zdata.c | 3 + fs/ext4/crypto.c | 9 +- fs/ext4/ext4.h | 1 + fs/ext4/extents.c | 23 +- fs/ext4/fast_commit.c | 13 +- fs/ext4/fsync.c | 16 +- fs/ext4/ialloc.c | 6 + fs/ext4/inline.c | 10 +- fs/ext4/inode.c | 12 ++ fs/ext4/mballoc.c | 30 +-- fs/ext4/page-io.c | 10 +- fs/ext4/super.c | 16 +- fs/ext4/sysfs.c | 10 +- fs/jbd2/checkpoint.c | 15 +- fs/netfs/iterator.c | 43 ++++ fs/overlayfs/copy_up.c | 6 +- fs/overlayfs/overlayfs.h | 21 ++ fs/overlayfs/ovl_entry.h | 7 +- fs/overlayfs/params.c | 42 +++- fs/overlayfs/super.c | 2 +- fs/overlayfs/util.c | 5 +- fs/smb/server/oplock.c | 72 ++++--- fs/smb/server/smb2pdu.c | 73 +++++-- fs/xfs/scrub/quota.c | 4 +- fs/xfs/scrub/trace.h | 12 +- fs/xfs/xfs_attr_item.c | 5 +- fs/xfs/xfs_dquot_item.c | 9 +- fs/xfs/xfs_inode_item.c | 9 +- fs/xfs/xfs_mount.c | 7 +- fs/xfs/xfs_trace.h | 47 +++-- fs/xfs/xfs_trans_ail.c | 26 ++- include/linux/device.h | 54 +++++ include/linux/device/bus.h | 4 + include/linux/dma-mapping.h | 4 +- include/linux/platform_device.h | 5 - include/linux/spi/spi.h | 42 ++-- include/linux/usb/quirks.h | 3 + include/linux/usb/r8152.h | 1 + include/net/inet_hashtables.h | 14 ++ include/net/ip6_fib.h | 21 +- include/uapi/linux/dma-buf.h | 1 + include/uapi/linux/netfilter/nf_conntrack_common.h | 4 + kernel/bpf/btf.c | 24 ++- kernel/bpf/core.c | 43 +++- kernel/bpf/verifier.c | 26 ++- kernel/dma/swiotlb.c | 21 +- kernel/events/core.c | 19 +- kernel/futex/pi.c | 3 +- kernel/futex/syscalls.c | 8 + kernel/module/main.c | 7 + kernel/power/snapshot.c | 11 + kernel/sched/ext.c | 2 +- kernel/sysctl.c | 2 +- kernel/time/alarmtimer.c | 2 +- kernel/trace/trace_osnoise.c | 48 ++--- mm/damon/sysfs.c | 3 + net/bluetooth/l2cap_core.c | 34 ++- net/bluetooth/l2cap_sock.c | 3 + net/bluetooth/mgmt.c | 2 +- net/bluetooth/sco.c | 10 +- net/can/af_can.c | 4 +- net/can/af_can.h | 2 +- net/can/gw.c | 6 +- net/can/isotp.c | 24 ++- net/can/proc.c | 3 +- net/core/net-procfs.c | 49 +++-- net/core/rtnetlink.c | 9 +- net/ipv4/esp4.c | 11 +- net/ipv4/inet_connection_sock.c | 22 +- net/ipv4/udp.c | 2 +- net/ipv6/addrconf.c | 4 +- net/ipv6/esp6.c | 11 +- net/ipv6/ip6_fib.c | 15 +- net/ipv6/netfilter/ip6t_rt.c | 4 + net/ipv6/route.c | 2 +- net/ipv6/xfrm6_output.c | 4 +- net/key/af_key.c | 19 +- net/netfilter/nf_conntrack_expect.c | 4 + net/netfilter/nf_conntrack_netlink.c | 16 +- net/netfilter/nf_conntrack_proto_tcp.c | 10 +- net/netfilter/nf_conntrack_sip.c | 14 +- net/netfilter/nfnetlink_log.c | 8 +- net/nfc/nci/core.c | 10 +- net/openvswitch/flow_netlink.c | 2 + net/openvswitch/vport-netdev.c | 11 +- net/packet/af_packet.c | 1 + net/smc/smc_rx.c | 9 +- net/tls/tls_sw.c | 2 +- net/xfrm/xfrm_interface_core.c | 2 +- net/xfrm/xfrm_nat_keepalive.c | 2 +- net/xfrm/xfrm_output.c | 7 +- net/xfrm/xfrm_policy.c | 4 +- net/xfrm/xfrm_state.c | 1 + net/xfrm/xfrm_user.c | 7 +- rust/kernel/init/macros.rs | 165 ++++++++++++--- scripts/package/install-extmod-build | 4 + security/landlock/errata/abi-1.h | 16 ++ security/landlock/fs.c | 78 ++++--- sound/firewire/amdtp-stream.c | 2 +- sound/pci/hda/patch_realtek.c | 41 +++- sound/pci/hda/patch_senarytech.c | 5 + sound/soc/codecs/adau1372.c | 34 ++- sound/soc/codecs/ak4458.c | 13 +- sound/soc/fsl/fsl_easrc.c | 14 +- sound/soc/intel/catpt/device.c | 10 +- sound/soc/intel/catpt/dsp.c | 3 - sound/soc/samsung/i2s.c | 6 +- sound/soc/sof/ipc4-topology.c | 2 +- tools/objtool/arch/x86/decode.c | 68 +++--- tools/objtool/check.c | 14 ++ .../testing/selftests/bpf/prog_tests/reg_bounds.c | 62 +++++- 254 files changed, 2911 insertions(+), 1476 deletions(-)

