Lkft-triage

lkft-triage@lists.linaro.org

36 participants
33162 discussions

by Greg Kroah-Hartman

This is the start of the stable review cycle for the 6.18.44 release. There are 396 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know. Responses should be made by Sun, 09 Aug 2026 14:33:46 +0000. Anything received after that time might be too late. The whole patch series can be found in one patch at: https://www.kernel.org/pub/linux/kernel/v6.x/stable-review/patch-6.18.44-rc… or in the git tree and branch at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-6.18.y and the diffstat can be found below. thanks, greg k-h ------------- Pseudo-Shortlog of commits: Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> Linux 6.18.44-rc1 Thomas Zimmermann <tzimmermann(a)suse.de> drm/tegra: fbdev: Do not assign to struct drm_fb_helper.info Bart Van Assche <bvanassche(a)acm.org> drm/fb-helper: Fix a locking bug in an error path Andrei Kuchynski <akuchynski(a)chromium.org> usb: typec: ucsi: Correct teardown ordering in ucsi_init() error path Oliver Hartkopp <socketcan(a)hartkopp.net> can: isotp: fix timer drain order, wakeup handling and tx_gen ordering Oliver Hartkopp <socketcan(a)hartkopp.net> can: use skb hash instead of private variable in headroom Zongyao Bai <zongyao.bai(a)intel.com> drm/xe/pt: Reset current_op in xe_pt_update_ops_init() Oak Zeng <oak.zeng(a)intel.com> drm/xe: Add page reclamation info to device info Matthew Brost <matthew.brost(a)intel.com> drm/xe: Stub out new pagefault layer Matthew Brost <matthew.brost(a)intel.com> drm/xe: Use SVM range helpers in PT layer Jani Nikula <jani.nikula(a)intel.com> drm/i915/vrr: require valid min/max vfreq for VRR Ville Syrjälä <ville.syrjala(a)linux.intel.com> drm/i915/vrr: Check HAS_VRR() first in intel_vrr_is_capable() Matthew Brost <matthew.brost(a)intel.com> drm/xe: Wait on external BO kernel fences in exec IOCTL Thomas Hellström <thomas.hellstrom(a)linux.intel.com> drm/exec: Remove the index parameter from drm_exec_for_each_locked_obj[_reverse] Himal Prasad Ghimiray <himal.prasad.ghimiray(a)intel.com> drm/xe/vm: Fix BO prefetch with CONSULT_MEM_ADVISE_PREF_LOC Arvind Yadav <arvind.yadav(a)intel.com> drm/xe/vm: Prevent binding of purged buffer objects Arvind Yadav <arvind.yadav(a)intel.com> drm/xe/bo: Add purgeable bo state tracking and field madv to xe_bo Nitin Gote <nitin.r.gote(a)intel.com> drm/xe: add xe_migrate_resolve wrapper and is_vram_resolve support Xin Wang <x.wang(a)intel.com> drm/xe/pat: Add helper to query compression enable status Leo Li <sunpeng.li(a)amd.com> drm/amd/display: Exit idle optimizations before programming Leo Li <sunpeng.li(a)amd.com> drm/amd/display: check GRPH_FLIP status before sending event Tejas Upadhyay <tejas.upadhyay(a)intel.com> drm/xe/guc: Fix buffer overflow in steered register list allocation Timur Kristóf <timur.kristof(a)gmail.com> drm/amdgpu: Respect placement requirements in amdgpu_gtt_mgr functions Tvrtko Ursulin <tvrtko.ursulin(a)igalia.com> drm/amdgpu: Fix context pstate override handling Thomas Zimmermann <tzimmermann(a)suse.de> drm/tegra: fbdev: Remove offset into framebuffer memory Thomas Zimmermann <tzimmermann(a)suse.de> drm/fb-helper: Allocate and release fb_info in single place Mike Rapoport (Microsoft) <rppt(a)kernel.org> userfaultfd: prevent registration of special VMAs Fan Wu <fanwu01(a)zju.edu.cn> wifi: brcmfmac: drain bus_reset work on device removal Niklas Söderlund <niklas.soderlund+renesas(a)ragnatech.se> media: uapi: rkisp: Correct name version enum Bryan O'Donoghue <bryan.odonoghue(a)linaro.org> media: qcom: camss: Fix RDI streaming for CSID 340 Loic Poulain <loic.poulain(a)oss.qualcomm.com> media: qcom: camss: csid-340: Fix unused variables Jackson Lee <jackson.lee(a)chipsnmedia.com> media: chips-media: wave5: Support CBP profile Andrei Kuchynski <akuchynski(a)chromium.org> usb: typec: ucsi: Fix race condition and ordering in port unregistration Sergey Senozhatsky <senozhatsky(a)chromium.org> usb: typec: ucsi: split connector lock classes Chuck Lever <chuck.lever(a)oracle.com> net/handshake: Drain pending requests at net namespace exit Chuck Lever <chuck.lever(a)oracle.com> net/handshake: Close the submit-side sock_hold race Chuck Lever <chuck.lever(a)oracle.com> net/handshake: hand off the pinned file reference to accept_doit Chuck Lever <chuck.lever(a)oracle.com> net/handshake: Take a long-lived file reference at submit Wang Liang <wangliang74(a)huawei.com> net/handshake: Fix null-ptr-deref in handshake_complete() Christian Brauner <brauner(a)kernel.org> net/handshake: convert handshake_nl_accept_doit() to FD_PREPARE() Christian Brauner <brauner(a)kernel.org> file: ensure cleanup Christian Brauner <brauner(a)kernel.org> file: add FD_{ADD,PREPARE}() Kiryl Shutsemau (Meta) <kas(a)kernel.org> mm/huge_memory: unlock i_mmap_rwsem before releasing after-split folios Kiryl Shutsemau (Meta) <kas(a)kernel.org> fs/proc/task_mmu: fix PAGEMAP_SCAN written state for unpopulated ptes Kiryl Shutsemau (Meta) <kas(a)kernel.org> mm/hugetlb: fix swap entry corruption when clearing uffd-wp at fork() Ashutosh Dixit <ashutosh.dixit(a)intel.com> drm/xe/rtp: Ensure locking/ref counting for OA whitelists Ashutosh Dixit <ashutosh.dixit(a)intel.com> drm/xe/oa: (De-)whitelist OA registers on OA stream open/release Ashutosh Dixit <ashutosh.dixit(a)intel.com> drm/xe/rtp: (De-)whitelist OA registers for all hwe's for a gt Ashutosh Dixit <ashutosh.dixit(a)intel.com> drm/xe/rtp: Toggle 'deny' bit to (de-)whitelist OA regs Ashutosh Dixit <ashutosh.dixit(a)intel.com> drm/xe/rtp: Save OA nonpriv registers to register save/restore lists Ashutosh Dixit <ashutosh.dixit(a)intel.com> drm/xe/rtp: Generalize whitelist_apply_to_hwe Ashutosh Dixit <ashutosh.dixit(a)intel.com> drm/xe/rtp: Keep track of non-OA nonpriv slots Ashutosh Dixit <ashutosh.dixit(a)intel.com> drm/xe/rtp: Maintain OA whitelists separately Ashutosh Dixit <ashutosh.dixit(a)intel.com> drm/xe/rtp: Add RING_FORCE_TO_NONPRIV_DENY to OA whitelists Ashutosh Dixit <ashutosh.dixit(a)intel.com> drm/xe/rtp: Refactor OAG MMIO trigger register whitelisting HyeongJun An <sammiee5311(a)gmail.com> HID: logitech-dj: Fix maxfield check in DJ short report validation Jun Guo <jun.guo(a)cixtech.com> spi: spi-cadence: enable SPI_CONTROLLER_MUST_TX Zack Rusin <zack.rusin(a)broadcom.com> drm/vmwgfx: validate external BO copy bounds for both stride paths Zack Rusin <zack.rusin(a)broadcom.com> drm/vmwgfx: use check_add_overflow for shader size+offset bound Zack Rusin <zack.rusin(a)broadcom.com> drm/vmwgfx: enforce cursor size limits for MOB cursors Zack Rusin <zack.rusin(a)broadcom.com> drm/vmwgfx: avoid destroy_workqueue(NULL) on vkms init failure Zack Rusin <zack.rusin(a)broadcom.com> drm/vmwgfx: bound DMA command body size against suffix pointer Zack Rusin <zack.rusin(a)broadcom.com> drm/vmwgfx: validate DRAW_PRIMITIVES header size before division Zack Rusin <zack.rusin(a)broadcom.com> drm/vmwgfx: drop dma_buf reference on foreign-fd prime import Zack Rusin <zack.rusin(a)broadcom.com> drm/vmwgfx: take fman->lock around fence list mutation in fifo_down Zack Rusin <zack.rusin(a)broadcom.com> drm/vmwgfx: clamp dirty-page range with min, not max Zack Rusin <zack.rusin(a)broadcom.com> drm/vmwgfx: reject DX_BIND_QUERY without a DX context Zack Rusin <zack.rusin(a)broadcom.com> drm/vmwgfx: fix guest_memory_dirty bitfield clobbered as size William Palacek <William.Palacek(a)amd.com> drm/amdkfd: hold event_mutex while checkpointing CRIU events David Francis <David.Francis(a)amd.com> drm/amdkfd: Handle invalid event type in CRIU event restore William Palacek <William.Palacek(a)amd.com> drm/amdkfd: fix uint32_t overflow in EOP ring buffer size alignment Vladimir Marioukhine <Vladimir.Marioukhine(a)amd.com> drm/amdkfd: fix QID bit leak in pqm_create_queue() Gang Ba <Gang.Ba(a)amd.com> drm/amdkfd: Fix missing authorization check in KFD_IOC_DBG_TRAP_DISABLE Jiri Slaby (SUSE) <jirislaby(a)kernel.org> drm/amd/display: use proper context for logging Ray Wu <ray.wu(a)amd.com> drm/amd/display: Increase HDMI AV mute wait from 2 to 3 frames Yang Wang <kevinyang.wang(a)amd.com> drm/amd/pm: fix torn gpu metrics reads Harkirat Gill <harkirat.gill(a)amd.com> drm/amdgpu: cap GTT size to physical RAM on APUs Candice Li <candice.li(a)amd.com> drm/amdgpu: restore UMD profile pstate after runtime resume Pierre-Eric Pelloux-Prayer <pierre-eric.pelloux-prayer(a)amd.com> drm/amdgpu: move debug_vm handling to amdgpu_cs_parser_fini Myeonghun Pak <mhun512(a)gmail.com> drm/mediatek: ovl_adaptor: balance component registrations Osama Abdelkader <osama.abdelkader(a)gmail.com> drm/panthor: validate firmware interface structure sizes Osama Abdelkader <osama.abdelkader(a)gmail.com> drm/panthor: reject firmware sections with oversized data Laurent Pinchart <laurent.pinchart+renesas(a)ideasonboard.com> drm/bridge: display-connector: Fix I2C adapter resource leak Maíra Canal <mcanal(a)igalia.com> drm/vc4: Zero the tile state data array before each BIN job Jose Maria Casanova Crespo <jmcasanova(a)igalia.com> drm/vc4: Supply the overflow slot size in BPOS, not the whole bin BO size Alexander Kaplan <alexander.kaplan(a)sms-medipool.de> drm/dp: Read the PCON max FRL bandwidth only for HDMI DFPs Avi Weiss <thnkslprpt(a)gmail.com> can: ctucanfd: mark error-active controller status valid Avi Weiss <thnkslprpt(a)gmail.com> can: ctucanfd: handle bus error interrupts Avi Weiss <thnkslprpt(a)gmail.com> can: ctucanfd: unmap BAR0 using base address Avi Weiss <thnkslprpt(a)gmail.com> can: ctucanfd: use self-test mode for PRESUME_ACK Pengpeng Hou <pengpeng(a)iscas.ac.cn> can: ctucanfd: add missing MODULE_DEVICE_TABLE() Pengpeng Hou <pengpeng(a)iscas.ac.cn> can: peak_usb: validate uCAN receive record lengths Maoyi Xie <maoyixie.tju(a)gmail.com> can: peak_usb: peak_usb_start(): fix double free of transfer buffer on URB submit error James Gao <jamesgao5(a)outlook.com> can: peak_usb: add bounds check for USB channel index Pengpeng Hou <pengpeng(a)iscas.ac.cn> can: softing: fw_parse(): validate firmware record spans Pengpeng Hou <pengpeng(a)iscas.ac.cn> can: kvaser_usb_leaf: kvaser_usb_leaf_wait_cmd(): validate received command extents Abdun Nihaal <nihaal(a)cse.iitm.ac.in> can: kvaser_usb: kvaser_usb_hydra_get_busparams(): fix memory leak in kvaser_usb_hydra_get_busparams() Tetsuo Handa <penguin-kernel(a)I-love.SAKURA.ne.jp> can: j1939: use netdevice_tracker for j1939_{priv,session,ecu} tracking Oleksij Rempel <o.rempel(a)pengutronix.de> can: j1939: transport: j1939_session_fresh_new(): initialize receive buffer Marc Kleine-Budde <mkl(a)pengutronix.de> can: gs_usb: gs_usb_receive_bulk_callback(): resubmit URB on skb allocation failure Guangshuo Li <lgs201920130244(a)gmail.com> can: etas_es58x: es58x_read_bulk_callback(): fix RX buffer leak on URB resubmit failure Pengpeng Hou <pengpeng(a)iscas.ac.cn> can: ems_usb: validate CPC message lengths Lucas Martins Alves <lucas.alves(a)lumal21.com.br> can: c_can: c_can_chip_config(): keep controller in init mode until bittiming is configured Liem <liem16213(a)gmail.com> i2c: imx: Cancel hrtimer before clearing slave pointer Liem <liem16213(a)gmail.com> i2c: imx: Fix slave registration race and error handling Carlos Song <carlos.song(a)nxp.com> i2c: imx: mark I2C adapter when hardware is powered down Jonas Gorski <jonas.gorski(a)bisdn.de> i2c: iproc: reset bus after timeout if START_BUSY is stuck H. Nikolaus Schaller <hns(a)goldelico.com> i2c: jz4780: Cache host clock rate at probe to prevent CCF prepare_lock deadlock Wenmeng Liu <wenmeng.liu(a)oss.qualcomm.com> i2c: qcom-cci: drop custom suspend/resume and rely on runtime PM helpers Linmao Li <lilinmao(a)kylinos.cn> i2c: spacemit: request IRQ after controller initialization Dawei Feng <dawei.feng(a)seu.edu.cn> ice: fix memory leak in ice_lbtest_prepare_rings() Dawid Osuchowski <dawid.osuchowski(a)linux.intel.com> ice: fix VF interrupts cleanup Aaron Ma <aaron.ma(a)canonical.com> ice: wait for reset completion in ice_resume() Ilya Maximets <i.maximets(a)ovn.org> net: openvswitch: fix skb leak on flow key update failure during ct Ilya Maximets <i.maximets(a)ovn.org> net: openvswitch: fix skb leak on flow key update failure during recirculation Ilya Maximets <i.maximets(a)ovn.org> net: openvswitch: fix potential UAF on meter attach failure Nava kishore Manne <nava.kishore.manne(a)amd.com> phy: zynqmp: keep SERDES scrambler and 8b/10b enabled for USB Nava kishore Manne <nava.kishore.manne(a)amd.com> phy: zynqmp: use read-modify-write for SERDES scrambler bypass Nava kishore Manne <nava.kishore.manne(a)amd.com> phy: zynqmp: fix L0_TM_DISABLE_SCRAMBLE_ENCODER mask Holger Dengler <dengler(a)linux.ibm.com> s390/zcrypt: Validate length for CCA ECC private key requests Holger Dengler <dengler(a)linux.ibm.com> s390/zcrypt: Validate length for CCA AES cipher key requests Harald Freudenberger <freude(a)linux.ibm.com> s390/zcrypt: Fix missing mem scrub at clear key import in cca_clr2cipherkey() Harald Freudenberger <freude(a)linux.ibm.com> s390/zcrypt: Fix buffer over-read in cca_cipher2protkey Harald Freudenberger <freude(a)linux.ibm.com> s390/zcrypt: Fix wrong domain value verification with EP11 CPRBs Stefan Haberland <sth(a)linux.ibm.com> s390/dasd: Fix undersized format-check buffer Jan Höppner <hoeppner(a)linux.ibm.com> s390/dasd: Fix potential NULL pointer dereference Aswin Karuvally <aswin(a)linux.ibm.com> s390/qeth: Check CAP_NET_ADMIN for private ioctls Niklas Schnelle <schnelle(a)linux.ibm.com> s390/pci: Fix s390_pci_mmio_write syscall error return without MIO Jianing Li <m13940358460(a)163.com> power: supply: max17040: handle missing status supplier Xu Rao <raoxu(a)uniontech.com> power: supply: bq25890: fix the -10 C NTC lookup entry Zhongqiu Han <zhongqiu.han(a)oss.qualcomm.com> cpufreq: schedutil: Publish util hooks only after all sg_cpu are initialized Abdun Nihaal <nihaal(a)cse.iitm.ac.in> cpufreq: powernow-k8: Fix possible memory leak in powernowk8_cpu_init() Frank Sorenson <sorenson(a)redhat.com> cifs: add fscache_resize_cookie() to cifs_setsize() Junjie Cao <junjie.cao(a)intel.com> gpio: pch: use raw_spinlock_t for the register lock bui duc phuc <phucduc.bui(a)gmail.com> gpio: pca953x: fix cache_only and IRQ state on restore_context() failure Myeonghun Pak <mhun512(a)gmail.com> i2c: amd-mp2: Unregister callback on adapter add failure Vincent Jardin <vjardin(a)free.fr> hwmon: (pmbus/core) notify on the hwmon device, not the i2c client Hongyan Xu <getshell(a)seu.edu.cn> hwmon: (npcm750-pwm-fan): stop fan timer on device detach Asim Viladi Oglu Manizada <manizada(a)pm.me> sctp: prevent peer transport count overflow Yuxiang Yang <yangyx22(a)mails.tsinghua.edu.cn> sctp: reject stale cookies with mismatched verification tags Ibrahim Hashimov <security(a)auditcode.ai> scsi: scsi_debug: Fix REPORT ZONES alloc_len underflow OOB write Chris Gellermann <christian.gellermann(a)codasip.com> selftests/clone3: fix wild pointer access of getline due to missing init Chris Gellermann <christian.gellermann(a)codasip.com> selftests/mm: fix potential wild pointer access of getline due to missing init Vijaya Krishna Nivarthi <vijaya.nivarthi(a)oss.qualcomm.com> spi: qcom-qspi: Correct max DMA length to avoid 64K boundary failure Stanislaw Pal <kuncy7(a)gmail.com> spi: spi-qpic-snand: write the feature value before executing SET_FEATURE Masami Hiramatsu (Google) <mhiramat(a)kernel.org> tracing/filters: Fix false positive match in regex_match_full() Masami Hiramatsu (Google) <mhiramat(a)kernel.org> tracing: Check return value of __register_event() in trace_module_add_events() Ming Lei <tom.leiming(a)gmail.com> ublk: reset kernel-owned dev_info fields in ublk_ctrl_add_dev() Eric Dumazet <edumazet(a)google.com> vxlan: use pskb_network_may_pull() in route_shortcircuit() Eric Dumazet <edumazet(a)google.com> vxlan: use pskb_network_may_pull() for transmit path header pulls Eric Dumazet <edumazet(a)google.com> vxlan: use neigh_ha_snapshot() in route_shortcircuit() Eric Dumazet <edumazet(a)google.com> vxlan: unclone skb head before modifying eth header in route_shortcircuit() Eric Dumazet <edumazet(a)google.com> vxlan: re-fetch eth header after route_shortcircuit() Matt Fleming <mfleming(a)cloudflare.com> veth: convert frag_list skbs before running XDP Breno Leitao <leitao(a)debian.org> uprobes: Fix NULL pointer dereference in hprobe_expire() Michael Bommarito <michael.bommarito(a)gmail.com> um: vector: fix use-after-free in vector_mmsg_rx() Thorsten Blum <thorsten.blum(a)linux.dev> powerpc/ps3: Fix map failure path in dma_ioc0_map_pages() Chengfeng Ye <nicoyip.dev(a)gmail.com> net: pktgen: fix proc entry use-after-free Zhiling Zou <zhilinz(a)nebusec.ai> net: ipv6: clear suppressed fib6 rule result Zhiling Zou <zhilinz(a)nebusec.ai> net: bridge: stop fast-leave after deleting a port group Breno Leitao <leitao(a)debian.org> mm: memcg: initialize *locked in memcg1_oom_prepare() stub Link Lin <linkl(a)google.com> mm/page_reporting: use system_freezable_wq to fix UAF during suspend Jens Axboe <axboe(a)kernel.dk> io_uring/net: initialize mshot_len for send Christian Brauner <brauner(a)kernel.org> binfmt_misc: don't let an 'F' entry pin its own instance Christian Brauner <brauner(a)kernel.org> binfmt_misc: reject a flag character as the field delimiter Christian Brauner <brauner(a)kernel.org> binfmt_misc: use exe_file_deny_write_access() for the interpreter clone Christian Brauner <brauner(a)kernel.org> binfmt_misc: restore write access when removing an entry Zhao Li <enderaoelyther(a)gmail.com> wifi: mwifiex: use the subframe length when parsing A-MSDU TDLS frames Zihan Xi <zihanx(a)nebusec.ai> tipc: avoid use-after-free in poll trace queue dumps Carlo Caione <ccaione(a)baylibre.com> of/address: Fix NULL bus dereference in of_pci_range_parser_one() David Lee <david.lee(a)trailofbits.com> netfilter: ipset: do not update comments from kernel-side hash adds Xuanqiang Luo <luoxuanqiang(a)kylinos.cn> net/smc: fix socket use-after-free during link group termination Wei Liu <wei.liu(a)kernel.org> mshv: fix hv_input_get_system_property struct Namjae Jeon <linkinjeon(a)kernel.org> ksmbd: reject repeated SMB2 NEGOTIATE requests Zhiling Zou <roxy520tt(a)gmail.com> ipvs: do not propagate one-packet flag to synced conns David Carlier <devnexen(a)gmail.com> igc: remove napi_synchronize() in igc_down() Matt Vollrath <tactii(a)gmail.com> igbvf: Fix leak in TX DMA error cleanup Dawei Feng <dawei.feng(a)seu.edu.cn> e1000: fix memory leak in e1000_probe() Md Sadre Alam <md.alam(a)oss.qualcomm.com> dmaengine: qcom: bam_dma: Fix command element mask field for BAM v1.6.0+ Sonali Pradhan <sonalipradhan(a)google.com> ALSA: usb-audio: Clamp frame size in implicit-feedback mode Sonali Pradhan <sonalipradhan(a)google.com> ALSA: usb-audio: Fix DMA buffer out-of-bounds write when fill_max is set Baul Lee <baul.lee(a)xbow.com> ALSA: usb-audio: fix OOB write in snd_usbmidi_akai_output() Baul Lee <baul.lee(a)xbow.com> ALSA: usb-audio: fix stack info leak in RME Digiface status Baul Lee <baul.lee(a)xbow.com> ALSA: usb-audio: fix use-after-free in ump_to_endpoint() Niklas Cassel <cassel(a)kernel.org> ata: libata-sata: fix ata_scsi_lpm_supported() iteration Matt Vollrath <tactii(a)gmail.com> ata: libata-eh: Increase STANDBY IMMEDIATE timeout Haidar Lee <haidar.lee(a)adlinktech.com> ASoC: tas2562: fix broken entries in the volume lookup table Haidar Lee <haidar.lee(a)adlinktech.com> ASoC: tas2562: fix DVC coefficient write order Shengjiu Wang <shengjiu.wang(a)nxp.com> ASoC: fsl_easrc: fix m2m_init error path to use goto instead of bare return Shengjiu Wang <shengjiu.wang(a)nxp.com> ASoC: fsl_asrc: fix m2m_init error path to use goto instead of bare return Baul Lee <baul.lee(a)xbow.com> ALSA: ump: fix double free of out_cvts on rawmidi error Norbert Szetei <norbert(a)doyensec.com> ALSA: timer: Clear SNDRV_TIMER_IFLG_DEAD once the close completes Norbert Szetei <norbert(a)doyensec.com> ALSA: seq: Fix division by zero in initialize_timer() Norbert Szetei <norbert(a)doyensec.com> ALSA: pcm: wake linked drain waiters on unlink Xu Rao <raoxu(a)uniontech.com> ALSA: lx6464es: fix period byte count for 16-bit streams Eckhart Mohr <e.mohr(a)tuxedocomputers.com> ALSA: hda/realtek: Add quirk for TongFang X6SP45xU Takashi Iwai <tiwai(a)suse.de> ALSA: 6fire: Fix UAF at error handling during probe David Howells <dhowells(a)redhat.com> afs: Fix UAF when sending a message David Howells <dhowells(a)redhat.com> afs: Fix afs_fs_fetch_data() to subtract transferred from len David Howells <dhowells(a)redhat.com> afs: Fix afs_fs_fetch_data() to set call->async Xuanqiang Luo <luoxuanqiang(a)kylinos.cn> bpf: lwt: Fix dst reference leak on reroute failure Sangho Lee <kudo3228(a)gmail.com> Bluetooth: HIDP: validate numbered report payloads Sangho Lee <kudo3228(a)gmail.com> Bluetooth: HIDP: reject frames without a transaction header Chengfeng Ye <nicoyip.dev(a)gmail.com> Bluetooth: hci_sync: Fix advertising data UAFs Zihan Xi <xizh2024(a)lzu.edu.cn> Bluetooth: mgmt: fix UAF in pair command cancellation Aldo Ariel Panzardo <qwe.aldo(a)gmail.com> Bluetooth: SCO: give the socket its own sco_conn reference Zihan Xi <zihanx(a)nebusec.ai> Bluetooth: mgmt: fix pending command UAF in EIR updates Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> Bluetooth: btmtk: Fix short read errors in btmtk_usb_uhw_reg_read() Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> Bluetooth: btusb: Fix short read errors in btusb_qca_send_vendor_req() Luxiao Xu <rakukuip(a)gmail.com> audit: fix potential use-after-free in audit_del_rule() Zhan Xusheng <zhanxusheng1024(a)gmail.com> audit: fix potential integer overflow in audit_log_n_string() Charles Vosburgh <trilobyte777(a)gmail.com> sctp: validate Adaptation Indication parameter length Hidayath Khan <hidayath(a)linux.ibm.com> dibs: fix use-after-free of dmb_node in loopback attach/detach/unregister Farhan Ali <alifm(a)linux.ibm.com> KVM: s390: pci: Validate AIBV and AISB before pinning guest pages Farhan Ali <alifm(a)linux.ibm.com> KVM: s390: pci: Fix NULL dereference on AIBV allocation failure Farhan Ali <alifm(a)linux.ibm.com> KVM: s390: pci: Fix missing error codes and memory unaccounting Farhan Ali <alifm(a)linux.ibm.com> KVM: s390: pci: Fix memory accounting for pinned/unpinned pages Farhan Ali <alifm(a)linux.ibm.com> KVM: s390: pci: Reject adapter interrupt forwarding if already enabled Sean Christopherson <seanjc(a)google.com> KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active Paolo Bonzini <pbonzini(a)redhat.com> KVM: VMX: add memory clobber to asm for VMX instructions Raushan Patel <raushan.jhon(a)gmail.com> tracing/fprobe: Roll back on enable_trace_fprobe() failure Raushan Patel <raushan.jhon(a)gmail.com> tracing/probes: Reject $arg0 in meta argument expansion Gregory Price <gourry(a)gourry.net> mm/vmstat: fold stranded per-cpu node stats when a node comes online Xiangfeng Cai <caixiangfeng(a)bytedance.com> mm/hugetlb: fix list corruption in allocate_file_region_entries() Zi Yan <ziy(a)nvidia.com> mm/percpu-km: fix bitmap overflow and accounting in pcpu_create_chunk() Kiryl Shutsemau (Meta) <kas(a)kernel.org> fs/proc/task_mmu: fix PAGEMAP_SCAN written state for PMD holes Jori Koolstra <jkoolstra(a)xs4all.nl> selftest: fix headers in fclog.c Aboorva Devarajan <aboorvad(a)linux.ibm.com> mm/util: don't read __page_2 for order-1 folios in snapshot_page() Kefeng Wang <wangkefeng.wang(a)huawei.com> mm: migrate_device: fix pte_pfn/pte_dirty called on non-present PTE Nathan Chancellor <nathan(a)kernel.org> fortify: Disable -Wstringop-overread in tests Benjamin Boortz <bennib(a)mailbox.org> pinctrl: bm1880: add missing select GENERIC_PINCONF Michael Bommarito <michael.bommarito(a)gmail.com> erofs: cap LZMA stream pool size Karl Mehltretter <kmehltretter(a)gmail.com> pinctrl: devicetree: don't free uninitialized dev_name on error path Benjamin Boortz <bennib(a)mailbox.org> pinctrl: microchip-sgpio: add missing select REGMAP_MMIO Peiyang He <peiyang_he(a)smail.nju.edu.cn> iommu/iommufd: Fix IOPF group ownership UAF Peiyang He <peiyang_he(a)smail.nju.edu.cn> iommufd: Fix wrong hwpt passed to iommufd_auto_response_faults on replace Nicolin Chen <nicolinc(a)nvidia.com> iommufd/viommu: Publish a vDEVICE only after vdevice_init() succeeds Nicolin Chen <nicolinc(a)nvidia.com> iommufd/viommu: Release the igroup lock on the vdevice_size error path Stanislav Kinsburskii <skinsburskii(a)linux.microsoft.com> mshv: Order pt_vp_array publish against irqfd assertion path Stanislav Kinsburskii <skinsburskii(a)linux.microsoft.com> mshv: Fix level-triggered check on uninitialized data Jinank Jain <jinankjain(a)microsoft.com> mshv: adjust interrupt control structure for ARM64 Stanislav Kinsburskii <skinsburskii(a)linux.microsoft.com> mshv: Fix race in mshv_irqfd_deassign Christoph Hellwig <hch(a)lst.de> iomap: add a separate bio_set for iomap_split_ioend Namjae Jeon <linkinjeon(a)kernel.org> ksmbd: fix use-after-free in __close_file_table_ids() Namjae Jeon <linkinjeon(a)kernel.org> ksmbd: return success for deferred final close Jerome Tollet <jerome.tollet(a)gmail.com> drm/i915/hdmi: Poll for 200 msec for TMDS_Scrambler_Status Denis V. Lunev <den(a)openvz.org> qede: sync udp_tunnel ports outside qede_lock in the recovery path Haibo Chen <haibo.chen(a)nxp.com> spi: spi-nxp-fspi: add per-SoC SDR/DTR clock rate limits for all supported SoCs Gabriele Monaco <gmonaco(a)redhat.com> sched/deadline: Use revised wakeup rule only for running dl_server Suman Ghosh <sumang(a)marvell.com> octeontx2-pf: Set correct sequence for carrier off and tx queue stop Jiawen Wu <jiawenwu(a)trustnetic.com> net: libwx: fix FDIR ATR queue mismatch for software VLAN packets Wei Fang <wei.fang(a)nxp.com> ptp: netc: fix potential interrupt storm caused by incorrect unbind order Daniel Golle <daniel(a)makrotopia.org> net: dsa: mt7530: error out on failed reads in MT7531 PHY polling Daniel Golle <daniel(a)makrotopia.org> net: dsa: mt7530: check bus->read() errors in the MDIO regmap backend Karl Mehltretter <kmehltretter(a)gmail.com> riscv: mm: Fix out-of-bounds page-table walk during memory hot-remove Muhammad Bilal <meatuni001(a)gmail.com> accel/qaic: use sizeof(*trans_hdr) for transaction length check Anirudh Srinivasan <asrinivasan(a)oss.tenstorrent.com> riscv: drop __init from vec_check_unaligned_access_speed_all_cpus Masami Hiramatsu (Google) <mhiramat(a)kernel.org> tracing/mmiotrace: Add NULL check for mmio_trace_array in logging functions Masami Hiramatsu (Google) <mhiramat(a)kernel.org> tracing/mmiotrace: Reset dropped_count in mmio_reset_data() Masami Hiramatsu (Google) <mhiramat(a)kernel.org> fprobe: Fix module reference count leak on error in register_fprobe() Alexander Kaplan <alexander.kaplan(a)sms-medipool.de> drm/i915/dp: Ignore the sink's DSC max FRL rate without a PCON DSC encoder Minhong He <heminhong(a)kylinos.cn> can: isotp: check register_netdevice_notifier() error in module init Chenguang Zhao <zhaochenguang(a)kylinos.cn> net: sxgbe: check descriptor ring allocation failures Chenguang Zhao <zhaochenguang(a)kylinos.cn> net: sxgbe: free TX rings on RX allocation failure Leon Romanovsky <leon(a)kernel.org> scsi: target: Clear cmd_cnt when initial counter enrollment fails Benjamin Block <bblock(a)linux.ibm.com> scsi: zfcp: Fix memory leak during adapter release by destroying gid_pn_req Bart Van Assche <bvanassche(a)acm.org> scsi: ufs: core: Revert "Delegate the interrupt service routine to a threaded IRQ handler" Peter Wang <peter.wang(a)mediatek.com> scsi: ufs: core: Avoid IRQ thread wakeup during active UIC command Guangshuo Li <lgs201920130244(a)gmail.com> scsi: ufs: core: Cancel RTC work in active-active suspend TanZheng <tanzheng(a)kylinos.cn> scsi: target: iblock: Fix wrong PR ops NULL check for PREEMPT/RELEASE Christian Marangi <ansuelsmth(a)gmail.com> net: phylink: put link_gpio if phylink_create fails Mauricio Faria de Oliveira <mfo(a)igalia.com> x86/boot: Add volatile, clobbers and zero-length test in memcmp() Pauli Virtanen <pav(a)iki.fi> Bluetooth: hci_sync: remove unnecessary hci_conn_get in create_conn_sync Pauli Virtanen <pav(a)iki.fi> Bluetooth: hci_sync: fix hci_conn_del() use in hci_le_create_conn_sync Pauli Virtanen <pav(a)iki.fi> Bluetooth: hci_conn: hold conn reference in abort_conn_sync() Pauli Virtanen <pav(a)iki.fi> Bluetooth: hci_sync: make hci_cmd_sync_run_once return -EEXIST if exists Zijun Hu <zijun.hu(a)oss.qualcomm.com> Bluetooth: btintel: Validate length before parsing diagnostics TLV Pauli Virtanen <pav(a)iki.fi> Bluetooth: ISO: fix refcounting of iso_conn Pauli Virtanen <pav(a)iki.fi> Bluetooth: ISO: ensure no dangling hcon references in iso_conn Pauli Virtanen <pav(a)iki.fi> Bluetooth: ISO: avoid deadlocks in iso_sock_timeout Pauli Virtanen <pav(a)iki.fi> Bluetooth: ISO: fix leaking sk after socket release Pauli Virtanen <pav(a)iki.fi> Bluetooth: ISO: hold sk properly in iso_conn_ready Pauli Virtanen <pav(a)iki.fi> Bluetooth: ISO: fix CONNECTED -> CLOSED transition on shutdown/release Luiz Augusto von Dentz <luiz.von.dentz(a)intel.com> Bluetooth: ISO: Fix not updating BIS sender source address Pauli Virtanen <pav(a)iki.fi> Bluetooth: ISO: validate sockaddr_iso first in iso_sock_rebind_bis() Pauli Virtanen <pav(a)iki.fi> Bluetooth: ISO: fix timeout vs sync_timeout typo in check_bcast_qos Pauli Virtanen <pav(a)iki.fi> Bluetooth: ISO: lock sk in iso_connect_ind SeungJu Cheon <suunj1331(a)gmail.com> Bluetooth: ISO: Fix data-race on iso_pi(sk) in socket and HCI event paths Luiz Augusto von Dentz <luiz.von.dentz(a)intel.com> Bluetooth: HCI: Add initial support for PAST Pauli Virtanen <pav(a)iki.fi> Bluetooth: ISO: lock sk in iso_sock_getname Jiale Yao <yaojiale02(a)163.com> Bluetooth: L2CAP: fix UAF in l2cap_le_connect_rsp Pauli Virtanen <pav(a)iki.fi> Bluetooth: ISO: clear iso_data always when detaching conn from hcon Przemyslaw Korba <przemyslaw.korba(a)intel.com> ice: suppress DPLL errors during reset recovery Yuho Choi <dbgh9129(a)gmail.com> idpf: Fix mailbox IRQ name leak on request failure Joshua Hay <joshua.a.hay(a)intel.com> idpf: adjust TxQ ring count minimum Guenter Roeck <linux(a)roeck-us.net> hwmon: (pmbus) Fix return value from pmbus_update_byte_data() Chenguang Zhao <zhaochenguang(a)kylinos.cn> net: ethernet: mtk_eth_soc: pass eth to mtk_handle_irq_rx in poll_controller Yichong Chen <chenyichong(a)uniontech.com> netfs: release readahead folios on iterator preparation failure Yichong Chen <chenyichong(a)uniontech.com> netfs: handle single writeback rolling buffer allocation failure Yichong Chen <chenyichong(a)uniontech.com> netfs: clear PG_private_2 on copy-to-cache append failure Zhao Li <enderaoelyther(a)gmail.com> wifi: mac80211: validate individual TWT params before driver setup Eric Dumazet <edumazet(a)google.com> net: udp_tunnel: fix memory leak in udp_tunnel_nic_unregister() Thorsten Blum <thorsten.blum(a)linux.dev> powerpc/boot: Fix treeboot-akebono CPU node lookup check Thorsten Blum <thorsten.blum(a)linux.dev> powerpc/boot: Fix treeboot-currituck CPU node lookup check Thorsten Blum <thorsten.blum(a)linux.dev> powerpc/boot: Fix simpleboot CPU node lookup check Yun Lu <luyun(a)kylinos.cn> rtase: fix double free of multi-frag skb on DMA map failure Luiz Angelo Daros de Luca <luizluca(a)gmail.com> hwmon: (adt7470) Fix PWM auto temp state array and bounds check Luiz Angelo Daros de Luca <luizluca(a)gmail.com> hwmon: (adt7470) Fix divide-by-zero TOCTOU crash in fan speed read Luiz Angelo Daros de Luca <luizluca(a)gmail.com> hwmon: (adt7470) Use cached PWM frequency value Luiz Angelo Daros de Luca <luizluca(a)gmail.com> hwmon: (adt7470) Fix swapped PWM3 and PWM4 auto mode masks Luiz Angelo Daros de Luca <luizluca(a)gmail.com> hwmon: (adt7470) Fix temperature alarm logic in hwmon_temp_read() Luiz Angelo Daros de Luca <luizluca(a)gmail.com> hwmon: (adt7470) Fix busy-loop and I2C flooding in update thread Luiz Angelo Daros de Luca <luizluca(a)gmail.com> hwmon: (adt7470) Fix cache updated before hardware write on I2C error Luiz Angelo Daros de Luca <luizluca(a)gmail.com> hwmon: (adt7470) Fix fans stuck in manual mode on I2C errors Chenguang Zhao <zhaochenguang(a)kylinos.cn> forcedeth: fix UAF of txrx_stats in nv_remove David Corvaglia <david(a)corvaglia.dev> net: bridge: mrp: fix Option TLV length in MRP_Test frames Guenter Roeck <linux(a)roeck-us.net> hwmon: (nct6775-core) Prevent access to unsupported weight registers Eric Dumazet <edumazet(a)google.com> net: do not send ICMP/NDISC Redirects when peer allocation fails Guenter Roeck <linux(a)roeck-us.net> hwmon: (nzxt-smart2) DMA-align output buffer Guenter Roeck <linux(a)roeck-us.net> hwmon: (lm90) Only report alarms if driver is ready Guenter Roeck <linux(a)roeck-us.net> hwmon: (sht3x) Fix unaligned accesses Guenter Roeck <linux(a)roeck-us.net> hwmon: (ltc4282) Fix reading the minimum alarm voltage Guenter Roeck <linux(a)roeck-us.net> hwmon: (ina2xx) Fix various overflow issues Jonas Rebmann <jre(a)pengutronix.de> hwmon: (ina2xx) Shift INA234 shunt and current registers Ian Ray <ian.ray(a)gehealthcare.com> hwmon: (ina2xx) Add support for INA234 Ian Ray <ian.ray(a)gehealthcare.com> hwmon: (ina2xx) Make it easier to add more devices Guenter Roeck <linux(a)roeck-us.net> hwmon: (nct6775-core) Fix number of temperature registers for NCT6116 Srikanth Boyapally <srikanth.boyapally(a)amd.com> spi: spi-cadence: Move TX FIFO full busy-wait into FIFO Jun Guo <jun.guo(a)cixtech.com> spi: spi-cadence: supports transmission with bits_per_word of 16 and 32 wangdicheng <wangdicheng(a)kylinos.cn> ASoC: tas2781: Use correct calibration data for SINEGAIN2 register Dawei Feng <dawei.feng(a)seu.edu.cn> smb: client: fix buffer leaks in SMB1 read and write Xingui Yang <yangxingui(a)huawei.com> scsi: libsas: Fix HA resume deadlock and hisi_sas disk-wake race HyeongJun An <sammiee5311(a)gmail.com> scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer HyeongJun An <sammiee5311(a)gmail.com> scsi: libiscsi: Fix stale-data leak into the SCSI sense buffer Mario Limonciello <mario.limonciello(a)amd.com> pinctrl-amd: Don't clear S4 wake bits at probe Jason Xing <kernelxing(a)tencent.com> xsk: drain continuation descs after overflow in xsk_build_skb() Jason Xing <kernelxing(a)tencent.com> xsk: use a smaller new lock for shared pool case Jason Xing <kernelxing(a)tencent.com> xsk: fix buffer leak in xsk_drop_skb() for AF_XDP multi-buffer Tx John Ericson <mail(a)johnericson.me> selftests/net/af_unix: test listen() rejects wrong socket states Kuniyuki Iwashima <kuniyu(a)google.com> selftest: af_unix: Create its own .gitignore. Sunday Adelodun <adelodunolaoluwa(a)yahoo.com> selftests: af_unix: Add tests for ECONNRESET and EOF semantics John Ericson <mail(a)johnericson.me> af_unix: fix listen() succeeding on sockets in the wrong state Xiang Mei <xmei5(a)asu.edu> rds: tcp: hold the RCU lock across ipv6_chk_addr() in rds_tcp_laddr_check() Ilia Gavrilov <Ilia.Gavrilov(a)infotecs.ru> rds: Fix inet6_addr_lst NULL dereference when IPv6 is disabled Charles Keepax <ckeepax(a)opensource.cirrus.com> ASoC: SDCA: Ensure that Control Range is large enough for header Xiang Mei (Microsoft) <xmei5(a)asu.edu> netfilter: nft_payload: fix mask build for partial field offload Julian Anastasov <ja(a)ssi.bg> ipvs: do not mangle ICMP replies for non-first fragments Julian Anastasov <ja(a)ssi.bg> ipvs: fix places with wrong packet offsets Julian Anastasov <ja(a)ssi.bg> ipvs: fix the checksum validations Pablo Neira Ayuso <pablo(a)netfilter.org> netfilter: xt_hashlimit: validate hashtable supports XT_HASHLIMIT_RATE_MATCH Pablo Neira Ayuso <pablo(a)netfilter.org> netfilter: nf_tables: make nft_object rhltable per table Michael Bommarito <michael.bommarito(a)gmail.com> assoc_array: trim the final shortcut word using the current chunk end Michael Bommarito <michael.bommarito(a)gmail.com> keys: make keyring key-chunk byte order agree with keyring_diff_objects() Michael Bommarito <michael.bommarito(a)gmail.com> keys: fix out-of-bounds read in keyring_get_key_chunk() Fabrice Derepas <fabrice.derepas(a)canonical.com> KEYS: trusted: dcp: fix key_len validation and calc_blob_len() return type Alexandru Elisei <alexandru.elisei(a)arm.com> KVM: arm64: Reject guest_memfd memslots when the VM has MTE Stanislav Kinsburskii <skinsburskii(a)linux.microsoft.com> mshv: Fix sleeping under spinlock in mshv_portid_alloc Stanislav Kinsburskii <skinsburskii(a)linux.microsoft.com> mshv: Fix duplicate GSI detection for GSI 0 Sebastian Andrzej Siewior <bigeasy(a)linutronix.de> Drivers: hv: vmbus: Replace lockdep_hardirq_threaded() with lockdep annotation Roman Kisel <romank(a)linux.microsoft.com> Drivers: hv: Allocate the paravisor SynIC pages when required Roman Kisel <romank(a)linux.microsoft.com> Drivers: hv: Rename fields for SynIC message and event pages Roman Kisel <romank(a)linux.microsoft.com> arch/x86: mshyperv: Discover Confidential VMBus availability Ruoyu Wang <ruoyuw560(a)gmail.com> drm/mediatek: Check CRTC state before freeing Xiang Mei <xmei5(a)asu.edu> netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() Radhey Shyam Pandey <radhey.shyam.pandey(a)amd.com> phy: zynqmp: fix runtime PM leak on probe allocation failure Radhey Shyam Pandey <radhey.shyam.pandey(a)amd.com> phy: zynqmp: fix clock error handling in xpsgtr_phy_init() Qu Wenruo <wqu(a)suse.com> btrfs: raid56: fix an incorrect csum skip during scrub Johannes Thumshirn <johannes.thumshirn(a)wdc.com> btrfs: zoned: reset meta_write_pointer on zone reset Johannes Thumshirn <johannes.thumshirn(a)wdc.com> btrfs: zoned: fix deadlock between metadata writeback and transaction commit Qu Wenruo <wqu(a)suse.com> btrfs: fix leaking BTRFS_FS_STATE_REMOUNTING flag Sang-Heon Jeon <ekffu200098(a)gmail.com> of: reserved_mem: prevent OOB when too many dynamic regions are defined Uday Khare <udaykhare77(a)gmail.com> ASoC: max98090: fix missing IS_ERR() before PTR_ERR() on mclk lookup Uday Khare <udaykhare77(a)gmail.com> ASoC: max98095: fix missing IS_ERR() before PTR_ERR() on mclk lookup Krishna Kurapati <krishna.kurapati(a)oss.qualcomm.com> phy: qcom: m31-eusb2: Fix return value of init call Radhey Shyam Pandey <radhey.shyam.pandey(a)amd.com> ata: ahci_ceva: fix error paths in ceva_ahci_platform_enable_resources() Rosen Penev <rosenp(a)gmail.com> ata: sata_mv: accept 1 or 2 resources in platform probe Kuan-Ying Lee <kuan-ying.lee(a)canonical.com> selftests/seccomp: Fix pointer type mismatch build error Haofeng Li <lihaofeng(a)kylinos.cn> selftests/lkdtm: rename STACKLEAK_ERASING to KSTACK_ERASE Abdun Nihaal <nihaal(a)cse.iitm.ac.in> gpio: sloppy-logic-analyzer: Fix memory leak in gpio_la_poll_probe() Nicolin Chen <nicolinc(a)nvidia.com> iommu/arm-smmu-v3-iommufd: Require exactly one Stream ID for a vDEVICE Yuho Choi <dbgh9129(a)gmail.com> dmaengine: idxd: fix fdev setup failure cleanup in idxd_cdev_open() Hongling Zeng <zenghongling(a)kylinos.cn> dmaengine: sun6i-dma: Fix reclaim descriptors while terminating DMA Konrad Dybcio <konrad.dybcio(a)oss.qualcomm.com> pinctrl: qcom: sc8280xp: Add missing wakeup entries for GPIO143/151 Sneh Mankad <sneh.mankad(a)oss.qualcomm.com> pinctrl: qcom: Unconditionally mark gpio as wakeup enable Michael Bommarito <michael.bommarito(a)gmail.com> thunderbolt: Prevent XDomain delayed work use-after-free on disconnect Harry Yoo (Oracle) <harry(a)kernel.org> mm/slab: prevent unbounded recursion in free path with new kmalloc type Harry Yoo (Oracle) <harry(a)kernel.org> lib/alloc_tag: introduce mem_alloc_profiling_permanently_disabled() Benjamin Tissoires <bentiss(a)kernel.org> HID: logitech-dj: fix wrong detection of bad DJ_SHORT output report Lee Jones <lee(a)kernel.org> HID: logitech-dj: Prevent REPORT_ID_DJ_SHORT related user initiated OOB write Lee Jones <lee(a)kernel.org> HID: logitech-dj: Standardise hid_report_enum variable nomenclature Fabian Lippold <fabianlippold1184(a)gmail.com> ALSA: hda/realtek: add quirk for HP Dragonfly Folio G3 2-in-1 Honglei Huang <honghuan(a)amd.com> drm/gpusvm: publish dpagemap early to avoid device mapping leak on error Yehyeong Lee <yhlee(a)isslab.korea.ac.kr> net: mpls: initialize rtm_tos in mpls_getroute() Lorenzo Bianconi <lorenzo(a)kernel.org> netfilter: br_netfilter: Reallocate headroom if necessary in neigh_hh_bridge() David Gow <david(a)davidgow.net> kunit: tool: Terminate kernel under test on SIGINT Shuvam Pandey <shuvampandey1(a)gmail.com> kunit: tool: skip stty when stdin is not a tty Pablo Neira Ayuso <pablo(a)netfilter.org> netfilter: nf_conntrack_expect: restore helper propagation via expectation ------------- Diffstat: Documentation/hwmon/ina2xx.rst | 25 +- Documentation/virt/kvm/api.rst | 6 + Makefile | 4 +- arch/arm64/kvm/arm.c | 25 +- arch/arm64/kvm/mmu.c | 4 + arch/powerpc/boot/simpleboot.c | 2 +- arch/powerpc/boot/treeboot-akebono.c | 2 +- arch/powerpc/boot/treeboot-currituck.c | 2 +- arch/powerpc/platforms/ps3/mm.c | 1 + arch/riscv/kernel/unaligned_access_speed.c | 4 +- arch/riscv/mm/init.c | 4 +- arch/s390/kvm/pci.c | 78 ++++- arch/s390/kvm/pci.h | 2 + arch/s390/pci/pci_mmio.c | 1 + arch/um/drivers/vector_kern.c | 3 + arch/x86/boot/string.c | 11 +- arch/x86/kernel/cpu/mshyperv.c | 28 +- arch/x86/kvm/svm/avic.c | 8 - arch/x86/kvm/vmx/vmx_ops.h | 8 +- drivers/accel/qaic/qaic_control.c | 2 +- drivers/ata/ahci_ceva.c | 18 +- drivers/ata/libata-eh.c | 8 + drivers/ata/libata-sata.c | 2 +- drivers/ata/sata_mv.c | 2 +- drivers/block/ublk_drv.c | 9 + drivers/bluetooth/btintel.c | 3 + drivers/bluetooth/btmtk.c | 50 ++- drivers/bluetooth/btusb.c | 30 +- drivers/cpufreq/powernow-k8.c | 1 + drivers/dibs/dibs_loopback.c | 47 +-- drivers/dma/idxd/cdev.c | 4 +- drivers/dma/sun6i-dma.c | 11 +- drivers/gpio/gpio-pca953x.c | 15 +- drivers/gpio/gpio-pch.c | 28 +- drivers/gpio/gpio-sloppy-logic-analyzer.c | 10 + drivers/gpu/drm/amd/amdgpu/amdgpu_cs.c | 39 ++- drivers/gpu/drm/amd/amdgpu/amdgpu_ctx.c | 73 +++-- drivers/gpu/drm/amd/amdgpu/amdgpu_drv.c | 15 + drivers/gpu/drm/amd/amdgpu/amdgpu_eviction_fence.c | 3 +- drivers/gpu/drm/amd/amdgpu/amdgpu_gtt_mgr.c | 30 +- drivers/gpu/drm/amd/amdgpu/amdgpu_ttm.c | 12 + drivers/gpu/drm/amd/amdkfd/kfd_chardev.c | 10 +- drivers/gpu/drm/amd/amdkfd/kfd_events.c | 23 +- .../gpu/drm/amd/amdkfd/kfd_process_queue_manager.c | 2 +- drivers/gpu/drm/amd/amdkfd/kfd_queue.c | 2 +- drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm.c | 243 +++++++++++---- drivers/gpu/drm/amd/display/dc/core/dc.c | 45 +++ drivers/gpu/drm/amd/display/dc/dc.h | 1 + .../gpu/drm/amd/display/dc/dce/dce_clock_source.c | 20 +- .../drm/amd/display/dc/hwss/dcn30/dcn30_hwseq.c | 16 +- drivers/gpu/drm/amd/pm/amdgpu_dpm.c | 12 +- drivers/gpu/drm/amd/pm/amdgpu_pm.c | 8 +- drivers/gpu/drm/amd/pm/inc/amdgpu_dpm.h | 3 +- drivers/gpu/drm/armada/armada_fbdev.c | 12 +- drivers/gpu/drm/bridge/display-connector.c | 11 +- drivers/gpu/drm/display/drm_dp_helper.c | 12 + drivers/gpu/drm/drm_exec.c | 6 +- drivers/gpu/drm/drm_fb_helper.c | 41 +-- drivers/gpu/drm/drm_fbdev_dma.c | 12 +- drivers/gpu/drm/drm_fbdev_shmem.c | 12 +- drivers/gpu/drm/drm_fbdev_ttm.c | 12 +- drivers/gpu/drm/drm_gpusvm.c | 12 +- drivers/gpu/drm/drm_gpuvm.c | 3 +- drivers/gpu/drm/exynos/exynos_drm_fbdev.c | 9 +- drivers/gpu/drm/gma500/fbdev.c | 12 +- drivers/gpu/drm/i915/display/intel_ddi.c | 2 + drivers/gpu/drm/i915/display/intel_dp.c | 9 +- drivers/gpu/drm/i915/display/intel_fbdev.c | 9 +- drivers/gpu/drm/i915/display/intel_hdmi.c | 26 ++ drivers/gpu/drm/i915/display/intel_hdmi.h | 2 + drivers/gpu/drm/i915/display/intel_vrr.c | 10 +- drivers/gpu/drm/mediatek/mtk_crtc.c | 6 +- drivers/gpu/drm/mediatek/mtk_disp_ovl_adaptor.c | 7 +- drivers/gpu/drm/msm/msm_fbdev.c | 9 +- drivers/gpu/drm/omapdrm/omap_fbdev.c | 9 +- drivers/gpu/drm/panthor/panthor_fw.c | 47 ++- drivers/gpu/drm/radeon/radeon_fbdev.c | 13 +- drivers/gpu/drm/tegra/fbdev.c | 18 +- drivers/gpu/drm/vc4/vc4_irq.c | 2 +- drivers/gpu/drm/vc4/vc4_validate.c | 29 +- drivers/gpu/drm/vmwgfx/ttm_object.c | 7 +- drivers/gpu/drm/vmwgfx/vmwgfx_blit.c | 39 ++- drivers/gpu/drm/vmwgfx/vmwgfx_cursor_plane.c | 49 ++- drivers/gpu/drm/vmwgfx/vmwgfx_execbuf.c | 20 +- drivers/gpu/drm/vmwgfx/vmwgfx_fence.c | 13 +- drivers/gpu/drm/vmwgfx/vmwgfx_page_dirty.c | 4 +- drivers/gpu/drm/vmwgfx/vmwgfx_resource.c | 4 +- drivers/gpu/drm/vmwgfx/vmwgfx_shader.c | 13 +- drivers/gpu/drm/vmwgfx/vmwgfx_vkms.c | 17 +- drivers/gpu/drm/xe/Makefile | 1 + drivers/gpu/drm/xe/xe_bo.h | 56 ++++ drivers/gpu/drm/xe/xe_bo_types.h | 6 + drivers/gpu/drm/xe/xe_device_types.h | 2 + drivers/gpu/drm/xe/xe_exec.c | 22 +- drivers/gpu/drm/xe/xe_gt_debugfs.c | 4 +- drivers/gpu/drm/xe/xe_guc_capture.c | 11 +- drivers/gpu/drm/xe/xe_hw_engine.c | 2 + drivers/gpu/drm/xe/xe_hw_engine_types.h | 8 + drivers/gpu/drm/xe/xe_migrate.c | 90 ++++-- drivers/gpu/drm/xe/xe_migrate.h | 4 + drivers/gpu/drm/xe/xe_oa.c | 7 + drivers/gpu/drm/xe/xe_oa_types.h | 3 + drivers/gpu/drm/xe/xe_pagefault.c | 65 ++++ drivers/gpu/drm/xe/xe_pagefault.h | 19 ++ drivers/gpu/drm/xe/xe_pagefault_types.h | 136 +++++++++ drivers/gpu/drm/xe/xe_pat.c | 6 + drivers/gpu/drm/xe/xe_pat.h | 10 + drivers/gpu/drm/xe/xe_pci.c | 1 + drivers/gpu/drm/xe/xe_pci_types.h | 1 + drivers/gpu/drm/xe/xe_pt.c | 31 +- drivers/gpu/drm/xe/xe_reg_whitelist.c | 119 ++++++-- drivers/gpu/drm/xe/xe_reg_whitelist.h | 4 + drivers/gpu/drm/xe/xe_vm.c | 107 +++++-- drivers/hid/hid-logitech-dj.c | 28 +- drivers/hv/channel_mgmt.c | 6 +- drivers/hv/hv.c | 206 +++++++------ drivers/hv/hyperv_vmbus.h | 22 +- drivers/hv/mshv_eventfd.c | 43 ++- drivers/hv/mshv_irq.c | 6 +- drivers/hv/mshv_portid_table.c | 6 +- drivers/hv/mshv_root.h | 2 +- drivers/hv/mshv_root_hv_call.c | 6 + drivers/hv/mshv_root_main.c | 8 +- drivers/hv/mshv_synic.c | 6 +- drivers/hv/vmbus_drv.c | 19 +- drivers/hwmon/Kconfig | 2 +- drivers/hwmon/adt7470.c | 131 +++++--- drivers/hwmon/ina2xx.c | 107 +++++-- drivers/hwmon/lm90.c | 4 +- drivers/hwmon/ltc4282.c | 4 +- drivers/hwmon/nct6775-core.c | 20 +- drivers/hwmon/npcm750-pwm-fan.c | 11 + drivers/hwmon/nzxt-smart2.c | 2 +- drivers/hwmon/pmbus/pmbus_core.c | 7 +- drivers/hwmon/sht3x.c | 9 +- drivers/i2c/busses/i2c-amd-mp2-plat.c | 4 +- drivers/i2c/busses/i2c-bcm-iproc.c | 11 + drivers/i2c/busses/i2c-imx.c | 54 +++- drivers/i2c/busses/i2c-jz4780.c | 5 +- drivers/i2c/busses/i2c-k1.c | 10 +- drivers/i2c/busses/i2c-qcom-cci.c | 18 +- .../iommu/arm/arm-smmu-v3/arm-smmu-v3-iommufd.c | 15 + drivers/iommu/io-pgfault.c | 24 +- drivers/iommu/iommufd/device.c | 2 +- drivers/iommu/iommufd/eventq.c | 2 + drivers/iommu/iommufd/viommu.c | 22 +- .../media/platform/chips-media/wave5/wave5-hw.c | 3 + .../platform/chips-media/wave5/wave5-vpu-enc.c | 5 +- .../platform/chips-media/wave5/wave5-vpuapi.h | 1 + drivers/media/platform/qcom/camss/camss-csid-340.c | 28 +- drivers/net/can/c_can/c_can_main.c | 8 +- drivers/net/can/ctucanfd/ctucanfd_base.c | 14 +- drivers/net/can/ctucanfd/ctucanfd_pci.c | 3 +- drivers/net/can/dev/skb.c | 2 - drivers/net/can/softing/softing_fw.c | 46 ++- drivers/net/can/usb/ems_usb.c | 43 +++ drivers/net/can/usb/etas_es58x/es58x_core.c | 1 - drivers/net/can/usb/gs_usb.c | 4 +- drivers/net/can/usb/kvaser_usb/kvaser_usb_hydra.c | 1 + drivers/net/can/usb/kvaser_usb/kvaser_usb_leaf.c | 13 +- drivers/net/can/usb/peak_usb/pcan_usb_core.c | 1 - drivers/net/can/usb/peak_usb/pcan_usb_fd.c | 40 ++- drivers/net/can/usb/peak_usb/pcan_usb_pro.c | 20 +- drivers/net/dsa/mt7530-mdio.c | 11 +- drivers/net/dsa/mt7530.c | 58 ++-- drivers/net/ethernet/intel/e1000/e1000_main.c | 2 +- drivers/net/ethernet/intel/ice/ice_dpll.c | 19 +- drivers/net/ethernet/intel/ice/ice_ethtool.c | 10 +- drivers/net/ethernet/intel/ice/ice_main.c | 10 + drivers/net/ethernet/intel/ice/ice_vf_lib.c | 27 ++ .../net/ethernet/intel/ice/ice_vf_lib_private.h | 1 + drivers/net/ethernet/intel/ice/virt/queues.c | 21 ++ drivers/net/ethernet/intel/idpf/idpf_lib.c | 2 +- drivers/net/ethernet/intel/idpf/idpf_txrx.c | 5 +- drivers/net/ethernet/intel/idpf/idpf_txrx.h | 2 +- drivers/net/ethernet/intel/igbvf/netdev.c | 2 - drivers/net/ethernet/intel/igc/igc_main.c | 3 +- .../net/ethernet/marvell/octeontx2/nic/otx2_pf.c | 2 +- drivers/net/ethernet/mediatek/mtk_eth_soc.c | 2 +- drivers/net/ethernet/nvidia/forcedeth.c | 4 +- drivers/net/ethernet/qlogic/qede/qede_main.c | 44 +-- drivers/net/ethernet/realtek/rtase/rtase_main.c | 3 + drivers/net/ethernet/samsung/sxgbe/sxgbe_main.c | 14 +- drivers/net/ethernet/wangxun/libwx/wx_lib.c | 2 + drivers/net/phy/phylink.c | 29 +- drivers/net/veth.c | 4 +- drivers/net/vxlan/vxlan_core.c | 21 +- drivers/net/vxlan/vxlan_mdb.c | 4 +- .../wireless/broadcom/brcm80211/brcmfmac/bcmsdh.c | 13 + .../net/wireless/broadcom/brcm80211/brcmfmac/bus.h | 6 + .../wireless/broadcom/brcm80211/brcmfmac/core.c | 46 ++- .../wireless/broadcom/brcm80211/brcmfmac/pcie.c | 6 + .../wireless/broadcom/brcm80211/brcmfmac/sdio.c | 6 + .../wireless/broadcom/brcm80211/brcmfmac/sdio.h | 1 + .../net/wireless/broadcom/brcm80211/brcmfmac/usb.c | 3 + .../net/wireless/marvell/mwifiex/11n_rxreorder.c | 2 +- drivers/of/address.c | 22 +- drivers/of/of_reserved_mem.c | 14 +- drivers/phy/qualcomm/phy-qcom-m31-eusb2.c | 2 +- drivers/phy/xilinx/phy-zynqmp.c | 62 ++-- drivers/pinctrl/Kconfig | 2 + drivers/pinctrl/devicetree.c | 4 + drivers/pinctrl/pinctrl-amd.c | 3 +- drivers/pinctrl/qcom/pinctrl-msm.c | 8 +- drivers/pinctrl/qcom/pinctrl-sc8280xp.c | 21 +- drivers/power/supply/bq25890_charger.c | 2 +- drivers/power/supply/max17040_battery.c | 6 +- drivers/ptp/ptp_netc.c | 15 +- drivers/s390/block/dasd_eckd.c | 11 +- drivers/s390/block/dasd_ioctl.c | 2 +- drivers/s390/crypto/pkey_cca.c | 15 +- drivers/s390/crypto/zcrypt_api.c | 2 +- drivers/s390/crypto/zcrypt_ccamisc.c | 89 +++++- drivers/s390/crypto/zcrypt_ccamisc.h | 6 +- drivers/s390/net/qeth_core_main.c | 3 + drivers/s390/scsi/zfcp_aux.c | 1 + drivers/scsi/hisi_sas/hisi_sas_v3_hw.c | 10 +- drivers/scsi/libiscsi.c | 2 +- drivers/scsi/libiscsi_tcp.c | 8 +- drivers/scsi/libsas/sas_init.c | 37 ++- drivers/scsi/scsi_debug.c | 8 +- drivers/spi/spi-cadence.c | 129 ++++++-- drivers/spi/spi-nxp-fspi.c | 83 ++++- drivers/spi/spi-qcom-qspi.c | 3 +- drivers/spi/spi-qpic-snand.c | 22 +- drivers/target/target_core_iblock.c | 6 +- drivers/target/target_core_transport.c | 12 +- drivers/thunderbolt/xdomain.c | 40 ++- drivers/ufs/core/ufshcd.c | 41 +-- drivers/usb/typec/ucsi/ucsi.c | 88 +++--- drivers/usb/typec/ucsi/ucsi.h | 1 + fs/afs/fsclient.c | 5 +- fs/afs/internal.h | 3 +- fs/binfmt_misc.c | 22 +- fs/btrfs/raid56.c | 4 +- fs/btrfs/super.c | 8 +- fs/btrfs/zoned.c | 17 +- fs/erofs/Kconfig | 14 + fs/erofs/decompressor_lzma.c | 3 +- fs/iomap/ioend.c | 21 +- fs/netfs/buffered_read.c | 4 +- fs/netfs/read_pgpriv2.c | 1 + fs/netfs/write_issue.c | 7 +- fs/proc/task_mmu.c | 33 +- fs/smb/client/cifssmb.c | 12 +- fs/smb/client/inode.c | 1 + fs/smb/server/connection.h | 5 + fs/smb/server/smb2pdu.c | 10 +- fs/smb/server/smb_common.c | 37 ++- fs/smb/server/vfs_cache.c | 6 +- include/asm-generic/mshyperv.h | 2 + include/drm/drm_exec.h | 20 +- include/drm/drm_fb_helper.h | 12 - include/hyperv/hvhdk.h | 6 + include/hyperv/hvhdk_mini.h | 3 +- include/linux/alloc_tag.h | 3 + include/linux/can/core.h | 1 + include/linux/can/skb.h | 2 - include/linux/cleanup.h | 7 + include/linux/dma/qcom_bam_dma.h | 21 +- include/linux/file.h | 125 ++++++++ include/linux/iommu.h | 5 + include/linux/libata.h | 2 +- include/linux/netfilter/nf_conntrack_sip.h | 2 +- include/linux/slab.h | 8 +- include/linux/thunderbolt.h | 3 + include/linux/userfaultfd_k.h | 5 +- include/net/bluetooth/hci.h | 54 ++++ include/net/bluetooth/hci_core.h | 12 + include/net/bluetooth/mgmt.h | 2 + include/net/ip_vs.h | 45 ++- include/net/neighbour.h | 8 +- include/net/netfilter/nf_conntrack_expect.h | 5 +- include/net/netfilter/nf_tables.h | 4 +- include/net/xdp_sock.h | 1 + include/net/xsk_buff_pool.h | 13 +- include/scsi/libsas.h | 1 - include/uapi/linux/rkisp1-config.h | 6 +- io_uring/net.c | 1 + kernel/audit.c | 11 +- kernel/auditfilter.c | 6 +- kernel/events/uprobes.c | 2 +- kernel/sched/cpufreq_schedutil.c | 11 + kernel/sched/deadline.c | 3 +- kernel/trace/fprobe.c | 6 +- kernel/trace/trace_events.c | 4 +- kernel/trace/trace_events_filter.c | 3 + kernel/trace/trace_fprobe.c | 12 +- kernel/trace/trace_mmiotrace.c | 13 +- kernel/trace/trace_probe.c | 6 +- lib/alloc_tag.c | 9 + lib/assoc_array.c | 3 +- lib/test_fortify/Makefile | 1 + mm/huge_memory.c | 12 + mm/hugetlb.c | 12 +- mm/memcontrol-v1.h | 6 +- mm/migrate_device.c | 5 +- mm/mm_init.c | 15 +- mm/page_reporting.c | 6 +- mm/percpu-km.c | 2 +- mm/slab.h | 28 +- mm/slab_common.c | 13 + mm/slub.c | 76 ++--- mm/util.c | 2 +- net/bluetooth/hci_conn.c | 14 +- net/bluetooth/hci_event.c | 79 ++++- net/bluetooth/hci_sync.c | 157 ++++++---- net/bluetooth/hidp/core.c | 30 +- net/bluetooth/iso.c | 301 ++++++++++++------ net/bluetooth/l2cap_core.c | 5 + net/bluetooth/mgmt.c | 96 ++++-- net/bluetooth/sco.c | 22 +- net/bridge/br_mrp.c | 2 +- net/bridge/br_multicast.c | 1 + net/bridge/br_netfilter_hooks.c | 6 +- net/can/af_can.c | 14 +- net/can/bcm.c | 2 - net/can/isotp.c | 337 +++++++++++++++------ net/can/j1939/bus.c | 2 + net/can/j1939/j1939-priv.h | 3 + net/can/j1939/main.c | 8 +- net/can/j1939/socket.c | 1 - net/can/j1939/transport.c | 6 +- net/can/raw.c | 7 +- net/core/lwt_bpf.c | 4 +- net/core/pktgen.c | 4 +- net/core/skbuff.c | 18 +- net/handshake/handshake-test.c | 8 + net/handshake/handshake.h | 2 + net/handshake/netlink.c | 54 ++-- net/handshake/request.c | 65 +++- net/ipv4/route.c | 2 - net/ipv4/udp_tunnel_nic.c | 32 +- net/ipv6/fib6_rules.c | 1 + net/ipv6/ip6_output.c | 2 +- net/ipv6/ndisc.c | 2 + net/mac80211/s1g.c | 4 + net/mpls/af_mpls.c | 1 + net/netfilter/ipset/ip_set_hash_gen.h | 2 +- net/netfilter/ipvs/ip_vs_app.c | 4 +- net/netfilter/ipvs/ip_vs_conn.c | 3 + net/netfilter/ipvs/ip_vs_core.c | 180 ++++++----- net/netfilter/ipvs/ip_vs_proto_sctp.c | 19 +- net/netfilter/ipvs/ip_vs_proto_tcp.c | 48 +-- net/netfilter/ipvs/ip_vs_proto_udp.c | 54 +--- net/netfilter/ipvs/ip_vs_xmit.c | 42 ++- net/netfilter/nf_conntrack_broadcast.c | 1 + net/netfilter/nf_conntrack_core.c | 7 +- net/netfilter/nf_conntrack_expect.c | 1 + net/netfilter/nf_conntrack_h323_main.c | 12 +- net/netfilter/nf_conntrack_helper.c | 5 + net/netfilter/nf_conntrack_netlink.c | 18 +- net/netfilter/nf_conntrack_sip.c | 4 +- net/netfilter/nf_nat_sip.c | 2 +- net/netfilter/nf_tables_api.c | 34 +-- net/netfilter/nft_payload.c | 12 +- net/netfilter/xt_hashlimit.c | 16 +- net/openvswitch/actions.c | 12 +- net/openvswitch/meter.c | 33 +- net/rds/ib.c | 4 + net/rds/ib_cm.c | 4 + net/rds/tcp.c | 14 +- net/sctp/associola.c | 3 + net/sctp/sm_make_chunk.c | 17 +- net/smc/smc_core.c | 2 +- net/tipc/socket.c | 2 +- net/unix/af_unix.c | 1 + net/xdp/xsk.c | 73 +++-- net/xdp/xsk_buff_pool.c | 3 +- security/keys/keyring.c | 14 +- security/keys/trusted-keys/trusted_dcp.c | 15 +- sound/core/pcm_native.c | 7 + sound/core/seq/seq_timer.c | 9 +- sound/core/timer.c | 2 + sound/core/ump.c | 1 + sound/hda/codecs/realtek/alc269.c | 4 +- sound/pci/lx6464es/lx6464es.c | 5 +- sound/pci/lx6464es/lx_core.c | 5 +- sound/soc/codecs/max98090.c | 5 +- sound/soc/codecs/max98095.c | 5 +- sound/soc/codecs/tas2562.c | 30 +- sound/soc/codecs/tas2781-i2c.c | 4 +- sound/soc/fsl/fsl_asrc.c | 2 +- sound/soc/fsl/fsl_easrc.c | 2 +- sound/soc/sdca/sdca_functions.c | 2 + sound/usb/6fire/chip.c | 4 + sound/usb/endpoint.c | 14 +- sound/usb/midi.c | 2 + sound/usb/midi2.c | 4 +- sound/usb/mixer_quirks.c | 2 +- tools/testing/kunit/kunit_kernel.py | 38 ++- tools/testing/kunit/kunit_tool_test.py | 42 +++ tools/testing/selftests/clone3/clone3_set_tid.c | 2 +- tools/testing/selftests/filesystems/fclog.c | 4 +- tools/testing/selftests/lkdtm/tests.txt | 2 +- tools/testing/selftests/mm/mlock-random-test.c | 2 +- tools/testing/selftests/net/.gitignore | 7 - tools/testing/selftests/net/af_unix/.gitignore | 9 + tools/testing/selftests/net/af_unix/Makefile | 2 + .../testing/selftests/net/af_unix/unix_connreset.c | 177 +++++++++++ tools/testing/selftests/net/af_unix/unix_listen.c | 187 ++++++++++++ tools/testing/selftests/seccomp/seccomp_bpf.c | 3 +- 402 files changed, 5655 insertions(+), 2209 deletions(-)

2 months, 3 weeks

[PATCH 6.12 000/337] 6.12.103-rc1 review

by Greg Kroah-Hartman

This is the start of the stable review cycle for the 6.12.103 release. There are 337 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know. Responses should be made by Sun, 09 Aug 2026 14:33:46 +0000. Anything received after that time might be too late. The whole patch series can be found in one patch at: https://www.kernel.org/pub/linux/kernel/v6.x/stable-review/patch-6.12.103-r… or in the git tree and branch at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-6.12.y and the diffstat can be found below. thanks, greg k-h ------------- Pseudo-Shortlog of commits: Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> Linux 6.12.103-rc1 Thomas Zimmermann <tzimmermann(a)suse.de> drm/tegra: fbdev: Do not assign to struct drm_fb_helper.info Bart Van Assche <bvanassche(a)acm.org> drm/fb-helper: Fix a locking bug in an error path Andrei Kuchynski <akuchynski(a)chromium.org> usb: typec: ucsi: Correct teardown ordering in ucsi_init() error path Oliver Hartkopp <socketcan(a)hartkopp.net> can: isotp: fix timer drain order, wakeup handling and tx_gen ordering Oliver Hartkopp <socketcan(a)hartkopp.net> can: use skb hash instead of private variable in headroom David Howells <dhowells(a)redhat.com> rxrpc: Fix irq-disabled in local_bh_enable() David Howells <dhowells(a)redhat.com> rxrpc: Manage RTT per-call rather than per-peer David Howells <dhowells(a)redhat.com> rxrpc: Fix the calculation and use of RTO David Howells <dhowells(a)redhat.com> rxrpc: Adjust the rxrpc_rtt_rx tracepoint David Howells <dhowells(a)redhat.com> rxrpc: Generate rtt_min Zongyao Bai <zongyao.bai(a)intel.com> drm/xe/pt: Reset current_op in xe_pt_update_ops_init() Matthew Brost <matthew.brost(a)intel.com> drm/xe: Stub out new pagefault layer Jani Nikula <jani.nikula(a)intel.com> drm/i915/hdcp: check streams[] bounds before overflow Suraj Kandpal <suraj.kandpal(a)intel.com> drm/i915/hdcp: Skip inactive MST connectors when building stream list Jani Nikula <jani.nikula(a)intel.com> drm/i915/hdcp: require monotonically increasing seq_num_v Suraj Kandpal <suraj.kandpal(a)intel.com> drm/i915/hdcp: Move to using intel_display in intel_hdcp Nitin Gote <nitin.r.gote(a)intel.com> drm/xe: Hold a dma-buf reference for imported BOs Thomas Hellström <thomas.hellstrom(a)linux.intel.com> drm/xe: Rename ___xe_bo_create_locked() Jani Nikula <jani.nikula(a)intel.com> drm/i915/vrr: require valid min/max vfreq for VRR Ville Syrjälä <ville.syrjala(a)linux.intel.com> drm/i915/vrr: Check HAS_VRR() first in intel_vrr_is_capable() Matthew Brost <matthew.brost(a)intel.com> drm/xe: Wait on external BO kernel fences in exec IOCTL Thomas Hellström <thomas.hellstrom(a)linux.intel.com> drm/exec: Remove the index parameter from drm_exec_for_each_locked_obj[_reverse] Thomas Zimmermann <tzimmermann(a)suse.de> drm/tegra: fbdev: Remove offset into framebuffer memory Thomas Zimmermann <tzimmermann(a)suse.de> drm/fb-helper: Allocate and release fb_info in single place Asad Kamal <asad.kamal(a)amd.com> drm/amdgpu/gfx: fix cleaner shader IB buffer overflow Pierre-Eric Pelloux-Prayer <pierre-eric.pelloux-prayer(a)amd.com> drm/amdgpu: give each kernel job a unique id Pierre-Eric Pelloux-Prayer <pierre-eric.pelloux-prayer(a)amd.com> drm/sched: Store the drm client_id in drm_sched_fence Tvrtko Ursulin <tvrtko.ursulin(a)igalia.com> drm/amdgpu: Fix context pstate override handling Timur Kristóf <timur.kristof(a)gmail.com> drm/amdgpu: Respect placement requirements in amdgpu_gtt_mgr functions Breno Leitao <leitao(a)debian.org> mm/kmemleak: fix checksum computation for per-cpu objects Catalin Marinas <catalin.marinas(a)arm.com> kmemleak: iommu/iova: fix transient kmemleak false positive Geliang Tang <geliang(a)kernel.org> mptcp: pm: userspace: fix use-after-free in get_local_id Geliang Tang <geliang(a)kernel.org> mptcp: pm: use addr entry for get_local_id Geliang Tang <geliang(a)kernel.org> mptcp: add mptcp_userspace_pm_lookup_addr helper Geliang Tang <geliang(a)kernel.org> mptcp: pm: avoid code duplication to lookup endp Kai Vehmanen <kai.vehmanen(a)linux.intel.com> ALSA: hda: codecs: hdmi: disable keep-alive before audio format change LiangCheng Wang <zaq14760(a)gmail.com> wifi: brcmfmac: set F2 blocksize to 256 for BCM43752 Gokul Sivakumar <gokulkumar.sivakumar(a)infineon.com> wifi: brcmfmac: fix 43752 SDIO FWVID incorrectly labelled as Cypress (CYW) Daniel Hodges <git(a)danielhodges.dev> wifi: ath6kl: fix use-after-free in aggr_reset_state() Fan Wu <fanwu01(a)zju.edu.cn> wifi: brcmfmac: drain bus_reset work on device removal Niklas Söderlund <niklas.soderlund+renesas(a)ragnatech.se> media: uapi: rkisp: Correct name version enum Jackson Lee <jackson.lee(a)chipsnmedia.com> media: chips-media: wave5: Support CBP profile Sakari Ailus <sakari.ailus(a)linux.intel.com> media: imx219: Fix maximum frame length in lines Jai Luthra <jai.luthra(a)ideasonboard.com> media: i2c: imx219: Rename VTS to FRM_LENGTH Andrei Kuchynski <akuchynski(a)chromium.org> usb: typec: ucsi: Fix race condition and ordering in port unregistration Sergey Senozhatsky <senozhatsky(a)chromium.org> usb: typec: ucsi: split connector lock classes Cen Zhang <zzzccc427(a)gmail.com> usb: gadget: f_tcm: synchronize delayed set_alt with teardown Junjie Cao <junjie.cao(a)intel.com> gpio: pch: use raw_spinlock_t for the register lock Harry Yoo (Oracle) <harry(a)kernel.org> mm/slab: prevent unbounded recursion in free path with new kmalloc type Harry Yoo (Oracle) <harry(a)kernel.org> lib/alloc_tag: introduce mem_alloc_profiling_permanently_disabled() Kiryl Shutsemau (Meta) <kas(a)kernel.org> mm/huge_memory: unlock i_mmap_rwsem before releasing after-split folios Kiryl Shutsemau (Meta) <kas(a)kernel.org> fs/proc/task_mmu: fix PAGEMAP_SCAN written state for unpopulated ptes Kiryl Shutsemau (Meta) <kas(a)kernel.org> mm/hugetlb: fix swap entry corruption when clearing uffd-wp at fork() Ashutosh Dixit <ashutosh.dixit(a)intel.com> drm/xe/rtp: Ensure locking/ref counting for OA whitelists Ashutosh Dixit <ashutosh.dixit(a)intel.com> drm/xe/oa: (De-)whitelist OA registers on OA stream open/release Ashutosh Dixit <ashutosh.dixit(a)intel.com> drm/xe/rtp: (De-)whitelist OA registers for all hwe's for a gt Ashutosh Dixit <ashutosh.dixit(a)intel.com> drm/xe/rtp: Toggle 'deny' bit to (de-)whitelist OA regs Ashutosh Dixit <ashutosh.dixit(a)intel.com> drm/xe/rtp: Save OA nonpriv registers to register save/restore lists Ashutosh Dixit <ashutosh.dixit(a)intel.com> drm/xe/rtp: Generalize whitelist_apply_to_hwe Ashutosh Dixit <ashutosh.dixit(a)intel.com> drm/xe/rtp: Keep track of non-OA nonpriv slots Ashutosh Dixit <ashutosh.dixit(a)intel.com> drm/xe/rtp: Maintain OA whitelists separately Ashutosh Dixit <ashutosh.dixit(a)intel.com> drm/xe/rtp: Add RING_FORCE_TO_NONPRIV_DENY to OA whitelists Lucas De Marchi <lucas.demarchi(a)intel.com> drm/xe: Apply whitelist to engine save-restore Michal Wajdeczko <michal.wajdeczko(a)intel.com> drm/xe: Introduce xe_gt_dbg_printer() Ashutosh Dixit <ashutosh.dixit(a)intel.com> drm/xe/rtp: Refactor OAG MMIO trigger register whitelisting Pauli Virtanen <pav(a)iki.fi> Bluetooth: ISO: fix CONNECTED -> CLOSED transition on shutdown/release Wandun Chen <chenwandun(a)lixiang.com> of: reserved_mem: avoid post-init UAF when alloc_reserved_mem_array() fails Niklas Cassel <cassel(a)kernel.org> ata: ahci: Make ahci_ignore_port() handle empty mask_port_map Damien Le Moal <dlemoal(a)kernel.org> ata: libahci_platform: Do not set mask_port_map when not needed HyeongJun An <sammiee5311(a)gmail.com> HID: logitech-dj: Fix maxfield check in DJ short report validation Jun Guo <jun.guo(a)cixtech.com> spi: spi-cadence: enable SPI_CONTROLLER_MUST_TX Zack Rusin <zack.rusin(a)broadcom.com> drm/vmwgfx: validate external BO copy bounds for both stride paths Zack Rusin <zack.rusin(a)broadcom.com> drm/vmwgfx: use check_add_overflow for shader size+offset bound Zack Rusin <zack.rusin(a)broadcom.com> drm/vmwgfx: avoid destroy_workqueue(NULL) on vkms init failure Zack Rusin <zack.rusin(a)broadcom.com> drm/vmwgfx: bound DMA command body size against suffix pointer Zack Rusin <zack.rusin(a)broadcom.com> drm/vmwgfx: validate DRAW_PRIMITIVES header size before division Zack Rusin <zack.rusin(a)broadcom.com> drm/vmwgfx: drop dma_buf reference on foreign-fd prime import Zack Rusin <zack.rusin(a)broadcom.com> drm/vmwgfx: reject DX_BIND_QUERY without a DX context Zack Rusin <zack.rusin(a)broadcom.com> drm/vmwgfx: fix guest_memory_dirty bitfield clobbered as size William Palacek <William.Palacek(a)amd.com> drm/amdkfd: hold event_mutex while checkpointing CRIU events David Francis <David.Francis(a)amd.com> drm/amdkfd: Handle invalid event type in CRIU event restore William Palacek <William.Palacek(a)amd.com> drm/amdkfd: fix uint32_t overflow in EOP ring buffer size alignment Vladimir Marioukhine <Vladimir.Marioukhine(a)amd.com> drm/amdkfd: fix QID bit leak in pqm_create_queue() Gang Ba <Gang.Ba(a)amd.com> drm/amdkfd: Fix missing authorization check in KFD_IOC_DBG_TRAP_DISABLE Jiri Slaby (SUSE) <jirislaby(a)kernel.org> drm/amd/display: use proper context for logging Ray Wu <ray.wu(a)amd.com> drm/amd/display: Increase HDMI AV mute wait from 2 to 3 frames Harkirat Gill <harkirat.gill(a)amd.com> drm/amdgpu: cap GTT size to physical RAM on APUs Candice Li <candice.li(a)amd.com> drm/amdgpu: restore UMD profile pstate after runtime resume Myeonghun Pak <mhun512(a)gmail.com> drm/mediatek: ovl_adaptor: balance component registrations Osama Abdelkader <osama.abdelkader(a)gmail.com> drm/panthor: validate firmware interface structure sizes Osama Abdelkader <osama.abdelkader(a)gmail.com> drm/panthor: reject firmware sections with oversized data Maíra Canal <mcanal(a)igalia.com> drm/vc4: Zero the tile state data array before each BIN job Jose Maria Casanova Crespo <jmcasanova(a)igalia.com> drm/vc4: Supply the overflow slot size in BPOS, not the whole bin BO size Alexander Kaplan <alexander.kaplan(a)sms-medipool.de> drm/dp: Read the PCON max FRL bandwidth only for HDMI DFPs Avi Weiss <thnkslprpt(a)gmail.com> can: ctucanfd: mark error-active controller status valid Avi Weiss <thnkslprpt(a)gmail.com> can: ctucanfd: handle bus error interrupts Avi Weiss <thnkslprpt(a)gmail.com> can: ctucanfd: unmap BAR0 using base address Avi Weiss <thnkslprpt(a)gmail.com> can: ctucanfd: use self-test mode for PRESUME_ACK Pengpeng Hou <pengpeng(a)iscas.ac.cn> can: ctucanfd: add missing MODULE_DEVICE_TABLE() Pengpeng Hou <pengpeng(a)iscas.ac.cn> can: peak_usb: validate uCAN receive record lengths Maoyi Xie <maoyixie.tju(a)gmail.com> can: peak_usb: peak_usb_start(): fix double free of transfer buffer on URB submit error James Gao <jamesgao5(a)outlook.com> can: peak_usb: add bounds check for USB channel index Pengpeng Hou <pengpeng(a)iscas.ac.cn> can: softing: fw_parse(): validate firmware record spans Pengpeng Hou <pengpeng(a)iscas.ac.cn> can: kvaser_usb_leaf: kvaser_usb_leaf_wait_cmd(): validate received command extents Abdun Nihaal <nihaal(a)cse.iitm.ac.in> can: kvaser_usb: kvaser_usb_hydra_get_busparams(): fix memory leak in kvaser_usb_hydra_get_busparams() Tetsuo Handa <penguin-kernel(a)I-love.SAKURA.ne.jp> can: j1939: use netdevice_tracker for j1939_{priv,session,ecu} tracking Oleksij Rempel <o.rempel(a)pengutronix.de> can: j1939: transport: j1939_session_fresh_new(): initialize receive buffer Marc Kleine-Budde <mkl(a)pengutronix.de> can: gs_usb: gs_usb_receive_bulk_callback(): resubmit URB on skb allocation failure Guangshuo Li <lgs201920130244(a)gmail.com> can: etas_es58x: es58x_read_bulk_callback(): fix RX buffer leak on URB resubmit failure Pengpeng Hou <pengpeng(a)iscas.ac.cn> can: ems_usb: validate CPC message lengths Lucas Martins Alves <lucas.alves(a)lumal21.com.br> can: c_can: c_can_chip_config(): keep controller in init mode until bittiming is configured Liem <liem16213(a)gmail.com> i2c: imx: Cancel hrtimer before clearing slave pointer Liem <liem16213(a)gmail.com> i2c: imx: Fix slave registration race and error handling Jonas Gorski <jonas.gorski(a)bisdn.de> i2c: iproc: reset bus after timeout if START_BUSY is stuck H. Nikolaus Schaller <hns(a)goldelico.com> i2c: jz4780: Cache host clock rate at probe to prevent CCF prepare_lock deadlock Dawei Feng <dawei.feng(a)seu.edu.cn> ice: fix memory leak in ice_lbtest_prepare_rings() Aaron Ma <aaron.ma(a)canonical.com> ice: wait for reset completion in ice_resume() Ilya Maximets <i.maximets(a)ovn.org> net: openvswitch: fix skb leak on flow key update failure during ct Ilya Maximets <i.maximets(a)ovn.org> net: openvswitch: fix skb leak on flow key update failure during recirculation Ilya Maximets <i.maximets(a)ovn.org> net: openvswitch: fix potential UAF on meter attach failure Nava kishore Manne <nava.kishore.manne(a)amd.com> phy: zynqmp: keep SERDES scrambler and 8b/10b enabled for USB Nava kishore Manne <nava.kishore.manne(a)amd.com> phy: zynqmp: use read-modify-write for SERDES scrambler bypass Nava kishore Manne <nava.kishore.manne(a)amd.com> phy: zynqmp: fix L0_TM_DISABLE_SCRAMBLE_ENCODER mask Holger Dengler <dengler(a)linux.ibm.com> s390/zcrypt: Validate length for CCA ECC private key requests Holger Dengler <dengler(a)linux.ibm.com> s390/zcrypt: Validate length for CCA AES cipher key requests Harald Freudenberger <freude(a)linux.ibm.com> s390/zcrypt: Fix wrong domain value verification with EP11 CPRBs Stefan Haberland <sth(a)linux.ibm.com> s390/dasd: Fix undersized format-check buffer Jan Höppner <hoeppner(a)linux.ibm.com> s390/dasd: Fix potential NULL pointer dereference Aswin Karuvally <aswin(a)linux.ibm.com> s390/qeth: Check CAP_NET_ADMIN for private ioctls Niklas Schnelle <schnelle(a)linux.ibm.com> s390/pci: Fix s390_pci_mmio_write syscall error return without MIO Jianing Li <m13940358460(a)163.com> power: supply: max17040: handle missing status supplier Xu Rao <raoxu(a)uniontech.com> power: supply: bq25890: fix the -10 C NTC lookup entry Zhongqiu Han <zhongqiu.han(a)oss.qualcomm.com> cpufreq: schedutil: Publish util hooks only after all sg_cpu are initialized Abdun Nihaal <nihaal(a)cse.iitm.ac.in> cpufreq: powernow-k8: Fix possible memory leak in powernowk8_cpu_init() bui duc phuc <phucduc.bui(a)gmail.com> gpio: pca953x: fix cache_only and IRQ state on restore_context() failure Myeonghun Pak <mhun512(a)gmail.com> i2c: amd-mp2: Unregister callback on adapter add failure Vincent Jardin <vjardin(a)free.fr> hwmon: (pmbus/core) notify on the hwmon device, not the i2c client Hongyan Xu <getshell(a)seu.edu.cn> hwmon: (npcm750-pwm-fan): stop fan timer on device detach Asim Viladi Oglu Manizada <manizada(a)pm.me> sctp: prevent peer transport count overflow Yuxiang Yang <yangyx22(a)mails.tsinghua.edu.cn> sctp: reject stale cookies with mismatched verification tags Ibrahim Hashimov <security(a)auditcode.ai> scsi: scsi_debug: Fix REPORT ZONES alloc_len underflow OOB write Chris Gellermann <christian.gellermann(a)codasip.com> selftests/clone3: fix wild pointer access of getline due to missing init Chris Gellermann <christian.gellermann(a)codasip.com> selftests/mm: fix potential wild pointer access of getline due to missing init Vijaya Krishna Nivarthi <vijaya.nivarthi(a)oss.qualcomm.com> spi: qcom-qspi: Correct max DMA length to avoid 64K boundary failure Masami Hiramatsu (Google) <mhiramat(a)kernel.org> tracing/filters: Fix false positive match in regex_match_full() Masami Hiramatsu (Google) <mhiramat(a)kernel.org> tracing: Check return value of __register_event() in trace_module_add_events() Ming Lei <tom.leiming(a)gmail.com> ublk: reset kernel-owned dev_info fields in ublk_ctrl_add_dev() Eric Dumazet <edumazet(a)google.com> vxlan: use pskb_network_may_pull() in route_shortcircuit() Eric Dumazet <edumazet(a)google.com> vxlan: use neigh_ha_snapshot() in route_shortcircuit() Eric Dumazet <edumazet(a)google.com> vxlan: unclone skb head before modifying eth header in route_shortcircuit() Eric Dumazet <edumazet(a)google.com> vxlan: re-fetch eth header after route_shortcircuit() Matt Fleming <mfleming(a)cloudflare.com> veth: convert frag_list skbs before running XDP Michael Bommarito <michael.bommarito(a)gmail.com> um: vector: fix use-after-free in vector_mmsg_rx() Thorsten Blum <thorsten.blum(a)linux.dev> powerpc/ps3: Fix map failure path in dma_ioc0_map_pages() Zhiling Zou <zhilinz(a)nebusec.ai> net: ipv6: clear suppressed fib6 rule result Zhiling Zou <zhilinz(a)nebusec.ai> net: bridge: stop fast-leave after deleting a port group Breno Leitao <leitao(a)debian.org> mm: memcg: initialize *locked in memcg1_oom_prepare() stub Link Lin <linkl(a)google.com> mm/page_reporting: use system_freezable_wq to fix UAF during suspend Christian Brauner <brauner(a)kernel.org> binfmt_misc: don't let an 'F' entry pin its own instance Christian Brauner <brauner(a)kernel.org> binfmt_misc: reject a flag character as the field delimiter Zhao Li <enderaoelyther(a)gmail.com> wifi: mwifiex: use the subframe length when parsing A-MSDU TDLS frames Zihan Xi <zihanx(a)nebusec.ai> tipc: avoid use-after-free in poll trace queue dumps David Lee <david.lee(a)trailofbits.com> netfilter: ipset: do not update comments from kernel-side hash adds Xuanqiang Luo <luoxuanqiang(a)kylinos.cn> net/smc: fix socket use-after-free during link group termination Zhiling Zou <roxy520tt(a)gmail.com> ipvs: do not propagate one-packet flag to synced conns Matt Vollrath <tactii(a)gmail.com> igbvf: Fix leak in TX DMA error cleanup Dawei Feng <dawei.feng(a)seu.edu.cn> e1000: fix memory leak in e1000_probe() Md Sadre Alam <md.alam(a)oss.qualcomm.com> dmaengine: qcom: bam_dma: Fix command element mask field for BAM v1.6.0+ Sonali Pradhan <sonalipradhan(a)google.com> ALSA: usb-audio: Clamp frame size in implicit-feedback mode Sonali Pradhan <sonalipradhan(a)google.com> ALSA: usb-audio: Fix DMA buffer out-of-bounds write when fill_max is set Baul Lee <baul.lee(a)xbow.com> ALSA: usb-audio: fix OOB write in snd_usbmidi_akai_output() Baul Lee <baul.lee(a)xbow.com> ALSA: usb-audio: fix stack info leak in RME Digiface status Baul Lee <baul.lee(a)xbow.com> ALSA: usb-audio: fix use-after-free in ump_to_endpoint() Niklas Cassel <cassel(a)kernel.org> ata: libata-sata: fix ata_scsi_lpm_supported() iteration Matt Vollrath <tactii(a)gmail.com> ata: libata-eh: Increase STANDBY IMMEDIATE timeout Haidar Lee <haidar.lee(a)adlinktech.com> ASoC: tas2562: fix broken entries in the volume lookup table Haidar Lee <haidar.lee(a)adlinktech.com> ASoC: tas2562: fix DVC coefficient write order Baul Lee <baul.lee(a)xbow.com> ALSA: ump: fix double free of out_cvts on rawmidi error Norbert Szetei <norbert(a)doyensec.com> ALSA: timer: Clear SNDRV_TIMER_IFLG_DEAD once the close completes Norbert Szetei <norbert(a)doyensec.com> ALSA: seq: Fix division by zero in initialize_timer() Norbert Szetei <norbert(a)doyensec.com> ALSA: pcm: wake linked drain waiters on unlink Xu Rao <raoxu(a)uniontech.com> ALSA: lx6464es: fix period byte count for 16-bit streams Takashi Iwai <tiwai(a)suse.de> ALSA: 6fire: Fix UAF at error handling during probe Xuanqiang Luo <luoxuanqiang(a)kylinos.cn> bpf: lwt: Fix dst reference leak on reroute failure Sangho Lee <kudo3228(a)gmail.com> Bluetooth: HIDP: validate numbered report payloads Sangho Lee <kudo3228(a)gmail.com> Bluetooth: HIDP: reject frames without a transaction header Chengfeng Ye <nicoyip.dev(a)gmail.com> Bluetooth: hci_sync: Fix advertising data UAFs Zihan Xi <xizh2024(a)lzu.edu.cn> Bluetooth: mgmt: fix UAF in pair command cancellation Zihan Xi <zihanx(a)nebusec.ai> Bluetooth: mgmt: fix pending command UAF in EIR updates Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> Bluetooth: btmtk: Fix short read errors in btmtk_usb_uhw_reg_read() Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> Bluetooth: btusb: Fix short read errors in btusb_qca_send_vendor_req() Luxiao Xu <rakukuip(a)gmail.com> audit: fix potential use-after-free in audit_del_rule() Zhan Xusheng <zhanxusheng1024(a)gmail.com> audit: fix potential integer overflow in audit_log_n_string() Charles Vosburgh <trilobyte777(a)gmail.com> sctp: validate Adaptation Indication parameter length Farhan Ali <alifm(a)linux.ibm.com> KVM: s390: pci: Validate AIBV and AISB before pinning guest pages Farhan Ali <alifm(a)linux.ibm.com> KVM: s390: pci: Fix NULL dereference on AIBV allocation failure Farhan Ali <alifm(a)linux.ibm.com> KVM: s390: pci: Reject adapter interrupt forwarding if already enabled Sean Christopherson <seanjc(a)google.com> KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active Raushan Patel <raushan.jhon(a)gmail.com> tracing/probes: Reject $arg0 in meta argument expansion Gregory Price <gourry(a)gourry.net> mm/vmstat: fold stranded per-cpu node stats when a node comes online Xiangfeng Cai <caixiangfeng(a)bytedance.com> mm/hugetlb: fix list corruption in allocate_file_region_entries() Zi Yan <ziy(a)nvidia.com> mm/percpu-km: fix bitmap overflow and accounting in pcpu_create_chunk() Kiryl Shutsemau (Meta) <kas(a)kernel.org> fs/proc/task_mmu: fix PAGEMAP_SCAN written state for PMD holes Kefeng Wang <wangkefeng.wang(a)huawei.com> mm: migrate_device: fix pte_pfn/pte_dirty called on non-present PTE Nathan Chancellor <nathan(a)kernel.org> fortify: Disable -Wstringop-overread in tests Benjamin Boortz <bennib(a)mailbox.org> pinctrl: bm1880: add missing select GENERIC_PINCONF Michael Bommarito <michael.bommarito(a)gmail.com> erofs: cap LZMA stream pool size Karl Mehltretter <kmehltretter(a)gmail.com> pinctrl: devicetree: don't free uninitialized dev_name on error path Benjamin Boortz <bennib(a)mailbox.org> pinctrl: microchip-sgpio: add missing select REGMAP_MMIO Cen Zhang (Microsoft) <blbllhy(a)gmail.com> rhashtable: clear stale iter->p on table restart Namjae Jeon <linkinjeon(a)kernel.org> ksmbd: fix use-after-free in __close_file_table_ids() Namjae Jeon <linkinjeon(a)kernel.org> ksmbd: return success for deferred final close Denis V. Lunev <den(a)openvz.org> qede: sync udp_tunnel ports outside qede_lock in the recovery path Gabriele Monaco <gmonaco(a)redhat.com> sched/deadline: Use revised wakeup rule only for running dl_server Suman Ghosh <sumang(a)marvell.com> octeontx2-pf: Set correct sequence for carrier off and tx queue stop Jiawen Wu <jiawenwu(a)trustnetic.com> net: libwx: fix FDIR ATR queue mismatch for software VLAN packets Daniel Golle <daniel(a)makrotopia.org> net: dsa: mt7530: error out on failed reads in MT7531 PHY polling Daniel Golle <daniel(a)makrotopia.org> net: dsa: mt7530: check bus->read() errors in the MDIO regmap backend Karl Mehltretter <kmehltretter(a)gmail.com> riscv: mm: Fix out-of-bounds page-table walk during memory hot-remove Muhammad Bilal <meatuni001(a)gmail.com> accel/qaic: use sizeof(*trans_hdr) for transaction length check Masami Hiramatsu (Google) <mhiramat(a)kernel.org> tracing/mmiotrace: Add NULL check for mmio_trace_array in logging functions Zheng Yejian <zhengyejian(a)huaweicloud.com> tracing: Remove TRACE_EVENT_FL_FILTERED logic Masami Hiramatsu (Google) <mhiramat(a)kernel.org> tracing/mmiotrace: Reset dropped_count in mmio_reset_data() Minhong He <heminhong(a)kylinos.cn> can: isotp: check register_netdevice_notifier() error in module init Chenguang Zhao <zhaochenguang(a)kylinos.cn> net: sxgbe: check descriptor ring allocation failures Chenguang Zhao <zhaochenguang(a)kylinos.cn> net: sxgbe: free TX rings on RX allocation failure Leon Romanovsky <leon(a)kernel.org> scsi: target: Clear cmd_cnt when initial counter enrollment fails Benjamin Block <bblock(a)linux.ibm.com> scsi: zfcp: Fix memory leak during adapter release by destroying gid_pn_req Guangshuo Li <lgs201920130244(a)gmail.com> scsi: ufs: core: Cancel RTC work in active-active suspend TanZheng <tanzheng(a)kylinos.cn> scsi: target: iblock: Fix wrong PR ops NULL check for PREEMPT/RELEASE Christian Marangi <ansuelsmth(a)gmail.com> net: phylink: put link_gpio if phylink_create fails Pauli Virtanen <pav(a)iki.fi> Bluetooth: hci_sync: remove unnecessary hci_conn_get in create_conn_sync Pauli Virtanen <pav(a)iki.fi> Bluetooth: hci_sync: fix hci_conn_del() use in hci_le_create_conn_sync Pauli Virtanen <pav(a)iki.fi> Bluetooth: hci_conn: hold conn reference in abort_conn_sync() Pauli Virtanen <pav(a)iki.fi> Bluetooth: hci_sync: make hci_cmd_sync_run_once return -EEXIST if exists Zijun Hu <zijun.hu(a)oss.qualcomm.com> Bluetooth: btintel: Validate length before parsing diagnostics TLV Pauli Virtanen <pav(a)iki.fi> Bluetooth: ISO: avoid deadlocks in iso_sock_timeout Pauli Virtanen <pav(a)iki.fi> Bluetooth: ISO: fix leaking sk after socket release Pauli Virtanen <pav(a)iki.fi> Bluetooth: ISO: validate sockaddr_iso first in iso_sock_rebind_bis() Pauli Virtanen <pav(a)iki.fi> Bluetooth: ISO: fix timeout vs sync_timeout typo in check_bcast_qos Jiale Yao <yaojiale02(a)163.com> Bluetooth: L2CAP: fix UAF in l2cap_le_connect_rsp Pauli Virtanen <pav(a)iki.fi> Bluetooth: ISO: clear iso_data always when detaching conn from hcon Yuho Choi <dbgh9129(a)gmail.com> idpf: Fix mailbox IRQ name leak on request failure Joshua Hay <joshua.a.hay(a)intel.com> idpf: adjust TxQ ring count minimum Guenter Roeck <linux(a)roeck-us.net> hwmon: (pmbus) Fix return value from pmbus_update_byte_data() Chenguang Zhao <zhaochenguang(a)kylinos.cn> net: ethernet: mtk_eth_soc: pass eth to mtk_handle_irq_rx in poll_controller Frank Wunderlich <frank-w(a)public-files.de> net: ethernet: mtk_eth_soc: add consts for irq index Frank Wunderlich <frank-w(a)public-files.de> net: ethernet: mtk_eth_soc: support named IRQs Zhao Li <enderaoelyther(a)gmail.com> wifi: mac80211: validate individual TWT params before driver setup Eric Dumazet <edumazet(a)google.com> net: udp_tunnel: fix memory leak in udp_tunnel_nic_unregister() Thorsten Blum <thorsten.blum(a)linux.dev> powerpc/boot: Fix treeboot-akebono CPU node lookup check Thorsten Blum <thorsten.blum(a)linux.dev> powerpc/boot: Fix treeboot-currituck CPU node lookup check Thorsten Blum <thorsten.blum(a)linux.dev> powerpc/boot: Fix simpleboot CPU node lookup check Yun Lu <luyun(a)kylinos.cn> rtase: fix double free of multi-frag skb on DMA map failure Luiz Angelo Daros de Luca <luizluca(a)gmail.com> hwmon: (adt7470) Fix PWM auto temp state array and bounds check Luiz Angelo Daros de Luca <luizluca(a)gmail.com> hwmon: (adt7470) Fix divide-by-zero TOCTOU crash in fan speed read Luiz Angelo Daros de Luca <luizluca(a)gmail.com> hwmon: (adt7470) Use cached PWM frequency value Luiz Angelo Daros de Luca <luizluca(a)gmail.com> hwmon: (adt7470) Fix swapped PWM3 and PWM4 auto mode masks Luiz Angelo Daros de Luca <luizluca(a)gmail.com> hwmon: (adt7470) Fix temperature alarm logic in hwmon_temp_read() Luiz Angelo Daros de Luca <luizluca(a)gmail.com> hwmon: (adt7470) Fix busy-loop and I2C flooding in update thread Luiz Angelo Daros de Luca <luizluca(a)gmail.com> hwmon: (adt7470) Fix cache updated before hardware write on I2C error Luiz Angelo Daros de Luca <luizluca(a)gmail.com> hwmon: (adt7470) Fix fans stuck in manual mode on I2C errors Chenguang Zhao <zhaochenguang(a)kylinos.cn> forcedeth: fix UAF of txrx_stats in nv_remove David Corvaglia <david(a)corvaglia.dev> net: bridge: mrp: fix Option TLV length in MRP_Test frames Guenter Roeck <linux(a)roeck-us.net> hwmon: (nct6775-core) Prevent access to unsupported weight registers Eric Dumazet <edumazet(a)google.com> net: do not send ICMP/NDISC Redirects when peer allocation fails Guenter Roeck <linux(a)roeck-us.net> hwmon: (nzxt-smart2) DMA-align output buffer Guenter Roeck <linux(a)roeck-us.net> hwmon: (lm90) Only report alarms if driver is ready Guenter Roeck <linux(a)roeck-us.net> hwmon: (sht3x) Fix unaligned accesses Guenter Roeck <linux(a)roeck-us.net> hwmon: (ltc4282) Fix reading the minimum alarm voltage Guenter Roeck <linux(a)roeck-us.net> hwmon: (ina2xx) Fix various overflow issues Jonas Rebmann <jre(a)pengutronix.de> hwmon: (ina2xx) Shift INA234 shunt and current registers Ian Ray <ian.ray(a)gehealthcare.com> hwmon: (ina2xx) Add support for INA234 Ian Ray <ian.ray(a)gehealthcare.com> hwmon: (ina2xx) Make it easier to add more devices Wenliang Yan <wenliang202407(a)163.com> hwmon: (ina226) Add support for SY24655 Guenter Roeck <linux(a)roeck-us.net> hwmon: (ina2xx) Add support for INA260 Guenter Roeck <linux(a)roeck-us.net> hwmon: (ina2xx) Add support for has_alerts configuration flag Guenter Roeck <linux(a)roeck-us.net> hwmon: (nct6775-core) Fix number of temperature registers for NCT6116 Srikanth Boyapally <srikanth.boyapally(a)amd.com> spi: spi-cadence: Move TX FIFO full busy-wait into FIFO Jun Guo <jun.guo(a)cixtech.com> spi: spi-cadence: supports transmission with bits_per_word of 16 and 32 Dawei Feng <dawei.feng(a)seu.edu.cn> smb: client: fix buffer leaks in SMB1 read and write Xingui Yang <yangxingui(a)huawei.com> scsi: libsas: Fix HA resume deadlock and hisi_sas disk-wake race HyeongJun An <sammiee5311(a)gmail.com> scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer HyeongJun An <sammiee5311(a)gmail.com> scsi: libiscsi: Fix stale-data leak into the SCSI sense buffer Mario Limonciello <mario.limonciello(a)amd.com> pinctrl-amd: Don't clear S4 wake bits at probe Xiang Mei <xmei5(a)asu.edu> rds: tcp: hold the RCU lock across ipv6_chk_addr() in rds_tcp_laddr_check() Ilia Gavrilov <Ilia.Gavrilov(a)infotecs.ru> rds: Fix inet6_addr_lst NULL dereference when IPv6 is disabled Xiang Mei (Microsoft) <xmei5(a)asu.edu> netfilter: nft_payload: fix mask build for partial field offload Julian Anastasov <ja(a)ssi.bg> ipvs: do not mangle ICMP replies for non-first fragments Julian Anastasov <ja(a)ssi.bg> ipvs: fix places with wrong packet offsets Julian Anastasov <ja(a)ssi.bg> ipvs: fix the checksum validations Pablo Neira Ayuso <pablo(a)netfilter.org> netfilter: xt_hashlimit: validate hashtable supports XT_HASHLIMIT_RATE_MATCH Pablo Neira Ayuso <pablo(a)netfilter.org> netfilter: nf_tables: make nft_object rhltable per table Michael Bommarito <michael.bommarito(a)gmail.com> assoc_array: trim the final shortcut word using the current chunk end Michael Bommarito <michael.bommarito(a)gmail.com> keys: make keyring key-chunk byte order agree with keyring_diff_objects() Michael Bommarito <michael.bommarito(a)gmail.com> keys: fix out-of-bounds read in keyring_get_key_chunk() Fabrice Derepas <fabrice.derepas(a)canonical.com> KEYS: trusted: dcp: fix key_len validation and calc_blob_len() return type Sebastian Andrzej Siewior <bigeasy(a)linutronix.de> Drivers: hv: vmbus: Replace lockdep_hardirq_threaded() with lockdep annotation Ruoyu Wang <ruoyuw560(a)gmail.com> drm/mediatek: Check CRTC state before freeing Xiang Mei <xmei5(a)asu.edu> netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() Radhey Shyam Pandey <radhey.shyam.pandey(a)amd.com> phy: zynqmp: fix runtime PM leak on probe allocation failure Radhey Shyam Pandey <radhey.shyam.pandey(a)amd.com> phy: zynqmp: fix clock error handling in xpsgtr_phy_init() Mike Looijmans <mike.looijmans(a)topic.nl> phy-zynqmp: Postpone getting clock rate until actually needed Johannes Thumshirn <johannes.thumshirn(a)wdc.com> btrfs: zoned: fix deadlock between metadata writeback and transaction commit Qu Wenruo <wqu(a)suse.com> btrfs: fix leaking BTRFS_FS_STATE_REMOUNTING flag Sang-Heon Jeon <ekffu200098(a)gmail.com> of: reserved_mem: prevent OOB when too many dynamic regions are defined Oreoluwa Babatunde <quic_obabatun(a)quicinc.com> of: reserved_mem: Add code to dynamically allocate reserved_mem array Uday Khare <udaykhare77(a)gmail.com> ASoC: max98090: fix missing IS_ERR() before PTR_ERR() on mclk lookup Uday Khare <udaykhare77(a)gmail.com> ASoC: max98095: fix missing IS_ERR() before PTR_ERR() on mclk lookup Radhey Shyam Pandey <radhey.shyam.pandey(a)amd.com> ata: ahci_ceva: fix error paths in ceva_ahci_platform_enable_resources() Damien Le Moal <dlemoal(a)kernel.org> ahci: Introduce ahci_ignore_port() helper Josua Mayer <josua(a)solid-run.com> ata: libahci_platform: support non-consecutive port numbers Rosen Penev <rosenp(a)gmail.com> ata: sata_mv: accept 1 or 2 resources in platform probe Abdun Nihaal <nihaal(a)cse.iitm.ac.in> gpio: sloppy-logic-analyzer: Fix memory leak in gpio_la_poll_probe() Yuho Choi <dbgh9129(a)gmail.com> dmaengine: idxd: fix fdev setup failure cleanup in idxd_cdev_open() Hongling Zeng <zenghongling(a)kylinos.cn> dmaengine: sun6i-dma: Fix reclaim descriptors while terminating DMA Konrad Dybcio <konrad.dybcio(a)oss.qualcomm.com> pinctrl: qcom: sc8280xp: Add missing wakeup entries for GPIO143/151 Sneh Mankad <sneh.mankad(a)oss.qualcomm.com> pinctrl: qcom: Unconditionally mark gpio as wakeup enable Michael Bommarito <michael.bommarito(a)gmail.com> thunderbolt: Prevent XDomain delayed work use-after-free on disconnect Jakub Kicinski <kuba(a)kernel.org> netconsole: avoid OOB reads, msg is not nul-terminated Tristan Madani <tristan(a)talencesecurity.com> bpf: Reset register bounds before narrowing retval range in check_mem_access() Benjamin Tissoires <bentiss(a)kernel.org> HID: logitech-dj: fix wrong detection of bad DJ_SHORT output report Lee Jones <lee(a)kernel.org> HID: logitech-dj: Prevent REPORT_ID_DJ_SHORT related user initiated OOB write Lee Jones <lee(a)kernel.org> HID: logitech-dj: Standardise hid_report_enum variable nomenclature Yehyeong Lee <yhlee(a)isslab.korea.ac.kr> net: mpls: initialize rtm_tos in mpls_getroute() Wayen.Yan <win847(a)gmail.com> net: airoha: Fix register index for Tx-fwd counter configuration Lorenzo Bianconi <lorenzo(a)kernel.org> netfilter: br_netfilter: Reallocate headroom if necessary in neigh_hh_bridge() Tiwei Bie <tiwei.btw(a)antgroup.com> um: Preserve errno within signal handler Shuvam Pandey <shuvampandey1(a)gmail.com> kunit: tool: skip stty when stdin is not a tty David Gow <david(a)davidgow.net> kunit: tool: Terminate kernel under test on SIGINT Benjamin Berg <benjamin.berg(a)intel.com> um: Set parent death signal for userspace process Tiwei Bie <tiwei.btw(a)antgroup.com> um: Set parent-death signal for write_sigio thread/process Tiwei Bie <tiwei.btw(a)antgroup.com> um: Set parent-death signal for ubd io thread/process Tiwei Bie <tiwei.btw(a)antgroup.com> um: Use os_set_pdeathsig helper in winch thread/process Benjamin Berg <benjamin.berg(a)intel.com> um: Set parent death signal for winch thread/process Tiwei Bie <tiwei.btw(a)antgroup.com> um: Add os_set_pdeathsig helper function Pablo Neira Ayuso <pablo(a)netfilter.org> netfilter: nf_conntrack_expect: restore helper propagation via expectation ------------- Diffstat: Documentation/dev-tools/kmemleak.rst | 1 + Documentation/hwmon/ina2xx.rst | 67 +- Makefile | 4 +- arch/powerpc/boot/simpleboot.c | 2 +- arch/powerpc/boot/treeboot-akebono.c | 2 +- arch/powerpc/boot/treeboot-currituck.c | 2 +- arch/powerpc/platforms/ps3/mm.c | 1 + arch/riscv/mm/init.c | 4 +- arch/s390/kvm/pci.c | 28 +- arch/s390/pci/pci_mmio.c | 1 + arch/um/drivers/chan_user.c | 2 + arch/um/drivers/ubd_kern.c | 1 + arch/um/drivers/vector_kern.c | 3 + arch/um/include/shared/os.h | 2 + arch/um/os-Linux/process.c | 6 + arch/um/os-Linux/sigio.c | 1 + arch/um/os-Linux/signal.c | 3 + arch/um/os-Linux/skas/process.c | 3 + arch/x86/kvm/svm/avic.c | 8 - drivers/accel/qaic/qaic_control.c | 2 +- drivers/ata/ahci.h | 17 +- drivers/ata/ahci_brcm.c | 3 + drivers/ata/ahci_ceva.c | 24 +- drivers/ata/libahci.c | 1 + drivers/ata/libahci_platform.c | 38 +- drivers/ata/libata-eh.c | 8 + drivers/ata/libata-sata.c | 2 +- drivers/ata/sata_mv.c | 2 +- drivers/block/ublk_drv.c | 9 + drivers/bluetooth/btintel.c | 3 + drivers/bluetooth/btmtk.c | 50 +- drivers/bluetooth/btusb.c | 30 +- drivers/cpufreq/powernow-k8.c | 1 + drivers/dma/idxd/cdev.c | 4 +- drivers/dma/sun6i-dma.c | 11 +- drivers/gpio/gpio-pca953x.c | 15 +- drivers/gpio/gpio-pch.c | 28 +- drivers/gpio/gpio-sloppy-logic-analyzer.c | 10 + drivers/gpu/drm/amd/amdgpu/amdgpu_amdkfd.c | 2 +- drivers/gpu/drm/amd/amdgpu/amdgpu_cs.c | 12 +- drivers/gpu/drm/amd/amdgpu/amdgpu_ctx.c | 73 ++- drivers/gpu/drm/amd/amdgpu/amdgpu_drv.c | 15 + drivers/gpu/drm/amd/amdgpu/amdgpu_gfx.c | 11 +- drivers/gpu/drm/amd/amdgpu/amdgpu_gmc.c | 2 +- drivers/gpu/drm/amd/amdgpu/amdgpu_gtt_mgr.c | 30 +- drivers/gpu/drm/amd/amdgpu/amdgpu_job.c | 11 +- drivers/gpu/drm/amd/amdgpu/amdgpu_job.h | 22 +- drivers/gpu/drm/amd/amdgpu/amdgpu_jpeg.c | 3 +- drivers/gpu/drm/amd/amdgpu/amdgpu_object.c | 3 +- drivers/gpu/drm/amd/amdgpu/amdgpu_ttm.c | 40 +- drivers/gpu/drm/amd/amdgpu/amdgpu_ttm.h | 3 +- drivers/gpu/drm/amd/amdgpu/amdgpu_uvd.c | 3 +- drivers/gpu/drm/amd/amdgpu/amdgpu_vce.c | 5 +- drivers/gpu/drm/amd/amdgpu/amdgpu_vcn.c | 8 +- drivers/gpu/drm/amd/amdgpu/amdgpu_vm.c | 6 +- drivers/gpu/drm/amd/amdgpu/amdgpu_vm.h | 2 +- drivers/gpu/drm/amd/amdgpu/amdgpu_vm_cpu.c | 4 +- drivers/gpu/drm/amd/amdgpu/amdgpu_vm_pt.c | 4 +- drivers/gpu/drm/amd/amdgpu/amdgpu_vm_sdma.c | 12 +- drivers/gpu/drm/amd/amdgpu/uvd_v6_0.c | 6 +- drivers/gpu/drm/amd/amdgpu/uvd_v7_0.c | 6 +- drivers/gpu/drm/amd/amdkfd/kfd_chardev.c | 10 +- drivers/gpu/drm/amd/amdkfd/kfd_events.c | 23 +- drivers/gpu/drm/amd/amdkfd/kfd_migrate.c | 3 +- .../gpu/drm/amd/amdkfd/kfd_process_queue_manager.c | 2 +- drivers/gpu/drm/amd/amdkfd/kfd_queue.c | 2 +- .../gpu/drm/amd/display/dc/dce/dce_clock_source.c | 20 +- .../drm/amd/display/dc/hwss/dcn30/dcn30_hwseq.c | 16 +- drivers/gpu/drm/armada/armada_fbdev.c | 12 +- drivers/gpu/drm/display/drm_dp_helper.c | 12 + drivers/gpu/drm/drm_exec.c | 6 +- drivers/gpu/drm/drm_fb_helper.c | 41 +- drivers/gpu/drm/drm_fbdev_dma.c | 12 +- drivers/gpu/drm/drm_fbdev_shmem.c | 12 +- drivers/gpu/drm/drm_fbdev_ttm.c | 12 +- drivers/gpu/drm/drm_gpuvm.c | 3 +- drivers/gpu/drm/etnaviv/etnaviv_gem_submit.c | 2 +- drivers/gpu/drm/exynos/exynos_drm_fbdev.c | 9 +- drivers/gpu/drm/gma500/fbdev.c | 13 +- drivers/gpu/drm/i915/display/intel_fbdev.c | 9 +- drivers/gpu/drm/i915/display/intel_hdcp.c | 699 +++++++++++---------- drivers/gpu/drm/i915/display/intel_hdcp_gsc.c | 9 +- drivers/gpu/drm/i915/display/intel_hdcp_gsc.h | 5 +- .../gpu/drm/i915/display/intel_hdcp_gsc_message.h | 3 +- drivers/gpu/drm/i915/display/intel_vrr.c | 10 +- drivers/gpu/drm/imagination/pvr_job.c | 2 +- drivers/gpu/drm/imagination/pvr_queue.c | 5 +- drivers/gpu/drm/imagination/pvr_queue.h | 2 +- drivers/gpu/drm/lima/lima_gem.c | 2 +- drivers/gpu/drm/lima/lima_sched.c | 6 +- drivers/gpu/drm/lima/lima_sched.h | 3 +- drivers/gpu/drm/mediatek/mtk_crtc.c | 6 +- drivers/gpu/drm/mediatek/mtk_disp_ovl_adaptor.c | 7 +- drivers/gpu/drm/msm/msm_fbdev.c | 9 +- drivers/gpu/drm/msm/msm_gem_submit.c | 8 +- drivers/gpu/drm/nouveau/nouveau_sched.c | 3 +- drivers/gpu/drm/omapdrm/omap_fbdev.c | 9 +- drivers/gpu/drm/panfrost/panfrost_drv.c | 2 +- drivers/gpu/drm/panthor/panthor_drv.c | 3 +- drivers/gpu/drm/panthor/panthor_fw.c | 47 +- drivers/gpu/drm/panthor/panthor_mmu.c | 2 +- drivers/gpu/drm/panthor/panthor_sched.c | 5 +- drivers/gpu/drm/panthor/panthor_sched.h | 3 +- drivers/gpu/drm/radeon/radeon_fbdev.c | 13 +- drivers/gpu/drm/scheduler/sched_fence.c | 4 +- drivers/gpu/drm/scheduler/sched_main.c | 7 +- drivers/gpu/drm/tegra/fbdev.c | 18 +- drivers/gpu/drm/v3d/v3d_submit.c | 2 +- drivers/gpu/drm/vc4/vc4_irq.c | 2 +- drivers/gpu/drm/vc4/vc4_validate.c | 29 +- drivers/gpu/drm/vmwgfx/ttm_object.c | 7 +- drivers/gpu/drm/vmwgfx/vmwgfx_blit.c | 39 +- drivers/gpu/drm/vmwgfx/vmwgfx_execbuf.c | 20 +- drivers/gpu/drm/vmwgfx/vmwgfx_resource.c | 4 +- drivers/gpu/drm/vmwgfx/vmwgfx_shader.c | 13 +- drivers/gpu/drm/vmwgfx/vmwgfx_vkms.c | 17 +- drivers/gpu/drm/xe/Makefile | 1 + drivers/gpu/drm/xe/display/xe_hdcp_gsc.c | 7 +- drivers/gpu/drm/xe/xe_bo.c | 33 +- drivers/gpu/drm/xe/xe_bo.h | 10 +- drivers/gpu/drm/xe/xe_bo_types.h | 2 + drivers/gpu/drm/xe/xe_dma_buf.c | 6 +- drivers/gpu/drm/xe/xe_exec.c | 22 +- drivers/gpu/drm/xe/xe_gt.c | 4 +- drivers/gpu/drm/xe/xe_gt_debugfs.c | 4 +- drivers/gpu/drm/xe/xe_gt_printk.h | 31 + drivers/gpu/drm/xe/xe_hw_engine.c | 3 +- drivers/gpu/drm/xe/xe_hw_engine_types.h | 8 + drivers/gpu/drm/xe/xe_oa.c | 7 + drivers/gpu/drm/xe/xe_oa_types.h | 3 + drivers/gpu/drm/xe/xe_pagefault.c | 65 ++ drivers/gpu/drm/xe/xe_pagefault.h | 19 + drivers/gpu/drm/xe/xe_pagefault_types.h | 136 ++++ drivers/gpu/drm/xe/xe_pt.c | 3 + drivers/gpu/drm/xe/xe_reg_sr.c | 53 -- drivers/gpu/drm/xe/xe_reg_whitelist.c | 147 ++++- drivers/gpu/drm/xe/xe_reg_whitelist.h | 4 + drivers/gpu/drm/xe/xe_sched_job.c | 3 +- drivers/gpu/drm/xe/xe_vm.c | 3 +- drivers/hid/hid-logitech-dj.c | 28 +- drivers/hv/vmbus_drv.c | 13 +- drivers/hwmon/Kconfig | 5 +- drivers/hwmon/adt7470.c | 131 ++-- drivers/hwmon/ina2xx.c | 251 ++++++-- drivers/hwmon/lm90.c | 4 +- drivers/hwmon/ltc4282.c | 4 +- drivers/hwmon/nct6775-core.c | 20 +- drivers/hwmon/npcm750-pwm-fan.c | 11 + drivers/hwmon/nzxt-smart2.c | 2 +- drivers/hwmon/pmbus/pmbus_core.c | 7 +- drivers/hwmon/sht3x.c | 9 +- drivers/i2c/busses/i2c-amd-mp2-plat.c | 4 +- drivers/i2c/busses/i2c-bcm-iproc.c | 11 + drivers/i2c/busses/i2c-imx.c | 9 +- drivers/i2c/busses/i2c-jz4780.c | 5 +- drivers/iommu/iova.c | 6 + drivers/media/i2c/imx219.c | 31 +- .../media/platform/chips-media/wave5/wave5-hw.c | 3 + .../platform/chips-media/wave5/wave5-vpu-enc.c | 5 +- .../platform/chips-media/wave5/wave5-vpuapi.h | 1 + drivers/net/can/c_can/c_can_main.c | 8 +- drivers/net/can/ctucanfd/ctucanfd_base.c | 14 +- drivers/net/can/ctucanfd/ctucanfd_pci.c | 3 +- drivers/net/can/dev/skb.c | 2 - drivers/net/can/softing/softing_fw.c | 46 +- drivers/net/can/usb/ems_usb.c | 43 ++ drivers/net/can/usb/etas_es58x/es58x_core.c | 1 - drivers/net/can/usb/gs_usb.c | 4 +- drivers/net/can/usb/kvaser_usb/kvaser_usb_hydra.c | 1 + drivers/net/can/usb/kvaser_usb/kvaser_usb_leaf.c | 13 +- drivers/net/can/usb/peak_usb/pcan_usb_core.c | 1 - drivers/net/can/usb/peak_usb/pcan_usb_fd.c | 40 +- drivers/net/can/usb/peak_usb/pcan_usb_pro.c | 20 +- drivers/net/dsa/mt7530-mdio.c | 11 +- drivers/net/dsa/mt7530.c | 58 +- drivers/net/ethernet/airoha/airoha_eth.c | 2 +- drivers/net/ethernet/intel/e1000/e1000_main.c | 2 +- drivers/net/ethernet/intel/ice/ice_ethtool.c | 10 +- drivers/net/ethernet/intel/ice/ice_main.c | 10 + drivers/net/ethernet/intel/idpf/idpf_lib.c | 2 +- drivers/net/ethernet/intel/idpf/idpf_txrx.c | 5 +- drivers/net/ethernet/intel/idpf/idpf_txrx.h | 2 +- drivers/net/ethernet/intel/igbvf/netdev.c | 2 - .../net/ethernet/marvell/octeontx2/nic/otx2_pf.c | 2 +- drivers/net/ethernet/mediatek/mtk_eth_soc.c | 58 +- drivers/net/ethernet/mediatek/mtk_eth_soc.h | 7 +- drivers/net/ethernet/nvidia/forcedeth.c | 4 +- drivers/net/ethernet/qlogic/qede/qede_main.c | 44 +- drivers/net/ethernet/realtek/rtase/rtase_main.c | 3 + drivers/net/ethernet/samsung/sxgbe/sxgbe_main.c | 14 +- drivers/net/ethernet/wangxun/libwx/wx_lib.c | 2 + drivers/net/netconsole.c | 3 +- drivers/net/phy/phylink.c | 29 +- drivers/net/veth.c | 4 +- drivers/net/vxlan/vxlan_core.c | 15 +- drivers/net/wireless/ath/ath6kl/txrx.c | 2 +- .../wireless/broadcom/brcm80211/brcmfmac/bcmsdh.c | 16 +- .../net/wireless/broadcom/brcm80211/brcmfmac/bus.h | 6 + .../wireless/broadcom/brcm80211/brcmfmac/chip.c | 4 +- .../wireless/broadcom/brcm80211/brcmfmac/core.c | 46 +- .../wireless/broadcom/brcm80211/brcmfmac/pcie.c | 6 + .../wireless/broadcom/brcm80211/brcmfmac/sdio.c | 14 +- .../wireless/broadcom/brcm80211/brcmfmac/sdio.h | 1 + .../net/wireless/broadcom/brcm80211/brcmfmac/usb.c | 3 + .../broadcom/brcm80211/include/brcm_hw_ids.h | 2 +- .../net/wireless/marvell/mwifiex/11n_rxreorder.c | 2 +- drivers/of/of_reserved_mem.c | 87 ++- drivers/phy/xilinx/phy-zynqmp.c | 130 ++-- drivers/pinctrl/Kconfig | 2 + drivers/pinctrl/devicetree.c | 4 + drivers/pinctrl/pinctrl-amd.c | 3 +- drivers/pinctrl/qcom/pinctrl-msm.c | 8 +- drivers/pinctrl/qcom/pinctrl-sc8280xp.c | 21 +- drivers/power/supply/bq25890_charger.c | 2 +- drivers/power/supply/max17040_battery.c | 6 +- drivers/s390/block/dasd_eckd.c | 11 +- drivers/s390/block/dasd_ioctl.c | 2 +- drivers/s390/crypto/zcrypt_api.c | 2 +- drivers/s390/crypto/zcrypt_ccamisc.c | 6 + drivers/s390/net/qeth_core_main.c | 3 + drivers/s390/scsi/zfcp_aux.c | 1 + drivers/scsi/hisi_sas/hisi_sas_v3_hw.c | 10 +- drivers/scsi/libiscsi.c | 2 +- drivers/scsi/libiscsi_tcp.c | 8 +- drivers/scsi/libsas/sas_init.c | 37 +- drivers/scsi/scsi_debug.c | 8 +- drivers/spi/spi-cadence.c | 129 +++- drivers/spi/spi-qcom-qspi.c | 3 +- drivers/target/target_core_iblock.c | 6 +- drivers/target/target_core_transport.c | 12 +- drivers/thunderbolt/xdomain.c | 40 +- drivers/ufs/core/ufshcd.c | 6 +- drivers/usb/gadget/function/f_tcm.c | 192 +++++- drivers/usb/gadget/function/tcm.h | 13 + drivers/usb/typec/ucsi/ucsi.c | 88 +-- drivers/usb/typec/ucsi/ucsi.h | 1 + fs/binfmt_misc.c | 8 + fs/btrfs/super.c | 8 +- fs/btrfs/zoned.c | 6 +- fs/erofs/Kconfig | 14 + fs/erofs/decompressor_lzma.c | 3 +- fs/proc/task_mmu.c | 33 +- fs/smb/client/cifssmb.c | 12 +- fs/smb/server/vfs_cache.c | 6 +- include/drm/drm_exec.h | 20 +- include/drm/drm_fb_helper.h | 12 - include/drm/gpu_scheduler.h | 12 +- include/linux/alloc_tag.h | 3 + include/linux/can/core.h | 1 + include/linux/can/skb.h | 2 - include/linux/dma/qcom_bam_dma.h | 21 +- include/linux/kmemleak.h | 4 + include/linux/libata.h | 2 +- include/linux/mmc/sdio_ids.h | 2 +- include/linux/netfilter/nf_conntrack_sip.h | 2 +- include/linux/slab.h | 8 +- include/linux/thunderbolt.h | 3 + include/linux/trace_events.h | 4 - include/net/ip_vs.h | 45 +- include/net/neighbour.h | 8 +- include/net/netfilter/nf_conntrack_expect.h | 5 +- include/net/netfilter/nf_tables.h | 4 +- include/scsi/libsas.h | 1 - include/trace/events/rxrpc.h | 14 +- include/uapi/linux/rkisp1-config.h | 6 +- kernel/audit.c | 11 +- kernel/auditfilter.c | 6 +- kernel/bpf/verifier.c | 1 + kernel/sched/cpufreq_schedutil.c | 11 + kernel/sched/deadline.c | 3 +- kernel/trace/trace.c | 44 +- kernel/trace/trace.h | 4 - kernel/trace/trace_branch.c | 4 +- kernel/trace/trace_events.c | 6 +- kernel/trace/trace_events_filter.c | 3 + kernel/trace/trace_functions_graph.c | 8 +- kernel/trace/trace_hwlat.c | 4 +- kernel/trace/trace_mmiotrace.c | 21 +- kernel/trace/trace_osnoise.c | 12 +- kernel/trace/trace_probe.c | 6 +- kernel/trace/trace_sched_wakeup.c | 8 +- lib/alloc_tag.c | 9 + lib/assoc_array.c | 3 +- lib/rhashtable.c | 1 + lib/test_fortify/Makefile | 1 + lib/win_minmax.c | 1 + mm/huge_memory.c | 16 +- mm/hugetlb.c | 12 +- mm/kmemleak.c | 44 +- mm/memcontrol-v1.h | 6 +- mm/migrate_device.c | 5 +- mm/mm_init.c | 15 +- mm/page_reporting.c | 6 +- mm/percpu-km.c | 2 +- mm/slab.h | 28 +- mm/slab_common.c | 13 + mm/slub.c | 34 +- net/bluetooth/hci_conn.c | 14 +- net/bluetooth/hci_sync.c | 154 +++-- net/bluetooth/hidp/core.c | 30 +- net/bluetooth/iso.c | 113 ++-- net/bluetooth/l2cap_core.c | 5 + net/bluetooth/mgmt.c | 84 ++- net/bridge/br_mrp.c | 2 +- net/bridge/br_multicast.c | 1 + net/bridge/br_netfilter_hooks.c | 6 +- net/can/af_can.c | 14 +- net/can/bcm.c | 2 - net/can/isotp.c | 337 +++++++--- net/can/j1939/bus.c | 2 + net/can/j1939/j1939-priv.h | 3 + net/can/j1939/main.c | 8 +- net/can/j1939/socket.c | 1 - net/can/j1939/transport.c | 6 +- net/can/raw.c | 7 +- net/core/lwt_bpf.c | 4 +- net/core/skbuff.c | 18 +- net/ipv4/route.c | 2 - net/ipv4/udp_tunnel_nic.c | 32 +- net/ipv6/fib6_rules.c | 1 + net/ipv6/ip6_output.c | 2 +- net/ipv6/ndisc.c | 2 + net/mac80211/s1g.c | 4 + net/mpls/af_mpls.c | 1 + net/mptcp/pm.c | 9 +- net/mptcp/pm_netlink.c | 29 +- net/mptcp/pm_userspace.c | 87 ++- net/mptcp/protocol.h | 6 +- net/netfilter/ipset/ip_set_hash_gen.h | 2 +- net/netfilter/ipvs/ip_vs_app.c | 4 +- net/netfilter/ipvs/ip_vs_conn.c | 3 + net/netfilter/ipvs/ip_vs_core.c | 180 +++--- net/netfilter/ipvs/ip_vs_proto_sctp.c | 19 +- net/netfilter/ipvs/ip_vs_proto_tcp.c | 48 +- net/netfilter/ipvs/ip_vs_proto_udp.c | 54 +- net/netfilter/ipvs/ip_vs_xmit.c | 42 +- net/netfilter/nf_conntrack_broadcast.c | 1 + net/netfilter/nf_conntrack_core.c | 7 +- net/netfilter/nf_conntrack_expect.c | 1 + net/netfilter/nf_conntrack_h323_main.c | 12 +- net/netfilter/nf_conntrack_helper.c | 5 + net/netfilter/nf_conntrack_netlink.c | 18 +- net/netfilter/nf_conntrack_sip.c | 4 +- net/netfilter/nf_nat_sip.c | 2 +- net/netfilter/nf_tables_api.c | 34 +- net/netfilter/nft_payload.c | 12 +- net/netfilter/xt_hashlimit.c | 16 +- net/openvswitch/actions.c | 12 +- net/openvswitch/meter.c | 33 +- net/rds/ib.c | 4 + net/rds/ib_cm.c | 4 + net/rds/tcp.c | 14 +- net/rxrpc/ar-internal.h | 38 +- net/rxrpc/call_accept.c | 1 + net/rxrpc/call_event.c | 19 +- net/rxrpc/call_object.c | 2 + net/rxrpc/input.c | 12 +- net/rxrpc/output.c | 14 +- net/rxrpc/peer_object.c | 20 +- net/rxrpc/proc.c | 6 +- net/rxrpc/rtt.c | 103 +-- net/rxrpc/sendmsg.c | 2 +- net/sctp/associola.c | 3 + net/sctp/sm_make_chunk.c | 17 +- net/smc/smc_core.c | 2 +- net/tipc/socket.c | 2 +- security/keys/keyring.c | 14 +- security/keys/trusted-keys/trusted_dcp.c | 15 +- sound/core/pcm_native.c | 7 + sound/core/seq/seq_timer.c | 9 +- sound/core/timer.c | 2 + sound/core/ump.c | 1 + sound/pci/hda/patch_hdmi.c | 48 +- sound/pci/lx6464es/lx6464es.c | 5 +- sound/pci/lx6464es/lx_core.c | 5 +- sound/soc/codecs/max98090.c | 5 +- sound/soc/codecs/max98095.c | 5 +- sound/soc/codecs/tas2562.c | 30 +- sound/usb/6fire/chip.c | 4 + sound/usb/endpoint.c | 14 +- sound/usb/midi.c | 2 + sound/usb/midi2.c | 4 +- sound/usb/mixer_quirks.c | 2 +- tools/testing/kunit/kunit_kernel.py | 39 +- tools/testing/kunit/kunit_tool_test.py | 42 ++ tools/testing/selftests/clone3/clone3_set_tid.c | 2 +- tools/testing/selftests/mm/mlock-random-test.c | 2 +- 387 files changed, 4750 insertions(+), 2372 deletions(-) From gregkh(a)linuxfoundation.org Fri Aug 7 16:34:18 2026 Message-ID: <20260807143418.550667215(a)linuxfoundation.org> User-Agent: quilt/0.69 Date: Fri, 07 Aug 2026 16:34:19 +0200 From: Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> To: stable(a)vger.kernel.org Cc: patches(a)lists.linux.dev, linux-kernel(a)vger.kernel.org, torvalds(a)linux-foundation.org, akpm(a)linux-foundation.org, linux(a)roeck-us.net, shuah(a)kernel.org, patches(a)kernelci.org, lkft-triage(a)lists.linaro.org, pavel(a)nabladev.com, jonathanh(a)nvidia.com, f.fainelli(a)gmail.com, sudipm.mukherjee(a)gmail.com, rwarsow(a)gmx.de, conor(a)kernel.org, hargar(a)microsoft.com, broonie(a)kernel.org, achill(a)achill.org, sr(a)sladewatkins.com, Ilya Maximets <i.maximets(a)ovn.org>, Pablo Neira Ayuso <pablo(a)netfilter.org>, Sasha Levin <sashal(a)kernel.org> X-stable: review X-Patchwork-Hint: ignore Subject: [PATCH 6.12 001/337] netfilter: nf_conntrack_expect: restore helper propagation via expectation MIME-Version: 1.0 6.12-stable review patch. If anyone has any objections, please let me know. ------------------ From: Pablo Neira Ayuso <pablo(a)netfilter.org> [ Upstream commit dcb0f9aefdd604d36710fda53c25bd7cf4a3e37a ] A recent series to fix expectations broke helper propagation via expectation, this mechanism is used by the sip and h323 helper. This also propagates the conntrack helper to expected connections. I changed semantics of exp->helper which now tells us the actual helper that created the expectation. Add an explicit assign_helper field to expectations for this purpose and update helpers to use it. Restore this feature for userspace conntrack helper via ctnetlink nfqueue integration so it is again possible to attach a helper to an expectation, where it makes sense. This is not restored via ctnetlink expectation creation as there is no client for such feature. Use the expectation layer 4 protocol number for the helper lookup for consistency. Make sure the expectation using this helper propagation mechanism also go away when the helper is unregistered. Fixes: 9c42bc9db90a ("netfilter: nf_conntrack_expect: honor expectation helper field") Fixes: 917b61fa2042 ("netfilter: ctnetlink: ignore explicit helper on new expectations") Reported-by: Ilya Maximets <i.maximets(a)ovn.org> Tested-by: Ilya Maximets <i.maximets(a)ovn.org> Signed-off-by: Pablo Neira Ayuso <pablo(a)netfilter.org> Signed-off-by: Sasha Levin <sashal(a)kernel.org> --- include/net/netfilter/nf_conntrack_expect.h | 5 ++++- net/netfilter/nf_conntrack_broadcast.c | 1 + net/netfilter/nf_conntrack_core.c | 7 +++++-- net/netfilter/nf_conntrack_expect.c | 1 + net/netfilter/nf_conntrack_h323_main.c | 12 ++++++------ net/netfilter/nf_conntrack_helper.c | 5 +++++ net/netfilter/nf_conntrack_netlink.c | 18 ++++++++++++++++-- net/netfilter/nf_conntrack_sip.c | 2 +- 8 files changed, 39 insertions(+), 12 deletions(-) diff --git a/include/net/netfilter/nf_conntrack_expect.h b/include/net/netfilter/nf_conntrack_expect.h index e9a8350e7ccf..80f50fd0f7ad 100644 --- a/include/net/netfilter/nf_conntrack_expect.h +++ b/include/net/netfilter/nf_conntrack_expect.h @@ -45,9 +45,12 @@ struct nf_conntrack_expect { void (*expectfn)(struct nf_conn *new, struct nf_conntrack_expect *this); - /* Helper to assign to new connection */ + /* Helper that created this expectation */ struct nf_conntrack_helper __rcu *helper; + /* Helper to assign to new connection */ + struct nf_conntrack_helper __rcu *assign_helper; + /* The conntrack of the master connection */ struct nf_conn *master; diff --git a/net/netfilter/nf_conntrack_broadcast.c b/net/netfilter/nf_conntrack_broadcast.c index f9528d4db0a8..93c501d9d399 100644 --- a/net/netfilter/nf_conntrack_broadcast.c +++ b/net/netfilter/nf_conntrack_broadcast.c @@ -72,6 +72,7 @@ int nf_conntrack_broadcast_help(struct sk_buff *skb, exp->flags = NF_CT_EXPECT_PERMANENT; exp->class = NF_CT_EXPECT_CLASS_DEFAULT; rcu_assign_pointer(exp->helper, helper); + rcu_assign_pointer(exp->assign_helper, NULL); write_pnet(&exp->net, net); #ifdef CONFIG_NF_CONNTRACK_ZONES exp->zone = ct->zone; diff --git a/net/netfilter/nf_conntrack_core.c b/net/netfilter/nf_conntrack_core.c index 423080cf86a4..0c457e159727 100644 --- a/net/netfilter/nf_conntrack_core.c +++ b/net/netfilter/nf_conntrack_core.c @@ -1773,14 +1773,17 @@ init_conntrack(struct net *net, struct nf_conn *tmpl, spin_lock_bh(&nf_conntrack_expect_lock); exp = nf_ct_find_expectation(net, zone, tuple, !tmpl || nf_ct_is_confirmed(tmpl)); if (exp) { + struct nf_conntrack_helper *assign_helper; + /* Welcome, Mr. Bond. We've been expecting you... */ __set_bit(IPS_EXPECTED_BIT, &ct->status); /* exp->master safe, refcnt bumped in nf_ct_find_expectation */ ct->master = exp->master; - if (exp->helper) { + assign_helper = rcu_dereference(exp->assign_helper); + if (assign_helper) { help = nf_ct_helper_ext_add(ct, GFP_ATOMIC); if (help) - rcu_assign_pointer(help->helper, exp->helper); + rcu_assign_pointer(help->helper, assign_helper); } #ifdef CONFIG_NF_CONNTRACK_MARK diff --git a/net/netfilter/nf_conntrack_expect.c b/net/netfilter/nf_conntrack_expect.c index bb8b87f9ee50..a8929885485b 100644 --- a/net/netfilter/nf_conntrack_expect.c +++ b/net/netfilter/nf_conntrack_expect.c @@ -344,6 +344,7 @@ void nf_ct_expect_init(struct nf_conntrack_expect *exp, unsigned int class, helper = rcu_dereference(help->helper); rcu_assign_pointer(exp->helper, helper); + rcu_assign_pointer(exp->assign_helper, NULL); write_pnet(&exp->net, net); #ifdef CONFIG_NF_CONNTRACK_ZONES exp->zone = ct->zone; diff --git a/net/netfilter/nf_conntrack_h323_main.c b/net/netfilter/nf_conntrack_h323_main.c index 791aafe9f396..c42547284f35 100644 --- a/net/netfilter/nf_conntrack_h323_main.c +++ b/net/netfilter/nf_conntrack_h323_main.c @@ -642,7 +642,7 @@ static int expect_h245(struct sk_buff *skb, struct nf_conn *ct, &ct->tuplehash[!dir].tuple.src.u3, &ct->tuplehash[!dir].tuple.dst.u3, IPPROTO_TCP, NULL, &port); - rcu_assign_pointer(exp->helper, &nf_conntrack_helper_h245); + rcu_assign_pointer(exp->assign_helper, &nf_conntrack_helper_h245); nathook = rcu_dereference(nfct_h323_nat_hook); if (memcmp(&ct->tuplehash[dir].tuple.src.u3, @@ -766,7 +766,7 @@ static int expect_callforwarding(struct sk_buff *skb, nf_ct_expect_init(exp, NF_CT_EXPECT_CLASS_DEFAULT, nf_ct_l3num(ct), &ct->tuplehash[!dir].tuple.src.u3, &addr, IPPROTO_TCP, NULL, &port); - rcu_assign_pointer(exp->helper, nf_conntrack_helper_q931); + rcu_assign_pointer(exp->assign_helper, nf_conntrack_helper_q931); nathook = rcu_dereference(nfct_h323_nat_hook); if (memcmp(&ct->tuplehash[dir].tuple.src.u3, @@ -1233,7 +1233,7 @@ static int expect_q931(struct sk_buff *skb, struct nf_conn *ct, &ct->tuplehash[!dir].tuple.src.u3 : NULL, &ct->tuplehash[!dir].tuple.dst.u3, IPPROTO_TCP, NULL, &port); - rcu_assign_pointer(exp->helper, nf_conntrack_helper_q931); + rcu_assign_pointer(exp->assign_helper, nf_conntrack_helper_q931); exp->flags = NF_CT_EXPECT_PERMANENT; /* Accept multiple calls */ nathook = rcu_dereference(nfct_h323_nat_hook); @@ -1305,7 +1305,7 @@ static int process_gcf(struct sk_buff *skb, struct nf_conn *ct, nf_ct_expect_init(exp, NF_CT_EXPECT_CLASS_DEFAULT, nf_ct_l3num(ct), &ct->tuplehash[!dir].tuple.src.u3, &addr, IPPROTO_UDP, NULL, &port); - rcu_assign_pointer(exp->helper, nf_conntrack_helper_ras); + rcu_assign_pointer(exp->assign_helper, nf_conntrack_helper_ras); if (nf_ct_expect_related(exp, 0) == 0) { pr_debug("nf_ct_ras: expect RAS "); @@ -1522,7 +1522,7 @@ static int process_acf(struct sk_buff *skb, struct nf_conn *ct, &ct->tuplehash[!dir].tuple.src.u3, &addr, IPPROTO_TCP, NULL, &port); exp->flags = NF_CT_EXPECT_PERMANENT; - rcu_assign_pointer(exp->helper, nf_conntrack_helper_q931); + rcu_assign_pointer(exp->assign_helper, nf_conntrack_helper_q931); if (nf_ct_expect_related(exp, 0) == 0) { pr_debug("nf_ct_ras: expect Q.931 "); @@ -1576,7 +1576,7 @@ static int process_lcf(struct sk_buff *skb, struct nf_conn *ct, &ct->tuplehash[!dir].tuple.src.u3, &addr, IPPROTO_TCP, NULL, &port); exp->flags = NF_CT_EXPECT_PERMANENT; - rcu_assign_pointer(exp->helper, nf_conntrack_helper_q931); + rcu_assign_pointer(exp->assign_helper, nf_conntrack_helper_q931); if (nf_ct_expect_related(exp, 0) == 0) { pr_debug("nf_ct_ras: expect Q.931 "); diff --git a/net/netfilter/nf_conntrack_helper.c b/net/netfilter/nf_conntrack_helper.c index 9150bcfd7ca8..ea0cdb7ec915 100644 --- a/net/netfilter/nf_conntrack_helper.c +++ b/net/netfilter/nf_conntrack_helper.c @@ -419,6 +419,11 @@ static bool expect_iter_me(struct nf_conntrack_expect *exp, void *data) this = rcu_dereference_protected(exp->helper, lockdep_is_held(&nf_conntrack_expect_lock)); + if (this == me) + return true; + + this = rcu_dereference_protected(exp->assign_helper, + lockdep_is_held(&nf_conntrack_expect_lock)); return this == me; } diff --git a/net/netfilter/nf_conntrack_netlink.c b/net/netfilter/nf_conntrack_netlink.c index eacbbc342c3f..80fdb875c977 100644 --- a/net/netfilter/nf_conntrack_netlink.c +++ b/net/netfilter/nf_conntrack_netlink.c @@ -2630,6 +2630,7 @@ static const struct nla_policy exp_nla_policy[CTA_EXPECT_MAX+1] = { static struct nf_conntrack_expect * ctnetlink_alloc_expect(const struct nlattr *const cda[], struct nf_conn *ct, + const struct nf_conntrack_helper *assign_helper, struct nf_conntrack_tuple *tuple, struct nf_conntrack_tuple *mask); @@ -2856,6 +2857,7 @@ static int ctnetlink_glue_attach_expect(const struct nlattr *attr, struct nf_conn *ct, u32 portid, u32 report) { + struct nf_conntrack_helper *assign_helper = NULL; struct nlattr *cda[CTA_EXPECT_MAX+1]; struct nf_conntrack_tuple tuple, mask; struct nf_conntrack_expect *exp; @@ -2871,8 +2873,18 @@ ctnetlink_glue_attach_expect(const struct nlattr *attr, struct nf_conn *ct, if (err < 0) return err; + if (cda[CTA_EXPECT_HELP_NAME]) { + const char *helpname = nla_data(cda[CTA_EXPECT_HELP_NAME]); + + assign_helper = __nf_conntrack_helper_find(helpname, + nf_ct_l3num(ct), + tuple.dst.protonum); + if (!assign_helper) + return -EOPNOTSUPP; + } + exp = ctnetlink_alloc_expect((const struct nlattr * const *)cda, ct, - &tuple, &mask); + assign_helper, &tuple, &mask); if (IS_ERR(exp)) return PTR_ERR(exp); @@ -3511,6 +3523,7 @@ ctnetlink_parse_expect_nat(const struct nlattr *attr, static struct nf_conntrack_expect * ctnetlink_alloc_expect(const struct nlattr * const cda[], struct nf_conn *ct, + const struct nf_conntrack_helper *assign_helper, struct nf_conntrack_tuple *tuple, struct nf_conntrack_tuple *mask) { @@ -3564,6 +3577,7 @@ ctnetlink_alloc_expect(const struct nlattr * const cda[], struct nf_conn *ct, exp->zone = ct->zone; #endif rcu_assign_pointer(exp->helper, helper); + rcu_assign_pointer(exp->assign_helper, assign_helper); exp->tuple = *tuple; exp->mask.src.u3 = mask->src.u3; exp->mask.src.u.all = mask->src.u.all; @@ -3619,7 +3633,7 @@ ctnetlink_create_expect(struct net *net, ct = nf_ct_tuplehash_to_ctrack(h); rcu_read_lock(); - exp = ctnetlink_alloc_expect(cda, ct, &tuple, &mask); + exp = ctnetlink_alloc_expect(cda, ct, NULL, &tuple, &mask); if (IS_ERR(exp)) { err = PTR_ERR(exp); goto err_rcu; diff --git a/net/netfilter/nf_conntrack_sip.c b/net/netfilter/nf_conntrack_sip.c index bd91b8b47f4b..852c0b74b8a7 100644 --- a/net/netfilter/nf_conntrack_sip.c +++ b/net/netfilter/nf_conntrack_sip.c @@ -1386,7 +1386,7 @@ static int process_register_request(struct sk_buff *skb, unsigned int protoff, nf_ct_expect_init(exp, SIP_EXPECT_SIGNALLING, nf_ct_l3num(ct), saddr, &daddr, proto, NULL, &port); exp->timeout.expires = sip_timeout * HZ; - rcu_assign_pointer(exp->helper, helper); + rcu_assign_pointer(exp->assign_helper, helper); exp->flags = NF_CT_EXPECT_PERMANENT | NF_CT_EXPECT_INACTIVE; hooks = rcu_dereference(nf_nat_sip_hooks); -- 2.53.0

