Lkft-triage

lkft-triage@lists.linaro.org

19 participants
34241 discussions

[PATCH 7.1 0000/2079] 7.1.5-rc2 review

by Greg Kroah-Hartman

This is the start of the stable review cycle for the 7.1.5 release. There are 2079 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know. Responses should be made by Fri, 24 Jul 2026 14:26:57 +0000. Anything received after that time might be too late. The whole patch series can be found in one patch at: https://www.kernel.org/pub/linux/kernel/v7.x/stable-review/patch-7.1.5-rc2.… or in the git tree and branch at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-7.1.y and the diffstat can be found below. thanks, greg k-h ------------- Pseudo-Shortlog of commits: Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> Linux 7.1.5-rc2 Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> Revert "gpib: cb7210: Fix region leak when request_irq fails" Thomas Gleixner <tglx(a)kernel.org> posix-cpu-timers: Prevent UAF caused by non-leader exec() race Thomas Gleixner <tglx(a)kernel.org> posix-timers: Expand timer_[re]arm() callbacks with a boolean return value Dillon Varone <Dillon.Varone(a)amd.com> drm/amd/display: Fix Color Manager (3DLUT, Shaper, Blend) Christoph Hellwig <hch(a)lst.de> iomap: consolidate bio submission Namjae Jeon <linkinjeon(a)kernel.org> exfat: fix implicit declaration of brelse() Namjae Jeon <linkinjeon(a)kernel.org> exfat: add data_start_bytes and exfat_cluster_to_phys_bytes() helper Namjae Jeon <linkinjeon(a)kernel.org> exfat: add balloc parameter to exfat_map_cluster() for iomap support Namjae Jeon <linkinjeon(a)kernel.org> exfat: replace unsafe macros with static inline functions Eric Biggers <ebiggers(a)kernel.org> crypto: xilinx-trng - Remove crypto_rng interface Pratyush Yadav (Google) <pratyush(a)kernel.org> liveupdate: validate session type before performing operation Mauricio Faria de Oliveira <mfo(a)igalia.com> usb: atm: ueagle-atm: wait for pre-firmware load in .disconnect() Mauricio Faria de Oliveira <mfo(a)igalia.com> usb: atm: ueagle-atm: remove function entry/exit debug messages Mauricio Faria de Oliveira <mfo(a)igalia.com> usb: atm: ueagle-atm: use dev_dbg() for 'device found' message Christoph Hellwig <hch(a)lst.de> xfs: add newly added RTGs to the free pool in growfs Christoph Hellwig <hch(a)lst.de> xfs: factor out a xfs_zone_mark_free helper Namjae Jeon <linkinjeon(a)kernel.org> ksmbd: use opener credentials for FSCTL mutations ChenXiaoSong <chenxiaosong(a)kylinos.cn> smb: move compression definitions into common/fscc.h Davide Ornaghi <d.ornaghi97(a)gmail.com> ksmbd: fix path resolution in ksmbd_vfs_kern_path_create Siwei Zhang <oss(a)fourdim.xyz> Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_new_connection_cb() Pauli Virtanen <pav(a)iki.fi> Bluetooth: 6lowpan: fix cyclic locking warning on netdev unregister Chris Mason <clm(a)meta.com> binder: cache secctx size before release zeroes it Jisheng Zhang <jszhang(a)kernel.org> binder: Use LIST_HEAD() to initialize on stack list head Cássio Gabriel <cassiogabrielcontato(a)gmail.com> ALSA: hda/tas2781: Cancel async firmware request at unbind Cássio Gabriel <cassiogabrielcontato(a)gmail.com> firmware_loader: Add cancel helper for async requests Geoffrey D. Bennett <g(a)b4.vu> ALSA: scarlett2: Update offsets for 2i2 Gen 4 firmware 2417 Geoffrey D. Bennett <g(a)b4.vu> ALSA: scarlett2: Allow selecting config_set by firmware version Zhang Lixu <lixu.zhang(a)intel.com> iio: hid-sensor-rotation: Fix stale or zero output when reading raw values Keshav Verma <iganschel(a)gmail.com> f2fs: fix listxattr handling of corrupted xattr entries Chao Yu <chao(a)kernel.org> f2fs: fix potential deadlock in gc_merge path of f2fs_balance_fs() Ruipeng Qi <ruipengqi3(a)gmail.com> f2fs: fix potential deadlock in f2fs_balance_fs() Bartosz Golaszewski <bartosz.golaszewski(a)oss.qualcomm.com> device property: initialize the remaining fields of fwnode_handle in fwnode_init() Zenghui Yu <yuzenghui(a)huawei.com> samples/damon/mtier: fail early if address range parameters are invalid SeongJae Park <sj(a)kernel.org> mm/damon/core: trace esz at first setup Sun Jian <sun.jian.kdev(a)gmail.com> bpf: Reject negative const offsets for buffer pointers Luke Wang <ziniu.wang_1(a)nxp.com> mmc: sdhci-esdhc-imx: fix resume error handling Luke Wang <ziniu.wang_1(a)nxp.com> mmc: sdhci-esdhc-imx: make non-fatal errors non-blocking in suspend Luke Wang <ziniu.wang_1(a)nxp.com> mmc: sdhci-esdhc-imx: use pm_runtime_resume_and_get() in suspend Luke Wang <ziniu.wang_1(a)nxp.com> mmc: sdhci-esdhc-imx: disable irq during suspend to fix unhandled interrupt Luke Wang <ziniu.wang_1(a)nxp.com> mmc: sdhci-esdhc-imx: fix esdhc_change_pinstate() to allow default state restore Luke Wang <ziniu.wang_1(a)nxp.com> mmc: sdhci-esdhc-imx: restore DLL override for DDR modes on resume Luke Wang <ziniu.wang_1(a)nxp.com> mmc: sdhci-esdhc-imx: remove unnecessary mmc_card_wake_sdio_irq check for tuning save/restore Sergey Shtylyov <s.shtylyov(a)auroraos.dev> mmc: sdhci-of-dwcmshc: check bus clock enable result in the probe() method Lad Prabhakar <prabhakar.mahadev-lad.rj(a)bp.renesas.com> mmc: mmc_test: Fix __counted_by handling after kzalloc_flex() conversion Ao Sun <ao.sun(a)transsion.com> mmc: block: fix RPMB device unregister ordering Pengpeng Hou <pengpeng(a)iscas.ac.cn> mtd: rawnand: lpc32xx_slc: fail DMA transfer on completion timeout Pengpeng Hou <pengpeng(a)iscas.ac.cn> mtd: rawnand: lpc32xx_mlc: fail DMA transfers on timeout Pengpeng Hou <pengpeng(a)iscas.ac.cn> mtd: rawnand: fsl_ifc: return errors for failed page reads Runyu Xiao <runyu.xiao(a)seu.edu.cn> mmc: vub300: defer reset until cmd_mutex is unlocked Pengpeng Hou <pengpeng(a)iscas.ac.cn> mtd: mchp23k256: use SPI match data for chip caps Pengpeng Hou <pengpeng(a)iscas.ac.cn> mtd: onenand: samsung: report DMA completion timeouts Xu Rao <raoxu(a)uniontech.com> mtd: virt-concat: free duplicate generated name Rafael Beims <rafael.beims(a)toradex.com> wifi: mwifiex: fix permanently busy scans after multiple roam iterations Zhao Li <enderaoelyther(a)gmail.com> wifi: mac80211: validate extension-frame layout before RX Zhiling Zou <roxy520tt(a)gmail.com> wifi: mac80211: free ack status frame on TX header build failure Zhao Li <enderaoelyther(a)gmail.com> wifi: ieee80211: validate MLE common info length Haofeng Li <lihaofeng(a)kylinos.cn> wifi: cfg80211: validate EHT MLE before MLD ID read Ethan Nelson-Moore <enelsonmoore(a)gmail.com> powerpc/uaccess: correct check for CONFIG_PPC_E500 in mask_user_address() Junrui Luo <moonafterrain(a)outlook.com> powerpc/spufs: fix out-of-bounds access in spufs_mem_mmap_access() Zhao Dongdong <zhaodongdong(a)kylinos.cn> reset: sunxi: fix memory region leak on ioremap failure Robby Cai <robby.cai(a)nxp.com> reset: imx7: Correct polarity of MIPI CSI resets on i.MX8MQ Florian Westphal <fw(a)strlen.de> ipvs: reload ip header after head reallocation Julian Anastasov <ja(a)ssi.bg> ipvs: fix more places with wrong ipv6 transport offsets Maoyi Xie <maoyixie.tju(a)gmail.com> memstick: ms_block: reject a card that reports too many blocks James Raphael Tiovalen <jamestiotio(a)gmail.com> macsec: fix promiscuity refcount leak in macsec_dev_open() Xuanqiang Luo <luoxuanqiang(a)kylinos.cn> llc: fix SAP refcount leak when creating incoming sockets Eric Biggers <ebiggers(a)kernel.org> crypto: aes - Fix conditions for selecting MAC dependencies Laxman Acharya Padhya <acharyalaxman8848(a)gmail.com> Bluetooth: btrtl: validate firmware patch bounds Asim Viladi Oglu Manizada <manizada(a)pm.me> net: openvswitch: reject oversized nested action attrs Abhishek Ojha <Abhishek.ojha(a)savoirfairelinux.com> regulator: ltc3676: Fix incorrect IRQSTAT bit offsets Aurelien Jarno <aurelien(a)aurel32.net> arch/riscv: vdso: remove CFI landing pad from rt_sigreturn Thomas Weißschuh <thomas.weissschuh(a)linutronix.de> riscv: vdso: Do not use LTO for the vDSO Maoyi Xie <maoyixie.tju(a)gmail.com> wifi: brcmfmac: cyw: fix heap overflow on a short auth frame Dawei Feng <dawei.feng(a)seu.edu.cn> wifi: mac80211: fix memory leak in ieee80211_register_hw() Rafael Beims <rafael.beims(a)toradex.com> wifi: mwifiex: fix roaming to different channel in host_mlme mode Runyu Xiao <runyu.xiao(a)seu.edu.cn> wifi: rt2x00: avoid full teardown before work setup in probe Zhiping Zhang <zhipingz(a)meta.com> net/mlx5: free mlx5_st_idx_data on final dealloc Thorsten Blum <thorsten.blum(a)linux.dev> powerpc/pseries: fix memory leak on krealloc failure in papr_init Luke Wang <ziniu.wang_1(a)nxp.com> mmc: sdhci-esdhc-imx: restore pinctrl before restoring ios timing on resume Thomas Huth <thuth(a)redhat.com> selftests/landlock: Fix screwed up pointers in the scoped_signal_test Thomas Huth <thuth(a)redhat.com> selftests/landlock: Skip scoped_signal subtest with MSG_OOB if not available Peng Fan <peng.fan(a)nxp.com> pmdomain: imx: Fix i.MX8MP VC8000E power up sequence Peng Fan <peng.fan(a)nxp.com> pmdomain: imx: Fix i.MX8MP power notifier AngeloGioacchino Del Regno <angelogioacchino.delregno(a)collabora.com> pmdomain: mediatek: Fix possible nullptr KP in HWV cleanup/on-check Guoniu Zhou <guoniu.zhou(a)oss.nxp.com> pmdomain: imx93-blk-ctrl: Extract PHY as shared domain for DSI/CSI Farhad Alemi <farhad.alemi(a)berkeley.edu> cgroup/cpuset: rebind mm mempolicy to effective_mems, not mems_allowed Hui Wang <hui.wang(a)canonical.com> selftests/rseq: Fix a building error for riscv arch Gerald Schaefer <gerald.schaefer(a)linux.ibm.com> s390/mm: Fix type mismatch in get_align_mask(). Heiko Carstens <hca(a)linux.ibm.com> s390/diag: Add missing array_index_nospec() call to memtop_get_page_count() Crystal Wood <crwood(a)redhat.com> tracing/osnoise: Call synchronize_rcu() when unregistering Tao Liu <ltao(a)redhat.com> riscv: Prevent NULL pointer dereference in machine_kexec_prepare() Michael Bommarito <michael.bommarito(a)gmail.com> drbd: reject data replies with an out-of-range payload size TJ Adams <tadamsjr(a)google.com> ata: libata-core: Allow capacity transition to zero for locked drives TJ Adams <tadamsjr(a)google.com> ata: libata-core: Skip HPA resize for locked drives Reinette Chatre <reinette.chatre(a)intel.com> fs/resctrl: Fix double-add of pseudo-locked region's RMID to free list Tony Luck <tony.luck(a)intel.com> fs/resctrl: Free mon_data structures on rdt_get_tree() failure Jinjie Ruan <ruanjinjie(a)huawei.com> cpu/hotplug: Fix NULL kobject warning in cpuhp_smt_enable() Jinjie Ruan <ruanjinjie(a)huawei.com> arm64: smp: Fix hot-unplug tearing by forcing unregistration Zhu Lingshan <lingshan.zhu(a)amd.com> amdkfd: properly free secondary context id Théo Lebrun <theo.lebrun(a)bootlin.com> net: macb: drop in-flight Tx SKBs on close Dust Li <dust.li(a)linux.alibaba.com> dibs: loopback: validate offset and size in move_data() Daehyeon Ko <4ncienth(a)gmail.com> macsec: don't read an unset MAC header in macsec_encrypt() Yizhou Zhao <zhaoyz24(a)mails.tsinghua.edu.cn> ipvs: reset full ip_vs_seq structs in ip_vs_conn_new Yizhou Zhao <zhaoyz24(a)mails.tsinghua.edu.cn> ipvs: use parsed transport offset in SCTP state lookup Shuangpeng Bai <shuangpeng.kernel(a)gmail.com> llc: fix SAP refcount leak in llc_ui_autobind() Nirmoy Das <nirmoyd(a)nvidia.com> selftests: net: make busywait timeout clock portable Dawei Feng <dawei.feng(a)seu.edu.cn> octeontx2-pf: fix SQB pointer leak on init failure Yousef Alhouseen <alhouseenyousef(a)gmail.com> mac802154: remove interfaces with RCU list deletion Gerald Schaefer <gerald.schaefer(a)linux.ibm.com> s390/monwriter: Reject buffer reuse with different data length Haoxiang Li <haoxiang_li2024(a)163.com> irqchip/irq-riscv-imsic-early: Fix fwnode leak on state setup failure Zi Yan <ziy(a)nvidia.com> mm/compaction: handle free_pages_prepare() properly in compaction_free() Martin Kaiser <martin(a)kaiser.cx> riscv: probes: save original sp in rethook trampoline HyeongJun An <sammiee5311(a)gmail.com> hwmon: (asus_atk0110) Check package count before accessing element Haoxiang Li <haoxiang_li2024(a)163.com> net: ipa: fix SMEM state handle leaks in SMP2P init Maoyi Xie <maoyixie.tju(a)gmail.com> net: wwan: iosm: bound device offsets in the MUX downlink decoder Bryam Vargas <hexlabsecurity(a)proton.me> ata: libata-core: Reject an invalid concurrent positioning ranges count Wentao Liang <vulab(a)iscas.ac.cn> ata: pata_pxa: Fix DMA channel leak on probe error Bryam Vargas <hexlabsecurity(a)proton.me> ata: libata-core: Add NOLPM quirk for PNY CS900 1TB SSD Dawei Feng <dawei.feng(a)seu.edu.cn> net/mlx5: HWS, fix matcher leak on resize target setup failure Bryam Vargas <hexlabsecurity(a)proton.me> orangefs: keep the readdir entry size 64-bit in fill_from_part() Masami Hiramatsu (Google) <mhiramat(a)kernel.org> tracing/probes: Fix double addition of offset for @+FOFFSET Joshua Crofts <joshua.crofts1(a)gmail.com> hwmon: (max1619) add missing 'select REGMAP' to Kconfig David Lee <david.lee(a)trailofbits.com> fhandle: reject detached mounts in capable_wrt_mount() Bryam Vargas <hexlabsecurity(a)proton.me> net/sched: sch_taprio: Replace direct dequeue call with peek and qdisc_dequeue_peeked Bryam Vargas <hexlabsecurity(a)proton.me> net/sched: sch_multiq: Replace direct dequeue call with peek and qdisc_dequeue_peeked Andrea Righi <arighi(a)nvidia.com> net: lan743x: Initialize eth_syslock spinlock before use Haoxiang Li <haoxiang_li2024(a)163.com> fsl/fman: Free init resources on KeyGen failure in fman_init() Runyu Xiao <runyu.xiao(a)seu.edu.cn> hwmon: (occ) unregister sysfs devices outside occ lock Xu Rao <raoxu(a)uniontech.com> ACPI: TAD: Check AC wake capability before enabling wakeup Haoxiang Li <haoxiang_li2024(a)163.com> net: liquidio: fix BAR resource leak on PF number failure Pengpeng Hou <pengpeng(a)iscas.ac.cn> hwmon: (w83793) remove vrm sysfs file on probe failure Pengpeng Hou <pengpeng(a)iscas.ac.cn> hwmon: (w83627hf) remove VID sysfs files on error and remove Conor Dooley <conor.dooley(a)microchip.com> rtc: mpfs: fix counter upload completion condition Eric Biggers <ebiggers(a)kernel.org> fscrypt: Replace mk_users keyring with simple list Lad Prabhakar <prabhakar.mahadev-lad.rj(a)bp.renesas.com> rtc: renesas-rtca3: Fix PIE clear polling condition in alarm setup error path Abdun Nihaal <nihaal(a)cse.iitm.ac.in> bnx2x: fix potential memory leak in bnx2x_alloc_mem_bp() Wentao Liang <vulab(a)iscas.ac.cn> ipmi: fix refcount leak in i_ipmi_request() Sabrina Dubroca <sd(a)queasysnail.net> espintcp: use sk_msg_free_partial to fix partial send Matt Fleming <mfleming(a)cloudflare.com> ipmi: Fix user refcount underflow in event delivery Hongchen Zhang <zhanghongchen(a)loongson.cn> LoongArch: Fix missing dirty page tracking in {pte,pmd}_wrprotect() Xuewen Wang <wangxuewen(a)kylinos.cn> LoongArch: Fix nr passing in set_direct_map_valid_noflush() Biju Das <biju.das.jz(a)bp.renesas.com> pwm: rzg2l-gpt: Fix period_ticks type from u32 to u64 Thomas Weißschuh <thomas.weissschuh(a)linutronix.de> riscv: vdso: Always declare vdso_start symbols Marc Zyngier <maz(a)kernel.org> KVM: arm64: Fix propagation of TLBI level in kvm_pgtable_stage2_relax_perms() Pablo Neira Ayuso <pablo(a)netfilter.org> netfilter: nfnetlink_cthelper: cap to maximum number of expectation per master on updates Shuicheng Lin <shuicheng.lin(a)intel.com> drm/xe/userptr: Stub notifier_lock helpers when DRM_GPUSVM=n Rafael J. Wysocki <rafael.j.wysocki(a)intel.com> ACPICA: Define acpi_ut_safe_strncpy() as strscpy_pad() alias Jamal Hadi Salim <jhs(a)mojatatu.com> net/sched: sch_teql: move rcu_read_lock()/spin_lock() from _bh variants Daniel Gibson <daniel(a)gibson.sh> platform/x86/amd/pmc: Avoid logging "(null)" for DMI values Pablo Neira Ayuso <pablo(a)netfilter.org> netfilter: nfnetlink_cthelper: cap to maximum number of expectation per master Gil Portnoy <dddhkts1(a)gmail.com> ksmbd: fix stack buffer overflow in multichannel session-key copy Junrui Luo <moonafterrain(a)outlook.com> octeontx2-af: cn10k: restrict VF LMTLINE sharing to its own PF Ankit Garg <nktgrg(a)google.com> gve: fix header buffer corruption with header-split and HW-GRO Shitalkumar Gandhi <shital.gandhi45(a)gmail.com> ieee802154: ca8210: fix pointer truncation in kfifo on 64-bit Shitalkumar Gandhi <shital.gandhi45(a)gmail.com> ieee802154: ca8210: fix cas_ctl leak on spi_async failure Michael Bommarito <michael.bommarito(a)gmail.com> ieee802154: allow legacy LLSEC ADD/DEL ops to pass strict validation Michael Bommarito <michael.bommarito(a)gmail.com> ieee802154: admin-gate legacy LLSEC dump operations Haoxiang Li <haoxiang_li2024(a)163.com> octeontx2-af: Free BPID bitmap on setup failure Maoyi Xie <maoyixie.tju(a)gmail.com> net: ip6_tunnel: require CAP_NET_ADMIN in the device netns for changelink Maoyi Xie <maoyixie.tju(a)gmail.com> net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink Maoyi Xie <maoyixie.tju(a)gmail.com> net: ipip: require CAP_NET_ADMIN in the device netns for changelink Maoyi Xie <maoyixie.tju(a)gmail.com> net: ip_vti: require CAP_NET_ADMIN in the device netns for changelink Maoyi Xie <maoyixie.tju(a)gmail.com> net: ip6_vti: require CAP_NET_ADMIN in the device netns for changelink Dawei Feng <dawei.feng(a)seu.edu.cn> net: ena: clean up XDP TX queues when regular TX setup fails Ross Porter <ross.porter(a)canonical.com> selftests: net: fix file owner for broadcast_ether_dst test Zihan Xi <xizh2024(a)lzu.edu.cn> net/sched: act_ct: preserve tc_skb_cb across defragmentation Haoxiang Li <haoxiang_li2024(a)163.com> net: ixp4xx_hss: fix duplicate HDLC netdev allocation Haoxiang Li <haoxiang_li2024(a)163.com> net: wwan: t7xx: destroy DMA pool on CLDMA late init failure Philippe Schenker <philippe.schenker(a)impulsing.ch> net: ethernet: ti: icssg: guard PA stat lookups Maoyi Xie <maoyixie.tju(a)gmail.com> net: sit: require CAP_NET_ADMIN in the device netns for changelink Andreas Kemnade <andreas(a)kemnade.info> gpios: palmas: add .get_direction() op Sergio Paracuellos <sergio.paracuellos(a)gmail.com> gpio: mt7621: avoid corruption of shared interrupt trigger state Paul Louvel <paul.louvel(a)bootlin.com> gpio-f7188x: Add support for NCT6126D version B Sergio Paracuellos <sergio.paracuellos(a)gmail.com> gpio: mt7621: be sure IRQ domain is created before exposing GPIO chips Runyu Xiao <runyu.xiao(a)seu.edu.cn> gpio: tegra: do not call pinctrl for GPIO direction Sergio Paracuellos <sergio.paracuellos(a)gmail.com> gpio: mt7621: more robust management of IRQ domain teardown Dexuan Cui <decui(a)microsoft.com> net: mana: Sync page pool RX frags for CPU Dexuan Cui <decui(a)microsoft.com> net: mana: Validate the packet length reported by the NIC Bradley Morgan <include(a)grrlz.net> cpu: hotplug: Bound hotplug states sysfs output Bradley Morgan <include(a)grrlz.net> cpu: hotplug: Preserve per instance callback errors Cao Ruichuang <create0818(a)163.com> selftests/ftrace: Drop invalid top-level local in test_ownership Zhan Xusheng <zhanxusheng1024(a)gmail.com> posix-cpu-timers: Use u64 multiplication in update_rlimit_cpu() Thomas Gleixner <tglx(a)kernel.org> locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() Maoyi Xie <maoyixie.tju(a)gmail.com> wifi: libertas_tf: fix use-after-free in lbtf_free_adapter() Michael Bommarito <michael.bommarito(a)gmail.com> tracing/user_events: Fix use-after-free in user_event_mm_dup() Doruk Tan Ozturk <doruk(a)0sec.ai> net/mlx5e: macsec: fix use-after-free of metadata_dst on RX SC delete Guangshuo Li <lgs201920130244(a)gmail.com> mmc: vub300: fix use-after-free on probe failure Dmitry Torokhov <dmitry.torokhov(a)gmail.com> Input: ims-pcu - fix type confusion in CDC union descriptor parsing Dmitry Torokhov <dmitry.torokhov(a)gmail.com> Input: ims-pcu - fix race condition in reset_device sysfs callback Dmitry Torokhov <dmitry.torokhov(a)gmail.com> Input: ims-pcu - fix potential infinite loop in CDC union descriptor parsing Dmitry Torokhov <dmitry.torokhov(a)gmail.com> Input: ims-pcu - fix out-of-bounds read in ims_pcu_irq() debug logging Dmitry Torokhov <dmitry.torokhov(a)gmail.com> Input: ims-pcu - fix logic error in packet reset Dmitry Torokhov <dmitry.torokhov(a)gmail.com> Input: ims-pcu - fix firmware leak in async update Dmitry Torokhov <dmitry.torokhov(a)gmail.com> Input: ims-pcu - fix DMA mapping violation in line setup Dmitry Torokhov <dmitry.torokhov(a)gmail.com> Input: ims-pcu - add response length checks Dmitry Torokhov <dmitry.torokhov(a)gmail.com> Input: ims-pcu - validate control endpoint type Dmitry Torokhov <dmitry.torokhov(a)gmail.com> Input: ims-pcu - release data interface on disconnect Dmitry Torokhov <dmitry.torokhov(a)gmail.com> Input: ims-pcu - only expose sysfs attributes on control interface Dmitry Torokhov <dmitry.torokhov(a)gmail.com> Input: ims-pcu - fix use-after-free and double-free in disconnect Tony Luck <tony.luck(a)intel.com> fs/resctrl: Fix use-after-free during unmount Haoxiang Li <haoxiang_li2024(a)163.com> scsi: elx: efct: Fix I/O leak on unsupported additional CDB WenTao Liang <vulab(a)iscas.ac.cn> scsi: elx: efct: Fix refcount leak in efct_hw_io_abort() Bryam Vargas <hexlabsecurity(a)proton.me> scsi: target: core: Fix iSCSI ISID use-after-free in REGISTER AND MOVE Bryam Vargas <hexlabsecurity(a)proton.me> scsi: target: Bound PR-OUT TransportID parsing to the received buffer Michael Bommarito <michael.bommarito(a)gmail.com> scsi: xen: scsiback: Free unsubmitted command instead of double-putting it Michael Bommarito <michael.bommarito(a)gmail.com> scsi: xen: scsiback: Free the command tag on the TMR submit-failure path Xu Rao <raoxu(a)uniontech.com> scsi: sg: Report request-table problems when any status is set Abdun Nihaal <nihaal(a)cse.iitm.ac.in> scsi: lpfc: Fix memory leak in lpfc_sli4_driver_resource_setup() Haoxiang Li <haoxiang_li2024(a)163.com> scsi: hpsa: Fix DMA mapping leak on IOACCEL2 reset path Jhonraushan <raushan.jhon(a)gmail.com> accel/ivpu: Reject firmware log with size smaller than header Shuvam Pandey <shuvampandey1(a)gmail.com> accel/amdxdna: Use caller client for debug BO sync Doruk Tan Ozturk <doruk(a)0sec.ai> accel/amdxdna: reject user command submission without a command BO Doruk Tan Ozturk <doruk(a)0sec.ai> accel/amdxdna: reject command submission on devices without a submit op Wentao Liang <vulab(a)iscas.ac.cn> accel/amdxdna: Fix use-after-free in amdxdna_gem_dmabuf_mmap() Philipp Stanner <phasta(a)kernel.org> dma-buf: dma-fence: Fix potential NULL pointer dereference André Draszik <andre.draszik(a)linaro.org> dma-fence: use correct callback in dma_fence_timeline_name() Baineng Shou <shoubaineng(a)gmail.com> dma-fence: Make dma_fence_dedup_array() robust against 0-count input Mikulas Patocka <mpatocka(a)redhat.com> dm-verity: make error counter atomic Mikulas Patocka <mpatocka(a)redhat.com> dm-verity: increase sprintf buffer size Mikulas Patocka <mpatocka(a)redhat.com> dm-verity: fix a possible NULL pointer dereference Mikulas Patocka <mpatocka(a)redhat.com> dm-verity: avoid double increment of &use_bh_wq_enabled Mikulas Patocka <mpatocka(a)redhat.com> dm-verity: fix buffer overflow in FEC calculation Mikulas Patocka <mpatocka(a)redhat.com> dm-integrity: don't increment hash_offset twice Mikulas Patocka <mpatocka(a)redhat.com> dm-integrity: fix a bug if the bio is out of limits Mikulas Patocka <mpatocka(a)redhat.com> dm-integrity: fix leaking uninitialized kernel memory Mikulas Patocka <mpatocka(a)redhat.com> dm_early_create: fix freeing used table on dm_resume failure Ingo Blechschmidt <iblech(a)speicherleck.de> dm: avoid leaking the caller's thread keyring via the table device file Mikulas Patocka <mpatocka(a)redhat.com> dm-stats: fix merge accounting Mikulas Patocka <mpatocka(a)redhat.com> dm-stats: fix dm_jiffies_to_msec64 Samuel Moelius <sam.moelius(a)trailofbits.com> dm-pcache: reject option groups without values Benjamin Marzinski <bmarzins(a)redhat.com> dm-log: fix a bitset_size overflow on 32bit machines Mikulas Patocka <mpatocka(a)redhat.com> dm-ioctl: fix a possible overflow in list_version_get_info Mikulas Patocka <mpatocka(a)redhat.com> dm-bufio: fix wrong count calculation in dm_bufio_issue_discard Samuel Moelius <sam.moelius(a)trailofbits.com> dm era: fix out-of-bounds memory access for non-zero start sector Ming-Hung Tsai <mtsai(a)redhat.com> dm thin metadata: fix metadata snapshot consistency on commit failure Genjian Zhang <zhanggenjian(a)kylinos.cn> dm thin metadata: fix superblock refcount leak on snapshot shadow failure Haoxiang Li <haoxiang_li2024(a)163.com> net: sparx5: unregister blocking notifier on init failure Yitang Yang <yi1tang.yang(a)gmail.com> block: fix IORING_URING_CMD_REISSUE flags check in blkdev_uring_cmd Mike Waychison <mike(a)waychison.com> block: fix race in blk_time_get_ns() returning 0 Connor Williamson <connordw(a)amazon.com> block: remove redundant GD_NEED_PART_SCAN in add_disk_final() Sun Jian <sun.jian.kdev(a)gmail.com> selftests/bpf: Cover negative buffer pointer offsets Jiri Olsa <jolsa(a)kernel.org> bpf: Add missing access_ok call to copy_user_syms Jann Horn <jannh(a)google.com> bpf,fork: wipe ->bpf_storage before bailouts that access it Tristan Madani <tristan(a)talencesecurity.com> bpf: Reset register bounds before narrowing retval range in check_mem_access() Woraphat Khiaodaeng <worapat.kd2(a)gmail.com> io_uring/bpf-ops: reject re-registration of an already-bound ops Oliver Hartkopp <socketcan(a)hartkopp.net> can: bcm: add missing device refcount for CAN filter removal Oliver Hartkopp <socketcan(a)hartkopp.net> can: bcm: validate frame length in bcm_rx_setup() for RTR replies Oliver Hartkopp <socketcan(a)hartkopp.net> can: bcm: track a single source interface for ANYDEV timeout/throttle ops Oliver Hartkopp <socketcan(a)hartkopp.net> can: bcm: fix stale rx/tx ops after device removal Oliver Hartkopp <socketcan(a)hartkopp.net> can: bcm: fix data race on rx_stamp/rx_ifindex in bcm_rx_handler() Oliver Hartkopp <socketcan(a)hartkopp.net> can: bcm: fix CAN frame rx/tx statistics Oliver Hartkopp <socketcan(a)hartkopp.net> can: bcm: extend bcm_tx_lock usage for data and timer updates Oliver Hartkopp <socketcan(a)hartkopp.net> can: bcm: add missing rcu list annotations and operations Oliver Hartkopp <socketcan(a)hartkopp.net> can: bcm: add locking when updating filter and timer values Oliver Hartkopp <socketcan(a)hartkopp.net> can: bcm: fix lockless bound/ifindex race and silent RX_SETUP failure Lee Jones <lee(a)kernel.org> can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF Oliver Hartkopp <socketcan(a)hartkopp.net> can: isotp: serialize TX state transitions under so->rx_lock Oliver Hartkopp <socketcan(a)hartkopp.net> can: isotp: fix use-after-free race with concurrent NETDEV_UNREGISTER Oliver Hartkopp <socketcan(a)hartkopp.net> can: isotp: use unconditional synchronize_rcu() in isotp_release() Fan Wu <fanwu01(a)zju.edu.cn> can: esd_usb: kill anchored URBs before freeing netdevs Souvik Banerjee <souvik(a)amlalabs.com> ovl: use linked upper dentry in copy-up tmpfile Maoyi Xie <maoyixie.tju(a)gmail.com> netdev-genl: report NAPI thread PID in the caller's pid namespace Wentao Liang <vulab(a)iscas.ac.cn> nvmet: fix refcount leak in nvmet_sq_create() Bryam Vargas <hexlabsecurity(a)proton.me> nvmet-rdma: handle inline data with a nonzero offset Michael Bommarito <michael.bommarito(a)gmail.com> nvmet-auth: reject short AUTH_RECEIVE buffers Nick Chan <towinchenmi(a)gmail.com> nvme-apple: Prevent shared tags across queues on Apple A11 Benjamin Coddington <ben.coddington(a)hammerspace.com> NFS: Charge unstable writes by request size, not folio size Weiming Shi <bestswngs(a)gmail.com> sctp: validate STALE_COOKIE cause length before reading staleness Kunihiko Hayashi <hayashi.kunihiko(a)socionext.com> spi: uniphier: Fix completion initialization order before devm_request_irq() Javier Fernandez Pastrana <javier.pastrana(a)linutronix.de> spi: imx: reconfigure for PIO when DMA cannot be started Wang Yan <wangyan01(a)kylinos.cn> time: Fix off-by-one in compat settimeofday() usec validation Jaewon Yang <yong010301(a)gmail.com> tpm: Make the TPM character devices non-seekable Thorsten Blum <thorsten.blum(a)linux.dev> tpm: fix event_size output in tpm1_binary_bios_measurements_show Maoyi Xie <maoyixie.tju(a)gmail.com> xfrm: xfrm_interface: require CAP_NET_ADMIN in the device netns for changelink Sanman Pradhan <psanman(a)juniper.net> xfrm: use compat translator only for u64 alignment mismatch Qianyu Luo <qianyuluo3(a)gmail.com> xfrm: nat_keepalive: avoid double free on send error Wentao Liang <vulab(a)iscas.ac.cn> xen/gntdev: fix error handling in ioctl Steven Rostedt <rostedt(a)goodmis.org> ufs: core: tracing: Do not dereference pointers in TP_printk() Dmitry Safonov <0x7f454c46(a)gmail.com> tcp: Decrement tcp_md5_needed static branch Michael Bommarito <michael.bommarito(a)gmail.com> tcp: defer md5sig_info kfree past RCU grace period in tcp_connect Paul Greenwalt <paul.greenwalt(a)intel.com> ice: fix ice_init_link() error return preventing probe Pei Xiao <xiaopei01(a)kylinos.cn> i2c: spacemit: fix spurious IRQ handling returning IRQ_HANDLED Xuanqiang Luo <luoxuanqiang(a)kylinos.cn> i2c: mlxbf: Fix use-after-free in mlxbf_i2c_init_resource() Roman Vivchar <rva333(a)protonmail.com> i2c: mediatek: fix WRRD for SoCs without auto_restart option Vincent Jardin <vjardin(a)free.fr> i2c: imx: fix locked bus on SMBus block-read of 0 (IRQ) Vincent Jardin <vjardin(a)free.fr> i2c: imx: fix locked bus on SMBus block-read of 0 (atomic) Joshua Crofts <joshua.crofts1(a)gmail.com> hwmon: (max6697) add missing 'select REGMAP_I2C' to Kconfig Joshua Crofts <joshua.crofts1(a)gmail.com> hwmon: (ltc2992) add missing 'select REGMAP_I2C' to Kconfig Ibrahim Hashimov <security(a)auditcode.ai> ksmbd: fix integer overflow in set_file_allocation_info() Fredric Cover <fredric.cover.lkernel(a)gmail.com> smb: client: use kvzalloc() for megabyte buffer in simple fallocate Holger Dengler <dengler(a)linux.ibm.com> pkey: Move keytype check from pkey api to handler Daniel Gibson <daniel(a)gibson.sh> platform/x86/amd/pmc: Don't log during intermediate wakeups Daniel Gibson <daniel(a)gibson.sh> platform/x86/amd/pmc: Add delay_suspend module parameter Daniel Gibson <daniel(a)gibson.sh> platform/x86/amd/pmc: Delay suspend for some Lenovo Laptops Daniel Gibson <daniel(a)gibson.sh> platform/x86/amd/pmc: Check for intermediate wakeup in function Srinivas Pandruvada <srinivas.pandruvada(a)intel.com> platform/x86: ISST: Restore SST-PP control to all domains Krishna Chomal <krishna.chomal108(a)gmail.com> platform/x86: hp-wmi: Add support for Omen 16-ap0xxx (8E35) Krishna Chomal <krishna.chomal108(a)gmail.com> platform/x86: hp-wmi: Add support for Omen 16-ap0xxx (8D26) Haoxiang Li <lihaoxiang(a)isrc.iscas.ac.cn> platform/x86: dell-laptop: fix missing cleanups in init error path ZhaoJinming <zhaojinming(a)uniontech.com> platform/x86/intel/tpmi: use cleanup helpers in mem_write() Claudiu Beznea <claudiu.beznea.uj(a)bp.renesas.com> dmaengine: sh: rz-dmac: Move interrupt request after everything is set up Koichiro Den <den(a)valinux.co.jp> dmaengine: dw-edma-pcie: Reject devices without driver data Claudiu Beznea <claudiu.beznea.uj(a)bp.renesas.com> dmaengine: sh: rz-dmac: Fix incorrect NULL check for list_first_entry() Frank Li <Frank.Li(a)nxp.com> dmaengine: dw-edma: Add spinlock to protect DONE_INT_MASK and ABORT_INT_MASK Kartik Rajput <kkartik(a)nvidia.com> dmaengine: tegra: Fix burst size calculation Hongling Zeng <zenghongling(a)kylinos.cn> sunrpc: fix uninitialized xprt_create_args structure Michael Bommarito <michael.bommarito(a)gmail.com> tpm: tpm2-sessions: wait for async KPP completion in tpm_buf_append_salt Jarkko Sakkinen <jarkko(a)kernel.org> tpm: tpm_tis_spi: Use wait_woken() in wait_for_tmp_stat() Baoli Zhang <baoli.zhang(a)linux.intel.com> tpm: restore timeout for key creation commands Bhargav Joshi <j.bhargav.u(a)gmail.com> irqchip/crossbar: Use correct index in crossbar_domain_free() Yiyang Chen <cyyzero16(a)gmail.com> taskstats: retain dead thread stats in TGID queries Florian Fuchs <fuchsfl(a)gmail.com> mtd: maps: vmu-flash: fix NULL pointer dereference in initialization Stafford Horne <shorne(a)gmail.com> openrisc: Fix jump_label smp syncing Miquel Raynal <miquel.raynal(a)bootlin.com> mtd: rawnand: Pause continuous reads at block boundaries Takahiro Kuwano <takahiro.kuwano(a)infineon.com> mtd: spi-nor: spansion: use die erase for multi-die devices only Miquel Raynal <miquel.raynal(a)bootlin.com> mtd: spi-nor: swp: Improve locking user experience Holger Dengler <dengler(a)linux.ibm.com> s390/pkey: Check length in pkey_pckmo handler implementation Holger Dengler <dengler(a)linux.ibm.com> s390/pkey: Check length in PKEY_VERIFYPROTK ioctl Sebastian Alba Vives <sebasjosue84(a)gmail.com> fpga: microchip-spi: fix zero header_size OOB read in mpf_ops_parse_header() Maoyi Xie <maoyixie.tju(a)gmail.com> net: thunderbolt: Fix frags[] overflow by bounding frame_count Manivannan Sadhasivam <manivannan.sadhasivam(a)oss.qualcomm.com> bus: mhi: ep: Protect mhi_ep_handle_syserr() in the error path Manivannan Sadhasivam <manivannan.sadhasivam(a)oss.qualcomm.com> bus: mhi: host: pci_generic: Fix the physical function check Sebastian Alba Vives <sebasjosue84(a)gmail.com> fpga: dfl: add bounds check in dfh_get_param_size() Michael Bommarito <michael.bommarito(a)gmail.com> ocfs2: reject non-inline dinodes with i_size and zero i_clusters Michael Bommarito <michael.bommarito(a)gmail.com> ocfs2: reject dinodes whose i_rdev disagrees with the file type Michael Bommarito <michael.bommarito(a)gmail.com> ocfs2: reject dinodes with non-canonical i_mode type Joseph Qi <joseph.qi(a)linux.alibaba.com> ocfs2: add journal NULL check in ocfs2_checkpoint_inode() Ian Bridges <icb(a)fastmail.org> ocfs2: fix UBSAN array-index-out-of-bounds in ocfs2_sum_rightmost_rec Ian Bridges <icb(a)fastmail.org> ocfs2: fix NULL h_transaction deref in ocfs2_assure_trans_credits Kyle Zeng <kylebot(a)openai.com> ocfs2: avoid moving extents to occupied clusters Arseniy Krasnov <avkrasnov(a)rulkc.org> mtd: rawnand: fix condition in 'nand_select_target()' Vasiliy Kovalev <kovalev(a)altlinux.org> net/9p: fix infinite loop in p9_client_rpc on fatal signal Bastien Curutchet <bastien.curutchet(a)bootlin.com> mtd: rawnand: pl353: fix probe resource allocation Tristan Madani <tristan(a)talencesecurity.com> ocfs2: use kzalloc for quota recovery bitmap allocation Florian Fuchs <fuchsfl(a)gmail.com> mtd: maps: vmu-flash: fix fault in unaligned fixup Stafford Horne <shorne(a)gmail.com> openrisc: Add full instruction cache invalidate functions Ionut Nechita <ionut.nechita(a)windriver.com> scsi: sas: Skip opt_sectors when DMA reports no real optimization hint Pratyush Yadav (Google) <pratyush(a)kernel.org> kho: make sure scratch size is always aligned by CMA_MIN_ALIGNMENT_BYTES Martin Wilck <martin.wilck(a)suse.com> scsi: smartpqi: Use shost_to_hba() in pqi_scan_finished() Alexey Charkov <alchark(a)flipper.net> power: supply: bq257xx: Fix VSYSMIN clamping logic Breno Leitao <leitao(a)debian.org> 9p: skip nlink update in cacheless mode to fix WARN_ON Ruoyu Wang <ruoyuw560(a)gmail.com> mtd: slram: remove failed entries from the device list Karl Mehltretter <kmehltretter(a)gmail.com> kcov: use WRITE_ONCE() for selftest mode stores Muchun Song <muchun.song(a)linux.dev> mm/mm_init: fix uninitialized struct pages for ZONE_DEVICE Amit Machhiwal <amachhiw(a)linux.ibm.com> powerpc/dt_cpu_ftrs: Set CPU_FTR_P11_PVR for Power11 and later processors Jinjiang Tu <tujinjiang(a)huawei.com> fs/proc: fix KPF_KSM reported for all anonymous pages Krzysztof Wilczyński <kwilczynski(a)kernel.org> proc: only bump parent nlink when registering directories Dev Jain <dev.jain(a)arm.com> fs/proc/task_mmu: do not warn on seeing non-migration pmd entry Kiryl Shutsemau (Meta) <kas(a)kernel.org> fs/proc/task_mmu: use huge_page_size() in pagemap_scan_hugetlb_entry() Kiryl Shutsemau (Meta) <kas(a)kernel.org> fs/proc/task_mmu: fix hugetlb self-deadlock in pagemap_scan_pte_hole() Kiryl Shutsemau (Meta) <kas(a)kernel.org> fs/proc/task_mmu: fix make_uffd_wp_huge_pte() prot-update race SeongJae Park <sj(a)kernel.org> mm/damon/sysfs-schemes: put stats for scheme_add_dirs() internal error SeongJae Park <sj(a)kernel.org> mm/damon/sysfs-schemes: fix dir put orders in access_pattern_add_dirs() SeongJae Park <sj(a)kernel.org> mm/damon/core: always put unsuccessfully committed target pids Zishun Yi <vulab(a)iscas.ac.cn> riscv: cacheinfo: Fix node reference leak in populate_cache_leaves Kiryl Shutsemau (Meta) <kas(a)kernel.org> mm/huge_memory: preserve pmd_swp_uffd_wp on device-private PMD downgrade Aaron Tomlin <atomlin(a)atomlin.com> mips: sched: Fix CPUMASK_OFFSTACK memory corruption Bryam Vargas <hexlabsecurity(a)proton.me> selftests/landlock: Test SCOPE_SIGNAL on the SIGIO/fowner pgid path WenTao Liang <vulab(a)iscas.ac.cn> power: supply: charger-manager: fix refcount leak in is_full_charged() Bryam Vargas <hexlabsecurity(a)proton.me> landlock: Fix LANDLOCK_SCOPE_SIGNAL bypass on the SIGIO path Peiyang He <peiyang_he(a)smail.nju.edu.cn> ntfs: fix hole runlist memory leak in insert range error path Namjae Jeon <linkinjeon(a)kernel.org> ntfs: fix WARN_ON for resident attribute in ntfs_map_runlist_nolock() Namjae Jeon <linkinjeon(a)kernel.org> ntfs: make system files immutable to prevent corruption Hyunchul Lee <hyc.lee(a)gmail.com> ntfs: avoid self-deadlock during inode eviction Namjae Jeon <linkinjeon(a)kernel.org> ntfs: sanitize MFT references returned from ntfs_lookup_inode_by_name() Peiyang He <peiyang_he(a)smail.nju.edu.cn> ntfs: fail attrlist updates when the superblock is inactive Peiyang He <peiyang_he(a)smail.nju.edu.cn> ntfs: fix mrec_lock ABBA deadlock in rename Tristan Madani <tristan(a)talencesecurity.com> ntfs3: fix out-of-bounds read in decompress_lznt Michael Bommarito <michael.bommarito(a)gmail.com> ntfs3: validate split-point offset in indx_insert_into_buffer Michael Bommarito <michael.bommarito(a)gmail.com> ntfs3: bound to_move in indx_insert_into_root before hdr_insert_head Michael Bommarito <michael.bommarito(a)gmail.com> ntfs3: cap RESTART_TABLE free-chain walker at rt->used Michael Bommarito <michael.bommarito(a)gmail.com> fs/ntfs3: bound NTFS_DE view.data_off in UpdateRecordData{Root,Allocation} Michael Bommarito <michael.bommarito(a)gmail.com> fs/ntfs3: add depth limit to indx_find_buffer to prevent stack overflow Konstantin Komarov <almaz.alexandrovich(a)paragon-software.com> fs/ntfs3: validate lcns_follow in log_replay conversion Konstantin Komarov <almaz.alexandrovich(a)paragon-software.com> fs/ntfs3: bound attr_off in UpdateResidentValue against data_off Michael Bommarito <michael.bommarito(a)gmail.com> fs/ntfs3: bound copy_lcns dp->page_lcns[] index in analysis pass Konstantin Komarov <almaz.alexandrovich(a)paragon-software.com> fs/ntfs3: bound DeleteIndexEntryAllocation memmove length Zhan Xusheng <zhanxusheng1024(a)gmail.com> fs/ntfs3: fix syncing wrong inode on DIRSYNC cross-directory rename DaeMyung Kang <charsyam(a)gmail.com> ntfs: reject non-resident records for resident-only attributes DaeMyung Kang <charsyam(a)gmail.com> ntfs: validate resident index root values on lookup DaeMyung Kang <charsyam(a)gmail.com> ntfs: validate resident volume name values on lookup DaeMyung Kang <charsyam(a)gmail.com> ntfs: do not replace volume name after lookup errors Samuel Moelius <sam.moelius(a)trailofbits.com> ntfs: detect mapping-pairs LCN accumulator overflow Hyunchul Lee <hyc.lee(a)gmail.com> ntfs: validate index entries on reading DaeMyung Kang <charsyam(a)gmail.com> ntfs: avoid heap allocation for free-cluster readahead state DaeMyung Kang <charsyam(a)gmail.com> ntfs: only alias volume $UpCase to default on exact match DaeMyung Kang <charsyam(a)gmail.com> ntfs: reinit search context before volume information lookup Hyunchul Lee <hyc.lee(a)gmail.com> ntfs: skip extent mft records in writeback to prevent deadlock Hyunchul Lee <hyc.lee(a)gmail.com> ntfs: centalize $INDEX_ROOT header validation DaeMyung Kang <charsyam(a)gmail.com> ntfs: update index root allocated size before shrink DaeMyung Kang <charsyam(a)gmail.com> ntfs: free volume-wide resources on fill_super failure Hyunchul Lee <hyc.lee(a)gmail.com> ntfs: validate index block header more strictly Hyunchul Lee <hyc.lee(a)gmail.com> ntfs: not change 0-byte $DATA attribute to non-resident Hyunchul Lee <hyc.lee(a)gmail.com> ntfs: add bounds check before accessing EA entries DaeMyung Kang <charsyam(a)gmail.com> ntfs: validate attribute values on lookup Marco Crivellari <marco.crivellari(a)suse.com> ntfs: Add WQ_PERCPU to alloc_workqueue users Ron de Bruijn <rmbruijn(a)gmail.com> ntfs: fix off-by-one in mapping pairs decoding bounds checks Hyunchul Lee <hyc.lee(a)gmail.com> ntfs: fix incorrect size of symbolic link DaeMyung Kang <charsyam(a)gmail.com> ntfs: grow index root value before reparent header update SeongJae Park <sj(a)kernel.org> mm/damon/core: make charge_addr_from aware of end-address exclusivity Muchun Song <muchun.song(a)linux.dev> mm/memory_hotplug: fix incorrect altmap passing in error path Deepanshu Kartikey <kartikey406(a)gmail.com> mm/hugetlb: fix hugetlb cgroup rsvd charge/uncharge mismatch Johan Hovold <johan(a)kernel.org> power: supply: max17042: fix OF node reference imbalance Ma Ke <make24(a)iscas.ac.cn> power: supply: cpcap-battery: Fix missing nvmem_device_put() causing reference leak Muchun Song <muchun.song(a)linux.dev> mm/mm_init: fix pageblock migratetype for ZONE_DEVICE compound pages Maciej W. Rozycki <macro(a)orcam.me.uk> MIPS: DEC: Ensure 32-bit stack location for o32 prom_printf() Johan Hovold <johan(a)kernel.org> MIPS: ip22-gio: fix device reference leak in probe Johan Hovold <johan(a)kernel.org> MIPS: ip22-gio: fix kfree() of static object Johan Hovold <johan(a)kernel.org> MIPS: ip22-gio: fix gio device memory leak Muchun Song <muchun.song(a)linux.dev> mm/sparse-vmemmap: fix vmemmap accounting underflow Tanmay Shah <tanmay.shah(a)amd.com> remoteproc: xlnx: Check remote core state Wasim Nazir <wasim.nazir(a)oss.qualcomm.com> remoteproc: qcom: Fix leak when custom dump_segments addition fails Chuck Lever <chuck.lever(a)oracle.com> SUNRPC: Bound-check xdr_buf_to_bvec() stores before writing Chuck Lever <chuck.lever(a)oracle.com> lockd: Plug nlm_file refcount leak on cached nlm_do_fopen() failure Chuck Lever <chuck.lever(a)oracle.com> lockd: Plug nlm_file leak when nlm_do_fopen() fails Luxiao Xu <rakukuip(a)gmail.com> sunrpc: harden rq_procinfo lifecycle to prevent double-free Chuck Lever <chuck.lever(a)oracle.com> sunrpc: wait for in-flight TLS handshake callback when cancel loses race Chris Mason <clm(a)meta.com> sunrpc: pin svc_xprt across the asynchronous TLS handshake callback Claudiu Beznea <claudiu.beznea.uj(a)bp.renesas.com> pinctrl: renesas: rzg2l: Use -ENOTSUPP instead of -EOPNOTSUPP Abdun Nihaal <nihaal(a)cse.iitm.ac.in> nvdimm/btt: Free arena sub-allocations on discover_arenas() error path Abdun Nihaal <nihaal(a)cse.iitm.ac.in> nvdimm/btt: Free arenas on btt_init() error paths Junrui Luo <moonafterrain(a)outlook.com> jbd2: fix integer underflow in jbd2_journal_initialize_fast_commit() Terry Bowman <terry.bowman(a)amd.com> cxl: Fix CXL_HEADERLOG_SIZE to match RAS Capability size Duje Mihanović <duje(a)dujemihanovic.xyz> backlight: ktd2801: Enable BL_CORE_SUSPENDRESUME Bartosz Golaszewski <bartosz.golaszewski(a)oss.qualcomm.com> mfd: tps6586x: Fix OF node refcount Shyam Prasad N <sprasad(a)microsoft.com> cifs: invalidate cfid on unlink/rename/rmdir Sven Eckelmann <sven(a)narfation.org> batman-adv: tt: prevent TVLV OOB check overflow Sven Eckelmann <sven(a)narfation.org> batman-adv: mcast: avoid OOB read of num_dests header Sven Eckelmann <sven(a)narfation.org> batman-adv: frag: fix primary_if leak on failed linearization Sven Eckelmann <sven(a)narfation.org> batman-adv: clean untagged VLAN on netdev registration failure Sven Eckelmann <sven(a)narfation.org> batman-adv: frag: free unfragmentable packet Sven Eckelmann <sven(a)narfation.org> batman-adv: fix VLAN priority offset Sven Eckelmann <sven(a)narfation.org> batman-adv: tt: avoid request storms during pending request Sven Eckelmann <sven(a)narfation.org> batman-adv: dat: fix tie-break for candidate selection Sven Eckelmann <sven(a)narfation.org> batman-adv: ensure minimal ethernet header on TX Sven Eckelmann <sven(a)narfation.org> batman-adv: dat: ensure accessible eth_hdr proto field Sven Eckelmann <sven(a)narfation.org> batman-adv: bla: reacquire gw address after skb realloc Sven Eckelmann <sven(a)narfation.org> batman-adv: dat: acquire ARP hw source only after skb realloc Sven Eckelmann <sven(a)narfation.org> batman-adv: access unicast_ttvn skb->data only after skb realloc Sven Eckelmann <sven(a)narfation.org> batman-adv: retrieve ethhdr after potential skb realloc on RX Sven Eckelmann <sven(a)narfation.org> batman-adv: gw: acquire ethernet header only after skb realloc Sumanth Korikkar <sumanthk(a)linux.ibm.com> s390/perf_cpum_cf: Add missing array_index_nospec() to __hw_perf_event_init() Rafael J. Wysocki <rafael.j.wysocki(a)intel.com> cpufreq: intel_pstate: Set non-turbo capacity to HWP_GUARANTEED_PERF() Zhongqiu Han <zhongqiu.han(a)oss.qualcomm.com> cpufreq: schedutil: Fix uncleared need_freq_update on the .adjust_perf() path Sandipan Das <sandipan.das(a)amd.com> perf/x86/amd/lbr: Fix kernel address leakage Sandipan Das <sandipan.das(a)amd.com> perf/x86/amd/brs: Fix kernel address leakage Thorsten Blum <thorsten.blum(a)linux.dev> x86/boot: Reject too long acpi_rsdp= values Thorsten Blum <thorsten.blum(a)linux.dev> x86/boot: Validate console=uart8250 baud rate to fix early boot hang Tycho Andersen (AMD) <tycho(a)kernel.org> x86/virt/sev: Revert "Drop WBINVD before setting MSR_AMD64_SYSCFG_SNP_EN" Mario Limonciello <mario.limonciello(a)amd.com> x86/video: Only fall back to vga_default_device() without screen info Ali Ahmet MEMIS <dev(a)unknownbbqr.xyz> tools/power/x86/intel-speed-select: Harden daemon pidfile open Guangshuo Li <lgs201920130244(a)gmail.com> mfd: sm501: Fix reference leak on failed device registration Armin Wolf <W_Armin(a)gmx.de> leds: uleds: Fix potential buffer overread Ondrej Mosnacek <omosnace(a)redhat.com> selinux: fix incorrect execmem checks on overlayfs Tristan Madani <tristan(a)talencesecurity.com> selinux: avoid sk_socket dereference in selinux_sctp_bind_connect() Stephen Smalley <stephen.smalley.work(a)gmail.com> selinux: check connect-related permissions on TCP Fast Open Wang Jun <1742789905(a)qq.com> soc: fsl: qe: panic on ioremap() failure in qe_reset() Siddharth Vadapalli <s-vadapalli(a)ti.com> soc: ti: k3-ringacc: Fix access mode for k3_ringacc_ring_pop_tail_io/proxy Arunpravin Paneer Selvam <Arunpravin.PaneerSelvam(a)amd.com> gpu/buddy: bail out of try_harder when alignment cannot be honoured Guangshuo Li <lgs201920130244(a)gmail.com> gpu: host1x: Fix device reference leak in host1x_device_parse_dt() error path Eliot Courtney <ecourtney(a)nvidia.com> gpu: nova-core: simplify and_then with condition to filter Pablo Neira Ayuso <pablo(a)netfilter.org> netfilter: flowtable: use correct direction to set up tunnel route Xiang Mei (Microsoft) <xmei5(a)asu.edu> netfilter: bridge: fix stale prevhdr pointer in br_ip6_fragment() Wyatt Feng <bronzed_45_vested(a)icloud.com> netfilter: xt_nat: reject unsupported target families Yizhou Zhao <zhaoyz24(a)mails.tsinghua.edu.cn> netfilter: ecache: fix inverted time_after() check Florian Westphal <fw(a)strlen.de> netfilter: xt_physdev: masks are not c-strings Yizhou Zhao <zhaoyz24(a)mails.tsinghua.edu.cn> netfilter: nf_conncount: fix zone comparison in tuple dedup Pablo Neira Ayuso <pablo(a)netfilter.org> netfilter: flowtable: support IPIP tunnel with direct xmit Pablo Neira Ayuso <pablo(a)netfilter.org> netfilter: flowtable: use dst in this direction when pushing IPIP header Xiang Mei <xmei5(a)asu.edu> netfilter: nf_conntrack_reasm: guard mac_header adjustment after IPv6 defrag Florian Westphal <fw(a)strlen.de> netfilter: nf_nat_sip: reload possible stale data pointer Florian Westphal <fw(a)strlen.de> netfilter: nft_set_pipapo: don't leak bad clone into future transaction Pablo Neira Ayuso <pablo(a)netfilter.org> netfilter: nf_conntrack_sip: validate skb_dst() before accessing it Theodor Arsenij Larionov-Trichkine <theodorlarionov(a)gmail.com> netfilter: nft_fib: reject fib expression on the netdev egress hook Haoze Xie <royenheart(a)gmail.com> netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst Wyatt Feng <bronzed_45_vested(a)icloud.com> netfilter: xt_cluster: reject template conntracks in hash match David Carlier <devnexen(a)gmail.com> netfilter: nfnl_cthelper: apply per-class values when updating policies Muhammad Bilal <meatuni001(a)gmail.com> netfilter: nf_conntrack_irc: fix parse_dcc() off-by-one OOB read Srinivas Kandagatla <srinivas.kandagatla(a)oss.qualcomm.com> ASoC: qcom: q6apm: fix NULL pointer dereference in graph_callback Cássio Gabriel <cassiogabrielcontato(a)gmail.com> ASoC: mediatek: mt8183: Release reserved memory on cleanup Cássio Gabriel <cassiogabrielcontato(a)gmail.com> ASoC: mediatek: mt8183: Check runtime resume during probe Cássio Gabriel <cassiogabrielcontato(a)gmail.com> ASoC: mediatek: mt8192: Release reserved memory on cleanup Cássio Gabriel <cassiogabrielcontato(a)gmail.com> ASoC: mediatek: mt8192: Check runtime resume during probe Peter Ujfalusi <peter.ujfalusi(a)linux.intel.com> ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control Peter Ujfalusi <peter.ujfalusi(a)linux.intel.com> ASoC: SOF: ipc3-control: Fix heap overflow in bytes_ext put/get Zhao Dongdong <zhaodongdong(a)kylinos.cn> ASoC: SOF: topology: fix memory leak in snd_sof_load_topology Abdun Nihaal <nihaal(a)cse.iitm.ac.in> fbdev: tridentfb: fix potential memory leak in trident_pci_probe() Abdun Nihaal <nihaal(a)cse.iitm.ac.in> fbdev: nvidia: fix potential memory leak in nvidiafb_probe() Abdun Nihaal <nihaal(a)cse.iitm.ac.in> fbdev: vesafb: fix memory leak in vesafb_probe() Abdun Nihaal <nihaal(a)cse.iitm.ac.in> fbdev: carminefb: fix potential memory leak in alloc_carmine_fb() Abdun Nihaal <nihaal(a)cse.iitm.ac.in> fbdev: tdfxfb: fix potential memory leak in tdfxfb_probe() Abdun Nihaal <nihaal(a)cse.iitm.ac.in> fbdev: uvesafb: fix potential memory leak in uvesafb_probe() Abdun Nihaal <nihaal(a)cse.iitm.ac.in> fbdev: s3fb: fix potential memory leak in s3_pci_probe() Abdun Nihaal <nihaal(a)cse.iitm.ac.in> fbdev: i740fb: fix potential memory leak in i740fb_probe() Abdun Nihaal <nihaal(a)cse.iitm.ac.in> fbdev: radeon: fix potential memory leak in radeonfb_pci_register() Abdun Nihaal <nihaal(a)cse.iitm.ac.in> fbdev: efifb: fix memory leak in efifb_probe() Li RongQing <lirongqing(a)baidu.com> fbdev: sm712: Fix operator precedence in big_swap macro Abdun Nihaal <nihaal(a)cse.iitm.ac.in> fbdev: hecubafb: fix potential memory leak in hecubafb_probe() Abdun Nihaal <nihaal(a)cse.iitm.ac.in> fbdev: broadsheetfb: fix potential memory leak in broadsheetfb_probe() Abdun Nihaal <nihaal(a)cse.iitm.ac.in> fbdev: metronomefb: fix potential memory leak in metronomefb_probe() Oliver Upton <oupton(a)kernel.org> KVM: arm64: nv: Inject SEA if guest VNCR isn't normal memory Oliver Upton <oupton(a)kernel.org> KVM: arm64: nv: Re-translate VNCR before injecting abort Oliver Upton <oupton(a)kernel.org> KVM: arm64: nv: Inject SEA if kvm_translate_vncr() can't resolve PFN Oliver Upton <oupton(a)kernel.org> KVM: arm64: nv: Respect read-only PFN when mapping L1 VNCR Weiming Shi <bestswngs(a)gmail.com> KVM: arm64: nv: Fix SPSR_EL2 restore in kvm_hyp_handle_mops() Fuad Tabba <tabba(a)google.com> KVM: arm64: nv: Write ESR_EL2 for injected nested SError exceptions Oliver Upton <oupton(a)kernel.org> KVM: arm64: nv: Drop bogus WARN for write to ZCR_EL2 Oliver Upton <oupton(a)kernel.org> KVM: arm64: Ensure level is always initialized when relaxing perms Bradley Morgan <include(a)grrlz.net> KVM: arm64: account pKVM reclaim against the VM mm Marc Zyngier <maz(a)kernel.org> KVM: Move kvm_io_bus_get_dev() locking responsibilities to callers Sean Christopherson <seanjc(a)google.com> KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state leixiang <leixiang(a)kylinos.cn> KVM: x86: Nullify irqfd->producer if updating IRTE for bypass fails Sean Christopherson <seanjc(a)google.com> KVM: x86: Ignore pending PV EOI if the vCPU has since disabled PV EOIs Binbin Wu <binbin.wu(a)linux.intel.com> KVM: TDX: Reject concurrent change to CPUID entry count Atish Patra <atishp(a)meta.com> KVM: SEV: Do not allow intra-host migration/mirroring of SNP VMs Matthew Rosato <mjrosato(a)linux.ibm.com> KVM: s390: pci: Fix handling of AIF enable without AISB Sean Christopherson <seanjc(a)google.com> KVM: nVMX: Move vTPR vs. TPR Threshold consistency check into "normal" checks Marc Zyngier <maz(a)kernel.org> KVM: arm64: vgic: Handle race between interrupt affinity change and LPI disabling Hyunwoo Kim <imv4bel(a)gmail.com> KVM: arm64: vgic: Check the interrupt is still ours before migrating it Haoxiang Li <haoxiang_li2024(a)163.com> KVM: s390: pci: Fix GISC refcount leak on AIF enable failure Gautam Menghani <gautam(a)linux.ibm.com> powerpc/pseries/Kconfig: Enable CONFIG_VPA_PMU to be used with KVM Claudio Imbrenda <imbrenda(a)linux.ibm.com> KVM: s390: Fix unlikely race in try_get_locked_pte() Christian Borntraeger <borntraeger(a)linux.ibm.com> KVM: s390: Initialize KVM_S390_GET_CMMA_BITS memory Claudio Imbrenda <imbrenda(a)linux.ibm.com> KVM: s390: vsie: Use mmu cache to allocate rmap Claudio Imbrenda <imbrenda(a)linux.ibm.com> KVM: s390: Silence potential warnings in _gmap_crstep_xchg_atomic() Claudio Imbrenda <imbrenda(a)linux.ibm.com> KVM: s390: vsie: Add missing radix_tree_preload() in _gaccess_shadow_fault() Claudio Imbrenda <imbrenda(a)linux.ibm.com> KVM: s390: vsie: Fix allocation of struct vsie_rmap Qiang Ma <maqianga(a)uniontech.com> LoongArch: KVM: Return full old CSR value from kvm_emu_xchg_csr() Bibo Mao <maobibo(a)loongson.cn> LoongArch: KVM: Fix FPU register width with user access API Qiang Ma <maqianga(a)uniontech.com> LoongArch: KVM: Check the return values for put_user() Bibo Mao <maobibo(a)loongson.cn> LoongArch: KVM: Check irq validity in kvm_vcpu_ioctl_interrupt() Yanfei Xu <yanfei.xu(a)bytedance.com> LoongArch: KVM: Validate irqchip index in irqfd routing David Jander <david(a)protonic.nl> ARM: dts: stm32: stm32mp15x-mecio1-io: Move expander gpio-line-names to board files David Jander <david(a)protonic.nl> ARM: dts: stm32: stm32mp15x-mecio1-io: Fix expander gpio line typo David Jander <david(a)protonic.nl> ARM: dts: stm32: stm32mp15x-mecio1-io: Move gpio-line-names to board files Abel Vesa <abel.vesa(a)oss.qualcomm.com> arm64: dts: qcom: hamoa: Fix OPP tables for all DisplayPort controllers David Jander <david(a)protonic.nl> ARM: dts: stm32: stm32mp15x-mecio1-io: Fix GPIO names typo Krzysztof Kozlowski <krzysztof.kozlowski(a)oss.qualcomm.com> arm64: dts: imx8ulp-evk: Correct Type-C int GPIO flags David Jander <david(a)protonic.nl> ARM: dts: stm32: stm32mp15x-mecio1-io: Enable internal ADC reference Judith Mendez <jm(a)ti.com> arm64: dts: ti: k3-am62a7-sk: Add bootph-all tag to vqmmc David Jander <david(a)protonic.nl> ARM: dts: stm32: stm32mp15x-mecio1-io: Move divergent mecio1 ADC channels to board files David Jander <david(a)protonic.nl> ARM: dts: stm32: stm32mp15x-mecio1-io: Fix ADC sampling times Quentin Schulz <quentin.schulz(a)cherry.de> arm64: dts: rockchip: fix Ethernet PHY not found on PX30 Ringneck Nickolay Goppen <setotau(a)mainlining.org> arm64: dts: qcom: sdm630: describe adsp_mem region properly Hugo Villeneuve <hvilleneuve(a)dimonoff.com> ARM: dts: imx6ul-var-som: fix warning for non-existent dc-supply property Marek Vasut <marek.vasut+renesas(a)mailbox.org> arm64: dts: renesas: ironhide: Describe inline ECC carveouts Krzysztof Kozlowski <krzysztof.kozlowski(a)oss.qualcomm.com> arm64: dts: s32g3: Fix SWT8 watchdog address Mark Rutland <mark.rutland(a)arm.com> arm64: fpsimd: Fix type mismatch in sve_{save,load}_state() Yong Wang <edragain(a)163.com> net: ife: require ETH_HLEN to be pullable in ife_decode() Runyu Xiao <runyu.xiao(a)seu.edu.cn> octeontx2-vf: clear stale mailbox IRQ state before request_irq() Runyu Xiao <runyu.xiao(a)seu.edu.cn> octeontx2-pf: clear stale mailbox IRQ state before request_irq() Zhengchuan Liang <zcliangcn(a)gmail.com> net: atm: reject out-of-range traffic classes in QoS validation Michael Bommarito <michael.bommarito(a)gmail.com> net: qrtr: fix 32-bit integer overflow in qrtr_endpoint_post() Li Xiasong <lixiasong1(a)huawei.com> tipc: restrict socket queue dumps in enqueue tracepoints Cássio Gabriel <cassiogabrielcontato(a)gmail.com> ASoC: SOF: topology: validate vendor array size before parsing Peter Ujfalusi <peter.ujfalusi(a)linux.intel.com> ASoC: SOF: ipc3-control: Fix TOCTOU in bytes_put and bytes_get Peter Ujfalusi <peter.ujfalusi(a)linux.intel.com> ASoC: SOF: ipc3-control: Use overflow checks in control_update size calc Peter Ujfalusi <peter.ujfalusi(a)linux.intel.com> ASoC: SOF: ipc4-control: Validate notification payload size Peter Ujfalusi <peter.ujfalusi(a)linux.intel.com> ASoC: SOF: ipc4-control: Fix TOCTOU in sof_ipc4_bytes_put Jason Wang <jasowang(a)redhat.com> VDUSE: avoid leaking information to userspace Zhang Tianci <zhangtianci.1997(a)bytedance.com> vduse: Fix race in vduse_dev_msg_sync and vduse_dev_read_iter Wentao Liang <vulab(a)iscas.ac.cn> mlxsw: fix refcount leak in mlxsw_sp_vrs_lpm_tree_replace() Wentao Liang <vulab(a)iscas.ac.cn> mlxsw: fix refcount leak in mlxsw_sp_port_lag_join() Przemyslaw Korba <przemyslaw.korba(a)intel.com> idpf: add padding to PTP virtchnl structures Vincent Donnefort <vdonnefort(a)google.com> ring-buffer: Allow sparse CPU masks in ring_buffer_desc() Vincent Donnefort <vdonnefort(a)google.com> tracing/remotes: Fix struct_len in trace_remote_alloc_buffer() Vincent Donnefort <vdonnefort(a)google.com> tracing/remotes: Fix leak in trace_remote_alloc_buffer() error path Ben Dooks <ben.dooks(a)codethink.co.uk> drm/imagination: make pvr_fw_trace_init_mask_ops static Guangshuo Li <lgs201920130244(a)gmail.com> smb: client: fix overflow in passthrough ioctl bounds check Guangshuo Li <lgs201920130244(a)gmail.com> drm/xe: free madvise VMA array on L2 flush failure Anas Khan <anxkhn28(a)gmail.com> drm/xe: remove duplicate <kunit/test-bug.h> include Harman Kalra <hkalra(a)marvell.com> octeontx2-af: fix VF bringup affecting PF promiscuous state Gal Pressman <gal(a)nvidia.com> ethtool: rss: Fix hfunc and input_xfrm parsing on big endian Li RongQing <lirongqing(a)baidu.com> net/mlx5: Fix L3 tunnel entropy refcount leak Wang Yan <wangyan01(a)kylinos.cn> selftests/net: fix EVP_MD_CTX leak in tcp_mmap Thomas Zimmermann <tzimmermann(a)suse.de> drm/fb-helper: Only consider active CRTCs for vblank sync Timur Tabi <ttabi(a)nvidia.com> regulator: core: regulator_lock_two() should test for EDEADLK not EDEADLOCK Zizhi Wo <wozizhi(a)huawei.com> smb: client: fix busy dentry warning on unmount after DIO Cao Guanghui <caoguanghui(a)kylinos.cn> dm era: fix NULL pointer dereference in metadata_open() Chuck Lever <chuck.lever(a)oracle.com> SUNRPC: pin upper rpc_clnt across the TLS connect_worker Chuck Lever <chuck.lever(a)oracle.com> SUNRPC: release lower rpc_clnt if killed waiting for XPRT_LOCKED Guangshuo Li <lgs201920130244(a)gmail.com> cifs: validate DFS referral string offsets Rongguang Wei <weirongguang(a)kylinos.cn> s390/zcrypt: Remove the empty file Julian Anastasov <ja(a)ssi.bg> ipvs: ensure inner headers in ICMP errors are in headroom Yizhou Zhao <zhaoyz24(a)mails.tsinghua.edu.cn> ipvs: fix PMTU for GUE/GRE tunnel ICMP errors Yizhou Zhao <zhaoyz24(a)mails.tsinghua.edu.cn> ipvs: use parsed transport offset in TCP state lookup Yizhou Zhao <zhaoyz24(a)mails.tsinghua.edu.cn> ipvs: pass parsed transport offset to state handlers Tamaki Yanagawa <ty(a)000ty.net> netfilter: nft_lookup: fix catchall element handling with inverted lookups Eric Dumazet <edumazet(a)google.com> ipv4: igmp: Fix potential memory leaks in igmp_mod_timer() and igmp_stop_timer() Yuyang Huang <yuyanghuang(a)google.com> ipv4: igmp: annotate data-races around timer-related fields Yuyang Huang <sigefriedhyy(a)gmail.com> ipv4: igmp: annotate data-races around im->users Eric Dumazet <edumazet(a)google.com> ipv6: mcast: Fix potential UAF in MLD delayed work Eric Dumazet <edumazet(a)google.com> ipv4: igmp: Fix potential UAF in igmp_gq_start_timer() Rosen Penev <rosenp(a)gmail.com> gpio: mvebu: free generic chips on unbind Sandipan Das <sandipan.das(a)amd.com> perf/x86/amd/core: Avoid enabling BRS from the SVM reload path Suman Ghosh <sumang(a)marvell.com> octeontx2-pf: check DMAC extraction support before filtering Samuel Moelius <sam.moelius(a)trailofbits.com> net/sched: cake: reject overhead values that underflow length Rosen Penev <rosenp(a)gmail.com> net: mdio: select REGMAP_MMIO instead of depending on it Cihan Karadag <cihan.cihan(a)gmail.com> selftests: gpio: add gpio-cdev-uaf to .gitignore Maíra Canal <mcanal(a)igalia.com> drm/v3d: Reject invalid indirect BO handle in indirect CSD setup Lizhi Hou <lizhi.hou(a)amd.com> accel/amdxdna: Fix potential amdxdna_umap lifetime race Ben Dooks <ben.dooks(a)codethink.co.uk> tracing: Make tracepoint_printk static as not exported Robert Mader <robert.mader(a)collabora.com> drm: Guard DRM_CLIENT_CAP_PLANE_COLOR_PIPELINE Jia Wang <wangjia(a)ultrarisc.com> gpio: dwapb: Defer clock gating until noirq Enrico Pozzobon <enrico.pozzobon(a)dissecto.com> net: usb: lan78xx: disable VLAN filter in promiscuous mode Yuho Choi <dbgh9129(a)gmail.com> net/liquidio: drop cached VF pci_dev LUT Dong Yibo <dong100(a)mucse.com> net: rnpgbe: fix mailbox endianness and remove pointer casts Chuck Lever <chuck.lever(a)oracle.com> net/tls: Consume empty data records in tls_sw_read_sock() Lizhi Hou <lizhi.hou(a)amd.com> accel/amdxdna: Fix VMA access race Lizhi Hou <lizhi.hou(a)amd.com> accel/amdxdna: Use unsigned long for nr_pages in amdxdna_hmm_register() Lizhi Hou <lizhi.hou(a)amd.com> accel/amdxdna: Prevent PM resume deadlock in hwctx_sync_debug_bo() Hui Wang <hui.wang(a)canonical.com> ring-buffer: Fix event length with forced 8-byte alignment Stig Hornang <stig(a)hornang.me> Bluetooth: L2CAP: fix tx ident leak for commands without a response Weiming Shi <bestswngs(a)gmail.com> Bluetooth: bpa10x: avoid OOB read of revision string in bpa10x_setup() Pauli Virtanen <pav(a)iki.fi> Bluetooth: ISO: exclude RFU bits from ISO_SDU_Length Pauli Virtanen <pav(a)iki.fi> Bluetooth: ISO: fix malformed ISO_END/CONT handling Kiran K <kiran.k(a)intel.com> Bluetooth: btintel_pcie: Refactor FLR to use device_reprobe() Ravindra <ravindra(a)intel.com> Bluetooth: btintel_pcie: Separate coredump work from RX work Kiran K <kiran.k(a)intel.com> Bluetooth: btintel_pcie: Add support for smart trigger dump Chandrashekar Devegowda <chandrashekar.devegowda(a)intel.com> Bluetooth: btintel_pcie: Support Product level reset Sungwoo Kim <iam(a)sung-woo.kim> Bluetooth: sco: Fix a race condition in sco_sock_timeout() Cen Zhang <zzzccc427(a)gmail.com> Bluetooth: MGMT: Fix adv monitor add failure cleanup Cen Zhang <zzzccc427(a)gmail.com> Bluetooth: 6lowpan: hold L2CAP conn across debugfs control Cen Zhang <zzzccc427(a)gmail.com> Bluetooth: 6lowpan: avoid untracked enable work Suraj Kandpal <suraj.kandpal(a)intel.com> drm/i915/ltphy: Fix SSC Enablement bit in PORT_CLOCK_CTL Bartosz Golaszewski <bartosz.golaszewski(a)oss.qualcomm.com> gpio: shared: make the voting mechanism adaptable Steve French <stfrench(a)microsoft.com> smb: client: preserve leading slash for POSIX absolute symlink targets Namjae Jeon <linkinjeon(a)kernel.org> ksmbd: fix multichannel binding and enforce channel limit Eric Dumazet <edumazet(a)google.com> amt: fix size calculation in amt_get_size() Xiang Mei <xmei5(a)asu.edu> net/smc: fix UAF in smc_cdc_rx_handler() by pinning the socket Jamal Hadi Salim <jhs(a)mojatatu.com> net/sched: act_pedit: fix TOCTOU heap OOB write in tc offload Xiang Mei <xmei5(a)asu.edu> net: qualcomm: rmnet: validate MAP frame length before ingress parsing Shigeru Yoshida <syoshida(a)redhat.com> qede: fix off-by-one in BD ring consumption on build_skb failure Jens Emil Schulz Østergaard <jensemil.schulzostergaard(a)microchip.com> net: microchip: vcap: fix races on the shared Super VCAP block Feng Liu <feliu(a)nvidia.com> net/mlx5e: Fix publication race for priv->channel_stats[] Feng Liu <feliu(a)nvidia.com> net/mlx5e: Fix HV VHCA stats agent registration race Feng Liu <feliu(a)nvidia.com> net/mlx5e: Fix HV VHCA stats zero-sized buffer allocation Damon Ding <damon.ding(a)rock-chips.com> drm/bridge: analogix_dp: Fix PE/VS value shift mismatch during link training Shay Drory <shayd(a)nvidia.com> net/mlx5e: TC, skip peer flow cleanup when LAG seq is unavailable Shay Drory <shayd(a)nvidia.com> net/mlx5: LAG, MPESW, Fix missing complete() on devcom error Shay Drory <shayd(a)nvidia.com> net/mlx5: LAG, Fix off-by-one in single-FDB error rollback Shay Drory <shayd(a)nvidia.com> net/mlx5: LAG, extend shared FDB API with group_id filter Shay Drory <shayd(a)nvidia.com> net/mlx5: LAG, prepare for SD device integration Shay Drory <shayd(a)nvidia.com> net/mlx5: LAG, replace peer count check with direct peer lookup Shay Drory <shayd(a)nvidia.com> net/mlx5: LAG, factor out shared FDB code into dedicated file Mark Bloch <mbloch(a)nvidia.com> net/mlx5: Lag, avoid LAG and representor lock cycles Mark Bloch <mbloch(a)nvidia.com> net/mlx5: E-Switch, add representor lifecycle lock Mark Bloch <mbloch(a)nvidia.com> net/mlx5: Lag: refactor representor reload handling Mingyou Chen <qby140326(a)gmail.com> platform/x86: bitland-mifs-wmi: Fix NULL pointer dereference during suspend/resume Wyatt Feng <bronzed_45_vested(a)icloud.com> netfilter: xt_connmark: reject invalid shift parameters Pablo Neira Ayuso <pablo(a)netfilter.org> netfilter: nft_set_rbtree: get command skips end element with open interval Zhixing Chen <running910(a)gmail.com> netfilter: ip6tables: mark malformed IPv6 extension headers for hotdrop Feng Wu <wufengwufengwufeng(a)gmail.com> netfilter: xt_rateest: fix u64 truncation in xt_rateest_mt() Wyatt Feng <bronzed_45_vested(a)icloud.com> netfilter: xt_u32: reject invalid shift counts Qihang <q.h.hack.winter(a)gmail.com> gue: validate REMCSUM private option length Xiang Mei <xmei5(a)asu.edu> net: usb: net1080: validate packet_len before pad-byte access in rx_fixup Jia He <justin.he(a)arm.com> arm64/sysreg: Fix BWE field encoding in ID_AA64DFR2_EL1 Yiyang Chen <chenyy23(a)mails.tsinghua.edu.cn> selftests/hid: Cover hid_bpf_get_data() size overflow Yiyang Chen <chenyy23(a)mails.tsinghua.edu.cn> selftests/hid: Load only requested struct_ops maps Yiyang Chen <chenyy23(a)mails.tsinghua.edu.cn> HID: bpf: Fix hid_bpf_get_data() range check Cen Zhang <zzzccc427(a)gmail.com> ntfs: avoid stale runlist element dereference in fallocate Ariana Lazar <ariana.lazar(a)microchip.com> iio: dac: mcp47feb02: Fix passing uninitialized vref1_uV for no Vref1 case Anshuman Khandual <anshuman.khandual(a)arm.com> arm64/mm: Optimize TLB flush in unmap_hotplug_[pmd|pud]_range() Catalin Marinas <catalin.marinas(a)arm.com> arm64: Avoid eager DVMSync reclaim batches with C1-Pro SME erratum Lee Jones <lee(a)kernel.org> HID: core: Fix OOB read in hid_get_report for numbered reports Georgiy Osokin <g.osokin(a)auroraos.dev> HID: picolcd: prevent NULL pointer dereference in picolcd_send_and_wait() Cen Zhang <zzzccc427(a)gmail.com> ntfs: avoid stale runlist element dereference in MFT writeback David Howells <dhowells(a)redhat.com> netfs: Fix barriering when walking subrequest list Karuna Ramkumar <rkaruna(a)google.com> ata: libata-scsi: limit simulated SCSI command copy to response length Myeonghun Pak <mhun512(a)gmail.com> ata: sata_gemini: unwind clocks on IDE pinctrl errors David Howells <dhowells(a)redhat.com> cifs: Fix missing credit release on failure in cifs_issue_read() Jiri Olsa <jolsa(a)kernel.org> uprobes/x86: Use proper mm_struct in __in_uprobe_trampoline David Windsor <dwindsor(a)gmail.com> x86/uprobes: Keep shadow stack in sync for emulated CALLs Matthew Auld <matthew.auld(a)intel.com> drm/xe/pt: prevent invalid cursor access for purged BOs Matthew Auld <matthew.auld(a)intel.com> drm/xe: fix NPD in bo_meminfo() Michal Wajdeczko <michal.wajdeczko(a)intel.com> drm/xe/pf: Don't attempt to process FAST_REQ or EVENT relays Shuicheng Lin <shuicheng.lin(a)intel.com> drm/xe/hw_engine: Fix double-free of managed BO in error path Shuicheng Lin <shuicheng.lin(a)intel.com> drm/xe/userptr: Drop bogus static from finish in force_invalidate Shuicheng Lin <shuicheng.lin(a)intel.com> drm/xe/userptr: Hold notifier_lock for write on inject test path Brajesh Gupta <brajesh.gupta(a)imgtec.com> drm/imagination: Fix returned size for DRM_IOCTL_PVR_DEV_QUERY Francois Dugast <francois.dugast(a)intel.com> drm/xe/pt: Fix NULL pointer dereference in xe_pt_zap_ptes_entry() David Howells <dhowells(a)redhat.com> netfs: Fix folio state after ENOMEM whilst under writeback iteration David Howells <dhowells(a)redhat.com> netfs: Fix writeback error handling David Howells <dhowells(a)redhat.com> netfs: Fix writethrough to use collection offload David Howells <dhowells(a)redhat.com> cachefiles: Fix file burial to take lock when unsetting S_KERNEL_FILE David Howells <dhowells(a)redhat.com> netfs: Fix netfs_create_write_req() to handle async cache object creation Morduan Zang <zhangdandan(a)uniontech.com> iomap: guard io_size EOF trim against concurrent truncate underflow Amir Goldstein <amir73il(a)gmail.com> ovl: fix comment about locking order Hongling Zeng <zenghongling(a)kylinos.cn> cachefiles: Fix double unlock in nomem_d_alloc error path Michael Bommarito <michael.bommarito(a)gmail.com> minix: avoid overflow in bitmap block count calculation Fengnan Chang <changfengnan(a)bytedance.com> iomap: release pages on atomic dio size mismatch David Howells <dhowells(a)redhat.com> afs: Fix unchecked-length string display in debug statement David Howells <dhowells(a)redhat.com> afs: Fix the volume AFS_VOLUME_RM_TREE is set on David Howells <dhowells(a)redhat.com> afs: Fix premature cell exposure through /afs David Howells <dhowells(a)redhat.com> afs: Fix lack of locking around modifications of net->cells_dyn_ino David Howells <dhowells(a)redhat.com> afs: Fix vllist leak David Howells <dhowells(a)redhat.com> afs: Fix leak of ungot volume David Howells <dhowells(a)redhat.com> afs: Use scoped_seqlock_read() rather than manually doing seqlock stuff David Howells <dhowells(a)redhat.com> afs: Fix missing NULL pointer check in afs_break_some_callbacks() David Howells <dhowells(a)redhat.com> afs: Fix callback service message parsers to pass through -EAGAIN David Howells <dhowells(a)redhat.com> afs: Fix reinitialisation of the inode, in particular ->lock_work David Howells <dhowells(a)redhat.com> afs: Fix misplaced inc of net->cells_outstanding David Howells <dhowells(a)redhat.com> afs: Fix bulk lookup malfunction due to change in dir_emit() API Li RongQing <lirongqing(a)baidu.com> afs: Remove erroneous seq |= 1 in volume lookup loop Zilin Guan <zilin(a)seu.edu.cn> afs: use kvfree() to free memory allocated by kvcalloc() David Howells <dhowells(a)redhat.com> afs: Fix directory inode initialisation order David Howells <dhowells(a)redhat.com> afs: Remove setting of AS_RELEASE_ALWAYS for symlinks and mountpoints David Howells <dhowells(a)redhat.com> afs: Fix double netfs initialisation in afs_root_iget() Dan Carpenter <error27(a)gmail.com> afs: Fix error code in afs_extract_vl_addrs() Christian Brauner <brauner(a)kernel.org> fs: refuse O_TMPFILE creation with an unmapped fsuid or fsgid Samuel Moelius <sam.moelius(a)trailofbits.com> net/sched: hhf: clear heavy-hitter state on reset Samuel Moelius <sam.moelius(a)trailofbits.com> net/sched: dualpi2: clear stale classification on filter miss Michael Bommarito <michael.bommarito(a)gmail.com> xen/pvcalls: bound backend response req_id before indexing rsp[] Viacheslav Bocharov <v(a)baodeep.com> pinctrl: meson: restore non-sleeping GPIO access Vladimir Zapolskiy <vz(a)kernel.org> gpio: timberdale: Return -ENOMEM on dynamic memory allocation in probe Gil Portnoy <dddhkts1(a)gmail.com> ksmbd: fix use-after-free of fp->owner.name in durable handle owner check Haofeng Li <lihaofeng(a)kylinos.cn> ksmbd: reject undersized DACLs before parsing ACEs Sechang Lim <rhkrqnwk98(a)gmail.com> net/sched: act_bpf: use rcu_dereference_bh() to read the filter Jakub Kicinski <kuba(a)kernel.org> selftests: drv-net: tso: don't touch dangerous feature bits Gleb Markov <markov.gi(a)npc-ksb.ru> cxgb4: Fix decode strings dump for T6 adapters Longjun Tang <tanglongjun(a)kylinos.cn> virtio_net: disable cb when NAPI is busy-polled Xin Long <lucien.xin(a)gmail.com> sctp: fix addr_wq_timer race in sctp_free_addr_wq() Felix Gu <ustc.gu(a)gmail.com> spi: rzv2h-rspi: Fix DMA transfer error handling for signal interruption Qingshuang Fu <fuqingshuang(a)kylinos.cn> irqchip/ts4800: Fix missing chained handler cleanup on remove Yuho Choi <dbgh9129(a)gmail.com> irqchip/gic-v3-its: Fix OF node reference leak Masami Hiramatsu (Google) <mhiramat(a)kernel.org> tracing/probes: Make the $ prefix mandatory for comm access Sechang Lim <rhkrqnwk98(a)gmail.com> tracing/fprobe: Fix NULL pointer dereference in fprobe_fgraph_entry() Martin Kaiser <martin(a)kaiser.cx> tracing: eprobe: read the complete FILTER_PTR_STRING pointer Masami Hiramatsu (Google) <mhiramat(a)kernel.org> tracing/events: Fix to check the simple_tsk_fn creation Masami Hiramatsu (Google) <mhiramat(a)kernel.org> tracing/probes: Remove WARN_ON_ONCE from parse_btf_arg Steven Rostedt <rostedt(a)goodmis.org> tracing/eprobes: Allow use of BTF names to dereference pointers Boris Brezillon <boris.brezillon(a)collabora.com> drm/panthor: Interrupt group start/resumption if group_bind_locked() fails Boris Brezillon <boris.brezillon(a)collabora.com> drm/panthor: Fix a leak when a group is evicted before the tiler OOM is serviced Boris Brezillon <boris.brezillon(a)collabora.com> drm/panthor: Fix panthor_pwr_unplug() Boris Brezillon <boris.brezillon(a)collabora.com> drm/panthor: Don't overrule pending immediate ticks in sched_resume_tick() Boris Brezillon <boris.brezillon(a)collabora.com> drm/panthor: Fix theoretical IOMEM access in suspended state Karunika Choo <karunika.choo(a)arm.com> drm/panthor: Store IRQ register base iomem pointer in panthor_irq Karunika Choo <karunika.choo(a)arm.com> drm/panthor: Split register definitions by components Karunika Choo <karunika.choo(a)arm.com> drm/panthor: Pass an iomem pointer to GPU register access helpers Boris Brezillon <boris.brezillon(a)collabora.com> drm/panthor: Fix potential invalid pointer deref in group_process_tiler_oom() Boris Brezillon <boris.brezillon(a)collabora.com> drm/panthor: Keep the reset work disabled until everything is initialized Boris Brezillon <boris.brezillon(a)collabora.com> drm/panthor: Always use the IRQ-safe variant when acquiring the fence lock Viacheslav Bocharov <v(a)baodeep.com> gpio: shared-proxy: always serialize with a sleeping mutex Ido Schimmel <idosch(a)nvidia.com> bridge: stp: Fix a potential use-after-free when deleting a bridge Jamal Hadi Salim <jhs(a)mojatatu.com> net/sched: sch_teql: Introduce slaves_lock to avoid race condition and UAF Rosen Penev <rosenp(a)gmail.com> net: gianfar: dispose irq mappings on probe failure and device removal Jiawen Wu <jiawenwu(a)trustnetic.com> net: libwx: fix VMDQ mask for 1-queue mode Petr Wozniak <petr.wozniak(a)gmail.com> net: phy: sfp: free mii_bus in sfp_i2c_mdiobus_destroy Xiang Mei <xmei5(a)asu.edu> usbnet: gl620a: fix out-of-bounds read in genelink_rx_fixup() Pengfei Zhang <zhangfeionline(a)gmail.com> ipv6: fib6: fix NULL deref in fib6_walk_continue() on multi-batch dump Jakub Kicinski <kuba(a)kernel.org> eth: fbnic: don't cache shinfo across skb realloc Guenter Roeck <linux(a)roeck-us.net> hwmon: (aspeed-g6-pwm-tach) Guard fan RPM calculation against divide-by-zero Guenter Roeck <linux(a)roeck-us.net> hwmon: (pmbus) Fix passing events to regulator core Matti Vaittinen <mazziesaccount(a)gmail.com> hwmon: adm1275: Prevent reading uninitialized stack Lizhi Hou <lizhi.hou(a)amd.com> accel/amdxdna: Fix iommu domain lifetime race during device removal Abdurrahman Hussain <abdurrahman(a)nexthop.ai> hwmon: (pmbus/core) honor vrm_version in pmbus_data2reg_vid() Luca Weiss <luca.weiss(a)fairphone.com> ASoC: codecs: lpass-va-macro: Fix LPASS Codec Version for SC7280 Kyle Hendry <kylehendrydev(a)gmail.com> MIPS: mm: Add check for highmem before removing memory block Maciej W. Rozycki <macro(a)orcam.me.uk> MIPS: DEC: Ensure RTC platform device deregistration upon failure Xin Long <lucien.xin(a)gmail.com> sctp: add INIT verification after cookie unpacking Yousef Alhouseen <alhouseenyousef(a)gmail.com> sctp: fix SCTP_RESET_STREAMS stream list length limit Wei Fang <wei.fang(a)nxp.com> net: enetc: check the number of BDs needed for xdp_frame Matvey Kovalev <matvey.kovalev(a)ispras.ru> qede: fix out-of-bounds check for cqe->len_list[] Nuoqi Gui <gnq25(a)mails.tsinghua.edu.cn> seg6: validate SRH length before reading fixed fields Corey Leavitt <corey(a)leavitt.info> net: pse-pd: scope pse_control regulator handle to kref lifetime Pengpeng Hou <pengpeng(a)iscas.ac.cn> gpio: htc-egpio: use managed gpiochip registration Pengpeng Hou <pengpeng(a)iscas.ac.cn> gpio: mvebu: fail probe if gpiochip registration fails KaFai Wan <kafai.wan(a)linux.dev> bpf: Fix insn_aux_data leak on verifier err_free_env path Nuoqi Gui <gnq25(a)mails.tsinghua.edu.cn> bpf: Mask pseudo pointer values in verifier logs Samuel Holland <samuel.holland(a)sifive.com> riscv: Fix 32-bit call_on_irq_stack() frame pointer ABI Yicong Yang <yang.yicong(a)picoheart.com> ACPI: RIMT: Only defer the IOMMU configuration in init stage Pengpeng Hou <pengpeng(a)iscas.ac.cn> spi: sh-msiof: abort transfers when reset times out Martin Kaiser <martin(a)kaiser.cx> tracing: probes: fix typo in a log message Jiaming Zhang <r772577952(a)gmail.com> ALSA: FCP: Fix NULL pointer dereference in interface lookup Shuaisong Yang <yangshuaisong(a)h-partners.com> net: hns3: differentiate autoneg default values between copper and fiber Shuaisong Yang <yangshuaisong(a)h-partners.com> net: hns3: fix permanent link down deadlock after reset Shuaisong Yang <yangshuaisong(a)h-partners.com> net: hns3: refactor MAC autoneg and speed configuration Shuaisong Yang <yangshuaisong(a)h-partners.com> net: hns3: unify copper port ksettings configuration path Nirmoy Das <nirmoyd(a)nvidia.com> selftests: tls: size splice_short pipe by page size Eric Dumazet <edumazet(a)google.com> tipc: avoid busy looping in tipc_exit_net() Eric Dumazet <edumazet(a)google.com> tipc: fix UAF in cleanup_bearer() due to premature dst_cache_destroy() Kuniyuki Iwashima <kuniyu(a)google.com> tipc: Store struct sock in struct udp_bearer. Kuniyuki Iwashima <kuniyu(a)google.com> udp_tunnel: Pass struct sock to setup_udp_tunnel_sock(). Kuniyuki Iwashima <kuniyu(a)google.com> udp_tunnel: Pass struct sock to udp_tunnel_sock_release(). Wei Fang <wei.fang(a)nxp.com> net: enetc: fix potential divide-by-zero when num_vsi is zero Rob Herring (Arm) <robh(a)kernel.org> dt-bindings: net: renesas,ether: Drop example "ethernet-phy-ieee802.3-c22" fallback Eric Dumazet <edumazet(a)google.com> net: udp_tunnel: prevent double queueing in udp_tunnel_nic_device_sync Shengjiu Wang <shengjiu.wang(a)nxp.com> ASoC: fsl_asrc_dma: fix eDMA maxburst misalignment with channel count Tiezhu Yang <yangtiezhu(a)loongson.cn> LoongArch: BPF: Fix off-by-one error in tail call Tiezhu Yang <yangtiezhu(a)loongson.cn> LoongArch: BPF: Fix outdated tail call comments 谢致邦 (XIE Zhibang) <Yeking(a)Red54.com> LoongArch: Move struct kimage forward declaration before use Inochi Amaoto <inochiama(a)gmail.com> net: stmmac: dwmac-spacemit: Fix wrong irq definition Inochi Amaoto <inochiama(a)gmail.com> net: stmmac: dwmac-spacemit: Fix wrong phy interface definition Shitalkumar Gandhi <shital.gandhi45(a)gmail.com> net: ethernet: sunplus: spl2sw: fix phy_node refcount leak in remove Ruoyu Wang <ruoyuw560(a)gmail.com> net: sungem: fix probe error cleanup Greg Thelen <gthelen(a)google.com> tools: ynl: build archives with $(AR) Xiang Mei <xmei5(a)asu.edu> geneve: validate inner network offset in geneve_gro_complete() Xiang Mei <xmei5(a)asu.edu> geneve: gate GRO hint in geneve_gro_complete() on gs->gro_hint Yun Zhou <yun.zhou(a)windriver.com> net: mvneta: re-enable percpu interrupt on resume Ratheesh Kannoth <rkannoth(a)marvell.com> octeontx2-af: fix CGX debugfs RVU AF PCI reference leaks Subbaraya Sundeep <sbhatta(a)marvell.com> octeontx2-af: Validate NIX maximum LFs correctly Jan Klos <honza.klos(a)gmail.com> net: phy: realtek: Clear MDIO_AN_10GBT_CTRL_ADV10G bit Erni Sri Satya Vennela <ernis(a)linux.microsoft.com> net: mana: Fall back to standard MTU when PF reports adapter_mtu of 0 Daniel Golle <daniel(a)makrotopia.org> net: dsa: mxl862xx: fix use-after-free of DSA ports in crc_err_work Daniel Golle <daniel(a)makrotopia.org> net: dsa: mxl862xx: avoid unaligned 16-bit access in api_wrap David Yang <mmyangfl(a)gmail.com> net: dsa: realtek: fix memory leak in rtl8366rb_setup_led() Haoxiang Li <haoxiang_li2024(a)163.com> rtc: cmos: unregister HPET IRQ handler on probe failure Fredrik M Olsson <fredrik.m.olsson(a)axis.com> rtc: ds1307: Fix off-by-one issue with wday for rx8130 Huiwen He <hehuiwen(a)kylinos.cn> smb/client: preserve errors from smb2_set_sparse() Li RongQing <lirongqing(a)baidu.com> ACPI: processor_idle: Mark LPI enter functions as __cpuidle Rafael J. Wysocki <rafael.j.wysocki(a)intel.com> ACPICA: Unbreak tools build after switching over to strscpy_pad() Rafael J. Wysocki <rafael.j.wysocki(a)intel.com> thermal: testing: zone: Flush work items during cleanup Claudio Imbrenda <imbrenda(a)linux.ibm.com> s390/mm: Fix handling of _PAGE_UNUSED pte bit Jakub Kicinski <kuba(a)kernel.org> eth: fbnic: fix ordering of heartbeat vs ownership Fernando Fernandez Mancera <fmancera(a)suse.de> ipv6: fix missing notification for ignore_routes_with_linkdown Fernando Fernandez Mancera <fmancera(a)suse.de> ipv6: fix state corruption during proxy_ndp sysctl restart Fernando Fernandez Mancera <fmancera(a)suse.de> ipv6: fix error handling in disable_policy sysctl Fernando Fernandez Mancera <fmancera(a)suse.de> ipv6: fix error handling in forwarding sysctl Fernando Fernandez Mancera <fmancera(a)suse.de> ipv6: fix error handling in ignore_routes_with_linkdown sysctl Fernando Fernandez Mancera <fmancera(a)suse.de> ipv6: fix error handling in disable_ipv6 sysctl Xin Long <lucien.xin(a)gmail.com> sctp: fix err_chunk memory leaks in INIT handling Jamal Hadi Salim <jhs(a)mojatatu.com> net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle Jakub Sitnicki <jakub(a)cloudflare.com> net: lwtunnel: Drop skb metadata before LWT encapsulation Nicolai Buchwitz <nb(a)tipi-net.de> net: usb: lan78xx: restore VLAN and hash filters after link up Eric Dumazet <edumazet(a)google.com> veth: fix NAPI leak in XDP enable error path Meghana Malladi <m-malladi(a)ti.com> net: ti: icssg: Fix XSK zero copy TX during application wakeup Aleksandrova Alyona <aga(a)itb.spb.ru> net: dsa: sja1105: round up PTP perout pin duration Eric Dumazet <edumazet(a)google.com> net: do not acquire dev->tx_global_lock in netdev_watchdog_up() Xiang Mei <xmei5(a)asu.edu> net, bpf: check master for NULL in xdp_master_redirect() Doehyun Baek <doehyunbaek(a)gmail.com> Docs/driver-api/uio-howto: document mmap_prepare callback Krzysztof Wilczyński <kwilczynski(a)kernel.org> alpha/PCI: Fix __pci_mmap_fits() overflow for zero-length BARs Krzysztof Wilczyński <kwilczynski(a)kernel.org> alpha/PCI: Add security_locked_down() check to pci_mmap_resource() Koichiro Den <den(a)valinux.co.jp> NTB: epf: Fix doorbell bitmask and IRQ vector handling Koichiro Den <den(a)valinux.co.jp> NTB: epf: Report 0-based doorbell vector via ntb_db_event() Koichiro Den <den(a)valinux.co.jp> NTB: epf: Make db_valid_mask cover only real doorbell bits Koichiro Den <den(a)valinux.co.jp> PCI: endpoint: pci-epf-vntb: Exclude reserved slots from db_valid_mask Oder Chiou <oder_chiou(a)realtek.com> ASoC: rt5575: Use __le32 for SPI burst write address HyeongJun An <sammiee5311(a)gmail.com> ASoC: SDCA: Validate written enum value in ge_put_enum_double() Rafael J. Wysocki <rafael.j.wysocki(a)intel.com> cpuidle: Allow exit latency to exceed target residency Pablo Neira Ayuso <pablo(a)netfilter.org> netfilter: nf_conntrack_helper: cap maximum number of expectation at helper registration Florian Westphal <fw(a)strlen.de> netfilter: nft_ct: expectation timeouts are passed in milliseconds Pablo Neira Ayuso <pablo(a)netfilter.org> netfilter: nf_conntrack_expect: run expectation eviction with no helper Pablo Neira Ayuso <pablo(a)netfilter.org> netfilter: nf_conntrack_expect: store master_tuple in expectation Pablo Neira Ayuso <pablo(a)netfilter.org> netfilter: nf_conntrack_expect: use conntrack GC to reap expectations Pablo Neira Ayuso <pablo(a)netfilter.org> netfilter: conntrack: check NULL when retrieving ct extension Pablo Neira Ayuso <pablo(a)netfilter.org> netfilter: nf_conntrack_pptp: move GRE specific cleanup to GRE tracker Pablo Neira Ayuso <pablo(a)netfilter.org> netfilter: nf_conntrack_helper: dynamically allocate struct nf_conntrack_helper Qingshuang Fu <fuqingshuang(a)kylinos.cn> gpio: davinci: fix IRQ domain leak on devm_kzalloc failure Florian Westphal <fw(a)strlen.de> netfilter: nft_compat: ebtables emulation must reject non-bridge targets Runyu Xiao <runyu.xiao(a)seu.edu.cn> netfilter: nft_synproxy: stop bypassing the priv->info snapshot Lorenzo Bianconi <lorenzo(a)kernel.org> netfilter: flowtable: Validate iph->ihl in nf_flow_ip4_tunnel_proto() Fernando Fernandez Mancera <fmancera(a)suse.de> netfilter: nf_conncount: prevent connlimit drops for early confirmed ct Mathias Krause <minipli(a)grsecurity.net> netfilter: nf_nat: avoid invalid nat_net pointer use on failed nf_nat_init() Bradley Morgan <include(a)grrlz.net> bpf: Disable xfrm_decode_session hook attachment Chen Cheng <chencheng(a)fnnas.com> md/raid5: avoid R5_Overlap races while breaking stripe batches Chen Cheng <chencheng(a)fnnas.com> md/raid5: use stripe state snapshot in break_stripe_batch_list() Kuniyuki Iwashima <kuniyu(a)google.com> ipv4: fib: Don't ignore error route in local/main tables. Jakub Kicinski <kuba(a)kernel.org> eth: bnxt: improve the timing of stats Xiang Mei <xmei5(a)asu.edu> ipv6: Fix null-ptr-deref in fib6_nh_mtu_change(). Gil Portnoy <dddhkts1(a)gmail.com> ksmbd: fix use-after-free of conn->preauth_info in concurrent SMB2 NEGOTIATE Yiyang Chen <chenyy23(a)mails.tsinghua.edu.cn> selftests/bpf: Cover small conntrack opts error writes Yiyang Chen <chenyy23(a)mails.tsinghua.edu.cn> bpf: Guard conntrack opts error writes Stepan Ionichev <sozdayvek(a)gmail.com> rtc: msc313: fix NULL deref in shared IRQ handler at probe Dima Ruinskiy <dima.ruinskiy(a)intel.com> e1000e: Reconfigure PLL clock gate timeout and re-enable K1 on Meteor Lake Mohamed Khalfella <mkhalfella(a)purestorage.com> i40e: Fix i40e_debug() to use struct i40e_hw argument ZhaoJinming <zhaojinming(a)uniontech.com> ice: dpll: fix memory leak in ice_dpll_init_info error paths ZhaoJinming <zhaojinming(a)uniontech.com> ice: dpll: set pointers to NULL after kfree in ice_dpll_deinit_info John Madieu <john.madieu.xa(a)bp.renesas.com> rtc: isl1208: Balance enable_irq_wake() with disable_irq_wake() on cleanup Marcin Szycik <marcin.szycik(a)intel.com> ice: call netif_keep_dst() once when entering switchdev mode Lukasz Czapnik <lukasz.czapnik(a)intel.com> ice: fix AQ error code comparison in ice_set_pauseparam() Dawid Osuchowski <dawid.osuchowski(a)linux.intel.com> ice: fix FDIR CTRL VSI resource leak in ice_reset_all_vfs() Nuoqi Gui <gnq25(a)mails.tsinghua.edu.cn> bpf: Preserve pointer spill metadata during half-slot cleanup Koichiro Den <den(a)valinux.co.jp> PCI: endpoint: pci-epf-vntb: Report 0-based doorbell vector via ntb_db_event() Koichiro Den <den(a)valinux.co.jp> PCI: endpoint: pci-epf-vntb: Defer pci_epc_raise_irq() out of atomic context Koichiro Den <den(a)valinux.co.jp> PCI: endpoint: pci-epf-vntb: Document legacy MSI doorbell offset Manivannan Sadhasivam <manivannan.sadhasivam(a)oss.qualcomm.com> PCI: endpoint: pci-epf-ntb: Add check to detect 'db_count' value of 0 Manivannan Sadhasivam <manivannan.sadhasivam(a)oss.qualcomm.com> PCI: endpoint: pci-epf-vntb: Add check to detect 'db_count' value of 0 Ahmad Fatoum <a.fatoum(a)pengutronix.de> ASoC: cs530x: Fix expected MCLK rates for CS5302/4/8 Zhan Xusheng <zhanxusheng(a)xiaomi.com> erofs: handle 48-bit blocks_hi for compressed inodes Xiang Mei <xmei5(a)asu.edu> drm/edid: fix OOB read in drm_parse_tiled_block() Ruoyu Wang <ruoyuw560(a)gmail.com> gpiolib: initialize return value in gpiochip_set_multiple() Bartosz Golaszewski <bartosz.golaszewski(a)oss.qualcomm.com> power: sequencing: fix ABBA deadlock in pwrseq_device_unregister() Amery Hung <ameryhung(a)gmail.com> bpf: Fix effective prog array index with BPF_F_PREORDER Thiébaud Weksteen <tweek(a)google.com> bpf: Fix BPF_PROG_ASSOC_STRUCT_OPS last field check Avinash Duduskar <avinash.duduskar(a)gmail.com> bpf: zero-initialize the fib lookup flow struct Yichong Chen <chenyichong(a)uniontech.com> bpftool: Fix vmlinux BTF leak in cgroup commands Sun Jian <sun.jian.kdev(a)gmail.com> bpf: Fix partial copy of non-linear test_run output Nuoqi Gui <gnq25(a)mails.tsinghua.edu.cn> bpf: Fix stack slot index in nospec checks Ronan Dalton <ronan.dalton(a)alliedtelesis.co.nz> rtc: ds1307: handle oscillator stop flag for ds1337/ds1339/ds3231 Antoni Pokusinski <apokusinski01(a)gmail.com> rtc: abx80x: fix the RTC_VL_CLR clearing all status flags Ioana Ciornei <ioana.ciornei(a)nxp.com> dpaa2-switch: do not accept VLAN uppers while bridged Jiayuan Chen <jiayuan.chen(a)linux.dev> ipv6: ioam: fix type confusion of dst_entry Weiming Shi <bestswngs(a)gmail.com> ipv6: ndisc: fix NULL deref in accept_untracked_na() Wayen Yan <win847(a)gmail.com> net: airoha: Fix skb->priority underflow in airoha_dev_select_queue() Michael Bommarito <michael.bommarito(a)gmail.com> net/sched: act_ct: fix nf_connlabels leak on two error paths Rosen Penev <rosenp(a)gmail.com> net: emac: Fix NULL pointer dereference in emac_probe Geetha sowjanya <gakula(a)marvell.com> octeontx2-pf: mcs: Fix mcs resources free on PF shutdown Subbaraya Sundeep <sbhatta(a)marvell.com> octeontx2-pf: Clear stats of all resources when freeing resources Geetha sowjanya <gakula(a)marvell.com> octeontx2-af: mcs: Fix unsupported secy stats read Ratheesh Kannoth <rkannoth(a)marvell.com> octeontx2-af: npc: cn20k: fix NPC defrag Wayen Yan <win847(a)gmail.com> net: ethernet: mtk_ppe: Fix rhashtable leak in mtk_ppe_init error paths Ilya Maximets <i.maximets(a)ovn.org> net: dst_metadata: fix false-positive memcpy overflow in tun_dst_unclone Weiming Shi <bestswngs(a)gmail.com> tipc: fix use-after-free of the discoverer in tipc_disc_rcv() Ruoyu Wang <ruoyuw560(a)gmail.com> net: marvell: prestera: initialize err in prestera_port_sfp_bind Aboorva Devarajan <aboorvad(a)linux.ibm.com> selftests/mm: fix exclusive_cow test fork() handling Sayali Patil <sayalip(a)linux.ibm.com> selftests/mm: remove hardcoded THP sizing assumptions in hmm tests Sayali Patil <sayalip(a)linux.ibm.com> selftests/mm: allow PUD-level entries in compound testcase of hmm tests Sayali Patil <sayalip(a)linux.ibm.com> selftests/mm: clarify alternate unmapping in compaction_test Sayali Patil <sayalip(a)linux.ibm.com> selftests/mm: move hwpoison setup into run_test() and silence modprobe output for memory-failure category Mike Rapoport (Microsoft) <rppt(a)kernel.org> selftests/mm: run_vmtests.sh: free memory if available memory is low Sayali Patil <sayalip(a)linux.ibm.com> selftests/mm: skip uffd-stress test when nr_pages_per_cpu is zero Sayali Patil <sayalip(a)linux.ibm.com> selftests/mm: ensure destination is hugetlb-backed in hugetlb-mremap Sayali Patil <sayalip(a)linux.ibm.com> selftest/mm: register existing mapping with userfaultfd in hugetlb-mremap Sayali Patil <sayalip(a)linux.ibm.com> selftests/mm: free dynamically allocated PMD-sized buffers in split_huge_page_test Sayali Patil <sayalip(a)linux.ibm.com> selftests/mm: size tmpfs according to PMD page size in split_huge_page_test Sayali Patil <sayalip(a)linux.ibm.com> selftests/mm: fix cgroup task placement and drop memory.current checks in hugetlb_reparenting_test.sh Sayali Patil <sayalip(a)linux.ibm.com> selftests/mm: fix hugetlb pathname construction in hugetlb_reparenting_test.sh Sayali Patil <sayalip(a)linux.ibm.com> selftests/mm: restore default nr_hugepages value via exit trap in hugetlb_reparenting_test.sh Sayali Patil <sayalip(a)linux.ibm.com> selftests/mm: fix hugetlb pathname construction in charge_reserved_hugetlb.sh Sayali Patil <sayalip(a)linux.ibm.com> selftests/mm: restore default nr_hugepages value via exit trap in charge_reserved_hugetlb.sh Hao Ge <hao.ge(a)linux.dev> alloc_tag: fix use-after-free in /proc/allocinfo after module unload Bhargav Joshi <j.bhargav.u(a)gmail.com> irqchip/crossbar: Fix parent domain resource leak Sebastian Andrzej Siewior <bigeasy(a)linutronix.de> mailbox: imx: Forward the timeout/ error in imx_mu_generic_tx() Rafael J. Wysocki <rafael.j.wysocki(a)intel.com> tpm_crb: Check ACPI_COMPANION() against NULL during probe Florian Westphal <fw(a)strlen.de> netfilter: nft_meta_bridge: fix NFT_META_BRI_IIFPVID stack leak Florian Westphal <fw(a)strlen.de> netfilter: nf_reject: skip iphdr options when looking for icmp header Florian Westphal <fw(a)strlen.de> netfilter: nft_flow_offload: zero device address for non-ether case Florian Westphal <fw(a)strlen.de> netfilter: nft_meta_bridge: add validate callback for get operations Florian Westphal <fw(a)strlen.de> netfilter: nft_payload: reject offsets exceeding 65535 bytes Jozsef Kadlecsik <kadlec(a)netfilter.org> netfilter: ipset: make sure gc is properly stopped Jozsef Kadlecsik <kadlec(a)netfilter.org> netfilter: ipset: fix order of kfree_rcu() and rcu_assign_pointer() Jozsef Kadlecsik <kadlec(a)netfilter.org> netfilter: ipset: Don't use test_bit() in lockless RCU readers in bitmap types Jozsef Kadlecsik <kadlec(a)netfilter.org> netfilter: ipset: Don't use test_bit() in lockless RCU readers in hash types Abd-Alrhman Masalkhi <abd.masalkhi(a)gmail.com> md/raid1: free r1_bio when REQ_NOWAIT is set and read would block on retry Abd-Alrhman Masalkhi <abd.masalkhi(a)gmail.com> md/raid1: honor REQ_NOWAIT when waiting for behind writes Abd-Alrhman Masalkhi <abd.masalkhi(a)gmail.com> md/raid10: fix writes_pending and barrier reference leaks on discard failures Abd-Alrhman Masalkhi <abd.masalkhi(a)gmail.com> md/raid10: fix writes_pending leak on write request failures Abd-Alrhman Masalkhi <abd.masalkhi(a)gmail.com> md/raid1: fix writes_pending and barrier reference leaks on write failures Robertus Diawan Chris <robertusdchris(a)gmail.com> mac802154: Prevent overwrite return code in mac802154_perform_association() Aleksandr Nogikh <nogikh(a)google.com> ieee802154: fix kernel-infoleak in dgram_recvmsg() Ivan Abramov <i.abramov(a)mt-integration.ru> ieee802154: Remove WARN_ON() in cfg802154_pernet_exit() Ivan Abramov <i.abramov(a)mt-integration.ru> ieee802154: Avoid calling WARN_ON() on -ENOMEM in cfg802154_switch_netns() Ivan Abramov <i.abramov(a)mt-integration.ru> ieee802154: Restore initial state on failed device_rename() in cfg802154_switch_netns() Xu Rao <raoxu(a)uniontech.com> ACPI: IPMI: Fix inverted interface check in ipmi_bmc_gone() Andy Shevchenko <andriy.shevchenko(a)linux.intel.com> ACPI: resource: Amend kernel-doc style Ricardo Neri <ricardo.neri-calderon(a)linux.intel.com> thermal: intel: Fix dangling resources on thermal_throttle_online() failure Breno Leitao <leitao(a)debian.org> arm64/hw_breakpoint: reject unaligned watchpoints that would truncate BAS Arnd Bergmann <arnd(a)arndb.de> arm64: static_call: include asm/insns.h Lorenzo Bianconi <lorenzo(a)kernel.org> netfilter: flowtable: fix and simplify IP6IP6 tunnel handling Cen Zhang <zzzccc427(a)gmail.com> ALSA: usb-audio: Kill MIDI 2.0 URBs before freeing endpoints Daniel Zahka <daniel.zahka(a)gmail.com> eth: fbnic: take netif_addr_lock_bh() around rx mode address programming Ido Schimmel <idosch(a)nvidia.com> selftests: vlan_bridge_binding: Fix flaky operational state check Breno Leitao <leitao(a)debian.org> netconsole: don't drop the last byte of a full-sized message Yun Zhou <yun.zhou(a)windriver.com> flow_dissector: check device type before reading ETH_ADDRS Lukasz Raczylo <lukasz(a)raczylo.com> net: macb: add TX stall timeout callback to recover from lost TSTART write Wayen Yan <win847(a)gmail.com> net: airoha: fix foe_check_time allocation size Cosmin Ratiu <cratiu(a)nvidia.com> devlink: Fix parent ref leak on tc-bw failure Cosmin Ratiu <cratiu(a)nvidia.com> devlink: Fix parent ref leak in devl_rate_node_create() Ioana Ciornei <ioana.ciornei(a)nxp.com> dpaa2-switch: fix VLAN upper check not rejecting bridge join Xiang Mei <xmei5(a)asu.edu> virtio-net: fix len check in receive_big() Quang Nguyen <quang.nguyen.wx(a)renesas.com> spi: rpc-if: Use correct device for hardware reinitialization on resume Mark Tomlinson <mark.tomlinson(a)alliedtelesis.co.nz> PCI: iproc: Restore .map_irq() for the platform bus driver Michael Bommarito <michael.bommarito(a)gmail.com> ALSA: usb-audio: qcom: clear opened when stream enable fails Michael Bommarito <michael.bommarito(a)gmail.com> ALSA: usb-audio: qcom: reject stream disable with no active interface Xin Long <lucien.xin(a)gmail.com> sctp: hold socket lock when dumping endpoints in sctp_diag Jakub Kicinski <kuba(a)kernel.org> net: psample: fix info leak in PSAMPLE_ATTR_DATA Ratheesh Kannoth <rkannoth(a)marvell.com> octeontx2-af: npc: Log successful MCAM drop-on-non-hit install at debug level Ratheesh Kannoth <rkannoth(a)marvell.com> octeontx2-pf: Fix leak of SQ timestamp buffer on teardown Tianchen Ding <dtcccc(a)linux.alibaba.com> selftests/ftrace: Fix trace_marker_raw test on 64K page kernels Christian Marangi <ansuelsmth(a)gmail.com> net: ethernet: mtk_eth_soc: fix supported_interface set after phylink_create Thadeu Lima de Souza Cascardo <cascardo(a)igalia.com> drm/amdgpu: initialize irq.lock spinlock earlier Mario Limonciello <mario.limonciello(a)amd.com> drm/amdkfd: fix list_del corruption in kfd_criu_resume_svm Matthew Schwartz <matthew.schwartz(a)linux.dev> drm/amd/display: Fix mem_type change detection for async flips Roman Li <Roman.Li(a)amd.com> drm/amd/display: Skip PHY SSC reduction on some 8K panels Qiang Yu <Qiang.Yu(a)amd.com> drm/amdgpu: initialize iter.start in amdgpu_devcoredump_format Yunxiang Li <Yunxiang.Li(a)amd.com> drm/amdkfd: Avoid double-unpin of DOORBELL/MMIO BOs on free Sen Wang <sen(a)ti.com> ASoC: tlv320aic3x: restrict CLKDIV bypass Q values in dual-rate mode Arnaldo Carvalho de Melo <acme(a)redhat.com> perf dso: Set standard errno on decompression failure Arnaldo Carvalho de Melo <acme(a)redhat.com> perf bpf: Validate array presence before casting BPF prog info pointers Arnaldo Carvalho de Melo <acme(a)redhat.com> perf c2c: Fix hist entry and format list leaks in c2c_he_free() Arnaldo Carvalho de Melo <acme(a)redhat.com> perf c2c: Free format list entries when c2c_hists__init() fails Arnaldo Carvalho de Melo <acme(a)redhat.com> perf cs-etm: Bounds-check CPU in cs_etm__get_queue() Arnaldo Carvalho de Melo <acme(a)redhat.com> perf cs-etm: Require full global header in auxtrace_info size check Arnaldo Carvalho de Melo <acme(a)redhat.com> perf cs-etm: Validate num_cpu before metadata allocation Arnaldo Carvalho de Melo <acme(a)redhat.com> perf machine: Use snprintf() for guestmount path construction Eric Dumazet <edumazet(a)google.com> xfrm: validate selector family and prefixlen during match Eric Dumazet <edumazet(a)google.com> xfrm: annotate data-races around xfrm_policy_count[] and xfrm_policy_default[] Herbert Xu <herbert(a)gondor.apana.org.au> xfrm: Fix xfrm state cache insertion race Xu Rao <raoxu(a)uniontech.com> ALSA: usb-audio: qcom: Free sideband sg_table objects Gao Xiang <xiang(a)kernel.org> erofs: call erofs_exit_ishare() before rcu_barrier() Adrian Hunter <adrian.hunter(a)intel.com> i3c: master: Add missing runtime PM get in dev_nack_retry_count_store() Adrian Hunter <adrian.hunter(a)intel.com> i3c: master: Update dev_nack_retry_count under maintenance lock Jisheng Zhang <jszhang(a)kernel.org> spi: dw: fix wrong BAUDR setting after resume Thomas Hellström <thomas.hellstrom(a)linux.intel.com> drm/xe: Fix wa_oob codegen recipe for external module builds Guangshuo Li <lgs201920130244(a)gmail.com> drm/i915: clear CRTC color blob pointers after dropping refs Francesco Lavra <flavra(a)baylibre.com> regcache: Do not overwrite error code when finalizing cache after error Pengpeng Hou <pengpeng(a)iscas.ac.cn> gpio: mlxbf3: fail probe if gpiochip registration fails Arnaldo Carvalho de Melo <acme(a)redhat.com> perf cs-etm: Reject CPU IDs that would overflow signed comparison Arnaldo Carvalho de Melo <acme(a)redhat.com> perf c2c: Free format list entries when releasing c2c hist entries Arnaldo Carvalho de Melo <acme(a)redhat.com> perf bpf: Bounds-check array offsets in bpil_offs_to_addr() Arnaldo Carvalho de Melo <acme(a)redhat.com> perf bpf: Reject oversized BPF metadata events that truncate header.size Arnaldo Carvalho de Melo <acme(a)redhat.com> perf bpf: Validate func_info_rec_size and sub_id in synthesize_bpf_prog_name() Arnaldo Carvalho de Melo <acme(a)redhat.com> perf sched: Replace (void*)1 sentinel with proper runtime allocation Arnaldo Carvalho de Melo <acme(a)redhat.com> perf hwmon: Fix fd check to accept fd 0 in hwmon_pmu__describe_items() Arnaldo Carvalho de Melo <acme(a)redhat.com> perf tools: Use snprintf() for root_dir path construction Arnaldo Carvalho de Melo <acme(a)redhat.com> perf dso: Set error code when open() fails on uncompressed fallback path Arnaldo Carvalho de Melo <acme(a)redhat.com> perf dso: Fix heap overflow in dso__get_filename() on decompressed path Arnaldo Carvalho de Melo <acme(a)redhat.com> perf symbols: Break infinite loop on zero-filled notes in sysfs__read_build_id() Arnaldo Carvalho de Melo <acme(a)redhat.com> perf symbols: Validate p_filesz before use in filename__read_build_id() Arnaldo Carvalho de Melo <acme(a)redhat.com> perf symbols: Fix bswap copy-paste error for 32-bit ELF p_filesz Ian Rogers <irogers(a)google.com> perf maps: Add maps__mutate_mapping Pengpeng Hou <pengpeng(a)iscas.ac.cn> sparc: led: avoid trimming a newline from empty writes Karol Wachowski <karol.wachowski(a)linux.intel.com> accel/ivpu: fix HWS command queue leak on registration failure John Johansen <john.johansen(a)canonical.com> apparmor: fix label can not be immediately before a declaration Adrian Hunter <adrian.hunter(a)intel.com> i3c: master: Prevent reuse of dynamic address on device add failure Adrian Hunter <adrian.hunter(a)intel.com> i3c: mipi-i3c-hci: Fix race in i3c_hci_addr_to_dev() Adrian Hunter <adrian.hunter(a)intel.com> i3c: master: Defer new-device registration out of DAA caller context Adrian Hunter <adrian.hunter(a)intel.com> i3c: master: Ensure Hot-Join operations are stopped on shutdown Adrian Hunter <adrian.hunter(a)intel.com> i3c: master: Consolidate Hot-Join DAA work in the core Adrian Hunter <adrian.hunter(a)intel.com> i3c: master: Serialize i3c_set_hotjoin() with the maintenance lock Adrian Hunter <adrian.hunter(a)intel.com> i3c: master: Make hot-join workqueue freezable to block hot-join during suspend Adrian Hunter <adrian.hunter(a)intel.com> i3c: mipi-i3c-hci: Preserve RUN bit when aborting DMA ring Adrian Hunter <adrian.hunter(a)intel.com> i3c: mipi-i3c-hci: Fix suspend behavior when bus disable falls back to software reset Eduardo Vasconcelos <eduardo(a)eduardovasconcelos.com> apparmor: Fix inverted comparison in cache_hold_inc() Maciek Borzecki <maciek.borzecki(a)gmail.com> apparmor: fix uninitialised pointer passed to audit_log_untrustedstring() Georgia Garcia <georgia.garcia(a)canonical.com> apparmor: don't audit files pointing to aa_null.dentry Zygmunt Krynicki <me(a)zygoon.pl> apparmor: put secmark label after secid lookup Zygmunt Krynicki <me(a)zygoon.pl> apparmor: aa_getprocattr free procattr leak on format failure John Johansen <john.johansen(a)canonical.com> apparmor: remove unnecessary goto and associated label Zygmunt Krynicki <me(a)zygoon.pl> apparmor: release exe file resources on path failure Zygmunt Krynicki <me(a)zygoon.pl> apparmor: fail policy unpack on accept2 allocation failure Hongling Zeng <zenghongling(a)kylinos.cn> apparmor: Fix return in ns_mkdir_op Georgia Garcia <georgia.garcia(a)canonical.com> apparmor: remove or add symlinks to rawdata according to export_binary Georgia Garcia <georgia.garcia(a)canonical.com> apparmor: fix NULL pointer dereference in unpack_pdb Maxime Bélair <maxime.belair(a)canonical.com> apparmor: fix potential UAF in aa_replace_profiles Ryan Lee <ryan.lee(a)canonical.com> apparmor: grab ns lock and refresh when looking up changehat child profiles John Johansen <john.johansen(a)canonical.com> apparmor: fix rawdata_f_data implicit flex array Zygmunt Krynicki <me(a)zygoon.pl> apparmor: aa_label_alloc use aa_label_free on alloc failure Ruoyu Wang <ruoyuw560(a)gmail.com> apparmor: check label build before no_new_privs test Andrew Morton <akpm(a)linux-foundation.org> security/apparmor/apparmorfs.c: conditionally compile get_loaddata_common_ref() John Johansen <john.johansen(a)canonical.com> apparmor: fix refcount leak when updating the sk_ctx John Johansen <john.johansen(a)canonical.com> apparmor: fix race in unix socket mediation when peer_path is used John Johansen <john.johansen(a)canonical.com> apparmor: fix shadowing of plabel that prevents cache from being updated Yuanhe Shu <xiangzao(a)linux.alibaba.com> Revert "PCI/MSI: Unmap MSI-X region on error" Randy Dunlap <rdunlap(a)infradead.org> Documentation: ABI: sysfs-class-reboot-mode-reboot_modes: fix doc warnings Thomas Weißschuh <linux(a)weissschuh.net> sparc: Avoid -Wunused-but-set-parameter in clear_user_page() Dong Chenchen <dongchenchen2(a)huawei.com> xfrm: Fix dev use-after-free in xfrm async resumption Shuvam Pandey <shuvampandey1(a)gmail.com> PCI: dwc: Avoid dwc_pcie_rasdes_debugfs_deinit() NULL dereference when no RAS DES capability Felix Gu <ustc.gu(a)gmail.com> phy: freescale: phy-fsl-imx8qm-lvds-phy: Fix missing pm_runtime_disable() on probe error path Felix Gu <ustc.gu(a)gmail.com> phy: freescale: phy-fsl-imx8qm-lvds-phy: Use synchronous PM runtime put in reset Manivannan Sadhasivam <manivannan.sadhasivam(a)oss.qualcomm.com> PCI: mediatek: Use actual physical address instead of virt_to_phys() Konrad Dybcio <konrad.dybcio(a)oss.qualcomm.com> dt-bindings: phy: sc8280xp-qmp-pcie: Disallow bifurcation register on Purwa Inochi Amaoto <inochiama(a)gmail.com> dt-bindings: dma: snps,dw-axi-dmac: Add fallback compatible for CV1800B Arnaldo Carvalho de Melo <acme(a)redhat.com> perf symbols: Add bounds checks to read_build_id() note iteration in minimal build Arnaldo Carvalho de Melo <acme(a)redhat.com> perf symbols: Add bounds checks to elf_read_build_id() note iteration Arnaldo Carvalho de Melo <acme(a)redhat.com> perf bpf: Fix metadata leak in perf_env__add_bpf_info() on duplicate insert Arnaldo Carvalho de Melo <acme(a)redhat.com> perf bpf: Fix map data leak in bpf_metadata_create() on alloc failure Arnaldo Carvalho de Melo <acme(a)redhat.com> perf bpf: Add NULL check for btf__type_by_id() in synthesize_bpf_prog_name() Arnaldo Carvalho de Melo <acme(a)redhat.com> tools lib api: Fix mount_overload() snprintf truncation and toupper range Arnaldo Carvalho de Melo <acme(a)redhat.com> tools lib api: Fix filename__write_int() writing uninitialized stack data Arnaldo Carvalho de Melo <acme(a)redhat.com> perf tools: Use snprintf() in dso__read_running_kernel_build_id() Arnaldo Carvalho de Melo <acme(a)redhat.com> perf hwmon: Guard label read against empty or failed reads Arnaldo Carvalho de Melo <acme(a)redhat.com> perf tools: Fix uninitialized pathname on uncompressed fallback in filename__decompress() Arnaldo Carvalho de Melo <acme(a)redhat.com> perf symbols: Bounds-check descsz in sysfs__read_build_id() GNU fallback Arnaldo Carvalho de Melo <acme(a)redhat.com> perf hwmon: Fix parse_hwmon_filename() strlcpy buffer overflow Arnaldo Carvalho de Melo <acme(a)redhat.com> perf hwmon: Use scnprintf() in hwmon_pmu__for_each_event() Arnaldo Carvalho de Melo <acme(a)redhat.com> perf hwmon: Fix off-by-one null termination on sysfs reads Arnaldo Carvalho de Melo <acme(a)redhat.com> perf tools: Fix thread__set_comm_from_proc() on empty comm file Arnaldo Carvalho de Melo <acme(a)redhat.com> perf intel-pt: Fix snprintf size tracking bug in insn decoder Arnaldo Carvalho de Melo <acme(a)redhat.com> perf tools: Use mkostemp() for O_CLOEXEC on temporary files Arnaldo Carvalho de Melo <acme(a)redhat.com> perf symbols: Bounds-check .gnu_debuglink section data Arnaldo Carvalho de Melo <acme(a)redhat.com> perf symbols: Fix signed overflow in sysfs__read_build_id() size check Arnaldo Carvalho de Melo <acme(a)redhat.com> tools lib api: Fix missing null termination in filename__read_int/ull() Arnaldo Carvalho de Melo <acme(a)redhat.com> perf pmu: Fix perf_pmu__parse_scale/unit() OOB access on empty sysfs file Arnaldo Carvalho de Melo <acme(a)redhat.com> perf pmu: Fix pmu_id() heap underwrite on empty identifier file James Clark <james.clark(a)linaro.org> perf cs-etm: Queue context packets for frontend Tanushree Shah <tshah(a)linux.ibm.com> perf data convert json: Fix addr_location leak on time-filtered samples Jens Remus <jremus(a)linux.ibm.com> perf s390: Fix TEXTREL in Python extension by compiling as PIC Chuck Lever <chuck.lever(a)oracle.com> xprtrdma: Return sendctx slot after Send preparation failure Chuck Lever <chuck.lever(a)oracle.com> xprtrdma: Repost Receive buffers for malformed replies Chuck Lever <chuck.lever(a)oracle.com> xprtrdma: Sanitize the reply credit grant after parsing Chris Mason <clm(a)meta.com> xprtrdma: Fix bcall rep leak and unbounded peek Chuck Lever <chuck.lever(a)oracle.com> xprtrdma: Resize reply buffers before reposting receives Chuck Lever <chuck.lever(a)oracle.com> xprtrdma: Document and assert reply-handler invariants Chuck Lever <chuck.lever(a)oracle.com> xprtrdma: Check frwr_wp_create() during connect Chris Mason <clm(a)meta.com> xprtrdma: Initialize re_id before removal registration Chris Mason <clm(a)meta.com> xprtrdma: Fix ep kref imbalance on ADDR_CHANGE Arnaldo Carvalho de Melo <acme(a)redhat.com> perf tools: Use scnprintf() in build_id__snprintf() and hwmon read_events() Arnaldo Carvalho de Melo <acme(a)redhat.com> perf hists: Fix snprintf() in hists__scnprintf_title() UID filter path Arnaldo Carvalho de Melo <acme(a)redhat.com> perf bpf: Use scnprintf() in snprintf_hex() and synthesize_bpf_prog_name() Arnaldo Carvalho de Melo <acme(a)redhat.com> perf tools: Add O_CLOEXEC to open() calls in DSO and ELF code Arnaldo Carvalho de Melo <acme(a)redhat.com> perf sched: Fix idle-hist callchain display using wrong rb_first variant Arnaldo Carvalho de Melo <acme(a)redhat.com> perf sched: Bounds-check prio before test_bit() in timehist Lad Prabhakar <prabhakar.mahadev-lad.rj(a)bp.renesas.com> PCI: rcar-host: Remove unused LIST_HEAD(res) Arnaldo Carvalho de Melo <acme(a)redhat.com> perf tools: NULL bitmap pointers after bitmap_free() Arnaldo Carvalho de Melo <acme(a)redhat.com> perf tools: Use perf_env__get_cpu_topology() in machine__resolve() Arnaldo Carvalho de Melo <acme(a)redhat.com> perf tools: Use scnprintf() in cpu_map__snprint() to prevent overflow Arnaldo Carvalho de Melo <acme(a)redhat.com> perf tools: Fix get_max_num() size_t underflow on empty sysfs file David E. Box <david.e.box(a)linux.intel.com> platform/x86/intel/vsec: Restore BAR fallback for header walk Jamie Nguyen <jamien(a)nvidia.com> fs/ntfs3: resize log->one_page_buf when adopting on-disk page size Edward Adam Davis <eadavis(a)qq.com> fs/ntfs3: prevent potential lcn remains uninitialized Christian Fontanez <christfontanez(a)gmail.com> virtio: add missing kernel-doc for map and vmap members Chuck Lever <chuck.lever(a)oracle.com> lockd: Correct kernel-doc status descriptions for NLMv4 GRANTED Shuvam Pandey <shuvampandey1(a)gmail.com> PCI: meson: Add missing remove callback Shuvam Pandey <shuvampandey1(a)gmail.com> PCI: meson: Propagate devm_add_action_or_reset() failure Biju Das <biju.das.jz(a)bp.renesas.com> pwm: rzg2l-gpt: Add missing newlines to dev_err_probe() messages Li RongQing <lirongqing(a)baidu.com> PCI: mediatek: Fix operator precedence in PCIE_FTS_NUM_L0 macro Yang Erkun <yangerkun(a)huawei.com> nfs: use nfsi->rwsem to protect traversal of the file lock list Mike Snitzer <snitzer(a)kernel.org> NFSv4/flexfiles: honor FF_FLAGS_NO_IO_THRU_MDS in pg_get_mirror_count_write Mike Snitzer <snitzer(a)kernel.org> NFSv4/flexfiles: honor FF_FLAGS_NO_IO_THRU_MDS on fatal DS connect errors Clark Wang <xiaoning.wang(a)nxp.com> nfs: keep PG_UPTODATE clear after read errors in page groups Dai Ngo <dai.ngo(a)oracle.com> NFSv4/pnfs: defer return_range callbacks until after inode unlock Chuck Lever <chuck.lever(a)oracle.com> xprtrdma: Decouple req recycling from RPC completion Chuck Lever <chuck.lever(a)oracle.com> xprtrdma: Use sendctx DMA state for Send signaling Sagi Grimberg <sagi(a)grimberg.me> pNFS/filelayout: fix cheking if a layout is striped Hongling Zeng <zenghongling(a)kylinos.cn> sunrpc: Fix error handling in rpc_sysfs_xprt_switch_add_xprt_store() Phillip Varney <pbvarney(a)protonmail.com> clk: qcom: a53: Corrected frequency multiplier for 1152MHz Nuno Sá <nuno.sa(a)analog.com> dmaengine: dma-axi-dmac: use DMA pool to manange DMA descriptor Nuno Sá <nuno.sa(a)analog.com> dmaengine: dma-axi-dmac: Properly free struct axi_dmac_desc Nuno Sá <nuno.sa(a)analog.com> dmaengine: Fix possible use after free Icenowy Zheng <zhengxingda(a)iscas.ac.cn> dmaengine: qcom: gpi: set DMA_PRIVATE capability Junrui Luo <moonafterrain(a)outlook.com> mshv: add bounds check on vp_index in mshv_intercept_isr() Pratyush Yadav (Google) <pratyush(a)kernel.org> docs: memfd_preservation: fix rendering of ABI documentation Jagadeesh Kona <jagadeesh.kona(a)oss.qualcomm.com> clk: qcom: camcc-x1e80100: Add support for camera QDSS debug clocks Jagadeesh Kona <jagadeesh.kona(a)oss.qualcomm.com> dt-bindings: clock: qcom: Add X1P42100 camera clock controller Arnaldo Carvalho de Melo <acme(a)redhat.com> perf sched: Free callchain nodes in idle thread cleanup Arnaldo Carvalho de Melo <acme(a)redhat.com> perf tools: Fix int16_t truncation of max_cpu_num in set_max_cpu_num() Arnaldo Carvalho de Melo <acme(a)redhat.com> perf timechart: Fix cpu2y() OOB read on untrusted CPU index Arnaldo Carvalho de Melo <acme(a)redhat.com> perf c2c: Fix use-after-free in he__get_c2c_hists() error path Arnaldo Carvalho de Melo <acme(a)redhat.com> perf stat: Introduce perf_env__get_cpu_topology() to guard NULL env->cpu Arnaldo Carvalho de Melo <acme(a)redhat.com> perf mmap: Fix NULL deref in aio cleanup on alloc failure Arnaldo Carvalho de Melo <acme(a)redhat.com> perf sched: Replace BUG_ON and add NULL checks in replay event helpers Arnaldo Carvalho de Melo <acme(a)redhat.com> perf sched: Use thread__put() in free_idle_threads() Arnaldo Carvalho de Melo <acme(a)redhat.com> perf sched: Fix thread reference leak in idle hist processing Arnaldo Carvalho de Melo <acme(a)redhat.com> perf sched: Use is_idle_sample() for idle thread runtime cast guard Arnaldo Carvalho de Melo <acme(a)redhat.com> perf sched: Clean up idle_threads entry on init failure Arnaldo Carvalho de Melo <acme(a)redhat.com> perf c2c: Bounds-check CPU IDs in setup_nodes() topology loop Arnaldo Carvalho de Melo <acme(a)redhat.com> perf c2c: Bounds-check CPU and node IDs before bitmap and array access Arnaldo Carvalho de Melo <acme(a)redhat.com> perf stat: Bounds-check CPU index in topology aggregation callbacks Arnaldo Carvalho de Melo <acme(a)redhat.com> perf mmap: Guard cpu__get_node() return in aio_bind() Arnaldo Carvalho de Melo <acme(a)redhat.com> perf sched: Fix register_pid() overflow, strcpy, and BUG_ON Arnaldo Carvalho de Melo <acme(a)redhat.com> perf sched: Cap max_cpu at MAX_CPUS in timehist sample processing Arnaldo Carvalho de Melo <acme(a)redhat.com> perf sched: Fix thread reference leaks in timehist_get_thread() Arnaldo Carvalho de Melo <acme(a)redhat.com> perf tools: Add bounds check to cpu__get_node() Arnaldo Carvalho de Melo <acme(a)redhat.com> perf tools: Guard remaining test_bit calls from OOB sample CPU Arnaldo Carvalho de Melo <acme(a)redhat.com> perf sched: Fix comp_cpus heap overflow with cross-machine recordings Arnaldo Carvalho de Melo <acme(a)redhat.com> perf sched: Fix NULL dereference in latency_runtime_event Arnaldo Carvalho de Melo <acme(a)redhat.com> perf sched: Replace BUG_ON on invalid CPU with graceful skip Arnaldo Carvalho de Melo <acme(a)redhat.com> perf sample: Add file_offset field to struct perf_sample Arnaldo Carvalho de Melo <acme(a)redhat.com> perf sched: Fix thread reference leak in latency_switch_event Arnaldo Carvalho de Melo <acme(a)redhat.com> perf tools: Guard test_bit from out-of-bounds sample CPU James Clark <james.clark(a)linaro.org> perf annotate: Fix crashes on empty annotate windows Rui Qi <qirui.001(a)bytedance.com> perf: Fix off-by-one stack buffer overflow in kallsyms__parse() Akhil R <akhilrajeev(a)nvidia.com> dt-bindings: dma: nvidia,tegra186-gpc-dma: Make reset optional Shengjiu Wang <shengjiu.wang(a)nxp.com> dmaengine: imx-sdma: Refine spba bus searching in probe Xu Rao <raoxu(a)uniontech.com> thunderbolt: debugfs: Fix margining error counter buffer leak Srinivasan Shanmugam <srinivasan.shanmugam(a)amd.com> drm/amd/display: Add missing kdoc for ALLM parameters Jamie Nguyen <jamien(a)nvidia.com> fs/ntfs3: fix mount failure on 64K page-size kernels Arnd Bergmann <arnd(a)arndb.de> ntfs3: avoid another -Wmaybe-uninitialized warning Mihai Brodschi <m.brodschi(a)gmail.com> ntfs3: Allocate iomap inline_data using alloc_page Helen Koike <koike(a)igalia.com> fs/ntfs3: call _ntfs_bad_inode() when failing to rename Zhan Xusheng <zhanxusheng1024(a)gmail.com> fs/ntfs3: fix wrong LCN in run_remove_range() when splitting a run Konstantin Komarov <almaz.alexandrovich(a)paragon-software.com> fs/ntfs3: add bounds check to run_get_highest_vcn() Yixun Lan <dlan(a)kernel.org> clk: spacemit: k3: Fix PCIe clock register offset Yixun Lan <dlan(a)kernel.org> clk: spacemit: k3: Switch to pll2_d6 as parent for PCIe clock Zhan Xusheng <zhanxusheng1024(a)gmail.com> docs: changes.rst: restore pahole 1.26 minimum (regressed by sort) Rosen Penev <rosenp(a)gmail.com> HID: logitech-hidpp: remove excess kernel-doc member in hidpp_scroll_counter Yuho Choi <dbgh9129(a)gmail.com> clk: at91: keep securam node alive while mapping it Aldo Conte <aldocontelk(a)gmail.com> iio: tcs3472: power down chip on probe failure Sanjay Chitroda <sanjayembeddedse(a)gmail.com> iio: accel: mma8452: handle I2C read error(s) in mma8452_read() Guilherme Ivo Bozi <guilherme.bozi(a)usp.br> iio: adc: xilinx-ams: fix out-of-bounds channel lookup in event handling Joshua Crofts <joshua.crofts1(a)gmail.com> iio: magnetometer: ak8975: fix potential kernel stack memory leak Joshua Crofts <joshua.crofts1(a)gmail.com> iio: light: si1133: prevent race condition on timeout Joshua Crofts <joshua.crofts1(a)gmail.com> iio: light: si1133: reset counter to prevent race condition Arnaldo Carvalho de Melo <acme(a)redhat.com> perf header: Validate bitmap size before allocating in do_read_bitmap() Arnaldo Carvalho de Melo <acme(a)redhat.com> perf header: Sanity check HEADER_EVENT_DESC attr.size before swap Zhan Xusheng <zhanxusheng(a)xiaomi.com> timers/migration: Update stale @online doc to @available Shawn Guo <shengchao.guo(a)oss.qualcomm.com> PCI: qcom: Disable ASPM L0s for SA8775P Athira Rajeev <atrajeev(a)linux.ibm.com> powerpc tools perf: Initialize error code in auxtrace_record_init function Baruch Siach <baruch(a)tkos.co.il> docs: threat-model: add missing closing parenthesis Lad Prabhakar <prabhakar.mahadev-lad.rj(a)bp.renesas.com> clk: renesas: rzg2l: Rename iterator in for_each_mod_clock() to avoid shadowing Hongling Zeng <zenghongling(a)kylinos.cn> gpib: cb7210: Fix region leak when request_irq fails Adam Crosser <adam.crosser(a)praetorian.com> gpib: fix double decrement of descriptor_busy in command_ioctl() Rafael J. Wysocki <rafael.j.wysocki(a)intel.com> sonypi: Check ACPI_COMPANION() against NULL at probe time Rafael J. Wysocki <rafael.j.wysocki(a)intel.com> hpet: Check ACPI_COMPANION() against NULL at probe time James Kim <james010kim(a)gmail.com> char: tlclk: fix use-after-free in tlclk_cleanup() Dave Penkler <dpenkler(a)gmail.com> gpib: Fix inappropriate ioctl error return Ravi Bangoria <ravi.bangoria(a)amd.com> perf test amd ibs: Fix incorrect kernel version check Seungjin Bae <eeodqql09(a)gmail.com> usb: host: max3421: Reject hub port requests for non-existent ports Seungjin Bae <eeodqql09(a)gmail.com> usb: host: max3421: Fix shift-out-of-bounds in max3421_hub_control() Guangshuo Li <lgs201920130244(a)gmail.com> staging: most: video: avoid double free on video register failure Ian Rogers <irogers(a)google.com> perf inject: Fix itrace branch stack synthesis Ian Rogers <irogers(a)google.com> perf event: Fix size of synthesized sample with branch stacks Michael Petlan <mpetlan(a)redhat.com> perf build-id: Fix off-by-one bug when printing kernel/module build-id Conor Dooley <conor.dooley(a)microchip.com> clk: microchip: mpfs-ccc: fix peripheral driver registration failures after oob fix Rafael J. Wysocki <rafael.j.wysocki(a)intel.com> platform/x86: classmate-laptop: Address memory leaks on driver removal Chen-Yu Tsai <wenst(a)chromium.org> PCI: mediatek-gen3: Fix incorrectly skipped pwrctrl error message Dan Carpenter <error27(a)gmail.com> PCI: dwc: Fix signedness bug in fault injection test code Jie Gan <jie.gan(a)oss.qualcomm.com> coresight: platform: defer connection counter increment until alloc succeeds Bartosz Golaszewski <bartosz.golaszewski(a)oss.qualcomm.com> PCI/pwrctrl: Lock device when calling device_is_bound() Wolfram Sang <wsa+renesas(a)sang-engineering.com> mailbox: don't free the channel if the startup callback failed Sergey Senozhatsky <senozhatsky(a)chromium.org> mailbox: mtk-adsp: fix UAF during device teardown Conor Dooley <conor.dooley(a)microchip.com> mailbox: mpfs: fix check for syscon presence in mpfs_mbox_inbox_isr() Chen-Yu Tsai <wenst(a)chromium.org> PCI: mediatek-gen3: Do full device power down on removal Leo Yan <leo.yan(a)arm.com> coresight: Handle helper enable failure properly Jie Gan <jie.gan(a)oss.qualcomm.com> coresight: Fix source not disabled on idr_alloc_u32 failure Bard Liao <yung-chuan.liao(a)linux.intel.com> soundwire: intel_ace2x: release bpt_stream when close it Rafael J. Wysocki <rafael.j.wysocki(a)intel.com> iio: light: acpi-als: Check ACPI_COMPANION() against NULL Mihai Sain <mihai.sain(a)microchip.com> clk: at91: sam9x7: Fix gmac_gclk clock definition Leo Yan <leo.yan(a)arm.com> perf pmu: Skip test on Arm64 when #slots is zero Ian Rogers <irogers(a)google.com> perf unwind: Refactor get_entries to allow dynamic libdw/libunwind selection Ian Rogers <irogers(a)google.com> perf pmu-events AMD: Switch l2_itlb_misses to bp_l1_tlb_miss_l2_tlb_miss.all Andy Shevchenko <andriy.shevchenko(a)linux.intel.com> phy: phy-can-transceiver: Check driver match and driver data against NULL Qiang Yu <qiang.yu(a)oss.qualcomm.com> PCI: qcom: Set max OPP before DBI access during resume Manikanta Maddireddy <mmaddireddy(a)nvidia.com> PCI: dwc: Apply ECRC workaround for DesignWare cores prior to 5.10a Biswapriyo Nath <nathbappai(a)gmail.com> dt-bindings: clock: qcom,sm6125-dispcc: reference qcom,gcc.yaml Luo Jie <jie.luo(a)oss.qualcomm.com> clk: qcom: cmnpll: Account for reference clock divider Jie Gan <jie.gan(a)oss.qualcomm.com> coresight: fix missing error code when trace ID is invalid Sumit Kumar <sumit.kumar(a)oss.qualcomm.com> bus: mhi: ep: Add missing state_lock protection for mhi_state access Sumit Kumar <sumit.kumar(a)oss.qualcomm.com> bus: mhi: ep: Fix potential deadlock in mhi_ep_reset_worker() Hsiu Che Yu <yu.whisper.personal(a)gmail.com> rust: alloc: fix assert in `Vec::reserve` doc test Rong Zhang <i(a)rong.moe> PCI: loongson: Do not ignore downstream devices on external bridges Florian Eckert <fe(a)dev.tdt.de> PCI: intel-gw: Add .start_link() callback Florian Eckert <fe(a)dev.tdt.de> PCI: intel-gw: Enable clock before PHY init Florian Eckert <fe(a)dev.tdt.de> PCI: intel-gw: Move interrupt enable to own function Ian Rogers <irogers(a)google.com> perf tool: Fix missing schedstat delegates and dont_split_sample_group in delegate_tool Ian Rogers <irogers(a)google.com> perf sched: Add missing mmap2 handler in timehist Rafael J. Wysocki <rafael.j.wysocki(a)intel.com> platform/x86: xo15-ebook: Fix wakeup source and GPE handling Rafael J. Wysocki <rafael.j.wysocki(a)intel.com> x86/platform/olpc: xo15: Drop wakeup source on driver removal Guixin Liu <kanie(a)linux.alibaba.com> PCI: Check ROM header and data structure addr before accessing Guixin Liu <kanie(a)linux.alibaba.com> PCI: Introduce named defines for PCI ROM Carlos Bilbao <carlos.bilbao(a)kernel.org> PCI/ASPM: Don't reconfigure ASPM entering low-power state Leo Yan <leo.yan(a)arm.com> coresight: etm4x: Correct TRCVMIDCCTLR1 save and restore James Clark <james.clark(a)linaro.org> coresight: ete: Always save state on power down Leo Yan <leo.yan(a)arm.com> coresight: tmc: Fix overflow when calculating is bigger than 2GiB Baoli.Zhang <baoli.zhang(a)linux.intel.com> soundwire: fix bug in sdw_add_element_group_count found by syzkaller Bard Liao <yung-chuan.liao(a)linux.intel.com> soundwire: don't program SDW_SCP_BUSCLOCK_SCALE on a unattached Peripheral Yingchao Deng <yingchao.deng(a)oss.qualcomm.com> coresight: cti: Fix DT filter signals silently ignored Thomas Richter <tmricht(a)linux.ibm.com> perf callchain: Handle multiple address spaces Ian Rogers <irogers(a)google.com> perf debuginfo: Fix libdw API contract violations Ian Rogers <irogers(a)google.com> perf annotate-data: Fix libdw API contract violations Ian Rogers <irogers(a)google.com> perf probe-finder: Fix libdw API contract violations Ian Rogers <irogers(a)google.com> perf libdw: Fix libdw API contract violations and memory leaks Ian Rogers <irogers(a)google.com> perf srcline: Introduce inline_node__clear_frames() Ian Rogers <irogers(a)google.com> perf dwarf-aux: Fix libdw API contract violations Ian Rogers <irogers(a)google.com> perf dwarf-aux: Fix libdw segmentation fault in cu_walk_functions_at Alexandru Hossu <hossu.alexandru(a)gmail.com> staging: nvec: fix use-after-free in nvec_rx_completed() Maksym Pikhotskyi <mpikhotskyi(a)gmail.com> staging: rtl8723bs: fix stainfo check in rtw_aes_decrypt Stanley Chu <yschu(a)nuvoton.com> i3c: master: svc: Fix missed IBI after false SLVSTART on NPCM845 Mario Limonciello <mario.limonciello(a)amd.com> gpiolib: acpi: Only trigger ActiveBoth interrupts on boot Nam Cao <namcao(a)linutronix.de> eventpoll: Fix epoll_wait() report false negative Christian Brauner <brauner(a)kernel.org> eventpoll: rename epi->next and txlist for clarity Christian Brauner <brauner(a)kernel.org> eventpoll: expand top-of-file overview / locking doc Gui-Dong Han <hanguidong02(a)gmail.com> 9p: Add missing read barrier in virtio zero-copy path Yizhou Zhao <zhaoyz24(a)mails.tsinghua.edu.cn> net/9p: fix race condition on rdma->state in trans_rdma.c Hongling Zeng <zenghongling(a)kylinos.cn> 9p: avoid returning ERR_PTR(0) from mkdir operations Aleksandr Nogikh <nogikh(a)google.com> ocfs2: fix circular locking dependency in ocfs2_dio_end_io_write Charles Keepax <ckeepax(a)opensource.cirrus.com> mfd: cs42l43: Sanity check firmware size Matthew Bystrin <dev.mbstr(a)gmail.com> mfd: rsmu: Fix page register setup Matti Vaittinen <mazziesaccount(a)gmail.com> mfd: bd72720: Drop BUCK11 ID Guangshuo Li <lgs201920130244(a)gmail.com> ksmbd: fix use-after-free in same_client_has_lease() Eric Dumazet <edumazet(a)google.com> net: serialize netif_running() check in enqueue_to_backlog() Jacob Moroni <jmoroni(a)google.com> RDMA/irdma: Replace waitqueue and flag with completion Junxian Huang <huangjunxian6(a)hisilicon.com> RDMA/hns: Fix memory leak of bonding resources Selvin Xavier <selvin.xavier(a)broadcom.com> RDMA/bnxt_re: Reject GET_TOGGLE_MEM when toggle page was not allocated Selvin Xavier <selvin.xavier(a)broadcom.com> RDMA/bnxt_re: Fail DBR related page allocation UAPIs if the feature is disabled Selvin Xavier <selvin.xavier(a)broadcom.com> RDMA/bnxt_re: Avoid repeated requests to allocate WC pages Selvin Xavier <selvin.xavier(a)broadcom.com> RDMA/bnxt_re: Proper rollback if the ioremap fails Selvin Xavier <selvin.xavier(a)broadcom.com> RDMA/bnxt_re: Add a max slot check for SQ Sriharsha Basavapatna <sriharsha.basavapatna(a)broadcom.com> RDMA/bnxt_re: Enable app allocated QPs Sriharsha Basavapatna <sriharsha.basavapatna(a)broadcom.com> RDMA/bnxt_re: Support doorbells for app allocated QPs Sriharsha Basavapatna <sriharsha.basavapatna(a)broadcom.com> RDMA/bnxt_re: Enhance dbr usecnt logic in doorbell uapis Sriharsha Basavapatna <sriharsha.basavapatna(a)broadcom.com> RDMA/bnxt_re: Update msn table size for app allocated QPs Sriharsha Basavapatna <sriharsha.basavapatna(a)broadcom.com> RDMA/bnxt_re: Refactor bnxt_re_init_user_qp() Selvin Xavier <selvin.xavier(a)broadcom.com> RDMA/bnxt_re: Avoid displaying the kernel pointer Selvin Xavier <selvin.xavier(a)broadcom.com> RDMA/bnxt_re: Free CQ toggle page after firmware teardown Selvin Xavier <selvin.xavier(a)broadcom.com> RDMA/bnxt_re: Free SRQ toggle page after firmware teardown Selvin Xavier <selvin.xavier(a)broadcom.com> RDMA/bnxt_re: Initialize dpi variable to zero Brett Creeley <brett.creeley(a)amd.com> ionic: Fix check in ionic_get_link_ext_stats Selvamani Rajagopal <Selvamani.Rajagopal(a)onsemi.com> net: ethernet: oa_tc6: Remove FCS size in RX frame Selvamani Rajagopal <Selvamani.Rajagopal(a)onsemi.com> net: ethernet: oa_tc6: mdiobus->parent initialized with NULL Meghana Malladi <m-malladi(a)ti.com> net: ti: icssg: Use undirected TX tag for XDP zero copy in HSR offload mode Meghana Malladi <m-malladi(a)ti.com> net: ti: icssg: Use undirected TX tag for native XDP in HSR offload mode Meghana Malladi <m-malladi(a)ti.com> net: ti: icssg-prueth: Fix AF_XDP fill ring alloc and wakeup condition Wayen.Yan <win847(a)gmail.com> net: airoha: Fix always-true condition in PPE1 queue reservation loop Eric Dumazet <edumazet(a)google.com> tcp: ipv6: clamp default adverting MSS to avoid GSO_BY_FRAGS (0xFFFF) Eric Dumazet <edumazet(a)google.com> tipc: fix UAF in tipc_l2_send_msg() Gui-Dong Han <hanguidong02(a)gmail.com> KEYS: Use acquire when reading state in keyring search Aboorva Devarajan <aboorvad(a)linux.ibm.com> powerpc/kexec: fix double get_cpu() imbalance in kexec_prepare_cpus Aboorva Devarajan <aboorvad(a)linux.ibm.com> powerpc/powernv: fix preempt count leak in pnv_kexec_wait_secondaries_down Aboorva Devarajan <aboorvad(a)linux.ibm.com> powerpc/perf: fix preempt count underflow in fsl_emb_pmu_del Yadan Fan <ydfan(a)suse.com> MIPS: mm: Fix out-of-bounds write in maar_res_walk() Sechang Lim <rhkrqnwk98(a)gmail.com> bpf, sockmap: fix integer overflow in bpf_msg_pop_data() bounds check Kuniyuki Iwashima <kuniyu(a)google.com> sockmap: Fix use-after-free in udp_bpf_recvmsg() Weiming Shi <bestswngs(a)gmail.com> bpf, sockmap: reject overflowing copy + len in bpf_msg_push_data() Al Viro <viro(a)zeniv.linux.org.uk> udf: fix nls leak on udf_fill_super() failure Leon Hwang <leon.hwang(a)linux.dev> bpf: Fix bpf_get/setsockopt to tos for ipv4-mapped ipv6 socket Leo Yan <leo.yan(a)arm.com> selftests/bpf: Initialize operation name before use Jiri Olsa <jolsa(a)kernel.org> selftests/bpf: Fix typo in verify_umulti_link_info Jiri Olsa <jolsa(a)kernel.org> bpf: Guard __get_user acesss with access_ok for uprobe_multi data Nathan Chancellor <nathan(a)kernel.org> btrfs: Drop WQ_PERCPU from ordered_flags in btrfs_init_workqueues() Huiwen He <hehuiwen(a)kylinos.cn> smb/client: always return a value for FS_IOC_GETFLAGS Jian Zhang <zhangjian496(a)huawei.com> cifs: remove all cifs files before kill super Henrique Carvalho <henrique.carvalho(a)suse.com> smb: client: fix conflicting option validation for new mount API Takashi Iwai <tiwai(a)suse.de> ALSA: core: Fix unintuitive behavior of snd_power_ref_and_wait() Alice Mikityanska <alice(a)isovalent.com> geneve: Fix off-by-one comparing with GRO_LEGACY_MAX_SIZE Pablo Neira Ayuso <pablo(a)netfilter.org> netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them Florian Westphal <fw(a)strlen.de> netfilter: nf_conncount: callers must hold rcu read lock Cen Zhang <zzzccc427(a)gmail.com> ALSA: seq: avoid stale FIFO cells during resize Cen Zhang <zzzccc427(a)gmail.com> ALSA: seq: oss: Serialize readq reset state with q->lock Runyu Xiao <runyu.xiao(a)seu.edu.cn> kcm: use WRITE_ONCE() when changing lower socket callbacks Wayen.Yan <win847(a)gmail.com> net: airoha: Fix debugfs new-tuple display for IPv4 ROUTE entries Wayen.Yan <win847(a)gmail.com> net: airoha: Fix register index for Tx-fwd counter configuration Ratheesh Kannoth <rkannoth(a)marvell.com> octeontx2-af: fix NPC mailbox codes in mbox.h Ovidiu Panait <ovidiu.panait.rb(a)renesas.com> net: bcmgenet: Use weighted round-robin TX DMA arbitration Matthieu Buffet <matthieu(a)buffet.re> landlock: Fix unmarked concurrent access to socket family Grzegorz Nitka <grzegorz.nitka(a)intel.com> dpll: balance create/delete notifications in __dpll_pin_(un)register Grzegorz Nitka <grzegorz.nitka(a)intel.com> dpll: guard sync-pair removal on full pin unregister Grzegorz Nitka <grzegorz.nitka(a)intel.com> dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() Grzegorz Nitka <grzegorz.nitka(a)intel.com> dpll: send delete notification before unregister in on-pin rollback Grzegorz Nitka <grzegorz.nitka(a)intel.com> dpll: fix stale iteration in dpll_pin_on_pin_unregister() Ruoyu Wang <ruoyuw560(a)gmail.com> net: wwan: t7xx: check skb_clone in control TX Wentao Guan <guanwentao(a)uniontech.com> net: ethernet: mtk_wed: debugfs: correct index in wed_amsdu_show() Wayen.Yan <win847(a)gmail.com> net: airoha: Fix error handling in airoha_ppe_flush_sram_entries() Ratheesh Kannoth <rkannoth(a)marvell.com> octeontx2-af: npc: Fix size of entry2cntr_map Xu Kuohai <xukuohai(a)huawei.com> bpf: Fix setting retval to -EPERM for cgroup hooks not returning errno Dragos Tatulea <dtatulea(a)nvidia.com> net/mlx5: Check max_macs devlink param value against max capability Sun Jian <sun.jian.kdev(a)gmail.com> bpf: Run generic devmap egress prog on private skb Victor Nogueira <victor(a)mojatatu.com> net/sched: sch_dualpi2: Add missing module alias Zhi-Jun You <hujy652(a)gmail.com> net: ethernet: mtk_wed: fix loading WO firmware for MT7986 Eric Dumazet <edumazet(a)google.com> net: watchdog: fix refcount tracking races Aditya Garg <gargaditya(a)linux.microsoft.com> net: mana: guard TX wq object destroy with INVALID_MANA_HANDLE check Aditya Garg <gargaditya(a)linux.microsoft.com> net: mana: initialize gdma queue id to INVALID_QUEUE_ID Victor Nogueira <victor(a)mojatatu.com> net/sched: sch_dualpi2: Do not call qdisc_tree_reduce_backlog during peek before restoring qlen Victor Nogueira <victor(a)mojatatu.com> net/sched: sch_codel: Do not call qdisc_tree_reduce_backlog during peek before restoring qlen Victor Nogueira <victor(a)mojatatu.com> net/sched: sch_fq_codel: Do not call qdisc_tree_reduce_backlog during peek before restoring qlen Paolo Abeni <pabeni(a)redhat.com> virtio_net: do not allow tunnel csum offload for non GSO packets Sechang Lim <rhkrqnwk98(a)gmail.com> tcp: clear sock_ops cb flags before force-closing a child socket Joe Damato <joe(a)dama.to> bnxt: fix head underflow on XDP head-grow Chuck Lever <chuck.lever(a)oracle.com> handshake: Require admin permission for DONE command Lucas Tsai <lucas_tsai(a)richtek.com> power: supply: core: fix supplied_from allocations Dan Williams <djbw(a)kernel.org> cxl/memdev: Pin parents for entire memdev lifetime Dan Williams <djbw(a)kernel.org> cxl/region: Resolve region deletion races Dan Williams <djbw(a)kernel.org> cxl/region: Block region delete during region creation Guangshuo Li <lgs201920130244(a)gmail.com> ASoC: adau1372: Clear PLL_EN on failed PLL lock without reset GPIO David Matlack <dmatlack(a)google.com> vfio: selftests: Ensure libvfio output dirs are always created Li Ming <ming.li(a)zohomail.com> cxl/region: Fill first free targets[] slot during auto-discovery Li Ming <ming.li(a)zohomail.com> cxl/region: Fix out-of-bounds access in cxl_cancel_auto_attach() Chia-Lin Kao (AceLan) <acelan.kao(a)canonical.com> ASoC: sdw_utils: fix missing component_name for cs42l43 part_id 0x2A3B Nicolin Chen <nicolinc(a)nvidia.com> iommu: Avoid copying the user array twice in the full-array copy helper Lars Pöschel <lars.poeschel(a)edag.com> spi: xilinx: use FIFO occupancy register to determine buffer size Alex Mastro <amastro(a)fb.com> iommufd: Clarify IOAS_MAP_FILE dma-buf support Li RongQing <lirongqing(a)baidu.com> iommu/dma-iommu: Fix wrong scatterlist length assignment in P2PDMA path HanQuan <eilaimemedsnaimel(a)gmail.com> ALSA: seq: Fix kernel heap address leak in bounce_error_event() Cássio Gabriel <cassiogabrielcontato(a)gmail.com> ALSA: usb-audio: qcom: Guard sideband endpoint removal Herbert Xu <herbert(a)gondor.apana.org.au> crypto: rng - Free default RNG on module exit Felix Gu <ustc.gu(a)gmail.com> crypto: cavium/cpt - fix DMA cleanup using wrong loop index Felix Gu <ustc.gu(a)gmail.com> crypto: marvell/octeontx - fix DMA cleanup using wrong loop index Dave Jiang <dave.jiang(a)intel.com> cxl/test: Add check after kzalloc() memory in alloc_mock_res() Dave Jiang <dave.jiang(a)intel.com> cxl/test: Unregister cxl_acpi in cxl_test_init() error path Michael Bommarito <michael.bommarito(a)gmail.com> tipc: reject inverted service ranges from peer bindings Michael Bommarito <michael.bommarito(a)gmail.com> tipc: prevent snt_unacked underflow on CONN_ACK Michael Bommarito <michael.bommarito(a)gmail.com> tipc: require net admin for TIPCv2 netlink mutators Victor Nogueira <victor(a)mojatatu.com> net/sched: sch_hfsc: Don't make class passive twice Daniel Borkmann <daniel(a)iogearbox.net> net: Stop leased rxq before uninstalling its memory provider Samuel Moelius <sam.moelius(a)trailofbits.com> net: pfcp: allocate per-cpu tstats for PFCP netdevs Xin Long <lucien.xin(a)gmail.com> sctp: validate embedded address parameter length Xiang Mei <xmei5(a)asu.edu> bridge: cfm: reject invalid CCM interval at configuration time Kuniyuki Iwashima <kuniyu(a)google.com> net: fib_rules: Don't dump dying fib_rule in fib_rules_dump(). Kuniyuki Iwashima <kuniyu(a)google.com> ipv4: fib: Don't dump dying fib_info in fib_leaf_notify(). Jamal Hadi Salim <jhs(a)mojatatu.com> net/sched: cls_flow: Dont expose folded kernel pointers George Moussalem <george.moussalem(a)outlook.com> net: dsa: qca8k: fix led devicename when using external mdio bus Cássio Gabriel <cassiogabrielcontato(a)gmail.com> ASoC: topology: Check PCM and DAI name strings before use HyeongJun An <sammiee5311(a)gmail.com> ASoC: tegra: tegra210_ahub: Validate written enum value HyeongJun An <sammiee5311(a)gmail.com> ASoC: fsl: fsl_audmix: Validate written enum values HyeongJun An <sammiee5311(a)gmail.com> ASoC: meson: aiu: Validate written enum values HyeongJun An <sammiee5311(a)gmail.com> ASoC: codecs: hdac_hdmi: Validate written enum value Arnd Bergmann <arnd(a)arndb.de> ASoC: SOF: Intel: hda-sdw-bpt: select SND_SOF_SOF_HDA_SDW_BPT properly Arnd Bergmann <arnd(a)arndb.de> ASoC: SOF: Intel: select SND_SOC_SDW_UTILS=y from SND_SOC_SOF_HDA_GENERIC=y Richard Fitzgerald <rf(a)opensource.cirrus.com> ASoC: cs35l56: Fix wrong error test on simple_write_to_buffer() Leon Romanovsky <leon(a)kernel.org> RDMA/mlx5: Release the HW‑provided UAR index rather than the SW one Maher Sanalla <msanalla(a)nvidia.com> RDMA/mlx5: Fix undefined shift of user RQ WQE size Patrisious Haddad <phaddad(a)nvidia.com> RDMA/mlx5: Remove raw RSS QP restrack tracking Patrisious Haddad <phaddad(a)nvidia.com> RDMA/mlx5: Remove DCT restrack tracking Maxwell Doose <m32285159(a)gmail.com> fs: efs: remove unneeded debug prints Michael Guralnik <michaelgur(a)nvidia.com> RDMA/mlx5: Drop FRMR pool handle on UMR revoke failure Michael Guralnik <michaelgur(a)nvidia.com> RDMA/core: Add ib_frmr_pool_drop for unrecoverable handles Michael Guralnik <michaelgur(a)nvidia.com> RDMA/core: Fix FRMR handle leak on push failure Michael Guralnik <michaelgur(a)nvidia.com> RDMA/core: Avoid NULL dereference on FRMR bad usage Michael Guralnik <michaelgur(a)nvidia.com> RDMA/core: Fix FRMR set pinned push error path Michael Guralnik <michaelgur(a)nvidia.com> RDMA/core: Fix FRMR aging push to queue error flow Michael Guralnik <michaelgur(a)nvidia.com> RDMA/core: Fix skipped usage for driver built FRMR key Michael Guralnik <michaelgur(a)nvidia.com> RDMA/mlx5: Fix TPH extraction in FRMR pool key Michael Guralnik <michaelgur(a)nvidia.com> RDMA/mlx5: Fix mkey creation error flow rollback Samuel Moelius <sam.moelius(a)trailofbits.com> Bluetooth: vhci: validate devcoredump state before side effects Samuel Moelius <sam.moelius(a)trailofbits.com> Bluetooth: hci: validate codec capability element length Sai Teja Aluvala <aluvala.sai.teja(a)intel.com> Bluetooth: btintel_pcie: Load IOSF debug regs by controller variant Zhao Dongdong <zhaodongdong(a)kylinos.cn> Bluetooth: btmtk: fix URB leak in alloc_mtk_intr_urb error path Jordan Walters <jaggyaur(a)gmail.com> Bluetooth: hci_core: Fix UAF in hci_unregister_dev() Jiajia Liu <liujiajia(a)kylinos.cn> Bluetooth: hci_event: fix simultaneous discovery stuck in FINDING Weiming Shi <bestswngs(a)gmail.com> Bluetooth: eir: Fix stack OOB write when prepending the Flags AD Zijun Hu <zijun.hu(a)oss.qualcomm.com> Bluetooth: hci_qca: fix NULL pointer dereference in qca_dmp_hdr() for non-serdev device Zijun Hu <zijun.hu(a)oss.qualcomm.com> Bluetooth: hci_qca: fix NULL pointer dereference in qca_setup() for non-serdev device Heiko Carstens <hca(a)linux.ibm.com> s390/process: Fix kernel thread function pointer type Richard Fitzgerald <rf(a)opensource.cirrus.com> ASoC: cs35l56: Fix possible uninitialized value in cs35l56_spi_system_reset() Andre Przywara <andre.przywara(a)arm.com> arm64: dts: allwinner: a523: Add missing GPIO interrupt Mikhail Kshevetskiy <mikhail.kshevetskiy(a)iopsys.eu> pinctrl: airoha: an7583: remove undefined groups from pcm_spi pin function Mikhail Kshevetskiy <mikhail.kshevetskiy(a)iopsys.eu> pinctrl: airoha: an7583: fix phy1_led1 pin function Mikhail Kshevetskiy <mikhail.kshevetskiy(a)iopsys.eu> pinctrl: airoha: an7583: add missed gpio22 pin group Mikhail Kshevetskiy <mikhail.kshevetskiy(a)iopsys.eu> pinctrl: airoha: an7583: fix gpio21 pin group Mikhail Kshevetskiy <mikhail.kshevetskiy(a)iopsys.eu> pinctrl: airoha: fix pwm pin function for an7581 and an7583 Mikhail Kshevetskiy <mikhail.kshevetskiy(a)iopsys.eu> pinctrl: airoha: an7583: fix incorrect led mapping in phy4_led1 pin function Mikhail Kshevetskiy <mikhail.kshevetskiy(a)iopsys.eu> pinctrl: airoha: an7581: fix incorrect led mapping in phy4_led1 pin function Mikhail Kshevetskiy <mikhail.kshevetskiy(a)iopsys.eu> pinctrl: airoha: an7583: fix misprint in gpio19 pinconf Mikhail Kshevetskiy <mikhail.kshevetskiy(a)iopsys.eu> pinctrl: airoha: an7581: fix misprint in gpio19 pinconf Mikhail Kshevetskiy <mikhail.kshevetskiy(a)iopsys.eu> pinctrl: airoha: an7583: add missed gpio32 pin group Mikhail Kshevetskiy <mikhail.kshevetskiy(a)iopsys.eu> pinctrl: airoha: an7581: add missed gpio32 pin group Andre Przywara <andre.przywara(a)arm.com> pinctrl: sunxi: a523: Remove unneeded IRQ remuxing flag Angelo Dureghello <adureghello(a)baylibre.com> m68k: mcf5441x: fix clocks numbering Daniel Borkmann <daniel(a)iogearbox.net> bpf: Tighten cgroup storage cookie checks for prog arrays Giovanni Cabiddu <giovanni.cabiddu(a)intel.com> vfio/qat: fix f_pos race in qat_vf_resume_write() Sergey Shtylyov <s.shtylyov(a)auroraos.dev> of: cpu: add check in __of_find_n_match_cpu_property() Dave Jiang <dave.jiang(a)intel.com> cxl/test: Zero out LSA backing memory to avoid leaking to user Dave Jiang <dave.jiang(a)intel.com> cxl/test: Fix integer overflow in mock LSA bounds checks Dave Jiang <dave.jiang(a)intel.com> cxl/test: Verify cmd->size_in before accessing payload Yonghong Song <yonghong.song(a)linux.dev> selftests/bpf: Fix bpf_iter/task_vma test Yun Zhou <yun.zhou(a)windriver.com> ext4: validate donor file superblock early in EXT4_IOC_MOVE_EXT Aditya Prakash Srivastava <aditya.ansh182(a)gmail.com> ext4: fix kernel BUG in ext4_write_inline_data_end Louis Scalbert <louis.scalbert(a)6wind.com> bonding: 3ad: fix mux port state on oper down Louis Scalbert <louis.scalbert(a)6wind.com> bonding: 3ad: fix carrier when no usable slaves Louis Scalbert <louis.scalbert(a)6wind.com> bonding: 3ad: add lacp_strict configuration knob Louis Scalbert <louis.scalbert(a)6wind.com> netlink: specs: rt-link: missed broadcast-neigh Louis Scalbert <louis.scalbert(a)6wind.com> tools: missed broadcast_neigh if_link uapi header Hongling Zeng <zenghongling(a)kylinos.cn> ext4: fix ERR_PTR(0) in ext4_mkdir() Pei Xiao <xiaopei01(a)kylinos.cn> hwmon: (gpd-fan): fix race condition between device removal and sysfs access Pei Xiao <xiaopei01(a)kylinos.cn> hwmon: (gpd-fan): Initialize EC before registering hwmon device Pei Xiao <xiaopei01(a)kylinos.cn> hwmon: (gpd-fan): drop global driver data and use per-device allocation Richard Fitzgerald <rf(a)opensource.cirrus.com> ASoC: cs35l56: Don't leave parent IRQ disabled if system_suspend fails Richard Fitzgerald <rf(a)opensource.cirrus.com> ASoC: cs35l56: Cleanup if component_probe fails Richard Fitzgerald <rf(a)opensource.cirrus.com> ASoC: cs35l56: Prevent double-free of debugfs Richard Fitzgerald <rf(a)opensource.cirrus.com> ASoC: cs35l56: Fix missing calls to wm_adsp2_remove() Christoph Hellwig <hch(a)lst.de> iomap: pass the correct len to fserror_report_io in __iomap_write_begin Srujana Challa <schalla(a)marvell.com> vdpa/octeon_ep: fix IRQ-to-ring mapping in interrupt handler Srujana Challa <schalla(a)marvell.com> vdpa/octeon_ep: Fix PF->VF mailbox data address calculation Arnd Bergmann <arnd(a)arndb.de> vduse: fix compat handling for VDUSE_IOTLB_GET_FD/VDUSE_VQ_GET_INFO longlong yan <yanlonglong(a)kylinos.cn> tools/virtio: check mmap return value in vringh_test Qing Ming <a0yami(a)mailbox.org> vhost/net: complete zerocopy ubufs only once Zhang Tianci <zhangtianci.1997(a)bytedance.com> vduse: Requeue failed read to send_list head Filip Hejsek <filip.hejsek(a)gmail.com> virtio_console: read size from config space during device init Jia Jia <physicalmtea(a)gmail.com> virtio: rtc: tear down old virtqueues before restore Qihang Tang <q.h.hack.winter(a)gmail.com> vhost/vdpa: validate virtqueue index in mmap and fault paths Qihang Tang <q.h.hack.winter(a)gmail.com> vduse: hold vduse_lock across IDR lookup in open path Enric Balletbo i Serra <eballetb(a)redhat.com> clocksource: move NXP timer selection to drivers/clocksource Justin Suess <utilityemal77(a)gmail.com> bpf: Cancel special fields on map value recycle Val Packett <val(a)packett.cool> ASoC: codecs: aw88261: fix incorrect masks for boost regs Ruoyu Wang <ruoyuw560(a)gmail.com> spi: meson-spifc: fix runtime PM leak on remove Chuck Lever <chuck.lever(a)oracle.com> lockd: Avoid hashing uninitialized bytes in nlm4svc_lookup_file() Chuck Lever <chuck.lever(a)oracle.com> lockd: Do not monitor when looking up the LOCK_MSG callback host Chuck Lever <chuck.lever(a)oracle.com> lockd: Translate nlm__int__deadlock in __nlm4svc_proc_lock_msg() Chuck Lever <chuck.lever(a)oracle.com> lockd: Stop warning on nlm__int__drop_reply in !V4 cast_status Chuck Lever <chuck.lever(a)oracle.com> NFSD: Handle layout stid in nfsd4_drop_revoked_stid() Jason Gunthorpe <jgg(a)ziepe.ca> IB/mlx4: Fill in the access_flags if IB_MR_REREG_ACCESS is not specified Cássio Gabriel <cassiogabrielcontato(a)gmail.com> ASoC: sma1307: Fix uevent string leaks in fault worker KhaiWenTan <khai.wen.tan(a)linux.intel.com> igc: skip RX timestamp header for frame preemption verification Larysa Zaremba <larysa.zaremba(a)intel.com> ixgbe: do not configure xps for XDP queues Weiming Shi <bestswngs(a)gmail.com> btrfs: lzo: reject compressed segment that overflows the compressed input Filipe Manana <fdmanana(a)suse.com> btrfs: fix deadlock cloning inline extent when using flushoncommit Cen Zhang <zzzccc427(a)gmail.com> btrfs: annotate lockless read of defrag_bytes in should_nocow() Johannes Thumshirn <johannes.thumshirn(a)wdc.com> btrfs: zoned: always set max_active_zones for zoned devices Matthew Wilcox (Oracle) <willy(a)infradead.org> Revert "btrfs: fix the file offset calculation inside btrfs_decompress_buf2page()" Johannes Thumshirn <johannes.thumshirn(a)wdc.com> btrfs: zoned: fix deadlock waiting for ticket during data relocation Johannes Thumshirn <johannes.thumshirn(a)wdc.com> btrfs: zoned: don't account data relocation space-info in statfs free space Yuho Choi <dbgh9129(a)gmail.com> PM: QoS: Fix misc device registration unwind Nikita Zhandarovich <n.zhandarovich(a)fintech.ru> hwmon: (it87) Clamp negative values to zero in set_fan() Jeff Layton <jlayton(a)kernel.org> vfs: add FS_USERNS_DELEGATABLE flag and set it for NFS Sumit Gupta <sumitg(a)nvidia.com> memory: tegra186-emc: stop borrowing MC aggregate hook for EMC David Laight <david.laight.linux(a)gmail.com> fbdev: sm501fb: Fix buffer errors in OF binding code Helge Deller <deller(a)gmx.de> fbdev/arm: Export acorndata_8x8 font symbol for bootloader Wen Gong <quic_wgong(a)quicinc.com> wifi: ath12k: enable IEEE80211_VHT_EXT_NSS_BW_CAPABLE when NSS ratio is reported Baochen Qiang <baochen.qiang(a)oss.qualcomm.com> wifi: ath12k: fix EAPOL TX failure caused by stale tcl_metadata bits Sergio Paracuellos <sergio.paracuellos(a)gmail.com> gpio: mt7621: fix interrupt banks mapping on gpio chips Takashi Iwai <tiwai(a)suse.de> ALSA: aloop: Drop superfluous break Filipe Manana <fdmanana(a)suse.com> btrfs: fix invalid pointer dereference in __btrfs_run_delayed_refs() Ryder Lee <ryder.lee(a)mediatek.com> wifi: mt76: mt7996: fix potential tx_retries underflow Ryder Lee <ryder.lee(a)mediatek.com> wifi: mt76: mt7925: fix potential tx_retries underflow Ryder Lee <ryder.lee(a)mediatek.com> wifi: mt76: mt7921: fix potential tx_retries underflow Ryder Lee <ryder.lee(a)mediatek.com> wifi: mt76: mt7915: fix potential tx_retries underflow Bjoern A. Zeeb <bz(a)FreeBSD.org> wifi: mt76: fix argument to ieee80211_is_first_frag() Dylan Eskew <dylan.eskew(a)candelatech.com> wifi: mt76: mt7996: limit work in set_bitrate_mask Lorenzo Bianconi <lorenzo(a)kernel.org> wifi: mt76: mt7996: remove redundant pdev->bus check in probe Lorenzo Bianconi <lorenzo(a)kernel.org> wifi: mt76: mt7996: fix reading zeroed info->control.flags after mt76_tx_status_skb_add() Lorenzo Bianconi <lorenzo(a)kernel.org> wifi: mt76: mt7996: Fix possible NULL pointer dereference in mt7996_mac_write_txwi_80211() Lorenzo Bianconi <lorenzo(a)kernel.org> wifi: mt76: mt7996: Fix possible token leak in mt7996_tx_prepare_skb() Aviel Zohar <avielzohar123(a)gmail.com> wifi: mt76: mt7925: validate skb length in testmode query Sean Wang <sean.wang(a)mediatek.com> wifi: mt76: mt792x: skip MLD header rewrite for 802.3 encap TX Sean Wang <sean.wang(a)mediatek.com> wifi: mt76: mt7925: keep TX BA state in the primary WCID Javier Tia <floss(a)jetm.me> wifi: mt76: mt7925: fix stale pointer comparisons in change_vif_links Lorenzo Bianconi <lorenzo(a)kernel.org> wifi: mt76: mt7996: Fix NULL pointer dereference in mt7996_init_tx_queues() Felix Fietkau <nbd(a)nbd.name> wifi: mt76: mt7996: add missing max_remain_on_channel_duration Rajat Gupta <rajat.gupta(a)oss.qualcomm.com> wifi: mt76: use kfree_rcu for offchannel link in mt76_put_vif_phy_link Hongling Zeng <zenghongling(a)kylinos.cn> wifi: mt76: mt7921: fix resource leak in probe error path Myeonghun Pak <mhun512(a)gmail.com> wifi: mt76: mt7925: clean up DMA on probe failure Krzysztof Kozlowski <krzysztof.kozlowski(a)oss.qualcomm.com> ARM: configs: Drop duplicated CONFIG_EXT4_FS Hongyan Xia <hongyan.xia(a)transsion.com> sched/fair: Fix cpu_util runnable_avg arithmetic Wolfram Sang <wsa+renesas(a)sang-engineering.com> hwspinlock: qcom: avoid uninitialized struct members Alexandru Gagniuc <mr.nuke.me(a)gmail.com> remoteproc: qcom_q6v5_wcss: drop redundant wcss_q6_bcr_reset Miguel Ojeda <ojeda(a)kernel.org> rust: kbuild: show the right `quiet_cmd_rustc_procmacrolibrary` Hui Zhu <zhuhui(a)kylinos.cn> vmalloc: fix NULL pointer dereference in is_vm_area_hugepages() Hao Ge <hao.ge(a)linux.dev> lib/test_hmm: fix memory leak in dmirror_migrate_to_system() Jason Gunthorpe <jgg(a)ziepe.ca> iommufd: Destroy the pages content after detaching from dmabuf Ankit Soni <Ankit.Soni(a)amd.com> iommufd: Take dma_resv lock before dma_buf_unpin() in release path Timur Tabi <ttabi(a)nvidia.com> pinctrl: PINCTRL_STMFX should depend on CONFIG_OF Yu-Chun Lin <eleanor.lin(a)realtek.com> dt-bindings: pinctrl: realtek,rtd1625: Fix input voltage property name Luca Leonardo Scorcia <l.scorcia(a)gmail.com> pinctrl: mediatek: mt8167: Fix Schmitt trigger register offset of pins 34-39 Luca Leonardo Scorcia <l.scorcia(a)gmail.com> pinctrl: mediatek: mt8516: Fix Schmitt trigger register offset of pins 34-39 Mike Christie <michael.christie(a)oracle.com> scsi: target: Remove tcm_loop target reset handling Hongjie Fang <hongjiefang(a)asrmicro.com> scsi: ufs: core: Handle PM commands timeout before SCSI EH David Disseldorp <ddiss(a)suse.de> scsi: target: Fix hexadecimal CHAP_I handling Sneh Mankad <sneh.mankad(a)oss.qualcomm.com> pinctrl: qcom: Fix resolving register base address from device node Yuho Choi <dbgh9129(a)gmail.com> watchdog: unregister PM notifier on watchdog unregister Al Viro <viro(a)zeniv.linux.org.uk> configfs: fix lockless traversals of ->s_children Dmitry Vyukov <dvyukov(a)google.com> firmware_loader: Fix recursive lock in device_cache_fw_images() Aaron Ma <aaron.ma(a)canonical.com> ASoC: amd: acp-sdw-sof: Bound DAI link iteration Aaron Ma <aaron.ma(a)canonical.com> ASoC: amd: acp-sdw-legacy: Bound DAI link iteration Felix Gu <ustc.gu(a)gmail.com> spi: ep93xx: fix double-free of zeropage on DMA setup failure Jason Gunthorpe <jgg(a)ziepe.ca> IB/mlx5: Don't mangle the mr->pd inside the rereg callback Jason Gunthorpe <jgg(a)ziepe.ca> IB/mlx5: Pull the pdn out of the depths of the umr machinery Jason Gunthorpe <jgg(a)ziepe.ca> IB/mlx5: Remove unused mkc bits in mlx5r_umr_update_mr_page_shift() Jason Gunthorpe <jgg(a)ziepe.ca> RDMA/nldev: Fix locking when accessing mr->pd Jason Gunthorpe <jgg(a)ziepe.ca> IB/mlx5: Properly support implicit ODP rereg_mr Jason Gunthorpe <jgg(a)ziepe.ca> IB/mlx5: Don't take the rereg_mr fallback without a new translation Bryam Vargas <hexlabsecurity(a)proton.me> ntfs: fix u16 truncation of restart-area length check Bryam Vargas <hexlabsecurity(a)proton.me> ntfs: bound the attribute-list entry in ntfs_read_inode_mount() Bryam Vargas <hexlabsecurity(a)proton.me> ntfs: bound the look-ahead attribute-list entry in ntfs_external_attr_find() Bryam Vargas <hexlabsecurity(a)proton.me> ntfs: validate resident attribute lists and harden the validator Mark Harmstone <mark(a)harmstone.com> btrfs: don't force DIO writes to be serialized Samuel Moelius <sam.moelius(a)trailofbits.com> thermal: testing: reject missing command arguments Pengjie Zhang <zhangpengjie2(a)huawei.com> cpufreq: Documentation: fix conservative governor freq_step description Tony W Wang-oc <TonyWWang-oc(a)zhaoxin.com> ACPI: processor: Add cpuidle driver check in acpi_processor_register_idle_driver() Yuho Choi <dbgh9129(a)gmail.com> ACPI: IPMI: Fix message kref handling on dead device Sechang Lim <rhkrqnwk98(a)gmail.com> bpf: Fix NULL pointer dereference in bpf_task_from_vpid() Bartosz Golaszewski <bartosz.golaszewski(a)oss.qualcomm.com> powerpc/8xx: implement get_direction() in cpm1 Bryam Vargas <hexlabsecurity(a)proton.me> wifi: mac80211: bound S1G TIM PVB walk to the TIM element David Gow <david(a)davidgow.net> kunit:tool: Don't write to stdout when it should be disabled Mykyta Yatsenko <yatsenko(a)meta.com> bpf: Fix NMI/tracepoint re-entry deadlock on lru locks Christian Brauner <brauner(a)kernel.org> filelock: fix break_lease() stub signature for CONFIG_FILE_LOCKING=n David Carlier <devnexen(a)gmail.com> netfilter: flowtable: avoid num_encaps underflow on bridge VLAN untag David Windsor <dwindsor(a)gmail.com> bpf: Reject sleepable BPF_LSM_CGROUP programs at load time Mykyta Yatsenko <yatsenko(a)meta.com> bpf: Verifier support for sleepable tracepoint programs Thomas Weißschuh <thomas.weissschuh(a)linutronix.de> riscv: alternative: Also patch the CFI vDSO Thomas Weißschuh <thomas.weissschuh(a)linutronix.de> riscv: alternative: Pass vDSO start as parameter to apply_vdso_alternatives() Thomas Weißschuh <thomas.weissschuh(a)linutronix.de> riscv: alternative: Use IS_ENABLED() over ifdeffery for apply_vdso_alternatives() Kyle Zeng <kylebot(a)openai.com> ALSA: seq: Clear variable event pointer on read Rui Qi <qirui.001(a)bytedance.com> riscv: stacktrace: Remove bogus -0x4 offset in non-FP walk_stackframe Hui Wang <hui.wang(a)canonical.com> riscv: cpu_ops: Change return value type of cpu_is_stopped() to bool Cássio Gabriel <cassiogabrielcontato(a)gmail.com> ALSA: pcm: Fix unlocked runtime state reads in xfer ioctls HyeongJun An <sammiee5311(a)gmail.com> ALSA: seq: Fix partial userptr event expansion Tristan Madani <tristan(a)talencesecurity.com> wifi: wcn36xx: fix OOB read from short trigger BA firmware response Tristan Madani <tristan(a)talencesecurity.com> wifi: wcn36xx: fix OOB read from firmware count in PRINT_REG_INFO indication Tristan Madani <tristan(a)talencesecurity.com> wifi: wcn36xx: fix heap overflow from oversized firmware HAL response Christian Brauner <brauner(a)kernel.org> kernfs: link kn to its parent before the LSM init hook Miklos Szeredi <mszeredi(a)redhat.com> simpe_xattr: use per-sb cache Miklos Szeredi <mszeredi(a)redhat.com> simple_xattr: change interface to pass struct simple_xattrs ** Miklos Szeredi <mszeredi(a)redhat.com> tmpfs: simplify constructing "security.foo" xattr names Miklos Szeredi <mszeredi(a)redhat.com> kernfs: fix xattr race condition with multiple superblocks Leon Hwang <leon.hwang(a)linux.dev> bpf: Update transport_header when encapsulating UDP tunnel in lwt Leon Hwang <leon.hwang(a)linux.dev> bpf: Check tail zero of bpf_prog_info Leon Hwang <leon.hwang(a)linux.dev> bpf: Check tail zero of bpf_map_info Kaitao Cheng <chengkaitao(a)kylinos.cn> bpf: Clear rb node linkage when freeing bpf_rb_root Mykyta Yatsenko <yatsenko(a)meta.com> selftests/bpf: Fix flaky file_reader test Bernard Metzler <bernard.metzler(a)linux.dev> RDMA/siw: Fix endpoint/socket association handling Nora Schiffer <nora.schiffer(a)ew.tq-group.com> arm64: dts: freescale: fsl-ls1028a-tqmls1028a-mbls1028a: switch mmc aliases Frieder Schrempf <frieder.schrempf(a)kontron.de> arm64: dts: imx8mp-kontron: Fix GPIO for display power switch Alexander Stein <alexander.stein(a)ew.tq-group.com> arm64: dts: tqma8mpql-mba8mpxl: configure sai clock in audio codec as well Josua Mayer <josua(a)solid-run.com> arm64: dts: lx2162a-clearfog: use rev2 SoC dtsi Richard Zhu <hongxing.zhu(a)nxp.com> arm64: dts: imx95: Correct PCIe outbound address space configuration Alice Guo <alice.guo(a)nxp.com> arm64: dts: imx94: fix DDR PMU interrupt number Frieder Schrempf <frieder.schrempf(a)kontron.de> arm64: dts: imx8mp-kontron: Reduce EERAM SPI clock frequency Jacob Moroni <jmoroni(a)google.com> RDMA/irdma: Initialize iwmr->access during MR registration Jacob Moroni <jmoroni(a)google.com> RDMA/irdma: Fix OOB read during CQ MR registration Oliver Hartkopp <socketcan(a)hartkopp.net> ALSA: hda: fix Kconfig dependency of HD Audio PCI Jason Gunthorpe <jgg(a)ziepe.ca> IB/cm: Fix av cm device leak on an error path in cm_init_av_by_path() Arnd Bergmann <arnd(a)arndb.de> RDMA/hfi1: Open-code rvt_set_ibdev_name() DaeMyung Kang <charsyam(a)gmail.com> ntfs: free link name from ntfs_name_cache Pablo Neira Ayuso <pablo(a)netfilter.org> netfilter: conntrack: call nf_ct_gre_keymap_destroy() if master helper is pptp Pablo Neira Ayuso <pablo(a)netfilter.org> netfilter: conntrack: revert ct extension genid infrastructure Junxiao Chang <junxiao.chang(a)intel.com> x86/cpu: Remove obsolete aperfmperf_get_khz() declaration Shengming Hu <hu.shengming(a)zte.com.cn> mm/slub: preserve original size in _kmalloc_nolock_noprof retry path Cássio Gabriel <cassiogabrielcontato(a)gmail.com> ALSA: usb-audio: qcom: Initialize offload control return value Pablo Neira Ayuso <pablo(a)netfilter.org> netfilter: cttimeout: detach dataplane timeout policy and repurpose refcount Fernando Fernandez Mancera <fmancera(a)suse.de> netfilter: synproxy: protect nf_ct_seqadj_init() with conntrack lock Fernando Fernandez Mancera <fmancera(a)suse.de> netfilter: synproxy: fix unaligned memory access in timestamp adjustment Fernando Fernandez Mancera <fmancera(a)suse.de> netfilter: synproxy: adjust duplicate timestamp options Fernando Fernandez Mancera <fmancera(a)suse.de> netfilter: synproxy: drop packets if timestamp adjustment fails Pablo Neira Ayuso <pablo(a)netfilter.org> netfilter: nfnetlink_cthelper: use {READ,WRITE}_ONCE for accessing helper flags Fernando Fernandez Mancera <fmancera(a)suse.de> netfilter: nfnetlink_osf: fix mss parsing on big-endian architectures Dave Jiang <dave.jiang(a)intel.com> cxl/pci: Convert PCIBIOS errors to errno on DVSEC config accesses Dave Jiang <dave.jiang(a)intel.com> cxl/pci: Fix the incorrect check of pci_read_config_word() return Ian Bridges <icb(a)fastmail.org> ocfs2: fix out-of-bounds write in ocfs2_remove_refcount_extent Joseph Qi <joseph.qi(a)linux.alibaba.com> ocfs2: fix race between ocfs2_control_install_private() and ocfs2_control_release() Zhang Cen <rollkingzzc(a)gmail.com> ocfs2/dlm: require a ref for locking_state debugfs open Zhang Cen <rollkingzzc(a)gmail.com> ocfs2: reject FITRIM ranges shorter than a cluster Zhang Cen <rollkingzzc(a)gmail.com> ocfs2: validate fast symlink target during inode read Dmitry Antipov <dmantipov(a)yandex.ru> ocfs2: fix buffer head management in ocfs2_read_blocks() Thomas Weißschuh <linux(a)weissschuh.net> lib: kunit_iov_iter: repeatedly call alloc_pages_bulk() Zhang Cen <rollkingzzc(a)gmail.com> ocfs2: rebase copied fsdlm LVB pointers in locking_state Wandun Chen <chenwandun(a)lixiang.com> of: reserved_mem: avoid post-init UAF when alloc_reserved_mem_array() fails Alex Deucher <alexander.deucher(a)amd.com> drm/amdkfd: always resume_all after suspend_all Alexei Starovoitov <ast(a)kernel.org> bpf: Take mmap_lock in zap_pages() Dan Williams <djbw(a)kernel.org> cxl/test: Fix __fortify_panic Dan Williams <djbw(a)kernel.org> cxl/fwctl: Fix __fortify_panic Andreas Kemnade <andreas(a)kemnade.info> wifi: wlcore: enable the right set of ciphers Antony Antony <antony.antony(a)secunet.com> xfrm: fix NAT-related field inheritance in SA migration Sandipan Das <sandipan.das(a)amd.com> perf/x86/amd/uncore: Use Node ID to identify DF and UMC domains Zide Chen <zide.chen(a)intel.com> perf/x86/intel/uncore: Fix PCI device refcount leak in UPI discovery Zide Chen <zide.chen(a)intel.com> perf/x86/intel/uncore: Fix discovery unit lookup for multi-die systems Sandipan Das <sandipan.das(a)amd.com> perf/x86/amd/core: Always use the NMI latency mitigation Christian Brauner <brauner(a)kernel.org> eventpoll: wrap EP_UNACTIVE_PTR in typed sentinel helpers Christian Brauner <brauner(a)kernel.org> eventpoll: extract ep_deliver_event() from ep_send_events() Christian Brauner <brauner(a)kernel.org> eventpoll: split ep_insert() into alloc + register stages Christian Brauner <brauner(a)kernel.org> eventpoll: rename attach_epitem() to ep_attach_file() Jeff Layton <jlayton(a)kernel.org> mm: preserve PG_dropbehind flag during folio split Pranjal Shrivastava <praan(a)google.com> iommu/vt-d: Fix RB-tree corruption in probe error path Michael S. Tsirkin <mst(a)redhat.com> vhost: fix vhost_get_avail_idx for a non empty ring Woojin Ji <random6.xyz(a)gmail.com> bpftool: Use libbpf error code for flow dissector query Lizhi Hou <lizhi.hou(a)amd.com> accel/amdxdna: Return errors for failed debug BO commands Yunxiang Li <Yunxiang.Li(a)amd.com> drm/amdgpu: set sub_block_index for mca ras sub-blocks Vitaly Prosyak <vitaly.prosyak(a)amd.com> drm/amd/pm: Add empty string validation to sysfs store functions Vitaly Prosyak <vitaly.prosyak(a)amd.com> drm/amdgpu: fix KASAN slab-out-of-bounds in amdgpu_coredump ring dump Marek Szyprowski <m.szyprowski(a)samsung.com> irqchip/exynos-combiner: Remove useless spinlock Li Chen <me(a)linux.beauty> ext4: fix fast commit wait/wake bit mapping on 64-bit Karl Mehltretter <kmehltretter(a)gmail.com> lockdep/selftests: Restore sched_rt_mutex state on PREEMPT_RT Karl Mehltretter <kmehltretter(a)gmail.com> lockdep/selftests: Restore migrate_disable() state on PREEMPT_RT Al Viro <viro(a)zeniv.linux.org.uk> configfs_lookup(): don't leave ->s_dentry dangling on failure Inochi Amaoto <inochiama(a)gmail.com> riscv: dts: sophgo: sg2042: use hex for CPU unit address Inochi Amaoto <inochiama(a)gmail.com> riscv: dts: sophgo: sg2044: use hex for CPU unit address Alexander Potapenko <glider(a)google.com> lib/test_meminit: use && for bools Frederic Weisbecker <frederic(a)kernel.org> tick/sched: Fix TOCTOU in nohz idle time fetch Daniel Borkmann <daniel(a)iogearbox.net> bpf: Reject exclusive maps for bpf_map_elem iterators Nathan Chancellor <nathan(a)kernel.org> driver core: Use system_percpu_wq instead of system_wq liuxixin <gliuxen(a)gmail.com> nvme: fix FDP fdpcidx bounds check Guanyou.Chen <chenguanyou9338(a)gmail.com> sched: restore timer_slack_ns when resetting RT policy on fork Danila Chernetsov <listdansp(a)mail.ru> ext2: fix ignored return value of generic_write_sync() Sang-Heon Jeon <ekffu200098(a)gmail.com> mm/fake-numa: fix under-allocation detection in uniform split Deepanshu Kartikey <kartikey406(a)gmail.com> bpf: fix UAF by restoring RCU-delayed inode freeing in bpffs Chanwoo Lee <cw9316.lee(a)samsung.com> scsi: ufs: Fix wrong value printed in unexpected UPIU response case Dan Carpenter <error27(a)gmail.com> scsi: pm8001: Fix error code in non_fatal_log_show() Daniel Borkmann <daniel(a)iogearbox.net> libbpf: Skip max_entries override on signed loaders Daniel Borkmann <daniel(a)iogearbox.net> libbpf: Skip initial_value override on signed loaders KP Singh <kpsingh(a)kernel.org> libbpf: Reject non-exclusive metadata maps in the signed loader Daniel Borkmann <daniel(a)iogearbox.net> bpf: Reject exclusive maps as inner maps in map-in-map Martin Wilck <martin.wilck(a)suse.com> scsi: Revert "scsi: Fix sas_user_scan() to handle wildcard and multi-channel scans" Neal Cardwell <ncardwell(a)google.com> tcp_bbr: fix SPDX-License-Identifier to be GPL-2.0 OR BSD-3-Clause Alison Schofield <alison.schofield(a)intel.com> nvdimm/btt: Handle preemption in BTT lane acquisition Randy Dunlap <rdunlap(a)infradead.org> x86/cpu: Keep the PROCESSOR_SELECT menu together Yuho Choi <dbgh9129(a)gmail.com> ARM: imx31: Fix IIM mapping leak in revision check Rafael J. Wysocki <rafael.j.wysocki(a)intel.com> ACPI: button: Fix lid_device value leak past driver removal Bart Van Assche <bvanassche(a)acm.org> ata: libata: Fix ata_exec_internal() Wei Zhang <wei.zhang(a)oss.qualcomm.com> wifi: ath12k: fix NULL deref in change_sta_links for unready link Wei Zhang <wei.zhang(a)oss.qualcomm.com> wifi: ath12k: fix inconsistent arvif state in vdev_create error paths Miaoqing Pan <miaoqing.pan(a)oss.qualcomm.com> wifi: ath12k: fix memory leak in ath12k_wifi7_dp_rx_h_verify_tkip_mic() Kwan Lai Chee Hou <laicheehou9(a)gmail.com> wifi: ath12k: fix incorrect HT/VHT/HE/EHT MCS reporting in monitor mode J. Neuschäfer <j.ne(a)posteo.net> HID: wiimote: Fix table layout and whitespace errors Yuho Choi <dbgh9129(a)gmail.com> ARM: imx3: Fix CCM node reference leak Chuck Lever <chuck.lever(a)oracle.com> NFSD: Fix delegation reference leak in nfsd4_revoke_states John Madieu <john.madieu.xa(a)bp.renesas.com> ASoC: rsnd: Fix RSND_SOC_MASK width to single nibble Carlos Song <carlos.song(a)nxp.com> spi: imx: replace dmaengine_terminate_all() with dmaengine_terminate_sync() Felix Gu <ustc.gu(a)gmail.com> spi: atmel: fix DMA channel and bounce buffer leaks Zhang Yi <yi.zhang(a)huawei.com> ext4: fix LOGFLUSH shutdown ordering to allow ordered-mode data writeback Pasha Tatashin <pasha.tatashin(a)soleen.com> liveupdate: fix u-a-f in luo_file_unpreserve_files() and luo_file_finish() Pasha Tatashin <pasha.tatashin(a)soleen.com> liveupdate: block session mutations during reboot Pasha Tatashin <pasha.tatashin(a)soleen.com> liveupdate: fix TOCTOU race in luo_session_retrieve() Pasha Tatashin <pasha.tatashin(a)soleen.com> liveupdate: skip serialization for context-preserving kexec Daniel Borkmann <daniel(a)iogearbox.net> libbpf: Skip endianness swap when loader generation failed Daniel Borkmann <daniel(a)iogearbox.net> libbpf: Skip hash computation when loader generation failed David Matlack <dmatlack(a)google.com> liveupdate: Reference count incoming FLB data David Matlack <dmatlack(a)google.com> liveupdate: Use refcount_t for FLB reference counts Yuyang Huang <yuyanghuang(a)google.com> selftests/bpf: add verification for BPF_PROG_QUERY attr size boundaries Yuyang Huang <yuyanghuang(a)google.com> bpf: fix BPF_PROG_QUERY OOB write and cgroup backward compat Abd-Alrhman Masalkhi <abd.masalkhi(a)gmail.com> raid1: fix nr_pending leak in REQ_ATOMIC bad-block error path Abd-Alrhman Masalkhi <abd.masalkhi(a)gmail.com> md/raid1,raid10: fix bio accounting for split md cloned bios Abd-Alrhman Masalkhi <abd.masalkhi(a)gmail.com> md/raid1,raid10: fix error-path detection with md_cloned_bio() Abd-Alrhman Masalkhi <abd.masalkhi(a)gmail.com> md/raid1,raid10: fix deadlock in read error recovery path Chen Cheng <chencheng(a)fnnas.com> md/raid10: reset read_slot when reusing r10bio for discard Marek Vasut <marek.vasut+renesas(a)mailbox.org> arm64: dts: renesas: ironhide: Describe all reserved memory Marek Vasut <marek.vasut+renesas(a)mailbox.org> arm64: dts: renesas: r8a78000: Fix GIC-720AE View 1 Redistributor description Danilo Krummrich <dakr(a)kernel.org> rpmsg: use generic driver_override infrastructure Danilo Krummrich <dakr(a)kernel.org> Drivers: hv: vmbus: use generic driver_override infrastructure Danilo Krummrich <dakr(a)kernel.org> cdx: use generic driver_override infrastructure Danilo Krummrich <dakr(a)kernel.org> amba: use generic driver_override infrastructure Renjiang Han <renjiang.han(a)oss.qualcomm.com> media: qcom: venus: relax encoder frame/blur step size on v6 Renjiang Han <renjiang.han(a)oss.qualcomm.com> media: qcom: venus: relax encoder frame/blur dimension steps on v4 Renjiang Han <renjiang.han(a)oss.qualcomm.com> media: qcom: venus: drop extra padding in NV12 raw size calculation Dmitry Baryshkov <dmitry.baryshkov(a)oss.qualcomm.com> Revert "media: venus: hfi_platform: Correct supported codecs for sc7280" Yixun Lan <dlan(a)kernel.org> dts: riscv: spacemit: k3: Fix I/O power settings Tristan Madani <tristmd(a)gmail.com> RDMA/rxe: Copy WQE to local buffer in non-SRQ receive path Tristan Madani <tristmd(a)gmail.com> RDMA/rxe: Fix TOCTOU heap overflow in get_srq_wqe Jiri Pirko <jiri(a)resnulli.us> RDMA/umem: Add ib_umem_is_contiguous() stub for !CONFIG_INFINIBAND_USER_MEM Jinseok Kim <always.starving0(a)gmail.com> arm: dts: bcm2711: Fix typo in gpio-line-names Marek Vasut <marex(a)nabladev.com> arm64: dts: st: Fix SAI addresses on stm32mp251 zhoumin <teczm(a)foxmail.com> EDAC/{skx_common,skx}: Fix UBSAN shift-out-of-bounds in skx_get_dimm_info Qiuxu Zhuo <qiuxu.zhuo(a)intel.com> EDAC/igen6: Fix memory topology parsing for Panther Lake-H SoCs Qiuxu Zhuo <qiuxu.zhuo(a)intel.com> EDAC/igen6: Fix call trace due to missing release() Akhil P Oommen <akhilpo(a)oss.qualcomm.com> drm/msm/a8xx: Fix RSCC offset Akhil P Oommen <akhilpo(a)oss.qualcomm.com> drm/msm/a8xx: Make a8xx_recover IFPC safe Arnd Bergmann <arnd(a)arndb.de> firmware: samsung: acpm: remove compile-testing stubs Tudor Ambarus <tudor.ambarus(a)linaro.org> firmware: samsung: acpm: Add devm_acpm_get_by_phandle helper Jessica Zhang <jesszhan0024(a)gmail.com> drm/msm/dp: Fix the ISR_* enum values Jessica Zhang <jesszhan0024(a)gmail.com> drm/msm/dp: fix HPD state status bit shift value Andrea Righi <arighi(a)nvidia.com> sched/deadline: Reject debugfs dl_server writes for offline CPUs Alexey Kardashevskiy <aik(a)amd.com> crypto: ccp/tsm - Enable the root port after the endpoint Herbert Xu <herbert(a)gondor.apana.org.au> crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm Herbert Xu <herbert(a)gondor.apana.org.au> crypto: tegra - Fix dma_free_coherent size error Aleksander Jan Bajkowski <olek2(a)wp.pl> crypto: inside-secure/eip93 - Add check for devm_request_threaded_irq Weili Qian <qianweili(a)huawei.com> crypto: hisilicon/qm - disable error report before flr Tetsuo Handa <penguin-kernel(a)I-love.SAKURA.ne.jp> ocfs2: kill osb->system_file_mutex lock ZhengYuan Huang <gality369(a)gmail.com> ocfs2: don't BUG_ON an invalid journal dinode Dan Carpenter <error27(a)gmail.com> rapidio/tsi721: prevent a bad dereference in tsi721_db_dpc() Yury Norov <ynorov(a)nvidia.com> uaccess: minimize INLINE_COPY_USER-related ifdefery Yury Norov <ynorov(a)nvidia.com> uaccess: unify inline vs outline copy_{from,to}_user() selection Yury Norov <ynorov(a)nvidia.com> rust: uaccess: use INLINE_COPY_TO_USER to guard copy_to_user() Josh Law <objecting(a)objecting.org> lib/base64: validate before writing in decode tail path Davidlohr Bueso <dave(a)stgolabs.net> dax/kmem: account for partial discontiguous resource upon removal Danilo Krummrich <dakr(a)kernel.org> rust: devres: add 'static bound to Devres<T> Brian Norris <briannorris(a)chromium.org> arm64: tegra: Add #{address,size}-cells to Chromium-based /firmware Brian Norris <briannorris(a)chromium.org> ARM: tegra: Add #{address,size}-cells to Chromium-based /firmware Carlos Llamas <cmllamas(a)google.com> libbpf: Fix UAF in strset__add_str() Siddharth Nayyar <sidnayyar(a)google.com> bpftool: Fix typo in struct_ops map FD generation for light skeleton Michael Bommarito <michael.bommarito(a)gmail.com> libbpf: Harden parse_vma_segs() path parsing Timur Tabi <ttabi(a)nvidia.com> drm/nouveau/bios: specify correct display fuse register for Ampere and Ada Mikko Perttunen <mperttunen(a)nvidia.com> drm/tegra: Fix iommu_map_sgtable() return value check Mikko Perttunen <mperttunen(a)nvidia.com> gpu: host1x: Fix iommu_map_sgtable() return value check Felix Gu <ustc.gu(a)gmail.com> drm/tegra: dc: Fix device node reference leak in tegra_dc_has_output() Felix Gu <ustc.gu(a)gmail.com> gpu: host1x: mipi: Fix device_node reference leak in tegra_mipi_request() Thomas Zimmermann <tzimmermann(a)suse.de> drm/tegra: fbdev: Do not assign to struct drm_fb_helper.info Mikko Perttunen <mperttunen(a)nvidia.com> gpu: host1x: Allow entries in BO caches to be freed Ion Agorria <ion(a)agorria.com> drm/tegra: gr2d/gr3d: Contain PM in the gr*d_probe/gr*d_remove Svyatoslav Ryhel <clamor95(a)gmail.com> drm/tegra: gr2d/gr3d: Initialize address register map before HOST1X client is registered Tomas Glozar <tglozar(a)redhat.com> rtla/actions: Restore continue flag in actions_perform() Linus Walleij <linusw(a)kernel.org> dt-bindings: vendor-prefixes: Add Verbatim Corporation Jackie Dong <xy-jackie(a)139.com> ALSA: hda/realtek:ALC269 fixup for Yoga Pro 7 15ASH11 mic mute LED Vasant Hegde <vasant.hegde(a)amd.com> iommu/amd: Fix premature break in init_iommu_one() Jiayuan Chen <jiayuan.chen(a)linux.dev> net/sched: cls_bpf: prevent unbounded recursion in offload rollback Eric Dumazet <edumazet(a)google.com> ipv6: guard against possible NULL deref in __in6_dev_stats_get() Breno Leitao <leitao(a)debian.org> workqueue: drop spurious '*' from print_worker_info() fn declaration Mateusz Nowicki <mateusz.nowicki(a)posteo.net> nvme-pci: fix out-of-bounds access in nvme_setup_descriptor_pools Nilay Shroff <nilay(a)linux.ibm.com> nvme-multipath: fix flex array size in struct nvme_ns_head Geliang Tang <geliang(a)kernel.org> nvmet-tcp: check return value of nvmet_tcp_set_queue_sock Geliang Tang <geliang(a)kernel.org> nvmet-tcp: fix page fragment cache leak in error path Jia He <justin.he(a)arm.com> init/initramfs_test: wait_for_initramfs() before running Charles Keepax <ckeepax(a)opensource.cirrus.com> pinctrl: cs42l43: Fix polarity on debounce Charles Keepax <ckeepax(a)opensource.cirrus.com> pinctrl: cs42l43: Fix leaked pm reference on error path Joey Lu <a0987203069(a)gmail.com> pinctrl: nuvoton: ma35d1: fix MFP register offset and pin table Florian Schmaus <flo(a)geekplace.eu> selftests: Fix Makefile target for nsfs Zhang Cen <rollkingzzc(a)gmail.com> ALSA: seq: midi: Serialize output teardown with event_input Takashi Iwai <tiwai(a)suse.de> ALSA: seq: oss: Fix UAF at handling events with embedded SysEx data Cássio Gabriel <cassiogabrielcontato(a)gmail.com> ALSA: xen-front: Connect event channel after stream prepare Cássio Gabriel <cassiogabrielcontato(a)gmail.com> ALSA: xen-front: Reset event channel state on stream clear Zhongqiu Han <zhongqiu.han(a)oss.qualcomm.com> cpufreq: governor: Fix stale prev_cpu_nice spike when enabling ignore_nice_load Zhongqiu Han <zhongqiu.han(a)oss.qualcomm.com> cpufreq: governor: Fix data races on per-CPU idle/nice baselines Ripan Deuri <ripan.deuri(a)oss.qualcomm.com> wifi: ath12k: fix error unwind on arch_init() failure in PCI probe Miquel Raynal <miquel.raynal(a)bootlin.com> mtd: spi-nor: Drop duplicate Kconfig dependency Miquel Raynal <miquel.raynal(a)bootlin.com> mtd: spi-nor: debugfs: Fix the flags list Jon Hunter <jonathanh(a)nvidia.com> arm64: tegra: Fix address of Tegra264 main GPIO controller Danilo Krummrich <dakr(a)kernel.org> driver core: Guard deferred probe timeout extension with delayed_work_pending() Danilo Krummrich <dakr(a)kernel.org> driver core: Fix missing jiffies conversion in deferred_probe_extend_timeout() Rosen Penev <rosenp(a)gmail.com> mips: n64: add __iomem for writel call Rosen Penev <rosenp(a)gmail.com> mips: ralink: mt7621: add missing __iomem Maciej W. Rozycki <macro(a)orcam.me.uk> MIPS: DEC: Remove do_IRQ() call indirection Maciej W. Rozycki <macro(a)orcam.me.uk> MIPS: Fix big-endian stack argument fetching in o32 wrapper Jiakai Xu <xujiakai24(a)mails.ucas.ac.cn> PM: sleep: Use complete() in device_pm_sleep_init() Xianwei Zhao <xianwei.zhao(a)amlogic.com> pinctrl: meson: amlogic-a4: fix gpio output glitch Tao Cui <cuitao(a)kylinos.cn> RDMA/counter: Fix incorrect port index in rdma_counter_init() error cleanup Rafael J. Wysocki <rafael.j.wysocki(a)intel.com> ACPI: PAD: Fix teardown ordering in acpi_pad_remove() Lianfa Weng <wenglianfa(a)huawei.com> RDMA/hns: Fix log flood after cmd_mbox failure Lianfa Weng <wenglianfa(a)huawei.com> RDMA/hns: Fix warning in poll cq direct mode Eliot Courtney <ecourtney(a)nvidia.com> gpu: nova-core: vbios: use checked accesses in `setup_falcon_data` Eliot Courtney <ecourtney(a)nvidia.com> gpu: nova-core: vbios: use checked access in `FwSecBiosImage::header` Eliot Courtney <ecourtney(a)nvidia.com> gpu: nova-core: vbios: use checked ops and accesses in `FwSecBiosImage::ucode` Eliot Courtney <ecourtney(a)nvidia.com> gpu: nova-core: vbios: read BitToken using FromBytes Eliot Courtney <ecourtney(a)nvidia.com> gpu: nova-core: vbios: avoid reading too far in read_more_at_offset Eliot Courtney <ecourtney(a)nvidia.com> gpu: nova-core: vbios: use checked arithmetic for bios image range end Eliot Courtney <ecourtney(a)nvidia.com> gpu: nova-core: vbios: stop scanning at BIOS_MAX_SCAN_LEN Guangshuo Li <lgs201920130244(a)gmail.com> IB/mlx4: Fix refcount leak in add_port() error path Zhu Yanjun <yanjun.zhu(a)linux.dev> RDMA/rxe: Fix a use-after-free problem in rxe_mmap Jacob Moroni <jmoroni(a)google.com> RDMA/irdma: Fix out-of-bounds write in irdma_copy_user_pgaddrs Chancel Liu <chancel.liu(a)nxp.com> ASoC: dapm: Fix widget lookup with prefixed names across DAPM contexts Han Gao <gaohan(a)iscas.ac.cn> pinctrl: spacemit: fix NULL check in spacemit_pin_set_config Samuel Holland <samuel(a)sholland.org> bus: sunxi-rsb: Always check register address validity Daniel Palmer <daniel(a)thingy.jp> tools/nolibc: stackprotector: Avoid stalling program startup if crng is not init yet Shiraz Saleem <shirazsaleem(a)microsoft.com> RDMA/mana_ib: Use ib_get_eth_speed for reporting port speed Ronaldo Nunez <rnunez(a)baylibre.com> pwm: imx27: Fix variable truncation in .apply() Lifeng Zheng <zhenglifeng1(a)huawei.com> cpufreq: conservative: Simplify frequency limit handling Pengjie Zhang <zhangpengjie2(a)huawei.com> cpufreq: Documentation: fix sampling_down_factor range Dmitry Baryshkov <dmitry.baryshkov(a)oss.qualcomm.com> drm/msm/mdss: correct UBWC programming sequences Cássio Gabriel <cassiogabrielcontato(a)gmail.com> ASoC: mediatek: mt8189: Fix probe resource cleanup Aleksander Jan Bajkowski <olek2(a)wp.pl> crypto: eip93 - fix reset ring register definition Saravana Kannan <saravanak(a)kernel.org> of: dynamic: Fix overlayed devices not probing because of fw_devlink Saravana Kannan <saravanak(a)kernel.org> Revert "treewide: Fix probing of devices in DT overlays" Zhang Yuwei <zhangyuwei20(a)huawei.com> driver core: Use mod_delayed_work to prevent lost deferred probe work Stepan Ionichev <sozdayvek(a)gmail.com> device property: fix fwnode reference leak in fwnode_graph_get_endpoint_by_id() Conor Kotwasinski <conorkotwasinski2024(a)u.northwestern.edu> kernfs: fix suspicious RCU usage in kernfs_put() Baokun Li <libaokun(a)linux.alibaba.com> writeback: drop now-unnecessary rcu_barrier() in cgroup_writeback_umount() Joel Selvaraj <foss(a)joelselvaraj.com> arm64: dts: qcom: sdm845-xiaomi-beryllium: Correct IPA FW path Gopikrishna Garmidi <gopikrishna.garmidi(a)oss.qualcomm.com> arm64: dts: qcom: glymur: Fix wrong interrupt number for i2c19 Ritesh Kumar <quic_riteshk(a)quicinc.com> arm64: dts: qcom: lemans: Add eDP ref clock for eDP PHYs Pengpeng Hou <pengpeng(a)iscas.ac.cn> tracing: Bound synthetic-field strings with seq_buf Harshal Dev <harshal.dev(a)oss.qualcomm.com> arm64: dts: qcom: sm8750: Add power-domain and iface clk for ice node Harshal Dev <harshal.dev(a)oss.qualcomm.com> arm64: dts: qcom: sm8650: Add power-domain and iface clk for ice node Harshal Dev <harshal.dev(a)oss.qualcomm.com> arm64: dts: qcom: sm8550: Add power-domain and iface clk for ice node Harshal Dev <harshal.dev(a)oss.qualcomm.com> arm64: dts: qcom: sm8450: Add power-domain and iface clk for ice node Harshal Dev <harshal.dev(a)oss.qualcomm.com> arm64: dts: qcom: kodiak: Add power-domain and iface clk for ice node Harshal Dev <harshal.dev(a)oss.qualcomm.com> arm64: dts: qcom: sc7180: Add power-domain and iface clk for ice node Harshal Dev <harshal.dev(a)oss.qualcomm.com> arm64: dts: qcom: monaco: Add power-domain and iface clk for ice node Harshal Dev <harshal.dev(a)oss.qualcomm.com> arm64: dts: qcom: lemans: Add power-domain and iface clk for ice node Harshal Dev <harshal.dev(a)oss.qualcomm.com> arm64: dts: qcom: kaanapali: Add power-domain and iface clk for ice node Abel Vesa <abel.vesa(a)oss.qualcomm.com> arm64: dts: qcom: eliza-mtp: Fix the debug UART index Geert Uytterhoeven <geert+renesas(a)glider.be> firmware: arm_scmi: Fix OOB in scmi_power_name_get() Sven Püschel <s.pueschel(a)pengutronix.de> media: rockchip: rga: fix too small buffer size Nishanth Sampath Kumar <nissampa(a)cisco.com> regmap-i2c: fix sparse warning in regmap_smbus_word_write_reg16 Eric Dumazet <edumazet(a)google.com> net/sched: sch_drr: annotate data-races around cl->deficit GuoHan Zhao <zhaoguohan(a)kylinos.cn> vfio/xe: avoid duplicate reset in xe_vfio_pci_reset_done Hongling Zeng <zenghongling(a)kylinos.cn> nilfs2: Fix return in nilfs_mkdir David Matlack <dmatlack(a)google.com> vfio: selftests: Allow builds when ARCH=x86 Jason Gunthorpe <jgg(a)ziepe.ca> vfio: selftests: Fix out-of-tree build with make O= Daniel Palmer <daniel(a)thingy.jp> tools/nolibc: getopt: Fix potential out of bounds access Chen-Yu Tsai <wenst(a)chromium.org> regulator: dt-bindings: mt6359: Drop regulator-name pattern restrictions Randy Dunlap <rdunlap(a)infradead.org> bitops: use common function parameter names Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> sysfs: clamp show() return value in sysfs_kf_read() Guoniu Zhou <guoniu.zhou(a)oss.nxp.com> media: synopsys: Fix IPI using hardcoded datatype Sudeep Holla <sudeep.holla(a)kernel.org> firmware: arm_scmi: Read sensor config as 32-bit value Andre Przywara <andre.przywara(a)arm.com> firmware: smccc: Fix Arm SMCCC SOC_ID name call Aurelien Jarno <aurelien(a)aurel32.net> riscv: dts: spacemit: fix uboot partition offset on Milk-V Jupiter Aurelien Jarno <aurelien(a)aurel32.net> riscv: dts: spacemit: set console baud rate on Milk-V Jupiter Jose A. Perez de Azpillaga <azpijr(a)gmail.com> staging: media: atomisp: fix loop shadowing in ia_css_stream_destroy() Yuho Choi <dbgh9129(a)gmail.com> media: atomisp: gc2235: fix UAF and memory leak Zilin Guan <zilin(a)seu.edu.cn> media: atomisp: Fix memory leak in atomisp_fixed_pattern_table() Viacheslav Dubeyko <slava(a)dubeyko.com> hfs: fix incorrect inode ID assignment in hfs_new_inode() Sherry Sun <sherry.sun(a)nxp.com> arm64: dts: imx95-19x19-evk: Fix PCIe EP vpcie-supply Sherry Sun <sherry.sun(a)nxp.com> arm64: dts: imx8qxp-mek: Remove unnecessary PCIe EP vpcie-supply Sherry Sun <sherry.sun(a)nxp.com> arm64: dts: imx8dxl-evk: Remove unnecessary PCIe EP properties Francesco Dolcini <francesco.dolcini(a)toradex.com> arm64: dts: freescale: imx95-verdin-ivy: fix RS485 RTS polarity Jamie Nguyen <jamien(a)nvidia.com> firmware: arm_ffa: Honor partition info descriptor size Kevin Brodsky <kevin.brodsky(a)arm.com> selftests/mm: Fix resv_sz when parsing arm64 signal frame Vincent Guittot <vincent.guittot(a)linaro.org> sched/fair: Update util_est after updating util_avg during dequeue Bibek Kumar Patro <bibek.patro(a)oss.qualcomm.com> iommu/arm-smmu-qcom: Fix fastrpc compatible string in ACTLR client match table Paul Chaignon <paul.chaignon(a)gmail.com> selftests/bpf: Fix test for refinement of single-value tnum Roman Kvasnytskyi <roman(a)kvasnytskyi.net> selftests/bpf: Reject unsupported -k option in vmtest.sh Paul Chaignon <paul.chaignon(a)gmail.com> selftests/bpf: Override EXTRA_LDFLAGS for static builds Fengnan Chang <changfengnan(a)bytedance.com> dm: limit target bio polling to one shot Liviu Dudau <liviu.dudau(a)arm.com> drm/syncobj: Fix memory leak in drm_syncobj_find_fence() Crystal Wood <crwood(a)redhat.com> rtla: Stop the record trace on interrupt Costa Shulyupin <costa.shul(a)redhat.com> tools/rtla: Fix --dump-tasks usage in timerlat Junxian Huang <huangjunxian6(a)hisilicon.com> RDMA/hns: Initialize seqfile before creating file Sara Venkatesh <sarajvenkatesh(a)gmail.com> RDMA/srpt: fix integer overflow in immediate data length check Prathamesh Deshpande <prathameshdeshpande7(a)gmail.com> RDMA/mlx5: Fix devx subscribe-event unwind NULL dereference Prathamesh Deshpande <prathameshdeshpande7(a)gmail.com> RDMA/mlx5: Fix UMR XLT cleanup on ODP populate failure Alexander Chesnokov <Alexander.Chesnokov(a)kaspersky.com> RDMA/hns: Fix arithmetic overflow in calc_hem_config() Prathamesh Deshpande <prathameshdeshpande7(a)gmail.com> IB/mlx5: Fix transport-domain rollback and initialize lb mutex earlier Linmao Li <lilinmao(a)kylinos.cn> ipv6: addrconf: bail out of dad_failure when state is no longer POSTDAD Eric Dumazet <edumazet(a)google.com> net/sched: sch_htb: annotate data-races (I) Eric Dumazet <edumazet(a)google.com> net/sched: sch_htb: do not change sch->flags in htb_dump() Eric Dumazet <edumazet(a)google.com> net/sched: sch_dualpi2: annotate data-races in dualpi2_dump_stats() Eric Dumazet <edumazet(a)google.com> net/sched: add qdisc_qlen_inc() and qdisc_qlen_dec() Qiang Ma <maqianga(a)uniontech.com> spi: hisi-kunpeng: Use dev_err_probe() for host registration failure Abdun Nihaal <nihaal(a)cse.iitm.ac.in> crypto: safexcel - Fix potential memory leak in safexcel_pci_probe() Stepan Ionichev <sozdayvek(a)gmail.com> crypto: ccp/sev-dev-tsm - bail out early when pdev->bus is NULL Herbert Xu <herbert(a)gondor.apana.org.au> crypto: af_alg - Cap AEAD AD length to 0x80000000 Sean Christopherson <seanjc(a)google.com> crypto: ccp - Treat zero-length cert chain as query for blob lengths Yihang Li <liyihang9(a)huawei.com> scsi: hisi_sas: Add slave_destroy interface for v3 hw Eric Dumazet <edumazet(a)google.com> net/sched: sch_hfsc: annotate data-races in hfsc_dump_class_stats() Stepan Ionichev <sozdayvek(a)gmail.com> clk: scpi: Unregister child clock providers on remove Rafael J. Wysocki <rafael.j.wysocki(a)intel.com> thermal: hwmon: Register a hwmon device for each thermal zone Rafael J. Wysocki <rafael.j.wysocki(a)intel.com> thermal: hwmon: Fix critical temperature attribute removal Pengpeng Hou <pengpeng(a)iscas.ac.cn> evm: terminate and bound the evm_xattrs read buffer Lin He <helin52(a)huawei.com> drm/hisilicon/hibmc: use clock to look up the PLL value Lin He <helin52(a)huawei.com> drm/hisilicon/hibmc: move display contrl config to hibmc_probe() Lin He <helin52(a)huawei.com> drm/hisilicon/hibmc: fix no showing when no connectors connected Lin He <helin52(a)huawei.com> drm/hisilicon/hibmc: add updating link cap in DP detect() Rafael J. Wysocki <rafael.j.wysocki(a)intel.com> platform/chrome: wilco_ec: event: Check ACPI_COMPANION() Rafael J. Wysocki <rafael.j.wysocki(a)intel.com> platform/chrome: chromeos_tbmc: Check ACPI_COMPANION() Rafael J. Wysocki <rafael.j.wysocki(a)intel.com> platform/chrome: chromeos_privacy_screen: Check ACPI_COMPANION() Kuldeep Singh <kuldeep.singh(a)oss.qualcomm.com> arm64: dts: qcom: sm8450: Fix ICE reg size Kuldeep Singh <kuldeep.singh(a)oss.qualcomm.com> arm64: dts: qcom: kodiak: Fix ICE reg size Krzysztof Kozlowski <krzysztof.kozlowski(a)oss.qualcomm.com> arm64: dts: qcom: sm8750: Fix DSI1 phy reference clock rate Cristian Marussi <cristian.marussi(a)arm.com> clk: scmi: Fix clock rate rounding Hsiu Che Yu <yu.whisper.personal(a)gmail.com> rust: alloc: fix `Vec::extend_with` SAFETY comment Christian Brauner <brauner(a)kernel.org> rhashtable: give each instance its own lockdep class Abel Vesa <abel.vesa(a)oss.qualcomm.com> arm64: dts: qcom: glymur: Mark USB SS1 and SS2 as role-switch capable Abel Vesa <abel.vesa(a)oss.qualcomm.com> arm64: dts: qcom: glymur-crd: Drop forced host mode for USB SS0 and SS1 Yang Wang <kevinyang.wang(a)amd.com> drm/amdgpu: fix error return code in mes_v12_1_map_test_bo Breno Leitao <leitao(a)debian.org> workqueue: forbid TEST_WORKQUEUE from being built-in Chen-Yu Tsai <wenst(a)chromium.org> arm64: dts: mediatek: mt8192-asurada: Move PCIe DMA bounce buffer to host Frank Wunderlich <frank-w(a)public-files.de> arm64: dts: mediatek: mt7988a-bpi-r4pro: rework pcie gpio-hog handling Stefan Metzmacher <metze(a)samba.org> sockptr: fix usize check in copy_struct_from_sockptr() for user pointers Stefan Metzmacher <metze(a)samba.org> uaccess: fix ignored_trailing logic in copy_struct_to_user() Matt Bobrowski <mattbobrowski(a)google.com> bpf: fix crash in bpf_[set|remove]_dentry_xattr for negative dentries Luca Leonardo Scorcia <l.scorcia(a)gmail.com> soc: mediatek: mtk-mmsys: Restore MT8167 routing masks lost during merge Sean Christopherson <seanjc(a)google.com> iommu/amd: Fix a stale comment about which legacy mode is user visible Dmitry Baryshkov <dmitry.baryshkov(a)oss.qualcomm.com> media: venus: scale MMCX power domain on SM8250 Dmitry Baryshkov <dmitry.baryshkov(a)oss.qualcomm.com> media: iris: scale MMCX power domain on SM8250 Shawn Guo <shengchao.guo(a)oss.qualcomm.com> arm64: dts: qcom: lemans: Move PCIe devices into soc node Nickolay Goppen <setotau(a)mainlining.org> arm64: dts: qcom: sdm630: set adsp compute-cbs' regs properly Nickolay Goppen <setotau(a)mainlining.org> arm64: dts: qcom: sdm660: set cdsp compute-cbs' regs properly Yixun Lan <dlan(a)kernel.org> dts: riscv: spacemit: correct 32k clock frequency Wenmeng Liu <wenmeng.liu(a)oss.qualcomm.com> media: qcom: camss: vfe: fix PIX subdev naming on VFE lite Leon Romanovsky <leon(a)kernel.org> ntb: Use consistent DMA attributes when freeing DMA mappings Leon Romanovsky <leon(a)kernel.org> ntb: Store original DMA address for future release Shuangpeng Bai <shuangpeng.kernel(a)gmail.com> nilfs2: fix backing_dev_info reference leak Alexander Aring <aahringo(a)redhat.com> dlm: fix add msg handle in send_queue ordered Lizhi Hou <lizhi.hou(a)amd.com> accel/amdxdna: Fix clflush buffer size Krzysztof Kozlowski <krzysztof.kozlowski(a)oss.qualcomm.com> ARM: multi_v7_defconfig: Correct QCOM_RPMH and QCOM_RPMHPD Weiming Shi <bestswngs(a)gmail.com> crypto: asymmetric_keys - fix OOB read in pefile_digest_pe_contents Thorsten Blum <thorsten.blum(a)linux.dev> crypto: ecrdsa - fix unknown OID check in ecrdsa_param_curve Lothar Rubusch <l.rubusch(a)gmail.com> crypto: atmel-sha204a - fix blocking and non-blocking rng logic Tycho Andersen (AMD) <tycho(a)kernel.org> crypto: ccp - Initialize data during __sev_snp_init_locked() Tycho Andersen (AMD) <tycho(a)kernel.org> crypto: ccp - Check for page allocation failure correctly in TIO Tycho Andersen (AMD) <tycho(a)kernel.org> crypto: ccp - Fix snp_filter_reserved_mem_regions() off-by-one Tycho Andersen (AMD) <tycho(a)kernel.org> crypto: ccp - Reverse the cleanup order in psp_dev_destroy() Di Shen <di.shen(a)unisoc.com> OPP: Fix race between OPP addition and lookup Zhan Xusheng <zhanxusheng1024(a)gmail.com> alarmtimer: Remove stale return description from alarm_handle_timer() Chris Brandt <chris.brandt(a)renesas.com> drm: renesas: rz-du: mipi_dsi: Fix return path on error Kuniyuki Iwashima <kuniyu(a)google.com> vxlan: Fix potential null-ptr-deref in vxlan_gro_prepare_receive(). Peng Fan <peng.fan(a)nxp.com> Revert "arm64: dts: imx8mp-kontron: Add support for reading SD_VSEL signal" Peng Fan <peng.fan(a)nxp.com> Revert "arm64: dts: imx8mm-kontron: Add support for reading SD_VSEL signal" Krzysztof Kozlowski <krzysztof.kozlowski(a)oss.qualcomm.com> arm64: dts: imx8mp-ab2: Correct interrupt flags Krzysztof Kozlowski <krzysztof.kozlowski(a)oss.qualcomm.com> arm64: dts: imx8mn-vhip4-evalboard-v2: Correct interrupt flags Krzysztof Kozlowski <krzysztof.kozlowski(a)oss.qualcomm.com> arm64: dts: imx8mn-vhip4-evalboard-v1: Correct interrupt flags Peng Fan <peng.fan(a)nxp.com> arm64: dts: imx8x-colibri: Correct SODIMM PAD settings Weixin Guo <2298701336(a)qq.com> arm64: dts: rockchip: fix rk809 interrupt pin on rk3566-roc-pc Brian Norris <briannorris(a)chromium.org> arm64: dts: rockchip: Add #{address,size}-cells to Chromium-based /firmware Brian Norris <briannorris(a)chromium.org> ARM: dts: rockchip: Add #{address,size}-cells to Chromium-based /firmware Duje Mihanović <duje(a)dujemihanovic.xyz> arm64: dts: marvell: samsung-coreprimevelte: Increase touchscreen voltage Conor Dooley <conor.dooley(a)microchip.com> riscv: dts: microchip: fix pic64gx gpio interrupt-cells Conor Dooley <conor.dooley(a)microchip.com> riscv: dts: microchip: update pic64gx gpio interrupts to better match the SoC David Heidelberg <david(a)ixit.cz> drm/panel: Clean up S6E3HA2 config dependencies and fill help text David Heidelberg <david(a)ixit.cz> drm/panel: Clean up S6E3FC2X01 config dependencies Marijn Suijten <marijn.suijten(a)somainline.org> drm/panel: Clean up SOFEF00 config dependencies Peddolla Harshavardhan Reddy <peddolla.reddy(a)oss.qualcomm.com> wifi: cfg80211: restrict LMR feedback check to TB and non-TB ranging Alice Ryhl <aliceryhl(a)google.com> drm/gpuvm: take refcount on DRM device Marek Vasut <marex(a)nabladev.com> dt-bindings: vendor-prefixes: Add Displaytech Ltd. Conor Dooley <conor.dooley(a)microchip.com> riscv: dts: microchip: remove gpio hogs from beaglev-fire Conor Dooley <conor.dooley(a)microchip.com> riscv: dts: microchip: gpio controllers on mpfs need 2 interrupt cells Felix Gu <ustc.gu(a)gmail.com> pinctrl: sunxi: fix regulator leak in sunxi_pmx_request() error path Conor Dooley <conor.dooley(a)microchip.com> dts: spacemit: set console baud rate on bpif3 Masami Hiramatsu (Google) <mhiramat(a)kernel.org> lib/vsprintf: Fix to check field_width and precision Damian Muszynski <damian.muszynski(a)intel.com> crypto: qat - fix heartbeat error injection Josh Poimboeuf <jpoimboe(a)kernel.org> klp-build: Fix patch cleanup on interrupt Josh Poimboeuf <jpoimboe(a)kernel.org> klp-build: Fix checksum comparison for changed offsets Josh Poimboeuf <jpoimboe(a)kernel.org> klp-build: Fix hang on out-of-date .config Josh Poimboeuf <jpoimboe(a)kernel.org> objtool: Fix reloc hash collision in find_reloc_by_dest_range() Josh Poimboeuf <jpoimboe(a)kernel.org> objtool: Replace iterator callback with for_each_sym_by_mangled_name() Josh Poimboeuf <jpoimboe(a)kernel.org> objtool/klp: Fix relocation conversion failures for R_X86_64_NONE Josh Poimboeuf <jpoimboe(a)kernel.org> objtool/klp: Fix extraction of text annotations for alternatives Josh Poimboeuf <jpoimboe(a)kernel.org> objtool/klp: Fix cloning of zero-length section symbols Josh Poimboeuf <jpoimboe(a)kernel.org> objtool/klp: Fix handling of zero-length .altinstr_replacement sections Joe Lawrence <joe.lawrence(a)redhat.com> objtool/klp: Fix create_fake_symbols() skipping entsize-based sections Josh Poimboeuf <jpoimboe(a)kernel.org> objtool/klp: Fix .data..once static local non-correlation Joe Lawrence <joe.lawrence(a)redhat.com> objtool/klp: Fix is_uncorrelated_static_local() for Clang Ashish Mhetre <amhetre(a)nvidia.com> memory: tegra: Wire up system sleep PM ops Icenowy Zheng <zhengxingda(a)iscas.ac.cn> drm: verisilicon: call atomic helper's plane state check even if no CRTC Nas Chung <nas.chung(a)chipsnmedia.com> media: v4l2-common: Add YUV24 format info Samuel Holland <samuel(a)sholland.org> media: cedrus: Fix failure to clean up hardware on probe failure Felix Gu <ustc.gu(a)gmail.com> watchdog: sprd_wdt: Remove redundant sprd_wdt_disable() on register failure Balakrishnan Sambath <balakrishnan.s(a)microchip.com> watchdog: sama5d4_wdt: Fix WDDIS detection on SAM9X60 and SAMA7G5 Yingjie Gao <gaoyingjie(a)uniontech.com> watchdog: sp5100_tco: Use EFCH MMIO for newer Hygon FCH Gabriele Monaco <gmonaco(a)redhat.com> Documentation/rv: Replace stale website link Aleksandr Loktionov <aleksandr.loktionov(a)intel.com> ixgbe: fix unaligned u32 access in ixgbe_update_flash_X550() Jihed Chaibi <jihed.chaibi.dev(a)gmail.com> ARM: dts: am335x-sl50: Fix audio bitclock and frame master endpoint Wei Zhang <wei.zhang(a)oss.qualcomm.com> wifi: ath11k: cancel SSR work items during PCI shutdown Tristan Madani <tristan(a)talencesecurity.com> wifi: ath9k: fix OOB access from firmware tx status queue ID Chen-Yu Tsai <wenst(a)chromium.org> pinctrl: mediatek: eint: Drop base from mtk_eint_chip_write_mask() Prasanna Kumar T S M <ptsm(a)linux.microsoft.com> soc: xilinx: Shutdown and free rx mailbox channel Prasanna Kumar T S M <ptsm(a)linux.microsoft.com> soc: xilinx: Fix race condition in event registration Xingjing Deng <micro6947(a)gmail.com> kconfig: fix potential NULL pointer dereference in conf_askvalue Tristan Madani <tristan(a)talencesecurity.com> wifi: rtw89: add bounds check on firmware mac_id in link lookup Tristan Madani <tristan(a)talencesecurity.com> wifi: rtw88: fix OOB read from firmware RX descriptor exceeding DMA buffer Shin-Yi Lin <isaiah(a)realtek.com> wifi: rtw89: Correct data type for scan index to avoid infinite loop Chin-Yen Lee <timlee(a)realtek.com> wifi: rtw88: fix wrong pci_get_drvdata type in AER handlers Christos Longros <chris.longros(a)gmail.com> wifi: rtw89: fix wrong pci_get_drvdata type in AER handlers Timur Tabi <ttabi(a)nvidia.com> gpu: nova-core: use correct fwsignature for GA100 Danilo Krummrich <dakr(a)kernel.org> driver core: use READ_ONCE() for dev->driver in dev_has_sync_state() Srinivasan Shanmugam <srinivasan.shanmugam(a)amd.com> drm/amdkfd: Validate CRIU-restored IDs before idr_alloc Felix Gu <ustc.gu(a)gmail.com> pinctrl: pinconf-generic: fix properties bitmap leak in parse_fw_cfg() Krzysztof Kozlowski <krzysztof.kozlowski(a)oss.qualcomm.com> dt-bindings: pinctrl: nvidia,tegra234: Add missing required block Jon Hunter <jonathanh(a)nvidia.com> arm64: tegra: Fix Tegra234 MGBE PTP clock Louis Kotze <loukot(a)gmail.com> wifi: cfg80211: fix grammar in MLO group key error message Edward Adam Davis <eadavis(a)qq.com> hfsplus: Add a sanity check for btree node size Edward Adam Davis <eadavis(a)qq.com> hfsplus: Remove the duplicate attr inode dirty marking action David Heidelberg <david(a)ixit.cz> arm64: dts: qcom: sdm845-shift-axolotl: Correct touchscreen sleep state Kamal Wadhwa <kamal.wadhwa(a)oss.qualcomm.com> arm64: dts: qcom: fix temp-alarm probe failure for PMH0104 on Glymur Krzysztof Kozlowski <krzysztof.kozlowski(a)oss.qualcomm.com> arm64: dts: qcom: sdm845-mezzanine: Fix camss ports unit_address_vs_reg warning Krzysztof Kozlowski <krzysztof.kozlowski(a)oss.qualcomm.com> arm64: dts: qcom: sc8180x: Fix phy simple_bus_reg warning Krzysztof Kozlowski <krzysztof.kozlowski(a)oss.qualcomm.com> arm64: dts: qcom: ipq5424: Fix USB simple_bus_reg warnings Krzysztof Kozlowski <krzysztof.kozlowski(a)oss.qualcomm.com> arm64: dts: qcom: glymur: Fix cache and SRAM simple_bus_reg warnings Krzysztof Kozlowski <krzysztof.kozlowski(a)oss.qualcomm.com> arm64: dts: qcom: glymur: Fix USB simple_bus_reg warning David Heidelberg <david(a)ixit.cz> arm64: dts: qcom: sdm845-oneplus: Drop address from framebuffer node Alexander Koskovich <akoskovich(a)pm.me> arm64: dts: qcom: milos: Reduce rmtfs_mem size to 2.5MiB Sean Christopherson <seanjc(a)google.com> x86/bug: Add printf() validation to HAVE_ARCH_BUG_FORMAT_ARGS WARNs Konrad Dybcio <konrad.dybcio(a)oss.qualcomm.com> dt-bindings: net: bluetooth: qualcomm: Fix WCN6855 regulator names Kamlesh Kumar <kamlesh0hrs(a)gmail.com> ima: Fix sigv3 signature handling for EVM_IMA_XATTR_DIGSIG Diederik de Haas <diederik(a)cknow-tech.com> arm64: dts: rockchip: Fix gmac0 reset pin for NanoPi R5S Quentin Schulz <quentin.schulz(a)cherry.de> arm64: dts: rockchip: fix Ethernet PHY not found on PX30 Cobra Cristian Ciocaltea <cristian.ciocaltea(a)collabora.com> arm64: dts: rockchip: Update vdec register blocks order on RK3588 Cristian Ciocaltea <cristian.ciocaltea(a)collabora.com> arm64: dts: rockchip: Fix vdec register blocks order on RK3576 Baolin Liu <liubaolin(a)kylinos.cn> Documentation: proc: fix section numbering in table of contents Gregory Bell <grbell(a)redhat.com> selftests/bpf: Use local type for bpf_fou_encap in test_tunnel_kern Gregory Bell <grbell(a)redhat.com> selftests/bpf: Use local type for flow_offload_tuple_rhash in xdp_flowtable Felix Gu <ustc.gu(a)gmail.com> spi: atcspi200: fix use-after-free when driver unbind Yang Wang <kevinyang.wang(a)amd.com> drm/amd/pm: remove trailing semicolon from AMDGPU_PM_POLICY_ATTR macro Antoine Tenart <atenart(a)kernel.org> libbpf: Fix deduplication of typedef with base definitions Aaradhana Sahu <aaradhana.sahu(a)oss.qualcomm.com> wifi: ath12k: Fix invalid IRQ requests during AHB probe Nick Hu <nick.hu(a)sifive.com> dt-bindings: timer: Remove sifive,fine-ctr-bits property Matt Bobrowski <mattbobrowski(a)google.com> selftests/bpf: Fix off-by-one in bpf_cpumask_populate related selftest Aaron Tomlin <atomlin(a)atomlin.com> libbpf: Report error when a negative kprobe offset is specified Yuho Choi <dbgh9129(a)gmail.com> drm/radeon: fix memory leak in radeon_ring_restore() on lock failure Werner Kasselman <werner(a)verivus.ai> drm/radeon: fix integer overflow in radeon_align_pitch() Alex Sierra <alex.sierra(a)amd.com> drm/amdkfd: fix redundant MQD iterations in GFX v12.1 Werner Kasselman <werner(a)verivus.ai> drm/amdgpu: fix integer overflow in amdgpu_gem_align_pitch() Max Zhen <max.zhen(a)amd.com> accel/amdxdna: Guard management mailbox channel cleanup against NULL pointer Jonathan Cavitt <jonathan.cavitt(a)intel.com> drm/gpuvm: Do not prepare NULL objects Felix Gu <ustc.gu(a)gmail.com> accel/amdxdna: Fix memory leak in amdxdna_iommu_alloc() Max Zhen <max.zhen(a)amd.com> accel/amdxdna: Fix fatal_error_info layout in firmware interface Tvrtko Ursulin <tvrtko.ursulin(a)igalia.com> dma-fence: Fix potential tracepoint null pointer dereferences Lizhi Hou <lizhi.hou(a)amd.com> accel/amdxdna: Fix order of canceled mailbox messages Lizhi Hou <lizhi.hou(a)amd.com> accel/amdxdna: Fix iommu_map_sgtable() return value handling Max Zhen <max.zhen(a)amd.com> accel/amdxdna: Handle DETACH_DEBUG_BO through config_debug_bo path Lizhi Hou <lizhi.hou(a)amd.com> accel/amdxdna: Adjust size for copy_to_user() Lizhi Hou <lizhi.hou(a)amd.com> accel/amdxdna: Create shared functions for AIE2 and AIE4 Matthew Brost <matthew.brost(a)intel.com> drm/gpusvm: Reject VMAs with VM_IO or VM_PFNMAP when creating SVM ranges Tomi Valkeinen <tomi.valkeinen(a)ideasonboard.com> drm/tidss: Drop extra drm_mode_config_reset() call Thomas Zimmermann <tzimmermann(a)suse.de> drm/rockchip: Test for imported buffers with drm_gem_is_imported() Cristian Ciocaltea <cristian.ciocaltea(a)collabora.com> drm/rockchip: dw_dp: Fix null-ptr-deref in dw_dp_remove() Cristian Ciocaltea <cristian.ciocaltea(a)collabora.com> drm/rockchip: dw_dp: Switch to drmm_kzalloc() Cristian Ciocaltea <cristian.ciocaltea(a)collabora.com> drm/rockchip: inno-hdmi: Switch to drmm_kzalloc() Max Zhen <max.zhen(a)amd.com> accel/amdxdna: Fix leak when pinning ubuf pages Chen Ni <nichen(a)iscas.ac.cn> clocksource/drivers/sun5i: Handle error returns from devm_reset_control_get_optional_exclusive() Stafford Horne <shorne(a)gmail.com> openrisc: mm: Fix section mismatch between map_page and __set_fixmap Felix Gu <ustc.gu(a)gmail.com> soc: fsl: qe_ports_ic: Add missing cleanup on device removal Jiacheng Yu <yujiacheng3(a)huawei.com> fbcon: Use correct type for vc_resize() return value Ian Bridges <icb(a)fastmail.org> fbcon: fix NULL pointer dereference for a console without vc_data David Howells <dhowells(a)redhat.com> afs: Fix uncancelled rxrpc OOB message handler David Howells <dhowells(a)redhat.com> afs: Fix further netns teardown to cancel the preallocation charger Nan Li <tonanli66(a)gmail.com> afs: handle CB.InitCallBackState3 requests without a server record Matvey Kovalev <matvey.kovalev(a)ispras.ru> afs: fix NULL pointer dereference in afs_get_tree() David Howells <dhowells(a)redhat.com> afs: Fix netns teardown to cancel the preallocation charger David Howells <dhowells(a)redhat.com> rxrpc: Fix double unlock in rxrpc_recvmsg() David Howells <dhowells(a)redhat.com> rxrpc: Fix leak of connection from OOB challenge David Howells <dhowells(a)redhat.com> rxrpc: Fix the reception of a reply packet before data transmission Wyatt Feng <bronzed_45_vested(a)icloud.com> rxrpc: Fix ACKALL packet handling David Howells <dhowells(a)redhat.com> rxrpc: Fix oob challenge leak in cleanup after notification failure David Howells <dhowells(a)redhat.com> rxrpc: Fix rxrpc_rotate_tx_rotate() to check there's something to rotate David Howells <dhowells(a)redhat.com> rxrpc: Fix potential infinite loop in rxrpc_recvmsg() David Howells <dhowells(a)redhat.com> rxrpc: Fix leak of released call in recvmsg(MSG_PEEK) David Howells <dhowells(a)redhat.com> rxrpc: Fix socket notification race David Howells <dhowells(a)redhat.com> rxrpc: Fix UAF in rxgk_issue_challenge() Hyunwoo Kim <imv4bel(a)gmail.com> rxrpc: Don't move a peeked OOB message onto the pending queue Jeffrey Altman <jaltman(a)auristor.com> rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc Li Daming <d4n.for.sec(a)gmail.com> rxrpc: serialize kernel accept preallocation with socket teardown Matthias Feser <mfe(a)KBSgmbhfr.onmicrosoft.com> serial: 8250_omap: clear rx_running on zero-length DMA completes Tapio Reijonen <tapio.reijonen(a)vaisala.com> serial: max310x: implement gpio_chip::get_direction() Stephan Gerhold <stephan.gerhold(a)linaro.org> serial: msm: Disable DMA for kernel console UART Guoniu Zhou <guoniu.zhou(a)oss.nxp.com> dt-bindings: power: imx93: Add MIPI PHY power domain Chen-Yu Tsai <wens(a)kernel.org> dt-bindings: media: sun4i-a10-video-engine: Add interconnect properties Ricardo Ribalda <ribalda(a)chromium.org> media: uvcvideo: Fix sequence number when no EOF Ricardo Ribalda <ribalda(a)chromium.org> media: uvcvideo: Relax the constrains for interpolating the hw clock Ricardo Ribalda <ribalda(a)chromium.org> media: uvcvideo: Do not add clock samples with small sof delta Ricardo Ribalda <ribalda(a)chromium.org> media: uvcvideo: Fix dev_sof filtering in hw timestamp Ricardo Ribalda <ribalda(a)chromium.org> media: uvcvideo: Fix buffer sequence in frame gaps Ricardo Ribalda <ribalda(a)chromium.org> media: uvcvideo: Avoid partial metadata buffers Ricardo Ribalda <ribalda(a)chromium.org> media: uvcvideo: Use hw timestaming if the clock buffer is full Damien Laine <damien.laine(a)gmail.com> ALSA: hda/realtek: Fix speakers on Legion Pro 7 16ARX8H with codec SSID 17aa:38a7 Xu Rao <raoxu(a)uniontech.com> ALSA: hda: Fix cached processing coefficient verbs Zhang Heng <zhangheng(a)kylinos.cn> ALSA: hda: conexant: Remove mic bias threshold override Eckhart Mohr <e.mohr(a)tuxedocomputers.com> ALSA: hda/realtek: Add quirk for TongFang X6xx45xU Sean Anderson <sean.anderson(a)linux.dev> media: uvcvideo: Fix deadlock if uvc_status_stop is called from async_ctrl.work Eric Biggers <ebiggers(a)kernel.org> crypto: sun4i-ss - Remove insecure and unused rng_alg Michael Bommarito <michael.bommarito(a)gmail.com> iommu/vt-d: Clear Present bit before tearing down scalable-mode context entry Muhammet Kaan KILINÇ <muhammetkaankilinc(a)gmail.com> crypto: algif_skcipher - force synchronous processing ------------- Diffstat: .../testing/sysfs-class-reboot-mode-reboot_modes | 13 +- Documentation/admin-guide/pm/cpufreq.rst | 6 +- Documentation/arch/arm64/cpu-hotplug.rst | 28 +- .../bindings/clock/qcom,dispcc-sm6125.yaml | 17 +- .../bindings/clock/qcom,x1e80100-camcc.yaml | 1 + .../bindings/dma/nvidia,tegra186-gpc-dma.yaml | 23 +- .../devicetree/bindings/dma/snps,dw-axi-dmac.yaml | 5 +- .../media/allwinner,sun4i-a10-video-engine.yaml | 10 + .../bindings/net/bluetooth/qcom,wcn6855-bt.yaml | 7 +- .../devicetree/bindings/net/renesas,ether.yaml | 3 +- .../bindings/phy/qcom,sc8280xp-qmp-pcie-phy.yaml | 13 +- .../pinctrl/nvidia,tegra234-pinmux-aon.yaml | 4 + .../bindings/pinctrl/nvidia,tegra234-pinmux.yaml | 4 + .../bindings/pinctrl/realtek,rtd1625-pinctrl.yaml | 2 +- .../bindings/regulator/mt6359-regulator.yaml | 43 -- .../devicetree/bindings/timer/sifive,clint.yaml | 16 - .../devicetree/bindings/vendor-prefixes.yaml | 4 + Documentation/driver-api/nvdimm/btt.rst | 5 +- Documentation/driver-api/uio-howto.rst | 4 +- Documentation/filesystems/proc.rst | 14 +- Documentation/mm/memfd_preservation.rst | 2 +- Documentation/netlink/specs/handshake.yaml | 1 + Documentation/netlink/specs/rt-link.yaml | 6 + Documentation/networking/bonding.rst | 23 + Documentation/process/changes.rst | 7 +- Documentation/process/threat-model.rst | 2 +- Documentation/trace/eprobetrace.rst | 4 + Documentation/trace/rv/monitor_sched.rst | 7 +- Makefile | 4 +- arch/alpha/kernel/pci-sysfs.c | 13 +- arch/arc/include/asm/uaccess.h | 3 +- arch/arm/boot/compressed/Makefile | 2 +- arch/arm/boot/dts/broadcom/bcm2711-rpi-4-b.dts | 2 +- arch/arm/boot/dts/broadcom/bcm2711-rpi-cm4-io.dts | 2 +- arch/arm/boot/dts/nvidia/tegra124-nyan.dtsi | 5 + arch/arm/boot/dts/nvidia/tegra124-venice2.dts | 5 + arch/arm/boot/dts/nxp/imx/imx6ul-var-som.dtsi | 4 - arch/arm/boot/dts/rockchip/rk3288-veyron.dtsi | 5 + arch/arm/boot/dts/st/stm32mp151c-mecio1r0.dts | 128 ++++ arch/arm/boot/dts/st/stm32mp153c-mecio1r1.dts | 144 +++++ arch/arm/boot/dts/st/stm32mp15x-mecio1-io.dtsi | 146 +---- arch/arm/boot/dts/ti/omap/am335x-sl50.dts | 4 +- arch/arm/configs/axm55xx_defconfig | 1 - arch/arm/configs/dove_defconfig | 1 - arch/arm/configs/ep93xx_defconfig | 1 - arch/arm/configs/mmp2_defconfig | 1 - arch/arm/configs/multi_v7_defconfig | 4 +- arch/arm/configs/mv78xx0_defconfig | 1 - arch/arm/configs/sunxi_defconfig | 1 - arch/arm/include/asm/uaccess.h | 3 +- arch/arm/mach-imx/Kconfig | 21 - arch/arm/mach-imx/cpu-imx31.c | 9 +- arch/arm/mach-imx/mm-imx3.c | 2 + arch/arm64/boot/dts/allwinner/sun55i-a523.dtsi | 3 +- .../fsl-ls1028a-tqmls1028a-mbls1028a.dtsi | 4 +- .../boot/dts/freescale/fsl-lx2162a-clearfog.dts | 2 +- arch/arm64/boot/dts/freescale/imx8dxl-evk.dts | 2 - .../arm64/boot/dts/freescale/imx8mm-kontron-bl.dts | 10 +- .../boot/dts/freescale/imx8mm-kontron-osm-s.dtsi | 7 +- .../dts/freescale/imx8mn-vhip4-evalboard-v1.dts | 2 +- .../dts/freescale/imx8mn-vhip4-evalboard-v2.dts | 2 +- arch/arm64/boot/dts/freescale/imx8mp-ab2.dts | 2 +- .../boot/dts/freescale/imx8mp-kontron-bl-osm-s.dts | 14 +- .../boot/dts/freescale/imx8mp-kontron-osm-s.dtsi | 7 +- .../dts/freescale/imx8mp-tqma8mpql-mba8mpxl.dts | 3 + arch/arm64/boot/dts/freescale/imx8qxp-mek.dts | 1 - arch/arm64/boot/dts/freescale/imx8ulp-evk.dts | 4 +- arch/arm64/boot/dts/freescale/imx8x-colibri.dtsi | 4 +- arch/arm64/boot/dts/freescale/imx94.dtsi | 2 +- arch/arm64/boot/dts/freescale/imx95-19x19-evk.dts | 2 +- .../arm64/boot/dts/freescale/imx95-verdin-ivy.dtsi | 1 - arch/arm64/boot/dts/freescale/imx95.dtsi | 10 +- arch/arm64/boot/dts/freescale/s32g3.dtsi | 2 +- .../marvell/mmp/pxa1908-samsung-coreprimevelte.dts | 2 +- arch/arm64/boot/dts/mediatek/Makefile | 8 + .../mediatek/mt7988a-bananapi-bpi-r4-pro-cn13.dtso | 20 + .../mediatek/mt7988a-bananapi-bpi-r4-pro-cn14.dtso | 20 + .../dts/mediatek/mt7988a-bananapi-bpi-r4-pro.dtsi | 2 - arch/arm64/boot/dts/mediatek/mt8192-asurada.dtsi | 2 +- arch/arm64/boot/dts/nvidia/tegra132-norrin.dts | 5 + arch/arm64/boot/dts/nvidia/tegra210-smaug.dts | 5 + arch/arm64/boot/dts/nvidia/tegra234.dtsi | 8 +- arch/arm64/boot/dts/nvidia/tegra264.dtsi | 88 +-- arch/arm64/boot/dts/qcom/eliza-mtp.dts | 4 +- arch/arm64/boot/dts/qcom/eliza.dtsi | 6 +- arch/arm64/boot/dts/qcom/glymur-crd.dts | 4 - arch/arm64/boot/dts/qcom/glymur.dtsi | 12 +- arch/arm64/boot/dts/qcom/hamoa.dtsi | 77 +-- arch/arm64/boot/dts/qcom/ipq5424.dtsi | 4 +- arch/arm64/boot/dts/qcom/kaanapali.dtsi | 6 +- arch/arm64/boot/dts/qcom/kodiak.dtsi | 8 +- arch/arm64/boot/dts/qcom/lemans.dtsi | 710 +++++++++++---------- arch/arm64/boot/dts/qcom/milos-fairphone-fp6.dts | 5 + arch/arm64/boot/dts/qcom/milos.dtsi | 2 +- arch/arm64/boot/dts/qcom/monaco.dtsi | 6 +- arch/arm64/boot/dts/qcom/pmh0104-glymur.dtsi | 2 +- arch/arm64/boot/dts/qcom/sc7180.dtsi | 6 +- arch/arm64/boot/dts/qcom/sc8180x.dtsi | 2 +- arch/arm64/boot/dts/qcom/sdm630.dtsi | 37 +- arch/arm64/boot/dts/qcom/sdm660.dtsi | 36 +- .../qcom/sdm845-db845c-navigation-mezzanine.dtso | 5 + .../arm64/boot/dts/qcom/sdm845-oneplus-common.dtsi | 2 +- arch/arm64/boot/dts/qcom/sdm845-shift-axolotl.dts | 2 +- .../dts/qcom/sdm845-xiaomi-beryllium-common.dtsi | 2 +- arch/arm64/boot/dts/qcom/sm8450.dtsi | 8 +- arch/arm64/boot/dts/qcom/sm8550.dtsi | 6 +- arch/arm64/boot/dts/qcom/sm8650.dtsi | 6 +- arch/arm64/boot/dts/qcom/sm8750.dtsi | 8 +- arch/arm64/boot/dts/renesas/r8a78000-ironhide.dts | 76 ++- arch/arm64/boot/dts/renesas/r8a78000.dtsi | 36 +- arch/arm64/boot/dts/rockchip/px30-cobra.dtsi | 2 +- arch/arm64/boot/dts/rockchip/px30-ringneck.dtsi | 2 +- arch/arm64/boot/dts/rockchip/rk3399-gru.dtsi | 5 + arch/arm64/boot/dts/rockchip/rk3566-roc-pc.dts | 2 +- arch/arm64/boot/dts/rockchip/rk3568-nanopi-r5s.dts | 6 +- arch/arm64/boot/dts/rockchip/rk3576.dtsi | 6 +- arch/arm64/boot/dts/rockchip/rk3588-base.dtsi | 12 +- arch/arm64/boot/dts/st/stm32mp251.dtsi | 8 +- arch/arm64/boot/dts/ti/k3-am62a7-sk.dts | 2 + arch/arm64/include/asm/kvm_nested.h | 8 + arch/arm64/include/asm/tlbbatch.h | 10 +- arch/arm64/include/asm/tlbflush.h | 49 +- arch/arm64/include/asm/uaccess.h | 3 +- arch/arm64/kernel/acpi.c | 2 + arch/arm64/kernel/entry-fpsimd.S | 8 +- arch/arm64/kernel/fpsimd.c | 10 +- arch/arm64/kernel/hw_breakpoint.c | 9 + arch/arm64/kernel/process.c | 35 - arch/arm64/kernel/smp.c | 28 +- arch/arm64/kernel/static_call.c | 1 + arch/arm64/kvm/at.c | 8 - arch/arm64/kvm/emulate-nested.c | 1 + arch/arm64/kvm/hyp/include/hyp/switch.h | 11 +- arch/arm64/kvm/hyp/pgtable.c | 3 +- arch/arm64/kvm/nested.c | 166 ++--- arch/arm64/kvm/pkvm.c | 2 +- arch/arm64/kvm/vgic/vgic-its.c | 2 + arch/arm64/kvm/vgic/vgic.c | 20 +- arch/arm64/mm/mmu.c | 11 +- arch/arm64/tools/sysreg | 2 +- arch/hexagon/include/asm/uaccess.h | 3 +- arch/loongarch/include/asm/kexec.h | 3 +- arch/loongarch/include/asm/pgtable.h | 4 + arch/loongarch/include/asm/uaccess.h | 3 +- arch/loongarch/kvm/exit.c | 1 - arch/loongarch/kvm/irqfd.c | 3 +- arch/loongarch/kvm/vcpu.c | 11 +- arch/loongarch/mm/pageattr.c | 2 +- arch/loongarch/net/bpf_jit.c | 28 +- arch/m68k/coldfire/m5441x.c | 18 +- arch/m68k/include/asm/uaccess.h | 3 +- arch/microblaze/include/asm/uaccess.h | 3 +- arch/mips/dec/int-handler.S | 2 +- arch/mips/dec/platform.c | 6 +- arch/mips/dec/prom/init.c | 6 +- arch/mips/dec/setup.c | 6 - arch/mips/fw/lib/call_o32.S | 2 +- arch/mips/include/asm/dec/prom.h | 15 +- arch/mips/include/asm/uaccess.h | 3 +- arch/mips/kernel/mips-mt-fpaff.c | 28 +- arch/mips/mm/init.c | 17 +- arch/mips/n64/init.c | 2 +- arch/mips/ralink/mt7621.c | 2 +- arch/mips/sgi-ip22/ip22-gio.c | 7 +- arch/nios2/include/asm/uaccess.h | 3 +- arch/openrisc/include/asm/cacheflush.h | 4 + arch/openrisc/include/asm/uaccess.h | 3 +- arch/openrisc/kernel/jump_label.c | 2 +- arch/openrisc/kernel/patching.c | 3 + arch/openrisc/kernel/smp.c | 21 + arch/openrisc/mm/cache.c | 16 + arch/openrisc/mm/init.c | 2 +- arch/parisc/include/asm/uaccess.h | 3 +- arch/powerpc/include/asm/uaccess.h | 2 +- arch/powerpc/kernel/dt_cpu_ftrs.c | 9 + arch/powerpc/kexec/core_64.c | 4 +- arch/powerpc/perf/core-fsl-emb.c | 3 +- arch/powerpc/platforms/8xx/cpm1.c | 26 + arch/powerpc/platforms/cell/spufs/file.c | 6 +- arch/powerpc/platforms/powernv/setup.c | 3 +- arch/powerpc/platforms/pseries/Kconfig | 1 + .../platforms/pseries/papr_platform_attributes.c | 8 +- .../riscv/boot/dts/microchip/mpfs-beaglev-fire.dts | 25 +- arch/riscv/boot/dts/microchip/mpfs.dtsi | 6 +- .../boot/dts/microchip/pic64gx-curiosity-kit.dts | 47 +- arch/riscv/boot/dts/microchip/pic64gx.dtsi | 38 +- arch/riscv/boot/dts/sophgo/sg2042-cpus.dtsi | 236 +++---- arch/riscv/boot/dts/sophgo/sg2044-cpus.dtsi | 236 +++---- arch/riscv/boot/dts/spacemit/k1-bananapi-f3.dts | 2 +- arch/riscv/boot/dts/spacemit/k1-milkv-jupiter.dts | 4 +- arch/riscv/boot/dts/spacemit/k1.dtsi | 2 +- arch/riscv/boot/dts/spacemit/k3.dtsi | 3 +- arch/riscv/include/asm/cpu_ops.h | 2 +- arch/riscv/include/asm/vdso.h | 10 +- arch/riscv/kernel/alternative.c | 14 +- arch/riscv/kernel/asm-offsets.c | 4 +- arch/riscv/kernel/cacheinfo.c | 2 +- arch/riscv/kernel/cpu-hotplug.c | 4 +- arch/riscv/kernel/cpu_ops_sbi.c | 11 +- arch/riscv/kernel/entry.S | 8 +- arch/riscv/kernel/machine_kexec.c | 3 + arch/riscv/kernel/probes/rethook_trampoline.S | 3 + arch/riscv/kernel/stacktrace.c | 2 +- arch/riscv/kernel/vdso/Makefile | 6 +- arch/riscv/kernel/vdso/rt_sigreturn.S | 10 +- arch/s390/include/asm/pgtable.h | 4 +- arch/s390/include/asm/uaccess.h | 3 +- arch/s390/kernel/diag/diag310.c | 7 +- arch/s390/kernel/perf_cpum_cf.c | 3 + arch/s390/kernel/process.c | 2 +- arch/s390/kvm/dat.c | 2 +- arch/s390/kvm/gaccess.c | 73 ++- arch/s390/kvm/gmap.c | 7 +- arch/s390/kvm/gmap.h | 14 +- arch/s390/kvm/kvm-s390.c | 2 +- arch/s390/kvm/pci.c | 12 +- arch/s390/mm/gmap_helpers.c | 9 +- arch/s390/mm/mmap.c | 2 +- arch/sh/include/asm/uaccess.h | 3 +- arch/sparc/include/asm/page_32.h | 2 + arch/sparc/include/asm/uaccess_32.h | 3 +- arch/sparc/include/asm/uaccess_64.h | 3 +- arch/sparc/kernel/led.c | 2 +- arch/um/include/asm/uaccess.h | 3 +- arch/x86/Kconfig.cpu | 8 +- arch/x86/boot/compressed/acpi.c | 7 +- arch/x86/boot/early_serial_console.c | 11 +- arch/x86/events/amd/brs.c | 10 +- arch/x86/events/amd/core.c | 18 +- arch/x86/events/amd/lbr.c | 3 +- arch/x86/events/amd/uncore.c | 6 +- arch/x86/events/intel/uncore_discovery.c | 4 +- arch/x86/events/intel/uncore_snbep.c | 6 +- arch/x86/include/asm/bug.h | 2 + arch/x86/kernel/cpu/cpu.h | 1 - arch/x86/kernel/uprobes.c | 26 +- arch/x86/kvm/irq.c | 4 +- arch/x86/kvm/lapic.c | 8 +- arch/x86/kvm/svm/sev.c | 6 +- arch/x86/kvm/vmx/nested.c | 68 +- arch/x86/kvm/vmx/tdx.c | 6 +- arch/x86/platform/olpc/olpc-xo15-sci.c | 1 + arch/x86/video/video-common.c | 23 +- arch/x86/virt/svm/sev.c | 2 + arch/xtensa/include/asm/uaccess.h | 3 +- block/blk.h | 13 +- block/genhd.c | 4 - block/ioctl.c | 2 +- crypto/Kconfig | 4 +- crypto/af_alg.c | 2 + crypto/algif_skcipher.c | 75 +-- crypto/asymmetric_keys/verify_pefile.c | 2 + crypto/ecrdsa.c | 2 +- crypto/rng.c | 11 + drivers/accel/amdxdna/Makefile | 1 + drivers/accel/amdxdna/aie.c | 89 +++ drivers/accel/amdxdna/aie.h | 31 + drivers/accel/amdxdna/aie2_ctx.c | 26 +- drivers/accel/amdxdna/aie2_error.c | 17 +- drivers/accel/amdxdna/aie2_message.c | 164 ++--- drivers/accel/amdxdna/aie2_msg_priv.h | 2 +- drivers/accel/amdxdna/aie2_pci.c | 166 ++--- drivers/accel/amdxdna/aie2_pci.h | 26 +- drivers/accel/amdxdna/aie2_pm.c | 6 +- drivers/accel/amdxdna/aie2_smu.c | 22 +- drivers/accel/amdxdna/amdxdna_ctx.c | 40 +- drivers/accel/amdxdna/amdxdna_gem.c | 37 +- drivers/accel/amdxdna/amdxdna_gem.h | 1 - drivers/accel/amdxdna/amdxdna_iommu.c | 56 +- drivers/accel/amdxdna/amdxdna_mailbox.c | 10 +- drivers/accel/amdxdna/amdxdna_pci_drv.h | 8 + drivers/accel/amdxdna/amdxdna_ubuf.c | 12 +- drivers/accel/amdxdna/npu1_regs.c | 4 +- drivers/accel/amdxdna/npu4_regs.c | 4 +- drivers/accel/amdxdna/npu5_regs.c | 2 +- drivers/accel/amdxdna/npu6_regs.c | 2 +- drivers/accel/ivpu/ivpu_fw_log.c | 4 + drivers/accel/ivpu/ivpu_job.c | 10 +- drivers/acpi/acpi_ipmi.c | 4 +- drivers/acpi/acpi_pad.c | 6 +- drivers/acpi/acpi_tad.c | 2 +- drivers/acpi/acpica/acutils.h | 2 - drivers/acpi/acpica/utnonansi.c | 7 - drivers/acpi/button.c | 26 +- drivers/acpi/processor_idle.c | 13 +- drivers/acpi/resource.c | 6 +- drivers/acpi/riscv/cpuidle.c | 2 +- drivers/acpi/riscv/rimt.c | 7 +- drivers/amba/bus.c | 37 +- drivers/android/binder.c | 18 +- drivers/ata/libata-core.c | 44 +- drivers/ata/libata-scsi.c | 9 +- drivers/ata/libata.h | 9 + drivers/ata/pata_pxa.c | 1 + drivers/ata/sata_gemini.c | 2 +- drivers/base/core.c | 83 ++- drivers/base/dd.c | 7 +- drivers/base/firmware_loader/main.c | 71 ++- drivers/base/power/main.c | 6 +- drivers/base/property.c | 4 +- drivers/base/regmap/regcache.c | 2 +- drivers/base/regmap/regmap-i2c.c | 2 +- drivers/block/drbd/drbd_receiver.c | 5 + drivers/bluetooth/Kconfig | 2 +- drivers/bluetooth/bpa10x.c | 8 +- drivers/bluetooth/btintel.c | 10 +- drivers/bluetooth/btintel.h | 9 + drivers/bluetooth/btintel_pcie.c | 531 ++++++++++++--- drivers/bluetooth/btintel_pcie.h | 26 +- drivers/bluetooth/btmtk.c | 4 +- drivers/bluetooth/btrtl.c | 5 +- drivers/bluetooth/hci_qca.c | 11 +- drivers/bluetooth/hci_vhci.c | 10 + drivers/bus/imx-weim.c | 6 - drivers/bus/mhi/ep/main.c | 11 +- drivers/bus/mhi/host/pci_generic.c | 20 +- drivers/bus/sunxi-rsb.c | 3 + drivers/cdx/cdx.c | 40 +- drivers/char/hpet.c | 6 +- drivers/char/ipmi/ipmi_msghandler.c | 10 +- drivers/char/sonypi.c | 6 +- drivers/char/tlclk.c | 4 + drivers/char/tpm/eventlog/tpm1.c | 4 +- drivers/char/tpm/tpm-dev.c | 2 +- drivers/char/tpm/tpm2-cmd.c | 6 +- drivers/char/tpm/tpm2-sessions.c | 45 +- drivers/char/tpm/tpm_crb.c | 6 +- drivers/char/tpm/tpm_tis_core.c | 35 +- drivers/char/tpm/tpmrm-dev.c | 2 +- drivers/char/virtio_console.c | 52 +- drivers/clk/at91/pmc.c | 2 +- drivers/clk/at91/sam9x7.c | 18 +- drivers/clk/clk-scmi.c | 4 +- drivers/clk/clk-scpi.c | 2 +- drivers/clk/microchip/clk-mpfs-ccc.c | 15 +- drivers/clk/qcom/a53-pll.c | 2 +- drivers/clk/qcom/camcc-x1e80100.c | 64 ++ drivers/clk/qcom/ipq-cmn-pll.c | 11 +- drivers/clk/renesas/rzg2l-cpg.c | 6 +- drivers/clk/samsung/Kconfig | 2 +- drivers/clk/spacemit/ccu-k3.c | 20 +- drivers/clocksource/Kconfig | 31 + drivers/clocksource/timer-sun5i.c | 3 + drivers/cpufreq/cpufreq_conservative.c | 12 +- drivers/cpufreq/cpufreq_governor.c | 42 +- drivers/cpufreq/intel_pstate.c | 6 +- drivers/cpuidle/driver.c | 8 - drivers/crypto/Kconfig | 1 - drivers/crypto/allwinner/Kconfig | 8 - drivers/crypto/allwinner/sun4i-ss/Makefile | 1 - drivers/crypto/allwinner/sun4i-ss/sun4i-ss-core.c | 36 -- drivers/crypto/allwinner/sun4i-ss/sun4i-ss-prng.c | 69 -- drivers/crypto/allwinner/sun4i-ss/sun4i-ss.h | 20 - drivers/crypto/atmel-sha204a.c | 8 +- drivers/crypto/cavium/cpt/cptvf_reqmanager.c | 4 +- drivers/crypto/ccp/psp-dev.c | 12 +- drivers/crypto/ccp/sev-dev-tsm.c | 23 +- drivers/crypto/ccp/sev-dev.c | 26 +- drivers/crypto/hisilicon/qm.c | 4 +- drivers/crypto/inside-secure/eip93/eip93-main.c | 2 + drivers/crypto/inside-secure/eip93/eip93-regs.h | 2 +- drivers/crypto/inside-secure/safexcel.c | 2 +- .../crypto/intel/qat/qat_common/adf_common_drv.h | 1 - .../intel/qat/qat_common/adf_heartbeat_inject.c | 6 +- .../crypto/intel/qat/qat_common/adf_hw_arbiter.c | 25 - drivers/crypto/marvell/octeontx/otx_cptvf_reqmgr.c | 4 +- drivers/crypto/tegra/tegra-se-aes.c | 33 +- drivers/crypto/xilinx/xilinx-trng.c | 85 +-- drivers/cxl/core/core.h | 2 + drivers/cxl/core/features.c | 2 +- drivers/cxl/core/memdev.c | 4 +- drivers/cxl/core/pci.c | 26 +- drivers/cxl/core/port.c | 7 +- drivers/cxl/core/ras.c | 27 +- drivers/cxl/core/region.c | 125 ++-- drivers/cxl/core/trace.h | 24 +- drivers/cxl/cxl.h | 22 +- drivers/dax/kmem.c | 6 + drivers/dibs/dibs_loopback.c | 5 + drivers/dma-buf/dma-fence-unwrap.c | 3 + drivers/dma-buf/dma-fence.c | 9 +- drivers/dma/dma-axi-dmac.c | 68 +- drivers/dma/dmaengine.c | 3 +- drivers/dma/dw-edma/dw-edma-core.h | 2 +- drivers/dma/dw-edma/dw-edma-pcie.c | 3 + drivers/dma/dw-edma/dw-edma-v0-core.c | 6 + drivers/dma/imx-sdma.c | 4 +- drivers/dma/qcom/gpi.c | 1 + drivers/dma/sh/rz-dmac.c | 92 +-- drivers/dma/tegra186-gpc-dma.c | 7 + drivers/dpll/dpll_core.c | 20 +- drivers/edac/igen6_edac.c | 405 +++++++++--- drivers/edac/skx_common.c | 3 + drivers/firmware/arm_ffa/driver.c | 27 +- drivers/firmware/arm_scmi/power.c | 6 +- drivers/firmware/arm_scmi/sensors.c | 2 +- drivers/firmware/samsung/exynos-acpm.c | 23 + drivers/firmware/smccc/soc_id.c | 2 +- drivers/firmware/xilinx/zynqmp.c | 28 + drivers/fpga/dfl.c | 2 + drivers/fpga/microchip-spi.c | 3 + drivers/gpib/common/gpib_os.c | 4 +- drivers/gpio/gpio-davinci.c | 4 +- drivers/gpio/gpio-dwapb.c | 83 ++- drivers/gpio/gpio-f7188x.c | 6 +- drivers/gpio/gpio-htc-egpio.c | 6 +- drivers/gpio/gpio-mlxbf3.c | 3 +- drivers/gpio/gpio-mt7621.c | 283 ++++++-- drivers/gpio/gpio-mvebu.c | 6 +- drivers/gpio/gpio-palmas.c | 19 + drivers/gpio/gpio-shared-proxy.c | 136 ++-- drivers/gpio/gpio-tegra.c | 18 +- drivers/gpio/gpio-timberdale.c | 2 +- drivers/gpio/gpiolib-acpi-core.c | 19 +- drivers/gpio/gpiolib-shared.c | 9 +- drivers/gpio/gpiolib-shared.h | 31 +- drivers/gpio/gpiolib.c | 2 +- drivers/gpu/buddy.c | 67 +- drivers/gpu/drm/amd/amdgpu/amdgpu_amdkfd_gpuvm.c | 16 +- drivers/gpu/drm/amd/amdgpu/amdgpu_dev_coredump.c | 3 +- drivers/gpu/drm/amd/amdgpu/amdgpu_device.c | 2 + drivers/gpu/drm/amd/amdgpu/amdgpu_gem.c | 25 +- drivers/gpu/drm/amd/amdgpu/amdgpu_irq.c | 2 - drivers/gpu/drm/amd/amdgpu/amdgpu_mca.c | 3 + drivers/gpu/drm/amd/amdgpu/mes_v12_1.c | 2 +- drivers/gpu/drm/amd/amdkfd/kfd_chardev.c | 3 + .../gpu/drm/amd/amdkfd/kfd_device_queue_manager.c | 20 +- drivers/gpu/drm/amd/amdkfd/kfd_events.c | 5 + drivers/gpu/drm/amd/amdkfd/kfd_mqd_manager_v12_1.c | 6 +- drivers/gpu/drm/amd/amdkfd/kfd_process.c | 2 +- drivers/gpu/drm/amd/amdkfd/kfd_svm.c | 1 + drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm.c | 10 +- .../drm/amd/display/amdgpu_dm/amdgpu_dm_helpers.c | 13 +- drivers/gpu/drm/amd/display/dc/core/dc.c | 81 ++- drivers/gpu/drm/amd/display/dc/core/dc_stream.c | 2 + drivers/gpu/drm/amd/display/dc/dc.h | 58 +- drivers/gpu/drm/amd/display/dc/dc_types.h | 24 - .../drm/amd/display/dc/hubp/dcn401/dcn401_hubp.c | 229 +++---- .../drm/amd/display/dc/hubp/dcn401/dcn401_hubp.h | 23 +- .../gpu/drm/amd/display/dc/hubp/dcn42/dcn42_hubp.c | 78 +-- .../gpu/drm/amd/display/dc/hubp/dcn42/dcn42_hubp.h | 10 +- .../drm/amd/display/dc/hwss/dcn401/dcn401_hwseq.c | 431 ++++++++----- .../drm/amd/display/dc/hwss/dcn42/dcn42_hwseq.c | 495 +++++++++++++- .../drm/amd/display/dc/hwss/dcn42/dcn42_hwseq.h | 9 +- drivers/gpu/drm/amd/display/dc/inc/hw/hubp.h | 35 +- drivers/gpu/drm/amd/display/dc/inc/hw/mpc.h | 79 +-- .../gpu/drm/amd/display/dc/mpc/dcn401/dcn401_mpc.c | 177 +++-- .../gpu/drm/amd/display/dc/mpc/dcn401/dcn401_mpc.h | 25 +- .../gpu/drm/amd/display/dc/mpc/dcn42/dcn42_mpc.c | 392 +++++++++++- .../gpu/drm/amd/display/dc/mpc/dcn42/dcn42_mpc.h | 49 +- .../amd/display/dc/resource/dcn42/dcn42_resource.c | 1 - .../amd/display/modules/info_packet/info_packet.c | 2 + drivers/gpu/drm/amd/pm/amdgpu_pm.c | 26 +- drivers/gpu/drm/bridge/analogix/analogix_dp_core.c | 4 + drivers/gpu/drm/drm_edid.c | 8 + drivers/gpu/drm/drm_fb_helper.c | 92 ++- drivers/gpu/drm/drm_gpusvm.c | 5 + drivers/gpu/drm/drm_gpuvm.c | 9 +- drivers/gpu/drm/drm_ioctl.c | 14 +- drivers/gpu/drm/drm_syncobj.c | 10 +- drivers/gpu/drm/hisilicon/hibmc/dp/dp_comm.h | 1 + drivers/gpu/drm/hisilicon/hibmc/dp/dp_hw.h | 1 + drivers/gpu/drm/hisilicon/hibmc/dp/dp_link.c | 2 +- drivers/gpu/drm/hisilicon/hibmc/hibmc_drm_de.c | 78 ++- drivers/gpu/drm/hisilicon/hibmc/hibmc_drm_dp.c | 35 +- drivers/gpu/drm/hisilicon/hibmc/hibmc_drm_drv.c | 14 + drivers/gpu/drm/hisilicon/hibmc/hibmc_drm_drv.h | 1 + drivers/gpu/drm/hisilicon/hibmc/hibmc_drm_vdac.c | 75 ++- drivers/gpu/drm/i915/display/intel_atomic.c | 6 + drivers/gpu/drm/i915/display/intel_lt_phy.c | 6 +- drivers/gpu/drm/imagination/pvr_drv.c | 6 +- drivers/gpu/drm/imagination/pvr_fw_trace.c | 2 +- drivers/gpu/drm/imagination/pvr_vm.c | 6 +- drivers/gpu/drm/msm/adreno/a6xx_gmu.c | 7 +- drivers/gpu/drm/msm/adreno/a8xx_gpu.c | 15 +- drivers/gpu/drm/msm/dp/dp_display.c | 4 +- drivers/gpu/drm/msm/dp/dp_reg.h | 4 +- drivers/gpu/drm/msm/msm_mdss.c | 113 ++-- .../gpu/drm/nouveau/nvkm/subdev/bios/shadowramin.c | 3 +- drivers/gpu/drm/panel/Kconfig | 13 +- drivers/gpu/drm/panthor/panthor_device.c | 9 +- drivers/gpu/drm/panthor/panthor_device.h | 100 +-- drivers/gpu/drm/panthor/panthor_drv.c | 8 +- drivers/gpu/drm/panthor/panthor_fw.c | 29 +- drivers/gpu/drm/panthor/panthor_fw_regs.h | 32 + drivers/gpu/drm/panthor/panthor_gpu.c | 50 +- drivers/gpu/drm/panthor/panthor_gpu_regs.h | 123 ++++ drivers/gpu/drm/panthor/panthor_heap.c | 2 +- drivers/gpu/drm/panthor/panthor_hw.c | 50 +- drivers/gpu/drm/panthor/panthor_hw.h | 2 +- drivers/gpu/drm/panthor/panthor_mmu.c | 37 +- drivers/gpu/drm/panthor/panthor_mmu_regs.h | 73 +++ drivers/gpu/drm/panthor/panthor_pwr.c | 73 ++- drivers/gpu/drm/panthor/panthor_pwr_regs.h | 83 +++ drivers/gpu/drm/panthor/panthor_regs.h | 291 --------- drivers/gpu/drm/panthor/panthor_sched.c | 113 ++-- drivers/gpu/drm/radeon/radeon_gem.c | 13 +- drivers/gpu/drm/radeon/radeon_ring.c | 4 +- drivers/gpu/drm/renesas/rz-du/rzg2l_mipi_dsi.c | 12 +- drivers/gpu/drm/rockchip/dw_dp-rockchip.c | 7 +- drivers/gpu/drm/rockchip/inno_hdmi-rockchip.c | 3 +- drivers/gpu/drm/rockchip/rockchip_drm_gem.c | 2 +- drivers/gpu/drm/tegra/dc.c | 4 +- drivers/gpu/drm/tegra/fbdev.c | 1 - drivers/gpu/drm/tegra/gem.c | 22 +- drivers/gpu/drm/tegra/gr2d.c | 19 +- drivers/gpu/drm/tegra/gr3d.c | 19 +- drivers/gpu/drm/tegra/submit.c | 3 +- drivers/gpu/drm/tidss/tidss_kms.c | 2 - drivers/gpu/drm/v3d/v3d_submit.c | 2 + drivers/gpu/drm/verisilicon/vs_primary_plane.c | 10 +- drivers/gpu/drm/xe/Makefile | 4 +- drivers/gpu/drm/xe/tests/xe_pci.c | 1 - drivers/gpu/drm/xe/xe_drm_client.c | 12 +- drivers/gpu/drm/xe/xe_guc_relay.c | 13 +- drivers/gpu/drm/xe/xe_hw_engine.c | 4 +- drivers/gpu/drm/xe/xe_pt.c | 72 ++- drivers/gpu/drm/xe/xe_svm.h | 15 +- drivers/gpu/drm/xe/xe_userptr.c | 2 +- drivers/gpu/drm/xe/xe_vm_madvise.c | 2 +- drivers/gpu/host1x/bus.c | 62 +- drivers/gpu/host1x/job.c | 10 +- drivers/gpu/host1x/mipi.c | 6 +- drivers/gpu/nova-core/firmware.rs | 8 +- drivers/gpu/nova-core/firmware/gsp.rs | 3 +- drivers/gpu/nova-core/vbios.rs | 118 ++-- drivers/hid/bpf/hid_bpf_dispatch.c | 5 +- drivers/hid/hid-core.c | 7 + drivers/hid/hid-logitech-hidpp.c | 1 - drivers/hid/hid-picolcd_core.c | 3 +- drivers/hid/hid-wiimote-modules.c | 58 +- drivers/hv/mshv_synic.c | 5 + drivers/hv/vmbus_drv.c | 43 +- drivers/hwmon/Kconfig | 3 + drivers/hwmon/aspeed-g6-pwm-tach.c | 5 +- drivers/hwmon/asus_atk0110.c | 3 + drivers/hwmon/gpd-fan.c | 224 ++++--- drivers/hwmon/it87.c | 3 + drivers/hwmon/occ/common.c | 34 +- drivers/hwmon/occ/common.h | 1 + drivers/hwmon/pmbus/adm1275.c | 2 +- drivers/hwmon/pmbus/pmbus_core.c | 37 +- drivers/hwmon/w83627hf.c | 4 + drivers/hwmon/w83793.c | 1 + drivers/hwspinlock/qcom_hwspinlock.c | 5 +- drivers/hwtracing/coresight/coresight-core.c | 34 +- .../hwtracing/coresight/coresight-cti-platform.c | 1 + drivers/hwtracing/coresight/coresight-etm-perf.c | 5 +- drivers/hwtracing/coresight/coresight-etm4x-core.c | 52 +- drivers/hwtracing/coresight/coresight-platform.c | 12 +- drivers/hwtracing/coresight/coresight-priv.h | 2 +- drivers/hwtracing/coresight/coresight-sysfs.c | 8 +- drivers/hwtracing/coresight/coresight-tmc-etr.c | 4 +- drivers/i2c/busses/i2c-imx.c | 36 +- drivers/i2c/busses/i2c-k1.c | 2 +- drivers/i2c/busses/i2c-mlxbf.c | 4 +- drivers/i2c/busses/i2c-mt65xx.c | 2 +- drivers/i2c/i2c-core-of.c | 5 - drivers/i3c/master.c | 145 ++++- drivers/i3c/master/dw-i3c-master.c | 15 +- drivers/i3c/master/dw-i3c-master.h | 2 - drivers/i3c/master/i3c-master-cdns.c | 14 +- drivers/i3c/master/mipi-i3c-hci/core.c | 48 +- drivers/i3c/master/mipi-i3c-hci/dma.c | 9 +- drivers/i3c/master/mipi-i3c-hci/hci.h | 1 + drivers/i3c/master/mipi-i3c-hci/ibi.h | 13 +- drivers/i3c/master/mipi-i3c-hci/pio.c | 7 +- drivers/i3c/master/svc-i3c-master.c | 30 +- drivers/iio/accel/mma8452.c | 2 + drivers/iio/adc/xilinx-ams.c | 5 + drivers/iio/dac/mcp47feb02.c | 37 +- drivers/iio/light/acpi-als.c | 6 +- drivers/iio/light/si1133.c | 14 +- drivers/iio/light/tcs3472.c | 38 +- drivers/iio/magnetometer/ak8975.c | 14 + drivers/iio/orientation/hid-sensor-rotation.c | 40 +- drivers/infiniband/core/cm.c | 13 +- drivers/infiniband/core/counters.c | 2 +- drivers/infiniband/core/frmr_pools.c | 106 ++- drivers/infiniband/core/nldev.c | 15 +- drivers/infiniband/core/restrack.c | 49 ++ drivers/infiniband/core/restrack.h | 1 + drivers/infiniband/core/uverbs_cmd.c | 10 +- drivers/infiniband/hw/bnxt_re/ib_verbs.c | 217 +++++-- drivers/infiniband/hw/bnxt_re/ib_verbs.h | 5 +- drivers/infiniband/hw/bnxt_re/main.c | 2 - drivers/infiniband/hw/bnxt_re/qplib_res.c | 11 + drivers/infiniband/hw/bnxt_re/qplib_sp.h | 1 + drivers/infiniband/hw/bnxt_re/uapi.c | 83 ++- drivers/infiniband/hw/hfi1/init.c | 13 +- drivers/infiniband/hw/hns/hns_roce_cq.c | 6 +- drivers/infiniband/hw/hns/hns_roce_debugfs.c | 19 +- drivers/infiniband/hw/hns/hns_roce_hem.c | 8 +- drivers/infiniband/hw/hns/hns_roce_hw_v2.c | 20 +- drivers/infiniband/hw/hns/hns_roce_main.c | 2 +- drivers/infiniband/hw/hns/hns_roce_mr.c | 6 +- drivers/infiniband/hw/hns/hns_roce_srq.c | 2 +- drivers/infiniband/hw/irdma/hw.c | 7 +- drivers/infiniband/hw/irdma/main.h | 3 +- drivers/infiniband/hw/irdma/utils.c | 12 +- drivers/infiniband/hw/irdma/verbs.c | 19 +- drivers/infiniband/hw/irdma/verbs.h | 1 - drivers/infiniband/hw/mana/main.c | 3 +- drivers/infiniband/hw/mlx4/mlx4_ib.h | 1 + drivers/infiniband/hw/mlx4/mr.c | 9 +- drivers/infiniband/hw/mlx4/sysfs.c | 45 +- drivers/infiniband/hw/mlx5/devx.c | 30 +- drivers/infiniband/hw/mlx5/main.c | 17 +- drivers/infiniband/hw/mlx5/mlx5_ib.h | 9 + drivers/infiniband/hw/mlx5/mr.c | 60 +- drivers/infiniband/hw/mlx5/odp.c | 12 +- drivers/infiniband/hw/mlx5/qp.c | 13 +- drivers/infiniband/hw/mlx5/restrack.c | 3 - drivers/infiniband/hw/mlx5/umr.c | 93 ++- drivers/infiniband/hw/mlx5/umr.h | 9 +- drivers/infiniband/sw/rxe/rxe_mmap.c | 19 +- drivers/infiniband/sw/rxe/rxe_net.c | 6 +- drivers/infiniband/sw/rxe/rxe_ns.c | 4 +- drivers/infiniband/sw/rxe/rxe_resp.c | 33 +- drivers/infiniband/sw/siw/siw_cm.c | 30 +- drivers/infiniband/ulp/srpt/ib_srpt.c | 5 +- drivers/input/misc/ims-pcu.c | 131 +++- drivers/iommu/amd/amd_iommu_types.h | 11 +- drivers/iommu/amd/init.c | 7 +- drivers/iommu/arm/arm-smmu/arm-smmu-qcom.c | 2 +- drivers/iommu/dma-iommu.c | 2 +- drivers/iommu/intel/iommu.c | 6 +- drivers/iommu/intel/pasid.c | 4 +- drivers/iommu/iommufd/pages.c | 10 +- drivers/irqchip/exynos-combiner.c | 4 - drivers/irqchip/irq-crossbar.c | 10 +- drivers/irqchip/irq-gic-v3-its.c | 6 +- drivers/irqchip/irq-riscv-imsic-early.c | 15 +- drivers/irqchip/irq-ts4800.c | 10 + drivers/leds/uleds.c | 3 +- drivers/mailbox/imx-mailbox.c | 3 +- drivers/mailbox/mailbox-mpfs.c | 2 +- drivers/mailbox/mailbox.c | 26 +- drivers/mailbox/mtk-adsp-mailbox.c | 9 +- drivers/md/dm-bufio.c | 4 +- drivers/md/dm-era-target.c | 10 +- drivers/md/dm-integrity.c | 12 +- drivers/md/dm-ioctl.c | 4 +- drivers/md/dm-log.c | 3 + drivers/md/dm-pcache/dm_pcache.c | 8 + drivers/md/dm-stats.c | 10 +- drivers/md/dm-thin-metadata.c | 67 +- drivers/md/dm-verity-fec.c | 4 +- drivers/md/dm-verity-fec.h | 2 +- drivers/md/dm-verity-loadpin.c | 2 +- drivers/md/dm-verity-target.c | 16 +- drivers/md/dm-verity.h | 2 +- drivers/md/dm.c | 24 +- drivers/md/md-bitmap.c | 9 +- drivers/md/md-bitmap.h | 2 +- drivers/md/md-llbitmap.c | 13 +- drivers/md/md.c | 27 +- drivers/md/md.h | 5 + drivers/md/raid1.c | 54 +- drivers/md/raid10.c | 57 +- drivers/md/raid5.c | 55 +- drivers/media/platform/qcom/camss/camss-vfe.c | 2 +- .../media/platform/qcom/iris/iris_platform_gen1.c | 2 +- drivers/media/platform/qcom/iris/iris_probe.c | 7 + drivers/media/platform/qcom/venus/core.c | 7 +- drivers/media/platform/qcom/venus/core.h | 1 + drivers/media/platform/qcom/venus/helpers.c | 4 +- drivers/media/platform/qcom/venus/hfi_parser.c | 6 +- drivers/media/platform/qcom/venus/hfi_platform.c | 24 - drivers/media/platform/qcom/venus/hfi_platform.h | 2 - .../media/platform/qcom/venus/hfi_platform_v4.c | 20 +- .../media/platform/qcom/venus/hfi_platform_v6.c | 16 +- drivers/media/platform/qcom/venus/pm_helpers.c | 8 +- drivers/media/platform/rockchip/rga/rga-hw.c | 2 +- drivers/media/platform/rockchip/rga/rga-hw.h | 2 +- drivers/media/platform/synopsys/dw-mipi-csi2rx.c | 15 +- drivers/media/usb/uvc/uvc_status.c | 28 +- drivers/media/usb/uvc/uvc_video.c | 179 ++++-- drivers/media/v4l2-core/v4l2-common.c | 1 + drivers/memory/tegra/mc.c | 14 + drivers/memory/tegra/tegra186-emc.c | 4 +- drivers/memstick/core/ms_block.c | 4 + drivers/mfd/cs42l43.c | 2 +- drivers/mfd/rsmu_i2c.c | 6 +- drivers/mfd/rsmu_spi.c | 5 +- drivers/mfd/sm501.c | 4 +- drivers/mfd/tps6586x.c | 2 +- drivers/mmc/core/block.c | 3 +- drivers/mmc/core/mmc_test.c | 18 +- drivers/mmc/host/sdhci-esdhc-imx.c | 91 ++- drivers/mmc/host/sdhci-of-dwcmshc.c | 14 +- drivers/mmc/host/vub300.c | 36 +- drivers/mtd/devices/mchp23k256.c | 2 +- drivers/mtd/devices/slram.c | 22 +- drivers/mtd/maps/vmu-flash.c | 7 +- drivers/mtd/mtd_virt_concat.c | 4 +- drivers/mtd/nand/onenand/onenand_samsung.c | 7 +- drivers/mtd/nand/raw/fsl_ifc_nand.c | 9 +- drivers/mtd/nand/raw/lpc32xx_mlc.c | 12 +- drivers/mtd/nand/raw/lpc32xx_slc.c | 12 +- drivers/mtd/nand/raw/nand_base.c | 24 +- drivers/mtd/nand/raw/pl35x-nand-controller.c | 2 +- drivers/mtd/spi-nor/Kconfig | 1 - drivers/mtd/spi-nor/debugfs.c | 1 + drivers/mtd/spi-nor/spansion.c | 4 +- drivers/mtd/spi-nor/swp.c | 11 +- drivers/net/amt.c | 10 +- drivers/net/bareudp.c | 4 +- drivers/net/bonding/bond_3ad.c | 27 +- drivers/net/bonding/bond_main.c | 1 + drivers/net/bonding/bond_netlink.c | 16 + drivers/net/bonding/bond_options.c | 27 + drivers/net/can/usb/esd_usb.c | 5 +- drivers/net/dsa/mxl862xx/mxl862xx-host.c | 18 +- drivers/net/dsa/qca/qca8k-leds.c | 3 +- drivers/net/dsa/realtek/rtl8366rb-leds.c | 8 +- drivers/net/dsa/sja1105/sja1105_ptp.c | 2 +- drivers/net/ethernet/airoha/airoha_eth.c | 6 +- drivers/net/ethernet/airoha/airoha_ppe.c | 9 +- drivers/net/ethernet/airoha/airoha_ppe_debugfs.c | 2 - drivers/net/ethernet/amazon/ena/ena_netdev.c | 23 +- drivers/net/ethernet/broadcom/bnx2x/bnx2x_cmn.c | 3 +- drivers/net/ethernet/broadcom/bnxt/bnxt.c | 58 +- drivers/net/ethernet/broadcom/bnxt/bnxt.h | 6 + drivers/net/ethernet/broadcom/bnxt/bnxt_ethtool.c | 1 + drivers/net/ethernet/broadcom/genet/bcmgenet.c | 23 +- drivers/net/ethernet/cadence/macb_main.c | 29 +- .../ethernet/cavium/liquidio/cn23xx_pf_device.c | 18 +- drivers/net/ethernet/cavium/liquidio/lio_main.c | 27 - .../net/ethernet/cavium/liquidio/octeon_device.h | 3 - .../net/ethernet/cavium/liquidio/octeon_mailbox.c | 33 +- drivers/net/ethernet/chelsio/cxgb4/t4_hw.c | 8 - .../net/ethernet/freescale/dpaa2/dpaa2-switch.c | 10 +- drivers/net/ethernet/freescale/enetc/enetc.c | 7 + drivers/net/ethernet/freescale/enetc/enetc4_pf.c | 3 + drivers/net/ethernet/freescale/fman/fman.c | 4 +- drivers/net/ethernet/freescale/gianfar.c | 16 +- drivers/net/ethernet/google/gve/gve_rx_dqo.c | 28 +- drivers/net/ethernet/hisilicon/hns3/hns3_ethtool.c | 31 +- .../ethernet/hisilicon/hns3/hns3pf/hclge_main.c | 108 +++- .../ethernet/hisilicon/hns3/hns3pf/hclge_main.h | 1 + drivers/net/ethernet/ibm/emac/core.c | 13 +- drivers/net/ethernet/intel/e1000e/ich8lan.c | 3 + drivers/net/ethernet/intel/e1000e/netdev.c | 15 +- drivers/net/ethernet/intel/i40e/i40e_debug.h | 2 +- drivers/net/ethernet/intel/ice/ice_common.c | 1 - drivers/net/ethernet/intel/ice/ice_dpll.c | 20 +- drivers/net/ethernet/intel/ice/ice_eswitch.c | 4 +- drivers/net/ethernet/intel/ice/ice_ethtool.c | 12 +- drivers/net/ethernet/intel/ice/ice_main.c | 16 +- drivers/net/ethernet/intel/ice/ice_vf_lib.c | 2 +- drivers/net/ethernet/intel/idpf/virtchnl2.h | 12 +- drivers/net/ethernet/intel/igc/igc_main.c | 2 +- drivers/net/ethernet/intel/ixgbe/ixgbe_main.c | 3 +- drivers/net/ethernet/intel/ixgbe/ixgbe_type.h | 1 + drivers/net/ethernet/intel/ixgbe/ixgbe_x550.c | 2 +- drivers/net/ethernet/marvell/mvneta.c | 3 + .../net/ethernet/marvell/octeontx2/af/cn20k/npc.c | 9 +- drivers/net/ethernet/marvell/octeontx2/af/mbox.h | 31 +- drivers/net/ethernet/marvell/octeontx2/af/mcs.c | 6 +- .../net/ethernet/marvell/octeontx2/af/rvu_cn10k.c | 9 + .../ethernet/marvell/octeontx2/af/rvu_debugfs.c | 59 +- .../ethernet/marvell/octeontx2/af/rvu_devlink.c | 27 +- .../net/ethernet/marvell/octeontx2/af/rvu_nix.c | 15 +- .../net/ethernet/marvell/octeontx2/af/rvu_npc.c | 40 +- .../net/ethernet/marvell/octeontx2/af/rvu_npc_fs.c | 2 +- .../ethernet/marvell/octeontx2/nic/cn10k_macsec.c | 10 +- .../net/ethernet/marvell/octeontx2/nic/otx2_pf.c | 83 ++- .../net/ethernet/marvell/octeontx2/nic/otx2_vf.c | 22 +- .../net/ethernet/marvell/prestera/prestera_main.c | 2 +- drivers/net/ethernet/mediatek/mtk_eth_soc.c | 10 +- drivers/net/ethernet/mediatek/mtk_ppe.c | 4 +- drivers/net/ethernet/mediatek/mtk_wed_debugfs.c | 6 +- drivers/net/ethernet/mediatek/mtk_wed_mcu.c | 8 +- drivers/net/ethernet/mellanox/mlx5/core/Makefile | 2 +- drivers/net/ethernet/mellanox/mlx5/core/en.h | 12 + .../ethernet/mellanox/mlx5/core/en/hv_vhca_stats.c | 37 +- .../ethernet/mellanox/mlx5/core/en_accel/macsec.c | 47 +- drivers/net/ethernet/mellanox/mlx5/core/en_main.c | 14 +- drivers/net/ethernet/mellanox/mlx5/core/en_stats.c | 9 +- drivers/net/ethernet/mellanox/mlx5/core/en_tc.c | 3 + drivers/net/ethernet/mellanox/mlx5/core/eswitch.h | 17 +- .../ethernet/mellanox/mlx5/core/eswitch_offloads.c | 24 + .../net/ethernet/mellanox/mlx5/core/ipoib/ipoib.c | 3 +- drivers/net/ethernet/mellanox/mlx5/core/lag/lag.c | 507 +++++++++------ drivers/net/ethernet/mellanox/mlx5/core/lag/lag.h | 102 ++- .../net/ethernet/mellanox/mlx5/core/lag/mpesw.c | 41 +- .../ethernet/mellanox/mlx5/core/lag/shared_fdb.c | 235 +++++++ .../net/ethernet/mellanox/mlx5/core/lib/devcom.c | 8 + .../net/ethernet/mellanox/mlx5/core/lib/devcom.h | 1 + .../net/ethernet/mellanox/mlx5/core/lib/hv_vhca.c | 8 +- .../net/ethernet/mellanox/mlx5/core/lib/hv_vhca.h | 6 +- .../net/ethernet/mellanox/mlx5/core/lib/port_tun.c | 3 +- drivers/net/ethernet/mellanox/mlx5/core/lib/sd.c | 10 + drivers/net/ethernet/mellanox/mlx5/core/lib/sd.h | 10 + drivers/net/ethernet/mellanox/mlx5/core/lib/st.c | 1 + drivers/net/ethernet/mellanox/mlx5/core/main.c | 12 +- .../ethernet/mellanox/mlx5/core/steering/hws/bwc.c | 1 + drivers/net/ethernet/mellanox/mlxsw/spectrum.c | 2 +- .../net/ethernet/mellanox/mlxsw/spectrum_router.c | 1 + drivers/net/ethernet/meta/fbnic/fbnic_fw.c | 9 +- drivers/net/ethernet/meta/fbnic/fbnic_netdev.c | 7 +- drivers/net/ethernet/meta/fbnic/fbnic_pci.c | 4 + drivers/net/ethernet/meta/fbnic/fbnic_rpc.c | 2 + drivers/net/ethernet/meta/fbnic/fbnic_txrx.c | 11 +- drivers/net/ethernet/microchip/lan743x_main.c | 2 +- .../ethernet/microchip/lan966x/lan966x_vcap_impl.c | 5 +- .../ethernet/microchip/sparx5/sparx5_switchdev.c | 4 +- .../ethernet/microchip/sparx5/sparx5_vcap_impl.c | 5 +- drivers/net/ethernet/microchip/vcap/vcap_api.c | 72 ++- drivers/net/ethernet/microchip/vcap/vcap_api.h | 3 +- .../net/ethernet/microchip/vcap/vcap_api_debugfs.c | 8 +- .../microchip/vcap/vcap_api_debugfs_kunit.c | 3 +- .../net/ethernet/microchip/vcap/vcap_api_kunit.c | 3 +- .../net/ethernet/microchip/vcap/vcap_api_private.h | 3 + drivers/net/ethernet/microsoft/mana/gdma_main.c | 2 + drivers/net/ethernet/microsoft/mana/mana_bpf.c | 3 +- drivers/net/ethernet/microsoft/mana/mana_en.c | 80 ++- drivers/net/ethernet/mucse/rnpgbe/rnpgbe_mbx.c | 26 +- drivers/net/ethernet/mucse/rnpgbe/rnpgbe_mbx.h | 5 +- drivers/net/ethernet/mucse/rnpgbe/rnpgbe_mbx_fw.c | 82 +-- drivers/net/ethernet/mucse/rnpgbe/rnpgbe_mbx_fw.h | 14 + drivers/net/ethernet/oa_tc6.c | 14 +- .../net/ethernet/pensando/ionic/ionic_ethtool.c | 11 +- drivers/net/ethernet/qlogic/qede/qede_fp.c | 9 +- .../net/ethernet/qualcomm/rmnet/rmnet_handlers.c | 5 +- drivers/net/ethernet/qualcomm/rmnet/rmnet_map.h | 1 + .../net/ethernet/qualcomm/rmnet/rmnet_map_data.c | 78 ++- .../net/ethernet/stmicro/stmmac/dwmac-spacemit.c | 13 +- drivers/net/ethernet/sun/sungem.c | 13 +- drivers/net/ethernet/sunplus/spl2sw_phy.c | 6 +- drivers/net/ethernet/ti/icssg/icssg_common.c | 120 ++-- drivers/net/ethernet/wangxun/libwx/wx_lib.c | 1 + drivers/net/ethernet/wangxun/libwx/wx_type.h | 1 + drivers/net/geneve.c | 24 +- drivers/net/gtp.c | 10 +- drivers/net/ieee802154/ca8210.c | 9 +- drivers/net/ipa/ipa_smp2p.c | 30 +- drivers/net/macsec.c | 9 +- drivers/net/mdio/Kconfig | 3 +- drivers/net/netconsole.c | 12 +- drivers/net/ovpn/udp.c | 2 +- drivers/net/pfcp.c | 5 +- drivers/net/phy/realtek/realtek_main.c | 3 +- drivers/net/phy/sfp.c | 1 + drivers/net/pse-pd/pse_core.c | 6 +- drivers/net/thunderbolt/main.c | 8 +- drivers/net/usb/gl620a.c | 6 +- drivers/net/usb/lan78xx.c | 55 +- drivers/net/usb/net1080.c | 2 +- drivers/net/veth.c | 2 + drivers/net/virtio_net.c | 27 +- drivers/net/vxlan/vxlan_core.c | 14 +- drivers/net/wan/ixp4xx_hss.c | 4 +- drivers/net/wireguard/socket.c | 8 +- drivers/net/wireless/ath/ath11k/mhi.c | 4 +- drivers/net/wireless/ath/ath11k/pci.c | 8 + drivers/net/wireless/ath/ath12k/ahb.c | 25 +- drivers/net/wireless/ath/ath12k/dp.c | 10 +- drivers/net/wireless/ath/ath12k/dp_mon.c | 6 +- drivers/net/wireless/ath/ath12k/mac.c | 21 +- drivers/net/wireless/ath/ath12k/pci.c | 2 +- drivers/net/wireless/ath/ath12k/wifi7/dp_rx.c | 4 +- drivers/net/wireless/ath/ath9k/xmit.c | 5 + drivers/net/wireless/ath/wcn36xx/smd.c | 13 + .../broadcom/brcm80211/brcmfmac/cyw/core.c | 6 + drivers/net/wireless/marvell/libertas_tf/main.c | 2 +- drivers/net/wireless/marvell/mwifiex/cfg80211.c | 2 +- drivers/net/wireless/marvell/mwifiex/join.c | 1 - drivers/net/wireless/mediatek/mt76/channel.c | 2 +- drivers/net/wireless/mediatek/mt76/mac80211.c | 4 +- drivers/net/wireless/mediatek/mt76/mt7615/init.c | 1 - drivers/net/wireless/mediatek/mt76/mt7915/mac.c | 10 +- drivers/net/wireless/mediatek/mt76/mt7921/mac.c | 5 +- drivers/net/wireless/mediatek/mt76/mt7921/pci.c | 17 +- drivers/net/wireless/mediatek/mt76/mt7925/mac.c | 20 +- drivers/net/wireless/mediatek/mt76/mt7925/main.c | 4 +- drivers/net/wireless/mediatek/mt76/mt7925/pci.c | 4 +- .../net/wireless/mediatek/mt76/mt7925/testmode.c | 5 + drivers/net/wireless/mediatek/mt76/mt792x_core.c | 4 +- drivers/net/wireless/mediatek/mt76/mt7996/dma.c | 2 +- drivers/net/wireless/mediatek/mt76/mt7996/mac.c | 35 +- drivers/net/wireless/mediatek/mt76/mt7996/main.c | 9 +- drivers/net/wireless/mediatek/mt76/mt7996/mcu.c | 5 +- drivers/net/wireless/mediatek/mt76/mt7996/mt7996.h | 3 +- drivers/net/wireless/mediatek/mt76/mt7996/pci.c | 2 +- drivers/net/wireless/mediatek/mt76/tx.c | 2 +- drivers/net/wireless/ralink/rt2x00/rt2x00dev.c | 12 +- drivers/net/wireless/realtek/rtw88/pci.c | 13 +- drivers/net/wireless/realtek/rtw89/core.h | 3 + drivers/net/wireless/realtek/rtw89/fw.c | 2 +- drivers/net/wireless/realtek/rtw89/pci.c | 8 +- drivers/net/wireless/ti/wlcore/main.c | 23 +- drivers/net/wwan/iosm/iosm_ipc_mux_codec.c | 40 +- drivers/net/wwan/t7xx/t7xx_hif_cldma.c | 3 + drivers/net/wwan/t7xx/t7xx_port_wwan.c | 2 + drivers/ntb/hw/epf/ntb_hw_epf.c | 81 ++- drivers/ntb/ntb_transport.c | 10 +- drivers/nvdimm/btt.c | 14 +- drivers/nvdimm/nd.h | 11 +- drivers/nvdimm/region_devs.c | 66 +- drivers/nvme/host/apple.c | 12 +- drivers/nvme/host/core.c | 4 +- drivers/nvme/host/pci.c | 9 +- drivers/nvme/target/core.c | 2 +- drivers/nvme/target/fabrics-cmd-auth.c | 26 +- drivers/nvme/target/rdma.c | 18 +- drivers/nvme/target/tcp.c | 11 +- drivers/of/cpu.c | 2 +- drivers/of/dynamic.c | 1 - drivers/of/of_reserved_mem.c | 28 +- drivers/of/overlay.c | 15 + drivers/of/platform.c | 5 - drivers/opp/core.c | 5 +- drivers/pci/controller/dwc/pci-meson.c | 13 +- .../pci/controller/dwc/pcie-designware-debugfs.c | 10 +- drivers/pci/controller/dwc/pcie-designware.c | 16 +- drivers/pci/controller/dwc/pcie-designware.h | 1 + drivers/pci/controller/dwc/pcie-intel-gw.c | 46 +- drivers/pci/controller/dwc/pcie-qcom.c | 43 +- drivers/pci/controller/pci-loongson.c | 31 +- drivers/pci/controller/pcie-iproc-bcma.c | 2 +- drivers/pci/controller/pcie-iproc-platform.c | 2 +- drivers/pci/controller/pcie-iproc.c | 1 - drivers/pci/controller/pcie-iproc.h | 2 - drivers/pci/controller/pcie-mediatek-gen3.c | 4 +- drivers/pci/controller/pcie-mediatek.c | 19 +- drivers/pci/controller/pcie-rcar-host.c | 1 - drivers/pci/endpoint/functions/pci-epf-ntb.c | 21 +- drivers/pci/endpoint/functions/pci-epf-vntb.c | 130 +++- drivers/pci/msi/msi.c | 4 +- drivers/pci/pci.c | 3 - drivers/pci/pwrctrl/core.c | 26 +- drivers/pci/rom.c | 149 ++++- drivers/phy/freescale/phy-fsl-imx8qm-lvds-phy.c | 26 +- drivers/phy/phy-can-transceiver.c | 3 + drivers/pinctrl/Kconfig | 1 + drivers/pinctrl/cirrus/pinctrl-cs42l43.c | 6 +- drivers/pinctrl/mediatek/mtk-eint.c | 6 +- drivers/pinctrl/mediatek/pinctrl-airoha.c | 122 +++- drivers/pinctrl/mediatek/pinctrl-mt8167.c | 2 +- drivers/pinctrl/mediatek/pinctrl-mt8516.c | 2 +- drivers/pinctrl/meson/pinctrl-amlogic-a4.c | 15 +- drivers/pinctrl/meson/pinctrl-meson.c | 2 +- drivers/pinctrl/nuvoton/pinctrl-ma35.c | 3 +- drivers/pinctrl/nuvoton/pinctrl-ma35d1.c | 470 ++++++++------ drivers/pinctrl/pinconf-generic.c | 5 +- drivers/pinctrl/qcom/tlmm-test.c | 19 +- drivers/pinctrl/renesas/pinctrl-rzg2l.c | 8 +- drivers/pinctrl/spacemit/pinctrl-k1.c | 2 +- drivers/pinctrl/sunxi/pinctrl-sun55i-a523-r.c | 1 - drivers/pinctrl/sunxi/pinctrl-sun55i-a523.c | 1 - drivers/pinctrl/sunxi/pinctrl-sunxi.c | 2 +- drivers/platform/chrome/chromeos_privacy_screen.c | 3 + drivers/platform/chrome/chromeos_tbmc.c | 6 +- drivers/platform/chrome/wilco_ec/event.c | 8 +- drivers/platform/x86/amd/pmc/pmc-quirks.c | 39 ++ drivers/platform/x86/amd/pmc/pmc.c | 83 ++- drivers/platform/x86/amd/pmc/pmc.h | 2 + drivers/platform/x86/bitland-mifs-wmi.c | 8 + drivers/platform/x86/classmate-laptop.c | 12 +- drivers/platform/x86/dell/dell-laptop.c | 5 + drivers/platform/x86/hp/hp-wmi.c | 8 + .../x86/intel/speed_select_if/isst_tpmi_core.c | 2 +- drivers/platform/x86/intel/vsec.c | 17 +- drivers/platform/x86/intel/vsec_tpmi.c | 25 +- drivers/platform/x86/xo15-ebook.c | 7 +- drivers/pmdomain/imx/imx8m-blk-ctrl.c | 46 +- drivers/pmdomain/imx/imx93-blk-ctrl.c | 60 +- drivers/pmdomain/mediatek/mtk-pm-domains.c | 40 +- drivers/power/sequencing/core.c | 9 +- drivers/power/supply/bq257xx_charger.c | 7 +- drivers/power/supply/charger-manager.c | 6 +- drivers/power/supply/cpcap-battery.c | 11 +- drivers/power/supply/max17042_battery.c | 3 +- drivers/power/supply/power_supply_core.c | 11 +- drivers/pwm/pwm-imx27.c | 8 +- drivers/pwm/pwm-rzg2l-gpt.c | 8 +- drivers/rapidio/devices/tsi721.c | 3 +- drivers/regulator/core.c | 4 +- drivers/regulator/ltc3676.c | 10 +- drivers/remoteproc/qcom_common.c | 14 +- drivers/remoteproc/qcom_q6v5_wcss.c | 23 +- drivers/remoteproc/xlnx_r5_remoteproc.c | 46 +- drivers/reset/reset-imx7.c | 6 + drivers/reset/reset-sunxi.c | 4 +- drivers/rpmsg/qcom_glink_native.c | 2 - drivers/rpmsg/rpmsg_core.c | 43 +- drivers/rpmsg/virtio_rpmsg_bus.c | 1 - drivers/rtc/rtc-abx80x.c | 3 +- drivers/rtc/rtc-cmos.c | 6 + drivers/rtc/rtc-ds1307.c | 30 +- drivers/rtc/rtc-isl1208.c | 15 +- drivers/rtc/rtc-mpfs.c | 2 +- drivers/rtc/rtc-msc313.c | 4 +- drivers/rtc/rtc-renesas-rtca3.c | 2 +- drivers/s390/char/monwriter.c | 3 + drivers/s390/crypto/pkey_api.c | 8 +- drivers/s390/crypto/pkey_pckmo.c | 4 + drivers/s390/crypto/zcrypt_cex2a.c | 0 drivers/s390/crypto/zcrypt_cex2a.h | 0 drivers/s390/crypto/zcrypt_cex2c.c | 0 drivers/s390/crypto/zcrypt_cex2c.h | 0 drivers/scsi/elx/efct/efct_hw.c | 2 + drivers/scsi/elx/efct/efct_unsol.c | 1 + drivers/scsi/hisi_sas/hisi_sas_v3_hw.c | 12 +- drivers/scsi/hpsa.c | 4 + drivers/scsi/lpfc/lpfc_init.c | 3 +- drivers/scsi/pm8001/pm8001_ctl.c | 5 +- drivers/scsi/scsi_scan.c | 2 +- drivers/scsi/scsi_transport_sas.c | 101 ++- drivers/scsi/sg.c | 7 +- drivers/scsi/smartpqi/smartpqi_init.c | 2 +- drivers/soc/fsl/qe/qe.c | 3 + drivers/soc/fsl/qe/qe_ports_ic.c | 21 +- drivers/soc/mediatek/mt8167-mmsys.h | 11 +- drivers/soc/ti/k3-ringacc.c | 4 +- drivers/soc/xilinx/zynqmp_power.c | 47 +- drivers/soundwire/generic_bandwidth_allocation.c | 57 +- drivers/soundwire/intel_ace2x.c | 1 + drivers/soundwire/stream.c | 7 + drivers/spi/spi-atcspi200.c | 13 +- drivers/spi/spi-atmel.c | 133 ++-- drivers/spi/spi-dw.h | 1 + drivers/spi/spi-ep93xx.c | 1 + drivers/spi/spi-hisi-kunpeng.c | 6 +- drivers/spi/spi-imx.c | 19 +- drivers/spi/spi-meson-spifc.c | 1 + drivers/spi/spi-rpc-if.c | 6 +- drivers/spi/spi-rzv2h-rspi.c | 4 +- drivers/spi/spi-sh-msiof.c | 10 +- drivers/spi/spi-uniphier.c | 4 +- drivers/spi/spi-xilinx.c | 11 +- drivers/spi/spi.c | 5 - drivers/staging/media/atomisp/i2c/atomisp-gc2235.c | 29 +- drivers/staging/media/atomisp/pci/atomisp_cmd.c | 6 +- drivers/staging/media/atomisp/pci/sh_css.c | 8 +- drivers/staging/media/sunxi/cedrus/cedrus.c | 4 +- drivers/staging/most/video/video.c | 7 +- drivers/staging/nvec/nvec.c | 4 +- drivers/staging/rtl8723bs/core/rtw_security.c | 2 +- drivers/target/iscsi/iscsi_target_auth.c | 6 +- drivers/target/loopback/tcm_loop.c | 64 -- drivers/target/target_core_fabric_lib.c | 89 ++- drivers/target/target_core_internal.h | 3 +- drivers/target/target_core_pr.c | 12 +- drivers/thermal/intel/therm_throt.c | 7 +- drivers/thermal/testing/command.c | 48 +- drivers/thermal/testing/thermal_testing.h | 8 + drivers/thermal/testing/zone.c | 7 +- drivers/thermal/thermal_hwmon.c | 156 ++--- drivers/thunderbolt/debugfs.c | 8 +- drivers/tty/serial/8250/8250_omap.c | 3 +- drivers/tty/serial/max310x.c | 12 + drivers/tty/serial/msm_serial.c | 3 +- drivers/ufs/core/ufs_trace.h | 36 +- drivers/ufs/core/ufshcd.c | 36 +- drivers/usb/atm/ueagle-atm.c | 94 ++- drivers/usb/host/max3421-hcd.c | 8 + drivers/vdpa/octeon_ep/octep_vdpa_main.c | 20 +- drivers/vdpa/vdpa_user/iova_domain.c | 2 +- drivers/vdpa/vdpa_user/vduse_dev.c | 197 +++++- drivers/vfio/pci/qat/main.c | 18 +- drivers/vfio/pci/xe/main.c | 2 - drivers/vhost/net.c | 15 +- drivers/vhost/vdpa.c | 29 +- drivers/vhost/vhost.c | 11 +- drivers/video/backlight/ktd2801-backlight.c | 1 + drivers/video/fbdev/aty/radeon_base.c | 1 + drivers/video/fbdev/broadsheetfb.c | 8 +- drivers/video/fbdev/carminefb.c | 1 + drivers/video/fbdev/core/fbcon.c | 10 +- drivers/video/fbdev/efifb.c | 1 + drivers/video/fbdev/hecubafb.c | 6 +- drivers/video/fbdev/i740fb.c | 1 + drivers/video/fbdev/metronomefb.c | 8 +- drivers/video/fbdev/nvidia/nvidia.c | 1 + drivers/video/fbdev/s3fb.c | 1 + drivers/video/fbdev/sm501fb.c | 16 +- drivers/video/fbdev/sm712.h | 2 +- drivers/video/fbdev/tdfxfb.c | 1 + drivers/video/fbdev/tridentfb.c | 1 + drivers/video/fbdev/uvesafb.c | 4 +- drivers/video/fbdev/vesafb.c | 1 + drivers/virtio/virtio_rtc_driver.c | 28 +- drivers/watchdog/sama5d4_wdt.c | 48 +- drivers/watchdog/sp5100_tco.c | 3 +- drivers/watchdog/sprd_wdt.c | 5 +- drivers/watchdog/watchdog_core.c | 3 + drivers/xen/gntdev.c | 8 +- drivers/xen/pvcalls-front.c | 88 ++- drivers/xen/xen-scsiback.c | 30 +- fs/9p/vfs_inode.c | 28 +- fs/9p/vfs_inode_dotl.c | 4 +- fs/afs/callback.c | 17 +- fs/afs/cell.c | 27 +- fs/afs/cm_security.c | 3 +- fs/afs/cmservice.c | 7 +- fs/afs/dir.c | 40 +- fs/afs/dynroot.c | 2 +- fs/afs/fs_operation.c | 2 +- fs/afs/inode.c | 15 +- fs/afs/internal.h | 3 +- fs/afs/rxrpc.c | 16 +- fs/afs/super.c | 5 +- fs/afs/vl_list.c | 10 +- fs/afs/volume.c | 2 +- fs/bpf_fs_kfuncs.c | 10 +- fs/btrfs/compression.c | 18 +- fs/btrfs/delalloc-space.c | 2 + fs/btrfs/disk-io.c | 2 +- fs/btrfs/extent-tree.c | 5 +- fs/btrfs/inode.c | 2 +- fs/btrfs/lzo.c | 11 + fs/btrfs/reflink.c | 101 +-- fs/btrfs/space-info.c | 2 + fs/btrfs/space-info.h | 11 + fs/btrfs/super.c | 4 +- fs/btrfs/zoned.c | 64 +- fs/cachefiles/namei.c | 3 +- fs/configfs/dir.c | 57 +- fs/crypto/fscrypt_private.h | 32 +- fs/crypto/keyring.c | 216 +++---- fs/dlm/midcomms.c | 4 +- fs/efs/file.c | 21 +- fs/erofs/inode.c | 5 +- fs/erofs/super.c | 4 +- fs/eventpoll.c | 609 ++++++++++++------ fs/exfat/balloc.c | 2 +- fs/exfat/dir.c | 48 +- fs/exfat/exfat_fs.h | 131 +++- fs/exfat/fatent.c | 4 +- fs/exfat/file.c | 8 +- fs/exfat/inode.c | 26 +- fs/exfat/namei.c | 26 +- fs/exfat/super.c | 5 +- fs/ext2/file.c | 9 +- fs/ext4/ext4.h | 20 + fs/ext4/fast_commit.c | 50 +- fs/ext4/inode.c | 3 +- fs/ext4/ioctl.c | 15 +- fs/ext4/namei.c | 2 +- fs/f2fs/data.c | 29 + fs/f2fs/f2fs.h | 1 + fs/f2fs/segment.c | 8 + fs/f2fs/xattr.c | 6 +- fs/fhandle.c | 2 +- fs/fs-writeback.c | 5 - fs/hfs/inode.c | 2 +- fs/hfsplus/btree.c | 2 + fs/hfsplus/xattr.c | 1 - fs/iomap/bio.c | 13 +- fs/iomap/buffered-io.c | 2 +- fs/iomap/direct-io.c | 7 +- fs/iomap/ioend.c | 8 +- fs/jbd2/journal.c | 2 + fs/kernfs/dir.c | 33 +- fs/kernfs/file.c | 13 +- fs/kernfs/inode.c | 36 +- fs/kernfs/kernfs-internal.h | 24 +- fs/kernfs/mount.c | 2 +- fs/lockd/lockd.h | 8 + fs/lockd/svc4proc.c | 19 +- fs/lockd/svcproc.c | 2 +- fs/lockd/svcsubs.c | 7 +- fs/minix/minix.h | 2 +- fs/namei.c | 4 + fs/netfs/read_retry.c | 7 +- fs/netfs/write_issue.c | 18 +- fs/netfs/write_retry.c | 7 +- fs/nfs/callback_proc.c | 9 +- fs/nfs/delegation.c | 9 +- fs/nfs/filelayout/filelayout.c | 2 + fs/nfs/flexfilelayout/flexfilelayout.c | 29 + fs/nfs/flexfilelayout/flexfilelayout.h | 16 + fs/nfs/fs_context.c | 8 +- fs/nfs/internal.h | 12 +- fs/nfs/nfs4proc.c | 22 +- fs/nfs/pnfs.c | 4 +- fs/nfs/pnfs_nfs.c | 2 +- fs/nfs/read.c | 25 +- fs/nfs/write.c | 14 +- fs/nfsd/nfs4state.c | 16 +- fs/nilfs2/namei.c | 2 +- fs/nilfs2/super.c | 2 - fs/ntfs/aops.c | 23 +- fs/ntfs/attrib.c | 345 +++++++--- fs/ntfs/attrib.h | 4 + fs/ntfs/attrlist.c | 20 +- fs/ntfs/dir.c | 79 +-- fs/ntfs/ea.c | 16 +- fs/ntfs/index.c | 297 ++++++--- fs/ntfs/index.h | 12 +- fs/ntfs/inode.c | 38 +- fs/ntfs/logfile.c | 2 +- fs/ntfs/mft.c | 137 +--- fs/ntfs/namei.c | 67 +- fs/ntfs/runlist.c | 12 +- fs/ntfs/super.c | 53 +- fs/ntfs3/attrib.c | 10 +- fs/ntfs3/frecord.c | 17 +- fs/ntfs3/fslog.c | 147 ++++- fs/ntfs3/index.c | 45 +- fs/ntfs3/inode.c | 9 +- fs/ntfs3/lznt.c | 2 +- fs/ntfs3/namei.c | 2 +- fs/ntfs3/ntfs_fs.h | 3 +- fs/ntfs3/run.c | 14 +- fs/ocfs2/alloc.c | 2 +- fs/ocfs2/aops.c | 13 +- fs/ocfs2/buffer_head_io.c | 7 +- fs/ocfs2/dlm/dlmdebug.c | 16 +- fs/ocfs2/dlmglue.c | 17 + fs/ocfs2/inode.c | 206 +++++- fs/ocfs2/journal.c | 13 +- fs/ocfs2/journal.h | 3 + fs/ocfs2/move_extents.c | 4 +- fs/ocfs2/ocfs2.h | 2 - fs/ocfs2/quota_local.c | 2 +- fs/ocfs2/refcounttree.c | 9 +- fs/ocfs2/stack_user.c | 10 +- fs/ocfs2/super.c | 2 - fs/ocfs2/sysfile.c | 9 +- fs/orangefs/dir.c | 7 +- fs/overlayfs/copy_up.c | 12 +- fs/overlayfs/inode.c | 4 +- fs/pidfs.c | 45 +- fs/proc/generic.c | 9 +- fs/proc/page.c | 2 +- fs/proc/task_mmu.c | 74 ++- fs/resctrl/rdtgroup.c | 33 +- fs/smb/client/cifs_fs_sb.h | 1 + fs/smb/client/cifsfs.c | 12 + fs/smb/client/connect.c | 4 + fs/smb/client/file.c | 6 + fs/smb/client/fs_context.c | 102 +-- fs/smb/client/inode.c | 30 +- fs/smb/client/ioctl.c | 12 +- fs/smb/client/misc.c | 8 + fs/smb/client/reparse.c | 17 +- fs/smb/client/smb1pdu.h | 5 - fs/smb/client/smb2ops.c | 38 +- fs/smb/client/smb2pdu.h | 4 - fs/smb/common/fscc.h | 18 + fs/smb/server/auth.c | 47 +- fs/smb/server/auth.h | 7 +- fs/smb/server/mgmt/user_session.c | 4 +- fs/smb/server/mgmt/user_session.h | 1 + fs/smb/server/misc.c | 33 - fs/smb/server/misc.h | 1 - fs/smb/server/oplock.c | 6 + fs/smb/server/smb2pdu.c | 171 +++-- fs/smb/server/smb2pdu.h | 3 - fs/smb/server/smbacl.c | 7 +- fs/smb/server/vfs.c | 55 +- fs/smb/server/vfs_cache.c | 29 +- fs/super.c | 11 +- fs/sysfs/file.c | 4 + fs/udf/super.c | 2 +- fs/xattr.c | 265 ++++---- fs/xfs/xfs_aops.c | 3 +- fs/xfs/xfs_rtalloc.c | 8 + fs/xfs/xfs_zone_alloc.c | 11 +- fs/xfs/xfs_zone_alloc.h | 1 + fs/xfs/xfs_zone_gc.c | 4 +- include/acpi/platform/aclinuxex.h | 1 + include/asm-generic/bitops/lock.h | 22 +- include/asm-generic/uaccess.h | 3 +- include/dt-bindings/clock/qcom,x1e80100-camcc.h | 3 + include/dt-bindings/power/fsl,imx93-power.h | 1 + include/linux/amba/bus.h | 5 - include/linux/arm-smccc.h | 5 + include/linux/bpf-cgroup.h | 5 +- include/linux/bpf.h | 2 + include/linux/bpf_lsm.h | 6 + include/linux/cdx/cdx_bus.h | 4 - include/linux/device.h | 5 +- include/linux/edac.h | 3 + include/linux/filelock.h | 2 +- include/linux/firmware.h | 10 + .../linux/firmware/samsung/exynos-acpm-protocol.h | 10 +- include/linux/firmware/xlnx-zynqmp.h | 21 + include/linux/fs.h | 1 + include/linux/fwnode.h | 3 + include/linux/hfs_common.h | 1 + include/linux/host1x.h | 7 + include/linux/hyperv.h | 5 - include/linux/i3c/master.h | 14 +- include/linux/ieee80211-eht.h | 12 +- include/linux/ieee80211-s1g.h | 2 +- include/linux/inetdevice.h | 5 + include/linux/iomap.h | 2 + include/linux/iommu.h | 1 + include/linux/kernfs.h | 11 +- include/linux/liveupdate.h | 9 +- include/linux/mfd/rohm-bd72720.h | 1 - include/linux/netdevice.h | 4 + include/linux/nfs_page.h | 1 + include/linux/nfs_xdr.h | 1 - include/linux/rhashtable-types.h | 22 +- include/linux/rpmsg.h | 4 - include/linux/shmem_fs.h | 3 +- include/linux/sockptr.h | 2 +- include/linux/sunrpc/clnt.h | 1 + include/linux/uaccess.h | 27 +- include/linux/virtio.h | 2 + include/linux/vmalloc.h | 4 +- include/linux/xattr.h | 35 +- include/net/addrconf.h | 10 +- include/net/bluetooth/hci.h | 5 +- include/net/bluetooth/l2cap.h | 10 +- include/net/bond_options.h | 1 + include/net/bonding.h | 1 + include/net/dst_metadata.h | 7 +- include/net/fib_rules.h | 5 + include/net/gue.h | 2 +- include/net/ip_fib.h | 12 +- include/net/ip_vs.h | 3 +- include/net/mana/mana.h | 8 + include/net/netfilter/ipv4/nf_conntrack_ipv4.h | 4 + include/net/netfilter/nf_conntrack_expect.h | 17 +- include/net/netfilter/nf_conntrack_extend.h | 12 - include/net/netfilter/nf_conntrack_helper.h | 18 +- include/net/netfilter/nf_conntrack_timeout.h | 27 +- include/net/netfilter/nf_dup_netdev.h | 36 +- include/net/netfilter/nf_flow_table.h | 5 +- include/net/netfilter/nf_queue.h | 1 + include/net/netfilter/nft_meta.h | 2 + include/net/sch_generic.h | 32 +- include/net/sctp/sctp.h | 3 +- include/net/tc_act/tc_pedit.h | 18 +- include/net/tcp.h | 9 + include/net/udp_tunnel.h | 4 +- include/net/xfrm.h | 15 +- include/rdma/frmr_pools.h | 3 +- include/rdma/ib_umem.h | 4 + include/rdma/ib_verbs.h | 5 + include/rdma/rdma_vt.h | 20 - include/soc/spacemit/k3-syscon.h | 4 +- include/sound/soc-dapm.h | 1 + include/trace/events/dma_fence.h | 40 +- include/uapi/linux/bpf.h | 2 + include/uapi/linux/if_link.h | 1 + include/uapi/linux/iommufd.h | 12 +- include/uapi/linux/netfilter/nf_conntrack_common.h | 1 + include/uapi/rdma/bnxt_re-abi.h | 7 +- include/ufs/ufshcd.h | 3 - init/initramfs_test.c | 17 +- io_uring/bpf-ops.c | 2 + kernel/bpf/arena.c | 61 +- kernel/bpf/arraymap.c | 8 +- kernel/bpf/bpf_lru_list.c | 165 +++-- kernel/bpf/bpf_lru_list.h | 25 +- kernel/bpf/bpf_lsm.c | 23 + kernel/bpf/cgroup.c | 168 +++-- kernel/bpf/core.c | 2 +- kernel/bpf/devmap.c | 12 + kernel/bpf/disasm.c | 5 +- kernel/bpf/hashtab.c | 32 +- kernel/bpf/helpers.c | 17 +- kernel/bpf/inode.c | 13 +- kernel/bpf/map_in_map.c | 5 +- kernel/bpf/map_iter.c | 4 + kernel/bpf/states.c | 13 +- kernel/bpf/syscall.c | 35 +- kernel/bpf/verifier.c | 56 +- kernel/cgroup/cpuset.c | 7 +- kernel/cpu.c | 20 +- kernel/exit.c | 7 +- kernel/fork.c | 9 +- kernel/kcov.c | 4 +- kernel/kexec_core.c | 8 +- kernel/liveupdate/kexec_handover.c | 32 +- kernel/liveupdate/luo_file.c | 5 +- kernel/liveupdate/luo_flb.c | 52 +- kernel/liveupdate/luo_session.c | 99 ++- kernel/locking/spinlock_rt.c | 27 +- kernel/power/qos.c | 11 +- kernel/sched/core.c | 1 + kernel/sched/cpufreq_schedutil.c | 1 + kernel/sched/debug.c | 3 + kernel/sched/fair.c | 211 +++--- kernel/signal.c | 10 +- kernel/taskstats.c | 62 +- kernel/time/alarmtimer.c | 8 +- kernel/time/posix-cpu-timers.c | 187 ++++-- kernel/time/posix-timers.c | 6 +- kernel/time/posix-timers.h | 4 +- kernel/time/tick-sched.c | 11 +- kernel/time/time.c | 2 +- kernel/time/timer_migration.h | 18 +- kernel/trace/bpf_trace.c | 22 +- kernel/trace/fprobe.c | 10 + kernel/trace/ring_buffer.c | 8 +- kernel/trace/trace.c | 2 +- kernel/trace/trace_eprobe.c | 2 +- kernel/trace/trace_events_hist.c | 41 +- kernel/trace/trace_events_user.c | 43 +- kernel/trace/trace_osnoise.c | 4 +- kernel/trace/trace_probe.c | 174 ++++- kernel/trace/trace_probe.h | 7 +- kernel/trace/trace_remote.c | 18 +- kernel/workqueue.c | 2 +- lib/Kconfig.debug | 5 + lib/alloc_tag.c | 9 +- lib/base64.c | 3 +- lib/crypto/Kconfig | 3 +- lib/fonts/font_acorn_8x8.c | 5 + lib/locking-selftest.c | 7 +- lib/rhashtable.c | 17 +- lib/test_hmm.c | 6 +- lib/test_meminit.c | 2 +- lib/tests/kunit_iov_iter.c | 12 +- lib/tests/liveupdate.c | 3 + lib/usercopy.c | 4 +- lib/vsprintf.c | 36 +- mm/compaction.c | 7 +- mm/damon/core.c | 59 +- mm/damon/sysfs-schemes.c | 17 +- mm/huge_memory.c | 3 + mm/hugetlb.c | 7 +- mm/memory_hotplug.c | 2 +- mm/mm_init.c | 47 +- mm/numa_emulation.c | 17 +- mm/shmem.c | 50 +- mm/slub.c | 7 +- mm/sparse-vmemmap.c | 20 +- net/9p/client.c | 2 + net/9p/trans_rdma.c | 19 +- net/9p/trans_virtio.c | 5 + net/atm/common.c | 2 + net/batman-adv/distributed-arp-table.c | 30 +- net/batman-adv/fragmentation.c | 8 +- net/batman-adv/gateway_client.c | 3 +- net/batman-adv/main.c | 13 +- net/batman-adv/mesh-interface.c | 17 +- net/batman-adv/mesh-interface.h | 2 + net/batman-adv/multicast_forw.c | 7 +- net/batman-adv/routing.c | 3 +- net/batman-adv/translation-table.c | 5 +- net/bluetooth/6lowpan.c | 83 ++- net/bluetooth/eir.c | 8 +- net/bluetooth/hci_codec.c | 2 +- net/bluetooth/hci_core.c | 2 + net/bluetooth/hci_event.c | 7 + net/bluetooth/iso.c | 31 +- net/bluetooth/l2cap_core.c | 94 ++- net/bluetooth/l2cap_sock.c | 103 ++- net/bluetooth/mgmt.c | 2 + net/bluetooth/msft.c | 2 +- net/bluetooth/sco.c | 15 +- net/bluetooth/smp.c | 27 +- net/bpf/test_run.c | 8 +- net/bridge/br_cfm.c | 6 + net/bridge/br_cfm_netlink.c | 4 +- net/bridge/br_if.c | 3 + net/bridge/br_stp.c | 3 +- net/bridge/netfilter/nft_meta_bridge.c | 23 +- net/can/bcm.c | 654 ++++++++++++++----- net/can/isotp.c | 298 ++++++--- net/core/dev.c | 9 +- net/core/fib_rules.c | 6 +- net/core/filter.c | 28 +- net/core/flow_dissector.c | 12 +- net/core/lwt_bpf.c | 12 + net/core/lwtunnel.c | 6 + net/core/netdev-genl.c | 4 +- net/core/netdev_rx_queue.c | 8 +- net/devlink/rate.c | 25 +- net/ethtool/netlink.h | 28 + net/ethtool/rss.c | 14 +- net/handshake/genl.c | 2 +- net/ieee802154/core.c | 49 +- net/ieee802154/header_ops.c | 9 +- net/ieee802154/ieee802154.h | 17 + net/ieee802154/netlink.c | 36 +- net/ife/ife.c | 2 +- net/ipv4/fib_trie.c | 4 + net/ipv4/fou_core.c | 9 +- net/ipv4/igmp.c | 63 +- net/ipv4/inet_connection_sock.c | 1 + net/ipv4/ip_vti.c | 3 + net/ipv4/ipip.c | 3 + net/ipv4/netfilter/nf_nat_h323.c | 12 + net/ipv4/netfilter/nf_nat_pptp.c | 14 +- net/ipv4/netfilter/nf_nat_snmp_basic_main.c | 27 +- net/ipv4/netfilter/nf_reject_ipv4.c | 2 +- net/ipv4/tcp_bbr.c | 2 +- net/ipv4/tcp_ipv4.c | 4 +- net/ipv4/tcp_output.c | 8 +- net/ipv4/udp_bpf.c | 9 + net/ipv4/udp_tunnel_core.c | 10 +- net/ipv4/udp_tunnel_nic.c | 2 +- net/ipv4/xfrm4_input.c | 2 - net/ipv6/addrconf.c | 55 +- net/ipv6/ioam6_iptunnel.c | 8 +- net/ipv6/ip6_fib.c | 17 +- net/ipv6/ip6_gre.c | 6 + net/ipv6/ip6_tunnel.c | 10 + net/ipv6/ip6_vti.c | 3 + net/ipv6/mcast.c | 40 +- net/ipv6/ndisc.c | 8 +- net/ipv6/netfilter.c | 4 +- net/ipv6/netfilter/ip6t_ah.c | 5 + net/ipv6/netfilter/ip6t_hbh.c | 1 + net/ipv6/netfilter/ip6t_rt.c | 3 +- net/ipv6/netfilter/nf_conntrack_reasm.c | 3 +- net/ipv6/route.c | 9 +- net/ipv6/seg6.c | 3 + net/ipv6/sit.c | 3 + net/ipv6/xfrm6_input.c | 2 - net/kcm/kcmsock.c | 8 +- net/l2tp/l2tp_core.c | 2 +- net/llc/af_llc.c | 1 + net/llc/llc_conn.c | 1 - net/mac80211/main.c | 3 +- net/mac80211/rx.c | 34 +- net/mac80211/tx.c | 17 +- net/mac80211/util.c | 3 + net/mac802154/iface.c | 2 +- net/mac802154/scan.c | 1 + net/netfilter/ipset/ip_set_bitmap_gen.h | 4 +- net/netfilter/ipset/ip_set_bitmap_ip.c | 2 +- net/netfilter/ipset/ip_set_bitmap_ipmac.c | 2 +- net/netfilter/ipset/ip_set_bitmap_port.c | 2 +- net/netfilter/ipset/ip_set_core.c | 4 +- net/netfilter/ipset/ip_set_hash_gen.h | 12 +- net/netfilter/ipvs/ip_vs_app.c | 10 +- net/netfilter/ipvs/ip_vs_conn.c | 4 +- net/netfilter/ipvs/ip_vs_core.c | 36 +- net/netfilter/ipvs/ip_vs_proto_sctp.c | 18 +- net/netfilter/ipvs/ip_vs_proto_tcp.c | 11 +- net/netfilter/ipvs/ip_vs_proto_udp.c | 3 +- net/netfilter/ipvs/ip_vs_xmit.c | 6 +- net/netfilter/nf_conncount.c | 23 +- net/netfilter/nf_conntrack_amanda.c | 39 +- net/netfilter/nf_conntrack_bpf.c | 35 +- net/netfilter/nf_conntrack_broadcast.c | 4 + net/netfilter/nf_conntrack_core.c | 122 ++-- net/netfilter/nf_conntrack_ecache.c | 2 +- net/netfilter/nf_conntrack_expect.c | 184 +++--- net/netfilter/nf_conntrack_extend.c | 32 +- net/netfilter/nf_conntrack_ftp.c | 11 +- net/netfilter/nf_conntrack_h323_main.c | 129 ++-- net/netfilter/nf_conntrack_helper.c | 94 ++- net/netfilter/nf_conntrack_irc.c | 11 +- net/netfilter/nf_conntrack_netbios_ns.c | 20 +- net/netfilter/nf_conntrack_netlink.c | 32 +- net/netfilter/nf_conntrack_pptp.c | 92 +-- net/netfilter/nf_conntrack_proto_gre.c | 70 ++ net/netfilter/nf_conntrack_sane.c | 8 +- net/netfilter/nf_conntrack_seqadj.c | 19 +- net/netfilter/nf_conntrack_sip.c | 66 +- net/netfilter/nf_conntrack_snmp.c | 21 +- net/netfilter/nf_conntrack_tftp.c | 5 +- net/netfilter/nf_conntrack_timeout.c | 27 +- net/netfilter/nf_dup_netdev.c | 15 +- net/netfilter/nf_flow_table_core.c | 12 +- net/netfilter/nf_flow_table_ip.c | 107 +--- net/netfilter/nf_flow_table_path.c | 7 +- net/netfilter/nf_nat_core.c | 10 + net/netfilter/nf_nat_sip.c | 23 + net/netfilter/nf_queue.c | 14 + net/netfilter/nf_synproxy_core.c | 40 +- net/netfilter/nf_tables_api.c | 3 + net/netfilter/nfnetlink_cthelper.c | 81 ++- net/netfilter/nfnetlink_cttimeout.c | 112 ++-- net/netfilter/nfnetlink_osf.c | 6 +- net/netfilter/nfnetlink_queue.c | 3 + net/netfilter/nft_compat.c | 24 +- net/netfilter/nft_ct.c | 29 +- net/netfilter/nft_fib.c | 9 + net/netfilter/nft_fib_netdev.c | 29 +- net/netfilter/nft_fwd_netdev.c | 17 +- net/netfilter/nft_lookup.c | 10 +- net/netfilter/nft_meta.c | 5 +- net/netfilter/nft_payload.c | 16 +- net/netfilter/nft_set_pipapo.c | 34 +- net/netfilter/nft_set_pipapo.h | 8 + net/netfilter/nft_set_rbtree.c | 8 +- net/netfilter/nft_synproxy.c | 9 +- net/netfilter/xt_CT.c | 2 +- net/netfilter/xt_cluster.c | 2 +- net/netfilter/xt_connmark.c | 14 +- net/netfilter/xt_nat.c | 9 + net/netfilter/xt_physdev.c | 5 - net/netfilter/xt_rateest.c | 2 +- net/netfilter/xt_u32.c | 12 +- net/openvswitch/conntrack.c | 2 +- net/openvswitch/flow_netlink.c | 201 ++++-- net/psample/psample.c | 6 +- net/qrtr/af_qrtr.c | 2 +- net/rxrpc/ar-internal.h | 6 +- net/rxrpc/call_accept.c | 25 +- net/rxrpc/call_event.c | 5 +- net/rxrpc/call_object.c | 2 + net/rxrpc/conn_client.c | 2 +- net/rxrpc/conn_event.c | 9 +- net/rxrpc/input.c | 39 +- net/rxrpc/local_object.c | 2 +- net/rxrpc/oob.c | 12 +- net/rxrpc/recvmsg.c | 23 +- net/rxrpc/rxgk.c | 3 +- net/rxrpc/sendmsg.c | 3 +- net/sched/act_api.c | 13 +- net/sched/act_bpf.c | 2 +- net/sched/act_ct.c | 13 +- net/sched/act_pedit.c | 13 +- net/sched/cls_api.c | 25 +- net/sched/cls_bpf.c | 10 +- net/sched/cls_flow.c | 12 +- net/sched/sch_api.c | 2 +- net/sched/sch_cake.c | 13 +- net/sched/sch_cbs.c | 4 +- net/sched/sch_choke.c | 8 +- net/sched/sch_codel.c | 48 +- net/sched/sch_drr.c | 12 +- net/sched/sch_dualpi2.c | 122 ++-- net/sched/sch_etf.c | 8 +- net/sched/sch_ets.c | 4 +- net/sched/sch_fq.c | 6 +- net/sched/sch_fq_codel.c | 48 +- net/sched/sch_fq_pie.c | 4 +- net/sched/sch_generic.c | 51 +- net/sched/sch_hfsc.c | 28 +- net/sched/sch_hhf.c | 34 +- net/sched/sch_htb.c | 18 +- net/sched/sch_mq.c | 5 +- net/sched/sch_mqprio.c | 18 +- net/sched/sch_multiq.c | 6 +- net/sched/sch_netem.c | 10 +- net/sched/sch_prio.c | 4 +- net/sched/sch_qfq.c | 6 +- net/sched/sch_red.c | 4 +- net/sched/sch_sfb.c | 4 +- net/sched/sch_sfq.c | 9 +- net/sched/sch_skbprio.c | 4 +- net/sched/sch_taprio.c | 6 +- net/sched/sch_tbf.c | 6 +- net/sched/sch_teql.c | 128 ++-- net/sctp/diag.c | 67 +- net/sctp/protocol.c | 13 +- net/sctp/sm_make_chunk.c | 15 +- net/sctp/sm_statefuns.c | 64 +- net/sctp/socket.c | 38 +- net/smc/smc_cdc.c | 15 +- net/socket.c | 30 +- net/sunrpc/clnt.c | 19 +- net/sunrpc/svc.c | 10 + net/sunrpc/svcsock.c | 10 + net/sunrpc/sysfs.c | 4 +- net/sunrpc/xdr.c | 14 +- net/sunrpc/xprtrdma/backchannel.c | 5 +- net/sunrpc/xprtrdma/frwr_ops.c | 2 +- net/sunrpc/xprtrdma/rpc_rdma.c | 157 +++-- net/sunrpc/xprtrdma/transport.c | 68 +- net/sunrpc/xprtrdma/verbs.c | 126 +++- net/sunrpc/xprtrdma/xprt_rdma.h | 4 +- net/sunrpc/xprtsock.c | 16 +- net/tipc/bearer.c | 1 + net/tipc/core.c | 9 +- net/tipc/discover.c | 14 +- net/tipc/name_distr.c | 13 +- net/tipc/netlink.c | 12 + net/tipc/socket.c | 9 +- net/tipc/udp_media.c | 53 +- net/tls/tls_sw.c | 11 + net/wireless/nl80211.c | 2 +- net/wireless/pmsr.c | 4 +- net/wireless/scan.c | 5 +- net/xfrm/espintcp.c | 34 +- net/xfrm/xfrm_input.c | 29 +- net/xfrm/xfrm_interface_core.c | 3 + net/xfrm/xfrm_nat_keepalive.c | 15 +- net/xfrm/xfrm_policy.c | 27 +- net/xfrm/xfrm_state.c | 26 +- net/xfrm/xfrm_user.c | 20 +- rust/Makefile | 2 +- rust/helpers/uaccess.c | 2 +- rust/kernel/alloc/kvec.rs | 4 +- rust/kernel/devres.rs | 6 +- samples/damon/mtier.c | 3 + samples/trace_events/trace-events-sample.c | 4 + scripts/kconfig/conf.c | 6 +- scripts/livepatch/klp-build | 41 +- security/apparmor/af_unix.c | 65 +- security/apparmor/apparmorfs.c | 113 +++- security/apparmor/domain.c | 58 +- security/apparmor/file.c | 12 +- security/apparmor/include/apparmorfs.h | 12 + security/apparmor/label.c | 2 +- security/apparmor/lsm.c | 2 +- security/apparmor/net.c | 1 + security/apparmor/policy.c | 20 +- security/apparmor/policy_unpack.c | 6 +- security/apparmor/procattr.c | 2 + security/apparmor/task.c | 2 +- security/integrity/evm/evm_secfs.c | 16 +- security/integrity/ima/ima_appraise.c | 5 +- security/integrity/ima/ima_policy.c | 3 +- security/keys/keyring.c | 2 +- security/landlock/fs.c | 14 + security/landlock/fs.h | 10 + security/landlock/net.c | 11 +- security/landlock/task.c | 11 + security/selinux/hooks.c | 80 ++- sound/core/init.c | 11 +- sound/core/pcm_compat.c | 4 +- sound/core/pcm_native.c | 7 +- sound/core/seq/oss/seq_oss_event.c | 6 +- sound/core/seq/oss/seq_oss_event.h | 3 +- sound/core/seq/oss/seq_oss_ioctl.c | 5 +- sound/core/seq/oss/seq_oss_midi.c | 6 +- sound/core/seq/oss/seq_oss_midi.h | 2 +- sound/core/seq/oss/seq_oss_readq.c | 77 ++- sound/core/seq/oss/seq_oss_rw.c | 5 +- sound/core/seq/seq_clientmgr.c | 33 +- sound/core/seq/seq_fifo.c | 52 +- sound/core/seq/seq_memory.c | 2 +- sound/core/seq/seq_midi.c | 55 +- sound/drivers/aloop.c | 1 - sound/hda/codecs/conexant.c | 3 - sound/hda/codecs/realtek/alc269.c | 12 +- sound/hda/codecs/side-codecs/tas2781_hda_i2c.c | 3 + sound/hda/codecs/side-codecs/tas2781_hda_spi.c | 3 + sound/hda/controllers/Kconfig | 2 +- sound/hda/core/regmap.c | 4 +- sound/soc/amd/acp/acp-sdw-legacy-mach.c | 7 +- sound/soc/amd/acp/acp-sdw-sof-mach.c | 7 +- sound/soc/codecs/adau1372.c | 5 + sound/soc/codecs/aw88261.c | 12 +- sound/soc/codecs/cs35l56-shared.c | 4 +- sound/soc/codecs/cs35l56.c | 27 +- sound/soc/codecs/cs530x.c | 29 +- sound/soc/codecs/cs530x.h | 6 - sound/soc/codecs/hdac_hdmi.c | 4 +- sound/soc/codecs/lpass-va-macro.c | 7 +- sound/soc/codecs/rt5575-spi.c | 2 +- sound/soc/codecs/sma1307.c | 35 +- sound/soc/codecs/tlv320aic3x.c | 25 +- sound/soc/codecs/wm_adsp.c | 7 + sound/soc/fsl/fsl_asrc_dma.c | 20 + sound/soc/fsl/fsl_audmix.c | 6 + sound/soc/mediatek/mt8183/mt8183-afe-pcm.c | 23 +- sound/soc/mediatek/mt8189/mt8189-afe-pcm.c | 38 +- sound/soc/mediatek/mt8192/mt8192-afe-pcm.c | 21 +- sound/soc/meson/aiu-acodec-ctrl.c | 3 + sound/soc/meson/aiu-codec-ctrl.c | 3 + sound/soc/qcom/qdsp6/q6apm.c | 8 + sound/soc/renesas/rcar/rsnd.h | 2 +- sound/soc/sdca/sdca_asoc.c | 3 + sound/soc/sdw_utils/soc_sdw_utils.c | 1 + sound/soc/soc-dapm.c | 49 +- sound/soc/soc-topology.c | 37 +- sound/soc/sof/intel/Kconfig | 6 +- sound/soc/sof/ipc3-control.c | 79 ++- sound/soc/sof/ipc4-control.c | 34 +- sound/soc/sof/topology.c | 7 +- sound/soc/tegra/tegra210_ahub.c | 4 +- sound/usb/fcp.c | 2 + sound/usb/midi2.c | 5 + sound/usb/mixer_scarlett2.c | 201 +++++- sound/usb/qcom/mixer_usb_offload.c | 2 +- sound/usb/qcom/qc_audio_offload.c | 30 +- sound/xen/xen_snd_front_alsa.c | 17 +- sound/xen/xen_snd_front_evtchnl.c | 28 +- sound/xen/xen_snd_front_evtchnl.h | 6 +- tools/bpf/bpftool/cgroup.c | 14 +- tools/bpf/bpftool/gen.c | 2 +- tools/bpf/bpftool/net.c | 4 +- tools/include/nolibc/getopt.h | 2 +- tools/include/nolibc/stackprotector.h | 3 +- tools/include/uapi/linux/bpf.h | 2 + tools/include/uapi/linux/if_link.h | 2 + tools/lib/api/fs/fs.c | 19 +- tools/lib/bpf/btf.c | 4 +- tools/lib/bpf/gen_loader.c | 81 ++- tools/lib/bpf/libbpf.c | 9 +- tools/lib/bpf/strset.c | 62 +- tools/lib/bpf/usdt.c | 16 +- tools/lib/symbol/kallsyms.c | 5 +- tools/net/ynl/Makefile | 2 +- tools/net/ynl/generated/Makefile | 2 +- tools/net/ynl/lib/Makefile | 2 +- tools/objtool/elf.c | 75 +-- tools/objtool/include/objtool/elf.h | 32 +- tools/objtool/klp-diff.c | 133 ++-- tools/perf/Makefile.config | 1 + tools/perf/arch/common.c | 4 +- tools/perf/arch/powerpc/util/auxtrace.c | 6 + tools/perf/arch/x86/tests/amd-ibs-period.c | 2 +- tools/perf/bench/inject-buildid.c | 9 +- tools/perf/builtin-annotate.c | 3 +- tools/perf/builtin-buildid-list.c | 4 +- tools/perf/builtin-c2c.c | 28 +- tools/perf/builtin-diff.c | 3 +- tools/perf/builtin-inject.c | 172 ++++- tools/perf/builtin-record.c | 2 + tools/perf/builtin-report.c | 7 +- tools/perf/builtin-sched.c | 177 +++-- tools/perf/builtin-script.c | 6 +- tools/perf/builtin-stat.c | 50 +- tools/perf/pmu-events/amd_metrics.py | 2 +- tools/perf/pmu-events/metric.py | 1 - tools/perf/tests/code-reading.c | 7 +- tools/perf/tests/dlfilter-test.c | 8 +- tools/perf/tests/pmu-events.c | 24 +- tools/perf/tests/sample-parsing.c | 5 +- tools/perf/ui/browser.c | 3 + tools/perf/ui/browsers/annotate.c | 5 +- tools/perf/util/Build | 1 + tools/perf/util/annotate-data.c | 27 +- tools/perf/util/arm-spe.c | 28 +- tools/perf/util/auxtrace.c | 3 +- tools/perf/util/bpf-event.c | 52 +- tools/perf/util/bpf-event.h | 4 +- tools/perf/util/bpf-utils.c | 16 + tools/perf/util/build-id.c | 7 +- tools/perf/util/callchain.c | 15 + tools/perf/util/callchain.h | 1 + tools/perf/util/config.c | 4 + tools/perf/util/cpumap.c | 49 +- tools/perf/util/cs-etm-base.c | 4 +- tools/perf/util/cs-etm-decoder/cs-etm-decoder.c | 21 +- tools/perf/util/cs-etm.c | 310 ++++++--- tools/perf/util/cs-etm.h | 8 +- tools/perf/util/data-convert-json.c | 1 + tools/perf/util/debuginfo.c | 9 +- tools/perf/util/disasm.c | 7 +- tools/perf/util/dso.c | 48 +- tools/perf/util/dwarf-aux.c | 39 +- tools/perf/util/dwarf-aux.h | 5 + tools/perf/util/env.h | 14 + tools/perf/util/event.c | 15 +- tools/perf/util/header.c | 91 ++- tools/perf/util/hist.c | 9 +- tools/perf/util/hist.h | 1 + tools/perf/util/hwmon_pmu.c | 36 +- tools/perf/util/intel-bts.c | 3 +- .../util/intel-pt-decoder/intel-pt-insn-decoder.c | 11 +- tools/perf/util/intel-pt.c | 35 +- tools/perf/util/libdw.c | 49 +- tools/perf/util/machine.c | 42 +- tools/perf/util/maps.c | 156 ++++- tools/perf/util/maps.h | 3 + tools/perf/util/mmap.c | 20 +- tools/perf/util/pmu.c | 10 +- tools/perf/util/probe-finder.c | 102 +-- tools/perf/util/sample.h | 2 + tools/perf/util/session.c | 5 + tools/perf/util/srcline.c | 9 +- tools/perf/util/srcline.h | 1 + tools/perf/util/svghelper.c | 10 +- tools/perf/util/symbol-elf.c | 121 ++-- tools/perf/util/symbol-minimal.c | 16 +- tools/perf/util/symbol.c | 19 +- tools/perf/util/symbol_conf.h | 10 + tools/perf/util/synthetic-events.c | 25 +- tools/perf/util/synthetic-events.h | 6 +- tools/perf/util/thread.c | 5 + tools/perf/util/tool.c | 6 + tools/perf/util/unwind-libdw.c | 20 +- tools/perf/util/unwind-libunwind-local.c | 27 +- tools/perf/util/unwind-libunwind.c | 2 +- tools/perf/util/unwind.c | 104 +++ tools/perf/util/unwind.h | 65 +- tools/power/x86/intel-speed-select/isst-daemon.c | 9 +- tools/testing/cxl/test/cxl.c | 10 +- tools/testing/cxl/test/cxl_translate.c | 2 +- tools/testing/cxl/test/mem.c | 45 +- tools/testing/kunit/kunit_parser.py | 12 +- tools/testing/selftests/Makefile | 2 +- tools/testing/selftests/bpf/README.rst | 2 +- .../selftests/bpf/prog_tests/bpf_attr_size.c | 69 ++ tools/testing/selftests/bpf/prog_tests/bpf_nf.c | 6 + .../selftests/bpf/prog_tests/fill_link_info.c | 2 +- .../testing/selftests/bpf/prog_tests/htab_update.c | 4 +- .../testing/selftests/bpf/prog_tests/linked_list.c | 33 +- tools/testing/selftests/bpf/prog_tests/map_kptr.c | 10 +- .../prog_tests/raw_tp_writable_reject_bad_access.c | 57 ++ .../raw_tp_writable_reject_nbd_invalid.c | 43 -- .../selftests/bpf/prog_tests/refcounted_kptr.c | 8 +- tools/testing/selftests/bpf/prog_tests/verifier.c | 2 + .../selftests/bpf/prog_tests/verifier_log.c | 1 + .../selftests/bpf/progs/bpf_iter_task_vmas.c | 2 +- .../testing/selftests/bpf/progs/cpumask_success.c | 2 +- tools/testing/selftests/bpf/progs/file_reader.c | 2 +- tools/testing/selftests/bpf/progs/htab_update.c | 4 +- tools/testing/selftests/bpf/progs/linked_list.c | 71 +++ .../testing/selftests/bpf/progs/refcounted_kptr.c | 20 +- tools/testing/selftests/bpf/progs/test_bpf_nf.c | 26 + .../testing/selftests/bpf/progs/test_tunnel_kern.c | 13 +- .../testing/selftests/bpf/progs/verifier_bounds.c | 14 +- .../selftests/bpf/progs/verifier_ptr_to_buf.c | 27 + .../selftests/bpf/progs/verifier_raw_tp_writable.c | 16 + tools/testing/selftests/bpf/progs/xdp_flowtable.c | 7 +- tools/testing/selftests/bpf/vmtest.sh | 2 +- tools/testing/selftests/drivers/net/hw/tso.py | 16 +- .../ftrace/test.d/00basic/test_ownership.tc | 2 +- .../ftrace/test.d/00basic/trace_marker_raw.tc | 14 +- tools/testing/selftests/gpio/.gitignore | 1 + tools/testing/selftests/hid/Makefile | 2 +- tools/testing/selftests/hid/hid_bpf.c | 36 +- tools/testing/selftests/hid/progs/hid.c | 15 + .../selftests/landlock/scoped_signal_test.c | 237 ++++++- .../selftests/mm/charge_reserved_hugetlb.sh | 45 +- tools/testing/selftests/mm/compaction_test.c | 3 + tools/testing/selftests/mm/hmm-tests.c | 125 +++- tools/testing/selftests/mm/hugepage-mremap.c | 32 +- .../selftests/mm/hugetlb_reparenting_test.sh | 60 +- tools/testing/selftests/mm/pkey-arm64.h | 3 +- tools/testing/selftests/mm/run_vmtests.sh | 66 +- tools/testing/selftests/mm/split_huge_page_test.c | 27 +- tools/testing/selftests/mm/uffd-stress.c | 5 +- tools/testing/selftests/net/broadcast_ether_dst.sh | 2 +- tools/testing/selftests/net/lib.sh | 25 +- .../selftests/net/netfilter/nft_flowtable.sh | 8 +- tools/testing/selftests/net/tcp_mmap.c | 4 + tools/testing/selftests/net/tls.c | 8 +- tools/testing/selftests/net/vlan_bridge_binding.sh | 2 +- tools/testing/selftests/rseq/Makefile | 6 +- tools/testing/selftests/vfio/Makefile | 7 +- tools/testing/selftests/vfio/lib/libvfio.mk | 6 +- tools/tracing/rtla/src/actions.c | 2 + tools/tracing/rtla/src/common.c | 19 +- tools/tracing/rtla/src/common.h | 1 - tools/tracing/rtla/src/timerlat.c | 2 +- tools/tracing/rtla/src/timerlat_hist.c | 4 +- tools/tracing/rtla/src/timerlat_top.c | 3 +- tools/virtio/vringh_test.c | 5 + virt/kvm/kvm_main.c | 16 +- 1931 files changed, 28207 insertions(+), 14617 deletions(-)