7 hours, 55 minutes

[PATCH 6.12 000/460] 6.12.78-rc1 review

by Greg Kroah-Hartman

This is the start of the stable review cycle for the 6.12.78 release. There are 460 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know. Responses should be made by Wed, 25 Mar 2026 13:44:33 +0000. Anything received after that time might be too late. The whole patch series can be found in one patch at: https://www.kernel.org/pub/linux/kernel/v6.x/stable-review/patch-6.12.78-rc… or in the git tree and branch at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-6.12.y and the diffstat can be found below. thanks, greg k-h ------------- Pseudo-Shortlog of commits: Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> Linux 6.12.78-rc1 Dapeng Mi <dapeng1.mi(a)linux.intel.com> perf/x86/intel: Add missing branch counters constraint apply Guenter Roeck <linux(a)roeck-us.net> hwmon: (max6639) Fix pulses-per-revolution implementation Josh Law <objecting(a)objecting.org> tools/bootconfig: fix fd leak in load_xbc_file() on fstat failure Josh Law <objecting(a)objecting.org> lib/bootconfig: check xbc_init_node() return in override path Kees Cook <kees(a)kernel.org> fs/tests: exec: Remove bad test vector Rahul Bukte <rahul.bukte(a)sony.com> drm/i915/gt: Check set_default_submission() before deferencing Hyunwoo Kim <imv4bel(a)gmail.com> ksmbd: fix use-after-free in durable v2 replay of active file handles Hyunwoo Kim <imv4bel(a)gmail.com> ksmbd: fix use-after-free of share_conf in compound request Andy Nguyen <theofficialflow1996(a)gmail.com> drm/amd: fix dcn 2.01 check Srinivasan Shanmugam <srinivasan.shanmugam(a)amd.com> drm/amd/display: Fix DisplayID not-found handling in parse_edid_displayid_vrr() Kamal Dasu <kamal.dasu(a)broadcom.com> mtd: rawnand: brcmnand: skip DMA during panic write Kamal Dasu <kamal.dasu(a)broadcom.com> mtd: rawnand: serialize lock/unlock against other NAND operations Kairui Song <kasong(a)tencent.com> mm/shmem, swap: avoid redundant Xarray lookup during swapin Kairui Song <kasong(a)tencent.com> mm/shmem, swap: improve cached mTHP handling and fix potential hang Kemeng Shi <shikemeng(a)huaweicloud.com> mm: shmem: avoid unpaired folio_unlock() in shmem_swapin_folio() Baolin Wang <baolin.wang(a)linux.alibaba.com> mm: shmem: fix potential data corruption during shmem swapin Pratyush Yadav <p.yadav(a)ti.com> mtd: spi-nor: core: avoid odd length/address writes in 8D-8D-8D mode Pratyush Yadav <p.yadav(a)ti.com> mtd: spi-nor: core: avoid odd length/address reads on 8D-8D-8D mode Kyle Meyer <kyle.meyer(a)hpe.com> x86/platform/uv: Handle deconfigured sockets Masami Hiramatsu (Google) <mhiramat(a)kernel.org> ring-buffer: Fix to update per-subbuf entries of persistent ring buffer Gabor Juhos <j4g8y7(a)gmail.com> i2c: pxa: defer reset on Armada 3700 when recovery is used Christophe JAILLET <christophe.jaillet(a)wanadoo.fr> i2c: fsi: Fix a potential leak in fsi_i2c_probe() Johan Hovold <johan(a)kernel.org> i2c: cp2615: fix serial string NULL-deref at probe Ji-Ze Hong (Peter Hong) <peter_hong(a)fintek.com.tw> USB: serial: f81232: fix incomplete serial port generation Jouni Högander <jouni.hogander(a)intel.com> drm/i915/psr: Compute PSR entry_setup_frames into intel_crtc_state Sanman Pradhan <psanman(a)juniper.net> hwmon: (pmbus/isl68137) Fix unchecked return value and use sysfs_emit() Sanman Pradhan <psanman(a)juniper.net> hwmon: (pmbus/mp2975) Add error check for pmbus_read_word_data() return value Weiming Shi <bestswngs(a)gmail.com> icmp: fix NULL pointer dereference in icmp_tag_validation() Anas Iqbal <mohd.abd.6602(a)gmail.com> net: dsa: bcm_sf2: fix missing clk_disable_unprepare() in error paths Muhammad Hammad Ijaz <mhijaz(a)amazon.com> net: mvpp2: guard flow control update with global_tx_fc in buffer switching Weiming Shi <bestswngs(a)gmail.com> nfnetlink_osf: validate individual option lengths in fingerprints Pablo Neira Ayuso <pablo(a)netfilter.org> netfilter: nf_tables: release flowtable after rcu grace period on error Florian Westphal <fw(a)strlen.de> netfilter: bpf: defer hook memory release until rcu readers are done Xiang Mei <xmei5(a)asu.edu> net: bonding: fix NULL deref in bond_debug_rlb_hash_show Xiang Mei <xmei5(a)asu.edu> udp_tunnel: fix NULL deref caused by udp_sock_create6 when CONFIG_IPV6=n Jianbo Liu <jianbol(a)nvidia.com> net/mlx5e: Fix race condition during IPSec ESN update Jianbo Liu <jianbol(a)nvidia.com> net/mlx5e: Prevent concurrent access to IPSec ASO context Cosmin Ratiu <cratiu(a)nvidia.com> net/mlx5: qos: Restrict RTNL area to avoid a lock cycle Fedor Pchelkin <pchelkin(a)ispras.ru> net: macb: fix uninitialized rx_fs_lock Rafael J. Wysocki <rafael.j.wysocki(a)intel.com> ACPI: processor: Fix previous acpi_processor_errata_piix4() fix Guenter Roeck <linux(a)roeck-us.net> wifi: wlcore: Return -ENOMEM instead of -EAGAIN if there is not enough headroom Xiang Mei <xmei5(a)asu.edu> wifi: mac80211: fix NULL deref in mesh_matches_local() Petr Oros <poros(a)redhat.com> iavf: fix VLAN filter lost on add/delete race Zdenek Bouska <zdenek.bouska(a)siemens.com> igc: fix page fault in XDP TX timestamps handling Kohei Enju <kohei(a)enjuk.jp> igc: fix missing update of skb->tail in igc_xmit_frame() Nikola Z. Ivanov <zlatistiv(a)gmail.com> net: usb: aqc111: Do not perform PM inside suspend callback Daniel Borkmann <daniel(a)iogearbox.net> clsact: Fix use-after-free in init/destroy rollback asymmetry Tobi Gaertner <tob.gaertner(a)me.com> net: usb: cdc_ncm: add ndpoffset to NDP32 nframes bounds check Tobi Gaertner <tob.gaertner(a)me.com> net: usb: cdc_ncm: add ndpoffset to NDP16 nframes bounds check Lorenzo Bianconi <lorenzo(a)kernel.org> net: airoha: Remove airoha_dev_stop() in airoha_remove() Lorenzo Bianconi <lorenzo(a)kernel.org> net: airoha: Read completion queue data in airoha_qdma_tx_napi_poll() Lorenzo Bianconi <lorenzo(a)kernel.org> net: airoha: fix PSE memory configuration in airoha_fe_pse_ports_init() Lorenzo Bianconi <lorenzo(a)kernel.org> net: airoha: read default PSE reserved pages value before updating Jamal Hadi Salim <jhs(a)mojatatu.com> net/sched: teql: Fix double-free in teql_master_xmit Jiayuan Chen <jiayuan.chen(a)shopee.com> net/smc: fix NULL dereference and UAF in smc_tcp_syn_recv_sock() Eric Dumazet <edumazet(a)google.com> bonding: prevent potential infinite loop in bond_header_parse() Bart Van Assche <bvanassche(a)acm.org> PM: runtime: Fix a race condition related to device removal Rafael J. Wysocki <rafael.j.wysocki(a)intel.com> sched: idle: Consolidate the handling of two special cases Dipayaan Roy <dipayanroy(a)linux.microsoft.com> net: mana: fix use-after-free in mana_hwc_destroy_channel() by reordering teardown Justin Chen <justin.chen(a)broadcom.com> net: bcmgenet: increase WoL poll timeout Jenny Guanni Qu <qguanni(a)gmail.com> netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() Jenny Guanni Qu <qguanni(a)gmail.com> netfilter: xt_time: use unsigned int for monthday bit shift Pablo Neira Ayuso <pablo(a)netfilter.org> netfilter: xt_CT: drop pending enqueued packets on template removal Pablo Neira Ayuso <pablo(a)netfilter.org> netfilter: nft_ct: drop pending enqueued packets on removal Pablo Neira Ayuso <pablo(a)netfilter.org> nf_tables: nft_dynset: fix possible stateful expression memleak in error path Jenny Guanni Qu <qguanni(a)gmail.com> netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case Lukas Johannes Möller <research(a)johannes-moeller.dev> netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() Hyunwoo Kim <imv4bel(a)gmail.com> netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() Florian Westphal <fw(a)strlen.de> netfilter: ctnetlink: remove refcounting in expectation dumpers Sabrina Dubroca <sd(a)queasysnail.net> mpls: add missing unregister_netdevice_notifier to mpls_init Jiayuan Chen <jiayuan.chen(a)shopee.com> net/rose: fix NULL pointer dereference in rose_transmit_link on reconnect Hyunwoo Kim <imv4bel(a)gmail.com> bridge: cfm: Fix race condition in peer_mep deletion Dmitry Baryshkov <dmitry.baryshkov(a)oss.qualcomm.com> Bluetooth: qca: fix ROM version reading on WCN3998 chips Shaurya Rane <ssrane_b23(a)ee.vjti.ac.in> Bluetooth: L2CAP: Fix use-after-free in l2cap_unregister_user Luiz Augusto von Dentz <luiz.von.dentz(a)intel.com> Bluetooth: HIDP: Fix possible UAF Wang Tao <wangtao554(a)huawei.com> Bluetooth: MGMT: Fix list corruption and UAF in command complete handlers Michael Grzeschik <m.grzeschik(a)pengutronix.de> Bluetooth: hci_sync: Fix hci_le_create_conn_sync Luiz Augusto von Dentz <luiz.von.dentz(a)intel.com> Bluetooth: ISO: Fix defer tests being unstable Christian Eggers <ceggers(a)arri.de> Bluetooth: SMP: make SM/PER/KDU/BI-04-C happy Christian Eggers <ceggers(a)arri.de> Bluetooth: LE L2CAP: Disconnect if sum of payload sizes exceed SDU Christian Eggers <ceggers(a)arri.de> Bluetooth: LE L2CAP: Disconnect if received packet's SDU exceeds IMTU Felix Gu <ustc.gu(a)gmail.com> firmware: arm_scpi: Fix device_node reference leak in probe path Yeoreum Yun <yeoreum.yun(a)arm.com> firmware: arm_ffa: Remove vm_id argument in ffa_rxtx_unmap() Fabrizio Castro <fabrizio.castro.jz(a)renesas.com> arm64: dts: renesas: r9a09g057: Remove wdt{0,2,3} nodes Ovidiu Panait <ovidiu.panait.rb(a)renesas.com> arm64: dts: renesas: r9a09g057: Add RTC node Peddolla Harshavardhan Reddy <peddolla.reddy(a)oss.qualcomm.com> wifi: cfg80211: cancel pmsr_free_wk in cfg80211_pmsr_wdev_down Kuniyuki Iwashima <kuniyu(a)google.com> wifi: mac80211: Fix static_branch_dec() underflow for aql_disable. Chen Ni <nichen(a)iscas.ac.cn> soc: fsl: cpm1: qmc: Fix error check for devm_ioremap_resource() in qmc_qe_init_resources() Richard Genoud <richard.genoud(a)bootlin.com> soc: fsl: qbman: fix race condition in qman_destroy_fq Shawn Lin <shawn.lin(a)rock-chips.com> soc: rockchip: grf: Add missing of_node_put() when returning Felix Gu <ustc.gu(a)gmail.com> cache: ax45mp: Fix device node reference leak in ax45mp_cache_init() Felix Gu <ustc.gu(a)gmail.com> cache: starfive: fix device node leak in starlink_cache_init() Zilin Guan <zilin(a)seu.edu.cn> soc: microchip: mpfs: Fix memory leak in mpfs_sys_controller_probe() ZhengYuan Huang <gality369(a)gmail.com> btrfs: tree-checker: fix misleading root drop_level error message Filipe Manana <fdmanana(a)suse.com> btrfs: log new dentries when logging parent dir of a conflicting inode Damien Le Moal <dlemoal(a)kernel.org> ata: libata-scsi: report correct sense field pointer in ata_scsiop_maint_in() Damien Le Moal <dlemoal(a)kernel.org> ata: libata-scsi: Return residual for emulated SCSI commands Luiz Augusto von Dentz <luiz.von.dentz(a)intel.com> Bluetooth: L2CAP: Fix accepting multiple L2CAP_ECRED_CONN_REQ Matthew Brost <matthew.brost(a)intel.com> drm/xe: Open-code GGTT MMIO access protection Ashutosh Dixit <ashutosh.dixit(a)intel.com> drm/xe/oa: Allow reading after disabling OA stream Alex Deucher <alexander.deucher(a)amd.com> drm/amdgpu: apply state adjust rules to some additional HAINAN vairants Alex Deucher <alexander.deucher(a)amd.com> drm/radeon: apply state adjust rules to some additional HAINAN vairants Alessio Belle <alessio.belle(a)imgtec.com> drm/imagination: Fix deadlock in soft reset sequence Alex Deucher <alexander.deucher(a)amd.com> drm/amdgpu/mmhub4.1.0: add bounds checking for cid Alex Deucher <alexander.deucher(a)amd.com> drm/amdgpu/mmhub3.0: add bounds checking for cid Alex Deucher <alexander.deucher(a)amd.com> drm/amdgpu/mmhub3.0.2: add bounds checking for cid Alex Deucher <alexander.deucher(a)amd.com> drm/amdgpu/mmhub3.0.1: add bounds checking for cid Alex Deucher <alexander.deucher(a)amd.com> drm/amdgpu/mmhub2.3: add bounds checking for cid Alex Deucher <alexander.deucher(a)amd.com> drm/amdgpu/mmhub2.0: add bounds checking for cid Alex Deucher <alexander.deucher(a)amd.com> drm/amdgpu/gmc9.0: add bounds checking for cid Xi Ruoyao <xry111(a)xry111.site> drm/amd/display: Wrap dcn32_override_min_req_memclk() in DC_FP_{START, END} Maarten Lankhorst <dev(a)lankhorst.se> drm: Fix use-after-free on framebuffers and property blobs when calling drm_dev_unplug Jens Axboe <axboe(a)kernel.dk> io_uring/kbuf: propagate BUF_MORE through early buffer commit path Maciej Andrzejewski ICEYE <maciej.andrzejewski(a)m-works.net> serial: uartlite: fix PM runtime usage count underflow on probe Ilpo Järvinen <ilpo.jarvinen(a)linux.intel.com> serial: 8250: Add late synchronize_irq() to shutdown to handle DW UART BUSY Raul E Rangel <rrangel(a)chromium.org> serial: 8250: Fix TX deadlock when using DMA Martin Roukala (né Peres) <martin.roukala(a)mupuf.org> serial: 8250_pci: add support for the AX99100 Guanghui Feng <guanghuifeng(a)linux.alibaba.com> iommu/vt-d: Fix intel iommu iotlb sync hardlockup and retry Finn Thain <fthain(a)linux-m68k.org> mtd: Avoid boot crash in RedBoot partition table parser Chen Ni <nichen(a)iscas.ac.cn> mtd: rawnand: cadence: Fix error check for dma_alloc_coherent() in cadence_nand_init() Olivier Sobrie <olivier(a)sobrie.be> mtd: rawnand: pl353: make sure optimal timings are applied Johan Hovold <johan(a)kernel.org> spi: fix statistics allocation Johan Hovold <johan(a)kernel.org> spi: fix use-after-free on controller registration failure Maíra Canal <mcanal(a)igalia.com> pmdomain: bcm: bcm2835-power: Increase ASB control timeout Luke Wang <ziniu.wang_1(a)nxp.com> mmc: sdhci: fix timing selection for 1-bit bus width Matthew Schwartz <matthew.schwartz(a)linux.dev> mmc: sdhci-pci-gli: fix GL9750 DMA write corruption Damien Le Moal <dlemoal(a)kernel.org> ata: libata-core: disable LPM on ADATA SU680 SSD Kevin Hao <haokexin(a)gmail.com> net: macb: Reinitialize tx/rx queue pointer registers and rx ring during resume Kevin Hao <haokexin(a)gmail.com> net: macb: Introduce gem_init_rx_ring() Yang Yang <n05ec(a)lzu.edu.cn> batman-adv: avoid OGM aggregation when skb tailroom is insufficient Filipe Manana <fdmanana(a)suse.com> btrfs: fix transaction abort when snapshotting received subvolumes Masami Hiramatsu (Google) <mhiramat(a)kernel.org> kprobes: Remove unneeded warnings from __arm_kprobe_ftrace() Masami Hiramatsu (Google) <mhiramat(a)kernel.org> kprobes: Remove unneeded goto Hari Bathini <hbathini(a)linux.ibm.com> powerpc64/bpf: fix kfunc call support Naveen N Rao <naveen(a)kernel.org> powerpc64/bpf: Fold bpf_jit_emit_func_call_hlp() into bpf_jit_emit_func_call_rel() Harald Freudenberger <freude(a)linux.ibm.com> s390/zcrypt: Enable AUTOSEL_DOM for CCA serialnr sysfs attribute Jouni Högander <jouni.hogander(a)intel.com> drm/i915/psr: Write DSC parameters on Selective Update in ET mode Jouni Högander <jouni.hogander(a)intel.com> drm/i915/dsc: Add helper for writing DSC Selective Update ET parameters Jouni Högander <jouni.hogander(a)intel.com> drm/i915/dsc: Add Selective Update register definitions Namjae Jeon <linkinjeon(a)kernel.org> ksmbd: use volume UUID in FS_OBJECT_ID_INFORMATION Namjae Jeon <linkinjeon(a)kernel.org> ksmbd: unset conn->binding on failed binding request Paulo Alcantara <pc(a)manguebit.org> smb: client: fix krb5 mount with username option Lukas Johannes Möller <research(a)johannes-moeller.dev> Bluetooth: L2CAP: Validate L2CAP_INFO_RSP payload length before access Lukas Johannes Möller <research(a)johannes-moeller.dev> Bluetooth: L2CAP: Fix type confusion in l2cap_ecred_reconf_rsp() Felix Fietkau <nbd(a)nbd.name> mac80211: fix crash in ieee80211_chan_bw_change for AP_VLAN stations Helge Deller <deller(a)gmx.de> parisc: Flush correct cache in cacheflush() syscall Fedor Pchelkin <pchelkin(a)ispras.ru> net: macb: fix use-after-free access to PTP clock Ian Ray <ian.ray(a)gehealthcare.com> NFC: nxp-nci: allow GPIOs to sleep Tiezhu Yang <yangtiezhu(a)loongson.cn> LoongArch: Give more information if kmem access failed Ira Weiny <ira.weiny(a)intel.com> nvdimm/bus: Fix potential use after free in asynchronous initialization Jeff Layton <jlayton(a)kernel.org> sunrpc: fix cache_request leak in cache_release Benjamin Tissoires <bentiss(a)kernel.org> HID: bpf: prevent buffer overflow in hid_hw_request Benjamin Tissoires <bentiss(a)kernel.org> selftests/hid: fix compilation when bpf_wq and hid_device are not exported Jeff Layton <jlayton(a)kernel.org> nfsd: fix heap overflow in NFSv4.0 LOCK replay cache Chuck Lever <chuck.lever(a)oracle.com> NFSD: Hold net reference for the lifetime of /proc/fs/nfs/exports fd Lijo Lazar <lijo.lazar(a)amd.com> drm/amdgpu: Add basic validation for RAS header Timur Kristóf <timur.kristof(a)gmail.com> drm/amd/pm: Use pm_display_cfg in legacy DPM (v2) Timur Kristóf <timur.kristof(a)gmail.com> drm/amd/display: Add pixel_clock to amd_pp_display_configuration Jouni Högander <jouni.hogander(a)intel.com> drm/i915/psr: Repeat Selective Update area alignment Jouni Högander <jouni.hogander(a)intel.com> drm/i915/alpm: ALPM disable fixes Heiko Carstens <hca(a)linux.ibm.com> s390/xor: Fix xor_xc_2() inline assembly constraints Heiko Carstens <hca(a)linux.ibm.com> s390/stackleak: Fix __stackleak_poison() inline assembly constraint Peter Zijlstra <peterz(a)infradead.org> sched/fair: Fix zero_vruntime tracking Jens Axboe <axboe(a)kernel.dk> io_uring/kbuf: check if target buffer list is still legacy on recycle Cheng-Yang Chou <yphbchou0911(a)gmail.com> sched_ext: Remove redundant css_put() in scx_cgroup_init() Deepanshu Kartikey <kartikey406(a)gmail.com> mm: thp: deny THP for files on anonymous inodes Gao Xiang <xiang(a)kernel.org> erofs: fix inline data read failure for ztailpacking pclusters Darrick J. Wong <djwong(a)kernel.org> xfs: get rid of the xchk_xfile_*_descr calls Zilin Guan <zilin(a)seu.edu.cn> binfmt_misc: restore write access before closing files opened by open_exec() Vladimir Oltean <vladimir.oltean(a)nxp.com> net: dsa: properly keep track of conduit reference Guodong Xu <guodong(a)riscstar.com> dmaengine: mmp_pdma: Fix race condition in mmp_pdma_residue() Han Guangjiang <hanguangjiang(a)lixiang.com> blk-throttle: fix access race during throttle policy activation Chao Yu <chao(a)kernel.org> f2fs: fix to avoid migrating empty section Zhiguo Niu <zhiguo.niu(a)unisoc.com> f2fs: compress: fix UAF of f2fs_inode_info in f2fs_free_dic Zhiguo Niu <zhiguo.niu(a)unisoc.com> f2fs: compress: change the first parameter of page_array_{alloc,free} to sbi Russell King (Oracle) <rmk+kernel(a)armlinux.org.uk> net: stmmac: remove support for lpi_intr_o Matthieu Baerts (NGI0) <matttbe(a)kernel.org> mptcp: pm: in-kernel: always set ID as avail when rm endp Antheas Kapenekakis <lkml(a)antheas.dev> platform/x86/amd/pmc: Add support for Van Gogh SoC Oleg Nesterov <oleg(a)redhat.com> x86/uprobes: Fix XOL allocation failure for 32-bit tasks Asbjørn Sloth Tønnesen <ast(a)fiberby.net> io_uring/uring_cmd: fix too strict requirement on ioctl Hariprasad Kelam <hkelam(a)marvell.com> Octeontx2-af: Add proper checks for fwdata Steven Rostedt <rostedt(a)goodmis.org> tracing: Add recursion protection in kernel stack trace recording Paul Greenwalt <paul.greenwalt(a)intel.com> ice: fix devlink reload call trace Qu Wenruo <wqu(a)suse.com> btrfs: do not strictly require dirty metadata threshold for metadata writepages David Howells <dhowells(a)redhat.com> rxrpc: Fix recvmsg() unconditional requeue Mikulas Patocka <mpatocka(a)redhat.com> dm-verity: disable recursive forward error correction Eric Dumazet <edumazet(a)google.com> ipv6: use RCU in ip6_xmit() Shuicheng Lin <shuicheng.lin(a)intel.com> drm/xe/sync: Cleanup partially initialized sync on parse failure Long Li <leo.lilong(a)huawei.com> xfs: fix integer overflow in bmap intent sort comparator Thorsten Blum <thorsten.blum(a)linux.dev> crypto: atmel-sha204a - Fix OOM ->tfm_count leak Shyam Prasad N <sprasad(a)microsoft.com> cifs: open files should not hold ref on superblock Kevin Hao <haokexin(a)gmail.com> net: macb: Shuffle the tx ring before enabling tx Luca Ceresoli <luca.ceresoli(a)bootlin.com> drm/bridge: ti-sn65dsi83: halve horizontal syncs for dual LVDS output Thorsten Blum <thorsten.blum(a)linux.dev> ksmbd: Don't log keys in SMB3 signing and encryption key generation Jim Mattson <jmattson(a)google.com> KVM: x86: Introduce KVM_X86_QUIRK_VMCS12_ALLOW_FREEZE_IN_SMM Chao Gao <chao.gao(a)intel.com> KVM: nVMX: Add consistency checks for CR0.WP and CR4.CET Yan Zhao <yan.y.zhao(a)intel.com> KVM: x86: Introduce Intel specific quirk KVM_X86_QUIRK_IGNORE_GUEST_PAT Yan Zhao <yan.y.zhao(a)intel.com> KVM: x86: Introduce supported_quirks to block disabling quirks Paolo Bonzini <pbonzini(a)redhat.com> KVM: x86: Allow vendor code to disable quirks Paolo Bonzini <pbonzini(a)redhat.com> KVM: x86: do not allow re-enabling quirks Sean Christopherson <seanjc(a)google.com> KVM: x86: Quirk initialization of feature MSRs to KVM's max configuration Sean Christopherson <seanjc(a)google.com> KVM: x86: Co-locate initialization of feature MSRs in kvm_arch_vcpu_create() Shengming Hu <hu.shengming(a)zte.com.cn> fgraph: Fix thresh_return clear per-task notrace Darrick J. Wong <djwong(a)kernel.org> iomap: reject delalloc mappings during writeback Tejun Heo <tj(a)kernel.org> sched_ext: Fix starvation of scx_enable() under fair-class saturation Tejun Heo <tj(a)kernel.org> sched_ext: Disable preemption between scx_claim_exit() and kicking helper work Christian Brauner <brauner(a)kernel.org> nsfs: tighten permission checks for ns iteration ioctls Alexander Potapenko <glider(a)google.com> mm/kfence: fix KASAN hardware tag faults during late enablement David Hildenbrand <david(a)redhat.com> mm/page_alloc: forward the gfp flags from alloc_contig_range() to post_alloc_hook() David Hildenbrand <david(a)redhat.com> mm/page_alloc: sort out the alloc_contig_range() gfp flags mess Matthew Wilcox (Oracle) <willy(a)infradead.org> mm/page_alloc: move set_page_refcounted() to callers of post_alloc_hook() Shawn Lin <shawn.lin(a)rock-chips.com> mmc: dw_mmc-rockchip: Fix runtime PM support for internal phase support Shawn Lin <shawn.lin(a)rock-chips.com> mmc: dw_mmc-rockchip: Add memory clock auto-gating support Jisheng Zhang <jszhang(a)kernel.org> mmc: dw_mmc-rockchip: use modern PM macros Sean Christopherson <seanjc(a)google.com> KVM: SVM: Set/clear CR8 write interception when AVIC is (de)activated Naveen N Rao <naveen(a)kernel.org> KVM: SVM: Add a helper to look up the max physical ID for AVIC Naveen N Rao <naveen(a)kernel.org> KVM: SVM: Limit AVIC physical max index based on configured max_vcpu_ids Jiasheng Jiang <jiashengjiangcool(a)gmail.com> usb: gadget: f_tcm: Fix NULL pointer dereferences in nexus handling Kuen-Han Tsai <khtsai(a)google.com> usb: gadget: f_ncm: Fix net_device lifecycle with device_move Thomas Gleixner <tglx(a)linutronix.de> cleanup: Provide retain_and_null_ptr() Marc Kleine-Budde <mkl(a)pengutronix.de> can: gs_usb: gs_can_open(): always configure bitrates before starting device Ethan Tidmore <ethantidmore06(a)gmail.com> xfs: Fix error pointer dereference Paul Moses <p(a)1g4.org> net/sched: act_gate: snapshot parameters with RCU on replace Nathan Chancellor <nathan(a)kernel.org> kbuild: Leave objtool binary around with 'make clean' Matthieu Baerts (NGI0) <matttbe(a)kernel.org> selftests: mptcp: join: check RM_ADDR not sent over same subflow Gang Yan <yangang(a)kylinos.cn> selftests: mptcp: add a check for 'add_addr_accepted' Natalie Vock <natalie.vock(a)gmx.de> drm/amd/display: Use GFP_ATOMIC in dc_create_stream_for_sink Matthieu Baerts (NGI0) <matttbe(a)kernel.org> mptcp: pm: avoid sending RM_ADDR over same subflow Matthieu Baerts (NGI0) <matttbe(a)kernel.org> mptcp: pm: in-kernel: always mark signal+subflow endp as used Zide Chen <zide.chen(a)intel.com> perf/x86/intel/uncore: Add per-scheduler IMC CAS count events Kan Liang <kan.liang(a)linux.intel.com> perf/x86/intel/uncore: Support more units on Granite Rapids Daniel Hodges <git(a)danielhodges.dev> wifi: libertas: fix use-after-free in lbs_free_adapter() Mario Limonciello <mario.limonciello(a)amd.com> platform/x86: hp-bioscfg: Support allocations of larger data Kim Phillips <kim.phillips(a)amd.com> x86/sev: Allow IBPB-on-Entry feature for SNP guests Andrew Lunn <andrew(a)lunn.ch> net: phy: register phy led_triggers during probe to avoid AB-BA deadlock Ankit Garg <nktgrg(a)google.com> gve: fix incorrect buffer cleanup in gve_tx_clean_pending_packets for QPL Khairul Anuar Romli <khairul.anuar.romli(a)altera.com> spi: cadence-quadspi: Implement refcount to handle unbind during busy Fedor Pchelkin <pchelkin(a)ispras.ru> ksmbd: call ksmbd_vfs_kern_path_end_removing() on some error paths Eric Dumazet <edumazet(a)google.com> dst: fix races in rt6_uncached_list_del() and rt_del_uncached_list() Eric Biggers <ebiggers(a)kernel.org> smb: client: Compare MACs in constant time Eric Biggers <ebiggers(a)kernel.org> ksmbd: Compare MACs in constant time Eric Biggers <ebiggers(a)kernel.org> net/tcp-md5: Fix MAC comparison to be constant-time John Ripple <john.ripple(a)keysight.com> drm/bridge: ti-sn65dsi86: Add support for DisplayPort mode with HPD Adrian Hunter <adrian.hunter(a)intel.com> i3c: mipi-i3c-hci: Add missing TID field to no-op command descriptor Adrian Hunter <adrian.hunter(a)intel.com> i3c: mipi-i3c-hci: Restart DMA ring correctly after dequeue abort Adrian Hunter <adrian.hunter(a)intel.com> i3c: mipi-i3c-hci: Use ETIMEDOUT instead of ETIME for timeout errors Yasin Lee <yasin.lee.x(a)gmail.com> iio: proximity: hx9023s: Protect against division by zero in set_samp_freq Jean-Baptiste Maneyrol <jean-baptiste.maneyrol(a)tdk.com> iio: imu: inv_icm42600: fix odr switch when turning buffer off Jean-Baptiste Maneyrol <jean-baptiste.maneyrol(a)tdk.com> iio: imu: inv_icm42600: fix odr switch to the same value Antoniu Miclaus <antoniu.miclaus(a)analog.com> iio: gyro: mpu3050-i2c: fix pm_runtime error handling Antoniu Miclaus <antoniu.miclaus(a)analog.com> iio: gyro: mpu3050-core: fix pm_runtime error handling Nuno Sá <nuno.sa(a)analog.com> iio: buffer: Fix wait_queue not being removed Chris Spencer <spencercw(a)gmail.com> iio: chemical: bme680: Fix measurement wait duration calculation Lukas Schmid <lukas.schmid(a)netcube.li> iio: potentiometer: mcp4131: fix double application of wiper shift Antoniu Miclaus <antoniu.miclaus(a)analog.com> iio: chemical: sps30_i2c: fix buffer size in sps30_i2c_read_meas() Antoniu Miclaus <antoniu.miclaus(a)analog.com> iio: chemical: sps30_serial: fix buffer size in sps30_serial_read_meas() SeungJu Cheon <suunj1331(a)gmail.com> iio: frequency: adf4377: Fix duplicated soft reset mask Oleksij Rempel <o.rempel(a)pengutronix.de> iio: dac: ds4424: reject -128 RAW value Filipe Manana <fdmanana(a)suse.com> btrfs: abort transaction on failure to update root in the received subvol ioctl Filipe Manana <fdmanana(a)suse.com> btrfs: fix transaction abort on set received ioctl due to item overflow Filipe Manana <fdmanana(a)suse.com> btrfs: fix transaction abort on file creation due to name hash collision Henrique Carvalho <henrique.carvalho(a)suse.com> smb: client: fix iface port assignment in parse_server_interfaces Bharath SM <bharathsm(a)microsoft.com> smb: client: fix in-place encryption corruption in SMB2_write() Paulo Alcantara <pc(a)manguebit.org> smb: client: fix atomic open with O_DIRECT & O_SYNC Josh Law <objecting(a)objecting.org> lib/bootconfig: check bounds before writing in __xbc_open_brace() Josh Law <objecting(a)objecting.org> lib/bootconfig: fix snprintf truncation check in xbc_node_compose_key_after() Shashank Balaji <shashank.mahadasyam(a)sony.com> x86/apic: Disable x2apic on resume if the kernel expects so Junxiao Bi <junxiao.bi(a)oracle.com> scsi: core: Fix error handling for scsi_alloc_sdev() Josh Law <objecting(a)objecting.org> lib/bootconfig: fix off-by-one in xbc_verify_tree() unclosed brace error Stefan Haberland <sth(a)linux.ibm.com> s390/dasd: Copy detected format information to secondary device Stefan Haberland <sth(a)linux.ibm.com> s390/dasd: Move quiesce state with pprc swap Long Li <leo.lilong(a)huawei.com> xfs: ensure dquot item is deleted from AIL only after log shutdown Darrick J. Wong <djwong(a)kernel.org> xfs: fix undersized l_iclog_roundoff values Carlos Maiolino <cem(a)kernel.org> xfs: fix returned valued from xfs_defer_can_append Shyam Prasad N <sprasad(a)microsoft.com> cifs: make default value of retrans as zero Laurent Vivier <lvivier(a)redhat.com> qmi_wwan: allow max_mtu above hard_mtu to control rx_urb_size Calvin Owens <calvin(a)wbinvd.org> tracing: Fix trace_buf_size= cmdline parameter with sizes >= 2G Andrei-Alexandru Tachici <andrei-alexandru.tachici(a)oss.qualcomm.com> tracing: Fix enabling multiple events on the kernel command line and bootconfig Thomas Fourier <fourier.thomas(a)gmail.com> drm/msm: Fix dma_free_attrs() buffer size Janusz Krzysztofik <janusz.krzysztofik(a)linux.intel.com> drm/i915: Fix potential overflow of shmem scatterlist length Luca Ceresoli <luca.ceresoli(a)bootlin.com> drm/bridge: ti-sn65dsi83: fix CHA_DSI_CLK_RANGE rounding Mario Limonciello <mario.limonciello(a)amd.com> drm/amd: Set num IP blocks to 0 if discovery fails Alysa Liu <Alysa.Liu(a)amd.com> drm/amdgpu: Fix use-after-free race in VM acquire Yang Wang <kevinyang.wang(a)amd.com> drm/amd/pm: remove invalid gpu_metrics.energy_accumulator on smu v13.0.x Bastien Curutchet (Schneider Electric) <bastien.curutchet(a)bootlin.com> net: dsa: microchip: Fix error path in PTP IRQ setup Fan Wu <fanwu01(a)zju.edu.cn> net: ethernet: arc: emac: quiesce interrupts before requesting IRQ Jian Zhang <zhangjian.3032(a)bytedance.com> net: ncsi: fix skb leak in error paths Mehul Rao <mehulrao(a)gmail.com> net: nexthop: fix percpu use-after-free in remove_nh_grp_entry Namjae Jeon <linkinjeon(a)kernel.org> ksmbd: fix use-after-free by using call_rcu() for oplock_info Marios Makassikis <mmakassikis(a)freebox.fr> smb: server: fix use-after-free in smb2_open() Namjae Jeon <linkinjeon(a)kernel.org> ksmbd: fix use-after-free in smb_lazy_parent_lease_break_close() Dillon Varone <Dillon.Varone(a)amd.com> drm/amd/display: Fallback to boot snapshot for dispclk Maximilian Pezzullo <maximilianpezzullo(a)gmail.com> ata: libata-core: Disable LPM on ST1000DM010-2EP102 Maíra Canal <mcanal(a)igalia.com> pmdomain: bcm: bcm2835-power: Fix broken reset status read Helge Deller <deller(a)gmx.de> parisc: Check kernel mapping earlier at bootup Piotr Jaroszynski <pjaroszynski(a)nvidia.com> arm64: contpte: fix set_access_flags() no-op check for SMMU/ATS faults Helge Deller <deller(a)gmx.de> parisc: Fix initial page table creation for boot Sanman Pradhan <psanman(a)juniper.net> hwmon: (pmbus/q54sj108a2) fix stack overflow in debugfs read Catalin Marinas <catalin.marinas(a)arm.com> arm64: mm: Add PTE_DIRTY back to PAGE_KERNEL* to fix kexec/hibernation Dave Airlie <airlied(a)redhat.com> nouveau/dpcd: return EBUSY for aux xfer if the device is asleep Helge Deller <deller(a)gmx.de> parisc: Increase initial mapping to 64 MB with KALLSYMS Sven Eckelmann <sven(a)narfation.org> batman-adv: Avoid double-rtnl_lock ELP metric worker Eric Biggers <ebiggers(a)kernel.org> net/tcp-ao: Fix MAC comparison to be constant-time Huiwen He <hehuiwen(a)kylinos.cn> tracing: Fix syscall events activation by ensuring refcount hits zero Jakub Staniszewski <jakub.staniszewski(a)linux.intel.com> ice: fix retry for AQ command 0x06EE Long Li <longli(a)microsoft.com> net: mana: Ring doorbell at 4 CQ wraparounds Ariel Silver <arielsilver77(a)gmail.com> media: dvb-net: fix OOB access in ULE extension header tables Luka Gejak <luka.gejak(a)linux.dev> staging: rtl8723bs: fix potential out-of-bounds read in rtw_restruct_wmm_ie Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> staging: rtl8723bs: properly validate the data in rtw_get_ie_ex() Jedrzej Jagielski <jedrzej.jagielski(a)intel.com> ixgbevf: fix link setup issue Jakub Staniszewski <jakub.staniszewski(a)linux.intel.com> ice: reintroduce retry mechanism for indirect AQ Mark Harmstone <mark(a)harmstone.com> btrfs: fix chunk map leak in btrfs_map_block() after btrfs_chunk_map_num_copies() Marc Zyngier <maz(a)kernel.org> irqchip/gic-v3-its: Limit number of per-device MSIs to the range the ITS supports Andy Shevchenko <andriy.shevchenko(a)linux.intel.com> device property: Allow secondary lookup in fwnode_get_next_child_node() Kuniyuki Iwashima <kuniyu(a)google.com> nfsd: Fix cred ref leak in nfsd_nl_listener_set_doit(). Alexander Gordeev <agordeev(a)linux.ibm.com> s390/pfault: Fix virtual vs physical address confusion Franz Schnyder <franz.schnyder(a)toradex.com> drm/bridge: ti-sn65dsi86: Enable HPD polling if IRQ is not used Osama Abdelkader <osama.abdelkader(a)gmail.com> drm/bridge: samsung-dsim: Fix memory leak in error path Mario Limonciello <mario.limonciello(a)amd.com> drm/amd: Disable MES LR compute W/A Xu Yang <xu.yang_2(a)nxp.com> Revert "tcpm: allow looking for role_sw device in the main node" Linus Torvalds <torvalds(a)linux-foundation.org> Fix CC_HAS_ASM_GOTO_OUTPUT on non-x86 architectures Thomas Gleixner <tglx(a)linutronix.de> kbuild: Disable CC_HAS_ASM_GOTO_OUTPUT on clang < 17 Xingui Yang <yangxingui(a)huawei.com> scsi: hisi_sas: Fix NULL pointer exception during user_scan() Yihang Li <liyihang9(a)huawei.com> scsi: hisi_sas: Use macro instead of magic number Xingui Yang <yangxingui(a)huawei.com> scsi: hisi_sas: Add time interval between two H2D FIS following soft reset spec Wang Shuaiwei <wangshuaiwei1(a)xiaomi.com> scsi: ufs: core: Fix SError in ufshcd_rtc_work() during UFS suspend Adrian Ng Ho Yin <adrianhoyin.ng(a)altera.com> i3c: dw-i3c-master: Set SIR_REJECT in DAT on device attach and reattach Steven Rostedt <rostedt(a)goodmis.org> time/jiffies: Mark jiffies_64_to_clock_t() notrace Max Kellermann <max.kellermann(a)ionos.com> ceph: fix memory leaks in ceph_mdsc_build_path() Max Kellermann <max.kellermann(a)ionos.com> ceph: fix i_nlink underrun during async unlink Ilya Dryomov <idryomov(a)gmail.com> libceph: admit message frames only in CEPH_CON_S_OPEN state Raphael Zimmer <raphael.zimmer(a)tu-ilmenau.de> libceph: Use u32 for non-negative values in ceph_monmap_decode() Ilya Dryomov <idryomov(a)gmail.com> libceph: prevent potential out-of-bounds reads in process_message_header() Ilya Dryomov <idryomov(a)gmail.com> libceph: reject preamble if control segment is empty Raphael Zimmer <raphael.zimmer(a)tu-ilmenau.de> libceph: Fix potential out-of-bounds access in ceph_handle_auth_reply() Max Kellermann <max.kellermann(a)ionos.com> ceph: add a bunch of missing ceph_path_info initializers Masami Hiramatsu (Google) <mhiramat(a)kernel.org> kprobes: avoid crash when rmmod/insmod after ftrace killed Mehul Rao <mehulrao(a)gmail.com> tipc: fix divide-by-zero in tipc_sk_filter_connect() Ravi Hothi <ravi.hothi(a)oss.qualcomm.com> ASoC: qcom: qdsp6: Fix q6apm remove ordering during ADSP stop and start Penghe Geng <pgeng(a)nvidia.com> mmc: core: Avoid bitfield RMW for claim/retune flags Alexander Potapenko <glider(a)google.com> mm/kfence: disable KFENCE upon KASAN HW tags enablement Felix Gu <ustc.gu(a)gmail.com> mmc: mmci: Fix device_node reference leak in of_get_dml_pipe_index() Kalesh Singh <kaleshsingh(a)google.com> mm/tracing: rss_stat: ensure curr is false from kthread context Miguel Ojeda <ojeda(a)kernel.org> rust: kbuild: allow `unused_features` Ziyi Guo <n7l8m4(a)u.northwestern.edu> usb: image: mdc800: kill download URB on timeout Oliver Neukum <oneukum(a)suse.com> usb: mdc800: handle signal and read racing Fan Wu <fanwu01(a)zju.edu.cn> usb: renesas_usbhs: fix use-after-free in ISR during device removal Oliver Neukum <oneukum(a)suse.com> usb: class: cdc-wdm: fix reordering issue in read code path Alan Stern <stern(a)rowland.harvard.edu> USB: core: Limit the length of unkillable synchronous timeouts Alan Stern <stern(a)rowland.harvard.edu> USB: usbtmc: Use usb_bulk_msg_killable() with user-specified timeouts Alan Stern <stern(a)rowland.harvard.edu> USB: usbcore: Introduce usb_bulk_msg_killable() RD Babiera <rdbabiera(a)google.com> usb: typec: altmode/displayport: set displayport signaling rate in configure message Xu Yang <xu.yang_2(a)nxp.com> usb: roles: get usb role switch from parent only for usb-b-connector Marc Zyngier <maz(a)kernel.org> usb: cdc-acm: Restore CAP_BRK functionnality to CH343 Gabor Juhos <j4g8y7(a)gmail.com> usb: core: don't power off roothub PHYs if phy_set_mode() fails Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> usb: misc: uss720: properly clean up reference in uss720_probe() Heikki Krogerus <heikki.krogerus(a)linux.intel.com> usb: dwc3: pci: add support for the Intel Nova Lake -H Oliver Neukum <oneukum(a)suse.com> usb: yurex: fix race in probe Dayu Jiang <jiangdayu(a)xiaomi.com> usb: xhci: Prevent interrupt storm on host controller error (HCE) Zilin Guan <zilin(a)seu.edu.cn> usb: xhci: Fix memory leak in xhci_disable_slot() Vyacheslav Vahnenko <vahnenko2003(a)gmail.com> USB: ezcap401 needs USB_QUIRK_NO_BOS to function on 10gbs usb speed Christoffer Sandberg <cs(a)tuxedo.de> usb/core/quirks: Add Huawei ME906S-device to wakeup quirk A1RM4X <dev(a)a1rm4x.com> USB: add QUIRK_NO_BOS for video capture several devices Sean Christopherson <seanjc(a)google.com> KVM: SVM: Initialize AVIC VMCB fields if AVIC is enabled with in-kernel APIC Zhang Heng <zhangheng(a)kylinos.cn> ASoC: amd: yc: Add DMI quirk for ASUS EXPERTBOOK PM1503CDA Pedro Falcato <pfalcato(a)suse.de> ata: libata-core: Add BRIDGE_OK quirk for QEMU drives Oleksij Rempel <o.rempel(a)pengutronix.de> net: usb: lan78xx: skip LTM configuration for LAN7850 Oleksij Rempel <o.rempel(a)pengutronix.de> net: usb: lan78xx: fix TX byte statistics for small packets Oleksij Rempel <o.rempel(a)pengutronix.de> net: usb: lan78xx: fix silent drop of packets with checksum errors Takashi Iwai <tiwai(a)suse.de> ALSA: usb-audio: Check endpoint numbers at parsing Scarlett2 mixer interfaces Mehul Rao <mehulrao(a)gmail.com> ALSA: pcm: fix use-after-free on linked stream runtime in snd_pcm_drain() Qingye Zhao <zhaoqingye(a)honor.com> cgroup: fix race between task migration and iteration Sasha Levin <sashal(a)kernel.org> Revert "arm64: dts: qcom: sdm845-oneplus: Mark l14a regulator as boot-on" Seungjin Bae <eeodqql09(a)gmail.com> usb: gadget: f_mass_storage: Fix potential integer overflow in check_command_size_in_blocks() Andreas Kemnade <andreas(a)kemnade.info> iio: imu: inv-mpu9150: fix irq ack preventing irq storms Eric Dumazet <edumazet(a)google.com> net: prevent NULL deref in ip[6]tunnel_xmit() Alok Tiwari <alok.a.tiwari(a)oracle.com> octeontx2-af: devlink: fix NIX RAS reporter to use RAS interrupt status Alok Tiwari <alok.a.tiwari(a)oracle.com> octeontx2-af: devlink: fix NIX RAS reporter recovery condition Marek Behún <kabel(a)kernel.org> net: dsa: realtek: Fix LED group port bit for non-zero LED group Ricardo B. Marlière <rbm(a)suse.com> net: bonding: Fix nd_tbl NULL dereference when IPv6 is disabled Philip Yang <Philip.Yang(a)amd.com> drm/amdkfd: Unreserve bo if queue update failed Casey Connolly <casey.connolly(a)linaro.org> ASoC: detect empty DMI strings Chen Ni <nichen(a)iscas.ac.cn> ASoC: amd: acp3x-rt5682-max9836: Add missing error check for clock acquisition Ben Dooks <ben.dooks(a)codethink.co.uk> ACPI: OSL: fix __iomem type on return from acpi_os_map_generic_address() Nicolai Buchwitz <nb(a)tipi-net.de> net: bcmgenet: fix broken EEE by converting to phylib-managed state Matt Vollrath <tactii(a)gmail.com> e1000/e1000e: Fix leak in DMA error cleanup Alok Tiwari <alok.a.tiwari(a)oracle.com> i40e: fix src IP mask checks and memcpy argument names in cloud filter Sungwoo Kim <iam(a)sung-woo.kim> nvme-pci: Fix race bug in nvme_poll_irqdisable() Sungwoo Kim <iam(a)sung-woo.kim> nvme-pci: Fix slab-out-of-bounds in nvme_dbbuf_set Rafael J. Wysocki <rafael.j.wysocki(a)intel.com> sched: idle: Make skipping governor callbacks more consistent Chen Ni <nichen(a)iscas.ac.cn> perf ftrace: Fix hashmap__new() error checking Peng Fan <peng.fan(a)nxp.com> regulator: pca9450: Correct interrupt type Chen Ni <nichen(a)iscas.ac.cn> perf annotate: Fix hashmap__new() error checking Yuan Tan <tanyuan98(a)outlook.com> netfilter: xt_IDLETIMER: reject rev0 reuse of ALARM timer labels Hyunwoo Kim <imv4bel(a)gmail.com> netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() Hyunwoo Kim <imv4bel(a)gmail.com> netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path David Dull <monderasdor(a)gmail.com> netfilter: x_tables: guard option walkers against 1-byte tail reads Jenny Guanni Qu <qguanni(a)gmail.com> netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop() Florian Westphal <fw(a)strlen.de> netfilter: nf_tables: always walk all pending catchall elements Weiming Shi <bestswngs(a)gmail.com> net: add xmit recursion limit to tunnel xmit functions Toke Høiland-Jørgensen <toke(a)redhat.com> xdp: register system page pool as an XDP memory model Alexander Lobakin <aleksander.lobakin(a)intel.com> xdp: allow attaching already registered memory model to xdp_rxq_info Raju Rangoju <Raju.Rangoju(a)amd.com> amd-xgbe: prevent CRC errors during RX adaptation with AN disabled Raju Rangoju <Raju.Rangoju(a)amd.com> amd-xgbe: fix link status handling in xgbe_rx_adaptation Chengfeng Ye <dg573847474(a)gmail.com> mctp: route: hold key->lock in mctp_flow_prepare_output() Jiayuan Chen <jiayuan.chen(a)shopee.com> bonding: fix type confusion in bond_setup_by_slave() Hangbin Liu <liuhangbin(a)gmail.com> bonding: use common function to compute the features Hangbin Liu <liuhangbin(a)gmail.com> net: add a common function to compute features for upper devices Cosmin Ratiu <cratiu(a)nvidia.com> bonding: Correctly support GSO ESP offload Jianbo Liu <jianbol(a)nvidia.com> bonding: add ESP offload features when slaves support Wenyuan Li <2063309626(a)qq.com> can: hi311x: hi3110_open(): add check for hi3110_power_enable() return value Haiyue Wang <haiyuewa(a)163.com> mctp: i2c: fix skb memory leak in receive path Pavan Chebbi <pavan.chebbi(a)broadcom.com> bnxt_en: Fix RSS table size check when changing ethtool channels Shuangpeng Bai <shuangpeng.kernel(a)gmail.com> serial: caif: hold tty->link reference in ldisc_open and ser_release Álvaro Fernández Rojas <noltari(a)gmail.com> net: sfp: improve Huawei MA5671a fixup Sen Wang <sen(a)ti.com> ASoC: simple-card-utils: fix graph_util_is_ports0() for DT overlays Kuninori Morimoto <kuninori.morimoto.gx(a)renesas.com> ASoC: simple-card-utils: use __free(device_node) for device node matteo.cotifava <cotifavamatteo(a)gmail.com> ASoC: soc-core: flush delayed work before removing DAIs and widgets matteo.cotifava <cotifavamatteo(a)gmail.com> ASoC: soc-core: drop delayed_work_pending() check before flush David Lechner <dlechner(a)baylibre.com> drm/sitronix/st7586: fix bad pixel data due to byte swap Weiming Shi <bestswngs(a)gmail.com> net/sched: teql: fix NULL pointer dereference in iptunnel_xmit on TEQL slave xmit Gal Pressman <gal(a)nvidia.com> net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery Patrisious Haddad <phaddad(a)nvidia.com> net/mlx5: Fix crash when moving to switchdev mode Cosmin Ratiu <cratiu(a)nvidia.com> net/mlx5: Fix deadlock between devlink lock and esw->wq Daniel Jurgens <danielj(a)nvidia.com> net/mlx5: Query to see if host PF is disabled Daniel Jurgens <danielj(a)nvidia.com> net/mlx5: IFC updates for disabled host PF Hangbin Liu <liuhangbin(a)gmail.com> bonding: handle BOND_LINK_FAIL, BOND_LINK_BACK as valid link states Yang Wang <kevinyang.wang(a)amd.com> drm/amd/pm: add missing od setting PP_OD_FEATURE_ZERO_FAN_BIT for smu v14 Pengyu Luo <mitltlatltl(a)gmail.com> drm/msm/dsi: fix pclk rate calculation for bonded dsi Mieczyslaw Nalewaj <namiltd(a)yahoo.com> net: dsa: realtek: rtl8365mb: remove ifOutDiscards from rx_packets Peter Collingbourne <pcc(a)google.com> perf disasm: Fix off-by-one bug in outside check Breno Leitao <leitao(a)debian.org> workqueue: Use POOL_BH instead of WQ_BH when checking pool flags Sun YangKai <sunk67188(a)gmail.com> btrfs: hold space_info->lock when clearing periodic reclaim ready Eric Badger <ebadger(a)purestorage.com> xprtrdma: Decrement re_receiving on the early exit paths Pengyu Luo <mitltlatltl(a)gmail.com> drm/msm/dsi: fix hdisplay calculation when programming dsi registers Roberto Bergantinos Corpas <rbergant(a)redhat.com> nfs: return EISDIR on nfs3_proc_create if d_alias is a dir Guenter Roeck <linux(a)roeck-us.net> smb/server: Fix another refcount leak in smb2_open() J. Neuschäfer <j.ne(a)posteo.net> powerpc: 83xx: km83xx: Fix keymile vendor prefix Tzung-Bi Shih <tzungbi(a)kernel.org> remoteproc: mediatek: Unprepare SCP clock during system suspend Bjorn Andersson <bjorn.andersson(a)oss.qualcomm.com> remoteproc: sysmon: Correct subsys_name_len type in QMI request Sourabh Jain <sourabhjain(a)linux.ibm.com> powerpc/crash: adjust the elfcorehdr size Sourabh Jain <sourabhjain(a)linux.ibm.com> powerpc/kexec/core: use big-endian types for crash variables Ben Collins <bcollins(a)kernel.org> kexec: Include kernel-end even without crashkernel Eliav Farber <farbere(a)amazon.com> kexec: Consolidate machine_kexec_mask_interrupts() implementation Christophe Leroy (CS GROUP) <chleroy(a)kernel.org> powerpc/uaccess: Fix inline assembly for clang build on PPC32 Takashi Iwai <tiwai(a)suse.de> ALSA: usb-audio: Check max frame size for implicit feedback mode, too sguttula <suresh.guttula(a)amd.com> drm/amdgpu/vcn5: Add SMU dpm interface type Takashi Iwai <tiwai(a)suse.de> ALSA: usb-audio: Avoid implicit feedback mode on DIYINHK USB Audio 2.0 wangshuaiwei <wangshuaiwei1(a)xiaomi.com> scsi: ufs: core: Fix shift out of bounds when MAXQ=32 Peter Wang <peter.wang(a)mediatek.com> scsi: ufs: core: Fix possible NULL pointer dereference in ufshcd_add_command_trace() Charles Keepax <ckeepax(a)opensource.cirrus.com> ASoC: cs42l43: Report insert for exotic peripherals Azamat Almazbek uulu <almazbek1608(a)gmail.com> ASoC: amd: yc: Add ASUS EXPERTBOOK BM1503CDA to quirk table Tomas Henzl <thenzl(a)redhat.com> scsi: ses: Fix devices attaching to different hosts Sofia Schneider <sofia(a)schn.dev> ACPI: OSI: Add DMI quirk for Acer Aspire One D255 Ramanathan Choodamani <quic_rchoodam(a)quicinc.com> wifi: mac80211: set default WMM parameters on all links Al Viro <viro(a)zeniv.linux.org.uk> unshare: fix unshare_fs() handling Sean Rhodes <sean(a)starlabs.systems> ALSA: hda/realtek: Fix speaker pop on Star Labs StarFighter Ranjan Kumar <ranjan.kumar(a)broadcom.com> scsi: mpi3mr: Add NULL checks when resetting request and reply queues Piotr Mazek <pmazek(a)outlook.com> ACPI: PM: Save NVS memory on Lenovo G70-35 Jan Kiszka <jan.kiszka(a)siemens.com> scsi: storvsc: Fix scheduling while atomic on PREEMPT_RT ------------- Diffstat: Documentation/virt/kvm/api.rst | 52 ++++ Makefile | 13 +- arch/arm/kernel/machine_kexec.c | 23 -- arch/arm64/Kconfig | 1 + .../arm64/boot/dts/qcom/sdm845-oneplus-common.dtsi | 1 - arch/arm64/boot/dts/renesas/r9a09g057.dtsi | 37 +-- arch/arm64/include/asm/pgtable-prot.h | 10 +- arch/arm64/kernel/machine_kexec.c | 31 --- arch/arm64/mm/contpte.c | 53 ++++- arch/loongarch/include/asm/uaccess.h | 14 +- arch/parisc/include/asm/pgtable.h | 2 +- arch/parisc/kernel/cache.c | 4 +- arch/parisc/kernel/head.S | 7 +- arch/parisc/kernel/setup.c | 20 +- arch/powerpc/include/asm/kexec.h | 1 - arch/powerpc/include/asm/uaccess.h | 2 +- arch/powerpc/kexec/core.c | 60 ++--- arch/powerpc/kexec/core_32.c | 1 + arch/powerpc/kexec/file_load_64.c | 14 +- arch/powerpc/net/bpf_jit_comp.c | 2 +- arch/powerpc/net/bpf_jit_comp64.c | 140 +++++++---- arch/powerpc/platforms/83xx/km83xx.c | 4 +- arch/riscv/kernel/machine_kexec.c | 23 -- arch/s390/include/asm/processor.h | 2 +- arch/s390/lib/xor.c | 4 +- arch/s390/mm/pfault.c | 4 +- arch/x86/boot/compressed/sev.c | 1 + arch/x86/coco/sev/core.c | 1 + arch/x86/events/intel/core.c | 25 +- arch/x86/events/intel/uncore_snbep.c | 78 ++++-- arch/x86/include/asm/kvm_host.h | 9 +- arch/x86/include/asm/msr-index.h | 5 +- arch/x86/include/uapi/asm/kvm.h | 3 + arch/x86/kernel/apic/apic.c | 6 + arch/x86/kernel/apic/x2apic_uv_x.c | 18 +- arch/x86/kernel/uprobes.c | 24 ++ arch/x86/kvm/mmu.h | 2 +- arch/x86/kvm/mmu/mmu.c | 10 +- arch/x86/kvm/svm/avic.c | 30 ++- arch/x86/kvm/svm/svm.c | 14 +- arch/x86/kvm/vmx/nested.c | 26 +- arch/x86/kvm/vmx/vmx.c | 50 +++- arch/x86/kvm/x86.c | 23 +- arch/x86/kvm/x86.h | 3 + block/blk-cgroup.c | 6 - block/blk-cgroup.h | 6 + block/blk-throttle.c | 6 +- block/blk-throttle.h | 18 +- drivers/acpi/acpi_processor.c | 15 +- drivers/acpi/osi.c | 13 + drivers/acpi/osl.c | 2 +- drivers/acpi/sleep.c | 8 + drivers/ata/libata-core.c | 5 + drivers/ata/libata-scsi.c | 83 ++++--- drivers/base/power/runtime.c | 1 + drivers/base/property.c | 27 +-- drivers/bluetooth/btqca.c | 2 + drivers/cache/ax45mp_cache.c | 4 +- drivers/cache/starfive_starlink_cache.c | 4 +- drivers/cpuidle/cpuidle.c | 10 - drivers/crypto/atmel-sha204a.c | 5 +- drivers/dma/mmp_pdma.c | 6 + drivers/firewire/net.c | 5 +- drivers/firmware/arm_ffa/driver.c | 8 +- drivers/firmware/arm_scpi.c | 5 +- drivers/gpu/drm/amd/amdgpu/amdgpu_amdkfd_gpuvm.c | 6 +- drivers/gpu/drm/amd/amdgpu/amdgpu_device.c | 4 +- drivers/gpu/drm/amd/amdgpu/amdgpu_kms.c | 2 +- drivers/gpu/drm/amd/amdgpu/amdgpu_ras_eeprom.c | 20 +- drivers/gpu/drm/amd/amdgpu/gmc_v9_0.c | 21 +- drivers/gpu/drm/amd/amdgpu/mes_v11_0.c | 5 - drivers/gpu/drm/amd/amdgpu/mes_v12_0.c | 5 - drivers/gpu/drm/amd/amdgpu/mmhub_v2_0.c | 9 +- drivers/gpu/drm/amd/amdgpu/mmhub_v2_3.c | 3 +- drivers/gpu/drm/amd/amdgpu/mmhub_v3_0.c | 3 +- drivers/gpu/drm/amd/amdgpu/mmhub_v3_0_1.c | 3 +- drivers/gpu/drm/amd/amdgpu/mmhub_v3_0_2.c | 3 +- drivers/gpu/drm/amd/amdgpu/mmhub_v4_1_0.c | 3 +- drivers/gpu/drm/amd/amdgpu/vcn_v5_0_0.c | 4 + .../gpu/drm/amd/amdkfd/kfd_process_queue_manager.c | 1 + drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm.c | 4 +- .../drm/amd/display/amdgpu_dm/amdgpu_dm_pp_smu.c | 1 + drivers/gpu/drm/amd/display/dc/clk_mgr/clk_mgr.c | 8 +- .../amd/display/dc/clk_mgr/dce110/dce110_clk_mgr.c | 2 +- drivers/gpu/drm/amd/display/dc/core/dc_stream.c | 2 +- drivers/gpu/drm/amd/display/dc/dm_services_types.h | 2 +- .../drm/amd/display/dc/hwss/dcn401/dcn401_hwseq.c | 6 +- .../amd/display/dc/resource/dcn32/dcn32_resource.c | 3 + drivers/gpu/drm/amd/include/dm_pp_interface.h | 1 + drivers/gpu/drm/amd/pm/amdgpu_dpm_internal.c | 67 ++++++ drivers/gpu/drm/amd/pm/inc/amdgpu_dpm_internal.h | 2 + drivers/gpu/drm/amd/pm/legacy-dpm/kv_dpm.c | 4 +- drivers/gpu/drm/amd/pm/legacy-dpm/legacy_dpm.c | 6 +- drivers/gpu/drm/amd/pm/legacy-dpm/si_dpm.c | 69 ++---- drivers/gpu/drm/amd/pm/powerplay/amd_powerplay.c | 11 +- .../gpu/drm/amd/pm/swsmu/smu13/smu_v13_0_0_ppt.c | 8 +- .../gpu/drm/amd/pm/swsmu/smu13/smu_v13_0_7_ppt.c | 3 +- .../gpu/drm/amd/pm/swsmu/smu14/smu_v14_0_2_ppt.c | 3 +- drivers/gpu/drm/bridge/samsung-dsim.c | 25 +- drivers/gpu/drm/bridge/ti-sn65dsi83.c | 13 +- drivers/gpu/drm/bridge/ti-sn65dsi86.c | 118 ++++++++- drivers/gpu/drm/drm_file.c | 5 +- drivers/gpu/drm/drm_mode_config.c | 9 +- drivers/gpu/drm/i915/display/intel_display_types.h | 1 + drivers/gpu/drm/i915/display/intel_psr.c | 71 ++++-- drivers/gpu/drm/i915/display/intel_vdsc.c | 23 ++ drivers/gpu/drm/i915/display/intel_vdsc.h | 3 + drivers/gpu/drm/i915/display/intel_vdsc_regs.h | 12 + drivers/gpu/drm/i915/gem/i915_gem_shmem.c | 12 +- drivers/gpu/drm/i915/gt/intel_engine_cs.c | 3 +- drivers/gpu/drm/imagination/pvr_power.c | 11 +- drivers/gpu/drm/msm/adreno/a2xx_gpummu.c | 2 +- drivers/gpu/drm/msm/dsi/dsi_host.c | 43 +++- drivers/gpu/drm/nouveau/nouveau_connector.c | 3 + drivers/gpu/drm/radeon/si_dpm.c | 4 +- drivers/gpu/drm/tiny/st7586.c | 15 +- drivers/gpu/drm/xe/xe_ggtt.c | 10 +- drivers/gpu/drm/xe/xe_ggtt_types.h | 5 +- drivers/gpu/drm/xe/xe_oa.c | 7 +- drivers/gpu/drm/xe/xe_sync.c | 24 +- drivers/hid/bpf/hid_bpf_dispatch.c | 2 + drivers/hwmon/max6639.c | 10 +- drivers/hwmon/pmbus/isl68137.c | 7 +- drivers/hwmon/pmbus/mp2975.c | 2 + drivers/hwmon/pmbus/q54sj108a2.c | 19 +- drivers/i2c/busses/i2c-cp2615.c | 3 + drivers/i2c/busses/i2c-fsi.c | 1 + drivers/i2c/busses/i2c-pxa.c | 17 +- drivers/i3c/master/dw-i3c-master.c | 4 +- drivers/i3c/master/mipi-i3c-hci/cmd.h | 1 + drivers/i3c/master/mipi-i3c-hci/cmd_v1.c | 2 +- drivers/i3c/master/mipi-i3c-hci/cmd_v2.c | 2 +- drivers/i3c/master/mipi-i3c-hci/core.c | 6 +- drivers/i3c/master/mipi-i3c-hci/dma.c | 4 +- drivers/iio/chemical/bme680_core.c | 2 +- drivers/iio/chemical/sps30_i2c.c | 2 +- drivers/iio/chemical/sps30_serial.c | 2 +- drivers/iio/dac/ds4424.c | 2 +- drivers/iio/frequency/adf4377.c | 2 +- drivers/iio/gyro/mpu3050-core.c | 18 +- drivers/iio/gyro/mpu3050-i2c.c | 3 +- drivers/iio/imu/inv_icm42600/inv_icm42600_accel.c | 2 + drivers/iio/imu/inv_icm42600/inv_icm42600_buffer.c | 4 + drivers/iio/imu/inv_icm42600/inv_icm42600_gyro.c | 2 + drivers/iio/imu/inv_mpu6050/inv_mpu_core.c | 8 + drivers/iio/imu/inv_mpu6050/inv_mpu_iio.h | 2 + drivers/iio/imu/inv_mpu6050/inv_mpu_trigger.c | 5 +- drivers/iio/industrialio-buffer.c | 6 +- drivers/iio/potentiometer/mcp4131.c | 2 +- drivers/iio/proximity/hx9023s.c | 3 + drivers/iommu/intel/dmar.c | 3 +- drivers/irqchip/irq-gic-v3-its.c | 4 + drivers/md/dm-verity-fec.c | 4 +- drivers/md/dm-verity-fec.h | 3 - drivers/media/dvb-core/dvb_net.c | 3 + drivers/mmc/host/dw_mmc-rockchip.c | 51 +++- drivers/mmc/host/mmci_qcom_dml.c | 1 + drivers/mmc/host/sdhci-pci-gli.c | 9 + drivers/mmc/host/sdhci.c | 9 +- drivers/mtd/nand/raw/brcmnand/brcmnand.c | 6 +- drivers/mtd/nand/raw/cadence-nand-controller.c | 2 +- drivers/mtd/nand/raw/nand_base.c | 14 +- drivers/mtd/nand/raw/pl35x-nand-controller.c | 3 + drivers/mtd/parsers/redboot.c | 6 +- drivers/mtd/spi-nor/core.c | 145 ++++++++++- drivers/net/bonding/bond_debugfs.c | 16 +- drivers/net/bonding/bond_main.c | 138 +++++------ drivers/net/caif/caif_serial.c | 3 + drivers/net/can/spi/hi311x.c | 5 +- drivers/net/can/usb/gs_usb.c | 22 +- drivers/net/dsa/bcm_sf2.c | 8 +- drivers/net/dsa/microchip/ksz_ptp.c | 11 +- drivers/net/dsa/realtek/rtl8365mb.c | 3 +- drivers/net/dsa/realtek/rtl8366rb-leds.c | 6 +- drivers/net/ethernet/amd/xgbe/xgbe-drv.c | 4 + drivers/net/ethernet/amd/xgbe/xgbe-phy-v2.c | 82 ++++++- drivers/net/ethernet/amd/xgbe/xgbe.h | 4 + drivers/net/ethernet/arc/emac_main.c | 11 + drivers/net/ethernet/broadcom/bnxt/bnxt_ethtool.c | 4 +- drivers/net/ethernet/broadcom/genet/bcmgenet.c | 31 +-- drivers/net/ethernet/broadcom/genet/bcmgenet.h | 5 +- drivers/net/ethernet/broadcom/genet/bcmgenet_wol.c | 2 +- drivers/net/ethernet/broadcom/genet/bcmmii.c | 10 +- drivers/net/ethernet/cadence/macb_main.c | 124 +++++++++- drivers/net/ethernet/cadence/macb_ptp.c | 4 +- drivers/net/ethernet/google/gve/gve_tx_dqo.c | 52 ++-- drivers/net/ethernet/intel/e1000/e1000_main.c | 2 - drivers/net/ethernet/intel/e1000e/netdev.c | 2 - drivers/net/ethernet/intel/i40e/i40e_virtchnl_pf.c | 14 +- drivers/net/ethernet/intel/iavf/iavf_main.c | 9 +- drivers/net/ethernet/intel/ice/ice_common.c | 13 +- drivers/net/ethernet/intel/ice/ice_ethtool.c | 35 ++- drivers/net/ethernet/intel/ice/ice_main.c | 3 +- drivers/net/ethernet/intel/igc/igc.h | 2 + drivers/net/ethernet/intel/igc/igc_main.c | 14 +- drivers/net/ethernet/intel/igc/igc_ptp.c | 33 +++ drivers/net/ethernet/intel/ixgbevf/vf.c | 3 +- drivers/net/ethernet/marvell/mvpp2/mvpp2_main.c | 4 +- .../net/ethernet/marvell/octeontx2/af/rvu_cgx.c | 3 + .../ethernet/marvell/octeontx2/af/rvu_devlink.c | 6 +- .../net/ethernet/marvell/octeontx2/af/rvu_sdp.c | 2 +- drivers/net/ethernet/mediatek/airoha_eth.c | 52 ++-- .../ethernet/mellanox/mlx5/core/en/reporter_tx.c | 1 - .../ethernet/mellanox/mlx5/core/en_accel/ipsec.h | 1 + .../mellanox/mlx5/core/en_accel/ipsec_fs.c | 2 +- .../mellanox/mlx5/core/en_accel/ipsec_offload.c | 52 ++-- drivers/net/ethernet/mellanox/mlx5/core/esw/qos.c | 23 +- drivers/net/ethernet/mellanox/mlx5/core/eswitch.c | 30 ++- drivers/net/ethernet/mellanox/mlx5/core/eswitch.h | 3 + .../ethernet/mellanox/mlx5/core/eswitch_offloads.c | 18 +- drivers/net/ethernet/microsoft/mana/hw_channel.c | 6 +- drivers/net/ethernet/microsoft/mana/mana_en.c | 23 +- drivers/net/ethernet/stmicro/stmmac/common.h | 1 - drivers/net/ethernet/stmicro/stmmac/dwmac-intel.c | 4 - .../net/ethernet/stmicro/stmmac/dwmac-loongson.c | 7 - drivers/net/ethernet/stmicro/stmmac/stmmac.h | 2 - drivers/net/ethernet/stmicro/stmmac/stmmac_main.c | 36 --- .../net/ethernet/stmicro/stmmac/stmmac_platform.c | 8 - drivers/net/mctp/mctp-i2c.c | 1 + drivers/net/phy/phy_device.c | 25 +- drivers/net/phy/sfp.c | 8 +- drivers/net/usb/aqc111.c | 12 +- drivers/net/usb/cdc_ncm.c | 10 +- drivers/net/usb/lan78xx.c | 10 +- drivers/net/usb/lan78xx.h | 3 + drivers/net/usb/qmi_wwan.c | 4 +- drivers/net/usb/usbnet.c | 7 +- drivers/net/wireless/marvell/libertas/main.c | 4 +- drivers/net/wireless/ti/wlcore/tx.c | 2 +- drivers/nfc/nxp-nci/i2c.c | 4 +- drivers/nvdimm/bus.c | 5 +- drivers/nvme/host/pci.c | 8 +- drivers/platform/x86/amd/pmc/pmc.c | 3 + drivers/platform/x86/amd/pmc/pmc.h | 1 + .../platform/x86/hp/hp-bioscfg/enum-attributes.c | 9 +- drivers/pmdomain/bcm/bcm2835-power.c | 18 +- drivers/regulator/pca9450-regulator.c | 2 +- drivers/remoteproc/mtk_scp.c | 39 +++ drivers/remoteproc/qcom_sysmon.c | 2 +- drivers/s390/block/dasd_eckd.c | 16 ++ drivers/s390/crypto/zcrypt_ccamisc.c | 12 +- drivers/s390/crypto/zcrypt_cex4.c | 3 +- drivers/scsi/hisi_sas/hisi_sas.h | 43 +++- drivers/scsi/hisi_sas/hisi_sas_main.c | 42 +++- drivers/scsi/hisi_sas/hisi_sas_v3_hw.c | 246 ++++++++++++------- drivers/scsi/mpi3mr/mpi3mr_fw.c | 32 +-- drivers/scsi/scsi_scan.c | 8 +- drivers/scsi/ses.c | 5 +- drivers/scsi/storvsc_drv.c | 5 +- drivers/soc/fsl/qbman/qman.c | 24 +- drivers/soc/fsl/qe/qmc.c | 4 +- drivers/soc/microchip/mpfs-sys-controller.c | 13 +- drivers/soc/rockchip/grf.c | 1 + drivers/spi/spi-cadence-quadspi.c | 33 +++ drivers/spi/spi.c | 25 +- drivers/staging/rtl8723bs/core/rtw_ieee80211.c | 15 +- drivers/staging/rtl8723bs/core/rtw_mlme.c | 5 +- drivers/tty/serial/8250/8250_dma.c | 15 ++ drivers/tty/serial/8250/8250_pci.c | 17 ++ drivers/tty/serial/8250/8250_port.c | 6 + drivers/tty/serial/uartlite.c | 1 + drivers/ufs/core/ufshcd.c | 8 +- drivers/usb/class/cdc-acm.c | 5 + drivers/usb/class/cdc-acm.h | 1 + drivers/usb/class/cdc-wdm.c | 4 +- drivers/usb/class/usbtmc.c | 6 +- drivers/usb/core/message.c | 100 ++++++-- drivers/usb/core/phy.c | 8 +- drivers/usb/core/quirks.c | 16 ++ drivers/usb/dwc3/dwc3-pci.c | 2 + drivers/usb/gadget/function/f_mass_storage.c | 12 +- drivers/usb/gadget/function/f_ncm.c | 36 ++- drivers/usb/gadget/function/f_tcm.c | 14 ++ drivers/usb/gadget/function/u_ether.c | 22 ++ drivers/usb/gadget/function/u_ether.h | 26 ++ drivers/usb/gadget/function/u_ncm.h | 2 +- drivers/usb/host/xhci-ring.c | 1 + drivers/usb/host/xhci.c | 4 +- drivers/usb/image/mdc800.c | 6 +- drivers/usb/misc/uss720.c | 2 +- drivers/usb/misc/yurex.c | 2 +- drivers/usb/renesas_usbhs/common.c | 9 + drivers/usb/roles/class.c | 7 +- drivers/usb/serial/f81232.c | 77 +++--- drivers/usb/typec/altmodes/displayport.c | 7 +- drivers/usb/typec/tcpm/tcpm.c | 2 +- fs/binfmt_misc.c | 4 +- fs/btrfs/disk-io.c | 22 -- fs/btrfs/extent_io.c | 3 +- fs/btrfs/extent_io.h | 3 +- fs/btrfs/inode.c | 19 ++ fs/btrfs/ioctl.c | 24 +- fs/btrfs/space-info.c | 5 +- fs/btrfs/transaction.c | 16 ++ fs/btrfs/tree-checker.c | 2 +- fs/btrfs/tree-log.c | 6 + fs/btrfs/uuid-tree.c | 38 +++ fs/btrfs/uuid-tree.h | 2 + fs/btrfs/volumes.c | 6 +- fs/ceph/debugfs.c | 4 +- fs/ceph/dir.c | 17 +- fs/ceph/file.c | 4 +- fs/ceph/inode.c | 2 +- fs/ceph/mds_client.c | 3 + fs/erofs/zdata.c | 21 +- fs/f2fs/compress.c | 74 +++--- fs/f2fs/f2fs.h | 2 + fs/f2fs/gc.c | 16 +- fs/iomap/buffered-io.c | 15 +- fs/nfs/nfs3proc.c | 7 +- fs/nfsd/nfs4xdr.c | 9 +- fs/nfsd/nfsctl.c | 16 +- fs/nfsd/state.h | 17 +- fs/nsfs.c | 21 ++ fs/smb/client/cifsencrypt.c | 3 +- fs/smb/client/cifsfs.c | 7 +- fs/smb/client/cifsglob.h | 11 + fs/smb/client/cifsproto.h | 1 + fs/smb/client/connect.c | 4 + fs/smb/client/dir.c | 1 + fs/smb/client/file.c | 29 +-- fs/smb/client/fs_context.c | 2 +- fs/smb/client/misc.c | 42 ++++ fs/smb/client/smb2ops.c | 14 +- fs/smb/client/smb2pdu.c | 5 +- fs/smb/client/smb2transport.c | 4 +- fs/smb/client/trace.h | 2 + fs/smb/server/Kconfig | 1 + fs/smb/server/auth.c | 26 +- fs/smb/server/oplock.c | 35 ++- fs/smb/server/oplock.h | 5 +- fs/smb/server/smb2pdu.c | 34 ++- fs/tests/exec_kunit.c | 3 - fs/xfs/libxfs/xfs_defer.c | 2 +- fs/xfs/scrub/agheader_repair.c | 13 +- fs/xfs/scrub/alloc_repair.c | 5 +- fs/xfs/scrub/attr_repair.c | 20 +- fs/xfs/scrub/bmap_repair.c | 6 +- fs/xfs/scrub/common.h | 18 -- fs/xfs/scrub/dir.c | 13 +- fs/xfs/scrub/dir_repair.c | 11 +- fs/xfs/scrub/dirtree.c | 11 +- fs/xfs/scrub/ialloc_repair.c | 5 +- fs/xfs/scrub/nlinks.c | 6 +- fs/xfs/scrub/orphanage.c | 7 +- fs/xfs/scrub/parent.c | 11 +- fs/xfs/scrub/parent_repair.c | 23 +- fs/xfs/scrub/quotacheck.c | 13 +- fs/xfs/scrub/refcount_repair.c | 13 +- fs/xfs/scrub/rmap_repair.c | 5 +- fs/xfs/scrub/rtsummary.c | 7 +- fs/xfs/xfs_bmap_item.c | 3 +- fs/xfs/xfs_dquot.c | 8 +- fs/xfs/xfs_log.c | 2 + include/linux/cleanup.h | 19 ++ include/linux/etherdevice.h | 3 +- include/linux/huge_mm.h | 4 + include/linux/if_ether.h | 3 +- include/linux/io_uring_types.h | 3 + include/linux/irq.h | 3 + include/linux/irqchip/arm-gic-v3.h | 1 + include/linux/mlx5/mlx5_ifc.h | 4 +- include/linux/mmc/host.h | 9 +- include/linux/netdev_features.h | 18 ++ include/linux/netdevice.h | 40 +++- include/linux/stmmac.h | 1 - include/linux/trace_recursion.h | 9 + include/linux/uprobes.h | 1 + include/linux/usb.h | 8 +- include/linux/usb/usbnet.h | 1 + include/net/dsa.h | 1 + include/net/ip6_tunnel.h | 14 ++ include/net/ip_tunnels.h | 7 + include/net/netfilter/nf_tables.h | 2 + include/net/sch_generic.h | 33 +++ include/net/tc_act/tc_gate.h | 33 ++- include/net/udp_tunnel.h | 2 +- include/net/xdp.h | 32 +++ include/trace/events/kmem.h | 8 +- include/trace/events/rxrpc.h | 4 + init/Kconfig | 3 + io_uring/kbuf.c | 18 +- io_uring/kbuf.h | 4 +- io_uring/uring_cmd.c | 9 +- kernel/cgroup/cgroup.c | 1 + kernel/events/uprobes.c | 10 +- kernel/fork.c | 2 +- kernel/irq/Kconfig | 6 + kernel/irq/Makefile | 2 +- kernel/irq/kexec.c | 40 ++++ kernel/kprobes.c | 51 ++-- kernel/sched/ext.c | 89 +++++-- kernel/sched/fair.c | 84 ++++--- kernel/sched/idle.c | 39 ++- kernel/time/time.c | 2 +- kernel/trace/ring_buffer.c | 2 +- kernel/trace/trace.c | 12 +- kernel/trace/trace_events.c | 58 +++-- kernel/trace/trace_functions_graph.c | 6 +- kernel/workqueue.c | 2 +- lib/bootconfig.c | 9 +- mm/compaction.c | 2 + mm/internal.h | 3 +- mm/kfence/core.c | 29 ++- mm/page_alloc.c | 59 ++++- mm/shmem.c | 97 ++++++-- net/batman-adv/bat_iv_ogm.c | 3 + net/batman-adv/bat_v_elp.c | 10 +- net/batman-adv/hard-interface.c | 8 +- net/batman-adv/hard-interface.h | 1 + net/bluetooth/hci_conn.c | 4 +- net/bluetooth/hci_sync.c | 2 +- net/bluetooth/hidp/core.c | 16 +- net/bluetooth/l2cap_core.c | 51 ++-- net/bluetooth/mgmt.c | 7 +- net/bluetooth/smp.c | 2 +- net/bridge/br_cfm.c | 4 +- net/ceph/auth.c | 6 +- net/ceph/messenger_v2.c | 31 ++- net/ceph/mon_client.c | 6 +- net/core/dev.c | 98 +++++++- net/core/dev.h | 35 --- net/core/dst.c | 1 + net/core/xdp.c | 56 +++++ net/dsa/dsa.c | 59 +++-- net/ethernet/eth.c | 9 +- net/ipv4/Kconfig | 1 + net/ipv4/icmp.c | 4 +- net/ipv4/ip_gre.c | 3 +- net/ipv4/ip_tunnel_core.c | 15 ++ net/ipv4/nexthop.c | 14 +- net/ipv4/route.c | 4 +- net/ipv4/tcp.c | 3 +- net/ipv4/tcp_ao.c | 3 +- net/ipv4/tcp_ipv4.c | 3 +- net/ipv6/ip6_output.c | 35 +-- net/ipv6/route.c | 4 +- net/ipv6/tcp_ipv6.c | 3 +- net/mac80211/chan.c | 6 +- net/mac80211/debugfs.c | 14 +- net/mac80211/link.c | 2 + net/mac80211/mesh.c | 3 + net/mac802154/iface.c | 4 +- net/mctp/route.c | 13 +- net/mpls/af_mpls.c | 1 + net/mptcp/pm.c | 2 +- net/mptcp/pm_netlink.c | 72 ++++-- net/mptcp/protocol.h | 2 + net/ncsi/ncsi-aen.c | 3 +- net/ncsi/ncsi-rsp.c | 16 +- net/netfilter/nf_bpf_link.c | 2 +- net/netfilter/nf_conntrack_h323_asn1.c | 4 + net/netfilter/nf_conntrack_netlink.c | 67 ++++-- net/netfilter/nf_conntrack_sip.c | 6 +- net/netfilter/nf_tables_api.c | 7 +- net/netfilter/nfnetlink_cthelper.c | 8 +- net/netfilter/nfnetlink_osf.c | 13 + net/netfilter/nfnetlink_queue.c | 4 +- net/netfilter/nft_ct.c | 4 + net/netfilter/nft_dynset.c | 10 +- net/netfilter/nft_set_pipapo.c | 3 +- net/netfilter/xt_CT.c | 4 + net/netfilter/xt_IDLETIMER.c | 6 + net/netfilter/xt_dccp.c | 4 +- net/netfilter/xt_tcpudp.c | 6 +- net/netfilter/xt_time.c | 4 +- net/phonet/af_phonet.c | 5 +- net/rose/af_rose.c | 5 + net/rxrpc/recvmsg.c | 19 +- net/sched/act_gate.c | 264 +++++++++++++++------ net/sched/sch_generic.c | 27 --- net/sched/sch_ingress.c | 14 +- net/sched/sch_teql.c | 8 +- net/smc/af_smc.c | 23 +- net/smc/smc.h | 5 + net/smc/smc_close.c | 2 +- net/sunrpc/cache.c | 26 +- net/sunrpc/xprtrdma/verbs.c | 7 +- net/tipc/socket.c | 2 + net/wireless/pmsr.c | 1 + sound/core/pcm_native.c | 19 +- sound/pci/hda/patch_realtek.c | 25 ++ sound/soc/amd/acp3x-rt5682-max9836.c | 9 +- sound/soc/amd/yc/acp6x-mach.c | 14 ++ sound/soc/codecs/cs42l43-jack.c | 1 + sound/soc/generic/simple-card-utils.c | 48 ++-- sound/soc/qcom/qdsp6/q6apm-dai.c | 1 + sound/soc/qcom/qdsp6/q6apm-lpass-dais.c | 1 + sound/soc/qcom/qdsp6/q6apm.c | 1 + sound/soc/soc-core.c | 11 +- sound/usb/endpoint.c | 1 + sound/usb/mixer_scarlett2.c | 2 + sound/usb/quirks.c | 2 + tools/bootconfig/main.c | 7 +- tools/objtool/Makefile | 8 +- tools/perf/builtin-ftrace.c | 9 +- tools/perf/util/annotate.c | 5 +- tools/perf/util/disasm.c | 2 +- .../testing/selftests/hid/progs/hid_bpf_helpers.h | 12 + tools/testing/selftests/net/mptcp/mptcp_join.sh | 43 ++++ 500 files changed, 5178 insertions(+), 2252 deletions(-)