2 months, 3 weeks

[PATCH 6.6 000/261] 6.6.151-rc1 review

by Greg Kroah-Hartman

This is the start of the stable review cycle for the 6.6.151 release. There are 261 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know. Responses should be made by Sun, 09 Aug 2026 14:33:46 +0000. Anything received after that time might be too late. The whole patch series can be found in one patch at: https://www.kernel.org/pub/linux/kernel/v6.x/stable-review/patch-6.6.151-rc… or in the git tree and branch at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-6.6.y and the diffstat can be found below. thanks, greg k-h ------------- Pseudo-Shortlog of commits: Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> Linux 6.6.151-rc1 Andrei Kuchynski <akuchynski(a)chromium.org> usb: typec: ucsi: Correct teardown ordering in ucsi_init() error path Thomas Zimmermann <tzimmermann(a)suse.de> drm/tegra: fbdev: Do not assign to struct drm_fb_helper.info Kai Vehmanen <kai.vehmanen(a)linux.intel.com> ALSA: hda: codecs: hdmi: disable keep-alive before audio format change Jani Nikula <jani.nikula(a)intel.com> drm/i915/hdcp: check streams[] bounds before overflow Jani Nikula <jani.nikula(a)intel.com> drm/i915/hdcp: require monotonically increasing seq_num_v Suraj Kandpal <suraj.kandpal(a)intel.com> drm/i915/hdcp: Move to using intel_display in intel_hdcp Jani Nikula <jani.nikula(a)intel.com> drm/i915/hdcp: migrate away from kdev_to_i915() in bind/unbind Ville Syrjälä <ville.syrjala(a)linux.intel.com> drm/i915/fbc: Extract intel_fbc_has_fences() Zhiling Zou <roxy520tt(a)gmail.com> sctp: close UDP tunnel sockets during netns teardown Geliang Tang <tanggeliang(a)kylinos.cn> mptcp: pm: userspace: fix use-after-free in get_local_id Geliang Tang <tanggeliang(a)kylinos.cn> mptcp: pm: use addr entry for get_local_id Geliang Tang <tanggeliang(a)kylinos.cn> mptcp: add mptcp_userspace_pm_lookup_addr helper Geliang Tang <tanggeliang(a)kylinos.cn> mptcp: pm: avoid code duplication to lookup endp WenTao Liang <vulab(a)iscas.ac.cn> ceph: fix refcount leak in ceph_readdir() Xiubo Li <xiubli(a)redhat.com> ceph: print cluster fsid and client global_id in all debug logs Xiubo Li <xiubli(a)redhat.com> libceph: add doutc and *_client debug macros support Oliver Hartkopp <socketcan(a)hartkopp.net> can: isotp: fix timer drain order, wakeup handling and tx_gen ordering Oliver Hartkopp <socketcan(a)hartkopp.net> can: use skb hash instead of private variable in headroom Zhiling Zou <roxy520tt(a)gmail.com> sctp: avoid auth_enable sysctl UAF during netns teardown Thomas Weißschuh <linux(a)weissschuh.net> sysctl: treewide: constify ctl_table_header::ctl_table_arg Fan Wu <fanwu01(a)zju.edu.cn> wifi: brcmfmac: drain bus_reset work on device removal LiangCheng Wang <zaq14760(a)gmail.com> wifi: brcmfmac: set F2 blocksize to 256 for BCM43752 Gokul Sivakumar <gokulkumar.sivakumar(a)infineon.com> wifi: brcmfmac: fix 43752 SDIO FWVID incorrectly labelled as Cypress (CYW) Daniel Hodges <git(a)danielhodges.dev> wifi: ath6kl: fix use-after-free in aggr_reset_state() Mirela Rabulea <mirela.rabulea(a)nxp.com> media: v4l2-fwnode: Fix subdev owner overwritten in v4l2_async_register_subdev_sensor() Sakari Ailus <sakari.ailus(a)linux.intel.com> media: v4l: async: Set owner for async sub-devices Pablo Neira Ayuso <pablo(a)netfilter.org> netfilter: nf_tables: clone set on flush only David Howells <dhowells(a)redhat.com> rxrpc: Fix irq-disabled in local_bh_enable() Sakari Ailus <sakari.ailus(a)linux.intel.com> media: imx219: Fix maximum frame length in lines Jai Luthra <jai.luthra(a)ideasonboard.com> media: i2c: imx219: Rename VTS to FRM_LENGTH Laurent Pinchart <laurent.pinchart(a)ideasonboard.com> media: i2c: imx219: Calculate crop rectangle dynamically Laurent Pinchart <laurent.pinchart(a)ideasonboard.com> media: i2c: imx219: Group functions by purpose Laurent Pinchart <laurent.pinchart(a)ideasonboard.com> media: i2c: imx219: Drop IMX219_VTS_* macros Laurent Pinchart <laurent.pinchart(a)ideasonboard.com> media: i2c: imx219: Don't store the current mode in the imx219 structure Laurent Pinchart <laurent.pinchart(a)ideasonboard.com> media: i2c: imx219: Access height from active format in imx219_set_ctrl Jani Nikula <jani.nikula(a)intel.com> drm/i915/vrr: require valid min/max vfreq for VRR Ville Syrjälä <ville.syrjala(a)linux.intel.com> drm/i915/vrr: Check HAS_VRR() first in intel_vrr_is_capable() Timur Kristóf <timur.kristof(a)gmail.com> drm/amdgpu: Respect placement requirements in amdgpu_gtt_mgr functions Thomas Zimmermann <tzimmermann(a)suse.de> drm/tegra: fbdev: Remove offset into framebuffer memory Thomas Zimmermann <tzimmermann(a)suse.de> drm/fb-helper: Allocate and release fb_info in single place Andrei Kuchynski <akuchynski(a)chromium.org> usb: typec: ucsi: Fix race condition and ordering in port unregistration Sergey Senozhatsky <senozhatsky(a)chromium.org> usb: typec: ucsi: split connector lock classes Diogo Ivo <diogo.ivo(a)tecnico.ulisboa.pt> usb: typec: ucsi: Only enable supported notifications Cen Zhang <zzzccc427(a)gmail.com> usb: gadget: f_tcm: synchronize delayed set_alt with teardown Biju Das <biju.das.jz(a)bp.renesas.com> drm: renesas: rzg2l_mipi_dsi: Increase reset deassertion delay Lad Prabhakar <prabhakar.mahadev-lad.rj(a)bp.renesas.com> drm: renesas: Move RZ/G2L MIPI DSI driver to rz-du Guangshuo Li <lgs201920130244(a)gmail.com> usb: musb: omap2430: Do not put borrowed of_node in probe Johan Hovold <johan(a)kernel.org> usb: musb: omap2430: clean up probe error handling Frank Scheiner <frank.scheiner(a)web.de> Revert "ia64: Make acpi_cpufreq_cpu_exit return void" Junjie Cao <junjie.cao(a)intel.com> gpio: pch: use raw_spinlock_t for the register lock Tze Yee Ng <tze.yee.ng(a)altera.com> firmware: stratix10-svc: fix memory leaks and list corruption bugs Kiryl Shutsemau (Meta) <kas(a)kernel.org> mm/huge_memory: unlock i_mmap_rwsem before releasing after-split folios Kiryl Shutsemau (Meta) <kas(a)kernel.org> mm/hugetlb: fix swap entry corruption when clearing uffd-wp at fork() Wei Yang <albinwyang(a)tencent.com> iommu/sva: move x86 disable check before allocation Niklas Cassel <cassel(a)kernel.org> ata: ahci: Make ahci_ignore_port() handle empty mask_port_map Damien Le Moal <dlemoal(a)kernel.org> ata: libahci_platform: Do not set mask_port_map when not needed HyeongJun An <sammiee5311(a)gmail.com> HID: logitech-dj: Fix maxfield check in DJ short report validation Jun Guo <jun.guo(a)cixtech.com> spi: spi-cadence: enable SPI_CONTROLLER_MUST_TX Zack Rusin <zack.rusin(a)broadcom.com> drm/vmwgfx: validate external BO copy bounds for both stride paths Zack Rusin <zack.rusin(a)broadcom.com> drm/vmwgfx: use check_add_overflow for shader size+offset bound Zack Rusin <zack.rusin(a)broadcom.com> drm/vmwgfx: bound DMA command body size against suffix pointer Zack Rusin <zack.rusin(a)broadcom.com> drm/vmwgfx: validate DRAW_PRIMITIVES header size before division Zack Rusin <zack.rusin(a)broadcom.com> drm/vmwgfx: drop dma_buf reference on foreign-fd prime import Zack Rusin <zack.rusin(a)broadcom.com> drm/vmwgfx: reject DX_BIND_QUERY without a DX context Zack Rusin <zack.rusin(a)broadcom.com> drm/vmwgfx: fix guest_memory_dirty bitfield clobbered as size William Palacek <William.Palacek(a)amd.com> drm/amdkfd: hold event_mutex while checkpointing CRIU events David Francis <David.Francis(a)amd.com> drm/amdkfd: Handle invalid event type in CRIU event restore Vladimir Marioukhine <Vladimir.Marioukhine(a)amd.com> drm/amdkfd: fix QID bit leak in pqm_create_queue() Gang Ba <Gang.Ba(a)amd.com> drm/amdkfd: Fix missing authorization check in KFD_IOC_DBG_TRAP_DISABLE Harkirat Gill <harkirat.gill(a)amd.com> drm/amdgpu: cap GTT size to physical RAM on APUs Candice Li <candice.li(a)amd.com> drm/amdgpu: restore UMD profile pstate after runtime resume Myeonghun Pak <mhun512(a)gmail.com> drm/mediatek: ovl_adaptor: balance component registrations Maíra Canal <mcanal(a)igalia.com> drm/vc4: Zero the tile state data array before each BIN job Jose Maria Casanova Crespo <jmcasanova(a)igalia.com> drm/vc4: Supply the overflow slot size in BPOS, not the whole bin BO size Alexander Kaplan <alexander.kaplan(a)sms-medipool.de> drm/dp: Read the PCON max FRL bandwidth only for HDMI DFPs Avi Weiss <thnkslprpt(a)gmail.com> can: ctucanfd: mark error-active controller status valid Avi Weiss <thnkslprpt(a)gmail.com> can: ctucanfd: handle bus error interrupts Avi Weiss <thnkslprpt(a)gmail.com> can: ctucanfd: unmap BAR0 using base address Avi Weiss <thnkslprpt(a)gmail.com> can: ctucanfd: use self-test mode for PRESUME_ACK Pengpeng Hou <pengpeng(a)iscas.ac.cn> can: ctucanfd: add missing MODULE_DEVICE_TABLE() Pengpeng Hou <pengpeng(a)iscas.ac.cn> can: peak_usb: validate uCAN receive record lengths Maoyi Xie <maoyixie.tju(a)gmail.com> can: peak_usb: peak_usb_start(): fix double free of transfer buffer on URB submit error James Gao <jamesgao5(a)outlook.com> can: peak_usb: add bounds check for USB channel index Pengpeng Hou <pengpeng(a)iscas.ac.cn> can: softing: fw_parse(): validate firmware record spans Pengpeng Hou <pengpeng(a)iscas.ac.cn> can: kvaser_usb_leaf: kvaser_usb_leaf_wait_cmd(): validate received command extents Abdun Nihaal <nihaal(a)cse.iitm.ac.in> can: kvaser_usb: kvaser_usb_hydra_get_busparams(): fix memory leak in kvaser_usb_hydra_get_busparams() Tetsuo Handa <penguin-kernel(a)I-love.SAKURA.ne.jp> can: j1939: use netdevice_tracker for j1939_{priv,session,ecu} tracking Oleksij Rempel <o.rempel(a)pengutronix.de> can: j1939: transport: j1939_session_fresh_new(): initialize receive buffer Marc Kleine-Budde <mkl(a)pengutronix.de> can: gs_usb: gs_usb_receive_bulk_callback(): resubmit URB on skb allocation failure Guangshuo Li <lgs201920130244(a)gmail.com> can: etas_es58x: es58x_read_bulk_callback(): fix RX buffer leak on URB resubmit failure Pengpeng Hou <pengpeng(a)iscas.ac.cn> can: ems_usb: validate CPC message lengths Lucas Martins Alves <lucas.alves(a)lumal21.com.br> can: c_can: c_can_chip_config(): keep controller in init mode until bittiming is configured Liem <liem16213(a)gmail.com> i2c: imx: Cancel hrtimer before clearing slave pointer Liem <liem16213(a)gmail.com> i2c: imx: Fix slave registration race and error handling H. Nikolaus Schaller <hns(a)goldelico.com> i2c: jz4780: Cache host clock rate at probe to prevent CCF prepare_lock deadlock Dawei Feng <dawei.feng(a)seu.edu.cn> ice: fix memory leak in ice_lbtest_prepare_rings() Aaron Ma <aaron.ma(a)canonical.com> ice: wait for reset completion in ice_resume() Ilya Maximets <i.maximets(a)ovn.org> net: openvswitch: fix skb leak on flow key update failure during ct Ilya Maximets <i.maximets(a)ovn.org> net: openvswitch: fix skb leak on flow key update failure during recirculation Ilya Maximets <i.maximets(a)ovn.org> net: openvswitch: fix potential UAF on meter attach failure Nava kishore Manne <nava.kishore.manne(a)amd.com> phy: zynqmp: keep SERDES scrambler and 8b/10b enabled for USB Nava kishore Manne <nava.kishore.manne(a)amd.com> phy: zynqmp: use read-modify-write for SERDES scrambler bypass Nava kishore Manne <nava.kishore.manne(a)amd.com> phy: zynqmp: fix L0_TM_DISABLE_SCRAMBLE_ENCODER mask Holger Dengler <dengler(a)linux.ibm.com> s390/zcrypt: Validate length for CCA ECC private key requests Holger Dengler <dengler(a)linux.ibm.com> s390/zcrypt: Validate length for CCA AES cipher key requests Harald Freudenberger <freude(a)linux.ibm.com> s390/zcrypt: Fix wrong domain value verification with EP11 CPRBs Stefan Haberland <sth(a)linux.ibm.com> s390/dasd: Fix undersized format-check buffer Jan Höppner <hoeppner(a)linux.ibm.com> s390/dasd: Fix potential NULL pointer dereference Aswin Karuvally <aswin(a)linux.ibm.com> s390/qeth: Check CAP_NET_ADMIN for private ioctls Xu Rao <raoxu(a)uniontech.com> power: supply: bq25890: fix the -10 C NTC lookup entry Abdun Nihaal <nihaal(a)cse.iitm.ac.in> cpufreq: powernow-k8: Fix possible memory leak in powernowk8_cpu_init() bui duc phuc <phucduc.bui(a)gmail.com> gpio: pca953x: fix cache_only and IRQ state on restore_context() failure Myeonghun Pak <mhun512(a)gmail.com> i2c: amd-mp2: Unregister callback on adapter add failure Vincent Jardin <vjardin(a)free.fr> hwmon: (pmbus/core) notify on the hwmon device, not the i2c client Hongyan Xu <getshell(a)seu.edu.cn> hwmon: (npcm750-pwm-fan): stop fan timer on device detach Asim Viladi Oglu Manizada <manizada(a)pm.me> sctp: prevent peer transport count overflow Yuxiang Yang <yangyx22(a)mails.tsinghua.edu.cn> sctp: reject stale cookies with mismatched verification tags Ibrahim Hashimov <security(a)auditcode.ai> scsi: scsi_debug: Fix REPORT ZONES alloc_len underflow OOB write Chris Gellermann <christian.gellermann(a)codasip.com> selftests/clone3: fix wild pointer access of getline due to missing init Chris Gellermann <christian.gellermann(a)codasip.com> selftests/mm: fix potential wild pointer access of getline due to missing init Vijaya Krishna Nivarthi <vijaya.nivarthi(a)oss.qualcomm.com> spi: qcom-qspi: Correct max DMA length to avoid 64K boundary failure Masami Hiramatsu (Google) <mhiramat(a)kernel.org> tracing/filters: Fix false positive match in regex_match_full() Masami Hiramatsu (Google) <mhiramat(a)kernel.org> tracing: Check return value of __register_event() in trace_module_add_events() Ming Lei <tom.leiming(a)gmail.com> ublk: reset kernel-owned dev_info fields in ublk_ctrl_add_dev() Eric Dumazet <edumazet(a)google.com> vxlan: use pskb_network_may_pull() in route_shortcircuit() Eric Dumazet <edumazet(a)google.com> vxlan: use neigh_ha_snapshot() in route_shortcircuit() Eric Dumazet <edumazet(a)google.com> vxlan: unclone skb head before modifying eth header in route_shortcircuit() Eric Dumazet <edumazet(a)google.com> vxlan: re-fetch eth header after route_shortcircuit() Michael Bommarito <michael.bommarito(a)gmail.com> um: vector: fix use-after-free in vector_mmsg_rx() Thorsten Blum <thorsten.blum(a)linux.dev> powerpc/ps3: Fix map failure path in dma_ioc0_map_pages() Zhiling Zou <zhilinz(a)nebusec.ai> net: ipv6: clear suppressed fib6 rule result Zhiling Zou <zhilinz(a)nebusec.ai> net: bridge: stop fast-leave after deleting a port group Link Lin <linkl(a)google.com> mm/page_reporting: use system_freezable_wq to fix UAF during suspend Christian Brauner <brauner(a)kernel.org> binfmt_misc: reject a flag character as the field delimiter Zhao Li <enderaoelyther(a)gmail.com> wifi: mwifiex: use the subframe length when parsing A-MSDU TDLS frames Zihan Xi <zihanx(a)nebusec.ai> tipc: avoid use-after-free in poll trace queue dumps David Lee <david.lee(a)trailofbits.com> netfilter: ipset: do not update comments from kernel-side hash adds Xuanqiang Luo <luoxuanqiang(a)kylinos.cn> net/smc: fix socket use-after-free during link group termination Zhiling Zou <roxy520tt(a)gmail.com> ipvs: do not propagate one-packet flag to synced conns Matt Vollrath <tactii(a)gmail.com> igbvf: Fix leak in TX DMA error cleanup Dawei Feng <dawei.feng(a)seu.edu.cn> e1000: fix memory leak in e1000_probe() Md Sadre Alam <md.alam(a)oss.qualcomm.com> dmaengine: qcom: bam_dma: Fix command element mask field for BAM v1.6.0+ Sonali Pradhan <sonalipradhan(a)google.com> ALSA: usb-audio: Clamp frame size in implicit-feedback mode Sonali Pradhan <sonalipradhan(a)google.com> ALSA: usb-audio: Fix DMA buffer out-of-bounds write when fill_max is set Baul Lee <baul.lee(a)xbow.com> ALSA: usb-audio: fix OOB write in snd_usbmidi_akai_output() Baul Lee <baul.lee(a)xbow.com> ALSA: usb-audio: fix use-after-free in ump_to_endpoint() Matt Vollrath <tactii(a)gmail.com> ata: libata-eh: Increase STANDBY IMMEDIATE timeout Haidar Lee <haidar.lee(a)adlinktech.com> ASoC: tas2562: fix broken entries in the volume lookup table Haidar Lee <haidar.lee(a)adlinktech.com> ASoC: tas2562: fix DVC coefficient write order Baul Lee <baul.lee(a)xbow.com> ALSA: ump: fix double free of out_cvts on rawmidi error Norbert Szetei <norbert(a)doyensec.com> ALSA: pcm: wake linked drain waiters on unlink Xu Rao <raoxu(a)uniontech.com> ALSA: lx6464es: fix period byte count for 16-bit streams Takashi Iwai <tiwai(a)suse.de> ALSA: 6fire: Fix UAF at error handling during probe Xuanqiang Luo <luoxuanqiang(a)kylinos.cn> bpf: lwt: Fix dst reference leak on reroute failure Sangho Lee <kudo3228(a)gmail.com> Bluetooth: HIDP: validate numbered report payloads Sangho Lee <kudo3228(a)gmail.com> Bluetooth: HIDP: reject frames without a transaction header Zihan Xi <xizh2024(a)lzu.edu.cn> Bluetooth: mgmt: fix UAF in pair command cancellation Zihan Xi <zihanx(a)nebusec.ai> Bluetooth: mgmt: fix pending command UAF in EIR updates Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> Bluetooth: btmtk: Fix short read errors in btmtk_usb_uhw_reg_read() Luxiao Xu <rakukuip(a)gmail.com> audit: fix potential use-after-free in audit_del_rule() Zhan Xusheng <zhanxusheng1024(a)gmail.com> audit: fix potential integer overflow in audit_log_n_string() Charles Vosburgh <trilobyte777(a)gmail.com> sctp: validate Adaptation Indication parameter length Farhan Ali <alifm(a)linux.ibm.com> KVM: s390: pci: Validate AIBV and AISB before pinning guest pages Farhan Ali <alifm(a)linux.ibm.com> KVM: s390: pci: Fix NULL dereference on AIBV allocation failure Farhan Ali <alifm(a)linux.ibm.com> KVM: s390: pci: Reject adapter interrupt forwarding if already enabled Sean Christopherson <seanjc(a)google.com> KVM: SVM: Update x2APIC MSR intercepts if AVIC is inhibited while L2 is active Raushan Patel <raushan.jhon(a)gmail.com> tracing/probes: Reject $arg0 in meta argument expansion Gregory Price <gourry(a)gourry.net> mm/vmstat: fold stranded per-cpu node stats when a node comes online Xiangfeng Cai <caixiangfeng(a)bytedance.com> mm/hugetlb: fix list corruption in allocate_file_region_entries() Zi Yan <ziy(a)nvidia.com> mm/percpu-km: fix bitmap overflow and accounting in pcpu_create_chunk() Benjamin Boortz <bennib(a)mailbox.org> pinctrl: bm1880: add missing select GENERIC_PINCONF Michael Bommarito <michael.bommarito(a)gmail.com> erofs: cap LZMA stream pool size Karl Mehltretter <kmehltretter(a)gmail.com> pinctrl: devicetree: don't free uninitialized dev_name on error path Benjamin Boortz <bennib(a)mailbox.org> pinctrl: microchip-sgpio: add missing select REGMAP_MMIO Cen Zhang (Microsoft) <blbllhy(a)gmail.com> rhashtable: clear stale iter->p on table restart Pengfei Zhang <zhangfeionline(a)gmail.com> ipv6: fib6: fix NULL deref in fib6_walk_continue() on multi-batch dump Namjae Jeon <linkinjeon(a)kernel.org> ksmbd: fix use-after-free in __close_file_table_ids() Namjae Jeon <linkinjeon(a)kernel.org> ksmbd: return success for deferred final close Denis V. Lunev <den(a)openvz.org> qede: sync udp_tunnel ports outside qede_lock in the recovery path Suman Ghosh <sumang(a)marvell.com> octeontx2-pf: Set correct sequence for carrier off and tx queue stop Daniel Golle <daniel(a)makrotopia.org> net: dsa: mt7530: error out on failed reads in MT7531 PHY polling Muhammad Bilal <meatuni001(a)gmail.com> accel/qaic: use sizeof(*trans_hdr) for transaction length check Masami Hiramatsu (Google) <mhiramat(a)kernel.org> tracing/mmiotrace: Reset dropped_count in mmio_reset_data() Minhong He <heminhong(a)kylinos.cn> can: isotp: check register_netdevice_notifier() error in module init Chenguang Zhao <zhaochenguang(a)kylinos.cn> net: sxgbe: check descriptor ring allocation failures Chenguang Zhao <zhaochenguang(a)kylinos.cn> net: sxgbe: free TX rings on RX allocation failure Leon Romanovsky <leon(a)kernel.org> scsi: target: Clear cmd_cnt when initial counter enrollment fails Benjamin Block <bblock(a)linux.ibm.com> scsi: zfcp: Fix memory leak during adapter release by destroying gid_pn_req Guangshuo Li <lgs201920130244(a)gmail.com> scsi: ufs: core: Cancel RTC work in active-active suspend TanZheng <tanzheng(a)kylinos.cn> scsi: target: iblock: Fix wrong PR ops NULL check for PREEMPT/RELEASE Christian Marangi <ansuelsmth(a)gmail.com> net: phylink: put link_gpio if phylink_create fails Pauli Virtanen <pav(a)iki.fi> Bluetooth: hci_sync: remove unnecessary hci_conn_get in create_conn_sync Pauli Virtanen <pav(a)iki.fi> Bluetooth: hci_sync: fix hci_conn_del() use in hci_le_create_conn_sync Pauli Virtanen <pav(a)iki.fi> Bluetooth: hci_conn: hold conn reference in abort_conn_sync() Pauli Virtanen <pav(a)iki.fi> Bluetooth: hci_sync: make hci_cmd_sync_run_once return -EEXIST if exists Zijun Hu <zijun.hu(a)oss.qualcomm.com> Bluetooth: btintel: Validate length before parsing diagnostics TLV Pauli Virtanen <pav(a)iki.fi> Bluetooth: ISO: fix timeout vs sync_timeout typo in check_bcast_qos Jiale Yao <yaojiale02(a)163.com> Bluetooth: L2CAP: fix UAF in l2cap_le_connect_rsp Pauli Virtanen <pav(a)iki.fi> Bluetooth: ISO: clear iso_data always when detaching conn from hcon Guenter Roeck <linux(a)roeck-us.net> hwmon: (pmbus) Fix return value from pmbus_update_byte_data() Zhao Li <enderaoelyther(a)gmail.com> wifi: mac80211: validate individual TWT params before driver setup Thorsten Blum <thorsten.blum(a)linux.dev> powerpc/boot: Fix treeboot-akebono CPU node lookup check Thorsten Blum <thorsten.blum(a)linux.dev> powerpc/boot: Fix treeboot-currituck CPU node lookup check Thorsten Blum <thorsten.blum(a)linux.dev> powerpc/boot: Fix simpleboot CPU node lookup check Luiz Angelo Daros de Luca <luizluca(a)gmail.com> hwmon: (adt7470) Fix PWM auto temp state array and bounds check Luiz Angelo Daros de Luca <luizluca(a)gmail.com> hwmon: (adt7470) Fix divide-by-zero TOCTOU crash in fan speed read Luiz Angelo Daros de Luca <luizluca(a)gmail.com> hwmon: (adt7470) Use cached PWM frequency value Luiz Angelo Daros de Luca <luizluca(a)gmail.com> hwmon: (adt7470) Fix swapped PWM3 and PWM4 auto mode masks Luiz Angelo Daros de Luca <luizluca(a)gmail.com> hwmon: (adt7470) Fix temperature alarm logic in hwmon_temp_read() Luiz Angelo Daros de Luca <luizluca(a)gmail.com> hwmon: (adt7470) Fix busy-loop and I2C flooding in update thread Luiz Angelo Daros de Luca <luizluca(a)gmail.com> hwmon: (adt7470) Fix cache updated before hardware write on I2C error Luiz Angelo Daros de Luca <luizluca(a)gmail.com> hwmon: (adt7470) Fix fans stuck in manual mode on I2C errors Chenguang Zhao <zhaochenguang(a)kylinos.cn> forcedeth: fix UAF of txrx_stats in nv_remove David Corvaglia <david(a)corvaglia.dev> net: bridge: mrp: fix Option TLV length in MRP_Test frames Guenter Roeck <linux(a)roeck-us.net> hwmon: (nct6775-core) Prevent access to unsupported weight registers Eric Dumazet <edumazet(a)google.com> net: do not send ICMP/NDISC Redirects when peer allocation fails Guenter Roeck <linux(a)roeck-us.net> hwmon: (nzxt-smart2) DMA-align output buffer Guenter Roeck <linux(a)roeck-us.net> hwmon: (lm90) Only report alarms if driver is ready Guenter Roeck <linux(a)roeck-us.net> hwmon: (nct6775-core) Fix number of temperature registers for NCT6116 Srikanth Boyapally <srikanth.boyapally(a)amd.com> spi: spi-cadence: Move TX FIFO full busy-wait into FIFO Jun Guo <jun.guo(a)cixtech.com> spi: spi-cadence: supports transmission with bits_per_word of 16 and 32 Dawei Feng <dawei.feng(a)seu.edu.cn> smb: client: fix buffer leaks in SMB1 read and write Xingui Yang <yangxingui(a)huawei.com> scsi: libsas: Fix HA resume deadlock and hisi_sas disk-wake race HyeongJun An <sammiee5311(a)gmail.com> scsi: libiscsi_tcp: Bound SCSI Response data segment to the connection buffer HyeongJun An <sammiee5311(a)gmail.com> scsi: libiscsi: Fix stale-data leak into the SCSI sense buffer Mario Limonciello <mario.limonciello(a)amd.com> pinctrl-amd: Don't clear S4 wake bits at probe Xiang Mei <xmei5(a)asu.edu> rds: tcp: hold the RCU lock across ipv6_chk_addr() in rds_tcp_laddr_check() Ilia Gavrilov <Ilia.Gavrilov(a)infotecs.ru> rds: Fix inet6_addr_lst NULL dereference when IPv6 is disabled Xiang Mei (Microsoft) <xmei5(a)asu.edu> netfilter: nft_payload: fix mask build for partial field offload Julian Anastasov <ja(a)ssi.bg> ipvs: do not mangle ICMP replies for non-first fragments Julian Anastasov <ja(a)ssi.bg> ipvs: fix places with wrong packet offsets Julian Anastasov <ja(a)ssi.bg> ipvs: fix the checksum validations Kent Overstreet <kent.overstreet(a)gmail.com> sched: Add task_struct->faults_disabled_mapping Pablo Neira Ayuso <pablo(a)netfilter.org> netfilter: xt_hashlimit: validate hashtable supports XT_HASHLIMIT_RATE_MATCH Michael Bommarito <michael.bommarito(a)gmail.com> assoc_array: trim the final shortcut word using the current chunk end Michael Bommarito <michael.bommarito(a)gmail.com> keys: make keyring key-chunk byte order agree with keyring_diff_objects() Michael Bommarito <michael.bommarito(a)gmail.com> keys: fix out-of-bounds read in keyring_get_key_chunk() Ruoyu Wang <ruoyuw560(a)gmail.com> drm/mediatek: Check CRTC state before freeing Xiang Mei <xmei5(a)asu.edu> netfilter: nf_conntrack_sip: widen NAT rewrite delta to s32 in sip_help_tcp() Radhey Shyam Pandey <radhey.shyam.pandey(a)amd.com> phy: zynqmp: fix runtime PM leak on probe allocation failure Radhey Shyam Pandey <radhey.shyam.pandey(a)amd.com> phy: zynqmp: fix clock error handling in xpsgtr_phy_init() Mike Looijmans <mike.looijmans(a)topic.nl> phy-zynqmp: Postpone getting clock rate until actually needed Johannes Thumshirn <johannes.thumshirn(a)wdc.com> btrfs: zoned: fix deadlock between metadata writeback and transaction commit Uday Khare <udaykhare77(a)gmail.com> ASoC: max98090: fix missing IS_ERR() before PTR_ERR() on mclk lookup Uday Khare <udaykhare77(a)gmail.com> ASoC: max98095: fix missing IS_ERR() before PTR_ERR() on mclk lookup Radhey Shyam Pandey <radhey.shyam.pandey(a)amd.com> ata: ahci_ceva: fix error paths in ceva_ahci_platform_enable_resources() Damien Le Moal <dlemoal(a)kernel.org> ahci: Introduce ahci_ignore_port() helper Josua Mayer <josua(a)solid-run.com> ata: libahci_platform: support non-consecutive port numbers Rosen Penev <rosenp(a)gmail.com> ata: sata_mv: accept 1 or 2 resources in platform probe Yuho Choi <dbgh9129(a)gmail.com> dmaengine: idxd: fix fdev setup failure cleanup in idxd_cdev_open() Hongling Zeng <zenghongling(a)kylinos.cn> dmaengine: sun6i-dma: Fix reclaim descriptors while terminating DMA Konrad Dybcio <konrad.dybcio(a)oss.qualcomm.com> pinctrl: qcom: sc8280xp: Add missing wakeup entries for GPIO143/151 Michael Bommarito <michael.bommarito(a)gmail.com> thunderbolt: Prevent XDomain delayed work use-after-free on disconnect Harshal Dev <harshal.dev(a)oss.qualcomm.com> soc: qcom: ice: Allow explicit votes on 'iface' clock for ICE Benjamin Tissoires <bentiss(a)kernel.org> HID: logitech-dj: fix wrong detection of bad DJ_SHORT output report Lee Jones <lee(a)kernel.org> HID: logitech-dj: Prevent REPORT_ID_DJ_SHORT related user initiated OOB write Lee Jones <lee(a)kernel.org> HID: logitech-dj: Standardise hid_report_enum variable nomenclature Eddie Phillips <eddiephillips(a)google.com> gve: fix Rx queue stall on alloc failure Yehyeong Lee <yhlee(a)isslab.korea.ac.kr> net: mpls: initialize rtm_tos in mpls_getroute() Lorenzo Bianconi <lorenzo(a)kernel.org> netfilter: br_netfilter: Reallocate headroom if necessary in neigh_hh_bridge() Pablo Neira Ayuso <pablo(a)netfilter.org> netfilter: nf_conntrack_expect: restore helper propagation via expectation ------------- Diffstat: Makefile | 4 +- arch/powerpc/boot/simpleboot.c | 2 +- arch/powerpc/boot/treeboot-akebono.c | 2 +- arch/powerpc/boot/treeboot-currituck.c | 2 +- arch/powerpc/platforms/ps3/mm.c | 1 + arch/s390/kvm/pci.c | 28 +- arch/um/drivers/vector_kern.c | 3 + arch/x86/kvm/svm/avic.c | 8 - drivers/accel/qaic/qaic_control.c | 2 +- drivers/ata/ahci.h | 17 +- drivers/ata/ahci_brcm.c | 3 + drivers/ata/ahci_ceva.c | 24 +- drivers/ata/libahci.c | 1 + drivers/ata/libahci_platform.c | 38 +- drivers/ata/libata-eh.c | 8 + drivers/ata/sata_mv.c | 2 +- drivers/block/ublk_drv.c | 9 + drivers/bluetooth/btintel.c | 3 + drivers/bluetooth/btmtk.c | 50 +- drivers/cpufreq/ia64-acpi-cpufreq.c | 4 +- drivers/cpufreq/powernow-k8.c | 1 + drivers/dma/idxd/cdev.c | 4 +- drivers/dma/sun6i-dma.c | 11 +- drivers/firmware/stratix10-svc.c | 10 +- drivers/gpio/gpio-pca953x.c | 15 +- drivers/gpio/gpio-pch.c | 28 +- drivers/gpu/drm/amd/amdgpu/amdgpu_drv.c | 15 + drivers/gpu/drm/amd/amdgpu/amdgpu_gtt_mgr.c | 30 +- drivers/gpu/drm/amd/amdgpu/amdgpu_ttm.c | 12 + drivers/gpu/drm/amd/amdkfd/kfd_chardev.c | 10 +- drivers/gpu/drm/amd/amdkfd/kfd_events.c | 23 +- .../gpu/drm/amd/amdkfd/kfd_process_queue_manager.c | 2 +- drivers/gpu/drm/armada/armada_fbdev.c | 12 +- drivers/gpu/drm/display/drm_dp_helper.c | 12 + drivers/gpu/drm/drm_fb_helper.c | 41 +- drivers/gpu/drm/drm_fbdev_dma.c | 12 +- drivers/gpu/drm/drm_fbdev_generic.c | 12 +- drivers/gpu/drm/exynos/exynos_drm_fbdev.c | 9 +- drivers/gpu/drm/gma500/fbdev.c | 13 +- drivers/gpu/drm/i915/display/intel_display_core.h | 3 + .../gpu/drm/i915/display/intel_display_device.c | 3 + drivers/gpu/drm/i915/display/intel_display_types.h | 40 ++ drivers/gpu/drm/i915/display/intel_fbc.c | 9 +- drivers/gpu/drm/i915/display/intel_fbdev.c | 9 +- drivers/gpu/drm/i915/display/intel_hdcp.c | 266 ++++---- drivers/gpu/drm/i915/display/intel_vrr.c | 10 +- drivers/gpu/drm/mediatek/mtk_disp_ovl_adaptor.c | 7 +- drivers/gpu/drm/mediatek/mtk_drm_crtc.c | 6 +- drivers/gpu/drm/msm/msm_fbdev.c | 9 +- drivers/gpu/drm/omapdrm/omap_fbdev.c | 9 +- drivers/gpu/drm/radeon/radeon_fbdev.c | 13 +- drivers/gpu/drm/renesas/Kconfig | 1 + drivers/gpu/drm/renesas/Makefile | 1 + drivers/gpu/drm/renesas/rcar-du/Kconfig | 8 - drivers/gpu/drm/renesas/rcar-du/Makefile | 2 - drivers/gpu/drm/renesas/rz-du/Kconfig | 8 + drivers/gpu/drm/renesas/rz-du/Makefile | 3 + .../renesas/{rcar-du => rz-du}/rzg2l_mipi_dsi.c | 2 +- .../{rcar-du => rz-du}/rzg2l_mipi_dsi_regs.h | 0 drivers/gpu/drm/tegra/fbdev.c | 18 +- drivers/gpu/drm/vc4/vc4_irq.c | 2 +- drivers/gpu/drm/vc4/vc4_validate.c | 29 +- drivers/gpu/drm/vmwgfx/ttm_object.c | 7 +- drivers/gpu/drm/vmwgfx/vmwgfx_blit.c | 39 +- drivers/gpu/drm/vmwgfx/vmwgfx_execbuf.c | 20 +- drivers/gpu/drm/vmwgfx/vmwgfx_resource.c | 4 +- drivers/gpu/drm/vmwgfx/vmwgfx_shader.c | 13 +- drivers/hid/hid-logitech-dj.c | 28 +- drivers/hwmon/adt7470.c | 131 ++-- drivers/hwmon/lm90.c | 4 +- drivers/hwmon/nct6775-core.c | 20 +- drivers/hwmon/npcm750-pwm-fan.c | 11 + drivers/hwmon/nzxt-smart2.c | 2 +- drivers/hwmon/pmbus/pmbus_core.c | 7 +- drivers/i2c/busses/i2c-amd-mp2-plat.c | 4 +- drivers/i2c/busses/i2c-imx.c | 9 +- drivers/i2c/busses/i2c-jz4780.c | 5 +- drivers/iommu/iommu-sva.c | 6 +- drivers/media/i2c/imx219.c | 670 ++++++++++--------- drivers/media/v4l2-core/v4l2-async.c | 8 +- drivers/media/v4l2-core/v4l2-fwnode.c | 6 +- drivers/net/can/c_can/c_can_main.c | 8 +- drivers/net/can/ctucanfd/ctucanfd_base.c | 14 +- drivers/net/can/ctucanfd/ctucanfd_pci.c | 3 +- drivers/net/can/dev/skb.c | 2 - drivers/net/can/softing/softing_fw.c | 46 +- drivers/net/can/usb/ems_usb.c | 43 ++ drivers/net/can/usb/etas_es58x/es58x_core.c | 1 - drivers/net/can/usb/gs_usb.c | 4 +- drivers/net/can/usb/kvaser_usb/kvaser_usb_hydra.c | 1 + drivers/net/can/usb/kvaser_usb/kvaser_usb_leaf.c | 13 +- drivers/net/can/usb/peak_usb/pcan_usb_core.c | 1 - drivers/net/can/usb/peak_usb/pcan_usb_fd.c | 40 +- drivers/net/can/usb/peak_usb/pcan_usb_pro.c | 20 +- drivers/net/dsa/mt7530.c | 58 +- drivers/net/ethernet/google/gve/gve.h | 3 + drivers/net/ethernet/google/gve/gve_main.c | 3 + drivers/net/ethernet/google/gve/gve_rx_dqo.c | 33 + drivers/net/ethernet/intel/e1000/e1000_main.c | 2 +- drivers/net/ethernet/intel/ice/ice_ethtool.c | 10 +- drivers/net/ethernet/intel/ice/ice_main.c | 10 + drivers/net/ethernet/intel/igbvf/netdev.c | 2 - .../net/ethernet/marvell/octeontx2/nic/otx2_pf.c | 2 +- drivers/net/ethernet/nvidia/forcedeth.c | 4 +- drivers/net/ethernet/qlogic/qede/qede_main.c | 44 +- drivers/net/ethernet/samsung/sxgbe/sxgbe_main.c | 14 +- drivers/net/phy/phylink.c | 29 +- drivers/net/vrf.c | 2 +- drivers/net/vxlan/vxlan_core.c | 15 +- drivers/net/wireless/ath/ath6kl/txrx.c | 2 +- .../wireless/broadcom/brcm80211/brcmfmac/bcmsdh.c | 16 +- .../net/wireless/broadcom/brcm80211/brcmfmac/bus.h | 6 + .../wireless/broadcom/brcm80211/brcmfmac/chip.c | 4 +- .../wireless/broadcom/brcm80211/brcmfmac/core.c | 46 +- .../wireless/broadcom/brcm80211/brcmfmac/pcie.c | 6 + .../wireless/broadcom/brcm80211/brcmfmac/sdio.c | 14 +- .../wireless/broadcom/brcm80211/brcmfmac/sdio.h | 1 + .../net/wireless/broadcom/brcm80211/brcmfmac/usb.c | 3 + .../broadcom/brcm80211/include/brcm_hw_ids.h | 2 +- .../net/wireless/marvell/mwifiex/11n_rxreorder.c | 2 +- drivers/phy/xilinx/phy-zynqmp.c | 130 ++-- drivers/pinctrl/Kconfig | 2 + drivers/pinctrl/devicetree.c | 4 + drivers/pinctrl/pinctrl-amd.c | 3 +- drivers/pinctrl/qcom/pinctrl-sc8280xp.c | 21 +- drivers/power/supply/bq25890_charger.c | 2 +- drivers/s390/block/dasd_eckd.c | 11 +- drivers/s390/block/dasd_ioctl.c | 2 +- drivers/s390/crypto/zcrypt_api.c | 2 +- drivers/s390/crypto/zcrypt_ccamisc.c | 6 + drivers/s390/net/qeth_core_main.c | 3 + drivers/s390/scsi/zfcp_aux.c | 1 + drivers/scsi/hisi_sas/hisi_sas_v3_hw.c | 10 +- drivers/scsi/libiscsi.c | 2 +- drivers/scsi/libiscsi_tcp.c | 8 +- drivers/scsi/libsas/sas_init.c | 37 +- drivers/scsi/scsi_debug.c | 8 +- drivers/soc/qcom/ice.c | 17 +- drivers/spi/spi-cadence.c | 129 +++- drivers/spi/spi-qcom-qspi.c | 3 +- drivers/target/target_core_iblock.c | 6 +- drivers/target/target_core_transport.c | 12 +- drivers/thunderbolt/xdomain.c | 40 +- drivers/ufs/core/ufshcd.c | 6 +- drivers/usb/gadget/function/f_tcm.c | 192 +++++- drivers/usb/gadget/function/tcm.h | 13 + drivers/usb/musb/omap2430.c | 25 +- drivers/usb/typec/ucsi/ucsi.c | 113 ++-- drivers/usb/typec/ucsi/ucsi.h | 1 + fs/binfmt_misc.c | 4 + fs/btrfs/zoned.c | 6 +- fs/ceph/acl.c | 6 +- fs/ceph/addr.c | 279 ++++---- fs/ceph/caps.c | 708 ++++++++++++--------- fs/ceph/crypto.c | 39 +- fs/ceph/debugfs.c | 6 +- fs/ceph/dir.c | 225 ++++--- fs/ceph/export.c | 39 +- fs/ceph/file.c | 245 ++++--- fs/ceph/inode.c | 485 +++++++------- fs/ceph/ioctl.c | 13 +- fs/ceph/locks.c | 57 +- fs/ceph/mds_client.c | 554 +++++++++------- fs/ceph/mdsmap.c | 24 +- fs/ceph/metric.c | 5 +- fs/ceph/quota.c | 29 +- fs/ceph/snap.c | 174 ++--- fs/ceph/super.c | 70 +- fs/ceph/super.h | 6 + fs/ceph/xattr.c | 96 +-- fs/erofs/Kconfig | 14 + fs/erofs/decompressor_lzma.c | 3 +- fs/smb/client/cifssmb.c | 12 +- fs/smb/server/vfs_cache.c | 6 +- include/drm/drm_fb_helper.h | 12 - include/linux/can/core.h | 1 + include/linux/can/skb.h | 2 - include/linux/ceph/ceph_debug.h | 38 ++ include/linux/dma/qcom_bam_dma.h | 21 +- include/linux/libata.h | 2 +- include/linux/mmc/sdio_ids.h | 2 +- include/linux/netfilter/nf_conntrack_sip.h | 2 +- include/linux/sched.h | 1 + include/linux/sysctl.h | 2 +- include/linux/thunderbolt.h | 3 + include/media/v4l2-async.h | 8 +- include/net/ip_vs.h | 45 +- include/net/neighbour.h | 8 +- include/net/netfilter/nf_conntrack_expect.h | 5 +- include/net/netfilter/nf_tables.h | 2 + include/scsi/libsas.h | 1 - init/init_task.c | 1 + ipc/ipc_sysctl.c | 2 +- ipc/mq_sysctl.c | 2 +- kernel/audit.c | 11 +- kernel/auditfilter.c | 6 +- kernel/trace/trace_events.c | 4 +- kernel/trace/trace_events_filter.c | 3 + kernel/trace/trace_mmiotrace.c | 1 + kernel/trace/trace_probe.c | 6 +- kernel/ucount.c | 2 +- lib/assoc_array.c | 3 +- lib/rhashtable.c | 1 + mm/huge_memory.c | 16 +- mm/hugetlb.c | 12 +- mm/mm_init.c | 15 +- mm/page_reporting.c | 6 +- mm/percpu-km.c | 2 +- net/ax25/sysctl_net_ax25.c | 2 +- net/bluetooth/hci_conn.c | 14 +- net/bluetooth/hci_sync.c | 19 +- net/bluetooth/hidp/core.c | 30 +- net/bluetooth/iso.c | 3 +- net/bluetooth/l2cap_core.c | 5 + net/bluetooth/mgmt.c | 84 ++- net/bridge/br_mrp.c | 2 +- net/bridge/br_multicast.c | 1 + net/bridge/br_netfilter_hooks.c | 8 +- net/can/af_can.c | 14 +- net/can/bcm.c | 2 - net/can/isotp.c | 337 +++++++--- net/can/j1939/bus.c | 2 + net/can/j1939/j1939-priv.h | 3 + net/can/j1939/main.c | 8 +- net/can/j1939/socket.c | 1 - net/can/j1939/transport.c | 6 +- net/can/raw.c | 7 +- net/core/lwt_bpf.c | 4 +- net/core/sysctl_net_core.c | 2 +- net/ieee802154/6lowpan/reassembly.c | 2 +- net/ipv4/devinet.c | 2 +- net/ipv4/ip_fragment.c | 2 +- net/ipv4/route.c | 4 +- net/ipv4/sysctl_net_ipv4.c | 2 +- net/ipv4/xfrm4_policy.c | 2 +- net/ipv6/addrconf.c | 2 +- net/ipv6/fib6_rules.c | 1 + net/ipv6/ip6_fib.c | 17 +- net/ipv6/ip6_output.c | 2 +- net/ipv6/ndisc.c | 2 + net/ipv6/netfilter/nf_conntrack_reasm.c | 2 +- net/ipv6/reassembly.c | 2 +- net/ipv6/sysctl_net_ipv6.c | 6 +- net/ipv6/xfrm6_policy.c | 2 +- net/mac80211/s1g.c | 4 + net/mpls/af_mpls.c | 5 +- net/mptcp/ctrl.c | 2 +- net/mptcp/pm.c | 9 +- net/mptcp/pm_netlink.c | 29 +- net/mptcp/pm_userspace.c | 87 ++- net/mptcp/protocol.h | 6 +- net/netfilter/ipset/ip_set_hash_gen.h | 2 +- net/netfilter/ipvs/ip_vs_app.c | 4 +- net/netfilter/ipvs/ip_vs_conn.c | 3 + net/netfilter/ipvs/ip_vs_core.c | 180 +++--- net/netfilter/ipvs/ip_vs_proto_sctp.c | 19 +- net/netfilter/ipvs/ip_vs_proto_tcp.c | 48 +- net/netfilter/ipvs/ip_vs_proto_udp.c | 54 +- net/netfilter/ipvs/ip_vs_xmit.c | 42 +- net/netfilter/nf_conntrack_broadcast.c | 1 + net/netfilter/nf_conntrack_core.c | 7 +- net/netfilter/nf_conntrack_expect.c | 1 + net/netfilter/nf_conntrack_h323_main.c | 12 +- net/netfilter/nf_conntrack_helper.c | 5 + net/netfilter/nf_conntrack_netlink.c | 18 +- net/netfilter/nf_conntrack_sip.c | 4 +- net/netfilter/nf_conntrack_standalone.c | 2 +- net/netfilter/nf_log.c | 2 +- net/netfilter/nf_nat_sip.c | 2 +- net/netfilter/nf_tables_api.c | 10 +- net/netfilter/nft_payload.c | 12 +- net/netfilter/nft_set_pipapo.c | 11 +- net/netfilter/xt_hashlimit.c | 16 +- net/openvswitch/actions.c | 12 +- net/openvswitch/meter.c | 33 +- net/rds/ib.c | 4 + net/rds/ib_cm.c | 4 + net/rds/tcp.c | 14 +- net/rxrpc/ar-internal.h | 1 + net/rxrpc/call_accept.c | 1 + net/rxrpc/peer_object.c | 12 +- net/sctp/associola.c | 3 + net/sctp/protocol.c | 21 +- net/sctp/sm_make_chunk.c | 17 +- net/sctp/sysctl.c | 11 +- net/smc/smc_core.c | 2 +- net/smc/smc_sysctl.c | 2 +- net/tipc/socket.c | 2 +- net/unix/sysctl_net_unix.c | 2 +- net/xfrm/xfrm_sysctl.c | 2 +- security/keys/keyring.c | 14 +- sound/core/pcm_native.c | 7 + sound/core/ump.c | 1 + sound/pci/hda/patch_hdmi.c | 48 +- sound/pci/lx6464es/lx6464es.c | 5 +- sound/pci/lx6464es/lx_core.c | 5 +- sound/soc/codecs/max98090.c | 5 +- sound/soc/codecs/max98095.c | 5 +- sound/soc/codecs/tas2562.c | 30 +- sound/usb/6fire/chip.c | 4 + sound/usb/endpoint.c | 14 +- sound/usb/midi.c | 2 + sound/usb/midi2.c | 4 +- tools/testing/selftests/clone3/clone3_set_tid.c | 2 +- tools/testing/selftests/mm/mlock-random-test.c | 2 +- 305 files changed, 4972 insertions(+), 3146 deletions(-)

2 months, 3 weeks

ISE 2026 Attendees List 40% Off

by Alyssa Grant

Hi, We have the Integrated Systems Europe 2026 visitor database with 95,930 verified contacts available. 100% Opt-in & GDPR Compliant. Whether you're looking for the full attendee list or a specific audience segment, I'll be happy to share the available contact counts, sample records, and pricing. Q3 Promo: Enjoy 40% Off Kind regards, Alyssa Grant Sr. Demand Generation

2 months, 3 weeks

[PATCH 6.6 000/484] 6.6.148-rc1 review

by Greg Kroah-Hartman

This is the start of the stable review cycle for the 6.6.148 release. There are 484 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know. Responses should be made by Sat, 01 Aug 2026 14:13:41 +0000. Anything received after that time might be too late. The whole patch series can be found in one patch at: https://www.kernel.org/pub/linux/kernel/v6.x/stable-review/patch-6.6.148-rc… or in the git tree and branch at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-6.6.y and the diffstat can be found below. thanks, greg k-h ------------- Pseudo-Shortlog of commits: Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> Linux 6.6.148-rc1 Nikunj A Dadhania <nikunj(a)amd.com> KVM: SVM: Bump asid_generation on CPU online to avoid ASID collision after hotplug David Howells <dhowells(a)redhat.com> rxrpc: Disable IRQ, not BH, to take the lock for ->attend_link Robert Mader <robert.mader(a)collabora.com> udmabuf: Ensure to perform cache synchronisation in begin_cpu_udmabuf() Julien Massot <julien.massot(a)collabora.com> ASoC: mediatek: mt8195: Set ETDM1/2 IN/OUT to COMP_DUMMY() Chen-Yu Tsai <wenst(a)chromium.org> ASoC: mediatek: mt8195: Add platform entry for ETDM1_OUT_BE dai link SJ Park <sj(a)kernel.org> mm/damon/core: disallow overlapping input ranges for damon_set_regions() SJ Park <sj(a)kernel.org> mm/damon/core: validate ranges in damon_set_regions() Qian Zuo <zuoqian113(a)gmail.com> coredump: fix pidfs file refcount leak in umh_coredump_setup Venkatesh Srinivas <venkateshs(a)chromium.org> KVM: x86: Only reset TSC Deadline Timer in apic_timer_expired on KVM_RUN David Matlack <dmatlack(a)google.com> KVM: Introduce vcpu->wants_to_run Reinette Chatre <reinette.chatre(a)intel.com> fs/resctrl: Fix double-add of pseudo-locked region's RMID to free list Haoxiang Li <haoxiang_li2024(a)163.com> net: ipa: fix SMEM state handle leaks in SMP2P init Théo Lebrun <theo.lebrun(a)bootlin.com> net: macb: drop in-flight Tx SKBs on close Bryam Vargas <hexlabsecurity(a)proton.me> ata: libata-core: Reject an invalid concurrent positioning ranges count Dawei Feng <dawei.feng(a)seu.edu.cn> octeontx2-pf: fix SQB pointer leak on init failure Wentao Liang <vulab(a)iscas.ac.cn> ipmi: fix refcount leak in i_ipmi_request() Breno Leitao <leitao(a)debian.org> bootconfig: fix NULL-pointer arithmetic in xbc_snprint_cmdline() Breno Leitao <leitao(a)debian.org> bootconfig: move xbc_snprint_cmdline() to lib/bootconfig.c Rasmus Villemoes <linux(a)rasmusvillemoes.dk> bootconfig: do not put quotes on cmdline items unless necessary Junrui Luo <moonafterrain(a)outlook.com> octeontx2-af: cn10k: restrict VF LMTLINE sharing to its own PF Sergio Paracuellos <sergio.paracuellos(a)gmail.com> gpio: mt7621: avoid corruption of shared interrupt trigger state Maoyi Xie <maoyixie.tju(a)gmail.com> net: ip6_tunnel: require CAP_NET_ADMIN in the device netns for changelink Runyu Xiao <runyu.xiao(a)seu.edu.cn> gpio: tegra: do not call pinctrl for GPIO direction Bartosz Golaszewski <bartosz.golaszewski(a)linaro.org> pinctrl: remove pinctrl_gpio_direction_output() Dexuan Cui <decui(a)microsoft.com> net: mana: Validate the packet length reported by the NIC Thomas Gleixner <tglx(a)kernel.org> locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() Guangshuo Li <lgs201920130244(a)gmail.com> mmc: vub300: fix use-after-free on probe failure Johan Hovold <johan(a)kernel.org> mmc: vub300: rename probe error labels Johan Hovold <johan(a)kernel.org> mmc: vub300: fix use-after-free on disconnect Maoyi Xie <maoyixie.tju(a)gmail.com> wifi: libertas_tf: fix use-after-free in lbtf_free_adapter() Michael Bommarito <michael.bommarito(a)gmail.com> tracing/user_events: Fix use-after-free in user_event_mm_dup() Marco Crivellari <marco.crivellari(a)suse.com> workqueue: Add system_percpu_wq and system_dfl_wq Tejun Heo <tj(a)kernel.org> workqueue: Factor out init_cpu_worker_pool() Dmitry Torokhov <dmitry.torokhov(a)gmail.com> Input: ims-pcu - fix firmware leak in async update Dmitry Torokhov <dmitry.torokhov(a)gmail.com> firmware_loader: introduce __free() cleanup hanler Mikulas Patocka <mpatocka(a)redhat.com> dm-verity: make error counter atomic Mikulas Patocka <mpatocka(a)redhat.com> dm-verity: avoid double increment of &use_bh_wq_enabled Souvik Banerjee <souvik(a)amlalabs.com> ovl: use linked upper dentry in copy-up tmpfile Benjamin Coddington <ben.coddington(a)hammerspace.com> NFS: Charge unstable writes by request size, not folio size Christoph Hellwig <hch(a)lst.de> nfs: remove dead code for the old swap over NFS implementation Vincent Jardin <vjardin(a)free.fr> i2c: imx: fix locked bus on SMBus block-read of 0 (atomic) Stefan Eichenberger <stefan.eichenberger(a)toradex.com> i2c: imx: separate atomic, dma and non-dma use case Haoxiang Li <lihaoxiang(a)isrc.iscas.ac.cn> platform/x86: dell-laptop: fix missing cleanups in init error path Lyndon Sanche <lsanche(a)lyndeno.ca> platform/x86: dell-smbios: Move request functions for reuse Michael Bommarito <michael.bommarito(a)gmail.com> thunderbolt: Prevent XDomain delayed work use-after-free on disconnect Mika Westerberg <mika.westerberg(a)linux.intel.com> thunderbolt: Remove XDomain from the bus without holding tb->lock Mika Westerberg <mika.westerberg(a)linux.intel.com> thunderbolt: Remove service debugfs entries during unregister Mika Westerberg <mika.westerberg(a)linux.intel.com> thunderbolt: Keep XDomain reference during the lifetime of a service Alan Borzeszkowski <alan.borzeszkowski(a)linux.intel.com> thunderbolt: Update property.c function documentation Christophe JAILLET <christophe.jaillet(a)wanadoo.fr> thunderbolt: Remove usage of the deprecated ida_simple_xx() API Gil Fine <gil.fine(a)linux.intel.com> thunderbolt: Handle lane bonding of Gen 4 XDomain links properly Koichiro Den <den(a)valinux.co.jp> dmaengine: dw-edma-pcie: Reject devices without driver data Krzysztof Kozlowski <krzysztof.kozlowski(a)oss.qualcomm.com> dmaengine: dw-edma: Fix confusing cleanup.h syntax Abinash Singh <abinashlalotra(a)gmail.com> dma: dw-edma: Fix build warning in dw_edma_pcie_probe() Yiyang Chen <cyyzero16(a)gmail.com> taskstats: retain dead thread stats in TGID queries Oleg Nesterov <oleg(a)redhat.com> taskstats: fill_stats_for_tgid: use for_each_thread() Miquel Raynal <miquel.raynal(a)bootlin.com> mtd: rawnand: Pause continuous reads at block boundaries Miquel Raynal <miquel.raynal(a)bootlin.com> mtd: rawnand: Ensure all continuous terms are always in sync Miquel Raynal <miquel.raynal(a)bootlin.com> mtd: rawnand: Add a helper for calculating a page index Florian Fuchs <fuchsfl(a)gmail.com> mtd: maps: vmu-flash: fix fault in unaligned fixup Muchun Song <muchun.song(a)linux.dev> mm/mm_init: fix pageblock migratetype for ZONE_DEVICE compound pages Chuck Lever <chuck.lever(a)oracle.com> SUNRPC: Return an error from xdr_buf_to_bvec() on overflow Chuck Lever <chuck.lever(a)oracle.com> SUNRPC: Add helpers to convert xdr_buf byte ranges to scatterlists Jeff Layton <jlayton(a)kernel.org> sunrpc: allocate a separate bvec array for socket sends Mike Snitzer <snitzer(a)kernel.org> NFSD: pass nfsd_file to nfsd_iter_read() Theodor Arsenij Larionov-Trichkine <theodorlarionov(a)gmail.com> netfilter: nft_fib: reject fib expression on the netdev egress hook Florian Westphal <fw(a)strlen.de> netfilter: nf_tables: remove register tracking infrastructure Yue Haibing <yuehaibing(a)huawei.com> netfilter: nf_tables: Remove unused nft_reduce_is_readonly() Pablo Neira Ayuso <pablo(a)netfilter.org> netfilter: nf_conntrack_sip: validate skb_dst() before accessing it Florian Westphal <fw(a)strlen.de> netfilter: nf_conntrack_sip: remove net variable shadowing Tristan Madani <tristan(a)talencesecurity.com> selinux: avoid sk_socket dereference in selinux_sctp_bind_connect() Casey Schaufler <casey(a)schaufler-ca.com> lsm: infrastructure management of the sock security Florian Westphal <fw(a)strlen.de> netfilter: nft_set_pipapo: don't leak bad clone into future transaction Florian Westphal <fw(a)strlen.de> netfilter: nft_set_pipapo: move cloning of match info to insert/removal path Florian Westphal <fw(a)strlen.de> netfilter: nft_set_pipapo: prepare pipapo_get helper for on-demand clone Florian Westphal <fw(a)strlen.de> netfilter: nft_set_pipapo: merge deactivate helper into caller Florian Westphal <fw(a)strlen.de> netfilter: nft_set_pipapo: prepare walk function for on-demand clone Florian Westphal <fw(a)strlen.de> netfilter: nft_set_pipapo: make pipapo_clone helper return NULL Florian Westphal <fw(a)strlen.de> netfilter: nft_set_pipapo: move prove_locking helper around Florian Westphal <fw(a)strlen.de> netfilter: nft_set_pipapo: use GFP_KERNEL for insertions Cássio Gabriel <cassiogabrielcontato(a)gmail.com> ASoC: mediatek: mt8183: Check runtime resume during probe Cássio Gabriel <cassiogabrielcontato(a)gmail.com> ASoC: mediatek: mt8192: Check runtime resume during probe Tang Bin <tangbin(a)cmss.chinamobile.com> ASoC: mediatek: mt8192-afe-pcm: Simplify probe() with local dev variable AngeloGioacchino Del Regno <angelogioacchino.delregno(a)collabora.com> ASoC: mediatek: Use common mtk_afe_pcm_platform with common probe cb AngeloGioacchino Del Regno <angelogioacchino.delregno(a)collabora.com> ASoC: mediatek: mt8192-afe-pcm: Simplify with dev_err_probe() AngeloGioacchino Del Regno <angelogioacchino.delregno(a)collabora.com> ASoC: mediatek: mt8192-afe-pcm: Convert to devm_pm_runtime_enable() AngeloGioacchino Del Regno <angelogioacchino.delregno(a)collabora.com> ASoC: mediatek: mt8195: Remove afe-dai component and rework codec link Abdun Nihaal <nihaal(a)cse.iitm.ac.in> fbdev: efifb: fix memory leak in efifb_probe() Thomas Zimmermann <tzimmermann(a)suse.de> fbdev/efifb: Replace references to global screen_info by local pointer Runyu Xiao <runyu.xiao(a)seu.edu.cn> octeontx2-vf: clear stale mailbox IRQ state before request_irq() Runyu Xiao <runyu.xiao(a)seu.edu.cn> octeontx2-pf: clear stale mailbox IRQ state before request_irq() Subbaraya Sundeep <sbhatta(a)marvell.com> octeontx2: Annotate mmio regions as __iomem Jason Wang <jasowang(a)redhat.com> VDUSE: avoid leaking information to userspace Eugenio Pérez <eperezma(a)redhat.com> vduse: take out allocations from vduse_dev_alloc_coherent Eugenio Pérez <eperezma(a)redhat.com> vduse: remove unused vaddr parameter of vduse_domain_free_coherent Sheng Zhao <sheng.zhao(a)bytedance.com> vduse: Use fixed 4KB bounce pages for non-4KB page size David Howells <dhowells(a)redhat.com> rxrpc: Fix socket notification race David Howells <dhowells(a)redhat.com> rxrpc: Fix notification vs call-release vs recvmsg David Howells <dhowells(a)redhat.com> rxrpc: Use irq-disabling spinlocks between app and I/O thread David Howells <dhowells(a)redhat.com> rxrpc: Don't need barrier for ->tx_bottom and ->acks_hard_ack Li Xiasong <lixiasong1(a)huawei.com> tipc: restrict socket queue dumps in enqueue tracepoints Jiacheng Yu <yujiacheng3(a)huawei.com> fbcon: Use correct type for vc_resize() return value Thomas Zimmermann <tzimmermann(a)suse.de> fbcon: Rename struct fbcon_ops to struct fbcon_par Li Daming <d4n.for.sec(a)gmail.com> rxrpc: serialize kernel accept preallocation with socket teardown David Howells <dhowells(a)redhat.com> rxrpc: Pull out certain app callback funcs into an ops table David Howells <dhowells(a)redhat.com> afs: Turn the afs_addr_list address array into an array of structs Kees Cook <keescook(a)chromium.org> afs: Annotate struct afs_addr_list with __counted_by Tapio Reijonen <tapio.reijonen(a)vaisala.com> serial: max310x: implement gpio_chip::get_direction() Hugo Villeneuve <hvilleneuve(a)dimonoff.com> serial: max310x: replace bare use of 'unsigned' with 'unsigned int' (checkpatch) Xu Rao <raoxu(a)uniontech.com> ALSA: hda: Fix cached processing coefficient verbs Zhang Heng <zhangheng(a)kylinos.cn> ALSA: hda: conexant: Remove mic bias threshold override Mingyu Wang <25181214217(a)stu.xidian.edu.cn> i2c: i801: fix hardware state machine corruption in error path Ricardo Robaina <rrobaina(a)redhat.com> audit: fix recursive locking deadlock in audit_dupe_exe() Ricardo Robaina <rrobaina(a)redhat.com> audit: use 'unsigned int' instead of 'unsigned' Jeff Layton <jlayton(a)kernel.org> audit: widen ino fields to u64 NeilBrown <neil(a)brown.name> VFS/audit: introduce kern_path_parent() for audit Haoxiang Li <haoxiang_li2024(a)163.com> i2c: davinci: Unregister cpufreq notifier on probe failure Sebastian Alba Vives <sebasjosue84(a)gmail.com> fpga: dfl-afu: validate DMA mapping length in afu_dma_map_region() Mikhail Gavrilov <mikhail.v.gavrilov(a)gmail.com> dma-buf/udmabuf: skip redundant cpu sync to fix cacheline EEXIST warning Jason Gunthorpe <jgg(a)ziepe.ca> udmabuf: Do not create malformed scatterlists Weinan Liu <wnliu(a)google.com> iommu/amd: Don't split flush for amd_iommu_domain_flush_all() Matt Bobrowski <mattbobrowski(a)google.com> bpf: Reject BPF_MAP_TYPE_INODE_STORAGE creation if BPF LSM is uninitialized Wentao Guan <guanwentao(a)uniontech.com> bpf: drop bpf_lsm_getselfattr from hook list Coia Prant <coiaprant(a)gmail.com> net: pcs: xpcs: fix SGMII state reading Yitang Yang <yi1tang.yang(a)gmail.com> io_uring/rw: fix missing ERESTARTSYS conversion in read paths Harry Wentland <harry.wentland(a)amd.com> drm/amd/display: Fix dcn32 DTB DTO update breaking live pixel rate sources Namjae Jeon <linkinjeon(a)kernel.org> exfat: validate cluster allocation bits of the allocation bitmap Eric Biggers <ebiggers(a)kernel.org> fscrypt: Avoid dynamic allocation in fscrypt_get_devices() Kyle Zeng <kylebot(a)openai.com> openvswitch: fix GSO userspace truncation underflow Namjae Jeon <linkinjeon(a)kernel.org> ksmbd: validate ACE size against SID sub-authorities Namjae Jeon <linkinjeon(a)kernel.org> ksmbd: bound DACL dedup walk to copied ACEs Wentao Guan <guanwentao(a)uniontech.com> ksmbd: restore DACL size on check_add_overflow() to avoid malformed ACL Haofeng Li <lihaofeng(a)kylinos.cn> ksmbd: validate num_subauth when copying ACE in set_ntacl_dacl Youssef Samir <youssef.abdulrahman(a)oss.qualcomm.com> net: qrtr: ns: Raise node count limit to 512 Weiming Shi <bestswngs(a)gmail.com> ipv6: ndisc: fix NULL deref in accept_untracked_na() Jacob Keller <jacob.e.keller(a)intel.com> i40e: remove read access to debugfs files Asad Kamal <asad.kamal(a)amd.com> drm/amdgpu: fix aperture mapping leak Ce Sun <cesun102(a)amd.com> drm/amdgpu: invoke pm_genpd_remove() before freeing genpd Boyuan Zhang <boyuan.zhang(a)amd.com> drm/amdgpu: fix division by zero with invalid uvd dimensions Luca Coelho <luciano.coelho(a)intel.com> drm/dp_mst: Handle torn-down topology gracefully in drm_dp_mst_topology_queue_probe() Boyuan Zhang <boyuan.zhang(a)amd.com> drm/amdgpu/vcn4: avoid rereading IB param length Boyuan Zhang <boyuan.zhang(a)amd.com> drm/amdgpu/vce: fix integer overflow in image size Alex Deucher <alexander.deucher(a)amd.com> drm/amdgpu/sdma4.4.2: replace BUG_ON() with WARN_ON() Alex Deucher <alexander.deucher(a)amd.com> drm/amdgpu/gfx9: replace BUG_ON() with WARN_ON() Alex Deucher <alexander.deucher(a)amd.com> drm/amdgpu/gfx9.4.3: replace BUG_ON() with WARN_ON() Alex Deucher <alexander.deucher(a)amd.com> drm/amdgpu/gfx8: drop unecessary BUG_ON() Alex Deucher <alexander.deucher(a)amd.com> drm/amdgpu/gfx11: replace BUG_ON() with WARN_ON() Alex Deucher <alexander.deucher(a)amd.com> drm/amdgpu/gfx10: replace BUG_ON() with WARN_ON() Yang Wang <kevinyang.wang(a)amd.com> drm/amd/pm: make pp_features read-only when scpm is enabled James Raphael Tiovalen <jamestiotio(a)gmail.com> vxlan: mdb: Fix source list corruption on a failed replace Daehyeon Ko <4ncienth(a)gmail.com> tipc: clear sock->sk on the failed-insert path in tipc_sk_create() Asim Viladi Oglu Manizada <manizada(a)pm.me> pppoe: reload header pointer after dev_hard_header() Doruk Tan Ozturk <doruk(a)0sec.ai> mctp: serial: handle zero-length frames to prevent rx buffer overflow Doruk Tan Ozturk <doruk(a)0sec.ai> mac802154: llsec: reject frames shorter than the authentication tag Ibrahim Hashimov <security(a)auditcode.ai> mac802154: hold an interface reference across the scan worker Michael Bommarito <michael.bommarito(a)gmail.com> ila: reload IPv6 header after pskb_may_pull in checksum adjust Sergey Temerkhanov <sergey.temerkhanov(a)intel.com> ice: use READ_ONCE() to access cached PHC time James Montgomery <james_montgomery(a)disroot.org> ksmbd: defer destroy_previous_session() until after NTLM authentication Raphael Zimmer <raphael.zimmer(a)tu-ilmenau.de> rbd: Reset positive result codes to zero in object map update path Masami Hiramatsu (Google) <mhiramat(a)kernel.org> selftests/ftrace: Reset triggers at top level before instance loop Jann Horn <jannh(a)google.com> proc: Fix broken error paths for namespace links Fan Wu <fanwu01(a)zju.edu.cn> net: hip04: fix RX buffer leak on build_skb failure David Lee <david.lee(a)trailofbits.com> net/x25: fix use-after-free in x25_kill_by_neigh() Bryam Vargas <hexlabsecurity(a)proton.me> net/iucv: fix use-after-free of a severed iucv_path Hidayath Khan <hidayath(a)linux.ibm.com> net/af_iucv: fix NULL deref in afiucv_hs_callback_syn() Doruk Tan Ozturk <doruk(a)0sec.ai> geneve: require CAP_NET_ADMIN in the device netns for changelink Sungmin Kang <726ksm(a)gmail.com> net: slip: serialize receive against buffer reallocation Doruk Tan Ozturk <doruk(a)0sec.ai> vxlan: require CAP_NET_ADMIN in the device netns for changelink Breno Leitao <leitao(a)debian.org> phonet: pep: fix use-after-free in pep_get_sb() Lu Baolu <baolu.lu(a)linux.intel.com> iommu/vt-d: Disallow SVA if page walk is not coherent Tengda Wu <wutengda(a)huaweicloud.com> ftrace: Add global mutex to serialize trace_parser access Eric Biggers <ebiggers(a)kernel.org> fscrypt: Add missing superblock check in find_or_insert_direct_key() Amir Goldstein <amir73il(a)gmail.com> fs: preserve ACL_DONT_CACHE state in forget_cached_acl() Christian Brauner <brauner(a)kernel.org> binfmt_elf_fdpic: only honour the first PT_INTERP Douya Le <ldy3087146292(a)gmail.com> libceph: remove debugfs files before client teardown Douya Le <ldy3087146292(a)gmail.com> libceph: reject zero bucket types in crush_decode Raphael Zimmer <raphael.zimmer(a)tu-ilmenau.de> libceph: Reject monmaps advertising zero monitors Shuangpeng Bai <shuangpeng.kernel(a)gmail.com> libceph: refresh auth->authorizer_buf{,_len} after authorizer update Zhao Zhang <zzhan461(a)ucr.edu> libceph: guard missing CRUSH type name lookup Raphael Zimmer <raphael.zimmer(a)tu-ilmenau.de> libceph: Fix multiplication overflow in decode_new_up_state_weight() Douya Le <ldy3087146292(a)gmail.com> libceph: bound get_version reply decode to front len Bryam Vargas <hexlabsecurity(a)proton.me> ceph: fix pre-auth out-of-bounds read on snaptrace in ceph_handle_caps() Max Kellermann <max.kellermann(a)ionos.com> ceph: add owner/capability checks for CEPH_IOC_SET_LAYOUT* Jun Yang <junvyyang(a)tencent.com> sctp: don't free the ASCONF's own transport in DEL-IP processing Michael Bommarito <michael.bommarito(a)gmail.com> mptcp: only set DATA_FIN when a mapping is present Chenguang Zhao <zhaochenguang(a)kylinos.cn> mptcp: decrement subflows counter on failed passive join Will Deacon <will(a)kernel.org> Revert "arm64: syscall: Ensure saved x0 is kept in-sync with tracer updates" Will Deacon <will(a)kernel.org> arm64: syscall: Ensure saved x0 is kept in-sync with tracer updates Masami Hiramatsu (Google) <mhiramat(a)kernel.org> tracing/probes: Prevent out-of-bounds write in __trace_probe_log_err() Masami Hiramatsu (Google) <mhiramat(a)kernel.org> tracing/probes: Fix potential underflow in LEN_OR_ZERO macro Masami Hiramatsu (Google) <mhiramat(a)kernel.org> tracing/probes: Avoid temporary buffer truncation in trace_probe_match_command_args() Masami Hiramatsu (Google) <mhiramat(a)kernel.org> tracing/eprobe: Fix exact system name matching in eprobe_dyn_event_match() deepakraog <gaikwad.dcg(a)gmail.com> tracing: Fix resource leak on mmiotrace trace_pipe close Steven Rostedt <rostedt(a)goodmis.org> tracing: Fix mmiotrace possible NULL dereferencing of hiter->dev Guangshuo Li <lgs201920130244(a)gmail.com> intel_th: fix MSC output device reference leak Alexander Usyskin <alexander.usyskin(a)intel.com> mei: bus: access mei_device under device_lock on cleanup Jiangshan Yi <yijiangshan(a)kylinos.cn> serial: 8250_mid: Fix NULL function pointer dereference on DNV/ICX-D/SNR platforms Hugo Villeneuve <hvilleneuve(a)dimonoff.com> serial: sc16is7xx: implement gpio get_direction() callback Ian Abbott <abbotti(a)mev.co.uk> comedi: comedi_parport: deal with premature interrupt Nathan Chancellor <nathan(a)kernel.org> x86/boot/compressed: Disable jump tables Xu Rao <raoxu(a)uniontech.com> cdrom: fix stack out-of-bounds read in CDROMVOLCTRL Haoran Jiang <jianghaoran(a)kylinos.cn> LoongArch: Fix oops during single-step debugging Zixing Liu <liushuyu(a)aosc.io> platform/loongarch: laptop: Explicitly reset bl_powered state when suspend Christian Brauner <brauner(a)kernel.org> binfmt_misc: set have_execfd only once the interpreter is opened Christian Brauner <brauner(a)kernel.org> exec: fix unsigned loop counter wrap in transfer_args_to_stack() Chengfeng Ye <nicoyip.dev(a)gmail.com> Bluetooth: RFCOMM: Fix session UAF in set_termios Chengfeng Ye <nicoyip.dev(a)gmail.com> Bluetooth: hci_sync: Protect UUID list traversal MinJea Kim <qndkdrnl(a)gmail.com> staging: rtl8723bs: fix inverted HT40 secondary channel offset Moksh Panicker <mokshpanicker.7(a)gmail.com> staging: rtl8723bs: fix OOB reads in rtw_get_wps_ie() Fan Wu <fanwu01(a)zju.edu.cn> wifi: brcmfmac: make release_scratchbuffers idempotent Devin Wittmayer <lucid_duck(a)justthetip.ca> wifi: mt76: mt7921: drop TXRX_NOTIFY on non-mmio buses Devin Wittmayer <lucid_duck(a)justthetip.ca> wifi: mt76: mt7615: drop TXRX_NOTIFY on non-mmio buses Huihui Huang <hhhuang(a)smu.edu.sg> wifi: wilc1000: validate assoc response length before subtracting header Doruk Tan Ozturk <doruk(a)0sec.ai> wifi: mwifiex: fix NULL dereference when the AP has HT-cap but no HT-oper Tristan Madani <tristan(a)talencesecurity.com> wifi: ath6kl: fix OOB access from firmware ADDBA window size Norbert Szetei <norbert(a)doyensec.com> ALSA: seq: close a re-opened queue timer in the destructor Johan Hovold <johan(a)kernel.org> media: vpif_capture: fix OF node reference imbalance Hans Verkuil <hverkuil+cisco(a)kernel.org> media: vivid: check for vb2_is_busy() when toggling caps Hans Verkuil <hverkuil+cisco(a)kernel.org> media: vivid: add vivid_update_reduced_fps() Guangshuo Li <lgs201920130244(a)gmail.com> media: vimc: fix reference leak on failed device registration Guangshuo Li <lgs201920130244(a)gmail.com> media: vidtv: fix reference leak on failed device registration Zile Xiong <xiongzile99(a)gmail.com> media: vb2: use ssize_t for vb2_read/vb2_write Pengpeng Hou <pengpeng(a)iscas.ac.cn> media: v4l2-ctrls: validate HEVC active reference counts Sergey Shtylyov <s.shtylyov(a)auroraos.dev> media: v4l2-ctrls-request: add NULL check in v4l2_ctrl_request_complete() Myeonghun Pak <mhun512(a)gmail.com> media: ti: vpe: unwind v4l2 device registration on probe error Hungyu Lin <dennylin0707(a)gmail.com> media: tegra-video: vi: fix invalid u32 return value in format lookup Valery Borovsky <vebohr(a)gmail.com> media: sun4i-csi: Return queued buffers on start_streaming() failure Myeonghun Pak <mhun512(a)gmail.com> media: stm32: dcmi: unregister notifier on probe failure Ma Ke <make24(a)iscas.ac.cn> media: saa7134: Fix a possible memory leak in saa7134_video_init1 Valery Borovsky <vebohr(a)gmail.com> media: rtl2832_sdr: Return queued buffers on start_streaming() failure Deepanshu Kartikey <kartikey406(a)gmail.com> media: rtl2832: fix use-after-free in rtl2832_remove() Myeonghun Pak <mhun512(a)gmail.com> media: radio-si476x: Unregister v4l2_device on probe failure Valery Borovsky <vebohr(a)gmail.com> media: pwc: Return queued buffers on start_streaming() failure Valery Borovsky <vebohr(a)gmail.com> media: pwc: Drain fill_buf on start_streaming() failure Krzysztof Kozlowski <krzysztof.kozlowski(a)oss.qualcomm.com> media: pci: dm1105: Free allocated workqueue Guoniu Zhou <guoniu.zhou(a)nxp.com> media: nxp: imx8-isi: Fix scale factor calculation for hardware rounding Guoniu Zhou <guoniu.zhou(a)nxp.com> media: nxp: imx8-isi: Fix potential out-of-bounds issues Xiaolei Wang <xiaolei.wang(a)windriver.com> media: nxp: imx8-isi: Fix missing v4l2_subdev_cleanup() in pipe init error path Xiaolei Wang <xiaolei.wang(a)windriver.com> media: nxp: imx8-isi: Clean up already-initialized pipes on probe failure Xiaolei Wang <xiaolei.wang(a)windriver.com> media: nxp: imx8-isi: Add missing v4l2_subdev_cleanup() in crossbar and pipe Valery Borovsky <vebohr(a)gmail.com> media: msi2500: Return queued buffers on start_streaming() failure Anand Moon <linux.amoon(a)gmail.com> media: meson: vdec: Fix memory leak in error path of vdec_open Guangshuo Li <lgs201920130244(a)gmail.com> media: marvell-cam: fix missing pci_disable_device() on remove Wang Jun <1742789905(a)qq.com> media: cx23885: add ioremap return check and cleanup Johan Hovold <johan(a)kernel.org> media: cx231xx: fix devres lifetime Pengpeng Hou <pengpeng(a)iscas.ac.cn> media: cedrus: skip invalid H.264 reference list entries Samuel Holland <samuel(a)sholland.org> media: cedrus: Fix missing cleanup in error path Myeonghun Pak <mhun512(a)gmail.com> media: cedrus: clean up media device on probe failure Myeonghun Pak <mhun512(a)gmail.com> media: cec: seco: unregister adapter on IR probe failure David Carlier <devnexen(a)gmail.com> media: aspeed: fix missing of_reserved_mem_device_release() on probe failure Valery Borovsky <vebohr(a)gmail.com> media: airspy: Return queued buffers on start_streaming() failure Linmao Li <lilinmao(a)kylinos.cn> drm/vc4: Prevent shader BO mappings from becoming writable Ian Forbes <ian.forbes(a)broadcom.com> drm/vmwgfx: Validate vmw_surface_metadata::array_size Zhu Lingshan <lingshan.zhu(a)amd.com> drm/amdgpu: fix bo->pin leaking in amdgpu_bo_create_reserved WenTao Liang <vulab(a)iscas.ac.cn> drm/amd/display: set new_stream to NULL after release Timur Kristóf <timur.kristof(a)gmail.com> drm/amd/pm/ci: Don't disable MCLK DPM on Bonaire 0x6658 (R7 260X) Mario Limonciello <mario.limonciello(a)amd.com> drm/amdgpu: Fix VFCT bus number matching with soft filter Joonas Lahtinen <joonas.lahtinen(a)linux.intel.com> drm/i915/gem: Fix NULL deref in I915_CONTEXT_PARAM_SSEU Joonas Lahtinen <joonas.lahtinen(a)linux.intel.com> drm/i915/gem: Do not leak siblings[] on proto context error Joonas Lahtinen <joonas.lahtinen(a)linux.intel.com> drm/i915: Return NULL on error in active_instance Alex Deucher <alexander.deucher(a)amd.com> drm/amdgpu/sdma5.0: replace BUG_ON() with WARN_ON() Alex Deucher <alexander.deucher(a)amd.com> drm/amdgpu/sdma5.2: replace BUG_ON() with WARN_ON() Alex Deucher <alexander.deucher(a)amd.com> drm/amdgpu/sdma6.0: replace BUG_ON() with WARN_ON() Bryam Vargas <hexlabsecurity(a)proton.me> drm/virtio: bound EDID block reads to the response buffer WenTao Liang <vulab(a)iscas.ac.cn> drm/amd/display: detect_link_and_local_sink: DP alt mode timeout path leaks prev_sink reference Thomas Zimmermann <tzimmermann(a)suse.de> drm/amd/display: Handle struct drm_plane_state.ignore_damage_clips David Francis <David.Francis(a)amd.com> drm/amdkfd: Check bounds in allocate_event_notification_slot Pavel Ondračka <pavel.ondracka(a)gmail.com> drm/radeon: fix r100_copy_blit for large BOs Wentao Liang <vulab(a)iscas.ac.cn> drm/nouveau/acr: fix missing nvkm_done() in error path of nvkm_acr_oneinit() Joonas Lahtinen <joonas.lahtinen(a)linux.intel.com> drm/i915/gem: Add missing nospec on parallel submit slot Junrui Luo <moonafterrain(a)outlook.com> drm/nouveau: fix reversed error cleanup order in ucopy functions Mario Limonciello <mario.limonciello(a)amd.com> drm/amdgpu: validate CP_GFX_SHADOW chunk size in CS pass1 Timur Kristóf <timur.kristof(a)gmail.com> drm/amdgpu: Fix amdgpu_bo_move() when old_mem and new_mem are both GTT Timur Kristóf <timur.kristof(a)gmail.com> drm/amdgpu/uvd: Place VCPU BO only in VRAM for UVD 4.x and older Timur Kristóf <timur.kristof(a)gmail.com> drm/amdgpu/uvd: Fix forcing MSG, FB BOs into VCPU segment when it isn't at 0 (v2) Ashutosh Desai <ashutoshdesai993(a)gmail.com> drm/dp/mst: fix OOB reads on 2-byte fields in sideband reply parsers Ashutosh Desai <ashutoshdesai993(a)gmail.com> drm/dp/mst: fix buffer overflows in sideband chunk accumulation Ashutosh Desai <ashutoshdesai993(a)gmail.com> drm/dp/mst: fix OOB reads in remote DPCD/I2C sideband reply parsers Vitor Soares <vitor.soares(a)toradex.com> drm/bridge: cdns-dsi: Replace deprecated UNIVERSAL_DEV_PM_OPS() Sergey Shtylyov <s.shtylyov(a)auroraos.dev> drm/rockchip: cdn-dp: add missing check in cdn_dp_config_video() Chengfeng Ye <nicoyip.dev(a)gmail.com> bpf, sockmap: Fix cork use-after-free in tcp_bpf_sendmsg() Marcin Szycik <marcin.szycik(a)linux.intel.com> ice: fix LAG recipe to profile association Li RongQing <lirongqing(a)baidu.com> net: ipv6: fix dif and sdif mismatch in raw6_icmp_error Alexei Lazar <alazar(a)nvidia.com> net/mlx5e: Reject unsupported CB Shaper TSA in ETS validation Alexei Lazar <alazar(a)nvidia.com> net/mlx5e: Report zero bandwidth for non-ETS traffic classes Yael Chemla <ychemla(a)nvidia.com> net/mlx5: E-Switch, fix zero num_dest in prio_tag egress vlan rule Aldo Ariel Panzardo <qwe.aldo(a)gmail.com> net: qrtr: restrict socket creation to the initial network namespace Chenguang Zhao <zhaochenguang(a)kylinos.cn> hinic: remove unused ethtool RSS user configuration buffers Eric Dumazet <edumazet(a)google.com> ppp: annotate data races in ppp_generic Qingfang Deng <dqfext(a)gmail.com> ppp: enable TX scatter-gather Qingfang Deng <dqfext(a)gmail.com> ppp: convert to percpu netstats Qingfang Deng <dqfext(a)gmail.com> ppp: use IFF_NO_QUEUE in virtual interfaces Eric Dumazet <edumazet(a)google.com> ipv4: icmp: fill flow parameters in icmp_route_lookup decoy lookup Suman Ghosh <sumang(a)marvell.com> octeontx2-vf: set TC flower flag on MCAM entry allocation vadik likholetov <vadikas(a)gmail.com> net: stmmac: enable the MAC on link up for all supported speeds Nazim Amirul <muhammad.nazim.amirul.nazle.asmade(a)altera.com> net: stmmac: reset residual action in L3L4 filters on delete Nazim Amirul <muhammad.nazim.amirul.nazle.asmade(a)altera.com> net: stmmac: fix l3l4 filter rejecting unsupported offload requests Cen Zhang (Microsoft) <blbllhy(a)gmail.com> tipc: fix u16 MTU truncation in media and bearer MTU validation Zhang Yi <yi.zhang(a)huawei.com> iomap: correct the range of a partial dirty clear Harshaka Narayana <harshaka.narayana(a)broadcom.com> vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets Qing Luo <luoqing(a)kylinos.cn> sctp: auth: verify auth requirement when auth_chunk is NULL Michael Walle <mwalle(a)kernel.org> net: dpaa: fix mode setting Eric Dumazet <edumazet(a)google.com> net: hsr: fix memory leak on slave unregistration by removing synced VLANs Nikolay Aleksandrov <razor(a)blackwall.org> net: bridge: vlan: fix vlan range dumps starting with pvid Michael Bommarito <michael.bommarito(a)gmail.com> amt: make the head writable before rewriting the L2 header Michael Bommarito <michael.bommarito(a)gmail.com> amt: re-read skb header pointers after every pull Shelley Yang <shelley.yang(a)infineon.com> wifi: brcmfmac: fix 802.1X-SHA256 call trace warning Lorenzo Bianconi <lorenzo(a)kernel.org> wifi: mt76: mt7996: fix possible NULL-pointer deref in mt7996_mcu_sta_bfer_eht() Lorenzo Bianconi <lorenzo(a)kernel.org> wifi: mt76: mt7996: check pointer returned by mt76_connac_get_he_phy_cap() Lorenzo Bianconi <lorenzo(a)kernel.org> wifi: mt76: connac: fix possible NULL-pointer deref in mt76_connac_mcu_uni_bss_he_tlv() Ruoyu Wang <ruoyuw560(a)gmail.com> wifi: mt76: mt7915: guard HE capability lookups Helen Koike <koike(a)igalia.com> tipc: fix infinite loop in __tipc_nl_compat_dumpit Xiang Mei (Microsoft) <xmei5(a)asu.edu> nexthop: initialize extack in nh_res_bucket_migrate() Xiang Mei (Microsoft) <xmei5(a)asu.edu> gtp: check skb_pull_data() return in gtp1u_send_echo_resp() Matthieu Baerts (NGI0) <matttbe(a)kernel.org> selftests: openvswitch: add config file Matthieu Baerts (NGI0) <matttbe(a)kernel.org> selftests: af_unix: add USER_NS config Kuniyuki Iwashima <kuniyu(a)amazon.com> selftest: af_unix: Add Kconfig file. Rishikesh Jethwani <rjethwani(a)purestorage.com> tls: device: push pending open record on splice EOF Cen Zhang (Microsoft) <blbllhy(a)gmail.com> sctp: validate stream count in sctp_process_strreset_inreq() Nikhil P. Rao <nikhil.rao(a)amd.com> pds_core: check for workqueue allocation failure Nikhil P. Rao <nikhil.rao(a)amd.com> pds_core: fix auxiliary device add/del races Nikhil P. Rao <nikhil.rao(a)amd.com> pds_core: order completion reads after the ownership check Nikhil P. Rao <nikhil.rao(a)amd.com> pds_core: yield the CPU while waiting for the adminq to drain HanQuan <eilaimemedsnaimel(a)gmail.com> sctp: fix auth_chunk_list capacity check in sctp_auth_ep_add_chunkid Prashanth Kumar KR <PrashanthKumar.K.R(a)amd.com> amd-xgbe: fix MAC_AUTO_SW handling in CL37 AN Nikhil P. Rao <nikhil.rao(a)amd.com> pds_core: reject component parameter in legacy firmware update Andrew Pope <andrew.pope(a)morsemicro.com> wifi: mac80211: recalculate TIM when a station enters power save Li RongQing <lirongqing(a)baidu.com> iommu/intel: Fix out-of-bounds memset in dmar_latency_disable() Pengpeng Hou <pengpeng(a)iscas.ac.cn> iommu/amd: Bound the early ACPI HID map HE WEI (ギカク) <skyexpoc(a)gmail.com> wifi: mwifiex: bound uAP association event IEs to the event buffer Ruoyu Wang <ruoyuw560(a)gmail.com> wan: wanxl: Only reset hardware after BAR mapping Ruoyu Wang <ruoyuw560(a)gmail.com> nfp: Check resource mutex allocation Xiang Mei <xmei5(a)asu.edu> wifi: mac80211: tear down new links on vif update error path Guanghui Feng <guanghuifeng(a)linux.alibaba.com> iommu/amd: Wait for completion instead of returning early in iommu_completion_wait() Guangshuo Li <lgs201920130244(a)gmail.com> dpaa2-eth: put MAC endpoint device on disconnect Guangshuo Li <lgs201920130244(a)gmail.com> dpaa2-switch: put MAC endpoint device on disconnect Aldo Ariel Panzardo <qwe.aldo(a)gmail.com> rds: drop incoming messages that cross network namespace boundaries Zhaolong Zhang <zhangzl68(a)chinatelecom.cn> bonding: fix devconf_all NULL dereference when IPv6 is disabled David Lee <david.lee(a)trailofbits.com> net/packet: avoid fanout hook re-registration after unregister Pengpeng Hou <pengpeng(a)iscas.ac.cn> Bluetooth: btusb: validate Realtek vendor event length Pengpeng Hou <pengpeng(a)iscas.ac.cn> hwmon: occ: validate poll response sensor blocks Yichong Chen <chenyichong(a)uniontech.com> smb: client: validate DFS referral PathConsumed Eugene Shalygin <eugene.shalygin(a)gmail.com> hwmon: (asus-ec-sensors) add missed handle for ENOMEM Eugene Shalygin <eugene.shalygin(a)gmail.com> hwmon: (asus-ec-sensors) fix EC read intervals Eugene Shalygin <eugene.shalygin(a)gmail.com> hwmon: (asus-ec-sensors) fix looping over banks while reading from EC Diego Fernando Mancera Gomez <diegomancera.dev(a)gmail.com> usb: atm: ueagle-atm: reject descriptors that confuse probe and disconnect Shahar Tzarfati <shahar.tzarfati(a)intel.com> wifi: iwlwifi: mvm: fix read in wake packet notification handler Pagadala Yesu Anjaneyulu <pagadala.yesu.anjaneyulu(a)intel.com> wifi: iwlwifi: mvm: validate SAR GEO response payload size Richard Fitzgerald <rf(a)opensource.cirrus.com> ASoC: cs35l56: Use complete_all() to signal init_completion Richard Fitzgerald <rf(a)opensource.cirrus.com> ASoC: cs35l56: Fix potential probe() deadlock Richard Fitzgerald <rf(a)opensource.cirrus.com> ASoC: cs35l56: Don't use devres to unregister component Shengjiu Wang <shengjiu.wang(a)nxp.com> ASoC: bt-sco: fix duplicate DAPM widget names for wideband DAI Pengpeng Hou <pengpeng(a)iscas.ac.cn> ASoC: tas2781: bound firmware description string parsing Guanghui Yang <3497809730(a)qq.com> btrfs: free mapping node on duplicate reloc root insert You-Kai Zheng <ykzheng(a)synology.com> btrfs: declare btrfs_ioctl_search_args_v2::buf as __u8 Tristan Madani <tristan(a)talencesecurity.com> wifi: carl9170: fix buffer overflow in rx_stream failover path Tristan Madani <tristan(a)talencesecurity.com> wifi: carl9170: fix OOB read from off-by-two in TX status handler Tristan Madani <tristan(a)talencesecurity.com> wifi: carl9170: bound memcpy length in cmd callback to prevent OOB read Tristan Madani <tristan(a)talencesecurity.com> wifi: ath6kl: fix OOB read from firmware IE lengths in connect event Tristan Madani <tristan(a)talencesecurity.com> wifi: ath6kl: fix OOB read from firmware num_msg in TX complete handler Ruoyu Wang <ruoyuw560(a)gmail.com> firewire: net: Fix fragmented datagram reassembly Manivannan Sadhasivam <manivannan.sadhasivam(a)oss.qualcomm.com> wifi: ath12k: Flush the posted write after writing to PCIE_SOC_GLOBAL_RESET Manivannan Sadhasivam <manivannan.sadhasivam(a)oss.qualcomm.com> wifi: ath11k: Flush the posted write after writing to PCIE_SOC_GLOBAL_RESET Dmitry Morgun <d.morgun(a)ispras.ru> wifi: ath11k: fix potential buffer underflow in ath11k_hal_rx_msdu_list_get() Tzung-Bi Shih <tzungbi(a)kernel.org> watchdog: pretimeout: Fix UAF in watchdog_unregister_governor() Guenter Roeck <linux(a)roeck-us.net> hwmon: (nzxt-smart2) Stop device IO before calling hid_hw_stop Guenter Roeck <linux(a)roeck-us.net> hwmon: (corsair-cpro) Stop device IO before calling hid_hw_stop Edward Adam Davis <eadavis(a)qq.com> hwmon: (corsair-psu) Stop device IO before calling hid_hw_stop Gaole Zhang <gaole.zhang(a)oss.qualcomm.com> wifi: ath11k: fix NULL pointer dereference in ath11k_hal_srng_access_begin Cheng Yongkang <teel4res(a)gmail.com> wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request Xincheng Zhang <zhangxincheng(a)ultrarisc.com> usb: xhci-pci: Limit VIA VL805 DMA addressing to 36 bits Xie Bo <xb(a)ultrarisc.com> RISC-V: KVM: Serialize virtual interrupt pending state updates Sasha Levin <sashal(a)kernel.org> Revert "drm/amd/display: Add missing kdoc for ALLM parameters" Doruk Tan Ozturk <doruk(a)0sec.ai> crypto: rsa-pkcs1pad: Don't WARN on an empty digest Chukun Pan <amadeus(a)jmu.edu.cn> USB: serial: option: add TDTECH MT5710-CN Johan Hovold <johan(a)kernel.org> USB: serial: keyspan_pda: fix data loss on receive throttling Sunho Park <shpark061104(a)gmail.com> USB: serial: io_edgeport: cap received transmit credits Tim Pambor <timpambor(a)gmail.com> USB: serial: ftdi_sio: add support for E+H FXA291 Muhammad Bilal <meatuni001(a)gmail.com> usb: gadget: uvc: clamp SEND_RESPONSE length to the response buffer Fan Wu <fanwu01(a)zju.edu.cn> usb: gadget: udc: bdc: free IRQ and drain func_wake_notify before teardown Sonali Pradhan <sonalipradhan(a)google.com> usb: gadget: f_ncm: validate datagram bounds in ncm_unwrap_ntb() Johan Hovold <johan(a)kernel.org> USB: gadget: fsl-udc: fix device name leak on probe failure Johan Hovold <johan(a)kernel.org> USB: gadget: snps-udc: fix device name leak on probe failure Melbin K Mathew <mlbnkm1(a)gmail.com> usb: gadget: printer: fix infinite loop in printer_read() Fan Wu <fanwu01(a)zju.edu.cn> usb: gadget: f_midi: cancel pending IN work before freeing the midi object Jinchao Wang <wangjinchao600(a)gmail.com> usb: gadget: dummy_hcd: prevent fifo_req reuse during giveback Xu Yang <xu.yang_2(a)nxp.com> usb: chipidea: fix usage_count leak when autosuspend_delay is negative Huang Wei <huangwei(a)kylinos.cn> USB: storage: add NO_ATA_1X quirk for Longmai USB Key Huihui Huang <hhhuang(a)smu.edu.sg> wifi: at76c50x-usb: avoid length underflow in at76_guess_freq() Weiming Shi <bestswngs(a)gmail.com> mpls: fix NULL deref in mpls_valid_fib_dump_req() on CONFIG_INET=n Xin Long <lucien.xin(a)gmail.com> sctp: fix auth_hmacs array size in struct sctp_cookie Jamal Hadi Salim <jhs(a)mojatatu.com> net/sched: act_tunnel_key: Defer dst_release to RCU callback Emre Cecanpunar <emreleno(a)gmail.com> drm/i915/selftests: Fix GT PM sort comparators Xiang Mei (Microsoft) <xmei5(a)asu.edu> ksmbd: validate compound request size before reading StructureSize2 Qihang <q.h.hack.winter(a)gmail.com> ksmbd: pin conn during async oplock break notification Shuhao Fu <sfual(a)cse.ust.hk> can: j1939: fix lockless local-destination check Michal Luczaj <mhal(a)rbox.co> bpf, sockmap: Reject unhashed UDP sockets on sockmap update Shrikanth Hegde <sshegde(a)linux.ibm.com> powerpc/vtime: Initialize starttime at boot for native accounting Frederic Weisbecker <frederic(a)kernel.org> powerpc/time: Prepare to stop elapsing in dynticks-idle Alexander Gordeev <agordeev(a)linux.ibm.com> sched/vtime: Get rid of generic vtime_task_switch() implementation Pengpeng Hou <pengpeng(a)iscas.ac.cn> drm/i915/gt: use correct selftest config symbol Huiwen He <hehuiwen(a)kylinos.cn> smb/client: handle overlapping allocated ranges in fallocate Ruoyu Wang <ruoyuw560(a)gmail.com> Bluetooth: hci_qca: Clear memdump state on invalid dump size Pauli Virtanen <pav(a)iki.fi> Bluetooth: mgmt: hold reference for hci_conn in mgmt_pending_cmds Pauli Virtanen <pav(a)iki.fi> Bluetooth: mgmt: fix locking in unpair_device/disconnect_sync Xiang Mei <xmei5(a)asu.edu> Bluetooth: qca: fix NVM tag length underflow in TLV parser Takashi Iwai <tiwai(a)suse.de> ALSA: usb-audio: Skip DSD quirk for Musical Fidelity M6s DAC Rosen Penev <rosenp(a)gmail.com> ata: sata_dwc_460ex: fix infinite loop in NCQ tag completion bit-scanning Rosen Penev <rosenp(a)gmail.com> ata: sata_dwc_460ex: fix clear_interrupt_bit() clearing all pending interrupts Rosen Penev <rosenp(a)gmail.com> ata: sata_dwc_460ex: use platform_get_irq() Rosen Penev <rosenp(a)gmail.com> ata: sata_dwc_460ex: enable SATA interrupts only after IRQ handler is registered Bryam Vargas <hexlabsecurity(a)proton.me> net/iucv: take a reference on the socket found in afiucv_hs_rcv() Weiming Shi <bestswngs(a)gmail.com> ipv4: fib: free fib_alias with kfree_rcu() on insert error path Norbert Szetei <norbert(a)doyensec.com> ppp: defer channel free to an RCU grace period to fix pppol2tp RX UAF Pushpendra Singh <pushpendra.singh(a)oss.qualcomm.com> firmware: arm_scmi: Rate-limit queue-full warnings in IRQ context Uday Khare <udaykhare77(a)gmail.com> ASoC: tas2562: fix deprecated 'shut-down' GPIO always cleared after lookup Charles Keepax <ckeepax(a)opensource.cirrus.com> ASoC: cs42l43: Correct report for forced microphone jack Vijendar Mukunda <Vijendar.Mukunda(a)amd.com> ASoC: amd: ps: fix wrong ACP version string in pci_request_regions() Christian Hewitt <christianshewitt(a)gmail.com> ASoC: meson: aiu: fifo-spdif: soft reset the S/PDIF datapath on start/stop HE WEI (ギカク) <skyexpoc(a)gmail.com> wifi: cfg80211: bound element ID read when checking non-inheritance Runyu Xiao <runyu.xiao(a)seu.edu.cn> wifi: brcmfmac: initialize SDIO data work before cleanup Cen Zhang <zzzccc427(a)gmail.com> wifi: mac80211: free AP_VLAN bc_buf SKBs outside IRQ lock Zhao Li <enderaoelyther(a)gmail.com> wifi: cfg80211: reject unsupported PMSR FTM location requests Zhao Li <enderaoelyther(a)gmail.com> wifi: cfg80211: validate PMSR FTM preamble range Zhao Li <enderaoelyther(a)gmail.com> wifi: cfg80211: validate PMSR measurement type data Zhao Li <enderaoelyther(a)gmail.com> wifi: nl80211: validate nested MBSSID IE blobs Zhao Li <enderaoelyther(a)gmail.com> wifi: nl80211: free RNR data on MBSSID mismatch Xiang Mei <xmei5(a)asu.edu> wifi: p54: validate RX frame length in p54_rx_eeprom_readback() Dawei Feng <dawei.feng(a)seu.edu.cn> wifi: libertas: fix memory leak in helper_firmware_cb() Bryam Vargas <hexlabsecurity(a)proton.me> wifi: mac80211_hwsim: clamp virtio RX length before skb_put Abdun Nihaal <nihaal(a)cse.iitm.ac.in> wifi: ipw2100: fix potential memory leak in ipw2100_pci_init_one() Cen Zhang <zzzccc427(a)gmail.com> wifi: cfg80211: cancel sched scan results work on unregister Xiang Mei (Microsoft) <xmei5(a)asu.edu> xfrm: policy: preallocate inexact bins before xfrm_hash_rebuild reinsert Xiang Mei (Microsoft) <xmei5(a)asu.edu> xfrm6: clear dst.dev on error to avoid double netdev_put in xfrm6_fill_dst() Aleksandrova Alyona <aga(a)itb.spb.ru> RDMA/irdma: Prevent overflows in memory contiguity checks Malaya Kumar Rout <malayarout91(a)gmail.com> selftests/alsa: Fix memory leak in find_controls error path Xue Lei <Xue.Lei(a)windriver.com> mtd: fix double free and WARN_ON in add_mtd_device() error paths Ruoyu Wang <ruoyuw560(a)gmail.com> RDMA/siw: publish QP after initialization Guoqing Jiang <guoqing.jiang(a)linux.dev> RDMA/siw: Only check attrs->cap.max_send_wr in siw_create_qp Danila Chernetsov <listdansp(a)mail.ru> RDMA/hns: Fix potential integer overflow in mhop hem cleanup Ruoyu Wang <ruoyuw560(a)gmail.com> RDMA/erdma: initialize ret for empty receive WR lists Jacob Moroni <jmoroni(a)google.com> RDMA/irdma: Prevent rereg_mr for non-mem regions Jacob Moroni <jmoroni(a)google.com> RDMA/umem: Add helpers for umem dmabuf revoke lock Jacob Moroni <jmoroni(a)google.com> RDMA/umem: Add pinned revocable dmabuf import interface Jacob Moroni <jmoroni(a)google.com> RDMA/umem: Move umem dmabuf revoke logic into helper function Jacob Moroni <jmoroni(a)google.com> RDMA/umem: Add ib_umem_dmabuf_get_pinned_and_lock helper Yishai Hadas <yishaih(a)nvidia.com> RDMA/umem: Introduce an option to revoke DMABUF umem Yishai Hadas <yishaih(a)nvidia.com> RDMA/umem: Add support for creating pinned DMABUF umem with a given dma device Or Gerlitz <ogerlitz(a)ddn.com> RDMA/cma: Fix hardware address comparison length in netevent callback Unnathi Chalicheemala <unnathi.chalicheemala(a)oss.qualcomm.com> firmware: arm_ffa: Fix NULL dereference in ffa_partition_info_get() Filipe Manana <fdmanana(a)suse.com> btrfs: fix root leak if its reloc root is unexpected in merge_reloc_roots() Xiang Mei <xmei5(a)asu.edu> btrfs: reject free space cache with more entries than pages Pengpeng Hou <pengpeng(a)iscas.ac.cn> mtd: nand: mtk-ecc: stop on ECC idle timeouts Pengpeng Hou <pengpeng(a)iscas.ac.cn> mtd: mtdswap: remove debugfs stats file on teardown Michael Bommarito <michael.bommarito(a)gmail.com> IB/mad: Drop unmatched RMPP responses before reassembly Sumit Gupta <sumitg(a)nvidia.com> arm64: tegra: Fix CPU compatible string to cortex-a78ae on Tegra234 Dmitry Torokhov <dmitry.torokhov(a)gmail.com> Input: ims-pcu - fix logic error in packet reset Seungjin Bae <eeodqql09(a)gmail.com> Input: ims-pcu - fix heap-buffer-overflow in ims_pcu_process_data() Chuck Lever <chuck.lever(a)oracle.com> xprtrdma: Clear receive-side ownership pointers on release Mikko Perttunen <mperttunen(a)nvidia.com> gpu: host1x: Fix use-after-free in host1x_bo_clear_cached_mappings Jhonraushan <raushan.jhon(a)gmail.com> accel/ivpu: Reject firmware log with size smaller than header Claudiu Beznea <claudiu.beznea.uj(a)bp.renesas.com> dmaengine: sh: rz-dmac: Move interrupt request after everything is set up Oliver Hartkopp <socketcan(a)hartkopp.net> can: isotp: serialize TX state transitions under so->rx_lock Oliver Hartkopp <socketcan(a)hartkopp.net> can: isotp: fix use-after-free race with concurrent NETDEV_UNREGISTER Oliver Hartkopp <socketcan(a)hartkopp.net> can: bcm: track a single source interface for ANYDEV timeout/throttle ops Oliver Hartkopp <socketcan(a)hartkopp.net> can: bcm: fix data race on rx_stamp/rx_ifindex in bcm_rx_handler() Oliver Hartkopp <socketcan(a)hartkopp.net> can: bcm: fix stale rx/tx ops after device removal Oliver Hartkopp <socketcan(a)hartkopp.net> can: bcm: add missing device refcount for CAN filter removal Oliver Hartkopp <socketcan(a)hartkopp.net> can: bcm: validate frame length in bcm_rx_setup() for RTR replies Oliver Hartkopp <socketcan(a)hartkopp.net> can: bcm: extend bcm_tx_lock usage for data and timer updates Oliver Hartkopp <socketcan(a)hartkopp.net> can: bcm: fix CAN frame rx/tx statistics Oliver Hartkopp <socketcan(a)hartkopp.net> can: bcm: add locking when updating filter and timer values Phil Rosenthal <phil(a)phil.gs> KVM: x86/mmu: Fix use-after-free on vendor module reload Hyunwoo Kim <imv4bel(a)gmail.com> KVM: nVMX: Hide shadow VMCS right after VMCLEAR Sean Christopherson <seanjc(a)google.com> KVM: x86: Check for invalid/obsolete root *after* making MMU pages available Heiko Carstens <hca(a)linux.ibm.com> seqlock: Allow UBSAN_ALIGNMENT to fail optimizing Peter Zijlstra <peterz(a)infradead.org> seqlock: Allow KASAN to fail optimizing Peter Zijlstra <peterz(a)infradead.org> seqlock: Cure some more scoped_seqlock() optimization fails Daniel Gibson <daniel(a)gibson.sh> platform/x86/amd/pmc: Avoid logging "(null)" for DMI values Daniel Gibson <daniel(a)gibson.sh> platform/x86/amd/pmc: Don't log during intermediate wakeups Ryosuke Yasuoka <ryasuoka(a)redhat.com> drm/virtio: fix deadlock in display_info_cb by removing hotplug from dequeue worker Daniel Borkmann <daniel(a)iogearbox.net> selftests/bpf: Add tests for ld_{abs,ind} failure path in subprogs Daniel Borkmann <daniel(a)iogearbox.net> bpf: Fix ld_{abs,ind} failure path analysis in subprogs Guixiong Wei <weiguixiong(a)bytedance.com> platform/x86/intel-uncore-freq: Fix current_freq_khz after CPU hotplug ------------- Diffstat: Makefile | 4 +- arch/arm64/boot/dts/nvidia/tegra234.dtsi | 24 +- arch/arm64/kvm/arm.c | 2 +- arch/loongarch/kernel/kgdb.c | 3 +- arch/mips/kvm/mips.c | 2 +- arch/powerpc/include/asm/cputime.h | 13 - arch/powerpc/kernel/time.c | 65 +++ arch/powerpc/kvm/powerpc.c | 2 +- arch/riscv/include/asm/kvm_host.h | 10 +- arch/riscv/kvm/aia.c | 35 +- arch/riscv/kvm/vcpu.c | 66 ++- arch/riscv/kvm/vcpu_onereg.c | 8 +- arch/s390/kvm/kvm-s390.c | 2 +- arch/x86/boot/compressed/Makefile | 1 + arch/x86/kernel/cpu/resctrl/rdtgroup.c | 12 +- arch/x86/kvm/lapic.c | 2 +- arch/x86/kvm/mmu/mmu.c | 11 +- arch/x86/kvm/mmu/paging_tmpl.h | 10 +- arch/x86/kvm/svm/svm.c | 7 +- arch/x86/kvm/vmx/nested.c | 11 +- arch/x86/kvm/x86.c | 4 +- crypto/rsa-pkcs1pad.c | 2 +- drivers/accel/ivpu/ivpu_fw_log.c | 4 + drivers/ata/libata-core.c | 18 + drivers/ata/libata-scsi.c | 2 - drivers/ata/libata.h | 9 + drivers/ata/sata_dwc_460ex.c | 38 +- drivers/block/rbd.c | 7 +- drivers/bluetooth/btqca.c | 2 +- drivers/bluetooth/btusb.c | 4 +- drivers/bluetooth/hci_qca.c | 4 + drivers/cdrom/cdrom.c | 1 + drivers/char/ipmi/ipmi_msghandler.c | 8 + drivers/comedi/drivers/comedi_parport.c | 13 +- drivers/dma-buf/udmabuf.c | 21 +- drivers/dma/dw-edma/dw-edma-pcie.c | 63 +-- drivers/dma/sh/rz-dmac.c | 96 ++-- drivers/firewire/net.c | 37 +- drivers/firmware/arm_ffa/driver.c | 2 +- drivers/firmware/arm_scmi/notify.c | 6 +- drivers/fpga/dfl-afu-main.c | 3 + drivers/gpio/gpio-mt7621.c | 2 + drivers/gpio/gpio-mvebu.c | 4 +- drivers/gpio/gpio-pxa.c | 4 +- drivers/gpio/gpio-tegra.c | 18 +- drivers/gpio/gpio-vf610.c | 4 +- drivers/gpu/drm/amd/amdgpu/amdgpu_acp.c | 2 + drivers/gpu/drm/amd/amdgpu/amdgpu_bios.c | 45 +- drivers/gpu/drm/amd/amdgpu/amdgpu_cs.c | 6 +- drivers/gpu/drm/amd/amdgpu/amdgpu_device.c | 2 - drivers/gpu/drm/amd/amdgpu/amdgpu_object.c | 13 +- drivers/gpu/drm/amd/amdgpu/amdgpu_ttm.c | 54 ++- drivers/gpu/drm/amd/amdgpu/amdgpu_uvd.c | 58 ++- drivers/gpu/drm/amd/amdgpu/amdgpu_vce.c | 17 +- drivers/gpu/drm/amd/amdgpu/gfx_v10_0.c | 13 +- drivers/gpu/drm/amd/amdgpu/gfx_v11_0.c | 13 +- drivers/gpu/drm/amd/amdgpu/gfx_v8_0.c | 3 - drivers/gpu/drm/amd/amdgpu/gfx_v9_0.c | 10 +- drivers/gpu/drm/amd/amdgpu/gfx_v9_4_3.c | 11 +- drivers/gpu/drm/amd/amdgpu/sdma_v4_4_2.c | 4 +- drivers/gpu/drm/amd/amdgpu/sdma_v5_0.c | 4 +- drivers/gpu/drm/amd/amdgpu/sdma_v5_2.c | 4 +- drivers/gpu/drm/amd/amdgpu/sdma_v6_0.c | 4 +- drivers/gpu/drm/amd/amdgpu/vcn_v4_0.c | 15 +- drivers/gpu/drm/amd/amdkfd/kfd_events.c | 3 + drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm.c | 11 +- .../amd/display/dc/clk_mgr/dcn32/dcn32_clk_mgr.c | 9 +- .../gpu/drm/amd/display/dc/link/link_detection.c | 5 +- .../amd/display/modules/info_packet/info_packet.c | 2 - drivers/gpu/drm/amd/pm/amdgpu_pm.c | 5 + drivers/gpu/drm/amd/pm/powerplay/hwmgr/hwmgr.c | 7 +- drivers/gpu/drm/bridge/cadence/cdns-dsi-core.c | 11 +- drivers/gpu/drm/display/drm_dp_mst_topology.c | 36 +- drivers/gpu/drm/i915/gem/i915_gem_context.c | 25 +- drivers/gpu/drm/i915/gt/intel_engine_user.c | 2 +- drivers/gpu/drm/i915/gt/selftest_gt_pm.c | 8 +- drivers/gpu/drm/i915/i915_active.c | 7 +- drivers/gpu/drm/nouveau/nouveau_exec.c | 4 +- drivers/gpu/drm/nouveau/nouveau_uvmm.c | 4 +- drivers/gpu/drm/nouveau/nvkm/subdev/acr/base.c | 1 + drivers/gpu/drm/radeon/r100.c | 13 +- drivers/gpu/drm/rockchip/cdn-dp-reg.c | 2 + drivers/gpu/drm/vc4/vc4_bo.c | 10 +- drivers/gpu/drm/virtio/virtgpu_kms.c | 5 +- drivers/gpu/drm/virtio/virtgpu_vq.c | 6 +- drivers/gpu/drm/vmwgfx/vmwgfx_surface.c | 22 +- drivers/gpu/host1x/bus.c | 4 +- drivers/hwmon/asus-ec-sensors.c | 18 +- drivers/hwmon/corsair-cpro.c | 1 + drivers/hwmon/corsair-psu.c | 1 + drivers/hwmon/nzxt-smart2.c | 2 +- drivers/hwmon/occ/common.c | 38 +- drivers/hwtracing/intel_th/core.c | 10 - drivers/hwtracing/intel_th/msu.c | 2 + drivers/i2c/busses/i2c-davinci.c | 4 +- drivers/i2c/busses/i2c-i801.c | 2 +- drivers/i2c/busses/i2c-imx.c | 126 +++-- drivers/infiniband/core/cma.c | 2 +- drivers/infiniband/core/mad.c | 30 ++ drivers/infiniband/core/umem_dmabuf.c | 176 ++++++- drivers/infiniband/hw/erdma/erdma_qp.c | 2 +- drivers/infiniband/hw/hns/hns_roce_hem.c | 2 +- drivers/infiniband/hw/irdma/verbs.c | 7 +- drivers/infiniband/sw/siw/siw_verbs.c | 62 ++- drivers/input/misc/ims-pcu.c | 37 +- drivers/iommu/amd/init.c | 6 + drivers/iommu/amd/iommu.c | 25 +- drivers/iommu/intel/perf.c | 2 +- drivers/iommu/intel/svm.c | 2 +- drivers/md/dm-verity-target.c | 14 +- drivers/md/dm-verity.h | 2 +- drivers/media/cec/platform/seco/seco-cec.c | 6 +- drivers/media/common/videobuf2/videobuf2-core.c | 12 +- drivers/media/dvb-frontends/rtl2832.c | 4 +- drivers/media/dvb-frontends/rtl2832_sdr.c | 19 +- drivers/media/pci/cx23885/cx23885-core.c | 14 +- drivers/media/pci/dm1105/dm1105.c | 1 + drivers/media/pci/saa7134/saa7134-video.c | 25 +- drivers/media/platform/aspeed/aspeed-video.c | 1 + drivers/media/platform/marvell/cafe-driver.c | 1 + .../media/platform/nxp/imx8-isi/imx8-isi-core.c | 2 + .../media/platform/nxp/imx8-isi/imx8-isi-core.h | 16 + .../platform/nxp/imx8-isi/imx8-isi-crossbar.c | 1 + drivers/media/platform/nxp/imx8-isi/imx8-isi-hw.c | 9 +- drivers/media/platform/nxp/imx8-isi/imx8-isi-m2m.c | 11 +- .../media/platform/nxp/imx8-isi/imx8-isi-pipe.c | 20 +- drivers/media/platform/st/stm32/stm32-dcmi.c | 1 + drivers/media/platform/sunxi/sun4i-csi/sun4i_dma.c | 6 +- drivers/media/platform/ti/davinci/vpif_capture.c | 2 +- drivers/media/platform/ti/vpe/vpe.c | 3 +- drivers/media/radio/radio-si476x.c | 1 + drivers/media/test-drivers/vidtv/vidtv_bridge.c | 4 +- drivers/media/test-drivers/vimc/vimc-core.c | 1 + drivers/media/test-drivers/vivid/vivid-ctrls.c | 15 +- drivers/media/test-drivers/vivid/vivid-vid-cap.c | 38 +- drivers/media/test-drivers/vivid/vivid-vid-cap.h | 1 + drivers/media/test-drivers/vivid/vivid-vid-out.c | 6 + drivers/media/usb/airspy/airspy.c | 8 +- drivers/media/usb/cx231xx/cx231xx-cards.c | 16 +- drivers/media/usb/msi2500/msi2500.c | 32 +- drivers/media/usb/pwc/pwc-if.c | 13 +- drivers/media/v4l2-core/v4l2-ctrls-core.c | 13 + drivers/media/v4l2-core/v4l2-ctrls-request.c | 14 +- drivers/misc/mei/bus.c | 16 +- drivers/mmc/host/vub300.c | 36 +- drivers/mtd/maps/vmu-flash.c | 8 +- drivers/mtd/mtdcore.c | 23 +- drivers/mtd/mtdswap.c | 5 +- drivers/mtd/nand/ecc-mtk.c | 16 +- drivers/mtd/nand/raw/nand_base.c | 43 +- drivers/net/amt.c | 87 +++- drivers/net/bonding/bond_main.c | 3 +- drivers/net/ethernet/amd/pds_core/adminq.c | 12 +- drivers/net/ethernet/amd/pds_core/auxbus.c | 17 +- drivers/net/ethernet/amd/pds_core/core.c | 1 + drivers/net/ethernet/amd/pds_core/devlink.c | 6 + drivers/net/ethernet/amd/pds_core/main.c | 9 +- drivers/net/ethernet/amd/xgbe/xgbe-mdio.c | 11 +- drivers/net/ethernet/cadence/macb_main.c | 22 +- drivers/net/ethernet/freescale/dpaa2/dpaa2-eth.c | 1 + .../net/ethernet/freescale/dpaa2/dpaa2-switch.c | 1 + drivers/net/ethernet/freescale/fman/fman_dtsec.c | 17 +- drivers/net/ethernet/hisilicon/hip04_eth.c | 11 +- drivers/net/ethernet/huawei/hinic/hinic_dev.h | 2 - drivers/net/ethernet/huawei/hinic/hinic_ethtool.c | 21 - drivers/net/ethernet/intel/i40e/i40e_debugfs.c | 121 +---- drivers/net/ethernet/intel/ice/ice_lag.c | 2 +- drivers/net/ethernet/intel/ice/ice_ptp.c | 2 +- drivers/net/ethernet/marvell/octeontx2/af/rvu.c | 14 +- drivers/net/ethernet/marvell/octeontx2/af/rvu.h | 1 + .../net/ethernet/marvell/octeontx2/af/rvu_cn10k.c | 9 + .../ethernet/marvell/octeontx2/nic/otx2_flows.c | 1 + .../net/ethernet/marvell/octeontx2/nic/otx2_pf.c | 28 +- .../net/ethernet/marvell/octeontx2/nic/otx2_vf.c | 13 +- drivers/net/ethernet/mellanox/mlx5/core/en_dcbnl.c | 15 + .../ethernet/mellanox/mlx5/core/esw/acl/helper.c | 2 +- drivers/net/ethernet/microsoft/mana/mana_en.c | 13 + .../ethernet/netronome/nfp/nfpcore/nfp_resource.c | 3 + drivers/net/ethernet/stmicro/stmmac/stmmac_main.c | 92 ++-- drivers/net/ethernet/stmicro/stmmac/stmmac_tc.c | 35 ++ drivers/net/geneve.c | 3 + drivers/net/gtp.c | 5 +- drivers/net/ipa/ipa_smp2p.c | 30 +- drivers/net/mctp/mctp-serial.c | 2 +- drivers/net/pcs/pcs-xpcs.c | 34 +- drivers/net/ppp/ppp_generic.c | 154 +++--- drivers/net/ppp/pppoe.c | 2 + drivers/net/ppp/pptp.c | 1 + drivers/net/slip/slip.c | 4 + drivers/net/vmxnet3/vmxnet3_drv.c | 22 +- drivers/net/vxlan/vxlan_core.c | 3 + drivers/net/vxlan/vxlan_mdb.c | 30 +- drivers/net/wan/wanxl.c | 3 +- drivers/net/wireless/ath/ath11k/dp_rx.c | 3 + drivers/net/wireless/ath/ath11k/pci.c | 4 + drivers/net/wireless/ath/ath11k/qmi.c | 11 +- drivers/net/wireless/ath/ath12k/pci.c | 4 + drivers/net/wireless/ath/ath6kl/txrx.c | 10 +- drivers/net/wireless/ath/ath6kl/wmi.c | 20 + drivers/net/wireless/ath/ath9k/hif_usb.c | 7 +- drivers/net/wireless/ath/carl9170/rx.c | 7 +- drivers/net/wireless/ath/carl9170/tx.c | 2 +- drivers/net/wireless/atmel/at76c50x-usb.c | 7 +- .../broadcom/brcm80211/brcmfmac/cfg80211.c | 2 +- .../wireless/broadcom/brcm80211/brcmfmac/pcie.c | 8 +- .../wireless/broadcom/brcm80211/brcmfmac/sdio.c | 2 +- drivers/net/wireless/intel/ipw2x00/ipw2100.c | 8 +- drivers/net/wireless/intel/iwlwifi/mvm/d3.c | 3 +- drivers/net/wireless/intel/iwlwifi/mvm/fw.c | 10 + drivers/net/wireless/intersil/p54/txrx.c | 8 + drivers/net/wireless/marvell/libertas/firmware.c | 1 + drivers/net/wireless/marvell/libertas_tf/main.c | 2 +- drivers/net/wireless/marvell/mwifiex/tdls.c | 2 +- drivers/net/wireless/marvell/mwifiex/uap_event.c | 24 +- drivers/net/wireless/mediatek/mt76/mt7615/mac.c | 6 + .../net/wireless/mediatek/mt76/mt76_connac_mcu.c | 2 + drivers/net/wireless/mediatek/mt76/mt7915/mcu.c | 18 +- drivers/net/wireless/mediatek/mt76/mt7921/mac.c | 10 +- drivers/net/wireless/mediatek/mt76/mt7996/mcu.c | 19 +- drivers/net/wireless/microchip/wilc1000/hif.c | 5 + drivers/net/wireless/virtual/mac80211_hwsim.c | 1 + drivers/pinctrl/cirrus/pinctrl-cs42l43.c | 4 +- drivers/pinctrl/cirrus/pinctrl-lochnagar.c | 2 +- drivers/pinctrl/core.c | 14 +- drivers/pinctrl/intel/pinctrl-cherryview.c | 4 +- drivers/pinctrl/intel/pinctrl-intel.c | 4 +- drivers/pinctrl/intel/pinctrl-lynxpoint.c | 4 +- drivers/pinctrl/mediatek/pinctrl-moore.c | 4 +- drivers/pinctrl/mediatek/pinctrl-mtk-common.c | 4 +- drivers/pinctrl/mediatek/pinctrl-paris.c | 4 +- drivers/pinctrl/nuvoton/pinctrl-npcm7xx.c | 4 +- drivers/pinctrl/pinctrl-as3722.c | 4 +- drivers/pinctrl/pinctrl-axp209.c | 2 +- drivers/pinctrl/pinctrl-cy8c95x0.c | 4 +- drivers/pinctrl/pinctrl-ingenic.c | 11 +- drivers/pinctrl/pinctrl-ocelot.c | 4 +- drivers/pinctrl/pinctrl-rk805.c | 4 +- drivers/pinctrl/pinctrl-st.c | 4 +- drivers/pinctrl/renesas/gpio.c | 4 +- drivers/pinctrl/stm32/pinctrl-stm32.c | 4 +- drivers/pinctrl/vt8500/pinctrl-wmt.c | 4 +- drivers/platform/loongarch/loongson-laptop.c | 1 + drivers/platform/x86/amd/pmc/pmc.c | 39 +- drivers/platform/x86/amd/pmc/pmc.h | 1 + drivers/platform/x86/dell/dell-laptop.c | 28 +- drivers/platform/x86/dell/dell-smbios-base.c | 25 + drivers/platform/x86/dell/dell-smbios.h | 5 + .../uncore-frequency/uncore-frequency-common.c | 7 +- drivers/staging/media/meson/vdec/vdec.c | 4 +- drivers/staging/media/sunxi/cedrus/cedrus.c | 6 +- drivers/staging/media/sunxi/cedrus/cedrus_h264.c | 3 + drivers/staging/media/tegra-video/vi.c | 4 +- drivers/staging/rtl8723bs/core/rtw_ieee80211.c | 9 +- drivers/staging/rtl8723bs/os_dep/ioctl_cfg80211.c | 2 +- drivers/thunderbolt/debugfs.c | 2 + drivers/thunderbolt/domain.c | 36 +- drivers/thunderbolt/icm.c | 5 + drivers/thunderbolt/nhi.c | 6 +- drivers/thunderbolt/nvm.c | 4 +- drivers/thunderbolt/property.c | 38 +- drivers/thunderbolt/switch.c | 20 +- drivers/thunderbolt/tb.c | 61 ++- drivers/thunderbolt/tb.h | 2 + drivers/thunderbolt/xdomain.c | 149 ++++-- drivers/tty/serial/8250/8250_mid.c | 14 +- drivers/tty/serial/max310x.c | 20 +- drivers/tty/serial/sc16is7xx.c | 12 + drivers/usb/atm/ueagle-atm.c | 17 + drivers/usb/chipidea/core.c | 1 + drivers/usb/gadget/function/f_midi.c | 1 + drivers/usb/gadget/function/f_ncm.c | 17 +- drivers/usb/gadget/function/f_printer.c | 23 +- drivers/usb/gadget/function/uvc_v4l2.c | 2 + drivers/usb/gadget/udc/bdc/bdc_core.c | 20 + drivers/usb/gadget/udc/bdc/bdc_udc.c | 7 +- drivers/usb/gadget/udc/dummy_hcd.c | 40 +- drivers/usb/gadget/udc/fsl_udc_core.c | 1 - drivers/usb/gadget/udc/snps_udc_core.c | 1 - drivers/usb/host/xhci-pci.c | 1 + drivers/usb/host/xhci.c | 15 +- drivers/usb/host/xhci.h | 1 + drivers/usb/serial/ftdi_sio.c | 2 + drivers/usb/serial/ftdi_sio_ids.h | 5 + drivers/usb/serial/io_edgeport.c | 3 +- drivers/usb/serial/keyspan_pda.c | 44 +- drivers/usb/serial/option.c | 1 + drivers/usb/storage/unusual_devs.h | 7 + drivers/vdpa/vdpa_user/iova_domain.c | 161 ++++--- drivers/vdpa/vdpa_user/iova_domain.h | 13 +- drivers/vdpa/vdpa_user/vduse_dev.c | 16 +- drivers/video/fbdev/core/bitblit.c | 122 ++--- drivers/video/fbdev/core/fbcon.c | 420 ++++++++-------- drivers/video/fbdev/core/fbcon.h | 6 +- drivers/video/fbdev/core/fbcon_ccw.c | 148 +++--- drivers/video/fbdev/core/fbcon_cw.c | 148 +++--- drivers/video/fbdev/core/fbcon_rotate.c | 44 +- drivers/video/fbdev/core/fbcon_rotate.h | 6 +- drivers/video/fbdev/core/fbcon_ud.c | 164 +++---- drivers/video/fbdev/core/softcursor.c | 18 +- drivers/video/fbdev/core/tileblit.c | 28 +- drivers/video/fbdev/efifb.c | 125 ++--- drivers/watchdog/watchdog_pretimeout.c | 2 + fs/afs/addr_list.c | 10 +- fs/afs/fs_probe.c | 6 +- fs/afs/internal.h | 6 +- fs/afs/proc.c | 4 +- fs/afs/rotate.c | 2 +- fs/afs/rxrpc.c | 15 +- fs/afs/server.c | 4 +- fs/afs/vl_alias.c | 4 +- fs/afs/vl_probe.c | 6 +- fs/afs/vl_rotate.c | 2 +- fs/binfmt_elf_fdpic.c | 4 + fs/binfmt_misc.c | 5 +- fs/btrfs/free-space-cache.c | 3 + fs/btrfs/relocation.c | 2 + fs/ceph/caps.c | 1 + fs/ceph/ioctl.c | 6 + fs/coredump.c | 1 + fs/crypto/inline_crypt.c | 57 +-- fs/crypto/keysetup_v1.c | 8 +- fs/exec.c | 2 +- fs/exfat/balloc.c | 54 ++- fs/f2fs/super.c | 25 +- fs/iomap/buffered-io.c | 12 +- fs/namei.c | 43 ++ fs/nfs/internal.h | 16 +- fs/nfs/pnfs_nfs.c | 2 +- fs/nfs/write.c | 14 +- fs/nfsd/nfs4xdr.c | 8 +- fs/nfsd/vfs.c | 7 +- fs/nfsd/vfs.h | 2 +- fs/overlayfs/copy_up.c | 12 +- fs/posix_acl.c | 7 + fs/proc/namespaces.c | 4 +- fs/smb/client/misc.c | 34 +- fs/smb/client/smb2ops.c | 25 +- fs/smb/server/oplock.c | 6 +- fs/smb/server/smb2misc.c | 5 + fs/smb/server/smb2pdu.c | 9 +- fs/smb/server/smbacl.c | 42 +- include/linux/audit.h | 6 +- include/linux/audit_arch.h | 12 +- include/linux/bootconfig.h | 3 + include/linux/bpf_lsm.h | 4 + include/linux/firmware.h | 3 + include/linux/fscrypt.h | 18 +- include/linux/kvm_host.h | 1 + include/linux/lsm_hooks.h | 1 + include/linux/namei.h | 1 + include/linux/pinctrl/consumer.h | 13 +- include/linux/ppp_channel.h | 3 +- include/linux/seqlock.h | 10 +- include/linux/sunrpc/svcsock.h | 3 + include/linux/sunrpc/xdr.h | 19 +- include/linux/vtime.h | 6 + include/linux/workqueue.h | 8 +- include/media/videobuf2-core.h | 8 +- include/net/af_rxrpc.h | 25 +- include/net/bluetooth/rfcomm.h | 3 + include/net/netfilter/nf_tables.h | 37 -- include/net/netfilter/nft_fib.h | 2 - include/net/netfilter/nft_meta.h | 3 - include/net/sctp/structs.h | 3 +- include/rdma/ib_umem.h | 41 ++ include/trace/events/rxrpc.h | 3 +- include/uapi/linux/btrfs.h | 2 +- init/main.c | 39 -- io_uring/rw.c | 28 +- kernel/audit.c | 2 +- kernel/audit.h | 32 +- kernel/audit_fsnotify.c | 39 +- kernel/audit_tree.c | 2 +- kernel/audit_watch.c | 42 +- kernel/auditfilter.c | 17 +- kernel/auditsc.c | 6 +- kernel/bpf/bpf_inode_storage.c | 9 + kernel/bpf/bpf_lsm.c | 1 - kernel/bpf/verifier.c | 17 + kernel/locking/spinlock_rt.c | 27 +- kernel/sched/cputime.c | 13 - kernel/taskstats.c | 67 +-- kernel/trace/ftrace.c | 13 + kernel/trace/trace_eprobe.c | 3 +- kernel/trace/trace_events_user.c | 43 +- kernel/trace/trace_mmiotrace.c | 4 +- kernel/trace/trace_probe.c | 13 +- kernel/workqueue.c | 46 +- lib/bootconfig.c | 65 +++ lib/compat_audit.c | 12 +- mm/damon/core.c | 13 + mm/mm_init.c | 34 +- net/bluetooth/hci_sync.c | 13 +- net/bluetooth/mgmt.c | 42 +- net/bluetooth/rfcomm/core.c | 17 + net/bluetooth/rfcomm/tty.c | 7 +- net/bridge/br_netlink_tunnel.c | 3 +- net/bridge/br_private.h | 6 +- net/bridge/br_vlan.c | 10 +- net/bridge/br_vlan_options.c | 3 +- net/bridge/netfilter/nft_meta_bridge.c | 20 - net/bridge/netfilter/nft_reject_bridge.c | 1 - net/can/bcm.c | 528 +++++++++++++++------ net/can/isotp.c | 278 ++++++++--- net/can/j1939/transport.c | 18 +- net/ceph/auth_x.c | 9 +- net/ceph/ceph_common.c | 4 +- net/ceph/mon_client.c | 4 +- net/ceph/osdmap.c | 12 +- net/core/sock_map.c | 2 + net/hsr/hsr_slave.c | 2 + net/ipv4/fib_trie.c | 2 +- net/ipv4/icmp.c | 18 +- net/ipv4/netfilter/nft_dup_ipv4.c | 1 - net/ipv4/netfilter/nft_fib_ipv4.c | 2 - net/ipv4/netfilter/nft_reject_ipv4.c | 1 - net/ipv4/nexthop.c | 2 +- net/ipv4/tcp_bpf.c | 2 +- net/ipv6/ila/ila_common.c | 12 + net/ipv6/ip6_tunnel.c | 3 + net/ipv6/ndisc.c | 8 +- net/ipv6/netfilter/nft_dup_ipv6.c | 1 - net/ipv6/netfilter/nft_fib_ipv6.c | 2 - net/ipv6/netfilter/nft_reject_ipv6.c | 1 - net/ipv6/raw.c | 2 +- net/ipv6/xfrm6_policy.c | 1 + net/iucv/af_iucv.c | 21 +- net/l2tp/l2tp_ppp.c | 1 + net/mac80211/iface.c | 8 +- net/mac80211/link.c | 4 + net/mac80211/rx.c | 2 + net/mac802154/llsec.c | 5 + net/mac802154/scan.c | 11 + net/mpls/af_mpls.c | 3 + net/mptcp/options.c | 12 +- net/mptcp/protocol.c | 1 + net/netfilter/nf_conntrack_sip.c | 10 +- net/netfilter/nf_tables_api.c | 67 --- net/netfilter/nft_bitwise.c | 104 ---- net/netfilter/nft_byteorder.c | 11 - net/netfilter/nft_cmp.c | 3 - net/netfilter/nft_compat.c | 10 - net/netfilter/nft_connlimit.c | 1 - net/netfilter/nft_counter.c | 1 - net/netfilter/nft_ct.c | 46 -- net/netfilter/nft_dup_netdev.c | 1 - net/netfilter/nft_dynset.c | 1 - net/netfilter/nft_exthdr.c | 34 -- net/netfilter/nft_fib.c | 51 +- net/netfilter/nft_fib_inet.c | 1 - net/netfilter/nft_fib_netdev.c | 30 +- net/netfilter/nft_flow_offload.c | 1 - net/netfilter/nft_fwd_netdev.c | 2 - net/netfilter/nft_hash.c | 36 -- net/netfilter/nft_immediate.c | 12 - net/netfilter/nft_last.c | 1 - net/netfilter/nft_limit.c | 2 - net/netfilter/nft_log.c | 1 - net/netfilter/nft_lookup.c | 12 - net/netfilter/nft_masq.c | 3 - net/netfilter/nft_meta.c | 45 -- net/netfilter/nft_nat.c | 2 - net/netfilter/nft_numgen.c | 22 - net/netfilter/nft_objref.c | 2 - net/netfilter/nft_osf.c | 25 - net/netfilter/nft_payload.c | 47 -- net/netfilter/nft_queue.c | 2 - net/netfilter/nft_quota.c | 1 - net/netfilter/nft_range.c | 1 - net/netfilter/nft_redir.c | 3 - net/netfilter/nft_reject_inet.c | 1 - net/netfilter/nft_reject_netdev.c | 1 - net/netfilter/nft_rt.c | 1 - net/netfilter/nft_set_pipapo.c | 259 ++++++---- net/netfilter/nft_set_pipapo.h | 8 + net/netfilter/nft_socket.c | 26 - net/netfilter/nft_synproxy.c | 1 - net/netfilter/nft_tproxy.c | 1 - net/netfilter/nft_tunnel.c | 26 - net/netfilter/nft_xfrm.c | 27 -- net/openvswitch/actions.c | 15 +- net/openvswitch/datapath.c | 25 +- net/openvswitch/datapath.h | 2 +- net/openvswitch/vport.c | 2 +- net/packet/af_packet.c | 6 +- net/phonet/pep.c | 2 + net/qrtr/af_qrtr.c | 8 + net/qrtr/ns.c | 4 +- net/rds/recv.c | 15 + net/rxrpc/af_rxrpc.c | 24 +- net/rxrpc/ar-internal.h | 3 +- net/rxrpc/call_accept.c | 77 +-- net/rxrpc/call_object.c | 42 +- net/rxrpc/conn_client.c | 12 +- net/rxrpc/conn_event.c | 14 +- net/rxrpc/conn_object.c | 8 +- net/rxrpc/input.c | 5 +- net/rxrpc/io_thread.c | 8 +- net/rxrpc/peer_event.c | 8 +- net/rxrpc/peer_object.c | 1 + net/rxrpc/recvmsg.c | 26 +- net/rxrpc/rxperf.c | 10 +- net/rxrpc/security.c | 4 +- net/rxrpc/sendmsg.c | 8 +- net/rxrpc/txbuf.c | 4 +- net/sched/act_tunnel_key.c | 14 +- net/sctp/auth.c | 2 +- net/sctp/sm_make_chunk.c | 6 + net/sctp/sm_statefuns.c | 2 +- net/sctp/stream.c | 6 +- net/sunrpc/svcsock.c | 51 +- net/sunrpc/xdr.c | 210 +++++++- net/sunrpc/xprtrdma/rpc_rdma.c | 4 + net/sunrpc/xprtrdma/verbs.c | 12 +- net/tipc/netlink.c | 6 +- net/tipc/netlink_compat.c | 4 + net/tipc/socket.c | 7 +- net/tls/tls_device.c | 6 +- net/wireless/core.c | 1 + net/wireless/nl80211.c | 20 +- net/wireless/pmsr.c | 21 +- net/wireless/scan.c | 2 +- net/x25/af_x25.c | 8 +- net/xfrm/xfrm_policy.c | 4 +- security/apparmor/include/net.h | 6 +- security/apparmor/lsm.c | 38 +- security/apparmor/net.c | 2 +- security/bpf/hooks.c | 3 + security/security.c | 36 +- security/selinux/hooks.c | 99 ++-- security/selinux/include/objsec.h | 5 + security/selinux/netlabel.c | 23 +- security/smack/smack.h | 5 + security/smack/smack_lsm.c | 70 ++- security/smack/smack_netfilter.c | 4 +- sound/core/seq/seq_timer.c | 13 +- sound/hda/hdac_regmap.c | 4 +- sound/pci/hda/patch_conexant.c | 3 - sound/soc/amd/ps/pci-ps.c | 2 +- sound/soc/codecs/bt-sco.c | 10 +- sound/soc/codecs/cs35l56-i2c.c | 4 +- sound/soc/codecs/cs35l56-spi.c | 4 +- sound/soc/codecs/cs35l56.c | 25 +- sound/soc/codecs/cs42l43-jack.c | 3 +- sound/soc/codecs/tas2562.c | 5 +- sound/soc/codecs/tas2781-fmwlib.c | 63 ++- sound/soc/mediatek/mt6797/mt6797-afe-pcm.c | 14 +- sound/soc/mediatek/mt7986/mt7986-afe-pcm.c | 14 +- sound/soc/mediatek/mt8183/mt8183-afe-pcm.c | 26 +- sound/soc/mediatek/mt8188/mt8188-afe-pcm.c | 21 +- sound/soc/mediatek/mt8192/mt8192-afe-pcm.c | 135 ++---- sound/soc/mediatek/mt8195/mt8195-afe-pcm.c | 54 +-- sound/soc/mediatek/mt8195/mt8195-mt6359.c | 38 +- sound/soc/meson/aiu-fifo-spdif.c | 5 + sound/usb/quirks.c | 2 + tools/testing/selftests/alsa/mixer-test.c | 1 + .../testing/selftests/bpf/progs/verifier_ld_ind.c | 142 ++++++ tools/testing/selftests/ftrace/ftracetest | 1 + tools/testing/selftests/net/af_unix/config | 4 + tools/testing/selftests/net/openvswitch/config | 16 + virt/kvm/kvm_main.c | 3 + 561 files changed, 6388 insertions(+), 4060 deletions(-)