1 month, 1 week

[PATCH 6.12 0000/1202] 6.12.97-rc2 review

by Greg Kroah-Hartman

This is the start of the stable review cycle for the 6.12.97 release. There are 1202 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know. Responses should be made by Fri, 24 Jul 2026 14:26:57 +0000. Anything received after that time might be too late. The whole patch series can be found in one patch at: https://www.kernel.org/pub/linux/kernel/v6.x/stable-review/patch-6.12.97-rc… or in the git tree and branch at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-6.12.y and the diffstat can be found below. thanks, greg k-h ------------- Pseudo-Shortlog of commits: Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> Linux 6.12.97-rc2 Ivan Vecera <ivecera(a)redhat.com> dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() Stig Hornang <stig(a)hornang.me> Bluetooth: L2CAP: fix tx ident leak for commands without a response Luiz Augusto von Dentz <luiz.von.dentz(a)intel.com> Bluetooth: 6lowpan: Fix using chan->conn as indication to no remote netdev Luiz Augusto von Dentz <luiz.von.dentz(a)intel.com> Bluetooth: L2CAP: Fix regressions caused by reusing ident Guenter Roeck <linux(a)roeck-us.net> crypto: ccp - Fix leaking the same page twice Mohammad Heib <mheib(a)redhat.com> ice: drop udp_tunnel_get_rx_info() call from ndo_open() Mohammad Heib <mheib(a)redhat.com> i40e: drop udp_tunnel_get_rx_info() call from i40e_open() Borislav Petkov (AMD) <bp(a)alien8.de> crypto: ccp - Always pass in an error pointer to __sev_platform_shutdown_locked() Luiz Augusto von Dentz <luiz.von.dentz(a)intel.com> Bluetooth: hci_sync: Fix attempting to send HCI_Disconnect to BIS handle Luiz Augusto von Dentz <luiz.von.dentz(a)intel.com> Bluetooth: hci_core: Remove check of BDADDR_ANY in hci_conn_hash_lookup_big_state Paolo Abeni <pabeni(a)redhat.com> udp_tunnel: fix deadlock in udp_tunnel_nic_set_port_priv() Ashish Kalra <ashish.kalra(a)amd.com> crypto: ccp - Fix SNP panic notifier unregistration Ashish Kalra <ashish.kalra(a)amd.com> crypto: ccp - Fix dereferencing uninitialized error pointer Ashish Kalra <ashish.kalra(a)amd.com> crypto: ccp - Fix __sev_snp_shutdown_locked David Howells <dhowells(a)redhat.com> afs: Fix afs_dynroot_readdir() to not use the RCU read lock David Howells <dhowells(a)redhat.com> afs: Fix afs_atcell_get_link() to check if ws_cell is unset first Easwar Hariharan <eahariha(a)linux.microsoft.com> jiffies: Cast to unsigned long in secs_to_jiffies() conversion Lorenzo Bianconi <lorenzo(a)kernel.org> net: airoha: Fix channel configuration for ETS Qdisc Kuniyuki Iwashima <kuniyu(a)amazon.com> rtnetlink: Make per-netns RTNL dereference helpers to macro. Gil Portnoy <dddhkts1(a)gmail.com> ksmbd: fix durable reconnect double-bind race in ksmbd_reopen_durable_fd Randy Dunlap <rdunlap(a)infradead.org> seqlock: fix scoped_seqlock_read kernel-doc Dust Li <dust.li(a)linux.alibaba.com> dibs: loopback: validate offset and size in move_data() Sandipan Das <sandipan.das(a)amd.com> perf/x86/amd/brs: Fix kernel address leakage Matt Bobrowski <mattbobrowski(a)google.com> bpf: Reject BPF_MAP_TYPE_INODE_STORAGE creation if BPF LSM is uninitialized Marc Zyngier <maz(a)kernel.org> KVM: arm64: Fix propagation of TLBI level in kvm_pgtable_stage2_relax_perms() Oliver Upton <oupton(a)kernel.org> KVM: arm64: Ensure level is always initialized when relaxing perms Marc Zyngier <maz(a)kernel.org> KVM: Move kvm_io_bus_get_dev() locking responsibilities to callers SeongJae Park <sj(a)kernel.org> mm/damon/core: always put unsuccessfully committed target pids Amir Goldstein <amir73il(a)gmail.com> selftests/fs/statmount: build with tools include dir Eric Biggers <ebiggers(a)kernel.org> fscrypt: Replace mk_users keyring with simple list Eric Biggers <ebiggers(a)kernel.org> fscrypt: Fix key setup in edge case with multiple data unit sizes Randy Dunlap <rdunlap(a)infradead.org> slab: recognize @GFP parameter as optional in kernel-doc Linus Torvalds <torvalds(a)linux-foundation.org> default_gfp(): avoid using the "newfangled" __VA_OPT__ trick Linus Torvalds <torvalds(a)linux-foundation.org> add default_gfp() helper macro and use it in the new *alloc_obj() helpers Kees Cook <kees(a)kernel.org> slab: Introduce kmalloc_flex() and family Kees Cook <kees(a)kernel.org> slab: Introduce kmalloc_obj() and family Qu Wenruo <wqu(a)suse.com> btrfs: fix incorrect buffered IO fallback for append direct writes Qu Wenruo <wqu(a)suse.com> btrfs: fix false IO failure after falling back to buffered write Rochan Avlur <rochan.avlur(a)gmail.com> exfat: preserve benign secondary entries during rename and move Chi Zhiling <chizhiling(a)kylinos.cn> exfat: fix incorrect directory checksum after rename to shorter name Yuezhang Mo <Yuezhang.Mo(a)sony.com> exfat: move exfat_chain_set() out of __exfat_resolve_path() Yuezhang Mo <Yuezhang.Mo(a)sony.com> exfat: add exfat_get_dentry_set_by_ei() helper Yuezhang Mo <Yuezhang.Mo(a)sony.com> exfat: rename argument name for exfat_move_file and exfat_rename_file Yuezhang Mo <Yuezhang.Mo(a)sony.com> exfat: remove unnecessary read entry in __exfat_rename() Ahsan Atta <ahsan.atta(a)intel.com> crypto: qat - fix restarting state leak on allocation failure Tycho Andersen (AMD) <tycho(a)kernel.org> crypto: ccp - Do not initialize SNP for ioctl(SNP_CONFIG) Tom Lendacky <thomas.lendacky(a)amd.com> crypto: ccp - Fix a case where SNP_SHUTDOWN is missed Ashish Kalra <ashish.kalra(a)amd.com> crypto: ccp - Move SEV/SNP Platform initialization to KVM Ashish Kalra <ashish.kalra(a)amd.com> crypto: ccp - Register SNP panic notifier only if SNP is enabled Ashish Kalra <ashish.kalra(a)amd.com> crypto: ccp - Reset TMR size at SNP Shutdown Ashish Kalra <ashish.kalra(a)amd.com> crypto: ccp - Move dev_info/err messages for SEV/SNP init and shutdown Qu Wenruo <wqu(a)suse.com> btrfs: check and set EXTENT_DELALLOC_NEW before clearing EXTENT_DELALLOC Qu Wenruo <wqu(a)suse.com> btrfs: remove the COW fixup mechanism Qu Wenruo <wqu(a)suse.com> btrfs: remove folio parameter from ordered io related functions Qu Wenruo <wqu(a)suse.com> btrfs: replace for_each_set_bit() with for_each_set_bitmap() Qu Wenruo <wqu(a)suse.com> btrfs: concentrate the error handling of submit_one_sector() Neill Kapron <nkapron(a)google.com> usb: gadget: f_fs: Tie read_buffer lifetime to ffs_epfile Thorsten Blum <thorsten.blum(a)linux.dev> crypto: atmel-sha204a - fail on hwrng registration error in probe path Tyler Baker <tyler.baker(a)oss.qualcomm.com> usb: gadget: f_fs: initialize reset_work at allocation time Thorsten Blum <thorsten.blum(a)linux.dev> crypto: atmel-sha204a - drop hwrng quality reduction for ATSHA204A Uwe Kleine-König <u.kleine-koenig(a)baylibre.com> crypto: atmel - Drop explicit initialization of struct i2c_device_id::driver_data to 0 Mauricio Faria de Oliveira <mfo(a)igalia.com> usb: atm: ueagle-atm: wait for pre-firmware load in .disconnect() Johan Hovold <johan(a)kernel.org> USB: iowarrior: fix use-after-free on disconnect race Oliver Neukum <oneukum(a)suse.com> usb: iowarrior: remove inherent race with minor number Vlad Poenaru <vlad.wing(a)gmail.com> bpf: Allow LPM map access from sleepable BPF programs Andrii Nakryiko <andrii(a)kernel.org> bpf: Consistently use bpf_rcu_lock_held() everywhere Luis Gerhorst <luis.gerhorst(a)fau.de> bpf, arm64, powerpc: Add bpf_jit_bypass_spec_v1/v4() Kumar Kartikeya Dwivedi <memxor(a)gmail.com> bpf: Convert lpm_trie.c to rqspinlock Tristan Madani <tristan(a)talencesecurity.com> hfs/hfsplus: fix u32 overflow in check_and_correct_requested_length Viacheslav Dubeyko <slava(a)dubeyko.com> hfs/hfsplus: prevent getting negative values of offset/length Oleg Makarenko <oleg(a)makarenk.ooo> HID: pidff: Use correct effect type in effect update Tomasz Pakuła <tomasz.pakula.oficjalny(a)gmail.com> HID: pidff: Rework pidff_upload_effect Tomasz Pakuła <tomasz.pakula.oficjalny(a)gmail.com> HID: pidff: Add missing spaces Tomasz Pakuła <tomasz.pakula.oficjalny(a)gmail.com> HID: pidff: Fix missing blank lines after declarations Manish Khadka <maskmemanish(a)gmail.com> HID: appleir: fix UAF on pending key_up_timer in remove() Thomas Gleixner <tglx(a)linutronix.de> treewide: Switch/rename to timer_delete[_sync]() Jann Horn <jannh(a)google.com> proc: protect ptrace_may_access() with exec_update_lock (part 1) Oleg Nesterov <oleg(a)redhat.com> seqlock: Change do_task_stat() to use scoped_seqlock_read() Peter Zijlstra <peterz(a)infradead.org> seqlock: Introduce scoped_seqlock_read() Trung Nguyen <trungnh(a)cystack.net> HID: multitouch: fix out-of-bounds bit access on mt_io_flags Angela Czubak <aczubak(a)google.com> HID: add haptics page defines Zide Chen <zide.chen(a)intel.com> perf/x86/intel/uncore: Defer ADL global PMON enable to enable_box() Jann Horn <jannh(a)google.com> proc: protect ptrace_may_access() with exec_update_lock (FD links) Christoph Hellwig <hch(a)lst.de> proc: rename proc_setattr to proc_nochmod_setattr Namjae Jeon <linkinjeon(a)kernel.org> ksmbd: track the connection owning a byte-range lock DaeMyung Kang <charsyam(a)gmail.com> ksmbd: centralize ksmbd_conn final release to plug transport leak Namjae Jeon <linkinjeon(a)kernel.org> ksmbd: use opener credentials for FSCTL mutations Davide Ornaghi <d.ornaghi97(a)gmail.com> ksmbd: fix path resolution in ksmbd_vfs_kern_path_create Jori Koolstra <jkoolstra(a)xs4all.nl> vfs: make LAST_XXX private to fs/namei.c Al Viro <viro(a)zeniv.linux.org.uk> ksmbd_vfs_rename(): vfs_path_parent_lookup() accepts ERR_PTR() as name Michael Bommarito <michael.bommarito(a)gmail.com> smb: client: resolve SWN tcon from live registrations Markus Elfring <elfring(a)users.sourceforge.net> smb: client: Improve unlocking of a mutex in cifs_get_swn_reg() Jose Fernandez (Anthropic) <jose.fernandez(a)linux.dev> mm: swap_cgroup: fix NULL deref in lookup_swap_cgroup_id on swapless host Siwei Zhang <oss(a)fourdim.xyz> Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_new_connection_cb() Pauli Virtanen <pav(a)iki.fi> Bluetooth: 6lowpan: fix cyclic locking warning on netdev unregister Siwei Zhang <oss(a)fourdim.xyz> Bluetooth: hci_conn: Fix null ptr deref in hci_abort_conn() Pauli Virtanen <pav(a)iki.fi> Bluetooth: separate CIS_LINK and BIS_LINK link types Luiz Augusto von Dentz <luiz.von.dentz(a)intel.com> Bluetooth: hci_core: Enable buffer flow control for SCO/eSCO Runyu Xiao <runyu.xiao(a)seu.edu.cn> Bluetooth: L2CAP: cancel pending_rx_work before taking conn->lock Luiz Augusto von Dentz <luiz.von.dentz(a)intel.com> Bluetooth: L2CAP: Fix not tracking outstanding TX ident Florian Westphal <fw(a)strlen.de> netfilter: ebtables: zero chainstack array Qianfeng Rong <rongqianfeng(a)vivo.com> netfilter: ebtables: Use vmalloc_array() to improve code Xiaolei Wang <xiaolei.wang(a)windriver.com> media: nxp: imx8-isi: Fix use-after-free on remove Frank Li <Frank.Li(a)nxp.com> media: nxp: imx8-isi: use devm_pm_runtime_enable() to simplify code Michael Wigham <michael(a)wigham.net> io_uring/rw: preserve partial result for iopoll Jens Axboe <axboe(a)kernel.dk> io_uring/rw: ensure reissue path is correctly handled for IOPOLL Runyu Xiao <runyu.xiao(a)seu.edu.cn> gpio: sch: use raw_spinlock_t in the irq startup path Marco Elver <elver(a)google.com> Bluetooth: L2CAP: Fix UAF in channel timeout by holding conn ref Giovanni Cabiddu <giovanni.cabiddu(a)intel.com> crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() Alexandru Hossu <hossu.alexandru(a)gmail.com> staging: rtl8723bs: fix OOB reads in rtw_get_sec_ie(), rtw_get_wapi_ie(), and rtw_get_wps_attr() Nikolay Kulikov <nikolayof23(a)gmail.com> staging: rtl8723bs: fix spaces around binary operators William Hansen-Baird <william.hansen.baird(a)gmail.com> staging: rtl8723bs: core: move constants to right side in comparison Marco Nenciarini <mnencia(a)kcore.it> PCI: Skip Resizable BAR restore on read error Ilpo Järvinen <ilpo.jarvinen(a)linux.intel.com> PCI: Move Resizable BAR code to rebar.c Ilpo Järvinen <ilpo.jarvinen(a)linux.intel.com> PCI: Fix restoring BARs on BAR resize rollback path Ilpo Järvinen <ilpo.jarvinen(a)linux.intel.com> PCI: Free saved list without holding pci_bus_sem Ilpo Järvinen <ilpo.jarvinen(a)linux.intel.com> PCI: Prevent resource tree corruption when BAR resize fails Ilpo Järvinen <ilpo.jarvinen(a)linux.intel.com> PCI: Use pbus_select_window() during BAR resize Manivannan Sadhasivam <manivannan.sadhasivam(a)oss.qualcomm.com> PCI: mediatek: Fix IRQ domain leak when port fails to enable Christian Marangi <ansuelsmth(a)gmail.com> PCI: mediatek: Use generic MACRO for TPVPERL delay Christian Marangi <ansuelsmth(a)gmail.com> PCI: mediatek: Convert bool to single quirks entry and bitmap Nam Cao <namcao(a)linutronix.de> PCI: mediatek: Switch to msi_create_parent_irq_domain() Jiri Slaby (SUSE) <jirislaby(a)kernel.org> PCI: controller: Use dev_fwnode() instead of of_fwnode_handle() Mahesh Vaidya <mahesh.vaidya(a)altera.com> PCI: altera: Fix resource leaks on probe failure Alex Williamson <alex.williamson(a)nvidia.com> vfio/mlx5: Fix racy bitfields and tighten struct layout Geoffrey D. Bennett <g(a)b4.vu> ALSA: scarlett2: Update offsets for 2i2 Gen 4 firmware 2417 Geoffrey D. Bennett <g(a)b4.vu> ALSA: scarlett2: Allow selecting config_set by firmware version Cássio Gabriel <cassiogabrielcontato(a)gmail.com> ALSA: hda/cs35l41: Fix firmware load work teardown Zhao Dongdong <zhaodongdong(a)kylinos.cn> ALSA: aoa: check snd_ctl_new1() return value Biren Pandya <birenpandya(a)gmail.com> iio: pressure: mpl115: fix runtime PM leak on read error Sakari Ailus <sakari.ailus(a)linux.intel.com> iio: pressure: Remove redundant pm_runtime_mark_last_busy() calls Samuel Moelius <samuel.moelius(a)trailofbits.com> iio: adc: ad7380: select REGMAP Zhang Lixu <lixu.zhang(a)intel.com> iio: hid-sensor-rotation: Fix stale or zero output when reading raw values Rafael J. Wysocki <rafael.j.wysocki(a)intel.com> ACPI: NFIT: core: Fix possible deadlock and missing notifications Rafael J. Wysocki <rafael.j.wysocki(a)intel.com> ACPI: NFIT: core: Use devm_acpi_install_notify_handler() Rafael J. Wysocki <rafael.j.wysocki(a)intel.com> ACPI: bus: Introduce devm_acpi_install_notify_handler() Rafael J. Wysocki <rafael.j.wysocki(a)intel.com> ACPI: driver: Check ACPI_COMPANION() against NULL during probe Rafael J. Wysocki <rafael.j.wysocki(a)intel.com> ACPI: NFIT: core: Fix acpi_nfit_init() error cleanup Haoze Xie <royenheart(a)gmail.com> rust: block: fix GenDisk cleanup paths Sergey Shtylyov <s.shtylyov(a)auroraos.dev> mmc: sdhci-of-dwcmshc: check bus clock enable result in the probe() method Ao Sun <ao.sun(a)transsion.com> mmc: block: fix RPMB device unregister ordering Pengpeng Hou <pengpeng(a)iscas.ac.cn> mtd: rawnand: lpc32xx_slc: fail DMA transfer on completion timeout Pengpeng Hou <pengpeng(a)iscas.ac.cn> mtd: rawnand: lpc32xx_mlc: fail DMA transfers on timeout Pengpeng Hou <pengpeng(a)iscas.ac.cn> mtd: rawnand: fsl_ifc: return errors for failed page reads Runyu Xiao <runyu.xiao(a)seu.edu.cn> mmc: vub300: defer reset until cmd_mutex is unlocked Pengpeng Hou <pengpeng(a)iscas.ac.cn> mtd: mchp23k256: use SPI match data for chip caps Pengpeng Hou <pengpeng(a)iscas.ac.cn> mtd: onenand: samsung: report DMA completion timeouts Rafael Beims <rafael.beims(a)toradex.com> wifi: mwifiex: fix permanently busy scans after multiple roam iterations Zhiling Zou <roxy520tt(a)gmail.com> wifi: mac80211: free ack status frame on TX header build failure Junrui Luo <moonafterrain(a)outlook.com> powerpc/spufs: fix out-of-bounds access in spufs_mem_mmap_access() Zhao Dongdong <zhaodongdong(a)kylinos.cn> reset: sunxi: fix memory region leak on ioremap failure Florian Westphal <fw(a)strlen.de> ipvs: reload ip header after head reallocation Julian Anastasov <ja(a)ssi.bg> ipvs: fix more places with wrong ipv6 transport offsets Maoyi Xie <maoyixie.tju(a)gmail.com> memstick: ms_block: reject a card that reports too many blocks James Raphael Tiovalen <jamestiotio(a)gmail.com> macsec: fix promiscuity refcount leak in macsec_dev_open() Xuanqiang Luo <luoxuanqiang(a)kylinos.cn> llc: fix SAP refcount leak when creating incoming sockets Laxman Acharya Padhya <acharyalaxman8848(a)gmail.com> Bluetooth: btrtl: validate firmware patch bounds Asim Viladi Oglu Manizada <manizada(a)pm.me> net: openvswitch: reject oversized nested action attrs Abhishek Ojha <Abhishek.ojha(a)savoirfairelinux.com> regulator: ltc3676: Fix incorrect IRQSTAT bit offsets Dawei Feng <dawei.feng(a)seu.edu.cn> wifi: mac80211: fix memory leak in ieee80211_register_hw() Rafael Beims <rafael.beims(a)toradex.com> wifi: mwifiex: fix roaming to different channel in host_mlme mode Runyu Xiao <runyu.xiao(a)seu.edu.cn> wifi: rt2x00: avoid full teardown before work setup in probe Thorsten Blum <thorsten.blum(a)linux.dev> powerpc/pseries: fix memory leak on krealloc failure in papr_init Thomas Huth <thuth(a)redhat.com> selftests/landlock: Fix screwed up pointers in the scoped_signal_test Thomas Huth <thuth(a)redhat.com> selftests/landlock: Skip scoped_signal subtest with MSG_OOB if not available Peng Fan <peng.fan(a)nxp.com> pmdomain: imx: Fix i.MX8MP VC8000E power up sequence Peng Fan <peng.fan(a)nxp.com> pmdomain: imx: Fix i.MX8MP power notifier Farhad Alemi <farhad.alemi(a)berkeley.edu> cgroup/cpuset: rebind mm mempolicy to effective_mems, not mems_allowed Gerald Schaefer <gerald.schaefer(a)linux.ibm.com> s390/mm: Fix type mismatch in get_align_mask(). Crystal Wood <crwood(a)redhat.com> tracing/osnoise: Call synchronize_rcu() when unregistering Tao Liu <ltao(a)redhat.com> riscv: Prevent NULL pointer dereference in machine_kexec_prepare() Michael Bommarito <michael.bommarito(a)gmail.com> drbd: reject data replies with an out-of-range payload size TJ Adams <tadamsjr(a)google.com> ata: libata-core: Skip HPA resize for locked drives Jinjie Ruan <ruanjinjie(a)huawei.com> arm64: smp: Fix hot-unplug tearing by forcing unregistration Daehyeon Ko <4ncienth(a)gmail.com> macsec: don't read an unset MAC header in macsec_encrypt() Yizhou Zhao <zhaoyz24(a)mails.tsinghua.edu.cn> ipvs: reset full ip_vs_seq structs in ip_vs_conn_new Yizhou Zhao <zhaoyz24(a)mails.tsinghua.edu.cn> ipvs: use parsed transport offset in SCTP state lookup Shuangpeng Bai <shuangpeng.kernel(a)gmail.com> llc: fix SAP refcount leak in llc_ui_autobind() Nirmoy Das <nirmoyd(a)nvidia.com> selftests: net: make busywait timeout clock portable Yousef Alhouseen <alhouseenyousef(a)gmail.com> mac802154: remove interfaces with RCU list deletion Gerald Schaefer <gerald.schaefer(a)linux.ibm.com> s390/monwriter: Reject buffer reuse with different data length Haoxiang Li <haoxiang_li2024(a)163.com> irqchip/irq-riscv-imsic-early: Fix fwnode leak on state setup failure Zi Yan <ziy(a)nvidia.com> mm/compaction: handle free_pages_prepare() properly in compaction_free() Martin Kaiser <martin(a)kaiser.cx> riscv: probes: save original sp in rethook trampoline HyeongJun An <sammiee5311(a)gmail.com> hwmon: (asus_atk0110) Check package count before accessing element Maoyi Xie <maoyixie.tju(a)gmail.com> net: wwan: iosm: bound device offsets in the MUX downlink decoder Wentao Liang <vulab(a)iscas.ac.cn> ata: pata_pxa: Fix DMA channel leak on probe error Bryam Vargas <hexlabsecurity(a)proton.me> orangefs: keep the readdir entry size 64-bit in fill_from_part() Masami Hiramatsu (Google) <mhiramat(a)kernel.org> tracing/probes: Fix double addition of offset for @+FOFFSET Joshua Crofts <joshua.crofts1(a)gmail.com> hwmon: (max1619) add missing 'select REGMAP' to Kconfig David Lee <david.lee(a)trailofbits.com> fhandle: reject detached mounts in capable_wrt_mount() Bryam Vargas <hexlabsecurity(a)proton.me> net/sched: sch_taprio: Replace direct dequeue call with peek and qdisc_dequeue_peeked Bryam Vargas <hexlabsecurity(a)proton.me> net/sched: sch_multiq: Replace direct dequeue call with peek and qdisc_dequeue_peeked Andrea Righi <arighi(a)nvidia.com> net: lan743x: Initialize eth_syslock spinlock before use Haoxiang Li <haoxiang_li2024(a)163.com> fsl/fman: Free init resources on KeyGen failure in fman_init() Runyu Xiao <runyu.xiao(a)seu.edu.cn> hwmon: (occ) unregister sysfs devices outside occ lock Haoxiang Li <haoxiang_li2024(a)163.com> net: liquidio: fix BAR resource leak on PF number failure Pengpeng Hou <pengpeng(a)iscas.ac.cn> hwmon: (w83793) remove vrm sysfs file on probe failure Pengpeng Hou <pengpeng(a)iscas.ac.cn> hwmon: (w83627hf) remove VID sysfs files on error and remove Conor Dooley <conor.dooley(a)microchip.com> rtc: mpfs: fix counter upload completion condition Abdun Nihaal <nihaal(a)cse.iitm.ac.in> bnx2x: fix potential memory leak in bnx2x_alloc_mem_bp() Sabrina Dubroca <sd(a)queasysnail.net> espintcp: use sk_msg_free_partial to fix partial send Hongchen Zhang <zhanghongchen(a)loongson.cn> LoongArch: Fix missing dirty page tracking in {pte,pmd}_wrprotect() Sven Eckelmann <sven(a)narfation.org> batman-adv: clean untagged VLAN on netdev registration failure Miguel Ojeda <ojeda(a)kernel.org> rust: block: `allow(deprecated)` for `fetch_update` for Rust >= 1.99.0 Sven Eckelmann <sven(a)narfation.org> batman-adv: ensure minimal ethernet header on TX Sven Eckelmann <sven(a)narfation.org> batman-adv: retrieve ethhdr after potential skb realloc on RX Heiko Carstens <hca(a)linux.ibm.com> s390: Revert support for DCACHE_WORD_ACCESS Jamal Hadi Salim <jhs(a)mojatatu.com> net/sched: sch_teql: move rcu_read_lock()/spin_lock() from _bh variants Daniel Gibson <daniel(a)gibson.sh> platform/x86/amd/pmc: Avoid logging "(null)" for DMI values Shitalkumar Gandhi <shital.gandhi45(a)gmail.com> ieee802154: ca8210: fix pointer truncation in kfifo on 64-bit Shitalkumar Gandhi <shital.gandhi45(a)gmail.com> ieee802154: ca8210: fix cas_ctl leak on spi_async failure Michael Bommarito <michael.bommarito(a)gmail.com> ieee802154: allow legacy LLSEC ADD/DEL ops to pass strict validation Michael Bommarito <michael.bommarito(a)gmail.com> ieee802154: admin-gate legacy LLSEC dump operations Haoxiang Li <haoxiang_li2024(a)163.com> octeontx2-af: Free BPID bitmap on setup failure Maoyi Xie <maoyixie.tju(a)gmail.com> net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink Maoyi Xie <maoyixie.tju(a)gmail.com> net: ipip: require CAP_NET_ADMIN in the device netns for changelink Maoyi Xie <maoyixie.tju(a)gmail.com> net: ip_vti: require CAP_NET_ADMIN in the device netns for changelink Maoyi Xie <maoyixie.tju(a)gmail.com> net: ip6_vti: require CAP_NET_ADMIN in the device netns for changelink Dawei Feng <dawei.feng(a)seu.edu.cn> net: ena: clean up XDP TX queues when regular TX setup fails Zihan Xi <xizh2024(a)lzu.edu.cn> net/sched: act_ct: preserve tc_skb_cb across defragmentation Haoxiang Li <haoxiang_li2024(a)163.com> net: ixp4xx_hss: fix duplicate HDLC netdev allocation Haoxiang Li <haoxiang_li2024(a)163.com> net: wwan: t7xx: destroy DMA pool on CLDMA late init failure Maoyi Xie <maoyixie.tju(a)gmail.com> net: sit: require CAP_NET_ADMIN in the device netns for changelink Andreas Kemnade <andreas(a)kemnade.info> gpios: palmas: add .get_direction() op Paul Louvel <paul.louvel(a)bootlin.com> gpio-f7188x: Add support for NCT6126D version B Runyu Xiao <runyu.xiao(a)seu.edu.cn> gpio: tegra: do not call pinctrl for GPIO direction Bradley Morgan <include(a)grrlz.net> cpu: hotplug: Bound hotplug states sysfs output Bradley Morgan <include(a)grrlz.net> cpu: hotplug: Preserve per instance callback errors Cao Ruichuang <create0818(a)163.com> selftests/ftrace: Drop invalid top-level local in test_ownership Zhan Xusheng <zhanxusheng1024(a)gmail.com> posix-cpu-timers: Use u64 multiplication in update_rlimit_cpu() Michael Bommarito <michael.bommarito(a)gmail.com> tracing/user_events: Fix use-after-free in user_event_mm_dup() Doruk Tan Ozturk <doruk(a)0sec.ai> net/mlx5e: macsec: fix use-after-free of metadata_dst on RX SC delete Dmitry Torokhov <dmitry.torokhov(a)gmail.com> Input: ims-pcu - fix type confusion in CDC union descriptor parsing Dmitry Torokhov <dmitry.torokhov(a)gmail.com> Input: ims-pcu - fix race condition in reset_device sysfs callback Dmitry Torokhov <dmitry.torokhov(a)gmail.com> Input: ims-pcu - fix potential infinite loop in CDC union descriptor parsing Dmitry Torokhov <dmitry.torokhov(a)gmail.com> Input: ims-pcu - fix out-of-bounds read in ims_pcu_irq() debug logging Dmitry Torokhov <dmitry.torokhov(a)gmail.com> Input: ims-pcu - fix firmware leak in async update Dmitry Torokhov <dmitry.torokhov(a)gmail.com> Input: ims-pcu - fix DMA mapping violation in line setup Dmitry Torokhov <dmitry.torokhov(a)gmail.com> Input: ims-pcu - add response length checks Dmitry Torokhov <dmitry.torokhov(a)gmail.com> Input: ims-pcu - validate control endpoint type Dmitry Torokhov <dmitry.torokhov(a)gmail.com> Input: ims-pcu - release data interface on disconnect Dmitry Torokhov <dmitry.torokhov(a)gmail.com> Input: ims-pcu - only expose sysfs attributes on control interface Dmitry Torokhov <dmitry.torokhov(a)gmail.com> Input: ims-pcu - fix use-after-free and double-free in disconnect Haoxiang Li <haoxiang_li2024(a)163.com> scsi: elx: efct: Fix I/O leak on unsupported additional CDB WenTao Liang <vulab(a)iscas.ac.cn> scsi: elx: efct: Fix refcount leak in efct_hw_io_abort() Bryam Vargas <hexlabsecurity(a)proton.me> scsi: target: core: Fix iSCSI ISID use-after-free in REGISTER AND MOVE Bryam Vargas <hexlabsecurity(a)proton.me> scsi: target: Bound PR-OUT TransportID parsing to the received buffer Michael Bommarito <michael.bommarito(a)gmail.com> scsi: xen: scsiback: Free unsubmitted command instead of double-putting it Michael Bommarito <michael.bommarito(a)gmail.com> scsi: xen: scsiback: Free the command tag on the TMR submit-failure path Xu Rao <raoxu(a)uniontech.com> scsi: sg: Report request-table problems when any status is set Abdun Nihaal <nihaal(a)cse.iitm.ac.in> scsi: lpfc: Fix memory leak in lpfc_sli4_driver_resource_setup() Haoxiang Li <haoxiang_li2024(a)163.com> scsi: hpsa: Fix DMA mapping leak on IOACCEL2 reset path Jhonraushan <raushan.jhon(a)gmail.com> accel/ivpu: Reject firmware log with size smaller than header Mikulas Patocka <mpatocka(a)redhat.com> dm-verity: make error counter atomic Mikulas Patocka <mpatocka(a)redhat.com> dm-verity: increase sprintf buffer size Mikulas Patocka <mpatocka(a)redhat.com> dm-verity: fix a possible NULL pointer dereference Mikulas Patocka <mpatocka(a)redhat.com> dm-verity: avoid double increment of &use_bh_wq_enabled Mikulas Patocka <mpatocka(a)redhat.com> dm-integrity: don't increment hash_offset twice Mikulas Patocka <mpatocka(a)redhat.com> dm-integrity: fix a bug if the bio is out of limits Mikulas Patocka <mpatocka(a)redhat.com> dm_early_create: fix freeing used table on dm_resume failure Mikulas Patocka <mpatocka(a)redhat.com> dm-stats: fix merge accounting Mikulas Patocka <mpatocka(a)redhat.com> dm-stats: fix dm_jiffies_to_msec64 Benjamin Marzinski <bmarzins(a)redhat.com> dm-log: fix a bitset_size overflow on 32bit machines Mikulas Patocka <mpatocka(a)redhat.com> dm-ioctl: fix a possible overflow in list_version_get_info Mikulas Patocka <mpatocka(a)redhat.com> dm-bufio: fix wrong count calculation in dm_bufio_issue_discard Samuel Moelius <sam.moelius(a)trailofbits.com> dm era: fix out-of-bounds memory access for non-zero start sector Ming-Hung Tsai <mtsai(a)redhat.com> dm thin metadata: fix metadata snapshot consistency on commit failure Genjian Zhang <zhanggenjian(a)kylinos.cn> dm thin metadata: fix superblock refcount leak on snapshot shadow failure Haoxiang Li <haoxiang_li2024(a)163.com> net: sparx5: unregister blocking notifier on init failure Mike Waychison <mike(a)waychison.com> block: fix race in blk_time_get_ns() returning 0 Jiri Olsa <jolsa(a)kernel.org> bpf: Add missing access_ok call to copy_user_syms Jann Horn <jannh(a)google.com> bpf,fork: wipe ->bpf_storage before bailouts that access it Oliver Hartkopp <socketcan(a)hartkopp.net> can: bcm: add missing rcu list annotations and operations Oliver Hartkopp <socketcan(a)hartkopp.net> can: bcm: fix lockless bound/ifindex race and silent RX_SETUP failure Lee Jones <lee(a)kernel.org> can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF Oliver Hartkopp <socketcan(a)hartkopp.net> can: isotp: use unconditional synchronize_rcu() in isotp_release() Fan Wu <fanwu01(a)zju.edu.cn> can: esd_usb: kill anchored URBs before freeing netdevs Maoyi Xie <maoyixie.tju(a)gmail.com> netdev-genl: report NAPI thread PID in the caller's pid namespace Bryam Vargas <hexlabsecurity(a)proton.me> nvmet-rdma: handle inline data with a nonzero offset Benjamin Coddington <ben.coddington(a)hammerspace.com> NFS: Charge unstable writes by request size, not folio size Weiming Shi <bestswngs(a)gmail.com> sctp: validate STALE_COOKIE cause length before reading staleness Kunihiko Hayashi <hayashi.kunihiko(a)socionext.com> spi: uniphier: Fix completion initialization order before devm_request_irq() Wang Yan <wangyan01(a)kylinos.cn> time: Fix off-by-one in compat settimeofday() usec validation Jaewon Yang <yong010301(a)gmail.com> tpm: Make the TPM character devices non-seekable Thorsten Blum <thorsten.blum(a)linux.dev> tpm: fix event_size output in tpm1_binary_bios_measurements_show Maoyi Xie <maoyixie.tju(a)gmail.com> xfrm: xfrm_interface: require CAP_NET_ADMIN in the device netns for changelink Sanman Pradhan <psanman(a)juniper.net> xfrm: use compat translator only for u64 alignment mismatch Wentao Liang <vulab(a)iscas.ac.cn> xen/gntdev: fix error handling in ioctl Paul Greenwalt <paul.greenwalt(a)intel.com> ice: fix ice_init_link() error return preventing probe Xuanqiang Luo <luoxuanqiang(a)kylinos.cn> i2c: mlxbf: Fix use-after-free in mlxbf_i2c_init_resource() Roman Vivchar <rva333(a)protonmail.com> i2c: mediatek: fix WRRD for SoCs without auto_restart option Joshua Crofts <joshua.crofts1(a)gmail.com> hwmon: (max6697) add missing 'select REGMAP_I2C' to Kconfig Joshua Crofts <joshua.crofts1(a)gmail.com> hwmon: (ltc2992) add missing 'select REGMAP_I2C' to Kconfig Ibrahim Hashimov <security(a)auditcode.ai> ksmbd: fix integer overflow in set_file_allocation_info() Fredric Cover <fredric.cover.lkernel(a)gmail.com> smb: client: use kvzalloc() for megabyte buffer in simple fallocate Holger Dengler <dengler(a)linux.ibm.com> pkey: Move keytype check from pkey api to handler Daniel Gibson <daniel(a)gibson.sh> platform/x86/amd/pmc: Don't log during intermediate wakeups Daniel Gibson <daniel(a)gibson.sh> platform/x86/amd/pmc: Add delay_suspend module parameter Daniel Gibson <daniel(a)gibson.sh> platform/x86/amd/pmc: Delay suspend for some Lenovo Laptops Daniel Gibson <daniel(a)gibson.sh> platform/x86/amd/pmc: Check for intermediate wakeup in function Haoxiang Li <lihaoxiang(a)isrc.iscas.ac.cn> platform/x86: dell-laptop: fix missing cleanups in init error path Frank Li <Frank.Li(a)nxp.com> dmaengine: dw-edma: Add spinlock to protect DONE_INT_MASK and ABORT_INT_MASK Kartik Rajput <kkartik(a)nvidia.com> dmaengine: tegra: Fix burst size calculation Michael Bommarito <michael.bommarito(a)gmail.com> tpm: tpm2-sessions: wait for async KPP completion in tpm_buf_append_salt Jarkko Sakkinen <jarkko(a)kernel.org> tpm: tpm_tis_spi: Use wait_woken() in wait_for_tmp_stat() Bhargav Joshi <j.bhargav.u(a)gmail.com> irqchip/crossbar: Use correct index in crossbar_domain_free() Yiyang Chen <cyyzero16(a)gmail.com> taskstats: retain dead thread stats in TGID queries Florian Fuchs <fuchsfl(a)gmail.com> mtd: maps: vmu-flash: fix NULL pointer dereference in initialization Miquel Raynal <miquel.raynal(a)bootlin.com> mtd: rawnand: Pause continuous reads at block boundaries Takahiro Kuwano <takahiro.kuwano(a)infineon.com> mtd: spi-nor: spansion: use die erase for multi-die devices only Miquel Raynal <miquel.raynal(a)bootlin.com> mtd: spi-nor: swp: Improve locking user experience Holger Dengler <dengler(a)linux.ibm.com> s390/pkey: Check length in pkey_pckmo handler implementation Holger Dengler <dengler(a)linux.ibm.com> s390/pkey: Check length in PKEY_VERIFYPROTK ioctl Sebastian Alba Vives <sebasjosue84(a)gmail.com> fpga: microchip-spi: fix zero header_size OOB read in mpf_ops_parse_header() Maoyi Xie <maoyixie.tju(a)gmail.com> net: thunderbolt: Fix frags[] overflow by bounding frame_count Manivannan Sadhasivam <manivannan.sadhasivam(a)oss.qualcomm.com> bus: mhi: ep: Protect mhi_ep_handle_syserr() in the error path Sebastian Alba Vives <sebasjosue84(a)gmail.com> fpga: dfl: add bounds check in dfh_get_param_size() Michael Bommarito <michael.bommarito(a)gmail.com> ocfs2: reject non-inline dinodes with i_size and zero i_clusters Michael Bommarito <michael.bommarito(a)gmail.com> ocfs2: reject dinodes whose i_rdev disagrees with the file type Michael Bommarito <michael.bommarito(a)gmail.com> ocfs2: reject dinodes with non-canonical i_mode type Joseph Qi <joseph.qi(a)linux.alibaba.com> ocfs2: add journal NULL check in ocfs2_checkpoint_inode() Ian Bridges <icb(a)fastmail.org> ocfs2: fix NULL h_transaction deref in ocfs2_assure_trans_credits Kyle Zeng <kylebot(a)openai.com> ocfs2: avoid moving extents to occupied clusters Arseniy Krasnov <avkrasnov(a)rulkc.org> mtd: rawnand: fix condition in 'nand_select_target()' Vasiliy Kovalev <kovalev(a)altlinux.org> net/9p: fix infinite loop in p9_client_rpc on fatal signal Bastien Curutchet <bastien.curutchet(a)bootlin.com> mtd: rawnand: pl353: fix probe resource allocation Tristan Madani <tristan(a)talencesecurity.com> ocfs2: use kzalloc for quota recovery bitmap allocation Ionut Nechita <ionut.nechita(a)windriver.com> scsi: sas: Skip opt_sectors when DMA reports no real optimization hint Martin Wilck <martin.wilck(a)suse.com> scsi: smartpqi: Use shost_to_hba() in pqi_scan_finished() Breno Leitao <leitao(a)debian.org> 9p: skip nlink update in cacheless mode to fix WARN_ON Ruoyu Wang <ruoyuw560(a)gmail.com> mtd: slram: remove failed entries from the device list Karl Mehltretter <kmehltretter(a)gmail.com> kcov: use WRITE_ONCE() for selftest mode stores Muchun Song <muchun.song(a)linux.dev> mm/mm_init: fix uninitialized struct pages for ZONE_DEVICE Krzysztof Wilczyński <kwilczynski(a)kernel.org> proc: only bump parent nlink when registering directories Kiryl Shutsemau (Meta) <kas(a)kernel.org> fs/proc/task_mmu: use huge_page_size() in pagemap_scan_hugetlb_entry() Kiryl Shutsemau (Meta) <kas(a)kernel.org> fs/proc/task_mmu: fix hugetlb self-deadlock in pagemap_scan_pte_hole() SeongJae Park <sj(a)kernel.org> mm/damon/sysfs-schemes: put stats for scheme_add_dirs() internal error SeongJae Park <sj(a)kernel.org> mm/damon/sysfs-schemes: fix dir put orders in access_pattern_add_dirs() Zishun Yi <vulab(a)iscas.ac.cn> riscv: cacheinfo: Fix node reference leak in populate_cache_leaves Aaron Tomlin <atomlin(a)atomlin.com> mips: sched: Fix CPUMASK_OFFSTACK memory corruption Bryam Vargas <hexlabsecurity(a)proton.me> selftests/landlock: Test SCOPE_SIGNAL on the SIGIO/fowner pgid path WenTao Liang <vulab(a)iscas.ac.cn> power: supply: charger-manager: fix refcount leak in is_full_charged() Tristan Madani <tristan(a)talencesecurity.com> ntfs3: fix out-of-bounds read in decompress_lznt Michael Bommarito <michael.bommarito(a)gmail.com> ntfs3: validate split-point offset in indx_insert_into_buffer Michael Bommarito <michael.bommarito(a)gmail.com> ntfs3: bound to_move in indx_insert_into_root before hdr_insert_head Michael Bommarito <michael.bommarito(a)gmail.com> ntfs3: cap RESTART_TABLE free-chain walker at rt->used Michael Bommarito <michael.bommarito(a)gmail.com> fs/ntfs3: bound NTFS_DE view.data_off in UpdateRecordData{Root,Allocation} Michael Bommarito <michael.bommarito(a)gmail.com> fs/ntfs3: add depth limit to indx_find_buffer to prevent stack overflow Konstantin Komarov <almaz.alexandrovich(a)paragon-software.com> fs/ntfs3: validate lcns_follow in log_replay conversion Konstantin Komarov <almaz.alexandrovich(a)paragon-software.com> fs/ntfs3: bound attr_off in UpdateResidentValue against data_off Michael Bommarito <michael.bommarito(a)gmail.com> fs/ntfs3: bound copy_lcns dp->page_lcns[] index in analysis pass Konstantin Komarov <almaz.alexandrovich(a)paragon-software.com> fs/ntfs3: bound DeleteIndexEntryAllocation memmove length Zhan Xusheng <zhanxusheng1024(a)gmail.com> fs/ntfs3: fix syncing wrong inode on DIRSYNC cross-directory rename SeongJae Park <sj(a)kernel.org> mm/damon/core: make charge_addr_from aware of end-address exclusivity Muchun Song <muchun.song(a)linux.dev> mm/memory_hotplug: fix incorrect altmap passing in error path Ma Ke <make24(a)iscas.ac.cn> power: supply: cpcap-battery: Fix missing nvmem_device_put() causing reference leak Maciej W. Rozycki <macro(a)orcam.me.uk> MIPS: DEC: Ensure 32-bit stack location for o32 prom_printf() Johan Hovold <johan(a)kernel.org> MIPS: ip22-gio: fix device reference leak in probe Johan Hovold <johan(a)kernel.org> MIPS: ip22-gio: fix kfree() of static object Johan Hovold <johan(a)kernel.org> MIPS: ip22-gio: fix gio device memory leak Wasim Nazir <wasim.nazir(a)oss.qualcomm.com> remoteproc: qcom: Fix leak when custom dump_segments addition fails Chuck Lever <chuck.lever(a)oracle.com> SUNRPC: Bound-check xdr_buf_to_bvec() stores before writing Chuck Lever <chuck.lever(a)oracle.com> lockd: Plug nlm_file refcount leak on cached nlm_do_fopen() failure Chuck Lever <chuck.lever(a)oracle.com> lockd: Plug nlm_file leak when nlm_do_fopen() fails Chuck Lever <chuck.lever(a)oracle.com> sunrpc: wait for in-flight TLS handshake callback when cancel loses race Chris Mason <clm(a)meta.com> sunrpc: pin svc_xprt across the asynchronous TLS handshake callback Abdun Nihaal <nihaal(a)cse.iitm.ac.in> nvdimm/btt: Free arena sub-allocations on discover_arenas() error path Abdun Nihaal <nihaal(a)cse.iitm.ac.in> nvdimm/btt: Free arenas on btt_init() error paths Junrui Luo <moonafterrain(a)outlook.com> jbd2: fix integer underflow in jbd2_journal_initialize_fast_commit() Pauli Virtanen <pav(a)iki.fi> Bluetooth: SCO: hold sk properly in sco_conn_ready Pauli Virtanen <pav(a)iki.fi> Bluetooth: SCO: fix sleeping under spinlock in sco_conn_ready Benoît Sevens <bsevens(a)google.com> HID: playstation: validate num_touch_reports in DualShock 4 reports Bartosz Golaszewski <bartosz.golaszewski(a)oss.qualcomm.com> mfd: tps6586x: Fix OF node refcount Shyam Prasad N <sprasad(a)microsoft.com> cifs: invalidate cfid on unlink/rename/rmdir Sven Eckelmann <sven(a)narfation.org> batman-adv: tt: prevent TVLV OOB check overflow Sven Eckelmann <sven(a)narfation.org> batman-adv: mcast: avoid OOB read of num_dests header Sven Eckelmann <sven(a)narfation.org> batman-adv: frag: fix primary_if leak on failed linearization Sven Eckelmann <sven(a)narfation.org> batman-adv: frag: free unfragmentable packet Sven Eckelmann <sven(a)narfation.org> batman-adv: fix VLAN priority offset Sven Eckelmann <sven(a)narfation.org> batman-adv: tt: avoid request storms during pending request Sven Eckelmann <sven(a)narfation.org> batman-adv: dat: fix tie-break for candidate selection Sven Eckelmann <sven(a)narfation.org> batman-adv: dat: ensure accessible eth_hdr proto field Sven Eckelmann <sven(a)narfation.org> batman-adv: bla: reacquire gw address after skb realloc Sven Eckelmann <sven(a)narfation.org> batman-adv: dat: acquire ARP hw source only after skb realloc Sven Eckelmann <sven(a)narfation.org> batman-adv: access unicast_ttvn skb->data only after skb realloc Sven Eckelmann <sven(a)narfation.org> batman-adv: gw: acquire ethernet header only after skb realloc Sumanth Korikkar <sumanthk(a)linux.ibm.com> s390/perf_cpum_cf: Add missing array_index_nospec() to __hw_perf_event_init() Rafael J. Wysocki <rafael.j.wysocki(a)intel.com> cpufreq: intel_pstate: Set non-turbo capacity to HWP_GUARANTEED_PERF() Sandipan Das <sandipan.das(a)amd.com> perf/x86/amd/lbr: Fix kernel address leakage Thorsten Blum <thorsten.blum(a)linux.dev> x86/boot: Reject too long acpi_rsdp= values Thorsten Blum <thorsten.blum(a)linux.dev> x86/boot: Validate console=uart8250 baud rate to fix early boot hang Ali Ahmet MEMIS <dev(a)unknownbbqr.xyz> tools/power/x86/intel-speed-select: Harden daemon pidfile open Guangshuo Li <lgs201920130244(a)gmail.com> mfd: sm501: Fix reference leak on failed device registration Armin Wolf <W_Armin(a)gmx.de> leds: uleds: Fix potential buffer overread Ondrej Mosnacek <omosnace(a)redhat.com> selinux: fix incorrect execmem checks on overlayfs Tristan Madani <tristan(a)talencesecurity.com> selinux: avoid sk_socket dereference in selinux_sctp_bind_connect() Stephen Smalley <stephen.smalley.work(a)gmail.com> selinux: check connect-related permissions on TCP Fast Open Wang Jun <1742789905(a)qq.com> soc: fsl: qe: panic on ioremap() failure in qe_reset() Siddharth Vadapalli <s-vadapalli(a)ti.com> soc: ti: k3-ringacc: Fix access mode for k3_ringacc_ring_pop_tail_io/proxy Guangshuo Li <lgs201920130244(a)gmail.com> gpu: host1x: Fix device reference leak in host1x_device_parse_dt() error path Xiang Mei (Microsoft) <xmei5(a)asu.edu> netfilter: bridge: fix stale prevhdr pointer in br_ip6_fragment() Wyatt Feng <bronzed_45_vested(a)icloud.com> netfilter: xt_nat: reject unsupported target families Yizhou Zhao <zhaoyz24(a)mails.tsinghua.edu.cn> netfilter: ecache: fix inverted time_after() check Yizhou Zhao <zhaoyz24(a)mails.tsinghua.edu.cn> netfilter: nf_conncount: fix zone comparison in tuple dedup Xiang Mei <xmei5(a)asu.edu> netfilter: nf_conntrack_reasm: guard mac_header adjustment after IPv6 defrag Florian Westphal <fw(a)strlen.de> netfilter: nf_nat_sip: reload possible stale data pointer Florian Westphal <fw(a)strlen.de> netfilter: nft_set_pipapo: don't leak bad clone into future transaction Haoze Xie <royenheart(a)gmail.com> netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst Wyatt Feng <bronzed_45_vested(a)icloud.com> netfilter: xt_cluster: reject template conntracks in hash match David Carlier <devnexen(a)gmail.com> netfilter: nfnl_cthelper: apply per-class values when updating policies Muhammad Bilal <meatuni001(a)gmail.com> netfilter: nf_conntrack_irc: fix parse_dcc() off-by-one OOB read Srinivas Kandagatla <srinivas.kandagatla(a)oss.qualcomm.com> ASoC: qcom: q6apm: fix NULL pointer dereference in graph_callback Cássio Gabriel <cassiogabrielcontato(a)gmail.com> ASoC: mediatek: mt8183: Release reserved memory on cleanup Cássio Gabriel <cassiogabrielcontato(a)gmail.com> ASoC: mediatek: mt8192: Release reserved memory on cleanup Peter Ujfalusi <peter.ujfalusi(a)linux.intel.com> ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control Peter Ujfalusi <peter.ujfalusi(a)linux.intel.com> ASoC: SOF: ipc3-control: Fix heap overflow in bytes_ext put/get Abdun Nihaal <nihaal(a)cse.iitm.ac.in> fbdev: tridentfb: fix potential memory leak in trident_pci_probe() Abdun Nihaal <nihaal(a)cse.iitm.ac.in> fbdev: nvidia: fix potential memory leak in nvidiafb_probe() Abdun Nihaal <nihaal(a)cse.iitm.ac.in> fbdev: vesafb: fix memory leak in vesafb_probe() Abdun Nihaal <nihaal(a)cse.iitm.ac.in> fbdev: carminefb: fix potential memory leak in alloc_carmine_fb() Abdun Nihaal <nihaal(a)cse.iitm.ac.in> fbdev: tdfxfb: fix potential memory leak in tdfxfb_probe() Abdun Nihaal <nihaal(a)cse.iitm.ac.in> fbdev: uvesafb: fix potential memory leak in uvesafb_probe() Abdun Nihaal <nihaal(a)cse.iitm.ac.in> fbdev: s3fb: fix potential memory leak in s3_pci_probe() Abdun Nihaal <nihaal(a)cse.iitm.ac.in> fbdev: i740fb: fix potential memory leak in i740fb_probe() Abdun Nihaal <nihaal(a)cse.iitm.ac.in> fbdev: radeon: fix potential memory leak in radeonfb_pci_register() Abdun Nihaal <nihaal(a)cse.iitm.ac.in> fbdev: efifb: fix memory leak in efifb_probe() Li RongQing <lirongqing(a)baidu.com> fbdev: sm712: Fix operator precedence in big_swap macro Abdun Nihaal <nihaal(a)cse.iitm.ac.in> fbdev: hecubafb: fix potential memory leak in hecubafb_probe() Abdun Nihaal <nihaal(a)cse.iitm.ac.in> fbdev: broadsheetfb: fix potential memory leak in broadsheetfb_probe() Abdun Nihaal <nihaal(a)cse.iitm.ac.in> fbdev: metronomefb: fix potential memory leak in metronomefb_probe() Weiming Shi <bestswngs(a)gmail.com> KVM: arm64: nv: Fix SPSR_EL2 restore in kvm_hyp_handle_mops() Oliver Upton <oupton(a)kernel.org> KVM: arm64: nv: Drop bogus WARN for write to ZCR_EL2 Sean Christopherson <seanjc(a)google.com> KVM: x86: Ignore pending PV EOI if the vCPU has since disabled PV EOIs Atish Patra <atishp(a)meta.com> KVM: SEV: Do not allow intra-host migration/mirroring of SNP VMs Matthew Rosato <mjrosato(a)linux.ibm.com> KVM: s390: pci: Fix handling of AIF enable without AISB Hyunwoo Kim <imv4bel(a)gmail.com> KVM: arm64: vgic: Check the interrupt is still ours before migrating it Haoxiang Li <haoxiang_li2024(a)163.com> KVM: s390: pci: Fix GISC refcount leak on AIF enable failure Qiang Ma <maqianga(a)uniontech.com> LoongArch: KVM: Return full old CSR value from kvm_emu_xchg_csr() Bibo Mao <maobibo(a)loongson.cn> LoongArch: KVM: Fix FPU register width with user access API Qiang Ma <maqianga(a)uniontech.com> LoongArch: KVM: Check the return values for put_user() Bibo Mao <maobibo(a)loongson.cn> LoongArch: KVM: Check irq validity in kvm_vcpu_ioctl_interrupt() David Jander <david(a)protonic.nl> ARM: dts: stm32: stm32mp15x-mecio1-io: Move expander gpio-line-names to board files David Jander <david(a)protonic.nl> ARM: dts: stm32: stm32mp15x-mecio1-io: Fix expander gpio line typo David Jander <david(a)protonic.nl> ARM: dts: stm32: stm32mp15x-mecio1-io: Move gpio-line-names to board files David Jander <david(a)protonic.nl> ARM: dts: stm32: stm32mp15x-mecio1-io: Fix GPIO names typo Krzysztof Kozlowski <krzysztof.kozlowski(a)oss.qualcomm.com> arm64: dts: imx8ulp-evk: Correct Type-C int GPIO flags David Jander <david(a)protonic.nl> ARM: dts: stm32: stm32mp15x-mecio1-io: Enable internal ADC reference Judith Mendez <jm(a)ti.com> arm64: dts: ti: k3-am62a7-sk: Add bootph-all tag to vqmmc David Jander <david(a)protonic.nl> ARM: dts: stm32: stm32mp15x-mecio1-io: Move divergent mecio1 ADC channels to board files David Jander <david(a)protonic.nl> ARM: dts: stm32: stm32mp15x-mecio1-io: Fix ADC sampling times Nickolay Goppen <setotau(a)mainlining.org> arm64: dts: qcom: sdm630: describe adsp_mem region properly Mark Rutland <mark.rutland(a)arm.com> arm64: fpsimd: Fix type mismatch in sve_{save,load}_state() Yong Wang <edragain(a)163.com> net: ife: require ETH_HLEN to be pullable in ife_decode() Zhengchuan Liang <zcliangcn(a)gmail.com> net: atm: reject out-of-range traffic classes in QoS validation Michael Bommarito <michael.bommarito(a)gmail.com> net: qrtr: fix 32-bit integer overflow in qrtr_endpoint_post() Cássio Gabriel <cassiogabrielcontato(a)gmail.com> ASoC: SOF: topology: validate vendor array size before parsing Peter Ujfalusi <peter.ujfalusi(a)linux.intel.com> ASoC: SOF: ipc3-control: Fix TOCTOU in bytes_put and bytes_get Peter Ujfalusi <peter.ujfalusi(a)linux.intel.com> ASoC: SOF: ipc3-control: Use overflow checks in control_update size calc Peter Ujfalusi <peter.ujfalusi(a)linux.intel.com> ASoC: SOF: ipc4-control: Fix TOCTOU in sof_ipc4_bytes_put Zhang Tianci <zhangtianci.1997(a)bytedance.com> vduse: Fix race in vduse_dev_msg_sync and vduse_dev_read_iter Wentao Liang <vulab(a)iscas.ac.cn> mlxsw: fix refcount leak in mlxsw_sp_vrs_lpm_tree_replace() Wentao Liang <vulab(a)iscas.ac.cn> mlxsw: fix refcount leak in mlxsw_sp_port_lag_join() Guangshuo Li <lgs201920130244(a)gmail.com> smb: client: fix overflow in passthrough ioctl bounds check Anas Khan <anxkhn28(a)gmail.com> drm/xe: remove duplicate <kunit/test-bug.h> include Harman Kalra <hkalra(a)marvell.com> octeontx2-af: fix VF bringup affecting PF promiscuous state Li RongQing <lirongqing(a)baidu.com> net/mlx5: Fix L3 tunnel entropy refcount leak Wang Yan <wangyan01(a)kylinos.cn> selftests/net: fix EVP_MD_CTX leak in tcp_mmap Timur Tabi <ttabi(a)nvidia.com> regulator: core: regulator_lock_two() should test for EDEADLK not EDEADLOCK Cao Guanghui <caoguanghui(a)kylinos.cn> dm era: fix NULL pointer dereference in metadata_open() Chuck Lever <chuck.lever(a)oracle.com> SUNRPC: pin upper rpc_clnt across the TLS connect_worker Chuck Lever <chuck.lever(a)oracle.com> SUNRPC: release lower rpc_clnt if killed waiting for XPRT_LOCKED Guangshuo Li <lgs201920130244(a)gmail.com> cifs: validate DFS referral string offsets Rongguang Wei <weirongguang(a)kylinos.cn> s390/zcrypt: Remove the empty file Julian Anastasov <ja(a)ssi.bg> ipvs: ensure inner headers in ICMP errors are in headroom Yizhou Zhao <zhaoyz24(a)mails.tsinghua.edu.cn> ipvs: fix PMTU for GUE/GRE tunnel ICMP errors Yizhou Zhao <zhaoyz24(a)mails.tsinghua.edu.cn> ipvs: use parsed transport offset in TCP state lookup Yizhou Zhao <zhaoyz24(a)mails.tsinghua.edu.cn> ipvs: pass parsed transport offset to state handlers Tamaki Yanagawa <ty(a)000ty.net> netfilter: nft_lookup: fix catchall element handling with inverted lookups Eric Dumazet <edumazet(a)google.com> ipv6: mcast: Fix potential UAF in MLD delayed work Kuniyuki Iwashima <kuniyu(a)google.com> ipv6: mcast: Replace locking comments with lockdep annotations. Eric Dumazet <edumazet(a)google.com> ipv4: igmp: Fix potential UAF in igmp_gq_start_timer() Rosen Penev <rosenp(a)gmail.com> gpio: mvebu: free generic chips on unbind Sandipan Das <sandipan.das(a)amd.com> perf/x86/amd/core: Avoid enabling BRS from the SVM reload path Suman Ghosh <sumang(a)marvell.com> octeontx2-pf: check DMAC extraction support before filtering Samuel Moelius <sam.moelius(a)trailofbits.com> net/sched: cake: reject overhead values that underflow length Maíra Canal <mcanal(a)igalia.com> drm/v3d: Reject invalid indirect BO handle in indirect CSD setup Enrico Pozzobon <enrico.pozzobon(a)dissecto.com> net: usb: lan78xx: disable VLAN filter in promiscuous mode Oleksij Rempel <o.rempel(a)pengutronix.de> net: usb: lan78xx: move functions to avoid forward definitions Chuck Lever <chuck.lever(a)oracle.com> net/tls: Consume empty data records in tls_sw_read_sock() Hui Wang <hui.wang(a)canonical.com> ring-buffer: Fix event length with forced 8-byte alignment Weiming Shi <bestswngs(a)gmail.com> Bluetooth: bpa10x: avoid OOB read of revision string in bpa10x_setup() Pauli Virtanen <pav(a)iki.fi> Bluetooth: ISO: exclude RFU bits from ISO_SDU_Length Cen Zhang <zzzccc427(a)gmail.com> Bluetooth: MGMT: Fix adv monitor add failure cleanup Cen Zhang <zzzccc427(a)gmail.com> Bluetooth: 6lowpan: hold L2CAP conn across debugfs control Eric Dumazet <edumazet(a)google.com> amt: fix size calculation in amt_get_size() Xiang Mei <xmei5(a)asu.edu> net/smc: fix UAF in smc_cdc_rx_handler() by pinning the socket Jamal Hadi Salim <jhs(a)mojatatu.com> net/sched: act_pedit: fix TOCTOU heap OOB write in tc offload Xiang Mei <xmei5(a)asu.edu> net: qualcomm: rmnet: validate MAP frame length before ingress parsing Shigeru Yoshida <syoshida(a)redhat.com> qede: fix off-by-one in BD ring consumption on build_skb failure Jens Emil Schulz Østergaard <jensemil.schulzostergaard(a)microchip.com> net: microchip: vcap: fix races on the shared Super VCAP block Feng Liu <feliu(a)nvidia.com> net/mlx5e: Fix HV VHCA stats agent registration race Feng Liu <feliu(a)nvidia.com> net/mlx5e: Fix HV VHCA stats zero-sized buffer allocation Shay Drory <shayd(a)nvidia.com> net/mlx5: LAG, MPESW, Fix missing complete() on devcom error Wyatt Feng <bronzed_45_vested(a)icloud.com> netfilter: xt_connmark: reject invalid shift parameters Zhixing Chen <running910(a)gmail.com> netfilter: ip6tables: mark malformed IPv6 extension headers for hotdrop Feng Wu <wufengwufengwufeng(a)gmail.com> netfilter: xt_rateest: fix u64 truncation in xt_rateest_mt() Wyatt Feng <bronzed_45_vested(a)icloud.com> netfilter: xt_u32: reject invalid shift counts Qihang <q.h.hack.winter(a)gmail.com> gue: validate REMCSUM private option length Xiang Mei <xmei5(a)asu.edu> net: usb: net1080: validate packet_len before pad-byte access in rx_fixup Yiyang Chen <chenyy23(a)mails.tsinghua.edu.cn> selftests/hid: Cover hid_bpf_get_data() size overflow Yiyang Chen <chenyy23(a)mails.tsinghua.edu.cn> selftests/hid: Load only requested struct_ops maps Yiyang Chen <chenyy23(a)mails.tsinghua.edu.cn> HID: bpf: Fix hid_bpf_get_data() range check Anshuman Khandual <anshuman.khandual(a)arm.com> arm64/mm: Optimize TLB flush in unmap_hotplug_[pmd|pud]_range() Lee Jones <lee(a)kernel.org> HID: core: Fix OOB read in hid_get_report for numbered reports Georgiy Osokin <g.osokin(a)auroraos.dev> HID: picolcd: prevent NULL pointer dereference in picolcd_send_and_wait() Karuna Ramkumar <rkaruna(a)google.com> ata: libata-scsi: limit simulated SCSI command copy to response length Myeonghun Pak <mhun512(a)gmail.com> ata: sata_gemini: unwind clocks on IDE pinctrl errors David Howells <dhowells(a)redhat.com> cifs: Fix missing credit release on failure in cifs_issue_read() David Howells <dhowells(a)redhat.com> netfs: Drop the error arg from netfs_read_subreq_terminated() Michal Wajdeczko <michal.wajdeczko(a)intel.com> drm/xe/pf: Don't attempt to process FAST_REQ or EVENT relays Shuicheng Lin <shuicheng.lin(a)intel.com> drm/xe/hw_engine: Fix double-free of managed BO in error path Francois Dugast <francois.dugast(a)intel.com> drm/xe/pt: Fix NULL pointer dereference in xe_pt_zap_ptes_entry() David Howells <dhowells(a)redhat.com> netfs: Fix writeback error handling Amir Goldstein <amir73il(a)gmail.com> ovl: fix comment about locking order Michael Bommarito <michael.bommarito(a)gmail.com> minix: avoid overflow in bitmap block count calculation David Howells <dhowells(a)redhat.com> afs: Fix unchecked-length string display in debug statement David Howells <dhowells(a)redhat.com> afs: Fix the volume AFS_VOLUME_RM_TREE is set on David Howells <dhowells(a)redhat.com> afs: Fix vllist leak David Howells <dhowells(a)redhat.com> afs: Fix missing NULL pointer check in afs_break_some_callbacks() David Howells <dhowells(a)redhat.com> afs: Fix callback service message parsers to pass through -EAGAIN David Howells <dhowells(a)redhat.com> afs: Fix misplaced inc of net->cells_outstanding David Howells <dhowells(a)redhat.com> afs: Change dynroot to create contents on demand David Howells <dhowells(a)redhat.com> afs: Remove the "autocell" mount option David Howells <dhowells(a)redhat.com> afs: Fix afs_atcell_get_link() to handle RCU pathwalk David Howells <dhowells(a)redhat.com> afs: Make /afs/@cell and /afs/.@cell symlinks David Howells <dhowells(a)redhat.com> afs: Add rootcell checks David Howells <dhowells(a)redhat.com> afs: Make /afs/.<cell> as well as /afs/<cell> mountpoints Li RongQing <lirongqing(a)baidu.com> afs: Remove erroneous seq |= 1 in volume lookup loop Zilin Guan <zilin(a)seu.edu.cn> afs: use kvfree() to free memory allocated by kvcalloc() David Howells <dhowells(a)redhat.com> afs: Fix double netfs initialisation in afs_root_iget() Dan Carpenter <error27(a)gmail.com> afs: Fix error code in afs_extract_vl_addrs() Christian Brauner <brauner(a)kernel.org> fs: refuse O_TMPFILE creation with an unmapped fsuid or fsgid Samuel Moelius <sam.moelius(a)trailofbits.com> net/sched: hhf: clear heavy-hitter state on reset Viacheslav Bocharov <v(a)baodeep.com> pinctrl: meson: restore non-sleeping GPIO access Vladimir Zapolskiy <vz(a)kernel.org> gpio: timberdale: Return -ENOMEM on dynamic memory allocation in probe Gil Portnoy <dddhkts1(a)gmail.com> ksmbd: fix use-after-free of fp->owner.name in durable handle owner check Haofeng Li <lihaofeng(a)kylinos.cn> ksmbd: reject undersized DACLs before parsing ACEs Sechang Lim <rhkrqnwk98(a)gmail.com> net/sched: act_bpf: use rcu_dereference_bh() to read the filter Gleb Markov <markov.gi(a)npc-ksb.ru> cxgb4: Fix decode strings dump for T6 adapters Longjun Tang <tanglongjun(a)kylinos.cn> virtio_net: disable cb when NAPI is busy-polled Qingshuang Fu <fuqingshuang(a)kylinos.cn> irqchip/ts4800: Fix missing chained handler cleanup on remove Yuho Choi <dbgh9129(a)gmail.com> irqchip/gic-v3-its: Fix OF node reference leak Martin Kaiser <martin(a)kaiser.cx> tracing: eprobe: read the complete FILTER_PTR_STRING pointer Masami Hiramatsu (Google) <mhiramat(a)kernel.org> tracing/events: Fix to check the simple_tsk_fn creation Boris Brezillon <boris.brezillon(a)collabora.com> drm/panthor: Interrupt group start/resumption if group_bind_locked() fails Boris Brezillon <boris.brezillon(a)collabora.com> drm/panthor: Fix a leak when a group is evicted before the tiler OOM is serviced Boris Brezillon <boris.brezillon(a)collabora.com> drm/panthor: Don't overrule pending immediate ticks in sched_resume_tick() Boris Brezillon <boris.brezillon(a)collabora.com> drm/panthor: Fix potential invalid pointer deref in group_process_tiler_oom() Ido Schimmel <idosch(a)nvidia.com> bridge: stp: Fix a potential use-after-free when deleting a bridge Jamal Hadi Salim <jhs(a)mojatatu.com> net/sched: sch_teql: Introduce slaves_lock to avoid race condition and UAF Rosen Penev <rosenp(a)gmail.com> net: gianfar: dispose irq mappings on probe failure and device removal Petr Wozniak <petr.wozniak(a)gmail.com> net: phy: sfp: free mii_bus in sfp_i2c_mdiobus_destroy Xiang Mei <xmei5(a)asu.edu> usbnet: gl620a: fix out-of-bounds read in genelink_rx_fixup() Pengfei Zhang <zhangfeionline(a)gmail.com> ipv6: fib6: fix NULL deref in fib6_walk_continue() on multi-batch dump Guenter Roeck <linux(a)roeck-us.net> hwmon: (aspeed-g6-pwm-tach) Guard fan RPM calculation against divide-by-zero Guenter Roeck <linux(a)roeck-us.net> hwmon: (pmbus) Fix passing events to regulator core Matti Vaittinen <mazziesaccount(a)gmail.com> hwmon: adm1275: Prevent reading uninitialized stack Luca Weiss <luca.weiss(a)fairphone.com> ASoC: codecs: lpass-va-macro: Fix LPASS Codec Version for SC7280 Srinivas Kandagatla <srinivas.kandagatla(a)oss.qualcomm.com> ASoC: codecs: lpass-va-macro: add SM6115 compatible Maciej W. Rozycki <macro(a)orcam.me.uk> MIPS: DEC: Ensure RTC platform device deregistration upon failure Yousef Alhouseen <alhouseenyousef(a)gmail.com> sctp: fix SCTP_RESET_STREAMS stream list length limit Wei Fang <wei.fang(a)nxp.com> net: enetc: check the number of BDs needed for xdp_frame Matvey Kovalev <matvey.kovalev(a)ispras.ru> qede: fix out-of-bounds check for cqe->len_list[] Nuoqi Gui <gnq25(a)mails.tsinghua.edu.cn> seg6: validate SRH length before reading fixed fields Pengpeng Hou <pengpeng(a)iscas.ac.cn> gpio: htc-egpio: use managed gpiochip registration Pengpeng Hou <pengpeng(a)iscas.ac.cn> gpio: mvebu: fail probe if gpiochip registration fails Pengpeng Hou <pengpeng(a)iscas.ac.cn> spi: sh-msiof: abort transfers when reset times out Martin Kaiser <martin(a)kaiser.cx> tracing: probes: fix typo in a log message Shuaisong Yang <yangshuaisong(a)h-partners.com> net: hns3: differentiate autoneg default values between copper and fiber Shuaisong Yang <yangshuaisong(a)h-partners.com> net: hns3: fix permanent link down deadlock after reset Shuaisong Yang <yangshuaisong(a)h-partners.com> net: hns3: refactor MAC autoneg and speed configuration Shuaisong Yang <yangshuaisong(a)h-partners.com> net: hns3: unify copper port ksettings configuration path Peiyang Wang <wangpeiyang1(a)huawei.com> net: hns3: clear hns alarm: comparison of integer expressions of different signedness Jijie Shao <shaojijie(a)huawei.com> net: hns3: use hns3_get_ops() helper to reduce the unnecessary middle layer conversion Jijie Shao <shaojijie(a)huawei.com> net: hns3: use hns3_get_ae_dev() helper to reduce the unnecessary middle layer conversion Jian Shen <shenjian15(a)huawei.com> net: hns3: use string choices helper Rosen Penev <rosenp(a)gmail.com> net: hisilicon: hns3: use ethtool string helpers Rob Herring (Arm) <robh(a)kernel.org> dt-bindings: net: renesas,ether: Drop example "ethernet-phy-ieee802.3-c22" fallback Eric Dumazet <edumazet(a)google.com> net: udp_tunnel: prevent double queueing in udp_tunnel_nic_device_sync Stanislav Fomichev <stfomichev(a)gmail.com> udp_tunnel: remove rtnl_lock dependency Shengjiu Wang <shengjiu.wang(a)nxp.com> ASoC: fsl_asrc_dma: fix eDMA maxburst misalignment with channel count Shitalkumar Gandhi <shital.gandhi45(a)gmail.com> net: ethernet: sunplus: spl2sw: fix phy_node refcount leak in remove Ruoyu Wang <ruoyuw560(a)gmail.com> net: sungem: fix probe error cleanup Yun Zhou <yun.zhou(a)windriver.com> net: mvneta: re-enable percpu interrupt on resume Subbaraya Sundeep <sbhatta(a)marvell.com> octeontx2-af: Validate NIX maximum LFs correctly David Yang <mmyangfl(a)gmail.com> net: dsa: realtek: fix memory leak in rtl8366rb_setup_led() Haoxiang Li <haoxiang_li2024(a)163.com> rtc: cmos: unregister HPET IRQ handler on probe failure Fredrik M Olsson <fredrik.m.olsson(a)axis.com> rtc: ds1307: Fix off-by-one issue with wday for rx8130 Huiwen He <hehuiwen(a)kylinos.cn> smb/client: preserve errors from smb2_set_sparse() Li RongQing <lirongqing(a)baidu.com> ACPI: processor_idle: Mark LPI enter functions as __cpuidle Rafael J. Wysocki <rafael.j.wysocki(a)intel.com> thermal: testing: zone: Flush work items during cleanup Fernando Fernandez Mancera <fmancera(a)suse.de> ipv6: fix missing notification for ignore_routes_with_linkdown Kuniyuki Iwashima <kuniyu(a)amazon.com> ipv6: Convert net.ipv6.conf.${DEV}.XXX sysctl to per-netns RTNL. Kuniyuki Iwashima <kuniyu(a)amazon.com> ipv6: Add __in6_dev_get_rtnl_net(). Kuniyuki Iwashima <kuniyu(a)amazon.com> rtnetlink: Define rtnl_net_trylock(). Kuniyuki Iwashima <kuniyu(a)amazon.com> rtnetlink: Add assertion helpers for per-netns RTNL. Kuniyuki Iwashima <kuniyu(a)amazon.com> rtnetlink: Add per-netns RTNL. Fernando Fernandez Mancera <fmancera(a)suse.de> ipv6: fix error handling in disable_policy sysctl Fernando Fernandez Mancera <fmancera(a)suse.de> ipv6: fix error handling in forwarding sysctl Fernando Fernandez Mancera <fmancera(a)suse.de> ipv6: fix error handling in ignore_routes_with_linkdown sysctl Fernando Fernandez Mancera <fmancera(a)suse.de> ipv6: fix error handling in disable_ipv6 sysctl Jamal Hadi Salim <jhs(a)mojatatu.com> net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle Eric Dumazet <edumazet(a)google.com> veth: fix NAPI leak in XDP enable error path Aleksandrova Alyona <aga(a)itb.spb.ru> net: dsa: sja1105: round up PTP perout pin duration Xiang Mei <xmei5(a)asu.edu> net, bpf: check master for NULL in xdp_master_redirect() Krzysztof Wilczyński <kwilczynski(a)kernel.org> alpha/PCI: Fix __pci_mmap_fits() overflow for zero-length BARs Krzysztof Wilczyński <kwilczynski(a)kernel.org> alpha/PCI: Add security_locked_down() check to pci_mmap_resource() Koichiro Den <den(a)valinux.co.jp> NTB: epf: Fix doorbell bitmask and IRQ vector handling Koichiro Den <den(a)valinux.co.jp> NTB: epf: Report 0-based doorbell vector via ntb_db_event() Koichiro Den <den(a)valinux.co.jp> NTB: epf: Make db_valid_mask cover only real doorbell bits Qingshuang Fu <fuqingshuang(a)kylinos.cn> gpio: davinci: fix IRQ domain leak on devm_kzalloc failure Florian Westphal <fw(a)strlen.de> netfilter: nft_compat: ebtables emulation must reject non-bridge targets Runyu Xiao <runyu.xiao(a)seu.edu.cn> netfilter: nft_synproxy: stop bypassing the priv->info snapshot Fernando Fernandez Mancera <fmancera(a)suse.de> netfilter: nf_conncount: prevent connlimit drops for early confirmed ct Mathias Krause <minipli(a)grsecurity.net> netfilter: nf_nat: avoid invalid nat_net pointer use on failed nf_nat_init() Bradley Morgan <include(a)grrlz.net> bpf: Disable xfrm_decode_session hook attachment Chen Cheng <chencheng(a)fnnas.com> md/raid5: avoid R5_Overlap races while breaking stripe batches Chen Cheng <chencheng(a)fnnas.com> md/raid5: use stripe state snapshot in break_stripe_batch_list() Kuniyuki Iwashima <kuniyu(a)google.com> ipv4: fib: Don't ignore error route in local/main tables. Jakub Kicinski <kuba(a)kernel.org> eth: bnxt: improve the timing of stats Jakub Kicinski <kuba(a)kernel.org> eth: bnxt: rename ring_err_stats -> ring_drv_stats Jakub Kicinski <kuba(a)kernel.org> eth: bnxt: gather and report HW-GRO stats Rosen Penev <rosenp(a)gmail.com> net: bnxt: use ethtool string helpers Xiang Mei <xmei5(a)asu.edu> ipv6: Fix null-ptr-deref in fib6_nh_mtu_change(). Gil Portnoy <dddhkts1(a)gmail.com> ksmbd: fix use-after-free of conn->preauth_info in concurrent SMB2 NEGOTIATE Stepan Ionichev <sozdayvek(a)gmail.com> rtc: msc313: fix NULL deref in shared IRQ handler at probe Mohamed Khalfella <mkhalfella(a)purestorage.com> i40e: Fix i40e_debug() to use struct i40e_hw argument ZhaoJinming <zhaojinming(a)uniontech.com> ice: dpll: fix memory leak in ice_dpll_init_info error paths ZhaoJinming <zhaojinming(a)uniontech.com> ice: dpll: set pointers to NULL after kfree in ice_dpll_deinit_info Marcin Szycik <marcin.szycik(a)intel.com> ice: call netif_keep_dst() once when entering switchdev mode Lukasz Czapnik <lukasz.czapnik(a)intel.com> ice: fix AQ error code comparison in ice_set_pauseparam() Dawid Osuchowski <dawid.osuchowski(a)linux.intel.com> ice: fix FDIR CTRL VSI resource leak in ice_reset_all_vfs() Manivannan Sadhasivam <manivannan.sadhasivam(a)oss.qualcomm.com> PCI: endpoint: pci-epf-ntb: Add check to detect 'db_count' value of 0 Manivannan Sadhasivam <manivannan.sadhasivam(a)oss.qualcomm.com> PCI: endpoint: pci-epf-vntb: Add check to detect 'db_count' value of 0 Xiang Mei <xmei5(a)asu.edu> drm/edid: fix OOB read in drm_parse_tiled_block() Bartosz Golaszewski <bartosz.golaszewski(a)oss.qualcomm.com> power: sequencing: fix ABBA deadlock in pwrseq_device_unregister() Amery Hung <ameryhung(a)gmail.com> bpf: Fix effective prog array index with BPF_F_PREORDER Avinash Duduskar <avinash.duduskar(a)gmail.com> bpf: zero-initialize the fib lookup flow struct Yichong Chen <chenyichong(a)uniontech.com> bpftool: Fix vmlinux BTF leak in cgroup commands Nuoqi Gui <gnq25(a)mails.tsinghua.edu.cn> bpf: Fix stack slot index in nospec checks Ronan Dalton <ronan.dalton(a)alliedtelesis.co.nz> rtc: ds1307: handle oscillator stop flag for ds1337/ds1339/ds3231 Antoni Pokusinski <apokusinski01(a)gmail.com> rtc: abx80x: fix the RTC_VL_CLR clearing all status flags Ioana Ciornei <ioana.ciornei(a)nxp.com> dpaa2-switch: do not accept VLAN uppers while bridged Weiming Shi <bestswngs(a)gmail.com> ipv6: ndisc: fix NULL deref in accept_untracked_na() Michael Bommarito <michael.bommarito(a)gmail.com> net/sched: act_ct: fix nf_connlabels leak on two error paths Geetha sowjanya <gakula(a)marvell.com> octeontx2-pf: mcs: Fix mcs resources free on PF shutdown Subbaraya Sundeep <sbhatta(a)marvell.com> octeontx2-pf: Clear stats of all resources when freeing resources Geetha sowjanya <gakula(a)marvell.com> octeontx2-af: mcs: Fix unsupported secy stats read Wayen Yan <win847(a)gmail.com> net: ethernet: mtk_ppe: Fix rhashtable leak in mtk_ppe_init error paths Weiming Shi <bestswngs(a)gmail.com> tipc: fix use-after-free of the discoverer in tipc_disc_rcv() Ruoyu Wang <ruoyuw560(a)gmail.com> net: marvell: prestera: initialize err in prestera_port_sfp_bind Aboorva Devarajan <aboorvad(a)linux.ibm.com> selftests/mm: fix exclusive_cow test fork() handling Sayali Patil <sayalip(a)linux.ibm.com> selftests/mm: allow PUD-level entries in compound testcase of hmm tests Sayali Patil <sayalip(a)linux.ibm.com> selftests/mm: clarify alternate unmapping in compaction_test Sayali Patil <sayalip(a)linux.ibm.com> selftests/mm: ensure destination is hugetlb-backed in hugetlb-mremap Sayali Patil <sayalip(a)linux.ibm.com> selftest/mm: register existing mapping with userfaultfd in hugetlb-mremap Sayali Patil <sayalip(a)linux.ibm.com> selftests/mm: restore default nr_hugepages value via exit trap in charge_reserved_hugetlb.sh Bhargav Joshi <j.bhargav.u(a)gmail.com> irqchip/crossbar: Fix parent domain resource leak Sebastian Andrzej Siewior <bigeasy(a)linutronix.de> mailbox: imx: Forward the timeout/ error in imx_mu_generic_tx() Florian Westphal <fw(a)strlen.de> netfilter: nft_meta_bridge: fix NFT_META_BRI_IIFPVID stack leak Florian Westphal <fw(a)strlen.de> netfilter: nf_reject: skip iphdr options when looking for icmp header Jozsef Kadlecsik <kadlec(a)netfilter.org> netfilter: ipset: make sure gc is properly stopped Jozsef Kadlecsik <kadlec(a)netfilter.org> netfilter: ipset: fix order of kfree_rcu() and rcu_assign_pointer() Jozsef Kadlecsik <kadlec(a)netfilter.org> netfilter: ipset: Don't use test_bit() in lockless RCU readers in hash types Jozsef Kadlecsik <kadlec(a)netfilter.org> netfilter: ipset: annotate "pos" for concurrent readers/writers Jozsef Kadlecsik <kadlec(a)netfilter.org> netfilter: ipset: Fix data race between add and dump in all hash types Abd-Alrhman Masalkhi <abd.masalkhi(a)gmail.com> md/raid1: free r1_bio when REQ_NOWAIT is set and read would block on retry Robertus Diawan Chris <robertusdchris(a)gmail.com> mac802154: Prevent overwrite return code in mac802154_perform_association() Aleksandr Nogikh <nogikh(a)google.com> ieee802154: fix kernel-infoleak in dgram_recvmsg() Ivan Abramov <i.abramov(a)mt-integration.ru> ieee802154: Remove WARN_ON() in cfg802154_pernet_exit() Xu Rao <raoxu(a)uniontech.com> ACPI: IPMI: Fix inverted interface check in ipmi_bmc_gone() Andy Shevchenko <andriy.shevchenko(a)linux.intel.com> ACPI: resource: Amend kernel-doc style Ricardo Neri <ricardo.neri-calderon(a)linux.intel.com> thermal: intel: Fix dangling resources on thermal_throttle_online() failure Breno Leitao <leitao(a)debian.org> arm64/hw_breakpoint: reject unaligned watchpoints that would truncate BAS Cen Zhang <zzzccc427(a)gmail.com> ALSA: usb-audio: Kill MIDI 2.0 URBs before freeing endpoints Yun Zhou <yun.zhou(a)windriver.com> flow_dissector: check device type before reading ETH_ADDRS Cosmin Ratiu <cratiu(a)nvidia.com> devlink: Fix parent ref leak in devl_rate_node_create() Ioana Ciornei <ioana.ciornei(a)nxp.com> dpaa2-switch: fix VLAN upper check not rejecting bridge join Xiang Mei <xmei5(a)asu.edu> virtio-net: fix len check in receive_big() Quang Nguyen <quang.nguyen.wx(a)renesas.com> spi: rpc-if: Use correct device for hardware reinitialization on resume Mark Tomlinson <mark.tomlinson(a)alliedtelesis.co.nz> PCI: iproc: Restore .map_irq() for the platform bus driver Xin Long <lucien.xin(a)gmail.com> sctp: hold socket lock when dumping endpoints in sctp_diag Jakub Kicinski <kuba(a)kernel.org> net: psample: fix info leak in PSAMPLE_ATTR_DATA Ratheesh Kannoth <rkannoth(a)marvell.com> octeontx2-pf: Fix leak of SQ timestamp buffer on teardown Thadeu Lima de Souza Cascardo <cascardo(a)igalia.com> drm/amdgpu: initialize irq.lock spinlock earlier Mario Limonciello <mario.limonciello(a)amd.com> drm/amdkfd: fix list_del corruption in kfd_criu_resume_svm Yunxiang Li <Yunxiang.Li(a)amd.com> drm/amdkfd: Avoid double-unpin of DOORBELL/MMIO BOs on free Sen Wang <sen(a)ti.com> ASoC: tlv320aic3x: restrict CLKDIV bypass Q values in dual-rate mode Eric Dumazet <edumazet(a)google.com> xfrm: validate selector family and prefixlen during match Eric Dumazet <edumazet(a)google.com> xfrm: annotate data-races around xfrm_policy_count[] and xfrm_policy_default[] Herbert Xu <herbert(a)gondor.apana.org.au> xfrm: Fix xfrm state cache insertion race Jisheng Zhang <jszhang(a)kernel.org> spi: dw: fix wrong BAUDR setting after resume Guangshuo Li <lgs201920130244(a)gmail.com> drm/i915: clear CRTC color blob pointers after dropping refs Pengpeng Hou <pengpeng(a)iscas.ac.cn> gpio: mlxbf3: fail probe if gpiochip registration fails Pengpeng Hou <pengpeng(a)iscas.ac.cn> sparc: led: avoid trimming a newline from empty writes John Johansen <john.johansen(a)canonical.com> apparmor: fix label can not be immediately before a declaration Adrian Hunter <adrian.hunter(a)intel.com> i3c: master: Prevent reuse of dynamic address on device add failure Adrian Hunter <adrian.hunter(a)intel.com> i3c: master: Make hot-join workqueue freezable to block hot-join during suspend Marco Crivellari <marco.crivellari(a)suse.com> i3c: master: add WQ_PERCPU to alloc_workqueue users Marco Crivellari <marco.crivellari(a)suse.com> workqueue: Add new WQ_PERCPU flag Zygmunt Krynicki <me(a)zygoon.pl> apparmor: put secmark label after secid lookup Zygmunt Krynicki <me(a)zygoon.pl> apparmor: aa_getprocattr free procattr leak on format failure Georgia Garcia <georgia.garcia(a)canonical.com> apparmor: remove or add symlinks to rawdata according to export_binary Maxime Bélair <maxime.belair(a)canonical.com> apparmor: fix potential UAF in aa_replace_profiles Ryan Lee <ryan.lee(a)canonical.com> apparmor: grab ns lock and refresh when looking up changehat child profiles John Johansen <john.johansen(a)canonical.com> apparmor: fix rawdata_f_data implicit flex array Zygmunt Krynicki <me(a)zygoon.pl> apparmor: aa_label_alloc use aa_label_free on alloc failure Ruoyu Wang <ruoyuw560(a)gmail.com> apparmor: check label build before no_new_privs test Andrew Morton <akpm(a)linux-foundation.org> security/apparmor/apparmorfs.c: conditionally compile get_loaddata_common_ref() Yuanhe Shu <xiangzao(a)linux.alibaba.com> Revert "PCI/MSI: Unmap MSI-X region on error" Manivannan Sadhasivam <manivannan.sadhasivam(a)oss.qualcomm.com> PCI: mediatek: Use actual physical address instead of virt_to_phys() Ryder Lee <ryder.lee(a)mediatek.com> PCI: mediatek: Fix possible truncation in mtk_pcie_parse_port() Arnaldo Carvalho de Melo <acme(a)redhat.com> tools lib api: Fix mount_overload() snprintf truncation and toupper range Arnaldo Carvalho de Melo <acme(a)redhat.com> tools lib api: Fix filename__write_int() writing uninitialized stack data Arnaldo Carvalho de Melo <acme(a)redhat.com> tools lib api: Fix missing null termination in filename__read_int/ull() Chuck Lever <chuck.lever(a)oracle.com> xprtrdma: Return sendctx slot after Send preparation failure Chuck Lever <chuck.lever(a)oracle.com> xprtrdma: Repost Receive buffers for malformed replies Chuck Lever <chuck.lever(a)oracle.com> xprtrdma: Sanitize the reply credit grant after parsing Chris Mason <clm(a)meta.com> xprtrdma: Fix bcall rep leak and unbounded peek Chuck Lever <chuck.lever(a)oracle.com> xprtrdma: Resize reply buffers before reposting receives Chuck Lever <chuck.lever(a)oracle.com> xprtrdma: Document and assert reply-handler invariants Chuck Lever <chuck.lever(a)oracle.com> xprtrdma: Check frwr_wp_create() during connect Chris Mason <clm(a)meta.com> xprtrdma: Initialize re_id before removal registration Chris Mason <clm(a)meta.com> xprtrdma: Fix ep kref imbalance on ADDR_CHANGE Lad Prabhakar <prabhakar.mahadev-lad.rj(a)bp.renesas.com> PCI: rcar-host: Remove unused LIST_HEAD(res) Jamie Nguyen <jamien(a)nvidia.com> fs/ntfs3: resize log->one_page_buf when adopting on-disk page size Shuvam Pandey <shuvampandey1(a)gmail.com> PCI: meson: Add missing remove callback Shuvam Pandey <shuvampandey1(a)gmail.com> PCI: meson: Propagate devm_add_action_or_reset() failure Li RongQing <lirongqing(a)baidu.com> PCI: mediatek: Fix operator precedence in PCIE_FTS_NUM_L0 macro Yang Erkun <yangerkun(a)huawei.com> nfs: use nfsi->rwsem to protect traversal of the file lock list Mike Snitzer <snitzer(a)kernel.org> NFSv4/flexfiles: honor FF_FLAGS_NO_IO_THRU_MDS in pg_get_mirror_count_write Mike Snitzer <snitzer(a)kernel.org> NFSv4/flexfiles: honor FF_FLAGS_NO_IO_THRU_MDS on fatal DS connect errors Clark Wang <xiaoning.wang(a)nxp.com> nfs: keep PG_UPTODATE clear after read errors in page groups Dai Ngo <dai.ngo(a)oracle.com> NFSv4/pnfs: defer return_range callbacks until after inode unlock Chuck Lever <chuck.lever(a)oracle.com> xprtrdma: Decouple req recycling from RPC completion Chuck Lever <chuck.lever(a)oracle.com> xprtrdma: Use sendctx DMA state for Send signaling Chuck Lever <chuck.lever(a)oracle.com> xprtrdma: Post receive buffers after RPC completion Chuck Lever <chuck.lever(a)oracle.com> xprtrdma: Close lost-wakeup race in xprt_rdma_alloc_slot Chuck Lever <chuck.lever(a)oracle.com> xprtrdma: Avoid 250 ms delay on backlog wakeup Sagi Grimberg <sagi(a)grimberg.me> pNFS/filelayout: fix cheking if a layout is striped Phillip Varney <pbvarney(a)protonmail.com> clk: qcom: a53: Corrected frequency multiplier for 1152MHz Nuno Sá <nuno.sa(a)analog.com> dmaengine: dma-axi-dmac: use DMA pool to manange DMA descriptor Nuno Sá <nuno.sa(a)analog.com> dmaengine: dma-axi-dmac: Properly free struct axi_dmac_desc Nuno Sá <nuno.sa(a)analog.com> dmaengine: Fix possible use after free Icenowy Zheng <zhengxingda(a)iscas.ac.cn> dmaengine: qcom: gpi: set DMA_PRIVATE capability Rui Qi <qirui.001(a)bytedance.com> perf: Fix off-by-one stack buffer overflow in kallsyms__parse() Shengjiu Wang <shengjiu.wang(a)nxp.com> dmaengine: imx-sdma: Refine spba bus searching in probe Xu Rao <raoxu(a)uniontech.com> thunderbolt: debugfs: Fix margining error counter buffer leak Srinivasan Shanmugam <srinivasan.shanmugam(a)amd.com> drm/amd/display: Add missing kdoc for ALLM parameters Jamie Nguyen <jamien(a)nvidia.com> fs/ntfs3: fix mount failure on 64K page-size kernels Konstantin Komarov <almaz.alexandrovich(a)paragon-software.com> fs/ntfs3: add bounds check to run_get_highest_vcn() Rosen Penev <rosenp(a)gmail.com> HID: logitech-hidpp: remove excess kernel-doc member in hidpp_scroll_counter Yuho Choi <dbgh9129(a)gmail.com> clk: at91: keep securam node alive while mapping it Aldo Conte <aldocontelk(a)gmail.com> iio: tcs3472: power down chip on probe failure Sanjay Chitroda <sanjayembeddedse(a)gmail.com> iio: accel: mma8452: handle I2C read error(s) in mma8452_read() Guilherme Ivo Bozi <guilherme.bozi(a)usp.br> iio: adc: xilinx-ams: fix out-of-bounds channel lookup in event handling Joshua Crofts <joshua.crofts1(a)gmail.com> iio: magnetometer: ak8975: fix potential kernel stack memory leak Joshua Crofts <joshua.crofts1(a)gmail.com> iio: light: si1133: prevent race condition on timeout Joshua Crofts <joshua.crofts1(a)gmail.com> iio: light: si1133: reset counter to prevent race condition Shawn Guo <shengchao.guo(a)oss.qualcomm.com> PCI: qcom: Disable ASPM L0s for SA8775P James Kim <james010kim(a)gmail.com> char: tlclk: fix use-after-free in tlclk_cleanup() Seungjin Bae <eeodqql09(a)gmail.com> usb: host: max3421: Reject hub port requests for non-existent ports Seungjin Bae <eeodqql09(a)gmail.com> usb: host: max3421: Fix shift-out-of-bounds in max3421_hub_control() Guangshuo Li <lgs201920130244(a)gmail.com> staging: most: video: avoid double free on video register failure Sergey Senozhatsky <senozhatsky(a)chromium.org> mailbox: mtk-adsp: fix UAF during device teardown Jie Gan <jie.gan(a)oss.qualcomm.com> coresight: Fix source not disabled on idr_alloc_u32 failure Mihai Sain <mihai.sain(a)microchip.com> clk: at91: sam9x7: Fix gmac_gclk clock definition Andy Shevchenko <andriy.shevchenko(a)linux.intel.com> phy: phy-can-transceiver: Check driver match and driver data against NULL Qiang Yu <qiang.yu(a)oss.qualcomm.com> PCI: qcom: Set max OPP before DBI access during resume Sumit Kumar <sumit.kumar(a)oss.qualcomm.com> bus: mhi: ep: Fix potential deadlock in mhi_ep_reset_worker() Hsiu Che Yu <yu.whisper.personal(a)gmail.com> rust: alloc: fix assert in `Vec::reserve` doc test Rong Zhang <i(a)rong.moe> PCI: loongson: Do not ignore downstream devices on external bridges Rafael J. Wysocki <rafael.j.wysocki(a)intel.com> platform/x86: xo15-ebook: Fix wakeup source and GPE handling Rafael J. Wysocki <rafael.j.wysocki(a)intel.com> x86/platform/olpc: xo15: Drop wakeup source on driver removal Guixin Liu <kanie(a)linux.alibaba.com> PCI: Check ROM header and data structure addr before accessing Guixin Liu <kanie(a)linux.alibaba.com> PCI: Introduce named defines for PCI ROM Carlos Bilbao <carlos.bilbao(a)kernel.org> PCI/ASPM: Don't reconfigure ASPM entering low-power state Leo Yan <leo.yan(a)arm.com> coresight: etm4x: Correct TRCVMIDCCTLR1 save and restore Yingchao Deng <yingchao.deng(a)oss.qualcomm.com> coresight: cti: Fix DT filter signals silently ignored Alexandru Hossu <hossu.alexandru(a)gmail.com> staging: nvec: fix use-after-free in nvec_rx_completed() Mario Limonciello <mario.limonciello(a)amd.com> gpiolib: acpi: Only trigger ActiveBoth interrupts on boot Nam Cao <namcao(a)linutronix.de> eventpoll: Fix epoll_wait() report false negative Christian Brauner <brauner(a)kernel.org> eventpoll: rename epi->next and txlist for clarity Christian Brauner <brauner(a)kernel.org> eventpoll: wrap EP_UNACTIVE_PTR in typed sentinel helpers Christian Brauner <brauner(a)kernel.org> eventpoll: extract ep_deliver_event() from ep_send_events() Christian Brauner <brauner(a)kernel.org> eventpoll: split ep_insert() into alloc + register stages Christian Brauner <brauner(a)kernel.org> eventpoll: rename attach_epitem() to ep_attach_file() Christian Brauner <brauner(a)kernel.org> eventpoll: expand top-of-file overview / locking doc Yizhou Zhao <zhaoyz24(a)mails.tsinghua.edu.cn> net/9p: fix race condition on rdma->state in trans_rdma.c Aleksandr Nogikh <nogikh(a)google.com> ocfs2: fix circular locking dependency in ocfs2_dio_end_io_write Charles Keepax <ckeepax(a)opensource.cirrus.com> mfd: cs42l43: Sanity check firmware size Matthew Bystrin <dev.mbstr(a)gmail.com> mfd: rsmu: Fix page register setup Guangshuo Li <lgs201920130244(a)gmail.com> ksmbd: fix use-after-free in same_client_has_lease() Brett Creeley <brett.creeley(a)amd.com> ionic: Fix check in ionic_get_link_ext_stats Selvamani Rajagopal <Selvamani.Rajagopal(a)onsemi.com> net: ethernet: oa_tc6: Remove FCS size in RX frame Selvamani Rajagopal <Selvamani.Rajagopal(a)onsemi.com> net: ethernet: oa_tc6: mdiobus->parent initialized with NULL Wayen.Yan <win847(a)gmail.com> net: airoha: Fix always-true condition in PPE1 queue reservation loop Lorenzo Bianconi <lorenzo(a)kernel.org> net: airoha: Add sched ETS offload support Lorenzo Bianconi <lorenzo(a)kernel.org> net: airoha: Introduce ndo_select_queue callback Eric Dumazet <edumazet(a)google.com> tcp: ipv6: clamp default adverting MSS to avoid GSO_BY_FRAGS (0xFFFF) Eric Dumazet <edumazet(a)google.com> tipc: fix UAF in tipc_l2_send_msg() Gui-Dong Han <hanguidong02(a)gmail.com> KEYS: Use acquire when reading state in keyring search Aboorva Devarajan <aboorvad(a)linux.ibm.com> powerpc/kexec: fix double get_cpu() imbalance in kexec_prepare_cpus Aboorva Devarajan <aboorvad(a)linux.ibm.com> powerpc/powernv: fix preempt count leak in pnv_kexec_wait_secondaries_down Aboorva Devarajan <aboorvad(a)linux.ibm.com> powerpc/perf: fix preempt count underflow in fsl_emb_pmu_del Yadan Fan <ydfan(a)suse.com> MIPS: mm: Fix out-of-bounds write in maar_res_walk() Sechang Lim <rhkrqnwk98(a)gmail.com> bpf, sockmap: fix integer overflow in bpf_msg_pop_data() bounds check Weiming Shi <bestswngs(a)gmail.com> bpf, sockmap: reject overflowing copy + len in bpf_msg_push_data() Al Viro <viro(a)zeniv.linux.org.uk> udf: fix nls leak on udf_fill_super() failure Leon Hwang <leon.hwang(a)linux.dev> bpf: Fix bpf_get/setsockopt to tos for ipv4-mapped ipv6 socket Leo Yan <leo.yan(a)arm.com> selftests/bpf: Initialize operation name before use Jiri Olsa <jolsa(a)kernel.org> selftests/bpf: Fix typo in verify_umulti_link_info Huiwen He <hehuiwen(a)kylinos.cn> smb/client: always return a value for FS_IOC_GETFLAGS Jian Zhang <zhangjian496(a)huawei.com> cifs: remove all cifs files before kill super Takashi Iwai <tiwai(a)suse.de> ALSA: core: Fix unintuitive behavior of snd_power_ref_and_wait() Florian Westphal <fw(a)strlen.de> netfilter: nf_conncount: callers must hold rcu read lock Runyu Xiao <runyu.xiao(a)seu.edu.cn> kcm: use WRITE_ONCE() when changing lower socket callbacks Ovidiu Panait <ovidiu.panait.rb(a)renesas.com> net: bcmgenet: Use weighted round-robin TX DMA arbitration Matthieu Buffet <matthieu(a)buffet.re> landlock: Fix unmarked concurrent access to socket family Grzegorz Nitka <grzegorz.nitka(a)intel.com> dpll: balance create/delete notifications in __dpll_pin_(un)register Grzegorz Nitka <grzegorz.nitka(a)intel.com> dpll: guard sync-pair removal on full pin unregister Grzegorz Nitka <grzegorz.nitka(a)intel.com> dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() Grzegorz Nitka <grzegorz.nitka(a)intel.com> dpll: send delete notification before unregister in on-pin rollback Grzegorz Nitka <grzegorz.nitka(a)intel.com> dpll: fix stale iteration in dpll_pin_on_pin_unregister() Ivan Vecera <ivecera(a)redhat.com> dpll: Enhance and consolidate reference counting logic Ivan Vecera <ivecera(a)redhat.com> dpll: Support dynamic pin index allocation Petr Oros <poros(a)redhat.com> dpll: Add notifier chain for dpll events Ivan Vecera <ivecera(a)redhat.com> dpll: Allow associating dpll pin with a firmware node Arkadiusz Kubalewski <arkadiusz.kubalewski(a)intel.com> dpll: add reference sync get/set Arkadiusz Kubalewski <arkadiusz.kubalewski(a)intel.com> dpll: add reference-sync netlink attribute Ruoyu Wang <ruoyuw560(a)gmail.com> net: wwan: t7xx: check skb_clone in control TX Wentao Guan <guanwentao(a)uniontech.com> net: ethernet: mtk_wed: debugfs: correct index in wed_amsdu_show() Ratheesh Kannoth <rkannoth(a)marvell.com> octeontx2-af: npc: Fix size of entry2cntr_map Dragos Tatulea <dtatulea(a)nvidia.com> net/mlx5: Check max_macs devlink param value against max capability Sun Jian <sun.jian.kdev(a)gmail.com> bpf: Run generic devmap egress prog on private skb Zhi-Jun You <hujy652(a)gmail.com> net: ethernet: mtk_wed: fix loading WO firmware for MT7986 Aditya Garg <gargaditya(a)linux.microsoft.com> net: mana: guard TX wq object destroy with INVALID_MANA_HANDLE check Aditya Garg <gargaditya(a)linux.microsoft.com> net: mana: initialize gdma queue id to INVALID_QUEUE_ID Victor Nogueira <victor(a)mojatatu.com> net/sched: sch_codel: Do not call qdisc_tree_reduce_backlog during peek before restoring qlen Victor Nogueira <victor(a)mojatatu.com> net/sched: sch_fq_codel: Do not call qdisc_tree_reduce_backlog during peek before restoring qlen Chuck Lever <chuck.lever(a)oracle.com> handshake: Require admin permission for DONE command Lucas Tsai <lucas_tsai(a)richtek.com> power: supply: core: fix supplied_from allocations Guangshuo Li <lgs201920130244(a)gmail.com> ASoC: adau1372: Clear PLL_EN on failed PLL lock without reset GPIO Lars Pöschel <lars.poeschel(a)edag.com> spi: xilinx: use FIFO occupancy register to determine buffer size HanQuan <eilaimemedsnaimel(a)gmail.com> ALSA: seq: Fix kernel heap address leak in bounce_error_event() Herbert Xu <herbert(a)gondor.apana.org.au> crypto: rng - Free default RNG on module exit Felix Gu <ustc.gu(a)gmail.com> crypto: cavium/cpt - fix DMA cleanup using wrong loop index Felix Gu <ustc.gu(a)gmail.com> crypto: marvell/octeontx - fix DMA cleanup using wrong loop index Dave Jiang <dave.jiang(a)intel.com> cxl/test: Add check after kzalloc() memory in alloc_mock_res() Dave Jiang <dave.jiang(a)intel.com> cxl/test: Unregister cxl_acpi in cxl_test_init() error path Michael Bommarito <michael.bommarito(a)gmail.com> tipc: reject inverted service ranges from peer bindings Michael Bommarito <michael.bommarito(a)gmail.com> tipc: prevent snt_unacked underflow on CONN_ACK Michael Bommarito <michael.bommarito(a)gmail.com> tipc: require net admin for TIPCv2 netlink mutators Victor Nogueira <victor(a)mojatatu.com> net/sched: sch_hfsc: Don't make class passive twice Samuel Moelius <sam.moelius(a)trailofbits.com> net: pfcp: allocate per-cpu tstats for PFCP netdevs Xin Long <lucien.xin(a)gmail.com> sctp: validate embedded address parameter length Xiang Mei <xmei5(a)asu.edu> bridge: cfm: reject invalid CCM interval at configuration time Kuniyuki Iwashima <kuniyu(a)google.com> net: fib_rules: Don't dump dying fib_rule in fib_rules_dump(). Jamal Hadi Salim <jhs(a)mojatatu.com> net/sched: cls_flow: Dont expose folded kernel pointers George Moussalem <george.moussalem(a)outlook.com> net: dsa: qca8k: fix led devicename when using external mdio bus HyeongJun An <sammiee5311(a)gmail.com> ASoC: tegra: tegra210_ahub: Validate written enum value HyeongJun An <sammiee5311(a)gmail.com> ASoC: fsl: fsl_audmix: Validate written enum values HyeongJun An <sammiee5311(a)gmail.com> ASoC: codecs: hdac_hdmi: Validate written enum value Leon Romanovsky <leon(a)kernel.org> RDMA/mlx5: Release the HW‑provided UAR index rather than the SW one Maher Sanalla <msanalla(a)nvidia.com> RDMA/mlx5: Fix undefined shift of user RQ WQE size Patrisious Haddad <phaddad(a)nvidia.com> RDMA/mlx5: Remove raw RSS QP restrack tracking Patrisious Haddad <phaddad(a)nvidia.com> RDMA/mlx5: Remove DCT restrack tracking Maxwell Doose <m32285159(a)gmail.com> fs: efs: remove unneeded debug prints Samuel Moelius <sam.moelius(a)trailofbits.com> Bluetooth: vhci: validate devcoredump state before side effects Samuel Moelius <sam.moelius(a)trailofbits.com> Bluetooth: hci: validate codec capability element length Zhao Dongdong <zhaodongdong(a)kylinos.cn> Bluetooth: btmtk: fix URB leak in alloc_mtk_intr_urb error path Jordan Walters <jaggyaur(a)gmail.com> Bluetooth: hci_core: Fix UAF in hci_unregister_dev() Weiming Shi <bestswngs(a)gmail.com> Bluetooth: eir: Fix stack OOB write when prepending the Flags AD Zijun Hu <zijun.hu(a)oss.qualcomm.com> Bluetooth: hci_qca: fix NULL pointer dereference in qca_dmp_hdr() for non-serdev device Heiko Carstens <hca(a)linux.ibm.com> s390/process: Fix kernel thread function pointer type Richard Fitzgerald <rf(a)opensource.cirrus.com> ASoC: cs35l56: Fix possible uninitialized value in cs35l56_spi_system_reset() Daniel Borkmann <daniel(a)iogearbox.net> bpf: Tighten cgroup storage cookie checks for prog arrays Giovanni Cabiddu <giovanni.cabiddu(a)intel.com> vfio/qat: fix f_pos race in qat_vf_resume_write() Sergey Shtylyov <s.shtylyov(a)auroraos.dev> of: cpu: add check in __of_find_n_match_cpu_property() Dave Jiang <dave.jiang(a)intel.com> cxl/test: Zero out LSA backing memory to avoid leaking to user Dave Jiang <dave.jiang(a)intel.com> cxl/test: Fix integer overflow in mock LSA bounds checks Yonghong Song <yonghong.song(a)linux.dev> selftests/bpf: Fix bpf_iter/task_vma test Yun Zhou <yun.zhou(a)windriver.com> ext4: validate donor file superblock early in EXT4_IOC_MOVE_EXT Aditya Prakash Srivastava <aditya.ansh182(a)gmail.com> ext4: fix kernel BUG in ext4_write_inline_data_end Louis Scalbert <louis.scalbert(a)6wind.com> bonding: 3ad: fix mux port state on oper down Richard Fitzgerald <rf(a)opensource.cirrus.com> ASoC: cs35l56: Don't leave parent IRQ disabled if system_suspend fails Richard Fitzgerald <rf(a)opensource.cirrus.com> ASoC: cs35l56: Fix missing calls to wm_adsp2_remove() Srujana Challa <schalla(a)marvell.com> vdpa/octeon_ep: Fix PF->VF mailbox data address calculation longlong yan <yanlonglong(a)kylinos.cn> tools/virtio: check mmap return value in vringh_test Qing Ming <a0yami(a)mailbox.org> vhost/net: complete zerocopy ubufs only once Zhang Tianci <zhangtianci.1997(a)bytedance.com> vduse: Requeue failed read to send_list head Filip Hejsek <filip.hejsek(a)gmail.com> virtio_console: read size from config space during device init Qihang Tang <q.h.hack.winter(a)gmail.com> vhost/vdpa: validate virtqueue index in mmap and fault paths Qihang Tang <q.h.hack.winter(a)gmail.com> vduse: hold vduse_lock across IDR lookup in open path Val Packett <val(a)packett.cool> ASoC: codecs: aw88261: fix incorrect masks for boost regs Ruoyu Wang <ruoyuw560(a)gmail.com> spi: meson-spifc: fix runtime PM leak on remove Chuck Lever <chuck.lever(a)oracle.com> NFSD: Handle layout stid in nfsd4_drop_revoked_stid() Jason Gunthorpe <jgg(a)ziepe.ca> IB/mlx4: Fill in the access_flags if IB_MR_REREG_ACCESS is not specified Filipe Manana <fdmanana(a)suse.com> btrfs: fix deadlock cloning inline extent when using flushoncommit Johannes Thumshirn <johannes.thumshirn(a)wdc.com> btrfs: zoned: don't account data relocation space-info in statfs free space Nikita Zhandarovich <n.zhandarovich(a)fintech.ru> hwmon: (it87) Clamp negative values to zero in set_fan() David Laight <david.laight.linux(a)gmail.com> fbdev: sm501fb: Fix buffer errors in OF binding code Filipe Manana <fdmanana(a)suse.com> btrfs: fix invalid pointer dereference in __btrfs_run_delayed_refs() Ryder Lee <ryder.lee(a)mediatek.com> wifi: mt76: mt7996: fix potential tx_retries underflow Ryder Lee <ryder.lee(a)mediatek.com> wifi: mt76: mt7925: fix potential tx_retries underflow Ryder Lee <ryder.lee(a)mediatek.com> wifi: mt76: mt7921: fix potential tx_retries underflow Ryder Lee <ryder.lee(a)mediatek.com> wifi: mt76: mt7915: fix potential tx_retries underflow Bjoern A. Zeeb <bz(a)FreeBSD.org> wifi: mt76: fix argument to ieee80211_is_first_frag() Sean Wang <sean.wang(a)mediatek.com> wifi: mt76: mt792x: skip MLD header rewrite for 802.3 encap TX Sean Wang <sean.wang(a)mediatek.com> wifi: mt76: mt7925: keep TX BA state in the primary WCID Javier Tia <floss(a)jetm.me> wifi: mt76: mt7925: fix stale pointer comparisons in change_vif_links Myeonghun Pak <mhun512(a)gmail.com> wifi: mt76: mt7925: clean up DMA on probe failure Hongyan Xia <hongyan.xia(a)transsion.com> sched/fair: Fix cpu_util runnable_avg arithmetic Wolfram Sang <wsa+renesas(a)sang-engineering.com> hwspinlock: qcom: avoid uninitialized struct members Hui Zhu <zhuhui(a)kylinos.cn> vmalloc: fix NULL pointer dereference in is_vm_area_hugepages() Luca Leonardo Scorcia <l.scorcia(a)gmail.com> pinctrl: mediatek: mt8167: Fix Schmitt trigger register offset of pins 34-39 Luca Leonardo Scorcia <l.scorcia(a)gmail.com> pinctrl: mediatek: mt8516: Fix Schmitt trigger register offset of pins 34-39 Mike Christie <michael.christie(a)oracle.com> scsi: target: Remove tcm_loop target reset handling David Disseldorp <ddiss(a)suse.de> scsi: target: Fix hexadecimal CHAP_I handling Yuho Choi <dbgh9129(a)gmail.com> watchdog: unregister PM notifier on watchdog unregister Al Viro <viro(a)zeniv.linux.org.uk> configfs: fix lockless traversals of ->s_children Dmitry Vyukov <dvyukov(a)google.com> firmware_loader: Fix recursive lock in device_cache_fw_images() Aaron Ma <aaron.ma(a)canonical.com> ASoC: amd: acp-sdw-sof: Bound DAI link iteration Felix Gu <ustc.gu(a)gmail.com> spi: ep93xx: fix double-free of zeropage on DMA setup failure Jason Gunthorpe <jgg(a)ziepe.ca> IB/mlx5: Properly support implicit ODP rereg_mr Jason Gunthorpe <jgg(a)ziepe.ca> IB/mlx5: Don't take the rereg_mr fallback without a new translation Samuel Moelius <sam.moelius(a)trailofbits.com> thermal: testing: reject missing command arguments Pengjie Zhang <zhangpengjie2(a)huawei.com> cpufreq: Documentation: fix conservative governor freq_step description Yuho Choi <dbgh9129(a)gmail.com> ACPI: IPMI: Fix message kref handling on dead device Kyle Zeng <kylebot(a)openai.com> ALSA: seq: Clear variable event pointer on read Rui Qi <qirui.001(a)bytedance.com> riscv: stacktrace: Remove bogus -0x4 offset in non-FP walk_stackframe Hui Wang <hui.wang(a)canonical.com> riscv: cpu_ops: Change return value type of cpu_is_stopped() to bool HyeongJun An <sammiee5311(a)gmail.com> ALSA: seq: Fix partial userptr event expansion Tristan Madani <tristan(a)talencesecurity.com> wifi: wcn36xx: fix OOB read from short trigger BA firmware response Tristan Madani <tristan(a)talencesecurity.com> wifi: wcn36xx: fix OOB read from firmware count in PRINT_REG_INFO indication Tristan Madani <tristan(a)talencesecurity.com> wifi: wcn36xx: fix heap overflow from oversized firmware HAL response Leon Hwang <leon.hwang(a)linux.dev> bpf: Update transport_header when encapsulating UDP tunnel in lwt Leon Hwang <leon.hwang(a)linux.dev> bpf: Check tail zero of bpf_prog_info Bernard Metzler <bernard.metzler(a)linux.dev> RDMA/siw: Fix endpoint/socket association handling Alexander Stein <alexander.stein(a)ew.tq-group.com> arm64: dts: tqma8mpql-mba8mpxl: configure sai clock in audio codec as well Richard Zhu <hongxing.zhu(a)nxp.com> arm64: dts: imx95: Correct PCIe outbound address space configuration Jacob Moroni <jmoroni(a)google.com> RDMA/irdma: Initialize iwmr->access during MR registration Jacob Moroni <jmoroni(a)google.com> RDMA/irdma: Fix OOB read during CQ MR registration Jason Gunthorpe <jgg(a)ziepe.ca> IB/cm: Fix av cm device leak on an error path in cm_init_av_by_path() Pablo Neira Ayuso <pablo(a)netfilter.org> netfilter: conntrack: call nf_ct_gre_keymap_destroy() if master helper is pptp Pablo Neira Ayuso <pablo(a)netfilter.org> netfilter: conntrack: revert ct extension genid infrastructure Fernando Fernandez Mancera <fmancera(a)suse.de> netfilter: synproxy: protect nf_ct_seqadj_init() with conntrack lock Fernando Fernandez Mancera <fmancera(a)suse.de> netfilter: synproxy: fix unaligned memory access in timestamp adjustment Fernando Fernandez Mancera <fmancera(a)suse.de> netfilter: synproxy: adjust duplicate timestamp options Fernando Fernandez Mancera <fmancera(a)suse.de> netfilter: synproxy: drop packets if timestamp adjustment fails Pablo Neira Ayuso <pablo(a)netfilter.org> netfilter: nfnetlink_cthelper: use {READ,WRITE}_ONCE for accessing helper flags Fernando Fernandez Mancera <fmancera(a)suse.de> netfilter: nfnetlink_osf: fix mss parsing on big-endian architectures Joseph Qi <joseph.qi(a)linux.alibaba.com> ocfs2: fix race between ocfs2_control_install_private() and ocfs2_control_release() Zhang Cen <rollkingzzc(a)gmail.com> ocfs2/dlm: require a ref for locking_state debugfs open Zhang Cen <rollkingzzc(a)gmail.com> ocfs2: reject FITRIM ranges shorter than a cluster Dmitry Antipov <dmantipov(a)yandex.ru> ocfs2: fix buffer head management in ocfs2_read_blocks() Zhang Cen <rollkingzzc(a)gmail.com> ocfs2: rebase copied fsdlm LVB pointers in locking_state Alex Deucher <alexander.deucher(a)amd.com> drm/amdkfd: always resume_all after suspend_all Antony Antony <antony.antony(a)secunet.com> xfrm: fix NAT-related field inheritance in SA migration Sandipan Das <sandipan.das(a)amd.com> perf/x86/amd/uncore: Use Node ID to identify DF and UMC domains Zide Chen <zide.chen(a)intel.com> perf/x86/intel/uncore: Fix discovery unit lookup for multi-die systems Sandipan Das <sandipan.das(a)amd.com> perf/x86/amd/core: Always use the NMI latency mitigation Michael S. Tsirkin <mst(a)redhat.com> vhost: fix vhost_get_avail_idx for a non empty ring Woojin Ji <random6.xyz(a)gmail.com> bpftool: Use libbpf error code for flow dissector query Yunxiang Li <Yunxiang.Li(a)amd.com> drm/amdgpu: set sub_block_index for mca ras sub-blocks Al Viro <viro(a)zeniv.linux.org.uk> configfs_lookup(): don't leave ->s_dentry dangling on failure Alexander Potapenko <glider(a)google.com> lib/test_meminit: use && for bools Frederic Weisbecker <frederic(a)kernel.org> tick/sched: Fix TOCTOU in nohz idle time fetch Nathan Chancellor <nathan(a)kernel.org> driver core: Use system_percpu_wq instead of system_wq Guanyou.Chen <chenguanyou9338(a)gmail.com> sched: restore timer_slack_ns when resetting RT policy on fork Danila Chernetsov <listdansp(a)mail.ru> ext2: fix ignored return value of generic_write_sync() Sang-Heon Jeon <ekffu200098(a)gmail.com> mm/fake-numa: fix under-allocation detection in uniform split Deepanshu Kartikey <kartikey406(a)gmail.com> bpf: fix UAF by restoring RCU-delayed inode freeing in bpffs Chanwoo Lee <cw9316.lee(a)samsung.com> scsi: ufs: Fix wrong value printed in unexpected UPIU response case Dan Carpenter <error27(a)gmail.com> scsi: pm8001: Fix error code in non_fatal_log_show() Martin Wilck <martin.wilck(a)suse.com> scsi: Revert "scsi: Fix sas_user_scan() to handle wildcard and multi-channel scans" Alison Schofield <alison.schofield(a)intel.com> nvdimm/btt: Handle preemption in BTT lane acquisition Yuho Choi <dbgh9129(a)gmail.com> ARM: imx31: Fix IIM mapping leak in revision check Bart Van Assche <bvanassche(a)acm.org> ata: libata: Fix ata_exec_internal() J. Neuschäfer <j.ne(a)posteo.net> HID: wiimote: Fix table layout and whitespace errors Yuho Choi <dbgh9129(a)gmail.com> ARM: imx3: Fix CCM node reference leak Chuck Lever <chuck.lever(a)oracle.com> NFSD: Fix delegation reference leak in nfsd4_revoke_states John Madieu <john.madieu.xa(a)bp.renesas.com> ASoC: rsnd: Fix RSND_SOC_MASK width to single nibble Zhang Yi <yi.zhang(a)huawei.com> ext4: fix LOGFLUSH shutdown ordering to allow ordered-mode data writeback Chen Cheng <chencheng(a)fnnas.com> md/raid10: reset read_slot when reusing r10bio for discard Danilo Krummrich <dakr(a)kernel.org> rpmsg: use generic driver_override infrastructure Danilo Krummrich <dakr(a)kernel.org> Drivers: hv: vmbus: use generic driver_override infrastructure Danilo Krummrich <dakr(a)kernel.org> cdx: use generic driver_override infrastructure Danilo Krummrich <dakr(a)kernel.org> amba: use generic driver_override infrastructure Renjiang Han <renjiang.han(a)oss.qualcomm.com> media: qcom: venus: relax encoder frame/blur step size on v6 Renjiang Han <renjiang.han(a)oss.qualcomm.com> media: qcom: venus: relax encoder frame/blur dimension steps on v4 Renjiang Han <renjiang.han(a)oss.qualcomm.com> media: qcom: venus: drop extra padding in NV12 raw size calculation Tristan Madani <tristmd(a)gmail.com> RDMA/rxe: Copy WQE to local buffer in non-SRQ receive path Tristan Madani <tristmd(a)gmail.com> RDMA/rxe: Fix TOCTOU heap overflow in get_srq_wqe zhoumin <teczm(a)foxmail.com> EDAC/{skx_common,skx}: Fix UBSAN shift-out-of-bounds in skx_get_dimm_info Jessica Zhang <jessica.zhang(a)oss.qualcomm.com> drm/msm/dp: Fix the ISR_* enum values Jessica Zhang <jessica.zhang(a)oss.qualcomm.com> drm/msm/dp: fix HPD state status bit shift value Andrea Righi <arighi(a)nvidia.com> sched/deadline: Reject debugfs dl_server writes for offline CPUs Juri Lelli <juri.lelli(a)redhat.com> sched/deadline: Always stop dl-server before changing parameters Herbert Xu <herbert(a)gondor.apana.org.au> crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm Herbert Xu <herbert(a)gondor.apana.org.au> crypto: tegra - Fix dma_free_coherent size error Weili Qian <qianweili(a)huawei.com> crypto: hisilicon/qm - disable error report before flr Tetsuo Handa <penguin-kernel(a)I-love.SAKURA.ne.jp> ocfs2: kill osb->system_file_mutex lock ZhengYuan Huang <gality369(a)gmail.com> ocfs2: don't BUG_ON an invalid journal dinode Dan Carpenter <error27(a)gmail.com> rapidio/tsi721: prevent a bad dereference in tsi721_db_dpc() Davidlohr Bueso <dave(a)stgolabs.net> dax/kmem: account for partial discontiguous resource upon removal Carlos Llamas <cmllamas(a)google.com> libbpf: Fix UAF in strset__add_str() Siddharth Nayyar <sidnayyar(a)google.com> bpftool: Fix typo in struct_ops map FD generation for light skeleton Michael Bommarito <michael.bommarito(a)gmail.com> libbpf: Harden parse_vma_segs() path parsing Timur Tabi <ttabi(a)nvidia.com> drm/nouveau/bios: specify correct display fuse register for Ampere and Ada Mikko Perttunen <mperttunen(a)nvidia.com> drm/tegra: Fix iommu_map_sgtable() return value check Mikko Perttunen <mperttunen(a)nvidia.com> gpu: host1x: Fix iommu_map_sgtable() return value check Felix Gu <ustc.gu(a)gmail.com> drm/tegra: dc: Fix device node reference leak in tegra_dc_has_output() Mikko Perttunen <mperttunen(a)nvidia.com> gpu: host1x: Allow entries in BO caches to be freed Ion Agorria <ion(a)agorria.com> drm/tegra: gr2d/gr3d: Contain PM in the gr*d_probe/gr*d_remove Svyatoslav Ryhel <clamor95(a)gmail.com> drm/tegra: gr2d/gr3d: Initialize address register map before HOST1X client is registered Jiayuan Chen <jiayuan.chen(a)linux.dev> net/sched: cls_bpf: prevent unbounded recursion in offload rollback Eric Dumazet <edumazet(a)google.com> ipv6: guard against possible NULL deref in __in6_dev_stats_get() Breno Leitao <leitao(a)debian.org> workqueue: drop spurious '*' from print_worker_info() fn declaration Nilay Shroff <nilay(a)linux.ibm.com> nvme-multipath: fix flex array size in struct nvme_ns_head Geliang Tang <geliang(a)kernel.org> nvmet-tcp: fix page fragment cache leak in error path Charles Keepax <ckeepax(a)opensource.cirrus.com> pinctrl: cs42l43: Fix polarity on debounce Joey Lu <a0987203069(a)gmail.com> pinctrl: nuvoton: ma35d1: fix MFP register offset and pin table Zhang Cen <rollkingzzc(a)gmail.com> ALSA: seq: midi: Serialize output teardown with event_input Miquel Raynal <miquel.raynal(a)bootlin.com> mtd: spi-nor: Drop duplicate Kconfig dependency Danilo Krummrich <dakr(a)kernel.org> driver core: Guard deferred probe timeout extension with delayed_work_pending() Danilo Krummrich <dakr(a)kernel.org> driver core: Fix missing jiffies conversion in deferred_probe_extend_timeout() Easwar Hariharan <eahariha(a)linux.microsoft.com> jiffies: Define secs_to_jiffies() Rosen Penev <rosenp(a)gmail.com> mips: n64: add __iomem for writel call Rosen Penev <rosenp(a)gmail.com> mips: ralink: mt7621: add missing __iomem Maciej W. Rozycki <macro(a)orcam.me.uk> MIPS: DEC: Remove do_IRQ() call indirection Maciej W. Rozycki <macro(a)orcam.me.uk> MIPS: Fix big-endian stack argument fetching in o32 wrapper Jiakai Xu <xujiakai24(a)mails.ucas.ac.cn> PM: sleep: Use complete() in device_pm_sleep_init() Tao Cui <cuitao(a)kylinos.cn> RDMA/counter: Fix incorrect port index in rdma_counter_init() error cleanup Lianfa Weng <wenglianfa(a)huawei.com> RDMA/hns: Fix log flood after cmd_mbox failure Lianfa Weng <wenglianfa(a)huawei.com> RDMA/hns: Fix warning in poll cq direct mode Guangshuo Li <lgs201920130244(a)gmail.com> IB/mlx4: Fix refcount leak in add_port() error path Zhu Yanjun <yanjun.zhu(a)linux.dev> RDMA/rxe: Fix a use-after-free problem in rxe_mmap Jacob Moroni <jmoroni(a)google.com> RDMA/irdma: Fix out-of-bounds write in irdma_copy_user_pgaddrs Samuel Holland <samuel(a)sholland.org> bus: sunxi-rsb: Always check register address validity Shiraz Saleem <shirazsaleem(a)microsoft.com> RDMA/mana_ib: Use ib_get_eth_speed for reporting port speed Ronaldo Nunez <rnunez(a)baylibre.com> pwm: imx27: Fix variable truncation in .apply() Lifeng Zheng <zhenglifeng1(a)huawei.com> cpufreq: conservative: Simplify frequency limit handling Pengjie Zhang <zhangpengjie2(a)huawei.com> cpufreq: Documentation: fix sampling_down_factor range Saravana Kannan <saravanak(a)google.com> Revert "treewide: Fix probing of devices in DT overlays" Zhang Yuwei <zhangyuwei20(a)huawei.com> driver core: Use mod_delayed_work to prevent lost deferred probe work Stepan Ionichev <sozdayvek(a)gmail.com> device property: fix fwnode reference leak in fwnode_graph_get_endpoint_by_id() Baokun Li <libaokun(a)linux.alibaba.com> writeback: drop now-unnecessary rcu_barrier() in cgroup_writeback_umount() Pengpeng Hou <pengpeng(a)iscas.ac.cn> tracing: Bound synthetic-field strings with seq_buf Harshal Dev <harshal.dev(a)oss.qualcomm.com> arm64: dts: qcom: sm8650: Add power-domain and iface clk for ice node Harshal Dev <harshal.dev(a)oss.qualcomm.com> arm64: dts: qcom: sm8450: Add power-domain and iface clk for ice node Harshal Dev <harshal.dev(a)oss.qualcomm.com> arm64: dts: qcom: kodiak: Add power-domain and iface clk for ice node Harshal Dev <harshal.dev(a)oss.qualcomm.com> arm64: dts: qcom: sc7180: Add power-domain and iface clk for ice node Geert Uytterhoeven <geert+renesas(a)glider.be> firmware: arm_scmi: Fix OOB in scmi_power_name_get() Sven Püschel <s.pueschel(a)pengutronix.de> media: rockchip: rga: fix too small buffer size Eric Dumazet <edumazet(a)google.com> net/sched: sch_drr: annotate data-races around cl->deficit Chen-Yu Tsai <wenst(a)chromium.org> regulator: dt-bindings: mt6359: Drop regulator-name pattern restrictions Randy Dunlap <rdunlap(a)infradead.org> bitops: use common function parameter names Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> sysfs: clamp show() return value in sysfs_kf_read() Sudeep Holla <sudeep.holla(a)kernel.org> firmware: arm_scmi: Read sensor config as 32-bit value Jose A. Perez de Azpillaga <azpijr(a)gmail.com> staging: media: atomisp: fix loop shadowing in ia_css_stream_destroy() Yuho Choi <dbgh9129(a)gmail.com> media: atomisp: gc2235: fix UAF and memory leak Zilin Guan <zilin(a)seu.edu.cn> media: atomisp: Fix memory leak in atomisp_fixed_pattern_table() Kevin Brodsky <kevin.brodsky(a)arm.com> selftests/mm: Fix resv_sz when parsing arm64 signal frame Roman Kvasnytskyi <roman(a)kvasnytskyi.net> selftests/bpf: Reject unsupported -k option in vmtest.sh Liviu Dudau <liviu.dudau(a)arm.com> drm/syncobj: Fix memory leak in drm_syncobj_find_fence() Junxian Huang <huangjunxian6(a)hisilicon.com> RDMA/hns: Initialize seqfile before creating file Sara Venkatesh <sarajvenkatesh(a)gmail.com> RDMA/srpt: fix integer overflow in immediate data length check Prathamesh Deshpande <prathameshdeshpande7(a)gmail.com> RDMA/mlx5: Fix devx subscribe-event unwind NULL dereference Alexander Chesnokov <Alexander.Chesnokov(a)kaspersky.com> RDMA/hns: Fix arithmetic overflow in calc_hem_config() Prathamesh Deshpande <prathameshdeshpande7(a)gmail.com> IB/mlx5: Fix transport-domain rollback and initialize lb mutex earlier Linmao Li <lilinmao(a)kylinos.cn> ipv6: addrconf: bail out of dad_failure when state is no longer POSTDAD Eric Dumazet <edumazet(a)google.com> net/sched: sch_htb: annotate data-races (I) Eric Dumazet <edumazet(a)google.com> net/sched: sch_htb: do not change sch->flags in htb_dump() Qiang Ma <maqianga(a)uniontech.com> spi: hisi-kunpeng: Use dev_err_probe() for host registration failure Sean Christopherson <seanjc(a)google.com> crypto: ccp - Treat zero-length cert chain as query for blob lengths Eric Dumazet <edumazet(a)google.com> net/sched: sch_hfsc: annotate data-races in hfsc_dump_class_stats() Stepan Ionichev <sozdayvek(a)gmail.com> clk: scpi: Unregister child clock providers on remove Rafael J. Wysocki <rafael.j.wysocki(a)intel.com> thermal: hwmon: Fix critical temperature attribute removal Pengpeng Hou <pengpeng(a)iscas.ac.cn> evm: terminate and bound the evm_xattrs read buffer Lin He <helin52(a)huawei.com> drm/hisilicon/hibmc: use clock to look up the PLL value Lin He <helin52(a)huawei.com> drm/hisilicon/hibmc: move display contrl config to hibmc_probe() Kuldeep Singh <kuldeep.singh(a)oss.qualcomm.com> arm64: dts: qcom: sm8450: Fix ICE reg size Kuldeep Singh <kuldeep.singh(a)oss.qualcomm.com> arm64: dts: qcom: kodiak: Fix ICE reg size Cristian Marussi <cristian.marussi(a)arm.com> clk: scmi: Fix clock rate rounding Hsiu Che Yu <yu.whisper.personal(a)gmail.com> rust: alloc: fix `Vec::extend_with` SAFETY comment Chen-Yu Tsai <wenst(a)chromium.org> arm64: dts: mediatek: mt8192-asurada: Move PCIe DMA bounce buffer to host Sean Christopherson <seanjc(a)google.com> iommu/amd: Fix a stale comment about which legacy mode is user visible Wenmeng Liu <wenmeng.liu(a)oss.qualcomm.com> media: qcom: camss: vfe: fix PIX subdev naming on VFE lite Shuangpeng Bai <shuangpeng.kernel(a)gmail.com> nilfs2: fix backing_dev_info reference leak Alexander Aring <aahringo(a)redhat.com> dlm: fix add msg handle in send_queue ordered Krzysztof Kozlowski <krzysztof.kozlowski(a)oss.qualcomm.com> ARM: multi_v7_defconfig: Correct QCOM_RPMH and QCOM_RPMHPD Weiming Shi <bestswngs(a)gmail.com> crypto: asymmetric_keys - fix OOB read in pefile_digest_pe_contents Thorsten Blum <thorsten.blum(a)linux.dev> crypto: ecrdsa - fix unknown OID check in ecrdsa_param_curve Lothar Rubusch <l.rubusch(a)gmail.com> crypto: atmel-sha204a - fix blocking and non-blocking rng logic Tycho Andersen (AMD) <tycho(a)kernel.org> crypto: ccp - Fix snp_filter_reserved_mem_regions() off-by-one Kuniyuki Iwashima <kuniyu(a)google.com> vxlan: Fix potential null-ptr-deref in vxlan_gro_prepare_receive(). Peng Fan <peng.fan(a)nxp.com> arm64: dts: imx8x-colibri: Correct SODIMM PAD settings Weixin Guo <2298701336(a)qq.com> arm64: dts: rockchip: fix rk809 interrupt pin on rk3566-roc-pc Alice Ryhl <aliceryhl(a)google.com> drm/gpuvm: take refcount on DRM device Felix Gu <ustc.gu(a)gmail.com> pinctrl: sunxi: fix regulator leak in sunxi_pmx_request() error path Damian Muszynski <damian.muszynski(a)intel.com> crypto: qat - fix heartbeat error injection Ashish Mhetre <amhetre(a)nvidia.com> memory: tegra: Wire up system sleep PM ops Nas Chung <nas.chung(a)chipsnmedia.com> media: v4l2-common: Add YUV24 format info Samuel Holland <samuel(a)sholland.org> media: cedrus: Fix failure to clean up hardware on probe failure Felix Gu <ustc.gu(a)gmail.com> watchdog: sprd_wdt: Remove redundant sprd_wdt_disable() on register failure Balakrishnan Sambath <balakrishnan.s(a)microchip.com> watchdog: sama5d4_wdt: Fix WDDIS detection on SAM9X60 and SAMA7G5 Yingjie Gao <gaoyingjie(a)uniontech.com> watchdog: sp5100_tco: Use EFCH MMIO for newer Hygon FCH Jihed Chaibi <jihed.chaibi.dev(a)gmail.com> ARM: dts: am335x-sl50: Fix audio bitclock and frame master endpoint Tristan Madani <tristan(a)talencesecurity.com> wifi: ath9k: fix OOB access from firmware tx status queue ID Prasanna Kumar T S M <ptsm(a)linux.microsoft.com> soc: xilinx: Shutdown and free rx mailbox channel Xingjing Deng <micro6947(a)gmail.com> kconfig: fix potential NULL pointer dereference in conf_askvalue Tristan Madani <tristan(a)talencesecurity.com> wifi: rtw88: fix OOB read from firmware RX descriptor exceeding DMA buffer Shin-Yi Lin <isaiah(a)realtek.com> wifi: rtw89: Correct data type for scan index to avoid infinite loop Danilo Krummrich <dakr(a)kernel.org> driver core: use READ_ONCE() for dev->driver in dev_has_sync_state() Srinivasan Shanmugam <srinivasan.shanmugam(a)amd.com> drm/amdkfd: Validate CRIU-restored IDs before idr_alloc Krzysztof Kozlowski <krzysztof.kozlowski(a)oss.qualcomm.com> dt-bindings: pinctrl: nvidia,tegra234: Add missing required block Jon Hunter <jonathanh(a)nvidia.com> arm64: tegra: Fix Tegra234 MGBE PTP clock Louis Kotze <loukot(a)gmail.com> wifi: cfg80211: fix grammar in MLO group key error message Krzysztof Kozlowski <krzysztof.kozlowski(a)oss.qualcomm.com> arm64: dts: qcom: sdm845-mezzanine: Fix camss ports unit_address_vs_reg warning Krzysztof Kozlowski <krzysztof.kozlowski(a)oss.qualcomm.com> arm64: dts: qcom: sc8180x: Fix phy simple_bus_reg warning Diederik de Haas <diederik(a)cknow-tech.com> arm64: dts: rockchip: Fix gmac0 reset pin for NanoPi R5S Baolin Liu <liubaolin(a)kylinos.cn> Documentation: proc: fix section numbering in table of contents Gregory Bell <grbell(a)redhat.com> selftests/bpf: Use local type for bpf_fou_encap in test_tunnel_kern Gregory Bell <grbell(a)redhat.com> selftests/bpf: Use local type for flow_offload_tuple_rhash in xdp_flowtable Yang Wang <kevinyang.wang(a)amd.com> drm/amd/pm: remove trailing semicolon from AMDGPU_PM_POLICY_ATTR macro Aaron Tomlin <atomlin(a)atomlin.com> libbpf: Report error when a negative kprobe offset is specified Yuho Choi <dbgh9129(a)gmail.com> drm/radeon: fix memory leak in radeon_ring_restore() on lock failure Werner Kasselman <werner(a)verivus.ai> drm/radeon: fix integer overflow in radeon_align_pitch() Werner Kasselman <werner(a)verivus.ai> drm/amdgpu: fix integer overflow in amdgpu_gem_align_pitch() Jonathan Cavitt <jonathan.cavitt(a)intel.com> drm/gpuvm: Do not prepare NULL objects Tomi Valkeinen <tomi.valkeinen(a)ideasonboard.com> drm/tidss: Drop extra drm_mode_config_reset() call Thomas Zimmermann <tzimmermann(a)suse.de> drm/rockchip: Test for imported buffers with drm_gem_is_imported() Chen Ni <nichen(a)iscas.ac.cn> clocksource/drivers/sun5i: Handle error returns from devm_reset_control_get_optional_exclusive() Ian Bridges <icb(a)fastmail.org> fbcon: fix NULL pointer dereference for a console without vc_data David Howells <dhowells(a)redhat.com> afs: Fix further netns teardown to cancel the preallocation charger Matvey Kovalev <matvey.kovalev(a)ispras.ru> afs: fix NULL pointer dereference in afs_get_tree() David Howells <dhowells(a)redhat.com> afs: Fix netns teardown to cancel the preallocation charger David Howells <dhowells(a)redhat.com> rxrpc: Fix leak of released call in recvmsg(MSG_PEEK) Jeffrey Altman <jaltman(a)auristor.com> rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc Matthias Feser <mfe(a)KBSgmbhfr.onmicrosoft.com> serial: 8250_omap: clear rx_running on zero-length DMA completes Tapio Reijonen <tapio.reijonen(a)vaisala.com> serial: max310x: implement gpio_chip::get_direction() Stephan Gerhold <stephan.gerhold(a)linaro.org> serial: msm: Disable DMA for kernel console UART Guoniu Zhou <guoniu.zhou(a)oss.nxp.com> dt-bindings: power: imx93: Add MIPI PHY power domain Chen-Yu Tsai <wens(a)kernel.org> dt-bindings: media: sun4i-a10-video-engine: Add interconnect properties Ricardo Ribalda <ribalda(a)chromium.org> media: uvcvideo: Fix sequence number when no EOF Ricardo Ribalda <ribalda(a)chromium.org> media: uvcvideo: Relax the constrains for interpolating the hw clock Ricardo Ribalda <ribalda(a)chromium.org> media: uvcvideo: Do not add clock samples with small sof delta Ricardo Ribalda <ribalda(a)chromium.org> media: uvcvideo: Fix dev_sof filtering in hw timestamp Ricardo Ribalda <ribalda(a)chromium.org> media: uvcvideo: Fix buffer sequence in frame gaps Ricardo Ribalda <ribalda(a)chromium.org> media: uvcvideo: Avoid partial metadata buffers Ricardo Ribalda <ribalda(a)chromium.org> media: uvcvideo: Use hw timestaming if the clock buffer is full Su Hui <suhui(a)nfschina.com> time/jiffies: Change register_refined_jiffies() to void __init Thomas Gleixner <tglx(a)kernel.org> time/jiffies: Register jiffies clocksource before usage Eric Biggers <ebiggers(a)kernel.org> crypto: hisi-trng - Remove crypto_rng interface Eric Biggers <ebiggers(a)kernel.org> crypto: crypto4xx - Remove insecure and unused rng_alg Herbert Xu <herbert(a)gondor.apana.org.au> crypto: crypto4xx - Remove ahash-related code Kuniyuki Iwashima <kuniyu(a)google.com> af_unix: Drop all SCM attributes for SOCKMAP. Kuniyuki Iwashima <kuniyu(a)google.com> af_unix: Don't use skb_recv_datagram() in unix_stream_read_skb(). Kuniyuki Iwashima <kuniyu(a)google.com> af_unix: Don't check SOCK_DEAD in unix_stream_read_skb(). Kuniyuki Iwashima <kuniyu(a)google.com> af_unix: Don't hold unix_state_lock() in __unix_dgram_recvmsg(). Alexander Mikhalitsyn <alexander(a)mihalicyn.com> af_unix/scm: fix whitespace errors Kuniyuki Iwashima <kuniyu(a)amazon.com> af_unix: Set drop reason in unix_stream_read_skb(). Kuniyuki Iwashima <kuniyu(a)amazon.com> af_unix: Set drop reason in manage_oob(). Kuniyuki Iwashima <kuniyu(a)amazon.com> af_unix: Set drop reason in unix_release_sock(). Kuniyuki Iwashima <kuniyu(a)amazon.com> net: dropreason: Gather SOCKET_ drop reasons. Stephen Dolan <sdolan(a)janestreet.com> x86/mm: Fix check/use ordering in switch_mm_irqs_off() Vasant Hegde <vasant.hegde(a)amd.com> iommu/amd: Use maximum PPR log buffer size when SNP is enabled on Family 0x19 Vasant Hegde <vasant.hegde(a)amd.com> iommu/amd: Use maximum Event log buffer size when SNP is enabled on Family 0x19 Eric Biggers <ebiggers(a)kernel.org> crypto: sun4i-ss - Remove insecure and unused rng_alg Jingguo Tan <tanjingguo(a)huawei.com> vsock/virtio: bind uarg before filling zerocopy skb Stefano Garzarella <sgarzare(a)redhat.com> vsock/virtio: fix zerocopy completion for multi-skb sends Sagi Grimberg <sagi(a)grimberg.me> nvmet-tcp: Fix potential UAF when ddgst mismatch Shivam Kumar <kumar.shivam43666(a)gmail.com> nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path Mikhail Gavrilov <mikhail.v.gavrilov(a)gmail.com> timekeeping: Register default clocksource before taking tk_core.lock Michael Bommarito <michael.bommarito(a)gmail.com> iommu/vt-d: Clear Present bit before tearing down scalable-mode context entry Lu Baolu <baolu.lu(a)linux.intel.com> iommu/vt-d: Cleanup intel_context_flush_present() Yi Liu <yi.l.liu(a)intel.com> iommu: Pass old domain to set_dev_pasid op Hyunwoo Kim <imv4bel(a)gmail.com> KVM: arm64: Clear __hyp_running_vcpu when flushing the pKVM hyp vCPU Hyunwoo Kim <imv4bel(a)gmail.com> KVM: arm64: Bound used_lrs when flushing the pKVM hyp vCPU Muhammet Kaan KILINÇ <muhammetkaankilinc(a)gmail.com> crypto: algif_skcipher - force synchronous processing Adam Li <adamli(a)os.amperecomputing.com> sched/fair: Only update stats for allowed CPUs when looking for dst group Pawan Gupta <pawan.kumar.gupta(a)linux.intel.com> bpf: Prefer dirty packs for eBPF allocations Pawan Gupta <pawan.kumar.gupta(a)linux.intel.com> bpf: Prefer packs that won't trigger an IBPB flush on allocation Pawan Gupta <pawan.kumar.gupta(a)linux.intel.com> bpf: Skip redundant IBPB in pack allocator Pawan Gupta <pawan.kumar.gupta(a)linux.intel.com> bpf: Restrict JIT predictor flush to cBPF Pawan Gupta <pawan.kumar.gupta(a)linux.intel.com> x86/bugs: Enable IBPB flush on BPF JIT allocation Pawan Gupta <pawan.kumar.gupta(a)linux.intel.com> bpf: Support for hardening against JIT spraying Kuniyuki Iwashima <kuniyu(a)google.com> tcp: Add preempt_{disable,enable}_nested() in reqsk_queue_hash_req(). Lu Baolu <baolu.lu(a)linux.intel.com> iommu/vt-d: Clear Present bit before tearing down context entry ChenXiaoSong <chenxiaosong(a)kylinos.cn> smb/server: do not require delete access for non-replacing links ------------- Diffstat: Documentation/admin-guide/pm/cpufreq.rst | 6 +- Documentation/core-api/workqueue.rst | 6 + .../media/allwinner,sun4i-a10-video-engine.yaml | 10 + .../devicetree/bindings/net/renesas,ether.yaml | 3 +- .../pinctrl/nvidia,tegra234-pinmux-aon.yaml | 4 + .../bindings/pinctrl/nvidia,tegra234-pinmux.yaml | 4 + .../bindings/regulator/mt6359-regulator.yaml | 43 -- Documentation/driver-api/dpll.rst | 25 + Documentation/driver-api/nvdimm/btt.rst | 5 +- Documentation/driver-api/pci/pci.rst | 3 + Documentation/filesystems/proc.rst | 14 +- Documentation/netlink/specs/dpll.yaml | 19 + Documentation/netlink/specs/handshake.yaml | 1 + Documentation/process/deprecated.rst | 31 ++ Makefile | 4 +- arch/alpha/kernel/pci-sysfs.c | 13 +- arch/arm/boot/dts/st/stm32mp151c-mecio1r0.dts | 128 +++++ arch/arm/boot/dts/st/stm32mp153c-mecio1r1.dts | 144 +++++ arch/arm/boot/dts/st/stm32mp15x-mecio1-io.dtsi | 146 +---- arch/arm/boot/dts/ti/omap/am335x-sl50.dts | 4 +- arch/arm/configs/multi_v7_defconfig | 4 +- arch/arm/configs/sunxi_defconfig | 1 - arch/arm/mach-imx/cpu-imx31.c | 9 +- arch/arm/mach-imx/mm-imx3.c | 2 + .../dts/freescale/imx8mp-tqma8mpql-mba8mpxl.dts | 3 + arch/arm64/boot/dts/freescale/imx8ulp-evk.dts | 4 +- arch/arm64/boot/dts/freescale/imx8x-colibri.dtsi | 4 +- arch/arm64/boot/dts/freescale/imx95.dtsi | 10 +- arch/arm64/boot/dts/mediatek/mt8192-asurada.dtsi | 2 +- arch/arm64/boot/dts/nvidia/tegra234.dtsi | 8 +- arch/arm64/boot/dts/qcom/sc7180.dtsi | 6 +- arch/arm64/boot/dts/qcom/sc7280.dtsi | 8 +- arch/arm64/boot/dts/qcom/sc8180x.dtsi | 2 +- arch/arm64/boot/dts/qcom/sdm630.dtsi | 9 +- .../qcom/sdm845-db845c-navigation-mezzanine.dtso | 5 + arch/arm64/boot/dts/qcom/sm8450.dtsi | 8 +- arch/arm64/boot/dts/qcom/sm8650.dtsi | 6 +- arch/arm64/boot/dts/rockchip/rk3566-roc-pc.dts | 2 +- arch/arm64/boot/dts/rockchip/rk3568-nanopi-r5s.dts | 6 +- arch/arm64/boot/dts/ti/k3-am62a7-sk.dts | 2 + arch/arm64/include/asm/kvm_hyp.h | 1 + arch/arm64/kernel/entry-fpsimd.S | 8 +- arch/arm64/kernel/hw_breakpoint.c | 9 + arch/arm64/kernel/smp.c | 16 +- arch/arm64/kvm/arm.c | 2 + arch/arm64/kvm/hyp/include/hyp/switch.h | 11 +- arch/arm64/kvm/hyp/nvhe/hyp-main.c | 12 + arch/arm64/kvm/hyp/pgtable.c | 3 +- arch/arm64/kvm/vgic/vgic-its.c | 2 + arch/arm64/kvm/vgic/vgic.c | 11 +- arch/arm64/mm/mmu.c | 11 +- arch/arm64/net/bpf_jit_comp.c | 25 +- arch/loongarch/include/asm/pgtable.h | 4 + arch/loongarch/kvm/exit.c | 1 - arch/loongarch/kvm/vcpu.c | 11 +- arch/mips/dec/int-handler.S | 2 +- arch/mips/dec/platform.c | 6 +- arch/mips/dec/prom/init.c | 6 +- arch/mips/dec/setup.c | 6 - arch/mips/fw/lib/call_o32.S | 2 +- arch/mips/include/asm/dec/prom.h | 15 +- arch/mips/kernel/mips-mt-fpaff.c | 28 +- arch/mips/mm/init.c | 12 +- arch/mips/n64/init.c | 2 +- arch/mips/ralink/mt7621.c | 2 +- arch/mips/sgi-ip22/ip22-gio.c | 7 +- arch/powerpc/kexec/core_64.c | 4 +- arch/powerpc/net/bpf_jit_comp.c | 2 +- arch/powerpc/net/bpf_jit_comp64.c | 21 +- arch/powerpc/perf/core-fsl-emb.c | 3 +- arch/powerpc/platforms/cell/spufs/file.c | 6 +- arch/powerpc/platforms/powernv/setup.c | 3 +- .../platforms/pseries/papr_platform_attributes.c | 8 +- arch/riscv/include/asm/cpu_ops.h | 2 +- arch/riscv/kernel/cacheinfo.c | 2 +- arch/riscv/kernel/cpu-hotplug.c | 4 +- arch/riscv/kernel/cpu_ops_sbi.c | 11 +- arch/riscv/kernel/machine_kexec.c | 3 + arch/riscv/kernel/probes/rethook_trampoline.S | 3 + arch/riscv/kernel/stacktrace.c | 2 +- arch/riscv/net/bpf_jit_comp64.c | 2 +- arch/riscv/net/bpf_jit_core.c | 3 +- arch/s390/Kconfig | 1 - arch/s390/include/asm/asm-extable.h | 4 - arch/s390/include/asm/word-at-a-time.h | 22 - arch/s390/kernel/perf_cpum_cf.c | 3 + arch/s390/kernel/process.c | 2 +- arch/s390/kvm/pci.c | 12 +- arch/s390/mm/extable.c | 18 - arch/s390/mm/mmap.c | 2 +- arch/sparc/kernel/led.c | 2 +- arch/x86/boot/compressed/acpi.c | 7 +- arch/x86/boot/early_serial_console.c | 11 +- arch/x86/events/amd/brs.c | 10 +- arch/x86/events/amd/core.c | 18 +- arch/x86/events/amd/lbr.c | 3 +- arch/x86/events/amd/uncore.c | 6 +- arch/x86/events/intel/uncore_discovery.c | 4 +- arch/x86/events/intel/uncore_snb.c | 7 - arch/x86/include/asm/nospec-branch.h | 4 + arch/x86/kernel/cpu/bugs.c | 50 +- arch/x86/kvm/lapic.c | 8 +- arch/x86/kvm/svm/sev.c | 6 +- arch/x86/mm/tlb.c | 16 +- arch/x86/net/bpf_jit_comp.c | 5 +- arch/x86/platform/olpc/olpc-xo15-sci.c | 1 + block/blk.h | 13 +- crypto/algif_skcipher.c | 75 +-- crypto/asymmetric_keys/verify_pefile.c | 2 + crypto/ecrdsa.c | 2 +- crypto/rng.c | 11 + drivers/accel/ivpu/ivpu_fw_log.c | 4 + drivers/acpi/ac.c | 6 +- drivers/acpi/acpi_ipmi.c | 4 +- drivers/acpi/acpi_pad.c | 6 +- drivers/acpi/acpi_tad.c | 6 +- drivers/acpi/bus.c | 70 +++ drivers/acpi/nfit/core.c | 89 ++- drivers/acpi/pfr_telemetry.c | 6 +- drivers/acpi/pfr_update.c | 6 +- drivers/acpi/processor_idle.c | 4 +- drivers/acpi/resource.c | 6 +- drivers/acpi/riscv/cpuidle.c | 2 +- drivers/acpi/thermal.c | 2 +- drivers/amba/bus.c | 37 +- drivers/ata/libata-core.c | 21 +- drivers/ata/libata-scsi.c | 7 +- drivers/ata/pata_pxa.c | 1 + drivers/ata/sata_gemini.c | 2 +- drivers/base/dd.c | 7 +- drivers/base/firmware_loader/main.c | 3 +- drivers/base/power/main.c | 6 +- drivers/base/property.c | 4 +- drivers/block/drbd/drbd_receiver.c | 5 + drivers/bluetooth/bpa10x.c | 8 +- drivers/bluetooth/btmtk.c | 4 +- drivers/bluetooth/btrtl.c | 5 +- drivers/bluetooth/hci_qca.c | 2 +- drivers/bluetooth/hci_vhci.c | 10 + drivers/bus/imx-weim.c | 6 - drivers/bus/mhi/ep/main.c | 9 +- drivers/bus/sunxi-rsb.c | 3 + drivers/cdx/cdx.c | 40 +- drivers/char/tlclk.c | 4 + drivers/char/tpm/eventlog/tpm1.c | 4 +- drivers/char/tpm/tpm-dev.c | 2 +- drivers/char/tpm/tpm2-sessions.c | 45 +- drivers/char/tpm/tpm_tis_core.c | 35 +- drivers/char/tpm/tpmrm-dev.c | 2 +- drivers/char/virtio_console.c | 52 +- drivers/clk/at91/pmc.c | 2 +- drivers/clk/at91/sam9x7.c | 18 +- drivers/clk/clk-scmi.c | 4 +- drivers/clk/clk-scpi.c | 2 +- drivers/clk/qcom/a53-pll.c | 2 +- drivers/clocksource/timer-sun5i.c | 3 + drivers/cpufreq/cpufreq_conservative.c | 12 +- drivers/cpufreq/intel_pstate.c | 6 +- drivers/crypto/allwinner/Kconfig | 8 - drivers/crypto/allwinner/sun4i-ss/Makefile | 1 - drivers/crypto/allwinner/sun4i-ss/sun4i-ss-core.c | 36 -- drivers/crypto/allwinner/sun4i-ss/sun4i-ss-prng.c | 69 --- drivers/crypto/allwinner/sun4i-ss/sun4i-ss.h | 20 - drivers/crypto/amcc/crypto4xx_alg.c | 106 ---- drivers/crypto/amcc/crypto4xx_core.c | 130 +---- drivers/crypto/amcc/crypto4xx_core.h | 11 - drivers/crypto/amcc/crypto4xx_reg_def.h | 11 - drivers/crypto/atmel-ecc.c | 2 +- drivers/crypto/atmel-sha204a.c | 37 +- drivers/crypto/cavium/cpt/cptvf_reqmanager.c | 4 +- drivers/crypto/ccp/sev-dev.c | 183 +++---- drivers/crypto/hisilicon/Kconfig | 1 - drivers/crypto/hisilicon/qm.c | 4 +- drivers/crypto/hisilicon/trng/trng.c | 296 +--------- .../intel/qat/qat_common/adf_accel_devices.h | 2 + drivers/crypto/intel/qat/qat_common/adf_aer.c | 7 +- .../crypto/intel/qat/qat_common/adf_common_drv.h | 3 +- .../intel/qat/qat_common/adf_heartbeat_inject.c | 6 +- .../crypto/intel/qat/qat_common/adf_hw_arbiter.c | 25 - drivers/crypto/intel/qat/qat_common/adf_isr.c | 39 ++ drivers/crypto/intel/qat/qat_common/adf_sriov.c | 20 +- drivers/crypto/marvell/octeontx/otx_cptvf_reqmgr.c | 4 +- drivers/crypto/tegra/tegra-se-aes.c | 33 +- drivers/dax/kmem.c | 6 + drivers/dma/dma-axi-dmac.c | 68 ++- drivers/dma/dmaengine.c | 3 +- drivers/dma/dw-edma/dw-edma-core.h | 2 +- drivers/dma/dw-edma/dw-edma-v0-core.c | 6 + drivers/dma/imx-sdma.c | 4 +- drivers/dma/qcom/gpi.c | 1 + drivers/dma/tegra186-gpc-dma.c | 7 + drivers/dpll/dpll_core.c | 283 +++++++++- drivers/dpll/dpll_core.h | 8 + drivers/dpll/dpll_netlink.c | 199 ++++++- drivers/dpll/dpll_netlink.h | 2 + drivers/dpll/dpll_nl.c | 10 +- drivers/dpll/dpll_nl.h | 1 + drivers/edac/skx_common.c | 3 + drivers/firmware/arm_scmi/power.c | 6 +- drivers/firmware/arm_scmi/sensors.c | 2 +- drivers/fpga/dfl.c | 2 + drivers/fpga/microchip-spi.c | 3 + drivers/gpio/gpio-davinci.c | 4 +- drivers/gpio/gpio-f7188x.c | 6 +- drivers/gpio/gpio-htc-egpio.c | 6 +- drivers/gpio/gpio-mlxbf3.c | 3 +- drivers/gpio/gpio-mvebu.c | 6 +- drivers/gpio/gpio-palmas.c | 19 + drivers/gpio/gpio-sch.c | 32 +- drivers/gpio/gpio-tegra.c | 18 +- drivers/gpio/gpio-timberdale.c | 2 +- drivers/gpio/gpiolib-acpi-core.c | 19 +- drivers/gpu/drm/amd/amdgpu/amdgpu_amdkfd_gpuvm.c | 16 +- drivers/gpu/drm/amd/amdgpu/amdgpu_device.c | 6 +- drivers/gpu/drm/amd/amdgpu/amdgpu_gem.c | 25 +- drivers/gpu/drm/amd/amdgpu/amdgpu_irq.c | 2 - drivers/gpu/drm/amd/amdgpu/amdgpu_mca.c | 3 + drivers/gpu/drm/amd/amdkfd/kfd_chardev.c | 3 + .../gpu/drm/amd/amdkfd/kfd_device_queue_manager.c | 20 +- drivers/gpu/drm/amd/amdkfd/kfd_events.c | 5 + drivers/gpu/drm/amd/amdkfd/kfd_svm.c | 1 + .../amd/display/modules/info_packet/info_packet.c | 2 + drivers/gpu/drm/amd/pm/amdgpu_pm.c | 6 +- drivers/gpu/drm/drm_edid.c | 8 + drivers/gpu/drm/drm_gpuvm.c | 9 +- drivers/gpu/drm/drm_syncobj.c | 10 +- drivers/gpu/drm/hisilicon/hibmc/hibmc_drm_de.c | 78 +-- drivers/gpu/drm/hisilicon/hibmc/hibmc_drm_drv.c | 11 + drivers/gpu/drm/hisilicon/hibmc/hibmc_drm_vdac.c | 22 - drivers/gpu/drm/i915/display/intel_atomic.c | 6 + drivers/gpu/drm/i915/gt/intel_region_lmem.c | 2 +- drivers/gpu/drm/msm/dp/dp_display.c | 4 +- drivers/gpu/drm/msm/dp/dp_reg.h | 4 +- .../gpu/drm/nouveau/nvkm/subdev/bios/shadowramin.c | 3 +- drivers/gpu/drm/panthor/panthor_sched.c | 25 +- drivers/gpu/drm/radeon/radeon_gem.c | 13 +- drivers/gpu/drm/radeon/radeon_ring.c | 4 +- drivers/gpu/drm/rockchip/rockchip_drm_gem.c | 2 +- drivers/gpu/drm/tegra/dc.c | 4 +- drivers/gpu/drm/tegra/gem.c | 22 +- drivers/gpu/drm/tegra/gr2d.c | 19 +- drivers/gpu/drm/tegra/gr3d.c | 19 +- drivers/gpu/drm/tegra/submit.c | 3 +- drivers/gpu/drm/tidss/tidss_kms.c | 2 - drivers/gpu/drm/v3d/v3d_submit.c | 2 + drivers/gpu/drm/xe/tests/xe_pci.c | 1 - drivers/gpu/drm/xe/xe_guc_relay.c | 13 +- drivers/gpu/drm/xe/xe_hw_engine.c | 4 +- drivers/gpu/drm/xe/xe_pt.c | 12 +- drivers/gpu/drm/xe/xe_vram.c | 2 +- drivers/gpu/host1x/bus.c | 62 ++- drivers/gpu/host1x/job.c | 10 +- drivers/hid/bpf/hid_bpf_dispatch.c | 5 +- drivers/hid/hid-appleir.c | 45 +- drivers/hid/hid-core.c | 7 + drivers/hid/hid-logitech-hidpp.c | 1 - drivers/hid/hid-multitouch.c | 32 +- drivers/hid/hid-picolcd_core.c | 3 +- drivers/hid/hid-playstation.c | 12 + drivers/hid/hid-wiimote-modules.c | 58 +- drivers/hid/usbhid/hid-pidff.c | 258 +++++---- drivers/hv/vmbus_drv.c | 43 +- drivers/hwmon/Kconfig | 3 + drivers/hwmon/aspeed-g6-pwm-tach.c | 5 +- drivers/hwmon/asus_atk0110.c | 3 + drivers/hwmon/it87.c | 3 + drivers/hwmon/occ/common.c | 34 +- drivers/hwmon/occ/common.h | 1 + drivers/hwmon/pmbus/adm1275.c | 2 +- drivers/hwmon/pmbus/pmbus_core.c | 13 +- drivers/hwmon/w83627hf.c | 4 + drivers/hwmon/w83793.c | 1 + drivers/hwspinlock/qcom_hwspinlock.c | 5 +- .../hwtracing/coresight/coresight-cti-platform.c | 1 + drivers/hwtracing/coresight/coresight-etm4x-core.c | 4 +- drivers/hwtracing/coresight/coresight-sysfs.c | 4 +- drivers/i2c/busses/i2c-mlxbf.c | 4 +- drivers/i2c/busses/i2c-mt65xx.c | 2 +- drivers/i2c/i2c-core-of.c | 5 - drivers/i3c/master.c | 21 +- drivers/iio/accel/mma8452.c | 2 + drivers/iio/adc/Kconfig | 1 + drivers/iio/adc/xilinx-ams.c | 5 + drivers/iio/light/si1133.c | 14 +- drivers/iio/light/tcs3472.c | 38 +- drivers/iio/magnetometer/ak8975.c | 14 + drivers/iio/orientation/hid-sensor-rotation.c | 40 +- drivers/iio/pressure/bmp280-core.c | 5 - drivers/iio/pressure/icp10100.c | 1 - drivers/iio/pressure/mpl115.c | 6 +- drivers/iio/pressure/zpa2326.c | 2 - drivers/infiniband/core/cm.c | 13 +- drivers/infiniband/core/counters.c | 2 +- drivers/infiniband/hw/hns/hns_roce_cq.c | 6 +- drivers/infiniband/hw/hns/hns_roce_debugfs.c | 19 +- drivers/infiniband/hw/hns/hns_roce_hem.c | 8 +- drivers/infiniband/hw/hns/hns_roce_hw_v2.c | 18 +- drivers/infiniband/hw/hns/hns_roce_main.c | 2 +- drivers/infiniband/hw/hns/hns_roce_mr.c | 6 +- drivers/infiniband/hw/hns/hns_roce_srq.c | 2 +- drivers/infiniband/hw/irdma/verbs.c | 19 +- drivers/infiniband/hw/irdma/verbs.h | 1 - drivers/infiniband/hw/mana/main.c | 3 +- drivers/infiniband/hw/mlx4/mlx4_ib.h | 1 + drivers/infiniband/hw/mlx4/mr.c | 9 +- drivers/infiniband/hw/mlx4/sysfs.c | 45 +- drivers/infiniband/hw/mlx5/devx.c | 30 +- drivers/infiniband/hw/mlx5/main.c | 17 +- drivers/infiniband/hw/mlx5/mr.c | 17 +- drivers/infiniband/hw/mlx5/qp.c | 13 +- drivers/infiniband/hw/mlx5/restrack.c | 3 - drivers/infiniband/sw/rxe/rxe_mmap.c | 19 +- drivers/infiniband/sw/rxe/rxe_resp.c | 33 +- drivers/infiniband/sw/siw/siw_cm.c | 30 +- drivers/infiniband/ulp/srpt/ib_srpt.c | 5 +- drivers/input/misc/ims-pcu.c | 129 ++++- drivers/iommu/amd/amd_iommu.h | 6 +- drivers/iommu/amd/amd_iommu_types.h | 32 +- drivers/iommu/amd/init.c | 90 ++- drivers/iommu/amd/iommu.c | 2 +- drivers/iommu/amd/pasid.c | 3 +- drivers/iommu/amd/ppr.c | 10 +- drivers/iommu/arm/arm-smmu-v3/arm-smmu-v3-sva.c | 3 +- drivers/iommu/arm/arm-smmu-v3/arm-smmu-v3.c | 3 +- drivers/iommu/intel/iommu.c | 14 +- drivers/iommu/intel/iommu.h | 26 +- drivers/iommu/intel/pasid.c | 50 +- drivers/iommu/intel/svm.c | 3 +- drivers/iommu/iommu.c | 3 +- drivers/irqchip/irq-crossbar.c | 10 +- drivers/irqchip/irq-gic-v3-its.c | 6 +- drivers/irqchip/irq-riscv-imsic-early.c | 15 +- drivers/irqchip/irq-ts4800.c | 10 + drivers/leds/uleds.c | 3 +- drivers/mailbox/imx-mailbox.c | 3 +- drivers/mailbox/mtk-adsp-mailbox.c | 9 +- drivers/md/dm-bufio.c | 4 +- drivers/md/dm-era-target.c | 10 +- drivers/md/dm-integrity.c | 10 +- drivers/md/dm-ioctl.c | 4 +- drivers/md/dm-log.c | 3 + drivers/md/dm-stats.c | 10 +- drivers/md/dm-thin-metadata.c | 67 +-- drivers/md/dm-verity-loadpin.c | 2 +- drivers/md/dm-verity-target.c | 16 +- drivers/md/dm-verity.h | 2 +- drivers/md/raid1.c | 6 + drivers/md/raid10.c | 1 + drivers/md/raid5.c | 55 +- .../media/platform/nxp/imx8-isi/imx8-isi-core.c | 18 +- drivers/media/platform/qcom/camss/camss-vfe.c | 2 +- drivers/media/platform/qcom/venus/helpers.c | 4 +- .../media/platform/qcom/venus/hfi_platform_v4.c | 20 +- .../media/platform/qcom/venus/hfi_platform_v6.c | 16 +- drivers/media/platform/rockchip/rga/rga-hw.c | 2 +- drivers/media/platform/rockchip/rga/rga-hw.h | 2 +- drivers/media/usb/uvc/uvc_video.c | 179 +++--- drivers/media/v4l2-core/v4l2-common.c | 1 + drivers/memory/tegra/mc.c | 14 + drivers/memstick/core/ms_block.c | 4 + drivers/mfd/cs42l43.c | 2 +- drivers/mfd/rsmu_i2c.c | 6 +- drivers/mfd/rsmu_spi.c | 5 +- drivers/mfd/sm501.c | 4 +- drivers/mfd/tps6586x.c | 2 +- drivers/mmc/core/block.c | 3 +- drivers/mmc/host/sdhci-of-dwcmshc.c | 14 +- drivers/mmc/host/vub300.c | 26 +- drivers/mtd/devices/mchp23k256.c | 2 +- drivers/mtd/devices/slram.c | 22 +- drivers/mtd/maps/vmu-flash.c | 1 + drivers/mtd/nand/onenand/onenand_samsung.c | 7 +- drivers/mtd/nand/raw/fsl_ifc_nand.c | 9 +- drivers/mtd/nand/raw/lpc32xx_mlc.c | 12 +- drivers/mtd/nand/raw/lpc32xx_slc.c | 12 +- drivers/mtd/nand/raw/nand_base.c | 24 +- drivers/mtd/nand/raw/pl35x-nand-controller.c | 2 +- drivers/mtd/spi-nor/Kconfig | 1 - drivers/mtd/spi-nor/spansion.c | 4 +- drivers/mtd/spi-nor/swp.c | 11 +- drivers/net/amt.c | 6 +- drivers/net/bonding/bond_3ad.c | 1 + drivers/net/can/usb/esd_usb.c | 5 +- drivers/net/dsa/qca/qca8k-leds.c | 3 +- drivers/net/dsa/realtek/rtl8366rb-leds.c | 8 +- drivers/net/dsa/sja1105/sja1105_ptp.c | 2 +- drivers/net/ethernet/amazon/ena/ena_netdev.c | 23 +- drivers/net/ethernet/broadcom/bnx2x/bnx2x_cmn.c | 3 +- drivers/net/ethernet/broadcom/bnx2x/bnx2x_main.c | 3 +- drivers/net/ethernet/broadcom/bnxt/bnxt.c | 83 ++- drivers/net/ethernet/broadcom/bnxt/bnxt.h | 19 +- drivers/net/ethernet/broadcom/bnxt/bnxt_ethtool.c | 134 +++-- drivers/net/ethernet/broadcom/genet/bcmgenet.c | 23 +- .../ethernet/cavium/liquidio/cn23xx_pf_device.c | 18 +- drivers/net/ethernet/chelsio/cxgb4/t4_hw.c | 8 - drivers/net/ethernet/emulex/benet/be_main.c | 3 +- .../net/ethernet/freescale/dpaa2/dpaa2-switch.c | 10 +- drivers/net/ethernet/freescale/enetc/enetc.c | 7 + drivers/net/ethernet/freescale/fman/fman.c | 4 +- drivers/net/ethernet/freescale/gianfar.c | 16 +- drivers/net/ethernet/hisilicon/hns3/hnae3.h | 2 +- .../hisilicon/hns3/hns3_common/hclge_comm_cmd.c | 2 +- .../hns3/hns3_common/hclge_comm_tqp_stats.c | 11 +- .../hns3/hns3_common/hclge_comm_tqp_stats.h | 2 +- drivers/net/ethernet/hisilicon/hns3/hns3_debugfs.c | 34 +- drivers/net/ethernet/hisilicon/hns3/hns3_enet.c | 36 +- drivers/net/ethernet/hisilicon/hns3/hns3_enet.h | 2 +- drivers/net/ethernet/hisilicon/hns3/hns3_ethtool.c | 152 +++-- .../ethernet/hisilicon/hns3/hns3pf/hclge_debugfs.c | 76 ++- .../ethernet/hisilicon/hns3/hns3pf/hclge_main.c | 196 ++++--- .../ethernet/hisilicon/hns3/hns3pf/hclge_main.h | 1 + .../net/ethernet/hisilicon/hns3/hns3pf/hclge_mbx.c | 7 +- .../ethernet/hisilicon/hns3/hns3pf/hclge_mdio.c | 2 +- .../net/ethernet/hisilicon/hns3/hns3pf/hclge_ptp.c | 3 +- .../net/ethernet/hisilicon/hns3/hns3pf/hclge_ptp.h | 2 +- .../ethernet/hisilicon/hns3/hns3vf/hclgevf_main.c | 8 +- .../ethernet/hisilicon/hns3/hns3vf/hclgevf_mbx.c | 2 +- drivers/net/ethernet/intel/i40e/i40e_debug.h | 2 +- drivers/net/ethernet/intel/i40e/i40e_main.c | 2 - drivers/net/ethernet/intel/ice/ice_common.c | 1 - drivers/net/ethernet/intel/ice/ice_dpll.c | 20 +- drivers/net/ethernet/intel/ice/ice_eswitch.c | 4 +- drivers/net/ethernet/intel/ice/ice_ethtool.c | 12 +- drivers/net/ethernet/intel/ice/ice_main.c | 20 +- drivers/net/ethernet/intel/ice/ice_vf_lib.c | 2 +- drivers/net/ethernet/marvell/mvneta.c | 3 + drivers/net/ethernet/marvell/octeontx2/af/mcs.c | 6 +- .../ethernet/marvell/octeontx2/af/rvu_debugfs.c | 3 +- .../ethernet/marvell/octeontx2/af/rvu_devlink.c | 27 +- .../net/ethernet/marvell/octeontx2/af/rvu_nix.c | 15 +- .../net/ethernet/marvell/octeontx2/af/rvu_npc.c | 40 +- .../ethernet/marvell/octeontx2/nic/cn10k_macsec.c | 10 +- .../net/ethernet/marvell/octeontx2/nic/otx2_pf.c | 44 +- .../net/ethernet/marvell/prestera/prestera_main.c | 2 +- drivers/net/ethernet/mediatek/airoha_eth.c | 231 +++++++- drivers/net/ethernet/mediatek/mtk_ppe.c | 4 +- drivers/net/ethernet/mediatek/mtk_wed_debugfs.c | 6 +- drivers/net/ethernet/mediatek/mtk_wed_mcu.c | 8 +- drivers/net/ethernet/mellanox/mlx4/en_netdev.c | 3 +- .../ethernet/mellanox/mlx5/core/en/hv_vhca_stats.c | 29 +- .../ethernet/mellanox/mlx5/core/en_accel/macsec.c | 47 +- drivers/net/ethernet/mellanox/mlx5/core/en_main.c | 3 +- .../net/ethernet/mellanox/mlx5/core/lag/mpesw.c | 7 +- .../net/ethernet/mellanox/mlx5/core/lib/hv_vhca.c | 8 +- .../net/ethernet/mellanox/mlx5/core/lib/hv_vhca.h | 6 +- .../net/ethernet/mellanox/mlx5/core/lib/port_tun.c | 3 +- drivers/net/ethernet/mellanox/mlx5/core/main.c | 12 +- drivers/net/ethernet/mellanox/mlxsw/spectrum.c | 2 +- .../net/ethernet/mellanox/mlxsw/spectrum_router.c | 1 + drivers/net/ethernet/microchip/lan743x_main.c | 2 +- .../ethernet/microchip/lan966x/lan966x_vcap_impl.c | 5 +- .../ethernet/microchip/sparx5/sparx5_switchdev.c | 4 +- .../ethernet/microchip/sparx5/sparx5_vcap_impl.c | 5 +- drivers/net/ethernet/microchip/vcap/vcap_api.c | 72 +-- drivers/net/ethernet/microchip/vcap/vcap_api.h | 3 +- .../net/ethernet/microchip/vcap/vcap_api_debugfs.c | 8 +- .../microchip/vcap/vcap_api_debugfs_kunit.c | 3 +- .../net/ethernet/microchip/vcap/vcap_api_kunit.c | 3 +- .../net/ethernet/microchip/vcap/vcap_api_private.h | 3 + drivers/net/ethernet/microsoft/mana/gdma_main.c | 2 + drivers/net/ethernet/microsoft/mana/mana_en.c | 3 +- .../net/ethernet/netronome/nfp/nfp_net_common.c | 3 +- drivers/net/ethernet/oa_tc6.c | 14 +- .../net/ethernet/pensando/ionic/ionic_ethtool.c | 11 +- drivers/net/ethernet/qlogic/qede/qede_filter.c | 3 - drivers/net/ethernet/qlogic/qede/qede_fp.c | 9 +- drivers/net/ethernet/qlogic/qlcnic/qlcnic_main.c | 1 - .../net/ethernet/qualcomm/rmnet/rmnet_handlers.c | 5 +- drivers/net/ethernet/qualcomm/rmnet/rmnet_map.h | 1 + .../net/ethernet/qualcomm/rmnet/rmnet_map_data.c | 78 +-- drivers/net/ethernet/sfc/ef10.c | 1 - drivers/net/ethernet/sun/sungem.c | 13 +- drivers/net/ethernet/sunplus/spl2sw_phy.c | 6 +- drivers/net/ieee802154/ca8210.c | 9 +- drivers/net/macsec.c | 9 +- drivers/net/netdevsim/udp_tunnels.c | 4 - drivers/net/pfcp.c | 1 + drivers/net/phy/sfp.c | 1 + drivers/net/thunderbolt/main.c | 8 +- drivers/net/usb/gl620a.c | 6 +- drivers/net/usb/lan78xx.c | 318 +++++------ drivers/net/usb/net1080.c | 2 +- drivers/net/veth.c | 2 + drivers/net/virtio_net.c | 12 +- drivers/net/vxlan/vxlan_core.c | 8 +- drivers/net/wan/ixp4xx_hss.c | 4 +- drivers/net/wireless/ath/ath9k/xmit.c | 5 + drivers/net/wireless/ath/wcn36xx/smd.c | 13 + drivers/net/wireless/marvell/mwifiex/cfg80211.c | 2 +- drivers/net/wireless/marvell/mwifiex/join.c | 1 - drivers/net/wireless/mediatek/mt76/mac80211.c | 2 +- drivers/net/wireless/mediatek/mt76/mt7915/mac.c | 10 +- drivers/net/wireless/mediatek/mt76/mt7921/mac.c | 5 +- drivers/net/wireless/mediatek/mt76/mt7925/mac.c | 20 +- drivers/net/wireless/mediatek/mt76/mt7925/main.c | 4 +- drivers/net/wireless/mediatek/mt76/mt7925/pci.c | 4 +- drivers/net/wireless/mediatek/mt76/mt792x_core.c | 3 +- drivers/net/wireless/mediatek/mt76/mt7996/mac.c | 6 +- drivers/net/wireless/ralink/rt2x00/rt2x00dev.c | 12 +- drivers/net/wireless/realtek/rtw88/pci.c | 5 + drivers/net/wireless/realtek/rtw89/fw.c | 2 +- drivers/net/wwan/iosm/iosm_ipc_mux_codec.c | 40 +- drivers/net/wwan/t7xx/t7xx_hif_cldma.c | 3 + drivers/net/wwan/t7xx/t7xx_port_wwan.c | 2 + drivers/ntb/hw/epf/ntb_hw_epf.c | 81 ++- drivers/nvdimm/btt.c | 14 +- drivers/nvdimm/nd.h | 11 +- drivers/nvdimm/region_devs.c | 66 +-- drivers/nvme/host/core.c | 2 +- drivers/nvme/target/rdma.c | 18 +- drivers/nvme/target/tcp.c | 11 +- drivers/of/cpu.c | 2 +- drivers/of/dynamic.c | 1 - drivers/of/platform.c | 5 - drivers/pci/Makefile | 2 +- drivers/pci/controller/Kconfig | 1 + drivers/pci/controller/dwc/pci-meson.c | 13 +- drivers/pci/controller/dwc/pcie-designware-host.c | 2 +- drivers/pci/controller/dwc/pcie-qcom.c | 43 +- .../pci/controller/mobiveil/pcie-mobiveil-host.c | 8 +- drivers/pci/controller/pci-loongson.c | 31 +- drivers/pci/controller/pcie-altera-msi.c | 2 +- drivers/pci/controller/pcie-altera.c | 31 +- drivers/pci/controller/pcie-iproc-bcma.c | 2 +- drivers/pci/controller/pcie-iproc-platform.c | 2 +- drivers/pci/controller/pcie-iproc.c | 1 - drivers/pci/controller/pcie-iproc.h | 2 - drivers/pci/controller/pcie-mediatek-gen3.c | 4 +- drivers/pci/controller/pcie-mediatek.c | 180 +++--- drivers/pci/controller/pcie-rcar-host.c | 1 - drivers/pci/controller/pcie-xilinx-dma-pl.c | 2 +- drivers/pci/controller/pcie-xilinx-nwl.c | 2 +- drivers/pci/controller/plda/pcie-plda-host.c | 2 +- drivers/pci/endpoint/functions/pci-epf-ntb.c | 21 +- drivers/pci/endpoint/functions/pci-epf-vntb.c | 9 +- drivers/pci/msi/msi.c | 4 +- drivers/pci/pci-sysfs.c | 17 +- drivers/pci/pci.c | 137 ----- drivers/pci/pci.h | 4 + drivers/pci/rebar.c | 197 +++++++ drivers/pci/rom.c | 149 ++++- drivers/pci/setup-bus.c | 104 +++- drivers/pci/setup-res.c | 53 -- drivers/phy/phy-can-transceiver.c | 3 + drivers/pinctrl/cirrus/pinctrl-cs42l43.c | 2 +- drivers/pinctrl/mediatek/pinctrl-mt8167.c | 2 +- drivers/pinctrl/mediatek/pinctrl-mt8516.c | 2 +- drivers/pinctrl/meson/pinctrl-meson.c | 2 +- drivers/pinctrl/nuvoton/pinctrl-ma35.c | 3 +- drivers/pinctrl/nuvoton/pinctrl-ma35d1.c | 470 +++++++++------- drivers/pinctrl/sunxi/pinctrl-sunxi.c | 2 +- drivers/platform/x86/amd/pmc/pmc-quirks.c | 39 ++ drivers/platform/x86/amd/pmc/pmc.c | 83 ++- drivers/platform/x86/amd/pmc/pmc.h | 2 + drivers/platform/x86/dell/dell-laptop.c | 5 + drivers/platform/x86/xo15-ebook.c | 7 +- drivers/pmdomain/imx/imx8m-blk-ctrl.c | 46 +- drivers/power/sequencing/core.c | 9 +- drivers/power/supply/charger-manager.c | 6 +- drivers/power/supply/cpcap-battery.c | 11 +- drivers/power/supply/power_supply_core.c | 11 +- drivers/pwm/pwm-imx27.c | 8 +- drivers/rapidio/devices/tsi721.c | 3 +- drivers/regulator/core.c | 4 +- drivers/regulator/ltc3676.c | 10 +- drivers/remoteproc/qcom_common.c | 14 +- drivers/reset/reset-sunxi.c | 4 +- drivers/rpmsg/qcom_glink_native.c | 2 - drivers/rpmsg/rpmsg_core.c | 43 +- drivers/rpmsg/virtio_rpmsg_bus.c | 1 - drivers/rtc/rtc-abx80x.c | 3 +- drivers/rtc/rtc-cmos.c | 6 + drivers/rtc/rtc-ds1307.c | 30 +- drivers/rtc/rtc-mpfs.c | 2 +- drivers/rtc/rtc-msc313.c | 4 +- drivers/s390/char/monwriter.c | 3 + drivers/s390/crypto/pkey_api.c | 8 +- drivers/s390/crypto/pkey_pckmo.c | 4 + drivers/s390/crypto/zcrypt_cex2a.c | 0 drivers/s390/crypto/zcrypt_cex2a.h | 0 drivers/s390/crypto/zcrypt_cex2c.c | 0 drivers/s390/crypto/zcrypt_cex2c.h | 0 drivers/scsi/elx/efct/efct_hw.c | 2 + drivers/scsi/elx/efct/efct_unsol.c | 1 + drivers/scsi/hpsa.c | 4 + drivers/scsi/lpfc/lpfc_init.c | 3 +- drivers/scsi/pm8001/pm8001_ctl.c | 5 +- drivers/scsi/scsi_scan.c | 2 +- drivers/scsi/scsi_transport_sas.c | 101 ++-- drivers/scsi/sg.c | 7 +- drivers/scsi/smartpqi/smartpqi_init.c | 2 +- drivers/soc/fsl/qe/qe.c | 3 + drivers/soc/ti/k3-ringacc.c | 4 +- drivers/soc/xilinx/zynqmp_power.c | 4 +- drivers/spi/spi-dw.h | 1 + drivers/spi/spi-ep93xx.c | 1 + drivers/spi/spi-hisi-kunpeng.c | 6 +- drivers/spi/spi-meson-spifc.c | 1 + drivers/spi/spi-rpc-if.c | 6 +- drivers/spi/spi-sh-msiof.c | 10 +- drivers/spi/spi-uniphier.c | 4 +- drivers/spi/spi-xilinx.c | 11 +- drivers/spi/spi.c | 5 - drivers/staging/media/atomisp/i2c/atomisp-gc2235.c | 29 +- drivers/staging/media/atomisp/pci/atomisp_cmd.c | 6 +- drivers/staging/media/atomisp/pci/sh_css.c | 8 +- drivers/staging/media/sunxi/cedrus/cedrus.c | 4 +- drivers/staging/most/video/video.c | 7 +- drivers/staging/nvec/nvec.c | 4 +- drivers/staging/rtl8723bs/core/rtw_ieee80211.c | 93 ++-- drivers/staging/rtl8723bs/core/rtw_security.c | 2 +- drivers/target/iscsi/iscsi_target_auth.c | 6 +- drivers/target/loopback/tcm_loop.c | 64 --- drivers/target/target_core_fabric_lib.c | 89 ++- drivers/target/target_core_internal.h | 3 +- drivers/target/target_core_pr.c | 12 +- drivers/thermal/intel/therm_throt.c | 7 +- drivers/thermal/testing/command.c | 48 +- drivers/thermal/testing/thermal_testing.h | 8 + drivers/thermal/testing/zone.c | 7 +- drivers/thermal/thermal_hwmon.c | 5 +- drivers/thunderbolt/debugfs.c | 8 +- drivers/tty/serial/8250/8250_omap.c | 3 +- drivers/tty/serial/max310x.c | 12 + drivers/tty/serial/msm_serial.c | 3 +- drivers/ufs/core/ufshcd.c | 2 +- drivers/usb/atm/ueagle-atm.c | 36 +- drivers/usb/gadget/function/f_fs.c | 6 +- drivers/usb/host/max3421-hcd.c | 8 + drivers/usb/misc/iowarrior.c | 74 +-- drivers/vdpa/octeon_ep/octep_vdpa_main.c | 7 +- drivers/vdpa/vdpa_user/vduse_dev.c | 72 ++- drivers/vfio/pci/mlx5/cmd.h | 15 +- drivers/vfio/pci/qat/main.c | 18 +- drivers/vhost/net.c | 15 +- drivers/vhost/vdpa.c | 29 +- drivers/vhost/vhost.c | 11 +- drivers/video/fbdev/aty/radeon_base.c | 1 + drivers/video/fbdev/broadsheetfb.c | 8 +- drivers/video/fbdev/carminefb.c | 1 + drivers/video/fbdev/core/fbcon.c | 7 +- drivers/video/fbdev/efifb.c | 1 + drivers/video/fbdev/hecubafb.c | 6 +- drivers/video/fbdev/i740fb.c | 1 + drivers/video/fbdev/metronomefb.c | 8 +- drivers/video/fbdev/nvidia/nvidia.c | 1 + drivers/video/fbdev/s3fb.c | 1 + drivers/video/fbdev/sm501fb.c | 16 +- drivers/video/fbdev/sm712.h | 2 +- drivers/video/fbdev/tdfxfb.c | 1 + drivers/video/fbdev/tridentfb.c | 1 + drivers/video/fbdev/uvesafb.c | 4 +- drivers/video/fbdev/vesafb.c | 1 + drivers/watchdog/sama5d4_wdt.c | 48 +- drivers/watchdog/sp5100_tco.c | 3 +- drivers/watchdog/sprd_wdt.c | 5 +- drivers/watchdog/watchdog_core.c | 3 + drivers/xen/gntdev.c | 8 +- drivers/xen/xen-scsiback.c | 30 +- fs/9p/vfs_addr.c | 3 +- fs/9p/vfs_inode.c | 9 + fs/afs/callback.c | 7 +- fs/afs/cell.c | 43 +- fs/afs/cmservice.c | 2 - fs/afs/dir.c | 5 +- fs/afs/dynroot.c | 509 ++++++++--------- fs/afs/file.c | 15 +- fs/afs/fs_operation.c | 2 +- fs/afs/inode.c | 1 - fs/afs/internal.h | 12 +- fs/afs/main.c | 3 + fs/afs/proc.c | 10 +- fs/afs/rxrpc.c | 11 +- fs/afs/super.c | 16 +- fs/afs/vl_list.c | 10 +- fs/afs/volume.c | 2 +- fs/btrfs/btrfs_inode.h | 3 +- fs/btrfs/compression.c | 2 +- fs/btrfs/direct-io.c | 69 ++- fs/btrfs/disk-io.c | 16 +- fs/btrfs/extent-tree.c | 5 +- fs/btrfs/extent_io.c | 106 ++-- fs/btrfs/file.c | 27 +- fs/btrfs/fs.h | 7 - fs/btrfs/inode.c | 228 ++------ fs/btrfs/ordered-data.c | 41 +- fs/btrfs/ordered-data.h | 8 +- fs/btrfs/reflink.c | 106 ++-- fs/btrfs/super.c | 3 +- fs/ceph/addr.c | 13 +- fs/configfs/dir.c | 57 +- fs/crypto/fscrypt_private.h | 87 +-- fs/crypto/inline_crypt.c | 8 +- fs/crypto/keyring.c | 239 ++++---- fs/crypto/keysetup.c | 121 ++-- fs/dlm/midcomms.c | 4 +- fs/efs/file.c | 21 +- fs/eventpoll.c | 609 ++++++++++++++------- fs/exfat/dir.c | 49 +- fs/exfat/exfat_fs.h | 7 +- fs/exfat/inode.c | 2 +- fs/exfat/namei.c | 206 +++---- fs/ext2/file.c | 9 +- fs/ext4/inode.c | 3 +- fs/ext4/ioctl.c | 15 +- fs/fhandle.c | 2 +- fs/fs-writeback.c | 5 - fs/hfs/bfind.c | 2 +- fs/hfs/bnode.c | 54 +- fs/hfs/brec.c | 2 +- fs/hfs/btree.c | 2 +- fs/hfs/btree.h | 71 +-- fs/hfs/hfs_fs.h | 88 +-- fs/hfs/inode.c | 3 +- fs/hfsplus/bfind.c | 2 +- fs/hfsplus/bnode.c | 60 +- fs/hfsplus/brec.c | 2 +- fs/hfsplus/btree.c | 2 +- fs/hfsplus/hfsplus_fs.h | 40 +- fs/jbd2/journal.c | 2 + fs/lockd/svcsubs.c | 4 +- fs/minix/minix.h | 2 +- fs/namei.c | 24 +- fs/netfs/buffered_read.c | 16 +- fs/netfs/objects.c | 15 +- fs/netfs/read_collect.c | 47 +- fs/netfs/write_issue.c | 11 +- fs/nfs/callback_proc.c | 9 +- fs/nfs/delegation.c | 9 +- fs/nfs/filelayout/filelayout.c | 2 + fs/nfs/flexfilelayout/flexfilelayout.c | 29 + fs/nfs/flexfilelayout/flexfilelayout.h | 16 + fs/nfs/fscache.c | 6 +- fs/nfs/fscache.h | 3 +- fs/nfs/internal.h | 12 +- fs/nfs/nfs4proc.c | 22 +- fs/nfs/pnfs.c | 4 +- fs/nfs/pnfs_nfs.c | 2 +- fs/nfs/read.c | 25 +- fs/nfs/write.c | 14 +- fs/nfsd/nfs4state.c | 16 +- fs/nilfs2/super.c | 2 - fs/ntfs3/fslog.c | 147 ++++- fs/ntfs3/index.c | 45 +- fs/ntfs3/lznt.c | 2 +- fs/ntfs3/namei.c | 2 +- fs/ntfs3/ntfs_fs.h | 3 +- fs/ntfs3/run.c | 9 +- fs/ocfs2/alloc.c | 2 +- fs/ocfs2/aops.c | 13 +- fs/ocfs2/buffer_head_io.c | 7 +- fs/ocfs2/dlm/dlmdebug.c | 16 +- fs/ocfs2/dlmglue.c | 17 + fs/ocfs2/inode.c | 150 ++++- fs/ocfs2/journal.c | 13 +- fs/ocfs2/journal.h | 3 + fs/ocfs2/move_extents.c | 4 +- fs/ocfs2/ocfs2.h | 2 - fs/ocfs2/quota_local.c | 2 +- fs/ocfs2/stack_user.c | 10 +- fs/ocfs2/super.c | 2 - fs/ocfs2/sysfile.c | 9 +- fs/orangefs/dir.c | 7 +- fs/overlayfs/inode.c | 4 +- fs/proc/array.c | 15 +- fs/proc/base.c | 184 +++---- fs/proc/fd.c | 31 +- fs/proc/generic.c | 9 +- fs/proc/internal.h | 6 +- fs/proc/namespaces.c | 16 +- fs/proc/proc_net.c | 2 +- fs/proc/task_mmu.c | 61 ++- fs/smb/client/cifs_swn.c | 329 ++++++++--- fs/smb/client/cifssmb.c | 10 +- fs/smb/client/connect.c | 3 + fs/smb/client/file.c | 4 +- fs/smb/client/inode.c | 30 +- fs/smb/client/ioctl.c | 12 +- fs/smb/client/misc.c | 8 + fs/smb/client/smb2ops.c | 38 +- fs/smb/client/smb2pdu.c | 10 +- fs/smb/client/trace.h | 2 + fs/smb/server/connection.c | 101 +++- fs/smb/server/connection.h | 6 + fs/smb/server/misc.c | 33 -- fs/smb/server/misc.h | 1 - fs/smb/server/oplock.c | 13 +- fs/smb/server/server.c | 12 + fs/smb/server/smb2pdu.c | 53 +- fs/smb/server/smbacl.c | 7 +- fs/smb/server/vfs.c | 78 +-- fs/smb/server/vfs_cache.c | 114 +++- fs/smb/server/vfs_cache.h | 1 + fs/sysfs/file.c | 4 + fs/udf/super.c | 2 +- include/acpi/acpi_bus.h | 2 + include/asm-generic/bitops/lock.h | 22 +- include/dt-bindings/power/fsl,imx93-power.h | 1 + include/linux/amba/bus.h | 5 - include/linux/bpf.h | 14 +- include/linux/bpf_local_storage.h | 3 - include/linux/bpf_lsm.h | 4 + include/linux/cdx/cdx_bus.h | 4 - include/linux/device.h | 5 +- include/linux/dpll.h | 55 ++ include/linux/filter.h | 15 +- include/linux/gfp.h | 4 + include/linux/hid.h | 29 + include/linux/host1x.h | 7 + include/linux/hyperv.h | 5 - include/linux/i3c/master.h | 2 +- include/linux/inetdevice.h | 5 + include/linux/iommu.h | 2 +- include/linux/jiffies.h | 15 +- include/linux/namei.h | 7 +- include/linux/netfs.h | 7 +- include/linux/nfs_page.h | 1 + include/linux/nfs_xdr.h | 1 - include/linux/pci.h | 4 +- include/linux/rpmsg.h | 4 - include/linux/rtnetlink.h | 63 ++- include/linux/seqlock.h | 110 ++++ include/linux/slab.h | 100 ++++ include/linux/sunrpc/clnt.h | 1 + include/linux/sunrpc/xprt.h | 2 + include/linux/vmalloc.h | 4 +- include/linux/workqueue.h | 1 + include/net/addrconf.h | 15 +- include/net/bluetooth/hci.h | 21 +- include/net/bluetooth/hci_core.h | 49 +- include/net/bluetooth/l2cap.h | 13 +- include/net/dropreason-core.h | 21 +- include/net/fib_rules.h | 5 + include/net/gue.h | 2 +- include/net/ip_fib.h | 7 +- include/net/ip_vs.h | 3 +- include/net/net_namespace.h | 4 + include/net/netfilter/nf_conntrack_extend.h | 12 - include/net/netfilter/nf_queue.h | 1 + include/net/scm.h | 4 +- include/net/sctp/sctp.h | 3 +- include/net/tc_act/tc_pedit.h | 18 +- include/net/udp_tunnel.h | 86 ++- include/net/xfrm.h | 15 +- include/trace/events/afs.h | 4 + include/uapi/linux/bpf.h | 1 + include/uapi/linux/dpll.h | 1 + io_uring/rw.c | 13 +- kernel/bpf/bpf_inode_storage.c | 9 + kernel/bpf/bpf_lsm.c | 3 + kernel/bpf/cgroup.c | 108 ++-- kernel/bpf/core.c | 85 ++- kernel/bpf/devmap.c | 12 + kernel/bpf/dispatcher.c | 2 +- kernel/bpf/hashtab.c | 21 +- kernel/bpf/helpers.c | 12 +- kernel/bpf/inode.c | 13 +- kernel/bpf/lpm_trie.c | 11 +- kernel/bpf/syscall.c | 5 +- kernel/bpf/verifier.c | 3 +- kernel/cgroup/cpuset.c | 7 +- kernel/cpu.c | 20 +- kernel/fork.c | 9 +- kernel/kcov.c | 4 +- kernel/sched/core.c | 1 + kernel/sched/debug.c | 9 +- kernel/sched/fair.c | 25 +- kernel/taskstats.c | 62 ++- kernel/time/jiffies.c | 16 +- kernel/time/posix-cpu-timers.c | 2 +- kernel/time/tick-sched.c | 11 +- kernel/time/time.c | 2 +- kernel/time/timekeeping.c | 7 +- kernel/trace/bpf_trace.c | 11 +- kernel/trace/ring_buffer.c | 3 +- kernel/trace/trace_eprobe.c | 2 +- kernel/trace/trace_events_hist.c | 41 +- kernel/trace/trace_events_user.c | 43 +- kernel/trace/trace_osnoise.c | 4 +- kernel/trace/trace_probe.c | 1 + kernel/trace/trace_probe.h | 2 +- kernel/workqueue.c | 2 +- lib/test_meminit.c | 2 +- mm/compaction.c | 7 +- mm/damon/core.c | 51 +- mm/damon/sysfs-schemes.c | 17 +- mm/memory_hotplug.c | 2 +- mm/mm_init.c | 13 +- mm/numa_emulation.c | 17 +- mm/swap_cgroup.c | 6 + net/9p/client.c | 2 + net/9p/trans_rdma.c | 19 +- net/Kconfig.debug | 15 + net/atm/common.c | 2 + net/batman-adv/distributed-arp-table.c | 30 +- net/batman-adv/fragmentation.c | 8 +- net/batman-adv/gateway_client.c | 3 +- net/batman-adv/main.c | 13 +- net/batman-adv/multicast_forw.c | 7 +- net/batman-adv/routing.c | 3 +- net/batman-adv/soft-interface.c | 17 +- net/batman-adv/soft-interface.h | 2 + net/batman-adv/translation-table.c | 5 +- net/bluetooth/6lowpan.c | 74 +-- net/bluetooth/eir.c | 8 +- net/bluetooth/hci_codec.c | 2 +- net/bluetooth/hci_conn.c | 62 +-- net/bluetooth/hci_core.c | 83 +-- net/bluetooth/hci_event.c | 28 +- net/bluetooth/hci_sync.c | 179 +++++- net/bluetooth/iso.c | 4 +- net/bluetooth/l2cap_core.c | 206 +++++-- net/bluetooth/l2cap_sock.c | 103 ++-- net/bluetooth/mgmt.c | 5 +- net/bluetooth/msft.c | 2 +- net/bluetooth/sco.c | 62 ++- net/bluetooth/smp.c | 27 +- net/bridge/br_cfm.c | 6 + net/bridge/br_cfm_netlink.c | 4 +- net/bridge/br_if.c | 3 + net/bridge/br_stp.c | 3 +- net/bridge/netfilter/ebtables.c | 13 +- net/bridge/netfilter/nft_meta_bridge.c | 4 +- net/can/bcm.c | 127 ++++- net/can/isotp.c | 9 +- net/core/dev.c | 2 + net/core/fib_rules.c | 6 +- net/core/filter.c | 28 +- net/core/flow_dissector.c | 12 +- net/core/lwt_bpf.c | 12 + net/core/net_namespace.c | 6 + net/core/netdev-genl.c | 4 +- net/core/rtnetlink.c | 81 +++ net/devlink/rate.c | 10 +- net/handshake/genl.c | 2 +- net/ieee802154/core.c | 2 +- net/ieee802154/header_ops.c | 9 +- net/ieee802154/ieee802154.h | 17 + net/ieee802154/netlink.c | 36 +- net/ife/ife.c | 2 +- net/ipv4/igmp.c | 14 +- net/ipv4/inet_connection_sock.c | 6 + net/ipv4/ip_vti.c | 3 + net/ipv4/ipip.c | 3 + net/ipv4/netfilter/nf_reject_ipv4.c | 2 +- net/ipv4/udp_tunnel_core.c | 16 +- net/ipv4/udp_tunnel_nic.c | 80 ++- net/ipv6/addrconf.c | 101 ++-- net/ipv6/ip6_fib.c | 17 +- net/ipv6/ip6_gre.c | 6 + net/ipv6/ip6_vti.c | 3 + net/ipv6/mcast.c | 165 +++--- net/ipv6/ndisc.c | 8 +- net/ipv6/netfilter.c | 4 +- net/ipv6/netfilter/ip6t_ah.c | 5 + net/ipv6/netfilter/ip6t_hbh.c | 1 + net/ipv6/netfilter/ip6t_rt.c | 3 +- net/ipv6/netfilter/nf_conntrack_reasm.c | 3 +- net/ipv6/route.c | 9 +- net/ipv6/seg6.c | 3 + net/ipv6/sit.c | 3 + net/kcm/kcmsock.c | 8 +- net/llc/af_llc.c | 1 + net/llc/llc_conn.c | 1 - net/mac80211/main.c | 3 +- net/mac80211/tx.c | 17 +- net/mac802154/iface.c | 2 +- net/mac802154/scan.c | 1 + net/netfilter/ipset/ip_set_core.c | 4 +- net/netfilter/ipset/ip_set_hash_gen.h | 69 ++- net/netfilter/ipvs/ip_vs_app.c | 10 +- net/netfilter/ipvs/ip_vs_conn.c | 4 +- net/netfilter/ipvs/ip_vs_core.c | 36 +- net/netfilter/ipvs/ip_vs_proto_sctp.c | 18 +- net/netfilter/ipvs/ip_vs_proto_tcp.c | 11 +- net/netfilter/ipvs/ip_vs_proto_udp.c | 3 +- net/netfilter/ipvs/ip_vs_xmit.c | 6 +- net/netfilter/nf_conncount.c | 23 +- net/netfilter/nf_conntrack_core.c | 83 +-- net/netfilter/nf_conntrack_ecache.c | 2 +- net/netfilter/nf_conntrack_extend.c | 32 +- net/netfilter/nf_conntrack_irc.c | 6 +- net/netfilter/nf_conntrack_seqadj.c | 2 + net/netfilter/nf_nat_core.c | 10 + net/netfilter/nf_nat_sip.c | 11 + net/netfilter/nf_queue.c | 14 + net/netfilter/nf_synproxy_core.c | 40 +- net/netfilter/nfnetlink_cthelper.c | 24 +- net/netfilter/nfnetlink_osf.c | 6 +- net/netfilter/nfnetlink_queue.c | 3 + net/netfilter/nft_compat.c | 24 +- net/netfilter/nft_lookup.c | 10 +- net/netfilter/nft_set_pipapo.c | 34 +- net/netfilter/nft_set_pipapo.h | 8 + net/netfilter/nft_synproxy.c | 9 +- net/netfilter/xt_cluster.c | 2 +- net/netfilter/xt_connmark.c | 14 +- net/netfilter/xt_nat.c | 9 + net/netfilter/xt_rateest.c | 2 +- net/netfilter/xt_u32.c | 12 +- net/openvswitch/conntrack.c | 2 +- net/openvswitch/flow_netlink.c | 201 +++++-- net/psample/psample.c | 6 +- net/qrtr/af_qrtr.c | 2 +- net/rxrpc/recvmsg.c | 5 +- net/sched/act_api.c | 13 +- net/sched/act_bpf.c | 2 +- net/sched/act_ct.c | 13 +- net/sched/act_pedit.c | 13 +- net/sched/cls_api.c | 25 +- net/sched/cls_bpf.c | 10 +- net/sched/cls_flow.c | 12 +- net/sched/sch_cake.c | 5 +- net/sched/sch_codel.c | 48 +- net/sched/sch_drr.c | 8 +- net/sched/sch_fq_codel.c | 41 +- net/sched/sch_hfsc.c | 24 +- net/sched/sch_hhf.c | 27 + net/sched/sch_htb.c | 14 +- net/sched/sch_multiq.c | 2 +- net/sched/sch_taprio.c | 2 +- net/sched/sch_teql.c | 126 +++-- net/sctp/diag.c | 67 ++- net/sctp/sm_make_chunk.c | 10 +- net/sctp/sm_statefuns.c | 23 +- net/sctp/socket.c | 38 +- net/smc/smc_cdc.c | 15 +- net/smc/smc_loopback.c | 5 + net/sunrpc/clnt.c | 19 +- net/sunrpc/svcsock.c | 10 + net/sunrpc/xdr.c | 14 +- net/sunrpc/xprt.c | 16 + net/sunrpc/xprtrdma/backchannel.c | 5 +- net/sunrpc/xprtrdma/frwr_ops.c | 2 +- net/sunrpc/xprtrdma/rpc_rdma.c | 171 ++++-- net/sunrpc/xprtrdma/transport.c | 85 ++- net/sunrpc/xprtrdma/verbs.c | 126 ++++- net/sunrpc/xprtrdma/xprt_rdma.h | 4 +- net/sunrpc/xprtsock.c | 16 +- net/tipc/bearer.c | 1 + net/tipc/core.c | 5 + net/tipc/discover.c | 14 +- net/tipc/name_distr.c | 13 +- net/tipc/netlink.c | 12 + net/tipc/socket.c | 3 + net/tls/tls_sw.c | 11 + net/unix/af_unix.c | 94 ++-- net/vmw_vsock/virtio_transport_common.c | 88 ++- net/wireless/nl80211.c | 2 +- net/xfrm/espintcp.c | 34 +- net/xfrm/xfrm_interface_core.c | 3 + net/xfrm/xfrm_policy.c | 27 +- net/xfrm/xfrm_state.c | 26 +- net/xfrm/xfrm_user.c | 20 +- rust/kernel/alloc/kvec.rs | 4 +- rust/kernel/block/mq/gen_disk.rs | 15 +- rust/kernel/block/mq/request.rs | 2 + samples/trace_events/trace-events-sample.c | 4 + scripts/kconfig/conf.c | 6 +- security/apparmor/apparmorfs.c | 111 +++- security/apparmor/domain.c | 58 +- security/apparmor/include/apparmorfs.h | 12 + security/apparmor/label.c | 2 +- security/apparmor/net.c | 1 + security/apparmor/policy.c | 20 +- security/apparmor/procattr.c | 2 + security/bpf/hooks.c | 3 + security/integrity/evm/evm_secfs.c | 16 +- security/keys/keyring.c | 2 +- security/landlock/net.c | 11 +- security/selinux/hooks.c | 80 ++- sound/aoa/fabrics/layout.c | 6 + sound/core/init.c | 11 +- sound/core/seq/seq_clientmgr.c | 33 +- sound/core/seq/seq_memory.c | 2 +- sound/core/seq/seq_midi.c | 55 +- sound/pci/hda/cs35l41_hda.c | 77 ++- sound/pci/hda/cs35l41_hda.h | 5 + sound/soc/amd/acp/acp-sdw-sof-mach.c | 7 +- sound/soc/codecs/adau1372.c | 5 + sound/soc/codecs/aw88261.c | 12 +- sound/soc/codecs/cs35l56-shared.c | 1 + sound/soc/codecs/cs35l56.c | 14 +- sound/soc/codecs/hdac_hdmi.c | 4 +- sound/soc/codecs/lpass-va-macro.c | 8 +- sound/soc/codecs/tlv320aic3x.c | 25 +- sound/soc/fsl/fsl_asrc_dma.c | 20 + sound/soc/fsl/fsl_audmix.c | 6 + sound/soc/mediatek/mt8183/mt8183-afe-pcm.c | 11 + sound/soc/mediatek/mt8192/mt8192-afe-pcm.c | 9 + sound/soc/qcom/qdsp6/q6apm.c | 8 + sound/soc/sh/rcar/rsnd.h | 2 +- sound/soc/sof/ipc3-control.c | 79 ++- sound/soc/sof/ipc4-control.c | 11 +- sound/soc/sof/topology.c | 5 +- sound/soc/tegra/tegra210_ahub.c | 4 +- sound/usb/midi2.c | 5 + sound/usb/mixer_scarlett2.c | 201 ++++++- tools/bpf/bpftool/cgroup.c | 14 +- tools/bpf/bpftool/gen.c | 2 +- tools/bpf/bpftool/net.c | 4 +- tools/include/uapi/linux/bpf.h | 1 + tools/include/uapi/linux/mount.h | 235 ++++++++ tools/include/uapi/linux/nsfs.h | 45 ++ tools/lib/api/fs/fs.c | 19 +- tools/lib/bpf/libbpf.c | 9 +- tools/lib/bpf/strset.c | 62 ++- tools/lib/bpf/usdt.c | 16 +- tools/lib/symbol/kallsyms.c | 5 +- tools/power/x86/intel-speed-select/isst-daemon.c | 9 +- tools/testing/cxl/test/cxl.c | 10 +- tools/testing/cxl/test/mem.c | 6 +- .../selftests/bpf/prog_tests/fill_link_info.c | 2 +- .../selftests/bpf/prog_tests/verifier_log.c | 1 + .../selftests/bpf/progs/bpf_iter_task_vmas.c | 2 +- .../testing/selftests/bpf/progs/test_tunnel_kern.c | 13 +- tools/testing/selftests/bpf/progs/xdp_flowtable.c | 7 +- tools/testing/selftests/bpf/vmtest.sh | 2 +- .../selftests/filesystems/statmount/Makefile | 3 +- .../selftests/filesystems/statmount/statmount.h | 36 ++ .../ftrace/test.d/00basic/test_ownership.tc | 2 +- tools/testing/selftests/hid/Makefile | 2 +- tools/testing/selftests/hid/hid_bpf.c | 36 +- tools/testing/selftests/hid/progs/hid.c | 15 + .../selftests/landlock/scoped_signal_test.c | 237 +++++++- .../selftests/mm/charge_reserved_hugetlb.sh | 3 +- tools/testing/selftests/mm/compaction_test.c | 3 + tools/testing/selftests/mm/hmm-tests.c | 63 ++- tools/testing/selftests/mm/hugepage-mremap.c | 32 +- tools/testing/selftests/mm/pkey-arm64.h | 3 +- tools/testing/selftests/net/lib.sh | 25 +- tools/testing/selftests/net/tcp_mmap.c | 4 + tools/virtio/vringh_test.c | 5 + virt/kvm/kvm_main.c | 16 +- 1134 files changed, 15507 insertions(+), 8585 deletions(-)

1 month, 1 week

[PATCH 5.10 000/674] 5.10.261-rc2 review

by Greg Kroah-Hartman

This is the start of the stable review cycle for the 5.10.261 release. There are 674 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know. Responses should be made by Fri, 24 Jul 2026 14:26:57 +0000. Anything received after that time might be too late. The whole patch series can be found in one patch at: https://www.kernel.org/pub/linux/kernel/v5.x/stable-review/patch-5.10.261-r… or in the git tree and branch at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-5.10.y and the diffstat can be found below. thanks, greg k-h ------------- Pseudo-Shortlog of commits: Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> Linux 5.10.261-rc2 Sandipan Das <sandipan.das(a)amd.com> perf/x86/amd/core: Always use the NMI latency mitigation Taehee Yoo <ap420073(a)gmail.com> mld: fix suspicious RCU usage in __ipv6_dev_mc_dec() Eric Dumazet <edumazet(a)google.com> ipv6: mcast: remove one synchronize_net() barrier in ipv6_mc_down() Nikita Zhandarovich <n.zhandarovich(a)fintech.ru> ipv6: mcast: fix data-race in ipv6_mc_down / mld_ifc_work Taehee Yoo <ap420073(a)gmail.com> net: mld: fix reference count leak in mld_{query | report}_work() Eric Dumazet <edumazet(a)google.com> ipv6: fix lockdep splat in in6_dump_addrs() Ignat Korchagin <ignat(a)cloudflare.com> ipv6: mcast: use rcu-safe version of ipv6_get_lladdr() Kristian Evensen <kristian.evensen(a)gmail.com> net: ethernet: rmnet: Always subtract MAP header Yue Haibing <yuehaibing(a)huawei.com> ipv6: mcast: Delay put pmc->idev in mld_del_delrec() Taehee Yoo <ap420073(a)gmail.com> mld: change lockdep annotation for ip6_sf_socklist and ipv6_mc_socklist Jean-Baptiste Maneyrol <jean-baptiste.maneyrol(a)tdk.com> iio: imu: inv_icm42600: fix timestamp clock period by using lower value Jean-Baptiste Maneyrol <jean-baptiste.maneyrol(a)tdk.com> iio: invensense: fix odr switching to same value Jean-Baptiste Maneyrol <jean-baptiste.maneyrol(a)tdk.com> iio: imu: inv_mpu6050: fix frequency setting when chip is off Luiz Augusto von Dentz <luiz.von.dentz(a)intel.com> Bluetooth: L2CAP: Fix regressions caused by reusing ident Marc Zyngier <maz(a)kernel.org> KVM: Move kvm_io_bus_get_dev() locking responsibilities to callers Zhan Xusheng <zhanxusheng1024(a)gmail.com> posix-cpu-timers: Use u64 multiplication in update_rlimit_cpu() Ricardo Robaina <rrobaina(a)redhat.com> audit: fix potential integer overflow in audit_log_n_hex() Ricardo Robaina <rrobaina(a)redhat.com> audit: add audit_log_nf_skb helper function Giovanni Cabiddu <giovanni.cabiddu(a)intel.com> crypto: qat - validate RSA CRT component lengths Ahsan Atta <ahsan.atta(a)intel.com> crypto: qat - fix restarting state leak on allocation failure Qu Wenruo <wqu(a)suse.com> btrfs: do not trim a device which is not writeable Neill Kapron <nkapron(a)google.com> usb: gadget: f_fs: Tie read_buffer lifetime to ffs_epfile Thorsten Blum <thorsten.blum(a)linux.dev> crypto: atmel-sha204a - drop hwrng quality reduction for ATSHA204A Uwe Kleine-König <u.kleine-koenig(a)baylibre.com> crypto: atmel - Drop explicit initialization of struct i2c_device_id::driver_data to 0 Krzysztof Kozlowski <krzysztof.kozlowski(a)linaro.org> crypto: atmel-sha204a - Mark OF related data as maybe unused Tyler Baker <tyler.baker(a)oss.qualcomm.com> usb: gadget: f_fs: initialize reset_work at allocation time Andy Yan <andyshrk(a)163.com> usb: typec: tcpm: Fix VDM type for Enter Mode commands Mauricio Faria de Oliveira <mfo(a)igalia.com> usb: atm: ueagle-atm: wait for pre-firmware load in .disconnect() Fan Wu <fanwu01(a)zju.edu.cn> usb: typec: ucsi: ccg: Fix use-after-free of ucsi on remove Uwe Kleine-König <u.kleine-koenig(a)pengutronix.de> gpio: pca953x: Make platform teardown callback return void Uwe Kleine-König <u.kleine-koenig(a)pengutronix.de> leds: lm3601x: Improve error reporting for problems during .remove() Uwe Kleine-König <u.kleine-koenig(a)pengutronix.de> leds: lm3697: Remove duplicated error reporting in .remove() Uwe Kleine-König <u.kleine-koenig(a)pengutronix.de> drm/i2c/sil164: Drop no-op remove function Johan Hovold <johan(a)kernel.org> USB: serial: digi_acceleport: fix write buffer corruption Oliver Neukum <oneukum(a)suse.com> usb: iowarrior: remove inherent race with minor number Dawei Feng <dawei.feng(a)seu.edu.cn> usb: free iso schedules on failed submit Xu Rao <raoxu(a)uniontech.com> usb: gadget: f_printer: take kref only for successful open Andrzej Pietrasiewicz <andrzej.p(a)collabora.com> usb: gadget: function: Simplify diagnostic messaging in printer Tristan Madani <tristan(a)talencesecurity.com> hfs/hfsplus: fix u32 overflow in check_and_correct_requested_length Viacheslav Dubeyko <slava(a)dubeyko.com> hfs/hfsplus: prevent getting negative values of offset/length Yousef Alhouseen <alhouseenyousef(a)gmail.com> xfs: use null daddr for unset first bad log block Alexey Nepomnyashih <sdl(a)nppct.ru> xfs: fix unreachable BIGTIME check in dquot flush validation Dave Chinner <dchinner(a)redhat.com> xfs: reflect sb features in xfs_mount Andy Shevchenko <andriy.shevchenko(a)linux.intel.com> serial: 8250_mid: Disable DMA for selected platforms Ilpo Järvinen <ilpo.jarvinen(a)linux.intel.com> serial: 8250_mid: Remove 8250_pci usage Manish Khadka <maskmemanish(a)gmail.com> HID: appleir: fix UAF on pending key_up_timer in remove() Jann Horn <jannh(a)google.com> proc: protect ptrace_may_access() with exec_update_lock (part 1) Fushuai Wang <wangfushuai(a)baidu.com> cpufreq: intel_pstate: Sync policy->cur during CPU offline Trung Nguyen <trungnh(a)cystack.net> HID: multitouch: fix out-of-bounds bit access on mt_io_flags Angela Czubak <aczubak(a)google.com> HID: add haptics page defines Jann Horn <jannh(a)google.com> proc: protect ptrace_may_access() with exec_update_lock (FD links) Christoph Hellwig <hch(a)lst.de> proc: rename proc_setattr to proc_nochmod_setattr Thomas Weißschuh <linux(a)weissschuh.net> proc: use generic setattr() for /proc/$PID/net Lukas Wunner <lukas(a)wunner.de> X.509: Fix validation of ASN.1 certificate header Baokun Li <libaokun(a)linux.alibaba.com> writeback: fix race between cgroup_writeback_umount() and inode_switch_wbs() Zihan Xi <xizh2024(a)lzu.edu.cn> smb: client: harden POSIX SID length parsing Zihan Xi <xizh2024(a)lzu.edu.cn> smb: client: use unaligned reads in parse_posix_ctxt() Norbert Manthey <nmanthey(a)amazon.de> smb: client: mask server-provided mode to 07777 in modefromsid Haoxiang Li <haoxiang_li2024(a)163.com> smb: client: Fix next buffer leak in receive_encrypted_standard() Runyu Xiao <runyu.xiao(a)seu.edu.cn> Bluetooth: L2CAP: cancel pending_rx_work before taking conn->lock Hyunwoo Kim <imv4bel(a)gmail.com> Bluetooth: L2CAP: Fix deadlock in l2cap_conn_del() Luiz Augusto von Dentz <luiz.von.dentz(a)intel.com> Bluetooth: L2CAP: Fix not tracking outstanding TX ident Florian Westphal <fw(a)strlen.de> netfilter: ebtables: zero chainstack array Qianfeng Rong <rongqianfeng(a)vivo.com> netfilter: ebtables: Use vmalloc_array() to improve code Runyu Xiao <runyu.xiao(a)seu.edu.cn> coresight: etb10: restore atomic_t for shared reading state Marco Nenciarini <mnencia(a)kcore.it> PCI: Skip Resizable BAR restore on read error Ilpo Järvinen <ilpo.jarvinen(a)linux.intel.com> PCI: Move Resizable BAR code to rebar.c Ilpo Järvinen <ilpo.jarvinen(a)linux.intel.com> PCI: Add kerneldoc for pci_resize_resource() Ilpo Järvinen <ilpo.jarvinen(a)linux.intel.com> PCI: Fix restoring BARs on BAR resize rollback path Ilpo Järvinen <ilpo.jarvinen(a)linux.intel.com> PCI: Free saved list without holding pci_bus_sem Ilpo Järvinen <ilpo.jarvinen(a)linux.intel.com> PCI: Prevent resource tree corruption when BAR resize fails Giovanni Cabiddu <giovanni.cabiddu(a)intel.com> crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() Fabio Aiuto <fabioaiuto83(a)gmail.com> staging: rtl8723bs: remove DBG_871X log argument Manivannan Sadhasivam <manivannan.sadhasivam(a)oss.qualcomm.com> PCI: mediatek: Fix IRQ domain leak when port fails to enable Christian Marangi <ansuelsmth(a)gmail.com> PCI: mediatek: Convert bool to single quirks entry and bitmap Jiri Slaby (SUSE) <jirislaby(a)kernel.org> PCI: controller: Use dev_fwnode() instead of of_fwnode_handle() Alexandru Hossu <hossu.alexandru(a)gmail.com> staging: rtl8723bs: fix OOB reads in IE loops in issue_assocreq() and join_cmd_hdl() Alexandru Hossu <hossu.alexandru(a)gmail.com> staging: rtl8723bs: fix heap buffer overflow in rtw_cfg80211_set_wpa_ie() Franziska Naepelt <franziska.naepelt(a)googlemail.com> staging: rtl8723bs: Fix space issues Alexandru Hossu <hossu.alexandru(a)gmail.com> staging: rtl8723bs: fix WEP length underflow and OOB read in OnAuth() Michael Straube <straube.linux(a)gmail.com> staging: rtl8723bs: clean up comparsions to NULL Fabio Aiuto <fabioaiuto83(a)gmail.com> staging: rtl8723bs: remove commented out condition Fabio Aiuto <fabioaiuto83(a)gmail.com> staging: rtl8723bs: remove 5Ghz code blocks Fabio Aiuto <fabioaiuto83(a)gmail.com> staging: rtl8723bs: remove 5Ghz code related to channel plan definition Fabio Aiuto <fabioaiuto83(a)gmail.com> staging: rtl8723bs: remove all 5Ghz network types Fabio Aiuto <fabioaiuto83(a)gmail.com> staging: rtl8723bs: remove commented out RT_ASSERT occurrences Fabio Aiuto <fabioaiuto83(a)gmail.com> staging: rtl8723bs: split too long line Richard Zhu <hongxing.zhu(a)nxp.com> PCI: imx6: Fix IMX6SX_GPR12_PCIE_TEST_POWERDOWN handling Shoichiro Miyamoto <shoichiro.miyamoto(a)gmail.com> smb: client: restrict implied bcc[0] exemption to responses without data area Enzo Matsumiya <ematsumiya(a)suse.de> cifs: remove unused server parameter from calc_smb_size() Enzo Matsumiya <ematsumiya(a)suse.de> smb2: small refactor in smb2_check_message() Jakob Koschel <jakobkoschel(a)gmail.com> cifs: remove check of list iterator against head past the loop body Ronnie Sahlberg <lsahlber(a)redhat.com> cifs: Create a new shared file holding smb2 pdu definitions Arnd Bergmann <arnd(a)arndb.de> staging: media: atomisp: reduce load_primary_binaries() stack usage Martiros Shakhzadyan <vrzh(a)vrzh.net> media: staging: media: atomisp: Fix alignment and line length issues Martiros Shakhzadyan <vrzh(a)vrzh.net> media: staging: media: atomisp: Replace if else clause with a ternary Martiros Shakhzadyan <vrzh(a)vrzh.net> media: staging: media: atomisp: Fix the rest of sh_css.c brace issues Martiros Shakhzadyan <vrzh(a)vrzh.net> media: staging: media: atomisp: Fix sh_css.c brace coding style issues Aditya Srivastava <yashsri421(a)gmail.com> media: atomisp: replace boolean comparison of values with bool variables Mahesh Vaidya <mahesh.vaidya(a)altera.com> PCI: altera: Fix resource leaks on probe failure Carlos Llamas <cmllamas(a)google.com> binder: fix UAF in binder_free_transaction() Alex Williamson <alex.williamson(a)nvidia.com> vfio/pci: Release the VGA arbiter client on register_device() failure Johan Hovold <johan(a)kernel.org> Bluetooth: btusb: fix wakeup source leak on probe failure Johan Hovold <johan(a)kernel.org> Bluetooth: btusb: fix use-after-free on marvell probe failure Luiz Augusto von Dentz <luiz.von.dentz(a)intel.com> Bluetooth: btintel: Check firmware version before download Kiran K <kiran.k(a)intel.com> Bluetooth: btintel: Fix offset calculation boot address parameter Zhao Dongdong <zhaodongdong(a)kylinos.cn> ALSA: aoa: check snd_ctl_new1() return value Herman van Hazendonk <github.com(a)herrie.org> iio: common: st_sensors: honour channel endianness in read_axis_data Alexander Lobakin <aleksander.lobakin(a)intel.com> bitops: make BYTES_TO_BITS() treewide-available Jean-Baptiste Maneyrol <jean-baptiste.maneyrol(a)tdk.com> iio: imu: inv_icm42600: fix timestamping by limiting FIFO reading Jean-Baptiste Maneyrol <jean-baptiste.maneyrol(a)tdk.com> iio: imu: inv_icm42600: stabilized timestamp in interrupt Jean-Baptiste Maneyrol <jean-baptiste.maneyrol(a)tdk.com> iio: invensense: fix timestamp glitches when switching frequency Colin Ian King <colin.i.king(a)gmail.com> iio: invensense: remove redundant initialization of variable period Jean-Baptiste Maneyrol <jean-baptiste.maneyrol(a)tdk.com> iio: imu: inv_mpu6050: use the common inv_sensors timestamp module Jean-Baptiste Maneyrol <jean-baptiste.maneyrol(a)tdk.com> iio: make invensense timestamp module generic Jean-Baptiste Maneyrol <jean-baptiste.maneyrol(a)tdk.com> iio: move inv_icm42600 timestamp module in common Jean-Baptiste Maneyrol <jean-baptiste.maneyrol(a)tdk.com> iio: imu: inv_icm42600: make timestamp module chip independent Zhang Lixu <lixu.zhang(a)intel.com> iio: hid-sensor-rotation: Fix stale or zero output when reading raw values Runyu Xiao <runyu.xiao(a)seu.edu.cn> iio: imu: adis: add IRQF_NO_THREAD to non-FIFO trigger IRQ Rafael J. Wysocki <rafael.j.wysocki(a)intel.com> ACPI: NFIT: core: Fix acpi_nfit_init() error cleanup Sven Eckelmann <sven(a)narfation.org> batman-adv: clean untagged VLAN on netdev registration failure Eric Biggers <ebiggers(a)kernel.org> crypto: crypto4xx - Remove insecure and unused rng_alg Herbert Xu <herbert(a)gondor.apana.org.au> crypto: crypto4xx - Remove ahash-related code Aditya Srivastava <yashsri421(a)gmail.com> crypto: amcc - fix incorrect kernel-doc comment syntax in files Pengpeng Hou <pengpeng(a)iscas.ac.cn> mtd: rawnand: lpc32xx_slc: fail DMA transfer on completion timeout Pengpeng Hou <pengpeng(a)iscas.ac.cn> mtd: rawnand: lpc32xx_mlc: fail DMA transfers on timeout Pengpeng Hou <pengpeng(a)iscas.ac.cn> mtd: rawnand: fsl_ifc: return errors for failed page reads Runyu Xiao <runyu.xiao(a)seu.edu.cn> mmc: vub300: defer reset until cmd_mutex is unlocked Pengpeng Hou <pengpeng(a)iscas.ac.cn> mtd: onenand: samsung: report DMA completion timeouts Rafael Beims <rafael.beims(a)toradex.com> wifi: mwifiex: fix permanently busy scans after multiple roam iterations Zhiling Zou <roxy520tt(a)gmail.com> wifi: mac80211: free ack status frame on TX header build failure Junrui Luo <moonafterrain(a)outlook.com> powerpc/spufs: fix out-of-bounds access in spufs_mem_mmap_access() Zhao Dongdong <zhaodongdong(a)kylinos.cn> reset: sunxi: fix memory region leak on ioremap failure Julian Anastasov <ja(a)ssi.bg> ipvs: fix more places with wrong ipv6 transport offsets Maoyi Xie <maoyixie.tju(a)gmail.com> memstick: ms_block: reject a card that reports too many blocks James Raphael Tiovalen <jamestiotio(a)gmail.com> macsec: fix promiscuity refcount leak in macsec_dev_open() Xuanqiang Luo <luoxuanqiang(a)kylinos.cn> llc: fix SAP refcount leak when creating incoming sockets Laxman Acharya Padhya <acharyalaxman8848(a)gmail.com> Bluetooth: btrtl: validate firmware patch bounds Abhishek Ojha <Abhishek.ojha(a)savoirfairelinux.com> regulator: ltc3676: Fix incorrect IRQSTAT bit offsets Dawei Feng <dawei.feng(a)seu.edu.cn> wifi: mac80211: fix memory leak in ieee80211_register_hw() Runyu Xiao <runyu.xiao(a)seu.edu.cn> wifi: rt2x00: avoid full teardown before work setup in probe Farhad Alemi <farhad.alemi(a)berkeley.edu> cgroup/cpuset: rebind mm mempolicy to effective_mems, not mems_allowed Michael Bommarito <michael.bommarito(a)gmail.com> drbd: reject data replies with an out-of-range payload size Yizhou Zhao <zhaoyz24(a)mails.tsinghua.edu.cn> ipvs: reset full ip_vs_seq structs in ip_vs_conn_new Yizhou Zhao <zhaoyz24(a)mails.tsinghua.edu.cn> ipvs: use parsed transport offset in SCTP state lookup Shuangpeng Bai <shuangpeng.kernel(a)gmail.com> llc: fix SAP refcount leak in llc_ui_autobind() Yousef Alhouseen <alhouseenyousef(a)gmail.com> mac802154: remove interfaces with RCU list deletion Gerald Schaefer <gerald.schaefer(a)linux.ibm.com> s390/monwriter: Reject buffer reuse with different data length HyeongJun An <sammiee5311(a)gmail.com> hwmon: (asus_atk0110) Check package count before accessing element Wentao Liang <vulab(a)iscas.ac.cn> ata: pata_pxa: Fix DMA channel leak on probe error Bryam Vargas <hexlabsecurity(a)proton.me> orangefs: keep the readdir entry size 64-bit in fill_from_part() Masami Hiramatsu (Google) <mhiramat(a)kernel.org> tracing/probes: Fix double addition of offset for @+FOFFSET Bryam Vargas <hexlabsecurity(a)proton.me> net/sched: sch_multiq: Replace direct dequeue call with peek and qdisc_dequeue_peeked Haoxiang Li <haoxiang_li2024(a)163.com> fsl/fman: Free init resources on KeyGen failure in fman_init() Haoxiang Li <haoxiang_li2024(a)163.com> net: liquidio: fix BAR resource leak on PF number failure Pengpeng Hou <pengpeng(a)iscas.ac.cn> hwmon: (w83793) remove vrm sysfs file on probe failure Pengpeng Hou <pengpeng(a)iscas.ac.cn> hwmon: (w83627hf) remove VID sysfs files on error and remove Abdun Nihaal <nihaal(a)cse.iitm.ac.in> bnx2x: fix potential memory leak in bnx2x_alloc_mem_bp() Davidlohr Bueso <dave(a)stgolabs.net> locking/rtmutex: Skip remove_waiter() when waiter is not enqueued Keenan Dong <keenanat2000(a)gmail.com> rtmutex: Use waiter::task instead of current in remove_waiter() Sven Eckelmann <sven(a)narfation.org> batman-adv: ensure minimal ethernet header on TX Sven Eckelmann <sven(a)narfation.org> batman-adv: retrieve ethhdr after potential skb realloc on RX Shivam Kumar <kumar.shivam43666(a)gmail.com> nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path Shitalkumar Gandhi <shital.gandhi45(a)gmail.com> ieee802154: ca8210: fix pointer truncation in kfifo on 64-bit Shitalkumar Gandhi <shital.gandhi45(a)gmail.com> ieee802154: ca8210: fix cas_ctl leak on spi_async failure Michael Bommarito <michael.bommarito(a)gmail.com> ieee802154: allow legacy LLSEC ADD/DEL ops to pass strict validation Michael Bommarito <michael.bommarito(a)gmail.com> ieee802154: admin-gate legacy LLSEC dump operations Maoyi Xie <maoyixie.tju(a)gmail.com> net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink Maoyi Xie <maoyixie.tju(a)gmail.com> net: ip_vti: require CAP_NET_ADMIN in the device netns for changelink Maoyi Xie <maoyixie.tju(a)gmail.com> net: ip6_vti: require CAP_NET_ADMIN in the device netns for changelink Dawei Feng <dawei.feng(a)seu.edu.cn> net: ena: clean up XDP TX queues when regular TX setup fails Maoyi Xie <maoyixie.tju(a)gmail.com> net: sit: require CAP_NET_ADMIN in the device netns for changelink Andreas Kemnade <andreas(a)kemnade.info> gpios: palmas: add .get_direction() op Bradley Morgan <include(a)grrlz.net> cpu: hotplug: Preserve per instance callback errors Dmitry Torokhov <dmitry.torokhov(a)gmail.com> Input: ims-pcu - fix type confusion in CDC union descriptor parsing Dmitry Torokhov <dmitry.torokhov(a)gmail.com> Input: ims-pcu - fix potential infinite loop in CDC union descriptor parsing Dmitry Torokhov <dmitry.torokhov(a)gmail.com> Input: ims-pcu - fix out-of-bounds read in ims_pcu_irq() debug logging Dmitry Torokhov <dmitry.torokhov(a)gmail.com> Input: ims-pcu - fix DMA mapping violation in line setup Dmitry Torokhov <dmitry.torokhov(a)gmail.com> Input: ims-pcu - add response length checks Dmitry Torokhov <dmitry.torokhov(a)gmail.com> Input: ims-pcu - validate control endpoint type Dmitry Torokhov <dmitry.torokhov(a)gmail.com> Input: ims-pcu - release data interface on disconnect Dmitry Torokhov <dmitry.torokhov(a)gmail.com> Input: ims-pcu - fix use-after-free and double-free in disconnect Bryam Vargas <hexlabsecurity(a)proton.me> scsi: target: core: Fix iSCSI ISID use-after-free in REGISTER AND MOVE Xu Rao <raoxu(a)uniontech.com> scsi: sg: Report request-table problems when any status is set Haoxiang Li <haoxiang_li2024(a)163.com> scsi: hpsa: Fix DMA mapping leak on IOACCEL2 reset path Mikulas Patocka <mpatocka(a)redhat.com> dm-verity: increase sprintf buffer size Mikulas Patocka <mpatocka(a)redhat.com> dm_early_create: fix freeing used table on dm_resume failure Mikulas Patocka <mpatocka(a)redhat.com> dm-stats: fix merge accounting Mikulas Patocka <mpatocka(a)redhat.com> dm-stats: fix dm_jiffies_to_msec64 Benjamin Marzinski <bmarzins(a)redhat.com> dm-log: fix a bitset_size overflow on 32bit machines Mikulas Patocka <mpatocka(a)redhat.com> dm-bufio: fix wrong count calculation in dm_bufio_issue_discard Samuel Moelius <sam.moelius(a)trailofbits.com> dm era: fix out-of-bounds memory access for non-zero start sector Ming-Hung Tsai <mtsai(a)redhat.com> dm thin metadata: fix metadata snapshot consistency on commit failure Genjian Zhang <zhanggenjian(a)kylinos.cn> dm thin metadata: fix superblock refcount leak on snapshot shadow failure Oliver Hartkopp <socketcan(a)hartkopp.net> can: bcm: add missing rcu list annotations and operations Oliver Hartkopp <socketcan(a)hartkopp.net> can: bcm: fix lockless bound/ifindex race and silent RX_SETUP failure Oliver Hartkopp <socketcan(a)hartkopp.net> can: isotp: use unconditional synchronize_rcu() in isotp_release() Bryam Vargas <hexlabsecurity(a)proton.me> nvmet-rdma: handle inline data with a nonzero offset Weiming Shi <bestswngs(a)gmail.com> sctp: validate STALE_COOKIE cause length before reading staleness Kunihiko Hayashi <hayashi.kunihiko(a)socionext.com> spi: uniphier: Fix completion initialization order before devm_request_irq() Wang Yan <wangyan01(a)kylinos.cn> time: Fix off-by-one in compat settimeofday() usec validation Jaewon Yang <yong010301(a)gmail.com> tpm: Make the TPM character devices non-seekable Thorsten Blum <thorsten.blum(a)linux.dev> tpm: fix event_size output in tpm1_binary_bios_measurements_show Maoyi Xie <maoyixie.tju(a)gmail.com> xfrm: xfrm_interface: require CAP_NET_ADMIN in the device netns for changelink Sanman Pradhan <psanman(a)juniper.net> xfrm: use compat translator only for u64 alignment mismatch Wentao Liang <vulab(a)iscas.ac.cn> xen/gntdev: fix error handling in ioctl Xuanqiang Luo <luoxuanqiang(a)kylinos.cn> i2c: mlxbf: Fix use-after-free in mlxbf_i2c_init_resource() Roman Vivchar <rva333(a)protonmail.com> i2c: mediatek: fix WRRD for SoCs without auto_restart option Bhargav Joshi <j.bhargav.u(a)gmail.com> irqchip/crossbar: Use correct index in crossbar_domain_free() Florian Fuchs <fuchsfl(a)gmail.com> mtd: maps: vmu-flash: fix NULL pointer dereference in initialization Michael Bommarito <michael.bommarito(a)gmail.com> ocfs2: reject non-inline dinodes with i_size and zero i_clusters Michael Bommarito <michael.bommarito(a)gmail.com> ocfs2: reject dinodes whose i_rdev disagrees with the file type Michael Bommarito <michael.bommarito(a)gmail.com> ocfs2: reject dinodes with non-canonical i_mode type Ian Bridges <icb(a)fastmail.org> ocfs2: fix NULL h_transaction deref in ocfs2_assure_trans_credits Kyle Zeng <kylebot(a)openai.com> ocfs2: avoid moving extents to occupied clusters Arseniy Krasnov <avkrasnov(a)rulkc.org> mtd: rawnand: fix condition in 'nand_select_target()' Tristan Madani <tristan(a)talencesecurity.com> ocfs2: use kzalloc for quota recovery bitmap allocation Martin Wilck <martin.wilck(a)suse.com> scsi: smartpqi: Use shost_to_hba() in pqi_scan_finished() Ruoyu Wang <ruoyuw560(a)gmail.com> mtd: slram: remove failed entries from the device list Krzysztof Wilczyński <kwilczynski(a)kernel.org> proc: only bump parent nlink when registering directories WenTao Liang <vulab(a)iscas.ac.cn> power: supply: charger-manager: fix refcount leak in is_full_charged() Maciej W. Rozycki <macro(a)orcam.me.uk> MIPS: DEC: Ensure 32-bit stack location for o32 prom_printf() Johan Hovold <johan(a)kernel.org> MIPS: ip22-gio: fix device reference leak in probe Johan Hovold <johan(a)kernel.org> MIPS: ip22-gio: fix kfree() of static object Johan Hovold <johan(a)kernel.org> MIPS: ip22-gio: fix gio device memory leak Chuck Lever <chuck.lever(a)oracle.com> lockd: Plug nlm_file refcount leak on cached nlm_do_fopen() failure Chuck Lever <chuck.lever(a)oracle.com> lockd: Plug nlm_file leak when nlm_do_fopen() fails Abdun Nihaal <nihaal(a)cse.iitm.ac.in> nvdimm/btt: Free arena sub-allocations on discover_arenas() error path Abdun Nihaal <nihaal(a)cse.iitm.ac.in> nvdimm/btt: Free arenas on btt_init() error paths Bartosz Golaszewski <bartosz.golaszewski(a)oss.qualcomm.com> mfd: tps6586x: Fix OF node refcount Sven Eckelmann <sven(a)narfation.org> batman-adv: tt: prevent TVLV OOB check overflow Sven Eckelmann <sven(a)narfation.org> batman-adv: frag: fix primary_if leak on failed linearization Sven Eckelmann <sven(a)narfation.org> batman-adv: frag: free unfragmentable packet Sven Eckelmann <sven(a)narfation.org> batman-adv: fix VLAN priority offset Sven Eckelmann <sven(a)narfation.org> batman-adv: tt: avoid request storms during pending request Sven Eckelmann <sven(a)narfation.org> batman-adv: dat: fix tie-break for candidate selection Sven Eckelmann <sven(a)narfation.org> batman-adv: dat: ensure accessible eth_hdr proto field Sven Eckelmann <sven(a)narfation.org> batman-adv: bla: reacquire gw address after skb realloc Sven Eckelmann <sven(a)narfation.org> batman-adv: dat: acquire ARP hw source only after skb realloc Sven Eckelmann <sven(a)narfation.org> batman-adv: access unicast_ttvn skb->data only after skb realloc Sven Eckelmann <sven(a)narfation.org> batman-adv: gw: acquire ethernet header only after skb realloc Thorsten Blum <thorsten.blum(a)linux.dev> x86/boot: Reject too long acpi_rsdp= values Thorsten Blum <thorsten.blum(a)linux.dev> x86/boot: Validate console=uart8250 baud rate to fix early boot hang Guangshuo Li <lgs201920130244(a)gmail.com> mfd: sm501: Fix reference leak on failed device registration Armin Wolf <W_Armin(a)gmx.de> leds: uleds: Fix potential buffer overread Wang Jun <1742789905(a)qq.com> soc: fsl: qe: panic on ioremap() failure in qe_reset() Siddharth Vadapalli <s-vadapalli(a)ti.com> soc: ti: k3-ringacc: Fix access mode for k3_ringacc_ring_pop_tail_io/proxy Guangshuo Li <lgs201920130244(a)gmail.com> gpu: host1x: Fix device reference leak in host1x_device_parse_dt() error path Xiang Mei (Microsoft) <xmei5(a)asu.edu> netfilter: bridge: fix stale prevhdr pointer in br_ip6_fragment() Wyatt Feng <bronzed_45_vested(a)icloud.com> netfilter: xt_nat: reject unsupported target families Yizhou Zhao <zhaoyz24(a)mails.tsinghua.edu.cn> netfilter: nf_conncount: fix zone comparison in tuple dedup Xiang Mei <xmei5(a)asu.edu> netfilter: nf_conntrack_reasm: guard mac_header adjustment after IPv6 defrag Florian Westphal <fw(a)strlen.de> netfilter: nf_nat_sip: reload possible stale data pointer Wyatt Feng <bronzed_45_vested(a)icloud.com> netfilter: xt_cluster: reject template conntracks in hash match David Carlier <devnexen(a)gmail.com> netfilter: nfnl_cthelper: apply per-class values when updating policies Muhammad Bilal <meatuni001(a)gmail.com> netfilter: nf_conntrack_irc: fix parse_dcc() off-by-one OOB read Abdun Nihaal <nihaal(a)cse.iitm.ac.in> fbdev: tridentfb: fix potential memory leak in trident_pci_probe() Abdun Nihaal <nihaal(a)cse.iitm.ac.in> fbdev: nvidia: fix potential memory leak in nvidiafb_probe() Abdun Nihaal <nihaal(a)cse.iitm.ac.in> fbdev: carminefb: fix potential memory leak in alloc_carmine_fb() Abdun Nihaal <nihaal(a)cse.iitm.ac.in> fbdev: tdfxfb: fix potential memory leak in tdfxfb_probe() Abdun Nihaal <nihaal(a)cse.iitm.ac.in> fbdev: uvesafb: fix potential memory leak in uvesafb_probe() Abdun Nihaal <nihaal(a)cse.iitm.ac.in> fbdev: s3fb: fix potential memory leak in s3_pci_probe() Abdun Nihaal <nihaal(a)cse.iitm.ac.in> fbdev: i740fb: fix potential memory leak in i740fb_probe() Abdun Nihaal <nihaal(a)cse.iitm.ac.in> fbdev: radeon: fix potential memory leak in radeonfb_pci_register() Li RongQing <lirongqing(a)baidu.com> fbdev: sm712: Fix operator precedence in big_swap macro Hyunwoo Kim <imv4bel(a)gmail.com> KVM: arm64: vgic: Check the interrupt is still ours before migrating it Nickolay Goppen <setotau(a)mainlining.org> arm64: dts: qcom: sdm630: describe adsp_mem region properly Yong Wang <edragain(a)163.com> net: ife: require ETH_HLEN to be pullable in ife_decode() Zhengchuan Liang <zcliangcn(a)gmail.com> net: atm: reject out-of-range traffic classes in QoS validation Michael Bommarito <michael.bommarito(a)gmail.com> net: qrtr: fix 32-bit integer overflow in qrtr_endpoint_post() Wentao Liang <vulab(a)iscas.ac.cn> mlxsw: fix refcount leak in mlxsw_sp_vrs_lpm_tree_replace() Guangshuo Li <lgs201920130244(a)gmail.com> smb: client: fix overflow in passthrough ioctl bounds check Li RongQing <lirongqing(a)baidu.com> net/mlx5: Fix L3 tunnel entropy refcount leak Timur Tabi <ttabi(a)nvidia.com> regulator: core: regulator_lock_two() should test for EDEADLK not EDEADLOCK Douglas Anderson <dianders(a)chromium.org> regulator: core: Make regulator_lock_two() logic easier to follow Cao Guanghui <caoguanghui(a)kylinos.cn> dm era: fix NULL pointer dereference in metadata_open() Julian Anastasov <ja(a)ssi.bg> ipvs: ensure inner headers in ICMP errors are in headroom Yizhou Zhao <zhaoyz24(a)mails.tsinghua.edu.cn> ipvs: fix PMTU for GUE/GRE tunnel ICMP errors Yizhou Zhao <zhaoyz24(a)mails.tsinghua.edu.cn> ipvs: use parsed transport offset in TCP state lookup Yizhou Zhao <zhaoyz24(a)mails.tsinghua.edu.cn> ipvs: pass parsed transport offset to state handlers Eric Dumazet <edumazet(a)google.com> ipv6: mcast: Fix potential UAF in MLD delayed work Kuniyuki Iwashima <kuniyu(a)google.com> ipv6: mcast: Replace locking comments with lockdep annotations. Eric Dumazet <edumazet(a)google.com> ipv6: fix skb drops in igmp6_event_query() and igmp6_event_report() Taehee Yoo <ap420073(a)gmail.com> mld: add mc_lock for protecting per-interface mld data Taehee Yoo <ap420073(a)gmail.com> mld: add new workqueues for process mld events Taehee Yoo <ap420073(a)gmail.com> mld: convert ifmcaddr6 to RCU Taehee Yoo <ap420073(a)gmail.com> mld: convert ip6_sf_list to RCU Taehee Yoo <ap420073(a)gmail.com> mld: convert ipv6_mc_socklist->sflist to RCU Taehee Yoo <ap420073(a)gmail.com> mld: get rid of inet6_dev->mc_lock Taehee Yoo <ap420073(a)gmail.com> mld: convert from timer to delayed work Samuel Moelius <sam.moelius(a)trailofbits.com> net/sched: cake: reject overhead values that underflow length Enrico Pozzobon <enrico.pozzobon(a)dissecto.com> net: usb: lan78xx: disable VLAN filter in promiscuous mode Hui Wang <hui.wang(a)canonical.com> ring-buffer: Fix event length with forced 8-byte alignment Weiming Shi <bestswngs(a)gmail.com> Bluetooth: bpa10x: avoid OOB read of revision string in bpa10x_setup() Pauli Virtanen <pav(a)iki.fi> Bluetooth: ISO: exclude RFU bits from ISO_SDU_Length Xiang Mei <xmei5(a)asu.edu> net/smc: fix UAF in smc_cdc_rx_handler() by pinning the socket Xiang Mei <xmei5(a)asu.edu> net: qualcomm: rmnet: validate MAP frame length before ingress parsing Daniele Palmas <dnlplm(a)gmail.com> net: qualcomm: rmnet: add tx packets aggregation Sharath Chandra Vurukala <sharathv(a)codeaurora.org> net: ethernet: rmnet: Support for ingress MAPv5 checksum offload Alex Elder <elder(a)linaro.org> net: qualcomm: rmnet: don't use C bit-fields in rmnet checksum header Alex Elder <elder(a)linaro.org> net: qualcomm: rmnet: use masks instead of C bit-fields Alex Elder <elder(a)linaro.org> net: qualcomm: rmnet: kill RMNET_MAP_GET_*() accessor macros Alex Elder <elder(a)linaro.org> net: qualcomm: rmnet: simplify some byte order logic Shigeru Yoshida <syoshida(a)redhat.com> qede: fix off-by-one in BD ring consumption on build_skb failure Zhixing Chen <running910(a)gmail.com> netfilter: ip6tables: mark malformed IPv6 extension headers for hotdrop Feng Wu <wufengwufengwufeng(a)gmail.com> netfilter: xt_rateest: fix u64 truncation in xt_rateest_mt() Wyatt Feng <bronzed_45_vested(a)icloud.com> netfilter: xt_u32: reject invalid shift counts Qihang <q.h.hack.winter(a)gmail.com> gue: validate REMCSUM private option length Xiang Mei <xmei5(a)asu.edu> net: usb: net1080: validate packet_len before pad-byte access in rx_fixup Lee Jones <lee(a)kernel.org> HID: core: Fix OOB read in hid_get_report for numbered reports Georgiy Osokin <g.osokin(a)auroraos.dev> HID: picolcd: prevent NULL pointer dereference in picolcd_send_and_wait() Myeonghun Pak <mhun512(a)gmail.com> ata: sata_gemini: unwind clocks on IDE pinctrl errors David Howells <dhowells(a)redhat.com> afs: Fix unchecked-length string display in debug statement David Howells <dhowells(a)redhat.com> afs: Fix vllist leak David Howells <dhowells(a)redhat.com> afs: Fix callback service message parsers to pass through -EAGAIN Dan Carpenter <error27(a)gmail.com> afs: Fix error code in afs_extract_vl_addrs() Samuel Moelius <sam.moelius(a)trailofbits.com> net/sched: hhf: clear heavy-hitter state on reset Vladimir Zapolskiy <vz(a)kernel.org> gpio: timberdale: Return -ENOMEM on dynamic memory allocation in probe Gleb Markov <markov.gi(a)npc-ksb.ru> cxgb4: Fix decode strings dump for T6 adapters Longjun Tang <tanglongjun(a)kylinos.cn> virtio_net: disable cb when NAPI is busy-polled Masami Hiramatsu (Google) <mhiramat(a)kernel.org> tracing/events: Fix to check the simple_tsk_fn creation Xiang Mei <xmei5(a)asu.edu> usbnet: gl620a: fix out-of-bounds read in genelink_rx_fixup() Matti Vaittinen <mazziesaccount(a)gmail.com> hwmon: adm1275: Prevent reading uninitialized stack Nuoqi Gui <gnq25(a)mails.tsinghua.edu.cn> seg6: validate SRH length before reading fixed fields Pengpeng Hou <pengpeng(a)iscas.ac.cn> gpio: htc-egpio: use managed gpiochip registration Pengpeng Hou <pengpeng(a)iscas.ac.cn> gpio: mvebu: fail probe if gpiochip registration fails Pengpeng Hou <pengpeng(a)iscas.ac.cn> spi: sh-msiof: abort transfers when reset times out Martin Kaiser <martin(a)kaiser.cx> tracing: probes: fix typo in a log message Ruoyu Wang <ruoyuw560(a)gmail.com> net: sungem: fix probe error cleanup Yun Zhou <yun.zhou(a)windriver.com> net: mvneta: re-enable percpu interrupt on resume Haoxiang Li <haoxiang_li2024(a)163.com> rtc: cmos: unregister HPET IRQ handler on probe failure Fredrik M Olsson <fredrik.m.olsson(a)axis.com> rtc: ds1307: Fix off-by-one issue with wday for rx8130 Huiwen He <hehuiwen(a)kylinos.cn> smb/client: preserve errors from smb2_set_sparse() Fernando Fernandez Mancera <fmancera(a)suse.de> ipv6: fix error handling in disable_policy sysctl Fernando Fernandez Mancera <fmancera(a)suse.de> ipv6: fix error handling in forwarding sysctl Fernando Fernandez Mancera <fmancera(a)suse.de> ipv6: fix error handling in ignore_routes_with_linkdown sysctl Fernando Fernandez Mancera <fmancera(a)suse.de> ipv6: fix error handling in disable_ipv6 sysctl Aleksandrova Alyona <aga(a)itb.spb.ru> net: dsa: sja1105: round up PTP perout pin duration Krzysztof Wilczyński <kwilczynski(a)kernel.org> alpha/PCI: Fix __pci_mmap_fits() overflow for zero-length BARs Krzysztof Wilczyński <kwilczynski(a)kernel.org> alpha/PCI: Add security_locked_down() check to pci_mmap_resource() Runyu Xiao <runyu.xiao(a)seu.edu.cn> netfilter: nft_synproxy: stop bypassing the priv->info snapshot Fernando Fernandez Mancera <fmancera(a)suse.de> netfilter: nf_conncount: prevent connlimit drops for early confirmed ct Kuniyuki Iwashima <kuniyu(a)google.com> ipv4: fib: Don't ignore error route in local/main tables. Xiang Mei <xmei5(a)asu.edu> ipv6: Fix null-ptr-deref in fib6_nh_mtu_change(). Xiang Mei <xmei5(a)asu.edu> drm/edid: fix OOB read in drm_parse_tiled_block() Nuoqi Gui <gnq25(a)mails.tsinghua.edu.cn> bpf: Fix stack slot index in nospec checks Ronan Dalton <ronan.dalton(a)alliedtelesis.co.nz> rtc: ds1307: handle oscillator stop flag for ds1337/ds1339/ds3231 Antoni Pokusinski <apokusinski01(a)gmail.com> rtc: abx80x: fix the RTC_VL_CLR clearing all status flags Sayali Patil <sayalip(a)linux.ibm.com> selftests/mm: allow PUD-level entries in compound testcase of hmm tests Sayali Patil <sayalip(a)linux.ibm.com> selftests/mm: clarify alternate unmapping in compaction_test Bhargav Joshi <j.bhargav.u(a)gmail.com> irqchip/crossbar: Fix parent domain resource leak Florian Westphal <fw(a)strlen.de> netfilter: nft_meta_bridge: fix NFT_META_BRI_IIFPVID stack leak Jozsef Kadlecsik <kadlec(a)netfilter.org> netfilter: ipset: fix order of kfree_rcu() and rcu_assign_pointer() Aleksandr Nogikh <nogikh(a)google.com> ieee802154: fix kernel-infoleak in dgram_recvmsg() Ivan Abramov <i.abramov(a)mt-integration.ru> ieee802154: Remove WARN_ON() in cfg802154_pernet_exit() Andy Shevchenko <andriy.shevchenko(a)linux.intel.com> ACPI: resource: Amend kernel-doc style Ricardo Neri <ricardo.neri-calderon(a)linux.intel.com> thermal: intel: Fix dangling resources on thermal_throttle_online() failure Breno Leitao <leitao(a)debian.org> arm64/hw_breakpoint: reject unaligned watchpoints that would truncate BAS Xin Long <lucien.xin(a)gmail.com> sctp: hold socket lock when dumping endpoints in sctp_diag Jakub Kicinski <kuba(a)kernel.org> net: psample: fix info leak in PSAMPLE_ATTR_DATA Ratheesh Kannoth <rkannoth(a)marvell.com> octeontx2-pf: Fix leak of SQ timestamp buffer on teardown Eric Dumazet <edumazet(a)google.com> xfrm: validate selector family and prefixlen during match Pengpeng Hou <pengpeng(a)iscas.ac.cn> sparc: led: avoid trimming a newline from empty writes John Johansen <john.johansen(a)canonical.com> apparmor: fix label can not be immediately before a declaration Adrian Hunter <adrian.hunter(a)intel.com> i3c: master: Prevent reuse of dynamic address on device add failure Zygmunt Krynicki <me(a)zygoon.pl> apparmor: put secmark label after secid lookup Zygmunt Krynicki <me(a)zygoon.pl> apparmor: aa_getprocattr free procattr leak on format failure Maxime Bélair <maxime.belair(a)canonical.com> apparmor: fix potential UAF in aa_replace_profiles Ryan Lee <ryan.lee(a)canonical.com> apparmor: grab ns lock and refresh when looking up changehat child profiles Zygmunt Krynicki <me(a)zygoon.pl> apparmor: aa_label_alloc use aa_label_free on alloc failure Ruoyu Wang <ruoyuw560(a)gmail.com> apparmor: check label build before no_new_privs test Manivannan Sadhasivam <manivannan.sadhasivam(a)oss.qualcomm.com> PCI: mediatek: Use actual physical address instead of virt_to_phys() Ryder Lee <ryder.lee(a)mediatek.com> PCI: mediatek: Fix possible truncation in mtk_pcie_parse_port() Arnaldo Carvalho de Melo <acme(a)redhat.com> tools lib api: Fix mount_overload() snprintf truncation and toupper range Arnaldo Carvalho de Melo <acme(a)redhat.com> tools lib api: Fix filename__write_int() writing uninitialized stack data Arnaldo Carvalho de Melo <acme(a)redhat.com> tools lib api: Fix missing null termination in filename__read_int/ull() Lad Prabhakar <prabhakar.mahadev-lad.rj(a)bp.renesas.com> PCI: rcar-host: Remove unused LIST_HEAD(res) Li RongQing <lirongqing(a)baidu.com> PCI: mediatek: Fix operator precedence in PCIE_FTS_NUM_L0 macro Mike Snitzer <snitzer(a)kernel.org> NFSv4/flexfiles: honor FF_FLAGS_NO_IO_THRU_MDS in pg_get_mirror_count_write Mike Snitzer <snitzer(a)kernel.org> NFSv4/flexfiles: honor FF_FLAGS_NO_IO_THRU_MDS on fatal DS connect errors Dai Ngo <dai.ngo(a)oracle.com> NFSv4/pnfs: defer return_range callbacks until after inode unlock Sagi Grimberg <sagi(a)grimberg.me> pNFS/filelayout: fix cheking if a layout is striped Phillip Varney <pbvarney(a)protonmail.com> clk: qcom: a53: Corrected frequency multiplier for 1152MHz Nuno Sá <nuno.sa(a)analog.com> dmaengine: Fix possible use after free Rosen Penev <rosenp(a)gmail.com> HID: logitech-hidpp: remove excess kernel-doc member in hidpp_scroll_counter Sanjay Chitroda <sanjayembeddedse(a)gmail.com> iio: accel: mma8452: handle I2C read error(s) in mma8452_read() Joshua Crofts <joshua.crofts1(a)gmail.com> iio: magnetometer: ak8975: fix potential kernel stack memory leak Joshua Crofts <joshua.crofts1(a)gmail.com> iio: light: si1133: prevent race condition on timeout Joshua Crofts <joshua.crofts1(a)gmail.com> iio: light: si1133: reset counter to prevent race condition James Kim <james010kim(a)gmail.com> char: tlclk: fix use-after-free in tlclk_cleanup() Seungjin Bae <eeodqql09(a)gmail.com> usb: host: max3421: Reject hub port requests for non-existent ports Seungjin Bae <eeodqql09(a)gmail.com> usb: host: max3421: Fix shift-out-of-bounds in max3421_hub_control() Guangshuo Li <lgs201920130244(a)gmail.com> staging: most: video: avoid double free on video register failure Rafael J. Wysocki <rafael.j.wysocki(a)intel.com> platform/x86: xo15-ebook: Fix wakeup source and GPE handling Rafael J. Wysocki <rafael.j.wysocki(a)intel.com> x86/platform/olpc: xo15: Drop wakeup source on driver removal Yingchao Deng <yingchao.deng(a)oss.qualcomm.com> coresight: cti: Fix DT filter signals silently ignored Alexandru Hossu <hossu.alexandru(a)gmail.com> staging: nvec: fix use-after-free in nvec_rx_completed() Yizhou Zhao <zhaoyz24(a)mails.tsinghua.edu.cn> net/9p: fix race condition on rdma->state in trans_rdma.c Aleksandr Nogikh <nogikh(a)google.com> ocfs2: fix circular locking dependency in ocfs2_dio_end_io_write Eric Dumazet <edumazet(a)google.com> tcp: ipv6: clamp default adverting MSS to avoid GSO_BY_FRAGS (0xFFFF) Eric Dumazet <edumazet(a)google.com> tipc: fix UAF in tipc_l2_send_msg() Gui-Dong Han <hanguidong02(a)gmail.com> KEYS: Use acquire when reading state in keyring search Aboorva Devarajan <aboorvad(a)linux.ibm.com> powerpc/kexec: fix double get_cpu() imbalance in kexec_prepare_cpus Aboorva Devarajan <aboorvad(a)linux.ibm.com> powerpc/powernv: fix preempt count leak in pnv_kexec_wait_secondaries_down Aboorva Devarajan <aboorvad(a)linux.ibm.com> powerpc/perf: fix preempt count underflow in fsl_emb_pmu_del Yadan Fan <ydfan(a)suse.com> MIPS: mm: Fix out-of-bounds write in maar_res_walk() Sechang Lim <rhkrqnwk98(a)gmail.com> bpf, sockmap: fix integer overflow in bpf_msg_pop_data() bounds check Weiming Shi <bestswngs(a)gmail.com> bpf, sockmap: reject overflowing copy + len in bpf_msg_push_data() Florian Westphal <fw(a)strlen.de> netfilter: nf_conncount: callers must hold rcu read lock Runyu Xiao <runyu.xiao(a)seu.edu.cn> kcm: use WRITE_ONCE() when changing lower socket callbacks Victor Nogueira <victor(a)mojatatu.com> net/sched: sch_codel: Do not call qdisc_tree_reduce_backlog during peek before restoring qlen Victor Nogueira <victor(a)mojatatu.com> net/sched: sch_fq_codel: Do not call qdisc_tree_reduce_backlog during peek before restoring qlen Lars Pöschel <lars.poeschel(a)edag.com> spi: xilinx: use FIFO occupancy register to determine buffer size Herbert Xu <herbert(a)gondor.apana.org.au> crypto: rng - Free default RNG on module exit Felix Gu <ustc.gu(a)gmail.com> crypto: cavium/cpt - fix DMA cleanup using wrong loop index Felix Gu <ustc.gu(a)gmail.com> crypto: marvell/octeontx - fix DMA cleanup using wrong loop index Michael Bommarito <michael.bommarito(a)gmail.com> tipc: prevent snt_unacked underflow on CONN_ACK Michael Bommarito <michael.bommarito(a)gmail.com> tipc: require net admin for TIPCv2 netlink mutators Victor Nogueira <victor(a)mojatatu.com> net/sched: sch_hfsc: Don't make class passive twice Xin Long <lucien.xin(a)gmail.com> sctp: validate embedded address parameter length Kuniyuki Iwashima <kuniyu(a)google.com> net: fib_rules: Don't dump dying fib_rule in fib_rules_dump(). HyeongJun An <sammiee5311(a)gmail.com> ASoC: tegra: tegra210_ahub: Validate written enum value HyeongJun An <sammiee5311(a)gmail.com> ASoC: fsl: fsl_audmix: Validate written enum values Maher Sanalla <msanalla(a)nvidia.com> RDMA/mlx5: Fix undefined shift of user RQ WQE size Maxwell Doose <m32285159(a)gmail.com> fs: efs: remove unneeded debug prints Louis Scalbert <louis.scalbert(a)6wind.com> bonding: 3ad: fix mux port state on oper down longlong yan <yanlonglong(a)kylinos.cn> tools/virtio: check mmap return value in vringh_test Qihang Tang <q.h.hack.winter(a)gmail.com> vhost/vdpa: validate virtqueue index in mmap and fault paths Jason Gunthorpe <jgg(a)ziepe.ca> IB/mlx4: Fill in the access_flags if IB_MR_REREG_ACCESS is not specified David Laight <david.laight.linux(a)gmail.com> fbdev: sm501fb: Fix buffer errors in OF binding code Filipe Manana <fdmanana(a)suse.com> btrfs: fix invalid pointer dereference in __btrfs_run_delayed_refs() Wolfram Sang <wsa+renesas(a)sang-engineering.com> hwspinlock: qcom: avoid uninitialized struct members Luca Leonardo Scorcia <l.scorcia(a)gmail.com> pinctrl: mediatek: mt8167: Fix Schmitt trigger register offset of pins 34-39 Luca Leonardo Scorcia <l.scorcia(a)gmail.com> pinctrl: mediatek: mt8516: Fix Schmitt trigger register offset of pins 34-39 Al Viro <viro(a)zeniv.linux.org.uk> configfs: fix lockless traversals of ->s_children Dmitry Vyukov <dvyukov(a)google.com> firmware_loader: Fix recursive lock in device_cache_fw_images() Felix Gu <ustc.gu(a)gmail.com> spi: ep93xx: fix double-free of zeropage on DMA setup failure Pengjie Zhang <zhangpengjie2(a)huawei.com> cpufreq: Documentation: fix conservative governor freq_step description Yuho Choi <dbgh9129(a)gmail.com> ACPI: IPMI: Fix message kref handling on dead device Rui Qi <qirui.001(a)bytedance.com> riscv: stacktrace: Remove bogus -0x4 offset in non-FP walk_stackframe Tristan Madani <tristan(a)talencesecurity.com> wifi: wcn36xx: fix OOB read from firmware count in PRINT_REG_INFO indication Leon Hwang <leon.hwang(a)linux.dev> bpf: Update transport_header when encapsulating UDP tunnel in lwt Pablo Neira Ayuso <pablo(a)netfilter.org> netfilter: conntrack: call nf_ct_gre_keymap_destroy() if master helper is pptp Fernando Fernandez Mancera <fmancera(a)suse.de> netfilter: synproxy: protect nf_ct_seqadj_init() with conntrack lock Fernando Fernandez Mancera <fmancera(a)suse.de> netfilter: nfnetlink_osf: fix mss parsing on big-endian architectures Joseph Qi <joseph.qi(a)linux.alibaba.com> ocfs2: fix race between ocfs2_control_install_private() and ocfs2_control_release() Zhang Cen <rollkingzzc(a)gmail.com> ocfs2/dlm: require a ref for locking_state debugfs open Zhang Cen <rollkingzzc(a)gmail.com> ocfs2: reject FITRIM ranges shorter than a cluster Dmitry Antipov <dmantipov(a)yandex.ru> ocfs2: fix buffer head management in ocfs2_read_blocks() Zhang Cen <rollkingzzc(a)gmail.com> ocfs2: rebase copied fsdlm LVB pointers in locking_state Woojin Ji <random6.xyz(a)gmail.com> bpftool: Use libbpf error code for flow dissector query Alexander Potapenko <glider(a)google.com> lib/test_meminit: use && for bools Sang-Heon Jeon <ekffu200098(a)gmail.com> mm/fake-numa: fix under-allocation detection in uniform split Dan Carpenter <error27(a)gmail.com> scsi: pm8001: Fix error code in non_fatal_log_show() Martin Wilck <martin.wilck(a)suse.com> scsi: Revert "scsi: Fix sas_user_scan() to handle wildcard and multi-channel scans" Yuho Choi <dbgh9129(a)gmail.com> ARM: imx31: Fix IIM mapping leak in revision check Yuho Choi <dbgh9129(a)gmail.com> ARM: imx3: Fix CCM node reference leak Zhang Yi <yi.zhang(a)huawei.com> ext4: fix LOGFLUSH shutdown ordering to allow ordered-mode data writeback Renjiang Han <renjiang.han(a)oss.qualcomm.com> media: qcom: venus: drop extra padding in NV12 raw size calculation Jessica Zhang <jessica.zhang(a)oss.qualcomm.com> drm/msm/dp: Fix the ISR_* enum values Jessica Zhang <jessica.zhang(a)oss.qualcomm.com> drm/msm/dp: fix HPD state status bit shift value Tetsuo Handa <penguin-kernel(a)I-love.SAKURA.ne.jp> ocfs2: kill osb->system_file_mutex lock ZhengYuan Huang <gality369(a)gmail.com> ocfs2: don't BUG_ON an invalid journal dinode Dan Carpenter <error27(a)gmail.com> rapidio/tsi721: prevent a bad dereference in tsi721_db_dpc() Felix Gu <ustc.gu(a)gmail.com> drm/tegra: dc: Fix device node reference leak in tegra_dc_has_output() Jiayuan Chen <jiayuan.chen(a)linux.dev> net/sched: cls_bpf: prevent unbounded recursion in offload rollback Eric Dumazet <edumazet(a)google.com> ipv6: guard against possible NULL deref in __in6_dev_stats_get() Breno Leitao <leitao(a)debian.org> workqueue: drop spurious '*' from print_worker_info() fn declaration Nilay Shroff <nilay(a)linux.ibm.com> nvme-multipath: fix flex array size in struct nvme_ns_head Miquel Raynal <miquel.raynal(a)bootlin.com> mtd: spi-nor: Drop duplicate Kconfig dependency Maciej W. Rozycki <macro(a)orcam.me.uk> MIPS: DEC: Remove do_IRQ() call indirection Maciej W. Rozycki <macro(a)orcam.me.uk> MIPS: Fix big-endian stack argument fetching in o32 wrapper Jiakai Xu <xujiakai24(a)mails.ucas.ac.cn> PM: sleep: Use complete() in device_pm_sleep_init() Lianfa Weng <wenglianfa(a)huawei.com> RDMA/hns: Fix warning in poll cq direct mode Guangshuo Li <lgs201920130244(a)gmail.com> IB/mlx4: Fix refcount leak in add_port() error path Samuel Holland <samuel(a)sholland.org> bus: sunxi-rsb: Always check register address validity Ronaldo Nunez <rnunez(a)baylibre.com> pwm: imx27: Fix variable truncation in .apply() Lifeng Zheng <zhenglifeng1(a)huawei.com> cpufreq: conservative: Simplify frequency limit handling Pengjie Zhang <zhangpengjie2(a)huawei.com> cpufreq: Documentation: fix sampling_down_factor range Stepan Ionichev <sozdayvek(a)gmail.com> device property: fix fwnode reference leak in fwnode_graph_get_endpoint_by_id() Sven Püschel <s.pueschel(a)pengutronix.de> media: rockchip: rga: fix too small buffer size Eric Dumazet <edumazet(a)google.com> net/sched: sch_drr: annotate data-races around cl->deficit Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> sysfs: clamp show() return value in sysfs_kf_read() Zilin Guan <zilin(a)seu.edu.cn> media: atomisp: Fix memory leak in atomisp_fixed_pattern_table() Sara Venkatesh <sarajvenkatesh(a)gmail.com> RDMA/srpt: fix integer overflow in immediate data length check Prathamesh Deshpande <prathameshdeshpande7(a)gmail.com> RDMA/mlx5: Fix devx subscribe-event unwind NULL dereference Alexander Chesnokov <Alexander.Chesnokov(a)kaspersky.com> RDMA/hns: Fix arithmetic overflow in calc_hem_config() Linmao Li <lilinmao(a)kylinos.cn> ipv6: addrconf: bail out of dad_failure when state is no longer POSTDAD Eric Dumazet <edumazet(a)google.com> net/sched: sch_htb: annotate data-races (I) Sean Christopherson <seanjc(a)google.com> crypto: ccp - Treat zero-length cert chain as query for blob lengths Eric Dumazet <edumazet(a)google.com> net/sched: sch_hfsc: annotate data-races in hfsc_dump_class_stats() Rafael J. Wysocki <rafael.j.wysocki(a)intel.com> thermal: hwmon: Fix critical temperature attribute removal Cristian Marussi <cristian.marussi(a)arm.com> clk: scmi: Fix clock rate rounding Sean Christopherson <seanjc(a)google.com> iommu/amd: Fix a stale comment about which legacy mode is user visible Weiming Shi <bestswngs(a)gmail.com> crypto: asymmetric_keys - fix OOB read in pefile_digest_pe_contents Thorsten Blum <thorsten.blum(a)linux.dev> crypto: ecrdsa - fix unknown OID check in ecrdsa_param_curve Lothar Rubusch <l.rubusch(a)gmail.com> crypto: atmel-sha204a - fix blocking and non-blocking rng logic Felix Gu <ustc.gu(a)gmail.com> pinctrl: sunxi: fix regulator leak in sunxi_pmx_request() error path Samuel Holland <samuel(a)sholland.org> media: cedrus: Fix failure to clean up hardware on probe failure Felix Gu <ustc.gu(a)gmail.com> watchdog: sprd_wdt: Remove redundant sprd_wdt_disable() on register failure Jihed Chaibi <jihed.chaibi.dev(a)gmail.com> ARM: dts: am335x-sl50: Fix audio bitclock and frame master endpoint Tristan Madani <tristan(a)talencesecurity.com> wifi: ath9k: fix OOB access from firmware tx status queue ID Xingjing Deng <micro6947(a)gmail.com> kconfig: fix potential NULL pointer dereference in conf_askvalue Tristan Madani <tristan(a)talencesecurity.com> wifi: rtw88: fix OOB read from firmware RX descriptor exceeding DMA buffer Danilo Krummrich <dakr(a)kernel.org> driver core: use READ_ONCE() for dev->driver in dev_has_sync_state() Yuho Choi <dbgh9129(a)gmail.com> drm/radeon: fix memory leak in radeon_ring_restore() on lock failure Tomi Valkeinen <tomi.valkeinen(a)ideasonboard.com> drm/tidss: Drop extra drm_mode_config_reset() call David Howells <dhowells(a)redhat.com> afs: Fix further netns teardown to cancel the preallocation charger Matvey Kovalev <matvey.kovalev(a)ispras.ru> afs: fix NULL pointer dereference in afs_get_tree() David Howells <dhowells(a)redhat.com> afs: Fix netns teardown to cancel the preallocation charger Matthias Feser <mfe(a)KBSgmbhfr.onmicrosoft.com> serial: 8250_omap: clear rx_running on zero-length DMA completes Stephan Gerhold <stephan.gerhold(a)linaro.org> serial: msm: Disable DMA for kernel console UART Ricardo Ribalda <ribalda(a)chromium.org> media: uvcvideo: Fix buffer sequence in frame gaps Ricardo Ribalda <ribalda(a)chromium.org> media: uvcvideo: Avoid partial metadata buffers Eric Biggers <ebiggers(a)kernel.org> crypto: af_alg - Remove zero-copy support from skcipher and aead Yichong Chen <chenyichong(a)uniontech.com> tools/mm/slabinfo: fix total_objects attribute name Muhammet Kaan KILINÇ <muhammetkaankilinc(a)gmail.com> crypto: algif_skcipher - force synchronous processing on trees without ctx->state Adam Li <adamli(a)os.amperecomputing.com> sched/fair: Only update stats for allowed CPUs when looking for dst group Joanne Koong <joannelkoong(a)gmail.com> fuse: re-lock request before returning from fuse_ref_folio() Alberto Ruiz <aruiz(a)redhat.com> fuse: fix device node leak in cuse_process_init_reply() Michael Bommarito <michael.bommarito(a)gmail.com> RDMA/siw: bound Read Response placement to the RREAD length Dmitry Torokhov <dmitry.torokhov(a)gmail.com> Input: maplecontrol - set driver data before registering input device Dmitry Torokhov <dmitry.torokhov(a)gmail.com> Input: maplemouse - set driver data before registering input device Dmitry Torokhov <dmitry.torokhov(a)gmail.com> Input: maple_keyb - set driver data before registering input device Dmitry Torokhov <dmitry.torokhov(a)gmail.com> Input: mms114 - fix multi-touch slot corruption Florian Fuchs <fuchsfl(a)gmail.com> Input: maplemouse - fix NULL pointer dereference in open() Bryam Vargas <hexlabsecurity(a)proton.me> Input: touchwin - reset the packet index on every complete packet Bryam Vargas <hexlabsecurity(a)proton.me> Input: iforce - bound the device-reported force-feedback effect index Bryam Vargas <hexlabsecurity(a)proton.me> Input: goodix - clamp the device-reported contact count Ranjan Kumar <kumarranja(a)chromium.org> Input: elan_i2c - prevent division by zero and arithmetic underflow Bryam Vargas <hexlabsecurity(a)proton.me> Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count Bryam Vargas <hexlabsecurity(a)proton.me> Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count Haoxiang Li <haoxiang_li2024(a)163.com> Input: synaptics-rmi4 - unregister function handlers on physical driver registration failure Guillermo Rodríguez <guille.rodriguez(a)gmail.com> i2c: stm32f7: truncate clock period instead of rounding it Mikhail Gavrilov <mikhail.v.gavrilov(a)gmail.com> udmabuf: fix DMA direction mismatch in release_udmabuf() Sean Christopherson <seanjc(a)google.com> KVM: VMX: Grab vmcs12 on CR8 interception update iff vCPU is in guest mode Bryam Vargas <hexlabsecurity(a)proton.me> exfat: bound uniname advance in exfat_find_dir_entry() Benjamin Coddington <ben.coddington(a)hammerspace.com> NFSv4: include MAY_WRITE in open permission mask for O_TRUNC Huihui Huang <hhhuang(a)smu.edu.sg> tracing: Prevent out-of-bounds read in glob matching Carlos Song <carlos.song(a)nxp.com> spi: fsl-lpspi: terminate the RX channel on TX prepare failure path Carlos Song <carlos.song(a)nxp.com> spi: fsl-lpspi: replace dmaengine_terminate_all() with dmaengine_terminate_sync() Paul Louvel <paul.louvel(a)bootlin.com> crypto: talitos - use dma_sync_single_for_cpu() before reading descriptor header Eric Biggers <ebiggers(a)kernel.org> crypto: drbg - Fix the fips_enabled priority boost Eric Biggers <ebiggers(a)kernel.org> crypto: drbg - Fix drbg_max_addtl() on 64-bit kernels Eric Biggers <ebiggers(a)kernel.org> crypto: drbg - Fix returning success on failure in CTR_DRBG Ruijie Li <ruijieli51(a)gmail.com> crypto: pcrypt - restore callback for non-parallel fallback Anastasia Tishchenko <sv3iry(a)gmail.com> crypto: ecc - Fix carry overflow in vli multiplication Thorsten Blum <thorsten.blum(a)linux.dev> crypto: caam - use print_hex_dump_devel to guard key hex dumps again Thorsten Blum <thorsten.blum(a)linux.dev> crypto: caam - use print_hex_dump_devel to guard key hex dumps Bryam Vargas <hexlabsecurity(a)proton.me> isofs: bound Rock Ridge symlink components to the SL record Bryam Vargas <hexlabsecurity(a)proton.me> partitions: aix: bound the pp_count scan to the ppe array Mikulas Patocka <mpatocka(a)redhat.com> dm-ioctl: report an error if a device has no table Bryam Vargas <hexlabsecurity(a)proton.me> udf: validate sparing table length as an entry count, not a byte count Bryam Vargas <hexlabsecurity(a)proton.me> udf: validate VAT header length against the VAT inode size Michael Bommarito <michael.bommarito(a)gmail.com> udf: validate free block extents against the partition length Liviu Stan <liviu.stan(a)analog.com> iio: temperature: ltc2983: Fix n_wires default bypassing rotation check Maxwell Doose <m32285159(a)gmail.com> iio: adc: spear: Initialize completion before requesting IRQ Madhu M <madhu.m(a)intel.com> usb: typec: ucsi: Pass full DP config payload in SET_NEW_CAM for DP alt mode Andrei Kuchynski <akuchynski(a)chromium.org> usb: typec: ucsi: Invert DisplayPort role assignment Badhri Jagan Sridharan <badhri(a)google.com> usb: typec: tcpm: Validate SVID index in svdm_consume_modes() Sam Day <me(a)samcday.com> usbip: vudc: fix NULL deref in vep_dequeue() Yichong Chen <chenyichong(a)uniontech.com> usbip: tools: support SuperSpeedPlus devices Xu Rao <raoxu(a)uniontech.com> USB: usb-storage: ene_ub6250: restore media-ready check Johan Hovold <johan(a)kernel.org> USB: ulpi: fix memory leak on registration failure Johan Hovold <johan(a)kernel.org> USB: serial: digi_acceleport: fix hard lockup on disconnect Johan Hovold <johan(a)kernel.org> USB: serial: digi_acceleport: fix broken rx after throttle Fabio Porcedda <fabio.porcedda(a)gmail.com> USB: serial: option: add Telit Cinterion FE990D50 compositions Haoxiang Li <haoxiang_li2024(a)163.com> usb: mtu3: unmap request DMA on queue failure Myeonghun Pak <mhun512(a)gmail.com> USB: misc: uss720: unregister parport on probe failure Xu Rao <raoxu(a)uniontech.com> USB: storage: include US_FL_NO_SAME in quirks mask Myeonghun Pak <mhun512(a)gmail.com> usb: sl811-hcd: disable controller wakeup on remove Johan Hovold <johan(a)kernel.org> USB: legousbtower: fix use-after-free on disconnect race Erich E. Hoover <erich.e.hoover(a)gmail.com> USB: quirks: add NO_LPM for the Samsung T5 EVO Portable SSD Johan Hovold <johan(a)kernel.org> USB: iowarrior: fix use-after-free on disconnect Johan Hovold <johan(a)kernel.org> USB: ldusb: fix use-after-free on disconnect race Johan Hovold <johan(a)kernel.org> USB: idmouse: fix use-after-free on disconnect race Maoyi Xie <maoyixie.tju(a)gmail.com> usb: gadget: composite: fix dead empty check in the USB_DT_OTG handler Rodrigo Lugathe da Conceição Alves <lugathe2(a)gmail.com> USB: core: add USB_QUIRK_NO_LPM for VIA Labs USB 2.0 hub Jared Baldridge <jrb(a)expunge.us> usb: cdc_acm: Add quirk for Uniden BC125AT scanner Maoyi Xie <maoyixie.tju(a)gmail.com> net: usb: kalmia: bound RX frame length in kalmia_rx_fixup() Deepanshu Kartikey <kartikey406(a)gmail.com> nilfs2: reject CLEAN_SEGMENTS ioctl with out-of-range segment numbers Tristan Madani <tristan(a)talencesecurity.com> hfs/hfsplus: zero-initialize buffer in hfs_bnode_read Srinivas Pandruvada <srinivas.pandruvada(a)linux.intel.com> HID: sensor-hub: Add sensor_hub_input_attr_read_values() for multi-byte reads Maoyi Xie <maoyixie.tju(a)gmail.com> HID: lg-g15: cancel pending work on remove to fix a use-after-free Myeonghun Pak <mhun512(a)gmail.com> HID: wacom: stop hardware after post-start probe failures WenTao Liang <vulab(a)iscas.ac.cn> posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path Yuho Choi <dbgh9129(a)gmail.com> cpufreq: pcc: fix use-after-free and double free in _OSC evaluation Tianxiang Chen <nanmu(a)xiaomi.com> cpufreq: Fix hotplug-suspend race during reboot Steven Rostedt <rostedt(a)goodmis.org> sched/rt: Have RT_PUSH_IPI be default off for non PREEMPT_RT Sebastian Andrzej Siewior <bigeasy(a)linutronix.de> net: Drop the lock in skb_may_tx_timestamp() Muhammad Bilal <meatuni001(a)gmail.com> Bluetooth: L2CAP: validate option length before reading conf opt value Yousef Alhouseen <alhouseenyousef(a)gmail.com> Bluetooth: fix UAF in bt_accept_dequeue() Yousef Alhouseen <alhouseenyousef(a)gmail.com> Bluetooth: bnep: pin L2CAP connection during netdev registration Xiang Mei <xmei5(a)asu.edu> netfilter: ebtables: terminate table name before find_table_lock() Florian Westphal <fw(a)strlen.de> netfilter: ebtables: module names must be null-terminated Andrei Kuchynski <akuchynski(a)chromium.org> mfd: cros_ec: Delay dev_set_drvdata() until probe success Wyatt Feng <bronzed_45_vested(a)icloud.com> net: ipv4: bound TCP reordering sysctl writes and MTU probe sizes Yuyang Huang <yuyanghuang(a)google.com> ipv4: igmp: remove multicast group from hash table on device destruction Runyu Xiao <runyu.xiao(a)seu.edu.cn> io_uring/io-wq: re-check IO_WQ_BIT_EXIT for each linked work item Runyu Xiao <runyu.xiao(a)seu.edu.cn> gpio: eic-sprd: use raw_spinlock_t in the irq startup path Thomas Gleixner <tglx(a)kernel.org> debugobjects: Plug race against a concurrent OOM disable Chi Wang <wangchi(a)kylinos.cn> audit: Fix data races of skb_queue_len() readers on audit_queue Zijing Yin <yzjaurora(a)gmail.com> net: af_key: initialize alg_key_len for IPComp states Dawei Feng <dawei.feng(a)seu.edu.cn> crypto: amlogic - avoid double cleanup in meson_crypto_probe() Ricardo Ribalda <ribalda(a)chromium.org> media: staging: ipu3-imgu: Add range check for imgu_css_cfg_acc_stripe Samuel Page <sam(a)bynar.io> tipc: fix out-of-bounds read in broadcast Gap ACK blocks Yizhou Zhao <zhaoyz24(a)mails.tsinghua.edu.cn> 6lowpan: fix NHC entry use-after-free on error path Alan Stern <stern(a)rowland.harvard.edu> USB: chaoskey: Fix slab-use-after-free in chaoskey_release() Michael Bommarito <michael.bommarito(a)gmail.com> hwrng: virtio: clamp device-reported used.len at copy_data() Johan Hovold <johan(a)kernel.org> virtio-mmio: fix device release warning on module unload Xiang Mei <xmei5(a)asu.edu> netfilter: ipset: fix race between dump and ip_set_list resize Ratheesh Kannoth <rkannoth(a)marvell.com> PCI: host-common: Request bus reassignment when not probe-only Mahesh Vaidya <mahesh.vaidya(a)altera.com> PCI: altera: Do not dispose parent IRQ mapping 胡连勤 <hulianqin(a)vivo.com> usb: xhci: Fix sleep in atomic context in xhci_free_streams() Carlos Llamas <cmllamas(a)google.com> binder: fix UAF in binder_thread_release() Johan Hovold <johan(a)kernel.org> Bluetooth: btusb: fix use-after-free on registration failure Cássio Gabriel <cassiogabrielcontato(a)gmail.com> ALSA: usb-audio: Update US-16x08 EQ/comp shadow state after successful writes Cássio Gabriel <cassiogabrielcontato(a)gmail.com> ALSA: usb-audio: Update Babyface Pro control caches only after successful writes Cássio Gabriel <cassiogabrielcontato(a)gmail.com> ALSA: usb-audio: Roll back quirk control caches on write errors Cássio Gabriel <cassiogabrielcontato(a)gmail.com> ALSA: usb-audio: Propagate US-16x08 write errors in route/mix EQ-switch put callbacks Cássio Gabriel <cassiogabrielcontato(a)gmail.com> ALSA: usb-audio: Propagate errors in scarlett_ctl_enum_put() Darvell Long <contact(a)darvell.me> ALSA: usb-audio: avoid kobject path lookup in DualSense match Maoyi Xie <maoyixie.tju(a)gmail.com> ALSA: firewire: isight: bound the sample count to the packet payload Zhao Dongdong <zhaodongdong(a)kylinos.cn> ALSA: es1938: check snd_ctl_new1() return value Maoyi Xie <maoyixie.tju(a)gmail.com> ALSA: caiaq: fix out-of-bounds read in the Traktor Kontrol S4 input parser Liviu Stan <liviu.stan(a)analog.com> iio: temperature: ltc2983: Fix reinit_completion() called after conversion start Andy Shevchenko <andriy.shevchenko(a)linux.intel.com> iio: magnetometer: ak8975: Add missed pm_runtime_put_autosuspend() call Javier Carrasco <javier.carrasco.cruz(a)gmail.com> iio: light: veml6030: fix channel type when pushing events Joshua Crofts <joshua.crofts1(a)gmail.com> iio: light: opt3001: fix missing state reset on timeout Biren Pandya <birenpandya(a)gmail.com> iio: light: gp2ap002: fix runtime PM leak on read error Vidhu Sarwal <vidhu.linux(a)gmail.com> iio: light: al3010: fix incorrect scale for the highest gain range Andreas Kempe <andreas.kempe(a)actia.se> iio: imu: st_lsm6dsx: deselect shub page before reading whoami Runyu Xiao <runyu.xiao(a)seu.edu.cn> iio: imu: bmi160: add IRQF_NO_THREAD to data-ready trigger IRQ Stepan Ionichev <sozdayvek(a)gmail.com> iio: gyro: bmg160: wait full startup time after mode change at probe Stepan Ionichev <sozdayvek(a)gmail.com> iio: gyro: bmg160: bail out when bandwidth/filter is not in table Lars-Peter Clausen <lars(a)metafoo.de> iio: event: Fix event FIFO reset race Maxwell Doose <m32285159(a)gmail.com> iio: chemical: scd30: Cleanup initializations and fix sign-extension bug Pengpeng Hou <pengpeng(a)iscas.ac.cn> iio: adc: ti-ads124s08: Return reset GPIO lookup errors Maxwell Doose <m32285159(a)gmail.com> iio: adc: lpc32xx: Initialize completion before requesting IRQ Biren Pandya <birenpandya(a)gmail.com> iio: accel: kxsd9: fix runtime PM imbalance on write_raw() error Bryam Vargas <hexlabsecurity(a)proton.me> iio: accel: bmc150: clamp the device-reported FIFO frame count Griffin Kroah-Hartman <griffin(a)kroah.com> usb: gadget: function: rndis: add length check for header Griffin Kroah-Hartman <griffin(a)kroah.com> usb: gadget: function: rndis: add length check to response query Michal Kosiorek <mkosiorek121(a)gmail.com> xfrm: defensively unhash xfrm_state lists in __xfrm_state_delete Fan Wu <fanwu01(a)zju.edu.cn> hdlc_ppp: sync per-proto timers before freeing hdlc state Johan Hovold <johan(a)kernel.org> i2c: core: fix adapter registration race Johan Hovold <johan(a)kernel.org> i2c: core: fix adapter debugfs creation Johan Hovold <johan(a)kernel.org> i2c: core: fix NULL-deref on adapter registration failure Johan Hovold <johan(a)kernel.org> i2c: core: fix hang on adapter registration failure Johan Hovold <johan(a)kernel.org> i2c: core: fix irq domain leak on adapter registration failure Mingyu Wang <25181214217(a)stu.xidian.edu.cn> fbdev: fbcon: fix out-of-bounds read in err_out of fbcon_do_set_font() Michael Bommarito <michael.bommarito(a)gmail.com> NFSv4/flexfiles: reject zero filehandle version count Keshav Verma <iganschel(a)gmail.com> f2fs: fix listxattr handling of corrupted xattr entries Ruipeng Qi <ruipengqi3(a)gmail.com> f2fs: fix potential deadlock in f2fs_balance_fs() Bryam Vargas <hexlabsecurity(a)proton.me> f2fs: bound i_inline_xattr_size for non-inline-xattr inodes Wenjie Qi <qwjhust(a)gmail.com> f2fs: validate orphan inode entry count Sunmin Jeong <s_min.jeong(a)samsung.com> f2fs: fix to round down start offset of fallocate for pin file Jaegeuk Kim <jaegeuk(a)kernel.org> f2fs: adjust zone capacity when considering valid block count Bryam Vargas <hexlabsecurity(a)proton.me> apparmor: mediate the implicit connect of TCP fast open sendmsg Maoyi Xie <maoyixie.tju(a)gmail.com> net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink Ruslan Valiyev <linuxoid(a)gmail.com> apparmor: fix use-after-free in rawdata dedup loop Yiming Qian <yimingqian591(a)gmail.com> net: skmsg: preserve sg.copy across SG transforms Eric Dumazet <edumazet(a)google.com> skmsg: convert struct sk_msg_sg::copy to a bitmap Xiang Mei <xmei5(a)asu.edu> netfilter: nf_log: validate MAC header was set before dumping it Krishna chaitanya chundru <quic_krichai(a)quicinc.com> bus: mhi: host: Add alignment check for event ring read pointer Sean Christopherson <seanjc(a)google.com> KVM: Replace guest-triggerable BUG_ON() in ioeventfd datamatch with get_unaligned() Lad Prabhakar <prabhakar.mahadev-lad.rj(a)bp.renesas.com> mmc: renesas_sdhi: Add quirk entry for RZ/G2H SoC NeilBrown <neil(a)brown.name> nfsd: change nfs4_client_to_reclaim() to allocate data NeilBrown <neilb(a)ownmail.net> nfsd: move name lookup out of nfsd4_list_rec_dir() Jiasheng Jiang <jiasheng(a)iscas.ac.cn> clk: imx: Add check for kcalloc Kiryl Shutsemau <kas(a)kernel.org> userfaultfd: gate must_wait writability check on pte_present() Jeff Layton <jlayton(a)kernel.org> nfsd: reset write verifier on deferred writeback errors Chris Mason <clm(a)meta.com> nfsd: release layout stid on setlease failure Chaitanya Kulkarni <kch(a)nvidia.com> nvmet-tcp: fix race between ICReq handling and queue teardown ------------- Diffstat: Documentation/admin-guide/pm/cpufreq.rst | 6 +- Documentation/crypto/userspace-if.rst | 31 +- Documentation/driver-api/pci/pci.rst | 3 + Makefile | 4 +- arch/alpha/kernel/pci-sysfs.c | 13 +- arch/arm/boot/dts/am335x-sl50.dts | 4 +- arch/arm/mach-davinci/board-da850-evm.c | 12 +- arch/arm/mach-imx/cpu-imx31.c | 9 +- arch/arm/mach-imx/mm-imx3.c | 2 + arch/arm64/boot/dts/qcom/sdm630.dtsi | 9 +- arch/arm64/kernel/hw_breakpoint.c | 9 + arch/arm64/kvm/vgic/vgic-its.c | 15 +- arch/arm64/kvm/vgic/vgic.c | 11 +- arch/mips/dec/int-handler.S | 2 +- arch/mips/dec/prom/init.c | 6 +- arch/mips/dec/setup.c | 6 - arch/mips/fw/lib/call_o32.S | 2 +- arch/mips/include/asm/dec/prom.h | 15 +- arch/mips/mm/init.c | 12 +- arch/mips/sgi-ip22/ip22-gio.c | 7 +- arch/powerpc/kexec/core_64.c | 4 +- arch/powerpc/perf/core-fsl-emb.c | 3 +- arch/powerpc/platforms/cell/spufs/file.c | 6 +- arch/powerpc/platforms/powernv/setup.c | 3 +- arch/riscv/kernel/stacktrace.c | 2 +- arch/sparc/kernel/led.c | 2 +- arch/x86/boot/compressed/acpi.c | 7 +- arch/x86/boot/early_serial_console.c | 11 +- arch/x86/events/amd/core.c | 6 +- arch/x86/kernel/cpu/mce/therm_throt.c | 7 +- arch/x86/kvm/vmx/vmx.c | 3 +- arch/x86/mm/numa_emulation.c | 17 +- arch/x86/platform/olpc/olpc-xo15-sci.c | 1 + block/partitions/aix.c | 9 + certs/common.c | 2 +- crypto/af_alg.c | 54 +- crypto/algif_skcipher.c | 49 +- crypto/asymmetric_keys/verify_pefile.c | 2 + crypto/drbg.c | 4 +- crypto/ecc.c | 31 +- crypto/ecrdsa.c | 2 +- crypto/pcrypt.c | 4 + crypto/rng.c | 11 + drivers/acpi/acpi_ipmi.c | 2 +- drivers/acpi/nfit/core.c | 15 +- drivers/acpi/resource.c | 6 +- drivers/android/binder.c | 19 +- drivers/ata/pata_pxa.c | 1 + drivers/ata/sata_gemini.c | 2 +- drivers/base/firmware_loader/main.c | 3 +- drivers/base/power/main.c | 6 +- drivers/base/property.c | 4 +- drivers/block/drbd/drbd_receiver.c | 5 + drivers/bluetooth/bpa10x.c | 8 +- drivers/bluetooth/btintel.c | 105 +- drivers/bluetooth/btintel.h | 5 +- drivers/bluetooth/btrtl.c | 5 +- drivers/bluetooth/btusb.c | 44 +- drivers/bluetooth/hci_intel.c | 7 +- drivers/bus/mhi/host/main.c | 3 +- drivers/bus/sunxi-rsb.c | 3 + drivers/char/hw_random/virtio-rng.c | 23 +- drivers/char/tlclk.c | 4 + drivers/char/tpm/eventlog/tpm1.c | 4 +- drivers/char/tpm/tpm-dev.c | 2 +- drivers/char/tpm/tpmrm-dev.c | 2 +- drivers/clk/clk-scmi.c | 4 +- drivers/clk/imx/clk.c | 2 + drivers/clk/qcom/a53-pll.c | 2 +- drivers/cpufreq/cpufreq.c | 2 + drivers/cpufreq/cpufreq_conservative.c | 12 +- drivers/cpufreq/intel_pstate.c | 6 +- drivers/cpufreq/pcc-cpufreq.c | 2 + drivers/crypto/amcc/crypto4xx_alg.c | 114 +- drivers/crypto/amcc/crypto4xx_core.c | 148 +- drivers/crypto/amcc/crypto4xx_core.h | 15 +- drivers/crypto/amcc/crypto4xx_reg_def.h | 19 +- drivers/crypto/amcc/crypto4xx_sa.h | 18 +- drivers/crypto/amcc/crypto4xx_trng.h | 2 +- drivers/crypto/amlogic/amlogic-gxl-core.c | 2 +- drivers/crypto/atmel-ecc.c | 2 +- drivers/crypto/atmel-sha204a.c | 29 +- drivers/crypto/caam/caamalg.c | 12 +- drivers/crypto/caam/caamalg_qi.c | 12 +- drivers/crypto/caam/caamalg_qi2.c | 12 +- drivers/crypto/caam/caamhash.c | 4 +- drivers/crypto/caam/key_gen.c | 4 +- drivers/crypto/cavium/cpt/cptvf_reqmanager.c | 4 +- drivers/crypto/ccp/sev-dev.c | 3 +- drivers/crypto/marvell/octeontx/otx_cptvf_reqmgr.c | 4 +- drivers/crypto/qat/qat_common/adf_accel_devices.h | 2 + drivers/crypto/qat/qat_common/adf_aer.c | 7 +- drivers/crypto/qat/qat_common/adf_common_drv.h | 4 + drivers/crypto/qat/qat_common/adf_isr.c | 18 + drivers/crypto/qat/qat_common/adf_pf2vf_msg.c | 22 + drivers/crypto/qat/qat_common/adf_sriov.c | 38 +- drivers/crypto/qat/qat_common/qat_asym_algs.c | 10 +- drivers/crypto/talitos.c | 26 +- drivers/dma-buf/udmabuf.c | 5 +- drivers/dma/dmaengine.c | 3 +- drivers/gpio/gpio-eic-sprd.c | 8 +- drivers/gpio/gpio-htc-egpio.c | 6 +- drivers/gpio/gpio-mvebu.c | 5 +- drivers/gpio/gpio-palmas.c | 19 + drivers/gpio/gpio-pca953x.c | 11 +- drivers/gpio/gpio-timberdale.c | 2 +- drivers/gpu/drm/amd/amdgpu/amdgpu_device.c | 4 +- drivers/gpu/drm/drm_edid.c | 8 + drivers/gpu/drm/i2c/sil164_drv.c | 7 - drivers/gpu/drm/msm/dp/dp_display.c | 4 +- drivers/gpu/drm/msm/dp/dp_reg.h | 4 +- drivers/gpu/drm/radeon/radeon_ring.c | 4 +- drivers/gpu/drm/tegra/dc.c | 4 +- drivers/gpu/drm/tidss/tidss_kms.c | 2 - drivers/gpu/host1x/bus.c | 2 +- drivers/hid/hid-appleir.c | 45 +- drivers/hid/hid-core.c | 7 + drivers/hid/hid-lg-g15.c | 16 + drivers/hid/hid-logitech-hidpp.c | 1 - drivers/hid/hid-multitouch.c | 32 +- drivers/hid/hid-picolcd_core.c | 3 +- drivers/hid/hid-sensor-hub.c | 77 +- drivers/hid/wacom_sys.c | 12 +- drivers/hwmon/asus_atk0110.c | 3 + drivers/hwmon/pmbus/adm1275.c | 2 +- drivers/hwmon/w83627hf.c | 4 + drivers/hwmon/w83793.c | 1 + drivers/hwspinlock/qcom_hwspinlock.c | 5 +- .../hwtracing/coresight/coresight-cti-platform.c | 1 + drivers/hwtracing/coresight/coresight-etb10.c | 6 +- drivers/i2c/busses/i2c-mlxbf.c | 4 +- drivers/i2c/busses/i2c-mt65xx.c | 2 +- drivers/i2c/busses/i2c-stm32f7.c | 9 +- drivers/i2c/i2c-core-base.c | 82 +- drivers/i3c/master.c | 19 +- drivers/iio/accel/bmc150-accel-core.c | 2 + drivers/iio/accel/kxsd9.c | 5 +- drivers/iio/accel/mma8452.c | 2 + drivers/iio/adc/lpc32xx_adc.c | 4 +- drivers/iio/adc/spear_adc.c | 4 +- drivers/iio/adc/ti-ads124s08.c | 3 +- drivers/iio/chemical/scd30_core.c | 19 +- drivers/iio/common/Kconfig | 1 + drivers/iio/common/Makefile | 1 + drivers/iio/common/inv_sensors/Kconfig | 7 + drivers/iio/common/inv_sensors/Makefile | 6 + .../inv_sensors/inv_sensors_timestamp.c} | 120 +- drivers/iio/common/st_sensors/st_sensors_core.c | 23 +- drivers/iio/gyro/bmg160_core.c | 16 +- drivers/iio/imu/adis_trigger.c | 2 +- drivers/iio/imu/bmi160/bmi160_core.c | 3 +- drivers/iio/imu/inv_icm42600/Kconfig | 1 + drivers/iio/imu/inv_icm42600/Makefile | 1 - drivers/iio/imu/inv_icm42600/inv_icm42600_accel.c | 35 +- drivers/iio/imu/inv_icm42600/inv_icm42600_buffer.c | 61 +- drivers/iio/imu/inv_icm42600/inv_icm42600_buffer.h | 3 + drivers/iio/imu/inv_icm42600/inv_icm42600_core.c | 24 +- drivers/iio/imu/inv_icm42600/inv_icm42600_gyro.c | 35 +- .../iio/imu/inv_icm42600/inv_icm42600_timestamp.h | 85 - drivers/iio/imu/inv_mpu6050/Kconfig | 1 + drivers/iio/imu/inv_mpu6050/inv_mpu_core.c | 30 +- drivers/iio/imu/inv_mpu6050/inv_mpu_iio.h | 18 +- drivers/iio/imu/inv_mpu6050/inv_mpu_ring.c | 85 +- drivers/iio/imu/inv_mpu6050/inv_mpu_trigger.c | 11 +- drivers/iio/imu/st_lsm6dsx/st_lsm6dsx_core.c | 21 +- drivers/iio/industrialio-event.c | 5 +- drivers/iio/light/al3010.c | 2 +- drivers/iio/light/gp2ap002.c | 2 +- drivers/iio/light/opt3001.c | 6 +- drivers/iio/light/si1133.c | 14 +- drivers/iio/light/veml6030.c | 8 +- drivers/iio/magnetometer/ak8975.c | 15 + drivers/iio/orientation/hid-sensor-rotation.c | 40 +- drivers/iio/temperature/ltc2983.c | 5 +- drivers/infiniband/hw/hns/hns_roce_hem.c | 8 +- drivers/infiniband/hw/hns/hns_roce_main.c | 2 +- drivers/infiniband/hw/mlx4/mlx4_ib.h | 1 + drivers/infiniband/hw/mlx4/mr.c | 9 +- drivers/infiniband/hw/mlx4/sysfs.c | 45 +- drivers/infiniband/hw/mlx5/devx.c | 30 +- drivers/infiniband/hw/mlx5/qp.c | 11 +- drivers/infiniband/sw/siw/siw_qp_rx.c | 9 + drivers/infiniband/ulp/srpt/ib_srpt.c | 5 +- drivers/input/joystick/iforce/iforce-packets.c | 18 +- drivers/input/joystick/maplecontrol.c | 3 +- drivers/input/keyboard/maple_keyb.c | 4 +- drivers/input/misc/ims-pcu.c | 115 +- drivers/input/mouse/elan_i2c_core.c | 36 +- drivers/input/mouse/maplemouse.c | 9 +- drivers/input/rmi4/rmi_bus.c | 4 +- drivers/input/rmi4/rmi_f30.c | 2 +- drivers/input/rmi4/rmi_f3a.c | 2 +- drivers/input/touchscreen/goodix.c | 3 +- drivers/input/touchscreen/mms114.c | 2 +- drivers/input/touchscreen/touchwin.c | 15 +- drivers/iommu/amd/amd_iommu_types.h | 11 +- drivers/irqchip/irq-crossbar.c | 10 +- drivers/leds/leds-lm3601x.c | 11 +- drivers/leds/leds-lm3697.c | 4 +- drivers/leds/uleds.c | 3 +- drivers/md/dm-bufio.c | 4 +- drivers/md/dm-era-target.c | 10 +- drivers/md/dm-ioctl.c | 7 +- drivers/md/dm-log.c | 3 + drivers/md/dm-stats.c | 10 +- drivers/md/dm-thin-metadata.c | 67 +- drivers/md/dm-verity-target.c | 2 +- drivers/media/platform/qcom/venus/helpers.c | 4 +- drivers/media/platform/rockchip/rga/rga-hw.c | 2 +- drivers/media/platform/rockchip/rga/rga-hw.h | 2 +- drivers/media/usb/uvc/uvc_video.c | 30 +- drivers/memstick/core/ms_block.c | 4 + drivers/mfd/cros_ec_dev.c | 3 +- drivers/mfd/sm501.c | 4 +- drivers/mfd/tps6586x.c | 2 +- drivers/mmc/host/renesas_sdhi_core.c | 1 + drivers/mmc/host/vub300.c | 26 +- drivers/mtd/devices/slram.c | 22 +- drivers/mtd/maps/vmu-flash.c | 1 + drivers/mtd/nand/onenand/onenand_samsung.c | 7 +- drivers/mtd/nand/raw/fsl_ifc_nand.c | 9 +- drivers/mtd/nand/raw/lpc32xx_mlc.c | 12 +- drivers/mtd/nand/raw/lpc32xx_slc.c | 12 +- drivers/mtd/nand/raw/nand_base.c | 2 +- drivers/mtd/spi-nor/Kconfig | 1 - drivers/net/bonding/bond_3ad.c | 1 + drivers/net/dsa/sja1105/sja1105_ptp.c | 2 +- drivers/net/ethernet/amazon/ena/ena_netdev.c | 23 +- drivers/net/ethernet/broadcom/bnx2x/bnx2x_cmn.c | 3 +- .../ethernet/cavium/liquidio/cn23xx_pf_device.c | 18 +- drivers/net/ethernet/chelsio/cxgb4/t4_hw.c | 8 - drivers/net/ethernet/freescale/fman/fman.c | 4 +- drivers/net/ethernet/marvell/mvneta.c | 3 + .../net/ethernet/marvell/octeontx2/nic/otx2_pf.c | 1 + .../net/ethernet/mellanox/mlx5/core/lib/port_tun.c | 3 +- .../net/ethernet/mellanox/mlxsw/spectrum_router.c | 1 + drivers/net/ethernet/qlogic/qede/qede_fp.c | 5 + drivers/net/ethernet/qualcomm/rmnet/rmnet_config.c | 5 + drivers/net/ethernet/qualcomm/rmnet/rmnet_config.h | 20 + .../net/ethernet/qualcomm/rmnet/rmnet_handlers.c | 53 +- drivers/net/ethernet/qualcomm/rmnet/rmnet_map.h | 22 +- .../ethernet/qualcomm/rmnet/rmnet_map_command.c | 11 +- .../net/ethernet/qualcomm/rmnet/rmnet_map_data.c | 334 +++- drivers/net/ethernet/qualcomm/rmnet/rmnet_vnd.c | 9 +- drivers/net/ethernet/qualcomm/rmnet/rmnet_vnd.h | 1 + drivers/net/ethernet/sun/sungem.c | 13 +- drivers/net/ieee802154/ca8210.c | 9 +- drivers/net/macsec.c | 7 +- drivers/net/usb/gl620a.c | 6 +- drivers/net/usb/kalmia.c | 8 + drivers/net/usb/lan78xx.c | 18 +- drivers/net/usb/net1080.c | 2 +- drivers/net/virtio_net.c | 3 + drivers/net/wan/hdlc_ppp.c | 15 +- drivers/net/wireless/ath/ath9k/xmit.c | 5 + drivers/net/wireless/ath/wcn36xx/smd.c | 6 + drivers/net/wireless/marvell/mwifiex/join.c | 1 - drivers/net/wireless/ralink/rt2x00/rt2x00dev.c | 12 +- drivers/net/wireless/realtek/rtw88/pci.c | 5 + drivers/nvdimm/btt.c | 14 +- drivers/nvme/host/core.c | 2 +- drivers/nvme/target/rdma.c | 18 +- drivers/nvme/target/tcp.c | 33 +- drivers/pci/Makefile | 2 +- drivers/pci/controller/dwc/pci-imx6.c | 5 +- drivers/pci/controller/dwc/pcie-designware-host.c | 2 +- .../pci/controller/mobiveil/pcie-mobiveil-host.c | 8 +- drivers/pci/controller/pci-host-common.c | 4 + drivers/pci/controller/pcie-altera-msi.c | 2 +- drivers/pci/controller/pcie-altera.c | 32 +- drivers/pci/controller/pcie-mediatek.c | 117 +- drivers/pci/controller/pcie-rcar-host.c | 1 - drivers/pci/controller/pcie-xilinx-nwl.c | 2 +- drivers/pci/pci.c | 135 -- drivers/pci/pci.h | 4 + drivers/pci/rebar.c | 217 +++ drivers/pci/setup-bus.c | 100 +- drivers/pci/setup-res.c | 53 - drivers/pinctrl/mediatek/pinctrl-mt8167.c | 2 +- drivers/pinctrl/mediatek/pinctrl-mt8516.c | 2 +- drivers/pinctrl/sunxi/pinctrl-sunxi.c | 2 +- drivers/platform/x86/xo15-ebook.c | 7 +- drivers/power/supply/charger-manager.c | 6 +- drivers/pwm/pwm-imx27.c | 8 +- drivers/rapidio/devices/tsi721.c | 3 +- drivers/regulator/core.c | 29 +- drivers/regulator/ltc3676.c | 10 +- drivers/reset/reset-sunxi.c | 4 +- drivers/rtc/rtc-abx80x.c | 3 +- drivers/rtc/rtc-cmos.c | 6 + drivers/rtc/rtc-ds1307.c | 30 +- drivers/s390/char/monwriter.c | 3 + drivers/s390/net/qeth_l3_main.c | 6 +- drivers/scsi/hpsa.c | 4 + drivers/scsi/pm8001/pm8001_ctl.c | 5 +- drivers/scsi/scsi_scan.c | 2 +- drivers/scsi/scsi_transport_sas.c | 60 +- drivers/scsi/sg.c | 7 +- drivers/scsi/smartpqi/smartpqi_init.c | 2 +- drivers/soc/fsl/qe/qe.c | 3 + drivers/soc/ti/k3-ringacc.c | 4 +- drivers/spi/spi-ep93xx.c | 1 + drivers/spi/spi-fsl-lpspi.c | 18 +- drivers/spi/spi-sh-msiof.c | 10 +- drivers/spi/spi-uniphier.c | 4 +- drivers/spi/spi-xilinx.c | 11 +- drivers/staging/media/atomisp/pci/atomisp_cmd.c | 6 +- .../media/atomisp/pci/atomisp_compat_css20.c | 2 +- .../atomisp/pci/runtime/isys/src/virtual_isys.c | 12 +- drivers/staging/media/atomisp/pci/sh_css.c | 1946 +++++++++----------- drivers/staging/media/ipu3/ipu3-css-params.c | 8 +- drivers/staging/media/sunxi/cedrus/cedrus.c | 4 +- drivers/staging/most/video/video.c | 7 +- drivers/staging/nvec/nvec.c | 4 +- drivers/staging/rtl8723bs/core/rtw_ap.c | 31 +- drivers/staging/rtl8723bs/core/rtw_cmd.c | 96 +- drivers/staging/rtl8723bs/core/rtw_ieee80211.c | 22 +- drivers/staging/rtl8723bs/core/rtw_ioctl_set.c | 4 +- drivers/staging/rtl8723bs/core/rtw_mlme.c | 16 +- drivers/staging/rtl8723bs/core/rtw_mlme_ext.c | 349 ++-- drivers/staging/rtl8723bs/core/rtw_recv.c | 4 +- drivers/staging/rtl8723bs/core/rtw_security.c | 6 +- drivers/staging/rtl8723bs/core/rtw_wlan_util.c | 14 +- drivers/staging/rtl8723bs/hal/hal_com_phycfg.c | 34 - drivers/staging/rtl8723bs/hal/odm.c | 30 - drivers/staging/rtl8723bs/hal/odm.h | 3 - drivers/staging/rtl8723bs/hal/odm_EdcaTurboCheck.c | 4 +- drivers/staging/rtl8723bs/hal/rtl8723b_hal_init.c | 1 - drivers/staging/rtl8723bs/hal/sdio_halinit.c | 10 - drivers/staging/rtl8723bs/include/hal_phy.h | 3 - drivers/staging/rtl8723bs/include/ieee80211.h | 22 +- drivers/staging/rtl8723bs/include/rtw_mlme_ext.h | 6 +- drivers/staging/rtl8723bs/include/wifi.h | 1 - drivers/staging/rtl8723bs/os_dep/ioctl_cfg80211.c | 118 +- drivers/staging/rtl8723bs/os_dep/ioctl_linux.c | 41 +- drivers/staging/rtl8723bs/os_dep/os_intfs.c | 6 +- drivers/target/target_core_pr.c | 8 +- drivers/thermal/thermal_hwmon.c | 5 +- drivers/tty/serial/8250/8250_mid.c | 31 +- drivers/tty/serial/8250/8250_omap.c | 3 +- drivers/tty/serial/msm_serial.c | 3 +- drivers/usb/atm/ueagle-atm.c | 36 +- drivers/usb/class/cdc-acm.c | 3 + drivers/usb/common/ulpi.c | 23 +- drivers/usb/core/quirks.c | 6 + drivers/usb/gadget/composite.c | 5 +- drivers/usb/gadget/function/f_fs.c | 5 +- drivers/usb/gadget/function/f_printer.c | 10 +- drivers/usb/gadget/function/rndis.c | 20 +- drivers/usb/host/ehci-sched.c | 11 +- drivers/usb/host/fotg210-hcd.c | 6 +- drivers/usb/host/max3421-hcd.c | 8 + drivers/usb/host/sl811-hcd.c | 1 + drivers/usb/host/xhci.c | 11 +- drivers/usb/misc/chaoskey.c | 1 - drivers/usb/misc/idmouse.c | 45 +- drivers/usb/misc/iowarrior.c | 21 +- drivers/usb/misc/ldusb.c | 38 +- drivers/usb/misc/legousbtower.c | 37 +- drivers/usb/misc/uss720.c | 5 +- drivers/usb/mtu3/mtu3_gadget.c | 1 + drivers/usb/serial/digi_acceleport.c | 43 +- drivers/usb/serial/option.c | 16 + drivers/usb/storage/ene_ub6250.c | 3 +- drivers/usb/storage/usb.c | 2 +- drivers/usb/typec/tcpm/tcpm.c | 7 +- drivers/usb/typec/ucsi/displayport.c | 7 +- drivers/usb/typec/ucsi/ucsi_ccg.c | 2 +- drivers/usb/usbip/vudc.h | 1 - drivers/usb/usbip/vudc_dev.c | 4 +- drivers/vfio/pci/vfio_pci.c | 1 + drivers/vhost/vdpa.c | 29 +- drivers/video/fbdev/aty/radeon_base.c | 1 + drivers/video/fbdev/carminefb.c | 1 + drivers/video/fbdev/core/fbcon.c | 7 + drivers/video/fbdev/i740fb.c | 1 + drivers/video/fbdev/nvidia/nvidia.c | 1 + drivers/video/fbdev/s3fb.c | 1 + drivers/video/fbdev/sm501fb.c | 16 +- drivers/video/fbdev/sm712.h | 2 +- drivers/video/fbdev/tdfxfb.c | 1 + drivers/video/fbdev/tridentfb.c | 1 + drivers/video/fbdev/uvesafb.c | 4 +- drivers/virtio/virtio_mmio.c | 26 +- drivers/watchdog/sprd_wdt.c | 5 +- drivers/xen/gntdev.c | 8 +- fs/afs/cell.c | 2 + fs/afs/cmservice.c | 2 - fs/afs/rxrpc.c | 11 +- fs/afs/super.c | 3 +- fs/afs/vl_list.c | 10 +- fs/btrfs/extent-tree.c | 17 +- fs/cifs/cifs_debug.c | 2 +- fs/cifs/cifsacl.c | 2 +- fs/cifs/cifsfs.c | 1 - fs/cifs/cifsglob.h | 5 +- fs/cifs/cifsproto.h | 2 +- fs/cifs/connect.c | 17 +- fs/cifs/misc.c | 4 +- fs/cifs/netmisc.c | 2 +- fs/cifs/readdir.c | 6 +- fs/cifs/smb2maperror.c | 16 +- fs/cifs/smb2misc.c | 123 +- fs/cifs/smb2ops.c | 107 +- fs/cifs/smb2pdu.c | 114 +- fs/cifs/smb2pdu.h | 365 +--- fs/cifs/smb2proto.h | 4 +- fs/cifs/smb2transport.c | 36 +- fs/configfs/dir.c | 54 +- fs/efs/file.c | 21 +- fs/exfat/dir.c | 13 +- fs/ext4/ioctl.c | 12 +- fs/f2fs/checkpoint.c | 13 +- fs/f2fs/data.c | 29 + fs/f2fs/debug.c | 2 +- fs/f2fs/f2fs.h | 1 + fs/f2fs/file.c | 15 +- fs/f2fs/gc.c | 4 +- fs/f2fs/inode.c | 13 +- fs/f2fs/segment.c | 14 +- fs/f2fs/segment.h | 8 +- fs/f2fs/xattr.c | 4 +- fs/fs-writeback.c | 20 +- fs/fuse/cuse.c | 4 +- fs/fuse/dev.c | 2 +- fs/hfs/bfind.c | 2 +- fs/hfs/bnode.c | 56 +- fs/hfs/brec.c | 2 +- fs/hfs/btree.c | 2 +- fs/hfs/btree.h | 71 +- fs/hfs/hfs_fs.h | 83 +- fs/hfs/inode.c | 2 +- fs/hfsplus/bfind.c | 2 +- fs/hfsplus/bnode.c | 62 +- fs/hfsplus/brec.c | 2 +- fs/hfsplus/btree.c | 2 +- fs/hfsplus/hfsplus_fs.h | 40 +- fs/isofs/rock.c | 11 + fs/lockd/svcsubs.c | 4 +- fs/nfs/callback_proc.c | 9 +- fs/nfs/dir.c | 2 + fs/nfs/filelayout/filelayout.c | 2 + fs/nfs/flexfilelayout/flexfilelayout.c | 33 + fs/nfs/flexfilelayout/flexfilelayout.h | 16 + fs/nfs/pnfs.c | 4 +- fs/nfsd/nfs4layouts.c | 4 +- fs/nfsd/nfs4recover.c | 120 +- fs/nfsd/nfs4state.c | 22 +- fs/nfsd/vfs.c | 9 +- fs/nilfs2/segment.c | 22 + fs/ocfs2/alloc.c | 2 +- fs/ocfs2/aops.c | 13 +- fs/ocfs2/buffer_head_io.c | 7 +- fs/ocfs2/dlm/dlmdebug.c | 16 +- fs/ocfs2/dlmglue.c | 17 + fs/ocfs2/inode.c | 150 +- fs/ocfs2/journal.c | 13 +- fs/ocfs2/move_extents.c | 4 +- fs/ocfs2/ocfs2.h | 2 - fs/ocfs2/quota_local.c | 2 +- fs/ocfs2/stack_user.c | 10 +- fs/ocfs2/super.c | 2 - fs/ocfs2/sysfile.c | 9 +- fs/orangefs/dir.c | 7 +- fs/proc/array.c | 6 + fs/proc/base.c | 184 +- fs/proc/fd.c | 29 +- fs/proc/generic.c | 9 +- fs/proc/internal.h | 4 +- fs/proc/namespaces.c | 16 +- fs/proc/proc_net.c | 1 + fs/smbfs_common/smb2pdu.h | 318 ++++ fs/sysfs/file.c | 4 + fs/udf/balloc.c | 5 +- fs/udf/super.c | 11 +- fs/userfaultfd.c | 14 +- fs/xfs/libxfs/xfs_format.h | 2 +- fs/xfs/libxfs/xfs_sb.c | 64 + fs/xfs/libxfs/xfs_sb.h | 1 + fs/xfs/xfs_dquot.c | 16 +- fs/xfs/xfs_log_recover.c | 6 +- fs/xfs/xfs_mount.c | 1 + fs/xfs/xfs_mount.h | 75 + fs/xfs/xfs_rtalloc.c | 3 + include/crypto/drbg.h | 18 +- include/linux/audit.h | 8 + include/linux/bitops.h | 2 + include/linux/device.h | 5 +- include/linux/glob.h | 1 + include/linux/hid-sensor-hub.h | 25 + include/linux/hid.h | 29 + include/linux/if_rmnet.h | 70 +- include/linux/iio/common/inv_sensors_timestamp.h | 94 + include/linux/pci.h | 4 +- include/linux/platform_data/pca953x.h | 2 +- include/linux/skmsg.h | 22 +- include/net/addrconf.h | 12 +- include/net/bluetooth/hci.h | 5 +- include/net/bluetooth/l2cap.h | 2 +- include/net/fib_rules.h | 5 + include/net/gue.h | 2 +- include/net/if_inet6.h | 37 +- include/net/ip_fib.h | 7 +- include/net/ip_vs.h | 3 +- include/net/mld.h | 3 + include/net/ndisc.h | 4 +- include/net/rtnetlink.h | 2 + include/net/sctp/sctp.h | 3 +- include/net/sock.h | 2 +- include/net/xfrm.h | 7 + include/uapi/linux/if_link.h | 1 + io_uring/io-wq.c | 2 +- kernel/audit.c | 85 +- kernel/bpf/verifier.c | 3 +- kernel/cgroup/cpuset.c | 7 +- kernel/cpu.c | 8 +- kernel/locking/rtmutex.c | 16 +- kernel/sched/fair.c | 2 +- kernel/sched/features.h | 8 + kernel/time/posix-cpu-timers.c | 3 +- kernel/time/time.c | 2 +- kernel/trace/ring_buffer.c | 3 +- kernel/trace/trace_events_filter.c | 6 +- kernel/trace/trace_probe.c | 3 +- kernel/trace/trace_probe.h | 2 +- kernel/workqueue.c | 2 +- lib/debugobjects.c | 17 + lib/glob.c | 31 +- lib/test_meminit.c | 2 +- net/6lowpan/nhc.c | 2 +- net/9p/trans_rdma.c | 19 +- net/atm/common.c | 2 + net/batman-adv/distributed-arp-table.c | 30 +- net/batman-adv/fragmentation.c | 8 +- net/batman-adv/gateway_client.c | 3 +- net/batman-adv/main.c | 22 +- net/batman-adv/multicast.c | 6 +- net/batman-adv/routing.c | 3 +- net/batman-adv/soft-interface.c | 11 +- net/batman-adv/soft-interface.h | 2 + net/batman-adv/translation-table.c | 5 +- net/batman-adv/types.h | 7 + net/bluetooth/af_bluetooth.c | 17 +- net/bluetooth/bnep/core.c | 27 +- net/bluetooth/l2cap_core.c | 123 +- net/bluetooth/l2cap_sock.c | 4 +- net/bridge/netfilter/ebtables.c | 22 +- net/bridge/netfilter/nft_meta_bridge.c | 4 +- net/can/bcm.c | 90 +- net/can/isotp.c | 9 +- net/core/fib_rules.c | 6 +- net/core/filter.c | 38 +- net/core/lwt_bpf.c | 12 + net/core/rtnetlink.c | 8 + net/core/skbuff.c | 23 +- net/core/skmsg.c | 2 + net/ieee802154/core.c | 2 +- net/ieee802154/header_ops.c | 9 +- net/ieee802154/ieee802154.h | 17 + net/ieee802154/netlink.c | 36 +- net/ife/ife.c | 2 +- net/ipv4/igmp.c | 1 + net/ipv4/ip_gre.c | 6 + net/ipv4/ip_vti.c | 3 + net/ipv4/netfilter/nf_log_ipv4.c | 4 +- net/ipv4/sysctl_net_ipv4.c | 10 +- net/ipv4/tcp_output.c | 4 +- net/ipv6/addrconf.c | 38 +- net/ipv6/addrconf_core.c | 2 +- net/ipv6/af_inet6.c | 2 +- net/ipv6/icmp.c | 4 +- net/ipv6/ip6_gre.c | 6 + net/ipv6/ip6_vti.c | 3 + net/ipv6/mcast.c | 1184 +++++++----- net/ipv6/netfilter.c | 4 +- net/ipv6/netfilter/ip6t_ah.c | 5 + net/ipv6/netfilter/ip6t_hbh.c | 1 + net/ipv6/netfilter/ip6t_rt.c | 3 +- net/ipv6/netfilter/nf_conntrack_reasm.c | 3 +- net/ipv6/netfilter/nf_log_ipv6.c | 4 +- net/ipv6/route.c | 9 +- net/ipv6/seg6.c | 3 + net/ipv6/sit.c | 3 + net/kcm/kcmsock.c | 8 +- net/key/af_key.c | 1 + net/llc/af_llc.c | 1 + net/llc/llc_conn.c | 1 - net/mac80211/main.c | 3 +- net/mac80211/tx.c | 17 +- net/mac802154/iface.c | 2 +- net/netfilter/ipset/ip_set_core.c | 12 +- net/netfilter/ipvs/ip_vs_app.c | 10 +- net/netfilter/ipvs/ip_vs_conn.c | 4 +- net/netfilter/ipvs/ip_vs_core.c | 36 +- net/netfilter/ipvs/ip_vs_proto_sctp.c | 18 +- net/netfilter/ipvs/ip_vs_proto_tcp.c | 11 +- net/netfilter/ipvs/ip_vs_proto_udp.c | 3 +- net/netfilter/nf_conncount.c | 23 +- net/netfilter/nf_conntrack_core.c | 18 +- net/netfilter/nf_conntrack_irc.c | 6 +- net/netfilter/nf_conntrack_seqadj.c | 2 + net/netfilter/nf_nat_sip.c | 9 + net/netfilter/nfnetlink_cthelper.c | 4 +- net/netfilter/nfnetlink_osf.c | 6 +- net/netfilter/nft_log.c | 58 +- net/netfilter/nft_synproxy.c | 9 +- net/netfilter/xt_AUDIT.c | 58 +- net/netfilter/xt_cluster.c | 2 +- net/netfilter/xt_nat.c | 9 + net/netfilter/xt_rateest.c | 2 +- net/netfilter/xt_u32.c | 12 +- net/openvswitch/conntrack.c | 2 +- net/psample/psample.c | 6 +- net/qrtr/af_qrtr.c | 2 +- net/sched/cls_bpf.c | 10 +- net/sched/sch_cake.c | 5 +- net/sched/sch_codel.c | 48 +- net/sched/sch_drr.c | 8 +- net/sched/sch_fq_codel.c | 41 +- net/sched/sch_hfsc.c | 24 +- net/sched/sch_hhf.c | 27 + net/sched/sch_htb.c | 8 +- net/sched/sch_multiq.c | 2 +- net/sctp/diag.c | 67 +- net/sctp/sm_make_chunk.c | 10 +- net/sctp/sm_statefuns.c | 23 +- net/sctp/socket.c | 29 +- net/smc/smc_cdc.c | 15 +- net/socket.c | 2 +- net/tipc/bcast.c | 22 +- net/tipc/bcast.h | 2 +- net/tipc/bearer.c | 1 + net/tipc/netlink.c | 12 + net/tipc/node.c | 15 +- net/tipc/socket.c | 3 + net/tipc/udp_media.c | 2 + net/tls/tls_sw.c | 4 + net/xfrm/xfrm_interface_core.c | 3 + net/xfrm/xfrm_policy.c | 3 + net/xfrm/xfrm_state.c | 11 +- net/xfrm/xfrm_user.c | 2 +- samples/trace_events/trace-events-sample.c | 4 + scripts/kconfig/conf.c | 6 +- security/apparmor/domain.c | 58 +- security/apparmor/include/policy_unpack.h | 19 + security/apparmor/label.c | 2 +- security/apparmor/lsm.c | 18 +- security/apparmor/net.c | 1 + security/apparmor/policy.c | 14 +- security/apparmor/procattr.c | 2 + security/keys/keyring.c | 2 +- sound/aoa/fabrics/layout.c | 6 + sound/firewire/isight.c | 3 +- sound/pci/es1938.c | 2 + sound/soc/fsl/fsl_audmix.c | 6 + sound/soc/tegra/tegra210_ahub.c | 4 +- sound/usb/caiaq/input.c | 2 +- sound/usb/mixer_quirks.c | 101 +- sound/usb/mixer_scarlett.c | 4 +- sound/usb/mixer_us16x08.c | 127 +- tools/bpf/bpftool/net.c | 4 +- tools/include/linux/bitops.h | 2 + tools/lib/api/fs/fs.c | 19 +- tools/perf/util/probe-finder.c | 4 +- tools/testing/selftests/vm/compaction_test.c | 3 + tools/testing/selftests/vm/hmm-tests.c | 32 +- tools/usb/usbip/libsrc/usbip_common.c | 2 + tools/usb/usbip/libsrc/usbip_device_driver.c | 4 + tools/usb/usbip/libsrc/vhci_driver.c | 1 + tools/virtio/vringh_test.c | 5 + tools/vm/slabinfo.c | 4 +- virt/kvm/eventfd.c | 12 +- virt/kvm/kvm_main.c | 16 +- 673 files changed, 8550 insertions(+), 5844 deletions(-)

1 month, 1 week

Re: [PATCH 6.18 0000/1624] 6.18.40-rc2 review

by Greg KH

On Thu, Jul 23, 2026 at 10:33:16PM +0200, Danilo Krummrich wrote: > On Thu Jul 23, 2026 at 5:43 PM CEST, Miguel Ojeda wrote: > > I suggest dropping commit > > > > d8fa174e21c8 ("gpu: nova-core: vbios: read BitToken using FromBytes") > > > > for now -- it was not marked for stable, and as far as I know, there are > > no production users of Nova, especially in stable kernels. > > Yes, we can just drop the commit. In general, for now we should only backport > nova patches that could get into the way of testing stable releases in one or > the other way. Ok, I'll just drop all the nova patches from 6.18.y and 7.1.y now as they were not specifically tagged for stable, but just picked up due to their Fixes: tags. thanks, greg k-h