13 hours, 7 minutes

[PATCH 6.18 000/212] 6.18.20-rc1 review

by Greg Kroah-Hartman

This is the start of the stable review cycle for the 6.18.20 release. There are 212 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know. Responses should be made by Wed, 25 Mar 2026 13:44:33 +0000. Anything received after that time might be too late. The whole patch series can be found in one patch at: https://www.kernel.org/pub/linux/kernel/v6.x/stable-review/patch-6.18.20-rc… or in the git tree and branch at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-6.18.y and the diffstat can be found below. thanks, greg k-h ------------- Pseudo-Shortlog of commits: Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> Linux 6.18.20-rc1 Guenter Roeck <linux(a)roeck-us.net> hwmon: (max6639) Fix pulses-per-revolution implementation Suzuki K Poulose <suzuki.poulose(a)arm.com> arm64: realm: Fix PTE_NS_SHARED for 52bit PA support Josh Law <objecting(a)objecting.org> tools/bootconfig: fix fd leak in load_xbc_file() on fstat failure Josh Law <objecting(a)objecting.org> lib/bootconfig: check xbc_init_node() return in override path Kees Cook <kees(a)kernel.org> fs/tests: exec: Remove bad test vector Rahul Bukte <rahul.bukte(a)sony.com> drm/i915/gt: Check set_default_submission() before deferencing Hyunwoo Kim <imv4bel(a)gmail.com> ksmbd: fix use-after-free in durable v2 replay of active file handles Hyunwoo Kim <imv4bel(a)gmail.com> ksmbd: fix use-after-free of share_conf in compound request Jonas Karlman <jonas(a)kwiboo.se> drm/bridge: dw-hdmi-qp: fix multi-channel audio output Andy Nguyen <theofficialflow1996(a)gmail.com> drm/amd: fix dcn 2.01 check Srinivasan Shanmugam <srinivasan.shanmugam(a)amd.com> drm/amd/display: Fix DisplayID not-found handling in parse_edid_displayid_vrr() Lizhi Hou <lizhi.hou(a)amd.com> iommu/sva: Fix crash in iommu_sva_unbind_device() Ian Forbes <ian.forbes(a)broadcom.com> drm/vmwgfx: Don't overwrite KMS surface dirty tracker Felix Gu <ustc.gu(a)gmail.com> spi: amlogic-spisg: Fix memory leak in aml_spisg_probe() Felix Gu <ustc.gu(a)gmail.com> spi: amlogic: spifc-a4: Remove redundant clock cleanup Kamal Dasu <kamal.dasu(a)broadcom.com> mtd: rawnand: brcmnand: skip DMA during panic write Kamal Dasu <kamal.dasu(a)broadcom.com> mtd: rawnand: serialize lock/unlock against other NAND operations Andrei Vagin <avagin(a)google.com> binfmt_elf_fdpic: fix AUXV size calculation for ELF_HWCAP3 and ELF_HWCAP4 Steven Rostedt <rostedt(a)goodmis.org> tracing: Fix trace_marker copy link list updates Kyle Meyer <kyle.meyer(a)hpe.com> x86/platform/uv: Handle deconfigured sockets Steven Rostedt <rostedt(a)goodmis.org> tracing: Fix failure to read user space from system call trace events Masami Hiramatsu (Google) <mhiramat(a)kernel.org> ring-buffer: Fix to update per-subbuf entries of persistent ring buffer Breno Leitao <leitao(a)debian.org> perf/x86: Move event pointer setup earlier in x86_pmu_enable() Dapeng Mi <dapeng1.mi(a)linux.intel.com> perf/x86/intel: Add missing branch counters constraint apply Felix Gu <ustc.gu(a)gmail.com> irqchip/riscv-rpmi-sysmsi: Fix mailbox channel leak in rpmi_sysmsi_probe() Gabor Juhos <j4g8y7(a)gmail.com> i2c: pxa: defer reset on Armada 3700 when recovery is used Christophe JAILLET <christophe.jaillet(a)wanadoo.fr> i2c: fsi: Fix a potential leak in fsi_i2c_probe() Johan Hovold <johan(a)kernel.org> i2c: cp2615: fix serial string NULL-deref at probe Ji-Ze Hong (Peter Hong) <peter_hong(a)fintek.com.tw> USB: serial: f81232: fix incomplete serial port generation Sanman Pradhan <psanman(a)juniper.net> hwmon: (pmbus/isl68137) Fix unchecked return value and use sysfs_emit() Sanman Pradhan <psanman(a)juniper.net> hwmon: (pmbus/mp2869) Check pmbus_read_byte_data() before using its return value Sanman Pradhan <psanman(a)juniper.net> hwmon: (pmbus/mp2975) Add error check for pmbus_read_word_data() return value Sanman Pradhan <psanman(a)juniper.net> hwmon: (pmbus/ina233) Add error check for pmbus_read_word_data() return value Li Xiasong <lixiasong1(a)huawei.com> MPTCP: fix lock class name family in pm_nl_create_listen_socket Weiming Shi <bestswngs(a)gmail.com> icmp: fix NULL pointer dereference in icmp_tag_validation() Anas Iqbal <mohd.abd.6602(a)gmail.com> net: dsa: bcm_sf2: fix missing clk_disable_unprepare() in error paths Jakub Kicinski <kuba(a)kernel.org> net: shaper: protect from late creation of hierarchy Jakub Kicinski <kuba(a)kernel.org> net: shaper: protect late read accesses to the hierarchy Muhammad Hammad Ijaz <mhijaz(a)amazon.com> net: mvpp2: guard flow control update with global_tx_fc in buffer switching Weiming Shi <bestswngs(a)gmail.com> nfnetlink_osf: validate individual option lengths in fingerprints Pablo Neira Ayuso <pablo(a)netfilter.org> netfilter: nf_tables: release flowtable after rcu grace period on error Florian Westphal <fw(a)strlen.de> netfilter: bpf: defer hook memory release until rcu readers are done Xiang Mei <xmei5(a)asu.edu> net: bonding: fix NULL deref in bond_debug_rlb_hash_show Xiang Mei <xmei5(a)asu.edu> udp_tunnel: fix NULL deref caused by udp_sock_create6 when CONFIG_IPV6=n Jianbo Liu <jianbol(a)nvidia.com> net/mlx5e: Fix race condition during IPSec ESN update Jianbo Liu <jianbol(a)nvidia.com> net/mlx5e: Prevent concurrent access to IPSec ASO context Cosmin Ratiu <cratiu(a)nvidia.com> net/mlx5: qos: Restrict RTNL area to avoid a lock cycle Fedor Pchelkin <pchelkin(a)ispras.ru> net: macb: fix uninitialized rx_fs_lock Wesley Atwell <atwellwea(a)gmail.com> netdevsim: drop PSP ext ref on forward failure Rafael J. Wysocki <rafael.j.wysocki(a)intel.com> ACPI: processor: Fix previous acpi_processor_errata_piix4() fix Felix Fietkau <nbd(a)nbd.name> wifi: mac80211: always free skb on ieee80211_tx_prepare_skb() failure Guenter Roeck <linux(a)roeck-us.net> wifi: wlcore: Return -ENOMEM instead of -EAGAIN if there is not enough headroom Xiang Mei <xmei5(a)asu.edu> wifi: mac80211: fix NULL deref in mesh_matches_local() Michal Swiatkowski <michal.swiatkowski(a)linux.intel.com> libie: prevent memleak in fwlog code Petr Oros <poros(a)redhat.com> iavf: fix VLAN filter lost on add/delete race Zdenek Bouska <zdenek.bouska(a)siemens.com> igc: fix page fault in XDP TX timestamps handling Kohei Enju <kohei(a)enjuk.jp> igc: fix missing update of skb->tail in igc_xmit_frame() Saket Dumbre <saket.dumbre(a)intel.com> ACPICA: Update the format of Arg3 of _DSM Nikola Z. Ivanov <zlatistiv(a)gmail.com> net: usb: aqc111: Do not perform PM inside suspend callback Daniel Borkmann <daniel(a)iogearbox.net> clsact: Fix use-after-free in init/destroy rollback asymmetry Tobi Gaertner <tob.gaertner(a)me.com> net: usb: cdc_ncm: add ndpoffset to NDP32 nframes bounds check Tobi Gaertner <tob.gaertner(a)me.com> net: usb: cdc_ncm: add ndpoffset to NDP16 nframes bounds check Lorenzo Bianconi <lorenzo(a)kernel.org> net: airoha: Remove airoha_dev_stop() in airoha_remove() Jamal Hadi Salim <jhs(a)mojatatu.com> net/sched: teql: Fix double-free in teql_master_xmit Jiayuan Chen <jiayuan.chen(a)shopee.com> net/smc: fix NULL dereference and UAF in smc_tcp_syn_recv_sock() Eric Dumazet <edumazet(a)google.com> bonding: prevent potential infinite loop in bond_header_parse() Bart Van Assche <bvanassche(a)acm.org> PM: runtime: Fix a race condition related to device removal Rafael J. Wysocki <rafael.j.wysocki(a)intel.com> sched: idle: Consolidate the handling of two special cases Dipayaan Roy <dipayanroy(a)linux.microsoft.com> net: mana: fix use-after-free in mana_hwc_destroy_channel() by reordering teardown Justin Chen <justin.chen(a)broadcom.com> net: bcmgenet: increase WoL poll timeout Guenter Roeck <linux(a)roeck-us.net> crypto: ccp - Fix leaking the same page twice Jenny Guanni Qu <qguanni(a)gmail.com> netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() Jenny Guanni Qu <qguanni(a)gmail.com> netfilter: xt_time: use unsigned int for monthday bit shift Pablo Neira Ayuso <pablo(a)netfilter.org> netfilter: xt_CT: drop pending enqueued packets on template removal Pablo Neira Ayuso <pablo(a)netfilter.org> netfilter: nft_ct: drop pending enqueued packets on removal Pablo Neira Ayuso <pablo(a)netfilter.org> nf_tables: nft_dynset: fix possible stateful expression memleak in error path Jenny Guanni Qu <qguanni(a)gmail.com> netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case Lukas Johannes Möller <research(a)johannes-moeller.dev> netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() Hyunwoo Kim <imv4bel(a)gmail.com> netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() Sabrina Dubroca <sd(a)queasysnail.net> mpls: add missing unregister_netdevice_notifier to mpls_init Jiayuan Chen <jiayuan.chen(a)shopee.com> net/rose: fix NULL pointer dereference in rose_transmit_link on reconnect Hyunwoo Kim <imv4bel(a)gmail.com> bridge: cfm: Fix race condition in peer_mep deletion Dmitry Baryshkov <dmitry.baryshkov(a)oss.qualcomm.com> Bluetooth: qca: fix ROM version reading on WCN3998 chips Shaurya Rane <ssrane_b23(a)ee.vjti.ac.in> Bluetooth: L2CAP: Fix use-after-free in l2cap_unregister_user Luiz Augusto von Dentz <luiz.von.dentz(a)intel.com> Bluetooth: HIDP: Fix possible UAF Wang Tao <wangtao554(a)huawei.com> Bluetooth: MGMT: Fix list corruption and UAF in command complete handlers Michael Grzeschik <m.grzeschik(a)pengutronix.de> Bluetooth: hci_sync: Fix hci_le_create_conn_sync Luiz Augusto von Dentz <luiz.von.dentz(a)intel.com> Bluetooth: ISO: Fix defer tests being unstable Christian Eggers <ceggers(a)arri.de> Bluetooth: SMP: make SM/PER/KDU/BI-04-C happy Christian Eggers <ceggers(a)arri.de> Bluetooth: LE L2CAP: Disconnect if sum of payload sizes exceed SDU Christian Eggers <ceggers(a)arri.de> Bluetooth: LE L2CAP: Disconnect if received packet's SDU exceeds IMTU Cristian Marussi <cristian.marussi(a)arm.com> firmware: arm_scmi: Fix NULL dereference on notify error path Felix Gu <ustc.gu(a)gmail.com> firmware: arm_scpi: Fix device_node reference leak in probe path Yeoreum Yun <yeoreum.yun(a)arm.com> firmware: arm_ffa: Remove vm_id argument in ffa_rxtx_unmap() Claudiu Beznea <claudiu.beznea.uj(a)bp.renesas.com> arm64: dts: renesas: rzg3s-smarc-som: Set bypass for Versa3 PLL2 Lad Prabhakar <prabhakar.mahadev-lad.rj(a)bp.renesas.com> arm64: dts: renesas: r9a09g087: Fix CPG register region sizes Lad Prabhakar <prabhakar.mahadev-lad.rj(a)bp.renesas.com> arm64: dts: renesas: r9a09g077: Fix CPG register region sizes Fabrizio Castro <fabrizio.castro.jz(a)renesas.com> arm64: dts: renesas: r9a09g057: Remove wdt{0,2,3} nodes Ovidiu Panait <ovidiu.panait.rb(a)renesas.com> arm64: dts: renesas: r9a09g057: Add RTC node Lad Prabhakar <prabhakar.mahadev-lad.rj(a)bp.renesas.com> arm64: dts: renesas: rzv2-evk-cn15-sd: Add ramp delay for SD0 regulator Lad Prabhakar <prabhakar.mahadev-lad.rj(a)bp.renesas.com> arm64: dts: renesas: rzt2h-n2h-evk: Add ramp delay for SD0 card regulator Peddolla Harshavardhan Reddy <peddolla.reddy(a)oss.qualcomm.com> wifi: cfg80211: cancel pmsr_free_wk in cfg80211_pmsr_wdev_down Kuniyuki Iwashima <kuniyu(a)google.com> wifi: mac80211: Fix static_branch_dec() underflow for aql_disable. Nicolas Cavallari <nicolas.cavallari(a)green-communications.fr> wifi: mac80211: use jiffies_delta_to_msecs() for sta_info inactive times Johannes Berg <johannes.berg(a)intel.com> wifi: mac80211: remove keys after disabling beaconing Matthew Wilcox <willy(a)infradead.org> tee: shm: Remove refcounting of kernel pages Chen Ni <nichen(a)iscas.ac.cn> soc: fsl: cpm1: qmc: Fix error check for devm_ioremap_resource() in qmc_qe_init_resources() Richard Genoud <richard.genoud(a)bootlin.com> soc: fsl: qbman: fix race condition in qman_destroy_fq Shawn Lin <shawn.lin(a)rock-chips.com> soc: rockchip: grf: Add missing of_node_put() when returning Felix Gu <ustc.gu(a)gmail.com> cache: ax45mp: Fix device node reference leak in ax45mp_cache_init() Felix Gu <ustc.gu(a)gmail.com> cache: starfive: fix device node leak in starlink_cache_init() Zilin Guan <zilin(a)seu.edu.cn> soc: microchip: mpfs: Fix memory leak in mpfs_sys_controller_probe() ZhengYuan Huang <gality369(a)gmail.com> btrfs: tree-checker: fix misleading root drop_level error message Filipe Manana <fdmanana(a)suse.com> btrfs: log new dentries when logging parent dir of a conflicting inode Jouni Högander <jouni.hogander(a)intel.com> drm/i915/psr: Compute PSR entry_setup_frames into intel_crtc_state Luiz Augusto von Dentz <luiz.von.dentz(a)intel.com> Bluetooth: L2CAP: Fix accepting multiple L2CAP_ECRED_CONN_REQ Matthew Brost <matthew.brost(a)intel.com> drm/xe: Open-code GGTT MMIO access protection Ashutosh Dixit <ashutosh.dixit(a)intel.com> drm/xe/oa: Allow reading after disabling OA stream Zhanjun Dong <zhanjun.dong(a)intel.com> drm/xe/guc: Ensure CT state transitions via STOP before DISABLED Imre Deak <imre.deak(a)intel.com> drm/i915/dmc: Fix an unlikely NULL pointer deference at probe Jesse.Zhang <Jesse.Zhang(a)amd.com> drm/amdgpu: Limit BO list entry count to prevent resource exhaustion Alex Deucher <alexander.deucher(a)amd.com> drm/amdgpu: apply state adjust rules to some additional HAINAN vairants Alex Deucher <alexander.deucher(a)amd.com> drm/radeon: apply state adjust rules to some additional HAINAN vairants Alessio Belle <alessio.belle(a)imgtec.com> drm/imagination: Synchronize interrupts before suspending the GPU Alessio Belle <alessio.belle(a)imgtec.com> drm/imagination: Fix deadlock in soft reset sequence Alex Deucher <alexander.deucher(a)amd.com> drm/amdgpu/mmhub4.1.0: add bounds checking for cid Alex Deucher <alexander.deucher(a)amd.com> drm/amdgpu/mmhub3.0: add bounds checking for cid Alex Deucher <alexander.deucher(a)amd.com> drm/amdgpu/mmhub3.0.2: add bounds checking for cid Alex Deucher <alexander.deucher(a)amd.com> drm/amdgpu/mmhub3.0.1: add bounds checking for cid Alex Deucher <alexander.deucher(a)amd.com> drm/amdgpu/mmhub2.3: add bounds checking for cid Alex Deucher <alexander.deucher(a)amd.com> drm/amdgpu/mmhub2.0: add bounds checking for cid Alex Deucher <alexander.deucher(a)amd.com> drm/amdgpu/gmc9.0: add bounds checking for cid Xi Ruoyao <xry111(a)xry111.site> drm/amd/display: Wrap dcn32_override_min_req_memclk() in DC_FP_{START, END} Maarten Lankhorst <dev(a)lankhorst.se> drm: Fix use-after-free on framebuffers and property blobs when calling drm_dev_unplug Maciej Andrzejewski ICEYE <maciej.andrzejewski(a)m-works.net> serial: uartlite: fix PM runtime usage count underflow on probe Jiayuan Chen <jiayuan.chen(a)shopee.com> serial: core: fix infinite loop in handle_tx() for PORT_UNKNOWN Ilpo Järvinen <ilpo.jarvinen(a)linux.intel.com> serial: 8250_dw: Ensure BUSY is deasserted Ilpo Järvinen <ilpo.jarvinen(a)linux.intel.com> serial: 8250: Add late synchronize_irq() to shutdown to handle DW UART BUSY Ilpo Järvinen <ilpo.jarvinen(a)linux.intel.com> serial: 8250_dw: Rework IIR_NO_INT handling to stop interrupt storm Ilpo Järvinen <ilpo.jarvinen(a)linux.intel.com> serial: 8250_dw: Rework dw8250_handle_irq() locking and IIR handling Ilpo Järvinen <ilpo.jarvinen(a)linux.intel.com> serial: 8250: Add serial8250_handle_irq_locked() Ilpo Järvinen <ilpo.jarvinen(a)linux.intel.com> serial: 8250_dw: Avoid unnecessary LCR writes Ilpo Järvinen <ilpo.jarvinen(a)linux.intel.com> serial: 8250: Protect LCR write in shutdown Peng Zhang <zhangpeng.00(a)bytedance.com> serial: 8250: always disable IRQ during THRE test Raul E Rangel <rrangel(a)chromium.org> serial: 8250: Fix TX deadlock when using DMA Martin Roukala (né Peres) <martin.roukala(a)mupuf.org> serial: 8250_pci: add support for the AX99100 Nicolas Pitre <npitre(a)baylibre.com> vt: save/restore unicode screen buffer for alternate screen Jens Axboe <axboe(a)kernel.dk> io_uring/kbuf: propagate BUF_MORE through early buffer commit path Jens Axboe <axboe(a)kernel.dk> io_uring/kbuf: fix missing BUF_MORE for incremental buffers at EOF Jens Axboe <axboe(a)kernel.dk> io_uring/poll: fix multishot recv missing EOF on wakeup race Lu Baolu <baolu.lu(a)linux.intel.com> iommu/vt-d: Only handle IOPF for SVA when PRI is supported Guanghui Feng <guanghuifeng(a)linux.alibaba.com> iommu/vt-d: Fix intel iommu iotlb sync hardlockup and retry Finn Thain <fthain(a)linux-m68k.org> mtd: Avoid boot crash in RedBoot partition table parser Chen Ni <nichen(a)iscas.ac.cn> mtd: rawnand: cadence: Fix error check for dma_alloc_coherent() in cadence_nand_init() Olivier Sobrie <olivier(a)sobrie.be> mtd: rawnand: pl353: make sure optimal timings are applied Johan Hovold <johan(a)kernel.org> spi: fix statistics allocation Johan Hovold <johan(a)kernel.org> spi: fix use-after-free on controller registration failure Maíra Canal <mcanal(a)igalia.com> pmdomain: bcm: bcm2835-power: Increase ASB control timeout Luke Wang <ziniu.wang_1(a)nxp.com> mmc: sdhci: fix timing selection for 1-bit bus width Matthew Schwartz <matthew.schwartz(a)linux.dev> mmc: sdhci-pci-gli: fix GL9750 DMA write corruption Damien Le Moal <dlemoal(a)kernel.org> ata: libata-scsi: report correct sense field pointer in ata_scsiop_maint_in() Damien Le Moal <dlemoal(a)kernel.org> ata: libata-core: disable LPM on ADATA SU680 SSD Zi Yan <ziy(a)nvidia.com> mm/huge_memory: fix a folio_split() race condition with folio_try_get() Corey Minyard <corey(a)minyard.net> ipmi:msghandler: Handle error returns from the SMI sender Corey Minyard <corey(a)minyard.net> ipmi: Consolidate the run to completion checking for xmit msgs lock Tejun Heo <tj(a)kernel.org> sched_ext: Disable preemption between scx_claim_exit() and kicking helper work Tejun Heo <tj(a)kernel.org> sched_ext: Simplify breather mechanism with scx_aborting flag Tejun Heo <tj(a)kernel.org> sched_ext: Fix starvation of scx_enable() under fair-class saturation Christian Brauner <brauner(a)kernel.org> nsfs: tighten permission checks for ns iteration ioctls Shuicheng Lin <shuicheng.lin(a)intel.com> drm/xe/sync: Fix user fence leak on alloc failure Shengming Hu <hu.shengming(a)zte.com.cn> fgraph: Fix thresh_return nosleeptime double-adjust Thorsten Blum <thorsten.blum(a)linux.dev> ksmbd: Don't log keys in SMB3 signing and encryption key generation Kevin Hao <haokexin(a)gmail.com> net: macb: Shuffle the tx ring before enabling tx Théo Lebrun <theo.lebrun(a)bootlin.com> net: macb: sort #includes Ville Syrjälä <ville.syrjala(a)linux.intel.com> drm/i915/vrr: Configure VRR timings after enabling TRANS_DDI_FUNC_CTL Ville Syrjälä <ville.syrjala(a)linux.intel.com> drm/i915/vrr: Move HAS_VRR() check into intel_vrr_set_transcoder_timings() Varun Gupta <varun.gupta(a)intel.com> drm/xe: Fix memory leak in xe_vm_madvise_ioctl Shyam Prasad N <sprasad(a)microsoft.com> cifs: open files should not hold ref on superblock Thorsten Blum <thorsten.blum(a)linux.dev> crypto: atmel-sha204a - Fix OOM ->tfm_count leak Breno Leitao <leitao(a)debian.org> netconsole: fix sysdata_release_enabled_show checking wrong flag Mehul Rao <mehulrao(a)gmail.com> ublk: fix NULL pointer dereference in ublk_ctrl_set_size() Tiezhu Yang <yangtiezhu(a)loongson.cn> LoongArch: Check return values for set_memory_{rw,rox} Kevin Hao <haokexin(a)gmail.com> net: macb: Reinitialize tx/rx queue pointer registers and rx ring during resume Kevin Hao <haokexin(a)gmail.com> net: macb: Introduce gem_init_rx_ring() Jouni Högander <jouni.hogander(a)intel.com> drm/i915/psr: Write DSC parameters on Selective Update in ET mode Jouni Högander <jouni.hogander(a)intel.com> drm/i915/dsc: Add helper for writing DSC Selective Update ET parameters Jouni Högander <jouni.hogander(a)intel.com> drm/i915/dsc: Add Selective Update register definitions Namjae Jeon <linkinjeon(a)kernel.org> ksmbd: use volume UUID in FS_OBJECT_ID_INFORMATION Namjae Jeon <linkinjeon(a)kernel.org> ksmbd: unset conn->binding on failed binding request Paulo Alcantara <pc(a)manguebit.org> smb: client: fix krb5 mount with username option Lukas Johannes Möller <research(a)johannes-moeller.dev> Bluetooth: L2CAP: Validate L2CAP_INFO_RSP payload length before access Lukas Johannes Möller <research(a)johannes-moeller.dev> Bluetooth: L2CAP: Fix type confusion in l2cap_ecred_reconf_rsp() AlanSong-oc <AlanSong-oc(a)zhaoxin.com> crypto: padlock-sha - Disable for Zhaoxin processor Felix Fietkau <nbd(a)nbd.name> mac80211: fix crash in ieee80211_chan_bw_change for AP_VLAN stations Yang Yang <n05ec(a)lzu.edu.cn> batman-adv: avoid OGM aggregation when skb tailroom is insufficient Helge Deller <deller(a)gmx.de> parisc: Flush correct cache in cacheflush() syscall Junrui Luo <moonafterrain(a)outlook.com> bnxt_en: fix OOB access in DBG_BUF_PRODUCER async event handler Fedor Pchelkin <pchelkin(a)ispras.ru> net: macb: fix use-after-free access to PTP clock Ian Ray <ian.ray(a)gehealthcare.com> NFC: nxp-nci: allow GPIOs to sleep Tiezhu Yang <yangtiezhu(a)loongson.cn> LoongArch: No need to flush icache if text copy failed Tiezhu Yang <yangtiezhu(a)loongson.cn> LoongArch: Give more information if kmem access failed Wei Yang <richard.weiyang(a)gmail.com> mm/huge_memory: fix early failure try_to_migrate() when split huge pmd for shared THP Chris Down <chris(a)chrisdown.name> mm/huge_memory: fix use of NULL folio in move_pages_huge_pmd() Dev Jain <dev.jain(a)arm.com> mm/rmap: fix incorrect pte restoration for lazyfree folios Thorsten Blum <thorsten.blum(a)linux.dev> crash_dump: don't log dm-crypt key bytes in read_key_from_user_keying Ira Weiny <ira.weiny(a)intel.com> nvdimm/bus: Fix potential use after free in asynchronous initialization Jeff Layton <jlayton(a)kernel.org> sunrpc: fix cache_request leak in cache_release Benjamin Tissoires <bentiss(a)kernel.org> HID: bpf: prevent buffer overflow in hid_hw_request Benjamin Tissoires <bentiss(a)kernel.org> selftests/hid: fix compilation when bpf_wq and hid_device are not exported Jeff Layton <jlayton(a)kernel.org> nfsd: fix heap overflow in NFSv4.0 LOCK replay cache Chuck Lever <chuck.lever(a)oracle.com> NFSD: Hold net reference for the lifetime of /proc/fs/nfs/exports fd Chuck Lever <chuck.lever(a)oracle.com> NFSD: Defer sub-object cleanup in export put callbacks ------------- Diffstat: Documentation/netlink/specs/net_shaper.yaml | 12 +- Makefile | 4 +- arch/arm64/boot/dts/renesas/r9a09g057.dtsi | 37 +-- arch/arm64/boot/dts/renesas/r9a09g077.dtsi | 4 +- arch/arm64/boot/dts/renesas/r9a09g087.dtsi | 4 +- arch/arm64/boot/dts/renesas/rzg3s-smarc-som.dtsi | 2 +- .../boot/dts/renesas/rzt2h-n2h-evk-common.dtsi | 1 + arch/arm64/boot/dts/renesas/rzv2-evk-cn15-sd.dtso | 1 + arch/arm64/kernel/rsi.c | 3 +- arch/loongarch/include/asm/uaccess.h | 14 +- arch/loongarch/kernel/inst.c | 21 +- arch/parisc/kernel/cache.c | 4 +- arch/x86/events/core.c | 3 +- arch/x86/events/intel/core.c | 31 ++- arch/x86/kernel/apic/x2apic_uv_x.c | 18 +- drivers/acpi/acpi_processor.c | 15 +- drivers/acpi/acpica/acpredef.h | 2 +- drivers/ata/libata-core.c | 3 + drivers/ata/libata-scsi.c | 2 +- drivers/base/power/runtime.c | 1 + drivers/block/ublk_drv.c | 12 +- drivers/bluetooth/btqca.c | 2 + drivers/cache/ax45mp_cache.c | 4 +- drivers/cache/starfive_starlink_cache.c | 4 +- drivers/char/ipmi/ipmi_msghandler.c | 144 ++++++---- drivers/crypto/atmel-sha204a.c | 5 +- drivers/crypto/ccp/sev-dev.c | 4 +- drivers/crypto/padlock-sha.c | 7 + drivers/firewire/net.c | 5 +- drivers/firmware/arm_ffa/driver.c | 8 +- drivers/firmware/arm_scmi/notify.c | 4 +- drivers/firmware/arm_scpi.c | 5 +- drivers/gpu/drm/amd/amdgpu/amdgpu_bo_list.c | 4 + drivers/gpu/drm/amd/amdgpu/gmc_v9_0.c | 21 +- drivers/gpu/drm/amd/amdgpu/mmhub_v2_0.c | 9 +- drivers/gpu/drm/amd/amdgpu/mmhub_v2_3.c | 3 +- drivers/gpu/drm/amd/amdgpu/mmhub_v3_0.c | 3 +- drivers/gpu/drm/amd/amdgpu/mmhub_v3_0_1.c | 3 +- drivers/gpu/drm/amd/amdgpu/mmhub_v3_0_2.c | 3 +- drivers/gpu/drm/amd/amdgpu/mmhub_v4_1_0.c | 3 +- drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm.c | 4 +- drivers/gpu/drm/amd/display/dc/clk_mgr/clk_mgr.c | 8 +- .../amd/display/dc/resource/dcn32/dcn32_resource.c | 3 + drivers/gpu/drm/amd/pm/legacy-dpm/si_dpm.c | 4 +- drivers/gpu/drm/bridge/synopsys/dw-hdmi-qp.c | 2 +- drivers/gpu/drm/drm_file.c | 5 +- drivers/gpu/drm/drm_mode_config.c | 9 +- drivers/gpu/drm/i915/display/intel_display.c | 2 - .../drm/i915/display/intel_display_power_well.c | 2 +- drivers/gpu/drm/i915/display/intel_display_types.h | 1 + drivers/gpu/drm/i915/display/intel_dmc.c | 3 +- drivers/gpu/drm/i915/display/intel_psr.c | 16 +- drivers/gpu/drm/i915/display/intel_vdsc.c | 23 ++ drivers/gpu/drm/i915/display/intel_vdsc.h | 3 + drivers/gpu/drm/i915/display/intel_vdsc_regs.h | 12 + drivers/gpu/drm/i915/display/intel_vrr.c | 17 ++ drivers/gpu/drm/i915/gt/intel_engine_cs.c | 3 +- drivers/gpu/drm/imagination/pvr_device.c | 17 -- drivers/gpu/drm/imagination/pvr_power.c | 22 +- drivers/gpu/drm/radeon/si_dpm.c | 4 +- drivers/gpu/drm/vmwgfx/vmwgfx_kms.c | 3 +- drivers/gpu/drm/xe/xe_ggtt.c | 10 +- drivers/gpu/drm/xe/xe_ggtt_types.h | 5 +- drivers/gpu/drm/xe/xe_guc_ct.c | 1 + drivers/gpu/drm/xe/xe_oa.c | 7 +- drivers/gpu/drm/xe/xe_sync.c | 6 +- drivers/gpu/drm/xe/xe_vm_madvise.c | 3 +- drivers/hid/bpf/hid_bpf_dispatch.c | 2 + drivers/hwmon/max6639.c | 10 +- drivers/hwmon/pmbus/ina233.c | 2 + drivers/hwmon/pmbus/isl68137.c | 7 +- drivers/hwmon/pmbus/mp2869.c | 35 ++- drivers/hwmon/pmbus/mp2975.c | 2 + drivers/i2c/busses/i2c-cp2615.c | 3 + drivers/i2c/busses/i2c-fsi.c | 1 + drivers/i2c/busses/i2c-pxa.c | 17 +- drivers/iommu/intel/dmar.c | 3 +- drivers/iommu/intel/svm.c | 12 +- drivers/iommu/iommu-sva.c | 12 +- drivers/irqchip/irq-riscv-rpmi-sysmsi.c | 1 + drivers/mmc/host/sdhci-pci-gli.c | 9 + drivers/mmc/host/sdhci.c | 9 +- drivers/mtd/nand/raw/brcmnand/brcmnand.c | 6 +- drivers/mtd/nand/raw/cadence-nand-controller.c | 2 +- drivers/mtd/nand/raw/nand_base.c | 14 +- drivers/mtd/nand/raw/pl35x-nand-controller.c | 3 + drivers/mtd/parsers/redboot.c | 6 +- drivers/net/bonding/bond_debugfs.c | 16 +- drivers/net/bonding/bond_main.c | 8 +- drivers/net/dsa/bcm_sf2.c | 8 +- drivers/net/ethernet/airoha/airoha_eth.c | 1 - drivers/net/ethernet/broadcom/bnxt/bnxt.c | 2 + drivers/net/ethernet/broadcom/bnxt/bnxt.h | 2 +- drivers/net/ethernet/broadcom/genet/bcmgenet_wol.c | 2 +- drivers/net/ethernet/cadence/macb_main.c | 161 +++++++++-- drivers/net/ethernet/cadence/macb_ptp.c | 4 +- drivers/net/ethernet/intel/iavf/iavf_main.c | 9 +- drivers/net/ethernet/intel/igc/igc.h | 2 + drivers/net/ethernet/intel/igc/igc_main.c | 14 +- drivers/net/ethernet/intel/igc/igc_ptp.c | 33 +++ drivers/net/ethernet/intel/libie/fwlog.c | 49 +++- drivers/net/ethernet/marvell/mvpp2/mvpp2_main.c | 4 +- .../ethernet/mellanox/mlx5/core/en_accel/ipsec.h | 1 + .../mellanox/mlx5/core/en_accel/ipsec_offload.c | 52 ++-- drivers/net/ethernet/mellanox/mlx5/core/esw/qos.c | 23 +- drivers/net/ethernet/microsoft/mana/hw_channel.c | 6 +- drivers/net/netconsole.c | 2 +- drivers/net/netdevsim/netdev.c | 5 +- drivers/net/usb/aqc111.c | 12 +- drivers/net/usb/cdc_ncm.c | 10 +- drivers/net/wireless/ath/ath9k/channel.c | 6 +- drivers/net/wireless/mediatek/mt76/scan.c | 4 +- drivers/net/wireless/ti/wlcore/tx.c | 2 +- drivers/net/wireless/virtual/mac80211_hwsim.c | 1 - drivers/nfc/nxp-nci/i2c.c | 4 +- drivers/nvdimm/bus.c | 5 +- drivers/pmdomain/bcm/bcm2835-power.c | 12 +- drivers/soc/fsl/qbman/qman.c | 24 +- drivers/soc/fsl/qe/qmc.c | 4 +- drivers/soc/microchip/mpfs-sys-controller.c | 13 +- drivers/soc/rockchip/grf.c | 1 + drivers/spi/spi-amlogic-spifc-a4.c | 46 +--- drivers/spi/spi-amlogic-spisg.c | 12 +- drivers/spi/spi.c | 25 +- drivers/tee/tee_shm.c | 27 -- drivers/tty/serial/8250/8250.h | 25 ++ drivers/tty/serial/8250/8250_dma.c | 15 + drivers/tty/serial/8250/8250_dw.c | 304 ++++++++++++++++----- drivers/tty/serial/8250/8250_pci.c | 17 ++ drivers/tty/serial/8250/8250_port.c | 75 +++-- drivers/tty/serial/serial_core.c | 5 +- drivers/tty/serial/uartlite.c | 1 + drivers/tty/vt/vt.c | 8 + drivers/usb/serial/f81232.c | 77 ++++-- fs/binfmt_elf_fdpic.c | 6 + fs/btrfs/tree-checker.c | 2 +- fs/btrfs/tree-log.c | 6 + fs/nfsd/export.c | 63 ++++- fs/nfsd/export.h | 7 +- fs/nfsd/nfs4xdr.c | 9 +- fs/nfsd/nfsctl.c | 22 +- fs/nfsd/state.h | 17 +- fs/nsfs.c | 13 + fs/smb/client/cifsfs.c | 7 +- fs/smb/client/cifsproto.h | 1 + fs/smb/client/connect.c | 4 + fs/smb/client/file.c | 11 - fs/smb/client/misc.c | 42 +++ fs/smb/client/trace.h | 2 + fs/smb/server/auth.c | 22 +- fs/smb/server/smb2pdu.c | 17 +- fs/tests/exec_kunit.c | 3 - include/linux/auxvec.h | 2 +- include/linux/console_struct.h | 1 + include/linux/etherdevice.h | 3 +- include/linux/if_ether.h | 3 +- include/linux/io_uring_types.h | 3 + include/linux/netdevice.h | 6 +- include/linux/ns_common.h | 2 + include/linux/serial_8250.h | 1 + include/net/mac80211.h | 4 +- include/net/netfilter/nf_tables.h | 2 + include/net/sch_generic.h | 33 +++ include/net/udp_tunnel.h | 2 +- io_uring/kbuf.c | 14 +- io_uring/poll.c | 9 +- kernel/crash_dump_dm_crypt.c | 4 +- kernel/nscommon.c | 6 + kernel/sched/ext.c | 132 ++++++--- kernel/sched/idle.c | 30 +- kernel/trace/ring_buffer.c | 2 +- kernel/trace/trace.c | 36 ++- kernel/trace/trace_functions_graph.c | 15 +- lib/bootconfig.c | 3 +- mm/huge_memory.c | 12 +- mm/rmap.c | 21 +- net/batman-adv/bat_iv_ogm.c | 3 + net/bluetooth/hci_conn.c | 4 +- net/bluetooth/hci_sync.c | 2 +- net/bluetooth/hidp/core.c | 16 +- net/bluetooth/l2cap_core.c | 51 ++-- net/bluetooth/mgmt.c | 7 +- net/bluetooth/smp.c | 2 +- net/bridge/br_cfm.c | 4 +- net/ethernet/eth.c | 9 +- net/ipv4/icmp.c | 4 +- net/ipv4/ip_gre.c | 3 +- net/mac80211/cfg.c | 12 +- net/mac80211/chan.c | 6 +- net/mac80211/debugfs.c | 14 +- net/mac80211/mesh.c | 3 + net/mac80211/sta_info.c | 7 +- net/mac80211/tx.c | 4 +- net/mac802154/iface.c | 4 +- net/mpls/af_mpls.c | 1 + net/mptcp/pm_kernel.c | 2 +- net/netfilter/nf_bpf_link.c | 2 +- net/netfilter/nf_conntrack_h323_asn1.c | 4 + net/netfilter/nf_conntrack_netlink.c | 26 +- net/netfilter/nf_conntrack_sip.c | 6 +- net/netfilter/nf_tables_api.c | 5 +- net/netfilter/nfnetlink_osf.c | 13 + net/netfilter/nft_ct.c | 4 + net/netfilter/nft_dynset.c | 10 +- net/netfilter/xt_CT.c | 4 + net/netfilter/xt_time.c | 4 +- net/phonet/af_phonet.c | 5 +- net/rose/af_rose.c | 5 + net/sched/sch_generic.c | 27 -- net/sched/sch_ingress.c | 14 +- net/sched/sch_teql.c | 7 +- net/shaper/shaper.c | 160 ++++++----- net/shaper/shaper_nl_gen.c | 12 +- net/shaper/shaper_nl_gen.h | 5 + net/smc/af_smc.c | 23 +- net/smc/smc.h | 5 + net/smc/smc_close.c | 2 +- net/sunrpc/cache.c | 26 +- net/wireless/pmsr.c | 1 + tools/bootconfig/main.c | 7 +- .../testing/selftests/hid/progs/hid_bpf_helpers.h | 12 + 221 files changed, 2109 insertions(+), 963 deletions(-)