2 months, 3 weeks

[PATCH 7.1 000/744] 7.1.6-rc1 review

by Greg Kroah-Hartman

This is the start of the stable review cycle for the 7.1.6 release. There are 744 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know. Responses should be made by Sat, 01 Aug 2026 14:13:38 +0000. Anything received after that time might be too late. The whole patch series can be found in one patch at: https://www.kernel.org/pub/linux/kernel/v7.x/stable-review/patch-7.1.6-rc1.… or in the git tree and branch at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-7.1.y and the diffstat can be found below. thanks, greg k-h ------------- Pseudo-Shortlog of commits: Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> Linux 7.1.6-rc1 Nikunj A Dadhania <nikunj(a)amd.com> KVM: SVM: Bump asid_generation on CPU online to avoid ASID collision after hotplug Willem de Bruijn <willemb(a)google.com> selftests: drv-net: so_txtime: relax variance bounds Willem de Bruijn <willemb(a)google.com> selftests: drv-net: cope with slow env in so_txtime.py test Andrea Righi <arighi(a)nvidia.com> sched_ext: Preserve rq tracking across local DSQ dispatch Tejun Heo <tj(a)kernel.org> sched_ext: Move shared helpers from ext.c into internal.h and cid.h Breno Leitao <leitao(a)debian.org> bootconfig: fix NULL-pointer arithmetic in xbc_snprint_cmdline() Breno Leitao <leitao(a)debian.org> bootconfig: move xbc_snprint_cmdline() to lib/bootconfig.c Shradha Gupta <shradhagupta(a)linux.microsoft.com> net: mana: Optimize irq affinity for low vcpu configs Michael Bommarito <michael.bommarito(a)gmail.com> thunderbolt: Prevent XDomain delayed work use-after-free on disconnect Mika Westerberg <mika.westerberg(a)linux.intel.com> thunderbolt: Remove XDomain from the bus without holding tb->lock Mika Westerberg <mika.westerberg(a)linux.intel.com> thunderbolt: Remove service debugfs entries during unregister Mika Westerberg <mika.westerberg(a)linux.intel.com> thunderbolt: Keep XDomain reference during the lifetime of a service Muchun Song <muchun.song(a)linux.dev> mm/sparse-vmemmap: fix DAX vmemmap accounting with optimization Muchun Song <muchun.song(a)linux.dev> mm/sparse-vmemmap: pass @pgmap argument to memory deactivation paths Chuck Lever <chuck.lever(a)oracle.com> SUNRPC: Return an error from xdr_buf_to_bvec() on overflow Chuck Lever <chuck.lever(a)oracle.com> SUNRPC: Add helpers to convert xdr_buf byte ranges to scatterlists Darrick J. Wong <djwong(a)kernel.org> xfs: don't replace the wrong part of the cow fork Joanne Koong <joannelkoong(a)gmail.com> fuse-uring: fix race between registration and connection abortion Ricardo Robaina <rrobaina(a)redhat.com> audit: fix recursive locking deadlock in audit_dupe_exe() Ricardo Robaina <rrobaina(a)redhat.com> audit: use 'unsigned int' instead of 'unsigned' Harry Wentland <harry.wentland(a)amd.com> drm/amd/display: Fix DTB DTO updates breaking live pixel rate sources Namjae Jeon <linkinjeon(a)kernel.org> ksmbd: validate ACE size against SID sub-authorities Namjae Jeon <linkinjeon(a)kernel.org> ksmbd: bound DACL dedup walk to copied ACEs Wentao Guan <guanwentao(a)uniontech.com> ksmbd: restore DACL size on check_add_overflow() to avoid malformed ACL Haofeng Li <lihaofeng(a)kylinos.cn> ksmbd: validate num_subauth when copying ACE in set_ntacl_dacl Matthieu Baerts (NGI0) <matttbe(a)kernel.org> selftests: drv-net: add missing kconfig for psp.py Christian König <christian.koenig(a)amd.com> drm/amdgpu: fix check in amdgpu_hmm_invalidate_gfx Yang Wang <kevinyang.wang(a)amd.com> drm/amd/pm: fix smu13 power limit range calculation Asad Kamal <asad.kamal(a)amd.com> drm/amdgpu: fix aperture mapping leak Zhu Lingshan <lingshan.zhu(a)amd.com> drm/amdgpu: reject mapping a reserved doorbell to a new queue Ce Sun <cesun102(a)amd.com> drm/amdgpu: invoke pm_genpd_remove() before freeing genpd Ce Sun <cesun102(a)amd.com> drm/amdgpu: fix resource leak on ACP reset timeout Harish Kasiviswanathan <Harish.Kasiviswanathan(a)amd.com> drm/amdgpu: Fix kernel panic during driver load failure Boyuan Zhang <boyuan.zhang(a)amd.com> drm/amdgpu: fix division by zero with invalid uvd dimensions Luca Coelho <luciano.coelho(a)intel.com> drm/dp_mst: Handle torn-down topology gracefully in drm_dp_mst_topology_queue_probe() Boyuan Zhang <boyuan.zhang(a)amd.com> drm/amdgpu/vcn4: avoid rereading IB param length Boyuan Zhang <boyuan.zhang(a)amd.com> drm/amdgpu/vce: fix integer overflow in image size Alex Deucher <alexander.deucher(a)amd.com> drm/amdgpu/sdma7.1: replace BUG_ON() with WARN_ON() Alex Deucher <alexander.deucher(a)amd.com> drm/amdgpu/sdma4.4.2: replace BUG_ON() with WARN_ON() Prike Liang <Prike.Liang(a)amd.com> drm/amdgpu/mes11: set doorbell offset for suspending userq Boyuan Zhang <boyuan.zhang(a)amd.com> drm/amdgpu/jpeg: fix jpeg_v5_0_1_is_idle detection Boyuan Zhang <boyuan.zhang(a)amd.com> drm/amdgpu/jpeg: fix jpeg_v4_0_3_is_idle detection Alex Deucher <alexander.deucher(a)amd.com> drm/amdgpu/gfx9: replace BUG_ON() with WARN_ON() Alex Deucher <alexander.deucher(a)amd.com> drm/amdgpu/gfx9.4.3: replace BUG_ON() with WARN_ON() Alex Deucher <alexander.deucher(a)amd.com> drm/amdgpu/gfx8: drop unecessary BUG_ON() Alex Deucher <alexander.deucher(a)amd.com> drm/amdgpu/gfx12: replace BUG_ON() with WARN_ON() Jesse Zhang <Jesse.Zhang(a)amd.com> drm/amdgpu/gfx12: fix EOP interrupt routing for KQ and userq Jesse Zhang <Jesse.Zhang(a)amd.com> drm/amdgpu/gfx11: fix EOP interrupt routing for KQ and userq Alex Deucher <alexander.deucher(a)amd.com> drm/amdgpu/gfx12.1: replace BUG_ON() with WARN_ON() Alex Deucher <alexander.deucher(a)amd.com> drm/amdgpu/gfx10: replace BUG_ON() with WARN_ON() Yang Wang <kevinyang.wang(a)amd.com> drm/amd/pm: make pp_features read-only when scpm is enabled Yang Wang <kevinyang.wang(a)amd.com> drm/amd/pm: fix amdgpu_pm_info power display units Ethan Nelson-Moore <enelsonmoore(a)gmail.com> watchdog: s32g_wdt: remove incorrect options in watchdog_info struct James Raphael Tiovalen <jamestiotio(a)gmail.com> vxlan: mdb: Fix source list corruption on a failed replace Stefano Garzarella <sgarzare(a)redhat.com> vsock/virtio: collapse receive queue under memory pressure Daehyeon Ko <4ncienth(a)gmail.com> tipc: clear sock->sk on the failed-insert path in tipc_sk_create() Yuxiang Yang <yangyx22(a)mails.tsinghua.edu.cn> tcp: challenge ACK for non-exact RST in SYN-RECEIVED Yizhou Zhao <zhaoyz24(a)mails.tsinghua.edu.cn> tcp: initialize standalone TCP-AO response padding Justin Lai <justinlai0215(a)realtek.com> rtase: Workaround for TX hang caused by hardware packet parsing Asim Viladi Oglu Manizada <manizada(a)pm.me> pppoe: reload header pointer after dev_hard_header() Shuvam Pandey <shuvampandey1(a)gmail.com> ovpn: hold peer before scheduling keepalive work Pavitra Jha <jhapavitra98(a)gmail.com> ovpn: fix peer refcount leak in TCP error paths Kyle Zeng <kylebot(a)openai.com> openvswitch: fix GSO userspace truncation underflow Doruk Tan Ozturk <doruk(a)0sec.ai> mctp: serial: handle zero-length frames to prevent rx buffer overflow Doruk Tan Ozturk <doruk(a)0sec.ai> mac802154: llsec: reject frames shorter than the authentication tag Ibrahim Hashimov <security(a)auditcode.ai> mac802154: hold an interface reference across the scan worker Michael Bommarito <michael.bommarito(a)gmail.com> ila: reload IPv6 header after pskb_may_pull in checksum adjust Sergey Temerkhanov <sergey.temerkhanov(a)intel.com> ice: use READ_ONCE() to access cached PHC time Aleksandr Loktionov <aleksandr.loktionov(a)intel.com> ice: reject out-of-range ptype in ice_parser_profile_init Eddie Phillips <eddiephillips(a)google.com> gve: fix Rx queue stall on alloc failure Namjae Jeon <linkinjeon(a)kernel.org> ksmbd: validate minimum PDU size for transform requests James Montgomery <james_montgomery(a)disroot.org> ksmbd: defer destroy_previous_session() until after NTLM authentication Carl Johnson <carl(a)jpartners.org> smb: client: handle STATUS_STOPPED_ON_SYMLINK responses without a symlink target Raphael Zimmer <raphael.zimmer(a)tu-ilmenau.de> rbd: Reset positive result codes to zero in object map update path Christian Brauner <brauner(a)kernel.org> super: fix emergency thaw deadlock on frozen block devices Masami Hiramatsu (Google) <mhiramat(a)kernel.org> selftests/ftrace: Reset triggers at top level before instance loop Paul Greenwalt <paul.greenwalt(a)intel.com> ice: fix PTP Call Trace during PTP release Sven Schnelle <svens(a)linux.ibm.com> ptp: ptp_s390: Add missing facility check Jann Horn <jannh(a)google.com> proc: Fix broken error paths for namespace links Youssef Samir <youssef.abdulrahman(a)oss.qualcomm.com> net: qrtr: ns: Raise node count limit to 512 Coia Prant <coiaprant(a)gmail.com> net: pcs: xpcs: fix SGMII state reading Fan Wu <fanwu01(a)zju.edu.cn> net: hip04: fix RX buffer leak on build_skb failure Shiming Cheng <shiming.cheng(a)mediatek.com> net: gro: fix double aggregation of flush-marked skbs David Lee <david.lee(a)trailofbits.com> net/x25: fix use-after-free in x25_kill_by_neigh() Aldo Ariel Panzardo <qwe.aldo(a)gmail.com> net/sched: serialize qdisc_rtab_list against concurrent get/put Manjunath Patil <manjunath.b.patil(a)oracle.com> net/mlx5e: Use sender devcom for MPV master-up Bryam Vargas <hexlabsecurity(a)proton.me> net/iucv: fix use-after-free of a severed iucv_path Hidayath Khan <hidayath(a)linux.ibm.com> net/af_iucv: fix NULL deref in afiucv_hs_callback_syn() Doruk Tan Ozturk <doruk(a)0sec.ai> geneve: require CAP_NET_ADMIN in the device netns for changelink Sungmin Kang <726ksm(a)gmail.com> net: slip: serialize receive against buffer reallocation Doruk Tan Ozturk <doruk(a)0sec.ai> vxlan: require CAP_NET_ADMIN in the device netns for changelink Breno Leitao <leitao(a)debian.org> phonet: pep: fix use-after-free in pep_get_sb() Markus Breitenberger <bre(a)keba.com> net: stmmac: intel: skip SerDes reconfig when rate is unchanged Harry Yoo (Oracle) <harry(a)kernel.org> mm/slab: fix a memory leak due to bootstrapping sheaves twice Shengming Hu <hu.shengming(a)zte.com.cn> mm/slub: fix lost local objects when bulk remote free batch fills Lu Baolu <baolu.lu(a)linux.intel.com> iommu/vt-d: Disallow SVA if page walk is not coherent Zhang Yi <yi.zhang(a)huawei.com> iomap: fix out-of-bounds bitmap_set() with zero-length range Yitang Yang <yi1tang.yang(a)gmail.com> io_uring/rw: fix missing ERESTARTSYS conversion in read paths Tengda Wu <wutengda(a)huaweicloud.com> ftrace: Add global mutex to serialize trace_parser access Eric Biggers <ebiggers(a)kernel.org> fscrypt: Avoid dynamic allocation in fscrypt_get_devices() Eric Biggers <ebiggers(a)kernel.org> fscrypt: Add missing superblock check in find_or_insert_direct_key() Amir Goldstein <amir73il(a)gmail.com> fs: preserve ACL_DONT_CACHE state in forget_cached_acl() Chen Changcheng <chenchangcheng(a)kylinos.cn> fs/super: fix emergency thaw double-unlock of s_umount Christian Brauner <brauner(a)kernel.org> binfmt_elf_fdpic: only honour the first PT_INTERP Chancel Liu <chancel.liu(a)nxp.com> ASoC: fsl_sai: Fix spurious BCLK on resume by clearing BYP Chancel Liu <chancel.liu(a)nxp.com> ASoC: fsl: imx-card: Skip sysclk reset for active DAIs in shutdown Shihuang Liu <shlomojune6(a)gmail.com> amt: fix use-after-free in AMT delayed works Douya Le <ldy3087146292(a)gmail.com> libceph: remove debugfs files before client teardown Douya Le <ldy3087146292(a)gmail.com> libceph: reject zero bucket types in crush_decode Raphael Zimmer <raphael.zimmer(a)tu-ilmenau.de> libceph: Reject monmaps advertising zero monitors Shuangpeng Bai <shuangpeng.kernel(a)gmail.com> libceph: refresh auth->authorizer_buf{,_len} after authorizer update Zhao Zhang <zzhan461(a)ucr.edu> libceph: guard missing CRUSH type name lookup Pavitra Jha <jhapavitra98(a)gmail.com> libceph: fix two unsafe bare decodes in decode_lockers() Raphael Zimmer <raphael.zimmer(a)tu-ilmenau.de> libceph: Fix multiplication overflow in decode_new_up_state_weight() Xiang Mei <xmei5(a)asu.edu> libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE Douya Le <ldy3087146292(a)gmail.com> libceph: bound get_version reply decode to front len Wentao Liang <vulab(a)iscas.ac.cn> ceph: fix writeback_count leak in write_folio_nounlock() WenTao Liang <vulab(a)iscas.ac.cn> ceph: fix refcount leak in ceph_readdir() Bryam Vargas <hexlabsecurity(a)proton.me> ceph: fix pre-auth out-of-bounds read on snaptrace in ceph_handle_caps() Max Kellermann <max.kellermann(a)ionos.com> ceph: add owner/capability checks for CEPH_IOC_SET_LAYOUT* Zhiling Zou <roxy520tt(a)gmail.com> sctp: close UDP tunnel sockets during netns teardown Zhiling Zou <roxy520tt(a)gmail.com> sctp: avoid auth_enable sysctl UAF during netns teardown Jun Yang <junvyyang(a)tencent.com> sctp: don't free the ASCONF's own transport in DEL-IP processing Rik van Riel <riel(a)surriel.com> mm/huge_memory: set PG_has_hwpoisoned only after new folio head is established Wei Yang <richard.weiyang(a)gmail.com> mm/page_vma_mapped: fix device-private PMD handling Xie Yuanbin <xieyuanbin1(a)huawei.com> mm/memory-failure: trace: change memory_failure_event to ras subsystem Breno Leitao <leitao(a)debian.org> mm/kmemleak: fix checksum computation for per-cpu objects SJ Park <sj(a)kernel.org> mm/damon/core: disallow overlapping input ranges for damon_set_regions() Thomas Weißschuh <linux(a)weissschuh.net> m68k: avoid -Wunused-but-set-parameter in clear_user_page() SJ Park <sj(a)kernel.org> mm/damon/core: validate ranges in damon_set_regions() Mike Rapoport (Microsoft) <rppt(a)kernel.org> userfaultfd: prevent registration of special VMAs Qu Wenruo <wqu(a)suse.com> btrfs: do not try compression for data reloc inodes David Howells <dhowells(a)redhat.com> afs: Fix afs_edit_dir_remove() to get, not find, block 0 Geliang Tang <geliang(a)kernel.org> selftests: mptcp: userspace_pm: fix undefined variable port Geliang Tang <geliang(a)kernel.org> mptcp: pm: userspace: fix use-after-free in get_local_id Michael Bommarito <michael.bommarito(a)gmail.com> mptcp: only set DATA_FIN when a mapping is present Kalpan Jani <kalpan.jani(a)mpiricsoftware.com> mptcp: fix stale skb->sk reference on subflow close Matthieu Baerts (NGI0) <matttbe(a)kernel.org> mptcp: fix BUILD_BUG_ON on legacy ARM config Chenguang Zhao <zhaochenguang(a)kylinos.cn> mptcp: decrement subflows counter on failed passive join Will Deacon <will(a)kernel.org> Revert "arm64: syscall: Ensure saved x0 is kept in-sync with tracer updates" Will Deacon <will(a)kernel.org> arm64: syscall: Ensure saved x0 is kept in-sync with tracer updates Dev Jain <dev.jain(a)arm.com> arm64: make huge_ptep_get handled unaligned addresses Fuad Tabba <fuad.tabba(a)linux.dev> tracing/remotes: Fix page_va[] access before counter update in trace_remote_alloc_buffer() Masami Hiramatsu (Google) <mhiramat(a)kernel.org> tracing/probes: Prevent out-of-bounds write in __trace_probe_log_err() Masami Hiramatsu (Google) <mhiramat(a)kernel.org> tracing/probes: Fix potential underflow in LEN_OR_ZERO macro Masami Hiramatsu (Google) <mhiramat(a)kernel.org> tracing/probes: Avoid temporary buffer truncation in trace_probe_match_command_args() Masami Hiramatsu (Google) <mhiramat(a)kernel.org> tracing/eprobe: Fix exact system name matching in eprobe_dyn_event_match() Ming Lei <tom.leiming(a)gmail.com> ublk: wait on ublk_dev_ready() instead of ub->completion Jackie Liu <liuyun01(a)kylinos.cn> tracing: Propagate errors from remote event bulk updates Steven Rostedt <rostedt(a)goodmis.org> tracing: perf: Fix stale head for perf syscall tracing Masami Hiramatsu (Google) <mhiramat(a)kernel.org> tracing: Fix union collision of module and refcnt for dynamic events deepakraog <gaikwad.dcg(a)gmail.com> tracing: Fix resource leak on mmiotrace trace_pipe close Steven Rostedt <rostedt(a)goodmis.org> tracing: Fix mmiotrace possible NULL dereferencing of hiter->dev Usama Arif <usama.arif(a)linux.dev> tracing: Fix context switch counter truncation Steven Rostedt <rostedt(a)goodmis.org> tracing: Delay module ref count for "enable_event" trigger Xu Rao <raoxu(a)uniontech.com> misc: nsm: pin the module while the device is open Runyu Xiao <runyu.xiao(a)seu.edu.cn> misc: nsm: only unlock nsm_dev on post-lock error paths Guangshuo Li <lgs201920130244(a)gmail.com> intel_th: fix MSC output device reference leak Alexander Usyskin <alexander.usyskin(a)intel.com> mei: bus: access mei_device under device_lock on cleanup Ethan Nelson-Moore <enelsonmoore(a)gmail.com> selftests: ntsync: correct CONFIG_NTSYNC name Jiangshan Yi <yijiangshan(a)kylinos.cn> serial: 8250_mid: Fix NULL function pointer dereference on DNV/ICX-D/SNR platforms Hugo Villeneuve <hvilleneuve(a)dimonoff.com> serial: sc16is7xx: implement gpio get_direction() callback Ben Hutchings <benh(a)debian.org> uio_hv_generic: Bind to FCopy device by default Ian Abbott <abbotti(a)mev.co.uk> comedi: comedi_parport: deal with premature interrupt Nathan Chancellor <nathan(a)kernel.org> x86/boot/compressed: Disable jump tables Adrian Ng Ho Yin <adrian.ho.yin.ng(a)altera.com> firmware: stratix10-svc: handle NO_RESPONSE in async poll Adrian Ng Ho Yin <adrian.ho.yin.ng(a)altera.com> firmware: stratix10-svc: fix teardown order in remove to prevent race Tze Yee Ng <tze.yee.ng(a)altera.com> firmware: stratix10-svc: fix memory leaks and list corruption bugs Cen Zhang (Microsoft) <blbllhy(a)gmail.com> rhashtable: clear stale iter->p on table restart Xu Rao <raoxu(a)uniontech.com> cdrom: fix stack out-of-bounds read in CDROMVOLCTRL Rong Bao <rong.bao(a)csmantle.top> LoongArch: Retrieve CPU package ID from PPTT when available Kanglong Wang <wangkanglong(a)loongson.cn> LoongArch: Move jump_label_init() before parse_early_param() Huacai Chen <chenhuacai(a)kernel.org> LoongArch: Increase TASK_STRUCT_OFFSET up to 2040 for 32BIT Haoran Jiang <jianghaoran(a)kylinos.cn> LoongArch: Fix oops during single-step debugging Huacai Chen <chenhuacai(a)kernel.org> LoongArch: Fix build errors due to wrong instructions for 32BIT George Guo <guodongtai(a)kylinos.cn> LoongArch: Fix address space mismatch in kexec command line lookup Miguel Ojeda <ojeda(a)kernel.org> objtool/rust: add one more `noreturn` Rust function for Rust 1.99.0 Alexandre Courbot <acourbot(a)nvidia.com> rust: allow `clippy::unwrap_or_default` globally Miguel Ojeda <ojeda(a)kernel.org> rust: allow `suspicious_runtime_symbol_definitions` lint for Rust >= 1.98 Alice Ryhl <aliceryhl(a)google.com> rust: device: avoid trailing ; in printing macros FUJITA Tomonori <fujita.tomonori(a)gmail.com> rust: time: fix as_micros_ceil() to round correctly for negative Delta Alice Ryhl <aliceryhl(a)google.com> rust_binder: only print failure if error has source Zixing Liu <liushuyu(a)aosc.io> platform/loongarch: laptop: Explicitly reset bl_powered state when suspend Christian Brauner <brauner(a)kernel.org> binfmt_misc: set have_execfd only once the interpreter is opened Christian Brauner <brauner(a)kernel.org> exec: fix unsigned loop counter wrap in transfer_args_to_stack() Chengfeng Ye <nicoyip.dev(a)gmail.com> Bluetooth: RFCOMM: Fix session UAF in set_termios Chengfeng Ye <nicoyip.dev(a)gmail.com> Bluetooth: hci_sync: Protect UUID list traversal MinJea Kim <qndkdrnl(a)gmail.com> staging: rtl8723bs: fix inverted HT40 secondary channel offset Moksh Panicker <mokshpanicker.7(a)gmail.com> staging: rtl8723bs: fix OOB reads in rtw_get_wps_ie() Jose Ignacio Tornos Martinez <jtornosm(a)redhat.com> wifi: ath12k: fix NULL pointer dereference in rhash table destroy Wentao Liang <vulab(a)iscas.ac.cn> wifi: ath11k: fix refcount leak in ath11k_ahb_fw_resources_init() LiangCheng Wang <zaq14760(a)gmail.com> wifi: brcmfmac: set F2 blocksize to 256 for BCM43752 Fan Wu <fanwu01(a)zju.edu.cn> wifi: brcmfmac: make release_scratchbuffers idempotent Fan Wu <fanwu01(a)zju.edu.cn> wifi: brcmfmac: drain bus_reset work on device removal Devin Wittmayer <lucid_duck(a)justthetip.ca> wifi: mt76: restrict NPU/PPE active checks to MMIO devices Devin Wittmayer <lucid_duck(a)justthetip.ca> wifi: mt76: mt7925: drop TXRX_NOTIFY on non-mmio buses Devin Wittmayer <lucid_duck(a)justthetip.ca> wifi: mt76: mt7921: drop TXRX_NOTIFY on non-mmio buses Devin Wittmayer <lucid_duck(a)justthetip.ca> wifi: mt76: mt7615: drop TXRX_NOTIFY on non-mmio buses Huihui Huang <hhhuang(a)smu.edu.sg> wifi: wilc1000: validate assoc response length before subtracting header Doruk Tan Ozturk <doruk(a)0sec.ai> wifi: mwifiex: fix NULL dereference when the AP has HT-cap but no HT-oper Daniel Hodges <git(a)danielhodges.dev> wifi: ath6kl: fix use-after-free in aggr_reset_state() Tristan Madani <tristan(a)talencesecurity.com> wifi: ath6kl: fix OOB access from firmware ADDBA window size Norbert Szetei <norbert(a)doyensec.com> ALSA: timer: don't re-enter an instance callback that is still running Norbert Szetei <norbert(a)doyensec.com> ALSA: timer: drain a slave's callback before its master detaches it Kai Vehmanen <kai.vehmanen(a)linux.intel.com> ALSA: hda: codecs: hdmi: disable keep-alive before audio format change Norbert Szetei <norbert(a)doyensec.com> ALSA: seq: close a re-opened queue timer in the destructor Nikita Maksimov <nickstogramm(a)yandex.ru> ALSA: hda/realtek: Fix speakers on Lunnen Ground 14 Johan Hovold <johan(a)kernel.org> media: vpif_capture: fix OF node reference imbalance Guangshuo Li <lgs201920130244(a)gmail.com> media: vivid: fix cleanup bugs in vivid_init() Hans Verkuil <hverkuil+cisco(a)kernel.org> media: vivid: check for vb2_is_busy() when toggling caps Hans Verkuil <hverkuil+cisco(a)kernel.org> media: vivid: add vivid_update_reduced_fps() Guangshuo Li <lgs201920130244(a)gmail.com> media: vimc: fix reference leak on failed device registration Guangshuo Li <lgs201920130244(a)gmail.com> media: vidtv: fix reference leak on failed device registration Benjamin Gaignard <benjamin.gaignard(a)collabora.com> media: verisilicon: Export only needed pixels formats Zile Xiong <xiongzile99(a)gmail.com> media: vb2: use ssize_t for vb2_read/vb2_write Sakari Ailus <sakari.ailus(a)linux.intel.com> media: v4l2-subdev: Fail {enable,disable}_streams and s_streaming nicely Mirela Rabulea <mirela.rabulea(a)nxp.com> media: v4l2-fwnode: Fix subdev owner overwritten in v4l2_async_register_subdev_sensor() Pengpeng Hou <pengpeng(a)iscas.ac.cn> media: v4l2-ctrls: validate HEVC active reference counts Sergey Shtylyov <s.shtylyov(a)auroraos.dev> media: v4l2-ctrls-request: add NULL check in v4l2_ctrl_request_complete() Niklas Söderlund <niklas.soderlund+renesas(a)ragnatech.se> media: uapi: rkisp: Correct name version enum Myeonghun Pak <mhun512(a)gmail.com> media: ti: vpe: unwind v4l2 device registration on probe error Felix Gu <ustc.gu(a)gmail.com> media: ti: vpe: Fix the error code of devm_request_irq() Felix Gu <ustc.gu(a)gmail.com> media: ti: vpe: Fix the error code of devm_kzalloc() in vip_probe_slice() Felix Gu <ustc.gu(a)gmail.com> media: ti: vpe: Fix fwnode_handle leak in vip_probe_complete() Hungyu Lin <dennylin0707(a)gmail.com> media: tegra-video: vi: fix invalid u32 return value in format lookup Dmitry Osipenko <dmitry.osipenko(a)collabora.com> media: synopsys: hdmirx: Fix HPD lane hold time Valery Borovsky <vebohr(a)gmail.com> media: sun4i-csi: Return queued buffers on start_streaming() failure Myeonghun Pak <mhun512(a)gmail.com> media: stm32: dcmi: unregister notifier on probe failure Valery Borovsky <vebohr(a)gmail.com> media: stm32-dcmipp: Return queued buffers on start_streaming() failure Ma Ke <make24(a)iscas.ac.cn> media: saa7134: Fix a possible memory leak in saa7134_video_init1 Jacopo Mondi <jacopo.mondi+renesas(a)ideasonboard.com> media: rzv2h-ivc: Wait for frame end in stop_streaming Tommaso Merciai <tommaso.merciai.xr(a)bp.renesas.com> media: rzg2l-cru: Skip ICnMC configuration when ICnSVC is used Valery Borovsky <vebohr(a)gmail.com> media: rtl2832_sdr: Return queued buffers on start_streaming() failure Deepanshu Kartikey <kartikey406(a)gmail.com> media: rtl2832: fix use-after-free in rtl2832_remove() Myeonghun Pak <mhun512(a)gmail.com> media: radio-si476x: Unregister v4l2_device on probe failure Bryan O'Donoghue <bryan.odonoghue(a)linaro.org> media: qcom: camss: Fix RDI streaming for CSID 340 Bryan O'Donoghue <bryan.odonoghue(a)linaro.org> media: qcom: camss: Fix RDI streaming for CSID GEN3 Bryan O'Donoghue <bryan.odonoghue(a)linaro.org> media: qcom: camss: Fix RDI streaming for CSID GEN2 Bryan O'Donoghue <bryan.odonoghue(a)linaro.org> media: qcom: camss: Fix RDI streaming for CSID 680 Valery Borovsky <vebohr(a)gmail.com> media: pwc: Return queued buffers on start_streaming() failure Valery Borovsky <vebohr(a)gmail.com> media: pwc: Drain fill_buf on start_streaming() failure Krzysztof Kozlowski <krzysztof.kozlowski(a)oss.qualcomm.com> media: pci: dm1105: Free allocated workqueue Guoniu Zhou <guoniu.zhou(a)nxp.com> media: nxp: imx8-isi: Fix scale factor calculation for hardware rounding Guoniu Zhou <guoniu.zhou(a)nxp.com> media: nxp: imx8-isi: Fix potential out-of-bounds issues Xiaolei Wang <xiaolei.wang(a)windriver.com> media: nxp: imx8-isi: Fix missing v4l2_subdev_cleanup() in pipe init error path Xiaolei Wang <xiaolei.wang(a)windriver.com> media: nxp: imx8-isi: Clean up already-initialized pipes on probe failure Xiaolei Wang <xiaolei.wang(a)windriver.com> media: nxp: imx8-isi: Add missing v4l2_subdev_cleanup() in crossbar and pipe David Carlier <devnexen(a)gmail.com> media: nuvoton: npcm-video: fix memory leaks in probe and remove David Carlier <devnexen(a)gmail.com> media: nuvoton: npcm-video: fix error handling in npcm_video_init() Valery Borovsky <vebohr(a)gmail.com> media: msi2500: Return queued buffers on start_streaming() failure Anand Moon <linux.amoon(a)gmail.com> media: meson: vdec: Fix memory leak in error path of vdec_open Guangshuo Li <lgs201920130244(a)gmail.com> media: marvell-cam: fix missing pci_disable_device() on remove David Carlier <devnexen(a)gmail.com> media: mali-c55: Power-off the peripheral in remove() Alper Ak <alperyasinak1(a)gmail.com> media: mali-c55: Fix possible ERR_PTR in enable_streams David Carlier <devnexen(a)gmail.com> media: mali-c55: Disable pm_runtime on probe error David Carlier <devnexen(a)gmail.com> media: mali-c55: Add missing of_reserved_mem_device_release() Dmitry Baryshkov <dmitry.baryshkov(a)oss.qualcomm.com> media: iris: Fix use IRQF_NO_AUTOEN when requesting the IRQ Marco Nenciarini <mnencia(a)kcore.it> media: intel/ipu6: Improve DWC PHY HSFREQRANGE band selection for overlapping ranges Sakari Ailus <sakari.ailus(a)linux.intel.com> media: imx219: Fix maximum frame length in lines Martin Hecht <mhecht73(a)gmail.com> media: i2c: alvium: fix critical pointer access in alvium_ctrl_init Sakari Ailus <sakari.ailus(a)linux.intel.com> media: dw9719: Add back the I²C device id table Wang Jun <1742789905(a)qq.com> media: cx23885: add ioremap return check and cleanup Johan Hovold <johan(a)kernel.org> media: cx231xx: fix devres lifetime Brandon Brnich <b-brnich(a)ti.com> media: chips-media: wave5: Move src_buf Removal to finish_encode Pengpeng Hou <pengpeng(a)iscas.ac.cn> media: cedrus: skip invalid H.264 reference list entries Samuel Holland <samuel(a)sholland.org> media: cedrus: Fix missing cleanup in error path Myeonghun Pak <mhun512(a)gmail.com> media: cedrus: clean up media device on probe failure Myeonghun Pak <mhun512(a)gmail.com> media: cec: seco: unregister adapter on IR probe failure David Carlier <devnexen(a)gmail.com> media: aspeed: fix missing of_reserved_mem_device_release() on probe failure Ricardo Ribalda <ribalda(a)chromium.org> media: amlogic-c3: Add validations for ae and awb config Valery Borovsky <vebohr(a)gmail.com> media: airspy: Return queued buffers on start_streaming() failure Maíra Canal <mcanal(a)igalia.com> drm/v3d: Reach the GMP through the hub registers on V3D 7.x Matthew Brost <matthew.brost(a)intel.com> drm/gpusvm: Fix MM reference leak in drm_gpusvm_range_evict Stanislav Kinsburskii <skinsburskii(a)gmail.com> drm/gpusvm: Zero HMM PFNs before scanning ranges Matthew Brost <matthew.brost(a)intel.com> drm/ttm/pool: back up at native page order Matthew Brost <matthew.brost(a)intel.com> drm/pagemap: Guard HPAGE_PMD_ORDER use with CONFIG_ARCH_ENABLE_THP_MIGRATION Linmao Li <lilinmao(a)kylinos.cn> drm/vc4: Prevent shader BO mappings from becoming writable Ian Forbes <ian.forbes(a)broadcom.com> drm/vmwgfx: Validate vmw_surface_metadata::array_size Matthew Brost <matthew.brost(a)intel.com> drm/pagemap: Clear driver-provided PFNs from migration PFN array Leo Li <sunpeng.li(a)amd.com> drm/amd/display: Fix missing DCE check in dm_gpureset_toggle_interrupts() Linmao Li <lilinmao(a)kylinos.cn> drm/vc4: Shut down BO cache timer before teardown Leo Li <sunpeng.li(a)amd.com> drm/amd/display: Fix flip-done timeouts on mode1 reset Alex Deucher <alexander.deucher(a)amd.com> drm/amdgpu: always emit the job vm fence Timur Kristóf <timur.kristof(a)gmail.com> drm/amdgpu: Print vmid, pasid and more task info in devcoredump Zhu Lingshan <lingshan.zhu(a)amd.com> drm/amdgpu: fix bo->pin leaking in amdgpu_bo_create_reserved Mario Limonciello <mario.limonciello(a)amd.com> drm/amdgpu: Disable PCIe dynamic speed switching on Ryzen Pinnacle Ridge Mario Limonciello <mario.limonciello(a)amd.com> drm/amd/display: Fix backlight max_brightness to match exported range Alessandro Rinaldi <ale(a)alerinaldi.it> drm/amd/display: Force PWM backlight on Lenovo Legion 5 15ARH05 Andriy Korud <a.korud(a)gmail.com> drm/amd/display: dce100: skip non-DP stream encoders for DP MST Leo Li <sunpeng.li(a)amd.com> drm/amd/display: consolidate DCN vblank/flip handling onto vupdate_no_lock WenTao Liang <vulab(a)iscas.ac.cn> drm/amd/display: set new_stream to NULL after release Timur Kristóf <timur.kristof(a)gmail.com> drm/amd/pm/ci: Don't disable MCLK DPM on Bonaire 0x6658 (R7 260X) Mario Limonciello <mario.limonciello(a)amd.com> drm/amd: Create a device link between APU display and XHCI devices Jesse Zhang <Jesse.Zhang(a)amd.com> drm/amdgpu/userq: fix indefinite fence wait during GPU reset Mario Limonciello <mario.limonciello(a)amd.com> drm/amdgpu: Fix VFCT bus number matching with soft filter Mario Limonciello <mario.limonciello(a)amd.com> drm/amdgpu: Release VFCT ACPI table reference Osama Abdelkader <osama.abdelkader(a)gmail.com> drm/panthor: return error on truncated firmware Matthew Brost <matthew.brost(a)intel.com> drm/ttm: Account for NULL and handle pages in ttm_pool_backup Honglei Huang <honghuan(a)amd.com> drm/gpusvm: publish dpagemap early to avoid device mapping leak on error Jason Macnak <natsu(a)google.com> drm/virtio: Don't detach GEM from a non-created context Alex Deucher <alexander.deucher(a)amd.com> drm/gfx10: Program DB_RING_CONTROL Yang Wang <kevinyang.wang(a)amd.com> drm/amd/pm: fix smu14 power limit range calculation Jani Nikula <jani.nikula(a)intel.com> drm/i915/mst: limit DP MST ESI service loop Joonas Lahtinen <joonas.lahtinen(a)linux.intel.com> drm/i915/gt: Fix NULL deref on sched_engine alloc failure Joonas Lahtinen <joonas.lahtinen(a)linux.intel.com> drm/i915/gem: Fix NULL deref in I915_CONTEXT_PARAM_SSEU Joonas Lahtinen <joonas.lahtinen(a)linux.intel.com> drm/i915/gem: Do not leak siblings[] on proto context error Jesse Zhang <Jesse.Zhang(a)amd.com> drm/amdgpu: trigger GPU recovery when userq destroy fails to unmap a hung queue Shahyan Soltani <shahyan.soltani(a)amd.com> drm/amdgpu: fix lifetime issue of amdgpu_vm_get_task_info_pasid() Kenneth Feng <kenneth.feng(a)amd.com> drm/amd/amdgpu: disable ASPM on VI if pcie dpm is disabled Alex Deucher <alexander.deucher(a)amd.com> drm/amdgpu/gfx11: replace BUG_ON() with WARN_ON() Jakob Linke <jakob(a)linke.cx> drm/amdgpu/soc24: reset dGPU if suspend got aborted Jani Nikula <jani.nikula(a)intel.com> drm/i915/bios: range check LFP Data Block panel_type2 Joonas Lahtinen <joonas.lahtinen(a)linux.intel.com> drm/i915: Return NULL on error in active_instance Alex Deucher <alexander.deucher(a)amd.com> drm/amdgpu/sdma5.0: replace BUG_ON() with WARN_ON() Alex Deucher <alexander.deucher(a)amd.com> drm/amdgpu/sdma5.2: replace BUG_ON() with WARN_ON() Alex Deucher <alexander.deucher(a)amd.com> drm/amdgpu/sdma6.0: replace BUG_ON() with WARN_ON() Alex Deucher <alexander.deucher(a)amd.com> drm/amdgpu/sdma7.0: replace BUG_ON() with WARN_ON() Prike Liang <Prike.Liang(a)amd.com> drm/amdgpu: add the doorbell index input for suspending userq Jani Nikula <jani.nikula(a)intel.com> drm/i915/hdcp: check streams[] bounds before overflow Jani Nikula <jani.nikula(a)intel.com> drm/i915/hdcp: require monotonically increasing seq_num_v Jani Nikula <jani.nikula(a)intel.com> drm/i915/vrr: require valid min/max vfreq for VRR Bryam Vargas <hexlabsecurity(a)proton.me> drm/virtio: bound EDID block reads to the response buffer Leo Li <sunpeng.li(a)amd.com> Revert "drm/amd/display: Restore 5s vbl offdelay for NV3x+ DGPUs" WenTao Liang <vulab(a)iscas.ac.cn> drm/amd/display: detect_link_and_local_sink: DP alt mode timeout path leaks prev_sink reference Honglei Huang <honghuan(a)amd.com> drm/amd/display: use kvzalloc to allocate struct dc Thomas Zimmermann <tzimmermann(a)suse.de> drm/amd/display: Handle struct drm_plane_state.ignore_damage_clips Leorize <leorize+oss(a)disroot.org> drm/amd/display: set MSA MISC1 bit 6 when using VSC SDP for DCE 11.x Guangshuo Li <lgs201920130244(a)gmail.com> drm/amdkfd: free MQD managers on DQM init failures Yongqiang Sun <Yongqiang.Sun(a)amd.com> drm/amdkfd: fix 32-bit overflow in CWSR total size calculation David Francis <David.Francis(a)amd.com> drm/amdkfd: Check bounds on CRIU restore queue type and mqd size David Francis <David.Francis(a)amd.com> drm/amdkfd: Check bounds in allocate_event_notification_slot David Francis <David.Francis(a)amd.com> drm/amdkfd: Use kvcalloc to allocate arrays Xiaogang Chen <xiaogang.chen(a)amd.com> drm/amdkfd: Guard m->cp_hqd_eop_control setting by q->eop_ring_buffer_size Yongqiang Sun <Yongqiang.Sun(a)amd.com> drm/amdkfd: clamp v9 CRIU control stack checkpoint copy to BO size Icenowy Zheng <zhengxingda(a)iscas.ac.cn> drm/imagination: acquire vm_ctx->lock before mapping memory to GPU VM Luigi Santivetti <luigi.santivetti(a)imgtec.com> drm/imagination: fix error checking of pvr_vm_context_lookup() Shuvam Pandey <shuvampandey1(a)gmail.com> drm/imagination: Fix user array stride in pvr_set_uobj_array() Brajesh Gupta <brajesh.gupta(a)imgtec.com> drm/imagination: Fix double call to drm_sched_entity_fini() Arvind Yadav <arvind.yadav(a)intel.com> drm/xe/madvise: Skip invalidation for purgeable state updates Alexander Usyskin <alexander.usyskin(a)intel.com> drm/xe/nvm: fix writable override for CRI Zongyao Bai <zongyao.bai(a)intel.com> drm/xe/pt: Reset current_op in xe_pt_update_ops_init() Himal Prasad Ghimiray <himal.prasad.ghimiray(a)intel.com> drm/xe/vm: Fix BO prefetch with CONSULT_MEM_ADVISE_PREF_LOC Nitin Gote <nitin.r.gote(a)intel.com> drm/xe: Hold a dma-buf reference for imported BOs Matthew Brost <matthew.brost(a)intel.com> drm/xe: Fix PTE index in xe_vm_populate_pgtable() for chunked binds Ashutosh Dixit <ashutosh.dixit(a)intel.com> drm/xe/rtp: Add RING_FORCE_TO_NONPRIV_DENY to OA whitelists Ashutosh Dixit <ashutosh.dixit(a)intel.com> drm/xe/oa: Fix offset alignment for MERT WHITELIST_OA_MERT_MMIO_TRG Matthew Brost <matthew.brost(a)intel.com> drm/xe: Return error on non-migratable faults requiring devmem Matthew Auld <matthew.auld(a)intel.com> drm/xe/display: skip FORCE_WC and vm_bound check for external dma-bufs Pavel Ondračka <pavel.ondracka(a)gmail.com> drm/radeon: fix r100_copy_blit for large BOs Wentao Liang <vulab(a)iscas.ac.cn> drm/nouveau/acr: fix missing nvkm_done() in error path of nvkm_acr_oneinit() Imre Deak <imre.deak(a)intel.com> drm/i915/mtl+: Enable PPS before PLL Joonas Lahtinen <joonas.lahtinen(a)linux.intel.com> drm/i915/gem: Add missing nospec on parallel submit slot Jani Nikula <jani.nikula(a)intel.com> drm/displayid: fix Tiled Display Topology ID size Gerhard Schwanzer <geschw(a)pm.me> drm/amdkfd: Use exclusive bounds for SVM split alignment checks Timur Kristóf <timur.kristof(a)gmail.com> drm/amdgpu: Respect placement requirements in amdgpu_gtt_mgr functions Thomas Zimmermann <tzimmermann(a)suse.de> drm/sysfb: Return errno code from drm_sysfb_get_visible_size() Thomas Zimmermann <tzimmermann(a)suse.de> drm/sysfb: Avoid possible truncation with calculating visible size Junrui Luo <moonafterrain(a)outlook.com> drm/nouveau: fix reversed error cleanup order in ucopy functions Mario Limonciello <mario.limonciello(a)amd.com> drm/amdgpu: validate CP_GFX_SHADOW chunk size in CS pass1 Tvrtko Ursulin <tvrtko.ursulin(a)igalia.com> drm/amdgpu: Fix context pstate override handling Timur Kristóf <timur.kristof(a)gmail.com> drm/amdgpu: Fix amdgpu_bo_move() when old_mem and new_mem are both GTT Jiqian Chen <Jiqian.Chen(a)amd.com> drm/amdgpu/gfx9: Fix Ring and IB test fail after mode2 Ivan Lipski <ivan.lipski(a)amd.com> drm/amd/display: Restore periodic detection for DCN35 Brian Nguyen <brian3.nguyen(a)intel.com> drm/xe: Add compact-PT and addr mask handling for page reclaim Tejas Upadhyay <tejas.upadhyay(a)intel.com> drm/xe/guc: Fix buffer overflow in steered register list allocation Thomas Zimmermann <tzimmermann(a)suse.de> drm/sysfb: Avoid truncating maximum stride Thomas Zimmermann <tzimmermann(a)suse.de> drm/sysfb: Do not page-align visible size of the framebuffer Mario Limonciello <mario.limonciello(a)amd.com> drm/amdgpu: check amdgpu_vm_bo_find() result in GET_MAPPING_INFO Timur Kristóf <timur.kristof(a)gmail.com> drm/amdgpu/uvd: Place VCPU BO only in VRAM for UVD 4.x and older Timur Kristóf <timur.kristof(a)gmail.com> drm/amdgpu/uvd: Fix forcing MSG, FB BOs into VCPU segment when it isn't at 0 (v2) Asad Kamal <asad.kamal(a)amd.com> drm/amdgpu/gfx: fix cleaner shader IB buffer overflow Shubhankar Milind Sardeshpande <Shubhankar.MilindSardeshpande(a)amd.com> drm/amd/pm: re-enable MC access after PrepareMp1ForUnload on SMU V15 APUs Ville Syrjälä <ville.syrjala(a)linux.intel.com> drm/i915/cdclk: Fix up CDCLK_FREQ_DECIMAL without a full PLL re-enable Ashutosh Desai <ashutoshdesai993(a)gmail.com> drm/dp/mst: fix OOB reads on 2-byte fields in sideband reply parsers Alessio Belle <alessio.belle(a)imgtec.com> drm/imagination: Fit paired fragment job in the correct CCCB Thomas Zimmermann <tzimmermann(a)suse.de> drm/tegra: fbdev: Remove offset into framebuffer memory Ashutosh Desai <ashutoshdesai993(a)gmail.com> drm/dp/mst: fix buffer overflows in sideband chunk accumulation Ashutosh Desai <ashutoshdesai993(a)gmail.com> drm/dp/mst: fix OOB reads in remote DPCD/I2C sideband reply parsers Thomas Zimmermann <tzimmermann(a)suse.de> drm/exynos: fbdev: Remove offset into screen_buffer Vitor Soares <vitor.soares(a)toradex.com> drm/bridge: cdns-dsi: Replace deprecated UNIVERSAL_DEV_PM_OPS() Alessio Belle <alessio.belle(a)imgtec.com> drm/imagination: Count paired job fence as dependency in prepare_job() Chen Ni <nichen(a)iscas.ac.cn> drm/rockchip: analogix_dp: Add missing error check for platform_get_resource() Sergey Shtylyov <s.shtylyov(a)auroraos.dev> drm/rockchip: cdn-dp: add missing check in cdn_dp_config_video() Tomi Valkeinen <tomi.valkeinen(a)ideasonboard.com> drm/tidss: Fix missing drm_bridge_add() call Biju Das <biju.das.jz(a)bp.renesas.com> drm: renesas: rzg2l_mipi_dsi: Move rzg2l_mipi_dsi_set_display_timing() Biju Das <biju.das.jz(a)bp.renesas.com> drm: renesas: rzg2l_mipi_dsi: Increase reset deassertion delay David Carlier <devnexen(a)gmail.com> tracing: Fix use-after-free freeing trigger private data Chengfeng Ye <nicoyip.dev(a)gmail.com> bpf, sockmap: Fix cork use-after-free in tcp_bpf_sendmsg() Pu Lehui <pulehui(a)huawei.com> LoongArch: BPF: Fix memory leak in bpf_jit_free() Mateusz Guzik <mjguzik(a)gmail.com> pidfs: make pidfs_ino_lock static Eric Dumazet <edumazet(a)google.com> drop_monitor: perform u64_stats updates under IRQ-disabled section Eric Dumazet <edumazet(a)google.com> drop_monitor: fix size calculations for 64-bit attributes Yehyeong Lee <yhlee(a)isslab.korea.ac.kr> net: drop_monitor: fix info leak in NET_DM_ATTR_PAYLOAD Vikas Gupta <vikas.gupta(a)broadcom.com> bnge/bng_re: fix ring ID widths Cen Zhang (Microsoft) <blbllhy(a)gmail.com> tipc: fix integer overflow in tipc_recvmsg() and tipc_recvstream() Lorenzo Bianconi <lorenzo(a)kernel.org> net: airoha: fix ETS channel derivation in airoha_tc_setup_qdisc_ets() Minhong He <heminhong(a)kylinos.cn> mctp: check register_netdevice_notifier() error in mctp_device_init() Clark Wang <xiaoning.wang(a)nxp.com> ptp: netc: explicitly clear TMR_OFF during initialization Cen Zhang (Microsoft) <blbllhy(a)gmail.com> rds: tcp: unregister sysctl before tearing down listen socket Nikola Z. Ivanov <zlatistiv(a)gmail.com> ipv6: Change allocation flags to match rcu_read_lock section requirements Emil Tantilov <emil.s.tantilov(a)intel.com> idpf: fix max_vport related crash on allocation error during init Paul Greenwalt <paul.greenwalt(a)intel.com> ice: prevent tstamp ring allocation for non-PF VSI types Marcin Szycik <marcin.szycik(a)linux.intel.com> ice: fix LAG recipe to profile association Vincent Chen <vincent.chen(a)sifive.com> ice: allow creating VFs when !CONFIG_ICE_SWITCHDEV Li RongQing <lirongqing(a)baidu.com> net: ipv6: fix dif and sdif mismatch in raw6_icmp_error Hariprasad Kelam <hkelam(a)marvell.com> octeontx2-pf: tc: fix egress ratelimiting Alexei Lazar <alazar(a)nvidia.com> net/mlx5e: Reject unsupported CB Shaper TSA in ETS validation Alexei Lazar <alazar(a)nvidia.com> net/mlx5e: Report zero bandwidth for non-ETS traffic classes Yael Chemla <ychemla(a)nvidia.com> net/mlx5: E-Switch, fix zero num_dest in prio_tag egress vlan rule Gal Pressman <gal(a)nvidia.com> net/mlx5: Fix MCIA register buffer overflow on 32 dword reads Runyu Xiao <runyu.xiao(a)seu.edu.cn> raw: annotate lockless match fields in raw_v4_match() Aldo Ariel Panzardo <qwe.aldo(a)gmail.com> net: qrtr: restrict socket creation to the initial network namespace Nicholas Dudar <main.kalliope(a)gmail.com> LoongArch: BPF: Zero-extend signed ALU32 div/mod results Chenguang Zhao <zhaochenguang(a)kylinos.cn> hinic: remove unused ethtool RSS user configuration buffers Eric Dumazet <edumazet(a)google.com> ppp: annotate data races in ppp_generic Eric Dumazet <edumazet(a)google.com> ipv4: icmp: fill flow parameters in icmp_route_lookup decoy lookup Suman Ghosh <sumang(a)marvell.com> octeontx2-vf: set TC flower flag on MCAM entry allocation Kuniyuki Iwashima <kuniyu(a)google.com> mpls: Set rt->rt_nhn just before returning from mpls_nh_build_multi(). Yun Zhou <yun.zhou(a)windriver.com> net: gre: fix lltx regression for GRE tunnels with SEQ/CSUM vadik likholetov <vadikas(a)gmail.com> net: stmmac: enable the MAC on link up for all supported speeds Nazim Amirul <muhammad.nazim.amirul.nazle.asmade(a)altera.com> net: stmmac: reset residual action in L3L4 filters on delete Nazim Amirul <muhammad.nazim.amirul.nazle.asmade(a)altera.com> net: stmmac: fix l3l4 filter rejecting unsupported offload requests Nazim Amirul <muhammad.nazim.amirul.nazle.asmade(a)altera.com> net: stmmac: xgmac: fix l4 filter port overwrite on register update Xiang Mei (Microsoft) <xmei5(a)asu.edu> bpf: tcp: fix double sock release on batch realloc José Expósito <jose.exposito(a)redhat.com> drm/tests: shmem: Set DMA mask to 64-bit in drm_gem_shmem Cen Zhang (Microsoft) <blbllhy(a)gmail.com> tipc: fix u16 MTU truncation in media and bearer MTU validation Zhang Yi <yi.zhang(a)huawei.com> iomap: fix incorrect did_zero setting in iomap_zero_iter() Zhang Yi <yi.zhang(a)huawei.com> iomap: correct the range of a partial dirty clear Shuicheng Lin <shuicheng.lin(a)intel.com> drm/xe/vm: Fix SVM leak on resv obj alloc failure in xe_vm_create() Raag Jadav <raag.jadav(a)intel.com> drm/xe/i2c: Allow per domain unique id Harshaka Narayana <harshaka.narayana(a)broadcom.com> vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets Qing Luo <luoqing(a)kylinos.cn> sctp: auth: verify auth requirement when auth_chunk is NULL Luis Lang <luis.la(a)mail.de> net: stmmac: dwmac4: mask interrupts when stopping DMA in suspend Michael Walle <mwalle(a)kernel.org> net: dpaa: fix mode setting Chuyi Zhou <zhouchuyi(a)bytedance.com> smp: Make CSD lock acquisition atomic for debug mode Chuyi Zhou <zhouchuyi(a)bytedance.com> smp: Avoid invalid per-CPU CSD lookup with CSD lock debug Eric Dumazet <edumazet(a)google.com> net: hsr: fix memory leak on slave unregistration by removing synced VLANs Nikolay Aleksandrov <razor(a)blackwall.org> net: bridge: vlan: fix vlan range dumps starting with pvid Michael Bommarito <michael.bommarito(a)gmail.com> amt: make the head writable before rewriting the L2 header Michael Bommarito <michael.bommarito(a)gmail.com> amt: re-read skb header pointers after every pull Amir Goldstein <amir73il(a)gmail.com> ovl: check access to copy_file_range source with src mounter creds Gregor Herburger <gregor.herburger(a)linutronix.de> drm/vc4: hvs/v3d: Fix null dereference in unbind Julian Braha <julianbraha(a)gmail.com> drm/panel: fix unmet dependency bug for DRM_PANEL_HIMAX_HX83121A Julian Braha <julianbraha(a)gmail.com> drm/panel: s6e3ha8: fix unmet dependency on DRM_DISPLAY_HELPER Julian Braha <julianbraha(a)gmail.com> drm/panel: ilitek-ili9882t: fix unmet dependency for DRM_PANEL_ILITEK_ILI9882T Yichong Chen <chenyichong(a)uniontech.com> ovl: fix trusted xattr escape prefix matching Shelley Yang <shelley.yang(a)infineon.com> wifi: brcmfmac: fix 802.1X-SHA256 call trace warning Satyanarayana K V P <satyanarayana.k.v.p(a)intel.com> drm/xe/vf: Add drm_dev guards when detaching CCS read/write buffers Lorenzo Bianconi <lorenzo(a)kernel.org> wifi: mt76: mt7996: fix possible NULL-pointer deref in mt7996_mcu_sta_bfer_eht() Sean Wang <sean.wang(a)mediatek.com> wifi: mt76: mt7925: fix crash in reset link replay Arnd Bergmann <arnd(a)arndb.de> wifi: mt76: fix airoha_npu dependency tracking Lorenzo Bianconi <lorenzo(a)kernel.org> wifi: mt76: mt7996: check pointer returned by mt76_connac_get_he_phy_cap() Lorenzo Bianconi <lorenzo(a)kernel.org> wifi: mt76: mt7925: fix possible NULL-pointer deref in mt7925_mcu_bss_he_tlv() Lorenzo Bianconi <lorenzo(a)kernel.org> wifi: mt76: connac: fix possible NULL-pointer deref in mt76_connac_mcu_uni_bss_he_tlv() Ruoyu Wang <ruoyuw560(a)gmail.com> wifi: mt76: mt7915: guard HE capability lookups Guangshuo Li <lgs201920130244(a)gmail.com> wifi: mt76: mt7925: guard link STA in decap offload Eric Dumazet <edumazet(a)google.com> ppp: annotate concurrent dev->stats accesses Frank Sorenson <sorenson(a)redhat.com> cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths Frank Sorenson <sorenson(a)redhat.com> cifs: prevent readdir from changing file size due to stale directory metadata Helen Koike <koike(a)igalia.com> tipc: fix infinite loop in __tipc_nl_compat_dumpit Xiang Mei (Microsoft) <xmei5(a)asu.edu> nexthop: initialize extack in nh_res_bucket_migrate() Xiang Mei (Microsoft) <xmei5(a)asu.edu> gtp: check skb_pull_data() return in gtp1u_send_echo_resp() Willem de Bruijn <willemb(a)google.com> selftests: drv-net: convert so_txtime to drv-net Matthieu Baerts (NGI0) <matttbe(a)kernel.org> selftests: drv-net: increase timeout Matthieu Baerts (NGI0) <matttbe(a)kernel.org> selftests: ovpn: increase timeout Matthieu Baerts (NGI0) <matttbe(a)kernel.org> selftests: ovpn: add IPV6 and VETH configs Matthieu Baerts (NGI0) <matttbe(a)kernel.org> selftests: openvswitch: add config file Matthieu Baerts (NGI0) <matttbe(a)kernel.org> selftests: af_unix: add USER_NS config Rishikesh Jethwani <rjethwani(a)purestorage.com> tls: device: push pending open record on splice EOF Myeonghun Pak <mhun512(a)gmail.com> net: mctp i3c: clean up notifier and buses if driver register fails Cen Zhang (Microsoft) <blbllhy(a)gmail.com> sctp: validate stream count in sctp_process_strreset_inreq() Rob Herring (Arm) <robh(a)kernel.org> accel: ethosu: Handle U85 internal chaining buffer Rob Herring (Arm) <robh(a)kernel.org> accel: ethosu: Fix element size accounting for cmd stream validation Nikhil P. Rao <nikhil.rao(a)amd.com> pds_core: check for workqueue allocation failure Nikhil P. Rao <nikhil.rao(a)amd.com> pds_core: fix auxiliary device add/del races Nikhil P. Rao <nikhil.rao(a)amd.com> pds_core: order completion reads after the ownership check Nikhil P. Rao <nikhil.rao(a)amd.com> pds_core: yield the CPU while waiting for the adminq to drain Nikhil P. Rao <nikhil.rao(a)amd.com> pds_core: fix use-after-free on workqueue during remove Nikhil P. Rao <nikhil.rao(a)amd.com> pds_core: fix deadlock between reset thread and remove HanQuan <eilaimemedsnaimel(a)gmail.com> sctp: fix auth_chunk_list capacity check in sctp_auth_ep_add_chunkid Chenguang Zhao <zhaochenguang(a)kylinos.cn> net: txgbe: fix FDIR filter leak on remove Ilia Gavrilov <Ilia.Gavrilov(a)infotecs.ru> rds: Fix inet6_addr_lst NULL dereference when IPv6 is disabled Chenguang Zhao <zhaochenguang(a)kylinos.cn> net: txgbe: fix heap overflow when reading module EEPROM Weiming Shi <bestswngs(a)gmail.com> tipc: serialize udp bearer replicast list updates Antoine Tenart <atenart(a)kernel.org> geneve: ensure the skb is writable before fixing its headers Antoine Tenart <atenart(a)kernel.org> geneve: fix hint header definition wrt endianness Kuniyuki Iwashima <kuniyu(a)google.com> net: Call net_enable_timestamp() before failure in sk_clone(). Kuniyuki Iwashima <kuniyu(a)google.com> soreuseport: Clear sk_reuseport_cb before failure in sk_clone(). Prashanth Kumar KR <PrashanthKumar.K.R(a)amd.com> amd-xgbe: fix MAC_AUTO_SW handling in CL37 AN Richard Cheng <icheng(a)nvidia.com> arm64/mm: Check the requested PFN range during memory removal Steven Price <steven.price(a)arm.com> arm64: Correct value returned by ESR_ELx_FSC_ADDRSZ_nL() Nikhil P. Rao <nikhil.rao(a)amd.com> pds_core: reject component parameter in legacy firmware update Andrew Pope <andrew.pope(a)morsemicro.com> wifi: mac80211: recalculate TIM when a station enters power save Li RongQing <lirongqing(a)baidu.com> iommu/intel: Fix out-of-bounds memset in dmar_latency_disable() Pengpeng Hou <pengpeng(a)iscas.ac.cn> iommu/amd: Bound the early ACPI HID map HE WEI (ギカク) <skyexpoc(a)gmail.com> wifi: mwifiex: bound uAP association event IEs to the event buffer Benjamin Berg <benjamin.berg(a)intel.com> wifi: mac80211: copy aggregation information Enrico Zanda <enrico.zanda(a)arm.com> vhost-net: fix TX stall when vhost owns virtio-net header Ruoyu Wang <ruoyuw560(a)gmail.com> wan: wanxl: Only reset hardware after BAR mapping Ruoyu Wang <ruoyuw560(a)gmail.com> nfp: Check resource mutex allocation Xiang Mei <xmei5(a)asu.edu> wifi: mac80211: tear down new links on vif update error path Guanghui Feng <guanghuifeng(a)linux.alibaba.com> iommu/amd: Wait for completion instead of returning early in iommu_completion_wait() Wayen Yan <win847(a)gmail.com> net: airoha: Fix DMA direction for NPU mailbox buffer Guangshuo Li <lgs201920130244(a)gmail.com> dpaa2-eth: put MAC endpoint device on disconnect Wayen Yan <win847(a)gmail.com> net: airoha: Fix potential use-after-free in airoha_ppe_deinit() Guangshuo Li <lgs201920130244(a)gmail.com> dpaa2-switch: put MAC endpoint device on disconnect Xuanqiang Luo <luoxuanqiang(a)kylinos.cn> rxrpc: fix io_thread race in rxrpc_wake_up_io_thread() Zhixing Chen <running910(a)gmail.com> gtp: parse extension headers before reading inner protocol Aldo Ariel Panzardo <qwe.aldo(a)gmail.com> rds: drop incoming messages that cross network namespace boundaries Zhaolong Zhang <zhangzl68(a)chinatelecom.cn> bonding: fix devconf_all NULL dereference when IPv6 is disabled Jamal Hadi Salim <jhs(a)mojatatu.com> net/sched: Handle TC_ACT_REDIRECT from qdisc filter chains Daniel Borkmann <daniel(a)iogearbox.net> bpf: Reject redirect helpers without a bpf_net_context David Lee <david.lee(a)trailofbits.com> net/packet: avoid fanout hook re-registration after unregister Danielle Ratson <danieller(a)nvidia.com> netlink: specs: rt-link: convert bridge port flag attributes to u8 Ricardo B. Marlière <rbm(a)suse.com> selftests/net: Fix tun IPv6 test addresses to avoid 6to4 range Michael Walle <mwalle(a)kernel.org> net: phy: marvell: fix return code Pengpeng Hou <pengpeng(a)iscas.ac.cn> Bluetooth: btusb: validate Realtek vendor event length Daniel Golle <daniel(a)makrotopia.org> regulator: mt6358: use regmap helper to read fixed LDO calibration Pengpeng Hou <pengpeng(a)iscas.ac.cn> hwmon: occ: validate poll response sensor blocks Marco Baffo <marco(a)mandelbit.com> ovpn: use monotonic clock for peer keepalive timeouts Marco Baffo <marco(a)mandelbit.com> ovpn: fix use after free in unlock_ovpn() longlong yan <yanlonglong(a)kylinos.cn> selftests/net: ovpn: fix getaddrinfo memory leak in ovpn_parse_remote() Qing Ming <a0yami(a)mailbox.org> ovpn: avoid putting unrelated P2P peer on socket release Suraj Kandpal <suraj.kandpal(a)intel.com> drm/i915/backlight: Remove DP_EDP_BACKLIGHT_AUX_ENABLE_CAP check for DPCD backlight Yichong Chen <chenyichong(a)uniontech.com> smb: client: validate DFS referral PathConsumed Eugene Shalygin <eugene.shalygin(a)gmail.com> hwmon: (asus-ec-sensors) add missed handle for ENOMEM Eugene Shalygin <eugene.shalygin(a)gmail.com> hwmon: (asus-ec-sensors) fix EC read intervals Eugene Shalygin <eugene.shalygin(a)gmail.com> hwmon: (asus-ec-sensors) fix looping over banks while reading from EC Alexis Czezar Torreno <alexisczezar.torreno(a)analog.com> hwmon: (pmbus/max34440) block unsupported VIN and IIN limit registers Alexis Czezar Torreno <alexisczezar.torreno(a)analog.com> hwmon: (pmbus/max34440): add support adpm12250 Uwe Kleine-König (The Capable Hub) <u.kleine-koenig(a)baylibre.com> hwmon: Use named initializers for arrays of i2c_device_data Uwe Kleine-König (The Capable Hub) <u.kleine-koenig(a)baylibre.com> hwmon: Drop unused i2c driver_data Mostafa Saleh <smostafa(a)google.com> drivers/virt: pkvm: Fix end calculation in mmio_guard_ioremap_hook() Diego Fernando Mancera Gomez <diegomancera.dev(a)gmail.com> usb: atm: ueagle-atm: reject descriptors that confuse probe and disconnect Shahar Tzarfati <shahar.tzarfati(a)intel.com> wifi: iwlwifi: mvm: fix read in wake packet notification handler Emmanuel Grumbach <emmanuel.grumbach(a)intel.com> wifi: iwlwifi: validate payload length in iwl_pnvm_complete_fn Emmanuel Grumbach <emmanuel.grumbach(a)intel.com> wifi: iwlwifi: fix pointer arithmetic in iwl_add_mcc_to_tas_block_list Pagadala Yesu Anjaneyulu <pagadala.yesu.anjaneyulu(a)intel.com> wifi: iwlwifi: mvm: validate SAR GEO response payload size Richard Fitzgerald <rf(a)opensource.cirrus.com> ASoC: cs35l56: Use complete_all() to signal init_completion Richard Fitzgerald <rf(a)opensource.cirrus.com> ASoC: cs35l56: Fix potential probe() deadlock Guangshuo Li <lgs201920130244(a)gmail.com> arm_mpam: guard MBWU state before adding it to garbage Fenghua Yu <fenghuay(a)nvidia.com> arm_mpam: Fix MPAMCFG_MBW_PBM register setting Ben Horgan <ben.horgan(a)arm.com> arm_mpam: Fix software reset values of MPAMCFG_PRI Shengjiu Wang <shengjiu.wang(a)nxp.com> ASoC: bt-sco: fix duplicate DAPM widget names for wideband DAI Guangshuo Li <lgs201920130244(a)gmail.com> ALSA: hda: cs35l41: validate and free ACPI mute object Tycho Andersen (AMD) <tycho(a)kernel.org> iommu/amd: Fix nested domain leak Tycho Andersen (AMD) <tycho(a)kernel.org> iommu/amd: Fix IRQ unsafe locking in gdom allocation Chen-Yu Tsai <wens(a)kernel.org> ASoC: sun4i-codec: Set quirks.playback_only for H616 codec Pengpeng Hou <pengpeng(a)iscas.ac.cn> ASoC: tas2781: bound firmware description string parsing Guanghui Yang <3497809730(a)qq.com> btrfs: free mapping node on duplicate reloc root insert Leo Martins <loemra.dev(a)gmail.com> btrfs: don't propagate EXTENT_FLAG_LOGGING to split extent maps Dave Chen <davechen(a)synology.com> btrfs: fix u32 to s64 type conversion in dirty_metadata_bytes accounting You-Kai Zheng <ykzheng(a)synology.com> btrfs: declare btrfs_ioctl_search_args_v2::buf as __u8 Tristan Madani <tristan(a)talencesecurity.com> wifi: carl9170: fix buffer overflow in rx_stream failover path Tristan Madani <tristan(a)talencesecurity.com> wifi: carl9170: fix OOB read from off-by-two in TX status handler Tristan Madani <tristan(a)talencesecurity.com> wifi: carl9170: bound memcpy length in cmd callback to prevent OOB read Tristan Madani <tristan(a)talencesecurity.com> wifi: ath6kl: fix OOB read from firmware IE lengths in connect event Tristan Madani <tristan(a)talencesecurity.com> wifi: ath6kl: fix OOB read from firmware num_msg in TX complete handler Yingying Tang <yingying.tang(a)oss.qualcomm.com> wifi: ath12k: Fix low MLO RX throughput on WCN7850 Ruoyu Wang <ruoyuw560(a)gmail.com> firewire: net: Fix fragmented datagram reassembly Denis Benato <denis.benato(a)linux.dev> platform/x86: asus-wmi: temporarily revert to setting a charge limit Yousef Alhouseen <alhouseenyousef(a)gmail.com> platform/x86/intel/vsec: free ACPI discovery data on early errors Rosen Penev <rosenp(a)gmail.com> platform/x86/intel/vsec: allocate res with intel_vsec_dev Manivannan Sadhasivam <manivannan.sadhasivam(a)oss.qualcomm.com> wifi: ath12k: Flush the posted write after writing to PCIE_SOC_GLOBAL_RESET Manivannan Sadhasivam <manivannan.sadhasivam(a)oss.qualcomm.com> wifi: ath11k: Flush the posted write after writing to PCIE_SOC_GLOBAL_RESET Dmitry Morgun <d.morgun(a)ispras.ru> wifi: ath11k: fix potential buffer underflow in ath11k_hal_rx_msdu_list_get() Manikanta Pubbisetty <manikanta.pubbisetty(a)oss.qualcomm.com> wifi: ath10k: fix skb leak on incomplete msdu during rx pop Wayen Yan <win847(a)gmail.com> watchdog: airoha: Prevent division by zero when clock frequency is zero Tzung-Bi Shih <tzungbi(a)kernel.org> watchdog: pretimeout: Fix UAF in watchdog_unregister_governor() Guenter Roeck <linux(a)roeck-us.net> hwmon: (nzxt-kraken3) Stop device IO before calling hid_hw_stop Guenter Roeck <linux(a)roeck-us.net> hwmon: (nzxt-smart2) Stop device IO before calling hid_hw_stop Guenter Roeck <linux(a)roeck-us.net> hwmon: (gigabyte_waterforce) Stop device IO before calling hid_hw_stop Guenter Roeck <linux(a)roeck-us.net> hwmon: (corsair-cpro) Stop device IO before calling hid_hw_stop Edward Adam Davis <eadavis(a)qq.com> hwmon: (corsair-psu) Stop device IO before calling hid_hw_stop Gaole Zhang <gaole.zhang(a)oss.qualcomm.com> wifi: ath11k: fix NULL pointer dereference in ath11k_hal_srng_access_begin Cheng Yongkang <teel4res(a)gmail.com> wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request Rafael J. Wysocki <rafael.j.wysocki(a)intel.com> watchdog: ni903x_wdt: Check ACPI_COMPANION() against NULL Daniel Borkmann <daniel(a)iogearbox.net> selftests/bpf: Keep verifier_map_ptr exercising ops pointer access KP Singh <kpsingh(a)kernel.org> selftests/bpf: Adjust verifier_map_ptr for the map's excl field Xincheng Zhang <zhangxincheng(a)ultrarisc.com> usb: xhci-pci: Limit VIA VL805 DMA addressing to 36 bits Sasha Levin <sashal(a)kernel.org> Revert "drm/amd/display: Add missing kdoc for ALLM parameters" Xie Bo <xb(a)ultrarisc.com> RISC-V: KVM: Serialize virtual interrupt pending state updates Georgi Valkov <gvalkov(a)gmail.com> wifi: mwifiex: fix freeze for 60 seconds caused by request_firmware Timur Kristóf <timur.kristof(a)gmail.com> drm/amd/display: Add dp_skip_rbr flag for NUTMEG Timur Kristóf <timur.kristof(a)gmail.com> drm/amd/display: Fix preferred link rate for NUTMEG Ray Wu <ray.wu(a)amd.com> drm/amd/display: Fix ISM dc_lock deadlock during suspend Chia-Lin Kao (AceLan) <acelan.kao(a)canonical.com> usb: typec: ucsi: Add duplicate detection to nvidia registration path Chia-Lin Kao (AceLan) <acelan.kao(a)canonical.com> usb: typec: ucsi: Detect and skip duplicate altmodes from buggy firmware Chukun Pan <amadeus(a)jmu.edu.cn> USB: serial: option: add TDTECH MT5710-CN Johan Hovold <johan(a)kernel.org> USB: serial: keyspan_pda: fix data loss on receive throttling Sunho Park <shpark061104(a)gmail.com> USB: serial: io_edgeport: cap received transmit credits Tim Pambor <timpambor(a)gmail.com> USB: serial: ftdi_sio: add support for E+H FXA291 Muhammad Bilal <meatuni001(a)gmail.com> usb: gadget: uvc: clamp SEND_RESPONSE length to the response buffer Fan Wu <fanwu01(a)zju.edu.cn> usb: gadget: udc: bdc: free IRQ and drain func_wake_notify before teardown Cen Zhang <zzzccc427(a)gmail.com> usb: gadget: f_tcm: synchronize delayed set_alt with teardown Sonali Pradhan <sonalipradhan(a)google.com> usb: gadget: f_ncm: validate datagram bounds in ncm_unwrap_ntb() Johan Hovold <johan(a)kernel.org> USB: gadget: fsl-udc: fix dev_printk() device Johan Hovold <johan(a)kernel.org> USB: gadget: fsl-udc: fix device name leak on probe failure Johan Hovold <johan(a)kernel.org> USB: gadget: snps-udc: fix device name leak on probe failure Melbin K Mathew <mlbnkm1(a)gmail.com> usb: gadget: printer: fix infinite loop in printer_read() Fan Wu <fanwu01(a)zju.edu.cn> usb: gadget: f_midi: cancel pending IN work before freeing the midi object Jinchao Wang <wangjinchao600(a)gmail.com> usb: gadget: dummy_hcd: prevent fifo_req reuse during giveback Xu Yang <xu.yang_2(a)nxp.com> usb: chipidea: fix usage_count leak when autosuspend_delay is negative Huang Wei <huangwei(a)kylinos.cn> USB: storage: add NO_ATA_1X quirk for Longmai USB Key Guangshuo Li <lgs201920130244(a)gmail.com> usb: musb: omap2430: Do not put borrowed of_node in probe Chia-Lin Kao (AceLan) <acelan.kao(a)canonical.com> usb: core: port: Deattach Type-C connector on component unbind Huihui Huang <hhhuang(a)smu.edu.sg> wifi: at76c50x-usb: avoid length underflow in at76_guess_freq() Griffin Kroah-Hartman <griffin(a)kroah.com> usb: core: sysfs: add lock to bos_descriptors_read() Weiming Shi <bestswngs(a)gmail.com> mpls: fix NULL deref in mpls_valid_fib_dump_req() on CONFIG_INET=n Andre Carvalho <asantostc(a)gmail.com> selftests: netconsole: only restore MAC when it changed on resume Ruoyu Wang <ruoyuw560(a)gmail.com> bnxt_en: Handle partially initialized auxiliary devices Xin Long <lucien.xin(a)gmail.com> sctp: fix auth_hmacs array size in struct sctp_cookie Jamal Hadi Salim <jhs(a)mojatatu.com> net/sched: act_tunnel_key: Defer dst_release to RCU callback Ivan Vecera <ivecera(a)redhat.com> dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() Eric Dumazet <edumazet(a)google.com> tcp: fix TIME_WAIT socket reference leak on PSP policy failure Lizhi Hou <lizhi.hou(a)amd.com> accel/amdxdna: Fix use-after-free of mm_struct in job scheduler Emre Cecanpunar <emreleno(a)gmail.com> drm/i915/selftests: Fix GT PM sort comparators Vinod Govindapillai <vinod.govindapillai(a)intel.com> drm/i915/wm: clear the plane ddb_y entries on plane disable Xiang Mei (Microsoft) <xmei5(a)asu.edu> ksmbd: validate compound request size before reading StructureSize2 Qihang <q.h.hack.winter(a)gmail.com> ksmbd: pin conn during async oplock break notification Arvind Yadav <arvind.yadav(a)intel.com> drm/xe/guc: Hold device ref until queue teardown completes Arvind Yadav <arvind.yadav(a)intel.com> drm/xe/guc: Keep scheduler timeline name alive Tvrtko Ursulin <tvrtko.ursulin(a)igalia.com> drm/xe: Assign queue name in time for drm_sched_init Daniele Ceraolo Spurio <daniele.ceraolospurio(a)intel.com> drm/xe/wopcm: fix WOPCM size for LNL+ Matthew Brost <matthew.brost(a)intel.com> drm/xe/vf: Fix VF CCS attach/detach race with in-flight BO moves Shuhao Fu <sfual(a)cse.ust.hk> can: j1939: fix lockless local-destination check Mark Harris <mark.hsj(a)gmail.com> riscv: hwprobe: Avoid uninitialized read in hwprobe_get_cpus() Vasily Gorbik <gor(a)linux.ibm.com> s390/checksum: Fix csum_partial() without vector facility Linmao Li <lilinmao(a)kylinos.cn> drm/panthor: Check debugfs GEM lock initialization Michal Luczaj <mhal(a)rbox.co> bpf, sockmap: Reject unhashed UDP sockets on sockmap update Shrikanth Hegde <sshegde(a)linux.ibm.com> powerpc/vtime: Initialize starttime at boot for native accounting Frederic Weisbecker <frederic(a)kernel.org> powerpc/time: Prepare to stop elapsing in dynticks-idle Rosen Penev <rosenp(a)gmail.com> powerpc/85xx: Add fsl,ifc to common device ids Srikanth Boyapally <srikanth.boyapally(a)amd.com> spi: cadence-quadspi: Fix indirect write timeout when DMA read mode is enabled Oliver Hartkopp <socketcan(a)hartkopp.net> can: raw: add locking for raw flags bitfield Pengpeng Hou <pengpeng(a)iscas.ac.cn> drm/i915/gt: use correct selftest config symbol Rui Qi <qirui.001(a)bytedance.com> riscv: Gate FUNCTION_ALIGNMENT_4B on DYNAMIC_FTRACE Huiwen He <hehuiwen(a)kylinos.cn> smb/client: handle overlapping allocated ranges in fallocate Mikhail Gavrilov <mikhail.v.gavrilov(a)gmail.com> Bluetooth: mgmt: Translate HCI reason in Device Disconnected event Ruoyu Wang <ruoyuw560(a)gmail.com> Bluetooth: hci_qca: Clear memdump state on invalid dump size Pauli Virtanen <pav(a)iki.fi> Bluetooth: hci_sync: hold hdev->lock for hci_conn_params lookups Pauli Virtanen <pav(a)iki.fi> Bluetooth: mgmt: hold reference for hci_conn in mgmt_pending_cmds Pauli Virtanen <pav(a)iki.fi> Bluetooth: mgmt: fix locking in unpair_device/disconnect_sync Pauli Virtanen <pav(a)iki.fi> Bluetooth: hci_sync: extend conn_hash lookup critical sections Cen Zhang <zzzccc427(a)gmail.com> Bluetooth: MGMT: revalidate LOAD_CONN_PARAM queued update Xiang Mei <xmei5(a)asu.edu> Bluetooth: qca: fix NVM tag length underflow in TLV parser Takashi Iwai <tiwai(a)suse.de> ALSA: usb-audio: Skip DSD quirk for Musical Fidelity M6s DAC Karol Wachowski <karol.wachowski(a)linux.intel.com> accel/ivpu: Fix wrong register read in LNL failure diagnostics Rosen Penev <rosenp(a)gmail.com> ata: sata_dwc_460ex: fix infinite loop in NCQ tag completion bit-scanning Rosen Penev <rosenp(a)gmail.com> ata: sata_dwc_460ex: fix clear_interrupt_bit() clearing all pending interrupts Rosen Penev <rosenp(a)gmail.com> ata: sata_dwc_460ex: use platform_get_irq() Rosen Penev <rosenp(a)gmail.com> ata: sata_dwc_460ex: enable SATA interrupts only after IRQ handler is registered David Jeffery <djeffery(a)redhat.com> scsi: core: wake eh reliably when using scsi_schedule_eh Robert Mader <robert.mader(a)collabora.com> udmabuf: Ensure to perform cache synchronisation in begin_cpu_udmabuf() Bryam Vargas <hexlabsecurity(a)proton.me> net/iucv: take a reference on the socket found in afiucv_hs_rcv() Weiming Shi <bestswngs(a)gmail.com> ipv4: fib: free fib_alias with kfree_rcu() on insert error path Norbert Szetei <norbert(a)doyensec.com> ppp: defer channel free to an RCU grace period to fix pppol2tp RX UAF Tejun Heo <tj(a)kernel.org> sched_ext: Record an error on errno-only sub-enable failure Rafael J. Wysocki <rafael.j.wysocki(a)intel.com> cpufreq: Make cpufreq_update_pressure() fall back to cpuinfo.max_freq Matt Bobrowski <mattbobrowski(a)google.com> bpf: Fix UAF in sock clone early bailouts Pushpendra Singh <pushpendra.singh(a)oss.qualcomm.com> firmware: arm_scmi: Rate-limit queue-full warnings in IRQ context Uday Khare <udaykhare77(a)gmail.com> ASoC: tas2562: fix deprecated 'shut-down' GPIO always cleared after lookup Andrea Righi <arighi(a)nvidia.com> sched_ext: Enable tick for finite slices on nohz_full Charles Keepax <ckeepax(a)opensource.cirrus.com> ASoC: cs42l43: Correct report for forced microphone jack Gao Xiang <xiang(a)kernel.org> erofs: relax sanity check for tail pclusters due to ztailpacking Vijendar Mukunda <Vijendar.Mukunda(a)amd.com> ASoC: amd: ps: replace bitwise OR with logical OR in IRQ return check Vijendar Mukunda <Vijendar.Mukunda(a)amd.com> ASoC: amd: ps: fix wrong ACP version string in pci_request_regions() Vijendar Mukunda <Vijendar.Mukunda(a)amd.com> ASoC: amd: ps: disable MSI on resume in ACP PCI driver Christian Hewitt <christianshewitt(a)gmail.com> ASoC: meson: aiu: fifo-spdif: soft reset the S/PDIF datapath on start/stop Sebastian Ene <sebastianene(a)google.com> firmware: arm_ffa: Fix Endpoint Memory Access Descriptor offset calculation Mostafa Saleh <smostafa(a)google.com> firmware: arm_ffa: Fix out-of-bound writes in ffa_setup_and_transmit() HE WEI (ギカク) <skyexpoc(a)gmail.com> wifi: cfg80211: bound element ID read when checking non-inheritance Runyu Xiao <runyu.xiao(a)seu.edu.cn> wifi: brcmfmac: initialize SDIO data work before cleanup Cen Zhang <zzzccc427(a)gmail.com> wifi: cfg80211: use wiphy work for socket owner autodisconnect Cen Zhang <zzzccc427(a)gmail.com> wifi: mac80211: free AP_VLAN bc_buf SKBs outside IRQ lock Syed Saba Kareem <Syed.SabaKareem(a)amd.com> ASoC: amd: acp: Fix linker error with SDCA quirks Zhao Li <enderaoelyther(a)gmail.com> wifi: mac80211: avoid non-S1G AID fallback for S1G assoc Zhao Li <enderaoelyther(a)gmail.com> wifi: cfg80211: reject empty PMSR peer lists Zhao Li <enderaoelyther(a)gmail.com> wifi: cfg80211: reject unsupported PMSR FTM location requests Zhao Li <enderaoelyther(a)gmail.com> wifi: cfg80211: validate PMSR FTM preamble range Zhao Li <enderaoelyther(a)gmail.com> wifi: cfg80211: validate PMSR measurement type data Zhao Li <enderaoelyther(a)gmail.com> wifi: nl80211: constrain MBSSID TX link ID range Zhao Li <enderaoelyther(a)gmail.com> wifi: nl80211: validate nested MBSSID IE blobs Zhao Li <enderaoelyther(a)gmail.com> wifi: cfg80211: derive S1G beacon TSF from S1G fields Zhao Li <enderaoelyther(a)gmail.com> wifi: nl80211: free RNR data on MBSSID mismatch Peddolla Harshavardhan Reddy <peddolla.reddy(a)oss.qualcomm.com> wifi: cfg80211: convert pmsr_free_wk to wiphy_work to fix deadlock Xiang Mei <xmei5(a)asu.edu> wifi: p54: validate RX frame length in p54_rx_eeprom_readback() Maoyi Xie <maoyixie.tju(a)gmail.com> wifi: mac80211: defer link RX stats percpu free to RCU Dawei Feng <dawei.feng(a)seu.edu.cn> wifi: libertas: fix memory leak in helper_firmware_cb() Xiang Mei <xmei5(a)asu.edu> wifi: mac80211: fix fils_discovery double free on alloc failure Xiang Mei <xmei5(a)asu.edu> wifi: mac80211: fix unsol_bcast_probe_resp double free on alloc failure Bryam Vargas <hexlabsecurity(a)proton.me> wifi: mac80211_hwsim: clamp virtio RX length before skb_put Christophe JAILLET <christophe.jaillet(a)wanadoo.fr> wifi: cfg80211: Fix an error handling path in cfg80211_wext_siwscan() Abdun Nihaal <nihaal(a)cse.iitm.ac.in> wifi: ipw2100: fix potential memory leak in ipw2100_pci_init_one() Cen Zhang <zzzccc427(a)gmail.com> wifi: cfg80211: cancel sched scan results work on unregister Rong Zhang <i(a)rong.moe> ALSA: usb-audio: Fix imbalance per-channel volume of sticky mixers Arnd Bergmann <arnd(a)arndb.de> wifi: mac80211: allocate backup ieee80211_nan_sched_cfg off stack Xiang Mei (Microsoft) <xmei5(a)asu.edu> xfrm: policy: preallocate inexact bins before xfrm_hash_rebuild reinsert Xiang Mei (Microsoft) <xmei5(a)asu.edu> xfrm6: clear dst.dev on error to avoid double netdev_put in xfrm6_fill_dst() Chen YanJun <moomichen(a)tencent.com> xfrm: iptfs: propagate SKBFL_SHARED_FRAG in iptfs_skb_add_frags() Cen Zhang <zzzccc427(a)gmail.com> xfrm: clear mode callbacks after failed mode setup Aleksandrova Alyona <aga(a)itb.spb.ru> RDMA/irdma: Prevent overflows in memory contiguity checks Malaya Kumar Rout <malayarout91(a)gmail.com> selftests/alsa: Fix memory leak in find_controls error path Xue Lei <Xue.Lei(a)windriver.com> mtd: fix double free and WARN_ON in add_mtd_device() error paths Ruoyu Wang <ruoyuw560(a)gmail.com> RDMA/siw: publish QP after initialization Danila Chernetsov <listdansp(a)mail.ru> RDMA/hns: Fix potential integer overflow in mhop hem cleanup Chenguang Zhao <zhaochenguang(a)kylinos.cn> RDMA/core: Fix memory leak in __ib_create_cq() on invalid cqe Ruoyu Wang <ruoyuw560(a)gmail.com> RDMA/mana_ib: initialize err for empty send WR lists Ruoyu Wang <ruoyuw560(a)gmail.com> RDMA/erdma: initialize ret for empty receive WR lists Jacob Moroni <jmoroni(a)google.com> RDMA/irdma: Prevent user-triggered null deref on QP create Jacob Moroni <jmoroni(a)google.com> RDMA/irdma: Remove redundant legacy_mode checks Jacob Moroni <jmoroni(a)google.com> RDMA/irdma: Prevent rereg_mr for non-mem regions Or Gerlitz <ogerlitz(a)ddn.com> RDMA/cma: Fix hardware address comparison length in netevent callback Antony Antony <antony.antony(a)secunet.com> xfrm: reject optional IPTFS templates in outbound policies Xiang Mei (Microsoft) <xmei5(a)asu.edu> xfrm: fix sk_dst_cache double-free in xfrm_user_policy() Yixun Lan <dlan(a)kernel.org> reset: spacemit: k3: fix USB2 ahb reset Tejun Heo <tj(a)kernel.org> sched_ext: Don't warn on core-sched forced idle in put_prev_task_scx() Unnathi Chalicheemala <unnathi.chalicheemala(a)oss.qualcomm.com> firmware: arm_ffa: Fix NULL dereference in ffa_partition_info_get() Boris Burkov <boris(a)bur.io> btrfs: fallback to transaction csum tree on a commit root csum miss Filipe Manana <fdmanana(a)suse.com> btrfs: fix root leak if its reloc root is unexpected in merge_reloc_roots() Xiang Mei <xmei5(a)asu.edu> btrfs: reject free space cache with more entries than pages Pengpeng Hou <pengpeng(a)iscas.ac.cn> mtd: nand: mtk-ecc: stop on ECC idle timeouts Pengpeng Hou <pengpeng(a)iscas.ac.cn> mtd: mtdswap: remove debugfs stats file on teardown Harshit Mogalapalli <harshit.m.mogalapalli(a)oracle.com> mtd: virt_concat: fix use-after-free in mtd_virt_concat_destroy() Harshit Mogalapalli <harshit.m.mogalapalli(a)oracle.com> mtd: virt_concat: fix use-after-free in mtd_virt_concat_destroy_joins() Michael Bommarito <michael.bommarito(a)gmail.com> IB/mad: Drop unmatched RMPP responses before reassembly Seth Forshee <sforshee(a)nvidia.com> firmware: arm_ffa: Respect firmware advertised RX/TX buffer size limits Petr Wozniak <petr.wozniak(a)gmail.com> xfrm: fix stale skb->prev after async crypto steals a GSO segment Petr Wozniak <petr.wozniak(a)gmail.com> xfrm: propagate -EINPROGRESS from validate_xmit_xfrm() Sumit Gupta <sumitg(a)nvidia.com> arm64: tegra: Fix CPU compatible string to cortex-a78ae on Tegra234 Tejun Heo <tj(a)kernel.org> sched_ext: Annotate ksyncs with __rcu in alloc/free_kick_syncs() Doehyun Baek <doehyunbaek(a)gmail.com> Docs/admin-guide/cgroup-v2: fix memory.stat doc details Akhil R <akhilrajeev(a)nvidia.com> arm64: tegra: Remove fallback compatible for GPCDMA Chuck Lever <chuck.lever(a)oracle.com> xprtrdma: Clear receive-side ownership pointers on release Mikko Perttunen <mperttunen(a)nvidia.com> crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin Mikko Perttunen <mperttunen(a)nvidia.com> gpu: host1x: Fix use-after-free in host1x_bo_clear_cached_mappings Phil Rosenthal <phil(a)phil.gs> KVM: x86/mmu: Fix use-after-free on vendor module reload Hyunwoo Kim <imv4bel(a)gmail.com> KVM: nVMX: Hide shadow VMCS right after VMCLEAR Venkatesh Srinivas <venkateshs(a)chromium.org> KVM: x86: Only reset TSC Deadline Timer in apic_timer_expired on KVM_RUN Sean Christopherson <seanjc(a)google.com> KVM: x86: Check for invalid/obsolete root *after* making MMU pages available Heiko Carstens <hca(a)linux.ibm.com> seqlock: Allow UBSAN_ALIGNMENT to fail optimizing Ryosuke Yasuoka <ryasuoka(a)redhat.com> drm/virtio: fix deadlock in display_info_cb by removing hotplug from dequeue worker Kuba Piecuch <jpiecuch(a)google.com> sched_ext: Skip ops.set_weight() for disabled tasks Guixiong Wei <weiguixiong(a)bytedance.com> platform/x86/intel-uncore-freq: Fix current_freq_khz after CPU hotplug ------------- Diffstat: Documentation/admin-guide/cgroup-v2.rst | 4 +- Documentation/hwmon/max34440.rst | 27 +- Documentation/netlink/specs/rt-link.yaml | 40 +- Makefile | 9 +- arch/arm64/boot/dts/nvidia/tegra234.dtsi | 24 +- arch/arm64/boot/dts/nvidia/tegra264.dtsi | 2 +- arch/arm64/include/asm/esr.h | 2 +- arch/arm64/mm/hugetlbpage.c | 2 +- arch/arm64/mm/mmu.c | 7 +- arch/loongarch/include/asm/asmmacro.h | 2 +- arch/loongarch/kernel/acpi.c | 27 +- arch/loongarch/kernel/kgdb.c | 3 +- arch/loongarch/kernel/machine_kexec.c | 5 +- arch/loongarch/kernel/rethook_trampoline.S | 18 +- arch/loongarch/kernel/setup.c | 3 +- arch/loongarch/kernel/smp.c | 4 +- arch/loongarch/mm/init.c | 5 +- arch/loongarch/net/bpf_jit.c | 9 +- arch/m68k/include/asm/page_mm.h | 2 + arch/powerpc/kernel/time.c | 43 +++ arch/powerpc/mm/mem.c | 5 +- arch/powerpc/platforms/85xx/common.c | 2 + arch/riscv/Kconfig | 2 +- arch/riscv/include/asm/kvm_host.h | 10 +- arch/riscv/kernel/sys_hwprobe.c | 1 + arch/riscv/kvm/aia.c | 35 +- arch/riscv/kvm/vcpu.c | 68 +++- arch/riscv/kvm/vcpu_onereg.c | 8 +- arch/riscv/mm/init.c | 5 +- arch/s390/lib/csum-partial.c | 2 +- arch/s390/mm/init.c | 5 +- arch/x86/boot/compressed/Makefile | 1 + arch/x86/kvm/lapic.c | 2 +- arch/x86/kvm/mmu/mmu.c | 11 +- arch/x86/kvm/mmu/paging_tmpl.h | 10 +- arch/x86/kvm/svm/svm.c | 7 +- arch/x86/kvm/vmx/nested.c | 11 +- arch/x86/mm/init_64.c | 5 +- drivers/accel/amdxdna/amdxdna_ctx.c | 4 + drivers/accel/ethosu/ethosu_gem.c | 54 ++- drivers/accel/ivpu/ivpu_hw_btrs.c | 2 +- drivers/android/binder/thread.rs | 14 +- drivers/ata/sata_dwc_460ex.c | 38 +- drivers/block/rbd.c | 7 +- drivers/block/ublk_drv.c | 47 ++- drivers/bluetooth/btqca.c | 2 +- drivers/bluetooth/btusb.c | 4 +- drivers/bluetooth/hci_qca.c | 4 + drivers/cdrom/cdrom.c | 1 + drivers/comedi/drivers/comedi_parport.c | 13 +- drivers/cpufreq/cpufreq.c | 3 + drivers/crypto/tegra/tegra-se-main.c | 3 +- drivers/dma-buf/udmabuf.c | 9 +- drivers/dpll/dpll_netlink.c | 3 + drivers/firewire/net.c | 37 +- drivers/firmware/arm_ffa/driver.c | 54 ++- drivers/firmware/arm_scmi/notify.c | 6 +- drivers/firmware/stratix10-svc.c | 19 +- drivers/gpu/drm/amd/amdgpu/amdgpu_acp.c | 13 +- drivers/gpu/drm/amd/amdgpu/amdgpu_bios.c | 62 ++- drivers/gpu/drm/amd/amdgpu/amdgpu_cs.c | 6 +- drivers/gpu/drm/amd/amdgpu/amdgpu_ctx.c | 73 ++-- drivers/gpu/drm/amd/amdgpu/amdgpu_dev_coredump.c | 7 +- drivers/gpu/drm/amd/amdgpu/amdgpu_dev_coredump.h | 1 + drivers/gpu/drm/amd/amdgpu/amdgpu_device.c | 14 +- drivers/gpu/drm/amd/amdgpu/amdgpu_gem.c | 6 + drivers/gpu/drm/amd/amdgpu/amdgpu_gfx.c | 10 +- drivers/gpu/drm/amd/amdgpu/amdgpu_gtt_mgr.c | 30 +- drivers/gpu/drm/amd/amdgpu/amdgpu_hmm.c | 3 +- drivers/gpu/drm/amd/amdgpu/amdgpu_mes.h | 2 + drivers/gpu/drm/amd/amdgpu/amdgpu_object.c | 13 +- drivers/gpu/drm/amd/amdgpu/amdgpu_ttm.c | 54 ++- drivers/gpu/drm/amd/amdgpu/amdgpu_userq.c | 34 +- drivers/gpu/drm/amd/amdgpu/amdgpu_uvd.c | 58 ++- drivers/gpu/drm/amd/amdgpu/amdgpu_vce.c | 17 +- drivers/gpu/drm/amd/amdgpu/amdgpu_vm.c | 35 +- drivers/gpu/drm/amd/amdgpu/gfx_v10_0.c | 22 +- drivers/gpu/drm/amd/amdgpu/gfx_v11_0.c | 56 +-- drivers/gpu/drm/amd/amdgpu/gfx_v12_0.c | 69 ++-- drivers/gpu/drm/amd/amdgpu/gfx_v12_1.c | 24 +- drivers/gpu/drm/amd/amdgpu/gfx_v8_0.c | 3 - drivers/gpu/drm/amd/amdgpu/gfx_v9_0.c | 49 ++- drivers/gpu/drm/amd/amdgpu/gfx_v9_4_3.c | 11 +- drivers/gpu/drm/amd/amdgpu/jpeg_v4_0_3.c | 2 +- drivers/gpu/drm/amd/amdgpu/jpeg_v5_0_1.c | 2 +- drivers/gpu/drm/amd/amdgpu/mes_v11_0.c | 2 + drivers/gpu/drm/amd/amdgpu/sdma_v4_4_2.c | 4 +- drivers/gpu/drm/amd/amdgpu/sdma_v5_0.c | 4 +- drivers/gpu/drm/amd/amdgpu/sdma_v5_2.c | 4 +- drivers/gpu/drm/amd/amdgpu/sdma_v6_0.c | 4 +- drivers/gpu/drm/amd/amdgpu/sdma_v7_0.c | 4 +- drivers/gpu/drm/amd/amdgpu/sdma_v7_1.c | 4 +- drivers/gpu/drm/amd/amdgpu/soc24.c | 28 ++ drivers/gpu/drm/amd/amdgpu/vcn_v4_0.c | 15 +- drivers/gpu/drm/amd/amdkfd/kfd_chardev.c | 12 +- .../gpu/drm/amd/amdkfd/kfd_device_queue_manager.c | 10 + .../gpu/drm/amd/amdkfd/kfd_device_queue_manager.h | 2 + drivers/gpu/drm/amd/amdkfd/kfd_events.c | 3 + drivers/gpu/drm/amd/amdkfd/kfd_mqd_manager.h | 1 + drivers/gpu/drm/amd/amdkfd/kfd_mqd_manager_v10.c | 4 +- drivers/gpu/drm/amd/amdkfd/kfd_mqd_manager_v11.c | 4 +- drivers/gpu/drm/amd/amdkfd/kfd_mqd_manager_v12.c | 4 +- drivers/gpu/drm/amd/amdkfd/kfd_mqd_manager_v12_1.c | 4 +- drivers/gpu/drm/amd/amdkfd/kfd_mqd_manager_v9.c | 25 +- drivers/gpu/drm/amd/amdkfd/kfd_mqd_manager_vi.c | 4 +- drivers/gpu/drm/amd/amdkfd/kfd_priv.h | 3 +- .../gpu/drm/amd/amdkfd/kfd_process_queue_manager.c | 24 +- drivers/gpu/drm/amd/amdkfd/kfd_queue.c | 23 +- drivers/gpu/drm/amd/amdkfd/kfd_svm.c | 8 +- drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm.c | 417 +++++++++++---------- .../gpu/drm/amd/display/amdgpu_dm/amdgpu_dm_crtc.c | 81 ++-- .../gpu/drm/amd/display/amdgpu_dm/amdgpu_dm_ism.c | 56 ++- .../gpu/drm/amd/display/amdgpu_dm/amdgpu_dm_ism.h | 1 + .../amd/display/dc/clk_mgr/dcn31/dcn31_clk_mgr.c | 2 - .../amd/display/dc/clk_mgr/dcn314/dcn314_clk_mgr.c | 2 - .../amd/display/dc/clk_mgr/dcn32/dcn32_clk_mgr.c | 9 +- .../amd/display/dc/clk_mgr/dcn35/dcn35_clk_mgr.c | 11 +- drivers/gpu/drm/amd/display/dc/core/dc.c | 6 +- drivers/gpu/drm/amd/display/dc/dc.h | 2 + .../drm/amd/display/dc/dce/dce_stream_encoder.c | 15 +- .../drm/amd/display/dc/dce/dce_stream_encoder.h | 3 +- .../gpu/drm/amd/display/dc/link/link_detection.c | 7 +- .../display/dc/link/protocols/link_dp_capability.c | 6 +- .../display/dc/resource/dce100/dce100_resource.c | 7 +- .../amd/display/modules/info_packet/info_packet.c | 2 - drivers/gpu/drm/amd/include/mes_v11_api_def.h | 2 + drivers/gpu/drm/amd/pm/amdgpu_pm.c | 26 +- drivers/gpu/drm/amd/pm/powerplay/hwmgr/hwmgr.c | 7 +- drivers/gpu/drm/amd/pm/swsmu/amdgpu_smu.c | 12 + drivers/gpu/drm/amd/pm/swsmu/inc/amdgpu_smu.h | 12 +- .../gpu/drm/amd/pm/swsmu/smu13/smu_v13_0_0_ppt.c | 11 +- .../gpu/drm/amd/pm/swsmu/smu13/smu_v13_0_7_ppt.c | 15 +- .../gpu/drm/amd/pm/swsmu/smu14/smu_v14_0_0_ppt.c | 45 +++ .../gpu/drm/amd/pm/swsmu/smu14/smu_v14_0_2_ppt.c | 28 +- .../gpu/drm/amd/pm/swsmu/smu15/smu_v15_0_0_ppt.c | 7 +- drivers/gpu/drm/bridge/cadence/cdns-dsi-core.c | 11 +- drivers/gpu/drm/display/drm_dp_mst_topology.c | 36 +- drivers/gpu/drm/drm_connector.c | 12 +- drivers/gpu/drm/drm_displayid_internal.h | 2 +- drivers/gpu/drm/drm_gpusvm.c | 22 +- drivers/gpu/drm/drm_pagemap.c | 24 +- drivers/gpu/drm/drm_panel_backlight_quirks.c | 9 + drivers/gpu/drm/exynos/exynos_drm_fbdev.c | 6 +- drivers/gpu/drm/i915/display/intel_bios.c | 36 +- drivers/gpu/drm/i915/display/intel_cdclk.c | 41 +- drivers/gpu/drm/i915/display/intel_ddi.c | 11 +- drivers/gpu/drm/i915/display/intel_dp.c | 8 +- .../gpu/drm/i915/display/intel_dp_aux_backlight.c | 7 +- drivers/gpu/drm/i915/display/intel_hdcp.c | 12 +- drivers/gpu/drm/i915/display/intel_vrr.c | 4 + drivers/gpu/drm/i915/display/skl_watermark.c | 2 +- drivers/gpu/drm/i915/gem/i915_gem_context.c | 25 +- drivers/gpu/drm/i915/gt/intel_engine_user.c | 2 +- .../gpu/drm/i915/gt/intel_execlists_submission.c | 19 +- drivers/gpu/drm/i915/gt/selftest_gt_pm.c | 8 +- drivers/gpu/drm/i915/i915_active.c | 7 +- drivers/gpu/drm/imagination/pvr_context.c | 22 +- drivers/gpu/drm/imagination/pvr_drv.c | 13 +- drivers/gpu/drm/imagination/pvr_queue.c | 65 ++-- drivers/gpu/drm/imagination/pvr_queue.h | 2 +- drivers/gpu/drm/imagination/pvr_vm.c | 2 + drivers/gpu/drm/nouveau/nouveau_exec.c | 4 +- drivers/gpu/drm/nouveau/nouveau_uvmm.c | 4 +- drivers/gpu/drm/nouveau/nvkm/subdev/acr/base.c | 1 + drivers/gpu/drm/panel/Kconfig | 3 + drivers/gpu/drm/panthor/panthor_device.c | 5 +- drivers/gpu/drm/panthor/panthor_fw.c | 1 + drivers/gpu/drm/radeon/r100.c | 13 +- drivers/gpu/drm/renesas/rz-du/rzg2l_mipi_dsi.c | 18 +- drivers/gpu/drm/rockchip/analogix_dp-rockchip.c | 2 + drivers/gpu/drm/rockchip/cdn-dp-reg.c | 2 + drivers/gpu/drm/sysfb/drm_sysfb_helper.h | 2 +- drivers/gpu/drm/sysfb/drm_sysfb_screen_info.c | 13 +- drivers/gpu/drm/sysfb/efidrm.c | 7 +- drivers/gpu/drm/sysfb/vesadrm.c | 6 +- drivers/gpu/drm/tegra/fbdev.c | 8 +- drivers/gpu/drm/tests/drm_gem_shmem_test.c | 16 +- drivers/gpu/drm/tidss/tidss_encoder.c | 2 + drivers/gpu/drm/ttm/ttm_backup.c | 123 ++++-- drivers/gpu/drm/ttm/ttm_pool.c | 123 +++++- drivers/gpu/drm/ttm/ttm_pool_internal.h | 8 + drivers/gpu/drm/v3d/v3d_gem.c | 12 + drivers/gpu/drm/vc4/vc4_bo.c | 12 +- drivers/gpu/drm/vc4/vc4_hvs.c | 2 +- drivers/gpu/drm/vc4/vc4_v3d.c | 2 +- drivers/gpu/drm/virtio/virtgpu_gem.c | 14 +- drivers/gpu/drm/virtio/virtgpu_kms.c | 5 +- drivers/gpu/drm/virtio/virtgpu_vq.c | 6 +- drivers/gpu/drm/vmwgfx/vmwgfx_surface.c | 22 +- drivers/gpu/drm/xe/display/xe_display_bo.c | 3 +- drivers/gpu/drm/xe/display/xe_fb_pin.c | 3 +- drivers/gpu/drm/xe/regs/xe_gtt_defs.h | 6 +- drivers/gpu/drm/xe/xe_bo.c | 58 ++- drivers/gpu/drm/xe/xe_bo.h | 3 +- drivers/gpu/drm/xe/xe_bo_types.h | 2 + drivers/gpu/drm/xe/xe_device.c | 2 +- drivers/gpu/drm/xe/xe_device_types.h | 2 +- drivers/gpu/drm/xe/xe_dma_buf.c | 2 +- drivers/gpu/drm/xe/xe_guc_capture.c | 10 +- drivers/gpu/drm/xe/xe_guc_exec_queue_types.h | 5 + drivers/gpu/drm/xe/xe_guc_submit.c | 140 ++++--- drivers/gpu/drm/xe/xe_guc_types.h | 2 - drivers/gpu/drm/xe/xe_i2c.c | 5 +- drivers/gpu/drm/xe/xe_migrate.c | 21 +- drivers/gpu/drm/xe/xe_migrate.h | 4 +- drivers/gpu/drm/xe/xe_module.c | 49 +++ drivers/gpu/drm/xe/xe_module.h | 5 + drivers/gpu/drm/xe/xe_nvm.c | 9 +- drivers/gpu/drm/xe/xe_pci.c | 6 + drivers/gpu/drm/xe/xe_pt.c | 148 +++++--- drivers/gpu/drm/xe/xe_reg_whitelist.c | 10 +- drivers/gpu/drm/xe/xe_sriov_vf_ccs.c | 32 +- drivers/gpu/drm/xe/xe_sriov_vf_ccs.h | 3 +- drivers/gpu/drm/xe/xe_svm.c | 6 +- drivers/gpu/drm/xe/xe_vm.c | 33 +- drivers/gpu/drm/xe/xe_vm_madvise.c | 19 +- drivers/gpu/drm/xe/xe_wopcm.c | 15 +- drivers/gpu/host1x/bus.c | 4 +- drivers/hwmon/ad7414.c | 4 +- drivers/hwmon/ad7418.c | 6 +- drivers/hwmon/adc128d818.c | 2 +- drivers/hwmon/adm1025.c | 4 +- drivers/hwmon/adm1026.c | 2 +- drivers/hwmon/adm1029.c | 2 +- drivers/hwmon/adm1031.c | 4 +- drivers/hwmon/adm1177.c | 4 +- drivers/hwmon/adm9240.c | 6 +- drivers/hwmon/ads7828.c | 4 +- drivers/hwmon/adt7410.c | 8 +- drivers/hwmon/adt7411.c | 2 +- drivers/hwmon/adt7462.c | 2 +- drivers/hwmon/adt7470.c | 2 +- drivers/hwmon/adt7475.c | 8 +- drivers/hwmon/aht10.c | 8 +- drivers/hwmon/amc6821.c | 2 +- drivers/hwmon/asb100.c | 2 +- drivers/hwmon/asc7621.c | 6 +- drivers/hwmon/asus-ec-sensors.c | 18 +- drivers/hwmon/atxp1.c | 2 +- drivers/hwmon/chipcap2.c | 16 +- drivers/hwmon/corsair-cpro.c | 1 + drivers/hwmon/corsair-psu.c | 1 + drivers/hwmon/dme1737.c | 4 +- drivers/hwmon/ds1621.c | 10 +- drivers/hwmon/ds620.c | 4 +- drivers/hwmon/emc1403.c | 24 +- drivers/hwmon/emc2103.c | 2 +- drivers/hwmon/emc2305.c | 8 +- drivers/hwmon/emc6w201.c | 2 +- drivers/hwmon/f75375s.c | 6 +- drivers/hwmon/fschmd.c | 14 +- drivers/hwmon/ftsteutates.c | 2 +- drivers/hwmon/g760a.c | 2 +- drivers/hwmon/g762.c | 6 +- drivers/hwmon/gigabyte_waterforce.c | 4 +- drivers/hwmon/gl518sm.c | 2 +- drivers/hwmon/gl520sm.c | 2 +- drivers/hwmon/hih6130.c | 2 +- drivers/hwmon/hs3001.c | 4 +- drivers/hwmon/htu31.c | 2 +- drivers/hwmon/ina209.c | 2 +- drivers/hwmon/ina238.c | 12 +- drivers/hwmon/ina2xx.c | 16 +- drivers/hwmon/ina3221.c | 2 +- drivers/hwmon/isl28022.c | 2 +- drivers/hwmon/jc42.c | 2 +- drivers/hwmon/lineage-pem.c | 4 +- drivers/hwmon/lm63.c | 6 +- drivers/hwmon/lm73.c | 2 +- drivers/hwmon/lm75.c | 62 +-- drivers/hwmon/lm77.c | 2 +- drivers/hwmon/lm78.c | 4 +- drivers/hwmon/lm80.c | 4 +- drivers/hwmon/lm83.c | 4 +- drivers/hwmon/lm85.c | 24 +- drivers/hwmon/lm87.c | 4 +- drivers/hwmon/lm90.c | 96 ++--- drivers/hwmon/lm92.c | 6 +- drivers/hwmon/lm93.c | 4 +- drivers/hwmon/lm95234.c | 4 +- drivers/hwmon/lm95241.c | 4 +- drivers/hwmon/lm95245.c | 4 +- drivers/hwmon/ltc2945.c | 2 +- drivers/hwmon/ltc2947-i2c.c | 4 +- drivers/hwmon/ltc2990.c | 4 +- drivers/hwmon/ltc2991.c | 4 +- drivers/hwmon/ltc2992.c | 4 +- drivers/hwmon/ltc4151.c | 2 +- drivers/hwmon/ltc4215.c | 2 +- drivers/hwmon/ltc4222.c | 2 +- drivers/hwmon/ltc4245.c | 2 +- drivers/hwmon/ltc4260.c | 2 +- drivers/hwmon/ltc4261.c | 4 +- drivers/hwmon/max127.c | 2 +- drivers/hwmon/max16065.c | 12 +- drivers/hwmon/max1619.c | 2 +- drivers/hwmon/max1668.c | 6 +- drivers/hwmon/max31730.c | 2 +- drivers/hwmon/max31760.c | 2 +- drivers/hwmon/max31790.c | 2 +- drivers/hwmon/max31827.c | 6 +- drivers/hwmon/max6620.c | 2 +- drivers/hwmon/max6621.c | 2 +- drivers/hwmon/max6639.c | 2 +- drivers/hwmon/max6650.c | 4 +- drivers/hwmon/max6697.c | 20 +- drivers/hwmon/mc34vr500.c | 4 +- drivers/hwmon/mcp3021.c | 4 +- drivers/hwmon/nct6775-i2c.c | 26 +- drivers/hwmon/nct7802.c | 2 +- drivers/hwmon/nct7904.c | 4 +- drivers/hwmon/nzxt-kraken3.c | 6 +- drivers/hwmon/nzxt-smart2.c | 2 +- drivers/hwmon/occ/common.c | 38 +- drivers/hwmon/pcf8591.c | 2 +- drivers/hwmon/pmbus/acbel-fsg032.c | 4 +- drivers/hwmon/pmbus/adm1266.c | 2 +- drivers/hwmon/pmbus/adm1275.c | 20 +- drivers/hwmon/pmbus/aps-379.c | 4 +- drivers/hwmon/pmbus/bel-pfe.c | 6 +- drivers/hwmon/pmbus/bpa-rs600.c | 6 +- drivers/hwmon/pmbus/crps.c | 4 +- drivers/hwmon/pmbus/delta-ahe50dc-fan.c | 2 +- drivers/hwmon/pmbus/dps920ab.c | 4 +- drivers/hwmon/pmbus/fsp-3y.c | 4 +- drivers/hwmon/pmbus/hac300s.c | 4 +- drivers/hwmon/pmbus/ibm-cffps.c | 8 +- drivers/hwmon/pmbus/ina233.c | 4 +- drivers/hwmon/pmbus/inspur-ipsps.c | 4 +- drivers/hwmon/pmbus/ir35221.c | 4 +- drivers/hwmon/pmbus/ir36021.c | 4 +- drivers/hwmon/pmbus/ir38064.c | 10 +- drivers/hwmon/pmbus/irps5401.c | 4 +- drivers/hwmon/pmbus/isl68137.c | 92 ++--- drivers/hwmon/pmbus/lm25066.c | 10 +- drivers/hwmon/pmbus/lt3074.c | 4 +- drivers/hwmon/pmbus/lt7182s.c | 4 +- drivers/hwmon/pmbus/ltc2978.c | 60 +-- drivers/hwmon/pmbus/ltc3815.c | 2 +- drivers/hwmon/pmbus/max15301.c | 8 +- drivers/hwmon/pmbus/max16064.c | 4 +- drivers/hwmon/pmbus/max16601.c | 10 +- drivers/hwmon/pmbus/max17616.c | 2 +- drivers/hwmon/pmbus/max20730.c | 10 +- drivers/hwmon/pmbus/max20751.c | 4 +- drivers/hwmon/pmbus/max31785.c | 8 +- drivers/hwmon/pmbus/max34440.c | 143 ++++++- drivers/hwmon/pmbus/max8688.c | 2 +- drivers/hwmon/pmbus/mp2856.c | 6 +- drivers/hwmon/pmbus/mp2888.c | 4 +- drivers/hwmon/pmbus/mp2891.c | 2 +- drivers/hwmon/pmbus/mp2925.c | 6 +- drivers/hwmon/pmbus/mp29502.c | 4 +- drivers/hwmon/pmbus/mp2975.c | 8 +- drivers/hwmon/pmbus/mp2993.c | 2 +- drivers/hwmon/pmbus/mp5920.c | 2 +- drivers/hwmon/pmbus/mp5926.c | 4 +- drivers/hwmon/pmbus/mp5990.c | 4 +- drivers/hwmon/pmbus/mp9941.c | 2 +- drivers/hwmon/pmbus/mp9945.c | 4 +- drivers/hwmon/pmbus/mpq7932.c | 6 +- drivers/hwmon/pmbus/mpq8785.c | 10 +- drivers/hwmon/pmbus/pim4328.c | 18 +- drivers/hwmon/pmbus/pli1209bc.c | 4 +- drivers/hwmon/pmbus/pm6764tr.c | 4 +- drivers/hwmon/pmbus/pmbus.c | 60 +-- drivers/hwmon/pmbus/pxe1610.c | 8 +- drivers/hwmon/pmbus/q54sj108a2.c | 8 +- drivers/hwmon/pmbus/stef48h28.c | 4 +- drivers/hwmon/pmbus/stpddc60.c | 6 +- drivers/hwmon/pmbus/tda38640.c | 4 +- drivers/hwmon/pmbus/tps25990.c | 4 +- drivers/hwmon/pmbus/tps40422.c | 4 +- drivers/hwmon/pmbus/tps53679.c | 18 +- drivers/hwmon/pmbus/tps546d24.c | 4 +- drivers/hwmon/pmbus/ucd9000.c | 16 +- drivers/hwmon/pmbus/ucd9200.c | 18 +- drivers/hwmon/pmbus/xdp710.c | 2 +- drivers/hwmon/pmbus/xdp720.c | 4 +- drivers/hwmon/pmbus/xdpe12284.c | 8 +- drivers/hwmon/pmbus/xdpe152c4.c | 6 +- drivers/hwmon/pmbus/xdpe1a2g7b.c | 6 +- drivers/hwmon/pmbus/zl6100.c | 44 +-- drivers/hwmon/powr1220.c | 4 +- drivers/hwmon/pt5161l.c | 4 +- drivers/hwmon/sbtsi_temp.c | 4 +- drivers/hwmon/sg2042-mcu.c | 2 +- drivers/hwmon/sht21.c | 6 +- drivers/hwmon/sht3x.c | 8 +- drivers/hwmon/sht4x.c | 4 +- drivers/hwmon/shtc1.c | 6 +- drivers/hwmon/smsc47m192.c | 2 +- drivers/hwmon/spd5118.c | 2 +- drivers/hwmon/stts751.c | 2 +- drivers/hwmon/tc654.c | 6 +- drivers/hwmon/tc74.c | 4 +- drivers/hwmon/thmc50.c | 4 +- drivers/hwmon/tmp102.c | 2 +- drivers/hwmon/tmp103.c | 2 +- drivers/hwmon/tmp108.c | 8 +- drivers/hwmon/tmp401.c | 10 +- drivers/hwmon/tmp421.c | 10 +- drivers/hwmon/tmp464.c | 4 +- drivers/hwmon/tmp513.c | 4 +- drivers/hwmon/tsc1641.c | 2 +- drivers/hwmon/w83773g.c | 2 +- drivers/hwmon/w83781d.c | 8 +- drivers/hwmon/w83791d.c | 2 +- drivers/hwmon/w83792d.c | 2 +- drivers/hwmon/w83793.c | 2 +- drivers/hwmon/w83795.c | 4 +- drivers/hwmon/w83l785ts.c | 2 +- drivers/hwmon/w83l786ng.c | 2 +- drivers/hwtracing/intel_th/core.c | 10 - drivers/hwtracing/intel_th/msu.c | 2 + drivers/infiniband/core/cma.c | 2 +- drivers/infiniband/core/mad.c | 30 ++ drivers/infiniband/core/verbs.c | 6 +- drivers/infiniband/hw/bng_re/bng_dev.c | 6 +- drivers/infiniband/hw/erdma/erdma_qp.c | 2 +- drivers/infiniband/hw/hns/hns_roce_hem.c | 2 +- drivers/infiniband/hw/irdma/uk.c | 9 +- drivers/infiniband/hw/irdma/user.h | 1 - drivers/infiniband/hw/irdma/verbs.c | 33 +- drivers/infiniband/hw/mana/wr.c | 2 +- drivers/infiniband/sw/siw/siw_verbs.c | 44 ++- drivers/iommu/amd/init.c | 6 + drivers/iommu/amd/iommu.c | 22 +- drivers/iommu/amd/nested.c | 34 +- drivers/iommu/intel/perf.c | 2 +- drivers/iommu/intel/svm.c | 2 +- drivers/media/cec/platform/seco/seco-cec.c | 6 +- drivers/media/common/videobuf2/videobuf2-core.c | 12 +- drivers/media/dvb-frontends/rtl2832.c | 4 +- drivers/media/dvb-frontends/rtl2832_sdr.c | 19 +- drivers/media/i2c/alvium-csi2.c | 21 +- drivers/media/i2c/dw9719.c | 10 + drivers/media/i2c/imx219.c | 2 +- drivers/media/pci/cx23885/cx23885-core.c | 14 +- drivers/media/pci/dm1105/dm1105.c | 1 + drivers/media/pci/intel/ipu6/ipu6-isys-dwc-phy.c | 24 +- drivers/media/pci/saa7134/saa7134-video.c | 25 +- .../media/platform/amlogic/c3/isp/c3-isp-params.c | 4 + .../media/platform/arm/mali-c55/mali-c55-core.c | 21 +- drivers/media/platform/arm/mali-c55/mali-c55-isp.c | 7 + drivers/media/platform/aspeed/aspeed-video.c | 1 + .../platform/chips-media/wave5/wave5-vpu-enc.c | 29 +- drivers/media/platform/marvell/cafe-driver.c | 1 + drivers/media/platform/nuvoton/npcm-video.c | 34 +- .../media/platform/nxp/imx8-isi/imx8-isi-core.c | 2 + .../media/platform/nxp/imx8-isi/imx8-isi-core.h | 16 + .../platform/nxp/imx8-isi/imx8-isi-crossbar.c | 1 + drivers/media/platform/nxp/imx8-isi/imx8-isi-hw.c | 9 +- drivers/media/platform/nxp/imx8-isi/imx8-isi-m2m.c | 11 +- .../media/platform/nxp/imx8-isi/imx8-isi-pipe.c | 20 +- drivers/media/platform/qcom/camss/camss-csid-340.c | 18 +- drivers/media/platform/qcom/camss/camss-csid-680.c | 30 +- .../media/platform/qcom/camss/camss-csid-gen2.c | 47 +-- .../media/platform/qcom/camss/camss-csid-gen3.c | 28 +- drivers/media/platform/qcom/iris/iris_probe.c | 6 +- .../platform/renesas/rzg2l-cru/rzg2l-cru-regs.h | 1 + .../media/platform/renesas/rzg2l-cru/rzg2l-video.c | 17 +- .../platform/renesas/rzv2h-ivc/rzv2h-ivc-video.c | 31 +- drivers/media/platform/st/stm32/stm32-dcmi.c | 1 + .../st/stm32/stm32-dcmipp/dcmipp-bytecap.c | 6 +- drivers/media/platform/sunxi/sun4i-csi/sun4i_dma.c | 6 +- .../media/platform/synopsys/hdmirx/snps_hdmirx.c | 4 +- drivers/media/platform/ti/davinci/vpif_capture.c | 2 +- drivers/media/platform/ti/vpe/vip.c | 16 +- drivers/media/platform/ti/vpe/vpe.c | 3 +- drivers/media/platform/verisilicon/hantro_v4l2.c | 6 +- drivers/media/radio/radio-si476x.c | 1 + drivers/media/test-drivers/vidtv/vidtv_bridge.c | 4 +- drivers/media/test-drivers/vimc/vimc-core.c | 1 + drivers/media/test-drivers/vivid/vivid-core.c | 6 +- drivers/media/test-drivers/vivid/vivid-ctrls.c | 15 +- drivers/media/test-drivers/vivid/vivid-vid-cap.c | 38 +- drivers/media/test-drivers/vivid/vivid-vid-cap.h | 1 + drivers/media/test-drivers/vivid/vivid-vid-out.c | 6 + drivers/media/usb/airspy/airspy.c | 8 +- drivers/media/usb/cx231xx/cx231xx-cards.c | 16 +- drivers/media/usb/msi2500/msi2500.c | 32 +- drivers/media/usb/pwc/pwc-if.c | 13 +- drivers/media/v4l2-core/v4l2-ctrls-core.c | 13 + drivers/media/v4l2-core/v4l2-ctrls-request.c | 14 +- drivers/media/v4l2-core/v4l2-fwnode.c | 6 +- drivers/media/v4l2-core/v4l2-subdev.c | 4 + drivers/misc/mei/bus.c | 16 +- drivers/misc/nsm.c | 3 +- drivers/mtd/mtd_virt_concat.c | 4 +- drivers/mtd/mtdcore.c | 23 +- drivers/mtd/mtdswap.c | 5 +- drivers/mtd/nand/ecc-mtk.c | 16 +- drivers/net/amt.c | 101 +++-- drivers/net/bonding/bond_main.c | 3 +- drivers/net/ethernet/airoha/airoha_eth.c | 3 +- drivers/net/ethernet/airoha/airoha_npu.c | 4 +- drivers/net/ethernet/airoha/airoha_ppe.c | 1 + drivers/net/ethernet/amd/pds_core/adminq.c | 12 +- drivers/net/ethernet/amd/pds_core/auxbus.c | 17 +- drivers/net/ethernet/amd/pds_core/core.c | 22 +- drivers/net/ethernet/amd/pds_core/devlink.c | 6 + drivers/net/ethernet/amd/pds_core/main.c | 14 +- drivers/net/ethernet/amd/xgbe/xgbe-mdio.c | 11 +- drivers/net/ethernet/broadcom/bnge/bnge.h | 1 + drivers/net/ethernet/broadcom/bnge/bnge_hwrm_lib.c | 8 +- drivers/net/ethernet/broadcom/bnge/bnge_hwrm_lib.h | 2 +- drivers/net/ethernet/broadcom/bnge/bnge_netdev.c | 50 ++- drivers/net/ethernet/broadcom/bnge/bnge_netdev.h | 4 +- drivers/net/ethernet/broadcom/bnge/bnge_rmem.h | 2 +- drivers/net/ethernet/broadcom/bnxt/bnxt_ulp.c | 39 +- drivers/net/ethernet/freescale/dpaa2/dpaa2-eth.c | 1 + .../net/ethernet/freescale/dpaa2/dpaa2-switch.c | 1 + drivers/net/ethernet/freescale/fman/fman_dtsec.c | 17 +- drivers/net/ethernet/google/gve/gve.h | 3 + drivers/net/ethernet/google/gve/gve_rx_dqo.c | 34 ++ drivers/net/ethernet/hisilicon/hip04_eth.c | 11 +- drivers/net/ethernet/huawei/hinic/hinic_dev.h | 2 - drivers/net/ethernet/huawei/hinic/hinic_ethtool.c | 21 -- drivers/net/ethernet/intel/ice/ice.h | 3 + drivers/net/ethernet/intel/ice/ice_eswitch.c | 3 - drivers/net/ethernet/intel/ice/ice_lag.c | 2 +- drivers/net/ethernet/intel/ice/ice_parser.c | 3 + drivers/net/ethernet/intel/ice/ice_ptp.c | 7 +- drivers/net/ethernet/intel/ice/ice_sriov.c | 14 +- drivers/net/ethernet/intel/ice/ice_vf_lib.c | 3 +- drivers/net/ethernet/intel/idpf/idpf_virtchnl.c | 7 +- .../ethernet/marvell/octeontx2/nic/otx2_flows.c | 1 + .../net/ethernet/marvell/octeontx2/nic/otx2_tc.c | 29 +- drivers/net/ethernet/mellanox/mlx5/core/en_dcbnl.c | 15 + drivers/net/ethernet/mellanox/mlx5/core/en_main.c | 4 +- .../ethernet/mellanox/mlx5/core/esw/acl/helper.c | 2 +- drivers/net/ethernet/mellanox/mlx5/core/port.c | 4 +- drivers/net/ethernet/microsoft/mana/gdma_main.c | 78 +++- .../ethernet/netronome/nfp/nfpcore/nfp_resource.c | 3 + drivers/net/ethernet/realtek/rtase/rtase.h | 8 + drivers/net/ethernet/realtek/rtase/rtase_main.c | 197 ++++++++++ drivers/net/ethernet/stmicro/stmmac/dwmac-intel.c | 31 ++ drivers/net/ethernet/stmicro/stmmac/dwmac4_dma.c | 24 ++ .../net/ethernet/stmicro/stmmac/dwxgmac2_core.c | 28 +- drivers/net/ethernet/stmicro/stmmac/hwif.h | 4 + drivers/net/ethernet/stmicro/stmmac/stmmac_main.c | 96 ++--- drivers/net/ethernet/stmicro/stmmac/stmmac_tc.c | 35 ++ drivers/net/ethernet/wangxun/txgbe/txgbe_aml.c | 6 +- drivers/net/ethernet/wangxun/txgbe/txgbe_main.c | 1 + drivers/net/geneve.c | 27 +- drivers/net/gtp.c | 17 +- drivers/net/mctp/mctp-i3c.c | 11 +- drivers/net/mctp/mctp-serial.c | 2 +- drivers/net/ovpn/io.c | 4 +- drivers/net/ovpn/peer.c | 16 +- drivers/net/ovpn/tcp.c | 6 +- drivers/net/pcs/pcs-xpcs.c | 34 +- drivers/net/phy/marvell.c | 2 +- drivers/net/ppp/ppp_generic.c | 100 +++-- drivers/net/ppp/pppoe.c | 1 + drivers/net/slip/slip.c | 4 + drivers/net/vmxnet3/vmxnet3_drv.c | 22 +- drivers/net/vxlan/vxlan_core.c | 3 + drivers/net/vxlan/vxlan_mdb.c | 30 +- drivers/net/wan/wanxl.c | 3 +- drivers/net/wireless/ath/ath10k/htt_rx.c | 2 + drivers/net/wireless/ath/ath11k/ahb.c | 1 + drivers/net/wireless/ath/ath11k/dp_rx.c | 3 + drivers/net/wireless/ath/ath11k/pci.c | 4 + drivers/net/wireless/ath/ath11k/qmi.c | 11 +- drivers/net/wireless/ath/ath12k/dp_peer.c | 11 +- drivers/net/wireless/ath/ath12k/dp_peer.h | 1 + drivers/net/wireless/ath/ath12k/dp_rx.c | 7 +- drivers/net/wireless/ath/ath12k/hw.h | 16 + drivers/net/wireless/ath/ath12k/mac.c | 10 +- drivers/net/wireless/ath/ath12k/pci.c | 4 + drivers/net/wireless/ath/ath12k/peer.c | 3 + drivers/net/wireless/ath/ath12k/wifi7/dp_rx.c | 33 ++ drivers/net/wireless/ath/ath12k/wifi7/dp_rx.h | 6 + drivers/net/wireless/ath/ath12k/wifi7/hw.c | 3 + drivers/net/wireless/ath/ath6kl/txrx.c | 12 +- drivers/net/wireless/ath/ath6kl/wmi.c | 20 + drivers/net/wireless/ath/ath9k/hif_usb.c | 7 +- drivers/net/wireless/ath/carl9170/rx.c | 7 +- drivers/net/wireless/ath/carl9170/tx.c | 2 +- drivers/net/wireless/atmel/at76c50x-usb.c | 7 +- .../wireless/broadcom/brcm80211/brcmfmac/bcmsdh.c | 14 + .../net/wireless/broadcom/brcm80211/brcmfmac/bus.h | 6 + .../broadcom/brcm80211/brcmfmac/cfg80211.c | 2 +- .../wireless/broadcom/brcm80211/brcmfmac/core.c | 46 ++- .../wireless/broadcom/brcm80211/brcmfmac/pcie.c | 14 +- .../wireless/broadcom/brcm80211/brcmfmac/sdio.c | 8 +- .../wireless/broadcom/brcm80211/brcmfmac/sdio.h | 1 + .../net/wireless/broadcom/brcm80211/brcmfmac/usb.c | 3 + drivers/net/wireless/intel/ipw2x00/ipw2100.c | 8 +- drivers/net/wireless/intel/iwlwifi/fw/pnvm.c | 9 +- drivers/net/wireless/intel/iwlwifi/fw/regulatory.c | 2 +- drivers/net/wireless/intel/iwlwifi/mvm/d3.c | 3 +- drivers/net/wireless/intel/iwlwifi/mvm/fw.c | 10 + drivers/net/wireless/intersil/p54/txrx.c | 8 + drivers/net/wireless/marvell/libertas/firmware.c | 1 + drivers/net/wireless/marvell/mwifiex/sta_ioctl.c | 14 +- drivers/net/wireless/marvell/mwifiex/tdls.c | 2 +- drivers/net/wireless/marvell/mwifiex/uap_event.c | 24 +- drivers/net/wireless/mediatek/mt76/Kconfig | 4 +- drivers/net/wireless/mediatek/mt76/Makefile | 6 +- drivers/net/wireless/mediatek/mt76/mt76.h | 6 +- drivers/net/wireless/mediatek/mt76/mt7615/mac.c | 6 + .../net/wireless/mediatek/mt76/mt76_connac_mcu.c | 2 + drivers/net/wireless/mediatek/mt76/mt7915/mcu.c | 18 +- drivers/net/wireless/mediatek/mt76/mt7921/mac.c | 10 +- drivers/net/wireless/mediatek/mt76/mt7925/mac.c | 13 +- drivers/net/wireless/mediatek/mt76/mt7925/main.c | 3 + drivers/net/wireless/mediatek/mt76/mt7925/mcu.c | 2 + drivers/net/wireless/mediatek/mt76/mt7996/Kconfig | 2 +- drivers/net/wireless/mediatek/mt76/mt7996/mcu.c | 19 +- drivers/net/wireless/microchip/wilc1000/hif.c | 5 + drivers/net/wireless/virtual/mac80211_hwsim.c | 1 + drivers/platform/loongarch/loongson-laptop.c | 1 + drivers/platform/x86/asus-wmi.c | 26 +- .../uncore-frequency/uncore-frequency-common.c | 7 +- drivers/platform/x86/intel/vsec.c | 31 +- drivers/platform/x86/intel/vsec_tpmi.c | 13 +- drivers/ptp/ptp_netc.c | 1 + drivers/ptp/ptp_s390.c | 6 +- drivers/regulator/mt6358-regulator.c | 2 +- drivers/resctrl/mpam_devices.c | 36 +- drivers/reset/spacemit/reset-spacemit-k3.c | 2 +- drivers/scsi/hosts.c | 2 + drivers/scsi/scsi_error.c | 22 +- drivers/scsi/scsi_priv.h | 1 + drivers/spi/spi-cadence-quadspi.c | 12 +- drivers/staging/media/meson/vdec/vdec.c | 4 +- drivers/staging/media/sunxi/cedrus/cedrus.c | 6 +- drivers/staging/media/sunxi/cedrus/cedrus_h264.c | 3 + drivers/staging/media/tegra-video/vi.c | 4 +- drivers/staging/rtl8723bs/core/rtw_ieee80211.c | 9 +- drivers/staging/rtl8723bs/os_dep/ioctl_cfg80211.c | 2 +- drivers/thunderbolt/debugfs.c | 2 + drivers/thunderbolt/domain.c | 30 ++ drivers/thunderbolt/icm.c | 5 + drivers/thunderbolt/switch.c | 14 + drivers/thunderbolt/tb.c | 59 ++- drivers/thunderbolt/tb.h | 2 + drivers/thunderbolt/xdomain.c | 100 +++-- drivers/tty/serial/8250/8250_mid.c | 14 +- drivers/tty/serial/sc16is7xx.c | 12 + drivers/uio/uio_hv_generic.c | 8 +- drivers/usb/atm/ueagle-atm.c | 17 + drivers/usb/chipidea/core.c | 1 + drivers/usb/core/port.c | 2 + drivers/usb/core/sysfs.c | 8 +- drivers/usb/gadget/function/f_midi.c | 1 + drivers/usb/gadget/function/f_ncm.c | 17 +- drivers/usb/gadget/function/f_printer.c | 23 +- drivers/usb/gadget/function/f_tcm.c | 192 ++++++++-- drivers/usb/gadget/function/tcm.h | 13 + drivers/usb/gadget/function/uvc_v4l2.c | 2 + drivers/usb/gadget/udc/bdc/bdc_core.c | 20 + drivers/usb/gadget/udc/bdc/bdc_udc.c | 7 +- drivers/usb/gadget/udc/dummy_hcd.c | 40 +- drivers/usb/gadget/udc/fsl_udc_core.c | 93 +++-- drivers/usb/gadget/udc/fsl_usb2_udc.h | 1 + drivers/usb/gadget/udc/snps_udc_core.c | 1 - drivers/usb/host/xhci-pci.c | 1 + drivers/usb/host/xhci.c | 15 +- drivers/usb/host/xhci.h | 1 + drivers/usb/musb/omap2430.c | 2 - drivers/usb/serial/ftdi_sio.c | 2 + drivers/usb/serial/ftdi_sio_ids.h | 5 + drivers/usb/serial/io_edgeport.c | 3 +- drivers/usb/serial/keyspan_pda.c | 44 ++- drivers/usb/serial/option.c | 1 + drivers/usb/storage/unusual_devs.h | 7 + drivers/usb/typec/ucsi/ucsi.c | 158 +++++++- drivers/vhost/net.c | 8 +- drivers/virt/coco/pkvm-guest/arm-pkvm-guest.c | 2 +- drivers/watchdog/airoha_wdt.c | 3 + drivers/watchdog/ni903x_wdt.c | 7 +- drivers/watchdog/s32g_wdt.c | 3 +- drivers/watchdog/watchdog_pretimeout.c | 2 + fs/afs/dir_edit.c | 2 +- fs/binfmt_elf_fdpic.c | 4 + fs/binfmt_misc.c | 5 +- fs/btrfs/btrfs_inode.h | 2 + fs/btrfs/extent_io.c | 4 +- fs/btrfs/extent_map.c | 4 +- fs/btrfs/file-item.c | 26 +- fs/btrfs/free-space-cache.c | 3 + fs/btrfs/relocation.c | 2 + fs/ceph/addr.c | 9 + fs/ceph/caps.c | 1 + fs/ceph/dir.c | 7 +- fs/ceph/ioctl.c | 6 + fs/crypto/inline_crypt.c | 57 +-- fs/crypto/keysetup_v1.c | 8 +- fs/erofs/zmap.c | 3 +- fs/exec.c | 2 +- fs/f2fs/super.c | 25 +- fs/fuse/dev_uring.c | 22 +- fs/iomap/buffered-io.c | 42 ++- fs/nfsd/vfs.c | 6 +- fs/overlayfs/file.c | 16 +- fs/overlayfs/xattrs.c | 2 +- fs/pidfs.c | 2 +- fs/posix_acl.c | 7 + fs/proc/namespaces.c | 4 +- fs/smb/client/cifsfs.c | 1 + fs/smb/client/cifsglob.h | 1 + fs/smb/client/file.c | 69 +++- fs/smb/client/inode.c | 6 + fs/smb/client/misc.c | 106 +++++- fs/smb/client/smb2file.c | 21 ++ fs/smb/client/smb2inode.c | 23 +- fs/smb/client/smb2ops.c | 25 +- fs/smb/server/connection.c | 16 +- fs/smb/server/oplock.c | 6 +- fs/smb/server/smb2misc.c | 5 + fs/smb/server/smb2pdu.c | 9 +- fs/smb/server/smbacl.c | 42 ++- fs/super.c | 34 +- fs/xfs/scrub/cow_repair.c | 203 ++++++---- fs/xfs/scrub/trace.h | 28 +- include/drm/drm_connector.h | 6 +- include/drm/drm_utils.h | 1 + include/drm/ttm/ttm_backup.h | 12 +- include/linux/arm_ffa.h | 2 +- include/linux/audit.h | 4 +- include/linux/audit_arch.h | 12 +- include/linux/bnge/hsi.h | 7 +- include/linux/bootconfig.h | 3 + include/linux/firmware/intel/stratix10-smc.h | 4 + include/linux/fscrypt.h | 18 +- include/linux/intel_vsec.h | 6 +- include/linux/memory_hotplug.h | 8 +- include/linux/mlx5/mlx5_ifc.h | 13 +- include/linux/seqlock.h | 7 +- include/linux/sunrpc/xdr.h | 19 +- include/linux/vtime.h | 6 + include/media/v4l2-async.h | 4 +- include/media/videobuf2-core.h | 8 +- include/net/bluetooth/hci_core.h | 1 + include/net/bluetooth/rfcomm.h | 3 + include/net/cfg80211.h | 4 +- include/net/pkt_cls.h | 14 +- include/net/sctp/structs.h | 3 +- include/net/tcp.h | 2 + include/scsi/scsi_host.h | 3 + include/trace/events/memory-failure.h | 6 +- include/uapi/linux/btrfs.h | 2 +- include/uapi/linux/rkisp1-config.h | 6 +- init/Kconfig | 3 + init/main.c | 45 --- io_uring/rw.c | 42 ++- kernel/audit.c | 2 +- kernel/audit.h | 19 +- kernel/audit_fsnotify.c | 32 +- kernel/audit_tree.c | 2 +- kernel/audit_watch.c | 25 +- kernel/auditfilter.c | 17 +- kernel/auditsc.c | 2 +- kernel/sched/ext.c | 134 ++++--- kernel/sched/ext_internal.h | 30 ++ kernel/smp.c | 30 +- kernel/trace/ftrace.c | 13 + kernel/trace/trace.c | 2 +- kernel/trace/trace.h | 1 + kernel/trace/trace_eprobe.c | 3 +- kernel/trace/trace_events.c | 4 +- kernel/trace/trace_events_hist.c | 2 + kernel/trace/trace_events_trigger.c | 22 +- kernel/trace/trace_mmiotrace.c | 4 +- kernel/trace/trace_probe.c | 13 +- kernel/trace/trace_remote.c | 16 +- kernel/trace/trace_syscalls.c | 5 + lib/bootconfig.c | 65 ++++ lib/compat_audit.c | 12 +- lib/rhashtable.c | 1 + mm/damon/core.c | 13 + mm/huge_memory.c | 12 +- mm/kmemleak.c | 7 +- mm/memory_hotplug.c | 13 +- mm/memremap.c | 4 +- mm/page_vma_mapped.c | 33 +- mm/slub.c | 21 +- mm/sparse-vmemmap.c | 46 ++- mm/userfaultfd.c | 5 +- net/bluetooth/hci_event.c | 18 +- net/bluetooth/hci_sync.c | 79 +++- net/bluetooth/mgmt.c | 105 +++++- net/bluetooth/rfcomm/core.c | 17 + net/bluetooth/rfcomm/tty.c | 7 +- net/bridge/br_netlink_tunnel.c | 3 +- net/bridge/br_private.h | 6 +- net/bridge/br_vlan.c | 10 +- net/bridge/br_vlan_options.c | 3 +- net/can/j1939/transport.c | 18 +- net/can/raw.c | 66 ++-- net/ceph/auth_x.c | 9 +- net/ceph/ceph_common.c | 4 +- net/ceph/cls_lock_client.c | 8 +- net/ceph/mon_client.c | 4 +- net/ceph/osdmap.c | 16 +- net/core/bpf_sk_storage.c | 2 - net/core/dev.c | 10 +- net/core/drop_monitor.c | 18 +- net/core/filter.c | 17 +- net/core/gro.c | 4 +- net/core/sock.c | 13 +- net/core/sock_map.c | 2 + net/hsr/hsr_slave.c | 2 + net/ipv4/datagram.c | 4 +- net/ipv4/fib_trie.c | 2 +- net/ipv4/icmp.c | 18 +- net/ipv4/ip_gre.c | 4 +- net/ipv4/nexthop.c | 2 +- net/ipv4/raw.c | 23 +- net/ipv4/tcp_bpf.c | 2 +- net/ipv4/tcp_input.c | 56 ++- net/ipv4/tcp_ipv4.c | 14 +- net/ipv4/tcp_minisocks.c | 12 +- net/ipv6/ila/ila_common.c | 12 + net/ipv6/ip6_gre.c | 4 +- net/ipv6/raw.c | 2 +- net/ipv6/route.c | 4 +- net/ipv6/tcp_ipv6.c | 8 +- net/ipv6/xfrm6_policy.c | 1 + net/iucv/af_iucv.c | 21 +- net/mac80211/cfg.c | 14 +- net/mac80211/iface.c | 8 +- net/mac80211/link.c | 4 + net/mac80211/mlme.c | 6 +- net/mac80211/nan.c | 35 +- net/mac80211/rx.c | 2 + net/mac80211/sta_info.c | 15 +- net/mac802154/llsec.c | 5 + net/mac802154/scan.c | 11 + net/mctp/device.c | 4 +- net/mpls/af_mpls.c | 11 +- net/mptcp/options.c | 17 +- net/mptcp/pm_userspace.c | 7 +- net/mptcp/protocol.c | 34 +- net/openvswitch/actions.c | 19 +- net/openvswitch/datapath.c | 25 +- net/openvswitch/datapath.h | 2 +- net/openvswitch/vport.c | 2 +- net/packet/af_packet.c | 6 +- net/phonet/pep.c | 2 + net/qrtr/af_qrtr.c | 8 + net/qrtr/ns.c | 4 +- net/rds/ib.c | 4 + net/rds/ib_cm.c | 4 + net/rds/recv.c | 15 + net/rds/tcp.c | 12 +- net/rxrpc/ar-internal.h | 6 +- net/sched/act_tunnel_key.c | 14 +- net/sched/cls_api.c | 6 +- net/sched/sch_api.c | 24 +- net/sched/sch_cake.c | 2 +- net/sched/sch_drr.c | 2 +- net/sched/sch_dualpi2.c | 2 +- net/sched/sch_ets.c | 2 +- net/sched/sch_fq_codel.c | 2 +- net/sched/sch_fq_pie.c | 2 +- net/sched/sch_hfsc.c | 2 +- net/sched/sch_htb.c | 2 +- net/sched/sch_multiq.c | 2 +- net/sched/sch_prio.c | 2 +- net/sched/sch_qfq.c | 2 +- net/sched/sch_sfb.c | 2 +- net/sched/sch_sfq.c | 2 +- net/sctp/auth.c | 2 +- net/sctp/protocol.c | 21 +- net/sctp/sm_make_chunk.c | 6 + net/sctp/sm_statefuns.c | 2 +- net/sctp/stream.c | 6 +- net/sctp/sysctl.c | 9 +- net/sunrpc/svcsock.c | 14 +- net/sunrpc/xdr.c | 210 ++++++++++- net/sunrpc/xprtrdma/rpc_rdma.c | 4 + net/sunrpc/xprtrdma/verbs.c | 12 +- net/tipc/netlink.c | 6 +- net/tipc/netlink_compat.c | 4 + net/tipc/socket.c | 5 +- net/tipc/udp_media.c | 56 ++- net/tls/tls_device.c | 6 +- net/vmw_vsock/virtio_transport_common.c | 165 +++++++- net/wireless/core.c | 14 +- net/wireless/core.h | 4 +- net/wireless/nl80211.c | 25 +- net/wireless/pmsr.c | 34 +- net/wireless/scan.c | 13 +- net/wireless/sme.c | 6 +- net/x25/af_x25.c | 8 +- net/xfrm/xfrm_device.c | 12 +- net/xfrm/xfrm_iptfs.c | 1 + net/xfrm/xfrm_policy.c | 4 +- net/xfrm/xfrm_state.c | 11 +- net/xfrm/xfrm_user.c | 3 +- rust/bindings/lib.rs | 4 + rust/kernel/device.rs | 20 +- rust/kernel/time.rs | 11 +- rust/uapi/lib.rs | 4 + sound/core/seq/seq_timer.c | 13 +- sound/core/timer.c | 21 +- sound/hda/codecs/hdmi/hdmi.c | 3 + sound/hda/codecs/hdmi/hdmi_local.h | 9 + sound/hda/codecs/hdmi/intelhdmi.c | 36 +- sound/hda/codecs/realtek/alc269.c | 9 + sound/hda/codecs/side-codecs/cs35l41_hda.c | 11 +- sound/soc/amd/acp/Kconfig | 10 +- sound/soc/amd/acp/Makefile | 3 +- sound/soc/amd/acp/amd-acp70-acpi-match.c | 2 +- sound/soc/amd/acp/soc-acpi-amd-sdca-quirks.c | 4 - sound/soc/amd/ps/pci-ps.c | 33 +- sound/soc/codecs/bt-sco.c | 10 +- sound/soc/codecs/cs35l56-i2c.c | 4 +- sound/soc/codecs/cs35l56-spi.c | 4 +- sound/soc/codecs/cs35l56.c | 17 +- sound/soc/codecs/cs42l43-jack.c | 3 +- sound/soc/codecs/tas2562.c | 5 +- sound/soc/codecs/tas2781-fmwlib.c | 63 +++- sound/soc/fsl/fsl_sai.c | 29 +- sound/soc/fsl/imx-card.c | 12 +- sound/soc/meson/aiu-fifo-spdif.c | 5 + sound/soc/sunxi/sun4i-codec.c | 1 + sound/usb/mixer.c | 2 +- sound/usb/quirks.c | 2 + tools/objtool/check.c | 1 + tools/testing/selftests/alsa/mixer-test.c | 1 + .../testing/selftests/bpf/progs/verifier_map_ptr.c | 36 +- tools/testing/selftests/drivers/net/.gitignore | 1 + tools/testing/selftests/drivers/net/Makefile | 2 + tools/testing/selftests/drivers/net/config | 5 + .../drivers/net/netconsole/netcons_resume.sh | 3 +- tools/testing/selftests/drivers/net/settings | 1 + .../selftests/{ => drivers}/net/so_txtime.c | 35 +- tools/testing/selftests/drivers/net/so_txtime.py | 103 +++++ tools/testing/selftests/drivers/ntsync/config | 2 +- tools/testing/selftests/ftrace/ftracetest | 1 + tools/testing/selftests/net/.gitignore | 1 - tools/testing/selftests/net/Makefile | 2 - tools/testing/selftests/net/af_unix/config | 1 + tools/testing/selftests/net/mptcp/userspace_pm.sh | 2 +- tools/testing/selftests/net/openvswitch/config | 16 + tools/testing/selftests/net/ovpn/config | 2 + tools/testing/selftests/net/ovpn/ovpn-cli.c | 4 +- tools/testing/selftests/net/ovpn/settings | 1 + tools/testing/selftests/net/so_txtime.sh | 110 ------ tools/testing/selftests/net/tun.c | 8 +- 946 files changed, 9236 insertions(+), 4123 deletions(-)