1 month, 1 week

[PATCH 6.6 0000/1226] 6.6.145-rc2 review

by Greg Kroah-Hartman

This is the start of the stable review cycle for the 6.6.145 release. There are 1226 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know. Responses should be made by Fri, 24 Jul 2026 14:31:21 +0000. Anything received after that time might be too late. The whole patch series can be found in one patch at: https://www.kernel.org/pub/linux/kernel/v6.x/stable-review/patch-6.6.145-rc… or in the git tree and branch at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-6.6.y and the diffstat can be found below. thanks, greg k-h ------------- Pseudo-Shortlog of commits: Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> Linux 6.6.145-rc2 Danilo Krummrich <dakr(a)kernel.org> driver core: Guard deferred probe timeout extension with delayed_work_pending() Danilo Krummrich <dakr(a)kernel.org> driver core: Fix missing jiffies conversion in deferred_probe_extend_timeout() Easwar Hariharan <eahariha(a)linux.microsoft.com> jiffies: Cast to unsigned long in secs_to_jiffies() conversion Easwar Hariharan <eahariha(a)linux.microsoft.com> jiffies: Define secs_to_jiffies() Baokun Li <libaokun(a)linux.alibaba.com> writeback: drop now-unnecessary rcu_barrier() in cgroup_writeback_umount() Jan Kara <jack(a)suse.cz> writeback: Fix use after free in inode_switch_wbs_work_fn() Darrick J. Wong <djwong(a)kernel.org> xfs: fix stupid compiler warning Arnd Bergmann <arnd(a)arndb.de> Bluetooth: btmtk: remove #ifdef around declarations Arnd Bergmann <arnd(a)arndb.de> Bluetooth: btmtk: Fix btmtk.c undefined reference build error harder Benjamin Tissoires <bentiss(a)kernel.org> selftests/hid: ensure CKI can compile our new tests on old kernels Luiz Augusto von Dentz <luiz.von.dentz(a)intel.com> Bluetooth: 6lowpan: Fix using chan->conn as indication to no remote netdev Luiz Augusto von Dentz <luiz.von.dentz(a)intel.com> Bluetooth: hci_sync: Fix attempting to send HCI_Disconnect to BIS handle Luiz Augusto von Dentz <luiz.von.dentz(a)intel.com> Bluetooth: hci_core: Remove check of BDADDR_ANY in hci_conn_hash_lookup_big_state Gil Portnoy <dddhkts1(a)gmail.com> ksmbd: fix durable reconnect double-bind race in ksmbd_reopen_durable_fd Randy Dunlap <rdunlap(a)infradead.org> seqlock: fix scoped_seqlock_read kernel-doc Marc Zyngier <maz(a)kernel.org> KVM: Move kvm_io_bus_get_dev() locking responsibilities to callers Siwei Zhang <oss(a)fourdim.xyz> Bluetooth: hci_conn: Fix null ptr deref in hci_abort_conn() Cen Zhang <zzzccc427(a)gmail.com> Bluetooth: hci_sync: annotate data-races around hdev->req_status Pauli Virtanen <pav(a)iki.fi> Bluetooth: separate CIS_LINK and BIS_LINK link types Luiz Augusto von Dentz <luiz.von.dentz(a)intel.com> Bluetooth: hci_core: Enable buffer flow control for SCO/eSCO Qu Wenruo <wqu(a)suse.com> btrfs: fix incorrect buffered IO fallback for append direct writes Qu Wenruo <wqu(a)suse.com> btrfs: fix false IO failure after falling back to buffered write Rochan Avlur <rochan.avlur(a)gmail.com> exfat: preserve benign secondary entries during rename and move Yuezhang Mo <Yuezhang.Mo(a)sony.com> exfat: move exfat_chain_set() out of __exfat_resolve_path() Yuezhang Mo <Yuezhang.Mo(a)sony.com> exfat: add exfat_get_dentry_set_by_ei() helper Yuezhang Mo <Yuezhang.Mo(a)sony.com> exfat: rename argument name for exfat_move_file and exfat_rename_file Yuezhang Mo <Yuezhang.Mo(a)sony.com> exfat: remove unnecessary read entry in __exfat_rename() Yuezhang Mo <Yuezhang.Mo(a)sony.com> exfat: move free cluster out of exfat_init_ext_entry() Pedro Falcato <pfalcato(a)suse.de> mm: do file ownership checks with the proper mount idmap Wentao Liang <vulab(a)iscas.ac.cn> regulator: scmi: fix of_node refcount leak in scmi_regulator_probe() Krzysztof Kozlowski <krzysztof.kozlowski(a)linaro.org> regulator: scmi: Simplify with scoped for each OF child loop Ricardo Robaina <rrobaina(a)redhat.com> audit: fix potential integer overflow in audit_log_n_hex() Ricardo Robaina <rrobaina(a)redhat.com> audit: add audit_log_nf_skb helper function Ahsan Atta <ahsan.atta(a)intel.com> crypto: qat - fix restarting state leak on allocation failure Qu Wenruo <wqu(a)suse.com> btrfs: check and set EXTENT_DELALLOC_NEW before clearing EXTENT_DELALLOC Neill Kapron <nkapron(a)google.com> usb: gadget: f_fs: Tie read_buffer lifetime to ffs_epfile Tianchu Chen <flynnnchen(a)tencent.com> nvmet-auth: validate reply message payload bounds against transfer length Hannes Reinecke <hare(a)kernel.org> nvmet: return DHCHAP status codes from nvmet_setup_auth() Chaitanya Kulkarni <kch(a)nvidia.com> nvmet: remove superfluous initialization Tyler Baker <tyler.baker(a)oss.qualcomm.com> usb: gadget: f_fs: initialize reset_work at allocation time Thorsten Blum <thorsten.blum(a)linux.dev> crypto: atmel-sha204a - drop hwrng quality reduction for ATSHA204A Uwe Kleine-König <u.kleine-koenig(a)baylibre.com> crypto: atmel - Drop explicit initialization of struct i2c_device_id::driver_data to 0 Andy Yan <andyshrk(a)163.com> usb: typec: tcpm: Fix VDM type for Enter Mode commands Mauricio Faria de Oliveira <mfo(a)igalia.com> usb: atm: ueagle-atm: wait for pre-firmware load in .disconnect() Oliver Neukum <oneukum(a)suse.com> usb: iowarrior: remove inherent race with minor number Vlad Poenaru <vlad.wing(a)gmail.com> bpf: Allow LPM map access from sleepable BPF programs Andrii Nakryiko <andrii(a)kernel.org> bpf: Consistently use bpf_rcu_lock_held() everywhere Tristan Madani <tristan(a)talencesecurity.com> hfs/hfsplus: fix u32 overflow in check_and_correct_requested_length Viacheslav Dubeyko <slava(a)dubeyko.com> hfs/hfsplus: prevent getting negative values of offset/length Andy Shevchenko <andriy.shevchenko(a)linux.intel.com> serial: 8250_mid: Disable DMA for selected platforms Ilpo Järvinen <ilpo.jarvinen(a)linux.intel.com> serial: 8250_mid: Remove 8250_pci usage Manish Khadka <maskmemanish(a)gmail.com> HID: appleir: fix UAF on pending key_up_timer in remove() Thomas Gleixner <tglx(a)linutronix.de> treewide: Switch/rename to timer_delete[_sync]() Jann Horn <jannh(a)google.com> proc: protect ptrace_may_access() with exec_update_lock (part 1) Oleg Nesterov <oleg(a)redhat.com> seqlock: Change do_task_stat() to use scoped_seqlock_read() Peter Zijlstra <peterz(a)infradead.org> seqlock: Introduce scoped_seqlock_read() Vlastimil Babka (SUSE) <vbabka(a)kernel.org> mm/slab: do not limit zeroing to orig_size when only red zoning is enabled Trung Nguyen <trungnh(a)cystack.net> HID: multitouch: fix out-of-bounds bit access on mt_io_flags Angela Czubak <aczubak(a)google.com> HID: add haptics page defines Zide Chen <zide.chen(a)intel.com> perf/x86/intel/uncore: Defer ADL global PMON enable to enable_box() Baokun Li <libaokun(a)linux.alibaba.com> writeback: fix race between cgroup_writeback_umount() and inode_switch_wbs() Jan Kara <jack(a)suse.cz> writeback: Avoid contention on wb->list_lock when switching inodes Guangshuo Li <lgs201920130244(a)gmail.com> cpufreq: qcom-cpufreq-hw: Fix possible double free Lizhe <sensor1010(a)163.com> cpufreq: Make cpufreq_driver->exit() return void Viresh Kumar <viresh.kumar(a)linaro.org> cpufreq: pcc: Remove empty exit() callback Jann Horn <jannh(a)google.com> proc: protect ptrace_may_access() with exec_update_lock (FD links) Christoph Hellwig <hch(a)lst.de> proc: rename proc_setattr to proc_nochmod_setattr Namjae Jeon <linkinjeon(a)kernel.org> ksmbd: track the connection owning a byte-range lock DaeMyung Kang <charsyam(a)gmail.com> ksmbd: centralize ksmbd_conn final release to plug transport leak Namjae Jeon <linkinjeon(a)kernel.org> ksmbd: use opener credentials for FSCTL mutations Michael Bommarito <michael.bommarito(a)gmail.com> smb: client: resolve SWN tcon from live registrations Markus Elfring <elfring(a)users.sourceforge.net> smb: client: Improve unlocking of a mutex in cifs_get_swn_reg() Siwei Zhang <oss(a)fourdim.xyz> Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_new_connection_cb() Pauli Virtanen <pav(a)iki.fi> Bluetooth: 6lowpan: fix cyclic locking warning on netdev unregister Runyu Xiao <runyu.xiao(a)seu.edu.cn> Bluetooth: L2CAP: cancel pending_rx_work before taking conn->lock Florian Westphal <fw(a)strlen.de> netfilter: ebtables: zero chainstack array Qianfeng Rong <rongqianfeng(a)vivo.com> netfilter: ebtables: Use vmalloc_array() to improve code Xiaolei Wang <xiaolei.wang(a)windriver.com> media: nxp: imx8-isi: Fix use-after-free on remove Frank Li <Frank.Li(a)nxp.com> media: nxp: imx8-isi: use devm_pm_runtime_enable() to simplify code Uwe Kleine-König <u.kleine-koenig(a)pengutronix.de> media: nxp: imx8-isi: Convert to platform remove callback returning void Runyu Xiao <runyu.xiao(a)seu.edu.cn> gpio: sch: use raw_spinlock_t in the irq startup path Runyu Xiao <runyu.xiao(a)seu.edu.cn> coresight: etb10: restore atomic_t for shared reading state Shakeel Butt <shakeel.butt(a)linux.dev> mm/shrinker: do not hold RCU lock in shrinker_debugfs_count_show() Qi Zheng <zhengqi.arch(a)bytedance.com> mm: shrinker: remove redundant shrinker_rwsem in debugfs operations Marco Elver <elver(a)google.com> Bluetooth: L2CAP: Fix UAF in channel timeout by holding conn ref Giovanni Cabiddu <giovanni.cabiddu(a)intel.com> crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() Alexandru Hossu <hossu.alexandru(a)gmail.com> staging: rtl8723bs: fix OOB reads in rtw_get_sec_ie(), rtw_get_wapi_ie(), and rtw_get_wps_attr() Nikolay Kulikov <nikolayof23(a)gmail.com> staging: rtl8723bs: fix spaces around binary operators William Hansen-Baird <william.hansen.baird(a)gmail.com> staging: rtl8723bs: core: move constants to right side in comparison Marco Nenciarini <mnencia(a)kcore.it> PCI: Skip Resizable BAR restore on read error Ilpo Järvinen <ilpo.jarvinen(a)linux.intel.com> PCI: Move Resizable BAR code to rebar.c Ilpo Järvinen <ilpo.jarvinen(a)linux.intel.com> PCI: Add kerneldoc for pci_resize_resource() Ilpo Järvinen <ilpo.jarvinen(a)linux.intel.com> PCI: Fix restoring BARs on BAR resize rollback path Ilpo Järvinen <ilpo.jarvinen(a)linux.intel.com> PCI: Free saved list without holding pci_bus_sem Ilpo Järvinen <ilpo.jarvinen(a)linux.intel.com> PCI: Prevent resource tree corruption when BAR resize fails Manivannan Sadhasivam <manivannan.sadhasivam(a)oss.qualcomm.com> PCI: mediatek: Fix IRQ domain leak when port fails to enable Christian Marangi <ansuelsmth(a)gmail.com> PCI: mediatek: Use generic MACRO for TPVPERL delay Christian Marangi <ansuelsmth(a)gmail.com> PCI: mediatek: Convert bool to single quirks entry and bitmap Jiri Slaby (SUSE) <jirislaby(a)kernel.org> PCI: controller: Use dev_fwnode() instead of of_fwnode_handle() Richard Zhu <hongxing.zhu(a)nxp.com> PCI: imx6: Fix IMX6SX_GPR12_PCIE_TEST_POWERDOWN handling Alex Williamson <alex.williamson(a)nvidia.com> vfio/mlx5: Fix racy bitfields and tighten struct layout Mahesh Vaidya <mahesh.vaidya(a)altera.com> PCI: altera: Fix resource leaks on probe failure Zhao Dongdong <zhaodongdong(a)kylinos.cn> ALSA: aoa: check snd_ctl_new1() return value Herman van Hazendonk <github.com(a)herrie.org> iio: common: st_sensors: honour channel endianness in read_axis_data Alexander Lobakin <aleksander.lobakin(a)intel.com> bitops: make BYTES_TO_BITS() treewide-available Biren Pandya <birenpandya(a)gmail.com> iio: pressure: mpl115: fix runtime PM leak on read error Jean-Baptiste Maneyrol <jean-baptiste.maneyrol(a)tdk.com> iio: imu: inv_icm42600: fix timestamping by limiting FIFO reading Jean-Baptiste Maneyrol <jean-baptiste.maneyrol(a)tdk.com> iio: imu: inv_icm42600: stabilized timestamp in interrupt Jean-Baptiste Maneyrol <jean-baptiste.maneyrol(a)tdk.com> iio: invensense: fix timestamp glitches when switching frequency Colin Ian King <colin.i.king(a)gmail.com> iio: invensense: remove redundant initialization of variable period Zhang Lixu <lixu.zhang(a)intel.com> iio: hid-sensor-rotation: Fix stale or zero output when reading raw values Runyu Xiao <runyu.xiao(a)seu.edu.cn> iio: imu: adis: add IRQF_NO_THREAD to non-FIFO trigger IRQ Rafael J. Wysocki <rafael.j.wysocki(a)intel.com> ACPI: NFIT: core: Fix possible deadlock and missing notifications Rafael J. Wysocki <rafael.j.wysocki(a)intel.com> ACPI: NFIT: core: Use devm_acpi_install_notify_handler() Rafael J. Wysocki <rafael.j.wysocki(a)intel.com> ACPI: bus: Introduce devm_acpi_install_notify_handler() Rafael J. Wysocki <rafael.j.wysocki(a)intel.com> ACPI: driver: Check ACPI_COMPANION() against NULL during probe Rafael J. Wysocki <rafael.j.wysocki(a)intel.com> ACPI: NFIT: core: Fix acpi_nfit_init() error cleanup Sandipan Das <sandipan.das(a)amd.com> perf/x86/amd/brs: Fix kernel address leakage Pengpeng Hou <pengpeng(a)iscas.ac.cn> mtd: rawnand: lpc32xx_slc: fail DMA transfer on completion timeout Pengpeng Hou <pengpeng(a)iscas.ac.cn> mtd: rawnand: lpc32xx_mlc: fail DMA transfers on timeout Pengpeng Hou <pengpeng(a)iscas.ac.cn> mtd: rawnand: fsl_ifc: return errors for failed page reads Runyu Xiao <runyu.xiao(a)seu.edu.cn> mmc: vub300: defer reset until cmd_mutex is unlocked Pengpeng Hou <pengpeng(a)iscas.ac.cn> mtd: mchp23k256: use SPI match data for chip caps Pengpeng Hou <pengpeng(a)iscas.ac.cn> mtd: onenand: samsung: report DMA completion timeouts Rafael Beims <rafael.beims(a)toradex.com> wifi: mwifiex: fix permanently busy scans after multiple roam iterations Zhiling Zou <roxy520tt(a)gmail.com> wifi: mac80211: free ack status frame on TX header build failure Junrui Luo <moonafterrain(a)outlook.com> powerpc/spufs: fix out-of-bounds access in spufs_mem_mmap_access() Zhao Dongdong <zhaodongdong(a)kylinos.cn> reset: sunxi: fix memory region leak on ioremap failure Robby Cai <robby.cai(a)nxp.com> reset: imx7: Correct polarity of MIPI CSI resets on i.MX8MQ Florian Westphal <fw(a)strlen.de> ipvs: reload ip header after head reallocation Julian Anastasov <ja(a)ssi.bg> ipvs: fix more places with wrong ipv6 transport offsets Maoyi Xie <maoyixie.tju(a)gmail.com> memstick: ms_block: reject a card that reports too many blocks James Raphael Tiovalen <jamestiotio(a)gmail.com> macsec: fix promiscuity refcount leak in macsec_dev_open() Xuanqiang Luo <luoxuanqiang(a)kylinos.cn> llc: fix SAP refcount leak when creating incoming sockets Laxman Acharya Padhya <acharyalaxman8848(a)gmail.com> Bluetooth: btrtl: validate firmware patch bounds Asim Viladi Oglu Manizada <manizada(a)pm.me> net: openvswitch: reject oversized nested action attrs Abhishek Ojha <Abhishek.ojha(a)savoirfairelinux.com> regulator: ltc3676: Fix incorrect IRQSTAT bit offsets Dawei Feng <dawei.feng(a)seu.edu.cn> wifi: mac80211: fix memory leak in ieee80211_register_hw() Runyu Xiao <runyu.xiao(a)seu.edu.cn> wifi: rt2x00: avoid full teardown before work setup in probe Thorsten Blum <thorsten.blum(a)linux.dev> powerpc/pseries: fix memory leak on krealloc failure in papr_init Peng Fan <peng.fan(a)nxp.com> pmdomain: imx: Fix i.MX8MP VC8000E power up sequence Peng Fan <peng.fan(a)nxp.com> pmdomain: imx: Fix i.MX8MP power notifier Farhad Alemi <farhad.alemi(a)berkeley.edu> cgroup/cpuset: rebind mm mempolicy to effective_mems, not mems_allowed Crystal Wood <crwood(a)redhat.com> tracing/osnoise: Call synchronize_rcu() when unregistering Tao Liu <ltao(a)redhat.com> riscv: Prevent NULL pointer dereference in machine_kexec_prepare() Michael Bommarito <michael.bommarito(a)gmail.com> drbd: reject data replies with an out-of-range payload size Daehyeon Ko <4ncienth(a)gmail.com> macsec: don't read an unset MAC header in macsec_encrypt() Yizhou Zhao <zhaoyz24(a)mails.tsinghua.edu.cn> ipvs: reset full ip_vs_seq structs in ip_vs_conn_new Yizhou Zhao <zhaoyz24(a)mails.tsinghua.edu.cn> ipvs: use parsed transport offset in SCTP state lookup Shuangpeng Bai <shuangpeng.kernel(a)gmail.com> llc: fix SAP refcount leak in llc_ui_autobind() Yousef Alhouseen <alhouseenyousef(a)gmail.com> mac802154: remove interfaces with RCU list deletion Gerald Schaefer <gerald.schaefer(a)linux.ibm.com> s390/monwriter: Reject buffer reuse with different data length Martin Kaiser <martin(a)kaiser.cx> riscv: probes: save original sp in rethook trampoline HyeongJun An <sammiee5311(a)gmail.com> hwmon: (asus_atk0110) Check package count before accessing element Maoyi Xie <maoyixie.tju(a)gmail.com> net: wwan: iosm: bound device offsets in the MUX downlink decoder Wentao Liang <vulab(a)iscas.ac.cn> ata: pata_pxa: Fix DMA channel leak on probe error Bryam Vargas <hexlabsecurity(a)proton.me> orangefs: keep the readdir entry size 64-bit in fill_from_part() Masami Hiramatsu (Google) <mhiramat(a)kernel.org> tracing/probes: Fix double addition of offset for @+FOFFSET Bryam Vargas <hexlabsecurity(a)proton.me> net/sched: sch_taprio: Replace direct dequeue call with peek and qdisc_dequeue_peeked Bryam Vargas <hexlabsecurity(a)proton.me> net/sched: sch_multiq: Replace direct dequeue call with peek and qdisc_dequeue_peeked Andrea Righi <arighi(a)nvidia.com> net: lan743x: Initialize eth_syslock spinlock before use Haoxiang Li <haoxiang_li2024(a)163.com> fsl/fman: Free init resources on KeyGen failure in fman_init() Runyu Xiao <runyu.xiao(a)seu.edu.cn> hwmon: (occ) unregister sysfs devices outside occ lock Haoxiang Li <haoxiang_li2024(a)163.com> net: liquidio: fix BAR resource leak on PF number failure Pengpeng Hou <pengpeng(a)iscas.ac.cn> hwmon: (w83793) remove vrm sysfs file on probe failure Pengpeng Hou <pengpeng(a)iscas.ac.cn> hwmon: (w83627hf) remove VID sysfs files on error and remove Conor Dooley <conor.dooley(a)microchip.com> rtc: mpfs: fix counter upload completion condition Abdun Nihaal <nihaal(a)cse.iitm.ac.in> bnx2x: fix potential memory leak in bnx2x_alloc_mem_bp() Sabrina Dubroca <sd(a)queasysnail.net> espintcp: use sk_msg_free_partial to fix partial send Hongchen Zhang <zhanghongchen(a)loongson.cn> LoongArch: Fix missing dirty page tracking in {pte,pmd}_wrprotect() Sven Eckelmann <sven(a)narfation.org> batman-adv: clean untagged VLAN on netdev registration failure Sven Eckelmann <sven(a)narfation.org> batman-adv: ensure minimal ethernet header on TX Sven Eckelmann <sven(a)narfation.org> batman-adv: retrieve ethhdr after potential skb realloc on RX Jamal Hadi Salim <jhs(a)mojatatu.com> net/sched: sch_teql: move rcu_read_lock()/spin_lock() from _bh variants Shitalkumar Gandhi <shital.gandhi45(a)gmail.com> ieee802154: ca8210: fix pointer truncation in kfifo on 64-bit Shitalkumar Gandhi <shital.gandhi45(a)gmail.com> ieee802154: ca8210: fix cas_ctl leak on spi_async failure Michael Bommarito <michael.bommarito(a)gmail.com> ieee802154: allow legacy LLSEC ADD/DEL ops to pass strict validation Michael Bommarito <michael.bommarito(a)gmail.com> ieee802154: admin-gate legacy LLSEC dump operations Maoyi Xie <maoyixie.tju(a)gmail.com> net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink Maoyi Xie <maoyixie.tju(a)gmail.com> net: ipip: require CAP_NET_ADMIN in the device netns for changelink Maoyi Xie <maoyixie.tju(a)gmail.com> net: ip_vti: require CAP_NET_ADMIN in the device netns for changelink Maoyi Xie <maoyixie.tju(a)gmail.com> net: ip6_vti: require CAP_NET_ADMIN in the device netns for changelink Dawei Feng <dawei.feng(a)seu.edu.cn> net: ena: clean up XDP TX queues when regular TX setup fails Zihan Xi <xizh2024(a)lzu.edu.cn> net/sched: act_ct: preserve tc_skb_cb across defragmentation Haoxiang Li <haoxiang_li2024(a)163.com> net: ixp4xx_hss: fix duplicate HDLC netdev allocation Haoxiang Li <haoxiang_li2024(a)163.com> net: wwan: t7xx: destroy DMA pool on CLDMA late init failure Maoyi Xie <maoyixie.tju(a)gmail.com> net: sit: require CAP_NET_ADMIN in the device netns for changelink Andreas Kemnade <andreas(a)kemnade.info> gpios: palmas: add .get_direction() op Paul Louvel <paul.louvel(a)bootlin.com> gpio-f7188x: Add support for NCT6126D version B Bradley Morgan <include(a)grrlz.net> cpu: hotplug: Bound hotplug states sysfs output Bradley Morgan <include(a)grrlz.net> cpu: hotplug: Preserve per instance callback errors Zhan Xusheng <zhanxusheng1024(a)gmail.com> posix-cpu-timers: Use u64 multiplication in update_rlimit_cpu() Doruk Tan Ozturk <doruk(a)0sec.ai> net/mlx5e: macsec: fix use-after-free of metadata_dst on RX SC delete Dmitry Torokhov <dmitry.torokhov(a)gmail.com> Input: ims-pcu - fix type confusion in CDC union descriptor parsing Dmitry Torokhov <dmitry.torokhov(a)gmail.com> Input: ims-pcu - fix race condition in reset_device sysfs callback Dmitry Torokhov <dmitry.torokhov(a)gmail.com> Input: ims-pcu - fix potential infinite loop in CDC union descriptor parsing Dmitry Torokhov <dmitry.torokhov(a)gmail.com> Input: ims-pcu - fix out-of-bounds read in ims_pcu_irq() debug logging Dmitry Torokhov <dmitry.torokhov(a)gmail.com> Input: ims-pcu - fix DMA mapping violation in line setup Dmitry Torokhov <dmitry.torokhov(a)gmail.com> Input: ims-pcu - add response length checks Dmitry Torokhov <dmitry.torokhov(a)gmail.com> Input: ims-pcu - validate control endpoint type Dmitry Torokhov <dmitry.torokhov(a)gmail.com> Input: ims-pcu - release data interface on disconnect Dmitry Torokhov <dmitry.torokhov(a)gmail.com> Input: ims-pcu - fix use-after-free and double-free in disconnect Haoxiang Li <haoxiang_li2024(a)163.com> scsi: elx: efct: Fix I/O leak on unsupported additional CDB WenTao Liang <vulab(a)iscas.ac.cn> scsi: elx: efct: Fix refcount leak in efct_hw_io_abort() Bryam Vargas <hexlabsecurity(a)proton.me> scsi: target: core: Fix iSCSI ISID use-after-free in REGISTER AND MOVE Bryam Vargas <hexlabsecurity(a)proton.me> scsi: target: Bound PR-OUT TransportID parsing to the received buffer Michael Bommarito <michael.bommarito(a)gmail.com> scsi: xen: scsiback: Free unsubmitted command instead of double-putting it Michael Bommarito <michael.bommarito(a)gmail.com> scsi: xen: scsiback: Free the command tag on the TMR submit-failure path Xu Rao <raoxu(a)uniontech.com> scsi: sg: Report request-table problems when any status is set Abdun Nihaal <nihaal(a)cse.iitm.ac.in> scsi: lpfc: Fix memory leak in lpfc_sli4_driver_resource_setup() Haoxiang Li <haoxiang_li2024(a)163.com> scsi: hpsa: Fix DMA mapping leak on IOACCEL2 reset path Mikulas Patocka <mpatocka(a)redhat.com> dm-verity: increase sprintf buffer size Mikulas Patocka <mpatocka(a)redhat.com> dm-verity: fix a possible NULL pointer dereference Mikulas Patocka <mpatocka(a)redhat.com> dm-integrity: don't increment hash_offset twice Mikulas Patocka <mpatocka(a)redhat.com> dm_early_create: fix freeing used table on dm_resume failure Mikulas Patocka <mpatocka(a)redhat.com> dm-stats: fix merge accounting Mikulas Patocka <mpatocka(a)redhat.com> dm-stats: fix dm_jiffies_to_msec64 Benjamin Marzinski <bmarzins(a)redhat.com> dm-log: fix a bitset_size overflow on 32bit machines Mikulas Patocka <mpatocka(a)redhat.com> dm-ioctl: fix a possible overflow in list_version_get_info Mikulas Patocka <mpatocka(a)redhat.com> dm-bufio: fix wrong count calculation in dm_bufio_issue_discard Samuel Moelius <sam.moelius(a)trailofbits.com> dm era: fix out-of-bounds memory access for non-zero start sector Ming-Hung Tsai <mtsai(a)redhat.com> dm thin metadata: fix metadata snapshot consistency on commit failure Genjian Zhang <zhanggenjian(a)kylinos.cn> dm thin metadata: fix superblock refcount leak on snapshot shadow failure Haoxiang Li <haoxiang_li2024(a)163.com> net: sparx5: unregister blocking notifier on init failure Jiri Olsa <jolsa(a)kernel.org> bpf: Add missing access_ok call to copy_user_syms Jann Horn <jannh(a)google.com> bpf,fork: wipe ->bpf_storage before bailouts that access it Oliver Hartkopp <socketcan(a)hartkopp.net> can: bcm: add missing rcu list annotations and operations Oliver Hartkopp <socketcan(a)hartkopp.net> can: bcm: fix lockless bound/ifindex race and silent RX_SETUP failure Lee Jones <lee(a)kernel.org> can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF Oliver Hartkopp <socketcan(a)hartkopp.net> can: isotp: use unconditional synchronize_rcu() in isotp_release() Fan Wu <fanwu01(a)zju.edu.cn> can: esd_usb: kill anchored URBs before freeing netdevs Bryam Vargas <hexlabsecurity(a)proton.me> nvmet-rdma: handle inline data with a nonzero offset Weiming Shi <bestswngs(a)gmail.com> sctp: validate STALE_COOKIE cause length before reading staleness Kunihiko Hayashi <hayashi.kunihiko(a)socionext.com> spi: uniphier: Fix completion initialization order before devm_request_irq() Wang Yan <wangyan01(a)kylinos.cn> time: Fix off-by-one in compat settimeofday() usec validation Jaewon Yang <yong010301(a)gmail.com> tpm: Make the TPM character devices non-seekable Thorsten Blum <thorsten.blum(a)linux.dev> tpm: fix event_size output in tpm1_binary_bios_measurements_show Maoyi Xie <maoyixie.tju(a)gmail.com> xfrm: xfrm_interface: require CAP_NET_ADMIN in the device netns for changelink Sanman Pradhan <psanman(a)juniper.net> xfrm: use compat translator only for u64 alignment mismatch Wentao Liang <vulab(a)iscas.ac.cn> xen/gntdev: fix error handling in ioctl Paul Greenwalt <paul.greenwalt(a)intel.com> ice: fix ice_init_link() error return preventing probe Xuanqiang Luo <luoxuanqiang(a)kylinos.cn> i2c: mlxbf: Fix use-after-free in mlxbf_i2c_init_resource() Roman Vivchar <rva333(a)protonmail.com> i2c: mediatek: fix WRRD for SoCs without auto_restart option Joshua Crofts <joshua.crofts1(a)gmail.com> hwmon: (ltc2992) add missing 'select REGMAP_I2C' to Kconfig Ibrahim Hashimov <security(a)auditcode.ai> ksmbd: fix integer overflow in set_file_allocation_info() Fredric Cover <fredric.cover.lkernel(a)gmail.com> smb: client: use kvzalloc() for megabyte buffer in simple fallocate Daniel Gibson <daniel(a)gibson.sh> platform/x86/amd/pmc: Add delay_suspend module parameter Daniel Gibson <daniel(a)gibson.sh> platform/x86/amd/pmc: Delay suspend for some Lenovo Laptops Daniel Gibson <daniel(a)gibson.sh> platform/x86/amd/pmc: Check for intermediate wakeup in function Frank Li <Frank.Li(a)nxp.com> dmaengine: dw-edma: Add spinlock to protect DONE_INT_MASK and ABORT_INT_MASK Kartik Rajput <kkartik(a)nvidia.com> dmaengine: tegra: Fix burst size calculation Jarkko Sakkinen <jarkko(a)kernel.org> tpm: tpm_tis_spi: Use wait_woken() in wait_for_tmp_stat() Bhargav Joshi <j.bhargav.u(a)gmail.com> irqchip/crossbar: Use correct index in crossbar_domain_free() Florian Fuchs <fuchsfl(a)gmail.com> mtd: maps: vmu-flash: fix NULL pointer dereference in initialization Miquel Raynal <miquel.raynal(a)bootlin.com> mtd: spi-nor: swp: Improve locking user experience Sebastian Alba Vives <sebasjosue84(a)gmail.com> fpga: microchip-spi: fix zero header_size OOB read in mpf_ops_parse_header() Maoyi Xie <maoyixie.tju(a)gmail.com> net: thunderbolt: Fix frags[] overflow by bounding frame_count Manivannan Sadhasivam <manivannan.sadhasivam(a)oss.qualcomm.com> bus: mhi: ep: Protect mhi_ep_handle_syserr() in the error path Sebastian Alba Vives <sebasjosue84(a)gmail.com> fpga: dfl: add bounds check in dfh_get_param_size() Michael Bommarito <michael.bommarito(a)gmail.com> ocfs2: reject non-inline dinodes with i_size and zero i_clusters Michael Bommarito <michael.bommarito(a)gmail.com> ocfs2: reject dinodes whose i_rdev disagrees with the file type Michael Bommarito <michael.bommarito(a)gmail.com> ocfs2: reject dinodes with non-canonical i_mode type Joseph Qi <joseph.qi(a)linux.alibaba.com> ocfs2: add journal NULL check in ocfs2_checkpoint_inode() Ian Bridges <icb(a)fastmail.org> ocfs2: fix NULL h_transaction deref in ocfs2_assure_trans_credits Kyle Zeng <kylebot(a)openai.com> ocfs2: avoid moving extents to occupied clusters Arseniy Krasnov <avkrasnov(a)rulkc.org> mtd: rawnand: fix condition in 'nand_select_target()' Vasiliy Kovalev <kovalev(a)altlinux.org> net/9p: fix infinite loop in p9_client_rpc on fatal signal Bastien Curutchet <bastien.curutchet(a)bootlin.com> mtd: rawnand: pl353: fix probe resource allocation Tristan Madani <tristan(a)talencesecurity.com> ocfs2: use kzalloc for quota recovery bitmap allocation Ionut Nechita <ionut.nechita(a)windriver.com> scsi: sas: Skip opt_sectors when DMA reports no real optimization hint Martin Wilck <martin.wilck(a)suse.com> scsi: smartpqi: Use shost_to_hba() in pqi_scan_finished() Breno Leitao <leitao(a)debian.org> 9p: skip nlink update in cacheless mode to fix WARN_ON Ruoyu Wang <ruoyuw560(a)gmail.com> mtd: slram: remove failed entries from the device list Muchun Song <muchun.song(a)linux.dev> mm/mm_init: fix uninitialized struct pages for ZONE_DEVICE Krzysztof Wilczyński <kwilczynski(a)kernel.org> proc: only bump parent nlink when registering directories SeongJae Park <sj(a)kernel.org> mm/damon/sysfs-schemes: put stats for scheme_add_dirs() internal error SeongJae Park <sj(a)kernel.org> mm/damon/sysfs-schemes: fix dir put orders in access_pattern_add_dirs() Zishun Yi <vulab(a)iscas.ac.cn> riscv: cacheinfo: Fix node reference leak in populate_cache_leaves Aaron Tomlin <atomlin(a)atomlin.com> mips: sched: Fix CPUMASK_OFFSTACK memory corruption WenTao Liang <vulab(a)iscas.ac.cn> power: supply: charger-manager: fix refcount leak in is_full_charged() Tristan Madani <tristan(a)talencesecurity.com> ntfs3: fix out-of-bounds read in decompress_lznt Michael Bommarito <michael.bommarito(a)gmail.com> ntfs3: validate split-point offset in indx_insert_into_buffer Michael Bommarito <michael.bommarito(a)gmail.com> ntfs3: bound to_move in indx_insert_into_root before hdr_insert_head Michael Bommarito <michael.bommarito(a)gmail.com> ntfs3: cap RESTART_TABLE free-chain walker at rt->used Michael Bommarito <michael.bommarito(a)gmail.com> fs/ntfs3: bound NTFS_DE view.data_off in UpdateRecordData{Root,Allocation} Michael Bommarito <michael.bommarito(a)gmail.com> fs/ntfs3: add depth limit to indx_find_buffer to prevent stack overflow Konstantin Komarov <almaz.alexandrovich(a)paragon-software.com> fs/ntfs3: validate lcns_follow in log_replay conversion Konstantin Komarov <almaz.alexandrovich(a)paragon-software.com> fs/ntfs3: bound attr_off in UpdateResidentValue against data_off Michael Bommarito <michael.bommarito(a)gmail.com> fs/ntfs3: bound copy_lcns dp->page_lcns[] index in analysis pass Konstantin Komarov <almaz.alexandrovich(a)paragon-software.com> fs/ntfs3: bound DeleteIndexEntryAllocation memmove length Zhan Xusheng <zhanxusheng1024(a)gmail.com> fs/ntfs3: fix syncing wrong inode on DIRSYNC cross-directory rename SeongJae Park <sj(a)kernel.org> mm/damon/core: make charge_addr_from aware of end-address exclusivity Ma Ke <make24(a)iscas.ac.cn> power: supply: cpcap-battery: Fix missing nvmem_device_put() causing reference leak Maciej W. Rozycki <macro(a)orcam.me.uk> MIPS: DEC: Ensure 32-bit stack location for o32 prom_printf() Johan Hovold <johan(a)kernel.org> MIPS: ip22-gio: fix device reference leak in probe Johan Hovold <johan(a)kernel.org> MIPS: ip22-gio: fix kfree() of static object Johan Hovold <johan(a)kernel.org> MIPS: ip22-gio: fix gio device memory leak Wasim Nazir <wasim.nazir(a)oss.qualcomm.com> remoteproc: qcom: Fix leak when custom dump_segments addition fails Chuck Lever <chuck.lever(a)oracle.com> SUNRPC: Bound-check xdr_buf_to_bvec() stores before writing Chuck Lever <chuck.lever(a)oracle.com> lockd: Plug nlm_file refcount leak on cached nlm_do_fopen() failure Chuck Lever <chuck.lever(a)oracle.com> lockd: Plug nlm_file leak when nlm_do_fopen() fails Chuck Lever <chuck.lever(a)oracle.com> sunrpc: wait for in-flight TLS handshake callback when cancel loses race Chris Mason <clm(a)meta.com> sunrpc: pin svc_xprt across the asynchronous TLS handshake callback Abdun Nihaal <nihaal(a)cse.iitm.ac.in> nvdimm/btt: Free arena sub-allocations on discover_arenas() error path Abdun Nihaal <nihaal(a)cse.iitm.ac.in> nvdimm/btt: Free arenas on btt_init() error paths Junrui Luo <moonafterrain(a)outlook.com> jbd2: fix integer underflow in jbd2_journal_initialize_fast_commit() Pauli Virtanen <pav(a)iki.fi> Bluetooth: SCO: hold sk properly in sco_conn_ready Pauli Virtanen <pav(a)iki.fi> Bluetooth: SCO: fix sleeping under spinlock in sco_conn_ready Benoît Sevens <bsevens(a)google.com> HID: playstation: validate num_touch_reports in DualShock 4 reports Bartosz Golaszewski <bartosz.golaszewski(a)oss.qualcomm.com> mfd: tps6586x: Fix OF node refcount Shyam Prasad N <sprasad(a)microsoft.com> cifs: invalidate cfid on unlink/rename/rmdir Sven Eckelmann <sven(a)narfation.org> batman-adv: tt: prevent TVLV OOB check overflow Sven Eckelmann <sven(a)narfation.org> batman-adv: frag: fix primary_if leak on failed linearization Sven Eckelmann <sven(a)narfation.org> batman-adv: frag: free unfragmentable packet Sven Eckelmann <sven(a)narfation.org> batman-adv: fix VLAN priority offset Sven Eckelmann <sven(a)narfation.org> batman-adv: tt: avoid request storms during pending request Sven Eckelmann <sven(a)narfation.org> batman-adv: dat: fix tie-break for candidate selection Sven Eckelmann <sven(a)narfation.org> batman-adv: dat: ensure accessible eth_hdr proto field Sven Eckelmann <sven(a)narfation.org> batman-adv: bla: reacquire gw address after skb realloc Sven Eckelmann <sven(a)narfation.org> batman-adv: dat: acquire ARP hw source only after skb realloc Sven Eckelmann <sven(a)narfation.org> batman-adv: access unicast_ttvn skb->data only after skb realloc Sven Eckelmann <sven(a)narfation.org> batman-adv: gw: acquire ethernet header only after skb realloc Sumanth Korikkar <sumanthk(a)linux.ibm.com> s390/perf_cpum_cf: Add missing array_index_nospec() to __hw_perf_event_init() Sandipan Das <sandipan.das(a)amd.com> perf/x86/amd/lbr: Fix kernel address leakage Thorsten Blum <thorsten.blum(a)linux.dev> x86/boot: Reject too long acpi_rsdp= values Thorsten Blum <thorsten.blum(a)linux.dev> x86/boot: Validate console=uart8250 baud rate to fix early boot hang Ali Ahmet MEMIS <dev(a)unknownbbqr.xyz> tools/power/x86/intel-speed-select: Harden daemon pidfile open Guangshuo Li <lgs201920130244(a)gmail.com> mfd: sm501: Fix reference leak on failed device registration Armin Wolf <W_Armin(a)gmx.de> leds: uleds: Fix potential buffer overread Ondrej Mosnacek <omosnace(a)redhat.com> selinux: fix incorrect execmem checks on overlayfs Stephen Smalley <stephen.smalley.work(a)gmail.com> selinux: check connect-related permissions on TCP Fast Open Wang Jun <1742789905(a)qq.com> soc: fsl: qe: panic on ioremap() failure in qe_reset() Siddharth Vadapalli <s-vadapalli(a)ti.com> soc: ti: k3-ringacc: Fix access mode for k3_ringacc_ring_pop_tail_io/proxy Guangshuo Li <lgs201920130244(a)gmail.com> gpu: host1x: Fix device reference leak in host1x_device_parse_dt() error path Xiang Mei (Microsoft) <xmei5(a)asu.edu> netfilter: bridge: fix stale prevhdr pointer in br_ip6_fragment() Wyatt Feng <bronzed_45_vested(a)icloud.com> netfilter: xt_nat: reject unsupported target families Yizhou Zhao <zhaoyz24(a)mails.tsinghua.edu.cn> netfilter: ecache: fix inverted time_after() check Yizhou Zhao <zhaoyz24(a)mails.tsinghua.edu.cn> netfilter: nf_conncount: fix zone comparison in tuple dedup Xiang Mei <xmei5(a)asu.edu> netfilter: nf_conntrack_reasm: guard mac_header adjustment after IPv6 defrag Florian Westphal <fw(a)strlen.de> netfilter: nf_nat_sip: reload possible stale data pointer Haoze Xie <royenheart(a)gmail.com> netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst Wyatt Feng <bronzed_45_vested(a)icloud.com> netfilter: xt_cluster: reject template conntracks in hash match David Carlier <devnexen(a)gmail.com> netfilter: nfnl_cthelper: apply per-class values when updating policies Muhammad Bilal <meatuni001(a)gmail.com> netfilter: nf_conntrack_irc: fix parse_dcc() off-by-one OOB read Srinivas Kandagatla <srinivas.kandagatla(a)oss.qualcomm.com> ASoC: qcom: q6apm: fix NULL pointer dereference in graph_callback Cássio Gabriel <cassiogabrielcontato(a)gmail.com> ASoC: mediatek: mt8183: Release reserved memory on cleanup Cássio Gabriel <cassiogabrielcontato(a)gmail.com> ASoC: mediatek: mt8192: Release reserved memory on cleanup Peter Ujfalusi <peter.ujfalusi(a)linux.intel.com> ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control Peter Ujfalusi <peter.ujfalusi(a)linux.intel.com> ASoC: SOF: ipc3-control: Fix heap overflow in bytes_ext put/get Abdun Nihaal <nihaal(a)cse.iitm.ac.in> fbdev: tridentfb: fix potential memory leak in trident_pci_probe() Abdun Nihaal <nihaal(a)cse.iitm.ac.in> fbdev: nvidia: fix potential memory leak in nvidiafb_probe() Abdun Nihaal <nihaal(a)cse.iitm.ac.in> fbdev: vesafb: fix memory leak in vesafb_probe() Abdun Nihaal <nihaal(a)cse.iitm.ac.in> fbdev: carminefb: fix potential memory leak in alloc_carmine_fb() Abdun Nihaal <nihaal(a)cse.iitm.ac.in> fbdev: tdfxfb: fix potential memory leak in tdfxfb_probe() Abdun Nihaal <nihaal(a)cse.iitm.ac.in> fbdev: uvesafb: fix potential memory leak in uvesafb_probe() Abdun Nihaal <nihaal(a)cse.iitm.ac.in> fbdev: s3fb: fix potential memory leak in s3_pci_probe() Abdun Nihaal <nihaal(a)cse.iitm.ac.in> fbdev: i740fb: fix potential memory leak in i740fb_probe() Abdun Nihaal <nihaal(a)cse.iitm.ac.in> fbdev: radeon: fix potential memory leak in radeonfb_pci_register() Li RongQing <lirongqing(a)baidu.com> fbdev: sm712: Fix operator precedence in big_swap macro Abdun Nihaal <nihaal(a)cse.iitm.ac.in> fbdev: hecubafb: fix potential memory leak in hecubafb_probe() Abdun Nihaal <nihaal(a)cse.iitm.ac.in> fbdev: broadsheetfb: fix potential memory leak in broadsheetfb_probe() Abdun Nihaal <nihaal(a)cse.iitm.ac.in> fbdev: metronomefb: fix potential memory leak in metronomefb_probe() Sean Christopherson <seanjc(a)google.com> KVM: x86: Ignore pending PV EOI if the vCPU has since disabled PV EOIs Matthew Rosato <mjrosato(a)linux.ibm.com> KVM: s390: pci: Fix handling of AIF enable without AISB Hyunwoo Kim <imv4bel(a)gmail.com> KVM: arm64: vgic: Check the interrupt is still ours before migrating it Haoxiang Li <haoxiang_li2024(a)163.com> KVM: s390: pci: Fix GISC refcount leak on AIF enable failure Nickolay Goppen <setotau(a)mainlining.org> arm64: dts: qcom: sdm630: describe adsp_mem region properly Mark Rutland <mark.rutland(a)arm.com> arm64: fpsimd: Fix type mismatch in sve_{save,load}_state() Yong Wang <edragain(a)163.com> net: ife: require ETH_HLEN to be pullable in ife_decode() Zhengchuan Liang <zcliangcn(a)gmail.com> net: atm: reject out-of-range traffic classes in QoS validation Michael Bommarito <michael.bommarito(a)gmail.com> net: qrtr: fix 32-bit integer overflow in qrtr_endpoint_post() Cássio Gabriel <cassiogabrielcontato(a)gmail.com> ASoC: SOF: topology: validate vendor array size before parsing Peter Ujfalusi <peter.ujfalusi(a)linux.intel.com> ASoC: SOF: ipc3-control: Fix TOCTOU in bytes_put and bytes_get Peter Ujfalusi <peter.ujfalusi(a)linux.intel.com> ASoC: SOF: ipc3-control: Use overflow checks in control_update size calc Peter Ujfalusi <peter.ujfalusi(a)linux.intel.com> ASoC: SOF: ipc4-control: Fix TOCTOU in sof_ipc4_bytes_put Zhang Tianci <zhangtianci.1997(a)bytedance.com> vduse: Fix race in vduse_dev_msg_sync and vduse_dev_read_iter Wentao Liang <vulab(a)iscas.ac.cn> mlxsw: fix refcount leak in mlxsw_sp_vrs_lpm_tree_replace() Wentao Liang <vulab(a)iscas.ac.cn> mlxsw: fix refcount leak in mlxsw_sp_port_lag_join() Guangshuo Li <lgs201920130244(a)gmail.com> smb: client: fix overflow in passthrough ioctl bounds check Harman Kalra <hkalra(a)marvell.com> octeontx2-af: fix VF bringup affecting PF promiscuous state Li RongQing <lirongqing(a)baidu.com> net/mlx5: Fix L3 tunnel entropy refcount leak Wang Yan <wangyan01(a)kylinos.cn> selftests/net: fix EVP_MD_CTX leak in tcp_mmap Timur Tabi <ttabi(a)nvidia.com> regulator: core: regulator_lock_two() should test for EDEADLK not EDEADLOCK Cao Guanghui <caoguanghui(a)kylinos.cn> dm era: fix NULL pointer dereference in metadata_open() Chuck Lever <chuck.lever(a)oracle.com> SUNRPC: pin upper rpc_clnt across the TLS connect_worker Chuck Lever <chuck.lever(a)oracle.com> SUNRPC: release lower rpc_clnt if killed waiting for XPRT_LOCKED Guangshuo Li <lgs201920130244(a)gmail.com> cifs: validate DFS referral string offsets Rongguang Wei <weirongguang(a)kylinos.cn> s390/zcrypt: Remove the empty file Julian Anastasov <ja(a)ssi.bg> ipvs: ensure inner headers in ICMP errors are in headroom Yizhou Zhao <zhaoyz24(a)mails.tsinghua.edu.cn> ipvs: fix PMTU for GUE/GRE tunnel ICMP errors Yizhou Zhao <zhaoyz24(a)mails.tsinghua.edu.cn> ipvs: use parsed transport offset in TCP state lookup Yizhou Zhao <zhaoyz24(a)mails.tsinghua.edu.cn> ipvs: pass parsed transport offset to state handlers Eric Dumazet <edumazet(a)google.com> ipv6: mcast: Fix potential UAF in MLD delayed work Kuniyuki Iwashima <kuniyu(a)google.com> ipv6: mcast: Replace locking comments with lockdep annotations. Eric Dumazet <edumazet(a)google.com> ipv4: igmp: Fix potential UAF in igmp_gq_start_timer() Suman Ghosh <sumang(a)marvell.com> octeontx2-pf: check DMAC extraction support before filtering Samuel Moelius <sam.moelius(a)trailofbits.com> net/sched: cake: reject overhead values that underflow length Enrico Pozzobon <enrico.pozzobon(a)dissecto.com> net: usb: lan78xx: disable VLAN filter in promiscuous mode Oleksij Rempel <o.rempel(a)pengutronix.de> net: usb: lan78xx: move functions to avoid forward definitions Chuck Lever <cel(a)kernel.org> net/tls: Consume empty data records in tls_sw_read_sock() Hui Wang <hui.wang(a)canonical.com> ring-buffer: Fix event length with forced 8-byte alignment Weiming Shi <bestswngs(a)gmail.com> Bluetooth: bpa10x: avoid OOB read of revision string in bpa10x_setup() Pauli Virtanen <pav(a)iki.fi> Bluetooth: ISO: exclude RFU bits from ISO_SDU_Length Cen Zhang <zzzccc427(a)gmail.com> Bluetooth: MGMT: Fix adv monitor add failure cleanup Cen Zhang <zzzccc427(a)gmail.com> Bluetooth: 6lowpan: hold L2CAP conn across debugfs control Eric Dumazet <edumazet(a)google.com> amt: fix size calculation in amt_get_size() Xiang Mei <xmei5(a)asu.edu> net/smc: fix UAF in smc_cdc_rx_handler() by pinning the socket Jamal Hadi Salim <jhs(a)mojatatu.com> net/sched: act_pedit: fix TOCTOU heap OOB write in tc offload Xiang Mei <xmei5(a)asu.edu> net: qualcomm: rmnet: validate MAP frame length before ingress parsing Shigeru Yoshida <syoshida(a)redhat.com> qede: fix off-by-one in BD ring consumption on build_skb failure Jens Emil Schulz Østergaard <jensemil.schulzostergaard(a)microchip.com> net: microchip: vcap: fix races on the shared Super VCAP block Feng Liu <feliu(a)nvidia.com> net/mlx5e: Fix HV VHCA stats agent registration race Feng Liu <feliu(a)nvidia.com> net/mlx5e: Fix HV VHCA stats zero-sized buffer allocation Wyatt Feng <bronzed_45_vested(a)icloud.com> netfilter: xt_connmark: reject invalid shift parameters Zhixing Chen <running910(a)gmail.com> netfilter: ip6tables: mark malformed IPv6 extension headers for hotdrop Feng Wu <wufengwufengwufeng(a)gmail.com> netfilter: xt_rateest: fix u64 truncation in xt_rateest_mt() Wyatt Feng <bronzed_45_vested(a)icloud.com> netfilter: xt_u32: reject invalid shift counts Qihang <q.h.hack.winter(a)gmail.com> gue: validate REMCSUM private option length Xiang Mei <xmei5(a)asu.edu> net: usb: net1080: validate packet_len before pad-byte access in rx_fixup Yiyang Chen <chenyy23(a)mails.tsinghua.edu.cn> selftests/hid: Cover hid_bpf_get_data() size overflow Benjamin Tissoires <bentiss(a)kernel.org> selftests/hid: convert the hid_bpf selftests with struct_ops Benjamin Tissoires <bentiss(a)kernel.org> selftests/hid: force using our compiled libbpf headers Benjamin Tissoires <bentiss(a)kernel.org> selftests/hid: do not manually call headers_install Benjamin Tissoires <bentiss(a)kernel.org> selftests/hid: ensure we can compile the tests on kernels pre-6.3 Anshuman Khandual <anshuman.khandual(a)arm.com> arm64/mm: Optimize TLB flush in unmap_hotplug_[pmd|pud]_range() Ryan Roberts <ryan.roberts(a)arm.com> arm64/mm: convert ptep_clear() to ptep_get_and_clear() Ryan Roberts <ryan.roberts(a)arm.com> arm64/mm: convert set_pte_at() to set_ptes(..., 1) Ryan Roberts <ryan.roberts(a)arm.com> arm64/mm: convert READ_ONCE(*ptep) to ptep_get(ptep) Lee Jones <lee(a)kernel.org> HID: core: Fix OOB read in hid_get_report for numbered reports Georgiy Osokin <g.osokin(a)auroraos.dev> HID: picolcd: prevent NULL pointer dereference in picolcd_send_and_wait() Myeonghun Pak <mhun512(a)gmail.com> ata: sata_gemini: unwind clocks on IDE pinctrl errors Michael Bommarito <michael.bommarito(a)gmail.com> minix: avoid overflow in bitmap block count calculation David Howells <dhowells(a)redhat.com> afs: Fix unchecked-length string display in debug statement David Howells <dhowells(a)redhat.com> afs: Fix the volume AFS_VOLUME_RM_TREE is set on David Howells <dhowells(a)redhat.com> afs: Fix vllist leak David Howells <dhowells(a)redhat.com> afs: Fix callback service message parsers to pass through -EAGAIN Zilin Guan <zilin(a)seu.edu.cn> afs: use kvfree() to free memory allocated by kvcalloc() Dan Carpenter <error27(a)gmail.com> afs: Fix error code in afs_extract_vl_addrs() Christian Brauner <brauner(a)kernel.org> fs: refuse O_TMPFILE creation with an unmapped fsuid or fsgid Samuel Moelius <sam.moelius(a)trailofbits.com> net/sched: hhf: clear heavy-hitter state on reset Viacheslav Bocharov <v(a)baodeep.com> pinctrl: meson: restore non-sleeping GPIO access Vladimir Zapolskiy <vz(a)kernel.org> gpio: timberdale: Return -ENOMEM on dynamic memory allocation in probe Gil Portnoy <dddhkts1(a)gmail.com> ksmbd: fix use-after-free of fp->owner.name in durable handle owner check ZhangGuoDong <zhangguodong(a)kylinos.cn> smb: move some duplicate definitions to common/cifsglob.h Haofeng Li <lihaofeng(a)kylinos.cn> ksmbd: reject undersized DACLs before parsing ACEs Sechang Lim <rhkrqnwk98(a)gmail.com> net/sched: act_bpf: use rcu_dereference_bh() to read the filter Gleb Markov <markov.gi(a)npc-ksb.ru> cxgb4: Fix decode strings dump for T6 adapters Longjun Tang <tanglongjun(a)kylinos.cn> virtio_net: disable cb when NAPI is busy-polled Qingshuang Fu <fuqingshuang(a)kylinos.cn> irqchip/ts4800: Fix missing chained handler cleanup on remove Yuho Choi <dbgh9129(a)gmail.com> irqchip/gic-v3-its: Fix OF node reference leak Martin Kaiser <martin(a)kaiser.cx> tracing: eprobe: read the complete FILTER_PTR_STRING pointer Masami Hiramatsu (Google) <mhiramat(a)kernel.org> tracing/events: Fix to check the simple_tsk_fn creation Ido Schimmel <idosch(a)nvidia.com> bridge: stp: Fix a potential use-after-free when deleting a bridge Jamal Hadi Salim <jhs(a)mojatatu.com> net/sched: sch_teql: Introduce slaves_lock to avoid race condition and UAF Rosen Penev <rosenp(a)gmail.com> net: gianfar: dispose irq mappings on probe failure and device removal Petr Wozniak <petr.wozniak(a)gmail.com> net: phy: sfp: free mii_bus in sfp_i2c_mdiobus_destroy Xiang Mei <xmei5(a)asu.edu> usbnet: gl620a: fix out-of-bounds read in genelink_rx_fixup() Guenter Roeck <linux(a)roeck-us.net> hwmon: (pmbus) Fix passing events to regulator core Matti Vaittinen <mazziesaccount(a)gmail.com> hwmon: adm1275: Prevent reading uninitialized stack Maciej W. Rozycki <macro(a)orcam.me.uk> MIPS: DEC: Ensure RTC platform device deregistration upon failure Yousef Alhouseen <alhouseenyousef(a)gmail.com> sctp: fix SCTP_RESET_STREAMS stream list length limit Wei Fang <wei.fang(a)nxp.com> net: enetc: check the number of BDs needed for xdp_frame Matvey Kovalev <matvey.kovalev(a)ispras.ru> qede: fix out-of-bounds check for cqe->len_list[] Nuoqi Gui <gnq25(a)mails.tsinghua.edu.cn> seg6: validate SRH length before reading fixed fields Pengpeng Hou <pengpeng(a)iscas.ac.cn> gpio: htc-egpio: use managed gpiochip registration Pengpeng Hou <pengpeng(a)iscas.ac.cn> gpio: mvebu: fail probe if gpiochip registration fails Pengpeng Hou <pengpeng(a)iscas.ac.cn> spi: sh-msiof: abort transfers when reset times out Martin Kaiser <martin(a)kaiser.cx> tracing: probes: fix typo in a log message Rob Herring (Arm) <robh(a)kernel.org> dt-bindings: net: renesas,ether: Drop example "ethernet-phy-ieee802.3-c22" fallback Shengjiu Wang <shengjiu.wang(a)nxp.com> ASoC: fsl_asrc_dma: fix eDMA maxburst misalignment with channel count Shitalkumar Gandhi <shital.gandhi45(a)gmail.com> net: ethernet: sunplus: spl2sw: fix phy_node refcount leak in remove Ruoyu Wang <ruoyuw560(a)gmail.com> net: sungem: fix probe error cleanup Yun Zhou <yun.zhou(a)windriver.com> net: mvneta: re-enable percpu interrupt on resume Haoxiang Li <haoxiang_li2024(a)163.com> rtc: cmos: unregister HPET IRQ handler on probe failure Fredrik M Olsson <fredrik.m.olsson(a)axis.com> rtc: ds1307: Fix off-by-one issue with wday for rx8130 Huiwen He <hehuiwen(a)kylinos.cn> smb/client: preserve errors from smb2_set_sparse() Fernando Fernandez Mancera <fmancera(a)suse.de> ipv6: fix error handling in disable_policy sysctl Fernando Fernandez Mancera <fmancera(a)suse.de> ipv6: fix error handling in forwarding sysctl Fernando Fernandez Mancera <fmancera(a)suse.de> ipv6: fix error handling in ignore_routes_with_linkdown sysctl Fernando Fernandez Mancera <fmancera(a)suse.de> ipv6: fix error handling in disable_ipv6 sysctl Jamal Hadi Salim <jhs(a)mojatatu.com> net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle Eric Dumazet <edumazet(a)google.com> veth: fix NAPI leak in XDP enable error path Aleksandrova Alyona <aga(a)itb.spb.ru> net: dsa: sja1105: round up PTP perout pin duration Xiang Mei <xmei5(a)asu.edu> net, bpf: check master for NULL in xdp_master_redirect() Krzysztof Wilczyński <kwilczynski(a)kernel.org> alpha/PCI: Fix __pci_mmap_fits() overflow for zero-length BARs Krzysztof Wilczyński <kwilczynski(a)kernel.org> alpha/PCI: Add security_locked_down() check to pci_mmap_resource() Koichiro Den <den(a)valinux.co.jp> NTB: epf: Fix doorbell bitmask and IRQ vector handling Koichiro Den <den(a)valinux.co.jp> NTB: epf: Report 0-based doorbell vector via ntb_db_event() Koichiro Den <den(a)valinux.co.jp> NTB: epf: Make db_valid_mask cover only real doorbell bits Florian Westphal <fw(a)strlen.de> netfilter: nft_compat: ebtables emulation must reject non-bridge targets Runyu Xiao <runyu.xiao(a)seu.edu.cn> netfilter: nft_synproxy: stop bypassing the priv->info snapshot Fernando Fernandez Mancera <fmancera(a)suse.de> netfilter: nf_conncount: prevent connlimit drops for early confirmed ct Mathias Krause <minipli(a)grsecurity.net> netfilter: nf_nat: avoid invalid nat_net pointer use on failed nf_nat_init() Bradley Morgan <include(a)grrlz.net> bpf: Disable xfrm_decode_session hook attachment Xu Kuohai <xukuohai(a)huawei.com> bpf, lsm: Add disabled BPF LSM hook list Kuniyuki Iwashima <kuniyu(a)google.com> ipv4: fib: Don't ignore error route in local/main tables. Xiang Mei <xmei5(a)asu.edu> ipv6: Fix null-ptr-deref in fib6_nh_mtu_change(). Gil Portnoy <dddhkts1(a)gmail.com> ksmbd: fix use-after-free of conn->preauth_info in concurrent SMB2 NEGOTIATE Stepan Ionichev <sozdayvek(a)gmail.com> rtc: msc313: fix NULL deref in shared IRQ handler at probe Mohamed Khalfella <mkhalfella(a)purestorage.com> i40e: Fix i40e_debug() to use struct i40e_hw argument Lukasz Czapnik <lukasz.czapnik(a)intel.com> ice: fix AQ error code comparison in ice_set_pauseparam() Dawid Osuchowski <dawid.osuchowski(a)linux.intel.com> ice: fix FDIR CTRL VSI resource leak in ice_reset_all_vfs() Manivannan Sadhasivam <manivannan.sadhasivam(a)oss.qualcomm.com> PCI: endpoint: pci-epf-ntb: Add check to detect 'db_count' value of 0 Manivannan Sadhasivam <manivannan.sadhasivam(a)oss.qualcomm.com> PCI: endpoint: pci-epf-vntb: Add check to detect 'db_count' value of 0 Xiang Mei <xmei5(a)asu.edu> drm/edid: fix OOB read in drm_parse_tiled_block() Amery Hung <ameryhung(a)gmail.com> bpf: Fix effective prog array index with BPF_F_PREORDER Avinash Duduskar <avinash.duduskar(a)gmail.com> bpf: zero-initialize the fib lookup flow struct Nuoqi Gui <gnq25(a)mails.tsinghua.edu.cn> bpf: Fix stack slot index in nospec checks Ronan Dalton <ronan.dalton(a)alliedtelesis.co.nz> rtc: ds1307: handle oscillator stop flag for ds1337/ds1339/ds3231 Antoni Pokusinski <apokusinski01(a)gmail.com> rtc: abx80x: fix the RTC_VL_CLR clearing all status flags Geetha sowjanya <gakula(a)marvell.com> octeontx2-pf: mcs: Fix mcs resources free on PF shutdown Subbaraya Sundeep <sbhatta(a)marvell.com> octeontx2-pf: Clear stats of all resources when freeing resources Geetha sowjanya <gakula(a)marvell.com> octeontx2-af: mcs: Fix unsupported secy stats read Wayen Yan <win847(a)gmail.com> net: ethernet: mtk_ppe: Fix rhashtable leak in mtk_ppe_init error paths Weiming Shi <bestswngs(a)gmail.com> tipc: fix use-after-free of the discoverer in tipc_disc_rcv() Ruoyu Wang <ruoyuw560(a)gmail.com> net: marvell: prestera: initialize err in prestera_port_sfp_bind Aboorva Devarajan <aboorvad(a)linux.ibm.com> selftests/mm: fix exclusive_cow test fork() handling Sayali Patil <sayalip(a)linux.ibm.com> selftests/mm: allow PUD-level entries in compound testcase of hmm tests Sayali Patil <sayalip(a)linux.ibm.com> selftests/mm: clarify alternate unmapping in compaction_test Bhargav Joshi <j.bhargav.u(a)gmail.com> irqchip/crossbar: Fix parent domain resource leak Florian Westphal <fw(a)strlen.de> netfilter: nft_meta_bridge: fix NFT_META_BRI_IIFPVID stack leak Florian Westphal <fw(a)strlen.de> netfilter: nf_reject: skip iphdr options when looking for icmp header Jozsef Kadlecsik <kadlec(a)netfilter.org> netfilter: ipset: fix order of kfree_rcu() and rcu_assign_pointer() Jozsef Kadlecsik <kadlec(a)netfilter.org> netfilter: ipset: Don't use test_bit() in lockless RCU readers in hash types Jozsef Kadlecsik <kadlec(a)netfilter.org> netfilter: ipset: annotate "pos" for concurrent readers/writers Jozsef Kadlecsik <kadlec(a)netfilter.org> netfilter: ipset: Fix data race between add and dump in all hash types Abd-Alrhman Masalkhi <abd.masalkhi(a)gmail.com> md/raid1: free r1_bio when REQ_NOWAIT is set and read would block on retry Aleksandr Nogikh <nogikh(a)google.com> ieee802154: fix kernel-infoleak in dgram_recvmsg() Ivan Abramov <i.abramov(a)mt-integration.ru> ieee802154: Remove WARN_ON() in cfg802154_pernet_exit() Xu Rao <raoxu(a)uniontech.com> ACPI: IPMI: Fix inverted interface check in ipmi_bmc_gone() Andy Shevchenko <andriy.shevchenko(a)linux.intel.com> ACPI: resource: Amend kernel-doc style Ricardo Neri <ricardo.neri-calderon(a)linux.intel.com> thermal: intel: Fix dangling resources on thermal_throttle_online() failure Breno Leitao <leitao(a)debian.org> arm64/hw_breakpoint: reject unaligned watchpoints that would truncate BAS Cen Zhang <zzzccc427(a)gmail.com> ALSA: usb-audio: Kill MIDI 2.0 URBs before freeing endpoints Yun Zhou <yun.zhou(a)windriver.com> flow_dissector: check device type before reading ETH_ADDRS Cosmin Ratiu <cratiu(a)nvidia.com> devlink: Fix parent ref leak in devl_rate_node_create() Ioana Ciornei <ioana.ciornei(a)nxp.com> dpaa2-switch: fix VLAN upper check not rejecting bridge join Xiang Mei <xmei5(a)asu.edu> virtio-net: fix len check in receive_big() Quang Nguyen <quang.nguyen.wx(a)renesas.com> spi: rpc-if: Use correct device for hardware reinitialization on resume Mark Tomlinson <mark.tomlinson(a)alliedtelesis.co.nz> PCI: iproc: Restore .map_irq() for the platform bus driver Xin Long <lucien.xin(a)gmail.com> sctp: hold socket lock when dumping endpoints in sctp_diag Jakub Kicinski <kuba(a)kernel.org> net: psample: fix info leak in PSAMPLE_ATTR_DATA Ratheesh Kannoth <rkannoth(a)marvell.com> octeontx2-pf: Fix leak of SQ timestamp buffer on teardown Thadeu Lima de Souza Cascardo <cascardo(a)igalia.com> drm/amdgpu: initialize irq.lock spinlock earlier Mario Limonciello <mario.limonciello(a)amd.com> drm/amdkfd: fix list_del corruption in kfd_criu_resume_svm Yunxiang Li <Yunxiang.Li(a)amd.com> drm/amdkfd: Avoid double-unpin of DOORBELL/MMIO BOs on free Sen Wang <sen(a)ti.com> ASoC: tlv320aic3x: restrict CLKDIV bypass Q values in dual-rate mode Eric Dumazet <edumazet(a)google.com> xfrm: validate selector family and prefixlen during match Eric Dumazet <edumazet(a)google.com> xfrm: annotate data-races around xfrm_policy_count[] and xfrm_policy_default[] Mike Yu <yumike(a)google.com> xfrm: Support crypto offload for inbound IPv6 ESP packets not in GRO path Steffen Klassert <steffen.klassert(a)secunet.com> xfrm: Use the XFRM_GRO to indicate a GRO call on input Jisheng Zhang <jszhang(a)kernel.org> spi: dw: fix wrong BAUDR setting after resume Pengpeng Hou <pengpeng(a)iscas.ac.cn> gpio: mlxbf3: fail probe if gpiochip registration fails Pengpeng Hou <pengpeng(a)iscas.ac.cn> sparc: led: avoid trimming a newline from empty writes John Johansen <john.johansen(a)canonical.com> apparmor: fix label can not be immediately before a declaration Adrian Hunter <adrian.hunter(a)intel.com> i3c: master: Prevent reuse of dynamic address on device add failure Zygmunt Krynicki <me(a)zygoon.pl> apparmor: put secmark label after secid lookup Zygmunt Krynicki <me(a)zygoon.pl> apparmor: aa_getprocattr free procattr leak on format failure Maxime Bélair <maxime.belair(a)canonical.com> apparmor: fix potential UAF in aa_replace_profiles Ryan Lee <ryan.lee(a)canonical.com> apparmor: grab ns lock and refresh when looking up changehat child profiles John Johansen <john.johansen(a)canonical.com> apparmor: fix rawdata_f_data implicit flex array Zygmunt Krynicki <me(a)zygoon.pl> apparmor: aa_label_alloc use aa_label_free on alloc failure Ruoyu Wang <ruoyuw560(a)gmail.com> apparmor: check label build before no_new_privs test Andrew Morton <akpm(a)linux-foundation.org> security/apparmor/apparmorfs.c: conditionally compile get_loaddata_common_ref() Yuanhe Shu <xiangzao(a)linux.alibaba.com> Revert "PCI/MSI: Unmap MSI-X region on error" Manivannan Sadhasivam <manivannan.sadhasivam(a)oss.qualcomm.com> PCI: mediatek: Use actual physical address instead of virt_to_phys() Ryder Lee <ryder.lee(a)mediatek.com> PCI: mediatek: Fix possible truncation in mtk_pcie_parse_port() Arnaldo Carvalho de Melo <acme(a)redhat.com> tools lib api: Fix mount_overload() snprintf truncation and toupper range Arnaldo Carvalho de Melo <acme(a)redhat.com> tools lib api: Fix filename__write_int() writing uninitialized stack data Arnaldo Carvalho de Melo <acme(a)redhat.com> tools lib api: Fix missing null termination in filename__read_int/ull() Chuck Lever <chuck.lever(a)oracle.com> xprtrdma: Return sendctx slot after Send preparation failure Chuck Lever <chuck.lever(a)oracle.com> xprtrdma: Repost Receive buffers for malformed replies Chuck Lever <chuck.lever(a)oracle.com> xprtrdma: Sanitize the reply credit grant after parsing Chris Mason <clm(a)meta.com> xprtrdma: Fix bcall rep leak and unbounded peek Chuck Lever <chuck.lever(a)oracle.com> xprtrdma: Resize reply buffers before reposting receives Chuck Lever <chuck.lever(a)oracle.com> xprtrdma: Document and assert reply-handler invariants Chuck Lever <chuck.lever(a)oracle.com> xprtrdma: Check frwr_wp_create() during connect Lad Prabhakar <prabhakar.mahadev-lad.rj(a)bp.renesas.com> PCI: rcar-host: Remove unused LIST_HEAD(res) Jamie Nguyen <jamien(a)nvidia.com> fs/ntfs3: resize log->one_page_buf when adopting on-disk page size Shuvam Pandey <shuvampandey1(a)gmail.com> PCI: meson: Propagate devm_add_action_or_reset() failure Li RongQing <lirongqing(a)baidu.com> PCI: mediatek: Fix operator precedence in PCIE_FTS_NUM_L0 macro Mike Snitzer <snitzer(a)kernel.org> NFSv4/flexfiles: honor FF_FLAGS_NO_IO_THRU_MDS in pg_get_mirror_count_write Mike Snitzer <snitzer(a)kernel.org> NFSv4/flexfiles: honor FF_FLAGS_NO_IO_THRU_MDS on fatal DS connect errors Clark Wang <xiaoning.wang(a)nxp.com> nfs: keep PG_UPTODATE clear after read errors in page groups Dai Ngo <dai.ngo(a)oracle.com> NFSv4/pnfs: defer return_range callbacks until after inode unlock Chuck Lever <chuck.lever(a)oracle.com> xprtrdma: Decouple req recycling from RPC completion Chuck Lever <chuck.lever(a)oracle.com> xprtrdma: Use sendctx DMA state for Send signaling Chuck Lever <chuck.lever(a)oracle.com> xprtrdma: Post receive buffers after RPC completion Chuck Lever <chuck.lever(a)oracle.com> xprtrdma: Close lost-wakeup race in xprt_rdma_alloc_slot Chuck Lever <chuck.lever(a)oracle.com> xprtrdma: Avoid 250 ms delay on backlog wakeup Chuck Lever <chuck.lever(a)oracle.com> xprtrdma: Remove temp allocation of rpcrdma_rep objects Sagi Grimberg <sagi(a)grimberg.me> pNFS/filelayout: fix cheking if a layout is striped Phillip Varney <pbvarney(a)protonmail.com> clk: qcom: a53: Corrected frequency multiplier for 1152MHz Nuno Sá <nuno.sa(a)analog.com> dmaengine: Fix possible use after free Icenowy Zheng <zhengxingda(a)iscas.ac.cn> dmaengine: qcom: gpi: set DMA_PRIVATE capability Rui Qi <qirui.001(a)bytedance.com> perf: Fix off-by-one stack buffer overflow in kallsyms__parse() Shengjiu Wang <shengjiu.wang(a)nxp.com> dmaengine: imx-sdma: Refine spba bus searching in probe Srinivasan Shanmugam <srinivasan.shanmugam(a)amd.com> drm/amd/display: Add missing kdoc for ALLM parameters Jamie Nguyen <jamien(a)nvidia.com> fs/ntfs3: fix mount failure on 64K page-size kernels Konstantin Komarov <almaz.alexandrovich(a)paragon-software.com> fs/ntfs3: add bounds check to run_get_highest_vcn() Rosen Penev <rosenp(a)gmail.com> HID: logitech-hidpp: remove excess kernel-doc member in hidpp_scroll_counter Yuho Choi <dbgh9129(a)gmail.com> clk: at91: keep securam node alive while mapping it Aldo Conte <aldocontelk(a)gmail.com> iio: tcs3472: power down chip on probe failure Sanjay Chitroda <sanjayembeddedse(a)gmail.com> iio: accel: mma8452: handle I2C read error(s) in mma8452_read() Guilherme Ivo Bozi <guilherme.bozi(a)usp.br> iio: adc: xilinx-ams: fix out-of-bounds channel lookup in event handling Joshua Crofts <joshua.crofts1(a)gmail.com> iio: magnetometer: ak8975: fix potential kernel stack memory leak Joshua Crofts <joshua.crofts1(a)gmail.com> iio: light: si1133: prevent race condition on timeout Joshua Crofts <joshua.crofts1(a)gmail.com> iio: light: si1133: reset counter to prevent race condition James Kim <james010kim(a)gmail.com> char: tlclk: fix use-after-free in tlclk_cleanup() Seungjin Bae <eeodqql09(a)gmail.com> usb: host: max3421: Reject hub port requests for non-existent ports Seungjin Bae <eeodqql09(a)gmail.com> usb: host: max3421: Fix shift-out-of-bounds in max3421_hub_control() Guangshuo Li <lgs201920130244(a)gmail.com> staging: most: video: avoid double free on video register failure Sergey Senozhatsky <senozhatsky(a)chromium.org> mailbox: mtk-adsp: fix UAF during device teardown Andy Shevchenko <andriy.shevchenko(a)linux.intel.com> phy: phy-can-transceiver: Check driver match and driver data against NULL Sumit Kumar <sumit.kumar(a)oss.qualcomm.com> bus: mhi: ep: Fix potential deadlock in mhi_ep_reset_worker() Rong Zhang <i(a)rong.moe> PCI: loongson: Do not ignore downstream devices on external bridges Rafael J. Wysocki <rafael.j.wysocki(a)intel.com> platform/x86: xo15-ebook: Fix wakeup source and GPE handling Rafael J. Wysocki <rafael.j.wysocki(a)intel.com> x86/platform/olpc: xo15: Drop wakeup source on driver removal Guixin Liu <kanie(a)linux.alibaba.com> PCI: Check ROM header and data structure addr before accessing Guixin Liu <kanie(a)linux.alibaba.com> PCI: Introduce named defines for PCI ROM Carlos Bilbao <carlos.bilbao(a)kernel.org> PCI/ASPM: Don't reconfigure ASPM entering low-power state Leo Yan <leo.yan(a)arm.com> coresight: etm4x: Correct TRCVMIDCCTLR1 save and restore Yingchao Deng <yingchao.deng(a)oss.qualcomm.com> coresight: cti: Fix DT filter signals silently ignored Alexandru Hossu <hossu.alexandru(a)gmail.com> staging: nvec: fix use-after-free in nvec_rx_completed() Yizhou Zhao <zhaoyz24(a)mails.tsinghua.edu.cn> net/9p: fix race condition on rdma->state in trans_rdma.c Aleksandr Nogikh <nogikh(a)google.com> ocfs2: fix circular locking dependency in ocfs2_dio_end_io_write Charles Keepax <ckeepax(a)opensource.cirrus.com> mfd: cs42l43: Sanity check firmware size Guangshuo Li <lgs201920130244(a)gmail.com> ksmbd: fix use-after-free in same_client_has_lease() Brett Creeley <brett.creeley(a)amd.com> ionic: Fix check in ionic_get_link_ext_stats Eric Dumazet <edumazet(a)google.com> tcp: ipv6: clamp default adverting MSS to avoid GSO_BY_FRAGS (0xFFFF) Eric Dumazet <edumazet(a)google.com> tipc: fix UAF in tipc_l2_send_msg() Gui-Dong Han <hanguidong02(a)gmail.com> KEYS: Use acquire when reading state in keyring search Aboorva Devarajan <aboorvad(a)linux.ibm.com> powerpc/kexec: fix double get_cpu() imbalance in kexec_prepare_cpus Aboorva Devarajan <aboorvad(a)linux.ibm.com> powerpc/powernv: fix preempt count leak in pnv_kexec_wait_secondaries_down Aboorva Devarajan <aboorvad(a)linux.ibm.com> powerpc/perf: fix preempt count underflow in fsl_emb_pmu_del Yadan Fan <ydfan(a)suse.com> MIPS: mm: Fix out-of-bounds write in maar_res_walk() Sechang Lim <rhkrqnwk98(a)gmail.com> bpf, sockmap: fix integer overflow in bpf_msg_pop_data() bounds check Weiming Shi <bestswngs(a)gmail.com> bpf, sockmap: reject overflowing copy + len in bpf_msg_push_data() Leon Hwang <leon.hwang(a)linux.dev> bpf: Fix bpf_get/setsockopt to tos for ipv4-mapped ipv6 socket Leo Yan <leo.yan(a)arm.com> selftests/bpf: Initialize operation name before use Huiwen He <hehuiwen(a)kylinos.cn> smb/client: always return a value for FS_IOC_GETFLAGS Jian Zhang <zhangjian496(a)huawei.com> cifs: remove all cifs files before kill super Takashi Iwai <tiwai(a)suse.de> ALSA: core: Fix unintuitive behavior of snd_power_ref_and_wait() Florian Westphal <fw(a)strlen.de> netfilter: nf_conncount: callers must hold rcu read lock Runyu Xiao <runyu.xiao(a)seu.edu.cn> kcm: use WRITE_ONCE() when changing lower socket callbacks Ovidiu Panait <ovidiu.panait.rb(a)renesas.com> net: bcmgenet: Use weighted round-robin TX DMA arbitration Ruoyu Wang <ruoyuw560(a)gmail.com> net: wwan: t7xx: check skb_clone in control TX Dragos Tatulea <dtatulea(a)nvidia.com> net/mlx5: Check max_macs devlink param value against max capability Sun Jian <sun.jian.kdev(a)gmail.com> bpf: Run generic devmap egress prog on private skb Aditya Garg <gargaditya(a)linux.microsoft.com> net: mana: guard TX wq object destroy with INVALID_MANA_HANDLE check Aditya Garg <gargaditya(a)linux.microsoft.com> net: mana: initialize gdma queue id to INVALID_QUEUE_ID Victor Nogueira <victor(a)mojatatu.com> net/sched: sch_codel: Do not call qdisc_tree_reduce_backlog during peek before restoring qlen Victor Nogueira <victor(a)mojatatu.com> net/sched: sch_fq_codel: Do not call qdisc_tree_reduce_backlog during peek before restoring qlen Chuck Lever <chuck.lever(a)oracle.com> handshake: Require admin permission for DONE command Lucas Tsai <lucas_tsai(a)richtek.com> power: supply: core: fix supplied_from allocations Guangshuo Li <lgs201920130244(a)gmail.com> ASoC: adau1372: Clear PLL_EN on failed PLL lock without reset GPIO Lars Pöschel <lars.poeschel(a)edag.com> spi: xilinx: use FIFO occupancy register to determine buffer size Herbert Xu <herbert(a)gondor.apana.org.au> crypto: rng - Free default RNG on module exit Felix Gu <ustc.gu(a)gmail.com> crypto: cavium/cpt - fix DMA cleanup using wrong loop index Felix Gu <ustc.gu(a)gmail.com> crypto: marvell/octeontx - fix DMA cleanup using wrong loop index Dave Jiang <dave.jiang(a)intel.com> cxl/test: Add check after kzalloc() memory in alloc_mock_res() Michael Bommarito <michael.bommarito(a)gmail.com> tipc: reject inverted service ranges from peer bindings Michael Bommarito <michael.bommarito(a)gmail.com> tipc: prevent snt_unacked underflow on CONN_ACK Michael Bommarito <michael.bommarito(a)gmail.com> tipc: require net admin for TIPCv2 netlink mutators Victor Nogueira <victor(a)mojatatu.com> net/sched: sch_hfsc: Don't make class passive twice Xin Long <lucien.xin(a)gmail.com> sctp: validate embedded address parameter length Xiang Mei <xmei5(a)asu.edu> bridge: cfm: reject invalid CCM interval at configuration time Kuniyuki Iwashima <kuniyu(a)google.com> net: fib_rules: Don't dump dying fib_rule in fib_rules_dump(). Jamal Hadi Salim <jhs(a)mojatatu.com> net/sched: cls_flow: Dont expose folded kernel pointers HyeongJun An <sammiee5311(a)gmail.com> ASoC: tegra: tegra210_ahub: Validate written enum value HyeongJun An <sammiee5311(a)gmail.com> ASoC: fsl: fsl_audmix: Validate written enum values HyeongJun An <sammiee5311(a)gmail.com> ASoC: codecs: hdac_hdmi: Validate written enum value Leon Romanovsky <leon(a)kernel.org> RDMA/mlx5: Release the HW‑provided UAR index rather than the SW one Maher Sanalla <msanalla(a)nvidia.com> RDMA/mlx5: Fix undefined shift of user RQ WQE size Patrisious Haddad <phaddad(a)nvidia.com> RDMA/mlx5: Remove raw RSS QP restrack tracking Maxwell Doose <m32285159(a)gmail.com> fs: efs: remove unneeded debug prints Samuel Moelius <sam.moelius(a)trailofbits.com> Bluetooth: vhci: validate devcoredump state before side effects Samuel Moelius <sam.moelius(a)trailofbits.com> Bluetooth: hci: validate codec capability element length Zijun Hu <zijun.hu(a)oss.qualcomm.com> Bluetooth: hci_qca: fix NULL pointer dereference in qca_dmp_hdr() for non-serdev device Heiko Carstens <hca(a)linux.ibm.com> s390/process: Fix kernel thread function pointer type Daniel Borkmann <daniel(a)iogearbox.net> bpf: Tighten cgroup storage cookie checks for prog arrays Sergey Shtylyov <s.shtylyov(a)auroraos.dev> of: cpu: add check in __of_find_n_match_cpu_property() Dave Jiang <dave.jiang(a)intel.com> cxl/test: Zero out LSA backing memory to avoid leaking to user Dave Jiang <dave.jiang(a)intel.com> cxl/test: Fix integer overflow in mock LSA bounds checks Yonghong Song <yonghong.song(a)linux.dev> selftests/bpf: Fix bpf_iter/task_vma test Aditya Prakash Srivastava <aditya.ansh182(a)gmail.com> ext4: fix kernel BUG in ext4_write_inline_data_end Louis Scalbert <louis.scalbert(a)6wind.com> bonding: 3ad: fix mux port state on oper down Richard Fitzgerald <rf(a)opensource.cirrus.com> ASoC: cs35l56: Don't leave parent IRQ disabled if system_suspend fails Richard Fitzgerald <rf(a)opensource.cirrus.com> ASoC: cs35l56: Fix missing calls to wm_adsp2_remove() longlong yan <yanlonglong(a)kylinos.cn> tools/virtio: check mmap return value in vringh_test Qing Ming <a0yami(a)mailbox.org> vhost/net: complete zerocopy ubufs only once Zhang Tianci <zhangtianci.1997(a)bytedance.com> vduse: Requeue failed read to send_list head Qihang Tang <q.h.hack.winter(a)gmail.com> vhost/vdpa: validate virtqueue index in mmap and fault paths Qihang Tang <q.h.hack.winter(a)gmail.com> vduse: hold vduse_lock across IDR lookup in open path Val Packett <val(a)packett.cool> ASoC: codecs: aw88261: fix incorrect masks for boost regs Ruoyu Wang <ruoyuw560(a)gmail.com> spi: meson-spifc: fix runtime PM leak on remove Jason Gunthorpe <jgg(a)ziepe.ca> IB/mlx4: Fill in the access_flags if IB_MR_REREG_ACCESS is not specified Johannes Thumshirn <johannes.thumshirn(a)wdc.com> btrfs: zoned: don't account data relocation space-info in statfs free space Nikita Zhandarovich <n.zhandarovich(a)fintech.ru> hwmon: (it87) Clamp negative values to zero in set_fan() David Laight <david.laight.linux(a)gmail.com> fbdev: sm501fb: Fix buffer errors in OF binding code Filipe Manana <fdmanana(a)suse.com> btrfs: fix invalid pointer dereference in __btrfs_run_delayed_refs() Ryder Lee <ryder.lee(a)mediatek.com> wifi: mt76: mt7921: fix potential tx_retries underflow Ryder Lee <ryder.lee(a)mediatek.com> wifi: mt76: mt7915: fix potential tx_retries underflow Bjoern A. Zeeb <bz(a)FreeBSD.org> wifi: mt76: fix argument to ieee80211_is_first_frag() Hongyan Xia <hongyan.xia(a)transsion.com> sched/fair: Fix cpu_util runnable_avg arithmetic Wolfram Sang <wsa+renesas(a)sang-engineering.com> hwspinlock: qcom: avoid uninitialized struct members Hui Zhu <zhuhui(a)kylinos.cn> vmalloc: fix NULL pointer dereference in is_vm_area_hugepages() Luca Leonardo Scorcia <l.scorcia(a)gmail.com> pinctrl: mediatek: mt8167: Fix Schmitt trigger register offset of pins 34-39 Luca Leonardo Scorcia <l.scorcia(a)gmail.com> pinctrl: mediatek: mt8516: Fix Schmitt trigger register offset of pins 34-39 Mike Christie <michael.christie(a)oracle.com> scsi: target: Remove tcm_loop target reset handling David Disseldorp <ddiss(a)suse.de> scsi: target: Fix hexadecimal CHAP_I handling Yuho Choi <dbgh9129(a)gmail.com> watchdog: unregister PM notifier on watchdog unregister Al Viro <viro(a)zeniv.linux.org.uk> configfs: fix lockless traversals of ->s_children Dmitry Vyukov <dvyukov(a)google.com> firmware_loader: Fix recursive lock in device_cache_fw_images() Felix Gu <ustc.gu(a)gmail.com> spi: ep93xx: fix double-free of zeropage on DMA setup failure Jason Gunthorpe <jgg(a)ziepe.ca> IB/mlx5: Properly support implicit ODP rereg_mr Jason Gunthorpe <jgg(a)ziepe.ca> IB/mlx5: Don't take the rereg_mr fallback without a new translation Pengjie Zhang <zhangpengjie2(a)huawei.com> cpufreq: Documentation: fix conservative governor freq_step description Yuho Choi <dbgh9129(a)gmail.com> ACPI: IPMI: Fix message kref handling on dead device Kyle Zeng <kylebot(a)openai.com> ALSA: seq: Clear variable event pointer on read Rui Qi <qirui.001(a)bytedance.com> riscv: stacktrace: Remove bogus -0x4 offset in non-FP walk_stackframe HyeongJun An <sammiee5311(a)gmail.com> ALSA: seq: Fix partial userptr event expansion Tristan Madani <tristan(a)talencesecurity.com> wifi: wcn36xx: fix OOB read from short trigger BA firmware response Tristan Madani <tristan(a)talencesecurity.com> wifi: wcn36xx: fix OOB read from firmware count in PRINT_REG_INFO indication Tristan Madani <tristan(a)talencesecurity.com> wifi: wcn36xx: fix heap overflow from oversized firmware HAL response Leon Hwang <leon.hwang(a)linux.dev> bpf: Update transport_header when encapsulating UDP tunnel in lwt Leon Hwang <leon.hwang(a)linux.dev> bpf: Check tail zero of bpf_prog_info Alexander Stein <alexander.stein(a)ew.tq-group.com> arm64: dts: tqma8mpql-mba8mpxl: configure sai clock in audio codec as well Jacob Moroni <jmoroni(a)google.com> RDMA/irdma: Initialize iwmr->access during MR registration Jacob Moroni <jmoroni(a)google.com> RDMA/irdma: Fix OOB read during CQ MR registration Jason Gunthorpe <jgg(a)ziepe.ca> IB/cm: Fix av cm device leak on an error path in cm_init_av_by_path() Pablo Neira Ayuso <pablo(a)netfilter.org> netfilter: conntrack: call nf_ct_gre_keymap_destroy() if master helper is pptp Pablo Neira Ayuso <pablo(a)netfilter.org> netfilter: conntrack: revert ct extension genid infrastructure Fernando Fernandez Mancera <fmancera(a)suse.de> netfilter: synproxy: protect nf_ct_seqadj_init() with conntrack lock Fernando Fernandez Mancera <fmancera(a)suse.de> netfilter: nfnetlink_osf: fix mss parsing on big-endian architectures Joseph Qi <joseph.qi(a)linux.alibaba.com> ocfs2: fix race between ocfs2_control_install_private() and ocfs2_control_release() Zhang Cen <rollkingzzc(a)gmail.com> ocfs2/dlm: require a ref for locking_state debugfs open Zhang Cen <rollkingzzc(a)gmail.com> ocfs2: reject FITRIM ranges shorter than a cluster Dmitry Antipov <dmantipov(a)yandex.ru> ocfs2: fix buffer head management in ocfs2_read_blocks() Zhang Cen <rollkingzzc(a)gmail.com> ocfs2: rebase copied fsdlm LVB pointers in locking_state Sandipan Das <sandipan.das(a)amd.com> perf/x86/amd/core: Always use the NMI latency mitigation Woojin Ji <random6.xyz(a)gmail.com> bpftool: Use libbpf error code for flow dissector query Yunxiang Li <Yunxiang.Li(a)amd.com> drm/amdgpu: set sub_block_index for mca ras sub-blocks Al Viro <viro(a)zeniv.linux.org.uk> configfs_lookup(): don't leave ->s_dentry dangling on failure Alexander Potapenko <glider(a)google.com> lib/test_meminit: use && for bools Guanyou.Chen <chenguanyou9338(a)gmail.com> sched: restore timer_slack_ns when resetting RT policy on fork Danila Chernetsov <listdansp(a)mail.ru> ext2: fix ignored return value of generic_write_sync() Sang-Heon Jeon <ekffu200098(a)gmail.com> mm/fake-numa: fix under-allocation detection in uniform split Deepanshu Kartikey <kartikey406(a)gmail.com> bpf: fix UAF by restoring RCU-delayed inode freeing in bpffs Chanwoo Lee <cw9316.lee(a)samsung.com> scsi: ufs: Fix wrong value printed in unexpected UPIU response case Dan Carpenter <error27(a)gmail.com> scsi: pm8001: Fix error code in non_fatal_log_show() Martin Wilck <martin.wilck(a)suse.com> scsi: Revert "scsi: Fix sas_user_scan() to handle wildcard and multi-channel scans" Alison Schofield <alison.schofield(a)intel.com> nvdimm/btt: Handle preemption in BTT lane acquisition Yuho Choi <dbgh9129(a)gmail.com> ARM: imx31: Fix IIM mapping leak in revision check Bart Van Assche <bvanassche(a)acm.org> ata: libata: Fix ata_exec_internal() J. Neuschäfer <j.ne(a)posteo.net> HID: wiimote: Fix table layout and whitespace errors Yuho Choi <dbgh9129(a)gmail.com> ARM: imx3: Fix CCM node reference leak John Madieu <john.madieu.xa(a)bp.renesas.com> ASoC: rsnd: Fix RSND_SOC_MASK width to single nibble Zhang Yi <yi.zhang(a)huawei.com> ext4: fix LOGFLUSH shutdown ordering to allow ordered-mode data writeback Chen Cheng <chencheng(a)fnnas.com> md/raid10: reset read_slot when reusing r10bio for discard Danilo Krummrich <dakr(a)kernel.org> rpmsg: use generic driver_override infrastructure Renjiang Han <renjiang.han(a)oss.qualcomm.com> media: qcom: venus: relax encoder frame/blur step size on v6 Renjiang Han <renjiang.han(a)oss.qualcomm.com> media: qcom: venus: relax encoder frame/blur dimension steps on v4 Renjiang Han <renjiang.han(a)oss.qualcomm.com> media: qcom: venus: drop extra padding in NV12 raw size calculation Tristan Madani <tristmd(a)gmail.com> RDMA/rxe: Copy WQE to local buffer in non-SRQ receive path Tristan Madani <tristmd(a)gmail.com> RDMA/rxe: Fix TOCTOU heap overflow in get_srq_wqe zhoumin <teczm(a)foxmail.com> EDAC/{skx_common,skx}: Fix UBSAN shift-out-of-bounds in skx_get_dimm_info Jessica Zhang <jessica.zhang(a)oss.qualcomm.com> drm/msm/dp: Fix the ISR_* enum values Jessica Zhang <jessica.zhang(a)oss.qualcomm.com> drm/msm/dp: fix HPD state status bit shift value Weili Qian <qianweili(a)huawei.com> crypto: hisilicon/qm - disable error report before flr Tetsuo Handa <penguin-kernel(a)I-love.SAKURA.ne.jp> ocfs2: kill osb->system_file_mutex lock ZhengYuan Huang <gality369(a)gmail.com> ocfs2: don't BUG_ON an invalid journal dinode Dan Carpenter <error27(a)gmail.com> rapidio/tsi721: prevent a bad dereference in tsi721_db_dpc() Davidlohr Bueso <dave(a)stgolabs.net> dax/kmem: account for partial discontiguous resource upon removal Carlos Llamas <cmllamas(a)google.com> libbpf: Fix UAF in strset__add_str() Michael Bommarito <michael.bommarito(a)gmail.com> libbpf: Harden parse_vma_segs() path parsing Timur Tabi <ttabi(a)nvidia.com> drm/nouveau/bios: specify correct display fuse register for Ampere and Ada Mikko Perttunen <mperttunen(a)nvidia.com> drm/tegra: Fix iommu_map_sgtable() return value check Mikko Perttunen <mperttunen(a)nvidia.com> gpu: host1x: Fix iommu_map_sgtable() return value check Felix Gu <ustc.gu(a)gmail.com> drm/tegra: dc: Fix device node reference leak in tegra_dc_has_output() Mikko Perttunen <mperttunen(a)nvidia.com> gpu: host1x: Allow entries in BO caches to be freed Ion Agorria <ion(a)agorria.com> drm/tegra: gr2d/gr3d: Contain PM in the gr*d_probe/gr*d_remove Svyatoslav Ryhel <clamor95(a)gmail.com> drm/tegra: gr2d/gr3d: Initialize address register map before HOST1X client is registered Jiayuan Chen <jiayuan.chen(a)linux.dev> net/sched: cls_bpf: prevent unbounded recursion in offload rollback Eric Dumazet <edumazet(a)google.com> ipv6: guard against possible NULL deref in __in6_dev_stats_get() Breno Leitao <leitao(a)debian.org> workqueue: drop spurious '*' from print_worker_info() fn declaration Nilay Shroff <nilay(a)linux.ibm.com> nvme-multipath: fix flex array size in struct nvme_ns_head Charles Keepax <ckeepax(a)opensource.cirrus.com> pinctrl: cs42l43: Fix polarity on debounce Zhang Cen <rollkingzzc(a)gmail.com> ALSA: seq: midi: Serialize output teardown with event_input Miquel Raynal <miquel.raynal(a)bootlin.com> mtd: spi-nor: Drop duplicate Kconfig dependency Rosen Penev <rosenp(a)gmail.com> mips: n64: add __iomem for writel call Rosen Penev <rosenp(a)gmail.com> mips: ralink: mt7621: add missing __iomem Maciej W. Rozycki <macro(a)orcam.me.uk> MIPS: DEC: Remove do_IRQ() call indirection Maciej W. Rozycki <macro(a)orcam.me.uk> MIPS: Fix big-endian stack argument fetching in o32 wrapper Jiakai Xu <xujiakai24(a)mails.ucas.ac.cn> PM: sleep: Use complete() in device_pm_sleep_init() Tao Cui <cuitao(a)kylinos.cn> RDMA/counter: Fix incorrect port index in rdma_counter_init() error cleanup Lianfa Weng <wenglianfa(a)huawei.com> RDMA/hns: Fix warning in poll cq direct mode Guangshuo Li <lgs201920130244(a)gmail.com> IB/mlx4: Fix refcount leak in add_port() error path Zhu Yanjun <yanjun.zhu(a)linux.dev> RDMA/rxe: Fix a use-after-free problem in rxe_mmap Jacob Moroni <jmoroni(a)google.com> RDMA/irdma: Fix out-of-bounds write in irdma_copy_user_pgaddrs Samuel Holland <samuel(a)sholland.org> bus: sunxi-rsb: Always check register address validity Ronaldo Nunez <rnunez(a)baylibre.com> pwm: imx27: Fix variable truncation in .apply() Lifeng Zheng <zhenglifeng1(a)huawei.com> cpufreq: conservative: Simplify frequency limit handling Pengjie Zhang <zhangpengjie2(a)huawei.com> cpufreq: Documentation: fix sampling_down_factor range Saravana Kannan <saravanak(a)google.com> Revert "treewide: Fix probing of devices in DT overlays" Zhang Yuwei <zhangyuwei20(a)huawei.com> driver core: Use mod_delayed_work to prevent lost deferred probe work Stepan Ionichev <sozdayvek(a)gmail.com> device property: fix fwnode reference leak in fwnode_graph_get_endpoint_by_id() Pengpeng Hou <pengpeng(a)iscas.ac.cn> tracing: Bound synthetic-field strings with seq_buf Harshal Dev <harshal.dev(a)oss.qualcomm.com> arm64: dts: qcom: sm8450: Add power-domain and iface clk for ice node Geert Uytterhoeven <geert+renesas(a)glider.be> firmware: arm_scmi: Fix OOB in scmi_power_name_get() Sven Püschel <s.pueschel(a)pengutronix.de> media: rockchip: rga: fix too small buffer size Eric Dumazet <edumazet(a)google.com> net/sched: sch_drr: annotate data-races around cl->deficit Chen-Yu Tsai <wenst(a)chromium.org> regulator: dt-bindings: mt6359: Drop regulator-name pattern restrictions Randy Dunlap <rdunlap(a)infradead.org> bitops: use common function parameter names Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> sysfs: clamp show() return value in sysfs_kf_read() Sudeep Holla <sudeep.holla(a)kernel.org> firmware: arm_scmi: Read sensor config as 32-bit value Zilin Guan <zilin(a)seu.edu.cn> media: atomisp: Fix memory leak in atomisp_fixed_pattern_table() Sara Venkatesh <sarajvenkatesh(a)gmail.com> RDMA/srpt: fix integer overflow in immediate data length check Prathamesh Deshpande <prathameshdeshpande7(a)gmail.com> RDMA/mlx5: Fix devx subscribe-event unwind NULL dereference Alexander Chesnokov <Alexander.Chesnokov(a)kaspersky.com> RDMA/hns: Fix arithmetic overflow in calc_hem_config() Prathamesh Deshpande <prathameshdeshpande7(a)gmail.com> IB/mlx5: Fix transport-domain rollback and initialize lb mutex earlier Linmao Li <lilinmao(a)kylinos.cn> ipv6: addrconf: bail out of dad_failure when state is no longer POSTDAD Eric Dumazet <edumazet(a)google.com> net/sched: sch_htb: annotate data-races (I) Eric Dumazet <edumazet(a)google.com> net/sched: sch_htb: do not change sch->flags in htb_dump() Qiang Ma <maqianga(a)uniontech.com> spi: hisi-kunpeng: Use dev_err_probe() for host registration failure Sean Christopherson <seanjc(a)google.com> crypto: ccp - Treat zero-length cert chain as query for blob lengths Eric Dumazet <edumazet(a)google.com> net/sched: sch_hfsc: annotate data-races in hfsc_dump_class_stats() Stepan Ionichev <sozdayvek(a)gmail.com> clk: scpi: Unregister child clock providers on remove Rafael J. Wysocki <rafael.j.wysocki(a)intel.com> thermal: hwmon: Fix critical temperature attribute removal Pengpeng Hou <pengpeng(a)iscas.ac.cn> evm: terminate and bound the evm_xattrs read buffer Lin He <helin52(a)huawei.com> drm/hisilicon/hibmc: use clock to look up the PLL value Lin He <helin52(a)huawei.com> drm/hisilicon/hibmc: move display contrl config to hibmc_probe() Kuldeep Singh <kuldeep.singh(a)oss.qualcomm.com> arm64: dts: qcom: sm8450: Fix ICE reg size Cristian Marussi <cristian.marussi(a)arm.com> clk: scmi: Fix clock rate rounding Chen-Yu Tsai <wenst(a)chromium.org> arm64: dts: mediatek: mt8192-asurada: Move PCIe DMA bounce buffer to host Sean Christopherson <seanjc(a)google.com> iommu/amd: Fix a stale comment about which legacy mode is user visible Shuangpeng Bai <shuangpeng.kernel(a)gmail.com> nilfs2: fix backing_dev_info reference leak Alexander Aring <aahringo(a)redhat.com> dlm: fix add msg handle in send_queue ordered Weiming Shi <bestswngs(a)gmail.com> crypto: asymmetric_keys - fix OOB read in pefile_digest_pe_contents Thorsten Blum <thorsten.blum(a)linux.dev> crypto: ecrdsa - fix unknown OID check in ecrdsa_param_curve Lothar Rubusch <l.rubusch(a)gmail.com> crypto: atmel-sha204a - fix blocking and non-blocking rng logic Kuniyuki Iwashima <kuniyu(a)google.com> vxlan: Fix potential null-ptr-deref in vxlan_gro_prepare_receive(). Peng Fan <peng.fan(a)nxp.com> arm64: dts: imx8x-colibri: Correct SODIMM PAD settings Weixin Guo <2298701336(a)qq.com> arm64: dts: rockchip: fix rk809 interrupt pin on rk3566-roc-pc Felix Gu <ustc.gu(a)gmail.com> pinctrl: sunxi: fix regulator leak in sunxi_pmx_request() error path Nas Chung <nas.chung(a)chipsnmedia.com> media: v4l2-common: Add YUV24 format info Samuel Holland <samuel(a)sholland.org> media: cedrus: Fix failure to clean up hardware on probe failure Felix Gu <ustc.gu(a)gmail.com> watchdog: sprd_wdt: Remove redundant sprd_wdt_disable() on register failure Balakrishnan Sambath <balakrishnan.s(a)microchip.com> watchdog: sama5d4_wdt: Fix WDDIS detection on SAM9X60 and SAMA7G5 Yingjie Gao <gaoyingjie(a)uniontech.com> watchdog: sp5100_tco: Use EFCH MMIO for newer Hygon FCH Jihed Chaibi <jihed.chaibi.dev(a)gmail.com> ARM: dts: am335x-sl50: Fix audio bitclock and frame master endpoint Tristan Madani <tristan(a)talencesecurity.com> wifi: ath9k: fix OOB access from firmware tx status queue ID Xingjing Deng <micro6947(a)gmail.com> kconfig: fix potential NULL pointer dereference in conf_askvalue Tristan Madani <tristan(a)talencesecurity.com> wifi: rtw88: fix OOB read from firmware RX descriptor exceeding DMA buffer Shin-Yi Lin <isaiah(a)realtek.com> wifi: rtw89: Correct data type for scan index to avoid infinite loop Danilo Krummrich <dakr(a)kernel.org> driver core: use READ_ONCE() for dev->driver in dev_has_sync_state() Srinivasan Shanmugam <srinivasan.shanmugam(a)amd.com> drm/amdkfd: Validate CRIU-restored IDs before idr_alloc Krzysztof Kozlowski <krzysztof.kozlowski(a)oss.qualcomm.com> dt-bindings: pinctrl: nvidia,tegra234: Add missing required block Jon Hunter <jonathanh(a)nvidia.com> arm64: tegra: Fix Tegra234 MGBE PTP clock Louis Kotze <loukot(a)gmail.com> wifi: cfg80211: fix grammar in MLO group key error message Krzysztof Kozlowski <krzysztof.kozlowski(a)oss.qualcomm.com> arm64: dts: qcom: sdm845-mezzanine: Fix camss ports unit_address_vs_reg warning Diederik de Haas <diederik(a)cknow-tech.com> arm64: dts: rockchip: Fix gmac0 reset pin for NanoPi R5S Baolin Liu <liubaolin(a)kylinos.cn> Documentation: proc: fix section numbering in table of contents Aaron Tomlin <atomlin(a)atomlin.com> libbpf: Report error when a negative kprobe offset is specified Yuho Choi <dbgh9129(a)gmail.com> drm/radeon: fix memory leak in radeon_ring_restore() on lock failure Werner Kasselman <werner(a)verivus.ai> drm/radeon: fix integer overflow in radeon_align_pitch() Werner Kasselman <werner(a)verivus.ai> drm/amdgpu: fix integer overflow in amdgpu_gem_align_pitch() Tomi Valkeinen <tomi.valkeinen(a)ideasonboard.com> drm/tidss: Drop extra drm_mode_config_reset() call Thomas Zimmermann <tzimmermann(a)suse.de> drm/rockchip: Test for imported buffers with drm_gem_is_imported() Chen Ni <nichen(a)iscas.ac.cn> clocksource/drivers/sun5i: Handle error returns from devm_reset_control_get_optional_exclusive() Ian Bridges <icb(a)fastmail.org> fbcon: fix NULL pointer dereference for a console without vc_data David Howells <dhowells(a)redhat.com> afs: Fix further netns teardown to cancel the preallocation charger Matvey Kovalev <matvey.kovalev(a)ispras.ru> afs: fix NULL pointer dereference in afs_get_tree() David Howells <dhowells(a)redhat.com> afs: Fix netns teardown to cancel the preallocation charger David Howells <dhowells(a)redhat.com> rxrpc: Fix leak of released call in recvmsg(MSG_PEEK) Jeffrey Altman <jaltman(a)auristor.com> rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc Matthias Feser <mfe(a)KBSgmbhfr.onmicrosoft.com> serial: 8250_omap: clear rx_running on zero-length DMA completes Stephan Gerhold <stephan.gerhold(a)linaro.org> serial: msm: Disable DMA for kernel console UART Guoniu Zhou <guoniu.zhou(a)oss.nxp.com> dt-bindings: power: imx93: Add MIPI PHY power domain Chen-Yu Tsai <wens(a)kernel.org> dt-bindings: media: sun4i-a10-video-engine: Add interconnect properties Ricardo Ribalda <ribalda(a)chromium.org> media: uvcvideo: Fix sequence number when no EOF Ricardo Ribalda <ribalda(a)chromium.org> media: uvcvideo: Fix buffer sequence in frame gaps Ricardo Ribalda <ribalda(a)chromium.org> media: uvcvideo: Avoid partial metadata buffers Pawan Gupta <pawan.kumar.gupta(a)linux.intel.com> bpf: Prefer dirty packs for eBPF allocations Pawan Gupta <pawan.kumar.gupta(a)linux.intel.com> bpf: Prefer packs that won't trigger an IBPB flush on allocation Pawan Gupta <pawan.kumar.gupta(a)linux.intel.com> bpf: Skip redundant IBPB in pack allocator Pawan Gupta <pawan.kumar.gupta(a)linux.intel.com> bpf: Restrict JIT predictor flush to cBPF Pawan Gupta <pawan.kumar.gupta(a)linux.intel.com> x86/bugs: Enable IBPB flush on BPF JIT allocation Pawan Gupta <pawan.kumar.gupta(a)linux.intel.com> bpf: Support for hardening against JIT spraying Eric Biggers <ebiggers(a)kernel.org> crypto: hisi-trng - Remove crypto_rng interface Eric Biggers <ebiggers(a)kernel.org> crypto: crypto4xx - Remove insecure and unused rng_alg Herbert Xu <herbert(a)gondor.apana.org.au> crypto: crypto4xx - Remove ahash-related code Stephen Dolan <sdolan(a)janestreet.com> x86/mm: Fix check/use ordering in switch_mm_irqs_off() Eric Biggers <ebiggers(a)kernel.org> crypto: sun4i-ss - Remove insecure and unused rng_alg Sagi Grimberg <sagi(a)grimberg.me> nvmet-tcp: Fix potential UAF when ddgst mismatch Shivam Kumar <kumar.shivam43666(a)gmail.com> nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path Hyunwoo Kim <imv4bel(a)gmail.com> KVM: arm64: Clear __hyp_running_vcpu when flushing the pKVM hyp vCPU Hyunwoo Kim <imv4bel(a)gmail.com> KVM: arm64: Bound used_lrs when flushing the pKVM hyp vCPU Muhammet Kaan KILINÇ <muhammetkaankilinc(a)gmail.com> crypto: algif_skcipher - force synchronous processing on trees without ctx->state Adam Li <adamli(a)os.amperecomputing.com> sched/fair: Only update stats for allowed CPUs when looking for dst group Chao Shi <coshi036(a)gmail.com> block: skip sync_blockdev() on surprise removal in bdev_mark_dead() ChenXiaoSong <chenxiaosong(a)kylinos.cn> smb/server: do not require delete access for non-replacing links Darrick J. Wong <djwong(a)kernel.org> xfs: resample the data fork mapping after cycling ILOCK Weiming Shi <bestswngs(a)gmail.com> xfs: fail recovery on a committed log item with no regions Shoichiro Miyamoto <shoichiro.miyamoto(a)gmail.com> smb: client: reject overlapping data areas in SMB2 responses Joanne Koong <joannelkoong(a)gmail.com> fuse: re-lock request before returning from fuse_ref_folio() Alberto Ruiz <aruiz(a)redhat.com> fuse: fix device node leak in cuse_process_init_reply() Michael Bommarito <michael.bommarito(a)gmail.com> RDMA/siw: bound Read Response placement to the RREAD length Zhenhao Wan <whi4ed0g(a)gmail.com> RDMA/rtrs-srv: Bound RDMA-Write length to chunk size in rdma_write_sg Dmitry Torokhov <dmitry.torokhov(a)gmail.com> Input: maplecontrol - set driver data before registering input device Dmitry Torokhov <dmitry.torokhov(a)gmail.com> Input: maplemouse - set driver data before registering input device Dmitry Torokhov <dmitry.torokhov(a)gmail.com> Input: maple_keyb - set driver data before registering input device Dmitry Torokhov <dmitry.torokhov(a)gmail.com> Input: mms114 - fix multi-touch slot corruption Florian Fuchs <fuchsfl(a)gmail.com> Input: maplemouse - fix NULL pointer dereference in open() Bryam Vargas <hexlabsecurity(a)proton.me> Input: mms114 - reject an oversized device packet size Bryam Vargas <hexlabsecurity(a)proton.me> Input: touchwin - reset the packet index on every complete packet Dmitry Torokhov <dmitry.torokhov(a)gmail.com> Input: mms114 - fix touch indexing for MMS134S and MMS136 Bryam Vargas <hexlabsecurity(a)proton.me> Input: iforce - bound the device-reported force-feedback effect index Bryam Vargas <hexlabsecurity(a)proton.me> Input: goodix - clamp the device-reported contact count Ranjan Kumar <kumarranja(a)chromium.org> Input: elan_i2c - prevent division by zero and arithmetic underflow Bryam Vargas <hexlabsecurity(a)proton.me> Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count Bryam Vargas <hexlabsecurity(a)proton.me> Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count Haoxiang Li <haoxiang_li2024(a)163.com> Input: synaptics-rmi4 - unregister function handlers on physical driver registration failure Guillermo Rodríguez <guille.rodriguez(a)gmail.com> i2c: stm32f7: truncate clock period instead of rounding it Andy Shevchenko <andriy.shevchenko(a)linux.intel.com> i2c: mpc: Fix timeout calculations Johan Hovold <johan(a)kernel.org> i2c: core: fix adapter deregistration race Mikhail Gavrilov <mikhail.v.gavrilov(a)gmail.com> udmabuf: fix DMA direction mismatch in release_udmabuf() Sean Christopherson <seanjc(a)google.com> KVM: VMX: Grab vmcs12 on CR8 interception update iff vCPU is in guest mode Sean Christopherson <seanjc(a)google.com> KVM: VMX: Refresh GUEST_PENDING_DBG_EXCEPTIONS.BS on all injected #DBs Koichiro Den <den(a)valinux.co.jp> NTB: epf: Fix request_irq() unwind in ntb_epf_init_isr() Bryam Vargas <hexlabsecurity(a)proton.me> exfat: bound uniname advance in exfat_find_dir_entry() Andrii Kuchmenko <capyenglishlite(a)gmail.com> module: decompress: check return value of module_extend_max_pages() Benjamin Coddington <ben.coddington(a)hammerspace.com> NFSv4: include MAY_WRITE in open permission mask for O_TRUNC Huihui Huang <hhhuang(a)smu.edu.sg> tracing: Prevent out-of-bounds read in glob matching Janne Grunau <j(a)jannau.net> watchdog: apple: Add "apple,t8103-wdt" compatible Vasily Khoruzhick <vasilykh(a)arista.com> EDAC/i10nm: Don't fail probing if ADXL is missing Carlos Song <carlos.song(a)nxp.com> spi: fsl-lpspi: terminate the RX channel on TX prepare failure path Carlos Song <carlos.song(a)nxp.com> spi: fsl-lpspi: replace dmaengine_terminate_all() with dmaengine_terminate_sync() Mark Rutland <mark.rutland(a)arm.com> arm64: fpsimd: Fix type mismatch in sme_{save,load}_state() Paul Louvel <paul.louvel(a)bootlin.com> crypto: talitos/hash - fix SEC2 64k - 1 ahash request limitation Paul Louvel <paul.louvel(a)bootlin.com> crypto: talitos/hash - remove useless wrapper Paul Louvel <paul.louvel(a)bootlin.com> crypto: talitos/hash - rename first_desc/last_desc to first_request/last_request Paul Louvel <paul.louvel(a)bootlin.com> crypto: talitos/hash - drop workqueue mechanism for SEC1 Paul Louvel <paul.louvel(a)bootlin.com> crypto: talitos/hash - use descriptor chaining for SEC1 instead of workqueue Paul Louvel <paul.louvel(a)bootlin.com> crypto: talitos/hash - prepare SEC1 descriptor chaining, remove additional descriptor Paul Louvel <paul.louvel(a)bootlin.com> crypto: talitos - move code in current_desc_hdr() into a standalone function Paul Louvel <paul.louvel(a)bootlin.com> crypto: talitos - move dma mapping code in talitos_submit() into a standalone dma_map_request() function Paul Louvel <paul.louvel(a)bootlin.com> crypto: talitos - move dma unmapping code in flush_channel() into a standalone dma_unmap_request() function Paul Louvel <paul.louvel(a)bootlin.com> crypto: talitos - add chaining of arbitrary number of descriptor for the SEC1 Paul Louvel <paul.louvel(a)bootlin.com> crypto: talitos - use dma_sync_single_for_cpu() before reading descriptor header Giovanni Cabiddu <giovanni.cabiddu(a)intel.com> crypto: qat - validate RSA CRT component lengths Eric Biggers <ebiggers(a)kernel.org> crypto: drbg - Fix the fips_enabled priority boost Eric Biggers <ebiggers(a)kernel.org> crypto: drbg - Fix drbg_max_addtl() on 64-bit kernels Eric Biggers <ebiggers(a)kernel.org> crypto: drbg - Fix returning success on failure in CTR_DRBG Ruijie Li <ruijieli51(a)gmail.com> crypto: pcrypt - restore callback for non-parallel fallback Anastasia Tishchenko <sv3iry(a)gmail.com> crypto: ecc - Fix carry overflow in vli multiplication Thorsten Blum <thorsten.blum(a)linux.dev> crypto: caam - use print_hex_dump_devel to guard key hex dumps again Thorsten Blum <thorsten.blum(a)linux.dev> crypto: caam - use print_hex_dump_devel to guard key hex dumps Eric Biggers <ebiggers(a)kernel.org> crypto: af_alg - Remove zero-copy support from skcipher and aead Bryam Vargas <hexlabsecurity(a)proton.me> isofs: bound Rock Ridge symlink components to the SL record Bryam Vargas <hexlabsecurity(a)proton.me> partitions: aix: bound the pp_count scan to the ppe array Qu Wenruo <wqu(a)suse.com> btrfs: do not trim a device which is not writeable Achkinazi, Igor <Igor.Achkinazi(a)dell.com> nvme-multipath: set BIO_REMAPPED on bios remapped to per-path namespace disks Mikulas Patocka <mpatocka(a)redhat.com> dm-ioctl: report an error if a device has no table Wentao Liang <vulab(a)iscas.ac.cn> hwrng: jh7110 - fix refcount leak in starfive_trng_read() Bryam Vargas <hexlabsecurity(a)proton.me> udf: validate sparing table length as an entry count, not a byte count Bryam Vargas <hexlabsecurity(a)proton.me> udf: validate VAT header length against the VAT inode size Michael Bommarito <michael.bommarito(a)gmail.com> udf: validate free block extents against the partition length Maciej W. Rozycki <macro(a)orcam.me.uk> PCI: Always lift 2.5GT/s restriction in PCIe failed link retraining Liviu Stan <liviu.stan(a)analog.com> iio: temperature: ltc2983: Fix n_wires default bypassing rotation check Paul Menzel <pmenzel(a)molgen.mpg.de> usb: typec: ucsi: cancel pending work on system suspend Fan Wu <fanwu01(a)zju.edu.cn> usb: typec: ucsi: ccg: Fix use-after-free of ucsi on remove Madhu M <madhu.m(a)intel.com> usb: typec: ucsi: Pass full DP config payload in SET_NEW_CAM for DP alt mode Andrei Kuchynski <akuchynski(a)chromium.org> usb: typec: ucsi: Invert DisplayPort role assignment Badhri Jagan Sridharan <badhri(a)google.com> usb: typec: tcpm: Validate SVID index in svdm_consume_modes() Shuangpeng Bai <shuangpeng.kernel(a)gmail.com> usb: typec: class: drop PD lookup reference Myeonghun Pak <mhun512(a)gmail.com> usb: typec: anx7411: use devm_pm_runtime_enable() Sam Day <me(a)samcday.com> usbip: vudc: fix NULL deref in vep_dequeue() Yichong Chen <chenyichong(a)uniontech.com> usbip: tools: support SuperSpeedPlus devices Xu Rao <raoxu(a)uniontech.com> USB: usb-storage: ene_ub6250: restore media-ready check Johan Hovold <johan(a)kernel.org> USB: ulpi: fix memory leak on registration failure Johan Hovold <johan(a)kernel.org> USB: serial: digi_acceleport: fix write buffer corruption Johan Hovold <johan(a)kernel.org> USB: serial: digi_acceleport: fix hard lockup on disconnect Johan Hovold <johan(a)kernel.org> USB: serial: digi_acceleport: fix broken rx after throttle Fabio Porcedda <fabio.porcedda(a)gmail.com> USB: serial: option: add Telit Cinterion FE990D50 compositions Johan Hovold <johan(a)kernel.org> USB: serial: keyspan_pda: fix information leak Haoxiang Li <haoxiang_li2024(a)163.com> usb: mtu3: unmap request DMA on queue failure Myeonghun Pak <mhun512(a)gmail.com> USB: misc: uss720: unregister parport on probe failure Xu Rao <raoxu(a)uniontech.com> USB: storage: include US_FL_NO_SAME in quirks mask Myeonghun Pak <mhun512(a)gmail.com> usb: sl811-hcd: disable controller wakeup on remove Johan Hovold <johan(a)kernel.org> USB: legousbtower: fix use-after-free on disconnect race Erich E. Hoover <erich.e.hoover(a)gmail.com> USB: quirks: add NO_LPM for the Samsung T5 EVO Portable SSD Johan Hovold <johan(a)kernel.org> USB: iowarrior: fix use-after-free on disconnect Johan Hovold <johan(a)kernel.org> USB: ldusb: fix use-after-free on disconnect race Johan Hovold <johan(a)kernel.org> USB: idmouse: fix use-after-free on disconnect race Xu Rao <raoxu(a)uniontech.com> usb: gadget: f_printer: take kref only for successful open Jimmy Hu <hhhuuu(a)google.com> usb: gadget: udc: Fix use-after-free in gadget_match_driver Maoyi Xie <maoyixie.tju(a)gmail.com> usb: gadget: composite: fix dead empty check in the USB_DT_OTG handler Dawei Feng <dawei.feng(a)seu.edu.cn> usb: free iso schedules on failed submit WenTao Liang <vulab(a)iscas.ac.cn> usb: dwc3: meson-g12a: fix refcount leak in dwc3_meson_g12a_resume() Rodrigo Lugathe da Conceição Alves <lugathe2(a)gmail.com> USB: core: add USB_QUIRK_NO_LPM for VIA Labs USB 2.0 hub Haoxiang Li <haoxiang_li2024(a)163.com> usb: cdnsp: fix stream context array leak in cdnsp_alloc_stream_info() Jared Baldridge <jrb(a)expunge.us> usb: cdc_acm: Add quirk for Uniden BC125AT scanner Maoyi Xie <maoyixie.tju(a)gmail.com> net: usb: kalmia: bound RX frame length in kalmia_rx_fixup() Dawei Feng <dawei.feng(a)seu.edu.cn> bpf: Restore sysctl new-value from 1 to 0 Zhao Zhang <zzhan461(a)ucr.edu> bpf: Reject fragmented frames in devmap Alexey Nepomnyashih <sdl(a)nppct.ru> xfs: fix unreachable BIGTIME check in dquot flush validation Yousef Alhouseen <alhouseenyousef(a)gmail.com> xfs: use null daddr for unset first bad log block Louis-Alexis Eyraud <louisalexis.eyraud(a)collabora.com> media: mtk-jpeg: cancel workqueue on release for supported platforms only Deepanshu Kartikey <kartikey406(a)gmail.com> nilfs2: reject CLEAN_SEGMENTS ioctl with out-of-range segment numbers Tristan Madani <tristan(a)talencesecurity.com> hfs/hfsplus: zero-initialize buffer in hfs_bnode_read Srinivas Pandruvada <srinivas.pandruvada(a)linux.intel.com> HID: sensor-hub: Add sensor_hub_input_attr_read_values() for multi-byte reads Maoyi Xie <maoyixie.tju(a)gmail.com> HID: lg-g15: cancel pending work on remove to fix a use-after-free Manish Khadka <maskmemanish(a)gmail.com> HID: letsketch: fix UAF on inrange_timer at driver unbind Myeonghun Pak <mhun512(a)gmail.com> HID: wacom: stop hardware after post-start probe failures Yichong Chen <chenyichong(a)uniontech.com> tools/mm/slabinfo: fix total_objects attribute name Xuewen Wang <wangxuewen(a)kylinos.cn> tools/mm/slabinfo: Fix trace disable logic inversion Lukas Wunner <lukas(a)wunner.de> X.509: Fix validation of ASN.1 certificate header Kartik Rajput <kkartik(a)nvidia.com> clocksource/drivers/timer-tegra186: Fix support for multiple watchdog instances WenTao Liang <vulab(a)iscas.ac.cn> posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path Yuho Choi <dbgh9129(a)gmail.com> cpufreq: pcc: fix use-after-free and double free in _OSC evaluation Tianxiang Chen <nanmu(a)xiaomi.com> cpufreq: Fix hotplug-suspend race during reboot Steven Rostedt <rostedt(a)goodmis.org> sched/rt: Have RT_PUSH_IPI be default off for non PREEMPT_RT Fushuai Wang <wangfushuai(a)baidu.com> cpufreq: intel_pstate: Sync policy->cur during CPU offline Guangshuo Li <lgs201920130244(a)gmail.com> firmware_loader: fix device reference leak in firmware_upload_register() Abdun Nihaal <nihaal(a)cse.iitm.ac.in> OPP: of: Fix potential memory leak in opp_parse_supplies() Norbert Manthey <nmanthey(a)amazon.de> smb: client: mask server-provided mode to 07777 in modefromsid Zihan Xi <xizh2024(a)lzu.edu.cn> smb: client: harden POSIX SID length parsing Zihan Xi <xizh2024(a)lzu.edu.cn> smb: client: use unaligned reads in parse_posix_ctxt() Haoxiang Li <haoxiang_li2024(a)163.com> smb: client: Fix next buffer leak in receive_encrypted_standard() Henrique Carvalho <henrique.carvalho(a)suse.com> smb: client: fix double-free in SMB2_close() replay Henrique Carvalho <henrique.carvalho(a)suse.com> smb: client: fix double-free in SMB2_open() replay Zhao Zhang <zzhan461(a)ucr.edu> smb: client: fix double-free in SMB2_flush() replay Henrique Carvalho <henrique.carvalho(a)suse.com> smb: client: fix change notify replay double-free Henrique Carvalho <henrique.carvalho(a)suse.com> smb: client: fix double-free in SMB2_ioctl() replay Henrique Carvalho <henrique.carvalho(a)suse.com> smb: client: fix query_info() replay double-free Henrique Carvalho <henrique.carvalho(a)suse.com> smb: client: fix query directory replay double-free Namjae Jeon <linkinjeon(a)kernel.org> ksmbd: use opener credentials for delete-on-close Gil Portnoy <dddhkts1(a)gmail.com> ksmbd: add per-handle permission check to FILE_LINK_INFORMATION Gil Portnoy <dddhkts1(a)gmail.com> ksmbd: enforce FILE_READ_ATTRIBUTES on SMB_FIND_FILE_POSIX_INFORMATION Namjae Jeon <linkinjeon(a)kernel.org> ksmbd: run set info with opener credentials Gil Portnoy <dddhkts1(a)gmail.com> ksmbd: add a WRITE_DAC/WRITE_OWNER check to SMB2 SET_INFO SECURITY Namjae Jeon <linkinjeon(a)kernel.org> ksmbd: require source read access for duplicate extents Davide Ornaghi <d.ornaghi97(a)gmail.com> ksmbd: fix UAF of struct file_lock in SMB2_LOCK deferred-lock cancellation Namjae Jeon <linkinjeon(a)kernel.org> ksmbd: serialize QUERY_DIRECTORY requests per file Gil Portnoy <dddhkts1(a)gmail.com> ksmbd: add a permission check for FSCTL_SET_ZERO_DATA Gil Portnoy <dddhkts1(a)gmail.com> ksmbd: add permission checks for FSCTL_DUPLICATE_EXTENTS_TO_FILE Dan Carpenter <error27(a)gmail.com> smb/client: Fix error code in smb2_aead_req_alloc() Junrui Luo <moonafterrain(a)outlook.com> coresight: ultrasoc-smb: Fix OOB write in smb_sync_perf_buffer() Deepanshu Kartikey <kartikey406(a)gmail.com> fs/ntfs3: fix missing run load for vcn0 in attr_data_get_block_locked() Konstantin Komarov <almaz.alexandrovich(a)paragon-software.com> fs/ntfs3: zero-fill folios beyond i_valid in ntfs_read_folio() Konstantin Komarov <almaz.alexandrovich(a)paragon-software.com> fs/ntfs3: handle attr_set_size() errors when truncating files Konstantin Komarov <almaz.alexandrovich(a)paragon-software.com> fs/ntfs3: fsync files by syncing parent inodes Muhammad Bilal <meatuni001(a)gmail.com> Bluetooth: L2CAP: validate option length before reading conf opt value Yousef Alhouseen <alhouseenyousef(a)gmail.com> Bluetooth: fix UAF in bt_accept_dequeue() Maoyi Xie <maoyixie.tju(a)gmail.com> Bluetooth: btnxpuart: Fix out-of-bounds firmware read in nxp_recv_fw_req_v3() Yousef Alhouseen <alhouseenyousef(a)gmail.com> Bluetooth: bnep: pin L2CAP connection during netdev registration Sergey Senozhatsky <senozhatsky(a)chromium.org> Bluetooth: btmtksdio: fix infinite loop in btmtksdio_txrx_work() Xiang Mei <xmei5(a)asu.edu> netfilter: ebtables: terminate table name before find_table_lock() Florian Westphal <fw(a)strlen.de> netfilter: ebtables: module names must be null-terminated Pratham Gupta <pratham36gupta(a)gmail.com> netfilter: ctnetlink: use nf_ct_exp_net() in expectation dump Qi Zheng <zhengqi.arch(a)bytedance.com> mm: shrinker: fix NULL pointer dereference in debugfs Andrei Kuchynski <akuchynski(a)chromium.org> mfd: cros_ec: Delay dev_set_drvdata() until probe success Wyatt Feng <bronzed_45_vested(a)icloud.com> net: ipv4: bound TCP reordering sysctl writes and MTU probe sizes Yuyang Huang <yuyanghuang(a)google.com> ipv4: igmp: remove multicast group from hash table on device destruction Runyu Xiao <runyu.xiao(a)seu.edu.cn> io_uring/io-wq: re-check IO_WQ_BIT_EXIT for each linked work item Runyu Xiao <runyu.xiao(a)seu.edu.cn> gpio: eic-sprd: use raw_spinlock_t in the irq startup path Koichiro Den <den(a)valinux.co.jp> NTB: epf: Avoid calling pci_irq_vector() from hardirq context Yunpeng Tian <shionthanatos(a)gmail.com> fs/ntfs3: validate Dirty Page Table capacity in log_replay copy_lcns Thomas Gleixner <tglx(a)kernel.org> debugobjects: Plug race against a concurrent OOM disable Samuel Page <sam(a)bynar.io> Bluetooth: MGMT: Fix UAF of hci_conn_params in add_device_complete Chi Wang <wangchi(a)kylinos.cn> audit: Fix data races of skb_queue_len() readers on audit_queue Zijing Yin <yzjaurora(a)gmail.com> net: af_key: initialize alg_key_len for IPComp states Gil Portnoy <dddhkts1(a)gmail.com> ksmbd: fix use-after-free of a deferred file_lock on SMB2_CLOSE then SMB2_CANCEL Dawei Feng <dawei.feng(a)seu.edu.cn> crypto: amlogic - avoid double cleanup in meson_crypto_probe() Alexandru Hossu <hossu.alexandru(a)gmail.com> staging: rtl8723bs: fix OOB write in HT_caps_handler() Alexandru Hossu <hossu.alexandru(a)gmail.com> staging: rtl8723bs: fix OOB reads in is_ap_in_tkip() IE loop Alexandru Hossu <hossu.alexandru(a)gmail.com> staging: rtl8723bs: fix OOB reads in IE loops in issue_assocreq() and join_cmd_hdl() Alexandru Hossu <hossu.alexandru(a)gmail.com> staging: rtl8723bs: fix OOB read in update_beacon_info() IE loop Alexandru Hossu <hossu.alexandru(a)gmail.com> staging: rtl8723bs: fix OOB read in OnAssocRsp() IE loop Alexandru Hossu <hossu.alexandru(a)gmail.com> staging: rtl8723bs: fix WEP length underflow and OOB read in OnAuth() Alexandru Hossu <hossu.alexandru(a)gmail.com> staging: rtl8723bs: fix heap buffer overflow in rtw_cfg80211_set_wpa_ie() Arnd Bergmann <arnd(a)arndb.de> staging: media: atomisp: reduce load_primary_binaries() stack usage Ricardo Ribalda <ribalda(a)chromium.org> media: staging: ipu3-imgu: Add range check for imgu_css_cfg_acc_stripe Hao-Qun Huang <alvinhuang0603(a)gmail.com> staging: vme_user: fix location monitor leak in tsi148 bridge Hao-Qun Huang <alvinhuang0603(a)gmail.com> staging: vme_user: fix location monitor leak in fake bridge Shoichiro Miyamoto <shoichiro.miyamoto(a)gmail.com> smb: client: restrict implied bcc[0] exemption to responses without data area Michael Tautschnig <tautschn(a)amazon.com> staging: vme_user: bound slave read/write to the kern_buf size Samuel Page <sam(a)bynar.io> tipc: fix out-of-bounds read in broadcast Gap ACK blocks Yizhou Zhao <zhaoyz24(a)mails.tsinghua.edu.cn> 6lowpan: fix NHC entry use-after-free on error path Runyu Xiao <runyu.xiao(a)seu.edu.cn> usb: dwc3: run gadget disconnect from sleepable suspend context Alan Stern <stern(a)rowland.harvard.edu> USB: chaoskey: Fix slab-use-after-free in chaoskey_release() Michael Bommarito <michael.bommarito(a)gmail.com> hwrng: virtio: clamp device-reported used.len at copy_data() Johan Hovold <johan(a)kernel.org> virtio-mmio: fix device release warning on module unload Xiang Mei <xmei5(a)asu.edu> netfilter: ipset: fix race between dump and ip_set_list resize SeongJae Park <sj(a)kernel.org> mm/damon/ops-common: handle extreme intervals in damon_hot_score() Ratheesh Kannoth <rkannoth(a)marvell.com> PCI: host-common: Request bus reassignment when not probe-only Mahesh Vaidya <mahesh.vaidya(a)altera.com> PCI: altera: Do not dispose parent IRQ mapping Myeonghun Pak <mhun512(a)gmail.com> usb: typec: tcpci_rt1711h: unregister TCPCI port with devres 胡连勤 <hulianqin(a)vivo.com> usb: xhci: Fix sleep in atomic context in xhci_free_streams() Carlos Llamas <cmllamas(a)google.com> binder: fix UAF in binder_free_transaction() Carlos Llamas <cmllamas(a)google.com> binder: fix UAF in binder_thread_release() Johan Hovold <johan(a)kernel.org> Bluetooth: btusb: fix wakeup source leak on probe failure Johan Hovold <johan(a)kernel.org> Bluetooth: btusb: fix use-after-free on marvell probe failure Johan Hovold <johan(a)kernel.org> Bluetooth: btusb: fix use-after-free on registration failure Zenm Chen <zenmchen(a)gmail.com> Bluetooth: btusb: Add USB ID 2c4e:0128 for Mercusys MA60XNB Junrui Luo <moonafterrain(a)outlook.com> vfio: prevent infinite loop in vfio_mig_get_next_state() on blocked arc Alex Williamson <alex.williamson(a)nvidia.com> vfio/pci: Fix racy bitfields and tighten struct layout Alex Williamson <alex.williamson(a)nvidia.com> vfio/pci: Release the VGA arbiter client on register_device() failure Alex Williamson <alex.williamson(a)nvidia.com> vfio/pci: Latch disable_idle_d3 per device Raghavendra Rao Ananta <rananta(a)google.com> vfio/pci: Use a private flag to prevent power state change with VFs Cássio Gabriel <cassiogabrielcontato(a)gmail.com> ALSA: usb-audio: Update US-16x08 EQ/comp shadow state after successful writes Cássio Gabriel <cassiogabrielcontato(a)gmail.com> ALSA: usb-audio: Update Babyface Pro control caches only after successful writes Cássio Gabriel <cassiogabrielcontato(a)gmail.com> ALSA: usb-audio: Roll back quirk control caches on write errors Cássio Gabriel <cassiogabrielcontato(a)gmail.com> ALSA: usb-audio: Propagate US-16x08 write errors in route/mix EQ-switch put callbacks Cássio Gabriel <cassiogabrielcontato(a)gmail.com> ALSA: usb-audio: Propagate errors in scarlett_ctl_enum_put() Darvell Long <contact(a)darvell.me> ALSA: usb-audio: avoid kobject path lookup in DualSense match HyeongJun An <sammiee5311(a)gmail.com> ALSA: seq: Fix uninitialised heap leak in snd_seq_event_dup() Zhao Dongdong <zhaodongdong(a)kylinos.cn> ALSA: ice1712: check snd_ctl_new1() return value Zhao Dongdong <zhaodongdong(a)kylinos.cn> ALSA: gus: check snd_ctl_new1() return value Maoyi Xie <maoyixie.tju(a)gmail.com> ALSA: firewire: isight: bound the sample count to the packet payload Zhao Dongdong <zhaodongdong(a)kylinos.cn> ALSA: es1938: check snd_ctl_new1() return value Zhao Dongdong <zhaodongdong(a)kylinos.cn> ALSA: cmipci: check snd_ctl_new1() return value Maoyi Xie <maoyixie.tju(a)gmail.com> ALSA: caiaq: fix out-of-bounds read in the Traktor Kontrol S4 input parser Zhao Dongdong <zhaodongdong(a)kylinos.cn> ALSA: ymfpci: check snd_ctl_new1() return value Cássio Gabriel <cassiogabrielcontato(a)gmail.com> ALSA: virtio: Add missing 384 kHz PCM rate mapping Liviu Stan <liviu.stan(a)analog.com> iio: temperature: ltc2983: Fix reinit_completion() called after conversion start Andy Shevchenko <andriy.shevchenko(a)linux.intel.com> iio: magnetometer: ak8975: Add missed pm_runtime_put_autosuspend() call Javier Carrasco <javier.carrasco.cruz(a)gmail.com> iio: light: veml6030: fix channel type when pushing events Stepan Ionichev <sozdayvek(a)gmail.com> iio: light: tsl2591: return actual error from probe IRQ failure Joshua Crofts <joshua.crofts1(a)gmail.com> iio: light: opt3001: fix missing state reset on timeout Biren Pandya <birenpandya(a)gmail.com> iio: light: gp2ap002: fix runtime PM leak on read error Vidhu Sarwal <vidhu.linux(a)gmail.com> iio: light: al3010: fix incorrect scale for the highest gain range Andreas Kempe <andreas.kempe(a)actia.se> iio: imu: st_lsm6dsx: deselect shub page before reading whoami Jean-Baptiste Maneyrol <jean-baptiste.maneyrol(a)tdk.com> iio: imu: inv_icm42600: fix timestamp clock period by using lower value Runyu Xiao <runyu.xiao(a)seu.edu.cn> iio: imu: bmi160: add IRQF_NO_THREAD to data-ready trigger IRQ Stepan Ionichev <sozdayvek(a)gmail.com> iio: gyro: bmg160: wait full startup time after mode change at probe Stepan Ionichev <sozdayvek(a)gmail.com> iio: gyro: bmg160: bail out when bandwidth/filter is not in table Lars-Peter Clausen <lars(a)metafoo.de> iio: event: Fix event FIFO reset race Maxwell Doose <m32285159(a)gmail.com> iio: chemical: scd30: Cleanup initializations and fix sign-extension bug Pengpeng Hou <pengpeng(a)iscas.ac.cn> iio: adc: ti-ads124s08: Return reset GPIO lookup errors Maxwell Doose <m32285159(a)gmail.com> iio: adc: spear: Initialize completion before requesting IRQ Maxwell Doose <m32285159(a)gmail.com> iio: adc: lpc32xx: Initialize completion before requesting IRQ Biren Pandya <birenpandya(a)gmail.com> iio: accel: kxsd9: fix runtime PM imbalance on write_raw() error Bryam Vargas <hexlabsecurity(a)proton.me> iio: accel: bmc150: clamp the device-reported FIFO frame count Griffin Kroah-Hartman <griffin(a)kroah.com> usb: gadget: function: rndis: add length check for header Griffin Kroah-Hartman <griffin(a)kroah.com> usb: gadget: function: rndis: add length check to response query Jonas Jelonek <jelonek.jonas(a)gmail.com> MIPS: smp: report dying CPU to RCU in stop_this_cpu() Sebastian Andrzej Siewior <bigeasy(a)linutronix.de> net: Drop the lock in skb_may_tx_timestamp() Huacai Chen <chenhuacai(a)kernel.org> LoongArch: Add PIO for early access before ACPI PCI root register Philo Lu <lulie(a)linux.alibaba.com> virtio_net: Support dynamic rss indirection table size Fuad Tabba <tabba(a)google.com> arm64: sysreg: Correct sign definitions for EIESB and DoubleLock Marc Zyngier <maz(a)kernel.org> arm64: Revamp HCR_EL2.E2H RES1 detection Ahmed Genidi <ahmed.genidi(a)arm.com> KVM: arm64: Initialize SCTLR_EL1 in __kvm_hyp_init_cpu() Mark Rutland <mark.rutland(a)arm.com> KVM: arm64: Initialize HCR_EL2.E2H early Marc Zyngier <maz(a)kernel.org> arm64: Fix early handling of FEAT_E2H0 not being implemented Marc Zyngier <maz(a)kernel.org> arm64: Treat HCR_EL2.E2H as RES1 when ID_AA64MMFR4_EL1.E2H0 is negative Marc Zyngier <maz(a)kernel.org> arm64: sysreg: Add layout for ID_AA64MMFR4_EL1 Paul Louvel <paul.louvel(a)bootlin.com> crypto: talitos - rename first/last to first_desc/last_desc Paul Louvel <paul.louvel(a)bootlin.com> crypto: talitos - fix SEC1 32k ahash request limitation Eric Biggers <ebiggers(a)google.com> crypto: talitos - stop using crypto_ahash::init Goetz Goerisch <ggoerisch(a)gmail.com> Revert "crypto: talitos - fix SEC1 32k ahash request limitation" Goetz Goerisch <ggoerisch(a)gmail.com> Revert "crypto: talitos - rename first/last to first_desc/last_desc" Taeyang Lee <0wn(a)theori.io> perf/core: Detach event groups during remove_on_exec Rafael J. Wysocki <rafael.j.wysocki(a)intel.com> ACPI: NFIT: core: Fix possible NULL pointer dereference Jeremy Linton <jeremy.linton(a)arm.com> ACPI: CPPC: Suppress UBSAN warning caused by field misuse Florian Fainelli <florian.fainelli(a)broadcom.com> perf trace beauty fcntl: Fix build with older kernel headers Claudia Draghicescu <claudia.rosu(a)nxp.com> Bluetooth: ISO: Copy BASE if service data matches EIR_BAA_SERVICE_UUID Darrick J. Wong <djwong(a)kernel.org> xfs: move ->iop_recover to xfs_defer_op_type Darrick J. Wong <djwong(a)kernel.org> xfs: use xfs_defer_finish_one to finish recovered work items Darrick J. Wong <djwong(a)kernel.org> xfs: dump the recovered xattri log item if corruption happens Darrick J. Wong <djwong(a)kernel.org> xfs: recreate work items when recovering intent items Jiayuan Chen <jiayuan.chen(a)shopee.com> mm/vmscan: flush deferred TLB before freeing large folios Jiayuan Chen <jiayuan.chen(a)shopee.com> team: fix header_ops type confusion with non-Ethernet ports Eric Dumazet <edumazet(a)google.com> bonding: prevent potential infinite loop in bond_header_parse() Jiayuan Chen <jiayuan.chen(a)shopee.com> bonding: fix type confusion in bond_setup_by_slave() Hangbin Liu <liuhangbin(a)gmail.com> bonding: fix xfrm offload feature setup on active-backup mode Hangbin Liu <liuhangbin(a)gmail.com> bonding: use common function to compute the features Hangbin Liu <liuhangbin(a)gmail.com> net: add a common function to compute features for upper devices Cosmin Ratiu <cratiu(a)nvidia.com> bonding: Correctly support GSO ESP offload Jianbo Liu <jianbol(a)nvidia.com> bonding: add ESP offload features when slaves support Daniel Borkmann <daniel(a)iogearbox.net> bonding: Fix initial {vlan,mpls}_feature set in bond_compute_features Daniel Borkmann <daniel(a)iogearbox.net> net, team, bonding: Add netdev_base_features helper Hangbin Liu <liuhangbin(a)gmail.com> net: team: rename team to team_core for linking NeilBrown <neil(a)brown.name> nfsd: change nfs4_client_to_reclaim() to allocate data NeilBrown <neilb(a)ownmail.net> nfsd: move name lookup out of nfsd4_list_rec_dir() John Johansen <john.johansen(a)canonical.com> apparmor: advertise the tcp fast open fix is applied Trond Myklebust <trond.myklebust(a)hammerspace.com> nfsd: Don't reset the write verifier on a commit EAGAIN Michael Bommarito <michael.bommarito(a)gmail.com> NFSv4/flexfiles: reject zero filehandle version count Mingyu Wang <25181214217(a)stu.xidian.edu.cn> fbdev: fbcon: fix out-of-bounds read in err_out of fbcon_do_set_font() Johan Hovold <johan(a)kernel.org> i2c: core: fix adapter registration race Johan Hovold <johan(a)kernel.org> i2c: core: fix adapter debugfs creation Johan Hovold <johan(a)kernel.org> i2c: core: fix NULL-deref on adapter registration failure Johan Hovold <johan(a)kernel.org> i2c: core: fix hang on adapter registration failure Johan Hovold <johan(a)kernel.org> i2c: core: fix irq domain leak on adapter registration failure Denis Arefev <arefev(a)swemel.ru> block: Avoid mounting the bdev pseudo-filesystem in userspace Sean Christopherson <seanjc(a)google.com> KVM: Replace guest-triggerable BUG_ON() in ioeventfd datamatch with get_unaligned() Keshav Verma <iganschel(a)gmail.com> f2fs: fix listxattr handling of corrupted xattr entries Chao Yu <chao(a)kernel.org> f2fs: fix potential deadlock in gc_merge path of f2fs_balance_fs() Ruipeng Qi <ruipengqi3(a)gmail.com> f2fs: fix potential deadlock in f2fs_balance_fs() Bryam Vargas <hexlabsecurity(a)proton.me> f2fs: bound i_inline_xattr_size for non-inline-xattr inodes Chao Yu <chao(a)kernel.org> f2fs: atomic: fix UAF issue on f2fs_inode_info.atomic_inode Wenjie Qi <qwjhust(a)gmail.com> f2fs: validate orphan inode entry count Bartosz Golaszewski <bartosz.golaszewski(a)oss.qualcomm.com> device property: initialize the remaining fields of fwnode_handle in fwnode_init() Maoyi Xie <maoyixie.tju(a)gmail.com> net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink Tiezhu Yang <yangtiezhu(a)loongson.cn> drm/amd: Fix set but not used warnings Bjorn Andersson <bjorn.andersson(a)oss.qualcomm.com> slimbus: qcom-ngd-ctrl: Register callbacks after creating the ngd Uwe Kleine-König <u.kleine-koenig(a)pengutronix.de> slimbus: Convert to platform remove callback returning void Bjorn Andersson <bjorn.andersson(a)oss.qualcomm.com> slimbus: qcom-ngd-ctrl: Correct PDR and SSR cleanup ownership Bjorn Andersson <bjorn.andersson(a)oss.qualcomm.com> slimbus: qcom-ngd-ctrl: Fix probe error path ordering Chris Lu <chris.lu(a)mediatek.com> Bluetooth: btmtk: Fix btmtk.c undefined reference build error Wentao Guan <guanwentao(a)uniontech.com> perf: Fix dangling cgroup pointer in cpuctx backport Kiryl Shutsemau <kas(a)kernel.org> userfaultfd: gate must_wait writability check on pte_present() Jiande Lu <jiande.lu(a)mediatek.com> Bluetooth: btmtk: Fix wait_on_bit_timeout interruption during shutdown Chris Lu <chris.lu(a)mediatek.com> Bluetooth: btmtk: Fix failed to send func ctrl for MediaTek devices. Chris Lu <chris.lu(a)mediatek.com> Bluetooth: btmtk: move btusb_mtk_[setup, shutdown] to btmtk.c Chris Lu <chris.lu(a)mediatek.com> Bluetooth: btusb: mediatek: return error for failed reg access Chris Lu <chris.lu(a)mediatek.com> Bluetooth: btusb: mediatek: remove the unnecessary goto tag Hao Qin <hao.qin(a)mediatek.com> Bluetooth: btusb: mediatek: add MT7922 subsystem reset Hao Qin <hao.qin(a)mediatek.com> Bluetooth: btusb: mediatek: reset the controller before downloading the fw Sean Wang <sean.wang(a)mediatek.com> Bluetooth: btmtk: apply the common btmtk_fw_get_filename Huacai Chen <chenhuacai(a)kernel.org> LoongArch: Report dying CPU to RCU in stop_this_cpu() Baokun Li <libaokun1(a)huawei.com> ext4: get rid of ppath in get_ext_path() Jeff Layton <jlayton(a)kernel.org> nfsd: reset write verifier on deferred writeback errors Chris Mason <clm(a)meta.com> nfsd: release layout stid on setlease failure Daniel Borkmann <daniel(a)iogearbox.net> bpf, arm64: Reject out-of-range B.cond targets ------------- Diffstat: Documentation/admin-guide/pm/cpufreq.rst | 6 +- Documentation/crypto/userspace-if.rst | 31 +- .../media/allwinner,sun4i-a10-video-engine.yaml | 10 + .../devicetree/bindings/net/renesas,ether.yaml | 3 +- .../pinctrl/nvidia,tegra234-pinmux-aon.yaml | 4 + .../bindings/pinctrl/nvidia,tegra234-pinmux.yaml | 4 + .../bindings/regulator/mt6359-regulator.yaml | 43 -- Documentation/driver-api/nvdimm/btt.rst | 5 +- Documentation/driver-api/pci/pci.rst | 3 + Documentation/filesystems/proc.rst | 14 +- Documentation/netlink/specs/handshake.yaml | 1 + Makefile | 4 +- arch/alpha/kernel/pci-sysfs.c | 13 +- arch/arm/boot/dts/ti/omap/am335x-sl50.dts | 4 +- arch/arm/configs/sunxi_defconfig | 1 - arch/arm/mach-imx/cpu-imx31.c | 9 +- arch/arm/mach-imx/mm-imx3.c | 2 + .../dts/freescale/imx8mp-tqma8mpql-mba8mpxl.dts | 3 + arch/arm64/boot/dts/freescale/imx8x-colibri.dtsi | 4 +- arch/arm64/boot/dts/mediatek/mt8192-asurada.dtsi | 2 +- arch/arm64/boot/dts/nvidia/tegra234.dtsi | 8 +- arch/arm64/boot/dts/qcom/sdm630.dtsi | 9 +- .../qcom/sdm845-db845c-navigation-mezzanine.dtso | 5 + arch/arm64/boot/dts/qcom/sm8450.dtsi | 8 +- arch/arm64/boot/dts/rockchip/rk3566-roc-pc.dts | 2 +- arch/arm64/boot/dts/rockchip/rk3568-nanopi-r5s.dts | 6 +- arch/arm64/include/asm/el2_setup.h | 56 +- arch/arm64/include/asm/kvm_hyp.h | 1 + arch/arm64/include/asm/pgtable.h | 14 +- arch/arm64/kernel/efi.c | 2 +- arch/arm64/kernel/entry-fpsimd.S | 16 +- arch/arm64/kernel/head.S | 20 +- arch/arm64/kernel/hw_breakpoint.c | 9 + arch/arm64/kernel/mte.c | 2 +- arch/arm64/kvm/arm.c | 2 + arch/arm64/kvm/guest.c | 2 +- arch/arm64/kvm/hyp/nvhe/hyp-init.S | 3 +- arch/arm64/kvm/hyp/nvhe/hyp-main.c | 12 + arch/arm64/kvm/hyp/nvhe/psci-relay.c | 3 + arch/arm64/kvm/vgic/vgic-its.c | 2 + arch/arm64/kvm/vgic/vgic.c | 11 +- arch/arm64/lib/insn.c | 2 + arch/arm64/mm/fault.c | 6 +- arch/arm64/mm/hugetlbpage.c | 18 +- arch/arm64/mm/kasan_init.c | 2 +- arch/arm64/mm/mmu.c | 23 +- arch/arm64/mm/pageattr.c | 4 +- arch/arm64/mm/trans_pgd.c | 2 +- arch/arm64/tools/sysreg | 39 +- arch/loongarch/include/asm/acpi.h | 2 + arch/loongarch/include/asm/pgtable.h | 4 + arch/loongarch/kernel/acpi.c | 28 + arch/loongarch/kernel/setup.c | 2 + arch/loongarch/kernel/smp.c | 1 + arch/loongarch/pci/acpi.c | 2 + arch/mips/dec/int-handler.S | 2 +- arch/mips/dec/platform.c | 6 +- arch/mips/dec/prom/init.c | 6 +- arch/mips/dec/setup.c | 6 - arch/mips/fw/lib/call_o32.S | 2 +- arch/mips/include/asm/dec/prom.h | 15 +- arch/mips/kernel/mips-mt-fpaff.c | 28 +- arch/mips/kernel/smp.c | 2 + arch/mips/mm/init.c | 12 +- arch/mips/n64/init.c | 2 +- arch/mips/ralink/mt7621.c | 2 +- arch/mips/sgi-ip22/ip22-gio.c | 7 +- arch/powerpc/kexec/core_64.c | 4 +- arch/powerpc/perf/core-fsl-emb.c | 3 +- arch/powerpc/platforms/cell/spufs/file.c | 6 +- arch/powerpc/platforms/powernv/setup.c | 3 +- .../platforms/pseries/papr_platform_attributes.c | 8 +- arch/riscv/kernel/cacheinfo.c | 2 +- arch/riscv/kernel/machine_kexec.c | 3 + arch/riscv/kernel/probes/rethook_trampoline.S | 3 + arch/riscv/kernel/stacktrace.c | 2 +- arch/riscv/net/bpf_jit_core.c | 3 +- arch/s390/kernel/perf_cpum_cf.c | 3 + arch/s390/kernel/process.c | 2 +- arch/s390/kvm/pci.c | 12 +- arch/sparc/kernel/led.c | 2 +- arch/x86/boot/compressed/acpi.c | 7 +- arch/x86/boot/early_serial_console.c | 11 +- arch/x86/events/amd/brs.c | 10 +- arch/x86/events/amd/core.c | 6 +- arch/x86/events/amd/lbr.c | 3 +- arch/x86/events/intel/uncore_snb.c | 7 - arch/x86/include/asm/nospec-branch.h | 4 + arch/x86/kernel/cpu/bugs.c | 50 +- arch/x86/kvm/lapic.c | 8 +- arch/x86/kvm/vmx/vmx.c | 38 +- arch/x86/mm/numa_emulation.c | 17 +- arch/x86/mm/tlb.c | 16 +- arch/x86/net/bpf_jit_comp.c | 3 +- arch/x86/platform/olpc/olpc-xo15-sci.c | 1 + block/bdev.c | 11 +- block/partitions/aix.c | 9 + crypto/af_alg.c | 69 +-- crypto/algif_aead.c | 8 +- crypto/algif_skcipher.c | 49 +- crypto/asymmetric_keys/verify_pefile.c | 2 + crypto/asymmetric_keys/x509_loader.c | 2 +- crypto/drbg.c | 4 +- crypto/ecc.c | 31 +- crypto/ecrdsa.c | 2 +- crypto/pcrypt.c | 4 + crypto/rng.c | 11 + drivers/acpi/acpi_ipmi.c | 4 +- drivers/acpi/acpi_tad.c | 6 +- drivers/acpi/bus.c | 70 +++ drivers/acpi/cppc_acpi.c | 11 +- drivers/acpi/nfit/core.c | 89 +++- drivers/acpi/pfr_telemetry.c | 6 +- drivers/acpi/pfr_update.c | 6 +- drivers/acpi/resource.c | 6 +- drivers/acpi/thermal.c | 2 +- drivers/android/binder.c | 19 +- drivers/ata/libata-core.c | 19 +- drivers/ata/pata_pxa.c | 1 + drivers/ata/sata_gemini.c | 2 +- drivers/base/dd.c | 7 +- drivers/base/firmware_loader/main.c | 3 +- drivers/base/firmware_loader/sysfs_upload.c | 8 +- drivers/base/power/main.c | 6 +- drivers/base/property.c | 4 +- drivers/block/drbd/drbd_receiver.c | 5 + drivers/bluetooth/Kconfig | 2 + drivers/bluetooth/bpa10x.c | 8 +- drivers/bluetooth/btmtk.c | 470 ++++++++++++++++- drivers/bluetooth/btmtk.h | 23 +- drivers/bluetooth/btmtksdio.c | 5 +- drivers/bluetooth/btnxpuart.c | 6 + drivers/bluetooth/btrtl.c | 5 +- drivers/bluetooth/btusb.c | 418 ++------------- drivers/bluetooth/hci_qca.c | 2 +- drivers/bluetooth/hci_vhci.c | 10 + drivers/bus/imx-weim.c | 6 - drivers/bus/mhi/ep/main.c | 9 +- drivers/bus/sunxi-rsb.c | 3 + drivers/char/hw_random/jh7110-trng.c | 13 +- drivers/char/hw_random/virtio-rng.c | 23 +- drivers/char/tlclk.c | 4 + drivers/char/tpm/eventlog/tpm1.c | 4 +- drivers/char/tpm/tpm-dev.c | 2 +- drivers/char/tpm/tpm_tis_core.c | 35 +- drivers/char/tpm/tpmrm-dev.c | 2 +- drivers/clk/at91/pmc.c | 2 +- drivers/clk/clk-scmi.c | 4 +- drivers/clk/clk-scpi.c | 2 +- drivers/clk/qcom/a53-pll.c | 2 +- drivers/clocksource/timer-sun5i.c | 3 + drivers/clocksource/timer-tegra186.c | 3 +- drivers/cpufreq/acpi-cpufreq.c | 4 +- drivers/cpufreq/amd-pstate.c | 7 +- drivers/cpufreq/apple-soc-cpufreq.c | 4 +- drivers/cpufreq/bmips-cpufreq.c | 4 +- drivers/cpufreq/cppc_cpufreq.c | 3 +- drivers/cpufreq/cpufreq-dt.c | 3 +- drivers/cpufreq/cpufreq.c | 2 + drivers/cpufreq/cpufreq_conservative.c | 12 +- drivers/cpufreq/e_powersaver.c | 3 +- drivers/cpufreq/intel_pstate.c | 14 +- drivers/cpufreq/mediatek-cpufreq-hw.c | 4 +- drivers/cpufreq/mediatek-cpufreq.c | 4 +- drivers/cpufreq/omap-cpufreq.c | 3 +- drivers/cpufreq/pasemi-cpufreq.c | 6 +- drivers/cpufreq/pcc-cpufreq.c | 8 +- drivers/cpufreq/powernow-k6.c | 5 +- drivers/cpufreq/powernow-k7.c | 3 +- drivers/cpufreq/powernow-k8.c | 6 +- drivers/cpufreq/powernv-cpufreq.c | 4 +- drivers/cpufreq/ppc_cbe_cpufreq.c | 3 +- drivers/cpufreq/qcom-cpufreq-hw.c | 5 +- drivers/cpufreq/qoriq-cpufreq.c | 4 +- drivers/cpufreq/scmi-cpufreq.c | 4 +- drivers/cpufreq/scpi-cpufreq.c | 4 +- drivers/cpufreq/sh-cpufreq.c | 4 +- drivers/cpufreq/sparc-us2e-cpufreq.c | 3 +- drivers/cpufreq/sparc-us3-cpufreq.c | 3 +- drivers/cpufreq/speedstep-centrino.c | 10 +- drivers/cpufreq/tegra194-cpufreq.c | 4 +- drivers/cpufreq/vexpress-spc-cpufreq.c | 5 +- drivers/crypto/allwinner/Kconfig | 8 - drivers/crypto/allwinner/sun4i-ss/Makefile | 1 - drivers/crypto/allwinner/sun4i-ss/sun4i-ss-core.c | 36 -- drivers/crypto/allwinner/sun4i-ss/sun4i-ss-prng.c | 69 --- drivers/crypto/allwinner/sun4i-ss/sun4i-ss.h | 20 - drivers/crypto/amcc/crypto4xx_alg.c | 106 ---- drivers/crypto/amcc/crypto4xx_core.c | 130 +---- drivers/crypto/amcc/crypto4xx_core.h | 11 - drivers/crypto/amcc/crypto4xx_reg_def.h | 11 - drivers/crypto/amlogic/amlogic-gxl-core.c | 2 +- drivers/crypto/atmel-ecc.c | 2 +- drivers/crypto/atmel-sha204a.c | 29 +- drivers/crypto/caam/caamalg.c | 12 +- drivers/crypto/caam/caamalg_qi.c | 12 +- drivers/crypto/caam/caamalg_qi2.c | 12 +- drivers/crypto/caam/caamhash.c | 4 +- drivers/crypto/caam/key_gen.c | 4 +- drivers/crypto/cavium/cpt/cptvf_reqmanager.c | 4 +- drivers/crypto/ccp/sev-dev.c | 3 +- drivers/crypto/hisilicon/Kconfig | 1 - drivers/crypto/hisilicon/qm.c | 4 +- drivers/crypto/hisilicon/trng/trng.c | 298 +---------- .../intel/qat/qat_common/adf_accel_devices.h | 2 + drivers/crypto/intel/qat/qat_common/adf_aer.c | 7 +- .../crypto/intel/qat/qat_common/adf_common_drv.h | 2 + drivers/crypto/intel/qat/qat_common/adf_isr.c | 39 ++ drivers/crypto/intel/qat/qat_common/adf_sriov.c | 20 +- .../crypto/intel/qat/qat_common/qat_asym_algs.c | 10 +- drivers/crypto/marvell/octeontx/otx_cptvf_reqmgr.c | 4 +- drivers/crypto/talitos.c | 576 +++++++++++---------- drivers/crypto/talitos.h | 12 + drivers/dax/kmem.c | 6 + drivers/dma-buf/udmabuf.c | 5 +- drivers/dma/dmaengine.c | 3 +- drivers/dma/dw-edma/dw-edma-core.h | 2 +- drivers/dma/dw-edma/dw-edma-v0-core.c | 6 + drivers/dma/imx-sdma.c | 4 +- drivers/dma/qcom/gpi.c | 1 + drivers/dma/tegra186-gpc-dma.c | 7 + drivers/edac/i10nm_base.c | 14 +- drivers/edac/skx_common.c | 3 + drivers/firewire/net.c | 5 +- drivers/firmware/arm_scmi/power.c | 6 +- drivers/firmware/arm_scmi/sensors.c | 2 +- drivers/fpga/dfl.c | 2 + drivers/fpga/microchip-spi.c | 3 + drivers/gpio/gpio-eic-sprd.c | 8 +- drivers/gpio/gpio-f7188x.c | 6 +- drivers/gpio/gpio-htc-egpio.c | 6 +- drivers/gpio/gpio-mlxbf3.c | 3 +- drivers/gpio/gpio-mvebu.c | 5 +- drivers/gpio/gpio-palmas.c | 19 + drivers/gpio/gpio-sch.c | 32 +- drivers/gpio/gpio-timberdale.c | 2 +- drivers/gpu/drm/amd/amdgpu/amdgpu_amdkfd_gpuvm.c | 16 +- drivers/gpu/drm/amd/amdgpu/amdgpu_device.c | 6 +- drivers/gpu/drm/amd/amdgpu/amdgpu_gart.c | 4 +- drivers/gpu/drm/amd/amdgpu/amdgpu_gem.c | 25 +- drivers/gpu/drm/amd/amdgpu/amdgpu_irq.c | 2 - drivers/gpu/drm/amd/amdgpu/amdgpu_mca.c | 3 + drivers/gpu/drm/amd/amdgpu/amdgpu_vcn.h | 3 +- drivers/gpu/drm/amd/amdkfd/kfd_chardev.c | 3 + drivers/gpu/drm/amd/amdkfd/kfd_events.c | 5 + drivers/gpu/drm/amd/amdkfd/kfd_svm.c | 1 + drivers/gpu/drm/amd/display/dc/dc_dmub_srv.c | 11 +- .../amd/display/modules/info_packet/info_packet.c | 2 + drivers/gpu/drm/drm_edid.c | 8 + drivers/gpu/drm/hisilicon/hibmc/hibmc_drm_de.c | 78 +-- drivers/gpu/drm/hisilicon/hibmc/hibmc_drm_drv.c | 11 + drivers/gpu/drm/hisilicon/hibmc/hibmc_drm_vdac.c | 22 - drivers/gpu/drm/i915/gt/intel_region_lmem.c | 2 +- drivers/gpu/drm/msm/dp/dp_display.c | 4 +- drivers/gpu/drm/msm/dp/dp_reg.h | 4 +- .../gpu/drm/nouveau/nvkm/subdev/bios/shadowramin.c | 3 +- drivers/gpu/drm/radeon/radeon_gem.c | 13 +- drivers/gpu/drm/radeon/radeon_ring.c | 4 +- drivers/gpu/drm/rockchip/rockchip_drm_gem.c | 2 +- drivers/gpu/drm/tegra/dc.c | 4 +- drivers/gpu/drm/tegra/gem.c | 22 +- drivers/gpu/drm/tegra/gr2d.c | 19 +- drivers/gpu/drm/tegra/gr3d.c | 19 +- drivers/gpu/drm/tegra/submit.c | 3 +- drivers/gpu/drm/tidss/tidss_kms.c | 2 - drivers/gpu/host1x/bus.c | 62 ++- drivers/gpu/host1x/job.c | 10 +- drivers/hid/hid-appleir.c | 45 +- drivers/hid/hid-core.c | 7 + drivers/hid/hid-letsketch.c | 36 +- drivers/hid/hid-lg-g15.c | 16 + drivers/hid/hid-logitech-hidpp.c | 1 - drivers/hid/hid-multitouch.c | 32 +- drivers/hid/hid-picolcd_core.c | 3 +- drivers/hid/hid-playstation.c | 12 + drivers/hid/hid-sensor-hub.c | 77 ++- drivers/hid/hid-wiimote-modules.c | 58 +-- drivers/hid/wacom_sys.c | 12 +- drivers/hwmon/Kconfig | 1 + drivers/hwmon/asus_atk0110.c | 3 + drivers/hwmon/it87.c | 3 + drivers/hwmon/occ/common.c | 34 +- drivers/hwmon/occ/common.h | 1 + drivers/hwmon/pmbus/adm1275.c | 2 +- drivers/hwmon/pmbus/pmbus_core.c | 13 +- drivers/hwmon/w83627hf.c | 4 + drivers/hwmon/w83793.c | 1 + drivers/hwspinlock/qcom_hwspinlock.c | 5 +- .../hwtracing/coresight/coresight-cti-platform.c | 1 + drivers/hwtracing/coresight/coresight-etb10.c | 6 +- drivers/hwtracing/coresight/coresight-etm4x-core.c | 4 +- drivers/hwtracing/coresight/ultrasoc-smb.c | 1 + drivers/i2c/busses/i2c-mlxbf.c | 4 +- drivers/i2c/busses/i2c-mpc.c | 2 +- drivers/i2c/busses/i2c-mt65xx.c | 2 +- drivers/i2c/busses/i2c-stm32f7.c | 9 +- drivers/i2c/i2c-core-base.c | 85 +-- drivers/i2c/i2c-core-of.c | 5 - drivers/i3c/master.c | 19 +- drivers/iio/accel/bmc150-accel-core.c | 2 + drivers/iio/accel/kxsd9.c | 5 +- drivers/iio/accel/mma8452.c | 2 + drivers/iio/adc/lpc32xx_adc.c | 4 +- drivers/iio/adc/spear_adc.c | 3 +- drivers/iio/adc/ti-ads124s08.c | 3 +- drivers/iio/adc/xilinx-ams.c | 5 + drivers/iio/chemical/scd30_core.c | 19 +- .../iio/common/inv_sensors/inv_sensors_timestamp.c | 26 +- drivers/iio/common/st_sensors/st_sensors_core.c | 23 +- drivers/iio/gyro/bmg160_core.c | 16 +- drivers/iio/imu/adis_trigger.c | 2 +- drivers/iio/imu/bmi160/bmi160_core.c | 3 +- drivers/iio/imu/inv_icm42600/inv_icm42600_accel.c | 4 +- drivers/iio/imu/inv_icm42600/inv_icm42600_buffer.c | 44 +- drivers/iio/imu/inv_icm42600/inv_icm42600_buffer.h | 3 + drivers/iio/imu/inv_icm42600/inv_icm42600_core.c | 1 + drivers/iio/imu/inv_icm42600/inv_icm42600_gyro.c | 4 +- drivers/iio/imu/inv_mpu6050/inv_mpu_ring.c | 2 +- drivers/iio/imu/st_lsm6dsx/st_lsm6dsx_core.c | 21 +- drivers/iio/industrialio-event.c | 5 +- drivers/iio/light/al3010.c | 2 +- drivers/iio/light/gp2ap002.c | 2 +- drivers/iio/light/opt3001.c | 6 +- drivers/iio/light/si1133.c | 14 +- drivers/iio/light/tcs3472.c | 38 +- drivers/iio/light/tsl2591.c | 6 +- drivers/iio/light/veml6030.c | 8 +- drivers/iio/magnetometer/ak8975.c | 15 + drivers/iio/orientation/hid-sensor-rotation.c | 40 +- drivers/iio/pressure/mpl115.c | 8 +- drivers/iio/temperature/ltc2983.c | 5 +- drivers/infiniband/core/cm.c | 13 +- drivers/infiniband/core/counters.c | 2 +- drivers/infiniband/hw/hns/hns_roce_hem.c | 8 +- drivers/infiniband/hw/hns/hns_roce_main.c | 2 +- drivers/infiniband/hw/irdma/verbs.c | 19 +- drivers/infiniband/hw/irdma/verbs.h | 1 - drivers/infiniband/hw/mlx4/mlx4_ib.h | 1 + drivers/infiniband/hw/mlx4/mr.c | 9 +- drivers/infiniband/hw/mlx4/sysfs.c | 45 +- drivers/infiniband/hw/mlx5/devx.c | 30 +- drivers/infiniband/hw/mlx5/main.c | 17 +- drivers/infiniband/hw/mlx5/mr.c | 17 +- drivers/infiniband/hw/mlx5/qp.c | 12 +- drivers/infiniband/sw/rxe/rxe_mmap.c | 19 +- drivers/infiniband/sw/rxe/rxe_resp.c | 33 +- drivers/infiniband/sw/siw/siw_qp_rx.c | 9 + drivers/infiniband/ulp/rtrs/rtrs-srv.c | 5 +- drivers/infiniband/ulp/srpt/ib_srpt.c | 5 +- drivers/input/joystick/iforce/iforce-packets.c | 18 +- drivers/input/joystick/maplecontrol.c | 3 +- drivers/input/keyboard/maple_keyb.c | 4 +- drivers/input/misc/ims-pcu.c | 117 ++++- drivers/input/mouse/elan_i2c_core.c | 36 +- drivers/input/mouse/maplemouse.c | 9 +- drivers/input/rmi4/rmi_bus.c | 4 +- drivers/input/rmi4/rmi_f30.c | 2 +- drivers/input/rmi4/rmi_f3a.c | 2 +- drivers/input/touchscreen/goodix.c | 3 +- drivers/input/touchscreen/mms114.c | 26 +- drivers/input/touchscreen/touchwin.c | 15 +- drivers/iommu/amd/amd_iommu_types.h | 11 +- drivers/irqchip/irq-crossbar.c | 10 +- drivers/irqchip/irq-gic-v3-its.c | 6 +- drivers/irqchip/irq-ts4800.c | 10 + drivers/leds/uleds.c | 3 +- drivers/mailbox/mtk-adsp-mailbox.c | 9 +- drivers/md/dm-bufio.c | 4 +- drivers/md/dm-era-target.c | 10 +- drivers/md/dm-integrity.c | 3 - drivers/md/dm-ioctl.c | 9 +- drivers/md/dm-log.c | 3 + drivers/md/dm-stats.c | 10 +- drivers/md/dm-thin-metadata.c | 67 +-- drivers/md/dm-verity-loadpin.c | 2 +- drivers/md/dm-verity-target.c | 2 +- drivers/md/raid1.c | 6 + drivers/md/raid10.c | 1 + .../media/platform/mediatek/jpeg/mtk_jpeg_core.c | 3 +- .../media/platform/nxp/imx8-isi/imx8-isi-core.c | 24 +- drivers/media/platform/qcom/venus/helpers.c | 4 +- .../media/platform/qcom/venus/hfi_platform_v4.c | 20 +- .../media/platform/qcom/venus/hfi_platform_v6.c | 16 +- drivers/media/platform/rockchip/rga/rga-hw.c | 2 +- drivers/media/platform/rockchip/rga/rga-hw.h | 2 +- drivers/media/usb/uvc/uvc_video.c | 122 +++-- drivers/media/v4l2-core/v4l2-common.c | 1 + drivers/memstick/core/ms_block.c | 4 + drivers/mfd/cros_ec_dev.c | 3 +- drivers/mfd/cs42l43.c | 2 +- drivers/mfd/sm501.c | 4 +- drivers/mfd/tps6586x.c | 2 +- drivers/mmc/host/vub300.c | 26 +- drivers/mtd/devices/mchp23k256.c | 2 +- drivers/mtd/devices/slram.c | 22 +- drivers/mtd/maps/vmu-flash.c | 1 + drivers/mtd/nand/onenand/onenand_samsung.c | 7 +- drivers/mtd/nand/raw/fsl_ifc_nand.c | 9 +- drivers/mtd/nand/raw/lpc32xx_mlc.c | 12 +- drivers/mtd/nand/raw/lpc32xx_slc.c | 12 +- drivers/mtd/nand/raw/nand_base.c | 2 +- drivers/mtd/nand/raw/pl35x-nand-controller.c | 2 +- drivers/mtd/spi-nor/Kconfig | 1 - drivers/mtd/spi-nor/swp.c | 11 +- drivers/net/amt.c | 6 +- drivers/net/bonding/bond_3ad.c | 1 + drivers/net/bonding/bond_main.c | 133 ++--- drivers/net/bonding/bond_netlink.c | 16 +- drivers/net/can/usb/esd_usb.c | 5 +- drivers/net/dsa/sja1105/sja1105_ptp.c | 2 +- drivers/net/ethernet/amazon/ena/ena_netdev.c | 23 +- drivers/net/ethernet/broadcom/bnx2x/bnx2x_cmn.c | 3 +- drivers/net/ethernet/broadcom/genet/bcmgenet.c | 23 +- .../ethernet/cavium/liquidio/cn23xx_pf_device.c | 18 +- drivers/net/ethernet/chelsio/cxgb4/t4_hw.c | 8 - .../net/ethernet/freescale/dpaa2/dpaa2-switch.c | 2 +- drivers/net/ethernet/freescale/enetc/enetc.c | 7 + drivers/net/ethernet/freescale/fman/fman.c | 4 +- drivers/net/ethernet/freescale/gianfar.c | 16 +- drivers/net/ethernet/intel/i40e/i40e_debug.h | 2 +- drivers/net/ethernet/intel/ice/ice_common.c | 1 - drivers/net/ethernet/intel/ice/ice_ethtool.c | 12 +- drivers/net/ethernet/intel/ice/ice_main.c | 16 +- drivers/net/ethernet/intel/ice/ice_vf_lib.c | 2 +- drivers/net/ethernet/marvell/mvneta.c | 3 + drivers/net/ethernet/marvell/octeontx2/af/mcs.c | 6 +- .../ethernet/marvell/octeontx2/af/rvu_debugfs.c | 3 +- .../net/ethernet/marvell/octeontx2/af/rvu_nix.c | 4 +- .../ethernet/marvell/octeontx2/nic/cn10k_macsec.c | 10 +- .../net/ethernet/marvell/octeontx2/nic/otx2_pf.c | 44 +- .../net/ethernet/marvell/prestera/prestera_main.c | 2 +- drivers/net/ethernet/mediatek/mtk_ppe.c | 4 +- .../ethernet/mellanox/mlx5/core/en/hv_vhca_stats.c | 29 +- .../ethernet/mellanox/mlx5/core/en_accel/macsec.c | 47 +- .../net/ethernet/mellanox/mlx5/core/lib/hv_vhca.c | 8 +- .../net/ethernet/mellanox/mlx5/core/lib/hv_vhca.h | 6 +- .../net/ethernet/mellanox/mlx5/core/lib/port_tun.c | 3 +- drivers/net/ethernet/mellanox/mlx5/core/main.c | 12 +- drivers/net/ethernet/mellanox/mlxsw/spectrum.c | 2 +- .../net/ethernet/mellanox/mlxsw/spectrum_router.c | 1 + drivers/net/ethernet/microchip/lan743x_main.c | 2 +- .../ethernet/microchip/lan966x/lan966x_vcap_impl.c | 5 +- .../ethernet/microchip/sparx5/sparx5_switchdev.c | 4 +- .../ethernet/microchip/sparx5/sparx5_vcap_impl.c | 5 +- drivers/net/ethernet/microchip/vcap/vcap_api.c | 72 +-- drivers/net/ethernet/microchip/vcap/vcap_api.h | 3 +- .../net/ethernet/microchip/vcap/vcap_api_debugfs.c | 8 +- .../microchip/vcap/vcap_api_debugfs_kunit.c | 3 +- .../net/ethernet/microchip/vcap/vcap_api_kunit.c | 3 +- .../net/ethernet/microchip/vcap/vcap_api_private.h | 3 + drivers/net/ethernet/microsoft/mana/gdma_main.c | 2 + drivers/net/ethernet/microsoft/mana/mana_en.c | 3 +- .../net/ethernet/pensando/ionic/ionic_ethtool.c | 11 +- drivers/net/ethernet/qlogic/qede/qede_fp.c | 9 +- .../net/ethernet/qualcomm/rmnet/rmnet_handlers.c | 5 +- drivers/net/ethernet/qualcomm/rmnet/rmnet_map.h | 1 + .../net/ethernet/qualcomm/rmnet/rmnet_map_data.c | 78 +-- drivers/net/ethernet/sun/sungem.c | 13 +- drivers/net/ethernet/sunplus/spl2sw_phy.c | 6 +- drivers/net/ieee802154/ca8210.c | 9 +- drivers/net/macsec.c | 9 +- drivers/net/phy/sfp.c | 1 + drivers/net/team/Makefile | 1 + drivers/net/team/{team.c => team_core.c} | 68 ++- drivers/net/thunderbolt/main.c | 8 +- drivers/net/usb/gl620a.c | 6 +- drivers/net/usb/kalmia.c | 8 + drivers/net/usb/lan78xx.c | 318 ++++++------ drivers/net/usb/net1080.c | 2 +- drivers/net/veth.c | 2 + drivers/net/virtio_net.c | 55 +- drivers/net/vxlan/vxlan_core.c | 8 +- drivers/net/wan/ixp4xx_hss.c | 4 +- drivers/net/wireless/ath/ath9k/xmit.c | 5 + drivers/net/wireless/ath/wcn36xx/smd.c | 13 + drivers/net/wireless/cisco/airo.c | 4 +- drivers/net/wireless/intersil/hostap/hostap_main.c | 1 + drivers/net/wireless/marvell/mwifiex/join.c | 1 - drivers/net/wireless/mediatek/mt76/mac80211.c | 2 +- drivers/net/wireless/mediatek/mt76/mt7915/mac.c | 10 +- drivers/net/wireless/mediatek/mt76/mt7921/mac.c | 5 +- drivers/net/wireless/ralink/rt2x00/rt2x00dev.c | 12 +- drivers/net/wireless/realtek/rtw88/pci.c | 5 + drivers/net/wireless/realtek/rtw89/fw.c | 2 +- drivers/net/wwan/iosm/iosm_ipc_mux_codec.c | 40 +- drivers/net/wwan/t7xx/t7xx_hif_cldma.c | 3 + drivers/net/wwan/t7xx/t7xx_port_wwan.c | 2 + drivers/ntb/hw/epf/ntb_hw_epf.c | 89 ++-- drivers/nvdimm/btt.c | 14 +- drivers/nvdimm/nd.h | 11 +- drivers/nvdimm/region_devs.c | 66 +-- drivers/nvme/host/core.c | 2 +- drivers/nvme/host/multipath.c | 6 + drivers/nvme/target/auth.c | 20 +- drivers/nvme/target/fabrics-cmd-auth.c | 60 ++- drivers/nvme/target/fabrics-cmd.c | 15 +- drivers/nvme/target/nvmet.h | 8 +- drivers/nvme/target/rdma.c | 18 +- drivers/nvme/target/tcp.c | 5 +- drivers/of/cpu.c | 2 +- drivers/of/dynamic.c | 1 - drivers/of/platform.c | 5 - drivers/opp/of.c | 3 +- drivers/pci/Makefile | 2 +- drivers/pci/controller/dwc/pci-imx6.c | 4 +- drivers/pci/controller/dwc/pci-meson.c | 4 +- drivers/pci/controller/dwc/pcie-designware-host.c | 2 +- .../pci/controller/mobiveil/pcie-mobiveil-host.c | 8 +- drivers/pci/controller/pci-host-common.c | 4 + drivers/pci/controller/pci-loongson.c | 31 +- drivers/pci/controller/pcie-altera-msi.c | 2 +- drivers/pci/controller/pcie-altera.c | 32 +- drivers/pci/controller/pcie-iproc-bcma.c | 2 +- drivers/pci/controller/pcie-iproc-platform.c | 2 +- drivers/pci/controller/pcie-iproc.c | 1 - drivers/pci/controller/pcie-iproc.h | 2 - drivers/pci/controller/pcie-mediatek-gen3.c | 4 +- drivers/pci/controller/pcie-mediatek.c | 132 +++-- drivers/pci/controller/pcie-rcar-host.c | 1 - drivers/pci/controller/pcie-xilinx-nwl.c | 2 +- drivers/pci/endpoint/functions/pci-epf-ntb.c | 21 +- drivers/pci/endpoint/functions/pci-epf-vntb.c | 9 +- drivers/pci/msi/msi.c | 4 +- drivers/pci/pci-sysfs.c | 14 +- drivers/pci/pci.c | 139 ----- drivers/pci/pci.h | 4 + drivers/pci/quirks.c | 51 +- drivers/pci/rebar.c | 218 ++++++++ drivers/pci/rom.c | 149 +++++- drivers/pci/setup-bus.c | 104 ++-- drivers/pci/setup-res.c | 53 -- drivers/phy/phy-can-transceiver.c | 3 + drivers/pinctrl/cirrus/pinctrl-cs42l43.c | 2 +- drivers/pinctrl/mediatek/pinctrl-mt8167.c | 2 +- drivers/pinctrl/mediatek/pinctrl-mt8516.c | 2 +- drivers/pinctrl/meson/pinctrl-meson.c | 2 +- drivers/pinctrl/sunxi/pinctrl-sunxi.c | 2 +- drivers/platform/x86/amd/pmc/pmc-quirks.c | 39 ++ drivers/platform/x86/amd/pmc/pmc.c | 60 ++- drivers/platform/x86/amd/pmc/pmc.h | 1 + drivers/platform/x86/xo15-ebook.c | 7 +- drivers/pmdomain/imx/imx8m-blk-ctrl.c | 46 +- drivers/power/supply/charger-manager.c | 6 +- drivers/power/supply/cpcap-battery.c | 11 +- drivers/power/supply/power_supply_core.c | 11 +- drivers/pwm/pwm-imx27.c | 8 +- drivers/rapidio/devices/tsi721.c | 3 +- drivers/regulator/core.c | 4 +- drivers/regulator/ltc3676.c | 10 +- drivers/regulator/scmi-regulator.c | 6 +- drivers/remoteproc/qcom_common.c | 14 +- drivers/reset/reset-imx7.c | 6 + drivers/reset/reset-sunxi.c | 4 +- drivers/rpmsg/qcom_glink_native.c | 2 - drivers/rpmsg/rpmsg_core.c | 43 +- drivers/rpmsg/virtio_rpmsg_bus.c | 1 - drivers/rtc/rtc-abx80x.c | 3 +- drivers/rtc/rtc-cmos.c | 6 + drivers/rtc/rtc-ds1307.c | 30 +- drivers/rtc/rtc-mpfs.c | 2 +- drivers/rtc/rtc-msc313.c | 4 +- drivers/s390/char/monwriter.c | 3 + drivers/s390/crypto/zcrypt_cex2a.c | 0 drivers/s390/crypto/zcrypt_cex2a.h | 0 drivers/s390/crypto/zcrypt_cex2c.c | 0 drivers/s390/crypto/zcrypt_cex2c.h | 0 drivers/scsi/elx/efct/efct_hw.c | 2 + drivers/scsi/elx/efct/efct_unsol.c | 1 + drivers/scsi/hpsa.c | 4 + drivers/scsi/lpfc/lpfc_init.c | 3 +- drivers/scsi/pm8001/pm8001_ctl.c | 5 +- drivers/scsi/scsi_scan.c | 2 +- drivers/scsi/scsi_transport_sas.c | 101 ++-- drivers/scsi/sg.c | 7 +- drivers/scsi/smartpqi/smartpqi_init.c | 2 +- drivers/slimbus/qcom-ctrl.c | 5 +- drivers/slimbus/qcom-ngd-ctrl.c | 62 +-- drivers/soc/fsl/qe/qe.c | 3 + drivers/soc/ti/k3-ringacc.c | 4 +- drivers/spi/spi-dw.h | 1 + drivers/spi/spi-ep93xx.c | 1 + drivers/spi/spi-fsl-lpspi.c | 18 +- drivers/spi/spi-hisi-kunpeng.c | 6 +- drivers/spi/spi-meson-spifc.c | 1 + drivers/spi/spi-rpc-if.c | 6 +- drivers/spi/spi-sh-msiof.c | 10 +- drivers/spi/spi-uniphier.c | 4 +- drivers/spi/spi-xilinx.c | 11 +- drivers/spi/spi.c | 5 - drivers/staging/media/atomisp/pci/atomisp_cmd.c | 6 +- drivers/staging/media/atomisp/pci/sh_css.c | 6 +- drivers/staging/media/ipu3/ipu3-css-params.c | 8 +- drivers/staging/media/sunxi/cedrus/cedrus.c | 4 +- drivers/staging/most/video/video.c | 7 +- drivers/staging/nvec/nvec.c | 4 +- drivers/staging/rtl8723bs/core/rtw_ieee80211.c | 93 ++-- drivers/staging/rtl8723bs/core/rtw_mlme_ext.c | 20 +- drivers/staging/rtl8723bs/core/rtw_security.c | 2 +- drivers/staging/rtl8723bs/core/rtw_wlan_util.c | 23 +- drivers/staging/rtl8723bs/os_dep/ioctl_cfg80211.c | 8 + drivers/staging/vme_user/vme_fake.c | 8 + drivers/staging/vme_user/vme_tsi148.c | 8 + drivers/staging/vme_user/vme_user.c | 22 + drivers/target/iscsi/iscsi_target_auth.c | 6 +- drivers/target/loopback/tcm_loop.c | 64 --- drivers/target/target_core_fabric_lib.c | 89 +++- drivers/target/target_core_internal.h | 3 +- drivers/target/target_core_pr.c | 12 +- drivers/thermal/intel/therm_throt.c | 7 +- drivers/thermal/thermal_hwmon.c | 5 +- drivers/tty/serial/8250/8250_mid.c | 31 +- drivers/tty/serial/8250/8250_omap.c | 3 +- drivers/tty/serial/msm_serial.c | 3 +- drivers/ufs/core/ufshcd.c | 2 +- drivers/usb/atm/ueagle-atm.c | 36 +- drivers/usb/cdns3/cdnsp-mem.c | 2 + drivers/usb/class/cdc-acm.c | 3 + drivers/usb/common/ulpi.c | 23 +- drivers/usb/core/quirks.c | 6 + drivers/usb/dwc3/dwc3-meson-g12a.c | 14 +- drivers/usb/dwc3/gadget.c | 43 +- drivers/usb/fotg210/fotg210-hcd.c | 6 +- drivers/usb/gadget/composite.c | 5 +- drivers/usb/gadget/function/f_fs.c | 5 +- drivers/usb/gadget/function/f_printer.c | 3 +- drivers/usb/gadget/function/rndis.c | 20 +- drivers/usb/gadget/udc/core.c | 29 +- drivers/usb/host/ehci-sched.c | 11 +- drivers/usb/host/max3421-hcd.c | 8 + drivers/usb/host/sl811-hcd.c | 1 + drivers/usb/host/xhci.c | 11 +- drivers/usb/misc/chaoskey.c | 1 - drivers/usb/misc/idmouse.c | 45 +- drivers/usb/misc/iowarrior.c | 21 +- drivers/usb/misc/ldusb.c | 38 +- drivers/usb/misc/legousbtower.c | 37 +- drivers/usb/misc/uss720.c | 5 +- drivers/usb/mtu3/mtu3_gadget.c | 1 + drivers/usb/serial/digi_acceleport.c | 43 +- drivers/usb/serial/keyspan_pda.c | 2 +- drivers/usb/serial/option.c | 16 + drivers/usb/storage/ene_ub6250.c | 3 +- drivers/usb/storage/usb.c | 2 +- drivers/usb/typec/anx7411.c | 4 +- drivers/usb/typec/class.c | 1 + drivers/usb/typec/tcpm/tcpci_rt1711h.c | 13 +- drivers/usb/typec/tcpm/tcpm.c | 7 +- drivers/usb/typec/ucsi/displayport.c | 7 +- drivers/usb/typec/ucsi/ucsi.c | 20 + drivers/usb/typec/ucsi/ucsi.h | 1 + drivers/usb/typec/ucsi/ucsi_acpi.c | 10 +- drivers/usb/typec/ucsi/ucsi_ccg.c | 2 +- drivers/usb/usbip/vudc.h | 1 - drivers/usb/usbip/vudc_dev.c | 4 +- drivers/vdpa/vdpa_user/vduse_dev.c | 72 ++- drivers/vfio/pci/mlx5/cmd.h | 13 +- drivers/vfio/pci/vfio_pci_core.c | 37 +- drivers/vfio/vfio_main.c | 3 +- drivers/vhost/net.c | 15 +- drivers/vhost/vdpa.c | 29 +- drivers/video/fbdev/aty/radeon_base.c | 1 + drivers/video/fbdev/broadsheetfb.c | 8 +- drivers/video/fbdev/carminefb.c | 1 + drivers/video/fbdev/core/fbcon.c | 14 +- drivers/video/fbdev/hecubafb.c | 6 +- drivers/video/fbdev/i740fb.c | 1 + drivers/video/fbdev/metronomefb.c | 8 +- drivers/video/fbdev/nvidia/nvidia.c | 1 + drivers/video/fbdev/s3fb.c | 1 + drivers/video/fbdev/sm501fb.c | 16 +- drivers/video/fbdev/sm712.h | 2 +- drivers/video/fbdev/tdfxfb.c | 1 + drivers/video/fbdev/tridentfb.c | 1 + drivers/video/fbdev/uvesafb.c | 4 +- drivers/video/fbdev/vesafb.c | 1 + drivers/virtio/virtio_mmio.c | 26 +- drivers/watchdog/apple_wdt.c | 1 + drivers/watchdog/sama5d4_wdt.c | 48 +- drivers/watchdog/sp5100_tco.c | 3 +- drivers/watchdog/sprd_wdt.c | 5 +- drivers/watchdog/watchdog_core.c | 3 + drivers/xen/gntdev.c | 8 +- drivers/xen/xen-scsiback.c | 30 +- fs/9p/vfs_inode.c | 9 + fs/afs/cell.c | 2 + fs/afs/cmservice.c | 2 - fs/afs/fs_operation.c | 2 +- fs/afs/rxrpc.c | 11 +- fs/afs/super.c | 3 +- fs/afs/vl_list.c | 10 +- fs/afs/volume.c | 2 +- fs/btrfs/btrfs_inode.h | 2 + fs/btrfs/extent-tree.c | 17 +- fs/btrfs/file.c | 12 +- fs/btrfs/inode.c | 138 +++-- fs/btrfs/ordered-data.c | 12 + fs/btrfs/ordered-data.h | 2 + fs/btrfs/reflink.c | 5 +- fs/btrfs/super.c | 3 +- fs/configfs/dir.c | 57 +- fs/dlm/midcomms.c | 4 +- fs/efs/file.c | 21 +- fs/exfat/dir.c | 61 ++- fs/exfat/exfat_fs.h | 7 +- fs/exfat/inode.c | 2 +- fs/exfat/namei.c | 331 ++++++------ fs/ext2/file.c | 9 +- fs/ext4/extents.c | 5 +- fs/ext4/inode.c | 3 +- fs/ext4/ioctl.c | 12 +- fs/ext4/move_extent.c | 34 +- fs/f2fs/checkpoint.c | 14 +- fs/f2fs/data.c | 29 ++ fs/f2fs/f2fs.h | 1 + fs/f2fs/gc.c | 50 +- fs/f2fs/inode.c | 30 +- fs/f2fs/segment.c | 8 + fs/f2fs/xattr.c | 6 +- fs/fs-writeback.c | 133 +++-- fs/fuse/cuse.c | 4 +- fs/fuse/dev.c | 2 +- fs/hfs/bfind.c | 2 +- fs/hfs/bnode.c | 56 +- fs/hfs/brec.c | 2 +- fs/hfs/btree.c | 2 +- fs/hfs/btree.h | 71 +-- fs/hfs/hfs_fs.h | 88 ++-- fs/hfs/inode.c | 3 +- fs/hfsplus/bfind.c | 2 +- fs/hfsplus/bnode.c | 62 +-- fs/hfsplus/brec.c | 2 +- fs/hfsplus/btree.c | 2 +- fs/hfsplus/hfsplus_fs.h | 40 +- fs/isofs/rock.c | 11 + fs/jbd2/journal.c | 2 + fs/lockd/svcsubs.c | 4 +- fs/minix/minix.h | 2 +- fs/namei.c | 4 + fs/nfs/callback_proc.c | 9 +- fs/nfs/dir.c | 2 + fs/nfs/filelayout/filelayout.c | 2 + fs/nfs/flexfilelayout/flexfilelayout.c | 33 ++ fs/nfs/flexfilelayout/flexfilelayout.h | 16 + fs/nfs/pnfs.c | 4 +- fs/nfs/read.c | 25 +- fs/nfsd/nfs4layouts.c | 4 +- fs/nfsd/nfs4recover.c | 120 ++--- fs/nfsd/nfs4state.c | 22 +- fs/nfsd/vfs.c | 42 +- fs/nilfs2/segment.c | 22 + fs/nilfs2/super.c | 2 - fs/ntfs3/attrib.c | 14 + fs/ntfs3/dir.c | 2 +- fs/ntfs3/file.c | 48 +- fs/ntfs3/frecord.c | 51 ++ fs/ntfs3/fslog.c | 131 ++++- fs/ntfs3/index.c | 45 +- fs/ntfs3/inode.c | 8 + fs/ntfs3/lznt.c | 2 +- fs/ntfs3/namei.c | 2 +- fs/ntfs3/ntfs_fs.h | 5 +- fs/ntfs3/run.c | 9 +- fs/ocfs2/alloc.c | 2 +- fs/ocfs2/aops.c | 13 +- fs/ocfs2/buffer_head_io.c | 7 +- fs/ocfs2/dlm/dlmdebug.c | 16 +- fs/ocfs2/dlmglue.c | 17 + fs/ocfs2/inode.c | 150 +++++- fs/ocfs2/journal.c | 13 +- fs/ocfs2/journal.h | 3 + fs/ocfs2/move_extents.c | 4 +- fs/ocfs2/ocfs2.h | 2 - fs/ocfs2/quota_local.c | 2 +- fs/ocfs2/stack_user.c | 10 +- fs/ocfs2/super.c | 2 - fs/ocfs2/sysfile.c | 9 +- fs/orangefs/dir.c | 7 +- fs/proc/array.c | 15 +- fs/proc/base.c | 184 +++---- fs/proc/fd.c | 31 +- fs/proc/generic.c | 9 +- fs/proc/internal.h | 6 +- fs/proc/namespaces.c | 16 +- fs/proc/proc_net.c | 2 +- fs/smb/client/cifs_swn.c | 329 +++++++++--- fs/smb/client/cifsacl.c | 2 +- fs/smb/client/cifsglob.h | 19 +- fs/smb/client/connect.c | 3 + fs/smb/client/inode.c | 30 +- fs/smb/client/ioctl.c | 12 +- fs/smb/client/misc.c | 8 + fs/smb/client/smb2misc.c | 52 +- fs/smb/client/smb2ops.c | 56 +- fs/smb/client/smb2pdu.c | 22 +- fs/smb/client/trace.h | 2 + fs/smb/common/cifsglob.h | 30 ++ fs/smb/server/connection.c | 101 +++- fs/smb/server/connection.h | 6 + fs/smb/server/oplock.c | 13 +- fs/smb/server/server.c | 12 + fs/smb/server/smb2pdu.c | 146 ++++-- fs/smb/server/smb_common.h | 14 +- fs/smb/server/smbacl.c | 7 +- fs/smb/server/vfs.c | 29 +- fs/smb/server/vfs_cache.c | 119 ++++- fs/smb/server/vfs_cache.h | 3 + fs/sysfs/file.c | 4 + fs/udf/balloc.c | 5 +- fs/udf/super.c | 11 +- fs/userfaultfd.c | 14 +- fs/xfs/libxfs/xfs_defer.c | 22 +- fs/xfs/libxfs/xfs_defer.h | 14 + fs/xfs/libxfs/xfs_log_recover.h | 4 +- fs/xfs/xfs_attr_item.c | 115 ++-- fs/xfs/xfs_bmap_item.c | 92 ++-- fs/xfs/xfs_dquot.c | 16 +- fs/xfs/xfs_extfree_item.c | 117 ++--- fs/xfs/xfs_log_recover.c | 52 +- fs/xfs/xfs_refcount_item.c | 127 ++--- fs/xfs/xfs_reflink.c | 36 ++ fs/xfs/xfs_rmap_item.c | 151 +++--- fs/xfs/xfs_trans.h | 4 - include/acpi/acpi_bus.h | 2 + include/asm-generic/bitops/lock.h | 22 +- include/crypto/drbg.h | 18 +- include/dt-bindings/power/fsl,imx93-power.h | 1 + include/linux/audit.h | 8 + include/linux/backing-dev-defs.h | 4 + include/linux/bitops.h | 2 + include/linux/bpf.h | 3 + include/linux/bpf_local_storage.h | 3 - include/linux/cpufreq.h | 2 +- include/linux/damon.h | 8 +- include/linux/device.h | 5 +- include/linux/etherdevice.h | 3 +- include/linux/f2fs_fs.h | 1 + include/linux/filter.h | 15 +- include/linux/fs.h | 5 + include/linux/fwnode.h | 2 + include/linux/glob.h | 1 + include/linux/hid-sensor-hub.h | 25 + include/linux/hid.h | 29 ++ include/linux/host1x.h | 7 + include/linux/if_ether.h | 3 +- include/linux/iio/common/inv_sensors_timestamp.h | 3 +- include/linux/inetdevice.h | 5 + include/linux/jiffies.h | 13 + include/linux/netdev_features.h | 25 + include/linux/netdevice.h | 7 +- include/linux/nfs_page.h | 1 + include/linux/pci.h | 4 +- include/linux/rpmsg.h | 4 - include/linux/seqlock.h | 110 ++++ include/linux/sunrpc/clnt.h | 1 + include/linux/sunrpc/xprt.h | 2 + include/linux/vfio_pci_core.h | 15 +- include/linux/vmalloc.h | 4 +- include/linux/writeback.h | 2 + include/net/addrconf.h | 10 +- include/net/bluetooth/hci.h | 21 +- include/net/bluetooth/hci_core.h | 39 +- include/net/bluetooth/l2cap.h | 11 +- include/net/bonding.h | 1 + include/net/fib_rules.h | 5 + include/net/gue.h | 2 +- include/net/ip_fib.h | 7 +- include/net/ip_vs.h | 3 +- include/net/netfilter/nf_conntrack_extend.h | 12 - include/net/netfilter/nf_queue.h | 1 + include/net/rtnetlink.h | 2 + include/net/sctp/sctp.h | 3 +- include/net/sock.h | 2 +- include/net/tc_act/tc_pedit.h | 18 +- include/net/xfrm.h | 15 +- include/uapi/linux/bpf.h | 1 + io_uring/io-wq.c | 2 +- kernel/audit.c | 85 ++- kernel/bpf/bpf_lsm.c | 34 +- kernel/bpf/cgroup.c | 110 ++-- kernel/bpf/core.c | 70 ++- kernel/bpf/devmap.c | 19 + kernel/bpf/dispatcher.c | 2 +- kernel/bpf/hashtab.c | 21 +- kernel/bpf/helpers.c | 12 +- kernel/bpf/inode.c | 13 +- kernel/bpf/lpm_trie.c | 10 +- kernel/bpf/syscall.c | 5 +- kernel/bpf/verifier.c | 3 +- kernel/cgroup/cpuset.c | 7 +- kernel/cpu.c | 20 +- kernel/events/core.c | 19 +- kernel/fork.c | 9 +- kernel/module/decompress.c | 2 + kernel/sched/core.c | 1 + kernel/sched/fair.c | 25 +- kernel/sched/features.h | 8 + kernel/time/posix-cpu-timers.c | 3 +- kernel/time/time.c | 2 +- kernel/trace/bpf_trace.c | 11 +- kernel/trace/ring_buffer.c | 3 +- kernel/trace/trace_eprobe.c | 2 +- kernel/trace/trace_events_filter.c | 6 +- kernel/trace/trace_events_hist.c | 41 +- kernel/trace/trace_osnoise.c | 4 +- kernel/trace/trace_probe.c | 3 +- kernel/trace/trace_probe.h | 2 +- kernel/workqueue.c | 2 +- lib/debugobjects.c | 17 + lib/glob.c | 31 +- lib/test_meminit.c | 2 +- mm/backing-dev.c | 5 + mm/damon/core.c | 2 +- mm/damon/ops-common.c | 1 + mm/damon/sysfs-schemes.c | 17 +- mm/filemap.c | 2 +- mm/madvise.c | 3 +- mm/mincore.c | 3 +- mm/mm_init.c | 13 +- mm/shrinker_debug.c | 30 +- mm/slab.h | 17 +- mm/vmscan.c | 6 +- net/6lowpan/nhc.c | 2 +- net/9p/client.c | 2 + net/9p/trans_rdma.c | 19 +- net/atm/common.c | 2 + net/batman-adv/distributed-arp-table.c | 30 +- net/batman-adv/fragmentation.c | 8 +- net/batman-adv/gateway_client.c | 3 +- net/batman-adv/main.c | 13 +- net/batman-adv/routing.c | 3 +- net/batman-adv/soft-interface.c | 17 +- net/batman-adv/soft-interface.h | 2 + net/batman-adv/translation-table.c | 5 +- net/bluetooth/6lowpan.c | 74 +-- net/bluetooth/af_bluetooth.c | 17 +- net/bluetooth/bnep/core.c | 27 +- net/bluetooth/hci_codec.c | 2 +- net/bluetooth/hci_conn.c | 56 +- net/bluetooth/hci_core.c | 83 ++- net/bluetooth/hci_event.c | 29 +- net/bluetooth/hci_sync.c | 197 +++++-- net/bluetooth/iso.c | 20 +- net/bluetooth/l2cap_core.c | 159 ++++-- net/bluetooth/l2cap_sock.c | 107 ++-- net/bluetooth/mgmt.c | 8 +- net/bluetooth/msft.c | 2 +- net/bluetooth/rfcomm/tty.c | 4 +- net/bluetooth/sco.c | 62 ++- net/bluetooth/smp.c | 27 +- net/bridge/br_cfm.c | 6 + net/bridge/br_cfm_netlink.c | 4 +- net/bridge/br_if.c | 3 + net/bridge/br_stp.c | 3 +- net/bridge/netfilter/ebtables.c | 22 +- net/bridge/netfilter/nft_meta_bridge.c | 4 +- net/can/bcm.c | 127 ++++- net/can/isotp.c | 9 +- net/core/dev.c | 88 ++++ net/core/fib_rules.c | 6 +- net/core/filter.c | 28 +- net/core/flow_dissector.c | 12 +- net/core/lwt_bpf.c | 12 + net/core/rtnetlink.c | 8 + net/core/skbuff.c | 23 +- net/devlink/rate.c | 10 +- net/ethernet/eth.c | 9 +- net/handshake/genl.c | 2 +- net/ieee802154/core.c | 2 +- net/ieee802154/header_ops.c | 9 +- net/ieee802154/ieee802154.h | 17 + net/ieee802154/netlink.c | 36 +- net/ife/ife.c | 2 +- net/ipv4/esp4_offload.c | 2 +- net/ipv4/igmp.c | 15 +- net/ipv4/ip_gre.c | 9 +- net/ipv4/ip_vti.c | 3 + net/ipv4/ipip.c | 3 + net/ipv4/netfilter/nf_reject_ipv4.c | 2 +- net/ipv4/sysctl_net_ipv4.c | 10 +- net/ipv4/tcp_output.c | 4 +- net/ipv6/addrconf.c | 23 +- net/ipv6/esp6_offload.c | 2 +- net/ipv6/ip6_gre.c | 6 + net/ipv6/ip6_vti.c | 3 + net/ipv6/mcast.c | 165 +++--- net/ipv6/netfilter.c | 4 +- net/ipv6/netfilter/ip6t_ah.c | 5 + net/ipv6/netfilter/ip6t_hbh.c | 1 + net/ipv6/netfilter/ip6t_rt.c | 3 +- net/ipv6/netfilter/nf_conntrack_reasm.c | 3 +- net/ipv6/route.c | 9 +- net/ipv6/seg6.c | 3 + net/ipv6/sit.c | 3 + net/kcm/kcmsock.c | 8 +- net/key/af_key.c | 1 + net/llc/af_llc.c | 1 + net/llc/llc_conn.c | 1 - net/mac80211/main.c | 3 +- net/mac80211/tx.c | 17 +- net/mac802154/iface.c | 6 +- net/netfilter/ipset/ip_set_core.c | 12 +- net/netfilter/ipset/ip_set_hash_gen.h | 67 ++- net/netfilter/ipvs/ip_vs_app.c | 10 +- net/netfilter/ipvs/ip_vs_conn.c | 4 +- net/netfilter/ipvs/ip_vs_core.c | 36 +- net/netfilter/ipvs/ip_vs_proto_sctp.c | 18 +- net/netfilter/ipvs/ip_vs_proto_tcp.c | 11 +- net/netfilter/ipvs/ip_vs_proto_udp.c | 3 +- net/netfilter/ipvs/ip_vs_xmit.c | 6 +- net/netfilter/nf_conncount.c | 23 +- net/netfilter/nf_conntrack_core.c | 79 +-- net/netfilter/nf_conntrack_ecache.c | 2 +- net/netfilter/nf_conntrack_extend.c | 32 +- net/netfilter/nf_conntrack_irc.c | 6 +- net/netfilter/nf_conntrack_netlink.c | 2 +- net/netfilter/nf_conntrack_seqadj.c | 2 + net/netfilter/nf_nat_core.c | 10 + net/netfilter/nf_nat_sip.c | 11 + net/netfilter/nf_queue.c | 14 + net/netfilter/nfnetlink_cthelper.c | 4 +- net/netfilter/nfnetlink_osf.c | 6 +- net/netfilter/nfnetlink_queue.c | 3 + net/netfilter/nft_compat.c | 24 +- net/netfilter/nft_log.c | 58 +-- net/netfilter/nft_synproxy.c | 9 +- net/netfilter/xt_AUDIT.c | 58 +-- net/netfilter/xt_cluster.c | 2 +- net/netfilter/xt_connmark.c | 14 +- net/netfilter/xt_nat.c | 9 + net/netfilter/xt_rateest.c | 2 +- net/netfilter/xt_u32.c | 12 +- net/openvswitch/conntrack.c | 2 +- net/openvswitch/flow_netlink.c | 201 +++++-- net/phonet/af_phonet.c | 5 +- net/psample/psample.c | 6 +- net/qrtr/af_qrtr.c | 2 +- net/rxrpc/recvmsg.c | 5 +- net/sched/act_api.c | 13 +- net/sched/act_bpf.c | 2 +- net/sched/act_ct.c | 7 +- net/sched/act_pedit.c | 13 +- net/sched/cls_api.c | 25 +- net/sched/cls_bpf.c | 10 +- net/sched/cls_flow.c | 12 +- net/sched/sch_cake.c | 5 +- net/sched/sch_codel.c | 48 +- net/sched/sch_drr.c | 8 +- net/sched/sch_fq_codel.c | 41 +- net/sched/sch_hfsc.c | 24 +- net/sched/sch_hhf.c | 27 + net/sched/sch_htb.c | 14 +- net/sched/sch_multiq.c | 2 +- net/sched/sch_taprio.c | 2 +- net/sched/sch_teql.c | 126 +++-- net/sctp/diag.c | 67 ++- net/sctp/sm_make_chunk.c | 10 +- net/sctp/sm_statefuns.c | 23 +- net/sctp/socket.c | 38 +- net/smc/smc_cdc.c | 15 +- net/socket.c | 2 +- net/sunrpc/clnt.c | 19 +- net/sunrpc/svcsock.c | 10 + net/sunrpc/xdr.c | 14 +- net/sunrpc/xprt.c | 16 + net/sunrpc/xprtrdma/backchannel.c | 5 +- net/sunrpc/xprtrdma/frwr_ops.c | 2 +- net/sunrpc/xprtrdma/rpc_rdma.c | 172 ++++-- net/sunrpc/xprtrdma/transport.c | 85 ++- net/sunrpc/xprtrdma/verbs.c | 167 ++++-- net/sunrpc/xprtrdma/xprt_rdma.h | 7 +- net/sunrpc/xprtsock.c | 16 +- net/tipc/bcast.c | 22 +- net/tipc/bcast.h | 2 +- net/tipc/bearer.c | 1 + net/tipc/core.c | 5 + net/tipc/discover.c | 14 +- net/tipc/name_distr.c | 13 +- net/tipc/netlink.c | 12 + net/tipc/node.c | 15 +- net/tipc/socket.c | 3 + net/tls/tls_sw.c | 11 + net/wireless/nl80211.c | 2 +- net/xfrm/espintcp.c | 34 +- net/xfrm/xfrm_input.c | 6 +- net/xfrm/xfrm_interface_core.c | 3 + net/xfrm/xfrm_policy.c | 32 +- net/xfrm/xfrm_state.c | 2 +- net/xfrm/xfrm_user.c | 20 +- samples/trace_events/trace-events-sample.c | 4 + scripts/kconfig/conf.c | 6 +- security/apparmor/apparmorfs.c | 9 +- security/apparmor/domain.c | 58 ++- security/apparmor/label.c | 2 +- security/apparmor/net.c | 2 + security/apparmor/policy.c | 5 +- security/apparmor/procattr.c | 2 + security/integrity/evm/evm_secfs.c | 16 +- security/keys/keyring.c | 2 +- security/selinux/hooks.c | 61 ++- sound/aoa/fabrics/layout.c | 6 + sound/core/init.c | 11 +- sound/core/seq/seq_clientmgr.c | 1 + sound/core/seq/seq_memory.c | 4 +- sound/core/seq/seq_midi.c | 55 +- sound/firewire/isight.c | 3 +- sound/isa/gus/gus_pcm.c | 2 + sound/pci/cmipci.c | 6 + sound/pci/es1938.c | 2 + sound/pci/ice1712/aureon.c | 2 + sound/pci/ice1712/ice1712.c | 8 + sound/pci/ice1712/ice1724.c | 6 + sound/pci/ymfpci/ymfpci_main.c | 6 + sound/soc/codecs/adau1372.c | 5 + sound/soc/codecs/aw88261.c | 12 +- sound/soc/codecs/cs35l56.c | 14 +- sound/soc/codecs/hdac_hdmi.c | 4 +- sound/soc/codecs/tlv320aic3x.c | 25 +- sound/soc/fsl/fsl_asrc_dma.c | 20 + sound/soc/fsl/fsl_audmix.c | 6 + sound/soc/mediatek/mt8183/mt8183-afe-pcm.c | 11 + sound/soc/mediatek/mt8192/mt8192-afe-pcm.c | 9 + sound/soc/qcom/qdsp6/q6apm.c | 8 + sound/soc/sh/rcar/rsnd.h | 2 +- sound/soc/sof/ipc3-control.c | 79 ++- sound/soc/sof/ipc4-control.c | 11 +- sound/soc/sof/topology.c | 5 +- sound/soc/tegra/tegra210_ahub.c | 4 +- sound/usb/caiaq/input.c | 2 +- sound/usb/midi2.c | 5 + sound/usb/mixer_quirks.c | 101 ++-- sound/usb/mixer_scarlett.c | 4 +- sound/usb/mixer_us16x08.c | 127 +++-- sound/virtio/virtio_pcm.c | 3 +- sound/virtio/virtio_pcm_ops.c | 3 +- tools/bpf/bpftool/net.c | 4 +- tools/include/linux/bitops.h | 2 + tools/include/uapi/linux/bpf.h | 1 + tools/lib/api/fs/fs.c | 19 +- tools/lib/bpf/libbpf.c | 9 +- tools/lib/bpf/strset.c | 62 ++- tools/lib/bpf/usdt.c | 16 +- tools/lib/symbol/kallsyms.c | 5 +- tools/mm/slabinfo.c | 6 +- tools/perf/trace/beauty/fcntl.c | 16 + tools/perf/util/probe-finder.c | 4 +- tools/power/x86/intel-speed-select/isst-daemon.c | 9 +- tools/testing/cxl/test/cxl.c | 8 +- tools/testing/cxl/test/mem.c | 6 +- .../selftests/bpf/prog_tests/verifier_log.c | 1 + .../selftests/bpf/progs/bpf_iter_task_vma.c | 2 +- tools/testing/selftests/hid/Makefile | 10 +- tools/testing/selftests/hid/hid_bpf.c | 70 ++- tools/testing/selftests/hid/progs/hid.c | 94 +++- .../testing/selftests/hid/progs/hid_bpf_helpers.h | 84 ++- tools/testing/selftests/mm/compaction_test.c | 3 + tools/testing/selftests/mm/hmm-tests.c | 63 ++- tools/testing/selftests/net/tcp_mmap.c | 4 + tools/usb/usbip/libsrc/usbip_common.c | 2 + tools/usb/usbip/libsrc/usbip_device_driver.c | 4 + tools/usb/usbip/libsrc/vhci_driver.c | 1 + tools/virtio/vringh_test.c | 5 + virt/kvm/eventfd.c | 12 +- virt/kvm/kvm_main.c | 16 +- 1163 files changed, 13672 insertions(+), 7796 deletions(-)