13 hours, 55 minutes

[PATCH 6.1 000/481] 6.1.167-rc1 review

by Greg Kroah-Hartman

This is the start of the stable review cycle for the 6.1.167 release. There are 481 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know. Responses should be made by Wed, 25 Mar 2026 13:44:33 +0000. Anything received after that time might be too late. The whole patch series can be found in one patch at: https://www.kernel.org/pub/linux/kernel/v6.x/stable-review/patch-6.1.167-rc… or in the git tree and branch at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-6.1.y and the diffstat can be found below. thanks, greg k-h ------------- Pseudo-Shortlog of commits: Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> Linux 6.1.167-rc1 Nathan Gao <zcgao(a)amazon.com> Revert "selftests: net: amt: wait longer for connection before sending packets" Jaskaran Singh <jsingh(a)cloudlinux.com> nvme: nvme-fc: Ensure ->ioerr_work is cancelled in nvme_fc_delete_ctrl() Jaskaran Singh <jsingh(a)cloudlinux.com> Revert "nvme: nvme-fc: Ensure ->ioerr_work is cancelled in nvme_fc_delete_ctrl()" Johan Hovold <johan(a)kernel.org> i2c: cp2615: fix serial string NULL-deref at probe Justin Stitt <justinstitt(a)google.com> i2c: cp2615: replace deprecated strncpy with strscpy Chunyan Zhang <zhangchunyan(a)iscas.ac.cn> riscv: stacktrace: Disable KASAN checks for non-current tasks Duoming Zhou <duoming(a)zju.edu.cn> wifi: brcmfmac: fix use-after-free when rescheduling brcmf_btcoex_info work Pablo Neira Ayuso <pablo(a)netfilter.org> netfilter: nft_set_pipapo: prevent overflow in lookup table allocation Pablo Neira Ayuso <pablo(a)netfilter.org> netfilter: nf_tables: missing objects with no memcg accounting Alexander Aring <aahringo(a)redhat.com> dlm: fix possible lkb_resource null dereference Matthieu Baerts (NGI0) <matttbe(a)kernel.org> mptcp: pm: in-kernel: always set ID as avail when rm endp Russell King (Oracle) <rmk+kernel(a)armlinux.org.uk> net: stmmac: fix TSO DMA API usage causing oops Chao Yu <chao(a)kernel.org> f2fs: fix to trigger foreground gc during f2fs_map_blocks() in lfs mode Keith Busch <kbusch(a)kernel.org> nvme: fix admin request_queue lifetime Pedro Demarchi Gomes <pedrodemargomes(a)gmail.com> ntfs: set dummy blocksize to read boot_block when mounting Zqiang <qiang.zhang1211(a)gmail.com> rcu/nocb: Fix possible invalid rdp's->nocb_cb_kthread pointer access Jibin Zhang <jibin.zhang(a)mediatek.com> net: fix segmentation of forwarding fraglist GRO Felix Fietkau <nbd(a)nbd.name> net: gso: fix tcp fraglist segmentation after pull from frag_list Felix Fietkau <nbd(a)nbd.name> net: add support for segmenting TCP fraglist GSO packets Timur Kristóf <timur.kristof(a)gmail.com> drm/amd/pm: Use pm_display_cfg in legacy DPM (v2) Timur Kristóf <timur.kristof(a)gmail.com> drm/amd/display: Add pixel_clock to amd_pp_display_configuration Alex Deucher <alexander.deucher(a)amd.com> drm/amdgpu: clarify DC checks Alex Deucher <alexander.deucher(a)amd.com> drm/amdgpu: use proper DC check in amdgpu_display_supported_domains() Jakub Kicinski <kuba(a)kernel.org> net: clear the dst when changing skb protocol Heiko Carstens <hca(a)linux.ibm.com> s390/xor: Fix xor_xc_2() inline assembly constraints Guodong Xu <guodong(a)riscstar.com> dmaengine: mmp_pdma: Fix race condition in mmp_pdma_residue() Florian Westphal <fw(a)strlen.de> netfilter: nft_set_pipapo: split gc into unlink and reclaim phase Florian Westphal <fw(a)strlen.de> netfilter: nf_tables: de-constify set commit ops function argument Josh Law <objecting(a)objecting.org> tools/bootconfig: fix fd leak in load_xbc_file() on fstat failure Josh Law <objecting(a)objecting.org> lib/bootconfig: check xbc_init_node() return in override path Rahul Bukte <rahul.bukte(a)sony.com> drm/i915/gt: Check set_default_submission() before deferencing Hyunwoo Kim <imv4bel(a)gmail.com> ksmbd: fix use-after-free of share_conf in compound request Kamal Dasu <kamal.dasu(a)broadcom.com> mtd: rawnand: brcmnand: skip DMA during panic write Kamal Dasu <kamal.dasu(a)broadcom.com> mtd: rawnand: serialize lock/unlock against other NAND operations Christophe JAILLET <christophe.jaillet(a)wanadoo.fr> i2c: fsi: Fix a potential leak in fsi_i2c_probe() Ji-Ze Hong (Peter Hong) <peter_hong(a)fintek.com.tw> USB: serial: f81232: fix incomplete serial port generation Vincent Guittot <vincent.guittot(a)linaro.org> sched/fair: Fix pelt clock sync when entering idle Joonwon Kang <joonwonkang(a)google.com> mailbox: Prevent out-of-bounds access in of_mbox_index_xlate() Kuniyuki Iwashima <kuniyu(a)google.com> Bluetooth: hci_core: Fix use-after-free in vhci_flush() Maarten Lankhorst <dev(a)lankhorst.se> drm: Fix use-after-free on framebuffers and property blobs when calling drm_dev_unplug Luiz Augusto von Dentz <luiz.von.dentz(a)intel.com> Bluetooth: L2CAP: Fix accepting multiple L2CAP_ECRED_CONN_REQ Sanman Pradhan <psanman(a)juniper.net> hwmon: (pmbus/isl68137) Fix unchecked return value and use sysfs_emit() Weiming Shi <bestswngs(a)gmail.com> icmp: fix NULL pointer dereference in icmp_tag_validation() Anas Iqbal <mohd.abd.6602(a)gmail.com> net: dsa: bcm_sf2: fix missing clk_disable_unprepare() in error paths Muhammad Hammad Ijaz <mhijaz(a)amazon.com> net: mvpp2: guard flow control update with global_tx_fc in buffer switching Weiming Shi <bestswngs(a)gmail.com> nfnetlink_osf: validate individual option lengths in fingerprints Pablo Neira Ayuso <pablo(a)netfilter.org> netfilter: nf_tables: release flowtable after rcu grace period on error Xiang Mei <xmei5(a)asu.edu> net: bonding: fix NULL deref in bond_debug_rlb_hash_show Xiang Mei <xmei5(a)asu.edu> udp_tunnel: fix NULL deref caused by udp_sock_create6 when CONFIG_IPV6=n Fedor Pchelkin <pchelkin(a)ispras.ru> net: macb: fix uninitialized rx_fs_lock Rafael J. Wysocki <rafael.j.wysocki(a)intel.com> ACPI: processor: Fix previous acpi_processor_errata_piix4() fix Guenter Roeck <linux(a)roeck-us.net> wifi: wlcore: Return -ENOMEM instead of -EAGAIN if there is not enough headroom Xiang Mei <xmei5(a)asu.edu> wifi: mac80211: fix NULL deref in mesh_matches_local() Petr Oros <poros(a)redhat.com> iavf: fix VLAN filter lost on add/delete race Kohei Enju <kohei(a)enjuk.jp> igc: fix missing update of skb->tail in igc_xmit_frame() Nikola Z. Ivanov <zlatistiv(a)gmail.com> net: usb: aqc111: Do not perform PM inside suspend callback Jamal Hadi Salim <jhs(a)mojatatu.com> net/sched: teql: Fix double-free in teql_master_xmit Jiayuan Chen <jiayuan.chen(a)shopee.com> net/smc: fix NULL dereference and UAF in smc_tcp_syn_recv_sock() Bart Van Assche <bvanassche(a)acm.org> PM: runtime: Fix a race condition related to device removal Rafael J. Wysocki <rafael.j.wysocki(a)intel.com> sched: idle: Consolidate the handling of two special cases Dipayaan Roy <dipayanroy(a)linux.microsoft.com> net: mana: fix use-after-free in mana_hwc_destroy_channel() by reordering teardown Justin Chen <justin.chen(a)broadcom.com> net: bcmgenet: increase WoL poll timeout Jenny Guanni Qu <qguanni(a)gmail.com> netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() Jenny Guanni Qu <qguanni(a)gmail.com> netfilter: xt_time: use unsigned int for monthday bit shift Pablo Neira Ayuso <pablo(a)netfilter.org> netfilter: xt_CT: drop pending enqueued packets on template removal Pablo Neira Ayuso <pablo(a)netfilter.org> netfilter: nft_ct: drop pending enqueued packets on removal Andrii Melnychenko <a.melnychenko(a)vyos.io> netfilter: nft_ct: add seqadj extension for natted connections Jenny Guanni Qu <qguanni(a)gmail.com> netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case Lukas Johannes Möller <research(a)johannes-moeller.dev> netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() Hyunwoo Kim <imv4bel(a)gmail.com> netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() Florian Westphal <fw(a)strlen.de> netfilter: ctnetlink: remove refcounting in expectation dumpers Jiayuan Chen <jiayuan.chen(a)shopee.com> net/rose: fix NULL pointer dereference in rose_transmit_link on reconnect Dmitry Baryshkov <dmitry.baryshkov(a)oss.qualcomm.com> Bluetooth: qca: fix ROM version reading on WCN3998 chips Luiz Augusto von Dentz <luiz.von.dentz(a)intel.com> Bluetooth: HIDP: Fix possible UAF Michael Grzeschik <m.grzeschik(a)pengutronix.de> Bluetooth: hci_sync: Fix hci_le_create_conn_sync Christian Eggers <ceggers(a)arri.de> Bluetooth: SMP: make SM/PER/KDU/BI-04-C happy Christian Eggers <ceggers(a)arri.de> Bluetooth: LE L2CAP: Disconnect if sum of payload sizes exceed SDU Christian Eggers <ceggers(a)arri.de> Bluetooth: LE L2CAP: Disconnect if received packet's SDU exceeds IMTU Felix Gu <ustc.gu(a)gmail.com> firmware: arm_scpi: Fix device_node reference leak in probe path Peddolla Harshavardhan Reddy <peddolla.reddy(a)oss.qualcomm.com> wifi: cfg80211: cancel pmsr_free_wk in cfg80211_pmsr_wdev_down Kuniyuki Iwashima <kuniyu(a)google.com> wifi: mac80211: Fix static_branch_dec() underflow for aql_disable. Richard Genoud <richard.genoud(a)bootlin.com> soc: fsl: qbman: fix race condition in qman_destroy_fq ZhengYuan Huang <gality369(a)gmail.com> btrfs: tree-checker: fix misleading root drop_level error message Zilin Guan <zilin(a)seu.edu.cn> binfmt_misc: restore write access before closing files opened by open_exec() Håkon Bugge <haakon.bugge(a)oracle.com> PCI/ACPI: Restrict program_hpx_type2() to AER bits Russell King (Oracle) <rmk+kernel(a)armlinux.org.uk> net: stmmac: remove support for lpi_intr_o Guchun Chen <guchun.chen(a)amd.com> drm/amdgpu: drop redundant sched job cleanup when cs is aborted Khairul Anuar Romli <khairul.anuar.romli(a)altera.com> spi: cadence-quadspi: Implement refcount to handle unbind during busy Jakub Kicinski <kuba(a)kernel.org> eth: bnxt: always recalculate features after XDP clearing, fix null-deref Qu Wenruo <wqu(a)suse.com> btrfs: do not strictly require dirty metadata threshold for metadata writepages Qu Wenruo <wqu(a)suse.com> btrfs: send: check for inline extents in range_is_hole_in_parent() Oleg Nesterov <oleg(a)redhat.com> x86/uprobes: Fix XOL allocation failure for 32-bit tasks Jeongjun Park <aha310510(a)gmail.com> drm/exynos: vidi: use ctx->lock to protect struct vidi_context member variables related to memory alloc/free Jeongjun Park <aha310510(a)gmail.com> drm/exynos: vidi: fix to avoid directly dereferencing user pointer Jeongjun Park <aha310510(a)gmail.com> drm/exynos: vidi: use priv->vidi_dev for ctx lookup in vidi_connection_ioctl() Ankit Garg <nktgrg(a)google.com> gve: defer interrupt enabling until NAPI registration Frederic Weisbecker <frederic(a)kernel.org> net: Handle napi_schedule() calls from non-interrupt Huacai Chen <chenhuacai(a)kernel.org> net: stmmac: dwmac-loongson: Set clk_csr_i to 100-150MHz Bart Van Assche <bvanassche(a)acm.org> scsi: ufs: core: Fix handling of lrbp->cmd Eric Dumazet <edumazet(a)google.com> net/sched: cls_u32: use skb_header_pointer_careful() Eric Dumazet <edumazet(a)google.com> net: add skb_header_pointer_careful() helper Mikulas Patocka <mpatocka(a)redhat.com> dm-verity: disable recursive forward error correction Wei Fang <wei.fang(a)nxp.com> net: enetc: allocate vf_state during PF probes Vladimir Oltean <vladimir.oltean(a)nxp.com> net: enetc: reimplement RFS/RSS memory clearing as PCI quirk Daniel Golle <daniel(a)makrotopia.org> mtd: spinand: macronix: use scratch buffer for DMA operation Eric Biggers <ebiggers(a)kernel.org> net/tcp-md5: Fix MAC comparison to be constant-time Eric Biggers <ebiggers(a)kernel.org> ksmbd: Compare MACs in constant time Eric Biggers <ebiggers(a)kernel.org> smb: client: Compare MACs in constant time Andreas Gruenbacher <agruenba(a)redhat.com> gfs2: No more self recovery Kevin Groeneveld <kgroeneveld(a)lenbrook.com> net: fec: handle page_pool_dev_alloc_pages error Vladimir Oltean <vladimir.oltean(a)nxp.com> net: dsa: improve shutdown sequence Lang Yu <Lang.Yu(a)amd.com> drm/amdgpu: unmap and remove csa_va properly Takashi Iwai <tiwai(a)suse.de> ALSA: usb-audio: Kill timer properly at removal Jean-Baptiste Maneyrol <jean-baptiste.maneyrol(a)tdk.com> iio: imu: inv_icm42600: fix odr switch when turning buffer off Jakub Staniszewski <jakub.staniszewski(a)linux.intel.com> ice: reintroduce retry mechanism for indirect AQ Michal Schmidt <mschmidt(a)redhat.com> ice: sleep, don't busy-wait, in the SQ send retry loop Michal Schmidt <mschmidt(a)redhat.com> ice: remove unused buffer copy code in ice_sq_send_cmd_retry() Maíra Canal <mcanal(a)igalia.com> pmdomain: bcm: bcm2835-power: Increase ASB control timeout Kevin Hao <haokexin(a)gmail.com> net: macb: Reinitialize tx/rx queue pointer registers and rx ring during resume Kevin Hao <haokexin(a)gmail.com> net: macb: Introduce gem_init_rx_ring() Vineeth Karumanchi <vineeth.karumanchi(a)amd.com> net: macb: queue tie-off or disable during WOL suspend Jeff Layton <jlayton(a)kernel.org> nfsd: fix heap overflow in NFSv4.0 LOCK replay cache Chuck Lever <chuck.lever(a)oracle.com> NFSD: Hold net reference for the lifetime of /proc/fs/nfs/exports fd Tom Rix <trix(a)redhat.com> nfsd: define exports_proc_ops with CONFIG_PROC_FS Yang Yang <n05ec(a)lzu.edu.cn> batman-adv: avoid OGM aggregation when skb tailroom is insufficient Antoniu Miclaus <antoniu.miclaus(a)analog.com> iio: light: bh1780: fix PM runtime leak on error path Filipe Manana <fdmanana(a)suse.com> btrfs: fix transaction abort on set received ioctl due to item overflow Filipe Manana <fdmanana(a)suse.com> btrfs: fix transaction abort when snapshotting received subvolumes Nuno Sá <nuno.sa(a)analog.com> iio: buffer: Fix wait_queue not being removed Nuno Sá <nuno.sa(a)analog.com> iio: buffer: fix coding style warnings Masami Hiramatsu (Google) <mhiramat(a)kernel.org> kprobes: Remove unneeded warnings from __arm_kprobe_ftrace() Masami Hiramatsu (Google) <mhiramat(a)kernel.org> kprobes: Remove unneeded goto Shyam Prasad N <sprasad(a)microsoft.com> cifs: open files should not hold ref on superblock Thorsten Blum <thorsten.blum(a)linux.dev> crypto: atmel-sha204a - Fix OOM ->tfm_count leak Long Li <leo.lilong(a)huawei.com> xfs: ensure dquot item is deleted from AIL only after log shutdown Long Li <leo.lilong(a)huawei.com> xfs: fix integer overflow in bmap intent sort comparator Harald Freudenberger <freude(a)linux.ibm.com> s390/zcrypt: Enable AUTOSEL_DOM for CCA serialnr sysfs attribute Kevin Hao <haokexin(a)gmail.com> net: macb: Shuffle the tx ring before enabling tx Luca Ceresoli <luca.ceresoli(a)bootlin.com> drm/bridge: ti-sn65dsi83: halve horizontal syncs for dual LVDS output Thomas Fourier <fourier.thomas(a)gmail.com> drm/msm: Fix dma_free_attrs() buffer size Thorsten Blum <thorsten.blum(a)linux.dev> ksmbd: Don't log keys in SMB3 signing and encryption key generation Catalin Marinas <catalin.marinas(a)arm.com> arm64: mm: Add PTE_DIRTY back to PAGE_KERNEL* to fix kexec/hibernation Joey Gouly <joey.gouly(a)arm.com> arm64: reorganise PAGE_/PROT_ macros Maíra Canal <mcanal(a)igalia.com> pmdomain: bcm: bcm2835-power: Fix broken reset status read Huiwen He <hehuiwen(a)kylinos.cn> tracing: Fix syscall events activation by ensuring refcount hits zero Darrick J. Wong <djwong(a)kernel.org> iomap: reject delalloc mappings during writeback Alexander Potapenko <glider(a)google.com> mm/kfence: disable KFENCE upon KASAN HW tags enablement Alexander Potapenko <glider(a)google.com> mm/kfence: fix KASAN hardware tag faults during late enablement Ravi Hothi <ravi.hothi(a)oss.qualcomm.com> ASoC: qcom: qdsp6: Fix q6apm remove ordering during ADSP stop and start Xu Yang <xu.yang_2(a)nxp.com> usb: roles: get usb role switch from parent only for usb-b-connector Jiasheng Jiang <jiashengjiangcool(a)gmail.com> usb: gadget: f_tcm: Fix NULL pointer dereferences in nexus handling Sean Christopherson <seanjc(a)google.com> KVM: SVM: Set/clear CR8 write interception when AVIC is (de)activated Marc Kleine-Budde <mkl(a)pengutronix.de> can: gs_usb: gs_can_open(): always configure bitrates before starting device Mehul Rao <mehulrao(a)gmail.com> ALSA: pcm: fix use-after-free on linked stream runtime in snd_pcm_drain() Oswald Buddenhagen <oswald.buddenhagen(a)gmx.de> ALSA: pcm: fix wait_time calculations Paul Moses <p(a)1g4.org> net/sched: act_gate: snapshot parameters with RCU on replace Matthieu Baerts (NGI0) <matttbe(a)kernel.org> selftests: mptcp: join: check RM_ADDR not sent over same subflow Matthieu Baerts (NGI0) <matttbe(a)kernel.org> mptcp: pm: in-kernel: always mark signal+subflow endp as used Matthieu Baerts (NGI0) <matttbe(a)kernel.org> mptcp: pm: avoid sending RM_ADDR over same subflow Natalie Vock <natalie.vock(a)gmx.de> drm/amd/display: Use GFP_ATOMIC in dc_create_stream_for_sink Andrew Lunn <andrew(a)lunn.ch> net: phy: register phy led_triggers during probe to avoid AB-BA deadlock Kim Phillips <kim.phillips(a)amd.com> x86/sev: Allow IBPB-on-Entry feature for SNP guests Daniil Dulov <d.dulov(a)aladdin.ru> wifi: cfg80211: cancel rfkill_block work in wiphy_unregister() Johannes Berg <johannes.berg(a)intel.com> wifi: cfg80211: move scan done work to wiphy work Daniel Hodges <git(a)danielhodges.dev> wifi: libertas: fix use-after-free in lbs_free_adapter() Jan Kara <jack(a)suse.cz> ext4: always allocate blocks only from groups inode can use Brian Foster <bfoster(a)redhat.com> ext4: fix dirtyclusters double decrement on fs shutdown Fedor Pchelkin <pchelkin(a)ispras.ru> ksmbd: call ksmbd_vfs_kern_path_end_removing() on some error paths David Hildenbrand (Red Hat) <david(a)kernel.org> mm/hugetlb: fix excessive IPI broadcasts when unsharing PMD tables using mmu_gather David Hildenbrand (Red Hat) <david(a)kernel.org> mm/hugetlb: fix two comments related to huge_pmd_unshare() David Hildenbrand (Red Hat) <david(a)kernel.org> mm/hugetlb: fix hugetlb_pmd_shared() Jane Chu <jane.chu(a)oracle.com> mm/hugetlb: fix copy_hugetlb_page_range() to use ->pt_share_count Alex Deucher <alexander.deucher(a)amd.com> drm/amdgpu: apply state adjust rules to some additional HAINAN vairants Alex Deucher <alexander.deucher(a)amd.com> drm/radeon: apply state adjust rules to some additional HAINAN vairants Alex Deucher <alexander.deucher(a)amd.com> drm/amdgpu/mmhub3.0: add bounds checking for cid Alex Deucher <alexander.deucher(a)amd.com> drm/amdgpu/mmhub3.0.2: add bounds checking for cid Alex Deucher <alexander.deucher(a)amd.com> drm/amdgpu/mmhub3.0.1: add bounds checking for cid Alex Deucher <alexander.deucher(a)amd.com> drm/amdgpu/mmhub2.3: add bounds checking for cid Alex Deucher <alexander.deucher(a)amd.com> drm/amdgpu/mmhub2.0: add bounds checking for cid Maciej Andrzejewski ICEYE <maciej.andrzejewski(a)m-works.net> serial: uartlite: fix PM runtime usage count underflow on probe Ilpo Järvinen <ilpo.jarvinen(a)linux.intel.com> serial: 8250: Add late synchronize_irq() to shutdown to handle DW UART BUSY Raul E Rangel <rrangel(a)chromium.org> serial: 8250: Fix TX deadlock when using DMA Martin Roukala (né Peres) <martin.roukala(a)mupuf.org> serial: 8250_pci: add support for the AX99100 Guanghui Feng <guanghuifeng(a)linux.alibaba.com> iommu/vt-d: Fix intel iommu iotlb sync hardlockup and retry Finn Thain <fthain(a)linux-m68k.org> mtd: Avoid boot crash in RedBoot partition table parser Chen Ni <nichen(a)iscas.ac.cn> mtd: rawnand: cadence: Fix error check for dma_alloc_coherent() in cadence_nand_init() Olivier Sobrie <olivier(a)sobrie.be> mtd: rawnand: pl353: make sure optimal timings are applied Johan Hovold <johan(a)kernel.org> spi: fix statistics allocation Johan Hovold <johan(a)kernel.org> spi: fix use-after-free on controller registration failure Luke Wang <ziniu.wang_1(a)nxp.com> mmc: sdhci: fix timing selection for 1-bit bus width Matthew Schwartz <matthew.schwartz(a)linux.dev> mmc: sdhci-pci-gli: fix GL9750 DMA write corruption Namjae Jeon <linkinjeon(a)kernel.org> ksmbd: unset conn->binding on failed binding request Paulo Alcantara <pc(a)manguebit.org> smb: client: fix krb5 mount with username option Lukas Johannes Möller <research(a)johannes-moeller.dev> Bluetooth: L2CAP: Validate L2CAP_INFO_RSP payload length before access Lukas Johannes Möller <research(a)johannes-moeller.dev> Bluetooth: L2CAP: Fix type confusion in l2cap_ecred_reconf_rsp() Fedor Pchelkin <pchelkin(a)ispras.ru> net: macb: fix use-after-free access to PTP clock Ian Ray <ian.ray(a)gehealthcare.com> NFC: nxp-nci: allow GPIOs to sleep Tiezhu Yang <yangtiezhu(a)loongson.cn> LoongArch: Give more information if kmem access failed Ira Weiny <ira.weiny(a)intel.com> nvdimm/bus: Fix potential use after free in asynchronous initialization Jeff Layton <jlayton(a)kernel.org> sunrpc: fix cache_request leak in cache_release Jens Axboe <axboe(a)kernel.dk> io_uring/kbuf: check if target buffer list is still legacy on recycle Jens Axboe <axboe(a)kernel.dk> io_uring/io-wq: check IO_WQ_BIT_EXIT inside work run loop Eric Dumazet <edumazet(a)google.com> l2tp: do not use sock_hold() in pppol2tp_session_get_sock() Paul Chaignon <paul.chaignon(a)gmail.com> bpf: Forget ranges when refining tnum after JSET Eric Dumazet <edumazet(a)google.com> ipv6: use RCU in ip6_xmit() John Ripple <john.ripple(a)keysight.com> drm/bridge: ti-sn65dsi86: Add support for DisplayPort mode with HPD Adrian Hunter <adrian.hunter(a)intel.com> i3c: mipi-i3c-hci: Add missing TID field to no-op command descriptor Adrian Hunter <adrian.hunter(a)intel.com> i3c: mipi-i3c-hci: Restart DMA ring correctly after dequeue abort Adrian Hunter <adrian.hunter(a)intel.com> i3c: mipi-i3c-hci: Use ETIMEDOUT instead of ETIME for timeout errors Jean-Baptiste Maneyrol <jean-baptiste.maneyrol(a)tdk.com> iio: imu: inv_icm42600: fix odr switch to the same value Antoniu Miclaus <antoniu.miclaus(a)analog.com> iio: gyro: mpu3050-i2c: fix pm_runtime error handling Antoniu Miclaus <antoniu.miclaus(a)analog.com> iio: gyro: mpu3050-core: fix pm_runtime error handling Chris Spencer <spencercw(a)gmail.com> iio: chemical: bme680: Fix measurement wait duration calculation Lukas Schmid <lukas.schmid(a)netcube.li> iio: potentiometer: mcp4131: fix double application of wiper shift Antoniu Miclaus <antoniu.miclaus(a)analog.com> iio: chemical: sps30_i2c: fix buffer size in sps30_i2c_read_meas() Antoniu Miclaus <antoniu.miclaus(a)analog.com> iio: chemical: sps30_serial: fix buffer size in sps30_serial_read_meas() Oleksij Rempel <linux(a)rempel-privat.de> iio: dac: ds4424: reject -128 RAW value Filipe Manana <fdmanana(a)suse.com> btrfs: abort transaction on failure to update root in the received subvol ioctl Filipe Manana <fdmanana(a)suse.com> btrfs: fix transaction abort on file creation due to name hash collision Henrique Carvalho <henrique.carvalho(a)suse.com> smb: client: fix iface port assignment in parse_server_interfaces Paulo Alcantara <pc(a)manguebit.org> smb: client: fix atomic open with O_DIRECT & O_SYNC Josh Law <objecting(a)objecting.org> lib/bootconfig: check bounds before writing in __xbc_open_brace() Josh Law <objecting(a)objecting.org> lib/bootconfig: fix snprintf truncation check in xbc_node_compose_key_after() Shashank Balaji <shashank.mahadasyam(a)sony.com> x86/apic: Disable x2apic on resume if the kernel expects so Junxiao Bi <junxiao.bi(a)oracle.com> scsi: core: Fix error handling for scsi_alloc_sdev() Josh Law <objecting(a)objecting.org> lib/bootconfig: fix off-by-one in xbc_verify_tree() unclosed brace error Stefan Haberland <sth(a)linux.ibm.com> s390/dasd: Copy detected format information to secondary device Stefan Haberland <sth(a)linux.ibm.com> s390/dasd: Move quiesce state with pprc swap Darrick J. Wong <djwong(a)kernel.org> xfs: fix undersized l_iclog_roundoff values Calvin Owens <calvin(a)wbinvd.org> tracing: Fix trace_buf_size= cmdline parameter with sizes >= 2G Luca Ceresoli <luca.ceresoli(a)bootlin.com> drm/bridge: ti-sn65dsi83: fix CHA_DSI_CLK_RANGE rounding Mario Limonciello <mario.limonciello(a)amd.com> drm/amd: Set num IP blocks to 0 if discovery fails Alysa Liu <Alysa.Liu(a)amd.com> drm/amdgpu: Fix use-after-free race in VM acquire Fan Wu <fanwu01(a)zju.edu.cn> net: ethernet: arc: emac: quiesce interrupts before requesting IRQ Jian Zhang <zhangjian.3032(a)bytedance.com> net: ncsi: fix skb leak in error paths Marios Makassikis <mmakassikis(a)freebox.fr> smb: server: fix use-after-free in smb2_open() Helge Deller <deller(a)gmx.de> parisc: Check kernel mapping earlier at bootup Helge Deller <deller(a)gmx.de> parisc: Fix initial page table creation for boot Sanman Pradhan <psanman(a)juniper.net> hwmon: (pmbus/q54sj108a2) fix stack overflow in debugfs read Dave Airlie <airlied(a)redhat.com> nouveau/dpcd: return EBUSY for aux xfer if the device is asleep Helge Deller <deller(a)gmx.de> parisc: Increase initial mapping to 64 MB with KALLSYMS Sven Eckelmann <sven(a)narfation.org> batman-adv: Avoid double-rtnl_lock ELP metric worker Jakub Staniszewski <jakub.staniszewski(a)linux.intel.com> ice: fix retry for AQ command 0x06EE Long Li <longli(a)microsoft.com> net: mana: Ring doorbell at 4 CQ wraparounds Ariel Silver <arielsilver77(a)gmail.com> media: dvb-net: fix OOB access in ULE extension header tables Luka Gejak <luka.gejak(a)linux.dev> staging: rtl8723bs: fix potential out-of-bounds read in rtw_restruct_wmm_ie Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> staging: rtl8723bs: properly validate the data in rtw_get_ie_ex() Jedrzej Jagielski <jedrzej.jagielski(a)intel.com> ixgbevf: fix link setup issue Marc Zyngier <maz(a)kernel.org> irqchip/gic-v3-its: Limit number of per-device MSIs to the range the ITS supports Andy Shevchenko <andriy.shevchenko(a)linux.intel.com> device property: Allow secondary lookup in fwnode_get_next_child_node() Franz Schnyder <franz.schnyder(a)toradex.com> drm/bridge: ti-sn65dsi86: Enable HPD polling if IRQ is not used Steven Rostedt <rostedt(a)goodmis.org> time/jiffies: Mark jiffies_64_to_clock_t() notrace Randy Dunlap <rdunlap(a)infradead.org> time: add kernel-doc in time.c Max Kellermann <max.kellermann(a)ionos.com> ceph: fix i_nlink underrun during async unlink Ilya Dryomov <idryomov(a)gmail.com> libceph: admit message frames only in CEPH_CON_S_OPEN state Raphael Zimmer <raphael.zimmer(a)tu-ilmenau.de> libceph: Use u32 for non-negative values in ceph_monmap_decode() Ilya Dryomov <idryomov(a)gmail.com> libceph: prevent potential out-of-bounds reads in process_message_header() Ilya Dryomov <idryomov(a)gmail.com> libceph: reject preamble if control segment is empty Raphael Zimmer <raphael.zimmer(a)tu-ilmenau.de> libceph: Fix potential out-of-bounds access in ceph_handle_auth_reply() Mehul Rao <mehulrao(a)gmail.com> tipc: fix divide-by-zero in tipc_sk_filter_connect() Penghe Geng <pgeng(a)nvidia.com> mmc: core: Avoid bitfield RMW for claim/retune flags Felix Gu <ustc.gu(a)gmail.com> mmc: mmci: Fix device_node reference leak in of_get_dml_pipe_index() Kalesh Singh <kaleshsingh(a)google.com> mm/tracing: rss_stat: ensure curr is false from kthread context Ziyi Guo <n7l8m4(a)u.northwestern.edu> usb: image: mdc800: kill download URB on timeout Oliver Neukum <oneukum(a)suse.com> usb: mdc800: handle signal and read racing Fan Wu <fanwu01(a)zju.edu.cn> usb: renesas_usbhs: fix use-after-free in ISR during device removal Oliver Neukum <oneukum(a)suse.com> usb: class: cdc-wdm: fix reordering issue in read code path Alan Stern <stern(a)rowland.harvard.edu> USB: core: Limit the length of unkillable synchronous timeouts Alan Stern <stern(a)rowland.harvard.edu> USB: usbtmc: Use usb_bulk_msg_killable() with user-specified timeouts Alan Stern <stern(a)rowland.harvard.edu> USB: usbcore: Introduce usb_bulk_msg_killable() Marc Zyngier <maz(a)kernel.org> usb: cdc-acm: Restore CAP_BRK functionnality to CH343 Gabor Juhos <j4g8y7(a)gmail.com> usb: core: don't power off roothub PHYs if phy_set_mode() fails Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> usb: misc: uss720: properly clean up reference in uss720_probe() Oliver Neukum <oneukum(a)suse.com> usb: yurex: fix race in probe Zilin Guan <zilin(a)seu.edu.cn> usb: xhci: Fix memory leak in xhci_disable_slot() Vyacheslav Vahnenko <vahnenko2003(a)gmail.com> USB: ezcap401 needs USB_QUIRK_NO_BOS to function on 10gbs usb speed Christoffer Sandberg <cs(a)tuxedo.de> usb/core/quirks: Add Huawei ME906S-device to wakeup quirk A1RM4X <dev(a)a1rm4x.com> USB: add QUIRK_NO_BOS for video capture several devices Sean Christopherson <seanjc(a)google.com> KVM: SVM: Initialize AVIC VMCB fields if AVIC is enabled with in-kernel APIC Zhang Heng <zhangheng(a)kylinos.cn> ASoC: amd: yc: Add DMI quirk for ASUS EXPERTBOOK PM1503CDA Oleksij Rempel <linux(a)rempel-privat.de> net: usb: lan78xx: skip LTM configuration for LAN7850 Oleksij Rempel <linux(a)rempel-privat.de> net: usb: lan78xx: fix TX byte statistics for small packets Oleksij Rempel <linux(a)rempel-privat.de> net: usb: lan78xx: fix silent drop of packets with checksum errors Takashi Iwai <tiwai(a)suse.de> ALSA: usb-audio: Check endpoint numbers at parsing Scarlett2 mixer interfaces Qingye Zhao <zhaoqingye(a)honor.com> cgroup: fix race between task migration and iteration Sasha Levin <sashal(a)kernel.org> Revert "arm64: dts: qcom: sdm845-oneplus: Mark l14a regulator as boot-on" Seungjin Bae <eeodqql09(a)gmail.com> usb: gadget: f_mass_storage: Fix potential integer overflow in check_command_size_in_blocks() Alok Tiwari <alok.a.tiwari(a)oracle.com> octeontx2-af: devlink: fix NIX RAS reporter to use RAS interrupt status Przemek Kitszel <przemyslaw.kitszel(a)intel.com> octeontx2-af: devlink health: use retained error fmsg API Alok Tiwari <alok.a.tiwari(a)oracle.com> octeontx2-af: devlink: fix NIX RAS reporter recovery condition Ricardo B. Marlière <rbm(a)suse.com> net: bonding: Fix nd_tbl NULL dereference when IPv6 is disabled Casey Connolly <casey.connolly(a)linaro.org> ASoC: detect empty DMI strings Chen Ni <nichen(a)iscas.ac.cn> ASoC: amd: acp3x-rt5682-max9836: Add missing error check for clock acquisition Ben Dooks <ben.dooks(a)codethink.co.uk> ACPI: OSL: fix __iomem type on return from acpi_os_map_generic_address() Matt Vollrath <tactii(a)gmail.com> e1000/e1000e: Fix leak in DMA error cleanup Alok Tiwari <alok.a.tiwari(a)oracle.com> i40e: fix src IP mask checks and memcpy argument names in cloud filter Sungwoo Kim <iam(a)sung-woo.kim> nvme-pci: Fix race bug in nvme_poll_irqdisable() Sungwoo Kim <iam(a)sung-woo.kim> nvme-pci: Fix slab-out-of-bounds in nvme_dbbuf_set Rafael J. Wysocki <rafael.j.wysocki(a)intel.com> sched: idle: Make skipping governor callbacks more consistent Peng Fan <peng.fan(a)nxp.com> regulator: pca9450: Correct interrupt type Frieder Schrempf <frieder.schrempf(a)kontron.de> regulator: pca9450: Make IRQ optional Yuan Tan <tanyuan98(a)outlook.com> netfilter: xt_IDLETIMER: reject rev0 reuse of ALARM timer labels Hyunwoo Kim <imv4bel(a)gmail.com> netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() Hyunwoo Kim <imv4bel(a)gmail.com> netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path David Dull <monderasdor(a)gmail.com> netfilter: x_tables: guard option walkers against 1-byte tail reads Jenny Guanni Qu <qguanni(a)gmail.com> netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop() Chengfeng Ye <dg573847474(a)gmail.com> mctp: route: hold key->lock in mctp_flow_prepare_output() Wenyuan Li <2063309626(a)qq.com> can: hi311x: hi3110_open(): add check for hi3110_power_enable() return value Haiyue Wang <haiyuewa(a)163.com> mctp: i2c: fix skb memory leak in receive path Shuangpeng Bai <shuangpeng.kernel(a)gmail.com> serial: caif: hold tty->link reference in ldisc_open and ser_release matteo.cotifava <cotifavamatteo(a)gmail.com> ASoC: soc-core: flush delayed work before removing DAIs and widgets Amadeusz Sławiński <amadeuszx.slawinski(a)linux.intel.com> ASoC: core: Do not call link_exit() on uninitialized rtd objects Cezary Rojewski <cezary.rojewski(a)intel.com> ASoC: core: Exit all links before removing their components matteo.cotifava <cotifavamatteo(a)gmail.com> ASoC: soc-core: drop delayed_work_pending() check before flush Weiming Shi <bestswngs(a)gmail.com> net/sched: teql: fix NULL pointer dereference in iptunnel_xmit on TEQL slave xmit Gal Pressman <gal(a)nvidia.com> net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery Cosmin Ratiu <cratiu(a)nvidia.com> net/mlx5: Fix deadlock between devlink lock and esw->wq Daniel Jurgens <danielj(a)nvidia.com> net/mlx5: Query to see if host PF is disabled Daniel Jurgens <danielj(a)nvidia.com> net/mlx5: IFC updates for disabled host PF Hangbin Liu <liuhangbin(a)gmail.com> bonding: handle BOND_LINK_FAIL, BOND_LINK_BACK as valid link states Mieczyslaw Nalewaj <namiltd(a)yahoo.com> net: dsa: realtek: rtl8365mb: remove ifOutDiscards from rx_packets Eric Badger <ebadger(a)purestorage.com> xprtrdma: Decrement re_receiving on the early exit paths J. Neuschäfer <j.ne(a)posteo.net> powerpc: 83xx: km83xx: Fix keymile vendor prefix Tzung-Bi Shih <tzungbi(a)kernel.org> remoteproc: mediatek: Unprepare SCP clock during system suspend Bjorn Andersson <bjorn.andersson(a)oss.qualcomm.com> remoteproc: sysmon: Correct subsys_name_len type in QMI request Christophe Leroy (CS GROUP) <chleroy(a)kernel.org> powerpc/uaccess: Fix inline assembly for clang build on PPC32 Takashi Iwai <tiwai(a)suse.de> ALSA: usb-audio: Check max frame size for implicit feedback mode, too Takashi Iwai <tiwai(a)suse.de> ALSA: usb-audio: Avoid implicit feedback mode on DIYINHK USB Audio 2.0 Azamat Almazbek uulu <almazbek1608(a)gmail.com> ASoC: amd: yc: Add ASUS EXPERTBOOK BM1503CDA to quirk table Tomas Henzl <thenzl(a)redhat.com> scsi: ses: Fix devices attaching to different hosts Sofia Schneider <sofia(a)schn.dev> ACPI: OSI: Add DMI quirk for Acer Aspire One D255 Ramanathan Choodamani <quic_rchoodam(a)quicinc.com> wifi: mac80211: set default WMM parameters on all links Al Viro <viro(a)zeniv.linux.org.uk> unshare: fix unshare_fs() handling Ranjan Kumar <ranjan.kumar(a)broadcom.com> scsi: mpi3mr: Add NULL checks when resetting request and reply queues Piotr Mazek <pmazek(a)outlook.com> ACPI: PM: Save NVS memory on Lenovo G70-35 Jan Kiszka <jan.kiszka(a)siemens.com> scsi: storvsc: Fix scheduling while atomic on PREEMPT_RT Menglong Dong <menglong8.dong(a)gmail.com> net: tcp: accept old ack during closing Victor Nogueira <victor(a)mojatatu.com> net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks Guenter Roeck <linux(a)roeck-us.net> tracing: Add NULL pointer check to trigger_data_free() Larysa Zaremba <larysa.zaremba(a)intel.com> xdp: produce a warning when calculated tailroom is negative Larysa Zaremba <larysa.zaremba(a)intel.com> xdp: use modulo operation to calculate XDP frag tailroom Jamal Hadi Salim <jhs(a)mojatatu.com> net/sched: act_ife: Fix metalist update behavior Jiayuan Chen <jiayuan.chen(a)shopee.com> net: ipv6: fix panic when IPv4 route references loopback IPv6 nexthop Fernando Fernandez Mancera <fmancera(a)suse.de> net: vxlan: fix nd_tbl NULL dereference when IPv6 is disabled Fernando Fernandez Mancera <fmancera(a)suse.de> net: bridge: fix nd_tbl NULL dereference when IPv6 is disabled Lorenzo Bianconi <lorenzo(a)kernel.org> net: ethernet: mtk_eth_soc: Reset prog ptr to old_prog in case of error in mtk_xdp_setup() Ovidiu Panait <ovidiu.panait.rb(a)renesas.com> net: stmmac: Fix error handling in VLAN add and delete paths Jakub Kicinski <kuba(a)kernel.org> nfc: rawsock: cancel tx_work before socket teardown Jakub Kicinski <kuba(a)kernel.org> nfc: nci: clear NCI_DATA_EXCHANGE before calling completion callback Jakub Kicinski <kuba(a)kernel.org> nfc: nci: free skb on nci_transceive early error paths Ian Ray <ian.ray(a)gehealthcare.com> net: nfc: nci: Fix zero-length proprietary notifications Koichiro Den <den(a)valinux.co.jp> net: sched: avoid qdisc_reset_all_tx_gt() vs dequeue race for lockless qdiscs Raju Rangoju <Raju.Rangoju(a)amd.com> amd-xgbe: fix sleep while atomic on suspend/resume Jakub Kicinski <kuba(a)kernel.org> ipv6: fix NULL pointer deref in ip6_rt_get_dev_rcu() Lang Xu <xulang(a)uniontech.com> bpf: Fix a UAF issue in bpf_trampoline_link_cgroup_shim Kui-Feng Lee <thinker.li(a)gmail.com> bpf: export bpf_link_inc_not_zero. David Thomson <dt(a)linux-mail.net> xen/acpi-processor: fix _CST detection using undersized evaluation buffer Eric Dumazet <edumazet(a)google.com> indirect_call_wrapper: do not reevaluate function pointer Lorenzo Bianconi <lorenzo(a)kernel.org> wifi: mt76: Fix possible oob access in mt76_connac2_mac_write_txwi_80211() Bart Van Assche <bvanassche(a)acm.org> wifi: wlcore: Fix a locking bug Bart Van Assche <bvanassche(a)acm.org> wifi: cw1200: Fix locking in error paths Vimlesh Kumar <vimleshk(a)marvell.com> octeon_ep: avoid compiler and IQ/OQ reordering Vimlesh Kumar <vimleshk(a)marvell.com> octeon_ep: Relocate counter updates before NAPI Mieczyslaw Nalewaj <namiltd(a)yahoo.com> net: dsa: realtek: rtl8365mb: fix rtl8365mb_phy_ocp_write return value Shuvam Pandey <shuvampandey1(a)gmail.com> kunit: tool: copy caller args in run_kernel to prevent mutation Rae Moar <rmoar(a)google.com> kunit: tool: Add command line interface to filter and report attributes Daniel Latypov <dlatypov(a)google.com> kunit: tool: fix pre-existing `mypy --strict` errors and update run_checks.py Daniel Latypov <dlatypov(a)google.com> kunit: tool: remove unused imports and variables Alexander Pantyukhin <apantykhin(a)gmail.com> kunit: kunit.py extract handlers Daniel Latypov <dlatypov(a)google.com> kunit: tool: make parser preserve whitespace when printing test log Daniel Latypov <dlatypov(a)google.com> kunit: tool: don't include KTAP headers and the like in the test log Rae Moar <rmoar(a)google.com> kunit: tool: parse KTAP compliant test output Daniel Latypov <dlatypov(a)google.com> kunit: tool: make --json do nothing if --raw_ouput is set Daniel Latypov <dlatypov(a)google.com> kunit: tool: print summary of failed tests if a few failed out of a lot Alban Bedel <alban.bedel(a)lht.dlh.de> can: mcp251x: fix deadlock in error path of mcp251x_open Oliver Hartkopp <socketcan(a)hartkopp.net> can: bcm: fix locking for bcm_op runtime updates Jiayuan Chen <jiayuan.chen(a)shopee.com> atm: lec: fix null-ptr-deref in lec_arp_clear_vccs Guenter Roeck <linux(a)roeck-us.net> dpaa2-switch: Fix interrupt storm after receiving bad if_id in IRQ handler Ioana Ciornei <ioana.ciornei(a)nxp.com> dpaa2-switch: do not clear any interrupts automatically Vladimir Oltean <vladimir.oltean(a)nxp.com> net: dpaa2-switch: serialize changes to priv->mac with a mutex Vladimir Oltean <vladimir.oltean(a)nxp.com> net: dpaa2-switch replace direct MAC access with dpaa2_switch_port_has_mac() Vladimir Oltean <vladimir.oltean(a)nxp.com> net: dpaa2-switch: assign port_priv->mac after dpaa2_mac_connect() call Vladimir Oltean <vladimir.oltean(a)nxp.com> net: dpaa2: replace dpaa2_mac_is_type_fixed() with dpaa2_mac_is_type_phy() Chintan Vankar <c-vankar(a)ti.com> net: ethernet: ti: am65-cpsw-nuss/cpsw-ale: Fix multicast entry handling in ALE table Jonathan Teh <jonathan.teh(a)outlook.com> platform/x86: thinkpad_acpi: Fix errors reading battery thresholds Thomas Weißschuh <thomas.weissschuh(a)linutronix.de> ARM: clean up the memset64() C wrapper Matthieu Baerts (NGI0) <matttbe(a)kernel.org> selftests: mptcp: join: check removing signal+subflow endp Paolo Abeni <pabeni(a)redhat.com> selftests: mptcp: more stable simult_flows tests Junxiao Bi <junxiao.bi(a)oracle.com> scsi: core: Fix refcount leak for tagset_refcnt Thorsten Blum <thorsten.blum(a)linux.dev> smb: client: Don't log plaintext credentials in cifs_set_cifscreds Paulo Alcantara <pc(a)manguebit.org> smb: client: fix broken multichannel with krb5+signing Lars Ellenberg <lars.ellenberg(a)linbit.com> drbd: fix "LOGIC BUG" in drbd_al_begin_io_nonblock() Phillip Lougher <phillip(a)squashfs.org.uk> Squashfs: check metadata block offset is within range Prithvi Tambewagh <activprithvi(a)gmail.com> scsi: target: Fix recursive locking in __configfs_open_file() Davide Caratti <dcaratti(a)redhat.com> net/sched: ets: fix divide by zero in the offload path Jason Gunthorpe <jgg(a)ziepe.ca> RDMA/irdma: Fix kernel stack leak in irdma_create_user_ah() Jason Gunthorpe <jgg(a)ziepe.ca> IB/mthca: Add missed mthca_unmap_user_db() for mthca_create_srq() Vahagn Vardanian <vahagn(a)redrays.io> wifi: mac80211: fix NULL pointer dereference in mesh_rx_csa_frame() Johannes Berg <johannes.berg(a)intel.com> wifi: radiotap: reject radiotap with unknown bits Jun Seo <jun.seo.93(a)proton.me> ALSA: usb-audio: Use correct version for UAC3 header validation Kurt Borja <kuurtb(a)gmail.com> platform/x86: dell-wmi: Add audio/mic mute key codes Thorsten Blum <thorsten.blum(a)linux.dev> platform/x86: dell-wmi-sysman: Don't hex dump plaintext password data Mike Rapoport (Microsoft) <rppt(a)kernel.org> x86/efi: defer freeing of boot services memory Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> HID: Add HID_CLAIMED_INPUT guards in raw_event callbacks missing them Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> can: usb: etas_es58x: correctly anchor the urb in the read bulk callback Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> can: ucan: Fix infinite loop from zero-length messages Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> can: ems_usb: ems_usb_read_bulk_callback(): check the proper length of a message Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> net: usb: pegasus: validate USB endpoints Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> net: usb: kalmia: validate USB endpoints Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> net: usb: kaweth: validate USB endpoints Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> nfc: pn533: properly drop the usb interface reference on disconnect Jens Axboe <axboe(a)kernel.dk> media: dvb-core: fix wrong reinitialization of ringbuffer on reopen Jann Horn <jannh(a)google.com> eventpoll: Fix integer overflow in ep_loop_check_proc() Alex Deucher <alexander.deucher(a)amd.com> drm/amdgpu: keep vga memory on MacBooks with switchable graphics Mario Limonciello <mario.limonciello(a)amd.com> drm/amd: Drop special case for yellow carp without discovery Ethan Nelson-Moore <enelsonmoore(a)gmail.com> net: arcnet: com20020-pci: fix support for 2.5Mbit cards Takashi Iwai <tiwai(a)suse.de> ALSA: hda/conexant: Fix headphone jack handling on Acer Swift SF314 Gui-Dong Han <hanguidong02(a)gmail.com> hwmon: (max16065) Use READ/WRITE_ONCE to avoid compiler optimization induced race Takashi Iwai <tiwai(a)suse.de> ALSA: hda/conexant: Add quirk for HP ZBook Studio G4 Thomas Richard (TI) <thomas.richard(a)bootlin.com> usb: cdns3: fix role switching during resume Théo Lebrun <theo.lebrun(a)bootlin.com> usb: cdns3: call cdns_power_is_lost() only once in cdns_resume() Hongyu Xie <xiehongyu1(a)kylinos.cn> usb: cdns3: remove redundant if branch Johan Hovold <johan(a)kernel.org> clk: tegra: tegra124-emc: fix device leak on set_rate() Shawn Lin <shawn.lin(a)rock-chips.com> arm64: dts: rockchip: Fix rk356x PCIe range mappings Johan Hovold <johan(a)kernel.org> mfd: omap-usb-host: Fix OF populate on driver rebind Uwe Kleine-König <u.kleine-koenig(a)pengutronix.de> mfd: omap-usb-host: Convert to platform remove callback returning void Johan Hovold <johan(a)kernel.org> mfd: qcom-pm8xxx: Fix OF populate on driver rebind Uwe Kleine-König <u.kleine-koenig(a)pengutronix.de> mfd: qcom-pm8xxx: Convert to platform remove callback returning void Yongjian Sun <sunyongjian1(a)huawei.com> ext4: fix e4b bitmap inconsistency reports Matthew Wilcox (Oracle) <willy(a)infradead.org> ext4: convert bd_buddy_page to bd_buddy_folio Matthew Wilcox (Oracle) <willy(a)infradead.org> ext4: convert bd_bitmap_page to bd_bitmap_folio Gou Hao <gouhao(a)uniontech.com> ext4: delete redundant calculations in ext4_mb_get_buddy_page_lock() Theodore Ts'o <tytso(a)mit.edu> ext4: convert some BUG_ON's in mballoc to use WARN_RATELIMITED instead Kemeng Shi <shikemeng(a)huaweicloud.com> ext4: remove unnecessary e4b->bd_buddy_page check in ext4_mb_load_buddy_gfp Zhang Yi <yi.zhang(a)huawei.com> ext4: drop extent cache when splitting extent fails Zhang Yi <yi.zhang(a)huawei.com> ext4: drop extent cache after doing PARTIAL_VALID1 zeroout Zhang Yi <yi.zhang(a)huawei.com> ext4: don't zero the entire extent if EXT4_EXT_DATA_PARTIAL_VALID1 Zhang Yi <yi.zhang(a)huawei.com> ext4: subdivide EXT4_EXT_DATA_VALID1 Baokun Li <libaokun1(a)huawei.com> ext4: get rid of ppath in ext4_split_extent_at() Baokun Li <libaokun1(a)huawei.com> ext4: get rid of ppath in ext4_ext_insert_extent() Baokun Li <libaokun1(a)huawei.com> ext4: get rid of ppath in ext4_ext_create_new_leaf() Baokun Li <libaokun1(a)huawei.com> ext4: get rid of ppath in ext4_find_extent() Baokun Li <libaokun1(a)huawei.com> ext4: make ext4_es_remove_extent() return void Johan Hovold <johan(a)kernel.org> bus: omap-ocp2scp: fix OF populate on driver rebind Uwe Kleine-König <u.kleine-koenig(a)pengutronix.de> bus: omap-ocp2scp: Convert to platform remove callback returning void Johan Hovold <johan(a)kernel.org> drm/tegra: dsi: fix device leak on probe Sean Christopherson <seanjc(a)google.com> KVM: x86: Ignore -EBUSY when checking nested events from vcpu_block() Sean Christopherson <seanjc(a)google.com> KVM: x86: WARN if a vCPU gets a valid wakeup that KVM can't yet inject Alper Ak <alperyasinak1(a)gmail.com> media: qcom: camss: vfe: Fix out-of-bounds access in vfe_isr_reg_update() Milen Mitkov <quic_mmitkov(a)quicinc.com> media: camss: vfe-480: Multiple outputs support for SM8250 Zilin Guan <zilin(a)seu.edu.cn> media: tegra-video: Fix memory leak in __tegra_channel_try_format() Laurent Pinchart <laurent.pinchart(a)ideasonboard.com> media: tegra-video: Use accessors for pad config 'try_*' fields Sean Christopherson <seanjc(a)google.com> KVM: x86: Return "unsupported" instead of "invalid" on access to unsupported PV MSR Sean Christopherson <seanjc(a)google.com> KVM: x86: Rename KVM_MSR_RET_INVALID to KVM_MSR_RET_UNSUPPORTED Mathias Krause <minipli(a)grsecurity.net> KVM: x86: Fix KVM_GET_MSRS stack info leak Sean Christopherson <seanjc(a)google.com> KVM: x86/pmu: Provide "error" semantics for unsupported-but-known PMU MSRs Ilpo Järvinen <ilpo.jarvinen(a)linux.intel.com> PCI: Use resource_set_range() that correctly sets ->end Ilpo Järvinen <ilpo.jarvinen(a)linux.intel.com> resource: Add resource set range and size helpers Puranjay Mohan <puranjay12(a)gmail.com> PCI: Use resource names in PCI log messages Puranjay Mohan <puranjay12(a)gmail.com> PCI: Update BAR # and window messages Bjorn Helgaas <bhelgaas(a)google.com> PCI: Fix printk field formatting Mika Westerberg <mika.westerberg(a)linux.intel.com> PCI: Introduce pci_dev_for_each_resource() Johan Hovold <johan(a)kernel.org> memory: mtk-smi: fix device leak on larb probe Johan Hovold <johan(a)kernel.org> memory: mtk-smi: fix device leaks on common probe Uwe Kleine-König <u.kleine-koenig(a)pengutronix.de> memory: mtk-smi: Convert to platform remove callback returning void Kohei Enju <kohei(a)enjuk.jp> bpf: Fix stack-out-of-bounds write in devmap Mark Harmstone <mark(a)harmstone.com> btrfs: fix compat mask in error messages in btrfs_check_features() Mark Harmstone <mark(a)harmstone.com> btrfs: fix incorrect key offset in error message in check_dev_extent_item() Josef Bacik <josef(a)toxicpanda.com> btrfs: move btrfs_crc32c_final into free-space-cache.c Peter Zijlstra <peterz(a)infradead.org> perf: Fix __perf_event_overflow() vs perf_remove_from_context() race Takashi Iwai <tiwai(a)suse.de> ALSA: usb-audio: Use inclusive terms Takashi Iwai <tiwai(a)suse.de> ALSA: usb-audio: Cap the packet size pre-calculations Peter Wang <peter.wang(a)mediatek.com> scsi: ufs: core: Move link recovery for hibern8 exit failure to wl_resume Bart Van Assche <bvanassche(a)acm.org> scsi: ufs: core: Always initialize the UIC done completion Geoffrey D. Bennett <g(a)b4.vu> ALSA: usb-audio: Remove VALIDATE_RATES quirk for Focusrite devices Salomon Dushimirimana <salomondush(a)google.com> scsi: pm8001: Fix use-after-free in pm8001_queue_command() Mathias Krause <minipli(a)grsecurity.net> scsi: lpfc: Properly set WC for DPP mapping Nam Cao <namcao(a)linutronix.de> irqchip/sifive-plic: Fix frozen interrupt due to affinity setting Felix Gu <ustc.gu(a)gmail.com> drm/logicvc: Fix device node reference leak in logicvc_drm_config_parse() Ian Forbes <ian.forbes(a)broadcom.com> drm/vmwgfx: Return the correct value in vmw_translate_ptr functions Brad Spengler <brad.spengler(a)opensrcsec.com> drm/vmwgfx: Fix invalid kref_put callback in vmw_bo_dirty_release ------------- Diffstat: .clang-format | 1 + .../ethernet/freescale/dpaa2/mac-phy-support.rst | 9 +- Makefile | 4 +- arch/alpha/kernel/pci.c | 5 +- arch/arm/include/asm/string.h | 14 +- arch/arm/kernel/bios32.c | 16 +- arch/arm/mach-dove/pcie.c | 10 +- arch/arm/mach-mv78xx0/pcie.c | 10 +- arch/arm/mach-orion5x/pci.c | 10 +- .../arm64/boot/dts/qcom/sdm845-oneplus-common.dtsi | 1 - arch/arm64/boot/dts/rockchip/rk3568.dtsi | 4 +- arch/arm64/boot/dts/rockchip/rk356x.dtsi | 2 +- arch/arm64/include/asm/pgtable-prot.h | 76 ++-- arch/loongarch/include/asm/uaccess.h | 14 +- arch/mips/pci/ops-bcm63xx.c | 8 +- arch/mips/pci/pci-legacy.c | 3 +- arch/parisc/include/asm/pgtable.h | 2 +- arch/parisc/kernel/head.S | 7 +- arch/parisc/kernel/setup.c | 20 +- arch/powerpc/include/asm/uaccess.h | 2 +- arch/powerpc/kernel/pci-common.c | 21 +- arch/powerpc/platforms/4xx/pci.c | 8 +- arch/powerpc/platforms/52xx/mpc52xx_pci.c | 5 +- arch/powerpc/platforms/83xx/km83xx.c | 4 +- arch/powerpc/platforms/pseries/pci.c | 16 +- arch/riscv/kernel/stacktrace.c | 21 +- arch/s390/lib/xor.c | 4 +- arch/sh/drivers/pci/pcie-sh7786.c | 10 +- arch/sparc/kernel/leon_pci.c | 5 +- arch/sparc/kernel/pci.c | 10 +- arch/sparc/kernel/pcic.c | 5 +- arch/x86/boot/compressed/sev.c | 1 + arch/x86/include/asm/efi.h | 2 +- arch/x86/include/asm/msr-index.h | 5 +- arch/x86/kernel/apic/apic.c | 6 + arch/x86/kernel/uprobes.c | 24 ++ arch/x86/kvm/svm/avic.c | 8 +- arch/x86/kvm/svm/svm.c | 11 +- arch/x86/kvm/vmx/vmx.c | 2 +- arch/x86/kvm/x86.c | 120 +++--- arch/x86/kvm/x86.h | 15 +- arch/x86/platform/efi/efi.c | 2 +- arch/x86/platform/efi/quirks.c | 55 ++- drivers/acpi/acpi_processor.c | 15 +- drivers/acpi/osi.c | 13 + drivers/acpi/osl.c | 2 +- drivers/acpi/sleep.c | 8 + drivers/base/power/runtime.c | 1 + drivers/base/property.c | 27 +- drivers/block/drbd/drbd_actlog.c | 53 +-- drivers/block/drbd/drbd_interval.h | 5 +- drivers/bluetooth/btqca.c | 2 + drivers/bus/omap-ocp2scp.c | 19 +- drivers/clk/tegra/clk-tegra124-emc.c | 2 +- drivers/cpuidle/cpuidle.c | 10 - drivers/crypto/atmel-sha204a.c | 5 +- drivers/dma/mmp_pdma.c | 6 + drivers/firmware/arm_scpi.c | 5 +- drivers/firmware/efi/mokvar-table.c | 2 +- drivers/gpu/drm/amd/amdgpu/amdgpu.h | 1 + drivers/gpu/drm/amd/amdgpu/amdgpu_acpi.c | 2 +- drivers/gpu/drm/amd/amdgpu/amdgpu_amdkfd_gpuvm.c | 6 +- drivers/gpu/drm/amd/amdgpu/amdgpu_cs.c | 13 +- drivers/gpu/drm/amd/amdgpu/amdgpu_csa.c | 38 ++ drivers/gpu/drm/amd/amdgpu/amdgpu_csa.h | 3 + drivers/gpu/drm/amd/amdgpu/amdgpu_debugfs.c | 2 +- drivers/gpu/drm/amd/amdgpu/amdgpu_device.c | 36 +- drivers/gpu/drm/amd/amdgpu/amdgpu_display.c | 4 +- drivers/gpu/drm/amd/amdgpu/amdgpu_drv.c | 2 +- drivers/gpu/drm/amd/amdgpu/amdgpu_gmc.c | 14 +- drivers/gpu/drm/amd/amdgpu/amdgpu_kms.c | 12 +- drivers/gpu/drm/amd/amdgpu/mmhub_v2_0.c | 9 +- drivers/gpu/drm/amd/amdgpu/mmhub_v2_3.c | 3 +- drivers/gpu/drm/amd/amdgpu/mmhub_v3_0.c | 3 +- drivers/gpu/drm/amd/amdgpu/mmhub_v3_0_1.c | 3 +- drivers/gpu/drm/amd/amdgpu/mmhub_v3_0_2.c | 3 +- drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm.c | 1 + .../drm/amd/display/amdgpu_dm/amdgpu_dm_pp_smu.c | 1 + .../amd/display/dc/clk_mgr/dce110/dce110_clk_mgr.c | 2 +- drivers/gpu/drm/amd/display/dc/core/dc_stream.c | 2 +- drivers/gpu/drm/amd/display/dc/dm_services_types.h | 2 +- drivers/gpu/drm/amd/include/dm_pp_interface.h | 1 + drivers/gpu/drm/amd/pm/amdgpu_dpm_internal.c | 67 +++ drivers/gpu/drm/amd/pm/inc/amdgpu_dpm_internal.h | 2 + drivers/gpu/drm/amd/pm/legacy-dpm/kv_dpm.c | 4 +- drivers/gpu/drm/amd/pm/legacy-dpm/legacy_dpm.c | 6 +- drivers/gpu/drm/amd/pm/legacy-dpm/si_dpm.c | 69 ++- drivers/gpu/drm/amd/pm/powerplay/amd_powerplay.c | 13 +- drivers/gpu/drm/bridge/ti-sn65dsi83.c | 13 +- drivers/gpu/drm/bridge/ti-sn65dsi86.c | 118 +++++- drivers/gpu/drm/drm_file.c | 5 +- drivers/gpu/drm/drm_mode_config.c | 9 +- drivers/gpu/drm/exynos/exynos_drm_drv.h | 1 + drivers/gpu/drm/exynos/exynos_drm_vidi.c | 72 +++- drivers/gpu/drm/i915/gt/intel_engine_cs.c | 3 +- drivers/gpu/drm/logicvc/logicvc_drm.c | 4 +- drivers/gpu/drm/msm/msm_gpummu.c | 2 +- drivers/gpu/drm/nouveau/nouveau_connector.c | 3 + drivers/gpu/drm/radeon/si_dpm.c | 4 +- drivers/gpu/drm/tegra/dsi.c | 6 +- drivers/gpu/drm/vmwgfx/vmwgfx_execbuf.c | 4 +- drivers/gpu/drm/vmwgfx/vmwgfx_page_dirty.c | 9 +- drivers/hid/hid-cmedia.c | 2 +- drivers/hid/hid-creative-sb0540.c | 2 +- drivers/hid/hid-zydacron.c | 2 +- drivers/hwmon/max16065.c | 26 +- drivers/hwmon/pmbus/isl68137.c | 7 +- drivers/hwmon/pmbus/q54sj108a2.c | 19 +- drivers/i2c/busses/i2c-cp2615.c | 5 +- drivers/i2c/busses/i2c-fsi.c | 1 + drivers/i3c/master/mipi-i3c-hci/cmd.h | 1 + drivers/i3c/master/mipi-i3c-hci/cmd_v1.c | 2 +- drivers/i3c/master/mipi-i3c-hci/cmd_v2.c | 2 +- drivers/i3c/master/mipi-i3c-hci/core.c | 6 +- drivers/i3c/master/mipi-i3c-hci/dma.c | 4 +- drivers/iio/chemical/bme680_core.c | 2 +- drivers/iio/chemical/sps30_i2c.c | 2 +- drivers/iio/chemical/sps30_serial.c | 2 +- drivers/iio/dac/ds4424.c | 2 +- drivers/iio/gyro/mpu3050-core.c | 18 +- drivers/iio/gyro/mpu3050-i2c.c | 3 +- drivers/iio/imu/inv_icm42600/inv_icm42600_accel.c | 2 + drivers/iio/imu/inv_icm42600/inv_icm42600_buffer.c | 3 + drivers/iio/imu/inv_icm42600/inv_icm42600_gyro.c | 2 + drivers/iio/industrialio-buffer.c | 102 ++--- drivers/iio/light/bh1780.c | 4 +- drivers/iio/potentiometer/mcp4131.c | 2 +- drivers/infiniband/hw/irdma/verbs.c | 2 +- drivers/infiniband/hw/mthca/mthca_provider.c | 5 +- drivers/iommu/intel/dmar.c | 3 +- drivers/irqchip/irq-gic-v3-its.c | 4 + drivers/irqchip/irq-sifive-plic.c | 7 +- drivers/mailbox/mailbox.c | 6 +- drivers/md/dm-verity-fec.c | 4 +- drivers/md/dm-verity-fec.h | 3 - drivers/media/dvb-core/dmxdev.c | 4 +- drivers/media/dvb-core/dvb_net.c | 3 + drivers/media/platform/qcom/camss/camss-vfe-480.c | 59 ++- drivers/memory/mtk-smi.c | 13 +- drivers/mfd/omap-usb-host.c | 11 +- drivers/mfd/qcom-pm8xxx.c | 14 +- drivers/mmc/host/mmci_qcom_dml.c | 1 + drivers/mmc/host/sdhci-pci-gli.c | 9 + drivers/mmc/host/sdhci.c | 9 +- drivers/mtd/nand/raw/brcmnand/brcmnand.c | 6 +- drivers/mtd/nand/raw/cadence-nand-controller.c | 2 +- drivers/mtd/nand/raw/nand_base.c | 14 +- drivers/mtd/nand/raw/pl35x-nand-controller.c | 3 + drivers/mtd/nand/spi/macronix.c | 3 +- drivers/mtd/parsers/redboot.c | 6 +- drivers/net/arcnet/com20020-pci.c | 16 +- drivers/net/bonding/bond_debugfs.c | 16 +- drivers/net/bonding/bond_main.c | 10 +- drivers/net/caif/caif_serial.c | 3 + drivers/net/can/spi/hi311x.c | 5 +- drivers/net/can/spi/mcp251x.c | 15 +- drivers/net/can/usb/ems_usb.c | 7 +- drivers/net/can/usb/etas_es58x/es58x_core.c | 8 +- drivers/net/can/usb/gs_usb.c | 22 +- drivers/net/can/usb/ucan.c | 2 +- drivers/net/dsa/bcm_sf2.c | 8 +- drivers/net/dsa/realtek/rtl8365mb.c | 5 +- drivers/net/ethernet/amd/xgbe/xgbe-drv.c | 10 - drivers/net/ethernet/amd/xgbe/xgbe-main.c | 1 - drivers/net/ethernet/amd/xgbe/xgbe.h | 3 - drivers/net/ethernet/arc/emac_main.c | 11 + drivers/net/ethernet/broadcom/bnxt/bnxt.c | 25 +- drivers/net/ethernet/broadcom/bnxt/bnxt.h | 2 +- drivers/net/ethernet/broadcom/bnxt/bnxt_xdp.c | 7 - drivers/net/ethernet/broadcom/genet/bcmgenet_wol.c | 2 +- drivers/net/ethernet/cadence/macb.h | 7 + drivers/net/ethernet/cadence/macb_main.c | 184 +++++++- drivers/net/ethernet/cadence/macb_ptp.c | 4 +- drivers/net/ethernet/freescale/dpaa2/dpaa2-eth.h | 7 +- drivers/net/ethernet/freescale/dpaa2/dpaa2-mac.h | 10 +- .../freescale/dpaa2/dpaa2-switch-ethtool.c | 34 +- .../net/ethernet/freescale/dpaa2/dpaa2-switch.c | 57 ++- .../net/ethernet/freescale/dpaa2/dpaa2-switch.h | 9 +- drivers/net/ethernet/freescale/enetc/enetc_pf.c | 131 ++++-- drivers/net/ethernet/freescale/fec_main.c | 19 +- drivers/net/ethernet/google/gve/gve.h | 1 + drivers/net/ethernet/google/gve/gve_main.c | 5 +- drivers/net/ethernet/intel/e1000/e1000_main.c | 2 - drivers/net/ethernet/intel/e1000e/netdev.c | 2 - drivers/net/ethernet/intel/i40e/i40e_virtchnl_pf.c | 14 +- drivers/net/ethernet/intel/iavf/iavf_main.c | 9 +- drivers/net/ethernet/intel/ice/ice_common.c | 8 +- drivers/net/ethernet/intel/ice/ice_ethtool.c | 35 +- drivers/net/ethernet/intel/igc/igc_main.c | 7 +- drivers/net/ethernet/intel/ixgbevf/vf.c | 3 +- drivers/net/ethernet/marvell/mvpp2/mvpp2_main.c | 4 +- .../net/ethernet/marvell/octeon_ep/octep_main.c | 48 ++- drivers/net/ethernet/marvell/octeon_ep/octep_rx.c | 27 +- .../ethernet/marvell/octeontx2/af/rvu_devlink.c | 468 ++++++--------------- drivers/net/ethernet/mediatek/mtk_eth_soc.c | 15 +- .../ethernet/mellanox/mlx5/core/en/reporter_tx.c | 1 - drivers/net/ethernet/mellanox/mlx5/core/eswitch.c | 30 +- drivers/net/ethernet/mellanox/mlx5/core/eswitch.h | 3 + .../ethernet/mellanox/mlx5/core/eswitch_offloads.c | 18 +- drivers/net/ethernet/microsoft/mana/hw_channel.c | 6 +- drivers/net/ethernet/microsoft/mana/mana_en.c | 23 +- drivers/net/ethernet/stmicro/stmmac/common.h | 1 - drivers/net/ethernet/stmicro/stmmac/dwmac-intel.c | 4 - .../net/ethernet/stmicro/stmmac/dwmac-loongson.c | 9 +- drivers/net/ethernet/stmicro/stmmac/stmmac.h | 2 - drivers/net/ethernet/stmicro/stmmac/stmmac_main.c | 61 +-- .../net/ethernet/stmicro/stmmac/stmmac_platform.c | 8 - drivers/net/ethernet/ti/am65-cpsw-nuss.c | 2 +- drivers/net/ethernet/ti/cpsw_ale.c | 9 +- drivers/net/mctp/mctp-i2c.c | 1 + drivers/net/phy/phy_device.c | 13 +- drivers/net/usb/aqc111.c | 12 +- drivers/net/usb/kalmia.c | 7 + drivers/net/usb/kaweth.c | 13 + drivers/net/usb/lan78xx.c | 10 +- drivers/net/usb/lan78xx.h | 3 + drivers/net/usb/pegasus.c | 13 +- drivers/net/vxlan/vxlan_core.c | 5 + .../wireless/broadcom/brcm80211/brcmfmac/btcoex.c | 6 +- drivers/net/wireless/marvell/libertas/main.c | 4 +- .../net/wireless/mediatek/mt76/mt76_connac_mac.c | 1 + drivers/net/wireless/st/cw1200/pm.c | 2 + drivers/net/wireless/ti/wlcore/main.c | 4 +- drivers/net/wireless/ti/wlcore/tx.c | 2 +- drivers/nfc/nxp-nci/i2c.c | 4 +- drivers/nfc/pn533/usb.c | 1 + drivers/nvdimm/bus.c | 5 +- drivers/nvme/host/core.c | 2 + drivers/nvme/host/fc.c | 2 +- drivers/nvme/host/pci.c | 8 +- drivers/pci/iov.c | 7 +- drivers/pci/pci-acpi.c | 59 ++- drivers/pci/pci.c | 85 +++- drivers/pci/pci.h | 5 + drivers/pci/pcie/aer.c | 3 - drivers/pci/probe.c | 32 +- drivers/pci/quirks.c | 15 +- drivers/pci/remove.c | 5 +- drivers/pci/setup-bus.c | 57 +-- drivers/pci/setup-res.c | 74 ++-- drivers/pci/vgaarb.c | 17 +- drivers/pci/xen-pcifront.c | 4 +- drivers/platform/x86/dell/dell-wmi-base.c | 6 + .../dell/dell-wmi-sysman/passwordattr-interface.c | 1 - drivers/platform/x86/thinkpad_acpi.c | 6 +- drivers/pnp/quirks.c | 29 +- drivers/regulator/pca9450-regulator.c | 41 +- drivers/remoteproc/mtk_scp.c | 39 ++ drivers/remoteproc/qcom_sysmon.c | 2 +- drivers/s390/block/dasd_eckd.c | 16 + drivers/s390/crypto/zcrypt_ccamisc.c | 12 +- drivers/s390/crypto/zcrypt_cex4.c | 3 +- drivers/scsi/lpfc/lpfc_init.c | 2 + drivers/scsi/lpfc/lpfc_sli.c | 36 +- drivers/scsi/lpfc/lpfc_sli4.h | 3 + drivers/scsi/mpi3mr/mpi3mr_fw.c | 32 +- drivers/scsi/pm8001/pm8001_sas.c | 5 +- drivers/scsi/scsi_scan.c | 7 +- drivers/scsi/ses.c | 5 +- drivers/scsi/storvsc_drv.c | 5 +- drivers/soc/bcm/bcm2835-power.c | 18 +- drivers/soc/fsl/qbman/qman.c | 24 +- drivers/spi/spi-cadence-quadspi.c | 34 ++ drivers/spi/spi.c | 25 +- drivers/staging/media/tegra-video/vi.c | 27 +- drivers/staging/rtl8723bs/core/rtw_ieee80211.c | 15 +- drivers/staging/rtl8723bs/core/rtw_mlme.c | 5 +- drivers/target/target_core_configfs.c | 15 +- drivers/tty/serial/8250/8250_dma.c | 15 + drivers/tty/serial/8250/8250_pci.c | 17 + drivers/tty/serial/8250/8250_port.c | 6 + drivers/tty/serial/uartlite.c | 1 + drivers/ufs/core/ufshcd.c | 35 +- drivers/usb/cdns3/core.c | 11 +- drivers/usb/class/cdc-acm.c | 5 + drivers/usb/class/cdc-acm.h | 1 + drivers/usb/class/cdc-wdm.c | 4 +- drivers/usb/class/usbtmc.c | 6 +- drivers/usb/core/message.c | 100 ++++- drivers/usb/core/phy.c | 8 +- drivers/usb/core/quirks.c | 16 + drivers/usb/gadget/function/f_mass_storage.c | 12 +- drivers/usb/gadget/function/f_tcm.c | 14 + drivers/usb/host/xhci.c | 4 +- drivers/usb/image/mdc800.c | 6 +- drivers/usb/misc/uss720.c | 2 +- drivers/usb/misc/yurex.c | 2 +- drivers/usb/renesas_usbhs/common.c | 9 + drivers/usb/roles/class.c | 7 +- drivers/usb/serial/f81232.c | 77 ++-- drivers/xen/xen-acpi-processor.c | 7 +- fs/binfmt_misc.c | 4 +- fs/btrfs/ctree.h | 7 +- fs/btrfs/disk-io.c | 28 +- fs/btrfs/extent_io.c | 3 +- fs/btrfs/extent_io.h | 3 +- fs/btrfs/free-space-cache.c | 5 + fs/btrfs/inode.c | 19 + fs/btrfs/ioctl.c | 24 +- fs/btrfs/send.c | 4 + fs/btrfs/transaction.c | 16 + fs/btrfs/tree-checker.c | 4 +- fs/btrfs/uuid-tree.c | 46 ++ fs/ceph/dir.c | 15 +- fs/dlm/lock.c | 10 +- fs/eventpoll.c | 5 +- fs/ext4/ext4.h | 9 +- fs/ext4/extents.c | 312 ++++++++------ fs/ext4/extents_status.c | 12 +- fs/ext4/extents_status.h | 4 +- fs/ext4/fast_commit.c | 8 +- fs/ext4/inline.c | 12 +- fs/ext4/inode.c | 8 +- fs/ext4/mballoc.c | 258 ++++++------ fs/ext4/mballoc.h | 4 +- fs/ext4/migrate.c | 5 +- fs/ext4/move_extent.c | 7 +- fs/f2fs/data.c | 5 +- fs/gfs2/util.c | 31 +- fs/iomap/buffered-io.c | 7 +- fs/nfsd/nfs4xdr.c | 9 +- fs/nfsd/nfsctl.c | 31 +- fs/nfsd/state.h | 17 +- fs/ntfs3/super.c | 5 + fs/smb/client/cifsencrypt.c | 3 +- fs/smb/client/cifsfs.c | 9 +- fs/smb/client/cifsglob.h | 11 + fs/smb/client/cifsproto.h | 1 + fs/smb/client/connect.c | 5 +- fs/smb/client/dir.c | 1 + fs/smb/client/file.c | 29 +- fs/smb/client/misc.c | 41 ++ fs/smb/client/smb2ops.c | 14 +- fs/smb/client/smb2pdu.c | 22 +- fs/smb/client/smb2transport.c | 4 +- fs/smb/server/auth.c | 26 +- fs/smb/server/smb2pdu.c | 17 +- fs/squashfs/cache.c | 3 + fs/xfs/xfs_bmap_item.c | 3 +- fs/xfs/xfs_dquot.c | 8 +- fs/xfs/xfs_log.c | 2 + include/asm-generic/tlb.h | 77 +++- include/linux/bpf.h | 6 + include/linux/hugetlb.h | 17 +- include/linux/indirect_call_wrapper.h | 18 +- include/linux/ioport.h | 32 ++ include/linux/irqchip/arm-gic-v3.h | 1 + include/linux/mlx5/mlx5_ifc.h | 4 +- include/linux/mm_types.h | 1 + include/linux/mmc/host.h | 9 +- include/linux/pci.h | 14 + include/linux/skbuff.h | 12 + include/linux/stmmac.h | 1 - include/linux/uprobes.h | 1 + include/linux/usb.h | 8 +- include/net/act_api.h | 1 + include/net/bluetooth/hci_core.h | 3 + include/net/netfilter/nf_tables.h | 7 +- include/net/sch_generic.h | 38 ++ include/net/tc_act/tc_gate.h | 33 +- include/net/tc_act/tc_ife.h | 4 +- include/net/udp_tunnel.h | 2 +- include/sound/soc.h | 2 + include/trace/events/kmem.h | 8 +- io_uring/io-wq.c | 2 +- io_uring/kbuf.c | 8 +- kernel/bpf/devmap.c | 22 +- kernel/bpf/syscall.c | 3 +- kernel/bpf/trampoline.c | 4 +- kernel/bpf/verifier.c | 4 + kernel/cgroup/cgroup.c | 1 + kernel/events/core.c | 42 +- kernel/events/uprobes.c | 10 +- kernel/fork.c | 2 +- kernel/kprobes.c | 47 +-- kernel/rcu/tree_nocb.h | 5 +- kernel/sched/fair.c | 6 - kernel/sched/idle.c | 45 +- kernel/time/time.c | 171 +++++++- kernel/trace/trace.c | 6 +- kernel/trace/trace_events.c | 51 ++- kernel/trace/trace_events_trigger.c | 3 + lib/bootconfig.c | 9 +- mm/hugetlb.c | 143 ++++--- mm/kfence/core.c | 22 +- mm/mmu_gather.c | 33 ++ mm/rmap.c | 25 +- net/atm/lec.c | 26 +- net/batman-adv/bat_iv_ogm.c | 3 + net/batman-adv/bat_v_elp.c | 10 +- net/batman-adv/hard-interface.c | 8 +- net/batman-adv/hard-interface.h | 1 + net/bluetooth/hci_core.c | 34 +- net/bluetooth/hci_sync.c | 2 +- net/bluetooth/hidp/core.c | 16 +- net/bluetooth/l2cap_core.c | 31 +- net/bluetooth/smp.c | 2 +- net/bridge/br_device.c | 2 +- net/bridge/br_input.c | 2 +- net/can/bcm.c | 1 + net/ceph/auth.c | 6 +- net/ceph/messenger_v2.c | 31 +- net/ceph/mon_client.c | 6 +- net/core/dev.c | 2 +- net/core/filter.c | 23 +- net/dsa/dsa2.c | 7 + net/ipv4/icmp.c | 4 +- net/ipv4/tcp.c | 3 +- net/ipv4/tcp_input.c | 18 +- net/ipv4/tcp_ipv4.c | 3 +- net/ipv4/tcp_offload.c | 74 ++++ net/ipv4/udp_offload.c | 3 +- net/ipv6/ip6_output.c | 35 +- net/ipv6/route.c | 11 +- net/ipv6/tcp_ipv6.c | 3 +- net/ipv6/tcpv6_offload.c | 65 +++ net/l2tp/l2tp_ppp.c | 25 +- net/mac80211/debugfs.c | 14 +- net/mac80211/link.c | 2 + net/mac80211/mesh.c | 6 + net/mctp/route.c | 13 +- net/mptcp/pm.c | 2 +- net/mptcp/pm_netlink.c | 72 +++- net/mptcp/protocol.h | 2 + net/ncsi/ncsi-aen.c | 3 +- net/ncsi/ncsi-rsp.c | 16 +- net/netfilter/nf_conntrack_h323_asn1.c | 4 + net/netfilter/nf_conntrack_netlink.c | 67 +-- net/netfilter/nf_conntrack_sip.c | 6 +- net/netfilter/nf_tables_api.c | 8 +- net/netfilter/nfnetlink_cthelper.c | 8 +- net/netfilter/nfnetlink_osf.c | 13 + net/netfilter/nfnetlink_queue.c | 4 +- net/netfilter/nft_compat.c | 6 +- net/netfilter/nft_ct.c | 9 + net/netfilter/nft_log.c | 2 +- net/netfilter/nft_meta.c | 2 +- net/netfilter/nft_numgen.c | 2 +- net/netfilter/nft_set_pipapo.c | 123 ++++-- net/netfilter/nft_set_pipapo.h | 2 + net/netfilter/nft_tunnel.c | 5 +- net/netfilter/xt_CT.c | 4 + net/netfilter/xt_IDLETIMER.c | 6 + net/netfilter/xt_dccp.c | 4 +- net/netfilter/xt_tcpudp.c | 6 +- net/netfilter/xt_time.c | 4 +- net/nfc/nci/core.c | 21 +- net/nfc/nci/data.c | 12 +- net/nfc/rawsock.c | 11 + net/rose/af_rose.c | 5 + net/sched/act_ct.c | 6 + net/sched/act_gate.c | 264 ++++++++---- net/sched/act_ife.c | 93 ++-- net/sched/cls_api.c | 7 + net/sched/cls_u32.c | 13 +- net/sched/sch_ets.c | 12 +- net/sched/sch_generic.c | 27 -- net/sched/sch_teql.c | 8 +- net/smc/af_smc.c | 23 +- net/smc/smc.h | 5 + net/smc/smc_close.c | 2 +- net/sunrpc/cache.c | 26 +- net/sunrpc/xprtrdma/verbs.c | 7 +- net/tipc/socket.c | 2 + net/wireless/core.c | 4 +- net/wireless/core.h | 4 +- net/wireless/pmsr.c | 1 + net/wireless/radiotap.c | 4 +- net/wireless/scan.c | 14 +- sound/core/pcm_lib.c | 11 +- sound/core/pcm_native.c | 25 +- sound/pci/hda/patch_conexant.c | 11 + sound/soc/amd/acp3x-rt5682-max9836.c | 9 +- sound/soc/amd/yc/acp6x-mach.c | 14 + sound/soc/qcom/qdsp6/q6apm-dai.c | 1 + sound/soc/qcom/qdsp6/q6apm-lpass-dais.c | 1 + sound/soc/qcom/qdsp6/q6apm.c | 1 + sound/soc/soc-core.c | 35 +- sound/usb/endpoint.c | 10 +- sound/usb/midi.c | 3 +- sound/usb/mixer_scarlett2.c | 2 + sound/usb/quirks.c | 4 +- sound/usb/validate.c | 2 +- tools/bootconfig/main.c | 7 +- tools/testing/kunit/kunit.py | 279 +++++++----- tools/testing/kunit/kunit_config.py | 4 +- tools/testing/kunit/kunit_kernel.py | 42 +- tools/testing/kunit/kunit_parser.py | 171 +++++--- tools/testing/kunit/kunit_tool_test.py | 120 +++++- tools/testing/kunit/run_checks.py | 4 +- .../kunit/test_data/test_parse_ktap_output.log | 8 + .../kunit/test_data/test_parse_subtest_header.log | 7 + tools/testing/selftests/net/amt.sh | 7 +- tools/testing/selftests/net/mptcp/mptcp_join.sh | 49 +++ tools/testing/selftests/net/mptcp/simult_flows.sh | 11 +- 495 files changed, 5835 insertions(+), 3013 deletions(-)