3 months

[PATCH 6.18 000/675] 6.18.42-rc1 review

by Greg Kroah-Hartman

This is the start of the stable review cycle for the 6.18.42 release. There are 675 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know. Responses should be made by Sat, 01 Aug 2026 14:13:45 +0000. Anything received after that time might be too late. The whole patch series can be found in one patch at: https://www.kernel.org/pub/linux/kernel/v6.x/stable-review/patch-6.18.42-rc… or in the git tree and branch at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-6.18.y and the diffstat can be found below. thanks, greg k-h ------------- Pseudo-Shortlog of commits: Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> Linux 6.18.42-rc1 Nikunj A Dadhania <nikunj(a)amd.com> KVM: SVM: Bump asid_generation on CPU online to avoid ASID collision after hotplug Koen Koning <koen.koning(a)linux.intel.com> gpu: Fix uninitialized buddy for built-in drivers Russell King (Oracle) <rmk+kernel(a)armlinux.org.uk> net: stmmac: fix dwmac4 transmit performance regression Gal Pressman <gal(a)nvidia.com> net/mlx5e: Fix NULL pointer dereference in ioctl module EEPROM query Cen Zhang <zzzccc427(a)gmail.com> usb: gadget: f_tcm: synchronize delayed set_alt with teardown Alice Ryhl <aliceryhl(a)google.com> rust: device: avoid trailing ; in printing macros Miguel Ojeda <ojeda(a)kernel.org> rust: allow `suspicious_runtime_symbol_definitions` lint for Rust >= 1.98 SJ Park <sj(a)kernel.org> mm/damon/core: disallow overlapping input ranges for damon_set_regions() SJ Park <sj(a)kernel.org> mm/damon/core: validate ranges in damon_set_regions() Adrian Hunter <adrian.hunter(a)intel.com> i3c: mipi-i3c-hci: Fix handling of shared IRQs during early initialization Adrian Hunter <adrian.hunter(a)intel.com> i3c: mipi-i3c-hci: Fix Hot-Join NACK Guoniu Zhou <guoniu.zhou(a)oss.nxp.com> pmdomain: imx93-blk-ctrl: Extract PHY as shared domain for DSI/CSI Marco Felsch <m.felsch(a)pengutronix.de> pmdomain: imx93-blk-ctrl: convert to devm_* only Haoxiang Li <haoxiang_li2024(a)163.com> net: ipa: fix SMEM state handle leaks in SMP2P init Bryam Vargas <hexlabsecurity(a)proton.me> ata: libata-core: Reject an invalid concurrent positioning ranges count Breno Leitao <leitao(a)debian.org> bootconfig: fix NULL-pointer arithmetic in xbc_snprint_cmdline() Breno Leitao <leitao(a)debian.org> bootconfig: move xbc_snprint_cmdline() to lib/bootconfig.c Junrui Luo <moonafterrain(a)outlook.com> octeontx2-af: cn10k: restrict VF LMTLINE sharing to its own PF Michael Bommarito <michael.bommarito(a)gmail.com> octeontx2-af: validate body pcifunc in rvu_mbox_handler_rep_event_notify Shradha Gupta <shradhagupta(a)linux.microsoft.com> net: mana: Optimize irq affinity for low vcpu configs Dexuan Cui <decui(a)microsoft.com> net: mana: Validate the packet length reported by the NIC Tony Luck <tony.luck(a)intel.com> fs/resctrl: Fix use-after-free during unmount Tony Luck <tony.luck(a)intel.com> fs/resctrl: Move RMID initialization to first mount Tony Luck <tony.luck(a)intel.com> fs/resctrl: Move allocation/free of closid_num_dirty_rmid[] Tony Luck <tony.luck(a)intel.com> x86,fs/resctrl: Rename some L3 specific functions Tony Luck <tony.luck(a)intel.com> x86,fs/resctrl: Rename struct rdt_mon_domain and rdt_hw_mon_domain Tony Luck <tony.luck(a)intel.com> fs/resctrl: Split L3 dependent parts out of __mon_event_count() Guangshuo Li <lgs201920130244(a)gmail.com> mmc: vub300: fix use-after-free on probe failure Johan Hovold <johan(a)kernel.org> mmc: vub300: rename probe error labels Ingo Blechschmidt <iblech(a)speicherleck.de> dm: avoid leaking the caller's thread keyring via the table device file Christian Brauner <brauner(a)kernel.org> cred: add kernel_cred() helper Doruk Tan Ozturk <doruk(a)0sec.ai> accel/amdxdna: reject command submission on devices without a submit op Souvik Banerjee <souvik(a)amlalabs.com> ovl: use linked upper dentry in copy-up tmpfile Koichiro Den <den(a)valinux.co.jp> dmaengine: dw-edma-pcie: Reject devices without driver data Krzysztof Kozlowski <krzysztof.kozlowski(a)oss.qualcomm.com> dmaengine: dw-edma: Fix confusing cleanup.h syntax Michael Bommarito <michael.bommarito(a)gmail.com> thunderbolt: Prevent XDomain delayed work use-after-free on disconnect Mika Westerberg <mika.westerberg(a)linux.intel.com> thunderbolt: Remove XDomain from the bus without holding tb->lock Mika Westerberg <mika.westerberg(a)linux.intel.com> thunderbolt: Remove service debugfs entries during unregister Mika Westerberg <mika.westerberg(a)linux.intel.com> thunderbolt: Keep XDomain reference during the lifetime of a service Florian Fuchs <fuchsfl(a)gmail.com> mtd: maps: vmu-flash: fix fault in unaligned fixup Pratyush Yadav (Google) <pratyush(a)kernel.org> kho: make sure scratch size is always aligned by CMA_MIN_ALIGNMENT_BYTES Muchun Song <muchun.song(a)linux.dev> mm/sparse-vmemmap: fix vmemmap accounting underflow Tanmay Shah <tanmay.shah(a)amd.com> remoteproc: xlnx: Check remote core state Terry Bowman <terry.bowman(a)amd.com> cxl: Fix CXL_HEADERLOG_SIZE to match RAS Capability size Dave Jiang <dave.jiang(a)intel.com> cxl/pci: Remove CXL VH handling in CONFIG_PCIEAER_CXL conditional blocks from core/pci.c Terry Bowman <terry.bowman(a)amd.com> cxl/pci: Remove unnecessary CXL RCH handling helper functions Terry Bowman <terry.bowman(a)amd.com> cxl/pci: Remove unnecessary CXL Endpoint handling helper functions Chuck Lever <chuck.lever(a)oracle.com> SUNRPC: Return an error from xdr_buf_to_bvec() on overflow Chuck Lever <chuck.lever(a)oracle.com> SUNRPC: Add helpers to convert xdr_buf byte ranges to scatterlists Jeff Layton <jlayton(a)kernel.org> sunrpc: allocate a separate bvec array for socket sends Mike Snitzer <snitzer(a)kernel.org> NFSD: pass nfsd_file to nfsd_iter_read() Claudiu Beznea <claudiu.beznea.uj(a)bp.renesas.com> pinctrl: renesas: rzg2l: Use -ENOTSUPP instead of -EOPNOTSUPP Arunpravin Paneer Selvam <Arunpravin.PaneerSelvam(a)amd.com> gpu/buddy: bail out of try_harder when alignment cannot be honoured Joel Fernandes <joelagnelf(a)nvidia.com> gpu: Move DRM buddy allocator one level up (part two) Pablo Neira Ayuso <pablo(a)netfilter.org> netfilter: nf_conntrack_sip: validate skb_dst() before accessing it Florian Westphal <fw(a)strlen.de> netfilter: nf_conntrack_sip: remove net variable shadowing Theodor Arsenij Larionov-Trichkine <theodorlarionov(a)gmail.com> netfilter: nft_fib: reject fib expression on the netdev egress hook Florian Westphal <fw(a)strlen.de> netfilter: nf_tables: remove register tracking infrastructure Abel Vesa <abel.vesa(a)oss.qualcomm.com> arm64: dts: qcom: hamoa: Fix OPP tables for all DisplayPort controllers Dmitry Baryshkov <dmitry.baryshkov(a)oss.qualcomm.com> arm64: dts: qcom: correct RBR opp entry Jason Wang <jasowang(a)redhat.com> VDUSE: avoid leaking information to userspace Eugenio Pérez <eperezma(a)redhat.com> vduse: take out allocations from vduse_dev_alloc_coherent Eugenio Pérez <eperezma(a)redhat.com> vduse: remove unused vaddr parameter of vduse_domain_free_coherent Eugenio Pérez <eperezma(a)redhat.com> vduse: return internal vq group struct as map token Darrick J. Wong <djwong(a)kernel.org> xfs: don't replace the wrong part of the cow fork Joanne Koong <joannelkoong(a)gmail.com> fuse-uring: fix race between registration and connection abortion Ricardo Robaina <rrobaina(a)redhat.com> audit: fix recursive locking deadlock in audit_dupe_exe() Ricardo Robaina <rrobaina(a)redhat.com> audit: use 'unsigned int' instead of 'unsigned' Jeff Layton <jlayton(a)kernel.org> audit: widen ino fields to u64 Mickaël Salaün <mic(a)digikod.net> landlock: Account all audit data allocations to user space Mickaël Salaün <mic(a)digikod.net> landlock: Fix formatting Harry Wentland <harry.wentland(a)amd.com> drm/amd/display: Fix DTB DTO updates breaking live pixel rate sources Eric Biggers <ebiggers(a)kernel.org> fscrypt: Avoid dynamic allocation in fscrypt_get_devices() Namjae Jeon <linkinjeon(a)kernel.org> ksmbd: validate ACE size against SID sub-authorities Namjae Jeon <linkinjeon(a)kernel.org> ksmbd: bound DACL dedup walk to copied ACEs Wentao Guan <guanwentao(a)uniontech.com> ksmbd: restore DACL size on check_add_overflow() to avoid malformed ACL Haofeng Li <lihaofeng(a)kylinos.cn> ksmbd: validate num_subauth when copying ACE in set_ntacl_dacl Youssef Samir <youssef.abdulrahman(a)oss.qualcomm.com> net: qrtr: ns: Raise node count limit to 512 Ming Lei <tom.leiming(a)gmail.com> ublk: wait on ublk_dev_ready() instead of ub->completion Jia Yao <jia.yao(a)intel.com> drm/xe/uapi: Reject coh_none PAT index for CPU_ADDR_MIRROR Mikulas Patocka <mpatocka(a)redhat.com> dm-verity: fix buffer overflow in FEC calculation Eric Biggers <ebiggers(a)kernel.org> dm-verity-fec: replace {MAX,MIN}_RSN with {MIN,MAX}_ROOTS Eric Biggers <ebiggers(a)kernel.org> dm-verity-fec: fix reading parity bytes split across blocks (take 3) Eric Biggers <ebiggers(a)kernel.org> dm-verity-fec: fix the size of dm_verity_fec_io::erasures Jiayuan Chen <jiayuan.chen(a)linux.dev> bpf: Fix same-register dst/src OOB read and pointer leak in sock_ops Christian König <christian.koenig(a)amd.com> drm/amdgpu: fix check in amdgpu_hmm_invalidate_gfx Yang Wang <kevinyang.wang(a)amd.com> drm/amd/pm: fix smu13 power limit range calculation Asad Kamal <asad.kamal(a)amd.com> drm/amdgpu: fix aperture mapping leak Ce Sun <cesun102(a)amd.com> drm/amdgpu: invoke pm_genpd_remove() before freeing genpd Ce Sun <cesun102(a)amd.com> drm/amdgpu: fix resource leak on ACP reset timeout Boyuan Zhang <boyuan.zhang(a)amd.com> drm/amdgpu: fix division by zero with invalid uvd dimensions Luca Coelho <luciano.coelho(a)intel.com> drm/dp_mst: Handle torn-down topology gracefully in drm_dp_mst_topology_queue_probe() Boyuan Zhang <boyuan.zhang(a)amd.com> drm/amdgpu/vcn4: avoid rereading IB param length Boyuan Zhang <boyuan.zhang(a)amd.com> drm/amdgpu/vce: fix integer overflow in image size Jakob Linke <jakob(a)linke.cx> drm/amdgpu/soc24: reset dGPU if suspend got aborted Alex Deucher <alexander.deucher(a)amd.com> drm/amdgpu/sdma4.4.2: replace BUG_ON() with WARN_ON() Boyuan Zhang <boyuan.zhang(a)amd.com> drm/amdgpu/jpeg: fix jpeg_v5_0_1_is_idle detection Boyuan Zhang <boyuan.zhang(a)amd.com> drm/amdgpu/jpeg: fix jpeg_v4_0_3_is_idle detection Alex Deucher <alexander.deucher(a)amd.com> drm/amdgpu/gfx9: replace BUG_ON() with WARN_ON() Alex Deucher <alexander.deucher(a)amd.com> drm/amdgpu/gfx9.4.3: replace BUG_ON() with WARN_ON() Alex Deucher <alexander.deucher(a)amd.com> drm/amdgpu/gfx8: drop unecessary BUG_ON() Alex Deucher <alexander.deucher(a)amd.com> drm/amdgpu/gfx12: replace BUG_ON() with WARN_ON() Alex Deucher <alexander.deucher(a)amd.com> drm/amdgpu/gfx11: replace BUG_ON() with WARN_ON() Alex Deucher <alexander.deucher(a)amd.com> drm/amdgpu/gfx10: replace BUG_ON() with WARN_ON() Yang Wang <kevinyang.wang(a)amd.com> drm/amd/pm: make pp_features read-only when scpm is enabled Yang Wang <kevinyang.wang(a)amd.com> drm/amd/pm: fix amdgpu_pm_info power display units Ethan Nelson-Moore <enelsonmoore(a)gmail.com> watchdog: s32g_wdt: remove incorrect options in watchdog_info struct James Raphael Tiovalen <jamestiotio(a)gmail.com> vxlan: mdb: Fix source list corruption on a failed replace Stefano Garzarella <sgarzare(a)redhat.com> vsock/virtio: collapse receive queue under memory pressure Daehyeon Ko <4ncienth(a)gmail.com> tipc: clear sock->sk on the failed-insert path in tipc_sk_create() Yuxiang Yang <yangyx22(a)mails.tsinghua.edu.cn> tcp: challenge ACK for non-exact RST in SYN-RECEIVED Yizhou Zhao <zhaoyz24(a)mails.tsinghua.edu.cn> tcp: initialize standalone TCP-AO response padding Justin Lai <justinlai0215(a)realtek.com> rtase: Workaround for TX hang caused by hardware packet parsing Asim Viladi Oglu Manizada <manizada(a)pm.me> pppoe: reload header pointer after dev_hard_header() Shuvam Pandey <shuvampandey1(a)gmail.com> ovpn: hold peer before scheduling keepalive work Pavitra Jha <jhapavitra98(a)gmail.com> ovpn: fix peer refcount leak in TCP error paths Kyle Zeng <kylebot(a)openai.com> openvswitch: fix GSO userspace truncation underflow Doruk Tan Ozturk <doruk(a)0sec.ai> mctp: serial: handle zero-length frames to prevent rx buffer overflow Doruk Tan Ozturk <doruk(a)0sec.ai> mac802154: llsec: reject frames shorter than the authentication tag Ibrahim Hashimov <security(a)auditcode.ai> mac802154: hold an interface reference across the scan worker Michael Bommarito <michael.bommarito(a)gmail.com> ila: reload IPv6 header after pskb_may_pull in checksum adjust Sergey Temerkhanov <sergey.temerkhanov(a)intel.com> ice: use READ_ONCE() to access cached PHC time Aleksandr Loktionov <aleksandr.loktionov(a)intel.com> ice: reject out-of-range ptype in ice_parser_profile_init Eddie Phillips <eddiephillips(a)google.com> gve: fix Rx queue stall on alloc failure James Montgomery <james_montgomery(a)disroot.org> ksmbd: defer destroy_previous_session() until after NTLM authentication Carl Johnson <carl(a)jpartners.org> smb: client: handle STATUS_STOPPED_ON_SYMLINK responses without a symlink target Raphael Zimmer <raphael.zimmer(a)tu-ilmenau.de> rbd: Reset positive result codes to zero in object map update path Christian Brauner <brauner(a)kernel.org> super: fix emergency thaw deadlock on frozen block devices Masami Hiramatsu (Google) <mhiramat(a)kernel.org> selftests/ftrace: Reset triggers at top level before instance loop Paul Greenwalt <paul.greenwalt(a)intel.com> ice: fix PTP Call Trace during PTP release Sven Schnelle <svens(a)linux.ibm.com> ptp: ptp_s390: Add missing facility check Jann Horn <jannh(a)google.com> proc: Fix broken error paths for namespace links Coia Prant <coiaprant(a)gmail.com> net: pcs: xpcs: fix SGMII state reading Fan Wu <fanwu01(a)zju.edu.cn> net: hip04: fix RX buffer leak on build_skb failure Shiming Cheng <shiming.cheng(a)mediatek.com> net: gro: fix double aggregation of flush-marked skbs David Lee <david.lee(a)trailofbits.com> net/x25: fix use-after-free in x25_kill_by_neigh() Manjunath Patil <manjunath.b.patil(a)oracle.com> net/mlx5e: Use sender devcom for MPV master-up Bryam Vargas <hexlabsecurity(a)proton.me> net/iucv: fix use-after-free of a severed iucv_path Hidayath Khan <hidayath(a)linux.ibm.com> net/af_iucv: fix NULL deref in afiucv_hs_callback_syn() Doruk Tan Ozturk <doruk(a)0sec.ai> geneve: require CAP_NET_ADMIN in the device netns for changelink Sungmin Kang <726ksm(a)gmail.com> net: slip: serialize receive against buffer reallocation Doruk Tan Ozturk <doruk(a)0sec.ai> vxlan: require CAP_NET_ADMIN in the device netns for changelink Breno Leitao <leitao(a)debian.org> phonet: pep: fix use-after-free in pep_get_sb() Markus Breitenberger <bre(a)keba.com> net: stmmac: intel: skip SerDes reconfig when rate is unchanged Lu Baolu <baolu.lu(a)linux.intel.com> iommu/vt-d: Disallow SVA if page walk is not coherent Zhang Yi <yi.zhang(a)huawei.com> iomap: fix out-of-bounds bitmap_set() with zero-length range Yitang Yang <yi1tang.yang(a)gmail.com> io_uring/rw: fix missing ERESTARTSYS conversion in read paths Tengda Wu <wutengda(a)huaweicloud.com> ftrace: Add global mutex to serialize trace_parser access Eric Biggers <ebiggers(a)kernel.org> fscrypt: Add missing superblock check in find_or_insert_direct_key() Amir Goldstein <amir73il(a)gmail.com> fs: preserve ACL_DONT_CACHE state in forget_cached_acl() Chen Changcheng <chenchangcheng(a)kylinos.cn> fs/super: fix emergency thaw double-unlock of s_umount Christian Brauner <brauner(a)kernel.org> binfmt_elf_fdpic: only honour the first PT_INTERP Chancel Liu <chancel.liu(a)nxp.com> ASoC: fsl_sai: Fix spurious BCLK on resume by clearing BYP Chancel Liu <chancel.liu(a)nxp.com> ASoC: fsl: imx-card: Skip sysclk reset for active DAIs in shutdown Shihuang Liu <shlomojune6(a)gmail.com> amt: fix use-after-free in AMT delayed works Douya Le <ldy3087146292(a)gmail.com> libceph: remove debugfs files before client teardown Douya Le <ldy3087146292(a)gmail.com> libceph: reject zero bucket types in crush_decode Raphael Zimmer <raphael.zimmer(a)tu-ilmenau.de> libceph: Reject monmaps advertising zero monitors Shuangpeng Bai <shuangpeng.kernel(a)gmail.com> libceph: refresh auth->authorizer_buf{,_len} after authorizer update Zhao Zhang <zzhan461(a)ucr.edu> libceph: guard missing CRUSH type name lookup Raphael Zimmer <raphael.zimmer(a)tu-ilmenau.de> libceph: Fix multiplication overflow in decode_new_up_state_weight() Douya Le <ldy3087146292(a)gmail.com> libceph: bound get_version reply decode to front len Wentao Liang <vulab(a)iscas.ac.cn> ceph: fix writeback_count leak in write_folio_nounlock() WenTao Liang <vulab(a)iscas.ac.cn> ceph: fix refcount leak in ceph_readdir() Bryam Vargas <hexlabsecurity(a)proton.me> ceph: fix pre-auth out-of-bounds read on snaptrace in ceph_handle_caps() Max Kellermann <max.kellermann(a)ionos.com> ceph: add owner/capability checks for CEPH_IOC_SET_LAYOUT* Zhiling Zou <roxy520tt(a)gmail.com> sctp: close UDP tunnel sockets during netns teardown Zhiling Zou <roxy520tt(a)gmail.com> sctp: avoid auth_enable sysctl UAF during netns teardown Jun Yang <junvyyang(a)tencent.com> sctp: don't free the ASCONF's own transport in DEL-IP processing Rik van Riel <riel(a)surriel.com> mm/huge_memory: set PG_has_hwpoisoned only after new folio head is established Breno Leitao <leitao(a)debian.org> mm/kmemleak: fix checksum computation for per-cpu objects David Howells <dhowells(a)redhat.com> afs: Fix afs_edit_dir_remove() to get, not find, block 0 Geliang Tang <geliang(a)kernel.org> mptcp: pm: userspace: fix use-after-free in get_local_id Michael Bommarito <michael.bommarito(a)gmail.com> mptcp: only set DATA_FIN when a mapping is present Chenguang Zhao <zhaochenguang(a)kylinos.cn> mptcp: decrement subflows counter on failed passive join Will Deacon <will(a)kernel.org> Revert "arm64: syscall: Ensure saved x0 is kept in-sync with tracer updates" Will Deacon <will(a)kernel.org> arm64: syscall: Ensure saved x0 is kept in-sync with tracer updates Dev Jain <dev.jain(a)arm.com> arm64: make huge_ptep_get handled unaligned addresses Masami Hiramatsu (Google) <mhiramat(a)kernel.org> tracing/probes: Prevent out-of-bounds write in __trace_probe_log_err() Masami Hiramatsu (Google) <mhiramat(a)kernel.org> tracing/probes: Fix potential underflow in LEN_OR_ZERO macro Masami Hiramatsu (Google) <mhiramat(a)kernel.org> tracing/probes: Avoid temporary buffer truncation in trace_probe_match_command_args() Masami Hiramatsu (Google) <mhiramat(a)kernel.org> tracing/eprobe: Fix exact system name matching in eprobe_dyn_event_match() Masami Hiramatsu (Google) <mhiramat(a)kernel.org> tracing: Fix union collision of module and refcnt for dynamic events deepakraog <gaikwad.dcg(a)gmail.com> tracing: Fix resource leak on mmiotrace trace_pipe close Steven Rostedt <rostedt(a)goodmis.org> tracing: Fix mmiotrace possible NULL dereferencing of hiter->dev Usama Arif <usama.arif(a)linux.dev> tracing: Fix context switch counter truncation Xu Rao <raoxu(a)uniontech.com> misc: nsm: pin the module while the device is open Runyu Xiao <runyu.xiao(a)seu.edu.cn> misc: nsm: only unlock nsm_dev on post-lock error paths Guangshuo Li <lgs201920130244(a)gmail.com> intel_th: fix MSC output device reference leak Alexander Usyskin <alexander.usyskin(a)intel.com> mei: bus: access mei_device under device_lock on cleanup Ethan Nelson-Moore <enelsonmoore(a)gmail.com> selftests: ntsync: correct CONFIG_NTSYNC name Jiangshan Yi <yijiangshan(a)kylinos.cn> serial: 8250_mid: Fix NULL function pointer dereference on DNV/ICX-D/SNR platforms Hugo Villeneuve <hvilleneuve(a)dimonoff.com> serial: sc16is7xx: implement gpio get_direction() callback Ben Hutchings <benh(a)debian.org> uio_hv_generic: Bind to FCopy device by default Ian Abbott <abbotti(a)mev.co.uk> comedi: comedi_parport: deal with premature interrupt Nathan Chancellor <nathan(a)kernel.org> x86/boot/compressed: Disable jump tables Tze Yee Ng <tze.yee.ng(a)altera.com> firmware: stratix10-svc: fix memory leaks and list corruption bugs Cen Zhang (Microsoft) <blbllhy(a)gmail.com> rhashtable: clear stale iter->p on table restart Xu Rao <raoxu(a)uniontech.com> cdrom: fix stack out-of-bounds read in CDROMVOLCTRL Rong Bao <rong.bao(a)csmantle.top> LoongArch: Retrieve CPU package ID from PPTT when available Kanglong Wang <wangkanglong(a)loongson.cn> LoongArch: Move jump_label_init() before parse_early_param() Haoran Jiang <jianghaoran(a)kylinos.cn> LoongArch: Fix oops during single-step debugging George Guo <guodongtai(a)kylinos.cn> LoongArch: Fix address space mismatch in kexec command line lookup Miguel Ojeda <ojeda(a)kernel.org> objtool/rust: add one more `noreturn` Rust function for Rust 1.99.0 Alexandre Courbot <acourbot(a)nvidia.com> rust: allow `clippy::unwrap_or_default` globally FUJITA Tomonori <fujita.tomonori(a)gmail.com> rust: time: fix as_micros_ceil() to round correctly for negative Delta Alice Ryhl <aliceryhl(a)google.com> rust_binder: only print failure if error has source Zixing Liu <liushuyu(a)aosc.io> platform/loongarch: laptop: Explicitly reset bl_powered state when suspend Christian Brauner <brauner(a)kernel.org> binfmt_misc: set have_execfd only once the interpreter is opened Christian Brauner <brauner(a)kernel.org> exec: fix unsigned loop counter wrap in transfer_args_to_stack() Chengfeng Ye <nicoyip.dev(a)gmail.com> Bluetooth: RFCOMM: Fix session UAF in set_termios Chengfeng Ye <nicoyip.dev(a)gmail.com> Bluetooth: hci_sync: Protect UUID list traversal MinJea Kim <qndkdrnl(a)gmail.com> staging: rtl8723bs: fix inverted HT40 secondary channel offset Moksh Panicker <mokshpanicker.7(a)gmail.com> staging: rtl8723bs: fix OOB reads in rtw_get_wps_ie() Wentao Liang <vulab(a)iscas.ac.cn> wifi: ath11k: fix refcount leak in ath11k_ahb_fw_resources_init() LiangCheng Wang <zaq14760(a)gmail.com> wifi: brcmfmac: set F2 blocksize to 256 for BCM43752 Fan Wu <fanwu01(a)zju.edu.cn> wifi: brcmfmac: make release_scratchbuffers idempotent Devin Wittmayer <lucid_duck(a)justthetip.ca> wifi: mt76: mt7925: drop TXRX_NOTIFY on non-mmio buses Devin Wittmayer <lucid_duck(a)justthetip.ca> wifi: mt76: mt7921: drop TXRX_NOTIFY on non-mmio buses Devin Wittmayer <lucid_duck(a)justthetip.ca> wifi: mt76: mt7615: drop TXRX_NOTIFY on non-mmio buses Huihui Huang <hhhuang(a)smu.edu.sg> wifi: wilc1000: validate assoc response length before subtracting header Doruk Tan Ozturk <doruk(a)0sec.ai> wifi: mwifiex: fix NULL dereference when the AP has HT-cap but no HT-oper Daniel Hodges <git(a)danielhodges.dev> wifi: ath6kl: fix use-after-free in aggr_reset_state() Tristan Madani <tristan(a)talencesecurity.com> wifi: ath6kl: fix OOB access from firmware ADDBA window size Norbert Szetei <norbert(a)doyensec.com> ALSA: timer: don't re-enter an instance callback that is still running Norbert Szetei <norbert(a)doyensec.com> ALSA: timer: drain a slave's callback before its master detaches it Kai Vehmanen <kai.vehmanen(a)linux.intel.com> ALSA: hda: codecs: hdmi: disable keep-alive before audio format change Norbert Szetei <norbert(a)doyensec.com> ALSA: seq: close a re-opened queue timer in the destructor Nikita Maksimov <nickstogramm(a)yandex.ru> ALSA: hda/realtek: Fix speakers on Lunnen Ground 14 Johan Hovold <johan(a)kernel.org> media: vpif_capture: fix OF node reference imbalance Guangshuo Li <lgs201920130244(a)gmail.com> media: vivid: fix cleanup bugs in vivid_init() Hans Verkuil <hverkuil+cisco(a)kernel.org> media: vivid: check for vb2_is_busy() when toggling caps Hans Verkuil <hverkuil+cisco(a)kernel.org> media: vivid: add vivid_update_reduced_fps() Guangshuo Li <lgs201920130244(a)gmail.com> media: vimc: fix reference leak on failed device registration Guangshuo Li <lgs201920130244(a)gmail.com> media: vidtv: fix reference leak on failed device registration Benjamin Gaignard <benjamin.gaignard(a)collabora.com> media: verisilicon: Export only needed pixels formats Zile Xiong <xiongzile99(a)gmail.com> media: vb2: use ssize_t for vb2_read/vb2_write Sakari Ailus <sakari.ailus(a)linux.intel.com> media: v4l2-subdev: Fail {enable,disable}_streams and s_streaming nicely Mirela Rabulea <mirela.rabulea(a)nxp.com> media: v4l2-fwnode: Fix subdev owner overwritten in v4l2_async_register_subdev_sensor() Pengpeng Hou <pengpeng(a)iscas.ac.cn> media: v4l2-ctrls: validate HEVC active reference counts Sergey Shtylyov <s.shtylyov(a)auroraos.dev> media: v4l2-ctrls-request: add NULL check in v4l2_ctrl_request_complete() Myeonghun Pak <mhun512(a)gmail.com> media: ti: vpe: unwind v4l2 device registration on probe error Hungyu Lin <dennylin0707(a)gmail.com> media: tegra-video: vi: fix invalid u32 return value in format lookup Dmitry Osipenko <dmitry.osipenko(a)collabora.com> media: synopsys: hdmirx: Fix HPD lane hold time Valery Borovsky <vebohr(a)gmail.com> media: sun4i-csi: Return queued buffers on start_streaming() failure Myeonghun Pak <mhun512(a)gmail.com> media: stm32: dcmi: unregister notifier on probe failure Valery Borovsky <vebohr(a)gmail.com> media: stm32-dcmipp: Return queued buffers on start_streaming() failure Ma Ke <make24(a)iscas.ac.cn> media: saa7134: Fix a possible memory leak in saa7134_video_init1 Tommaso Merciai <tommaso.merciai.xr(a)bp.renesas.com> media: rzg2l-cru: Skip ICnMC configuration when ICnSVC is used Valery Borovsky <vebohr(a)gmail.com> media: rtl2832_sdr: Return queued buffers on start_streaming() failure Deepanshu Kartikey <kartikey406(a)gmail.com> media: rtl2832: fix use-after-free in rtl2832_remove() Myeonghun Pak <mhun512(a)gmail.com> media: radio-si476x: Unregister v4l2_device on probe failure Bryan O'Donoghue <bryan.odonoghue(a)linaro.org> media: qcom: camss: Fix RDI streaming for CSID GEN3 Bryan O'Donoghue <bryan.odonoghue(a)linaro.org> media: qcom: camss: Fix RDI streaming for CSID GEN2 Bryan O'Donoghue <bryan.odonoghue(a)linaro.org> media: qcom: camss: Fix RDI streaming for CSID 680 Valery Borovsky <vebohr(a)gmail.com> media: pwc: Return queued buffers on start_streaming() failure Valery Borovsky <vebohr(a)gmail.com> media: pwc: Drain fill_buf on start_streaming() failure Krzysztof Kozlowski <krzysztof.kozlowski(a)oss.qualcomm.com> media: pci: dm1105: Free allocated workqueue Guoniu Zhou <guoniu.zhou(a)nxp.com> media: nxp: imx8-isi: Fix scale factor calculation for hardware rounding Guoniu Zhou <guoniu.zhou(a)nxp.com> media: nxp: imx8-isi: Fix potential out-of-bounds issues Xiaolei Wang <xiaolei.wang(a)windriver.com> media: nxp: imx8-isi: Fix missing v4l2_subdev_cleanup() in pipe init error path Xiaolei Wang <xiaolei.wang(a)windriver.com> media: nxp: imx8-isi: Clean up already-initialized pipes on probe failure Xiaolei Wang <xiaolei.wang(a)windriver.com> media: nxp: imx8-isi: Add missing v4l2_subdev_cleanup() in crossbar and pipe David Carlier <devnexen(a)gmail.com> media: nuvoton: npcm-video: fix memory leaks in probe and remove David Carlier <devnexen(a)gmail.com> media: nuvoton: npcm-video: fix error handling in npcm_video_init() Valery Borovsky <vebohr(a)gmail.com> media: msi2500: Return queued buffers on start_streaming() failure Anand Moon <linux.amoon(a)gmail.com> media: meson: vdec: Fix memory leak in error path of vdec_open Guangshuo Li <lgs201920130244(a)gmail.com> media: marvell-cam: fix missing pci_disable_device() on remove Dmitry Baryshkov <dmitry.baryshkov(a)oss.qualcomm.com> media: iris: Fix use IRQF_NO_AUTOEN when requesting the IRQ Marco Nenciarini <mnencia(a)kcore.it> media: intel/ipu6: Improve DWC PHY HSFREQRANGE band selection for overlapping ranges Sakari Ailus <sakari.ailus(a)linux.intel.com> media: imx219: Fix maximum frame length in lines Martin Hecht <mhecht73(a)gmail.com> media: i2c: alvium: fix critical pointer access in alvium_ctrl_init Wang Jun <1742789905(a)qq.com> media: cx23885: add ioremap return check and cleanup Johan Hovold <johan(a)kernel.org> media: cx231xx: fix devres lifetime Brandon Brnich <b-brnich(a)ti.com> media: chips-media: wave5: Move src_buf Removal to finish_encode Pengpeng Hou <pengpeng(a)iscas.ac.cn> media: cedrus: skip invalid H.264 reference list entries Samuel Holland <samuel(a)sholland.org> media: cedrus: Fix missing cleanup in error path Myeonghun Pak <mhun512(a)gmail.com> media: cedrus: clean up media device on probe failure Myeonghun Pak <mhun512(a)gmail.com> media: cec: seco: unregister adapter on IR probe failure David Carlier <devnexen(a)gmail.com> media: aspeed: fix missing of_reserved_mem_device_release() on probe failure Ricardo Ribalda <ribalda(a)chromium.org> media: amlogic-c3: Add validations for ae and awb config Valery Borovsky <vebohr(a)gmail.com> media: airspy: Return queued buffers on start_streaming() failure Maíra Canal <mcanal(a)igalia.com> drm/v3d: Reach the GMP through the hub registers on V3D 7.x Matthew Brost <matthew.brost(a)intel.com> drm/gpusvm: Fix MM reference leak in drm_gpusvm_range_evict Linmao Li <lilinmao(a)kylinos.cn> drm/vc4: Prevent shader BO mappings from becoming writable Ian Forbes <ian.forbes(a)broadcom.com> drm/vmwgfx: Validate vmw_surface_metadata::array_size Leo Li <sunpeng.li(a)amd.com> drm/amd/display: Fix missing DCE check in dm_gpureset_toggle_interrupts() Linmao Li <lilinmao(a)kylinos.cn> drm/vc4: Shut down BO cache timer before teardown Leo Li <sunpeng.li(a)amd.com> drm/amd/display: Fix flip-done timeouts on mode1 reset Zhu Lingshan <lingshan.zhu(a)amd.com> drm/amdgpu: fix bo->pin leaking in amdgpu_bo_create_reserved Mario Limonciello <mario.limonciello(a)amd.com> drm/amdgpu: Disable PCIe dynamic speed switching on Ryzen Pinnacle Ridge Mario Limonciello <mario.limonciello(a)amd.com> drm/amd/display: Fix backlight max_brightness to match exported range Alessandro Rinaldi <ale(a)alerinaldi.it> drm/amd/display: Force PWM backlight on Lenovo Legion 5 15ARH05 Andriy Korud <a.korud(a)gmail.com> drm/amd/display: dce100: skip non-DP stream encoders for DP MST Leo Li <sunpeng.li(a)amd.com> drm/amd/display: consolidate DCN vblank/flip handling onto vupdate_no_lock WenTao Liang <vulab(a)iscas.ac.cn> drm/amd/display: set new_stream to NULL after release Timur Kristóf <timur.kristof(a)gmail.com> drm/amd/pm/ci: Don't disable MCLK DPM on Bonaire 0x6658 (R7 260X) Mario Limonciello <mario.limonciello(a)amd.com> drm/amdgpu: Fix VFCT bus number matching with soft filter Mario Limonciello <mario.limonciello(a)amd.com> drm/amdgpu: Release VFCT ACPI table reference Osama Abdelkader <osama.abdelkader(a)gmail.com> drm/panthor: return error on truncated firmware Matthew Brost <matthew.brost(a)intel.com> drm/ttm: Account for NULL and handle pages in ttm_pool_backup Jason Macnak <natsu(a)google.com> drm/virtio: Don't detach GEM from a non-created context Alex Deucher <alexander.deucher(a)amd.com> drm/gfx10: Program DB_RING_CONTROL Yang Wang <kevinyang.wang(a)amd.com> drm/amd/pm: fix smu14 power limit range calculation Jani Nikula <jani.nikula(a)intel.com> drm/i915/mst: limit DP MST ESI service loop Joonas Lahtinen <joonas.lahtinen(a)linux.intel.com> drm/i915/gem: Fix NULL deref in I915_CONTEXT_PARAM_SSEU Joonas Lahtinen <joonas.lahtinen(a)linux.intel.com> drm/i915/gem: Do not leak siblings[] on proto context error Shahyan Soltani <shahyan.soltani(a)amd.com> drm/amdgpu: fix lifetime issue of amdgpu_vm_get_task_info_pasid() Kenneth Feng <kenneth.feng(a)amd.com> drm/amd/amdgpu: disable ASPM on VI if pcie dpm is disabled Jani Nikula <jani.nikula(a)intel.com> drm/i915/bios: range check LFP Data Block panel_type2 Joonas Lahtinen <joonas.lahtinen(a)linux.intel.com> drm/i915: Return NULL on error in active_instance Alex Deucher <alexander.deucher(a)amd.com> drm/amdgpu/sdma5.0: replace BUG_ON() with WARN_ON() Alex Deucher <alexander.deucher(a)amd.com> drm/amdgpu/sdma5.2: replace BUG_ON() with WARN_ON() Alex Deucher <alexander.deucher(a)amd.com> drm/amdgpu/sdma6.0: replace BUG_ON() with WARN_ON() Alex Deucher <alexander.deucher(a)amd.com> drm/amdgpu/sdma7.0: replace BUG_ON() with WARN_ON() Jani Nikula <jani.nikula(a)intel.com> drm/i915/hdcp: check streams[] bounds before overflow Jani Nikula <jani.nikula(a)intel.com> drm/i915/hdcp: require monotonically increasing seq_num_v Bryam Vargas <hexlabsecurity(a)proton.me> drm/virtio: bound EDID block reads to the response buffer WenTao Liang <vulab(a)iscas.ac.cn> drm/amd/display: detect_link_and_local_sink: DP alt mode timeout path leaks prev_sink reference Thomas Zimmermann <tzimmermann(a)suse.de> drm/amd/display: Handle struct drm_plane_state.ignore_damage_clips Yongqiang Sun <Yongqiang.Sun(a)amd.com> drm/amdkfd: fix 32-bit overflow in CWSR total size calculation David Francis <David.Francis(a)amd.com> drm/amdkfd: Check bounds on CRIU restore queue type and mqd size David Francis <David.Francis(a)amd.com> drm/amdkfd: Check bounds in allocate_event_notification_slot David Francis <David.Francis(a)amd.com> drm/amdkfd: Use kvcalloc to allocate arrays Icenowy Zheng <zhengxingda(a)iscas.ac.cn> drm/imagination: acquire vm_ctx->lock before mapping memory to GPU VM Luigi Santivetti <luigi.santivetti(a)imgtec.com> drm/imagination: fix error checking of pvr_vm_context_lookup() Shuvam Pandey <shuvampandey1(a)gmail.com> drm/imagination: Fix user array stride in pvr_set_uobj_array() Brajesh Gupta <brajesh.gupta(a)imgtec.com> drm/imagination: Fix double call to drm_sched_entity_fini() Nitin Gote <nitin.r.gote(a)intel.com> drm/xe: Hold a dma-buf reference for imported BOs Matthew Brost <matthew.brost(a)intel.com> drm/xe: Fix PTE index in xe_vm_populate_pgtable() for chunked binds Matthew Brost <matthew.brost(a)intel.com> drm/xe: Return error on non-migratable faults requiring devmem Pavel Ondračka <pavel.ondracka(a)gmail.com> drm/radeon: fix r100_copy_blit for large BOs Wentao Liang <vulab(a)iscas.ac.cn> drm/nouveau/acr: fix missing nvkm_done() in error path of nvkm_acr_oneinit() Joonas Lahtinen <joonas.lahtinen(a)linux.intel.com> drm/i915/gem: Add missing nospec on parallel submit slot Jani Nikula <jani.nikula(a)intel.com> drm/displayid: fix Tiled Display Topology ID size Thomas Zimmermann <tzimmermann(a)suse.de> drm/sysfb: Return errno code from drm_sysfb_get_visible_size() Thomas Zimmermann <tzimmermann(a)suse.de> drm/sysfb: Avoid possible truncation with calculating visible size Junrui Luo <moonafterrain(a)outlook.com> drm/nouveau: fix reversed error cleanup order in ucopy functions Mario Limonciello <mario.limonciello(a)amd.com> drm/amdgpu: validate CP_GFX_SHADOW chunk size in CS pass1 Timur Kristóf <timur.kristof(a)gmail.com> drm/amdgpu: Fix amdgpu_bo_move() when old_mem and new_mem are both GTT Jiqian Chen <Jiqian.Chen(a)amd.com> drm/amdgpu/gfx9: Fix Ring and IB test fail after mode2 Thomas Zimmermann <tzimmermann(a)suse.de> drm/sysfb: Avoid truncating maximum stride Thomas Zimmermann <tzimmermann(a)suse.de> drm/sysfb: Do not page-align visible size of the framebuffer Mario Limonciello <mario.limonciello(a)amd.com> drm/amdgpu: check amdgpu_vm_bo_find() result in GET_MAPPING_INFO Timur Kristóf <timur.kristof(a)gmail.com> drm/amdgpu/uvd: Place VCPU BO only in VRAM for UVD 4.x and older Timur Kristóf <timur.kristof(a)gmail.com> drm/amdgpu/uvd: Fix forcing MSG, FB BOs into VCPU segment when it isn't at 0 (v2) Asad Kamal <asad.kamal(a)amd.com> drm/amdgpu/gfx: fix cleaner shader IB buffer overflow Ashutosh Desai <ashutoshdesai993(a)gmail.com> drm/dp/mst: fix OOB reads on 2-byte fields in sideband reply parsers Alessio Belle <alessio.belle(a)imgtec.com> drm/imagination: Fit paired fragment job in the correct CCCB Ashutosh Desai <ashutoshdesai993(a)gmail.com> drm/dp/mst: fix buffer overflows in sideband chunk accumulation Ashutosh Desai <ashutoshdesai993(a)gmail.com> drm/dp/mst: fix OOB reads in remote DPCD/I2C sideband reply parsers Vitor Soares <vitor.soares(a)toradex.com> drm/bridge: cdns-dsi: Replace deprecated UNIVERSAL_DEV_PM_OPS() Alessio Belle <alessio.belle(a)imgtec.com> drm/imagination: Count paired job fence as dependency in prepare_job() Chen Ni <nichen(a)iscas.ac.cn> drm/rockchip: analogix_dp: Add missing error check for platform_get_resource() Sergey Shtylyov <s.shtylyov(a)auroraos.dev> drm/rockchip: cdn-dp: add missing check in cdn_dp_config_video() Tomi Valkeinen <tomi.valkeinen(a)ideasonboard.com> drm/tidss: Fix missing drm_bridge_add() call Biju Das <biju.das.jz(a)bp.renesas.com> drm: renesas: rzg2l_mipi_dsi: Move rzg2l_mipi_dsi_set_display_timing() Biju Das <biju.das.jz(a)bp.renesas.com> drm: renesas: rzg2l_mipi_dsi: Increase reset deassertion delay Chengfeng Ye <nicoyip.dev(a)gmail.com> bpf, sockmap: Fix cork use-after-free in tcp_bpf_sendmsg() Lorenzo Bianconi <lorenzo(a)kernel.org> net: airoha: fix ETS channel derivation in airoha_tc_setup_qdisc_ets() Minhong He <heminhong(a)kylinos.cn> mctp: check register_netdevice_notifier() error in mctp_device_init() Clark Wang <xiaoning.wang(a)nxp.com> ptp: netc: explicitly clear TMR_OFF during initialization Cen Zhang (Microsoft) <blbllhy(a)gmail.com> rds: tcp: unregister sysctl before tearing down listen socket Nikola Z. Ivanov <zlatistiv(a)gmail.com> ipv6: Change allocation flags to match rcu_read_lock section requirements Paul Greenwalt <paul.greenwalt(a)intel.com> ice: prevent tstamp ring allocation for non-PF VSI types Marcin Szycik <marcin.szycik(a)linux.intel.com> ice: fix LAG recipe to profile association Vincent Chen <vincent.chen(a)sifive.com> ice: allow creating VFs when !CONFIG_ICE_SWITCHDEV Li RongQing <lirongqing(a)baidu.com> net: ipv6: fix dif and sdif mismatch in raw6_icmp_error Hariprasad Kelam <hkelam(a)marvell.com> octeontx2-pf: tc: fix egress ratelimiting Alexei Lazar <alazar(a)nvidia.com> net/mlx5e: Reject unsupported CB Shaper TSA in ETS validation Alexei Lazar <alazar(a)nvidia.com> net/mlx5e: Report zero bandwidth for non-ETS traffic classes Yael Chemla <ychemla(a)nvidia.com> net/mlx5: E-Switch, fix zero num_dest in prio_tag egress vlan rule Gal Pressman <gal(a)nvidia.com> net/mlx5: Fix MCIA register buffer overflow on 32 dword reads Gal Pressman <gal(a)nvidia.com> net/mlx5: Refactor EEPROM query error handling to return status separately Runyu Xiao <runyu.xiao(a)seu.edu.cn> raw: annotate lockless match fields in raw_v4_match() Aldo Ariel Panzardo <qwe.aldo(a)gmail.com> net: qrtr: restrict socket creation to the initial network namespace Chenguang Zhao <zhaochenguang(a)kylinos.cn> hinic: remove unused ethtool RSS user configuration buffers Eric Dumazet <edumazet(a)google.com> ppp: annotate data races in ppp_generic Eric Dumazet <edumazet(a)google.com> ipv4: icmp: fill flow parameters in icmp_route_lookup decoy lookup Suman Ghosh <sumang(a)marvell.com> octeontx2-vf: set TC flower flag on MCAM entry allocation Yun Zhou <yun.zhou(a)windriver.com> net: gre: fix lltx regression for GRE tunnels with SEQ/CSUM vadik likholetov <vadikas(a)gmail.com> net: stmmac: enable the MAC on link up for all supported speeds Nazim Amirul <muhammad.nazim.amirul.nazle.asmade(a)altera.com> net: stmmac: reset residual action in L3L4 filters on delete Nazim Amirul <muhammad.nazim.amirul.nazle.asmade(a)altera.com> net: stmmac: fix l3l4 filter rejecting unsupported offload requests Nazim Amirul <muhammad.nazim.amirul.nazle.asmade(a)altera.com> net: stmmac: xgmac: fix l4 filter port overwrite on register update Russell King (Oracle) <rmk+kernel(a)armlinux.org.uk> net: stmmac: cores: remove many xxx_SHIFT definitions Rohan G Thomas <rohan.g.thomas(a)altera.com> net: stmmac: socfpga: Add hardware supported cross-timestamp Rohan G Thomas <rohan.g.thomas(a)altera.com> net: stmmac: socfpga: Enable TBS support for Agilex5 Rohan G Thomas <rohan.g.thomas(a)altera.com> net: stmmac: socfpga: Agilex5 EMAC platform configuration Russell King (Oracle) <rmk+kernel(a)armlinux.org.uk> net: stmmac: remove xstats.pcs_* members Xiang Mei (Microsoft) <xmei5(a)asu.edu> bpf: tcp: fix double sock release on batch realloc José Expósito <jose.exposito(a)redhat.com> drm/tests: shmem: Set DMA mask to 64-bit in drm_gem_shmem Cen Zhang (Microsoft) <blbllhy(a)gmail.com> tipc: fix u16 MTU truncation in media and bearer MTU validation Zhang Yi <yi.zhang(a)huawei.com> iomap: correct the range of a partial dirty clear Shuicheng Lin <shuicheng.lin(a)intel.com> drm/xe/vm: Fix SVM leak on resv obj alloc failure in xe_vm_create() Raag Jadav <raag.jadav(a)intel.com> drm/xe/i2c: Allow per domain unique id Harshaka Narayana <harshaka.narayana(a)broadcom.com> vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets Qing Luo <luoqing(a)kylinos.cn> sctp: auth: verify auth requirement when auth_chunk is NULL Michael Walle <mwalle(a)kernel.org> net: dpaa: fix mode setting Eric Dumazet <edumazet(a)google.com> net: hsr: fix memory leak on slave unregistration by removing synced VLANs Nikolay Aleksandrov <razor(a)blackwall.org> net: bridge: vlan: fix vlan range dumps starting with pvid Michael Bommarito <michael.bommarito(a)gmail.com> amt: make the head writable before rewriting the L2 header Michael Bommarito <michael.bommarito(a)gmail.com> amt: re-read skb header pointers after every pull Amir Goldstein <amir73il(a)gmail.com> ovl: check access to copy_file_range source with src mounter creds Christian Brauner <brauner(a)kernel.org> ovl: port ovl_copyfile() to cred guard Christian Brauner <brauner(a)kernel.org> ovl: add override_creds cleanup guard extension for overlayfs Christian Brauner <brauner(a)kernel.org> cred: add scoped_with_kernel_creds() Julian Braha <julianbraha(a)gmail.com> drm/panel: s6e3ha8: fix unmet dependency on DRM_DISPLAY_HELPER Yichong Chen <chenyichong(a)uniontech.com> ovl: fix trusted xattr escape prefix matching Shelley Yang <shelley.yang(a)infineon.com> wifi: brcmfmac: fix 802.1X-SHA256 call trace warning Lorenzo Bianconi <lorenzo(a)kernel.org> wifi: mt76: mt7996: fix possible NULL-pointer deref in mt7996_mcu_sta_bfer_eht() Sean Wang <sean.wang(a)mediatek.com> wifi: mt76: mt7925: fix crash in reset link replay Lorenzo Bianconi <lorenzo(a)kernel.org> wifi: mt76: mt7996: check pointer returned by mt76_connac_get_he_phy_cap() Lorenzo Bianconi <lorenzo(a)kernel.org> wifi: mt76: mt7925: fix possible NULL-pointer deref in mt7925_mcu_bss_he_tlv() Lorenzo Bianconi <lorenzo(a)kernel.org> wifi: mt76: connac: fix possible NULL-pointer deref in mt76_connac_mcu_uni_bss_he_tlv() Ruoyu Wang <ruoyuw560(a)gmail.com> wifi: mt76: mt7915: guard HE capability lookups Guangshuo Li <lgs201920130244(a)gmail.com> wifi: mt76: mt7925: guard link STA in decap offload Eric Dumazet <edumazet(a)google.com> ppp: annotate concurrent dev->stats accesses Qingfang Deng <dqfext(a)gmail.com> ppp: don't store tx skb in the fastpath Qingfang Deng <dqfext(a)gmail.com> ppp: enable TX scatter-gather Helen Koike <koike(a)igalia.com> tipc: fix infinite loop in __tipc_nl_compat_dumpit Xiang Mei (Microsoft) <xmei5(a)asu.edu> nexthop: initialize extack in nh_res_bucket_migrate() Xiang Mei (Microsoft) <xmei5(a)asu.edu> gtp: check skb_pull_data() return in gtp1u_send_echo_resp() Matthieu Baerts (NGI0) <matttbe(a)kernel.org> selftests: drv-net: increase timeout Matthieu Baerts (NGI0) <matttbe(a)kernel.org> selftests: ovpn: increase timeout Matthieu Baerts (NGI0) <matttbe(a)kernel.org> selftests: ovpn: add IPV6 and VETH configs Matthieu Baerts (NGI0) <matttbe(a)kernel.org> selftests: openvswitch: add config file Matthieu Baerts (NGI0) <matttbe(a)kernel.org> selftests: af_unix: add USER_NS config Rishikesh Jethwani <rjethwani(a)purestorage.com> tls: device: push pending open record on splice EOF Myeonghun Pak <mhun512(a)gmail.com> net: mctp i3c: clean up notifier and buses if driver register fails Cen Zhang (Microsoft) <blbllhy(a)gmail.com> sctp: validate stream count in sctp_process_strreset_inreq() Nikhil P. Rao <nikhil.rao(a)amd.com> pds_core: check for workqueue allocation failure Nikhil P. Rao <nikhil.rao(a)amd.com> pds_core: fix auxiliary device add/del races Nikhil P. Rao <nikhil.rao(a)amd.com> pds_core: order completion reads after the ownership check Nikhil P. Rao <nikhil.rao(a)amd.com> pds_core: yield the CPU while waiting for the adminq to drain Nikhil P. Rao <nikhil.rao(a)amd.com> pds_core: fix use-after-free on workqueue during remove Nikhil P. Rao <nikhil.rao(a)amd.com> pds_core: fix deadlock between reset thread and remove HanQuan <eilaimemedsnaimel(a)gmail.com> sctp: fix auth_chunk_list capacity check in sctp_auth_ep_add_chunkid Chenguang Zhao <zhaochenguang(a)kylinos.cn> net: txgbe: fix FDIR filter leak on remove Kuniyuki Iwashima <kuniyu(a)google.com> net: Call net_enable_timestamp() before failure in sk_clone(). Kuniyuki Iwashima <kuniyu(a)google.com> soreuseport: Clear sk_reuseport_cb before failure in sk_clone(). Prashanth Kumar KR <PrashanthKumar.K.R(a)amd.com> amd-xgbe: fix MAC_AUTO_SW handling in CL37 AN Steven Price <steven.price(a)arm.com> arm64: Correct value returned by ESR_ELx_FSC_ADDRSZ_nL() Nikhil P. Rao <nikhil.rao(a)amd.com> pds_core: reject component parameter in legacy firmware update Andrew Pope <andrew.pope(a)morsemicro.com> wifi: mac80211: recalculate TIM when a station enters power save Li RongQing <lirongqing(a)baidu.com> iommu/intel: Fix out-of-bounds memset in dmar_latency_disable() Pengpeng Hou <pengpeng(a)iscas.ac.cn> iommu/amd: Bound the early ACPI HID map HE WEI (ギカク) <skyexpoc(a)gmail.com> wifi: mwifiex: bound uAP association event IEs to the event buffer Enrico Zanda <enrico.zanda(a)arm.com> vhost-net: fix TX stall when vhost owns virtio-net header Ruoyu Wang <ruoyuw560(a)gmail.com> wan: wanxl: Only reset hardware after BAR mapping Ruoyu Wang <ruoyuw560(a)gmail.com> nfp: Check resource mutex allocation Xiang Mei <xmei5(a)asu.edu> wifi: mac80211: tear down new links on vif update error path Guanghui Feng <guanghuifeng(a)linux.alibaba.com> iommu/amd: Wait for completion instead of returning early in iommu_completion_wait() Wayen Yan <win847(a)gmail.com> net: airoha: Fix DMA direction for NPU mailbox buffer Guangshuo Li <lgs201920130244(a)gmail.com> dpaa2-eth: put MAC endpoint device on disconnect Wayen Yan <win847(a)gmail.com> net: airoha: Fix potential use-after-free in airoha_ppe_deinit() Guangshuo Li <lgs201920130244(a)gmail.com> dpaa2-switch: put MAC endpoint device on disconnect Xuanqiang Luo <luoxuanqiang(a)kylinos.cn> rxrpc: fix io_thread race in rxrpc_wake_up_io_thread() Zhixing Chen <running910(a)gmail.com> gtp: parse extension headers before reading inner protocol Aldo Ariel Panzardo <qwe.aldo(a)gmail.com> rds: drop incoming messages that cross network namespace boundaries Zhaolong Zhang <zhangzl68(a)chinatelecom.cn> bonding: fix devconf_all NULL dereference when IPv6 is disabled David Lee <david.lee(a)trailofbits.com> net/packet: avoid fanout hook re-registration after unregister Danielle Ratson <danieller(a)nvidia.com> netlink: specs: rt-link: convert bridge port flag attributes to u8 Michael Walle <mwalle(a)kernel.org> net: phy: marvell: fix return code Pengpeng Hou <pengpeng(a)iscas.ac.cn> Bluetooth: btusb: validate Realtek vendor event length Daniel Golle <daniel(a)makrotopia.org> regulator: mt6358: use regmap helper to read fixed LDO calibration Pengpeng Hou <pengpeng(a)iscas.ac.cn> hwmon: occ: validate poll response sensor blocks Marco Baffo <marco(a)mandelbit.com> ovpn: use monotonic clock for peer keepalive timeouts Marco Baffo <marco(a)mandelbit.com> ovpn: fix use after free in unlock_ovpn() longlong yan <yanlonglong(a)kylinos.cn> selftests/net: ovpn: fix getaddrinfo memory leak in ovpn_parse_remote() Qing Ming <a0yami(a)mailbox.org> ovpn: avoid putting unrelated P2P peer on socket release Yichong Chen <chenyichong(a)uniontech.com> smb: client: validate DFS referral PathConsumed Eugene Shalygin <eugene.shalygin(a)gmail.com> hwmon: (asus-ec-sensors) add missed handle for ENOMEM Eugene Shalygin <eugene.shalygin(a)gmail.com> hwmon: (asus-ec-sensors) fix EC read intervals Eugene Shalygin <eugene.shalygin(a)gmail.com> hwmon: (asus-ec-sensors) fix looping over banks while reading from EC Mostafa Saleh <smostafa(a)google.com> drivers/virt: pkvm: Fix end calculation in mmio_guard_ioremap_hook() Diego Fernando Mancera Gomez <diegomancera.dev(a)gmail.com> usb: atm: ueagle-atm: reject descriptors that confuse probe and disconnect Shahar Tzarfati <shahar.tzarfati(a)intel.com> wifi: iwlwifi: mvm: fix read in wake packet notification handler Emmanuel Grumbach <emmanuel.grumbach(a)intel.com> wifi: iwlwifi: validate payload length in iwl_pnvm_complete_fn Emmanuel Grumbach <emmanuel.grumbach(a)intel.com> wifi: iwlwifi: fix pointer arithmetic in iwl_add_mcc_to_tas_block_list Pagadala Yesu Anjaneyulu <pagadala.yesu.anjaneyulu(a)intel.com> wifi: iwlwifi: mvm: validate SAR GEO response payload size Richard Fitzgerald <rf(a)opensource.cirrus.com> ASoC: cs35l56: Use complete_all() to signal init_completion Richard Fitzgerald <rf(a)opensource.cirrus.com> ASoC: cs35l56: Fix potential probe() deadlock Richard Fitzgerald <rf(a)opensource.cirrus.com> ASoC: cs35l56: Don't use devres to unregister component Shengjiu Wang <shengjiu.wang(a)nxp.com> ASoC: bt-sco: fix duplicate DAPM widget names for wideband DAI Guangshuo Li <lgs201920130244(a)gmail.com> ALSA: hda: cs35l41: validate and free ACPI mute object Chen-Yu Tsai <wens(a)kernel.org> ASoC: sun4i-codec: Set quirks.playback_only for H616 codec Pengpeng Hou <pengpeng(a)iscas.ac.cn> ASoC: tas2781: bound firmware description string parsing Guanghui Yang <3497809730(a)qq.com> btrfs: free mapping node on duplicate reloc root insert Leo Martins <loemra.dev(a)gmail.com> btrfs: don't propagate EXTENT_FLAG_LOGGING to split extent maps Dave Chen <davechen(a)synology.com> btrfs: fix u32 to s64 type conversion in dirty_metadata_bytes accounting You-Kai Zheng <ykzheng(a)synology.com> btrfs: declare btrfs_ioctl_search_args_v2::buf as __u8 Tristan Madani <tristan(a)talencesecurity.com> wifi: carl9170: fix buffer overflow in rx_stream failover path Tristan Madani <tristan(a)talencesecurity.com> wifi: carl9170: fix OOB read from off-by-two in TX status handler Tristan Madani <tristan(a)talencesecurity.com> wifi: carl9170: bound memcpy length in cmd callback to prevent OOB read Tristan Madani <tristan(a)talencesecurity.com> wifi: ath6kl: fix OOB read from firmware IE lengths in connect event Tristan Madani <tristan(a)talencesecurity.com> wifi: ath6kl: fix OOB read from firmware num_msg in TX complete handler Ruoyu Wang <ruoyuw560(a)gmail.com> firewire: net: Fix fragmented datagram reassembly Manivannan Sadhasivam <manivannan.sadhasivam(a)oss.qualcomm.com> wifi: ath12k: Flush the posted write after writing to PCIE_SOC_GLOBAL_RESET Manivannan Sadhasivam <manivannan.sadhasivam(a)oss.qualcomm.com> wifi: ath11k: Flush the posted write after writing to PCIE_SOC_GLOBAL_RESET Dmitry Morgun <d.morgun(a)ispras.ru> wifi: ath11k: fix potential buffer underflow in ath11k_hal_rx_msdu_list_get() Wayen Yan <win847(a)gmail.com> watchdog: airoha: Prevent division by zero when clock frequency is zero Tzung-Bi Shih <tzungbi(a)kernel.org> watchdog: pretimeout: Fix UAF in watchdog_unregister_governor() Guenter Roeck <linux(a)roeck-us.net> hwmon: (nzxt-kraken3) Stop device IO before calling hid_hw_stop Guenter Roeck <linux(a)roeck-us.net> hwmon: (nzxt-smart2) Stop device IO before calling hid_hw_stop Guenter Roeck <linux(a)roeck-us.net> hwmon: (gigabyte_waterforce) Stop device IO before calling hid_hw_stop Guenter Roeck <linux(a)roeck-us.net> hwmon: (corsair-cpro) Stop device IO before calling hid_hw_stop Edward Adam Davis <eadavis(a)qq.com> hwmon: (corsair-psu) Stop device IO before calling hid_hw_stop Gaole Zhang <gaole.zhang(a)oss.qualcomm.com> wifi: ath11k: fix NULL pointer dereference in ath11k_hal_srng_access_begin Cheng Yongkang <teel4res(a)gmail.com> wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request Daniel Borkmann <daniel(a)iogearbox.net> selftests/bpf: Keep verifier_map_ptr exercising ops pointer access KP Singh <kpsingh(a)kernel.org> selftests/bpf: Adjust verifier_map_ptr for the map's excl field Xincheng Zhang <zhangxincheng(a)ultrarisc.com> usb: xhci-pci: Limit VIA VL805 DMA addressing to 36 bits Sasha Levin <sashal(a)kernel.org> Revert "drm/amd/display: Add missing kdoc for ALLM parameters" Xie Bo <xb(a)ultrarisc.com> RISC-V: KVM: Serialize virtual interrupt pending state updates Georgi Valkov <gvalkov(a)gmail.com> wifi: mwifiex: fix freeze for 60 seconds caused by request_firmware Chia-Lin Kao (AceLan) <acelan.kao(a)canonical.com> usb: typec: ucsi: Add duplicate detection to nvidia registration path Chia-Lin Kao (AceLan) <acelan.kao(a)canonical.com> usb: typec: ucsi: Detect and skip duplicate altmodes from buggy firmware Chukun Pan <amadeus(a)jmu.edu.cn> USB: serial: option: add TDTECH MT5710-CN Johan Hovold <johan(a)kernel.org> USB: serial: keyspan_pda: fix data loss on receive throttling Sunho Park <shpark061104(a)gmail.com> USB: serial: io_edgeport: cap received transmit credits Tim Pambor <timpambor(a)gmail.com> USB: serial: ftdi_sio: add support for E+H FXA291 Muhammad Bilal <meatuni001(a)gmail.com> usb: gadget: uvc: clamp SEND_RESPONSE length to the response buffer Fan Wu <fanwu01(a)zju.edu.cn> usb: gadget: udc: bdc: free IRQ and drain func_wake_notify before teardown Sonali Pradhan <sonalipradhan(a)google.com> usb: gadget: f_ncm: validate datagram bounds in ncm_unwrap_ntb() Johan Hovold <johan(a)kernel.org> USB: gadget: fsl-udc: fix dev_printk() device Johan Hovold <johan(a)kernel.org> USB: gadget: fsl-udc: fix device name leak on probe failure Johan Hovold <johan(a)kernel.org> USB: gadget: snps-udc: fix device name leak on probe failure Melbin K Mathew <mlbnkm1(a)gmail.com> usb: gadget: printer: fix infinite loop in printer_read() Fan Wu <fanwu01(a)zju.edu.cn> usb: gadget: f_midi: cancel pending IN work before freeing the midi object Jinchao Wang <wangjinchao600(a)gmail.com> usb: gadget: dummy_hcd: prevent fifo_req reuse during giveback Xu Yang <xu.yang_2(a)nxp.com> usb: chipidea: fix usage_count leak when autosuspend_delay is negative Huang Wei <huangwei(a)kylinos.cn> USB: storage: add NO_ATA_1X quirk for Longmai USB Key Guangshuo Li <lgs201920130244(a)gmail.com> usb: musb: omap2430: Do not put borrowed of_node in probe Chia-Lin Kao (AceLan) <acelan.kao(a)canonical.com> usb: core: port: Deattach Type-C connector on component unbind Huihui Huang <hhhuang(a)smu.edu.sg> wifi: at76c50x-usb: avoid length underflow in at76_guess_freq() Griffin Kroah-Hartman <griffin(a)kroah.com> usb: core: sysfs: add lock to bos_descriptors_read() Weiming Shi <bestswngs(a)gmail.com> mpls: fix NULL deref in mpls_valid_fib_dump_req() on CONFIG_INET=n Xin Long <lucien.xin(a)gmail.com> sctp: fix auth_hmacs array size in struct sctp_cookie Jamal Hadi Salim <jhs(a)mojatatu.com> net/sched: act_tunnel_key: Defer dst_release to RCU callback Ivan Vecera <ivecera(a)redhat.com> dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() Eric Dumazet <edumazet(a)google.com> tcp: fix TIME_WAIT socket reference leak on PSP policy failure Lizhi Hou <lizhi.hou(a)amd.com> accel/amdxdna: Fix use-after-free of mm_struct in job scheduler Emre Cecanpunar <emreleno(a)gmail.com> drm/i915/selftests: Fix GT PM sort comparators Vinod Govindapillai <vinod.govindapillai(a)intel.com> drm/i915/wm: clear the plane ddb_y entries on plane disable Xiang Mei (Microsoft) <xmei5(a)asu.edu> ksmbd: validate compound request size before reading StructureSize2 Qihang <q.h.hack.winter(a)gmail.com> ksmbd: pin conn during async oplock break notification Daniele Ceraolo Spurio <daniele.ceraolospurio(a)intel.com> drm/xe/wopcm: fix WOPCM size for LNL+ Matthew Brost <matthew.brost(a)intel.com> drm/xe/vf: Fix VF CCS attach/detach race with in-flight BO moves Satyanarayana K V P <satyanarayana.k.v.p(a)intel.com> drm/xe/vf: Shadow buffer management for CCS read/write operations Satyanarayana K V P <satyanarayana.k.v.p(a)intel.com> drm/xe/sa: Shadow buffer support in the sub-allocator pool Michał Winiarski <michal.winiarski(a)intel.com> drm/xe: Allow the caller to pass guc_buf_cache size Shuhao Fu <sfual(a)cse.ust.hk> can: j1939: fix lockless local-destination check Mark Harris <mark.hsj(a)gmail.com> riscv: hwprobe: Avoid uninitialized read in hwprobe_get_cpus() Vasily Gorbik <gor(a)linux.ibm.com> s390/checksum: Fix csum_partial() without vector facility Linmao Li <lilinmao(a)kylinos.cn> drm/panthor: Check debugfs GEM lock initialization Michal Luczaj <mhal(a)rbox.co> bpf, sockmap: Reject unhashed UDP sockets on sockmap update Shrikanth Hegde <sshegde(a)linux.ibm.com> powerpc/vtime: Initialize starttime at boot for native accounting Frederic Weisbecker <frederic(a)kernel.org> powerpc/time: Prepare to stop elapsing in dynticks-idle Rosen Penev <rosenp(a)gmail.com> powerpc/85xx: Add fsl,ifc to common device ids Oliver Hartkopp <socketcan(a)hartkopp.net> can: raw: add locking for raw flags bitfield Pengpeng Hou <pengpeng(a)iscas.ac.cn> drm/i915/gt: use correct selftest config symbol Huiwen He <hehuiwen(a)kylinos.cn> smb/client: handle overlapping allocated ranges in fallocate Ruoyu Wang <ruoyuw560(a)gmail.com> Bluetooth: hci_qca: Clear memdump state on invalid dump size Pauli Virtanen <pav(a)iki.fi> Bluetooth: mgmt: hold reference for hci_conn in mgmt_pending_cmds Pauli Virtanen <pav(a)iki.fi> Bluetooth: mgmt: fix locking in unpair_device/disconnect_sync Pauli Virtanen <pav(a)iki.fi> Bluetooth: hci_sync: extend conn_hash lookup critical sections Cen Zhang <zzzccc427(a)gmail.com> Bluetooth: MGMT: revalidate LOAD_CONN_PARAM queued update Xiang Mei <xmei5(a)asu.edu> Bluetooth: qca: fix NVM tag length underflow in TLV parser Takashi Iwai <tiwai(a)suse.de> ALSA: usb-audio: Skip DSD quirk for Musical Fidelity M6s DAC Karol Wachowski <karol.wachowski(a)linux.intel.com> accel/ivpu: Fix wrong register read in LNL failure diagnostics Rosen Penev <rosenp(a)gmail.com> ata: sata_dwc_460ex: fix infinite loop in NCQ tag completion bit-scanning Rosen Penev <rosenp(a)gmail.com> ata: sata_dwc_460ex: fix clear_interrupt_bit() clearing all pending interrupts Rosen Penev <rosenp(a)gmail.com> ata: sata_dwc_460ex: use platform_get_irq() Rosen Penev <rosenp(a)gmail.com> ata: sata_dwc_460ex: enable SATA interrupts only after IRQ handler is registered David Jeffery <djeffery(a)redhat.com> scsi: core: wake eh reliably when using scsi_schedule_eh Robert Mader <robert.mader(a)collabora.com> udmabuf: Ensure to perform cache synchronisation in begin_cpu_udmabuf() Bryam Vargas <hexlabsecurity(a)proton.me> net/iucv: take a reference on the socket found in afiucv_hs_rcv() Weiming Shi <bestswngs(a)gmail.com> ipv4: fib: free fib_alias with kfree_rcu() on insert error path Norbert Szetei <norbert(a)doyensec.com> ppp: defer channel free to an RCU grace period to fix pppol2tp RX UAF Rafael J. Wysocki <rafael.j.wysocki(a)intel.com> cpufreq: Make cpufreq_update_pressure() fall back to cpuinfo.max_freq Pushpendra Singh <pushpendra.singh(a)oss.qualcomm.com> firmware: arm_scmi: Rate-limit queue-full warnings in IRQ context Uday Khare <udaykhare77(a)gmail.com> ASoC: tas2562: fix deprecated 'shut-down' GPIO always cleared after lookup Charles Keepax <ckeepax(a)opensource.cirrus.com> ASoC: cs42l43: Correct report for forced microphone jack Vijendar Mukunda <Vijendar.Mukunda(a)amd.com> ASoC: amd: ps: replace bitwise OR with logical OR in IRQ return check Vijendar Mukunda <Vijendar.Mukunda(a)amd.com> ASoC: amd: ps: fix wrong ACP version string in pci_request_regions() Vijendar Mukunda <Vijendar.Mukunda(a)amd.com> ASoC: amd: ps: disable MSI on resume in ACP PCI driver Christian Hewitt <christianshewitt(a)gmail.com> ASoC: meson: aiu: fifo-spdif: soft reset the S/PDIF datapath on start/stop Sebastian Ene <sebastianene(a)google.com> firmware: arm_ffa: Fix Endpoint Memory Access Descriptor offset calculation Mostafa Saleh <smostafa(a)google.com> firmware: arm_ffa: Fix out-of-bound writes in ffa_setup_and_transmit() HE WEI (ギカク) <skyexpoc(a)gmail.com> wifi: cfg80211: bound element ID read when checking non-inheritance Runyu Xiao <runyu.xiao(a)seu.edu.cn> wifi: brcmfmac: initialize SDIO data work before cleanup Cen Zhang <zzzccc427(a)gmail.com> wifi: mac80211: free AP_VLAN bc_buf SKBs outside IRQ lock Zhao Li <enderaoelyther(a)gmail.com> wifi: mac80211: avoid non-S1G AID fallback for S1G assoc Zhao Li <enderaoelyther(a)gmail.com> wifi: cfg80211: reject unsupported PMSR FTM location requests Zhao Li <enderaoelyther(a)gmail.com> wifi: cfg80211: validate PMSR FTM preamble range Zhao Li <enderaoelyther(a)gmail.com> wifi: cfg80211: validate PMSR measurement type data Zhao Li <enderaoelyther(a)gmail.com> wifi: nl80211: constrain MBSSID TX link ID range Zhao Li <enderaoelyther(a)gmail.com> wifi: nl80211: validate nested MBSSID IE blobs Zhao Li <enderaoelyther(a)gmail.com> wifi: cfg80211: derive S1G beacon TSF from S1G fields Zhao Li <enderaoelyther(a)gmail.com> wifi: nl80211: free RNR data on MBSSID mismatch Peddolla Harshavardhan Reddy <peddolla.reddy(a)oss.qualcomm.com> wifi: cfg80211: convert pmsr_free_wk to wiphy_work to fix deadlock Xiang Mei <xmei5(a)asu.edu> wifi: p54: validate RX frame length in p54_rx_eeprom_readback() Maoyi Xie <maoyixie.tju(a)gmail.com> wifi: mac80211: defer link RX stats percpu free to RCU Dawei Feng <dawei.feng(a)seu.edu.cn> wifi: libertas: fix memory leak in helper_firmware_cb() Xiang Mei <xmei5(a)asu.edu> wifi: mac80211: fix fils_discovery double free on alloc failure Xiang Mei <xmei5(a)asu.edu> wifi: mac80211: fix unsol_bcast_probe_resp double free on alloc failure Bryam Vargas <hexlabsecurity(a)proton.me> wifi: mac80211_hwsim: clamp virtio RX length before skb_put Christophe JAILLET <christophe.jaillet(a)wanadoo.fr> wifi: cfg80211: Fix an error handling path in cfg80211_wext_siwscan() Abdun Nihaal <nihaal(a)cse.iitm.ac.in> wifi: ipw2100: fix potential memory leak in ipw2100_pci_init_one() Cen Zhang <zzzccc427(a)gmail.com> wifi: cfg80211: cancel sched scan results work on unregister Xiang Mei (Microsoft) <xmei5(a)asu.edu> xfrm: policy: preallocate inexact bins before xfrm_hash_rebuild reinsert Xiang Mei (Microsoft) <xmei5(a)asu.edu> xfrm6: clear dst.dev on error to avoid double netdev_put in xfrm6_fill_dst() Chen YanJun <moomichen(a)tencent.com> xfrm: iptfs: propagate SKBFL_SHARED_FRAG in iptfs_skb_add_frags() Cen Zhang <zzzccc427(a)gmail.com> xfrm: clear mode callbacks after failed mode setup Aleksandrova Alyona <aga(a)itb.spb.ru> RDMA/irdma: Prevent overflows in memory contiguity checks Malaya Kumar Rout <malayarout91(a)gmail.com> selftests/alsa: Fix memory leak in find_controls error path Xue Lei <Xue.Lei(a)windriver.com> mtd: fix double free and WARN_ON in add_mtd_device() error paths Ruoyu Wang <ruoyuw560(a)gmail.com> RDMA/siw: publish QP after initialization Danila Chernetsov <listdansp(a)mail.ru> RDMA/hns: Fix potential integer overflow in mhop hem cleanup Ruoyu Wang <ruoyuw560(a)gmail.com> RDMA/mana_ib: initialize err for empty send WR lists Ruoyu Wang <ruoyuw560(a)gmail.com> RDMA/erdma: initialize ret for empty receive WR lists Jacob Moroni <jmoroni(a)google.com> RDMA/irdma: Prevent user-triggered null deref on QP create Jacob Moroni <jmoroni(a)google.com> RDMA/irdma: Remove redundant legacy_mode checks Jacob Moroni <jmoroni(a)google.com> RDMA/irdma: Prevent rereg_mr for non-mem regions Jacob Moroni <jmoroni(a)google.com> RDMA/umem: Add pinned revocable dmabuf import interface Or Gerlitz <ogerlitz(a)ddn.com> RDMA/cma: Fix hardware address comparison length in netevent callback Antony Antony <antony.antony(a)secunet.com> xfrm: reject optional IPTFS templates in outbound policies Tejun Heo <tj(a)kernel.org> sched_ext: Don't warn on core-sched forced idle in put_prev_task_scx() John Stultz <jstultz(a)google.com> sched/ext: Avoid null ptr traversal when ->put_prev_task() is called with NULL next Unnathi Chalicheemala <unnathi.chalicheemala(a)oss.qualcomm.com> firmware: arm_ffa: Fix NULL dereference in ffa_partition_info_get() Boris Burkov <boris(a)bur.io> btrfs: fallback to transaction csum tree on a commit root csum miss Filipe Manana <fdmanana(a)suse.com> btrfs: use bool type for btrfs_path members used as booleans Filipe Manana <fdmanana(a)suse.com> btrfs: fix root leak if its reloc root is unexpected in merge_reloc_roots() Xiang Mei <xmei5(a)asu.edu> btrfs: reject free space cache with more entries than pages Pengpeng Hou <pengpeng(a)iscas.ac.cn> mtd: nand: mtk-ecc: stop on ECC idle timeouts Pengpeng Hou <pengpeng(a)iscas.ac.cn> mtd: mtdswap: remove debugfs stats file on teardown Michael Bommarito <michael.bommarito(a)gmail.com> IB/mad: Drop unmatched RMPP responses before reassembly Seth Forshee <sforshee(a)nvidia.com> firmware: arm_ffa: Respect firmware advertised RX/TX buffer size limits Petr Wozniak <petr.wozniak(a)gmail.com> xfrm: fix stale skb->prev after async crypto steals a GSO segment Petr Wozniak <petr.wozniak(a)gmail.com> xfrm: propagate -EINPROGRESS from validate_xmit_xfrm() Eric Dumazet <edumazet(a)google.com> net: plumb drop reasons to __dev_queue_xmit() Eric Dumazet <edumazet(a)google.com> net: dropreason: add SKB_DROP_REASON_RECURSION_LIMIT Sumit Gupta <sumitg(a)nvidia.com> arm64: tegra: Fix CPU compatible string to cortex-a78ae on Tegra234 Akhil R <akhilrajeev(a)nvidia.com> arm64: tegra: Remove fallback compatible for GPCDMA Junxi Qian <qjx1298677004(a)gmail.com> fuse: fix writeback array overflow when max_pages is one Dmitry Torokhov <dmitry.torokhov(a)gmail.com> Input: ims-pcu - fix logic error in packet reset Seungjin Bae <eeodqql09(a)gmail.com> Input: ims-pcu - fix heap-buffer-overflow in ims_pcu_process_data() Chuck Lever <chuck.lever(a)oracle.com> xprtrdma: Clear receive-side ownership pointers on release Mikko Perttunen <mperttunen(a)nvidia.com> crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin Mikko Perttunen <mperttunen(a)nvidia.com> gpu: host1x: Fix use-after-free in host1x_bo_clear_cached_mappings Claudiu Beznea <claudiu.beznea.uj(a)bp.renesas.com> dmaengine: sh: rz-dmac: Move interrupt request after everything is set up Oliver Hartkopp <socketcan(a)hartkopp.net> can: bcm: track a single source interface for ANYDEV timeout/throttle ops Oliver Hartkopp <socketcan(a)hartkopp.net> can: bcm: fix data race on rx_stamp/rx_ifindex in bcm_rx_handler() Oliver Hartkopp <socketcan(a)hartkopp.net> can: bcm: fix stale rx/tx ops after device removal Oliver Hartkopp <socketcan(a)hartkopp.net> can: bcm: add missing device refcount for CAN filter removal Oliver Hartkopp <socketcan(a)hartkopp.net> can: bcm: validate frame length in bcm_rx_setup() for RTR replies Oliver Hartkopp <socketcan(a)hartkopp.net> can: bcm: extend bcm_tx_lock usage for data and timer updates Oliver Hartkopp <socketcan(a)hartkopp.net> can: bcm: fix CAN frame rx/tx statistics Oliver Hartkopp <socketcan(a)hartkopp.net> can: bcm: add locking when updating filter and timer values Phil Rosenthal <phil(a)phil.gs> KVM: x86/mmu: Fix use-after-free on vendor module reload Hyunwoo Kim <imv4bel(a)gmail.com> KVM: nVMX: Hide shadow VMCS right after VMCLEAR Venkatesh Srinivas <venkateshs(a)chromium.org> KVM: x86: Only reset TSC Deadline Timer in apic_timer_expired on KVM_RUN Sean Christopherson <seanjc(a)google.com> KVM: x86: Check for invalid/obsolete root *after* making MMU pages available Heiko Carstens <hca(a)linux.ibm.com> seqlock: Allow UBSAN_ALIGNMENT to fail optimizing Peter Zijlstra <peterz(a)infradead.org> seqlock: Allow KASAN to fail optimizing Peter Zijlstra <peterz(a)infradead.org> seqlock: Cure some more scoped_seqlock() optimization fails Kiryl Shutsemau <kas(a)kernel.org> fs/proc/task_mmu: fix make_uffd_wp_huge_pte() prot-update race Ryosuke Yasuoka <ryasuoka(a)redhat.com> drm/virtio: fix deadlock in display_info_cb by removing hotplug from dequeue worker Brian Witte <brianwitte(a)mailfence.com> netfilter: nf_tables: revert commit_mutex usage in reset path Brian Witte <brianwitte(a)mailfence.com> netfilter: nft_quota: use atomic64_xchg for reset Brian Witte <brianwitte(a)mailfence.com> netfilter: nft_counter: serialize reset with spinlock Daniel Borkmann <daniel(a)iogearbox.net> selftests/bpf: Add tests for ld_{abs,ind} failure path in subprogs Daniel Borkmann <daniel(a)iogearbox.net> bpf: Fix ld_{abs,ind} failure path analysis in subprogs Guixiong Wei <weiguixiong(a)bytedance.com> platform/x86/intel-uncore-freq: Fix current_freq_khz after CPU hotplug ------------- Diffstat: Documentation/gpu/drm-mm.rst | 10 +- Documentation/netlink/specs/rt-link.yaml | 40 +- MAINTAINERS | 13 + Makefile | 9 +- arch/arm64/boot/dts/nvidia/tegra234.dtsi | 24 +- arch/arm64/boot/dts/nvidia/tegra264.dtsi | 2 +- arch/arm64/boot/dts/qcom/lemans.dtsi | 8 +- arch/arm64/boot/dts/qcom/sc7180.dtsi | 4 +- arch/arm64/boot/dts/qcom/sc7280.dtsi | 8 +- arch/arm64/boot/dts/qcom/sc8180x.dtsi | 12 +- arch/arm64/boot/dts/qcom/sc8280xp.dtsi | 32 +- arch/arm64/boot/dts/qcom/sm6350.dtsi | 4 +- arch/arm64/boot/dts/qcom/sm8150.dtsi | 4 +- arch/arm64/boot/dts/qcom/sm8250.dtsi | 4 +- arch/arm64/boot/dts/qcom/sm8350.dtsi | 4 +- arch/arm64/boot/dts/qcom/sm8450.dtsi | 4 +- arch/arm64/boot/dts/qcom/x1e80100.dtsi | 77 +- arch/arm64/include/asm/esr.h | 2 +- arch/arm64/mm/hugetlbpage.c | 2 +- arch/loongarch/kernel/acpi.c | 27 +- arch/loongarch/kernel/kgdb.c | 3 +- arch/loongarch/kernel/machine_kexec.c | 5 +- arch/loongarch/kernel/setup.c | 3 +- arch/loongarch/kernel/smp.c | 4 +- arch/powerpc/kernel/time.c | 43 + arch/powerpc/platforms/85xx/common.c | 2 + arch/riscv/include/asm/kvm_host.h | 10 +- arch/riscv/kernel/sys_hwprobe.c | 1 + arch/riscv/kvm/aia.c | 35 +- arch/riscv/kvm/vcpu.c | 68 +- arch/riscv/kvm/vcpu_onereg.c | 8 +- arch/s390/lib/csum-partial.c | 2 +- arch/x86/boot/compressed/Makefile | 1 + arch/x86/kernel/cpu/resctrl/core.c | 32 +- arch/x86/kernel/cpu/resctrl/internal.h | 18 +- arch/x86/kernel/cpu/resctrl/monitor.c | 36 +- arch/x86/kvm/lapic.c | 2 +- arch/x86/kvm/mmu/mmu.c | 11 +- arch/x86/kvm/mmu/paging_tmpl.h | 10 +- arch/x86/kvm/svm/svm.c | 7 +- arch/x86/kvm/vmx/nested.c | 11 +- drivers/accel/amdxdna/amdxdna_ctx.c | 8 + drivers/accel/ivpu/ivpu_hw_btrs.c | 2 +- drivers/android/binder/thread.rs | 14 +- drivers/ata/libata-core.c | 18 + drivers/ata/libata-scsi.c | 2 - drivers/ata/libata.h | 9 + drivers/ata/sata_dwc_460ex.c | 38 +- drivers/block/rbd.c | 7 +- drivers/block/ublk_drv.c | 52 +- drivers/bluetooth/btqca.c | 2 +- drivers/bluetooth/btusb.c | 4 +- drivers/bluetooth/hci_qca.c | 4 + drivers/cdrom/cdrom.c | 1 + drivers/comedi/drivers/comedi_parport.c | 13 +- drivers/cpufreq/cpufreq.c | 3 + drivers/crypto/tegra/tegra-se-main.c | 3 +- drivers/cxl/Kconfig | 4 + drivers/cxl/core/Makefile | 2 +- drivers/cxl/core/core.h | 31 + drivers/cxl/core/pci.c | 215 +--- drivers/cxl/core/ras.c | 197 ++- drivers/cxl/core/trace.h | 24 +- drivers/cxl/cxl.h | 22 +- drivers/cxl/cxlpci.h | 16 + drivers/dma-buf/udmabuf.c | 9 +- drivers/dma/dw-edma/dw-edma-pcie.c | 7 +- drivers/dma/sh/rz-dmac.c | 96 +- drivers/dpll/dpll_netlink.c | 3 + drivers/firewire/net.c | 37 +- drivers/firmware/arm_ffa/driver.c | 54 +- drivers/firmware/arm_scmi/notify.c | 6 +- drivers/firmware/stratix10-svc.c | 10 +- drivers/firmware/xilinx/zynqmp.c | 1 + drivers/gpu/Kconfig | 13 + drivers/gpu/Makefile | 4 +- drivers/gpu/buddy.c | 1347 ++++++++++++++++++++ drivers/gpu/drm/Kconfig | 5 +- drivers/gpu/drm/Kconfig.debug | 1 - drivers/gpu/drm/Makefile | 1 - drivers/gpu/drm/amd/amdgpu/amdgpu_acp.c | 13 +- drivers/gpu/drm/amd/amdgpu/amdgpu_bios.c | 62 +- drivers/gpu/drm/amd/amdgpu/amdgpu_cs.c | 6 +- drivers/gpu/drm/amd/amdgpu/amdgpu_device.c | 14 +- drivers/gpu/drm/amd/amdgpu/amdgpu_gem.c | 6 + drivers/gpu/drm/amd/amdgpu/amdgpu_gfx.c | 10 +- drivers/gpu/drm/amd/amdgpu/amdgpu_hmm.c | 3 +- drivers/gpu/drm/amd/amdgpu/amdgpu_object.c | 13 +- drivers/gpu/drm/amd/amdgpu/amdgpu_ras.c | 2 +- drivers/gpu/drm/amd/amdgpu/amdgpu_res_cursor.h | 12 +- drivers/gpu/drm/amd/amdgpu/amdgpu_ttm.c | 54 +- drivers/gpu/drm/amd/amdgpu/amdgpu_uvd.c | 58 +- drivers/gpu/drm/amd/amdgpu/amdgpu_vce.c | 17 +- drivers/gpu/drm/amd/amdgpu/amdgpu_vm.c | 25 +- drivers/gpu/drm/amd/amdgpu/amdgpu_vram_mgr.c | 79 +- drivers/gpu/drm/amd/amdgpu/amdgpu_vram_mgr.h | 20 +- drivers/gpu/drm/amd/amdgpu/gfx_v10_0.c | 22 +- drivers/gpu/drm/amd/amdgpu/gfx_v11_0.c | 13 +- drivers/gpu/drm/amd/amdgpu/gfx_v12_0.c | 13 +- drivers/gpu/drm/amd/amdgpu/gfx_v8_0.c | 3 - drivers/gpu/drm/amd/amdgpu/gfx_v9_0.c | 49 +- drivers/gpu/drm/amd/amdgpu/gfx_v9_4_3.c | 11 +- drivers/gpu/drm/amd/amdgpu/jpeg_v4_0_3.c | 2 +- drivers/gpu/drm/amd/amdgpu/jpeg_v5_0_1.c | 2 +- drivers/gpu/drm/amd/amdgpu/sdma_v4_4_2.c | 4 +- drivers/gpu/drm/amd/amdgpu/sdma_v5_0.c | 4 +- drivers/gpu/drm/amd/amdgpu/sdma_v5_2.c | 4 +- drivers/gpu/drm/amd/amdgpu/sdma_v6_0.c | 4 +- drivers/gpu/drm/amd/amdgpu/sdma_v7_0.c | 4 +- drivers/gpu/drm/amd/amdgpu/soc24.c | 28 + drivers/gpu/drm/amd/amdgpu/vcn_v4_0.c | 15 +- drivers/gpu/drm/amd/amdkfd/kfd_chardev.c | 12 +- .../gpu/drm/amd/amdkfd/kfd_device_queue_manager.c | 6 + .../gpu/drm/amd/amdkfd/kfd_device_queue_manager.h | 2 + drivers/gpu/drm/amd/amdkfd/kfd_events.c | 3 + drivers/gpu/drm/amd/amdkfd/kfd_priv.h | 3 +- .../gpu/drm/amd/amdkfd/kfd_process_queue_manager.c | 24 +- drivers/gpu/drm/amd/amdkfd/kfd_queue.c | 23 +- drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm.c | 374 +++--- .../gpu/drm/amd/display/amdgpu_dm/amdgpu_dm_crtc.c | 81 +- .../amd/display/dc/clk_mgr/dcn32/dcn32_clk_mgr.c | 9 +- .../amd/display/dc/clk_mgr/dcn35/dcn35_clk_mgr.c | 9 +- .../gpu/drm/amd/display/dc/link/link_detection.c | 5 +- .../display/dc/resource/dce100/dce100_resource.c | 7 +- .../amd/display/modules/info_packet/info_packet.c | 2 - drivers/gpu/drm/amd/pm/amdgpu_pm.c | 26 +- drivers/gpu/drm/amd/pm/powerplay/hwmgr/hwmgr.c | 7 +- .../gpu/drm/amd/pm/swsmu/smu13/smu_v13_0_0_ppt.c | 11 +- .../gpu/drm/amd/pm/swsmu/smu13/smu_v13_0_7_ppt.c | 15 +- .../gpu/drm/amd/pm/swsmu/smu14/smu_v14_0_2_ppt.c | 28 +- drivers/gpu/drm/bridge/cadence/cdns-dsi-core.c | 11 +- drivers/gpu/drm/display/drm_dp_mst_topology.c | 36 +- drivers/gpu/drm/drm_buddy.c | 1278 +------------------ drivers/gpu/drm/drm_connector.c | 12 +- drivers/gpu/drm/drm_displayid_internal.h | 2 +- drivers/gpu/drm/drm_gpusvm.c | 4 +- drivers/gpu/drm/drm_panel_backlight_quirks.c | 9 + drivers/gpu/drm/i915/display/intel_bios.c | 36 +- drivers/gpu/drm/i915/display/intel_dp.c | 8 +- drivers/gpu/drm/i915/display/intel_hdcp.c | 12 +- drivers/gpu/drm/i915/display/skl_watermark.c | 2 +- drivers/gpu/drm/i915/gem/i915_gem_context.c | 25 +- drivers/gpu/drm/i915/gem/i915_gem_ttm.c | 3 +- drivers/gpu/drm/i915/gt/intel_engine_user.c | 2 +- drivers/gpu/drm/i915/gt/selftest_gt_pm.c | 8 +- drivers/gpu/drm/i915/i915_active.c | 7 +- drivers/gpu/drm/i915/i915_scatterlist.c | 10 +- drivers/gpu/drm/i915/i915_ttm_buddy_manager.c | 59 +- drivers/gpu/drm/i915/i915_ttm_buddy_manager.h | 4 +- .../gpu/drm/i915/selftests/intel_memory_region.c | 20 +- drivers/gpu/drm/imagination/pvr_context.c | 22 +- drivers/gpu/drm/imagination/pvr_drv.c | 13 +- drivers/gpu/drm/imagination/pvr_queue.c | 65 +- drivers/gpu/drm/imagination/pvr_queue.h | 2 +- drivers/gpu/drm/imagination/pvr_vm.c | 2 + drivers/gpu/drm/nouveau/nouveau_exec.c | 4 +- drivers/gpu/drm/nouveau/nouveau_uvmm.c | 4 +- drivers/gpu/drm/nouveau/nvkm/subdev/acr/base.c | 1 + drivers/gpu/drm/panel/Kconfig | 1 + drivers/gpu/drm/panthor/panthor_device.c | 5 +- drivers/gpu/drm/panthor/panthor_fw.c | 1 + drivers/gpu/drm/radeon/r100.c | 13 +- drivers/gpu/drm/renesas/rz-du/rzg2l_mipi_dsi.c | 18 +- drivers/gpu/drm/rockchip/analogix_dp-rockchip.c | 2 + drivers/gpu/drm/rockchip/cdn-dp-reg.c | 2 + drivers/gpu/drm/sysfb/drm_sysfb_helper.h | 2 +- drivers/gpu/drm/sysfb/drm_sysfb_screen_info.c | 13 +- drivers/gpu/drm/sysfb/efidrm.c | 7 +- drivers/gpu/drm/sysfb/vesadrm.c | 6 +- drivers/gpu/drm/tests/Makefile | 1 - drivers/gpu/drm/tests/drm_exec_test.c | 2 - drivers/gpu/drm/tests/drm_gem_shmem_test.c | 16 +- drivers/gpu/drm/tests/drm_mm_test.c | 2 - drivers/gpu/drm/tidss/tidss_encoder.c | 2 + drivers/gpu/drm/ttm/tests/ttm_bo_validate_test.c | 4 +- drivers/gpu/drm/ttm/tests/ttm_mock_manager.c | 18 +- drivers/gpu/drm/ttm/tests/ttm_mock_manager.h | 4 +- drivers/gpu/drm/ttm/ttm_pool.c | 34 +- drivers/gpu/drm/v3d/v3d_gem.c | 12 + drivers/gpu/drm/vc4/vc4_bo.c | 12 +- drivers/gpu/drm/virtio/virtgpu_gem.c | 14 +- drivers/gpu/drm/virtio/virtgpu_kms.c | 5 +- drivers/gpu/drm/virtio/virtgpu_vq.c | 6 +- drivers/gpu/drm/vmwgfx/vmwgfx_surface.c | 22 +- drivers/gpu/drm/xe/xe_bo.c | 58 +- drivers/gpu/drm/xe/xe_bo.h | 3 +- drivers/gpu/drm/xe/xe_bo_types.h | 2 + drivers/gpu/drm/xe/xe_dma_buf.c | 2 +- drivers/gpu/drm/xe/xe_guc_buf.c | 44 +- drivers/gpu/drm/xe/xe_guc_buf.h | 1 + drivers/gpu/drm/xe/xe_i2c.c | 5 +- drivers/gpu/drm/xe/xe_migrate.c | 62 +- drivers/gpu/drm/xe/xe_migrate.h | 4 + drivers/gpu/drm/xe/xe_pt.c | 14 +- drivers/gpu/drm/xe/xe_res_cursor.h | 34 +- drivers/gpu/drm/xe/xe_sa.c | 67 +- drivers/gpu/drm/xe/xe_sa.h | 20 +- drivers/gpu/drm/xe/xe_sa_types.h | 3 + drivers/gpu/drm/xe/xe_sriov_vf_ccs.c | 42 +- drivers/gpu/drm/xe/xe_sriov_vf_ccs.h | 4 +- drivers/gpu/drm/xe/xe_svm.c | 18 +- drivers/gpu/drm/xe/xe_ttm_vram_mgr.c | 71 +- drivers/gpu/drm/xe/xe_ttm_vram_mgr_types.h | 4 +- drivers/gpu/drm/xe/xe_vm.c | 10 +- drivers/gpu/drm/xe/xe_wopcm.c | 15 +- drivers/gpu/host1x/bus.c | 4 +- drivers/gpu/tests/Makefile | 4 + .../drm_buddy_test.c => tests/gpu_buddy_test.c} | 358 +++--- .../{drm/lib/drm_random.c => tests/gpu_random.c} | 18 +- .../{drm/lib/drm_random.h => tests/gpu_random.h} | 18 +- drivers/hwmon/asus-ec-sensors.c | 18 +- drivers/hwmon/corsair-cpro.c | 1 + drivers/hwmon/corsair-psu.c | 1 + drivers/hwmon/gigabyte_waterforce.c | 4 +- drivers/hwmon/nzxt-kraken3.c | 6 +- drivers/hwmon/nzxt-smart2.c | 2 +- drivers/hwmon/occ/common.c | 38 +- drivers/hwtracing/intel_th/core.c | 10 - drivers/hwtracing/intel_th/msu.c | 2 + drivers/i3c/master/mipi-i3c-hci/core.c | 16 +- drivers/i3c/master/mipi-i3c-hci/hci.h | 1 + drivers/infiniband/core/cma.c | 2 +- drivers/infiniband/core/mad.c | 30 + drivers/infiniband/core/umem_dmabuf.c | 61 + drivers/infiniband/hw/erdma/erdma_qp.c | 2 +- drivers/infiniband/hw/hns/hns_roce_hem.c | 2 +- drivers/infiniband/hw/irdma/uk.c | 9 +- drivers/infiniband/hw/irdma/user.h | 1 - drivers/infiniband/hw/irdma/verbs.c | 33 +- drivers/infiniband/hw/mana/wr.c | 2 +- drivers/infiniband/sw/siw/siw_verbs.c | 44 +- drivers/input/misc/ims-pcu.c | 32 +- drivers/iommu/amd/init.c | 6 + drivers/iommu/amd/iommu.c | 22 +- drivers/iommu/intel/perf.c | 2 +- drivers/iommu/intel/svm.c | 2 +- drivers/md/dm-verity-fec.c | 110 +- drivers/md/dm-verity-fec.h | 6 +- drivers/md/dm.c | 11 +- drivers/media/cec/platform/seco/seco-cec.c | 6 +- drivers/media/common/videobuf2/videobuf2-core.c | 12 +- drivers/media/dvb-frontends/rtl2832.c | 4 +- drivers/media/dvb-frontends/rtl2832_sdr.c | 19 +- drivers/media/i2c/alvium-csi2.c | 21 +- drivers/media/i2c/imx219.c | 2 +- drivers/media/pci/cx23885/cx23885-core.c | 14 +- drivers/media/pci/dm1105/dm1105.c | 1 + drivers/media/pci/intel/ipu6/ipu6-isys-dwc-phy.c | 24 +- drivers/media/pci/saa7134/saa7134-video.c | 25 +- .../media/platform/amlogic/c3/isp/c3-isp-params.c | 4 + drivers/media/platform/aspeed/aspeed-video.c | 1 + .../platform/chips-media/wave5/wave5-vpu-enc.c | 29 +- drivers/media/platform/marvell/cafe-driver.c | 1 + drivers/media/platform/nuvoton/npcm-video.c | 34 +- .../media/platform/nxp/imx8-isi/imx8-isi-core.c | 2 + .../media/platform/nxp/imx8-isi/imx8-isi-core.h | 16 + .../platform/nxp/imx8-isi/imx8-isi-crossbar.c | 1 + drivers/media/platform/nxp/imx8-isi/imx8-isi-hw.c | 9 +- drivers/media/platform/nxp/imx8-isi/imx8-isi-m2m.c | 11 +- .../media/platform/nxp/imx8-isi/imx8-isi-pipe.c | 20 +- drivers/media/platform/qcom/camss/camss-csid-680.c | 30 +- .../media/platform/qcom/camss/camss-csid-gen2.c | 47 +- .../media/platform/qcom/camss/camss-csid-gen3.c | 28 +- drivers/media/platform/qcom/iris/iris_probe.c | 6 +- .../platform/renesas/rzg2l-cru/rzg2l-cru-regs.h | 1 + .../media/platform/renesas/rzg2l-cru/rzg2l-video.c | 17 +- drivers/media/platform/st/stm32/stm32-dcmi.c | 1 + .../st/stm32/stm32-dcmipp/dcmipp-bytecap.c | 6 +- drivers/media/platform/sunxi/sun4i-csi/sun4i_dma.c | 6 +- .../media/platform/synopsys/hdmirx/snps_hdmirx.c | 4 +- drivers/media/platform/ti/davinci/vpif_capture.c | 2 +- drivers/media/platform/ti/vpe/vpe.c | 3 +- drivers/media/platform/verisilicon/hantro_v4l2.c | 6 +- drivers/media/radio/radio-si476x.c | 1 + drivers/media/test-drivers/vidtv/vidtv_bridge.c | 4 +- drivers/media/test-drivers/vimc/vimc-core.c | 1 + drivers/media/test-drivers/vivid/vivid-core.c | 6 +- drivers/media/test-drivers/vivid/vivid-ctrls.c | 15 +- drivers/media/test-drivers/vivid/vivid-vid-cap.c | 38 +- drivers/media/test-drivers/vivid/vivid-vid-cap.h | 1 + drivers/media/test-drivers/vivid/vivid-vid-out.c | 6 + drivers/media/usb/airspy/airspy.c | 8 +- drivers/media/usb/cx231xx/cx231xx-cards.c | 16 +- drivers/media/usb/msi2500/msi2500.c | 32 +- drivers/media/usb/pwc/pwc-if.c | 13 +- drivers/media/v4l2-core/v4l2-ctrls-core.c | 13 + drivers/media/v4l2-core/v4l2-ctrls-request.c | 14 +- drivers/media/v4l2-core/v4l2-fwnode.c | 6 +- drivers/media/v4l2-core/v4l2-subdev.c | 4 + drivers/misc/mei/bus.c | 16 +- drivers/misc/nsm.c | 3 +- drivers/mmc/host/vub300.c | 24 +- drivers/mtd/maps/vmu-flash.c | 8 +- drivers/mtd/mtdcore.c | 23 +- drivers/mtd/mtdswap.c | 5 +- drivers/mtd/nand/ecc-mtk.c | 16 +- drivers/net/amt.c | 101 +- drivers/net/bonding/bond_main.c | 3 +- drivers/net/ethernet/airoha/airoha_eth.c | 3 +- drivers/net/ethernet/airoha/airoha_npu.c | 4 +- drivers/net/ethernet/airoha/airoha_ppe.c | 1 + drivers/net/ethernet/amd/pds_core/adminq.c | 12 +- drivers/net/ethernet/amd/pds_core/auxbus.c | 17 +- drivers/net/ethernet/amd/pds_core/core.c | 22 +- drivers/net/ethernet/amd/pds_core/devlink.c | 6 + drivers/net/ethernet/amd/pds_core/main.c | 14 +- drivers/net/ethernet/amd/xgbe/xgbe-mdio.c | 11 +- drivers/net/ethernet/freescale/dpaa2/dpaa2-eth.c | 1 + .../net/ethernet/freescale/dpaa2/dpaa2-switch.c | 1 + drivers/net/ethernet/freescale/fman/fman_dtsec.c | 17 +- drivers/net/ethernet/google/gve/gve.h | 3 + drivers/net/ethernet/google/gve/gve_rx_dqo.c | 34 + drivers/net/ethernet/hisilicon/hip04_eth.c | 11 +- drivers/net/ethernet/huawei/hinic/hinic_dev.h | 2 - drivers/net/ethernet/huawei/hinic/hinic_ethtool.c | 21 - drivers/net/ethernet/intel/ice/ice.h | 3 + drivers/net/ethernet/intel/ice/ice_eswitch.c | 3 - drivers/net/ethernet/intel/ice/ice_lag.c | 2 +- drivers/net/ethernet/intel/ice/ice_parser.c | 3 + drivers/net/ethernet/intel/ice/ice_ptp.c | 7 +- drivers/net/ethernet/intel/ice/ice_sriov.c | 14 +- drivers/net/ethernet/intel/ice/ice_vf_lib.c | 3 +- drivers/net/ethernet/marvell/octeontx2/af/rvu.c | 2 +- drivers/net/ethernet/marvell/octeontx2/af/rvu.h | 1 + .../net/ethernet/marvell/octeontx2/af/rvu_cn10k.c | 9 + .../net/ethernet/marvell/octeontx2/af/rvu_rep.c | 8 + .../ethernet/marvell/octeontx2/nic/otx2_flows.c | 1 + .../net/ethernet/marvell/octeontx2/nic/otx2_tc.c | 29 +- drivers/net/ethernet/mellanox/mlx5/core/en_dcbnl.c | 15 + .../net/ethernet/mellanox/mlx5/core/en_ethtool.c | 19 +- drivers/net/ethernet/mellanox/mlx5/core/en_main.c | 4 +- .../ethernet/mellanox/mlx5/core/esw/acl/helper.c | 2 +- .../net/ethernet/mellanox/mlx5/core/mlx5_core.h | 4 +- drivers/net/ethernet/mellanox/mlx5/core/port.c | 39 +- drivers/net/ethernet/microsoft/mana/gdma_main.c | 78 +- drivers/net/ethernet/microsoft/mana/mana_en.c | 13 + .../ethernet/netronome/nfp/nfpcore/nfp_resource.c | 3 + drivers/net/ethernet/realtek/rtase/rtase.h | 8 + drivers/net/ethernet/realtek/rtase/rtase_main.c | 197 +++ drivers/net/ethernet/stmicro/stmmac/common.h | 3 - drivers/net/ethernet/stmicro/stmmac/dwmac-intel.c | 31 + .../net/ethernet/stmicro/stmmac/dwmac-loongson.c | 5 +- .../net/ethernet/stmicro/stmmac/dwmac-socfpga.c | 162 ++- drivers/net/ethernet/stmicro/stmmac/dwmac100.h | 9 +- drivers/net/ethernet/stmicro/stmmac/dwmac1000.h | 16 +- .../net/ethernet/stmicro/stmmac/dwmac1000_core.c | 49 +- .../net/ethernet/stmicro/stmmac/dwmac1000_dma.c | 16 +- .../net/ethernet/stmicro/stmmac/dwmac100_core.c | 2 +- drivers/net/ethernet/stmicro/stmmac/dwmac100_dma.c | 3 +- drivers/net/ethernet/stmicro/stmmac/dwmac4.h | 49 +- drivers/net/ethernet/stmicro/stmmac/dwmac4_core.c | 53 +- drivers/net/ethernet/stmicro/stmmac/dwmac4_dma.c | 44 +- drivers/net/ethernet/stmicro/stmmac/dwmac4_dma.h | 16 +- drivers/net/ethernet/stmicro/stmmac/dwmac4_lib.c | 2 +- drivers/net/ethernet/stmicro/stmmac/dwmac_dma.h | 10 +- drivers/net/ethernet/stmicro/stmmac/dwmac_lib.c | 10 +- drivers/net/ethernet/stmicro/stmmac/dwxgmac2.h | 34 +- .../net/ethernet/stmicro/stmmac/dwxgmac2_core.c | 45 +- drivers/net/ethernet/stmicro/stmmac/dwxgmac2_dma.c | 75 +- drivers/net/ethernet/stmicro/stmmac/stmmac_main.c | 92 +- drivers/net/ethernet/stmicro/stmmac/stmmac_tc.c | 35 + drivers/net/ethernet/wangxun/txgbe/txgbe_main.c | 1 + drivers/net/geneve.c | 3 + drivers/net/gtp.c | 17 +- drivers/net/ipa/ipa_smp2p.c | 30 +- drivers/net/mctp/mctp-i3c.c | 11 +- drivers/net/mctp/mctp-serial.c | 2 +- drivers/net/ovpn/io.c | 4 +- drivers/net/ovpn/peer.c | 16 +- drivers/net/ovpn/tcp.c | 6 +- drivers/net/pcs/pcs-xpcs.c | 34 +- drivers/net/phy/marvell.c | 2 +- drivers/net/ppp/ppp_generic.c | 239 ++-- drivers/net/ppp/pppoe.c | 1 + drivers/net/slip/slip.c | 4 + drivers/net/vmxnet3/vmxnet3_drv.c | 22 +- drivers/net/vxlan/vxlan_core.c | 3 + drivers/net/vxlan/vxlan_mdb.c | 30 +- drivers/net/wan/wanxl.c | 3 +- drivers/net/wireless/ath/ath11k/ahb.c | 1 + drivers/net/wireless/ath/ath11k/dp_rx.c | 3 + drivers/net/wireless/ath/ath11k/pci.c | 4 + drivers/net/wireless/ath/ath11k/qmi.c | 11 +- drivers/net/wireless/ath/ath12k/pci.c | 4 + drivers/net/wireless/ath/ath6kl/txrx.c | 12 +- drivers/net/wireless/ath/ath6kl/wmi.c | 20 + drivers/net/wireless/ath/ath9k/hif_usb.c | 7 +- drivers/net/wireless/ath/carl9170/rx.c | 7 +- drivers/net/wireless/ath/carl9170/tx.c | 2 +- drivers/net/wireless/atmel/at76c50x-usb.c | 7 +- .../wireless/broadcom/brcm80211/brcmfmac/bcmsdh.c | 1 + .../broadcom/brcm80211/brcmfmac/cfg80211.c | 2 +- .../wireless/broadcom/brcm80211/brcmfmac/pcie.c | 8 +- .../wireless/broadcom/brcm80211/brcmfmac/sdio.c | 2 +- drivers/net/wireless/intel/ipw2x00/ipw2100.c | 8 +- drivers/net/wireless/intel/iwlwifi/fw/pnvm.c | 9 +- drivers/net/wireless/intel/iwlwifi/fw/regulatory.c | 2 +- drivers/net/wireless/intel/iwlwifi/mvm/d3.c | 3 +- drivers/net/wireless/intel/iwlwifi/mvm/fw.c | 10 + drivers/net/wireless/intersil/p54/txrx.c | 8 + drivers/net/wireless/marvell/libertas/firmware.c | 1 + drivers/net/wireless/marvell/mwifiex/sta_ioctl.c | 14 +- drivers/net/wireless/marvell/mwifiex/tdls.c | 2 +- drivers/net/wireless/marvell/mwifiex/uap_event.c | 24 +- drivers/net/wireless/mediatek/mt76/mt7615/mac.c | 6 + .../net/wireless/mediatek/mt76/mt76_connac_mcu.c | 2 + drivers/net/wireless/mediatek/mt76/mt7915/mcu.c | 18 +- drivers/net/wireless/mediatek/mt76/mt7921/mac.c | 10 +- drivers/net/wireless/mediatek/mt76/mt7925/mac.c | 13 +- drivers/net/wireless/mediatek/mt76/mt7925/main.c | 3 + drivers/net/wireless/mediatek/mt76/mt7925/mcu.c | 2 + drivers/net/wireless/mediatek/mt76/mt7996/mcu.c | 19 +- drivers/net/wireless/microchip/wilc1000/hif.c | 5 + drivers/net/wireless/virtual/mac80211_hwsim.c | 1 + drivers/pinctrl/renesas/pinctrl-rzg2l.c | 8 +- drivers/platform/loongarch/loongson-laptop.c | 1 + .../uncore-frequency/uncore-frequency-common.c | 7 +- drivers/pmdomain/imx/imx93-blk-ctrl.c | 126 +- drivers/ptp/ptp_netc.c | 1 + drivers/ptp/ptp_s390.c | 6 +- drivers/regulator/mt6358-regulator.c | 2 +- drivers/remoteproc/xlnx_r5_remoteproc.c | 50 +- drivers/scsi/hosts.c | 2 + drivers/scsi/scsi_error.c | 22 +- drivers/scsi/scsi_priv.h | 1 + drivers/staging/media/meson/vdec/vdec.c | 4 +- drivers/staging/media/sunxi/cedrus/cedrus.c | 6 +- drivers/staging/media/sunxi/cedrus/cedrus_h264.c | 3 + drivers/staging/media/tegra-video/vi.c | 4 +- drivers/staging/rtl8723bs/core/rtw_ieee80211.c | 9 +- drivers/staging/rtl8723bs/os_dep/ioctl_cfg80211.c | 2 +- drivers/thunderbolt/debugfs.c | 2 + drivers/thunderbolt/domain.c | 30 + drivers/thunderbolt/icm.c | 5 + drivers/thunderbolt/switch.c | 14 + drivers/thunderbolt/tb.c | 59 +- drivers/thunderbolt/tb.h | 2 + drivers/thunderbolt/xdomain.c | 100 +- drivers/tty/serial/8250/8250_mid.c | 14 +- drivers/tty/serial/sc16is7xx.c | 12 + drivers/uio/uio_hv_generic.c | 8 +- drivers/usb/atm/ueagle-atm.c | 17 + drivers/usb/chipidea/core.c | 1 + drivers/usb/core/port.c | 2 + drivers/usb/core/sysfs.c | 8 +- drivers/usb/gadget/function/f_midi.c | 1 + drivers/usb/gadget/function/f_ncm.c | 17 +- drivers/usb/gadget/function/f_printer.c | 23 +- drivers/usb/gadget/function/f_tcm.c | 192 ++- drivers/usb/gadget/function/tcm.h | 13 + drivers/usb/gadget/function/uvc_v4l2.c | 2 + drivers/usb/gadget/udc/bdc/bdc_core.c | 20 + drivers/usb/gadget/udc/bdc/bdc_udc.c | 7 +- drivers/usb/gadget/udc/dummy_hcd.c | 40 +- drivers/usb/gadget/udc/fsl_udc_core.c | 93 +- drivers/usb/gadget/udc/fsl_usb2_udc.h | 1 + drivers/usb/gadget/udc/snps_udc_core.c | 1 - drivers/usb/host/xhci-pci.c | 1 + drivers/usb/host/xhci.c | 15 +- drivers/usb/host/xhci.h | 1 + drivers/usb/musb/omap2430.c | 2 - drivers/usb/serial/ftdi_sio.c | 2 + drivers/usb/serial/ftdi_sio_ids.h | 5 + drivers/usb/serial/io_edgeport.c | 3 +- drivers/usb/serial/keyspan_pda.c | 44 +- drivers/usb/serial/option.c | 1 + drivers/usb/storage/unusual_devs.h | 7 + drivers/usb/typec/ucsi/ucsi.c | 158 ++- drivers/vdpa/vdpa_user/iova_domain.c | 29 +- drivers/vdpa/vdpa_user/iova_domain.h | 8 +- drivers/vdpa/vdpa_user/vduse_dev.c | 112 +- drivers/vhost/net.c | 8 +- drivers/video/Kconfig | 1 + drivers/virt/coco/pkvm-guest/arm-pkvm-guest.c | 2 +- drivers/watchdog/airoha_wdt.c | 3 + drivers/watchdog/s32g_wdt.c | 3 +- drivers/watchdog/watchdog_pretimeout.c | 2 + fs/afs/dir_edit.c | 2 +- fs/binfmt_elf_fdpic.c | 4 + fs/binfmt_misc.c | 5 +- fs/btrfs/backref.c | 16 +- fs/btrfs/block-group.c | 8 +- fs/btrfs/ctree.c | 28 +- fs/btrfs/ctree.h | 16 +- fs/btrfs/defrag.c | 4 +- fs/btrfs/dev-replace.c | 4 +- fs/btrfs/extent-tree.c | 8 +- fs/btrfs/extent_io.c | 4 +- fs/btrfs/extent_map.c | 4 +- fs/btrfs/file-item.c | 38 +- fs/btrfs/free-space-cache.c | 7 +- fs/btrfs/free-space-tree.c | 4 +- fs/btrfs/inode-item.c | 2 +- fs/btrfs/inode.c | 4 +- fs/btrfs/qgroup.c | 4 +- fs/btrfs/raid-stripe-tree.c | 4 +- fs/btrfs/relocation.c | 10 +- fs/btrfs/scrub.c | 20 +- fs/btrfs/send.c | 14 +- fs/btrfs/tree-log.c | 20 +- fs/btrfs/volumes.c | 6 +- fs/btrfs/xattr.c | 2 +- fs/ceph/addr.c | 9 + fs/ceph/caps.c | 1 + fs/ceph/dir.c | 7 +- fs/ceph/ioctl.c | 6 + fs/crypto/inline_crypt.c | 57 +- fs/crypto/keysetup_v1.c | 8 +- fs/exec.c | 2 +- fs/f2fs/super.c | 25 +- fs/fuse/dev_uring.c | 22 +- fs/fuse/file.c | 5 +- fs/iomap/buffered-io.c | 34 +- fs/nfsd/nfs4xdr.c | 8 +- fs/nfsd/vfs.c | 15 +- fs/nfsd/vfs.h | 2 +- fs/overlayfs/copy_up.c | 12 +- fs/overlayfs/file.c | 47 +- fs/overlayfs/overlayfs.h | 5 + fs/overlayfs/xattrs.c | 2 +- fs/posix_acl.c | 7 + fs/proc/namespaces.c | 4 +- fs/proc/task_mmu.c | 14 +- fs/resctrl/ctrlmondata.c | 6 +- fs/resctrl/internal.h | 22 +- fs/resctrl/monitor.c | 200 +-- fs/resctrl/rdtgroup.c | 75 +- fs/smb/client/misc.c | 34 +- fs/smb/client/smb2file.c | 21 + fs/smb/client/smb2inode.c | 23 +- fs/smb/client/smb2ops.c | 25 +- fs/smb/server/oplock.c | 6 +- fs/smb/server/smb2misc.c | 5 + fs/smb/server/smb2pdu.c | 9 +- fs/smb/server/smbacl.c | 42 +- fs/super.c | 34 +- fs/xfs/scrub/cow_repair.c | 203 +-- fs/xfs/scrub/trace.h | 28 +- include/drm/drm_buddy.h | 165 +-- include/drm/drm_connector.h | 6 +- include/drm/drm_utils.h | 1 + include/linux/arm_ffa.h | 2 +- include/linux/audit.h | 6 +- include/linux/audit_arch.h | 12 +- include/linux/bootconfig.h | 3 + include/linux/cred.h | 15 + include/linux/firmware/xlnx-zynqmp.h | 13 + include/linux/fscrypt.h | 18 +- include/linux/gpu_buddy.h | 177 +++ include/linux/mlx5/mlx5_ifc.h | 13 +- include/linux/resctrl.h | 28 +- include/linux/seqlock.h | 10 +- include/linux/sunrpc/svcsock.h | 3 + include/linux/sunrpc/xdr.h | 19 +- include/linux/virtio.h | 6 +- include/linux/vtime.h | 6 + include/media/v4l2-async.h | 4 +- include/media/videobuf2-core.h | 8 +- include/net/bluetooth/rfcomm.h | 3 + include/net/cfg80211.h | 2 +- include/net/dropreason-core.h | 3 + include/net/ip6_tunnel.h | 2 +- include/net/netfilter/nf_tables.h | 32 - include/net/netfilter/nft_fib.h | 2 - include/net/netfilter/nft_meta.h | 3 - include/net/sctp/structs.h | 3 +- include/net/tcp.h | 2 + include/rdma/ib_umem.h | 19 + include/scsi/scsi_host.h | 3 + include/uapi/linux/btrfs.h | 2 +- init/Kconfig | 3 + init/main.c | 45 - io_uring/rw.c | 42 +- kernel/audit.c | 2 +- kernel/audit.h | 32 +- kernel/audit_fsnotify.c | 36 +- kernel/audit_tree.c | 2 +- kernel/audit_watch.c | 35 +- kernel/auditfilter.c | 17 +- kernel/auditsc.c | 6 +- kernel/bpf/verifier.c | 17 + kernel/kexec_handover.c | 32 +- kernel/sched/ext.c | 9 +- kernel/trace/ftrace.c | 13 + kernel/trace/trace.c | 2 +- kernel/trace/trace_eprobe.c | 3 +- kernel/trace/trace_events.c | 4 +- kernel/trace/trace_mmiotrace.c | 4 +- kernel/trace/trace_probe.c | 13 +- lib/bootconfig.c | 65 + lib/compat_audit.c | 12 +- lib/rhashtable.c | 1 + mm/damon/core.c | 13 + mm/huge_memory.c | 12 +- mm/kmemleak.c | 7 +- mm/sparse.c | 32 +- net/bluetooth/hci_sync.c | 55 +- net/bluetooth/mgmt.c | 86 +- net/bluetooth/rfcomm/core.c | 17 + net/bluetooth/rfcomm/tty.c | 7 +- net/bridge/br_netlink_tunnel.c | 3 +- net/bridge/br_private.h | 6 +- net/bridge/br_vlan.c | 10 +- net/bridge/br_vlan_options.c | 3 +- net/bridge/netfilter/nft_meta_bridge.c | 20 - net/bridge/netfilter/nft_reject_bridge.c | 1 - net/can/bcm.c | 528 ++++++-- net/can/j1939/transport.c | 18 +- net/can/raw.c | 66 +- net/ceph/auth_x.c | 9 +- net/ceph/ceph_common.c | 4 +- net/ceph/mon_client.c | 4 +- net/ceph/osdmap.c | 12 +- net/core/dev.c | 111 +- net/core/filter.c | 6 +- net/core/gro.c | 4 +- net/core/sock.c | 10 +- net/core/sock_map.c | 2 + net/hsr/hsr_slave.c | 2 + net/ipv4/datagram.c | 4 +- net/ipv4/fib_trie.c | 2 +- net/ipv4/icmp.c | 18 +- net/ipv4/ip_gre.c | 4 +- net/ipv4/ip_tunnel_core.c | 2 +- net/ipv4/netfilter/nft_dup_ipv4.c | 1 - net/ipv4/netfilter/nft_fib_ipv4.c | 2 - net/ipv4/netfilter/nft_reject_ipv4.c | 1 - net/ipv4/nexthop.c | 2 +- net/ipv4/raw.c | 23 +- net/ipv4/tcp_bpf.c | 2 +- net/ipv4/tcp_input.c | 56 +- net/ipv4/tcp_ipv4.c | 14 +- net/ipv4/tcp_minisocks.c | 12 +- net/ipv6/ila/ila_common.c | 12 + net/ipv6/ip6_gre.c | 4 +- net/ipv6/netfilter/nft_dup_ipv6.c | 1 - net/ipv6/netfilter/nft_fib_ipv6.c | 2 - net/ipv6/netfilter/nft_reject_ipv6.c | 1 - net/ipv6/raw.c | 2 +- net/ipv6/route.c | 4 +- net/ipv6/tcp_ipv6.c | 8 +- net/ipv6/xfrm6_policy.c | 1 + net/iucv/af_iucv.c | 21 +- net/mac80211/cfg.c | 11 +- net/mac80211/iface.c | 8 +- net/mac80211/link.c | 4 + net/mac80211/mlme.c | 6 +- net/mac80211/rx.c | 2 + net/mac80211/sta_info.c | 15 +- net/mac802154/llsec.c | 5 + net/mac802154/scan.c | 11 + net/mctp/device.c | 4 +- net/mpls/af_mpls.c | 3 + net/mptcp/options.c | 12 +- net/mptcp/pm_userspace.c | 7 +- net/mptcp/protocol.c | 1 + net/netfilter/nf_conntrack_sip.c | 10 +- net/netfilter/nf_tables_api.c | 315 +---- net/netfilter/nft_bitwise.c | 104 -- net/netfilter/nft_byteorder.c | 11 - net/netfilter/nft_cmp.c | 3 - net/netfilter/nft_compat.c | 10 - net/netfilter/nft_connlimit.c | 1 - net/netfilter/nft_counter.c | 21 +- net/netfilter/nft_ct.c | 46 - net/netfilter/nft_dup_netdev.c | 1 - net/netfilter/nft_dynset.c | 1 - net/netfilter/nft_exthdr.c | 34 - net/netfilter/nft_fib.c | 51 +- net/netfilter/nft_fib_inet.c | 1 - net/netfilter/nft_fib_netdev.c | 30 +- net/netfilter/nft_flow_offload.c | 1 - net/netfilter/nft_fwd_netdev.c | 2 - net/netfilter/nft_hash.c | 36 - net/netfilter/nft_immediate.c | 12 - net/netfilter/nft_last.c | 1 - net/netfilter/nft_limit.c | 2 - net/netfilter/nft_log.c | 1 - net/netfilter/nft_lookup.c | 12 - net/netfilter/nft_masq.c | 3 - net/netfilter/nft_meta.c | 45 - net/netfilter/nft_nat.c | 2 - net/netfilter/nft_numgen.c | 22 - net/netfilter/nft_objref.c | 2 - net/netfilter/nft_osf.c | 25 - net/netfilter/nft_payload.c | 47 - net/netfilter/nft_queue.c | 2 - net/netfilter/nft_quota.c | 14 +- net/netfilter/nft_range.c | 1 - net/netfilter/nft_redir.c | 3 - net/netfilter/nft_reject_inet.c | 1 - net/netfilter/nft_reject_netdev.c | 1 - net/netfilter/nft_rt.c | 1 - net/netfilter/nft_socket.c | 26 - net/netfilter/nft_synproxy.c | 1 - net/netfilter/nft_tproxy.c | 1 - net/netfilter/nft_tunnel.c | 26 - net/netfilter/nft_xfrm.c | 27 - net/openvswitch/actions.c | 19 +- net/openvswitch/datapath.c | 25 +- net/openvswitch/datapath.h | 2 +- net/openvswitch/vport.c | 2 +- net/packet/af_packet.c | 6 +- net/phonet/pep.c | 2 + net/qrtr/af_qrtr.c | 8 + net/qrtr/ns.c | 4 +- net/rds/recv.c | 15 + net/rds/tcp.c | 4 +- net/rxrpc/ar-internal.h | 6 +- net/sched/act_tunnel_key.c | 14 +- net/sctp/auth.c | 2 +- net/sctp/protocol.c | 21 +- net/sctp/sm_make_chunk.c | 6 + net/sctp/sm_statefuns.c | 2 +- net/sctp/stream.c | 6 +- net/sctp/sysctl.c | 9 +- net/sunrpc/svcsock.c | 69 +- net/sunrpc/xdr.c | 210 ++- net/sunrpc/xprtrdma/rpc_rdma.c | 4 + net/sunrpc/xprtrdma/verbs.c | 12 +- net/tipc/netlink.c | 6 +- net/tipc/netlink_compat.c | 4 + net/tipc/socket.c | 1 + net/tls/tls_device.c | 6 +- net/vmw_vsock/virtio_transport_common.c | 165 ++- net/wireless/core.c | 4 +- net/wireless/core.h | 2 +- net/wireless/nl80211.c | 22 +- net/wireless/pmsr.c | 29 +- net/wireless/scan.c | 13 +- net/x25/af_x25.c | 8 +- net/xfrm/xfrm_device.c | 12 +- net/xfrm/xfrm_iptfs.c | 1 + net/xfrm/xfrm_policy.c | 4 +- net/xfrm/xfrm_state.c | 7 +- net/xfrm/xfrm_user.c | 3 +- rust/bindings/lib.rs | 4 + rust/kernel/device.rs | 16 +- rust/kernel/time.rs | 11 +- rust/uapi/lib.rs | 4 + security/landlock/domain.c | 8 +- security/landlock/domain.h | 5 +- security/landlock/ruleset.c | 7 +- sound/core/seq/seq_timer.c | 13 +- sound/core/timer.c | 21 +- sound/hda/codecs/hdmi/hdmi.c | 3 + sound/hda/codecs/hdmi/hdmi_local.h | 9 + sound/hda/codecs/hdmi/intelhdmi.c | 36 +- sound/hda/codecs/realtek/alc269.c | 9 + sound/hda/codecs/side-codecs/cs35l41_hda.c | 11 +- sound/soc/amd/ps/pci-ps.c | 33 +- sound/soc/codecs/bt-sco.c | 10 +- sound/soc/codecs/cs35l56-i2c.c | 4 +- sound/soc/codecs/cs35l56-spi.c | 4 +- sound/soc/codecs/cs35l56.c | 25 +- sound/soc/codecs/cs42l43-jack.c | 3 +- sound/soc/codecs/tas2562.c | 5 +- sound/soc/codecs/tas2781-fmwlib.c | 63 +- sound/soc/fsl/fsl_sai.c | 29 +- sound/soc/fsl/imx-card.c | 12 +- sound/soc/meson/aiu-fifo-spdif.c | 5 + sound/soc/sunxi/sun4i-codec.c | 1 + sound/usb/quirks.c | 2 + tools/objtool/check.c | 1 + tools/testing/cxl/Kbuild | 2 +- tools/testing/selftests/alsa/mixer-test.c | 1 + .../testing/selftests/bpf/progs/verifier_ld_ind.c | 142 +++ .../testing/selftests/bpf/progs/verifier_map_ptr.c | 36 +- tools/testing/selftests/drivers/net/settings | 1 + tools/testing/selftests/drivers/ntsync/config | 2 +- tools/testing/selftests/ftrace/ftracetest | 1 + tools/testing/selftests/net/af_unix/config | 1 + tools/testing/selftests/net/openvswitch/config | 16 + tools/testing/selftests/net/ovpn/config | 2 + tools/testing/selftests/net/ovpn/ovpn-cli.c | 4 +- tools/testing/selftests/net/ovpn/settings | 1 + 776 files changed, 10812 insertions(+), 6601 deletions(-)