1 month, 1 week

[PATCH 5.15 000/812] 5.15.212-rc2 review

by Greg Kroah-Hartman

This is the start of the stable review cycle for the 5.15.212 release. There are 812 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know. Responses should be made by Fri, 24 Jul 2026 14:26:57 +0000. Anything received after that time might be too late. The whole patch series can be found in one patch at: https://www.kernel.org/pub/linux/kernel/v5.x/stable-review/patch-5.15.212-r… or in the git tree and branch at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-5.15.y and the diffstat can be found below. thanks, greg k-h ------------- Pseudo-Shortlog of commits: Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> Linux 5.15.212-rc2 Sandipan Das <sandipan.das(a)amd.com> perf/x86/amd/core: Always use the NMI latency mitigation HyeongJun An <sammiee5311(a)gmail.com> ALSA: seq: Fix uninitialised heap leak in snd_seq_event_dup() Jean-Baptiste Maneyrol <jean-baptiste.maneyrol(a)tdk.com> iio: imu: inv_icm42600: fix timestamp clock period by using lower value Takashi Iwai <tiwai(a)suse.de> ALSA: seq: Check UMP support for midi_version change Takashi Iwai <tiwai(a)suse.de> ALSA: seq: Skip event type filtering for UMP events Jean-Baptiste Maneyrol <jean-baptiste.maneyrol(a)tdk.com> iio: invensense: fix odr switching to same value Jean-Baptiste Maneyrol <jean-baptiste.maneyrol(a)tdk.com> iio: imu: inv_mpu6050: fix frequency setting when chip is off Takashi Iwai <tiwai(a)suse.de> ALSA: seq: Avoid confusion of aligned read size Luiz Augusto von Dentz <luiz.von.dentz(a)intel.com> Bluetooth: L2CAP: Fix regressions caused by reusing ident Marc Zyngier <maz(a)kernel.org> KVM: Move kvm_io_bus_get_dev() locking responsibilities to callers Zhan Xusheng <zhanxusheng1024(a)gmail.com> posix-cpu-timers: Use u64 multiplication in update_rlimit_cpu() Wentao Liang <vulab(a)iscas.ac.cn> regulator: scmi: fix of_node refcount leak in scmi_regulator_probe() Ricardo Robaina <rrobaina(a)redhat.com> audit: fix potential integer overflow in audit_log_n_hex() Ricardo Robaina <rrobaina(a)redhat.com> audit: add audit_log_nf_skb helper function Qu Wenruo <wqu(a)suse.com> btrfs: fix incorrect buffered IO fallback for append direct writes Giovanni Cabiddu <giovanni.cabiddu(a)intel.com> crypto: qat - validate RSA CRT component lengths Qu Wenruo <wqu(a)suse.com> btrfs: fix false IO failure after falling back to buffered write Ahsan Atta <ahsan.atta(a)intel.com> crypto: qat - fix restarting state leak on allocation failure Qu Wenruo <wqu(a)suse.com> btrfs: do not trim a device which is not writeable Neill Kapron <nkapron(a)google.com> usb: gadget: f_fs: Tie read_buffer lifetime to ffs_epfile Thorsten Blum <thorsten.blum(a)linux.dev> crypto: atmel-sha204a - drop hwrng quality reduction for ATSHA204A Uwe Kleine-König <u.kleine-koenig(a)baylibre.com> crypto: atmel - Drop explicit initialization of struct i2c_device_id::driver_data to 0 Krzysztof Kozlowski <krzysztof.kozlowski(a)linaro.org> crypto: atmel-sha204a - Mark OF related data as maybe unused Tyler Baker <tyler.baker(a)oss.qualcomm.com> usb: gadget: f_fs: initialize reset_work at allocation time Andy Yan <andyshrk(a)163.com> usb: typec: tcpm: Fix VDM type for Enter Mode commands Mauricio Faria de Oliveira <mfo(a)igalia.com> usb: atm: ueagle-atm: wait for pre-firmware load in .disconnect() Fan Wu <fanwu01(a)zju.edu.cn> usb: typec: ucsi: ccg: Fix use-after-free of ucsi on remove Uwe Kleine-König <u.kleine-koenig(a)pengutronix.de> gpio: pca953x: Make platform teardown callback return void Uwe Kleine-König <u.kleine-koenig(a)pengutronix.de> leds: lm3601x: Improve error reporting for problems during .remove() Uwe Kleine-König <u.kleine-koenig(a)pengutronix.de> leds: lm3697: Remove duplicated error reporting in .remove() Uwe Kleine-König <u.kleine-koenig(a)pengutronix.de> drm/i2c/sil164: Drop no-op remove function Oliver Neukum <oneukum(a)suse.com> usb: iowarrior: remove inherent race with minor number Vlad Poenaru <vlad.wing(a)gmail.com> bpf: Allow LPM map access from sleepable BPF programs Andrii Nakryiko <andrii(a)kernel.org> bpf: Consistently use bpf_rcu_lock_held() everywhere Kumar Kartikeya Dwivedi <memxor(a)gmail.com> bpf: Convert lpm_trie.c to rqspinlock Zhao Zhang <zzhan461(a)ucr.edu> bpf: Reject fragmented frames in devmap Lorenzo Bianconi <lorenzo(a)kernel.org> xdp: introduce flags field in xdp_buff/xdp_frame Tristan Madani <tristan(a)talencesecurity.com> hfs/hfsplus: fix u32 overflow in check_and_correct_requested_length Viacheslav Dubeyko <slava(a)dubeyko.com> hfs/hfsplus: prevent getting negative values of offset/length Yousef Alhouseen <alhouseenyousef(a)gmail.com> xfs: use null daddr for unset first bad log block Jiapeng Chong <jiapeng.chong(a)linux.alibaba.com> xfs: Remove dead code Jiapeng Chong <jiapeng.chong(a)linux.alibaba.com> xfs: Remove redundant assignment of mp Andy Shevchenko <andriy.shevchenko(a)linux.intel.com> serial: 8250_mid: Disable DMA for selected platforms Ilpo Järvinen <ilpo.jarvinen(a)linux.intel.com> serial: 8250_mid: Remove 8250_pci usage Manish Khadka <maskmemanish(a)gmail.com> HID: appleir: fix UAF on pending key_up_timer in remove() Thomas Gleixner <tglx(a)linutronix.de> treewide: Switch/rename to timer_delete[_sync]() Jann Horn <jannh(a)google.com> proc: protect ptrace_may_access() with exec_update_lock (part 1) Trung Nguyen <trungnh(a)cystack.net> HID: multitouch: fix out-of-bounds bit access on mt_io_flags Angela Czubak <aczubak(a)google.com> HID: add haptics page defines Jann Horn <jannh(a)google.com> proc: protect ptrace_may_access() with exec_update_lock (FD links) Christoph Hellwig <hch(a)lst.de> proc: rename proc_setattr to proc_nochmod_setattr Tyler Hicks (Microsoft) <code(a)tyhicks.com> proc: Move fdinfo PTRACE_MODE_READ check into the inode .permission operation Thomas Weißschuh <linux(a)weissschuh.net> proc: use generic setattr() for /proc/$PID/net Lukas Wunner <lukas(a)wunner.de> X.509: Fix validation of ASN.1 certificate header Namjae Jeon <linkinjeon(a)kernel.org> ksmbd: track the connection owning a byte-range lock DaeMyung Kang <charsyam(a)gmail.com> ksmbd: centralize ksmbd_conn final release to plug transport leak DaeMyung Kang <charsyam(a)gmail.com> ksmbd: destroy async_ida in ksmbd_conn_free() Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> ksmbd: fix mechToken leak when SPNEGO decode fails after token alloc Namjae Jeon <linkinjeon(a)kernel.org> ksmbd: fix use-after-free in __ksmbd_close_fd() via durable scavenger Zihan Xi <xizh2024(a)lzu.edu.cn> smb: client: harden POSIX SID length parsing Zihan Xi <xizh2024(a)lzu.edu.cn> smb: client: use unaligned reads in parse_posix_ctxt() Norbert Manthey <nmanthey(a)amazon.de> smb: client: mask server-provided mode to 07777 in modefromsid Michael Bommarito <michael.bommarito(a)gmail.com> smb: client: resolve SWN tcon from live registrations David Howells <dhowells(a)redhat.com> cifs: Add tracing for the cifs_tcon struct refcounting Haoxiang Li <haoxiang_li2024(a)163.com> smb: client: Fix next buffer leak in receive_encrypted_standard() Runyu Xiao <runyu.xiao(a)seu.edu.cn> Bluetooth: L2CAP: cancel pending_rx_work before taking conn->lock Hyunwoo Kim <imv4bel(a)gmail.com> Bluetooth: L2CAP: Fix deadlock in l2cap_conn_del() Luiz Augusto von Dentz <luiz.von.dentz(a)intel.com> Bluetooth: L2CAP: Fix not tracking outstanding TX ident Florian Westphal <fw(a)strlen.de> netfilter: ebtables: zero chainstack array Qianfeng Rong <rongqianfeng(a)vivo.com> netfilter: ebtables: Use vmalloc_array() to improve code Runyu Xiao <runyu.xiao(a)seu.edu.cn> gpio: sch: use raw_spinlock_t in the irq startup path Bartosz Golaszewski <bartosz.golaszewski(a)linaro.org> gpio: sch: use new GPIO line value setter callbacks Runyu Xiao <runyu.xiao(a)seu.edu.cn> coresight: etb10: restore atomic_t for shared reading state Marco Nenciarini <mnencia(a)kcore.it> PCI: Skip Resizable BAR restore on read error Ilpo Järvinen <ilpo.jarvinen(a)linux.intel.com> PCI: Move Resizable BAR code to rebar.c Ilpo Järvinen <ilpo.jarvinen(a)linux.intel.com> PCI: Add kerneldoc for pci_resize_resource() Ilpo Järvinen <ilpo.jarvinen(a)linux.intel.com> PCI: Fix restoring BARs on BAR resize rollback path Ilpo Järvinen <ilpo.jarvinen(a)linux.intel.com> PCI: Free saved list without holding pci_bus_sem Ilpo Järvinen <ilpo.jarvinen(a)linux.intel.com> PCI: Prevent resource tree corruption when BAR resize fails Giovanni Cabiddu <giovanni.cabiddu(a)intel.com> crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() Alexandru Hossu <hossu.alexandru(a)gmail.com> staging: rtl8723bs: fix OOB reads in rtw_get_sec_ie(), rtw_get_wapi_ie(), and rtw_get_wps_attr() Nikolay Kulikov <nikolayof23(a)gmail.com> staging: rtl8723bs: fix spaces around binary operators William Hansen-Baird <william.hansen.baird(a)gmail.com> staging: rtl8723bs: core: move constants to right side in comparison Sevinj Aghayeva <sevinj.aghayeva(a)gmail.com> staging: rtl8723bs: remove redundant braces in if statements Sevinj Aghayeva <sevinj.aghayeva(a)gmail.com> staging: rtl8723bs: Remove redundant else branches. Manivannan Sadhasivam <manivannan.sadhasivam(a)oss.qualcomm.com> PCI: mediatek: Fix IRQ domain leak when port fails to enable Christian Marangi <ansuelsmth(a)gmail.com> PCI: mediatek: Convert bool to single quirks entry and bitmap Jiri Slaby (SUSE) <jirislaby(a)kernel.org> PCI: controller: Use dev_fwnode() instead of of_fwnode_handle() Alexandru Hossu <hossu.alexandru(a)gmail.com> staging: rtl8723bs: fix heap buffer overflow in rtw_cfg80211_set_wpa_ie() Franziska Naepelt <franziska.naepelt(a)googlemail.com> staging: rtl8723bs: Fix space issues Franziska Naepelt <franziska.naepelt(a)googlemail.com> staging: rtl8723bs: Fix indentation issues Richard Zhu <hongxing.zhu(a)nxp.com> PCI: imx6: Fix IMX6SX_GPR12_PCIE_TEST_POWERDOWN handling Shoichiro Miyamoto <shoichiro.miyamoto(a)gmail.com> smb: client: restrict implied bcc[0] exemption to responses without data area Enzo Matsumiya <ematsumiya(a)suse.de> cifs: remove unused server parameter from calc_smb_size() Enzo Matsumiya <ematsumiya(a)suse.de> smb2: small refactor in smb2_check_message() Jakob Koschel <jakobkoschel(a)gmail.com> cifs: remove check of list iterator against head past the loop body Ronnie Sahlberg <lsahlber(a)redhat.com> cifs: Create a new shared file holding smb2 pdu definitions Mahesh Vaidya <mahesh.vaidya(a)altera.com> PCI: altera: Fix resource leaks on probe failure Alex Williamson <alex.williamson(a)nvidia.com> vfio/pci: Release the VGA arbiter client on register_device() failure Zhao Dongdong <zhaodongdong(a)kylinos.cn> ALSA: aoa: check snd_ctl_new1() return value Herman van Hazendonk <github.com(a)herrie.org> iio: common: st_sensors: honour channel endianness in read_axis_data Alexander Lobakin <aleksander.lobakin(a)intel.com> bitops: make BYTES_TO_BITS() treewide-available Jean-Baptiste Maneyrol <jean-baptiste.maneyrol(a)tdk.com> iio: imu: inv_icm42600: fix timestamping by limiting FIFO reading Jean-Baptiste Maneyrol <jean-baptiste.maneyrol(a)tdk.com> iio: imu: inv_icm42600: stabilized timestamp in interrupt Jean-Baptiste Maneyrol <jean-baptiste.maneyrol(a)tdk.com> iio: invensense: fix timestamp glitches when switching frequency Colin Ian King <colin.i.king(a)gmail.com> iio: invensense: remove redundant initialization of variable period Jean-Baptiste Maneyrol <jean-baptiste.maneyrol(a)tdk.com> iio: imu: inv_mpu6050: use the common inv_sensors timestamp module Jean-Baptiste Maneyrol <jean-baptiste.maneyrol(a)tdk.com> iio: make invensense timestamp module generic Jean-Baptiste Maneyrol <jean-baptiste.maneyrol(a)tdk.com> iio: move inv_icm42600 timestamp module in common Jean-Baptiste Maneyrol <jean-baptiste.maneyrol(a)tdk.com> iio: imu: inv_icm42600: make timestamp module chip independent Zhang Lixu <lixu.zhang(a)intel.com> iio: hid-sensor-rotation: Fix stale or zero output when reading raw values Runyu Xiao <runyu.xiao(a)seu.edu.cn> iio: imu: adis: add IRQF_NO_THREAD to non-FIFO trigger IRQ Rafael J. Wysocki <rafael.j.wysocki(a)intel.com> ACPI: NFIT: core: Fix acpi_nfit_init() error cleanup Jeremy Linton <jeremy.linton(a)arm.com> ACPI: CPPC: Suppress UBSAN warning caused by field misuse Pengpeng Hou <pengpeng(a)iscas.ac.cn> mtd: rawnand: lpc32xx_slc: fail DMA transfer on completion timeout Pengpeng Hou <pengpeng(a)iscas.ac.cn> mtd: rawnand: lpc32xx_mlc: fail DMA transfers on timeout Pengpeng Hou <pengpeng(a)iscas.ac.cn> mtd: rawnand: fsl_ifc: return errors for failed page reads Runyu Xiao <runyu.xiao(a)seu.edu.cn> mmc: vub300: defer reset until cmd_mutex is unlocked Pengpeng Hou <pengpeng(a)iscas.ac.cn> mtd: mchp23k256: use SPI match data for chip caps Pengpeng Hou <pengpeng(a)iscas.ac.cn> mtd: onenand: samsung: report DMA completion timeouts Rafael Beims <rafael.beims(a)toradex.com> wifi: mwifiex: fix permanently busy scans after multiple roam iterations Zhiling Zou <roxy520tt(a)gmail.com> wifi: mac80211: free ack status frame on TX header build failure Junrui Luo <moonafterrain(a)outlook.com> powerpc/spufs: fix out-of-bounds access in spufs_mem_mmap_access() Zhao Dongdong <zhaodongdong(a)kylinos.cn> reset: sunxi: fix memory region leak on ioremap failure Julian Anastasov <ja(a)ssi.bg> ipvs: fix more places with wrong ipv6 transport offsets Maoyi Xie <maoyixie.tju(a)gmail.com> memstick: ms_block: reject a card that reports too many blocks James Raphael Tiovalen <jamestiotio(a)gmail.com> macsec: fix promiscuity refcount leak in macsec_dev_open() Xuanqiang Luo <luoxuanqiang(a)kylinos.cn> llc: fix SAP refcount leak when creating incoming sockets Laxman Acharya Padhya <acharyalaxman8848(a)gmail.com> Bluetooth: btrtl: validate firmware patch bounds Asim Viladi Oglu Manizada <manizada(a)pm.me> net: openvswitch: reject oversized nested action attrs Abhishek Ojha <Abhishek.ojha(a)savoirfairelinux.com> regulator: ltc3676: Fix incorrect IRQSTAT bit offsets Dawei Feng <dawei.feng(a)seu.edu.cn> wifi: mac80211: fix memory leak in ieee80211_register_hw() Runyu Xiao <runyu.xiao(a)seu.edu.cn> wifi: rt2x00: avoid full teardown before work setup in probe Farhad Alemi <farhad.alemi(a)berkeley.edu> cgroup/cpuset: rebind mm mempolicy to effective_mems, not mems_allowed Tao Liu <ltao(a)redhat.com> riscv: Prevent NULL pointer dereference in machine_kexec_prepare() Michael Bommarito <michael.bommarito(a)gmail.com> drbd: reject data replies with an out-of-range payload size Yizhou Zhao <zhaoyz24(a)mails.tsinghua.edu.cn> ipvs: reset full ip_vs_seq structs in ip_vs_conn_new Yizhou Zhao <zhaoyz24(a)mails.tsinghua.edu.cn> ipvs: use parsed transport offset in SCTP state lookup Shuangpeng Bai <shuangpeng.kernel(a)gmail.com> llc: fix SAP refcount leak in llc_ui_autobind() Yousef Alhouseen <alhouseenyousef(a)gmail.com> mac802154: remove interfaces with RCU list deletion Gerald Schaefer <gerald.schaefer(a)linux.ibm.com> s390/monwriter: Reject buffer reuse with different data length HyeongJun An <sammiee5311(a)gmail.com> hwmon: (asus_atk0110) Check package count before accessing element Wentao Liang <vulab(a)iscas.ac.cn> ata: pata_pxa: Fix DMA channel leak on probe error Bryam Vargas <hexlabsecurity(a)proton.me> orangefs: keep the readdir entry size 64-bit in fill_from_part() Masami Hiramatsu (Google) <mhiramat(a)kernel.org> tracing/probes: Fix double addition of offset for @+FOFFSET Bryam Vargas <hexlabsecurity(a)proton.me> net/sched: sch_multiq: Replace direct dequeue call with peek and qdisc_dequeue_peeked Haoxiang Li <haoxiang_li2024(a)163.com> fsl/fman: Free init resources on KeyGen failure in fman_init() Haoxiang Li <haoxiang_li2024(a)163.com> net: liquidio: fix BAR resource leak on PF number failure Pengpeng Hou <pengpeng(a)iscas.ac.cn> hwmon: (w83793) remove vrm sysfs file on probe failure Pengpeng Hou <pengpeng(a)iscas.ac.cn> hwmon: (w83627hf) remove VID sysfs files on error and remove Abdun Nihaal <nihaal(a)cse.iitm.ac.in> bnx2x: fix potential memory leak in bnx2x_alloc_mem_bp() Sven Eckelmann <sven(a)narfation.org> batman-adv: clean untagged VLAN on netdev registration failure Sven Eckelmann <sven(a)narfation.org> batman-adv: ensure minimal ethernet header on TX Sven Eckelmann <sven(a)narfation.org> batman-adv: retrieve ethhdr after potential skb realloc on RX Shivam Kumar <kumar.shivam43666(a)gmail.com> nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path Shitalkumar Gandhi <shital.gandhi45(a)gmail.com> ieee802154: ca8210: fix pointer truncation in kfifo on 64-bit Shitalkumar Gandhi <shital.gandhi45(a)gmail.com> ieee802154: ca8210: fix cas_ctl leak on spi_async failure Michael Bommarito <michael.bommarito(a)gmail.com> ieee802154: allow legacy LLSEC ADD/DEL ops to pass strict validation Michael Bommarito <michael.bommarito(a)gmail.com> ieee802154: admin-gate legacy LLSEC dump operations Maoyi Xie <maoyixie.tju(a)gmail.com> net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink Maoyi Xie <maoyixie.tju(a)gmail.com> net: ip_vti: require CAP_NET_ADMIN in the device netns for changelink Maoyi Xie <maoyixie.tju(a)gmail.com> net: ip6_vti: require CAP_NET_ADMIN in the device netns for changelink Dawei Feng <dawei.feng(a)seu.edu.cn> net: ena: clean up XDP TX queues when regular TX setup fails Maoyi Xie <maoyixie.tju(a)gmail.com> net: sit: require CAP_NET_ADMIN in the device netns for changelink Andreas Kemnade <andreas(a)kemnade.info> gpios: palmas: add .get_direction() op Bradley Morgan <include(a)grrlz.net> cpu: hotplug: Bound hotplug states sysfs output Bradley Morgan <include(a)grrlz.net> cpu: hotplug: Preserve per instance callback errors Dmitry Torokhov <dmitry.torokhov(a)gmail.com> Input: ims-pcu - fix type confusion in CDC union descriptor parsing Dmitry Torokhov <dmitry.torokhov(a)gmail.com> Input: ims-pcu - fix potential infinite loop in CDC union descriptor parsing Dmitry Torokhov <dmitry.torokhov(a)gmail.com> Input: ims-pcu - fix out-of-bounds read in ims_pcu_irq() debug logging Dmitry Torokhov <dmitry.torokhov(a)gmail.com> Input: ims-pcu - fix DMA mapping violation in line setup Dmitry Torokhov <dmitry.torokhov(a)gmail.com> Input: ims-pcu - add response length checks Dmitry Torokhov <dmitry.torokhov(a)gmail.com> Input: ims-pcu - validate control endpoint type Dmitry Torokhov <dmitry.torokhov(a)gmail.com> Input: ims-pcu - release data interface on disconnect Dmitry Torokhov <dmitry.torokhov(a)gmail.com> Input: ims-pcu - fix use-after-free and double-free in disconnect Haoxiang Li <haoxiang_li2024(a)163.com> scsi: elx: efct: Fix I/O leak on unsupported additional CDB WenTao Liang <vulab(a)iscas.ac.cn> scsi: elx: efct: Fix refcount leak in efct_hw_io_abort() Bryam Vargas <hexlabsecurity(a)proton.me> scsi: target: core: Fix iSCSI ISID use-after-free in REGISTER AND MOVE Bryam Vargas <hexlabsecurity(a)proton.me> scsi: target: Bound PR-OUT TransportID parsing to the received buffer Michael Bommarito <michael.bommarito(a)gmail.com> scsi: xen: scsiback: Free unsubmitted command instead of double-putting it Michael Bommarito <michael.bommarito(a)gmail.com> scsi: xen: scsiback: Free the command tag on the TMR submit-failure path Xu Rao <raoxu(a)uniontech.com> scsi: sg: Report request-table problems when any status is set Haoxiang Li <haoxiang_li2024(a)163.com> scsi: hpsa: Fix DMA mapping leak on IOACCEL2 reset path Mikulas Patocka <mpatocka(a)redhat.com> dm-verity: increase sprintf buffer size Mikulas Patocka <mpatocka(a)redhat.com> dm_early_create: fix freeing used table on dm_resume failure Mikulas Patocka <mpatocka(a)redhat.com> dm-stats: fix merge accounting Mikulas Patocka <mpatocka(a)redhat.com> dm-stats: fix dm_jiffies_to_msec64 Benjamin Marzinski <bmarzins(a)redhat.com> dm-log: fix a bitset_size overflow on 32bit machines Mikulas Patocka <mpatocka(a)redhat.com> dm-bufio: fix wrong count calculation in dm_bufio_issue_discard Samuel Moelius <sam.moelius(a)trailofbits.com> dm era: fix out-of-bounds memory access for non-zero start sector Ming-Hung Tsai <mtsai(a)redhat.com> dm thin metadata: fix metadata snapshot consistency on commit failure Genjian Zhang <zhanggenjian(a)kylinos.cn> dm thin metadata: fix superblock refcount leak on snapshot shadow failure Haoxiang Li <haoxiang_li2024(a)163.com> net: sparx5: unregister blocking notifier on init failure Oliver Hartkopp <socketcan(a)hartkopp.net> can: bcm: add missing rcu list annotations and operations Oliver Hartkopp <socketcan(a)hartkopp.net> can: bcm: fix lockless bound/ifindex race and silent RX_SETUP failure Oliver Hartkopp <socketcan(a)hartkopp.net> can: isotp: use unconditional synchronize_rcu() in isotp_release() Bryam Vargas <hexlabsecurity(a)proton.me> nvmet-rdma: handle inline data with a nonzero offset Weiming Shi <bestswngs(a)gmail.com> sctp: validate STALE_COOKIE cause length before reading staleness Kunihiko Hayashi <hayashi.kunihiko(a)socionext.com> spi: uniphier: Fix completion initialization order before devm_request_irq() Wang Yan <wangyan01(a)kylinos.cn> time: Fix off-by-one in compat settimeofday() usec validation Jaewon Yang <yong010301(a)gmail.com> tpm: Make the TPM character devices non-seekable Thorsten Blum <thorsten.blum(a)linux.dev> tpm: fix event_size output in tpm1_binary_bios_measurements_show Maoyi Xie <maoyixie.tju(a)gmail.com> xfrm: xfrm_interface: require CAP_NET_ADMIN in the device netns for changelink Sanman Pradhan <psanman(a)juniper.net> xfrm: use compat translator only for u64 alignment mismatch Wentao Liang <vulab(a)iscas.ac.cn> xen/gntdev: fix error handling in ioctl Xuanqiang Luo <luoxuanqiang(a)kylinos.cn> i2c: mlxbf: Fix use-after-free in mlxbf_i2c_init_resource() Roman Vivchar <rva333(a)protonmail.com> i2c: mediatek: fix WRRD for SoCs without auto_restart option Joshua Crofts <joshua.crofts1(a)gmail.com> hwmon: (ltc2992) add missing 'select REGMAP_I2C' to Kconfig Bhargav Joshi <j.bhargav.u(a)gmail.com> irqchip/crossbar: Use correct index in crossbar_domain_free() Florian Fuchs <fuchsfl(a)gmail.com> mtd: maps: vmu-flash: fix NULL pointer dereference in initialization Michael Bommarito <michael.bommarito(a)gmail.com> ocfs2: reject non-inline dinodes with i_size and zero i_clusters Michael Bommarito <michael.bommarito(a)gmail.com> ocfs2: reject dinodes whose i_rdev disagrees with the file type Michael Bommarito <michael.bommarito(a)gmail.com> ocfs2: reject dinodes with non-canonical i_mode type Ian Bridges <icb(a)fastmail.org> ocfs2: fix NULL h_transaction deref in ocfs2_assure_trans_credits Kyle Zeng <kylebot(a)openai.com> ocfs2: avoid moving extents to occupied clusters Arseniy Krasnov <avkrasnov(a)rulkc.org> mtd: rawnand: fix condition in 'nand_select_target()' Vasiliy Kovalev <kovalev(a)altlinux.org> net/9p: fix infinite loop in p9_client_rpc on fatal signal Bastien Curutchet <bastien.curutchet(a)bootlin.com> mtd: rawnand: pl353: fix probe resource allocation Tristan Madani <tristan(a)talencesecurity.com> ocfs2: use kzalloc for quota recovery bitmap allocation Martin Wilck <martin.wilck(a)suse.com> scsi: smartpqi: Use shost_to_hba() in pqi_scan_finished() Ruoyu Wang <ruoyuw560(a)gmail.com> mtd: slram: remove failed entries from the device list Krzysztof Wilczyński <kwilczynski(a)kernel.org> proc: only bump parent nlink when registering directories Aaron Tomlin <atomlin(a)atomlin.com> mips: sched: Fix CPUMASK_OFFSTACK memory corruption WenTao Liang <vulab(a)iscas.ac.cn> power: supply: charger-manager: fix refcount leak in is_full_charged() Tristan Madani <tristan(a)talencesecurity.com> ntfs3: fix out-of-bounds read in decompress_lznt Michael Bommarito <michael.bommarito(a)gmail.com> ntfs3: bound to_move in indx_insert_into_root before hdr_insert_head Michael Bommarito <michael.bommarito(a)gmail.com> ntfs3: cap RESTART_TABLE free-chain walker at rt->used Michael Bommarito <michael.bommarito(a)gmail.com> fs/ntfs3: bound NTFS_DE view.data_off in UpdateRecordData{Root,Allocation} Michael Bommarito <michael.bommarito(a)gmail.com> fs/ntfs3: add depth limit to indx_find_buffer to prevent stack overflow Konstantin Komarov <almaz.alexandrovich(a)paragon-software.com> fs/ntfs3: validate lcns_follow in log_replay conversion Konstantin Komarov <almaz.alexandrovich(a)paragon-software.com> fs/ntfs3: bound attr_off in UpdateResidentValue against data_off Konstantin Komarov <almaz.alexandrovich(a)paragon-software.com> fs/ntfs3: bound DeleteIndexEntryAllocation memmove length Zhan Xusheng <zhanxusheng1024(a)gmail.com> fs/ntfs3: fix syncing wrong inode on DIRSYNC cross-directory rename Maciej W. Rozycki <macro(a)orcam.me.uk> MIPS: DEC: Ensure 32-bit stack location for o32 prom_printf() Johan Hovold <johan(a)kernel.org> MIPS: ip22-gio: fix device reference leak in probe Johan Hovold <johan(a)kernel.org> MIPS: ip22-gio: fix kfree() of static object Johan Hovold <johan(a)kernel.org> MIPS: ip22-gio: fix gio device memory leak Chuck Lever <chuck.lever(a)oracle.com> lockd: Plug nlm_file refcount leak on cached nlm_do_fopen() failure Chuck Lever <chuck.lever(a)oracle.com> lockd: Plug nlm_file leak when nlm_do_fopen() fails Abdun Nihaal <nihaal(a)cse.iitm.ac.in> nvdimm/btt: Free arena sub-allocations on discover_arenas() error path Abdun Nihaal <nihaal(a)cse.iitm.ac.in> nvdimm/btt: Free arenas on btt_init() error paths Junrui Luo <moonafterrain(a)outlook.com> jbd2: fix integer underflow in jbd2_journal_initialize_fast_commit() Pauli Virtanen <pav(a)iki.fi> Bluetooth: SCO: hold sk properly in sco_conn_ready Pauli Virtanen <pav(a)iki.fi> Bluetooth: SCO: fix sleeping under spinlock in sco_conn_ready Bartosz Golaszewski <bartosz.golaszewski(a)oss.qualcomm.com> mfd: tps6586x: Fix OF node refcount Sven Eckelmann <sven(a)narfation.org> batman-adv: tt: prevent TVLV OOB check overflow Sven Eckelmann <sven(a)narfation.org> batman-adv: frag: fix primary_if leak on failed linearization Sven Eckelmann <sven(a)narfation.org> batman-adv: frag: free unfragmentable packet Sven Eckelmann <sven(a)narfation.org> batman-adv: fix VLAN priority offset Sven Eckelmann <sven(a)narfation.org> batman-adv: tt: avoid request storms during pending request Sven Eckelmann <sven(a)narfation.org> batman-adv: dat: fix tie-break for candidate selection Sven Eckelmann <sven(a)narfation.org> batman-adv: dat: ensure accessible eth_hdr proto field Sven Eckelmann <sven(a)narfation.org> batman-adv: bla: reacquire gw address after skb realloc Sven Eckelmann <sven(a)narfation.org> batman-adv: dat: acquire ARP hw source only after skb realloc Sven Eckelmann <sven(a)narfation.org> batman-adv: access unicast_ttvn skb->data only after skb realloc Sven Eckelmann <sven(a)narfation.org> batman-adv: gw: acquire ethernet header only after skb realloc Thorsten Blum <thorsten.blum(a)linux.dev> x86/boot: Reject too long acpi_rsdp= values Thorsten Blum <thorsten.blum(a)linux.dev> x86/boot: Validate console=uart8250 baud rate to fix early boot hang Guangshuo Li <lgs201920130244(a)gmail.com> mfd: sm501: Fix reference leak on failed device registration Armin Wolf <W_Armin(a)gmx.de> leds: uleds: Fix potential buffer overread Wang Jun <1742789905(a)qq.com> soc: fsl: qe: panic on ioremap() failure in qe_reset() Siddharth Vadapalli <s-vadapalli(a)ti.com> soc: ti: k3-ringacc: Fix access mode for k3_ringacc_ring_pop_tail_io/proxy Guangshuo Li <lgs201920130244(a)gmail.com> gpu: host1x: Fix device reference leak in host1x_device_parse_dt() error path Xiang Mei (Microsoft) <xmei5(a)asu.edu> netfilter: bridge: fix stale prevhdr pointer in br_ip6_fragment() Wyatt Feng <bronzed_45_vested(a)icloud.com> netfilter: xt_nat: reject unsupported target families Yizhou Zhao <zhaoyz24(a)mails.tsinghua.edu.cn> netfilter: nf_conncount: fix zone comparison in tuple dedup Xiang Mei <xmei5(a)asu.edu> netfilter: nf_conntrack_reasm: guard mac_header adjustment after IPv6 defrag Florian Westphal <fw(a)strlen.de> netfilter: nf_nat_sip: reload possible stale data pointer Wyatt Feng <bronzed_45_vested(a)icloud.com> netfilter: xt_cluster: reject template conntracks in hash match David Carlier <devnexen(a)gmail.com> netfilter: nfnl_cthelper: apply per-class values when updating policies Muhammad Bilal <meatuni001(a)gmail.com> netfilter: nf_conntrack_irc: fix parse_dcc() off-by-one OOB read Abdun Nihaal <nihaal(a)cse.iitm.ac.in> fbdev: tridentfb: fix potential memory leak in trident_pci_probe() Abdun Nihaal <nihaal(a)cse.iitm.ac.in> fbdev: nvidia: fix potential memory leak in nvidiafb_probe() Abdun Nihaal <nihaal(a)cse.iitm.ac.in> fbdev: carminefb: fix potential memory leak in alloc_carmine_fb() Abdun Nihaal <nihaal(a)cse.iitm.ac.in> fbdev: tdfxfb: fix potential memory leak in tdfxfb_probe() Abdun Nihaal <nihaal(a)cse.iitm.ac.in> fbdev: uvesafb: fix potential memory leak in uvesafb_probe() Abdun Nihaal <nihaal(a)cse.iitm.ac.in> fbdev: s3fb: fix potential memory leak in s3_pci_probe() Abdun Nihaal <nihaal(a)cse.iitm.ac.in> fbdev: i740fb: fix potential memory leak in i740fb_probe() Abdun Nihaal <nihaal(a)cse.iitm.ac.in> fbdev: radeon: fix potential memory leak in radeonfb_pci_register() Li RongQing <lirongqing(a)baidu.com> fbdev: sm712: Fix operator precedence in big_swap macro Abdun Nihaal <nihaal(a)cse.iitm.ac.in> fbdev: hecubafb: fix potential memory leak in hecubafb_probe() Abdun Nihaal <nihaal(a)cse.iitm.ac.in> fbdev: broadsheetfb: fix potential memory leak in broadsheetfb_probe() Abdun Nihaal <nihaal(a)cse.iitm.ac.in> fbdev: metronomefb: fix potential memory leak in metronomefb_probe() Hyunwoo Kim <imv4bel(a)gmail.com> KVM: arm64: vgic: Check the interrupt is still ours before migrating it Nickolay Goppen <setotau(a)mainlining.org> arm64: dts: qcom: sdm630: describe adsp_mem region properly Yong Wang <edragain(a)163.com> net: ife: require ETH_HLEN to be pullable in ife_decode() Zhengchuan Liang <zcliangcn(a)gmail.com> net: atm: reject out-of-range traffic classes in QoS validation Michael Bommarito <michael.bommarito(a)gmail.com> net: qrtr: fix 32-bit integer overflow in qrtr_endpoint_post() Zhang Tianci <zhangtianci.1997(a)bytedance.com> vduse: Fix race in vduse_dev_msg_sync and vduse_dev_read_iter Wentao Liang <vulab(a)iscas.ac.cn> mlxsw: fix refcount leak in mlxsw_sp_vrs_lpm_tree_replace() Guangshuo Li <lgs201920130244(a)gmail.com> smb: client: fix overflow in passthrough ioctl bounds check Li RongQing <lirongqing(a)baidu.com> net/mlx5: Fix L3 tunnel entropy refcount leak Timur Tabi <ttabi(a)nvidia.com> regulator: core: regulator_lock_two() should test for EDEADLK not EDEADLOCK Douglas Anderson <dianders(a)chromium.org> regulator: core: Make regulator_lock_two() logic easier to follow Cao Guanghui <caoguanghui(a)kylinos.cn> dm era: fix NULL pointer dereference in metadata_open() Julian Anastasov <ja(a)ssi.bg> ipvs: ensure inner headers in ICMP errors are in headroom Yizhou Zhao <zhaoyz24(a)mails.tsinghua.edu.cn> ipvs: fix PMTU for GUE/GRE tunnel ICMP errors Yizhou Zhao <zhaoyz24(a)mails.tsinghua.edu.cn> ipvs: use parsed transport offset in TCP state lookup Yizhou Zhao <zhaoyz24(a)mails.tsinghua.edu.cn> ipvs: pass parsed transport offset to state handlers Eric Dumazet <edumazet(a)google.com> ipv6: mcast: Fix potential UAF in MLD delayed work Kuniyuki Iwashima <kuniyu(a)google.com> ipv6: mcast: Replace locking comments with lockdep annotations. Suman Ghosh <sumang(a)marvell.com> octeontx2-pf: check DMAC extraction support before filtering Suman Ghosh <sumang(a)marvell.com> octeontx2-pf: Add additional checks while configuring ucast/bcast/mcast rules Suman Ghosh <sumang(a)marvell.com> octeontx2-af: Allow mkex profile without DMAC and add L2M/L2B header extraction support Ratheesh Kannoth <rkannoth(a)marvell.com> octeontx2-af: Drop rules for NPC MCAM Ratheesh Kannoth <rkannoth(a)marvell.com> octeontx2-af: FLR handler for exact match table. Ratheesh Kannoth <rkannoth(a)marvell.com> octeontx2-af: devlink configuration support Ratheesh Kannoth <rkannoth(a)marvell.com> octeontx2-af: Exact match scan from kex profile Ratheesh Kannoth <rkannoth(a)marvell.com> octeontx2-af: Exact match support Ratheesh Kannoth <rkannoth(a)marvell.com> octeontx2-af: Use hashed field in MCAM key Rakesh Babu <rsaladi2(a)marvell.com> octeontx2-af: debugfs: Add channel and channel mask. Samuel Moelius <sam.moelius(a)trailofbits.com> net/sched: cake: reject overhead values that underflow length Enrico Pozzobon <enrico.pozzobon(a)dissecto.com> net: usb: lan78xx: disable VLAN filter in promiscuous mode Hui Wang <hui.wang(a)canonical.com> ring-buffer: Fix event length with forced 8-byte alignment Weiming Shi <bestswngs(a)gmail.com> Bluetooth: bpa10x: avoid OOB read of revision string in bpa10x_setup() Pauli Virtanen <pav(a)iki.fi> Bluetooth: ISO: exclude RFU bits from ISO_SDU_Length Xiang Mei <xmei5(a)asu.edu> net/smc: fix UAF in smc_cdc_rx_handler() by pinning the socket Xiang Mei <xmei5(a)asu.edu> net: qualcomm: rmnet: validate MAP frame length before ingress parsing Daniele Palmas <dnlplm(a)gmail.com> net: qualcomm: rmnet: add tx packets aggregation Shigeru Yoshida <syoshida(a)redhat.com> qede: fix off-by-one in BD ring consumption on build_skb failure Wyatt Feng <bronzed_45_vested(a)icloud.com> netfilter: xt_connmark: reject invalid shift parameters Zhixing Chen <running910(a)gmail.com> netfilter: ip6tables: mark malformed IPv6 extension headers for hotdrop Feng Wu <wufengwufengwufeng(a)gmail.com> netfilter: xt_rateest: fix u64 truncation in xt_rateest_mt() Wyatt Feng <bronzed_45_vested(a)icloud.com> netfilter: xt_u32: reject invalid shift counts Qihang <q.h.hack.winter(a)gmail.com> gue: validate REMCSUM private option length Xiang Mei <xmei5(a)asu.edu> net: usb: net1080: validate packet_len before pad-byte access in rx_fixup Anshuman Khandual <anshuman.khandual(a)arm.com> arm64/mm: Optimize TLB flush in unmap_hotplug_[pmd|pud]_range() Lee Jones <lee(a)kernel.org> HID: core: Fix OOB read in hid_get_report for numbered reports Georgiy Osokin <g.osokin(a)auroraos.dev> HID: picolcd: prevent NULL pointer dereference in picolcd_send_and_wait() Myeonghun Pak <mhun512(a)gmail.com> ata: sata_gemini: unwind clocks on IDE pinctrl errors David Howells <dhowells(a)redhat.com> afs: Fix unchecked-length string display in debug statement David Howells <dhowells(a)redhat.com> afs: Fix the volume AFS_VOLUME_RM_TREE is set on David Howells <dhowells(a)redhat.com> afs: Fix vllist leak David Howells <dhowells(a)redhat.com> afs: Fix callback service message parsers to pass through -EAGAIN Dan Carpenter <error27(a)gmail.com> afs: Fix error code in afs_extract_vl_addrs() Samuel Moelius <sam.moelius(a)trailofbits.com> net/sched: hhf: clear heavy-hitter state on reset Vladimir Zapolskiy <vz(a)kernel.org> gpio: timberdale: Return -ENOMEM on dynamic memory allocation in probe Sechang Lim <rhkrqnwk98(a)gmail.com> net/sched: act_bpf: use rcu_dereference_bh() to read the filter Gleb Markov <markov.gi(a)npc-ksb.ru> cxgb4: Fix decode strings dump for T6 adapters Longjun Tang <tanglongjun(a)kylinos.cn> virtio_net: disable cb when NAPI is busy-polled Yuho Choi <dbgh9129(a)gmail.com> irqchip/gic-v3-its: Fix OF node reference leak Martin Kaiser <martin(a)kaiser.cx> tracing: eprobe: read the complete FILTER_PTR_STRING pointer Masami Hiramatsu (Google) <mhiramat(a)kernel.org> tracing/events: Fix to check the simple_tsk_fn creation Ido Schimmel <idosch(a)nvidia.com> bridge: stp: Fix a potential use-after-free when deleting a bridge Rosen Penev <rosenp(a)gmail.com> net: gianfar: dispose irq mappings on probe failure and device removal Xiang Mei <xmei5(a)asu.edu> usbnet: gl620a: fix out-of-bounds read in genelink_rx_fixup() Pengfei Zhang <zhangfeionline(a)gmail.com> ipv6: fib6: fix NULL deref in fib6_walk_continue() on multi-batch dump Eric Dumazet <edumazet(a)google.com> ipv6: remove RTNL protection from inet6_dump_fib() Eric Dumazet <edumazet(a)google.com> inet: allow ip_valid_fib_dump_req() to be called with RTNL or RCU Eric Dumazet <edumazet(a)google.com> rtnetlink: add RTNL_FLAG_DUMP_UNLOCKED flag Eric Dumazet <edumazet(a)google.com> rtnetlink: change nlk->cb_mutex role Matti Vaittinen <mazziesaccount(a)gmail.com> hwmon: adm1275: Prevent reading uninitialized stack Matvey Kovalev <matvey.kovalev(a)ispras.ru> qede: fix out-of-bounds check for cqe->len_list[] Nuoqi Gui <gnq25(a)mails.tsinghua.edu.cn> seg6: validate SRH length before reading fixed fields Pengpeng Hou <pengpeng(a)iscas.ac.cn> gpio: htc-egpio: use managed gpiochip registration Pengpeng Hou <pengpeng(a)iscas.ac.cn> gpio: mvebu: fail probe if gpiochip registration fails Pengpeng Hou <pengpeng(a)iscas.ac.cn> spi: sh-msiof: abort transfers when reset times out Martin Kaiser <martin(a)kaiser.cx> tracing: probes: fix typo in a log message Ruoyu Wang <ruoyuw560(a)gmail.com> net: sungem: fix probe error cleanup Yun Zhou <yun.zhou(a)windriver.com> net: mvneta: re-enable percpu interrupt on resume Haoxiang Li <haoxiang_li2024(a)163.com> rtc: cmos: unregister HPET IRQ handler on probe failure Fredrik M Olsson <fredrik.m.olsson(a)axis.com> rtc: ds1307: Fix off-by-one issue with wday for rx8130 Huiwen He <hehuiwen(a)kylinos.cn> smb/client: preserve errors from smb2_set_sparse() Fernando Fernandez Mancera <fmancera(a)suse.de> ipv6: fix error handling in disable_policy sysctl Fernando Fernandez Mancera <fmancera(a)suse.de> ipv6: fix error handling in forwarding sysctl Fernando Fernandez Mancera <fmancera(a)suse.de> ipv6: fix error handling in ignore_routes_with_linkdown sysctl Fernando Fernandez Mancera <fmancera(a)suse.de> ipv6: fix error handling in disable_ipv6 sysctl Jamal Hadi Salim <jhs(a)mojatatu.com> net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle Eric Dumazet <edumazet(a)google.com> veth: fix NAPI leak in XDP enable error path Aleksandrova Alyona <aga(a)itb.spb.ru> net: dsa: sja1105: round up PTP perout pin duration Xiang Mei <xmei5(a)asu.edu> net, bpf: check master for NULL in xdp_master_redirect() Krzysztof Wilczyński <kwilczynski(a)kernel.org> alpha/PCI: Fix __pci_mmap_fits() overflow for zero-length BARs Krzysztof Wilczyński <kwilczynski(a)kernel.org> alpha/PCI: Add security_locked_down() check to pci_mmap_resource() Koichiro Den <den(a)valinux.co.jp> NTB: epf: Make db_valid_mask cover only real doorbell bits Runyu Xiao <runyu.xiao(a)seu.edu.cn> netfilter: nft_synproxy: stop bypassing the priv->info snapshot Fernando Fernandez Mancera <fmancera(a)suse.de> netfilter: nf_conncount: prevent connlimit drops for early confirmed ct Kuniyuki Iwashima <kuniyu(a)google.com> ipv4: fib: Don't ignore error route in local/main tables. Xiang Mei <xmei5(a)asu.edu> ipv6: Fix null-ptr-deref in fib6_nh_mtu_change(). Gil Portnoy <dddhkts1(a)gmail.com> ksmbd: fix use-after-free of conn->preauth_info in concurrent SMB2 NEGOTIATE Manivannan Sadhasivam <manivannan.sadhasivam(a)oss.qualcomm.com> PCI: endpoint: pci-epf-ntb: Add check to detect 'db_count' value of 0 Manivannan Sadhasivam <manivannan.sadhasivam(a)oss.qualcomm.com> PCI: endpoint: pci-epf-vntb: Add check to detect 'db_count' value of 0 Xiang Mei <xmei5(a)asu.edu> drm/edid: fix OOB read in drm_parse_tiled_block() Avinash Duduskar <avinash.duduskar(a)gmail.com> bpf: zero-initialize the fib lookup flow struct Nuoqi Gui <gnq25(a)mails.tsinghua.edu.cn> bpf: Fix stack slot index in nospec checks Ronan Dalton <ronan.dalton(a)alliedtelesis.co.nz> rtc: ds1307: handle oscillator stop flag for ds1337/ds1339/ds3231 Antoni Pokusinski <apokusinski01(a)gmail.com> rtc: abx80x: fix the RTC_VL_CLR clearing all status flags Aboorva Devarajan <aboorvad(a)linux.ibm.com> selftests/mm: fix exclusive_cow test fork() handling Sayali Patil <sayalip(a)linux.ibm.com> selftests/mm: allow PUD-level entries in compound testcase of hmm tests Sayali Patil <sayalip(a)linux.ibm.com> selftests/mm: clarify alternate unmapping in compaction_test Bhargav Joshi <j.bhargav.u(a)gmail.com> irqchip/crossbar: Fix parent domain resource leak Florian Westphal <fw(a)strlen.de> netfilter: nft_meta_bridge: fix NFT_META_BRI_IIFPVID stack leak Florian Westphal <fw(a)strlen.de> netfilter: nf_reject: skip iphdr options when looking for icmp header Jozsef Kadlecsik <kadlec(a)netfilter.org> netfilter: ipset: fix order of kfree_rcu() and rcu_assign_pointer() Aleksandr Nogikh <nogikh(a)google.com> ieee802154: fix kernel-infoleak in dgram_recvmsg() Ivan Abramov <i.abramov(a)mt-integration.ru> ieee802154: Remove WARN_ON() in cfg802154_pernet_exit() Andy Shevchenko <andriy.shevchenko(a)linux.intel.com> ACPI: resource: Amend kernel-doc style Ricardo Neri <ricardo.neri-calderon(a)linux.intel.com> thermal: intel: Fix dangling resources on thermal_throttle_online() failure Breno Leitao <leitao(a)debian.org> arm64/hw_breakpoint: reject unaligned watchpoints that would truncate BAS Ioana Ciornei <ioana.ciornei(a)nxp.com> dpaa2-switch: fix VLAN upper check not rejecting bridge join Xin Long <lucien.xin(a)gmail.com> sctp: hold socket lock when dumping endpoints in sctp_diag Jakub Kicinski <kuba(a)kernel.org> net: psample: fix info leak in PSAMPLE_ATTR_DATA Ratheesh Kannoth <rkannoth(a)marvell.com> octeontx2-pf: Fix leak of SQ timestamp buffer on teardown Eric Dumazet <edumazet(a)google.com> xfrm: validate selector family and prefixlen during match Pengpeng Hou <pengpeng(a)iscas.ac.cn> sparc: led: avoid trimming a newline from empty writes John Johansen <john.johansen(a)canonical.com> apparmor: fix label can not be immediately before a declaration Adrian Hunter <adrian.hunter(a)intel.com> i3c: master: Prevent reuse of dynamic address on device add failure Zygmunt Krynicki <me(a)zygoon.pl> apparmor: put secmark label after secid lookup Zygmunt Krynicki <me(a)zygoon.pl> apparmor: aa_getprocattr free procattr leak on format failure Maxime Bélair <maxime.belair(a)canonical.com> apparmor: fix potential UAF in aa_replace_profiles Ryan Lee <ryan.lee(a)canonical.com> apparmor: grab ns lock and refresh when looking up changehat child profiles Zygmunt Krynicki <me(a)zygoon.pl> apparmor: aa_label_alloc use aa_label_free on alloc failure Ruoyu Wang <ruoyuw560(a)gmail.com> apparmor: check label build before no_new_privs test Manivannan Sadhasivam <manivannan.sadhasivam(a)oss.qualcomm.com> PCI: mediatek: Use actual physical address instead of virt_to_phys() Ryder Lee <ryder.lee(a)mediatek.com> PCI: mediatek: Fix possible truncation in mtk_pcie_parse_port() Arnaldo Carvalho de Melo <acme(a)redhat.com> tools lib api: Fix mount_overload() snprintf truncation and toupper range Arnaldo Carvalho de Melo <acme(a)redhat.com> tools lib api: Fix filename__write_int() writing uninitialized stack data Arnaldo Carvalho de Melo <acme(a)redhat.com> tools lib api: Fix missing null termination in filename__read_int/ull() Chris Mason <clm(a)meta.com> xprtrdma: Fix bcall rep leak and unbounded peek Lad Prabhakar <prabhakar.mahadev-lad.rj(a)bp.renesas.com> PCI: rcar-host: Remove unused LIST_HEAD(res) Li RongQing <lirongqing(a)baidu.com> PCI: mediatek: Fix operator precedence in PCIE_FTS_NUM_L0 macro Mike Snitzer <snitzer(a)kernel.org> NFSv4/flexfiles: honor FF_FLAGS_NO_IO_THRU_MDS in pg_get_mirror_count_write Mike Snitzer <snitzer(a)kernel.org> NFSv4/flexfiles: honor FF_FLAGS_NO_IO_THRU_MDS on fatal DS connect errors Dai Ngo <dai.ngo(a)oracle.com> NFSv4/pnfs: defer return_range callbacks until after inode unlock Sagi Grimberg <sagi(a)grimberg.me> pNFS/filelayout: fix cheking if a layout is striped Phillip Varney <pbvarney(a)protonmail.com> clk: qcom: a53: Corrected frequency multiplier for 1152MHz Nuno Sá <nuno.sa(a)analog.com> dmaengine: Fix possible use after free Icenowy Zheng <zhengxingda(a)iscas.ac.cn> dmaengine: qcom: gpi: set DMA_PRIVATE capability Srinivasan Shanmugam <srinivasan.shanmugam(a)amd.com> drm/amd/display: Add missing kdoc for ALLM parameters Rosen Penev <rosenp(a)gmail.com> HID: logitech-hidpp: remove excess kernel-doc member in hidpp_scroll_counter Sanjay Chitroda <sanjayembeddedse(a)gmail.com> iio: accel: mma8452: handle I2C read error(s) in mma8452_read() Joshua Crofts <joshua.crofts1(a)gmail.com> iio: magnetometer: ak8975: fix potential kernel stack memory leak Joshua Crofts <joshua.crofts1(a)gmail.com> iio: light: si1133: prevent race condition on timeout Joshua Crofts <joshua.crofts1(a)gmail.com> iio: light: si1133: reset counter to prevent race condition James Kim <james010kim(a)gmail.com> char: tlclk: fix use-after-free in tlclk_cleanup() Seungjin Bae <eeodqql09(a)gmail.com> usb: host: max3421: Reject hub port requests for non-existent ports Seungjin Bae <eeodqql09(a)gmail.com> usb: host: max3421: Fix shift-out-of-bounds in max3421_hub_control() Guangshuo Li <lgs201920130244(a)gmail.com> staging: most: video: avoid double free on video register failure Andy Shevchenko <andriy.shevchenko(a)linux.intel.com> phy: phy-can-transceiver: Check driver match and driver data against NULL Rafael J. Wysocki <rafael.j.wysocki(a)intel.com> platform/x86: xo15-ebook: Fix wakeup source and GPE handling Rafael J. Wysocki <rafael.j.wysocki(a)intel.com> x86/platform/olpc: xo15: Drop wakeup source on driver removal Leo Yan <leo.yan(a)arm.com> coresight: etm4x: Correct TRCVMIDCCTLR1 save and restore Yingchao Deng <yingchao.deng(a)oss.qualcomm.com> coresight: cti: Fix DT filter signals silently ignored Alexandru Hossu <hossu.alexandru(a)gmail.com> staging: nvec: fix use-after-free in nvec_rx_completed() Yizhou Zhao <zhaoyz24(a)mails.tsinghua.edu.cn> net/9p: fix race condition on rdma->state in trans_rdma.c Aleksandr Nogikh <nogikh(a)google.com> ocfs2: fix circular locking dependency in ocfs2_dio_end_io_write Guangshuo Li <lgs201920130244(a)gmail.com> ksmbd: fix use-after-free in same_client_has_lease() Eric Dumazet <edumazet(a)google.com> tcp: ipv6: clamp default adverting MSS to avoid GSO_BY_FRAGS (0xFFFF) Eric Dumazet <edumazet(a)google.com> tipc: fix UAF in tipc_l2_send_msg() Gui-Dong Han <hanguidong02(a)gmail.com> KEYS: Use acquire when reading state in keyring search Aboorva Devarajan <aboorvad(a)linux.ibm.com> powerpc/kexec: fix double get_cpu() imbalance in kexec_prepare_cpus Aboorva Devarajan <aboorvad(a)linux.ibm.com> powerpc/powernv: fix preempt count leak in pnv_kexec_wait_secondaries_down Aboorva Devarajan <aboorvad(a)linux.ibm.com> powerpc/perf: fix preempt count underflow in fsl_emb_pmu_del Yadan Fan <ydfan(a)suse.com> MIPS: mm: Fix out-of-bounds write in maar_res_walk() Sechang Lim <rhkrqnwk98(a)gmail.com> bpf, sockmap: fix integer overflow in bpf_msg_pop_data() bounds check Weiming Shi <bestswngs(a)gmail.com> bpf, sockmap: reject overflowing copy + len in bpf_msg_push_data() Huiwen He <hehuiwen(a)kylinos.cn> smb/client: always return a value for FS_IOC_GETFLAGS Florian Westphal <fw(a)strlen.de> netfilter: nf_conncount: callers must hold rcu read lock Runyu Xiao <runyu.xiao(a)seu.edu.cn> kcm: use WRITE_ONCE() when changing lower socket callbacks Sun Jian <sun.jian.kdev(a)gmail.com> bpf: Run generic devmap egress prog on private skb Aditya Garg <gargaditya(a)linux.microsoft.com> net: mana: guard TX wq object destroy with INVALID_MANA_HANDLE check Aditya Garg <gargaditya(a)linux.microsoft.com> net: mana: initialize gdma queue id to INVALID_QUEUE_ID Victor Nogueira <victor(a)mojatatu.com> net/sched: sch_codel: Do not call qdisc_tree_reduce_backlog during peek before restoring qlen Victor Nogueira <victor(a)mojatatu.com> net/sched: sch_fq_codel: Do not call qdisc_tree_reduce_backlog during peek before restoring qlen Guangshuo Li <lgs201920130244(a)gmail.com> ASoC: adau1372: Clear PLL_EN on failed PLL lock without reset GPIO Lars Pöschel <lars.poeschel(a)edag.com> spi: xilinx: use FIFO occupancy register to determine buffer size Herbert Xu <herbert(a)gondor.apana.org.au> crypto: rng - Free default RNG on module exit Felix Gu <ustc.gu(a)gmail.com> crypto: cavium/cpt - fix DMA cleanup using wrong loop index Felix Gu <ustc.gu(a)gmail.com> crypto: marvell/octeontx - fix DMA cleanup using wrong loop index Michael Bommarito <michael.bommarito(a)gmail.com> tipc: reject inverted service ranges from peer bindings Michael Bommarito <michael.bommarito(a)gmail.com> tipc: prevent snt_unacked underflow on CONN_ACK Michael Bommarito <michael.bommarito(a)gmail.com> tipc: require net admin for TIPCv2 netlink mutators Victor Nogueira <victor(a)mojatatu.com> net/sched: sch_hfsc: Don't make class passive twice Xin Long <lucien.xin(a)gmail.com> sctp: validate embedded address parameter length Xiang Mei <xmei5(a)asu.edu> bridge: cfm: reject invalid CCM interval at configuration time Kuniyuki Iwashima <kuniyu(a)google.com> net: fib_rules: Don't dump dying fib_rule in fib_rules_dump(). HyeongJun An <sammiee5311(a)gmail.com> ASoC: tegra: tegra210_ahub: Validate written enum value HyeongJun An <sammiee5311(a)gmail.com> ASoC: fsl: fsl_audmix: Validate written enum values HyeongJun An <sammiee5311(a)gmail.com> ASoC: codecs: hdac_hdmi: Validate written enum value Maher Sanalla <msanalla(a)nvidia.com> RDMA/mlx5: Fix undefined shift of user RQ WQE size Patrisious Haddad <phaddad(a)nvidia.com> RDMA/mlx5: Remove raw RSS QP restrack tracking Maxwell Doose <m32285159(a)gmail.com> fs: efs: remove unneeded debug prints Heiko Carstens <hca(a)linux.ibm.com> s390/process: Fix kernel thread function pointer type Daniel Borkmann <daniel(a)iogearbox.net> bpf: Tighten cgroup storage cookie checks for prog arrays Yonghong Song <yonghong.song(a)linux.dev> selftests/bpf: Fix bpf_iter/task_vma test Louis Scalbert <louis.scalbert(a)6wind.com> bonding: 3ad: fix mux port state on oper down longlong yan <yanlonglong(a)kylinos.cn> tools/virtio: check mmap return value in vringh_test Zhang Tianci <zhangtianci.1997(a)bytedance.com> vduse: Requeue failed read to send_list head Qihang Tang <q.h.hack.winter(a)gmail.com> vhost/vdpa: validate virtqueue index in mmap and fault paths Qihang Tang <q.h.hack.winter(a)gmail.com> vduse: hold vduse_lock across IDR lookup in open path Jason Gunthorpe <jgg(a)ziepe.ca> IB/mlx4: Fill in the access_flags if IB_MR_REREG_ACCESS is not specified David Laight <david.laight.linux(a)gmail.com> fbdev: sm501fb: Fix buffer errors in OF binding code Filipe Manana <fdmanana(a)suse.com> btrfs: fix invalid pointer dereference in __btrfs_run_delayed_refs() Wolfram Sang <wsa+renesas(a)sang-engineering.com> hwspinlock: qcom: avoid uninitialized struct members Hui Zhu <zhuhui(a)kylinos.cn> vmalloc: fix NULL pointer dereference in is_vm_area_hugepages() Luca Leonardo Scorcia <l.scorcia(a)gmail.com> pinctrl: mediatek: mt8167: Fix Schmitt trigger register offset of pins 34-39 Luca Leonardo Scorcia <l.scorcia(a)gmail.com> pinctrl: mediatek: mt8516: Fix Schmitt trigger register offset of pins 34-39 Yuho Choi <dbgh9129(a)gmail.com> watchdog: unregister PM notifier on watchdog unregister Al Viro <viro(a)zeniv.linux.org.uk> configfs: fix lockless traversals of ->s_children Dmitry Vyukov <dvyukov(a)google.com> firmware_loader: Fix recursive lock in device_cache_fw_images() Felix Gu <ustc.gu(a)gmail.com> spi: ep93xx: fix double-free of zeropage on DMA setup failure Jason Gunthorpe <jgg(a)ziepe.ca> IB/mlx5: Properly support implicit ODP rereg_mr Jason Gunthorpe <jgg(a)ziepe.ca> IB/mlx5: Don't take the rereg_mr fallback without a new translation Pengjie Zhang <zhangpengjie2(a)huawei.com> cpufreq: Documentation: fix conservative governor freq_step description Yuho Choi <dbgh9129(a)gmail.com> ACPI: IPMI: Fix message kref handling on dead device Kyle Zeng <kylebot(a)openai.com> ALSA: seq: Clear variable event pointer on read Takashi Iwai <tiwai(a)suse.de> ALSA: seq: Add UMP support Takashi Iwai <tiwai(a)suse.de> ALSA: seq: Introduce SNDRV_SEQ_IOCTL_USER_PVERSION ioctl Rui Qi <qirui.001(a)bytedance.com> riscv: stacktrace: Remove bogus -0x4 offset in non-FP walk_stackframe Tristan Madani <tristan(a)talencesecurity.com> wifi: wcn36xx: fix OOB read from firmware count in PRINT_REG_INFO indication Leon Hwang <leon.hwang(a)linux.dev> bpf: Update transport_header when encapsulating UDP tunnel in lwt Jacob Moroni <jmoroni(a)google.com> RDMA/irdma: Fix OOB read during CQ MR registration Jason Gunthorpe <jgg(a)ziepe.ca> IB/cm: Fix av cm device leak on an error path in cm_init_av_by_path() Pablo Neira Ayuso <pablo(a)netfilter.org> netfilter: conntrack: call nf_ct_gre_keymap_destroy() if master helper is pptp Fernando Fernandez Mancera <fmancera(a)suse.de> netfilter: synproxy: protect nf_ct_seqadj_init() with conntrack lock Fernando Fernandez Mancera <fmancera(a)suse.de> netfilter: nfnetlink_osf: fix mss parsing on big-endian architectures Joseph Qi <joseph.qi(a)linux.alibaba.com> ocfs2: fix race between ocfs2_control_install_private() and ocfs2_control_release() Zhang Cen <rollkingzzc(a)gmail.com> ocfs2/dlm: require a ref for locking_state debugfs open Zhang Cen <rollkingzzc(a)gmail.com> ocfs2: reject FITRIM ranges shorter than a cluster Dmitry Antipov <dmantipov(a)yandex.ru> ocfs2: fix buffer head management in ocfs2_read_blocks() Zhang Cen <rollkingzzc(a)gmail.com> ocfs2: rebase copied fsdlm LVB pointers in locking_state Woojin Ji <random6.xyz(a)gmail.com> bpftool: Use libbpf error code for flow dissector query Al Viro <viro(a)zeniv.linux.org.uk> configfs_lookup(): don't leave ->s_dentry dangling on failure Alexander Potapenko <glider(a)google.com> lib/test_meminit: use && for bools Sang-Heon Jeon <ekffu200098(a)gmail.com> mm/fake-numa: fix under-allocation detection in uniform split Deepanshu Kartikey <kartikey406(a)gmail.com> bpf: fix UAF by restoring RCU-delayed inode freeing in bpffs Dan Carpenter <error27(a)gmail.com> scsi: pm8001: Fix error code in non_fatal_log_show() Martin Wilck <martin.wilck(a)suse.com> scsi: Revert "scsi: Fix sas_user_scan() to handle wildcard and multi-channel scans" Yuho Choi <dbgh9129(a)gmail.com> ARM: imx31: Fix IIM mapping leak in revision check Yuho Choi <dbgh9129(a)gmail.com> ARM: imx3: Fix CCM node reference leak Zhang Yi <yi.zhang(a)huawei.com> ext4: fix LOGFLUSH shutdown ordering to allow ordered-mode data writeback Chen Cheng <chencheng(a)fnnas.com> md/raid10: reset read_slot when reusing r10bio for discard Renjiang Han <renjiang.han(a)oss.qualcomm.com> media: qcom: venus: relax encoder frame/blur step size on v6 Renjiang Han <renjiang.han(a)oss.qualcomm.com> media: qcom: venus: relax encoder frame/blur dimension steps on v4 Renjiang Han <renjiang.han(a)oss.qualcomm.com> media: qcom: venus: drop extra padding in NV12 raw size calculation zhoumin <teczm(a)foxmail.com> EDAC/{skx_common,skx}: Fix UBSAN shift-out-of-bounds in skx_get_dimm_info Jessica Zhang <jessica.zhang(a)oss.qualcomm.com> drm/msm/dp: Fix the ISR_* enum values Jessica Zhang <jessica.zhang(a)oss.qualcomm.com> drm/msm/dp: fix HPD state status bit shift value Weili Qian <qianweili(a)huawei.com> crypto: hisilicon/qm - disable error report before flr Tetsuo Handa <penguin-kernel(a)I-love.SAKURA.ne.jp> ocfs2: kill osb->system_file_mutex lock ZhengYuan Huang <gality369(a)gmail.com> ocfs2: don't BUG_ON an invalid journal dinode Dan Carpenter <error27(a)gmail.com> rapidio/tsi721: prevent a bad dereference in tsi721_db_dpc() Davidlohr Bueso <dave(a)stgolabs.net> dax/kmem: account for partial discontiguous resource upon removal Carlos Llamas <cmllamas(a)google.com> libbpf: Fix UAF in strset__add_str() Timur Tabi <ttabi(a)nvidia.com> drm/nouveau/bios: specify correct display fuse register for Ampere and Ada Mikko Perttunen <mperttunen(a)nvidia.com> drm/tegra: Fix iommu_map_sgtable() return value check Felix Gu <ustc.gu(a)gmail.com> drm/tegra: dc: Fix device node reference leak in tegra_dc_has_output() Jiayuan Chen <jiayuan.chen(a)linux.dev> net/sched: cls_bpf: prevent unbounded recursion in offload rollback Eric Dumazet <edumazet(a)google.com> ipv6: guard against possible NULL deref in __in6_dev_stats_get() Breno Leitao <leitao(a)debian.org> workqueue: drop spurious '*' from print_worker_info() fn declaration Nilay Shroff <nilay(a)linux.ibm.com> nvme-multipath: fix flex array size in struct nvme_ns_head Miquel Raynal <miquel.raynal(a)bootlin.com> mtd: spi-nor: Drop duplicate Kconfig dependency Rosen Penev <rosenp(a)gmail.com> mips: n64: add __iomem for writel call Rosen Penev <rosenp(a)gmail.com> mips: ralink: mt7621: add missing __iomem Maciej W. Rozycki <macro(a)orcam.me.uk> MIPS: DEC: Remove do_IRQ() call indirection Maciej W. Rozycki <macro(a)orcam.me.uk> MIPS: Fix big-endian stack argument fetching in o32 wrapper Jiakai Xu <xujiakai24(a)mails.ucas.ac.cn> PM: sleep: Use complete() in device_pm_sleep_init() Lianfa Weng <wenglianfa(a)huawei.com> RDMA/hns: Fix warning in poll cq direct mode Guangshuo Li <lgs201920130244(a)gmail.com> IB/mlx4: Fix refcount leak in add_port() error path Jacob Moroni <jmoroni(a)google.com> RDMA/irdma: Fix out-of-bounds write in irdma_copy_user_pgaddrs Samuel Holland <samuel(a)sholland.org> bus: sunxi-rsb: Always check register address validity Ronaldo Nunez <rnunez(a)baylibre.com> pwm: imx27: Fix variable truncation in .apply() Lifeng Zheng <zhenglifeng1(a)huawei.com> cpufreq: conservative: Simplify frequency limit handling Pengjie Zhang <zhangpengjie2(a)huawei.com> cpufreq: Documentation: fix sampling_down_factor range Stepan Ionichev <sozdayvek(a)gmail.com> device property: fix fwnode reference leak in fwnode_graph_get_endpoint_by_id() Geert Uytterhoeven <geert+renesas(a)glider.be> firmware: arm_scmi: Fix OOB in scmi_power_name_get() Sven Püschel <s.pueschel(a)pengutronix.de> media: rockchip: rga: fix too small buffer size Eric Dumazet <edumazet(a)google.com> net/sched: sch_drr: annotate data-races around cl->deficit Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> sysfs: clamp show() return value in sysfs_kf_read() Sudeep Holla <sudeep.holla(a)kernel.org> firmware: arm_scmi: Read sensor config as 32-bit value Zilin Guan <zilin(a)seu.edu.cn> media: atomisp: Fix memory leak in atomisp_fixed_pattern_table() Sara Venkatesh <sarajvenkatesh(a)gmail.com> RDMA/srpt: fix integer overflow in immediate data length check Prathamesh Deshpande <prathameshdeshpande7(a)gmail.com> RDMA/mlx5: Fix devx subscribe-event unwind NULL dereference Alexander Chesnokov <Alexander.Chesnokov(a)kaspersky.com> RDMA/hns: Fix arithmetic overflow in calc_hem_config() Linmao Li <lilinmao(a)kylinos.cn> ipv6: addrconf: bail out of dad_failure when state is no longer POSTDAD Eric Dumazet <edumazet(a)google.com> net/sched: sch_htb: annotate data-races (I) Eric Dumazet <edumazet(a)google.com> net/sched: sch_htb: do not change sch->flags in htb_dump() Sean Christopherson <seanjc(a)google.com> crypto: ccp - Treat zero-length cert chain as query for blob lengths Eric Dumazet <edumazet(a)google.com> net/sched: sch_hfsc: annotate data-races in hfsc_dump_class_stats() Rafael J. Wysocki <rafael.j.wysocki(a)intel.com> thermal: hwmon: Fix critical temperature attribute removal Pengpeng Hou <pengpeng(a)iscas.ac.cn> evm: terminate and bound the evm_xattrs read buffer Lin He <helin52(a)huawei.com> drm/hisilicon/hibmc: use clock to look up the PLL value Lin He <helin52(a)huawei.com> drm/hisilicon/hibmc: move display contrl config to hibmc_probe() Cristian Marussi <cristian.marussi(a)arm.com> clk: scmi: Fix clock rate rounding Sean Christopherson <seanjc(a)google.com> iommu/amd: Fix a stale comment about which legacy mode is user visible Weiming Shi <bestswngs(a)gmail.com> crypto: asymmetric_keys - fix OOB read in pefile_digest_pe_contents Thorsten Blum <thorsten.blum(a)linux.dev> crypto: ecrdsa - fix unknown OID check in ecrdsa_param_curve Lothar Rubusch <l.rubusch(a)gmail.com> crypto: atmel-sha204a - fix blocking and non-blocking rng logic Felix Gu <ustc.gu(a)gmail.com> pinctrl: sunxi: fix regulator leak in sunxi_pmx_request() error path Samuel Holland <samuel(a)sholland.org> media: cedrus: Fix failure to clean up hardware on probe failure Felix Gu <ustc.gu(a)gmail.com> watchdog: sprd_wdt: Remove redundant sprd_wdt_disable() on register failure Yingjie Gao <gaoyingjie(a)uniontech.com> watchdog: sp5100_tco: Use EFCH MMIO for newer Hygon FCH Jihed Chaibi <jihed.chaibi.dev(a)gmail.com> ARM: dts: am335x-sl50: Fix audio bitclock and frame master endpoint Tristan Madani <tristan(a)talencesecurity.com> wifi: ath9k: fix OOB access from firmware tx status queue ID Xingjing Deng <micro6947(a)gmail.com> kconfig: fix potential NULL pointer dereference in conf_askvalue Tristan Madani <tristan(a)talencesecurity.com> wifi: rtw88: fix OOB read from firmware RX descriptor exceeding DMA buffer Danilo Krummrich <dakr(a)kernel.org> driver core: use READ_ONCE() for dev->driver in dev_has_sync_state() Yuho Choi <dbgh9129(a)gmail.com> drm/radeon: fix memory leak in radeon_ring_restore() on lock failure Tomi Valkeinen <tomi.valkeinen(a)ideasonboard.com> drm/tidss: Drop extra drm_mode_config_reset() call Ian Bridges <icb(a)fastmail.org> fbcon: fix NULL pointer dereference for a console without vc_data David Howells <dhowells(a)redhat.com> afs: Fix further netns teardown to cancel the preallocation charger Matvey Kovalev <matvey.kovalev(a)ispras.ru> afs: fix NULL pointer dereference in afs_get_tree() David Howells <dhowells(a)redhat.com> afs: Fix netns teardown to cancel the preallocation charger Matthias Feser <mfe(a)KBSgmbhfr.onmicrosoft.com> serial: 8250_omap: clear rx_running on zero-length DMA completes Stephan Gerhold <stephan.gerhold(a)linaro.org> serial: msm: Disable DMA for kernel console UART Chen-Yu Tsai <wens(a)kernel.org> dt-bindings: media: sun4i-a10-video-engine: Add interconnect properties Ricardo Ribalda <ribalda(a)chromium.org> media: uvcvideo: Fix buffer sequence in frame gaps Ricardo Ribalda <ribalda(a)chromium.org> media: uvcvideo: Avoid partial metadata buffers Eric Biggers <ebiggers(a)kernel.org> crypto: hisi-trng - Remove crypto_rng interface Eric Biggers <ebiggers(a)kernel.org> crypto: crypto4xx - Remove insecure and unused rng_alg Herbert Xu <herbert(a)gondor.apana.org.au> crypto: crypto4xx - Remove ahash-related code Eric Biggers <ebiggers(a)kernel.org> crypto: sun4i-ss - Remove insecure and unused rng_alg Eric Biggers <ebiggers(a)kernel.org> crypto: af_alg - Remove zero-copy support from skcipher and aead Vladimir Oltean <vladimir.oltean(a)nxp.com> net: dsa: tag_ksz: do not rely on skb_mac_header() in TX paths Yichong Chen <chenyichong(a)uniontech.com> tools/mm/slabinfo: fix total_objects attribute name Muhammet Kaan KILINÇ <muhammetkaankilinc(a)gmail.com> crypto: algif_skcipher - force synchronous processing on trees without ctx->state Adam Li <adamli(a)os.amperecomputing.com> sched/fair: Only update stats for allowed CPUs when looking for dst group Darrick J. Wong <djwong(a)kernel.org> xfs: resample the data fork mapping after cycling ILOCK Weiming Shi <bestswngs(a)gmail.com> xfs: fail recovery on a committed log item with no regions Joanne Koong <joannelkoong(a)gmail.com> fuse: re-lock request before returning from fuse_ref_folio() Alberto Ruiz <aruiz(a)redhat.com> fuse: fix device node leak in cuse_process_init_reply() Michael Bommarito <michael.bommarito(a)gmail.com> RDMA/siw: bound Read Response placement to the RREAD length Zhenhao Wan <whi4ed0g(a)gmail.com> RDMA/rtrs-srv: Bound RDMA-Write length to chunk size in rdma_write_sg Dmitry Torokhov <dmitry.torokhov(a)gmail.com> Input: maplecontrol - set driver data before registering input device Dmitry Torokhov <dmitry.torokhov(a)gmail.com> Input: maplemouse - set driver data before registering input device Dmitry Torokhov <dmitry.torokhov(a)gmail.com> Input: maple_keyb - set driver data before registering input device Dmitry Torokhov <dmitry.torokhov(a)gmail.com> Input: mms114 - fix multi-touch slot corruption Florian Fuchs <fuchsfl(a)gmail.com> Input: maplemouse - fix NULL pointer dereference in open() Bryam Vargas <hexlabsecurity(a)proton.me> Input: touchwin - reset the packet index on every complete packet Bryam Vargas <hexlabsecurity(a)proton.me> Input: iforce - bound the device-reported force-feedback effect index Bryam Vargas <hexlabsecurity(a)proton.me> Input: goodix - clamp the device-reported contact count Ranjan Kumar <kumarranja(a)chromium.org> Input: elan_i2c - prevent division by zero and arithmetic underflow Bryam Vargas <hexlabsecurity(a)proton.me> Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count Bryam Vargas <hexlabsecurity(a)proton.me> Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count Haoxiang Li <haoxiang_li2024(a)163.com> Input: synaptics-rmi4 - unregister function handlers on physical driver registration failure Guillermo Rodríguez <guille.rodriguez(a)gmail.com> i2c: stm32f7: truncate clock period instead of rounding it Johan Hovold <johan(a)kernel.org> i2c: core: fix adapter deregistration race Mikhail Gavrilov <mikhail.v.gavrilov(a)gmail.com> udmabuf: fix DMA direction mismatch in release_udmabuf() Sean Christopherson <seanjc(a)google.com> KVM: VMX: Grab vmcs12 on CR8 interception update iff vCPU is in guest mode Koichiro Den <den(a)valinux.co.jp> NTB: epf: Fix request_irq() unwind in ntb_epf_init_isr() Bryam Vargas <hexlabsecurity(a)proton.me> exfat: bound uniname advance in exfat_find_dir_entry() Benjamin Coddington <ben.coddington(a)hammerspace.com> NFSv4: include MAY_WRITE in open permission mask for O_TRUNC Huihui Huang <hhhuang(a)smu.edu.sg> tracing: Prevent out-of-bounds read in glob matching Carlos Song <carlos.song(a)nxp.com> spi: fsl-lpspi: terminate the RX channel on TX prepare failure path Carlos Song <carlos.song(a)nxp.com> spi: fsl-lpspi: replace dmaengine_terminate_all() with dmaengine_terminate_sync() Paul Louvel <paul.louvel(a)bootlin.com> crypto: talitos - use dma_sync_single_for_cpu() before reading descriptor header Eric Biggers <ebiggers(a)kernel.org> crypto: drbg - Fix the fips_enabled priority boost Eric Biggers <ebiggers(a)kernel.org> crypto: drbg - Fix drbg_max_addtl() on 64-bit kernels Eric Biggers <ebiggers(a)kernel.org> crypto: drbg - Fix returning success on failure in CTR_DRBG Ruijie Li <ruijieli51(a)gmail.com> crypto: pcrypt - restore callback for non-parallel fallback Anastasia Tishchenko <sv3iry(a)gmail.com> crypto: ecc - Fix carry overflow in vli multiplication Thorsten Blum <thorsten.blum(a)linux.dev> crypto: caam - use print_hex_dump_devel to guard key hex dumps again Thorsten Blum <thorsten.blum(a)linux.dev> crypto: caam - use print_hex_dump_devel to guard key hex dumps Bryam Vargas <hexlabsecurity(a)proton.me> isofs: bound Rock Ridge symlink components to the SL record Bryam Vargas <hexlabsecurity(a)proton.me> partitions: aix: bound the pp_count scan to the ppe array Achkinazi, Igor <Igor.Achkinazi(a)dell.com> nvme-multipath: set BIO_REMAPPED on bios remapped to per-path namespace disks Mikulas Patocka <mpatocka(a)redhat.com> dm-ioctl: report an error if a device has no table Bryam Vargas <hexlabsecurity(a)proton.me> udf: validate sparing table length as an entry count, not a byte count Bryam Vargas <hexlabsecurity(a)proton.me> udf: validate VAT header length against the VAT inode size Michael Bommarito <michael.bommarito(a)gmail.com> udf: validate free block extents against the partition length Liviu Stan <liviu.stan(a)analog.com> iio: temperature: ltc2983: Fix n_wires default bypassing rotation check Madhu M <madhu.m(a)intel.com> usb: typec: ucsi: Pass full DP config payload in SET_NEW_CAM for DP alt mode Andrei Kuchynski <akuchynski(a)chromium.org> usb: typec: ucsi: Invert DisplayPort role assignment Badhri Jagan Sridharan <badhri(a)google.com> usb: typec: tcpm: Validate SVID index in svdm_consume_modes() Sam Day <me(a)samcday.com> usbip: vudc: fix NULL deref in vep_dequeue() Yichong Chen <chenyichong(a)uniontech.com> usbip: tools: support SuperSpeedPlus devices Xu Rao <raoxu(a)uniontech.com> USB: usb-storage: ene_ub6250: restore media-ready check Johan Hovold <johan(a)kernel.org> USB: ulpi: fix memory leak on registration failure Johan Hovold <johan(a)kernel.org> USB: serial: digi_acceleport: fix write buffer corruption Johan Hovold <johan(a)kernel.org> USB: serial: digi_acceleport: fix hard lockup on disconnect Johan Hovold <johan(a)kernel.org> USB: serial: digi_acceleport: fix broken rx after throttle Fabio Porcedda <fabio.porcedda(a)gmail.com> USB: serial: option: add Telit Cinterion FE990D50 compositions Johan Hovold <johan(a)kernel.org> USB: serial: keyspan_pda: fix information leak Haoxiang Li <haoxiang_li2024(a)163.com> usb: mtu3: unmap request DMA on queue failure Myeonghun Pak <mhun512(a)gmail.com> USB: misc: uss720: unregister parport on probe failure Xu Rao <raoxu(a)uniontech.com> USB: storage: include US_FL_NO_SAME in quirks mask Myeonghun Pak <mhun512(a)gmail.com> usb: sl811-hcd: disable controller wakeup on remove Johan Hovold <johan(a)kernel.org> USB: legousbtower: fix use-after-free on disconnect race Erich E. Hoover <erich.e.hoover(a)gmail.com> USB: quirks: add NO_LPM for the Samsung T5 EVO Portable SSD Johan Hovold <johan(a)kernel.org> USB: iowarrior: fix use-after-free on disconnect Johan Hovold <johan(a)kernel.org> USB: ldusb: fix use-after-free on disconnect race Johan Hovold <johan(a)kernel.org> USB: idmouse: fix use-after-free on disconnect race Jimmy Hu <hhhuuu(a)google.com> usb: gadget: udc: Fix use-after-free in gadget_match_driver Maoyi Xie <maoyixie.tju(a)gmail.com> usb: gadget: composite: fix dead empty check in the USB_DT_OTG handler WenTao Liang <vulab(a)iscas.ac.cn> usb: dwc3: meson-g12a: fix refcount leak in dwc3_meson_g12a_resume() Rodrigo Lugathe da Conceição Alves <lugathe2(a)gmail.com> USB: core: add USB_QUIRK_NO_LPM for VIA Labs USB 2.0 hub Haoxiang Li <haoxiang_li2024(a)163.com> usb: cdnsp: fix stream context array leak in cdnsp_alloc_stream_info() Jared Baldridge <jrb(a)expunge.us> usb: cdc_acm: Add quirk for Uniden BC125AT scanner Maoyi Xie <maoyixie.tju(a)gmail.com> net: usb: kalmia: bound RX frame length in kalmia_rx_fixup() Alexey Nepomnyashih <sdl(a)nppct.ru> xfs: fix unreachable BIGTIME check in dquot flush validation Deepanshu Kartikey <kartikey406(a)gmail.com> nilfs2: reject CLEAN_SEGMENTS ioctl with out-of-range segment numbers Tristan Madani <tristan(a)talencesecurity.com> hfs/hfsplus: zero-initialize buffer in hfs_bnode_read Srinivas Pandruvada <srinivas.pandruvada(a)linux.intel.com> HID: sensor-hub: Add sensor_hub_input_attr_read_values() for multi-byte reads Maoyi Xie <maoyixie.tju(a)gmail.com> HID: lg-g15: cancel pending work on remove to fix a use-after-free Myeonghun Pak <mhun512(a)gmail.com> HID: wacom: stop hardware after post-start probe failures WenTao Liang <vulab(a)iscas.ac.cn> posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path Yuho Choi <dbgh9129(a)gmail.com> cpufreq: pcc: fix use-after-free and double free in _OSC evaluation Tianxiang Chen <nanmu(a)xiaomi.com> cpufreq: Fix hotplug-suspend race during reboot Steven Rostedt <rostedt(a)goodmis.org> sched/rt: Have RT_PUSH_IPI be default off for non PREEMPT_RT Fushuai Wang <wangfushuai(a)baidu.com> cpufreq: intel_pstate: Sync policy->cur during CPU offline Sebastian Andrzej Siewior <bigeasy(a)linutronix.de> net: Drop the lock in skb_may_tx_timestamp() Muhammad Bilal <meatuni001(a)gmail.com> Bluetooth: L2CAP: validate option length before reading conf opt value Yousef Alhouseen <alhouseenyousef(a)gmail.com> Bluetooth: fix UAF in bt_accept_dequeue() Yousef Alhouseen <alhouseenyousef(a)gmail.com> Bluetooth: bnep: pin L2CAP connection during netdev registration Xiang Mei <xmei5(a)asu.edu> netfilter: ebtables: terminate table name before find_table_lock() Florian Westphal <fw(a)strlen.de> netfilter: ebtables: module names must be null-terminated Andrei Kuchynski <akuchynski(a)chromium.org> mfd: cros_ec: Delay dev_set_drvdata() until probe success Wyatt Feng <bronzed_45_vested(a)icloud.com> net: ipv4: bound TCP reordering sysctl writes and MTU probe sizes Yuyang Huang <yuyanghuang(a)google.com> ipv4: igmp: remove multicast group from hash table on device destruction Runyu Xiao <runyu.xiao(a)seu.edu.cn> io_uring/io-wq: re-check IO_WQ_BIT_EXIT for each linked work item Runyu Xiao <runyu.xiao(a)seu.edu.cn> gpio: eic-sprd: use raw_spinlock_t in the irq startup path Koichiro Den <den(a)valinux.co.jp> NTB: epf: Avoid calling pci_irq_vector() from hardirq context Yunpeng Tian <shionthanatos(a)gmail.com> fs/ntfs3: validate Dirty Page Table capacity in log_replay copy_lcns Thomas Gleixner <tglx(a)kernel.org> debugobjects: Plug race against a concurrent OOM disable Chi Wang <wangchi(a)kylinos.cn> audit: Fix data races of skb_queue_len() readers on audit_queue Zijing Yin <yzjaurora(a)gmail.com> net: af_key: initialize alg_key_len for IPComp states Dawei Feng <dawei.feng(a)seu.edu.cn> crypto: amlogic - avoid double cleanup in meson_crypto_probe() Alexandru Hossu <hossu.alexandru(a)gmail.com> staging: rtl8723bs: fix OOB write in HT_caps_handler() Alexandru Hossu <hossu.alexandru(a)gmail.com> staging: rtl8723bs: fix OOB reads in is_ap_in_tkip() IE loop Alexandru Hossu <hossu.alexandru(a)gmail.com> staging: rtl8723bs: fix OOB reads in IE loops in issue_assocreq() and join_cmd_hdl() Alexandru Hossu <hossu.alexandru(a)gmail.com> staging: rtl8723bs: fix OOB read in update_beacon_info() IE loop Alexandru Hossu <hossu.alexandru(a)gmail.com> staging: rtl8723bs: fix OOB read in OnAssocRsp() IE loop Alexandru Hossu <hossu.alexandru(a)gmail.com> staging: rtl8723bs: fix WEP length underflow and OOB read in OnAuth() Arnd Bergmann <arnd(a)arndb.de> staging: media: atomisp: reduce load_primary_binaries() stack usage Ricardo Ribalda <ribalda(a)chromium.org> media: staging: ipu3-imgu: Add range check for imgu_css_cfg_acc_stripe Samuel Page <sam(a)bynar.io> tipc: fix out-of-bounds read in broadcast Gap ACK blocks Yizhou Zhao <zhaoyz24(a)mails.tsinghua.edu.cn> 6lowpan: fix NHC entry use-after-free on error path Runyu Xiao <runyu.xiao(a)seu.edu.cn> usb: dwc3: run gadget disconnect from sleepable suspend context Alan Stern <stern(a)rowland.harvard.edu> USB: chaoskey: Fix slab-use-after-free in chaoskey_release() Michael Bommarito <michael.bommarito(a)gmail.com> hwrng: virtio: clamp device-reported used.len at copy_data() Johan Hovold <johan(a)kernel.org> virtio-mmio: fix device release warning on module unload Xiang Mei <xmei5(a)asu.edu> netfilter: ipset: fix race between dump and ip_set_list resize Ratheesh Kannoth <rkannoth(a)marvell.com> PCI: host-common: Request bus reassignment when not probe-only Mahesh Vaidya <mahesh.vaidya(a)altera.com> PCI: altera: Do not dispose parent IRQ mapping 胡连勤 <hulianqin(a)vivo.com> usb: xhci: Fix sleep in atomic context in xhci_free_streams() Carlos Llamas <cmllamas(a)google.com> binder: fix UAF in binder_free_transaction() Carlos Llamas <cmllamas(a)google.com> binder: fix UAF in binder_thread_release() Johan Hovold <johan(a)kernel.org> Bluetooth: btusb: fix wakeup source leak on probe failure Johan Hovold <johan(a)kernel.org> Bluetooth: btusb: fix use-after-free on marvell probe failure Johan Hovold <johan(a)kernel.org> Bluetooth: btusb: fix use-after-free on registration failure Cássio Gabriel <cassiogabrielcontato(a)gmail.com> ALSA: usb-audio: Update US-16x08 EQ/comp shadow state after successful writes Cássio Gabriel <cassiogabrielcontato(a)gmail.com> ALSA: usb-audio: Update Babyface Pro control caches only after successful writes Cássio Gabriel <cassiogabrielcontato(a)gmail.com> ALSA: usb-audio: Roll back quirk control caches on write errors Cássio Gabriel <cassiogabrielcontato(a)gmail.com> ALSA: usb-audio: Propagate US-16x08 write errors in route/mix EQ-switch put callbacks Cássio Gabriel <cassiogabrielcontato(a)gmail.com> ALSA: usb-audio: Propagate errors in scarlett_ctl_enum_put() Darvell Long <contact(a)darvell.me> ALSA: usb-audio: avoid kobject path lookup in DualSense match Maoyi Xie <maoyixie.tju(a)gmail.com> ALSA: firewire: isight: bound the sample count to the packet payload Zhao Dongdong <zhaodongdong(a)kylinos.cn> ALSA: es1938: check snd_ctl_new1() return value Maoyi Xie <maoyixie.tju(a)gmail.com> ALSA: caiaq: fix out-of-bounds read in the Traktor Kontrol S4 input parser Cássio Gabriel <cassiogabrielcontato(a)gmail.com> ALSA: virtio: Add missing 384 kHz PCM rate mapping Liviu Stan <liviu.stan(a)analog.com> iio: temperature: ltc2983: Fix reinit_completion() called after conversion start Andy Shevchenko <andriy.shevchenko(a)linux.intel.com> iio: magnetometer: ak8975: Add missed pm_runtime_put_autosuspend() call Javier Carrasco <javier.carrasco.cruz(a)gmail.com> iio: light: veml6030: fix channel type when pushing events Stepan Ionichev <sozdayvek(a)gmail.com> iio: light: tsl2591: return actual error from probe IRQ failure Joshua Crofts <joshua.crofts1(a)gmail.com> iio: light: opt3001: fix missing state reset on timeout Biren Pandya <birenpandya(a)gmail.com> iio: light: gp2ap002: fix runtime PM leak on read error Vidhu Sarwal <vidhu.linux(a)gmail.com> iio: light: al3010: fix incorrect scale for the highest gain range Andreas Kempe <andreas.kempe(a)actia.se> iio: imu: st_lsm6dsx: deselect shub page before reading whoami Runyu Xiao <runyu.xiao(a)seu.edu.cn> iio: imu: bmi160: add IRQF_NO_THREAD to data-ready trigger IRQ Stepan Ionichev <sozdayvek(a)gmail.com> iio: gyro: bmg160: wait full startup time after mode change at probe Stepan Ionichev <sozdayvek(a)gmail.com> iio: gyro: bmg160: bail out when bandwidth/filter is not in table Lars-Peter Clausen <lars(a)metafoo.de> iio: event: Fix event FIFO reset race Maxwell Doose <m32285159(a)gmail.com> iio: chemical: scd30: Cleanup initializations and fix sign-extension bug Pengpeng Hou <pengpeng(a)iscas.ac.cn> iio: adc: ti-ads124s08: Return reset GPIO lookup errors Maxwell Doose <m32285159(a)gmail.com> iio: adc: spear: Initialize completion before requesting IRQ Maxwell Doose <m32285159(a)gmail.com> iio: adc: lpc32xx: Initialize completion before requesting IRQ Biren Pandya <birenpandya(a)gmail.com> iio: accel: kxsd9: fix runtime PM imbalance on write_raw() error Bryam Vargas <hexlabsecurity(a)proton.me> iio: accel: bmc150: clamp the device-reported FIFO frame count Griffin Kroah-Hartman <griffin(a)kroah.com> usb: gadget: function: rndis: add length check for header Griffin Kroah-Hartman <griffin(a)kroah.com> usb: gadget: function: rndis: add length check to response query Davidlohr Bueso <dave(a)stgolabs.net> locking/rtmutex: Skip remove_waiter() when waiter is not enqueued Keenan Dong <keenanat2000(a)gmail.com> rtmutex: Use waiter::task instead of current in remove_waiter() Hem Parekh <hemparekh1596(a)gmail.com> ksmbd: fix out-of-bounds read in smb_check_perm_dacl() Michael Bommarito <michael.bommarito(a)gmail.com> NFSv4/flexfiles: reject zero filehandle version count Mingyu Wang <25181214217(a)stu.xidian.edu.cn> fbdev: fbcon: fix out-of-bounds read in err_out of fbcon_do_set_font() Johan Hovold <johan(a)kernel.org> i2c: core: fix adapter registration race Johan Hovold <johan(a)kernel.org> i2c: core: fix adapter debugfs creation Johan Hovold <johan(a)kernel.org> i2c: core: fix NULL-deref on adapter registration failure Johan Hovold <johan(a)kernel.org> i2c: core: fix hang on adapter registration failure Johan Hovold <johan(a)kernel.org> i2c: core: fix irq domain leak on adapter registration failure Denis Arefev <arefev(a)swemel.ru> block: Avoid mounting the bdev pseudo-filesystem in userspace Keshav Verma <iganschel(a)gmail.com> f2fs: fix listxattr handling of corrupted xattr entries Chao Yu <chao(a)kernel.org> f2fs: fix potential deadlock in gc_merge path of f2fs_balance_fs() Ruipeng Qi <ruipengqi3(a)gmail.com> f2fs: fix potential deadlock in f2fs_balance_fs() Bryam Vargas <hexlabsecurity(a)proton.me> f2fs: bound i_inline_xattr_size for non-inline-xattr inodes Wenjie Qi <qwjhust(a)gmail.com> f2fs: validate orphan inode entry count Bartosz Golaszewski <bartosz.golaszewski(a)oss.qualcomm.com> device property: initialize the remaining fields of fwnode_handle in fwnode_init() Sunmin Jeong <s_min.jeong(a)samsung.com> f2fs: fix to round down start offset of fallocate for pin file Jaegeuk Kim <jaegeuk(a)kernel.org> f2fs: adjust zone capacity when considering valid block count Wenjie Qi <qwjhust(a)gmail.com> f2fs: validate compress cache inode only when enabled Chao Yu <chao(a)kernel.org> f2fs: fix to detect corrupted meta ino Bryam Vargas <hexlabsecurity(a)proton.me> apparmor: mediate the implicit connect of TCP fast open sendmsg Maoyi Xie <maoyixie.tju(a)gmail.com> net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink Ruslan Valiyev <linuxoid(a)gmail.com> apparmor: fix use-after-free in rawdata dedup loop Yiming Qian <yimingqian591(a)gmail.com> net: skmsg: preserve sg.copy across SG transforms Eric Dumazet <edumazet(a)google.com> skmsg: convert struct sk_msg_sg::copy to a bitmap Pablo Neira Ayuso <pablo(a)netfilter.org> netfilter: nf_tables: restore set elements when delete set fails Sean Christopherson <seanjc(a)google.com> KVM: Replace guest-triggerable BUG_ON() in ioeventfd datamatch with get_unaligned() NeilBrown <neil(a)brown.name> nfsd: change nfs4_client_to_reclaim() to allocate data NeilBrown <neilb(a)ownmail.net> nfsd: move name lookup out of nfsd4_list_rec_dir() Bjorn Andersson <bjorn.andersson(a)oss.qualcomm.com> slimbus: qcom-ngd-ctrl: Register callbacks after creating the ngd Uwe Kleine-König <u.kleine-koenig(a)pengutronix.de> slimbus: Convert to platform remove callback returning void Bjorn Andersson <bjorn.andersson(a)oss.qualcomm.com> slimbus: qcom-ngd-ctrl: Correct PDR and SSR cleanup ownership Bjorn Andersson <bjorn.andersson(a)oss.qualcomm.com> slimbus: qcom-ngd-ctrl: Fix probe error path ordering Bjorn Andersson <bjorn.andersson(a)oss.qualcomm.com> slimbus: qcom-ngd-ctrl: Fix up platform_driver registration Tudor Ambarus <tudor.ambarus(a)linaro.org> dma-buf: remove unused dma-fence-unwrap.c (stable/linux-5.15.y only) Pedro Tammela <pctammela(a)mojatatu.com> net/sched: act_pedit: use NLA_POLICY for parsing 'ex' keys Jiasheng Jiang <jiasheng(a)iscas.ac.cn> clk: imx: Add check for kcalloc Kiryl Shutsemau <kas(a)kernel.org> userfaultfd: gate must_wait writability check on pte_present() Jeff Layton <jlayton(a)kernel.org> nfsd: reset write verifier on deferred writeback errors Chris Mason <clm(a)meta.com> nfsd: release layout stid on setlease failure Krzysztof Kozlowski <krzysztof.kozlowski(a)canonical.com> nfc: llcp: protect nfc_llcp_sock_unlink() calls Chaitanya Kulkarni <kch(a)nvidia.com> nvmet-tcp: fix race between ICReq handling and queue teardown ------------- Diffstat: Documentation/admin-guide/pm/cpufreq.rst | 6 +- Documentation/crypto/userspace-if.rst | 31 +- .../media/allwinner,sun4i-a10-video-engine.yaml | 10 + Documentation/driver-api/pci/pci.rst | 3 + Makefile | 4 +- arch/alpha/kernel/pci-sysfs.c | 13 +- arch/arm/boot/dts/am335x-sl50.dts | 4 +- arch/arm/configs/sunxi_defconfig | 1 - arch/arm/mach-davinci/board-da850-evm.c | 12 +- arch/arm/mach-imx/cpu-imx31.c | 9 +- arch/arm/mach-imx/mm-imx3.c | 2 + arch/arm64/boot/dts/qcom/sdm630.dtsi | 9 +- arch/arm64/kernel/hw_breakpoint.c | 9 + arch/arm64/kvm/vgic/vgic-its.c | 2 + arch/arm64/kvm/vgic/vgic.c | 11 +- arch/arm64/mm/mmu.c | 11 +- arch/mips/dec/int-handler.S | 2 +- arch/mips/dec/prom/init.c | 6 +- arch/mips/dec/setup.c | 6 - arch/mips/fw/lib/call_o32.S | 2 +- arch/mips/include/asm/dec/prom.h | 15 +- arch/mips/kernel/mips-mt-fpaff.c | 28 +- arch/mips/mm/init.c | 12 +- arch/mips/n64/init.c | 2 +- arch/mips/ralink/mt7621.c | 2 +- arch/mips/sgi-ip22/ip22-gio.c | 7 +- arch/powerpc/kexec/core_64.c | 4 +- arch/powerpc/perf/core-fsl-emb.c | 3 +- arch/powerpc/platforms/cell/spufs/file.c | 6 +- arch/powerpc/platforms/powernv/setup.c | 3 +- arch/riscv/kernel/machine_kexec.c | 3 + arch/riscv/kernel/stacktrace.c | 2 +- arch/s390/kernel/process.c | 2 +- arch/sparc/kernel/led.c | 2 +- arch/x86/boot/compressed/acpi.c | 7 +- arch/x86/boot/early_serial_console.c | 11 +- arch/x86/events/amd/core.c | 6 +- arch/x86/kvm/vmx/vmx.c | 3 +- arch/x86/mm/numa_emulation.c | 17 +- arch/x86/platform/olpc/olpc-xo15-sci.c | 1 + block/bdev.c | 4 - block/partitions/aix.c | 9 + certs/common.c | 2 +- crypto/af_alg.c | 54 +- crypto/algif_skcipher.c | 49 +- crypto/asymmetric_keys/verify_pefile.c | 2 + crypto/drbg.c | 4 +- crypto/ecc.c | 31 +- crypto/ecrdsa.c | 2 +- crypto/pcrypt.c | 4 + crypto/rng.c | 11 + drivers/acpi/acpi_ipmi.c | 2 +- drivers/acpi/cppc_acpi.c | 11 +- drivers/acpi/nfit/core.c | 15 +- drivers/acpi/resource.c | 6 +- drivers/android/binder.c | 19 +- drivers/ata/pata_pxa.c | 1 + drivers/ata/sata_gemini.c | 2 +- drivers/base/firmware_loader/main.c | 3 +- drivers/base/power/main.c | 6 +- drivers/base/property.c | 4 +- drivers/block/drbd/drbd_receiver.c | 5 + drivers/bluetooth/bpa10x.c | 8 +- drivers/bluetooth/btrtl.c | 5 +- drivers/bluetooth/btusb.c | 37 +- drivers/bus/sunxi-rsb.c | 3 + drivers/char/hw_random/virtio-rng.c | 23 +- drivers/char/tlclk.c | 4 + drivers/char/tpm/eventlog/tpm1.c | 4 +- drivers/char/tpm/tpm-dev.c | 2 +- drivers/char/tpm/tpmrm-dev.c | 2 +- drivers/clk/clk-scmi.c | 4 +- drivers/clk/imx/clk.c | 2 + drivers/clk/qcom/a53-pll.c | 2 +- drivers/cpufreq/cpufreq.c | 2 + drivers/cpufreq/cpufreq_conservative.c | 12 +- drivers/cpufreq/intel_pstate.c | 6 +- drivers/cpufreq/pcc-cpufreq.c | 2 + drivers/crypto/allwinner/Kconfig | 8 - drivers/crypto/allwinner/sun4i-ss/Makefile | 1 - drivers/crypto/allwinner/sun4i-ss/sun4i-ss-core.c | 36 - drivers/crypto/allwinner/sun4i-ss/sun4i-ss-prng.c | 69 - drivers/crypto/allwinner/sun4i-ss/sun4i-ss.h | 20 - drivers/crypto/amcc/crypto4xx_alg.c | 106 -- drivers/crypto/amcc/crypto4xx_core.c | 130 +- drivers/crypto/amcc/crypto4xx_core.h | 11 - drivers/crypto/amcc/crypto4xx_reg_def.h | 11 - drivers/crypto/amlogic/amlogic-gxl-core.c | 2 +- drivers/crypto/atmel-ecc.c | 2 +- drivers/crypto/atmel-sha204a.c | 29 +- drivers/crypto/caam/caamalg.c | 12 +- drivers/crypto/caam/caamalg_qi.c | 12 +- drivers/crypto/caam/caamalg_qi2.c | 12 +- drivers/crypto/caam/caamhash.c | 4 +- drivers/crypto/caam/key_gen.c | 4 +- drivers/crypto/cavium/cpt/cptvf_reqmanager.c | 4 +- drivers/crypto/ccp/sev-dev.c | 3 +- drivers/crypto/hisilicon/Kconfig | 1 - drivers/crypto/hisilicon/qm.c | 4 +- drivers/crypto/hisilicon/trng/trng.c | 298 +--- drivers/crypto/marvell/octeontx/otx_cptvf_reqmgr.c | 4 +- drivers/crypto/qat/qat_common/adf_accel_devices.h | 2 + drivers/crypto/qat/qat_common/adf_aer.c | 7 +- drivers/crypto/qat/qat_common/adf_common_drv.h | 4 + drivers/crypto/qat/qat_common/adf_isr.c | 18 + drivers/crypto/qat/qat_common/adf_pf2vf_msg.c | 27 + drivers/crypto/qat/qat_common/adf_sriov.c | 27 +- drivers/crypto/qat/qat_common/qat_asym_algs.c | 10 +- drivers/crypto/talitos.c | 26 +- drivers/dax/kmem.c | 6 + drivers/dma-buf/dma-fence-unwrap.c | 176 --- drivers/dma-buf/udmabuf.c | 5 +- drivers/dma/dmaengine.c | 3 +- drivers/dma/qcom/gpi.c | 1 + drivers/edac/skx_common.c | 3 + drivers/firmware/arm_scmi/power.c | 6 +- drivers/firmware/arm_scmi/sensors.c | 2 +- drivers/gpio/gpio-eic-sprd.c | 8 +- drivers/gpio/gpio-htc-egpio.c | 6 +- drivers/gpio/gpio-mvebu.c | 5 +- drivers/gpio/gpio-palmas.c | 19 + drivers/gpio/gpio-pca953x.c | 11 +- drivers/gpio/gpio-sch.c | 32 +- drivers/gpio/gpio-timberdale.c | 2 +- drivers/gpu/drm/amd/amdgpu/amdgpu_device.c | 4 +- .../amd/display/modules/info_packet/info_packet.c | 2 + drivers/gpu/drm/drm_edid.c | 8 + drivers/gpu/drm/hisilicon/hibmc/hibmc_drm_de.c | 78 +- drivers/gpu/drm/hisilicon/hibmc/hibmc_drm_drv.c | 11 + drivers/gpu/drm/hisilicon/hibmc/hibmc_drm_vdac.c | 22 - drivers/gpu/drm/i2c/sil164_drv.c | 7 - drivers/gpu/drm/msm/dp/dp_display.c | 4 +- drivers/gpu/drm/msm/dp/dp_reg.h | 4 +- .../gpu/drm/nouveau/nvkm/subdev/bios/shadowramin.c | 3 +- drivers/gpu/drm/radeon/radeon_ring.c | 4 +- drivers/gpu/drm/tegra/dc.c | 4 +- drivers/gpu/drm/tegra/gem.c | 9 +- drivers/gpu/drm/tidss/tidss_kms.c | 2 - drivers/gpu/host1x/bus.c | 2 +- drivers/hid/hid-appleir.c | 45 +- drivers/hid/hid-core.c | 7 + drivers/hid/hid-lg-g15.c | 16 + drivers/hid/hid-logitech-hidpp.c | 1 - drivers/hid/hid-multitouch.c | 32 +- drivers/hid/hid-picolcd_core.c | 3 +- drivers/hid/hid-sensor-hub.c | 77 +- drivers/hid/wacom_sys.c | 12 +- drivers/hwmon/Kconfig | 1 + drivers/hwmon/asus_atk0110.c | 3 + drivers/hwmon/pmbus/adm1275.c | 2 +- drivers/hwmon/w83627hf.c | 4 + drivers/hwmon/w83793.c | 1 + drivers/hwspinlock/qcom_hwspinlock.c | 5 +- .../hwtracing/coresight/coresight-cti-platform.c | 1 + drivers/hwtracing/coresight/coresight-etb10.c | 6 +- drivers/hwtracing/coresight/coresight-etm4x-core.c | 4 +- drivers/i2c/busses/i2c-mlxbf.c | 4 +- drivers/i2c/busses/i2c-mt65xx.c | 2 +- drivers/i2c/busses/i2c-stm32f7.c | 9 +- drivers/i2c/i2c-core-base.c | 85 +- drivers/i3c/master.c | 19 +- drivers/iio/accel/bmc150-accel-core.c | 2 + drivers/iio/accel/kxsd9.c | 5 +- drivers/iio/accel/mma8452.c | 2 + drivers/iio/adc/lpc32xx_adc.c | 4 +- drivers/iio/adc/spear_adc.c | 3 +- drivers/iio/adc/ti-ads124s08.c | 3 +- drivers/iio/chemical/scd30_core.c | 19 +- drivers/iio/common/Kconfig | 1 + drivers/iio/common/Makefile | 1 + drivers/iio/common/inv_sensors/Kconfig | 7 + drivers/iio/common/inv_sensors/Makefile | 6 + .../inv_sensors/inv_sensors_timestamp.c} | 120 +- drivers/iio/common/st_sensors/st_sensors_core.c | 23 +- drivers/iio/gyro/bmg160_core.c | 16 +- drivers/iio/imu/adis_trigger.c | 2 +- drivers/iio/imu/bmi160/bmi160_core.c | 3 +- drivers/iio/imu/inv_icm42600/Kconfig | 1 + drivers/iio/imu/inv_icm42600/Makefile | 1 - drivers/iio/imu/inv_icm42600/inv_icm42600_accel.c | 35 +- drivers/iio/imu/inv_icm42600/inv_icm42600_buffer.c | 61 +- drivers/iio/imu/inv_icm42600/inv_icm42600_buffer.h | 3 + drivers/iio/imu/inv_icm42600/inv_icm42600_core.c | 24 +- drivers/iio/imu/inv_icm42600/inv_icm42600_gyro.c | 35 +- .../iio/imu/inv_icm42600/inv_icm42600_timestamp.h | 85 - drivers/iio/imu/inv_mpu6050/Kconfig | 1 + drivers/iio/imu/inv_mpu6050/inv_mpu_core.c | 30 +- drivers/iio/imu/inv_mpu6050/inv_mpu_iio.h | 18 +- drivers/iio/imu/inv_mpu6050/inv_mpu_ring.c | 85 +- drivers/iio/imu/inv_mpu6050/inv_mpu_trigger.c | 11 +- drivers/iio/imu/st_lsm6dsx/st_lsm6dsx_core.c | 21 +- drivers/iio/industrialio-event.c | 5 +- drivers/iio/light/al3010.c | 2 +- drivers/iio/light/gp2ap002.c | 2 +- drivers/iio/light/opt3001.c | 6 +- drivers/iio/light/si1133.c | 14 +- drivers/iio/light/tsl2591.c | 6 +- drivers/iio/light/veml6030.c | 8 +- drivers/iio/magnetometer/ak8975.c | 15 + drivers/iio/orientation/hid-sensor-rotation.c | 40 +- drivers/iio/temperature/ltc2983.c | 5 +- drivers/infiniband/core/cm.c | 13 +- drivers/infiniband/hw/hns/hns_roce_hem.c | 8 +- drivers/infiniband/hw/hns/hns_roce_main.c | 2 +- drivers/infiniband/hw/irdma/verbs.c | 18 +- drivers/infiniband/hw/irdma/verbs.h | 1 - drivers/infiniband/hw/mlx4/mlx4_ib.h | 1 + drivers/infiniband/hw/mlx4/mr.c | 9 +- drivers/infiniband/hw/mlx4/sysfs.c | 45 +- drivers/infiniband/hw/mlx5/devx.c | 30 +- drivers/infiniband/hw/mlx5/mr.c | 17 +- drivers/infiniband/hw/mlx5/qp.c | 12 +- drivers/infiniband/sw/siw/siw_qp_rx.c | 9 + drivers/infiniband/ulp/rtrs/rtrs-srv.c | 5 +- drivers/infiniband/ulp/srpt/ib_srpt.c | 5 +- drivers/input/joystick/iforce/iforce-packets.c | 18 +- drivers/input/joystick/maplecontrol.c | 3 +- drivers/input/keyboard/maple_keyb.c | 4 +- drivers/input/misc/ims-pcu.c | 115 +- drivers/input/mouse/elan_i2c_core.c | 36 +- drivers/input/mouse/maplemouse.c | 9 +- drivers/input/rmi4/rmi_bus.c | 4 +- drivers/input/rmi4/rmi_f30.c | 2 +- drivers/input/rmi4/rmi_f3a.c | 2 +- drivers/input/touchscreen/goodix.c | 3 +- drivers/input/touchscreen/mms114.c | 2 +- drivers/input/touchscreen/touchwin.c | 15 +- drivers/iommu/amd/amd_iommu_types.h | 11 +- drivers/irqchip/irq-crossbar.c | 10 +- drivers/irqchip/irq-gic-v3-its.c | 6 +- drivers/leds/flash/leds-lm3601x.c | 11 +- drivers/leds/leds-lm3697.c | 4 +- drivers/leds/uleds.c | 3 +- drivers/md/dm-bufio.c | 4 +- drivers/md/dm-era-target.c | 10 +- drivers/md/dm-ioctl.c | 7 +- drivers/md/dm-log.c | 3 + drivers/md/dm-stats.c | 10 +- drivers/md/dm-thin-metadata.c | 67 +- drivers/md/dm-verity-target.c | 2 +- drivers/md/raid10.c | 1 + drivers/media/platform/qcom/venus/helpers.c | 4 +- .../media/platform/qcom/venus/hfi_platform_v4.c | 20 +- .../media/platform/qcom/venus/hfi_platform_v6.c | 16 +- drivers/media/platform/rockchip/rga/rga-hw.c | 2 +- drivers/media/platform/rockchip/rga/rga-hw.h | 2 +- drivers/media/usb/uvc/uvc_video.c | 30 +- drivers/memstick/core/ms_block.c | 4 + drivers/mfd/cros_ec_dev.c | 3 +- drivers/mfd/sm501.c | 4 +- drivers/mfd/tps6586x.c | 2 +- drivers/mmc/host/vub300.c | 26 +- drivers/mtd/devices/mchp23k256.c | 2 +- drivers/mtd/devices/slram.c | 22 +- drivers/mtd/maps/vmu-flash.c | 1 + drivers/mtd/nand/onenand/onenand_samsung.c | 7 +- drivers/mtd/nand/raw/fsl_ifc_nand.c | 9 +- drivers/mtd/nand/raw/lpc32xx_mlc.c | 12 +- drivers/mtd/nand/raw/lpc32xx_slc.c | 12 +- drivers/mtd/nand/raw/nand_base.c | 2 +- drivers/mtd/nand/raw/pl35x-nand-controller.c | 2 +- drivers/mtd/spi-nor/Kconfig | 1 - drivers/net/bonding/bond_3ad.c | 1 + drivers/net/dsa/sja1105/sja1105_ptp.c | 2 +- drivers/net/ethernet/amazon/ena/ena_netdev.c | 23 +- drivers/net/ethernet/broadcom/bnx2x/bnx2x_cmn.c | 3 +- .../ethernet/cavium/liquidio/cn23xx_pf_device.c | 18 +- drivers/net/ethernet/chelsio/cxgb4/t4_hw.c | 8 - .../net/ethernet/freescale/dpaa2/dpaa2-switch.c | 2 +- drivers/net/ethernet/freescale/fman/fman.c | 4 +- drivers/net/ethernet/freescale/gianfar.c | 16 +- drivers/net/ethernet/marvell/mvneta.c | 3 + drivers/net/ethernet/marvell/octeontx2/af/Makefile | 2 +- drivers/net/ethernet/marvell/octeontx2/af/mbox.h | 28 + drivers/net/ethernet/marvell/octeontx2/af/npc.h | 30 + drivers/net/ethernet/marvell/octeontx2/af/rvu.c | 16 + drivers/net/ethernet/marvell/octeontx2/af/rvu.h | 25 +- .../net/ethernet/marvell/octeontx2/af/rvu_cgx.c | 1 + .../ethernet/marvell/octeontx2/af/rvu_debugfs.c | 8 + .../ethernet/marvell/octeontx2/af/rvu_devlink.c | 71 +- .../net/ethernet/marvell/octeontx2/af/rvu_npc.c | 73 +- .../net/ethernet/marvell/octeontx2/af/rvu_npc_fs.c | 307 +++- .../net/ethernet/marvell/octeontx2/af/rvu_npc_fs.h | 17 + .../ethernet/marvell/octeontx2/af/rvu_npc_hash.c | 1645 ++++++++++++++++++++ .../ethernet/marvell/octeontx2/af/rvu_npc_hash.h | 214 +++ .../net/ethernet/marvell/octeontx2/af/rvu_reg.h | 15 + .../ethernet/marvell/octeontx2/nic/otx2_flows.c | 27 +- .../net/ethernet/marvell/octeontx2/nic/otx2_pf.c | 44 +- .../net/ethernet/mellanox/mlx5/core/lib/port_tun.c | 3 +- .../net/ethernet/mellanox/mlxsw/spectrum_router.c | 1 + .../ethernet/microchip/sparx5/sparx5_switchdev.c | 4 +- drivers/net/ethernet/microsoft/mana/gdma_main.c | 2 + drivers/net/ethernet/microsoft/mana/mana_en.c | 3 +- drivers/net/ethernet/qlogic/qede/qede_fp.c | 9 +- drivers/net/ethernet/qualcomm/rmnet/rmnet_config.c | 5 + drivers/net/ethernet/qualcomm/rmnet/rmnet_config.h | 20 + .../net/ethernet/qualcomm/rmnet/rmnet_handlers.c | 23 +- drivers/net/ethernet/qualcomm/rmnet/rmnet_map.h | 7 + .../net/ethernet/qualcomm/rmnet/rmnet_map_data.c | 269 +++- drivers/net/ethernet/qualcomm/rmnet/rmnet_vnd.c | 9 +- drivers/net/ethernet/qualcomm/rmnet/rmnet_vnd.h | 1 + drivers/net/ethernet/sun/sungem.c | 13 +- drivers/net/ieee802154/ca8210.c | 9 +- drivers/net/macsec.c | 7 +- drivers/net/usb/gl620a.c | 6 +- drivers/net/usb/kalmia.c | 8 + drivers/net/usb/lan78xx.c | 18 +- drivers/net/usb/net1080.c | 2 +- drivers/net/veth.c | 2 + drivers/net/virtio_net.c | 3 + drivers/net/wireless/ath/ath9k/xmit.c | 5 + drivers/net/wireless/ath/wcn36xx/smd.c | 6 + drivers/net/wireless/marvell/mwifiex/join.c | 1 - drivers/net/wireless/ralink/rt2x00/rt2x00dev.c | 12 +- drivers/net/wireless/realtek/rtw88/pci.c | 5 + drivers/ntb/hw/epf/ntb_hw_epf.c | 20 +- drivers/nvdimm/btt.c | 14 +- drivers/nvme/host/core.c | 2 +- drivers/nvme/host/multipath.c | 6 + drivers/nvme/target/rdma.c | 18 +- drivers/nvme/target/tcp.c | 33 +- drivers/pci/Makefile | 2 +- drivers/pci/controller/dwc/pci-imx6.c | 5 +- drivers/pci/controller/dwc/pcie-designware-host.c | 2 +- .../pci/controller/mobiveil/pcie-mobiveil-host.c | 8 +- drivers/pci/controller/pci-host-common.c | 4 + drivers/pci/controller/pcie-altera-msi.c | 2 +- drivers/pci/controller/pcie-altera.c | 32 +- drivers/pci/controller/pcie-mediatek-gen3.c | 2 +- drivers/pci/controller/pcie-mediatek.c | 125 +- drivers/pci/controller/pcie-rcar-host.c | 1 - drivers/pci/controller/pcie-xilinx-nwl.c | 2 +- drivers/pci/endpoint/functions/pci-epf-ntb.c | 21 +- drivers/pci/endpoint/functions/pci-epf-vntb.c | 9 +- drivers/pci/pci.c | 136 -- drivers/pci/pci.h | 4 + drivers/pci/rebar.c | 218 +++ drivers/pci/setup-bus.c | 101 +- drivers/pci/setup-res.c | 53 - drivers/phy/phy-can-transceiver.c | 3 + drivers/pinctrl/mediatek/pinctrl-mt8167.c | 2 +- drivers/pinctrl/mediatek/pinctrl-mt8516.c | 2 +- drivers/pinctrl/sunxi/pinctrl-sunxi.c | 2 +- drivers/platform/x86/xo15-ebook.c | 7 +- drivers/power/supply/charger-manager.c | 6 +- drivers/pwm/pwm-imx27.c | 8 +- drivers/rapidio/devices/tsi721.c | 3 +- drivers/regulator/core.c | 29 +- drivers/regulator/ltc3676.c | 10 +- drivers/regulator/scmi-regulator.c | 1 + drivers/reset/reset-sunxi.c | 4 +- drivers/rtc/rtc-abx80x.c | 3 +- drivers/rtc/rtc-cmos.c | 6 + drivers/rtc/rtc-ds1307.c | 30 +- drivers/s390/char/monwriter.c | 3 + drivers/scsi/elx/efct/efct_hw.c | 2 + drivers/scsi/elx/efct/efct_unsol.c | 1 + drivers/scsi/hpsa.c | 4 + drivers/scsi/pm8001/pm8001_ctl.c | 5 +- drivers/scsi/scsi_scan.c | 2 +- drivers/scsi/scsi_transport_sas.c | 60 +- drivers/scsi/sg.c | 7 +- drivers/scsi/smartpqi/smartpqi_init.c | 2 +- drivers/slimbus/qcom-ctrl.c | 5 +- drivers/slimbus/qcom-ngd-ctrl.c | 107 +- drivers/soc/fsl/qe/qe.c | 3 + drivers/soc/ti/k3-ringacc.c | 4 +- drivers/spi/spi-ep93xx.c | 1 + drivers/spi/spi-fsl-lpspi.c | 18 +- drivers/spi/spi-sh-msiof.c | 10 +- drivers/spi/spi-uniphier.c | 4 +- drivers/spi/spi-xilinx.c | 11 +- drivers/staging/media/atomisp/pci/atomisp_cmd.c | 6 +- drivers/staging/media/atomisp/pci/sh_css.c | 6 +- drivers/staging/media/ipu3/ipu3-css-params.c | 8 +- drivers/staging/media/sunxi/cedrus/cedrus.c | 4 +- drivers/staging/most/video/video.c | 7 +- drivers/staging/nvec/nvec.c | 4 +- drivers/staging/rtl8723bs/core/rtw_ieee80211.c | 129 +- drivers/staging/rtl8723bs/core/rtw_mlme_ext.c | 20 +- drivers/staging/rtl8723bs/core/rtw_security.c | 2 +- drivers/staging/rtl8723bs/core/rtw_wlan_util.c | 23 +- drivers/staging/rtl8723bs/os_dep/ioctl_cfg80211.c | 88 +- drivers/target/target_core_fabric_lib.c | 89 +- drivers/target/target_core_internal.h | 3 +- drivers/target/target_core_pr.c | 12 +- drivers/thermal/intel/therm_throt.c | 7 +- drivers/thermal/thermal_hwmon.c | 5 +- drivers/tty/serial/8250/8250_mid.c | 31 +- drivers/tty/serial/8250/8250_omap.c | 3 +- drivers/tty/serial/msm_serial.c | 3 +- drivers/usb/atm/ueagle-atm.c | 36 +- drivers/usb/cdns3/cdnsp-mem.c | 2 + drivers/usb/class/cdc-acm.c | 3 + drivers/usb/common/ulpi.c | 23 +- drivers/usb/core/quirks.c | 6 + drivers/usb/dwc3/dwc3-meson-g12a.c | 14 +- drivers/usb/dwc3/gadget.c | 43 +- drivers/usb/gadget/composite.c | 5 +- drivers/usb/gadget/function/f_fs.c | 5 +- drivers/usb/gadget/function/rndis.c | 20 +- drivers/usb/gadget/udc/core.c | 29 +- drivers/usb/host/max3421-hcd.c | 8 + drivers/usb/host/sl811-hcd.c | 1 + drivers/usb/host/xhci.c | 11 +- drivers/usb/misc/chaoskey.c | 1 - drivers/usb/misc/idmouse.c | 45 +- drivers/usb/misc/iowarrior.c | 21 +- drivers/usb/misc/ldusb.c | 38 +- drivers/usb/misc/legousbtower.c | 37 +- drivers/usb/misc/uss720.c | 5 +- drivers/usb/mtu3/mtu3_gadget.c | 1 + drivers/usb/serial/digi_acceleport.c | 43 +- drivers/usb/serial/keyspan_pda.c | 2 +- drivers/usb/serial/option.c | 16 + drivers/usb/storage/ene_ub6250.c | 3 +- drivers/usb/storage/usb.c | 2 +- drivers/usb/typec/tcpm/tcpm.c | 7 +- drivers/usb/typec/ucsi/displayport.c | 7 +- drivers/usb/typec/ucsi/ucsi_ccg.c | 2 +- drivers/usb/usbip/vudc.h | 1 - drivers/usb/usbip/vudc_dev.c | 4 +- drivers/vdpa/vdpa_user/vduse_dev.c | 72 +- drivers/vfio/pci/vfio_pci_core.c | 1 + drivers/vhost/vdpa.c | 29 +- drivers/video/fbdev/aty/radeon_base.c | 1 + drivers/video/fbdev/broadsheetfb.c | 8 +- drivers/video/fbdev/carminefb.c | 1 + drivers/video/fbdev/core/fbcon.c | 14 +- drivers/video/fbdev/hecubafb.c | 6 +- drivers/video/fbdev/i740fb.c | 1 + drivers/video/fbdev/metronomefb.c | 8 +- drivers/video/fbdev/nvidia/nvidia.c | 1 + drivers/video/fbdev/s3fb.c | 1 + drivers/video/fbdev/sm501fb.c | 16 +- drivers/video/fbdev/sm712.h | 2 +- drivers/video/fbdev/tdfxfb.c | 1 + drivers/video/fbdev/tridentfb.c | 1 + drivers/video/fbdev/uvesafb.c | 4 +- drivers/virtio/virtio_mmio.c | 26 +- drivers/watchdog/sp5100_tco.c | 3 +- drivers/watchdog/sprd_wdt.c | 5 +- drivers/watchdog/watchdog_core.c | 3 + drivers/xen/gntdev.c | 8 +- drivers/xen/xen-scsiback.c | 30 +- fs/afs/cell.c | 2 + fs/afs/cmservice.c | 2 - fs/afs/rxrpc.c | 11 +- fs/afs/super.c | 3 +- fs/afs/vl_list.c | 10 +- fs/afs/volume.c | 2 +- fs/btrfs/extent-tree.c | 17 +- fs/btrfs/inode.c | 77 +- fs/btrfs/ordered-data.c | 13 + fs/btrfs/ordered-data.h | 2 + fs/cifs/cifs_debug.c | 2 +- fs/cifs/cifs_swn.c | 333 +++- fs/cifs/cifsacl.c | 2 +- fs/cifs/cifsfs.c | 3 +- fs/cifs/cifsglob.h | 6 +- fs/cifs/cifsproto.h | 11 +- fs/cifs/connect.c | 38 +- fs/cifs/dfs_cache.c | 2 +- fs/cifs/ioctl.c | 12 +- fs/cifs/misc.c | 14 +- fs/cifs/netmisc.c | 2 +- fs/cifs/readdir.c | 6 +- fs/cifs/smb2maperror.c | 16 +- fs/cifs/smb2misc.c | 130 +- fs/cifs/smb2ops.c | 118 +- fs/cifs/smb2pdu.c | 118 +- fs/cifs/smb2pdu.h | 373 +---- fs/cifs/smb2proto.h | 4 +- fs/cifs/smb2transport.c | 38 +- fs/cifs/trace.h | 95 +- fs/configfs/dir.c | 57 +- fs/efs/file.c | 21 +- fs/exfat/dir.c | 13 +- fs/ext4/ioctl.c | 12 +- fs/f2fs/checkpoint.c | 13 +- fs/f2fs/data.c | 29 + fs/f2fs/debug.c | 2 +- fs/f2fs/f2fs.h | 1 + fs/f2fs/file.c | 15 +- fs/f2fs/gc.c | 4 +- fs/f2fs/inode.c | 39 +- fs/f2fs/segment.c | 14 +- fs/f2fs/segment.h | 8 +- fs/f2fs/xattr.c | 4 +- fs/fuse/cuse.c | 4 +- fs/fuse/dev.c | 2 +- fs/hfs/bfind.c | 2 +- fs/hfs/bnode.c | 56 +- fs/hfs/brec.c | 2 +- fs/hfs/btree.c | 2 +- fs/hfs/btree.h | 71 +- fs/hfs/hfs_fs.h | 85 +- fs/hfs/inode.c | 2 +- fs/hfsplus/bfind.c | 2 +- fs/hfsplus/bnode.c | 62 +- fs/hfsplus/brec.c | 2 +- fs/hfsplus/btree.c | 2 +- fs/hfsplus/hfsplus_fs.h | 40 +- fs/isofs/rock.c | 11 + fs/jbd2/journal.c | 2 + fs/ksmbd/connection.c | 49 +- fs/ksmbd/connection.h | 3 + fs/ksmbd/oplock.c | 10 +- fs/ksmbd/smb2pdu.c | 23 +- fs/ksmbd/smbacl.c | 4 +- fs/ksmbd/vfs_cache.c | 30 +- fs/ksmbd/vfs_cache.h | 1 + fs/lockd/svcsubs.c | 4 +- fs/nfs/callback_proc.c | 9 +- fs/nfs/dir.c | 2 + fs/nfs/filelayout/filelayout.c | 2 + fs/nfs/flexfilelayout/flexfilelayout.c | 33 + fs/nfs/flexfilelayout/flexfilelayout.h | 16 + fs/nfs/pnfs.c | 4 +- fs/nfsd/nfs4layouts.c | 4 +- fs/nfsd/nfs4recover.c | 120 +- fs/nfsd/nfs4state.c | 22 +- fs/nfsd/vfs.c | 9 +- fs/nilfs2/segment.c | 22 + fs/ntfs3/fslog.c | 97 +- fs/ntfs3/index.c | 31 +- fs/ntfs3/lznt.c | 2 +- fs/ntfs3/namei.c | 2 +- fs/ocfs2/alloc.c | 2 +- fs/ocfs2/aops.c | 13 +- fs/ocfs2/buffer_head_io.c | 7 +- fs/ocfs2/dlm/dlmdebug.c | 16 +- fs/ocfs2/dlmglue.c | 17 + fs/ocfs2/inode.c | 150 +- fs/ocfs2/journal.c | 13 +- fs/ocfs2/move_extents.c | 4 +- fs/ocfs2/ocfs2.h | 2 - fs/ocfs2/quota_local.c | 2 +- fs/ocfs2/stack_user.c | 10 +- fs/ocfs2/super.c | 2 - fs/ocfs2/sysfile.c | 9 +- fs/orangefs/dir.c | 7 +- fs/proc/array.c | 6 + fs/proc/base.c | 184 +-- fs/proc/fd.c | 71 +- fs/proc/generic.c | 9 +- fs/proc/internal.h | 6 +- fs/proc/namespaces.c | 16 +- fs/proc/proc_net.c | 1 + fs/smbfs_common/smb2pdu.h | 318 ++++ fs/sysfs/file.c | 4 + fs/udf/balloc.c | 5 +- fs/udf/super.c | 11 +- fs/userfaultfd.c | 14 +- fs/xfs/xfs_dquot.c | 16 +- fs/xfs/xfs_log_recover.c | 76 +- fs/xfs/xfs_reflink.c | 36 + include/crypto/drbg.h | 18 +- include/linux/audit.h | 8 + include/linux/bitops.h | 2 + include/linux/bpf.h | 4 + include/linux/device.h | 5 +- include/linux/fwnode.h | 2 + include/linux/glob.h | 1 + include/linux/hid-sensor-hub.h | 25 + include/linux/hid.h | 29 + include/linux/iio/common/inv_sensors_timestamp.h | 94 ++ include/linux/netlink.h | 2 + include/linux/pci.h | 4 +- include/linux/platform_data/pca953x.h | 2 +- include/linux/skmsg.h | 22 +- include/linux/vmalloc.h | 4 +- include/net/addrconf.h | 10 +- include/net/bluetooth/hci.h | 5 +- include/net/bluetooth/l2cap.h | 2 +- include/net/fib_rules.h | 5 + include/net/gue.h | 2 +- include/net/ip_fib.h | 8 +- include/net/ip_vs.h | 3 +- include/net/rtnetlink.h | 3 + include/net/sctp/sctp.h | 3 +- include/net/sock.h | 2 +- include/net/xdp.h | 29 + include/net/xfrm.h | 7 + include/sound/asequencer.h | 4 + include/sound/seq_kernel.h | 8 + include/uapi/sound/asequencer.h | 54 +- io_uring/io-wq.c | 2 +- kernel/audit.c | 85 +- kernel/bpf/core.c | 2 +- kernel/bpf/devmap.c | 19 + kernel/bpf/hashtab.c | 21 +- kernel/bpf/helpers.c | 9 +- kernel/bpf/inode.c | 13 +- kernel/bpf/lpm_trie.c | 10 +- kernel/bpf/verifier.c | 3 +- kernel/cgroup/cpuset.c | 7 +- kernel/cpu.c | 20 +- kernel/locking/rtmutex.c | 14 +- kernel/locking/rtmutex_api.c | 2 +- kernel/sched/fair.c | 2 +- kernel/sched/features.h | 8 + kernel/time/posix-cpu-timers.c | 3 +- kernel/time/time.c | 2 +- kernel/trace/ring_buffer.c | 3 +- kernel/trace/trace_eprobe.c | 2 +- kernel/trace/trace_events_filter.c | 6 +- kernel/trace/trace_probe.c | 3 +- kernel/trace/trace_probe.h | 2 +- kernel/workqueue.c | 2 +- lib/debugobjects.c | 17 + lib/glob.c | 31 +- lib/test_meminit.c | 2 +- net/6lowpan/nhc.c | 2 +- net/9p/client.c | 2 + net/9p/trans_rdma.c | 19 +- net/atm/common.c | 2 + net/batman-adv/distributed-arp-table.c | 30 +- net/batman-adv/fragmentation.c | 8 +- net/batman-adv/gateway_client.c | 3 +- net/batman-adv/main.c | 13 +- net/batman-adv/routing.c | 3 +- net/batman-adv/soft-interface.c | 17 +- net/batman-adv/soft-interface.h | 2 + net/batman-adv/translation-table.c | 5 +- net/bluetooth/af_bluetooth.c | 17 +- net/bluetooth/bnep/core.c | 27 +- net/bluetooth/l2cap_core.c | 123 +- net/bluetooth/l2cap_sock.c | 4 +- net/bluetooth/sco.c | 62 +- net/bridge/br_cfm.c | 6 + net/bridge/br_cfm_netlink.c | 4 +- net/bridge/br_if.c | 3 + net/bridge/br_stp.c | 3 +- net/bridge/netfilter/ebtables.c | 22 +- net/bridge/netfilter/nft_meta_bridge.c | 4 +- net/can/bcm.c | 90 +- net/can/isotp.c | 9 +- net/core/fib_rules.c | 6 +- net/core/filter.c | 44 +- net/core/lwt_bpf.c | 12 + net/core/rtnetlink.c | 10 + net/core/skbuff.c | 23 +- net/core/skmsg.c | 2 + net/dsa/tag_ksz.c | 18 +- net/ieee802154/core.c | 2 +- net/ieee802154/header_ops.c | 9 +- net/ieee802154/ieee802154.h | 17 + net/ieee802154/netlink.c | 36 +- net/ife/ife.c | 2 +- net/ipv4/fib_frontend.c | 15 +- net/ipv4/igmp.c | 1 + net/ipv4/ip_gre.c | 6 + net/ipv4/ip_vti.c | 3 + net/ipv4/ipmr.c | 4 +- net/ipv4/netfilter/nf_reject_ipv4.c | 2 +- net/ipv4/sysctl_net_ipv4.c | 10 +- net/ipv4/tcp_output.c | 4 +- net/ipv6/addrconf.c | 23 +- net/ipv6/ip6_fib.c | 73 +- net/ipv6/ip6_gre.c | 6 + net/ipv6/ip6_vti.c | 3 + net/ipv6/ip6mr.c | 4 +- net/ipv6/mcast.c | 165 +- net/ipv6/netfilter.c | 4 +- net/ipv6/netfilter/ip6t_ah.c | 5 + net/ipv6/netfilter/ip6t_hbh.c | 1 + net/ipv6/netfilter/ip6t_rt.c | 3 +- net/ipv6/netfilter/nf_conntrack_reasm.c | 3 +- net/ipv6/route.c | 9 +- net/ipv6/seg6.c | 3 + net/ipv6/sit.c | 3 + net/kcm/kcmsock.c | 8 +- net/key/af_key.c | 1 + net/llc/af_llc.c | 1 + net/llc/llc_conn.c | 1 - net/mac80211/main.c | 3 +- net/mac80211/tx.c | 17 +- net/mac802154/iface.c | 2 +- net/mpls/af_mpls.c | 4 +- net/netfilter/ipset/ip_set_core.c | 12 +- net/netfilter/ipvs/ip_vs_app.c | 10 +- net/netfilter/ipvs/ip_vs_conn.c | 4 +- net/netfilter/ipvs/ip_vs_core.c | 36 +- net/netfilter/ipvs/ip_vs_proto_sctp.c | 18 +- net/netfilter/ipvs/ip_vs_proto_tcp.c | 11 +- net/netfilter/ipvs/ip_vs_proto_udp.c | 3 +- net/netfilter/nf_conncount.c | 23 +- net/netfilter/nf_conntrack_core.c | 18 +- net/netfilter/nf_conntrack_irc.c | 6 +- net/netfilter/nf_conntrack_seqadj.c | 2 + net/netfilter/nf_nat_sip.c | 9 + net/netfilter/nf_tables_api.c | 41 +- net/netfilter/nfnetlink_cthelper.c | 4 +- net/netfilter/nfnetlink_osf.c | 6 +- net/netfilter/nft_log.c | 58 +- net/netfilter/nft_set_bitmap.c | 4 +- net/netfilter/nft_set_hash.c | 8 +- net/netfilter/nft_set_pipapo.c | 5 +- net/netfilter/nft_set_rbtree.c | 4 +- net/netfilter/nft_synproxy.c | 9 +- net/netfilter/xt_AUDIT.c | 58 +- net/netfilter/xt_cluster.c | 2 +- net/netfilter/xt_connmark.c | 14 +- net/netfilter/xt_nat.c | 9 + net/netfilter/xt_rateest.c | 2 +- net/netfilter/xt_u32.c | 12 +- net/netlink/af_netlink.c | 35 +- net/netlink/af_netlink.h | 5 +- net/nfc/llcp_sock.c | 14 +- net/openvswitch/conntrack.c | 2 +- net/openvswitch/flow_netlink.c | 201 ++- net/psample/psample.c | 6 +- net/qrtr/af_qrtr.c | 2 +- net/sched/act_bpf.c | 2 +- net/sched/act_pedit.c | 11 +- net/sched/cls_api.c | 3 + net/sched/cls_bpf.c | 10 +- net/sched/sch_cake.c | 5 +- net/sched/sch_codel.c | 48 +- net/sched/sch_drr.c | 8 +- net/sched/sch_fq_codel.c | 41 +- net/sched/sch_hfsc.c | 24 +- net/sched/sch_hhf.c | 27 + net/sched/sch_htb.c | 14 +- net/sched/sch_multiq.c | 2 +- net/sctp/diag.c | 67 +- net/sctp/sm_make_chunk.c | 10 +- net/sctp/sm_statefuns.c | 23 +- net/sctp/socket.c | 29 +- net/smc/smc_cdc.c | 15 +- net/socket.c | 2 +- net/sunrpc/xprtrdma/rpc_rdma.c | 4 +- net/tipc/bcast.c | 22 +- net/tipc/bcast.h | 2 +- net/tipc/bearer.c | 1 + net/tipc/name_distr.c | 13 +- net/tipc/netlink.c | 12 + net/tipc/node.c | 15 +- net/tipc/socket.c | 3 + net/tls/tls_sw.c | 4 + net/xfrm/xfrm_interface_core.c | 3 + net/xfrm/xfrm_policy.c | 3 + net/xfrm/xfrm_state.c | 2 +- net/xfrm/xfrm_user.c | 2 +- samples/trace_events/trace-events-sample.c | 4 + scripts/kconfig/conf.c | 6 +- security/apparmor/domain.c | 58 +- security/apparmor/include/policy_unpack.h | 19 + security/apparmor/label.c | 2 +- security/apparmor/lsm.c | 16 +- security/apparmor/net.c | 1 + security/apparmor/policy.c | 14 +- security/apparmor/procattr.c | 2 + security/integrity/evm/evm_secfs.c | 16 +- security/keys/keyring.c | 2 +- sound/aoa/fabrics/layout.c | 6 + sound/core/seq/Kconfig | 7 + sound/core/seq/seq_clientmgr.c | 174 ++- sound/core/seq/seq_clientmgr.h | 2 + sound/core/seq/seq_compat.c | 1 + sound/core/seq/seq_memory.c | 10 +- sound/core/seq/seq_memory.h | 19 +- sound/firewire/isight.c | 3 +- sound/pci/es1938.c | 2 + sound/soc/codecs/adau1372.c | 5 + sound/soc/codecs/hdac_hdmi.c | 4 +- sound/soc/fsl/fsl_audmix.c | 6 + sound/soc/tegra/tegra210_ahub.c | 4 +- sound/usb/caiaq/input.c | 2 +- sound/usb/mixer_quirks.c | 101 +- sound/usb/mixer_scarlett.c | 4 +- sound/usb/mixer_us16x08.c | 127 +- sound/virtio/virtio_pcm.c | 3 +- sound/virtio/virtio_pcm_ops.c | 3 +- tools/bpf/bpftool/net.c | 4 +- tools/include/linux/bitops.h | 2 + tools/lib/api/fs/fs.c | 19 +- tools/lib/bpf/strset.c | 62 +- tools/perf/util/probe-finder.c | 4 +- .../selftests/bpf/progs/bpf_iter_task_vma.c | 2 +- tools/testing/selftests/vm/compaction_test.c | 3 + tools/testing/selftests/vm/hmm-tests.c | 63 +- tools/usb/usbip/libsrc/usbip_common.c | 2 + tools/usb/usbip/libsrc/usbip_device_driver.c | 4 + tools/usb/usbip/libsrc/vhci_driver.c | 1 + tools/virtio/vringh_test.c | 5 + tools/vm/slabinfo.c | 4 +- virt/kvm/eventfd.c | 12 +- virt/kvm/kvm_main.c | 16 +- 790 files changed, 11022 insertions(+), 5326 deletions(-)

1 month, 2 weeks

[PATCH 6.1 0000/1029] 6.1.178-rc2 review

by Greg Kroah-Hartman

This is the start of the stable review cycle for the 6.1.178 release. There are 1029 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know. Responses should be made by Fri, 24 Jul 2026 14:30:58 +0000. Anything received after that time might be too late. The whole patch series can be found in one patch at: https://www.kernel.org/pub/linux/kernel/v6.x/stable-review/patch-6.1.178-rc… or in the git tree and branch at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-6.1.y and the diffstat can be found below. thanks, greg k-h ------------- Pseudo-Shortlog of commits: Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> Linux 6.1.178-rc2 Sandipan Das <sandipan.das(a)amd.com> perf/x86/amd/core: Always use the NMI latency mitigation HyeongJun An <sammiee5311(a)gmail.com> ALSA: seq: Fix uninitialised heap leak in snd_seq_event_dup() Jean-Baptiste Maneyrol <jean-baptiste.maneyrol(a)tdk.com> iio: imu: inv_icm42600: fix timestamp clock period by using lower value Takashi Iwai <tiwai(a)suse.de> ALSA: seq: Check UMP support for midi_version change Takashi Iwai <tiwai(a)suse.de> ALSA: seq: Skip event type filtering for UMP events Pavel Skripkin <paskripkin(a)gmail.com> bluetooth/hci: disallow setting handle bigger than HCI_CONN_HANDLE_MAX Edward Adam Davis <eadavis(a)qq.com> Bluetooth: Ignore too large handle values in BIG Jean-Baptiste Maneyrol <jean-baptiste.maneyrol(a)tdk.com> iio: invensense: fix odr switching to same value Jean-Baptiste Maneyrol <jean-baptiste.maneyrol(a)tdk.com> iio: imu: inv_mpu6050: fix frequency setting when chip is off Xuan Zhuo <xuanzhuo(a)linux.alibaba.com> virtio_ring: fix syncs DMA memory with different direction Shyam Prasad N <sprasad(a)microsoft.com> cifs: fix lock ordering while disabling multichannel Liming Wu <liming.wu(a)jaguarmicro.com> tools/virtio: Add dma sync api for virtio test Takashi Iwai <tiwai(a)suse.de> ALSA: seq: Avoid confusion of aligned read size Danilo Krummrich <dakr(a)kernel.org> driver core: Guard deferred probe timeout extension with delayed_work_pending() Danilo Krummrich <dakr(a)kernel.org> driver core: Fix missing jiffies conversion in deferred_probe_extend_timeout() Easwar Hariharan <eahariha(a)linux.microsoft.com> jiffies: Cast to unsigned long in secs_to_jiffies() conversion Easwar Hariharan <eahariha(a)linux.microsoft.com> jiffies: Define secs_to_jiffies() Baokun Li <libaokun(a)linux.alibaba.com> writeback: drop now-unnecessary rcu_barrier() in cgroup_writeback_umount() Jan Kara <jack(a)suse.cz> writeback: Fix use after free in inode_switch_wbs_work_fn() Stig Hornang <stig(a)hornang.me> Bluetooth: L2CAP: fix tx ident leak for commands without a response Luiz Augusto von Dentz <luiz.von.dentz(a)intel.com> Bluetooth: L2CAP: Fix regressions caused by reusing ident Randy Dunlap <rdunlap(a)infradead.org> seqlock: fix scoped_seqlock_read kernel-doc Marc Zyngier <maz(a)kernel.org> KVM: Move kvm_io_bus_get_dev() locking responsibilities to callers SeongJae Park <sj(a)kernel.org> mm/damon/sysfs-schemes: fix dir put orders in access_pattern_add_dirs() SeongJae Park <sj(a)kernel.org> mm/damon/core: make charge_addr_from aware of end-address exclusivity Qu Wenruo <wqu(a)suse.com> btrfs: fix incorrect buffered IO fallback for append direct writes Qu Wenruo <wqu(a)suse.com> btrfs: fix false IO failure after falling back to buffered write Wentao Liang <vulab(a)iscas.ac.cn> regulator: scmi: fix of_node refcount leak in scmi_regulator_probe() Krzysztof Kozlowski <krzysztof.kozlowski(a)linaro.org> regulator: scmi: Simplify with scoped for each OF child loop Ricardo Robaina <rrobaina(a)redhat.com> audit: fix potential integer overflow in audit_log_n_hex() Ricardo Robaina <rrobaina(a)redhat.com> audit: add audit_log_nf_skb helper function Giovanni Cabiddu <giovanni.cabiddu(a)intel.com> crypto: qat - validate RSA CRT component lengths Qu Wenruo <wqu(a)suse.com> btrfs: check and set EXTENT_DELALLOC_NEW before clearing EXTENT_DELALLOC Ahsan Atta <ahsan.atta(a)intel.com> crypto: qat - fix restarting state leak on allocation failure Neill Kapron <nkapron(a)google.com> usb: gadget: f_fs: Tie read_buffer lifetime to ffs_epfile Chaitanya Kulkarni <kch(a)nvidia.com> nvmet: remove superfluous initialization Thorsten Blum <thorsten.blum(a)linux.dev> crypto: atmel-sha204a - drop hwrng quality reduction for ATSHA204A Uwe Kleine-König <u.kleine-koenig(a)baylibre.com> crypto: atmel - Drop explicit initialization of struct i2c_device_id::driver_data to 0 Krzysztof Kozlowski <krzysztof.kozlowski(a)linaro.org> crypto: atmel-sha204a - Mark OF related data as maybe unused Tyler Baker <tyler.baker(a)oss.qualcomm.com> usb: gadget: f_fs: initialize reset_work at allocation time Andy Yan <andyshrk(a)163.com> usb: typec: tcpm: Fix VDM type for Enter Mode commands Mauricio Faria de Oliveira <mfo(a)igalia.com> usb: atm: ueagle-atm: wait for pre-firmware load in .disconnect() Oliver Neukum <oneukum(a)suse.com> usb: iowarrior: remove inherent race with minor number Vlad Poenaru <vlad.wing(a)gmail.com> bpf: Allow LPM map access from sleepable BPF programs Andrii Nakryiko <andrii(a)kernel.org> bpf: Consistently use bpf_rcu_lock_held() everywhere Tristan Madani <tristan(a)talencesecurity.com> hfs/hfsplus: fix u32 overflow in check_and_correct_requested_length Viacheslav Dubeyko <slava(a)dubeyko.com> hfs/hfsplus: prevent getting negative values of offset/length Andy Shevchenko <andriy.shevchenko(a)linux.intel.com> serial: 8250_mid: Disable DMA for selected platforms Ilpo Järvinen <ilpo.jarvinen(a)linux.intel.com> serial: 8250_mid: Remove 8250_pci usage Manish Khadka <maskmemanish(a)gmail.com> HID: appleir: fix UAF on pending key_up_timer in remove() Thomas Gleixner <tglx(a)linutronix.de> treewide: Switch/rename to timer_delete[_sync]() Jann Horn <jannh(a)google.com> proc: protect ptrace_may_access() with exec_update_lock (part 1) Oleg Nesterov <oleg(a)redhat.com> seqlock: Change do_task_stat() to use scoped_seqlock_read() Peter Zijlstra <peterz(a)infradead.org> seqlock: Introduce scoped_seqlock_read() Trung Nguyen <trungnh(a)cystack.net> HID: multitouch: fix out-of-bounds bit access on mt_io_flags Angela Czubak <aczubak(a)google.com> HID: add haptics page defines Jann Horn <jannh(a)google.com> proc: protect ptrace_may_access() with exec_update_lock (FD links) Christoph Hellwig <hch(a)lst.de> proc: rename proc_setattr to proc_nochmod_setattr Tyler Hicks (Microsoft) <code(a)tyhicks.com> proc: Move fdinfo PTRACE_MODE_READ check into the inode .permission operation Thomas Weißschuh <linux(a)weissschuh.net> proc: use generic setattr() for /proc/$PID/net Baokun Li <libaokun(a)linux.alibaba.com> writeback: fix race between cgroup_writeback_umount() and inode_switch_wbs() Jan Kara <jack(a)suse.cz> writeback: Avoid contention on wb->list_lock when switching inodes Namjae Jeon <linkinjeon(a)kernel.org> ksmbd: track the connection owning a byte-range lock DaeMyung Kang <charsyam(a)gmail.com> ksmbd: centralize ksmbd_conn final release to plug transport leak DaeMyung Kang <charsyam(a)gmail.com> ksmbd: destroy async_ida in ksmbd_conn_free() Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> ksmbd: fix mechToken leak when SPNEGO decode fails after token alloc Namjae Jeon <linkinjeon(a)kernel.org> ksmbd: fix use-after-free in __ksmbd_close_fd() via durable scavenger ZhangGuoDong <zhangguodong(a)kylinos.cn> smb: move smb_version_values to common/smbglob.h ZhangGuoDong <zhangguodong(a)kylinos.cn> smb: move some duplicate definitions to common/cifsglob.h Namjae Jeon <linkinjeon(a)kernel.org> ksmbd: use opener credentials for FSCTL mutations Michael Bommarito <michael.bommarito(a)gmail.com> smb: client: resolve SWN tcon from live registrations David Howells <dhowells(a)redhat.com> cifs: Add tracing for the cifs_tcon struct refcounting David Howells <dhowells(a)redhat.com> cifs: Fix reacquisition of volume cookie on still-live connection Shyam Prasad N <sprasad(a)microsoft.com> cifs: after disabling multichannel, mark tcon for reconnect Shyam Prasad N <sprasad(a)microsoft.com> cifs: handle when server stops supporting multichannel Luiz Augusto von Dentz <luiz.von.dentz(a)intel.com> Bluetooth: hci_core: Enable buffer flow control for SCO/eSCO Runyu Xiao <runyu.xiao(a)seu.edu.cn> Bluetooth: L2CAP: cancel pending_rx_work before taking conn->lock Hyunwoo Kim <imv4bel(a)gmail.com> Bluetooth: L2CAP: Fix deadlock in l2cap_conn_del() Luiz Augusto von Dentz <luiz.von.dentz(a)intel.com> Bluetooth: L2CAP: Fix not tracking outstanding TX ident Siwei Zhang <oss(a)fourdim.xyz> Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_new_connection_cb() Pauli Virtanen <pav(a)iki.fi> Bluetooth: 6lowpan: fix cyclic locking warning on netdev unregister Sungwoo Kim <iam(a)sung-woo.kim> Bluetooth: L2CAP: Fix slab-use-after-free in l2cap_connect() Luiz Augusto von Dentz <luiz.von.dentz(a)intel.com> Bluetooth: Remove BT_HS Ziyang Xuan <william.xuanziyang(a)huawei.com> Bluetooth: Make handle of hci_conn be unique Florian Westphal <fw(a)strlen.de> netfilter: ebtables: zero chainstack array Qianfeng Rong <rongqianfeng(a)vivo.com> netfilter: ebtables: Use vmalloc_array() to improve code Qi Zheng <zhengqi.arch(a)bytedance.com> mm: shrinker: fix NULL pointer dereference in debugfs John Keeping <john(a)metanate.com> mm: shrinkers: fix debugfs file permissions Runyu Xiao <runyu.xiao(a)seu.edu.cn> gpio: sch: use raw_spinlock_t in the irq startup path Runyu Xiao <runyu.xiao(a)seu.edu.cn> coresight: etb10: restore atomic_t for shared reading state Shakeel Butt <shakeel.butt(a)linux.dev> mm/shrinker: do not hold RCU lock in shrinker_debugfs_count_show() Qi Zheng <zhengqi.arch(a)bytedance.com> mm: shrinker: remove redundant shrinker_rwsem in debugfs operations Marco Nenciarini <mnencia(a)kcore.it> PCI: Skip Resizable BAR restore on read error Ilpo Järvinen <ilpo.jarvinen(a)linux.intel.com> PCI: Move Resizable BAR code to rebar.c Ilpo Järvinen <ilpo.jarvinen(a)linux.intel.com> PCI: Add kerneldoc for pci_resize_resource() Ilpo Järvinen <ilpo.jarvinen(a)linux.intel.com> PCI: Fix restoring BARs on BAR resize rollback path Ilpo Järvinen <ilpo.jarvinen(a)linux.intel.com> PCI: Free saved list without holding pci_bus_sem Ilpo Järvinen <ilpo.jarvinen(a)linux.intel.com> PCI: Prevent resource tree corruption when BAR resize fails Giovanni Cabiddu <giovanni.cabiddu(a)intel.com> crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() Alexandru Hossu <hossu.alexandru(a)gmail.com> staging: rtl8723bs: fix OOB reads in rtw_get_sec_ie(), rtw_get_wapi_ie(), and rtw_get_wps_attr() Nikolay Kulikov <nikolayof23(a)gmail.com> staging: rtl8723bs: fix spaces around binary operators William Hansen-Baird <william.hansen.baird(a)gmail.com> staging: rtl8723bs: core: move constants to right side in comparison Manivannan Sadhasivam <manivannan.sadhasivam(a)oss.qualcomm.com> PCI: mediatek: Fix IRQ domain leak when port fails to enable Christian Marangi <ansuelsmth(a)gmail.com> PCI: mediatek: Use generic MACRO for TPVPERL delay Christian Marangi <ansuelsmth(a)gmail.com> PCI: mediatek: Convert bool to single quirks entry and bitmap Jiri Slaby (SUSE) <jirislaby(a)kernel.org> PCI: controller: Use dev_fwnode() instead of of_fwnode_handle() Alexandru Hossu <hossu.alexandru(a)gmail.com> staging: rtl8723bs: fix heap buffer overflow in rtw_cfg80211_set_wpa_ie() Franziska Naepelt <franziska.naepelt(a)googlemail.com> staging: rtl8723bs: Fix space issues Franziska Naepelt <franziska.naepelt(a)googlemail.com> staging: rtl8723bs: Fix indentation issues Richard Zhu <hongxing.zhu(a)nxp.com> PCI: imx6: Fix IMX6SX_GPR12_PCIE_TEST_POWERDOWN handling Alex Williamson <alex.williamson(a)nvidia.com> vfio/mlx5: Fix racy bitfields and tighten struct layout Mahesh Vaidya <mahesh.vaidya(a)altera.com> PCI: altera: Fix resource leaks on probe failure Alex Williamson <alex.williamson(a)nvidia.com> vfio/pci: Latch disable_idle_d3 per device Raghavendra Rao Ananta <rananta(a)google.com> vfio/pci: Use a private flag to prevent power state change with VFs Reinette Chatre <reinette.chatre(a)intel.com> vfio/pci: Use bitfield for struct vfio_pci_core_device flags Herman van Hazendonk <github.com(a)herrie.org> iio: common: st_sensors: honour channel endianness in read_axis_data Alexander Lobakin <aleksander.lobakin(a)intel.com> bitops: make BYTES_TO_BITS() treewide-available Zhao Dongdong <zhaodongdong(a)kylinos.cn> ALSA: aoa: check snd_ctl_new1() return value Jean-Baptiste Maneyrol <jean-baptiste.maneyrol(a)tdk.com> iio: imu: inv_icm42600: fix timestamping by limiting FIFO reading Jean-Baptiste Maneyrol <jean-baptiste.maneyrol(a)tdk.com> iio: imu: inv_icm42600: stabilized timestamp in interrupt Jean-Baptiste Maneyrol <jean-baptiste.maneyrol(a)tdk.com> iio: invensense: fix timestamp glitches when switching frequency Colin Ian King <colin.i.king(a)gmail.com> iio: invensense: remove redundant initialization of variable period Jean-Baptiste Maneyrol <jean-baptiste.maneyrol(a)tdk.com> iio: imu: inv_mpu6050: use the common inv_sensors timestamp module Jean-Baptiste Maneyrol <jean-baptiste.maneyrol(a)tdk.com> iio: make invensense timestamp module generic Jean-Baptiste Maneyrol <jean-baptiste.maneyrol(a)tdk.com> iio: move inv_icm42600 timestamp module in common Jean-Baptiste Maneyrol <jean-baptiste.maneyrol(a)tdk.com> iio: imu: inv_icm42600: make timestamp module chip independent Zhang Lixu <lixu.zhang(a)intel.com> iio: hid-sensor-rotation: Fix stale or zero output when reading raw values Runyu Xiao <runyu.xiao(a)seu.edu.cn> iio: imu: adis: add IRQF_NO_THREAD to non-FIFO trigger IRQ Rafael J. Wysocki <rafael.j.wysocki(a)intel.com> ACPI: NFIT: core: Fix acpi_nfit_init() error cleanup Pengpeng Hou <pengpeng(a)iscas.ac.cn> mtd: rawnand: lpc32xx_slc: fail DMA transfer on completion timeout Pengpeng Hou <pengpeng(a)iscas.ac.cn> mtd: rawnand: lpc32xx_mlc: fail DMA transfers on timeout Pengpeng Hou <pengpeng(a)iscas.ac.cn> mtd: rawnand: fsl_ifc: return errors for failed page reads Runyu Xiao <runyu.xiao(a)seu.edu.cn> mmc: vub300: defer reset until cmd_mutex is unlocked Pengpeng Hou <pengpeng(a)iscas.ac.cn> mtd: mchp23k256: use SPI match data for chip caps Pengpeng Hou <pengpeng(a)iscas.ac.cn> mtd: onenand: samsung: report DMA completion timeouts Rafael Beims <rafael.beims(a)toradex.com> wifi: mwifiex: fix permanently busy scans after multiple roam iterations Zhiling Zou <roxy520tt(a)gmail.com> wifi: mac80211: free ack status frame on TX header build failure Junrui Luo <moonafterrain(a)outlook.com> powerpc/spufs: fix out-of-bounds access in spufs_mem_mmap_access() Zhao Dongdong <zhaodongdong(a)kylinos.cn> reset: sunxi: fix memory region leak on ioremap failure Julian Anastasov <ja(a)ssi.bg> ipvs: fix more places with wrong ipv6 transport offsets Maoyi Xie <maoyixie.tju(a)gmail.com> memstick: ms_block: reject a card that reports too many blocks James Raphael Tiovalen <jamestiotio(a)gmail.com> macsec: fix promiscuity refcount leak in macsec_dev_open() Xuanqiang Luo <luoxuanqiang(a)kylinos.cn> llc: fix SAP refcount leak when creating incoming sockets Laxman Acharya Padhya <acharyalaxman8848(a)gmail.com> Bluetooth: btrtl: validate firmware patch bounds Asim Viladi Oglu Manizada <manizada(a)pm.me> net: openvswitch: reject oversized nested action attrs Abhishek Ojha <Abhishek.ojha(a)savoirfairelinux.com> regulator: ltc3676: Fix incorrect IRQSTAT bit offsets Dawei Feng <dawei.feng(a)seu.edu.cn> wifi: mac80211: fix memory leak in ieee80211_register_hw() Runyu Xiao <runyu.xiao(a)seu.edu.cn> wifi: rt2x00: avoid full teardown before work setup in probe Thorsten Blum <thorsten.blum(a)linux.dev> powerpc/pseries: fix memory leak on krealloc failure in papr_init Farhad Alemi <farhad.alemi(a)berkeley.edu> cgroup/cpuset: rebind mm mempolicy to effective_mems, not mems_allowed Tao Liu <ltao(a)redhat.com> riscv: Prevent NULL pointer dereference in machine_kexec_prepare() Michael Bommarito <michael.bommarito(a)gmail.com> drbd: reject data replies with an out-of-range payload size Daehyeon Ko <4ncienth(a)gmail.com> macsec: don't read an unset MAC header in macsec_encrypt() Yizhou Zhao <zhaoyz24(a)mails.tsinghua.edu.cn> ipvs: reset full ip_vs_seq structs in ip_vs_conn_new Yizhou Zhao <zhaoyz24(a)mails.tsinghua.edu.cn> ipvs: use parsed transport offset in SCTP state lookup Shuangpeng Bai <shuangpeng.kernel(a)gmail.com> llc: fix SAP refcount leak in llc_ui_autobind() Yousef Alhouseen <alhouseenyousef(a)gmail.com> mac802154: remove interfaces with RCU list deletion Gerald Schaefer <gerald.schaefer(a)linux.ibm.com> s390/monwriter: Reject buffer reuse with different data length HyeongJun An <sammiee5311(a)gmail.com> hwmon: (asus_atk0110) Check package count before accessing element Maoyi Xie <maoyixie.tju(a)gmail.com> net: wwan: iosm: bound device offsets in the MUX downlink decoder Wentao Liang <vulab(a)iscas.ac.cn> ata: pata_pxa: Fix DMA channel leak on probe error Bryam Vargas <hexlabsecurity(a)proton.me> orangefs: keep the readdir entry size 64-bit in fill_from_part() Masami Hiramatsu (Google) <mhiramat(a)kernel.org> tracing/probes: Fix double addition of offset for @+FOFFSET Bryam Vargas <hexlabsecurity(a)proton.me> net/sched: sch_multiq: Replace direct dequeue call with peek and qdisc_dequeue_peeked Andrea Righi <arighi(a)nvidia.com> net: lan743x: Initialize eth_syslock spinlock before use Haoxiang Li <haoxiang_li2024(a)163.com> fsl/fman: Free init resources on KeyGen failure in fman_init() Runyu Xiao <runyu.xiao(a)seu.edu.cn> hwmon: (occ) unregister sysfs devices outside occ lock Haoxiang Li <haoxiang_li2024(a)163.com> net: liquidio: fix BAR resource leak on PF number failure Pengpeng Hou <pengpeng(a)iscas.ac.cn> hwmon: (w83793) remove vrm sysfs file on probe failure Pengpeng Hou <pengpeng(a)iscas.ac.cn> hwmon: (w83627hf) remove VID sysfs files on error and remove Conor Dooley <conor.dooley(a)microchip.com> rtc: mpfs: fix counter upload completion condition Abdun Nihaal <nihaal(a)cse.iitm.ac.in> bnx2x: fix potential memory leak in bnx2x_alloc_mem_bp() Hongchen Zhang <zhanghongchen(a)loongson.cn> LoongArch: Fix missing dirty page tracking in {pte,pmd}_wrprotect() Sven Eckelmann <sven(a)narfation.org> batman-adv: clean untagged VLAN on netdev registration failure Sven Eckelmann <sven(a)narfation.org> batman-adv: ensure minimal ethernet header on TX Sven Eckelmann <sven(a)narfation.org> batman-adv: retrieve ethhdr after potential skb realloc on RX Liew Rui Yan <aethernet65535(a)gmail.com> mm/damon/reclaim: fix typo in damon_reclaim_timer_fn() Jamal Hadi Salim <jhs(a)mojatatu.com> net/sched: sch_teql: move rcu_read_lock()/spin_lock() from _bh variants Shitalkumar Gandhi <shital.gandhi45(a)gmail.com> ieee802154: ca8210: fix pointer truncation in kfifo on 64-bit Shitalkumar Gandhi <shital.gandhi45(a)gmail.com> ieee802154: ca8210: fix cas_ctl leak on spi_async failure Michael Bommarito <michael.bommarito(a)gmail.com> ieee802154: allow legacy LLSEC ADD/DEL ops to pass strict validation Michael Bommarito <michael.bommarito(a)gmail.com> ieee802154: admin-gate legacy LLSEC dump operations Maoyi Xie <maoyixie.tju(a)gmail.com> net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink Maoyi Xie <maoyixie.tju(a)gmail.com> net: ipip: require CAP_NET_ADMIN in the device netns for changelink Maoyi Xie <maoyixie.tju(a)gmail.com> net: ip_vti: require CAP_NET_ADMIN in the device netns for changelink Maoyi Xie <maoyixie.tju(a)gmail.com> net: ip6_vti: require CAP_NET_ADMIN in the device netns for changelink Dawei Feng <dawei.feng(a)seu.edu.cn> net: ena: clean up XDP TX queues when regular TX setup fails Haoxiang Li <haoxiang_li2024(a)163.com> net: ixp4xx_hss: fix duplicate HDLC netdev allocation Haoxiang Li <haoxiang_li2024(a)163.com> net: wwan: t7xx: destroy DMA pool on CLDMA late init failure Maoyi Xie <maoyixie.tju(a)gmail.com> net: sit: require CAP_NET_ADMIN in the device netns for changelink Andreas Kemnade <andreas(a)kemnade.info> gpios: palmas: add .get_direction() op Paul Louvel <paul.louvel(a)bootlin.com> gpio-f7188x: Add support for NCT6126D version B Bradley Morgan <include(a)grrlz.net> cpu: hotplug: Bound hotplug states sysfs output Bradley Morgan <include(a)grrlz.net> cpu: hotplug: Preserve per instance callback errors Zhan Xusheng <zhanxusheng1024(a)gmail.com> posix-cpu-timers: Use u64 multiplication in update_rlimit_cpu() Doruk Tan Ozturk <doruk(a)0sec.ai> net/mlx5e: macsec: fix use-after-free of metadata_dst on RX SC delete Dmitry Torokhov <dmitry.torokhov(a)gmail.com> Input: ims-pcu - fix type confusion in CDC union descriptor parsing Dmitry Torokhov <dmitry.torokhov(a)gmail.com> Input: ims-pcu - fix race condition in reset_device sysfs callback Dmitry Torokhov <dmitry.torokhov(a)gmail.com> Input: ims-pcu - fix potential infinite loop in CDC union descriptor parsing Dmitry Torokhov <dmitry.torokhov(a)gmail.com> Input: ims-pcu - fix out-of-bounds read in ims_pcu_irq() debug logging Dmitry Torokhov <dmitry.torokhov(a)gmail.com> Input: ims-pcu - fix DMA mapping violation in line setup Dmitry Torokhov <dmitry.torokhov(a)gmail.com> Input: ims-pcu - add response length checks Dmitry Torokhov <dmitry.torokhov(a)gmail.com> Input: ims-pcu - validate control endpoint type Dmitry Torokhov <dmitry.torokhov(a)gmail.com> Input: ims-pcu - release data interface on disconnect Dmitry Torokhov <dmitry.torokhov(a)gmail.com> Input: ims-pcu - fix use-after-free and double-free in disconnect Haoxiang Li <haoxiang_li2024(a)163.com> scsi: elx: efct: Fix I/O leak on unsupported additional CDB WenTao Liang <vulab(a)iscas.ac.cn> scsi: elx: efct: Fix refcount leak in efct_hw_io_abort() Bryam Vargas <hexlabsecurity(a)proton.me> scsi: target: core: Fix iSCSI ISID use-after-free in REGISTER AND MOVE Bryam Vargas <hexlabsecurity(a)proton.me> scsi: target: Bound PR-OUT TransportID parsing to the received buffer Michael Bommarito <michael.bommarito(a)gmail.com> scsi: xen: scsiback: Free unsubmitted command instead of double-putting it Michael Bommarito <michael.bommarito(a)gmail.com> scsi: xen: scsiback: Free the command tag on the TMR submit-failure path Xu Rao <raoxu(a)uniontech.com> scsi: sg: Report request-table problems when any status is set Abdun Nihaal <nihaal(a)cse.iitm.ac.in> scsi: lpfc: Fix memory leak in lpfc_sli4_driver_resource_setup() Haoxiang Li <haoxiang_li2024(a)163.com> scsi: hpsa: Fix DMA mapping leak on IOACCEL2 reset path Mikulas Patocka <mpatocka(a)redhat.com> dm-verity: increase sprintf buffer size Mikulas Patocka <mpatocka(a)redhat.com> dm-verity: fix a possible NULL pointer dereference Mikulas Patocka <mpatocka(a)redhat.com> dm_early_create: fix freeing used table on dm_resume failure Mikulas Patocka <mpatocka(a)redhat.com> dm-stats: fix merge accounting Mikulas Patocka <mpatocka(a)redhat.com> dm-stats: fix dm_jiffies_to_msec64 Benjamin Marzinski <bmarzins(a)redhat.com> dm-log: fix a bitset_size overflow on 32bit machines Mikulas Patocka <mpatocka(a)redhat.com> dm-bufio: fix wrong count calculation in dm_bufio_issue_discard Samuel Moelius <sam.moelius(a)trailofbits.com> dm era: fix out-of-bounds memory access for non-zero start sector Ming-Hung Tsai <mtsai(a)redhat.com> dm thin metadata: fix metadata snapshot consistency on commit failure Genjian Zhang <zhanggenjian(a)kylinos.cn> dm thin metadata: fix superblock refcount leak on snapshot shadow failure Haoxiang Li <haoxiang_li2024(a)163.com> net: sparx5: unregister blocking notifier on init failure Jiri Olsa <jolsa(a)kernel.org> bpf: Add missing access_ok call to copy_user_syms Oliver Hartkopp <socketcan(a)hartkopp.net> can: bcm: add missing rcu list annotations and operations Oliver Hartkopp <socketcan(a)hartkopp.net> can: bcm: fix lockless bound/ifindex race and silent RX_SETUP failure Lee Jones <lee(a)kernel.org> can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF Oliver Hartkopp <socketcan(a)hartkopp.net> can: isotp: use unconditional synchronize_rcu() in isotp_release() Fan Wu <fanwu01(a)zju.edu.cn> can: esd_usb: kill anchored URBs before freeing netdevs Bryam Vargas <hexlabsecurity(a)proton.me> nvmet-rdma: handle inline data with a nonzero offset Weiming Shi <bestswngs(a)gmail.com> sctp: validate STALE_COOKIE cause length before reading staleness Kunihiko Hayashi <hayashi.kunihiko(a)socionext.com> spi: uniphier: Fix completion initialization order before devm_request_irq() Wang Yan <wangyan01(a)kylinos.cn> time: Fix off-by-one in compat settimeofday() usec validation Jaewon Yang <yong010301(a)gmail.com> tpm: Make the TPM character devices non-seekable Thorsten Blum <thorsten.blum(a)linux.dev> tpm: fix event_size output in tpm1_binary_bios_measurements_show Maoyi Xie <maoyixie.tju(a)gmail.com> xfrm: xfrm_interface: require CAP_NET_ADMIN in the device netns for changelink Sanman Pradhan <psanman(a)juniper.net> xfrm: use compat translator only for u64 alignment mismatch Wentao Liang <vulab(a)iscas.ac.cn> xen/gntdev: fix error handling in ioctl Xuanqiang Luo <luoxuanqiang(a)kylinos.cn> i2c: mlxbf: Fix use-after-free in mlxbf_i2c_init_resource() Roman Vivchar <rva333(a)protonmail.com> i2c: mediatek: fix WRRD for SoCs without auto_restart option Joshua Crofts <joshua.crofts1(a)gmail.com> hwmon: (ltc2992) add missing 'select REGMAP_I2C' to Kconfig Ibrahim Hashimov <security(a)auditcode.ai> ksmbd: fix integer overflow in set_file_allocation_info() Fredric Cover <fredric.cover.lkernel(a)gmail.com> smb: client: use kvzalloc() for megabyte buffer in simple fallocate Frank Li <Frank.Li(a)nxp.com> dmaengine: dw-edma: Add spinlock to protect DONE_INT_MASK and ABORT_INT_MASK Kartik Rajput <kkartik(a)nvidia.com> dmaengine: tegra: Fix burst size calculation Jarkko Sakkinen <jarkko(a)kernel.org> tpm: tpm_tis_spi: Use wait_woken() in wait_for_tmp_stat() Bhargav Joshi <j.bhargav.u(a)gmail.com> irqchip/crossbar: Use correct index in crossbar_domain_free() Florian Fuchs <fuchsfl(a)gmail.com> mtd: maps: vmu-flash: fix NULL pointer dereference in initialization Miquel Raynal <miquel.raynal(a)bootlin.com> mtd: spi-nor: swp: Improve locking user experience Sebastian Alba Vives <sebasjosue84(a)gmail.com> fpga: microchip-spi: fix zero header_size OOB read in mpf_ops_parse_header() Manivannan Sadhasivam <manivannan.sadhasivam(a)oss.qualcomm.com> bus: mhi: ep: Protect mhi_ep_handle_syserr() in the error path Michael Bommarito <michael.bommarito(a)gmail.com> ocfs2: reject non-inline dinodes with i_size and zero i_clusters Michael Bommarito <michael.bommarito(a)gmail.com> ocfs2: reject dinodes whose i_rdev disagrees with the file type Michael Bommarito <michael.bommarito(a)gmail.com> ocfs2: reject dinodes with non-canonical i_mode type Joseph Qi <joseph.qi(a)linux.alibaba.com> ocfs2: add journal NULL check in ocfs2_checkpoint_inode() Ian Bridges <icb(a)fastmail.org> ocfs2: fix NULL h_transaction deref in ocfs2_assure_trans_credits Kyle Zeng <kylebot(a)openai.com> ocfs2: avoid moving extents to occupied clusters Arseniy Krasnov <avkrasnov(a)rulkc.org> mtd: rawnand: fix condition in 'nand_select_target()' Vasiliy Kovalev <kovalev(a)altlinux.org> net/9p: fix infinite loop in p9_client_rpc on fatal signal Bastien Curutchet <bastien.curutchet(a)bootlin.com> mtd: rawnand: pl353: fix probe resource allocation Tristan Madani <tristan(a)talencesecurity.com> ocfs2: use kzalloc for quota recovery bitmap allocation Ionut Nechita <ionut.nechita(a)windriver.com> scsi: sas: Skip opt_sectors when DMA reports no real optimization hint Martin Wilck <martin.wilck(a)suse.com> scsi: smartpqi: Use shost_to_hba() in pqi_scan_finished() Ruoyu Wang <ruoyuw560(a)gmail.com> mtd: slram: remove failed entries from the device list Krzysztof Wilczyński <kwilczynski(a)kernel.org> proc: only bump parent nlink when registering directories Zishun Yi <vulab(a)iscas.ac.cn> riscv: cacheinfo: Fix node reference leak in populate_cache_leaves Aaron Tomlin <atomlin(a)atomlin.com> mips: sched: Fix CPUMASK_OFFSTACK memory corruption WenTao Liang <vulab(a)iscas.ac.cn> power: supply: charger-manager: fix refcount leak in is_full_charged() Tristan Madani <tristan(a)talencesecurity.com> ntfs3: fix out-of-bounds read in decompress_lznt Michael Bommarito <michael.bommarito(a)gmail.com> ntfs3: bound to_move in indx_insert_into_root before hdr_insert_head Michael Bommarito <michael.bommarito(a)gmail.com> ntfs3: cap RESTART_TABLE free-chain walker at rt->used Michael Bommarito <michael.bommarito(a)gmail.com> fs/ntfs3: bound NTFS_DE view.data_off in UpdateRecordData{Root,Allocation} Michael Bommarito <michael.bommarito(a)gmail.com> fs/ntfs3: add depth limit to indx_find_buffer to prevent stack overflow Konstantin Komarov <almaz.alexandrovich(a)paragon-software.com> fs/ntfs3: validate lcns_follow in log_replay conversion Konstantin Komarov <almaz.alexandrovich(a)paragon-software.com> fs/ntfs3: bound attr_off in UpdateResidentValue against data_off Michael Bommarito <michael.bommarito(a)gmail.com> fs/ntfs3: bound copy_lcns dp->page_lcns[] index in analysis pass Konstantin Komarov <almaz.alexandrovich(a)paragon-software.com> fs/ntfs3: bound DeleteIndexEntryAllocation memmove length Zhan Xusheng <zhanxusheng1024(a)gmail.com> fs/ntfs3: fix syncing wrong inode on DIRSYNC cross-directory rename Ma Ke <make24(a)iscas.ac.cn> power: supply: cpcap-battery: Fix missing nvmem_device_put() causing reference leak Maciej W. Rozycki <macro(a)orcam.me.uk> MIPS: DEC: Ensure 32-bit stack location for o32 prom_printf() Johan Hovold <johan(a)kernel.org> MIPS: ip22-gio: fix device reference leak in probe Johan Hovold <johan(a)kernel.org> MIPS: ip22-gio: fix kfree() of static object Johan Hovold <johan(a)kernel.org> MIPS: ip22-gio: fix gio device memory leak Chuck Lever <chuck.lever(a)oracle.com> lockd: Plug nlm_file refcount leak on cached nlm_do_fopen() failure Chuck Lever <chuck.lever(a)oracle.com> lockd: Plug nlm_file leak when nlm_do_fopen() fails Abdun Nihaal <nihaal(a)cse.iitm.ac.in> nvdimm/btt: Free arena sub-allocations on discover_arenas() error path Abdun Nihaal <nihaal(a)cse.iitm.ac.in> nvdimm/btt: Free arenas on btt_init() error paths Junrui Luo <moonafterrain(a)outlook.com> jbd2: fix integer underflow in jbd2_journal_initialize_fast_commit() Pauli Virtanen <pav(a)iki.fi> Bluetooth: SCO: hold sk properly in sco_conn_ready Pauli Virtanen <pav(a)iki.fi> Bluetooth: SCO: fix sleeping under spinlock in sco_conn_ready Bartosz Golaszewski <bartosz.golaszewski(a)oss.qualcomm.com> mfd: tps6586x: Fix OF node refcount Sven Eckelmann <sven(a)narfation.org> batman-adv: tt: prevent TVLV OOB check overflow Sven Eckelmann <sven(a)narfation.org> batman-adv: frag: fix primary_if leak on failed linearization Sven Eckelmann <sven(a)narfation.org> batman-adv: frag: free unfragmentable packet Sven Eckelmann <sven(a)narfation.org> batman-adv: fix VLAN priority offset Sven Eckelmann <sven(a)narfation.org> batman-adv: tt: avoid request storms during pending request Sven Eckelmann <sven(a)narfation.org> batman-adv: dat: fix tie-break for candidate selection Sven Eckelmann <sven(a)narfation.org> batman-adv: dat: ensure accessible eth_hdr proto field Sven Eckelmann <sven(a)narfation.org> batman-adv: bla: reacquire gw address after skb realloc Sven Eckelmann <sven(a)narfation.org> batman-adv: dat: acquire ARP hw source only after skb realloc Sven Eckelmann <sven(a)narfation.org> batman-adv: access unicast_ttvn skb->data only after skb realloc Sven Eckelmann <sven(a)narfation.org> batman-adv: gw: acquire ethernet header only after skb realloc Thorsten Blum <thorsten.blum(a)linux.dev> x86/boot: Reject too long acpi_rsdp= values Thorsten Blum <thorsten.blum(a)linux.dev> x86/boot: Validate console=uart8250 baud rate to fix early boot hang Ali Ahmet MEMIS <dev(a)unknownbbqr.xyz> tools/power/x86/intel-speed-select: Harden daemon pidfile open Guangshuo Li <lgs201920130244(a)gmail.com> mfd: sm501: Fix reference leak on failed device registration Armin Wolf <W_Armin(a)gmx.de> leds: uleds: Fix potential buffer overread Stephen Smalley <stephen.smalley.work(a)gmail.com> selinux: check connect-related permissions on TCP Fast Open Wang Jun <1742789905(a)qq.com> soc: fsl: qe: panic on ioremap() failure in qe_reset() Siddharth Vadapalli <s-vadapalli(a)ti.com> soc: ti: k3-ringacc: Fix access mode for k3_ringacc_ring_pop_tail_io/proxy Guangshuo Li <lgs201920130244(a)gmail.com> gpu: host1x: Fix device reference leak in host1x_device_parse_dt() error path Xiang Mei (Microsoft) <xmei5(a)asu.edu> netfilter: bridge: fix stale prevhdr pointer in br_ip6_fragment() Wyatt Feng <bronzed_45_vested(a)icloud.com> netfilter: xt_nat: reject unsupported target families Yizhou Zhao <zhaoyz24(a)mails.tsinghua.edu.cn> netfilter: ecache: fix inverted time_after() check Yizhou Zhao <zhaoyz24(a)mails.tsinghua.edu.cn> netfilter: nf_conncount: fix zone comparison in tuple dedup Xiang Mei <xmei5(a)asu.edu> netfilter: nf_conntrack_reasm: guard mac_header adjustment after IPv6 defrag Florian Westphal <fw(a)strlen.de> netfilter: nf_nat_sip: reload possible stale data pointer Haoze Xie <royenheart(a)gmail.com> netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst Wyatt Feng <bronzed_45_vested(a)icloud.com> netfilter: xt_cluster: reject template conntracks in hash match David Carlier <devnexen(a)gmail.com> netfilter: nfnl_cthelper: apply per-class values when updating policies Muhammad Bilal <meatuni001(a)gmail.com> netfilter: nf_conntrack_irc: fix parse_dcc() off-by-one OOB read Srinivas Kandagatla <srinivas.kandagatla(a)oss.qualcomm.com> ASoC: qcom: q6apm: fix NULL pointer dereference in graph_callback Peter Ujfalusi <peter.ujfalusi(a)linux.intel.com> ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control Abdun Nihaal <nihaal(a)cse.iitm.ac.in> fbdev: tridentfb: fix potential memory leak in trident_pci_probe() Abdun Nihaal <nihaal(a)cse.iitm.ac.in> fbdev: nvidia: fix potential memory leak in nvidiafb_probe() Abdun Nihaal <nihaal(a)cse.iitm.ac.in> fbdev: carminefb: fix potential memory leak in alloc_carmine_fb() Abdun Nihaal <nihaal(a)cse.iitm.ac.in> fbdev: tdfxfb: fix potential memory leak in tdfxfb_probe() Abdun Nihaal <nihaal(a)cse.iitm.ac.in> fbdev: uvesafb: fix potential memory leak in uvesafb_probe() Abdun Nihaal <nihaal(a)cse.iitm.ac.in> fbdev: s3fb: fix potential memory leak in s3_pci_probe() Abdun Nihaal <nihaal(a)cse.iitm.ac.in> fbdev: i740fb: fix potential memory leak in i740fb_probe() Abdun Nihaal <nihaal(a)cse.iitm.ac.in> fbdev: radeon: fix potential memory leak in radeonfb_pci_register() Li RongQing <lirongqing(a)baidu.com> fbdev: sm712: Fix operator precedence in big_swap macro Abdun Nihaal <nihaal(a)cse.iitm.ac.in> fbdev: hecubafb: fix potential memory leak in hecubafb_probe() Abdun Nihaal <nihaal(a)cse.iitm.ac.in> fbdev: broadsheetfb: fix potential memory leak in broadsheetfb_probe() Abdun Nihaal <nihaal(a)cse.iitm.ac.in> fbdev: metronomefb: fix potential memory leak in metronomefb_probe() Sean Christopherson <seanjc(a)google.com> KVM: x86: Ignore pending PV EOI if the vCPU has since disabled PV EOIs Matthew Rosato <mjrosato(a)linux.ibm.com> KVM: s390: pci: Fix handling of AIF enable without AISB Hyunwoo Kim <imv4bel(a)gmail.com> KVM: arm64: vgic: Check the interrupt is still ours before migrating it Haoxiang Li <haoxiang_li2024(a)163.com> KVM: s390: pci: Fix GISC refcount leak on AIF enable failure Nickolay Goppen <setotau(a)mainlining.org> arm64: dts: qcom: sdm630: describe adsp_mem region properly Mark Rutland <mark.rutland(a)arm.com> arm64: fpsimd: Fix type mismatch in sve_{save,load}_state() Yong Wang <edragain(a)163.com> net: ife: require ETH_HLEN to be pullable in ife_decode() Zhengchuan Liang <zcliangcn(a)gmail.com> net: atm: reject out-of-range traffic classes in QoS validation Michael Bommarito <michael.bommarito(a)gmail.com> net: qrtr: fix 32-bit integer overflow in qrtr_endpoint_post() Peter Ujfalusi <peter.ujfalusi(a)linux.intel.com> ASoC: SOF: ipc3-control: Fix TOCTOU in bytes_put and bytes_get Peter Ujfalusi <peter.ujfalusi(a)linux.intel.com> ASoC: SOF: ipc3-control: Use overflow checks in control_update size calc Zhang Tianci <zhangtianci.1997(a)bytedance.com> vduse: Fix race in vduse_dev_msg_sync and vduse_dev_read_iter Wentao Liang <vulab(a)iscas.ac.cn> mlxsw: fix refcount leak in mlxsw_sp_vrs_lpm_tree_replace() Guangshuo Li <lgs201920130244(a)gmail.com> smb: client: fix overflow in passthrough ioctl bounds check Harman Kalra <hkalra(a)marvell.com> octeontx2-af: fix VF bringup affecting PF promiscuous state Li RongQing <lirongqing(a)baidu.com> net/mlx5: Fix L3 tunnel entropy refcount leak Timur Tabi <ttabi(a)nvidia.com> regulator: core: regulator_lock_two() should test for EDEADLK not EDEADLOCK Douglas Anderson <dianders(a)chromium.org> regulator: core: Make regulator_lock_two() logic easier to follow Cao Guanghui <caoguanghui(a)kylinos.cn> dm era: fix NULL pointer dereference in metadata_open() Guangshuo Li <lgs201920130244(a)gmail.com> cifs: validate DFS referral string offsets Julian Anastasov <ja(a)ssi.bg> ipvs: ensure inner headers in ICMP errors are in headroom Yizhou Zhao <zhaoyz24(a)mails.tsinghua.edu.cn> ipvs: fix PMTU for GUE/GRE tunnel ICMP errors Yizhou Zhao <zhaoyz24(a)mails.tsinghua.edu.cn> ipvs: use parsed transport offset in TCP state lookup Yizhou Zhao <zhaoyz24(a)mails.tsinghua.edu.cn> ipvs: pass parsed transport offset to state handlers Eric Dumazet <edumazet(a)google.com> ipv6: mcast: Fix potential UAF in MLD delayed work Kuniyuki Iwashima <kuniyu(a)google.com> ipv6: mcast: Replace locking comments with lockdep annotations. Suman Ghosh <sumang(a)marvell.com> octeontx2-pf: check DMAC extraction support before filtering Samuel Moelius <sam.moelius(a)trailofbits.com> net/sched: cake: reject overhead values that underflow length Enrico Pozzobon <enrico.pozzobon(a)dissecto.com> net: usb: lan78xx: disable VLAN filter in promiscuous mode Oleksij Rempel <linux(a)rempel-privat.de> net: usb: lan78xx: move functions to avoid forward definitions Hui Wang <hui.wang(a)canonical.com> ring-buffer: Fix event length with forced 8-byte alignment Weiming Shi <bestswngs(a)gmail.com> Bluetooth: bpa10x: avoid OOB read of revision string in bpa10x_setup() Pauli Virtanen <pav(a)iki.fi> Bluetooth: ISO: exclude RFU bits from ISO_SDU_Length Cen Zhang <zzzccc427(a)gmail.com> Bluetooth: MGMT: Fix adv monitor add failure cleanup Eric Dumazet <edumazet(a)google.com> amt: fix size calculation in amt_get_size() Xiang Mei <xmei5(a)asu.edu> net/smc: fix UAF in smc_cdc_rx_handler() by pinning the socket Xiang Mei <xmei5(a)asu.edu> net: qualcomm: rmnet: validate MAP frame length before ingress parsing Daniele Palmas <dnlplm(a)gmail.com> net: qualcomm: rmnet: add tx packets aggregation Shigeru Yoshida <syoshida(a)redhat.com> qede: fix off-by-one in BD ring consumption on build_skb failure Feng Liu <feliu(a)nvidia.com> net/mlx5e: Fix HV VHCA stats agent registration race Feng Liu <feliu(a)nvidia.com> net/mlx5e: Fix HV VHCA stats zero-sized buffer allocation Wyatt Feng <bronzed_45_vested(a)icloud.com> netfilter: xt_connmark: reject invalid shift parameters Zhixing Chen <running910(a)gmail.com> netfilter: ip6tables: mark malformed IPv6 extension headers for hotdrop Feng Wu <wufengwufengwufeng(a)gmail.com> netfilter: xt_rateest: fix u64 truncation in xt_rateest_mt() Wyatt Feng <bronzed_45_vested(a)icloud.com> netfilter: xt_u32: reject invalid shift counts Qihang <q.h.hack.winter(a)gmail.com> gue: validate REMCSUM private option length Xiang Mei <xmei5(a)asu.edu> net: usb: net1080: validate packet_len before pad-byte access in rx_fixup Anshuman Khandual <anshuman.khandual(a)arm.com> arm64/mm: Optimize TLB flush in unmap_hotplug_[pmd|pud]_range() Ryan Roberts <ryan.roberts(a)arm.com> arm64/mm: convert ptep_clear() to ptep_get_and_clear() Lee Jones <lee(a)kernel.org> HID: core: Fix OOB read in hid_get_report for numbered reports Georgiy Osokin <g.osokin(a)auroraos.dev> HID: picolcd: prevent NULL pointer dereference in picolcd_send_and_wait() Myeonghun Pak <mhun512(a)gmail.com> ata: sata_gemini: unwind clocks on IDE pinctrl errors David Howells <dhowells(a)redhat.com> afs: Fix unchecked-length string display in debug statement David Howells <dhowells(a)redhat.com> afs: Fix the volume AFS_VOLUME_RM_TREE is set on David Howells <dhowells(a)redhat.com> afs: Fix vllist leak David Howells <dhowells(a)redhat.com> afs: Fix callback service message parsers to pass through -EAGAIN Zilin Guan <zilin(a)seu.edu.cn> afs: use kvfree() to free memory allocated by kvcalloc() Dan Carpenter <error27(a)gmail.com> afs: Fix error code in afs_extract_vl_addrs() Samuel Moelius <sam.moelius(a)trailofbits.com> net/sched: hhf: clear heavy-hitter state on reset Viacheslav Bocharov <v(a)baodeep.com> pinctrl: meson: restore non-sleeping GPIO access Vladimir Zapolskiy <vz(a)kernel.org> gpio: timberdale: Return -ENOMEM on dynamic memory allocation in probe Sechang Lim <rhkrqnwk98(a)gmail.com> net/sched: act_bpf: use rcu_dereference_bh() to read the filter Gleb Markov <markov.gi(a)npc-ksb.ru> cxgb4: Fix decode strings dump for T6 adapters Longjun Tang <tanglongjun(a)kylinos.cn> virtio_net: disable cb when NAPI is busy-polled Qingshuang Fu <fuqingshuang(a)kylinos.cn> irqchip/ts4800: Fix missing chained handler cleanup on remove Yuho Choi <dbgh9129(a)gmail.com> irqchip/gic-v3-its: Fix OF node reference leak Martin Kaiser <martin(a)kaiser.cx> tracing: eprobe: read the complete FILTER_PTR_STRING pointer Masami Hiramatsu (Google) <mhiramat(a)kernel.org> tracing/events: Fix to check the simple_tsk_fn creation Ido Schimmel <idosch(a)nvidia.com> bridge: stp: Fix a potential use-after-free when deleting a bridge Jamal Hadi Salim <jhs(a)mojatatu.com> net/sched: sch_teql: Introduce slaves_lock to avoid race condition and UAF Rosen Penev <rosenp(a)gmail.com> net: gianfar: dispose irq mappings on probe failure and device removal Petr Wozniak <petr.wozniak(a)gmail.com> net: phy: sfp: free mii_bus in sfp_i2c_mdiobus_destroy Xiang Mei <xmei5(a)asu.edu> usbnet: gl620a: fix out-of-bounds read in genelink_rx_fixup() Matti Vaittinen <mazziesaccount(a)gmail.com> hwmon: adm1275: Prevent reading uninitialized stack Wei Fang <wei.fang(a)nxp.com> net: enetc: check the number of BDs needed for xdp_frame Matvey Kovalev <matvey.kovalev(a)ispras.ru> qede: fix out-of-bounds check for cqe->len_list[] Nuoqi Gui <gnq25(a)mails.tsinghua.edu.cn> seg6: validate SRH length before reading fixed fields Pengpeng Hou <pengpeng(a)iscas.ac.cn> gpio: htc-egpio: use managed gpiochip registration Pengpeng Hou <pengpeng(a)iscas.ac.cn> gpio: mvebu: fail probe if gpiochip registration fails Pengpeng Hou <pengpeng(a)iscas.ac.cn> spi: sh-msiof: abort transfers when reset times out Martin Kaiser <martin(a)kaiser.cx> tracing: probes: fix typo in a log message Rob Herring (Arm) <robh(a)kernel.org> dt-bindings: net: renesas,ether: Drop example "ethernet-phy-ieee802.3-c22" fallback Shengjiu Wang <shengjiu.wang(a)nxp.com> ASoC: fsl_asrc_dma: fix eDMA maxburst misalignment with channel count Ruoyu Wang <ruoyuw560(a)gmail.com> net: sungem: fix probe error cleanup Yun Zhou <yun.zhou(a)windriver.com> net: mvneta: re-enable percpu interrupt on resume Haoxiang Li <haoxiang_li2024(a)163.com> rtc: cmos: unregister HPET IRQ handler on probe failure Fredrik M Olsson <fredrik.m.olsson(a)axis.com> rtc: ds1307: Fix off-by-one issue with wday for rx8130 Huiwen He <hehuiwen(a)kylinos.cn> smb/client: preserve errors from smb2_set_sparse() Fernando Fernandez Mancera <fmancera(a)suse.de> ipv6: fix error handling in disable_policy sysctl Fernando Fernandez Mancera <fmancera(a)suse.de> ipv6: fix error handling in forwarding sysctl Fernando Fernandez Mancera <fmancera(a)suse.de> ipv6: fix error handling in ignore_routes_with_linkdown sysctl Fernando Fernandez Mancera <fmancera(a)suse.de> ipv6: fix error handling in disable_ipv6 sysctl Jamal Hadi Salim <jhs(a)mojatatu.com> net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle Eric Dumazet <edumazet(a)google.com> veth: fix NAPI leak in XDP enable error path Aleksandrova Alyona <aga(a)itb.spb.ru> net: dsa: sja1105: round up PTP perout pin duration Xiang Mei <xmei5(a)asu.edu> net, bpf: check master for NULL in xdp_master_redirect() Krzysztof Wilczyński <kwilczynski(a)kernel.org> alpha/PCI: Fix __pci_mmap_fits() overflow for zero-length BARs Krzysztof Wilczyński <kwilczynski(a)kernel.org> alpha/PCI: Add security_locked_down() check to pci_mmap_resource() Koichiro Den <den(a)valinux.co.jp> NTB: epf: Fix doorbell bitmask and IRQ vector handling Koichiro Den <den(a)valinux.co.jp> NTB: epf: Report 0-based doorbell vector via ntb_db_event() Koichiro Den <den(a)valinux.co.jp> NTB: epf: Make db_valid_mask cover only real doorbell bits Runyu Xiao <runyu.xiao(a)seu.edu.cn> netfilter: nft_synproxy: stop bypassing the priv->info snapshot Fernando Fernandez Mancera <fmancera(a)suse.de> netfilter: nf_conncount: prevent connlimit drops for early confirmed ct Mathias Krause <minipli(a)grsecurity.net> netfilter: nf_nat: avoid invalid nat_net pointer use on failed nf_nat_init() Bradley Morgan <include(a)grrlz.net> bpf: Disable xfrm_decode_session hook attachment Xu Kuohai <xukuohai(a)huawei.com> bpf, lsm: Add disabled BPF LSM hook list Kuniyuki Iwashima <kuniyu(a)google.com> ipv4: fib: Don't ignore error route in local/main tables. Xiang Mei <xmei5(a)asu.edu> ipv6: Fix null-ptr-deref in fib6_nh_mtu_change(). Gil Portnoy <dddhkts1(a)gmail.com> ksmbd: fix use-after-free of conn->preauth_info in concurrent SMB2 NEGOTIATE Stepan Ionichev <sozdayvek(a)gmail.com> rtc: msc313: fix NULL deref in shared IRQ handler at probe Lukasz Czapnik <lukasz.czapnik(a)intel.com> ice: fix AQ error code comparison in ice_set_pauseparam() Dawid Osuchowski <dawid.osuchowski(a)linux.intel.com> ice: fix FDIR CTRL VSI resource leak in ice_reset_all_vfs() Manivannan Sadhasivam <manivannan.sadhasivam(a)oss.qualcomm.com> PCI: endpoint: pci-epf-ntb: Add check to detect 'db_count' value of 0 Manivannan Sadhasivam <manivannan.sadhasivam(a)oss.qualcomm.com> PCI: endpoint: pci-epf-vntb: Add check to detect 'db_count' value of 0 Xiang Mei <xmei5(a)asu.edu> drm/edid: fix OOB read in drm_parse_tiled_block() Avinash Duduskar <avinash.duduskar(a)gmail.com> bpf: zero-initialize the fib lookup flow struct Nuoqi Gui <gnq25(a)mails.tsinghua.edu.cn> bpf: Fix stack slot index in nospec checks Ronan Dalton <ronan.dalton(a)alliedtelesis.co.nz> rtc: ds1307: handle oscillator stop flag for ds1337/ds1339/ds3231 Antoni Pokusinski <apokusinski01(a)gmail.com> rtc: abx80x: fix the RTC_VL_CLR clearing all status flags Geetha sowjanya <gakula(a)marvell.com> octeontx2-pf: mcs: Fix mcs resources free on PF shutdown Subbaraya Sundeep <sbhatta(a)marvell.com> octeontx2-pf: Clear stats of all resources when freeing resources Geetha sowjanya <gakula(a)marvell.com> octeontx2-af: mcs: Fix unsupported secy stats read Ruoyu Wang <ruoyuw560(a)gmail.com> net: marvell: prestera: initialize err in prestera_port_sfp_bind Aboorva Devarajan <aboorvad(a)linux.ibm.com> selftests/mm: fix exclusive_cow test fork() handling Sayali Patil <sayalip(a)linux.ibm.com> selftests/mm: allow PUD-level entries in compound testcase of hmm tests Sayali Patil <sayalip(a)linux.ibm.com> selftests/mm: clarify alternate unmapping in compaction_test Bhargav Joshi <j.bhargav.u(a)gmail.com> irqchip/crossbar: Fix parent domain resource leak Florian Westphal <fw(a)strlen.de> netfilter: nft_meta_bridge: fix NFT_META_BRI_IIFPVID stack leak Florian Westphal <fw(a)strlen.de> netfilter: nf_reject: skip iphdr options when looking for icmp header Jozsef Kadlecsik <kadlec(a)netfilter.org> netfilter: ipset: fix order of kfree_rcu() and rcu_assign_pointer() Jozsef Kadlecsik <kadlec(a)netfilter.org> netfilter: ipset: Don't use test_bit() in lockless RCU readers in hash types Jozsef Kadlecsik <kadlec(a)netfilter.org> netfilter: ipset: annotate "pos" for concurrent readers/writers Jozsef Kadlecsik <kadlec(a)netfilter.org> netfilter: ipset: Fix data race between add and dump in all hash types Abd-Alrhman Masalkhi <abd.masalkhi(a)gmail.com> md/raid1: free r1_bio when REQ_NOWAIT is set and read would block on retry Aleksandr Nogikh <nogikh(a)google.com> ieee802154: fix kernel-infoleak in dgram_recvmsg() Ivan Abramov <i.abramov(a)mt-integration.ru> ieee802154: Remove WARN_ON() in cfg802154_pernet_exit() Xu Rao <raoxu(a)uniontech.com> ACPI: IPMI: Fix inverted interface check in ipmi_bmc_gone() Andy Shevchenko <andriy.shevchenko(a)linux.intel.com> ACPI: resource: Amend kernel-doc style Ricardo Neri <ricardo.neri-calderon(a)linux.intel.com> thermal: intel: Fix dangling resources on thermal_throttle_online() failure Breno Leitao <leitao(a)debian.org> arm64/hw_breakpoint: reject unaligned watchpoints that would truncate BAS Yun Zhou <yun.zhou(a)windriver.com> flow_dissector: check device type before reading ETH_ADDRS Ioana Ciornei <ioana.ciornei(a)nxp.com> dpaa2-switch: fix VLAN upper check not rejecting bridge join Xiang Mei <xmei5(a)asu.edu> virtio-net: fix len check in receive_big() Xuan Zhuo <xuanzhuo(a)linux.alibaba.com> virtio_ring: introduce dma sync api for virtqueue Xuan Zhuo <xuanzhuo(a)linux.alibaba.com> virtio_ring: introduce dma map api for virtqueue Xuan Zhuo <xuanzhuo(a)linux.alibaba.com> virtio_ring: introduce virtqueue_set_dma_premapped() Quang Nguyen <quang.nguyen.wx(a)renesas.com> spi: rpc-if: Use correct device for hardware reinitialization on resume Mark Tomlinson <mark.tomlinson(a)alliedtelesis.co.nz> PCI: iproc: Restore .map_irq() for the platform bus driver Xin Long <lucien.xin(a)gmail.com> sctp: hold socket lock when dumping endpoints in sctp_diag Jakub Kicinski <kuba(a)kernel.org> net: psample: fix info leak in PSAMPLE_ATTR_DATA Ratheesh Kannoth <rkannoth(a)marvell.com> octeontx2-pf: Fix leak of SQ timestamp buffer on teardown Thadeu Lima de Souza Cascardo <cascardo(a)igalia.com> drm/amdgpu: initialize irq.lock spinlock earlier Mario Limonciello <mario.limonciello(a)amd.com> drm/amdkfd: fix list_del corruption in kfd_criu_resume_svm Yunxiang Li <Yunxiang.Li(a)amd.com> drm/amdkfd: Avoid double-unpin of DOORBELL/MMIO BOs on free Sen Wang <sen(a)ti.com> ASoC: tlv320aic3x: restrict CLKDIV bypass Q values in dual-rate mode Eric Dumazet <edumazet(a)google.com> xfrm: validate selector family and prefixlen during match Eric Dumazet <edumazet(a)google.com> xfrm: annotate data-races around xfrm_policy_count[] and xfrm_policy_default[] Mike Yu <yumike(a)google.com> xfrm: Support crypto offload for inbound IPv6 ESP packets not in GRO path Steffen Klassert <steffen.klassert(a)secunet.com> xfrm: Use the XFRM_GRO to indicate a GRO call on input Leon Romanovsky <leon(a)kernel.org> xfrm: add new packet offload flag Jisheng Zhang <jszhang(a)kernel.org> spi: dw: fix wrong BAUDR setting after resume Pengpeng Hou <pengpeng(a)iscas.ac.cn> sparc: led: avoid trimming a newline from empty writes John Johansen <john.johansen(a)canonical.com> apparmor: fix label can not be immediately before a declaration Adrian Hunter <adrian.hunter(a)intel.com> i3c: master: Prevent reuse of dynamic address on device add failure Zygmunt Krynicki <me(a)zygoon.pl> apparmor: put secmark label after secid lookup Zygmunt Krynicki <me(a)zygoon.pl> apparmor: aa_getprocattr free procattr leak on format failure Maxime Bélair <maxime.belair(a)canonical.com> apparmor: fix potential UAF in aa_replace_profiles Ryan Lee <ryan.lee(a)canonical.com> apparmor: grab ns lock and refresh when looking up changehat child profiles Zygmunt Krynicki <me(a)zygoon.pl> apparmor: aa_label_alloc use aa_label_free on alloc failure Ruoyu Wang <ruoyuw560(a)gmail.com> apparmor: check label build before no_new_privs test Andrew Morton <akpm(a)linux-foundation.org> security/apparmor/apparmorfs.c: conditionally compile get_loaddata_common_ref() Yuanhe Shu <xiangzao(a)linux.alibaba.com> Revert "PCI/MSI: Unmap MSI-X region on error" Manivannan Sadhasivam <manivannan.sadhasivam(a)oss.qualcomm.com> PCI: mediatek: Use actual physical address instead of virt_to_phys() Ryder Lee <ryder.lee(a)mediatek.com> PCI: mediatek: Fix possible truncation in mtk_pcie_parse_port() Arnaldo Carvalho de Melo <acme(a)redhat.com> tools lib api: Fix mount_overload() snprintf truncation and toupper range Arnaldo Carvalho de Melo <acme(a)redhat.com> tools lib api: Fix filename__write_int() writing uninitialized stack data Arnaldo Carvalho de Melo <acme(a)redhat.com> tools lib api: Fix missing null termination in filename__read_int/ull() Chuck Lever <chuck.lever(a)oracle.com> xprtrdma: Return sendctx slot after Send preparation failure Chuck Lever <chuck.lever(a)oracle.com> xprtrdma: Repost Receive buffers for malformed replies Chuck Lever <chuck.lever(a)oracle.com> xprtrdma: Sanitize the reply credit grant after parsing Chris Mason <clm(a)meta.com> xprtrdma: Fix bcall rep leak and unbounded peek Chuck Lever <chuck.lever(a)oracle.com> xprtrdma: Resize reply buffers before reposting receives Chuck Lever <chuck.lever(a)oracle.com> xprtrdma: Document and assert reply-handler invariants Chuck Lever <chuck.lever(a)oracle.com> xprtrdma: Check frwr_wp_create() during connect Lad Prabhakar <prabhakar.mahadev-lad.rj(a)bp.renesas.com> PCI: rcar-host: Remove unused LIST_HEAD(res) Li RongQing <lirongqing(a)baidu.com> PCI: mediatek: Fix operator precedence in PCIE_FTS_NUM_L0 macro Mike Snitzer <snitzer(a)kernel.org> NFSv4/flexfiles: honor FF_FLAGS_NO_IO_THRU_MDS in pg_get_mirror_count_write Mike Snitzer <snitzer(a)kernel.org> NFSv4/flexfiles: honor FF_FLAGS_NO_IO_THRU_MDS on fatal DS connect errors Dai Ngo <dai.ngo(a)oracle.com> NFSv4/pnfs: defer return_range callbacks until after inode unlock Chuck Lever <chuck.lever(a)oracle.com> xprtrdma: Decouple req recycling from RPC completion Chuck Lever <chuck.lever(a)oracle.com> xprtrdma: Use sendctx DMA state for Send signaling Chuck Lever <chuck.lever(a)oracle.com> xprtrdma: Post receive buffers after RPC completion Chuck Lever <chuck.lever(a)oracle.com> xprtrdma: Close lost-wakeup race in xprt_rdma_alloc_slot Chuck Lever <chuck.lever(a)oracle.com> xprtrdma: Avoid 250 ms delay on backlog wakeup Chuck Lever <chuck.lever(a)oracle.com> xprtrdma: Remove temp allocation of rpcrdma_rep objects Sagi Grimberg <sagi(a)grimberg.me> pNFS/filelayout: fix cheking if a layout is striped Phillip Varney <pbvarney(a)protonmail.com> clk: qcom: a53: Corrected frequency multiplier for 1152MHz Nuno Sá <nuno.sa(a)analog.com> dmaengine: Fix possible use after free Icenowy Zheng <zhengxingda(a)iscas.ac.cn> dmaengine: qcom: gpi: set DMA_PRIVATE capability Shengjiu Wang <shengjiu.wang(a)nxp.com> dmaengine: imx-sdma: Refine spba bus searching in probe Srinivasan Shanmugam <srinivasan.shanmugam(a)amd.com> drm/amd/display: Add missing kdoc for ALLM parameters Konstantin Komarov <almaz.alexandrovich(a)paragon-software.com> fs/ntfs3: add bounds check to run_get_highest_vcn() Rosen Penev <rosenp(a)gmail.com> HID: logitech-hidpp: remove excess kernel-doc member in hidpp_scroll_counter Yuho Choi <dbgh9129(a)gmail.com> clk: at91: keep securam node alive while mapping it Sanjay Chitroda <sanjayembeddedse(a)gmail.com> iio: accel: mma8452: handle I2C read error(s) in mma8452_read() Guilherme Ivo Bozi <guilherme.bozi(a)usp.br> iio: adc: xilinx-ams: fix out-of-bounds channel lookup in event handling Joshua Crofts <joshua.crofts1(a)gmail.com> iio: magnetometer: ak8975: fix potential kernel stack memory leak Joshua Crofts <joshua.crofts1(a)gmail.com> iio: light: si1133: prevent race condition on timeout Joshua Crofts <joshua.crofts1(a)gmail.com> iio: light: si1133: reset counter to prevent race condition James Kim <james010kim(a)gmail.com> char: tlclk: fix use-after-free in tlclk_cleanup() Seungjin Bae <eeodqql09(a)gmail.com> usb: host: max3421: Reject hub port requests for non-existent ports Seungjin Bae <eeodqql09(a)gmail.com> usb: host: max3421: Fix shift-out-of-bounds in max3421_hub_control() Guangshuo Li <lgs201920130244(a)gmail.com> staging: most: video: avoid double free on video register failure Sergey Senozhatsky <senozhatsky(a)chromium.org> mailbox: mtk-adsp: fix UAF during device teardown Andy Shevchenko <andriy.shevchenko(a)linux.intel.com> phy: phy-can-transceiver: Check driver match and driver data against NULL Sumit Kumar <sumit.kumar(a)oss.qualcomm.com> bus: mhi: ep: Fix potential deadlock in mhi_ep_reset_worker() Rong Zhang <i(a)rong.moe> PCI: loongson: Do not ignore downstream devices on external bridges Rafael J. Wysocki <rafael.j.wysocki(a)intel.com> platform/x86: xo15-ebook: Fix wakeup source and GPE handling Rafael J. Wysocki <rafael.j.wysocki(a)intel.com> x86/platform/olpc: xo15: Drop wakeup source on driver removal Guixin Liu <kanie(a)linux.alibaba.com> PCI: Check ROM header and data structure addr before accessing Guixin Liu <kanie(a)linux.alibaba.com> PCI: Introduce named defines for PCI ROM Carlos Bilbao <carlos.bilbao(a)kernel.org> PCI/ASPM: Don't reconfigure ASPM entering low-power state Leo Yan <leo.yan(a)arm.com> coresight: etm4x: Correct TRCVMIDCCTLR1 save and restore Yingchao Deng <yingchao.deng(a)oss.qualcomm.com> coresight: cti: Fix DT filter signals silently ignored Alexandru Hossu <hossu.alexandru(a)gmail.com> staging: nvec: fix use-after-free in nvec_rx_completed() Yizhou Zhao <zhaoyz24(a)mails.tsinghua.edu.cn> net/9p: fix race condition on rdma->state in trans_rdma.c Aleksandr Nogikh <nogikh(a)google.com> ocfs2: fix circular locking dependency in ocfs2_dio_end_io_write Guangshuo Li <lgs201920130244(a)gmail.com> ksmbd: fix use-after-free in same_client_has_lease() Eric Dumazet <edumazet(a)google.com> tcp: ipv6: clamp default adverting MSS to avoid GSO_BY_FRAGS (0xFFFF) Eric Dumazet <edumazet(a)google.com> tipc: fix UAF in tipc_l2_send_msg() Gui-Dong Han <hanguidong02(a)gmail.com> KEYS: Use acquire when reading state in keyring search Aboorva Devarajan <aboorvad(a)linux.ibm.com> powerpc/kexec: fix double get_cpu() imbalance in kexec_prepare_cpus Aboorva Devarajan <aboorvad(a)linux.ibm.com> powerpc/powernv: fix preempt count leak in pnv_kexec_wait_secondaries_down Aboorva Devarajan <aboorvad(a)linux.ibm.com> powerpc/perf: fix preempt count underflow in fsl_emb_pmu_del Yadan Fan <ydfan(a)suse.com> MIPS: mm: Fix out-of-bounds write in maar_res_walk() Sechang Lim <rhkrqnwk98(a)gmail.com> bpf, sockmap: fix integer overflow in bpf_msg_pop_data() bounds check Weiming Shi <bestswngs(a)gmail.com> bpf, sockmap: reject overflowing copy + len in bpf_msg_push_data() Leon Hwang <leon.hwang(a)linux.dev> bpf: Fix bpf_get/setsockopt to tos for ipv4-mapped ipv6 socket Huiwen He <hehuiwen(a)kylinos.cn> smb/client: always return a value for FS_IOC_GETFLAGS Jian Zhang <zhangjian496(a)huawei.com> cifs: remove all cifs files before kill super Takashi Iwai <tiwai(a)suse.de> ALSA: core: Fix unintuitive behavior of snd_power_ref_and_wait() Florian Westphal <fw(a)strlen.de> netfilter: nf_conncount: callers must hold rcu read lock Runyu Xiao <runyu.xiao(a)seu.edu.cn> kcm: use WRITE_ONCE() when changing lower socket callbacks Ovidiu Panait <ovidiu.panait.rb(a)renesas.com> net: bcmgenet: Use weighted round-robin TX DMA arbitration Dragos Tatulea <dtatulea(a)nvidia.com> net/mlx5: Check max_macs devlink param value against max capability Sun Jian <sun.jian.kdev(a)gmail.com> bpf: Run generic devmap egress prog on private skb Aditya Garg <gargaditya(a)linux.microsoft.com> net: mana: guard TX wq object destroy with INVALID_MANA_HANDLE check Aditya Garg <gargaditya(a)linux.microsoft.com> net: mana: initialize gdma queue id to INVALID_QUEUE_ID Victor Nogueira <victor(a)mojatatu.com> net/sched: sch_codel: Do not call qdisc_tree_reduce_backlog during peek before restoring qlen Victor Nogueira <victor(a)mojatatu.com> net/sched: sch_fq_codel: Do not call qdisc_tree_reduce_backlog during peek before restoring qlen Lucas Tsai <lucas_tsai(a)richtek.com> power: supply: core: fix supplied_from allocations Guangshuo Li <lgs201920130244(a)gmail.com> ASoC: adau1372: Clear PLL_EN on failed PLL lock without reset GPIO Lars Pöschel <lars.poeschel(a)edag.com> spi: xilinx: use FIFO occupancy register to determine buffer size Herbert Xu <herbert(a)gondor.apana.org.au> crypto: rng - Free default RNG on module exit Felix Gu <ustc.gu(a)gmail.com> crypto: cavium/cpt - fix DMA cleanup using wrong loop index Felix Gu <ustc.gu(a)gmail.com> crypto: marvell/octeontx - fix DMA cleanup using wrong loop index Dave Jiang <dave.jiang(a)intel.com> cxl/test: Add check after kzalloc() memory in alloc_mock_res() Michael Bommarito <michael.bommarito(a)gmail.com> tipc: reject inverted service ranges from peer bindings Michael Bommarito <michael.bommarito(a)gmail.com> tipc: prevent snt_unacked underflow on CONN_ACK Michael Bommarito <michael.bommarito(a)gmail.com> tipc: require net admin for TIPCv2 netlink mutators Victor Nogueira <victor(a)mojatatu.com> net/sched: sch_hfsc: Don't make class passive twice Xin Long <lucien.xin(a)gmail.com> sctp: validate embedded address parameter length Xiang Mei <xmei5(a)asu.edu> bridge: cfm: reject invalid CCM interval at configuration time Kuniyuki Iwashima <kuniyu(a)google.com> net: fib_rules: Don't dump dying fib_rule in fib_rules_dump(). Jamal Hadi Salim <jhs(a)mojatatu.com> net/sched: cls_flow: Dont expose folded kernel pointers HyeongJun An <sammiee5311(a)gmail.com> ASoC: tegra: tegra210_ahub: Validate written enum value HyeongJun An <sammiee5311(a)gmail.com> ASoC: fsl: fsl_audmix: Validate written enum values HyeongJun An <sammiee5311(a)gmail.com> ASoC: codecs: hdac_hdmi: Validate written enum value Leon Romanovsky <leon(a)kernel.org> RDMA/mlx5: Release the HW‑provided UAR index rather than the SW one Maher Sanalla <msanalla(a)nvidia.com> RDMA/mlx5: Fix undefined shift of user RQ WQE size Patrisious Haddad <phaddad(a)nvidia.com> RDMA/mlx5: Remove raw RSS QP restrack tracking Maxwell Doose <m32285159(a)gmail.com> fs: efs: remove unneeded debug prints Samuel Moelius <sam.moelius(a)trailofbits.com> Bluetooth: hci: validate codec capability element length Weiming Shi <bestswngs(a)gmail.com> Bluetooth: eir: Fix stack OOB write when prepending the Flags AD Heiko Carstens <hca(a)linux.ibm.com> s390/process: Fix kernel thread function pointer type Daniel Borkmann <daniel(a)iogearbox.net> bpf: Tighten cgroup storage cookie checks for prog arrays Dave Jiang <dave.jiang(a)intel.com> cxl/test: Fix integer overflow in mock LSA bounds checks Yonghong Song <yonghong.song(a)linux.dev> selftests/bpf: Fix bpf_iter/task_vma test Louis Scalbert <louis.scalbert(a)6wind.com> bonding: 3ad: fix mux port state on oper down longlong yan <yanlonglong(a)kylinos.cn> tools/virtio: check mmap return value in vringh_test Qing Ming <a0yami(a)mailbox.org> vhost/net: complete zerocopy ubufs only once Zhang Tianci <zhangtianci.1997(a)bytedance.com> vduse: Requeue failed read to send_list head Qihang Tang <q.h.hack.winter(a)gmail.com> vhost/vdpa: validate virtqueue index in mmap and fault paths Qihang Tang <q.h.hack.winter(a)gmail.com> vduse: hold vduse_lock across IDR lookup in open path Jason Gunthorpe <jgg(a)ziepe.ca> IB/mlx4: Fill in the access_flags if IB_MR_REREG_ACCESS is not specified Johannes Thumshirn <johannes.thumshirn(a)wdc.com> btrfs: zoned: don't account data relocation space-info in statfs free space David Laight <david.laight.linux(a)gmail.com> fbdev: sm501fb: Fix buffer errors in OF binding code Filipe Manana <fdmanana(a)suse.com> btrfs: fix invalid pointer dereference in __btrfs_run_delayed_refs() Bjoern A. Zeeb <bz(a)FreeBSD.org> wifi: mt76: fix argument to ieee80211_is_first_frag() Wolfram Sang <wsa+renesas(a)sang-engineering.com> hwspinlock: qcom: avoid uninitialized struct members Hui Zhu <zhuhui(a)kylinos.cn> vmalloc: fix NULL pointer dereference in is_vm_area_hugepages() Luca Leonardo Scorcia <l.scorcia(a)gmail.com> pinctrl: mediatek: mt8167: Fix Schmitt trigger register offset of pins 34-39 Luca Leonardo Scorcia <l.scorcia(a)gmail.com> pinctrl: mediatek: mt8516: Fix Schmitt trigger register offset of pins 34-39 David Disseldorp <ddiss(a)suse.de> scsi: target: Fix hexadecimal CHAP_I handling Yuho Choi <dbgh9129(a)gmail.com> watchdog: unregister PM notifier on watchdog unregister Al Viro <viro(a)zeniv.linux.org.uk> configfs: fix lockless traversals of ->s_children Dmitry Vyukov <dvyukov(a)google.com> firmware_loader: Fix recursive lock in device_cache_fw_images() Felix Gu <ustc.gu(a)gmail.com> spi: ep93xx: fix double-free of zeropage on DMA setup failure Jason Gunthorpe <jgg(a)ziepe.ca> IB/mlx5: Properly support implicit ODP rereg_mr Jason Gunthorpe <jgg(a)ziepe.ca> IB/mlx5: Don't take the rereg_mr fallback without a new translation Pengjie Zhang <zhangpengjie2(a)huawei.com> cpufreq: Documentation: fix conservative governor freq_step description Yuho Choi <dbgh9129(a)gmail.com> ACPI: IPMI: Fix message kref handling on dead device Kyle Zeng <kylebot(a)openai.com> ALSA: seq: Clear variable event pointer on read Takashi Iwai <tiwai(a)suse.de> ALSA: seq: Add UMP support Takashi Iwai <tiwai(a)suse.de> ALSA: seq: Introduce SNDRV_SEQ_IOCTL_USER_PVERSION ioctl Rui Qi <qirui.001(a)bytedance.com> riscv: stacktrace: Remove bogus -0x4 offset in non-FP walk_stackframe Tristan Madani <tristan(a)talencesecurity.com> wifi: wcn36xx: fix OOB read from short trigger BA firmware response Tristan Madani <tristan(a)talencesecurity.com> wifi: wcn36xx: fix OOB read from firmware count in PRINT_REG_INFO indication Tristan Madani <tristan(a)talencesecurity.com> wifi: wcn36xx: fix heap overflow from oversized firmware HAL response Leon Hwang <leon.hwang(a)linux.dev> bpf: Update transport_header when encapsulating UDP tunnel in lwt Leon Hwang <leon.hwang(a)linux.dev> bpf: Check tail zero of bpf_prog_info Jacob Moroni <jmoroni(a)google.com> RDMA/irdma: Fix OOB read during CQ MR registration Jason Gunthorpe <jgg(a)ziepe.ca> IB/cm: Fix av cm device leak on an error path in cm_init_av_by_path() Pablo Neira Ayuso <pablo(a)netfilter.org> netfilter: conntrack: call nf_ct_gre_keymap_destroy() if master helper is pptp Fernando Fernandez Mancera <fmancera(a)suse.de> netfilter: synproxy: protect nf_ct_seqadj_init() with conntrack lock Fernando Fernandez Mancera <fmancera(a)suse.de> netfilter: nfnetlink_osf: fix mss parsing on big-endian architectures Joseph Qi <joseph.qi(a)linux.alibaba.com> ocfs2: fix race between ocfs2_control_install_private() and ocfs2_control_release() Zhang Cen <rollkingzzc(a)gmail.com> ocfs2/dlm: require a ref for locking_state debugfs open Zhang Cen <rollkingzzc(a)gmail.com> ocfs2: reject FITRIM ranges shorter than a cluster Dmitry Antipov <dmantipov(a)yandex.ru> ocfs2: fix buffer head management in ocfs2_read_blocks() Zhang Cen <rollkingzzc(a)gmail.com> ocfs2: rebase copied fsdlm LVB pointers in locking_state Woojin Ji <random6.xyz(a)gmail.com> bpftool: Use libbpf error code for flow dissector query Al Viro <viro(a)zeniv.linux.org.uk> configfs_lookup(): don't leave ->s_dentry dangling on failure Alexander Potapenko <glider(a)google.com> lib/test_meminit: use && for bools Guanyou.Chen <chenguanyou9338(a)gmail.com> sched: restore timer_slack_ns when resetting RT policy on fork Sang-Heon Jeon <ekffu200098(a)gmail.com> mm/fake-numa: fix under-allocation detection in uniform split Deepanshu Kartikey <kartikey406(a)gmail.com> bpf: fix UAF by restoring RCU-delayed inode freeing in bpffs Dan Carpenter <error27(a)gmail.com> scsi: pm8001: Fix error code in non_fatal_log_show() Martin Wilck <martin.wilck(a)suse.com> scsi: Revert "scsi: Fix sas_user_scan() to handle wildcard and multi-channel scans" Alison Schofield <alison.schofield(a)intel.com> nvdimm/btt: Handle preemption in BTT lane acquisition Yuho Choi <dbgh9129(a)gmail.com> ARM: imx31: Fix IIM mapping leak in revision check Yuho Choi <dbgh9129(a)gmail.com> ARM: imx3: Fix CCM node reference leak Zhang Yi <yi.zhang(a)huawei.com> ext4: fix LOGFLUSH shutdown ordering to allow ordered-mode data writeback Chen Cheng <chencheng(a)fnnas.com> md/raid10: reset read_slot when reusing r10bio for discard Renjiang Han <renjiang.han(a)oss.qualcomm.com> media: qcom: venus: relax encoder frame/blur step size on v6 Renjiang Han <renjiang.han(a)oss.qualcomm.com> media: qcom: venus: relax encoder frame/blur dimension steps on v4 Renjiang Han <renjiang.han(a)oss.qualcomm.com> media: qcom: venus: drop extra padding in NV12 raw size calculation Tristan Madani <tristmd(a)gmail.com> RDMA/rxe: Copy WQE to local buffer in non-SRQ receive path Tristan Madani <tristmd(a)gmail.com> RDMA/rxe: Fix TOCTOU heap overflow in get_srq_wqe zhoumin <teczm(a)foxmail.com> EDAC/{skx_common,skx}: Fix UBSAN shift-out-of-bounds in skx_get_dimm_info Jessica Zhang <jessica.zhang(a)oss.qualcomm.com> drm/msm/dp: Fix the ISR_* enum values Jessica Zhang <jessica.zhang(a)oss.qualcomm.com> drm/msm/dp: fix HPD state status bit shift value Weili Qian <qianweili(a)huawei.com> crypto: hisilicon/qm - disable error report before flr Tetsuo Handa <penguin-kernel(a)I-love.SAKURA.ne.jp> ocfs2: kill osb->system_file_mutex lock ZhengYuan Huang <gality369(a)gmail.com> ocfs2: don't BUG_ON an invalid journal dinode Dan Carpenter <error27(a)gmail.com> rapidio/tsi721: prevent a bad dereference in tsi721_db_dpc() Davidlohr Bueso <dave(a)stgolabs.net> dax/kmem: account for partial discontiguous resource upon removal Carlos Llamas <cmllamas(a)google.com> libbpf: Fix UAF in strset__add_str() Michael Bommarito <michael.bommarito(a)gmail.com> libbpf: Harden parse_vma_segs() path parsing Timur Tabi <ttabi(a)nvidia.com> drm/nouveau/bios: specify correct display fuse register for Ampere and Ada Mikko Perttunen <mperttunen(a)nvidia.com> drm/tegra: Fix iommu_map_sgtable() return value check Mikko Perttunen <mperttunen(a)nvidia.com> gpu: host1x: Fix iommu_map_sgtable() return value check Felix Gu <ustc.gu(a)gmail.com> drm/tegra: dc: Fix device node reference leak in tegra_dc_has_output() Mikko Perttunen <mperttunen(a)nvidia.com> gpu: host1x: Allow entries in BO caches to be freed Jiayuan Chen <jiayuan.chen(a)linux.dev> net/sched: cls_bpf: prevent unbounded recursion in offload rollback Eric Dumazet <edumazet(a)google.com> ipv6: guard against possible NULL deref in __in6_dev_stats_get() Breno Leitao <leitao(a)debian.org> workqueue: drop spurious '*' from print_worker_info() fn declaration Nilay Shroff <nilay(a)linux.ibm.com> nvme-multipath: fix flex array size in struct nvme_ns_head Zhang Cen <rollkingzzc(a)gmail.com> ALSA: seq: midi: Serialize output teardown with event_input Miquel Raynal <miquel.raynal(a)bootlin.com> mtd: spi-nor: Drop duplicate Kconfig dependency Rosen Penev <rosenp(a)gmail.com> mips: n64: add __iomem for writel call Rosen Penev <rosenp(a)gmail.com> mips: ralink: mt7621: add missing __iomem Maciej W. Rozycki <macro(a)orcam.me.uk> MIPS: DEC: Remove do_IRQ() call indirection Maciej W. Rozycki <macro(a)orcam.me.uk> MIPS: Fix big-endian stack argument fetching in o32 wrapper Jiakai Xu <xujiakai24(a)mails.ucas.ac.cn> PM: sleep: Use complete() in device_pm_sleep_init() Tao Cui <cuitao(a)kylinos.cn> RDMA/counter: Fix incorrect port index in rdma_counter_init() error cleanup Lianfa Weng <wenglianfa(a)huawei.com> RDMA/hns: Fix warning in poll cq direct mode Guangshuo Li <lgs201920130244(a)gmail.com> IB/mlx4: Fix refcount leak in add_port() error path Jacob Moroni <jmoroni(a)google.com> RDMA/irdma: Fix out-of-bounds write in irdma_copy_user_pgaddrs Samuel Holland <samuel(a)sholland.org> bus: sunxi-rsb: Always check register address validity Ronaldo Nunez <rnunez(a)baylibre.com> pwm: imx27: Fix variable truncation in .apply() Lifeng Zheng <zhenglifeng1(a)huawei.com> cpufreq: conservative: Simplify frequency limit handling Pengjie Zhang <zhangpengjie2(a)huawei.com> cpufreq: Documentation: fix sampling_down_factor range Zhang Yuwei <zhangyuwei20(a)huawei.com> driver core: Use mod_delayed_work to prevent lost deferred probe work Stepan Ionichev <sozdayvek(a)gmail.com> device property: fix fwnode reference leak in fwnode_graph_get_endpoint_by_id() Geert Uytterhoeven <geert+renesas(a)glider.be> firmware: arm_scmi: Fix OOB in scmi_power_name_get() Sven Püschel <s.pueschel(a)pengutronix.de> media: rockchip: rga: fix too small buffer size Eric Dumazet <edumazet(a)google.com> net/sched: sch_drr: annotate data-races around cl->deficit Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> sysfs: clamp show() return value in sysfs_kf_read() Sudeep Holla <sudeep.holla(a)kernel.org> firmware: arm_scmi: Read sensor config as 32-bit value Zilin Guan <zilin(a)seu.edu.cn> media: atomisp: Fix memory leak in atomisp_fixed_pattern_table() Sara Venkatesh <sarajvenkatesh(a)gmail.com> RDMA/srpt: fix integer overflow in immediate data length check Prathamesh Deshpande <prathameshdeshpande7(a)gmail.com> RDMA/mlx5: Fix devx subscribe-event unwind NULL dereference Alexander Chesnokov <Alexander.Chesnokov(a)kaspersky.com> RDMA/hns: Fix arithmetic overflow in calc_hem_config() Linmao Li <lilinmao(a)kylinos.cn> ipv6: addrconf: bail out of dad_failure when state is no longer POSTDAD Eric Dumazet <edumazet(a)google.com> net/sched: sch_htb: annotate data-races (I) Eric Dumazet <edumazet(a)google.com> net/sched: sch_htb: do not change sch->flags in htb_dump() Sean Christopherson <seanjc(a)google.com> crypto: ccp - Treat zero-length cert chain as query for blob lengths Eric Dumazet <edumazet(a)google.com> net/sched: sch_hfsc: annotate data-races in hfsc_dump_class_stats() Rafael J. Wysocki <rafael.j.wysocki(a)intel.com> thermal: hwmon: Fix critical temperature attribute removal Pengpeng Hou <pengpeng(a)iscas.ac.cn> evm: terminate and bound the evm_xattrs read buffer Lin He <helin52(a)huawei.com> drm/hisilicon/hibmc: use clock to look up the PLL value Lin He <helin52(a)huawei.com> drm/hisilicon/hibmc: move display contrl config to hibmc_probe() Cristian Marussi <cristian.marussi(a)arm.com> clk: scmi: Fix clock rate rounding Chen-Yu Tsai <wenst(a)chromium.org> arm64: dts: mediatek: mt8192-asurada: Move PCIe DMA bounce buffer to host Sean Christopherson <seanjc(a)google.com> iommu/amd: Fix a stale comment about which legacy mode is user visible Weiming Shi <bestswngs(a)gmail.com> crypto: asymmetric_keys - fix OOB read in pefile_digest_pe_contents Thorsten Blum <thorsten.blum(a)linux.dev> crypto: ecrdsa - fix unknown OID check in ecrdsa_param_curve Lothar Rubusch <l.rubusch(a)gmail.com> crypto: atmel-sha204a - fix blocking and non-blocking rng logic Kuniyuki Iwashima <kuniyu(a)google.com> vxlan: Fix potential null-ptr-deref in vxlan_gro_prepare_receive(). Weixin Guo <2298701336(a)qq.com> arm64: dts: rockchip: fix rk809 interrupt pin on rk3566-roc-pc Felix Gu <ustc.gu(a)gmail.com> pinctrl: sunxi: fix regulator leak in sunxi_pmx_request() error path Samuel Holland <samuel(a)sholland.org> media: cedrus: Fix failure to clean up hardware on probe failure Felix Gu <ustc.gu(a)gmail.com> watchdog: sprd_wdt: Remove redundant sprd_wdt_disable() on register failure Yingjie Gao <gaoyingjie(a)uniontech.com> watchdog: sp5100_tco: Use EFCH MMIO for newer Hygon FCH Jihed Chaibi <jihed.chaibi.dev(a)gmail.com> ARM: dts: am335x-sl50: Fix audio bitclock and frame master endpoint Tristan Madani <tristan(a)talencesecurity.com> wifi: ath9k: fix OOB access from firmware tx status queue ID Xingjing Deng <micro6947(a)gmail.com> kconfig: fix potential NULL pointer dereference in conf_askvalue Tristan Madani <tristan(a)talencesecurity.com> wifi: rtw88: fix OOB read from firmware RX descriptor exceeding DMA buffer Danilo Krummrich <dakr(a)kernel.org> driver core: use READ_ONCE() for dev->driver in dev_has_sync_state() Srinivasan Shanmugam <srinivasan.shanmugam(a)amd.com> drm/amdkfd: Validate CRIU-restored IDs before idr_alloc Jon Hunter <jonathanh(a)nvidia.com> arm64: tegra: Fix Tegra234 MGBE PTP clock Louis Kotze <loukot(a)gmail.com> wifi: cfg80211: fix grammar in MLO group key error message Baolin Liu <liubaolin(a)kylinos.cn> Documentation: proc: fix section numbering in table of contents Aaron Tomlin <atomlin(a)atomlin.com> libbpf: Report error when a negative kprobe offset is specified Yuho Choi <dbgh9129(a)gmail.com> drm/radeon: fix memory leak in radeon_ring_restore() on lock failure Werner Kasselman <werner(a)verivus.ai> drm/amdgpu: fix integer overflow in amdgpu_gem_align_pitch() Tomi Valkeinen <tomi.valkeinen(a)ideasonboard.com> drm/tidss: Drop extra drm_mode_config_reset() call Ian Bridges <icb(a)fastmail.org> fbcon: fix NULL pointer dereference for a console without vc_data David Howells <dhowells(a)redhat.com> afs: Fix further netns teardown to cancel the preallocation charger Matvey Kovalev <matvey.kovalev(a)ispras.ru> afs: fix NULL pointer dereference in afs_get_tree() David Howells <dhowells(a)redhat.com> afs: Fix netns teardown to cancel the preallocation charger Matthias Feser <mfe(a)KBSgmbhfr.onmicrosoft.com> serial: 8250_omap: clear rx_running on zero-length DMA completes Stephan Gerhold <stephan.gerhold(a)linaro.org> serial: msm: Disable DMA for kernel console UART Guoniu Zhou <guoniu.zhou(a)oss.nxp.com> dt-bindings: power: imx93: Add MIPI PHY power domain Chen-Yu Tsai <wens(a)kernel.org> dt-bindings: media: sun4i-a10-video-engine: Add interconnect properties Ricardo Ribalda <ribalda(a)chromium.org> media: uvcvideo: Fix buffer sequence in frame gaps Ricardo Ribalda <ribalda(a)chromium.org> media: uvcvideo: Avoid partial metadata buffers Eric Biggers <ebiggers(a)kernel.org> crypto: hisi-trng - Remove crypto_rng interface Eric Biggers <ebiggers(a)kernel.org> crypto: af_alg - Remove zero-copy support from skcipher and aead Eric Biggers <ebiggers(a)kernel.org> crypto: crypto4xx - Remove insecure and unused rng_alg Herbert Xu <herbert(a)gondor.apana.org.au> crypto: crypto4xx - Remove ahash-related code Stephen Dolan <sdolan(a)janestreet.com> x86/mm: Fix check/use ordering in switch_mm_irqs_off() Eric Biggers <ebiggers(a)kernel.org> crypto: sun4i-ss - Remove insecure and unused rng_alg Sagi Grimberg <sagi(a)grimberg.me> nvmet-tcp: Fix potential UAF when ddgst mismatch Shivam Kumar <kumar.shivam43666(a)gmail.com> nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path Vladimir Oltean <vladimir.oltean(a)nxp.com> net: dsa: tag_ksz: do not rely on skb_mac_header() in TX paths Yichong Chen <chenyichong(a)uniontech.com> tools/mm/slabinfo: fix total_objects attribute name Muhammet Kaan KILINÇ <muhammetkaankilinc(a)gmail.com> crypto: algif_skcipher - force synchronous processing on trees without ctx->state Shashank A P <shashank.ap(a)samsung.com> fs: quota: create dedicated workqueue for quota_release_work Adam Li <adamli(a)os.amperecomputing.com> sched/fair: Only update stats for allowed CPUs when looking for dst group ChenXiaoSong <chenxiaosong(a)kylinos.cn> smb/server: do not require delete access for non-replacing links Darrick J. Wong <djwong(a)kernel.org> xfs: resample the data fork mapping after cycling ILOCK Weiming Shi <bestswngs(a)gmail.com> xfs: fail recovery on a committed log item with no regions Shoichiro Miyamoto <shoichiro.miyamoto(a)gmail.com> smb: client: reject overlapping data areas in SMB2 responses Wongi Lee <qw3rtyp0(a)gmail.com> ipv4: account for fraggap on the paged allocation path Joanne Koong <joannelkoong(a)gmail.com> fuse: re-lock request before returning from fuse_ref_folio() Alberto Ruiz <aruiz(a)redhat.com> fuse: fix device node leak in cuse_process_init_reply() Michael Bommarito <michael.bommarito(a)gmail.com> RDMA/siw: bound Read Response placement to the RREAD length Zhenhao Wan <whi4ed0g(a)gmail.com> RDMA/rtrs-srv: Bound RDMA-Write length to chunk size in rdma_write_sg Dmitry Torokhov <dmitry.torokhov(a)gmail.com> Input: maplecontrol - set driver data before registering input device Dmitry Torokhov <dmitry.torokhov(a)gmail.com> Input: maplemouse - set driver data before registering input device Dmitry Torokhov <dmitry.torokhov(a)gmail.com> Input: maple_keyb - set driver data before registering input device Dmitry Torokhov <dmitry.torokhov(a)gmail.com> Input: mms114 - fix multi-touch slot corruption Florian Fuchs <fuchsfl(a)gmail.com> Input: maplemouse - fix NULL pointer dereference in open() Bryam Vargas <hexlabsecurity(a)proton.me> Input: touchwin - reset the packet index on every complete packet Bryam Vargas <hexlabsecurity(a)proton.me> Input: iforce - bound the device-reported force-feedback effect index Bryam Vargas <hexlabsecurity(a)proton.me> Input: goodix - clamp the device-reported contact count Ranjan Kumar <kumarranja(a)chromium.org> Input: elan_i2c - prevent division by zero and arithmetic underflow Bryam Vargas <hexlabsecurity(a)proton.me> Input: synaptics-rmi4 - bound the F30 keymap to the GPIO/LED count Bryam Vargas <hexlabsecurity(a)proton.me> Input: synaptics-rmi4 - bound the F3A keymap to the GPIO count Haoxiang Li <haoxiang_li2024(a)163.com> Input: synaptics-rmi4 - unregister function handlers on physical driver registration failure Guillermo Rodríguez <guille.rodriguez(a)gmail.com> i2c: stm32f7: truncate clock period instead of rounding it Johan Hovold <johan(a)kernel.org> i2c: core: fix adapter deregistration race Mikhail Gavrilov <mikhail.v.gavrilov(a)gmail.com> udmabuf: fix DMA direction mismatch in release_udmabuf() Sean Christopherson <seanjc(a)google.com> KVM: VMX: Grab vmcs12 on CR8 interception update iff vCPU is in guest mode Sean Christopherson <seanjc(a)google.com> KVM: VMX: Refresh GUEST_PENDING_DBG_EXCEPTIONS.BS on all injected #DBs Koichiro Den <den(a)valinux.co.jp> NTB: epf: Fix request_irq() unwind in ntb_epf_init_isr() Bryam Vargas <hexlabsecurity(a)proton.me> exfat: bound uniname advance in exfat_find_dir_entry() Andrii Kuchmenko <capyenglishlite(a)gmail.com> module: decompress: check return value of module_extend_max_pages() Benjamin Coddington <ben.coddington(a)hammerspace.com> NFSv4: include MAY_WRITE in open permission mask for O_TRUNC Huihui Huang <hhhuang(a)smu.edu.sg> tracing: Prevent out-of-bounds read in glob matching Janne Grunau <j(a)jannau.net> watchdog: apple: Add "apple,t8103-wdt" compatible Vasily Khoruzhick <vasilykh(a)arista.com> EDAC/i10nm: Don't fail probing if ADXL is missing Carlos Song <carlos.song(a)nxp.com> spi: fsl-lpspi: terminate the RX channel on TX prepare failure path Carlos Song <carlos.song(a)nxp.com> spi: fsl-lpspi: replace dmaengine_terminate_all() with dmaengine_terminate_sync() Paul Louvel <paul.louvel(a)bootlin.com> crypto: talitos - move code in current_desc_hdr() into a standalone function Paul Louvel <paul.louvel(a)bootlin.com> crypto: talitos - move dma mapping code in talitos_submit() into a standalone dma_map_request() function Paul Louvel <paul.louvel(a)bootlin.com> crypto: talitos - move dma unmapping code in flush_channel() into a standalone dma_unmap_request() function Paul Louvel <paul.louvel(a)bootlin.com> crypto: talitos - add chaining of arbitrary number of descriptor for the SEC1 Paul Louvel <paul.louvel(a)bootlin.com> crypto: talitos - use dma_sync_single_for_cpu() before reading descriptor header Eric Biggers <ebiggers(a)kernel.org> crypto: drbg - Fix the fips_enabled priority boost Eric Biggers <ebiggers(a)kernel.org> crypto: drbg - Fix drbg_max_addtl() on 64-bit kernels Eric Biggers <ebiggers(a)kernel.org> crypto: drbg - Fix returning success on failure in CTR_DRBG Ruijie Li <ruijieli51(a)gmail.com> crypto: pcrypt - restore callback for non-parallel fallback Anastasia Tishchenko <sv3iry(a)gmail.com> crypto: ecc - Fix carry overflow in vli multiplication Thorsten Blum <thorsten.blum(a)linux.dev> crypto: caam - use print_hex_dump_devel to guard key hex dumps again Thorsten Blum <thorsten.blum(a)linux.dev> crypto: caam - use print_hex_dump_devel to guard key hex dumps Bryam Vargas <hexlabsecurity(a)proton.me> isofs: bound Rock Ridge symlink components to the SL record Bryam Vargas <hexlabsecurity(a)proton.me> partitions: aix: bound the pp_count scan to the ppe array Qu Wenruo <wqu(a)suse.com> btrfs: do not trim a device which is not writeable Achkinazi, Igor <Igor.Achkinazi(a)dell.com> nvme-multipath: set BIO_REMAPPED on bios remapped to per-path namespace disks Mikulas Patocka <mpatocka(a)redhat.com> dm-ioctl: report an error if a device has no table Bryam Vargas <hexlabsecurity(a)proton.me> udf: validate sparing table length as an entry count, not a byte count Bryam Vargas <hexlabsecurity(a)proton.me> udf: validate VAT header length against the VAT inode size Michael Bommarito <michael.bommarito(a)gmail.com> udf: validate free block extents against the partition length Heinrich Schuchardt <heinrich.schuchardt(a)canonical.com> efivarfs: fix statfs() on efivarfs Anisse Astier <an.astier(a)criteo.com> efivarfs: expose used and total size Liviu Stan <liviu.stan(a)analog.com> iio: temperature: ltc2983: Fix n_wires default bypassing rotation check Paul Menzel <pmenzel(a)molgen.mpg.de> usb: typec: ucsi: cancel pending work on system suspend Fan Wu <fanwu01(a)zju.edu.cn> usb: typec: ucsi: ccg: Fix use-after-free of ucsi on remove Madhu M <madhu.m(a)intel.com> usb: typec: ucsi: Pass full DP config payload in SET_NEW_CAM for DP alt mode Andrei Kuchynski <akuchynski(a)chromium.org> usb: typec: ucsi: Invert DisplayPort role assignment Badhri Jagan Sridharan <badhri(a)google.com> usb: typec: tcpm: Validate SVID index in svdm_consume_modes() Shuangpeng Bai <shuangpeng.kernel(a)gmail.com> usb: typec: class: drop PD lookup reference Myeonghun Pak <mhun512(a)gmail.com> usb: typec: anx7411: use devm_pm_runtime_enable() Sam Day <me(a)samcday.com> usbip: vudc: fix NULL deref in vep_dequeue() Yichong Chen <chenyichong(a)uniontech.com> usbip: tools: support SuperSpeedPlus devices Xu Rao <raoxu(a)uniontech.com> USB: usb-storage: ene_ub6250: restore media-ready check Johan Hovold <johan(a)kernel.org> USB: ulpi: fix memory leak on registration failure Johan Hovold <johan(a)kernel.org> USB: serial: digi_acceleport: fix write buffer corruption Johan Hovold <johan(a)kernel.org> USB: serial: digi_acceleport: fix hard lockup on disconnect Johan Hovold <johan(a)kernel.org> USB: serial: digi_acceleport: fix broken rx after throttle Fabio Porcedda <fabio.porcedda(a)gmail.com> USB: serial: option: add Telit Cinterion FE990D50 compositions Johan Hovold <johan(a)kernel.org> USB: serial: keyspan_pda: fix information leak Haoxiang Li <haoxiang_li2024(a)163.com> usb: mtu3: unmap request DMA on queue failure Myeonghun Pak <mhun512(a)gmail.com> USB: misc: uss720: unregister parport on probe failure Xu Rao <raoxu(a)uniontech.com> USB: storage: include US_FL_NO_SAME in quirks mask Myeonghun Pak <mhun512(a)gmail.com> usb: sl811-hcd: disable controller wakeup on remove Johan Hovold <johan(a)kernel.org> USB: legousbtower: fix use-after-free on disconnect race Erich E. Hoover <erich.e.hoover(a)gmail.com> USB: quirks: add NO_LPM for the Samsung T5 EVO Portable SSD Johan Hovold <johan(a)kernel.org> USB: iowarrior: fix use-after-free on disconnect Johan Hovold <johan(a)kernel.org> USB: ldusb: fix use-after-free on disconnect race Johan Hovold <johan(a)kernel.org> USB: idmouse: fix use-after-free on disconnect race Jimmy Hu <hhhuuu(a)google.com> usb: gadget: udc: Fix use-after-free in gadget_match_driver Maoyi Xie <maoyixie.tju(a)gmail.com> usb: gadget: composite: fix dead empty check in the USB_DT_OTG handler WenTao Liang <vulab(a)iscas.ac.cn> usb: dwc3: meson-g12a: fix refcount leak in dwc3_meson_g12a_resume() Rodrigo Lugathe da Conceição Alves <lugathe2(a)gmail.com> USB: core: add USB_QUIRK_NO_LPM for VIA Labs USB 2.0 hub Haoxiang Li <haoxiang_li2024(a)163.com> usb: cdnsp: fix stream context array leak in cdnsp_alloc_stream_info() Jared Baldridge <jrb(a)expunge.us> usb: cdc_acm: Add quirk for Uniden BC125AT scanner Maoyi Xie <maoyixie.tju(a)gmail.com> net: usb: kalmia: bound RX frame length in kalmia_rx_fixup() Dawei Feng <dawei.feng(a)seu.edu.cn> bpf: Restore sysctl new-value from 1 to 0 Zhao Zhang <zzhan461(a)ucr.edu> bpf: Reject fragmented frames in devmap Alexey Nepomnyashih <sdl(a)nppct.ru> xfs: fix unreachable BIGTIME check in dquot flush validation Yousef Alhouseen <alhouseenyousef(a)gmail.com> xfs: use null daddr for unset first bad log block Deepanshu Kartikey <kartikey406(a)gmail.com> nilfs2: reject CLEAN_SEGMENTS ioctl with out-of-range segment numbers Tristan Madani <tristan(a)talencesecurity.com> hfs/hfsplus: zero-initialize buffer in hfs_bnode_read Srinivas Pandruvada <srinivas.pandruvada(a)linux.intel.com> HID: sensor-hub: Add sensor_hub_input_attr_read_values() for multi-byte reads Maoyi Xie <maoyixie.tju(a)gmail.com> HID: lg-g15: cancel pending work on remove to fix a use-after-free Manish Khadka <maskmemanish(a)gmail.com> HID: letsketch: fix UAF on inrange_timer at driver unbind Myeonghun Pak <mhun512(a)gmail.com> HID: wacom: stop hardware after post-start probe failures Lukas Wunner <lukas(a)wunner.de> X.509: Fix validation of ASN.1 certificate header Kartik Rajput <kkartik(a)nvidia.com> clocksource/drivers/timer-tegra186: Fix support for multiple watchdog instances WenTao Liang <vulab(a)iscas.ac.cn> posix-cpu-timers: Fix pid refcount leak in do_cpu_nanosleep() error path Yuho Choi <dbgh9129(a)gmail.com> cpufreq: pcc: fix use-after-free and double free in _OSC evaluation Tianxiang Chen <nanmu(a)xiaomi.com> cpufreq: Fix hotplug-suspend race during reboot Steven Rostedt <rostedt(a)goodmis.org> sched/rt: Have RT_PUSH_IPI be default off for non PREEMPT_RT Fushuai Wang <wangfushuai(a)baidu.com> cpufreq: intel_pstate: Sync policy->cur during CPU offline Guangshuo Li <lgs201920130244(a)gmail.com> firmware_loader: fix device reference leak in firmware_upload_register() Norbert Manthey <nmanthey(a)amazon.de> smb: client: mask server-provided mode to 07777 in modefromsid Zihan Xi <xizh2024(a)lzu.edu.cn> smb: client: harden POSIX SID length parsing Zihan Xi <xizh2024(a)lzu.edu.cn> smb: client: use unaligned reads in parse_posix_ctxt() Haoxiang Li <haoxiang_li2024(a)163.com> smb: client: Fix next buffer leak in receive_encrypted_standard() Gil Portnoy <dddhkts1(a)gmail.com> ksmbd: add per-handle permission check to FILE_LINK_INFORMATION Namjae Jeon <linkinjeon(a)kernel.org> ksmbd: run set info with opener credentials Gil Portnoy <dddhkts1(a)gmail.com> ksmbd: add a WRITE_DAC/WRITE_OWNER check to SMB2 SET_INFO SECURITY Namjae Jeon <linkinjeon(a)kernel.org> ksmbd: require source read access for duplicate extents Davide Ornaghi <d.ornaghi97(a)gmail.com> ksmbd: fix UAF of struct file_lock in SMB2_LOCK deferred-lock cancellation Namjae Jeon <linkinjeon(a)kernel.org> ksmbd: serialize QUERY_DIRECTORY requests per file Gil Portnoy <dddhkts1(a)gmail.com> ksmbd: add a permission check for FSCTL_SET_ZERO_DATA Gil Portnoy <dddhkts1(a)gmail.com> ksmbd: add permission checks for FSCTL_DUPLICATE_EXTENTS_TO_FILE Sebastian Andrzej Siewior <bigeasy(a)linutronix.de> net: Drop the lock in skb_may_tx_timestamp() Muhammad Bilal <meatuni001(a)gmail.com> Bluetooth: L2CAP: validate option length before reading conf opt value Yousef Alhouseen <alhouseenyousef(a)gmail.com> Bluetooth: fix UAF in bt_accept_dequeue() Yousef Alhouseen <alhouseenyousef(a)gmail.com> Bluetooth: bnep: pin L2CAP connection during netdev registration Sergey Senozhatsky <senozhatsky(a)chromium.org> Bluetooth: btmtksdio: fix infinite loop in btmtksdio_txrx_work() Xiang Mei <xmei5(a)asu.edu> netfilter: ebtables: terminate table name before find_table_lock() Florian Westphal <fw(a)strlen.de> netfilter: ebtables: module names must be null-terminated Pratham Gupta <pratham36gupta(a)gmail.com> netfilter: ctnetlink: use nf_ct_exp_net() in expectation dump Andrei Kuchynski <akuchynski(a)chromium.org> mfd: cros_ec: Delay dev_set_drvdata() until probe success Wyatt Feng <bronzed_45_vested(a)icloud.com> net: ipv4: bound TCP reordering sysctl writes and MTU probe sizes Yuyang Huang <yuyanghuang(a)google.com> ipv4: igmp: remove multicast group from hash table on device destruction Runyu Xiao <runyu.xiao(a)seu.edu.cn> io_uring/io-wq: re-check IO_WQ_BIT_EXIT for each linked work item Runyu Xiao <runyu.xiao(a)seu.edu.cn> gpio: eic-sprd: use raw_spinlock_t in the irq startup path Koichiro Den <den(a)valinux.co.jp> NTB: epf: Avoid calling pci_irq_vector() from hardirq context Yunpeng Tian <shionthanatos(a)gmail.com> fs/ntfs3: validate Dirty Page Table capacity in log_replay copy_lcns Thomas Gleixner <tglx(a)kernel.org> debugobjects: Plug race against a concurrent OOM disable Chi Wang <wangchi(a)kylinos.cn> audit: Fix data races of skb_queue_len() readers on audit_queue Zijing Yin <yzjaurora(a)gmail.com> net: af_key: initialize alg_key_len for IPComp states Gil Portnoy <dddhkts1(a)gmail.com> ksmbd: fix use-after-free of a deferred file_lock on SMB2_CLOSE then SMB2_CANCEL Dawei Feng <dawei.feng(a)seu.edu.cn> crypto: amlogic - avoid double cleanup in meson_crypto_probe() Alexandru Hossu <hossu.alexandru(a)gmail.com> staging: rtl8723bs: fix OOB write in HT_caps_handler() Alexandru Hossu <hossu.alexandru(a)gmail.com> staging: rtl8723bs: fix OOB reads in is_ap_in_tkip() IE loop Alexandru Hossu <hossu.alexandru(a)gmail.com> staging: rtl8723bs: fix OOB reads in IE loops in issue_assocreq() and join_cmd_hdl() Alexandru Hossu <hossu.alexandru(a)gmail.com> staging: rtl8723bs: fix OOB read in update_beacon_info() IE loop Alexandru Hossu <hossu.alexandru(a)gmail.com> staging: rtl8723bs: fix OOB read in OnAssocRsp() IE loop Alexandru Hossu <hossu.alexandru(a)gmail.com> staging: rtl8723bs: fix WEP length underflow and OOB read in OnAuth() Arnd Bergmann <arnd(a)arndb.de> staging: media: atomisp: reduce load_primary_binaries() stack usage Ricardo Ribalda <ribalda(a)chromium.org> media: staging: ipu3-imgu: Add range check for imgu_css_cfg_acc_stripe Hao-Qun Huang <alvinhuang0603(a)gmail.com> staging: vme_user: fix location monitor leak in tsi148 bridge Hao-Qun Huang <alvinhuang0603(a)gmail.com> staging: vme_user: fix location monitor leak in fake bridge Shoichiro Miyamoto <shoichiro.miyamoto(a)gmail.com> smb: client: restrict implied bcc[0] exemption to responses without data area Michael Tautschnig <tautschn(a)amazon.com> staging: vme_user: bound slave read/write to the kern_buf size Samuel Page <sam(a)bynar.io> tipc: fix out-of-bounds read in broadcast Gap ACK blocks Yizhou Zhao <zhaoyz24(a)mails.tsinghua.edu.cn> 6lowpan: fix NHC entry use-after-free on error path Runyu Xiao <runyu.xiao(a)seu.edu.cn> usb: dwc3: run gadget disconnect from sleepable suspend context Alan Stern <stern(a)rowland.harvard.edu> USB: chaoskey: Fix slab-use-after-free in chaoskey_release() Michael Bommarito <michael.bommarito(a)gmail.com> hwrng: virtio: clamp device-reported used.len at copy_data() Johan Hovold <johan(a)kernel.org> virtio-mmio: fix device release warning on module unload Xiang Mei <xmei5(a)asu.edu> netfilter: ipset: fix race between dump and ip_set_list resize SeongJae Park <sj(a)kernel.org> mm/damon/ops-common: handle extreme intervals in damon_hot_score() Ratheesh Kannoth <rkannoth(a)marvell.com> PCI: host-common: Request bus reassignment when not probe-only Mahesh Vaidya <mahesh.vaidya(a)altera.com> PCI: altera: Do not dispose parent IRQ mapping 胡连勤 <hulianqin(a)vivo.com> usb: xhci: Fix sleep in atomic context in xhci_free_streams() Carlos Llamas <cmllamas(a)google.com> binder: fix UAF in binder_free_transaction() Carlos Llamas <cmllamas(a)google.com> binder: fix UAF in binder_thread_release() Johan Hovold <johan(a)kernel.org> Bluetooth: btusb: fix wakeup source leak on probe failure Johan Hovold <johan(a)kernel.org> Bluetooth: btusb: fix use-after-free on marvell probe failure Johan Hovold <johan(a)kernel.org> Bluetooth: btusb: fix use-after-free on registration failure Alex Williamson <alex.williamson(a)nvidia.com> vfio/pci: Release the VGA arbiter client on register_device() failure Cássio Gabriel <cassiogabrielcontato(a)gmail.com> ALSA: usb-audio: Update US-16x08 EQ/comp shadow state after successful writes Cássio Gabriel <cassiogabrielcontato(a)gmail.com> ALSA: usb-audio: Update Babyface Pro control caches only after successful writes Cássio Gabriel <cassiogabrielcontato(a)gmail.com> ALSA: usb-audio: Roll back quirk control caches on write errors Cássio Gabriel <cassiogabrielcontato(a)gmail.com> ALSA: usb-audio: Propagate US-16x08 write errors in route/mix EQ-switch put callbacks Cássio Gabriel <cassiogabrielcontato(a)gmail.com> ALSA: usb-audio: Propagate errors in scarlett_ctl_enum_put() Darvell Long <contact(a)darvell.me> ALSA: usb-audio: avoid kobject path lookup in DualSense match Zhao Dongdong <zhaodongdong(a)kylinos.cn> ALSA: ice1712: check snd_ctl_new1() return value Zhao Dongdong <zhaodongdong(a)kylinos.cn> ALSA: gus: check snd_ctl_new1() return value Maoyi Xie <maoyixie.tju(a)gmail.com> ALSA: firewire: isight: bound the sample count to the packet payload Zhao Dongdong <zhaodongdong(a)kylinos.cn> ALSA: es1938: check snd_ctl_new1() return value Zhao Dongdong <zhaodongdong(a)kylinos.cn> ALSA: cmipci: check snd_ctl_new1() return value Maoyi Xie <maoyixie.tju(a)gmail.com> ALSA: caiaq: fix out-of-bounds read in the Traktor Kontrol S4 input parser Zhao Dongdong <zhaodongdong(a)kylinos.cn> ALSA: ymfpci: check snd_ctl_new1() return value Cássio Gabriel <cassiogabrielcontato(a)gmail.com> ALSA: virtio: Add missing 384 kHz PCM rate mapping Liviu Stan <liviu.stan(a)analog.com> iio: temperature: ltc2983: Fix reinit_completion() called after conversion start Andy Shevchenko <andriy.shevchenko(a)linux.intel.com> iio: magnetometer: ak8975: Add missed pm_runtime_put_autosuspend() call Javier Carrasco <javier.carrasco.cruz(a)gmail.com> iio: light: veml6030: fix channel type when pushing events Stepan Ionichev <sozdayvek(a)gmail.com> iio: light: tsl2591: return actual error from probe IRQ failure Joshua Crofts <joshua.crofts1(a)gmail.com> iio: light: opt3001: fix missing state reset on timeout Biren Pandya <birenpandya(a)gmail.com> iio: light: gp2ap002: fix runtime PM leak on read error Vidhu Sarwal <vidhu.linux(a)gmail.com> iio: light: al3010: fix incorrect scale for the highest gain range Andreas Kempe <andreas.kempe(a)actia.se> iio: imu: st_lsm6dsx: deselect shub page before reading whoami Runyu Xiao <runyu.xiao(a)seu.edu.cn> iio: imu: bmi160: add IRQF_NO_THREAD to data-ready trigger IRQ Stepan Ionichev <sozdayvek(a)gmail.com> iio: gyro: bmg160: wait full startup time after mode change at probe Stepan Ionichev <sozdayvek(a)gmail.com> iio: gyro: bmg160: bail out when bandwidth/filter is not in table Lars-Peter Clausen <lars(a)metafoo.de> iio: event: Fix event FIFO reset race Maxwell Doose <m32285159(a)gmail.com> iio: chemical: scd30: Cleanup initializations and fix sign-extension bug Pengpeng Hou <pengpeng(a)iscas.ac.cn> iio: adc: ti-ads124s08: Return reset GPIO lookup errors Maxwell Doose <m32285159(a)gmail.com> iio: adc: spear: Initialize completion before requesting IRQ Maxwell Doose <m32285159(a)gmail.com> iio: adc: lpc32xx: Initialize completion before requesting IRQ Biren Pandya <birenpandya(a)gmail.com> iio: accel: kxsd9: fix runtime PM imbalance on write_raw() error Bryam Vargas <hexlabsecurity(a)proton.me> iio: accel: bmc150: clamp the device-reported FIFO frame count Griffin Kroah-Hartman <griffin(a)kroah.com> usb: gadget: function: rndis: add length check for header Griffin Kroah-Hartman <griffin(a)kroah.com> usb: gadget: function: rndis: add length check to response query Jonas Jelonek <jelonek.jonas(a)gmail.com> MIPS: smp: report dying CPU to RCU in stop_this_cpu() Philo Lu <lulie(a)linux.alibaba.com> virtio_net: Support dynamic rss indirection table size Jeremy Linton <jeremy.linton(a)arm.com> ACPI: CPPC: Suppress UBSAN warning caused by field misuse Christian Brauner <brauner(a)kernel.org> eventpoll: fix ep_remove struct eventpoll / struct file UAF Christian Brauner <brauner(a)kernel.org> eventpoll: move epi_fget() up Christian Brauner <brauner(a)kernel.org> eventpoll: rename ep_remove_safe() back to ep_remove() Christian Brauner <brauner(a)kernel.org> eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() Christian Brauner <brauner(a)kernel.org> eventpoll: kill __ep_remove() Christian Brauner <brauner(a)kernel.org> eventpoll: split __ep_remove() Christian Brauner <brauner(a)kernel.org> eventpoll: use hlist_is_singular_node() in __ep_remove() Christian Brauner <brauner(a)kernel.org> file: add fput() cleanup helper Linus Torvalds <torvalds(a)linux-foundation.org> eventpoll: don't decrement ep refcount while still holding the ep mutex Claudia Draghicescu <claudia.rosu(a)nxp.com> Bluetooth: ISO: Copy BASE if service data matches EIR_BAA_SERVICE_UUID Jiayuan Chen <jiayuan.chen(a)shopee.com> mm/vmscan: flush deferred TLB before freeing large folios NeilBrown <neil(a)brown.name> nfsd: change nfs4_client_to_reclaim() to allocate data NeilBrown <neilb(a)ownmail.net> nfsd: move name lookup out of nfsd4_list_rec_dir() John Johansen <john.johansen(a)canonical.com> apparmor: advertise the tcp fast open fix is applied Trond Myklebust <trond.myklebust(a)hammerspace.com> nfsd: Don't reset the write verifier on a commit EAGAIN Michael Bommarito <michael.bommarito(a)gmail.com> NFSv4/flexfiles: reject zero filehandle version count Mingyu Wang <25181214217(a)stu.xidian.edu.cn> fbdev: fbcon: fix out-of-bounds read in err_out of fbcon_do_set_font() Johan Hovold <johan(a)kernel.org> i2c: core: fix adapter registration race Johan Hovold <johan(a)kernel.org> i2c: core: fix adapter debugfs creation Johan Hovold <johan(a)kernel.org> i2c: core: fix NULL-deref on adapter registration failure Johan Hovold <johan(a)kernel.org> i2c: core: fix hang on adapter registration failure Johan Hovold <johan(a)kernel.org> i2c: core: fix irq domain leak on adapter registration failure Yuho Choi <dbgh9129(a)gmail.com> rpmsg: char: Fix use-after-free on probe error path Denis Arefev <arefev(a)swemel.ru> block: Avoid mounting the bdev pseudo-filesystem in userspace Sean Christopherson <seanjc(a)google.com> KVM: Replace guest-triggerable BUG_ON() in ioeventfd datamatch with get_unaligned() Keshav Verma <iganschel(a)gmail.com> f2fs: fix listxattr handling of corrupted xattr entries Chao Yu <chao(a)kernel.org> f2fs: fix potential deadlock in gc_merge path of f2fs_balance_fs() Ruipeng Qi <ruipengqi3(a)gmail.com> f2fs: fix potential deadlock in f2fs_balance_fs() Bryam Vargas <hexlabsecurity(a)proton.me> f2fs: bound i_inline_xattr_size for non-inline-xattr inodes Wenjie Qi <qwjhust(a)gmail.com> f2fs: validate orphan inode entry count Wenjie Qi <qwjhust(a)gmail.com> f2fs: keep atomic write retry from zeroing original data Bartosz Golaszewski <bartosz.golaszewski(a)oss.qualcomm.com> device property: initialize the remaining fields of fwnode_handle in fwnode_init() Maoyi Xie <maoyixie.tju(a)gmail.com> net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink Bjorn Andersson <bjorn.andersson(a)oss.qualcomm.com> slimbus: qcom-ngd-ctrl: Register callbacks after creating the ngd Uwe Kleine-König <u.kleine-koenig(a)pengutronix.de> slimbus: Convert to platform remove callback returning void Bjorn Andersson <bjorn.andersson(a)oss.qualcomm.com> slimbus: qcom-ngd-ctrl: Correct PDR and SSR cleanup ownership Bjorn Andersson <bjorn.andersson(a)oss.qualcomm.com> slimbus: qcom-ngd-ctrl: Fix probe error path ordering Bjorn Andersson <bjorn.andersson(a)oss.qualcomm.com> slimbus: qcom-ngd-ctrl: Fix up platform_driver registration Pedro Tammela <pctammela(a)mojatatu.com> net/sched: act_pedit: use NLA_POLICY for parsing 'ex' keys Kiryl Shutsemau <kas(a)kernel.org> userfaultfd: gate must_wait writability check on pte_present() Huacai Chen <chenhuacai(a)kernel.org> LoongArch: Report dying CPU to RCU in stop_this_cpu() Jeff Layton <jlayton(a)kernel.org> nfsd: reset write verifier on deferred writeback errors Chris Mason <clm(a)meta.com> nfsd: release layout stid on setlease failure Daniel Borkmann <daniel(a)iogearbox.net> bpf, arm64: Reject out-of-range B.cond targets Chaitanya Kulkarni <kch(a)nvidia.com> nvmet-tcp: fix race between ICReq handling and queue teardown ------------- Diffstat: Documentation/admin-guide/pm/cpufreq.rst | 6 +- Documentation/crypto/userspace-if.rst | 31 +- .../media/allwinner,sun4i-a10-video-engine.yaml | 10 + .../devicetree/bindings/net/renesas,ether.yaml | 3 +- Documentation/driver-api/nvdimm/btt.rst | 5 +- Documentation/driver-api/pci/pci.rst | 3 + Documentation/filesystems/proc.rst | 14 +- Makefile | 4 +- arch/alpha/kernel/pci-sysfs.c | 13 +- arch/arm/boot/dts/am335x-sl50.dts | 4 +- arch/arm/configs/sunxi_defconfig | 1 - arch/arm/mach-imx/cpu-imx31.c | 9 +- arch/arm/mach-imx/mm-imx3.c | 2 + arch/arm64/boot/dts/mediatek/mt8192-asurada.dtsi | 2 +- arch/arm64/boot/dts/nvidia/tegra234.dtsi | 8 +- arch/arm64/boot/dts/qcom/sdm630.dtsi | 9 +- arch/arm64/boot/dts/rockchip/rk3566-roc-pc.dts | 2 +- arch/arm64/kernel/entry-fpsimd.S | 8 +- arch/arm64/kernel/hw_breakpoint.c | 9 + arch/arm64/kvm/vgic/vgic-its.c | 2 + arch/arm64/kvm/vgic/vgic.c | 11 +- arch/arm64/lib/insn.c | 2 + arch/arm64/mm/hugetlbpage.c | 2 +- arch/arm64/mm/mmu.c | 11 +- arch/loongarch/include/asm/pgtable.h | 4 + arch/loongarch/kernel/smp.c | 1 + arch/mips/dec/int-handler.S | 2 +- arch/mips/dec/prom/init.c | 6 +- arch/mips/dec/setup.c | 6 - arch/mips/fw/lib/call_o32.S | 2 +- arch/mips/include/asm/dec/prom.h | 15 +- arch/mips/kernel/mips-mt-fpaff.c | 28 +- arch/mips/kernel/smp.c | 2 + arch/mips/mm/init.c | 12 +- arch/mips/n64/init.c | 2 +- arch/mips/ralink/mt7621.c | 2 +- arch/mips/sgi-ip22/ip22-gio.c | 7 +- arch/powerpc/kexec/core_64.c | 4 +- arch/powerpc/perf/core-fsl-emb.c | 3 +- arch/powerpc/platforms/cell/spufs/file.c | 6 +- arch/powerpc/platforms/powernv/setup.c | 3 +- .../platforms/pseries/papr_platform_attributes.c | 8 +- arch/riscv/kernel/cacheinfo.c | 2 +- arch/riscv/kernel/machine_kexec.c | 3 + arch/riscv/kernel/stacktrace.c | 2 +- arch/s390/kernel/process.c | 2 +- arch/s390/kvm/pci.c | 12 +- arch/sparc/kernel/led.c | 2 +- arch/x86/boot/compressed/acpi.c | 7 +- arch/x86/boot/early_serial_console.c | 11 +- arch/x86/events/amd/core.c | 6 +- arch/x86/kvm/lapic.c | 8 +- arch/x86/kvm/vmx/vmx.c | 38 +- arch/x86/mm/numa_emulation.c | 17 +- arch/x86/mm/tlb.c | 16 +- arch/x86/platform/efi/quirks.c | 8 + arch/x86/platform/olpc/olpc-xo15-sci.c | 1 + block/bdev.c | 4 - block/partitions/aix.c | 9 + crypto/af_alg.c | 2 +- crypto/algif_skcipher.c | 49 +- crypto/asymmetric_keys/verify_pefile.c | 2 + crypto/asymmetric_keys/x509_loader.c | 2 +- crypto/drbg.c | 4 +- crypto/ecc.c | 31 +- crypto/ecrdsa.c | 2 +- crypto/pcrypt.c | 4 + crypto/rng.c | 11 + drivers/acpi/acpi_ipmi.c | 4 +- drivers/acpi/cppc_acpi.c | 11 +- drivers/acpi/nfit/core.c | 15 +- drivers/acpi/resource.c | 6 +- drivers/android/binder.c | 19 +- drivers/ata/pata_pxa.c | 1 + drivers/ata/sata_gemini.c | 2 +- drivers/base/dd.c | 7 +- drivers/base/firmware_loader/main.c | 3 +- drivers/base/firmware_loader/sysfs_upload.c | 8 +- drivers/base/power/main.c | 6 +- drivers/base/property.c | 4 +- drivers/block/drbd/drbd_receiver.c | 5 + drivers/bluetooth/bpa10x.c | 8 +- drivers/bluetooth/btmtksdio.c | 2 +- drivers/bluetooth/btrtl.c | 5 +- drivers/bluetooth/btusb.c | 37 +- drivers/bus/mhi/ep/main.c | 9 +- drivers/bus/sunxi-rsb.c | 3 + drivers/char/hw_random/virtio-rng.c | 23 +- drivers/char/tlclk.c | 4 + drivers/char/tpm/eventlog/tpm1.c | 4 +- drivers/char/tpm/tpm-dev.c | 2 +- drivers/char/tpm/tpm_tis_core.c | 35 +- drivers/char/tpm/tpmrm-dev.c | 2 +- drivers/clk/at91/pmc.c | 2 +- drivers/clk/clk-scmi.c | 4 +- drivers/clk/qcom/a53-pll.c | 2 +- drivers/clocksource/timer-tegra186.c | 3 +- drivers/cpufreq/cpufreq.c | 2 + drivers/cpufreq/cpufreq_conservative.c | 12 +- drivers/cpufreq/intel_pstate.c | 6 +- drivers/cpufreq/pcc-cpufreq.c | 2 + drivers/crypto/allwinner/Kconfig | 8 - drivers/crypto/allwinner/sun4i-ss/Makefile | 1 - drivers/crypto/allwinner/sun4i-ss/sun4i-ss-core.c | 36 - drivers/crypto/allwinner/sun4i-ss/sun4i-ss-prng.c | 69 -- drivers/crypto/allwinner/sun4i-ss/sun4i-ss.h | 20 - drivers/crypto/amcc/crypto4xx_alg.c | 106 -- drivers/crypto/amcc/crypto4xx_core.c | 130 +- drivers/crypto/amcc/crypto4xx_core.h | 11 - drivers/crypto/amcc/crypto4xx_reg_def.h | 11 - drivers/crypto/amlogic/amlogic-gxl-core.c | 2 +- drivers/crypto/atmel-ecc.c | 2 +- drivers/crypto/atmel-sha204a.c | 31 +- drivers/crypto/caam/caamalg.c | 12 +- drivers/crypto/caam/caamalg_qi.c | 12 +- drivers/crypto/caam/caamalg_qi2.c | 12 +- drivers/crypto/caam/caamhash.c | 4 +- drivers/crypto/caam/key_gen.c | 4 +- drivers/crypto/cavium/cpt/cptvf_reqmanager.c | 4 +- drivers/crypto/ccp/sev-dev.c | 3 +- drivers/crypto/hisilicon/Kconfig | 1 - drivers/crypto/hisilicon/qm.c | 4 +- drivers/crypto/hisilicon/trng/trng.c | 298 +---- drivers/crypto/marvell/octeontx/otx_cptvf_reqmgr.c | 4 +- drivers/crypto/qat/qat_common/adf_accel_devices.h | 2 + drivers/crypto/qat/qat_common/adf_aer.c | 7 +- drivers/crypto/qat/qat_common/adf_common_drv.h | 2 + drivers/crypto/qat/qat_common/adf_isr.c | 39 + drivers/crypto/qat/qat_common/adf_sriov.c | 20 +- drivers/crypto/qat/qat_common/qat_asym_algs.c | 10 +- drivers/crypto/talitos.c | 221 +++- drivers/crypto/talitos.h | 2 + drivers/dax/kmem.c | 6 + drivers/dma-buf/udmabuf.c | 5 +- drivers/dma/dmaengine.c | 3 +- drivers/dma/dw-edma/dw-edma-core.h | 2 +- drivers/dma/dw-edma/dw-edma-v0-core.c | 6 + drivers/dma/imx-sdma.c | 4 +- drivers/dma/qcom/gpi.c | 1 + drivers/dma/tegra186-gpc-dma.c | 7 + drivers/edac/i10nm_base.c | 14 +- drivers/edac/skx_common.c | 3 + drivers/firmware/arm_scmi/power.c | 6 +- drivers/firmware/arm_scmi/sensors.c | 2 +- drivers/firmware/efi/efi.c | 1 + drivers/firmware/efi/vars.c | 12 + drivers/fpga/microchip-spi.c | 3 + drivers/gpio/gpio-eic-sprd.c | 8 +- drivers/gpio/gpio-f7188x.c | 6 +- drivers/gpio/gpio-htc-egpio.c | 6 +- drivers/gpio/gpio-mvebu.c | 5 +- drivers/gpio/gpio-palmas.c | 19 + drivers/gpio/gpio-sch.c | 32 +- drivers/gpio/gpio-timberdale.c | 2 +- drivers/gpu/drm/amd/amdgpu/amdgpu_amdkfd_gpuvm.c | 16 +- drivers/gpu/drm/amd/amdgpu/amdgpu_device.c | 6 +- drivers/gpu/drm/amd/amdgpu/amdgpu_gem.c | 25 +- drivers/gpu/drm/amd/amdgpu/amdgpu_irq.c | 2 - drivers/gpu/drm/amd/amdkfd/kfd_chardev.c | 3 + drivers/gpu/drm/amd/amdkfd/kfd_events.c | 5 + drivers/gpu/drm/amd/amdkfd/kfd_svm.c | 1 + .../amd/display/modules/info_packet/info_packet.c | 2 + drivers/gpu/drm/drm_edid.c | 8 + drivers/gpu/drm/hisilicon/hibmc/hibmc_drm_de.c | 78 +- drivers/gpu/drm/hisilicon/hibmc/hibmc_drm_drv.c | 11 + drivers/gpu/drm/hisilicon/hibmc/hibmc_drm_vdac.c | 22 - drivers/gpu/drm/i915/gt/intel_region_lmem.c | 2 +- drivers/gpu/drm/msm/dp/dp_display.c | 4 +- drivers/gpu/drm/msm/dp/dp_reg.h | 4 +- .../gpu/drm/nouveau/nvkm/subdev/bios/shadowramin.c | 3 +- drivers/gpu/drm/radeon/radeon_ring.c | 4 +- drivers/gpu/drm/tegra/dc.c | 4 +- drivers/gpu/drm/tegra/gem.c | 22 +- drivers/gpu/drm/tegra/submit.c | 3 +- drivers/gpu/drm/tidss/tidss_kms.c | 2 - drivers/gpu/host1x/bus.c | 62 +- drivers/gpu/host1x/job.c | 10 +- drivers/hid/hid-appleir.c | 45 +- drivers/hid/hid-core.c | 7 + drivers/hid/hid-letsketch.c | 36 +- drivers/hid/hid-lg-g15.c | 16 + drivers/hid/hid-logitech-hidpp.c | 1 - drivers/hid/hid-multitouch.c | 32 +- drivers/hid/hid-picolcd_core.c | 3 +- drivers/hid/hid-sensor-hub.c | 77 +- drivers/hid/wacom_sys.c | 12 +- drivers/hwmon/Kconfig | 1 + drivers/hwmon/asus_atk0110.c | 3 + drivers/hwmon/occ/common.c | 34 +- drivers/hwmon/occ/common.h | 1 + drivers/hwmon/pmbus/adm1275.c | 2 +- drivers/hwmon/w83627hf.c | 4 + drivers/hwmon/w83793.c | 1 + drivers/hwspinlock/qcom_hwspinlock.c | 5 +- .../hwtracing/coresight/coresight-cti-platform.c | 1 + drivers/hwtracing/coresight/coresight-etb10.c | 6 +- drivers/hwtracing/coresight/coresight-etm4x-core.c | 4 +- drivers/i2c/busses/i2c-mlxbf.c | 4 +- drivers/i2c/busses/i2c-mt65xx.c | 2 +- drivers/i2c/busses/i2c-stm32f7.c | 9 +- drivers/i2c/i2c-core-base.c | 85 +- drivers/i3c/master.c | 19 +- drivers/iio/accel/bmc150-accel-core.c | 2 + drivers/iio/accel/kxsd9.c | 5 +- drivers/iio/accel/mma8452.c | 2 + drivers/iio/adc/lpc32xx_adc.c | 4 +- drivers/iio/adc/spear_adc.c | 3 +- drivers/iio/adc/ti-ads124s08.c | 3 +- drivers/iio/adc/xilinx-ams.c | 5 + drivers/iio/chemical/scd30_core.c | 19 +- drivers/iio/common/Kconfig | 1 + drivers/iio/common/Makefile | 1 + drivers/iio/common/inv_sensors/Kconfig | 7 + drivers/iio/common/inv_sensors/Makefile | 6 + .../inv_sensors/inv_sensors_timestamp.c} | 120 +- drivers/iio/common/st_sensors/st_sensors_core.c | 23 +- drivers/iio/gyro/bmg160_core.c | 16 +- drivers/iio/imu/adis_trigger.c | 2 +- drivers/iio/imu/bmi160/bmi160_core.c | 3 +- drivers/iio/imu/inv_icm42600/Kconfig | 1 + drivers/iio/imu/inv_icm42600/Makefile | 1 - drivers/iio/imu/inv_icm42600/inv_icm42600_accel.c | 35 +- drivers/iio/imu/inv_icm42600/inv_icm42600_buffer.c | 61 +- drivers/iio/imu/inv_icm42600/inv_icm42600_buffer.h | 3 + drivers/iio/imu/inv_icm42600/inv_icm42600_core.c | 24 +- drivers/iio/imu/inv_icm42600/inv_icm42600_gyro.c | 35 +- .../iio/imu/inv_icm42600/inv_icm42600_timestamp.h | 85 -- drivers/iio/imu/inv_mpu6050/Kconfig | 1 + drivers/iio/imu/inv_mpu6050/inv_mpu_core.c | 30 +- drivers/iio/imu/inv_mpu6050/inv_mpu_iio.h | 18 +- drivers/iio/imu/inv_mpu6050/inv_mpu_ring.c | 85 +- drivers/iio/imu/inv_mpu6050/inv_mpu_trigger.c | 11 +- drivers/iio/imu/st_lsm6dsx/st_lsm6dsx_core.c | 21 +- drivers/iio/industrialio-event.c | 5 +- drivers/iio/light/al3010.c | 2 +- drivers/iio/light/gp2ap002.c | 2 +- drivers/iio/light/opt3001.c | 6 +- drivers/iio/light/si1133.c | 14 +- drivers/iio/light/tsl2591.c | 6 +- drivers/iio/light/veml6030.c | 8 +- drivers/iio/magnetometer/ak8975.c | 15 + drivers/iio/orientation/hid-sensor-rotation.c | 40 +- drivers/iio/temperature/ltc2983.c | 5 +- drivers/infiniband/core/cm.c | 13 +- drivers/infiniband/core/counters.c | 2 +- drivers/infiniband/hw/hns/hns_roce_hem.c | 8 +- drivers/infiniband/hw/hns/hns_roce_main.c | 2 +- drivers/infiniband/hw/irdma/verbs.c | 18 +- drivers/infiniband/hw/irdma/verbs.h | 1 - drivers/infiniband/hw/mlx4/mlx4_ib.h | 1 + drivers/infiniband/hw/mlx4/mr.c | 9 +- drivers/infiniband/hw/mlx4/sysfs.c | 45 +- drivers/infiniband/hw/mlx5/devx.c | 30 +- drivers/infiniband/hw/mlx5/main.c | 2 +- drivers/infiniband/hw/mlx5/mr.c | 17 +- drivers/infiniband/hw/mlx5/qp.c | 12 +- drivers/infiniband/sw/rxe/rxe_resp.c | 33 +- drivers/infiniband/sw/siw/siw_qp_rx.c | 9 + drivers/infiniband/ulp/rtrs/rtrs-srv.c | 5 +- drivers/infiniband/ulp/srpt/ib_srpt.c | 5 +- drivers/input/joystick/iforce/iforce-packets.c | 18 +- drivers/input/joystick/maplecontrol.c | 3 +- drivers/input/keyboard/maple_keyb.c | 4 +- drivers/input/misc/ims-pcu.c | 117 +- drivers/input/mouse/elan_i2c_core.c | 36 +- drivers/input/mouse/maplemouse.c | 9 +- drivers/input/rmi4/rmi_bus.c | 4 +- drivers/input/rmi4/rmi_f30.c | 2 +- drivers/input/rmi4/rmi_f3a.c | 2 +- drivers/input/touchscreen/goodix.c | 3 +- drivers/input/touchscreen/mms114.c | 2 +- drivers/input/touchscreen/touchwin.c | 15 +- drivers/iommu/amd/amd_iommu_types.h | 11 +- drivers/irqchip/irq-crossbar.c | 10 +- drivers/irqchip/irq-gic-v3-its.c | 6 +- drivers/irqchip/irq-ts4800.c | 10 + drivers/leds/uleds.c | 3 +- drivers/mailbox/mtk-adsp-mailbox.c | 9 +- drivers/md/dm-bufio.c | 4 +- drivers/md/dm-era-target.c | 10 +- drivers/md/dm-ioctl.c | 7 +- drivers/md/dm-log.c | 3 + drivers/md/dm-stats.c | 10 +- drivers/md/dm-thin-metadata.c | 67 +- drivers/md/dm-verity-loadpin.c | 2 +- drivers/md/dm-verity-target.c | 2 +- drivers/md/raid1.c | 6 + drivers/md/raid10.c | 1 + drivers/media/platform/qcom/venus/helpers.c | 4 +- .../media/platform/qcom/venus/hfi_platform_v4.c | 20 +- .../media/platform/qcom/venus/hfi_platform_v6.c | 16 +- drivers/media/platform/rockchip/rga/rga-hw.c | 2 +- drivers/media/platform/rockchip/rga/rga-hw.h | 2 +- drivers/media/usb/uvc/uvc_video.c | 30 +- drivers/memstick/core/ms_block.c | 4 + drivers/mfd/cros_ec_dev.c | 3 +- drivers/mfd/sm501.c | 4 +- drivers/mfd/tps6586x.c | 2 +- drivers/mmc/host/vub300.c | 26 +- drivers/mtd/devices/mchp23k256.c | 2 +- drivers/mtd/devices/slram.c | 22 +- drivers/mtd/maps/vmu-flash.c | 1 + drivers/mtd/nand/onenand/onenand_samsung.c | 7 +- drivers/mtd/nand/raw/fsl_ifc_nand.c | 9 +- drivers/mtd/nand/raw/lpc32xx_mlc.c | 12 +- drivers/mtd/nand/raw/lpc32xx_slc.c | 12 +- drivers/mtd/nand/raw/nand_base.c | 2 +- drivers/mtd/nand/raw/pl35x-nand-controller.c | 2 +- drivers/mtd/spi-nor/Kconfig | 1 - drivers/mtd/spi-nor/swp.c | 11 +- drivers/net/amt.c | 6 +- drivers/net/bonding/bond_3ad.c | 1 + drivers/net/can/usb/esd_usb.c | 5 +- drivers/net/dsa/sja1105/sja1105_ptp.c | 2 +- drivers/net/ethernet/amazon/ena/ena_netdev.c | 23 +- drivers/net/ethernet/broadcom/bnx2x/bnx2x_cmn.c | 3 +- drivers/net/ethernet/broadcom/genet/bcmgenet.c | 23 +- .../ethernet/cavium/liquidio/cn23xx_pf_device.c | 18 +- drivers/net/ethernet/chelsio/cxgb4/t4_hw.c | 8 - .../net/ethernet/freescale/dpaa2/dpaa2-switch.c | 2 +- drivers/net/ethernet/freescale/enetc/enetc.c | 7 + drivers/net/ethernet/freescale/fman/fman.c | 4 +- drivers/net/ethernet/freescale/gianfar.c | 16 +- drivers/net/ethernet/intel/ice/ice_common.c | 1 - drivers/net/ethernet/intel/ice/ice_ethtool.c | 12 +- drivers/net/ethernet/intel/ice/ice_vf_lib.c | 2 +- drivers/net/ethernet/marvell/mvneta.c | 3 + drivers/net/ethernet/marvell/octeontx2/af/mcs.c | 6 +- .../ethernet/marvell/octeontx2/af/rvu_debugfs.c | 3 +- .../net/ethernet/marvell/octeontx2/af/rvu_nix.c | 4 +- .../ethernet/marvell/octeontx2/nic/cn10k_macsec.c | 10 +- .../net/ethernet/marvell/octeontx2/nic/otx2_pf.c | 44 +- .../net/ethernet/marvell/prestera/prestera_main.c | 2 +- .../ethernet/mellanox/mlx5/core/en/hv_vhca_stats.c | 29 +- .../ethernet/mellanox/mlx5/core/en_accel/macsec.c | 47 +- .../net/ethernet/mellanox/mlx5/core/lib/hv_vhca.c | 8 +- .../net/ethernet/mellanox/mlx5/core/lib/hv_vhca.h | 6 +- .../net/ethernet/mellanox/mlx5/core/lib/port_tun.c | 3 +- drivers/net/ethernet/mellanox/mlx5/core/main.c | 12 +- .../net/ethernet/mellanox/mlxsw/spectrum_router.c | 1 + drivers/net/ethernet/microchip/lan743x_main.c | 2 +- .../ethernet/microchip/sparx5/sparx5_switchdev.c | 4 +- drivers/net/ethernet/microsoft/mana/gdma_main.c | 2 + drivers/net/ethernet/microsoft/mana/mana_en.c | 3 +- drivers/net/ethernet/qlogic/qede/qede_fp.c | 9 +- drivers/net/ethernet/qualcomm/rmnet/rmnet_config.c | 5 + drivers/net/ethernet/qualcomm/rmnet/rmnet_config.h | 20 + .../net/ethernet/qualcomm/rmnet/rmnet_handlers.c | 23 +- drivers/net/ethernet/qualcomm/rmnet/rmnet_map.h | 7 + .../net/ethernet/qualcomm/rmnet/rmnet_map_data.c | 269 +++- drivers/net/ethernet/qualcomm/rmnet/rmnet_vnd.c | 9 +- drivers/net/ethernet/qualcomm/rmnet/rmnet_vnd.h | 1 + drivers/net/ethernet/sun/sungem.c | 13 +- drivers/net/ieee802154/ca8210.c | 9 +- drivers/net/macsec.c | 9 +- drivers/net/phy/sfp.c | 1 + drivers/net/usb/gl620a.c | 6 +- drivers/net/usb/kalmia.c | 8 + drivers/net/usb/lan78xx.c | 318 ++--- drivers/net/usb/net1080.c | 2 +- drivers/net/veth.c | 2 + drivers/net/virtio_net.c | 55 +- drivers/net/vxlan/vxlan_core.c | 8 +- drivers/net/wan/ixp4xx_hss.c | 4 +- drivers/net/wireless/ath/ath9k/xmit.c | 5 + drivers/net/wireless/ath/wcn36xx/smd.c | 13 + drivers/net/wireless/marvell/mwifiex/join.c | 1 - drivers/net/wireless/mediatek/mt76/mac80211.c | 2 +- drivers/net/wireless/ralink/rt2x00/rt2x00dev.c | 12 +- drivers/net/wireless/realtek/rtw88/pci.c | 5 + drivers/net/wwan/iosm/iosm_ipc_mux_codec.c | 40 +- drivers/net/wwan/t7xx/t7xx_hif_cldma.c | 3 + drivers/ntb/hw/epf/ntb_hw_epf.c | 89 +- drivers/nvdimm/btt.c | 14 +- drivers/nvdimm/nd.h | 11 +- drivers/nvdimm/region_devs.c | 66 +- drivers/nvme/host/core.c | 2 +- drivers/nvme/host/multipath.c | 6 + drivers/nvme/target/fabrics-cmd.c | 4 +- drivers/nvme/target/rdma.c | 18 +- drivers/nvme/target/tcp.c | 34 +- drivers/pci/Makefile | 2 +- drivers/pci/controller/dwc/pci-imx6.c | 5 +- drivers/pci/controller/dwc/pcie-designware-host.c | 2 +- .../pci/controller/mobiveil/pcie-mobiveil-host.c | 8 +- drivers/pci/controller/pci-host-common.c | 4 + drivers/pci/controller/pci-loongson.c | 31 +- drivers/pci/controller/pcie-altera-msi.c | 2 +- drivers/pci/controller/pcie-altera.c | 32 +- drivers/pci/controller/pcie-iproc-bcma.c | 2 +- drivers/pci/controller/pcie-iproc-platform.c | 2 +- drivers/pci/controller/pcie-iproc.c | 1 - drivers/pci/controller/pcie-iproc.h | 2 - drivers/pci/controller/pcie-mediatek-gen3.c | 4 +- drivers/pci/controller/pcie-mediatek.c | 132 +- drivers/pci/controller/pcie-rcar-host.c | 1 - drivers/pci/controller/pcie-xilinx-nwl.c | 2 +- drivers/pci/endpoint/functions/pci-epf-ntb.c | 21 +- drivers/pci/endpoint/functions/pci-epf-vntb.c | 9 +- drivers/pci/msi/msi.c | 4 +- drivers/pci/pci-sysfs.c | 14 +- drivers/pci/pci.c | 139 --- drivers/pci/pci.h | 7 + drivers/pci/rebar.c | 218 ++++ drivers/pci/rom.c | 149 ++- drivers/pci/setup-bus.c | 104 +- drivers/pci/setup-res.c | 53 - drivers/phy/phy-can-transceiver.c | 3 + drivers/pinctrl/mediatek/pinctrl-mt8167.c | 2 +- drivers/pinctrl/mediatek/pinctrl-mt8516.c | 2 +- drivers/pinctrl/meson/pinctrl-meson.c | 2 +- drivers/pinctrl/sunxi/pinctrl-sunxi.c | 2 +- drivers/platform/x86/xo15-ebook.c | 7 +- drivers/power/supply/charger-manager.c | 6 +- drivers/power/supply/cpcap-battery.c | 11 +- drivers/power/supply/power_supply_core.c | 11 +- drivers/pwm/pwm-imx27.c | 8 +- drivers/rapidio/devices/tsi721.c | 3 +- drivers/regulator/core.c | 29 +- drivers/regulator/ltc3676.c | 10 +- drivers/regulator/scmi-regulator.c | 6 +- drivers/reset/reset-sunxi.c | 4 +- drivers/rpmsg/rpmsg_char.c | 12 +- drivers/rtc/rtc-abx80x.c | 3 +- drivers/rtc/rtc-cmos.c | 6 + drivers/rtc/rtc-ds1307.c | 30 +- drivers/rtc/rtc-mpfs.c | 2 +- drivers/rtc/rtc-msc313.c | 4 +- drivers/s390/char/monwriter.c | 3 + drivers/scsi/elx/efct/efct_hw.c | 2 + drivers/scsi/elx/efct/efct_unsol.c | 1 + drivers/scsi/hpsa.c | 4 + drivers/scsi/lpfc/lpfc_init.c | 3 +- drivers/scsi/pm8001/pm8001_ctl.c | 5 +- drivers/scsi/scsi_scan.c | 2 +- drivers/scsi/scsi_transport_sas.c | 101 +- drivers/scsi/sg.c | 7 +- drivers/scsi/smartpqi/smartpqi_init.c | 2 +- drivers/slimbus/qcom-ctrl.c | 5 +- drivers/slimbus/qcom-ngd-ctrl.c | 100 +- drivers/soc/fsl/qe/qe.c | 3 + drivers/soc/ti/k3-ringacc.c | 4 +- drivers/spi/spi-dw.h | 1 + drivers/spi/spi-ep93xx.c | 1 + drivers/spi/spi-fsl-lpspi.c | 18 +- drivers/spi/spi-rpc-if.c | 6 +- drivers/spi/spi-sh-msiof.c | 10 +- drivers/spi/spi-uniphier.c | 4 +- drivers/spi/spi-xilinx.c | 11 +- drivers/staging/media/atomisp/pci/atomisp_cmd.c | 6 +- drivers/staging/media/atomisp/pci/sh_css.c | 6 +- drivers/staging/media/ipu3/ipu3-css-params.c | 8 +- drivers/staging/media/sunxi/cedrus/cedrus.c | 4 +- drivers/staging/most/video/video.c | 7 +- drivers/staging/nvec/nvec.c | 4 +- drivers/staging/rtl8723bs/core/rtw_ieee80211.c | 93 +- drivers/staging/rtl8723bs/core/rtw_mlme_ext.c | 20 +- drivers/staging/rtl8723bs/core/rtw_security.c | 2 +- drivers/staging/rtl8723bs/core/rtw_wlan_util.c | 23 +- drivers/staging/rtl8723bs/os_dep/ioctl_cfg80211.c | 88 +- drivers/staging/vme_user/vme_fake.c | 8 + drivers/staging/vme_user/vme_tsi148.c | 8 + drivers/staging/vme_user/vme_user.c | 22 + drivers/target/iscsi/iscsi_target_auth.c | 6 +- drivers/target/target_core_fabric_lib.c | 89 +- drivers/target/target_core_internal.h | 3 +- drivers/target/target_core_pr.c | 12 +- drivers/thermal/intel/therm_throt.c | 7 +- drivers/thermal/thermal_hwmon.c | 5 +- drivers/tty/serial/8250/8250_mid.c | 31 +- drivers/tty/serial/8250/8250_omap.c | 3 +- drivers/tty/serial/msm_serial.c | 3 +- drivers/usb/atm/ueagle-atm.c | 36 +- drivers/usb/cdns3/cdnsp-mem.c | 2 + drivers/usb/class/cdc-acm.c | 3 + drivers/usb/common/ulpi.c | 23 +- drivers/usb/core/quirks.c | 6 + drivers/usb/dwc3/dwc3-meson-g12a.c | 14 +- drivers/usb/dwc3/gadget.c | 43 +- drivers/usb/gadget/composite.c | 5 +- drivers/usb/gadget/function/f_fs.c | 5 +- drivers/usb/gadget/function/rndis.c | 20 +- drivers/usb/gadget/udc/core.c | 29 +- drivers/usb/host/max3421-hcd.c | 8 + drivers/usb/host/sl811-hcd.c | 1 + drivers/usb/host/xhci.c | 11 +- drivers/usb/misc/chaoskey.c | 1 - drivers/usb/misc/idmouse.c | 45 +- drivers/usb/misc/iowarrior.c | 21 +- drivers/usb/misc/ldusb.c | 38 +- drivers/usb/misc/legousbtower.c | 37 +- drivers/usb/misc/uss720.c | 5 +- drivers/usb/mtu3/mtu3_gadget.c | 1 + drivers/usb/serial/digi_acceleport.c | 43 +- drivers/usb/serial/keyspan_pda.c | 2 +- drivers/usb/serial/option.c | 16 + drivers/usb/storage/ene_ub6250.c | 3 +- drivers/usb/storage/usb.c | 2 +- drivers/usb/typec/anx7411.c | 4 +- drivers/usb/typec/class.c | 1 + drivers/usb/typec/tcpm/tcpm.c | 7 +- drivers/usb/typec/ucsi/displayport.c | 7 +- drivers/usb/typec/ucsi/ucsi.c | 20 + drivers/usb/typec/ucsi/ucsi.h | 1 + drivers/usb/typec/ucsi/ucsi_acpi.c | 10 +- drivers/usb/typec/ucsi/ucsi_ccg.c | 2 +- drivers/usb/usbip/vudc.h | 1 - drivers/usb/usbip/vudc_dev.c | 4 +- drivers/vdpa/vdpa_user/vduse_dev.c | 72 +- drivers/vfio/pci/mlx5/cmd.h | 13 +- drivers/vfio/pci/vfio_pci_core.c | 37 +- drivers/vhost/net.c | 15 +- drivers/vhost/vdpa.c | 29 +- drivers/video/fbdev/aty/radeon_base.c | 1 + drivers/video/fbdev/broadsheetfb.c | 8 +- drivers/video/fbdev/carminefb.c | 1 + drivers/video/fbdev/core/fbcon.c | 14 +- drivers/video/fbdev/hecubafb.c | 6 +- drivers/video/fbdev/i740fb.c | 1 + drivers/video/fbdev/metronomefb.c | 8 +- drivers/video/fbdev/nvidia/nvidia.c | 1 + drivers/video/fbdev/s3fb.c | 1 + drivers/video/fbdev/sm501fb.c | 16 +- drivers/video/fbdev/sm712.h | 2 +- drivers/video/fbdev/tdfxfb.c | 1 + drivers/video/fbdev/tridentfb.c | 1 + drivers/video/fbdev/uvesafb.c | 4 +- drivers/virtio/virtio_mmio.c | 26 +- drivers/virtio/virtio_ring.c | 196 +++ drivers/watchdog/apple_wdt.c | 1 + drivers/watchdog/sp5100_tco.c | 3 +- drivers/watchdog/sprd_wdt.c | 5 +- drivers/watchdog/watchdog_core.c | 3 + drivers/xen/gntdev.c | 8 +- drivers/xen/xen-scsiback.c | 30 +- fs/afs/cell.c | 2 + fs/afs/cmservice.c | 2 - fs/afs/fs_operation.c | 2 +- fs/afs/rxrpc.c | 11 +- fs/afs/super.c | 3 +- fs/afs/vl_list.c | 10 +- fs/afs/volume.c | 2 +- fs/btrfs/ctree.h | 2 + fs/btrfs/extent-tree.c | 17 +- fs/btrfs/file.c | 12 +- fs/btrfs/inode.c | 149 ++- fs/btrfs/ordered-data.c | 12 + fs/btrfs/ordered-data.h | 2 + fs/btrfs/reflink.c | 5 +- fs/btrfs/super.c | 3 +- fs/configfs/dir.c | 57 +- fs/efivarfs/super.c | 45 +- fs/efs/file.c | 21 +- fs/eventpoll.c | 152 +-- fs/exfat/dir.c | 13 +- fs/ext4/ioctl.c | 12 +- fs/f2fs/checkpoint.c | 14 +- fs/f2fs/data.c | 45 +- fs/f2fs/f2fs.h | 1 + fs/f2fs/inode.c | 13 +- fs/f2fs/segment.c | 8 + fs/f2fs/xattr.c | 7 +- fs/fs-writeback.c | 133 +- fs/fuse/cuse.c | 4 +- fs/fuse/dev.c | 2 +- fs/hfs/bfind.c | 2 +- fs/hfs/bnode.c | 56 +- fs/hfs/brec.c | 2 +- fs/hfs/btree.c | 2 +- fs/hfs/btree.h | 71 +- fs/hfs/hfs_fs.h | 88 +- fs/hfs/inode.c | 3 +- fs/hfsplus/bfind.c | 2 +- fs/hfsplus/bnode.c | 62 +- fs/hfsplus/brec.c | 2 +- fs/hfsplus/btree.c | 2 +- fs/hfsplus/hfsplus_fs.h | 40 +- fs/isofs/rock.c | 11 + fs/jbd2/journal.c | 2 + fs/lockd/svcsubs.c | 4 +- fs/nfs/callback_proc.c | 9 +- fs/nfs/dir.c | 2 + fs/nfs/filelayout/filelayout.c | 2 + fs/nfs/flexfilelayout/flexfilelayout.c | 33 + fs/nfs/flexfilelayout/flexfilelayout.h | 16 + fs/nfs/pnfs.c | 4 +- fs/nfsd/nfs4layouts.c | 4 +- fs/nfsd/nfs4recover.c | 120 +- fs/nfsd/nfs4state.c | 22 +- fs/nfsd/vfs.c | 42 +- fs/nilfs2/segment.c | 22 + fs/ntfs3/fslog.c | 106 +- fs/ntfs3/index.c | 31 +- fs/ntfs3/lznt.c | 2 +- fs/ntfs3/namei.c | 2 +- fs/ntfs3/ntfs_fs.h | 3 +- fs/ntfs3/run.c | 9 +- fs/ocfs2/alloc.c | 2 +- fs/ocfs2/aops.c | 13 +- fs/ocfs2/buffer_head_io.c | 7 +- fs/ocfs2/dlm/dlmdebug.c | 16 +- fs/ocfs2/dlmglue.c | 17 + fs/ocfs2/inode.c | 150 ++- fs/ocfs2/journal.c | 13 +- fs/ocfs2/journal.h | 3 + fs/ocfs2/move_extents.c | 4 +- fs/ocfs2/ocfs2.h | 2 - fs/ocfs2/quota_local.c | 2 +- fs/ocfs2/stack_user.c | 10 +- fs/ocfs2/super.c | 2 - fs/ocfs2/sysfile.c | 9 +- fs/orangefs/dir.c | 7 +- fs/proc/array.c | 15 +- fs/proc/base.c | 184 ++- fs/proc/fd.c | 71 +- fs/proc/generic.c | 9 +- fs/proc/internal.h | 6 +- fs/proc/namespaces.c | 16 +- fs/proc/proc_net.c | 1 + fs/quota/dquot.c | 10 +- fs/smb/client/cifs_swn.c | 329 ++++- fs/smb/client/cifsacl.c | 2 +- fs/smb/client/cifsfs.c | 2 + fs/smb/client/cifsglob.h | 44 +- fs/smb/client/cifsproto.h | 10 +- fs/smb/client/connect.c | 38 +- fs/smb/client/dfs_cache.c | 2 +- fs/smb/client/fscache.c | 20 + fs/smb/client/ioctl.c | 12 +- fs/smb/client/misc.c | 23 +- fs/smb/client/sess.c | 69 +- fs/smb/client/smb2misc.c | 62 +- fs/smb/client/smb2ops.c | 55 +- fs/smb/client/smb2pdu.c | 92 +- fs/smb/client/smb2transport.c | 2 + fs/smb/client/trace.h | 95 +- fs/smb/client/transport.c | 2 +- fs/smb/common/cifsglob.h | 61 + fs/smb/server/connection.c | 49 +- fs/smb/server/connection.h | 3 + fs/smb/server/oplock.c | 10 +- fs/smb/server/smb2misc.c | 2 +- fs/smb/server/smb2ops.c | 28 +- fs/smb/server/smb2pdu.c | 152 ++- fs/smb/server/smb_common.h | 43 +- fs/smb/server/vfs.c | 22 +- fs/smb/server/vfs_cache.c | 31 +- fs/smb/server/vfs_cache.h | 3 + fs/sysfs/file.c | 4 + fs/udf/balloc.c | 5 +- fs/udf/super.c | 11 +- fs/userfaultfd.c | 14 +- fs/xfs/xfs_dquot.c | 16 +- fs/xfs/xfs_log_recover.c | 15 +- fs/xfs/xfs_reflink.c | 36 + include/crypto/drbg.h | 18 +- include/dt-bindings/power/fsl,imx93-power.h | 1 + include/linux/audit.h | 8 + include/linux/backing-dev-defs.h | 4 + include/linux/bitops.h | 2 + include/linux/bpf.h | 3 + include/linux/bpf_local_storage.h | 3 - include/linux/damon.h | 8 +- include/linux/device.h | 5 +- include/linux/efi.h | 11 + include/linux/f2fs_fs.h | 3 + include/linux/file.h | 2 + include/linux/fwnode.h | 2 + include/linux/glob.h | 1 + include/linux/hid-sensor-hub.h | 25 + include/linux/hid.h | 29 + include/linux/host1x.h | 7 + include/linux/iio/common/inv_sensors_timestamp.h | 94 ++ include/linux/jiffies.h | 13 + include/linux/pci.h | 4 +- include/linux/seqlock.h | 110 ++ include/linux/sunrpc/xprt.h | 2 + include/linux/vfio_pci_core.h | 24 +- include/linux/virtio.h | 18 + include/linux/vmalloc.h | 4 +- include/linux/writeback.h | 2 + include/net/addrconf.h | 10 +- include/net/bluetooth/hci.h | 19 +- include/net/bluetooth/hci_core.h | 9 +- include/net/bluetooth/l2cap.h | 54 +- include/net/fib_rules.h | 5 + include/net/gue.h | 2 +- include/net/ip_fib.h | 7 +- include/net/ip_vs.h | 3 +- include/net/netfilter/nf_queue.h | 1 + include/net/rtnetlink.h | 2 + include/net/sctp/sctp.h | 3 +- include/net/sock.h | 2 +- include/net/xfrm.h | 22 +- include/sound/asequencer.h | 4 + include/sound/seq_kernel.h | 8 + include/uapi/linux/bpf.h | 1 + include/uapi/linux/xfrm.h | 6 + include/uapi/sound/asequencer.h | 54 +- io_uring/io-wq.c | 2 +- kernel/audit.c | 85 +- kernel/bpf/bpf_lsm.c | 34 +- kernel/bpf/cgroup.c | 2 +- kernel/bpf/core.c | 2 +- kernel/bpf/devmap.c | 19 + kernel/bpf/hashtab.c | 21 +- kernel/bpf/helpers.c | 12 +- kernel/bpf/inode.c | 13 +- kernel/bpf/lpm_trie.c | 10 +- kernel/bpf/syscall.c | 5 +- kernel/bpf/verifier.c | 3 +- kernel/cgroup/cpuset.c | 7 +- kernel/cpu.c | 20 +- kernel/module/decompress.c | 2 + kernel/sched/core.c | 1 + kernel/sched/fair.c | 2 +- kernel/sched/features.h | 8 + kernel/time/posix-cpu-timers.c | 3 +- kernel/time/time.c | 2 +- kernel/trace/bpf_trace.c | 11 +- kernel/trace/ring_buffer.c | 3 +- kernel/trace/trace_eprobe.c | 2 +- kernel/trace/trace_events_filter.c | 6 +- kernel/trace/trace_probe.c | 3 +- kernel/trace/trace_probe.h | 2 +- kernel/workqueue.c | 2 +- lib/debugobjects.c | 17 + lib/glob.c | 31 +- lib/test_meminit.c | 2 +- mm/backing-dev.c | 5 + mm/damon/core.c | 2 +- mm/damon/ops-common.c | 1 + mm/damon/reclaim.c | 2 +- mm/damon/sysfs.c | 9 +- mm/shrinker_debug.c | 30 +- mm/vmscan.c | 6 +- net/6lowpan/nhc.c | 2 +- net/9p/client.c | 2 + net/9p/trans_rdma.c | 19 +- net/atm/common.c | 2 + net/batman-adv/distributed-arp-table.c | 30 +- net/batman-adv/fragmentation.c | 8 +- net/batman-adv/gateway_client.c | 3 +- net/batman-adv/main.c | 13 +- net/batman-adv/routing.c | 3 +- net/batman-adv/soft-interface.c | 17 +- net/batman-adv/soft-interface.h | 2 + net/batman-adv/translation-table.c | 5 +- net/bluetooth/6lowpan.c | 35 +- net/bluetooth/Kconfig | 8 - net/bluetooth/Makefile | 1 - net/bluetooth/a2mp.c | 1054 ---------------- net/bluetooth/a2mp.h | 154 --- net/bluetooth/af_bluetooth.c | 17 +- net/bluetooth/amp.c | 591 --------- net/bluetooth/amp.h | 61 - net/bluetooth/bnep/core.c | 27 +- net/bluetooth/eir.c | 8 +- net/bluetooth/hci_codec.c | 2 +- net/bluetooth/hci_conn.c | 60 +- net/bluetooth/hci_core.c | 65 +- net/bluetooth/hci_event.c | 66 +- net/bluetooth/hci_sync.c | 24 + net/bluetooth/iso.c | 16 +- net/bluetooth/l2cap_core.c | 1306 +++----------------- net/bluetooth/l2cap_sock.c | 125 +- net/bluetooth/mgmt.c | 75 +- net/bluetooth/msft.c | 2 +- net/bluetooth/sco.c | 62 +- net/bluetooth/smp.c | 27 +- net/bridge/br_cfm.c | 6 + net/bridge/br_cfm_netlink.c | 4 +- net/bridge/br_if.c | 3 + net/bridge/br_stp.c | 3 +- net/bridge/netfilter/ebtables.c | 22 +- net/bridge/netfilter/nft_meta_bridge.c | 4 +- net/can/bcm.c | 127 +- net/can/isotp.c | 9 +- net/core/fib_rules.c | 6 +- net/core/filter.c | 28 +- net/core/flow_dissector.c | 12 +- net/core/lwt_bpf.c | 12 + net/core/rtnetlink.c | 8 + net/core/skbuff.c | 23 +- net/dsa/tag_ksz.c | 18 +- net/ieee802154/core.c | 2 +- net/ieee802154/header_ops.c | 9 +- net/ieee802154/ieee802154.h | 17 + net/ieee802154/netlink.c | 36 +- net/ife/ife.c | 2 +- net/ipv4/esp4_offload.c | 2 +- net/ipv4/igmp.c | 1 + net/ipv4/ip_gre.c | 6 + net/ipv4/ip_output.c | 4 +- net/ipv4/ip_vti.c | 3 + net/ipv4/ipip.c | 3 + net/ipv4/netfilter/nf_reject_ipv4.c | 2 +- net/ipv4/sysctl_net_ipv4.c | 10 +- net/ipv4/tcp_output.c | 4 +- net/ipv6/addrconf.c | 23 +- net/ipv6/esp6_offload.c | 2 +- net/ipv6/ip6_gre.c | 6 + net/ipv6/ip6_vti.c | 3 + net/ipv6/mcast.c | 165 ++- net/ipv6/netfilter.c | 4 +- net/ipv6/netfilter/ip6t_ah.c | 5 + net/ipv6/netfilter/ip6t_hbh.c | 1 + net/ipv6/netfilter/ip6t_rt.c | 3 +- net/ipv6/netfilter/nf_conntrack_reasm.c | 3 +- net/ipv6/route.c | 9 +- net/ipv6/seg6.c | 3 + net/ipv6/sit.c | 3 + net/kcm/kcmsock.c | 8 +- net/key/af_key.c | 1 + net/llc/af_llc.c | 1 + net/llc/llc_conn.c | 1 - net/mac80211/main.c | 3 +- net/mac80211/tx.c | 17 +- net/mac802154/iface.c | 2 +- net/netfilter/ipset/ip_set_core.c | 12 +- net/netfilter/ipset/ip_set_hash_gen.h | 67 +- net/netfilter/ipvs/ip_vs_app.c | 10 +- net/netfilter/ipvs/ip_vs_conn.c | 4 +- net/netfilter/ipvs/ip_vs_core.c | 36 +- net/netfilter/ipvs/ip_vs_proto_sctp.c | 18 +- net/netfilter/ipvs/ip_vs_proto_tcp.c | 11 +- net/netfilter/ipvs/ip_vs_proto_udp.c | 3 +- net/netfilter/nf_conncount.c | 23 +- net/netfilter/nf_conntrack_core.c | 18 +- net/netfilter/nf_conntrack_ecache.c | 2 +- net/netfilter/nf_conntrack_irc.c | 6 +- net/netfilter/nf_conntrack_netlink.c | 2 +- net/netfilter/nf_conntrack_seqadj.c | 2 + net/netfilter/nf_nat_core.c | 10 + net/netfilter/nf_nat_sip.c | 11 + net/netfilter/nf_queue.c | 14 + net/netfilter/nfnetlink_cthelper.c | 4 +- net/netfilter/nfnetlink_osf.c | 6 +- net/netfilter/nfnetlink_queue.c | 3 + net/netfilter/nft_log.c | 58 +- net/netfilter/nft_synproxy.c | 9 +- net/netfilter/xt_AUDIT.c | 58 +- net/netfilter/xt_cluster.c | 2 +- net/netfilter/xt_connmark.c | 14 +- net/netfilter/xt_nat.c | 9 + net/netfilter/xt_rateest.c | 2 +- net/netfilter/xt_u32.c | 12 +- net/openvswitch/conntrack.c | 2 +- net/openvswitch/flow_netlink.c | 201 ++- net/psample/psample.c | 6 +- net/qrtr/af_qrtr.c | 2 +- net/sched/act_bpf.c | 2 +- net/sched/act_pedit.c | 11 +- net/sched/cls_api.c | 3 + net/sched/cls_bpf.c | 10 +- net/sched/cls_flow.c | 12 +- net/sched/sch_cake.c | 5 +- net/sched/sch_codel.c | 48 +- net/sched/sch_drr.c | 8 +- net/sched/sch_fq_codel.c | 41 +- net/sched/sch_hfsc.c | 24 +- net/sched/sch_hhf.c | 27 + net/sched/sch_htb.c | 14 +- net/sched/sch_multiq.c | 2 +- net/sched/sch_teql.c | 126 +- net/sctp/diag.c | 67 +- net/sctp/sm_make_chunk.c | 10 +- net/sctp/sm_statefuns.c | 23 +- net/sctp/socket.c | 29 +- net/smc/smc_cdc.c | 15 +- net/socket.c | 2 +- net/sunrpc/xprt.c | 16 + net/sunrpc/xprtrdma/backchannel.c | 5 +- net/sunrpc/xprtrdma/frwr_ops.c | 2 +- net/sunrpc/xprtrdma/rpc_rdma.c | 172 ++- net/sunrpc/xprtrdma/transport.c | 85 +- net/sunrpc/xprtrdma/verbs.c | 167 ++- net/sunrpc/xprtrdma/xprt_rdma.h | 7 +- net/tipc/bcast.c | 22 +- net/tipc/bcast.h | 2 +- net/tipc/bearer.c | 1 + net/tipc/name_distr.c | 13 +- net/tipc/netlink.c | 12 + net/tipc/node.c | 15 +- net/tipc/socket.c | 3 + net/wireless/nl80211.c | 2 +- net/xfrm/xfrm_device.c | 3 + net/xfrm/xfrm_input.c | 6 +- net/xfrm/xfrm_interface_core.c | 3 + net/xfrm/xfrm_policy.c | 32 +- net/xfrm/xfrm_state.c | 2 +- net/xfrm/xfrm_user.c | 22 +- samples/trace_events/trace-events-sample.c | 4 + scripts/kconfig/conf.c | 6 +- security/apparmor/apparmorfs.c | 2 + security/apparmor/domain.c | 58 +- security/apparmor/label.c | 2 +- security/apparmor/net.c | 2 + security/apparmor/policy.c | 5 +- security/apparmor/procattr.c | 2 + security/integrity/evm/evm_secfs.c | 16 +- security/keys/keyring.c | 2 +- security/selinux/hooks.c | 19 +- sound/aoa/fabrics/layout.c | 6 + sound/core/init.c | 11 +- sound/core/seq/Kconfig | 7 + sound/core/seq/seq_clientmgr.c | 174 ++- sound/core/seq/seq_clientmgr.h | 2 + sound/core/seq/seq_compat.c | 1 + sound/core/seq/seq_memory.c | 10 +- sound/core/seq/seq_memory.h | 19 +- sound/core/seq/seq_midi.c | 55 +- sound/firewire/isight.c | 3 +- sound/isa/gus/gus_pcm.c | 2 + sound/pci/cmipci.c | 6 + sound/pci/es1938.c | 2 + sound/pci/ice1712/aureon.c | 2 + sound/pci/ice1712/ice1712.c | 8 + sound/pci/ice1712/ice1724.c | 6 + sound/pci/ymfpci/ymfpci_main.c | 6 + sound/soc/codecs/adau1372.c | 5 + sound/soc/codecs/hdac_hdmi.c | 4 +- sound/soc/codecs/tlv320aic3x.c | 25 +- sound/soc/fsl/fsl_asrc_dma.c | 20 + sound/soc/fsl/fsl_audmix.c | 6 + sound/soc/qcom/qdsp6/q6apm.c | 8 + sound/soc/sof/ipc3-control.c | 52 +- sound/soc/tegra/tegra210_ahub.c | 4 +- sound/usb/caiaq/input.c | 2 +- sound/usb/mixer_quirks.c | 101 +- sound/usb/mixer_scarlett.c | 4 +- sound/usb/mixer_us16x08.c | 127 +- sound/virtio/virtio_pcm.c | 3 +- sound/virtio/virtio_pcm_ops.c | 3 +- tools/bpf/bpftool/net.c | 4 +- tools/include/linux/bitops.h | 2 + tools/include/uapi/linux/bpf.h | 1 + tools/lib/api/fs/fs.c | 19 +- tools/lib/bpf/libbpf.c | 9 +- tools/lib/bpf/strset.c | 62 +- tools/lib/bpf/usdt.c | 16 +- tools/perf/util/probe-finder.c | 4 +- tools/power/x86/intel-speed-select/isst-daemon.c | 9 +- tools/testing/cxl/test/cxl.c | 8 +- tools/testing/cxl/test/mem.c | 4 +- .../selftests/bpf/progs/bpf_iter_task_vma.c | 2 +- tools/testing/selftests/vm/compaction_test.c | 3 + tools/testing/selftests/vm/hmm-tests.c | 63 +- tools/usb/usbip/libsrc/usbip_common.c | 2 + tools/usb/usbip/libsrc/usbip_device_driver.c | 4 + tools/usb/usbip/libsrc/vhci_driver.c | 1 + tools/virtio/linux/dma-mapping.h | 12 + tools/virtio/vringh_test.c | 5 + tools/vm/slabinfo.c | 4 +- virt/kvm/eventfd.c | 12 +- virt/kvm/kvm_main.c | 16 +- 956 files changed, 11461 insertions(+), 8860 deletions(-)