1 day, 8 hours

[PATCH 5.10 000/334] 5.10.252-rc2 review

by Sasha Levin

This is the start of the stable review cycle for the 5.10.252 release. There are 334 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know. Responses should be made by Wed Mar 4 04:10:05 PM UTC 2026. Anything received after that time might be too late. The whole patch series can be found in one patch at: https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git/… or in the git tree and branch at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-5.10.y and the diffstat can be found below. Thanks, Sasha ------------- Pseudo-Shortlog of commits: Abdun Nihaal (2): media: i2c/tw9903: Fix potential memory leak in tw9903_probe() media: i2c/tw9906: Fix potential memory leak in tw9906_probe() Aboorva Devarajan (1): cpuidle: Skip governor when only one idle state is available Aleksei Oladko (1): selftests: forwarding: vxlan_bridge_1d: fix test failure with br_netfilter enabled Alex Deucher (1): drm/amdgpu: keep vga memory on MacBooks with switchable graphics Alex Williamson (1): PCI: Mark ASM1164 SATA controller to avoid bus reset Alexander Grest (1): iommu/arm-smmu-v3: Improve CMDQ lock fairness and efficiency Alexander Koskovich (1): power: reset: nvmem-reboot-mode: respect cell size for nvmem_cell_write Allison Henderson (1): net/rds: rds_sendmsg should not discard payload_len Alok Tiwari (1): mtd: rawnand: cadence: Fix return type of CDMA send-and-wait helper Alper Ak (2): tpm: tpm_i2c_infineon: Fix locality leak on get_burstcount() failure tpm: st33zp24: Fix missing cleanup on get_burstcount() error Andreas Gruenbacher (6): gfs2: Add new gfs2_iomap_get helper gfs2: Turn gfs2_extent_map into gfs2_{get,alloc}_extent gfs2: Replace gfs2_lblk_to_dblk with gfs2_get_extent gfs2: Add wrapper for iomap_file_buffered_write gfs2: Move the inode glock locking to gfs2_file_buffered_write gfs2: Add metapath_dibh helper Andreas Larsson (1): sparc: Synchronize user stack on fork and clone André Draszik (1): regulator: core: move supply check earlier in set_machine_constraints() AngeloGioacchino Del Regno (2): arm64: dts: qcom: sdm630: Add qfprom subnodes dmaengine: mediatek: uart-apdma: Fix above 4G addressing TX/RX Anshumali Gaur (1): octeontx2-af: Fix PF driver crash with kexec kernel booting Anthony Iliopoulos (2): nfsd: never defer requests during idmap lookup nfsd: fix return error code for nfsd_map_name_to_[ug]id Anthony Pighin (Nokia) (1): rtc: interface: Alarm race handling should not discard preceding error Antonio Borneo (1): coresight: etm3x: Fix cpulocked warning on cpuhp Antoniu Miclaus (1): iio: gyro: itg3200: Fix unchecked return value in read_raw Archie Pusaka (1): Bluetooth: Enforce key size of 16 bytes on FIPS level Armin Wolf (1): ACPICA: Abort AML bytecode execution when executing AML_FATAL_OP Arnd Bergmann (2): vmw_vsock: bypass false-positive Wnonnull warning with gcc-16 myri10ge: avoid uninitialized variable use Artem Shimko (1): serial: 8250_dw: handle clock enable errors in runtime_resume Bartosz Golaszewski (1): clocksource/drivers/timer-integrator-ap: Add missing Kconfig dependency on OF Ben Dooks (1): fs: add <linux/init_task.h> for 'init_fs' Benjamin Marzinski (1): dm mpath: make pg_init_delay_msecs settable Billy Tsai (2): i3c: Move device name assignment after i3c_bus_init gpio: aspeed-sgpio: Change the macro to support deferred probe Brian Masney (2): openrisc: define arch-specific version of nop() clk: microchip: core: correct return value on *_get_parent() Carl Lee (1): nfc: nxp-nci: remove interrupt trigger type Chaitanya Mishra (1): staging: greybus: lights: avoid NULL deref Chen Jinghuang (1): sched/rt: Skip currently executing CPU in rto_next_cpu() Chen-Yu Tsai (1): ARM: dts: allwinner: sun5i-a13-utoo-p66: delete "power-gpios" property Chin-Ting Kuo (1): spi: spi-mem: Protect dirmap_create() with spi_mem_access_start/end Christian Kohlschütter (1): regulator: core: Fix off-on-delay-us for always-on/boot-on regulators Christoph Hellwig (1): iomap: fix submission side handling of completion side errors Chuck Lever (10): svcrdma: Add a batch Receive posting mechanism svcrdma: Use svc_rdma_refresh_recvs() in wc_receive svcrdma: Maintain a Receive water mark RDMA/core: Fix a couple of obvious typos in comments svcrdma: Remove queue-shortening warnings svcrdma: Clean up comment in svc_rdma_accept() svcrdma: Increase the per-transport rw_ctx count svcrdma: Reduce the number of rdma_rw contexts per-QP RDMA/core: add rdma_rw_max_sge() helper for SQ sizing SUNRPC: auth_gss: fix memory leaks in XDR decoding error paths Colin Ian King (1): scsi: csiostor: Fix dereference of null pointer rn Cupertino Miranda (1): bpf: verifier improvement in 32bit shift sign extension pattern Dan Carpenter (2): EDAC/i5000: Fix snprintf() size calculation in calculate_dimm_size() EDAC/i5400: Fix snprintf() limit calculation in calculate_dimm_size() Daniel Hodges (2): SUNRPC: fix gss_auth kref leak in gss_alloc_msg error path tipc: fix RCU dereference race in tipc_aead_users_dec() Daniel Palmer (1): m68k: nommu: fix memmove() with differently aligned src and dest for 68000 Darrick J. Wong (4): xfs: mark data structures corrupt on EIO and ENODATA xfs: delete attr leaf freemap entries when empty xfs: fix freemap adjustments when adding xattrs to leaf blocks xfs: fix remote xattr valuelblk check Davide Caratti (1): selftests: forwarding: tc_actions: cleanup temporary files when test is aborted Deepanshu Kartikey (1): gfs2: Fix use-after-free in iomap inline data write path Ding Hui (1): dm: remove fake timeout to avoid leak request Diogo Ivo (1): arm64: tegra: smaug: Add usb-role-switch support Dmitry Baryshkov (3): arm64: dts: qcom: sdm630: fix gpu_speed_bin size arm64: dts: qcom: sdm845-db845c: specify power for WiFi CH1 clk: qcom: dispcc-sdm845: convert to parent data Dmytro Maluka (1): iommu/vt-d: Flush cache for PASID table before using it Douglas Anderson (1): regulator: core: Shorten off-on-delay-us for always-on/boot-on by time since booted Duoming Zhou (2): net: wan: farsync: Fix use-after-free bugs caused by unfinished tasklets atm: fore200e: fix use-after-free in tasklets during device removal Eric Biggers (1): dm-verity: correctly handle dm_bufio_client_create() failure Eric Dumazet (3): tcp: tcp_tx_timestamp() must look at the rtx queue ipv6: fix a race in ip6_sock_set_v6only() macvlan: observe an RCU grace period in macvlan_common_newlink() error path Eric Joyner (1): ionic: Rate limit unknown xcvr type messages Ethan Nelson-Moore (3): net: usb: sr9700: remove code to drive nonexistent multicast filter net: ethernet: marvell: skge: remove incorrect conflicting PCI ID net: intel: fix PCI device ID conflict between i40e and ipw2200 Felix Gu (2): fbdev: au1200fb: Fix a memory leak in au1200fb_drv_probe() pinctrl: equilibrium: Fix device node reference leak in pinbank_init() Fernando Fernandez Mancera (3): netfilter: nf_conncount: make nf_conncount_gc_list() to disable BH netfilter: nf_conncount: increase the connection clean up limit to 64 netfilter: nf_conncount: fix tracking of connections from localhost Filipe Manana (2): btrfs: qgroup: return correct error when deleting qgroup relation item btrfs: fix invalid leaf access in btrfs_quota_enable() if ref key not found Florian Westphal (3): netfilter: nft_set_hash: fix get operation on big endian netfilter: nf_conntrack_h323: don't pass uninitialised l3num value netfilter: xt_tcpmss: check remaining length before reading optlen Francesco Lavra (1): spi: tools: Add include folder to .gitignore Frédéric Danis (1): Bluetooth: l2cap: Check encryption key size on incoming connection Geert Uytterhoeven (1): clk: Move clk_{save,restore}_context() to COMMON_CLK section Geetha sowjanya (1): octeontx2-af: Workaround SQM/PSE stalls by disabling sticky Georgia Garcia (1): apparmor: fix invalid deref of rawdata when export_binary is unset Gerd Rausch (1): net/rds: No shortcut out of RDS_CONN_ERROR Greg Kroah-Hartman (1): Revert "mmc: rtsx_pci_sdmmc: increase power-on settling delay to 5ms" Guenter Roeck (1): Revert "hwmon: (ibmpex) fix use-after-free in high/low store" Gui-Dong Han (2): PM: sleep: wakeirq: harden dev_pm_clear_wake_irq() against races rpmsg: core: fix race in driver_override_show() and use core helper Günther Noack (3): HID: magicmouse: Do not crash on missing msc->input HID: prodikeys: Check presence of pm->input_ep82 HID: logitech-hidpp: Check maxfield in hidpp_get_report_length() Hangbin Liu (1): bonding: alb: fix UAF in rlb_arp_recv during bond up/down Hans Verkuil (4): media: dvb-core: dmxdevfilter must always flush bufs media: omap3isp: isp_video_mbus_to_pix/pix_to_mbus fixes media: omap3isp: isppreview: always clamp in preview_try_format() media: omap3isp: set initial format Haotian Zhang (6): clk: qcom: Return correct error code in qcom_cc_probe_by_index() soc: qcom: cmd-db: Use devm_memremap() to fix memory leak in cmd_db_dev_probe PCI: mediatek: Fix IRQ domain leak when MSI allocation fails power: supply: bq27xxx: fix wrong errno when bus ops are unsupported mfd: arizona: Fix regulator resource leak on wm5102_clear_write_sequencer() failure jfs: Add missing set_freezable() for freezable kthread Haotien Hsu (1): usb: gadget: tegra-xudc: Add handling for BLCG_COREPLL_PWRDN Haoxiang Li (10): media: cx25821: Fix a resource leak in cx25821_dev_setup() media: mtk-mdp: Fix error handling in probe function media: mtk-mdp: Fix a reference leak bug in mtk_mdp_remove() media: cx88: Add missing unmap in snd_cx88_hw_params() media: cx23885: Add missing unmap in snd_cx23885_hw_params() media: cx25821: Add missing unmap in snd_cx25821_hw_params() clk: tegra: tegra124-emc: Fix potential memory leak in tegra124_clk_register_emc() bus: fsl-mc: fix an error handling in fsl_mc_device_add() rapidio: replace rio_free_net() with kfree() in rio_scan_alloc_net() parisc: kernel: replace kfree() with put_device() in create_tree_node() Harshit Mogalapalli (1): iio: sca3000: Fix a resource leak in sca3000_probe() Heiko Carstens (1): s390/purgatory: Add -Wno-default-const-init-unsafe to KBUILD_CFLAGS Helge Deller (1): parisc: Prevent interrupts during reboot Heming Zhao (1): ocfs2: fix reflink preserve cleanup issue Honggang LI (1): RDMA/rtrs: server: remove dead code Hou Wenlong (1): x86/xen/pvh: Enable PAE mode for 32-bit guest only when CONFIG_X86_PAE is set Hsieh Hung-En (1): ASoC: es8328: Add error unwind in resume Håkon Bugge (3): PCI: Do not attempt to set ExtTag for VFs PCI: Initialize RCB from pci_configure_device() net/rds: Clear reconnect pending bit Ian Rogers (1): perf callchain: Fix srcline printing with inlines Ido Schimmel (2): selftests: mlxsw: tc_restrictions: Fix test failure with new iproute2 selftests: forwarding: tc_actions: Use ncat instead of nc Jack Wang (1): md/bitmap: fix GPF in write_page caused by resize race Jacopo Scannella (1): Bluetooth: btusb: Add device ID for Realtek RTL8761BU Jakub Kicinski (1): net: consume xmit errors of GSO frames Jamie Iles (1): i3c: remove i2c board info from i2c_dev_desc Jason Andryuk (1): xenbus: Use .freeze/.thaw to handle xenbus devices Jason Gunthorpe (1): RDMA/efa: Fix typo in efa_alloc_mr() Jeffrey Bencteux (2): audit: add fchmodat2() to change attributes class audit: add missing syscalls to read class Jerome Brunet (4): arm64: dts: amlogic: axg: assign the MMC signal clocks arm64: dts: amlogic: gx: assign the MMC signal clocks arm64: dts: amlogic: g12: assign the MMC B and C signal clocks arm64: dts: amlogic: g12: assign the MMC A signal clock Jiasheng Jiang (1): RDMA/rxe: Fix double free in rxe_srq_from_init Jiaxun Yang (1): MIPS: rb532: Fix MMIO UART resource registration Jiayuan Chen (3): net: atm: fix crash due to unvalidated vcc pointer in sigd_send() serial: caif: fix use-after-free in caif_serial ldisc_close() xfrm6: fix uninitialized saddr in xfrm6_get_saddr() Jinhui Guo (2): iommu/vt-d: Flush dev-IOTLB only when PCIe device is accessible in scalable mode PCI: Fix pci_slot_trylock() error handling Jinliang Zheng (1): procfs: fix missing RCU protection when reading real_parent in do_task_stat() Jinqian Yang (1): arm64: Add support for TSV110 Spectre-BHB mitigation Jiri Pirko (1): RDMA/core: Fix stale RoCE GIDs during netdev events at registration Jisheng Zhang (1): usb: dwc2: fix resume failure if dr_mode is host Johan Hovold (1): soc: ti: k3-socinfo: Fix regmap leak on probe failure Johannes Berg (1): wifi: cfg80211: wext: fix IGTK key ID off-by-one John Efstathiades (3): lan78xx: Remove unused pause frame queue lan78xx: Fix race condition in disconnect handling lan78xx: Fix memory allocation bug John Garry (1): MIPS: Loongson: Make cpumask_of_node() robust against NUMA_NO_NODE John Johansen (2): apparmor: fix NULL sock in aa_sock_file_perm apparmor: fix rlimit for posix cpu timers Johnny-CC Chang (1): PCI: Mark Nvidia GB10 to avoid bus reset Jori Koolstra (2): minix: Add required sanity checking to minix_check_superblock() jfs: nlink overflow in jfs_rename Jun Yan (1): arm64: dts: rockchip: Do not enable hdmi_sound node on Pinebook Pro Justin Chen (1): usb: bdc: fix sleep during atomic Jörg Wedekind (1): PCI: Mark 3ware-9650SA Root Port Extended Tags as broken Kaushlendra Kumar (2): drm/i915/acpi: free _DSM package when no connectors tools/power cpupower: Reset errno before strtoull() Kees Cook (1): media: solo6x10: Check for out of bounds chip_id Keith Busch (1): PCI: Fix pci_slot_lock () device locking Kevin Hao (1): net: cpsw_new: Fix unnecessary netdev unregistration in cpsw_probe() error path Koichiro Den (1): NTB: ntb_transport: Fix too small buffer for debugfs_name Konstantin Andreev (2): smack: /smack/doi must be > 0 smack: /smack/doi: accept previously used values Krishna Chaitanya Chundru (1): PCI: Add ACS quirk for Qualcomm Hamoa & Glymur Krzysztof Kozlowski (1): arm64: dts: qcom: sdm630: correct QFPROM byte offsets Kuniyuki Iwashima (1): ipv4: fib: Annotate access to struct fib_alias.fa_state. Lee Jones (1): RDMA/core: device: Fix formatting in worthy kernel-doc header and demote another Li Chen (2): nvdimm: virtio_pmem: serialize flush requests kexec: derive purgatory entry from symbol Li Nan (1): md/raid10: fix any_working flag handling in raid10_sync_request Li Wang (1): selftests/mm/charge_reserved_hugetlb: drop mount size for hugetlbfs Linus Walleij (2): power: supply: wm97xx_battery: Convert to GPIO descriptor ata: pata_ftide010: Fix some DMA timings Luca Ceresoli (1): drm: of: drm_of_panel_bridge_remove(): fix device_node leak Ludovic Desroches (2): drm/atmel-hlcdc: fix memory leak from the atomic_destroy_state callback drm/atmel-hlcdc: fix use-after-free of drm_crtc_commit after release Luiz Augusto von Dentz (4): Bluetooth: L2CAP: Fix invalid response to L2CAP_ECRED_RECONF_REQ Bluetooth: L2CAP: Fix response to L2CAP_ECRED_CONN_REQ Bluetooth: L2CAP: Fix not checking l2cap_chan security level Bluetooth: L2CAP: Fix missing key size check for L2CAP_LE_CONN_REQ Maciej Grochowski (2): ntb: ntb_hw_switchtec: Fix array-index-out-of-bounds access ntb: ntb_hw_switchtec: Fix shift-out-of-bounds for 0 mw lut Manivannan Sadhasivam (1): PCI: Enable ACS after configuring IOMMU for OF platforms Marcus Folkesson (1): Revert "mfd: da9052-spi: Change read-mask to write-mask" Mario Limonciello (AMD) (1): crypto: ccp - Add an S4 restore flow Mark Brown (1): regulator: Flag uncontrollable regulators as always_on Martin Blumenstingl (1): clk: meson: gxbb: Limit the HDMI PLL OD to /4 on GXL/GXM SoCs Martin Pålsson (1): net: usb: lan78xx: scan all MDIO addresses on LAN7801 Matt Whitlock (1): dm-unstripe: fix mapping bug when there are multiple targets in a table Matthew Schwartz (1): mmc: rtsx_pci_sdmmc: increase power-on settling delay to 5ms Matthias Kaehlcke (1): regulator: core: Use ktime_get_boottime() to determine how long a regulator was off Mauro Carvalho Chehab (3): EFI/CPER: don't dump the entire memory region APEI/GHES: ensure that won't go past CPER allocated record EFI/CPER: don't go past the ARM processor CPER record buffer Md Haris Iqbal (1): rnbd-srv: Zero the rsp buffer before using it Michael Liang (1): dm: clear cloned request bio pointer when last clone bio completes Mikulas Patocka (1): dm-integrity: fix a typo in the code for write/discard race Mingj Ye (1): net: usb: r8152: fix transmit queue timeout Miri Korenblit (1): wifi: cfg80211: stop NAN and P2P in cfg80211_leave Moteen Shah (1): serial: 8250: 8250_omap.c: Clear DMA RX running status only after DMA termination is done Narayana Murty N (1): powerpc/eeh: fix recursive pci_lock_rescan_remove locking in EEH event handling Niklas Schnelle (2): Revert "PCI/IOV: Add PCI rescan-remove locking when enabling/disabling SR-IOV" PCI/IOV: Fix race between SR-IOV enable/disable and hotplug Niklas Söderlund (1): clocksource/drivers/sh_tmu: Always leave device running after probe Nuno Sá (1): dma: dma-axi-dmac: fix SW cyclic transfers Olga Kornievskaia (1): pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN Oliver Neukum (2): usbb: catc: use correct API for MAC addresses HID: hid-pl: handle probe errors Ondrej Mosnacek (1): ucount: check for CAP_SYS_RESOURCE using ns_capable_noaudit() Otto Pflüger (1): mailbox: sprd: clear delivery flag before handling TX done Pablo Neira Ayuso (1): netfilter: nft_set_rbtree: check for partial overlaps in anonymous sets Paul Cercueil (2): PM: core: Redefine pm_ptr() macro PM: core: Add new *_PM_OPS macros, deprecate old ones Petr Hodina (1): clk: qcom: dispcc-sdm845: Enable parents for pixel clocks Phil Sutter (1): include: uapi: netfilter_bridge.h: Cover for musl libc Qing Wang (1): ovl: Fix uninit-value in ovl_fill_real Randy Dunlap (2): serial: imx: change SERIAL_IMX_CONSOLE to bool serial: SH_SCI: improve "DMA support" prompt Renjiang Han (1): media: venus: vdec: fix error state assignment for zero bytesused René Rebe (3): modpost: Amend ppc64 save/restfpr symnames for -Os build fix it87_wdt early reboot by reporting running timer fbdev: ffb: fix corrupted video output on Sun FFB1 Rui Feng (1): misc: rtsx: Add SD Express mode support for RTS5261 Ruipeng Qi (1): pstore: ram_core: fix incorrect success return when vmap() fails Sai Ritvik Tanksalkar (1): pstore/ram: fix buffer overflow in persistent_ram_save_old() Salah Triki (1): s390/cio: Fix device lifecycle handling in css_alloc_subchannel() Sam James (1): sparc: don't reference obsolete termio struct for TC* constants Samuel Wu (1): PM: wakeup: Handle empty list in wakeup_sources_walk_start() Sasha Levin (1): Linux 5.10.252-rc2 Sebastian Andrzej Siewior (4): EDAC/altera: Remove IRQF_ONESHOT mfd: wm8350-core: Use IRQF_ONESHOT mailbox: bcm-ferxrm-mailbox: Use default primary handler iio: magnetometer: Remove IRQF_ONESHOT Sebastian Krzyszkowiak (2): ASoC: wm8962: Add WM8962_ADC_MONOMIX to "3D Coefficients" mask ASoC: wm8962: Don't report a microphone if it's shorted to ground on plug Shardul Bankar (1): hfsplus: return error when node already exists in hfs_bnode_create Shaurya Rane (1): media: radio-keene: fix memory leak in error path Srinivasan Shanmugam (1): drm/amdgpu: Use explicit VCN instance 0 in SR-IOV init Stefan Sørensen (1): Bluetooth: hci_conn: use mod_delayed_work for active mode timeout Steven Rostedt (1): tracing: Remove duplicate ENABLE_EVENT_STR and DISABLE_EVENT_STR macros Sunday Clement (1): drm/amdkfd: Fix out-of-bounds write in kfd_event_page_set() Svyatoslav Ryhel (1): drivers: iio: mpu3050: use dev_err_probe for regulator request Szymon Wilczek (2): media: pvrusb2: fix URB leak in pvr2_send_request_ex wifi: libertas: fix WARNING in usb_tx_block Tetsuo Handa (1): hfsplus: pretend special inodes as regular files Thadeu Lima de Souza Cascardo (1): fpga: dfl: use subsys_initcall to allow built-in drivers to be added Thomas Bogendoerfer (1): bonding: only set speed/duplex to unknown, if getting speed failed Thomas Fourier (6): auxdisplay: arm-charlcd: fix release_mem_region() size crypto: cavium - fix dma_free_coherent() size crypto: octeontx - fix dma_free_coherent() size net: wan/fsl_ucc_hdlc: Fix dma_free_coherent() in uhdlc_memclean() fbdev: vt8500lcdfb: fix missing dma_free_coherent() net: ethernet: ec_bhf: Fix dma_free_coherent() dma handle Thomas Gleixner (1): hrtimer: Fix trace oddity Thomas Richter (1): s390/perf: Disable register readout on sampling events Thomas Weissschuh (1): ARM: 9467/1: mm: Don't use %pK through printk Thomas Weißschuh (4): ARM: VDSO: Patch out __vdso_clock_getres() if unavailable hyper-v: Mark inner union in hv_kvp_exchg_msg_value as packed virt: vbox: uapi: Mark inner unions in packed structs as packed binder: don't use %pK through printk Thorsten Schmelzer (2): media: adv7180: fix frame interval in progressive mode HID: multitouch: add eGalaxTouch EXC3188 support Tzung-Bi Shih (1): platform/chrome: cros_ec_lightbar: Fix response size initialization Ulf Hansson (1): mmc: core: Initial support for SD express card/host Uwe Kleine-König (1): PCI/portdrv: Fix potential resource leak Vahagn Vardanian (1): netfilter: nf_conntrack_h323: fix OOB read in decode_choice() Viacheslav Dubeyko (1): hfsplus: fix volume corruption issue for generic/498 Vincent Whitchurch (2): regulator: core: Respect off_on_delay at startup regulator: core: Fix off_on_delay handling Vladimir Zapolskiy (2): ARM: dts: lpc32xx: Set motor PWM #pwm-cells property value to 3 cells arm: dts: lpc32xx: add clocks property to Motor Control PWM device tree node Vlastimil Babka (1): mm, page_alloc, thp: prevent reclaim for __GFP_THISNODE THP allocations Waqar Hameed (7): power: supply: act8945a: Fix use-after-free in power_supply_changed() power: supply: bq25980: Fix use-after-free in power_supply_changed() power: supply: cpcap-battery: Fix use-after-free in power_supply_changed() power: supply: goldfish: Fix use-after-free in power_supply_changed() power: supply: rt9455: Fix use-after-free in power_supply_changed() power: supply: sbs-battery: Fix use-after-free in power_supply_changed() power: supply: wm97xx: Fix NULL pointer dereference in power_supply_changed() Wayne Lin (1): drm/amd/display: Avoid updating surface with the same surface under MPO Wei Li (1): pinctrl: single: fix refcount leak in pcs_add_gpio_func() Weigang He (1): fbdev: of: display_timing: fix refcount leak in of_get_display_timings() Wentao Liang (1): soc: ti: pruss: Fix double free in pruss_clk_mux_setup() Xiao Kan (1): drm: Account property blob allocations to memcg Xu Yang (1): phy: fsl-imx8mq-usb: disable bind/unbind platform driver feature Yao Zi (1): MIPS: Work around LLVM bug when gp is used as global register variable Yi Liu (2): RDMA/uverbs: Validate wqe_size before using it in ib_uverbs_post_send RDMA/uverbs: Add __GFP_NOWARN to ib_uverbs_unmarshall_recv() kmalloc Yu Kuai (1): blk-mq-debugfs: add missing debugfs_mutex in blk_mq_debugfs_register_hctxs() YunJe Shin (2): RDMA/siw: Fix potential NULL pointer dereference in header processing RDMA/umad: Reject negative data_len in ib_umad_write Yuto Hamaguchi (1): netfilter: nf_conntrack: Add allow_clash to generic protocol handler Zhang Yi (1): ext4: don't cache extent during splitting extent Zhiyu Zhang (1): fat: avoid parent link count underflow in rmdir Zilin Guan (1): ext4: fix memory leak in ext4_ext_shift_extents() Ziyi Guo (8): wifi: ath10k: sdio: add missing lock protection in ath10k_sdio_fw_crashed_dump() net: usb: catc: enable basic endpoint checking xen-netback: reject zero-queue configuration from guest wifi: iwlegacy: add missing mutex protection in il4965_store_tx_power() wifi: iwlegacy: add missing mutex protection in il3945_store_measurement() wifi: ath10k: fix lock protection in ath10k_wmi_event_peer_sta_ps_state_chg() net: usb: kaweth: remove TX queue manipulation in kaweth_set_rx_mode net: usb: pegasus: enable basic endpoint checking decce6 (2): drm/amdgpu: Add HAINAN clock adjustment drm/radeon: Add HAINAN clock adjustment ethanwu (1): ceph: supply snapshot context in ceph_zero_partial_object() jinbaohong (1): btrfs: continue trimming remaining devices on failure Makefile | 4 +- arch/arm/boot/dts/lpc32xx.dtsi | 3 +- arch/arm/boot/dts/sun5i-a13-utoo-p66.dts | 1 + arch/arm/kernel/vdso.c | 1 + arch/arm/mach-pxa/mioa701.c | 1 - arch/arm/mach-pxa/palm27x.c | 1 - arch/arm/mach-pxa/palmte2.c | 1 - arch/arm/mm/physaddr.c | 2 +- arch/arm64/boot/dts/amlogic/meson-axg.dtsi | 6 + .../boot/dts/amlogic/meson-g12-common.dtsi | 9 + arch/arm64/boot/dts/amlogic/meson-gxbb.dtsi | 9 + arch/arm64/boot/dts/amlogic/meson-gxl.dtsi | 9 + arch/arm64/boot/dts/nvidia/tegra210-smaug.dts | 2 + arch/arm64/boot/dts/qcom/sdm630.dtsi | 10 + arch/arm64/boot/dts/qcom/sdm845-db845c.dts | 7 + .../boot/dts/rockchip/rk3399-pinebook-pro.dts | 4 - arch/arm64/kernel/proton-pack.c | 1 + arch/m68k/lib/memmove.c | 18 ++ .../include/asm/mach-loongson64/topology.h | 2 +- arch/mips/kernel/relocate.c | 13 + arch/mips/rb532/devices.c | 5 +- arch/openrisc/include/asm/barrier.h | 2 + arch/parisc/kernel/drivers.c | 2 +- arch/parisc/kernel/process.c | 3 + arch/powerpc/include/asm/eeh.h | 2 + arch/powerpc/kernel/eeh_driver.c | 11 +- arch/powerpc/kernel/eeh_pe.c | 74 +++++- arch/s390/kernel/perf_cpum_sf.c | 2 +- arch/s390/purgatory/Makefile | 1 + arch/sparc/include/uapi/asm/ioctls.h | 8 +- arch/sparc/kernel/process.c | 38 +-- arch/x86/platform/pvh/head.S | 2 + block/blk-mq-debugfs.c | 2 + drivers/acpi/acpica/exoparg3.c | 46 ++-- drivers/acpi/apei/ghes.c | 6 +- drivers/android/binder.c | 2 +- drivers/android/binder_alloc.c | 6 +- drivers/ata/pata_ftide010.c | 6 +- drivers/atm/fore200e.c | 4 + drivers/auxdisplay/arm-charlcd.c | 2 +- drivers/base/power/wakeirq.c | 9 +- drivers/base/power/wakeup.c | 4 +- drivers/block/rnbd/rnbd-srv.c | 3 + drivers/bluetooth/btusb.c | 1 + drivers/bus/fsl-mc/fsl-mc-bus.c | 6 +- drivers/char/tpm/st33zp24/st33zp24.c | 6 +- drivers/char/tpm/tpm_i2c_infineon.c | 6 +- drivers/clk/meson/gxbb.c | 17 +- drivers/clk/microchip/clk-core.c | 25 +- drivers/clk/qcom/common.c | 2 +- drivers/clk/qcom/dispcc-sdm845.c | 220 ++++++++--------- drivers/clk/tegra/clk-tegra124-emc.c | 4 +- drivers/clocksource/Kconfig | 1 + drivers/clocksource/sh_tmu.c | 18 -- drivers/cpuidle/cpuidle.c | 10 + drivers/crypto/cavium/cpt/cptvf_main.c | 3 +- drivers/crypto/ccp/psp-dev.c | 11 + drivers/crypto/ccp/sp-dev.c | 12 + drivers/crypto/ccp/sp-dev.h | 3 + drivers/crypto/ccp/sp-pci.c | 16 +- drivers/crypto/ccp/tee-dev.c | 5 + drivers/crypto/ccp/tee-dev.h | 1 + .../crypto/marvell/octeontx/otx_cptvf_main.c | 3 +- drivers/dma/dma-axi-dmac.c | 3 +- drivers/dma/mediatek/mtk-uart-apdma.c | 10 +- drivers/edac/altera_edac.c | 11 +- drivers/edac/i5000_edac.c | 1 + drivers/edac/i5400_edac.c | 2 +- drivers/firmware/efi/cper-arm.c | 12 +- drivers/firmware/efi/cper.c | 8 +- drivers/fpga/dfl.c | 2 +- drivers/gpio/gpio-aspeed-sgpio.c | 5 +- drivers/gpu/drm/amd/amdgpu/amdgpu_gmc.c | 10 + drivers/gpu/drm/amd/amdgpu/vcn_v2_0.c | 45 ++-- drivers/gpu/drm/amd/amdkfd/kfd_events.c | 6 + .../gpu/drm/amd/display/amdgpu_dm/amdgpu_dm.c | 2 +- drivers/gpu/drm/amd/pm/powerplay/si_dpm.c | 5 + .../gpu/drm/atmel-hlcdc/atmel_hlcdc_plane.c | 6 +- drivers/gpu/drm/drm_property.c | 2 +- drivers/gpu/drm/i915/display/intel_acpi.c | 1 + drivers/gpu/drm/radeon/si_dpm.c | 5 + drivers/hid/hid-ids.h | 1 + drivers/hid/hid-logitech-hidpp.c | 2 +- drivers/hid/hid-magicmouse.c | 5 + drivers/hid/hid-multitouch.c | 3 + drivers/hid/hid-pl.c | 7 +- drivers/hid/hid-prodikeys.c | 4 + drivers/hwmon/ibmpex.c | 9 +- .../coresight/coresight-etm3x-core.c | 12 +- drivers/i3c/master.c | 21 +- drivers/iio/accel/sca3000.c | 6 +- drivers/iio/gyro/itg3200_core.c | 2 + drivers/iio/gyro/mpu3050-core.c | 6 +- drivers/iio/magnetometer/ak8975.c | 2 +- drivers/infiniband/core/cache.c | 13 + drivers/infiniband/core/core_priv.h | 3 + drivers/infiniband/core/device.c | 40 ++- drivers/infiniband/core/rw.c | 53 ++-- drivers/infiniband/core/user_mad.c | 8 +- drivers/infiniband/core/uverbs_cmd.c | 7 +- drivers/infiniband/hw/efa/efa_verbs.c | 2 +- drivers/infiniband/sw/rxe/rxe_srq.c | 3 + drivers/infiniband/sw/siw/siw_qp_rx.c | 3 +- drivers/infiniband/ulp/rtrs/rtrs-srv.c | 8 +- drivers/iommu/arm/arm-smmu-v3/arm-smmu-v3.c | 31 ++- drivers/iommu/intel/pasid.c | 9 +- drivers/mailbox/bcm-flexrm-mailbox.c | 14 +- drivers/mailbox/sprd-mailbox.c | 10 +- drivers/md/dm-integrity.c | 2 +- drivers/md/dm-mpath.c | 2 +- drivers/md/dm-rq.c | 16 +- drivers/md/dm-unstripe.c | 2 +- drivers/md/dm-verity-fec.c | 4 +- drivers/md/md-bitmap.c | 3 +- drivers/md/raid10.c | 2 +- drivers/media/dvb-core/dmxdev.c | 8 +- drivers/media/dvb-core/dvb_vb2.c | 5 +- drivers/media/i2c/adv7180.c | 7 + drivers/media/i2c/tw9903.c | 1 + drivers/media/i2c/tw9906.c | 1 + drivers/media/pci/cx23885/cx23885-alsa.c | 4 +- drivers/media/pci/cx25821/cx25821-alsa.c | 1 + drivers/media/pci/cx25821/cx25821-core.c | 1 + drivers/media/pci/cx88/cx88-alsa.c | 4 +- drivers/media/pci/solo6x10/solo6x10-tw28.c | 8 +- drivers/media/platform/mtk-mdp/mtk_mdp_core.c | 17 +- drivers/media/platform/omap3isp/isppreview.c | 21 +- drivers/media/platform/omap3isp/ispvideo.c | 14 +- drivers/media/platform/qcom/venus/vdec.c | 6 +- drivers/media/radio/radio-keene.c | 2 +- drivers/media/usb/pvrusb2/pvrusb2-hdw.c | 5 + drivers/mfd/arizona-core.c | 2 +- drivers/mfd/da9052-spi.c | 2 +- drivers/misc/cardreader/rts5261.c | 4 + drivers/misc/cardreader/rts5261.h | 23 -- drivers/misc/cardreader/rtsx_pcr.c | 5 + drivers/mmc/core/core.c | 15 +- drivers/mmc/core/host.h | 6 + drivers/mmc/core/sd_ops.c | 49 +++- drivers/mmc/core/sd_ops.h | 1 + .../mtd/nand/raw/cadence-nand-controller.c | 2 +- drivers/net/bonding/bond_main.c | 21 +- drivers/net/caif/caif_serial.c | 5 +- drivers/net/ethernet/ec_bhf.c | 2 +- drivers/net/ethernet/intel/i40e/i40e_main.c | 8 +- .../net/ethernet/marvell/octeontx2/af/rvu.c | 11 + .../ethernet/marvell/octeontx2/af/rvu_nix.c | 12 +- drivers/net/ethernet/marvell/skge.c | 1 - .../net/ethernet/myricom/myri10ge/myri10ge.c | 28 ++- .../ethernet/pensando/ionic/ionic_ethtool.c | 7 +- drivers/net/ethernet/ti/cpsw_new.c | 12 +- drivers/net/macvlan.c | 5 + drivers/net/usb/Kconfig | 1 - drivers/net/usb/catc.c | 59 ++++- drivers/net/usb/kaweth.c | 2 - drivers/net/usb/lan78xx.c | 115 ++++++--- drivers/net/usb/pegasus.c | 35 ++- drivers/net/usb/r8152.c | 2 + drivers/net/usb/sr9700.c | 25 +- drivers/net/usb/sr9700.h | 7 +- drivers/net/wan/farsync.c | 2 + drivers/net/wan/fsl_ucc_hdlc.c | 8 +- drivers/net/wireless/ath/ath10k/sdio.c | 6 + drivers/net/wireless/ath/ath10k/wmi.c | 4 +- drivers/net/wireless/intel/ipw2x00/ipw2200.c | 8 +- .../net/wireless/intel/iwlegacy/3945-mac.c | 2 + .../net/wireless/intel/iwlegacy/4965-mac.c | 2 + .../net/wireless/marvell/libertas/if_usb.c | 2 + drivers/net/xen-netback/xenbus.c | 5 +- drivers/nfc/nxp-nci/i2c.c | 2 +- drivers/ntb/hw/mscc/ntb_hw_switchtec.c | 12 +- drivers/ntb/ntb_transport.c | 4 +- drivers/nvdimm/nd_virtio.c | 3 +- drivers/nvdimm/virtio_pmem.c | 1 + drivers/nvdimm/virtio_pmem.h | 4 + drivers/pci/controller/pcie-mediatek.c | 4 +- drivers/pci/iov.c | 9 +- drivers/pci/pci-driver.c | 8 + drivers/pci/pci.c | 37 +-- drivers/pci/pci.h | 1 + drivers/pci/pcie/portdrv_core.c | 6 +- drivers/pci/probe.c | 35 ++- drivers/pci/quirks.c | 23 ++ drivers/phy/freescale/phy-fsl-imx8mq-usb.c | 1 + drivers/pinctrl/pinctrl-equilibrium.c | 1 + drivers/pinctrl/pinctrl-single.c | 2 + drivers/platform/chrome/cros_ec_lightbar.c | 2 +- drivers/power/reset/nvmem-reboot-mode.c | 15 +- drivers/power/supply/act8945a_charger.c | 16 +- drivers/power/supply/bq25980_charger.c | 12 +- drivers/power/supply/bq27xxx_battery.c | 6 +- drivers/power/supply/cpcap-battery.c | 8 +- drivers/power/supply/goldfish_battery.c | 12 +- drivers/power/supply/rt9455_charger.c | 17 +- drivers/power/supply/sbs-battery.c | 36 +-- drivers/power/supply/wm97xx_battery.c | 69 +++--- drivers/rapidio/rio-scan.c | 3 +- drivers/regulator/core.c | 68 +++--- drivers/rpmsg/rpmsg_core.c | 66 +++-- drivers/rtc/interface.c | 2 +- drivers/s390/cio/css.c | 2 +- drivers/scsi/csiostor/csio_scsi.c | 3 +- drivers/soc/qcom/cmd-db.c | 7 +- drivers/soc/ti/k3-socinfo.c | 2 +- drivers/soc/ti/pruss.c | 6 +- drivers/spi/spi-mem.c | 11 +- drivers/staging/greybus/light.c | 8 +- drivers/tty/serial/8250/8250_dw.c | 11 +- drivers/tty/serial/8250/8250_omap.c | 2 +- drivers/tty/serial/Kconfig | 8 +- drivers/usb/dwc2/core.c | 1 + drivers/usb/gadget/udc/bdc/bdc_core.c | 4 +- drivers/usb/gadget/udc/tegra-xudc.c | 12 +- drivers/video/fbdev/au1200fb.c | 6 +- drivers/video/fbdev/ffb.c | 14 +- drivers/video/fbdev/vt8500lcdfb.c | 5 +- drivers/video/of_display_timing.c | 4 +- drivers/watchdog/it87_wdt.c | 12 + drivers/xen/xenbus/xenbus_probe_frontend.c | 4 +- fs/btrfs/extent-tree.c | 2 +- fs/btrfs/qgroup.c | 15 +- fs/ceph/file.c | 17 +- fs/ext4/extents.c | 9 +- fs/fat/namei_msdos.c | 7 +- fs/fat/namei_vfat.c | 7 +- fs/fs_struct.c | 1 + fs/gfs2/bmap.c | 227 +++++++----------- fs/gfs2/bmap.h | 13 +- fs/gfs2/dir.c | 13 +- fs/gfs2/file.c | 59 ++++- fs/gfs2/log.c | 6 +- fs/gfs2/quota.c | 4 +- fs/gfs2/recovery.c | 4 +- fs/hfsplus/bnode.c | 2 +- fs/hfsplus/inode.c | 12 +- fs/hfsplus/super.c | 6 + fs/iomap/direct-io.c | 10 +- fs/jfs/jfs_logmgr.c | 1 + fs/jfs/namei.c | 6 +- fs/minix/inode.c | 50 ++-- fs/nfs/pnfs.c | 3 +- fs/nfsd/nfs4idmap.c | 52 +++- fs/nfsd/nfs4proc.c | 2 - fs/nfsd/nfs4xdr.c | 16 ++ fs/ocfs2/xattr.c | 4 + fs/overlayfs/readdir.c | 2 +- fs/proc/array.c | 2 +- fs/pstore/ram_core.c | 18 ++ fs/xfs/libxfs/xfs_attr_leaf.c | 49 +++- fs/xfs/scrub/attr.c | 5 +- fs/xfs/scrub/btree.c | 2 + fs/xfs/scrub/common.c | 4 + fs/xfs/scrub/dabtree.c | 2 + include/acpi/ghes.h | 1 + include/asm-generic/audit_change_attr.h | 3 + include/asm-generic/audit_read.h | 6 + include/drm/drm_of.h | 3 + include/linux/clk.h | 48 ++-- include/linux/cper.h | 3 +- include/linux/i3c/master.h | 1 - include/linux/mfd/wm8350/core.h | 2 +- include/linux/mmc/host.h | 7 + include/linux/pm.h | 80 +++--- include/linux/regulator/driver.h | 2 +- include/linux/rtsx_pci.h | 23 ++ include/linux/sunrpc/svc_rdma.h | 2 + include/linux/wm97xx.h | 1 - include/media/dvb_vb2.h | 6 +- include/net/bluetooth/l2cap.h | 2 + include/net/ipv6.h | 11 +- include/net/netfilter/nf_conntrack_count.h | 1 + include/rdma/ib_verbs.h | 2 +- include/rdma/rw.h | 2 + include/uapi/linux/hyperv.h | 2 +- include/uapi/linux/netfilter_bridge.h | 4 + include/uapi/linux/vbox_vmmdev_types.h | 4 +- kernel/bpf/verifier.c | 18 +- kernel/kexec_file.c | 131 +++++----- kernel/sched/rt.c | 5 + kernel/time/hrtimer.c | 2 +- kernel/trace/trace_events.c | 5 - kernel/ucount.c | 2 +- mm/page_alloc.c | 14 ++ net/atm/signaling.c | 56 ++++- net/bluetooth/hci_conn.c | 4 +- net/bluetooth/l2cap_core.c | 95 ++++++-- net/core/dev.c | 23 +- net/ipv4/fib_lookup.h | 6 +- net/ipv4/fib_trie.c | 4 +- net/ipv4/tcp.c | 3 + net/ipv6/xfrm6_policy.c | 7 +- net/netfilter/nf_conncount.c | 54 +++-- net/netfilter/nf_conntrack_h323_asn1.c | 2 +- net/netfilter/nf_conntrack_h323_main.c | 10 +- net/netfilter/nf_conntrack_proto_generic.c | 1 + net/netfilter/nft_connlimit.c | 7 +- net/netfilter/nft_set_hash.c | 9 +- net/netfilter/nft_set_rbtree.c | 30 ++- net/netfilter/xt_tcpmss.c | 2 +- net/rds/connection.c | 4 + net/rds/send.c | 6 +- net/rds/tcp_listen.c | 5 - net/sunrpc/auth_gss/auth_gss.c | 3 + net/sunrpc/auth_gss/gss_rpc_xdr.c | 82 +++++-- net/sunrpc/xprtrdma/svc_rdma_recvfrom.c | 89 ++++--- net/sunrpc/xprtrdma/svc_rdma_transport.c | 46 ++-- net/tipc/crypto.c | 2 +- net/vmw_vsock/vmci_transport.c | 2 +- net/wireless/core.c | 4 +- net/wireless/wext-compat.c | 2 +- scripts/mod/modpost.c | 4 + security/apparmor/apparmorfs.c | 9 + security/apparmor/net.c | 6 +- security/apparmor/resource.c | 5 + security/smack/smackfs.c | 79 +++--- sound/soc/codecs/es8328.c | 10 +- sound/soc/codecs/wm8962.c | 12 +- tools/perf/util/evsel_fprintf.c | 8 +- tools/power/cpupower/lib/cpuidle.c | 1 + tools/spi/.gitignore | 1 + .../drivers/net/mlxsw/tc_restrictions.sh | 4 +- .../selftests/net/forwarding/tc_actions.sh | 18 +- .../net/forwarding/vxlan_bridge_1d.sh | 26 +- .../selftests/vm/charge_reserved_hugetlb.sh | 4 +- 324 files changed, 2762 insertions(+), 1391 deletions(-) -- 2.51.0

5 days, 11 hours

本業そのまま。社員1人で年商1億

by 石嶋紗季

　新規事業をお探しの経営者様・事業オーナー様へ　〜“仕入れた瞬間に利益が確定する” 　　ユニークなビジネスモデルをご存じでしょうか〜　買取大吉だけの買取システムをご紹介する　30分セミナーのご案内です。　　　この事業は、今いる社員1人で、1日5人の来店なのに　売上1億超を狙えます。　　在庫リスクをほぼゼロに抑えて　スタートできるため、　業界未経験でも成功の再現性が高いモデルです。　　ぜひこの機会に買取ビジネスの　儲けのカラクリをご確認ください。 ------------------------------- FCオンライン説明会 ------ 　全国1,700店舗突破！10年間の店舗継続率96.4％　　　　 “買取専門”だからこそ可能になる　　　　低リスク × 高収益のビジネスモデル　　　　　　＜視聴予約はこちら＞　　　https://fc-daikichi-kaitori.biz/26/ 　提供：株式会社エンパワー（買取大吉FC本部）　日程：　3月27日（金）14:00-14:30　残り4枠　　　　　4月16日（木）14:00-14:30 　　　　　4月23日（木）14:00-14:30 　　　　　※内容は同じです。 --------------------------------------------------------- 　◇ 説明会コンテンツ　・仕入れた瞬間に利益確定の仕組み　・リサイクル店との“本質的な違い” 　・未経験でも査定できる仕組み　・メルカリ、ヤフオクとの競争優位性　・新規事業としての収益性／リスク／継続性　◇ 在庫・価格変動・資金不足の“三大リスク”を排除　一般的なリユース事業は、仕入れ後、販売まで在庫を抱えるため、　　・在庫リスク　　・価格変動リスク　　・資金不足リスク　この3つが避けられません。　　しかし、買取大吉の“買取専門”モデルはここを完全に断ち切ることで　「買い取り＝利益確定」が成立します。　少人数・小スペースで成立するため、　全国1,700店舗まで拡大する、高い収益性と継続性を実証しています。　◇ 市場は伸び続け、しかし店舗は不足しています　リユース市場は拡大を続けていますが、　その需要に対して店舗数が追いついていないのが現状です。　今回の説明会では、儲けのカラクリ・収益性・リスク構造・継続性について　オーナー視点で実例に基づいて解説いたします。　　新規事業の立ち上げをご検討中の方は、　ぜひご視聴ください。　　▼ 詳細はこちら　https://fc-daikichi-kaitori.biz/26/ 　 ━━━━━━━━━━━━━━━━━━━━━━ フランチャイズセミナー運営事務局電話：0120-889-859 住所：東京都中央区銀座7-13-6 ━━━━━━━━━━━━━━━━━━━━━━ 今後ご案内が不要な方は下記にてお手続きをお願いいたします。 https://fc-daikichi-kaitori.biz/mail/ ━━━━━━━━━━━━━━━━━━━━━━