3 months

[PATCH 6.12 000/602] 6.12.101-rc1 review

by Greg Kroah-Hartman

This is the start of the stable review cycle for the 6.12.101 release. There are 602 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know. Responses should be made by Sat, 01 Aug 2026 14:13:43 +0000. Anything received after that time might be too late. The whole patch series can be found in one patch at: https://www.kernel.org/pub/linux/kernel/v6.x/stable-review/patch-6.12.101-r… or in the git tree and branch at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-6.12.y and the diffstat can be found below. thanks, greg k-h ------------- Pseudo-Shortlog of commits: Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> Linux 6.12.101-rc1 Nikunj A Dadhania <nikunj(a)amd.com> KVM: SVM: Bump asid_generation on CPU online to avoid ASID collision after hotplug David Howells <dhowells(a)redhat.com> afs: Fix uninit var in afs_alloc_anon_key() Pavitra Jha <jhapavitra98(a)gmail.com> Bluetooth: hci_conn: Fix memory leak in hci_le_big_terminate() Luiz Augusto von Dentz <luiz.von.dentz(a)intel.com> Bluetooth: hci_conn: Fix not cleaning up PA_LINK connections Luiz Augusto von Dentz <luiz.von.dentz(a)intel.com> Bluetooth: hci_conn: Fix not cleaning up Broadcaster/Broadcast Source Luiz Augusto von Dentz <luiz.von.dentz(a)intel.com> Bluetooth: hci_conn: Fix running bis_cleanup for hci_conn->type PA_LINK Nan Li <tonanli66(a)gmail.com> afs: handle CB.InitCallBackState3 requests without a server record David Howells <dhowells(a)redhat.com> afs: Fix delayed allocation of a cell's anonymous key Ivan Vecera <ivecera(a)redhat.com> dpll: fix clock quality level reporting Edward Adam Davis <eadavis(a)qq.com> afs: Set vllist to NULL if addr parsing fails Lukas Bulwahn <lukas.bulwahn(a)redhat.com> net: ethernet: Remove accidental duplication in Kconfig file Nicolas Escande <nico.escande(a)gmail.com> wifi: nl80211: fix nl80211_start_radar_detection return value David Howells <dhowells(a)redhat.com> rxrpc: Fix locking issues with the peer record hash David Howells <dhowells(a)redhat.com> rxrpc: Disable IRQ, not BH, to take the lock for ->attend_link Koen Koning <koen.koning(a)linux.intel.com> gpu: Fix uninitialized buddy for built-in drivers Gal Pressman <gal(a)nvidia.com> net/mlx5e: Fix NULL pointer dereference in ioctl module EEPROM query Guangshuo Li <lgs201920130244(a)gmail.com> usb: musb: omap2430: Do not put borrowed of_node in probe Johan Hovold <johan(a)kernel.org> usb: musb: omap2430: clean up probe error handling Johan Hovold <johan(a)kernel.org> USB: gadget: fsl-udc: fix dev_printk() device Krzysztof Kozlowski <krzysztof.kozlowski(a)linaro.org> USB: gadget: Use str_enable_disable-like helpers David Howells <dhowells(a)redhat.com> afs: Fix lack of locking around modifications of net->cells_dyn_ino David Howells <dhowells(a)redhat.com> afs: Fix dynamic lookup to fail on cell lookup failure David Howells <dhowells(a)redhat.com> afs: Simplify cell record handling David Howells <dhowells(a)redhat.com> afs: Fix afs_server ref accounting David Howells <dhowells(a)redhat.com> afs: Use the per-peer app data provided by rxrpc David Howells <dhowells(a)redhat.com> rxrpc: Allow the app to store private data on peer structs David Howells <dhowells(a)redhat.com> afs: Drop the net parameter from afs_unuse_cell() David Howells <dhowells(a)redhat.com> afs: Make afs_lookup_cell() take a trace note David Howells <dhowells(a)redhat.com> afs: Improve server refcount/active count tracing Luiz Augusto von Dentz <luiz.von.dentz(a)intel.com> Bluetooth: hci_core: Fix not accounting for BIS/CIS/PA links separately Yang Li <yang.li(a)amlogic.com> Bluetooth: Add PA_LINK to distinguish BIG sync and PA sync connections Haoxiang Li <haoxiang_li2024(a)163.com> net: ipa: fix SMEM state handle leaks in SMP2P init Théo Lebrun <theo.lebrun(a)bootlin.com> net: macb: drop in-flight Tx SKBs on close Reinette Chatre <reinette.chatre(a)intel.com> fs/resctrl: Fix double-add of pseudo-locked region's RMID to free list Bryam Vargas <hexlabsecurity(a)proton.me> ata: libata-core: Reject an invalid concurrent positioning ranges count Dawei Feng <dawei.feng(a)seu.edu.cn> octeontx2-pf: fix SQB pointer leak on init failure Dawei Feng <dawei.feng(a)seu.edu.cn> net/mlx5: HWS, fix matcher leak on resize target setup failure Yevgeny Kliteynik <kliteyn(a)nvidia.com> net/mlx5: HWS, Rearrange to prevent forward declaration Wentao Liang <vulab(a)iscas.ac.cn> ipmi: fix refcount leak in i_ipmi_request() Breno Leitao <leitao(a)debian.org> bootconfig: fix NULL-pointer arithmetic in xbc_snprint_cmdline() Breno Leitao <leitao(a)debian.org> bootconfig: move xbc_snprint_cmdline() to lib/bootconfig.c Junrui Luo <moonafterrain(a)outlook.com> octeontx2-af: cn10k: restrict VF LMTLINE sharing to its own PF Sergio Paracuellos <sergio.paracuellos(a)gmail.com> gpio: mt7621: avoid corruption of shared interrupt trigger state Ankit Garg <nktgrg(a)google.com> gve: fix header buffer corruption with header-split and HW-GRO Maoyi Xie <maoyixie.tju(a)gmail.com> net: ip6_tunnel: require CAP_NET_ADMIN in the device netns for changelink Dexuan Cui <decui(a)microsoft.com> net: mana: Validate the packet length reported by the NIC Thomas Gleixner <tglx(a)kernel.org> locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() Guangshuo Li <lgs201920130244(a)gmail.com> mmc: vub300: fix use-after-free on probe failure Johan Hovold <johan(a)kernel.org> mmc: vub300: rename probe error labels Johan Hovold <johan(a)kernel.org> mmc: vub300: fix use-after-free on disconnect Maoyi Xie <maoyixie.tju(a)gmail.com> wifi: libertas_tf: fix use-after-free in lbtf_free_adapter() Ingo Blechschmidt <iblech(a)speicherleck.de> dm: avoid leaking the caller's thread keyring via the table device file Christian Brauner <brauner(a)kernel.org> cred: add scoped_with_kernel_creds() Christian Brauner <brauner(a)kernel.org> cred: add kernel_cred() helper Christian Brauner <brauner(a)kernel.org> cleanup: fix scoped_class() Christian Brauner <brauner(a)kernel.org> cleanup: add a scoped version of CLASS() Mikulas Patocka <mpatocka(a)redhat.com> dm-integrity: fix leaking uninitialized kernel memory Connor Williamson <connordw(a)amazon.com> block: remove redundant GD_NEED_PART_SCAN in add_disk_final() Ming Lei <ming.lei(a)redhat.com> block: add helper add_disk_final() Tristan Madani <tristan(a)talencesecurity.com> bpf: Reset register bounds before narrowing retval range in check_mem_access() Amery Hung <ameryhung(a)gmail.com> bpf: Refactor check_ctx_access() Kumar Kartikeya Dwivedi <memxor(a)gmail.com> bpf: Refactor {acquire,release}_reference_state Souvik Banerjee <souvik(a)amlalabs.com> ovl: use linked upper dentry in copy-up tmpfile Michael Bommarito <michael.bommarito(a)gmail.com> nvmet-auth: reject short AUTH_RECEIVE buffers Damien Le Moal <dlemoal(a)kernel.org> nvmet: Introduce nvmet_req_transfer_len() Dmitry Safonov <0x7f454c46(a)gmail.com> tcp: Decrement tcp_md5_needed static branch Michael Bommarito <michael.bommarito(a)gmail.com> tcp: defer md5sig_info kfree past RCU grace period in tcp_connect Qianyu Luo <qianyuluo3(a)gmail.com> xfrm: nat_keepalive: avoid double free on send error Sebastian Andrzej Siewior <bigeasy(a)linutronix.de> xfrm: Use nested-BH locking for nat_keepalive_sk_ipv[46] Vincent Jardin <vjardin(a)free.fr> i2c: imx: fix locked bus on SMBus block-read of 0 (atomic) Stefan Eichenberger <stefan.eichenberger(a)toradex.com> i2c: imx: separate atomic, dma and non-dma use case Koichiro Den <den(a)valinux.co.jp> dmaengine: dw-edma-pcie: Reject devices without driver data Krzysztof Kozlowski <krzysztof.kozlowski(a)oss.qualcomm.com> dmaengine: dw-edma: Fix confusing cleanup.h syntax Abinash Singh <abinashlalotra(a)gmail.com> dma: dw-edma: Fix build warning in dw_edma_pcie_probe() Michael Bommarito <michael.bommarito(a)gmail.com> thunderbolt: Prevent XDomain delayed work use-after-free on disconnect Mika Westerberg <mika.westerberg(a)linux.intel.com> thunderbolt: Remove XDomain from the bus without holding tb->lock Mika Westerberg <mika.westerberg(a)linux.intel.com> thunderbolt: Remove service debugfs entries during unregister Mika Westerberg <mika.westerberg(a)linux.intel.com> thunderbolt: Keep XDomain reference during the lifetime of a service Muchun Song <muchun.song(a)linux.dev> mm/sparse-vmemmap: fix DAX vmemmap accounting with optimization David Hildenbrand (Arm) <david(a)kernel.org> mm: prepare to move subsection_map_init() to mm/sparse-vmemmap.c Florian Fuchs <fuchsfl(a)gmail.com> mtd: maps: vmu-flash: fix fault in unaligned fixup Muchun Song <muchun.song(a)linux.dev> mm/mm_init: fix pageblock migratetype for ZONE_DEVICE compound pages Bryam Vargas <hexlabsecurity(a)proton.me> landlock: Fix LANDLOCK_SCOPE_SIGNAL bypass on the SIGIO path Mickaël Salaün <mic(a)digikod.net> landlock: Prepare to use credential instead of domain for fowner Muchun Song <muchun.song(a)linux.dev> mm/sparse-vmemmap: fix vmemmap accounting underflow Deepanshu Kartikey <kartikey406(a)gmail.com> mm/hugetlb: fix hugetlb cgroup rsvd charge/uncharge mismatch Tanmay Shah <tanmay.shah(a)amd.com> remoteproc: xlnx: Check remote core state Chuck Lever <chuck.lever(a)oracle.com> SUNRPC: Return an error from xdr_buf_to_bvec() on overflow Chuck Lever <chuck.lever(a)oracle.com> SUNRPC: Add helpers to convert xdr_buf byte ranges to scatterlists Jeff Layton <jlayton(a)kernel.org> sunrpc: allocate a separate bvec array for socket sends Mike Snitzer <snitzer(a)kernel.org> NFSD: pass nfsd_file to nfsd_iter_read() Arunpravin Paneer Selvam <Arunpravin.PaneerSelvam(a)amd.com> gpu/buddy: bail out of try_harder when alignment cannot be honoured Joel Fernandes <joelagnelf(a)nvidia.com> gpu: Move DRM buddy allocator one level up (part two) Theodor Arsenij Larionov-Trichkine <theodorlarionov(a)gmail.com> netfilter: nft_fib: reject fib expression on the netdev egress hook Florian Westphal <fw(a)strlen.de> netfilter: nf_tables: remove register tracking infrastructure Yue Haibing <yuehaibing(a)huawei.com> netfilter: nf_tables: Remove unused nft_reduce_is_readonly() Jeremy Sowden <jeremy(a)azazel.net> netfilter: bitwise: rename some boolean operation functions Pablo Neira Ayuso <pablo(a)netfilter.org> netfilter: nf_conntrack_sip: validate skb_dst() before accessing it Florian Westphal <fw(a)strlen.de> netfilter: nf_conntrack_sip: remove net variable shadowing Cássio Gabriel <cassiogabrielcontato(a)gmail.com> ASoC: mediatek: mt8183: Check runtime resume during probe Chen-Yu Tsai <wenst(a)chromium.org> ASoC: mediatek: mt8183-afe-pcm: use local `dev` pointer in driver callbacks Chen-Yu Tsai <wenst(a)chromium.org> ASoC: mediatek: mt8183-afe-pcm: Support >32 bit DMA addresses Chen-Yu Tsai <wenst(a)chromium.org> ASoC: mediatek: mt8183-afe-pcm: Shorten memif_data table using macros Cássio Gabriel <cassiogabrielcontato(a)gmail.com> ASoC: mediatek: mt8192: Check runtime resume during probe Tang Bin <tangbin(a)cmss.chinamobile.com> ASoC: mediatek: mt8192-afe-pcm: Simplify probe() with local dev variable Abel Vesa <abel.vesa(a)oss.qualcomm.com> arm64: dts: qcom: hamoa: Fix OPP tables for all DisplayPort controllers Dmitry Baryshkov <dmitry.baryshkov(a)oss.qualcomm.com> arm64: dts: qcom: correct RBR opp entry Runyu Xiao <runyu.xiao(a)seu.edu.cn> octeontx2-pf: clear stale mailbox IRQ state before request_irq() Runyu Xiao <runyu.xiao(a)seu.edu.cn> octeontx2-vf: clear stale mailbox IRQ state before request_irq() Subbaraya Sundeep <sbhatta(a)marvell.com> octeontx2: Annotate mmio regions as __iomem Jason Wang <jasowang(a)redhat.com> VDUSE: avoid leaking information to userspace Eugenio Pérez <eperezma(a)redhat.com> vduse: take out allocations from vduse_dev_alloc_coherent Eugenio Pérez <eperezma(a)redhat.com> vduse: remove unused vaddr parameter of vduse_domain_free_coherent Sheng Zhao <sheng.zhao(a)bytedance.com> vduse: Use fixed 4KB bounce pages for non-4KB page size Li Xiasong <lixiasong1(a)huawei.com> tipc: restrict socket queue dumps in enqueue tracepoints David Howells <dhowells(a)redhat.com> rxrpc: Fix socket notification race David Howells <dhowells(a)redhat.com> rxrpc: Fix notification vs call-release vs recvmsg David Howells <dhowells(a)redhat.com> rxrpc: Use irq-disabling spinlocks between app and I/O thread David Howells <dhowells(a)redhat.com> rxrpc: Don't need barrier for ->tx_bottom and ->acks_hard_ack David Howells <dhowells(a)redhat.com> rxrpc: Fix CPU time starvation in I/O thread Jiacheng Yu <yujiacheng3(a)huawei.com> fbcon: Use correct type for vc_resize() return value Thomas Zimmermann <tzimmermann(a)suse.de> fbcon: Rename struct fbcon_ops to struct fbcon_par Darrick J. Wong <djwong(a)kernel.org> xfs: don't replace the wrong part of the cow fork Long Li <leo.lilong(a)huawei.com> xfs: factor out xfs_attr3_leaf_init Li Daming <d4n.for.sec(a)gmail.com> rxrpc: serialize kernel accept preallocation with socket teardown David Howells <dhowells(a)redhat.com> rxrpc: Pull out certain app callback funcs into an ops table Xu Rao <raoxu(a)uniontech.com> ALSA: hda: Fix cached processing coefficient verbs Zhang Heng <zhangheng(a)kylinos.cn> ALSA: hda: conexant: Remove mic bias threshold override Mingyu Wang <25181214217(a)stu.xidian.edu.cn> i2c: i801: fix hardware state machine corruption in error path Ricardo Robaina <rrobaina(a)redhat.com> audit: fix recursive locking deadlock in audit_dupe_exe() Ricardo Robaina <rrobaina(a)redhat.com> audit: use 'unsigned int' instead of 'unsigned' Jeff Layton <jlayton(a)kernel.org> audit: widen ino fields to u64 NeilBrown <neil(a)brown.name> VFS/audit: introduce kern_path_parent() for audit Haoxiang Li <haoxiang_li2024(a)163.com> i2c: davinci: Unregister cpufreq notifier on probe failure Sebastian Alba Vives <sebasjosue84(a)gmail.com> fpga: dfl-afu: validate DMA mapping length in afu_dma_map_region() Nicolin Chen <nicolinc(a)nvidia.com> iommufd: Avoid partial fault group delivery in iommufd_fault_fops_read() Nicolin Chen <nicolinc(a)nvidia.com> iommufd: Break the loop on failure in iommufd_fault_fops_read() Nicolin Chen <nicolinc(a)nvidia.com> iommufd: Reject invalid read count in iommufd_fault_fops_read() SJ Park <sj(a)kernel.org> mm/damon/core: disallow overlapping input ranges for damon_set_regions() SJ Park <sj(a)kernel.org> mm/damon/core: validate ranges in damon_set_regions() Miguel Ojeda <ojeda(a)kernel.org> rust: allow `suspicious_runtime_symbol_definitions` lint for Rust >= 1.98 Eddie Phillips <eddiephillips(a)google.com> gve: fix Rx queue stall on alloc failure Coia Prant <coiaprant(a)gmail.com> net: pcs: xpcs: fix SGMII state reading Yitang Yang <yi1tang.yang(a)gmail.com> io_uring/rw: fix missing ERESTARTSYS conversion in read paths Harry Wentland <harry.wentland(a)amd.com> drm/amd/display: Fix DTB DTO updates breaking live pixel rate sources Eric Biggers <ebiggers(a)kernel.org> fscrypt: Avoid dynamic allocation in fscrypt_get_devices() Namjae Jeon <linkinjeon(a)kernel.org> ksmbd: validate ACE size against SID sub-authorities Namjae Jeon <linkinjeon(a)kernel.org> ksmbd: bound DACL dedup walk to copied ACEs Wentao Guan <guanwentao(a)uniontech.com> ksmbd: restore DACL size on check_add_overflow() to avoid malformed ACL Haofeng Li <lihaofeng(a)kylinos.cn> ksmbd: validate num_subauth when copying ACE in set_ntacl_dacl Youssef Samir <youssef.abdulrahman(a)oss.qualcomm.com> net: qrtr: ns: Raise node count limit to 512 Jiayuan Chen <jiayuan.chen(a)linux.dev> bpf: Fix same-register dst/src OOB read and pointer leak in sock_ops Yang Wang <kevinyang.wang(a)amd.com> drm/amd/pm: fix smu13 power limit range calculation Asad Kamal <asad.kamal(a)amd.com> drm/amdgpu: fix aperture mapping leak Ce Sun <cesun102(a)amd.com> drm/amdgpu: invoke pm_genpd_remove() before freeing genpd Boyuan Zhang <boyuan.zhang(a)amd.com> drm/amdgpu: fix division by zero with invalid uvd dimensions Luca Coelho <luciano.coelho(a)intel.com> drm/dp_mst: Handle torn-down topology gracefully in drm_dp_mst_topology_queue_probe() Boyuan Zhang <boyuan.zhang(a)amd.com> drm/amdgpu/vcn4: avoid rereading IB param length Boyuan Zhang <boyuan.zhang(a)amd.com> drm/amdgpu/vce: fix integer overflow in image size Alex Deucher <alexander.deucher(a)amd.com> drm/amdgpu/sdma4.4.2: replace BUG_ON() with WARN_ON() Alex Deucher <alexander.deucher(a)amd.com> drm/amdgpu/gfx9: replace BUG_ON() with WARN_ON() Alex Deucher <alexander.deucher(a)amd.com> drm/amdgpu/gfx9.4.3: replace BUG_ON() with WARN_ON() Alex Deucher <alexander.deucher(a)amd.com> drm/amdgpu/gfx8: drop unecessary BUG_ON() Alex Deucher <alexander.deucher(a)amd.com> drm/amdgpu/gfx12: replace BUG_ON() with WARN_ON() Alex Deucher <alexander.deucher(a)amd.com> drm/amdgpu/gfx11: replace BUG_ON() with WARN_ON() Alex Deucher <alexander.deucher(a)amd.com> drm/amdgpu/gfx10: replace BUG_ON() with WARN_ON() Yang Wang <kevinyang.wang(a)amd.com> drm/amd/pm: make pp_features read-only when scpm is enabled Yang Wang <kevinyang.wang(a)amd.com> drm/amd/pm: fix amdgpu_pm_info power display units James Raphael Tiovalen <jamestiotio(a)gmail.com> vxlan: mdb: Fix source list corruption on a failed replace Stefano Garzarella <sgarzare(a)redhat.com> vsock/virtio: collapse receive queue under memory pressure Daehyeon Ko <4ncienth(a)gmail.com> tipc: clear sock->sk on the failed-insert path in tipc_sk_create() Yizhou Zhao <zhaoyz24(a)mails.tsinghua.edu.cn> tcp: initialize standalone TCP-AO response padding Justin Lai <justinlai0215(a)realtek.com> rtase: Workaround for TX hang caused by hardware packet parsing Asim Viladi Oglu Manizada <manizada(a)pm.me> pppoe: reload header pointer after dev_hard_header() Kyle Zeng <kylebot(a)openai.com> openvswitch: fix GSO userspace truncation underflow Doruk Tan Ozturk <doruk(a)0sec.ai> mctp: serial: handle zero-length frames to prevent rx buffer overflow Doruk Tan Ozturk <doruk(a)0sec.ai> mac802154: llsec: reject frames shorter than the authentication tag Ibrahim Hashimov <security(a)auditcode.ai> mac802154: hold an interface reference across the scan worker Michael Bommarito <michael.bommarito(a)gmail.com> ila: reload IPv6 header after pskb_may_pull in checksum adjust Sergey Temerkhanov <sergey.temerkhanov(a)intel.com> ice: use READ_ONCE() to access cached PHC time Aleksandr Loktionov <aleksandr.loktionov(a)intel.com> ice: reject out-of-range ptype in ice_parser_profile_init James Montgomery <james_montgomery(a)disroot.org> ksmbd: defer destroy_previous_session() until after NTLM authentication Raphael Zimmer <raphael.zimmer(a)tu-ilmenau.de> rbd: Reset positive result codes to zero in object map update path Masami Hiramatsu (Google) <mhiramat(a)kernel.org> selftests/ftrace: Reset triggers at top level before instance loop Paul Greenwalt <paul.greenwalt(a)intel.com> ice: fix PTP Call Trace during PTP release Jann Horn <jannh(a)google.com> proc: Fix broken error paths for namespace links Fan Wu <fanwu01(a)zju.edu.cn> net: hip04: fix RX buffer leak on build_skb failure Shiming Cheng <shiming.cheng(a)mediatek.com> net: gro: fix double aggregation of flush-marked skbs David Lee <david.lee(a)trailofbits.com> net/x25: fix use-after-free in x25_kill_by_neigh() Manjunath Patil <manjunath.b.patil(a)oracle.com> net/mlx5e: Use sender devcom for MPV master-up Bryam Vargas <hexlabsecurity(a)proton.me> net/iucv: fix use-after-free of a severed iucv_path Hidayath Khan <hidayath(a)linux.ibm.com> net/af_iucv: fix NULL deref in afiucv_hs_callback_syn() Doruk Tan Ozturk <doruk(a)0sec.ai> geneve: require CAP_NET_ADMIN in the device netns for changelink Sungmin Kang <726ksm(a)gmail.com> net: slip: serialize receive against buffer reallocation Doruk Tan Ozturk <doruk(a)0sec.ai> vxlan: require CAP_NET_ADMIN in the device netns for changelink Breno Leitao <leitao(a)debian.org> phonet: pep: fix use-after-free in pep_get_sb() Lu Baolu <baolu.lu(a)linux.intel.com> iommu/vt-d: Disallow SVA if page walk is not coherent Zhang Yi <yi.zhang(a)huawei.com> iomap: fix out-of-bounds bitmap_set() with zero-length range Tengda Wu <wutengda(a)huaweicloud.com> ftrace: Add global mutex to serialize trace_parser access Eric Biggers <ebiggers(a)kernel.org> fscrypt: Add missing superblock check in find_or_insert_direct_key() Amir Goldstein <amir73il(a)gmail.com> fs: preserve ACL_DONT_CACHE state in forget_cached_acl() Christian Brauner <brauner(a)kernel.org> binfmt_elf_fdpic: only honour the first PT_INTERP Chancel Liu <chancel.liu(a)nxp.com> ASoC: fsl_sai: Fix spurious BCLK on resume by clearing BYP Shihuang Liu <shlomojune6(a)gmail.com> amt: fix use-after-free in AMT delayed works Douya Le <ldy3087146292(a)gmail.com> libceph: remove debugfs files before client teardown Douya Le <ldy3087146292(a)gmail.com> libceph: reject zero bucket types in crush_decode Raphael Zimmer <raphael.zimmer(a)tu-ilmenau.de> libceph: Reject monmaps advertising zero monitors Shuangpeng Bai <shuangpeng.kernel(a)gmail.com> libceph: refresh auth->authorizer_buf{,_len} after authorizer update Zhao Zhang <zzhan461(a)ucr.edu> libceph: guard missing CRUSH type name lookup Raphael Zimmer <raphael.zimmer(a)tu-ilmenau.de> libceph: Fix multiplication overflow in decode_new_up_state_weight() Douya Le <ldy3087146292(a)gmail.com> libceph: bound get_version reply decode to front len WenTao Liang <vulab(a)iscas.ac.cn> ceph: fix refcount leak in ceph_readdir() Bryam Vargas <hexlabsecurity(a)proton.me> ceph: fix pre-auth out-of-bounds read on snaptrace in ceph_handle_caps() Max Kellermann <max.kellermann(a)ionos.com> ceph: add owner/capability checks for CEPH_IOC_SET_LAYOUT* Zhiling Zou <roxy520tt(a)gmail.com> sctp: close UDP tunnel sockets during netns teardown Zhiling Zou <roxy520tt(a)gmail.com> sctp: avoid auth_enable sysctl UAF during netns teardown Jun Yang <junvyyang(a)tencent.com> sctp: don't free the ASCONF's own transport in DEL-IP processing Michael Bommarito <michael.bommarito(a)gmail.com> mptcp: only set DATA_FIN when a mapping is present Chenguang Zhao <zhaochenguang(a)kylinos.cn> mptcp: decrement subflows counter on failed passive join Will Deacon <will(a)kernel.org> Revert "arm64: syscall: Ensure saved x0 is kept in-sync with tracer updates" Will Deacon <will(a)kernel.org> arm64: syscall: Ensure saved x0 is kept in-sync with tracer updates Masami Hiramatsu (Google) <mhiramat(a)kernel.org> tracing/probes: Prevent out-of-bounds write in __trace_probe_log_err() Masami Hiramatsu (Google) <mhiramat(a)kernel.org> tracing/probes: Fix potential underflow in LEN_OR_ZERO macro Masami Hiramatsu (Google) <mhiramat(a)kernel.org> tracing/probes: Avoid temporary buffer truncation in trace_probe_match_command_args() Masami Hiramatsu (Google) <mhiramat(a)kernel.org> tracing/eprobe: Fix exact system name matching in eprobe_dyn_event_match() deepakraog <gaikwad.dcg(a)gmail.com> tracing: Fix resource leak on mmiotrace trace_pipe close Steven Rostedt <rostedt(a)goodmis.org> tracing: Fix mmiotrace possible NULL dereferencing of hiter->dev Xu Rao <raoxu(a)uniontech.com> misc: nsm: pin the module while the device is open Runyu Xiao <runyu.xiao(a)seu.edu.cn> misc: nsm: only unlock nsm_dev on post-lock error paths Guangshuo Li <lgs201920130244(a)gmail.com> intel_th: fix MSC output device reference leak Alexander Usyskin <alexander.usyskin(a)intel.com> mei: bus: access mei_device under device_lock on cleanup Jiangshan Yi <yijiangshan(a)kylinos.cn> serial: 8250_mid: Fix NULL function pointer dereference on DNV/ICX-D/SNR platforms Hugo Villeneuve <hvilleneuve(a)dimonoff.com> serial: sc16is7xx: implement gpio get_direction() callback Ben Hutchings <benh(a)debian.org> uio_hv_generic: Bind to FCopy device by default Ian Abbott <abbotti(a)mev.co.uk> comedi: comedi_parport: deal with premature interrupt Nathan Chancellor <nathan(a)kernel.org> x86/boot/compressed: Disable jump tables Tze Yee Ng <tze.yee.ng(a)altera.com> firmware: stratix10-svc: fix memory leaks and list corruption bugs Xu Rao <raoxu(a)uniontech.com> cdrom: fix stack out-of-bounds read in CDROMVOLCTRL Rong Bao <rong.bao(a)csmantle.top> LoongArch: Retrieve CPU package ID from PPTT when available Kanglong Wang <wangkanglong(a)loongson.cn> LoongArch: Move jump_label_init() before parse_early_param() Haoran Jiang <jianghaoran(a)kylinos.cn> LoongArch: Fix oops during single-step debugging Miguel Ojeda <ojeda(a)kernel.org> objtool/rust: add one more `noreturn` Rust function for Rust 1.99.0 Alexandre Courbot <acourbot(a)nvidia.com> rust: allow `clippy::unwrap_or_default` globally Zixing Liu <liushuyu(a)aosc.io> platform/loongarch: laptop: Explicitly reset bl_powered state when suspend Christian Brauner <brauner(a)kernel.org> binfmt_misc: set have_execfd only once the interpreter is opened Christian Brauner <brauner(a)kernel.org> exec: fix unsigned loop counter wrap in transfer_args_to_stack() Chengfeng Ye <nicoyip.dev(a)gmail.com> Bluetooth: RFCOMM: Fix session UAF in set_termios Chengfeng Ye <nicoyip.dev(a)gmail.com> Bluetooth: hci_sync: Protect UUID list traversal MinJea Kim <qndkdrnl(a)gmail.com> staging: rtl8723bs: fix inverted HT40 secondary channel offset Moksh Panicker <mokshpanicker.7(a)gmail.com> staging: rtl8723bs: fix OOB reads in rtw_get_wps_ie() Fan Wu <fanwu01(a)zju.edu.cn> wifi: brcmfmac: make release_scratchbuffers idempotent Devin Wittmayer <lucid_duck(a)justthetip.ca> wifi: mt76: mt7925: drop TXRX_NOTIFY on non-mmio buses Devin Wittmayer <lucid_duck(a)justthetip.ca> wifi: mt76: mt7921: drop TXRX_NOTIFY on non-mmio buses Devin Wittmayer <lucid_duck(a)justthetip.ca> wifi: mt76: mt7615: drop TXRX_NOTIFY on non-mmio buses Huihui Huang <hhhuang(a)smu.edu.sg> wifi: wilc1000: validate assoc response length before subtracting header Doruk Tan Ozturk <doruk(a)0sec.ai> wifi: mwifiex: fix NULL dereference when the AP has HT-cap but no HT-oper Tristan Madani <tristan(a)talencesecurity.com> wifi: ath6kl: fix OOB access from firmware ADDBA window size Norbert Szetei <norbert(a)doyensec.com> ALSA: timer: don't re-enter an instance callback that is still running Norbert Szetei <norbert(a)doyensec.com> ALSA: timer: drain a slave's callback before its master detaches it Norbert Szetei <norbert(a)doyensec.com> ALSA: seq: close a re-opened queue timer in the destructor Johan Hovold <johan(a)kernel.org> media: vpif_capture: fix OF node reference imbalance Guangshuo Li <lgs201920130244(a)gmail.com> media: vivid: fix cleanup bugs in vivid_init() Hans Verkuil <hverkuil+cisco(a)kernel.org> media: vivid: check for vb2_is_busy() when toggling caps Hans Verkuil <hverkuil+cisco(a)kernel.org> media: vivid: add vivid_update_reduced_fps() Guangshuo Li <lgs201920130244(a)gmail.com> media: vimc: fix reference leak on failed device registration Guangshuo Li <lgs201920130244(a)gmail.com> media: vidtv: fix reference leak on failed device registration Zile Xiong <xiongzile99(a)gmail.com> media: vb2: use ssize_t for vb2_read/vb2_write Sakari Ailus <sakari.ailus(a)linux.intel.com> media: v4l2-subdev: Fail {enable,disable}_streams and s_streaming nicely Mirela Rabulea <mirela.rabulea(a)nxp.com> media: v4l2-fwnode: Fix subdev owner overwritten in v4l2_async_register_subdev_sensor() Pengpeng Hou <pengpeng(a)iscas.ac.cn> media: v4l2-ctrls: validate HEVC active reference counts Sergey Shtylyov <s.shtylyov(a)auroraos.dev> media: v4l2-ctrls-request: add NULL check in v4l2_ctrl_request_complete() Myeonghun Pak <mhun512(a)gmail.com> media: ti: vpe: unwind v4l2 device registration on probe error Hungyu Lin <dennylin0707(a)gmail.com> media: tegra-video: vi: fix invalid u32 return value in format lookup Valery Borovsky <vebohr(a)gmail.com> media: sun4i-csi: Return queued buffers on start_streaming() failure Myeonghun Pak <mhun512(a)gmail.com> media: stm32: dcmi: unregister notifier on probe failure Ma Ke <make24(a)iscas.ac.cn> media: saa7134: Fix a possible memory leak in saa7134_video_init1 Valery Borovsky <vebohr(a)gmail.com> media: rtl2832_sdr: Return queued buffers on start_streaming() failure Deepanshu Kartikey <kartikey406(a)gmail.com> media: rtl2832: fix use-after-free in rtl2832_remove() Myeonghun Pak <mhun512(a)gmail.com> media: radio-si476x: Unregister v4l2_device on probe failure Bryan O'Donoghue <bryan.odonoghue(a)linaro.org> media: qcom: camss: Fix RDI streaming for CSID GEN2 Valery Borovsky <vebohr(a)gmail.com> media: pwc: Return queued buffers on start_streaming() failure Valery Borovsky <vebohr(a)gmail.com> media: pwc: Drain fill_buf on start_streaming() failure Krzysztof Kozlowski <krzysztof.kozlowski(a)oss.qualcomm.com> media: pci: dm1105: Free allocated workqueue Guoniu Zhou <guoniu.zhou(a)nxp.com> media: nxp: imx8-isi: Fix scale factor calculation for hardware rounding Guoniu Zhou <guoniu.zhou(a)nxp.com> media: nxp: imx8-isi: Fix potential out-of-bounds issues Xiaolei Wang <xiaolei.wang(a)windriver.com> media: nxp: imx8-isi: Fix missing v4l2_subdev_cleanup() in pipe init error path Xiaolei Wang <xiaolei.wang(a)windriver.com> media: nxp: imx8-isi: Clean up already-initialized pipes on probe failure Xiaolei Wang <xiaolei.wang(a)windriver.com> media: nxp: imx8-isi: Add missing v4l2_subdev_cleanup() in crossbar and pipe David Carlier <devnexen(a)gmail.com> media: nuvoton: npcm-video: fix memory leaks in probe and remove David Carlier <devnexen(a)gmail.com> media: nuvoton: npcm-video: fix error handling in npcm_video_init() Valery Borovsky <vebohr(a)gmail.com> media: msi2500: Return queued buffers on start_streaming() failure Anand Moon <linux.amoon(a)gmail.com> media: meson: vdec: Fix memory leak in error path of vdec_open Guangshuo Li <lgs201920130244(a)gmail.com> media: marvell-cam: fix missing pci_disable_device() on remove Marco Nenciarini <mnencia(a)kcore.it> media: intel/ipu6: Improve DWC PHY HSFREQRANGE band selection for overlapping ranges Martin Hecht <mhecht73(a)gmail.com> media: i2c: alvium: fix critical pointer access in alvium_ctrl_init Wang Jun <1742789905(a)qq.com> media: cx23885: add ioremap return check and cleanup Johan Hovold <johan(a)kernel.org> media: cx231xx: fix devres lifetime Brandon Brnich <b-brnich(a)ti.com> media: chips-media: wave5: Move src_buf Removal to finish_encode Pengpeng Hou <pengpeng(a)iscas.ac.cn> media: cedrus: skip invalid H.264 reference list entries Samuel Holland <samuel(a)sholland.org> media: cedrus: Fix missing cleanup in error path Myeonghun Pak <mhun512(a)gmail.com> media: cedrus: clean up media device on probe failure Myeonghun Pak <mhun512(a)gmail.com> media: cec: seco: unregister adapter on IR probe failure David Carlier <devnexen(a)gmail.com> media: aspeed: fix missing of_reserved_mem_device_release() on probe failure Valery Borovsky <vebohr(a)gmail.com> media: airspy: Return queued buffers on start_streaming() failure Linmao Li <lilinmao(a)kylinos.cn> drm/vc4: Prevent shader BO mappings from becoming writable Ian Forbes <ian.forbes(a)broadcom.com> drm/vmwgfx: Validate vmw_surface_metadata::array_size Zhu Lingshan <lingshan.zhu(a)amd.com> drm/amdgpu: fix bo->pin leaking in amdgpu_bo_create_reserved Mario Limonciello <mario.limonciello(a)amd.com> drm/amdgpu: Disable PCIe dynamic speed switching on Ryzen Pinnacle Ridge Andriy Korud <a.korud(a)gmail.com> drm/amd/display: dce100: skip non-DP stream encoders for DP MST WenTao Liang <vulab(a)iscas.ac.cn> drm/amd/display: set new_stream to NULL after release Timur Kristóf <timur.kristof(a)gmail.com> drm/amd/pm/ci: Don't disable MCLK DPM on Bonaire 0x6658 (R7 260X) Mario Limonciello <mario.limonciello(a)amd.com> drm/amdgpu: Fix VFCT bus number matching with soft filter Osama Abdelkader <osama.abdelkader(a)gmail.com> drm/panthor: return error on truncated firmware Alex Deucher <alexander.deucher(a)amd.com> drm/gfx10: Program DB_RING_CONTROL Yang Wang <kevinyang.wang(a)amd.com> drm/amd/pm: fix smu14 power limit range calculation Joonas Lahtinen <joonas.lahtinen(a)linux.intel.com> drm/i915/gem: Fix NULL deref in I915_CONTEXT_PARAM_SSEU Joonas Lahtinen <joonas.lahtinen(a)linux.intel.com> drm/i915/gem: Do not leak siblings[] on proto context error Shahyan Soltani <shahyan.soltani(a)amd.com> drm/amdgpu: fix lifetime issue of amdgpu_vm_get_task_info_pasid() Jani Nikula <jani.nikula(a)intel.com> drm/i915/bios: range check LFP Data Block panel_type2 Joonas Lahtinen <joonas.lahtinen(a)linux.intel.com> drm/i915: Return NULL on error in active_instance Alex Deucher <alexander.deucher(a)amd.com> drm/amdgpu/sdma5.0: replace BUG_ON() with WARN_ON() Alex Deucher <alexander.deucher(a)amd.com> drm/amdgpu/sdma5.2: replace BUG_ON() with WARN_ON() Alex Deucher <alexander.deucher(a)amd.com> drm/amdgpu/sdma6.0: replace BUG_ON() with WARN_ON() Alex Deucher <alexander.deucher(a)amd.com> drm/amdgpu/sdma7.0: replace BUG_ON() with WARN_ON() Bryam Vargas <hexlabsecurity(a)proton.me> drm/virtio: bound EDID block reads to the response buffer WenTao Liang <vulab(a)iscas.ac.cn> drm/amd/display: detect_link_and_local_sink: DP alt mode timeout path leaks prev_sink reference Thomas Zimmermann <tzimmermann(a)suse.de> drm/amd/display: Handle struct drm_plane_state.ignore_damage_clips Yongqiang Sun <Yongqiang.Sun(a)amd.com> drm/amdkfd: fix 32-bit overflow in CWSR total size calculation David Francis <David.Francis(a)amd.com> drm/amdkfd: Check bounds in allocate_event_notification_slot David Francis <David.Francis(a)amd.com> drm/amdkfd: Use kvcalloc to allocate arrays Icenowy Zheng <zhengxingda(a)iscas.ac.cn> drm/imagination: acquire vm_ctx->lock before mapping memory to GPU VM Luigi Santivetti <luigi.santivetti(a)imgtec.com> drm/imagination: fix error checking of pvr_vm_context_lookup() Shuvam Pandey <shuvampandey1(a)gmail.com> drm/imagination: Fix user array stride in pvr_set_uobj_array() Brajesh Gupta <brajesh.gupta(a)imgtec.com> drm/imagination: Fix double call to drm_sched_entity_fini() Matthew Brost <matthew.brost(a)intel.com> drm/xe: Fix PTE index in xe_vm_populate_pgtable() for chunked binds Pavel Ondračka <pavel.ondracka(a)gmail.com> drm/radeon: fix r100_copy_blit for large BOs Wentao Liang <vulab(a)iscas.ac.cn> drm/nouveau/acr: fix missing nvkm_done() in error path of nvkm_acr_oneinit() Joonas Lahtinen <joonas.lahtinen(a)linux.intel.com> drm/i915/gem: Add missing nospec on parallel submit slot Jani Nikula <jani.nikula(a)intel.com> drm/displayid: fix Tiled Display Topology ID size Junrui Luo <moonafterrain(a)outlook.com> drm/nouveau: fix reversed error cleanup order in ucopy functions Mario Limonciello <mario.limonciello(a)amd.com> drm/amdgpu: validate CP_GFX_SHADOW chunk size in CS pass1 Timur Kristóf <timur.kristof(a)gmail.com> drm/amdgpu: Fix amdgpu_bo_move() when old_mem and new_mem are both GTT Timur Kristóf <timur.kristof(a)gmail.com> drm/amdgpu/uvd: Place VCPU BO only in VRAM for UVD 4.x and older Timur Kristóf <timur.kristof(a)gmail.com> drm/amdgpu/uvd: Fix forcing MSG, FB BOs into VCPU segment when it isn't at 0 (v2) Ashutosh Desai <ashutoshdesai993(a)gmail.com> drm/dp/mst: fix OOB reads on 2-byte fields in sideband reply parsers Alessio Belle <alessio.belle(a)imgtec.com> drm/imagination: Fit paired fragment job in the correct CCCB Ashutosh Desai <ashutoshdesai993(a)gmail.com> drm/dp/mst: fix buffer overflows in sideband chunk accumulation Ashutosh Desai <ashutoshdesai993(a)gmail.com> drm/dp/mst: fix OOB reads in remote DPCD/I2C sideband reply parsers Vitor Soares <vitor.soares(a)toradex.com> drm/bridge: cdns-dsi: Replace deprecated UNIVERSAL_DEV_PM_OPS() Alessio Belle <alessio.belle(a)imgtec.com> drm/imagination: Count paired job fence as dependency in prepare_job() Sergey Shtylyov <s.shtylyov(a)auroraos.dev> drm/rockchip: cdn-dp: add missing check in cdn_dp_config_video() Biju Das <biju.das.jz(a)bp.renesas.com> drm: renesas: rzg2l_mipi_dsi: Increase reset deassertion delay Chengfeng Ye <nicoyip.dev(a)gmail.com> bpf, sockmap: Fix cork use-after-free in tcp_bpf_sendmsg() Lorenzo Bianconi <lorenzo(a)kernel.org> net: airoha: fix ETS channel derivation in airoha_tc_setup_qdisc_ets() Cen Zhang (Microsoft) <blbllhy(a)gmail.com> rds: tcp: unregister sysctl before tearing down listen socket Marcin Szycik <marcin.szycik(a)linux.intel.com> ice: fix LAG recipe to profile association Vincent Chen <vincent.chen(a)sifive.com> ice: allow creating VFs when !CONFIG_ICE_SWITCHDEV Li RongQing <lirongqing(a)baidu.com> net: ipv6: fix dif and sdif mismatch in raw6_icmp_error Hariprasad Kelam <hkelam(a)marvell.com> octeontx2-pf: tc: fix egress ratelimiting Alexei Lazar <alazar(a)nvidia.com> net/mlx5e: Reject unsupported CB Shaper TSA in ETS validation Alexei Lazar <alazar(a)nvidia.com> net/mlx5e: Report zero bandwidth for non-ETS traffic classes Yael Chemla <ychemla(a)nvidia.com> net/mlx5: E-Switch, fix zero num_dest in prio_tag egress vlan rule Gal Pressman <gal(a)nvidia.com> net/mlx5: Fix MCIA register buffer overflow on 32 dword reads Gal Pressman <gal(a)nvidia.com> net/mlx5: Refactor EEPROM query error handling to return status separately Gal Pressman <gal(a)nvidia.com> net/mlx5: Remove newline at the end of a netlink error message Jiri Pirko <jiri(a)resnulli.us> net/mlx5: DPLL, Add clock quality level op implementation Jiri Pirko <jiri(a)resnulli.us> dpll: add clock quality level attribute and op Aldo Ariel Panzardo <qwe.aldo(a)gmail.com> net: qrtr: restrict socket creation to the initial network namespace Chenguang Zhao <zhaochenguang(a)kylinos.cn> hinic: remove unused ethtool RSS user configuration buffers Eric Dumazet <edumazet(a)google.com> ppp: annotate data races in ppp_generic Qingfang Deng <dqfext(a)gmail.com> ppp: enable TX scatter-gather Qingfang Deng <dqfext(a)gmail.com> ppp: convert to percpu netstats Qingfang Deng <dqfext(a)gmail.com> ppp: use IFF_NO_QUEUE in virtual interfaces Eric Dumazet <edumazet(a)google.com> ipv4: icmp: fill flow parameters in icmp_route_lookup decoy lookup Suman Ghosh <sumang(a)marvell.com> octeontx2-vf: set TC flower flag on MCAM entry allocation Yun Zhou <yun.zhou(a)windriver.com> net: gre: fix lltx regression for GRE tunnels with SEQ/CSUM vadik likholetov <vadikas(a)gmail.com> net: stmmac: enable the MAC on link up for all supported speeds Nazim Amirul <muhammad.nazim.amirul.nazle.asmade(a)altera.com> net: stmmac: reset residual action in L3L4 filters on delete Nazim Amirul <muhammad.nazim.amirul.nazle.asmade(a)altera.com> net: stmmac: fix l3l4 filter rejecting unsupported offload requests José Expósito <jose.exposito(a)redhat.com> drm/tests: shmem: Set DMA mask to 64-bit in drm_gem_shmem Cen Zhang (Microsoft) <blbllhy(a)gmail.com> tipc: fix u16 MTU truncation in media and bearer MTU validation Zhang Yi <yi.zhang(a)huawei.com> iomap: correct the range of a partial dirty clear Harshaka Narayana <harshaka.narayana(a)broadcom.com> vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets Qing Luo <luoqing(a)kylinos.cn> sctp: auth: verify auth requirement when auth_chunk is NULL Michael Walle <mwalle(a)kernel.org> net: dpaa: fix mode setting Eric Dumazet <edumazet(a)google.com> net: hsr: fix memory leak on slave unregistration by removing synced VLANs Nikolay Aleksandrov <razor(a)blackwall.org> net: bridge: vlan: fix vlan range dumps starting with pvid Michael Bommarito <michael.bommarito(a)gmail.com> amt: make the head writable before rewriting the L2 header Michael Bommarito <michael.bommarito(a)gmail.com> amt: re-read skb header pointers after every pull Yichong Chen <chenyichong(a)uniontech.com> ovl: fix trusted xattr escape prefix matching Shelley Yang <shelley.yang(a)infineon.com> wifi: brcmfmac: fix 802.1X-SHA256 call trace warning Lorenzo Bianconi <lorenzo(a)kernel.org> wifi: mt76: mt7996: fix possible NULL-pointer deref in mt7996_mcu_sta_bfer_eht() Sean Wang <sean.wang(a)mediatek.com> wifi: mt76: mt7925: fix crash in reset link replay Lorenzo Bianconi <lorenzo(a)kernel.org> wifi: mt76: mt7996: check pointer returned by mt76_connac_get_he_phy_cap() Lorenzo Bianconi <lorenzo(a)kernel.org> wifi: mt76: mt7925: fix possible NULL-pointer deref in mt7925_mcu_bss_he_tlv() Lorenzo Bianconi <lorenzo(a)kernel.org> wifi: mt76: connac: fix possible NULL-pointer deref in mt76_connac_mcu_uni_bss_he_tlv() Ruoyu Wang <ruoyuw560(a)gmail.com> wifi: mt76: mt7915: guard HE capability lookups Guangshuo Li <lgs201920130244(a)gmail.com> wifi: mt76: mt7925: guard link STA in decap offload Helen Koike <koike(a)igalia.com> tipc: fix infinite loop in __tipc_nl_compat_dumpit Xiang Mei (Microsoft) <xmei5(a)asu.edu> nexthop: initialize extack in nh_res_bucket_migrate() Xiang Mei (Microsoft) <xmei5(a)asu.edu> gtp: check skb_pull_data() return in gtp1u_send_echo_resp() Matthieu Baerts (NGI0) <matttbe(a)kernel.org> selftests: openvswitch: add config file Matthieu Baerts (NGI0) <matttbe(a)kernel.org> selftests: af_unix: add USER_NS config Rishikesh Jethwani <rjethwani(a)purestorage.com> tls: device: push pending open record on splice EOF Myeonghun Pak <mhun512(a)gmail.com> net: mctp i3c: clean up notifier and buses if driver register fails Cen Zhang (Microsoft) <blbllhy(a)gmail.com> sctp: validate stream count in sctp_process_strreset_inreq() Nikhil P. Rao <nikhil.rao(a)amd.com> pds_core: check for workqueue allocation failure Nikhil P. Rao <nikhil.rao(a)amd.com> pds_core: fix auxiliary device add/del races Nikhil P. Rao <nikhil.rao(a)amd.com> pds_core: order completion reads after the ownership check Nikhil P. Rao <nikhil.rao(a)amd.com> pds_core: yield the CPU while waiting for the adminq to drain Nikhil P. Rao <nikhil.rao(a)amd.com> pds_core: fix use-after-free on workqueue during remove Nikhil P. Rao <nikhil.rao(a)amd.com> pds_core: fix deadlock between reset thread and remove HanQuan <eilaimemedsnaimel(a)gmail.com> sctp: fix auth_chunk_list capacity check in sctp_auth_ep_add_chunkid Chenguang Zhao <zhaochenguang(a)kylinos.cn> net: txgbe: fix FDIR filter leak on remove Prashanth Kumar KR <PrashanthKumar.K.R(a)amd.com> amd-xgbe: fix MAC_AUTO_SW handling in CL37 AN Nikhil P. Rao <nikhil.rao(a)amd.com> pds_core: reject component parameter in legacy firmware update Andrew Pope <andrew.pope(a)morsemicro.com> wifi: mac80211: recalculate TIM when a station enters power save Li RongQing <lirongqing(a)baidu.com> iommu/intel: Fix out-of-bounds memset in dmar_latency_disable() Pengpeng Hou <pengpeng(a)iscas.ac.cn> iommu/amd: Bound the early ACPI HID map HE WEI (ギカク) <skyexpoc(a)gmail.com> wifi: mwifiex: bound uAP association event IEs to the event buffer Ruoyu Wang <ruoyuw560(a)gmail.com> wan: wanxl: Only reset hardware after BAR mapping Ruoyu Wang <ruoyuw560(a)gmail.com> nfp: Check resource mutex allocation Xiang Mei <xmei5(a)asu.edu> wifi: mac80211: tear down new links on vif update error path Guanghui Feng <guanghuifeng(a)linux.alibaba.com> iommu/amd: Wait for completion instead of returning early in iommu_completion_wait() Guangshuo Li <lgs201920130244(a)gmail.com> dpaa2-eth: put MAC endpoint device on disconnect Guangshuo Li <lgs201920130244(a)gmail.com> dpaa2-switch: put MAC endpoint device on disconnect Zhixing Chen <running910(a)gmail.com> gtp: parse extension headers before reading inner protocol Aldo Ariel Panzardo <qwe.aldo(a)gmail.com> rds: drop incoming messages that cross network namespace boundaries Zhaolong Zhang <zhangzl68(a)chinatelecom.cn> bonding: fix devconf_all NULL dereference when IPv6 is disabled David Lee <david.lee(a)trailofbits.com> net/packet: avoid fanout hook re-registration after unregister Danielle Ratson <danieller(a)nvidia.com> netlink: specs: rt-link: convert bridge port flag attributes to u8 Pengpeng Hou <pengpeng(a)iscas.ac.cn> Bluetooth: btusb: validate Realtek vendor event length Daniel Golle <daniel(a)makrotopia.org> regulator: mt6358: use regmap helper to read fixed LDO calibration Pengpeng Hou <pengpeng(a)iscas.ac.cn> hwmon: occ: validate poll response sensor blocks Yichong Chen <chenyichong(a)uniontech.com> smb: client: validate DFS referral PathConsumed Eugene Shalygin <eugene.shalygin(a)gmail.com> hwmon: (asus-ec-sensors) add missed handle for ENOMEM Eugene Shalygin <eugene.shalygin(a)gmail.com> hwmon: (asus-ec-sensors) fix EC read intervals Eugene Shalygin <eugene.shalygin(a)gmail.com> hwmon: (asus-ec-sensors) fix looping over banks while reading from EC Mostafa Saleh <smostafa(a)google.com> drivers/virt: pkvm: Fix end calculation in mmio_guard_ioremap_hook() Diego Fernando Mancera Gomez <diegomancera.dev(a)gmail.com> usb: atm: ueagle-atm: reject descriptors that confuse probe and disconnect Shahar Tzarfati <shahar.tzarfati(a)intel.com> wifi: iwlwifi: mvm: fix read in wake packet notification handler Pagadala Yesu Anjaneyulu <pagadala.yesu.anjaneyulu(a)intel.com> wifi: iwlwifi: mvm: validate SAR GEO response payload size Richard Fitzgerald <rf(a)opensource.cirrus.com> ASoC: cs35l56: Use complete_all() to signal init_completion Richard Fitzgerald <rf(a)opensource.cirrus.com> ASoC: cs35l56: Fix potential probe() deadlock Richard Fitzgerald <rf(a)opensource.cirrus.com> ASoC: cs35l56: Don't use devres to unregister component Shengjiu Wang <shengjiu.wang(a)nxp.com> ASoC: bt-sco: fix duplicate DAPM widget names for wideband DAI Guangshuo Li <lgs201920130244(a)gmail.com> ALSA: hda: cs35l41: validate and free ACPI mute object Denis Arefev <arefev(a)swemel.ru> ALSA: hda: cs35l41: Fix NULL pointer dereference in cs35l41_get_acpi_mute_state() Pengpeng Hou <pengpeng(a)iscas.ac.cn> ASoC: tas2781: bound firmware description string parsing Guanghui Yang <3497809730(a)qq.com> btrfs: free mapping node on duplicate reloc root insert Leo Martins <loemra.dev(a)gmail.com> btrfs: don't propagate EXTENT_FLAG_LOGGING to split extent maps You-Kai Zheng <ykzheng(a)synology.com> btrfs: declare btrfs_ioctl_search_args_v2::buf as __u8 Tristan Madani <tristan(a)talencesecurity.com> wifi: carl9170: fix buffer overflow in rx_stream failover path Tristan Madani <tristan(a)talencesecurity.com> wifi: carl9170: fix OOB read from off-by-two in TX status handler Tristan Madani <tristan(a)talencesecurity.com> wifi: carl9170: bound memcpy length in cmd callback to prevent OOB read Tristan Madani <tristan(a)talencesecurity.com> wifi: ath6kl: fix OOB read from firmware IE lengths in connect event Tristan Madani <tristan(a)talencesecurity.com> wifi: ath6kl: fix OOB read from firmware num_msg in TX complete handler Ruoyu Wang <ruoyuw560(a)gmail.com> firewire: net: Fix fragmented datagram reassembly Manivannan Sadhasivam <manivannan.sadhasivam(a)oss.qualcomm.com> wifi: ath12k: Flush the posted write after writing to PCIE_SOC_GLOBAL_RESET Manivannan Sadhasivam <manivannan.sadhasivam(a)oss.qualcomm.com> wifi: ath11k: Flush the posted write after writing to PCIE_SOC_GLOBAL_RESET Dmitry Morgun <d.morgun(a)ispras.ru> wifi: ath11k: fix potential buffer underflow in ath11k_hal_rx_msdu_list_get() Tzung-Bi Shih <tzungbi(a)kernel.org> watchdog: pretimeout: Fix UAF in watchdog_unregister_governor() Guenter Roeck <linux(a)roeck-us.net> hwmon: (nzxt-kraken3) Stop device IO before calling hid_hw_stop Guenter Roeck <linux(a)roeck-us.net> hwmon: (nzxt-smart2) Stop device IO before calling hid_hw_stop Guenter Roeck <linux(a)roeck-us.net> hwmon: (gigabyte_waterforce) Stop device IO before calling hid_hw_stop Guenter Roeck <linux(a)roeck-us.net> hwmon: (corsair-cpro) Stop device IO before calling hid_hw_stop Edward Adam Davis <eadavis(a)qq.com> hwmon: (corsair-psu) Stop device IO before calling hid_hw_stop Gaole Zhang <gaole.zhang(a)oss.qualcomm.com> wifi: ath11k: fix NULL pointer dereference in ath11k_hal_srng_access_begin Cheng Yongkang <teel4res(a)gmail.com> wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request Xincheng Zhang <zhangxincheng(a)ultrarisc.com> usb: xhci-pci: Limit VIA VL805 DMA addressing to 36 bits Xie Bo <xb(a)ultrarisc.com> RISC-V: KVM: Serialize virtual interrupt pending state updates Sasha Levin <sashal(a)kernel.org> Revert "drm/amd/display: Add missing kdoc for ALLM parameters" Doruk Tan Ozturk <doruk(a)0sec.ai> crypto: rsa-pkcs1pad: Don't WARN on an empty digest Chukun Pan <amadeus(a)jmu.edu.cn> USB: serial: option: add TDTECH MT5710-CN Johan Hovold <johan(a)kernel.org> USB: serial: keyspan_pda: fix data loss on receive throttling Sunho Park <shpark061104(a)gmail.com> USB: serial: io_edgeport: cap received transmit credits Tim Pambor <timpambor(a)gmail.com> USB: serial: ftdi_sio: add support for E+H FXA291 Muhammad Bilal <meatuni001(a)gmail.com> usb: gadget: uvc: clamp SEND_RESPONSE length to the response buffer Fan Wu <fanwu01(a)zju.edu.cn> usb: gadget: udc: bdc: free IRQ and drain func_wake_notify before teardown Sonali Pradhan <sonalipradhan(a)google.com> usb: gadget: f_ncm: validate datagram bounds in ncm_unwrap_ntb() Johan Hovold <johan(a)kernel.org> USB: gadget: fsl-udc: fix device name leak on probe failure Johan Hovold <johan(a)kernel.org> USB: gadget: snps-udc: fix device name leak on probe failure Melbin K Mathew <mlbnkm1(a)gmail.com> usb: gadget: printer: fix infinite loop in printer_read() Fan Wu <fanwu01(a)zju.edu.cn> usb: gadget: f_midi: cancel pending IN work before freeing the midi object Jinchao Wang <wangjinchao600(a)gmail.com> usb: gadget: dummy_hcd: prevent fifo_req reuse during giveback Xu Yang <xu.yang_2(a)nxp.com> usb: chipidea: fix usage_count leak when autosuspend_delay is negative Huang Wei <huangwei(a)kylinos.cn> USB: storage: add NO_ATA_1X quirk for Longmai USB Key Chia-Lin Kao (AceLan) <acelan.kao(a)canonical.com> usb: core: port: Deattach Type-C connector on component unbind Huihui Huang <hhhuang(a)smu.edu.sg> wifi: at76c50x-usb: avoid length underflow in at76_guess_freq() Griffin Kroah-Hartman <griffin(a)kroah.com> usb: core: sysfs: add lock to bos_descriptors_read() Weiming Shi <bestswngs(a)gmail.com> mpls: fix NULL deref in mpls_valid_fib_dump_req() on CONFIG_INET=n Xin Long <lucien.xin(a)gmail.com> sctp: fix auth_hmacs array size in struct sctp_cookie Jamal Hadi Salim <jhs(a)mojatatu.com> net/sched: act_tunnel_key: Defer dst_release to RCU callback Emre Cecanpunar <emreleno(a)gmail.com> drm/i915/selftests: Fix GT PM sort comparators Xiang Mei (Microsoft) <xmei5(a)asu.edu> ksmbd: validate compound request size before reading StructureSize2 Qihang <q.h.hack.winter(a)gmail.com> ksmbd: pin conn during async oplock break notification ZhangGuoDong <zhangguodong(a)kylinos.cn> smb: move some duplicate definitions to common/cifsglob.h Daniele Ceraolo Spurio <daniele.ceraolospurio(a)intel.com> drm/xe/wopcm: fix WOPCM size for LNL+ Shuhao Fu <sfual(a)cse.ust.hk> can: j1939: fix lockless local-destination check Mark Harris <mark.hsj(a)gmail.com> riscv: hwprobe: Avoid uninitialized read in hwprobe_get_cpus() Vasily Gorbik <gor(a)linux.ibm.com> s390/checksum: Fix csum_partial() without vector facility Michal Luczaj <mhal(a)rbox.co> bpf, sockmap: Reject unhashed UDP sockets on sockmap update Shrikanth Hegde <sshegde(a)linux.ibm.com> powerpc/vtime: Initialize starttime at boot for native accounting Frederic Weisbecker <frederic(a)kernel.org> powerpc/time: Prepare to stop elapsing in dynticks-idle Rosen Penev <rosenp(a)gmail.com> powerpc/85xx: Add fsl,ifc to common device ids Pengpeng Hou <pengpeng(a)iscas.ac.cn> drm/i915/gt: use correct selftest config symbol Huiwen He <hehuiwen(a)kylinos.cn> smb/client: handle overlapping allocated ranges in fallocate Ruoyu Wang <ruoyuw560(a)gmail.com> Bluetooth: hci_qca: Clear memdump state on invalid dump size Pauli Virtanen <pav(a)iki.fi> Bluetooth: mgmt: hold reference for hci_conn in mgmt_pending_cmds Pauli Virtanen <pav(a)iki.fi> Bluetooth: mgmt: fix locking in unpair_device/disconnect_sync Cen Zhang <zzzccc427(a)gmail.com> Bluetooth: MGMT: revalidate LOAD_CONN_PARAM queued update Xiang Mei <xmei5(a)asu.edu> Bluetooth: qca: fix NVM tag length underflow in TLV parser Takashi Iwai <tiwai(a)suse.de> ALSA: usb-audio: Skip DSD quirk for Musical Fidelity M6s DAC Karol Wachowski <karol.wachowski(a)linux.intel.com> accel/ivpu: Fix wrong register read in LNL failure diagnostics Rosen Penev <rosenp(a)gmail.com> ata: sata_dwc_460ex: fix infinite loop in NCQ tag completion bit-scanning Rosen Penev <rosenp(a)gmail.com> ata: sata_dwc_460ex: fix clear_interrupt_bit() clearing all pending interrupts Rosen Penev <rosenp(a)gmail.com> ata: sata_dwc_460ex: use platform_get_irq() Rosen Penev <rosenp(a)gmail.com> ata: sata_dwc_460ex: enable SATA interrupts only after IRQ handler is registered David Jeffery <djeffery(a)redhat.com> scsi: core: wake eh reliably when using scsi_schedule_eh Robert Mader <robert.mader(a)collabora.com> udmabuf: Ensure to perform cache synchronisation in begin_cpu_udmabuf() Bryam Vargas <hexlabsecurity(a)proton.me> net/iucv: take a reference on the socket found in afiucv_hs_rcv() Weiming Shi <bestswngs(a)gmail.com> ipv4: fib: free fib_alias with kfree_rcu() on insert error path Norbert Szetei <norbert(a)doyensec.com> ppp: defer channel free to an RCU grace period to fix pppol2tp RX UAF Rafael J. Wysocki <rafael.j.wysocki(a)intel.com> cpufreq: Make cpufreq_update_pressure() fall back to cpuinfo.max_freq Pushpendra Singh <pushpendra.singh(a)oss.qualcomm.com> firmware: arm_scmi: Rate-limit queue-full warnings in IRQ context Uday Khare <udaykhare77(a)gmail.com> ASoC: tas2562: fix deprecated 'shut-down' GPIO always cleared after lookup Charles Keepax <ckeepax(a)opensource.cirrus.com> ASoC: cs42l43: Correct report for forced microphone jack Vijendar Mukunda <Vijendar.Mukunda(a)amd.com> ASoC: amd: ps: fix wrong ACP version string in pci_request_regions() Christian Hewitt <christianshewitt(a)gmail.com> ASoC: meson: aiu: fifo-spdif: soft reset the S/PDIF datapath on start/stop HE WEI (ギカク) <skyexpoc(a)gmail.com> wifi: cfg80211: bound element ID read when checking non-inheritance Runyu Xiao <runyu.xiao(a)seu.edu.cn> wifi: brcmfmac: initialize SDIO data work before cleanup Cen Zhang <zzzccc427(a)gmail.com> wifi: mac80211: free AP_VLAN bc_buf SKBs outside IRQ lock Zhao Li <enderaoelyther(a)gmail.com> wifi: cfg80211: reject unsupported PMSR FTM location requests Zhao Li <enderaoelyther(a)gmail.com> wifi: cfg80211: validate PMSR FTM preamble range Zhao Li <enderaoelyther(a)gmail.com> wifi: cfg80211: validate PMSR measurement type data Zhao Li <enderaoelyther(a)gmail.com> wifi: nl80211: validate nested MBSSID IE blobs Zhao Li <enderaoelyther(a)gmail.com> wifi: cfg80211: derive S1G beacon TSF from S1G fields Zhao Li <enderaoelyther(a)gmail.com> wifi: nl80211: free RNR data on MBSSID mismatch Peddolla Harshavardhan Reddy <peddolla.reddy(a)oss.qualcomm.com> wifi: cfg80211: convert pmsr_free_wk to wiphy_work to fix deadlock Johannes Berg <johannes.berg(a)intel.com> wifi: cfg80211: define and use wiphy guard Felix Fietkau <nbd(a)nbd.name> wifi: cfg80211: pass net_device to .set_monitor_channel Xiang Mei <xmei5(a)asu.edu> wifi: p54: validate RX frame length in p54_rx_eeprom_readback() Dawei Feng <dawei.feng(a)seu.edu.cn> wifi: libertas: fix memory leak in helper_firmware_cb() Xiang Mei <xmei5(a)asu.edu> wifi: mac80211: fix fils_discovery double free on alloc failure Xiang Mei <xmei5(a)asu.edu> wifi: mac80211: fix unsol_bcast_probe_resp double free on alloc failure Bryam Vargas <hexlabsecurity(a)proton.me> wifi: mac80211_hwsim: clamp virtio RX length before skb_put Abdun Nihaal <nihaal(a)cse.iitm.ac.in> wifi: ipw2100: fix potential memory leak in ipw2100_pci_init_one() Cen Zhang <zzzccc427(a)gmail.com> wifi: cfg80211: cancel sched scan results work on unregister Xiang Mei (Microsoft) <xmei5(a)asu.edu> xfrm: policy: preallocate inexact bins before xfrm_hash_rebuild reinsert Xiang Mei (Microsoft) <xmei5(a)asu.edu> xfrm6: clear dst.dev on error to avoid double netdev_put in xfrm6_fill_dst() Aleksandrova Alyona <aga(a)itb.spb.ru> RDMA/irdma: Prevent overflows in memory contiguity checks Malaya Kumar Rout <malayarout91(a)gmail.com> selftests/alsa: Fix memory leak in find_controls error path Xue Lei <Xue.Lei(a)windriver.com> mtd: fix double free and WARN_ON in add_mtd_device() error paths Ruoyu Wang <ruoyuw560(a)gmail.com> RDMA/siw: publish QP after initialization Danila Chernetsov <listdansp(a)mail.ru> RDMA/hns: Fix potential integer overflow in mhop hem cleanup Ruoyu Wang <ruoyuw560(a)gmail.com> RDMA/erdma: initialize ret for empty receive WR lists Jacob Moroni <jmoroni(a)google.com> RDMA/irdma: Prevent rereg_mr for non-mem regions Jacob Moroni <jmoroni(a)google.com> RDMA/umem: Add pinned revocable dmabuf import interface Or Gerlitz <ogerlitz(a)ddn.com> RDMA/cma: Fix hardware address comparison length in netevent callback Unnathi Chalicheemala <unnathi.chalicheemala(a)oss.qualcomm.com> firmware: arm_ffa: Fix NULL dereference in ffa_partition_info_get() Filipe Manana <fdmanana(a)suse.com> btrfs: fix root leak if its reloc root is unexpected in merge_reloc_roots() Xiang Mei <xmei5(a)asu.edu> btrfs: reject free space cache with more entries than pages Pengpeng Hou <pengpeng(a)iscas.ac.cn> mtd: nand: mtk-ecc: stop on ECC idle timeouts Pengpeng Hou <pengpeng(a)iscas.ac.cn> mtd: mtdswap: remove debugfs stats file on teardown Michael Bommarito <michael.bommarito(a)gmail.com> IB/mad: Drop unmatched RMPP responses before reassembly Seth Forshee <sforshee(a)nvidia.com> firmware: arm_ffa: Respect firmware advertised RX/TX buffer size limits Sumit Gupta <sumitg(a)nvidia.com> arm64: tegra: Fix CPU compatible string to cortex-a78ae on Tegra234 Harshal Dev <harshal.dev(a)oss.qualcomm.com> soc: qcom: ice: Allow explicit votes on 'iface' clock for ICE Dmitry Torokhov <dmitry.torokhov(a)gmail.com> Input: ims-pcu - fix logic error in packet reset Seungjin Bae <eeodqql09(a)gmail.com> Input: ims-pcu - fix heap-buffer-overflow in ims_pcu_process_data() Chuck Lever <chuck.lever(a)oracle.com> xprtrdma: Clear receive-side ownership pointers on release Mikko Perttunen <mperttunen(a)nvidia.com> crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin Mikko Perttunen <mperttunen(a)nvidia.com> gpu: host1x: Fix use-after-free in host1x_bo_clear_cached_mappings Sasha Levin <sashal(a)kernel.org> Revert "arm64: dts: ti: k3-am62a7-sk: Add bootph-all tag to vqmmc" Claudiu Beznea <claudiu.beznea.uj(a)bp.renesas.com> dmaengine: sh: rz-dmac: Move interrupt request after everything is set up Oliver Hartkopp <socketcan(a)hartkopp.net> can: isotp: serialize TX state transitions under so->rx_lock Oliver Hartkopp <socketcan(a)hartkopp.net> can: isotp: fix use-after-free race with concurrent NETDEV_UNREGISTER Oliver Hartkopp <socketcan(a)hartkopp.net> can: bcm: track a single source interface for ANYDEV timeout/throttle ops Oliver Hartkopp <socketcan(a)hartkopp.net> can: bcm: fix data race on rx_stamp/rx_ifindex in bcm_rx_handler() Oliver Hartkopp <socketcan(a)hartkopp.net> can: bcm: fix stale rx/tx ops after device removal Oliver Hartkopp <socketcan(a)hartkopp.net> can: bcm: add missing device refcount for CAN filter removal Oliver Hartkopp <socketcan(a)hartkopp.net> can: bcm: validate frame length in bcm_rx_setup() for RTR replies Oliver Hartkopp <socketcan(a)hartkopp.net> can: bcm: extend bcm_tx_lock usage for data and timer updates Oliver Hartkopp <socketcan(a)hartkopp.net> can: bcm: fix CAN frame rx/tx statistics Oliver Hartkopp <socketcan(a)hartkopp.net> can: bcm: add locking when updating filter and timer values Phil Rosenthal <phil(a)phil.gs> KVM: x86/mmu: Fix use-after-free on vendor module reload Hyunwoo Kim <imv4bel(a)gmail.com> KVM: nVMX: Hide shadow VMCS right after VMCLEAR Venkatesh Srinivas <venkateshs(a)chromium.org> KVM: x86: Only reset TSC Deadline Timer in apic_timer_expired on KVM_RUN Sean Christopherson <seanjc(a)google.com> KVM: x86: Check for invalid/obsolete root *after* making MMU pages available Heiko Carstens <hca(a)linux.ibm.com> seqlock: Allow UBSAN_ALIGNMENT to fail optimizing Peter Zijlstra <peterz(a)infradead.org> seqlock: Allow KASAN to fail optimizing Peter Zijlstra <peterz(a)infradead.org> seqlock: Cure some more scoped_seqlock() optimization fails Kiryl Shutsemau <kas(a)kernel.org> fs/proc/task_mmu: fix make_uffd_wp_huge_pte() prot-update race Ryosuke Yasuoka <ryasuoka(a)redhat.com> drm/virtio: fix deadlock in display_info_cb by removing hotplug from dequeue worker Brian Witte <brianwitte(a)mailfence.com> netfilter: nf_tables: revert commit_mutex usage in reset path Brian Witte <brianwitte(a)mailfence.com> netfilter: nft_quota: use atomic64_xchg for reset Brian Witte <brianwitte(a)mailfence.com> netfilter: nft_counter: serialize reset with spinlock Daniel Borkmann <daniel(a)iogearbox.net> selftests/bpf: Add tests for ld_{abs,ind} failure path in subprogs Daniel Borkmann <daniel(a)iogearbox.net> bpf: Fix ld_{abs,ind} failure path analysis in subprogs Wayen Yan <win847(a)gmail.com> net: airoha: Fix skb->priority underflow in airoha_dev_select_queue() Lorenzo Bianconi <lorenzo(a)kernel.org> net: airoha: Move airoha_eth driver in a dedicated folder Guixiong Wei <weiguixiong(a)bytedance.com> platform/x86/intel-uncore-freq: Fix current_freq_khz after CPU hotplug ------------- Diffstat: Documentation/gpu/drm-mm.rst | 10 +- Documentation/netlink/specs/dpll.yaml | 41 + Documentation/netlink/specs/rt_link.yaml | 40 +- Makefile | 9 +- arch/arm64/boot/dts/nvidia/tegra234.dtsi | 24 +- arch/arm64/boot/dts/qcom/sc7180.dtsi | 4 +- arch/arm64/boot/dts/qcom/sc7280.dtsi | 8 +- arch/arm64/boot/dts/qcom/sc8180x.dtsi | 12 +- arch/arm64/boot/dts/qcom/sc8280xp.dtsi | 32 +- arch/arm64/boot/dts/qcom/sm6350.dtsi | 4 +- arch/arm64/boot/dts/qcom/sm8150.dtsi | 4 +- arch/arm64/boot/dts/qcom/sm8250.dtsi | 4 +- arch/arm64/boot/dts/qcom/sm8350.dtsi | 4 +- arch/arm64/boot/dts/qcom/sm8450.dtsi | 4 +- arch/arm64/boot/dts/qcom/x1e80100.dtsi | 77 +- arch/arm64/boot/dts/ti/k3-am62a7-sk.dts | 2 - arch/arm64/mm/mmu.c | 5 +- arch/loongarch/kernel/acpi.c | 27 +- arch/loongarch/kernel/kgdb.c | 3 +- arch/loongarch/kernel/setup.c | 3 +- arch/loongarch/kernel/smp.c | 4 +- arch/loongarch/mm/init.c | 5 +- arch/powerpc/kernel/time.c | 43 + arch/powerpc/mm/mem.c | 5 +- arch/powerpc/platforms/85xx/common.c | 2 + arch/riscv/include/asm/kvm_host.h | 10 +- arch/riscv/kernel/sys_hwprobe.c | 1 + arch/riscv/kvm/aia.c | 34 +- arch/riscv/kvm/vcpu.c | 69 +- arch/riscv/kvm/vcpu_onereg.c | 8 +- arch/riscv/mm/init.c | 5 +- arch/s390/lib/csum-partial.c | 2 +- arch/s390/mm/init.c | 5 +- arch/x86/boot/compressed/Makefile | 1 + arch/x86/kernel/cpu/resctrl/rdtgroup.c | 12 +- arch/x86/kvm/lapic.c | 2 +- arch/x86/kvm/mmu/mmu.c | 11 +- arch/x86/kvm/mmu/paging_tmpl.h | 10 +- arch/x86/kvm/svm/svm.c | 7 +- arch/x86/kvm/vmx/nested.c | 11 +- arch/x86/mm/init_64.c | 5 +- block/genhd.c | 42 +- crypto/rsa-pkcs1pad.c | 2 +- drivers/accel/ivpu/ivpu_hw_btrs.c | 2 +- drivers/ata/libata-core.c | 18 + drivers/ata/libata-scsi.c | 2 - drivers/ata/libata.h | 9 + drivers/ata/sata_dwc_460ex.c | 38 +- drivers/block/rbd.c | 7 +- drivers/bluetooth/btqca.c | 2 +- drivers/bluetooth/btusb.c | 4 +- drivers/bluetooth/hci_qca.c | 4 + drivers/cdrom/cdrom.c | 1 + drivers/char/ipmi/ipmi_msghandler.c | 8 + drivers/comedi/drivers/comedi_parport.c | 13 +- drivers/cpufreq/cpufreq.c | 3 + drivers/crypto/tegra/tegra-se-main.c | 3 +- drivers/dma-buf/udmabuf.c | 9 +- drivers/dma/dw-edma/dw-edma-pcie.c | 63 +- drivers/dma/sh/rz-dmac.c | 96 +- drivers/dpll/dpll_netlink.c | 24 + drivers/firewire/net.c | 37 +- drivers/firmware/arm_ffa/driver.c | 29 +- drivers/firmware/arm_scmi/notify.c | 6 +- drivers/firmware/stratix10-svc.c | 10 +- drivers/firmware/xilinx/zynqmp.c | 1 + drivers/fpga/dfl-afu-main.c | 3 + drivers/gpio/gpio-mt7621.c | 2 + drivers/gpu/Kconfig | 13 + drivers/gpu/Makefile | 4 +- drivers/gpu/buddy.c | 1347 ++++++++++++++++++++ drivers/gpu/drm/Kconfig | 6 +- drivers/gpu/drm/Makefile | 1 - drivers/gpu/drm/amd/amdgpu/amdgpu_acp.c | 2 + drivers/gpu/drm/amd/amdgpu/amdgpu_bios.c | 45 +- drivers/gpu/drm/amd/amdgpu/amdgpu_cs.c | 6 +- drivers/gpu/drm/amd/amdgpu/amdgpu_device.c | 11 +- drivers/gpu/drm/amd/amdgpu/amdgpu_object.c | 13 +- drivers/gpu/drm/amd/amdgpu/amdgpu_res_cursor.h | 12 +- drivers/gpu/drm/amd/amdgpu/amdgpu_ttm.c | 54 +- drivers/gpu/drm/amd/amdgpu/amdgpu_uvd.c | 58 +- drivers/gpu/drm/amd/amdgpu/amdgpu_vce.c | 17 +- drivers/gpu/drm/amd/amdgpu/amdgpu_vm.c | 25 +- drivers/gpu/drm/amd/amdgpu/amdgpu_vram_mgr.c | 77 +- drivers/gpu/drm/amd/amdgpu/amdgpu_vram_mgr.h | 18 +- drivers/gpu/drm/amd/amdgpu/gfx_v10_0.c | 22 +- drivers/gpu/drm/amd/amdgpu/gfx_v11_0.c | 13 +- drivers/gpu/drm/amd/amdgpu/gfx_v12_0.c | 13 +- drivers/gpu/drm/amd/amdgpu/gfx_v8_0.c | 3 - drivers/gpu/drm/amd/amdgpu/gfx_v9_0.c | 10 +- drivers/gpu/drm/amd/amdgpu/gfx_v9_4_3.c | 11 +- drivers/gpu/drm/amd/amdgpu/sdma_v4_4_2.c | 4 +- drivers/gpu/drm/amd/amdgpu/sdma_v5_0.c | 4 +- drivers/gpu/drm/amd/amdgpu/sdma_v5_2.c | 4 +- drivers/gpu/drm/amd/amdgpu/sdma_v6_0.c | 4 +- drivers/gpu/drm/amd/amdgpu/sdma_v7_0.c | 4 +- drivers/gpu/drm/amd/amdgpu/vcn_v4_0.c | 15 +- drivers/gpu/drm/amd/amdkfd/kfd_chardev.c | 12 +- drivers/gpu/drm/amd/amdkfd/kfd_events.c | 3 + drivers/gpu/drm/amd/amdkfd/kfd_queue.c | 23 +- drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm.c | 11 +- .../amd/display/dc/clk_mgr/dcn32/dcn32_clk_mgr.c | 9 +- .../amd/display/dc/clk_mgr/dcn35/dcn35_clk_mgr.c | 9 +- .../gpu/drm/amd/display/dc/link/link_detection.c | 5 +- .../display/dc/resource/dce100/dce100_resource.c | 7 +- .../amd/display/modules/info_packet/info_packet.c | 2 - drivers/gpu/drm/amd/pm/amdgpu_pm.c | 26 +- drivers/gpu/drm/amd/pm/powerplay/hwmgr/hwmgr.c | 7 +- .../gpu/drm/amd/pm/swsmu/smu13/smu_v13_0_0_ppt.c | 11 +- .../gpu/drm/amd/pm/swsmu/smu13/smu_v13_0_7_ppt.c | 15 +- .../gpu/drm/amd/pm/swsmu/smu14/smu_v14_0_2_ppt.c | 28 +- drivers/gpu/drm/bridge/cadence/cdns-dsi-core.c | 11 +- drivers/gpu/drm/display/drm_dp_mst_topology.c | 36 +- drivers/gpu/drm/drm_buddy.c | 1279 +------------------ drivers/gpu/drm/drm_connector.c | 12 +- drivers/gpu/drm/drm_displayid_internal.h | 2 +- drivers/gpu/drm/i915/display/intel_bios.c | 36 +- drivers/gpu/drm/i915/gem/i915_gem_context.c | 25 +- drivers/gpu/drm/i915/gem/i915_gem_ttm.c | 2 +- drivers/gpu/drm/i915/gt/intel_engine_user.c | 2 +- drivers/gpu/drm/i915/gt/selftest_gt_pm.c | 8 +- drivers/gpu/drm/i915/i915_active.c | 7 +- drivers/gpu/drm/i915/i915_scatterlist.c | 10 +- drivers/gpu/drm/i915/i915_ttm_buddy_manager.c | 55 +- drivers/gpu/drm/i915/i915_ttm_buddy_manager.h | 4 +- .../gpu/drm/i915/selftests/intel_memory_region.c | 20 +- drivers/gpu/drm/imagination/pvr_context.c | 22 +- drivers/gpu/drm/imagination/pvr_drv.c | 13 +- drivers/gpu/drm/imagination/pvr_queue.c | 65 +- drivers/gpu/drm/imagination/pvr_queue.h | 2 +- drivers/gpu/drm/imagination/pvr_vm.c | 2 + drivers/gpu/drm/nouveau/nouveau_exec.c | 4 +- drivers/gpu/drm/nouveau/nouveau_uvmm.c | 4 +- drivers/gpu/drm/nouveau/nvkm/subdev/acr/base.c | 1 + drivers/gpu/drm/panthor/panthor_fw.c | 1 + drivers/gpu/drm/radeon/r100.c | 13 +- drivers/gpu/drm/renesas/rz-du/rzg2l_mipi_dsi.c | 2 +- drivers/gpu/drm/rockchip/cdn-dp-reg.c | 2 + drivers/gpu/drm/tests/Makefile | 1 - drivers/gpu/drm/tests/drm_exec_test.c | 2 - drivers/gpu/drm/tests/drm_gem_shmem_test.c | 16 +- drivers/gpu/drm/tests/drm_mm_test.c | 2 - drivers/gpu/drm/ttm/tests/ttm_bo_validate_test.c | 4 +- drivers/gpu/drm/ttm/tests/ttm_mock_manager.c | 18 +- drivers/gpu/drm/ttm/tests/ttm_mock_manager.h | 4 +- drivers/gpu/drm/vc4/vc4_bo.c | 10 +- drivers/gpu/drm/virtio/virtgpu_kms.c | 5 +- drivers/gpu/drm/virtio/virtgpu_vq.c | 6 +- drivers/gpu/drm/vmwgfx/vmwgfx_surface.c | 22 +- drivers/gpu/drm/xe/xe_pt.c | 14 +- drivers/gpu/drm/xe/xe_res_cursor.h | 34 +- drivers/gpu/drm/xe/xe_ttm_vram_mgr.c | 73 +- drivers/gpu/drm/xe/xe_ttm_vram_mgr_types.h | 4 +- drivers/gpu/drm/xe/xe_wopcm.c | 15 +- drivers/gpu/host1x/bus.c | 4 +- drivers/gpu/tests/Makefile | 4 + .../drm_buddy_test.c => tests/gpu_buddy_test.c} | 316 ++--- .../{drm/lib/drm_random.c => tests/gpu_random.c} | 18 +- .../{drm/lib/drm_random.h => tests/gpu_random.h} | 18 +- drivers/hwmon/asus-ec-sensors.c | 18 +- drivers/hwmon/corsair-cpro.c | 1 + drivers/hwmon/corsair-psu.c | 1 + drivers/hwmon/gigabyte_waterforce.c | 4 +- drivers/hwmon/nzxt-kraken3.c | 6 +- drivers/hwmon/nzxt-smart2.c | 2 +- drivers/hwmon/occ/common.c | 38 +- drivers/hwtracing/intel_th/core.c | 10 - drivers/hwtracing/intel_th/msu.c | 2 + drivers/i2c/busses/i2c-davinci.c | 4 +- drivers/i2c/busses/i2c-i801.c | 2 +- drivers/i2c/busses/i2c-imx.c | 126 +- drivers/infiniband/core/cma.c | 2 +- drivers/infiniband/core/mad.c | 30 + drivers/infiniband/core/umem_dmabuf.c | 61 + drivers/infiniband/hw/erdma/erdma_qp.c | 2 +- drivers/infiniband/hw/hns/hns_roce_hem.c | 2 +- drivers/infiniband/hw/irdma/verbs.c | 7 +- drivers/infiniband/sw/siw/siw_verbs.c | 44 +- drivers/input/misc/ims-pcu.c | 32 +- drivers/iommu/amd/init.c | 6 + drivers/iommu/amd/iommu.c | 22 +- drivers/iommu/intel/perf.c | 2 +- drivers/iommu/intel/svm.c | 2 +- drivers/iommu/iommufd/fault.c | 12 +- drivers/md/dm-integrity.c | 2 +- drivers/md/dm.c | 11 +- drivers/media/cec/platform/seco/seco-cec.c | 6 +- drivers/media/common/videobuf2/videobuf2-core.c | 12 +- drivers/media/dvb-frontends/rtl2832.c | 4 +- drivers/media/dvb-frontends/rtl2832_sdr.c | 19 +- drivers/media/i2c/alvium-csi2.c | 21 +- drivers/media/pci/cx23885/cx23885-core.c | 14 +- drivers/media/pci/dm1105/dm1105.c | 1 + drivers/media/pci/intel/ipu6/ipu6-isys-dwc-phy.c | 24 +- drivers/media/pci/saa7134/saa7134-video.c | 25 +- drivers/media/platform/aspeed/aspeed-video.c | 1 + .../platform/chips-media/wave5/wave5-vpu-enc.c | 29 +- drivers/media/platform/marvell/cafe-driver.c | 1 + drivers/media/platform/nuvoton/npcm-video.c | 34 +- .../media/platform/nxp/imx8-isi/imx8-isi-core.c | 2 + .../media/platform/nxp/imx8-isi/imx8-isi-core.h | 16 + .../platform/nxp/imx8-isi/imx8-isi-crossbar.c | 1 + drivers/media/platform/nxp/imx8-isi/imx8-isi-hw.c | 9 +- drivers/media/platform/nxp/imx8-isi/imx8-isi-m2m.c | 11 +- .../media/platform/nxp/imx8-isi/imx8-isi-pipe.c | 20 +- .../media/platform/qcom/camss/camss-csid-gen2.c | 47 +- drivers/media/platform/st/stm32/stm32-dcmi.c | 1 + drivers/media/platform/sunxi/sun4i-csi/sun4i_dma.c | 6 +- drivers/media/platform/ti/davinci/vpif_capture.c | 2 +- drivers/media/platform/ti/vpe/vpe.c | 3 +- drivers/media/radio/radio-si476x.c | 1 + drivers/media/test-drivers/vidtv/vidtv_bridge.c | 4 +- drivers/media/test-drivers/vimc/vimc-core.c | 1 + drivers/media/test-drivers/vivid/vivid-core.c | 6 +- drivers/media/test-drivers/vivid/vivid-ctrls.c | 15 +- drivers/media/test-drivers/vivid/vivid-vid-cap.c | 38 +- drivers/media/test-drivers/vivid/vivid-vid-cap.h | 1 + drivers/media/test-drivers/vivid/vivid-vid-out.c | 6 + drivers/media/usb/airspy/airspy.c | 8 +- drivers/media/usb/cx231xx/cx231xx-cards.c | 16 +- drivers/media/usb/msi2500/msi2500.c | 32 +- drivers/media/usb/pwc/pwc-if.c | 13 +- drivers/media/v4l2-core/v4l2-ctrls-core.c | 13 + drivers/media/v4l2-core/v4l2-ctrls-request.c | 14 +- drivers/media/v4l2-core/v4l2-fwnode.c | 6 +- drivers/media/v4l2-core/v4l2-subdev.c | 4 + drivers/misc/mei/bus.c | 16 +- drivers/misc/nsm.c | 3 +- drivers/mmc/host/vub300.c | 36 +- drivers/mtd/maps/vmu-flash.c | 8 +- drivers/mtd/mtdcore.c | 23 +- drivers/mtd/mtdswap.c | 5 +- drivers/mtd/nand/ecc-mtk.c | 16 +- drivers/net/amt.c | 101 +- drivers/net/bonding/bond_main.c | 3 +- drivers/net/ethernet/Kconfig | 1 + drivers/net/ethernet/Makefile | 1 + drivers/net/ethernet/airoha/Kconfig | 18 + drivers/net/ethernet/airoha/Makefile | 6 + .../net/ethernet/{mediatek => airoha}/airoha_eth.c | 5 +- drivers/net/ethernet/amd/pds_core/adminq.c | 12 +- drivers/net/ethernet/amd/pds_core/auxbus.c | 17 +- drivers/net/ethernet/amd/pds_core/core.c | 22 +- drivers/net/ethernet/amd/pds_core/devlink.c | 6 + drivers/net/ethernet/amd/pds_core/main.c | 14 +- drivers/net/ethernet/amd/xgbe/xgbe-mdio.c | 11 +- drivers/net/ethernet/cadence/macb_main.c | 22 +- drivers/net/ethernet/freescale/dpaa2/dpaa2-eth.c | 1 + .../net/ethernet/freescale/dpaa2/dpaa2-switch.c | 1 + drivers/net/ethernet/freescale/fman/fman_dtsec.c | 17 +- drivers/net/ethernet/google/gve/gve.h | 3 + drivers/net/ethernet/google/gve/gve_rx_dqo.c | 64 +- drivers/net/ethernet/hisilicon/hip04_eth.c | 11 +- drivers/net/ethernet/huawei/hinic/hinic_dev.h | 2 - drivers/net/ethernet/huawei/hinic/hinic_ethtool.c | 21 - drivers/net/ethernet/intel/ice/ice_eswitch.c | 3 - drivers/net/ethernet/intel/ice/ice_lag.c | 2 +- drivers/net/ethernet/intel/ice/ice_parser.c | 3 + drivers/net/ethernet/intel/ice/ice_ptp.c | 7 +- drivers/net/ethernet/intel/ice/ice_sriov.c | 14 +- drivers/net/ethernet/intel/ice/ice_vf_lib.c | 3 +- drivers/net/ethernet/marvell/octeontx2/af/rvu.c | 14 +- drivers/net/ethernet/marvell/octeontx2/af/rvu.h | 1 + .../net/ethernet/marvell/octeontx2/af/rvu_cn10k.c | 9 + .../ethernet/marvell/octeontx2/nic/otx2_flows.c | 1 + .../net/ethernet/marvell/octeontx2/nic/otx2_pf.c | 28 +- .../net/ethernet/marvell/octeontx2/nic/otx2_tc.c | 29 +- .../net/ethernet/marvell/octeontx2/nic/otx2_vf.c | 13 +- drivers/net/ethernet/mediatek/Kconfig | 8 - drivers/net/ethernet/mediatek/Makefile | 1 - drivers/net/ethernet/mellanox/mlx5/core/dpll.c | 81 ++ .../ethernet/mellanox/mlx5/core/en/tc_tun_vxlan.c | 2 +- drivers/net/ethernet/mellanox/mlx5/core/en_dcbnl.c | 15 + .../net/ethernet/mellanox/mlx5/core/en_ethtool.c | 19 +- drivers/net/ethernet/mellanox/mlx5/core/en_main.c | 4 +- .../ethernet/mellanox/mlx5/core/esw/acl/helper.c | 2 +- .../net/ethernet/mellanox/mlx5/core/esw/bridge.c | 6 +- .../net/ethernet/mellanox/mlx5/core/mlx5_core.h | 4 +- drivers/net/ethernet/mellanox/mlx5/core/port.c | 39 +- .../mellanox/mlx5/core/steering/hws/mlx5hws_bwc.c | 355 +++--- drivers/net/ethernet/microsoft/mana/mana_en.c | 13 + .../ethernet/netronome/nfp/nfpcore/nfp_resource.c | 3 + drivers/net/ethernet/realtek/rtase/rtase.h | 8 + drivers/net/ethernet/realtek/rtase/rtase_main.c | 197 +++ drivers/net/ethernet/stmicro/stmmac/stmmac_main.c | 92 +- drivers/net/ethernet/stmicro/stmmac/stmmac_tc.c | 35 + drivers/net/ethernet/wangxun/txgbe/txgbe_main.c | 1 + drivers/net/geneve.c | 3 + drivers/net/gtp.c | 17 +- drivers/net/ipa/ipa_smp2p.c | 30 +- drivers/net/mctp/mctp-i3c.c | 11 +- drivers/net/mctp/mctp-serial.c | 2 +- drivers/net/pcs/pcs-xpcs.c | 34 +- drivers/net/ppp/ppp_generic.c | 154 ++- drivers/net/ppp/pppoe.c | 2 + drivers/net/ppp/pptp.c | 1 + drivers/net/slip/slip.c | 4 + drivers/net/vmxnet3/vmxnet3_drv.c | 22 +- drivers/net/vxlan/vxlan_core.c | 3 + drivers/net/vxlan/vxlan_mdb.c | 30 +- drivers/net/wan/wanxl.c | 3 +- drivers/net/wireless/ath/ath11k/dp_rx.c | 3 + drivers/net/wireless/ath/ath11k/pci.c | 4 + drivers/net/wireless/ath/ath11k/qmi.c | 11 +- drivers/net/wireless/ath/ath12k/pci.c | 4 + drivers/net/wireless/ath/ath6kl/txrx.c | 10 +- drivers/net/wireless/ath/ath6kl/wmi.c | 20 + drivers/net/wireless/ath/ath9k/hif_usb.c | 7 +- drivers/net/wireless/ath/carl9170/rx.c | 7 +- drivers/net/wireless/ath/carl9170/tx.c | 2 +- drivers/net/wireless/ath/wil6210/cfg80211.c | 1 + drivers/net/wireless/atmel/at76c50x-usb.c | 7 +- .../broadcom/brcm80211/brcmfmac/cfg80211.c | 2 +- .../wireless/broadcom/brcm80211/brcmfmac/pcie.c | 8 +- .../wireless/broadcom/brcm80211/brcmfmac/sdio.c | 2 +- drivers/net/wireless/intel/ipw2x00/ipw2100.c | 8 +- drivers/net/wireless/intel/iwlwifi/mvm/d3.c | 3 +- drivers/net/wireless/intel/iwlwifi/mvm/fw.c | 10 + drivers/net/wireless/intersil/p54/txrx.c | 8 + drivers/net/wireless/marvell/libertas/cfg.c | 1 + drivers/net/wireless/marvell/libertas/firmware.c | 1 + drivers/net/wireless/marvell/libertas_tf/main.c | 2 +- drivers/net/wireless/marvell/mwifiex/tdls.c | 2 +- drivers/net/wireless/marvell/mwifiex/uap_event.c | 24 +- drivers/net/wireless/mediatek/mt76/mt7615/mac.c | 6 + .../net/wireless/mediatek/mt76/mt76_connac_mcu.c | 2 + drivers/net/wireless/mediatek/mt76/mt7915/mcu.c | 18 +- drivers/net/wireless/mediatek/mt76/mt7921/mac.c | 10 +- drivers/net/wireless/mediatek/mt76/mt7925/mac.c | 13 +- drivers/net/wireless/mediatek/mt76/mt7925/main.c | 3 + drivers/net/wireless/mediatek/mt76/mt7925/mcu.c | 2 + drivers/net/wireless/mediatek/mt76/mt7996/mcu.c | 19 +- drivers/net/wireless/microchip/wilc1000/cfg80211.c | 3 +- drivers/net/wireless/microchip/wilc1000/hif.c | 5 + drivers/net/wireless/virtual/mac80211_hwsim.c | 1 + drivers/nvme/target/admin-cmd.c | 21 + drivers/nvme/target/core.c | 37 + drivers/nvme/target/discovery.c | 14 + drivers/nvme/target/fabrics-cmd-auth.c | 38 +- drivers/nvme/target/fabrics-cmd.c | 43 + drivers/nvme/target/nvmet.h | 8 + drivers/platform/loongarch/loongson-laptop.c | 1 + .../uncore-frequency/uncore-frequency-common.c | 7 +- drivers/regulator/mt6358-regulator.c | 2 +- drivers/remoteproc/xlnx_r5_remoteproc.c | 50 +- drivers/scsi/hosts.c | 2 + drivers/scsi/scsi_error.c | 22 +- drivers/scsi/scsi_priv.h | 1 + drivers/soc/qcom/ice.c | 17 +- drivers/staging/media/meson/vdec/vdec.c | 4 +- drivers/staging/media/sunxi/cedrus/cedrus.c | 6 +- drivers/staging/media/sunxi/cedrus/cedrus_h264.c | 3 + drivers/staging/media/tegra-video/vi.c | 4 +- drivers/staging/rtl8723bs/core/rtw_ieee80211.c | 9 +- drivers/staging/rtl8723bs/os_dep/ioctl_cfg80211.c | 2 +- drivers/thunderbolt/debugfs.c | 2 + drivers/thunderbolt/domain.c | 30 + drivers/thunderbolt/icm.c | 5 + drivers/thunderbolt/switch.c | 14 + drivers/thunderbolt/tb.c | 59 +- drivers/thunderbolt/tb.h | 2 + drivers/thunderbolt/xdomain.c | 100 +- drivers/tty/serial/8250/8250_mid.c | 14 +- drivers/tty/serial/sc16is7xx.c | 12 + drivers/uio/uio_hv_generic.c | 8 +- drivers/usb/atm/ueagle-atm.c | 17 + drivers/usb/chipidea/core.c | 1 + drivers/usb/core/port.c | 2 + drivers/usb/core/sysfs.c | 8 +- drivers/usb/gadget/function/f_ecm.c | 4 +- drivers/usb/gadget/function/f_midi.c | 1 + drivers/usb/gadget/function/f_ncm.c | 20 +- drivers/usb/gadget/function/f_printer.c | 23 +- drivers/usb/gadget/function/u_serial.c | 3 +- drivers/usb/gadget/function/uvc_v4l2.c | 2 + drivers/usb/gadget/legacy/inode.c | 3 +- drivers/usb/gadget/udc/aspeed-vhub/hub.c | 3 +- drivers/usb/gadget/udc/at91_udc.c | 3 +- drivers/usb/gadget/udc/bdc/bdc_core.c | 20 + drivers/usb/gadget/udc/bdc/bdc_udc.c | 7 +- drivers/usb/gadget/udc/cdns2/cdns2-gadget.c | 13 +- drivers/usb/gadget/udc/dummy_hcd.c | 43 +- drivers/usb/gadget/udc/fsl_udc_core.c | 94 +- drivers/usb/gadget/udc/fsl_usb2_udc.h | 1 + drivers/usb/gadget/udc/omap_udc.c | 3 +- drivers/usb/gadget/udc/pxa27x_udc.c | 3 +- drivers/usb/gadget/udc/snps_udc_core.c | 1 - drivers/usb/host/xhci-pci.c | 1 + drivers/usb/host/xhci.c | 15 +- drivers/usb/host/xhci.h | 1 + drivers/usb/musb/omap2430.c | 25 +- drivers/usb/serial/ftdi_sio.c | 2 + drivers/usb/serial/ftdi_sio_ids.h | 5 + drivers/usb/serial/io_edgeport.c | 3 +- drivers/usb/serial/keyspan_pda.c | 44 +- drivers/usb/serial/option.c | 1 + drivers/usb/storage/unusual_devs.h | 7 + drivers/vdpa/vdpa_user/iova_domain.c | 157 ++- drivers/vdpa/vdpa_user/iova_domain.h | 13 +- drivers/vdpa/vdpa_user/vduse_dev.c | 16 +- drivers/video/Kconfig | 1 + drivers/video/fbdev/core/bitblit.c | 120 +- drivers/video/fbdev/core/fbcon.c | 420 +++--- drivers/video/fbdev/core/fbcon.h | 6 +- drivers/video/fbdev/core/fbcon_ccw.c | 146 +-- drivers/video/fbdev/core/fbcon_cw.c | 146 +-- drivers/video/fbdev/core/fbcon_rotate.c | 44 +- drivers/video/fbdev/core/fbcon_rotate.h | 6 +- drivers/video/fbdev/core/fbcon_ud.c | 162 +-- drivers/video/fbdev/core/softcursor.c | 18 +- drivers/video/fbdev/core/tileblit.c | 28 +- drivers/virt/coco/pkvm-guest/arm-pkvm-guest.c | 2 +- drivers/watchdog/watchdog_pretimeout.c | 2 + fs/afs/addr_list.c | 50 + fs/afs/cell.c | 532 ++++---- fs/afs/cmservice.c | 92 +- fs/afs/dynroot.c | 14 +- fs/afs/fs_probe.c | 32 +- fs/afs/fsclient.c | 4 +- fs/afs/internal.h | 98 +- fs/afs/main.c | 13 +- fs/afs/mntpt.c | 6 +- fs/afs/proc.c | 16 +- fs/afs/rxrpc.c | 19 +- fs/afs/security.c | 49 +- fs/afs/server.c | 621 ++++----- fs/afs/server_list.c | 6 +- fs/afs/super.c | 12 +- fs/afs/vl_alias.c | 8 +- fs/afs/vl_rotate.c | 2 +- fs/binfmt_elf_fdpic.c | 4 + fs/binfmt_misc.c | 5 +- fs/btrfs/extent_map.c | 4 +- fs/btrfs/free-space-cache.c | 3 + fs/btrfs/relocation.c | 2 + fs/ceph/caps.c | 1 + fs/ceph/dir.c | 7 +- fs/ceph/ioctl.c | 6 + fs/crypto/inline_crypt.c | 57 +- fs/crypto/keysetup_v1.c | 8 +- fs/exec.c | 2 +- fs/f2fs/super.c | 25 +- fs/iomap/buffered-io.c | 34 +- fs/namei.c | 43 + fs/nfsd/nfs4xdr.c | 8 +- fs/nfsd/vfs.c | 7 +- fs/nfsd/vfs.h | 2 +- fs/overlayfs/copy_up.c | 12 +- fs/overlayfs/xattrs.c | 2 +- fs/posix_acl.c | 7 + fs/proc/namespaces.c | 4 +- fs/proc/task_mmu.c | 14 +- fs/smb/client/cifsglob.h | 19 +- fs/smb/client/misc.c | 34 +- fs/smb/client/smb2ops.c | 25 +- fs/smb/common/cifsglob.h | 30 + fs/smb/server/oplock.c | 6 +- fs/smb/server/smb2misc.c | 5 + fs/smb/server/smb2pdu.c | 9 +- fs/smb/server/smb_common.h | 14 +- fs/smb/server/smbacl.c | 42 +- fs/xfs/libxfs/xfs_attr_leaf.c | 22 + fs/xfs/libxfs/xfs_attr_leaf.h | 3 + fs/xfs/scrub/cow_repair.c | 182 ++- fs/xfs/scrub/trace.h | 28 +- include/drm/drm_buddy.h | 174 +-- include/drm/drm_connector.h | 6 +- include/linux/audit.h | 6 +- include/linux/audit_arch.h | 12 +- include/linux/bootconfig.h | 3 + include/linux/cleanup.h | 9 + include/linux/cred.h | 15 + include/linux/dpll.h | 4 + include/linux/firmware/xlnx-zynqmp.h | 13 + include/linux/fscrypt.h | 18 +- include/linux/gpu_buddy.h | 188 +++ include/linux/memory_hotplug.h | 8 +- include/linux/mlx5/mlx5_ifc.h | 13 +- include/linux/mmzone.h | 7 +- include/linux/namei.h | 1 + include/linux/ppp_channel.h | 3 +- include/linux/seqlock.h | 10 +- include/linux/sunrpc/svcsock.h | 3 + include/linux/sunrpc/xdr.h | 19 +- include/linux/vtime.h | 6 + include/media/v4l2-async.h | 4 +- include/media/videobuf2-core.h | 8 +- include/net/af_rxrpc.h | 27 +- include/net/bluetooth/hci.h | 1 + include/net/bluetooth/hci_core.h | 40 +- include/net/bluetooth/rfcomm.h | 3 + include/net/cfg80211.h | 7 +- include/net/netfilter/nf_tables.h | 37 - include/net/netfilter/nft_fib.h | 2 - include/net/netfilter/nft_meta.h | 3 - include/net/sctp/structs.h | 3 +- include/rdma/ib_umem.h | 19 + include/scsi/scsi_host.h | 3 + include/trace/events/afs.h | 63 +- include/trace/events/rxrpc.h | 5 +- include/uapi/linux/btrfs.h | 2 +- include/uapi/linux/dpll.h | 24 + include/uapi/linux/netfilter/nf_tables.h | 10 +- init/Kconfig | 3 + init/main.c | 45 - io_uring/rw.c | 42 +- kernel/audit.c | 2 +- kernel/audit.h | 32 +- kernel/audit_fsnotify.c | 39 +- kernel/audit_tree.c | 2 +- kernel/audit_watch.c | 42 +- kernel/auditfilter.c | 17 +- kernel/auditsc.c | 6 +- kernel/bpf/verifier.c | 67 +- kernel/locking/spinlock_rt.c | 27 +- kernel/trace/ftrace.c | 13 + kernel/trace/trace_eprobe.c | 3 +- kernel/trace/trace_mmiotrace.c | 4 +- kernel/trace/trace_probe.c | 13 +- lib/bootconfig.c | 65 + lib/compat_audit.c | 12 +- mm/damon/core.c | 13 + mm/hugetlb.c | 7 +- mm/internal.h | 47 + mm/memory_hotplug.c | 13 +- mm/memremap.c | 4 +- mm/mm_init.c | 36 +- mm/sparse-vmemmap.c | 336 +++++ mm/sparse.c | 112 +- net/bluetooth/hci_conn.c | 54 +- net/bluetooth/hci_core.c | 27 +- net/bluetooth/hci_event.c | 7 +- net/bluetooth/hci_sync.c | 25 +- net/bluetooth/iso.c | 6 +- net/bluetooth/mgmt.c | 87 +- net/bluetooth/rfcomm/core.c | 17 + net/bluetooth/rfcomm/tty.c | 7 +- net/bridge/br_netlink_tunnel.c | 3 +- net/bridge/br_private.h | 6 +- net/bridge/br_vlan.c | 10 +- net/bridge/br_vlan_options.c | 3 +- net/bridge/netfilter/nft_meta_bridge.c | 20 - net/bridge/netfilter/nft_reject_bridge.c | 1 - net/can/bcm.c | 528 ++++++-- net/can/isotp.c | 278 +++- net/can/j1939/transport.c | 18 +- net/ceph/auth_x.c | 9 +- net/ceph/ceph_common.c | 4 +- net/ceph/mon_client.c | 4 +- net/ceph/osdmap.c | 12 +- net/core/filter.c | 6 +- net/core/gro.c | 4 +- net/core/sock_map.c | 2 + net/hsr/hsr_slave.c | 2 + net/ipv4/fib_trie.c | 2 +- net/ipv4/icmp.c | 18 +- net/ipv4/ip_gre.c | 4 +- net/ipv4/netfilter/nft_dup_ipv4.c | 1 - net/ipv4/netfilter/nft_fib_ipv4.c | 2 - net/ipv4/netfilter/nft_reject_ipv4.c | 1 - net/ipv4/nexthop.c | 2 +- net/ipv4/tcp_bpf.c | 2 +- net/ipv4/tcp_ipv4.c | 3 + net/ipv4/tcp_output.c | 8 +- net/ipv6/ila/ila_common.c | 12 + net/ipv6/ip6_gre.c | 4 +- net/ipv6/ip6_tunnel.c | 3 + net/ipv6/netfilter/nft_dup_ipv6.c | 1 - net/ipv6/netfilter/nft_fib_ipv6.c | 2 - net/ipv6/netfilter/nft_reject_ipv6.c | 1 - net/ipv6/raw.c | 2 +- net/ipv6/tcp_ipv6.c | 2 + net/ipv6/xfrm6_policy.c | 1 + net/iucv/af_iucv.c | 21 +- net/l2tp/l2tp_ppp.c | 1 + net/mac80211/cfg.c | 12 +- net/mac80211/iface.c | 8 +- net/mac80211/link.c | 4 + net/mac80211/rx.c | 2 + net/mac802154/llsec.c | 5 + net/mac802154/scan.c | 11 + net/mpls/af_mpls.c | 3 + net/mptcp/options.c | 12 +- net/mptcp/protocol.c | 1 + net/netfilter/nf_conntrack_sip.c | 10 +- net/netfilter/nf_tables_api.c | 315 +---- net/netfilter/nft_bitwise.c | 137 +- net/netfilter/nft_byteorder.c | 11 - net/netfilter/nft_cmp.c | 3 - net/netfilter/nft_compat.c | 10 - net/netfilter/nft_connlimit.c | 1 - net/netfilter/nft_counter.c | 21 +- net/netfilter/nft_ct.c | 46 - net/netfilter/nft_dup_netdev.c | 1 - net/netfilter/nft_dynset.c | 1 - net/netfilter/nft_exthdr.c | 34 - net/netfilter/nft_fib.c | 51 +- net/netfilter/nft_fib_inet.c | 1 - net/netfilter/nft_fib_netdev.c | 30 +- net/netfilter/nft_flow_offload.c | 1 - net/netfilter/nft_fwd_netdev.c | 2 - net/netfilter/nft_hash.c | 36 - net/netfilter/nft_immediate.c | 12 - net/netfilter/nft_last.c | 1 - net/netfilter/nft_limit.c | 2 - net/netfilter/nft_log.c | 1 - net/netfilter/nft_lookup.c | 12 - net/netfilter/nft_masq.c | 3 - net/netfilter/nft_meta.c | 45 - net/netfilter/nft_nat.c | 2 - net/netfilter/nft_numgen.c | 22 - net/netfilter/nft_objref.c | 2 - net/netfilter/nft_osf.c | 25 - net/netfilter/nft_payload.c | 47 - net/netfilter/nft_queue.c | 2 - net/netfilter/nft_quota.c | 14 +- net/netfilter/nft_range.c | 1 - net/netfilter/nft_redir.c | 3 - net/netfilter/nft_reject_inet.c | 1 - net/netfilter/nft_reject_netdev.c | 1 - net/netfilter/nft_rt.c | 1 - net/netfilter/nft_socket.c | 26 - net/netfilter/nft_synproxy.c | 1 - net/netfilter/nft_tproxy.c | 1 - net/netfilter/nft_tunnel.c | 26 - net/netfilter/nft_xfrm.c | 27 - net/openvswitch/actions.c | 19 +- net/openvswitch/datapath.c | 25 +- net/openvswitch/datapath.h | 2 +- net/openvswitch/vport.c | 2 +- net/packet/af_packet.c | 6 +- net/phonet/pep.c | 2 + net/qrtr/af_qrtr.c | 8 + net/qrtr/ns.c | 4 +- net/rds/recv.c | 15 + net/rds/tcp.c | 4 +- net/rxrpc/af_rxrpc.c | 24 +- net/rxrpc/ar-internal.h | 14 +- net/rxrpc/call_accept.c | 79 +- net/rxrpc/call_event.c | 31 +- net/rxrpc/call_object.c | 44 +- net/rxrpc/conn_client.c | 20 +- net/rxrpc/conn_event.c | 14 +- net/rxrpc/conn_object.c | 8 +- net/rxrpc/input.c | 7 +- net/rxrpc/io_thread.c | 108 +- net/rxrpc/peer_event.c | 10 +- net/rxrpc/peer_object.c | 35 +- net/rxrpc/recvmsg.c | 26 +- net/rxrpc/rxperf.c | 10 +- net/rxrpc/security.c | 4 +- net/rxrpc/sendmsg.c | 8 +- net/rxrpc/txbuf.c | 4 +- net/sched/act_tunnel_key.c | 14 +- net/sctp/auth.c | 2 +- net/sctp/protocol.c | 21 +- net/sctp/sm_make_chunk.c | 6 + net/sctp/sm_statefuns.c | 2 +- net/sctp/stream.c | 6 +- net/sctp/sysctl.c | 9 +- net/sunrpc/svcsock.c | 51 +- net/sunrpc/xdr.c | 210 ++- net/sunrpc/xprtrdma/rpc_rdma.c | 4 + net/sunrpc/xprtrdma/verbs.c | 12 +- net/tipc/netlink.c | 6 +- net/tipc/netlink_compat.c | 4 + net/tipc/socket.c | 7 +- net/tls/tls_device.c | 6 +- net/vmw_vsock/virtio_transport_common.c | 165 ++- net/wireless/chan.c | 7 +- net/wireless/core.c | 46 +- net/wireless/core.h | 3 +- net/wireless/mlme.c | 8 +- net/wireless/nl80211.c | 251 ++-- net/wireless/pmsr.c | 29 +- net/wireless/rdev-ops.h | 5 +- net/wireless/reg.c | 53 +- net/wireless/scan.c | 47 +- net/wireless/sme.c | 12 +- net/wireless/trace.h | 10 +- net/wireless/util.c | 7 +- net/wireless/wext-compat.c | 317 ++--- net/wireless/wext-sme.c | 43 +- net/x25/af_x25.c | 8 +- net/xfrm/xfrm_nat_keepalive.c | 45 +- net/xfrm/xfrm_policy.c | 4 +- rust/bindings/lib.rs | 4 + rust/uapi/lib.rs | 4 + security/landlock/fs.c | 51 +- security/landlock/fs.h | 33 +- security/landlock/task.c | 36 +- sound/core/seq/seq_timer.c | 13 +- sound/core/timer.c | 21 +- sound/hda/hdac_regmap.c | 4 +- sound/pci/hda/cs35l41_hda.c | 13 +- sound/pci/hda/patch_conexant.c | 3 - sound/soc/amd/ps/pci-ps.c | 2 +- sound/soc/codecs/bt-sco.c | 10 +- sound/soc/codecs/cs35l56-i2c.c | 4 +- sound/soc/codecs/cs35l56-spi.c | 4 +- sound/soc/codecs/cs35l56.c | 25 +- sound/soc/codecs/cs42l43-jack.c | 3 +- sound/soc/codecs/tas2562.c | 5 +- sound/soc/codecs/tas2781-fmwlib.c | 63 +- sound/soc/fsl/fsl_sai.c | 29 +- sound/soc/mediatek/mt8183/mt8183-afe-pcm.c | 300 ++--- sound/soc/mediatek/mt8192/mt8192-afe-pcm.c | 27 +- sound/soc/meson/aiu-fifo-spdif.c | 5 + sound/usb/quirks.c | 2 + tools/objtool/check.c | 1 + tools/testing/selftests/alsa/mixer-test.c | 1 + .../testing/selftests/bpf/progs/verifier_ld_ind.c | 142 +++ tools/testing/selftests/ftrace/ftracetest | 1 + tools/testing/selftests/net/af_unix/config | 1 + tools/testing/selftests/net/openvswitch/config | 16 + 715 files changed, 11519 insertions(+), 7953 deletions(-)