1 month, 2 weeks

[PATCH 6.18 0000/1624] 6.18.40-rc2 review

by Greg Kroah-Hartman

This is the start of the stable review cycle for the 6.18.40 release. There are 1624 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know. Responses should be made by Fri, 24 Jul 2026 14:26:57 +0000. Anything received after that time might be too late. The whole patch series can be found in one patch at: https://www.kernel.org/pub/linux/kernel/v6.x/stable-review/patch-6.18.40-rc… or in the git tree and branch at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-6.18.y and the diffstat can be found below. thanks, greg k-h ------------- Pseudo-Shortlog of commits: Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> Linux 6.18.40-rc2 Selvin Xavier <selvin.xavier(a)broadcom.com> RDMA/bnxt_re: Avoid repeated requests to allocate WC pages Selvin Xavier <selvin.xavier(a)broadcom.com> RDMA/bnxt_re: Initialize dpi variable to zero Gil Portnoy <dddhkts1(a)gmail.com> ksmbd: fix durable reconnect double-bind race in ksmbd_reopen_durable_fd Thomas Richter <tmricht(a)linux.ibm.com> perf callchain: Handle multiple address spaces Randy Dunlap <rdunlap(a)infradead.org> seqlock: fix scoped_seqlock_read kernel-doc Ian Rogers <irogers(a)google.com> perf inject: With --convert-callchain ignore the dummy event for dwarf stacks Ilpo Järvinen <ilpo.jarvinen(a)linux.intel.com> PCI: Fix Resizable BAR restore order Ilpo Järvinen <ilpo.jarvinen(a)linux.intel.com> PCI: Fix BAR resize rollback path overwriting ret Ian Rogers <irogers(a)google.com> perf symbol: Fix ENOENT case for filename__read_build_id Chukun Pan <amadeus(a)jmu.edu.cn> pinctrl: airoha: fix pinctrl function mismatch issue Matt Bobrowski <mattbobrowski(a)google.com> bpf: Reject BPF_MAP_TYPE_INODE_STORAGE creation if BPF LSM is uninitialized Nicolin Chen <nicolinc(a)nvidia.com> iommufd: Move vevent memory allocation outside spinlock Nicolin Chen <nicolinc(a)nvidia.com> iommufd: Propagate allocation failure in iommufd_veventq_deliver_fetch() Oliver Upton <oupton(a)kernel.org> KVM: arm64: nv: Re-translate VNCR before injecting abort Marc Zyngier <maz(a)kernel.org> KVM: arm64: Deduplicate ASID retrieval code Zenghui Yu <yuzenghui(a)huawei.com> samples/damon/mtier: fail early if address range parameters are invalid SeongJae Park <sj(a)kernel.org> mm/damon/core: trace esz at first setup SeongJae Park <sj(a)kernel.org> mm/damon/core: always put unsuccessfully committed target pids Marc Zyngier <maz(a)kernel.org> KVM: arm64: Fix propagation of TLBI level in kvm_pgtable_stage2_relax_perms() Oliver Upton <oupton(a)kernel.org> KVM: arm64: Ensure level is always initialized when relaxing perms Qu Wenruo <wqu(a)suse.com> btrfs: fix incorrect buffered IO fallback for append direct writes Qu Wenruo <wqu(a)suse.com> btrfs: fix false IO failure after falling back to buffered write Ahsan Atta <ahsan.atta(a)intel.com> crypto: qat - fix restarting state leak on allocation failure Qu Wenruo <wqu(a)suse.com> btrfs: remove folio parameter from ordered io related functions Qu Wenruo <wqu(a)suse.com> btrfs: replace for_each_set_bit() with for_each_set_bitmap() Qu Wenruo <wqu(a)suse.com> btrfs: concentrate the error handling of submit_one_sector() Thorsten Blum <thorsten.blum(a)linux.dev> crypto: atmel-sha204a - fail on hwrng registration error in probe path Neill Kapron <nkapron(a)google.com> usb: gadget: f_fs: Tie read_buffer lifetime to ffs_epfile Tyler Baker <tyler.baker(a)oss.qualcomm.com> usb: gadget: f_fs: initialize reset_work at allocation time Al Viro <viro(a)zeniv.linux.org.uk> functionfs: use spinlock for FFS_DEACTIVATED/FFS_CLOSING transitions Al Viro <viro(a)zeniv.linux.org.uk> functionfs: switch to simple_remove_by_name() Al Viro <viro(a)zeniv.linux.org.uk> functionfs: don't bother with ffs->ref in ffs_data_{opened,closed}() Al Viro <viro(a)zeniv.linux.org.uk> functionfs: don't abuse ffs_data_closed() on fs shutdown Al Viro <viro(a)zeniv.linux.org.uk> new helper: simple_remove_by_name() Mauricio Faria de Oliveira <mfo(a)igalia.com> usb: atm: ueagle-atm: wait for pre-firmware load in .disconnect() Mauricio Faria de Oliveira <mfo(a)igalia.com> usb: atm: ueagle-atm: remove function entry/exit debug messages Mauricio Faria de Oliveira <mfo(a)igalia.com> usb: atm: ueagle-atm: use dev_dbg() for 'device found' message Ben Dooks <ben.dooks(a)codethink.co.uk> usb: dwc3: fix dwc3_readl() and dwc3_writel() calls in dwc3_ulpi_setup() Ingo Rohloff <ingo.rohloff(a)lauterbach.com> usb: dwc3: Support USB3340x ULPI PHY high-speed negotiation. Christoph Hellwig <hch(a)lst.de> xfs: use bio_reuse in the zone GC code Christoph Hellwig <hch(a)lst.de> xfs: only log freed extents for the current RTG in zoned growfs Christoph Hellwig <hch(a)lst.de> xfs: add a xfs_groups_to_rfsbs helper Vlad Poenaru <vlad.wing(a)gmail.com> bpf: Allow LPM map access from sleepable BPF programs Andrii Nakryiko <andrii(a)kernel.org> bpf: Consistently use bpf_rcu_lock_held() everywhere Nuoqi Gui <gnq25(a)mails.tsinghua.edu.cn> bpf: Keep dynamic inner array lookups nullable Mykyta Yatsenko <yatsenko(a)meta.com> bpf: Introduce struct bpf_map_desc in verifier Mykyta Yatsenko <yatsenko(a)meta.com> bpf: Consistently use reg_state() for register access in the verifier Christoph Hellwig <hch(a)lst.de> xfs: initialize iomap->flags earlier in xfs_bmbt_to_iomap Tristan Madani <tristan(a)talencesecurity.com> hfs/hfsplus: fix u32 overflow in check_and_correct_requested_length Viacheslav Dubeyko <slava(a)dubeyko.com> hfs/hfsplus: prevent getting negative values of offset/length Jann Horn <jannh(a)google.com> proc: protect ptrace_may_access() with exec_update_lock (part 1) Oleg Nesterov <oleg(a)redhat.com> seqlock: Change do_task_stat() to use scoped_seqlock_read() Peter Zijlstra <peterz(a)infradead.org> seqlock: Introduce scoped_seqlock_read() Jann Horn <jannh(a)google.com> proc: protect ptrace_may_access() with exec_update_lock (FD links) Christoph Hellwig <hch(a)lst.de> proc: rename proc_setattr to proc_nochmod_setattr Haofeng Li <lihaofeng(a)kylinos.cn> ksmbd: validate NTLMv2 response before updating session key Eric Biggers <ebiggers(a)kernel.org> ksmbd: Use HMAC-MD5 library for NTLMv2 Eric Biggers <ebiggers(a)kernel.org> ksmbd: Use HMAC-SHA256 library for message signing and key generation Eric Biggers <ebiggers(a)kernel.org> ksmbd: Use SHA-512 library for SMB3.1.1 preauth hash Namjae Jeon <linkinjeon(a)kernel.org> ksmbd: track the connection owning a byte-range lock DaeMyung Kang <charsyam(a)gmail.com> ksmbd: centralize ksmbd_conn final release to plug transport leak Davide Ornaghi <d.ornaghi97(a)gmail.com> ksmbd: fix path resolution in ksmbd_vfs_kern_path_create Namjae Jeon <linkinjeon(a)kernel.org> ksmbd: use opener credentials for FSCTL mutations David Howells <dhowells(a)redhat.com> cifs: SMB1 split: Add some #includes David Howells <dhowells(a)redhat.com> cifs: SMB1 split: Rename cifstransport.c Siwei Zhang <oss(a)fourdim.xyz> Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_new_connection_cb() Pauli Virtanen <pav(a)iki.fi> Bluetooth: 6lowpan: fix cyclic locking warning on netdev unregister Xiaolei Wang <xiaolei.wang(a)windriver.com> media: nxp: imx8-isi: Fix use-after-free on remove Frank Li <Frank.Li(a)nxp.com> media: nxp: imx8-isi: use devm_pm_runtime_enable() to simplify code Giovanni Cabiddu <giovanni.cabiddu(a)intel.com> crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() Alexandru Hossu <hossu.alexandru(a)gmail.com> staging: rtl8723bs: fix OOB reads in rtw_get_sec_ie(), rtw_get_wapi_ie(), and rtw_get_wps_attr() Nikolay Kulikov <nikolayof23(a)gmail.com> staging: rtl8723bs: fix spaces around binary operators William Hansen-Baird <william.hansen.baird(a)gmail.com> staging: rtl8723bs: core: move constants to right side in comparison Marco Nenciarini <mnencia(a)kcore.it> PCI: Skip Resizable BAR restore on read error Ilpo Järvinen <ilpo.jarvinen(a)linux.intel.com> PCI: Move Resizable BAR code to rebar.c Ilpo Järvinen <ilpo.jarvinen(a)linux.intel.com> PCI: Add kerneldoc for pci_resize_resource() Ilpo Järvinen <ilpo.jarvinen(a)linux.intel.com> PCI: Fix restoring BARs on BAR resize rollback path Ilpo Järvinen <ilpo.jarvinen(a)linux.intel.com> PCI: Free saved list without holding pci_bus_sem Ilpo Järvinen <ilpo.jarvinen(a)linux.intel.com> PCI: Try BAR resize even when no window was released Ilpo Järvinen <ilpo.jarvinen(a)linux.intel.com> PCI: Change pci_dev variable from 'bridge' to 'dev' Ilpo Järvinen <ilpo.jarvinen(a)linux.intel.com> PCI/IOV: Adjust ->barsz[] when changing BAR size Richard Zhu <hongxing.zhu(a)nxp.com> PCI: imx6: Configure REF_USE_PAD before PHY reset for i.MX95 Franz Schnyder <franz.schnyder(a)toradex.com> PCI: imx6: Fix reference clock source selection for i.MX95 Chris Mason <clm(a)meta.com> binder: cache secctx size before release zeroes it Jisheng Zhang <jszhang(a)kernel.org> binder: Use LIST_HEAD() to initialize on stack list head Alex Williamson <alex.williamson(a)nvidia.com> vfio/mlx5: Fix racy bitfields and tighten struct layout Cássio Gabriel <cassiogabrielcontato(a)gmail.com> ALSA: hda/tas2781: Cancel async firmware request at unbind Cássio Gabriel <cassiogabrielcontato(a)gmail.com> firmware_loader: Add cancel helper for async requests Geoffrey D. Bennett <g(a)b4.vu> ALSA: scarlett2: Update offsets for 2i2 Gen 4 firmware 2417 Geoffrey D. Bennett <g(a)b4.vu> ALSA: scarlett2: Allow selecting config_set by firmware version Zhang Lixu <lixu.zhang(a)intel.com> iio: hid-sensor-rotation: Fix stale or zero output when reading raw values Rafael J. Wysocki <rafael.j.wysocki(a)intel.com> ACPI: NFIT: core: Fix possible deadlock and missing notifications Rafael J. Wysocki <rafael.j.wysocki(a)intel.com> ACPI: NFIT: core: Use devm_acpi_install_notify_handler() Rafael J. Wysocki <rafael.j.wysocki(a)intel.com> ACPI: bus: Introduce devm_acpi_install_notify_handler() Rafael J. Wysocki <rafael.j.wysocki(a)intel.com> ACPI: driver: Check ACPI_COMPANION() against NULL during probe Rafael J. Wysocki <rafael.j.wysocki(a)intel.com> ACPI: NFIT: core: Fix acpi_nfit_init() error cleanup Eric Biggers <ebiggers(a)kernel.org> crypto: xilinx-trng - Remove crypto_rng interface Luke Wang <ziniu.wang_1(a)nxp.com> mmc: sdhci-esdhc-imx: fix resume error handling Luke Wang <ziniu.wang_1(a)nxp.com> mmc: sdhci-esdhc-imx: make non-fatal errors non-blocking in suspend Luke Wang <ziniu.wang_1(a)nxp.com> mmc: sdhci-esdhc-imx: use pm_runtime_resume_and_get() in suspend Luke Wang <ziniu.wang_1(a)nxp.com> mmc: sdhci-esdhc-imx: disable irq during suspend to fix unhandled interrupt Luke Wang <ziniu.wang_1(a)nxp.com> mmc: sdhci-esdhc-imx: fix esdhc_change_pinstate() to allow default state restore Luke Wang <ziniu.wang_1(a)nxp.com> mmc: sdhci-esdhc-imx: restore DLL override for DDR modes on resume Luke Wang <ziniu.wang_1(a)nxp.com> mmc: sdhci-esdhc-imx: remove unnecessary mmc_card_wake_sdio_irq check for tuning save/restore Sergey Shtylyov <s.shtylyov(a)auroraos.dev> mmc: sdhci-of-dwcmshc: check bus clock enable result in the probe() method Ao Sun <ao.sun(a)transsion.com> mmc: block: fix RPMB device unregister ordering Pengpeng Hou <pengpeng(a)iscas.ac.cn> mtd: rawnand: lpc32xx_slc: fail DMA transfer on completion timeout Pengpeng Hou <pengpeng(a)iscas.ac.cn> mtd: rawnand: lpc32xx_mlc: fail DMA transfers on timeout Pengpeng Hou <pengpeng(a)iscas.ac.cn> mtd: rawnand: fsl_ifc: return errors for failed page reads Runyu Xiao <runyu.xiao(a)seu.edu.cn> mmc: vub300: defer reset until cmd_mutex is unlocked Pengpeng Hou <pengpeng(a)iscas.ac.cn> mtd: mchp23k256: use SPI match data for chip caps Pengpeng Hou <pengpeng(a)iscas.ac.cn> mtd: onenand: samsung: report DMA completion timeouts Rafael Beims <rafael.beims(a)toradex.com> wifi: mwifiex: fix permanently busy scans after multiple roam iterations Zhiling Zou <roxy520tt(a)gmail.com> wifi: mac80211: free ack status frame on TX header build failure Zhao Li <enderaoelyther(a)gmail.com> wifi: ieee80211: validate MLE common info length Haofeng Li <lihaofeng(a)kylinos.cn> wifi: cfg80211: validate EHT MLE before MLD ID read Junrui Luo <moonafterrain(a)outlook.com> powerpc/spufs: fix out-of-bounds access in spufs_mem_mmap_access() Zhao Dongdong <zhaodongdong(a)kylinos.cn> reset: sunxi: fix memory region leak on ioremap failure Florian Westphal <fw(a)strlen.de> ipvs: reload ip header after head reallocation Julian Anastasov <ja(a)ssi.bg> ipvs: fix more places with wrong ipv6 transport offsets Maoyi Xie <maoyixie.tju(a)gmail.com> memstick: ms_block: reject a card that reports too many blocks James Raphael Tiovalen <jamestiotio(a)gmail.com> macsec: fix promiscuity refcount leak in macsec_dev_open() Xuanqiang Luo <luoxuanqiang(a)kylinos.cn> llc: fix SAP refcount leak when creating incoming sockets Laxman Acharya Padhya <acharyalaxman8848(a)gmail.com> Bluetooth: btrtl: validate firmware patch bounds Asim Viladi Oglu Manizada <manizada(a)pm.me> net: openvswitch: reject oversized nested action attrs Abhishek Ojha <Abhishek.ojha(a)savoirfairelinux.com> regulator: ltc3676: Fix incorrect IRQSTAT bit offsets Thomas Weißschuh <thomas.weissschuh(a)linutronix.de> riscv: vdso: Do not use LTO for the vDSO Maoyi Xie <maoyixie.tju(a)gmail.com> wifi: brcmfmac: cyw: fix heap overflow on a short auth frame Dawei Feng <dawei.feng(a)seu.edu.cn> wifi: mac80211: fix memory leak in ieee80211_register_hw() Rafael Beims <rafael.beims(a)toradex.com> wifi: mwifiex: fix roaming to different channel in host_mlme mode Runyu Xiao <runyu.xiao(a)seu.edu.cn> wifi: rt2x00: avoid full teardown before work setup in probe Zhiping Zhang <zhipingz(a)meta.com> net/mlx5: free mlx5_st_idx_data on final dealloc Thorsten Blum <thorsten.blum(a)linux.dev> powerpc/pseries: fix memory leak on krealloc failure in papr_init Luke Wang <ziniu.wang_1(a)nxp.com> mmc: sdhci-esdhc-imx: restore pinctrl before restoring ios timing on resume Thomas Huth <thuth(a)redhat.com> selftests/landlock: Fix screwed up pointers in the scoped_signal_test Thomas Huth <thuth(a)redhat.com> selftests/landlock: Skip scoped_signal subtest with MSG_OOB if not available Peng Fan <peng.fan(a)nxp.com> pmdomain: imx: Fix i.MX8MP VC8000E power up sequence Peng Fan <peng.fan(a)nxp.com> pmdomain: imx: Fix i.MX8MP power notifier Farhad Alemi <farhad.alemi(a)berkeley.edu> cgroup/cpuset: rebind mm mempolicy to effective_mems, not mems_allowed Hui Wang <hui.wang(a)canonical.com> selftests/rseq: Fix a building error for riscv arch Gerald Schaefer <gerald.schaefer(a)linux.ibm.com> s390/mm: Fix type mismatch in get_align_mask(). Heiko Carstens <hca(a)linux.ibm.com> s390/diag: Add missing array_index_nospec() call to memtop_get_page_count() Crystal Wood <crwood(a)redhat.com> tracing/osnoise: Call synchronize_rcu() when unregistering Tao Liu <ltao(a)redhat.com> riscv: Prevent NULL pointer dereference in machine_kexec_prepare() Michael Bommarito <michael.bommarito(a)gmail.com> drbd: reject data replies with an out-of-range payload size TJ Adams <tadamsjr(a)google.com> ata: libata-core: Allow capacity transition to zero for locked drives TJ Adams <tadamsjr(a)google.com> ata: libata-core: Skip HPA resize for locked drives Reinette Chatre <reinette.chatre(a)intel.com> fs/resctrl: Fix double-add of pseudo-locked region's RMID to free list Tony Luck <tony.luck(a)intel.com> fs/resctrl: Free mon_data structures on rdt_get_tree() failure Jinjie Ruan <ruanjinjie(a)huawei.com> cpu/hotplug: Fix NULL kobject warning in cpuhp_smt_enable() Jinjie Ruan <ruanjinjie(a)huawei.com> arm64: smp: Fix hot-unplug tearing by forcing unregistration Théo Lebrun <theo.lebrun(a)bootlin.com> net: macb: drop in-flight Tx SKBs on close Dust Li <dust.li(a)linux.alibaba.com> dibs: loopback: validate offset and size in move_data() Daehyeon Ko <4ncienth(a)gmail.com> macsec: don't read an unset MAC header in macsec_encrypt() Yizhou Zhao <zhaoyz24(a)mails.tsinghua.edu.cn> ipvs: reset full ip_vs_seq structs in ip_vs_conn_new Yizhou Zhao <zhaoyz24(a)mails.tsinghua.edu.cn> ipvs: use parsed transport offset in SCTP state lookup Shuangpeng Bai <shuangpeng.kernel(a)gmail.com> llc: fix SAP refcount leak in llc_ui_autobind() Nirmoy Das <nirmoyd(a)nvidia.com> selftests: net: make busywait timeout clock portable Dawei Feng <dawei.feng(a)seu.edu.cn> octeontx2-pf: fix SQB pointer leak on init failure Yousef Alhouseen <alhouseenyousef(a)gmail.com> mac802154: remove interfaces with RCU list deletion Gerald Schaefer <gerald.schaefer(a)linux.ibm.com> s390/monwriter: Reject buffer reuse with different data length Haoxiang Li <haoxiang_li2024(a)163.com> irqchip/irq-riscv-imsic-early: Fix fwnode leak on state setup failure Zi Yan <ziy(a)nvidia.com> mm/compaction: handle free_pages_prepare() properly in compaction_free() Martin Kaiser <martin(a)kaiser.cx> riscv: probes: save original sp in rethook trampoline HyeongJun An <sammiee5311(a)gmail.com> hwmon: (asus_atk0110) Check package count before accessing element Maoyi Xie <maoyixie.tju(a)gmail.com> net: wwan: iosm: bound device offsets in the MUX downlink decoder Wentao Liang <vulab(a)iscas.ac.cn> ata: pata_pxa: Fix DMA channel leak on probe error Dawei Feng <dawei.feng(a)seu.edu.cn> net/mlx5: HWS, fix matcher leak on resize target setup failure Bryam Vargas <hexlabsecurity(a)proton.me> orangefs: keep the readdir entry size 64-bit in fill_from_part() Masami Hiramatsu (Google) <mhiramat(a)kernel.org> tracing/probes: Fix double addition of offset for @+FOFFSET Joshua Crofts <joshua.crofts1(a)gmail.com> hwmon: (max1619) add missing 'select REGMAP' to Kconfig David Lee <david.lee(a)trailofbits.com> fhandle: reject detached mounts in capable_wrt_mount() Bryam Vargas <hexlabsecurity(a)proton.me> net/sched: sch_taprio: Replace direct dequeue call with peek and qdisc_dequeue_peeked Bryam Vargas <hexlabsecurity(a)proton.me> net/sched: sch_multiq: Replace direct dequeue call with peek and qdisc_dequeue_peeked Andrea Righi <arighi(a)nvidia.com> net: lan743x: Initialize eth_syslock spinlock before use Haoxiang Li <haoxiang_li2024(a)163.com> fsl/fman: Free init resources on KeyGen failure in fman_init() Runyu Xiao <runyu.xiao(a)seu.edu.cn> hwmon: (occ) unregister sysfs devices outside occ lock Haoxiang Li <haoxiang_li2024(a)163.com> net: liquidio: fix BAR resource leak on PF number failure Pengpeng Hou <pengpeng(a)iscas.ac.cn> hwmon: (w83793) remove vrm sysfs file on probe failure Pengpeng Hou <pengpeng(a)iscas.ac.cn> hwmon: (w83627hf) remove VID sysfs files on error and remove Conor Dooley <conor.dooley(a)microchip.com> rtc: mpfs: fix counter upload completion condition Lad Prabhakar <prabhakar.mahadev-lad.rj(a)bp.renesas.com> rtc: renesas-rtca3: Fix PIE clear polling condition in alarm setup error path Abdun Nihaal <nihaal(a)cse.iitm.ac.in> bnx2x: fix potential memory leak in bnx2x_alloc_mem_bp() Wentao Liang <vulab(a)iscas.ac.cn> ipmi: fix refcount leak in i_ipmi_request() Sabrina Dubroca <sd(a)queasysnail.net> espintcp: use sk_msg_free_partial to fix partial send Matt Fleming <mfleming(a)cloudflare.com> ipmi: Fix user refcount underflow in event delivery Hongchen Zhang <zhanghongchen(a)loongson.cn> LoongArch: Fix missing dirty page tracking in {pte,pmd}_wrprotect() Xuewen Wang <wangxuewen(a)kylinos.cn> LoongArch: Fix nr passing in set_direct_map_valid_noflush() Biju Das <biju.das.jz(a)bp.renesas.com> pwm: rzg2l-gpt: Fix period_ticks type from u32 to u64 Ihor Solodrai <ihor.solodrai(a)linux.dev> selftests/bpf: Add simple strscpy() implementation Sean Christopherson <seanjc(a)google.com> KVM: TDX: Account all non-transient page allocations for per-TD structures Shuicheng Lin <shuicheng.lin(a)intel.com> drm/xe/userptr: Stub notifier_lock helpers when DRM_GPUSVM=n Jamal Hadi Salim <jhs(a)mojatatu.com> net/sched: sch_teql: move rcu_read_lock()/spin_lock() from _bh variants Daniel Gibson <daniel(a)gibson.sh> platform/x86/amd/pmc: Avoid logging "(null)" for DMI values Ankit Garg <nktgrg(a)google.com> gve: fix header buffer corruption with header-split and HW-GRO Shitalkumar Gandhi <shital.gandhi45(a)gmail.com> ieee802154: ca8210: fix pointer truncation in kfifo on 64-bit Shitalkumar Gandhi <shital.gandhi45(a)gmail.com> ieee802154: ca8210: fix cas_ctl leak on spi_async failure Michael Bommarito <michael.bommarito(a)gmail.com> ieee802154: allow legacy LLSEC ADD/DEL ops to pass strict validation Michael Bommarito <michael.bommarito(a)gmail.com> ieee802154: admin-gate legacy LLSEC dump operations Haoxiang Li <haoxiang_li2024(a)163.com> octeontx2-af: Free BPID bitmap on setup failure Maoyi Xie <maoyixie.tju(a)gmail.com> net: ip6_tunnel: require CAP_NET_ADMIN in the device netns for changelink Maoyi Xie <maoyixie.tju(a)gmail.com> net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink Maoyi Xie <maoyixie.tju(a)gmail.com> net: ipip: require CAP_NET_ADMIN in the device netns for changelink Maoyi Xie <maoyixie.tju(a)gmail.com> net: ip_vti: require CAP_NET_ADMIN in the device netns for changelink Maoyi Xie <maoyixie.tju(a)gmail.com> net: ip6_vti: require CAP_NET_ADMIN in the device netns for changelink Dawei Feng <dawei.feng(a)seu.edu.cn> net: ena: clean up XDP TX queues when regular TX setup fails Ross Porter <ross.porter(a)canonical.com> selftests: net: fix file owner for broadcast_ether_dst test Zihan Xi <xizh2024(a)lzu.edu.cn> net/sched: act_ct: preserve tc_skb_cb across defragmentation Haoxiang Li <haoxiang_li2024(a)163.com> net: ixp4xx_hss: fix duplicate HDLC netdev allocation Haoxiang Li <haoxiang_li2024(a)163.com> net: wwan: t7xx: destroy DMA pool on CLDMA late init failure Philippe Schenker <philippe.schenker(a)impulsing.ch> net: ethernet: ti: icssg: guard PA stat lookups Maoyi Xie <maoyixie.tju(a)gmail.com> net: sit: require CAP_NET_ADMIN in the device netns for changelink Andreas Kemnade <andreas(a)kemnade.info> gpios: palmas: add .get_direction() op Sergio Paracuellos <sergio.paracuellos(a)gmail.com> gpio: mt7621: avoid corruption of shared interrupt trigger state Paul Louvel <paul.louvel(a)bootlin.com> gpio-f7188x: Add support for NCT6126D version B Sergio Paracuellos <sergio.paracuellos(a)gmail.com> gpio: mt7621: be sure IRQ domain is created before exposing GPIO chips Runyu Xiao <runyu.xiao(a)seu.edu.cn> gpio: tegra: do not call pinctrl for GPIO direction Sergio Paracuellos <sergio.paracuellos(a)gmail.com> gpio: mt7621: more robust management of IRQ domain teardown Bradley Morgan <include(a)grrlz.net> cpu: hotplug: Bound hotplug states sysfs output Bradley Morgan <include(a)grrlz.net> cpu: hotplug: Preserve per instance callback errors Cao Ruichuang <create0818(a)163.com> selftests/ftrace: Drop invalid top-level local in test_ownership Zhan Xusheng <zhanxusheng1024(a)gmail.com> posix-cpu-timers: Use u64 multiplication in update_rlimit_cpu() Thomas Gleixner <tglx(a)kernel.org> locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() Maoyi Xie <maoyixie.tju(a)gmail.com> wifi: libertas_tf: fix use-after-free in lbtf_free_adapter() Michael Bommarito <michael.bommarito(a)gmail.com> tracing/user_events: Fix use-after-free in user_event_mm_dup() Doruk Tan Ozturk <doruk(a)0sec.ai> net/mlx5e: macsec: fix use-after-free of metadata_dst on RX SC delete Dmitry Torokhov <dmitry.torokhov(a)gmail.com> Input: ims-pcu - fix type confusion in CDC union descriptor parsing Dmitry Torokhov <dmitry.torokhov(a)gmail.com> Input: ims-pcu - fix race condition in reset_device sysfs callback Dmitry Torokhov <dmitry.torokhov(a)gmail.com> Input: ims-pcu - fix potential infinite loop in CDC union descriptor parsing Dmitry Torokhov <dmitry.torokhov(a)gmail.com> Input: ims-pcu - fix out-of-bounds read in ims_pcu_irq() debug logging Dmitry Torokhov <dmitry.torokhov(a)gmail.com> Input: ims-pcu - fix firmware leak in async update Dmitry Torokhov <dmitry.torokhov(a)gmail.com> Input: ims-pcu - fix DMA mapping violation in line setup Dmitry Torokhov <dmitry.torokhov(a)gmail.com> Input: ims-pcu - add response length checks Dmitry Torokhov <dmitry.torokhov(a)gmail.com> Input: ims-pcu - validate control endpoint type Dmitry Torokhov <dmitry.torokhov(a)gmail.com> Input: ims-pcu - release data interface on disconnect Dmitry Torokhov <dmitry.torokhov(a)gmail.com> Input: ims-pcu - only expose sysfs attributes on control interface Dmitry Torokhov <dmitry.torokhov(a)gmail.com> Input: ims-pcu - fix use-after-free and double-free in disconnect Haoxiang Li <haoxiang_li2024(a)163.com> scsi: elx: efct: Fix I/O leak on unsupported additional CDB WenTao Liang <vulab(a)iscas.ac.cn> scsi: elx: efct: Fix refcount leak in efct_hw_io_abort() Bryam Vargas <hexlabsecurity(a)proton.me> scsi: target: core: Fix iSCSI ISID use-after-free in REGISTER AND MOVE Bryam Vargas <hexlabsecurity(a)proton.me> scsi: target: Bound PR-OUT TransportID parsing to the received buffer Michael Bommarito <michael.bommarito(a)gmail.com> scsi: xen: scsiback: Free unsubmitted command instead of double-putting it Michael Bommarito <michael.bommarito(a)gmail.com> scsi: xen: scsiback: Free the command tag on the TMR submit-failure path Xu Rao <raoxu(a)uniontech.com> scsi: sg: Report request-table problems when any status is set Abdun Nihaal <nihaal(a)cse.iitm.ac.in> scsi: lpfc: Fix memory leak in lpfc_sli4_driver_resource_setup() Haoxiang Li <haoxiang_li2024(a)163.com> scsi: hpsa: Fix DMA mapping leak on IOACCEL2 reset path Jhonraushan <raushan.jhon(a)gmail.com> accel/ivpu: Reject firmware log with size smaller than header Wentao Liang <vulab(a)iscas.ac.cn> accel/amdxdna: Fix use-after-free in amdxdna_gem_dmabuf_mmap() Baineng Shou <shoubaineng(a)gmail.com> dma-fence: Make dma_fence_dedup_array() robust against 0-count input Mikulas Patocka <mpatocka(a)redhat.com> dm-verity: make error counter atomic Mikulas Patocka <mpatocka(a)redhat.com> dm-verity: increase sprintf buffer size Mikulas Patocka <mpatocka(a)redhat.com> dm-verity: fix a possible NULL pointer dereference Mikulas Patocka <mpatocka(a)redhat.com> dm-verity: avoid double increment of &use_bh_wq_enabled Mikulas Patocka <mpatocka(a)redhat.com> dm-integrity: don't increment hash_offset twice Mikulas Patocka <mpatocka(a)redhat.com> dm-integrity: fix a bug if the bio is out of limits Mikulas Patocka <mpatocka(a)redhat.com> dm-integrity: fix leaking uninitialized kernel memory Mikulas Patocka <mpatocka(a)redhat.com> dm_early_create: fix freeing used table on dm_resume failure Mikulas Patocka <mpatocka(a)redhat.com> dm-stats: fix merge accounting Mikulas Patocka <mpatocka(a)redhat.com> dm-stats: fix dm_jiffies_to_msec64 Samuel Moelius <sam.moelius(a)trailofbits.com> dm-pcache: reject option groups without values Benjamin Marzinski <bmarzins(a)redhat.com> dm-log: fix a bitset_size overflow on 32bit machines Mikulas Patocka <mpatocka(a)redhat.com> dm-ioctl: fix a possible overflow in list_version_get_info Mikulas Patocka <mpatocka(a)redhat.com> dm-bufio: fix wrong count calculation in dm_bufio_issue_discard Samuel Moelius <sam.moelius(a)trailofbits.com> dm era: fix out-of-bounds memory access for non-zero start sector Ming-Hung Tsai <mtsai(a)redhat.com> dm thin metadata: fix metadata snapshot consistency on commit failure Genjian Zhang <zhanggenjian(a)kylinos.cn> dm thin metadata: fix superblock refcount leak on snapshot shadow failure Haoxiang Li <haoxiang_li2024(a)163.com> net: sparx5: unregister blocking notifier on init failure Yitang Yang <yi1tang.yang(a)gmail.com> block: fix IORING_URING_CMD_REISSUE flags check in blkdev_uring_cmd Mike Waychison <mike(a)waychison.com> block: fix race in blk_time_get_ns() returning 0 Connor Williamson <connordw(a)amazon.com> block: remove redundant GD_NEED_PART_SCAN in add_disk_final() Jiri Olsa <jolsa(a)kernel.org> bpf: Add missing access_ok call to copy_user_syms Jann Horn <jannh(a)google.com> bpf,fork: wipe ->bpf_storage before bailouts that access it Tristan Madani <tristan(a)talencesecurity.com> bpf: Reset register bounds before narrowing retval range in check_mem_access() Oliver Hartkopp <socketcan(a)hartkopp.net> can: bcm: add missing rcu list annotations and operations Oliver Hartkopp <socketcan(a)hartkopp.net> can: bcm: fix lockless bound/ifindex race and silent RX_SETUP failure Lee Jones <lee(a)kernel.org> can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF Oliver Hartkopp <socketcan(a)hartkopp.net> can: isotp: serialize TX state transitions under so->rx_lock Oliver Hartkopp <socketcan(a)hartkopp.net> can: isotp: fix use-after-free race with concurrent NETDEV_UNREGISTER Oliver Hartkopp <socketcan(a)hartkopp.net> can: isotp: use unconditional synchronize_rcu() in isotp_release() Fan Wu <fanwu01(a)zju.edu.cn> can: esd_usb: kill anchored URBs before freeing netdevs Maoyi Xie <maoyixie.tju(a)gmail.com> netdev-genl: report NAPI thread PID in the caller's pid namespace Wentao Liang <vulab(a)iscas.ac.cn> nvmet: fix refcount leak in nvmet_sq_create() Bryam Vargas <hexlabsecurity(a)proton.me> nvmet-rdma: handle inline data with a nonzero offset Michael Bommarito <michael.bommarito(a)gmail.com> nvmet-auth: reject short AUTH_RECEIVE buffers Nick Chan <towinchenmi(a)gmail.com> nvme-apple: Prevent shared tags across queues on Apple A11 Benjamin Coddington <ben.coddington(a)hammerspace.com> NFS: Charge unstable writes by request size, not folio size Weiming Shi <bestswngs(a)gmail.com> sctp: validate STALE_COOKIE cause length before reading staleness Kunihiko Hayashi <hayashi.kunihiko(a)socionext.com> spi: uniphier: Fix completion initialization order before devm_request_irq() Wang Yan <wangyan01(a)kylinos.cn> time: Fix off-by-one in compat settimeofday() usec validation Jaewon Yang <yong010301(a)gmail.com> tpm: Make the TPM character devices non-seekable Thorsten Blum <thorsten.blum(a)linux.dev> tpm: fix event_size output in tpm1_binary_bios_measurements_show Maoyi Xie <maoyixie.tju(a)gmail.com> xfrm: xfrm_interface: require CAP_NET_ADMIN in the device netns for changelink Sanman Pradhan <psanman(a)juniper.net> xfrm: use compat translator only for u64 alignment mismatch Qianyu Luo <qianyuluo3(a)gmail.com> xfrm: nat_keepalive: avoid double free on send error Wentao Liang <vulab(a)iscas.ac.cn> xen/gntdev: fix error handling in ioctl Steven Rostedt <rostedt(a)goodmis.org> ufs: core: tracing: Do not dereference pointers in TP_printk() Dmitry Safonov <0x7f454c46(a)gmail.com> tcp: Decrement tcp_md5_needed static branch Michael Bommarito <michael.bommarito(a)gmail.com> tcp: defer md5sig_info kfree past RCU grace period in tcp_connect Paul Greenwalt <paul.greenwalt(a)intel.com> ice: fix ice_init_link() error return preventing probe Pei Xiao <xiaopei01(a)kylinos.cn> i2c: spacemit: fix spurious IRQ handling returning IRQ_HANDLED Xuanqiang Luo <luoxuanqiang(a)kylinos.cn> i2c: mlxbf: Fix use-after-free in mlxbf_i2c_init_resource() Roman Vivchar <rva333(a)protonmail.com> i2c: mediatek: fix WRRD for SoCs without auto_restart option Vincent Jardin <vjardin(a)free.fr> i2c: imx: fix locked bus on SMBus block-read of 0 (IRQ) Vincent Jardin <vjardin(a)free.fr> i2c: imx: fix locked bus on SMBus block-read of 0 (atomic) Joshua Crofts <joshua.crofts1(a)gmail.com> hwmon: (max6697) add missing 'select REGMAP_I2C' to Kconfig Joshua Crofts <joshua.crofts1(a)gmail.com> hwmon: (ltc2992) add missing 'select REGMAP_I2C' to Kconfig Ibrahim Hashimov <security(a)auditcode.ai> ksmbd: fix integer overflow in set_file_allocation_info() Fredric Cover <fredric.cover.lkernel(a)gmail.com> smb: client: use kvzalloc() for megabyte buffer in simple fallocate Holger Dengler <dengler(a)linux.ibm.com> pkey: Move keytype check from pkey api to handler Daniel Gibson <daniel(a)gibson.sh> platform/x86/amd/pmc: Don't log during intermediate wakeups Daniel Gibson <daniel(a)gibson.sh> platform/x86/amd/pmc: Add delay_suspend module parameter Daniel Gibson <daniel(a)gibson.sh> platform/x86/amd/pmc: Delay suspend for some Lenovo Laptops Daniel Gibson <daniel(a)gibson.sh> platform/x86/amd/pmc: Check for intermediate wakeup in function Srinivas Pandruvada <srinivas.pandruvada(a)intel.com> platform/x86: ISST: Restore SST-PP control to all domains Haoxiang Li <lihaoxiang(a)isrc.iscas.ac.cn> platform/x86: dell-laptop: fix missing cleanups in init error path Frank Li <Frank.Li(a)nxp.com> dmaengine: dw-edma: Add spinlock to protect DONE_INT_MASK and ABORT_INT_MASK Kartik Rajput <kkartik(a)nvidia.com> dmaengine: tegra: Fix burst size calculation Hongling Zeng <zenghongling(a)kylinos.cn> sunrpc: fix uninitialized xprt_create_args structure Michael Bommarito <michael.bommarito(a)gmail.com> tpm: tpm2-sessions: wait for async KPP completion in tpm_buf_append_salt Jarkko Sakkinen <jarkko(a)kernel.org> tpm: tpm_tis_spi: Use wait_woken() in wait_for_tmp_stat() Baoli Zhang <baoli.zhang(a)linux.intel.com> tpm: restore timeout for key creation commands Bhargav Joshi <j.bhargav.u(a)gmail.com> irqchip/crossbar: Use correct index in crossbar_domain_free() Yiyang Chen <cyyzero16(a)gmail.com> taskstats: retain dead thread stats in TGID queries Florian Fuchs <fuchsfl(a)gmail.com> mtd: maps: vmu-flash: fix NULL pointer dereference in initialization Stafford Horne <shorne(a)gmail.com> openrisc: Fix jump_label smp syncing Miquel Raynal <miquel.raynal(a)bootlin.com> mtd: rawnand: Pause continuous reads at block boundaries Takahiro Kuwano <takahiro.kuwano(a)infineon.com> mtd: spi-nor: spansion: use die erase for multi-die devices only Miquel Raynal <miquel.raynal(a)bootlin.com> mtd: spi-nor: swp: Improve locking user experience Holger Dengler <dengler(a)linux.ibm.com> s390/pkey: Check length in pkey_pckmo handler implementation Holger Dengler <dengler(a)linux.ibm.com> s390/pkey: Check length in PKEY_VERIFYPROTK ioctl Sebastian Alba Vives <sebasjosue84(a)gmail.com> fpga: microchip-spi: fix zero header_size OOB read in mpf_ops_parse_header() Maoyi Xie <maoyixie.tju(a)gmail.com> net: thunderbolt: Fix frags[] overflow by bounding frame_count Manivannan Sadhasivam <manivannan.sadhasivam(a)oss.qualcomm.com> bus: mhi: ep: Protect mhi_ep_handle_syserr() in the error path Manivannan Sadhasivam <manivannan.sadhasivam(a)oss.qualcomm.com> bus: mhi: host: pci_generic: Fix the physical function check Sebastian Alba Vives <sebasjosue84(a)gmail.com> fpga: dfl: add bounds check in dfh_get_param_size() Michael Bommarito <michael.bommarito(a)gmail.com> ocfs2: reject non-inline dinodes with i_size and zero i_clusters Michael Bommarito <michael.bommarito(a)gmail.com> ocfs2: reject dinodes whose i_rdev disagrees with the file type Michael Bommarito <michael.bommarito(a)gmail.com> ocfs2: reject dinodes with non-canonical i_mode type Joseph Qi <joseph.qi(a)linux.alibaba.com> ocfs2: add journal NULL check in ocfs2_checkpoint_inode() Ian Bridges <icb(a)fastmail.org> ocfs2: fix UBSAN array-index-out-of-bounds in ocfs2_sum_rightmost_rec Ian Bridges <icb(a)fastmail.org> ocfs2: fix NULL h_transaction deref in ocfs2_assure_trans_credits Kyle Zeng <kylebot(a)openai.com> ocfs2: avoid moving extents to occupied clusters Arseniy Krasnov <avkrasnov(a)rulkc.org> mtd: rawnand: fix condition in 'nand_select_target()' Vasiliy Kovalev <kovalev(a)altlinux.org> net/9p: fix infinite loop in p9_client_rpc on fatal signal Bastien Curutchet <bastien.curutchet(a)bootlin.com> mtd: rawnand: pl353: fix probe resource allocation Tristan Madani <tristan(a)talencesecurity.com> ocfs2: use kzalloc for quota recovery bitmap allocation Stafford Horne <shorne(a)gmail.com> openrisc: Add full instruction cache invalidate functions Ionut Nechita <ionut.nechita(a)windriver.com> scsi: sas: Skip opt_sectors when DMA reports no real optimization hint Martin Wilck <martin.wilck(a)suse.com> scsi: smartpqi: Use shost_to_hba() in pqi_scan_finished() Alexey Charkov <alchark(a)flipper.net> power: supply: bq257xx: Fix VSYSMIN clamping logic Breno Leitao <leitao(a)debian.org> 9p: skip nlink update in cacheless mode to fix WARN_ON Ruoyu Wang <ruoyuw560(a)gmail.com> mtd: slram: remove failed entries from the device list Karl Mehltretter <kmehltretter(a)gmail.com> kcov: use WRITE_ONCE() for selftest mode stores Muchun Song <muchun.song(a)linux.dev> mm/mm_init: fix uninitialized struct pages for ZONE_DEVICE Amit Machhiwal <amachhiw(a)linux.ibm.com> powerpc/dt_cpu_ftrs: Set CPU_FTR_P11_PVR for Power11 and later processors Jinjiang Tu <tujinjiang(a)huawei.com> fs/proc: fix KPF_KSM reported for all anonymous pages Krzysztof Wilczyński <kwilczynski(a)kernel.org> proc: only bump parent nlink when registering directories Kiryl Shutsemau (Meta) <kas(a)kernel.org> fs/proc/task_mmu: use huge_page_size() in pagemap_scan_hugetlb_entry() Kiryl Shutsemau (Meta) <kas(a)kernel.org> fs/proc/task_mmu: fix hugetlb self-deadlock in pagemap_scan_pte_hole() SeongJae Park <sj(a)kernel.org> mm/damon/sysfs-schemes: put stats for scheme_add_dirs() internal error SeongJae Park <sj(a)kernel.org> mm/damon/sysfs-schemes: fix dir put orders in access_pattern_add_dirs() Zishun Yi <vulab(a)iscas.ac.cn> riscv: cacheinfo: Fix node reference leak in populate_cache_leaves Aaron Tomlin <atomlin(a)atomlin.com> mips: sched: Fix CPUMASK_OFFSTACK memory corruption Bryam Vargas <hexlabsecurity(a)proton.me> selftests/landlock: Test SCOPE_SIGNAL on the SIGIO/fowner pgid path WenTao Liang <vulab(a)iscas.ac.cn> power: supply: charger-manager: fix refcount leak in is_full_charged() Bryam Vargas <hexlabsecurity(a)proton.me> landlock: Fix LANDLOCK_SCOPE_SIGNAL bypass on the SIGIO path Tristan Madani <tristan(a)talencesecurity.com> ntfs3: fix out-of-bounds read in decompress_lznt Michael Bommarito <michael.bommarito(a)gmail.com> ntfs3: validate split-point offset in indx_insert_into_buffer Michael Bommarito <michael.bommarito(a)gmail.com> ntfs3: bound to_move in indx_insert_into_root before hdr_insert_head Michael Bommarito <michael.bommarito(a)gmail.com> ntfs3: cap RESTART_TABLE free-chain walker at rt->used Michael Bommarito <michael.bommarito(a)gmail.com> fs/ntfs3: bound NTFS_DE view.data_off in UpdateRecordData{Root,Allocation} Michael Bommarito <michael.bommarito(a)gmail.com> fs/ntfs3: add depth limit to indx_find_buffer to prevent stack overflow Konstantin Komarov <almaz.alexandrovich(a)paragon-software.com> fs/ntfs3: validate lcns_follow in log_replay conversion Konstantin Komarov <almaz.alexandrovich(a)paragon-software.com> fs/ntfs3: bound attr_off in UpdateResidentValue against data_off Michael Bommarito <michael.bommarito(a)gmail.com> fs/ntfs3: bound copy_lcns dp->page_lcns[] index in analysis pass Konstantin Komarov <almaz.alexandrovich(a)paragon-software.com> fs/ntfs3: bound DeleteIndexEntryAllocation memmove length Zhan Xusheng <zhanxusheng1024(a)gmail.com> fs/ntfs3: fix syncing wrong inode on DIRSYNC cross-directory rename SeongJae Park <sj(a)kernel.org> mm/damon/core: make charge_addr_from aware of end-address exclusivity Muchun Song <muchun.song(a)linux.dev> mm/memory_hotplug: fix incorrect altmap passing in error path Deepanshu Kartikey <kartikey406(a)gmail.com> mm/hugetlb: fix hugetlb cgroup rsvd charge/uncharge mismatch Johan Hovold <johan(a)kernel.org> power: supply: max17042: fix OF node reference imbalance Ma Ke <make24(a)iscas.ac.cn> power: supply: cpcap-battery: Fix missing nvmem_device_put() causing reference leak Muchun Song <muchun.song(a)linux.dev> mm/mm_init: fix pageblock migratetype for ZONE_DEVICE compound pages Maciej W. Rozycki <macro(a)orcam.me.uk> MIPS: DEC: Ensure 32-bit stack location for o32 prom_printf() Johan Hovold <johan(a)kernel.org> MIPS: ip22-gio: fix device reference leak in probe Johan Hovold <johan(a)kernel.org> MIPS: ip22-gio: fix kfree() of static object Johan Hovold <johan(a)kernel.org> MIPS: ip22-gio: fix gio device memory leak Wasim Nazir <wasim.nazir(a)oss.qualcomm.com> remoteproc: qcom: Fix leak when custom dump_segments addition fails Chuck Lever <chuck.lever(a)oracle.com> SUNRPC: Bound-check xdr_buf_to_bvec() stores before writing Chuck Lever <chuck.lever(a)oracle.com> lockd: Plug nlm_file refcount leak on cached nlm_do_fopen() failure Chuck Lever <chuck.lever(a)oracle.com> lockd: Plug nlm_file leak when nlm_do_fopen() fails Luxiao Xu <rakukuip(a)gmail.com> sunrpc: harden rq_procinfo lifecycle to prevent double-free Chuck Lever <chuck.lever(a)oracle.com> sunrpc: wait for in-flight TLS handshake callback when cancel loses race Chris Mason <clm(a)meta.com> sunrpc: pin svc_xprt across the asynchronous TLS handshake callback Abdun Nihaal <nihaal(a)cse.iitm.ac.in> nvdimm/btt: Free arena sub-allocations on discover_arenas() error path Abdun Nihaal <nihaal(a)cse.iitm.ac.in> nvdimm/btt: Free arenas on btt_init() error paths Junrui Luo <moonafterrain(a)outlook.com> jbd2: fix integer underflow in jbd2_journal_initialize_fast_commit() Pauli Virtanen <pav(a)iki.fi> Bluetooth: SCO: hold sk properly in sco_conn_ready Pauli Virtanen <pav(a)iki.fi> Bluetooth: SCO: fix sleeping under spinlock in sco_conn_ready Benoît Sevens <bsevens(a)google.com> HID: playstation: validate num_touch_reports in DualShock 4 reports Bartosz Golaszewski <bartosz.golaszewski(a)oss.qualcomm.com> mfd: tps6586x: Fix OF node refcount Shyam Prasad N <sprasad(a)microsoft.com> cifs: invalidate cfid on unlink/rename/rmdir Sven Eckelmann <sven(a)narfation.org> batman-adv: tt: prevent TVLV OOB check overflow Sven Eckelmann <sven(a)narfation.org> batman-adv: mcast: avoid OOB read of num_dests header Sven Eckelmann <sven(a)narfation.org> batman-adv: frag: fix primary_if leak on failed linearization Sven Eckelmann <sven(a)narfation.org> batman-adv: clean untagged VLAN on netdev registration failure Sven Eckelmann <sven(a)narfation.org> batman-adv: frag: free unfragmentable packet Sven Eckelmann <sven(a)narfation.org> batman-adv: fix VLAN priority offset Sven Eckelmann <sven(a)narfation.org> batman-adv: tt: avoid request storms during pending request Sven Eckelmann <sven(a)narfation.org> batman-adv: dat: fix tie-break for candidate selection Sven Eckelmann <sven(a)narfation.org> batman-adv: ensure minimal ethernet header on TX Sven Eckelmann <sven(a)narfation.org> batman-adv: dat: ensure accessible eth_hdr proto field Sven Eckelmann <sven(a)narfation.org> batman-adv: bla: reacquire gw address after skb realloc Sven Eckelmann <sven(a)narfation.org> batman-adv: dat: acquire ARP hw source only after skb realloc Sven Eckelmann <sven(a)narfation.org> batman-adv: access unicast_ttvn skb->data only after skb realloc Sven Eckelmann <sven(a)narfation.org> batman-adv: retrieve ethhdr after potential skb realloc on RX Sven Eckelmann <sven(a)narfation.org> batman-adv: gw: acquire ethernet header only after skb realloc Sumanth Korikkar <sumanthk(a)linux.ibm.com> s390/perf_cpum_cf: Add missing array_index_nospec() to __hw_perf_event_init() Rafael J. Wysocki <rafael.j.wysocki(a)intel.com> cpufreq: intel_pstate: Set non-turbo capacity to HWP_GUARANTEED_PERF() Zhongqiu Han <zhongqiu.han(a)oss.qualcomm.com> cpufreq: schedutil: Fix uncleared need_freq_update on the .adjust_perf() path Sandipan Das <sandipan.das(a)amd.com> perf/x86/amd/lbr: Fix kernel address leakage Sandipan Das <sandipan.das(a)amd.com> perf/x86/amd/brs: Fix kernel address leakage Thorsten Blum <thorsten.blum(a)linux.dev> x86/boot: Reject too long acpi_rsdp= values Thorsten Blum <thorsten.blum(a)linux.dev> x86/boot: Validate console=uart8250 baud rate to fix early boot hang Mario Limonciello <mario.limonciello(a)amd.com> x86/video: Only fall back to vga_default_device() without screen info Ali Ahmet MEMIS <dev(a)unknownbbqr.xyz> tools/power/x86/intel-speed-select: Harden daemon pidfile open Guangshuo Li <lgs201920130244(a)gmail.com> mfd: sm501: Fix reference leak on failed device registration Armin Wolf <W_Armin(a)gmx.de> leds: uleds: Fix potential buffer overread Ondrej Mosnacek <omosnace(a)redhat.com> selinux: fix incorrect execmem checks on overlayfs Tristan Madani <tristan(a)talencesecurity.com> selinux: avoid sk_socket dereference in selinux_sctp_bind_connect() Stephen Smalley <stephen.smalley.work(a)gmail.com> selinux: check connect-related permissions on TCP Fast Open Wang Jun <1742789905(a)qq.com> soc: fsl: qe: panic on ioremap() failure in qe_reset() Siddharth Vadapalli <s-vadapalli(a)ti.com> soc: ti: k3-ringacc: Fix access mode for k3_ringacc_ring_pop_tail_io/proxy Guangshuo Li <lgs201920130244(a)gmail.com> gpu: host1x: Fix device reference leak in host1x_device_parse_dt() error path Eliot Courtney <ecourtney(a)nvidia.com> gpu: nova-core: simplify and_then with condition to filter Xiang Mei (Microsoft) <xmei5(a)asu.edu> netfilter: bridge: fix stale prevhdr pointer in br_ip6_fragment() Wyatt Feng <bronzed_45_vested(a)icloud.com> netfilter: xt_nat: reject unsupported target families Yizhou Zhao <zhaoyz24(a)mails.tsinghua.edu.cn> netfilter: ecache: fix inverted time_after() check Yizhou Zhao <zhaoyz24(a)mails.tsinghua.edu.cn> netfilter: nf_conncount: fix zone comparison in tuple dedup Xiang Mei <xmei5(a)asu.edu> netfilter: nf_conntrack_reasm: guard mac_header adjustment after IPv6 defrag Florian Westphal <fw(a)strlen.de> netfilter: nf_nat_sip: reload possible stale data pointer Florian Westphal <fw(a)strlen.de> netfilter: nft_set_pipapo: don't leak bad clone into future transaction Haoze Xie <royenheart(a)gmail.com> netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst Wyatt Feng <bronzed_45_vested(a)icloud.com> netfilter: xt_cluster: reject template conntracks in hash match David Carlier <devnexen(a)gmail.com> netfilter: nfnl_cthelper: apply per-class values when updating policies Muhammad Bilal <meatuni001(a)gmail.com> netfilter: nf_conntrack_irc: fix parse_dcc() off-by-one OOB read Srinivas Kandagatla <srinivas.kandagatla(a)oss.qualcomm.com> ASoC: qcom: q6apm: fix NULL pointer dereference in graph_callback Cássio Gabriel <cassiogabrielcontato(a)gmail.com> ASoC: mediatek: mt8183: Release reserved memory on cleanup Cássio Gabriel <cassiogabrielcontato(a)gmail.com> ASoC: mediatek: mt8183: Check runtime resume during probe Cássio Gabriel <cassiogabrielcontato(a)gmail.com> ASoC: mediatek: mt8192: Release reserved memory on cleanup Cássio Gabriel <cassiogabrielcontato(a)gmail.com> ASoC: mediatek: mt8192: Check runtime resume during probe Peter Ujfalusi <peter.ujfalusi(a)linux.intel.com> ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control Peter Ujfalusi <peter.ujfalusi(a)linux.intel.com> ASoC: SOF: ipc3-control: Fix heap overflow in bytes_ext put/get Abdun Nihaal <nihaal(a)cse.iitm.ac.in> fbdev: tridentfb: fix potential memory leak in trident_pci_probe() Abdun Nihaal <nihaal(a)cse.iitm.ac.in> fbdev: nvidia: fix potential memory leak in nvidiafb_probe() Abdun Nihaal <nihaal(a)cse.iitm.ac.in> fbdev: vesafb: fix memory leak in vesafb_probe() Abdun Nihaal <nihaal(a)cse.iitm.ac.in> fbdev: carminefb: fix potential memory leak in alloc_carmine_fb() Abdun Nihaal <nihaal(a)cse.iitm.ac.in> fbdev: tdfxfb: fix potential memory leak in tdfxfb_probe() Abdun Nihaal <nihaal(a)cse.iitm.ac.in> fbdev: uvesafb: fix potential memory leak in uvesafb_probe() Abdun Nihaal <nihaal(a)cse.iitm.ac.in> fbdev: s3fb: fix potential memory leak in s3_pci_probe() Abdun Nihaal <nihaal(a)cse.iitm.ac.in> fbdev: i740fb: fix potential memory leak in i740fb_probe() Abdun Nihaal <nihaal(a)cse.iitm.ac.in> fbdev: radeon: fix potential memory leak in radeonfb_pci_register() Abdun Nihaal <nihaal(a)cse.iitm.ac.in> fbdev: efifb: fix memory leak in efifb_probe() Li RongQing <lirongqing(a)baidu.com> fbdev: sm712: Fix operator precedence in big_swap macro Abdun Nihaal <nihaal(a)cse.iitm.ac.in> fbdev: hecubafb: fix potential memory leak in hecubafb_probe() Abdun Nihaal <nihaal(a)cse.iitm.ac.in> fbdev: broadsheetfb: fix potential memory leak in broadsheetfb_probe() Abdun Nihaal <nihaal(a)cse.iitm.ac.in> fbdev: metronomefb: fix potential memory leak in metronomefb_probe() Oliver Upton <oupton(a)kernel.org> KVM: arm64: nv: Inject SEA if guest VNCR isn't normal memory Oliver Upton <oupton(a)kernel.org> KVM: arm64: nv: Inject SEA if kvm_translate_vncr() can't resolve PFN Oliver Upton <oupton(a)kernel.org> KVM: arm64: nv: Respect read-only PFN when mapping L1 VNCR Weiming Shi <bestswngs(a)gmail.com> KVM: arm64: nv: Fix SPSR_EL2 restore in kvm_hyp_handle_mops() Fuad Tabba <tabba(a)google.com> KVM: arm64: nv: Write ESR_EL2 for injected nested SError exceptions Oliver Upton <oupton(a)kernel.org> KVM: arm64: nv: Drop bogus WARN for write to ZCR_EL2 Marc Zyngier <maz(a)kernel.org> KVM: Move kvm_io_bus_get_dev() locking responsibilities to callers Sean Christopherson <seanjc(a)google.com> KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state leixiang <leixiang(a)kylinos.cn> KVM: x86: Nullify irqfd->producer if updating IRTE for bypass fails Sean Christopherson <seanjc(a)google.com> KVM: x86: Ignore pending PV EOI if the vCPU has since disabled PV EOIs Atish Patra <atishp(a)meta.com> KVM: SEV: Do not allow intra-host migration/mirroring of SNP VMs Matthew Rosato <mjrosato(a)linux.ibm.com> KVM: s390: pci: Fix handling of AIF enable without AISB Marc Zyngier <maz(a)kernel.org> KVM: arm64: vgic: Handle race between interrupt affinity change and LPI disabling Hyunwoo Kim <imv4bel(a)gmail.com> KVM: arm64: vgic: Check the interrupt is still ours before migrating it Haoxiang Li <haoxiang_li2024(a)163.com> KVM: s390: pci: Fix GISC refcount leak on AIF enable failure Gautam Menghani <gautam(a)linux.ibm.com> powerpc/pseries/Kconfig: Enable CONFIG_VPA_PMU to be used with KVM Qiang Ma <maqianga(a)uniontech.com> LoongArch: KVM: Return full old CSR value from kvm_emu_xchg_csr() Bibo Mao <maobibo(a)loongson.cn> LoongArch: KVM: Fix FPU register width with user access API Qiang Ma <maqianga(a)uniontech.com> LoongArch: KVM: Check the return values for put_user() Bibo Mao <maobibo(a)loongson.cn> LoongArch: KVM: Check irq validity in kvm_vcpu_ioctl_interrupt() Yanfei Xu <yanfei.xu(a)bytedance.com> LoongArch: KVM: Validate irqchip index in irqfd routing David Jander <david(a)protonic.nl> ARM: dts: stm32: stm32mp15x-mecio1-io: Move expander gpio-line-names to board files David Jander <david(a)protonic.nl> ARM: dts: stm32: stm32mp15x-mecio1-io: Fix expander gpio line typo David Jander <david(a)protonic.nl> ARM: dts: stm32: stm32mp15x-mecio1-io: Move gpio-line-names to board files David Jander <david(a)protonic.nl> ARM: dts: stm32: stm32mp15x-mecio1-io: Fix GPIO names typo Krzysztof Kozlowski <krzysztof.kozlowski(a)oss.qualcomm.com> arm64: dts: imx8ulp-evk: Correct Type-C int GPIO flags David Jander <david(a)protonic.nl> ARM: dts: stm32: stm32mp15x-mecio1-io: Enable internal ADC reference Judith Mendez <jm(a)ti.com> arm64: dts: ti: k3-am62a7-sk: Add bootph-all tag to vqmmc David Jander <david(a)protonic.nl> ARM: dts: stm32: stm32mp15x-mecio1-io: Move divergent mecio1 ADC channels to board files David Jander <david(a)protonic.nl> ARM: dts: stm32: stm32mp15x-mecio1-io: Fix ADC sampling times Quentin Schulz <quentin.schulz(a)cherry.de> arm64: dts: rockchip: fix Ethernet PHY not found on PX30 Ringneck Nickolay Goppen <setotau(a)mainlining.org> arm64: dts: qcom: sdm630: describe adsp_mem region properly Hugo Villeneuve <hvilleneuve(a)dimonoff.com> ARM: dts: imx6ul-var-som: fix warning for non-existent dc-supply property Krzysztof Kozlowski <krzysztof.kozlowski(a)oss.qualcomm.com> arm64: dts: s32g3: Fix SWT8 watchdog address Mark Rutland <mark.rutland(a)arm.com> arm64: fpsimd: Fix type mismatch in sve_{save,load}_state() Yong Wang <edragain(a)163.com> net: ife: require ETH_HLEN to be pullable in ife_decode() Runyu Xiao <runyu.xiao(a)seu.edu.cn> octeontx2-vf: clear stale mailbox IRQ state before request_irq() Runyu Xiao <runyu.xiao(a)seu.edu.cn> octeontx2-pf: clear stale mailbox IRQ state before request_irq() Zhengchuan Liang <zcliangcn(a)gmail.com> net: atm: reject out-of-range traffic classes in QoS validation Michael Bommarito <michael.bommarito(a)gmail.com> net: qrtr: fix 32-bit integer overflow in qrtr_endpoint_post() Li Xiasong <lixiasong1(a)huawei.com> tipc: restrict socket queue dumps in enqueue tracepoints Cássio Gabriel <cassiogabrielcontato(a)gmail.com> ASoC: SOF: topology: validate vendor array size before parsing Peter Ujfalusi <peter.ujfalusi(a)linux.intel.com> ASoC: SOF: ipc3-control: Fix TOCTOU in bytes_put and bytes_get Peter Ujfalusi <peter.ujfalusi(a)linux.intel.com> ASoC: SOF: ipc3-control: Use overflow checks in control_update size calc Peter Ujfalusi <peter.ujfalusi(a)linux.intel.com> ASoC: SOF: ipc4-control: Fix TOCTOU in sof_ipc4_bytes_put Zhang Tianci <zhangtianci.1997(a)bytedance.com> vduse: Fix race in vduse_dev_msg_sync and vduse_dev_read_iter Wentao Liang <vulab(a)iscas.ac.cn> mlxsw: fix refcount leak in mlxsw_sp_vrs_lpm_tree_replace() Wentao Liang <vulab(a)iscas.ac.cn> mlxsw: fix refcount leak in mlxsw_sp_port_lag_join() Przemyslaw Korba <przemyslaw.korba(a)intel.com> idpf: add padding to PTP virtchnl structures Guangshuo Li <lgs201920130244(a)gmail.com> smb: client: fix overflow in passthrough ioctl bounds check Anas Khan <anxkhn28(a)gmail.com> drm/xe: remove duplicate <kunit/test-bug.h> include Harman Kalra <hkalra(a)marvell.com> octeontx2-af: fix VF bringup affecting PF promiscuous state Li RongQing <lirongqing(a)baidu.com> net/mlx5: Fix L3 tunnel entropy refcount leak Wang Yan <wangyan01(a)kylinos.cn> selftests/net: fix EVP_MD_CTX leak in tcp_mmap Timur Tabi <ttabi(a)nvidia.com> regulator: core: regulator_lock_two() should test for EDEADLK not EDEADLOCK Cao Guanghui <caoguanghui(a)kylinos.cn> dm era: fix NULL pointer dereference in metadata_open() Chuck Lever <chuck.lever(a)oracle.com> SUNRPC: pin upper rpc_clnt across the TLS connect_worker Chuck Lever <chuck.lever(a)oracle.com> SUNRPC: release lower rpc_clnt if killed waiting for XPRT_LOCKED Guangshuo Li <lgs201920130244(a)gmail.com> cifs: validate DFS referral string offsets Rongguang Wei <weirongguang(a)kylinos.cn> s390/zcrypt: Remove the empty file Julian Anastasov <ja(a)ssi.bg> ipvs: ensure inner headers in ICMP errors are in headroom Yizhou Zhao <zhaoyz24(a)mails.tsinghua.edu.cn> ipvs: fix PMTU for GUE/GRE tunnel ICMP errors Yizhou Zhao <zhaoyz24(a)mails.tsinghua.edu.cn> ipvs: use parsed transport offset in TCP state lookup Yizhou Zhao <zhaoyz24(a)mails.tsinghua.edu.cn> ipvs: pass parsed transport offset to state handlers Tamaki Yanagawa <ty(a)000ty.net> netfilter: nft_lookup: fix catchall element handling with inverted lookups Eric Dumazet <edumazet(a)google.com> ipv4: igmp: Fix potential memory leaks in igmp_mod_timer() and igmp_stop_timer() Yuyang Huang <yuyanghuang(a)google.com> ipv4: igmp: annotate data-races around timer-related fields Yuyang Huang <sigefriedhyy(a)gmail.com> ipv4: igmp: annotate data-races around im->users Eric Dumazet <edumazet(a)google.com> ipv6: mcast: Fix potential UAF in MLD delayed work Eric Dumazet <edumazet(a)google.com> ipv4: igmp: Fix potential UAF in igmp_gq_start_timer() Rosen Penev <rosenp(a)gmail.com> gpio: mvebu: free generic chips on unbind Sandipan Das <sandipan.das(a)amd.com> perf/x86/amd/core: Avoid enabling BRS from the SVM reload path Suman Ghosh <sumang(a)marvell.com> octeontx2-pf: check DMAC extraction support before filtering Samuel Moelius <sam.moelius(a)trailofbits.com> net/sched: cake: reject overhead values that underflow length Rosen Penev <rosenp(a)gmail.com> net: mdio: select REGMAP_MMIO instead of depending on it Maíra Canal <mcanal(a)igalia.com> drm/v3d: Reject invalid indirect BO handle in indirect CSD setup Lizhi Hou <lizhi.hou(a)amd.com> accel/amdxdna: Fix potential amdxdna_umap lifetime race Ben Dooks <ben.dooks(a)codethink.co.uk> tracing: Make tracepoint_printk static as not exported Jia Wang <wangjia(a)ultrarisc.com> gpio: dwapb: Defer clock gating until noirq Rosen Penev <rosenp(a)gmail.com> gpio: dwapb: reduce allocation to single kzalloc Jisheng Zhang <jszhang(a)kernel.org> gpio: dwapb: Use modern PM macros Enrico Pozzobon <enrico.pozzobon(a)dissecto.com> net: usb: lan78xx: disable VLAN filter in promiscuous mode Chuck Lever <chuck.lever(a)oracle.com> net/tls: Consume empty data records in tls_sw_read_sock() Lizhi Hou <lizhi.hou(a)amd.com> accel/amdxdna: Use unsigned long for nr_pages in amdxdna_hmm_register() Hui Wang <hui.wang(a)canonical.com> ring-buffer: Fix event length with forced 8-byte alignment Stig Hornang <stig(a)hornang.me> Bluetooth: L2CAP: fix tx ident leak for commands without a response Weiming Shi <bestswngs(a)gmail.com> Bluetooth: bpa10x: avoid OOB read of revision string in bpa10x_setup() Pauli Virtanen <pav(a)iki.fi> Bluetooth: ISO: exclude RFU bits from ISO_SDU_Length Sungwoo Kim <iam(a)sung-woo.kim> Bluetooth: sco: Fix a race condition in sco_sock_timeout() Cen Zhang <zzzccc427(a)gmail.com> Bluetooth: MGMT: Fix adv monitor add failure cleanup Cen Zhang <zzzccc427(a)gmail.com> Bluetooth: 6lowpan: hold L2CAP conn across debugfs control Eric Dumazet <edumazet(a)google.com> amt: fix size calculation in amt_get_size() Xiang Mei <xmei5(a)asu.edu> net/smc: fix UAF in smc_cdc_rx_handler() by pinning the socket Jamal Hadi Salim <jhs(a)mojatatu.com> net/sched: act_pedit: fix TOCTOU heap OOB write in tc offload Xiang Mei <xmei5(a)asu.edu> net: qualcomm: rmnet: validate MAP frame length before ingress parsing Shigeru Yoshida <syoshida(a)redhat.com> qede: fix off-by-one in BD ring consumption on build_skb failure Jens Emil Schulz Østergaard <jensemil.schulzostergaard(a)microchip.com> net: microchip: vcap: fix races on the shared Super VCAP block Feng Liu <feliu(a)nvidia.com> net/mlx5e: Fix publication race for priv->channel_stats[] Feng Liu <feliu(a)nvidia.com> net/mlx5e: Fix HV VHCA stats agent registration race Feng Liu <feliu(a)nvidia.com> net/mlx5e: Fix HV VHCA stats zero-sized buffer allocation Shay Drory <shayd(a)nvidia.com> net/mlx5: LAG, MPESW, Fix missing complete() on devcom error Wyatt Feng <bronzed_45_vested(a)icloud.com> netfilter: xt_connmark: reject invalid shift parameters Pablo Neira Ayuso <pablo(a)netfilter.org> netfilter: nft_set_rbtree: get command skips end element with open interval Zhixing Chen <running910(a)gmail.com> netfilter: ip6tables: mark malformed IPv6 extension headers for hotdrop Feng Wu <wufengwufengwufeng(a)gmail.com> netfilter: xt_rateest: fix u64 truncation in xt_rateest_mt() Wyatt Feng <bronzed_45_vested(a)icloud.com> netfilter: xt_u32: reject invalid shift counts Qihang <q.h.hack.winter(a)gmail.com> gue: validate REMCSUM private option length Xiang Mei <xmei5(a)asu.edu> net: usb: net1080: validate packet_len before pad-byte access in rx_fixup Jia He <justin.he(a)arm.com> arm64/sysreg: Fix BWE field encoding in ID_AA64DFR2_EL1 Yiyang Chen <chenyy23(a)mails.tsinghua.edu.cn> selftests/hid: Cover hid_bpf_get_data() size overflow Yiyang Chen <chenyy23(a)mails.tsinghua.edu.cn> selftests/hid: Load only requested struct_ops maps Yiyang Chen <chenyy23(a)mails.tsinghua.edu.cn> HID: bpf: Fix hid_bpf_get_data() range check Anshuman Khandual <anshuman.khandual(a)arm.com> arm64/mm: Optimize TLB flush in unmap_hotplug_[pmd|pud]_range() Lee Jones <lee(a)kernel.org> HID: core: Fix OOB read in hid_get_report for numbered reports Georgiy Osokin <g.osokin(a)auroraos.dev> HID: picolcd: prevent NULL pointer dereference in picolcd_send_and_wait() Karuna Ramkumar <rkaruna(a)google.com> ata: libata-scsi: limit simulated SCSI command copy to response length Myeonghun Pak <mhun512(a)gmail.com> ata: sata_gemini: unwind clocks on IDE pinctrl errors David Howells <dhowells(a)redhat.com> cifs: Fix missing credit release on failure in cifs_issue_read() Jiri Olsa <jolsa(a)kernel.org> uprobes/x86: Use proper mm_struct in __in_uprobe_trampoline David Windsor <dwindsor(a)gmail.com> x86/uprobes: Keep shadow stack in sync for emulated CALLs Michal Wajdeczko <michal.wajdeczko(a)intel.com> drm/xe/pf: Don't attempt to process FAST_REQ or EVENT relays Shuicheng Lin <shuicheng.lin(a)intel.com> drm/xe/hw_engine: Fix double-free of managed BO in error path Shuicheng Lin <shuicheng.lin(a)intel.com> drm/xe/userptr: Hold notifier_lock for write on inject test path Francois Dugast <francois.dugast(a)intel.com> drm/xe/pt: Fix NULL pointer dereference in xe_pt_zap_ptes_entry() David Howells <dhowells(a)redhat.com> netfs: Fix folio state after ENOMEM whilst under writeback iteration David Howells <dhowells(a)redhat.com> netfs: Fix writeback error handling David Howells <dhowells(a)redhat.com> netfs: Fix writethrough to use collection offload David Howells <dhowells(a)redhat.com> netfs: Fix netfs_create_write_req() to handle async cache object creation Morduan Zang <zhangdandan(a)uniontech.com> iomap: guard io_size EOF trim against concurrent truncate underflow Amir Goldstein <amir73il(a)gmail.com> ovl: fix comment about locking order Michael Bommarito <michael.bommarito(a)gmail.com> minix: avoid overflow in bitmap block count calculation David Howells <dhowells(a)redhat.com> afs: Fix unchecked-length string display in debug statement David Howells <dhowells(a)redhat.com> afs: Fix the volume AFS_VOLUME_RM_TREE is set on David Howells <dhowells(a)redhat.com> afs: Fix premature cell exposure through /afs David Howells <dhowells(a)redhat.com> afs: Fix lack of locking around modifications of net->cells_dyn_ino David Howells <dhowells(a)redhat.com> afs: Fix vllist leak David Howells <dhowells(a)redhat.com> afs: Fix missing NULL pointer check in afs_break_some_callbacks() David Howells <dhowells(a)redhat.com> afs: Fix callback service message parsers to pass through -EAGAIN David Howells <dhowells(a)redhat.com> afs: Fix reinitialisation of the inode, in particular ->lock_work David Howells <dhowells(a)redhat.com> afs: Fix misplaced inc of net->cells_outstanding David Howells <dhowells(a)redhat.com> afs: Fix bulk lookup malfunction due to change in dir_emit() API Li RongQing <lirongqing(a)baidu.com> afs: Remove erroneous seq |= 1 in volume lookup loop Zilin Guan <zilin(a)seu.edu.cn> afs: use kvfree() to free memory allocated by kvcalloc() David Howells <dhowells(a)redhat.com> afs: Fix double netfs initialisation in afs_root_iget() Dan Carpenter <error27(a)gmail.com> afs: Fix error code in afs_extract_vl_addrs() Christian Brauner <brauner(a)kernel.org> fs: refuse O_TMPFILE creation with an unmapped fsuid or fsgid Samuel Moelius <sam.moelius(a)trailofbits.com> net/sched: hhf: clear heavy-hitter state on reset Samuel Moelius <sam.moelius(a)trailofbits.com> net/sched: dualpi2: clear stale classification on filter miss Viacheslav Bocharov <v(a)baodeep.com> pinctrl: meson: restore non-sleeping GPIO access Vladimir Zapolskiy <vz(a)kernel.org> gpio: timberdale: Return -ENOMEM on dynamic memory allocation in probe Gil Portnoy <dddhkts1(a)gmail.com> ksmbd: fix use-after-free of fp->owner.name in durable handle owner check Haofeng Li <lihaofeng(a)kylinos.cn> ksmbd: reject undersized DACLs before parsing ACEs Sechang Lim <rhkrqnwk98(a)gmail.com> net/sched: act_bpf: use rcu_dereference_bh() to read the filter Jakub Kicinski <kuba(a)kernel.org> selftests: drv-net: tso: don't touch dangerous feature bits Gleb Markov <markov.gi(a)npc-ksb.ru> cxgb4: Fix decode strings dump for T6 adapters Longjun Tang <tanglongjun(a)kylinos.cn> virtio_net: disable cb when NAPI is busy-polled Xin Long <lucien.xin(a)gmail.com> sctp: fix addr_wq_timer race in sctp_free_addr_wq() Qingshuang Fu <fuqingshuang(a)kylinos.cn> irqchip/ts4800: Fix missing chained handler cleanup on remove Yuho Choi <dbgh9129(a)gmail.com> irqchip/gic-v3-its: Fix OF node reference leak Masami Hiramatsu (Google) <mhiramat(a)kernel.org> tracing/probes: Make the $ prefix mandatory for comm access Sechang Lim <rhkrqnwk98(a)gmail.com> tracing/fprobe: Fix NULL pointer dereference in fprobe_fgraph_entry() Martin Kaiser <martin(a)kaiser.cx> tracing: eprobe: read the complete FILTER_PTR_STRING pointer Masami Hiramatsu (Google) <mhiramat(a)kernel.org> tracing/events: Fix to check the simple_tsk_fn creation Masami Hiramatsu (Google) <mhiramat(a)kernel.org> tracing/probes: Remove WARN_ON_ONCE from parse_btf_arg Steven Rostedt <rostedt(a)goodmis.org> tracing/eprobes: Allow use of BTF names to dereference pointers Boris Brezillon <boris.brezillon(a)collabora.com> drm/panthor: Interrupt group start/resumption if group_bind_locked() fails Boris Brezillon <boris.brezillon(a)collabora.com> drm/panthor: Fix a leak when a group is evicted before the tiler OOM is serviced Boris Brezillon <boris.brezillon(a)collabora.com> drm/panthor: Don't overrule pending immediate ticks in sched_resume_tick() Boris Brezillon <boris.brezillon(a)collabora.com> drm/panthor: Fix potential invalid pointer deref in group_process_tiler_oom() Ido Schimmel <idosch(a)nvidia.com> bridge: stp: Fix a potential use-after-free when deleting a bridge Jamal Hadi Salim <jhs(a)mojatatu.com> net/sched: sch_teql: Introduce slaves_lock to avoid race condition and UAF Rosen Penev <rosenp(a)gmail.com> net: gianfar: dispose irq mappings on probe failure and device removal Jiawen Wu <jiawenwu(a)trustnetic.com> net: libwx: fix VMDQ mask for 1-queue mode Petr Wozniak <petr.wozniak(a)gmail.com> net: phy: sfp: free mii_bus in sfp_i2c_mdiobus_destroy Xiang Mei <xmei5(a)asu.edu> usbnet: gl620a: fix out-of-bounds read in genelink_rx_fixup() Pengfei Zhang <zhangfeionline(a)gmail.com> ipv6: fib6: fix NULL deref in fib6_walk_continue() on multi-batch dump Jakub Kicinski <kuba(a)kernel.org> eth: fbnic: don't cache shinfo across skb realloc Guenter Roeck <linux(a)roeck-us.net> hwmon: (aspeed-g6-pwm-tach) Guard fan RPM calculation against divide-by-zero Guenter Roeck <linux(a)roeck-us.net> hwmon: (pmbus) Fix passing events to regulator core Matti Vaittinen <mazziesaccount(a)gmail.com> hwmon: adm1275: Prevent reading uninitialized stack Luca Weiss <luca.weiss(a)fairphone.com> ASoC: codecs: lpass-va-macro: Fix LPASS Codec Version for SC7280 Srinivas Kandagatla <srinivas.kandagatla(a)oss.qualcomm.com> ASoC: codecs: lpass-va-macro: add SM6115 compatible Kyle Hendry <kylehendrydev(a)gmail.com> MIPS: mm: Add check for highmem before removing memory block Maciej W. Rozycki <macro(a)orcam.me.uk> MIPS: DEC: Ensure RTC platform device deregistration upon failure Xin Long <lucien.xin(a)gmail.com> sctp: add INIT verification after cookie unpacking Yousef Alhouseen <alhouseenyousef(a)gmail.com> sctp: fix SCTP_RESET_STREAMS stream list length limit Wei Fang <wei.fang(a)nxp.com> net: enetc: check the number of BDs needed for xdp_frame Matvey Kovalev <matvey.kovalev(a)ispras.ru> qede: fix out-of-bounds check for cqe->len_list[] Nuoqi Gui <gnq25(a)mails.tsinghua.edu.cn> seg6: validate SRH length before reading fixed fields Corey Leavitt <corey(a)leavitt.info> net: pse-pd: scope pse_control regulator handle to kref lifetime Pengpeng Hou <pengpeng(a)iscas.ac.cn> gpio: htc-egpio: use managed gpiochip registration Pengpeng Hou <pengpeng(a)iscas.ac.cn> gpio: mvebu: fail probe if gpiochip registration fails Samuel Holland <samuel.holland(a)sifive.com> riscv: Fix 32-bit call_on_irq_stack() frame pointer ABI Yicong Yang <yang.yicong(a)picoheart.com> ACPI: RIMT: Only defer the IOMMU configuration in init stage Pengpeng Hou <pengpeng(a)iscas.ac.cn> spi: sh-msiof: abort transfers when reset times out Martin Kaiser <martin(a)kaiser.cx> tracing: probes: fix typo in a log message Jiaming Zhang <r772577952(a)gmail.com> ALSA: FCP: Fix NULL pointer dereference in interface lookup Shuaisong Yang <yangshuaisong(a)h-partners.com> net: hns3: differentiate autoneg default values between copper and fiber Shuaisong Yang <yangshuaisong(a)h-partners.com> net: hns3: fix permanent link down deadlock after reset Shuaisong Yang <yangshuaisong(a)h-partners.com> net: hns3: refactor MAC autoneg and speed configuration Shuaisong Yang <yangshuaisong(a)h-partners.com> net: hns3: unify copper port ksettings configuration path Nirmoy Das <nirmoyd(a)nvidia.com> selftests: tls: size splice_short pipe by page size Rob Herring (Arm) <robh(a)kernel.org> dt-bindings: net: renesas,ether: Drop example "ethernet-phy-ieee802.3-c22" fallback Eric Dumazet <edumazet(a)google.com> net: udp_tunnel: prevent double queueing in udp_tunnel_nic_device_sync Shengjiu Wang <shengjiu.wang(a)nxp.com> ASoC: fsl_asrc_dma: fix eDMA maxburst misalignment with channel count Tiezhu Yang <yangtiezhu(a)loongson.cn> LoongArch: BPF: Fix off-by-one error in tail call Tiezhu Yang <yangtiezhu(a)loongson.cn> LoongArch: BPF: Fix outdated tail call comments 谢致邦 (XIE Zhibang) <Yeking(a)Red54.com> LoongArch: Move struct kimage forward declaration before use Shitalkumar Gandhi <shital.gandhi45(a)gmail.com> net: ethernet: sunplus: spl2sw: fix phy_node refcount leak in remove Ruoyu Wang <ruoyuw560(a)gmail.com> net: sungem: fix probe error cleanup Yun Zhou <yun.zhou(a)windriver.com> net: mvneta: re-enable percpu interrupt on resume Subbaraya Sundeep <sbhatta(a)marvell.com> octeontx2-af: Validate NIX maximum LFs correctly Jan Klos <honza.klos(a)gmail.com> net: phy: realtek: Clear MDIO_AN_10GBT_CTRL_ADV10G bit David Yang <mmyangfl(a)gmail.com> net: dsa: realtek: fix memory leak in rtl8366rb_setup_led() Haoxiang Li <haoxiang_li2024(a)163.com> rtc: cmos: unregister HPET IRQ handler on probe failure Fredrik M Olsson <fredrik.m.olsson(a)axis.com> rtc: ds1307: Fix off-by-one issue with wday for rx8130 Huiwen He <hehuiwen(a)kylinos.cn> smb/client: preserve errors from smb2_set_sparse() Li RongQing <lirongqing(a)baidu.com> ACPI: processor_idle: Mark LPI enter functions as __cpuidle Rafael J. Wysocki <rafael.j.wysocki(a)intel.com> thermal: testing: zone: Flush work items during cleanup Jakub Kicinski <kuba(a)kernel.org> eth: fbnic: fix ordering of heartbeat vs ownership Fernando Fernandez Mancera <fmancera(a)suse.de> ipv6: fix missing notification for ignore_routes_with_linkdown Fernando Fernandez Mancera <fmancera(a)suse.de> ipv6: fix state corruption during proxy_ndp sysctl restart Fernando Fernandez Mancera <fmancera(a)suse.de> ipv6: fix error handling in disable_policy sysctl Fernando Fernandez Mancera <fmancera(a)suse.de> ipv6: fix error handling in forwarding sysctl Fernando Fernandez Mancera <fmancera(a)suse.de> ipv6: fix error handling in ignore_routes_with_linkdown sysctl Fernando Fernandez Mancera <fmancera(a)suse.de> ipv6: fix error handling in disable_ipv6 sysctl Jamal Hadi Salim <jhs(a)mojatatu.com> net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle Nicolai Buchwitz <nb(a)tipi-net.de> net: usb: lan78xx: restore VLAN and hash filters after link up Eric Dumazet <edumazet(a)google.com> veth: fix NAPI leak in XDP enable error path Aleksandrova Alyona <aga(a)itb.spb.ru> net: dsa: sja1105: round up PTP perout pin duration Eric Dumazet <edumazet(a)google.com> net: do not acquire dev->tx_global_lock in netdev_watchdog_up() Xiang Mei <xmei5(a)asu.edu> net, bpf: check master for NULL in xdp_master_redirect() Krzysztof Wilczyński <kwilczynski(a)kernel.org> alpha/PCI: Fix __pci_mmap_fits() overflow for zero-length BARs Krzysztof Wilczyński <kwilczynski(a)kernel.org> alpha/PCI: Add security_locked_down() check to pci_mmap_resource() Koichiro Den <den(a)valinux.co.jp> NTB: epf: Fix doorbell bitmask and IRQ vector handling Koichiro Den <den(a)valinux.co.jp> NTB: epf: Report 0-based doorbell vector via ntb_db_event() Koichiro Den <den(a)valinux.co.jp> NTB: epf: Make db_valid_mask cover only real doorbell bits Qingshuang Fu <fuqingshuang(a)kylinos.cn> gpio: davinci: fix IRQ domain leak on devm_kzalloc failure Florian Westphal <fw(a)strlen.de> netfilter: nft_compat: ebtables emulation must reject non-bridge targets Runyu Xiao <runyu.xiao(a)seu.edu.cn> netfilter: nft_synproxy: stop bypassing the priv->info snapshot Fernando Fernandez Mancera <fmancera(a)suse.de> netfilter: nf_conncount: prevent connlimit drops for early confirmed ct Mathias Krause <minipli(a)grsecurity.net> netfilter: nf_nat: avoid invalid nat_net pointer use on failed nf_nat_init() Bradley Morgan <include(a)grrlz.net> bpf: Disable xfrm_decode_session hook attachment Chen Cheng <chencheng(a)fnnas.com> md/raid5: avoid R5_Overlap races while breaking stripe batches Chen Cheng <chencheng(a)fnnas.com> md/raid5: use stripe state snapshot in break_stripe_batch_list() Kuniyuki Iwashima <kuniyu(a)google.com> ipv4: fib: Don't ignore error route in local/main tables. Jakub Kicinski <kuba(a)kernel.org> eth: bnxt: improve the timing of stats Jakub Kicinski <kuba(a)kernel.org> eth: bnxt: rename ring_err_stats -> ring_drv_stats Jakub Kicinski <kuba(a)kernel.org> eth: bnxt: gather and report HW-GRO stats Xiang Mei <xmei5(a)asu.edu> ipv6: Fix null-ptr-deref in fib6_nh_mtu_change(). Gil Portnoy <dddhkts1(a)gmail.com> ksmbd: fix use-after-free of conn->preauth_info in concurrent SMB2 NEGOTIATE Stepan Ionichev <sozdayvek(a)gmail.com> rtc: msc313: fix NULL deref in shared IRQ handler at probe Mohamed Khalfella <mkhalfella(a)purestorage.com> i40e: Fix i40e_debug() to use struct i40e_hw argument ZhaoJinming <zhaojinming(a)uniontech.com> ice: dpll: fix memory leak in ice_dpll_init_info error paths ZhaoJinming <zhaojinming(a)uniontech.com> ice: dpll: set pointers to NULL after kfree in ice_dpll_deinit_info John Madieu <john.madieu.xa(a)bp.renesas.com> rtc: isl1208: Balance enable_irq_wake() with disable_irq_wake() on cleanup Marcin Szycik <marcin.szycik(a)intel.com> ice: call netif_keep_dst() once when entering switchdev mode Lukasz Czapnik <lukasz.czapnik(a)intel.com> ice: fix AQ error code comparison in ice_set_pauseparam() Dawid Osuchowski <dawid.osuchowski(a)linux.intel.com> ice: fix FDIR CTRL VSI resource leak in ice_reset_all_vfs() Manivannan Sadhasivam <manivannan.sadhasivam(a)oss.qualcomm.com> PCI: endpoint: pci-epf-ntb: Add check to detect 'db_count' value of 0 Manivannan Sadhasivam <manivannan.sadhasivam(a)oss.qualcomm.com> PCI: endpoint: pci-epf-vntb: Add check to detect 'db_count' value of 0 Xiang Mei <xmei5(a)asu.edu> drm/edid: fix OOB read in drm_parse_tiled_block() Ruoyu Wang <ruoyuw560(a)gmail.com> gpiolib: initialize return value in gpiochip_set_multiple() Bartosz Golaszewski <bartosz.golaszewski(a)oss.qualcomm.com> power: sequencing: fix ABBA deadlock in pwrseq_device_unregister() Amery Hung <ameryhung(a)gmail.com> bpf: Fix effective prog array index with BPF_F_PREORDER Avinash Duduskar <avinash.duduskar(a)gmail.com> bpf: zero-initialize the fib lookup flow struct Yichong Chen <chenyichong(a)uniontech.com> bpftool: Fix vmlinux BTF leak in cgroup commands Nuoqi Gui <gnq25(a)mails.tsinghua.edu.cn> bpf: Fix stack slot index in nospec checks Ronan Dalton <ronan.dalton(a)alliedtelesis.co.nz> rtc: ds1307: handle oscillator stop flag for ds1337/ds1339/ds3231 Antoni Pokusinski <apokusinski01(a)gmail.com> rtc: abx80x: fix the RTC_VL_CLR clearing all status flags Ioana Ciornei <ioana.ciornei(a)nxp.com> dpaa2-switch: do not accept VLAN uppers while bridged Jiayuan Chen <jiayuan.chen(a)linux.dev> ipv6: ioam: fix type confusion of dst_entry Weiming Shi <bestswngs(a)gmail.com> ipv6: ndisc: fix NULL deref in accept_untracked_na() Wayen Yan <win847(a)gmail.com> net: airoha: Fix skb->priority underflow in airoha_dev_select_queue() Michael Bommarito <michael.bommarito(a)gmail.com> net/sched: act_ct: fix nf_connlabels leak on two error paths Rosen Penev <rosenp(a)gmail.com> net: emac: Fix NULL pointer dereference in emac_probe Geetha sowjanya <gakula(a)marvell.com> octeontx2-pf: mcs: Fix mcs resources free on PF shutdown Subbaraya Sundeep <sbhatta(a)marvell.com> octeontx2-pf: Clear stats of all resources when freeing resources Geetha sowjanya <gakula(a)marvell.com> octeontx2-af: mcs: Fix unsupported secy stats read Wayen Yan <win847(a)gmail.com> net: ethernet: mtk_ppe: Fix rhashtable leak in mtk_ppe_init error paths Weiming Shi <bestswngs(a)gmail.com> tipc: fix use-after-free of the discoverer in tipc_disc_rcv() Ruoyu Wang <ruoyuw560(a)gmail.com> net: marvell: prestera: initialize err in prestera_port_sfp_bind Aboorva Devarajan <aboorvad(a)linux.ibm.com> selftests/mm: fix exclusive_cow test fork() handling Sayali Patil <sayalip(a)linux.ibm.com> selftests/mm: allow PUD-level entries in compound testcase of hmm tests Sayali Patil <sayalip(a)linux.ibm.com> selftests/mm: clarify alternate unmapping in compaction_test Sayali Patil <sayalip(a)linux.ibm.com> selftests/mm: skip uffd-stress test when nr_pages_per_cpu is zero Sayali Patil <sayalip(a)linux.ibm.com> selftests/mm: ensure destination is hugetlb-backed in hugetlb-mremap Sayali Patil <sayalip(a)linux.ibm.com> selftest/mm: register existing mapping with userfaultfd in hugetlb-mremap Sayali Patil <sayalip(a)linux.ibm.com> selftests/mm: free dynamically allocated PMD-sized buffers in split_huge_page_test Sayali Patil <sayalip(a)linux.ibm.com> selftests/mm: size tmpfs according to PMD page size in split_huge_page_test Sayali Patil <sayalip(a)linux.ibm.com> selftests/mm: fix cgroup task placement and drop memory.current checks in hugetlb_reparenting_test.sh Sayali Patil <sayalip(a)linux.ibm.com> selftests/mm: fix hugetlb pathname construction in hugetlb_reparenting_test.sh Sayali Patil <sayalip(a)linux.ibm.com> selftests/mm: restore default nr_hugepages value via exit trap in hugetlb_reparenting_test.sh Sayali Patil <sayalip(a)linux.ibm.com> selftests/mm: restore default nr_hugepages value via exit trap in charge_reserved_hugetlb.sh Hao Ge <hao.ge(a)linux.dev> alloc_tag: fix use-after-free in /proc/allocinfo after module unload Bhargav Joshi <j.bhargav.u(a)gmail.com> irqchip/crossbar: Fix parent domain resource leak Sebastian Andrzej Siewior <bigeasy(a)linutronix.de> mailbox: imx: Forward the timeout/ error in imx_mu_generic_tx() Florian Westphal <fw(a)strlen.de> netfilter: nft_meta_bridge: fix NFT_META_BRI_IIFPVID stack leak Florian Westphal <fw(a)strlen.de> netfilter: nf_reject: skip iphdr options when looking for icmp header Florian Westphal <fw(a)strlen.de> netfilter: nft_flow_offload: zero device address for non-ether case Pablo Neira Ayuso <pablo(a)netfilter.org> netfilter: flowtable: move path discovery infrastructure to its own file Florian Westphal <fw(a)strlen.de> netfilter: nft_meta_bridge: add validate callback for get operations Florian Westphal <fw(a)strlen.de> netfilter: nft_payload: reject offsets exceeding 65535 bytes Jozsef Kadlecsik <kadlec(a)netfilter.org> netfilter: ipset: make sure gc is properly stopped Jozsef Kadlecsik <kadlec(a)netfilter.org> netfilter: ipset: fix order of kfree_rcu() and rcu_assign_pointer() Jozsef Kadlecsik <kadlec(a)netfilter.org> netfilter: ipset: Don't use test_bit() in lockless RCU readers in hash types Jozsef Kadlecsik <kadlec(a)netfilter.org> netfilter: ipset: annotate "pos" for concurrent readers/writers Jozsef Kadlecsik <kadlec(a)netfilter.org> netfilter: ipset: Fix data race between add and dump in all hash types Abd-Alrhman Masalkhi <abd.masalkhi(a)gmail.com> md/raid1: free r1_bio when REQ_NOWAIT is set and read would block on retry Abd-Alrhman Masalkhi <abd.masalkhi(a)gmail.com> md/raid1: honor REQ_NOWAIT when waiting for behind writes Yu Kuai <yukuai(a)fnnas.com> md: merge mddev serialize_policy into mddev_flags Yu Kuai <yukuai(a)fnnas.com> md: merge mddev faillast_dev into mddev_flags Yu Kuai <yukuai(a)fnnas.com> md: merge mddev has_superblock into mddev_flags Robertus Diawan Chris <robertusdchris(a)gmail.com> mac802154: Prevent overwrite return code in mac802154_perform_association() Aleksandr Nogikh <nogikh(a)google.com> ieee802154: fix kernel-infoleak in dgram_recvmsg() Ivan Abramov <i.abramov(a)mt-integration.ru> ieee802154: Remove WARN_ON() in cfg802154_pernet_exit() Ivan Abramov <i.abramov(a)mt-integration.ru> ieee802154: Avoid calling WARN_ON() on -ENOMEM in cfg802154_switch_netns() Ivan Abramov <i.abramov(a)mt-integration.ru> ieee802154: Restore initial state on failed device_rename() in cfg802154_switch_netns() Xu Rao <raoxu(a)uniontech.com> ACPI: IPMI: Fix inverted interface check in ipmi_bmc_gone() Andy Shevchenko <andriy.shevchenko(a)linux.intel.com> ACPI: resource: Amend kernel-doc style Ricardo Neri <ricardo.neri-calderon(a)linux.intel.com> thermal: intel: Fix dangling resources on thermal_throttle_online() failure Breno Leitao <leitao(a)debian.org> arm64/hw_breakpoint: reject unaligned watchpoints that would truncate BAS Cen Zhang <zzzccc427(a)gmail.com> ALSA: usb-audio: Kill MIDI 2.0 URBs before freeing endpoints Ido Schimmel <idosch(a)nvidia.com> selftests: vlan_bridge_binding: Fix flaky operational state check Yun Zhou <yun.zhou(a)windriver.com> flow_dissector: check device type before reading ETH_ADDRS Lukasz Raczylo <lukasz(a)raczylo.com> net: macb: add TX stall timeout callback to recover from lost TSTART write Wayen Yan <win847(a)gmail.com> net: airoha: fix foe_check_time allocation size Cosmin Ratiu <cratiu(a)nvidia.com> devlink: Fix parent ref leak on tc-bw failure Cosmin Ratiu <cratiu(a)nvidia.com> devlink: Fix parent ref leak in devl_rate_node_create() Ioana Ciornei <ioana.ciornei(a)nxp.com> dpaa2-switch: fix VLAN upper check not rejecting bridge join Xiang Mei <xmei5(a)asu.edu> virtio-net: fix len check in receive_big() Quang Nguyen <quang.nguyen.wx(a)renesas.com> spi: rpc-if: Use correct device for hardware reinitialization on resume Mark Tomlinson <mark.tomlinson(a)alliedtelesis.co.nz> PCI: iproc: Restore .map_irq() for the platform bus driver Michael Bommarito <michael.bommarito(a)gmail.com> ALSA: usb-audio: qcom: clear opened when stream enable fails Michael Bommarito <michael.bommarito(a)gmail.com> ALSA: usb-audio: qcom: reject stream disable with no active interface Xin Long <lucien.xin(a)gmail.com> sctp: hold socket lock when dumping endpoints in sctp_diag Jakub Kicinski <kuba(a)kernel.org> net: psample: fix info leak in PSAMPLE_ATTR_DATA Ratheesh Kannoth <rkannoth(a)marvell.com> octeontx2-pf: Fix leak of SQ timestamp buffer on teardown Thadeu Lima de Souza Cascardo <cascardo(a)igalia.com> drm/amdgpu: initialize irq.lock spinlock earlier Mario Limonciello <mario.limonciello(a)amd.com> drm/amdkfd: fix list_del corruption in kfd_criu_resume_svm Matthew Schwartz <matthew.schwartz(a)linux.dev> drm/amd/display: Fix mem_type change detection for async flips Yunxiang Li <Yunxiang.Li(a)amd.com> drm/amdkfd: Avoid double-unpin of DOORBELL/MMIO BOs on free Sen Wang <sen(a)ti.com> ASoC: tlv320aic3x: restrict CLKDIV bypass Q values in dual-rate mode Arnaldo Carvalho de Melo <acme(a)redhat.com> perf dso: Set standard errno on decompression failure Arnaldo Carvalho de Melo <acme(a)redhat.com> perf bpf: Validate array presence before casting BPF prog info pointers Arnaldo Carvalho de Melo <acme(a)redhat.com> perf cs-etm: Bounds-check CPU in cs_etm__get_queue() Arnaldo Carvalho de Melo <acme(a)redhat.com> perf cs-etm: Require full global header in auxtrace_info size check Arnaldo Carvalho de Melo <acme(a)redhat.com> perf cs-etm: Validate num_cpu before metadata allocation Arnaldo Carvalho de Melo <acme(a)redhat.com> perf machine: Use snprintf() for guestmount path construction Eric Dumazet <edumazet(a)google.com> xfrm: validate selector family and prefixlen during match Eric Dumazet <edumazet(a)google.com> xfrm: annotate data-races around xfrm_policy_count[] and xfrm_policy_default[] Herbert Xu <herbert(a)gondor.apana.org.au> xfrm: Fix xfrm state cache insertion race Xu Rao <raoxu(a)uniontech.com> ALSA: usb-audio: qcom: Free sideband sg_table objects Adrian Hunter <adrian.hunter(a)intel.com> i3c: master: Add missing runtime PM get in dev_nack_retry_count_store() Adrian Hunter <adrian.hunter(a)intel.com> i3c: master: Update dev_nack_retry_count under maintenance lock Jisheng Zhang <jszhang(a)kernel.org> spi: dw: fix wrong BAUDR setting after resume Thomas Hellström <thomas.hellstrom(a)linux.intel.com> drm/xe: Fix wa_oob codegen recipe for external module builds Guangshuo Li <lgs201920130244(a)gmail.com> drm/i915: clear CRTC color blob pointers after dropping refs Pengpeng Hou <pengpeng(a)iscas.ac.cn> gpio: mlxbf3: fail probe if gpiochip registration fails Arnaldo Carvalho de Melo <acme(a)redhat.com> perf cs-etm: Reject CPU IDs that would overflow signed comparison Leo Yan <leo.yan(a)arm.com> perf: Remove redundant kernel.h include Arnaldo Carvalho de Melo <acme(a)redhat.com> perf bpf: Bounds-check array offsets in bpil_offs_to_addr() Arnaldo Carvalho de Melo <acme(a)redhat.com> perf bpf: Reject oversized BPF metadata events that truncate header.size Arnaldo Carvalho de Melo <acme(a)redhat.com> perf bpf: Validate func_info_rec_size and sub_id in synthesize_bpf_prog_name() Arnaldo Carvalho de Melo <acme(a)redhat.com> perf sched: Replace (void*)1 sentinel with proper runtime allocation Arnaldo Carvalho de Melo <acme(a)redhat.com> perf hwmon: Fix fd check to accept fd 0 in hwmon_pmu__describe_items() Arnaldo Carvalho de Melo <acme(a)redhat.com> perf tools: Use snprintf() for root_dir path construction Arnaldo Carvalho de Melo <acme(a)redhat.com> perf dso: Set error code when open() fails on uncompressed fallback path Arnaldo Carvalho de Melo <acme(a)redhat.com> perf dso: Fix heap overflow in dso__get_filename() on decompressed path Arnaldo Carvalho de Melo <acme(a)redhat.com> perf tools: Fix uninitialized pathname on uncompressed fallback in filename__decompress() Arnaldo Carvalho de Melo <acme(a)redhat.com> perf tools: Add O_CLOEXEC to open() calls in DSO and ELF code James Clark <james.clark(a)linaro.org> perf tools: Don't read build-ids from non-regular files Arnaldo Carvalho de Melo <acme(a)redhat.com> perf symbols: Break infinite loop on zero-filled notes in sysfs__read_build_id() Arnaldo Carvalho de Melo <acme(a)redhat.com> perf symbols: Validate p_filesz before use in filename__read_build_id() Arnaldo Carvalho de Melo <acme(a)redhat.com> perf symbols: Fix bswap copy-paste error for 32-bit ELF p_filesz Pengpeng Hou <pengpeng(a)iscas.ac.cn> sparc: led: avoid trimming a newline from empty writes Karol Wachowski <karol.wachowski(a)linux.intel.com> accel/ivpu: fix HWS command queue leak on registration failure John Johansen <john.johansen(a)canonical.com> apparmor: fix label can not be immediately before a declaration Adrian Hunter <adrian.hunter(a)intel.com> i3c: master: Prevent reuse of dynamic address on device add failure Adrian Hunter <adrian.hunter(a)intel.com> i3c: master: Defer new-device registration out of DAA caller context Adrian Hunter <adrian.hunter(a)intel.com> i3c: master: Ensure Hot-Join operations are stopped on shutdown Adrian Hunter <adrian.hunter(a)intel.com> i3c: master: Consolidate Hot-Join DAA work in the core Jorge Marques <jorge.marques(a)analog.com> i3c: master: Move rstdaa error suppression Adrian Hunter <adrian.hunter(a)intel.com> i3c: master: Add i3c_master_do_daa_ext() for post-hibernation address recovery Adrian Hunter <adrian.hunter(a)intel.com> i3c: master: Introduce optional Runtime PM support Adrian Hunter <adrian.hunter(a)intel.com> i3c: master: Replace WARN_ON() with dev_err() in i3c_dev_free_ibi_locked() Adrian Ng Ho Yin <adrianhoyin.ng(a)altera.com> i3c: add sysfs entry and attribute for Device NACK Retry count Adrian Hunter <adrian.hunter(a)intel.com> i3c: master: Make hot-join workqueue freezable to block hot-join during suspend Marco Crivellari <marco.crivellari(a)suse.com> i3c: master: add WQ_PERCPU to alloc_workqueue users Adrian Hunter <adrian.hunter(a)intel.com> i3c: mipi-i3c-hci: Preserve RUN bit when aborting DMA ring Adrian Hunter <adrian.hunter(a)intel.com> i3c: mipi-i3c-hci: Switch PIO data allocation to devm_kzalloc() Adrian Hunter <adrian.hunter(a)intel.com> i3c: mipi-i3c-hci: Allow for Multi-Bus Instances Adrian Hunter <adrian.hunter(a)intel.com> i3c: mipi-i3c-hci: Quieten initialization messages Maciek Borzecki <maciek.borzecki(a)gmail.com> apparmor: fix uninitialised pointer passed to audit_log_untrustedstring() Georgia Garcia <georgia.garcia(a)canonical.com> apparmor: don't audit files pointing to aa_null.dentry Zygmunt Krynicki <me(a)zygoon.pl> apparmor: put secmark label after secid lookup Zygmunt Krynicki <me(a)zygoon.pl> apparmor: aa_getprocattr free procattr leak on format failure Zygmunt Krynicki <me(a)zygoon.pl> apparmor: fail policy unpack on accept2 allocation failure Hongling Zeng <zenghongling(a)kylinos.cn> apparmor: Fix return in ns_mkdir_op Georgia Garcia <georgia.garcia(a)canonical.com> apparmor: remove or add symlinks to rawdata according to export_binary Georgia Garcia <georgia.garcia(a)canonical.com> apparmor: fix NULL pointer dereference in unpack_pdb Maxime Bélair <maxime.belair(a)canonical.com> apparmor: fix potential UAF in aa_replace_profiles Ryan Lee <ryan.lee(a)canonical.com> apparmor: grab ns lock and refresh when looking up changehat child profiles John Johansen <john.johansen(a)canonical.com> apparmor: fix rawdata_f_data implicit flex array Zygmunt Krynicki <me(a)zygoon.pl> apparmor: aa_label_alloc use aa_label_free on alloc failure Ruoyu Wang <ruoyuw560(a)gmail.com> apparmor: check label build before no_new_privs test Andrew Morton <akpm(a)linux-foundation.org> security/apparmor/apparmorfs.c: conditionally compile get_loaddata_common_ref() John Johansen <john.johansen(a)canonical.com> apparmor: fix refcount leak when updating the sk_ctx John Johansen <john.johansen(a)canonical.com> apparmor: fix race in unix socket mediation when peer_path is used John Johansen <john.johansen(a)canonical.com> apparmor: fix shadowing of plabel that prevents cache from being updated Yuanhe Shu <xiangzao(a)linux.alibaba.com> Revert "PCI/MSI: Unmap MSI-X region on error" Shuvam Pandey <shuvampandey1(a)gmail.com> PCI: dwc: Avoid dwc_pcie_rasdes_debugfs_deinit() NULL dereference when no RAS DES capability Felix Gu <ustc.gu(a)gmail.com> phy: freescale: phy-fsl-imx8qm-lvds-phy: Fix missing pm_runtime_disable() on probe error path Manivannan Sadhasivam <manivannan.sadhasivam(a)oss.qualcomm.com> PCI: mediatek: Use actual physical address instead of virt_to_phys() Ryder Lee <ryder.lee(a)mediatek.com> PCI: mediatek: Fix possible truncation in mtk_pcie_parse_port() Konrad Dybcio <konrad.dybcio(a)oss.qualcomm.com> dt-bindings: phy: sc8280xp-qmp-pcie: Disallow bifurcation register on Purwa Arnaldo Carvalho de Melo <acme(a)redhat.com> perf symbols: Add bounds checks to read_build_id() note iteration in minimal build Arnaldo Carvalho de Melo <acme(a)redhat.com> perf symbols: Add bounds checks to elf_read_build_id() note iteration Arnaldo Carvalho de Melo <acme(a)redhat.com> perf bpf: Fix metadata leak in perf_env__add_bpf_info() on duplicate insert Arnaldo Carvalho de Melo <acme(a)redhat.com> perf bpf: Fix map data leak in bpf_metadata_create() on alloc failure Arnaldo Carvalho de Melo <acme(a)redhat.com> perf bpf: Add NULL check for btf__type_by_id() in synthesize_bpf_prog_name() Arnaldo Carvalho de Melo <acme(a)redhat.com> tools lib api: Fix mount_overload() snprintf truncation and toupper range Arnaldo Carvalho de Melo <acme(a)redhat.com> tools lib api: Fix filename__write_int() writing uninitialized stack data Arnaldo Carvalho de Melo <acme(a)redhat.com> perf tools: Use snprintf() in dso__read_running_kernel_build_id() Arnaldo Carvalho de Melo <acme(a)redhat.com> perf hwmon: Guard label read against empty or failed reads Arnaldo Carvalho de Melo <acme(a)redhat.com> perf symbols: Bounds-check descsz in sysfs__read_build_id() GNU fallback Arnaldo Carvalho de Melo <acme(a)redhat.com> perf hwmon: Fix parse_hwmon_filename() strlcpy buffer overflow Arnaldo Carvalho de Melo <acme(a)redhat.com> perf hwmon: Use scnprintf() in hwmon_pmu__for_each_event() Arnaldo Carvalho de Melo <acme(a)redhat.com> perf hwmon: Fix off-by-one null termination on sysfs reads Arnaldo Carvalho de Melo <acme(a)redhat.com> perf tools: Fix thread__set_comm_from_proc() on empty comm file Arnaldo Carvalho de Melo <acme(a)redhat.com> perf intel-pt: Fix snprintf size tracking bug in insn decoder Arnaldo Carvalho de Melo <acme(a)redhat.com> perf symbols: Bounds-check .gnu_debuglink section data Arnaldo Carvalho de Melo <acme(a)redhat.com> perf symbols: Fix signed overflow in sysfs__read_build_id() size check Arnaldo Carvalho de Melo <acme(a)redhat.com> tools lib api: Fix missing null termination in filename__read_int/ull() Arnaldo Carvalho de Melo <acme(a)redhat.com> perf pmu: Fix perf_pmu__parse_scale/unit() OOB access on empty sysfs file Arnaldo Carvalho de Melo <acme(a)redhat.com> perf pmu: Fix pmu_id() heap underwrite on empty identifier file James Clark <james.clark(a)linaro.org> perf cs-etm: Queue context packets for frontend Jens Remus <jremus(a)linux.ibm.com> perf s390: Fix TEXTREL in Python extension by compiling as PIC Chuck Lever <chuck.lever(a)oracle.com> xprtrdma: Return sendctx slot after Send preparation failure Chuck Lever <chuck.lever(a)oracle.com> xprtrdma: Repost Receive buffers for malformed replies Chuck Lever <chuck.lever(a)oracle.com> xprtrdma: Sanitize the reply credit grant after parsing Chris Mason <clm(a)meta.com> xprtrdma: Fix bcall rep leak and unbounded peek Chuck Lever <chuck.lever(a)oracle.com> xprtrdma: Resize reply buffers before reposting receives Chuck Lever <chuck.lever(a)oracle.com> xprtrdma: Document and assert reply-handler invariants Chuck Lever <chuck.lever(a)oracle.com> xprtrdma: Check frwr_wp_create() during connect Chris Mason <clm(a)meta.com> xprtrdma: Initialize re_id before removal registration Chris Mason <clm(a)meta.com> xprtrdma: Fix ep kref imbalance on ADDR_CHANGE Arnaldo Carvalho de Melo <acme(a)redhat.com> perf hists: Fix snprintf() in hists__scnprintf_title() UID filter path Arnaldo Carvalho de Melo <acme(a)redhat.com> perf bpf: Use scnprintf() in snprintf_hex() and synthesize_bpf_prog_name() Arnaldo Carvalho de Melo <acme(a)redhat.com> perf sched: Fix idle-hist callchain display using wrong rb_first variant Arnaldo Carvalho de Melo <acme(a)redhat.com> perf sched: Bounds-check prio before test_bit() in timehist Lad Prabhakar <prabhakar.mahadev-lad.rj(a)bp.renesas.com> PCI: rcar-host: Remove unused LIST_HEAD(res) Arnaldo Carvalho de Melo <acme(a)redhat.com> perf tools: Use perf_env__get_cpu_topology() in machine__resolve() Arnaldo Carvalho de Melo <acme(a)redhat.com> perf tools: Use scnprintf() in cpu_map__snprint() to prevent overflow Arnaldo Carvalho de Melo <acme(a)redhat.com> perf tools: Fix get_max_num() size_t underflow on empty sysfs file David E. Box <david.e.box(a)linux.intel.com> platform/x86/intel/vsec: Restore BAR fallback for header walk David E. Box <david.e.box(a)linux.intel.com> platform/x86/intel/vsec: Return real error codes from registration path David E. Box <david.e.box(a)linux.intel.com> platform/x86/intel/vsec: Switch exported helpers from pci_dev to device David E. Box <david.e.box(a)linux.intel.com> platform/x86/intel/vsec: Decouple add/link helpers from PCI Randy Dunlap <rdunlap(a)infradead.org> platform/x86/intel/vsec: correct kernel-doc comments Xi Pardee <xi.pardee(a)linux.intel.com> platform/x86:intel/pmc: Relocate lpm_req_guid to pmc_reg_map Xi Pardee <xi.pardee(a)linux.intel.com> platform/x86:intel/pmc: Rename PMC index variable to pmc_idx Xi Pardee <xi.pardee(a)linux.intel.com> platform/x86:intel/pmc: Add support for multiple DMU GUIDs Jamie Nguyen <jamien(a)nvidia.com> fs/ntfs3: resize log->one_page_buf when adopting on-disk page size Shuvam Pandey <shuvampandey1(a)gmail.com> PCI: meson: Add missing remove callback Shuvam Pandey <shuvampandey1(a)gmail.com> PCI: meson: Propagate devm_add_action_or_reset() failure Biju Das <biju.das.jz(a)bp.renesas.com> pwm: rzg2l-gpt: Add missing newlines to dev_err_probe() messages Li RongQing <lirongqing(a)baidu.com> PCI: mediatek: Fix operator precedence in PCIE_FTS_NUM_L0 macro Yang Erkun <yangerkun(a)huawei.com> nfs: use nfsi->rwsem to protect traversal of the file lock list Mike Snitzer <snitzer(a)kernel.org> NFSv4/flexfiles: honor FF_FLAGS_NO_IO_THRU_MDS in pg_get_mirror_count_write Mike Snitzer <snitzer(a)kernel.org> NFSv4/flexfiles: honor FF_FLAGS_NO_IO_THRU_MDS on fatal DS connect errors Clark Wang <xiaoning.wang(a)nxp.com> nfs: keep PG_UPTODATE clear after read errors in page groups Dai Ngo <dai.ngo(a)oracle.com> NFSv4/pnfs: defer return_range callbacks until after inode unlock Chuck Lever <chuck.lever(a)oracle.com> xprtrdma: Decouple req recycling from RPC completion Chuck Lever <chuck.lever(a)oracle.com> xprtrdma: Use sendctx DMA state for Send signaling Chuck Lever <chuck.lever(a)oracle.com> xprtrdma: Post receive buffers after RPC completion Chuck Lever <chuck.lever(a)oracle.com> xprtrdma: Close lost-wakeup race in xprt_rdma_alloc_slot Chuck Lever <chuck.lever(a)oracle.com> xprtrdma: Avoid 250 ms delay on backlog wakeup Sagi Grimberg <sagi(a)grimberg.me> pNFS/filelayout: fix cheking if a layout is striped Hongling Zeng <zenghongling(a)kylinos.cn> sunrpc: Fix error handling in rpc_sysfs_xprt_switch_add_xprt_store() Phillip Varney <pbvarney(a)protonmail.com> clk: qcom: a53: Corrected frequency multiplier for 1152MHz Nuno Sá <nuno.sa(a)analog.com> dmaengine: dma-axi-dmac: use DMA pool to manange DMA descriptor Nuno Sá <nuno.sa(a)analog.com> dmaengine: dma-axi-dmac: Properly free struct axi_dmac_desc Nuno Sá <nuno.sa(a)analog.com> dmaengine: Fix possible use after free Icenowy Zheng <zhengxingda(a)iscas.ac.cn> dmaengine: qcom: gpi: set DMA_PRIVATE capability Junrui Luo <moonafterrain(a)outlook.com> mshv: add bounds check on vp_index in mshv_intercept_isr() Jagadeesh Kona <jagadeesh.kona(a)oss.qualcomm.com> clk: qcom: camcc-x1e80100: Add support for camera QDSS debug clocks Jagadeesh Kona <jagadeesh.kona(a)oss.qualcomm.com> dt-bindings: clock: qcom: Add X1P42100 camera clock controller Arnaldo Carvalho de Melo <acme(a)redhat.com> perf tools: Fix int16_t truncation of max_cpu_num in set_max_cpu_num() Arnaldo Carvalho de Melo <acme(a)redhat.com> perf timechart: Fix cpu2y() OOB read on untrusted CPU index Arnaldo Carvalho de Melo <acme(a)redhat.com> perf c2c: Fix use-after-free in he__get_c2c_hists() error path Arnaldo Carvalho de Melo <acme(a)redhat.com> perf stat: Introduce perf_env__get_cpu_topology() to guard NULL env->cpu Arnaldo Carvalho de Melo <acme(a)redhat.com> perf mmap: Fix NULL deref in aio cleanup on alloc failure Arnaldo Carvalho de Melo <acme(a)redhat.com> perf sched: Replace BUG_ON and add NULL checks in replay event helpers Arnaldo Carvalho de Melo <acme(a)redhat.com> perf sched: Use thread__put() in free_idle_threads() Arnaldo Carvalho de Melo <acme(a)redhat.com> perf sched: Clean up idle_threads entry on init failure Arnaldo Carvalho de Melo <acme(a)redhat.com> perf c2c: Bounds-check CPU IDs in setup_nodes() topology loop Arnaldo Carvalho de Melo <acme(a)redhat.com> perf c2c: Bounds-check CPU and node IDs before bitmap and array access Arnaldo Carvalho de Melo <acme(a)redhat.com> perf stat: Bounds-check CPU index in topology aggregation callbacks Arnaldo Carvalho de Melo <acme(a)redhat.com> perf mmap: Guard cpu__get_node() return in aio_bind() Arnaldo Carvalho de Melo <acme(a)redhat.com> perf sched: Fix register_pid() overflow, strcpy, and BUG_ON Arnaldo Carvalho de Melo <acme(a)redhat.com> perf sched: Cap max_cpu at MAX_CPUS in timehist sample processing Arnaldo Carvalho de Melo <acme(a)redhat.com> perf tools: Add bounds check to cpu__get_node() Arnaldo Carvalho de Melo <acme(a)redhat.com> perf sched: Fix thread reference leak in latency_switch_event Arnaldo Carvalho de Melo <acme(a)redhat.com> perf tools: Guard test_bit from out-of-bounds sample CPU James Clark <james.clark(a)linaro.org> perf annotate: Fix crashes on empty annotate windows Rui Qi <qirui.001(a)bytedance.com> perf: Fix off-by-one stack buffer overflow in kallsyms__parse() Akhil R <akhilrajeev(a)nvidia.com> dt-bindings: dma: nvidia,tegra186-gpc-dma: Make reset optional Shengjiu Wang <shengjiu.wang(a)nxp.com> dmaengine: imx-sdma: Refine spba bus searching in probe Xu Rao <raoxu(a)uniontech.com> thunderbolt: debugfs: Fix margining error counter buffer leak Srinivasan Shanmugam <srinivasan.shanmugam(a)amd.com> drm/amd/display: Add missing kdoc for ALLM parameters Jamie Nguyen <jamien(a)nvidia.com> fs/ntfs3: fix mount failure on 64K page-size kernels Konstantin Komarov <almaz.alexandrovich(a)paragon-software.com> fs/ntfs3: add bounds check to run_get_highest_vcn() Rosen Penev <rosenp(a)gmail.com> HID: logitech-hidpp: remove excess kernel-doc member in hidpp_scroll_counter Yuho Choi <dbgh9129(a)gmail.com> clk: at91: keep securam node alive while mapping it Aldo Conte <aldocontelk(a)gmail.com> iio: tcs3472: power down chip on probe failure Sanjay Chitroda <sanjayembeddedse(a)gmail.com> iio: accel: mma8452: handle I2C read error(s) in mma8452_read() Guilherme Ivo Bozi <guilherme.bozi(a)usp.br> iio: adc: xilinx-ams: fix out-of-bounds channel lookup in event handling Joshua Crofts <joshua.crofts1(a)gmail.com> iio: magnetometer: ak8975: fix potential kernel stack memory leak Joshua Crofts <joshua.crofts1(a)gmail.com> iio: light: si1133: prevent race condition on timeout Joshua Crofts <joshua.crofts1(a)gmail.com> iio: light: si1133: reset counter to prevent race condition Arnaldo Carvalho de Melo <acme(a)redhat.com> perf header: Sanity check HEADER_EVENT_DESC attr.size before swap Shawn Guo <shengchao.guo(a)oss.qualcomm.com> PCI: qcom: Disable ASPM L0s for SA8775P Athira Rajeev <atrajeev(a)linux.ibm.com> powerpc tools perf: Initialize error code in auxtrace_record_init function Lad Prabhakar <prabhakar.mahadev-lad.rj(a)bp.renesas.com> clk: renesas: rzg2l: Rename iterator in for_each_mod_clock() to avoid shadowing Hongling Zeng <zenghongling(a)kylinos.cn> gpib: cb7210: Fix region leak when request_irq fails Adam Crosser <adam.crosser(a)praetorian.com> gpib: fix double decrement of descriptor_busy in command_ioctl() James Kim <james010kim(a)gmail.com> char: tlclk: fix use-after-free in tlclk_cleanup() Dave Penkler <dpenkler(a)gmail.com> gpib: Fix inappropriate ioctl error return Ravi Bangoria <ravi.bangoria(a)amd.com> perf test amd ibs: Fix incorrect kernel version check Seungjin Bae <eeodqql09(a)gmail.com> usb: host: max3421: Reject hub port requests for non-existent ports Seungjin Bae <eeodqql09(a)gmail.com> usb: host: max3421: Fix shift-out-of-bounds in max3421_hub_control() Guangshuo Li <lgs201920130244(a)gmail.com> staging: most: video: avoid double free on video register failure Namhyung Kim <namhyung(a)kernel.org> perf inject: Add --convert-callchain option Michael Petlan <mpetlan(a)redhat.com> perf build-id: Fix off-by-one bug when printing kernel/module build-id Dan Carpenter <error27(a)gmail.com> PCI: dwc: Fix signedness bug in fault injection test code Sergey Senozhatsky <senozhatsky(a)chromium.org> mailbox: mtk-adsp: fix UAF during device teardown Conor Dooley <conor.dooley(a)microchip.com> mailbox: mpfs: fix check for syscon presence in mpfs_mbox_inbox_isr() Jie Gan <jie.gan(a)oss.qualcomm.com> coresight: Fix source not disabled on idr_alloc_u32 failure Bard Liao <yung-chuan.liao(a)linux.intel.com> soundwire: intel_ace2x: release bpt_stream when close it Mihai Sain <mihai.sain(a)microchip.com> clk: at91: sam9x7: Fix gmac_gclk clock definition Leo Yan <leo.yan(a)arm.com> perf pmu: Skip test on Arm64 when #slots is zero Andy Shevchenko <andriy.shevchenko(a)linux.intel.com> phy: phy-can-transceiver: Check driver match and driver data against NULL Luo Jie <jie.luo(a)oss.qualcomm.com> clk: qcom: cmnpll: Account for reference clock divider Jie Gan <jie.gan(a)oss.qualcomm.com> coresight: fix missing error code when trace ID is invalid Sumit Kumar <sumit.kumar(a)oss.qualcomm.com> bus: mhi: ep: Fix potential deadlock in mhi_ep_reset_worker() Hsiu Che Yu <yu.whisper.personal(a)gmail.com> rust: alloc: fix assert in `Vec::reserve` doc test Rong Zhang <i(a)rong.moe> PCI: loongson: Do not ignore downstream devices on external bridges Ian Rogers <irogers(a)google.com> perf sched: Add missing mmap2 handler in timehist Rafael J. Wysocki <rafael.j.wysocki(a)intel.com> platform/x86: xo15-ebook: Fix wakeup source and GPE handling Rafael J. Wysocki <rafael.j.wysocki(a)intel.com> x86/platform/olpc: xo15: Drop wakeup source on driver removal Guixin Liu <kanie(a)linux.alibaba.com> PCI: Check ROM header and data structure addr before accessing Guixin Liu <kanie(a)linux.alibaba.com> PCI: Introduce named defines for PCI ROM Carlos Bilbao <carlos.bilbao(a)kernel.org> PCI/ASPM: Don't reconfigure ASPM entering low-power state Leo Yan <leo.yan(a)arm.com> coresight: etm4x: Correct TRCVMIDCCTLR1 save and restore James Clark <james.clark(a)linaro.org> coresight: ete: Always save state on power down Leo Yan <leo.yan(a)arm.com> coresight: etm4x: Remove the state_needs_restore flag Baoli.Zhang <baoli.zhang(a)linux.intel.com> soundwire: fix bug in sdw_add_element_group_count found by syzkaller Bard Liao <yung-chuan.liao(a)linux.intel.com> soundwire: don't program SDW_SCP_BUSCLOCK_SCALE on a unattached Peripheral Yingchao Deng <yingchao.deng(a)oss.qualcomm.com> coresight: cti: Fix DT filter signals silently ignored Ian Rogers <irogers(a)google.com> perf debuginfo: Fix libdw API contract violations Alexandru Hossu <hossu.alexandru(a)gmail.com> staging: nvec: fix use-after-free in nvec_rx_completed() Stanley Chu <yschu(a)nuvoton.com> i3c: master: svc: Fix missed IBI after false SLVSTART on NPCM845 Mario Limonciello <mario.limonciello(a)amd.com> gpiolib: acpi: Only trigger ActiveBoth interrupts on boot Nam Cao <namcao(a)linutronix.de> eventpoll: Fix epoll_wait() report false negative Christian Brauner <brauner(a)kernel.org> eventpoll: rename epi->next and txlist for clarity Christian Brauner <brauner(a)kernel.org> eventpoll: wrap EP_UNACTIVE_PTR in typed sentinel helpers Christian Brauner <brauner(a)kernel.org> eventpoll: extract ep_deliver_event() from ep_send_events() Christian Brauner <brauner(a)kernel.org> eventpoll: split ep_insert() into alloc + register stages Christian Brauner <brauner(a)kernel.org> eventpoll: rename attach_epitem() to ep_attach_file() Christian Brauner <brauner(a)kernel.org> eventpoll: expand top-of-file overview / locking doc Christian Brauner <brauner(a)kernel.org> eventpoll: rename ep_remove_safe() back to ep_remove() Yizhou Zhao <zhaoyz24(a)mails.tsinghua.edu.cn> net/9p: fix race condition on rdma->state in trans_rdma.c Hongling Zeng <zenghongling(a)kylinos.cn> 9p: avoid returning ERR_PTR(0) from mkdir operations Aleksandr Nogikh <nogikh(a)google.com> ocfs2: fix circular locking dependency in ocfs2_dio_end_io_write Charles Keepax <ckeepax(a)opensource.cirrus.com> mfd: cs42l43: Sanity check firmware size Matthew Bystrin <dev.mbstr(a)gmail.com> mfd: rsmu: Fix page register setup Guangshuo Li <lgs201920130244(a)gmail.com> ksmbd: fix use-after-free in same_client_has_lease() Selvin Xavier <selvin.xavier(a)broadcom.com> RDMA/bnxt_re: Fail DBR related page allocation UAPIs if the feature is disabled Kalesh AP <kalesh-anakkur.purayil(a)broadcom.com> RDMA/bnxt_re: Move the UAPI methods to a dedicated file Selvin Xavier <selvin.xavier(a)broadcom.com> RDMA/bnxt_re: Avoid displaying the kernel pointer Selvin Xavier <selvin.xavier(a)broadcom.com> RDMA/bnxt_re: Free SRQ toggle page after firmware teardown Brett Creeley <brett.creeley(a)amd.com> ionic: Fix check in ionic_get_link_ext_stats Selvamani Rajagopal <Selvamani.Rajagopal(a)onsemi.com> net: ethernet: oa_tc6: Remove FCS size in RX frame Selvamani Rajagopal <Selvamani.Rajagopal(a)onsemi.com> net: ethernet: oa_tc6: mdiobus->parent initialized with NULL Wayen.Yan <win847(a)gmail.com> net: airoha: Fix always-true condition in PPE1 queue reservation loop Eric Dumazet <edumazet(a)google.com> tcp: ipv6: clamp default adverting MSS to avoid GSO_BY_FRAGS (0xFFFF) Eric Dumazet <edumazet(a)google.com> tipc: fix UAF in tipc_l2_send_msg() Gui-Dong Han <hanguidong02(a)gmail.com> KEYS: Use acquire when reading state in keyring search Aboorva Devarajan <aboorvad(a)linux.ibm.com> powerpc/kexec: fix double get_cpu() imbalance in kexec_prepare_cpus Aboorva Devarajan <aboorvad(a)linux.ibm.com> powerpc/powernv: fix preempt count leak in pnv_kexec_wait_secondaries_down Aboorva Devarajan <aboorvad(a)linux.ibm.com> powerpc/perf: fix preempt count underflow in fsl_emb_pmu_del Yadan Fan <ydfan(a)suse.com> MIPS: mm: Fix out-of-bounds write in maar_res_walk() Sechang Lim <rhkrqnwk98(a)gmail.com> bpf, sockmap: fix integer overflow in bpf_msg_pop_data() bounds check Kuniyuki Iwashima <kuniyu(a)google.com> sockmap: Fix use-after-free in udp_bpf_recvmsg() Eric Dumazet <edumazet(a)google.com> net: remove addr_len argument of recvmsg() handlers Weiming Shi <bestswngs(a)gmail.com> bpf, sockmap: reject overflowing copy + len in bpf_msg_push_data() Al Viro <viro(a)zeniv.linux.org.uk> udf: fix nls leak on udf_fill_super() failure Leon Hwang <leon.hwang(a)linux.dev> bpf: Fix bpf_get/setsockopt to tos for ipv4-mapped ipv6 socket Leo Yan <leo.yan(a)arm.com> selftests/bpf: Initialize operation name before use Jiri Olsa <jolsa(a)kernel.org> selftests/bpf: Fix typo in verify_umulti_link_info Huiwen He <hehuiwen(a)kylinos.cn> smb/client: always return a value for FS_IOC_GETFLAGS Jian Zhang <zhangjian496(a)huawei.com> cifs: remove all cifs files before kill super Takashi Iwai <tiwai(a)suse.de> ALSA: core: Fix unintuitive behavior of snd_power_ref_and_wait() Florian Westphal <fw(a)strlen.de> netfilter: nf_conncount: callers must hold rcu read lock Cen Zhang <zzzccc427(a)gmail.com> ALSA: seq: avoid stale FIFO cells during resize Cen Zhang <zzzccc427(a)gmail.com> ALSA: seq: oss: Serialize readq reset state with q->lock Runyu Xiao <runyu.xiao(a)seu.edu.cn> kcm: use WRITE_ONCE() when changing lower socket callbacks Wayen.Yan <win847(a)gmail.com> net: airoha: Fix debugfs new-tuple display for IPv4 ROUTE entries Wayen.Yan <win847(a)gmail.com> net: airoha: Fix register index for Tx-fwd counter configuration Ovidiu Panait <ovidiu.panait.rb(a)renesas.com> net: bcmgenet: Use weighted round-robin TX DMA arbitration Matthieu Buffet <matthieu(a)buffet.re> landlock: Fix unmarked concurrent access to socket family Grzegorz Nitka <grzegorz.nitka(a)intel.com> dpll: balance create/delete notifications in __dpll_pin_(un)register Grzegorz Nitka <grzegorz.nitka(a)intel.com> dpll: guard sync-pair removal on full pin unregister Grzegorz Nitka <grzegorz.nitka(a)intel.com> dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() Grzegorz Nitka <grzegorz.nitka(a)intel.com> dpll: send delete notification before unregister in on-pin rollback Grzegorz Nitka <grzegorz.nitka(a)intel.com> dpll: fix stale iteration in dpll_pin_on_pin_unregister() Ivan Vecera <ivecera(a)redhat.com> dpll: Enhance and consolidate reference counting logic Ivan Vecera <ivecera(a)redhat.com> dpll: Support dynamic pin index allocation Ruoyu Wang <ruoyuw560(a)gmail.com> net: wwan: t7xx: check skb_clone in control TX Wentao Guan <guanwentao(a)uniontech.com> net: ethernet: mtk_wed: debugfs: correct index in wed_amsdu_show() Ratheesh Kannoth <rkannoth(a)marvell.com> octeontx2-af: npc: Fix size of entry2cntr_map Xu Kuohai <xukuohai(a)huawei.com> bpf: Fix setting retval to -EPERM for cgroup hooks not returning errno Dragos Tatulea <dtatulea(a)nvidia.com> net/mlx5: Check max_macs devlink param value against max capability Sun Jian <sun.jian.kdev(a)gmail.com> bpf: Run generic devmap egress prog on private skb Victor Nogueira <victor(a)mojatatu.com> net/sched: sch_dualpi2: Add missing module alias Zhi-Jun You <hujy652(a)gmail.com> net: ethernet: mtk_wed: fix loading WO firmware for MT7986 Eric Dumazet <edumazet(a)google.com> net: watchdog: fix refcount tracking races Aditya Garg <gargaditya(a)linux.microsoft.com> net: mana: guard TX wq object destroy with INVALID_MANA_HANDLE check Aditya Garg <gargaditya(a)linux.microsoft.com> net: mana: initialize gdma queue id to INVALID_QUEUE_ID Victor Nogueira <victor(a)mojatatu.com> net/sched: sch_dualpi2: Do not call qdisc_tree_reduce_backlog during peek before restoring qlen Victor Nogueira <victor(a)mojatatu.com> net/sched: sch_codel: Do not call qdisc_tree_reduce_backlog during peek before restoring qlen Victor Nogueira <victor(a)mojatatu.com> net/sched: sch_fq_codel: Do not call qdisc_tree_reduce_backlog during peek before restoring qlen Paolo Abeni <pabeni(a)redhat.com> virtio_net: do not allow tunnel csum offload for non GSO packets Sechang Lim <rhkrqnwk98(a)gmail.com> tcp: clear sock_ops cb flags before force-closing a child socket Chuck Lever <chuck.lever(a)oracle.com> handshake: Require admin permission for DONE command Lucas Tsai <lucas_tsai(a)richtek.com> power: supply: core: fix supplied_from allocations Guangshuo Li <lgs201920130244(a)gmail.com> ASoC: adau1372: Clear PLL_EN on failed PLL lock without reset GPIO Nicolin Chen <nicolinc(a)nvidia.com> iommu: Avoid copying the user array twice in the full-array copy helper Lars Pöschel <lars.poeschel(a)edag.com> spi: xilinx: use FIFO occupancy register to determine buffer size HanQuan <eilaimemedsnaimel(a)gmail.com> ALSA: seq: Fix kernel heap address leak in bounce_error_event() Cássio Gabriel <cassiogabrielcontato(a)gmail.com> ALSA: usb-audio: qcom: Guard sideband endpoint removal Herbert Xu <herbert(a)gondor.apana.org.au> crypto: rng - Free default RNG on module exit Felix Gu <ustc.gu(a)gmail.com> crypto: cavium/cpt - fix DMA cleanup using wrong loop index Felix Gu <ustc.gu(a)gmail.com> crypto: marvell/octeontx - fix DMA cleanup using wrong loop index Dave Jiang <dave.jiang(a)intel.com> cxl/test: Add check after kzalloc() memory in alloc_mock_res() Dave Jiang <dave.jiang(a)intel.com> cxl/test: Unregister cxl_acpi in cxl_test_init() error path Michael Bommarito <michael.bommarito(a)gmail.com> tipc: reject inverted service ranges from peer bindings Michael Bommarito <michael.bommarito(a)gmail.com> tipc: prevent snt_unacked underflow on CONN_ACK Michael Bommarito <michael.bommarito(a)gmail.com> tipc: require net admin for TIPCv2 netlink mutators Victor Nogueira <victor(a)mojatatu.com> net/sched: sch_hfsc: Don't make class passive twice Samuel Moelius <sam.moelius(a)trailofbits.com> net: pfcp: allocate per-cpu tstats for PFCP netdevs Xin Long <lucien.xin(a)gmail.com> sctp: validate embedded address parameter length Xiang Mei <xmei5(a)asu.edu> bridge: cfm: reject invalid CCM interval at configuration time Kuniyuki Iwashima <kuniyu(a)google.com> net: fib_rules: Don't dump dying fib_rule in fib_rules_dump(). Jamal Hadi Salim <jhs(a)mojatatu.com> net/sched: cls_flow: Dont expose folded kernel pointers George Moussalem <george.moussalem(a)outlook.com> net: dsa: qca8k: fix led devicename when using external mdio bus HyeongJun An <sammiee5311(a)gmail.com> ASoC: tegra: tegra210_ahub: Validate written enum value HyeongJun An <sammiee5311(a)gmail.com> ASoC: fsl: fsl_audmix: Validate written enum values HyeongJun An <sammiee5311(a)gmail.com> ASoC: codecs: hdac_hdmi: Validate written enum value Arnd Bergmann <arnd(a)arndb.de> ASoC: SOF: Intel: hda-sdw-bpt: select SND_SOF_SOF_HDA_SDW_BPT properly Leon Romanovsky <leon(a)kernel.org> RDMA/mlx5: Release the HW‑provided UAR index rather than the SW one Maher Sanalla <msanalla(a)nvidia.com> RDMA/mlx5: Fix undefined shift of user RQ WQE size Patrisious Haddad <phaddad(a)nvidia.com> RDMA/mlx5: Remove raw RSS QP restrack tracking Patrisious Haddad <phaddad(a)nvidia.com> RDMA/mlx5: Remove DCT restrack tracking Maxwell Doose <m32285159(a)gmail.com> fs: efs: remove unneeded debug prints Samuel Moelius <sam.moelius(a)trailofbits.com> Bluetooth: vhci: validate devcoredump state before side effects Samuel Moelius <sam.moelius(a)trailofbits.com> Bluetooth: hci: validate codec capability element length Zhao Dongdong <zhaodongdong(a)kylinos.cn> Bluetooth: btmtk: fix URB leak in alloc_mtk_intr_urb error path Jordan Walters <jaggyaur(a)gmail.com> Bluetooth: hci_core: Fix UAF in hci_unregister_dev() Jiajia Liu <liujiajia(a)kylinos.cn> Bluetooth: hci_event: fix simultaneous discovery stuck in FINDING Weiming Shi <bestswngs(a)gmail.com> Bluetooth: eir: Fix stack OOB write when prepending the Flags AD Zijun Hu <zijun.hu(a)oss.qualcomm.com> Bluetooth: hci_qca: fix NULL pointer dereference in qca_dmp_hdr() for non-serdev device Heiko Carstens <hca(a)linux.ibm.com> s390/process: Fix kernel thread function pointer type Richard Fitzgerald <rf(a)opensource.cirrus.com> ASoC: cs35l56: Fix possible uninitialized value in cs35l56_spi_system_reset() Andre Przywara <andre.przywara(a)arm.com> arm64: dts: allwinner: a523: Add missing GPIO interrupt Mikhail Kshevetskiy <mikhail.kshevetskiy(a)iopsys.eu> pinctrl: airoha: an7581: fix misprint in gpio19 pinconf Mikhail Kshevetskiy <mikhail.kshevetskiy(a)iopsys.eu> pinctrl: airoha: an7581: add missed gpio32 pin group Christian Marangi <ansuelsmth(a)gmail.com> pinctrl: airoha: generalize pins/group/function/confs handling Andre Przywara <andre.przywara(a)arm.com> pinctrl: sunxi: a523: Remove unneeded IRQ remuxing flag Daniel Borkmann <daniel(a)iogearbox.net> bpf: Tighten cgroup storage cookie checks for prog arrays Giovanni Cabiddu <giovanni.cabiddu(a)intel.com> vfio/qat: fix f_pos race in qat_vf_resume_write() Sergey Shtylyov <s.shtylyov(a)auroraos.dev> of: cpu: add check in __of_find_n_match_cpu_property() Dave Jiang <dave.jiang(a)intel.com> cxl/test: Zero out LSA backing memory to avoid leaking to user Dave Jiang <dave.jiang(a)intel.com> cxl/test: Fix integer overflow in mock LSA bounds checks Yonghong Song <yonghong.song(a)linux.dev> selftests/bpf: Fix bpf_iter/task_vma test Aditya Prakash Srivastava <aditya.ansh182(a)gmail.com> ext4: fix kernel BUG in ext4_write_inline_data_end Louis Scalbert <louis.scalbert(a)6wind.com> bonding: 3ad: fix mux port state on oper down Louis Scalbert <louis.scalbert(a)6wind.com> bonding: 3ad: fix carrier when no usable slaves Louis Scalbert <louis.scalbert(a)6wind.com> bonding: 3ad: add lacp_strict configuration knob Louis Scalbert <louis.scalbert(a)6wind.com> netlink: specs: rt-link: missed broadcast-neigh Louis Scalbert <louis.scalbert(a)6wind.com> tools: missed broadcast_neigh if_link uapi header Hongling Zeng <zenghongling(a)kylinos.cn> ext4: fix ERR_PTR(0) in ext4_mkdir() Richard Fitzgerald <rf(a)opensource.cirrus.com> ASoC: cs35l56: Don't leave parent IRQ disabled if system_suspend fails Richard Fitzgerald <rf(a)opensource.cirrus.com> ASoC: cs35l56: Fix missing calls to wm_adsp2_remove() Srujana Challa <schalla(a)marvell.com> vdpa/octeon_ep: fix IRQ-to-ring mapping in interrupt handler Srujana Challa <schalla(a)marvell.com> vdpa/octeon_ep: Fix PF->VF mailbox data address calculation longlong yan <yanlonglong(a)kylinos.cn> tools/virtio: check mmap return value in vringh_test Qing Ming <a0yami(a)mailbox.org> vhost/net: complete zerocopy ubufs only once Zhang Tianci <zhangtianci.1997(a)bytedance.com> vduse: Requeue failed read to send_list head Filip Hejsek <filip.hejsek(a)gmail.com> virtio_console: read size from config space during device init Jia Jia <physicalmtea(a)gmail.com> virtio: rtc: tear down old virtqueues before restore Qihang Tang <q.h.hack.winter(a)gmail.com> vhost/vdpa: validate virtqueue index in mmap and fault paths Qihang Tang <q.h.hack.winter(a)gmail.com> vduse: hold vduse_lock across IDR lookup in open path Val Packett <val(a)packett.cool> ASoC: codecs: aw88261: fix incorrect masks for boost regs Ruoyu Wang <ruoyuw560(a)gmail.com> spi: meson-spifc: fix runtime PM leak on remove Chuck Lever <chuck.lever(a)oracle.com> NFSD: Handle layout stid in nfsd4_drop_revoked_stid() Jason Gunthorpe <jgg(a)ziepe.ca> IB/mlx4: Fill in the access_flags if IB_MR_REREG_ACCESS is not specified Cássio Gabriel <cassiogabrielcontato(a)gmail.com> ASoC: sma1307: Fix uevent string leaks in fault worker KhaiWenTan <khai.wen.tan(a)linux.intel.com> igc: skip RX timestamp header for frame preemption verification Filipe Manana <fdmanana(a)suse.com> btrfs: fix deadlock cloning inline extent when using flushoncommit Cen Zhang <zzzccc427(a)gmail.com> btrfs: annotate lockless read of defrag_bytes in should_nocow() Johannes Thumshirn <johannes.thumshirn(a)wdc.com> btrfs: zoned: always set max_active_zones for zoned devices Matthew Wilcox (Oracle) <willy(a)infradead.org> Revert "btrfs: fix the file offset calculation inside btrfs_decompress_buf2page()" Johannes Thumshirn <johannes.thumshirn(a)wdc.com> btrfs: zoned: don't account data relocation space-info in statfs free space Nikita Zhandarovich <n.zhandarovich(a)fintech.ru> hwmon: (it87) Clamp negative values to zero in set_fan() Jeff Layton <jlayton(a)kernel.org> vfs: add FS_USERNS_DELEGATABLE flag and set it for NFS David Laight <david.laight.linux(a)gmail.com> fbdev: sm501fb: Fix buffer errors in OF binding code Wen Gong <quic_wgong(a)quicinc.com> wifi: ath12k: enable IEEE80211_VHT_EXT_NSS_BW_CAPABLE when NSS ratio is reported Sergio Paracuellos <sergio.paracuellos(a)gmail.com> gpio: mt7621: fix interrupt banks mapping on gpio chips Takashi Iwai <tiwai(a)suse.de> ALSA: aloop: Drop superfluous break Filipe Manana <fdmanana(a)suse.com> btrfs: fix invalid pointer dereference in __btrfs_run_delayed_refs() Ryder Lee <ryder.lee(a)mediatek.com> wifi: mt76: mt7996: fix potential tx_retries underflow Ryder Lee <ryder.lee(a)mediatek.com> wifi: mt76: mt7925: fix potential tx_retries underflow Ryder Lee <ryder.lee(a)mediatek.com> wifi: mt76: mt7921: fix potential tx_retries underflow Ryder Lee <ryder.lee(a)mediatek.com> wifi: mt76: mt7915: fix potential tx_retries underflow Bjoern A. Zeeb <bz(a)FreeBSD.org> wifi: mt76: fix argument to ieee80211_is_first_frag() Dylan Eskew <dylan.eskew(a)candelatech.com> wifi: mt76: mt7996: limit work in set_bitrate_mask Lorenzo Bianconi <lorenzo(a)kernel.org> wifi: mt76: mt7996: fix reading zeroed info->control.flags after mt76_tx_status_skb_add() Lorenzo Bianconi <lorenzo(a)kernel.org> wifi: mt76: mt7996: Fix possible NULL pointer dereference in mt7996_mac_write_txwi_80211() Lorenzo Bianconi <lorenzo(a)kernel.org> wifi: mt76: mt7996: Fix possible token leak in mt7996_tx_prepare_skb() Aviel Zohar <avielzohar123(a)gmail.com> wifi: mt76: mt7925: validate skb length in testmode query Sean Wang <sean.wang(a)mediatek.com> wifi: mt76: mt792x: skip MLD header rewrite for 802.3 encap TX Sean Wang <sean.wang(a)mediatek.com> wifi: mt76: mt7925: keep TX BA state in the primary WCID Javier Tia <floss(a)jetm.me> wifi: mt76: mt7925: fix stale pointer comparisons in change_vif_links Felix Fietkau <nbd(a)nbd.name> wifi: mt76: mt7996: add missing max_remain_on_channel_duration Rajat Gupta <rajat.gupta(a)oss.qualcomm.com> wifi: mt76: use kfree_rcu for offchannel link in mt76_put_vif_phy_link Myeonghun Pak <mhun512(a)gmail.com> wifi: mt76: mt7925: clean up DMA on probe failure Krzysztof Kozlowski <krzysztof.kozlowski(a)oss.qualcomm.com> ARM: configs: Drop duplicated CONFIG_EXT4_FS Hongyan Xia <hongyan.xia(a)transsion.com> sched/fair: Fix cpu_util runnable_avg arithmetic Wolfram Sang <wsa+renesas(a)sang-engineering.com> hwspinlock: qcom: avoid uninitialized struct members Hui Zhu <zhuhui(a)kylinos.cn> vmalloc: fix NULL pointer dereference in is_vm_area_hugepages() Luca Leonardo Scorcia <l.scorcia(a)gmail.com> pinctrl: mediatek: mt8167: Fix Schmitt trigger register offset of pins 34-39 Luca Leonardo Scorcia <l.scorcia(a)gmail.com> pinctrl: mediatek: mt8516: Fix Schmitt trigger register offset of pins 34-39 Mike Christie <michael.christie(a)oracle.com> scsi: target: Remove tcm_loop target reset handling David Disseldorp <ddiss(a)suse.de> scsi: target: Fix hexadecimal CHAP_I handling Sneh Mankad <sneh.mankad(a)oss.qualcomm.com> pinctrl: qcom: Fix resolving register base address from device node Yuho Choi <dbgh9129(a)gmail.com> watchdog: unregister PM notifier on watchdog unregister Al Viro <viro(a)zeniv.linux.org.uk> configfs: fix lockless traversals of ->s_children Dmitry Vyukov <dvyukov(a)google.com> firmware_loader: Fix recursive lock in device_cache_fw_images() Aaron Ma <aaron.ma(a)canonical.com> ASoC: amd: acp-sdw-sof: Bound DAI link iteration Aaron Ma <aaron.ma(a)canonical.com> ASoC: amd: acp-sdw-legacy: Bound DAI link iteration Felix Gu <ustc.gu(a)gmail.com> spi: ep93xx: fix double-free of zeropage on DMA setup failure Jason Gunthorpe <jgg(a)ziepe.ca> IB/mlx5: Don't mangle the mr->pd inside the rereg callback Jason Gunthorpe <jgg(a)ziepe.ca> IB/mlx5: Pull the pdn out of the depths of the umr machinery Jason Gunthorpe <jgg(a)ziepe.ca> IB/mlx5: Remove unused mkc bits in mlx5r_umr_update_mr_page_shift() Jason Gunthorpe <jgg(a)ziepe.ca> IB/mlx5: Properly support implicit ODP rereg_mr Jason Gunthorpe <jgg(a)ziepe.ca> IB/mlx5: Don't take the rereg_mr fallback without a new translation Mark Harmstone <mark(a)harmstone.com> btrfs: don't force DIO writes to be serialized Samuel Moelius <sam.moelius(a)trailofbits.com> thermal: testing: reject missing command arguments Pengjie Zhang <zhangpengjie2(a)huawei.com> cpufreq: Documentation: fix conservative governor freq_step description Yuho Choi <dbgh9129(a)gmail.com> ACPI: IPMI: Fix message kref handling on dead device Sechang Lim <rhkrqnwk98(a)gmail.com> bpf: Fix NULL pointer dereference in bpf_task_from_vpid() Bartosz Golaszewski <bartosz.golaszewski(a)oss.qualcomm.com> powerpc/8xx: implement get_direction() in cpm1 David Gow <david(a)davidgow.net> kunit:tool: Don't write to stdout when it should be disabled Mykyta Yatsenko <yatsenko(a)meta.com> bpf: Fix NMI/tracepoint re-entry deadlock on lru locks Kyle Zeng <kylebot(a)openai.com> ALSA: seq: Clear variable event pointer on read Rui Qi <qirui.001(a)bytedance.com> riscv: stacktrace: Remove bogus -0x4 offset in non-FP walk_stackframe Hui Wang <hui.wang(a)canonical.com> riscv: cpu_ops: Change return value type of cpu_is_stopped() to bool HyeongJun An <sammiee5311(a)gmail.com> ALSA: seq: Fix partial userptr event expansion Tristan Madani <tristan(a)talencesecurity.com> wifi: wcn36xx: fix OOB read from short trigger BA firmware response Tristan Madani <tristan(a)talencesecurity.com> wifi: wcn36xx: fix OOB read from firmware count in PRINT_REG_INFO indication Tristan Madani <tristan(a)talencesecurity.com> wifi: wcn36xx: fix heap overflow from oversized firmware HAL response Leon Hwang <leon.hwang(a)linux.dev> bpf: Update transport_header when encapsulating UDP tunnel in lwt Leon Hwang <leon.hwang(a)linux.dev> bpf: Check tail zero of bpf_prog_info Leon Hwang <leon.hwang(a)linux.dev> bpf: Check tail zero of bpf_map_info Kaitao Cheng <chengkaitao(a)kylinos.cn> bpf: Clear rb node linkage when freeing bpf_rb_root Bernard Metzler <bernard.metzler(a)linux.dev> RDMA/siw: Fix endpoint/socket association handling Frieder Schrempf <frieder.schrempf(a)kontron.de> arm64: dts: imx8mp-kontron: Fix GPIO for display power switch Alexander Stein <alexander.stein(a)ew.tq-group.com> arm64: dts: tqma8mpql-mba8mpxl: configure sai clock in audio codec as well Josua Mayer <josua(a)solid-run.com> arm64: dts: lx2162a-clearfog: use rev2 SoC dtsi Richard Zhu <hongxing.zhu(a)nxp.com> arm64: dts: imx95: Correct PCIe outbound address space configuration Frieder Schrempf <frieder.schrempf(a)kontron.de> arm64: dts: imx8mp-kontron: Reduce EERAM SPI clock frequency Jacob Moroni <jmoroni(a)google.com> RDMA/irdma: Initialize iwmr->access during MR registration Jacob Moroni <jmoroni(a)google.com> RDMA/irdma: Fix OOB read during CQ MR registration Oliver Hartkopp <socketcan(a)hartkopp.net> ALSA: hda: fix Kconfig dependency of HD Audio PCI Jason Gunthorpe <jgg(a)ziepe.ca> IB/cm: Fix av cm device leak on an error path in cm_init_av_by_path() Arnd Bergmann <arnd(a)arndb.de> RDMA/hfi1: Open-code rvt_set_ibdev_name() Pablo Neira Ayuso <pablo(a)netfilter.org> netfilter: conntrack: call nf_ct_gre_keymap_destroy() if master helper is pptp Pablo Neira Ayuso <pablo(a)netfilter.org> netfilter: conntrack: revert ct extension genid infrastructure Junxiao Chang <junxiao.chang(a)intel.com> x86/cpu: Remove obsolete aperfmperf_get_khz() declaration Cássio Gabriel <cassiogabrielcontato(a)gmail.com> ALSA: usb-audio: qcom: Initialize offload control return value Fernando Fernandez Mancera <fmancera(a)suse.de> netfilter: synproxy: protect nf_ct_seqadj_init() with conntrack lock Fernando Fernandez Mancera <fmancera(a)suse.de> netfilter: synproxy: fix unaligned memory access in timestamp adjustment Fernando Fernandez Mancera <fmancera(a)suse.de> netfilter: synproxy: adjust duplicate timestamp options Fernando Fernandez Mancera <fmancera(a)suse.de> netfilter: synproxy: drop packets if timestamp adjustment fails Pablo Neira Ayuso <pablo(a)netfilter.org> netfilter: nfnetlink_cthelper: use {READ,WRITE}_ONCE for accessing helper flags Fernando Fernandez Mancera <fmancera(a)suse.de> netfilter: nfnetlink_osf: fix mss parsing on big-endian architectures Joseph Qi <joseph.qi(a)linux.alibaba.com> ocfs2: fix race between ocfs2_control_install_private() and ocfs2_control_release() Zhang Cen <rollkingzzc(a)gmail.com> ocfs2/dlm: require a ref for locking_state debugfs open Zhang Cen <rollkingzzc(a)gmail.com> ocfs2: reject FITRIM ranges shorter than a cluster Dmitry Antipov <dmantipov(a)yandex.ru> ocfs2: fix buffer head management in ocfs2_read_blocks() Thomas Weißschuh <linux(a)weissschuh.net> lib: kunit_iov_iter: repeatedly call alloc_pages_bulk() Zhang Cen <rollkingzzc(a)gmail.com> ocfs2: rebase copied fsdlm LVB pointers in locking_state Wandun Chen <chenwandun(a)lixiang.com> of: reserved_mem: avoid post-init UAF when alloc_reserved_mem_array() fails Alex Deucher <alexander.deucher(a)amd.com> drm/amdkfd: always resume_all after suspend_all Dan Williams <djbw(a)kernel.org> cxl/fwctl: Fix __fortify_panic Antony Antony <antony.antony(a)secunet.com> xfrm: fix NAT-related field inheritance in SA migration Sandipan Das <sandipan.das(a)amd.com> perf/x86/amd/uncore: Use Node ID to identify DF and UMC domains Zide Chen <zide.chen(a)intel.com> perf/x86/intel/uncore: Fix discovery unit lookup for multi-die systems Sandipan Das <sandipan.das(a)amd.com> perf/x86/amd/core: Always use the NMI latency mitigation Pranjal Shrivastava <praan(a)google.com> iommu/vt-d: Fix RB-tree corruption in probe error path Michael S. Tsirkin <mst(a)redhat.com> vhost: fix vhost_get_avail_idx for a non empty ring Woojin Ji <random6.xyz(a)gmail.com> bpftool: Use libbpf error code for flow dissector query Yunxiang Li <Yunxiang.Li(a)amd.com> drm/amdgpu: set sub_block_index for mca ras sub-blocks Li Chen <me(a)linux.beauty> ext4: fix fast commit wait/wake bit mapping on 64-bit Karl Mehltretter <kmehltretter(a)gmail.com> lockdep/selftests: Restore sched_rt_mutex state on PREEMPT_RT Karl Mehltretter <kmehltretter(a)gmail.com> lockdep/selftests: Restore migrate_disable() state on PREEMPT_RT Al Viro <viro(a)zeniv.linux.org.uk> configfs_lookup(): don't leave ->s_dentry dangling on failure Inochi Amaoto <inochiama(a)gmail.com> riscv: dts: sophgo: sg2042: use hex for CPU unit address Inochi Amaoto <inochiama(a)gmail.com> riscv: dts: sophgo: sg2044: use hex for CPU unit address Alexander Potapenko <glider(a)google.com> lib/test_meminit: use && for bools Frederic Weisbecker <frederic(a)kernel.org> tick/sched: Fix TOCTOU in nohz idle time fetch Daniel Borkmann <daniel(a)iogearbox.net> bpf: Reject exclusive maps for bpf_map_elem iterators Nathan Chancellor <nathan(a)kernel.org> driver core: Use system_percpu_wq instead of system_wq liuxixin <gliuxen(a)gmail.com> nvme: fix FDP fdpcidx bounds check Guanyou.Chen <chenguanyou9338(a)gmail.com> sched: restore timer_slack_ns when resetting RT policy on fork Danila Chernetsov <listdansp(a)mail.ru> ext2: fix ignored return value of generic_write_sync() Sang-Heon Jeon <ekffu200098(a)gmail.com> mm/fake-numa: fix under-allocation detection in uniform split Deepanshu Kartikey <kartikey406(a)gmail.com> bpf: fix UAF by restoring RCU-delayed inode freeing in bpffs Chanwoo Lee <cw9316.lee(a)samsung.com> scsi: ufs: Fix wrong value printed in unexpected UPIU response case Dan Carpenter <error27(a)gmail.com> scsi: pm8001: Fix error code in non_fatal_log_show() Daniel Borkmann <daniel(a)iogearbox.net> libbpf: Skip max_entries override on signed loaders Daniel Borkmann <daniel(a)iogearbox.net> libbpf: Skip initial_value override on signed loaders KP Singh <kpsingh(a)kernel.org> libbpf: Reject non-exclusive metadata maps in the signed loader Daniel Borkmann <daniel(a)iogearbox.net> bpf: Reject exclusive maps as inner maps in map-in-map Martin Wilck <martin.wilck(a)suse.com> scsi: Revert "scsi: Fix sas_user_scan() to handle wildcard and multi-channel scans" Alison Schofield <alison.schofield(a)intel.com> nvdimm/btt: Handle preemption in BTT lane acquisition Randy Dunlap <rdunlap(a)infradead.org> x86/cpu: Keep the PROCESSOR_SELECT menu together Yuho Choi <dbgh9129(a)gmail.com> ARM: imx31: Fix IIM mapping leak in revision check Bart Van Assche <bvanassche(a)acm.org> ata: libata: Fix ata_exec_internal() Wei Zhang <wei.zhang(a)oss.qualcomm.com> wifi: ath12k: fix NULL deref in change_sta_links for unready link Kwan Lai Chee Hou <laicheehou9(a)gmail.com> wifi: ath12k: fix incorrect HT/VHT/HE/EHT MCS reporting in monitor mode J. Neuschäfer <j.ne(a)posteo.net> HID: wiimote: Fix table layout and whitespace errors Yuho Choi <dbgh9129(a)gmail.com> ARM: imx3: Fix CCM node reference leak Chuck Lever <chuck.lever(a)oracle.com> NFSD: Fix delegation reference leak in nfsd4_revoke_states John Madieu <john.madieu.xa(a)bp.renesas.com> ASoC: rsnd: Fix RSND_SOC_MASK width to single nibble Felix Gu <ustc.gu(a)gmail.com> spi: atmel: fix DMA channel and bounce buffer leaks Zhang Yi <yi.zhang(a)huawei.com> ext4: fix LOGFLUSH shutdown ordering to allow ordered-mode data writeback Daniel Borkmann <daniel(a)iogearbox.net> libbpf: Skip endianness swap when loader generation failed Daniel Borkmann <daniel(a)iogearbox.net> libbpf: Skip hash computation when loader generation failed Yuyang Huang <yuyanghuang(a)google.com> selftests/bpf: add verification for BPF_PROG_QUERY attr size boundaries Yuyang Huang <yuyanghuang(a)google.com> bpf: fix BPF_PROG_QUERY OOB write and cgroup backward compat Abd-Alrhman Masalkhi <abd.masalkhi(a)gmail.com> raid1: fix nr_pending leak in REQ_ATOMIC bad-block error path Chen Cheng <chencheng(a)fnnas.com> md/raid10: reset read_slot when reusing r10bio for discard Danilo Krummrich <dakr(a)kernel.org> rpmsg: use generic driver_override infrastructure Danilo Krummrich <dakr(a)kernel.org> Drivers: hv: vmbus: use generic driver_override infrastructure Danilo Krummrich <dakr(a)kernel.org> cdx: use generic driver_override infrastructure Danilo Krummrich <dakr(a)kernel.org> amba: use generic driver_override infrastructure Renjiang Han <renjiang.han(a)oss.qualcomm.com> media: qcom: venus: relax encoder frame/blur step size on v6 Renjiang Han <renjiang.han(a)oss.qualcomm.com> media: qcom: venus: relax encoder frame/blur dimension steps on v4 Renjiang Han <renjiang.han(a)oss.qualcomm.com> media: qcom: venus: drop extra padding in NV12 raw size calculation Dmitry Baryshkov <dmitry.baryshkov(a)oss.qualcomm.com> Revert "media: venus: hfi_platform: Correct supported codecs for sc7280" Tristan Madani <tristmd(a)gmail.com> RDMA/rxe: Copy WQE to local buffer in non-SRQ receive path Tristan Madani <tristmd(a)gmail.com> RDMA/rxe: Fix TOCTOU heap overflow in get_srq_wqe Jiri Pirko <jiri(a)resnulli.us> RDMA/umem: Add ib_umem_is_contiguous() stub for !CONFIG_INFINIBAND_USER_MEM Marek Vasut <marex(a)nabladev.com> arm64: dts: st: Fix SAI addresses on stm32mp251 zhoumin <teczm(a)foxmail.com> EDAC/{skx_common,skx}: Fix UBSAN shift-out-of-bounds in skx_get_dimm_info Qiuxu Zhuo <qiuxu.zhuo(a)intel.com> EDAC/igen6: Fix call trace due to missing release() Jessica Zhang <jessica.zhang(a)oss.qualcomm.com> drm/msm/dp: Fix the ISR_* enum values Jessica Zhang <jessica.zhang(a)oss.qualcomm.com> drm/msm/dp: fix HPD state status bit shift value Andrea Righi <arighi(a)nvidia.com> sched/deadline: Reject debugfs dl_server writes for offline CPUs Herbert Xu <herbert(a)gondor.apana.org.au> crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm Herbert Xu <herbert(a)gondor.apana.org.au> crypto: tegra - Fix dma_free_coherent size error Aleksander Jan Bajkowski <olek2(a)wp.pl> crypto: inside-secure/eip93 - Add check for devm_request_threaded_irq Weili Qian <qianweili(a)huawei.com> crypto: hisilicon/qm - disable error report before flr Tetsuo Handa <penguin-kernel(a)I-love.SAKURA.ne.jp> ocfs2: kill osb->system_file_mutex lock ZhengYuan Huang <gality369(a)gmail.com> ocfs2: don't BUG_ON an invalid journal dinode Dan Carpenter <error27(a)gmail.com> rapidio/tsi721: prevent a bad dereference in tsi721_db_dpc() Davidlohr Bueso <dave(a)stgolabs.net> dax/kmem: account for partial discontiguous resource upon removal Brian Norris <briannorris(a)chromium.org> arm64: tegra: Add #{address,size}-cells to Chromium-based /firmware Brian Norris <briannorris(a)chromium.org> ARM: tegra: Add #{address,size}-cells to Chromium-based /firmware Carlos Llamas <cmllamas(a)google.com> libbpf: Fix UAF in strset__add_str() Siddharth Nayyar <sidnayyar(a)google.com> bpftool: Fix typo in struct_ops map FD generation for light skeleton Michael Bommarito <michael.bommarito(a)gmail.com> libbpf: Harden parse_vma_segs() path parsing Timur Tabi <ttabi(a)nvidia.com> drm/nouveau/bios: specify correct display fuse register for Ampere and Ada Mikko Perttunen <mperttunen(a)nvidia.com> drm/tegra: Fix iommu_map_sgtable() return value check Mikko Perttunen <mperttunen(a)nvidia.com> gpu: host1x: Fix iommu_map_sgtable() return value check Felix Gu <ustc.gu(a)gmail.com> drm/tegra: dc: Fix device node reference leak in tegra_dc_has_output() Mikko Perttunen <mperttunen(a)nvidia.com> gpu: host1x: Allow entries in BO caches to be freed Ion Agorria <ion(a)agorria.com> drm/tegra: gr2d/gr3d: Contain PM in the gr*d_probe/gr*d_remove Svyatoslav Ryhel <clamor95(a)gmail.com> drm/tegra: gr2d/gr3d: Initialize address register map before HOST1X client is registered Tomas Glozar <tglozar(a)redhat.com> rtla/actions: Restore continue flag in actions_perform() Wander Lairson Costa <wander(a)redhat.com> rtla: Introduce for_each_action() helper Vasant Hegde <vasant.hegde(a)amd.com> iommu/amd: Fix premature break in init_iommu_one() Jiayuan Chen <jiayuan.chen(a)linux.dev> net/sched: cls_bpf: prevent unbounded recursion in offload rollback Eric Dumazet <edumazet(a)google.com> ipv6: guard against possible NULL deref in __in6_dev_stats_get() Breno Leitao <leitao(a)debian.org> workqueue: drop spurious '*' from print_worker_info() fn declaration Mateusz Nowicki <mateusz.nowicki(a)posteo.net> nvme-pci: fix out-of-bounds access in nvme_setup_descriptor_pools Nilay Shroff <nilay(a)linux.ibm.com> nvme-multipath: fix flex array size in struct nvme_ns_head Geliang Tang <geliang(a)kernel.org> nvmet-tcp: check return value of nvmet_tcp_set_queue_sock Geliang Tang <geliang(a)kernel.org> nvmet-tcp: fix page fragment cache leak in error path Jia He <justin.he(a)arm.com> init/initramfs_test: wait_for_initramfs() before running Charles Keepax <ckeepax(a)opensource.cirrus.com> pinctrl: cs42l43: Fix polarity on debounce Charles Keepax <ckeepax(a)opensource.cirrus.com> pinctrl: cs42l43: Fix leaked pm reference on error path Joey Lu <a0987203069(a)gmail.com> pinctrl: nuvoton: ma35d1: fix MFP register offset and pin table Florian Schmaus <flo(a)geekplace.eu> selftests: Fix Makefile target for nsfs Zhang Cen <rollkingzzc(a)gmail.com> ALSA: seq: midi: Serialize output teardown with event_input Takashi Iwai <tiwai(a)suse.de> ALSA: seq: oss: Fix UAF at handling events with embedded SysEx data Cássio Gabriel <cassiogabrielcontato(a)gmail.com> ALSA: xen-front: Connect event channel after stream prepare Cássio Gabriel <cassiogabrielcontato(a)gmail.com> ALSA: xen-front: Reset event channel state on stream clear Miquel Raynal <miquel.raynal(a)bootlin.com> mtd: spi-nor: Drop duplicate Kconfig dependency Miquel Raynal <miquel.raynal(a)bootlin.com> mtd: spi-nor: debugfs: Fix the flags list Danilo Krummrich <dakr(a)kernel.org> driver core: Guard deferred probe timeout extension with delayed_work_pending() Danilo Krummrich <dakr(a)kernel.org> driver core: Fix missing jiffies conversion in deferred_probe_extend_timeout() Rosen Penev <rosenp(a)gmail.com> mips: n64: add __iomem for writel call Rosen Penev <rosenp(a)gmail.com> mips: ralink: mt7621: add missing __iomem Maciej W. Rozycki <macro(a)orcam.me.uk> MIPS: DEC: Remove do_IRQ() call indirection Maciej W. Rozycki <macro(a)orcam.me.uk> MIPS: Fix big-endian stack argument fetching in o32 wrapper Jiakai Xu <xujiakai24(a)mails.ucas.ac.cn> PM: sleep: Use complete() in device_pm_sleep_init() Xianwei Zhao <xianwei.zhao(a)amlogic.com> pinctrl: meson: amlogic-a4: fix gpio output glitch Tao Cui <cuitao(a)kylinos.cn> RDMA/counter: Fix incorrect port index in rdma_counter_init() error cleanup Lianfa Weng <wenglianfa(a)huawei.com> RDMA/hns: Fix log flood after cmd_mbox failure Lianfa Weng <wenglianfa(a)huawei.com> RDMA/hns: Fix warning in poll cq direct mode Eliot Courtney <ecourtney(a)nvidia.com> gpu: nova-core: vbios: read BitToken using FromBytes Alexandre Courbot <acourbot(a)nvidia.com> gpu: nova-core: replace `as` with `from` conversions where possible Eliot Courtney <ecourtney(a)nvidia.com> gpu: nova-core: vbios: avoid reading too far in read_more_at_offset Eliot Courtney <ecourtney(a)nvidia.com> gpu: nova-core: vbios: use checked arithmetic for bios image range end Eliot Courtney <ecourtney(a)nvidia.com> gpu: nova-core: vbios: stop scanning at BIOS_MAX_SCAN_LEN Guangshuo Li <lgs201920130244(a)gmail.com> IB/mlx4: Fix refcount leak in add_port() error path Zhu Yanjun <yanjun.zhu(a)linux.dev> RDMA/rxe: Fix a use-after-free problem in rxe_mmap Jacob Moroni <jmoroni(a)google.com> RDMA/irdma: Fix out-of-bounds write in irdma_copy_user_pgaddrs Han Gao <gaohan(a)iscas.ac.cn> pinctrl: spacemit: fix NULL check in spacemit_pin_set_config Samuel Holland <samuel(a)sholland.org> bus: sunxi-rsb: Always check register address validity Shiraz Saleem <shirazsaleem(a)microsoft.com> RDMA/mana_ib: Use ib_get_eth_speed for reporting port speed Ronaldo Nunez <rnunez(a)baylibre.com> pwm: imx27: Fix variable truncation in .apply() Lifeng Zheng <zhenglifeng1(a)huawei.com> cpufreq: conservative: Simplify frequency limit handling Pengjie Zhang <zhangpengjie2(a)huawei.com> cpufreq: Documentation: fix sampling_down_factor range Aleksander Jan Bajkowski <olek2(a)wp.pl> crypto: eip93 - fix reset ring register definition Saravana Kannan <saravanak(a)google.com> of: dynamic: Fix overlayed devices not probing because of fw_devlink Saravana Kannan <saravanak(a)google.com> Revert "treewide: Fix probing of devices in DT overlays" Zhang Yuwei <zhangyuwei20(a)huawei.com> driver core: Use mod_delayed_work to prevent lost deferred probe work Stepan Ionichev <sozdayvek(a)gmail.com> device property: fix fwnode reference leak in fwnode_graph_get_endpoint_by_id() Conor Kotwasinski <conorkotwasinski2024(a)u.northwestern.edu> kernfs: fix suspicious RCU usage in kernfs_put() Baokun Li <libaokun(a)linux.alibaba.com> writeback: drop now-unnecessary rcu_barrier() in cgroup_writeback_umount() Ritesh Kumar <quic_riteshk(a)quicinc.com> arm64: dts: qcom: lemans: Add eDP ref clock for eDP PHYs Pengpeng Hou <pengpeng(a)iscas.ac.cn> tracing: Bound synthetic-field strings with seq_buf Harshal Dev <harshal.dev(a)oss.qualcomm.com> arm64: dts: qcom: sm8750: Add power-domain and iface clk for ice node Harshal Dev <harshal.dev(a)oss.qualcomm.com> arm64: dts: qcom: sm8650: Add power-domain and iface clk for ice node Harshal Dev <harshal.dev(a)oss.qualcomm.com> arm64: dts: qcom: sm8550: Add power-domain and iface clk for ice node Harshal Dev <harshal.dev(a)oss.qualcomm.com> arm64: dts: qcom: sm8450: Add power-domain and iface clk for ice node Harshal Dev <harshal.dev(a)oss.qualcomm.com> arm64: dts: qcom: kodiak: Add power-domain and iface clk for ice node Harshal Dev <harshal.dev(a)oss.qualcomm.com> arm64: dts: qcom: sc7180: Add power-domain and iface clk for ice node Harshal Dev <harshal.dev(a)oss.qualcomm.com> arm64: dts: qcom: monaco: Add power-domain and iface clk for ice node Harshal Dev <harshal.dev(a)oss.qualcomm.com> arm64: dts: qcom: lemans: Add power-domain and iface clk for ice node Geert Uytterhoeven <geert+renesas(a)glider.be> firmware: arm_scmi: Fix OOB in scmi_power_name_get() Sven Püschel <s.pueschel(a)pengutronix.de> media: rockchip: rga: fix too small buffer size Eric Dumazet <edumazet(a)google.com> net/sched: sch_drr: annotate data-races around cl->deficit Hongling Zeng <zenghongling(a)kylinos.cn> nilfs2: Fix return in nilfs_mkdir Daniel Palmer <daniel(a)thingy.jp> tools/nolibc: getopt: Fix potential out of bounds access Chen-Yu Tsai <wenst(a)chromium.org> regulator: dt-bindings: mt6359: Drop regulator-name pattern restrictions Randy Dunlap <rdunlap(a)infradead.org> bitops: use common function parameter names Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> sysfs: clamp show() return value in sysfs_kf_read() Sudeep Holla <sudeep.holla(a)kernel.org> firmware: arm_scmi: Read sensor config as 32-bit value Andre Przywara <andre.przywara(a)arm.com> firmware: smccc: Fix Arm SMCCC SOC_ID name call Aurelien Jarno <aurelien(a)aurel32.net> riscv: dts: spacemit: set console baud rate on Milk-V Jupiter Jose A. Perez de Azpillaga <azpijr(a)gmail.com> staging: media: atomisp: fix loop shadowing in ia_css_stream_destroy() Yuho Choi <dbgh9129(a)gmail.com> media: atomisp: gc2235: fix UAF and memory leak Zilin Guan <zilin(a)seu.edu.cn> media: atomisp: Fix memory leak in atomisp_fixed_pattern_table() Sherry Sun <sherry.sun(a)nxp.com> arm64: dts: imx95-19x19-evk: Fix PCIe EP vpcie-supply Sherry Sun <sherry.sun(a)nxp.com> arm64: dts: imx8qxp-mek: Remove unnecessary PCIe EP vpcie-supply Sherry Sun <sherry.sun(a)nxp.com> arm64: dts: imx8dxl-evk: Remove unnecessary PCIe EP properties Jamie Nguyen <jamien(a)nvidia.com> firmware: arm_ffa: Honor partition info descriptor size Kevin Brodsky <kevin.brodsky(a)arm.com> selftests/mm: Fix resv_sz when parsing arm64 signal frame Bibek Kumar Patro <bibek.patro(a)oss.qualcomm.com> iommu/arm-smmu-qcom: Fix fastrpc compatible string in ACTLR client match table Paul Chaignon <paul.chaignon(a)gmail.com> selftests/bpf: Fix test for refinement of single-value tnum Roman Kvasnytskyi <roman(a)kvasnytskyi.net> selftests/bpf: Reject unsupported -k option in vmtest.sh Liviu Dudau <liviu.dudau(a)arm.com> drm/syncobj: Fix memory leak in drm_syncobj_find_fence() Junxian Huang <huangjunxian6(a)hisilicon.com> RDMA/hns: Initialize seqfile before creating file Sara Venkatesh <sarajvenkatesh(a)gmail.com> RDMA/srpt: fix integer overflow in immediate data length check Prathamesh Deshpande <prathameshdeshpande7(a)gmail.com> RDMA/mlx5: Fix devx subscribe-event unwind NULL dereference Prathamesh Deshpande <prathameshdeshpande7(a)gmail.com> RDMA/mlx5: Fix UMR XLT cleanup on ODP populate failure Alexander Chesnokov <Alexander.Chesnokov(a)kaspersky.com> RDMA/hns: Fix arithmetic overflow in calc_hem_config() Prathamesh Deshpande <prathameshdeshpande7(a)gmail.com> IB/mlx5: Fix transport-domain rollback and initialize lb mutex earlier Linmao Li <lilinmao(a)kylinos.cn> ipv6: addrconf: bail out of dad_failure when state is no longer POSTDAD Eric Dumazet <edumazet(a)google.com> net/sched: sch_htb: annotate data-races (I) Eric Dumazet <edumazet(a)google.com> net/sched: sch_htb: do not change sch->flags in htb_dump() Qiang Ma <maqianga(a)uniontech.com> spi: hisi-kunpeng: Use dev_err_probe() for host registration failure Sean Christopherson <seanjc(a)google.com> crypto: ccp - Treat zero-length cert chain as query for blob lengths Yihang Li <liyihang9(a)huawei.com> scsi: hisi_sas: Add slave_destroy interface for v3 hw Eric Dumazet <edumazet(a)google.com> net/sched: sch_hfsc: annotate data-races in hfsc_dump_class_stats() Stepan Ionichev <sozdayvek(a)gmail.com> clk: scpi: Unregister child clock providers on remove Rafael J. Wysocki <rafael.j.wysocki(a)intel.com> thermal: hwmon: Fix critical temperature attribute removal Pengpeng Hou <pengpeng(a)iscas.ac.cn> evm: terminate and bound the evm_xattrs read buffer Lin He <helin52(a)huawei.com> drm/hisilicon/hibmc: use clock to look up the PLL value Lin He <helin52(a)huawei.com> drm/hisilicon/hibmc: move display contrl config to hibmc_probe() Lin He <helin52(a)huawei.com> drm/hisilicon/hibmc: fix no showing when no connectors connected Lin He <helin52(a)huawei.com> drm/hisilicon/hibmc: add updating link cap in DP detect() Kuldeep Singh <kuldeep.singh(a)oss.qualcomm.com> arm64: dts: qcom: sm8450: Fix ICE reg size Kuldeep Singh <kuldeep.singh(a)oss.qualcomm.com> arm64: dts: qcom: kodiak: Fix ICE reg size Cristian Marussi <cristian.marussi(a)arm.com> clk: scmi: Fix clock rate rounding Hsiu Che Yu <yu.whisper.personal(a)gmail.com> rust: alloc: fix `Vec::extend_with` SAFETY comment Chen-Yu Tsai <wenst(a)chromium.org> arm64: dts: mediatek: mt8192-asurada: Move PCIe DMA bounce buffer to host Stefan Metzmacher <metze(a)samba.org> uaccess: fix ignored_trailing logic in copy_struct_to_user() Matt Bobrowski <mattbobrowski(a)google.com> bpf: fix crash in bpf_[set|remove]_dentry_xattr for negative dentries Luca Leonardo Scorcia <l.scorcia(a)gmail.com> soc: mediatek: mtk-mmsys: Restore MT8167 routing masks lost during merge Sean Christopherson <seanjc(a)google.com> iommu/amd: Fix a stale comment about which legacy mode is user visible Dmitry Baryshkov <dmitry.baryshkov(a)oss.qualcomm.com> media: venus: scale MMCX power domain on SM8250 Dmitry Baryshkov <dmitry.baryshkov(a)oss.qualcomm.com> media: iris: scale MMCX power domain on SM8250 Wenmeng Liu <wenmeng.liu(a)oss.qualcomm.com> media: qcom: camss: vfe: fix PIX subdev naming on VFE lite Shuangpeng Bai <shuangpeng.kernel(a)gmail.com> nilfs2: fix backing_dev_info reference leak Alexander Aring <aahringo(a)redhat.com> dlm: fix add msg handle in send_queue ordered Krzysztof Kozlowski <krzysztof.kozlowski(a)oss.qualcomm.com> ARM: multi_v7_defconfig: Correct QCOM_RPMH and QCOM_RPMHPD Weiming Shi <bestswngs(a)gmail.com> crypto: asymmetric_keys - fix OOB read in pefile_digest_pe_contents Thorsten Blum <thorsten.blum(a)linux.dev> crypto: ecrdsa - fix unknown OID check in ecrdsa_param_curve Lothar Rubusch <l.rubusch(a)gmail.com> crypto: atmel-sha204a - fix blocking and non-blocking rng logic Tycho Andersen (AMD) <tycho(a)kernel.org> crypto: ccp - Fix snp_filter_reserved_mem_regions() off-by-one Tycho Andersen (AMD) <tycho(a)kernel.org> crypto: ccp - Reverse the cleanup order in psp_dev_destroy() Di Shen <di.shen(a)unisoc.com> OPP: Fix race between OPP addition and lookup Zhan Xusheng <zhanxusheng1024(a)gmail.com> alarmtimer: Remove stale return description from alarm_handle_timer() Chris Brandt <chris.brandt(a)renesas.com> drm: renesas: rz-du: mipi_dsi: Fix return path on error Kuniyuki Iwashima <kuniyu(a)google.com> vxlan: Fix potential null-ptr-deref in vxlan_gro_prepare_receive(). Peng Fan <peng.fan(a)nxp.com> Revert "arm64: dts: imx8mp-kontron: Add support for reading SD_VSEL signal" Peng Fan <peng.fan(a)nxp.com> Revert "arm64: dts: imx8mm-kontron: Add support for reading SD_VSEL signal" Peng Fan <peng.fan(a)nxp.com> arm64: dts: imx8x-colibri: Correct SODIMM PAD settings Weixin Guo <2298701336(a)qq.com> arm64: dts: rockchip: fix rk809 interrupt pin on rk3566-roc-pc Brian Norris <briannorris(a)chromium.org> arm64: dts: rockchip: Add #{address,size}-cells to Chromium-based /firmware Brian Norris <briannorris(a)chromium.org> ARM: dts: rockchip: Add #{address,size}-cells to Chromium-based /firmware David Heidelberg <david(a)ixit.cz> drm/panel: Clean up S6E3HA2 config dependencies and fill help text Alice Ryhl <aliceryhl(a)google.com> drm/gpuvm: take refcount on DRM device Marek Vasut <marex(a)nabladev.com> dt-bindings: vendor-prefixes: Add Displaytech Ltd. Felix Gu <ustc.gu(a)gmail.com> pinctrl: sunxi: fix regulator leak in sunxi_pmx_request() error path Conor Dooley <conor.dooley(a)microchip.com> dts: spacemit: set console baud rate on bpif3 Masami Hiramatsu (Google) <mhiramat(a)kernel.org> lib/vsprintf: Fix to check field_width and precision Damian Muszynski <damian.muszynski(a)intel.com> crypto: qat - fix heartbeat error injection Ashish Mhetre <amhetre(a)nvidia.com> memory: tegra: Wire up system sleep PM ops Nas Chung <nas.chung(a)chipsnmedia.com> media: v4l2-common: Add YUV24 format info Samuel Holland <samuel(a)sholland.org> media: cedrus: Fix failure to clean up hardware on probe failure Felix Gu <ustc.gu(a)gmail.com> watchdog: sprd_wdt: Remove redundant sprd_wdt_disable() on register failure Balakrishnan Sambath <balakrishnan.s(a)microchip.com> watchdog: sama5d4_wdt: Fix WDDIS detection on SAM9X60 and SAMA7G5 Yingjie Gao <gaoyingjie(a)uniontech.com> watchdog: sp5100_tco: Use EFCH MMIO for newer Hygon FCH Gabriele Monaco <gmonaco(a)redhat.com> Documentation/rv: Replace stale website link Jihed Chaibi <jihed.chaibi.dev(a)gmail.com> ARM: dts: am335x-sl50: Fix audio bitclock and frame master endpoint Tristan Madani <tristan(a)talencesecurity.com> wifi: ath9k: fix OOB access from firmware tx status queue ID Chen-Yu Tsai <wenst(a)chromium.org> pinctrl: mediatek: eint: Drop base from mtk_eint_chip_write_mask() Prasanna Kumar T S M <ptsm(a)linux.microsoft.com> soc: xilinx: Shutdown and free rx mailbox channel Xingjing Deng <micro6947(a)gmail.com> kconfig: fix potential NULL pointer dereference in conf_askvalue Tristan Madani <tristan(a)talencesecurity.com> wifi: rtw89: add bounds check on firmware mac_id in link lookup Tristan Madani <tristan(a)talencesecurity.com> wifi: rtw88: fix OOB read from firmware RX descriptor exceeding DMA buffer Shin-Yi Lin <isaiah(a)realtek.com> wifi: rtw89: Correct data type for scan index to avoid infinite loop Chin-Yen Lee <timlee(a)realtek.com> wifi: rtw88: fix wrong pci_get_drvdata type in AER handlers Christos Longros <chris.longros(a)gmail.com> wifi: rtw89: fix wrong pci_get_drvdata type in AER handlers Danilo Krummrich <dakr(a)kernel.org> driver core: use READ_ONCE() for dev->driver in dev_has_sync_state() Srinivasan Shanmugam <srinivasan.shanmugam(a)amd.com> drm/amdkfd: Validate CRIU-restored IDs before idr_alloc Krzysztof Kozlowski <krzysztof.kozlowski(a)oss.qualcomm.com> dt-bindings: pinctrl: nvidia,tegra234: Add missing required block Jon Hunter <jonathanh(a)nvidia.com> arm64: tegra: Fix Tegra234 MGBE PTP clock Louis Kotze <loukot(a)gmail.com> wifi: cfg80211: fix grammar in MLO group key error message Krzysztof Kozlowski <krzysztof.kozlowski(a)oss.qualcomm.com> arm64: dts: qcom: sdm845-mezzanine: Fix camss ports unit_address_vs_reg warning Krzysztof Kozlowski <krzysztof.kozlowski(a)oss.qualcomm.com> arm64: dts: qcom: sc8180x: Fix phy simple_bus_reg warning Krzysztof Kozlowski <krzysztof.kozlowski(a)oss.qualcomm.com> arm64: dts: qcom: ipq5424: Fix USB simple_bus_reg warnings Diederik de Haas <diederik(a)cknow-tech.com> arm64: dts: rockchip: Fix gmac0 reset pin for NanoPi R5S Quentin Schulz <quentin.schulz(a)cherry.de> arm64: dts: rockchip: fix Ethernet PHY not found on PX30 Cobra Baolin Liu <liubaolin(a)kylinos.cn> Documentation: proc: fix section numbering in table of contents Gregory Bell <grbell(a)redhat.com> selftests/bpf: Use local type for bpf_fou_encap in test_tunnel_kern Gregory Bell <grbell(a)redhat.com> selftests/bpf: Use local type for flow_offload_tuple_rhash in xdp_flowtable Yang Wang <kevinyang.wang(a)amd.com> drm/amd/pm: remove trailing semicolon from AMDGPU_PM_POLICY_ATTR macro Nick Hu <nick.hu(a)sifive.com> dt-bindings: timer: Remove sifive,fine-ctr-bits property Matt Bobrowski <mattbobrowski(a)google.com> selftests/bpf: Fix off-by-one in bpf_cpumask_populate related selftest Aaron Tomlin <atomlin(a)atomlin.com> libbpf: Report error when a negative kprobe offset is specified Yuho Choi <dbgh9129(a)gmail.com> drm/radeon: fix memory leak in radeon_ring_restore() on lock failure Werner Kasselman <werner(a)verivus.ai> drm/radeon: fix integer overflow in radeon_align_pitch() Werner Kasselman <werner(a)verivus.ai> drm/amdgpu: fix integer overflow in amdgpu_gem_align_pitch() Jonathan Cavitt <jonathan.cavitt(a)intel.com> drm/gpuvm: Do not prepare NULL objects Matthew Brost <matthew.brost(a)intel.com> drm/gpusvm: Reject VMAs with VM_IO or VM_PFNMAP when creating SVM ranges Tomi Valkeinen <tomi.valkeinen(a)ideasonboard.com> drm/tidss: Drop extra drm_mode_config_reset() call Thomas Zimmermann <tzimmermann(a)suse.de> drm/rockchip: Test for imported buffers with drm_gem_is_imported() Cristian Ciocaltea <cristian.ciocaltea(a)collabora.com> drm/rockchip: dw_dp: Fix null-ptr-deref in dw_dp_remove() Cristian Ciocaltea <cristian.ciocaltea(a)collabora.com> drm/rockchip: dw_dp: Switch to drmm_kzalloc() Max Zhen <max.zhen(a)amd.com> accel/amdxdna: Fix leak when pinning ubuf pages Chen Ni <nichen(a)iscas.ac.cn> clocksource/drivers/sun5i: Handle error returns from devm_reset_control_get_optional_exclusive() Stafford Horne <shorne(a)gmail.com> openrisc: mm: Fix section mismatch between map_page and __set_fixmap Jiacheng Yu <yujiacheng3(a)huawei.com> fbcon: Use correct type for vc_resize() return value Ian Bridges <icb(a)fastmail.org> fbcon: fix NULL pointer dereference for a console without vc_data David Howells <dhowells(a)redhat.com> afs: Fix uncancelled rxrpc OOB message handler David Howells <dhowells(a)redhat.com> afs: Fix further netns teardown to cancel the preallocation charger Nan Li <tonanli66(a)gmail.com> afs: handle CB.InitCallBackState3 requests without a server record Matvey Kovalev <matvey.kovalev(a)ispras.ru> afs: fix NULL pointer dereference in afs_get_tree() David Howells <dhowells(a)redhat.com> afs: Fix netns teardown to cancel the preallocation charger David Howells <dhowells(a)redhat.com> rxrpc: Fix double unlock in rxrpc_recvmsg() David Howells <dhowells(a)redhat.com> rxrpc: Fix leak of connection from OOB challenge David Howells <dhowells(a)redhat.com> rxrpc: Fix the reception of a reply packet before data transmission Wyatt Feng <bronzed_45_vested(a)icloud.com> rxrpc: Fix ACKALL packet handling David Howells <dhowells(a)redhat.com> rxrpc: Fix oob challenge leak in cleanup after notification failure David Howells <dhowells(a)redhat.com> rxrpc: Fix rxrpc_rotate_tx_rotate() to check there's something to rotate David Howells <dhowells(a)redhat.com> rxrpc: Fix potential infinite loop in rxrpc_recvmsg() David Howells <dhowells(a)redhat.com> rxrpc: Fix leak of released call in recvmsg(MSG_PEEK) David Howells <dhowells(a)redhat.com> rxrpc: Fix socket notification race David Howells <dhowells(a)redhat.com> rxrpc: Fix UAF in rxgk_issue_challenge() Hyunwoo Kim <imv4bel(a)gmail.com> rxrpc: Don't move a peeked OOB message onto the pending queue Jeffrey Altman <jaltman(a)auristor.com> rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc Li Daming <d4n.for.sec(a)gmail.com> rxrpc: serialize kernel accept preallocation with socket teardown Matthias Feser <mfe(a)KBSgmbhfr.onmicrosoft.com> serial: 8250_omap: clear rx_running on zero-length DMA completes Tapio Reijonen <tapio.reijonen(a)vaisala.com> serial: max310x: implement gpio_chip::get_direction() Stephan Gerhold <stephan.gerhold(a)linaro.org> serial: msm: Disable DMA for kernel console UART Guoniu Zhou <guoniu.zhou(a)oss.nxp.com> dt-bindings: power: imx93: Add MIPI PHY power domain Chen-Yu Tsai <wens(a)kernel.org> dt-bindings: media: sun4i-a10-video-engine: Add interconnect properties Ricardo Ribalda <ribalda(a)chromium.org> media: uvcvideo: Fix sequence number when no EOF Ricardo Ribalda <ribalda(a)chromium.org> media: uvcvideo: Relax the constrains for interpolating the hw clock Ricardo Ribalda <ribalda(a)chromium.org> media: uvcvideo: Do not add clock samples with small sof delta Ricardo Ribalda <ribalda(a)chromium.org> media: uvcvideo: Fix dev_sof filtering in hw timestamp Ricardo Ribalda <ribalda(a)chromium.org> media: uvcvideo: Fix buffer sequence in frame gaps Ricardo Ribalda <ribalda(a)chromium.org> media: uvcvideo: Avoid partial metadata buffers Ricardo Ribalda <ribalda(a)chromium.org> media: uvcvideo: Use hw timestaming if the clock buffer is full Damien Laine <damien.laine(a)gmail.com> ALSA: hda/realtek: Fix speakers on Legion Pro 7 16ARX8H with codec SSID 17aa:38a7 Xu Rao <raoxu(a)uniontech.com> ALSA: hda: Fix cached processing coefficient verbs Zhang Heng <zhangheng(a)kylinos.cn> ALSA: hda: conexant: Remove mic bias threshold override Eckhart Mohr <e.mohr(a)tuxedocomputers.com> ALSA: hda/realtek: Add quirk for TongFang X6xx45xU Kuniyuki Iwashima <kuniyu(a)google.com> af_unix: Drop all SCM attributes for SOCKMAP. Vasant Hegde <vasant.hegde(a)amd.com> iommu/amd: Use maximum PPR log buffer size when SNP is enabled on Family 0x19 Vasant Hegde <vasant.hegde(a)amd.com> iommu/amd: Use maximum Event log buffer size when SNP is enabled on Family 0x19 Rochan Avlur <rochan.avlur(a)gmail.com> exfat: preserve benign secondary entries during rename and move Daniel Borkmann <daniel(a)iogearbox.net> selftests/bpf: Add tests for stale delta leaking through id reassignment Daniel Borkmann <daniel(a)iogearbox.net> selftests/bpf: Add tests for delta tracking when src_reg == dst_reg Daniel Borkmann <daniel(a)iogearbox.net> bpf: Clear delta when clearing reg id for non-{add,sub} ops Daniel Borkmann <daniel(a)iogearbox.net> selftests/bpf: Add a test cases for sync_linked_regs regarding zext propagation Puranjay Mohan <puranjay(a)kernel.org> selftests/bpf: Add tests for improved linked register tracking Puranjay Mohan <puranjay(a)kernel.org> selftests: bpf: Add test for multiple syncs from linked register Sean Anderson <sean.anderson(a)linux.dev> media: uvcvideo: Fix deadlock if uvc_status_stop is called from async_ctrl.work Eric Biggers <ebiggers(a)kernel.org> crypto: sun4i-ss - Remove insecure and unused rng_alg Sagi Grimberg <sagi(a)grimberg.me> nvmet-tcp: Fix potential UAF when ddgst mismatch Shivam Kumar <kumar.shivam43666(a)gmail.com> nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path Michael Bommarito <michael.bommarito(a)gmail.com> iommu/vt-d: Clear Present bit before tearing down scalable-mode context entry Hyunwoo Kim <imv4bel(a)gmail.com> KVM: arm64: Bound used_lrs when flushing the pKVM hyp vCPU Muhammet Kaan KILINÇ <muhammetkaankilinc(a)gmail.com> crypto: algif_skcipher - force synchronous processing Kuniyuki Iwashima <kuniyu(a)google.com> tcp: Add preempt_{disable,enable}_nested() in reqsk_queue_hash_req(). ChenXiaoSong <chenxiaosong(a)kylinos.cn> smb/server: do not require delete access for non-replacing links Roger Pau Monne <roger.pau(a)citrix.com> nvme-pci: DMA unmap the correct regions in nvme_free_sgls Arnaldo Carvalho de Melo <acme(a)redhat.com> perf trace: Deal with compiler const checks Arnaldo Carvalho de Melo <acme(a)kernel.org> perf trace: Don't change const char strings Arnaldo Carvalho de Melo <acme(a)kernel.org> perf diff: Constify strchr() return variables Arnaldo Carvalho de Melo <acme(a)redhat.com> perf list: Don't write to const memory Arnaldo Carvalho de Melo <acme(a)redhat.com> perf list: Signal changing const memory is ok Arnaldo Carvalho de Melo <acme(a)redhat.com> perf tp_pmu: Address const-correctness errors in recent glibcs Arnaldo Carvalho de Melo <acme(a)redhat.com> perf units: Constify variables storing the result of strchr() on const tables Arnaldo Carvalho de Melo <acme(a)redhat.com> perf hwmon_pmu: Constify the variables returning bsearch() on const tables Arnaldo Carvalho de Melo <acme(a)kernel.org> perf tools: Use const for variables receiving str{str,r?chr}() returns Arnaldo Carvalho de Melo <acme(a)redhat.com> perf metricgroup: Constify variables storing the result of strchr() on const tables Arnaldo Carvalho de Melo <acme(a)redhat.com> perf trace-event: Constify variables storing the result of strchr() on const tables Arnaldo Carvalho de Melo <acme(a)redhat.com> perf demangle-java: Constify variables storing the result of strchr() on const tables Arnaldo Carvalho de Melo <acme(a)redhat.com> perf session: Don't write to memory pointed to a const pointer Arnaldo Carvalho de Melo <acme(a)redhat.com> perf bpf-event: Constify variables storing the result of strchr() on const tables Ian Rogers <irogers(a)google.com> perf tools: Switch printf("...%s", strerror(errno)) to printf("...%m") Arnaldo Carvalho de Melo <acme(a)kernel.org> perf list: Remove unused 'sep' variable Arnaldo Carvalho de Melo <acme(a)redhat.com> perf jitdump: Constify variables storing the result of strchr() on const tables Arnaldo Carvalho de Melo <acme(a)redhat.com> perf time-utils: Constify variables storing the result of strchr() on const tables Arnaldo Carvalho de Melo <acme(a)redhat.com> perf strlist: Remove dont_dupstr logic, used only once Arnaldo Carvalho de Melo <acme(a)redhat.com> perf strlist: Don't write to const memory ------------- Diffstat: Documentation/ABI/testing/sysfs-bus-i3c | 11 + Documentation/admin-guide/pm/cpufreq.rst | 6 +- Documentation/arch/arm64/cpu-hotplug.rst | 28 +- .../bindings/clock/qcom,x1e80100-camcc.yaml | 1 + .../bindings/dma/nvidia,tegra186-gpc-dma.yaml | 23 +- .../media/allwinner,sun4i-a10-video-engine.yaml | 10 + .../devicetree/bindings/net/renesas,ether.yaml | 3 +- .../bindings/phy/qcom,sc8280xp-qmp-pcie-phy.yaml | 13 +- .../pinctrl/nvidia,tegra234-pinmux-aon.yaml | 4 + .../bindings/pinctrl/nvidia,tegra234-pinmux.yaml | 4 + .../bindings/regulator/mt6359-regulator.yaml | 43 -- .../devicetree/bindings/timer/sifive,clint.yaml | 16 - .../devicetree/bindings/vendor-prefixes.yaml | 2 + Documentation/driver-api/nvdimm/btt.rst | 5 +- Documentation/driver-api/pci/pci.rst | 3 + Documentation/filesystems/proc.rst | 14 +- Documentation/netlink/specs/handshake.yaml | 1 + Documentation/netlink/specs/rt-link.yaml | 6 + Documentation/networking/bonding.rst | 23 + Documentation/trace/eprobetrace.rst | 4 + Documentation/trace/rv/monitor_sched.rst | 7 +- Makefile | 4 +- arch/alpha/kernel/pci-sysfs.c | 13 +- arch/arm/boot/dts/nvidia/tegra124-nyan.dtsi | 5 + arch/arm/boot/dts/nvidia/tegra124-venice2.dts | 5 + arch/arm/boot/dts/nxp/imx/imx6ul-var-som.dtsi | 4 - arch/arm/boot/dts/rockchip/rk3288-veyron.dtsi | 5 + arch/arm/boot/dts/st/stm32mp151c-mecio1r0.dts | 128 +++++ arch/arm/boot/dts/st/stm32mp153c-mecio1r1.dts | 144 +++++ arch/arm/boot/dts/st/stm32mp15x-mecio1-io.dtsi | 146 +---- arch/arm/boot/dts/ti/omap/am335x-sl50.dts | 4 +- arch/arm/configs/axm55xx_defconfig | 1 - arch/arm/configs/dove_defconfig | 1 - arch/arm/configs/ep93xx_defconfig | 1 - arch/arm/configs/mmp2_defconfig | 1 - arch/arm/configs/multi_v7_defconfig | 4 +- arch/arm/configs/mv78xx0_defconfig | 1 - arch/arm/configs/sunxi_defconfig | 1 - arch/arm/mach-imx/cpu-imx31.c | 9 +- arch/arm/mach-imx/mm-imx3.c | 2 + arch/arm64/boot/dts/allwinner/sun55i-a523.dtsi | 3 +- .../boot/dts/freescale/fsl-lx2162a-clearfog.dts | 2 +- arch/arm64/boot/dts/freescale/imx8dxl-evk.dts | 2 - .../arm64/boot/dts/freescale/imx8mm-kontron-bl.dts | 10 +- .../boot/dts/freescale/imx8mm-kontron-osm-s.dtsi | 7 +- .../boot/dts/freescale/imx8mp-kontron-bl-osm-s.dts | 14 +- .../boot/dts/freescale/imx8mp-kontron-osm-s.dtsi | 7 +- .../dts/freescale/imx8mp-tqma8mpql-mba8mpxl.dts | 3 + arch/arm64/boot/dts/freescale/imx8qxp-mek.dts | 1 - arch/arm64/boot/dts/freescale/imx8ulp-evk.dts | 4 +- arch/arm64/boot/dts/freescale/imx8x-colibri.dtsi | 4 +- arch/arm64/boot/dts/freescale/imx95-19x19-evk.dts | 2 +- arch/arm64/boot/dts/freescale/imx95.dtsi | 10 +- arch/arm64/boot/dts/freescale/s32g3.dtsi | 2 +- arch/arm64/boot/dts/mediatek/mt8192-asurada.dtsi | 2 +- arch/arm64/boot/dts/nvidia/tegra132-norrin.dts | 5 + arch/arm64/boot/dts/nvidia/tegra210-smaug.dts | 5 + arch/arm64/boot/dts/nvidia/tegra234.dtsi | 8 +- arch/arm64/boot/dts/qcom/ipq5424.dtsi | 4 +- arch/arm64/boot/dts/qcom/lemans.dtsi | 18 +- arch/arm64/boot/dts/qcom/qcs8300.dtsi | 6 +- arch/arm64/boot/dts/qcom/sc7180.dtsi | 6 +- arch/arm64/boot/dts/qcom/sc7280.dtsi | 8 +- arch/arm64/boot/dts/qcom/sc8180x.dtsi | 2 +- arch/arm64/boot/dts/qcom/sdm630.dtsi | 9 +- .../qcom/sdm845-db845c-navigation-mezzanine.dtso | 5 + arch/arm64/boot/dts/qcom/sm8450.dtsi | 8 +- arch/arm64/boot/dts/qcom/sm8550.dtsi | 6 +- arch/arm64/boot/dts/qcom/sm8650.dtsi | 6 +- arch/arm64/boot/dts/qcom/sm8750.dtsi | 6 +- arch/arm64/boot/dts/rockchip/px30-cobra.dtsi | 2 +- arch/arm64/boot/dts/rockchip/px30-ringneck.dtsi | 2 +- arch/arm64/boot/dts/rockchip/rk3399-gru.dtsi | 5 + arch/arm64/boot/dts/rockchip/rk3566-roc-pc.dts | 2 +- arch/arm64/boot/dts/rockchip/rk3568-nanopi-r5s.dts | 6 +- arch/arm64/boot/dts/st/stm32mp251.dtsi | 8 +- arch/arm64/boot/dts/ti/k3-am62a7-sk.dts | 2 + arch/arm64/include/asm/kvm_hyp.h | 1 + arch/arm64/include/asm/kvm_nested.h | 10 + arch/arm64/kernel/acpi.c | 2 + arch/arm64/kernel/entry-fpsimd.S | 8 +- arch/arm64/kernel/hw_breakpoint.c | 9 + arch/arm64/kernel/smp.c | 28 +- arch/arm64/kvm/arm.c | 2 + arch/arm64/kvm/at.c | 35 +- arch/arm64/kvm/emulate-nested.c | 1 + arch/arm64/kvm/hyp/include/hyp/switch.h | 11 +- arch/arm64/kvm/hyp/nvhe/hyp-main.c | 9 + arch/arm64/kvm/hyp/pgtable.c | 3 +- arch/arm64/kvm/nested.c | 222 ++++---- arch/arm64/kvm/vgic/vgic-its.c | 2 + arch/arm64/kvm/vgic/vgic.c | 20 +- arch/arm64/mm/mmu.c | 11 +- arch/arm64/tools/sysreg | 2 +- arch/loongarch/include/asm/kexec.h | 3 +- arch/loongarch/include/asm/pgtable.h | 4 + arch/loongarch/kvm/exit.c | 1 - arch/loongarch/kvm/irqfd.c | 3 +- arch/loongarch/kvm/vcpu.c | 11 +- arch/loongarch/mm/pageattr.c | 2 +- arch/loongarch/net/bpf_jit.c | 28 +- arch/mips/dec/int-handler.S | 2 +- arch/mips/dec/platform.c | 6 +- arch/mips/dec/prom/init.c | 6 +- arch/mips/dec/setup.c | 6 - arch/mips/fw/lib/call_o32.S | 2 +- arch/mips/include/asm/dec/prom.h | 15 +- arch/mips/kernel/mips-mt-fpaff.c | 28 +- arch/mips/mm/init.c | 17 +- arch/mips/n64/init.c | 2 +- arch/mips/ralink/mt7621.c | 2 +- arch/mips/sgi-ip22/ip22-gio.c | 7 +- arch/openrisc/include/asm/cacheflush.h | 4 + arch/openrisc/kernel/jump_label.c | 2 +- arch/openrisc/kernel/patching.c | 3 + arch/openrisc/kernel/smp.c | 21 + arch/openrisc/mm/cache.c | 16 + arch/openrisc/mm/init.c | 2 +- arch/powerpc/kernel/dt_cpu_ftrs.c | 9 + arch/powerpc/kexec/core_64.c | 4 +- arch/powerpc/perf/core-fsl-emb.c | 3 +- arch/powerpc/platforms/8xx/cpm1.c | 26 + arch/powerpc/platforms/cell/spufs/file.c | 6 +- arch/powerpc/platforms/powernv/setup.c | 3 +- arch/powerpc/platforms/pseries/Kconfig | 1 + .../platforms/pseries/papr_platform_attributes.c | 8 +- arch/riscv/boot/dts/sophgo/sg2042-cpus.dtsi | 236 ++++---- arch/riscv/boot/dts/sophgo/sg2044-cpus.dtsi | 236 ++++---- arch/riscv/boot/dts/spacemit/k1-bananapi-f3.dts | 2 +- arch/riscv/boot/dts/spacemit/k1-milkv-jupiter.dts | 2 +- arch/riscv/include/asm/cpu_ops.h | 2 +- arch/riscv/kernel/asm-offsets.c | 4 +- arch/riscv/kernel/cacheinfo.c | 2 +- arch/riscv/kernel/cpu-hotplug.c | 4 +- arch/riscv/kernel/cpu_ops_sbi.c | 11 +- arch/riscv/kernel/entry.S | 8 +- arch/riscv/kernel/machine_kexec.c | 3 + arch/riscv/kernel/probes/rethook_trampoline.S | 3 + arch/riscv/kernel/stacktrace.c | 2 +- arch/riscv/kernel/vdso/Makefile | 6 +- arch/s390/kernel/diag/diag310.c | 7 +- arch/s390/kernel/perf_cpum_cf.c | 3 + arch/s390/kernel/process.c | 2 +- arch/s390/kvm/pci.c | 12 +- arch/s390/mm/mmap.c | 2 +- arch/sparc/kernel/led.c | 2 +- arch/x86/Kconfig.cpu | 8 +- arch/x86/boot/compressed/acpi.c | 7 +- arch/x86/boot/early_serial_console.c | 11 +- arch/x86/events/amd/brs.c | 10 +- arch/x86/events/amd/core.c | 18 +- arch/x86/events/amd/lbr.c | 3 +- arch/x86/events/amd/uncore.c | 6 +- arch/x86/events/intel/uncore_discovery.c | 4 +- arch/x86/kernel/cpu/cpu.h | 1 - arch/x86/kernel/uprobes.c | 26 +- arch/x86/kvm/irq.c | 4 +- arch/x86/kvm/lapic.c | 8 +- arch/x86/kvm/svm/sev.c | 6 +- arch/x86/kvm/vmx/nested.c | 2 + arch/x86/kvm/vmx/tdx.c | 12 +- arch/x86/platform/olpc/olpc-xo15-sci.c | 1 + arch/x86/video/video-common.c | 23 +- block/blk.h | 13 +- block/genhd.c | 4 - block/ioctl.c | 2 +- crypto/algif_skcipher.c | 75 +-- crypto/asymmetric_keys/verify_pefile.c | 2 + crypto/ecrdsa.c | 2 +- crypto/rng.c | 11 + drivers/accel/amdxdna/aie2_ctx.c | 4 +- drivers/accel/amdxdna/amdxdna_gem.c | 3 +- drivers/accel/amdxdna/amdxdna_ubuf.c | 12 +- drivers/accel/ivpu/ivpu_fw_log.c | 4 + drivers/accel/ivpu/ivpu_job.c | 10 +- drivers/acpi/ac.c | 6 +- drivers/acpi/acpi_ipmi.c | 4 +- drivers/acpi/acpi_pad.c | 6 +- drivers/acpi/acpi_tad.c | 6 +- drivers/acpi/bus.c | 70 +++ drivers/acpi/nfit/core.c | 89 ++- drivers/acpi/pfr_telemetry.c | 6 +- drivers/acpi/pfr_update.c | 6 +- drivers/acpi/processor_idle.c | 4 +- drivers/acpi/resource.c | 6 +- drivers/acpi/riscv/cpuidle.c | 2 +- drivers/acpi/riscv/rimt.c | 7 +- drivers/acpi/thermal.c | 2 +- drivers/amba/bus.c | 37 +- drivers/android/binder.c | 18 +- drivers/ata/libata-core.c | 23 +- drivers/ata/libata-scsi.c | 7 +- drivers/ata/pata_pxa.c | 1 + drivers/ata/sata_gemini.c | 2 +- drivers/base/core.c | 83 ++- drivers/base/dd.c | 7 +- drivers/base/firmware_loader/main.c | 71 ++- drivers/base/power/main.c | 6 +- drivers/base/property.c | 4 +- drivers/block/drbd/drbd_receiver.c | 5 + drivers/bluetooth/bpa10x.c | 8 +- drivers/bluetooth/btmtk.c | 4 +- drivers/bluetooth/btrtl.c | 5 +- drivers/bluetooth/hci_qca.c | 2 +- drivers/bluetooth/hci_vhci.c | 10 + drivers/bus/imx-weim.c | 6 - drivers/bus/mhi/ep/main.c | 9 +- drivers/bus/mhi/host/pci_generic.c | 20 +- drivers/bus/sunxi-rsb.c | 3 + drivers/cdx/cdx.c | 40 +- drivers/char/ipmi/ipmi_msghandler.c | 10 +- drivers/char/tlclk.c | 4 + drivers/char/tpm/eventlog/tpm1.c | 4 +- drivers/char/tpm/tpm-dev.c | 2 +- drivers/char/tpm/tpm2-cmd.c | 6 +- drivers/char/tpm/tpm2-sessions.c | 45 +- drivers/char/tpm/tpm_tis_core.c | 35 +- drivers/char/tpm/tpmrm-dev.c | 2 +- drivers/char/virtio_console.c | 52 +- drivers/clk/at91/pmc.c | 2 +- drivers/clk/at91/sam9x7.c | 18 +- drivers/clk/clk-scmi.c | 4 +- drivers/clk/clk-scpi.c | 2 +- drivers/clk/qcom/a53-pll.c | 2 +- drivers/clk/qcom/camcc-x1e80100.c | 64 +++ drivers/clk/qcom/ipq-cmn-pll.c | 11 +- drivers/clk/renesas/rzg2l-cpg.c | 6 +- drivers/clocksource/timer-sun5i.c | 3 + drivers/cpufreq/cpufreq_conservative.c | 12 +- drivers/cpufreq/intel_pstate.c | 6 +- drivers/crypto/Kconfig | 1 - drivers/crypto/allwinner/Kconfig | 8 - drivers/crypto/allwinner/sun4i-ss/Makefile | 1 - drivers/crypto/allwinner/sun4i-ss/sun4i-ss-core.c | 36 -- drivers/crypto/allwinner/sun4i-ss/sun4i-ss-prng.c | 69 --- drivers/crypto/allwinner/sun4i-ss/sun4i-ss.h | 20 - drivers/crypto/atmel-sha204a.c | 16 +- drivers/crypto/cavium/cpt/cptvf_reqmanager.c | 4 +- drivers/crypto/ccp/psp-dev.c | 12 +- drivers/crypto/ccp/sev-dev.c | 10 +- drivers/crypto/hisilicon/qm.c | 4 +- drivers/crypto/inside-secure/eip93/eip93-main.c | 2 + drivers/crypto/inside-secure/eip93/eip93-regs.h | 2 +- .../intel/qat/qat_common/adf_accel_devices.h | 2 + drivers/crypto/intel/qat/qat_common/adf_aer.c | 7 +- .../crypto/intel/qat/qat_common/adf_common_drv.h | 3 +- .../intel/qat/qat_common/adf_heartbeat_inject.c | 6 +- .../crypto/intel/qat/qat_common/adf_hw_arbiter.c | 25 - drivers/crypto/intel/qat/qat_common/adf_isr.c | 39 ++ drivers/crypto/intel/qat/qat_common/adf_sriov.c | 20 +- drivers/crypto/marvell/octeontx/otx_cptvf_reqmgr.c | 4 +- drivers/crypto/tegra/tegra-se-aes.c | 33 +- drivers/crypto/xilinx/xilinx-trng.c | 75 +-- drivers/cxl/core/features.c | 2 +- drivers/dax/kmem.c | 6 + drivers/dibs/dibs_loopback.c | 5 + drivers/dma-buf/dma-fence-unwrap.c | 3 + drivers/dma/dma-axi-dmac.c | 68 ++- drivers/dma/dmaengine.c | 3 +- drivers/dma/dw-edma/dw-edma-core.h | 2 +- drivers/dma/dw-edma/dw-edma-v0-core.c | 6 + drivers/dma/imx-sdma.c | 4 +- drivers/dma/qcom/gpi.c | 1 + drivers/dma/tegra186-gpc-dma.c | 7 + drivers/dpll/dpll_core.c | 140 +++-- drivers/edac/igen6_edac.c | 6 + drivers/edac/skx_common.c | 3 + drivers/firmware/arm_ffa/driver.c | 27 +- drivers/firmware/arm_scmi/power.c | 6 +- drivers/firmware/arm_scmi/sensors.c | 2 +- drivers/firmware/smccc/soc_id.c | 2 +- drivers/fpga/dfl.c | 2 + drivers/fpga/microchip-spi.c | 3 + drivers/gpio/gpio-davinci.c | 4 +- drivers/gpio/gpio-dwapb.c | 116 ++-- drivers/gpio/gpio-f7188x.c | 6 +- drivers/gpio/gpio-htc-egpio.c | 6 +- drivers/gpio/gpio-mlxbf3.c | 3 +- drivers/gpio/gpio-mt7621.c | 283 +++++++--- drivers/gpio/gpio-mvebu.c | 6 +- drivers/gpio/gpio-palmas.c | 19 + drivers/gpio/gpio-tegra.c | 18 +- drivers/gpio/gpio-timberdale.c | 2 +- drivers/gpio/gpiolib-acpi-core.c | 19 +- drivers/gpio/gpiolib.c | 2 +- drivers/gpu/drm/amd/amdgpu/amdgpu_amdkfd_gpuvm.c | 16 +- drivers/gpu/drm/amd/amdgpu/amdgpu_device.c | 6 +- drivers/gpu/drm/amd/amdgpu/amdgpu_gem.c | 25 +- drivers/gpu/drm/amd/amdgpu/amdgpu_irq.c | 2 - drivers/gpu/drm/amd/amdgpu/amdgpu_mca.c | 3 + drivers/gpu/drm/amd/amdkfd/kfd_chardev.c | 3 + .../gpu/drm/amd/amdkfd/kfd_device_queue_manager.c | 20 +- drivers/gpu/drm/amd/amdkfd/kfd_events.c | 5 + drivers/gpu/drm/amd/amdkfd/kfd_svm.c | 1 + drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm.c | 10 +- .../amd/display/modules/info_packet/info_packet.c | 2 + drivers/gpu/drm/amd/pm/amdgpu_pm.c | 6 +- drivers/gpu/drm/drm_edid.c | 8 + drivers/gpu/drm/drm_gpusvm.c | 5 + drivers/gpu/drm/drm_gpuvm.c | 9 +- drivers/gpu/drm/drm_syncobj.c | 10 +- drivers/gpu/drm/hisilicon/hibmc/dp/dp_comm.h | 1 + drivers/gpu/drm/hisilicon/hibmc/dp/dp_hw.h | 1 + drivers/gpu/drm/hisilicon/hibmc/dp/dp_link.c | 2 +- drivers/gpu/drm/hisilicon/hibmc/hibmc_drm_de.c | 78 +-- drivers/gpu/drm/hisilicon/hibmc/hibmc_drm_dp.c | 35 +- drivers/gpu/drm/hisilicon/hibmc/hibmc_drm_drv.c | 14 + drivers/gpu/drm/hisilicon/hibmc/hibmc_drm_drv.h | 1 + drivers/gpu/drm/hisilicon/hibmc/hibmc_drm_vdac.c | 75 ++- drivers/gpu/drm/i915/display/intel_atomic.c | 6 + drivers/gpu/drm/i915/gt/intel_region_lmem.c | 2 +- drivers/gpu/drm/msm/dp/dp_display.c | 4 +- drivers/gpu/drm/msm/dp/dp_reg.h | 4 +- .../gpu/drm/nouveau/nvkm/subdev/bios/shadowramin.c | 3 +- drivers/gpu/drm/panel/Kconfig | 9 +- drivers/gpu/drm/panthor/panthor_sched.c | 25 +- drivers/gpu/drm/radeon/radeon_gem.c | 13 +- drivers/gpu/drm/radeon/radeon_ring.c | 4 +- drivers/gpu/drm/renesas/rz-du/rzg2l_mipi_dsi.c | 12 +- drivers/gpu/drm/rockchip/dw_dp-rockchip.c | 7 +- drivers/gpu/drm/rockchip/rockchip_drm_gem.c | 2 +- drivers/gpu/drm/tegra/dc.c | 4 +- drivers/gpu/drm/tegra/gem.c | 22 +- drivers/gpu/drm/tegra/gr2d.c | 19 +- drivers/gpu/drm/tegra/gr3d.c | 19 +- drivers/gpu/drm/tegra/submit.c | 3 +- drivers/gpu/drm/tidss/tidss_kms.c | 2 - drivers/gpu/drm/v3d/v3d_submit.c | 2 + drivers/gpu/drm/xe/Makefile | 4 +- drivers/gpu/drm/xe/tests/xe_pci.c | 1 - drivers/gpu/drm/xe/xe_debugfs.c | 2 +- drivers/gpu/drm/xe/xe_guc_relay.c | 13 +- drivers/gpu/drm/xe/xe_hw_engine.c | 4 +- drivers/gpu/drm/xe/xe_hwmon.c | 2 +- drivers/gpu/drm/xe/xe_pt.c | 60 +- drivers/gpu/drm/xe/xe_svm.h | 15 +- drivers/gpu/drm/xe/xe_vram.c | 2 +- drivers/gpu/drm/xe/xe_vsec.c | 7 +- drivers/gpu/drm/xe/xe_vsec.h | 4 +- drivers/gpu/host1x/bus.c | 62 +- drivers/gpu/host1x/job.c | 10 +- drivers/gpu/nova-core/falcon/hal/ga102.rs | 6 +- drivers/gpu/nova-core/firmware.rs | 8 +- drivers/gpu/nova-core/firmware/fwsec.rs | 4 +- drivers/gpu/nova-core/vbios.rs | 108 ++-- drivers/hid/bpf/hid_bpf_dispatch.c | 5 +- drivers/hid/hid-core.c | 7 + drivers/hid/hid-logitech-hidpp.c | 1 - drivers/hid/hid-picolcd_core.c | 3 +- drivers/hid/hid-playstation.c | 12 + drivers/hid/hid-wiimote-modules.c | 58 +- drivers/hv/mshv_synic.c | 5 + drivers/hv/vmbus_drv.c | 43 +- drivers/hwmon/Kconfig | 3 + drivers/hwmon/aspeed-g6-pwm-tach.c | 5 +- drivers/hwmon/asus_atk0110.c | 3 + drivers/hwmon/it87.c | 3 + drivers/hwmon/occ/common.c | 34 +- drivers/hwmon/occ/common.h | 1 + drivers/hwmon/pmbus/adm1275.c | 2 +- drivers/hwmon/pmbus/pmbus_core.c | 13 +- drivers/hwmon/w83627hf.c | 4 + drivers/hwmon/w83793.c | 1 + drivers/hwspinlock/qcom_hwspinlock.c | 5 +- drivers/hwtracing/coresight/coresight-core.c | 23 +- .../hwtracing/coresight/coresight-cti-platform.c | 1 + drivers/hwtracing/coresight/coresight-etm-perf.c | 5 +- drivers/hwtracing/coresight/coresight-etm4x-core.c | 62 +- drivers/hwtracing/coresight/coresight-etm4x.h | 2 - drivers/hwtracing/coresight/coresight-priv.h | 2 +- drivers/hwtracing/coresight/coresight-sysfs.c | 8 +- drivers/i2c/busses/i2c-imx.c | 36 +- drivers/i2c/busses/i2c-k1.c | 2 +- drivers/i2c/busses/i2c-mlxbf.c | 4 +- drivers/i2c/busses/i2c-mt65xx.c | 2 +- drivers/i2c/i2c-core-of.c | 5 - drivers/i3c/device.c | 46 +- drivers/i3c/internals.h | 4 + drivers/i3c/master.c | 316 +++++++++-- drivers/i3c/master/dw-i3c-master.c | 15 +- drivers/i3c/master/dw-i3c-master.h | 2 - drivers/i3c/master/i3c-master-cdns.c | 14 +- drivers/i3c/master/mipi-i3c-hci/core.c | 39 +- drivers/i3c/master/mipi-i3c-hci/dma.c | 6 +- drivers/i3c/master/mipi-i3c-hci/ext_caps.c | 55 +- drivers/i3c/master/mipi-i3c-hci/pio.c | 20 +- drivers/i3c/master/svc-i3c-master.c | 30 +- drivers/iio/accel/mma8452.c | 2 + drivers/iio/adc/xilinx-ams.c | 5 + drivers/iio/light/si1133.c | 14 +- drivers/iio/light/tcs3472.c | 38 +- drivers/iio/magnetometer/ak8975.c | 14 + drivers/iio/orientation/hid-sensor-rotation.c | 40 +- drivers/infiniband/core/cm.c | 13 +- drivers/infiniband/core/counters.c | 2 +- drivers/infiniband/hw/bnxt_re/Makefile | 2 +- drivers/infiniband/hw/bnxt_re/ib_verbs.c | 312 +---------- drivers/infiniband/hw/bnxt_re/ib_verbs.h | 4 + drivers/infiniband/hw/bnxt_re/main.c | 2 - drivers/infiniband/hw/bnxt_re/uapi.c | 364 ++++++++++++ drivers/infiniband/hw/hfi1/init.c | 13 +- drivers/infiniband/hw/hns/hns_roce_cq.c | 6 +- drivers/infiniband/hw/hns/hns_roce_debugfs.c | 19 +- drivers/infiniband/hw/hns/hns_roce_hem.c | 8 +- drivers/infiniband/hw/hns/hns_roce_hw_v2.c | 18 +- drivers/infiniband/hw/hns/hns_roce_main.c | 2 +- drivers/infiniband/hw/hns/hns_roce_mr.c | 6 +- drivers/infiniband/hw/hns/hns_roce_srq.c | 2 +- drivers/infiniband/hw/irdma/verbs.c | 19 +- drivers/infiniband/hw/irdma/verbs.h | 1 - drivers/infiniband/hw/mana/main.c | 3 +- drivers/infiniband/hw/mlx4/mlx4_ib.h | 1 + drivers/infiniband/hw/mlx4/mr.c | 9 +- drivers/infiniband/hw/mlx4/sysfs.c | 45 +- drivers/infiniband/hw/mlx5/devx.c | 30 +- drivers/infiniband/hw/mlx5/main.c | 17 +- drivers/infiniband/hw/mlx5/mlx5_ib.h | 9 + drivers/infiniband/hw/mlx5/mr.c | 29 +- drivers/infiniband/hw/mlx5/odp.c | 12 +- drivers/infiniband/hw/mlx5/qp.c | 13 +- drivers/infiniband/hw/mlx5/restrack.c | 3 - drivers/infiniband/hw/mlx5/umr.c | 93 ++- drivers/infiniband/hw/mlx5/umr.h | 9 +- drivers/infiniband/sw/rxe/rxe_mmap.c | 19 +- drivers/infiniband/sw/rxe/rxe_resp.c | 33 +- drivers/infiniband/sw/siw/siw_cm.c | 30 +- drivers/infiniband/ulp/srpt/ib_srpt.c | 5 +- drivers/input/misc/ims-pcu.c | 129 ++++- drivers/iommu/amd/amd_iommu.h | 3 + drivers/iommu/amd/amd_iommu_types.h | 32 +- drivers/iommu/amd/init.c | 140 +++-- drivers/iommu/amd/iommu.c | 2 +- drivers/iommu/amd/ppr.c | 8 +- drivers/iommu/arm/arm-smmu/arm-smmu-qcom.c | 2 +- drivers/iommu/intel/iommu.c | 6 +- drivers/iommu/intel/pasid.c | 4 +- drivers/iommu/iommufd/driver.c | 13 +- drivers/iommu/iommufd/eventq.c | 10 +- drivers/irqchip/irq-crossbar.c | 10 +- drivers/irqchip/irq-gic-v3-its.c | 6 +- drivers/irqchip/irq-riscv-imsic-early.c | 15 +- drivers/irqchip/irq-ts4800.c | 10 + drivers/leds/uleds.c | 3 +- drivers/mailbox/imx-mailbox.c | 3 +- drivers/mailbox/mailbox-mpfs.c | 2 +- drivers/mailbox/mtk-adsp-mailbox.c | 9 +- drivers/md/dm-bufio.c | 4 +- drivers/md/dm-era-target.c | 10 +- drivers/md/dm-integrity.c | 12 +- drivers/md/dm-ioctl.c | 4 +- drivers/md/dm-log.c | 3 + drivers/md/dm-pcache/dm_pcache.c | 8 + drivers/md/dm-stats.c | 10 +- drivers/md/dm-thin-metadata.c | 67 +-- drivers/md/dm-verity-loadpin.c | 2 +- drivers/md/dm-verity-target.c | 16 +- drivers/md/dm-verity.h | 2 +- drivers/md/md-bitmap.c | 13 +- drivers/md/md-bitmap.h | 2 +- drivers/md/md-llbitmap.c | 13 +- drivers/md/md.c | 38 +- drivers/md/md.h | 10 +- drivers/md/raid0.c | 4 +- drivers/md/raid1.c | 28 +- drivers/md/raid10.c | 5 +- drivers/md/raid5.c | 61 +- .../media/platform/nxp/imx8-isi/imx8-isi-core.c | 18 +- drivers/media/platform/qcom/camss/camss-vfe.c | 2 +- .../platform/qcom/iris/iris_platform_sm8250.c | 2 +- drivers/media/platform/qcom/iris/iris_probe.c | 7 + drivers/media/platform/qcom/venus/core.c | 7 +- drivers/media/platform/qcom/venus/core.h | 1 + drivers/media/platform/qcom/venus/helpers.c | 4 +- drivers/media/platform/qcom/venus/hfi_parser.c | 6 +- drivers/media/platform/qcom/venus/hfi_platform.c | 24 - drivers/media/platform/qcom/venus/hfi_platform.h | 2 - .../media/platform/qcom/venus/hfi_platform_v4.c | 20 +- .../media/platform/qcom/venus/hfi_platform_v6.c | 16 +- drivers/media/platform/qcom/venus/pm_helpers.c | 8 +- drivers/media/platform/rockchip/rga/rga-hw.c | 2 +- drivers/media/platform/rockchip/rga/rga-hw.h | 2 +- drivers/media/usb/uvc/uvc_status.c | 28 +- drivers/media/usb/uvc/uvc_video.c | 179 +++--- drivers/media/v4l2-core/v4l2-common.c | 1 + drivers/memory/tegra/mc.c | 14 + drivers/memstick/core/ms_block.c | 4 + drivers/mfd/cs42l43.c | 2 +- drivers/mfd/rsmu_i2c.c | 6 +- drivers/mfd/rsmu_spi.c | 5 +- drivers/mfd/sm501.c | 4 +- drivers/mfd/tps6586x.c | 2 +- drivers/mmc/core/block.c | 3 +- drivers/mmc/host/sdhci-esdhc-imx.c | 91 +-- drivers/mmc/host/sdhci-of-dwcmshc.c | 14 +- drivers/mmc/host/vub300.c | 26 +- drivers/mtd/devices/mchp23k256.c | 2 +- drivers/mtd/devices/slram.c | 22 +- drivers/mtd/maps/vmu-flash.c | 1 + drivers/mtd/nand/onenand/onenand_samsung.c | 7 +- drivers/mtd/nand/raw/fsl_ifc_nand.c | 9 +- drivers/mtd/nand/raw/lpc32xx_mlc.c | 12 +- drivers/mtd/nand/raw/lpc32xx_slc.c | 12 +- drivers/mtd/nand/raw/nand_base.c | 24 +- drivers/mtd/nand/raw/pl35x-nand-controller.c | 2 +- drivers/mtd/spi-nor/Kconfig | 1 - drivers/mtd/spi-nor/debugfs.c | 1 + drivers/mtd/spi-nor/spansion.c | 4 +- drivers/mtd/spi-nor/swp.c | 11 +- drivers/net/amt.c | 6 +- drivers/net/bonding/bond_3ad.c | 27 +- drivers/net/bonding/bond_main.c | 1 + drivers/net/bonding/bond_netlink.c | 16 + drivers/net/bonding/bond_options.c | 27 + drivers/net/can/usb/esd_usb.c | 5 +- drivers/net/dsa/qca/qca8k-leds.c | 3 +- drivers/net/dsa/realtek/rtl8366rb-leds.c | 8 +- drivers/net/dsa/sja1105/sja1105_ptp.c | 2 +- drivers/net/ethernet/airoha/airoha_eth.c | 6 +- drivers/net/ethernet/airoha/airoha_ppe.c | 3 +- drivers/net/ethernet/airoha/airoha_ppe_debugfs.c | 2 - drivers/net/ethernet/amazon/ena/ena_netdev.c | 23 +- drivers/net/ethernet/broadcom/bnx2x/bnx2x_cmn.c | 3 +- drivers/net/ethernet/broadcom/bnxt/bnxt.c | 77 ++- drivers/net/ethernet/broadcom/bnxt/bnxt.h | 19 +- drivers/net/ethernet/broadcom/bnxt/bnxt_ethtool.c | 21 +- drivers/net/ethernet/broadcom/genet/bcmgenet.c | 23 +- drivers/net/ethernet/cadence/macb_main.c | 29 +- .../ethernet/cavium/liquidio/cn23xx_pf_device.c | 18 +- drivers/net/ethernet/chelsio/cxgb4/t4_hw.c | 8 - .../ethernet/chelsio/inline_crypto/chtls/chtls.h | 2 +- .../chelsio/inline_crypto/chtls/chtls_io.c | 8 +- .../net/ethernet/freescale/dpaa2/dpaa2-switch.c | 10 +- drivers/net/ethernet/freescale/enetc/enetc.c | 7 + drivers/net/ethernet/freescale/fman/fman.c | 4 +- drivers/net/ethernet/freescale/gianfar.c | 16 +- drivers/net/ethernet/google/gve/gve_rx_dqo.c | 28 +- drivers/net/ethernet/hisilicon/hns3/hns3_ethtool.c | 31 +- .../ethernet/hisilicon/hns3/hns3pf/hclge_main.c | 108 +++- .../ethernet/hisilicon/hns3/hns3pf/hclge_main.h | 1 + drivers/net/ethernet/ibm/emac/core.c | 13 +- drivers/net/ethernet/intel/i40e/i40e_debug.h | 2 +- drivers/net/ethernet/intel/ice/ice_common.c | 1 - drivers/net/ethernet/intel/ice/ice_dpll.c | 20 +- drivers/net/ethernet/intel/ice/ice_eswitch.c | 4 +- drivers/net/ethernet/intel/ice/ice_ethtool.c | 12 +- drivers/net/ethernet/intel/ice/ice_main.c | 16 +- drivers/net/ethernet/intel/ice/ice_vf_lib.c | 2 +- drivers/net/ethernet/intel/idpf/virtchnl2.h | 12 +- drivers/net/ethernet/intel/igc/igc_main.c | 2 +- drivers/net/ethernet/marvell/mvneta.c | 3 + drivers/net/ethernet/marvell/octeontx2/af/mcs.c | 6 +- .../ethernet/marvell/octeontx2/af/rvu_debugfs.c | 3 +- .../ethernet/marvell/octeontx2/af/rvu_devlink.c | 27 +- .../net/ethernet/marvell/octeontx2/af/rvu_nix.c | 15 +- .../net/ethernet/marvell/octeontx2/af/rvu_npc.c | 40 +- .../ethernet/marvell/octeontx2/nic/cn10k_macsec.c | 10 +- .../net/ethernet/marvell/octeontx2/nic/otx2_pf.c | 83 ++- .../net/ethernet/marvell/octeontx2/nic/otx2_vf.c | 22 +- .../net/ethernet/marvell/prestera/prestera_main.c | 2 +- drivers/net/ethernet/mediatek/mtk_ppe.c | 4 +- drivers/net/ethernet/mediatek/mtk_wed_debugfs.c | 6 +- drivers/net/ethernet/mediatek/mtk_wed_mcu.c | 8 +- drivers/net/ethernet/mellanox/mlx5/core/en.h | 12 + .../ethernet/mellanox/mlx5/core/en/hv_vhca_stats.c | 37 +- .../ethernet/mellanox/mlx5/core/en_accel/macsec.c | 47 +- drivers/net/ethernet/mellanox/mlx5/core/en_main.c | 14 +- drivers/net/ethernet/mellanox/mlx5/core/en_stats.c | 9 +- .../net/ethernet/mellanox/mlx5/core/ipoib/ipoib.c | 3 +- .../net/ethernet/mellanox/mlx5/core/lag/mpesw.c | 7 +- .../net/ethernet/mellanox/mlx5/core/lib/hv_vhca.c | 8 +- .../net/ethernet/mellanox/mlx5/core/lib/hv_vhca.h | 6 +- .../net/ethernet/mellanox/mlx5/core/lib/port_tun.c | 3 +- drivers/net/ethernet/mellanox/mlx5/core/lib/st.c | 1 + drivers/net/ethernet/mellanox/mlx5/core/main.c | 12 +- .../ethernet/mellanox/mlx5/core/steering/hws/bwc.c | 1 + drivers/net/ethernet/mellanox/mlxsw/spectrum.c | 2 +- .../net/ethernet/mellanox/mlxsw/spectrum_router.c | 1 + drivers/net/ethernet/meta/fbnic/fbnic_fw.c | 9 +- drivers/net/ethernet/meta/fbnic/fbnic_txrx.c | 11 +- drivers/net/ethernet/microchip/lan743x_main.c | 2 +- .../ethernet/microchip/lan966x/lan966x_vcap_impl.c | 5 +- .../ethernet/microchip/sparx5/sparx5_switchdev.c | 4 +- .../ethernet/microchip/sparx5/sparx5_vcap_impl.c | 5 +- drivers/net/ethernet/microchip/vcap/vcap_api.c | 72 ++- drivers/net/ethernet/microchip/vcap/vcap_api.h | 3 +- .../net/ethernet/microchip/vcap/vcap_api_debugfs.c | 8 +- .../microchip/vcap/vcap_api_debugfs_kunit.c | 3 +- .../net/ethernet/microchip/vcap/vcap_api_kunit.c | 3 +- .../net/ethernet/microchip/vcap/vcap_api_private.h | 3 + drivers/net/ethernet/microsoft/mana/gdma_main.c | 2 + drivers/net/ethernet/microsoft/mana/mana_en.c | 3 +- drivers/net/ethernet/oa_tc6.c | 14 +- .../net/ethernet/pensando/ionic/ionic_ethtool.c | 11 +- drivers/net/ethernet/qlogic/qede/qede_fp.c | 9 +- .../net/ethernet/qualcomm/rmnet/rmnet_handlers.c | 5 +- drivers/net/ethernet/qualcomm/rmnet/rmnet_map.h | 1 + .../net/ethernet/qualcomm/rmnet/rmnet_map_data.c | 78 +-- drivers/net/ethernet/sun/sungem.c | 13 +- drivers/net/ethernet/sunplus/spl2sw_phy.c | 6 +- drivers/net/ethernet/ti/icssg/icssg_common.c | 49 +- drivers/net/ethernet/wangxun/libwx/wx_lib.c | 1 + drivers/net/ethernet/wangxun/libwx/wx_type.h | 1 + drivers/net/ieee802154/ca8210.c | 9 +- drivers/net/macsec.c | 9 +- drivers/net/mdio/Kconfig | 3 +- drivers/net/ovpn/tcp.c | 2 +- drivers/net/pfcp.c | 1 + drivers/net/phy/realtek/realtek_main.c | 3 +- drivers/net/phy/sfp.c | 1 + drivers/net/pse-pd/pse_core.c | 6 +- drivers/net/thunderbolt/main.c | 8 +- drivers/net/usb/gl620a.c | 6 +- drivers/net/usb/lan78xx.c | 55 +- drivers/net/usb/net1080.c | 2 +- drivers/net/veth.c | 2 + drivers/net/virtio_net.c | 27 +- drivers/net/vxlan/vxlan_core.c | 8 +- drivers/net/wan/ixp4xx_hss.c | 4 +- drivers/net/wireless/ath/ath12k/dp_mon.c | 6 +- drivers/net/wireless/ath/ath12k/mac.c | 12 +- drivers/net/wireless/ath/ath9k/xmit.c | 5 + drivers/net/wireless/ath/wcn36xx/smd.c | 13 + .../broadcom/brcm80211/brcmfmac/cyw/core.c | 6 + drivers/net/wireless/marvell/libertas_tf/main.c | 2 +- drivers/net/wireless/marvell/mwifiex/cfg80211.c | 2 +- drivers/net/wireless/marvell/mwifiex/join.c | 1 - drivers/net/wireless/mediatek/mt76/channel.c | 2 +- drivers/net/wireless/mediatek/mt76/mac80211.c | 4 +- drivers/net/wireless/mediatek/mt76/mt7615/init.c | 1 - drivers/net/wireless/mediatek/mt76/mt7915/mac.c | 10 +- drivers/net/wireless/mediatek/mt76/mt7921/mac.c | 5 +- drivers/net/wireless/mediatek/mt76/mt7925/mac.c | 20 +- drivers/net/wireless/mediatek/mt76/mt7925/main.c | 4 +- drivers/net/wireless/mediatek/mt76/mt7925/pci.c | 4 +- .../net/wireless/mediatek/mt76/mt7925/testmode.c | 5 + drivers/net/wireless/mediatek/mt76/mt792x_core.c | 4 +- drivers/net/wireless/mediatek/mt76/mt7996/mac.c | 35 +- drivers/net/wireless/mediatek/mt76/mt7996/main.c | 9 +- drivers/net/wireless/mediatek/mt76/mt7996/mcu.c | 5 +- drivers/net/wireless/mediatek/mt76/mt7996/mt7996.h | 3 +- drivers/net/wireless/mediatek/mt76/tx.c | 2 +- drivers/net/wireless/ralink/rt2x00/rt2x00dev.c | 12 +- drivers/net/wireless/realtek/rtw88/pci.c | 13 +- drivers/net/wireless/realtek/rtw89/core.h | 3 + drivers/net/wireless/realtek/rtw89/fw.c | 2 +- drivers/net/wireless/realtek/rtw89/pci.c | 8 +- drivers/net/wwan/iosm/iosm_ipc_mux_codec.c | 40 +- drivers/net/wwan/t7xx/t7xx_hif_cldma.c | 3 + drivers/net/wwan/t7xx/t7xx_port_wwan.c | 2 + drivers/ntb/hw/epf/ntb_hw_epf.c | 81 ++- drivers/nvdimm/btt.c | 14 +- drivers/nvdimm/nd.h | 11 +- drivers/nvdimm/region_devs.c | 66 +-- drivers/nvme/host/apple.c | 12 +- drivers/nvme/host/core.c | 4 +- drivers/nvme/host/pci.c | 13 +- drivers/nvme/target/core.c | 2 +- drivers/nvme/target/fabrics-cmd-auth.c | 26 +- drivers/nvme/target/rdma.c | 18 +- drivers/nvme/target/tcp.c | 16 +- drivers/of/cpu.c | 2 +- drivers/of/dynamic.c | 1 - drivers/of/of_reserved_mem.c | 28 +- drivers/of/overlay.c | 15 + drivers/of/platform.c | 5 - drivers/opp/core.c | 5 +- drivers/pci/Makefile | 2 +- drivers/pci/controller/dwc/pci-imx6.c | 35 +- drivers/pci/controller/dwc/pci-meson.c | 13 +- .../pci/controller/dwc/pcie-designware-debugfs.c | 10 +- drivers/pci/controller/dwc/pcie-qcom.c | 1 + drivers/pci/controller/pci-loongson.c | 31 +- drivers/pci/controller/pcie-iproc-bcma.c | 2 +- drivers/pci/controller/pcie-iproc-platform.c | 2 +- drivers/pci/controller/pcie-iproc.c | 1 - drivers/pci/controller/pcie-iproc.h | 2 - drivers/pci/controller/pcie-mediatek.c | 21 +- drivers/pci/controller/pcie-rcar-host.c | 1 - drivers/pci/endpoint/functions/pci-epf-ntb.c | 21 +- drivers/pci/endpoint/functions/pci-epf-vntb.c | 9 +- drivers/pci/iov.c | 15 +- drivers/pci/msi/msi.c | 4 +- drivers/pci/pci-sysfs.c | 17 +- drivers/pci/pci.c | 148 ----- drivers/pci/pci.h | 10 +- drivers/pci/rebar.c | 237 ++++++++ drivers/pci/rom.c | 149 ++++- drivers/pci/setup-bus.c | 136 +++-- drivers/pci/setup-res.c | 78 --- drivers/phy/freescale/phy-fsl-imx8qm-lvds-phy.c | 24 +- drivers/phy/phy-can-transceiver.c | 3 + drivers/pinctrl/cirrus/pinctrl-cs42l43.c | 6 +- drivers/pinctrl/mediatek/mtk-eint.c | 6 +- drivers/pinctrl/mediatek/pinctrl-airoha.c | 575 ++++++++++--------- drivers/pinctrl/mediatek/pinctrl-mt8167.c | 2 +- drivers/pinctrl/mediatek/pinctrl-mt8516.c | 2 +- drivers/pinctrl/meson/pinctrl-amlogic-a4.c | 15 +- drivers/pinctrl/meson/pinctrl-meson.c | 2 +- drivers/pinctrl/nuvoton/pinctrl-ma35.c | 3 +- drivers/pinctrl/nuvoton/pinctrl-ma35d1.c | 470 +++++++++------- drivers/pinctrl/qcom/tlmm-test.c | 19 +- drivers/pinctrl/spacemit/pinctrl-k1.c | 2 +- drivers/pinctrl/sunxi/pinctrl-sun55i-a523-r.c | 1 - drivers/pinctrl/sunxi/pinctrl-sun55i-a523.c | 1 - drivers/pinctrl/sunxi/pinctrl-sunxi.c | 2 +- drivers/platform/x86/amd/pmc/pmc-quirks.c | 39 ++ drivers/platform/x86/amd/pmc/pmc.c | 83 ++- drivers/platform/x86/amd/pmc/pmc.h | 2 + drivers/platform/x86/dell/dell-laptop.c | 5 + drivers/platform/x86/intel/pmc/arl.c | 12 +- drivers/platform/x86/intel/pmc/core.c | 145 ++--- drivers/platform/x86/intel/pmc/core.h | 10 +- drivers/platform/x86/intel/pmc/lnl.c | 2 +- drivers/platform/x86/intel/pmc/mtl.c | 9 +- drivers/platform/x86/intel/pmc/ptl.c | 3 +- drivers/platform/x86/intel/pmc/ssram_telemetry.c | 2 +- drivers/platform/x86/intel/pmt/class.c | 8 +- drivers/platform/x86/intel/pmt/class.h | 5 +- drivers/platform/x86/intel/pmt/discovery.c | 4 +- drivers/platform/x86/intel/pmt/telemetry.c | 13 +- drivers/platform/x86/intel/pmt/telemetry.h | 12 +- drivers/platform/x86/intel/sdsi.c | 5 +- .../x86/intel/speed_select_if/isst_tpmi_core.c | 2 +- drivers/platform/x86/intel/vsec.c | 84 ++- drivers/platform/x86/intel/vsec_tpmi.c | 8 +- drivers/platform/x86/xo15-ebook.c | 7 +- drivers/pmdomain/imx/imx8m-blk-ctrl.c | 46 +- drivers/power/sequencing/core.c | 9 +- drivers/power/supply/bq257xx_charger.c | 7 +- drivers/power/supply/charger-manager.c | 6 +- drivers/power/supply/cpcap-battery.c | 11 +- drivers/power/supply/max17042_battery.c | 3 +- drivers/power/supply/power_supply_core.c | 11 +- drivers/pwm/pwm-imx27.c | 8 +- drivers/pwm/pwm-rzg2l-gpt.c | 8 +- drivers/rapidio/devices/tsi721.c | 3 +- drivers/regulator/core.c | 4 +- drivers/regulator/ltc3676.c | 10 +- drivers/remoteproc/qcom_common.c | 14 +- drivers/reset/reset-sunxi.c | 4 +- drivers/rpmsg/qcom_glink_native.c | 2 - drivers/rpmsg/rpmsg_core.c | 43 +- drivers/rpmsg/virtio_rpmsg_bus.c | 1 - drivers/rtc/rtc-abx80x.c | 3 +- drivers/rtc/rtc-cmos.c | 6 + drivers/rtc/rtc-ds1307.c | 30 +- drivers/rtc/rtc-isl1208.c | 15 +- drivers/rtc/rtc-mpfs.c | 2 +- drivers/rtc/rtc-msc313.c | 4 +- drivers/rtc/rtc-renesas-rtca3.c | 2 +- drivers/s390/char/monwriter.c | 3 + drivers/s390/crypto/pkey_api.c | 8 +- drivers/s390/crypto/pkey_pckmo.c | 4 + drivers/s390/crypto/zcrypt_cex2a.c | 0 drivers/s390/crypto/zcrypt_cex2a.h | 0 drivers/s390/crypto/zcrypt_cex2c.c | 0 drivers/s390/crypto/zcrypt_cex2c.h | 0 drivers/scsi/elx/efct/efct_hw.c | 2 + drivers/scsi/elx/efct/efct_unsol.c | 1 + drivers/scsi/hisi_sas/hisi_sas_v3_hw.c | 12 +- drivers/scsi/hpsa.c | 4 + drivers/scsi/lpfc/lpfc_init.c | 3 +- drivers/scsi/pm8001/pm8001_ctl.c | 5 +- drivers/scsi/scsi_scan.c | 2 +- drivers/scsi/scsi_transport_sas.c | 101 ++-- drivers/scsi/sg.c | 7 +- drivers/scsi/smartpqi/smartpqi_init.c | 2 +- drivers/soc/fsl/qe/qe.c | 3 + drivers/soc/mediatek/mt8167-mmsys.h | 11 +- drivers/soc/ti/k3-ringacc.c | 4 +- drivers/soc/xilinx/zynqmp_power.c | 4 +- drivers/soundwire/generic_bandwidth_allocation.c | 57 +- drivers/soundwire/intel_ace2x.c | 1 + drivers/soundwire/stream.c | 7 + drivers/spi/spi-atmel.c | 133 ++--- drivers/spi/spi-dw.h | 1 + drivers/spi/spi-ep93xx.c | 1 + drivers/spi/spi-hisi-kunpeng.c | 6 +- drivers/spi/spi-meson-spifc.c | 1 + drivers/spi/spi-rpc-if.c | 6 +- drivers/spi/spi-sh-msiof.c | 10 +- drivers/spi/spi-uniphier.c | 4 +- drivers/spi/spi-xilinx.c | 11 +- drivers/spi/spi.c | 5 - drivers/staging/gpib/cb7210/cb7210.c | 1 + drivers/staging/gpib/common/gpib_os.c | 4 +- drivers/staging/media/atomisp/i2c/atomisp-gc2235.c | 29 +- drivers/staging/media/atomisp/pci/atomisp_cmd.c | 6 +- drivers/staging/media/atomisp/pci/sh_css.c | 8 +- drivers/staging/media/sunxi/cedrus/cedrus.c | 4 +- drivers/staging/most/video/video.c | 7 +- drivers/staging/nvec/nvec.c | 4 +- drivers/staging/rtl8723bs/core/rtw_ieee80211.c | 93 +-- drivers/staging/rtl8723bs/core/rtw_security.c | 2 +- drivers/target/iscsi/iscsi_target_auth.c | 6 +- drivers/target/loopback/tcm_loop.c | 64 --- drivers/target/target_core_fabric_lib.c | 89 ++- drivers/target/target_core_internal.h | 3 +- drivers/target/target_core_pr.c | 12 +- drivers/thermal/intel/therm_throt.c | 7 +- drivers/thermal/testing/command.c | 48 +- drivers/thermal/testing/thermal_testing.h | 8 + drivers/thermal/testing/zone.c | 7 +- drivers/thermal/thermal_hwmon.c | 5 +- drivers/thunderbolt/debugfs.c | 8 +- drivers/tty/serial/8250/8250_omap.c | 3 +- drivers/tty/serial/max310x.c | 12 + drivers/tty/serial/msm_serial.c | 3 +- drivers/ufs/core/ufs_trace.h | 36 +- drivers/ufs/core/ufshcd.c | 2 +- drivers/usb/atm/ueagle-atm.c | 94 ++-- drivers/usb/dwc3/core.c | 20 + drivers/usb/dwc3/core.h | 4 + drivers/usb/dwc3/ulpi.c | 25 + drivers/usb/gadget/function/f_fs.c | 89 ++- drivers/usb/host/max3421-hcd.c | 8 + drivers/vdpa/octeon_ep/octep_vdpa_main.c | 20 +- drivers/vdpa/vdpa_user/vduse_dev.c | 72 ++- drivers/vfio/pci/mlx5/cmd.h | 15 +- drivers/vfio/pci/qat/main.c | 18 +- drivers/vhost/net.c | 15 +- drivers/vhost/vdpa.c | 29 +- drivers/vhost/vhost.c | 11 +- drivers/video/fbdev/aty/radeon_base.c | 1 + drivers/video/fbdev/broadsheetfb.c | 8 +- drivers/video/fbdev/carminefb.c | 1 + drivers/video/fbdev/core/fbcon.c | 10 +- drivers/video/fbdev/efifb.c | 1 + drivers/video/fbdev/hecubafb.c | 6 +- drivers/video/fbdev/i740fb.c | 1 + drivers/video/fbdev/metronomefb.c | 8 +- drivers/video/fbdev/nvidia/nvidia.c | 1 + drivers/video/fbdev/s3fb.c | 1 + drivers/video/fbdev/sm501fb.c | 16 +- drivers/video/fbdev/sm712.h | 2 +- drivers/video/fbdev/tdfxfb.c | 1 + drivers/video/fbdev/tridentfb.c | 1 + drivers/video/fbdev/uvesafb.c | 4 +- drivers/video/fbdev/vesafb.c | 1 + drivers/virtio/virtio_rtc_driver.c | 28 +- drivers/watchdog/sama5d4_wdt.c | 48 +- drivers/watchdog/sp5100_tco.c | 3 +- drivers/watchdog/sprd_wdt.c | 5 +- drivers/watchdog/watchdog_core.c | 3 + drivers/xen/gntdev.c | 8 +- drivers/xen/xen-scsiback.c | 30 +- fs/9p/vfs_inode.c | 28 +- fs/9p/vfs_inode_dotl.c | 4 +- fs/afs/callback.c | 7 +- fs/afs/cell.c | 27 +- fs/afs/cm_security.c | 3 +- fs/afs/cmservice.c | 7 +- fs/afs/dir.c | 40 +- fs/afs/dynroot.c | 2 +- fs/afs/fs_operation.c | 2 +- fs/afs/inode.c | 2 +- fs/afs/internal.h | 1 + fs/afs/rxrpc.c | 16 +- fs/afs/super.c | 5 +- fs/afs/vl_list.c | 10 +- fs/afs/volume.c | 2 +- fs/bpf_fs_kfuncs.c | 10 +- fs/btrfs/compression.c | 20 +- fs/btrfs/direct-io.c | 69 ++- fs/btrfs/extent-tree.c | 5 +- fs/btrfs/extent_io.c | 72 ++- fs/btrfs/inode.c | 14 +- fs/btrfs/ordered-data.c | 41 +- fs/btrfs/ordered-data.h | 8 +- fs/btrfs/reflink.c | 101 ++-- fs/btrfs/super.c | 4 +- fs/btrfs/zoned.c | 64 ++- fs/configfs/dir.c | 57 +- fs/dlm/midcomms.c | 4 +- fs/efs/file.c | 21 +- fs/eventpoll.c | 623 ++++++++++++++------- fs/exfat/dir.c | 49 +- fs/exfat/exfat_fs.h | 5 +- fs/exfat/namei.c | 89 ++- fs/ext2/file.c | 9 +- fs/ext4/ext4.h | 20 + fs/ext4/fast_commit.c | 50 +- fs/ext4/inode.c | 3 +- fs/ext4/ioctl.c | 12 +- fs/ext4/namei.c | 2 +- fs/fhandle.c | 2 +- fs/fs-writeback.c | 5 - fs/fuse/control.c | 7 +- fs/hfs/bfind.c | 2 +- fs/hfs/bnode.c | 54 +- fs/hfs/brec.c | 2 +- fs/hfs/btree.c | 2 +- fs/hfs/btree.h | 71 +-- fs/hfs/hfs_fs.h | 88 +-- fs/hfs/inode.c | 3 +- fs/hfsplus/bfind.c | 2 +- fs/hfsplus/bnode.c | 60 +- fs/hfsplus/brec.c | 2 +- fs/hfsplus/btree.c | 2 +- fs/hfsplus/hfsplus_fs.h | 40 +- fs/iomap/ioend.c | 8 +- fs/jbd2/journal.c | 2 + fs/kernfs/dir.c | 11 +- fs/libfs.c | 13 + fs/lockd/svcsubs.c | 4 +- fs/minix/minix.h | 2 +- fs/namei.c | 4 + fs/netfs/write_issue.c | 18 +- fs/nfs/callback_proc.c | 9 +- fs/nfs/delegation.c | 9 +- fs/nfs/filelayout/filelayout.c | 2 + fs/nfs/flexfilelayout/flexfilelayout.c | 29 + fs/nfs/flexfilelayout/flexfilelayout.h | 16 + fs/nfs/fs_context.c | 8 +- fs/nfs/internal.h | 12 +- fs/nfs/nfs4proc.c | 22 +- fs/nfs/pnfs.c | 4 +- fs/nfs/pnfs_nfs.c | 2 +- fs/nfs/read.c | 25 +- fs/nfs/write.c | 14 +- fs/nfsd/nfs4state.c | 16 +- fs/nilfs2/namei.c | 2 +- fs/nilfs2/super.c | 2 - fs/ntfs3/fslog.c | 147 ++++- fs/ntfs3/index.c | 45 +- fs/ntfs3/lznt.c | 2 +- fs/ntfs3/namei.c | 2 +- fs/ntfs3/ntfs_fs.h | 3 +- fs/ntfs3/run.c | 9 +- fs/ocfs2/alloc.c | 2 +- fs/ocfs2/aops.c | 13 +- fs/ocfs2/buffer_head_io.c | 7 +- fs/ocfs2/dlm/dlmdebug.c | 16 +- fs/ocfs2/dlmglue.c | 17 + fs/ocfs2/inode.c | 182 +++++- fs/ocfs2/journal.c | 13 +- fs/ocfs2/journal.h | 3 + fs/ocfs2/move_extents.c | 4 +- fs/ocfs2/ocfs2.h | 2 - fs/ocfs2/quota_local.c | 2 +- fs/ocfs2/stack_user.c | 10 +- fs/ocfs2/super.c | 2 - fs/ocfs2/sysfile.c | 9 +- fs/orangefs/dir.c | 7 +- fs/overlayfs/inode.c | 4 +- fs/proc/array.c | 15 +- fs/proc/base.c | 184 +++--- fs/proc/fd.c | 31 +- fs/proc/generic.c | 9 +- fs/proc/internal.h | 6 +- fs/proc/namespaces.c | 16 +- fs/proc/page.c | 2 +- fs/proc/proc_net.c | 2 +- fs/proc/task_mmu.c | 61 +- fs/resctrl/rdtgroup.c | 15 +- fs/smb/client/Makefile | 5 +- fs/smb/client/cifssmb.c | 5 +- fs/smb/client/connect.c | 3 + fs/smb/client/file.c | 1 + fs/smb/client/inode.c | 30 +- fs/smb/client/ioctl.c | 12 +- fs/smb/client/misc.c | 8 + fs/smb/client/{cifstransport.c => smb1transport.c} | 4 +- fs/smb/client/smb2ops.c | 38 +- fs/smb/server/Kconfig | 6 +- fs/smb/server/auth.c | 398 +++---------- fs/smb/server/auth.h | 10 +- fs/smb/server/connection.c | 101 +++- fs/smb/server/connection.h | 6 + fs/smb/server/crypto_ctx.c | 24 - fs/smb/server/crypto_ctx.h | 15 +- fs/smb/server/misc.c | 33 -- fs/smb/server/misc.h | 1 - fs/smb/server/oplock.c | 13 +- fs/smb/server/server.c | 16 +- fs/smb/server/smb2pdu.c | 78 ++- fs/smb/server/smb_common.h | 2 +- fs/smb/server/smbacl.c | 7 +- fs/smb/server/vfs.c | 60 +- fs/smb/server/vfs_cache.c | 114 +++- fs/smb/server/vfs_cache.h | 1 + fs/super.c | 11 +- fs/sysfs/file.c | 4 + fs/udf/super.c | 2 +- fs/xfs/libxfs/xfs_group.h | 9 + fs/xfs/libxfs/xfs_rtgroup.h | 8 + fs/xfs/xfs_iomap.c | 2 +- fs/xfs/xfs_rtalloc.c | 8 +- fs/xfs/xfs_zone_gc.c | 13 +- fs/xfs/xfs_zone_space_resv.c | 8 +- include/acpi/acpi_bus.h | 2 + include/asm-generic/bitops/lock.h | 22 +- include/dt-bindings/clock/qcom,x1e80100-camcc.h | 3 + include/dt-bindings/power/fsl,imx93-power.h | 1 + include/linux/amba/bus.h | 5 - include/linux/arm-smccc.h | 5 + include/linux/bpf-cgroup.h | 5 +- include/linux/bpf.h | 4 + include/linux/bpf_local_storage.h | 3 - include/linux/bpf_lsm.h | 10 + include/linux/cdx/cdx_bus.h | 4 - include/linux/device.h | 5 +- include/linux/dpll.h | 2 + include/linux/firmware.h | 10 + include/linux/fs.h | 3 + include/linux/fwnode.h | 1 + include/linux/host1x.h | 7 + include/linux/hyperv.h | 5 - include/linux/i3c/master.h | 25 +- include/linux/ieee80211-eht.h | 12 +- include/linux/inetdevice.h | 5 + include/linux/intel_vsec.h | 30 +- include/linux/iommu.h | 1 + include/linux/netdevice.h | 4 + include/linux/nfs_page.h | 1 + include/linux/nfs_xdr.h | 1 - include/linux/pci.h | 3 +- include/linux/platform_data/mipi-i3c-hci.h | 15 + include/linux/rpmsg.h | 4 - include/linux/seqlock.h | 110 ++++ include/linux/sunrpc/clnt.h | 1 + include/linux/sunrpc/xprt.h | 2 + include/linux/uaccess.h | 2 +- include/linux/vmalloc.h | 4 +- include/net/addrconf.h | 10 +- include/net/bluetooth/hci.h | 5 +- include/net/bluetooth/l2cap.h | 10 +- include/net/bond_options.h | 1 + include/net/bonding.h | 1 + include/net/fib_rules.h | 5 + include/net/gue.h | 2 +- include/net/inet_common.h | 3 +- include/net/ip.h | 2 +- include/net/ip_fib.h | 7 +- include/net/ip_vs.h | 3 +- include/net/ipv6.h | 6 +- include/net/netfilter/nf_conntrack_extend.h | 12 - include/net/netfilter/nf_flow_table.h | 6 + include/net/netfilter/nf_queue.h | 1 + include/net/netfilter/nft_meta.h | 2 + include/net/ping.h | 5 +- include/net/sctp/sctp.h | 3 +- include/net/sock.h | 2 +- include/net/tc_act/tc_pedit.h | 18 +- include/net/tcp.h | 11 +- include/net/xfrm.h | 15 +- include/rdma/ib_umem.h | 4 + include/rdma/rdma_vt.h | 20 - include/uapi/linux/bpf.h | 2 + include/uapi/linux/if_link.h | 1 + init/initramfs_test.c | 17 +- kernel/bpf/bpf_inode_storage.c | 9 + kernel/bpf/bpf_lru_list.c | 165 +++--- kernel/bpf/bpf_lru_list.h | 25 +- kernel/bpf/bpf_lsm.c | 23 + kernel/bpf/cgroup.c | 168 +++--- kernel/bpf/core.c | 2 +- kernel/bpf/devmap.c | 12 + kernel/bpf/hashtab.c | 21 +- kernel/bpf/helpers.c | 29 +- kernel/bpf/inode.c | 13 +- kernel/bpf/lpm_trie.c | 8 +- kernel/bpf/map_in_map.c | 5 +- kernel/bpf/map_iter.c | 4 + kernel/bpf/syscall.c | 23 +- kernel/bpf/verifier.c | 186 +++--- kernel/cgroup/cpuset.c | 7 +- kernel/cpu.c | 20 +- kernel/fork.c | 9 +- kernel/kcov.c | 4 +- kernel/locking/spinlock_rt.c | 27 +- kernel/sched/core.c | 1 + kernel/sched/cpufreq_schedutil.c | 1 + kernel/sched/debug.c | 3 + kernel/sched/fair.c | 23 +- kernel/taskstats.c | 62 +- kernel/time/alarmtimer.c | 2 - kernel/time/posix-cpu-timers.c | 2 +- kernel/time/tick-sched.c | 11 +- kernel/time/time.c | 2 +- kernel/trace/bpf_trace.c | 11 +- kernel/trace/fprobe.c | 10 + kernel/trace/ring_buffer.c | 3 +- kernel/trace/trace.c | 2 +- kernel/trace/trace_eprobe.c | 2 +- kernel/trace/trace_events_hist.c | 41 +- kernel/trace/trace_events_user.c | 43 +- kernel/trace/trace_osnoise.c | 4 +- kernel/trace/trace_probe.c | 174 +++++- kernel/trace/trace_probe.h | 7 +- kernel/workqueue.c | 2 +- lib/alloc_tag.c | 9 +- lib/locking-selftest.c | 7 +- lib/test_meminit.c | 2 +- lib/tests/kunit_iov_iter.c | 12 +- lib/vsprintf.c | 36 +- mm/compaction.c | 7 +- mm/damon/core.c | 53 +- mm/damon/sysfs-schemes.c | 17 +- mm/hugetlb.c | 7 +- mm/memory_hotplug.c | 2 +- mm/mm_init.c | 47 +- mm/numa_emulation.c | 17 +- net/9p/client.c | 2 + net/9p/trans_rdma.c | 19 +- net/atm/common.c | 2 + net/batman-adv/distributed-arp-table.c | 30 +- net/batman-adv/fragmentation.c | 8 +- net/batman-adv/gateway_client.c | 3 +- net/batman-adv/main.c | 13 +- net/batman-adv/mesh-interface.c | 17 +- net/batman-adv/mesh-interface.h | 2 + net/batman-adv/multicast_forw.c | 7 +- net/batman-adv/routing.c | 3 +- net/batman-adv/translation-table.c | 5 +- net/bluetooth/6lowpan.c | 56 +- net/bluetooth/eir.c | 8 +- net/bluetooth/hci_codec.c | 2 +- net/bluetooth/hci_core.c | 2 + net/bluetooth/hci_event.c | 7 + net/bluetooth/l2cap_core.c | 94 +++- net/bluetooth/l2cap_sock.c | 103 ++-- net/bluetooth/mgmt.c | 2 + net/bluetooth/msft.c | 2 +- net/bluetooth/sco.c | 77 ++- net/bluetooth/smp.c | 27 +- net/bridge/br_cfm.c | 6 + net/bridge/br_cfm_netlink.c | 4 +- net/bridge/br_if.c | 3 + net/bridge/br_stp.c | 3 +- net/bridge/netfilter/nft_meta_bridge.c | 23 +- net/can/bcm.c | 127 ++++- net/can/isotp.c | 298 +++++++--- net/core/dev.c | 3 +- net/core/fib_rules.c | 6 +- net/core/filter.c | 28 +- net/core/flow_dissector.c | 12 +- net/core/lwt_bpf.c | 12 + net/core/netdev-genl.c | 4 +- net/core/sock.c | 7 +- net/devlink/rate.c | 25 +- net/handshake/genl.c | 2 +- net/ieee802154/core.c | 49 +- net/ieee802154/header_ops.c | 9 +- net/ieee802154/ieee802154.h | 17 + net/ieee802154/netlink.c | 36 +- net/ieee802154/socket.c | 6 +- net/ife/ife.c | 2 +- net/ipv4/af_inet.c | 17 +- net/ipv4/igmp.c | 63 ++- net/ipv4/inet_connection_sock.c | 7 + net/ipv4/ip_sockglue.c | 4 +- net/ipv4/ip_vti.c | 3 + net/ipv4/ipip.c | 3 + net/ipv4/netfilter/nf_reject_ipv4.c | 2 +- net/ipv4/ping.c | 9 +- net/ipv4/raw.c | 6 +- net/ipv4/tcp.c | 5 +- net/ipv4/tcp_bpf.c | 17 +- net/ipv4/tcp_ipv4.c | 4 +- net/ipv4/tcp_output.c | 8 +- net/ipv4/udp.c | 9 +- net/ipv4/udp_bpf.c | 25 +- net/ipv4/udp_impl.h | 3 +- net/ipv4/udp_tunnel_nic.c | 2 +- net/ipv6/addrconf.c | 55 +- net/ipv6/af_inet6.c | 11 +- net/ipv6/datagram.c | 9 +- net/ipv6/ioam6_iptunnel.c | 8 +- net/ipv6/ip6_fib.c | 17 +- net/ipv6/ip6_gre.c | 6 + net/ipv6/ip6_tunnel.c | 3 + net/ipv6/ip6_vti.c | 3 + net/ipv6/mcast.c | 40 +- net/ipv6/ndisc.c | 8 +- net/ipv6/netfilter.c | 4 +- net/ipv6/netfilter/ip6t_ah.c | 5 + net/ipv6/netfilter/ip6t_hbh.c | 1 + net/ipv6/netfilter/ip6t_rt.c | 3 +- net/ipv6/netfilter/nf_conntrack_reasm.c | 3 +- net/ipv6/ping.c | 3 +- net/ipv6/raw.c | 8 +- net/ipv6/route.c | 9 +- net/ipv6/seg6.c | 3 + net/ipv6/sit.c | 3 + net/ipv6/udp.c | 10 +- net/ipv6/udp_impl.h | 3 +- net/kcm/kcmsock.c | 8 +- net/l2tp/l2tp_ip.c | 4 +- net/l2tp/l2tp_ip6.c | 6 +- net/llc/af_llc.c | 1 + net/llc/llc_conn.c | 1 - net/mac80211/main.c | 3 +- net/mac80211/tx.c | 17 +- net/mac802154/iface.c | 2 +- net/mac802154/scan.c | 1 + net/mptcp/protocol.c | 4 +- net/netfilter/Makefile | 1 + net/netfilter/ipset/ip_set_core.c | 4 +- net/netfilter/ipset/ip_set_hash_gen.h | 69 ++- net/netfilter/ipvs/ip_vs_app.c | 10 +- net/netfilter/ipvs/ip_vs_conn.c | 4 +- net/netfilter/ipvs/ip_vs_core.c | 36 +- net/netfilter/ipvs/ip_vs_proto_sctp.c | 18 +- net/netfilter/ipvs/ip_vs_proto_tcp.c | 11 +- net/netfilter/ipvs/ip_vs_proto_udp.c | 3 +- net/netfilter/ipvs/ip_vs_xmit.c | 6 +- net/netfilter/nf_conncount.c | 23 +- net/netfilter/nf_conntrack_core.c | 83 +-- net/netfilter/nf_conntrack_ecache.c | 2 +- net/netfilter/nf_conntrack_extend.c | 32 +- net/netfilter/nf_conntrack_irc.c | 6 +- net/netfilter/nf_conntrack_seqadj.c | 2 + net/netfilter/nf_flow_table_path.c | 276 +++++++++ net/netfilter/nf_nat_core.c | 10 + net/netfilter/nf_nat_sip.c | 11 + net/netfilter/nf_queue.c | 14 + net/netfilter/nf_synproxy_core.c | 40 +- net/netfilter/nf_tables_api.c | 3 + net/netfilter/nfnetlink_cthelper.c | 24 +- net/netfilter/nfnetlink_osf.c | 6 +- net/netfilter/nfnetlink_queue.c | 3 + net/netfilter/nft_compat.c | 24 +- net/netfilter/nft_flow_offload.c | 259 --------- net/netfilter/nft_lookup.c | 10 +- net/netfilter/nft_meta.c | 5 +- net/netfilter/nft_payload.c | 16 +- net/netfilter/nft_set_pipapo.c | 34 +- net/netfilter/nft_set_pipapo.h | 8 + net/netfilter/nft_set_rbtree.c | 8 +- net/netfilter/nft_synproxy.c | 9 +- net/netfilter/xt_cluster.c | 2 +- net/netfilter/xt_connmark.c | 14 +- net/netfilter/xt_nat.c | 9 + net/netfilter/xt_rateest.c | 2 +- net/netfilter/xt_u32.c | 12 +- net/openvswitch/conntrack.c | 2 +- net/openvswitch/flow_netlink.c | 201 +++++-- net/phonet/datagram.c | 4 +- net/phonet/pep.c | 2 +- net/psample/psample.c | 6 +- net/qrtr/af_qrtr.c | 2 +- net/rxrpc/ar-internal.h | 6 +- net/rxrpc/call_accept.c | 25 +- net/rxrpc/call_event.c | 5 +- net/rxrpc/call_object.c | 2 + net/rxrpc/conn_client.c | 2 +- net/rxrpc/conn_event.c | 9 +- net/rxrpc/input.c | 39 +- net/rxrpc/oob.c | 12 +- net/rxrpc/recvmsg.c | 23 +- net/rxrpc/rxgk.c | 3 +- net/rxrpc/sendmsg.c | 3 +- net/sched/act_api.c | 13 +- net/sched/act_bpf.c | 2 +- net/sched/act_ct.c | 13 +- net/sched/act_pedit.c | 13 +- net/sched/cls_api.c | 25 +- net/sched/cls_bpf.c | 10 +- net/sched/cls_flow.c | 12 +- net/sched/sch_cake.c | 5 +- net/sched/sch_codel.c | 48 +- net/sched/sch_drr.c | 8 +- net/sched/sch_dualpi2.c | 48 +- net/sched/sch_fq_codel.c | 41 +- net/sched/sch_generic.c | 41 +- net/sched/sch_hfsc.c | 24 +- net/sched/sch_hhf.c | 27 + net/sched/sch_htb.c | 14 +- net/sched/sch_multiq.c | 2 +- net/sched/sch_taprio.c | 2 +- net/sched/sch_teql.c | 126 +++-- net/sctp/diag.c | 67 ++- net/sctp/protocol.c | 3 +- net/sctp/sm_make_chunk.c | 15 +- net/sctp/sm_statefuns.c | 59 +- net/sctp/socket.c | 50 +- net/smc/smc_cdc.c | 15 +- net/sunrpc/clnt.c | 19 +- net/sunrpc/svc.c | 10 + net/sunrpc/svcsock.c | 10 + net/sunrpc/sysfs.c | 4 +- net/sunrpc/xdr.c | 14 +- net/sunrpc/xprt.c | 16 + net/sunrpc/xprtrdma/backchannel.c | 5 +- net/sunrpc/xprtrdma/frwr_ops.c | 2 +- net/sunrpc/xprtrdma/rpc_rdma.c | 171 ++++-- net/sunrpc/xprtrdma/transport.c | 85 ++- net/sunrpc/xprtrdma/verbs.c | 126 ++++- net/sunrpc/xprtrdma/xprt_rdma.h | 4 +- net/sunrpc/xprtsock.c | 16 +- net/tipc/bearer.c | 1 + net/tipc/core.c | 5 + net/tipc/discover.c | 14 +- net/tipc/name_distr.c | 13 +- net/tipc/netlink.c | 12 + net/tipc/socket.c | 9 +- net/tls/tls.h | 2 +- net/tls/tls_sw.c | 14 +- net/unix/af_unix.c | 39 +- net/unix/unix_bpf.c | 2 +- net/vmw_vsock/af_vsock.c | 4 +- net/vmw_vsock/vsock_bpf.c | 2 +- net/wireless/nl80211.c | 2 +- net/wireless/scan.c | 5 +- net/xfrm/espintcp.c | 36 +- net/xfrm/xfrm_interface_core.c | 3 + net/xfrm/xfrm_nat_keepalive.c | 15 +- net/xfrm/xfrm_policy.c | 27 +- net/xfrm/xfrm_state.c | 26 +- net/xfrm/xfrm_user.c | 20 +- rust/kernel/alloc/kvec.rs | 4 +- samples/damon/mtier.c | 2 + samples/trace_events/trace-events-sample.c | 4 + scripts/kconfig/conf.c | 6 +- security/apparmor/af_unix.c | 65 ++- security/apparmor/apparmorfs.c | 113 +++- security/apparmor/domain.c | 58 +- security/apparmor/file.c | 12 +- security/apparmor/include/apparmorfs.h | 12 + security/apparmor/label.c | 2 +- security/apparmor/net.c | 1 + security/apparmor/policy.c | 20 +- security/apparmor/policy_unpack.c | 6 +- security/apparmor/procattr.c | 2 + security/bpf/hooks.c | 3 + security/integrity/evm/evm_secfs.c | 16 +- security/keys/keyring.c | 2 +- security/landlock/fs.c | 14 + security/landlock/fs.h | 10 + security/landlock/net.c | 11 +- security/landlock/task.c | 11 + security/selinux/hooks.c | 80 ++- sound/core/init.c | 11 +- sound/core/seq/oss/seq_oss_event.c | 6 +- sound/core/seq/oss/seq_oss_event.h | 3 +- sound/core/seq/oss/seq_oss_ioctl.c | 5 +- sound/core/seq/oss/seq_oss_midi.c | 6 +- sound/core/seq/oss/seq_oss_midi.h | 2 +- sound/core/seq/oss/seq_oss_readq.c | 77 ++- sound/core/seq/oss/seq_oss_rw.c | 5 +- sound/core/seq/seq_clientmgr.c | 33 +- sound/core/seq/seq_fifo.c | 52 +- sound/core/seq/seq_memory.c | 2 +- sound/core/seq/seq_midi.c | 55 +- sound/drivers/aloop.c | 1 - sound/hda/codecs/conexant.c | 3 - sound/hda/codecs/realtek/alc269.c | 2 + sound/hda/codecs/side-codecs/tas2781_hda_i2c.c | 3 + sound/hda/codecs/side-codecs/tas2781_hda_spi.c | 3 + sound/hda/controllers/Kconfig | 2 +- sound/hda/core/regmap.c | 4 +- sound/soc/amd/acp/acp-sdw-legacy-mach.c | 7 +- sound/soc/amd/acp/acp-sdw-sof-mach.c | 7 +- sound/soc/codecs/adau1372.c | 5 + sound/soc/codecs/aw88261.c | 12 +- sound/soc/codecs/cs35l56-shared.c | 1 + sound/soc/codecs/cs35l56.c | 14 +- sound/soc/codecs/hdac_hdmi.c | 4 +- sound/soc/codecs/lpass-va-macro.c | 8 +- sound/soc/codecs/sma1307.c | 35 +- sound/soc/codecs/tlv320aic3x.c | 25 +- sound/soc/fsl/fsl_asrc_dma.c | 20 + sound/soc/fsl/fsl_audmix.c | 6 + sound/soc/mediatek/mt8183/mt8183-afe-pcm.c | 23 +- sound/soc/mediatek/mt8192/mt8192-afe-pcm.c | 21 +- sound/soc/qcom/qdsp6/q6apm.c | 8 + sound/soc/renesas/rcar/rsnd.h | 2 +- sound/soc/sof/intel/Kconfig | 4 +- sound/soc/sof/ipc3-control.c | 79 ++- sound/soc/sof/ipc4-control.c | 11 +- sound/soc/sof/topology.c | 5 +- sound/soc/tegra/tegra210_ahub.c | 4 +- sound/usb/fcp.c | 2 + sound/usb/midi2.c | 5 + sound/usb/mixer_scarlett2.c | 201 ++++++- sound/usb/qcom/mixer_usb_offload.c | 2 +- sound/usb/qcom/qc_audio_offload.c | 30 +- sound/xen/xen_snd_front_alsa.c | 17 +- sound/xen/xen_snd_front_evtchnl.c | 28 +- sound/xen/xen_snd_front_evtchnl.h | 6 +- tools/bpf/bpftool/cgroup.c | 14 +- tools/bpf/bpftool/gen.c | 2 +- tools/bpf/bpftool/net.c | 4 +- tools/include/linux/args.h | 4 + tools/include/nolibc/getopt.h | 2 +- tools/include/uapi/linux/bpf.h | 2 + tools/include/uapi/linux/if_link.h | 2 + tools/lib/api/fs/fs.c | 19 +- tools/lib/bpf/gen_loader.c | 81 ++- tools/lib/bpf/libbpf.c | 9 +- tools/lib/bpf/strset.c | 62 +- tools/lib/bpf/usdt.c | 16 +- tools/lib/symbol/kallsyms.c | 5 +- tools/perf/Documentation/perf-inject.txt | 5 + tools/perf/Makefile.config | 1 + tools/perf/arch/arm64/util/header.c | 1 - tools/perf/arch/common.c | 4 +- tools/perf/arch/powerpc/util/auxtrace.c | 6 + tools/perf/arch/x86/tests/amd-ibs-period.c | 2 +- tools/perf/arch/x86/tests/bp-modify.c | 30 +- tools/perf/bench/inject-buildid.c | 2 +- tools/perf/bench/uprobe.c | 2 +- tools/perf/builtin-annotate.c | 3 +- tools/perf/builtin-buildid-cache.c | 12 +- tools/perf/builtin-buildid-list.c | 4 +- tools/perf/builtin-c2c.c | 24 +- tools/perf/builtin-daemon.c | 8 +- tools/perf/builtin-diff.c | 15 +- tools/perf/builtin-inject.c | 157 +++++- tools/perf/builtin-list.c | 4 +- tools/perf/builtin-probe.c | 3 +- tools/perf/builtin-record.c | 25 +- tools/perf/builtin-report.c | 3 +- tools/perf/builtin-sched.c | 122 +++- tools/perf/builtin-stat.c | 59 +- tools/perf/builtin-trace.c | 28 +- tools/perf/jvmti/libjvmti.c | 2 +- tools/perf/perf.c | 18 +- tools/perf/tests/code-reading.c | 7 +- tools/perf/tests/pe-file-parsing.c | 4 +- tools/perf/tests/pmu-events.c | 24 +- tools/perf/tests/sdt.c | 2 +- tools/perf/ui/browser.c | 3 + tools/perf/ui/browsers/annotate.c | 5 +- tools/perf/util/bpf-event.c | 66 ++- tools/perf/util/bpf-event.h | 4 +- tools/perf/util/bpf-utils.c | 20 +- tools/perf/util/bpf_lock_contention.c | 2 +- tools/perf/util/build-id.c | 4 +- tools/perf/util/cap.c | 3 +- tools/perf/util/cpumap.c | 49 +- tools/perf/util/cs-etm-base.c | 4 +- tools/perf/util/cs-etm-decoder/cs-etm-decoder.c | 21 +- tools/perf/util/cs-etm.c | 283 ++++++---- tools/perf/util/cs-etm.h | 8 +- tools/perf/util/data.c | 29 +- tools/perf/util/debuginfo.c | 11 +- tools/perf/util/demangle-java.c | 2 +- tools/perf/util/disasm.c | 7 +- tools/perf/util/dso.c | 65 ++- tools/perf/util/dsos.c | 4 +- tools/perf/util/env.h | 14 + tools/perf/util/event.c | 15 +- tools/perf/util/evlist.c | 34 +- tools/perf/util/evsel.c | 17 +- tools/perf/util/header.c | 57 +- tools/perf/util/hist.c | 7 +- tools/perf/util/hwmon_pmu.c | 26 +- .../util/intel-pt-decoder/intel-pt-insn-decoder.c | 11 +- tools/perf/util/jitdump.c | 5 +- tools/perf/util/libbfd.c | 11 +- tools/perf/util/libbfd.h | 5 +- tools/perf/util/lzma.c | 6 +- tools/perf/util/machine.c | 10 +- tools/perf/util/metricgroup.c | 5 +- tools/perf/util/mmap.c | 18 +- tools/perf/util/pmu.c | 10 +- tools/perf/util/print-events.c | 13 +- tools/perf/util/session.c | 11 +- tools/perf/util/strlist.c | 37 +- tools/perf/util/strlist.h | 2 - tools/perf/util/svghelper.c | 10 +- tools/perf/util/symbol-elf.c | 91 ++- tools/perf/util/symbol-minimal.c | 29 +- tools/perf/util/symbol.c | 7 +- tools/perf/util/symbol.h | 2 +- tools/perf/util/synthetic-events.c | 2 +- tools/perf/util/thread.c | 5 + tools/perf/util/thread_map.c | 18 +- tools/perf/util/time-utils.c | 4 +- tools/perf/util/tp_pmu.c | 2 +- tools/perf/util/trace-event-info.c | 2 +- tools/perf/util/units.c | 2 +- tools/power/x86/intel-speed-select/isst-daemon.c | 9 +- tools/testing/cxl/test/cxl.c | 10 +- tools/testing/cxl/test/mem.c | 6 +- tools/testing/kunit/kunit_parser.py | 12 +- tools/testing/selftests/Makefile | 2 +- tools/testing/selftests/bpf/bpf_util.h | 45 +- tools/testing/selftests/bpf/cgroup_helpers.c | 2 +- .../selftests/bpf/prog_tests/bpf_attr_size.c | 69 +++ .../selftests/bpf/prog_tests/fill_link_info.c | 2 +- .../selftests/bpf/prog_tests/verifier_log.c | 1 + .../selftests/bpf/progs/bpf_iter_task_vmas.c | 2 +- .../testing/selftests/bpf/progs/cpumask_success.c | 2 +- .../testing/selftests/bpf/progs/test_tunnel_kern.c | 13 +- .../testing/selftests/bpf/progs/verifier_bounds.c | 14 +- .../selftests/bpf/progs/verifier_linked_scalars.c | 556 +++++++++++++++++- tools/testing/selftests/bpf/progs/xdp_flowtable.c | 7 +- tools/testing/selftests/bpf/vmtest.sh | 2 +- tools/testing/selftests/drivers/net/hw/tso.py | 16 +- .../ftrace/test.d/00basic/test_ownership.tc | 2 +- tools/testing/selftests/hid/Makefile | 2 +- tools/testing/selftests/hid/hid_bpf.c | 36 +- tools/testing/selftests/hid/progs/hid.c | 15 + .../selftests/landlock/scoped_signal_test.c | 237 +++++++- .../selftests/mm/charge_reserved_hugetlb.sh | 3 +- tools/testing/selftests/mm/compaction_test.c | 3 + tools/testing/selftests/mm/hmm-tests.c | 63 ++- tools/testing/selftests/mm/hugepage-mremap.c | 32 +- .../selftests/mm/hugetlb_reparenting_test.sh | 60 +- tools/testing/selftests/mm/pkey-arm64.h | 3 +- tools/testing/selftests/mm/split_huge_page_test.c | 27 +- tools/testing/selftests/mm/uffd-stress.c | 5 +- tools/testing/selftests/net/broadcast_ether_dst.sh | 2 +- tools/testing/selftests/net/lib.sh | 25 +- tools/testing/selftests/net/tcp_mmap.c | 4 + tools/testing/selftests/net/tls.c | 8 +- tools/testing/selftests/net/vlan_bridge_binding.sh | 2 +- tools/testing/selftests/rseq/Makefile | 6 +- tools/tracing/rtla/src/actions.c | 8 +- tools/tracing/rtla/src/actions.h | 5 + tools/virtio/vringh_test.c | 5 + virt/kvm/kvm_main.c | 16 +- 1515 files changed, 19622 insertions(+), 10344 deletions(-)