5 days, 22 hours

[PATCH 6.6 000/567] 6.6.130-rc1 review

by Greg Kroah-Hartman

This is the start of the stable review cycle for the 6.6.130 release. There are 567 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know. Responses should be made by Wed, 25 Mar 2026 13:44:33 +0000. Anything received after that time might be too late. The whole patch series can be found in one patch at: https://www.kernel.org/pub/linux/kernel/v6.x/stable-review/patch-6.6.130-rc… or in the git tree and branch at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-6.6.y and the diffstat can be found below. thanks, greg k-h ------------- Pseudo-Shortlog of commits: Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> Linux 6.6.130-rc1 Josh Law <objecting(a)objecting.org> tools/bootconfig: fix fd leak in load_xbc_file() on fstat failure Josh Law <objecting(a)objecting.org> lib/bootconfig: check xbc_init_node() return in override path Rahul Bukte <rahul.bukte(a)sony.com> drm/i915/gt: Check set_default_submission() before deferencing Hyunwoo Kim <imv4bel(a)gmail.com> ksmbd: fix use-after-free in durable v2 replay of active file handles Hyunwoo Kim <imv4bel(a)gmail.com> ksmbd: fix use-after-free of share_conf in compound request Srinivasan Shanmugam <srinivasan.shanmugam(a)amd.com> drm/amd/display: Fix DisplayID not-found handling in parse_edid_displayid_vrr() Kamal Dasu <kamal.dasu(a)broadcom.com> mtd: rawnand: brcmnand: skip DMA during panic write Kamal Dasu <kamal.dasu(a)broadcom.com> mtd: rawnand: serialize lock/unlock against other NAND operations Johan Hovold <johan(a)kernel.org> i2c: cp2615: fix serial string NULL-deref at probe Justin Stitt <justinstitt(a)google.com> i2c: cp2615: replace deprecated strncpy with strscpy Florian Westphal <fw(a)strlen.de> netfilter: nft_set_pipapo: split gc into unlink and reclaim phase Kyle Meyer <kyle.meyer(a)hpe.com> x86/platform/uv: Handle deconfigured sockets Gabor Juhos <j4g8y7(a)gmail.com> i2c: pxa: defer reset on Armada 3700 when recovery is used Christophe JAILLET <christophe.jaillet(a)wanadoo.fr> i2c: fsi: Fix a potential leak in fsi_i2c_probe() Ji-Ze Hong (Peter Hong) <peter_hong(a)fintek.com.tw> USB: serial: f81232: fix incomplete serial port generation Luiz Augusto von Dentz <luiz.von.dentz(a)intel.com> Bluetooth: L2CAP: Fix accepting multiple L2CAP_ECRED_CONN_REQ Maarten Lankhorst <dev(a)lankhorst.se> drm: Fix use-after-free on framebuffers and property blobs when calling drm_dev_unplug Sanman Pradhan <psanman(a)juniper.net> hwmon: (pmbus/isl68137) Fix unchecked return value and use sysfs_emit() Sanman Pradhan <psanman(a)juniper.net> hwmon: (pmbus/mp2975) Add error check for pmbus_read_word_data() return value Weiming Shi <bestswngs(a)gmail.com> icmp: fix NULL pointer dereference in icmp_tag_validation() Anas Iqbal <mohd.abd.6602(a)gmail.com> net: dsa: bcm_sf2: fix missing clk_disable_unprepare() in error paths Muhammad Hammad Ijaz <mhijaz(a)amazon.com> net: mvpp2: guard flow control update with global_tx_fc in buffer switching Weiming Shi <bestswngs(a)gmail.com> nfnetlink_osf: validate individual option lengths in fingerprints Pablo Neira Ayuso <pablo(a)netfilter.org> netfilter: nf_tables: release flowtable after rcu grace period on error Florian Westphal <fw(a)strlen.de> netfilter: bpf: defer hook memory release until rcu readers are done Xiang Mei <xmei5(a)asu.edu> net: bonding: fix NULL deref in bond_debug_rlb_hash_show Xiang Mei <xmei5(a)asu.edu> udp_tunnel: fix NULL deref caused by udp_sock_create6 when CONFIG_IPV6=n Jianbo Liu <jianbol(a)nvidia.com> net/mlx5e: Fix race condition during IPSec ESN update Jianbo Liu <jianbol(a)nvidia.com> net/mlx5e: Prevent concurrent access to IPSec ASO context Cosmin Ratiu <cratiu(a)nvidia.com> net/mlx5: qos: Restrict RTNL area to avoid a lock cycle Fedor Pchelkin <pchelkin(a)ispras.ru> net: macb: fix uninitialized rx_fs_lock Rafael J. Wysocki <rafael.j.wysocki(a)intel.com> ACPI: processor: Fix previous acpi_processor_errata_piix4() fix Guenter Roeck <linux(a)roeck-us.net> wifi: wlcore: Return -ENOMEM instead of -EAGAIN if there is not enough headroom Xiang Mei <xmei5(a)asu.edu> wifi: mac80211: fix NULL deref in mesh_matches_local() Petr Oros <poros(a)redhat.com> iavf: fix VLAN filter lost on add/delete race Kohei Enju <kohei(a)enjuk.jp> igc: fix missing update of skb->tail in igc_xmit_frame() Nikola Z. Ivanov <zlatistiv(a)gmail.com> net: usb: aqc111: Do not perform PM inside suspend callback Daniel Borkmann <daniel(a)iogearbox.net> clsact: Fix use-after-free in init/destroy rollback asymmetry Tobi Gaertner <tob.gaertner(a)me.com> net: usb: cdc_ncm: add ndpoffset to NDP32 nframes bounds check Tobi Gaertner <tob.gaertner(a)me.com> net: usb: cdc_ncm: add ndpoffset to NDP16 nframes bounds check Jamal Hadi Salim <jhs(a)mojatatu.com> net/sched: teql: Fix double-free in teql_master_xmit Jiayuan Chen <jiayuan.chen(a)shopee.com> net/smc: fix NULL dereference and UAF in smc_tcp_syn_recv_sock() Bart Van Assche <bvanassche(a)acm.org> PM: runtime: Fix a race condition related to device removal Rafael J. Wysocki <rafael.j.wysocki(a)intel.com> sched: idle: Consolidate the handling of two special cases Dipayaan Roy <dipayanroy(a)linux.microsoft.com> net: mana: fix use-after-free in mana_hwc_destroy_channel() by reordering teardown Justin Chen <justin.chen(a)broadcom.com> net: bcmgenet: increase WoL poll timeout Jenny Guanni Qu <qguanni(a)gmail.com> netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() Jenny Guanni Qu <qguanni(a)gmail.com> netfilter: xt_time: use unsigned int for monthday bit shift Pablo Neira Ayuso <pablo(a)netfilter.org> netfilter: xt_CT: drop pending enqueued packets on template removal Pablo Neira Ayuso <pablo(a)netfilter.org> netfilter: nft_ct: drop pending enqueued packets on removal Andrii Melnychenko <a.melnychenko(a)vyos.io> netfilter: nft_ct: add seqadj extension for natted connections Jenny Guanni Qu <qguanni(a)gmail.com> netfilter: nf_conntrack_h323: fix OOB read in decode_int() CONS case Lukas Johannes Möller <research(a)johannes-moeller.dev> netfilter: nf_conntrack_sip: fix Content-Length u32 truncation in sip_help_tcp() Hyunwoo Kim <imv4bel(a)gmail.com> netfilter: ctnetlink: fix use-after-free in ctnetlink_dump_exp_ct() Florian Westphal <fw(a)strlen.de> netfilter: ctnetlink: remove refcounting in expectation dumpers Sabrina Dubroca <sd(a)queasysnail.net> mpls: add missing unregister_netdevice_notifier to mpls_init Jiayuan Chen <jiayuan.chen(a)shopee.com> net/rose: fix NULL pointer dereference in rose_transmit_link on reconnect Dmitry Baryshkov <dmitry.baryshkov(a)oss.qualcomm.com> Bluetooth: qca: fix ROM version reading on WCN3998 chips Shaurya Rane <ssrane_b23(a)ee.vjti.ac.in> Bluetooth: L2CAP: Fix use-after-free in l2cap_unregister_user Luiz Augusto von Dentz <luiz.von.dentz(a)intel.com> Bluetooth: HIDP: Fix possible UAF Michael Grzeschik <m.grzeschik(a)pengutronix.de> Bluetooth: hci_sync: Fix hci_le_create_conn_sync Luiz Augusto von Dentz <luiz.von.dentz(a)intel.com> Bluetooth: ISO: Fix defer tests being unstable Christian Eggers <ceggers(a)arri.de> Bluetooth: SMP: make SM/PER/KDU/BI-04-C happy Christian Eggers <ceggers(a)arri.de> Bluetooth: LE L2CAP: Disconnect if sum of payload sizes exceed SDU Christian Eggers <ceggers(a)arri.de> Bluetooth: LE L2CAP: Disconnect if received packet's SDU exceeds IMTU Felix Gu <ustc.gu(a)gmail.com> firmware: arm_scpi: Fix device_node reference leak in probe path Peddolla Harshavardhan Reddy <peddolla.reddy(a)oss.qualcomm.com> wifi: cfg80211: cancel pmsr_free_wk in cfg80211_pmsr_wdev_down Kuniyuki Iwashima <kuniyu(a)google.com> wifi: mac80211: Fix static_branch_dec() underflow for aql_disable. Richard Genoud <richard.genoud(a)bootlin.com> soc: fsl: qbman: fix race condition in qman_destroy_fq Felix Gu <ustc.gu(a)gmail.com> cache: ax45mp: Fix device node reference leak in ax45mp_cache_init() ZhengYuan Huang <gality369(a)gmail.com> btrfs: tree-checker: fix misleading root drop_level error message Filipe Manana <fdmanana(a)suse.com> btrfs: log new dentries when logging parent dir of a conflicting inode Xi Ruoyao <xry111(a)xry111.site> drm/amd/display: Wrap dcn32_override_min_req_memclk() in DC_FP_{START, END} Alex Deucher <alexander.deucher(a)amd.com> drm/amdgpu: apply state adjust rules to some additional HAINAN vairants Alex Deucher <alexander.deucher(a)amd.com> drm/radeon: apply state adjust rules to some additional HAINAN vairants Alex Deucher <alexander.deucher(a)amd.com> drm/amdgpu/mmhub3.0: add bounds checking for cid Alex Deucher <alexander.deucher(a)amd.com> drm/amdgpu/mmhub3.0.2: add bounds checking for cid Alex Deucher <alexander.deucher(a)amd.com> drm/amdgpu/mmhub3.0.1: add bounds checking for cid Alex Deucher <alexander.deucher(a)amd.com> drm/amdgpu/mmhub2.3: add bounds checking for cid Alex Deucher <alexander.deucher(a)amd.com> drm/amdgpu/mmhub2.0: add bounds checking for cid Alex Deucher <alexander.deucher(a)amd.com> drm/amdgpu/gmc9.0: add bounds checking for cid Maciej Andrzejewski ICEYE <maciej.andrzejewski(a)m-works.net> serial: uartlite: fix PM runtime usage count underflow on probe Ilpo Järvinen <ilpo.jarvinen(a)linux.intel.com> serial: 8250: Add late synchronize_irq() to shutdown to handle DW UART BUSY Raul E Rangel <rrangel(a)chromium.org> serial: 8250: Fix TX deadlock when using DMA Martin Roukala (né Peres) <martin.roukala(a)mupuf.org> serial: 8250_pci: add support for the AX99100 Guanghui Feng <guanghuifeng(a)linux.alibaba.com> iommu/vt-d: Fix intel iommu iotlb sync hardlockup and retry Finn Thain <fthain(a)linux-m68k.org> mtd: Avoid boot crash in RedBoot partition table parser Chen Ni <nichen(a)iscas.ac.cn> mtd: rawnand: cadence: Fix error check for dma_alloc_coherent() in cadence_nand_init() Olivier Sobrie <olivier(a)sobrie.be> mtd: rawnand: pl353: make sure optimal timings are applied Johan Hovold <johan(a)kernel.org> spi: fix statistics allocation Johan Hovold <johan(a)kernel.org> spi: fix use-after-free on controller registration failure Maíra Canal <mcanal(a)igalia.com> pmdomain: bcm: bcm2835-power: Increase ASB control timeout Luke Wang <ziniu.wang_1(a)nxp.com> mmc: sdhci: fix timing selection for 1-bit bus width Matthew Schwartz <matthew.schwartz(a)linux.dev> mmc: sdhci-pci-gli: fix GL9750 DMA write corruption Kevin Hao <haokexin(a)gmail.com> net: macb: Reinitialize tx/rx queue pointer registers and rx ring during resume Kevin Hao <haokexin(a)gmail.com> net: macb: Introduce gem_init_rx_ring() Vineeth Karumanchi <vineeth.karumanchi(a)amd.com> net: macb: queue tie-off or disable during WOL suspend Jeff Layton <jlayton(a)kernel.org> nfsd: fix heap overflow in NFSv4.0 LOCK replay cache Yang Yang <n05ec(a)lzu.edu.cn> batman-adv: avoid OGM aggregation when skb tailroom is insufficient Antoniu Miclaus <antoniu.miclaus(a)analog.com> iio: light: bh1780: fix PM runtime leak on error path Filipe Manana <fdmanana(a)suse.com> btrfs: fix transaction abort on file creation due to name hash collision Filipe Manana <fdmanana(a)suse.com> btrfs: fix transaction abort on set received ioctl due to item overflow Filipe Manana <fdmanana(a)suse.com> btrfs: fix transaction abort when snapshotting received subvolumes Masami Hiramatsu (Google) <mhiramat(a)kernel.org> kprobes: Remove unneeded warnings from __arm_kprobe_ftrace() Masami Hiramatsu (Google) <mhiramat(a)kernel.org> kprobes: Remove unneeded goto Namjae Jeon <linkinjeon(a)kernel.org> ksmbd: unset conn->binding on failed binding request Paulo Alcantara <pc(a)manguebit.org> smb: client: fix krb5 mount with username option Lukas Johannes Möller <research(a)johannes-moeller.dev> Bluetooth: L2CAP: Validate L2CAP_INFO_RSP payload length before access Lukas Johannes Möller <research(a)johannes-moeller.dev> Bluetooth: L2CAP: Fix type confusion in l2cap_ecred_reconf_rsp() Helge Deller <deller(a)gmx.de> parisc: Flush correct cache in cacheflush() syscall Fedor Pchelkin <pchelkin(a)ispras.ru> net: macb: fix use-after-free access to PTP clock Ian Ray <ian.ray(a)gehealthcare.com> NFC: nxp-nci: allow GPIOs to sleep Tiezhu Yang <yangtiezhu(a)loongson.cn> LoongArch: Give more information if kmem access failed Ira Weiny <ira.weiny(a)intel.com> nvdimm/bus: Fix potential use after free in asynchronous initialization Jeff Layton <jlayton(a)kernel.org> sunrpc: fix cache_request leak in cache_release Chuck Lever <chuck.lever(a)oracle.com> NFSD: Hold net reference for the lifetime of /proc/fs/nfs/exports fd Jens Axboe <axboe(a)kernel.dk> io_uring/kbuf: check if target buffer list is still legacy on recycle David Hildenbrand (Arm) <david(a)kernel.org> mm/mempolicy: fix wrong mmap_read_unlock() in migrate_to_node() Harald Freudenberger <freude(a)linux.ibm.com> s390/zcrypt: Enable AUTOSEL_DOM for CCA serialnr sysfs attribute Heiko Carstens <hca(a)linux.ibm.com> s390/stackleak: Fix __stackleak_poison() inline assembly constraint Heiko Carstens <hca(a)linux.ibm.com> s390/xor: Fix xor_xc_2() inline assembly constraints Matthieu Baerts (NGI0) <matttbe(a)kernel.org> mptcp: pm: in-kernel: always set ID as avail when rm endp Russell King (Oracle) <rmk+kernel(a)armlinux.org.uk> net: stmmac: remove support for lpi_intr_o Zilin Guan <zilin(a)seu.edu.cn> binfmt_misc: restore write access before closing files opened by open_exec() Vincent Guittot <vincent.guittot(a)linaro.org> sched/fair: Fix pelt clock sync when entering idle Chao Yu <chao(a)kernel.org> f2fs: zone: fix to avoid inconsistence in between SIT and SSA Zqiang <qiang.zhang1211(a)gmail.com> rcu/nocb: Fix possible invalid rdp's->nocb_cb_kthread pointer access Antheas Kapenekakis <lkml(a)antheas.dev> platform/x86/amd/pmc: Add support for Van Gogh SoC Oleg Nesterov <oleg(a)redhat.com> x86/uprobes: Fix XOL allocation failure for 32-bit tasks Eric Dumazet <edumazet(a)google.com> net: use dst_dev_rcu() in sk_setup_caps() Eric Dumazet <edumazet(a)google.com> net: dst: introduce dst->dev_rcu Eric Dumazet <edumazet(a)google.com> net: dst: add four helpers to annotate data-races around dst->dev Jeongjun Park <aha310510(a)gmail.com> drm/exynos: vidi: use ctx->lock to protect struct vidi_context member variables related to memory alloc/free Jeongjun Park <aha310510(a)gmail.com> drm/exynos: vidi: fix to avoid directly dereferencing user pointer Jeongjun Park <aha310510(a)gmail.com> drm/exynos: vidi: use priv->vidi_dev for ctx lookup in vidi_connection_ioctl() Lijo Lazar <lijo.lazar(a)amd.com> drm/amdgpu: Add basic validation for RAS header Eric Dumazet <edumazet(a)google.com> l2tp: do not use sock_hold() in pppol2tp_session_get_sock() Timur Kristóf <timur.kristof(a)gmail.com> drm/amd/pm: Use pm_display_cfg in legacy DPM (v2) Timur Kristóf <timur.kristof(a)gmail.com> drm/amd/display: Add pixel_clock to amd_pp_display_configuration Vladimir Oltean <vladimir.oltean(a)nxp.com> net: dsa: properly keep track of conduit reference Paul Chaignon <paul.chaignon(a)gmail.com> bpf: Forget ranges when refining tnum after JSET Jibin Zhang <jibin.zhang(a)mediatek.com> net: fix segmentation of forwarding fraglist GRO Felix Fietkau <nbd(a)nbd.name> net: gso: fix tcp fraglist segmentation after pull from frag_list Felix Fietkau <nbd(a)nbd.name> net: add support for segmenting TCP fraglist GSO packets Steven Rostedt <rostedt(a)goodmis.org> tracing: Add recursion protection in kernel stack trace recording Guodong Xu <guodong(a)riscstar.com> dmaengine: mmp_pdma: Fix race condition in mmp_pdma_residue() Lukas Gerlach <lukas.gerlach(a)cispa.de> riscv: Sanitize syscall table indexing under speculation Qu Wenruo <wqu(a)suse.com> btrfs: do not strictly require dirty metadata threshold for metadata writepages Christoph Hellwig <hch(a)lst.de> iomap: allocate s_dio_done_wq for async reads as well David Howells <dhowells(a)redhat.com> rxrpc: Fix data-race warning and potential load/store tearing Tom Lendacky <thomas.lendacky(a)amd.com> x86/sev: Check for MWAITX and MONITORX opcodes in the #VC handler Borislav Petkov (AMD) <bp(a)alien8.de> x86/sev: Harden #VC instruction emulation somewhat Eric Dumazet <edumazet(a)google.com> ipv6: use RCU in ip6_xmit() Mikulas Patocka <mpatocka(a)redhat.com> dm-verity: disable recursive forward error correction David Howells <dhowells(a)redhat.com> rxrpc: Fix recvmsg() unconditional requeue Jan Kara <jack(a)suse.cz> ext4: always allocate blocks only from groups inode can use Jakub Kicinski <kuba(a)kernel.org> eth: bnxt: always recalculate features after XDP clearing, fix null-deref Bjorn Andersson <quic_bjorande(a)quicinc.com> usb: typec: ucsi: Move unregister out of atomic section Trond Myklebust <trond.myklebust(a)hammerspace.com> pNFS: Fix a deadlock when returning a delegation during open() Trond Myklebust <trond.myklebust(a)hammerspace.com> NFS: Fix a deadlock involving nfs_release_folio() Christoph Hellwig <hch(a)lst.de> nfs: pass explicit offset/count to trace events Eric Dumazet <edumazet(a)google.com> dst: fix races in rt6_uncached_list_del() and rt_del_uncached_list() Miquel Sabaté Solà <mssola(a)mssola.com> btrfs: fix NULL dereference on root when tracing inode eviction Ryan Roberts <ryan.roberts(a)arm.com> arm64: mm: Don't remap pgtables for allocate vs populate Ryan Roberts <ryan.roberts(a)arm.com> arm64: mm: Batch dsb and isb when populating pgtables Ryan Roberts <ryan.roberts(a)arm.com> arm64: mm: Don't remap pgtables per-cont(pte|pmd) block Huacai Chen <chenhuacai(a)kernel.org> net: stmmac: dwmac-loongson: Set clk_csr_i to 100-150MHz Qu Wenruo <wqu(a)suse.com> btrfs: always fallback to buffered write if the inode requires checksum Brian Foster <bfoster(a)redhat.com> ext4: fix dirtyclusters double decrement on fs shutdown Chao Yu <chao(a)kernel.org> f2fs: fix to avoid migrating empty section Eric Biggers <ebiggers(a)kernel.org> net/tcp-md5: Fix MAC comparison to be constant-time Eric Biggers <ebiggers(a)kernel.org> ksmbd: Compare MACs in constant time Eric Biggers <ebiggers(a)kernel.org> smb: client: Compare MACs in constant time Long Li <leo.lilong(a)huawei.com> xfs: ensure dquot item is deleted from AIL only after log shutdown Long Li <leo.lilong(a)huawei.com> xfs: fix integer overflow in bmap intent sort comparator Thorsten Blum <thorsten.blum(a)linux.dev> crypto: atmel-sha204a - Fix OOM ->tfm_count leak Shyam Prasad N <sprasad(a)microsoft.com> cifs: open files should not hold ref on superblock Kevin Hao <haokexin(a)gmail.com> net: macb: Shuffle the tx ring before enabling tx Luca Ceresoli <luca.ceresoli(a)bootlin.com> drm/bridge: ti-sn65dsi83: halve horizontal syncs for dual LVDS output Thomas Fourier <fourier.thomas(a)gmail.com> drm/msm: Fix dma_free_attrs() buffer size Thorsten Blum <thorsten.blum(a)linux.dev> ksmbd: Don't log keys in SMB3 signing and encryption key generation Darrick J. Wong <djwong(a)kernel.org> iomap: reject delalloc mappings during writeback Alexander Potapenko <glider(a)google.com> mm/kfence: fix KASAN hardware tag faults during late enablement Sean Christopherson <seanjc(a)google.com> KVM: SVM: Set/clear CR8 write interception when AVIC is (de)activated Naveen N Rao <naveen(a)kernel.org> KVM: SVM: Add a helper to look up the max physical ID for AVIC Naveen N Rao <naveen(a)kernel.org> KVM: SVM: Limit AVIC physical max index based on configured max_vcpu_ids Jiasheng Jiang <jiashengjiangcool(a)gmail.com> usb: gadget: f_tcm: Fix NULL pointer dereferences in nexus handling Marc Kleine-Budde <mkl(a)pengutronix.de> can: gs_usb: gs_can_open(): always configure bitrates before starting device Paul Moses <p(a)1g4.org> net/sched: act_gate: snapshot parameters with RCU on replace Nathan Chancellor <nathan(a)kernel.org> kbuild: Leave objtool binary around with 'make clean' Matthieu Baerts (NGI0) <matttbe(a)kernel.org> selftests: mptcp: join: check RM_ADDR not sent over same subflow Gang Yan <yangang(a)kylinos.cn> selftests: mptcp: add a check for 'add_addr_accepted' Matthieu Baerts (NGI0) <matttbe(a)kernel.org> mptcp: pm: in-kernel: always mark signal+subflow endp as used Matthieu Baerts (NGI0) <matttbe(a)kernel.org> mptcp: pm: avoid sending RM_ADDR over same subflow Natalie Vock <natalie.vock(a)gmx.de> drm/amd/display: Use GFP_ATOMIC in dc_create_stream_for_sink Andrew Lunn <andrew(a)lunn.ch> net: phy: register phy led_triggers during probe to avoid AB-BA deadlock Ankit Garg <nktgrg(a)google.com> gve: fix incorrect buffer cleanup in gve_tx_clean_pending_packets for QPL Kim Phillips <kim.phillips(a)amd.com> x86/sev: Allow IBPB-on-Entry feature for SNP guests Mario Limonciello <mario.limonciello(a)amd.com> platform/x86: hp-bioscfg: Support allocations of larger data Daniel Hodges <git(a)danielhodges.dev> wifi: libertas: fix use-after-free in lbs_free_adapter() Fedor Pchelkin <pchelkin(a)ispras.ru> ksmbd: call ksmbd_vfs_kern_path_end_removing() on some error paths Ankit Garg <nktgrg(a)google.com> gve: defer interrupt enabling until NAPI registration John Ripple <john.ripple(a)keysight.com> drm/bridge: ti-sn65dsi86: Add support for DisplayPort mode with HPD Adrian Hunter <adrian.hunter(a)intel.com> i3c: mipi-i3c-hci: Add missing TID field to no-op command descriptor Adrian Hunter <adrian.hunter(a)intel.com> i3c: mipi-i3c-hci: Restart DMA ring correctly after dequeue abort Adrian Hunter <adrian.hunter(a)intel.com> i3c: mipi-i3c-hci: Use ETIMEDOUT instead of ETIME for timeout errors Jean-Baptiste Maneyrol <jean-baptiste.maneyrol(a)tdk.com> iio: imu: inv_icm42600: fix odr switch to the same value Antoniu Miclaus <antoniu.miclaus(a)analog.com> iio: gyro: mpu3050-i2c: fix pm_runtime error handling Antoniu Miclaus <antoniu.miclaus(a)analog.com> iio: gyro: mpu3050-core: fix pm_runtime error handling Nuno Sá <nuno.sa(a)analog.com> iio: buffer: Fix wait_queue not being removed Chris Spencer <spencercw(a)gmail.com> iio: chemical: bme680: Fix measurement wait duration calculation Lukas Schmid <lukas.schmid(a)netcube.li> iio: potentiometer: mcp4131: fix double application of wiper shift Antoniu Miclaus <antoniu.miclaus(a)analog.com> iio: chemical: sps30_i2c: fix buffer size in sps30_i2c_read_meas() Antoniu Miclaus <antoniu.miclaus(a)analog.com> iio: chemical: sps30_serial: fix buffer size in sps30_serial_read_meas() SeungJu Cheon <suunj1331(a)gmail.com> iio: frequency: adf4377: Fix duplicated soft reset mask Oleksij Rempel <o.rempel(a)pengutronix.de> iio: dac: ds4424: reject -128 RAW value Filipe Manana <fdmanana(a)suse.com> btrfs: abort transaction on failure to update root in the received subvol ioctl Henrique Carvalho <henrique.carvalho(a)suse.com> smb: client: fix iface port assignment in parse_server_interfaces Bharath SM <bharathsm(a)microsoft.com> smb: client: fix in-place encryption corruption in SMB2_write() Paulo Alcantara <pc(a)manguebit.org> smb: client: fix atomic open with O_DIRECT & O_SYNC Josh Law <objecting(a)objecting.org> lib/bootconfig: check bounds before writing in __xbc_open_brace() Josh Law <objecting(a)objecting.org> lib/bootconfig: fix snprintf truncation check in xbc_node_compose_key_after() Shashank Balaji <shashank.mahadasyam(a)sony.com> x86/apic: Disable x2apic on resume if the kernel expects so Junxiao Bi <junxiao.bi(a)oracle.com> scsi: core: Fix error handling for scsi_alloc_sdev() Josh Law <objecting(a)objecting.org> lib/bootconfig: fix off-by-one in xbc_verify_tree() unclosed brace error Stefan Haberland <sth(a)linux.ibm.com> s390/dasd: Copy detected format information to secondary device Stefan Haberland <sth(a)linux.ibm.com> s390/dasd: Move quiesce state with pprc swap Darrick J. Wong <djwong(a)kernel.org> xfs: fix undersized l_iclog_roundoff values Shyam Prasad N <sprasad(a)microsoft.com> cifs: make default value of retrans as zero Calvin Owens <calvin(a)wbinvd.org> tracing: Fix trace_buf_size= cmdline parameter with sizes >= 2G Janusz Krzysztofik <janusz.krzysztofik(a)linux.intel.com> drm/i915: Fix potential overflow of shmem scatterlist length Luca Ceresoli <luca.ceresoli(a)bootlin.com> drm/bridge: ti-sn65dsi83: fix CHA_DSI_CLK_RANGE rounding Mario Limonciello <mario.limonciello(a)amd.com> drm/amd: Set num IP blocks to 0 if discovery fails Alysa Liu <Alysa.Liu(a)amd.com> drm/amdgpu: Fix use-after-free race in VM acquire Bastien Curutchet (Schneider Electric) <bastien.curutchet(a)bootlin.com> net: dsa: microchip: Fix error path in PTP IRQ setup Fan Wu <fanwu01(a)zju.edu.cn> net: ethernet: arc: emac: quiesce interrupts before requesting IRQ Jian Zhang <zhangjian.3032(a)bytedance.com> net: ncsi: fix skb leak in error paths Namjae Jeon <linkinjeon(a)kernel.org> ksmbd: fix use-after-free by using call_rcu() for oplock_info Marios Makassikis <mmakassikis(a)freebox.fr> smb: server: fix use-after-free in smb2_open() Namjae Jeon <linkinjeon(a)kernel.org> ksmbd: fix use-after-free in smb_lazy_parent_lease_break_close() Maíra Canal <mcanal(a)igalia.com> pmdomain: bcm: bcm2835-power: Fix broken reset status read Helge Deller <deller(a)gmx.de> parisc: Check kernel mapping earlier at bootup Helge Deller <deller(a)gmx.de> parisc: Fix initial page table creation for boot Sanman Pradhan <psanman(a)juniper.net> hwmon: (pmbus/q54sj108a2) fix stack overflow in debugfs read Catalin Marinas <catalin.marinas(a)arm.com> arm64: mm: Add PTE_DIRTY back to PAGE_KERNEL* to fix kexec/hibernation Dave Airlie <airlied(a)redhat.com> nouveau/dpcd: return EBUSY for aux xfer if the device is asleep Helge Deller <deller(a)gmx.de> parisc: Increase initial mapping to 64 MB with KALLSYMS Sven Eckelmann <sven(a)narfation.org> batman-adv: Avoid double-rtnl_lock ELP metric worker Huiwen He <hehuiwen(a)kylinos.cn> tracing: Fix syscall events activation by ensuring refcount hits zero Jakub Staniszewski <jakub.staniszewski(a)linux.intel.com> ice: fix retry for AQ command 0x06EE Long Li <longli(a)microsoft.com> net: mana: Ring doorbell at 4 CQ wraparounds Ariel Silver <arielsilver77(a)gmail.com> media: dvb-net: fix OOB access in ULE extension header tables Luka Gejak <luka.gejak(a)linux.dev> staging: rtl8723bs: fix potential out-of-bounds read in rtw_restruct_wmm_ie Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> staging: rtl8723bs: properly validate the data in rtw_get_ie_ex() Jedrzej Jagielski <jedrzej.jagielski(a)intel.com> ixgbevf: fix link setup issue Jakub Staniszewski <jakub.staniszewski(a)linux.intel.com> ice: reintroduce retry mechanism for indirect AQ Marc Zyngier <maz(a)kernel.org> irqchip/gic-v3-its: Limit number of per-device MSIs to the range the ITS supports Andy Shevchenko <andriy.shevchenko(a)linux.intel.com> device property: Allow secondary lookup in fwnode_get_next_child_node() Franz Schnyder <franz.schnyder(a)toradex.com> drm/bridge: ti-sn65dsi86: Enable HPD polling if IRQ is not used Osama Abdelkader <osama.abdelkader(a)gmail.com> drm/bridge: samsung-dsim: Fix memory leak in error path Xu Yang <xu.yang_2(a)nxp.com> Revert "tcpm: allow looking for role_sw device in the main node" Xingui Yang <yangxingui(a)huawei.com> scsi: hisi_sas: Fix NULL pointer exception during user_scan() Yihang Li <liyihang9(a)huawei.com> scsi: hisi_sas: Use macro instead of magic number Xingui Yang <yangxingui(a)huawei.com> scsi: hisi_sas: Add time interval between two H2D FIS following soft reset spec Wang Shuaiwei <wangshuaiwei1(a)xiaomi.com> scsi: ufs: core: Fix SError in ufshcd_rtc_work() during UFS suspend Adrian Ng Ho Yin <adrianhoyin.ng(a)altera.com> i3c: dw-i3c-master: Set SIR_REJECT in DAT on device attach and reattach Steven Rostedt <rostedt(a)goodmis.org> time/jiffies: Mark jiffies_64_to_clock_t() notrace Max Kellermann <max.kellermann(a)ionos.com> ceph: fix memory leaks in ceph_mdsc_build_path() Max Kellermann <max.kellermann(a)ionos.com> ceph: fix i_nlink underrun during async unlink Ilya Dryomov <idryomov(a)gmail.com> libceph: admit message frames only in CEPH_CON_S_OPEN state Raphael Zimmer <raphael.zimmer(a)tu-ilmenau.de> libceph: Use u32 for non-negative values in ceph_monmap_decode() Ilya Dryomov <idryomov(a)gmail.com> libceph: prevent potential out-of-bounds reads in process_message_header() Ilya Dryomov <idryomov(a)gmail.com> libceph: reject preamble if control segment is empty Raphael Zimmer <raphael.zimmer(a)tu-ilmenau.de> libceph: Fix potential out-of-bounds access in ceph_handle_auth_reply() Masami Hiramatsu (Google) <mhiramat(a)kernel.org> kprobes: avoid crash when rmmod/insmod after ftrace killed Mehul Rao <mehulrao(a)gmail.com> tipc: fix divide-by-zero in tipc_sk_filter_connect() Ravi Hothi <ravi.hothi(a)oss.qualcomm.com> ASoC: qcom: qdsp6: Fix q6apm remove ordering during ADSP stop and start Penghe Geng <pgeng(a)nvidia.com> mmc: core: Avoid bitfield RMW for claim/retune flags Alexander Potapenko <glider(a)google.com> mm/kfence: disable KFENCE upon KASAN HW tags enablement Felix Gu <ustc.gu(a)gmail.com> mmc: mmci: Fix device_node reference leak in of_get_dml_pipe_index() Kalesh Singh <kaleshsingh(a)google.com> mm/tracing: rss_stat: ensure curr is false from kthread context Ziyi Guo <n7l8m4(a)u.northwestern.edu> usb: image: mdc800: kill download URB on timeout Oliver Neukum <oneukum(a)suse.com> usb: mdc800: handle signal and read racing Fan Wu <fanwu01(a)zju.edu.cn> usb: renesas_usbhs: fix use-after-free in ISR during device removal Oliver Neukum <oneukum(a)suse.com> usb: class: cdc-wdm: fix reordering issue in read code path Alan Stern <stern(a)rowland.harvard.edu> USB: core: Limit the length of unkillable synchronous timeouts Alan Stern <stern(a)rowland.harvard.edu> USB: usbtmc: Use usb_bulk_msg_killable() with user-specified timeouts Alan Stern <stern(a)rowland.harvard.edu> USB: usbcore: Introduce usb_bulk_msg_killable() Xu Yang <xu.yang_2(a)nxp.com> usb: roles: get usb role switch from parent only for usb-b-connector Marc Zyngier <maz(a)kernel.org> usb: cdc-acm: Restore CAP_BRK functionnality to CH343 Gabor Juhos <j4g8y7(a)gmail.com> usb: core: don't power off roothub PHYs if phy_set_mode() fails Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> usb: misc: uss720: properly clean up reference in uss720_probe() Heikki Krogerus <heikki.krogerus(a)linux.intel.com> usb: dwc3: pci: add support for the Intel Nova Lake -H Oliver Neukum <oneukum(a)suse.com> usb: yurex: fix race in probe Dayu Jiang <jiangdayu(a)xiaomi.com> usb: xhci: Prevent interrupt storm on host controller error (HCE) Zilin Guan <zilin(a)seu.edu.cn> usb: xhci: Fix memory leak in xhci_disable_slot() Vyacheslav Vahnenko <vahnenko2003(a)gmail.com> USB: ezcap401 needs USB_QUIRK_NO_BOS to function on 10gbs usb speed Christoffer Sandberg <cs(a)tuxedo.de> usb/core/quirks: Add Huawei ME906S-device to wakeup quirk A1RM4X <dev(a)a1rm4x.com> USB: add QUIRK_NO_BOS for video capture several devices Sean Christopherson <seanjc(a)google.com> KVM: SVM: Initialize AVIC VMCB fields if AVIC is enabled with in-kernel APIC Zhang Heng <zhangheng(a)kylinos.cn> ASoC: amd: yc: Add DMI quirk for ASUS EXPERTBOOK PM1503CDA Oleksij Rempel <o.rempel(a)pengutronix.de> net: usb: lan78xx: skip LTM configuration for LAN7850 Oleksij Rempel <o.rempel(a)pengutronix.de> net: usb: lan78xx: fix TX byte statistics for small packets Oleksij Rempel <o.rempel(a)pengutronix.de> net: usb: lan78xx: fix silent drop of packets with checksum errors Takashi Iwai <tiwai(a)suse.de> ALSA: usb-audio: Check endpoint numbers at parsing Scarlett2 mixer interfaces Mehul Rao <mehulrao(a)gmail.com> ALSA: pcm: fix use-after-free on linked stream runtime in snd_pcm_drain() Qingye Zhao <zhaoqingye(a)honor.com> cgroup: fix race between task migration and iteration Sasha Levin <sashal(a)kernel.org> Revert "arm64: dts: qcom: sdm845-oneplus: Mark l14a regulator as boot-on" Seungjin Bae <eeodqql09(a)gmail.com> usb: gadget: f_mass_storage: Fix potential integer overflow in check_command_size_in_blocks() Alok Tiwari <alok.a.tiwari(a)oracle.com> octeontx2-af: devlink: fix NIX RAS reporter to use RAS interrupt status Przemek Kitszel <przemyslaw.kitszel(a)intel.com> octeontx2-af: devlink health: use retained error fmsg API Alok Tiwari <alok.a.tiwari(a)oracle.com> octeontx2-af: devlink: fix NIX RAS reporter recovery condition Ricardo B. Marlière <rbm(a)suse.com> net: bonding: Fix nd_tbl NULL dereference when IPv6 is disabled Casey Connolly <casey.connolly(a)linaro.org> ASoC: detect empty DMI strings Chen Ni <nichen(a)iscas.ac.cn> ASoC: amd: acp3x-rt5682-max9836: Add missing error check for clock acquisition Ben Dooks <ben.dooks(a)codethink.co.uk> ACPI: OSL: fix __iomem type on return from acpi_os_map_generic_address() Matt Vollrath <tactii(a)gmail.com> e1000/e1000e: Fix leak in DMA error cleanup Alok Tiwari <alok.a.tiwari(a)oracle.com> i40e: fix src IP mask checks and memcpy argument names in cloud filter Sungwoo Kim <iam(a)sung-woo.kim> nvme-pci: Fix race bug in nvme_poll_irqdisable() Sungwoo Kim <iam(a)sung-woo.kim> nvme-pci: Fix slab-out-of-bounds in nvme_dbbuf_set Rafael J. Wysocki <rafael.j.wysocki(a)intel.com> sched: idle: Make skipping governor callbacks more consistent Peng Fan <peng.fan(a)nxp.com> regulator: pca9450: Correct interrupt type Frieder Schrempf <frieder.schrempf(a)kontron.de> regulator: pca9450: Make IRQ optional Yuan Tan <tanyuan98(a)outlook.com> netfilter: xt_IDLETIMER: reject rev0 reuse of ALARM timer labels Hyunwoo Kim <imv4bel(a)gmail.com> netfilter: nfnetlink_cthelper: fix OOB read in nfnl_cthelper_dump_table() Hyunwoo Kim <imv4bel(a)gmail.com> netfilter: nfnetlink_queue: fix entry leak in bridge verdict error path David Dull <monderasdor(a)gmail.com> netfilter: x_tables: guard option walkers against 1-byte tail reads Jenny Guanni Qu <qguanni(a)gmail.com> netfilter: nft_set_pipapo: fix stack out-of-bounds read in pipapo_drop() Raju Rangoju <Raju.Rangoju(a)amd.com> amd-xgbe: prevent CRC errors during RX adaptation with AN disabled Raju Rangoju <Raju.Rangoju(a)amd.com> amd-xgbe: fix link status handling in xgbe_rx_adaptation Chengfeng Ye <dg573847474(a)gmail.com> mctp: route: hold key->lock in mctp_flow_prepare_output() Wenyuan Li <2063309626(a)qq.com> can: hi311x: hi3110_open(): add check for hi3110_power_enable() return value Haiyue Wang <haiyuewa(a)163.com> mctp: i2c: fix skb memory leak in receive path Shuangpeng Bai <shuangpeng.kernel(a)gmail.com> serial: caif: hold tty->link reference in ldisc_open and ser_release Álvaro Fernández Rojas <noltari(a)gmail.com> net: sfp: improve Huawei MA5671a fixup Chris Morgan <macromorgan(a)hotmail.com> net: sfp: add quirk for Potron SFP+ XGSPON ONU Stick Russell King (Oracle) <rmk+kernel(a)armlinux.org.uk> net: sfp: improve Nokia GPON sfp fixup Russell King (Oracle) <rmk+kernel(a)armlinux.org.uk> net: sfp: re-implement ignoring the hardware TX_FAULT signal Sen Wang <sen(a)ti.com> ASoC: simple-card-utils: fix graph_util_is_ports0() for DT overlays Kuninori Morimoto <kuninori.morimoto.gx(a)renesas.com> ASoC: simple-card-utils: use __free(device_node) for device node matteo.cotifava <cotifavamatteo(a)gmail.com> ASoC: soc-core: flush delayed work before removing DAIs and widgets matteo.cotifava <cotifavamatteo(a)gmail.com> ASoC: soc-core: drop delayed_work_pending() check before flush Weiming Shi <bestswngs(a)gmail.com> net/sched: teql: fix NULL pointer dereference in iptunnel_xmit on TEQL slave xmit Gal Pressman <gal(a)nvidia.com> net/mlx5e: Fix DMA FIFO desync on error CQE SQ recovery Cosmin Ratiu <cratiu(a)nvidia.com> net/mlx5: Fix deadlock between devlink lock and esw->wq Daniel Jurgens <danielj(a)nvidia.com> net/mlx5: Query to see if host PF is disabled Daniel Jurgens <danielj(a)nvidia.com> net/mlx5: IFC updates for disabled host PF Hangbin Liu <liuhangbin(a)gmail.com> bonding: handle BOND_LINK_FAIL, BOND_LINK_BACK as valid link states Pengyu Luo <mitltlatltl(a)gmail.com> drm/msm/dsi: fix pclk rate calculation for bonded dsi Dmitry Baryshkov <dmitry.baryshkov(a)linaro.org> drm/msm/dsi: Document DSC related pclk_rate and hdisplay calculations Mieczyslaw Nalewaj <namiltd(a)yahoo.com> net: dsa: realtek: rtl8365mb: remove ifOutDiscards from rx_packets Eric Badger <ebadger(a)purestorage.com> xprtrdma: Decrement re_receiving on the early exit paths Guenter Roeck <linux(a)roeck-us.net> smb/server: Fix another refcount leak in smb2_open() J. Neuschäfer <j.ne(a)posteo.net> powerpc: 83xx: km83xx: Fix keymile vendor prefix Tzung-Bi Shih <tzungbi(a)kernel.org> remoteproc: mediatek: Unprepare SCP clock during system suspend Bjorn Andersson <bjorn.andersson(a)oss.qualcomm.com> remoteproc: sysmon: Correct subsys_name_len type in QMI request Christophe Leroy (CS GROUP) <chleroy(a)kernel.org> powerpc/uaccess: Fix inline assembly for clang build on PPC32 Takashi Iwai <tiwai(a)suse.de> ALSA: usb-audio: Check max frame size for implicit feedback mode, too Takashi Iwai <tiwai(a)suse.de> ALSA: usb-audio: Avoid implicit feedback mode on DIYINHK USB Audio 2.0 wangshuaiwei <wangshuaiwei1(a)xiaomi.com> scsi: ufs: core: Fix shift out of bounds when MAXQ=32 Peter Wang <peter.wang(a)mediatek.com> scsi: ufs: core: Fix possible NULL pointer dereference in ufshcd_add_command_trace() Charles Keepax <ckeepax(a)opensource.cirrus.com> ASoC: cs42l43: Report insert for exotic peripherals Azamat Almazbek uulu <almazbek1608(a)gmail.com> ASoC: amd: yc: Add ASUS EXPERTBOOK BM1503CDA to quirk table Tomas Henzl <thenzl(a)redhat.com> scsi: ses: Fix devices attaching to different hosts Sofia Schneider <sofia(a)schn.dev> ACPI: OSI: Add DMI quirk for Acer Aspire One D255 Ramanathan Choodamani <quic_rchoodam(a)quicinc.com> wifi: mac80211: set default WMM parameters on all links Al Viro <viro(a)zeniv.linux.org.uk> unshare: fix unshare_fs() handling Ranjan Kumar <ranjan.kumar(a)broadcom.com> scsi: mpi3mr: Add NULL checks when resetting request and reply queues Piotr Mazek <pmazek(a)outlook.com> ACPI: PM: Save NVS memory on Lenovo G70-35 Jan Kiszka <jan.kiszka(a)siemens.com> scsi: storvsc: Fix scheduling while atomic on PREEMPT_RT John Johansen <john.johansen(a)canonical.com> apparmor: fix race between freeing data and fs accessing it John Johansen <john.johansen(a)canonical.com> apparmor: fix race on rawdata dereference John Johansen <john.johansen(a)canonical.com> apparmor: fix differential encoding verification John Johansen <john.johansen(a)canonical.com> apparmor: fix unprivileged local user can do privileged policy management John Johansen <john.johansen(a)canonical.com> apparmor: Fix double free of ns_name in aa_replace_profiles() Massimiliano Pellizzer <massimiliano.pellizzer(a)canonical.com> apparmor: fix missing bounds check on DEFAULT table in verify_dfa() Massimiliano Pellizzer <massimiliano.pellizzer(a)canonical.com> apparmor: fix side-effect bug in match_char() macro usage John Johansen <john.johansen(a)canonical.com> apparmor: fix: limit the number of levels of policy namespaces Massimiliano Pellizzer <massimiliano.pellizzer(a)canonical.com> apparmor: replace recursive profile removal with iterative approach Massimiliano Pellizzer <massimiliano.pellizzer(a)canonical.com> apparmor: fix memory leak in verify_header Massimiliano Pellizzer <massimiliano.pellizzer(a)canonical.com> apparmor: validate DFA start states are in bounds in unpack_pdb Menglong Dong <menglong8.dong(a)gmail.com> net: tcp: accept old ack during closing Victor Nogueira <victor(a)mojatatu.com> net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks Guenter Roeck <linux(a)roeck-us.net> tracing: Add NULL pointer check to trigger_data_free() Yifan Wu <wuyifan50(a)huawei.com> selftest/arm64: Fix sve2p1_sigill() to hwcap test Larysa Zaremba <larysa.zaremba(a)intel.com> xdp: produce a warning when calculated tailroom is negative Larysa Zaremba <larysa.zaremba(a)intel.com> i40e: use xdp.frame_sz as XDP RxQ info frag_size Larysa Zaremba <larysa.zaremba(a)intel.com> i40e: fix registering XDP RxQ info Larysa Zaremba <larysa.zaremba(a)intel.com> xsk: introduce helper to determine rxq->frag_size Larysa Zaremba <larysa.zaremba(a)intel.com> xdp: use modulo operation to calculate XDP frag tailroom Jamal Hadi Salim <jhs(a)mojatatu.com> net/sched: act_ife: Fix metalist update behavior Jiayuan Chen <jiayuan.chen(a)shopee.com> net: ipv6: fix panic when IPv4 route references loopback IPv6 nexthop Fernando Fernandez Mancera <fmancera(a)suse.de> net: vxlan: fix nd_tbl NULL dereference when IPv6 is disabled Fernando Fernandez Mancera <fmancera(a)suse.de> net: bridge: fix nd_tbl NULL dereference when IPv6 is disabled Lorenzo Bianconi <lorenzo(a)kernel.org> net: ethernet: mtk_eth_soc: Reset prog ptr to old_prog in case of error in mtk_xdp_setup() Ovidiu Panait <ovidiu.panait.rb(a)renesas.com> net: stmmac: Fix error handling in VLAN add and delete paths Jakub Kicinski <kuba(a)kernel.org> nfc: rawsock: cancel tx_work before socket teardown Jakub Kicinski <kuba(a)kernel.org> nfc: nci: clear NCI_DATA_EXCHANGE before calling completion callback Jakub Kicinski <kuba(a)kernel.org> nfc: nci: free skb on nci_transceive early error paths Ian Ray <ian.ray(a)gehealthcare.com> net: nfc: nci: Fix zero-length proprietary notifications Koichiro Den <den(a)valinux.co.jp> net: sched: avoid qdisc_reset_all_tx_gt() vs dequeue race for lockless qdiscs Sungwoo Kim <iam(a)sung-woo.kim> nvme: fix memory allocation in nvme_pr_read_keys() Stefan Hajnoczi <stefanha(a)redhat.com> nvme: reject invalid pr_read_keys() num_keys values Yujie Liu <yujie.liu(a)intel.com> drm/sched: Fix kernel-doc warning for drm_sched_job_done() Raju Rangoju <Raju.Rangoju(a)amd.com> amd-xgbe: fix sleep while atomic on suspend/resume Jakub Kicinski <kuba(a)kernel.org> ipv6: fix NULL pointer deref in ip6_rt_get_dev_rcu() ZhangGuoDong <zhangguodong(a)kylinos.cn> smb/client: fix buffer size for smb311_posix_qinfo in SMB311_posix_query_info() ZhangGuoDong <zhangguodong(a)kylinos.cn> smb/client: fix buffer size for smb311_posix_qinfo in smb2_compound_op() Lang Xu <xulang(a)uniontech.com> bpf: Fix a UAF issue in bpf_trampoline_link_cgroup_shim Kui-Feng Lee <thinker.li(a)gmail.com> bpf: export bpf_link_inc_not_zero. David Thomson <dt(a)linux-mail.net> xen/acpi-processor: fix _CST detection using undersized evaluation buffer Allison Henderson <achender(a)kernel.org> net/rds: Fix circular locking dependency in rds_tcp_tune Eric Dumazet <edumazet(a)google.com> indirect_call_wrapper: do not reevaluate function pointer Lorenzo Bianconi <lorenzo(a)kernel.org> wifi: mt76: Fix possible oob access in mt76_connac2_mac_write_txwi_80211() Lorenzo Bianconi <lorenzo(a)kernel.org> wifi: mt76: mt7996: Fix possible oob access in mt7996_mac_write_txwi_80211() Bart Van Assche <bvanassche(a)acm.org> wifi: wlcore: Fix a locking bug Bart Van Assche <bvanassche(a)acm.org> wifi: cw1200: Fix locking in error paths Vimlesh Kumar <vimleshk(a)marvell.com> octeon_ep: avoid compiler and IQ/OQ reordering Vimlesh Kumar <vimleshk(a)marvell.com> octeon_ep: Relocate counter updates before NAPI Jiayuan Chen <jiayuan.chen(a)shopee.com> bpf/bonding: reject vlan+srcmac xmit_hash_policy change when XDP is loaded Mieczyslaw Nalewaj <namiltd(a)yahoo.com> net: dsa: realtek: rtl8365mb: fix rtl8365mb_phy_ocp_write return value Shuvam Pandey <shuvampandey1(a)gmail.com> kunit: tool: copy caller args in run_kernel to prevent mutation Alexandre Courbot <acourbot(a)nvidia.com> rust: kunit: fix warning when !CONFIG_PRINTK Alban Bedel <alban.bedel(a)lht.dlh.de> can: mcp251x: fix deadlock in error path of mcp251x_open Oliver Hartkopp <socketcan(a)hartkopp.net> can: bcm: fix locking for bcm_op runtime updates Raju Rangoju <Raju.Rangoju(a)amd.com> amd-xgbe: fix MAC_TCR_SS register width for 2.5G and 10M speeds Jiayuan Chen <jiayuan.chen(a)shopee.com> atm: lec: fix null-ptr-deref in lec_arp_clear_vccs Guenter Roeck <linux(a)roeck-us.net> dpaa2-switch: Fix interrupt storm after receiving bad if_id in IRQ handler Ioana Ciornei <ioana.ciornei(a)nxp.com> dpaa2-switch: do not clear any interrupts automatically Nikhil P. Rao <nikhil.rao(a)amd.com> xsk: Fix zero-copy AF_XDP fragment drop Nikhil P. Rao <nikhil.rao(a)amd.com> xsk: Fix fragment node deletion to prevent buffer leak Maciej Fijalkowski <maciej.fijalkowski(a)intel.com> xsk: s/free_list_node/list_node/ Maciej Fijalkowski <maciej.fijalkowski(a)intel.com> xsk: Get rid of xdp_buff_xsk::xskb_list_node Chintan Vankar <c-vankar(a)ti.com> net: ethernet: ti: am65-cpsw-nuss/cpsw-ale: Fix multicast entry handling in ALE table Francesco Lavra <flavra(a)baylibre.com> drm/solomon: Fix page start when updating rectangle in page addressing mode Javier Martinez Canillas <javierm(a)redhat.com> drm/ssd130x: Replace .page_height field in device info with a constant Javier Martinez Canillas <javierm(a)redhat.com> drm/ssd130x: Store the HW buffer in the driver-private CRTC state Geert Uytterhoeven <geert(a)linux-m68k.org> drm/ssd130x: Use bool for ssd130x_deviceinfo flags Vitaly Lifshits <vitaly.lifshits(a)intel.com> e1000e: clear DPG_EN after reset to avoid autonomous power-gating Bart Van Assche <bvanassche(a)acm.org> hwmon: (it87) Check the it87_lock() return value Felix Gu <ustc.gu(a)gmail.com> pinctrl: cirrus: cs42l43: Fix double-put in cs42l43_pin_probe() Jonathan Teh <jonathan.teh(a)outlook.com> platform/x86: thinkpad_acpi: Fix errors reading battery thresholds Florian Eckert <fe(a)dev.tdt.de> pinctrl: equilibrium: fix warning trace on load Florian Eckert <fe(a)dev.tdt.de> pinctrl: equilibrium: rename irq_chip function callbacks Hao Yu <haoyufine(a)gmail.com> hwmon: (aht10) Fix initialization commands for AHT20 Akhilesh Patil <akhilesh(a)ee.iitb.ac.in> hwmon: (aht10) Add support for dht20 Thomas Weißschuh <thomas.weissschuh(a)linutronix.de> ARM: clean up the memset64() C wrapper Matthieu Baerts (NGI0) <matttbe(a)kernel.org> selftests: mptcp: join: check removing signal+subflow endp Paolo Abeni <pabeni(a)redhat.com> selftests: mptcp: more stable simult_flows tests Junxiao Bi <junxiao.bi(a)oracle.com> scsi: core: Fix refcount leak for tagset_refcnt Thorsten Blum <thorsten.blum(a)linux.dev> smb: client: Don't log plaintext credentials in cifs_set_cifscreds Paulo Alcantara <pc(a)manguebit.org> smb: client: fix broken multichannel with krb5+signing Henrique Carvalho <henrique.carvalho(a)suse.com> smb: client: fix cifs_pick_channel when channels are equally loaded Christoph Böhmwalder <christoph.boehmwalder(a)linbit.com> drbd: fix null-pointer dereference on local read error Lars Ellenberg <lars.ellenberg(a)linbit.com> drbd: fix "LOGIC BUG" in drbd_al_begin_io_nonblock() Phillip Lougher <phillip(a)squashfs.org.uk> Squashfs: check metadata block offset is within range Prithvi Tambewagh <activprithvi(a)gmail.com> scsi: target: Fix recursive locking in __configfs_open_file() Davide Caratti <dcaratti(a)redhat.com> net/sched: ets: fix divide by zero in the offload path Jason Gunthorpe <jgg(a)ziepe.ca> RDMA/irdma: Fix kernel stack leak in irdma_create_user_ah() Jason Gunthorpe <jgg(a)ziepe.ca> IB/mthca: Add missed mthca_unmap_user_db() for mthca_create_srq() Vahagn Vardanian <vahagn(a)redrays.io> wifi: mac80211: fix NULL pointer dereference in mesh_rx_csa_frame() Ariel Silver <arielsilver77(a)gmail.com> wifi: mac80211: bounds-check link_id in ieee80211_ml_reconfiguration Daniil Dulov <d.dulov(a)aladdin.ru> wifi: cfg80211: cancel rfkill_block work in wiphy_unregister() Johannes Berg <johannes.berg(a)intel.com> wifi: radiotap: reject radiotap with unknown bits Jun Seo <jun.seo.93(a)proton.me> ALSA: usb-audio: Use correct version for UAC3 header validation Kurt Borja <kuurtb(a)gmail.com> platform/x86: dell-wmi: Add audio/mic mute key codes Thorsten Blum <thorsten.blum(a)linux.dev> platform/x86: dell-wmi-sysman: Don't hex dump plaintext password data Mike Rapoport (Microsoft) <rppt(a)kernel.org> x86/efi: defer freeing of boot services memory Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> HID: Add HID_CLAIMED_INPUT guards in raw_event callbacks missing them Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> can: usb: f81604: handle bulk write errors properly Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> can: usb: f81604: handle short interrupt urb messages properly Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> can: usb: etas_es58x: correctly anchor the urb in the read bulk callback Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> can: ucan: Fix infinite loop from zero-length messages Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> can: usb: f81604: correctly anchor the urb in the read bulk callback Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> can: ems_usb: ems_usb_read_bulk_callback(): check the proper length of a message Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> net: usb: pegasus: validate USB endpoints Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> net: usb: kalmia: validate USB endpoints Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> net: usb: kaweth: validate USB endpoints Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> nfc: pn533: properly drop the usb interface reference on disconnect Jens Axboe <axboe(a)kernel.dk> media: dvb-core: fix wrong reinitialization of ringbuffer on reopen Jann Horn <jannh(a)google.com> eventpoll: Fix integer overflow in ep_loop_check_proc() Alex Deucher <alexander.deucher(a)amd.com> drm/amdgpu: keep vga memory on MacBooks with switchable graphics Mario Limonciello <mario.limonciello(a)amd.com> drm/amd: Drop special case for yellow carp without discovery Ethan Nelson-Moore <enelsonmoore(a)gmail.com> net: arcnet: com20020-pci: fix support for 2.5Mbit cards Takashi Iwai <tiwai(a)suse.de> ALSA: hda/conexant: Fix headphone jack handling on Acer Swift SF314 Gui-Dong Han <hanguidong02(a)gmail.com> hwmon: (max16065) Use READ/WRITE_ONCE to avoid compiler optimization induced race Takashi Iwai <tiwai(a)suse.de> ALSA: hda/conexant: Add quirk for HP ZBook Studio G4 Mario Limonciello <mario.limonciello(a)amd.com> drm/amd: Fix hang on amdgpu unload by using pci_dev_is_disconnected() Thomas Richard (TI) <thomas.richard(a)bootlin.com> usb: cdns3: fix role switching during resume Théo Lebrun <theo.lebrun(a)bootlin.com> usb: cdns3: call cdns_power_is_lost() only once in cdns_resume() Hongyu Xie <xiehongyu1(a)kylinos.cn> usb: cdns3: remove redundant if branch Johan Hovold <johan(a)kernel.org> clk: tegra: tegra124-emc: fix device leak on set_rate() Shawn Lin <shawn.lin(a)rock-chips.com> arm64: dts: rockchip: Fix rk356x PCIe range mappings Johan Hovold <johan(a)kernel.org> mfd: omap-usb-host: Fix OF populate on driver rebind Uwe Kleine-König <u.kleine-koenig(a)pengutronix.de> mfd: omap-usb-host: Convert to platform remove callback returning void Johan Hovold <johan(a)kernel.org> mfd: qcom-pm8xxx: Fix OF populate on driver rebind Uwe Kleine-König <u.kleine-koenig(a)pengutronix.de> mfd: qcom-pm8xxx: Convert to platform remove callback returning void Yongjian Sun <sunyongjian1(a)huawei.com> ext4: fix e4b bitmap inconsistency reports Matthew Wilcox (Oracle) <willy(a)infradead.org> ext4: convert bd_buddy_page to bd_buddy_folio Matthew Wilcox (Oracle) <willy(a)infradead.org> ext4: convert bd_bitmap_page to bd_bitmap_folio Gou Hao <gouhao(a)uniontech.com> ext4: delete redundant calculations in ext4_mb_get_buddy_page_lock() Joonwon Kang <joonwonkang(a)google.com> mailbox: Prevent out-of-bounds access in fw_mbox_index_xlate() Anup Patel <apatel(a)ventanamicro.com> mailbox: Allow controller specific mapping using fwnode Peng Fan <peng.fan(a)nxp.com> mailbox: Use guard/scoped_guard for con_mutex Peng Fan <peng.fan(a)nxp.com> mailbox: Use dev_err when there is error Tudor Ambarus <tudor.ambarus(a)linaro.org> mailbox: remove unused header files Tudor Ambarus <tudor.ambarus(a)linaro.org> mailbox: sort headers alphabetically Tudor Ambarus <tudor.ambarus(a)linaro.org> mailbox: don't protect of_parse_phandle_with_args with con_mutex Rob Herring (Arm) <robh(a)kernel.org> mailbox: Use of_property_match_string() instead of open-coding Zhang Yi <yi.zhang(a)huawei.com> ext4: drop extent cache when splitting extent fails Zhang Yi <yi.zhang(a)huawei.com> ext4: drop extent cache after doing PARTIAL_VALID1 zeroout Zhang Yi <yi.zhang(a)huawei.com> ext4: don't set EXT4_GET_BLOCKS_CONVERT when splitting before submitting I/O Yang Erkun <yangerkun(a)huawei.com> ext4: correct the comments place for EXT4_EXT_MAY_ZEROOUT Baokun Li <libaokun1(a)huawei.com> ext4: get rid of ppath in ext4_ext_handle_unwritten_extents() Baokun Li <libaokun1(a)huawei.com> ext4: get rid of ppath in ext4_ext_convert_to_initialized() Baokun Li <libaokun1(a)huawei.com> ext4: get rid of ppath in ext4_convert_unwritten_extents_endio() Baokun Li <libaokun1(a)huawei.com> ext4: get rid of ppath in ext4_split_convert_extents() Baokun Li <libaokun1(a)huawei.com> ext4: get rid of ppath in ext4_split_extent() Zhang Yi <yi.zhang(a)huawei.com> ext4: don't zero the entire extent if EXT4_EXT_DATA_PARTIAL_VALID1 Zhang Yi <yi.zhang(a)huawei.com> ext4: subdivide EXT4_EXT_DATA_VALID1 Baokun Li <libaokun1(a)huawei.com> ext4: get rid of ppath in ext4_split_extent_at() Baokun Li <libaokun1(a)huawei.com> ext4: get rid of ppath in ext4_ext_insert_extent() Baokun Li <libaokun1(a)huawei.com> ext4: get rid of ppath in ext4_ext_create_new_leaf() Baokun Li <libaokun1(a)huawei.com> ext4: get rid of ppath in ext4_find_extent() Johan Hovold <johan(a)kernel.org> bus: omap-ocp2scp: fix OF populate on driver rebind Uwe Kleine-König <u.kleine-koenig(a)pengutronix.de> bus: omap-ocp2scp: Convert to platform remove callback returning void Johan Hovold <johan(a)kernel.org> drm/tegra: dsi: fix device leak on probe Sean Christopherson <seanjc(a)google.com> KVM: x86: Ignore -EBUSY when checking nested events from vcpu_block() Sean Christopherson <seanjc(a)google.com> KVM: x86: WARN if a vCPU gets a valid wakeup that KVM can't yet inject Zilin Guan <zilin(a)seu.edu.cn> media: tegra-video: Fix memory leak in __tegra_channel_try_format() Laurent Pinchart <laurent.pinchart(a)ideasonboard.com> media: tegra-video: Use accessors for pad config 'try_*' fields Sean Christopherson <seanjc(a)google.com> KVM: x86: Return "unsupported" instead of "invalid" on access to unsupported PV MSR Sean Christopherson <seanjc(a)google.com> KVM: x86: Rename KVM_MSR_RET_INVALID to KVM_MSR_RET_UNSUPPORTED Mathias Krause <minipli(a)grsecurity.net> KVM: x86: Fix KVM_GET_MSRS stack info leak Ilpo Järvinen <ilpo.jarvinen(a)linux.intel.com> PCI: Use resource_set_range() that correctly sets ->end Ilpo Järvinen <ilpo.jarvinen(a)linux.intel.com> resource: Add resource set range and size helpers Puranjay Mohan <puranjay12(a)gmail.com> PCI: Use resource names in PCI log messages Puranjay Mohan <puranjay12(a)gmail.com> PCI: Update BAR # and window messages Johan Hovold <johan(a)kernel.org> memory: mtk-smi: fix device leak on larb probe Johan Hovold <johan(a)kernel.org> memory: mtk-smi: fix device leaks on common probe Uwe Kleine-König <u.kleine-koenig(a)pengutronix.de> memory: mtk-smi: Convert to platform remove callback returning void Bjorn Helgaas <bhelgaas(a)google.com> PCI: Correct PCI_CAP_EXP_ENDPOINT_SIZEOF_V2 value Kohei Enju <kohei(a)enjuk.jp> bpf: Fix stack-out-of-bounds write in devmap Mark Harmstone <mark(a)harmstone.com> btrfs: fix compat mask in error messages in btrfs_check_features() Mark Harmstone <mark(a)harmstone.com> btrfs: fix warning in scrub_verify_one_metadata() Mark Harmstone <mark(a)harmstone.com> btrfs: fix objectid value in error message in check_extent_data_ref() Mark Harmstone <mark(a)harmstone.com> btrfs: fix incorrect key offset in error message in check_dev_extent_item() Johannes Thumshirn <johannes.thumshirn(a)wdc.com> btrfs: add support for inserting raid stripe extents Johannes Thumshirn <johannes.thumshirn(a)wdc.com> btrfs: read raid stripe tree from disk Johannes Thumshirn <johannes.thumshirn(a)wdc.com> btrfs: add raid stripe tree definitions Josef Bacik <josef(a)toxicpanda.com> btrfs: move btrfs_extref_hash into inode-item.h Josef Bacik <josef(a)toxicpanda.com> btrfs: remove btrfs_crc32c wrapper Josef Bacik <josef(a)toxicpanda.com> btrfs: move btrfs_crc32c_final into free-space-cache.c Richard Fitzgerald <rf(a)opensource.cirrus.com> ALSA: hda: cs35l56: Fix signedness error in cs35l56_hda_posture_put() Kuninori Morimoto <kuninori.morimoto.gx(a)renesas.com> ALSA: pci: hda: use snd_kcontrol_chip() Peter Zijlstra <peterz(a)infradead.org> perf: Fix __perf_event_overflow() vs perf_remove_from_context() race Takashi Iwai <tiwai(a)suse.de> ALSA: usb-audio: Use inclusive terms Takashi Iwai <tiwai(a)suse.de> ALSA: usb-audio: Cap the packet size pre-calculations Peter Wang <peter.wang(a)mediatek.com> scsi: ufs: core: Move link recovery for hibern8 exit failure to wl_resume Mathieu Desnoyers <mathieu.desnoyers(a)efficios.com> rseq: Clarify rseq registration rseq_size bound check comment Geoffrey D. Bennett <g(a)b4.vu> ALSA: usb-audio: Remove VALIDATE_RATES quirk for Focusrite devices Salomon Dushimirimana <salomondush(a)google.com> scsi: pm8001: Fix use-after-free in pm8001_queue_command() Mathias Krause <minipli(a)grsecurity.net> scsi: lpfc: Properly set WC for DPP mapping Nam Cao <namcao(a)linutronix.de> irqchip/sifive-plic: Fix frozen interrupt due to affinity setting Felix Gu <ustc.gu(a)gmail.com> drm/logicvc: Fix device node reference leak in logicvc_drm_config_parse() Ian Forbes <ian.forbes(a)broadcom.com> drm/vmwgfx: Return the correct value in vmw_translate_ptr functions Brad Spengler <brad.spengler(a)opensrcsec.com> drm/vmwgfx: Fix invalid kref_put callback in vmw_bo_dirty_release ------------- Diffstat: Documentation/hwmon/aht10.rst | 10 +- Makefile | 12 +- arch/arm/include/asm/string.h | 14 +- .../arm64/boot/dts/qcom/sdm845-oneplus-common.dtsi | 1 - arch/arm64/boot/dts/rockchip/rk3568.dtsi | 4 +- arch/arm64/boot/dts/rockchip/rk356x.dtsi | 2 +- arch/arm64/include/asm/pgtable-prot.h | 10 +- arch/arm64/include/asm/pgtable.h | 7 +- arch/arm64/mm/mmu.c | 92 ++-- arch/loongarch/include/asm/uaccess.h | 14 +- arch/parisc/include/asm/pgtable.h | 2 +- arch/parisc/kernel/cache.c | 4 +- arch/parisc/kernel/head.S | 7 +- arch/parisc/kernel/setup.c | 20 +- arch/powerpc/include/asm/uaccess.h | 2 +- arch/powerpc/platforms/83xx/km83xx.c | 4 +- arch/riscv/kernel/traps.c | 5 +- arch/s390/include/asm/processor.h | 2 +- arch/s390/lib/xor.c | 4 +- arch/x86/boot/compressed/sev.c | 5 + arch/x86/include/asm/efi.h | 2 +- arch/x86/include/asm/msr-index.h | 5 +- arch/x86/kernel/apic/apic.c | 6 + arch/x86/kernel/apic/x2apic_uv_x.c | 18 +- arch/x86/kernel/sev-shared.c | 104 +++- arch/x86/kernel/sev.c | 5 +- arch/x86/kernel/uprobes.c | 24 + arch/x86/kvm/svm/avic.c | 30 +- arch/x86/kvm/svm/svm.c | 11 +- arch/x86/kvm/vmx/vmx.c | 2 +- arch/x86/kvm/x86.c | 69 ++- arch/x86/kvm/x86.h | 15 +- arch/x86/platform/efi/efi.c | 2 +- arch/x86/platform/efi/quirks.c | 55 ++- drivers/acpi/acpi_processor.c | 15 +- drivers/acpi/osi.c | 13 + drivers/acpi/osl.c | 2 +- drivers/acpi/sleep.c | 8 + drivers/base/power/runtime.c | 1 + drivers/base/property.c | 27 +- drivers/block/drbd/drbd_actlog.c | 53 +- drivers/block/drbd/drbd_interval.h | 5 +- drivers/block/drbd/drbd_req.c | 3 +- drivers/bluetooth/btqca.c | 2 + drivers/bus/omap-ocp2scp.c | 19 +- drivers/cache/ax45mp_cache.c | 4 +- drivers/clk/tegra/clk-tegra124-emc.c | 2 +- drivers/cpuidle/cpuidle.c | 10 - drivers/crypto/atmel-sha204a.c | 5 +- drivers/dma/mmp_pdma.c | 6 + drivers/firmware/arm_scpi.c | 5 +- drivers/firmware/efi/mokvar-table.c | 2 +- drivers/gpu/drm/amd/amdgpu/amdgpu_amdkfd_gpuvm.c | 6 +- drivers/gpu/drm/amd/amdgpu/amdgpu_device.c | 8 +- drivers/gpu/drm/amd/amdgpu/amdgpu_gmc.c | 14 +- drivers/gpu/drm/amd/amdgpu/amdgpu_kms.c | 2 +- drivers/gpu/drm/amd/amdgpu/amdgpu_ras_eeprom.c | 20 +- drivers/gpu/drm/amd/amdgpu/gmc_v9_0.c | 21 +- drivers/gpu/drm/amd/amdgpu/mmhub_v2_0.c | 9 +- drivers/gpu/drm/amd/amdgpu/mmhub_v2_3.c | 3 +- drivers/gpu/drm/amd/amdgpu/mmhub_v3_0.c | 3 +- drivers/gpu/drm/amd/amdgpu/mmhub_v3_0_1.c | 3 +- drivers/gpu/drm/amd/amdgpu/mmhub_v3_0_2.c | 3 +- drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm.c | 4 +- .../drm/amd/display/amdgpu_dm/amdgpu_dm_pp_smu.c | 1 + .../amd/display/dc/clk_mgr/dce110/dce110_clk_mgr.c | 2 +- drivers/gpu/drm/amd/display/dc/core/dc_stream.c | 2 +- .../gpu/drm/amd/display/dc/dcn32/dcn32_resource.c | 2 + drivers/gpu/drm/amd/display/dc/dm_services_types.h | 2 +- drivers/gpu/drm/amd/include/dm_pp_interface.h | 1 + drivers/gpu/drm/amd/pm/amdgpu_dpm_internal.c | 67 +++ drivers/gpu/drm/amd/pm/inc/amdgpu_dpm_internal.h | 2 + drivers/gpu/drm/amd/pm/legacy-dpm/kv_dpm.c | 4 +- drivers/gpu/drm/amd/pm/legacy-dpm/legacy_dpm.c | 6 +- drivers/gpu/drm/amd/pm/legacy-dpm/si_dpm.c | 69 +-- drivers/gpu/drm/amd/pm/powerplay/amd_powerplay.c | 11 +- drivers/gpu/drm/bridge/samsung-dsim.c | 25 +- drivers/gpu/drm/bridge/ti-sn65dsi83.c | 13 +- drivers/gpu/drm/bridge/ti-sn65dsi86.c | 118 ++++- drivers/gpu/drm/drm_file.c | 5 +- drivers/gpu/drm/drm_mode_config.c | 9 +- drivers/gpu/drm/exynos/exynos_drm_drv.h | 1 + drivers/gpu/drm/exynos/exynos_drm_vidi.c | 72 ++- drivers/gpu/drm/i915/gem/i915_gem_shmem.c | 12 +- drivers/gpu/drm/i915/gt/intel_engine_cs.c | 3 +- drivers/gpu/drm/logicvc/logicvc_drm.c | 4 +- drivers/gpu/drm/msm/dsi/dsi_host.c | 62 ++- drivers/gpu/drm/msm/msm_gpummu.c | 2 +- drivers/gpu/drm/nouveau/nouveau_connector.c | 3 + drivers/gpu/drm/radeon/si_dpm.c | 4 +- drivers/gpu/drm/scheduler/sched_main.c | 1 + drivers/gpu/drm/solomon/ssd130x.c | 186 +++++-- drivers/gpu/drm/solomon/ssd130x.h | 5 +- drivers/gpu/drm/tegra/dsi.c | 6 +- drivers/gpu/drm/vmwgfx/vmwgfx_execbuf.c | 4 +- drivers/gpu/drm/vmwgfx/vmwgfx_page_dirty.c | 9 +- drivers/hid/hid-cmedia.c | 2 +- drivers/hid/hid-creative-sb0540.c | 2 +- drivers/hid/hid-zydacron.c | 2 +- drivers/hwmon/Kconfig | 6 +- drivers/hwmon/aht10.c | 21 +- drivers/hwmon/it87.c | 5 +- drivers/hwmon/max16065.c | 26 +- drivers/hwmon/pmbus/isl68137.c | 7 +- drivers/hwmon/pmbus/mp2975.c | 2 + drivers/hwmon/pmbus/q54sj108a2.c | 19 +- drivers/i2c/busses/i2c-cp2615.c | 5 +- drivers/i2c/busses/i2c-fsi.c | 1 + drivers/i2c/busses/i2c-pxa.c | 17 +- drivers/i3c/master/dw-i3c-master.c | 4 +- drivers/i3c/master/mipi-i3c-hci/cmd.h | 1 + drivers/i3c/master/mipi-i3c-hci/cmd_v1.c | 2 +- drivers/i3c/master/mipi-i3c-hci/cmd_v2.c | 2 +- drivers/i3c/master/mipi-i3c-hci/core.c | 6 +- drivers/i3c/master/mipi-i3c-hci/dma.c | 4 +- drivers/iio/chemical/bme680_core.c | 2 +- drivers/iio/chemical/sps30_i2c.c | 2 +- drivers/iio/chemical/sps30_serial.c | 2 +- drivers/iio/dac/ds4424.c | 2 +- drivers/iio/frequency/adf4377.c | 2 +- drivers/iio/gyro/mpu3050-core.c | 18 +- drivers/iio/gyro/mpu3050-i2c.c | 3 +- drivers/iio/imu/inv_icm42600/inv_icm42600_accel.c | 2 + drivers/iio/imu/inv_icm42600/inv_icm42600_gyro.c | 2 + drivers/iio/industrialio-buffer.c | 6 +- drivers/iio/light/bh1780.c | 4 +- drivers/iio/potentiometer/mcp4131.c | 2 +- drivers/infiniband/hw/irdma/verbs.c | 2 +- drivers/infiniband/hw/mthca/mthca_provider.c | 5 +- drivers/iommu/intel/dmar.c | 3 +- drivers/irqchip/irq-gic-v3-its.c | 4 + drivers/irqchip/irq-sifive-plic.c | 7 +- drivers/mailbox/mailbox.c | 150 +++--- drivers/md/dm-verity-fec.c | 4 +- drivers/md/dm-verity-fec.h | 3 - drivers/media/dvb-core/dmxdev.c | 4 +- drivers/media/dvb-core/dvb_net.c | 3 + drivers/memory/mtk-smi.c | 13 +- drivers/mfd/omap-usb-host.c | 11 +- drivers/mfd/qcom-pm8xxx.c | 14 +- drivers/mmc/host/mmci_qcom_dml.c | 1 + drivers/mmc/host/sdhci-pci-gli.c | 9 + drivers/mmc/host/sdhci.c | 9 +- drivers/mtd/nand/raw/brcmnand/brcmnand.c | 6 +- drivers/mtd/nand/raw/cadence-nand-controller.c | 2 +- drivers/mtd/nand/raw/nand_base.c | 14 +- drivers/mtd/nand/raw/pl35x-nand-controller.c | 3 + drivers/mtd/parsers/redboot.c | 6 +- drivers/net/arcnet/com20020-pci.c | 16 +- drivers/net/bonding/bond_debugfs.c | 16 +- drivers/net/bonding/bond_main.c | 19 +- drivers/net/bonding/bond_options.c | 2 + drivers/net/caif/caif_serial.c | 3 + drivers/net/can/spi/hi311x.c | 5 +- drivers/net/can/spi/mcp251x.c | 15 +- drivers/net/can/usb/ems_usb.c | 7 +- drivers/net/can/usb/etas_es58x/es58x_core.c | 8 +- drivers/net/can/usb/f81604.c | 45 +- drivers/net/can/usb/gs_usb.c | 22 +- drivers/net/can/usb/ucan.c | 2 +- drivers/net/dsa/bcm_sf2.c | 8 +- drivers/net/dsa/microchip/ksz_ptp.c | 11 +- drivers/net/dsa/realtek/rtl8365mb.c | 5 +- drivers/net/ethernet/amd/xgbe/xgbe-common.h | 2 +- drivers/net/ethernet/amd/xgbe/xgbe-drv.c | 14 +- drivers/net/ethernet/amd/xgbe/xgbe-main.c | 1 - drivers/net/ethernet/amd/xgbe/xgbe-phy-v2.c | 82 +++- drivers/net/ethernet/amd/xgbe/xgbe.h | 7 +- drivers/net/ethernet/arc/emac_main.c | 11 + drivers/net/ethernet/broadcom/bnxt/bnxt.c | 25 +- drivers/net/ethernet/broadcom/bnxt/bnxt.h | 2 +- drivers/net/ethernet/broadcom/bnxt/bnxt_xdp.c | 7 - drivers/net/ethernet/broadcom/genet/bcmgenet_wol.c | 2 +- drivers/net/ethernet/cadence/macb.h | 7 + drivers/net/ethernet/cadence/macb_main.c | 184 ++++++- drivers/net/ethernet/cadence/macb_ptp.c | 4 +- .../net/ethernet/freescale/dpaa2/dpaa2-switch.c | 7 +- drivers/net/ethernet/google/gve/gve.h | 1 + drivers/net/ethernet/google/gve/gve_main.c | 5 +- drivers/net/ethernet/google/gve/gve_tx_dqo.c | 52 +- drivers/net/ethernet/intel/e1000/e1000_main.c | 2 - drivers/net/ethernet/intel/e1000e/defines.h | 1 + drivers/net/ethernet/intel/e1000e/ich8lan.c | 9 + drivers/net/ethernet/intel/e1000e/netdev.c | 2 - drivers/net/ethernet/intel/i40e/i40e_main.c | 41 +- drivers/net/ethernet/intel/i40e/i40e_txrx.c | 5 +- drivers/net/ethernet/intel/i40e/i40e_virtchnl_pf.c | 14 +- drivers/net/ethernet/intel/iavf/iavf_main.c | 9 +- drivers/net/ethernet/intel/ice/ice_common.c | 13 +- drivers/net/ethernet/intel/ice/ice_ethtool.c | 35 +- drivers/net/ethernet/intel/igc/igc_main.c | 7 +- drivers/net/ethernet/intel/ixgbevf/vf.c | 3 +- drivers/net/ethernet/marvell/mvpp2/mvpp2_main.c | 4 +- .../net/ethernet/marvell/octeon_ep/octep_main.c | 48 +- drivers/net/ethernet/marvell/octeon_ep/octep_rx.c | 27 +- .../ethernet/marvell/octeontx2/af/rvu_devlink.c | 468 ++++++------------ drivers/net/ethernet/mediatek/mtk_eth_soc.c | 15 +- .../ethernet/mellanox/mlx5/core/en/reporter_tx.c | 1 - .../ethernet/mellanox/mlx5/core/en_accel/ipsec.h | 1 + .../mellanox/mlx5/core/en_accel/ipsec_offload.c | 52 +- drivers/net/ethernet/mellanox/mlx5/core/esw/qos.c | 23 +- drivers/net/ethernet/mellanox/mlx5/core/eswitch.c | 30 +- drivers/net/ethernet/mellanox/mlx5/core/eswitch.h | 3 + .../ethernet/mellanox/mlx5/core/eswitch_offloads.c | 18 +- drivers/net/ethernet/microsoft/mana/hw_channel.c | 6 +- drivers/net/ethernet/microsoft/mana/mana_en.c | 23 +- drivers/net/ethernet/stmicro/stmmac/common.h | 1 - drivers/net/ethernet/stmicro/stmmac/dwmac-intel.c | 4 - .../net/ethernet/stmicro/stmmac/dwmac-loongson.c | 9 +- drivers/net/ethernet/stmicro/stmmac/stmmac.h | 2 - drivers/net/ethernet/stmicro/stmmac/stmmac_main.c | 54 +-- .../net/ethernet/stmicro/stmmac/stmmac_platform.c | 8 - drivers/net/ethernet/ti/am65-cpsw-nuss.c | 2 +- drivers/net/ethernet/ti/cpsw_ale.c | 9 +- drivers/net/mctp/mctp-i2c.c | 1 + drivers/net/phy/phy_device.c | 25 +- drivers/net/phy/sfp.c | 62 ++- drivers/net/usb/aqc111.c | 12 +- drivers/net/usb/cdc_ncm.c | 10 +- drivers/net/usb/kalmia.c | 7 + drivers/net/usb/kaweth.c | 13 + drivers/net/usb/lan78xx.c | 10 +- drivers/net/usb/lan78xx.h | 3 + drivers/net/usb/pegasus.c | 13 +- drivers/net/vxlan/vxlan_core.c | 5 + drivers/net/wireless/marvell/libertas/main.c | 4 +- .../net/wireless/mediatek/mt76/mt76_connac_mac.c | 1 + drivers/net/wireless/mediatek/mt76/mt7996/mac.c | 1 + drivers/net/wireless/st/cw1200/pm.c | 2 + drivers/net/wireless/ti/wlcore/main.c | 4 +- drivers/net/wireless/ti/wlcore/tx.c | 2 +- drivers/nfc/nxp-nci/i2c.c | 4 +- drivers/nfc/pn533/usb.c | 1 + drivers/nvdimm/bus.c | 5 +- drivers/nvme/host/pci.c | 8 +- drivers/nvme/host/pr.c | 10 +- drivers/pci/iov.c | 7 +- drivers/pci/pci.c | 85 +++- drivers/pci/pci.h | 2 + drivers/pci/probe.c | 32 +- drivers/pci/quirks.c | 15 +- drivers/pci/setup-bus.c | 30 +- drivers/pci/setup-res.c | 72 +-- drivers/pinctrl/cirrus/pinctrl-cs42l43.c | 5 +- drivers/pinctrl/pinctrl-equilibrium.c | 31 +- drivers/platform/x86/amd/pmc/pmc.c | 3 + drivers/platform/x86/amd/pmc/pmc.h | 1 + drivers/platform/x86/dell/dell-wmi-base.c | 6 + .../dell/dell-wmi-sysman/passwordattr-interface.c | 1 - .../platform/x86/hp/hp-bioscfg/enum-attributes.c | 9 +- drivers/platform/x86/thinkpad_acpi.c | 6 +- drivers/pmdomain/bcm/bcm2835-power.c | 18 +- drivers/regulator/pca9450-regulator.c | 41 +- drivers/remoteproc/mtk_scp.c | 39 ++ drivers/remoteproc/qcom_sysmon.c | 2 +- drivers/s390/block/dasd_eckd.c | 16 + drivers/s390/crypto/zcrypt_ccamisc.c | 12 +- drivers/s390/crypto/zcrypt_cex4.c | 3 +- drivers/scsi/hisi_sas/hisi_sas.h | 43 +- drivers/scsi/hisi_sas/hisi_sas_main.c | 42 +- drivers/scsi/hisi_sas/hisi_sas_v3_hw.c | 246 ++++++---- drivers/scsi/lpfc/lpfc_init.c | 2 + drivers/scsi/lpfc/lpfc_sli.c | 36 +- drivers/scsi/lpfc/lpfc_sli4.h | 3 + drivers/scsi/mpi3mr/mpi3mr_fw.c | 32 +- drivers/scsi/pm8001/pm8001_sas.c | 5 +- drivers/scsi/scsi_scan.c | 7 +- drivers/scsi/ses.c | 5 +- drivers/scsi/storvsc_drv.c | 5 +- drivers/soc/fsl/qbman/qman.c | 24 +- drivers/soc/qcom/pmic_glink.c | 10 +- drivers/spi/spi.c | 25 +- drivers/staging/media/tegra-video/vi.c | 27 +- drivers/staging/rtl8723bs/core/rtw_ieee80211.c | 15 +- drivers/staging/rtl8723bs/core/rtw_mlme.c | 5 +- drivers/target/target_core_configfs.c | 15 +- drivers/tty/serial/8250/8250_dma.c | 15 + drivers/tty/serial/8250/8250_pci.c | 17 + drivers/tty/serial/8250/8250_port.c | 6 + drivers/tty/serial/uartlite.c | 1 + drivers/ufs/core/ufshcd.c | 26 +- drivers/usb/cdns3/core.c | 11 +- drivers/usb/class/cdc-acm.c | 5 + drivers/usb/class/cdc-acm.h | 1 + drivers/usb/class/cdc-wdm.c | 4 +- drivers/usb/class/usbtmc.c | 6 +- drivers/usb/core/message.c | 100 +++- drivers/usb/core/phy.c | 8 +- drivers/usb/core/quirks.c | 16 + drivers/usb/dwc3/dwc3-pci.c | 2 + drivers/usb/gadget/function/f_mass_storage.c | 12 +- drivers/usb/gadget/function/f_tcm.c | 14 + drivers/usb/host/xhci-ring.c | 1 + drivers/usb/host/xhci.c | 4 +- drivers/usb/image/mdc800.c | 6 +- drivers/usb/misc/uss720.c | 2 +- drivers/usb/misc/yurex.c | 2 +- drivers/usb/renesas_usbhs/common.c | 9 + drivers/usb/roles/class.c | 7 +- drivers/usb/serial/f81232.c | 77 +-- drivers/usb/typec/tcpm/tcpm.c | 2 +- drivers/usb/typec/ucsi/ucsi_glink.c | 27 +- drivers/xen/xen-acpi-processor.c | 7 +- fs/binfmt_misc.c | 4 +- fs/btrfs/Makefile | 2 +- fs/btrfs/accessors.h | 8 + fs/btrfs/bio.c | 21 + fs/btrfs/block-rsv.c | 6 + fs/btrfs/ctree.h | 19 - fs/btrfs/disk-io.c | 46 +- fs/btrfs/extent-tree.c | 7 +- fs/btrfs/extent_io.c | 3 +- fs/btrfs/extent_io.h | 3 +- fs/btrfs/file.c | 16 + fs/btrfs/free-space-cache.c | 9 +- fs/btrfs/fs.h | 1 + fs/btrfs/inode-item.h | 7 + fs/btrfs/inode.c | 27 +- fs/btrfs/ioctl.c | 24 +- fs/btrfs/locking.c | 1 + fs/btrfs/ordered-data.c | 1 + fs/btrfs/ordered-data.h | 2 + fs/btrfs/raid-stripe-tree.c | 87 ++++ fs/btrfs/raid-stripe-tree.h | 35 ++ fs/btrfs/scrub.c | 2 +- fs/btrfs/send.c | 6 +- fs/btrfs/transaction.c | 16 + fs/btrfs/tree-checker.c | 6 +- fs/btrfs/tree-log.c | 6 + fs/btrfs/uuid-tree.c | 43 ++ fs/btrfs/uuid-tree.h | 2 + fs/btrfs/volumes.c | 4 +- fs/btrfs/volumes.h | 16 +- fs/ceph/dir.c | 15 +- fs/ceph/mds_client.c | 3 + fs/eventpoll.c | 5 +- fs/ext4/ext4.h | 9 +- fs/ext4/extents.c | 536 ++++++++++++--------- fs/ext4/fast_commit.c | 8 +- fs/ext4/mballoc.c | 242 +++++----- fs/ext4/mballoc.h | 4 +- fs/ext4/migrate.c | 5 +- fs/ext4/move_extent.c | 7 +- fs/f2fs/gc.c | 19 +- fs/iomap/buffered-io.c | 15 +- fs/iomap/direct-io.c | 10 +- fs/nfs/file.c | 8 +- fs/nfs/nfs4proc.c | 6 +- fs/nfs/nfstrace.h | 39 +- fs/nfs/pnfs.c | 58 ++- fs/nfs/pnfs.h | 17 +- fs/nfs/read.c | 8 +- fs/nfs/write.c | 43 +- fs/nfsd/nfs4xdr.c | 9 +- fs/nfsd/nfsctl.c | 14 +- fs/nfsd/state.h | 17 +- fs/smb/client/cifsencrypt.c | 3 +- fs/smb/client/cifsfs.c | 7 +- fs/smb/client/cifsglob.h | 11 + fs/smb/client/cifsproto.h | 1 + fs/smb/client/connect.c | 5 +- fs/smb/client/dir.c | 1 + fs/smb/client/file.c | 29 +- fs/smb/client/fs_context.c | 2 +- fs/smb/client/misc.c | 43 ++ fs/smb/client/smb2inode.c | 4 +- fs/smb/client/smb2ops.c | 14 +- fs/smb/client/smb2pdu.c | 29 +- fs/smb/client/smb2transport.c | 4 +- fs/smb/client/trace.h | 2 + fs/smb/client/transport.c | 21 +- fs/smb/server/Kconfig | 1 + fs/smb/server/auth.c | 26 +- fs/smb/server/oplock.c | 35 +- fs/smb/server/oplock.h | 5 +- fs/smb/server/smb2pdu.c | 26 +- fs/squashfs/cache.c | 3 + fs/xfs/xfs_bmap_item.c | 3 +- fs/xfs/xfs_dquot.c | 8 +- fs/xfs/xfs_log.c | 2 + include/linux/bpf.h | 6 + include/linux/indirect_call_wrapper.h | 18 +- include/linux/ioport.h | 32 ++ include/linux/irqchip/arm-gic-v3.h | 1 + include/linux/mailbox_client.h | 2 +- include/linux/mailbox_controller.h | 9 +- include/linux/mlx5/mlx5_ifc.h | 4 +- include/linux/mmc/host.h | 9 +- include/linux/nfs_fs.h | 1 + include/linux/stmmac.h | 1 - include/linux/trace_recursion.h | 9 + include/linux/uprobes.h | 1 + include/linux/usb.h | 8 +- include/net/act_api.h | 1 + include/net/bonding.h | 1 + include/net/dsa.h | 1 + include/net/dst.h | 34 +- include/net/ip.h | 7 +- include/net/ip6_route.h | 2 +- include/net/netfilter/nf_tables.h | 5 + include/net/route.h | 2 +- include/net/sch_generic.h | 43 ++ include/net/tc_act/tc_gate.h | 33 +- include/net/tc_act/tc_ife.h | 4 +- include/net/udp_tunnel.h | 2 +- include/net/xdp_sock_drv.h | 24 +- include/net/xsk_buff_pool.h | 3 +- include/trace/events/btrfs.h | 4 +- include/trace/events/kmem.h | 8 +- include/trace/events/rxrpc.h | 4 + include/uapi/linux/btrfs.h | 1 + include/uapi/linux/btrfs_tree.h | 29 ++ include/uapi/linux/pci_regs.h | 2 +- io_uring/kbuf.c | 8 +- kernel/bpf/devmap.c | 22 +- kernel/bpf/syscall.c | 3 +- kernel/bpf/trampoline.c | 4 +- kernel/bpf/verifier.c | 4 + kernel/cgroup/cgroup.c | 1 + kernel/events/core.c | 42 +- kernel/events/uprobes.c | 10 +- kernel/fork.c | 2 +- kernel/kprobes.c | 51 +- kernel/rcu/tree_nocb.h | 5 +- kernel/rseq.c | 5 +- kernel/sched/fair.c | 6 - kernel/sched/idle.c | 45 +- kernel/time/time.c | 2 +- kernel/trace/trace.c | 12 +- kernel/trace/trace_events.c | 52 +- kernel/trace/trace_events_trigger.c | 3 + lib/bootconfig.c | 9 +- mm/kfence/core.c | 29 +- mm/mempolicy.c | 4 +- net/atm/lec.c | 26 +- net/batman-adv/bat_iv_ogm.c | 3 + net/batman-adv/bat_v_elp.c | 10 +- net/batman-adv/hard-interface.c | 8 +- net/batman-adv/hard-interface.h | 1 + net/bluetooth/hci_conn.c | 4 +- net/bluetooth/hci_sync.c | 2 +- net/bluetooth/hidp/core.c | 16 +- net/bluetooth/l2cap_core.c | 51 +- net/bluetooth/smp.c | 2 +- net/bridge/br_device.c | 2 +- net/bridge/br_input.c | 2 +- net/can/bcm.c | 1 + net/ceph/auth.c | 6 +- net/ceph/messenger_v2.c | 31 +- net/ceph/mon_client.c | 6 +- net/core/dst.c | 5 +- net/core/filter.c | 8 +- net/core/sock.c | 16 +- net/dsa/dsa.c | 59 ++- net/ipv4/icmp.c | 4 +- net/ipv4/route.c | 8 +- net/ipv4/tcp.c | 3 +- net/ipv4/tcp_input.c | 18 +- net/ipv4/tcp_ipv4.c | 3 +- net/ipv4/tcp_offload.c | 74 +++ net/ipv4/udp_offload.c | 3 +- net/ipv6/ip6_output.c | 35 +- net/ipv6/route.c | 15 +- net/ipv6/tcp_ipv6.c | 3 +- net/ipv6/tcpv6_offload.c | 65 +++ net/l2tp/l2tp_ppp.c | 25 +- net/mac80211/debugfs.c | 14 +- net/mac80211/link.c | 2 + net/mac80211/mesh.c | 6 + net/mac80211/mlme.c | 3 + net/mctp/route.c | 13 +- net/mpls/af_mpls.c | 1 + net/mptcp/pm.c | 2 +- net/mptcp/pm_netlink.c | 72 ++- net/mptcp/protocol.h | 2 + net/ncsi/ncsi-aen.c | 3 +- net/ncsi/ncsi-rsp.c | 16 +- net/netfilter/nf_bpf_link.c | 2 +- net/netfilter/nf_conntrack_h323_asn1.c | 4 + net/netfilter/nf_conntrack_netlink.c | 67 ++- net/netfilter/nf_conntrack_sip.c | 6 +- net/netfilter/nf_tables_api.c | 6 +- net/netfilter/nfnetlink_cthelper.c | 8 +- net/netfilter/nfnetlink_osf.c | 13 + net/netfilter/nfnetlink_queue.c | 4 +- net/netfilter/nft_ct.c | 9 + net/netfilter/nft_set_pipapo.c | 54 ++- net/netfilter/nft_set_pipapo.h | 2 + net/netfilter/xt_CT.c | 4 + net/netfilter/xt_IDLETIMER.c | 6 + net/netfilter/xt_dccp.c | 4 +- net/netfilter/xt_tcpudp.c | 6 +- net/netfilter/xt_time.c | 4 +- net/nfc/nci/core.c | 21 +- net/nfc/nci/data.c | 12 +- net/nfc/rawsock.c | 11 + net/rds/tcp.c | 14 +- net/rose/af_rose.c | 5 + net/rxrpc/ar-internal.h | 9 +- net/rxrpc/conn_event.c | 2 +- net/rxrpc/output.c | 11 +- net/rxrpc/peer_event.c | 17 +- net/rxrpc/proc.c | 4 +- net/rxrpc/recvmsg.c | 19 +- net/rxrpc/rxkad.c | 2 +- net/sched/act_ct.c | 6 + net/sched/act_gate.c | 264 +++++++--- net/sched/act_ife.c | 93 ++-- net/sched/cls_api.c | 7 + net/sched/sch_ets.c | 12 +- net/sched/sch_generic.c | 27 -- net/sched/sch_ingress.c | 14 +- net/sched/sch_teql.c | 8 +- net/smc/af_smc.c | 23 +- net/smc/smc.h | 5 + net/smc/smc_close.c | 2 +- net/sunrpc/cache.c | 26 +- net/sunrpc/xprtrdma/verbs.c | 7 +- net/tipc/socket.c | 2 + net/wireless/core.c | 1 + net/wireless/pmsr.c | 1 + net/wireless/radiotap.c | 4 +- net/xdp/xsk.c | 30 +- net/xdp/xsk_buff_pool.c | 15 +- rust/kernel/kunit.rs | 8 + security/apparmor/apparmorfs.c | 225 +++++---- security/apparmor/include/label.h | 16 +- security/apparmor/include/lib.h | 12 + security/apparmor/include/match.h | 1 + security/apparmor/include/policy.h | 10 +- security/apparmor/include/policy_ns.h | 2 + security/apparmor/include/policy_unpack.h | 83 ++-- security/apparmor/label.c | 12 +- security/apparmor/match.c | 58 ++- security/apparmor/policy.c | 77 ++- security/apparmor/policy_ns.c | 2 + security/apparmor/policy_unpack.c | 65 ++- sound/core/pcm_native.c | 19 +- sound/pci/hda/cs35l56_hda.c | 14 +- sound/pci/hda/patch_conexant.c | 11 + sound/soc/amd/acp3x-rt5682-max9836.c | 9 +- sound/soc/amd/yc/acp6x-mach.c | 14 + sound/soc/codecs/cs42l43-jack.c | 1 + sound/soc/generic/simple-card-utils.c | 48 +- sound/soc/qcom/qdsp6/q6apm-dai.c | 1 + sound/soc/qcom/qdsp6/q6apm-lpass-dais.c | 1 + sound/soc/qcom/qdsp6/q6apm.c | 1 + sound/soc/soc-core.c | 11 +- sound/usb/endpoint.c | 10 +- sound/usb/mixer_scarlett2.c | 2 + sound/usb/quirks.c | 4 +- sound/usb/validate.c | 2 +- tools/bootconfig/main.c | 7 +- tools/objtool/Makefile | 8 +- tools/testing/kunit/kunit_kernel.py | 6 +- tools/testing/kunit/kunit_tool_test.py | 26 + tools/testing/selftests/arm64/abi/hwcap.c | 4 +- tools/testing/selftests/net/mptcp/mptcp_join.sh | 56 +++ tools/testing/selftests/net/mptcp/simult_flows.sh | 11 +- 559 files changed, 6672 insertions(+), 3263 deletions(-)

6 days, 13 hours

Jump to page:

2026

2025

2024

2023

2022

2021

2020

2019

2018

2017

Lkft-triage