3 months

Re: [PATCH 7.1 000/744] 7.1.6-rc1 review

by Markus Reichelt

* Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> wrote: > This is the start of the stable review cycle for the 7.1.6 release. > There are 744 patches in this series, all will be posted as a response > to this one. If anyone has any issues with these being applied, please > let me know. > > Responses should be made by Sat, 01 Aug 2026 14:13:38 +0000. > Anything received after that time might be too late. Hi Greg 7.1.6-rc1 compiles on x86_64 (Xeon E5-1620 v2, Slackware64-15.0), and boots & runs on x86_64 (AMD Ryzen 5 7520U, Slackware64-current). No regressions observed during boot & my custom tests. Tested-by: Markus Reichelt <lkt+2023(a)mareichelt.com>

3 months

[PATCH 7.1 0000/2079] 7.1.5-rc2 review

by Greg Kroah-Hartman

This is the start of the stable review cycle for the 7.1.5 release. There are 2079 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know. Responses should be made by Fri, 24 Jul 2026 14:26:57 +0000. Anything received after that time might be too late. The whole patch series can be found in one patch at: https://www.kernel.org/pub/linux/kernel/v7.x/stable-review/patch-7.1.5-rc2.… or in the git tree and branch at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-7.1.y and the diffstat can be found below. thanks, greg k-h ------------- Pseudo-Shortlog of commits: Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> Linux 7.1.5-rc2 Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> Revert "gpib: cb7210: Fix region leak when request_irq fails" Thomas Gleixner <tglx(a)kernel.org> posix-cpu-timers: Prevent UAF caused by non-leader exec() race Thomas Gleixner <tglx(a)kernel.org> posix-timers: Expand timer_[re]arm() callbacks with a boolean return value Dillon Varone <Dillon.Varone(a)amd.com> drm/amd/display: Fix Color Manager (3DLUT, Shaper, Blend) Christoph Hellwig <hch(a)lst.de> iomap: consolidate bio submission Namjae Jeon <linkinjeon(a)kernel.org> exfat: fix implicit declaration of brelse() Namjae Jeon <linkinjeon(a)kernel.org> exfat: add data_start_bytes and exfat_cluster_to_phys_bytes() helper Namjae Jeon <linkinjeon(a)kernel.org> exfat: add balloc parameter to exfat_map_cluster() for iomap support Namjae Jeon <linkinjeon(a)kernel.org> exfat: replace unsafe macros with static inline functions Eric Biggers <ebiggers(a)kernel.org> crypto: xilinx-trng - Remove crypto_rng interface Pratyush Yadav (Google) <pratyush(a)kernel.org> liveupdate: validate session type before performing operation Mauricio Faria de Oliveira <mfo(a)igalia.com> usb: atm: ueagle-atm: wait for pre-firmware load in .disconnect() Mauricio Faria de Oliveira <mfo(a)igalia.com> usb: atm: ueagle-atm: remove function entry/exit debug messages Mauricio Faria de Oliveira <mfo(a)igalia.com> usb: atm: ueagle-atm: use dev_dbg() for 'device found' message Christoph Hellwig <hch(a)lst.de> xfs: add newly added RTGs to the free pool in growfs Christoph Hellwig <hch(a)lst.de> xfs: factor out a xfs_zone_mark_free helper Namjae Jeon <linkinjeon(a)kernel.org> ksmbd: use opener credentials for FSCTL mutations ChenXiaoSong <chenxiaosong(a)kylinos.cn> smb: move compression definitions into common/fscc.h Davide Ornaghi <d.ornaghi97(a)gmail.com> ksmbd: fix path resolution in ksmbd_vfs_kern_path_create Siwei Zhang <oss(a)fourdim.xyz> Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_new_connection_cb() Pauli Virtanen <pav(a)iki.fi> Bluetooth: 6lowpan: fix cyclic locking warning on netdev unregister Chris Mason <clm(a)meta.com> binder: cache secctx size before release zeroes it Jisheng Zhang <jszhang(a)kernel.org> binder: Use LIST_HEAD() to initialize on stack list head Cássio Gabriel <cassiogabrielcontato(a)gmail.com> ALSA: hda/tas2781: Cancel async firmware request at unbind Cássio Gabriel <cassiogabrielcontato(a)gmail.com> firmware_loader: Add cancel helper for async requests Geoffrey D. Bennett <g(a)b4.vu> ALSA: scarlett2: Update offsets for 2i2 Gen 4 firmware 2417 Geoffrey D. Bennett <g(a)b4.vu> ALSA: scarlett2: Allow selecting config_set by firmware version Zhang Lixu <lixu.zhang(a)intel.com> iio: hid-sensor-rotation: Fix stale or zero output when reading raw values Keshav Verma <iganschel(a)gmail.com> f2fs: fix listxattr handling of corrupted xattr entries Chao Yu <chao(a)kernel.org> f2fs: fix potential deadlock in gc_merge path of f2fs_balance_fs() Ruipeng Qi <ruipengqi3(a)gmail.com> f2fs: fix potential deadlock in f2fs_balance_fs() Bartosz Golaszewski <bartosz.golaszewski(a)oss.qualcomm.com> device property: initialize the remaining fields of fwnode_handle in fwnode_init() Zenghui Yu <yuzenghui(a)huawei.com> samples/damon/mtier: fail early if address range parameters are invalid SeongJae Park <sj(a)kernel.org> mm/damon/core: trace esz at first setup Sun Jian <sun.jian.kdev(a)gmail.com> bpf: Reject negative const offsets for buffer pointers Luke Wang <ziniu.wang_1(a)nxp.com> mmc: sdhci-esdhc-imx: fix resume error handling Luke Wang <ziniu.wang_1(a)nxp.com> mmc: sdhci-esdhc-imx: make non-fatal errors non-blocking in suspend Luke Wang <ziniu.wang_1(a)nxp.com> mmc: sdhci-esdhc-imx: use pm_runtime_resume_and_get() in suspend Luke Wang <ziniu.wang_1(a)nxp.com> mmc: sdhci-esdhc-imx: disable irq during suspend to fix unhandled interrupt Luke Wang <ziniu.wang_1(a)nxp.com> mmc: sdhci-esdhc-imx: fix esdhc_change_pinstate() to allow default state restore Luke Wang <ziniu.wang_1(a)nxp.com> mmc: sdhci-esdhc-imx: restore DLL override for DDR modes on resume Luke Wang <ziniu.wang_1(a)nxp.com> mmc: sdhci-esdhc-imx: remove unnecessary mmc_card_wake_sdio_irq check for tuning save/restore Sergey Shtylyov <s.shtylyov(a)auroraos.dev> mmc: sdhci-of-dwcmshc: check bus clock enable result in the probe() method Lad Prabhakar <prabhakar.mahadev-lad.rj(a)bp.renesas.com> mmc: mmc_test: Fix __counted_by handling after kzalloc_flex() conversion Ao Sun <ao.sun(a)transsion.com> mmc: block: fix RPMB device unregister ordering Pengpeng Hou <pengpeng(a)iscas.ac.cn> mtd: rawnand: lpc32xx_slc: fail DMA transfer on completion timeout Pengpeng Hou <pengpeng(a)iscas.ac.cn> mtd: rawnand: lpc32xx_mlc: fail DMA transfers on timeout Pengpeng Hou <pengpeng(a)iscas.ac.cn> mtd: rawnand: fsl_ifc: return errors for failed page reads Runyu Xiao <runyu.xiao(a)seu.edu.cn> mmc: vub300: defer reset until cmd_mutex is unlocked Pengpeng Hou <pengpeng(a)iscas.ac.cn> mtd: mchp23k256: use SPI match data for chip caps Pengpeng Hou <pengpeng(a)iscas.ac.cn> mtd: onenand: samsung: report DMA completion timeouts Xu Rao <raoxu(a)uniontech.com> mtd: virt-concat: free duplicate generated name Rafael Beims <rafael.beims(a)toradex.com> wifi: mwifiex: fix permanently busy scans after multiple roam iterations Zhao Li <enderaoelyther(a)gmail.com> wifi: mac80211: validate extension-frame layout before RX Zhiling Zou <roxy520tt(a)gmail.com> wifi: mac80211: free ack status frame on TX header build failure Zhao Li <enderaoelyther(a)gmail.com> wifi: ieee80211: validate MLE common info length Haofeng Li <lihaofeng(a)kylinos.cn> wifi: cfg80211: validate EHT MLE before MLD ID read Ethan Nelson-Moore <enelsonmoore(a)gmail.com> powerpc/uaccess: correct check for CONFIG_PPC_E500 in mask_user_address() Junrui Luo <moonafterrain(a)outlook.com> powerpc/spufs: fix out-of-bounds access in spufs_mem_mmap_access() Zhao Dongdong <zhaodongdong(a)kylinos.cn> reset: sunxi: fix memory region leak on ioremap failure Robby Cai <robby.cai(a)nxp.com> reset: imx7: Correct polarity of MIPI CSI resets on i.MX8MQ Florian Westphal <fw(a)strlen.de> ipvs: reload ip header after head reallocation Julian Anastasov <ja(a)ssi.bg> ipvs: fix more places with wrong ipv6 transport offsets Maoyi Xie <maoyixie.tju(a)gmail.com> memstick: ms_block: reject a card that reports too many blocks James Raphael Tiovalen <jamestiotio(a)gmail.com> macsec: fix promiscuity refcount leak in macsec_dev_open() Xuanqiang Luo <luoxuanqiang(a)kylinos.cn> llc: fix SAP refcount leak when creating incoming sockets Eric Biggers <ebiggers(a)kernel.org> crypto: aes - Fix conditions for selecting MAC dependencies Laxman Acharya Padhya <acharyalaxman8848(a)gmail.com> Bluetooth: btrtl: validate firmware patch bounds Asim Viladi Oglu Manizada <manizada(a)pm.me> net: openvswitch: reject oversized nested action attrs Abhishek Ojha <Abhishek.ojha(a)savoirfairelinux.com> regulator: ltc3676: Fix incorrect IRQSTAT bit offsets Aurelien Jarno <aurelien(a)aurel32.net> arch/riscv: vdso: remove CFI landing pad from rt_sigreturn Thomas Weißschuh <thomas.weissschuh(a)linutronix.de> riscv: vdso: Do not use LTO for the vDSO Maoyi Xie <maoyixie.tju(a)gmail.com> wifi: brcmfmac: cyw: fix heap overflow on a short auth frame Dawei Feng <dawei.feng(a)seu.edu.cn> wifi: mac80211: fix memory leak in ieee80211_register_hw() Rafael Beims <rafael.beims(a)toradex.com> wifi: mwifiex: fix roaming to different channel in host_mlme mode Runyu Xiao <runyu.xiao(a)seu.edu.cn> wifi: rt2x00: avoid full teardown before work setup in probe Zhiping Zhang <zhipingz(a)meta.com> net/mlx5: free mlx5_st_idx_data on final dealloc Thorsten Blum <thorsten.blum(a)linux.dev> powerpc/pseries: fix memory leak on krealloc failure in papr_init Luke Wang <ziniu.wang_1(a)nxp.com> mmc: sdhci-esdhc-imx: restore pinctrl before restoring ios timing on resume Thomas Huth <thuth(a)redhat.com> selftests/landlock: Fix screwed up pointers in the scoped_signal_test Thomas Huth <thuth(a)redhat.com> selftests/landlock: Skip scoped_signal subtest with MSG_OOB if not available Peng Fan <peng.fan(a)nxp.com> pmdomain: imx: Fix i.MX8MP VC8000E power up sequence Peng Fan <peng.fan(a)nxp.com> pmdomain: imx: Fix i.MX8MP power notifier AngeloGioacchino Del Regno <angelogioacchino.delregno(a)collabora.com> pmdomain: mediatek: Fix possible nullptr KP in HWV cleanup/on-check Guoniu Zhou <guoniu.zhou(a)oss.nxp.com> pmdomain: imx93-blk-ctrl: Extract PHY as shared domain for DSI/CSI Farhad Alemi <farhad.alemi(a)berkeley.edu> cgroup/cpuset: rebind mm mempolicy to effective_mems, not mems_allowed Hui Wang <hui.wang(a)canonical.com> selftests/rseq: Fix a building error for riscv arch Gerald Schaefer <gerald.schaefer(a)linux.ibm.com> s390/mm: Fix type mismatch in get_align_mask(). Heiko Carstens <hca(a)linux.ibm.com> s390/diag: Add missing array_index_nospec() call to memtop_get_page_count() Crystal Wood <crwood(a)redhat.com> tracing/osnoise: Call synchronize_rcu() when unregistering Tao Liu <ltao(a)redhat.com> riscv: Prevent NULL pointer dereference in machine_kexec_prepare() Michael Bommarito <michael.bommarito(a)gmail.com> drbd: reject data replies with an out-of-range payload size TJ Adams <tadamsjr(a)google.com> ata: libata-core: Allow capacity transition to zero for locked drives TJ Adams <tadamsjr(a)google.com> ata: libata-core: Skip HPA resize for locked drives Reinette Chatre <reinette.chatre(a)intel.com> fs/resctrl: Fix double-add of pseudo-locked region's RMID to free list Tony Luck <tony.luck(a)intel.com> fs/resctrl: Free mon_data structures on rdt_get_tree() failure Jinjie Ruan <ruanjinjie(a)huawei.com> cpu/hotplug: Fix NULL kobject warning in cpuhp_smt_enable() Jinjie Ruan <ruanjinjie(a)huawei.com> arm64: smp: Fix hot-unplug tearing by forcing unregistration Zhu Lingshan <lingshan.zhu(a)amd.com> amdkfd: properly free secondary context id Théo Lebrun <theo.lebrun(a)bootlin.com> net: macb: drop in-flight Tx SKBs on close Dust Li <dust.li(a)linux.alibaba.com> dibs: loopback: validate offset and size in move_data() Daehyeon Ko <4ncienth(a)gmail.com> macsec: don't read an unset MAC header in macsec_encrypt() Yizhou Zhao <zhaoyz24(a)mails.tsinghua.edu.cn> ipvs: reset full ip_vs_seq structs in ip_vs_conn_new Yizhou Zhao <zhaoyz24(a)mails.tsinghua.edu.cn> ipvs: use parsed transport offset in SCTP state lookup Shuangpeng Bai <shuangpeng.kernel(a)gmail.com> llc: fix SAP refcount leak in llc_ui_autobind() Nirmoy Das <nirmoyd(a)nvidia.com> selftests: net: make busywait timeout clock portable Dawei Feng <dawei.feng(a)seu.edu.cn> octeontx2-pf: fix SQB pointer leak on init failure Yousef Alhouseen <alhouseenyousef(a)gmail.com> mac802154: remove interfaces with RCU list deletion Gerald Schaefer <gerald.schaefer(a)linux.ibm.com> s390/monwriter: Reject buffer reuse with different data length Haoxiang Li <haoxiang_li2024(a)163.com> irqchip/irq-riscv-imsic-early: Fix fwnode leak on state setup failure Zi Yan <ziy(a)nvidia.com> mm/compaction: handle free_pages_prepare() properly in compaction_free() Martin Kaiser <martin(a)kaiser.cx> riscv: probes: save original sp in rethook trampoline HyeongJun An <sammiee5311(a)gmail.com> hwmon: (asus_atk0110) Check package count before accessing element Haoxiang Li <haoxiang_li2024(a)163.com> net: ipa: fix SMEM state handle leaks in SMP2P init Maoyi Xie <maoyixie.tju(a)gmail.com> net: wwan: iosm: bound device offsets in the MUX downlink decoder Bryam Vargas <hexlabsecurity(a)proton.me> ata: libata-core: Reject an invalid concurrent positioning ranges count Wentao Liang <vulab(a)iscas.ac.cn> ata: pata_pxa: Fix DMA channel leak on probe error Bryam Vargas <hexlabsecurity(a)proton.me> ata: libata-core: Add NOLPM quirk for PNY CS900 1TB SSD Dawei Feng <dawei.feng(a)seu.edu.cn> net/mlx5: HWS, fix matcher leak on resize target setup failure Bryam Vargas <hexlabsecurity(a)proton.me> orangefs: keep the readdir entry size 64-bit in fill_from_part() Masami Hiramatsu (Google) <mhiramat(a)kernel.org> tracing/probes: Fix double addition of offset for @+FOFFSET Joshua Crofts <joshua.crofts1(a)gmail.com> hwmon: (max1619) add missing 'select REGMAP' to Kconfig David Lee <david.lee(a)trailofbits.com> fhandle: reject detached mounts in capable_wrt_mount() Bryam Vargas <hexlabsecurity(a)proton.me> net/sched: sch_taprio: Replace direct dequeue call with peek and qdisc_dequeue_peeked Bryam Vargas <hexlabsecurity(a)proton.me> net/sched: sch_multiq: Replace direct dequeue call with peek and qdisc_dequeue_peeked Andrea Righi <arighi(a)nvidia.com> net: lan743x: Initialize eth_syslock spinlock before use Haoxiang Li <haoxiang_li2024(a)163.com> fsl/fman: Free init resources on KeyGen failure in fman_init() Runyu Xiao <runyu.xiao(a)seu.edu.cn> hwmon: (occ) unregister sysfs devices outside occ lock Xu Rao <raoxu(a)uniontech.com> ACPI: TAD: Check AC wake capability before enabling wakeup Haoxiang Li <haoxiang_li2024(a)163.com> net: liquidio: fix BAR resource leak on PF number failure Pengpeng Hou <pengpeng(a)iscas.ac.cn> hwmon: (w83793) remove vrm sysfs file on probe failure Pengpeng Hou <pengpeng(a)iscas.ac.cn> hwmon: (w83627hf) remove VID sysfs files on error and remove Conor Dooley <conor.dooley(a)microchip.com> rtc: mpfs: fix counter upload completion condition Eric Biggers <ebiggers(a)kernel.org> fscrypt: Replace mk_users keyring with simple list Lad Prabhakar <prabhakar.mahadev-lad.rj(a)bp.renesas.com> rtc: renesas-rtca3: Fix PIE clear polling condition in alarm setup error path Abdun Nihaal <nihaal(a)cse.iitm.ac.in> bnx2x: fix potential memory leak in bnx2x_alloc_mem_bp() Wentao Liang <vulab(a)iscas.ac.cn> ipmi: fix refcount leak in i_ipmi_request() Sabrina Dubroca <sd(a)queasysnail.net> espintcp: use sk_msg_free_partial to fix partial send Matt Fleming <mfleming(a)cloudflare.com> ipmi: Fix user refcount underflow in event delivery Hongchen Zhang <zhanghongchen(a)loongson.cn> LoongArch: Fix missing dirty page tracking in {pte,pmd}_wrprotect() Xuewen Wang <wangxuewen(a)kylinos.cn> LoongArch: Fix nr passing in set_direct_map_valid_noflush() Biju Das <biju.das.jz(a)bp.renesas.com> pwm: rzg2l-gpt: Fix period_ticks type from u32 to u64 Thomas Weißschuh <thomas.weissschuh(a)linutronix.de> riscv: vdso: Always declare vdso_start symbols Marc Zyngier <maz(a)kernel.org> KVM: arm64: Fix propagation of TLBI level in kvm_pgtable_stage2_relax_perms() Pablo Neira Ayuso <pablo(a)netfilter.org> netfilter: nfnetlink_cthelper: cap to maximum number of expectation per master on updates Shuicheng Lin <shuicheng.lin(a)intel.com> drm/xe/userptr: Stub notifier_lock helpers when DRM_GPUSVM=n Rafael J. Wysocki <rafael.j.wysocki(a)intel.com> ACPICA: Define acpi_ut_safe_strncpy() as strscpy_pad() alias Jamal Hadi Salim <jhs(a)mojatatu.com> net/sched: sch_teql: move rcu_read_lock()/spin_lock() from _bh variants Daniel Gibson <daniel(a)gibson.sh> platform/x86/amd/pmc: Avoid logging "(null)" for DMI values Pablo Neira Ayuso <pablo(a)netfilter.org> netfilter: nfnetlink_cthelper: cap to maximum number of expectation per master Gil Portnoy <dddhkts1(a)gmail.com> ksmbd: fix stack buffer overflow in multichannel session-key copy Junrui Luo <moonafterrain(a)outlook.com> octeontx2-af: cn10k: restrict VF LMTLINE sharing to its own PF Ankit Garg <nktgrg(a)google.com> gve: fix header buffer corruption with header-split and HW-GRO Shitalkumar Gandhi <shital.gandhi45(a)gmail.com> ieee802154: ca8210: fix pointer truncation in kfifo on 64-bit Shitalkumar Gandhi <shital.gandhi45(a)gmail.com> ieee802154: ca8210: fix cas_ctl leak on spi_async failure Michael Bommarito <michael.bommarito(a)gmail.com> ieee802154: allow legacy LLSEC ADD/DEL ops to pass strict validation Michael Bommarito <michael.bommarito(a)gmail.com> ieee802154: admin-gate legacy LLSEC dump operations Haoxiang Li <haoxiang_li2024(a)163.com> octeontx2-af: Free BPID bitmap on setup failure Maoyi Xie <maoyixie.tju(a)gmail.com> net: ip6_tunnel: require CAP_NET_ADMIN in the device netns for changelink Maoyi Xie <maoyixie.tju(a)gmail.com> net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink Maoyi Xie <maoyixie.tju(a)gmail.com> net: ipip: require CAP_NET_ADMIN in the device netns for changelink Maoyi Xie <maoyixie.tju(a)gmail.com> net: ip_vti: require CAP_NET_ADMIN in the device netns for changelink Maoyi Xie <maoyixie.tju(a)gmail.com> net: ip6_vti: require CAP_NET_ADMIN in the device netns for changelink Dawei Feng <dawei.feng(a)seu.edu.cn> net: ena: clean up XDP TX queues when regular TX setup fails Ross Porter <ross.porter(a)canonical.com> selftests: net: fix file owner for broadcast_ether_dst test Zihan Xi <xizh2024(a)lzu.edu.cn> net/sched: act_ct: preserve tc_skb_cb across defragmentation Haoxiang Li <haoxiang_li2024(a)163.com> net: ixp4xx_hss: fix duplicate HDLC netdev allocation Haoxiang Li <haoxiang_li2024(a)163.com> net: wwan: t7xx: destroy DMA pool on CLDMA late init failure Philippe Schenker <philippe.schenker(a)impulsing.ch> net: ethernet: ti: icssg: guard PA stat lookups Maoyi Xie <maoyixie.tju(a)gmail.com> net: sit: require CAP_NET_ADMIN in the device netns for changelink Andreas Kemnade <andreas(a)kemnade.info> gpios: palmas: add .get_direction() op Sergio Paracuellos <sergio.paracuellos(a)gmail.com> gpio: mt7621: avoid corruption of shared interrupt trigger state Paul Louvel <paul.louvel(a)bootlin.com> gpio-f7188x: Add support for NCT6126D version B Sergio Paracuellos <sergio.paracuellos(a)gmail.com> gpio: mt7621: be sure IRQ domain is created before exposing GPIO chips Runyu Xiao <runyu.xiao(a)seu.edu.cn> gpio: tegra: do not call pinctrl for GPIO direction Sergio Paracuellos <sergio.paracuellos(a)gmail.com> gpio: mt7621: more robust management of IRQ domain teardown Dexuan Cui <decui(a)microsoft.com> net: mana: Sync page pool RX frags for CPU Dexuan Cui <decui(a)microsoft.com> net: mana: Validate the packet length reported by the NIC Bradley Morgan <include(a)grrlz.net> cpu: hotplug: Bound hotplug states sysfs output Bradley Morgan <include(a)grrlz.net> cpu: hotplug: Preserve per instance callback errors Cao Ruichuang <create0818(a)163.com> selftests/ftrace: Drop invalid top-level local in test_ownership Zhan Xusheng <zhanxusheng1024(a)gmail.com> posix-cpu-timers: Use u64 multiplication in update_rlimit_cpu() Thomas Gleixner <tglx(a)kernel.org> locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() Maoyi Xie <maoyixie.tju(a)gmail.com> wifi: libertas_tf: fix use-after-free in lbtf_free_adapter() Michael Bommarito <michael.bommarito(a)gmail.com> tracing/user_events: Fix use-after-free in user_event_mm_dup() Doruk Tan Ozturk <doruk(a)0sec.ai> net/mlx5e: macsec: fix use-after-free of metadata_dst on RX SC delete Guangshuo Li <lgs201920130244(a)gmail.com> mmc: vub300: fix use-after-free on probe failure Dmitry Torokhov <dmitry.torokhov(a)gmail.com> Input: ims-pcu - fix type confusion in CDC union descriptor parsing Dmitry Torokhov <dmitry.torokhov(a)gmail.com> Input: ims-pcu - fix race condition in reset_device sysfs callback Dmitry Torokhov <dmitry.torokhov(a)gmail.com> Input: ims-pcu - fix potential infinite loop in CDC union descriptor parsing Dmitry Torokhov <dmitry.torokhov(a)gmail.com> Input: ims-pcu - fix out-of-bounds read in ims_pcu_irq() debug logging Dmitry Torokhov <dmitry.torokhov(a)gmail.com> Input: ims-pcu - fix logic error in packet reset Dmitry Torokhov <dmitry.torokhov(a)gmail.com> Input: ims-pcu - fix firmware leak in async update Dmitry Torokhov <dmitry.torokhov(a)gmail.com> Input: ims-pcu - fix DMA mapping violation in line setup Dmitry Torokhov <dmitry.torokhov(a)gmail.com> Input: ims-pcu - add response length checks Dmitry Torokhov <dmitry.torokhov(a)gmail.com> Input: ims-pcu - validate control endpoint type Dmitry Torokhov <dmitry.torokhov(a)gmail.com> Input: ims-pcu - release data interface on disconnect Dmitry Torokhov <dmitry.torokhov(a)gmail.com> Input: ims-pcu - only expose sysfs attributes on control interface Dmitry Torokhov <dmitry.torokhov(a)gmail.com> Input: ims-pcu - fix use-after-free and double-free in disconnect Tony Luck <tony.luck(a)intel.com> fs/resctrl: Fix use-after-free during unmount Haoxiang Li <haoxiang_li2024(a)163.com> scsi: elx: efct: Fix I/O leak on unsupported additional CDB WenTao Liang <vulab(a)iscas.ac.cn> scsi: elx: efct: Fix refcount leak in efct_hw_io_abort() Bryam Vargas <hexlabsecurity(a)proton.me> scsi: target: core: Fix iSCSI ISID use-after-free in REGISTER AND MOVE Bryam Vargas <hexlabsecurity(a)proton.me> scsi: target: Bound PR-OUT TransportID parsing to the received buffer Michael Bommarito <michael.bommarito(a)gmail.com> scsi: xen: scsiback: Free unsubmitted command instead of double-putting it Michael Bommarito <michael.bommarito(a)gmail.com> scsi: xen: scsiback: Free the command tag on the TMR submit-failure path Xu Rao <raoxu(a)uniontech.com> scsi: sg: Report request-table problems when any status is set Abdun Nihaal <nihaal(a)cse.iitm.ac.in> scsi: lpfc: Fix memory leak in lpfc_sli4_driver_resource_setup() Haoxiang Li <haoxiang_li2024(a)163.com> scsi: hpsa: Fix DMA mapping leak on IOACCEL2 reset path Jhonraushan <raushan.jhon(a)gmail.com> accel/ivpu: Reject firmware log with size smaller than header Shuvam Pandey <shuvampandey1(a)gmail.com> accel/amdxdna: Use caller client for debug BO sync Doruk Tan Ozturk <doruk(a)0sec.ai> accel/amdxdna: reject user command submission without a command BO Doruk Tan Ozturk <doruk(a)0sec.ai> accel/amdxdna: reject command submission on devices without a submit op Wentao Liang <vulab(a)iscas.ac.cn> accel/amdxdna: Fix use-after-free in amdxdna_gem_dmabuf_mmap() Philipp Stanner <phasta(a)kernel.org> dma-buf: dma-fence: Fix potential NULL pointer dereference André Draszik <andre.draszik(a)linaro.org> dma-fence: use correct callback in dma_fence_timeline_name() Baineng Shou <shoubaineng(a)gmail.com> dma-fence: Make dma_fence_dedup_array() robust against 0-count input Mikulas Patocka <mpatocka(a)redhat.com> dm-verity: make error counter atomic Mikulas Patocka <mpatocka(a)redhat.com> dm-verity: increase sprintf buffer size Mikulas Patocka <mpatocka(a)redhat.com> dm-verity: fix a possible NULL pointer dereference Mikulas Patocka <mpatocka(a)redhat.com> dm-verity: avoid double increment of &use_bh_wq_enabled Mikulas Patocka <mpatocka(a)redhat.com> dm-verity: fix buffer overflow in FEC calculation Mikulas Patocka <mpatocka(a)redhat.com> dm-integrity: don't increment hash_offset twice Mikulas Patocka <mpatocka(a)redhat.com> dm-integrity: fix a bug if the bio is out of limits Mikulas Patocka <mpatocka(a)redhat.com> dm-integrity: fix leaking uninitialized kernel memory Mikulas Patocka <mpatocka(a)redhat.com> dm_early_create: fix freeing used table on dm_resume failure Ingo Blechschmidt <iblech(a)speicherleck.de> dm: avoid leaking the caller's thread keyring via the table device file Mikulas Patocka <mpatocka(a)redhat.com> dm-stats: fix merge accounting Mikulas Patocka <mpatocka(a)redhat.com> dm-stats: fix dm_jiffies_to_msec64 Samuel Moelius <sam.moelius(a)trailofbits.com> dm-pcache: reject option groups without values Benjamin Marzinski <bmarzins(a)redhat.com> dm-log: fix a bitset_size overflow on 32bit machines Mikulas Patocka <mpatocka(a)redhat.com> dm-ioctl: fix a possible overflow in list_version_get_info Mikulas Patocka <mpatocka(a)redhat.com> dm-bufio: fix wrong count calculation in dm_bufio_issue_discard Samuel Moelius <sam.moelius(a)trailofbits.com> dm era: fix out-of-bounds memory access for non-zero start sector Ming-Hung Tsai <mtsai(a)redhat.com> dm thin metadata: fix metadata snapshot consistency on commit failure Genjian Zhang <zhanggenjian(a)kylinos.cn> dm thin metadata: fix superblock refcount leak on snapshot shadow failure Haoxiang Li <haoxiang_li2024(a)163.com> net: sparx5: unregister blocking notifier on init failure Yitang Yang <yi1tang.yang(a)gmail.com> block: fix IORING_URING_CMD_REISSUE flags check in blkdev_uring_cmd Mike Waychison <mike(a)waychison.com> block: fix race in blk_time_get_ns() returning 0 Connor Williamson <connordw(a)amazon.com> block: remove redundant GD_NEED_PART_SCAN in add_disk_final() Sun Jian <sun.jian.kdev(a)gmail.com> selftests/bpf: Cover negative buffer pointer offsets Jiri Olsa <jolsa(a)kernel.org> bpf: Add missing access_ok call to copy_user_syms Jann Horn <jannh(a)google.com> bpf,fork: wipe ->bpf_storage before bailouts that access it Tristan Madani <tristan(a)talencesecurity.com> bpf: Reset register bounds before narrowing retval range in check_mem_access() Woraphat Khiaodaeng <worapat.kd2(a)gmail.com> io_uring/bpf-ops: reject re-registration of an already-bound ops Oliver Hartkopp <socketcan(a)hartkopp.net> can: bcm: add missing device refcount for CAN filter removal Oliver Hartkopp <socketcan(a)hartkopp.net> can: bcm: validate frame length in bcm_rx_setup() for RTR replies Oliver Hartkopp <socketcan(a)hartkopp.net> can: bcm: track a single source interface for ANYDEV timeout/throttle ops Oliver Hartkopp <socketcan(a)hartkopp.net> can: bcm: fix stale rx/tx ops after device removal Oliver Hartkopp <socketcan(a)hartkopp.net> can: bcm: fix data race on rx_stamp/rx_ifindex in bcm_rx_handler() Oliver Hartkopp <socketcan(a)hartkopp.net> can: bcm: fix CAN frame rx/tx statistics Oliver Hartkopp <socketcan(a)hartkopp.net> can: bcm: extend bcm_tx_lock usage for data and timer updates Oliver Hartkopp <socketcan(a)hartkopp.net> can: bcm: add missing rcu list annotations and operations Oliver Hartkopp <socketcan(a)hartkopp.net> can: bcm: add locking when updating filter and timer values Oliver Hartkopp <socketcan(a)hartkopp.net> can: bcm: fix lockless bound/ifindex race and silent RX_SETUP failure Lee Jones <lee(a)kernel.org> can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF Oliver Hartkopp <socketcan(a)hartkopp.net> can: isotp: serialize TX state transitions under so->rx_lock Oliver Hartkopp <socketcan(a)hartkopp.net> can: isotp: fix use-after-free race with concurrent NETDEV_UNREGISTER Oliver Hartkopp <socketcan(a)hartkopp.net> can: isotp: use unconditional synchronize_rcu() in isotp_release() Fan Wu <fanwu01(a)zju.edu.cn> can: esd_usb: kill anchored URBs before freeing netdevs Souvik Banerjee <souvik(a)amlalabs.com> ovl: use linked upper dentry in copy-up tmpfile Maoyi Xie <maoyixie.tju(a)gmail.com> netdev-genl: report NAPI thread PID in the caller's pid namespace Wentao Liang <vulab(a)iscas.ac.cn> nvmet: fix refcount leak in nvmet_sq_create() Bryam Vargas <hexlabsecurity(a)proton.me> nvmet-rdma: handle inline data with a nonzero offset Michael Bommarito <michael.bommarito(a)gmail.com> nvmet-auth: reject short AUTH_RECEIVE buffers Nick Chan <towinchenmi(a)gmail.com> nvme-apple: Prevent shared tags across queues on Apple A11 Benjamin Coddington <ben.coddington(a)hammerspace.com> NFS: Charge unstable writes by request size, not folio size Weiming Shi <bestswngs(a)gmail.com> sctp: validate STALE_COOKIE cause length before reading staleness Kunihiko Hayashi <hayashi.kunihiko(a)socionext.com> spi: uniphier: Fix completion initialization order before devm_request_irq() Javier Fernandez Pastrana <javier.pastrana(a)linutronix.de> spi: imx: reconfigure for PIO when DMA cannot be started Wang Yan <wangyan01(a)kylinos.cn> time: Fix off-by-one in compat settimeofday() usec validation Jaewon Yang <yong010301(a)gmail.com> tpm: Make the TPM character devices non-seekable Thorsten Blum <thorsten.blum(a)linux.dev> tpm: fix event_size output in tpm1_binary_bios_measurements_show Maoyi Xie <maoyixie.tju(a)gmail.com> xfrm: xfrm_interface: require CAP_NET_ADMIN in the device netns for changelink Sanman Pradhan <psanman(a)juniper.net> xfrm: use compat translator only for u64 alignment mismatch Qianyu Luo <qianyuluo3(a)gmail.com> xfrm: nat_keepalive: avoid double free on send error Wentao Liang <vulab(a)iscas.ac.cn> xen/gntdev: fix error handling in ioctl Steven Rostedt <rostedt(a)goodmis.org> ufs: core: tracing: Do not dereference pointers in TP_printk() Dmitry Safonov <0x7f454c46(a)gmail.com> tcp: Decrement tcp_md5_needed static branch Michael Bommarito <michael.bommarito(a)gmail.com> tcp: defer md5sig_info kfree past RCU grace period in tcp_connect Paul Greenwalt <paul.greenwalt(a)intel.com> ice: fix ice_init_link() error return preventing probe Pei Xiao <xiaopei01(a)kylinos.cn> i2c: spacemit: fix spurious IRQ handling returning IRQ_HANDLED Xuanqiang Luo <luoxuanqiang(a)kylinos.cn> i2c: mlxbf: Fix use-after-free in mlxbf_i2c_init_resource() Roman Vivchar <rva333(a)protonmail.com> i2c: mediatek: fix WRRD for SoCs without auto_restart option Vincent Jardin <vjardin(a)free.fr> i2c: imx: fix locked bus on SMBus block-read of 0 (IRQ) Vincent Jardin <vjardin(a)free.fr> i2c: imx: fix locked bus on SMBus block-read of 0 (atomic) Joshua Crofts <joshua.crofts1(a)gmail.com> hwmon: (max6697) add missing 'select REGMAP_I2C' to Kconfig Joshua Crofts <joshua.crofts1(a)gmail.com> hwmon: (ltc2992) add missing 'select REGMAP_I2C' to Kconfig Ibrahim Hashimov <security(a)auditcode.ai> ksmbd: fix integer overflow in set_file_allocation_info() Fredric Cover <fredric.cover.lkernel(a)gmail.com> smb: client: use kvzalloc() for megabyte buffer in simple fallocate Holger Dengler <dengler(a)linux.ibm.com> pkey: Move keytype check from pkey api to handler Daniel Gibson <daniel(a)gibson.sh> platform/x86/amd/pmc: Don't log during intermediate wakeups Daniel Gibson <daniel(a)gibson.sh> platform/x86/amd/pmc: Add delay_suspend module parameter Daniel Gibson <daniel(a)gibson.sh> platform/x86/amd/pmc: Delay suspend for some Lenovo Laptops Daniel Gibson <daniel(a)gibson.sh> platform/x86/amd/pmc: Check for intermediate wakeup in function Srinivas Pandruvada <srinivas.pandruvada(a)intel.com> platform/x86: ISST: Restore SST-PP control to all domains Krishna Chomal <krishna.chomal108(a)gmail.com> platform/x86: hp-wmi: Add support for Omen 16-ap0xxx (8E35) Krishna Chomal <krishna.chomal108(a)gmail.com> platform/x86: hp-wmi: Add support for Omen 16-ap0xxx (8D26) Haoxiang Li <lihaoxiang(a)isrc.iscas.ac.cn> platform/x86: dell-laptop: fix missing cleanups in init error path ZhaoJinming <zhaojinming(a)uniontech.com> platform/x86/intel/tpmi: use cleanup helpers in mem_write() Claudiu Beznea <claudiu.beznea.uj(a)bp.renesas.com> dmaengine: sh: rz-dmac: Move interrupt request after everything is set up Koichiro Den <den(a)valinux.co.jp> dmaengine: dw-edma-pcie: Reject devices without driver data Claudiu Beznea <claudiu.beznea.uj(a)bp.renesas.com> dmaengine: sh: rz-dmac: Fix incorrect NULL check for list_first_entry() Frank Li <Frank.Li(a)nxp.com> dmaengine: dw-edma: Add spinlock to protect DONE_INT_MASK and ABORT_INT_MASK Kartik Rajput <kkartik(a)nvidia.com> dmaengine: tegra: Fix burst size calculation Hongling Zeng <zenghongling(a)kylinos.cn> sunrpc: fix uninitialized xprt_create_args structure Michael Bommarito <michael.bommarito(a)gmail.com> tpm: tpm2-sessions: wait for async KPP completion in tpm_buf_append_salt Jarkko Sakkinen <jarkko(a)kernel.org> tpm: tpm_tis_spi: Use wait_woken() in wait_for_tmp_stat() Baoli Zhang <baoli.zhang(a)linux.intel.com> tpm: restore timeout for key creation commands Bhargav Joshi <j.bhargav.u(a)gmail.com> irqchip/crossbar: Use correct index in crossbar_domain_free() Yiyang Chen <cyyzero16(a)gmail.com> taskstats: retain dead thread stats in TGID queries Florian Fuchs <fuchsfl(a)gmail.com> mtd: maps: vmu-flash: fix NULL pointer dereference in initialization Stafford Horne <shorne(a)gmail.com> openrisc: Fix jump_label smp syncing Miquel Raynal <miquel.raynal(a)bootlin.com> mtd: rawnand: Pause continuous reads at block boundaries Takahiro Kuwano <takahiro.kuwano(a)infineon.com> mtd: spi-nor: spansion: use die erase for multi-die devices only Miquel Raynal <miquel.raynal(a)bootlin.com> mtd: spi-nor: swp: Improve locking user experience Holger Dengler <dengler(a)linux.ibm.com> s390/pkey: Check length in pkey_pckmo handler implementation Holger Dengler <dengler(a)linux.ibm.com> s390/pkey: Check length in PKEY_VERIFYPROTK ioctl Sebastian Alba Vives <sebasjosue84(a)gmail.com> fpga: microchip-spi: fix zero header_size OOB read in mpf_ops_parse_header() Maoyi Xie <maoyixie.tju(a)gmail.com> net: thunderbolt: Fix frags[] overflow by bounding frame_count Manivannan Sadhasivam <manivannan.sadhasivam(a)oss.qualcomm.com> bus: mhi: ep: Protect mhi_ep_handle_syserr() in the error path Manivannan Sadhasivam <manivannan.sadhasivam(a)oss.qualcomm.com> bus: mhi: host: pci_generic: Fix the physical function check Sebastian Alba Vives <sebasjosue84(a)gmail.com> fpga: dfl: add bounds check in dfh_get_param_size() Michael Bommarito <michael.bommarito(a)gmail.com> ocfs2: reject non-inline dinodes with i_size and zero i_clusters Michael Bommarito <michael.bommarito(a)gmail.com> ocfs2: reject dinodes whose i_rdev disagrees with the file type Michael Bommarito <michael.bommarito(a)gmail.com> ocfs2: reject dinodes with non-canonical i_mode type Joseph Qi <joseph.qi(a)linux.alibaba.com> ocfs2: add journal NULL check in ocfs2_checkpoint_inode() Ian Bridges <icb(a)fastmail.org> ocfs2: fix UBSAN array-index-out-of-bounds in ocfs2_sum_rightmost_rec Ian Bridges <icb(a)fastmail.org> ocfs2: fix NULL h_transaction deref in ocfs2_assure_trans_credits Kyle Zeng <kylebot(a)openai.com> ocfs2: avoid moving extents to occupied clusters Arseniy Krasnov <avkrasnov(a)rulkc.org> mtd: rawnand: fix condition in 'nand_select_target()' Vasiliy Kovalev <kovalev(a)altlinux.org> net/9p: fix infinite loop in p9_client_rpc on fatal signal Bastien Curutchet <bastien.curutchet(a)bootlin.com> mtd: rawnand: pl353: fix probe resource allocation Tristan Madani <tristan(a)talencesecurity.com> ocfs2: use kzalloc for quota recovery bitmap allocation Florian Fuchs <fuchsfl(a)gmail.com> mtd: maps: vmu-flash: fix fault in unaligned fixup Stafford Horne <shorne(a)gmail.com> openrisc: Add full instruction cache invalidate functions Ionut Nechita <ionut.nechita(a)windriver.com> scsi: sas: Skip opt_sectors when DMA reports no real optimization hint Pratyush Yadav (Google) <pratyush(a)kernel.org> kho: make sure scratch size is always aligned by CMA_MIN_ALIGNMENT_BYTES Martin Wilck <martin.wilck(a)suse.com> scsi: smartpqi: Use shost_to_hba() in pqi_scan_finished() Alexey Charkov <alchark(a)flipper.net> power: supply: bq257xx: Fix VSYSMIN clamping logic Breno Leitao <leitao(a)debian.org> 9p: skip nlink update in cacheless mode to fix WARN_ON Ruoyu Wang <ruoyuw560(a)gmail.com> mtd: slram: remove failed entries from the device list Karl Mehltretter <kmehltretter(a)gmail.com> kcov: use WRITE_ONCE() for selftest mode stores Muchun Song <muchun.song(a)linux.dev> mm/mm_init: fix uninitialized struct pages for ZONE_DEVICE Amit Machhiwal <amachhiw(a)linux.ibm.com> powerpc/dt_cpu_ftrs: Set CPU_FTR_P11_PVR for Power11 and later processors Jinjiang Tu <tujinjiang(a)huawei.com> fs/proc: fix KPF_KSM reported for all anonymous pages Krzysztof Wilczyński <kwilczynski(a)kernel.org> proc: only bump parent nlink when registering directories Dev Jain <dev.jain(a)arm.com> fs/proc/task_mmu: do not warn on seeing non-migration pmd entry Kiryl Shutsemau (Meta) <kas(a)kernel.org> fs/proc/task_mmu: use huge_page_size() in pagemap_scan_hugetlb_entry() Kiryl Shutsemau (Meta) <kas(a)kernel.org> fs/proc/task_mmu: fix hugetlb self-deadlock in pagemap_scan_pte_hole() Kiryl Shutsemau (Meta) <kas(a)kernel.org> fs/proc/task_mmu: fix make_uffd_wp_huge_pte() prot-update race SeongJae Park <sj(a)kernel.org> mm/damon/sysfs-schemes: put stats for scheme_add_dirs() internal error SeongJae Park <sj(a)kernel.org> mm/damon/sysfs-schemes: fix dir put orders in access_pattern_add_dirs() SeongJae Park <sj(a)kernel.org> mm/damon/core: always put unsuccessfully committed target pids Zishun Yi <vulab(a)iscas.ac.cn> riscv: cacheinfo: Fix node reference leak in populate_cache_leaves Kiryl Shutsemau (Meta) <kas(a)kernel.org> mm/huge_memory: preserve pmd_swp_uffd_wp on device-private PMD downgrade Aaron Tomlin <atomlin(a)atomlin.com> mips: sched: Fix CPUMASK_OFFSTACK memory corruption Bryam Vargas <hexlabsecurity(a)proton.me> selftests/landlock: Test SCOPE_SIGNAL on the SIGIO/fowner pgid path WenTao Liang <vulab(a)iscas.ac.cn> power: supply: charger-manager: fix refcount leak in is_full_charged() Bryam Vargas <hexlabsecurity(a)proton.me> landlock: Fix LANDLOCK_SCOPE_SIGNAL bypass on the SIGIO path Peiyang He <peiyang_he(a)smail.nju.edu.cn> ntfs: fix hole runlist memory leak in insert range error path Namjae Jeon <linkinjeon(a)kernel.org> ntfs: fix WARN_ON for resident attribute in ntfs_map_runlist_nolock() Namjae Jeon <linkinjeon(a)kernel.org> ntfs: make system files immutable to prevent corruption Hyunchul Lee <hyc.lee(a)gmail.com> ntfs: avoid self-deadlock during inode eviction Namjae Jeon <linkinjeon(a)kernel.org> ntfs: sanitize MFT references returned from ntfs_lookup_inode_by_name() Peiyang He <peiyang_he(a)smail.nju.edu.cn> ntfs: fail attrlist updates when the superblock is inactive Peiyang He <peiyang_he(a)smail.nju.edu.cn> ntfs: fix mrec_lock ABBA deadlock in rename Tristan Madani <tristan(a)talencesecurity.com> ntfs3: fix out-of-bounds read in decompress_lznt Michael Bommarito <michael.bommarito(a)gmail.com> ntfs3: validate split-point offset in indx_insert_into_buffer Michael Bommarito <michael.bommarito(a)gmail.com> ntfs3: bound to_move in indx_insert_into_root before hdr_insert_head Michael Bommarito <michael.bommarito(a)gmail.com> ntfs3: cap RESTART_TABLE free-chain walker at rt->used Michael Bommarito <michael.bommarito(a)gmail.com> fs/ntfs3: bound NTFS_DE view.data_off in UpdateRecordData{Root,Allocation} Michael Bommarito <michael.bommarito(a)gmail.com> fs/ntfs3: add depth limit to indx_find_buffer to prevent stack overflow Konstantin Komarov <almaz.alexandrovich(a)paragon-software.com> fs/ntfs3: validate lcns_follow in log_replay conversion Konstantin Komarov <almaz.alexandrovich(a)paragon-software.com> fs/ntfs3: bound attr_off in UpdateResidentValue against data_off Michael Bommarito <michael.bommarito(a)gmail.com> fs/ntfs3: bound copy_lcns dp->page_lcns[] index in analysis pass Konstantin Komarov <almaz.alexandrovich(a)paragon-software.com> fs/ntfs3: bound DeleteIndexEntryAllocation memmove length Zhan Xusheng <zhanxusheng1024(a)gmail.com> fs/ntfs3: fix syncing wrong inode on DIRSYNC cross-directory rename DaeMyung Kang <charsyam(a)gmail.com> ntfs: reject non-resident records for resident-only attributes DaeMyung Kang <charsyam(a)gmail.com> ntfs: validate resident index root values on lookup DaeMyung Kang <charsyam(a)gmail.com> ntfs: validate resident volume name values on lookup DaeMyung Kang <charsyam(a)gmail.com> ntfs: do not replace volume name after lookup errors Samuel Moelius <sam.moelius(a)trailofbits.com> ntfs: detect mapping-pairs LCN accumulator overflow Hyunchul Lee <hyc.lee(a)gmail.com> ntfs: validate index entries on reading DaeMyung Kang <charsyam(a)gmail.com> ntfs: avoid heap allocation for free-cluster readahead state DaeMyung Kang <charsyam(a)gmail.com> ntfs: only alias volume $UpCase to default on exact match DaeMyung Kang <charsyam(a)gmail.com> ntfs: reinit search context before volume information lookup Hyunchul Lee <hyc.lee(a)gmail.com> ntfs: skip extent mft records in writeback to prevent deadlock Hyunchul Lee <hyc.lee(a)gmail.com> ntfs: centalize $INDEX_ROOT header validation DaeMyung Kang <charsyam(a)gmail.com> ntfs: update index root allocated size before shrink DaeMyung Kang <charsyam(a)gmail.com> ntfs: free volume-wide resources on fill_super failure Hyunchul Lee <hyc.lee(a)gmail.com> ntfs: validate index block header more strictly Hyunchul Lee <hyc.lee(a)gmail.com> ntfs: not change 0-byte $DATA attribute to non-resident Hyunchul Lee <hyc.lee(a)gmail.com> ntfs: add bounds check before accessing EA entries DaeMyung Kang <charsyam(a)gmail.com> ntfs: validate attribute values on lookup Marco Crivellari <marco.crivellari(a)suse.com> ntfs: Add WQ_PERCPU to alloc_workqueue users Ron de Bruijn <rmbruijn(a)gmail.com> ntfs: fix off-by-one in mapping pairs decoding bounds checks Hyunchul Lee <hyc.lee(a)gmail.com> ntfs: fix incorrect size of symbolic link DaeMyung Kang <charsyam(a)gmail.com> ntfs: grow index root value before reparent header update SeongJae Park <sj(a)kernel.org> mm/damon/core: make charge_addr_from aware of end-address exclusivity Muchun Song <muchun.song(a)linux.dev> mm/memory_hotplug: fix incorrect altmap passing in error path Deepanshu Kartikey <kartikey406(a)gmail.com> mm/hugetlb: fix hugetlb cgroup rsvd charge/uncharge mismatch Johan Hovold <johan(a)kernel.org> power: supply: max17042: fix OF node reference imbalance Ma Ke <make24(a)iscas.ac.cn> power: supply: cpcap-battery: Fix missing nvmem_device_put() causing reference leak Muchun Song <muchun.song(a)linux.dev> mm/mm_init: fix pageblock migratetype for ZONE_DEVICE compound pages Maciej W. Rozycki <macro(a)orcam.me.uk> MIPS: DEC: Ensure 32-bit stack location for o32 prom_printf() Johan Hovold <johan(a)kernel.org> MIPS: ip22-gio: fix device reference leak in probe Johan Hovold <johan(a)kernel.org> MIPS: ip22-gio: fix kfree() of static object Johan Hovold <johan(a)kernel.org> MIPS: ip22-gio: fix gio device memory leak Muchun Song <muchun.song(a)linux.dev> mm/sparse-vmemmap: fix vmemmap accounting underflow Tanmay Shah <tanmay.shah(a)amd.com> remoteproc: xlnx: Check remote core state Wasim Nazir <wasim.nazir(a)oss.qualcomm.com> remoteproc: qcom: Fix leak when custom dump_segments addition fails Chuck Lever <chuck.lever(a)oracle.com> SUNRPC: Bound-check xdr_buf_to_bvec() stores before writing Chuck Lever <chuck.lever(a)oracle.com> lockd: Plug nlm_file refcount leak on cached nlm_do_fopen() failure Chuck Lever <chuck.lever(a)oracle.com> lockd: Plug nlm_file leak when nlm_do_fopen() fails Luxiao Xu <rakukuip(a)gmail.com> sunrpc: harden rq_procinfo lifecycle to prevent double-free Chuck Lever <chuck.lever(a)oracle.com> sunrpc: wait for in-flight TLS handshake callback when cancel loses race Chris Mason <clm(a)meta.com> sunrpc: pin svc_xprt across the asynchronous TLS handshake callback Claudiu Beznea <claudiu.beznea.uj(a)bp.renesas.com> pinctrl: renesas: rzg2l: Use -ENOTSUPP instead of -EOPNOTSUPP Abdun Nihaal <nihaal(a)cse.iitm.ac.in> nvdimm/btt: Free arena sub-allocations on discover_arenas() error path Abdun Nihaal <nihaal(a)cse.iitm.ac.in> nvdimm/btt: Free arenas on btt_init() error paths Junrui Luo <moonafterrain(a)outlook.com> jbd2: fix integer underflow in jbd2_journal_initialize_fast_commit() Terry Bowman <terry.bowman(a)amd.com> cxl: Fix CXL_HEADERLOG_SIZE to match RAS Capability size Duje Mihanović <duje(a)dujemihanovic.xyz> backlight: ktd2801: Enable BL_CORE_SUSPENDRESUME Bartosz Golaszewski <bartosz.golaszewski(a)oss.qualcomm.com> mfd: tps6586x: Fix OF node refcount Shyam Prasad N <sprasad(a)microsoft.com> cifs: invalidate cfid on unlink/rename/rmdir Sven Eckelmann <sven(a)narfation.org> batman-adv: tt: prevent TVLV OOB check overflow Sven Eckelmann <sven(a)narfation.org> batman-adv: mcast: avoid OOB read of num_dests header Sven Eckelmann <sven(a)narfation.org> batman-adv: frag: fix primary_if leak on failed linearization Sven Eckelmann <sven(a)narfation.org> batman-adv: clean untagged VLAN on netdev registration failure Sven Eckelmann <sven(a)narfation.org> batman-adv: frag: free unfragmentable packet Sven Eckelmann <sven(a)narfation.org> batman-adv: fix VLAN priority offset Sven Eckelmann <sven(a)narfation.org> batman-adv: tt: avoid request storms during pending request Sven Eckelmann <sven(a)narfation.org> batman-adv: dat: fix tie-break for candidate selection Sven Eckelmann <sven(a)narfation.org> batman-adv: ensure minimal ethernet header on TX Sven Eckelmann <sven(a)narfation.org> batman-adv: dat: ensure accessible eth_hdr proto field Sven Eckelmann <sven(a)narfation.org> batman-adv: bla: reacquire gw address after skb realloc Sven Eckelmann <sven(a)narfation.org> batman-adv: dat: acquire ARP hw source only after skb realloc Sven Eckelmann <sven(a)narfation.org> batman-adv: access unicast_ttvn skb->data only after skb realloc Sven Eckelmann <sven(a)narfation.org> batman-adv: retrieve ethhdr after potential skb realloc on RX Sven Eckelmann <sven(a)narfation.org> batman-adv: gw: acquire ethernet header only after skb realloc Sumanth Korikkar <sumanthk(a)linux.ibm.com> s390/perf_cpum_cf: Add missing array_index_nospec() to __hw_perf_event_init() Rafael J. Wysocki <rafael.j.wysocki(a)intel.com> cpufreq: intel_pstate: Set non-turbo capacity to HWP_GUARANTEED_PERF() Zhongqiu Han <zhongqiu.han(a)oss.qualcomm.com> cpufreq: schedutil: Fix uncleared need_freq_update on the .adjust_perf() path Sandipan Das <sandipan.das(a)amd.com> perf/x86/amd/lbr: Fix kernel address leakage Sandipan Das <sandipan.das(a)amd.com> perf/x86/amd/brs: Fix kernel address leakage Thorsten Blum <thorsten.blum(a)linux.dev> x86/boot: Reject too long acpi_rsdp= values Thorsten Blum <thorsten.blum(a)linux.dev> x86/boot: Validate console=uart8250 baud rate to fix early boot hang Tycho Andersen (AMD) <tycho(a)kernel.org> x86/virt/sev: Revert "Drop WBINVD before setting MSR_AMD64_SYSCFG_SNP_EN" Mario Limonciello <mario.limonciello(a)amd.com> x86/video: Only fall back to vga_default_device() without screen info Ali Ahmet MEMIS <dev(a)unknownbbqr.xyz> tools/power/x86/intel-speed-select: Harden daemon pidfile open Guangshuo Li <lgs201920130244(a)gmail.com> mfd: sm501: Fix reference leak on failed device registration Armin Wolf <W_Armin(a)gmx.de> leds: uleds: Fix potential buffer overread Ondrej Mosnacek <omosnace(a)redhat.com> selinux: fix incorrect execmem checks on overlayfs Tristan Madani <tristan(a)talencesecurity.com> selinux: avoid sk_socket dereference in selinux_sctp_bind_connect() Stephen Smalley <stephen.smalley.work(a)gmail.com> selinux: check connect-related permissions on TCP Fast Open Wang Jun <1742789905(a)qq.com> soc: fsl: qe: panic on ioremap() failure in qe_reset() Siddharth Vadapalli <s-vadapalli(a)ti.com> soc: ti: k3-ringacc: Fix access mode for k3_ringacc_ring_pop_tail_io/proxy Arunpravin Paneer Selvam <Arunpravin.PaneerSelvam(a)amd.com> gpu/buddy: bail out of try_harder when alignment cannot be honoured Guangshuo Li <lgs201920130244(a)gmail.com> gpu: host1x: Fix device reference leak in host1x_device_parse_dt() error path Eliot Courtney <ecourtney(a)nvidia.com> gpu: nova-core: simplify and_then with condition to filter Pablo Neira Ayuso <pablo(a)netfilter.org> netfilter: flowtable: use correct direction to set up tunnel route Xiang Mei (Microsoft) <xmei5(a)asu.edu> netfilter: bridge: fix stale prevhdr pointer in br_ip6_fragment() Wyatt Feng <bronzed_45_vested(a)icloud.com> netfilter: xt_nat: reject unsupported target families Yizhou Zhao <zhaoyz24(a)mails.tsinghua.edu.cn> netfilter: ecache: fix inverted time_after() check Florian Westphal <fw(a)strlen.de> netfilter: xt_physdev: masks are not c-strings Yizhou Zhao <zhaoyz24(a)mails.tsinghua.edu.cn> netfilter: nf_conncount: fix zone comparison in tuple dedup Pablo Neira Ayuso <pablo(a)netfilter.org> netfilter: flowtable: support IPIP tunnel with direct xmit Pablo Neira Ayuso <pablo(a)netfilter.org> netfilter: flowtable: use dst in this direction when pushing IPIP header Xiang Mei <xmei5(a)asu.edu> netfilter: nf_conntrack_reasm: guard mac_header adjustment after IPv6 defrag Florian Westphal <fw(a)strlen.de> netfilter: nf_nat_sip: reload possible stale data pointer Florian Westphal <fw(a)strlen.de> netfilter: nft_set_pipapo: don't leak bad clone into future transaction Pablo Neira Ayuso <pablo(a)netfilter.org> netfilter: nf_conntrack_sip: validate skb_dst() before accessing it Theodor Arsenij Larionov-Trichkine <theodorlarionov(a)gmail.com> netfilter: nft_fib: reject fib expression on the netdev egress hook Haoze Xie <royenheart(a)gmail.com> netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst Wyatt Feng <bronzed_45_vested(a)icloud.com> netfilter: xt_cluster: reject template conntracks in hash match David Carlier <devnexen(a)gmail.com> netfilter: nfnl_cthelper: apply per-class values when updating policies Muhammad Bilal <meatuni001(a)gmail.com> netfilter: nf_conntrack_irc: fix parse_dcc() off-by-one OOB read Srinivas Kandagatla <srinivas.kandagatla(a)oss.qualcomm.com> ASoC: qcom: q6apm: fix NULL pointer dereference in graph_callback Cássio Gabriel <cassiogabrielcontato(a)gmail.com> ASoC: mediatek: mt8183: Release reserved memory on cleanup Cássio Gabriel <cassiogabrielcontato(a)gmail.com> ASoC: mediatek: mt8183: Check runtime resume during probe Cássio Gabriel <cassiogabrielcontato(a)gmail.com> ASoC: mediatek: mt8192: Release reserved memory on cleanup Cássio Gabriel <cassiogabrielcontato(a)gmail.com> ASoC: mediatek: mt8192: Check runtime resume during probe Peter Ujfalusi <peter.ujfalusi(a)linux.intel.com> ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control Peter Ujfalusi <peter.ujfalusi(a)linux.intel.com> ASoC: SOF: ipc3-control: Fix heap overflow in bytes_ext put/get Zhao Dongdong <zhaodongdong(a)kylinos.cn> ASoC: SOF: topology: fix memory leak in snd_sof_load_topology Abdun Nihaal <nihaal(a)cse.iitm.ac.in> fbdev: tridentfb: fix potential memory leak in trident_pci_probe() Abdun Nihaal <nihaal(a)cse.iitm.ac.in> fbdev: nvidia: fix potential memory leak in nvidiafb_probe() Abdun Nihaal <nihaal(a)cse.iitm.ac.in> fbdev: vesafb: fix memory leak in vesafb_probe() Abdun Nihaal <nihaal(a)cse.iitm.ac.in> fbdev: carminefb: fix potential memory leak in alloc_carmine_fb() Abdun Nihaal <nihaal(a)cse.iitm.ac.in> fbdev: tdfxfb: fix potential memory leak in tdfxfb_probe() Abdun Nihaal <nihaal(a)cse.iitm.ac.in> fbdev: uvesafb: fix potential memory leak in uvesafb_probe() Abdun Nihaal <nihaal(a)cse.iitm.ac.in> fbdev: s3fb: fix potential memory leak in s3_pci_probe() Abdun Nihaal <nihaal(a)cse.iitm.ac.in> fbdev: i740fb: fix potential memory leak in i740fb_probe() Abdun Nihaal <nihaal(a)cse.iitm.ac.in> fbdev: radeon: fix potential memory leak in radeonfb_pci_register() Abdun Nihaal <nihaal(a)cse.iitm.ac.in> fbdev: efifb: fix memory leak in efifb_probe() Li RongQing <lirongqing(a)baidu.com> fbdev: sm712: Fix operator precedence in big_swap macro Abdun Nihaal <nihaal(a)cse.iitm.ac.in> fbdev: hecubafb: fix potential memory leak in hecubafb_probe() Abdun Nihaal <nihaal(a)cse.iitm.ac.in> fbdev: broadsheetfb: fix potential memory leak in broadsheetfb_probe() Abdun Nihaal <nihaal(a)cse.iitm.ac.in> fbdev: metronomefb: fix potential memory leak in metronomefb_probe() Oliver Upton <oupton(a)kernel.org> KVM: arm64: nv: Inject SEA if guest VNCR isn't normal memory Oliver Upton <oupton(a)kernel.org> KVM: arm64: nv: Re-translate VNCR before injecting abort Oliver Upton <oupton(a)kernel.org> KVM: arm64: nv: Inject SEA if kvm_translate_vncr() can't resolve PFN Oliver Upton <oupton(a)kernel.org> KVM: arm64: nv: Respect read-only PFN when mapping L1 VNCR Weiming Shi <bestswngs(a)gmail.com> KVM: arm64: nv: Fix SPSR_EL2 restore in kvm_hyp_handle_mops() Fuad Tabba <tabba(a)google.com> KVM: arm64: nv: Write ESR_EL2 for injected nested SError exceptions Oliver Upton <oupton(a)kernel.org> KVM: arm64: nv: Drop bogus WARN for write to ZCR_EL2 Oliver Upton <oupton(a)kernel.org> KVM: arm64: Ensure level is always initialized when relaxing perms Bradley Morgan <include(a)grrlz.net> KVM: arm64: account pKVM reclaim against the VM mm Marc Zyngier <maz(a)kernel.org> KVM: Move kvm_io_bus_get_dev() locking responsibilities to callers Sean Christopherson <seanjc(a)google.com> KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state leixiang <leixiang(a)kylinos.cn> KVM: x86: Nullify irqfd->producer if updating IRTE for bypass fails Sean Christopherson <seanjc(a)google.com> KVM: x86: Ignore pending PV EOI if the vCPU has since disabled PV EOIs Binbin Wu <binbin.wu(a)linux.intel.com> KVM: TDX: Reject concurrent change to CPUID entry count Atish Patra <atishp(a)meta.com> KVM: SEV: Do not allow intra-host migration/mirroring of SNP VMs Matthew Rosato <mjrosato(a)linux.ibm.com> KVM: s390: pci: Fix handling of AIF enable without AISB Sean Christopherson <seanjc(a)google.com> KVM: nVMX: Move vTPR vs. TPR Threshold consistency check into "normal" checks Marc Zyngier <maz(a)kernel.org> KVM: arm64: vgic: Handle race between interrupt affinity change and LPI disabling Hyunwoo Kim <imv4bel(a)gmail.com> KVM: arm64: vgic: Check the interrupt is still ours before migrating it Haoxiang Li <haoxiang_li2024(a)163.com> KVM: s390: pci: Fix GISC refcount leak on AIF enable failure Gautam Menghani <gautam(a)linux.ibm.com> powerpc/pseries/Kconfig: Enable CONFIG_VPA_PMU to be used with KVM Claudio Imbrenda <imbrenda(a)linux.ibm.com> KVM: s390: Fix unlikely race in try_get_locked_pte() Christian Borntraeger <borntraeger(a)linux.ibm.com> KVM: s390: Initialize KVM_S390_GET_CMMA_BITS memory Claudio Imbrenda <imbrenda(a)linux.ibm.com> KVM: s390: vsie: Use mmu cache to allocate rmap Claudio Imbrenda <imbrenda(a)linux.ibm.com> KVM: s390: Silence potential warnings in _gmap_crstep_xchg_atomic() Claudio Imbrenda <imbrenda(a)linux.ibm.com> KVM: s390: vsie: Add missing radix_tree_preload() in _gaccess_shadow_fault() Claudio Imbrenda <imbrenda(a)linux.ibm.com> KVM: s390: vsie: Fix allocation of struct vsie_rmap Qiang Ma <maqianga(a)uniontech.com> LoongArch: KVM: Return full old CSR value from kvm_emu_xchg_csr() Bibo Mao <maobibo(a)loongson.cn> LoongArch: KVM: Fix FPU register width with user access API Qiang Ma <maqianga(a)uniontech.com> LoongArch: KVM: Check the return values for put_user() Bibo Mao <maobibo(a)loongson.cn> LoongArch: KVM: Check irq validity in kvm_vcpu_ioctl_interrupt() Yanfei Xu <yanfei.xu(a)bytedance.com> LoongArch: KVM: Validate irqchip index in irqfd routing David Jander <david(a)protonic.nl> ARM: dts: stm32: stm32mp15x-mecio1-io: Move expander gpio-line-names to board files David Jander <david(a)protonic.nl> ARM: dts: stm32: stm32mp15x-mecio1-io: Fix expander gpio line typo David Jander <david(a)protonic.nl> ARM: dts: stm32: stm32mp15x-mecio1-io: Move gpio-line-names to board files Abel Vesa <abel.vesa(a)oss.qualcomm.com> arm64: dts: qcom: hamoa: Fix OPP tables for all DisplayPort controllers David Jander <david(a)protonic.nl> ARM: dts: stm32: stm32mp15x-mecio1-io: Fix GPIO names typo Krzysztof Kozlowski <krzysztof.kozlowski(a)oss.qualcomm.com> arm64: dts: imx8ulp-evk: Correct Type-C int GPIO flags David Jander <david(a)protonic.nl> ARM: dts: stm32: stm32mp15x-mecio1-io: Enable internal ADC reference Judith Mendez <jm(a)ti.com> arm64: dts: ti: k3-am62a7-sk: Add bootph-all tag to vqmmc David Jander <david(a)protonic.nl> ARM: dts: stm32: stm32mp15x-mecio1-io: Move divergent mecio1 ADC channels to board files David Jander <david(a)protonic.nl> ARM: dts: stm32: stm32mp15x-mecio1-io: Fix ADC sampling times Quentin Schulz <quentin.schulz(a)cherry.de> arm64: dts: rockchip: fix Ethernet PHY not found on PX30 Ringneck Nickolay Goppen <setotau(a)mainlining.org> arm64: dts: qcom: sdm630: describe adsp_mem region properly Hugo Villeneuve <hvilleneuve(a)dimonoff.com> ARM: dts: imx6ul-var-som: fix warning for non-existent dc-supply property Marek Vasut <marek.vasut+renesas(a)mailbox.org> arm64: dts: renesas: ironhide: Describe inline ECC carveouts Krzysztof Kozlowski <krzysztof.kozlowski(a)oss.qualcomm.com> arm64: dts: s32g3: Fix SWT8 watchdog address Mark Rutland <mark.rutland(a)arm.com> arm64: fpsimd: Fix type mismatch in sve_{save,load}_state() Yong Wang <edragain(a)163.com> net: ife: require ETH_HLEN to be pullable in ife_decode() Runyu Xiao <runyu.xiao(a)seu.edu.cn> octeontx2-vf: clear stale mailbox IRQ state before request_irq() Runyu Xiao <runyu.xiao(a)seu.edu.cn> octeontx2-pf: clear stale mailbox IRQ state before request_irq() Zhengchuan Liang <zcliangcn(a)gmail.com> net: atm: reject out-of-range traffic classes in QoS validation Michael Bommarito <michael.bommarito(a)gmail.com> net: qrtr: fix 32-bit integer overflow in qrtr_endpoint_post() Li Xiasong <lixiasong1(a)huawei.com> tipc: restrict socket queue dumps in enqueue tracepoints Cássio Gabriel <cassiogabrielcontato(a)gmail.com> ASoC: SOF: topology: validate vendor array size before parsing Peter Ujfalusi <peter.ujfalusi(a)linux.intel.com> ASoC: SOF: ipc3-control: Fix TOCTOU in bytes_put and bytes_get Peter Ujfalusi <peter.ujfalusi(a)linux.intel.com> ASoC: SOF: ipc3-control: Use overflow checks in control_update size calc Peter Ujfalusi <peter.ujfalusi(a)linux.intel.com> ASoC: SOF: ipc4-control: Validate notification payload size Peter Ujfalusi <peter.ujfalusi(a)linux.intel.com> ASoC: SOF: ipc4-control: Fix TOCTOU in sof_ipc4_bytes_put Jason Wang <jasowang(a)redhat.com> VDUSE: avoid leaking information to userspace Zhang Tianci <zhangtianci.1997(a)bytedance.com> vduse: Fix race in vduse_dev_msg_sync and vduse_dev_read_iter Wentao Liang <vulab(a)iscas.ac.cn> mlxsw: fix refcount leak in mlxsw_sp_vrs_lpm_tree_replace() Wentao Liang <vulab(a)iscas.ac.cn> mlxsw: fix refcount leak in mlxsw_sp_port_lag_join() Przemyslaw Korba <przemyslaw.korba(a)intel.com> idpf: add padding to PTP virtchnl structures Vincent Donnefort <vdonnefort(a)google.com> ring-buffer: Allow sparse CPU masks in ring_buffer_desc() Vincent Donnefort <vdonnefort(a)google.com> tracing/remotes: Fix struct_len in trace_remote_alloc_buffer() Vincent Donnefort <vdonnefort(a)google.com> tracing/remotes: Fix leak in trace_remote_alloc_buffer() error path Ben Dooks <ben.dooks(a)codethink.co.uk> drm/imagination: make pvr_fw_trace_init_mask_ops static Guangshuo Li <lgs201920130244(a)gmail.com> smb: client: fix overflow in passthrough ioctl bounds check Guangshuo Li <lgs201920130244(a)gmail.com> drm/xe: free madvise VMA array on L2 flush failure Anas Khan <anxkhn28(a)gmail.com> drm/xe: remove duplicate <kunit/test-bug.h> include Harman Kalra <hkalra(a)marvell.com> octeontx2-af: fix VF bringup affecting PF promiscuous state Gal Pressman <gal(a)nvidia.com> ethtool: rss: Fix hfunc and input_xfrm parsing on big endian Li RongQing <lirongqing(a)baidu.com> net/mlx5: Fix L3 tunnel entropy refcount leak Wang Yan <wangyan01(a)kylinos.cn> selftests/net: fix EVP_MD_CTX leak in tcp_mmap Thomas Zimmermann <tzimmermann(a)suse.de> drm/fb-helper: Only consider active CRTCs for vblank sync Timur Tabi <ttabi(a)nvidia.com> regulator: core: regulator_lock_two() should test for EDEADLK not EDEADLOCK Zizhi Wo <wozizhi(a)huawei.com> smb: client: fix busy dentry warning on unmount after DIO Cao Guanghui <caoguanghui(a)kylinos.cn> dm era: fix NULL pointer dereference in metadata_open() Chuck Lever <chuck.lever(a)oracle.com> SUNRPC: pin upper rpc_clnt across the TLS connect_worker Chuck Lever <chuck.lever(a)oracle.com> SUNRPC: release lower rpc_clnt if killed waiting for XPRT_LOCKED Guangshuo Li <lgs201920130244(a)gmail.com> cifs: validate DFS referral string offsets Rongguang Wei <weirongguang(a)kylinos.cn> s390/zcrypt: Remove the empty file Julian Anastasov <ja(a)ssi.bg> ipvs: ensure inner headers in ICMP errors are in headroom Yizhou Zhao <zhaoyz24(a)mails.tsinghua.edu.cn> ipvs: fix PMTU for GUE/GRE tunnel ICMP errors Yizhou Zhao <zhaoyz24(a)mails.tsinghua.edu.cn> ipvs: use parsed transport offset in TCP state lookup Yizhou Zhao <zhaoyz24(a)mails.tsinghua.edu.cn> ipvs: pass parsed transport offset to state handlers Tamaki Yanagawa <ty(a)000ty.net> netfilter: nft_lookup: fix catchall element handling with inverted lookups Eric Dumazet <edumazet(a)google.com> ipv4: igmp: Fix potential memory leaks in igmp_mod_timer() and igmp_stop_timer() Yuyang Huang <yuyanghuang(a)google.com> ipv4: igmp: annotate data-races around timer-related fields Yuyang Huang <sigefriedhyy(a)gmail.com> ipv4: igmp: annotate data-races around im->users Eric Dumazet <edumazet(a)google.com> ipv6: mcast: Fix potential UAF in MLD delayed work Eric Dumazet <edumazet(a)google.com> ipv4: igmp: Fix potential UAF in igmp_gq_start_timer() Rosen Penev <rosenp(a)gmail.com> gpio: mvebu: free generic chips on unbind Sandipan Das <sandipan.das(a)amd.com> perf/x86/amd/core: Avoid enabling BRS from the SVM reload path Suman Ghosh <sumang(a)marvell.com> octeontx2-pf: check DMAC extraction support before filtering Samuel Moelius <sam.moelius(a)trailofbits.com> net/sched: cake: reject overhead values that underflow length Rosen Penev <rosenp(a)gmail.com> net: mdio: select REGMAP_MMIO instead of depending on it Cihan Karadag <cihan.cihan(a)gmail.com> selftests: gpio: add gpio-cdev-uaf to .gitignore Maíra Canal <mcanal(a)igalia.com> drm/v3d: Reject invalid indirect BO handle in indirect CSD setup Lizhi Hou <lizhi.hou(a)amd.com> accel/amdxdna: Fix potential amdxdna_umap lifetime race Ben Dooks <ben.dooks(a)codethink.co.uk> tracing: Make tracepoint_printk static as not exported Robert Mader <robert.mader(a)collabora.com> drm: Guard DRM_CLIENT_CAP_PLANE_COLOR_PIPELINE Jia Wang <wangjia(a)ultrarisc.com> gpio: dwapb: Defer clock gating until noirq Enrico Pozzobon <enrico.pozzobon(a)dissecto.com> net: usb: lan78xx: disable VLAN filter in promiscuous mode Yuho Choi <dbgh9129(a)gmail.com> net/liquidio: drop cached VF pci_dev LUT Dong Yibo <dong100(a)mucse.com> net: rnpgbe: fix mailbox endianness and remove pointer casts Chuck Lever <chuck.lever(a)oracle.com> net/tls: Consume empty data records in tls_sw_read_sock() Lizhi Hou <lizhi.hou(a)amd.com> accel/amdxdna: Fix VMA access race Lizhi Hou <lizhi.hou(a)amd.com> accel/amdxdna: Use unsigned long for nr_pages in amdxdna_hmm_register() Lizhi Hou <lizhi.hou(a)amd.com> accel/amdxdna: Prevent PM resume deadlock in hwctx_sync_debug_bo() Hui Wang <hui.wang(a)canonical.com> ring-buffer: Fix event length with forced 8-byte alignment Stig Hornang <stig(a)hornang.me> Bluetooth: L2CAP: fix tx ident leak for commands without a response Weiming Shi <bestswngs(a)gmail.com> Bluetooth: bpa10x: avoid OOB read of revision string in bpa10x_setup() Pauli Virtanen <pav(a)iki.fi> Bluetooth: ISO: exclude RFU bits from ISO_SDU_Length Pauli Virtanen <pav(a)iki.fi> Bluetooth: ISO: fix malformed ISO_END/CONT handling Kiran K <kiran.k(a)intel.com> Bluetooth: btintel_pcie: Refactor FLR to use device_reprobe() Ravindra <ravindra(a)intel.com> Bluetooth: btintel_pcie: Separate coredump work from RX work Kiran K <kiran.k(a)intel.com> Bluetooth: btintel_pcie: Add support for smart trigger dump Chandrashekar Devegowda <chandrashekar.devegowda(a)intel.com> Bluetooth: btintel_pcie: Support Product level reset Sungwoo Kim <iam(a)sung-woo.kim> Bluetooth: sco: Fix a race condition in sco_sock_timeout() Cen Zhang <zzzccc427(a)gmail.com> Bluetooth: MGMT: Fix adv monitor add failure cleanup Cen Zhang <zzzccc427(a)gmail.com> Bluetooth: 6lowpan: hold L2CAP conn across debugfs control Cen Zhang <zzzccc427(a)gmail.com> Bluetooth: 6lowpan: avoid untracked enable work Suraj Kandpal <suraj.kandpal(a)intel.com> drm/i915/ltphy: Fix SSC Enablement bit in PORT_CLOCK_CTL Bartosz Golaszewski <bartosz.golaszewski(a)oss.qualcomm.com> gpio: shared: make the voting mechanism adaptable Steve French <stfrench(a)microsoft.com> smb: client: preserve leading slash for POSIX absolute symlink targets Namjae Jeon <linkinjeon(a)kernel.org> ksmbd: fix multichannel binding and enforce channel limit Eric Dumazet <edumazet(a)google.com> amt: fix size calculation in amt_get_size() Xiang Mei <xmei5(a)asu.edu> net/smc: fix UAF in smc_cdc_rx_handler() by pinning the socket Jamal Hadi Salim <jhs(a)mojatatu.com> net/sched: act_pedit: fix TOCTOU heap OOB write in tc offload Xiang Mei <xmei5(a)asu.edu> net: qualcomm: rmnet: validate MAP frame length before ingress parsing Shigeru Yoshida <syoshida(a)redhat.com> qede: fix off-by-one in BD ring consumption on build_skb failure Jens Emil Schulz Østergaard <jensemil.schulzostergaard(a)microchip.com> net: microchip: vcap: fix races on the shared Super VCAP block Feng Liu <feliu(a)nvidia.com> net/mlx5e: Fix publication race for priv->channel_stats[] Feng Liu <feliu(a)nvidia.com> net/mlx5e: Fix HV VHCA stats agent registration race Feng Liu <feliu(a)nvidia.com> net/mlx5e: Fix HV VHCA stats zero-sized buffer allocation Damon Ding <damon.ding(a)rock-chips.com> drm/bridge: analogix_dp: Fix PE/VS value shift mismatch during link training Shay Drory <shayd(a)nvidia.com> net/mlx5e: TC, skip peer flow cleanup when LAG seq is unavailable Shay Drory <shayd(a)nvidia.com> net/mlx5: LAG, MPESW, Fix missing complete() on devcom error Shay Drory <shayd(a)nvidia.com> net/mlx5: LAG, Fix off-by-one in single-FDB error rollback Shay Drory <shayd(a)nvidia.com> net/mlx5: LAG, extend shared FDB API with group_id filter Shay Drory <shayd(a)nvidia.com> net/mlx5: LAG, prepare for SD device integration Shay Drory <shayd(a)nvidia.com> net/mlx5: LAG, replace peer count check with direct peer lookup Shay Drory <shayd(a)nvidia.com> net/mlx5: LAG, factor out shared FDB code into dedicated file Mark Bloch <mbloch(a)nvidia.com> net/mlx5: Lag, avoid LAG and representor lock cycles Mark Bloch <mbloch(a)nvidia.com> net/mlx5: E-Switch, add representor lifecycle lock Mark Bloch <mbloch(a)nvidia.com> net/mlx5: Lag: refactor representor reload handling Mingyou Chen <qby140326(a)gmail.com> platform/x86: bitland-mifs-wmi: Fix NULL pointer dereference during suspend/resume Wyatt Feng <bronzed_45_vested(a)icloud.com> netfilter: xt_connmark: reject invalid shift parameters Pablo Neira Ayuso <pablo(a)netfilter.org> netfilter: nft_set_rbtree: get command skips end element with open interval Zhixing Chen <running910(a)gmail.com> netfilter: ip6tables: mark malformed IPv6 extension headers for hotdrop Feng Wu <wufengwufengwufeng(a)gmail.com> netfilter: xt_rateest: fix u64 truncation in xt_rateest_mt() Wyatt Feng <bronzed_45_vested(a)icloud.com> netfilter: xt_u32: reject invalid shift counts Qihang <q.h.hack.winter(a)gmail.com> gue: validate REMCSUM private option length Xiang Mei <xmei5(a)asu.edu> net: usb: net1080: validate packet_len before pad-byte access in rx_fixup Jia He <justin.he(a)arm.com> arm64/sysreg: Fix BWE field encoding in ID_AA64DFR2_EL1 Yiyang Chen <chenyy23(a)mails.tsinghua.edu.cn> selftests/hid: Cover hid_bpf_get_data() size overflow Yiyang Chen <chenyy23(a)mails.tsinghua.edu.cn> selftests/hid: Load only requested struct_ops maps Yiyang Chen <chenyy23(a)mails.tsinghua.edu.cn> HID: bpf: Fix hid_bpf_get_data() range check Cen Zhang <zzzccc427(a)gmail.com> ntfs: avoid stale runlist element dereference in fallocate Ariana Lazar <ariana.lazar(a)microchip.com> iio: dac: mcp47feb02: Fix passing uninitialized vref1_uV for no Vref1 case Anshuman Khandual <anshuman.khandual(a)arm.com> arm64/mm: Optimize TLB flush in unmap_hotplug_[pmd|pud]_range() Catalin Marinas <catalin.marinas(a)arm.com> arm64: Avoid eager DVMSync reclaim batches with C1-Pro SME erratum Lee Jones <lee(a)kernel.org> HID: core: Fix OOB read in hid_get_report for numbered reports Georgiy Osokin <g.osokin(a)auroraos.dev> HID: picolcd: prevent NULL pointer dereference in picolcd_send_and_wait() Cen Zhang <zzzccc427(a)gmail.com> ntfs: avoid stale runlist element dereference in MFT writeback David Howells <dhowells(a)redhat.com> netfs: Fix barriering when walking subrequest list Karuna Ramkumar <rkaruna(a)google.com> ata: libata-scsi: limit simulated SCSI command copy to response length Myeonghun Pak <mhun512(a)gmail.com> ata: sata_gemini: unwind clocks on IDE pinctrl errors David Howells <dhowells(a)redhat.com> cifs: Fix missing credit release on failure in cifs_issue_read() Jiri Olsa <jolsa(a)kernel.org> uprobes/x86: Use proper mm_struct in __in_uprobe_trampoline David Windsor <dwindsor(a)gmail.com> x86/uprobes: Keep shadow stack in sync for emulated CALLs Matthew Auld <matthew.auld(a)intel.com> drm/xe/pt: prevent invalid cursor access for purged BOs Matthew Auld <matthew.auld(a)intel.com> drm/xe: fix NPD in bo_meminfo() Michal Wajdeczko <michal.wajdeczko(a)intel.com> drm/xe/pf: Don't attempt to process FAST_REQ or EVENT relays Shuicheng Lin <shuicheng.lin(a)intel.com> drm/xe/hw_engine: Fix double-free of managed BO in error path Shuicheng Lin <shuicheng.lin(a)intel.com> drm/xe/userptr: Drop bogus static from finish in force_invalidate Shuicheng Lin <shuicheng.lin(a)intel.com> drm/xe/userptr: Hold notifier_lock for write on inject test path Brajesh Gupta <brajesh.gupta(a)imgtec.com> drm/imagination: Fix returned size for DRM_IOCTL_PVR_DEV_QUERY Francois Dugast <francois.dugast(a)intel.com> drm/xe/pt: Fix NULL pointer dereference in xe_pt_zap_ptes_entry() David Howells <dhowells(a)redhat.com> netfs: Fix folio state after ENOMEM whilst under writeback iteration David Howells <dhowells(a)redhat.com> netfs: Fix writeback error handling David Howells <dhowells(a)redhat.com> netfs: Fix writethrough to use collection offload David Howells <dhowells(a)redhat.com> cachefiles: Fix file burial to take lock when unsetting S_KERNEL_FILE David Howells <dhowells(a)redhat.com> netfs: Fix netfs_create_write_req() to handle async cache object creation Morduan Zang <zhangdandan(a)uniontech.com> iomap: guard io_size EOF trim against concurrent truncate underflow Amir Goldstein <amir73il(a)gmail.com> ovl: fix comment about locking order Hongling Zeng <zenghongling(a)kylinos.cn> cachefiles: Fix double unlock in nomem_d_alloc error path Michael Bommarito <michael.bommarito(a)gmail.com> minix: avoid overflow in bitmap block count calculation Fengnan Chang <changfengnan(a)bytedance.com> iomap: release pages on atomic dio size mismatch David Howells <dhowells(a)redhat.com> afs: Fix unchecked-length string display in debug statement David Howells <dhowells(a)redhat.com> afs: Fix the volume AFS_VOLUME_RM_TREE is set on David Howells <dhowells(a)redhat.com> afs: Fix premature cell exposure through /afs David Howells <dhowells(a)redhat.com> afs: Fix lack of locking around modifications of net->cells_dyn_ino David Howells <dhowells(a)redhat.com> afs: Fix vllist leak David Howells <dhowells(a)redhat.com> afs: Fix leak of ungot volume David Howells <dhowells(a)redhat.com> afs: Use scoped_seqlock_read() rather than manually doing seqlock stuff David Howells <dhowells(a)redhat.com> afs: Fix missing NULL pointer check in afs_break_some_callbacks() David Howells <dhowells(a)redhat.com> afs: Fix callback service message parsers to pass through -EAGAIN David Howells <dhowells(a)redhat.com> afs: Fix reinitialisation of the inode, in particular ->lock_work David Howells <dhowells(a)redhat.com> afs: Fix misplaced inc of net->cells_outstanding David Howells <dhowells(a)redhat.com> afs: Fix bulk lookup malfunction due to change in dir_emit() API Li RongQing <lirongqing(a)baidu.com> afs: Remove erroneous seq |= 1 in volume lookup loop Zilin Guan <zilin(a)seu.edu.cn> afs: use kvfree() to free memory allocated by kvcalloc() David Howells <dhowells(a)redhat.com> afs: Fix directory inode initialisation order David Howells <dhowells(a)redhat.com> afs: Remove setting of AS_RELEASE_ALWAYS for symlinks and mountpoints David Howells <dhowells(a)redhat.com> afs: Fix double netfs initialisation in afs_root_iget() Dan Carpenter <error27(a)gmail.com> afs: Fix error code in afs_extract_vl_addrs() Christian Brauner <brauner(a)kernel.org> fs: refuse O_TMPFILE creation with an unmapped fsuid or fsgid Samuel Moelius <sam.moelius(a)trailofbits.com> net/sched: hhf: clear heavy-hitter state on reset Samuel Moelius <sam.moelius(a)trailofbits.com> net/sched: dualpi2: clear stale classification on filter miss Michael Bommarito <michael.bommarito(a)gmail.com> xen/pvcalls: bound backend response req_id before indexing rsp[] Viacheslav Bocharov <v(a)baodeep.com> pinctrl: meson: restore non-sleeping GPIO access Vladimir Zapolskiy <vz(a)kernel.org> gpio: timberdale: Return -ENOMEM on dynamic memory allocation in probe Gil Portnoy <dddhkts1(a)gmail.com> ksmbd: fix use-after-free of fp->owner.name in durable handle owner check Haofeng Li <lihaofeng(a)kylinos.cn> ksmbd: reject undersized DACLs before parsing ACEs Sechang Lim <rhkrqnwk98(a)gmail.com> net/sched: act_bpf: use rcu_dereference_bh() to read the filter Jakub Kicinski <kuba(a)kernel.org> selftests: drv-net: tso: don't touch dangerous feature bits Gleb Markov <markov.gi(a)npc-ksb.ru> cxgb4: Fix decode strings dump for T6 adapters Longjun Tang <tanglongjun(a)kylinos.cn> virtio_net: disable cb when NAPI is busy-polled Xin Long <lucien.xin(a)gmail.com> sctp: fix addr_wq_timer race in sctp_free_addr_wq() Felix Gu <ustc.gu(a)gmail.com> spi: rzv2h-rspi: Fix DMA transfer error handling for signal interruption Qingshuang Fu <fuqingshuang(a)kylinos.cn> irqchip/ts4800: Fix missing chained handler cleanup on remove Yuho Choi <dbgh9129(a)gmail.com> irqchip/gic-v3-its: Fix OF node reference leak Masami Hiramatsu (Google) <mhiramat(a)kernel.org> tracing/probes: Make the $ prefix mandatory for comm access Sechang Lim <rhkrqnwk98(a)gmail.com> tracing/fprobe: Fix NULL pointer dereference in fprobe_fgraph_entry() Martin Kaiser <martin(a)kaiser.cx> tracing: eprobe: read the complete FILTER_PTR_STRING pointer Masami Hiramatsu (Google) <mhiramat(a)kernel.org> tracing/events: Fix to check the simple_tsk_fn creation Masami Hiramatsu (Google) <mhiramat(a)kernel.org> tracing/probes: Remove WARN_ON_ONCE from parse_btf_arg Steven Rostedt <rostedt(a)goodmis.org> tracing/eprobes: Allow use of BTF names to dereference pointers Boris Brezillon <boris.brezillon(a)collabora.com> drm/panthor: Interrupt group start/resumption if group_bind_locked() fails Boris Brezillon <boris.brezillon(a)collabora.com> drm/panthor: Fix a leak when a group is evicted before the tiler OOM is serviced Boris Brezillon <boris.brezillon(a)collabora.com> drm/panthor: Fix panthor_pwr_unplug() Boris Brezillon <boris.brezillon(a)collabora.com> drm/panthor: Don't overrule pending immediate ticks in sched_resume_tick() Boris Brezillon <boris.brezillon(a)collabora.com> drm/panthor: Fix theoretical IOMEM access in suspended state Karunika Choo <karunika.choo(a)arm.com> drm/panthor: Store IRQ register base iomem pointer in panthor_irq Karunika Choo <karunika.choo(a)arm.com> drm/panthor: Split register definitions by components Karunika Choo <karunika.choo(a)arm.com> drm/panthor: Pass an iomem pointer to GPU register access helpers Boris Brezillon <boris.brezillon(a)collabora.com> drm/panthor: Fix potential invalid pointer deref in group_process_tiler_oom() Boris Brezillon <boris.brezillon(a)collabora.com> drm/panthor: Keep the reset work disabled until everything is initialized Boris Brezillon <boris.brezillon(a)collabora.com> drm/panthor: Always use the IRQ-safe variant when acquiring the fence lock Viacheslav Bocharov <v(a)baodeep.com> gpio: shared-proxy: always serialize with a sleeping mutex Ido Schimmel <idosch(a)nvidia.com> bridge: stp: Fix a potential use-after-free when deleting a bridge Jamal Hadi Salim <jhs(a)mojatatu.com> net/sched: sch_teql: Introduce slaves_lock to avoid race condition and UAF Rosen Penev <rosenp(a)gmail.com> net: gianfar: dispose irq mappings on probe failure and device removal Jiawen Wu <jiawenwu(a)trustnetic.com> net: libwx: fix VMDQ mask for 1-queue mode Petr Wozniak <petr.wozniak(a)gmail.com> net: phy: sfp: free mii_bus in sfp_i2c_mdiobus_destroy Xiang Mei <xmei5(a)asu.edu> usbnet: gl620a: fix out-of-bounds read in genelink_rx_fixup() Pengfei Zhang <zhangfeionline(a)gmail.com> ipv6: fib6: fix NULL deref in fib6_walk_continue() on multi-batch dump Jakub Kicinski <kuba(a)kernel.org> eth: fbnic: don't cache shinfo across skb realloc Guenter Roeck <linux(a)roeck-us.net> hwmon: (aspeed-g6-pwm-tach) Guard fan RPM calculation against divide-by-zero Guenter Roeck <linux(a)roeck-us.net> hwmon: (pmbus) Fix passing events to regulator core Matti Vaittinen <mazziesaccount(a)gmail.com> hwmon: adm1275: Prevent reading uninitialized stack Lizhi Hou <lizhi.hou(a)amd.com> accel/amdxdna: Fix iommu domain lifetime race during device removal Abdurrahman Hussain <abdurrahman(a)nexthop.ai> hwmon: (pmbus/core) honor vrm_version in pmbus_data2reg_vid() Luca Weiss <luca.weiss(a)fairphone.com> ASoC: codecs: lpass-va-macro: Fix LPASS Codec Version for SC7280 Kyle Hendry <kylehendrydev(a)gmail.com> MIPS: mm: Add check for highmem before removing memory block Maciej W. Rozycki <macro(a)orcam.me.uk> MIPS: DEC: Ensure RTC platform device deregistration upon failure Xin Long <lucien.xin(a)gmail.com> sctp: add INIT verification after cookie unpacking Yousef Alhouseen <alhouseenyousef(a)gmail.com> sctp: fix SCTP_RESET_STREAMS stream list length limit Wei Fang <wei.fang(a)nxp.com> net: enetc: check the number of BDs needed for xdp_frame Matvey Kovalev <matvey.kovalev(a)ispras.ru> qede: fix out-of-bounds check for cqe->len_list[] Nuoqi Gui <gnq25(a)mails.tsinghua.edu.cn> seg6: validate SRH length before reading fixed fields Corey Leavitt <corey(a)leavitt.info> net: pse-pd: scope pse_control regulator handle to kref lifetime Pengpeng Hou <pengpeng(a)iscas.ac.cn> gpio: htc-egpio: use managed gpiochip registration Pengpeng Hou <pengpeng(a)iscas.ac.cn> gpio: mvebu: fail probe if gpiochip registration fails KaFai Wan <kafai.wan(a)linux.dev> bpf: Fix insn_aux_data leak on verifier err_free_env path Nuoqi Gui <gnq25(a)mails.tsinghua.edu.cn> bpf: Mask pseudo pointer values in verifier logs Samuel Holland <samuel.holland(a)sifive.com> riscv: Fix 32-bit call_on_irq_stack() frame pointer ABI Yicong Yang <yang.yicong(a)picoheart.com> ACPI: RIMT: Only defer the IOMMU configuration in init stage Pengpeng Hou <pengpeng(a)iscas.ac.cn> spi: sh-msiof: abort transfers when reset times out Martin Kaiser <martin(a)kaiser.cx> tracing: probes: fix typo in a log message Jiaming Zhang <r772577952(a)gmail.com> ALSA: FCP: Fix NULL pointer dereference in interface lookup Shuaisong Yang <yangshuaisong(a)h-partners.com> net: hns3: differentiate autoneg default values between copper and fiber Shuaisong Yang <yangshuaisong(a)h-partners.com> net: hns3: fix permanent link down deadlock after reset Shuaisong Yang <yangshuaisong(a)h-partners.com> net: hns3: refactor MAC autoneg and speed configuration Shuaisong Yang <yangshuaisong(a)h-partners.com> net: hns3: unify copper port ksettings configuration path Nirmoy Das <nirmoyd(a)nvidia.com> selftests: tls: size splice_short pipe by page size Eric Dumazet <edumazet(a)google.com> tipc: avoid busy looping in tipc_exit_net() Eric Dumazet <edumazet(a)google.com> tipc: fix UAF in cleanup_bearer() due to premature dst_cache_destroy() Kuniyuki Iwashima <kuniyu(a)google.com> tipc: Store struct sock in struct udp_bearer. Kuniyuki Iwashima <kuniyu(a)google.com> udp_tunnel: Pass struct sock to setup_udp_tunnel_sock(). Kuniyuki Iwashima <kuniyu(a)google.com> udp_tunnel: Pass struct sock to udp_tunnel_sock_release(). Wei Fang <wei.fang(a)nxp.com> net: enetc: fix potential divide-by-zero when num_vsi is zero Rob Herring (Arm) <robh(a)kernel.org> dt-bindings: net: renesas,ether: Drop example "ethernet-phy-ieee802.3-c22" fallback Eric Dumazet <edumazet(a)google.com> net: udp_tunnel: prevent double queueing in udp_tunnel_nic_device_sync Shengjiu Wang <shengjiu.wang(a)nxp.com> ASoC: fsl_asrc_dma: fix eDMA maxburst misalignment with channel count Tiezhu Yang <yangtiezhu(a)loongson.cn> LoongArch: BPF: Fix off-by-one error in tail call Tiezhu Yang <yangtiezhu(a)loongson.cn> LoongArch: BPF: Fix outdated tail call comments 谢致邦 (XIE Zhibang) <Yeking(a)Red54.com> LoongArch: Move struct kimage forward declaration before use Inochi Amaoto <inochiama(a)gmail.com> net: stmmac: dwmac-spacemit: Fix wrong irq definition Inochi Amaoto <inochiama(a)gmail.com> net: stmmac: dwmac-spacemit: Fix wrong phy interface definition Shitalkumar Gandhi <shital.gandhi45(a)gmail.com> net: ethernet: sunplus: spl2sw: fix phy_node refcount leak in remove Ruoyu Wang <ruoyuw560(a)gmail.com> net: sungem: fix probe error cleanup Greg Thelen <gthelen(a)google.com> tools: ynl: build archives with $(AR) Xiang Mei <xmei5(a)asu.edu> geneve: validate inner network offset in geneve_gro_complete() Xiang Mei <xmei5(a)asu.edu> geneve: gate GRO hint in geneve_gro_complete() on gs->gro_hint Yun Zhou <yun.zhou(a)windriver.com> net: mvneta: re-enable percpu interrupt on resume Ratheesh Kannoth <rkannoth(a)marvell.com> octeontx2-af: fix CGX debugfs RVU AF PCI reference leaks Subbaraya Sundeep <sbhatta(a)marvell.com> octeontx2-af: Validate NIX maximum LFs correctly Jan Klos <honza.klos(a)gmail.com> net: phy: realtek: Clear MDIO_AN_10GBT_CTRL_ADV10G bit Erni Sri Satya Vennela <ernis(a)linux.microsoft.com> net: mana: Fall back to standard MTU when PF reports adapter_mtu of 0 Daniel Golle <daniel(a)makrotopia.org> net: dsa: mxl862xx: fix use-after-free of DSA ports in crc_err_work Daniel Golle <daniel(a)makrotopia.org> net: dsa: mxl862xx: avoid unaligned 16-bit access in api_wrap David Yang <mmyangfl(a)gmail.com> net: dsa: realtek: fix memory leak in rtl8366rb_setup_led() Haoxiang Li <haoxiang_li2024(a)163.com> rtc: cmos: unregister HPET IRQ handler on probe failure Fredrik M Olsson <fredrik.m.olsson(a)axis.com> rtc: ds1307: Fix off-by-one issue with wday for rx8130 Huiwen He <hehuiwen(a)kylinos.cn> smb/client: preserve errors from smb2_set_sparse() Li RongQing <lirongqing(a)baidu.com> ACPI: processor_idle: Mark LPI enter functions as __cpuidle Rafael J. Wysocki <rafael.j.wysocki(a)intel.com> ACPICA: Unbreak tools build after switching over to strscpy_pad() Rafael J. Wysocki <rafael.j.wysocki(a)intel.com> thermal: testing: zone: Flush work items during cleanup Claudio Imbrenda <imbrenda(a)linux.ibm.com> s390/mm: Fix handling of _PAGE_UNUSED pte bit Jakub Kicinski <kuba(a)kernel.org> eth: fbnic: fix ordering of heartbeat vs ownership Fernando Fernandez Mancera <fmancera(a)suse.de> ipv6: fix missing notification for ignore_routes_with_linkdown Fernando Fernandez Mancera <fmancera(a)suse.de> ipv6: fix state corruption during proxy_ndp sysctl restart Fernando Fernandez Mancera <fmancera(a)suse.de> ipv6: fix error handling in disable_policy sysctl Fernando Fernandez Mancera <fmancera(a)suse.de> ipv6: fix error handling in forwarding sysctl Fernando Fernandez Mancera <fmancera(a)suse.de> ipv6: fix error handling in ignore_routes_with_linkdown sysctl Fernando Fernandez Mancera <fmancera(a)suse.de> ipv6: fix error handling in disable_ipv6 sysctl Xin Long <lucien.xin(a)gmail.com> sctp: fix err_chunk memory leaks in INIT handling Jamal Hadi Salim <jhs(a)mojatatu.com> net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle Jakub Sitnicki <jakub(a)cloudflare.com> net: lwtunnel: Drop skb metadata before LWT encapsulation Nicolai Buchwitz <nb(a)tipi-net.de> net: usb: lan78xx: restore VLAN and hash filters after link up Eric Dumazet <edumazet(a)google.com> veth: fix NAPI leak in XDP enable error path Meghana Malladi <m-malladi(a)ti.com> net: ti: icssg: Fix XSK zero copy TX during application wakeup Aleksandrova Alyona <aga(a)itb.spb.ru> net: dsa: sja1105: round up PTP perout pin duration Eric Dumazet <edumazet(a)google.com> net: do not acquire dev->tx_global_lock in netdev_watchdog_up() Xiang Mei <xmei5(a)asu.edu> net, bpf: check master for NULL in xdp_master_redirect() Doehyun Baek <doehyunbaek(a)gmail.com> Docs/driver-api/uio-howto: document mmap_prepare callback Krzysztof Wilczyński <kwilczynski(a)kernel.org> alpha/PCI: Fix __pci_mmap_fits() overflow for zero-length BARs Krzysztof Wilczyński <kwilczynski(a)kernel.org> alpha/PCI: Add security_locked_down() check to pci_mmap_resource() Koichiro Den <den(a)valinux.co.jp> NTB: epf: Fix doorbell bitmask and IRQ vector handling Koichiro Den <den(a)valinux.co.jp> NTB: epf: Report 0-based doorbell vector via ntb_db_event() Koichiro Den <den(a)valinux.co.jp> NTB: epf: Make db_valid_mask cover only real doorbell bits Koichiro Den <den(a)valinux.co.jp> PCI: endpoint: pci-epf-vntb: Exclude reserved slots from db_valid_mask Oder Chiou <oder_chiou(a)realtek.com> ASoC: rt5575: Use __le32 for SPI burst write address HyeongJun An <sammiee5311(a)gmail.com> ASoC: SDCA: Validate written enum value in ge_put_enum_double() Rafael J. Wysocki <rafael.j.wysocki(a)intel.com> cpuidle: Allow exit latency to exceed target residency Pablo Neira Ayuso <pablo(a)netfilter.org> netfilter: nf_conntrack_helper: cap maximum number of expectation at helper registration Florian Westphal <fw(a)strlen.de> netfilter: nft_ct: expectation timeouts are passed in milliseconds Pablo Neira Ayuso <pablo(a)netfilter.org> netfilter: nf_conntrack_expect: run expectation eviction with no helper Pablo Neira Ayuso <pablo(a)netfilter.org> netfilter: nf_conntrack_expect: store master_tuple in expectation Pablo Neira Ayuso <pablo(a)netfilter.org> netfilter: nf_conntrack_expect: use conntrack GC to reap expectations Pablo Neira Ayuso <pablo(a)netfilter.org> netfilter: conntrack: check NULL when retrieving ct extension Pablo Neira Ayuso <pablo(a)netfilter.org> netfilter: nf_conntrack_pptp: move GRE specific cleanup to GRE tracker Pablo Neira Ayuso <pablo(a)netfilter.org> netfilter: nf_conntrack_helper: dynamically allocate struct nf_conntrack_helper Qingshuang Fu <fuqingshuang(a)kylinos.cn> gpio: davinci: fix IRQ domain leak on devm_kzalloc failure Florian Westphal <fw(a)strlen.de> netfilter: nft_compat: ebtables emulation must reject non-bridge targets Runyu Xiao <runyu.xiao(a)seu.edu.cn> netfilter: nft_synproxy: stop bypassing the priv->info snapshot Lorenzo Bianconi <lorenzo(a)kernel.org> netfilter: flowtable: Validate iph->ihl in nf_flow_ip4_tunnel_proto() Fernando Fernandez Mancera <fmancera(a)suse.de> netfilter: nf_conncount: prevent connlimit drops for early confirmed ct Mathias Krause <minipli(a)grsecurity.net> netfilter: nf_nat: avoid invalid nat_net pointer use on failed nf_nat_init() Bradley Morgan <include(a)grrlz.net> bpf: Disable xfrm_decode_session hook attachment Chen Cheng <chencheng(a)fnnas.com> md/raid5: avoid R5_Overlap races while breaking stripe batches Chen Cheng <chencheng(a)fnnas.com> md/raid5: use stripe state snapshot in break_stripe_batch_list() Kuniyuki Iwashima <kuniyu(a)google.com> ipv4: fib: Don't ignore error route in local/main tables. Jakub Kicinski <kuba(a)kernel.org> eth: bnxt: improve the timing of stats Xiang Mei <xmei5(a)asu.edu> ipv6: Fix null-ptr-deref in fib6_nh_mtu_change(). Gil Portnoy <dddhkts1(a)gmail.com> ksmbd: fix use-after-free of conn->preauth_info in concurrent SMB2 NEGOTIATE Yiyang Chen <chenyy23(a)mails.tsinghua.edu.cn> selftests/bpf: Cover small conntrack opts error writes Yiyang Chen <chenyy23(a)mails.tsinghua.edu.cn> bpf: Guard conntrack opts error writes Stepan Ionichev <sozdayvek(a)gmail.com> rtc: msc313: fix NULL deref in shared IRQ handler at probe Dima Ruinskiy <dima.ruinskiy(a)intel.com> e1000e: Reconfigure PLL clock gate timeout and re-enable K1 on Meteor Lake Mohamed Khalfella <mkhalfella(a)purestorage.com> i40e: Fix i40e_debug() to use struct i40e_hw argument ZhaoJinming <zhaojinming(a)uniontech.com> ice: dpll: fix memory leak in ice_dpll_init_info error paths ZhaoJinming <zhaojinming(a)uniontech.com> ice: dpll: set pointers to NULL after kfree in ice_dpll_deinit_info John Madieu <john.madieu.xa(a)bp.renesas.com> rtc: isl1208: Balance enable_irq_wake() with disable_irq_wake() on cleanup Marcin Szycik <marcin.szycik(a)intel.com> ice: call netif_keep_dst() once when entering switchdev mode Lukasz Czapnik <lukasz.czapnik(a)intel.com> ice: fix AQ error code comparison in ice_set_pauseparam() Dawid Osuchowski <dawid.osuchowski(a)linux.intel.com> ice: fix FDIR CTRL VSI resource leak in ice_reset_all_vfs() Nuoqi Gui <gnq25(a)mails.tsinghua.edu.cn> bpf: Preserve pointer spill metadata during half-slot cleanup Koichiro Den <den(a)valinux.co.jp> PCI: endpoint: pci-epf-vntb: Report 0-based doorbell vector via ntb_db_event() Koichiro Den <den(a)valinux.co.jp> PCI: endpoint: pci-epf-vntb: Defer pci_epc_raise_irq() out of atomic context Koichiro Den <den(a)valinux.co.jp> PCI: endpoint: pci-epf-vntb: Document legacy MSI doorbell offset Manivannan Sadhasivam <manivannan.sadhasivam(a)oss.qualcomm.com> PCI: endpoint: pci-epf-ntb: Add check to detect 'db_count' value of 0 Manivannan Sadhasivam <manivannan.sadhasivam(a)oss.qualcomm.com> PCI: endpoint: pci-epf-vntb: Add check to detect 'db_count' value of 0 Ahmad Fatoum <a.fatoum(a)pengutronix.de> ASoC: cs530x: Fix expected MCLK rates for CS5302/4/8 Zhan Xusheng <zhanxusheng(a)xiaomi.com> erofs: handle 48-bit blocks_hi for compressed inodes Xiang Mei <xmei5(a)asu.edu> drm/edid: fix OOB read in drm_parse_tiled_block() Ruoyu Wang <ruoyuw560(a)gmail.com> gpiolib: initialize return value in gpiochip_set_multiple() Bartosz Golaszewski <bartosz.golaszewski(a)oss.qualcomm.com> power: sequencing: fix ABBA deadlock in pwrseq_device_unregister() Amery Hung <ameryhung(a)gmail.com> bpf: Fix effective prog array index with BPF_F_PREORDER Thiébaud Weksteen <tweek(a)google.com> bpf: Fix BPF_PROG_ASSOC_STRUCT_OPS last field check Avinash Duduskar <avinash.duduskar(a)gmail.com> bpf: zero-initialize the fib lookup flow struct Yichong Chen <chenyichong(a)uniontech.com> bpftool: Fix vmlinux BTF leak in cgroup commands Sun Jian <sun.jian.kdev(a)gmail.com> bpf: Fix partial copy of non-linear test_run output Nuoqi Gui <gnq25(a)mails.tsinghua.edu.cn> bpf: Fix stack slot index in nospec checks Ronan Dalton <ronan.dalton(a)alliedtelesis.co.nz> rtc: ds1307: handle oscillator stop flag for ds1337/ds1339/ds3231 Antoni Pokusinski <apokusinski01(a)gmail.com> rtc: abx80x: fix the RTC_VL_CLR clearing all status flags Ioana Ciornei <ioana.ciornei(a)nxp.com> dpaa2-switch: do not accept VLAN uppers while bridged Jiayuan Chen <jiayuan.chen(a)linux.dev> ipv6: ioam: fix type confusion of dst_entry Weiming Shi <bestswngs(a)gmail.com> ipv6: ndisc: fix NULL deref in accept_untracked_na() Wayen Yan <win847(a)gmail.com> net: airoha: Fix skb->priority underflow in airoha_dev_select_queue() Michael Bommarito <michael.bommarito(a)gmail.com> net/sched: act_ct: fix nf_connlabels leak on two error paths Rosen Penev <rosenp(a)gmail.com> net: emac: Fix NULL pointer dereference in emac_probe Geetha sowjanya <gakula(a)marvell.com> octeontx2-pf: mcs: Fix mcs resources free on PF shutdown Subbaraya Sundeep <sbhatta(a)marvell.com> octeontx2-pf: Clear stats of all resources when freeing resources Geetha sowjanya <gakula(a)marvell.com> octeontx2-af: mcs: Fix unsupported secy stats read Ratheesh Kannoth <rkannoth(a)marvell.com> octeontx2-af: npc: cn20k: fix NPC defrag Wayen Yan <win847(a)gmail.com> net: ethernet: mtk_ppe: Fix rhashtable leak in mtk_ppe_init error paths Ilya Maximets <i.maximets(a)ovn.org> net: dst_metadata: fix false-positive memcpy overflow in tun_dst_unclone Weiming Shi <bestswngs(a)gmail.com> tipc: fix use-after-free of the discoverer in tipc_disc_rcv() Ruoyu Wang <ruoyuw560(a)gmail.com> net: marvell: prestera: initialize err in prestera_port_sfp_bind Aboorva Devarajan <aboorvad(a)linux.ibm.com> selftests/mm: fix exclusive_cow test fork() handling Sayali Patil <sayalip(a)linux.ibm.com> selftests/mm: remove hardcoded THP sizing assumptions in hmm tests Sayali Patil <sayalip(a)linux.ibm.com> selftests/mm: allow PUD-level entries in compound testcase of hmm tests Sayali Patil <sayalip(a)linux.ibm.com> selftests/mm: clarify alternate unmapping in compaction_test Sayali Patil <sayalip(a)linux.ibm.com> selftests/mm: move hwpoison setup into run_test() and silence modprobe output for memory-failure category Mike Rapoport (Microsoft) <rppt(a)kernel.org> selftests/mm: run_vmtests.sh: free memory if available memory is low Sayali Patil <sayalip(a)linux.ibm.com> selftests/mm: skip uffd-stress test when nr_pages_per_cpu is zero Sayali Patil <sayalip(a)linux.ibm.com> selftests/mm: ensure destination is hugetlb-backed in hugetlb-mremap Sayali Patil <sayalip(a)linux.ibm.com> selftest/mm: register existing mapping with userfaultfd in hugetlb-mremap Sayali Patil <sayalip(a)linux.ibm.com> selftests/mm: free dynamically allocated PMD-sized buffers in split_huge_page_test Sayali Patil <sayalip(a)linux.ibm.com> selftests/mm: size tmpfs according to PMD page size in split_huge_page_test Sayali Patil <sayalip(a)linux.ibm.com> selftests/mm: fix cgroup task placement and drop memory.current checks in hugetlb_reparenting_test.sh Sayali Patil <sayalip(a)linux.ibm.com> selftests/mm: fix hugetlb pathname construction in hugetlb_reparenting_test.sh Sayali Patil <sayalip(a)linux.ibm.com> selftests/mm: restore default nr_hugepages value via exit trap in hugetlb_reparenting_test.sh Sayali Patil <sayalip(a)linux.ibm.com> selftests/mm: fix hugetlb pathname construction in charge_reserved_hugetlb.sh Sayali Patil <sayalip(a)linux.ibm.com> selftests/mm: restore default nr_hugepages value via exit trap in charge_reserved_hugetlb.sh Hao Ge <hao.ge(a)linux.dev> alloc_tag: fix use-after-free in /proc/allocinfo after module unload Bhargav Joshi <j.bhargav.u(a)gmail.com> irqchip/crossbar: Fix parent domain resource leak Sebastian Andrzej Siewior <bigeasy(a)linutronix.de> mailbox: imx: Forward the timeout/ error in imx_mu_generic_tx() Rafael J. Wysocki <rafael.j.wysocki(a)intel.com> tpm_crb: Check ACPI_COMPANION() against NULL during probe Florian Westphal <fw(a)strlen.de> netfilter: nft_meta_bridge: fix NFT_META_BRI_IIFPVID stack leak Florian Westphal <fw(a)strlen.de> netfilter: nf_reject: skip iphdr options when looking for icmp header Florian Westphal <fw(a)strlen.de> netfilter: nft_flow_offload: zero device address for non-ether case Florian Westphal <fw(a)strlen.de> netfilter: nft_meta_bridge: add validate callback for get operations Florian Westphal <fw(a)strlen.de> netfilter: nft_payload: reject offsets exceeding 65535 bytes Jozsef Kadlecsik <kadlec(a)netfilter.org> netfilter: ipset: make sure gc is properly stopped Jozsef Kadlecsik <kadlec(a)netfilter.org> netfilter: ipset: fix order of kfree_rcu() and rcu_assign_pointer() Jozsef Kadlecsik <kadlec(a)netfilter.org> netfilter: ipset: Don't use test_bit() in lockless RCU readers in bitmap types Jozsef Kadlecsik <kadlec(a)netfilter.org> netfilter: ipset: Don't use test_bit() in lockless RCU readers in hash types Abd-Alrhman Masalkhi <abd.masalkhi(a)gmail.com> md/raid1: free r1_bio when REQ_NOWAIT is set and read would block on retry Abd-Alrhman Masalkhi <abd.masalkhi(a)gmail.com> md/raid1: honor REQ_NOWAIT when waiting for behind writes Abd-Alrhman Masalkhi <abd.masalkhi(a)gmail.com> md/raid10: fix writes_pending and barrier reference leaks on discard failures Abd-Alrhman Masalkhi <abd.masalkhi(a)gmail.com> md/raid10: fix writes_pending leak on write request failures Abd-Alrhman Masalkhi <abd.masalkhi(a)gmail.com> md/raid1: fix writes_pending and barrier reference leaks on write failures Robertus Diawan Chris <robertusdchris(a)gmail.com> mac802154: Prevent overwrite return code in mac802154_perform_association() Aleksandr Nogikh <nogikh(a)google.com> ieee802154: fix kernel-infoleak in dgram_recvmsg() Ivan Abramov <i.abramov(a)mt-integration.ru> ieee802154: Remove WARN_ON() in cfg802154_pernet_exit() Ivan Abramov <i.abramov(a)mt-integration.ru> ieee802154: Avoid calling WARN_ON() on -ENOMEM in cfg802154_switch_netns() Ivan Abramov <i.abramov(a)mt-integration.ru> ieee802154: Restore initial state on failed device_rename() in cfg802154_switch_netns() Xu Rao <raoxu(a)uniontech.com> ACPI: IPMI: Fix inverted interface check in ipmi_bmc_gone() Andy Shevchenko <andriy.shevchenko(a)linux.intel.com> ACPI: resource: Amend kernel-doc style Ricardo Neri <ricardo.neri-calderon(a)linux.intel.com> thermal: intel: Fix dangling resources on thermal_throttle_online() failure Breno Leitao <leitao(a)debian.org> arm64/hw_breakpoint: reject unaligned watchpoints that would truncate BAS Arnd Bergmann <arnd(a)arndb.de> arm64: static_call: include asm/insns.h Lorenzo Bianconi <lorenzo(a)kernel.org> netfilter: flowtable: fix and simplify IP6IP6 tunnel handling Cen Zhang <zzzccc427(a)gmail.com> ALSA: usb-audio: Kill MIDI 2.0 URBs before freeing endpoints Daniel Zahka <daniel.zahka(a)gmail.com> eth: fbnic: take netif_addr_lock_bh() around rx mode address programming Ido Schimmel <idosch(a)nvidia.com> selftests: vlan_bridge_binding: Fix flaky operational state check Breno Leitao <leitao(a)debian.org> netconsole: don't drop the last byte of a full-sized message Yun Zhou <yun.zhou(a)windriver.com> flow_dissector: check device type before reading ETH_ADDRS Lukasz Raczylo <lukasz(a)raczylo.com> net: macb: add TX stall timeout callback to recover from lost TSTART write Wayen Yan <win847(a)gmail.com> net: airoha: fix foe_check_time allocation size Cosmin Ratiu <cratiu(a)nvidia.com> devlink: Fix parent ref leak on tc-bw failure Cosmin Ratiu <cratiu(a)nvidia.com> devlink: Fix parent ref leak in devl_rate_node_create() Ioana Ciornei <ioana.ciornei(a)nxp.com> dpaa2-switch: fix VLAN upper check not rejecting bridge join Xiang Mei <xmei5(a)asu.edu> virtio-net: fix len check in receive_big() Quang Nguyen <quang.nguyen.wx(a)renesas.com> spi: rpc-if: Use correct device for hardware reinitialization on resume Mark Tomlinson <mark.tomlinson(a)alliedtelesis.co.nz> PCI: iproc: Restore .map_irq() for the platform bus driver Michael Bommarito <michael.bommarito(a)gmail.com> ALSA: usb-audio: qcom: clear opened when stream enable fails Michael Bommarito <michael.bommarito(a)gmail.com> ALSA: usb-audio: qcom: reject stream disable with no active interface Xin Long <lucien.xin(a)gmail.com> sctp: hold socket lock when dumping endpoints in sctp_diag Jakub Kicinski <kuba(a)kernel.org> net: psample: fix info leak in PSAMPLE_ATTR_DATA Ratheesh Kannoth <rkannoth(a)marvell.com> octeontx2-af: npc: Log successful MCAM drop-on-non-hit install at debug level Ratheesh Kannoth <rkannoth(a)marvell.com> octeontx2-pf: Fix leak of SQ timestamp buffer on teardown Tianchen Ding <dtcccc(a)linux.alibaba.com> selftests/ftrace: Fix trace_marker_raw test on 64K page kernels Christian Marangi <ansuelsmth(a)gmail.com> net: ethernet: mtk_eth_soc: fix supported_interface set after phylink_create Thadeu Lima de Souza Cascardo <cascardo(a)igalia.com> drm/amdgpu: initialize irq.lock spinlock earlier Mario Limonciello <mario.limonciello(a)amd.com> drm/amdkfd: fix list_del corruption in kfd_criu_resume_svm Matthew Schwartz <matthew.schwartz(a)linux.dev> drm/amd/display: Fix mem_type change detection for async flips Roman Li <Roman.Li(a)amd.com> drm/amd/display: Skip PHY SSC reduction on some 8K panels Qiang Yu <Qiang.Yu(a)amd.com> drm/amdgpu: initialize iter.start in amdgpu_devcoredump_format Yunxiang Li <Yunxiang.Li(a)amd.com> drm/amdkfd: Avoid double-unpin of DOORBELL/MMIO BOs on free Sen Wang <sen(a)ti.com> ASoC: tlv320aic3x: restrict CLKDIV bypass Q values in dual-rate mode Arnaldo Carvalho de Melo <acme(a)redhat.com> perf dso: Set standard errno on decompression failure Arnaldo Carvalho de Melo <acme(a)redhat.com> perf bpf: Validate array presence before casting BPF prog info pointers Arnaldo Carvalho de Melo <acme(a)redhat.com> perf c2c: Fix hist entry and format list leaks in c2c_he_free() Arnaldo Carvalho de Melo <acme(a)redhat.com> perf c2c: Free format list entries when c2c_hists__init() fails Arnaldo Carvalho de Melo <acme(a)redhat.com> perf cs-etm: Bounds-check CPU in cs_etm__get_queue() Arnaldo Carvalho de Melo <acme(a)redhat.com> perf cs-etm: Require full global header in auxtrace_info size check Arnaldo Carvalho de Melo <acme(a)redhat.com> perf cs-etm: Validate num_cpu before metadata allocation Arnaldo Carvalho de Melo <acme(a)redhat.com> perf machine: Use snprintf() for guestmount path construction Eric Dumazet <edumazet(a)google.com> xfrm: validate selector family and prefixlen during match Eric Dumazet <edumazet(a)google.com> xfrm: annotate data-races around xfrm_policy_count[] and xfrm_policy_default[] Herbert Xu <herbert(a)gondor.apana.org.au> xfrm: Fix xfrm state cache insertion race Xu Rao <raoxu(a)uniontech.com> ALSA: usb-audio: qcom: Free sideband sg_table objects Gao Xiang <xiang(a)kernel.org> erofs: call erofs_exit_ishare() before rcu_barrier() Adrian Hunter <adrian.hunter(a)intel.com> i3c: master: Add missing runtime PM get in dev_nack_retry_count_store() Adrian Hunter <adrian.hunter(a)intel.com> i3c: master: Update dev_nack_retry_count under maintenance lock Jisheng Zhang <jszhang(a)kernel.org> spi: dw: fix wrong BAUDR setting after resume Thomas Hellström <thomas.hellstrom(a)linux.intel.com> drm/xe: Fix wa_oob codegen recipe for external module builds Guangshuo Li <lgs201920130244(a)gmail.com> drm/i915: clear CRTC color blob pointers after dropping refs Francesco Lavra <flavra(a)baylibre.com> regcache: Do not overwrite error code when finalizing cache after error Pengpeng Hou <pengpeng(a)iscas.ac.cn> gpio: mlxbf3: fail probe if gpiochip registration fails Arnaldo Carvalho de Melo <acme(a)redhat.com> perf cs-etm: Reject CPU IDs that would overflow signed comparison Arnaldo Carvalho de Melo <acme(a)redhat.com> perf c2c: Free format list entries when releasing c2c hist entries Arnaldo Carvalho de Melo <acme(a)redhat.com> perf bpf: Bounds-check array offsets in bpil_offs_to_addr() Arnaldo Carvalho de Melo <acme(a)redhat.com> perf bpf: Reject oversized BPF metadata events that truncate header.size Arnaldo Carvalho de Melo <acme(a)redhat.com> perf bpf: Validate func_info_rec_size and sub_id in synthesize_bpf_prog_name() Arnaldo Carvalho de Melo <acme(a)redhat.com> perf sched: Replace (void*)1 sentinel with proper runtime allocation Arnaldo Carvalho de Melo <acme(a)redhat.com> perf hwmon: Fix fd check to accept fd 0 in hwmon_pmu__describe_items() Arnaldo Carvalho de Melo <acme(a)redhat.com> perf tools: Use snprintf() for root_dir path construction Arnaldo Carvalho de Melo <acme(a)redhat.com> perf dso: Set error code when open() fails on uncompressed fallback path Arnaldo Carvalho de Melo <acme(a)redhat.com> perf dso: Fix heap overflow in dso__get_filename() on decompressed path Arnaldo Carvalho de Melo <acme(a)redhat.com> perf symbols: Break infinite loop on zero-filled notes in sysfs__read_build_id() Arnaldo Carvalho de Melo <acme(a)redhat.com> perf symbols: Validate p_filesz before use in filename__read_build_id() Arnaldo Carvalho de Melo <acme(a)redhat.com> perf symbols: Fix bswap copy-paste error for 32-bit ELF p_filesz Ian Rogers <irogers(a)google.com> perf maps: Add maps__mutate_mapping Pengpeng Hou <pengpeng(a)iscas.ac.cn> sparc: led: avoid trimming a newline from empty writes Karol Wachowski <karol.wachowski(a)linux.intel.com> accel/ivpu: fix HWS command queue leak on registration failure John Johansen <john.johansen(a)canonical.com> apparmor: fix label can not be immediately before a declaration Adrian Hunter <adrian.hunter(a)intel.com> i3c: master: Prevent reuse of dynamic address on device add failure Adrian Hunter <adrian.hunter(a)intel.com> i3c: mipi-i3c-hci: Fix race in i3c_hci_addr_to_dev() Adrian Hunter <adrian.hunter(a)intel.com> i3c: master: Defer new-device registration out of DAA caller context Adrian Hunter <adrian.hunter(a)intel.com> i3c: master: Ensure Hot-Join operations are stopped on shutdown Adrian Hunter <adrian.hunter(a)intel.com> i3c: master: Consolidate Hot-Join DAA work in the core Adrian Hunter <adrian.hunter(a)intel.com> i3c: master: Serialize i3c_set_hotjoin() with the maintenance lock Adrian Hunter <adrian.hunter(a)intel.com> i3c: master: Make hot-join workqueue freezable to block hot-join during suspend Adrian Hunter <adrian.hunter(a)intel.com> i3c: mipi-i3c-hci: Preserve RUN bit when aborting DMA ring Adrian Hunter <adrian.hunter(a)intel.com> i3c: mipi-i3c-hci: Fix suspend behavior when bus disable falls back to software reset Eduardo Vasconcelos <eduardo(a)eduardovasconcelos.com> apparmor: Fix inverted comparison in cache_hold_inc() Maciek Borzecki <maciek.borzecki(a)gmail.com> apparmor: fix uninitialised pointer passed to audit_log_untrustedstring() Georgia Garcia <georgia.garcia(a)canonical.com> apparmor: don't audit files pointing to aa_null.dentry Zygmunt Krynicki <me(a)zygoon.pl> apparmor: put secmark label after secid lookup Zygmunt Krynicki <me(a)zygoon.pl> apparmor: aa_getprocattr free procattr leak on format failure John Johansen <john.johansen(a)canonical.com> apparmor: remove unnecessary goto and associated label Zygmunt Krynicki <me(a)zygoon.pl> apparmor: release exe file resources on path failure Zygmunt Krynicki <me(a)zygoon.pl> apparmor: fail policy unpack on accept2 allocation failure Hongling Zeng <zenghongling(a)kylinos.cn> apparmor: Fix return in ns_mkdir_op Georgia Garcia <georgia.garcia(a)canonical.com> apparmor: remove or add symlinks to rawdata according to export_binary Georgia Garcia <georgia.garcia(a)canonical.com> apparmor: fix NULL pointer dereference in unpack_pdb Maxime Bélair <maxime.belair(a)canonical.com> apparmor: fix potential UAF in aa_replace_profiles Ryan Lee <ryan.lee(a)canonical.com> apparmor: grab ns lock and refresh when looking up changehat child profiles John Johansen <john.johansen(a)canonical.com> apparmor: fix rawdata_f_data implicit flex array Zygmunt Krynicki <me(a)zygoon.pl> apparmor: aa_label_alloc use aa_label_free on alloc failure Ruoyu Wang <ruoyuw560(a)gmail.com> apparmor: check label build before no_new_privs test Andrew Morton <akpm(a)linux-foundation.org> security/apparmor/apparmorfs.c: conditionally compile get_loaddata_common_ref() John Johansen <john.johansen(a)canonical.com> apparmor: fix refcount leak when updating the sk_ctx John Johansen <john.johansen(a)canonical.com> apparmor: fix race in unix socket mediation when peer_path is used John Johansen <john.johansen(a)canonical.com> apparmor: fix shadowing of plabel that prevents cache from being updated Yuanhe Shu <xiangzao(a)linux.alibaba.com> Revert "PCI/MSI: Unmap MSI-X region on error" Randy Dunlap <rdunlap(a)infradead.org> Documentation: ABI: sysfs-class-reboot-mode-reboot_modes: fix doc warnings Thomas Weißschuh <linux(a)weissschuh.net> sparc: Avoid -Wunused-but-set-parameter in clear_user_page() Dong Chenchen <dongchenchen2(a)huawei.com> xfrm: Fix dev use-after-free in xfrm async resumption Shuvam Pandey <shuvampandey1(a)gmail.com> PCI: dwc: Avoid dwc_pcie_rasdes_debugfs_deinit() NULL dereference when no RAS DES capability Felix Gu <ustc.gu(a)gmail.com> phy: freescale: phy-fsl-imx8qm-lvds-phy: Fix missing pm_runtime_disable() on probe error path Felix Gu <ustc.gu(a)gmail.com> phy: freescale: phy-fsl-imx8qm-lvds-phy: Use synchronous PM runtime put in reset Manivannan Sadhasivam <manivannan.sadhasivam(a)oss.qualcomm.com> PCI: mediatek: Use actual physical address instead of virt_to_phys() Konrad Dybcio <konrad.dybcio(a)oss.qualcomm.com> dt-bindings: phy: sc8280xp-qmp-pcie: Disallow bifurcation register on Purwa Inochi Amaoto <inochiama(a)gmail.com> dt-bindings: dma: snps,dw-axi-dmac: Add fallback compatible for CV1800B Arnaldo Carvalho de Melo <acme(a)redhat.com> perf symbols: Add bounds checks to read_build_id() note iteration in minimal build Arnaldo Carvalho de Melo <acme(a)redhat.com> perf symbols: Add bounds checks to elf_read_build_id() note iteration Arnaldo Carvalho de Melo <acme(a)redhat.com> perf bpf: Fix metadata leak in perf_env__add_bpf_info() on duplicate insert Arnaldo Carvalho de Melo <acme(a)redhat.com> perf bpf: Fix map data leak in bpf_metadata_create() on alloc failure Arnaldo Carvalho de Melo <acme(a)redhat.com> perf bpf: Add NULL check for btf__type_by_id() in synthesize_bpf_prog_name() Arnaldo Carvalho de Melo <acme(a)redhat.com> tools lib api: Fix mount_overload() snprintf truncation and toupper range Arnaldo Carvalho de Melo <acme(a)redhat.com> tools lib api: Fix filename__write_int() writing uninitialized stack data Arnaldo Carvalho de Melo <acme(a)redhat.com> perf tools: Use snprintf() in dso__read_running_kernel_build_id() Arnaldo Carvalho de Melo <acme(a)redhat.com> perf hwmon: Guard label read against empty or failed reads Arnaldo Carvalho de Melo <acme(a)redhat.com> perf tools: Fix uninitialized pathname on uncompressed fallback in filename__decompress() Arnaldo Carvalho de Melo <acme(a)redhat.com> perf symbols: Bounds-check descsz in sysfs__read_build_id() GNU fallback Arnaldo Carvalho de Melo <acme(a)redhat.com> perf hwmon: Fix parse_hwmon_filename() strlcpy buffer overflow Arnaldo Carvalho de Melo <acme(a)redhat.com> perf hwmon: Use scnprintf() in hwmon_pmu__for_each_event() Arnaldo Carvalho de Melo <acme(a)redhat.com> perf hwmon: Fix off-by-one null termination on sysfs reads Arnaldo Carvalho de Melo <acme(a)redhat.com> perf tools: Fix thread__set_comm_from_proc() on empty comm file Arnaldo Carvalho de Melo <acme(a)redhat.com> perf intel-pt: Fix snprintf size tracking bug in insn decoder Arnaldo Carvalho de Melo <acme(a)redhat.com> perf tools: Use mkostemp() for O_CLOEXEC on temporary files Arnaldo Carvalho de Melo <acme(a)redhat.com> perf symbols: Bounds-check .gnu_debuglink section data Arnaldo Carvalho de Melo <acme(a)redhat.com> perf symbols: Fix signed overflow in sysfs__read_build_id() size check Arnaldo Carvalho de Melo <acme(a)redhat.com> tools lib api: Fix missing null termination in filename__read_int/ull() Arnaldo Carvalho de Melo <acme(a)redhat.com> perf pmu: Fix perf_pmu__parse_scale/unit() OOB access on empty sysfs file Arnaldo Carvalho de Melo <acme(a)redhat.com> perf pmu: Fix pmu_id() heap underwrite on empty identifier file James Clark <james.clark(a)linaro.org> perf cs-etm: Queue context packets for frontend Tanushree Shah <tshah(a)linux.ibm.com> perf data convert json: Fix addr_location leak on time-filtered samples Jens Remus <jremus(a)linux.ibm.com> perf s390: Fix TEXTREL in Python extension by compiling as PIC Chuck Lever <chuck.lever(a)oracle.com> xprtrdma: Return sendctx slot after Send preparation failure Chuck Lever <chuck.lever(a)oracle.com> xprtrdma: Repost Receive buffers for malformed replies Chuck Lever <chuck.lever(a)oracle.com> xprtrdma: Sanitize the reply credit grant after parsing Chris Mason <clm(a)meta.com> xprtrdma: Fix bcall rep leak and unbounded peek Chuck Lever <chuck.lever(a)oracle.com> xprtrdma: Resize reply buffers before reposting receives Chuck Lever <chuck.lever(a)oracle.com> xprtrdma: Document and assert reply-handler invariants Chuck Lever <chuck.lever(a)oracle.com> xprtrdma: Check frwr_wp_create() during connect Chris Mason <clm(a)meta.com> xprtrdma: Initialize re_id before removal registration Chris Mason <clm(a)meta.com> xprtrdma: Fix ep kref imbalance on ADDR_CHANGE Arnaldo Carvalho de Melo <acme(a)redhat.com> perf tools: Use scnprintf() in build_id__snprintf() and hwmon read_events() Arnaldo Carvalho de Melo <acme(a)redhat.com> perf hists: Fix snprintf() in hists__scnprintf_title() UID filter path Arnaldo Carvalho de Melo <acme(a)redhat.com> perf bpf: Use scnprintf() in snprintf_hex() and synthesize_bpf_prog_name() Arnaldo Carvalho de Melo <acme(a)redhat.com> perf tools: Add O_CLOEXEC to open() calls in DSO and ELF code Arnaldo Carvalho de Melo <acme(a)redhat.com> perf sched: Fix idle-hist callchain display using wrong rb_first variant Arnaldo Carvalho de Melo <acme(a)redhat.com> perf sched: Bounds-check prio before test_bit() in timehist Lad Prabhakar <prabhakar.mahadev-lad.rj(a)bp.renesas.com> PCI: rcar-host: Remove unused LIST_HEAD(res) Arnaldo Carvalho de Melo <acme(a)redhat.com> perf tools: NULL bitmap pointers after bitmap_free() Arnaldo Carvalho de Melo <acme(a)redhat.com> perf tools: Use perf_env__get_cpu_topology() in machine__resolve() Arnaldo Carvalho de Melo <acme(a)redhat.com> perf tools: Use scnprintf() in cpu_map__snprint() to prevent overflow Arnaldo Carvalho de Melo <acme(a)redhat.com> perf tools: Fix get_max_num() size_t underflow on empty sysfs file David E. Box <david.e.box(a)linux.intel.com> platform/x86/intel/vsec: Restore BAR fallback for header walk Jamie Nguyen <jamien(a)nvidia.com> fs/ntfs3: resize log->one_page_buf when adopting on-disk page size Edward Adam Davis <eadavis(a)qq.com> fs/ntfs3: prevent potential lcn remains uninitialized Christian Fontanez <christfontanez(a)gmail.com> virtio: add missing kernel-doc for map and vmap members Chuck Lever <chuck.lever(a)oracle.com> lockd: Correct kernel-doc status descriptions for NLMv4 GRANTED Shuvam Pandey <shuvampandey1(a)gmail.com> PCI: meson: Add missing remove callback Shuvam Pandey <shuvampandey1(a)gmail.com> PCI: meson: Propagate devm_add_action_or_reset() failure Biju Das <biju.das.jz(a)bp.renesas.com> pwm: rzg2l-gpt: Add missing newlines to dev_err_probe() messages Li RongQing <lirongqing(a)baidu.com> PCI: mediatek: Fix operator precedence in PCIE_FTS_NUM_L0 macro Yang Erkun <yangerkun(a)huawei.com> nfs: use nfsi->rwsem to protect traversal of the file lock list Mike Snitzer <snitzer(a)kernel.org> NFSv4/flexfiles: honor FF_FLAGS_NO_IO_THRU_MDS in pg_get_mirror_count_write Mike Snitzer <snitzer(a)kernel.org> NFSv4/flexfiles: honor FF_FLAGS_NO_IO_THRU_MDS on fatal DS connect errors Clark Wang <xiaoning.wang(a)nxp.com> nfs: keep PG_UPTODATE clear after read errors in page groups Dai Ngo <dai.ngo(a)oracle.com> NFSv4/pnfs: defer return_range callbacks until after inode unlock Chuck Lever <chuck.lever(a)oracle.com> xprtrdma: Decouple req recycling from RPC completion Chuck Lever <chuck.lever(a)oracle.com> xprtrdma: Use sendctx DMA state for Send signaling Sagi Grimberg <sagi(a)grimberg.me> pNFS/filelayout: fix cheking if a layout is striped Hongling Zeng <zenghongling(a)kylinos.cn> sunrpc: Fix error handling in rpc_sysfs_xprt_switch_add_xprt_store() Phillip Varney <pbvarney(a)protonmail.com> clk: qcom: a53: Corrected frequency multiplier for 1152MHz Nuno Sá <nuno.sa(a)analog.com> dmaengine: dma-axi-dmac: use DMA pool to manange DMA descriptor Nuno Sá <nuno.sa(a)analog.com> dmaengine: dma-axi-dmac: Properly free struct axi_dmac_desc Nuno Sá <nuno.sa(a)analog.com> dmaengine: Fix possible use after free Icenowy Zheng <zhengxingda(a)iscas.ac.cn> dmaengine: qcom: gpi: set DMA_PRIVATE capability Junrui Luo <moonafterrain(a)outlook.com> mshv: add bounds check on vp_index in mshv_intercept_isr() Pratyush Yadav (Google) <pratyush(a)kernel.org> docs: memfd_preservation: fix rendering of ABI documentation Jagadeesh Kona <jagadeesh.kona(a)oss.qualcomm.com> clk: qcom: camcc-x1e80100: Add support for camera QDSS debug clocks Jagadeesh Kona <jagadeesh.kona(a)oss.qualcomm.com> dt-bindings: clock: qcom: Add X1P42100 camera clock controller Arnaldo Carvalho de Melo <acme(a)redhat.com> perf sched: Free callchain nodes in idle thread cleanup Arnaldo Carvalho de Melo <acme(a)redhat.com> perf tools: Fix int16_t truncation of max_cpu_num in set_max_cpu_num() Arnaldo Carvalho de Melo <acme(a)redhat.com> perf timechart: Fix cpu2y() OOB read on untrusted CPU index Arnaldo Carvalho de Melo <acme(a)redhat.com> perf c2c: Fix use-after-free in he__get_c2c_hists() error path Arnaldo Carvalho de Melo <acme(a)redhat.com> perf stat: Introduce perf_env__get_cpu_topology() to guard NULL env->cpu Arnaldo Carvalho de Melo <acme(a)redhat.com> perf mmap: Fix NULL deref in aio cleanup on alloc failure Arnaldo Carvalho de Melo <acme(a)redhat.com> perf sched: Replace BUG_ON and add NULL checks in replay event helpers Arnaldo Carvalho de Melo <acme(a)redhat.com> perf sched: Use thread__put() in free_idle_threads() Arnaldo Carvalho de Melo <acme(a)redhat.com> perf sched: Fix thread reference leak in idle hist processing Arnaldo Carvalho de Melo <acme(a)redhat.com> perf sched: Use is_idle_sample() for idle thread runtime cast guard Arnaldo Carvalho de Melo <acme(a)redhat.com> perf sched: Clean up idle_threads entry on init failure Arnaldo Carvalho de Melo <acme(a)redhat.com> perf c2c: Bounds-check CPU IDs in setup_nodes() topology loop Arnaldo Carvalho de Melo <acme(a)redhat.com> perf c2c: Bounds-check CPU and node IDs before bitmap and array access Arnaldo Carvalho de Melo <acme(a)redhat.com> perf stat: Bounds-check CPU index in topology aggregation callbacks Arnaldo Carvalho de Melo <acme(a)redhat.com> perf mmap: Guard cpu__get_node() return in aio_bind() Arnaldo Carvalho de Melo <acme(a)redhat.com> perf sched: Fix register_pid() overflow, strcpy, and BUG_ON Arnaldo Carvalho de Melo <acme(a)redhat.com> perf sched: Cap max_cpu at MAX_CPUS in timehist sample processing Arnaldo Carvalho de Melo <acme(a)redhat.com> perf sched: Fix thread reference leaks in timehist_get_thread() Arnaldo Carvalho de Melo <acme(a)redhat.com> perf tools: Add bounds check to cpu__get_node() Arnaldo Carvalho de Melo <acme(a)redhat.com> perf tools: Guard remaining test_bit calls from OOB sample CPU Arnaldo Carvalho de Melo <acme(a)redhat.com> perf sched: Fix comp_cpus heap overflow with cross-machine recordings Arnaldo Carvalho de Melo <acme(a)redhat.com> perf sched: Fix NULL dereference in latency_runtime_event Arnaldo Carvalho de Melo <acme(a)redhat.com> perf sched: Replace BUG_ON on invalid CPU with graceful skip Arnaldo Carvalho de Melo <acme(a)redhat.com> perf sample: Add file_offset field to struct perf_sample Arnaldo Carvalho de Melo <acme(a)redhat.com> perf sched: Fix thread reference leak in latency_switch_event Arnaldo Carvalho de Melo <acme(a)redhat.com> perf tools: Guard test_bit from out-of-bounds sample CPU James Clark <james.clark(a)linaro.org> perf annotate: Fix crashes on empty annotate windows Rui Qi <qirui.001(a)bytedance.com> perf: Fix off-by-one stack buffer overflow in kallsyms__parse() Akhil R <akhilrajeev(a)nvidia.com> dt-bindings: dma: nvidia,tegra186-gpc-dma: Make reset optional Shengjiu Wang <shengjiu.wang(a)nxp.com> dmaengine: imx-sdma: Refine spba bus searching in probe Xu Rao <raoxu(a)uniontech.com> thunderbolt: debugfs: Fix margining error counter buffer leak Srinivasan Shanmugam <srinivasan.shanmugam(a)amd.com> drm/amd/display: Add missing kdoc for ALLM parameters Jamie Nguyen <jamien(a)nvidia.com> fs/ntfs3: fix mount failure on 64K page-size kernels Arnd Bergmann <arnd(a)arndb.de> ntfs3: avoid another -Wmaybe-uninitialized warning Mihai Brodschi <m.brodschi(a)gmail.com> ntfs3: Allocate iomap inline_data using alloc_page Helen Koike <koike(a)igalia.com> fs/ntfs3: call _ntfs_bad_inode() when failing to rename Zhan Xusheng <zhanxusheng1024(a)gmail.com> fs/ntfs3: fix wrong LCN in run_remove_range() when splitting a run Konstantin Komarov <almaz.alexandrovich(a)paragon-software.com> fs/ntfs3: add bounds check to run_get_highest_vcn() Yixun Lan <dlan(a)kernel.org> clk: spacemit: k3: Fix PCIe clock register offset Yixun Lan <dlan(a)kernel.org> clk: spacemit: k3: Switch to pll2_d6 as parent for PCIe clock Zhan Xusheng <zhanxusheng1024(a)gmail.com> docs: changes.rst: restore pahole 1.26 minimum (regressed by sort) Rosen Penev <rosenp(a)gmail.com> HID: logitech-hidpp: remove excess kernel-doc member in hidpp_scroll_counter Yuho Choi <dbgh9129(a)gmail.com> clk: at91: keep securam node alive while mapping it Aldo Conte <aldocontelk(a)gmail.com> iio: tcs3472: power down chip on probe failure Sanjay Chitroda <sanjayembeddedse(a)gmail.com> iio: accel: mma8452: handle I2C read error(s) in mma8452_read() Guilherme Ivo Bozi <guilherme.bozi(a)usp.br> iio: adc: xilinx-ams: fix out-of-bounds channel lookup in event handling Joshua Crofts <joshua.crofts1(a)gmail.com> iio: magnetometer: ak8975: fix potential kernel stack memory leak Joshua Crofts <joshua.crofts1(a)gmail.com> iio: light: si1133: prevent race condition on timeout Joshua Crofts <joshua.crofts1(a)gmail.com> iio: light: si1133: reset counter to prevent race condition Arnaldo Carvalho de Melo <acme(a)redhat.com> perf header: Validate bitmap size before allocating in do_read_bitmap() Arnaldo Carvalho de Melo <acme(a)redhat.com> perf header: Sanity check HEADER_EVENT_DESC attr.size before swap Zhan Xusheng <zhanxusheng(a)xiaomi.com> timers/migration: Update stale @online doc to @available Shawn Guo <shengchao.guo(a)oss.qualcomm.com> PCI: qcom: Disable ASPM L0s for SA8775P Athira Rajeev <atrajeev(a)linux.ibm.com> powerpc tools perf: Initialize error code in auxtrace_record_init function Baruch Siach <baruch(a)tkos.co.il> docs: threat-model: add missing closing parenthesis Lad Prabhakar <prabhakar.mahadev-lad.rj(a)bp.renesas.com> clk: renesas: rzg2l: Rename iterator in for_each_mod_clock() to avoid shadowing Hongling Zeng <zenghongling(a)kylinos.cn> gpib: cb7210: Fix region leak when request_irq fails Adam Crosser <adam.crosser(a)praetorian.com> gpib: fix double decrement of descriptor_busy in command_ioctl() Rafael J. Wysocki <rafael.j.wysocki(a)intel.com> sonypi: Check ACPI_COMPANION() against NULL at probe time Rafael J. Wysocki <rafael.j.wysocki(a)intel.com> hpet: Check ACPI_COMPANION() against NULL at probe time James Kim <james010kim(a)gmail.com> char: tlclk: fix use-after-free in tlclk_cleanup() Dave Penkler <dpenkler(a)gmail.com> gpib: Fix inappropriate ioctl error return Ravi Bangoria <ravi.bangoria(a)amd.com> perf test amd ibs: Fix incorrect kernel version check Seungjin Bae <eeodqql09(a)gmail.com> usb: host: max3421: Reject hub port requests for non-existent ports Seungjin Bae <eeodqql09(a)gmail.com> usb: host: max3421: Fix shift-out-of-bounds in max3421_hub_control() Guangshuo Li <lgs201920130244(a)gmail.com> staging: most: video: avoid double free on video register failure Ian Rogers <irogers(a)google.com> perf inject: Fix itrace branch stack synthesis Ian Rogers <irogers(a)google.com> perf event: Fix size of synthesized sample with branch stacks Michael Petlan <mpetlan(a)redhat.com> perf build-id: Fix off-by-one bug when printing kernel/module build-id Conor Dooley <conor.dooley(a)microchip.com> clk: microchip: mpfs-ccc: fix peripheral driver registration failures after oob fix Rafael J. Wysocki <rafael.j.wysocki(a)intel.com> platform/x86: classmate-laptop: Address memory leaks on driver removal Chen-Yu Tsai <wenst(a)chromium.org> PCI: mediatek-gen3: Fix incorrectly skipped pwrctrl error message Dan Carpenter <error27(a)gmail.com> PCI: dwc: Fix signedness bug in fault injection test code Jie Gan <jie.gan(a)oss.qualcomm.com> coresight: platform: defer connection counter increment until alloc succeeds Bartosz Golaszewski <bartosz.golaszewski(a)oss.qualcomm.com> PCI/pwrctrl: Lock device when calling device_is_bound() Wolfram Sang <wsa+renesas(a)sang-engineering.com> mailbox: don't free the channel if the startup callback failed Sergey Senozhatsky <senozhatsky(a)chromium.org> mailbox: mtk-adsp: fix UAF during device teardown Conor Dooley <conor.dooley(a)microchip.com> mailbox: mpfs: fix check for syscon presence in mpfs_mbox_inbox_isr() Chen-Yu Tsai <wenst(a)chromium.org> PCI: mediatek-gen3: Do full device power down on removal Leo Yan <leo.yan(a)arm.com> coresight: Handle helper enable failure properly Jie Gan <jie.gan(a)oss.qualcomm.com> coresight: Fix source not disabled on idr_alloc_u32 failure Bard Liao <yung-chuan.liao(a)linux.intel.com> soundwire: intel_ace2x: release bpt_stream when close it Rafael J. Wysocki <rafael.j.wysocki(a)intel.com> iio: light: acpi-als: Check ACPI_COMPANION() against NULL Mihai Sain <mihai.sain(a)microchip.com> clk: at91: sam9x7: Fix gmac_gclk clock definition Leo Yan <leo.yan(a)arm.com> perf pmu: Skip test on Arm64 when #slots is zero Ian Rogers <irogers(a)google.com> perf unwind: Refactor get_entries to allow dynamic libdw/libunwind selection Ian Rogers <irogers(a)google.com> perf pmu-events AMD: Switch l2_itlb_misses to bp_l1_tlb_miss_l2_tlb_miss.all Andy Shevchenko <andriy.shevchenko(a)linux.intel.com> phy: phy-can-transceiver: Check driver match and driver data against NULL Qiang Yu <qiang.yu(a)oss.qualcomm.com> PCI: qcom: Set max OPP before DBI access during resume Manikanta Maddireddy <mmaddireddy(a)nvidia.com> PCI: dwc: Apply ECRC workaround for DesignWare cores prior to 5.10a Biswapriyo Nath <nathbappai(a)gmail.com> dt-bindings: clock: qcom,sm6125-dispcc: reference qcom,gcc.yaml Luo Jie <jie.luo(a)oss.qualcomm.com> clk: qcom: cmnpll: Account for reference clock divider Jie Gan <jie.gan(a)oss.qualcomm.com> coresight: fix missing error code when trace ID is invalid Sumit Kumar <sumit.kumar(a)oss.qualcomm.com> bus: mhi: ep: Add missing state_lock protection for mhi_state access Sumit Kumar <sumit.kumar(a)oss.qualcomm.com> bus: mhi: ep: Fix potential deadlock in mhi_ep_reset_worker() Hsiu Che Yu <yu.whisper.personal(a)gmail.com> rust: alloc: fix assert in `Vec::reserve` doc test Rong Zhang <i(a)rong.moe> PCI: loongson: Do not ignore downstream devices on external bridges Florian Eckert <fe(a)dev.tdt.de> PCI: intel-gw: Add .start_link() callback Florian Eckert <fe(a)dev.tdt.de> PCI: intel-gw: Enable clock before PHY init Florian Eckert <fe(a)dev.tdt.de> PCI: intel-gw: Move interrupt enable to own function Ian Rogers <irogers(a)google.com> perf tool: Fix missing schedstat delegates and dont_split_sample_group in delegate_tool Ian Rogers <irogers(a)google.com> perf sched: Add missing mmap2 handler in timehist Rafael J. Wysocki <rafael.j.wysocki(a)intel.com> platform/x86: xo15-ebook: Fix wakeup source and GPE handling Rafael J. Wysocki <rafael.j.wysocki(a)intel.com> x86/platform/olpc: xo15: Drop wakeup source on driver removal Guixin Liu <kanie(a)linux.alibaba.com> PCI: Check ROM header and data structure addr before accessing Guixin Liu <kanie(a)linux.alibaba.com> PCI: Introduce named defines for PCI ROM Carlos Bilbao <carlos.bilbao(a)kernel.org> PCI/ASPM: Don't reconfigure ASPM entering low-power state Leo Yan <leo.yan(a)arm.com> coresight: etm4x: Correct TRCVMIDCCTLR1 save and restore James Clark <james.clark(a)linaro.org> coresight: ete: Always save state on power down Leo Yan <leo.yan(a)arm.com> coresight: tmc: Fix overflow when calculating is bigger than 2GiB Baoli.Zhang <baoli.zhang(a)linux.intel.com> soundwire: fix bug in sdw_add_element_group_count found by syzkaller Bard Liao <yung-chuan.liao(a)linux.intel.com> soundwire: don't program SDW_SCP_BUSCLOCK_SCALE on a unattached Peripheral Yingchao Deng <yingchao.deng(a)oss.qualcomm.com> coresight: cti: Fix DT filter signals silently ignored Thomas Richter <tmricht(a)linux.ibm.com> perf callchain: Handle multiple address spaces Ian Rogers <irogers(a)google.com> perf debuginfo: Fix libdw API contract violations Ian Rogers <irogers(a)google.com> perf annotate-data: Fix libdw API contract violations Ian Rogers <irogers(a)google.com> perf probe-finder: Fix libdw API contract violations Ian Rogers <irogers(a)google.com> perf libdw: Fix libdw API contract violations and memory leaks Ian Rogers <irogers(a)google.com> perf srcline: Introduce inline_node__clear_frames() Ian Rogers <irogers(a)google.com> perf dwarf-aux: Fix libdw API contract violations Ian Rogers <irogers(a)google.com> perf dwarf-aux: Fix libdw segmentation fault in cu_walk_functions_at Alexandru Hossu <hossu.alexandru(a)gmail.com> staging: nvec: fix use-after-free in nvec_rx_completed() Maksym Pikhotskyi <mpikhotskyi(a)gmail.com> staging: rtl8723bs: fix stainfo check in rtw_aes_decrypt Stanley Chu <yschu(a)nuvoton.com> i3c: master: svc: Fix missed IBI after false SLVSTART on NPCM845 Mario Limonciello <mario.limonciello(a)amd.com> gpiolib: acpi: Only trigger ActiveBoth interrupts on boot Nam Cao <namcao(a)linutronix.de> eventpoll: Fix epoll_wait() report false negative Christian Brauner <brauner(a)kernel.org> eventpoll: rename epi->next and txlist for clarity Christian Brauner <brauner(a)kernel.org> eventpoll: expand top-of-file overview / locking doc Gui-Dong Han <hanguidong02(a)gmail.com> 9p: Add missing read barrier in virtio zero-copy path Yizhou Zhao <zhaoyz24(a)mails.tsinghua.edu.cn> net/9p: fix race condition on rdma->state in trans_rdma.c Hongling Zeng <zenghongling(a)kylinos.cn> 9p: avoid returning ERR_PTR(0) from mkdir operations Aleksandr Nogikh <nogikh(a)google.com> ocfs2: fix circular locking dependency in ocfs2_dio_end_io_write Charles Keepax <ckeepax(a)opensource.cirrus.com> mfd: cs42l43: Sanity check firmware size Matthew Bystrin <dev.mbstr(a)gmail.com> mfd: rsmu: Fix page register setup Matti Vaittinen <mazziesaccount(a)gmail.com> mfd: bd72720: Drop BUCK11 ID Guangshuo Li <lgs201920130244(a)gmail.com> ksmbd: fix use-after-free in same_client_has_lease() Eric Dumazet <edumazet(a)google.com> net: serialize netif_running() check in enqueue_to_backlog() Jacob Moroni <jmoroni(a)google.com> RDMA/irdma: Replace waitqueue and flag with completion Junxian Huang <huangjunxian6(a)hisilicon.com> RDMA/hns: Fix memory leak of bonding resources Selvin Xavier <selvin.xavier(a)broadcom.com> RDMA/bnxt_re: Reject GET_TOGGLE_MEM when toggle page was not allocated Selvin Xavier <selvin.xavier(a)broadcom.com> RDMA/bnxt_re: Fail DBR related page allocation UAPIs if the feature is disabled Selvin Xavier <selvin.xavier(a)broadcom.com> RDMA/bnxt_re: Avoid repeated requests to allocate WC pages Selvin Xavier <selvin.xavier(a)broadcom.com> RDMA/bnxt_re: Proper rollback if the ioremap fails Selvin Xavier <selvin.xavier(a)broadcom.com> RDMA/bnxt_re: Add a max slot check for SQ Sriharsha Basavapatna <sriharsha.basavapatna(a)broadcom.com> RDMA/bnxt_re: Enable app allocated QPs Sriharsha Basavapatna <sriharsha.basavapatna(a)broadcom.com> RDMA/bnxt_re: Support doorbells for app allocated QPs Sriharsha Basavapatna <sriharsha.basavapatna(a)broadcom.com> RDMA/bnxt_re: Enhance dbr usecnt logic in doorbell uapis Sriharsha Basavapatna <sriharsha.basavapatna(a)broadcom.com> RDMA/bnxt_re: Update msn table size for app allocated QPs Sriharsha Basavapatna <sriharsha.basavapatna(a)broadcom.com> RDMA/bnxt_re: Refactor bnxt_re_init_user_qp() Selvin Xavier <selvin.xavier(a)broadcom.com> RDMA/bnxt_re: Avoid displaying the kernel pointer Selvin Xavier <selvin.xavier(a)broadcom.com> RDMA/bnxt_re: Free CQ toggle page after firmware teardown Selvin Xavier <selvin.xavier(a)broadcom.com> RDMA/bnxt_re: Free SRQ toggle page after firmware teardown Selvin Xavier <selvin.xavier(a)broadcom.com> RDMA/bnxt_re: Initialize dpi variable to zero Brett Creeley <brett.creeley(a)amd.com> ionic: Fix check in ionic_get_link_ext_stats Selvamani Rajagopal <Selvamani.Rajagopal(a)onsemi.com> net: ethernet: oa_tc6: Remove FCS size in RX frame Selvamani Rajagopal <Selvamani.Rajagopal(a)onsemi.com> net: ethernet: oa_tc6: mdiobus->parent initialized with NULL Meghana Malladi <m-malladi(a)ti.com> net: ti: icssg: Use undirected TX tag for XDP zero copy in HSR offload mode Meghana Malladi <m-malladi(a)ti.com> net: ti: icssg: Use undirected TX tag for native XDP in HSR offload mode Meghana Malladi <m-malladi(a)ti.com> net: ti: icssg-prueth: Fix AF_XDP fill ring alloc and wakeup condition Wayen.Yan <win847(a)gmail.com> net: airoha: Fix always-true condition in PPE1 queue reservation loop Eric Dumazet <edumazet(a)google.com> tcp: ipv6: clamp default adverting MSS to avoid GSO_BY_FRAGS (0xFFFF) Eric Dumazet <edumazet(a)google.com> tipc: fix UAF in tipc_l2_send_msg() Gui-Dong Han <hanguidong02(a)gmail.com> KEYS: Use acquire when reading state in keyring search Aboorva Devarajan <aboorvad(a)linux.ibm.com> powerpc/kexec: fix double get_cpu() imbalance in kexec_prepare_cpus Aboorva Devarajan <aboorvad(a)linux.ibm.com> powerpc/powernv: fix preempt count leak in pnv_kexec_wait_secondaries_down Aboorva Devarajan <aboorvad(a)linux.ibm.com> powerpc/perf: fix preempt count underflow in fsl_emb_pmu_del Yadan Fan <ydfan(a)suse.com> MIPS: mm: Fix out-of-bounds write in maar_res_walk() Sechang Lim <rhkrqnwk98(a)gmail.com> bpf, sockmap: fix integer overflow in bpf_msg_pop_data() bounds check Kuniyuki Iwashima <kuniyu(a)google.com> sockmap: Fix use-after-free in udp_bpf_recvmsg() Weiming Shi <bestswngs(a)gmail.com> bpf, sockmap: reject overflowing copy + len in bpf_msg_push_data() Al Viro <viro(a)zeniv.linux.org.uk> udf: fix nls leak on udf_fill_super() failure Leon Hwang <leon.hwang(a)linux.dev> bpf: Fix bpf_get/setsockopt to tos for ipv4-mapped ipv6 socket Leo Yan <leo.yan(a)arm.com> selftests/bpf: Initialize operation name before use Jiri Olsa <jolsa(a)kernel.org> selftests/bpf: Fix typo in verify_umulti_link_info Jiri Olsa <jolsa(a)kernel.org> bpf: Guard __get_user acesss with access_ok for uprobe_multi data Nathan Chancellor <nathan(a)kernel.org> btrfs: Drop WQ_PERCPU from ordered_flags in btrfs_init_workqueues() Huiwen He <hehuiwen(a)kylinos.cn> smb/client: always return a value for FS_IOC_GETFLAGS Jian Zhang <zhangjian496(a)huawei.com> cifs: remove all cifs files before kill super Henrique Carvalho <henrique.carvalho(a)suse.com> smb: client: fix conflicting option validation for new mount API Takashi Iwai <tiwai(a)suse.de> ALSA: core: Fix unintuitive behavior of snd_power_ref_and_wait() Alice Mikityanska <alice(a)isovalent.com> geneve: Fix off-by-one comparing with GRO_LEGACY_MAX_SIZE Pablo Neira Ayuso <pablo(a)netfilter.org> netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them Florian Westphal <fw(a)strlen.de> netfilter: nf_conncount: callers must hold rcu read lock Cen Zhang <zzzccc427(a)gmail.com> ALSA: seq: avoid stale FIFO cells during resize Cen Zhang <zzzccc427(a)gmail.com> ALSA: seq: oss: Serialize readq reset state with q->lock Runyu Xiao <runyu.xiao(a)seu.edu.cn> kcm: use WRITE_ONCE() when changing lower socket callbacks Wayen.Yan <win847(a)gmail.com> net: airoha: Fix debugfs new-tuple display for IPv4 ROUTE entries Wayen.Yan <win847(a)gmail.com> net: airoha: Fix register index for Tx-fwd counter configuration Ratheesh Kannoth <rkannoth(a)marvell.com> octeontx2-af: fix NPC mailbox codes in mbox.h Ovidiu Panait <ovidiu.panait.rb(a)renesas.com> net: bcmgenet: Use weighted round-robin TX DMA arbitration Matthieu Buffet <matthieu(a)buffet.re> landlock: Fix unmarked concurrent access to socket family Grzegorz Nitka <grzegorz.nitka(a)intel.com> dpll: balance create/delete notifications in __dpll_pin_(un)register Grzegorz Nitka <grzegorz.nitka(a)intel.com> dpll: guard sync-pair removal on full pin unregister Grzegorz Nitka <grzegorz.nitka(a)intel.com> dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() Grzegorz Nitka <grzegorz.nitka(a)intel.com> dpll: send delete notification before unregister in on-pin rollback Grzegorz Nitka <grzegorz.nitka(a)intel.com> dpll: fix stale iteration in dpll_pin_on_pin_unregister() Ruoyu Wang <ruoyuw560(a)gmail.com> net: wwan: t7xx: check skb_clone in control TX Wentao Guan <guanwentao(a)uniontech.com> net: ethernet: mtk_wed: debugfs: correct index in wed_amsdu_show() Wayen.Yan <win847(a)gmail.com> net: airoha: Fix error handling in airoha_ppe_flush_sram_entries() Ratheesh Kannoth <rkannoth(a)marvell.com> octeontx2-af: npc: Fix size of entry2cntr_map Xu Kuohai <xukuohai(a)huawei.com> bpf: Fix setting retval to -EPERM for cgroup hooks not returning errno Dragos Tatulea <dtatulea(a)nvidia.com> net/mlx5: Check max_macs devlink param value against max capability Sun Jian <sun.jian.kdev(a)gmail.com> bpf: Run generic devmap egress prog on private skb Victor Nogueira <victor(a)mojatatu.com> net/sched: sch_dualpi2: Add missing module alias Zhi-Jun You <hujy652(a)gmail.com> net: ethernet: mtk_wed: fix loading WO firmware for MT7986 Eric Dumazet <edumazet(a)google.com> net: watchdog: fix refcount tracking races Aditya Garg <gargaditya(a)linux.microsoft.com> net: mana: guard TX wq object destroy with INVALID_MANA_HANDLE check Aditya Garg <gargaditya(a)linux.microsoft.com> net: mana: initialize gdma queue id to INVALID_QUEUE_ID Victor Nogueira <victor(a)mojatatu.com> net/sched: sch_dualpi2: Do not call qdisc_tree_reduce_backlog during peek before restoring qlen Victor Nogueira <victor(a)mojatatu.com> net/sched: sch_codel: Do not call qdisc_tree_reduce_backlog during peek before restoring qlen Victor Nogueira <victor(a)mojatatu.com> net/sched: sch_fq_codel: Do not call qdisc_tree_reduce_backlog during peek before restoring qlen Paolo Abeni <pabeni(a)redhat.com> virtio_net: do not allow tunnel csum offload for non GSO packets Sechang Lim <rhkrqnwk98(a)gmail.com> tcp: clear sock_ops cb flags before force-closing a child socket Joe Damato <joe(a)dama.to> bnxt: fix head underflow on XDP head-grow Chuck Lever <chuck.lever(a)oracle.com> handshake: Require admin permission for DONE command Lucas Tsai <lucas_tsai(a)richtek.com> power: supply: core: fix supplied_from allocations Dan Williams <djbw(a)kernel.org> cxl/memdev: Pin parents for entire memdev lifetime Dan Williams <djbw(a)kernel.org> cxl/region: Resolve region deletion races Dan Williams <djbw(a)kernel.org> cxl/region: Block region delete during region creation Guangshuo Li <lgs201920130244(a)gmail.com> ASoC: adau1372: Clear PLL_EN on failed PLL lock without reset GPIO David Matlack <dmatlack(a)google.com> vfio: selftests: Ensure libvfio output dirs are always created Li Ming <ming.li(a)zohomail.com> cxl/region: Fill first free targets[] slot during auto-discovery Li Ming <ming.li(a)zohomail.com> cxl/region: Fix out-of-bounds access in cxl_cancel_auto_attach() Chia-Lin Kao (AceLan) <acelan.kao(a)canonical.com> ASoC: sdw_utils: fix missing component_name for cs42l43 part_id 0x2A3B Nicolin Chen <nicolinc(a)nvidia.com> iommu: Avoid copying the user array twice in the full-array copy helper Lars Pöschel <lars.poeschel(a)edag.com> spi: xilinx: use FIFO occupancy register to determine buffer size Alex Mastro <amastro(a)fb.com> iommufd: Clarify IOAS_MAP_FILE dma-buf support Li RongQing <lirongqing(a)baidu.com> iommu/dma-iommu: Fix wrong scatterlist length assignment in P2PDMA path HanQuan <eilaimemedsnaimel(a)gmail.com> ALSA: seq: Fix kernel heap address leak in bounce_error_event() Cássio Gabriel <cassiogabrielcontato(a)gmail.com> ALSA: usb-audio: qcom: Guard sideband endpoint removal Herbert Xu <herbert(a)gondor.apana.org.au> crypto: rng - Free default RNG on module exit Felix Gu <ustc.gu(a)gmail.com> crypto: cavium/cpt - fix DMA cleanup using wrong loop index Felix Gu <ustc.gu(a)gmail.com> crypto: marvell/octeontx - fix DMA cleanup using wrong loop index Dave Jiang <dave.jiang(a)intel.com> cxl/test: Add check after kzalloc() memory in alloc_mock_res() Dave Jiang <dave.jiang(a)intel.com> cxl/test: Unregister cxl_acpi in cxl_test_init() error path Michael Bommarito <michael.bommarito(a)gmail.com> tipc: reject inverted service ranges from peer bindings Michael Bommarito <michael.bommarito(a)gmail.com> tipc: prevent snt_unacked underflow on CONN_ACK Michael Bommarito <michael.bommarito(a)gmail.com> tipc: require net admin for TIPCv2 netlink mutators Victor Nogueira <victor(a)mojatatu.com> net/sched: sch_hfsc: Don't make class passive twice Daniel Borkmann <daniel(a)iogearbox.net> net: Stop leased rxq before uninstalling its memory provider Samuel Moelius <sam.moelius(a)trailofbits.com> net: pfcp: allocate per-cpu tstats for PFCP netdevs Xin Long <lucien.xin(a)gmail.com> sctp: validate embedded address parameter length Xiang Mei <xmei5(a)asu.edu> bridge: cfm: reject invalid CCM interval at configuration time Kuniyuki Iwashima <kuniyu(a)google.com> net: fib_rules: Don't dump dying fib_rule in fib_rules_dump(). Kuniyuki Iwashima <kuniyu(a)google.com> ipv4: fib: Don't dump dying fib_info in fib_leaf_notify(). Jamal Hadi Salim <jhs(a)mojatatu.com> net/sched: cls_flow: Dont expose folded kernel pointers George Moussalem <george.moussalem(a)outlook.com> net: dsa: qca8k: fix led devicename when using external mdio bus Cássio Gabriel <cassiogabrielcontato(a)gmail.com> ASoC: topology: Check PCM and DAI name strings before use HyeongJun An <sammiee5311(a)gmail.com> ASoC: tegra: tegra210_ahub: Validate written enum value HyeongJun An <sammiee5311(a)gmail.com> ASoC: fsl: fsl_audmix: Validate written enum values HyeongJun An <sammiee5311(a)gmail.com> ASoC: meson: aiu: Validate written enum values HyeongJun An <sammiee5311(a)gmail.com> ASoC: codecs: hdac_hdmi: Validate written enum value Arnd Bergmann <arnd(a)arndb.de> ASoC: SOF: Intel: hda-sdw-bpt: select SND_SOF_SOF_HDA_SDW_BPT properly Arnd Bergmann <arnd(a)arndb.de> ASoC: SOF: Intel: select SND_SOC_SDW_UTILS=y from SND_SOC_SOF_HDA_GENERIC=y Richard Fitzgerald <rf(a)opensource.cirrus.com> ASoC: cs35l56: Fix wrong error test on simple_write_to_buffer() Leon Romanovsky <leon(a)kernel.org> RDMA/mlx5: Release the HW‑provided UAR index rather than the SW one Maher Sanalla <msanalla(a)nvidia.com> RDMA/mlx5: Fix undefined shift of user RQ WQE size Patrisious Haddad <phaddad(a)nvidia.com> RDMA/mlx5: Remove raw RSS QP restrack tracking Patrisious Haddad <phaddad(a)nvidia.com> RDMA/mlx5: Remove DCT restrack tracking Maxwell Doose <m32285159(a)gmail.com> fs: efs: remove unneeded debug prints Michael Guralnik <michaelgur(a)nvidia.com> RDMA/mlx5: Drop FRMR pool handle on UMR revoke failure Michael Guralnik <michaelgur(a)nvidia.com> RDMA/core: Add ib_frmr_pool_drop for unrecoverable handles Michael Guralnik <michaelgur(a)nvidia.com> RDMA/core: Fix FRMR handle leak on push failure Michael Guralnik <michaelgur(a)nvidia.com> RDMA/core: Avoid NULL dereference on FRMR bad usage Michael Guralnik <michaelgur(a)nvidia.com> RDMA/core: Fix FRMR set pinned push error path Michael Guralnik <michaelgur(a)nvidia.com> RDMA/core: Fix FRMR aging push to queue error flow Michael Guralnik <michaelgur(a)nvidia.com> RDMA/core: Fix skipped usage for driver built FRMR key Michael Guralnik <michaelgur(a)nvidia.com> RDMA/mlx5: Fix TPH extraction in FRMR pool key Michael Guralnik <michaelgur(a)nvidia.com> RDMA/mlx5: Fix mkey creation error flow rollback Samuel Moelius <sam.moelius(a)trailofbits.com> Bluetooth: vhci: validate devcoredump state before side effects Samuel Moelius <sam.moelius(a)trailofbits.com> Bluetooth: hci: validate codec capability element length Sai Teja Aluvala <aluvala.sai.teja(a)intel.com> Bluetooth: btintel_pcie: Load IOSF debug regs by controller variant Zhao Dongdong <zhaodongdong(a)kylinos.cn> Bluetooth: btmtk: fix URB leak in alloc_mtk_intr_urb error path Jordan Walters <jaggyaur(a)gmail.com> Bluetooth: hci_core: Fix UAF in hci_unregister_dev() Jiajia Liu <liujiajia(a)kylinos.cn> Bluetooth: hci_event: fix simultaneous discovery stuck in FINDING Weiming Shi <bestswngs(a)gmail.com> Bluetooth: eir: Fix stack OOB write when prepending the Flags AD Zijun Hu <zijun.hu(a)oss.qualcomm.com> Bluetooth: hci_qca: fix NULL pointer dereference in qca_dmp_hdr() for non-serdev device Zijun Hu <zijun.hu(a)oss.qualcomm.com> Bluetooth: hci_qca: fix NULL pointer dereference in qca_setup() for non-serdev device Heiko Carstens <hca(a)linux.ibm.com> s390/process: Fix kernel thread function pointer type Richard Fitzgerald <rf(a)opensource.cirrus.com> ASoC: cs35l56: Fix possible uninitialized value in cs35l56_spi_system_reset() Andre Przywara <andre.przywara(a)arm.com> arm64: dts: allwinner: a523: Add missing GPIO interrupt Mikhail Kshevetskiy <mikhail.kshevetskiy(a)iopsys.eu> pinctrl: airoha: an7583: remove undefined groups from pcm_spi pin function Mikhail Kshevetskiy <mikhail.kshevetskiy(a)iopsys.eu> pinctrl: airoha: an7583: fix phy1_led1 pin function Mikhail Kshevetskiy <mikhail.kshevetskiy(a)iopsys.eu> pinctrl: airoha: an7583: add missed gpio22 pin group Mikhail Kshevetskiy <mikhail.kshevetskiy(a)iopsys.eu> pinctrl: airoha: an7583: fix gpio21 pin group Mikhail Kshevetskiy <mikhail.kshevetskiy(a)iopsys.eu> pinctrl: airoha: fix pwm pin function for an7581 and an7583 Mikhail Kshevetskiy <mikhail.kshevetskiy(a)iopsys.eu> pinctrl: airoha: an7583: fix incorrect led mapping in phy4_led1 pin function Mikhail Kshevetskiy <mikhail.kshevetskiy(a)iopsys.eu> pinctrl: airoha: an7581: fix incorrect led mapping in phy4_led1 pin function Mikhail Kshevetskiy <mikhail.kshevetskiy(a)iopsys.eu> pinctrl: airoha: an7583: fix misprint in gpio19 pinconf Mikhail Kshevetskiy <mikhail.kshevetskiy(a)iopsys.eu> pinctrl: airoha: an7581: fix misprint in gpio19 pinconf Mikhail Kshevetskiy <mikhail.kshevetskiy(a)iopsys.eu> pinctrl: airoha: an7583: add missed gpio32 pin group Mikhail Kshevetskiy <mikhail.kshevetskiy(a)iopsys.eu> pinctrl: airoha: an7581: add missed gpio32 pin group Andre Przywara <andre.przywara(a)arm.com> pinctrl: sunxi: a523: Remove unneeded IRQ remuxing flag Angelo Dureghello <adureghello(a)baylibre.com> m68k: mcf5441x: fix clocks numbering Daniel Borkmann <daniel(a)iogearbox.net> bpf: Tighten cgroup storage cookie checks for prog arrays Giovanni Cabiddu <giovanni.cabiddu(a)intel.com> vfio/qat: fix f_pos race in qat_vf_resume_write() Sergey Shtylyov <s.shtylyov(a)auroraos.dev> of: cpu: add check in __of_find_n_match_cpu_property() Dave Jiang <dave.jiang(a)intel.com> cxl/test: Zero out LSA backing memory to avoid leaking to user Dave Jiang <dave.jiang(a)intel.com> cxl/test: Fix integer overflow in mock LSA bounds checks Dave Jiang <dave.jiang(a)intel.com> cxl/test: Verify cmd->size_in before accessing payload Yonghong Song <yonghong.song(a)linux.dev> selftests/bpf: Fix bpf_iter/task_vma test Yun Zhou <yun.zhou(a)windriver.com> ext4: validate donor file superblock early in EXT4_IOC_MOVE_EXT Aditya Prakash Srivastava <aditya.ansh182(a)gmail.com> ext4: fix kernel BUG in ext4_write_inline_data_end Louis Scalbert <louis.scalbert(a)6wind.com> bonding: 3ad: fix mux port state on oper down Louis Scalbert <louis.scalbert(a)6wind.com> bonding: 3ad: fix carrier when no usable slaves Louis Scalbert <louis.scalbert(a)6wind.com> bonding: 3ad: add lacp_strict configuration knob Louis Scalbert <louis.scalbert(a)6wind.com> netlink: specs: rt-link: missed broadcast-neigh Louis Scalbert <louis.scalbert(a)6wind.com> tools: missed broadcast_neigh if_link uapi header Hongling Zeng <zenghongling(a)kylinos.cn> ext4: fix ERR_PTR(0) in ext4_mkdir() Pei Xiao <xiaopei01(a)kylinos.cn> hwmon: (gpd-fan): fix race condition between device removal and sysfs access Pei Xiao <xiaopei01(a)kylinos.cn> hwmon: (gpd-fan): Initialize EC before registering hwmon device Pei Xiao <xiaopei01(a)kylinos.cn> hwmon: (gpd-fan): drop global driver data and use per-device allocation Richard Fitzgerald <rf(a)opensource.cirrus.com> ASoC: cs35l56: Don't leave parent IRQ disabled if system_suspend fails Richard Fitzgerald <rf(a)opensource.cirrus.com> ASoC: cs35l56: Cleanup if component_probe fails Richard Fitzgerald <rf(a)opensource.cirrus.com> ASoC: cs35l56: Prevent double-free of debugfs Richard Fitzgerald <rf(a)opensource.cirrus.com> ASoC: cs35l56: Fix missing calls to wm_adsp2_remove() Christoph Hellwig <hch(a)lst.de> iomap: pass the correct len to fserror_report_io in __iomap_write_begin Srujana Challa <schalla(a)marvell.com> vdpa/octeon_ep: fix IRQ-to-ring mapping in interrupt handler Srujana Challa <schalla(a)marvell.com> vdpa/octeon_ep: Fix PF->VF mailbox data address calculation Arnd Bergmann <arnd(a)arndb.de> vduse: fix compat handling for VDUSE_IOTLB_GET_FD/VDUSE_VQ_GET_INFO longlong yan <yanlonglong(a)kylinos.cn> tools/virtio: check mmap return value in vringh_test Qing Ming <a0yami(a)mailbox.org> vhost/net: complete zerocopy ubufs only once Zhang Tianci <zhangtianci.1997(a)bytedance.com> vduse: Requeue failed read to send_list head Filip Hejsek <filip.hejsek(a)gmail.com> virtio_console: read size from config space during device init Jia Jia <physicalmtea(a)gmail.com> virtio: rtc: tear down old virtqueues before restore Qihang Tang <q.h.hack.winter(a)gmail.com> vhost/vdpa: validate virtqueue index in mmap and fault paths Qihang Tang <q.h.hack.winter(a)gmail.com> vduse: hold vduse_lock across IDR lookup in open path Enric Balletbo i Serra <eballetb(a)redhat.com> clocksource: move NXP timer selection to drivers/clocksource Justin Suess <utilityemal77(a)gmail.com> bpf: Cancel special fields on map value recycle Val Packett <val(a)packett.cool> ASoC: codecs: aw88261: fix incorrect masks for boost regs Ruoyu Wang <ruoyuw560(a)gmail.com> spi: meson-spifc: fix runtime PM leak on remove Chuck Lever <chuck.lever(a)oracle.com> lockd: Avoid hashing uninitialized bytes in nlm4svc_lookup_file() Chuck Lever <chuck.lever(a)oracle.com> lockd: Do not monitor when looking up the LOCK_MSG callback host Chuck Lever <chuck.lever(a)oracle.com> lockd: Translate nlm__int__deadlock in __nlm4svc_proc_lock_msg() Chuck Lever <chuck.lever(a)oracle.com> lockd: Stop warning on nlm__int__drop_reply in !V4 cast_status Chuck Lever <chuck.lever(a)oracle.com> NFSD: Handle layout stid in nfsd4_drop_revoked_stid() Jason Gunthorpe <jgg(a)ziepe.ca> IB/mlx4: Fill in the access_flags if IB_MR_REREG_ACCESS is not specified Cássio Gabriel <cassiogabrielcontato(a)gmail.com> ASoC: sma1307: Fix uevent string leaks in fault worker KhaiWenTan <khai.wen.tan(a)linux.intel.com> igc: skip RX timestamp header for frame preemption verification Larysa Zaremba <larysa.zaremba(a)intel.com> ixgbe: do not configure xps for XDP queues Weiming Shi <bestswngs(a)gmail.com> btrfs: lzo: reject compressed segment that overflows the compressed input Filipe Manana <fdmanana(a)suse.com> btrfs: fix deadlock cloning inline extent when using flushoncommit Cen Zhang <zzzccc427(a)gmail.com> btrfs: annotate lockless read of defrag_bytes in should_nocow() Johannes Thumshirn <johannes.thumshirn(a)wdc.com> btrfs: zoned: always set max_active_zones for zoned devices Matthew Wilcox (Oracle) <willy(a)infradead.org> Revert "btrfs: fix the file offset calculation inside btrfs_decompress_buf2page()" Johannes Thumshirn <johannes.thumshirn(a)wdc.com> btrfs: zoned: fix deadlock waiting for ticket during data relocation Johannes Thumshirn <johannes.thumshirn(a)wdc.com> btrfs: zoned: don't account data relocation space-info in statfs free space Yuho Choi <dbgh9129(a)gmail.com> PM: QoS: Fix misc device registration unwind Nikita Zhandarovich <n.zhandarovich(a)fintech.ru> hwmon: (it87) Clamp negative values to zero in set_fan() Jeff Layton <jlayton(a)kernel.org> vfs: add FS_USERNS_DELEGATABLE flag and set it for NFS Sumit Gupta <sumitg(a)nvidia.com> memory: tegra186-emc: stop borrowing MC aggregate hook for EMC David Laight <david.laight.linux(a)gmail.com> fbdev: sm501fb: Fix buffer errors in OF binding code Helge Deller <deller(a)gmx.de> fbdev/arm: Export acorndata_8x8 font symbol for bootloader Wen Gong <quic_wgong(a)quicinc.com> wifi: ath12k: enable IEEE80211_VHT_EXT_NSS_BW_CAPABLE when NSS ratio is reported Baochen Qiang <baochen.qiang(a)oss.qualcomm.com> wifi: ath12k: fix EAPOL TX failure caused by stale tcl_metadata bits Sergio Paracuellos <sergio.paracuellos(a)gmail.com> gpio: mt7621: fix interrupt banks mapping on gpio chips Takashi Iwai <tiwai(a)suse.de> ALSA: aloop: Drop superfluous break Filipe Manana <fdmanana(a)suse.com> btrfs: fix invalid pointer dereference in __btrfs_run_delayed_refs() Ryder Lee <ryder.lee(a)mediatek.com> wifi: mt76: mt7996: fix potential tx_retries underflow Ryder Lee <ryder.lee(a)mediatek.com> wifi: mt76: mt7925: fix potential tx_retries underflow Ryder Lee <ryder.lee(a)mediatek.com> wifi: mt76: mt7921: fix potential tx_retries underflow Ryder Lee <ryder.lee(a)mediatek.com> wifi: mt76: mt7915: fix potential tx_retries underflow Bjoern A. Zeeb <bz(a)FreeBSD.org> wifi: mt76: fix argument to ieee80211_is_first_frag() Dylan Eskew <dylan.eskew(a)candelatech.com> wifi: mt76: mt7996: limit work in set_bitrate_mask Lorenzo Bianconi <lorenzo(a)kernel.org> wifi: mt76: mt7996: remove redundant pdev->bus check in probe Lorenzo Bianconi <lorenzo(a)kernel.org> wifi: mt76: mt7996: fix reading zeroed info->control.flags after mt76_tx_status_skb_add() Lorenzo Bianconi <lorenzo(a)kernel.org> wifi: mt76: mt7996: Fix possible NULL pointer dereference in mt7996_mac_write_txwi_80211() Lorenzo Bianconi <lorenzo(a)kernel.org> wifi: mt76: mt7996: Fix possible token leak in mt7996_tx_prepare_skb() Aviel Zohar <avielzohar123(a)gmail.com> wifi: mt76: mt7925: validate skb length in testmode query Sean Wang <sean.wang(a)mediatek.com> wifi: mt76: mt792x: skip MLD header rewrite for 802.3 encap TX Sean Wang <sean.wang(a)mediatek.com> wifi: mt76: mt7925: keep TX BA state in the primary WCID Javier Tia <floss(a)jetm.me> wifi: mt76: mt7925: fix stale pointer comparisons in change_vif_links Lorenzo Bianconi <lorenzo(a)kernel.org> wifi: mt76: mt7996: Fix NULL pointer dereference in mt7996_init_tx_queues() Felix Fietkau <nbd(a)nbd.name> wifi: mt76: mt7996: add missing max_remain_on_channel_duration Rajat Gupta <rajat.gupta(a)oss.qualcomm.com> wifi: mt76: use kfree_rcu for offchannel link in mt76_put_vif_phy_link Hongling Zeng <zenghongling(a)kylinos.cn> wifi: mt76: mt7921: fix resource leak in probe error path Myeonghun Pak <mhun512(a)gmail.com> wifi: mt76: mt7925: clean up DMA on probe failure Krzysztof Kozlowski <krzysztof.kozlowski(a)oss.qualcomm.com> ARM: configs: Drop duplicated CONFIG_EXT4_FS Hongyan Xia <hongyan.xia(a)transsion.com> sched/fair: Fix cpu_util runnable_avg arithmetic Wolfram Sang <wsa+renesas(a)sang-engineering.com> hwspinlock: qcom: avoid uninitialized struct members Alexandru Gagniuc <mr.nuke.me(a)gmail.com> remoteproc: qcom_q6v5_wcss: drop redundant wcss_q6_bcr_reset Miguel Ojeda <ojeda(a)kernel.org> rust: kbuild: show the right `quiet_cmd_rustc_procmacrolibrary` Hui Zhu <zhuhui(a)kylinos.cn> vmalloc: fix NULL pointer dereference in is_vm_area_hugepages() Hao Ge <hao.ge(a)linux.dev> lib/test_hmm: fix memory leak in dmirror_migrate_to_system() Jason Gunthorpe <jgg(a)ziepe.ca> iommufd: Destroy the pages content after detaching from dmabuf Ankit Soni <Ankit.Soni(a)amd.com> iommufd: Take dma_resv lock before dma_buf_unpin() in release path Timur Tabi <ttabi(a)nvidia.com> pinctrl: PINCTRL_STMFX should depend on CONFIG_OF Yu-Chun Lin <eleanor.lin(a)realtek.com> dt-bindings: pinctrl: realtek,rtd1625: Fix input voltage property name Luca Leonardo Scorcia <l.scorcia(a)gmail.com> pinctrl: mediatek: mt8167: Fix Schmitt trigger register offset of pins 34-39 Luca Leonardo Scorcia <l.scorcia(a)gmail.com> pinctrl: mediatek: mt8516: Fix Schmitt trigger register offset of pins 34-39 Mike Christie <michael.christie(a)oracle.com> scsi: target: Remove tcm_loop target reset handling Hongjie Fang <hongjiefang(a)asrmicro.com> scsi: ufs: core: Handle PM commands timeout before SCSI EH David Disseldorp <ddiss(a)suse.de> scsi: target: Fix hexadecimal CHAP_I handling Sneh Mankad <sneh.mankad(a)oss.qualcomm.com> pinctrl: qcom: Fix resolving register base address from device node Yuho Choi <dbgh9129(a)gmail.com> watchdog: unregister PM notifier on watchdog unregister Al Viro <viro(a)zeniv.linux.org.uk> configfs: fix lockless traversals of ->s_children Dmitry Vyukov <dvyukov(a)google.com> firmware_loader: Fix recursive lock in device_cache_fw_images() Aaron Ma <aaron.ma(a)canonical.com> ASoC: amd: acp-sdw-sof: Bound DAI link iteration Aaron Ma <aaron.ma(a)canonical.com> ASoC: amd: acp-sdw-legacy: Bound DAI link iteration Felix Gu <ustc.gu(a)gmail.com> spi: ep93xx: fix double-free of zeropage on DMA setup failure Jason Gunthorpe <jgg(a)ziepe.ca> IB/mlx5: Don't mangle the mr->pd inside the rereg callback Jason Gunthorpe <jgg(a)ziepe.ca> IB/mlx5: Pull the pdn out of the depths of the umr machinery Jason Gunthorpe <jgg(a)ziepe.ca> IB/mlx5: Remove unused mkc bits in mlx5r_umr_update_mr_page_shift() Jason Gunthorpe <jgg(a)ziepe.ca> RDMA/nldev: Fix locking when accessing mr->pd Jason Gunthorpe <jgg(a)ziepe.ca> IB/mlx5: Properly support implicit ODP rereg_mr Jason Gunthorpe <jgg(a)ziepe.ca> IB/mlx5: Don't take the rereg_mr fallback without a new translation Bryam Vargas <hexlabsecurity(a)proton.me> ntfs: fix u16 truncation of restart-area length check Bryam Vargas <hexlabsecurity(a)proton.me> ntfs: bound the attribute-list entry in ntfs_read_inode_mount() Bryam Vargas <hexlabsecurity(a)proton.me> ntfs: bound the look-ahead attribute-list entry in ntfs_external_attr_find() Bryam Vargas <hexlabsecurity(a)proton.me> ntfs: validate resident attribute lists and harden the validator Mark Harmstone <mark(a)harmstone.com> btrfs: don't force DIO writes to be serialized Samuel Moelius <sam.moelius(a)trailofbits.com> thermal: testing: reject missing command arguments Pengjie Zhang <zhangpengjie2(a)huawei.com> cpufreq: Documentation: fix conservative governor freq_step description Tony W Wang-oc <TonyWWang-oc(a)zhaoxin.com> ACPI: processor: Add cpuidle driver check in acpi_processor_register_idle_driver() Yuho Choi <dbgh9129(a)gmail.com> ACPI: IPMI: Fix message kref handling on dead device Sechang Lim <rhkrqnwk98(a)gmail.com> bpf: Fix NULL pointer dereference in bpf_task_from_vpid() Bartosz Golaszewski <bartosz.golaszewski(a)oss.qualcomm.com> powerpc/8xx: implement get_direction() in cpm1 Bryam Vargas <hexlabsecurity(a)proton.me> wifi: mac80211: bound S1G TIM PVB walk to the TIM element David Gow <david(a)davidgow.net> kunit:tool: Don't write to stdout when it should be disabled Mykyta Yatsenko <yatsenko(a)meta.com> bpf: Fix NMI/tracepoint re-entry deadlock on lru locks Christian Brauner <brauner(a)kernel.org> filelock: fix break_lease() stub signature for CONFIG_FILE_LOCKING=n David Carlier <devnexen(a)gmail.com> netfilter: flowtable: avoid num_encaps underflow on bridge VLAN untag David Windsor <dwindsor(a)gmail.com> bpf: Reject sleepable BPF_LSM_CGROUP programs at load time Mykyta Yatsenko <yatsenko(a)meta.com> bpf: Verifier support for sleepable tracepoint programs Thomas Weißschuh <thomas.weissschuh(a)linutronix.de> riscv: alternative: Also patch the CFI vDSO Thomas Weißschuh <thomas.weissschuh(a)linutronix.de> riscv: alternative: Pass vDSO start as parameter to apply_vdso_alternatives() Thomas Weißschuh <thomas.weissschuh(a)linutronix.de> riscv: alternative: Use IS_ENABLED() over ifdeffery for apply_vdso_alternatives() Kyle Zeng <kylebot(a)openai.com> ALSA: seq: Clear variable event pointer on read Rui Qi <qirui.001(a)bytedance.com> riscv: stacktrace: Remove bogus -0x4 offset in non-FP walk_stackframe Hui Wang <hui.wang(a)canonical.com> riscv: cpu_ops: Change return value type of cpu_is_stopped() to bool Cássio Gabriel <cassiogabrielcontato(a)gmail.com> ALSA: pcm: Fix unlocked runtime state reads in xfer ioctls HyeongJun An <sammiee5311(a)gmail.com> ALSA: seq: Fix partial userptr event expansion Tristan Madani <tristan(a)talencesecurity.com> wifi: wcn36xx: fix OOB read from short trigger BA firmware response Tristan Madani <tristan(a)talencesecurity.com> wifi: wcn36xx: fix OOB read from firmware count in PRINT_REG_INFO indication Tristan Madani <tristan(a)talencesecurity.com> wifi: wcn36xx: fix heap overflow from oversized firmware HAL response Christian Brauner <brauner(a)kernel.org> kernfs: link kn to its parent before the LSM init hook Miklos Szeredi <mszeredi(a)redhat.com> simpe_xattr: use per-sb cache Miklos Szeredi <mszeredi(a)redhat.com> simple_xattr: change interface to pass struct simple_xattrs ** Miklos Szeredi <mszeredi(a)redhat.com> tmpfs: simplify constructing "security.foo" xattr names Miklos Szeredi <mszeredi(a)redhat.com> kernfs: fix xattr race condition with multiple superblocks Leon Hwang <leon.hwang(a)linux.dev> bpf: Update transport_header when encapsulating UDP tunnel in lwt Leon Hwang <leon.hwang(a)linux.dev> bpf: Check tail zero of bpf_prog_info Leon Hwang <leon.hwang(a)linux.dev> bpf: Check tail zero of bpf_map_info Kaitao Cheng <chengkaitao(a)kylinos.cn> bpf: Clear rb node linkage when freeing bpf_rb_root Mykyta Yatsenko <yatsenko(a)meta.com> selftests/bpf: Fix flaky file_reader test Bernard Metzler <bernard.metzler(a)linux.dev> RDMA/siw: Fix endpoint/socket association handling Nora Schiffer <nora.schiffer(a)ew.tq-group.com> arm64: dts: freescale: fsl-ls1028a-tqmls1028a-mbls1028a: switch mmc aliases Frieder Schrempf <frieder.schrempf(a)kontron.de> arm64: dts: imx8mp-kontron: Fix GPIO for display power switch Alexander Stein <alexander.stein(a)ew.tq-group.com> arm64: dts: tqma8mpql-mba8mpxl: configure sai clock in audio codec as well Josua Mayer <josua(a)solid-run.com> arm64: dts: lx2162a-clearfog: use rev2 SoC dtsi Richard Zhu <hongxing.zhu(a)nxp.com> arm64: dts: imx95: Correct PCIe outbound address space configuration Alice Guo <alice.guo(a)nxp.com> arm64: dts: imx94: fix DDR PMU interrupt number Frieder Schrempf <frieder.schrempf(a)kontron.de> arm64: dts: imx8mp-kontron: Reduce EERAM SPI clock frequency Jacob Moroni <jmoroni(a)google.com> RDMA/irdma: Initialize iwmr->access during MR registration Jacob Moroni <jmoroni(a)google.com> RDMA/irdma: Fix OOB read during CQ MR registration Oliver Hartkopp <socketcan(a)hartkopp.net> ALSA: hda: fix Kconfig dependency of HD Audio PCI Jason Gunthorpe <jgg(a)ziepe.ca> IB/cm: Fix av cm device leak on an error path in cm_init_av_by_path() Arnd Bergmann <arnd(a)arndb.de> RDMA/hfi1: Open-code rvt_set_ibdev_name() DaeMyung Kang <charsyam(a)gmail.com> ntfs: free link name from ntfs_name_cache Pablo Neira Ayuso <pablo(a)netfilter.org> netfilter: conntrack: call nf_ct_gre_keymap_destroy() if master helper is pptp Pablo Neira Ayuso <pablo(a)netfilter.org> netfilter: conntrack: revert ct extension genid infrastructure Junxiao Chang <junxiao.chang(a)intel.com> x86/cpu: Remove obsolete aperfmperf_get_khz() declaration Shengming Hu <hu.shengming(a)zte.com.cn> mm/slub: preserve original size in _kmalloc_nolock_noprof retry path Cássio Gabriel <cassiogabrielcontato(a)gmail.com> ALSA: usb-audio: qcom: Initialize offload control return value Pablo Neira Ayuso <pablo(a)netfilter.org> netfilter: cttimeout: detach dataplane timeout policy and repurpose refcount Fernando Fernandez Mancera <fmancera(a)suse.de> netfilter: synproxy: protect nf_ct_seqadj_init() with conntrack lock Fernando Fernandez Mancera <fmancera(a)suse.de> netfilter: synproxy: fix unaligned memory access in timestamp adjustment Fernando Fernandez Mancera <fmancera(a)suse.de> netfilter: synproxy: adjust duplicate timestamp options Fernando Fernandez Mancera <fmancera(a)suse.de> netfilter: synproxy: drop packets if timestamp adjustment fails Pablo Neira Ayuso <pablo(a)netfilter.org> netfilter: nfnetlink_cthelper: use {READ,WRITE}_ONCE for accessing helper flags Fernando Fernandez Mancera <fmancera(a)suse.de> netfilter: nfnetlink_osf: fix mss parsing on big-endian architectures Dave Jiang <dave.jiang(a)intel.com> cxl/pci: Convert PCIBIOS errors to errno on DVSEC config accesses Dave Jiang <dave.jiang(a)intel.com> cxl/pci: Fix the incorrect check of pci_read_config_word() return Ian Bridges <icb(a)fastmail.org> ocfs2: fix out-of-bounds write in ocfs2_remove_refcount_extent Joseph Qi <joseph.qi(a)linux.alibaba.com> ocfs2: fix race between ocfs2_control_install_private() and ocfs2_control_release() Zhang Cen <rollkingzzc(a)gmail.com> ocfs2/dlm: require a ref for locking_state debugfs open Zhang Cen <rollkingzzc(a)gmail.com> ocfs2: reject FITRIM ranges shorter than a cluster Zhang Cen <rollkingzzc(a)gmail.com> ocfs2: validate fast symlink target during inode read Dmitry Antipov <dmantipov(a)yandex.ru> ocfs2: fix buffer head management in ocfs2_read_blocks() Thomas Weißschuh <linux(a)weissschuh.net> lib: kunit_iov_iter: repeatedly call alloc_pages_bulk() Zhang Cen <rollkingzzc(a)gmail.com> ocfs2: rebase copied fsdlm LVB pointers in locking_state Wandun Chen <chenwandun(a)lixiang.com> of: reserved_mem: avoid post-init UAF when alloc_reserved_mem_array() fails Alex Deucher <alexander.deucher(a)amd.com> drm/amdkfd: always resume_all after suspend_all Alexei Starovoitov <ast(a)kernel.org> bpf: Take mmap_lock in zap_pages() Dan Williams <djbw(a)kernel.org> cxl/test: Fix __fortify_panic Dan Williams <djbw(a)kernel.org> cxl/fwctl: Fix __fortify_panic Andreas Kemnade <andreas(a)kemnade.info> wifi: wlcore: enable the right set of ciphers Antony Antony <antony.antony(a)secunet.com> xfrm: fix NAT-related field inheritance in SA migration Sandipan Das <sandipan.das(a)amd.com> perf/x86/amd/uncore: Use Node ID to identify DF and UMC domains Zide Chen <zide.chen(a)intel.com> perf/x86/intel/uncore: Fix PCI device refcount leak in UPI discovery Zide Chen <zide.chen(a)intel.com> perf/x86/intel/uncore: Fix discovery unit lookup for multi-die systems Sandipan Das <sandipan.das(a)amd.com> perf/x86/amd/core: Always use the NMI latency mitigation Christian Brauner <brauner(a)kernel.org> eventpoll: wrap EP_UNACTIVE_PTR in typed sentinel helpers Christian Brauner <brauner(a)kernel.org> eventpoll: extract ep_deliver_event() from ep_send_events() Christian Brauner <brauner(a)kernel.org> eventpoll: split ep_insert() into alloc + register stages Christian Brauner <brauner(a)kernel.org> eventpoll: rename attach_epitem() to ep_attach_file() Jeff Layton <jlayton(a)kernel.org> mm: preserve PG_dropbehind flag during folio split Pranjal Shrivastava <praan(a)google.com> iommu/vt-d: Fix RB-tree corruption in probe error path Michael S. Tsirkin <mst(a)redhat.com> vhost: fix vhost_get_avail_idx for a non empty ring Woojin Ji <random6.xyz(a)gmail.com> bpftool: Use libbpf error code for flow dissector query Lizhi Hou <lizhi.hou(a)amd.com> accel/amdxdna: Return errors for failed debug BO commands Yunxiang Li <Yunxiang.Li(a)amd.com> drm/amdgpu: set sub_block_index for mca ras sub-blocks Vitaly Prosyak <vitaly.prosyak(a)amd.com> drm/amd/pm: Add empty string validation to sysfs store functions Vitaly Prosyak <vitaly.prosyak(a)amd.com> drm/amdgpu: fix KASAN slab-out-of-bounds in amdgpu_coredump ring dump Marek Szyprowski <m.szyprowski(a)samsung.com> irqchip/exynos-combiner: Remove useless spinlock Li Chen <me(a)linux.beauty> ext4: fix fast commit wait/wake bit mapping on 64-bit Karl Mehltretter <kmehltretter(a)gmail.com> lockdep/selftests: Restore sched_rt_mutex state on PREEMPT_RT Karl Mehltretter <kmehltretter(a)gmail.com> lockdep/selftests: Restore migrate_disable() state on PREEMPT_RT Al Viro <viro(a)zeniv.linux.org.uk> configfs_lookup(): don't leave ->s_dentry dangling on failure Inochi Amaoto <inochiama(a)gmail.com> riscv: dts: sophgo: sg2042: use hex for CPU unit address Inochi Amaoto <inochiama(a)gmail.com> riscv: dts: sophgo: sg2044: use hex for CPU unit address Alexander Potapenko <glider(a)google.com> lib/test_meminit: use && for bools Frederic Weisbecker <frederic(a)kernel.org> tick/sched: Fix TOCTOU in nohz idle time fetch Daniel Borkmann <daniel(a)iogearbox.net> bpf: Reject exclusive maps for bpf_map_elem iterators Nathan Chancellor <nathan(a)kernel.org> driver core: Use system_percpu_wq instead of system_wq liuxixin <gliuxen(a)gmail.com> nvme: fix FDP fdpcidx bounds check Guanyou.Chen <chenguanyou9338(a)gmail.com> sched: restore timer_slack_ns when resetting RT policy on fork Danila Chernetsov <listdansp(a)mail.ru> ext2: fix ignored return value of generic_write_sync() Sang-Heon Jeon <ekffu200098(a)gmail.com> mm/fake-numa: fix under-allocation detection in uniform split Deepanshu Kartikey <kartikey406(a)gmail.com> bpf: fix UAF by restoring RCU-delayed inode freeing in bpffs Chanwoo Lee <cw9316.lee(a)samsung.com> scsi: ufs: Fix wrong value printed in unexpected UPIU response case Dan Carpenter <error27(a)gmail.com> scsi: pm8001: Fix error code in non_fatal_log_show() Daniel Borkmann <daniel(a)iogearbox.net> libbpf: Skip max_entries override on signed loaders Daniel Borkmann <daniel(a)iogearbox.net> libbpf: Skip initial_value override on signed loaders KP Singh <kpsingh(a)kernel.org> libbpf: Reject non-exclusive metadata maps in the signed loader Daniel Borkmann <daniel(a)iogearbox.net> bpf: Reject exclusive maps as inner maps in map-in-map Martin Wilck <martin.wilck(a)suse.com> scsi: Revert "scsi: Fix sas_user_scan() to handle wildcard and multi-channel scans" Neal Cardwell <ncardwell(a)google.com> tcp_bbr: fix SPDX-License-Identifier to be GPL-2.0 OR BSD-3-Clause Alison Schofield <alison.schofield(a)intel.com> nvdimm/btt: Handle preemption in BTT lane acquisition Randy Dunlap <rdunlap(a)infradead.org> x86/cpu: Keep the PROCESSOR_SELECT menu together Yuho Choi <dbgh9129(a)gmail.com> ARM: imx31: Fix IIM mapping leak in revision check Rafael J. Wysocki <rafael.j.wysocki(a)intel.com> ACPI: button: Fix lid_device value leak past driver removal Bart Van Assche <bvanassche(a)acm.org> ata: libata: Fix ata_exec_internal() Wei Zhang <wei.zhang(a)oss.qualcomm.com> wifi: ath12k: fix NULL deref in change_sta_links for unready link Wei Zhang <wei.zhang(a)oss.qualcomm.com> wifi: ath12k: fix inconsistent arvif state in vdev_create error paths Miaoqing Pan <miaoqing.pan(a)oss.qualcomm.com> wifi: ath12k: fix memory leak in ath12k_wifi7_dp_rx_h_verify_tkip_mic() Kwan Lai Chee Hou <laicheehou9(a)gmail.com> wifi: ath12k: fix incorrect HT/VHT/HE/EHT MCS reporting in monitor mode J. Neuschäfer <j.ne(a)posteo.net> HID: wiimote: Fix table layout and whitespace errors Yuho Choi <dbgh9129(a)gmail.com> ARM: imx3: Fix CCM node reference leak Chuck Lever <chuck.lever(a)oracle.com> NFSD: Fix delegation reference leak in nfsd4_revoke_states John Madieu <john.madieu.xa(a)bp.renesas.com> ASoC: rsnd: Fix RSND_SOC_MASK width to single nibble Carlos Song <carlos.song(a)nxp.com> spi: imx: replace dmaengine_terminate_all() with dmaengine_terminate_sync() Felix Gu <ustc.gu(a)gmail.com> spi: atmel: fix DMA channel and bounce buffer leaks Zhang Yi <yi.zhang(a)huawei.com> ext4: fix LOGFLUSH shutdown ordering to allow ordered-mode data writeback Pasha Tatashin <pasha.tatashin(a)soleen.com> liveupdate: fix u-a-f in luo_file_unpreserve_files() and luo_file_finish() Pasha Tatashin <pasha.tatashin(a)soleen.com> liveupdate: block session mutations during reboot Pasha Tatashin <pasha.tatashin(a)soleen.com> liveupdate: fix TOCTOU race in luo_session_retrieve() Pasha Tatashin <pasha.tatashin(a)soleen.com> liveupdate: skip serialization for context-preserving kexec Daniel Borkmann <daniel(a)iogearbox.net> libbpf: Skip endianness swap when loader generation failed Daniel Borkmann <daniel(a)iogearbox.net> libbpf: Skip hash computation when loader generation failed David Matlack <dmatlack(a)google.com> liveupdate: Reference count incoming FLB data David Matlack <dmatlack(a)google.com> liveupdate: Use refcount_t for FLB reference counts Yuyang Huang <yuyanghuang(a)google.com> selftests/bpf: add verification for BPF_PROG_QUERY attr size boundaries Yuyang Huang <yuyanghuang(a)google.com> bpf: fix BPF_PROG_QUERY OOB write and cgroup backward compat Abd-Alrhman Masalkhi <abd.masalkhi(a)gmail.com> raid1: fix nr_pending leak in REQ_ATOMIC bad-block error path Abd-Alrhman Masalkhi <abd.masalkhi(a)gmail.com> md/raid1,raid10: fix bio accounting for split md cloned bios Abd-Alrhman Masalkhi <abd.masalkhi(a)gmail.com> md/raid1,raid10: fix error-path detection with md_cloned_bio() Abd-Alrhman Masalkhi <abd.masalkhi(a)gmail.com> md/raid1,raid10: fix deadlock in read error recovery path Chen Cheng <chencheng(a)fnnas.com> md/raid10: reset read_slot when reusing r10bio for discard Marek Vasut <marek.vasut+renesas(a)mailbox.org> arm64: dts: renesas: ironhide: Describe all reserved memory Marek Vasut <marek.vasut+renesas(a)mailbox.org> arm64: dts: renesas: r8a78000: Fix GIC-720AE View 1 Redistributor description Danilo Krummrich <dakr(a)kernel.org> rpmsg: use generic driver_override infrastructure Danilo Krummrich <dakr(a)kernel.org> Drivers: hv: vmbus: use generic driver_override infrastructure Danilo Krummrich <dakr(a)kernel.org> cdx: use generic driver_override infrastructure Danilo Krummrich <dakr(a)kernel.org> amba: use generic driver_override infrastructure Renjiang Han <renjiang.han(a)oss.qualcomm.com> media: qcom: venus: relax encoder frame/blur step size on v6 Renjiang Han <renjiang.han(a)oss.qualcomm.com> media: qcom: venus: relax encoder frame/blur dimension steps on v4 Renjiang Han <renjiang.han(a)oss.qualcomm.com> media: qcom: venus: drop extra padding in NV12 raw size calculation Dmitry Baryshkov <dmitry.baryshkov(a)oss.qualcomm.com> Revert "media: venus: hfi_platform: Correct supported codecs for sc7280" Yixun Lan <dlan(a)kernel.org> dts: riscv: spacemit: k3: Fix I/O power settings Tristan Madani <tristmd(a)gmail.com> RDMA/rxe: Copy WQE to local buffer in non-SRQ receive path Tristan Madani <tristmd(a)gmail.com> RDMA/rxe: Fix TOCTOU heap overflow in get_srq_wqe Jiri Pirko <jiri(a)resnulli.us> RDMA/umem: Add ib_umem_is_contiguous() stub for !CONFIG_INFINIBAND_USER_MEM Jinseok Kim <always.starving0(a)gmail.com> arm: dts: bcm2711: Fix typo in gpio-line-names Marek Vasut <marex(a)nabladev.com> arm64: dts: st: Fix SAI addresses on stm32mp251 zhoumin <teczm(a)foxmail.com> EDAC/{skx_common,skx}: Fix UBSAN shift-out-of-bounds in skx_get_dimm_info Qiuxu Zhuo <qiuxu.zhuo(a)intel.com> EDAC/igen6: Fix memory topology parsing for Panther Lake-H SoCs Qiuxu Zhuo <qiuxu.zhuo(a)intel.com> EDAC/igen6: Fix call trace due to missing release() Akhil P Oommen <akhilpo(a)oss.qualcomm.com> drm/msm/a8xx: Fix RSCC offset Akhil P Oommen <akhilpo(a)oss.qualcomm.com> drm/msm/a8xx: Make a8xx_recover IFPC safe Arnd Bergmann <arnd(a)arndb.de> firmware: samsung: acpm: remove compile-testing stubs Tudor Ambarus <tudor.ambarus(a)linaro.org> firmware: samsung: acpm: Add devm_acpm_get_by_phandle helper Jessica Zhang <jesszhan0024(a)gmail.com> drm/msm/dp: Fix the ISR_* enum values Jessica Zhang <jesszhan0024(a)gmail.com> drm/msm/dp: fix HPD state status bit shift value Andrea Righi <arighi(a)nvidia.com> sched/deadline: Reject debugfs dl_server writes for offline CPUs Alexey Kardashevskiy <aik(a)amd.com> crypto: ccp/tsm - Enable the root port after the endpoint Herbert Xu <herbert(a)gondor.apana.org.au> crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm Herbert Xu <herbert(a)gondor.apana.org.au> crypto: tegra - Fix dma_free_coherent size error Aleksander Jan Bajkowski <olek2(a)wp.pl> crypto: inside-secure/eip93 - Add check for devm_request_threaded_irq Weili Qian <qianweili(a)huawei.com> crypto: hisilicon/qm - disable error report before flr Tetsuo Handa <penguin-kernel(a)I-love.SAKURA.ne.jp> ocfs2: kill osb->system_file_mutex lock ZhengYuan Huang <gality369(a)gmail.com> ocfs2: don't BUG_ON an invalid journal dinode Dan Carpenter <error27(a)gmail.com> rapidio/tsi721: prevent a bad dereference in tsi721_db_dpc() Yury Norov <ynorov(a)nvidia.com> uaccess: minimize INLINE_COPY_USER-related ifdefery Yury Norov <ynorov(a)nvidia.com> uaccess: unify inline vs outline copy_{from,to}_user() selection Yury Norov <ynorov(a)nvidia.com> rust: uaccess: use INLINE_COPY_TO_USER to guard copy_to_user() Josh Law <objecting(a)objecting.org> lib/base64: validate before writing in decode tail path Davidlohr Bueso <dave(a)stgolabs.net> dax/kmem: account for partial discontiguous resource upon removal Danilo Krummrich <dakr(a)kernel.org> rust: devres: add 'static bound to Devres<T> Brian Norris <briannorris(a)chromium.org> arm64: tegra: Add #{address,size}-cells to Chromium-based /firmware Brian Norris <briannorris(a)chromium.org> ARM: tegra: Add #{address,size}-cells to Chromium-based /firmware Carlos Llamas <cmllamas(a)google.com> libbpf: Fix UAF in strset__add_str() Siddharth Nayyar <sidnayyar(a)google.com> bpftool: Fix typo in struct_ops map FD generation for light skeleton Michael Bommarito <michael.bommarito(a)gmail.com> libbpf: Harden parse_vma_segs() path parsing Timur Tabi <ttabi(a)nvidia.com> drm/nouveau/bios: specify correct display fuse register for Ampere and Ada Mikko Perttunen <mperttunen(a)nvidia.com> drm/tegra: Fix iommu_map_sgtable() return value check Mikko Perttunen <mperttunen(a)nvidia.com> gpu: host1x: Fix iommu_map_sgtable() return value check Felix Gu <ustc.gu(a)gmail.com> drm/tegra: dc: Fix device node reference leak in tegra_dc_has_output() Felix Gu <ustc.gu(a)gmail.com> gpu: host1x: mipi: Fix device_node reference leak in tegra_mipi_request() Thomas Zimmermann <tzimmermann(a)suse.de> drm/tegra: fbdev: Do not assign to struct drm_fb_helper.info Mikko Perttunen <mperttunen(a)nvidia.com> gpu: host1x: Allow entries in BO caches to be freed Ion Agorria <ion(a)agorria.com> drm/tegra: gr2d/gr3d: Contain PM in the gr*d_probe/gr*d_remove Svyatoslav Ryhel <clamor95(a)gmail.com> drm/tegra: gr2d/gr3d: Initialize address register map before HOST1X client is registered Tomas Glozar <tglozar(a)redhat.com> rtla/actions: Restore continue flag in actions_perform() Linus Walleij <linusw(a)kernel.org> dt-bindings: vendor-prefixes: Add Verbatim Corporation Jackie Dong <xy-jackie(a)139.com> ALSA: hda/realtek:ALC269 fixup for Yoga Pro 7 15ASH11 mic mute LED Vasant Hegde <vasant.hegde(a)amd.com> iommu/amd: Fix premature break in init_iommu_one() Jiayuan Chen <jiayuan.chen(a)linux.dev> net/sched: cls_bpf: prevent unbounded recursion in offload rollback Eric Dumazet <edumazet(a)google.com> ipv6: guard against possible NULL deref in __in6_dev_stats_get() Breno Leitao <leitao(a)debian.org> workqueue: drop spurious '*' from print_worker_info() fn declaration Mateusz Nowicki <mateusz.nowicki(a)posteo.net> nvme-pci: fix out-of-bounds access in nvme_setup_descriptor_pools Nilay Shroff <nilay(a)linux.ibm.com> nvme-multipath: fix flex array size in struct nvme_ns_head Geliang Tang <geliang(a)kernel.org> nvmet-tcp: check return value of nvmet_tcp_set_queue_sock Geliang Tang <geliang(a)kernel.org> nvmet-tcp: fix page fragment cache leak in error path Jia He <justin.he(a)arm.com> init/initramfs_test: wait_for_initramfs() before running Charles Keepax <ckeepax(a)opensource.cirrus.com> pinctrl: cs42l43: Fix polarity on debounce Charles Keepax <ckeepax(a)opensource.cirrus.com> pinctrl: cs42l43: Fix leaked pm reference on error path Joey Lu <a0987203069(a)gmail.com> pinctrl: nuvoton: ma35d1: fix MFP register offset and pin table Florian Schmaus <flo(a)geekplace.eu> selftests: Fix Makefile target for nsfs Zhang Cen <rollkingzzc(a)gmail.com> ALSA: seq: midi: Serialize output teardown with event_input Takashi Iwai <tiwai(a)suse.de> ALSA: seq: oss: Fix UAF at handling events with embedded SysEx data Cássio Gabriel <cassiogabrielcontato(a)gmail.com> ALSA: xen-front: Connect event channel after stream prepare Cássio Gabriel <cassiogabrielcontato(a)gmail.com> ALSA: xen-front: Reset event channel state on stream clear Zhongqiu Han <zhongqiu.han(a)oss.qualcomm.com> cpufreq: governor: Fix stale prev_cpu_nice spike when enabling ignore_nice_load Zhongqiu Han <zhongqiu.han(a)oss.qualcomm.com> cpufreq: governor: Fix data races on per-CPU idle/nice baselines Ripan Deuri <ripan.deuri(a)oss.qualcomm.com> wifi: ath12k: fix error unwind on arch_init() failure in PCI probe Miquel Raynal <miquel.raynal(a)bootlin.com> mtd: spi-nor: Drop duplicate Kconfig dependency Miquel Raynal <miquel.raynal(a)bootlin.com> mtd: spi-nor: debugfs: Fix the flags list Jon Hunter <jonathanh(a)nvidia.com> arm64: tegra: Fix address of Tegra264 main GPIO controller Danilo Krummrich <dakr(a)kernel.org> driver core: Guard deferred probe timeout extension with delayed_work_pending() Danilo Krummrich <dakr(a)kernel.org> driver core: Fix missing jiffies conversion in deferred_probe_extend_timeout() Rosen Penev <rosenp(a)gmail.com> mips: n64: add __iomem for writel call Rosen Penev <rosenp(a)gmail.com> mips: ralink: mt7621: add missing __iomem Maciej W. Rozycki <macro(a)orcam.me.uk> MIPS: DEC: Remove do_IRQ() call indirection Maciej W. Rozycki <macro(a)orcam.me.uk> MIPS: Fix big-endian stack argument fetching in o32 wrapper Jiakai Xu <xujiakai24(a)mails.ucas.ac.cn> PM: sleep: Use complete() in device_pm_sleep_init() Xianwei Zhao <xianwei.zhao(a)amlogic.com> pinctrl: meson: amlogic-a4: fix gpio output glitch Tao Cui <cuitao(a)kylinos.cn> RDMA/counter: Fix incorrect port index in rdma_counter_init() error cleanup Rafael J. Wysocki <rafael.j.wysocki(a)intel.com> ACPI: PAD: Fix teardown ordering in acpi_pad_remove() Lianfa Weng <wenglianfa(a)huawei.com> RDMA/hns: Fix log flood after cmd_mbox failure Lianfa Weng <wenglianfa(a)huawei.com> RDMA/hns: Fix warning in poll cq direct mode Eliot Courtney <ecourtney(a)nvidia.com> gpu: nova-core: vbios: use checked accesses in `setup_falcon_data` Eliot Courtney <ecourtney(a)nvidia.com> gpu: nova-core: vbios: use checked access in `FwSecBiosImage::header` Eliot Courtney <ecourtney(a)nvidia.com> gpu: nova-core: vbios: use checked ops and accesses in `FwSecBiosImage::ucode` Eliot Courtney <ecourtney(a)nvidia.com> gpu: nova-core: vbios: read BitToken using FromBytes Eliot Courtney <ecourtney(a)nvidia.com> gpu: nova-core: vbios: avoid reading too far in read_more_at_offset Eliot Courtney <ecourtney(a)nvidia.com> gpu: nova-core: vbios: use checked arithmetic for bios image range end Eliot Courtney <ecourtney(a)nvidia.com> gpu: nova-core: vbios: stop scanning at BIOS_MAX_SCAN_LEN Guangshuo Li <lgs201920130244(a)gmail.com> IB/mlx4: Fix refcount leak in add_port() error path Zhu Yanjun <yanjun.zhu(a)linux.dev> RDMA/rxe: Fix a use-after-free problem in rxe_mmap Jacob Moroni <jmoroni(a)google.com> RDMA/irdma: Fix out-of-bounds write in irdma_copy_user_pgaddrs Chancel Liu <chancel.liu(a)nxp.com> ASoC: dapm: Fix widget lookup with prefixed names across DAPM contexts Han Gao <gaohan(a)iscas.ac.cn> pinctrl: spacemit: fix NULL check in spacemit_pin_set_config Samuel Holland <samuel(a)sholland.org> bus: sunxi-rsb: Always check register address validity Daniel Palmer <daniel(a)thingy.jp> tools/nolibc: stackprotector: Avoid stalling program startup if crng is not init yet Shiraz Saleem <shirazsaleem(a)microsoft.com> RDMA/mana_ib: Use ib_get_eth_speed for reporting port speed Ronaldo Nunez <rnunez(a)baylibre.com> pwm: imx27: Fix variable truncation in .apply() Lifeng Zheng <zhenglifeng1(a)huawei.com> cpufreq: conservative: Simplify frequency limit handling Pengjie Zhang <zhangpengjie2(a)huawei.com> cpufreq: Documentation: fix sampling_down_factor range Dmitry Baryshkov <dmitry.baryshkov(a)oss.qualcomm.com> drm/msm/mdss: correct UBWC programming sequences Cássio Gabriel <cassiogabrielcontato(a)gmail.com> ASoC: mediatek: mt8189: Fix probe resource cleanup Aleksander Jan Bajkowski <olek2(a)wp.pl> crypto: eip93 - fix reset ring register definition Saravana Kannan <saravanak(a)kernel.org> of: dynamic: Fix overlayed devices not probing because of fw_devlink Saravana Kannan <saravanak(a)kernel.org> Revert "treewide: Fix probing of devices in DT overlays" Zhang Yuwei <zhangyuwei20(a)huawei.com> driver core: Use mod_delayed_work to prevent lost deferred probe work Stepan Ionichev <sozdayvek(a)gmail.com> device property: fix fwnode reference leak in fwnode_graph_get_endpoint_by_id() Conor Kotwasinski <conorkotwasinski2024(a)u.northwestern.edu> kernfs: fix suspicious RCU usage in kernfs_put() Baokun Li <libaokun(a)linux.alibaba.com> writeback: drop now-unnecessary rcu_barrier() in cgroup_writeback_umount() Joel Selvaraj <foss(a)joelselvaraj.com> arm64: dts: qcom: sdm845-xiaomi-beryllium: Correct IPA FW path Gopikrishna Garmidi <gopikrishna.garmidi(a)oss.qualcomm.com> arm64: dts: qcom: glymur: Fix wrong interrupt number for i2c19 Ritesh Kumar <quic_riteshk(a)quicinc.com> arm64: dts: qcom: lemans: Add eDP ref clock for eDP PHYs Pengpeng Hou <pengpeng(a)iscas.ac.cn> tracing: Bound synthetic-field strings with seq_buf Harshal Dev <harshal.dev(a)oss.qualcomm.com> arm64: dts: qcom: sm8750: Add power-domain and iface clk for ice node Harshal Dev <harshal.dev(a)oss.qualcomm.com> arm64: dts: qcom: sm8650: Add power-domain and iface clk for ice node Harshal Dev <harshal.dev(a)oss.qualcomm.com> arm64: dts: qcom: sm8550: Add power-domain and iface clk for ice node Harshal Dev <harshal.dev(a)oss.qualcomm.com> arm64: dts: qcom: sm8450: Add power-domain and iface clk for ice node Harshal Dev <harshal.dev(a)oss.qualcomm.com> arm64: dts: qcom: kodiak: Add power-domain and iface clk for ice node Harshal Dev <harshal.dev(a)oss.qualcomm.com> arm64: dts: qcom: sc7180: Add power-domain and iface clk for ice node Harshal Dev <harshal.dev(a)oss.qualcomm.com> arm64: dts: qcom: monaco: Add power-domain and iface clk for ice node Harshal Dev <harshal.dev(a)oss.qualcomm.com> arm64: dts: qcom: lemans: Add power-domain and iface clk for ice node Harshal Dev <harshal.dev(a)oss.qualcomm.com> arm64: dts: qcom: kaanapali: Add power-domain and iface clk for ice node Abel Vesa <abel.vesa(a)oss.qualcomm.com> arm64: dts: qcom: eliza-mtp: Fix the debug UART index Geert Uytterhoeven <geert+renesas(a)glider.be> firmware: arm_scmi: Fix OOB in scmi_power_name_get() Sven Püschel <s.pueschel(a)pengutronix.de> media: rockchip: rga: fix too small buffer size Nishanth Sampath Kumar <nissampa(a)cisco.com> regmap-i2c: fix sparse warning in regmap_smbus_word_write_reg16 Eric Dumazet <edumazet(a)google.com> net/sched: sch_drr: annotate data-races around cl->deficit GuoHan Zhao <zhaoguohan(a)kylinos.cn> vfio/xe: avoid duplicate reset in xe_vfio_pci_reset_done Hongling Zeng <zenghongling(a)kylinos.cn> nilfs2: Fix return in nilfs_mkdir David Matlack <dmatlack(a)google.com> vfio: selftests: Allow builds when ARCH=x86 Jason Gunthorpe <jgg(a)ziepe.ca> vfio: selftests: Fix out-of-tree build with make O= Daniel Palmer <daniel(a)thingy.jp> tools/nolibc: getopt: Fix potential out of bounds access Chen-Yu Tsai <wenst(a)chromium.org> regulator: dt-bindings: mt6359: Drop regulator-name pattern restrictions Randy Dunlap <rdunlap(a)infradead.org> bitops: use common function parameter names Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> sysfs: clamp show() return value in sysfs_kf_read() Guoniu Zhou <guoniu.zhou(a)oss.nxp.com> media: synopsys: Fix IPI using hardcoded datatype Sudeep Holla <sudeep.holla(a)kernel.org> firmware: arm_scmi: Read sensor config as 32-bit value Andre Przywara <andre.przywara(a)arm.com> firmware: smccc: Fix Arm SMCCC SOC_ID name call Aurelien Jarno <aurelien(a)aurel32.net> riscv: dts: spacemit: fix uboot partition offset on Milk-V Jupiter Aurelien Jarno <aurelien(a)aurel32.net> riscv: dts: spacemit: set console baud rate on Milk-V Jupiter Jose A. Perez de Azpillaga <azpijr(a)gmail.com> staging: media: atomisp: fix loop shadowing in ia_css_stream_destroy() Yuho Choi <dbgh9129(a)gmail.com> media: atomisp: gc2235: fix UAF and memory leak Zilin Guan <zilin(a)seu.edu.cn> media: atomisp: Fix memory leak in atomisp_fixed_pattern_table() Viacheslav Dubeyko <slava(a)dubeyko.com> hfs: fix incorrect inode ID assignment in hfs_new_inode() Sherry Sun <sherry.sun(a)nxp.com> arm64: dts: imx95-19x19-evk: Fix PCIe EP vpcie-supply Sherry Sun <sherry.sun(a)nxp.com> arm64: dts: imx8qxp-mek: Remove unnecessary PCIe EP vpcie-supply Sherry Sun <sherry.sun(a)nxp.com> arm64: dts: imx8dxl-evk: Remove unnecessary PCIe EP properties Francesco Dolcini <francesco.dolcini(a)toradex.com> arm64: dts: freescale: imx95-verdin-ivy: fix RS485 RTS polarity Jamie Nguyen <jamien(a)nvidia.com> firmware: arm_ffa: Honor partition info descriptor size Kevin Brodsky <kevin.brodsky(a)arm.com> selftests/mm: Fix resv_sz when parsing arm64 signal frame Vincent Guittot <vincent.guittot(a)linaro.org> sched/fair: Update util_est after updating util_avg during dequeue Bibek Kumar Patro <bibek.patro(a)oss.qualcomm.com> iommu/arm-smmu-qcom: Fix fastrpc compatible string in ACTLR client match table Paul Chaignon <paul.chaignon(a)gmail.com> selftests/bpf: Fix test for refinement of single-value tnum Roman Kvasnytskyi <roman(a)kvasnytskyi.net> selftests/bpf: Reject unsupported -k option in vmtest.sh Paul Chaignon <paul.chaignon(a)gmail.com> selftests/bpf: Override EXTRA_LDFLAGS for static builds Fengnan Chang <changfengnan(a)bytedance.com> dm: limit target bio polling to one shot Liviu Dudau <liviu.dudau(a)arm.com> drm/syncobj: Fix memory leak in drm_syncobj_find_fence() Crystal Wood <crwood(a)redhat.com> rtla: Stop the record trace on interrupt Costa Shulyupin <costa.shul(a)redhat.com> tools/rtla: Fix --dump-tasks usage in timerlat Junxian Huang <huangjunxian6(a)hisilicon.com> RDMA/hns: Initialize seqfile before creating file Sara Venkatesh <sarajvenkatesh(a)gmail.com> RDMA/srpt: fix integer overflow in immediate data length check Prathamesh Deshpande <prathameshdeshpande7(a)gmail.com> RDMA/mlx5: Fix devx subscribe-event unwind NULL dereference Prathamesh Deshpande <prathameshdeshpande7(a)gmail.com> RDMA/mlx5: Fix UMR XLT cleanup on ODP populate failure Alexander Chesnokov <Alexander.Chesnokov(a)kaspersky.com> RDMA/hns: Fix arithmetic overflow in calc_hem_config() Prathamesh Deshpande <prathameshdeshpande7(a)gmail.com> IB/mlx5: Fix transport-domain rollback and initialize lb mutex earlier Linmao Li <lilinmao(a)kylinos.cn> ipv6: addrconf: bail out of dad_failure when state is no longer POSTDAD Eric Dumazet <edumazet(a)google.com> net/sched: sch_htb: annotate data-races (I) Eric Dumazet <edumazet(a)google.com> net/sched: sch_htb: do not change sch->flags in htb_dump() Eric Dumazet <edumazet(a)google.com> net/sched: sch_dualpi2: annotate data-races in dualpi2_dump_stats() Eric Dumazet <edumazet(a)google.com> net/sched: add qdisc_qlen_inc() and qdisc_qlen_dec() Qiang Ma <maqianga(a)uniontech.com> spi: hisi-kunpeng: Use dev_err_probe() for host registration failure Abdun Nihaal <nihaal(a)cse.iitm.ac.in> crypto: safexcel - Fix potential memory leak in safexcel_pci_probe() Stepan Ionichev <sozdayvek(a)gmail.com> crypto: ccp/sev-dev-tsm - bail out early when pdev->bus is NULL Herbert Xu <herbert(a)gondor.apana.org.au> crypto: af_alg - Cap AEAD AD length to 0x80000000 Sean Christopherson <seanjc(a)google.com> crypto: ccp - Treat zero-length cert chain as query for blob lengths Yihang Li <liyihang9(a)huawei.com> scsi: hisi_sas: Add slave_destroy interface for v3 hw Eric Dumazet <edumazet(a)google.com> net/sched: sch_hfsc: annotate data-races in hfsc_dump_class_stats() Stepan Ionichev <sozdayvek(a)gmail.com> clk: scpi: Unregister child clock providers on remove Rafael J. Wysocki <rafael.j.wysocki(a)intel.com> thermal: hwmon: Register a hwmon device for each thermal zone Rafael J. Wysocki <rafael.j.wysocki(a)intel.com> thermal: hwmon: Fix critical temperature attribute removal Pengpeng Hou <pengpeng(a)iscas.ac.cn> evm: terminate and bound the evm_xattrs read buffer Lin He <helin52(a)huawei.com> drm/hisilicon/hibmc: use clock to look up the PLL value Lin He <helin52(a)huawei.com> drm/hisilicon/hibmc: move display contrl config to hibmc_probe() Lin He <helin52(a)huawei.com> drm/hisilicon/hibmc: fix no showing when no connectors connected Lin He <helin52(a)huawei.com> drm/hisilicon/hibmc: add updating link cap in DP detect() Rafael J. Wysocki <rafael.j.wysocki(a)intel.com> platform/chrome: wilco_ec: event: Check ACPI_COMPANION() Rafael J. Wysocki <rafael.j.wysocki(a)intel.com> platform/chrome: chromeos_tbmc: Check ACPI_COMPANION() Rafael J. Wysocki <rafael.j.wysocki(a)intel.com> platform/chrome: chromeos_privacy_screen: Check ACPI_COMPANION() Kuldeep Singh <kuldeep.singh(a)oss.qualcomm.com> arm64: dts: qcom: sm8450: Fix ICE reg size Kuldeep Singh <kuldeep.singh(a)oss.qualcomm.com> arm64: dts: qcom: kodiak: Fix ICE reg size Krzysztof Kozlowski <krzysztof.kozlowski(a)oss.qualcomm.com> arm64: dts: qcom: sm8750: Fix DSI1 phy reference clock rate Cristian Marussi <cristian.marussi(a)arm.com> clk: scmi: Fix clock rate rounding Hsiu Che Yu <yu.whisper.personal(a)gmail.com> rust: alloc: fix `Vec::extend_with` SAFETY comment Christian Brauner <brauner(a)kernel.org> rhashtable: give each instance its own lockdep class Abel Vesa <abel.vesa(a)oss.qualcomm.com> arm64: dts: qcom: glymur: Mark USB SS1 and SS2 as role-switch capable Abel Vesa <abel.vesa(a)oss.qualcomm.com> arm64: dts: qcom: glymur-crd: Drop forced host mode for USB SS0 and SS1 Yang Wang <kevinyang.wang(a)amd.com> drm/amdgpu: fix error return code in mes_v12_1_map_test_bo Breno Leitao <leitao(a)debian.org> workqueue: forbid TEST_WORKQUEUE from being built-in Chen-Yu Tsai <wenst(a)chromium.org> arm64: dts: mediatek: mt8192-asurada: Move PCIe DMA bounce buffer to host Frank Wunderlich <frank-w(a)public-files.de> arm64: dts: mediatek: mt7988a-bpi-r4pro: rework pcie gpio-hog handling Stefan Metzmacher <metze(a)samba.org> sockptr: fix usize check in copy_struct_from_sockptr() for user pointers Stefan Metzmacher <metze(a)samba.org> uaccess: fix ignored_trailing logic in copy_struct_to_user() Matt Bobrowski <mattbobrowski(a)google.com> bpf: fix crash in bpf_[set|remove]_dentry_xattr for negative dentries Luca Leonardo Scorcia <l.scorcia(a)gmail.com> soc: mediatek: mtk-mmsys: Restore MT8167 routing masks lost during merge Sean Christopherson <seanjc(a)google.com> iommu/amd: Fix a stale comment about which legacy mode is user visible Dmitry Baryshkov <dmitry.baryshkov(a)oss.qualcomm.com> media: venus: scale MMCX power domain on SM8250 Dmitry Baryshkov <dmitry.baryshkov(a)oss.qualcomm.com> media: iris: scale MMCX power domain on SM8250 Shawn Guo <shengchao.guo(a)oss.qualcomm.com> arm64: dts: qcom: lemans: Move PCIe devices into soc node Nickolay Goppen <setotau(a)mainlining.org> arm64: dts: qcom: sdm630: set adsp compute-cbs' regs properly Nickolay Goppen <setotau(a)mainlining.org> arm64: dts: qcom: sdm660: set cdsp compute-cbs' regs properly Yixun Lan <dlan(a)kernel.org> dts: riscv: spacemit: correct 32k clock frequency Wenmeng Liu <wenmeng.liu(a)oss.qualcomm.com> media: qcom: camss: vfe: fix PIX subdev naming on VFE lite Leon Romanovsky <leon(a)kernel.org> ntb: Use consistent DMA attributes when freeing DMA mappings Leon Romanovsky <leon(a)kernel.org> ntb: Store original DMA address for future release Shuangpeng Bai <shuangpeng.kernel(a)gmail.com> nilfs2: fix backing_dev_info reference leak Alexander Aring <aahringo(a)redhat.com> dlm: fix add msg handle in send_queue ordered Lizhi Hou <lizhi.hou(a)amd.com> accel/amdxdna: Fix clflush buffer size Krzysztof Kozlowski <krzysztof.kozlowski(a)oss.qualcomm.com> ARM: multi_v7_defconfig: Correct QCOM_RPMH and QCOM_RPMHPD Weiming Shi <bestswngs(a)gmail.com> crypto: asymmetric_keys - fix OOB read in pefile_digest_pe_contents Thorsten Blum <thorsten.blum(a)linux.dev> crypto: ecrdsa - fix unknown OID check in ecrdsa_param_curve Lothar Rubusch <l.rubusch(a)gmail.com> crypto: atmel-sha204a - fix blocking and non-blocking rng logic Tycho Andersen (AMD) <tycho(a)kernel.org> crypto: ccp - Initialize data during __sev_snp_init_locked() Tycho Andersen (AMD) <tycho(a)kernel.org> crypto: ccp - Check for page allocation failure correctly in TIO Tycho Andersen (AMD) <tycho(a)kernel.org> crypto: ccp - Fix snp_filter_reserved_mem_regions() off-by-one Tycho Andersen (AMD) <tycho(a)kernel.org> crypto: ccp - Reverse the cleanup order in psp_dev_destroy() Di Shen <di.shen(a)unisoc.com> OPP: Fix race between OPP addition and lookup Zhan Xusheng <zhanxusheng1024(a)gmail.com> alarmtimer: Remove stale return description from alarm_handle_timer() Chris Brandt <chris.brandt(a)renesas.com> drm: renesas: rz-du: mipi_dsi: Fix return path on error Kuniyuki Iwashima <kuniyu(a)google.com> vxlan: Fix potential null-ptr-deref in vxlan_gro_prepare_receive(). Peng Fan <peng.fan(a)nxp.com> Revert "arm64: dts: imx8mp-kontron: Add support for reading SD_VSEL signal" Peng Fan <peng.fan(a)nxp.com> Revert "arm64: dts: imx8mm-kontron: Add support for reading SD_VSEL signal" Krzysztof Kozlowski <krzysztof.kozlowski(a)oss.qualcomm.com> arm64: dts: imx8mp-ab2: Correct interrupt flags Krzysztof Kozlowski <krzysztof.kozlowski(a)oss.qualcomm.com> arm64: dts: imx8mn-vhip4-evalboard-v2: Correct interrupt flags Krzysztof Kozlowski <krzysztof.kozlowski(a)oss.qualcomm.com> arm64: dts: imx8mn-vhip4-evalboard-v1: Correct interrupt flags Peng Fan <peng.fan(a)nxp.com> arm64: dts: imx8x-colibri: Correct SODIMM PAD settings Weixin Guo <2298701336(a)qq.com> arm64: dts: rockchip: fix rk809 interrupt pin on rk3566-roc-pc Brian Norris <briannorris(a)chromium.org> arm64: dts: rockchip: Add #{address,size}-cells to Chromium-based /firmware Brian Norris <briannorris(a)chromium.org> ARM: dts: rockchip: Add #{address,size}-cells to Chromium-based /firmware Duje Mihanović <duje(a)dujemihanovic.xyz> arm64: dts: marvell: samsung-coreprimevelte: Increase touchscreen voltage Conor Dooley <conor.dooley(a)microchip.com> riscv: dts: microchip: fix pic64gx gpio interrupt-cells Conor Dooley <conor.dooley(a)microchip.com> riscv: dts: microchip: update pic64gx gpio interrupts to better match the SoC David Heidelberg <david(a)ixit.cz> drm/panel: Clean up S6E3HA2 config dependencies and fill help text David Heidelberg <david(a)ixit.cz> drm/panel: Clean up S6E3FC2X01 config dependencies Marijn Suijten <marijn.suijten(a)somainline.org> drm/panel: Clean up SOFEF00 config dependencies Peddolla Harshavardhan Reddy <peddolla.reddy(a)oss.qualcomm.com> wifi: cfg80211: restrict LMR feedback check to TB and non-TB ranging Alice Ryhl <aliceryhl(a)google.com> drm/gpuvm: take refcount on DRM device Marek Vasut <marex(a)nabladev.com> dt-bindings: vendor-prefixes: Add Displaytech Ltd. Conor Dooley <conor.dooley(a)microchip.com> riscv: dts: microchip: remove gpio hogs from beaglev-fire Conor Dooley <conor.dooley(a)microchip.com> riscv: dts: microchip: gpio controllers on mpfs need 2 interrupt cells Felix Gu <ustc.gu(a)gmail.com> pinctrl: sunxi: fix regulator leak in sunxi_pmx_request() error path Conor Dooley <conor.dooley(a)microchip.com> dts: spacemit: set console baud rate on bpif3 Masami Hiramatsu (Google) <mhiramat(a)kernel.org> lib/vsprintf: Fix to check field_width and precision Damian Muszynski <damian.muszynski(a)intel.com> crypto: qat - fix heartbeat error injection Josh Poimboeuf <jpoimboe(a)kernel.org> klp-build: Fix patch cleanup on interrupt Josh Poimboeuf <jpoimboe(a)kernel.org> klp-build: Fix checksum comparison for changed offsets Josh Poimboeuf <jpoimboe(a)kernel.org> klp-build: Fix hang on out-of-date .config Josh Poimboeuf <jpoimboe(a)kernel.org> objtool: Fix reloc hash collision in find_reloc_by_dest_range() Josh Poimboeuf <jpoimboe(a)kernel.org> objtool: Replace iterator callback with for_each_sym_by_mangled_name() Josh Poimboeuf <jpoimboe(a)kernel.org> objtool/klp: Fix relocation conversion failures for R_X86_64_NONE Josh Poimboeuf <jpoimboe(a)kernel.org> objtool/klp: Fix extraction of text annotations for alternatives Josh Poimboeuf <jpoimboe(a)kernel.org> objtool/klp: Fix cloning of zero-length section symbols Josh Poimboeuf <jpoimboe(a)kernel.org> objtool/klp: Fix handling of zero-length .altinstr_replacement sections Joe Lawrence <joe.lawrence(a)redhat.com> objtool/klp: Fix create_fake_symbols() skipping entsize-based sections Josh Poimboeuf <jpoimboe(a)kernel.org> objtool/klp: Fix .data..once static local non-correlation Joe Lawrence <joe.lawrence(a)redhat.com> objtool/klp: Fix is_uncorrelated_static_local() for Clang Ashish Mhetre <amhetre(a)nvidia.com> memory: tegra: Wire up system sleep PM ops Icenowy Zheng <zhengxingda(a)iscas.ac.cn> drm: verisilicon: call atomic helper's plane state check even if no CRTC Nas Chung <nas.chung(a)chipsnmedia.com> media: v4l2-common: Add YUV24 format info Samuel Holland <samuel(a)sholland.org> media: cedrus: Fix failure to clean up hardware on probe failure Felix Gu <ustc.gu(a)gmail.com> watchdog: sprd_wdt: Remove redundant sprd_wdt_disable() on register failure Balakrishnan Sambath <balakrishnan.s(a)microchip.com> watchdog: sama5d4_wdt: Fix WDDIS detection on SAM9X60 and SAMA7G5 Yingjie Gao <gaoyingjie(a)uniontech.com> watchdog: sp5100_tco: Use EFCH MMIO for newer Hygon FCH Gabriele Monaco <gmonaco(a)redhat.com> Documentation/rv: Replace stale website link Aleksandr Loktionov <aleksandr.loktionov(a)intel.com> ixgbe: fix unaligned u32 access in ixgbe_update_flash_X550() Jihed Chaibi <jihed.chaibi.dev(a)gmail.com> ARM: dts: am335x-sl50: Fix audio bitclock and frame master endpoint Wei Zhang <wei.zhang(a)oss.qualcomm.com> wifi: ath11k: cancel SSR work items during PCI shutdown Tristan Madani <tristan(a)talencesecurity.com> wifi: ath9k: fix OOB access from firmware tx status queue ID Chen-Yu Tsai <wenst(a)chromium.org> pinctrl: mediatek: eint: Drop base from mtk_eint_chip_write_mask() Prasanna Kumar T S M <ptsm(a)linux.microsoft.com> soc: xilinx: Shutdown and free rx mailbox channel Prasanna Kumar T S M <ptsm(a)linux.microsoft.com> soc: xilinx: Fix race condition in event registration Xingjing Deng <micro6947(a)gmail.com> kconfig: fix potential NULL pointer dereference in conf_askvalue Tristan Madani <tristan(a)talencesecurity.com> wifi: rtw89: add bounds check on firmware mac_id in link lookup Tristan Madani <tristan(a)talencesecurity.com> wifi: rtw88: fix OOB read from firmware RX descriptor exceeding DMA buffer Shin-Yi Lin <isaiah(a)realtek.com> wifi: rtw89: Correct data type for scan index to avoid infinite loop Chin-Yen Lee <timlee(a)realtek.com> wifi: rtw88: fix wrong pci_get_drvdata type in AER handlers Christos Longros <chris.longros(a)gmail.com> wifi: rtw89: fix wrong pci_get_drvdata type in AER handlers Timur Tabi <ttabi(a)nvidia.com> gpu: nova-core: use correct fwsignature for GA100 Danilo Krummrich <dakr(a)kernel.org> driver core: use READ_ONCE() for dev->driver in dev_has_sync_state() Srinivasan Shanmugam <srinivasan.shanmugam(a)amd.com> drm/amdkfd: Validate CRIU-restored IDs before idr_alloc Felix Gu <ustc.gu(a)gmail.com> pinctrl: pinconf-generic: fix properties bitmap leak in parse_fw_cfg() Krzysztof Kozlowski <krzysztof.kozlowski(a)oss.qualcomm.com> dt-bindings: pinctrl: nvidia,tegra234: Add missing required block Jon Hunter <jonathanh(a)nvidia.com> arm64: tegra: Fix Tegra234 MGBE PTP clock Louis Kotze <loukot(a)gmail.com> wifi: cfg80211: fix grammar in MLO group key error message Edward Adam Davis <eadavis(a)qq.com> hfsplus: Add a sanity check for btree node size Edward Adam Davis <eadavis(a)qq.com> hfsplus: Remove the duplicate attr inode dirty marking action David Heidelberg <david(a)ixit.cz> arm64: dts: qcom: sdm845-shift-axolotl: Correct touchscreen sleep state Kamal Wadhwa <kamal.wadhwa(a)oss.qualcomm.com> arm64: dts: qcom: fix temp-alarm probe failure for PMH0104 on Glymur Krzysztof Kozlowski <krzysztof.kozlowski(a)oss.qualcomm.com> arm64: dts: qcom: sdm845-mezzanine: Fix camss ports unit_address_vs_reg warning Krzysztof Kozlowski <krzysztof.kozlowski(a)oss.qualcomm.com> arm64: dts: qcom: sc8180x: Fix phy simple_bus_reg warning Krzysztof Kozlowski <krzysztof.kozlowski(a)oss.qualcomm.com> arm64: dts: qcom: ipq5424: Fix USB simple_bus_reg warnings Krzysztof Kozlowski <krzysztof.kozlowski(a)oss.qualcomm.com> arm64: dts: qcom: glymur: Fix cache and SRAM simple_bus_reg warnings Krzysztof Kozlowski <krzysztof.kozlowski(a)oss.qualcomm.com> arm64: dts: qcom: glymur: Fix USB simple_bus_reg warning David Heidelberg <david(a)ixit.cz> arm64: dts: qcom: sdm845-oneplus: Drop address from framebuffer node Alexander Koskovich <akoskovich(a)pm.me> arm64: dts: qcom: milos: Reduce rmtfs_mem size to 2.5MiB Sean Christopherson <seanjc(a)google.com> x86/bug: Add printf() validation to HAVE_ARCH_BUG_FORMAT_ARGS WARNs Konrad Dybcio <konrad.dybcio(a)oss.qualcomm.com> dt-bindings: net: bluetooth: qualcomm: Fix WCN6855 regulator names Kamlesh Kumar <kamlesh0hrs(a)gmail.com> ima: Fix sigv3 signature handling for EVM_IMA_XATTR_DIGSIG Diederik de Haas <diederik(a)cknow-tech.com> arm64: dts: rockchip: Fix gmac0 reset pin for NanoPi R5S Quentin Schulz <quentin.schulz(a)cherry.de> arm64: dts: rockchip: fix Ethernet PHY not found on PX30 Cobra Cristian Ciocaltea <cristian.ciocaltea(a)collabora.com> arm64: dts: rockchip: Update vdec register blocks order on RK3588 Cristian Ciocaltea <cristian.ciocaltea(a)collabora.com> arm64: dts: rockchip: Fix vdec register blocks order on RK3576 Baolin Liu <liubaolin(a)kylinos.cn> Documentation: proc: fix section numbering in table of contents Gregory Bell <grbell(a)redhat.com> selftests/bpf: Use local type for bpf_fou_encap in test_tunnel_kern Gregory Bell <grbell(a)redhat.com> selftests/bpf: Use local type for flow_offload_tuple_rhash in xdp_flowtable Felix Gu <ustc.gu(a)gmail.com> spi: atcspi200: fix use-after-free when driver unbind Yang Wang <kevinyang.wang(a)amd.com> drm/amd/pm: remove trailing semicolon from AMDGPU_PM_POLICY_ATTR macro Antoine Tenart <atenart(a)kernel.org> libbpf: Fix deduplication of typedef with base definitions Aaradhana Sahu <aaradhana.sahu(a)oss.qualcomm.com> wifi: ath12k: Fix invalid IRQ requests during AHB probe Nick Hu <nick.hu(a)sifive.com> dt-bindings: timer: Remove sifive,fine-ctr-bits property Matt Bobrowski <mattbobrowski(a)google.com> selftests/bpf: Fix off-by-one in bpf_cpumask_populate related selftest Aaron Tomlin <atomlin(a)atomlin.com> libbpf: Report error when a negative kprobe offset is specified Yuho Choi <dbgh9129(a)gmail.com> drm/radeon: fix memory leak in radeon_ring_restore() on lock failure Werner Kasselman <werner(a)verivus.ai> drm/radeon: fix integer overflow in radeon_align_pitch() Alex Sierra <alex.sierra(a)amd.com> drm/amdkfd: fix redundant MQD iterations in GFX v12.1 Werner Kasselman <werner(a)verivus.ai> drm/amdgpu: fix integer overflow in amdgpu_gem_align_pitch() Max Zhen <max.zhen(a)amd.com> accel/amdxdna: Guard management mailbox channel cleanup against NULL pointer Jonathan Cavitt <jonathan.cavitt(a)intel.com> drm/gpuvm: Do not prepare NULL objects Felix Gu <ustc.gu(a)gmail.com> accel/amdxdna: Fix memory leak in amdxdna_iommu_alloc() Max Zhen <max.zhen(a)amd.com> accel/amdxdna: Fix fatal_error_info layout in firmware interface Tvrtko Ursulin <tvrtko.ursulin(a)igalia.com> dma-fence: Fix potential tracepoint null pointer dereferences Lizhi Hou <lizhi.hou(a)amd.com> accel/amdxdna: Fix order of canceled mailbox messages Lizhi Hou <lizhi.hou(a)amd.com> accel/amdxdna: Fix iommu_map_sgtable() return value handling Max Zhen <max.zhen(a)amd.com> accel/amdxdna: Handle DETACH_DEBUG_BO through config_debug_bo path Lizhi Hou <lizhi.hou(a)amd.com> accel/amdxdna: Adjust size for copy_to_user() Lizhi Hou <lizhi.hou(a)amd.com> accel/amdxdna: Create shared functions for AIE2 and AIE4 Matthew Brost <matthew.brost(a)intel.com> drm/gpusvm: Reject VMAs with VM_IO or VM_PFNMAP when creating SVM ranges Tomi Valkeinen <tomi.valkeinen(a)ideasonboard.com> drm/tidss: Drop extra drm_mode_config_reset() call Thomas Zimmermann <tzimmermann(a)suse.de> drm/rockchip: Test for imported buffers with drm_gem_is_imported() Cristian Ciocaltea <cristian.ciocaltea(a)collabora.com> drm/rockchip: dw_dp: Fix null-ptr-deref in dw_dp_remove() Cristian Ciocaltea <cristian.ciocaltea(a)collabora.com> drm/rockchip: dw_dp: Switch to drmm_kzalloc() Cristian Ciocaltea <cristian.ciocaltea(a)collabora.com> drm/rockchip: inno-hdmi: Switch to drmm_kzalloc() Max Zhen <max.zhen(a)amd.com> accel/amdxdna: Fix leak when pinning ubuf pages Chen Ni <nichen(a)iscas.ac.cn> clocksource/drivers/sun5i: Handle error returns from devm_reset_control_get_optional_exclusive() Stafford Horne <shorne(a)gmail.com> openrisc: mm: Fix section mismatch between map_page and __set_fixmap Felix Gu <ustc.gu(a)gmail.com> soc: fsl: qe_ports_ic: Add missing cleanup on device removal Jiacheng Yu <yujiacheng3(a)huawei.com> fbcon: Use correct type for vc_resize() return value Ian Bridges <icb(a)fastmail.org> fbcon: fix NULL pointer dereference for a console without vc_data David Howells <dhowells(a)redhat.com> afs: Fix uncancelled rxrpc OOB message handler David Howells <dhowells(a)redhat.com> afs: Fix further netns teardown to cancel the preallocation charger Nan Li <tonanli66(a)gmail.com> afs: handle CB.InitCallBackState3 requests without a server record Matvey Kovalev <matvey.kovalev(a)ispras.ru> afs: fix NULL pointer dereference in afs_get_tree() David Howells <dhowells(a)redhat.com> afs: Fix netns teardown to cancel the preallocation charger David Howells <dhowells(a)redhat.com> rxrpc: Fix double unlock in rxrpc_recvmsg() David Howells <dhowells(a)redhat.com> rxrpc: Fix leak of connection from OOB challenge David Howells <dhowells(a)redhat.com> rxrpc: Fix the reception of a reply packet before data transmission Wyatt Feng <bronzed_45_vested(a)icloud.com> rxrpc: Fix ACKALL packet handling David Howells <dhowells(a)redhat.com> rxrpc: Fix oob challenge leak in cleanup after notification failure David Howells <dhowells(a)redhat.com> rxrpc: Fix rxrpc_rotate_tx_rotate() to check there's something to rotate David Howells <dhowells(a)redhat.com> rxrpc: Fix potential infinite loop in rxrpc_recvmsg() David Howells <dhowells(a)redhat.com> rxrpc: Fix leak of released call in recvmsg(MSG_PEEK) David Howells <dhowells(a)redhat.com> rxrpc: Fix socket notification race David Howells <dhowells(a)redhat.com> rxrpc: Fix UAF in rxgk_issue_challenge() Hyunwoo Kim <imv4bel(a)gmail.com> rxrpc: Don't move a peeked OOB message onto the pending queue Jeffrey Altman <jaltman(a)auristor.com> rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc Li Daming <d4n.for.sec(a)gmail.com> rxrpc: serialize kernel accept preallocation with socket teardown Matthias Feser <mfe(a)KBSgmbhfr.onmicrosoft.com> serial: 8250_omap: clear rx_running on zero-length DMA completes Tapio Reijonen <tapio.reijonen(a)vaisala.com> serial: max310x: implement gpio_chip::get_direction() Stephan Gerhold <stephan.gerhold(a)linaro.org> serial: msm: Disable DMA for kernel console UART Guoniu Zhou <guoniu.zhou(a)oss.nxp.com> dt-bindings: power: imx93: Add MIPI PHY power domain Chen-Yu Tsai <wens(a)kernel.org> dt-bindings: media: sun4i-a10-video-engine: Add interconnect properties Ricardo Ribalda <ribalda(a)chromium.org> media: uvcvideo: Fix sequence number when no EOF Ricardo Ribalda <ribalda(a)chromium.org> media: uvcvideo: Relax the constrains for interpolating the hw clock Ricardo Ribalda <ribalda(a)chromium.org> media: uvcvideo: Do not add clock samples with small sof delta Ricardo Ribalda <ribalda(a)chromium.org> media: uvcvideo: Fix dev_sof filtering in hw timestamp Ricardo Ribalda <ribalda(a)chromium.org> media: uvcvideo: Fix buffer sequence in frame gaps Ricardo Ribalda <ribalda(a)chromium.org> media: uvcvideo: Avoid partial metadata buffers Ricardo Ribalda <ribalda(a)chromium.org> media: uvcvideo: Use hw timestaming if the clock buffer is full Damien Laine <damien.laine(a)gmail.com> ALSA: hda/realtek: Fix speakers on Legion Pro 7 16ARX8H with codec SSID 17aa:38a7 Xu Rao <raoxu(a)uniontech.com> ALSA: hda: Fix cached processing coefficient verbs Zhang Heng <zhangheng(a)kylinos.cn> ALSA: hda: conexant: Remove mic bias threshold override Eckhart Mohr <e.mohr(a)tuxedocomputers.com> ALSA: hda/realtek: Add quirk for TongFang X6xx45xU Sean Anderson <sean.anderson(a)linux.dev> media: uvcvideo: Fix deadlock if uvc_status_stop is called from async_ctrl.work Eric Biggers <ebiggers(a)kernel.org> crypto: sun4i-ss - Remove insecure and unused rng_alg Michael Bommarito <michael.bommarito(a)gmail.com> iommu/vt-d: Clear Present bit before tearing down scalable-mode context entry Muhammet Kaan KILINÇ <muhammetkaankilinc(a)gmail.com> crypto: algif_skcipher - force synchronous processing ------------- Diffstat: .../testing/sysfs-class-reboot-mode-reboot_modes | 13 +- Documentation/admin-guide/pm/cpufreq.rst | 6 +- Documentation/arch/arm64/cpu-hotplug.rst | 28 +- .../bindings/clock/qcom,dispcc-sm6125.yaml | 17 +- .../bindings/clock/qcom,x1e80100-camcc.yaml | 1 + .../bindings/dma/nvidia,tegra186-gpc-dma.yaml | 23 +- .../devicetree/bindings/dma/snps,dw-axi-dmac.yaml | 5 +- .../media/allwinner,sun4i-a10-video-engine.yaml | 10 + .../bindings/net/bluetooth/qcom,wcn6855-bt.yaml | 7 +- .../devicetree/bindings/net/renesas,ether.yaml | 3 +- .../bindings/phy/qcom,sc8280xp-qmp-pcie-phy.yaml | 13 +- .../pinctrl/nvidia,tegra234-pinmux-aon.yaml | 4 + .../bindings/pinctrl/nvidia,tegra234-pinmux.yaml | 4 + .../bindings/pinctrl/realtek,rtd1625-pinctrl.yaml | 2 +- .../bindings/regulator/mt6359-regulator.yaml | 43 -- .../devicetree/bindings/timer/sifive,clint.yaml | 16 - .../devicetree/bindings/vendor-prefixes.yaml | 4 + Documentation/driver-api/nvdimm/btt.rst | 5 +- Documentation/driver-api/uio-howto.rst | 4 +- Documentation/filesystems/proc.rst | 14 +- Documentation/mm/memfd_preservation.rst | 2 +- Documentation/netlink/specs/handshake.yaml | 1 + Documentation/netlink/specs/rt-link.yaml | 6 + Documentation/networking/bonding.rst | 23 + Documentation/process/changes.rst | 7 +- Documentation/process/threat-model.rst | 2 +- Documentation/trace/eprobetrace.rst | 4 + Documentation/trace/rv/monitor_sched.rst | 7 +- Makefile | 4 +- arch/alpha/kernel/pci-sysfs.c | 13 +- arch/arc/include/asm/uaccess.h | 3 +- arch/arm/boot/compressed/Makefile | 2 +- arch/arm/boot/dts/broadcom/bcm2711-rpi-4-b.dts | 2 +- arch/arm/boot/dts/broadcom/bcm2711-rpi-cm4-io.dts | 2 +- arch/arm/boot/dts/nvidia/tegra124-nyan.dtsi | 5 + arch/arm/boot/dts/nvidia/tegra124-venice2.dts | 5 + arch/arm/boot/dts/nxp/imx/imx6ul-var-som.dtsi | 4 - arch/arm/boot/dts/rockchip/rk3288-veyron.dtsi | 5 + arch/arm/boot/dts/st/stm32mp151c-mecio1r0.dts | 128 ++++ arch/arm/boot/dts/st/stm32mp153c-mecio1r1.dts | 144 +++++ arch/arm/boot/dts/st/stm32mp15x-mecio1-io.dtsi | 146 +---- arch/arm/boot/dts/ti/omap/am335x-sl50.dts | 4 +- arch/arm/configs/axm55xx_defconfig | 1 - arch/arm/configs/dove_defconfig | 1 - arch/arm/configs/ep93xx_defconfig | 1 - arch/arm/configs/mmp2_defconfig | 1 - arch/arm/configs/multi_v7_defconfig | 4 +- arch/arm/configs/mv78xx0_defconfig | 1 - arch/arm/configs/sunxi_defconfig | 1 - arch/arm/include/asm/uaccess.h | 3 +- arch/arm/mach-imx/Kconfig | 21 - arch/arm/mach-imx/cpu-imx31.c | 9 +- arch/arm/mach-imx/mm-imx3.c | 2 + arch/arm64/boot/dts/allwinner/sun55i-a523.dtsi | 3 +- .../fsl-ls1028a-tqmls1028a-mbls1028a.dtsi | 4 +- .../boot/dts/freescale/fsl-lx2162a-clearfog.dts | 2 +- arch/arm64/boot/dts/freescale/imx8dxl-evk.dts | 2 - .../arm64/boot/dts/freescale/imx8mm-kontron-bl.dts | 10 +- .../boot/dts/freescale/imx8mm-kontron-osm-s.dtsi | 7 +- .../dts/freescale/imx8mn-vhip4-evalboard-v1.dts | 2 +- .../dts/freescale/imx8mn-vhip4-evalboard-v2.dts | 2 +- arch/arm64/boot/dts/freescale/imx8mp-ab2.dts | 2 +- .../boot/dts/freescale/imx8mp-kontron-bl-osm-s.dts | 14 +- .../boot/dts/freescale/imx8mp-kontron-osm-s.dtsi | 7 +- .../dts/freescale/imx8mp-tqma8mpql-mba8mpxl.dts | 3 + arch/arm64/boot/dts/freescale/imx8qxp-mek.dts | 1 - arch/arm64/boot/dts/freescale/imx8ulp-evk.dts | 4 +- arch/arm64/boot/dts/freescale/imx8x-colibri.dtsi | 4 +- arch/arm64/boot/dts/freescale/imx94.dtsi | 2 +- arch/arm64/boot/dts/freescale/imx95-19x19-evk.dts | 2 +- .../arm64/boot/dts/freescale/imx95-verdin-ivy.dtsi | 1 - arch/arm64/boot/dts/freescale/imx95.dtsi | 10 +- arch/arm64/boot/dts/freescale/s32g3.dtsi | 2 +- .../marvell/mmp/pxa1908-samsung-coreprimevelte.dts | 2 +- arch/arm64/boot/dts/mediatek/Makefile | 8 + .../mediatek/mt7988a-bananapi-bpi-r4-pro-cn13.dtso | 20 + .../mediatek/mt7988a-bananapi-bpi-r4-pro-cn14.dtso | 20 + .../dts/mediatek/mt7988a-bananapi-bpi-r4-pro.dtsi | 2 - arch/arm64/boot/dts/mediatek/mt8192-asurada.dtsi | 2 +- arch/arm64/boot/dts/nvidia/tegra132-norrin.dts | 5 + arch/arm64/boot/dts/nvidia/tegra210-smaug.dts | 5 + arch/arm64/boot/dts/nvidia/tegra234.dtsi | 8 +- arch/arm64/boot/dts/nvidia/tegra264.dtsi | 88 +-- arch/arm64/boot/dts/qcom/eliza-mtp.dts | 4 +- arch/arm64/boot/dts/qcom/eliza.dtsi | 6 +- arch/arm64/boot/dts/qcom/glymur-crd.dts | 4 - arch/arm64/boot/dts/qcom/glymur.dtsi | 12 +- arch/arm64/boot/dts/qcom/hamoa.dtsi | 77 +-- arch/arm64/boot/dts/qcom/ipq5424.dtsi | 4 +- arch/arm64/boot/dts/qcom/kaanapali.dtsi | 6 +- arch/arm64/boot/dts/qcom/kodiak.dtsi | 8 +- arch/arm64/boot/dts/qcom/lemans.dtsi | 710 +++++++++++---------- arch/arm64/boot/dts/qcom/milos-fairphone-fp6.dts | 5 + arch/arm64/boot/dts/qcom/milos.dtsi | 2 +- arch/arm64/boot/dts/qcom/monaco.dtsi | 6 +- arch/arm64/boot/dts/qcom/pmh0104-glymur.dtsi | 2 +- arch/arm64/boot/dts/qcom/sc7180.dtsi | 6 +- arch/arm64/boot/dts/qcom/sc8180x.dtsi | 2 +- arch/arm64/boot/dts/qcom/sdm630.dtsi | 37 +- arch/arm64/boot/dts/qcom/sdm660.dtsi | 36 +- .../qcom/sdm845-db845c-navigation-mezzanine.dtso | 5 + .../arm64/boot/dts/qcom/sdm845-oneplus-common.dtsi | 2 +- arch/arm64/boot/dts/qcom/sdm845-shift-axolotl.dts | 2 +- .../dts/qcom/sdm845-xiaomi-beryllium-common.dtsi | 2 +- arch/arm64/boot/dts/qcom/sm8450.dtsi | 8 +- arch/arm64/boot/dts/qcom/sm8550.dtsi | 6 +- arch/arm64/boot/dts/qcom/sm8650.dtsi | 6 +- arch/arm64/boot/dts/qcom/sm8750.dtsi | 8 +- arch/arm64/boot/dts/renesas/r8a78000-ironhide.dts | 76 ++- arch/arm64/boot/dts/renesas/r8a78000.dtsi | 36 +- arch/arm64/boot/dts/rockchip/px30-cobra.dtsi | 2 +- arch/arm64/boot/dts/rockchip/px30-ringneck.dtsi | 2 +- arch/arm64/boot/dts/rockchip/rk3399-gru.dtsi | 5 + arch/arm64/boot/dts/rockchip/rk3566-roc-pc.dts | 2 +- arch/arm64/boot/dts/rockchip/rk3568-nanopi-r5s.dts | 6 +- arch/arm64/boot/dts/rockchip/rk3576.dtsi | 6 +- arch/arm64/boot/dts/rockchip/rk3588-base.dtsi | 12 +- arch/arm64/boot/dts/st/stm32mp251.dtsi | 8 +- arch/arm64/boot/dts/ti/k3-am62a7-sk.dts | 2 + arch/arm64/include/asm/kvm_nested.h | 8 + arch/arm64/include/asm/tlbbatch.h | 10 +- arch/arm64/include/asm/tlbflush.h | 49 +- arch/arm64/include/asm/uaccess.h | 3 +- arch/arm64/kernel/acpi.c | 2 + arch/arm64/kernel/entry-fpsimd.S | 8 +- arch/arm64/kernel/fpsimd.c | 10 +- arch/arm64/kernel/hw_breakpoint.c | 9 + arch/arm64/kernel/process.c | 35 - arch/arm64/kernel/smp.c | 28 +- arch/arm64/kernel/static_call.c | 1 + arch/arm64/kvm/at.c | 8 - arch/arm64/kvm/emulate-nested.c | 1 + arch/arm64/kvm/hyp/include/hyp/switch.h | 11 +- arch/arm64/kvm/hyp/pgtable.c | 3 +- arch/arm64/kvm/nested.c | 166 ++--- arch/arm64/kvm/pkvm.c | 2 +- arch/arm64/kvm/vgic/vgic-its.c | 2 + arch/arm64/kvm/vgic/vgic.c | 20 +- arch/arm64/mm/mmu.c | 11 +- arch/arm64/tools/sysreg | 2 +- arch/hexagon/include/asm/uaccess.h | 3 +- arch/loongarch/include/asm/kexec.h | 3 +- arch/loongarch/include/asm/pgtable.h | 4 + arch/loongarch/include/asm/uaccess.h | 3 +- arch/loongarch/kvm/exit.c | 1 - arch/loongarch/kvm/irqfd.c | 3 +- arch/loongarch/kvm/vcpu.c | 11 +- arch/loongarch/mm/pageattr.c | 2 +- arch/loongarch/net/bpf_jit.c | 28 +- arch/m68k/coldfire/m5441x.c | 18 +- arch/m68k/include/asm/uaccess.h | 3 +- arch/microblaze/include/asm/uaccess.h | 3 +- arch/mips/dec/int-handler.S | 2 +- arch/mips/dec/platform.c | 6 +- arch/mips/dec/prom/init.c | 6 +- arch/mips/dec/setup.c | 6 - arch/mips/fw/lib/call_o32.S | 2 +- arch/mips/include/asm/dec/prom.h | 15 +- arch/mips/include/asm/uaccess.h | 3 +- arch/mips/kernel/mips-mt-fpaff.c | 28 +- arch/mips/mm/init.c | 17 +- arch/mips/n64/init.c | 2 +- arch/mips/ralink/mt7621.c | 2 +- arch/mips/sgi-ip22/ip22-gio.c | 7 +- arch/nios2/include/asm/uaccess.h | 3 +- arch/openrisc/include/asm/cacheflush.h | 4 + arch/openrisc/include/asm/uaccess.h | 3 +- arch/openrisc/kernel/jump_label.c | 2 +- arch/openrisc/kernel/patching.c | 3 + arch/openrisc/kernel/smp.c | 21 + arch/openrisc/mm/cache.c | 16 + arch/openrisc/mm/init.c | 2 +- arch/parisc/include/asm/uaccess.h | 3 +- arch/powerpc/include/asm/uaccess.h | 2 +- arch/powerpc/kernel/dt_cpu_ftrs.c | 9 + arch/powerpc/kexec/core_64.c | 4 +- arch/powerpc/perf/core-fsl-emb.c | 3 +- arch/powerpc/platforms/8xx/cpm1.c | 26 + arch/powerpc/platforms/cell/spufs/file.c | 6 +- arch/powerpc/platforms/powernv/setup.c | 3 +- arch/powerpc/platforms/pseries/Kconfig | 1 + .../platforms/pseries/papr_platform_attributes.c | 8 +- .../riscv/boot/dts/microchip/mpfs-beaglev-fire.dts | 25 +- arch/riscv/boot/dts/microchip/mpfs.dtsi | 6 +- .../boot/dts/microchip/pic64gx-curiosity-kit.dts | 47 +- arch/riscv/boot/dts/microchip/pic64gx.dtsi | 38 +- arch/riscv/boot/dts/sophgo/sg2042-cpus.dtsi | 236 +++---- arch/riscv/boot/dts/sophgo/sg2044-cpus.dtsi | 236 +++---- arch/riscv/boot/dts/spacemit/k1-bananapi-f3.dts | 2 +- arch/riscv/boot/dts/spacemit/k1-milkv-jupiter.dts | 4 +- arch/riscv/boot/dts/spacemit/k1.dtsi | 2 +- arch/riscv/boot/dts/spacemit/k3.dtsi | 3 +- arch/riscv/include/asm/cpu_ops.h | 2 +- arch/riscv/include/asm/vdso.h | 10 +- arch/riscv/kernel/alternative.c | 14 +- arch/riscv/kernel/asm-offsets.c | 4 +- arch/riscv/kernel/cacheinfo.c | 2 +- arch/riscv/kernel/cpu-hotplug.c | 4 +- arch/riscv/kernel/cpu_ops_sbi.c | 11 +- arch/riscv/kernel/entry.S | 8 +- arch/riscv/kernel/machine_kexec.c | 3 + arch/riscv/kernel/probes/rethook_trampoline.S | 3 + arch/riscv/kernel/stacktrace.c | 2 +- arch/riscv/kernel/vdso/Makefile | 6 +- arch/riscv/kernel/vdso/rt_sigreturn.S | 10 +- arch/s390/include/asm/pgtable.h | 4 +- arch/s390/include/asm/uaccess.h | 3 +- arch/s390/kernel/diag/diag310.c | 7 +- arch/s390/kernel/perf_cpum_cf.c | 3 + arch/s390/kernel/process.c | 2 +- arch/s390/kvm/dat.c | 2 +- arch/s390/kvm/gaccess.c | 73 ++- arch/s390/kvm/gmap.c | 7 +- arch/s390/kvm/gmap.h | 14 +- arch/s390/kvm/kvm-s390.c | 2 +- arch/s390/kvm/pci.c | 12 +- arch/s390/mm/gmap_helpers.c | 9 +- arch/s390/mm/mmap.c | 2 +- arch/sh/include/asm/uaccess.h | 3 +- arch/sparc/include/asm/page_32.h | 2 + arch/sparc/include/asm/uaccess_32.h | 3 +- arch/sparc/include/asm/uaccess_64.h | 3 +- arch/sparc/kernel/led.c | 2 +- arch/um/include/asm/uaccess.h | 3 +- arch/x86/Kconfig.cpu | 8 +- arch/x86/boot/compressed/acpi.c | 7 +- arch/x86/boot/early_serial_console.c | 11 +- arch/x86/events/amd/brs.c | 10 +- arch/x86/events/amd/core.c | 18 +- arch/x86/events/amd/lbr.c | 3 +- arch/x86/events/amd/uncore.c | 6 +- arch/x86/events/intel/uncore_discovery.c | 4 +- arch/x86/events/intel/uncore_snbep.c | 6 +- arch/x86/include/asm/bug.h | 2 + arch/x86/kernel/cpu/cpu.h | 1 - arch/x86/kernel/uprobes.c | 26 +- arch/x86/kvm/irq.c | 4 +- arch/x86/kvm/lapic.c | 8 +- arch/x86/kvm/svm/sev.c | 6 +- arch/x86/kvm/vmx/nested.c | 68 +- arch/x86/kvm/vmx/tdx.c | 6 +- arch/x86/platform/olpc/olpc-xo15-sci.c | 1 + arch/x86/video/video-common.c | 23 +- arch/x86/virt/svm/sev.c | 2 + arch/xtensa/include/asm/uaccess.h | 3 +- block/blk.h | 13 +- block/genhd.c | 4 - block/ioctl.c | 2 +- crypto/Kconfig | 4 +- crypto/af_alg.c | 2 + crypto/algif_skcipher.c | 75 +-- crypto/asymmetric_keys/verify_pefile.c | 2 + crypto/ecrdsa.c | 2 +- crypto/rng.c | 11 + drivers/accel/amdxdna/Makefile | 1 + drivers/accel/amdxdna/aie.c | 89 +++ drivers/accel/amdxdna/aie.h | 31 + drivers/accel/amdxdna/aie2_ctx.c | 26 +- drivers/accel/amdxdna/aie2_error.c | 17 +- drivers/accel/amdxdna/aie2_message.c | 164 ++--- drivers/accel/amdxdna/aie2_msg_priv.h | 2 +- drivers/accel/amdxdna/aie2_pci.c | 166 ++--- drivers/accel/amdxdna/aie2_pci.h | 26 +- drivers/accel/amdxdna/aie2_pm.c | 6 +- drivers/accel/amdxdna/aie2_smu.c | 22 +- drivers/accel/amdxdna/amdxdna_ctx.c | 40 +- drivers/accel/amdxdna/amdxdna_gem.c | 37 +- drivers/accel/amdxdna/amdxdna_gem.h | 1 - drivers/accel/amdxdna/amdxdna_iommu.c | 56 +- drivers/accel/amdxdna/amdxdna_mailbox.c | 10 +- drivers/accel/amdxdna/amdxdna_pci_drv.h | 8 + drivers/accel/amdxdna/amdxdna_ubuf.c | 12 +- drivers/accel/amdxdna/npu1_regs.c | 4 +- drivers/accel/amdxdna/npu4_regs.c | 4 +- drivers/accel/amdxdna/npu5_regs.c | 2 +- drivers/accel/amdxdna/npu6_regs.c | 2 +- drivers/accel/ivpu/ivpu_fw_log.c | 4 + drivers/accel/ivpu/ivpu_job.c | 10 +- drivers/acpi/acpi_ipmi.c | 4 +- drivers/acpi/acpi_pad.c | 6 +- drivers/acpi/acpi_tad.c | 2 +- drivers/acpi/acpica/acutils.h | 2 - drivers/acpi/acpica/utnonansi.c | 7 - drivers/acpi/button.c | 26 +- drivers/acpi/processor_idle.c | 13 +- drivers/acpi/resource.c | 6 +- drivers/acpi/riscv/cpuidle.c | 2 +- drivers/acpi/riscv/rimt.c | 7 +- drivers/amba/bus.c | 37 +- drivers/android/binder.c | 18 +- drivers/ata/libata-core.c | 44 +- drivers/ata/libata-scsi.c | 9 +- drivers/ata/libata.h | 9 + drivers/ata/pata_pxa.c | 1 + drivers/ata/sata_gemini.c | 2 +- drivers/base/core.c | 83 ++- drivers/base/dd.c | 7 +- drivers/base/firmware_loader/main.c | 71 ++- drivers/base/power/main.c | 6 +- drivers/base/property.c | 4 +- drivers/base/regmap/regcache.c | 2 +- drivers/base/regmap/regmap-i2c.c | 2 +- drivers/block/drbd/drbd_receiver.c | 5 + drivers/bluetooth/Kconfig | 2 +- drivers/bluetooth/bpa10x.c | 8 +- drivers/bluetooth/btintel.c | 10 +- drivers/bluetooth/btintel.h | 9 + drivers/bluetooth/btintel_pcie.c | 531 ++++++++++++--- drivers/bluetooth/btintel_pcie.h | 26 +- drivers/bluetooth/btmtk.c | 4 +- drivers/bluetooth/btrtl.c | 5 +- drivers/bluetooth/hci_qca.c | 11 +- drivers/bluetooth/hci_vhci.c | 10 + drivers/bus/imx-weim.c | 6 - drivers/bus/mhi/ep/main.c | 11 +- drivers/bus/mhi/host/pci_generic.c | 20 +- drivers/bus/sunxi-rsb.c | 3 + drivers/cdx/cdx.c | 40 +- drivers/char/hpet.c | 6 +- drivers/char/ipmi/ipmi_msghandler.c | 10 +- drivers/char/sonypi.c | 6 +- drivers/char/tlclk.c | 4 + drivers/char/tpm/eventlog/tpm1.c | 4 +- drivers/char/tpm/tpm-dev.c | 2 +- drivers/char/tpm/tpm2-cmd.c | 6 +- drivers/char/tpm/tpm2-sessions.c | 45 +- drivers/char/tpm/tpm_crb.c | 6 +- drivers/char/tpm/tpm_tis_core.c | 35 +- drivers/char/tpm/tpmrm-dev.c | 2 +- drivers/char/virtio_console.c | 52 +- drivers/clk/at91/pmc.c | 2 +- drivers/clk/at91/sam9x7.c | 18 +- drivers/clk/clk-scmi.c | 4 +- drivers/clk/clk-scpi.c | 2 +- drivers/clk/microchip/clk-mpfs-ccc.c | 15 +- drivers/clk/qcom/a53-pll.c | 2 +- drivers/clk/qcom/camcc-x1e80100.c | 64 ++ drivers/clk/qcom/ipq-cmn-pll.c | 11 +- drivers/clk/renesas/rzg2l-cpg.c | 6 +- drivers/clk/samsung/Kconfig | 2 +- drivers/clk/spacemit/ccu-k3.c | 20 +- drivers/clocksource/Kconfig | 31 + drivers/clocksource/timer-sun5i.c | 3 + drivers/cpufreq/cpufreq_conservative.c | 12 +- drivers/cpufreq/cpufreq_governor.c | 42 +- drivers/cpufreq/intel_pstate.c | 6 +- drivers/cpuidle/driver.c | 8 - drivers/crypto/Kconfig | 1 - drivers/crypto/allwinner/Kconfig | 8 - drivers/crypto/allwinner/sun4i-ss/Makefile | 1 - drivers/crypto/allwinner/sun4i-ss/sun4i-ss-core.c | 36 -- drivers/crypto/allwinner/sun4i-ss/sun4i-ss-prng.c | 69 -- drivers/crypto/allwinner/sun4i-ss/sun4i-ss.h | 20 - drivers/crypto/atmel-sha204a.c | 8 +- drivers/crypto/cavium/cpt/cptvf_reqmanager.c | 4 +- drivers/crypto/ccp/psp-dev.c | 12 +- drivers/crypto/ccp/sev-dev-tsm.c | 23 +- drivers/crypto/ccp/sev-dev.c | 26 +- drivers/crypto/hisilicon/qm.c | 4 +- drivers/crypto/inside-secure/eip93/eip93-main.c | 2 + drivers/crypto/inside-secure/eip93/eip93-regs.h | 2 +- drivers/crypto/inside-secure/safexcel.c | 2 +- .../crypto/intel/qat/qat_common/adf_common_drv.h | 1 - .../intel/qat/qat_common/adf_heartbeat_inject.c | 6 +- .../crypto/intel/qat/qat_common/adf_hw_arbiter.c | 25 - drivers/crypto/marvell/octeontx/otx_cptvf_reqmgr.c | 4 +- drivers/crypto/tegra/tegra-se-aes.c | 33 +- drivers/crypto/xilinx/xilinx-trng.c | 85 +-- drivers/cxl/core/core.h | 2 + drivers/cxl/core/features.c | 2 +- drivers/cxl/core/memdev.c | 4 +- drivers/cxl/core/pci.c | 26 +- drivers/cxl/core/port.c | 7 +- drivers/cxl/core/ras.c | 27 +- drivers/cxl/core/region.c | 125 ++-- drivers/cxl/core/trace.h | 24 +- drivers/cxl/cxl.h | 22 +- drivers/dax/kmem.c | 6 + drivers/dibs/dibs_loopback.c | 5 + drivers/dma-buf/dma-fence-unwrap.c | 3 + drivers/dma-buf/dma-fence.c | 9 +- drivers/dma/dma-axi-dmac.c | 68 +- drivers/dma/dmaengine.c | 3 +- drivers/dma/dw-edma/dw-edma-core.h | 2 +- drivers/dma/dw-edma/dw-edma-pcie.c | 3 + drivers/dma/dw-edma/dw-edma-v0-core.c | 6 + drivers/dma/imx-sdma.c | 4 +- drivers/dma/qcom/gpi.c | 1 + drivers/dma/sh/rz-dmac.c | 92 +-- drivers/dma/tegra186-gpc-dma.c | 7 + drivers/dpll/dpll_core.c | 20 +- drivers/edac/igen6_edac.c | 405 +++++++++--- drivers/edac/skx_common.c | 3 + drivers/firmware/arm_ffa/driver.c | 27 +- drivers/firmware/arm_scmi/power.c | 6 +- drivers/firmware/arm_scmi/sensors.c | 2 +- drivers/firmware/samsung/exynos-acpm.c | 23 + drivers/firmware/smccc/soc_id.c | 2 +- drivers/firmware/xilinx/zynqmp.c | 28 + drivers/fpga/dfl.c | 2 + drivers/fpga/microchip-spi.c | 3 + drivers/gpib/common/gpib_os.c | 4 +- drivers/gpio/gpio-davinci.c | 4 +- drivers/gpio/gpio-dwapb.c | 83 ++- drivers/gpio/gpio-f7188x.c | 6 +- drivers/gpio/gpio-htc-egpio.c | 6 +- drivers/gpio/gpio-mlxbf3.c | 3 +- drivers/gpio/gpio-mt7621.c | 283 ++++++-- drivers/gpio/gpio-mvebu.c | 6 +- drivers/gpio/gpio-palmas.c | 19 + drivers/gpio/gpio-shared-proxy.c | 136 ++-- drivers/gpio/gpio-tegra.c | 18 +- drivers/gpio/gpio-timberdale.c | 2 +- drivers/gpio/gpiolib-acpi-core.c | 19 +- drivers/gpio/gpiolib-shared.c | 9 +- drivers/gpio/gpiolib-shared.h | 31 +- drivers/gpio/gpiolib.c | 2 +- drivers/gpu/buddy.c | 67 +- drivers/gpu/drm/amd/amdgpu/amdgpu_amdkfd_gpuvm.c | 16 +- drivers/gpu/drm/amd/amdgpu/amdgpu_dev_coredump.c | 3 +- drivers/gpu/drm/amd/amdgpu/amdgpu_device.c | 2 + drivers/gpu/drm/amd/amdgpu/amdgpu_gem.c | 25 +- drivers/gpu/drm/amd/amdgpu/amdgpu_irq.c | 2 - drivers/gpu/drm/amd/amdgpu/amdgpu_mca.c | 3 + drivers/gpu/drm/amd/amdgpu/mes_v12_1.c | 2 +- drivers/gpu/drm/amd/amdkfd/kfd_chardev.c | 3 + .../gpu/drm/amd/amdkfd/kfd_device_queue_manager.c | 20 +- drivers/gpu/drm/amd/amdkfd/kfd_events.c | 5 + drivers/gpu/drm/amd/amdkfd/kfd_mqd_manager_v12_1.c | 6 +- drivers/gpu/drm/amd/amdkfd/kfd_process.c | 2 +- drivers/gpu/drm/amd/amdkfd/kfd_svm.c | 1 + drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm.c | 10 +- .../drm/amd/display/amdgpu_dm/amdgpu_dm_helpers.c | 13 +- drivers/gpu/drm/amd/display/dc/core/dc.c | 81 ++- drivers/gpu/drm/amd/display/dc/core/dc_stream.c | 2 + drivers/gpu/drm/amd/display/dc/dc.h | 58 +- drivers/gpu/drm/amd/display/dc/dc_types.h | 24 - .../drm/amd/display/dc/hubp/dcn401/dcn401_hubp.c | 229 +++---- .../drm/amd/display/dc/hubp/dcn401/dcn401_hubp.h | 23 +- .../gpu/drm/amd/display/dc/hubp/dcn42/dcn42_hubp.c | 78 +-- .../gpu/drm/amd/display/dc/hubp/dcn42/dcn42_hubp.h | 10 +- .../drm/amd/display/dc/hwss/dcn401/dcn401_hwseq.c | 431 ++++++++----- .../drm/amd/display/dc/hwss/dcn42/dcn42_hwseq.c | 495 +++++++++++++- .../drm/amd/display/dc/hwss/dcn42/dcn42_hwseq.h | 9 +- drivers/gpu/drm/amd/display/dc/inc/hw/hubp.h | 35 +- drivers/gpu/drm/amd/display/dc/inc/hw/mpc.h | 79 +-- .../gpu/drm/amd/display/dc/mpc/dcn401/dcn401_mpc.c | 177 +++-- .../gpu/drm/amd/display/dc/mpc/dcn401/dcn401_mpc.h | 25 +- .../gpu/drm/amd/display/dc/mpc/dcn42/dcn42_mpc.c | 392 +++++++++++- .../gpu/drm/amd/display/dc/mpc/dcn42/dcn42_mpc.h | 49 +- .../amd/display/dc/resource/dcn42/dcn42_resource.c | 1 - .../amd/display/modules/info_packet/info_packet.c | 2 + drivers/gpu/drm/amd/pm/amdgpu_pm.c | 26 +- drivers/gpu/drm/bridge/analogix/analogix_dp_core.c | 4 + drivers/gpu/drm/drm_edid.c | 8 + drivers/gpu/drm/drm_fb_helper.c | 92 ++- drivers/gpu/drm/drm_gpusvm.c | 5 + drivers/gpu/drm/drm_gpuvm.c | 9 +- drivers/gpu/drm/drm_ioctl.c | 14 +- drivers/gpu/drm/drm_syncobj.c | 10 +- drivers/gpu/drm/hisilicon/hibmc/dp/dp_comm.h | 1 + drivers/gpu/drm/hisilicon/hibmc/dp/dp_hw.h | 1 + drivers/gpu/drm/hisilicon/hibmc/dp/dp_link.c | 2 +- drivers/gpu/drm/hisilicon/hibmc/hibmc_drm_de.c | 78 ++- drivers/gpu/drm/hisilicon/hibmc/hibmc_drm_dp.c | 35 +- drivers/gpu/drm/hisilicon/hibmc/hibmc_drm_drv.c | 14 + drivers/gpu/drm/hisilicon/hibmc/hibmc_drm_drv.h | 1 + drivers/gpu/drm/hisilicon/hibmc/hibmc_drm_vdac.c | 75 ++- drivers/gpu/drm/i915/display/intel_atomic.c | 6 + drivers/gpu/drm/i915/display/intel_lt_phy.c | 6 +- drivers/gpu/drm/imagination/pvr_drv.c | 6 +- drivers/gpu/drm/imagination/pvr_fw_trace.c | 2 +- drivers/gpu/drm/imagination/pvr_vm.c | 6 +- drivers/gpu/drm/msm/adreno/a6xx_gmu.c | 7 +- drivers/gpu/drm/msm/adreno/a8xx_gpu.c | 15 +- drivers/gpu/drm/msm/dp/dp_display.c | 4 +- drivers/gpu/drm/msm/dp/dp_reg.h | 4 +- drivers/gpu/drm/msm/msm_mdss.c | 113 ++-- .../gpu/drm/nouveau/nvkm/subdev/bios/shadowramin.c | 3 +- drivers/gpu/drm/panel/Kconfig | 13 +- drivers/gpu/drm/panthor/panthor_device.c | 9 +- drivers/gpu/drm/panthor/panthor_device.h | 100 +-- drivers/gpu/drm/panthor/panthor_drv.c | 8 +- drivers/gpu/drm/panthor/panthor_fw.c | 29 +- drivers/gpu/drm/panthor/panthor_fw_regs.h | 32 + drivers/gpu/drm/panthor/panthor_gpu.c | 50 +- drivers/gpu/drm/panthor/panthor_gpu_regs.h | 123 ++++ drivers/gpu/drm/panthor/panthor_heap.c | 2 +- drivers/gpu/drm/panthor/panthor_hw.c | 50 +- drivers/gpu/drm/panthor/panthor_hw.h | 2 +- drivers/gpu/drm/panthor/panthor_mmu.c | 37 +- drivers/gpu/drm/panthor/panthor_mmu_regs.h | 73 +++ drivers/gpu/drm/panthor/panthor_pwr.c | 73 ++- drivers/gpu/drm/panthor/panthor_pwr_regs.h | 83 +++ drivers/gpu/drm/panthor/panthor_regs.h | 291 --------- drivers/gpu/drm/panthor/panthor_sched.c | 113 ++-- drivers/gpu/drm/radeon/radeon_gem.c | 13 +- drivers/gpu/drm/radeon/radeon_ring.c | 4 +- drivers/gpu/drm/renesas/rz-du/rzg2l_mipi_dsi.c | 12 +- drivers/gpu/drm/rockchip/dw_dp-rockchip.c | 7 +- drivers/gpu/drm/rockchip/inno_hdmi-rockchip.c | 3 +- drivers/gpu/drm/rockchip/rockchip_drm_gem.c | 2 +- drivers/gpu/drm/tegra/dc.c | 4 +- drivers/gpu/drm/tegra/fbdev.c | 1 - drivers/gpu/drm/tegra/gem.c | 22 +- drivers/gpu/drm/tegra/gr2d.c | 19 +- drivers/gpu/drm/tegra/gr3d.c | 19 +- drivers/gpu/drm/tegra/submit.c | 3 +- drivers/gpu/drm/tidss/tidss_kms.c | 2 - drivers/gpu/drm/v3d/v3d_submit.c | 2 + drivers/gpu/drm/verisilicon/vs_primary_plane.c | 10 +- drivers/gpu/drm/xe/Makefile | 4 +- drivers/gpu/drm/xe/tests/xe_pci.c | 1 - drivers/gpu/drm/xe/xe_drm_client.c | 12 +- drivers/gpu/drm/xe/xe_guc_relay.c | 13 +- drivers/gpu/drm/xe/xe_hw_engine.c | 4 +- drivers/gpu/drm/xe/xe_pt.c | 72 ++- drivers/gpu/drm/xe/xe_svm.h | 15 +- drivers/gpu/drm/xe/xe_userptr.c | 2 +- drivers/gpu/drm/xe/xe_vm_madvise.c | 2 +- drivers/gpu/host1x/bus.c | 62 +- drivers/gpu/host1x/job.c | 10 +- drivers/gpu/host1x/mipi.c | 6 +- drivers/gpu/nova-core/firmware.rs | 8 +- drivers/gpu/nova-core/firmware/gsp.rs | 3 +- drivers/gpu/nova-core/vbios.rs | 118 ++-- drivers/hid/bpf/hid_bpf_dispatch.c | 5 +- drivers/hid/hid-core.c | 7 + drivers/hid/hid-logitech-hidpp.c | 1 - drivers/hid/hid-picolcd_core.c | 3 +- drivers/hid/hid-wiimote-modules.c | 58 +- drivers/hv/mshv_synic.c | 5 + drivers/hv/vmbus_drv.c | 43 +- drivers/hwmon/Kconfig | 3 + drivers/hwmon/aspeed-g6-pwm-tach.c | 5 +- drivers/hwmon/asus_atk0110.c | 3 + drivers/hwmon/gpd-fan.c | 224 ++++--- drivers/hwmon/it87.c | 3 + drivers/hwmon/occ/common.c | 34 +- drivers/hwmon/occ/common.h | 1 + drivers/hwmon/pmbus/adm1275.c | 2 +- drivers/hwmon/pmbus/pmbus_core.c | 37 +- drivers/hwmon/w83627hf.c | 4 + drivers/hwmon/w83793.c | 1 + drivers/hwspinlock/qcom_hwspinlock.c | 5 +- drivers/hwtracing/coresight/coresight-core.c | 34 +- .../hwtracing/coresight/coresight-cti-platform.c | 1 + drivers/hwtracing/coresight/coresight-etm-perf.c | 5 +- drivers/hwtracing/coresight/coresight-etm4x-core.c | 52 +- drivers/hwtracing/coresight/coresight-platform.c | 12 +- drivers/hwtracing/coresight/coresight-priv.h | 2 +- drivers/hwtracing/coresight/coresight-sysfs.c | 8 +- drivers/hwtracing/coresight/coresight-tmc-etr.c | 4 +- drivers/i2c/busses/i2c-imx.c | 36 +- drivers/i2c/busses/i2c-k1.c | 2 +- drivers/i2c/busses/i2c-mlxbf.c | 4 +- drivers/i2c/busses/i2c-mt65xx.c | 2 +- drivers/i2c/i2c-core-of.c | 5 - drivers/i3c/master.c | 145 ++++- drivers/i3c/master/dw-i3c-master.c | 15 +- drivers/i3c/master/dw-i3c-master.h | 2 - drivers/i3c/master/i3c-master-cdns.c | 14 +- drivers/i3c/master/mipi-i3c-hci/core.c | 48 +- drivers/i3c/master/mipi-i3c-hci/dma.c | 9 +- drivers/i3c/master/mipi-i3c-hci/hci.h | 1 + drivers/i3c/master/mipi-i3c-hci/ibi.h | 13 +- drivers/i3c/master/mipi-i3c-hci/pio.c | 7 +- drivers/i3c/master/svc-i3c-master.c | 30 +- drivers/iio/accel/mma8452.c | 2 + drivers/iio/adc/xilinx-ams.c | 5 + drivers/iio/dac/mcp47feb02.c | 37 +- drivers/iio/light/acpi-als.c | 6 +- drivers/iio/light/si1133.c | 14 +- drivers/iio/light/tcs3472.c | 38 +- drivers/iio/magnetometer/ak8975.c | 14 + drivers/iio/orientation/hid-sensor-rotation.c | 40 +- drivers/infiniband/core/cm.c | 13 +- drivers/infiniband/core/counters.c | 2 +- drivers/infiniband/core/frmr_pools.c | 106 ++- drivers/infiniband/core/nldev.c | 15 +- drivers/infiniband/core/restrack.c | 49 ++ drivers/infiniband/core/restrack.h | 1 + drivers/infiniband/core/uverbs_cmd.c | 10 +- drivers/infiniband/hw/bnxt_re/ib_verbs.c | 217 +++++-- drivers/infiniband/hw/bnxt_re/ib_verbs.h | 5 +- drivers/infiniband/hw/bnxt_re/main.c | 2 - drivers/infiniband/hw/bnxt_re/qplib_res.c | 11 + drivers/infiniband/hw/bnxt_re/qplib_sp.h | 1 + drivers/infiniband/hw/bnxt_re/uapi.c | 83 ++- drivers/infiniband/hw/hfi1/init.c | 13 +- drivers/infiniband/hw/hns/hns_roce_cq.c | 6 +- drivers/infiniband/hw/hns/hns_roce_debugfs.c | 19 +- drivers/infiniband/hw/hns/hns_roce_hem.c | 8 +- drivers/infiniband/hw/hns/hns_roce_hw_v2.c | 20 +- drivers/infiniband/hw/hns/hns_roce_main.c | 2 +- drivers/infiniband/hw/hns/hns_roce_mr.c | 6 +- drivers/infiniband/hw/hns/hns_roce_srq.c | 2 +- drivers/infiniband/hw/irdma/hw.c | 7 +- drivers/infiniband/hw/irdma/main.h | 3 +- drivers/infiniband/hw/irdma/utils.c | 12 +- drivers/infiniband/hw/irdma/verbs.c | 19 +- drivers/infiniband/hw/irdma/verbs.h | 1 - drivers/infiniband/hw/mana/main.c | 3 +- drivers/infiniband/hw/mlx4/mlx4_ib.h | 1 + drivers/infiniband/hw/mlx4/mr.c | 9 +- drivers/infiniband/hw/mlx4/sysfs.c | 45 +- drivers/infiniband/hw/mlx5/devx.c | 30 +- drivers/infiniband/hw/mlx5/main.c | 17 +- drivers/infiniband/hw/mlx5/mlx5_ib.h | 9 + drivers/infiniband/hw/mlx5/mr.c | 60 +- drivers/infiniband/hw/mlx5/odp.c | 12 +- drivers/infiniband/hw/mlx5/qp.c | 13 +- drivers/infiniband/hw/mlx5/restrack.c | 3 - drivers/infiniband/hw/mlx5/umr.c | 93 ++- drivers/infiniband/hw/mlx5/umr.h | 9 +- drivers/infiniband/sw/rxe/rxe_mmap.c | 19 +- drivers/infiniband/sw/rxe/rxe_net.c | 6 +- drivers/infiniband/sw/rxe/rxe_ns.c | 4 +- drivers/infiniband/sw/rxe/rxe_resp.c | 33 +- drivers/infiniband/sw/siw/siw_cm.c | 30 +- drivers/infiniband/ulp/srpt/ib_srpt.c | 5 +- drivers/input/misc/ims-pcu.c | 131 +++- drivers/iommu/amd/amd_iommu_types.h | 11 +- drivers/iommu/amd/init.c | 7 +- drivers/iommu/arm/arm-smmu/arm-smmu-qcom.c | 2 +- drivers/iommu/dma-iommu.c | 2 +- drivers/iommu/intel/iommu.c | 6 +- drivers/iommu/intel/pasid.c | 4 +- drivers/iommu/iommufd/pages.c | 10 +- drivers/irqchip/exynos-combiner.c | 4 - drivers/irqchip/irq-crossbar.c | 10 +- drivers/irqchip/irq-gic-v3-its.c | 6 +- drivers/irqchip/irq-riscv-imsic-early.c | 15 +- drivers/irqchip/irq-ts4800.c | 10 + drivers/leds/uleds.c | 3 +- drivers/mailbox/imx-mailbox.c | 3 +- drivers/mailbox/mailbox-mpfs.c | 2 +- drivers/mailbox/mailbox.c | 26 +- drivers/mailbox/mtk-adsp-mailbox.c | 9 +- drivers/md/dm-bufio.c | 4 +- drivers/md/dm-era-target.c | 10 +- drivers/md/dm-integrity.c | 12 +- drivers/md/dm-ioctl.c | 4 +- drivers/md/dm-log.c | 3 + drivers/md/dm-pcache/dm_pcache.c | 8 + drivers/md/dm-stats.c | 10 +- drivers/md/dm-thin-metadata.c | 67 +- drivers/md/dm-verity-fec.c | 4 +- drivers/md/dm-verity-fec.h | 2 +- drivers/md/dm-verity-loadpin.c | 2 +- drivers/md/dm-verity-target.c | 16 +- drivers/md/dm-verity.h | 2 +- drivers/md/dm.c | 24 +- drivers/md/md-bitmap.c | 9 +- drivers/md/md-bitmap.h | 2 +- drivers/md/md-llbitmap.c | 13 +- drivers/md/md.c | 27 +- drivers/md/md.h | 5 + drivers/md/raid1.c | 54 +- drivers/md/raid10.c | 57 +- drivers/md/raid5.c | 55 +- drivers/media/platform/qcom/camss/camss-vfe.c | 2 +- .../media/platform/qcom/iris/iris_platform_gen1.c | 2 +- drivers/media/platform/qcom/iris/iris_probe.c | 7 + drivers/media/platform/qcom/venus/core.c | 7 +- drivers/media/platform/qcom/venus/core.h | 1 + drivers/media/platform/qcom/venus/helpers.c | 4 +- drivers/media/platform/qcom/venus/hfi_parser.c | 6 +- drivers/media/platform/qcom/venus/hfi_platform.c | 24 - drivers/media/platform/qcom/venus/hfi_platform.h | 2 - .../media/platform/qcom/venus/hfi_platform_v4.c | 20 +- .../media/platform/qcom/venus/hfi_platform_v6.c | 16 +- drivers/media/platform/qcom/venus/pm_helpers.c | 8 +- drivers/media/platform/rockchip/rga/rga-hw.c | 2 +- drivers/media/platform/rockchip/rga/rga-hw.h | 2 +- drivers/media/platform/synopsys/dw-mipi-csi2rx.c | 15 +- drivers/media/usb/uvc/uvc_status.c | 28 +- drivers/media/usb/uvc/uvc_video.c | 179 ++++-- drivers/media/v4l2-core/v4l2-common.c | 1 + drivers/memory/tegra/mc.c | 14 + drivers/memory/tegra/tegra186-emc.c | 4 +- drivers/memstick/core/ms_block.c | 4 + drivers/mfd/cs42l43.c | 2 +- drivers/mfd/rsmu_i2c.c | 6 +- drivers/mfd/rsmu_spi.c | 5 +- drivers/mfd/sm501.c | 4 +- drivers/mfd/tps6586x.c | 2 +- drivers/mmc/core/block.c | 3 +- drivers/mmc/core/mmc_test.c | 18 +- drivers/mmc/host/sdhci-esdhc-imx.c | 91 ++- drivers/mmc/host/sdhci-of-dwcmshc.c | 14 +- drivers/mmc/host/vub300.c | 36 +- drivers/mtd/devices/mchp23k256.c | 2 +- drivers/mtd/devices/slram.c | 22 +- drivers/mtd/maps/vmu-flash.c | 7 +- drivers/mtd/mtd_virt_concat.c | 4 +- drivers/mtd/nand/onenand/onenand_samsung.c | 7 +- drivers/mtd/nand/raw/fsl_ifc_nand.c | 9 +- drivers/mtd/nand/raw/lpc32xx_mlc.c | 12 +- drivers/mtd/nand/raw/lpc32xx_slc.c | 12 +- drivers/mtd/nand/raw/nand_base.c | 24 +- drivers/mtd/nand/raw/pl35x-nand-controller.c | 2 +- drivers/mtd/spi-nor/Kconfig | 1 - drivers/mtd/spi-nor/debugfs.c | 1 + drivers/mtd/spi-nor/spansion.c | 4 +- drivers/mtd/spi-nor/swp.c | 11 +- drivers/net/amt.c | 10 +- drivers/net/bareudp.c | 4 +- drivers/net/bonding/bond_3ad.c | 27 +- drivers/net/bonding/bond_main.c | 1 + drivers/net/bonding/bond_netlink.c | 16 + drivers/net/bonding/bond_options.c | 27 + drivers/net/can/usb/esd_usb.c | 5 +- drivers/net/dsa/mxl862xx/mxl862xx-host.c | 18 +- drivers/net/dsa/qca/qca8k-leds.c | 3 +- drivers/net/dsa/realtek/rtl8366rb-leds.c | 8 +- drivers/net/dsa/sja1105/sja1105_ptp.c | 2 +- drivers/net/ethernet/airoha/airoha_eth.c | 6 +- drivers/net/ethernet/airoha/airoha_ppe.c | 9 +- drivers/net/ethernet/airoha/airoha_ppe_debugfs.c | 2 - drivers/net/ethernet/amazon/ena/ena_netdev.c | 23 +- drivers/net/ethernet/broadcom/bnx2x/bnx2x_cmn.c | 3 +- drivers/net/ethernet/broadcom/bnxt/bnxt.c | 58 +- drivers/net/ethernet/broadcom/bnxt/bnxt.h | 6 + drivers/net/ethernet/broadcom/bnxt/bnxt_ethtool.c | 1 + drivers/net/ethernet/broadcom/genet/bcmgenet.c | 23 +- drivers/net/ethernet/cadence/macb_main.c | 29 +- .../ethernet/cavium/liquidio/cn23xx_pf_device.c | 18 +- drivers/net/ethernet/cavium/liquidio/lio_main.c | 27 - .../net/ethernet/cavium/liquidio/octeon_device.h | 3 - .../net/ethernet/cavium/liquidio/octeon_mailbox.c | 33 +- drivers/net/ethernet/chelsio/cxgb4/t4_hw.c | 8 - .../net/ethernet/freescale/dpaa2/dpaa2-switch.c | 10 +- drivers/net/ethernet/freescale/enetc/enetc.c | 7 + drivers/net/ethernet/freescale/enetc/enetc4_pf.c | 3 + drivers/net/ethernet/freescale/fman/fman.c | 4 +- drivers/net/ethernet/freescale/gianfar.c | 16 +- drivers/net/ethernet/google/gve/gve_rx_dqo.c | 28 +- drivers/net/ethernet/hisilicon/hns3/hns3_ethtool.c | 31 +- .../ethernet/hisilicon/hns3/hns3pf/hclge_main.c | 108 +++- .../ethernet/hisilicon/hns3/hns3pf/hclge_main.h | 1 + drivers/net/ethernet/ibm/emac/core.c | 13 +- drivers/net/ethernet/intel/e1000e/ich8lan.c | 3 + drivers/net/ethernet/intel/e1000e/netdev.c | 15 +- drivers/net/ethernet/intel/i40e/i40e_debug.h | 2 +- drivers/net/ethernet/intel/ice/ice_common.c | 1 - drivers/net/ethernet/intel/ice/ice_dpll.c | 20 +- drivers/net/ethernet/intel/ice/ice_eswitch.c | 4 +- drivers/net/ethernet/intel/ice/ice_ethtool.c | 12 +- drivers/net/ethernet/intel/ice/ice_main.c | 16 +- drivers/net/ethernet/intel/ice/ice_vf_lib.c | 2 +- drivers/net/ethernet/intel/idpf/virtchnl2.h | 12 +- drivers/net/ethernet/intel/igc/igc_main.c | 2 +- drivers/net/ethernet/intel/ixgbe/ixgbe_main.c | 3 +- drivers/net/ethernet/intel/ixgbe/ixgbe_type.h | 1 + drivers/net/ethernet/intel/ixgbe/ixgbe_x550.c | 2 +- drivers/net/ethernet/marvell/mvneta.c | 3 + .../net/ethernet/marvell/octeontx2/af/cn20k/npc.c | 9 +- drivers/net/ethernet/marvell/octeontx2/af/mbox.h | 31 +- drivers/net/ethernet/marvell/octeontx2/af/mcs.c | 6 +- .../net/ethernet/marvell/octeontx2/af/rvu_cn10k.c | 9 + .../ethernet/marvell/octeontx2/af/rvu_debugfs.c | 59 +- .../ethernet/marvell/octeontx2/af/rvu_devlink.c | 27 +- .../net/ethernet/marvell/octeontx2/af/rvu_nix.c | 15 +- .../net/ethernet/marvell/octeontx2/af/rvu_npc.c | 40 +- .../net/ethernet/marvell/octeontx2/af/rvu_npc_fs.c | 2 +- .../ethernet/marvell/octeontx2/nic/cn10k_macsec.c | 10 +- .../net/ethernet/marvell/octeontx2/nic/otx2_pf.c | 83 ++- .../net/ethernet/marvell/octeontx2/nic/otx2_vf.c | 22 +- .../net/ethernet/marvell/prestera/prestera_main.c | 2 +- drivers/net/ethernet/mediatek/mtk_eth_soc.c | 10 +- drivers/net/ethernet/mediatek/mtk_ppe.c | 4 +- drivers/net/ethernet/mediatek/mtk_wed_debugfs.c | 6 +- drivers/net/ethernet/mediatek/mtk_wed_mcu.c | 8 +- drivers/net/ethernet/mellanox/mlx5/core/Makefile | 2 +- drivers/net/ethernet/mellanox/mlx5/core/en.h | 12 + .../ethernet/mellanox/mlx5/core/en/hv_vhca_stats.c | 37 +- .../ethernet/mellanox/mlx5/core/en_accel/macsec.c | 47 +- drivers/net/ethernet/mellanox/mlx5/core/en_main.c | 14 +- drivers/net/ethernet/mellanox/mlx5/core/en_stats.c | 9 +- drivers/net/ethernet/mellanox/mlx5/core/en_tc.c | 3 + drivers/net/ethernet/mellanox/mlx5/core/eswitch.h | 17 +- .../ethernet/mellanox/mlx5/core/eswitch_offloads.c | 24 + .../net/ethernet/mellanox/mlx5/core/ipoib/ipoib.c | 3 +- drivers/net/ethernet/mellanox/mlx5/core/lag/lag.c | 507 +++++++++------ drivers/net/ethernet/mellanox/mlx5/core/lag/lag.h | 102 ++- .../net/ethernet/mellanox/mlx5/core/lag/mpesw.c | 41 +- .../ethernet/mellanox/mlx5/core/lag/shared_fdb.c | 235 +++++++ .../net/ethernet/mellanox/mlx5/core/lib/devcom.c | 8 + .../net/ethernet/mellanox/mlx5/core/lib/devcom.h | 1 + .../net/ethernet/mellanox/mlx5/core/lib/hv_vhca.c | 8 +- .../net/ethernet/mellanox/mlx5/core/lib/hv_vhca.h | 6 +- .../net/ethernet/mellanox/mlx5/core/lib/port_tun.c | 3 +- drivers/net/ethernet/mellanox/mlx5/core/lib/sd.c | 10 + drivers/net/ethernet/mellanox/mlx5/core/lib/sd.h | 10 + drivers/net/ethernet/mellanox/mlx5/core/lib/st.c | 1 + drivers/net/ethernet/mellanox/mlx5/core/main.c | 12 +- .../ethernet/mellanox/mlx5/core/steering/hws/bwc.c | 1 + drivers/net/ethernet/mellanox/mlxsw/spectrum.c | 2 +- .../net/ethernet/mellanox/mlxsw/spectrum_router.c | 1 + drivers/net/ethernet/meta/fbnic/fbnic_fw.c | 9 +- drivers/net/ethernet/meta/fbnic/fbnic_netdev.c | 7 +- drivers/net/ethernet/meta/fbnic/fbnic_pci.c | 4 + drivers/net/ethernet/meta/fbnic/fbnic_rpc.c | 2 + drivers/net/ethernet/meta/fbnic/fbnic_txrx.c | 11 +- drivers/net/ethernet/microchip/lan743x_main.c | 2 +- .../ethernet/microchip/lan966x/lan966x_vcap_impl.c | 5 +- .../ethernet/microchip/sparx5/sparx5_switchdev.c | 4 +- .../ethernet/microchip/sparx5/sparx5_vcap_impl.c | 5 +- drivers/net/ethernet/microchip/vcap/vcap_api.c | 72 ++- drivers/net/ethernet/microchip/vcap/vcap_api.h | 3 +- .../net/ethernet/microchip/vcap/vcap_api_debugfs.c | 8 +- .../microchip/vcap/vcap_api_debugfs_kunit.c | 3 +- .../net/ethernet/microchip/vcap/vcap_api_kunit.c | 3 +- .../net/ethernet/microchip/vcap/vcap_api_private.h | 3 + drivers/net/ethernet/microsoft/mana/gdma_main.c | 2 + drivers/net/ethernet/microsoft/mana/mana_bpf.c | 3 +- drivers/net/ethernet/microsoft/mana/mana_en.c | 80 ++- drivers/net/ethernet/mucse/rnpgbe/rnpgbe_mbx.c | 26 +- drivers/net/ethernet/mucse/rnpgbe/rnpgbe_mbx.h | 5 +- drivers/net/ethernet/mucse/rnpgbe/rnpgbe_mbx_fw.c | 82 +-- drivers/net/ethernet/mucse/rnpgbe/rnpgbe_mbx_fw.h | 14 + drivers/net/ethernet/oa_tc6.c | 14 +- .../net/ethernet/pensando/ionic/ionic_ethtool.c | 11 +- drivers/net/ethernet/qlogic/qede/qede_fp.c | 9 +- .../net/ethernet/qualcomm/rmnet/rmnet_handlers.c | 5 +- drivers/net/ethernet/qualcomm/rmnet/rmnet_map.h | 1 + .../net/ethernet/qualcomm/rmnet/rmnet_map_data.c | 78 ++- .../net/ethernet/stmicro/stmmac/dwmac-spacemit.c | 13 +- drivers/net/ethernet/sun/sungem.c | 13 +- drivers/net/ethernet/sunplus/spl2sw_phy.c | 6 +- drivers/net/ethernet/ti/icssg/icssg_common.c | 120 ++-- drivers/net/ethernet/wangxun/libwx/wx_lib.c | 1 + drivers/net/ethernet/wangxun/libwx/wx_type.h | 1 + drivers/net/geneve.c | 24 +- drivers/net/gtp.c | 10 +- drivers/net/ieee802154/ca8210.c | 9 +- drivers/net/ipa/ipa_smp2p.c | 30 +- drivers/net/macsec.c | 9 +- drivers/net/mdio/Kconfig | 3 +- drivers/net/netconsole.c | 12 +- drivers/net/ovpn/udp.c | 2 +- drivers/net/pfcp.c | 5 +- drivers/net/phy/realtek/realtek_main.c | 3 +- drivers/net/phy/sfp.c | 1 + drivers/net/pse-pd/pse_core.c | 6 +- drivers/net/thunderbolt/main.c | 8 +- drivers/net/usb/gl620a.c | 6 +- drivers/net/usb/lan78xx.c | 55 +- drivers/net/usb/net1080.c | 2 +- drivers/net/veth.c | 2 + drivers/net/virtio_net.c | 27 +- drivers/net/vxlan/vxlan_core.c | 14 +- drivers/net/wan/ixp4xx_hss.c | 4 +- drivers/net/wireguard/socket.c | 8 +- drivers/net/wireless/ath/ath11k/mhi.c | 4 +- drivers/net/wireless/ath/ath11k/pci.c | 8 + drivers/net/wireless/ath/ath12k/ahb.c | 25 +- drivers/net/wireless/ath/ath12k/dp.c | 10 +- drivers/net/wireless/ath/ath12k/dp_mon.c | 6 +- drivers/net/wireless/ath/ath12k/mac.c | 21 +- drivers/net/wireless/ath/ath12k/pci.c | 2 +- drivers/net/wireless/ath/ath12k/wifi7/dp_rx.c | 4 +- drivers/net/wireless/ath/ath9k/xmit.c | 5 + drivers/net/wireless/ath/wcn36xx/smd.c | 13 + .../broadcom/brcm80211/brcmfmac/cyw/core.c | 6 + drivers/net/wireless/marvell/libertas_tf/main.c | 2 +- drivers/net/wireless/marvell/mwifiex/cfg80211.c | 2 +- drivers/net/wireless/marvell/mwifiex/join.c | 1 - drivers/net/wireless/mediatek/mt76/channel.c | 2 +- drivers/net/wireless/mediatek/mt76/mac80211.c | 4 +- drivers/net/wireless/mediatek/mt76/mt7615/init.c | 1 - drivers/net/wireless/mediatek/mt76/mt7915/mac.c | 10 +- drivers/net/wireless/mediatek/mt76/mt7921/mac.c | 5 +- drivers/net/wireless/mediatek/mt76/mt7921/pci.c | 17 +- drivers/net/wireless/mediatek/mt76/mt7925/mac.c | 20 +- drivers/net/wireless/mediatek/mt76/mt7925/main.c | 4 +- drivers/net/wireless/mediatek/mt76/mt7925/pci.c | 4 +- .../net/wireless/mediatek/mt76/mt7925/testmode.c | 5 + drivers/net/wireless/mediatek/mt76/mt792x_core.c | 4 +- drivers/net/wireless/mediatek/mt76/mt7996/dma.c | 2 +- drivers/net/wireless/mediatek/mt76/mt7996/mac.c | 35 +- drivers/net/wireless/mediatek/mt76/mt7996/main.c | 9 +- drivers/net/wireless/mediatek/mt76/mt7996/mcu.c | 5 +- drivers/net/wireless/mediatek/mt76/mt7996/mt7996.h | 3 +- drivers/net/wireless/mediatek/mt76/mt7996/pci.c | 2 +- drivers/net/wireless/mediatek/mt76/tx.c | 2 +- drivers/net/wireless/ralink/rt2x00/rt2x00dev.c | 12 +- drivers/net/wireless/realtek/rtw88/pci.c | 13 +- drivers/net/wireless/realtek/rtw89/core.h | 3 + drivers/net/wireless/realtek/rtw89/fw.c | 2 +- drivers/net/wireless/realtek/rtw89/pci.c | 8 +- drivers/net/wireless/ti/wlcore/main.c | 23 +- drivers/net/wwan/iosm/iosm_ipc_mux_codec.c | 40 +- drivers/net/wwan/t7xx/t7xx_hif_cldma.c | 3 + drivers/net/wwan/t7xx/t7xx_port_wwan.c | 2 + drivers/ntb/hw/epf/ntb_hw_epf.c | 81 ++- drivers/ntb/ntb_transport.c | 10 +- drivers/nvdimm/btt.c | 14 +- drivers/nvdimm/nd.h | 11 +- drivers/nvdimm/region_devs.c | 66 +- drivers/nvme/host/apple.c | 12 +- drivers/nvme/host/core.c | 4 +- drivers/nvme/host/pci.c | 9 +- drivers/nvme/target/core.c | 2 +- drivers/nvme/target/fabrics-cmd-auth.c | 26 +- drivers/nvme/target/rdma.c | 18 +- drivers/nvme/target/tcp.c | 11 +- drivers/of/cpu.c | 2 +- drivers/of/dynamic.c | 1 - drivers/of/of_reserved_mem.c | 28 +- drivers/of/overlay.c | 15 + drivers/of/platform.c | 5 - drivers/opp/core.c | 5 +- drivers/pci/controller/dwc/pci-meson.c | 13 +- .../pci/controller/dwc/pcie-designware-debugfs.c | 10 +- drivers/pci/controller/dwc/pcie-designware.c | 16 +- drivers/pci/controller/dwc/pcie-designware.h | 1 + drivers/pci/controller/dwc/pcie-intel-gw.c | 46 +- drivers/pci/controller/dwc/pcie-qcom.c | 43 +- drivers/pci/controller/pci-loongson.c | 31 +- drivers/pci/controller/pcie-iproc-bcma.c | 2 +- drivers/pci/controller/pcie-iproc-platform.c | 2 +- drivers/pci/controller/pcie-iproc.c | 1 - drivers/pci/controller/pcie-iproc.h | 2 - drivers/pci/controller/pcie-mediatek-gen3.c | 4 +- drivers/pci/controller/pcie-mediatek.c | 19 +- drivers/pci/controller/pcie-rcar-host.c | 1 - drivers/pci/endpoint/functions/pci-epf-ntb.c | 21 +- drivers/pci/endpoint/functions/pci-epf-vntb.c | 130 +++- drivers/pci/msi/msi.c | 4 +- drivers/pci/pci.c | 3 - drivers/pci/pwrctrl/core.c | 26 +- drivers/pci/rom.c | 149 ++++- drivers/phy/freescale/phy-fsl-imx8qm-lvds-phy.c | 26 +- drivers/phy/phy-can-transceiver.c | 3 + drivers/pinctrl/Kconfig | 1 + drivers/pinctrl/cirrus/pinctrl-cs42l43.c | 6 +- drivers/pinctrl/mediatek/mtk-eint.c | 6 +- drivers/pinctrl/mediatek/pinctrl-airoha.c | 122 +++- drivers/pinctrl/mediatek/pinctrl-mt8167.c | 2 +- drivers/pinctrl/mediatek/pinctrl-mt8516.c | 2 +- drivers/pinctrl/meson/pinctrl-amlogic-a4.c | 15 +- drivers/pinctrl/meson/pinctrl-meson.c | 2 +- drivers/pinctrl/nuvoton/pinctrl-ma35.c | 3 +- drivers/pinctrl/nuvoton/pinctrl-ma35d1.c | 470 ++++++++------ drivers/pinctrl/pinconf-generic.c | 5 +- drivers/pinctrl/qcom/tlmm-test.c | 19 +- drivers/pinctrl/renesas/pinctrl-rzg2l.c | 8 +- drivers/pinctrl/spacemit/pinctrl-k1.c | 2 +- drivers/pinctrl/sunxi/pinctrl-sun55i-a523-r.c | 1 - drivers/pinctrl/sunxi/pinctrl-sun55i-a523.c | 1 - drivers/pinctrl/sunxi/pinctrl-sunxi.c | 2 +- drivers/platform/chrome/chromeos_privacy_screen.c | 3 + drivers/platform/chrome/chromeos_tbmc.c | 6 +- drivers/platform/chrome/wilco_ec/event.c | 8 +- drivers/platform/x86/amd/pmc/pmc-quirks.c | 39 ++ drivers/platform/x86/amd/pmc/pmc.c | 83 ++- drivers/platform/x86/amd/pmc/pmc.h | 2 + drivers/platform/x86/bitland-mifs-wmi.c | 8 + drivers/platform/x86/classmate-laptop.c | 12 +- drivers/platform/x86/dell/dell-laptop.c | 5 + drivers/platform/x86/hp/hp-wmi.c | 8 + .../x86/intel/speed_select_if/isst_tpmi_core.c | 2 +- drivers/platform/x86/intel/vsec.c | 17 +- drivers/platform/x86/intel/vsec_tpmi.c | 25 +- drivers/platform/x86/xo15-ebook.c | 7 +- drivers/pmdomain/imx/imx8m-blk-ctrl.c | 46 +- drivers/pmdomain/imx/imx93-blk-ctrl.c | 60 +- drivers/pmdomain/mediatek/mtk-pm-domains.c | 40 +- drivers/power/sequencing/core.c | 9 +- drivers/power/supply/bq257xx_charger.c | 7 +- drivers/power/supply/charger-manager.c | 6 +- drivers/power/supply/cpcap-battery.c | 11 +- drivers/power/supply/max17042_battery.c | 3 +- drivers/power/supply/power_supply_core.c | 11 +- drivers/pwm/pwm-imx27.c | 8 +- drivers/pwm/pwm-rzg2l-gpt.c | 8 +- drivers/rapidio/devices/tsi721.c | 3 +- drivers/regulator/core.c | 4 +- drivers/regulator/ltc3676.c | 10 +- drivers/remoteproc/qcom_common.c | 14 +- drivers/remoteproc/qcom_q6v5_wcss.c | 23 +- drivers/remoteproc/xlnx_r5_remoteproc.c | 46 +- drivers/reset/reset-imx7.c | 6 + drivers/reset/reset-sunxi.c | 4 +- drivers/rpmsg/qcom_glink_native.c | 2 - drivers/rpmsg/rpmsg_core.c | 43 +- drivers/rpmsg/virtio_rpmsg_bus.c | 1 - drivers/rtc/rtc-abx80x.c | 3 +- drivers/rtc/rtc-cmos.c | 6 + drivers/rtc/rtc-ds1307.c | 30 +- drivers/rtc/rtc-isl1208.c | 15 +- drivers/rtc/rtc-mpfs.c | 2 +- drivers/rtc/rtc-msc313.c | 4 +- drivers/rtc/rtc-renesas-rtca3.c | 2 +- drivers/s390/char/monwriter.c | 3 + drivers/s390/crypto/pkey_api.c | 8 +- drivers/s390/crypto/pkey_pckmo.c | 4 + drivers/s390/crypto/zcrypt_cex2a.c | 0 drivers/s390/crypto/zcrypt_cex2a.h | 0 drivers/s390/crypto/zcrypt_cex2c.c | 0 drivers/s390/crypto/zcrypt_cex2c.h | 0 drivers/scsi/elx/efct/efct_hw.c | 2 + drivers/scsi/elx/efct/efct_unsol.c | 1 + drivers/scsi/hisi_sas/hisi_sas_v3_hw.c | 12 +- drivers/scsi/hpsa.c | 4 + drivers/scsi/lpfc/lpfc_init.c | 3 +- drivers/scsi/pm8001/pm8001_ctl.c | 5 +- drivers/scsi/scsi_scan.c | 2 +- drivers/scsi/scsi_transport_sas.c | 101 ++- drivers/scsi/sg.c | 7 +- drivers/scsi/smartpqi/smartpqi_init.c | 2 +- drivers/soc/fsl/qe/qe.c | 3 + drivers/soc/fsl/qe/qe_ports_ic.c | 21 +- drivers/soc/mediatek/mt8167-mmsys.h | 11 +- drivers/soc/ti/k3-ringacc.c | 4 +- drivers/soc/xilinx/zynqmp_power.c | 47 +- drivers/soundwire/generic_bandwidth_allocation.c | 57 +- drivers/soundwire/intel_ace2x.c | 1 + drivers/soundwire/stream.c | 7 + drivers/spi/spi-atcspi200.c | 13 +- drivers/spi/spi-atmel.c | 133 ++-- drivers/spi/spi-dw.h | 1 + drivers/spi/spi-ep93xx.c | 1 + drivers/spi/spi-hisi-kunpeng.c | 6 +- drivers/spi/spi-imx.c | 19 +- drivers/spi/spi-meson-spifc.c | 1 + drivers/spi/spi-rpc-if.c | 6 +- drivers/spi/spi-rzv2h-rspi.c | 4 +- drivers/spi/spi-sh-msiof.c | 10 +- drivers/spi/spi-uniphier.c | 4 +- drivers/spi/spi-xilinx.c | 11 +- drivers/spi/spi.c | 5 - drivers/staging/media/atomisp/i2c/atomisp-gc2235.c | 29 +- drivers/staging/media/atomisp/pci/atomisp_cmd.c | 6 +- drivers/staging/media/atomisp/pci/sh_css.c | 8 +- drivers/staging/media/sunxi/cedrus/cedrus.c | 4 +- drivers/staging/most/video/video.c | 7 +- drivers/staging/nvec/nvec.c | 4 +- drivers/staging/rtl8723bs/core/rtw_security.c | 2 +- drivers/target/iscsi/iscsi_target_auth.c | 6 +- drivers/target/loopback/tcm_loop.c | 64 -- drivers/target/target_core_fabric_lib.c | 89 ++- drivers/target/target_core_internal.h | 3 +- drivers/target/target_core_pr.c | 12 +- drivers/thermal/intel/therm_throt.c | 7 +- drivers/thermal/testing/command.c | 48 +- drivers/thermal/testing/thermal_testing.h | 8 + drivers/thermal/testing/zone.c | 7 +- drivers/thermal/thermal_hwmon.c | 156 ++--- drivers/thunderbolt/debugfs.c | 8 +- drivers/tty/serial/8250/8250_omap.c | 3 +- drivers/tty/serial/max310x.c | 12 + drivers/tty/serial/msm_serial.c | 3 +- drivers/ufs/core/ufs_trace.h | 36 +- drivers/ufs/core/ufshcd.c | 36 +- drivers/usb/atm/ueagle-atm.c | 94 ++- drivers/usb/host/max3421-hcd.c | 8 + drivers/vdpa/octeon_ep/octep_vdpa_main.c | 20 +- drivers/vdpa/vdpa_user/iova_domain.c | 2 +- drivers/vdpa/vdpa_user/vduse_dev.c | 197 +++++- drivers/vfio/pci/qat/main.c | 18 +- drivers/vfio/pci/xe/main.c | 2 - drivers/vhost/net.c | 15 +- drivers/vhost/vdpa.c | 29 +- drivers/vhost/vhost.c | 11 +- drivers/video/backlight/ktd2801-backlight.c | 1 + drivers/video/fbdev/aty/radeon_base.c | 1 + drivers/video/fbdev/broadsheetfb.c | 8 +- drivers/video/fbdev/carminefb.c | 1 + drivers/video/fbdev/core/fbcon.c | 10 +- drivers/video/fbdev/efifb.c | 1 + drivers/video/fbdev/hecubafb.c | 6 +- drivers/video/fbdev/i740fb.c | 1 + drivers/video/fbdev/metronomefb.c | 8 +- drivers/video/fbdev/nvidia/nvidia.c | 1 + drivers/video/fbdev/s3fb.c | 1 + drivers/video/fbdev/sm501fb.c | 16 +- drivers/video/fbdev/sm712.h | 2 +- drivers/video/fbdev/tdfxfb.c | 1 + drivers/video/fbdev/tridentfb.c | 1 + drivers/video/fbdev/uvesafb.c | 4 +- drivers/video/fbdev/vesafb.c | 1 + drivers/virtio/virtio_rtc_driver.c | 28 +- drivers/watchdog/sama5d4_wdt.c | 48 +- drivers/watchdog/sp5100_tco.c | 3 +- drivers/watchdog/sprd_wdt.c | 5 +- drivers/watchdog/watchdog_core.c | 3 + drivers/xen/gntdev.c | 8 +- drivers/xen/pvcalls-front.c | 88 ++- drivers/xen/xen-scsiback.c | 30 +- fs/9p/vfs_inode.c | 28 +- fs/9p/vfs_inode_dotl.c | 4 +- fs/afs/callback.c | 17 +- fs/afs/cell.c | 27 +- fs/afs/cm_security.c | 3 +- fs/afs/cmservice.c | 7 +- fs/afs/dir.c | 40 +- fs/afs/dynroot.c | 2 +- fs/afs/fs_operation.c | 2 +- fs/afs/inode.c | 15 +- fs/afs/internal.h | 3 +- fs/afs/rxrpc.c | 16 +- fs/afs/super.c | 5 +- fs/afs/vl_list.c | 10 +- fs/afs/volume.c | 2 +- fs/bpf_fs_kfuncs.c | 10 +- fs/btrfs/compression.c | 18 +- fs/btrfs/delalloc-space.c | 2 + fs/btrfs/disk-io.c | 2 +- fs/btrfs/extent-tree.c | 5 +- fs/btrfs/inode.c | 2 +- fs/btrfs/lzo.c | 11 + fs/btrfs/reflink.c | 101 +-- fs/btrfs/space-info.c | 2 + fs/btrfs/space-info.h | 11 + fs/btrfs/super.c | 4 +- fs/btrfs/zoned.c | 64 +- fs/cachefiles/namei.c | 3 +- fs/configfs/dir.c | 57 +- fs/crypto/fscrypt_private.h | 32 +- fs/crypto/keyring.c | 216 +++---- fs/dlm/midcomms.c | 4 +- fs/efs/file.c | 21 +- fs/erofs/inode.c | 5 +- fs/erofs/super.c | 4 +- fs/eventpoll.c | 609 ++++++++++++------ fs/exfat/balloc.c | 2 +- fs/exfat/dir.c | 48 +- fs/exfat/exfat_fs.h | 131 +++- fs/exfat/fatent.c | 4 +- fs/exfat/file.c | 8 +- fs/exfat/inode.c | 26 +- fs/exfat/namei.c | 26 +- fs/exfat/super.c | 5 +- fs/ext2/file.c | 9 +- fs/ext4/ext4.h | 20 + fs/ext4/fast_commit.c | 50 +- fs/ext4/inode.c | 3 +- fs/ext4/ioctl.c | 15 +- fs/ext4/namei.c | 2 +- fs/f2fs/data.c | 29 + fs/f2fs/f2fs.h | 1 + fs/f2fs/segment.c | 8 + fs/f2fs/xattr.c | 6 +- fs/fhandle.c | 2 +- fs/fs-writeback.c | 5 - fs/hfs/inode.c | 2 +- fs/hfsplus/btree.c | 2 + fs/hfsplus/xattr.c | 1 - fs/iomap/bio.c | 13 +- fs/iomap/buffered-io.c | 2 +- fs/iomap/direct-io.c | 7 +- fs/iomap/ioend.c | 8 +- fs/jbd2/journal.c | 2 + fs/kernfs/dir.c | 33 +- fs/kernfs/file.c | 13 +- fs/kernfs/inode.c | 36 +- fs/kernfs/kernfs-internal.h | 24 +- fs/kernfs/mount.c | 2 +- fs/lockd/lockd.h | 8 + fs/lockd/svc4proc.c | 19 +- fs/lockd/svcproc.c | 2 +- fs/lockd/svcsubs.c | 7 +- fs/minix/minix.h | 2 +- fs/namei.c | 4 + fs/netfs/read_retry.c | 7 +- fs/netfs/write_issue.c | 18 +- fs/netfs/write_retry.c | 7 +- fs/nfs/callback_proc.c | 9 +- fs/nfs/delegation.c | 9 +- fs/nfs/filelayout/filelayout.c | 2 + fs/nfs/flexfilelayout/flexfilelayout.c | 29 + fs/nfs/flexfilelayout/flexfilelayout.h | 16 + fs/nfs/fs_context.c | 8 +- fs/nfs/internal.h | 12 +- fs/nfs/nfs4proc.c | 22 +- fs/nfs/pnfs.c | 4 +- fs/nfs/pnfs_nfs.c | 2 +- fs/nfs/read.c | 25 +- fs/nfs/write.c | 14 +- fs/nfsd/nfs4state.c | 16 +- fs/nilfs2/namei.c | 2 +- fs/nilfs2/super.c | 2 - fs/ntfs/aops.c | 23 +- fs/ntfs/attrib.c | 345 +++++++--- fs/ntfs/attrib.h | 4 + fs/ntfs/attrlist.c | 20 +- fs/ntfs/dir.c | 79 +-- fs/ntfs/ea.c | 16 +- fs/ntfs/index.c | 297 ++++++--- fs/ntfs/index.h | 12 +- fs/ntfs/inode.c | 38 +- fs/ntfs/logfile.c | 2 +- fs/ntfs/mft.c | 137 +--- fs/ntfs/namei.c | 67 +- fs/ntfs/runlist.c | 12 +- fs/ntfs/super.c | 53 +- fs/ntfs3/attrib.c | 10 +- fs/ntfs3/frecord.c | 17 +- fs/ntfs3/fslog.c | 147 ++++- fs/ntfs3/index.c | 45 +- fs/ntfs3/inode.c | 9 +- fs/ntfs3/lznt.c | 2 +- fs/ntfs3/namei.c | 2 +- fs/ntfs3/ntfs_fs.h | 3 +- fs/ntfs3/run.c | 14 +- fs/ocfs2/alloc.c | 2 +- fs/ocfs2/aops.c | 13 +- fs/ocfs2/buffer_head_io.c | 7 +- fs/ocfs2/dlm/dlmdebug.c | 16 +- fs/ocfs2/dlmglue.c | 17 + fs/ocfs2/inode.c | 206 +++++- fs/ocfs2/journal.c | 13 +- fs/ocfs2/journal.h | 3 + fs/ocfs2/move_extents.c | 4 +- fs/ocfs2/ocfs2.h | 2 - fs/ocfs2/quota_local.c | 2 +- fs/ocfs2/refcounttree.c | 9 +- fs/ocfs2/stack_user.c | 10 +- fs/ocfs2/super.c | 2 - fs/ocfs2/sysfile.c | 9 +- fs/orangefs/dir.c | 7 +- fs/overlayfs/copy_up.c | 12 +- fs/overlayfs/inode.c | 4 +- fs/pidfs.c | 45 +- fs/proc/generic.c | 9 +- fs/proc/page.c | 2 +- fs/proc/task_mmu.c | 74 ++- fs/resctrl/rdtgroup.c | 33 +- fs/smb/client/cifs_fs_sb.h | 1 + fs/smb/client/cifsfs.c | 12 + fs/smb/client/connect.c | 4 + fs/smb/client/file.c | 6 + fs/smb/client/fs_context.c | 102 +-- fs/smb/client/inode.c | 30 +- fs/smb/client/ioctl.c | 12 +- fs/smb/client/misc.c | 8 + fs/smb/client/reparse.c | 17 +- fs/smb/client/smb1pdu.h | 5 - fs/smb/client/smb2ops.c | 38 +- fs/smb/client/smb2pdu.h | 4 - fs/smb/common/fscc.h | 18 + fs/smb/server/auth.c | 47 +- fs/smb/server/auth.h | 7 +- fs/smb/server/mgmt/user_session.c | 4 +- fs/smb/server/mgmt/user_session.h | 1 + fs/smb/server/misc.c | 33 - fs/smb/server/misc.h | 1 - fs/smb/server/oplock.c | 6 + fs/smb/server/smb2pdu.c | 171 +++-- fs/smb/server/smb2pdu.h | 3 - fs/smb/server/smbacl.c | 7 +- fs/smb/server/vfs.c | 55 +- fs/smb/server/vfs_cache.c | 29 +- fs/super.c | 11 +- fs/sysfs/file.c | 4 + fs/udf/super.c | 2 +- fs/xattr.c | 265 ++++---- fs/xfs/xfs_aops.c | 3 +- fs/xfs/xfs_rtalloc.c | 8 + fs/xfs/xfs_zone_alloc.c | 11 +- fs/xfs/xfs_zone_alloc.h | 1 + fs/xfs/xfs_zone_gc.c | 4 +- include/acpi/platform/aclinuxex.h | 1 + include/asm-generic/bitops/lock.h | 22 +- include/asm-generic/uaccess.h | 3 +- include/dt-bindings/clock/qcom,x1e80100-camcc.h | 3 + include/dt-bindings/power/fsl,imx93-power.h | 1 + include/linux/amba/bus.h | 5 - include/linux/arm-smccc.h | 5 + include/linux/bpf-cgroup.h | 5 +- include/linux/bpf.h | 2 + include/linux/bpf_lsm.h | 6 + include/linux/cdx/cdx_bus.h | 4 - include/linux/device.h | 5 +- include/linux/edac.h | 3 + include/linux/filelock.h | 2 +- include/linux/firmware.h | 10 + .../linux/firmware/samsung/exynos-acpm-protocol.h | 10 +- include/linux/firmware/xlnx-zynqmp.h | 21 + include/linux/fs.h | 1 + include/linux/fwnode.h | 3 + include/linux/hfs_common.h | 1 + include/linux/host1x.h | 7 + include/linux/hyperv.h | 5 - include/linux/i3c/master.h | 14 +- include/linux/ieee80211-eht.h | 12 +- include/linux/ieee80211-s1g.h | 2 +- include/linux/inetdevice.h | 5 + include/linux/iomap.h | 2 + include/linux/iommu.h | 1 + include/linux/kernfs.h | 11 +- include/linux/liveupdate.h | 9 +- include/linux/mfd/rohm-bd72720.h | 1 - include/linux/netdevice.h | 4 + include/linux/nfs_page.h | 1 + include/linux/nfs_xdr.h | 1 - include/linux/rhashtable-types.h | 22 +- include/linux/rpmsg.h | 4 - include/linux/shmem_fs.h | 3 +- include/linux/sockptr.h | 2 +- include/linux/sunrpc/clnt.h | 1 + include/linux/uaccess.h | 27 +- include/linux/virtio.h | 2 + include/linux/vmalloc.h | 4 +- include/linux/xattr.h | 35 +- include/net/addrconf.h | 10 +- include/net/bluetooth/hci.h | 5 +- include/net/bluetooth/l2cap.h | 10 +- include/net/bond_options.h | 1 + include/net/bonding.h | 1 + include/net/dst_metadata.h | 7 +- include/net/fib_rules.h | 5 + include/net/gue.h | 2 +- include/net/ip_fib.h | 12 +- include/net/ip_vs.h | 3 +- include/net/mana/mana.h | 8 + include/net/netfilter/ipv4/nf_conntrack_ipv4.h | 4 + include/net/netfilter/nf_conntrack_expect.h | 17 +- include/net/netfilter/nf_conntrack_extend.h | 12 - include/net/netfilter/nf_conntrack_helper.h | 18 +- include/net/netfilter/nf_conntrack_timeout.h | 27 +- include/net/netfilter/nf_dup_netdev.h | 36 +- include/net/netfilter/nf_flow_table.h | 5 +- include/net/netfilter/nf_queue.h | 1 + include/net/netfilter/nft_meta.h | 2 + include/net/sch_generic.h | 32 +- include/net/sctp/sctp.h | 3 +- include/net/tc_act/tc_pedit.h | 18 +- include/net/tcp.h | 9 + include/net/udp_tunnel.h | 4 +- include/net/xfrm.h | 15 +- include/rdma/frmr_pools.h | 3 +- include/rdma/ib_umem.h | 4 + include/rdma/ib_verbs.h | 5 + include/rdma/rdma_vt.h | 20 - include/soc/spacemit/k3-syscon.h | 4 +- include/sound/soc-dapm.h | 1 + include/trace/events/dma_fence.h | 40 +- include/uapi/linux/bpf.h | 2 + include/uapi/linux/if_link.h | 1 + include/uapi/linux/iommufd.h | 12 +- include/uapi/linux/netfilter/nf_conntrack_common.h | 1 + include/uapi/rdma/bnxt_re-abi.h | 7 +- include/ufs/ufshcd.h | 3 - init/initramfs_test.c | 17 +- io_uring/bpf-ops.c | 2 + kernel/bpf/arena.c | 61 +- kernel/bpf/arraymap.c | 8 +- kernel/bpf/bpf_lru_list.c | 165 +++-- kernel/bpf/bpf_lru_list.h | 25 +- kernel/bpf/bpf_lsm.c | 23 + kernel/bpf/cgroup.c | 168 +++-- kernel/bpf/core.c | 2 +- kernel/bpf/devmap.c | 12 + kernel/bpf/disasm.c | 5 +- kernel/bpf/hashtab.c | 32 +- kernel/bpf/helpers.c | 17 +- kernel/bpf/inode.c | 13 +- kernel/bpf/map_in_map.c | 5 +- kernel/bpf/map_iter.c | 4 + kernel/bpf/states.c | 13 +- kernel/bpf/syscall.c | 35 +- kernel/bpf/verifier.c | 56 +- kernel/cgroup/cpuset.c | 7 +- kernel/cpu.c | 20 +- kernel/exit.c | 7 +- kernel/fork.c | 9 +- kernel/kcov.c | 4 +- kernel/kexec_core.c | 8 +- kernel/liveupdate/kexec_handover.c | 32 +- kernel/liveupdate/luo_file.c | 5 +- kernel/liveupdate/luo_flb.c | 52 +- kernel/liveupdate/luo_session.c | 99 ++- kernel/locking/spinlock_rt.c | 27 +- kernel/power/qos.c | 11 +- kernel/sched/core.c | 1 + kernel/sched/cpufreq_schedutil.c | 1 + kernel/sched/debug.c | 3 + kernel/sched/fair.c | 211 +++--- kernel/signal.c | 10 +- kernel/taskstats.c | 62 +- kernel/time/alarmtimer.c | 8 +- kernel/time/posix-cpu-timers.c | 187 ++++-- kernel/time/posix-timers.c | 6 +- kernel/time/posix-timers.h | 4 +- kernel/time/tick-sched.c | 11 +- kernel/time/time.c | 2 +- kernel/time/timer_migration.h | 18 +- kernel/trace/bpf_trace.c | 22 +- kernel/trace/fprobe.c | 10 + kernel/trace/ring_buffer.c | 8 +- kernel/trace/trace.c | 2 +- kernel/trace/trace_eprobe.c | 2 +- kernel/trace/trace_events_hist.c | 41 +- kernel/trace/trace_events_user.c | 43 +- kernel/trace/trace_osnoise.c | 4 +- kernel/trace/trace_probe.c | 174 ++++- kernel/trace/trace_probe.h | 7 +- kernel/trace/trace_remote.c | 18 +- kernel/workqueue.c | 2 +- lib/Kconfig.debug | 5 + lib/alloc_tag.c | 9 +- lib/base64.c | 3 +- lib/crypto/Kconfig | 3 +- lib/fonts/font_acorn_8x8.c | 5 + lib/locking-selftest.c | 7 +- lib/rhashtable.c | 17 +- lib/test_hmm.c | 6 +- lib/test_meminit.c | 2 +- lib/tests/kunit_iov_iter.c | 12 +- lib/tests/liveupdate.c | 3 + lib/usercopy.c | 4 +- lib/vsprintf.c | 36 +- mm/compaction.c | 7 +- mm/damon/core.c | 59 +- mm/damon/sysfs-schemes.c | 17 +- mm/huge_memory.c | 3 + mm/hugetlb.c | 7 +- mm/memory_hotplug.c | 2 +- mm/mm_init.c | 47 +- mm/numa_emulation.c | 17 +- mm/shmem.c | 50 +- mm/slub.c | 7 +- mm/sparse-vmemmap.c | 20 +- net/9p/client.c | 2 + net/9p/trans_rdma.c | 19 +- net/9p/trans_virtio.c | 5 + net/atm/common.c | 2 + net/batman-adv/distributed-arp-table.c | 30 +- net/batman-adv/fragmentation.c | 8 +- net/batman-adv/gateway_client.c | 3 +- net/batman-adv/main.c | 13 +- net/batman-adv/mesh-interface.c | 17 +- net/batman-adv/mesh-interface.h | 2 + net/batman-adv/multicast_forw.c | 7 +- net/batman-adv/routing.c | 3 +- net/batman-adv/translation-table.c | 5 +- net/bluetooth/6lowpan.c | 83 ++- net/bluetooth/eir.c | 8 +- net/bluetooth/hci_codec.c | 2 +- net/bluetooth/hci_core.c | 2 + net/bluetooth/hci_event.c | 7 + net/bluetooth/iso.c | 31 +- net/bluetooth/l2cap_core.c | 94 ++- net/bluetooth/l2cap_sock.c | 103 ++- net/bluetooth/mgmt.c | 2 + net/bluetooth/msft.c | 2 +- net/bluetooth/sco.c | 15 +- net/bluetooth/smp.c | 27 +- net/bpf/test_run.c | 8 +- net/bridge/br_cfm.c | 6 + net/bridge/br_cfm_netlink.c | 4 +- net/bridge/br_if.c | 3 + net/bridge/br_stp.c | 3 +- net/bridge/netfilter/nft_meta_bridge.c | 23 +- net/can/bcm.c | 654 ++++++++++++++----- net/can/isotp.c | 298 ++++++--- net/core/dev.c | 9 +- net/core/fib_rules.c | 6 +- net/core/filter.c | 28 +- net/core/flow_dissector.c | 12 +- net/core/lwt_bpf.c | 12 + net/core/lwtunnel.c | 6 + net/core/netdev-genl.c | 4 +- net/core/netdev_rx_queue.c | 8 +- net/devlink/rate.c | 25 +- net/ethtool/netlink.h | 28 + net/ethtool/rss.c | 14 +- net/handshake/genl.c | 2 +- net/ieee802154/core.c | 49 +- net/ieee802154/header_ops.c | 9 +- net/ieee802154/ieee802154.h | 17 + net/ieee802154/netlink.c | 36 +- net/ife/ife.c | 2 +- net/ipv4/fib_trie.c | 4 + net/ipv4/fou_core.c | 9 +- net/ipv4/igmp.c | 63 +- net/ipv4/inet_connection_sock.c | 1 + net/ipv4/ip_vti.c | 3 + net/ipv4/ipip.c | 3 + net/ipv4/netfilter/nf_nat_h323.c | 12 + net/ipv4/netfilter/nf_nat_pptp.c | 14 +- net/ipv4/netfilter/nf_nat_snmp_basic_main.c | 27 +- net/ipv4/netfilter/nf_reject_ipv4.c | 2 +- net/ipv4/tcp_bbr.c | 2 +- net/ipv4/tcp_ipv4.c | 4 +- net/ipv4/tcp_output.c | 8 +- net/ipv4/udp_bpf.c | 9 + net/ipv4/udp_tunnel_core.c | 10 +- net/ipv4/udp_tunnel_nic.c | 2 +- net/ipv4/xfrm4_input.c | 2 - net/ipv6/addrconf.c | 55 +- net/ipv6/ioam6_iptunnel.c | 8 +- net/ipv6/ip6_fib.c | 17 +- net/ipv6/ip6_gre.c | 6 + net/ipv6/ip6_tunnel.c | 10 + net/ipv6/ip6_vti.c | 3 + net/ipv6/mcast.c | 40 +- net/ipv6/ndisc.c | 8 +- net/ipv6/netfilter.c | 4 +- net/ipv6/netfilter/ip6t_ah.c | 5 + net/ipv6/netfilter/ip6t_hbh.c | 1 + net/ipv6/netfilter/ip6t_rt.c | 3 +- net/ipv6/netfilter/nf_conntrack_reasm.c | 3 +- net/ipv6/route.c | 9 +- net/ipv6/seg6.c | 3 + net/ipv6/sit.c | 3 + net/ipv6/xfrm6_input.c | 2 - net/kcm/kcmsock.c | 8 +- net/l2tp/l2tp_core.c | 2 +- net/llc/af_llc.c | 1 + net/llc/llc_conn.c | 1 - net/mac80211/main.c | 3 +- net/mac80211/rx.c | 34 +- net/mac80211/tx.c | 17 +- net/mac80211/util.c | 3 + net/mac802154/iface.c | 2 +- net/mac802154/scan.c | 1 + net/netfilter/ipset/ip_set_bitmap_gen.h | 4 +- net/netfilter/ipset/ip_set_bitmap_ip.c | 2 +- net/netfilter/ipset/ip_set_bitmap_ipmac.c | 2 +- net/netfilter/ipset/ip_set_bitmap_port.c | 2 +- net/netfilter/ipset/ip_set_core.c | 4 +- net/netfilter/ipset/ip_set_hash_gen.h | 12 +- net/netfilter/ipvs/ip_vs_app.c | 10 +- net/netfilter/ipvs/ip_vs_conn.c | 4 +- net/netfilter/ipvs/ip_vs_core.c | 36 +- net/netfilter/ipvs/ip_vs_proto_sctp.c | 18 +- net/netfilter/ipvs/ip_vs_proto_tcp.c | 11 +- net/netfilter/ipvs/ip_vs_proto_udp.c | 3 +- net/netfilter/ipvs/ip_vs_xmit.c | 6 +- net/netfilter/nf_conncount.c | 23 +- net/netfilter/nf_conntrack_amanda.c | 39 +- net/netfilter/nf_conntrack_bpf.c | 35 +- net/netfilter/nf_conntrack_broadcast.c | 4 + net/netfilter/nf_conntrack_core.c | 122 ++-- net/netfilter/nf_conntrack_ecache.c | 2 +- net/netfilter/nf_conntrack_expect.c | 184 +++--- net/netfilter/nf_conntrack_extend.c | 32 +- net/netfilter/nf_conntrack_ftp.c | 11 +- net/netfilter/nf_conntrack_h323_main.c | 129 ++-- net/netfilter/nf_conntrack_helper.c | 94 ++- net/netfilter/nf_conntrack_irc.c | 11 +- net/netfilter/nf_conntrack_netbios_ns.c | 20 +- net/netfilter/nf_conntrack_netlink.c | 32 +- net/netfilter/nf_conntrack_pptp.c | 92 +-- net/netfilter/nf_conntrack_proto_gre.c | 70 ++ net/netfilter/nf_conntrack_sane.c | 8 +- net/netfilter/nf_conntrack_seqadj.c | 19 +- net/netfilter/nf_conntrack_sip.c | 66 +- net/netfilter/nf_conntrack_snmp.c | 21 +- net/netfilter/nf_conntrack_tftp.c | 5 +- net/netfilter/nf_conntrack_timeout.c | 27 +- net/netfilter/nf_dup_netdev.c | 15 +- net/netfilter/nf_flow_table_core.c | 12 +- net/netfilter/nf_flow_table_ip.c | 107 +--- net/netfilter/nf_flow_table_path.c | 7 +- net/netfilter/nf_nat_core.c | 10 + net/netfilter/nf_nat_sip.c | 23 + net/netfilter/nf_queue.c | 14 + net/netfilter/nf_synproxy_core.c | 40 +- net/netfilter/nf_tables_api.c | 3 + net/netfilter/nfnetlink_cthelper.c | 81 ++- net/netfilter/nfnetlink_cttimeout.c | 112 ++-- net/netfilter/nfnetlink_osf.c | 6 +- net/netfilter/nfnetlink_queue.c | 3 + net/netfilter/nft_compat.c | 24 +- net/netfilter/nft_ct.c | 29 +- net/netfilter/nft_fib.c | 9 + net/netfilter/nft_fib_netdev.c | 29 +- net/netfilter/nft_fwd_netdev.c | 17 +- net/netfilter/nft_lookup.c | 10 +- net/netfilter/nft_meta.c | 5 +- net/netfilter/nft_payload.c | 16 +- net/netfilter/nft_set_pipapo.c | 34 +- net/netfilter/nft_set_pipapo.h | 8 + net/netfilter/nft_set_rbtree.c | 8 +- net/netfilter/nft_synproxy.c | 9 +- net/netfilter/xt_CT.c | 2 +- net/netfilter/xt_cluster.c | 2 +- net/netfilter/xt_connmark.c | 14 +- net/netfilter/xt_nat.c | 9 + net/netfilter/xt_physdev.c | 5 - net/netfilter/xt_rateest.c | 2 +- net/netfilter/xt_u32.c | 12 +- net/openvswitch/conntrack.c | 2 +- net/openvswitch/flow_netlink.c | 201 ++++-- net/psample/psample.c | 6 +- net/qrtr/af_qrtr.c | 2 +- net/rxrpc/ar-internal.h | 6 +- net/rxrpc/call_accept.c | 25 +- net/rxrpc/call_event.c | 5 +- net/rxrpc/call_object.c | 2 + net/rxrpc/conn_client.c | 2 +- net/rxrpc/conn_event.c | 9 +- net/rxrpc/input.c | 39 +- net/rxrpc/local_object.c | 2 +- net/rxrpc/oob.c | 12 +- net/rxrpc/recvmsg.c | 23 +- net/rxrpc/rxgk.c | 3 +- net/rxrpc/sendmsg.c | 3 +- net/sched/act_api.c | 13 +- net/sched/act_bpf.c | 2 +- net/sched/act_ct.c | 13 +- net/sched/act_pedit.c | 13 +- net/sched/cls_api.c | 25 +- net/sched/cls_bpf.c | 10 +- net/sched/cls_flow.c | 12 +- net/sched/sch_api.c | 2 +- net/sched/sch_cake.c | 13 +- net/sched/sch_cbs.c | 4 +- net/sched/sch_choke.c | 8 +- net/sched/sch_codel.c | 48 +- net/sched/sch_drr.c | 12 +- net/sched/sch_dualpi2.c | 122 ++-- net/sched/sch_etf.c | 8 +- net/sched/sch_ets.c | 4 +- net/sched/sch_fq.c | 6 +- net/sched/sch_fq_codel.c | 48 +- net/sched/sch_fq_pie.c | 4 +- net/sched/sch_generic.c | 51 +- net/sched/sch_hfsc.c | 28 +- net/sched/sch_hhf.c | 34 +- net/sched/sch_htb.c | 18 +- net/sched/sch_mq.c | 5 +- net/sched/sch_mqprio.c | 18 +- net/sched/sch_multiq.c | 6 +- net/sched/sch_netem.c | 10 +- net/sched/sch_prio.c | 4 +- net/sched/sch_qfq.c | 6 +- net/sched/sch_red.c | 4 +- net/sched/sch_sfb.c | 4 +- net/sched/sch_sfq.c | 9 +- net/sched/sch_skbprio.c | 4 +- net/sched/sch_taprio.c | 6 +- net/sched/sch_tbf.c | 6 +- net/sched/sch_teql.c | 128 ++-- net/sctp/diag.c | 67 +- net/sctp/protocol.c | 13 +- net/sctp/sm_make_chunk.c | 15 +- net/sctp/sm_statefuns.c | 64 +- net/sctp/socket.c | 38 +- net/smc/smc_cdc.c | 15 +- net/socket.c | 30 +- net/sunrpc/clnt.c | 19 +- net/sunrpc/svc.c | 10 + net/sunrpc/svcsock.c | 10 + net/sunrpc/sysfs.c | 4 +- net/sunrpc/xdr.c | 14 +- net/sunrpc/xprtrdma/backchannel.c | 5 +- net/sunrpc/xprtrdma/frwr_ops.c | 2 +- net/sunrpc/xprtrdma/rpc_rdma.c | 157 +++-- net/sunrpc/xprtrdma/transport.c | 68 +- net/sunrpc/xprtrdma/verbs.c | 126 +++- net/sunrpc/xprtrdma/xprt_rdma.h | 4 +- net/sunrpc/xprtsock.c | 16 +- net/tipc/bearer.c | 1 + net/tipc/core.c | 9 +- net/tipc/discover.c | 14 +- net/tipc/name_distr.c | 13 +- net/tipc/netlink.c | 12 + net/tipc/socket.c | 9 +- net/tipc/udp_media.c | 53 +- net/tls/tls_sw.c | 11 + net/wireless/nl80211.c | 2 +- net/wireless/pmsr.c | 4 +- net/wireless/scan.c | 5 +- net/xfrm/espintcp.c | 34 +- net/xfrm/xfrm_input.c | 29 +- net/xfrm/xfrm_interface_core.c | 3 + net/xfrm/xfrm_nat_keepalive.c | 15 +- net/xfrm/xfrm_policy.c | 27 +- net/xfrm/xfrm_state.c | 26 +- net/xfrm/xfrm_user.c | 20 +- rust/Makefile | 2 +- rust/helpers/uaccess.c | 2 +- rust/kernel/alloc/kvec.rs | 4 +- rust/kernel/devres.rs | 6 +- samples/damon/mtier.c | 3 + samples/trace_events/trace-events-sample.c | 4 + scripts/kconfig/conf.c | 6 +- scripts/livepatch/klp-build | 41 +- security/apparmor/af_unix.c | 65 +- security/apparmor/apparmorfs.c | 113 +++- security/apparmor/domain.c | 58 +- security/apparmor/file.c | 12 +- security/apparmor/include/apparmorfs.h | 12 + security/apparmor/label.c | 2 +- security/apparmor/lsm.c | 2 +- security/apparmor/net.c | 1 + security/apparmor/policy.c | 20 +- security/apparmor/policy_unpack.c | 6 +- security/apparmor/procattr.c | 2 + security/apparmor/task.c | 2 +- security/integrity/evm/evm_secfs.c | 16 +- security/integrity/ima/ima_appraise.c | 5 +- security/integrity/ima/ima_policy.c | 3 +- security/keys/keyring.c | 2 +- security/landlock/fs.c | 14 + security/landlock/fs.h | 10 + security/landlock/net.c | 11 +- security/landlock/task.c | 11 + security/selinux/hooks.c | 80 ++- sound/core/init.c | 11 +- sound/core/pcm_compat.c | 4 +- sound/core/pcm_native.c | 7 +- sound/core/seq/oss/seq_oss_event.c | 6 +- sound/core/seq/oss/seq_oss_event.h | 3 +- sound/core/seq/oss/seq_oss_ioctl.c | 5 +- sound/core/seq/oss/seq_oss_midi.c | 6 +- sound/core/seq/oss/seq_oss_midi.h | 2 +- sound/core/seq/oss/seq_oss_readq.c | 77 ++- sound/core/seq/oss/seq_oss_rw.c | 5 +- sound/core/seq/seq_clientmgr.c | 33 +- sound/core/seq/seq_fifo.c | 52 +- sound/core/seq/seq_memory.c | 2 +- sound/core/seq/seq_midi.c | 55 +- sound/drivers/aloop.c | 1 - sound/hda/codecs/conexant.c | 3 - sound/hda/codecs/realtek/alc269.c | 12 +- sound/hda/codecs/side-codecs/tas2781_hda_i2c.c | 3 + sound/hda/codecs/side-codecs/tas2781_hda_spi.c | 3 + sound/hda/controllers/Kconfig | 2 +- sound/hda/core/regmap.c | 4 +- sound/soc/amd/acp/acp-sdw-legacy-mach.c | 7 +- sound/soc/amd/acp/acp-sdw-sof-mach.c | 7 +- sound/soc/codecs/adau1372.c | 5 + sound/soc/codecs/aw88261.c | 12 +- sound/soc/codecs/cs35l56-shared.c | 4 +- sound/soc/codecs/cs35l56.c | 27 +- sound/soc/codecs/cs530x.c | 29 +- sound/soc/codecs/cs530x.h | 6 - sound/soc/codecs/hdac_hdmi.c | 4 +- sound/soc/codecs/lpass-va-macro.c | 7 +- sound/soc/codecs/rt5575-spi.c | 2 +- sound/soc/codecs/sma1307.c | 35 +- sound/soc/codecs/tlv320aic3x.c | 25 +- sound/soc/codecs/wm_adsp.c | 7 + sound/soc/fsl/fsl_asrc_dma.c | 20 + sound/soc/fsl/fsl_audmix.c | 6 + sound/soc/mediatek/mt8183/mt8183-afe-pcm.c | 23 +- sound/soc/mediatek/mt8189/mt8189-afe-pcm.c | 38 +- sound/soc/mediatek/mt8192/mt8192-afe-pcm.c | 21 +- sound/soc/meson/aiu-acodec-ctrl.c | 3 + sound/soc/meson/aiu-codec-ctrl.c | 3 + sound/soc/qcom/qdsp6/q6apm.c | 8 + sound/soc/renesas/rcar/rsnd.h | 2 +- sound/soc/sdca/sdca_asoc.c | 3 + sound/soc/sdw_utils/soc_sdw_utils.c | 1 + sound/soc/soc-dapm.c | 49 +- sound/soc/soc-topology.c | 37 +- sound/soc/sof/intel/Kconfig | 6 +- sound/soc/sof/ipc3-control.c | 79 ++- sound/soc/sof/ipc4-control.c | 34 +- sound/soc/sof/topology.c | 7 +- sound/soc/tegra/tegra210_ahub.c | 4 +- sound/usb/fcp.c | 2 + sound/usb/midi2.c | 5 + sound/usb/mixer_scarlett2.c | 201 +++++- sound/usb/qcom/mixer_usb_offload.c | 2 +- sound/usb/qcom/qc_audio_offload.c | 30 +- sound/xen/xen_snd_front_alsa.c | 17 +- sound/xen/xen_snd_front_evtchnl.c | 28 +- sound/xen/xen_snd_front_evtchnl.h | 6 +- tools/bpf/bpftool/cgroup.c | 14 +- tools/bpf/bpftool/gen.c | 2 +- tools/bpf/bpftool/net.c | 4 +- tools/include/nolibc/getopt.h | 2 +- tools/include/nolibc/stackprotector.h | 3 +- tools/include/uapi/linux/bpf.h | 2 + tools/include/uapi/linux/if_link.h | 2 + tools/lib/api/fs/fs.c | 19 +- tools/lib/bpf/btf.c | 4 +- tools/lib/bpf/gen_loader.c | 81 ++- tools/lib/bpf/libbpf.c | 9 +- tools/lib/bpf/strset.c | 62 +- tools/lib/bpf/usdt.c | 16 +- tools/lib/symbol/kallsyms.c | 5 +- tools/net/ynl/Makefile | 2 +- tools/net/ynl/generated/Makefile | 2 +- tools/net/ynl/lib/Makefile | 2 +- tools/objtool/elf.c | 75 +-- tools/objtool/include/objtool/elf.h | 32 +- tools/objtool/klp-diff.c | 133 ++-- tools/perf/Makefile.config | 1 + tools/perf/arch/common.c | 4 +- tools/perf/arch/powerpc/util/auxtrace.c | 6 + tools/perf/arch/x86/tests/amd-ibs-period.c | 2 +- tools/perf/bench/inject-buildid.c | 9 +- tools/perf/builtin-annotate.c | 3 +- tools/perf/builtin-buildid-list.c | 4 +- tools/perf/builtin-c2c.c | 28 +- tools/perf/builtin-diff.c | 3 +- tools/perf/builtin-inject.c | 172 ++++- tools/perf/builtin-record.c | 2 + tools/perf/builtin-report.c | 7 +- tools/perf/builtin-sched.c | 177 +++-- tools/perf/builtin-script.c | 6 +- tools/perf/builtin-stat.c | 50 +- tools/perf/pmu-events/amd_metrics.py | 2 +- tools/perf/pmu-events/metric.py | 1 - tools/perf/tests/code-reading.c | 7 +- tools/perf/tests/dlfilter-test.c | 8 +- tools/perf/tests/pmu-events.c | 24 +- tools/perf/tests/sample-parsing.c | 5 +- tools/perf/ui/browser.c | 3 + tools/perf/ui/browsers/annotate.c | 5 +- tools/perf/util/Build | 1 + tools/perf/util/annotate-data.c | 27 +- tools/perf/util/arm-spe.c | 28 +- tools/perf/util/auxtrace.c | 3 +- tools/perf/util/bpf-event.c | 52 +- tools/perf/util/bpf-event.h | 4 +- tools/perf/util/bpf-utils.c | 16 + tools/perf/util/build-id.c | 7 +- tools/perf/util/callchain.c | 15 + tools/perf/util/callchain.h | 1 + tools/perf/util/config.c | 4 + tools/perf/util/cpumap.c | 49 +- tools/perf/util/cs-etm-base.c | 4 +- tools/perf/util/cs-etm-decoder/cs-etm-decoder.c | 21 +- tools/perf/util/cs-etm.c | 310 ++++++--- tools/perf/util/cs-etm.h | 8 +- tools/perf/util/data-convert-json.c | 1 + tools/perf/util/debuginfo.c | 9 +- tools/perf/util/disasm.c | 7 +- tools/perf/util/dso.c | 48 +- tools/perf/util/dwarf-aux.c | 39 +- tools/perf/util/dwarf-aux.h | 5 + tools/perf/util/env.h | 14 + tools/perf/util/event.c | 15 +- tools/perf/util/header.c | 91 ++- tools/perf/util/hist.c | 9 +- tools/perf/util/hist.h | 1 + tools/perf/util/hwmon_pmu.c | 36 +- tools/perf/util/intel-bts.c | 3 +- .../util/intel-pt-decoder/intel-pt-insn-decoder.c | 11 +- tools/perf/util/intel-pt.c | 35 +- tools/perf/util/libdw.c | 49 +- tools/perf/util/machine.c | 42 +- tools/perf/util/maps.c | 156 ++++- tools/perf/util/maps.h | 3 + tools/perf/util/mmap.c | 20 +- tools/perf/util/pmu.c | 10 +- tools/perf/util/probe-finder.c | 102 +-- tools/perf/util/sample.h | 2 + tools/perf/util/session.c | 5 + tools/perf/util/srcline.c | 9 +- tools/perf/util/srcline.h | 1 + tools/perf/util/svghelper.c | 10 +- tools/perf/util/symbol-elf.c | 121 ++-- tools/perf/util/symbol-minimal.c | 16 +- tools/perf/util/symbol.c | 19 +- tools/perf/util/symbol_conf.h | 10 + tools/perf/util/synthetic-events.c | 25 +- tools/perf/util/synthetic-events.h | 6 +- tools/perf/util/thread.c | 5 + tools/perf/util/tool.c | 6 + tools/perf/util/unwind-libdw.c | 20 +- tools/perf/util/unwind-libunwind-local.c | 27 +- tools/perf/util/unwind-libunwind.c | 2 +- tools/perf/util/unwind.c | 104 +++ tools/perf/util/unwind.h | 65 +- tools/power/x86/intel-speed-select/isst-daemon.c | 9 +- tools/testing/cxl/test/cxl.c | 10 +- tools/testing/cxl/test/cxl_translate.c | 2 +- tools/testing/cxl/test/mem.c | 45 +- tools/testing/kunit/kunit_parser.py | 12 +- tools/testing/selftests/Makefile | 2 +- tools/testing/selftests/bpf/README.rst | 2 +- .../selftests/bpf/prog_tests/bpf_attr_size.c | 69 ++ tools/testing/selftests/bpf/prog_tests/bpf_nf.c | 6 + .../selftests/bpf/prog_tests/fill_link_info.c | 2 +- .../testing/selftests/bpf/prog_tests/htab_update.c | 4 +- .../testing/selftests/bpf/prog_tests/linked_list.c | 33 +- tools/testing/selftests/bpf/prog_tests/map_kptr.c | 10 +- .../prog_tests/raw_tp_writable_reject_bad_access.c | 57 ++ .../raw_tp_writable_reject_nbd_invalid.c | 43 -- .../selftests/bpf/prog_tests/refcounted_kptr.c | 8 +- tools/testing/selftests/bpf/prog_tests/verifier.c | 2 + .../selftests/bpf/prog_tests/verifier_log.c | 1 + .../selftests/bpf/progs/bpf_iter_task_vmas.c | 2 +- .../testing/selftests/bpf/progs/cpumask_success.c | 2 +- tools/testing/selftests/bpf/progs/file_reader.c | 2 +- tools/testing/selftests/bpf/progs/htab_update.c | 4 +- tools/testing/selftests/bpf/progs/linked_list.c | 71 +++ .../testing/selftests/bpf/progs/refcounted_kptr.c | 20 +- tools/testing/selftests/bpf/progs/test_bpf_nf.c | 26 + .../testing/selftests/bpf/progs/test_tunnel_kern.c | 13 +- .../testing/selftests/bpf/progs/verifier_bounds.c | 14 +- .../selftests/bpf/progs/verifier_ptr_to_buf.c | 27 + .../selftests/bpf/progs/verifier_raw_tp_writable.c | 16 + tools/testing/selftests/bpf/progs/xdp_flowtable.c | 7 +- tools/testing/selftests/bpf/vmtest.sh | 2 +- tools/testing/selftests/drivers/net/hw/tso.py | 16 +- .../ftrace/test.d/00basic/test_ownership.tc | 2 +- .../ftrace/test.d/00basic/trace_marker_raw.tc | 14 +- tools/testing/selftests/gpio/.gitignore | 1 + tools/testing/selftests/hid/Makefile | 2 +- tools/testing/selftests/hid/hid_bpf.c | 36 +- tools/testing/selftests/hid/progs/hid.c | 15 + .../selftests/landlock/scoped_signal_test.c | 237 ++++++- .../selftests/mm/charge_reserved_hugetlb.sh | 45 +- tools/testing/selftests/mm/compaction_test.c | 3 + tools/testing/selftests/mm/hmm-tests.c | 125 +++- tools/testing/selftests/mm/hugepage-mremap.c | 32 +- .../selftests/mm/hugetlb_reparenting_test.sh | 60 +- tools/testing/selftests/mm/pkey-arm64.h | 3 +- tools/testing/selftests/mm/run_vmtests.sh | 66 +- tools/testing/selftests/mm/split_huge_page_test.c | 27 +- tools/testing/selftests/mm/uffd-stress.c | 5 +- tools/testing/selftests/net/broadcast_ether_dst.sh | 2 +- tools/testing/selftests/net/lib.sh | 25 +- .../selftests/net/netfilter/nft_flowtable.sh | 8 +- tools/testing/selftests/net/tcp_mmap.c | 4 + tools/testing/selftests/net/tls.c | 8 +- tools/testing/selftests/net/vlan_bridge_binding.sh | 2 +- tools/testing/selftests/rseq/Makefile | 6 +- tools/testing/selftests/vfio/Makefile | 7 +- tools/testing/selftests/vfio/lib/libvfio.mk | 6 +- tools/tracing/rtla/src/actions.c | 2 + tools/tracing/rtla/src/common.c | 19 +- tools/tracing/rtla/src/common.h | 1 - tools/tracing/rtla/src/timerlat.c | 2 +- tools/tracing/rtla/src/timerlat_hist.c | 4 +- tools/tracing/rtla/src/timerlat_top.c | 3 +- tools/virtio/vringh_test.c | 5 + virt/kvm/kvm_main.c | 16 +- 1931 files changed, 28207 insertions(+), 14617 deletions(-)

3 months, 1 week

← Newer
1
...
8
9
10
11
12
13
14
...
3317
Older →

Jump to page:

2026

2025

2024

2023

2022

2021

2020

2019

2018

2017

Lkft-triage