1 month, 2 weeks

[PATCH 7.1 0000/2077] 7.1.5-rc1 review

by Greg Kroah-Hartman

This is the start of the stable review cycle for the 7.1.5 release. There are 2077 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know. Responses should be made by Thu, 23 Jul 2026 15:23:00 +0000. Anything received after that time might be too late. The whole patch series can be found in one patch at: https://www.kernel.org/pub/linux/kernel/v7.x/stable-review/patch-7.1.5-rc1.… or in the git tree and branch at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-7.1.y and the diffstat can be found below. thanks, greg k-h ------------- Pseudo-Shortlog of commits: Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> Linux 7.1.5-rc1 Thomas Gleixner <tglx(a)kernel.org> posix-cpu-timers: Prevent UAF caused by non-leader exec() race Thomas Gleixner <tglx(a)kernel.org> posix-timers: Expand timer_[re]arm() callbacks with a boolean return value Dillon Varone <Dillon.Varone(a)amd.com> drm/amd/display: Fix Color Manager (3DLUT, Shaper, Blend) Christoph Hellwig <hch(a)lst.de> iomap: consolidate bio submission Namjae Jeon <linkinjeon(a)kernel.org> exfat: fix implicit declaration of brelse() Namjae Jeon <linkinjeon(a)kernel.org> exfat: add data_start_bytes and exfat_cluster_to_phys_bytes() helper Namjae Jeon <linkinjeon(a)kernel.org> exfat: add balloc parameter to exfat_map_cluster() for iomap support Namjae Jeon <linkinjeon(a)kernel.org> exfat: replace unsafe macros with static inline functions Eric Biggers <ebiggers(a)kernel.org> crypto: xilinx-trng - Remove crypto_rng interface Pratyush Yadav (Google) <pratyush(a)kernel.org> liveupdate: validate session type before performing operation Mauricio Faria de Oliveira <mfo(a)igalia.com> usb: atm: ueagle-atm: wait for pre-firmware load in .disconnect() Mauricio Faria de Oliveira <mfo(a)igalia.com> usb: atm: ueagle-atm: remove function entry/exit debug messages Mauricio Faria de Oliveira <mfo(a)igalia.com> usb: atm: ueagle-atm: use dev_dbg() for 'device found' message Christoph Hellwig <hch(a)lst.de> xfs: add newly added RTGs to the free pool in growfs Christoph Hellwig <hch(a)lst.de> xfs: factor out a xfs_zone_mark_free helper Namjae Jeon <linkinjeon(a)kernel.org> ksmbd: use opener credentials for FSCTL mutations ChenXiaoSong <chenxiaosong(a)kylinos.cn> smb: move compression definitions into common/fscc.h Davide Ornaghi <d.ornaghi97(a)gmail.com> ksmbd: fix path resolution in ksmbd_vfs_kern_path_create Siwei Zhang <oss(a)fourdim.xyz> Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_new_connection_cb() Pauli Virtanen <pav(a)iki.fi> Bluetooth: 6lowpan: fix cyclic locking warning on netdev unregister Chris Mason <clm(a)meta.com> binder: cache secctx size before release zeroes it Jisheng Zhang <jszhang(a)kernel.org> binder: Use LIST_HEAD() to initialize on stack list head Cássio Gabriel <cassiogabrielcontato(a)gmail.com> ALSA: hda/tas2781: Cancel async firmware request at unbind Cássio Gabriel <cassiogabrielcontato(a)gmail.com> firmware_loader: Add cancel helper for async requests Geoffrey D. Bennett <g(a)b4.vu> ALSA: scarlett2: Update offsets for 2i2 Gen 4 firmware 2417 Geoffrey D. Bennett <g(a)b4.vu> ALSA: scarlett2: Allow selecting config_set by firmware version Zhang Lixu <lixu.zhang(a)intel.com> iio: hid-sensor-rotation: Fix stale or zero output when reading raw values Keshav Verma <iganschel(a)gmail.com> f2fs: fix listxattr handling of corrupted xattr entries Chao Yu <chao(a)kernel.org> f2fs: fix potential deadlock in gc_merge path of f2fs_balance_fs() Ruipeng Qi <ruipengqi3(a)gmail.com> f2fs: fix potential deadlock in f2fs_balance_fs() Bartosz Golaszewski <bartosz.golaszewski(a)oss.qualcomm.com> device property: initialize the remaining fields of fwnode_handle in fwnode_init() Zenghui Yu <yuzenghui(a)huawei.com> samples/damon/mtier: fail early if address range parameters are invalid SeongJae Park <sj(a)kernel.org> mm/damon/core: trace esz at first setup Sun Jian <sun.jian.kdev(a)gmail.com> bpf: Reject negative const offsets for buffer pointers Luke Wang <ziniu.wang_1(a)nxp.com> mmc: sdhci-esdhc-imx: fix resume error handling Luke Wang <ziniu.wang_1(a)nxp.com> mmc: sdhci-esdhc-imx: make non-fatal errors non-blocking in suspend Luke Wang <ziniu.wang_1(a)nxp.com> mmc: sdhci-esdhc-imx: use pm_runtime_resume_and_get() in suspend Luke Wang <ziniu.wang_1(a)nxp.com> mmc: sdhci-esdhc-imx: disable irq during suspend to fix unhandled interrupt Luke Wang <ziniu.wang_1(a)nxp.com> mmc: sdhci-esdhc-imx: fix esdhc_change_pinstate() to allow default state restore Luke Wang <ziniu.wang_1(a)nxp.com> mmc: sdhci-esdhc-imx: restore DLL override for DDR modes on resume Luke Wang <ziniu.wang_1(a)nxp.com> mmc: sdhci-esdhc-imx: remove unnecessary mmc_card_wake_sdio_irq check for tuning save/restore Sergey Shtylyov <s.shtylyov(a)auroraos.dev> mmc: sdhci-of-dwcmshc: check bus clock enable result in the probe() method Lad Prabhakar <prabhakar.mahadev-lad.rj(a)bp.renesas.com> mmc: mmc_test: Fix __counted_by handling after kzalloc_flex() conversion Ao Sun <ao.sun(a)transsion.com> mmc: block: fix RPMB device unregister ordering Pengpeng Hou <pengpeng(a)iscas.ac.cn> mtd: rawnand: lpc32xx_slc: fail DMA transfer on completion timeout Pengpeng Hou <pengpeng(a)iscas.ac.cn> mtd: rawnand: lpc32xx_mlc: fail DMA transfers on timeout Pengpeng Hou <pengpeng(a)iscas.ac.cn> mtd: rawnand: fsl_ifc: return errors for failed page reads Runyu Xiao <runyu.xiao(a)seu.edu.cn> mmc: vub300: defer reset until cmd_mutex is unlocked Pengpeng Hou <pengpeng(a)iscas.ac.cn> mtd: mchp23k256: use SPI match data for chip caps Pengpeng Hou <pengpeng(a)iscas.ac.cn> mtd: onenand: samsung: report DMA completion timeouts Xu Rao <raoxu(a)uniontech.com> mtd: virt-concat: free duplicate generated name Rafael Beims <rafael.beims(a)toradex.com> wifi: mwifiex: fix permanently busy scans after multiple roam iterations Zhao Li <enderaoelyther(a)gmail.com> wifi: mac80211: validate extension-frame layout before RX Zhiling Zou <roxy520tt(a)gmail.com> wifi: mac80211: free ack status frame on TX header build failure Zhao Li <enderaoelyther(a)gmail.com> wifi: ieee80211: validate MLE common info length Haofeng Li <lihaofeng(a)kylinos.cn> wifi: cfg80211: validate EHT MLE before MLD ID read Ethan Nelson-Moore <enelsonmoore(a)gmail.com> powerpc/uaccess: correct check for CONFIG_PPC_E500 in mask_user_address() Junrui Luo <moonafterrain(a)outlook.com> powerpc/spufs: fix out-of-bounds access in spufs_mem_mmap_access() Zhao Dongdong <zhaodongdong(a)kylinos.cn> reset: sunxi: fix memory region leak on ioremap failure Robby Cai <robby.cai(a)nxp.com> reset: imx7: Correct polarity of MIPI CSI resets on i.MX8MQ Florian Westphal <fw(a)strlen.de> ipvs: reload ip header after head reallocation Julian Anastasov <ja(a)ssi.bg> ipvs: fix more places with wrong ipv6 transport offsets Maoyi Xie <maoyixie.tju(a)gmail.com> memstick: ms_block: reject a card that reports too many blocks James Raphael Tiovalen <jamestiotio(a)gmail.com> macsec: fix promiscuity refcount leak in macsec_dev_open() Xuanqiang Luo <luoxuanqiang(a)kylinos.cn> llc: fix SAP refcount leak when creating incoming sockets Eric Biggers <ebiggers(a)kernel.org> crypto: aes - Fix conditions for selecting MAC dependencies Laxman Acharya Padhya <acharyalaxman8848(a)gmail.com> Bluetooth: btrtl: validate firmware patch bounds Asim Viladi Oglu Manizada <manizada(a)pm.me> net: openvswitch: reject oversized nested action attrs Abhishek Ojha <Abhishek.ojha(a)savoirfairelinux.com> regulator: ltc3676: Fix incorrect IRQSTAT bit offsets Aurelien Jarno <aurelien(a)aurel32.net> arch/riscv: vdso: remove CFI landing pad from rt_sigreturn Thomas Weißschuh <thomas.weissschuh(a)linutronix.de> riscv: vdso: Do not use LTO for the vDSO Maoyi Xie <maoyixie.tju(a)gmail.com> wifi: brcmfmac: cyw: fix heap overflow on a short auth frame Dawei Feng <dawei.feng(a)seu.edu.cn> wifi: mac80211: fix memory leak in ieee80211_register_hw() Rafael Beims <rafael.beims(a)toradex.com> wifi: mwifiex: fix roaming to different channel in host_mlme mode Runyu Xiao <runyu.xiao(a)seu.edu.cn> wifi: rt2x00: avoid full teardown before work setup in probe Zhiping Zhang <zhipingz(a)meta.com> net/mlx5: free mlx5_st_idx_data on final dealloc Thorsten Blum <thorsten.blum(a)linux.dev> powerpc/pseries: fix memory leak on krealloc failure in papr_init Luke Wang <ziniu.wang_1(a)nxp.com> mmc: sdhci-esdhc-imx: restore pinctrl before restoring ios timing on resume Thomas Huth <thuth(a)redhat.com> selftests/landlock: Fix screwed up pointers in the scoped_signal_test Thomas Huth <thuth(a)redhat.com> selftests/landlock: Skip scoped_signal subtest with MSG_OOB if not available Peng Fan <peng.fan(a)nxp.com> pmdomain: imx: Fix i.MX8MP VC8000E power up sequence Peng Fan <peng.fan(a)nxp.com> pmdomain: imx: Fix i.MX8MP power notifier AngeloGioacchino Del Regno <angelogioacchino.delregno(a)collabora.com> pmdomain: mediatek: Fix possible nullptr KP in HWV cleanup/on-check Guoniu Zhou <guoniu.zhou(a)oss.nxp.com> pmdomain: imx93-blk-ctrl: Extract PHY as shared domain for DSI/CSI Farhad Alemi <farhad.alemi(a)berkeley.edu> cgroup/cpuset: rebind mm mempolicy to effective_mems, not mems_allowed Hui Wang <hui.wang(a)canonical.com> selftests/rseq: Fix a building error for riscv arch Gerald Schaefer <gerald.schaefer(a)linux.ibm.com> s390/mm: Fix type mismatch in get_align_mask(). Heiko Carstens <hca(a)linux.ibm.com> s390/diag: Add missing array_index_nospec() call to memtop_get_page_count() Crystal Wood <crwood(a)redhat.com> tracing/osnoise: Call synchronize_rcu() when unregistering Tao Liu <ltao(a)redhat.com> riscv: Prevent NULL pointer dereference in machine_kexec_prepare() Michael Bommarito <michael.bommarito(a)gmail.com> drbd: reject data replies with an out-of-range payload size TJ Adams <tadamsjr(a)google.com> ata: libata-core: Allow capacity transition to zero for locked drives TJ Adams <tadamsjr(a)google.com> ata: libata-core: Skip HPA resize for locked drives Reinette Chatre <reinette.chatre(a)intel.com> fs/resctrl: Fix double-add of pseudo-locked region's RMID to free list Tony Luck <tony.luck(a)intel.com> fs/resctrl: Free mon_data structures on rdt_get_tree() failure Jinjie Ruan <ruanjinjie(a)huawei.com> cpu/hotplug: Fix NULL kobject warning in cpuhp_smt_enable() Jinjie Ruan <ruanjinjie(a)huawei.com> arm64: smp: Fix hot-unplug tearing by forcing unregistration Zhu Lingshan <lingshan.zhu(a)amd.com> amdkfd: properly free secondary context id Théo Lebrun <theo.lebrun(a)bootlin.com> net: macb: drop in-flight Tx SKBs on close Dust Li <dust.li(a)linux.alibaba.com> dibs: loopback: validate offset and size in move_data() Daehyeon Ko <4ncienth(a)gmail.com> macsec: don't read an unset MAC header in macsec_encrypt() Yizhou Zhao <zhaoyz24(a)mails.tsinghua.edu.cn> ipvs: reset full ip_vs_seq structs in ip_vs_conn_new Yizhou Zhao <zhaoyz24(a)mails.tsinghua.edu.cn> ipvs: use parsed transport offset in SCTP state lookup Shuangpeng Bai <shuangpeng.kernel(a)gmail.com> llc: fix SAP refcount leak in llc_ui_autobind() Nirmoy Das <nirmoyd(a)nvidia.com> selftests: net: make busywait timeout clock portable Dawei Feng <dawei.feng(a)seu.edu.cn> octeontx2-pf: fix SQB pointer leak on init failure Yousef Alhouseen <alhouseenyousef(a)gmail.com> mac802154: remove interfaces with RCU list deletion Gerald Schaefer <gerald.schaefer(a)linux.ibm.com> s390/monwriter: Reject buffer reuse with different data length Haoxiang Li <haoxiang_li2024(a)163.com> irqchip/irq-riscv-imsic-early: Fix fwnode leak on state setup failure Zi Yan <ziy(a)nvidia.com> mm/compaction: handle free_pages_prepare() properly in compaction_free() Martin Kaiser <martin(a)kaiser.cx> riscv: probes: save original sp in rethook trampoline HyeongJun An <sammiee5311(a)gmail.com> hwmon: (asus_atk0110) Check package count before accessing element Haoxiang Li <haoxiang_li2024(a)163.com> net: ipa: fix SMEM state handle leaks in SMP2P init Maoyi Xie <maoyixie.tju(a)gmail.com> net: wwan: iosm: bound device offsets in the MUX downlink decoder Bryam Vargas <hexlabsecurity(a)proton.me> ata: libata-core: Reject an invalid concurrent positioning ranges count Wentao Liang <vulab(a)iscas.ac.cn> ata: pata_pxa: Fix DMA channel leak on probe error Bryam Vargas <hexlabsecurity(a)proton.me> ata: libata-core: Add NOLPM quirk for PNY CS900 1TB SSD Dawei Feng <dawei.feng(a)seu.edu.cn> net/mlx5: HWS, fix matcher leak on resize target setup failure Bryam Vargas <hexlabsecurity(a)proton.me> orangefs: keep the readdir entry size 64-bit in fill_from_part() Masami Hiramatsu (Google) <mhiramat(a)kernel.org> tracing/probes: Fix double addition of offset for @+FOFFSET Joshua Crofts <joshua.crofts1(a)gmail.com> hwmon: (max1619) add missing 'select REGMAP' to Kconfig David Lee <david.lee(a)trailofbits.com> fhandle: reject detached mounts in capable_wrt_mount() Bryam Vargas <hexlabsecurity(a)proton.me> net/sched: sch_taprio: Replace direct dequeue call with peek and qdisc_dequeue_peeked Bryam Vargas <hexlabsecurity(a)proton.me> net/sched: sch_multiq: Replace direct dequeue call with peek and qdisc_dequeue_peeked Andrea Righi <arighi(a)nvidia.com> net: lan743x: Initialize eth_syslock spinlock before use Haoxiang Li <haoxiang_li2024(a)163.com> fsl/fman: Free init resources on KeyGen failure in fman_init() Runyu Xiao <runyu.xiao(a)seu.edu.cn> hwmon: (occ) unregister sysfs devices outside occ lock Xu Rao <raoxu(a)uniontech.com> ACPI: TAD: Check AC wake capability before enabling wakeup Haoxiang Li <haoxiang_li2024(a)163.com> net: liquidio: fix BAR resource leak on PF number failure Pengpeng Hou <pengpeng(a)iscas.ac.cn> hwmon: (w83793) remove vrm sysfs file on probe failure Pengpeng Hou <pengpeng(a)iscas.ac.cn> hwmon: (w83627hf) remove VID sysfs files on error and remove Conor Dooley <conor.dooley(a)microchip.com> rtc: mpfs: fix counter upload completion condition Eric Biggers <ebiggers(a)kernel.org> fscrypt: Replace mk_users keyring with simple list Lad Prabhakar <prabhakar.mahadev-lad.rj(a)bp.renesas.com> rtc: renesas-rtca3: Fix PIE clear polling condition in alarm setup error path Abdun Nihaal <nihaal(a)cse.iitm.ac.in> bnx2x: fix potential memory leak in bnx2x_alloc_mem_bp() Wentao Liang <vulab(a)iscas.ac.cn> ipmi: fix refcount leak in i_ipmi_request() Sabrina Dubroca <sd(a)queasysnail.net> espintcp: use sk_msg_free_partial to fix partial send Matt Fleming <mfleming(a)cloudflare.com> ipmi: Fix user refcount underflow in event delivery Hongchen Zhang <zhanghongchen(a)loongson.cn> LoongArch: Fix missing dirty page tracking in {pte,pmd}_wrprotect() Xuewen Wang <wangxuewen(a)kylinos.cn> LoongArch: Fix nr passing in set_direct_map_valid_noflush() Biju Das <biju.das.jz(a)bp.renesas.com> pwm: rzg2l-gpt: Fix period_ticks type from u32 to u64 Thomas Weißschuh <thomas.weissschuh(a)linutronix.de> riscv: vdso: Always declare vdso_start symbols Marc Zyngier <maz(a)kernel.org> KVM: arm64: Fix propagation of TLBI level in kvm_pgtable_stage2_relax_perms() Pablo Neira Ayuso <pablo(a)netfilter.org> netfilter: nfnetlink_cthelper: cap to maximum number of expectation per master on updates Shuicheng Lin <shuicheng.lin(a)intel.com> drm/xe/userptr: Stub notifier_lock helpers when DRM_GPUSVM=n Rafael J. Wysocki <rafael.j.wysocki(a)intel.com> ACPICA: Define acpi_ut_safe_strncpy() as strscpy_pad() alias Jamal Hadi Salim <jhs(a)mojatatu.com> net/sched: sch_teql: move rcu_read_lock()/spin_lock() from _bh variants Daniel Gibson <daniel(a)gibson.sh> platform/x86/amd/pmc: Avoid logging "(null)" for DMI values Pablo Neira Ayuso <pablo(a)netfilter.org> netfilter: nfnetlink_cthelper: cap to maximum number of expectation per master Gil Portnoy <dddhkts1(a)gmail.com> ksmbd: fix stack buffer overflow in multichannel session-key copy Junrui Luo <moonafterrain(a)outlook.com> octeontx2-af: cn10k: restrict VF LMTLINE sharing to its own PF Ankit Garg <nktgrg(a)google.com> gve: fix header buffer corruption with header-split and HW-GRO Shitalkumar Gandhi <shital.gandhi45(a)gmail.com> ieee802154: ca8210: fix pointer truncation in kfifo on 64-bit Shitalkumar Gandhi <shital.gandhi45(a)gmail.com> ieee802154: ca8210: fix cas_ctl leak on spi_async failure Michael Bommarito <michael.bommarito(a)gmail.com> ieee802154: allow legacy LLSEC ADD/DEL ops to pass strict validation Michael Bommarito <michael.bommarito(a)gmail.com> ieee802154: admin-gate legacy LLSEC dump operations Haoxiang Li <haoxiang_li2024(a)163.com> octeontx2-af: Free BPID bitmap on setup failure Maoyi Xie <maoyixie.tju(a)gmail.com> net: ip6_tunnel: require CAP_NET_ADMIN in the device netns for changelink Maoyi Xie <maoyixie.tju(a)gmail.com> net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink Maoyi Xie <maoyixie.tju(a)gmail.com> net: ipip: require CAP_NET_ADMIN in the device netns for changelink Maoyi Xie <maoyixie.tju(a)gmail.com> net: ip_vti: require CAP_NET_ADMIN in the device netns for changelink Maoyi Xie <maoyixie.tju(a)gmail.com> net: ip6_vti: require CAP_NET_ADMIN in the device netns for changelink Dawei Feng <dawei.feng(a)seu.edu.cn> net: ena: clean up XDP TX queues when regular TX setup fails Ross Porter <ross.porter(a)canonical.com> selftests: net: fix file owner for broadcast_ether_dst test Zihan Xi <xizh2024(a)lzu.edu.cn> net/sched: act_ct: preserve tc_skb_cb across defragmentation Haoxiang Li <haoxiang_li2024(a)163.com> net: ixp4xx_hss: fix duplicate HDLC netdev allocation Haoxiang Li <haoxiang_li2024(a)163.com> net: wwan: t7xx: destroy DMA pool on CLDMA late init failure Philippe Schenker <philippe.schenker(a)impulsing.ch> net: ethernet: ti: icssg: guard PA stat lookups Maoyi Xie <maoyixie.tju(a)gmail.com> net: sit: require CAP_NET_ADMIN in the device netns for changelink Andreas Kemnade <andreas(a)kemnade.info> gpios: palmas: add .get_direction() op Sergio Paracuellos <sergio.paracuellos(a)gmail.com> gpio: mt7621: avoid corruption of shared interrupt trigger state Paul Louvel <paul.louvel(a)bootlin.com> gpio-f7188x: Add support for NCT6126D version B Sergio Paracuellos <sergio.paracuellos(a)gmail.com> gpio: mt7621: be sure IRQ domain is created before exposing GPIO chips Runyu Xiao <runyu.xiao(a)seu.edu.cn> gpio: tegra: do not call pinctrl for GPIO direction Sergio Paracuellos <sergio.paracuellos(a)gmail.com> gpio: mt7621: more robust management of IRQ domain teardown Dexuan Cui <decui(a)microsoft.com> net: mana: Sync page pool RX frags for CPU Dexuan Cui <decui(a)microsoft.com> net: mana: Validate the packet length reported by the NIC Bradley Morgan <include(a)grrlz.net> cpu: hotplug: Bound hotplug states sysfs output Bradley Morgan <include(a)grrlz.net> cpu: hotplug: Preserve per instance callback errors Cao Ruichuang <create0818(a)163.com> selftests/ftrace: Drop invalid top-level local in test_ownership Zhan Xusheng <zhanxusheng1024(a)gmail.com> posix-cpu-timers: Use u64 multiplication in update_rlimit_cpu() Thomas Gleixner <tglx(a)kernel.org> locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() Maoyi Xie <maoyixie.tju(a)gmail.com> wifi: libertas_tf: fix use-after-free in lbtf_free_adapter() Michael Bommarito <michael.bommarito(a)gmail.com> tracing/user_events: Fix use-after-free in user_event_mm_dup() Doruk Tan Ozturk <doruk(a)0sec.ai> net/mlx5e: macsec: fix use-after-free of metadata_dst on RX SC delete Guangshuo Li <lgs201920130244(a)gmail.com> mmc: vub300: fix use-after-free on probe failure Dmitry Torokhov <dmitry.torokhov(a)gmail.com> Input: ims-pcu - fix type confusion in CDC union descriptor parsing Dmitry Torokhov <dmitry.torokhov(a)gmail.com> Input: ims-pcu - fix race condition in reset_device sysfs callback Dmitry Torokhov <dmitry.torokhov(a)gmail.com> Input: ims-pcu - fix potential infinite loop in CDC union descriptor parsing Dmitry Torokhov <dmitry.torokhov(a)gmail.com> Input: ims-pcu - fix out-of-bounds read in ims_pcu_irq() debug logging Dmitry Torokhov <dmitry.torokhov(a)gmail.com> Input: ims-pcu - fix logic error in packet reset Dmitry Torokhov <dmitry.torokhov(a)gmail.com> Input: ims-pcu - fix firmware leak in async update Dmitry Torokhov <dmitry.torokhov(a)gmail.com> Input: ims-pcu - fix DMA mapping violation in line setup Dmitry Torokhov <dmitry.torokhov(a)gmail.com> Input: ims-pcu - add response length checks Dmitry Torokhov <dmitry.torokhov(a)gmail.com> Input: ims-pcu - validate control endpoint type Dmitry Torokhov <dmitry.torokhov(a)gmail.com> Input: ims-pcu - release data interface on disconnect Dmitry Torokhov <dmitry.torokhov(a)gmail.com> Input: ims-pcu - only expose sysfs attributes on control interface Dmitry Torokhov <dmitry.torokhov(a)gmail.com> Input: ims-pcu - fix use-after-free and double-free in disconnect Tony Luck <tony.luck(a)intel.com> fs/resctrl: Fix use-after-free during unmount Haoxiang Li <haoxiang_li2024(a)163.com> scsi: elx: efct: Fix I/O leak on unsupported additional CDB WenTao Liang <vulab(a)iscas.ac.cn> scsi: elx: efct: Fix refcount leak in efct_hw_io_abort() Bryam Vargas <hexlabsecurity(a)proton.me> scsi: target: core: Fix iSCSI ISID use-after-free in REGISTER AND MOVE Bryam Vargas <hexlabsecurity(a)proton.me> scsi: target: Bound PR-OUT TransportID parsing to the received buffer Michael Bommarito <michael.bommarito(a)gmail.com> scsi: xen: scsiback: Free unsubmitted command instead of double-putting it Michael Bommarito <michael.bommarito(a)gmail.com> scsi: xen: scsiback: Free the command tag on the TMR submit-failure path Xu Rao <raoxu(a)uniontech.com> scsi: sg: Report request-table problems when any status is set Abdun Nihaal <nihaal(a)cse.iitm.ac.in> scsi: lpfc: Fix memory leak in lpfc_sli4_driver_resource_setup() Haoxiang Li <haoxiang_li2024(a)163.com> scsi: hpsa: Fix DMA mapping leak on IOACCEL2 reset path Jhonraushan <raushan.jhon(a)gmail.com> accel/ivpu: Reject firmware log with size smaller than header Shuvam Pandey <shuvampandey1(a)gmail.com> accel/amdxdna: Use caller client for debug BO sync Doruk Tan Ozturk <doruk(a)0sec.ai> accel/amdxdna: reject user command submission without a command BO Doruk Tan Ozturk <doruk(a)0sec.ai> accel/amdxdna: reject command submission on devices without a submit op Wentao Liang <vulab(a)iscas.ac.cn> accel/amdxdna: Fix use-after-free in amdxdna_gem_dmabuf_mmap() Philipp Stanner <phasta(a)kernel.org> dma-buf: dma-fence: Fix potential NULL pointer dereference André Draszik <andre.draszik(a)linaro.org> dma-fence: use correct callback in dma_fence_timeline_name() Baineng Shou <shoubaineng(a)gmail.com> dma-fence: Make dma_fence_dedup_array() robust against 0-count input Mikulas Patocka <mpatocka(a)redhat.com> dm-verity: make error counter atomic Mikulas Patocka <mpatocka(a)redhat.com> dm-verity: increase sprintf buffer size Mikulas Patocka <mpatocka(a)redhat.com> dm-verity: fix a possible NULL pointer dereference Mikulas Patocka <mpatocka(a)redhat.com> dm-verity: avoid double increment of &use_bh_wq_enabled Mikulas Patocka <mpatocka(a)redhat.com> dm-verity: fix buffer overflow in FEC calculation Mikulas Patocka <mpatocka(a)redhat.com> dm-integrity: don't increment hash_offset twice Mikulas Patocka <mpatocka(a)redhat.com> dm-integrity: fix a bug if the bio is out of limits Mikulas Patocka <mpatocka(a)redhat.com> dm-integrity: fix leaking uninitialized kernel memory Mikulas Patocka <mpatocka(a)redhat.com> dm_early_create: fix freeing used table on dm_resume failure Ingo Blechschmidt <iblech(a)speicherleck.de> dm: avoid leaking the caller's thread keyring via the table device file Mikulas Patocka <mpatocka(a)redhat.com> dm-stats: fix merge accounting Mikulas Patocka <mpatocka(a)redhat.com> dm-stats: fix dm_jiffies_to_msec64 Samuel Moelius <sam.moelius(a)trailofbits.com> dm-pcache: reject option groups without values Benjamin Marzinski <bmarzins(a)redhat.com> dm-log: fix a bitset_size overflow on 32bit machines Mikulas Patocka <mpatocka(a)redhat.com> dm-ioctl: fix a possible overflow in list_version_get_info Mikulas Patocka <mpatocka(a)redhat.com> dm-bufio: fix wrong count calculation in dm_bufio_issue_discard Samuel Moelius <sam.moelius(a)trailofbits.com> dm era: fix out-of-bounds memory access for non-zero start sector Ming-Hung Tsai <mtsai(a)redhat.com> dm thin metadata: fix metadata snapshot consistency on commit failure Genjian Zhang <zhanggenjian(a)kylinos.cn> dm thin metadata: fix superblock refcount leak on snapshot shadow failure Haoxiang Li <haoxiang_li2024(a)163.com> net: sparx5: unregister blocking notifier on init failure Yitang Yang <yi1tang.yang(a)gmail.com> block: fix IORING_URING_CMD_REISSUE flags check in blkdev_uring_cmd Mike Waychison <mike(a)waychison.com> block: fix race in blk_time_get_ns() returning 0 Connor Williamson <connordw(a)amazon.com> block: remove redundant GD_NEED_PART_SCAN in add_disk_final() Sun Jian <sun.jian.kdev(a)gmail.com> selftests/bpf: Cover negative buffer pointer offsets Jiri Olsa <jolsa(a)kernel.org> bpf: Add missing access_ok call to copy_user_syms Jann Horn <jannh(a)google.com> bpf,fork: wipe ->bpf_storage before bailouts that access it Tristan Madani <tristan(a)talencesecurity.com> bpf: Reset register bounds before narrowing retval range in check_mem_access() Woraphat Khiaodaeng <worapat.kd2(a)gmail.com> io_uring/bpf-ops: reject re-registration of an already-bound ops Oliver Hartkopp <socketcan(a)hartkopp.net> can: bcm: add missing device refcount for CAN filter removal Oliver Hartkopp <socketcan(a)hartkopp.net> can: bcm: validate frame length in bcm_rx_setup() for RTR replies Oliver Hartkopp <socketcan(a)hartkopp.net> can: bcm: track a single source interface for ANYDEV timeout/throttle ops Oliver Hartkopp <socketcan(a)hartkopp.net> can: bcm: fix stale rx/tx ops after device removal Oliver Hartkopp <socketcan(a)hartkopp.net> can: bcm: fix data race on rx_stamp/rx_ifindex in bcm_rx_handler() Oliver Hartkopp <socketcan(a)hartkopp.net> can: bcm: fix CAN frame rx/tx statistics Oliver Hartkopp <socketcan(a)hartkopp.net> can: bcm: extend bcm_tx_lock usage for data and timer updates Oliver Hartkopp <socketcan(a)hartkopp.net> can: bcm: add missing rcu list annotations and operations Oliver Hartkopp <socketcan(a)hartkopp.net> can: bcm: add locking when updating filter and timer values Oliver Hartkopp <socketcan(a)hartkopp.net> can: bcm: fix lockless bound/ifindex race and silent RX_SETUP failure Lee Jones <lee(a)kernel.org> can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF Oliver Hartkopp <socketcan(a)hartkopp.net> can: isotp: serialize TX state transitions under so->rx_lock Oliver Hartkopp <socketcan(a)hartkopp.net> can: isotp: fix use-after-free race with concurrent NETDEV_UNREGISTER Oliver Hartkopp <socketcan(a)hartkopp.net> can: isotp: use unconditional synchronize_rcu() in isotp_release() Fan Wu <fanwu01(a)zju.edu.cn> can: esd_usb: kill anchored URBs before freeing netdevs Souvik Banerjee <souvik(a)amlalabs.com> ovl: use linked upper dentry in copy-up tmpfile Maoyi Xie <maoyixie.tju(a)gmail.com> netdev-genl: report NAPI thread PID in the caller's pid namespace Wentao Liang <vulab(a)iscas.ac.cn> nvmet: fix refcount leak in nvmet_sq_create() Bryam Vargas <hexlabsecurity(a)proton.me> nvmet-rdma: handle inline data with a nonzero offset Michael Bommarito <michael.bommarito(a)gmail.com> nvmet-auth: reject short AUTH_RECEIVE buffers Nick Chan <towinchenmi(a)gmail.com> nvme-apple: Prevent shared tags across queues on Apple A11 Benjamin Coddington <ben.coddington(a)hammerspace.com> NFS: Charge unstable writes by request size, not folio size Weiming Shi <bestswngs(a)gmail.com> sctp: validate STALE_COOKIE cause length before reading staleness Kunihiko Hayashi <hayashi.kunihiko(a)socionext.com> spi: uniphier: Fix completion initialization order before devm_request_irq() Javier Fernandez Pastrana <javier.pastrana(a)linutronix.de> spi: imx: reconfigure for PIO when DMA cannot be started Wang Yan <wangyan01(a)kylinos.cn> time: Fix off-by-one in compat settimeofday() usec validation Jaewon Yang <yong010301(a)gmail.com> tpm: Make the TPM character devices non-seekable Thorsten Blum <thorsten.blum(a)linux.dev> tpm: fix event_size output in tpm1_binary_bios_measurements_show Maoyi Xie <maoyixie.tju(a)gmail.com> xfrm: xfrm_interface: require CAP_NET_ADMIN in the device netns for changelink Sanman Pradhan <psanman(a)juniper.net> xfrm: use compat translator only for u64 alignment mismatch Qianyu Luo <qianyuluo3(a)gmail.com> xfrm: nat_keepalive: avoid double free on send error Wentao Liang <vulab(a)iscas.ac.cn> xen/gntdev: fix error handling in ioctl Steven Rostedt <rostedt(a)goodmis.org> ufs: core: tracing: Do not dereference pointers in TP_printk() Dmitry Safonov <0x7f454c46(a)gmail.com> tcp: Decrement tcp_md5_needed static branch Michael Bommarito <michael.bommarito(a)gmail.com> tcp: defer md5sig_info kfree past RCU grace period in tcp_connect Paul Greenwalt <paul.greenwalt(a)intel.com> ice: fix ice_init_link() error return preventing probe Pei Xiao <xiaopei01(a)kylinos.cn> i2c: spacemit: fix spurious IRQ handling returning IRQ_HANDLED Xuanqiang Luo <luoxuanqiang(a)kylinos.cn> i2c: mlxbf: Fix use-after-free in mlxbf_i2c_init_resource() Roman Vivchar <rva333(a)protonmail.com> i2c: mediatek: fix WRRD for SoCs without auto_restart option Vincent Jardin <vjardin(a)free.fr> i2c: imx: fix locked bus on SMBus block-read of 0 (IRQ) Vincent Jardin <vjardin(a)free.fr> i2c: imx: fix locked bus on SMBus block-read of 0 (atomic) Joshua Crofts <joshua.crofts1(a)gmail.com> hwmon: (max6697) add missing 'select REGMAP_I2C' to Kconfig Joshua Crofts <joshua.crofts1(a)gmail.com> hwmon: (ltc2992) add missing 'select REGMAP_I2C' to Kconfig Ibrahim Hashimov <security(a)auditcode.ai> ksmbd: fix integer overflow in set_file_allocation_info() Fredric Cover <fredric.cover.lkernel(a)gmail.com> smb: client: use kvzalloc() for megabyte buffer in simple fallocate Holger Dengler <dengler(a)linux.ibm.com> pkey: Move keytype check from pkey api to handler Daniel Gibson <daniel(a)gibson.sh> platform/x86/amd/pmc: Don't log during intermediate wakeups Daniel Gibson <daniel(a)gibson.sh> platform/x86/amd/pmc: Add delay_suspend module parameter Daniel Gibson <daniel(a)gibson.sh> platform/x86/amd/pmc: Delay suspend for some Lenovo Laptops Daniel Gibson <daniel(a)gibson.sh> platform/x86/amd/pmc: Check for intermediate wakeup in function Srinivas Pandruvada <srinivas.pandruvada(a)intel.com> platform/x86: ISST: Restore SST-PP control to all domains Krishna Chomal <krishna.chomal108(a)gmail.com> platform/x86: hp-wmi: Add support for Omen 16-ap0xxx (8E35) Krishna Chomal <krishna.chomal108(a)gmail.com> platform/x86: hp-wmi: Add support for Omen 16-ap0xxx (8D26) Haoxiang Li <lihaoxiang(a)isrc.iscas.ac.cn> platform/x86: dell-laptop: fix missing cleanups in init error path ZhaoJinming <zhaojinming(a)uniontech.com> platform/x86/intel/tpmi: use cleanup helpers in mem_write() Claudiu Beznea <claudiu.beznea.uj(a)bp.renesas.com> dmaengine: sh: rz-dmac: Move interrupt request after everything is set up Koichiro Den <den(a)valinux.co.jp> dmaengine: dw-edma-pcie: Reject devices without driver data Claudiu Beznea <claudiu.beznea.uj(a)bp.renesas.com> dmaengine: sh: rz-dmac: Fix incorrect NULL check for list_first_entry() Frank Li <Frank.Li(a)nxp.com> dmaengine: dw-edma: Add spinlock to protect DONE_INT_MASK and ABORT_INT_MASK Kartik Rajput <kkartik(a)nvidia.com> dmaengine: tegra: Fix burst size calculation Hongling Zeng <zenghongling(a)kylinos.cn> sunrpc: fix uninitialized xprt_create_args structure Michael Bommarito <michael.bommarito(a)gmail.com> tpm: tpm2-sessions: wait for async KPP completion in tpm_buf_append_salt Jarkko Sakkinen <jarkko(a)kernel.org> tpm: tpm_tis_spi: Use wait_woken() in wait_for_tmp_stat() Baoli Zhang <baoli.zhang(a)linux.intel.com> tpm: restore timeout for key creation commands Bhargav Joshi <j.bhargav.u(a)gmail.com> irqchip/crossbar: Use correct index in crossbar_domain_free() Yiyang Chen <cyyzero16(a)gmail.com> taskstats: retain dead thread stats in TGID queries Florian Fuchs <fuchsfl(a)gmail.com> mtd: maps: vmu-flash: fix NULL pointer dereference in initialization Stafford Horne <shorne(a)gmail.com> openrisc: Fix jump_label smp syncing Miquel Raynal <miquel.raynal(a)bootlin.com> mtd: rawnand: Pause continuous reads at block boundaries Takahiro Kuwano <takahiro.kuwano(a)infineon.com> mtd: spi-nor: spansion: use die erase for multi-die devices only Miquel Raynal <miquel.raynal(a)bootlin.com> mtd: spi-nor: swp: Improve locking user experience Holger Dengler <dengler(a)linux.ibm.com> s390/pkey: Check length in pkey_pckmo handler implementation Holger Dengler <dengler(a)linux.ibm.com> s390/pkey: Check length in PKEY_VERIFYPROTK ioctl Sebastian Alba Vives <sebasjosue84(a)gmail.com> fpga: microchip-spi: fix zero header_size OOB read in mpf_ops_parse_header() Maoyi Xie <maoyixie.tju(a)gmail.com> net: thunderbolt: Fix frags[] overflow by bounding frame_count Manivannan Sadhasivam <manivannan.sadhasivam(a)oss.qualcomm.com> bus: mhi: ep: Protect mhi_ep_handle_syserr() in the error path Manivannan Sadhasivam <manivannan.sadhasivam(a)oss.qualcomm.com> bus: mhi: host: pci_generic: Fix the physical function check Sebastian Alba Vives <sebasjosue84(a)gmail.com> fpga: dfl: add bounds check in dfh_get_param_size() Michael Bommarito <michael.bommarito(a)gmail.com> ocfs2: reject non-inline dinodes with i_size and zero i_clusters Michael Bommarito <michael.bommarito(a)gmail.com> ocfs2: reject dinodes whose i_rdev disagrees with the file type Michael Bommarito <michael.bommarito(a)gmail.com> ocfs2: reject dinodes with non-canonical i_mode type Joseph Qi <joseph.qi(a)linux.alibaba.com> ocfs2: add journal NULL check in ocfs2_checkpoint_inode() Ian Bridges <icb(a)fastmail.org> ocfs2: fix UBSAN array-index-out-of-bounds in ocfs2_sum_rightmost_rec Ian Bridges <icb(a)fastmail.org> ocfs2: fix NULL h_transaction deref in ocfs2_assure_trans_credits Kyle Zeng <kylebot(a)openai.com> ocfs2: avoid moving extents to occupied clusters Arseniy Krasnov <avkrasnov(a)rulkc.org> mtd: rawnand: fix condition in 'nand_select_target()' Vasiliy Kovalev <kovalev(a)altlinux.org> net/9p: fix infinite loop in p9_client_rpc on fatal signal Bastien Curutchet <bastien.curutchet(a)bootlin.com> mtd: rawnand: pl353: fix probe resource allocation Tristan Madani <tristan(a)talencesecurity.com> ocfs2: use kzalloc for quota recovery bitmap allocation Florian Fuchs <fuchsfl(a)gmail.com> mtd: maps: vmu-flash: fix fault in unaligned fixup Stafford Horne <shorne(a)gmail.com> openrisc: Add full instruction cache invalidate functions Ionut Nechita <ionut.nechita(a)windriver.com> scsi: sas: Skip opt_sectors when DMA reports no real optimization hint Pratyush Yadav (Google) <pratyush(a)kernel.org> kho: make sure scratch size is always aligned by CMA_MIN_ALIGNMENT_BYTES Martin Wilck <martin.wilck(a)suse.com> scsi: smartpqi: Use shost_to_hba() in pqi_scan_finished() Alexey Charkov <alchark(a)flipper.net> power: supply: bq257xx: Fix VSYSMIN clamping logic Breno Leitao <leitao(a)debian.org> 9p: skip nlink update in cacheless mode to fix WARN_ON Ruoyu Wang <ruoyuw560(a)gmail.com> mtd: slram: remove failed entries from the device list Karl Mehltretter <kmehltretter(a)gmail.com> kcov: use WRITE_ONCE() for selftest mode stores Muchun Song <muchun.song(a)linux.dev> mm/mm_init: fix uninitialized struct pages for ZONE_DEVICE Amit Machhiwal <amachhiw(a)linux.ibm.com> powerpc/dt_cpu_ftrs: Set CPU_FTR_P11_PVR for Power11 and later processors Jinjiang Tu <tujinjiang(a)huawei.com> fs/proc: fix KPF_KSM reported for all anonymous pages Krzysztof Wilczyński <kwilczynski(a)kernel.org> proc: only bump parent nlink when registering directories Dev Jain <dev.jain(a)arm.com> fs/proc/task_mmu: do not warn on seeing non-migration pmd entry Kiryl Shutsemau (Meta) <kas(a)kernel.org> fs/proc/task_mmu: use huge_page_size() in pagemap_scan_hugetlb_entry() Kiryl Shutsemau (Meta) <kas(a)kernel.org> fs/proc/task_mmu: fix hugetlb self-deadlock in pagemap_scan_pte_hole() Kiryl Shutsemau (Meta) <kas(a)kernel.org> fs/proc/task_mmu: fix make_uffd_wp_huge_pte() prot-update race SeongJae Park <sj(a)kernel.org> mm/damon/sysfs-schemes: put stats for scheme_add_dirs() internal error SeongJae Park <sj(a)kernel.org> mm/damon/sysfs-schemes: fix dir put orders in access_pattern_add_dirs() SeongJae Park <sj(a)kernel.org> mm/damon/core: always put unsuccessfully committed target pids Zishun Yi <vulab(a)iscas.ac.cn> riscv: cacheinfo: Fix node reference leak in populate_cache_leaves Kiryl Shutsemau (Meta) <kas(a)kernel.org> mm/huge_memory: preserve pmd_swp_uffd_wp on device-private PMD downgrade Aaron Tomlin <atomlin(a)atomlin.com> mips: sched: Fix CPUMASK_OFFSTACK memory corruption Bryam Vargas <hexlabsecurity(a)proton.me> selftests/landlock: Test SCOPE_SIGNAL on the SIGIO/fowner pgid path WenTao Liang <vulab(a)iscas.ac.cn> power: supply: charger-manager: fix refcount leak in is_full_charged() Bryam Vargas <hexlabsecurity(a)proton.me> landlock: Fix LANDLOCK_SCOPE_SIGNAL bypass on the SIGIO path Peiyang He <peiyang_he(a)smail.nju.edu.cn> ntfs: fix hole runlist memory leak in insert range error path Namjae Jeon <linkinjeon(a)kernel.org> ntfs: fix WARN_ON for resident attribute in ntfs_map_runlist_nolock() Namjae Jeon <linkinjeon(a)kernel.org> ntfs: make system files immutable to prevent corruption Hyunchul Lee <hyc.lee(a)gmail.com> ntfs: avoid self-deadlock during inode eviction Namjae Jeon <linkinjeon(a)kernel.org> ntfs: sanitize MFT references returned from ntfs_lookup_inode_by_name() Peiyang He <peiyang_he(a)smail.nju.edu.cn> ntfs: fail attrlist updates when the superblock is inactive Peiyang He <peiyang_he(a)smail.nju.edu.cn> ntfs: fix mrec_lock ABBA deadlock in rename Tristan Madani <tristan(a)talencesecurity.com> ntfs3: fix out-of-bounds read in decompress_lznt Michael Bommarito <michael.bommarito(a)gmail.com> ntfs3: validate split-point offset in indx_insert_into_buffer Michael Bommarito <michael.bommarito(a)gmail.com> ntfs3: bound to_move in indx_insert_into_root before hdr_insert_head Michael Bommarito <michael.bommarito(a)gmail.com> ntfs3: cap RESTART_TABLE free-chain walker at rt->used Michael Bommarito <michael.bommarito(a)gmail.com> fs/ntfs3: bound NTFS_DE view.data_off in UpdateRecordData{Root,Allocation} Michael Bommarito <michael.bommarito(a)gmail.com> fs/ntfs3: add depth limit to indx_find_buffer to prevent stack overflow Konstantin Komarov <almaz.alexandrovich(a)paragon-software.com> fs/ntfs3: validate lcns_follow in log_replay conversion Konstantin Komarov <almaz.alexandrovich(a)paragon-software.com> fs/ntfs3: bound attr_off in UpdateResidentValue against data_off Michael Bommarito <michael.bommarito(a)gmail.com> fs/ntfs3: bound copy_lcns dp->page_lcns[] index in analysis pass Konstantin Komarov <almaz.alexandrovich(a)paragon-software.com> fs/ntfs3: bound DeleteIndexEntryAllocation memmove length Zhan Xusheng <zhanxusheng1024(a)gmail.com> fs/ntfs3: fix syncing wrong inode on DIRSYNC cross-directory rename DaeMyung Kang <charsyam(a)gmail.com> ntfs: reject non-resident records for resident-only attributes DaeMyung Kang <charsyam(a)gmail.com> ntfs: validate resident index root values on lookup DaeMyung Kang <charsyam(a)gmail.com> ntfs: validate resident volume name values on lookup DaeMyung Kang <charsyam(a)gmail.com> ntfs: do not replace volume name after lookup errors Samuel Moelius <sam.moelius(a)trailofbits.com> ntfs: detect mapping-pairs LCN accumulator overflow Hyunchul Lee <hyc.lee(a)gmail.com> ntfs: validate index entries on reading DaeMyung Kang <charsyam(a)gmail.com> ntfs: avoid heap allocation for free-cluster readahead state DaeMyung Kang <charsyam(a)gmail.com> ntfs: only alias volume $UpCase to default on exact match DaeMyung Kang <charsyam(a)gmail.com> ntfs: reinit search context before volume information lookup Hyunchul Lee <hyc.lee(a)gmail.com> ntfs: skip extent mft records in writeback to prevent deadlock Hyunchul Lee <hyc.lee(a)gmail.com> ntfs: centalize $INDEX_ROOT header validation DaeMyung Kang <charsyam(a)gmail.com> ntfs: update index root allocated size before shrink DaeMyung Kang <charsyam(a)gmail.com> ntfs: free volume-wide resources on fill_super failure Hyunchul Lee <hyc.lee(a)gmail.com> ntfs: validate index block header more strictly Hyunchul Lee <hyc.lee(a)gmail.com> ntfs: not change 0-byte $DATA attribute to non-resident Hyunchul Lee <hyc.lee(a)gmail.com> ntfs: add bounds check before accessing EA entries DaeMyung Kang <charsyam(a)gmail.com> ntfs: validate attribute values on lookup Marco Crivellari <marco.crivellari(a)suse.com> ntfs: Add WQ_PERCPU to alloc_workqueue users Ron de Bruijn <rmbruijn(a)gmail.com> ntfs: fix off-by-one in mapping pairs decoding bounds checks Hyunchul Lee <hyc.lee(a)gmail.com> ntfs: fix incorrect size of symbolic link DaeMyung Kang <charsyam(a)gmail.com> ntfs: grow index root value before reparent header update SeongJae Park <sj(a)kernel.org> mm/damon/core: make charge_addr_from aware of end-address exclusivity Muchun Song <muchun.song(a)linux.dev> mm/memory_hotplug: fix incorrect altmap passing in error path Deepanshu Kartikey <kartikey406(a)gmail.com> mm/hugetlb: fix hugetlb cgroup rsvd charge/uncharge mismatch Johan Hovold <johan(a)kernel.org> power: supply: max17042: fix OF node reference imbalance Ma Ke <make24(a)iscas.ac.cn> power: supply: cpcap-battery: Fix missing nvmem_device_put() causing reference leak Muchun Song <muchun.song(a)linux.dev> mm/mm_init: fix pageblock migratetype for ZONE_DEVICE compound pages Maciej W. Rozycki <macro(a)orcam.me.uk> MIPS: DEC: Ensure 32-bit stack location for o32 prom_printf() Johan Hovold <johan(a)kernel.org> MIPS: ip22-gio: fix device reference leak in probe Johan Hovold <johan(a)kernel.org> MIPS: ip22-gio: fix kfree() of static object Johan Hovold <johan(a)kernel.org> MIPS: ip22-gio: fix gio device memory leak Muchun Song <muchun.song(a)linux.dev> mm/sparse-vmemmap: fix vmemmap accounting underflow Tanmay Shah <tanmay.shah(a)amd.com> remoteproc: xlnx: Check remote core state Wasim Nazir <wasim.nazir(a)oss.qualcomm.com> remoteproc: qcom: Fix leak when custom dump_segments addition fails Chuck Lever <chuck.lever(a)oracle.com> SUNRPC: Bound-check xdr_buf_to_bvec() stores before writing Chuck Lever <chuck.lever(a)oracle.com> lockd: Plug nlm_file refcount leak on cached nlm_do_fopen() failure Chuck Lever <chuck.lever(a)oracle.com> lockd: Plug nlm_file leak when nlm_do_fopen() fails Luxiao Xu <rakukuip(a)gmail.com> sunrpc: harden rq_procinfo lifecycle to prevent double-free Chuck Lever <chuck.lever(a)oracle.com> sunrpc: wait for in-flight TLS handshake callback when cancel loses race Chris Mason <clm(a)meta.com> sunrpc: pin svc_xprt across the asynchronous TLS handshake callback Claudiu Beznea <claudiu.beznea.uj(a)bp.renesas.com> pinctrl: renesas: rzg2l: Use -ENOTSUPP instead of -EOPNOTSUPP Abdun Nihaal <nihaal(a)cse.iitm.ac.in> nvdimm/btt: Free arena sub-allocations on discover_arenas() error path Abdun Nihaal <nihaal(a)cse.iitm.ac.in> nvdimm/btt: Free arenas on btt_init() error paths Junrui Luo <moonafterrain(a)outlook.com> jbd2: fix integer underflow in jbd2_journal_initialize_fast_commit() Terry Bowman <terry.bowman(a)amd.com> cxl: Fix CXL_HEADERLOG_SIZE to match RAS Capability size Duje Mihanović <duje(a)dujemihanovic.xyz> backlight: ktd2801: Enable BL_CORE_SUSPENDRESUME Bartosz Golaszewski <bartosz.golaszewski(a)oss.qualcomm.com> mfd: tps6586x: Fix OF node refcount Shyam Prasad N <sprasad(a)microsoft.com> cifs: invalidate cfid on unlink/rename/rmdir Sven Eckelmann <sven(a)narfation.org> batman-adv: tt: prevent TVLV OOB check overflow Sven Eckelmann <sven(a)narfation.org> batman-adv: mcast: avoid OOB read of num_dests header Sven Eckelmann <sven(a)narfation.org> batman-adv: frag: fix primary_if leak on failed linearization Sven Eckelmann <sven(a)narfation.org> batman-adv: clean untagged VLAN on netdev registration failure Sven Eckelmann <sven(a)narfation.org> batman-adv: frag: free unfragmentable packet Sven Eckelmann <sven(a)narfation.org> batman-adv: fix VLAN priority offset Sven Eckelmann <sven(a)narfation.org> batman-adv: tt: avoid request storms during pending request Sven Eckelmann <sven(a)narfation.org> batman-adv: dat: fix tie-break for candidate selection Sven Eckelmann <sven(a)narfation.org> batman-adv: ensure minimal ethernet header on TX Sven Eckelmann <sven(a)narfation.org> batman-adv: dat: ensure accessible eth_hdr proto field Sven Eckelmann <sven(a)narfation.org> batman-adv: bla: reacquire gw address after skb realloc Sven Eckelmann <sven(a)narfation.org> batman-adv: dat: acquire ARP hw source only after skb realloc Sven Eckelmann <sven(a)narfation.org> batman-adv: access unicast_ttvn skb->data only after skb realloc Sven Eckelmann <sven(a)narfation.org> batman-adv: retrieve ethhdr after potential skb realloc on RX Sven Eckelmann <sven(a)narfation.org> batman-adv: gw: acquire ethernet header only after skb realloc Sumanth Korikkar <sumanthk(a)linux.ibm.com> s390/perf_cpum_cf: Add missing array_index_nospec() to __hw_perf_event_init() Rafael J. Wysocki <rafael.j.wysocki(a)intel.com> cpufreq: intel_pstate: Set non-turbo capacity to HWP_GUARANTEED_PERF() Zhongqiu Han <zhongqiu.han(a)oss.qualcomm.com> cpufreq: schedutil: Fix uncleared need_freq_update on the .adjust_perf() path Sandipan Das <sandipan.das(a)amd.com> perf/x86/amd/lbr: Fix kernel address leakage Sandipan Das <sandipan.das(a)amd.com> perf/x86/amd/brs: Fix kernel address leakage Thorsten Blum <thorsten.blum(a)linux.dev> x86/boot: Reject too long acpi_rsdp= values Thorsten Blum <thorsten.blum(a)linux.dev> x86/boot: Validate console=uart8250 baud rate to fix early boot hang Tycho Andersen (AMD) <tycho(a)kernel.org> x86/virt/sev: Revert "Drop WBINVD before setting MSR_AMD64_SYSCFG_SNP_EN" Mario Limonciello <mario.limonciello(a)amd.com> x86/video: Only fall back to vga_default_device() without screen info Ali Ahmet MEMIS <dev(a)unknownbbqr.xyz> tools/power/x86/intel-speed-select: Harden daemon pidfile open Guangshuo Li <lgs201920130244(a)gmail.com> mfd: sm501: Fix reference leak on failed device registration Armin Wolf <W_Armin(a)gmx.de> leds: uleds: Fix potential buffer overread Ondrej Mosnacek <omosnace(a)redhat.com> selinux: fix incorrect execmem checks on overlayfs Tristan Madani <tristan(a)talencesecurity.com> selinux: avoid sk_socket dereference in selinux_sctp_bind_connect() Stephen Smalley <stephen.smalley.work(a)gmail.com> selinux: check connect-related permissions on TCP Fast Open Wang Jun <1742789905(a)qq.com> soc: fsl: qe: panic on ioremap() failure in qe_reset() Siddharth Vadapalli <s-vadapalli(a)ti.com> soc: ti: k3-ringacc: Fix access mode for k3_ringacc_ring_pop_tail_io/proxy Arunpravin Paneer Selvam <Arunpravin.PaneerSelvam(a)amd.com> gpu/buddy: bail out of try_harder when alignment cannot be honoured Guangshuo Li <lgs201920130244(a)gmail.com> gpu: host1x: Fix device reference leak in host1x_device_parse_dt() error path Eliot Courtney <ecourtney(a)nvidia.com> gpu: nova-core: simplify and_then with condition to filter Pablo Neira Ayuso <pablo(a)netfilter.org> netfilter: flowtable: use correct direction to set up tunnel route Xiang Mei (Microsoft) <xmei5(a)asu.edu> netfilter: bridge: fix stale prevhdr pointer in br_ip6_fragment() Wyatt Feng <bronzed_45_vested(a)icloud.com> netfilter: xt_nat: reject unsupported target families Yizhou Zhao <zhaoyz24(a)mails.tsinghua.edu.cn> netfilter: ecache: fix inverted time_after() check Florian Westphal <fw(a)strlen.de> netfilter: xt_physdev: masks are not c-strings Yizhou Zhao <zhaoyz24(a)mails.tsinghua.edu.cn> netfilter: nf_conncount: fix zone comparison in tuple dedup Pablo Neira Ayuso <pablo(a)netfilter.org> netfilter: flowtable: support IPIP tunnel with direct xmit Pablo Neira Ayuso <pablo(a)netfilter.org> netfilter: flowtable: use dst in this direction when pushing IPIP header Xiang Mei <xmei5(a)asu.edu> netfilter: nf_conntrack_reasm: guard mac_header adjustment after IPv6 defrag Florian Westphal <fw(a)strlen.de> netfilter: nf_nat_sip: reload possible stale data pointer Florian Westphal <fw(a)strlen.de> netfilter: nft_set_pipapo: don't leak bad clone into future transaction Pablo Neira Ayuso <pablo(a)netfilter.org> netfilter: nf_conntrack_sip: validate skb_dst() before accessing it Theodor Arsenij Larionov-Trichkine <theodorlarionov(a)gmail.com> netfilter: nft_fib: reject fib expression on the netdev egress hook Haoze Xie <royenheart(a)gmail.com> netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst Wyatt Feng <bronzed_45_vested(a)icloud.com> netfilter: xt_cluster: reject template conntracks in hash match David Carlier <devnexen(a)gmail.com> netfilter: nfnl_cthelper: apply per-class values when updating policies Muhammad Bilal <meatuni001(a)gmail.com> netfilter: nf_conntrack_irc: fix parse_dcc() off-by-one OOB read Srinivas Kandagatla <srinivas.kandagatla(a)oss.qualcomm.com> ASoC: qcom: q6apm: fix NULL pointer dereference in graph_callback Cássio Gabriel <cassiogabrielcontato(a)gmail.com> ASoC: mediatek: mt8183: Release reserved memory on cleanup Cássio Gabriel <cassiogabrielcontato(a)gmail.com> ASoC: mediatek: mt8183: Check runtime resume during probe Cássio Gabriel <cassiogabrielcontato(a)gmail.com> ASoC: mediatek: mt8192: Release reserved memory on cleanup Cássio Gabriel <cassiogabrielcontato(a)gmail.com> ASoC: mediatek: mt8192: Check runtime resume during probe Peter Ujfalusi <peter.ujfalusi(a)linux.intel.com> ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control Peter Ujfalusi <peter.ujfalusi(a)linux.intel.com> ASoC: SOF: ipc3-control: Fix heap overflow in bytes_ext put/get Zhao Dongdong <zhaodongdong(a)kylinos.cn> ASoC: SOF: topology: fix memory leak in snd_sof_load_topology Abdun Nihaal <nihaal(a)cse.iitm.ac.in> fbdev: tridentfb: fix potential memory leak in trident_pci_probe() Abdun Nihaal <nihaal(a)cse.iitm.ac.in> fbdev: nvidia: fix potential memory leak in nvidiafb_probe() Abdun Nihaal <nihaal(a)cse.iitm.ac.in> fbdev: vesafb: fix memory leak in vesafb_probe() Abdun Nihaal <nihaal(a)cse.iitm.ac.in> fbdev: carminefb: fix potential memory leak in alloc_carmine_fb() Abdun Nihaal <nihaal(a)cse.iitm.ac.in> fbdev: tdfxfb: fix potential memory leak in tdfxfb_probe() Abdun Nihaal <nihaal(a)cse.iitm.ac.in> fbdev: uvesafb: fix potential memory leak in uvesafb_probe() Abdun Nihaal <nihaal(a)cse.iitm.ac.in> fbdev: s3fb: fix potential memory leak in s3_pci_probe() Abdun Nihaal <nihaal(a)cse.iitm.ac.in> fbdev: i740fb: fix potential memory leak in i740fb_probe() Abdun Nihaal <nihaal(a)cse.iitm.ac.in> fbdev: radeon: fix potential memory leak in radeonfb_pci_register() Abdun Nihaal <nihaal(a)cse.iitm.ac.in> fbdev: efifb: fix memory leak in efifb_probe() Li RongQing <lirongqing(a)baidu.com> fbdev: sm712: Fix operator precedence in big_swap macro Abdun Nihaal <nihaal(a)cse.iitm.ac.in> fbdev: hecubafb: fix potential memory leak in hecubafb_probe() Abdun Nihaal <nihaal(a)cse.iitm.ac.in> fbdev: broadsheetfb: fix potential memory leak in broadsheetfb_probe() Abdun Nihaal <nihaal(a)cse.iitm.ac.in> fbdev: metronomefb: fix potential memory leak in metronomefb_probe() Oliver Upton <oupton(a)kernel.org> KVM: arm64: nv: Inject SEA if guest VNCR isn't normal memory Oliver Upton <oupton(a)kernel.org> KVM: arm64: nv: Re-translate VNCR before injecting abort Oliver Upton <oupton(a)kernel.org> KVM: arm64: nv: Inject SEA if kvm_translate_vncr() can't resolve PFN Oliver Upton <oupton(a)kernel.org> KVM: arm64: nv: Respect read-only PFN when mapping L1 VNCR Weiming Shi <bestswngs(a)gmail.com> KVM: arm64: nv: Fix SPSR_EL2 restore in kvm_hyp_handle_mops() Fuad Tabba <tabba(a)google.com> KVM: arm64: nv: Write ESR_EL2 for injected nested SError exceptions Oliver Upton <oupton(a)kernel.org> KVM: arm64: nv: Drop bogus WARN for write to ZCR_EL2 Oliver Upton <oupton(a)kernel.org> KVM: arm64: Ensure level is always initialized when relaxing perms Bradley Morgan <include(a)grrlz.net> KVM: arm64: account pKVM reclaim against the VM mm Marc Zyngier <maz(a)kernel.org> KVM: Move kvm_io_bus_get_dev() locking responsibilities to callers Sean Christopherson <seanjc(a)google.com> KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state leixiang <leixiang(a)kylinos.cn> KVM: x86: Nullify irqfd->producer if updating IRTE for bypass fails Sean Christopherson <seanjc(a)google.com> KVM: x86: Ignore pending PV EOI if the vCPU has since disabled PV EOIs Binbin Wu <binbin.wu(a)linux.intel.com> KVM: TDX: Reject concurrent change to CPUID entry count Atish Patra <atishp(a)meta.com> KVM: SEV: Do not allow intra-host migration/mirroring of SNP VMs Matthew Rosato <mjrosato(a)linux.ibm.com> KVM: s390: pci: Fix handling of AIF enable without AISB Sean Christopherson <seanjc(a)google.com> KVM: nVMX: Move vTPR vs. TPR Threshold consistency check into "normal" checks Marc Zyngier <maz(a)kernel.org> KVM: arm64: vgic: Handle race between interrupt affinity change and LPI disabling Hyunwoo Kim <imv4bel(a)gmail.com> KVM: arm64: vgic: Check the interrupt is still ours before migrating it Haoxiang Li <haoxiang_li2024(a)163.com> KVM: s390: pci: Fix GISC refcount leak on AIF enable failure Gautam Menghani <gautam(a)linux.ibm.com> powerpc/pseries/Kconfig: Enable CONFIG_VPA_PMU to be used with KVM Claudio Imbrenda <imbrenda(a)linux.ibm.com> KVM: s390: Fix unlikely race in try_get_locked_pte() Christian Borntraeger <borntraeger(a)linux.ibm.com> KVM: s390: Initialize KVM_S390_GET_CMMA_BITS memory Claudio Imbrenda <imbrenda(a)linux.ibm.com> KVM: s390: vsie: Use mmu cache to allocate rmap Claudio Imbrenda <imbrenda(a)linux.ibm.com> KVM: s390: Silence potential warnings in _gmap_crstep_xchg_atomic() Claudio Imbrenda <imbrenda(a)linux.ibm.com> KVM: s390: vsie: Add missing radix_tree_preload() in _gaccess_shadow_fault() Claudio Imbrenda <imbrenda(a)linux.ibm.com> KVM: s390: vsie: Fix allocation of struct vsie_rmap Qiang Ma <maqianga(a)uniontech.com> LoongArch: KVM: Return full old CSR value from kvm_emu_xchg_csr() Bibo Mao <maobibo(a)loongson.cn> LoongArch: KVM: Fix FPU register width with user access API Qiang Ma <maqianga(a)uniontech.com> LoongArch: KVM: Check the return values for put_user() Bibo Mao <maobibo(a)loongson.cn> LoongArch: KVM: Check irq validity in kvm_vcpu_ioctl_interrupt() Yanfei Xu <yanfei.xu(a)bytedance.com> LoongArch: KVM: Validate irqchip index in irqfd routing David Jander <david(a)protonic.nl> ARM: dts: stm32: stm32mp15x-mecio1-io: Move expander gpio-line-names to board files David Jander <david(a)protonic.nl> ARM: dts: stm32: stm32mp15x-mecio1-io: Fix expander gpio line typo David Jander <david(a)protonic.nl> ARM: dts: stm32: stm32mp15x-mecio1-io: Move gpio-line-names to board files Abel Vesa <abel.vesa(a)oss.qualcomm.com> arm64: dts: qcom: hamoa: Fix OPP tables for all DisplayPort controllers David Jander <david(a)protonic.nl> ARM: dts: stm32: stm32mp15x-mecio1-io: Fix GPIO names typo Krzysztof Kozlowski <krzysztof.kozlowski(a)oss.qualcomm.com> arm64: dts: imx8ulp-evk: Correct Type-C int GPIO flags David Jander <david(a)protonic.nl> ARM: dts: stm32: stm32mp15x-mecio1-io: Enable internal ADC reference Judith Mendez <jm(a)ti.com> arm64: dts: ti: k3-am62a7-sk: Add bootph-all tag to vqmmc David Jander <david(a)protonic.nl> ARM: dts: stm32: stm32mp15x-mecio1-io: Move divergent mecio1 ADC channels to board files David Jander <david(a)protonic.nl> ARM: dts: stm32: stm32mp15x-mecio1-io: Fix ADC sampling times Quentin Schulz <quentin.schulz(a)cherry.de> arm64: dts: rockchip: fix Ethernet PHY not found on PX30 Ringneck Nickolay Goppen <setotau(a)mainlining.org> arm64: dts: qcom: sdm630: describe adsp_mem region properly Hugo Villeneuve <hvilleneuve(a)dimonoff.com> ARM: dts: imx6ul-var-som: fix warning for non-existent dc-supply property Marek Vasut <marek.vasut+renesas(a)mailbox.org> arm64: dts: renesas: ironhide: Describe inline ECC carveouts Krzysztof Kozlowski <krzysztof.kozlowski(a)oss.qualcomm.com> arm64: dts: s32g3: Fix SWT8 watchdog address Mark Rutland <mark.rutland(a)arm.com> arm64: fpsimd: Fix type mismatch in sve_{save,load}_state() Yong Wang <edragain(a)163.com> net: ife: require ETH_HLEN to be pullable in ife_decode() Runyu Xiao <runyu.xiao(a)seu.edu.cn> octeontx2-vf: clear stale mailbox IRQ state before request_irq() Runyu Xiao <runyu.xiao(a)seu.edu.cn> octeontx2-pf: clear stale mailbox IRQ state before request_irq() Zhengchuan Liang <zcliangcn(a)gmail.com> net: atm: reject out-of-range traffic classes in QoS validation Michael Bommarito <michael.bommarito(a)gmail.com> net: qrtr: fix 32-bit integer overflow in qrtr_endpoint_post() Li Xiasong <lixiasong1(a)huawei.com> tipc: restrict socket queue dumps in enqueue tracepoints Cássio Gabriel <cassiogabrielcontato(a)gmail.com> ASoC: SOF: topology: validate vendor array size before parsing Peter Ujfalusi <peter.ujfalusi(a)linux.intel.com> ASoC: SOF: ipc3-control: Fix TOCTOU in bytes_put and bytes_get Peter Ujfalusi <peter.ujfalusi(a)linux.intel.com> ASoC: SOF: ipc3-control: Use overflow checks in control_update size calc Peter Ujfalusi <peter.ujfalusi(a)linux.intel.com> ASoC: SOF: ipc4-control: Validate notification payload size Peter Ujfalusi <peter.ujfalusi(a)linux.intel.com> ASoC: SOF: ipc4-control: Fix TOCTOU in sof_ipc4_bytes_put Jason Wang <jasowang(a)redhat.com> VDUSE: avoid leaking information to userspace Zhang Tianci <zhangtianci.1997(a)bytedance.com> vduse: Fix race in vduse_dev_msg_sync and vduse_dev_read_iter Wentao Liang <vulab(a)iscas.ac.cn> mlxsw: fix refcount leak in mlxsw_sp_vrs_lpm_tree_replace() Wentao Liang <vulab(a)iscas.ac.cn> mlxsw: fix refcount leak in mlxsw_sp_port_lag_join() Przemyslaw Korba <przemyslaw.korba(a)intel.com> idpf: add padding to PTP virtchnl structures Vincent Donnefort <vdonnefort(a)google.com> ring-buffer: Allow sparse CPU masks in ring_buffer_desc() Vincent Donnefort <vdonnefort(a)google.com> tracing/remotes: Fix struct_len in trace_remote_alloc_buffer() Vincent Donnefort <vdonnefort(a)google.com> tracing/remotes: Fix leak in trace_remote_alloc_buffer() error path Ben Dooks <ben.dooks(a)codethink.co.uk> drm/imagination: make pvr_fw_trace_init_mask_ops static Guangshuo Li <lgs201920130244(a)gmail.com> smb: client: fix overflow in passthrough ioctl bounds check Guangshuo Li <lgs201920130244(a)gmail.com> drm/xe: free madvise VMA array on L2 flush failure Anas Khan <anxkhn28(a)gmail.com> drm/xe: remove duplicate <kunit/test-bug.h> include Harman Kalra <hkalra(a)marvell.com> octeontx2-af: fix VF bringup affecting PF promiscuous state Gal Pressman <gal(a)nvidia.com> ethtool: rss: Fix hfunc and input_xfrm parsing on big endian Li RongQing <lirongqing(a)baidu.com> net/mlx5: Fix L3 tunnel entropy refcount leak Wang Yan <wangyan01(a)kylinos.cn> selftests/net: fix EVP_MD_CTX leak in tcp_mmap Thomas Zimmermann <tzimmermann(a)suse.de> drm/fb-helper: Only consider active CRTCs for vblank sync Timur Tabi <ttabi(a)nvidia.com> regulator: core: regulator_lock_two() should test for EDEADLK not EDEADLOCK Zizhi Wo <wozizhi(a)huawei.com> smb: client: fix busy dentry warning on unmount after DIO Cao Guanghui <caoguanghui(a)kylinos.cn> dm era: fix NULL pointer dereference in metadata_open() Chuck Lever <chuck.lever(a)oracle.com> SUNRPC: pin upper rpc_clnt across the TLS connect_worker Chuck Lever <chuck.lever(a)oracle.com> SUNRPC: release lower rpc_clnt if killed waiting for XPRT_LOCKED Guangshuo Li <lgs201920130244(a)gmail.com> cifs: validate DFS referral string offsets Rongguang Wei <weirongguang(a)kylinos.cn> s390/zcrypt: Remove the empty file Julian Anastasov <ja(a)ssi.bg> ipvs: ensure inner headers in ICMP errors are in headroom Yizhou Zhao <zhaoyz24(a)mails.tsinghua.edu.cn> ipvs: fix PMTU for GUE/GRE tunnel ICMP errors Yizhou Zhao <zhaoyz24(a)mails.tsinghua.edu.cn> ipvs: use parsed transport offset in TCP state lookup Yizhou Zhao <zhaoyz24(a)mails.tsinghua.edu.cn> ipvs: pass parsed transport offset to state handlers Tamaki Yanagawa <ty(a)000ty.net> netfilter: nft_lookup: fix catchall element handling with inverted lookups Eric Dumazet <edumazet(a)google.com> ipv4: igmp: Fix potential memory leaks in igmp_mod_timer() and igmp_stop_timer() Yuyang Huang <yuyanghuang(a)google.com> ipv4: igmp: annotate data-races around timer-related fields Yuyang Huang <sigefriedhyy(a)gmail.com> ipv4: igmp: annotate data-races around im->users Eric Dumazet <edumazet(a)google.com> ipv6: mcast: Fix potential UAF in MLD delayed work Eric Dumazet <edumazet(a)google.com> ipv4: igmp: Fix potential UAF in igmp_gq_start_timer() Rosen Penev <rosenp(a)gmail.com> gpio: mvebu: free generic chips on unbind Sandipan Das <sandipan.das(a)amd.com> perf/x86/amd/core: Avoid enabling BRS from the SVM reload path Suman Ghosh <sumang(a)marvell.com> octeontx2-pf: check DMAC extraction support before filtering Samuel Moelius <sam.moelius(a)trailofbits.com> net/sched: cake: reject overhead values that underflow length Rosen Penev <rosenp(a)gmail.com> net: mdio: select REGMAP_MMIO instead of depending on it Cihan Karadag <cihan.cihan(a)gmail.com> selftests: gpio: add gpio-cdev-uaf to .gitignore Maíra Canal <mcanal(a)igalia.com> drm/v3d: Reject invalid indirect BO handle in indirect CSD setup Lizhi Hou <lizhi.hou(a)amd.com> accel/amdxdna: Fix potential amdxdna_umap lifetime race Ben Dooks <ben.dooks(a)codethink.co.uk> tracing: Make tracepoint_printk static as not exported Robert Mader <robert.mader(a)collabora.com> drm: Guard DRM_CLIENT_CAP_PLANE_COLOR_PIPELINE Jia Wang <wangjia(a)ultrarisc.com> gpio: dwapb: Defer clock gating until noirq Enrico Pozzobon <enrico.pozzobon(a)dissecto.com> net: usb: lan78xx: disable VLAN filter in promiscuous mode Yuho Choi <dbgh9129(a)gmail.com> net/liquidio: drop cached VF pci_dev LUT Dong Yibo <dong100(a)mucse.com> net: rnpgbe: fix mailbox endianness and remove pointer casts Chuck Lever <chuck.lever(a)oracle.com> net/tls: Consume empty data records in tls_sw_read_sock() Lizhi Hou <lizhi.hou(a)amd.com> accel/amdxdna: Fix VMA access race Lizhi Hou <lizhi.hou(a)amd.com> accel/amdxdna: Use unsigned long for nr_pages in amdxdna_hmm_register() Lizhi Hou <lizhi.hou(a)amd.com> accel/amdxdna: Prevent PM resume deadlock in hwctx_sync_debug_bo() Hui Wang <hui.wang(a)canonical.com> ring-buffer: Fix event length with forced 8-byte alignment Stig Hornang <stig(a)hornang.me> Bluetooth: L2CAP: fix tx ident leak for commands without a response Weiming Shi <bestswngs(a)gmail.com> Bluetooth: bpa10x: avoid OOB read of revision string in bpa10x_setup() Pauli Virtanen <pav(a)iki.fi> Bluetooth: ISO: exclude RFU bits from ISO_SDU_Length Pauli Virtanen <pav(a)iki.fi> Bluetooth: ISO: fix malformed ISO_END/CONT handling Kiran K <kiran.k(a)intel.com> Bluetooth: btintel_pcie: Refactor FLR to use device_reprobe() Ravindra <ravindra(a)intel.com> Bluetooth: btintel_pcie: Separate coredump work from RX work Kiran K <kiran.k(a)intel.com> Bluetooth: btintel_pcie: Add support for smart trigger dump Chandrashekar Devegowda <chandrashekar.devegowda(a)intel.com> Bluetooth: btintel_pcie: Support Product level reset Sungwoo Kim <iam(a)sung-woo.kim> Bluetooth: sco: Fix a race condition in sco_sock_timeout() Cen Zhang <zzzccc427(a)gmail.com> Bluetooth: MGMT: Fix adv monitor add failure cleanup Cen Zhang <zzzccc427(a)gmail.com> Bluetooth: 6lowpan: hold L2CAP conn across debugfs control Cen Zhang <zzzccc427(a)gmail.com> Bluetooth: 6lowpan: avoid untracked enable work Suraj Kandpal <suraj.kandpal(a)intel.com> drm/i915/ltphy: Fix SSC Enablement bit in PORT_CLOCK_CTL Bartosz Golaszewski <bartosz.golaszewski(a)oss.qualcomm.com> gpio: shared: make the voting mechanism adaptable Steve French <stfrench(a)microsoft.com> smb: client: preserve leading slash for POSIX absolute symlink targets Namjae Jeon <linkinjeon(a)kernel.org> ksmbd: fix multichannel binding and enforce channel limit Eric Dumazet <edumazet(a)google.com> amt: fix size calculation in amt_get_size() Xiang Mei <xmei5(a)asu.edu> net/smc: fix UAF in smc_cdc_rx_handler() by pinning the socket Jamal Hadi Salim <jhs(a)mojatatu.com> net/sched: act_pedit: fix TOCTOU heap OOB write in tc offload Xiang Mei <xmei5(a)asu.edu> net: qualcomm: rmnet: validate MAP frame length before ingress parsing Shigeru Yoshida <syoshida(a)redhat.com> qede: fix off-by-one in BD ring consumption on build_skb failure Jens Emil Schulz Østergaard <jensemil.schulzostergaard(a)microchip.com> net: microchip: vcap: fix races on the shared Super VCAP block Feng Liu <feliu(a)nvidia.com> net/mlx5e: Fix publication race for priv->channel_stats[] Feng Liu <feliu(a)nvidia.com> net/mlx5e: Fix HV VHCA stats agent registration race Feng Liu <feliu(a)nvidia.com> net/mlx5e: Fix HV VHCA stats zero-sized buffer allocation Damon Ding <damon.ding(a)rock-chips.com> drm/bridge: analogix_dp: Fix PE/VS value shift mismatch during link training Shay Drory <shayd(a)nvidia.com> net/mlx5e: TC, skip peer flow cleanup when LAG seq is unavailable Shay Drory <shayd(a)nvidia.com> net/mlx5: LAG, MPESW, Fix missing complete() on devcom error Shay Drory <shayd(a)nvidia.com> net/mlx5: LAG, Fix off-by-one in single-FDB error rollback Shay Drory <shayd(a)nvidia.com> net/mlx5: LAG, extend shared FDB API with group_id filter Shay Drory <shayd(a)nvidia.com> net/mlx5: LAG, prepare for SD device integration Shay Drory <shayd(a)nvidia.com> net/mlx5: LAG, replace peer count check with direct peer lookup Shay Drory <shayd(a)nvidia.com> net/mlx5: LAG, factor out shared FDB code into dedicated file Mark Bloch <mbloch(a)nvidia.com> net/mlx5: Lag, avoid LAG and representor lock cycles Mark Bloch <mbloch(a)nvidia.com> net/mlx5: E-Switch, add representor lifecycle lock Mark Bloch <mbloch(a)nvidia.com> net/mlx5: Lag: refactor representor reload handling Mingyou Chen <qby140326(a)gmail.com> platform/x86: bitland-mifs-wmi: Fix NULL pointer dereference during suspend/resume Wyatt Feng <bronzed_45_vested(a)icloud.com> netfilter: xt_connmark: reject invalid shift parameters Pablo Neira Ayuso <pablo(a)netfilter.org> netfilter: nft_set_rbtree: get command skips end element with open interval Zhixing Chen <running910(a)gmail.com> netfilter: ip6tables: mark malformed IPv6 extension headers for hotdrop Feng Wu <wufengwufengwufeng(a)gmail.com> netfilter: xt_rateest: fix u64 truncation in xt_rateest_mt() Wyatt Feng <bronzed_45_vested(a)icloud.com> netfilter: xt_u32: reject invalid shift counts Qihang <q.h.hack.winter(a)gmail.com> gue: validate REMCSUM private option length Xiang Mei <xmei5(a)asu.edu> net: usb: net1080: validate packet_len before pad-byte access in rx_fixup Jia He <justin.he(a)arm.com> arm64/sysreg: Fix BWE field encoding in ID_AA64DFR2_EL1 Yiyang Chen <chenyy23(a)mails.tsinghua.edu.cn> selftests/hid: Cover hid_bpf_get_data() size overflow Yiyang Chen <chenyy23(a)mails.tsinghua.edu.cn> selftests/hid: Load only requested struct_ops maps Yiyang Chen <chenyy23(a)mails.tsinghua.edu.cn> HID: bpf: Fix hid_bpf_get_data() range check Cen Zhang <zzzccc427(a)gmail.com> ntfs: avoid stale runlist element dereference in fallocate Ariana Lazar <ariana.lazar(a)microchip.com> iio: dac: mcp47feb02: Fix passing uninitialized vref1_uV for no Vref1 case Anshuman Khandual <anshuman.khandual(a)arm.com> arm64/mm: Optimize TLB flush in unmap_hotplug_[pmd|pud]_range() Catalin Marinas <catalin.marinas(a)arm.com> arm64: Avoid eager DVMSync reclaim batches with C1-Pro SME erratum Lee Jones <lee(a)kernel.org> HID: core: Fix OOB read in hid_get_report for numbered reports Georgiy Osokin <g.osokin(a)auroraos.dev> HID: picolcd: prevent NULL pointer dereference in picolcd_send_and_wait() Cen Zhang <zzzccc427(a)gmail.com> ntfs: avoid stale runlist element dereference in MFT writeback David Howells <dhowells(a)redhat.com> netfs: Fix barriering when walking subrequest list Karuna Ramkumar <rkaruna(a)google.com> ata: libata-scsi: limit simulated SCSI command copy to response length Myeonghun Pak <mhun512(a)gmail.com> ata: sata_gemini: unwind clocks on IDE pinctrl errors David Howells <dhowells(a)redhat.com> cifs: Fix missing credit release on failure in cifs_issue_read() Jiri Olsa <jolsa(a)kernel.org> uprobes/x86: Use proper mm_struct in __in_uprobe_trampoline David Windsor <dwindsor(a)gmail.com> x86/uprobes: Keep shadow stack in sync for emulated CALLs Matthew Auld <matthew.auld(a)intel.com> drm/xe/pt: prevent invalid cursor access for purged BOs Matthew Auld <matthew.auld(a)intel.com> drm/xe: fix NPD in bo_meminfo() Michal Wajdeczko <michal.wajdeczko(a)intel.com> drm/xe/pf: Don't attempt to process FAST_REQ or EVENT relays Shuicheng Lin <shuicheng.lin(a)intel.com> drm/xe/hw_engine: Fix double-free of managed BO in error path Shuicheng Lin <shuicheng.lin(a)intel.com> drm/xe/userptr: Drop bogus static from finish in force_invalidate Shuicheng Lin <shuicheng.lin(a)intel.com> drm/xe/userptr: Hold notifier_lock for write on inject test path Brajesh Gupta <brajesh.gupta(a)imgtec.com> drm/imagination: Fix returned size for DRM_IOCTL_PVR_DEV_QUERY Francois Dugast <francois.dugast(a)intel.com> drm/xe/pt: Fix NULL pointer dereference in xe_pt_zap_ptes_entry() David Howells <dhowells(a)redhat.com> netfs: Fix folio state after ENOMEM whilst under writeback iteration David Howells <dhowells(a)redhat.com> netfs: Fix writeback error handling David Howells <dhowells(a)redhat.com> netfs: Fix writethrough to use collection offload David Howells <dhowells(a)redhat.com> cachefiles: Fix file burial to take lock when unsetting S_KERNEL_FILE David Howells <dhowells(a)redhat.com> netfs: Fix netfs_create_write_req() to handle async cache object creation Morduan Zang <zhangdandan(a)uniontech.com> iomap: guard io_size EOF trim against concurrent truncate underflow Amir Goldstein <amir73il(a)gmail.com> ovl: fix comment about locking order Hongling Zeng <zenghongling(a)kylinos.cn> cachefiles: Fix double unlock in nomem_d_alloc error path Michael Bommarito <michael.bommarito(a)gmail.com> minix: avoid overflow in bitmap block count calculation Fengnan Chang <changfengnan(a)bytedance.com> iomap: release pages on atomic dio size mismatch David Howells <dhowells(a)redhat.com> afs: Fix unchecked-length string display in debug statement David Howells <dhowells(a)redhat.com> afs: Fix the volume AFS_VOLUME_RM_TREE is set on David Howells <dhowells(a)redhat.com> afs: Fix premature cell exposure through /afs David Howells <dhowells(a)redhat.com> afs: Fix lack of locking around modifications of net->cells_dyn_ino David Howells <dhowells(a)redhat.com> afs: Fix vllist leak David Howells <dhowells(a)redhat.com> afs: Fix leak of ungot volume David Howells <dhowells(a)redhat.com> afs: Use scoped_seqlock_read() rather than manually doing seqlock stuff David Howells <dhowells(a)redhat.com> afs: Fix missing NULL pointer check in afs_break_some_callbacks() David Howells <dhowells(a)redhat.com> afs: Fix callback service message parsers to pass through -EAGAIN David Howells <dhowells(a)redhat.com> afs: Fix reinitialisation of the inode, in particular ->lock_work David Howells <dhowells(a)redhat.com> afs: Fix misplaced inc of net->cells_outstanding David Howells <dhowells(a)redhat.com> afs: Fix bulk lookup malfunction due to change in dir_emit() API Li RongQing <lirongqing(a)baidu.com> afs: Remove erroneous seq |= 1 in volume lookup loop Zilin Guan <zilin(a)seu.edu.cn> afs: use kvfree() to free memory allocated by kvcalloc() David Howells <dhowells(a)redhat.com> afs: Fix directory inode initialisation order David Howells <dhowells(a)redhat.com> afs: Remove setting of AS_RELEASE_ALWAYS for symlinks and mountpoints David Howells <dhowells(a)redhat.com> afs: Fix double netfs initialisation in afs_root_iget() Dan Carpenter <error27(a)gmail.com> afs: Fix error code in afs_extract_vl_addrs() Christian Brauner <brauner(a)kernel.org> fs: refuse O_TMPFILE creation with an unmapped fsuid or fsgid Samuel Moelius <sam.moelius(a)trailofbits.com> net/sched: hhf: clear heavy-hitter state on reset Samuel Moelius <sam.moelius(a)trailofbits.com> net/sched: dualpi2: clear stale classification on filter miss Michael Bommarito <michael.bommarito(a)gmail.com> xen/pvcalls: bound backend response req_id before indexing rsp[] Viacheslav Bocharov <v(a)baodeep.com> pinctrl: meson: restore non-sleeping GPIO access Vladimir Zapolskiy <vz(a)kernel.org> gpio: timberdale: Return -ENOMEM on dynamic memory allocation in probe Gil Portnoy <dddhkts1(a)gmail.com> ksmbd: fix use-after-free of fp->owner.name in durable handle owner check Haofeng Li <lihaofeng(a)kylinos.cn> ksmbd: reject undersized DACLs before parsing ACEs Sechang Lim <rhkrqnwk98(a)gmail.com> net/sched: act_bpf: use rcu_dereference_bh() to read the filter Jakub Kicinski <kuba(a)kernel.org> selftests: drv-net: tso: don't touch dangerous feature bits Gleb Markov <markov.gi(a)npc-ksb.ru> cxgb4: Fix decode strings dump for T6 adapters Longjun Tang <tanglongjun(a)kylinos.cn> virtio_net: disable cb when NAPI is busy-polled Xin Long <lucien.xin(a)gmail.com> sctp: fix addr_wq_timer race in sctp_free_addr_wq() Felix Gu <ustc.gu(a)gmail.com> spi: rzv2h-rspi: Fix DMA transfer error handling for signal interruption Qingshuang Fu <fuqingshuang(a)kylinos.cn> irqchip/ts4800: Fix missing chained handler cleanup on remove Yuho Choi <dbgh9129(a)gmail.com> irqchip/gic-v3-its: Fix OF node reference leak Masami Hiramatsu (Google) <mhiramat(a)kernel.org> tracing/probes: Make the $ prefix mandatory for comm access Sechang Lim <rhkrqnwk98(a)gmail.com> tracing/fprobe: Fix NULL pointer dereference in fprobe_fgraph_entry() Martin Kaiser <martin(a)kaiser.cx> tracing: eprobe: read the complete FILTER_PTR_STRING pointer Masami Hiramatsu (Google) <mhiramat(a)kernel.org> tracing/events: Fix to check the simple_tsk_fn creation Masami Hiramatsu (Google) <mhiramat(a)kernel.org> tracing/probes: Remove WARN_ON_ONCE from parse_btf_arg Steven Rostedt <rostedt(a)goodmis.org> tracing/eprobes: Allow use of BTF names to dereference pointers Boris Brezillon <boris.brezillon(a)collabora.com> drm/panthor: Interrupt group start/resumption if group_bind_locked() fails Boris Brezillon <boris.brezillon(a)collabora.com> drm/panthor: Fix a leak when a group is evicted before the tiler OOM is serviced Boris Brezillon <boris.brezillon(a)collabora.com> drm/panthor: Fix panthor_pwr_unplug() Boris Brezillon <boris.brezillon(a)collabora.com> drm/panthor: Don't overrule pending immediate ticks in sched_resume_tick() Boris Brezillon <boris.brezillon(a)collabora.com> drm/panthor: Fix theoretical IOMEM access in suspended state Karunika Choo <karunika.choo(a)arm.com> drm/panthor: Store IRQ register base iomem pointer in panthor_irq Karunika Choo <karunika.choo(a)arm.com> drm/panthor: Split register definitions by components Karunika Choo <karunika.choo(a)arm.com> drm/panthor: Pass an iomem pointer to GPU register access helpers Boris Brezillon <boris.brezillon(a)collabora.com> drm/panthor: Fix potential invalid pointer deref in group_process_tiler_oom() Boris Brezillon <boris.brezillon(a)collabora.com> drm/panthor: Keep the reset work disabled until everything is initialized Boris Brezillon <boris.brezillon(a)collabora.com> drm/panthor: Always use the IRQ-safe variant when acquiring the fence lock Viacheslav Bocharov <v(a)baodeep.com> gpio: shared-proxy: always serialize with a sleeping mutex Ido Schimmel <idosch(a)nvidia.com> bridge: stp: Fix a potential use-after-free when deleting a bridge Jamal Hadi Salim <jhs(a)mojatatu.com> net/sched: sch_teql: Introduce slaves_lock to avoid race condition and UAF Rosen Penev <rosenp(a)gmail.com> net: gianfar: dispose irq mappings on probe failure and device removal Jiawen Wu <jiawenwu(a)trustnetic.com> net: libwx: fix VMDQ mask for 1-queue mode Petr Wozniak <petr.wozniak(a)gmail.com> net: phy: sfp: free mii_bus in sfp_i2c_mdiobus_destroy Xiang Mei <xmei5(a)asu.edu> usbnet: gl620a: fix out-of-bounds read in genelink_rx_fixup() Pengfei Zhang <zhangfeionline(a)gmail.com> ipv6: fib6: fix NULL deref in fib6_walk_continue() on multi-batch dump Jakub Kicinski <kuba(a)kernel.org> eth: fbnic: don't cache shinfo across skb realloc Guenter Roeck <linux(a)roeck-us.net> hwmon: (aspeed-g6-pwm-tach) Guard fan RPM calculation against divide-by-zero Guenter Roeck <linux(a)roeck-us.net> hwmon: (pmbus) Fix passing events to regulator core Matti Vaittinen <mazziesaccount(a)gmail.com> hwmon: adm1275: Prevent reading uninitialized stack Lizhi Hou <lizhi.hou(a)amd.com> accel/amdxdna: Fix iommu domain lifetime race during device removal Abdurrahman Hussain <abdurrahman(a)nexthop.ai> hwmon: (pmbus/core) honor vrm_version in pmbus_data2reg_vid() Luca Weiss <luca.weiss(a)fairphone.com> ASoC: codecs: lpass-va-macro: Fix LPASS Codec Version for SC7280 Kyle Hendry <kylehendrydev(a)gmail.com> MIPS: mm: Add check for highmem before removing memory block Maciej W. Rozycki <macro(a)orcam.me.uk> MIPS: DEC: Ensure RTC platform device deregistration upon failure Xin Long <lucien.xin(a)gmail.com> sctp: add INIT verification after cookie unpacking Yousef Alhouseen <alhouseenyousef(a)gmail.com> sctp: fix SCTP_RESET_STREAMS stream list length limit Wei Fang <wei.fang(a)nxp.com> net: enetc: check the number of BDs needed for xdp_frame Matvey Kovalev <matvey.kovalev(a)ispras.ru> qede: fix out-of-bounds check for cqe->len_list[] Nuoqi Gui <gnq25(a)mails.tsinghua.edu.cn> seg6: validate SRH length before reading fixed fields Corey Leavitt <corey(a)leavitt.info> net: pse-pd: scope pse_control regulator handle to kref lifetime Pengpeng Hou <pengpeng(a)iscas.ac.cn> gpio: htc-egpio: use managed gpiochip registration Pengpeng Hou <pengpeng(a)iscas.ac.cn> gpio: mvebu: fail probe if gpiochip registration fails KaFai Wan <kafai.wan(a)linux.dev> bpf: Fix insn_aux_data leak on verifier err_free_env path Nuoqi Gui <gnq25(a)mails.tsinghua.edu.cn> bpf: Mask pseudo pointer values in verifier logs Samuel Holland <samuel.holland(a)sifive.com> riscv: Fix 32-bit call_on_irq_stack() frame pointer ABI Yicong Yang <yang.yicong(a)picoheart.com> ACPI: RIMT: Only defer the IOMMU configuration in init stage Pengpeng Hou <pengpeng(a)iscas.ac.cn> spi: sh-msiof: abort transfers when reset times out Martin Kaiser <martin(a)kaiser.cx> tracing: probes: fix typo in a log message Jiaming Zhang <r772577952(a)gmail.com> ALSA: FCP: Fix NULL pointer dereference in interface lookup Shuaisong Yang <yangshuaisong(a)h-partners.com> net: hns3: differentiate autoneg default values between copper and fiber Shuaisong Yang <yangshuaisong(a)h-partners.com> net: hns3: fix permanent link down deadlock after reset Shuaisong Yang <yangshuaisong(a)h-partners.com> net: hns3: refactor MAC autoneg and speed configuration Shuaisong Yang <yangshuaisong(a)h-partners.com> net: hns3: unify copper port ksettings configuration path Nirmoy Das <nirmoyd(a)nvidia.com> selftests: tls: size splice_short pipe by page size Eric Dumazet <edumazet(a)google.com> tipc: avoid busy looping in tipc_exit_net() Eric Dumazet <edumazet(a)google.com> tipc: fix UAF in cleanup_bearer() due to premature dst_cache_destroy() Kuniyuki Iwashima <kuniyu(a)google.com> tipc: Store struct sock in struct udp_bearer. Kuniyuki Iwashima <kuniyu(a)google.com> udp_tunnel: Pass struct sock to setup_udp_tunnel_sock(). Kuniyuki Iwashima <kuniyu(a)google.com> udp_tunnel: Pass struct sock to udp_tunnel_sock_release(). Wei Fang <wei.fang(a)nxp.com> net: enetc: fix potential divide-by-zero when num_vsi is zero Rob Herring (Arm) <robh(a)kernel.org> dt-bindings: net: renesas,ether: Drop example "ethernet-phy-ieee802.3-c22" fallback Eric Dumazet <edumazet(a)google.com> net: udp_tunnel: prevent double queueing in udp_tunnel_nic_device_sync Shengjiu Wang <shengjiu.wang(a)nxp.com> ASoC: fsl_asrc_dma: fix eDMA maxburst misalignment with channel count Tiezhu Yang <yangtiezhu(a)loongson.cn> LoongArch: BPF: Fix off-by-one error in tail call Tiezhu Yang <yangtiezhu(a)loongson.cn> LoongArch: BPF: Fix outdated tail call comments 谢致邦 (XIE Zhibang) <Yeking(a)Red54.com> LoongArch: Move struct kimage forward declaration before use Inochi Amaoto <inochiama(a)gmail.com> net: stmmac: dwmac-spacemit: Fix wrong irq definition Inochi Amaoto <inochiama(a)gmail.com> net: stmmac: dwmac-spacemit: Fix wrong phy interface definition Shitalkumar Gandhi <shital.gandhi45(a)gmail.com> net: ethernet: sunplus: spl2sw: fix phy_node refcount leak in remove Ruoyu Wang <ruoyuw560(a)gmail.com> net: sungem: fix probe error cleanup Greg Thelen <gthelen(a)google.com> tools: ynl: build archives with $(AR) Xiang Mei <xmei5(a)asu.edu> geneve: validate inner network offset in geneve_gro_complete() Xiang Mei <xmei5(a)asu.edu> geneve: gate GRO hint in geneve_gro_complete() on gs->gro_hint Yun Zhou <yun.zhou(a)windriver.com> net: mvneta: re-enable percpu interrupt on resume Ratheesh Kannoth <rkannoth(a)marvell.com> octeontx2-af: fix CGX debugfs RVU AF PCI reference leaks Subbaraya Sundeep <sbhatta(a)marvell.com> octeontx2-af: Validate NIX maximum LFs correctly Jan Klos <honza.klos(a)gmail.com> net: phy: realtek: Clear MDIO_AN_10GBT_CTRL_ADV10G bit Erni Sri Satya Vennela <ernis(a)linux.microsoft.com> net: mana: Fall back to standard MTU when PF reports adapter_mtu of 0 Daniel Golle <daniel(a)makrotopia.org> net: dsa: mxl862xx: fix use-after-free of DSA ports in crc_err_work Daniel Golle <daniel(a)makrotopia.org> net: dsa: mxl862xx: avoid unaligned 16-bit access in api_wrap David Yang <mmyangfl(a)gmail.com> net: dsa: realtek: fix memory leak in rtl8366rb_setup_led() Haoxiang Li <haoxiang_li2024(a)163.com> rtc: cmos: unregister HPET IRQ handler on probe failure Fredrik M Olsson <fredrik.m.olsson(a)axis.com> rtc: ds1307: Fix off-by-one issue with wday for rx8130 Huiwen He <hehuiwen(a)kylinos.cn> smb/client: preserve errors from smb2_set_sparse() Li RongQing <lirongqing(a)baidu.com> ACPI: processor_idle: Mark LPI enter functions as __cpuidle Rafael J. Wysocki <rafael.j.wysocki(a)intel.com> ACPICA: Unbreak tools build after switching over to strscpy_pad() Rafael J. Wysocki <rafael.j.wysocki(a)intel.com> thermal: testing: zone: Flush work items during cleanup Claudio Imbrenda <imbrenda(a)linux.ibm.com> s390/mm: Fix handling of _PAGE_UNUSED pte bit Jakub Kicinski <kuba(a)kernel.org> eth: fbnic: fix ordering of heartbeat vs ownership Fernando Fernandez Mancera <fmancera(a)suse.de> ipv6: fix missing notification for ignore_routes_with_linkdown Fernando Fernandez Mancera <fmancera(a)suse.de> ipv6: fix state corruption during proxy_ndp sysctl restart Fernando Fernandez Mancera <fmancera(a)suse.de> ipv6: fix error handling in disable_policy sysctl Fernando Fernandez Mancera <fmancera(a)suse.de> ipv6: fix error handling in forwarding sysctl Fernando Fernandez Mancera <fmancera(a)suse.de> ipv6: fix error handling in ignore_routes_with_linkdown sysctl Fernando Fernandez Mancera <fmancera(a)suse.de> ipv6: fix error handling in disable_ipv6 sysctl Xin Long <lucien.xin(a)gmail.com> sctp: fix err_chunk memory leaks in INIT handling Jamal Hadi Salim <jhs(a)mojatatu.com> net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle Jakub Sitnicki <jakub(a)cloudflare.com> net: lwtunnel: Drop skb metadata before LWT encapsulation Nicolai Buchwitz <nb(a)tipi-net.de> net: usb: lan78xx: restore VLAN and hash filters after link up Eric Dumazet <edumazet(a)google.com> veth: fix NAPI leak in XDP enable error path Meghana Malladi <m-malladi(a)ti.com> net: ti: icssg: Fix XSK zero copy TX during application wakeup Aleksandrova Alyona <aga(a)itb.spb.ru> net: dsa: sja1105: round up PTP perout pin duration Eric Dumazet <edumazet(a)google.com> net: do not acquire dev->tx_global_lock in netdev_watchdog_up() Xiang Mei <xmei5(a)asu.edu> net, bpf: check master for NULL in xdp_master_redirect() Doehyun Baek <doehyunbaek(a)gmail.com> Docs/driver-api/uio-howto: document mmap_prepare callback Krzysztof Wilczyński <kwilczynski(a)kernel.org> alpha/PCI: Fix __pci_mmap_fits() overflow for zero-length BARs Krzysztof Wilczyński <kwilczynski(a)kernel.org> alpha/PCI: Add security_locked_down() check to pci_mmap_resource() Koichiro Den <den(a)valinux.co.jp> NTB: epf: Fix doorbell bitmask and IRQ vector handling Koichiro Den <den(a)valinux.co.jp> NTB: epf: Report 0-based doorbell vector via ntb_db_event() Koichiro Den <den(a)valinux.co.jp> NTB: epf: Make db_valid_mask cover only real doorbell bits Koichiro Den <den(a)valinux.co.jp> PCI: endpoint: pci-epf-vntb: Exclude reserved slots from db_valid_mask Oder Chiou <oder_chiou(a)realtek.com> ASoC: rt5575: Use __le32 for SPI burst write address HyeongJun An <sammiee5311(a)gmail.com> ASoC: SDCA: Validate written enum value in ge_put_enum_double() Rafael J. Wysocki <rafael.j.wysocki(a)intel.com> cpuidle: Allow exit latency to exceed target residency Pablo Neira Ayuso <pablo(a)netfilter.org> netfilter: nf_conntrack_helper: cap maximum number of expectation at helper registration Florian Westphal <fw(a)strlen.de> netfilter: nft_ct: expectation timeouts are passed in milliseconds Pablo Neira Ayuso <pablo(a)netfilter.org> netfilter: nf_conntrack_expect: run expectation eviction with no helper Pablo Neira Ayuso <pablo(a)netfilter.org> netfilter: nf_conntrack_expect: store master_tuple in expectation Pablo Neira Ayuso <pablo(a)netfilter.org> netfilter: nf_conntrack_expect: use conntrack GC to reap expectations Pablo Neira Ayuso <pablo(a)netfilter.org> netfilter: conntrack: check NULL when retrieving ct extension Pablo Neira Ayuso <pablo(a)netfilter.org> netfilter: nf_conntrack_pptp: move GRE specific cleanup to GRE tracker Pablo Neira Ayuso <pablo(a)netfilter.org> netfilter: nf_conntrack_helper: dynamically allocate struct nf_conntrack_helper Qingshuang Fu <fuqingshuang(a)kylinos.cn> gpio: davinci: fix IRQ domain leak on devm_kzalloc failure Florian Westphal <fw(a)strlen.de> netfilter: nft_compat: ebtables emulation must reject non-bridge targets Runyu Xiao <runyu.xiao(a)seu.edu.cn> netfilter: nft_synproxy: stop bypassing the priv->info snapshot Lorenzo Bianconi <lorenzo(a)kernel.org> netfilter: flowtable: Validate iph->ihl in nf_flow_ip4_tunnel_proto() Fernando Fernandez Mancera <fmancera(a)suse.de> netfilter: nf_conncount: prevent connlimit drops for early confirmed ct Mathias Krause <minipli(a)grsecurity.net> netfilter: nf_nat: avoid invalid nat_net pointer use on failed nf_nat_init() Bradley Morgan <include(a)grrlz.net> bpf: Disable xfrm_decode_session hook attachment Chen Cheng <chencheng(a)fnnas.com> md/raid5: avoid R5_Overlap races while breaking stripe batches Chen Cheng <chencheng(a)fnnas.com> md/raid5: use stripe state snapshot in break_stripe_batch_list() Kuniyuki Iwashima <kuniyu(a)google.com> ipv4: fib: Don't ignore error route in local/main tables. Jakub Kicinski <kuba(a)kernel.org> eth: bnxt: improve the timing of stats Xiang Mei <xmei5(a)asu.edu> ipv6: Fix null-ptr-deref in fib6_nh_mtu_change(). Gil Portnoy <dddhkts1(a)gmail.com> ksmbd: fix use-after-free of conn->preauth_info in concurrent SMB2 NEGOTIATE Yiyang Chen <chenyy23(a)mails.tsinghua.edu.cn> selftests/bpf: Cover small conntrack opts error writes Yiyang Chen <chenyy23(a)mails.tsinghua.edu.cn> bpf: Guard conntrack opts error writes Stepan Ionichev <sozdayvek(a)gmail.com> rtc: msc313: fix NULL deref in shared IRQ handler at probe Dima Ruinskiy <dima.ruinskiy(a)intel.com> e1000e: Reconfigure PLL clock gate timeout and re-enable K1 on Meteor Lake Mohamed Khalfella <mkhalfella(a)purestorage.com> i40e: Fix i40e_debug() to use struct i40e_hw argument ZhaoJinming <zhaojinming(a)uniontech.com> ice: dpll: fix memory leak in ice_dpll_init_info error paths ZhaoJinming <zhaojinming(a)uniontech.com> ice: dpll: set pointers to NULL after kfree in ice_dpll_deinit_info John Madieu <john.madieu.xa(a)bp.renesas.com> rtc: isl1208: Balance enable_irq_wake() with disable_irq_wake() on cleanup Marcin Szycik <marcin.szycik(a)intel.com> ice: call netif_keep_dst() once when entering switchdev mode Lukasz Czapnik <lukasz.czapnik(a)intel.com> ice: fix AQ error code comparison in ice_set_pauseparam() Dawid Osuchowski <dawid.osuchowski(a)linux.intel.com> ice: fix FDIR CTRL VSI resource leak in ice_reset_all_vfs() Nuoqi Gui <gnq25(a)mails.tsinghua.edu.cn> bpf: Preserve pointer spill metadata during half-slot cleanup Koichiro Den <den(a)valinux.co.jp> PCI: endpoint: pci-epf-vntb: Report 0-based doorbell vector via ntb_db_event() Koichiro Den <den(a)valinux.co.jp> PCI: endpoint: pci-epf-vntb: Defer pci_epc_raise_irq() out of atomic context Koichiro Den <den(a)valinux.co.jp> PCI: endpoint: pci-epf-vntb: Document legacy MSI doorbell offset Manivannan Sadhasivam <manivannan.sadhasivam(a)oss.qualcomm.com> PCI: endpoint: pci-epf-ntb: Add check to detect 'db_count' value of 0 Manivannan Sadhasivam <manivannan.sadhasivam(a)oss.qualcomm.com> PCI: endpoint: pci-epf-vntb: Add check to detect 'db_count' value of 0 Ahmad Fatoum <a.fatoum(a)pengutronix.de> ASoC: cs530x: Fix expected MCLK rates for CS5302/4/8 Zhan Xusheng <zhanxusheng(a)xiaomi.com> erofs: handle 48-bit blocks_hi for compressed inodes Xiang Mei <xmei5(a)asu.edu> drm/edid: fix OOB read in drm_parse_tiled_block() Ruoyu Wang <ruoyuw560(a)gmail.com> gpiolib: initialize return value in gpiochip_set_multiple() Bartosz Golaszewski <bartosz.golaszewski(a)oss.qualcomm.com> power: sequencing: fix ABBA deadlock in pwrseq_device_unregister() Amery Hung <ameryhung(a)gmail.com> bpf: Fix effective prog array index with BPF_F_PREORDER Thiébaud Weksteen <tweek(a)google.com> bpf: Fix BPF_PROG_ASSOC_STRUCT_OPS last field check Avinash Duduskar <avinash.duduskar(a)gmail.com> bpf: zero-initialize the fib lookup flow struct Yichong Chen <chenyichong(a)uniontech.com> bpftool: Fix vmlinux BTF leak in cgroup commands Sun Jian <sun.jian.kdev(a)gmail.com> bpf: Fix partial copy of non-linear test_run output Nuoqi Gui <gnq25(a)mails.tsinghua.edu.cn> bpf: Fix stack slot index in nospec checks Ronan Dalton <ronan.dalton(a)alliedtelesis.co.nz> rtc: ds1307: handle oscillator stop flag for ds1337/ds1339/ds3231 Antoni Pokusinski <apokusinski01(a)gmail.com> rtc: abx80x: fix the RTC_VL_CLR clearing all status flags Ioana Ciornei <ioana.ciornei(a)nxp.com> dpaa2-switch: do not accept VLAN uppers while bridged Jiayuan Chen <jiayuan.chen(a)linux.dev> ipv6: ioam: fix type confusion of dst_entry Weiming Shi <bestswngs(a)gmail.com> ipv6: ndisc: fix NULL deref in accept_untracked_na() Wayen Yan <win847(a)gmail.com> net: airoha: Fix skb->priority underflow in airoha_dev_select_queue() Michael Bommarito <michael.bommarito(a)gmail.com> net/sched: act_ct: fix nf_connlabels leak on two error paths Rosen Penev <rosenp(a)gmail.com> net: emac: Fix NULL pointer dereference in emac_probe Geetha sowjanya <gakula(a)marvell.com> octeontx2-pf: mcs: Fix mcs resources free on PF shutdown Subbaraya Sundeep <sbhatta(a)marvell.com> octeontx2-pf: Clear stats of all resources when freeing resources Geetha sowjanya <gakula(a)marvell.com> octeontx2-af: mcs: Fix unsupported secy stats read Ratheesh Kannoth <rkannoth(a)marvell.com> octeontx2-af: npc: cn20k: fix NPC defrag Wayen Yan <win847(a)gmail.com> net: ethernet: mtk_ppe: Fix rhashtable leak in mtk_ppe_init error paths Ilya Maximets <i.maximets(a)ovn.org> net: dst_metadata: fix false-positive memcpy overflow in tun_dst_unclone Weiming Shi <bestswngs(a)gmail.com> tipc: fix use-after-free of the discoverer in tipc_disc_rcv() Ruoyu Wang <ruoyuw560(a)gmail.com> net: marvell: prestera: initialize err in prestera_port_sfp_bind Aboorva Devarajan <aboorvad(a)linux.ibm.com> selftests/mm: fix exclusive_cow test fork() handling Sayali Patil <sayalip(a)linux.ibm.com> selftests/mm: remove hardcoded THP sizing assumptions in hmm tests Sayali Patil <sayalip(a)linux.ibm.com> selftests/mm: allow PUD-level entries in compound testcase of hmm tests Sayali Patil <sayalip(a)linux.ibm.com> selftests/mm: clarify alternate unmapping in compaction_test Sayali Patil <sayalip(a)linux.ibm.com> selftests/mm: move hwpoison setup into run_test() and silence modprobe output for memory-failure category Mike Rapoport (Microsoft) <rppt(a)kernel.org> selftests/mm: run_vmtests.sh: free memory if available memory is low Sayali Patil <sayalip(a)linux.ibm.com> selftests/mm: skip uffd-stress test when nr_pages_per_cpu is zero Sayali Patil <sayalip(a)linux.ibm.com> selftests/mm: ensure destination is hugetlb-backed in hugetlb-mremap Sayali Patil <sayalip(a)linux.ibm.com> selftest/mm: register existing mapping with userfaultfd in hugetlb-mremap Sayali Patil <sayalip(a)linux.ibm.com> selftests/mm: free dynamically allocated PMD-sized buffers in split_huge_page_test Sayali Patil <sayalip(a)linux.ibm.com> selftests/mm: size tmpfs according to PMD page size in split_huge_page_test Sayali Patil <sayalip(a)linux.ibm.com> selftests/mm: fix cgroup task placement and drop memory.current checks in hugetlb_reparenting_test.sh Sayali Patil <sayalip(a)linux.ibm.com> selftests/mm: fix hugetlb pathname construction in hugetlb_reparenting_test.sh Sayali Patil <sayalip(a)linux.ibm.com> selftests/mm: restore default nr_hugepages value via exit trap in hugetlb_reparenting_test.sh Sayali Patil <sayalip(a)linux.ibm.com> selftests/mm: fix hugetlb pathname construction in charge_reserved_hugetlb.sh Sayali Patil <sayalip(a)linux.ibm.com> selftests/mm: restore default nr_hugepages value via exit trap in charge_reserved_hugetlb.sh Hao Ge <hao.ge(a)linux.dev> alloc_tag: fix use-after-free in /proc/allocinfo after module unload Bhargav Joshi <j.bhargav.u(a)gmail.com> irqchip/crossbar: Fix parent domain resource leak Sebastian Andrzej Siewior <bigeasy(a)linutronix.de> mailbox: imx: Forward the timeout/ error in imx_mu_generic_tx() Rafael J. Wysocki <rafael.j.wysocki(a)intel.com> tpm_crb: Check ACPI_COMPANION() against NULL during probe Florian Westphal <fw(a)strlen.de> netfilter: nft_meta_bridge: fix NFT_META_BRI_IIFPVID stack leak Florian Westphal <fw(a)strlen.de> netfilter: nf_reject: skip iphdr options when looking for icmp header Florian Westphal <fw(a)strlen.de> netfilter: nft_flow_offload: zero device address for non-ether case Florian Westphal <fw(a)strlen.de> netfilter: nft_meta_bridge: add validate callback for get operations Florian Westphal <fw(a)strlen.de> netfilter: nft_payload: reject offsets exceeding 65535 bytes Jozsef Kadlecsik <kadlec(a)netfilter.org> netfilter: ipset: make sure gc is properly stopped Jozsef Kadlecsik <kadlec(a)netfilter.org> netfilter: ipset: fix order of kfree_rcu() and rcu_assign_pointer() Jozsef Kadlecsik <kadlec(a)netfilter.org> netfilter: ipset: Don't use test_bit() in lockless RCU readers in bitmap types Jozsef Kadlecsik <kadlec(a)netfilter.org> netfilter: ipset: Don't use test_bit() in lockless RCU readers in hash types Abd-Alrhman Masalkhi <abd.masalkhi(a)gmail.com> md/raid1: free r1_bio when REQ_NOWAIT is set and read would block on retry Abd-Alrhman Masalkhi <abd.masalkhi(a)gmail.com> md/raid1: honor REQ_NOWAIT when waiting for behind writes Abd-Alrhman Masalkhi <abd.masalkhi(a)gmail.com> md/raid10: fix writes_pending and barrier reference leaks on discard failures Abd-Alrhman Masalkhi <abd.masalkhi(a)gmail.com> md/raid10: fix writes_pending leak on write request failures Abd-Alrhman Masalkhi <abd.masalkhi(a)gmail.com> md/raid1: fix writes_pending and barrier reference leaks on write failures Robertus Diawan Chris <robertusdchris(a)gmail.com> mac802154: Prevent overwrite return code in mac802154_perform_association() Aleksandr Nogikh <nogikh(a)google.com> ieee802154: fix kernel-infoleak in dgram_recvmsg() Ivan Abramov <i.abramov(a)mt-integration.ru> ieee802154: Remove WARN_ON() in cfg802154_pernet_exit() Ivan Abramov <i.abramov(a)mt-integration.ru> ieee802154: Avoid calling WARN_ON() on -ENOMEM in cfg802154_switch_netns() Ivan Abramov <i.abramov(a)mt-integration.ru> ieee802154: Restore initial state on failed device_rename() in cfg802154_switch_netns() Xu Rao <raoxu(a)uniontech.com> ACPI: IPMI: Fix inverted interface check in ipmi_bmc_gone() Andy Shevchenko <andriy.shevchenko(a)linux.intel.com> ACPI: resource: Amend kernel-doc style Ricardo Neri <ricardo.neri-calderon(a)linux.intel.com> thermal: intel: Fix dangling resources on thermal_throttle_online() failure Breno Leitao <leitao(a)debian.org> arm64/hw_breakpoint: reject unaligned watchpoints that would truncate BAS Arnd Bergmann <arnd(a)arndb.de> arm64: static_call: include asm/insns.h Lorenzo Bianconi <lorenzo(a)kernel.org> netfilter: flowtable: fix and simplify IP6IP6 tunnel handling Cen Zhang <zzzccc427(a)gmail.com> ALSA: usb-audio: Kill MIDI 2.0 URBs before freeing endpoints Daniel Zahka <daniel.zahka(a)gmail.com> eth: fbnic: take netif_addr_lock_bh() around rx mode address programming Ido Schimmel <idosch(a)nvidia.com> selftests: vlan_bridge_binding: Fix flaky operational state check Breno Leitao <leitao(a)debian.org> netconsole: don't drop the last byte of a full-sized message Yun Zhou <yun.zhou(a)windriver.com> flow_dissector: check device type before reading ETH_ADDRS Lukasz Raczylo <lukasz(a)raczylo.com> net: macb: add TX stall timeout callback to recover from lost TSTART write Wayen Yan <win847(a)gmail.com> net: airoha: fix foe_check_time allocation size Cosmin Ratiu <cratiu(a)nvidia.com> devlink: Fix parent ref leak on tc-bw failure Cosmin Ratiu <cratiu(a)nvidia.com> devlink: Fix parent ref leak in devl_rate_node_create() Ioana Ciornei <ioana.ciornei(a)nxp.com> dpaa2-switch: fix VLAN upper check not rejecting bridge join Xiang Mei <xmei5(a)asu.edu> virtio-net: fix len check in receive_big() Quang Nguyen <quang.nguyen.wx(a)renesas.com> spi: rpc-if: Use correct device for hardware reinitialization on resume Mark Tomlinson <mark.tomlinson(a)alliedtelesis.co.nz> PCI: iproc: Restore .map_irq() for the platform bus driver Michael Bommarito <michael.bommarito(a)gmail.com> ALSA: usb-audio: qcom: clear opened when stream enable fails Michael Bommarito <michael.bommarito(a)gmail.com> ALSA: usb-audio: qcom: reject stream disable with no active interface Xin Long <lucien.xin(a)gmail.com> sctp: hold socket lock when dumping endpoints in sctp_diag Jakub Kicinski <kuba(a)kernel.org> net: psample: fix info leak in PSAMPLE_ATTR_DATA Ratheesh Kannoth <rkannoth(a)marvell.com> octeontx2-af: npc: Log successful MCAM drop-on-non-hit install at debug level Ratheesh Kannoth <rkannoth(a)marvell.com> octeontx2-pf: Fix leak of SQ timestamp buffer on teardown Tianchen Ding <dtcccc(a)linux.alibaba.com> selftests/ftrace: Fix trace_marker_raw test on 64K page kernels Christian Marangi <ansuelsmth(a)gmail.com> net: ethernet: mtk_eth_soc: fix supported_interface set after phylink_create Thadeu Lima de Souza Cascardo <cascardo(a)igalia.com> drm/amdgpu: initialize irq.lock spinlock earlier Mario Limonciello <mario.limonciello(a)amd.com> drm/amdkfd: fix list_del corruption in kfd_criu_resume_svm Matthew Schwartz <matthew.schwartz(a)linux.dev> drm/amd/display: Fix mem_type change detection for async flips Roman Li <Roman.Li(a)amd.com> drm/amd/display: Skip PHY SSC reduction on some 8K panels Qiang Yu <Qiang.Yu(a)amd.com> drm/amdgpu: initialize iter.start in amdgpu_devcoredump_format Yunxiang Li <Yunxiang.Li(a)amd.com> drm/amdkfd: Avoid double-unpin of DOORBELL/MMIO BOs on free Sen Wang <sen(a)ti.com> ASoC: tlv320aic3x: restrict CLKDIV bypass Q values in dual-rate mode Arnaldo Carvalho de Melo <acme(a)redhat.com> perf dso: Set standard errno on decompression failure Arnaldo Carvalho de Melo <acme(a)redhat.com> perf bpf: Validate array presence before casting BPF prog info pointers Arnaldo Carvalho de Melo <acme(a)redhat.com> perf c2c: Fix hist entry and format list leaks in c2c_he_free() Arnaldo Carvalho de Melo <acme(a)redhat.com> perf c2c: Free format list entries when c2c_hists__init() fails Arnaldo Carvalho de Melo <acme(a)redhat.com> perf cs-etm: Bounds-check CPU in cs_etm__get_queue() Arnaldo Carvalho de Melo <acme(a)redhat.com> perf cs-etm: Require full global header in auxtrace_info size check Arnaldo Carvalho de Melo <acme(a)redhat.com> perf cs-etm: Validate num_cpu before metadata allocation Arnaldo Carvalho de Melo <acme(a)redhat.com> perf machine: Use snprintf() for guestmount path construction Eric Dumazet <edumazet(a)google.com> xfrm: validate selector family and prefixlen during match Eric Dumazet <edumazet(a)google.com> xfrm: annotate data-races around xfrm_policy_count[] and xfrm_policy_default[] Herbert Xu <herbert(a)gondor.apana.org.au> xfrm: Fix xfrm state cache insertion race Xu Rao <raoxu(a)uniontech.com> ALSA: usb-audio: qcom: Free sideband sg_table objects Gao Xiang <xiang(a)kernel.org> erofs: call erofs_exit_ishare() before rcu_barrier() Adrian Hunter <adrian.hunter(a)intel.com> i3c: master: Add missing runtime PM get in dev_nack_retry_count_store() Adrian Hunter <adrian.hunter(a)intel.com> i3c: master: Update dev_nack_retry_count under maintenance lock Jisheng Zhang <jszhang(a)kernel.org> spi: dw: fix wrong BAUDR setting after resume Thomas Hellström <thomas.hellstrom(a)linux.intel.com> drm/xe: Fix wa_oob codegen recipe for external module builds Guangshuo Li <lgs201920130244(a)gmail.com> drm/i915: clear CRTC color blob pointers after dropping refs Francesco Lavra <flavra(a)baylibre.com> regcache: Do not overwrite error code when finalizing cache after error Pengpeng Hou <pengpeng(a)iscas.ac.cn> gpio: mlxbf3: fail probe if gpiochip registration fails Arnaldo Carvalho de Melo <acme(a)redhat.com> perf cs-etm: Reject CPU IDs that would overflow signed comparison Arnaldo Carvalho de Melo <acme(a)redhat.com> perf c2c: Free format list entries when releasing c2c hist entries Arnaldo Carvalho de Melo <acme(a)redhat.com> perf bpf: Bounds-check array offsets in bpil_offs_to_addr() Arnaldo Carvalho de Melo <acme(a)redhat.com> perf bpf: Reject oversized BPF metadata events that truncate header.size Arnaldo Carvalho de Melo <acme(a)redhat.com> perf bpf: Validate func_info_rec_size and sub_id in synthesize_bpf_prog_name() Arnaldo Carvalho de Melo <acme(a)redhat.com> perf sched: Replace (void*)1 sentinel with proper runtime allocation Arnaldo Carvalho de Melo <acme(a)redhat.com> perf hwmon: Fix fd check to accept fd 0 in hwmon_pmu__describe_items() Arnaldo Carvalho de Melo <acme(a)redhat.com> perf tools: Use snprintf() for root_dir path construction Arnaldo Carvalho de Melo <acme(a)redhat.com> perf dso: Set error code when open() fails on uncompressed fallback path Arnaldo Carvalho de Melo <acme(a)redhat.com> perf dso: Fix heap overflow in dso__get_filename() on decompressed path Arnaldo Carvalho de Melo <acme(a)redhat.com> perf symbols: Break infinite loop on zero-filled notes in sysfs__read_build_id() Arnaldo Carvalho de Melo <acme(a)redhat.com> perf symbols: Validate p_filesz before use in filename__read_build_id() Arnaldo Carvalho de Melo <acme(a)redhat.com> perf symbols: Fix bswap copy-paste error for 32-bit ELF p_filesz Ian Rogers <irogers(a)google.com> perf maps: Add maps__mutate_mapping Pengpeng Hou <pengpeng(a)iscas.ac.cn> sparc: led: avoid trimming a newline from empty writes Karol Wachowski <karol.wachowski(a)linux.intel.com> accel/ivpu: fix HWS command queue leak on registration failure John Johansen <john.johansen(a)canonical.com> apparmor: fix label can not be immediately before a declaration Adrian Hunter <adrian.hunter(a)intel.com> i3c: master: Prevent reuse of dynamic address on device add failure Adrian Hunter <adrian.hunter(a)intel.com> i3c: mipi-i3c-hci: Fix race in i3c_hci_addr_to_dev() Adrian Hunter <adrian.hunter(a)intel.com> i3c: master: Defer new-device registration out of DAA caller context Adrian Hunter <adrian.hunter(a)intel.com> i3c: master: Ensure Hot-Join operations are stopped on shutdown Adrian Hunter <adrian.hunter(a)intel.com> i3c: master: Consolidate Hot-Join DAA work in the core Adrian Hunter <adrian.hunter(a)intel.com> i3c: master: Serialize i3c_set_hotjoin() with the maintenance lock Adrian Hunter <adrian.hunter(a)intel.com> i3c: master: Make hot-join workqueue freezable to block hot-join during suspend Adrian Hunter <adrian.hunter(a)intel.com> i3c: mipi-i3c-hci: Preserve RUN bit when aborting DMA ring Adrian Hunter <adrian.hunter(a)intel.com> i3c: mipi-i3c-hci: Fix suspend behavior when bus disable falls back to software reset Eduardo Vasconcelos <eduardo(a)eduardovasconcelos.com> apparmor: Fix inverted comparison in cache_hold_inc() Maciek Borzecki <maciek.borzecki(a)gmail.com> apparmor: fix uninitialised pointer passed to audit_log_untrustedstring() Georgia Garcia <georgia.garcia(a)canonical.com> apparmor: don't audit files pointing to aa_null.dentry Zygmunt Krynicki <me(a)zygoon.pl> apparmor: put secmark label after secid lookup Zygmunt Krynicki <me(a)zygoon.pl> apparmor: aa_getprocattr free procattr leak on format failure John Johansen <john.johansen(a)canonical.com> apparmor: remove unnecessary goto and associated label Zygmunt Krynicki <me(a)zygoon.pl> apparmor: release exe file resources on path failure Zygmunt Krynicki <me(a)zygoon.pl> apparmor: fail policy unpack on accept2 allocation failure Hongling Zeng <zenghongling(a)kylinos.cn> apparmor: Fix return in ns_mkdir_op Georgia Garcia <georgia.garcia(a)canonical.com> apparmor: remove or add symlinks to rawdata according to export_binary Georgia Garcia <georgia.garcia(a)canonical.com> apparmor: fix NULL pointer dereference in unpack_pdb Maxime Bélair <maxime.belair(a)canonical.com> apparmor: fix potential UAF in aa_replace_profiles Ryan Lee <ryan.lee(a)canonical.com> apparmor: grab ns lock and refresh when looking up changehat child profiles John Johansen <john.johansen(a)canonical.com> apparmor: fix rawdata_f_data implicit flex array Zygmunt Krynicki <me(a)zygoon.pl> apparmor: aa_label_alloc use aa_label_free on alloc failure Ruoyu Wang <ruoyuw560(a)gmail.com> apparmor: check label build before no_new_privs test Andrew Morton <akpm(a)linux-foundation.org> security/apparmor/apparmorfs.c: conditionally compile get_loaddata_common_ref() John Johansen <john.johansen(a)canonical.com> apparmor: fix refcount leak when updating the sk_ctx John Johansen <john.johansen(a)canonical.com> apparmor: fix race in unix socket mediation when peer_path is used John Johansen <john.johansen(a)canonical.com> apparmor: fix shadowing of plabel that prevents cache from being updated Yuanhe Shu <xiangzao(a)linux.alibaba.com> Revert "PCI/MSI: Unmap MSI-X region on error" Randy Dunlap <rdunlap(a)infradead.org> Documentation: ABI: sysfs-class-reboot-mode-reboot_modes: fix doc warnings Thomas Weißschuh <linux(a)weissschuh.net> sparc: Avoid -Wunused-but-set-parameter in clear_user_page() Dong Chenchen <dongchenchen2(a)huawei.com> xfrm: Fix dev use-after-free in xfrm async resumption Shuvam Pandey <shuvampandey1(a)gmail.com> PCI: dwc: Avoid dwc_pcie_rasdes_debugfs_deinit() NULL dereference when no RAS DES capability Felix Gu <ustc.gu(a)gmail.com> phy: freescale: phy-fsl-imx8qm-lvds-phy: Fix missing pm_runtime_disable() on probe error path Felix Gu <ustc.gu(a)gmail.com> phy: freescale: phy-fsl-imx8qm-lvds-phy: Use synchronous PM runtime put in reset Manivannan Sadhasivam <manivannan.sadhasivam(a)oss.qualcomm.com> PCI: mediatek: Use actual physical address instead of virt_to_phys() Konrad Dybcio <konrad.dybcio(a)oss.qualcomm.com> dt-bindings: phy: sc8280xp-qmp-pcie: Disallow bifurcation register on Purwa Inochi Amaoto <inochiama(a)gmail.com> dt-bindings: dma: snps,dw-axi-dmac: Add fallback compatible for CV1800B Arnaldo Carvalho de Melo <acme(a)redhat.com> perf symbols: Add bounds checks to read_build_id() note iteration in minimal build Arnaldo Carvalho de Melo <acme(a)redhat.com> perf symbols: Add bounds checks to elf_read_build_id() note iteration Arnaldo Carvalho de Melo <acme(a)redhat.com> perf bpf: Fix metadata leak in perf_env__add_bpf_info() on duplicate insert Arnaldo Carvalho de Melo <acme(a)redhat.com> perf bpf: Fix map data leak in bpf_metadata_create() on alloc failure Arnaldo Carvalho de Melo <acme(a)redhat.com> perf bpf: Add NULL check for btf__type_by_id() in synthesize_bpf_prog_name() Arnaldo Carvalho de Melo <acme(a)redhat.com> tools lib api: Fix mount_overload() snprintf truncation and toupper range Arnaldo Carvalho de Melo <acme(a)redhat.com> tools lib api: Fix filename__write_int() writing uninitialized stack data Arnaldo Carvalho de Melo <acme(a)redhat.com> perf tools: Use snprintf() in dso__read_running_kernel_build_id() Arnaldo Carvalho de Melo <acme(a)redhat.com> perf hwmon: Guard label read against empty or failed reads Arnaldo Carvalho de Melo <acme(a)redhat.com> perf tools: Fix uninitialized pathname on uncompressed fallback in filename__decompress() Arnaldo Carvalho de Melo <acme(a)redhat.com> perf symbols: Bounds-check descsz in sysfs__read_build_id() GNU fallback Arnaldo Carvalho de Melo <acme(a)redhat.com> perf hwmon: Fix parse_hwmon_filename() strlcpy buffer overflow Arnaldo Carvalho de Melo <acme(a)redhat.com> perf hwmon: Use scnprintf() in hwmon_pmu__for_each_event() Arnaldo Carvalho de Melo <acme(a)redhat.com> perf hwmon: Fix off-by-one null termination on sysfs reads Arnaldo Carvalho de Melo <acme(a)redhat.com> perf tools: Fix thread__set_comm_from_proc() on empty comm file Arnaldo Carvalho de Melo <acme(a)redhat.com> perf intel-pt: Fix snprintf size tracking bug in insn decoder Arnaldo Carvalho de Melo <acme(a)redhat.com> perf tools: Use mkostemp() for O_CLOEXEC on temporary files Arnaldo Carvalho de Melo <acme(a)redhat.com> perf symbols: Bounds-check .gnu_debuglink section data Arnaldo Carvalho de Melo <acme(a)redhat.com> perf symbols: Fix signed overflow in sysfs__read_build_id() size check Arnaldo Carvalho de Melo <acme(a)redhat.com> tools lib api: Fix missing null termination in filename__read_int/ull() Arnaldo Carvalho de Melo <acme(a)redhat.com> perf pmu: Fix perf_pmu__parse_scale/unit() OOB access on empty sysfs file Arnaldo Carvalho de Melo <acme(a)redhat.com> perf pmu: Fix pmu_id() heap underwrite on empty identifier file James Clark <james.clark(a)linaro.org> perf cs-etm: Queue context packets for frontend Tanushree Shah <tshah(a)linux.ibm.com> perf data convert json: Fix addr_location leak on time-filtered samples Jens Remus <jremus(a)linux.ibm.com> perf s390: Fix TEXTREL in Python extension by compiling as PIC Chuck Lever <chuck.lever(a)oracle.com> xprtrdma: Return sendctx slot after Send preparation failure Chuck Lever <chuck.lever(a)oracle.com> xprtrdma: Repost Receive buffers for malformed replies Chuck Lever <chuck.lever(a)oracle.com> xprtrdma: Sanitize the reply credit grant after parsing Chris Mason <clm(a)meta.com> xprtrdma: Fix bcall rep leak and unbounded peek Chuck Lever <chuck.lever(a)oracle.com> xprtrdma: Resize reply buffers before reposting receives Chuck Lever <chuck.lever(a)oracle.com> xprtrdma: Document and assert reply-handler invariants Chuck Lever <chuck.lever(a)oracle.com> xprtrdma: Check frwr_wp_create() during connect Chris Mason <clm(a)meta.com> xprtrdma: Initialize re_id before removal registration Chris Mason <clm(a)meta.com> xprtrdma: Fix ep kref imbalance on ADDR_CHANGE Arnaldo Carvalho de Melo <acme(a)redhat.com> perf tools: Use scnprintf() in build_id__snprintf() and hwmon read_events() Arnaldo Carvalho de Melo <acme(a)redhat.com> perf hists: Fix snprintf() in hists__scnprintf_title() UID filter path Arnaldo Carvalho de Melo <acme(a)redhat.com> perf bpf: Use scnprintf() in snprintf_hex() and synthesize_bpf_prog_name() Arnaldo Carvalho de Melo <acme(a)redhat.com> perf tools: Add O_CLOEXEC to open() calls in DSO and ELF code Arnaldo Carvalho de Melo <acme(a)redhat.com> perf sched: Fix idle-hist callchain display using wrong rb_first variant Arnaldo Carvalho de Melo <acme(a)redhat.com> perf sched: Bounds-check prio before test_bit() in timehist Lad Prabhakar <prabhakar.mahadev-lad.rj(a)bp.renesas.com> PCI: rcar-host: Remove unused LIST_HEAD(res) Arnaldo Carvalho de Melo <acme(a)redhat.com> perf tools: NULL bitmap pointers after bitmap_free() Arnaldo Carvalho de Melo <acme(a)redhat.com> perf tools: Use perf_env__get_cpu_topology() in machine__resolve() Arnaldo Carvalho de Melo <acme(a)redhat.com> perf tools: Use scnprintf() in cpu_map__snprint() to prevent overflow Arnaldo Carvalho de Melo <acme(a)redhat.com> perf tools: Fix get_max_num() size_t underflow on empty sysfs file David E. Box <david.e.box(a)linux.intel.com> platform/x86/intel/vsec: Restore BAR fallback for header walk Jamie Nguyen <jamien(a)nvidia.com> fs/ntfs3: resize log->one_page_buf when adopting on-disk page size Edward Adam Davis <eadavis(a)qq.com> fs/ntfs3: prevent potential lcn remains uninitialized Christian Fontanez <christfontanez(a)gmail.com> virtio: add missing kernel-doc for map and vmap members Chuck Lever <chuck.lever(a)oracle.com> lockd: Correct kernel-doc status descriptions for NLMv4 GRANTED Shuvam Pandey <shuvampandey1(a)gmail.com> PCI: meson: Add missing remove callback Shuvam Pandey <shuvampandey1(a)gmail.com> PCI: meson: Propagate devm_add_action_or_reset() failure Biju Das <biju.das.jz(a)bp.renesas.com> pwm: rzg2l-gpt: Add missing newlines to dev_err_probe() messages Li RongQing <lirongqing(a)baidu.com> PCI: mediatek: Fix operator precedence in PCIE_FTS_NUM_L0 macro Yang Erkun <yangerkun(a)huawei.com> nfs: use nfsi->rwsem to protect traversal of the file lock list Mike Snitzer <snitzer(a)kernel.org> NFSv4/flexfiles: honor FF_FLAGS_NO_IO_THRU_MDS in pg_get_mirror_count_write Mike Snitzer <snitzer(a)kernel.org> NFSv4/flexfiles: honor FF_FLAGS_NO_IO_THRU_MDS on fatal DS connect errors Clark Wang <xiaoning.wang(a)nxp.com> nfs: keep PG_UPTODATE clear after read errors in page groups Dai Ngo <dai.ngo(a)oracle.com> NFSv4/pnfs: defer return_range callbacks until after inode unlock Chuck Lever <chuck.lever(a)oracle.com> xprtrdma: Decouple req recycling from RPC completion Chuck Lever <chuck.lever(a)oracle.com> xprtrdma: Use sendctx DMA state for Send signaling Sagi Grimberg <sagi(a)grimberg.me> pNFS/filelayout: fix cheking if a layout is striped Hongling Zeng <zenghongling(a)kylinos.cn> sunrpc: Fix error handling in rpc_sysfs_xprt_switch_add_xprt_store() Phillip Varney <pbvarney(a)protonmail.com> clk: qcom: a53: Corrected frequency multiplier for 1152MHz Nuno Sá <nuno.sa(a)analog.com> dmaengine: dma-axi-dmac: use DMA pool to manange DMA descriptor Nuno Sá <nuno.sa(a)analog.com> dmaengine: dma-axi-dmac: Properly free struct axi_dmac_desc Nuno Sá <nuno.sa(a)analog.com> dmaengine: Fix possible use after free Icenowy Zheng <zhengxingda(a)iscas.ac.cn> dmaengine: qcom: gpi: set DMA_PRIVATE capability Junrui Luo <moonafterrain(a)outlook.com> mshv: add bounds check on vp_index in mshv_intercept_isr() Pratyush Yadav (Google) <pratyush(a)kernel.org> docs: memfd_preservation: fix rendering of ABI documentation Jagadeesh Kona <jagadeesh.kona(a)oss.qualcomm.com> clk: qcom: camcc-x1e80100: Add support for camera QDSS debug clocks Jagadeesh Kona <jagadeesh.kona(a)oss.qualcomm.com> dt-bindings: clock: qcom: Add X1P42100 camera clock controller Arnaldo Carvalho de Melo <acme(a)redhat.com> perf sched: Free callchain nodes in idle thread cleanup Arnaldo Carvalho de Melo <acme(a)redhat.com> perf tools: Fix int16_t truncation of max_cpu_num in set_max_cpu_num() Arnaldo Carvalho de Melo <acme(a)redhat.com> perf timechart: Fix cpu2y() OOB read on untrusted CPU index Arnaldo Carvalho de Melo <acme(a)redhat.com> perf c2c: Fix use-after-free in he__get_c2c_hists() error path Arnaldo Carvalho de Melo <acme(a)redhat.com> perf stat: Introduce perf_env__get_cpu_topology() to guard NULL env->cpu Arnaldo Carvalho de Melo <acme(a)redhat.com> perf mmap: Fix NULL deref in aio cleanup on alloc failure Arnaldo Carvalho de Melo <acme(a)redhat.com> perf sched: Replace BUG_ON and add NULL checks in replay event helpers Arnaldo Carvalho de Melo <acme(a)redhat.com> perf sched: Use thread__put() in free_idle_threads() Arnaldo Carvalho de Melo <acme(a)redhat.com> perf sched: Fix thread reference leak in idle hist processing Arnaldo Carvalho de Melo <acme(a)redhat.com> perf sched: Use is_idle_sample() for idle thread runtime cast guard Arnaldo Carvalho de Melo <acme(a)redhat.com> perf sched: Clean up idle_threads entry on init failure Arnaldo Carvalho de Melo <acme(a)redhat.com> perf c2c: Bounds-check CPU IDs in setup_nodes() topology loop Arnaldo Carvalho de Melo <acme(a)redhat.com> perf c2c: Bounds-check CPU and node IDs before bitmap and array access Arnaldo Carvalho de Melo <acme(a)redhat.com> perf stat: Bounds-check CPU index in topology aggregation callbacks Arnaldo Carvalho de Melo <acme(a)redhat.com> perf mmap: Guard cpu__get_node() return in aio_bind() Arnaldo Carvalho de Melo <acme(a)redhat.com> perf sched: Fix register_pid() overflow, strcpy, and BUG_ON Arnaldo Carvalho de Melo <acme(a)redhat.com> perf sched: Cap max_cpu at MAX_CPUS in timehist sample processing Arnaldo Carvalho de Melo <acme(a)redhat.com> perf sched: Fix thread reference leaks in timehist_get_thread() Arnaldo Carvalho de Melo <acme(a)redhat.com> perf tools: Add bounds check to cpu__get_node() Arnaldo Carvalho de Melo <acme(a)redhat.com> perf tools: Guard remaining test_bit calls from OOB sample CPU Arnaldo Carvalho de Melo <acme(a)redhat.com> perf sched: Fix comp_cpus heap overflow with cross-machine recordings Arnaldo Carvalho de Melo <acme(a)redhat.com> perf sched: Fix NULL dereference in latency_runtime_event Arnaldo Carvalho de Melo <acme(a)redhat.com> perf sched: Replace BUG_ON on invalid CPU with graceful skip Arnaldo Carvalho de Melo <acme(a)redhat.com> perf sched: Fix thread reference leak in latency_switch_event Arnaldo Carvalho de Melo <acme(a)redhat.com> perf tools: Guard test_bit from out-of-bounds sample CPU James Clark <james.clark(a)linaro.org> perf annotate: Fix crashes on empty annotate windows Rui Qi <qirui.001(a)bytedance.com> perf: Fix off-by-one stack buffer overflow in kallsyms__parse() Akhil R <akhilrajeev(a)nvidia.com> dt-bindings: dma: nvidia,tegra186-gpc-dma: Make reset optional Shengjiu Wang <shengjiu.wang(a)nxp.com> dmaengine: imx-sdma: Refine spba bus searching in probe Xu Rao <raoxu(a)uniontech.com> thunderbolt: debugfs: Fix margining error counter buffer leak Srinivasan Shanmugam <srinivasan.shanmugam(a)amd.com> drm/amd/display: Add missing kdoc for ALLM parameters Jamie Nguyen <jamien(a)nvidia.com> fs/ntfs3: fix mount failure on 64K page-size kernels Arnd Bergmann <arnd(a)arndb.de> ntfs3: avoid another -Wmaybe-uninitialized warning Mihai Brodschi <m.brodschi(a)gmail.com> ntfs3: Allocate iomap inline_data using alloc_page Helen Koike <koike(a)igalia.com> fs/ntfs3: call _ntfs_bad_inode() when failing to rename Zhan Xusheng <zhanxusheng1024(a)gmail.com> fs/ntfs3: fix wrong LCN in run_remove_range() when splitting a run Konstantin Komarov <almaz.alexandrovich(a)paragon-software.com> fs/ntfs3: add bounds check to run_get_highest_vcn() Yixun Lan <dlan(a)kernel.org> clk: spacemit: k3: Fix PCIe clock register offset Yixun Lan <dlan(a)kernel.org> clk: spacemit: k3: Switch to pll2_d6 as parent for PCIe clock Zhan Xusheng <zhanxusheng1024(a)gmail.com> docs: changes.rst: restore pahole 1.26 minimum (regressed by sort) Rosen Penev <rosenp(a)gmail.com> HID: logitech-hidpp: remove excess kernel-doc member in hidpp_scroll_counter Yuho Choi <dbgh9129(a)gmail.com> clk: at91: keep securam node alive while mapping it Aldo Conte <aldocontelk(a)gmail.com> iio: tcs3472: power down chip on probe failure Sanjay Chitroda <sanjayembeddedse(a)gmail.com> iio: accel: mma8452: handle I2C read error(s) in mma8452_read() Guilherme Ivo Bozi <guilherme.bozi(a)usp.br> iio: adc: xilinx-ams: fix out-of-bounds channel lookup in event handling Joshua Crofts <joshua.crofts1(a)gmail.com> iio: magnetometer: ak8975: fix potential kernel stack memory leak Joshua Crofts <joshua.crofts1(a)gmail.com> iio: light: si1133: prevent race condition on timeout Joshua Crofts <joshua.crofts1(a)gmail.com> iio: light: si1133: reset counter to prevent race condition Arnaldo Carvalho de Melo <acme(a)redhat.com> perf header: Validate bitmap size before allocating in do_read_bitmap() Arnaldo Carvalho de Melo <acme(a)redhat.com> perf header: Sanity check HEADER_EVENT_DESC attr.size before swap Zhan Xusheng <zhanxusheng(a)xiaomi.com> timers/migration: Update stale @online doc to @available Shawn Guo <shengchao.guo(a)oss.qualcomm.com> PCI: qcom: Disable ASPM L0s for SA8775P Athira Rajeev <atrajeev(a)linux.ibm.com> powerpc tools perf: Initialize error code in auxtrace_record_init function Baruch Siach <baruch(a)tkos.co.il> docs: threat-model: add missing closing parenthesis Lad Prabhakar <prabhakar.mahadev-lad.rj(a)bp.renesas.com> clk: renesas: rzg2l: Rename iterator in for_each_mod_clock() to avoid shadowing Hongling Zeng <zenghongling(a)kylinos.cn> gpib: cb7210: Fix region leak when request_irq fails Adam Crosser <adam.crosser(a)praetorian.com> gpib: fix double decrement of descriptor_busy in command_ioctl() Rafael J. Wysocki <rafael.j.wysocki(a)intel.com> sonypi: Check ACPI_COMPANION() against NULL at probe time Rafael J. Wysocki <rafael.j.wysocki(a)intel.com> hpet: Check ACPI_COMPANION() against NULL at probe time James Kim <james010kim(a)gmail.com> char: tlclk: fix use-after-free in tlclk_cleanup() Dave Penkler <dpenkler(a)gmail.com> gpib: Fix inappropriate ioctl error return Ravi Bangoria <ravi.bangoria(a)amd.com> perf test amd ibs: Fix incorrect kernel version check Seungjin Bae <eeodqql09(a)gmail.com> usb: host: max3421: Reject hub port requests for non-existent ports Seungjin Bae <eeodqql09(a)gmail.com> usb: host: max3421: Fix shift-out-of-bounds in max3421_hub_control() Guangshuo Li <lgs201920130244(a)gmail.com> staging: most: video: avoid double free on video register failure Ian Rogers <irogers(a)google.com> perf inject: Fix itrace branch stack synthesis Ian Rogers <irogers(a)google.com> perf event: Fix size of synthesized sample with branch stacks Michael Petlan <mpetlan(a)redhat.com> perf build-id: Fix off-by-one bug when printing kernel/module build-id Conor Dooley <conor.dooley(a)microchip.com> clk: microchip: mpfs-ccc: fix peripheral driver registration failures after oob fix Rafael J. Wysocki <rafael.j.wysocki(a)intel.com> platform/x86: classmate-laptop: Address memory leaks on driver removal Chen-Yu Tsai <wenst(a)chromium.org> PCI: mediatek-gen3: Fix incorrectly skipped pwrctrl error message Dan Carpenter <error27(a)gmail.com> PCI: dwc: Fix signedness bug in fault injection test code Jie Gan <jie.gan(a)oss.qualcomm.com> coresight: platform: defer connection counter increment until alloc succeeds Bartosz Golaszewski <bartosz.golaszewski(a)oss.qualcomm.com> PCI/pwrctrl: Lock device when calling device_is_bound() Wolfram Sang <wsa+renesas(a)sang-engineering.com> mailbox: don't free the channel if the startup callback failed Sergey Senozhatsky <senozhatsky(a)chromium.org> mailbox: mtk-adsp: fix UAF during device teardown Conor Dooley <conor.dooley(a)microchip.com> mailbox: mpfs: fix check for syscon presence in mpfs_mbox_inbox_isr() Chen-Yu Tsai <wenst(a)chromium.org> PCI: mediatek-gen3: Do full device power down on removal Leo Yan <leo.yan(a)arm.com> coresight: Handle helper enable failure properly Jie Gan <jie.gan(a)oss.qualcomm.com> coresight: Fix source not disabled on idr_alloc_u32 failure Bard Liao <yung-chuan.liao(a)linux.intel.com> soundwire: intel_ace2x: release bpt_stream when close it Rafael J. Wysocki <rafael.j.wysocki(a)intel.com> iio: light: acpi-als: Check ACPI_COMPANION() against NULL Mihai Sain <mihai.sain(a)microchip.com> clk: at91: sam9x7: Fix gmac_gclk clock definition Leo Yan <leo.yan(a)arm.com> perf pmu: Skip test on Arm64 when #slots is zero Ian Rogers <irogers(a)google.com> perf unwind: Refactor get_entries to allow dynamic libdw/libunwind selection Ian Rogers <irogers(a)google.com> perf pmu-events AMD: Switch l2_itlb_misses to bp_l1_tlb_miss_l2_tlb_miss.all Andy Shevchenko <andriy.shevchenko(a)linux.intel.com> phy: phy-can-transceiver: Check driver match and driver data against NULL Qiang Yu <qiang.yu(a)oss.qualcomm.com> PCI: qcom: Set max OPP before DBI access during resume Manikanta Maddireddy <mmaddireddy(a)nvidia.com> PCI: dwc: Apply ECRC workaround for DesignWare cores prior to 5.10a Biswapriyo Nath <nathbappai(a)gmail.com> dt-bindings: clock: qcom,sm6125-dispcc: reference qcom,gcc.yaml Luo Jie <jie.luo(a)oss.qualcomm.com> clk: qcom: cmnpll: Account for reference clock divider Jie Gan <jie.gan(a)oss.qualcomm.com> coresight: fix missing error code when trace ID is invalid Sumit Kumar <sumit.kumar(a)oss.qualcomm.com> bus: mhi: ep: Add missing state_lock protection for mhi_state access Sumit Kumar <sumit.kumar(a)oss.qualcomm.com> bus: mhi: ep: Fix potential deadlock in mhi_ep_reset_worker() Hsiu Che Yu <yu.whisper.personal(a)gmail.com> rust: alloc: fix assert in `Vec::reserve` doc test Rong Zhang <i(a)rong.moe> PCI: loongson: Do not ignore downstream devices on external bridges Florian Eckert <fe(a)dev.tdt.de> PCI: intel-gw: Add .start_link() callback Florian Eckert <fe(a)dev.tdt.de> PCI: intel-gw: Enable clock before PHY init Florian Eckert <fe(a)dev.tdt.de> PCI: intel-gw: Move interrupt enable to own function Ian Rogers <irogers(a)google.com> perf tool: Fix missing schedstat delegates and dont_split_sample_group in delegate_tool Ian Rogers <irogers(a)google.com> perf sched: Add missing mmap2 handler in timehist Rafael J. Wysocki <rafael.j.wysocki(a)intel.com> platform/x86: xo15-ebook: Fix wakeup source and GPE handling Rafael J. Wysocki <rafael.j.wysocki(a)intel.com> x86/platform/olpc: xo15: Drop wakeup source on driver removal Guixin Liu <kanie(a)linux.alibaba.com> PCI: Check ROM header and data structure addr before accessing Guixin Liu <kanie(a)linux.alibaba.com> PCI: Introduce named defines for PCI ROM Carlos Bilbao <carlos.bilbao(a)kernel.org> PCI/ASPM: Don't reconfigure ASPM entering low-power state Leo Yan <leo.yan(a)arm.com> coresight: etm4x: Correct TRCVMIDCCTLR1 save and restore James Clark <james.clark(a)linaro.org> coresight: ete: Always save state on power down Leo Yan <leo.yan(a)arm.com> coresight: tmc: Fix overflow when calculating is bigger than 2GiB Baoli.Zhang <baoli.zhang(a)linux.intel.com> soundwire: fix bug in sdw_add_element_group_count found by syzkaller Bard Liao <yung-chuan.liao(a)linux.intel.com> soundwire: don't program SDW_SCP_BUSCLOCK_SCALE on a unattached Peripheral Yingchao Deng <yingchao.deng(a)oss.qualcomm.com> coresight: cti: Fix DT filter signals silently ignored Thomas Richter <tmricht(a)linux.ibm.com> perf callchain: Handle multiple address spaces Ian Rogers <irogers(a)google.com> perf debuginfo: Fix libdw API contract violations Ian Rogers <irogers(a)google.com> perf annotate-data: Fix libdw API contract violations Ian Rogers <irogers(a)google.com> perf probe-finder: Fix libdw API contract violations Ian Rogers <irogers(a)google.com> perf libdw: Fix libdw API contract violations and memory leaks Ian Rogers <irogers(a)google.com> perf dwarf-aux: Fix libdw API contract violations Ian Rogers <irogers(a)google.com> perf dwarf-aux: Fix libdw segmentation fault in cu_walk_functions_at Alexandru Hossu <hossu.alexandru(a)gmail.com> staging: nvec: fix use-after-free in nvec_rx_completed() Maksym Pikhotskyi <mpikhotskyi(a)gmail.com> staging: rtl8723bs: fix stainfo check in rtw_aes_decrypt Stanley Chu <yschu(a)nuvoton.com> i3c: master: svc: Fix missed IBI after false SLVSTART on NPCM845 Mario Limonciello <mario.limonciello(a)amd.com> gpiolib: acpi: Only trigger ActiveBoth interrupts on boot Nam Cao <namcao(a)linutronix.de> eventpoll: Fix epoll_wait() report false negative Christian Brauner <brauner(a)kernel.org> eventpoll: rename epi->next and txlist for clarity Christian Brauner <brauner(a)kernel.org> eventpoll: expand top-of-file overview / locking doc Gui-Dong Han <hanguidong02(a)gmail.com> 9p: Add missing read barrier in virtio zero-copy path Yizhou Zhao <zhaoyz24(a)mails.tsinghua.edu.cn> net/9p: fix race condition on rdma->state in trans_rdma.c Hongling Zeng <zenghongling(a)kylinos.cn> 9p: avoid returning ERR_PTR(0) from mkdir operations Aleksandr Nogikh <nogikh(a)google.com> ocfs2: fix circular locking dependency in ocfs2_dio_end_io_write Charles Keepax <ckeepax(a)opensource.cirrus.com> mfd: cs42l43: Sanity check firmware size Matthew Bystrin <dev.mbstr(a)gmail.com> mfd: rsmu: Fix page register setup Matti Vaittinen <mazziesaccount(a)gmail.com> mfd: bd72720: Drop BUCK11 ID Guangshuo Li <lgs201920130244(a)gmail.com> ksmbd: fix use-after-free in same_client_has_lease() Eric Dumazet <edumazet(a)google.com> net: serialize netif_running() check in enqueue_to_backlog() Jacob Moroni <jmoroni(a)google.com> RDMA/irdma: Replace waitqueue and flag with completion Junxian Huang <huangjunxian6(a)hisilicon.com> RDMA/hns: Fix memory leak of bonding resources Selvin Xavier <selvin.xavier(a)broadcom.com> RDMA/bnxt_re: Reject GET_TOGGLE_MEM when toggle page was not allocated Selvin Xavier <selvin.xavier(a)broadcom.com> RDMA/bnxt_re: Fail DBR related page allocation UAPIs if the feature is disabled Selvin Xavier <selvin.xavier(a)broadcom.com> RDMA/bnxt_re: Avoid repeated requests to allocate WC pages Selvin Xavier <selvin.xavier(a)broadcom.com> RDMA/bnxt_re: Proper rollback if the ioremap fails Selvin Xavier <selvin.xavier(a)broadcom.com> RDMA/bnxt_re: Add a max slot check for SQ Sriharsha Basavapatna <sriharsha.basavapatna(a)broadcom.com> RDMA/bnxt_re: Enable app allocated QPs Sriharsha Basavapatna <sriharsha.basavapatna(a)broadcom.com> RDMA/bnxt_re: Support doorbells for app allocated QPs Sriharsha Basavapatna <sriharsha.basavapatna(a)broadcom.com> RDMA/bnxt_re: Enhance dbr usecnt logic in doorbell uapis Sriharsha Basavapatna <sriharsha.basavapatna(a)broadcom.com> RDMA/bnxt_re: Update msn table size for app allocated QPs Sriharsha Basavapatna <sriharsha.basavapatna(a)broadcom.com> RDMA/bnxt_re: Refactor bnxt_re_init_user_qp() Selvin Xavier <selvin.xavier(a)broadcom.com> RDMA/bnxt_re: Avoid displaying the kernel pointer Selvin Xavier <selvin.xavier(a)broadcom.com> RDMA/bnxt_re: Free CQ toggle page after firmware teardown Selvin Xavier <selvin.xavier(a)broadcom.com> RDMA/bnxt_re: Free SRQ toggle page after firmware teardown Selvin Xavier <selvin.xavier(a)broadcom.com> RDMA/bnxt_re: Initialize dpi variable to zero Brett Creeley <brett.creeley(a)amd.com> ionic: Fix check in ionic_get_link_ext_stats Selvamani Rajagopal <Selvamani.Rajagopal(a)onsemi.com> dt-bindings: net: updated interrupt type to be active low, level triggered Selvamani Rajagopal <Selvamani.Rajagopal(a)onsemi.com> net: ethernet: oa_tc6: Remove FCS size in RX frame Selvamani Rajagopal <Selvamani.Rajagopal(a)onsemi.com> net: ethernet: oa_tc6: mdiobus->parent initialized with NULL Meghana Malladi <m-malladi(a)ti.com> net: ti: icssg: Use undirected TX tag for XDP zero copy in HSR offload mode Meghana Malladi <m-malladi(a)ti.com> net: ti: icssg: Use undirected TX tag for native XDP in HSR offload mode Meghana Malladi <m-malladi(a)ti.com> net: ti: icssg-prueth: Fix AF_XDP fill ring alloc and wakeup condition Wayen.Yan <win847(a)gmail.com> net: airoha: Fix always-true condition in PPE1 queue reservation loop Eric Dumazet <edumazet(a)google.com> tcp: ipv6: clamp default adverting MSS to avoid GSO_BY_FRAGS (0xFFFF) Eric Dumazet <edumazet(a)google.com> tipc: fix UAF in tipc_l2_send_msg() Gui-Dong Han <hanguidong02(a)gmail.com> KEYS: Use acquire when reading state in keyring search Aboorva Devarajan <aboorvad(a)linux.ibm.com> powerpc/kexec: fix double get_cpu() imbalance in kexec_prepare_cpus Aboorva Devarajan <aboorvad(a)linux.ibm.com> powerpc/powernv: fix preempt count leak in pnv_kexec_wait_secondaries_down Aboorva Devarajan <aboorvad(a)linux.ibm.com> powerpc/perf: fix preempt count underflow in fsl_emb_pmu_del Yadan Fan <ydfan(a)suse.com> MIPS: mm: Fix out-of-bounds write in maar_res_walk() Sechang Lim <rhkrqnwk98(a)gmail.com> bpf, sockmap: fix integer overflow in bpf_msg_pop_data() bounds check Kuniyuki Iwashima <kuniyu(a)google.com> sockmap: Fix use-after-free in udp_bpf_recvmsg() Weiming Shi <bestswngs(a)gmail.com> bpf, sockmap: reject overflowing copy + len in bpf_msg_push_data() Al Viro <viro(a)zeniv.linux.org.uk> udf: fix nls leak on udf_fill_super() failure Leon Hwang <leon.hwang(a)linux.dev> bpf: Fix bpf_get/setsockopt to tos for ipv4-mapped ipv6 socket Leo Yan <leo.yan(a)arm.com> selftests/bpf: Initialize operation name before use Jiri Olsa <jolsa(a)kernel.org> selftests/bpf: Fix typo in verify_umulti_link_info Jiri Olsa <jolsa(a)kernel.org> bpf: Guard __get_user acesss with access_ok for uprobe_multi data Nathan Chancellor <nathan(a)kernel.org> btrfs: Drop WQ_PERCPU from ordered_flags in btrfs_init_workqueues() Huiwen He <hehuiwen(a)kylinos.cn> smb/client: always return a value for FS_IOC_GETFLAGS Jian Zhang <zhangjian496(a)huawei.com> cifs: remove all cifs files before kill super Henrique Carvalho <henrique.carvalho(a)suse.com> smb: client: fix conflicting option validation for new mount API Takashi Iwai <tiwai(a)suse.de> ALSA: core: Fix unintuitive behavior of snd_power_ref_and_wait() Alice Mikityanska <alice(a)isovalent.com> geneve: Fix off-by-one comparing with GRO_LEGACY_MAX_SIZE Pablo Neira Ayuso <pablo(a)netfilter.org> netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them Florian Westphal <fw(a)strlen.de> netfilter: nf_conncount: callers must hold rcu read lock Cen Zhang <zzzccc427(a)gmail.com> ALSA: seq: avoid stale FIFO cells during resize Cen Zhang <zzzccc427(a)gmail.com> ALSA: seq: oss: Serialize readq reset state with q->lock Runyu Xiao <runyu.xiao(a)seu.edu.cn> kcm: use WRITE_ONCE() when changing lower socket callbacks Wayen.Yan <win847(a)gmail.com> net: airoha: Fix debugfs new-tuple display for IPv4 ROUTE entries Wayen.Yan <win847(a)gmail.com> net: airoha: Fix register index for Tx-fwd counter configuration Ratheesh Kannoth <rkannoth(a)marvell.com> octeontx2-af: fix NPC mailbox codes in mbox.h Ovidiu Panait <ovidiu.panait.rb(a)renesas.com> net: bcmgenet: Use weighted round-robin TX DMA arbitration Matthieu Buffet <matthieu(a)buffet.re> landlock: Fix unmarked concurrent access to socket family Grzegorz Nitka <grzegorz.nitka(a)intel.com> dpll: balance create/delete notifications in __dpll_pin_(un)register Grzegorz Nitka <grzegorz.nitka(a)intel.com> dpll: guard sync-pair removal on full pin unregister Grzegorz Nitka <grzegorz.nitka(a)intel.com> dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() Grzegorz Nitka <grzegorz.nitka(a)intel.com> dpll: send delete notification before unregister in on-pin rollback Grzegorz Nitka <grzegorz.nitka(a)intel.com> dpll: fix stale iteration in dpll_pin_on_pin_unregister() Ruoyu Wang <ruoyuw560(a)gmail.com> net: wwan: t7xx: check skb_clone in control TX Wentao Guan <guanwentao(a)uniontech.com> net: ethernet: mtk_wed: debugfs: correct index in wed_amsdu_show() Wayen.Yan <win847(a)gmail.com> net: airoha: Fix error handling in airoha_ppe_flush_sram_entries() Ratheesh Kannoth <rkannoth(a)marvell.com> octeontx2-af: npc: Fix size of entry2cntr_map Xu Kuohai <xukuohai(a)huawei.com> bpf: Fix setting retval to -EPERM for cgroup hooks not returning errno Dragos Tatulea <dtatulea(a)nvidia.com> net/mlx5: Check max_macs devlink param value against max capability Sun Jian <sun.jian.kdev(a)gmail.com> bpf: Run generic devmap egress prog on private skb Victor Nogueira <victor(a)mojatatu.com> net/sched: sch_dualpi2: Add missing module alias Zhi-Jun You <hujy652(a)gmail.com> net: ethernet: mtk_wed: fix loading WO firmware for MT7986 Eric Dumazet <edumazet(a)google.com> net: watchdog: fix refcount tracking races Aditya Garg <gargaditya(a)linux.microsoft.com> net: mana: guard TX wq object destroy with INVALID_MANA_HANDLE check Aditya Garg <gargaditya(a)linux.microsoft.com> net: mana: initialize gdma queue id to INVALID_QUEUE_ID Victor Nogueira <victor(a)mojatatu.com> net/sched: sch_dualpi2: Do not call qdisc_tree_reduce_backlog during peek before restoring qlen Victor Nogueira <victor(a)mojatatu.com> net/sched: sch_codel: Do not call qdisc_tree_reduce_backlog during peek before restoring qlen Victor Nogueira <victor(a)mojatatu.com> net/sched: sch_fq_codel: Do not call qdisc_tree_reduce_backlog during peek before restoring qlen Paolo Abeni <pabeni(a)redhat.com> virtio_net: do not allow tunnel csum offload for non GSO packets Sechang Lim <rhkrqnwk98(a)gmail.com> tcp: clear sock_ops cb flags before force-closing a child socket Joe Damato <joe(a)dama.to> bnxt: fix head underflow on XDP head-grow Chuck Lever <chuck.lever(a)oracle.com> handshake: Require admin permission for DONE command Lucas Tsai <lucas_tsai(a)richtek.com> power: supply: core: fix supplied_from allocations Dan Williams <djbw(a)kernel.org> cxl/memdev: Pin parents for entire memdev lifetime Dan Williams <djbw(a)kernel.org> cxl/region: Resolve region deletion races Dan Williams <djbw(a)kernel.org> cxl/region: Block region delete during region creation Guangshuo Li <lgs201920130244(a)gmail.com> ASoC: adau1372: Clear PLL_EN on failed PLL lock without reset GPIO David Matlack <dmatlack(a)google.com> vfio: selftests: Ensure libvfio output dirs are always created Li Ming <ming.li(a)zohomail.com> cxl/region: Fill first free targets[] slot during auto-discovery Li Ming <ming.li(a)zohomail.com> cxl/region: Fix out-of-bounds access in cxl_cancel_auto_attach() Chia-Lin Kao (AceLan) <acelan.kao(a)canonical.com> ASoC: sdw_utils: fix missing component_name for cs42l43 part_id 0x2A3B Nicolin Chen <nicolinc(a)nvidia.com> iommu: Avoid copying the user array twice in the full-array copy helper Lars Pöschel <lars.poeschel(a)edag.com> spi: xilinx: use FIFO occupancy register to determine buffer size Alex Mastro <amastro(a)fb.com> iommufd: Clarify IOAS_MAP_FILE dma-buf support Li RongQing <lirongqing(a)baidu.com> iommu/dma-iommu: Fix wrong scatterlist length assignment in P2PDMA path HanQuan <eilaimemedsnaimel(a)gmail.com> ALSA: seq: Fix kernel heap address leak in bounce_error_event() Cássio Gabriel <cassiogabrielcontato(a)gmail.com> ALSA: usb-audio: qcom: Guard sideband endpoint removal Herbert Xu <herbert(a)gondor.apana.org.au> crypto: rng - Free default RNG on module exit Felix Gu <ustc.gu(a)gmail.com> crypto: cavium/cpt - fix DMA cleanup using wrong loop index Felix Gu <ustc.gu(a)gmail.com> crypto: marvell/octeontx - fix DMA cleanup using wrong loop index Dave Jiang <dave.jiang(a)intel.com> cxl/test: Add check after kzalloc() memory in alloc_mock_res() Dave Jiang <dave.jiang(a)intel.com> cxl/test: Unregister cxl_acpi in cxl_test_init() error path Michael Bommarito <michael.bommarito(a)gmail.com> tipc: reject inverted service ranges from peer bindings Michael Bommarito <michael.bommarito(a)gmail.com> tipc: prevent snt_unacked underflow on CONN_ACK Michael Bommarito <michael.bommarito(a)gmail.com> tipc: require net admin for TIPCv2 netlink mutators Victor Nogueira <victor(a)mojatatu.com> net/sched: sch_hfsc: Don't make class passive twice Daniel Borkmann <daniel(a)iogearbox.net> net: Stop leased rxq before uninstalling its memory provider Samuel Moelius <sam.moelius(a)trailofbits.com> net: pfcp: allocate per-cpu tstats for PFCP netdevs Xin Long <lucien.xin(a)gmail.com> sctp: validate embedded address parameter length Xiang Mei <xmei5(a)asu.edu> bridge: cfm: reject invalid CCM interval at configuration time Kuniyuki Iwashima <kuniyu(a)google.com> net: fib_rules: Don't dump dying fib_rule in fib_rules_dump(). Kuniyuki Iwashima <kuniyu(a)google.com> ipv4: fib: Don't dump dying fib_info in fib_leaf_notify(). Jamal Hadi Salim <jhs(a)mojatatu.com> net/sched: cls_flow: Dont expose folded kernel pointers George Moussalem <george.moussalem(a)outlook.com> net: dsa: qca8k: fix led devicename when using external mdio bus Cássio Gabriel <cassiogabrielcontato(a)gmail.com> ASoC: topology: Check PCM and DAI name strings before use HyeongJun An <sammiee5311(a)gmail.com> ASoC: tegra: tegra210_ahub: Validate written enum value HyeongJun An <sammiee5311(a)gmail.com> ASoC: fsl: fsl_audmix: Validate written enum values HyeongJun An <sammiee5311(a)gmail.com> ASoC: meson: aiu: Validate written enum values HyeongJun An <sammiee5311(a)gmail.com> ASoC: codecs: hdac_hdmi: Validate written enum value Arnd Bergmann <arnd(a)arndb.de> ASoC: SOF: Intel: hda-sdw-bpt: select SND_SOF_SOF_HDA_SDW_BPT properly Arnd Bergmann <arnd(a)arndb.de> ASoC: SOF: Intel: select SND_SOC_SDW_UTILS=y from SND_SOC_SOF_HDA_GENERIC=y Richard Fitzgerald <rf(a)opensource.cirrus.com> ASoC: cs35l56: Fix wrong error test on simple_write_to_buffer() Leon Romanovsky <leon(a)kernel.org> RDMA/mlx5: Release the HW‑provided UAR index rather than the SW one Maher Sanalla <msanalla(a)nvidia.com> RDMA/mlx5: Fix undefined shift of user RQ WQE size Patrisious Haddad <phaddad(a)nvidia.com> RDMA/mlx5: Remove raw RSS QP restrack tracking Patrisious Haddad <phaddad(a)nvidia.com> RDMA/mlx5: Remove DCT restrack tracking Maxwell Doose <m32285159(a)gmail.com> fs: efs: remove unneeded debug prints Michael Guralnik <michaelgur(a)nvidia.com> RDMA/mlx5: Drop FRMR pool handle on UMR revoke failure Michael Guralnik <michaelgur(a)nvidia.com> RDMA/core: Add ib_frmr_pool_drop for unrecoverable handles Michael Guralnik <michaelgur(a)nvidia.com> RDMA/core: Fix FRMR handle leak on push failure Michael Guralnik <michaelgur(a)nvidia.com> RDMA/core: Avoid NULL dereference on FRMR bad usage Michael Guralnik <michaelgur(a)nvidia.com> RDMA/core: Fix FRMR set pinned push error path Michael Guralnik <michaelgur(a)nvidia.com> RDMA/core: Fix FRMR aging push to queue error flow Michael Guralnik <michaelgur(a)nvidia.com> RDMA/core: Fix skipped usage for driver built FRMR key Michael Guralnik <michaelgur(a)nvidia.com> RDMA/mlx5: Fix TPH extraction in FRMR pool key Michael Guralnik <michaelgur(a)nvidia.com> RDMA/mlx5: Fix mkey creation error flow rollback Samuel Moelius <sam.moelius(a)trailofbits.com> Bluetooth: vhci: validate devcoredump state before side effects Samuel Moelius <sam.moelius(a)trailofbits.com> Bluetooth: hci: validate codec capability element length Sai Teja Aluvala <aluvala.sai.teja(a)intel.com> Bluetooth: btintel_pcie: Load IOSF debug regs by controller variant Zhao Dongdong <zhaodongdong(a)kylinos.cn> Bluetooth: btmtk: fix URB leak in alloc_mtk_intr_urb error path Jordan Walters <jaggyaur(a)gmail.com> Bluetooth: hci_core: Fix UAF in hci_unregister_dev() Jiajia Liu <liujiajia(a)kylinos.cn> Bluetooth: hci_event: fix simultaneous discovery stuck in FINDING Weiming Shi <bestswngs(a)gmail.com> Bluetooth: eir: Fix stack OOB write when prepending the Flags AD Zijun Hu <zijun.hu(a)oss.qualcomm.com> Bluetooth: hci_qca: fix NULL pointer dereference in qca_dmp_hdr() for non-serdev device Zijun Hu <zijun.hu(a)oss.qualcomm.com> Bluetooth: hci_qca: fix NULL pointer dereference in qca_setup() for non-serdev device Heiko Carstens <hca(a)linux.ibm.com> s390/process: Fix kernel thread function pointer type Richard Fitzgerald <rf(a)opensource.cirrus.com> ASoC: cs35l56: Fix possible uninitialized value in cs35l56_spi_system_reset() Andre Przywara <andre.przywara(a)arm.com> arm64: dts: allwinner: a523: Add missing GPIO interrupt Mikhail Kshevetskiy <mikhail.kshevetskiy(a)iopsys.eu> pinctrl: airoha: an7583: remove undefined groups from pcm_spi pin function Mikhail Kshevetskiy <mikhail.kshevetskiy(a)iopsys.eu> pinctrl: airoha: an7583: fix phy1_led1 pin function Mikhail Kshevetskiy <mikhail.kshevetskiy(a)iopsys.eu> pinctrl: airoha: an7583: add missed gpio22 pin group Mikhail Kshevetskiy <mikhail.kshevetskiy(a)iopsys.eu> pinctrl: airoha: an7583: fix gpio21 pin group Mikhail Kshevetskiy <mikhail.kshevetskiy(a)iopsys.eu> pinctrl: airoha: fix pwm pin function for an7581 and an7583 Mikhail Kshevetskiy <mikhail.kshevetskiy(a)iopsys.eu> pinctrl: airoha: an7583: fix incorrect led mapping in phy4_led1 pin function Mikhail Kshevetskiy <mikhail.kshevetskiy(a)iopsys.eu> pinctrl: airoha: an7581: fix incorrect led mapping in phy4_led1 pin function Mikhail Kshevetskiy <mikhail.kshevetskiy(a)iopsys.eu> pinctrl: airoha: an7583: fix misprint in gpio19 pinconf Mikhail Kshevetskiy <mikhail.kshevetskiy(a)iopsys.eu> pinctrl: airoha: an7581: fix misprint in gpio19 pinconf Mikhail Kshevetskiy <mikhail.kshevetskiy(a)iopsys.eu> pinctrl: airoha: an7583: add missed gpio32 pin group Mikhail Kshevetskiy <mikhail.kshevetskiy(a)iopsys.eu> pinctrl: airoha: an7581: add missed gpio32 pin group Andre Przywara <andre.przywara(a)arm.com> pinctrl: sunxi: a523: Remove unneeded IRQ remuxing flag Angelo Dureghello <adureghello(a)baylibre.com> m68k: mcf5441x: fix clocks numbering Daniel Borkmann <daniel(a)iogearbox.net> bpf: Tighten cgroup storage cookie checks for prog arrays Giovanni Cabiddu <giovanni.cabiddu(a)intel.com> vfio/qat: fix f_pos race in qat_vf_resume_write() Sergey Shtylyov <s.shtylyov(a)auroraos.dev> of: cpu: add check in __of_find_n_match_cpu_property() Dave Jiang <dave.jiang(a)intel.com> cxl/test: Zero out LSA backing memory to avoid leaking to user Dave Jiang <dave.jiang(a)intel.com> cxl/test: Fix integer overflow in mock LSA bounds checks Dave Jiang <dave.jiang(a)intel.com> cxl/test: Verify cmd->size_in before accessing payload Yonghong Song <yonghong.song(a)linux.dev> selftests/bpf: Fix bpf_iter/task_vma test Yun Zhou <yun.zhou(a)windriver.com> ext4: validate donor file superblock early in EXT4_IOC_MOVE_EXT Aditya Prakash Srivastava <aditya.ansh182(a)gmail.com> ext4: fix kernel BUG in ext4_write_inline_data_end Louis Scalbert <louis.scalbert(a)6wind.com> bonding: 3ad: fix mux port state on oper down Louis Scalbert <louis.scalbert(a)6wind.com> bonding: 3ad: fix carrier when no usable slaves Louis Scalbert <louis.scalbert(a)6wind.com> bonding: 3ad: add lacp_strict configuration knob Louis Scalbert <louis.scalbert(a)6wind.com> netlink: specs: rt-link: missed broadcast-neigh Louis Scalbert <louis.scalbert(a)6wind.com> tools: missed broadcast_neigh if_link uapi header Hongling Zeng <zenghongling(a)kylinos.cn> ext4: fix ERR_PTR(0) in ext4_mkdir() Pei Xiao <xiaopei01(a)kylinos.cn> hwmon: (gpd-fan): fix race condition between device removal and sysfs access Pei Xiao <xiaopei01(a)kylinos.cn> hwmon: (gpd-fan): Initialize EC before registering hwmon device Pei Xiao <xiaopei01(a)kylinos.cn> hwmon: (gpd-fan): drop global driver data and use per-device allocation Richard Fitzgerald <rf(a)opensource.cirrus.com> ASoC: cs35l56: Don't leave parent IRQ disabled if system_suspend fails Richard Fitzgerald <rf(a)opensource.cirrus.com> ASoC: cs35l56: Cleanup if component_probe fails Richard Fitzgerald <rf(a)opensource.cirrus.com> ASoC: cs35l56: Prevent double-free of debugfs Richard Fitzgerald <rf(a)opensource.cirrus.com> ASoC: cs35l56: Fix missing calls to wm_adsp2_remove() Christoph Hellwig <hch(a)lst.de> iomap: pass the correct len to fserror_report_io in __iomap_write_begin Srujana Challa <schalla(a)marvell.com> vdpa/octeon_ep: fix IRQ-to-ring mapping in interrupt handler Srujana Challa <schalla(a)marvell.com> vdpa/octeon_ep: Fix PF->VF mailbox data address calculation Arnd Bergmann <arnd(a)arndb.de> vduse: fix compat handling for VDUSE_IOTLB_GET_FD/VDUSE_VQ_GET_INFO longlong yan <yanlonglong(a)kylinos.cn> tools/virtio: check mmap return value in vringh_test Qing Ming <a0yami(a)mailbox.org> vhost/net: complete zerocopy ubufs only once Zhang Tianci <zhangtianci.1997(a)bytedance.com> vduse: Requeue failed read to send_list head Filip Hejsek <filip.hejsek(a)gmail.com> virtio_console: read size from config space during device init Jia Jia <physicalmtea(a)gmail.com> virtio: rtc: tear down old virtqueues before restore Qihang Tang <q.h.hack.winter(a)gmail.com> vhost/vdpa: validate virtqueue index in mmap and fault paths Qihang Tang <q.h.hack.winter(a)gmail.com> vduse: hold vduse_lock across IDR lookup in open path Enric Balletbo i Serra <eballetb(a)redhat.com> clocksource: move NXP timer selection to drivers/clocksource Justin Suess <utilityemal77(a)gmail.com> bpf: Cancel special fields on map value recycle Val Packett <val(a)packett.cool> ASoC: codecs: aw88261: fix incorrect masks for boost regs Ruoyu Wang <ruoyuw560(a)gmail.com> spi: meson-spifc: fix runtime PM leak on remove Chuck Lever <chuck.lever(a)oracle.com> lockd: Avoid hashing uninitialized bytes in nlm4svc_lookup_file() Chuck Lever <chuck.lever(a)oracle.com> lockd: Do not monitor when looking up the LOCK_MSG callback host Chuck Lever <chuck.lever(a)oracle.com> lockd: Translate nlm__int__deadlock in __nlm4svc_proc_lock_msg() Chuck Lever <chuck.lever(a)oracle.com> lockd: Stop warning on nlm__int__drop_reply in !V4 cast_status Chuck Lever <chuck.lever(a)oracle.com> NFSD: Handle layout stid in nfsd4_drop_revoked_stid() Jason Gunthorpe <jgg(a)ziepe.ca> IB/mlx4: Fill in the access_flags if IB_MR_REREG_ACCESS is not specified Cássio Gabriel <cassiogabrielcontato(a)gmail.com> ASoC: sma1307: Fix uevent string leaks in fault worker KhaiWenTan <khai.wen.tan(a)linux.intel.com> igc: skip RX timestamp header for frame preemption verification Larysa Zaremba <larysa.zaremba(a)intel.com> ixgbe: do not configure xps for XDP queues Weiming Shi <bestswngs(a)gmail.com> btrfs: lzo: reject compressed segment that overflows the compressed input Filipe Manana <fdmanana(a)suse.com> btrfs: fix deadlock cloning inline extent when using flushoncommit Cen Zhang <zzzccc427(a)gmail.com> btrfs: annotate lockless read of defrag_bytes in should_nocow() Johannes Thumshirn <johannes.thumshirn(a)wdc.com> btrfs: zoned: always set max_active_zones for zoned devices Matthew Wilcox (Oracle) <willy(a)infradead.org> Revert "btrfs: fix the file offset calculation inside btrfs_decompress_buf2page()" Johannes Thumshirn <johannes.thumshirn(a)wdc.com> btrfs: zoned: fix deadlock waiting for ticket during data relocation Johannes Thumshirn <johannes.thumshirn(a)wdc.com> btrfs: zoned: don't account data relocation space-info in statfs free space Yuho Choi <dbgh9129(a)gmail.com> PM: QoS: Fix misc device registration unwind Nikita Zhandarovich <n.zhandarovich(a)fintech.ru> hwmon: (it87) Clamp negative values to zero in set_fan() Jeff Layton <jlayton(a)kernel.org> vfs: add FS_USERNS_DELEGATABLE flag and set it for NFS Sumit Gupta <sumitg(a)nvidia.com> memory: tegra186-emc: stop borrowing MC aggregate hook for EMC David Laight <david.laight.linux(a)gmail.com> fbdev: sm501fb: Fix buffer errors in OF binding code Helge Deller <deller(a)gmx.de> fbdev/arm: Export acorndata_8x8 font symbol for bootloader Wen Gong <quic_wgong(a)quicinc.com> wifi: ath12k: enable IEEE80211_VHT_EXT_NSS_BW_CAPABLE when NSS ratio is reported Baochen Qiang <baochen.qiang(a)oss.qualcomm.com> wifi: ath12k: fix EAPOL TX failure caused by stale tcl_metadata bits Sergio Paracuellos <sergio.paracuellos(a)gmail.com> gpio: mt7621: fix interrupt banks mapping on gpio chips Takashi Iwai <tiwai(a)suse.de> ALSA: aloop: Drop superfluous break Filipe Manana <fdmanana(a)suse.com> btrfs: fix invalid pointer dereference in __btrfs_run_delayed_refs() Ryder Lee <ryder.lee(a)mediatek.com> wifi: mt76: mt7996: fix potential tx_retries underflow Ryder Lee <ryder.lee(a)mediatek.com> wifi: mt76: mt7925: fix potential tx_retries underflow Ryder Lee <ryder.lee(a)mediatek.com> wifi: mt76: mt7921: fix potential tx_retries underflow Ryder Lee <ryder.lee(a)mediatek.com> wifi: mt76: mt7915: fix potential tx_retries underflow Bjoern A. Zeeb <bz(a)FreeBSD.org> wifi: mt76: fix argument to ieee80211_is_first_frag() Dylan Eskew <dylan.eskew(a)candelatech.com> wifi: mt76: mt7996: limit work in set_bitrate_mask Lorenzo Bianconi <lorenzo(a)kernel.org> wifi: mt76: mt7996: remove redundant pdev->bus check in probe Lorenzo Bianconi <lorenzo(a)kernel.org> wifi: mt76: mt7996: fix reading zeroed info->control.flags after mt76_tx_status_skb_add() Lorenzo Bianconi <lorenzo(a)kernel.org> wifi: mt76: mt7996: Fix possible NULL pointer dereference in mt7996_mac_write_txwi_80211() Lorenzo Bianconi <lorenzo(a)kernel.org> wifi: mt76: mt7996: Fix possible token leak in mt7996_tx_prepare_skb() Aviel Zohar <avielzohar123(a)gmail.com> wifi: mt76: mt7925: validate skb length in testmode query Sean Wang <sean.wang(a)mediatek.com> wifi: mt76: mt792x: skip MLD header rewrite for 802.3 encap TX Sean Wang <sean.wang(a)mediatek.com> wifi: mt76: mt7925: keep TX BA state in the primary WCID Javier Tia <floss(a)jetm.me> wifi: mt76: mt7925: fix stale pointer comparisons in change_vif_links Lorenzo Bianconi <lorenzo(a)kernel.org> wifi: mt76: mt7996: Fix NULL pointer dereference in mt7996_init_tx_queues() Felix Fietkau <nbd(a)nbd.name> wifi: mt76: mt7996: add missing max_remain_on_channel_duration Rajat Gupta <rajat.gupta(a)oss.qualcomm.com> wifi: mt76: use kfree_rcu for offchannel link in mt76_put_vif_phy_link Hongling Zeng <zenghongling(a)kylinos.cn> wifi: mt76: mt7921: fix resource leak in probe error path Myeonghun Pak <mhun512(a)gmail.com> wifi: mt76: mt7925: clean up DMA on probe failure Krzysztof Kozlowski <krzysztof.kozlowski(a)oss.qualcomm.com> ARM: configs: Drop duplicated CONFIG_EXT4_FS Hongyan Xia <hongyan.xia(a)transsion.com> sched/fair: Fix cpu_util runnable_avg arithmetic Wolfram Sang <wsa+renesas(a)sang-engineering.com> hwspinlock: qcom: avoid uninitialized struct members Alexandru Gagniuc <mr.nuke.me(a)gmail.com> remoteproc: qcom_q6v5_wcss: drop redundant wcss_q6_bcr_reset Miguel Ojeda <ojeda(a)kernel.org> rust: kbuild: show the right `quiet_cmd_rustc_procmacrolibrary` Hui Zhu <zhuhui(a)kylinos.cn> vmalloc: fix NULL pointer dereference in is_vm_area_hugepages() Hao Ge <hao.ge(a)linux.dev> lib/test_hmm: fix memory leak in dmirror_migrate_to_system() Jason Gunthorpe <jgg(a)ziepe.ca> iommufd: Destroy the pages content after detaching from dmabuf Ankit Soni <Ankit.Soni(a)amd.com> iommufd: Take dma_resv lock before dma_buf_unpin() in release path Timur Tabi <ttabi(a)nvidia.com> pinctrl: PINCTRL_STMFX should depend on CONFIG_OF Yu-Chun Lin <eleanor.lin(a)realtek.com> dt-bindings: pinctrl: realtek,rtd1625: Fix input voltage property name Luca Leonardo Scorcia <l.scorcia(a)gmail.com> pinctrl: mediatek: mt8167: Fix Schmitt trigger register offset of pins 34-39 Luca Leonardo Scorcia <l.scorcia(a)gmail.com> pinctrl: mediatek: mt8516: Fix Schmitt trigger register offset of pins 34-39 Mike Christie <michael.christie(a)oracle.com> scsi: target: Remove tcm_loop target reset handling Hongjie Fang <hongjiefang(a)asrmicro.com> scsi: ufs: core: Handle PM commands timeout before SCSI EH David Disseldorp <ddiss(a)suse.de> scsi: target: Fix hexadecimal CHAP_I handling Sneh Mankad <sneh.mankad(a)oss.qualcomm.com> pinctrl: qcom: Fix resolving register base address from device node Yuho Choi <dbgh9129(a)gmail.com> watchdog: unregister PM notifier on watchdog unregister Al Viro <viro(a)zeniv.linux.org.uk> configfs: fix lockless traversals of ->s_children Dmitry Vyukov <dvyukov(a)google.com> firmware_loader: Fix recursive lock in device_cache_fw_images() Aaron Ma <aaron.ma(a)canonical.com> ASoC: amd: acp-sdw-sof: Bound DAI link iteration Aaron Ma <aaron.ma(a)canonical.com> ASoC: amd: acp-sdw-legacy: Bound DAI link iteration Felix Gu <ustc.gu(a)gmail.com> spi: ep93xx: fix double-free of zeropage on DMA setup failure Jason Gunthorpe <jgg(a)ziepe.ca> IB/mlx5: Don't mangle the mr->pd inside the rereg callback Jason Gunthorpe <jgg(a)ziepe.ca> IB/mlx5: Pull the pdn out of the depths of the umr machinery Jason Gunthorpe <jgg(a)ziepe.ca> IB/mlx5: Remove unused mkc bits in mlx5r_umr_update_mr_page_shift() Jason Gunthorpe <jgg(a)ziepe.ca> RDMA/nldev: Fix locking when accessing mr->pd Jason Gunthorpe <jgg(a)ziepe.ca> IB/mlx5: Properly support implicit ODP rereg_mr Jason Gunthorpe <jgg(a)ziepe.ca> IB/mlx5: Don't take the rereg_mr fallback without a new translation Bryam Vargas <hexlabsecurity(a)proton.me> ntfs: fix u16 truncation of restart-area length check Bryam Vargas <hexlabsecurity(a)proton.me> ntfs: bound the attribute-list entry in ntfs_read_inode_mount() Bryam Vargas <hexlabsecurity(a)proton.me> ntfs: bound the look-ahead attribute-list entry in ntfs_external_attr_find() Bryam Vargas <hexlabsecurity(a)proton.me> ntfs: validate resident attribute lists and harden the validator Mark Harmstone <mark(a)harmstone.com> btrfs: don't force DIO writes to be serialized Samuel Moelius <sam.moelius(a)trailofbits.com> thermal: testing: reject missing command arguments Pengjie Zhang <zhangpengjie2(a)huawei.com> cpufreq: Documentation: fix conservative governor freq_step description Tony W Wang-oc <TonyWWang-oc(a)zhaoxin.com> ACPI: processor: Add cpuidle driver check in acpi_processor_register_idle_driver() Yuho Choi <dbgh9129(a)gmail.com> ACPI: IPMI: Fix message kref handling on dead device Sechang Lim <rhkrqnwk98(a)gmail.com> bpf: Fix NULL pointer dereference in bpf_task_from_vpid() Bartosz Golaszewski <bartosz.golaszewski(a)oss.qualcomm.com> powerpc/8xx: implement get_direction() in cpm1 Bryam Vargas <hexlabsecurity(a)proton.me> wifi: mac80211: bound S1G TIM PVB walk to the TIM element David Gow <david(a)davidgow.net> kunit:tool: Don't write to stdout when it should be disabled Mykyta Yatsenko <yatsenko(a)meta.com> bpf: Fix NMI/tracepoint re-entry deadlock on lru locks Christian Brauner <brauner(a)kernel.org> filelock: fix break_lease() stub signature for CONFIG_FILE_LOCKING=n David Carlier <devnexen(a)gmail.com> netfilter: flowtable: avoid num_encaps underflow on bridge VLAN untag David Windsor <dwindsor(a)gmail.com> bpf: Reject sleepable BPF_LSM_CGROUP programs at load time Mykyta Yatsenko <yatsenko(a)meta.com> bpf: Verifier support for sleepable tracepoint programs Thomas Weißschuh <thomas.weissschuh(a)linutronix.de> riscv: alternative: Also patch the CFI vDSO Thomas Weißschuh <thomas.weissschuh(a)linutronix.de> riscv: alternative: Pass vDSO start as parameter to apply_vdso_alternatives() Thomas Weißschuh <thomas.weissschuh(a)linutronix.de> riscv: alternative: Use IS_ENABLED() over ifdeffery for apply_vdso_alternatives() Kyle Zeng <kylebot(a)openai.com> ALSA: seq: Clear variable event pointer on read Rui Qi <qirui.001(a)bytedance.com> riscv: stacktrace: Remove bogus -0x4 offset in non-FP walk_stackframe Hui Wang <hui.wang(a)canonical.com> riscv: cpu_ops: Change return value type of cpu_is_stopped() to bool Cássio Gabriel <cassiogabrielcontato(a)gmail.com> ALSA: pcm: Fix unlocked runtime state reads in xfer ioctls HyeongJun An <sammiee5311(a)gmail.com> ALSA: seq: Fix partial userptr event expansion Tristan Madani <tristan(a)talencesecurity.com> wifi: wcn36xx: fix OOB read from short trigger BA firmware response Tristan Madani <tristan(a)talencesecurity.com> wifi: wcn36xx: fix OOB read from firmware count in PRINT_REG_INFO indication Tristan Madani <tristan(a)talencesecurity.com> wifi: wcn36xx: fix heap overflow from oversized firmware HAL response Christian Brauner <brauner(a)kernel.org> kernfs: link kn to its parent before the LSM init hook Miklos Szeredi <mszeredi(a)redhat.com> simpe_xattr: use per-sb cache Miklos Szeredi <mszeredi(a)redhat.com> simple_xattr: change interface to pass struct simple_xattrs ** Miklos Szeredi <mszeredi(a)redhat.com> tmpfs: simplify constructing "security.foo" xattr names Miklos Szeredi <mszeredi(a)redhat.com> kernfs: fix xattr race condition with multiple superblocks Leon Hwang <leon.hwang(a)linux.dev> bpf: Update transport_header when encapsulating UDP tunnel in lwt Leon Hwang <leon.hwang(a)linux.dev> bpf: Check tail zero of bpf_prog_info Leon Hwang <leon.hwang(a)linux.dev> bpf: Check tail zero of bpf_map_info Kaitao Cheng <chengkaitao(a)kylinos.cn> bpf: Clear rb node linkage when freeing bpf_rb_root Mykyta Yatsenko <yatsenko(a)meta.com> selftests/bpf: Fix flaky file_reader test Bernard Metzler <bernard.metzler(a)linux.dev> RDMA/siw: Fix endpoint/socket association handling Nora Schiffer <nora.schiffer(a)ew.tq-group.com> arm64: dts: freescale: fsl-ls1028a-tqmls1028a-mbls1028a: switch mmc aliases Frieder Schrempf <frieder.schrempf(a)kontron.de> arm64: dts: imx8mp-kontron: Fix GPIO for display power switch Alexander Stein <alexander.stein(a)ew.tq-group.com> arm64: dts: tqma8mpql-mba8mpxl: configure sai clock in audio codec as well Josua Mayer <josua(a)solid-run.com> arm64: dts: lx2162a-clearfog: use rev2 SoC dtsi Richard Zhu <hongxing.zhu(a)nxp.com> arm64: dts: imx95: Correct PCIe outbound address space configuration Alice Guo <alice.guo(a)nxp.com> arm64: dts: imx94: fix DDR PMU interrupt number Frieder Schrempf <frieder.schrempf(a)kontron.de> arm64: dts: imx8mp-kontron: Reduce EERAM SPI clock frequency Jacob Moroni <jmoroni(a)google.com> RDMA/irdma: Initialize iwmr->access during MR registration Jacob Moroni <jmoroni(a)google.com> RDMA/irdma: Fix OOB read during CQ MR registration Oliver Hartkopp <socketcan(a)hartkopp.net> ALSA: hda: fix Kconfig dependency of HD Audio PCI Jason Gunthorpe <jgg(a)ziepe.ca> IB/cm: Fix av cm device leak on an error path in cm_init_av_by_path() Arnd Bergmann <arnd(a)arndb.de> RDMA/hfi1: Open-code rvt_set_ibdev_name() DaeMyung Kang <charsyam(a)gmail.com> ntfs: free link name from ntfs_name_cache Pablo Neira Ayuso <pablo(a)netfilter.org> netfilter: conntrack: call nf_ct_gre_keymap_destroy() if master helper is pptp Pablo Neira Ayuso <pablo(a)netfilter.org> netfilter: conntrack: revert ct extension genid infrastructure Junxiao Chang <junxiao.chang(a)intel.com> x86/cpu: Remove obsolete aperfmperf_get_khz() declaration Shengming Hu <hu.shengming(a)zte.com.cn> mm/slub: preserve original size in _kmalloc_nolock_noprof retry path Cássio Gabriel <cassiogabrielcontato(a)gmail.com> ALSA: usb-audio: qcom: Initialize offload control return value Pablo Neira Ayuso <pablo(a)netfilter.org> netfilter: cttimeout: detach dataplane timeout policy and repurpose refcount Fernando Fernandez Mancera <fmancera(a)suse.de> netfilter: synproxy: protect nf_ct_seqadj_init() with conntrack lock Fernando Fernandez Mancera <fmancera(a)suse.de> netfilter: synproxy: fix unaligned memory access in timestamp adjustment Fernando Fernandez Mancera <fmancera(a)suse.de> netfilter: synproxy: adjust duplicate timestamp options Fernando Fernandez Mancera <fmancera(a)suse.de> netfilter: synproxy: drop packets if timestamp adjustment fails Pablo Neira Ayuso <pablo(a)netfilter.org> netfilter: nfnetlink_cthelper: use {READ,WRITE}_ONCE for accessing helper flags Fernando Fernandez Mancera <fmancera(a)suse.de> netfilter: nfnetlink_osf: fix mss parsing on big-endian architectures Dave Jiang <dave.jiang(a)intel.com> cxl/pci: Convert PCIBIOS errors to errno on DVSEC config accesses Dave Jiang <dave.jiang(a)intel.com> cxl/pci: Fix the incorrect check of pci_read_config_word() return Ian Bridges <icb(a)fastmail.org> ocfs2: fix out-of-bounds write in ocfs2_remove_refcount_extent Joseph Qi <joseph.qi(a)linux.alibaba.com> ocfs2: fix race between ocfs2_control_install_private() and ocfs2_control_release() Zhang Cen <rollkingzzc(a)gmail.com> ocfs2/dlm: require a ref for locking_state debugfs open Zhang Cen <rollkingzzc(a)gmail.com> ocfs2: reject FITRIM ranges shorter than a cluster Zhang Cen <rollkingzzc(a)gmail.com> ocfs2: validate fast symlink target during inode read Dmitry Antipov <dmantipov(a)yandex.ru> ocfs2: fix buffer head management in ocfs2_read_blocks() Thomas Weißschuh <linux(a)weissschuh.net> lib: kunit_iov_iter: repeatedly call alloc_pages_bulk() Zhang Cen <rollkingzzc(a)gmail.com> ocfs2: rebase copied fsdlm LVB pointers in locking_state Wandun Chen <chenwandun(a)lixiang.com> of: reserved_mem: avoid post-init UAF when alloc_reserved_mem_array() fails Alex Deucher <alexander.deucher(a)amd.com> drm/amdkfd: always resume_all after suspend_all Alexei Starovoitov <ast(a)kernel.org> bpf: Take mmap_lock in zap_pages() Dan Williams <djbw(a)kernel.org> cxl/test: Fix __fortify_panic Dan Williams <djbw(a)kernel.org> cxl/fwctl: Fix __fortify_panic Andreas Kemnade <andreas(a)kemnade.info> wifi: wlcore: enable the right set of ciphers Antony Antony <antony.antony(a)secunet.com> xfrm: fix NAT-related field inheritance in SA migration Sandipan Das <sandipan.das(a)amd.com> perf/x86/amd/uncore: Use Node ID to identify DF and UMC domains Zide Chen <zide.chen(a)intel.com> perf/x86/intel/uncore: Fix PCI device refcount leak in UPI discovery Zide Chen <zide.chen(a)intel.com> perf/x86/intel/uncore: Fix discovery unit lookup for multi-die systems Sandipan Das <sandipan.das(a)amd.com> perf/x86/amd/core: Always use the NMI latency mitigation Christian Brauner <brauner(a)kernel.org> eventpoll: wrap EP_UNACTIVE_PTR in typed sentinel helpers Christian Brauner <brauner(a)kernel.org> eventpoll: extract ep_deliver_event() from ep_send_events() Christian Brauner <brauner(a)kernel.org> eventpoll: split ep_insert() into alloc + register stages Christian Brauner <brauner(a)kernel.org> eventpoll: rename attach_epitem() to ep_attach_file() Jeff Layton <jlayton(a)kernel.org> mm: preserve PG_dropbehind flag during folio split Pranjal Shrivastava <praan(a)google.com> iommu/vt-d: Fix RB-tree corruption in probe error path Michael S. Tsirkin <mst(a)redhat.com> vhost: fix vhost_get_avail_idx for a non empty ring Woojin Ji <random6.xyz(a)gmail.com> bpftool: Use libbpf error code for flow dissector query Lizhi Hou <lizhi.hou(a)amd.com> accel/amdxdna: Return errors for failed debug BO commands Yunxiang Li <Yunxiang.Li(a)amd.com> drm/amdgpu: set sub_block_index for mca ras sub-blocks Vitaly Prosyak <vitaly.prosyak(a)amd.com> drm/amd/pm: Add empty string validation to sysfs store functions Vitaly Prosyak <vitaly.prosyak(a)amd.com> drm/amdgpu: fix KASAN slab-out-of-bounds in amdgpu_coredump ring dump Marek Szyprowski <m.szyprowski(a)samsung.com> irqchip/exynos-combiner: Remove useless spinlock Li Chen <me(a)linux.beauty> ext4: fix fast commit wait/wake bit mapping on 64-bit Karl Mehltretter <kmehltretter(a)gmail.com> lockdep/selftests: Restore sched_rt_mutex state on PREEMPT_RT Karl Mehltretter <kmehltretter(a)gmail.com> lockdep/selftests: Restore migrate_disable() state on PREEMPT_RT Al Viro <viro(a)zeniv.linux.org.uk> configfs_lookup(): don't leave ->s_dentry dangling on failure Inochi Amaoto <inochiama(a)gmail.com> riscv: dts: sophgo: sg2042: use hex for CPU unit address Inochi Amaoto <inochiama(a)gmail.com> riscv: dts: sophgo: sg2044: use hex for CPU unit address Alexander Potapenko <glider(a)google.com> lib/test_meminit: use && for bools Frederic Weisbecker <frederic(a)kernel.org> tick/sched: Fix TOCTOU in nohz idle time fetch Daniel Borkmann <daniel(a)iogearbox.net> bpf: Reject exclusive maps for bpf_map_elem iterators Nathan Chancellor <nathan(a)kernel.org> driver core: Use system_percpu_wq instead of system_wq liuxixin <gliuxen(a)gmail.com> nvme: fix FDP fdpcidx bounds check Guanyou.Chen <chenguanyou9338(a)gmail.com> sched: restore timer_slack_ns when resetting RT policy on fork Danila Chernetsov <listdansp(a)mail.ru> ext2: fix ignored return value of generic_write_sync() Sang-Heon Jeon <ekffu200098(a)gmail.com> mm/fake-numa: fix under-allocation detection in uniform split Deepanshu Kartikey <kartikey406(a)gmail.com> bpf: fix UAF by restoring RCU-delayed inode freeing in bpffs Chanwoo Lee <cw9316.lee(a)samsung.com> scsi: ufs: Fix wrong value printed in unexpected UPIU response case Dan Carpenter <error27(a)gmail.com> scsi: pm8001: Fix error code in non_fatal_log_show() Daniel Borkmann <daniel(a)iogearbox.net> libbpf: Skip max_entries override on signed loaders Daniel Borkmann <daniel(a)iogearbox.net> libbpf: Skip initial_value override on signed loaders KP Singh <kpsingh(a)kernel.org> libbpf: Reject non-exclusive metadata maps in the signed loader Daniel Borkmann <daniel(a)iogearbox.net> bpf: Reject exclusive maps as inner maps in map-in-map Martin Wilck <martin.wilck(a)suse.com> scsi: Revert "scsi: Fix sas_user_scan() to handle wildcard and multi-channel scans" Neal Cardwell <ncardwell(a)google.com> tcp_bbr: fix SPDX-License-Identifier to be GPL-2.0 OR BSD-3-Clause Alison Schofield <alison.schofield(a)intel.com> nvdimm/btt: Handle preemption in BTT lane acquisition Randy Dunlap <rdunlap(a)infradead.org> x86/cpu: Keep the PROCESSOR_SELECT menu together Yuho Choi <dbgh9129(a)gmail.com> ARM: imx31: Fix IIM mapping leak in revision check Rafael J. Wysocki <rafael.j.wysocki(a)intel.com> ACPI: button: Fix lid_device value leak past driver removal Bart Van Assche <bvanassche(a)acm.org> ata: libata: Fix ata_exec_internal() Wei Zhang <wei.zhang(a)oss.qualcomm.com> wifi: ath12k: fix NULL deref in change_sta_links for unready link Wei Zhang <wei.zhang(a)oss.qualcomm.com> wifi: ath12k: fix inconsistent arvif state in vdev_create error paths Miaoqing Pan <miaoqing.pan(a)oss.qualcomm.com> wifi: ath12k: fix memory leak in ath12k_wifi7_dp_rx_h_verify_tkip_mic() Kwan Lai Chee Hou <laicheehou9(a)gmail.com> wifi: ath12k: fix incorrect HT/VHT/HE/EHT MCS reporting in monitor mode J. Neuschäfer <j.ne(a)posteo.net> HID: wiimote: Fix table layout and whitespace errors Yuho Choi <dbgh9129(a)gmail.com> ARM: imx3: Fix CCM node reference leak Chuck Lever <chuck.lever(a)oracle.com> NFSD: Fix delegation reference leak in nfsd4_revoke_states John Madieu <john.madieu.xa(a)bp.renesas.com> ASoC: rsnd: Fix RSND_SOC_MASK width to single nibble Carlos Song <carlos.song(a)nxp.com> spi: imx: replace dmaengine_terminate_all() with dmaengine_terminate_sync() Felix Gu <ustc.gu(a)gmail.com> spi: atmel: fix DMA channel and bounce buffer leaks Zhang Yi <yi.zhang(a)huawei.com> ext4: fix LOGFLUSH shutdown ordering to allow ordered-mode data writeback Pasha Tatashin <pasha.tatashin(a)soleen.com> liveupdate: fix u-a-f in luo_file_unpreserve_files() and luo_file_finish() Pasha Tatashin <pasha.tatashin(a)soleen.com> liveupdate: block session mutations during reboot Pasha Tatashin <pasha.tatashin(a)soleen.com> liveupdate: fix TOCTOU race in luo_session_retrieve() Pasha Tatashin <pasha.tatashin(a)soleen.com> liveupdate: skip serialization for context-preserving kexec Daniel Borkmann <daniel(a)iogearbox.net> libbpf: Skip endianness swap when loader generation failed Daniel Borkmann <daniel(a)iogearbox.net> libbpf: Skip hash computation when loader generation failed David Matlack <dmatlack(a)google.com> liveupdate: Reference count incoming FLB data David Matlack <dmatlack(a)google.com> liveupdate: Use refcount_t for FLB reference counts Yuyang Huang <yuyanghuang(a)google.com> selftests/bpf: add verification for BPF_PROG_QUERY attr size boundaries Yuyang Huang <yuyanghuang(a)google.com> bpf: fix BPF_PROG_QUERY OOB write and cgroup backward compat Abd-Alrhman Masalkhi <abd.masalkhi(a)gmail.com> raid1: fix nr_pending leak in REQ_ATOMIC bad-block error path Abd-Alrhman Masalkhi <abd.masalkhi(a)gmail.com> md/raid1,raid10: fix bio accounting for split md cloned bios Abd-Alrhman Masalkhi <abd.masalkhi(a)gmail.com> md/raid1,raid10: fix error-path detection with md_cloned_bio() Abd-Alrhman Masalkhi <abd.masalkhi(a)gmail.com> md/raid1,raid10: fix deadlock in read error recovery path Chen Cheng <chencheng(a)fnnas.com> md/raid10: reset read_slot when reusing r10bio for discard Marek Vasut <marek.vasut+renesas(a)mailbox.org> arm64: dts: renesas: ironhide: Describe all reserved memory Marek Vasut <marek.vasut+renesas(a)mailbox.org> arm64: dts: renesas: r8a78000: Fix GIC-720AE View 1 Redistributor description Danilo Krummrich <dakr(a)kernel.org> rpmsg: use generic driver_override infrastructure Danilo Krummrich <dakr(a)kernel.org> Drivers: hv: vmbus: use generic driver_override infrastructure Danilo Krummrich <dakr(a)kernel.org> cdx: use generic driver_override infrastructure Danilo Krummrich <dakr(a)kernel.org> amba: use generic driver_override infrastructure Renjiang Han <renjiang.han(a)oss.qualcomm.com> media: qcom: venus: relax encoder frame/blur step size on v6 Renjiang Han <renjiang.han(a)oss.qualcomm.com> media: qcom: venus: relax encoder frame/blur dimension steps on v4 Renjiang Han <renjiang.han(a)oss.qualcomm.com> media: qcom: venus: drop extra padding in NV12 raw size calculation Dmitry Baryshkov <dmitry.baryshkov(a)oss.qualcomm.com> Revert "media: venus: hfi_platform: Correct supported codecs for sc7280" Yixun Lan <dlan(a)kernel.org> dts: riscv: spacemit: k3: Fix I/O power settings Tristan Madani <tristmd(a)gmail.com> RDMA/rxe: Copy WQE to local buffer in non-SRQ receive path Tristan Madani <tristmd(a)gmail.com> RDMA/rxe: Fix TOCTOU heap overflow in get_srq_wqe Jiri Pirko <jiri(a)resnulli.us> RDMA/umem: Add ib_umem_is_contiguous() stub for !CONFIG_INFINIBAND_USER_MEM Jinseok Kim <always.starving0(a)gmail.com> arm: dts: bcm2711: Fix typo in gpio-line-names Marek Vasut <marex(a)nabladev.com> arm64: dts: st: Fix SAI addresses on stm32mp251 zhoumin <teczm(a)foxmail.com> EDAC/{skx_common,skx}: Fix UBSAN shift-out-of-bounds in skx_get_dimm_info Qiuxu Zhuo <qiuxu.zhuo(a)intel.com> EDAC/igen6: Fix memory topology parsing for Panther Lake-H SoCs Qiuxu Zhuo <qiuxu.zhuo(a)intel.com> EDAC/igen6: Fix call trace due to missing release() Akhil P Oommen <akhilpo(a)oss.qualcomm.com> drm/msm/a8xx: Fix RSCC offset Akhil P Oommen <akhilpo(a)oss.qualcomm.com> drm/msm/a8xx: Make a8xx_recover IFPC safe Arnd Bergmann <arnd(a)arndb.de> firmware: samsung: acpm: remove compile-testing stubs Tudor Ambarus <tudor.ambarus(a)linaro.org> firmware: samsung: acpm: Add devm_acpm_get_by_phandle helper Jessica Zhang <jesszhan0024(a)gmail.com> drm/msm/dp: Fix the ISR_* enum values Jessica Zhang <jesszhan0024(a)gmail.com> drm/msm/dp: fix HPD state status bit shift value Andrea Righi <arighi(a)nvidia.com> sched/deadline: Reject debugfs dl_server writes for offline CPUs Alexey Kardashevskiy <aik(a)amd.com> crypto: ccp/tsm - Enable the root port after the endpoint Herbert Xu <herbert(a)gondor.apana.org.au> crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm Herbert Xu <herbert(a)gondor.apana.org.au> crypto: tegra - Fix dma_free_coherent size error Aleksander Jan Bajkowski <olek2(a)wp.pl> crypto: inside-secure/eip93 - Add check for devm_request_threaded_irq Weili Qian <qianweili(a)huawei.com> crypto: hisilicon/qm - disable error report before flr Tetsuo Handa <penguin-kernel(a)I-love.SAKURA.ne.jp> ocfs2: kill osb->system_file_mutex lock ZhengYuan Huang <gality369(a)gmail.com> ocfs2: don't BUG_ON an invalid journal dinode Dan Carpenter <error27(a)gmail.com> rapidio/tsi721: prevent a bad dereference in tsi721_db_dpc() Yury Norov <ynorov(a)nvidia.com> uaccess: minimize INLINE_COPY_USER-related ifdefery Yury Norov <ynorov(a)nvidia.com> uaccess: unify inline vs outline copy_{from,to}_user() selection Yury Norov <ynorov(a)nvidia.com> rust: uaccess: use INLINE_COPY_TO_USER to guard copy_to_user() Josh Law <objecting(a)objecting.org> lib/base64: validate before writing in decode tail path Davidlohr Bueso <dave(a)stgolabs.net> dax/kmem: account for partial discontiguous resource upon removal Danilo Krummrich <dakr(a)kernel.org> rust: devres: add 'static bound to Devres<T> Brian Norris <briannorris(a)chromium.org> arm64: tegra: Add #{address,size}-cells to Chromium-based /firmware Brian Norris <briannorris(a)chromium.org> ARM: tegra: Add #{address,size}-cells to Chromium-based /firmware Carlos Llamas <cmllamas(a)google.com> libbpf: Fix UAF in strset__add_str() Siddharth Nayyar <sidnayyar(a)google.com> bpftool: Fix typo in struct_ops map FD generation for light skeleton Michael Bommarito <michael.bommarito(a)gmail.com> libbpf: Harden parse_vma_segs() path parsing Timur Tabi <ttabi(a)nvidia.com> drm/nouveau/bios: specify correct display fuse register for Ampere and Ada Mikko Perttunen <mperttunen(a)nvidia.com> drm/tegra: Fix iommu_map_sgtable() return value check Mikko Perttunen <mperttunen(a)nvidia.com> gpu: host1x: Fix iommu_map_sgtable() return value check Felix Gu <ustc.gu(a)gmail.com> drm/tegra: dc: Fix device node reference leak in tegra_dc_has_output() Felix Gu <ustc.gu(a)gmail.com> gpu: host1x: mipi: Fix device_node reference leak in tegra_mipi_request() Thomas Zimmermann <tzimmermann(a)suse.de> drm/tegra: fbdev: Do not assign to struct drm_fb_helper.info Mikko Perttunen <mperttunen(a)nvidia.com> gpu: host1x: Allow entries in BO caches to be freed Ion Agorria <ion(a)agorria.com> drm/tegra: gr2d/gr3d: Contain PM in the gr*d_probe/gr*d_remove Svyatoslav Ryhel <clamor95(a)gmail.com> drm/tegra: gr2d/gr3d: Initialize address register map before HOST1X client is registered Tomas Glozar <tglozar(a)redhat.com> rtla/actions: Restore continue flag in actions_perform() Linus Walleij <linusw(a)kernel.org> dt-bindings: vendor-prefixes: Add Verbatim Corporation Jackie Dong <xy-jackie(a)139.com> ALSA: hda/realtek:ALC269 fixup for Yoga Pro 7 15ASH11 mic mute LED Vasant Hegde <vasant.hegde(a)amd.com> iommu/amd: Fix premature break in init_iommu_one() Jiayuan Chen <jiayuan.chen(a)linux.dev> net/sched: cls_bpf: prevent unbounded recursion in offload rollback Eric Dumazet <edumazet(a)google.com> ipv6: guard against possible NULL deref in __in6_dev_stats_get() Breno Leitao <leitao(a)debian.org> workqueue: drop spurious '*' from print_worker_info() fn declaration Mateusz Nowicki <mateusz.nowicki(a)posteo.net> nvme-pci: fix out-of-bounds access in nvme_setup_descriptor_pools Nilay Shroff <nilay(a)linux.ibm.com> nvme-multipath: fix flex array size in struct nvme_ns_head Geliang Tang <geliang(a)kernel.org> nvmet-tcp: check return value of nvmet_tcp_set_queue_sock Geliang Tang <geliang(a)kernel.org> nvmet-tcp: fix page fragment cache leak in error path Jia He <justin.he(a)arm.com> init/initramfs_test: wait_for_initramfs() before running Charles Keepax <ckeepax(a)opensource.cirrus.com> pinctrl: cs42l43: Fix polarity on debounce Charles Keepax <ckeepax(a)opensource.cirrus.com> pinctrl: cs42l43: Fix leaked pm reference on error path Joey Lu <a0987203069(a)gmail.com> pinctrl: nuvoton: ma35d1: fix MFP register offset and pin table Florian Schmaus <flo(a)geekplace.eu> selftests: Fix Makefile target for nsfs Zhang Cen <rollkingzzc(a)gmail.com> ALSA: seq: midi: Serialize output teardown with event_input Takashi Iwai <tiwai(a)suse.de> ALSA: seq: oss: Fix UAF at handling events with embedded SysEx data Cássio Gabriel <cassiogabrielcontato(a)gmail.com> ALSA: xen-front: Connect event channel after stream prepare Cássio Gabriel <cassiogabrielcontato(a)gmail.com> ALSA: xen-front: Reset event channel state on stream clear Zhongqiu Han <zhongqiu.han(a)oss.qualcomm.com> cpufreq: governor: Fix stale prev_cpu_nice spike when enabling ignore_nice_load Zhongqiu Han <zhongqiu.han(a)oss.qualcomm.com> cpufreq: governor: Fix data races on per-CPU idle/nice baselines Ripan Deuri <ripan.deuri(a)oss.qualcomm.com> wifi: ath12k: fix error unwind on arch_init() failure in PCI probe Miquel Raynal <miquel.raynal(a)bootlin.com> mtd: spi-nor: Drop duplicate Kconfig dependency Miquel Raynal <miquel.raynal(a)bootlin.com> mtd: spi-nor: debugfs: Fix the flags list Jon Hunter <jonathanh(a)nvidia.com> arm64: tegra: Fix address of Tegra264 main GPIO controller Danilo Krummrich <dakr(a)kernel.org> driver core: Guard deferred probe timeout extension with delayed_work_pending() Danilo Krummrich <dakr(a)kernel.org> driver core: Fix missing jiffies conversion in deferred_probe_extend_timeout() Rosen Penev <rosenp(a)gmail.com> mips: n64: add __iomem for writel call Rosen Penev <rosenp(a)gmail.com> mips: ralink: mt7621: add missing __iomem Maciej W. Rozycki <macro(a)orcam.me.uk> MIPS: DEC: Remove do_IRQ() call indirection Maciej W. Rozycki <macro(a)orcam.me.uk> MIPS: Fix big-endian stack argument fetching in o32 wrapper Jiakai Xu <xujiakai24(a)mails.ucas.ac.cn> PM: sleep: Use complete() in device_pm_sleep_init() Xianwei Zhao <xianwei.zhao(a)amlogic.com> pinctrl: meson: amlogic-a4: fix gpio output glitch Tao Cui <cuitao(a)kylinos.cn> RDMA/counter: Fix incorrect port index in rdma_counter_init() error cleanup Rafael J. Wysocki <rafael.j.wysocki(a)intel.com> ACPI: PAD: Fix teardown ordering in acpi_pad_remove() Lianfa Weng <wenglianfa(a)huawei.com> RDMA/hns: Fix log flood after cmd_mbox failure Lianfa Weng <wenglianfa(a)huawei.com> RDMA/hns: Fix warning in poll cq direct mode Eliot Courtney <ecourtney(a)nvidia.com> gpu: nova-core: vbios: use checked accesses in `setup_falcon_data` Eliot Courtney <ecourtney(a)nvidia.com> gpu: nova-core: vbios: use checked access in `FwSecBiosImage::header` Eliot Courtney <ecourtney(a)nvidia.com> gpu: nova-core: vbios: use checked ops and accesses in `FwSecBiosImage::ucode` Eliot Courtney <ecourtney(a)nvidia.com> gpu: nova-core: vbios: read BitToken using FromBytes Eliot Courtney <ecourtney(a)nvidia.com> gpu: nova-core: vbios: avoid reading too far in read_more_at_offset Eliot Courtney <ecourtney(a)nvidia.com> gpu: nova-core: vbios: use checked arithmetic for bios image range end Eliot Courtney <ecourtney(a)nvidia.com> gpu: nova-core: vbios: stop scanning at BIOS_MAX_SCAN_LEN Guangshuo Li <lgs201920130244(a)gmail.com> IB/mlx4: Fix refcount leak in add_port() error path Zhu Yanjun <yanjun.zhu(a)linux.dev> RDMA/rxe: Fix a use-after-free problem in rxe_mmap Jacob Moroni <jmoroni(a)google.com> RDMA/irdma: Fix out-of-bounds write in irdma_copy_user_pgaddrs Chancel Liu <chancel.liu(a)nxp.com> ASoC: dapm: Fix widget lookup with prefixed names across DAPM contexts Han Gao <gaohan(a)iscas.ac.cn> pinctrl: spacemit: fix NULL check in spacemit_pin_set_config Samuel Holland <samuel(a)sholland.org> bus: sunxi-rsb: Always check register address validity Daniel Palmer <daniel(a)thingy.jp> tools/nolibc: stackprotector: Avoid stalling program startup if crng is not init yet Shiraz Saleem <shirazsaleem(a)microsoft.com> RDMA/mana_ib: Use ib_get_eth_speed for reporting port speed Ronaldo Nunez <rnunez(a)baylibre.com> pwm: imx27: Fix variable truncation in .apply() Lifeng Zheng <zhenglifeng1(a)huawei.com> cpufreq: conservative: Simplify frequency limit handling Pengjie Zhang <zhangpengjie2(a)huawei.com> cpufreq: Documentation: fix sampling_down_factor range Dmitry Baryshkov <dmitry.baryshkov(a)oss.qualcomm.com> drm/msm/mdss: correct UBWC programming sequences Cássio Gabriel <cassiogabrielcontato(a)gmail.com> ASoC: mediatek: mt8189: Fix probe resource cleanup Aleksander Jan Bajkowski <olek2(a)wp.pl> crypto: eip93 - fix reset ring register definition Saravana Kannan <saravanak(a)kernel.org> of: dynamic: Fix overlayed devices not probing because of fw_devlink Saravana Kannan <saravanak(a)kernel.org> Revert "treewide: Fix probing of devices in DT overlays" Zhang Yuwei <zhangyuwei20(a)huawei.com> driver core: Use mod_delayed_work to prevent lost deferred probe work Stepan Ionichev <sozdayvek(a)gmail.com> device property: fix fwnode reference leak in fwnode_graph_get_endpoint_by_id() Conor Kotwasinski <conorkotwasinski2024(a)u.northwestern.edu> kernfs: fix suspicious RCU usage in kernfs_put() Baokun Li <libaokun(a)linux.alibaba.com> writeback: drop now-unnecessary rcu_barrier() in cgroup_writeback_umount() Joel Selvaraj <foss(a)joelselvaraj.com> arm64: dts: qcom: sdm845-xiaomi-beryllium: Correct IPA FW path Gopikrishna Garmidi <gopikrishna.garmidi(a)oss.qualcomm.com> arm64: dts: qcom: glymur: Fix wrong interrupt number for i2c19 Ritesh Kumar <quic_riteshk(a)quicinc.com> arm64: dts: qcom: lemans: Add eDP ref clock for eDP PHYs Pengpeng Hou <pengpeng(a)iscas.ac.cn> tracing: Bound synthetic-field strings with seq_buf Harshal Dev <harshal.dev(a)oss.qualcomm.com> arm64: dts: qcom: sm8750: Add power-domain and iface clk for ice node Harshal Dev <harshal.dev(a)oss.qualcomm.com> arm64: dts: qcom: sm8650: Add power-domain and iface clk for ice node Harshal Dev <harshal.dev(a)oss.qualcomm.com> arm64: dts: qcom: sm8550: Add power-domain and iface clk for ice node Harshal Dev <harshal.dev(a)oss.qualcomm.com> arm64: dts: qcom: sm8450: Add power-domain and iface clk for ice node Harshal Dev <harshal.dev(a)oss.qualcomm.com> arm64: dts: qcom: kodiak: Add power-domain and iface clk for ice node Harshal Dev <harshal.dev(a)oss.qualcomm.com> arm64: dts: qcom: sc7180: Add power-domain and iface clk for ice node Harshal Dev <harshal.dev(a)oss.qualcomm.com> arm64: dts: qcom: monaco: Add power-domain and iface clk for ice node Harshal Dev <harshal.dev(a)oss.qualcomm.com> arm64: dts: qcom: lemans: Add power-domain and iface clk for ice node Harshal Dev <harshal.dev(a)oss.qualcomm.com> arm64: dts: qcom: kaanapali: Add power-domain and iface clk for ice node Abel Vesa <abel.vesa(a)oss.qualcomm.com> arm64: dts: qcom: eliza-mtp: Fix the debug UART index Geert Uytterhoeven <geert+renesas(a)glider.be> firmware: arm_scmi: Fix OOB in scmi_power_name_get() Sven Püschel <s.pueschel(a)pengutronix.de> media: rockchip: rga: fix too small buffer size Nishanth Sampath Kumar <nissampa(a)cisco.com> regmap-i2c: fix sparse warning in regmap_smbus_word_write_reg16 Eric Dumazet <edumazet(a)google.com> net/sched: sch_drr: annotate data-races around cl->deficit GuoHan Zhao <zhaoguohan(a)kylinos.cn> vfio/xe: avoid duplicate reset in xe_vfio_pci_reset_done Hongling Zeng <zenghongling(a)kylinos.cn> nilfs2: Fix return in nilfs_mkdir David Matlack <dmatlack(a)google.com> vfio: selftests: Allow builds when ARCH=x86 Jason Gunthorpe <jgg(a)ziepe.ca> vfio: selftests: Fix out-of-tree build with make O= Daniel Palmer <daniel(a)thingy.jp> tools/nolibc: getopt: Fix potential out of bounds access Chen-Yu Tsai <wenst(a)chromium.org> regulator: dt-bindings: mt6359: Drop regulator-name pattern restrictions Randy Dunlap <rdunlap(a)infradead.org> bitops: use common function parameter names Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> sysfs: clamp show() return value in sysfs_kf_read() Guoniu Zhou <guoniu.zhou(a)oss.nxp.com> media: synopsys: Fix IPI using hardcoded datatype Sudeep Holla <sudeep.holla(a)kernel.org> firmware: arm_scmi: Read sensor config as 32-bit value Andre Przywara <andre.przywara(a)arm.com> firmware: smccc: Fix Arm SMCCC SOC_ID name call Aurelien Jarno <aurelien(a)aurel32.net> riscv: dts: spacemit: fix uboot partition offset on Milk-V Jupiter Aurelien Jarno <aurelien(a)aurel32.net> riscv: dts: spacemit: set console baud rate on Milk-V Jupiter Jose A. Perez de Azpillaga <azpijr(a)gmail.com> staging: media: atomisp: fix loop shadowing in ia_css_stream_destroy() Yuho Choi <dbgh9129(a)gmail.com> media: atomisp: gc2235: fix UAF and memory leak Zilin Guan <zilin(a)seu.edu.cn> media: atomisp: Fix memory leak in atomisp_fixed_pattern_table() Viacheslav Dubeyko <slava(a)dubeyko.com> hfs: fix incorrect inode ID assignment in hfs_new_inode() Sherry Sun <sherry.sun(a)nxp.com> arm64: dts: imx95-19x19-evk: Fix PCIe EP vpcie-supply Sherry Sun <sherry.sun(a)nxp.com> arm64: dts: imx8qxp-mek: Remove unnecessary PCIe EP vpcie-supply Sherry Sun <sherry.sun(a)nxp.com> arm64: dts: imx8dxl-evk: Remove unnecessary PCIe EP properties Francesco Dolcini <francesco.dolcini(a)toradex.com> arm64: dts: freescale: imx95-verdin-ivy: fix RS485 RTS polarity Jamie Nguyen <jamien(a)nvidia.com> firmware: arm_ffa: Honor partition info descriptor size Kevin Brodsky <kevin.brodsky(a)arm.com> selftests/mm: Fix resv_sz when parsing arm64 signal frame Vincent Guittot <vincent.guittot(a)linaro.org> sched/fair: Update util_est after updating util_avg during dequeue Bibek Kumar Patro <bibek.patro(a)oss.qualcomm.com> iommu/arm-smmu-qcom: Fix fastrpc compatible string in ACTLR client match table Paul Chaignon <paul.chaignon(a)gmail.com> selftests/bpf: Fix test for refinement of single-value tnum Roman Kvasnytskyi <roman(a)kvasnytskyi.net> selftests/bpf: Reject unsupported -k option in vmtest.sh Paul Chaignon <paul.chaignon(a)gmail.com> selftests/bpf: Override EXTRA_LDFLAGS for static builds Fengnan Chang <changfengnan(a)bytedance.com> dm: limit target bio polling to one shot Liviu Dudau <liviu.dudau(a)arm.com> drm/syncobj: Fix memory leak in drm_syncobj_find_fence() Crystal Wood <crwood(a)redhat.com> rtla: Stop the record trace on interrupt Costa Shulyupin <costa.shul(a)redhat.com> tools/rtla: Fix --dump-tasks usage in timerlat Junxian Huang <huangjunxian6(a)hisilicon.com> RDMA/hns: Initialize seqfile before creating file Sara Venkatesh <sarajvenkatesh(a)gmail.com> RDMA/srpt: fix integer overflow in immediate data length check Prathamesh Deshpande <prathameshdeshpande7(a)gmail.com> RDMA/mlx5: Fix devx subscribe-event unwind NULL dereference Prathamesh Deshpande <prathameshdeshpande7(a)gmail.com> RDMA/mlx5: Fix UMR XLT cleanup on ODP populate failure Alexander Chesnokov <Alexander.Chesnokov(a)kaspersky.com> RDMA/hns: Fix arithmetic overflow in calc_hem_config() Prathamesh Deshpande <prathameshdeshpande7(a)gmail.com> IB/mlx5: Fix transport-domain rollback and initialize lb mutex earlier Linmao Li <lilinmao(a)kylinos.cn> ipv6: addrconf: bail out of dad_failure when state is no longer POSTDAD Eric Dumazet <edumazet(a)google.com> net/sched: sch_htb: annotate data-races (I) Eric Dumazet <edumazet(a)google.com> net/sched: sch_htb: do not change sch->flags in htb_dump() Eric Dumazet <edumazet(a)google.com> net/sched: sch_dualpi2: annotate data-races in dualpi2_dump_stats() Eric Dumazet <edumazet(a)google.com> net/sched: add qdisc_qlen_inc() and qdisc_qlen_dec() Qiang Ma <maqianga(a)uniontech.com> spi: hisi-kunpeng: Use dev_err_probe() for host registration failure Abdun Nihaal <nihaal(a)cse.iitm.ac.in> crypto: safexcel - Fix potential memory leak in safexcel_pci_probe() Stepan Ionichev <sozdayvek(a)gmail.com> crypto: ccp/sev-dev-tsm - bail out early when pdev->bus is NULL Herbert Xu <herbert(a)gondor.apana.org.au> crypto: af_alg - Cap AEAD AD length to 0x80000000 Sean Christopherson <seanjc(a)google.com> crypto: ccp - Treat zero-length cert chain as query for blob lengths Yihang Li <liyihang9(a)huawei.com> scsi: hisi_sas: Add slave_destroy interface for v3 hw Eric Dumazet <edumazet(a)google.com> net/sched: sch_hfsc: annotate data-races in hfsc_dump_class_stats() Stepan Ionichev <sozdayvek(a)gmail.com> clk: scpi: Unregister child clock providers on remove Rafael J. Wysocki <rafael.j.wysocki(a)intel.com> thermal: hwmon: Register a hwmon device for each thermal zone Rafael J. Wysocki <rafael.j.wysocki(a)intel.com> thermal: hwmon: Fix critical temperature attribute removal Pengpeng Hou <pengpeng(a)iscas.ac.cn> evm: terminate and bound the evm_xattrs read buffer Lin He <helin52(a)huawei.com> drm/hisilicon/hibmc: use clock to look up the PLL value Lin He <helin52(a)huawei.com> drm/hisilicon/hibmc: move display contrl config to hibmc_probe() Lin He <helin52(a)huawei.com> drm/hisilicon/hibmc: fix no showing when no connectors connected Lin He <helin52(a)huawei.com> drm/hisilicon/hibmc: add updating link cap in DP detect() Rafael J. Wysocki <rafael.j.wysocki(a)intel.com> platform/chrome: wilco_ec: event: Check ACPI_COMPANION() Rafael J. Wysocki <rafael.j.wysocki(a)intel.com> platform/chrome: chromeos_tbmc: Check ACPI_COMPANION() Rafael J. Wysocki <rafael.j.wysocki(a)intel.com> platform/chrome: chromeos_privacy_screen: Check ACPI_COMPANION() Kuldeep Singh <kuldeep.singh(a)oss.qualcomm.com> arm64: dts: qcom: sm8450: Fix ICE reg size Kuldeep Singh <kuldeep.singh(a)oss.qualcomm.com> arm64: dts: qcom: kodiak: Fix ICE reg size Krzysztof Kozlowski <krzysztof.kozlowski(a)oss.qualcomm.com> arm64: dts: qcom: sm8750: Fix DSI1 phy reference clock rate Cristian Marussi <cristian.marussi(a)arm.com> clk: scmi: Fix clock rate rounding Hsiu Che Yu <yu.whisper.personal(a)gmail.com> rust: alloc: fix `Vec::extend_with` SAFETY comment Christian Brauner <brauner(a)kernel.org> rhashtable: give each instance its own lockdep class Abel Vesa <abel.vesa(a)oss.qualcomm.com> arm64: dts: qcom: glymur: Mark USB SS1 and SS2 as role-switch capable Abel Vesa <abel.vesa(a)oss.qualcomm.com> arm64: dts: qcom: glymur-crd: Drop forced host mode for USB SS0 and SS1 Yang Wang <kevinyang.wang(a)amd.com> drm/amdgpu: fix error return code in mes_v12_1_map_test_bo Breno Leitao <leitao(a)debian.org> workqueue: forbid TEST_WORKQUEUE from being built-in Chen-Yu Tsai <wenst(a)chromium.org> arm64: dts: mediatek: mt8192-asurada: Move PCIe DMA bounce buffer to host Frank Wunderlich <frank-w(a)public-files.de> arm64: dts: mediatek: mt7988a-bpi-r4pro: rework pcie gpio-hog handling Stefan Metzmacher <metze(a)samba.org> sockptr: fix usize check in copy_struct_from_sockptr() for user pointers Stefan Metzmacher <metze(a)samba.org> uaccess: fix ignored_trailing logic in copy_struct_to_user() Matt Bobrowski <mattbobrowski(a)google.com> bpf: fix crash in bpf_[set|remove]_dentry_xattr for negative dentries Luca Leonardo Scorcia <l.scorcia(a)gmail.com> soc: mediatek: mtk-mmsys: Restore MT8167 routing masks lost during merge Sean Christopherson <seanjc(a)google.com> iommu/amd: Fix a stale comment about which legacy mode is user visible Dmitry Baryshkov <dmitry.baryshkov(a)oss.qualcomm.com> media: venus: scale MMCX power domain on SM8250 Dmitry Baryshkov <dmitry.baryshkov(a)oss.qualcomm.com> media: iris: scale MMCX power domain on SM8250 Shawn Guo <shengchao.guo(a)oss.qualcomm.com> arm64: dts: qcom: lemans: Move PCIe devices into soc node Nickolay Goppen <setotau(a)mainlining.org> arm64: dts: qcom: sdm630: set adsp compute-cbs' regs properly Nickolay Goppen <setotau(a)mainlining.org> arm64: dts: qcom: sdm660: set cdsp compute-cbs' regs properly Yixun Lan <dlan(a)kernel.org> dts: riscv: spacemit: correct 32k clock frequency Wenmeng Liu <wenmeng.liu(a)oss.qualcomm.com> media: qcom: camss: vfe: fix PIX subdev naming on VFE lite Leon Romanovsky <leon(a)kernel.org> ntb: Use consistent DMA attributes when freeing DMA mappings Leon Romanovsky <leon(a)kernel.org> ntb: Store original DMA address for future release Shuangpeng Bai <shuangpeng.kernel(a)gmail.com> nilfs2: fix backing_dev_info reference leak Alexander Aring <aahringo(a)redhat.com> dlm: fix add msg handle in send_queue ordered Lizhi Hou <lizhi.hou(a)amd.com> accel/amdxdna: Fix clflush buffer size Krzysztof Kozlowski <krzysztof.kozlowski(a)oss.qualcomm.com> ARM: multi_v7_defconfig: Correct QCOM_RPMH and QCOM_RPMHPD Weiming Shi <bestswngs(a)gmail.com> crypto: asymmetric_keys - fix OOB read in pefile_digest_pe_contents Thorsten Blum <thorsten.blum(a)linux.dev> crypto: ecrdsa - fix unknown OID check in ecrdsa_param_curve Lothar Rubusch <l.rubusch(a)gmail.com> crypto: atmel-sha204a - fix blocking and non-blocking rng logic Tycho Andersen (AMD) <tycho(a)kernel.org> crypto: ccp - Initialize data during __sev_snp_init_locked() Tycho Andersen (AMD) <tycho(a)kernel.org> crypto: ccp - Check for page allocation failure correctly in TIO Tycho Andersen (AMD) <tycho(a)kernel.org> crypto: ccp - Fix snp_filter_reserved_mem_regions() off-by-one Tycho Andersen (AMD) <tycho(a)kernel.org> crypto: ccp - Reverse the cleanup order in psp_dev_destroy() Di Shen <di.shen(a)unisoc.com> OPP: Fix race between OPP addition and lookup Zhan Xusheng <zhanxusheng1024(a)gmail.com> alarmtimer: Remove stale return description from alarm_handle_timer() Chris Brandt <chris.brandt(a)renesas.com> drm: renesas: rz-du: mipi_dsi: Fix return path on error Kuniyuki Iwashima <kuniyu(a)google.com> vxlan: Fix potential null-ptr-deref in vxlan_gro_prepare_receive(). Peng Fan <peng.fan(a)nxp.com> Revert "arm64: dts: imx8mp-kontron: Add support for reading SD_VSEL signal" Peng Fan <peng.fan(a)nxp.com> Revert "arm64: dts: imx8mm-kontron: Add support for reading SD_VSEL signal" Krzysztof Kozlowski <krzysztof.kozlowski(a)oss.qualcomm.com> arm64: dts: imx8mp-ab2: Correct interrupt flags Krzysztof Kozlowski <krzysztof.kozlowski(a)oss.qualcomm.com> arm64: dts: imx8mn-vhip4-evalboard-v2: Correct interrupt flags Krzysztof Kozlowski <krzysztof.kozlowski(a)oss.qualcomm.com> arm64: dts: imx8mn-vhip4-evalboard-v1: Correct interrupt flags Peng Fan <peng.fan(a)nxp.com> arm64: dts: imx8x-colibri: Correct SODIMM PAD settings Weixin Guo <2298701336(a)qq.com> arm64: dts: rockchip: fix rk809 interrupt pin on rk3566-roc-pc Brian Norris <briannorris(a)chromium.org> arm64: dts: rockchip: Add #{address,size}-cells to Chromium-based /firmware Brian Norris <briannorris(a)chromium.org> ARM: dts: rockchip: Add #{address,size}-cells to Chromium-based /firmware Duje Mihanović <duje(a)dujemihanovic.xyz> arm64: dts: marvell: samsung-coreprimevelte: Increase touchscreen voltage Conor Dooley <conor.dooley(a)microchip.com> riscv: dts: microchip: fix pic64gx gpio interrupt-cells Conor Dooley <conor.dooley(a)microchip.com> riscv: dts: microchip: update pic64gx gpio interrupts to better match the SoC David Heidelberg <david(a)ixit.cz> drm/panel: Clean up S6E3HA2 config dependencies and fill help text David Heidelberg <david(a)ixit.cz> drm/panel: Clean up S6E3FC2X01 config dependencies Marijn Suijten <marijn.suijten(a)somainline.org> drm/panel: Clean up SOFEF00 config dependencies Peddolla Harshavardhan Reddy <peddolla.reddy(a)oss.qualcomm.com> wifi: cfg80211: restrict LMR feedback check to TB and non-TB ranging Alice Ryhl <aliceryhl(a)google.com> drm/gpuvm: take refcount on DRM device Marek Vasut <marex(a)nabladev.com> dt-bindings: vendor-prefixes: Add Displaytech Ltd. Conor Dooley <conor.dooley(a)microchip.com> riscv: dts: microchip: remove gpio hogs from beaglev-fire Conor Dooley <conor.dooley(a)microchip.com> riscv: dts: microchip: gpio controllers on mpfs need 2 interrupt cells Felix Gu <ustc.gu(a)gmail.com> pinctrl: sunxi: fix regulator leak in sunxi_pmx_request() error path Conor Dooley <conor.dooley(a)microchip.com> dts: spacemit: set console baud rate on bpif3 Masami Hiramatsu (Google) <mhiramat(a)kernel.org> lib/vsprintf: Fix to check field_width and precision Damian Muszynski <damian.muszynski(a)intel.com> crypto: qat - fix heartbeat error injection Josh Poimboeuf <jpoimboe(a)kernel.org> klp-build: Fix patch cleanup on interrupt Josh Poimboeuf <jpoimboe(a)kernel.org> klp-build: Fix checksum comparison for changed offsets Josh Poimboeuf <jpoimboe(a)kernel.org> klp-build: Fix hang on out-of-date .config Josh Poimboeuf <jpoimboe(a)kernel.org> objtool: Fix reloc hash collision in find_reloc_by_dest_range() Josh Poimboeuf <jpoimboe(a)kernel.org> objtool: Replace iterator callback with for_each_sym_by_mangled_name() Josh Poimboeuf <jpoimboe(a)kernel.org> objtool/klp: Fix relocation conversion failures for R_X86_64_NONE Josh Poimboeuf <jpoimboe(a)kernel.org> objtool/klp: Fix extraction of text annotations for alternatives Josh Poimboeuf <jpoimboe(a)kernel.org> objtool/klp: Fix cloning of zero-length section symbols Josh Poimboeuf <jpoimboe(a)kernel.org> objtool/klp: Fix handling of zero-length .altinstr_replacement sections Joe Lawrence <joe.lawrence(a)redhat.com> objtool/klp: Fix create_fake_symbols() skipping entsize-based sections Josh Poimboeuf <jpoimboe(a)kernel.org> objtool/klp: Fix .data..once static local non-correlation Joe Lawrence <joe.lawrence(a)redhat.com> objtool/klp: Fix is_uncorrelated_static_local() for Clang Ashish Mhetre <amhetre(a)nvidia.com> memory: tegra: Wire up system sleep PM ops Icenowy Zheng <zhengxingda(a)iscas.ac.cn> drm: verisilicon: call atomic helper's plane state check even if no CRTC Nas Chung <nas.chung(a)chipsnmedia.com> media: v4l2-common: Add YUV24 format info Samuel Holland <samuel(a)sholland.org> media: cedrus: Fix failure to clean up hardware on probe failure Felix Gu <ustc.gu(a)gmail.com> watchdog: sprd_wdt: Remove redundant sprd_wdt_disable() on register failure Balakrishnan Sambath <balakrishnan.s(a)microchip.com> watchdog: sama5d4_wdt: Fix WDDIS detection on SAM9X60 and SAMA7G5 Yingjie Gao <gaoyingjie(a)uniontech.com> watchdog: sp5100_tco: Use EFCH MMIO for newer Hygon FCH Gabriele Monaco <gmonaco(a)redhat.com> Documentation/rv: Replace stale website link Aleksandr Loktionov <aleksandr.loktionov(a)intel.com> ixgbe: fix unaligned u32 access in ixgbe_update_flash_X550() Jihed Chaibi <jihed.chaibi.dev(a)gmail.com> ARM: dts: am335x-sl50: Fix audio bitclock and frame master endpoint Wei Zhang <wei.zhang(a)oss.qualcomm.com> wifi: ath11k: cancel SSR work items during PCI shutdown Tristan Madani <tristan(a)talencesecurity.com> wifi: ath9k: fix OOB access from firmware tx status queue ID Chen-Yu Tsai <wenst(a)chromium.org> pinctrl: mediatek: eint: Drop base from mtk_eint_chip_write_mask() Prasanna Kumar T S M <ptsm(a)linux.microsoft.com> soc: xilinx: Shutdown and free rx mailbox channel Prasanna Kumar T S M <ptsm(a)linux.microsoft.com> soc: xilinx: Fix race condition in event registration Xingjing Deng <micro6947(a)gmail.com> kconfig: fix potential NULL pointer dereference in conf_askvalue Tristan Madani <tristan(a)talencesecurity.com> wifi: rtw89: add bounds check on firmware mac_id in link lookup Tristan Madani <tristan(a)talencesecurity.com> wifi: rtw88: fix OOB read from firmware RX descriptor exceeding DMA buffer Shin-Yi Lin <isaiah(a)realtek.com> wifi: rtw89: Correct data type for scan index to avoid infinite loop Chin-Yen Lee <timlee(a)realtek.com> wifi: rtw88: fix wrong pci_get_drvdata type in AER handlers Christos Longros <chris.longros(a)gmail.com> wifi: rtw89: fix wrong pci_get_drvdata type in AER handlers Timur Tabi <ttabi(a)nvidia.com> gpu: nova-core: use correct fwsignature for GA100 Danilo Krummrich <dakr(a)kernel.org> driver core: use READ_ONCE() for dev->driver in dev_has_sync_state() Srinivasan Shanmugam <srinivasan.shanmugam(a)amd.com> drm/amdkfd: Validate CRIU-restored IDs before idr_alloc Felix Gu <ustc.gu(a)gmail.com> pinctrl: pinconf-generic: fix properties bitmap leak in parse_fw_cfg() Krzysztof Kozlowski <krzysztof.kozlowski(a)oss.qualcomm.com> dt-bindings: pinctrl: nvidia,tegra234: Add missing required block Jon Hunter <jonathanh(a)nvidia.com> arm64: tegra: Fix Tegra234 MGBE PTP clock Louis Kotze <loukot(a)gmail.com> wifi: cfg80211: fix grammar in MLO group key error message Edward Adam Davis <eadavis(a)qq.com> hfsplus: Add a sanity check for btree node size Edward Adam Davis <eadavis(a)qq.com> hfsplus: Remove the duplicate attr inode dirty marking action David Heidelberg <david(a)ixit.cz> arm64: dts: qcom: sdm845-shift-axolotl: Correct touchscreen sleep state Kamal Wadhwa <kamal.wadhwa(a)oss.qualcomm.com> arm64: dts: qcom: fix temp-alarm probe failure for PMH0104 on Glymur Krzysztof Kozlowski <krzysztof.kozlowski(a)oss.qualcomm.com> arm64: dts: qcom: sdm845-mezzanine: Fix camss ports unit_address_vs_reg warning Krzysztof Kozlowski <krzysztof.kozlowski(a)oss.qualcomm.com> arm64: dts: qcom: sc8180x: Fix phy simple_bus_reg warning Krzysztof Kozlowski <krzysztof.kozlowski(a)oss.qualcomm.com> arm64: dts: qcom: ipq5424: Fix USB simple_bus_reg warnings Krzysztof Kozlowski <krzysztof.kozlowski(a)oss.qualcomm.com> arm64: dts: qcom: glymur: Fix cache and SRAM simple_bus_reg warnings Krzysztof Kozlowski <krzysztof.kozlowski(a)oss.qualcomm.com> arm64: dts: qcom: glymur: Fix USB simple_bus_reg warning David Heidelberg <david(a)ixit.cz> arm64: dts: qcom: sdm845-oneplus: Drop address from framebuffer node Alexander Koskovich <akoskovich(a)pm.me> arm64: dts: qcom: milos: Reduce rmtfs_mem size to 2.5MiB Sean Christopherson <seanjc(a)google.com> x86/bug: Add printf() validation to HAVE_ARCH_BUG_FORMAT_ARGS WARNs Konrad Dybcio <konrad.dybcio(a)oss.qualcomm.com> dt-bindings: net: bluetooth: qualcomm: Fix WCN6855 regulator names Kamlesh Kumar <kamlesh0hrs(a)gmail.com> ima: Fix sigv3 signature handling for EVM_IMA_XATTR_DIGSIG Diederik de Haas <diederik(a)cknow-tech.com> arm64: dts: rockchip: Fix gmac0 reset pin for NanoPi R5S Quentin Schulz <quentin.schulz(a)cherry.de> arm64: dts: rockchip: fix Ethernet PHY not found on PX30 Cobra Cristian Ciocaltea <cristian.ciocaltea(a)collabora.com> arm64: dts: rockchip: Update vdec register blocks order on RK3588 Cristian Ciocaltea <cristian.ciocaltea(a)collabora.com> arm64: dts: rockchip: Fix vdec register blocks order on RK3576 Baolin Liu <liubaolin(a)kylinos.cn> Documentation: proc: fix section numbering in table of contents Gregory Bell <grbell(a)redhat.com> selftests/bpf: Use local type for bpf_fou_encap in test_tunnel_kern Gregory Bell <grbell(a)redhat.com> selftests/bpf: Use local type for flow_offload_tuple_rhash in xdp_flowtable Felix Gu <ustc.gu(a)gmail.com> spi: atcspi200: fix use-after-free when driver unbind Yang Wang <kevinyang.wang(a)amd.com> drm/amd/pm: remove trailing semicolon from AMDGPU_PM_POLICY_ATTR macro Antoine Tenart <atenart(a)kernel.org> libbpf: Fix deduplication of typedef with base definitions Aaradhana Sahu <aaradhana.sahu(a)oss.qualcomm.com> wifi: ath12k: Fix invalid IRQ requests during AHB probe Nick Hu <nick.hu(a)sifive.com> dt-bindings: timer: Remove sifive,fine-ctr-bits property Matt Bobrowski <mattbobrowski(a)google.com> selftests/bpf: Fix off-by-one in bpf_cpumask_populate related selftest Aaron Tomlin <atomlin(a)atomlin.com> libbpf: Report error when a negative kprobe offset is specified Yuho Choi <dbgh9129(a)gmail.com> drm/radeon: fix memory leak in radeon_ring_restore() on lock failure Werner Kasselman <werner(a)verivus.ai> drm/radeon: fix integer overflow in radeon_align_pitch() Alex Sierra <alex.sierra(a)amd.com> drm/amdkfd: fix redundant MQD iterations in GFX v12.1 Werner Kasselman <werner(a)verivus.ai> drm/amdgpu: fix integer overflow in amdgpu_gem_align_pitch() Max Zhen <max.zhen(a)amd.com> accel/amdxdna: Guard management mailbox channel cleanup against NULL pointer Jonathan Cavitt <jonathan.cavitt(a)intel.com> drm/gpuvm: Do not prepare NULL objects Felix Gu <ustc.gu(a)gmail.com> accel/amdxdna: Fix memory leak in amdxdna_iommu_alloc() Max Zhen <max.zhen(a)amd.com> accel/amdxdna: Fix fatal_error_info layout in firmware interface Tvrtko Ursulin <tvrtko.ursulin(a)igalia.com> dma-fence: Fix potential tracepoint null pointer dereferences Lizhi Hou <lizhi.hou(a)amd.com> accel/amdxdna: Fix order of canceled mailbox messages Lizhi Hou <lizhi.hou(a)amd.com> accel/amdxdna: Fix iommu_map_sgtable() return value handling Max Zhen <max.zhen(a)amd.com> accel/amdxdna: Handle DETACH_DEBUG_BO through config_debug_bo path Lizhi Hou <lizhi.hou(a)amd.com> accel/amdxdna: Adjust size for copy_to_user() Lizhi Hou <lizhi.hou(a)amd.com> accel/amdxdna: Create shared functions for AIE2 and AIE4 Matthew Brost <matthew.brost(a)intel.com> drm/gpusvm: Reject VMAs with VM_IO or VM_PFNMAP when creating SVM ranges Tomi Valkeinen <tomi.valkeinen(a)ideasonboard.com> drm/tidss: Drop extra drm_mode_config_reset() call Thomas Zimmermann <tzimmermann(a)suse.de> drm/rockchip: Test for imported buffers with drm_gem_is_imported() Cristian Ciocaltea <cristian.ciocaltea(a)collabora.com> drm/rockchip: dw_dp: Fix null-ptr-deref in dw_dp_remove() Cristian Ciocaltea <cristian.ciocaltea(a)collabora.com> drm/rockchip: dw_dp: Switch to drmm_kzalloc() Cristian Ciocaltea <cristian.ciocaltea(a)collabora.com> drm/rockchip: inno-hdmi: Switch to drmm_kzalloc() Max Zhen <max.zhen(a)amd.com> accel/amdxdna: Fix leak when pinning ubuf pages Chen Ni <nichen(a)iscas.ac.cn> clocksource/drivers/sun5i: Handle error returns from devm_reset_control_get_optional_exclusive() Stafford Horne <shorne(a)gmail.com> openrisc: mm: Fix section mismatch between map_page and __set_fixmap Felix Gu <ustc.gu(a)gmail.com> soc: fsl: qe_ports_ic: Add missing cleanup on device removal Jiacheng Yu <yujiacheng3(a)huawei.com> fbcon: Use correct type for vc_resize() return value Ian Bridges <icb(a)fastmail.org> fbcon: fix NULL pointer dereference for a console without vc_data David Howells <dhowells(a)redhat.com> afs: Fix uncancelled rxrpc OOB message handler David Howells <dhowells(a)redhat.com> afs: Fix further netns teardown to cancel the preallocation charger Nan Li <tonanli66(a)gmail.com> afs: handle CB.InitCallBackState3 requests without a server record Matvey Kovalev <matvey.kovalev(a)ispras.ru> afs: fix NULL pointer dereference in afs_get_tree() David Howells <dhowells(a)redhat.com> afs: Fix netns teardown to cancel the preallocation charger David Howells <dhowells(a)redhat.com> rxrpc: Fix double unlock in rxrpc_recvmsg() David Howells <dhowells(a)redhat.com> rxrpc: Fix leak of connection from OOB challenge David Howells <dhowells(a)redhat.com> rxrpc: Fix the reception of a reply packet before data transmission Wyatt Feng <bronzed_45_vested(a)icloud.com> rxrpc: Fix ACKALL packet handling David Howells <dhowells(a)redhat.com> rxrpc: Fix oob challenge leak in cleanup after notification failure David Howells <dhowells(a)redhat.com> rxrpc: Fix rxrpc_rotate_tx_rotate() to check there's something to rotate David Howells <dhowells(a)redhat.com> rxrpc: Fix potential infinite loop in rxrpc_recvmsg() David Howells <dhowells(a)redhat.com> rxrpc: Fix leak of released call in recvmsg(MSG_PEEK) David Howells <dhowells(a)redhat.com> rxrpc: Fix socket notification race David Howells <dhowells(a)redhat.com> rxrpc: Fix UAF in rxgk_issue_challenge() Hyunwoo Kim <imv4bel(a)gmail.com> rxrpc: Don't move a peeked OOB message onto the pending queue Jeffrey Altman <jaltman(a)auristor.com> rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc Li Daming <d4n.for.sec(a)gmail.com> rxrpc: serialize kernel accept preallocation with socket teardown Matthias Feser <mfe(a)KBSgmbhfr.onmicrosoft.com> serial: 8250_omap: clear rx_running on zero-length DMA completes Tapio Reijonen <tapio.reijonen(a)vaisala.com> serial: max310x: implement gpio_chip::get_direction() Stephan Gerhold <stephan.gerhold(a)linaro.org> serial: msm: Disable DMA for kernel console UART Guoniu Zhou <guoniu.zhou(a)oss.nxp.com> dt-bindings: power: imx93: Add MIPI PHY power domain Chen-Yu Tsai <wens(a)kernel.org> dt-bindings: media: sun4i-a10-video-engine: Add interconnect properties Ricardo Ribalda <ribalda(a)chromium.org> media: uvcvideo: Fix sequence number when no EOF Ricardo Ribalda <ribalda(a)chromium.org> media: uvcvideo: Relax the constrains for interpolating the hw clock Ricardo Ribalda <ribalda(a)chromium.org> media: uvcvideo: Do not add clock samples with small sof delta Ricardo Ribalda <ribalda(a)chromium.org> media: uvcvideo: Fix dev_sof filtering in hw timestamp Ricardo Ribalda <ribalda(a)chromium.org> media: uvcvideo: Fix buffer sequence in frame gaps Ricardo Ribalda <ribalda(a)chromium.org> media: uvcvideo: Avoid partial metadata buffers Ricardo Ribalda <ribalda(a)chromium.org> media: uvcvideo: Use hw timestaming if the clock buffer is full Damien Laine <damien.laine(a)gmail.com> ALSA: hda/realtek: Fix speakers on Legion Pro 7 16ARX8H with codec SSID 17aa:38a7 Xu Rao <raoxu(a)uniontech.com> ALSA: hda: Fix cached processing coefficient verbs Zhang Heng <zhangheng(a)kylinos.cn> ALSA: hda: conexant: Remove mic bias threshold override Eckhart Mohr <e.mohr(a)tuxedocomputers.com> ALSA: hda/realtek: Add quirk for TongFang X6xx45xU Sean Anderson <sean.anderson(a)linux.dev> media: uvcvideo: Fix deadlock if uvc_status_stop is called from async_ctrl.work Eric Biggers <ebiggers(a)kernel.org> crypto: sun4i-ss - Remove insecure and unused rng_alg Michael Bommarito <michael.bommarito(a)gmail.com> iommu/vt-d: Clear Present bit before tearing down scalable-mode context entry Muhammet Kaan KILINÇ <muhammetkaankilinc(a)gmail.com> crypto: algif_skcipher - force synchronous processing ------------- Diffstat: .../testing/sysfs-class-reboot-mode-reboot_modes | 13 +- Documentation/admin-guide/pm/cpufreq.rst | 6 +- Documentation/arch/arm64/cpu-hotplug.rst | 28 +- .../bindings/clock/qcom,dispcc-sm6125.yaml | 17 +- .../bindings/clock/qcom,x1e80100-camcc.yaml | 1 + .../bindings/dma/nvidia,tegra186-gpc-dma.yaml | 23 +- .../devicetree/bindings/dma/snps,dw-axi-dmac.yaml | 5 +- .../media/allwinner,sun4i-a10-video-engine.yaml | 10 + .../bindings/net/bluetooth/qcom,wcn6855-bt.yaml | 7 +- .../devicetree/bindings/net/microchip,lan8650.yaml | 2 +- .../devicetree/bindings/net/renesas,ether.yaml | 3 +- .../bindings/phy/qcom,sc8280xp-qmp-pcie-phy.yaml | 13 +- .../pinctrl/nvidia,tegra234-pinmux-aon.yaml | 4 + .../bindings/pinctrl/nvidia,tegra234-pinmux.yaml | 4 + .../bindings/pinctrl/realtek,rtd1625-pinctrl.yaml | 2 +- .../bindings/regulator/mt6359-regulator.yaml | 43 -- .../devicetree/bindings/timer/sifive,clint.yaml | 16 - .../devicetree/bindings/vendor-prefixes.yaml | 4 + Documentation/driver-api/nvdimm/btt.rst | 5 +- Documentation/driver-api/uio-howto.rst | 4 +- Documentation/filesystems/proc.rst | 14 +- Documentation/mm/memfd_preservation.rst | 2 +- Documentation/netlink/specs/handshake.yaml | 1 + Documentation/netlink/specs/rt-link.yaml | 6 + Documentation/networking/bonding.rst | 23 + Documentation/process/changes.rst | 7 +- Documentation/process/threat-model.rst | 2 +- Documentation/trace/eprobetrace.rst | 4 + Documentation/trace/rv/monitor_sched.rst | 7 +- Makefile | 4 +- arch/alpha/kernel/pci-sysfs.c | 13 +- arch/arc/include/asm/uaccess.h | 3 +- arch/arm/boot/compressed/Makefile | 2 +- arch/arm/boot/dts/broadcom/bcm2711-rpi-4-b.dts | 2 +- arch/arm/boot/dts/broadcom/bcm2711-rpi-cm4-io.dts | 2 +- arch/arm/boot/dts/nvidia/tegra124-nyan.dtsi | 5 + arch/arm/boot/dts/nvidia/tegra124-venice2.dts | 5 + arch/arm/boot/dts/nxp/imx/imx6ul-var-som.dtsi | 4 - arch/arm/boot/dts/rockchip/rk3288-veyron.dtsi | 5 + arch/arm/boot/dts/st/stm32mp151c-mecio1r0.dts | 128 ++++ arch/arm/boot/dts/st/stm32mp153c-mecio1r1.dts | 144 +++++ arch/arm/boot/dts/st/stm32mp15x-mecio1-io.dtsi | 146 +---- arch/arm/boot/dts/ti/omap/am335x-sl50.dts | 4 +- arch/arm/configs/axm55xx_defconfig | 1 - arch/arm/configs/dove_defconfig | 1 - arch/arm/configs/ep93xx_defconfig | 1 - arch/arm/configs/mmp2_defconfig | 1 - arch/arm/configs/multi_v7_defconfig | 4 +- arch/arm/configs/mv78xx0_defconfig | 1 - arch/arm/configs/sunxi_defconfig | 1 - arch/arm/include/asm/uaccess.h | 3 +- arch/arm/mach-imx/Kconfig | 21 - arch/arm/mach-imx/cpu-imx31.c | 9 +- arch/arm/mach-imx/mm-imx3.c | 2 + arch/arm64/boot/dts/allwinner/sun55i-a523.dtsi | 3 +- .../fsl-ls1028a-tqmls1028a-mbls1028a.dtsi | 4 +- .../boot/dts/freescale/fsl-lx2162a-clearfog.dts | 2 +- arch/arm64/boot/dts/freescale/imx8dxl-evk.dts | 2 - .../arm64/boot/dts/freescale/imx8mm-kontron-bl.dts | 10 +- .../boot/dts/freescale/imx8mm-kontron-osm-s.dtsi | 7 +- .../dts/freescale/imx8mn-vhip4-evalboard-v1.dts | 2 +- .../dts/freescale/imx8mn-vhip4-evalboard-v2.dts | 2 +- arch/arm64/boot/dts/freescale/imx8mp-ab2.dts | 2 +- .../boot/dts/freescale/imx8mp-kontron-bl-osm-s.dts | 14 +- .../boot/dts/freescale/imx8mp-kontron-osm-s.dtsi | 7 +- .../dts/freescale/imx8mp-tqma8mpql-mba8mpxl.dts | 3 + arch/arm64/boot/dts/freescale/imx8qxp-mek.dts | 1 - arch/arm64/boot/dts/freescale/imx8ulp-evk.dts | 4 +- arch/arm64/boot/dts/freescale/imx8x-colibri.dtsi | 4 +- arch/arm64/boot/dts/freescale/imx94.dtsi | 2 +- arch/arm64/boot/dts/freescale/imx95-19x19-evk.dts | 2 +- .../arm64/boot/dts/freescale/imx95-verdin-ivy.dtsi | 1 - arch/arm64/boot/dts/freescale/imx95.dtsi | 10 +- arch/arm64/boot/dts/freescale/s32g3.dtsi | 2 +- .../marvell/mmp/pxa1908-samsung-coreprimevelte.dts | 2 +- arch/arm64/boot/dts/mediatek/Makefile | 8 + .../mediatek/mt7988a-bananapi-bpi-r4-pro-cn13.dtso | 20 + .../mediatek/mt7988a-bananapi-bpi-r4-pro-cn14.dtso | 20 + .../dts/mediatek/mt7988a-bananapi-bpi-r4-pro.dtsi | 2 - arch/arm64/boot/dts/mediatek/mt8192-asurada.dtsi | 2 +- arch/arm64/boot/dts/nvidia/tegra132-norrin.dts | 5 + arch/arm64/boot/dts/nvidia/tegra210-smaug.dts | 5 + arch/arm64/boot/dts/nvidia/tegra234.dtsi | 8 +- arch/arm64/boot/dts/nvidia/tegra264.dtsi | 88 +-- arch/arm64/boot/dts/qcom/eliza-mtp.dts | 4 +- arch/arm64/boot/dts/qcom/eliza.dtsi | 6 +- arch/arm64/boot/dts/qcom/glymur-crd.dts | 4 - arch/arm64/boot/dts/qcom/glymur.dtsi | 12 +- arch/arm64/boot/dts/qcom/hamoa.dtsi | 77 +-- arch/arm64/boot/dts/qcom/ipq5424.dtsi | 4 +- arch/arm64/boot/dts/qcom/kaanapali.dtsi | 6 +- arch/arm64/boot/dts/qcom/kodiak.dtsi | 8 +- arch/arm64/boot/dts/qcom/lemans.dtsi | 710 +++++++++++---------- arch/arm64/boot/dts/qcom/milos-fairphone-fp6.dts | 5 + arch/arm64/boot/dts/qcom/milos.dtsi | 2 +- arch/arm64/boot/dts/qcom/monaco.dtsi | 6 +- arch/arm64/boot/dts/qcom/pmh0104-glymur.dtsi | 2 +- arch/arm64/boot/dts/qcom/sc7180.dtsi | 6 +- arch/arm64/boot/dts/qcom/sc8180x.dtsi | 2 +- arch/arm64/boot/dts/qcom/sdm630.dtsi | 37 +- arch/arm64/boot/dts/qcom/sdm660.dtsi | 36 +- .../qcom/sdm845-db845c-navigation-mezzanine.dtso | 5 + .../arm64/boot/dts/qcom/sdm845-oneplus-common.dtsi | 2 +- arch/arm64/boot/dts/qcom/sdm845-shift-axolotl.dts | 2 +- .../dts/qcom/sdm845-xiaomi-beryllium-common.dtsi | 2 +- arch/arm64/boot/dts/qcom/sm8450.dtsi | 8 +- arch/arm64/boot/dts/qcom/sm8550.dtsi | 6 +- arch/arm64/boot/dts/qcom/sm8650.dtsi | 6 +- arch/arm64/boot/dts/qcom/sm8750.dtsi | 8 +- arch/arm64/boot/dts/renesas/r8a78000-ironhide.dts | 76 ++- arch/arm64/boot/dts/renesas/r8a78000.dtsi | 36 +- arch/arm64/boot/dts/rockchip/px30-cobra.dtsi | 2 +- arch/arm64/boot/dts/rockchip/px30-ringneck.dtsi | 2 +- arch/arm64/boot/dts/rockchip/rk3399-gru.dtsi | 5 + arch/arm64/boot/dts/rockchip/rk3566-roc-pc.dts | 2 +- arch/arm64/boot/dts/rockchip/rk3568-nanopi-r5s.dts | 6 +- arch/arm64/boot/dts/rockchip/rk3576.dtsi | 6 +- arch/arm64/boot/dts/rockchip/rk3588-base.dtsi | 12 +- arch/arm64/boot/dts/st/stm32mp251.dtsi | 8 +- arch/arm64/boot/dts/ti/k3-am62a7-sk.dts | 2 + arch/arm64/include/asm/kvm_nested.h | 8 + arch/arm64/include/asm/tlbbatch.h | 10 +- arch/arm64/include/asm/tlbflush.h | 49 +- arch/arm64/include/asm/uaccess.h | 3 +- arch/arm64/kernel/acpi.c | 2 + arch/arm64/kernel/entry-fpsimd.S | 8 +- arch/arm64/kernel/fpsimd.c | 10 +- arch/arm64/kernel/hw_breakpoint.c | 9 + arch/arm64/kernel/process.c | 35 - arch/arm64/kernel/smp.c | 28 +- arch/arm64/kernel/static_call.c | 1 + arch/arm64/kvm/at.c | 8 - arch/arm64/kvm/emulate-nested.c | 1 + arch/arm64/kvm/hyp/include/hyp/switch.h | 11 +- arch/arm64/kvm/hyp/pgtable.c | 3 +- arch/arm64/kvm/nested.c | 166 ++--- arch/arm64/kvm/pkvm.c | 2 +- arch/arm64/kvm/vgic/vgic-its.c | 2 + arch/arm64/kvm/vgic/vgic.c | 20 +- arch/arm64/mm/mmu.c | 11 +- arch/arm64/tools/sysreg | 2 +- arch/hexagon/include/asm/uaccess.h | 3 +- arch/loongarch/include/asm/kexec.h | 3 +- arch/loongarch/include/asm/pgtable.h | 4 + arch/loongarch/include/asm/uaccess.h | 3 +- arch/loongarch/kvm/exit.c | 1 - arch/loongarch/kvm/irqfd.c | 3 +- arch/loongarch/kvm/vcpu.c | 11 +- arch/loongarch/mm/pageattr.c | 2 +- arch/loongarch/net/bpf_jit.c | 28 +- arch/m68k/coldfire/m5441x.c | 18 +- arch/m68k/include/asm/uaccess.h | 3 +- arch/microblaze/include/asm/uaccess.h | 3 +- arch/mips/dec/int-handler.S | 2 +- arch/mips/dec/platform.c | 6 +- arch/mips/dec/prom/init.c | 6 +- arch/mips/dec/setup.c | 6 - arch/mips/fw/lib/call_o32.S | 2 +- arch/mips/include/asm/dec/prom.h | 15 +- arch/mips/include/asm/uaccess.h | 3 +- arch/mips/kernel/mips-mt-fpaff.c | 28 +- arch/mips/mm/init.c | 17 +- arch/mips/n64/init.c | 2 +- arch/mips/ralink/mt7621.c | 2 +- arch/mips/sgi-ip22/ip22-gio.c | 7 +- arch/nios2/include/asm/uaccess.h | 3 +- arch/openrisc/include/asm/cacheflush.h | 4 + arch/openrisc/include/asm/uaccess.h | 3 +- arch/openrisc/kernel/jump_label.c | 2 +- arch/openrisc/kernel/patching.c | 3 + arch/openrisc/kernel/smp.c | 21 + arch/openrisc/mm/cache.c | 16 + arch/openrisc/mm/init.c | 2 +- arch/parisc/include/asm/uaccess.h | 3 +- arch/powerpc/include/asm/uaccess.h | 2 +- arch/powerpc/kernel/dt_cpu_ftrs.c | 9 + arch/powerpc/kexec/core_64.c | 4 +- arch/powerpc/perf/core-fsl-emb.c | 3 +- arch/powerpc/platforms/8xx/cpm1.c | 26 + arch/powerpc/platforms/cell/spufs/file.c | 6 +- arch/powerpc/platforms/powernv/setup.c | 3 +- arch/powerpc/platforms/pseries/Kconfig | 1 + .../platforms/pseries/papr_platform_attributes.c | 8 +- .../riscv/boot/dts/microchip/mpfs-beaglev-fire.dts | 25 +- arch/riscv/boot/dts/microchip/mpfs.dtsi | 6 +- .../boot/dts/microchip/pic64gx-curiosity-kit.dts | 47 +- arch/riscv/boot/dts/microchip/pic64gx.dtsi | 38 +- arch/riscv/boot/dts/sophgo/sg2042-cpus.dtsi | 236 +++---- arch/riscv/boot/dts/sophgo/sg2044-cpus.dtsi | 236 +++---- arch/riscv/boot/dts/spacemit/k1-bananapi-f3.dts | 2 +- arch/riscv/boot/dts/spacemit/k1-milkv-jupiter.dts | 4 +- arch/riscv/boot/dts/spacemit/k1.dtsi | 2 +- arch/riscv/boot/dts/spacemit/k3.dtsi | 3 +- arch/riscv/include/asm/cpu_ops.h | 2 +- arch/riscv/include/asm/vdso.h | 10 +- arch/riscv/kernel/alternative.c | 14 +- arch/riscv/kernel/asm-offsets.c | 4 +- arch/riscv/kernel/cacheinfo.c | 2 +- arch/riscv/kernel/cpu-hotplug.c | 4 +- arch/riscv/kernel/cpu_ops_sbi.c | 11 +- arch/riscv/kernel/entry.S | 8 +- arch/riscv/kernel/machine_kexec.c | 3 + arch/riscv/kernel/probes/rethook_trampoline.S | 3 + arch/riscv/kernel/stacktrace.c | 2 +- arch/riscv/kernel/vdso/Makefile | 6 +- arch/riscv/kernel/vdso/rt_sigreturn.S | 10 +- arch/s390/include/asm/pgtable.h | 4 +- arch/s390/include/asm/uaccess.h | 3 +- arch/s390/kernel/diag/diag310.c | 7 +- arch/s390/kernel/perf_cpum_cf.c | 3 + arch/s390/kernel/process.c | 2 +- arch/s390/kvm/dat.c | 2 +- arch/s390/kvm/gaccess.c | 73 ++- arch/s390/kvm/gmap.c | 7 +- arch/s390/kvm/gmap.h | 14 +- arch/s390/kvm/kvm-s390.c | 2 +- arch/s390/kvm/pci.c | 12 +- arch/s390/mm/gmap_helpers.c | 9 +- arch/s390/mm/mmap.c | 2 +- arch/sh/include/asm/uaccess.h | 3 +- arch/sparc/include/asm/page_32.h | 2 + arch/sparc/include/asm/uaccess_32.h | 3 +- arch/sparc/include/asm/uaccess_64.h | 3 +- arch/sparc/kernel/led.c | 2 +- arch/um/include/asm/uaccess.h | 3 +- arch/x86/Kconfig.cpu | 8 +- arch/x86/boot/compressed/acpi.c | 7 +- arch/x86/boot/early_serial_console.c | 11 +- arch/x86/events/amd/brs.c | 10 +- arch/x86/events/amd/core.c | 18 +- arch/x86/events/amd/lbr.c | 3 +- arch/x86/events/amd/uncore.c | 6 +- arch/x86/events/intel/uncore_discovery.c | 4 +- arch/x86/events/intel/uncore_snbep.c | 6 +- arch/x86/include/asm/bug.h | 2 + arch/x86/kernel/cpu/cpu.h | 1 - arch/x86/kernel/uprobes.c | 26 +- arch/x86/kvm/irq.c | 4 +- arch/x86/kvm/lapic.c | 8 +- arch/x86/kvm/svm/sev.c | 6 +- arch/x86/kvm/vmx/nested.c | 68 +- arch/x86/kvm/vmx/tdx.c | 6 +- arch/x86/platform/olpc/olpc-xo15-sci.c | 1 + arch/x86/video/video-common.c | 23 +- arch/x86/virt/svm/sev.c | 2 + arch/xtensa/include/asm/uaccess.h | 3 +- block/blk.h | 13 +- block/genhd.c | 4 - block/ioctl.c | 2 +- crypto/Kconfig | 4 +- crypto/af_alg.c | 2 + crypto/algif_skcipher.c | 75 +-- crypto/asymmetric_keys/verify_pefile.c | 2 + crypto/ecrdsa.c | 2 +- crypto/rng.c | 11 + drivers/accel/amdxdna/Makefile | 1 + drivers/accel/amdxdna/aie.c | 89 +++ drivers/accel/amdxdna/aie.h | 31 + drivers/accel/amdxdna/aie2_ctx.c | 26 +- drivers/accel/amdxdna/aie2_error.c | 17 +- drivers/accel/amdxdna/aie2_message.c | 164 ++--- drivers/accel/amdxdna/aie2_msg_priv.h | 2 +- drivers/accel/amdxdna/aie2_pci.c | 166 ++--- drivers/accel/amdxdna/aie2_pci.h | 26 +- drivers/accel/amdxdna/aie2_pm.c | 6 +- drivers/accel/amdxdna/aie2_smu.c | 22 +- drivers/accel/amdxdna/amdxdna_ctx.c | 40 +- drivers/accel/amdxdna/amdxdna_gem.c | 37 +- drivers/accel/amdxdna/amdxdna_gem.h | 1 - drivers/accel/amdxdna/amdxdna_iommu.c | 56 +- drivers/accel/amdxdna/amdxdna_mailbox.c | 10 +- drivers/accel/amdxdna/amdxdna_pci_drv.h | 8 + drivers/accel/amdxdna/amdxdna_ubuf.c | 12 +- drivers/accel/amdxdna/npu1_regs.c | 4 +- drivers/accel/amdxdna/npu4_regs.c | 4 +- drivers/accel/amdxdna/npu5_regs.c | 2 +- drivers/accel/amdxdna/npu6_regs.c | 2 +- drivers/accel/ivpu/ivpu_fw_log.c | 4 + drivers/accel/ivpu/ivpu_job.c | 10 +- drivers/acpi/acpi_ipmi.c | 4 +- drivers/acpi/acpi_pad.c | 6 +- drivers/acpi/acpi_tad.c | 2 +- drivers/acpi/acpica/acutils.h | 2 - drivers/acpi/acpica/utnonansi.c | 7 - drivers/acpi/button.c | 26 +- drivers/acpi/processor_idle.c | 13 +- drivers/acpi/resource.c | 6 +- drivers/acpi/riscv/cpuidle.c | 2 +- drivers/acpi/riscv/rimt.c | 7 +- drivers/amba/bus.c | 37 +- drivers/android/binder.c | 18 +- drivers/ata/libata-core.c | 44 +- drivers/ata/libata-scsi.c | 9 +- drivers/ata/libata.h | 9 + drivers/ata/pata_pxa.c | 1 + drivers/ata/sata_gemini.c | 2 +- drivers/base/core.c | 83 ++- drivers/base/dd.c | 7 +- drivers/base/firmware_loader/main.c | 71 ++- drivers/base/power/main.c | 6 +- drivers/base/property.c | 4 +- drivers/base/regmap/regcache.c | 2 +- drivers/base/regmap/regmap-i2c.c | 2 +- drivers/block/drbd/drbd_receiver.c | 5 + drivers/bluetooth/Kconfig | 2 +- drivers/bluetooth/bpa10x.c | 8 +- drivers/bluetooth/btintel.c | 10 +- drivers/bluetooth/btintel.h | 9 + drivers/bluetooth/btintel_pcie.c | 531 ++++++++++++--- drivers/bluetooth/btintel_pcie.h | 26 +- drivers/bluetooth/btmtk.c | 4 +- drivers/bluetooth/btrtl.c | 5 +- drivers/bluetooth/hci_qca.c | 11 +- drivers/bluetooth/hci_vhci.c | 10 + drivers/bus/imx-weim.c | 6 - drivers/bus/mhi/ep/main.c | 11 +- drivers/bus/mhi/host/pci_generic.c | 20 +- drivers/bus/sunxi-rsb.c | 3 + drivers/cdx/cdx.c | 40 +- drivers/char/hpet.c | 6 +- drivers/char/ipmi/ipmi_msghandler.c | 10 +- drivers/char/sonypi.c | 6 +- drivers/char/tlclk.c | 4 + drivers/char/tpm/eventlog/tpm1.c | 4 +- drivers/char/tpm/tpm-dev.c | 2 +- drivers/char/tpm/tpm2-cmd.c | 6 +- drivers/char/tpm/tpm2-sessions.c | 45 +- drivers/char/tpm/tpm_crb.c | 6 +- drivers/char/tpm/tpm_tis_core.c | 35 +- drivers/char/tpm/tpmrm-dev.c | 2 +- drivers/char/virtio_console.c | 52 +- drivers/clk/at91/pmc.c | 2 +- drivers/clk/at91/sam9x7.c | 18 +- drivers/clk/clk-scmi.c | 4 +- drivers/clk/clk-scpi.c | 2 +- drivers/clk/microchip/clk-mpfs-ccc.c | 15 +- drivers/clk/qcom/a53-pll.c | 2 +- drivers/clk/qcom/camcc-x1e80100.c | 64 ++ drivers/clk/qcom/ipq-cmn-pll.c | 11 +- drivers/clk/renesas/rzg2l-cpg.c | 6 +- drivers/clk/samsung/Kconfig | 2 +- drivers/clk/spacemit/ccu-k3.c | 20 +- drivers/clocksource/Kconfig | 31 + drivers/clocksource/timer-sun5i.c | 3 + drivers/cpufreq/cpufreq_conservative.c | 12 +- drivers/cpufreq/cpufreq_governor.c | 42 +- drivers/cpufreq/intel_pstate.c | 6 +- drivers/cpuidle/driver.c | 8 - drivers/crypto/Kconfig | 1 - drivers/crypto/allwinner/Kconfig | 8 - drivers/crypto/allwinner/sun4i-ss/Makefile | 1 - drivers/crypto/allwinner/sun4i-ss/sun4i-ss-core.c | 36 -- drivers/crypto/allwinner/sun4i-ss/sun4i-ss-prng.c | 69 -- drivers/crypto/allwinner/sun4i-ss/sun4i-ss.h | 20 - drivers/crypto/atmel-sha204a.c | 8 +- drivers/crypto/cavium/cpt/cptvf_reqmanager.c | 4 +- drivers/crypto/ccp/psp-dev.c | 12 +- drivers/crypto/ccp/sev-dev-tsm.c | 23 +- drivers/crypto/ccp/sev-dev.c | 26 +- drivers/crypto/hisilicon/qm.c | 4 +- drivers/crypto/inside-secure/eip93/eip93-main.c | 2 + drivers/crypto/inside-secure/eip93/eip93-regs.h | 2 +- drivers/crypto/inside-secure/safexcel.c | 2 +- .../crypto/intel/qat/qat_common/adf_common_drv.h | 1 - .../intel/qat/qat_common/adf_heartbeat_inject.c | 6 +- .../crypto/intel/qat/qat_common/adf_hw_arbiter.c | 25 - drivers/crypto/marvell/octeontx/otx_cptvf_reqmgr.c | 4 +- drivers/crypto/tegra/tegra-se-aes.c | 33 +- drivers/crypto/xilinx/xilinx-trng.c | 85 +-- drivers/cxl/core/core.h | 2 + drivers/cxl/core/features.c | 2 +- drivers/cxl/core/memdev.c | 4 +- drivers/cxl/core/pci.c | 26 +- drivers/cxl/core/port.c | 7 +- drivers/cxl/core/ras.c | 27 +- drivers/cxl/core/region.c | 125 ++-- drivers/cxl/core/trace.h | 24 +- drivers/cxl/cxl.h | 22 +- drivers/dax/kmem.c | 6 + drivers/dibs/dibs_loopback.c | 5 + drivers/dma-buf/dma-fence-unwrap.c | 3 + drivers/dma-buf/dma-fence.c | 9 +- drivers/dma/dma-axi-dmac.c | 68 +- drivers/dma/dmaengine.c | 3 +- drivers/dma/dw-edma/dw-edma-core.h | 2 +- drivers/dma/dw-edma/dw-edma-pcie.c | 3 + drivers/dma/dw-edma/dw-edma-v0-core.c | 6 + drivers/dma/imx-sdma.c | 4 +- drivers/dma/qcom/gpi.c | 1 + drivers/dma/sh/rz-dmac.c | 92 +-- drivers/dma/tegra186-gpc-dma.c | 7 + drivers/dpll/dpll_core.c | 20 +- drivers/edac/igen6_edac.c | 405 +++++++++--- drivers/edac/skx_common.c | 3 + drivers/firmware/arm_ffa/driver.c | 27 +- drivers/firmware/arm_scmi/power.c | 6 +- drivers/firmware/arm_scmi/sensors.c | 2 +- drivers/firmware/samsung/exynos-acpm.c | 23 + drivers/firmware/smccc/soc_id.c | 2 +- drivers/firmware/xilinx/zynqmp.c | 28 + drivers/fpga/dfl.c | 2 + drivers/fpga/microchip-spi.c | 3 + drivers/gpib/cb7210/cb7210.c | 1 + drivers/gpib/common/gpib_os.c | 4 +- drivers/gpio/gpio-davinci.c | 4 +- drivers/gpio/gpio-dwapb.c | 83 ++- drivers/gpio/gpio-f7188x.c | 6 +- drivers/gpio/gpio-htc-egpio.c | 6 +- drivers/gpio/gpio-mlxbf3.c | 3 +- drivers/gpio/gpio-mt7621.c | 283 ++++++-- drivers/gpio/gpio-mvebu.c | 6 +- drivers/gpio/gpio-palmas.c | 19 + drivers/gpio/gpio-shared-proxy.c | 136 ++-- drivers/gpio/gpio-tegra.c | 18 +- drivers/gpio/gpio-timberdale.c | 2 +- drivers/gpio/gpiolib-acpi-core.c | 19 +- drivers/gpio/gpiolib-shared.c | 9 +- drivers/gpio/gpiolib-shared.h | 31 +- drivers/gpio/gpiolib.c | 2 +- drivers/gpu/buddy.c | 67 +- drivers/gpu/drm/amd/amdgpu/amdgpu_amdkfd_gpuvm.c | 16 +- drivers/gpu/drm/amd/amdgpu/amdgpu_dev_coredump.c | 3 +- drivers/gpu/drm/amd/amdgpu/amdgpu_device.c | 2 + drivers/gpu/drm/amd/amdgpu/amdgpu_gem.c | 25 +- drivers/gpu/drm/amd/amdgpu/amdgpu_irq.c | 2 - drivers/gpu/drm/amd/amdgpu/amdgpu_mca.c | 3 + drivers/gpu/drm/amd/amdgpu/mes_v12_1.c | 2 +- drivers/gpu/drm/amd/amdkfd/kfd_chardev.c | 3 + .../gpu/drm/amd/amdkfd/kfd_device_queue_manager.c | 20 +- drivers/gpu/drm/amd/amdkfd/kfd_events.c | 5 + drivers/gpu/drm/amd/amdkfd/kfd_mqd_manager_v12_1.c | 6 +- drivers/gpu/drm/amd/amdkfd/kfd_process.c | 2 +- drivers/gpu/drm/amd/amdkfd/kfd_svm.c | 1 + drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm.c | 10 +- .../drm/amd/display/amdgpu_dm/amdgpu_dm_helpers.c | 13 +- drivers/gpu/drm/amd/display/dc/core/dc.c | 81 ++- drivers/gpu/drm/amd/display/dc/core/dc_stream.c | 2 + drivers/gpu/drm/amd/display/dc/dc.h | 58 +- drivers/gpu/drm/amd/display/dc/dc_types.h | 24 - .../drm/amd/display/dc/hubp/dcn401/dcn401_hubp.c | 229 +++---- .../drm/amd/display/dc/hubp/dcn401/dcn401_hubp.h | 23 +- .../gpu/drm/amd/display/dc/hubp/dcn42/dcn42_hubp.c | 78 +-- .../gpu/drm/amd/display/dc/hubp/dcn42/dcn42_hubp.h | 10 +- .../drm/amd/display/dc/hwss/dcn401/dcn401_hwseq.c | 431 ++++++++----- .../drm/amd/display/dc/hwss/dcn42/dcn42_hwseq.c | 495 +++++++++++++- .../drm/amd/display/dc/hwss/dcn42/dcn42_hwseq.h | 9 +- drivers/gpu/drm/amd/display/dc/inc/hw/hubp.h | 35 +- drivers/gpu/drm/amd/display/dc/inc/hw/mpc.h | 79 +-- .../gpu/drm/amd/display/dc/mpc/dcn401/dcn401_mpc.c | 177 +++-- .../gpu/drm/amd/display/dc/mpc/dcn401/dcn401_mpc.h | 25 +- .../gpu/drm/amd/display/dc/mpc/dcn42/dcn42_mpc.c | 392 +++++++++++- .../gpu/drm/amd/display/dc/mpc/dcn42/dcn42_mpc.h | 49 +- .../amd/display/dc/resource/dcn42/dcn42_resource.c | 1 - .../amd/display/modules/info_packet/info_packet.c | 2 + drivers/gpu/drm/amd/pm/amdgpu_pm.c | 26 +- drivers/gpu/drm/bridge/analogix/analogix_dp_core.c | 4 + drivers/gpu/drm/drm_edid.c | 8 + drivers/gpu/drm/drm_fb_helper.c | 92 ++- drivers/gpu/drm/drm_gpusvm.c | 5 + drivers/gpu/drm/drm_gpuvm.c | 9 +- drivers/gpu/drm/drm_ioctl.c | 14 +- drivers/gpu/drm/drm_syncobj.c | 10 +- drivers/gpu/drm/hisilicon/hibmc/dp/dp_comm.h | 1 + drivers/gpu/drm/hisilicon/hibmc/dp/dp_hw.h | 1 + drivers/gpu/drm/hisilicon/hibmc/dp/dp_link.c | 2 +- drivers/gpu/drm/hisilicon/hibmc/hibmc_drm_de.c | 78 ++- drivers/gpu/drm/hisilicon/hibmc/hibmc_drm_dp.c | 35 +- drivers/gpu/drm/hisilicon/hibmc/hibmc_drm_drv.c | 14 + drivers/gpu/drm/hisilicon/hibmc/hibmc_drm_drv.h | 1 + drivers/gpu/drm/hisilicon/hibmc/hibmc_drm_vdac.c | 75 ++- drivers/gpu/drm/i915/display/intel_atomic.c | 6 + drivers/gpu/drm/i915/display/intel_lt_phy.c | 6 +- drivers/gpu/drm/imagination/pvr_drv.c | 6 +- drivers/gpu/drm/imagination/pvr_fw_trace.c | 2 +- drivers/gpu/drm/imagination/pvr_vm.c | 6 +- drivers/gpu/drm/msm/adreno/a6xx_gmu.c | 7 +- drivers/gpu/drm/msm/adreno/a8xx_gpu.c | 15 +- drivers/gpu/drm/msm/dp/dp_display.c | 4 +- drivers/gpu/drm/msm/dp/dp_reg.h | 4 +- drivers/gpu/drm/msm/msm_mdss.c | 113 ++-- .../gpu/drm/nouveau/nvkm/subdev/bios/shadowramin.c | 3 +- drivers/gpu/drm/panel/Kconfig | 13 +- drivers/gpu/drm/panthor/panthor_device.c | 9 +- drivers/gpu/drm/panthor/panthor_device.h | 100 +-- drivers/gpu/drm/panthor/panthor_drv.c | 8 +- drivers/gpu/drm/panthor/panthor_fw.c | 29 +- drivers/gpu/drm/panthor/panthor_fw_regs.h | 32 + drivers/gpu/drm/panthor/panthor_gpu.c | 50 +- drivers/gpu/drm/panthor/panthor_gpu_regs.h | 123 ++++ drivers/gpu/drm/panthor/panthor_heap.c | 2 +- drivers/gpu/drm/panthor/panthor_hw.c | 50 +- drivers/gpu/drm/panthor/panthor_hw.h | 2 +- drivers/gpu/drm/panthor/panthor_mmu.c | 37 +- drivers/gpu/drm/panthor/panthor_mmu_regs.h | 73 +++ drivers/gpu/drm/panthor/panthor_pwr.c | 73 ++- drivers/gpu/drm/panthor/panthor_pwr_regs.h | 83 +++ drivers/gpu/drm/panthor/panthor_regs.h | 291 --------- drivers/gpu/drm/panthor/panthor_sched.c | 113 ++-- drivers/gpu/drm/radeon/radeon_gem.c | 13 +- drivers/gpu/drm/radeon/radeon_ring.c | 4 +- drivers/gpu/drm/renesas/rz-du/rzg2l_mipi_dsi.c | 12 +- drivers/gpu/drm/rockchip/dw_dp-rockchip.c | 7 +- drivers/gpu/drm/rockchip/inno_hdmi-rockchip.c | 3 +- drivers/gpu/drm/rockchip/rockchip_drm_gem.c | 2 +- drivers/gpu/drm/tegra/dc.c | 4 +- drivers/gpu/drm/tegra/fbdev.c | 1 - drivers/gpu/drm/tegra/gem.c | 22 +- drivers/gpu/drm/tegra/gr2d.c | 19 +- drivers/gpu/drm/tegra/gr3d.c | 19 +- drivers/gpu/drm/tegra/submit.c | 3 +- drivers/gpu/drm/tidss/tidss_kms.c | 2 - drivers/gpu/drm/v3d/v3d_submit.c | 2 + drivers/gpu/drm/verisilicon/vs_primary_plane.c | 10 +- drivers/gpu/drm/xe/Makefile | 4 +- drivers/gpu/drm/xe/tests/xe_pci.c | 1 - drivers/gpu/drm/xe/xe_drm_client.c | 12 +- drivers/gpu/drm/xe/xe_guc_relay.c | 13 +- drivers/gpu/drm/xe/xe_hw_engine.c | 4 +- drivers/gpu/drm/xe/xe_pt.c | 72 ++- drivers/gpu/drm/xe/xe_svm.h | 15 +- drivers/gpu/drm/xe/xe_userptr.c | 2 +- drivers/gpu/drm/xe/xe_vm_madvise.c | 2 +- drivers/gpu/host1x/bus.c | 62 +- drivers/gpu/host1x/job.c | 10 +- drivers/gpu/host1x/mipi.c | 6 +- drivers/gpu/nova-core/firmware.rs | 8 +- drivers/gpu/nova-core/firmware/gsp.rs | 3 +- drivers/gpu/nova-core/vbios.rs | 118 ++-- drivers/hid/bpf/hid_bpf_dispatch.c | 5 +- drivers/hid/hid-core.c | 7 + drivers/hid/hid-logitech-hidpp.c | 1 - drivers/hid/hid-picolcd_core.c | 3 +- drivers/hid/hid-wiimote-modules.c | 58 +- drivers/hv/mshv_synic.c | 5 + drivers/hv/vmbus_drv.c | 43 +- drivers/hwmon/Kconfig | 3 + drivers/hwmon/aspeed-g6-pwm-tach.c | 5 +- drivers/hwmon/asus_atk0110.c | 3 + drivers/hwmon/gpd-fan.c | 224 ++++--- drivers/hwmon/it87.c | 3 + drivers/hwmon/occ/common.c | 34 +- drivers/hwmon/occ/common.h | 1 + drivers/hwmon/pmbus/adm1275.c | 2 +- drivers/hwmon/pmbus/pmbus_core.c | 37 +- drivers/hwmon/w83627hf.c | 4 + drivers/hwmon/w83793.c | 1 + drivers/hwspinlock/qcom_hwspinlock.c | 5 +- drivers/hwtracing/coresight/coresight-core.c | 34 +- .../hwtracing/coresight/coresight-cti-platform.c | 1 + drivers/hwtracing/coresight/coresight-etm-perf.c | 5 +- drivers/hwtracing/coresight/coresight-etm4x-core.c | 52 +- drivers/hwtracing/coresight/coresight-platform.c | 12 +- drivers/hwtracing/coresight/coresight-priv.h | 2 +- drivers/hwtracing/coresight/coresight-sysfs.c | 8 +- drivers/hwtracing/coresight/coresight-tmc-etr.c | 4 +- drivers/i2c/busses/i2c-imx.c | 36 +- drivers/i2c/busses/i2c-k1.c | 2 +- drivers/i2c/busses/i2c-mlxbf.c | 4 +- drivers/i2c/busses/i2c-mt65xx.c | 2 +- drivers/i2c/i2c-core-of.c | 5 - drivers/i3c/master.c | 145 ++++- drivers/i3c/master/dw-i3c-master.c | 15 +- drivers/i3c/master/dw-i3c-master.h | 2 - drivers/i3c/master/i3c-master-cdns.c | 14 +- drivers/i3c/master/mipi-i3c-hci/core.c | 48 +- drivers/i3c/master/mipi-i3c-hci/dma.c | 9 +- drivers/i3c/master/mipi-i3c-hci/hci.h | 1 + drivers/i3c/master/mipi-i3c-hci/ibi.h | 13 +- drivers/i3c/master/mipi-i3c-hci/pio.c | 7 +- drivers/i3c/master/svc-i3c-master.c | 30 +- drivers/iio/accel/mma8452.c | 2 + drivers/iio/adc/xilinx-ams.c | 5 + drivers/iio/dac/mcp47feb02.c | 37 +- drivers/iio/light/acpi-als.c | 6 +- drivers/iio/light/si1133.c | 14 +- drivers/iio/light/tcs3472.c | 38 +- drivers/iio/magnetometer/ak8975.c | 14 + drivers/iio/orientation/hid-sensor-rotation.c | 40 +- drivers/infiniband/core/cm.c | 13 +- drivers/infiniband/core/counters.c | 2 +- drivers/infiniband/core/frmr_pools.c | 106 ++- drivers/infiniband/core/nldev.c | 15 +- drivers/infiniband/core/restrack.c | 49 ++ drivers/infiniband/core/restrack.h | 1 + drivers/infiniband/core/uverbs_cmd.c | 10 +- drivers/infiniband/hw/bnxt_re/ib_verbs.c | 217 +++++-- drivers/infiniband/hw/bnxt_re/ib_verbs.h | 5 +- drivers/infiniband/hw/bnxt_re/main.c | 2 - drivers/infiniband/hw/bnxt_re/qplib_res.c | 11 + drivers/infiniband/hw/bnxt_re/qplib_sp.h | 1 + drivers/infiniband/hw/bnxt_re/uapi.c | 83 ++- drivers/infiniband/hw/hfi1/init.c | 13 +- drivers/infiniband/hw/hns/hns_roce_cq.c | 6 +- drivers/infiniband/hw/hns/hns_roce_debugfs.c | 19 +- drivers/infiniband/hw/hns/hns_roce_hem.c | 8 +- drivers/infiniband/hw/hns/hns_roce_hw_v2.c | 20 +- drivers/infiniband/hw/hns/hns_roce_main.c | 2 +- drivers/infiniband/hw/hns/hns_roce_mr.c | 6 +- drivers/infiniband/hw/hns/hns_roce_srq.c | 2 +- drivers/infiniband/hw/irdma/hw.c | 7 +- drivers/infiniband/hw/irdma/main.h | 3 +- drivers/infiniband/hw/irdma/utils.c | 12 +- drivers/infiniband/hw/irdma/verbs.c | 19 +- drivers/infiniband/hw/irdma/verbs.h | 1 - drivers/infiniband/hw/mana/main.c | 3 +- drivers/infiniband/hw/mlx4/mlx4_ib.h | 1 + drivers/infiniband/hw/mlx4/mr.c | 9 +- drivers/infiniband/hw/mlx4/sysfs.c | 45 +- drivers/infiniband/hw/mlx5/devx.c | 30 +- drivers/infiniband/hw/mlx5/main.c | 17 +- drivers/infiniband/hw/mlx5/mlx5_ib.h | 9 + drivers/infiniband/hw/mlx5/mr.c | 60 +- drivers/infiniband/hw/mlx5/odp.c | 12 +- drivers/infiniband/hw/mlx5/qp.c | 13 +- drivers/infiniband/hw/mlx5/restrack.c | 3 - drivers/infiniband/hw/mlx5/umr.c | 93 ++- drivers/infiniband/hw/mlx5/umr.h | 9 +- drivers/infiniband/sw/rxe/rxe_mmap.c | 19 +- drivers/infiniband/sw/rxe/rxe_net.c | 6 +- drivers/infiniband/sw/rxe/rxe_ns.c | 4 +- drivers/infiniband/sw/rxe/rxe_resp.c | 33 +- drivers/infiniband/sw/siw/siw_cm.c | 30 +- drivers/infiniband/ulp/srpt/ib_srpt.c | 5 +- drivers/input/misc/ims-pcu.c | 131 +++- drivers/iommu/amd/amd_iommu_types.h | 11 +- drivers/iommu/amd/init.c | 7 +- drivers/iommu/arm/arm-smmu/arm-smmu-qcom.c | 2 +- drivers/iommu/dma-iommu.c | 2 +- drivers/iommu/intel/iommu.c | 6 +- drivers/iommu/intel/pasid.c | 4 +- drivers/iommu/iommufd/pages.c | 10 +- drivers/irqchip/exynos-combiner.c | 4 - drivers/irqchip/irq-crossbar.c | 10 +- drivers/irqchip/irq-gic-v3-its.c | 6 +- drivers/irqchip/irq-riscv-imsic-early.c | 15 +- drivers/irqchip/irq-ts4800.c | 10 + drivers/leds/uleds.c | 3 +- drivers/mailbox/imx-mailbox.c | 3 +- drivers/mailbox/mailbox-mpfs.c | 2 +- drivers/mailbox/mailbox.c | 26 +- drivers/mailbox/mtk-adsp-mailbox.c | 9 +- drivers/md/dm-bufio.c | 4 +- drivers/md/dm-era-target.c | 10 +- drivers/md/dm-integrity.c | 12 +- drivers/md/dm-ioctl.c | 4 +- drivers/md/dm-log.c | 3 + drivers/md/dm-pcache/dm_pcache.c | 8 + drivers/md/dm-stats.c | 10 +- drivers/md/dm-thin-metadata.c | 67 +- drivers/md/dm-verity-fec.c | 4 +- drivers/md/dm-verity-fec.h | 2 +- drivers/md/dm-verity-loadpin.c | 2 +- drivers/md/dm-verity-target.c | 16 +- drivers/md/dm-verity.h | 2 +- drivers/md/dm.c | 24 +- drivers/md/md-bitmap.c | 9 +- drivers/md/md-bitmap.h | 2 +- drivers/md/md-llbitmap.c | 13 +- drivers/md/md.c | 27 +- drivers/md/md.h | 5 + drivers/md/raid1.c | 54 +- drivers/md/raid10.c | 57 +- drivers/md/raid5.c | 55 +- drivers/media/platform/qcom/camss/camss-vfe.c | 2 +- .../media/platform/qcom/iris/iris_platform_gen1.c | 2 +- drivers/media/platform/qcom/iris/iris_probe.c | 7 + drivers/media/platform/qcom/venus/core.c | 7 +- drivers/media/platform/qcom/venus/core.h | 1 + drivers/media/platform/qcom/venus/helpers.c | 4 +- drivers/media/platform/qcom/venus/hfi_parser.c | 6 +- drivers/media/platform/qcom/venus/hfi_platform.c | 24 - drivers/media/platform/qcom/venus/hfi_platform.h | 2 - .../media/platform/qcom/venus/hfi_platform_v4.c | 20 +- .../media/platform/qcom/venus/hfi_platform_v6.c | 16 +- drivers/media/platform/qcom/venus/pm_helpers.c | 8 +- drivers/media/platform/rockchip/rga/rga-hw.c | 2 +- drivers/media/platform/rockchip/rga/rga-hw.h | 2 +- drivers/media/platform/synopsys/dw-mipi-csi2rx.c | 15 +- drivers/media/usb/uvc/uvc_status.c | 28 +- drivers/media/usb/uvc/uvc_video.c | 179 ++++-- drivers/media/v4l2-core/v4l2-common.c | 1 + drivers/memory/tegra/mc.c | 14 + drivers/memory/tegra/tegra186-emc.c | 4 +- drivers/memstick/core/ms_block.c | 4 + drivers/mfd/cs42l43.c | 2 +- drivers/mfd/rsmu_i2c.c | 6 +- drivers/mfd/rsmu_spi.c | 5 +- drivers/mfd/sm501.c | 4 +- drivers/mfd/tps6586x.c | 2 +- drivers/mmc/core/block.c | 3 +- drivers/mmc/core/mmc_test.c | 18 +- drivers/mmc/host/sdhci-esdhc-imx.c | 91 ++- drivers/mmc/host/sdhci-of-dwcmshc.c | 14 +- drivers/mmc/host/vub300.c | 36 +- drivers/mtd/devices/mchp23k256.c | 2 +- drivers/mtd/devices/slram.c | 22 +- drivers/mtd/maps/vmu-flash.c | 7 +- drivers/mtd/mtd_virt_concat.c | 4 +- drivers/mtd/nand/onenand/onenand_samsung.c | 7 +- drivers/mtd/nand/raw/fsl_ifc_nand.c | 9 +- drivers/mtd/nand/raw/lpc32xx_mlc.c | 12 +- drivers/mtd/nand/raw/lpc32xx_slc.c | 12 +- drivers/mtd/nand/raw/nand_base.c | 24 +- drivers/mtd/nand/raw/pl35x-nand-controller.c | 2 +- drivers/mtd/spi-nor/Kconfig | 1 - drivers/mtd/spi-nor/debugfs.c | 1 + drivers/mtd/spi-nor/spansion.c | 4 +- drivers/mtd/spi-nor/swp.c | 11 +- drivers/net/amt.c | 10 +- drivers/net/bareudp.c | 4 +- drivers/net/bonding/bond_3ad.c | 27 +- drivers/net/bonding/bond_main.c | 1 + drivers/net/bonding/bond_netlink.c | 16 + drivers/net/bonding/bond_options.c | 27 + drivers/net/can/usb/esd_usb.c | 5 +- drivers/net/dsa/mxl862xx/mxl862xx-host.c | 18 +- drivers/net/dsa/qca/qca8k-leds.c | 3 +- drivers/net/dsa/realtek/rtl8366rb-leds.c | 8 +- drivers/net/dsa/sja1105/sja1105_ptp.c | 2 +- drivers/net/ethernet/airoha/airoha_eth.c | 6 +- drivers/net/ethernet/airoha/airoha_ppe.c | 9 +- drivers/net/ethernet/airoha/airoha_ppe_debugfs.c | 2 - drivers/net/ethernet/amazon/ena/ena_netdev.c | 23 +- drivers/net/ethernet/broadcom/bnx2x/bnx2x_cmn.c | 3 +- drivers/net/ethernet/broadcom/bnxt/bnxt.c | 58 +- drivers/net/ethernet/broadcom/bnxt/bnxt.h | 6 + drivers/net/ethernet/broadcom/bnxt/bnxt_ethtool.c | 1 + drivers/net/ethernet/broadcom/genet/bcmgenet.c | 23 +- drivers/net/ethernet/cadence/macb_main.c | 29 +- .../ethernet/cavium/liquidio/cn23xx_pf_device.c | 18 +- drivers/net/ethernet/cavium/liquidio/lio_main.c | 27 - .../net/ethernet/cavium/liquidio/octeon_device.h | 3 - .../net/ethernet/cavium/liquidio/octeon_mailbox.c | 33 +- drivers/net/ethernet/chelsio/cxgb4/t4_hw.c | 8 - .../net/ethernet/freescale/dpaa2/dpaa2-switch.c | 10 +- drivers/net/ethernet/freescale/enetc/enetc.c | 7 + drivers/net/ethernet/freescale/enetc/enetc4_pf.c | 3 + drivers/net/ethernet/freescale/fman/fman.c | 4 +- drivers/net/ethernet/freescale/gianfar.c | 16 +- drivers/net/ethernet/google/gve/gve_rx_dqo.c | 28 +- drivers/net/ethernet/hisilicon/hns3/hns3_ethtool.c | 31 +- .../ethernet/hisilicon/hns3/hns3pf/hclge_main.c | 108 +++- .../ethernet/hisilicon/hns3/hns3pf/hclge_main.h | 1 + drivers/net/ethernet/ibm/emac/core.c | 13 +- drivers/net/ethernet/intel/e1000e/ich8lan.c | 3 + drivers/net/ethernet/intel/e1000e/netdev.c | 15 +- drivers/net/ethernet/intel/i40e/i40e_debug.h | 2 +- drivers/net/ethernet/intel/ice/ice_common.c | 1 - drivers/net/ethernet/intel/ice/ice_dpll.c | 20 +- drivers/net/ethernet/intel/ice/ice_eswitch.c | 4 +- drivers/net/ethernet/intel/ice/ice_ethtool.c | 12 +- drivers/net/ethernet/intel/ice/ice_main.c | 16 +- drivers/net/ethernet/intel/ice/ice_vf_lib.c | 2 +- drivers/net/ethernet/intel/idpf/virtchnl2.h | 12 +- drivers/net/ethernet/intel/igc/igc_main.c | 2 +- drivers/net/ethernet/intel/ixgbe/ixgbe_main.c | 3 +- drivers/net/ethernet/intel/ixgbe/ixgbe_type.h | 1 + drivers/net/ethernet/intel/ixgbe/ixgbe_x550.c | 2 +- drivers/net/ethernet/marvell/mvneta.c | 3 + .../net/ethernet/marvell/octeontx2/af/cn20k/npc.c | 9 +- drivers/net/ethernet/marvell/octeontx2/af/mbox.h | 31 +- drivers/net/ethernet/marvell/octeontx2/af/mcs.c | 6 +- .../net/ethernet/marvell/octeontx2/af/rvu_cn10k.c | 9 + .../ethernet/marvell/octeontx2/af/rvu_debugfs.c | 59 +- .../ethernet/marvell/octeontx2/af/rvu_devlink.c | 27 +- .../net/ethernet/marvell/octeontx2/af/rvu_nix.c | 15 +- .../net/ethernet/marvell/octeontx2/af/rvu_npc.c | 40 +- .../net/ethernet/marvell/octeontx2/af/rvu_npc_fs.c | 2 +- .../ethernet/marvell/octeontx2/nic/cn10k_macsec.c | 10 +- .../net/ethernet/marvell/octeontx2/nic/otx2_pf.c | 83 ++- .../net/ethernet/marvell/octeontx2/nic/otx2_vf.c | 22 +- .../net/ethernet/marvell/prestera/prestera_main.c | 2 +- drivers/net/ethernet/mediatek/mtk_eth_soc.c | 10 +- drivers/net/ethernet/mediatek/mtk_ppe.c | 4 +- drivers/net/ethernet/mediatek/mtk_wed_debugfs.c | 6 +- drivers/net/ethernet/mediatek/mtk_wed_mcu.c | 8 +- drivers/net/ethernet/mellanox/mlx5/core/Makefile | 2 +- drivers/net/ethernet/mellanox/mlx5/core/en.h | 12 + .../ethernet/mellanox/mlx5/core/en/hv_vhca_stats.c | 37 +- .../ethernet/mellanox/mlx5/core/en_accel/macsec.c | 47 +- drivers/net/ethernet/mellanox/mlx5/core/en_main.c | 14 +- drivers/net/ethernet/mellanox/mlx5/core/en_stats.c | 9 +- drivers/net/ethernet/mellanox/mlx5/core/en_tc.c | 3 + drivers/net/ethernet/mellanox/mlx5/core/eswitch.h | 17 +- .../ethernet/mellanox/mlx5/core/eswitch_offloads.c | 24 + .../net/ethernet/mellanox/mlx5/core/ipoib/ipoib.c | 3 +- drivers/net/ethernet/mellanox/mlx5/core/lag/lag.c | 507 +++++++++------ drivers/net/ethernet/mellanox/mlx5/core/lag/lag.h | 102 ++- .../net/ethernet/mellanox/mlx5/core/lag/mpesw.c | 41 +- .../ethernet/mellanox/mlx5/core/lag/shared_fdb.c | 235 +++++++ .../net/ethernet/mellanox/mlx5/core/lib/devcom.c | 8 + .../net/ethernet/mellanox/mlx5/core/lib/devcom.h | 1 + .../net/ethernet/mellanox/mlx5/core/lib/hv_vhca.c | 8 +- .../net/ethernet/mellanox/mlx5/core/lib/hv_vhca.h | 6 +- .../net/ethernet/mellanox/mlx5/core/lib/port_tun.c | 3 +- drivers/net/ethernet/mellanox/mlx5/core/lib/sd.c | 10 + drivers/net/ethernet/mellanox/mlx5/core/lib/sd.h | 10 + drivers/net/ethernet/mellanox/mlx5/core/lib/st.c | 1 + drivers/net/ethernet/mellanox/mlx5/core/main.c | 12 +- .../ethernet/mellanox/mlx5/core/steering/hws/bwc.c | 1 + drivers/net/ethernet/mellanox/mlxsw/spectrum.c | 2 +- .../net/ethernet/mellanox/mlxsw/spectrum_router.c | 1 + drivers/net/ethernet/meta/fbnic/fbnic_fw.c | 9 +- drivers/net/ethernet/meta/fbnic/fbnic_netdev.c | 7 +- drivers/net/ethernet/meta/fbnic/fbnic_pci.c | 4 + drivers/net/ethernet/meta/fbnic/fbnic_rpc.c | 2 + drivers/net/ethernet/meta/fbnic/fbnic_txrx.c | 11 +- drivers/net/ethernet/microchip/lan743x_main.c | 2 +- .../ethernet/microchip/lan966x/lan966x_vcap_impl.c | 5 +- .../ethernet/microchip/sparx5/sparx5_switchdev.c | 4 +- .../ethernet/microchip/sparx5/sparx5_vcap_impl.c | 5 +- drivers/net/ethernet/microchip/vcap/vcap_api.c | 72 ++- drivers/net/ethernet/microchip/vcap/vcap_api.h | 3 +- .../net/ethernet/microchip/vcap/vcap_api_debugfs.c | 8 +- .../microchip/vcap/vcap_api_debugfs_kunit.c | 3 +- .../net/ethernet/microchip/vcap/vcap_api_kunit.c | 3 +- .../net/ethernet/microchip/vcap/vcap_api_private.h | 3 + drivers/net/ethernet/microsoft/mana/gdma_main.c | 2 + drivers/net/ethernet/microsoft/mana/mana_bpf.c | 3 +- drivers/net/ethernet/microsoft/mana/mana_en.c | 80 ++- drivers/net/ethernet/mucse/rnpgbe/rnpgbe_mbx.c | 26 +- drivers/net/ethernet/mucse/rnpgbe/rnpgbe_mbx.h | 5 +- drivers/net/ethernet/mucse/rnpgbe/rnpgbe_mbx_fw.c | 82 +-- drivers/net/ethernet/mucse/rnpgbe/rnpgbe_mbx_fw.h | 14 + drivers/net/ethernet/oa_tc6.c | 14 +- .../net/ethernet/pensando/ionic/ionic_ethtool.c | 11 +- drivers/net/ethernet/qlogic/qede/qede_fp.c | 9 +- .../net/ethernet/qualcomm/rmnet/rmnet_handlers.c | 5 +- drivers/net/ethernet/qualcomm/rmnet/rmnet_map.h | 1 + .../net/ethernet/qualcomm/rmnet/rmnet_map_data.c | 78 ++- .../net/ethernet/stmicro/stmmac/dwmac-spacemit.c | 13 +- drivers/net/ethernet/sun/sungem.c | 13 +- drivers/net/ethernet/sunplus/spl2sw_phy.c | 6 +- drivers/net/ethernet/ti/icssg/icssg_common.c | 120 ++-- drivers/net/ethernet/wangxun/libwx/wx_lib.c | 1 + drivers/net/ethernet/wangxun/libwx/wx_type.h | 1 + drivers/net/geneve.c | 24 +- drivers/net/gtp.c | 10 +- drivers/net/ieee802154/ca8210.c | 9 +- drivers/net/ipa/ipa_smp2p.c | 30 +- drivers/net/macsec.c | 9 +- drivers/net/mdio/Kconfig | 3 +- drivers/net/netconsole.c | 12 +- drivers/net/ovpn/udp.c | 2 +- drivers/net/pfcp.c | 5 +- drivers/net/phy/realtek/realtek_main.c | 3 +- drivers/net/phy/sfp.c | 1 + drivers/net/pse-pd/pse_core.c | 6 +- drivers/net/thunderbolt/main.c | 8 +- drivers/net/usb/gl620a.c | 6 +- drivers/net/usb/lan78xx.c | 55 +- drivers/net/usb/net1080.c | 2 +- drivers/net/veth.c | 2 + drivers/net/virtio_net.c | 27 +- drivers/net/vxlan/vxlan_core.c | 14 +- drivers/net/wan/ixp4xx_hss.c | 4 +- drivers/net/wireguard/socket.c | 8 +- drivers/net/wireless/ath/ath11k/mhi.c | 4 +- drivers/net/wireless/ath/ath11k/pci.c | 8 + drivers/net/wireless/ath/ath12k/ahb.c | 25 +- drivers/net/wireless/ath/ath12k/dp.c | 10 +- drivers/net/wireless/ath/ath12k/dp_mon.c | 6 +- drivers/net/wireless/ath/ath12k/mac.c | 21 +- drivers/net/wireless/ath/ath12k/pci.c | 2 +- drivers/net/wireless/ath/ath12k/wifi7/dp_rx.c | 4 +- drivers/net/wireless/ath/ath9k/xmit.c | 5 + drivers/net/wireless/ath/wcn36xx/smd.c | 13 + .../broadcom/brcm80211/brcmfmac/cyw/core.c | 6 + drivers/net/wireless/marvell/libertas_tf/main.c | 2 +- drivers/net/wireless/marvell/mwifiex/cfg80211.c | 2 +- drivers/net/wireless/marvell/mwifiex/join.c | 1 - drivers/net/wireless/mediatek/mt76/channel.c | 2 +- drivers/net/wireless/mediatek/mt76/mac80211.c | 4 +- drivers/net/wireless/mediatek/mt76/mt7615/init.c | 1 - drivers/net/wireless/mediatek/mt76/mt7915/mac.c | 10 +- drivers/net/wireless/mediatek/mt76/mt7921/mac.c | 5 +- drivers/net/wireless/mediatek/mt76/mt7921/pci.c | 17 +- drivers/net/wireless/mediatek/mt76/mt7925/mac.c | 20 +- drivers/net/wireless/mediatek/mt76/mt7925/main.c | 4 +- drivers/net/wireless/mediatek/mt76/mt7925/pci.c | 4 +- .../net/wireless/mediatek/mt76/mt7925/testmode.c | 5 + drivers/net/wireless/mediatek/mt76/mt792x_core.c | 4 +- drivers/net/wireless/mediatek/mt76/mt7996/dma.c | 2 +- drivers/net/wireless/mediatek/mt76/mt7996/mac.c | 35 +- drivers/net/wireless/mediatek/mt76/mt7996/main.c | 9 +- drivers/net/wireless/mediatek/mt76/mt7996/mcu.c | 5 +- drivers/net/wireless/mediatek/mt76/mt7996/mt7996.h | 3 +- drivers/net/wireless/mediatek/mt76/mt7996/pci.c | 2 +- drivers/net/wireless/mediatek/mt76/tx.c | 2 +- drivers/net/wireless/ralink/rt2x00/rt2x00dev.c | 12 +- drivers/net/wireless/realtek/rtw88/pci.c | 13 +- drivers/net/wireless/realtek/rtw89/core.h | 3 + drivers/net/wireless/realtek/rtw89/fw.c | 2 +- drivers/net/wireless/realtek/rtw89/pci.c | 8 +- drivers/net/wireless/ti/wlcore/main.c | 23 +- drivers/net/wwan/iosm/iosm_ipc_mux_codec.c | 40 +- drivers/net/wwan/t7xx/t7xx_hif_cldma.c | 3 + drivers/net/wwan/t7xx/t7xx_port_wwan.c | 2 + drivers/ntb/hw/epf/ntb_hw_epf.c | 81 ++- drivers/ntb/ntb_transport.c | 10 +- drivers/nvdimm/btt.c | 14 +- drivers/nvdimm/nd.h | 11 +- drivers/nvdimm/region_devs.c | 66 +- drivers/nvme/host/apple.c | 12 +- drivers/nvme/host/core.c | 4 +- drivers/nvme/host/pci.c | 9 +- drivers/nvme/target/core.c | 2 +- drivers/nvme/target/fabrics-cmd-auth.c | 26 +- drivers/nvme/target/rdma.c | 18 +- drivers/nvme/target/tcp.c | 11 +- drivers/of/cpu.c | 2 +- drivers/of/dynamic.c | 1 - drivers/of/of_reserved_mem.c | 28 +- drivers/of/overlay.c | 15 + drivers/of/platform.c | 5 - drivers/opp/core.c | 5 +- drivers/pci/controller/dwc/pci-meson.c | 13 +- .../pci/controller/dwc/pcie-designware-debugfs.c | 10 +- drivers/pci/controller/dwc/pcie-designware.c | 16 +- drivers/pci/controller/dwc/pcie-designware.h | 1 + drivers/pci/controller/dwc/pcie-intel-gw.c | 46 +- drivers/pci/controller/dwc/pcie-qcom.c | 43 +- drivers/pci/controller/pci-loongson.c | 31 +- drivers/pci/controller/pcie-iproc-bcma.c | 2 +- drivers/pci/controller/pcie-iproc-platform.c | 2 +- drivers/pci/controller/pcie-iproc.c | 1 - drivers/pci/controller/pcie-iproc.h | 2 - drivers/pci/controller/pcie-mediatek-gen3.c | 4 +- drivers/pci/controller/pcie-mediatek.c | 19 +- drivers/pci/controller/pcie-rcar-host.c | 1 - drivers/pci/endpoint/functions/pci-epf-ntb.c | 21 +- drivers/pci/endpoint/functions/pci-epf-vntb.c | 130 +++- drivers/pci/msi/msi.c | 4 +- drivers/pci/pci.c | 3 - drivers/pci/pwrctrl/core.c | 26 +- drivers/pci/rom.c | 149 ++++- drivers/phy/freescale/phy-fsl-imx8qm-lvds-phy.c | 26 +- drivers/phy/phy-can-transceiver.c | 3 + drivers/pinctrl/Kconfig | 1 + drivers/pinctrl/cirrus/pinctrl-cs42l43.c | 6 +- drivers/pinctrl/mediatek/mtk-eint.c | 6 +- drivers/pinctrl/mediatek/pinctrl-airoha.c | 122 +++- drivers/pinctrl/mediatek/pinctrl-mt8167.c | 2 +- drivers/pinctrl/mediatek/pinctrl-mt8516.c | 2 +- drivers/pinctrl/meson/pinctrl-amlogic-a4.c | 15 +- drivers/pinctrl/meson/pinctrl-meson.c | 2 +- drivers/pinctrl/nuvoton/pinctrl-ma35.c | 3 +- drivers/pinctrl/nuvoton/pinctrl-ma35d1.c | 470 ++++++++------ drivers/pinctrl/pinconf-generic.c | 5 +- drivers/pinctrl/qcom/tlmm-test.c | 19 +- drivers/pinctrl/renesas/pinctrl-rzg2l.c | 8 +- drivers/pinctrl/spacemit/pinctrl-k1.c | 2 +- drivers/pinctrl/sunxi/pinctrl-sun55i-a523-r.c | 1 - drivers/pinctrl/sunxi/pinctrl-sun55i-a523.c | 1 - drivers/pinctrl/sunxi/pinctrl-sunxi.c | 2 +- drivers/platform/chrome/chromeos_privacy_screen.c | 3 + drivers/platform/chrome/chromeos_tbmc.c | 6 +- drivers/platform/chrome/wilco_ec/event.c | 8 +- drivers/platform/x86/amd/pmc/pmc-quirks.c | 39 ++ drivers/platform/x86/amd/pmc/pmc.c | 83 ++- drivers/platform/x86/amd/pmc/pmc.h | 2 + drivers/platform/x86/bitland-mifs-wmi.c | 8 + drivers/platform/x86/classmate-laptop.c | 12 +- drivers/platform/x86/dell/dell-laptop.c | 5 + drivers/platform/x86/hp/hp-wmi.c | 8 + .../x86/intel/speed_select_if/isst_tpmi_core.c | 2 +- drivers/platform/x86/intel/vsec.c | 17 +- drivers/platform/x86/intel/vsec_tpmi.c | 25 +- drivers/platform/x86/xo15-ebook.c | 7 +- drivers/pmdomain/imx/imx8m-blk-ctrl.c | 46 +- drivers/pmdomain/imx/imx93-blk-ctrl.c | 60 +- drivers/pmdomain/mediatek/mtk-pm-domains.c | 40 +- drivers/power/sequencing/core.c | 9 +- drivers/power/supply/bq257xx_charger.c | 7 +- drivers/power/supply/charger-manager.c | 6 +- drivers/power/supply/cpcap-battery.c | 11 +- drivers/power/supply/max17042_battery.c | 3 +- drivers/power/supply/power_supply_core.c | 11 +- drivers/pwm/pwm-imx27.c | 8 +- drivers/pwm/pwm-rzg2l-gpt.c | 8 +- drivers/rapidio/devices/tsi721.c | 3 +- drivers/regulator/core.c | 4 +- drivers/regulator/ltc3676.c | 10 +- drivers/remoteproc/qcom_common.c | 14 +- drivers/remoteproc/qcom_q6v5_wcss.c | 23 +- drivers/remoteproc/xlnx_r5_remoteproc.c | 46 +- drivers/reset/reset-imx7.c | 6 + drivers/reset/reset-sunxi.c | 4 +- drivers/rpmsg/qcom_glink_native.c | 2 - drivers/rpmsg/rpmsg_core.c | 43 +- drivers/rpmsg/virtio_rpmsg_bus.c | 1 - drivers/rtc/rtc-abx80x.c | 3 +- drivers/rtc/rtc-cmos.c | 6 + drivers/rtc/rtc-ds1307.c | 30 +- drivers/rtc/rtc-isl1208.c | 15 +- drivers/rtc/rtc-mpfs.c | 2 +- drivers/rtc/rtc-msc313.c | 4 +- drivers/rtc/rtc-renesas-rtca3.c | 2 +- drivers/s390/char/monwriter.c | 3 + drivers/s390/crypto/pkey_api.c | 8 +- drivers/s390/crypto/pkey_pckmo.c | 4 + drivers/s390/crypto/zcrypt_cex2a.c | 0 drivers/s390/crypto/zcrypt_cex2a.h | 0 drivers/s390/crypto/zcrypt_cex2c.c | 0 drivers/s390/crypto/zcrypt_cex2c.h | 0 drivers/scsi/elx/efct/efct_hw.c | 2 + drivers/scsi/elx/efct/efct_unsol.c | 1 + drivers/scsi/hisi_sas/hisi_sas_v3_hw.c | 12 +- drivers/scsi/hpsa.c | 4 + drivers/scsi/lpfc/lpfc_init.c | 3 +- drivers/scsi/pm8001/pm8001_ctl.c | 5 +- drivers/scsi/scsi_scan.c | 2 +- drivers/scsi/scsi_transport_sas.c | 101 ++- drivers/scsi/sg.c | 7 +- drivers/scsi/smartpqi/smartpqi_init.c | 2 +- drivers/soc/fsl/qe/qe.c | 3 + drivers/soc/fsl/qe/qe_ports_ic.c | 21 +- drivers/soc/mediatek/mt8167-mmsys.h | 11 +- drivers/soc/ti/k3-ringacc.c | 4 +- drivers/soc/xilinx/zynqmp_power.c | 47 +- drivers/soundwire/generic_bandwidth_allocation.c | 57 +- drivers/soundwire/intel_ace2x.c | 1 + drivers/soundwire/stream.c | 7 + drivers/spi/spi-atcspi200.c | 13 +- drivers/spi/spi-atmel.c | 133 ++-- drivers/spi/spi-dw.h | 1 + drivers/spi/spi-ep93xx.c | 1 + drivers/spi/spi-hisi-kunpeng.c | 6 +- drivers/spi/spi-imx.c | 19 +- drivers/spi/spi-meson-spifc.c | 1 + drivers/spi/spi-rpc-if.c | 6 +- drivers/spi/spi-rzv2h-rspi.c | 4 +- drivers/spi/spi-sh-msiof.c | 10 +- drivers/spi/spi-uniphier.c | 4 +- drivers/spi/spi-xilinx.c | 11 +- drivers/spi/spi.c | 5 - drivers/staging/media/atomisp/i2c/atomisp-gc2235.c | 29 +- drivers/staging/media/atomisp/pci/atomisp_cmd.c | 6 +- drivers/staging/media/atomisp/pci/sh_css.c | 8 +- drivers/staging/media/sunxi/cedrus/cedrus.c | 4 +- drivers/staging/most/video/video.c | 7 +- drivers/staging/nvec/nvec.c | 4 +- drivers/staging/rtl8723bs/core/rtw_security.c | 2 +- drivers/target/iscsi/iscsi_target_auth.c | 6 +- drivers/target/loopback/tcm_loop.c | 64 -- drivers/target/target_core_fabric_lib.c | 89 ++- drivers/target/target_core_internal.h | 3 +- drivers/target/target_core_pr.c | 12 +- drivers/thermal/intel/therm_throt.c | 7 +- drivers/thermal/testing/command.c | 48 +- drivers/thermal/testing/thermal_testing.h | 8 + drivers/thermal/testing/zone.c | 7 +- drivers/thermal/thermal_hwmon.c | 156 ++--- drivers/thunderbolt/debugfs.c | 8 +- drivers/tty/serial/8250/8250_omap.c | 3 +- drivers/tty/serial/max310x.c | 12 + drivers/tty/serial/msm_serial.c | 3 +- drivers/ufs/core/ufs_trace.h | 36 +- drivers/ufs/core/ufshcd.c | 36 +- drivers/usb/atm/ueagle-atm.c | 94 ++- drivers/usb/host/max3421-hcd.c | 8 + drivers/vdpa/octeon_ep/octep_vdpa_main.c | 20 +- drivers/vdpa/vdpa_user/iova_domain.c | 2 +- drivers/vdpa/vdpa_user/vduse_dev.c | 197 +++++- drivers/vfio/pci/qat/main.c | 18 +- drivers/vfio/pci/xe/main.c | 2 - drivers/vhost/net.c | 15 +- drivers/vhost/vdpa.c | 29 +- drivers/vhost/vhost.c | 11 +- drivers/video/backlight/ktd2801-backlight.c | 1 + drivers/video/fbdev/aty/radeon_base.c | 1 + drivers/video/fbdev/broadsheetfb.c | 8 +- drivers/video/fbdev/carminefb.c | 1 + drivers/video/fbdev/core/fbcon.c | 10 +- drivers/video/fbdev/efifb.c | 1 + drivers/video/fbdev/hecubafb.c | 6 +- drivers/video/fbdev/i740fb.c | 1 + drivers/video/fbdev/metronomefb.c | 8 +- drivers/video/fbdev/nvidia/nvidia.c | 1 + drivers/video/fbdev/s3fb.c | 1 + drivers/video/fbdev/sm501fb.c | 16 +- drivers/video/fbdev/sm712.h | 2 +- drivers/video/fbdev/tdfxfb.c | 1 + drivers/video/fbdev/tridentfb.c | 1 + drivers/video/fbdev/uvesafb.c | 4 +- drivers/video/fbdev/vesafb.c | 1 + drivers/virtio/virtio_rtc_driver.c | 28 +- drivers/watchdog/sama5d4_wdt.c | 48 +- drivers/watchdog/sp5100_tco.c | 3 +- drivers/watchdog/sprd_wdt.c | 5 +- drivers/watchdog/watchdog_core.c | 3 + drivers/xen/gntdev.c | 8 +- drivers/xen/pvcalls-front.c | 88 ++- drivers/xen/xen-scsiback.c | 30 +- fs/9p/vfs_inode.c | 28 +- fs/9p/vfs_inode_dotl.c | 4 +- fs/afs/callback.c | 17 +- fs/afs/cell.c | 27 +- fs/afs/cm_security.c | 3 +- fs/afs/cmservice.c | 7 +- fs/afs/dir.c | 40 +- fs/afs/dynroot.c | 2 +- fs/afs/fs_operation.c | 2 +- fs/afs/inode.c | 15 +- fs/afs/internal.h | 3 +- fs/afs/rxrpc.c | 16 +- fs/afs/super.c | 5 +- fs/afs/vl_list.c | 10 +- fs/afs/volume.c | 2 +- fs/bpf_fs_kfuncs.c | 10 +- fs/btrfs/compression.c | 18 +- fs/btrfs/delalloc-space.c | 2 + fs/btrfs/disk-io.c | 2 +- fs/btrfs/extent-tree.c | 5 +- fs/btrfs/inode.c | 2 +- fs/btrfs/lzo.c | 11 + fs/btrfs/reflink.c | 101 +-- fs/btrfs/space-info.c | 2 + fs/btrfs/space-info.h | 11 + fs/btrfs/super.c | 4 +- fs/btrfs/zoned.c | 64 +- fs/cachefiles/namei.c | 3 +- fs/configfs/dir.c | 57 +- fs/crypto/fscrypt_private.h | 32 +- fs/crypto/keyring.c | 216 +++---- fs/dlm/midcomms.c | 4 +- fs/efs/file.c | 21 +- fs/erofs/inode.c | 5 +- fs/erofs/super.c | 4 +- fs/eventpoll.c | 609 ++++++++++++------ fs/exfat/balloc.c | 2 +- fs/exfat/dir.c | 48 +- fs/exfat/exfat_fs.h | 131 +++- fs/exfat/fatent.c | 4 +- fs/exfat/file.c | 8 +- fs/exfat/inode.c | 26 +- fs/exfat/namei.c | 26 +- fs/exfat/super.c | 5 +- fs/ext2/file.c | 9 +- fs/ext4/ext4.h | 20 + fs/ext4/fast_commit.c | 50 +- fs/ext4/inode.c | 3 +- fs/ext4/ioctl.c | 15 +- fs/ext4/namei.c | 2 +- fs/f2fs/data.c | 29 + fs/f2fs/f2fs.h | 1 + fs/f2fs/segment.c | 8 + fs/f2fs/xattr.c | 6 +- fs/fhandle.c | 2 +- fs/fs-writeback.c | 5 - fs/hfs/inode.c | 2 +- fs/hfsplus/btree.c | 2 + fs/hfsplus/xattr.c | 1 - fs/iomap/bio.c | 13 +- fs/iomap/buffered-io.c | 2 +- fs/iomap/direct-io.c | 7 +- fs/iomap/ioend.c | 8 +- fs/jbd2/journal.c | 2 + fs/kernfs/dir.c | 33 +- fs/kernfs/file.c | 13 +- fs/kernfs/inode.c | 36 +- fs/kernfs/kernfs-internal.h | 24 +- fs/kernfs/mount.c | 2 +- fs/lockd/lockd.h | 8 + fs/lockd/svc4proc.c | 19 +- fs/lockd/svcproc.c | 2 +- fs/lockd/svcsubs.c | 7 +- fs/minix/minix.h | 2 +- fs/namei.c | 4 + fs/netfs/read_retry.c | 7 +- fs/netfs/write_issue.c | 18 +- fs/netfs/write_retry.c | 7 +- fs/nfs/callback_proc.c | 9 +- fs/nfs/delegation.c | 9 +- fs/nfs/filelayout/filelayout.c | 2 + fs/nfs/flexfilelayout/flexfilelayout.c | 29 + fs/nfs/flexfilelayout/flexfilelayout.h | 16 + fs/nfs/fs_context.c | 8 +- fs/nfs/internal.h | 12 +- fs/nfs/nfs4proc.c | 22 +- fs/nfs/pnfs.c | 4 +- fs/nfs/pnfs_nfs.c | 2 +- fs/nfs/read.c | 25 +- fs/nfs/write.c | 14 +- fs/nfsd/nfs4state.c | 16 +- fs/nilfs2/namei.c | 2 +- fs/nilfs2/super.c | 2 - fs/ntfs/aops.c | 23 +- fs/ntfs/attrib.c | 345 +++++++--- fs/ntfs/attrib.h | 4 + fs/ntfs/attrlist.c | 20 +- fs/ntfs/dir.c | 79 +-- fs/ntfs/ea.c | 16 +- fs/ntfs/index.c | 297 ++++++--- fs/ntfs/index.h | 12 +- fs/ntfs/inode.c | 38 +- fs/ntfs/logfile.c | 2 +- fs/ntfs/mft.c | 137 +--- fs/ntfs/namei.c | 67 +- fs/ntfs/runlist.c | 12 +- fs/ntfs/super.c | 53 +- fs/ntfs3/attrib.c | 10 +- fs/ntfs3/frecord.c | 17 +- fs/ntfs3/fslog.c | 147 ++++- fs/ntfs3/index.c | 45 +- fs/ntfs3/inode.c | 9 +- fs/ntfs3/lznt.c | 2 +- fs/ntfs3/namei.c | 2 +- fs/ntfs3/ntfs_fs.h | 3 +- fs/ntfs3/run.c | 14 +- fs/ocfs2/alloc.c | 2 +- fs/ocfs2/aops.c | 13 +- fs/ocfs2/buffer_head_io.c | 7 +- fs/ocfs2/dlm/dlmdebug.c | 16 +- fs/ocfs2/dlmglue.c | 17 + fs/ocfs2/inode.c | 206 +++++- fs/ocfs2/journal.c | 13 +- fs/ocfs2/journal.h | 3 + fs/ocfs2/move_extents.c | 4 +- fs/ocfs2/ocfs2.h | 2 - fs/ocfs2/quota_local.c | 2 +- fs/ocfs2/refcounttree.c | 9 +- fs/ocfs2/stack_user.c | 10 +- fs/ocfs2/super.c | 2 - fs/ocfs2/sysfile.c | 9 +- fs/orangefs/dir.c | 7 +- fs/overlayfs/copy_up.c | 12 +- fs/overlayfs/inode.c | 4 +- fs/pidfs.c | 45 +- fs/proc/generic.c | 9 +- fs/proc/page.c | 2 +- fs/proc/task_mmu.c | 74 ++- fs/resctrl/rdtgroup.c | 33 +- fs/smb/client/cifs_fs_sb.h | 1 + fs/smb/client/cifsfs.c | 12 + fs/smb/client/connect.c | 4 + fs/smb/client/file.c | 6 + fs/smb/client/fs_context.c | 102 +-- fs/smb/client/inode.c | 30 +- fs/smb/client/ioctl.c | 12 +- fs/smb/client/misc.c | 8 + fs/smb/client/reparse.c | 17 +- fs/smb/client/smb1pdu.h | 5 - fs/smb/client/smb2ops.c | 38 +- fs/smb/client/smb2pdu.h | 4 - fs/smb/common/fscc.h | 18 + fs/smb/server/auth.c | 47 +- fs/smb/server/auth.h | 7 +- fs/smb/server/mgmt/user_session.c | 4 +- fs/smb/server/mgmt/user_session.h | 1 + fs/smb/server/misc.c | 33 - fs/smb/server/misc.h | 1 - fs/smb/server/oplock.c | 6 + fs/smb/server/smb2pdu.c | 171 +++-- fs/smb/server/smb2pdu.h | 3 - fs/smb/server/smbacl.c | 7 +- fs/smb/server/vfs.c | 55 +- fs/smb/server/vfs_cache.c | 29 +- fs/super.c | 11 +- fs/sysfs/file.c | 4 + fs/udf/super.c | 2 +- fs/xattr.c | 265 ++++---- fs/xfs/xfs_aops.c | 3 +- fs/xfs/xfs_rtalloc.c | 8 + fs/xfs/xfs_zone_alloc.c | 11 +- fs/xfs/xfs_zone_alloc.h | 1 + fs/xfs/xfs_zone_gc.c | 4 +- include/acpi/platform/aclinuxex.h | 1 + include/asm-generic/bitops/lock.h | 22 +- include/asm-generic/uaccess.h | 3 +- include/dt-bindings/clock/qcom,x1e80100-camcc.h | 3 + include/dt-bindings/power/fsl,imx93-power.h | 1 + include/linux/amba/bus.h | 5 - include/linux/arm-smccc.h | 5 + include/linux/bpf-cgroup.h | 5 +- include/linux/bpf.h | 2 + include/linux/bpf_lsm.h | 6 + include/linux/cdx/cdx_bus.h | 4 - include/linux/device.h | 5 +- include/linux/edac.h | 3 + include/linux/filelock.h | 2 +- include/linux/firmware.h | 10 + .../linux/firmware/samsung/exynos-acpm-protocol.h | 10 +- include/linux/firmware/xlnx-zynqmp.h | 21 + include/linux/fs.h | 1 + include/linux/fwnode.h | 3 + include/linux/hfs_common.h | 1 + include/linux/host1x.h | 7 + include/linux/hyperv.h | 5 - include/linux/i3c/master.h | 14 +- include/linux/ieee80211-eht.h | 12 +- include/linux/ieee80211-s1g.h | 2 +- include/linux/inetdevice.h | 5 + include/linux/iomap.h | 2 + include/linux/iommu.h | 1 + include/linux/kernfs.h | 11 +- include/linux/liveupdate.h | 9 +- include/linux/mfd/rohm-bd72720.h | 1 - include/linux/netdevice.h | 4 + include/linux/nfs_page.h | 1 + include/linux/nfs_xdr.h | 1 - include/linux/rhashtable-types.h | 22 +- include/linux/rpmsg.h | 4 - include/linux/shmem_fs.h | 3 +- include/linux/sockptr.h | 2 +- include/linux/sunrpc/clnt.h | 1 + include/linux/uaccess.h | 27 +- include/linux/virtio.h | 2 + include/linux/vmalloc.h | 4 +- include/linux/xattr.h | 35 +- include/net/addrconf.h | 10 +- include/net/bluetooth/hci.h | 5 +- include/net/bluetooth/l2cap.h | 10 +- include/net/bond_options.h | 1 + include/net/bonding.h | 1 + include/net/dst_metadata.h | 7 +- include/net/fib_rules.h | 5 + include/net/gue.h | 2 +- include/net/ip_fib.h | 12 +- include/net/ip_vs.h | 3 +- include/net/mana/mana.h | 8 + include/net/netfilter/ipv4/nf_conntrack_ipv4.h | 4 + include/net/netfilter/nf_conntrack_expect.h | 17 +- include/net/netfilter/nf_conntrack_extend.h | 12 - include/net/netfilter/nf_conntrack_helper.h | 18 +- include/net/netfilter/nf_conntrack_timeout.h | 27 +- include/net/netfilter/nf_dup_netdev.h | 36 +- include/net/netfilter/nf_flow_table.h | 5 +- include/net/netfilter/nf_queue.h | 1 + include/net/netfilter/nft_meta.h | 2 + include/net/sch_generic.h | 32 +- include/net/sctp/sctp.h | 3 +- include/net/tc_act/tc_pedit.h | 18 +- include/net/tcp.h | 9 + include/net/udp_tunnel.h | 4 +- include/net/xfrm.h | 15 +- include/rdma/frmr_pools.h | 3 +- include/rdma/ib_umem.h | 4 + include/rdma/ib_verbs.h | 5 + include/rdma/rdma_vt.h | 20 - include/soc/spacemit/k3-syscon.h | 4 +- include/sound/soc-dapm.h | 1 + include/trace/events/dma_fence.h | 40 +- include/uapi/linux/bpf.h | 2 + include/uapi/linux/if_link.h | 1 + include/uapi/linux/iommufd.h | 12 +- include/uapi/linux/netfilter/nf_conntrack_common.h | 1 + include/uapi/rdma/bnxt_re-abi.h | 7 +- include/ufs/ufshcd.h | 3 - init/initramfs_test.c | 17 +- io_uring/bpf-ops.c | 2 + kernel/bpf/arena.c | 61 +- kernel/bpf/arraymap.c | 8 +- kernel/bpf/bpf_lru_list.c | 165 +++-- kernel/bpf/bpf_lru_list.h | 25 +- kernel/bpf/bpf_lsm.c | 23 + kernel/bpf/cgroup.c | 168 +++-- kernel/bpf/core.c | 2 +- kernel/bpf/devmap.c | 12 + kernel/bpf/disasm.c | 5 +- kernel/bpf/hashtab.c | 32 +- kernel/bpf/helpers.c | 17 +- kernel/bpf/inode.c | 13 +- kernel/bpf/map_in_map.c | 5 +- kernel/bpf/map_iter.c | 4 + kernel/bpf/states.c | 13 +- kernel/bpf/syscall.c | 35 +- kernel/bpf/verifier.c | 56 +- kernel/cgroup/cpuset.c | 7 +- kernel/cpu.c | 20 +- kernel/exit.c | 7 +- kernel/fork.c | 9 +- kernel/kcov.c | 4 +- kernel/kexec_core.c | 8 +- kernel/liveupdate/kexec_handover.c | 32 +- kernel/liveupdate/luo_file.c | 5 +- kernel/liveupdate/luo_flb.c | 52 +- kernel/liveupdate/luo_session.c | 99 ++- kernel/locking/spinlock_rt.c | 27 +- kernel/power/qos.c | 11 +- kernel/sched/core.c | 1 + kernel/sched/cpufreq_schedutil.c | 1 + kernel/sched/debug.c | 3 + kernel/sched/fair.c | 211 +++--- kernel/signal.c | 10 +- kernel/taskstats.c | 62 +- kernel/time/alarmtimer.c | 8 +- kernel/time/posix-cpu-timers.c | 187 ++++-- kernel/time/posix-timers.c | 6 +- kernel/time/posix-timers.h | 4 +- kernel/time/tick-sched.c | 11 +- kernel/time/time.c | 2 +- kernel/time/timer_migration.h | 18 +- kernel/trace/bpf_trace.c | 22 +- kernel/trace/fprobe.c | 10 + kernel/trace/ring_buffer.c | 8 +- kernel/trace/trace.c | 2 +- kernel/trace/trace_eprobe.c | 2 +- kernel/trace/trace_events_hist.c | 41 +- kernel/trace/trace_events_user.c | 43 +- kernel/trace/trace_osnoise.c | 4 +- kernel/trace/trace_probe.c | 174 ++++- kernel/trace/trace_probe.h | 7 +- kernel/trace/trace_remote.c | 18 +- kernel/workqueue.c | 2 +- lib/Kconfig.debug | 5 + lib/alloc_tag.c | 9 +- lib/base64.c | 3 +- lib/crypto/Kconfig | 3 +- lib/fonts/font_acorn_8x8.c | 5 + lib/locking-selftest.c | 7 +- lib/rhashtable.c | 17 +- lib/test_hmm.c | 6 +- lib/test_meminit.c | 2 +- lib/tests/kunit_iov_iter.c | 12 +- lib/tests/liveupdate.c | 3 + lib/usercopy.c | 4 +- lib/vsprintf.c | 36 +- mm/compaction.c | 7 +- mm/damon/core.c | 59 +- mm/damon/sysfs-schemes.c | 17 +- mm/huge_memory.c | 3 + mm/hugetlb.c | 7 +- mm/memory_hotplug.c | 2 +- mm/mm_init.c | 47 +- mm/numa_emulation.c | 17 +- mm/shmem.c | 50 +- mm/slub.c | 7 +- mm/sparse-vmemmap.c | 20 +- net/9p/client.c | 2 + net/9p/trans_rdma.c | 19 +- net/9p/trans_virtio.c | 5 + net/atm/common.c | 2 + net/batman-adv/distributed-arp-table.c | 30 +- net/batman-adv/fragmentation.c | 8 +- net/batman-adv/gateway_client.c | 3 +- net/batman-adv/main.c | 13 +- net/batman-adv/mesh-interface.c | 17 +- net/batman-adv/mesh-interface.h | 2 + net/batman-adv/multicast_forw.c | 7 +- net/batman-adv/routing.c | 3 +- net/batman-adv/translation-table.c | 5 +- net/bluetooth/6lowpan.c | 83 ++- net/bluetooth/eir.c | 8 +- net/bluetooth/hci_codec.c | 2 +- net/bluetooth/hci_core.c | 2 + net/bluetooth/hci_event.c | 7 + net/bluetooth/iso.c | 31 +- net/bluetooth/l2cap_core.c | 94 ++- net/bluetooth/l2cap_sock.c | 103 ++- net/bluetooth/mgmt.c | 2 + net/bluetooth/msft.c | 2 +- net/bluetooth/sco.c | 15 +- net/bluetooth/smp.c | 27 +- net/bpf/test_run.c | 8 +- net/bridge/br_cfm.c | 6 + net/bridge/br_cfm_netlink.c | 4 +- net/bridge/br_if.c | 3 + net/bridge/br_stp.c | 3 +- net/bridge/netfilter/nft_meta_bridge.c | 23 +- net/can/bcm.c | 654 ++++++++++++++----- net/can/isotp.c | 298 ++++++--- net/core/dev.c | 9 +- net/core/fib_rules.c | 6 +- net/core/filter.c | 28 +- net/core/flow_dissector.c | 12 +- net/core/lwt_bpf.c | 12 + net/core/lwtunnel.c | 6 + net/core/netdev-genl.c | 4 +- net/core/netdev_rx_queue.c | 8 +- net/devlink/rate.c | 25 +- net/ethtool/netlink.h | 28 + net/ethtool/rss.c | 14 +- net/handshake/genl.c | 2 +- net/ieee802154/core.c | 49 +- net/ieee802154/header_ops.c | 9 +- net/ieee802154/ieee802154.h | 17 + net/ieee802154/netlink.c | 36 +- net/ife/ife.c | 2 +- net/ipv4/fib_trie.c | 4 + net/ipv4/fou_core.c | 9 +- net/ipv4/igmp.c | 63 +- net/ipv4/inet_connection_sock.c | 1 + net/ipv4/ip_vti.c | 3 + net/ipv4/ipip.c | 3 + net/ipv4/netfilter/nf_nat_h323.c | 12 + net/ipv4/netfilter/nf_nat_pptp.c | 14 +- net/ipv4/netfilter/nf_nat_snmp_basic_main.c | 27 +- net/ipv4/netfilter/nf_reject_ipv4.c | 2 +- net/ipv4/tcp_bbr.c | 2 +- net/ipv4/tcp_ipv4.c | 4 +- net/ipv4/tcp_output.c | 8 +- net/ipv4/udp_bpf.c | 9 + net/ipv4/udp_tunnel_core.c | 10 +- net/ipv4/udp_tunnel_nic.c | 2 +- net/ipv4/xfrm4_input.c | 2 - net/ipv6/addrconf.c | 55 +- net/ipv6/ioam6_iptunnel.c | 8 +- net/ipv6/ip6_fib.c | 17 +- net/ipv6/ip6_gre.c | 6 + net/ipv6/ip6_tunnel.c | 10 + net/ipv6/ip6_vti.c | 3 + net/ipv6/mcast.c | 40 +- net/ipv6/ndisc.c | 8 +- net/ipv6/netfilter.c | 4 +- net/ipv6/netfilter/ip6t_ah.c | 5 + net/ipv6/netfilter/ip6t_hbh.c | 1 + net/ipv6/netfilter/ip6t_rt.c | 3 +- net/ipv6/netfilter/nf_conntrack_reasm.c | 3 +- net/ipv6/route.c | 9 +- net/ipv6/seg6.c | 3 + net/ipv6/sit.c | 3 + net/ipv6/xfrm6_input.c | 2 - net/kcm/kcmsock.c | 8 +- net/l2tp/l2tp_core.c | 2 +- net/llc/af_llc.c | 1 + net/llc/llc_conn.c | 1 - net/mac80211/main.c | 3 +- net/mac80211/rx.c | 34 +- net/mac80211/tx.c | 17 +- net/mac80211/util.c | 3 + net/mac802154/iface.c | 2 +- net/mac802154/scan.c | 1 + net/netfilter/ipset/ip_set_bitmap_gen.h | 4 +- net/netfilter/ipset/ip_set_bitmap_ip.c | 2 +- net/netfilter/ipset/ip_set_bitmap_ipmac.c | 2 +- net/netfilter/ipset/ip_set_bitmap_port.c | 2 +- net/netfilter/ipset/ip_set_core.c | 4 +- net/netfilter/ipset/ip_set_hash_gen.h | 12 +- net/netfilter/ipvs/ip_vs_app.c | 10 +- net/netfilter/ipvs/ip_vs_conn.c | 4 +- net/netfilter/ipvs/ip_vs_core.c | 36 +- net/netfilter/ipvs/ip_vs_proto_sctp.c | 18 +- net/netfilter/ipvs/ip_vs_proto_tcp.c | 11 +- net/netfilter/ipvs/ip_vs_proto_udp.c | 3 +- net/netfilter/ipvs/ip_vs_xmit.c | 6 +- net/netfilter/nf_conncount.c | 23 +- net/netfilter/nf_conntrack_amanda.c | 39 +- net/netfilter/nf_conntrack_bpf.c | 35 +- net/netfilter/nf_conntrack_broadcast.c | 4 + net/netfilter/nf_conntrack_core.c | 122 ++-- net/netfilter/nf_conntrack_ecache.c | 2 +- net/netfilter/nf_conntrack_expect.c | 184 +++--- net/netfilter/nf_conntrack_extend.c | 32 +- net/netfilter/nf_conntrack_ftp.c | 11 +- net/netfilter/nf_conntrack_h323_main.c | 129 ++-- net/netfilter/nf_conntrack_helper.c | 94 ++- net/netfilter/nf_conntrack_irc.c | 11 +- net/netfilter/nf_conntrack_netbios_ns.c | 20 +- net/netfilter/nf_conntrack_netlink.c | 32 +- net/netfilter/nf_conntrack_pptp.c | 92 +-- net/netfilter/nf_conntrack_proto_gre.c | 70 ++ net/netfilter/nf_conntrack_sane.c | 8 +- net/netfilter/nf_conntrack_seqadj.c | 19 +- net/netfilter/nf_conntrack_sip.c | 66 +- net/netfilter/nf_conntrack_snmp.c | 21 +- net/netfilter/nf_conntrack_tftp.c | 5 +- net/netfilter/nf_conntrack_timeout.c | 27 +- net/netfilter/nf_dup_netdev.c | 15 +- net/netfilter/nf_flow_table_core.c | 12 +- net/netfilter/nf_flow_table_ip.c | 107 +--- net/netfilter/nf_flow_table_path.c | 7 +- net/netfilter/nf_nat_core.c | 10 + net/netfilter/nf_nat_sip.c | 23 + net/netfilter/nf_queue.c | 14 + net/netfilter/nf_synproxy_core.c | 40 +- net/netfilter/nf_tables_api.c | 3 + net/netfilter/nfnetlink_cthelper.c | 81 ++- net/netfilter/nfnetlink_cttimeout.c | 112 ++-- net/netfilter/nfnetlink_osf.c | 6 +- net/netfilter/nfnetlink_queue.c | 3 + net/netfilter/nft_compat.c | 24 +- net/netfilter/nft_ct.c | 29 +- net/netfilter/nft_fib.c | 9 + net/netfilter/nft_fib_netdev.c | 29 +- net/netfilter/nft_fwd_netdev.c | 17 +- net/netfilter/nft_lookup.c | 10 +- net/netfilter/nft_meta.c | 5 +- net/netfilter/nft_payload.c | 16 +- net/netfilter/nft_set_pipapo.c | 34 +- net/netfilter/nft_set_pipapo.h | 8 + net/netfilter/nft_set_rbtree.c | 8 +- net/netfilter/nft_synproxy.c | 9 +- net/netfilter/xt_CT.c | 2 +- net/netfilter/xt_cluster.c | 2 +- net/netfilter/xt_connmark.c | 14 +- net/netfilter/xt_nat.c | 9 + net/netfilter/xt_physdev.c | 5 - net/netfilter/xt_rateest.c | 2 +- net/netfilter/xt_u32.c | 12 +- net/openvswitch/conntrack.c | 2 +- net/openvswitch/flow_netlink.c | 201 ++++-- net/psample/psample.c | 6 +- net/qrtr/af_qrtr.c | 2 +- net/rxrpc/ar-internal.h | 6 +- net/rxrpc/call_accept.c | 25 +- net/rxrpc/call_event.c | 5 +- net/rxrpc/call_object.c | 2 + net/rxrpc/conn_client.c | 2 +- net/rxrpc/conn_event.c | 9 +- net/rxrpc/input.c | 39 +- net/rxrpc/local_object.c | 2 +- net/rxrpc/oob.c | 12 +- net/rxrpc/recvmsg.c | 23 +- net/rxrpc/rxgk.c | 3 +- net/rxrpc/sendmsg.c | 3 +- net/sched/act_api.c | 13 +- net/sched/act_bpf.c | 2 +- net/sched/act_ct.c | 13 +- net/sched/act_pedit.c | 13 +- net/sched/cls_api.c | 25 +- net/sched/cls_bpf.c | 10 +- net/sched/cls_flow.c | 12 +- net/sched/sch_api.c | 2 +- net/sched/sch_cake.c | 13 +- net/sched/sch_cbs.c | 4 +- net/sched/sch_choke.c | 8 +- net/sched/sch_codel.c | 48 +- net/sched/sch_drr.c | 12 +- net/sched/sch_dualpi2.c | 122 ++-- net/sched/sch_etf.c | 8 +- net/sched/sch_ets.c | 4 +- net/sched/sch_fq.c | 6 +- net/sched/sch_fq_codel.c | 48 +- net/sched/sch_fq_pie.c | 4 +- net/sched/sch_generic.c | 51 +- net/sched/sch_hfsc.c | 28 +- net/sched/sch_hhf.c | 34 +- net/sched/sch_htb.c | 18 +- net/sched/sch_mq.c | 5 +- net/sched/sch_mqprio.c | 18 +- net/sched/sch_multiq.c | 6 +- net/sched/sch_netem.c | 10 +- net/sched/sch_prio.c | 4 +- net/sched/sch_qfq.c | 6 +- net/sched/sch_red.c | 4 +- net/sched/sch_sfb.c | 4 +- net/sched/sch_sfq.c | 9 +- net/sched/sch_skbprio.c | 4 +- net/sched/sch_taprio.c | 6 +- net/sched/sch_tbf.c | 6 +- net/sched/sch_teql.c | 128 ++-- net/sctp/diag.c | 67 +- net/sctp/protocol.c | 13 +- net/sctp/sm_make_chunk.c | 15 +- net/sctp/sm_statefuns.c | 64 +- net/sctp/socket.c | 38 +- net/smc/smc_cdc.c | 15 +- net/socket.c | 30 +- net/sunrpc/clnt.c | 19 +- net/sunrpc/svc.c | 10 + net/sunrpc/svcsock.c | 10 + net/sunrpc/sysfs.c | 4 +- net/sunrpc/xdr.c | 14 +- net/sunrpc/xprtrdma/backchannel.c | 5 +- net/sunrpc/xprtrdma/frwr_ops.c | 2 +- net/sunrpc/xprtrdma/rpc_rdma.c | 157 +++-- net/sunrpc/xprtrdma/transport.c | 68 +- net/sunrpc/xprtrdma/verbs.c | 126 +++- net/sunrpc/xprtrdma/xprt_rdma.h | 4 +- net/sunrpc/xprtsock.c | 16 +- net/tipc/bearer.c | 1 + net/tipc/core.c | 9 +- net/tipc/discover.c | 14 +- net/tipc/name_distr.c | 13 +- net/tipc/netlink.c | 12 + net/tipc/socket.c | 9 +- net/tipc/udp_media.c | 53 +- net/tls/tls_sw.c | 11 + net/wireless/nl80211.c | 2 +- net/wireless/pmsr.c | 4 +- net/wireless/scan.c | 5 +- net/xfrm/espintcp.c | 34 +- net/xfrm/xfrm_input.c | 29 +- net/xfrm/xfrm_interface_core.c | 3 + net/xfrm/xfrm_nat_keepalive.c | 15 +- net/xfrm/xfrm_policy.c | 27 +- net/xfrm/xfrm_state.c | 26 +- net/xfrm/xfrm_user.c | 20 +- rust/Makefile | 2 +- rust/helpers/uaccess.c | 2 +- rust/kernel/alloc/kvec.rs | 4 +- rust/kernel/devres.rs | 6 +- samples/damon/mtier.c | 3 + samples/trace_events/trace-events-sample.c | 4 + scripts/kconfig/conf.c | 6 +- scripts/livepatch/klp-build | 41 +- security/apparmor/af_unix.c | 65 +- security/apparmor/apparmorfs.c | 113 +++- security/apparmor/domain.c | 58 +- security/apparmor/file.c | 12 +- security/apparmor/include/apparmorfs.h | 12 + security/apparmor/label.c | 2 +- security/apparmor/lsm.c | 2 +- security/apparmor/net.c | 1 + security/apparmor/policy.c | 20 +- security/apparmor/policy_unpack.c | 6 +- security/apparmor/procattr.c | 2 + security/apparmor/task.c | 2 +- security/integrity/evm/evm_secfs.c | 16 +- security/integrity/ima/ima_appraise.c | 5 +- security/integrity/ima/ima_policy.c | 3 +- security/keys/keyring.c | 2 +- security/landlock/fs.c | 14 + security/landlock/fs.h | 10 + security/landlock/net.c | 11 +- security/landlock/task.c | 11 + security/selinux/hooks.c | 80 ++- sound/core/init.c | 11 +- sound/core/pcm_compat.c | 4 +- sound/core/pcm_native.c | 7 +- sound/core/seq/oss/seq_oss_event.c | 6 +- sound/core/seq/oss/seq_oss_event.h | 3 +- sound/core/seq/oss/seq_oss_ioctl.c | 5 +- sound/core/seq/oss/seq_oss_midi.c | 6 +- sound/core/seq/oss/seq_oss_midi.h | 2 +- sound/core/seq/oss/seq_oss_readq.c | 77 ++- sound/core/seq/oss/seq_oss_rw.c | 5 +- sound/core/seq/seq_clientmgr.c | 33 +- sound/core/seq/seq_fifo.c | 52 +- sound/core/seq/seq_memory.c | 2 +- sound/core/seq/seq_midi.c | 55 +- sound/drivers/aloop.c | 1 - sound/hda/codecs/conexant.c | 3 - sound/hda/codecs/realtek/alc269.c | 12 +- sound/hda/codecs/side-codecs/tas2781_hda_i2c.c | 3 + sound/hda/codecs/side-codecs/tas2781_hda_spi.c | 3 + sound/hda/controllers/Kconfig | 2 +- sound/hda/core/regmap.c | 4 +- sound/soc/amd/acp/acp-sdw-legacy-mach.c | 7 +- sound/soc/amd/acp/acp-sdw-sof-mach.c | 7 +- sound/soc/codecs/adau1372.c | 5 + sound/soc/codecs/aw88261.c | 12 +- sound/soc/codecs/cs35l56-shared.c | 4 +- sound/soc/codecs/cs35l56.c | 27 +- sound/soc/codecs/cs530x.c | 29 +- sound/soc/codecs/cs530x.h | 6 - sound/soc/codecs/hdac_hdmi.c | 4 +- sound/soc/codecs/lpass-va-macro.c | 7 +- sound/soc/codecs/rt5575-spi.c | 2 +- sound/soc/codecs/sma1307.c | 35 +- sound/soc/codecs/tlv320aic3x.c | 25 +- sound/soc/codecs/wm_adsp.c | 7 + sound/soc/fsl/fsl_asrc_dma.c | 20 + sound/soc/fsl/fsl_audmix.c | 6 + sound/soc/mediatek/mt8183/mt8183-afe-pcm.c | 23 +- sound/soc/mediatek/mt8189/mt8189-afe-pcm.c | 38 +- sound/soc/mediatek/mt8192/mt8192-afe-pcm.c | 21 +- sound/soc/meson/aiu-acodec-ctrl.c | 3 + sound/soc/meson/aiu-codec-ctrl.c | 3 + sound/soc/qcom/qdsp6/q6apm.c | 8 + sound/soc/renesas/rcar/rsnd.h | 2 +- sound/soc/sdca/sdca_asoc.c | 3 + sound/soc/sdw_utils/soc_sdw_utils.c | 1 + sound/soc/soc-dapm.c | 49 +- sound/soc/soc-topology.c | 37 +- sound/soc/sof/intel/Kconfig | 6 +- sound/soc/sof/ipc3-control.c | 79 ++- sound/soc/sof/ipc4-control.c | 34 +- sound/soc/sof/topology.c | 7 +- sound/soc/tegra/tegra210_ahub.c | 4 +- sound/usb/fcp.c | 2 + sound/usb/midi2.c | 5 + sound/usb/mixer_scarlett2.c | 201 +++++- sound/usb/qcom/mixer_usb_offload.c | 2 +- sound/usb/qcom/qc_audio_offload.c | 30 +- sound/xen/xen_snd_front_alsa.c | 17 +- sound/xen/xen_snd_front_evtchnl.c | 28 +- sound/xen/xen_snd_front_evtchnl.h | 6 +- tools/bpf/bpftool/cgroup.c | 14 +- tools/bpf/bpftool/gen.c | 2 +- tools/bpf/bpftool/net.c | 4 +- tools/include/nolibc/getopt.h | 2 +- tools/include/nolibc/stackprotector.h | 3 +- tools/include/uapi/linux/bpf.h | 2 + tools/include/uapi/linux/if_link.h | 2 + tools/lib/api/fs/fs.c | 19 +- tools/lib/bpf/btf.c | 4 +- tools/lib/bpf/gen_loader.c | 81 ++- tools/lib/bpf/libbpf.c | 9 +- tools/lib/bpf/strset.c | 62 +- tools/lib/bpf/usdt.c | 16 +- tools/lib/symbol/kallsyms.c | 5 +- tools/net/ynl/Makefile | 2 +- tools/net/ynl/generated/Makefile | 2 +- tools/net/ynl/lib/Makefile | 2 +- tools/objtool/elf.c | 75 +-- tools/objtool/include/objtool/elf.h | 32 +- tools/objtool/klp-diff.c | 133 ++-- tools/perf/Makefile.config | 1 + tools/perf/arch/common.c | 4 +- tools/perf/arch/powerpc/util/auxtrace.c | 6 + tools/perf/arch/x86/tests/amd-ibs-period.c | 2 +- tools/perf/bench/inject-buildid.c | 9 +- tools/perf/builtin-annotate.c | 3 +- tools/perf/builtin-buildid-list.c | 4 +- tools/perf/builtin-c2c.c | 28 +- tools/perf/builtin-diff.c | 3 +- tools/perf/builtin-inject.c | 172 ++++- tools/perf/builtin-record.c | 2 + tools/perf/builtin-report.c | 7 +- tools/perf/builtin-sched.c | 177 +++-- tools/perf/builtin-script.c | 6 +- tools/perf/builtin-stat.c | 50 +- tools/perf/pmu-events/amd_metrics.py | 2 +- tools/perf/pmu-events/metric.py | 1 - tools/perf/tests/code-reading.c | 7 +- tools/perf/tests/dlfilter-test.c | 8 +- tools/perf/tests/pmu-events.c | 24 +- tools/perf/tests/sample-parsing.c | 5 +- tools/perf/ui/browser.c | 3 + tools/perf/ui/browsers/annotate.c | 5 +- tools/perf/util/Build | 1 + tools/perf/util/annotate-data.c | 27 +- tools/perf/util/arm-spe.c | 28 +- tools/perf/util/auxtrace.c | 3 +- tools/perf/util/bpf-event.c | 52 +- tools/perf/util/bpf-event.h | 4 +- tools/perf/util/bpf-utils.c | 16 + tools/perf/util/build-id.c | 7 +- tools/perf/util/callchain.c | 15 + tools/perf/util/callchain.h | 1 + tools/perf/util/config.c | 4 + tools/perf/util/cpumap.c | 49 +- tools/perf/util/cs-etm-base.c | 4 +- tools/perf/util/cs-etm-decoder/cs-etm-decoder.c | 21 +- tools/perf/util/cs-etm.c | 310 ++++++--- tools/perf/util/cs-etm.h | 8 +- tools/perf/util/data-convert-json.c | 1 + tools/perf/util/debuginfo.c | 9 +- tools/perf/util/disasm.c | 7 +- tools/perf/util/dso.c | 48 +- tools/perf/util/dwarf-aux.c | 39 +- tools/perf/util/dwarf-aux.h | 5 + tools/perf/util/env.h | 14 + tools/perf/util/event.c | 15 +- tools/perf/util/header.c | 91 ++- tools/perf/util/hist.c | 9 +- tools/perf/util/hist.h | 1 + tools/perf/util/hwmon_pmu.c | 36 +- tools/perf/util/intel-bts.c | 3 +- .../util/intel-pt-decoder/intel-pt-insn-decoder.c | 11 +- tools/perf/util/intel-pt.c | 35 +- tools/perf/util/libdw.c | 49 +- tools/perf/util/machine.c | 42 +- tools/perf/util/maps.c | 156 ++++- tools/perf/util/maps.h | 3 + tools/perf/util/mmap.c | 20 +- tools/perf/util/pmu.c | 10 +- tools/perf/util/probe-finder.c | 102 +-- tools/perf/util/svghelper.c | 10 +- tools/perf/util/symbol-elf.c | 121 ++-- tools/perf/util/symbol-minimal.c | 16 +- tools/perf/util/symbol.c | 19 +- tools/perf/util/symbol_conf.h | 10 + tools/perf/util/synthetic-events.c | 25 +- tools/perf/util/synthetic-events.h | 6 +- tools/perf/util/thread.c | 5 + tools/perf/util/tool.c | 6 + tools/perf/util/unwind-libdw.c | 20 +- tools/perf/util/unwind-libunwind-local.c | 27 +- tools/perf/util/unwind-libunwind.c | 2 +- tools/perf/util/unwind.c | 104 +++ tools/perf/util/unwind.h | 65 +- tools/power/x86/intel-speed-select/isst-daemon.c | 9 +- tools/testing/cxl/test/cxl.c | 10 +- tools/testing/cxl/test/cxl_translate.c | 2 +- tools/testing/cxl/test/mem.c | 45 +- tools/testing/kunit/kunit_parser.py | 12 +- tools/testing/selftests/Makefile | 2 +- tools/testing/selftests/bpf/README.rst | 2 +- .../selftests/bpf/prog_tests/bpf_attr_size.c | 69 ++ tools/testing/selftests/bpf/prog_tests/bpf_nf.c | 6 + .../selftests/bpf/prog_tests/fill_link_info.c | 2 +- .../testing/selftests/bpf/prog_tests/htab_update.c | 4 +- .../testing/selftests/bpf/prog_tests/linked_list.c | 33 +- tools/testing/selftests/bpf/prog_tests/map_kptr.c | 10 +- .../prog_tests/raw_tp_writable_reject_bad_access.c | 57 ++ .../raw_tp_writable_reject_nbd_invalid.c | 43 -- .../selftests/bpf/prog_tests/refcounted_kptr.c | 8 +- tools/testing/selftests/bpf/prog_tests/verifier.c | 2 + .../selftests/bpf/prog_tests/verifier_log.c | 1 + .../selftests/bpf/progs/bpf_iter_task_vmas.c | 2 +- .../testing/selftests/bpf/progs/cpumask_success.c | 2 +- tools/testing/selftests/bpf/progs/file_reader.c | 2 +- tools/testing/selftests/bpf/progs/htab_update.c | 4 +- tools/testing/selftests/bpf/progs/linked_list.c | 71 +++ .../testing/selftests/bpf/progs/refcounted_kptr.c | 20 +- tools/testing/selftests/bpf/progs/test_bpf_nf.c | 26 + .../testing/selftests/bpf/progs/test_tunnel_kern.c | 13 +- .../testing/selftests/bpf/progs/verifier_bounds.c | 14 +- .../selftests/bpf/progs/verifier_ptr_to_buf.c | 27 + .../selftests/bpf/progs/verifier_raw_tp_writable.c | 16 + tools/testing/selftests/bpf/progs/xdp_flowtable.c | 7 +- tools/testing/selftests/bpf/vmtest.sh | 2 +- tools/testing/selftests/drivers/net/hw/tso.py | 16 +- .../ftrace/test.d/00basic/test_ownership.tc | 2 +- .../ftrace/test.d/00basic/trace_marker_raw.tc | 14 +- tools/testing/selftests/gpio/.gitignore | 1 + tools/testing/selftests/hid/Makefile | 2 +- tools/testing/selftests/hid/hid_bpf.c | 36 +- tools/testing/selftests/hid/progs/hid.c | 15 + .../selftests/landlock/scoped_signal_test.c | 237 ++++++- .../selftests/mm/charge_reserved_hugetlb.sh | 45 +- tools/testing/selftests/mm/compaction_test.c | 3 + tools/testing/selftests/mm/hmm-tests.c | 125 +++- tools/testing/selftests/mm/hugepage-mremap.c | 32 +- .../selftests/mm/hugetlb_reparenting_test.sh | 60 +- tools/testing/selftests/mm/pkey-arm64.h | 3 +- tools/testing/selftests/mm/run_vmtests.sh | 66 +- tools/testing/selftests/mm/split_huge_page_test.c | 27 +- tools/testing/selftests/mm/uffd-stress.c | 5 +- tools/testing/selftests/net/broadcast_ether_dst.sh | 2 +- tools/testing/selftests/net/lib.sh | 25 +- .../selftests/net/netfilter/nft_flowtable.sh | 8 +- tools/testing/selftests/net/tcp_mmap.c | 4 + tools/testing/selftests/net/tls.c | 8 +- tools/testing/selftests/net/vlan_bridge_binding.sh | 2 +- tools/testing/selftests/rseq/Makefile | 6 +- tools/testing/selftests/vfio/Makefile | 7 +- tools/testing/selftests/vfio/lib/libvfio.mk | 6 +- tools/tracing/rtla/src/actions.c | 2 + tools/tracing/rtla/src/common.c | 19 +- tools/tracing/rtla/src/common.h | 1 - tools/tracing/rtla/src/timerlat.c | 2 +- tools/tracing/rtla/src/timerlat_hist.c | 4 +- tools/tracing/rtla/src/timerlat_top.c | 3 +- tools/virtio/vringh_test.c | 5 + virt/kvm/kvm_main.c | 16 +- 1929 files changed, 28193 insertions(+), 14617 deletions(-)

1 month, 2 weeks

[PATCH 6.18 0000/1611] 6.18.40-rc1 review

by Greg Kroah-Hartman

This is the start of the stable review cycle for the 6.18.40 release. There are 1611 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know. Responses should be made by Thu, 23 Jul 2026 15:23:00 +0000. Anything received after that time might be too late. The whole patch series can be found in one patch at: https://www.kernel.org/pub/linux/kernel/v6.x/stable-review/patch-6.18.40-rc… or in the git tree and branch at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-6.18.y and the diffstat can be found below. thanks, greg k-h ------------- Pseudo-Shortlog of commits: Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> Linux 6.18.40-rc1 Selvin Xavier <selvin.xavier(a)broadcom.com> RDMA/bnxt_re: Avoid repeated requests to allocate WC pages Selvin Xavier <selvin.xavier(a)broadcom.com> RDMA/bnxt_re: Initialize dpi variable to zero Gil Portnoy <dddhkts1(a)gmail.com> ksmbd: fix durable reconnect double-bind race in ksmbd_reopen_durable_fd Thomas Richter <tmricht(a)linux.ibm.com> perf callchain: Handle multiple address spaces Randy Dunlap <rdunlap(a)infradead.org> seqlock: fix scoped_seqlock_read kernel-doc Ian Rogers <irogers(a)google.com> perf inject: With --convert-callchain ignore the dummy event for dwarf stacks Ilpo Järvinen <ilpo.jarvinen(a)linux.intel.com> PCI: Fix Resizable BAR restore order Ilpo Järvinen <ilpo.jarvinen(a)linux.intel.com> PCI: Fix BAR resize rollback path overwriting ret Ian Rogers <irogers(a)google.com> perf symbol: Fix ENOENT case for filename__read_build_id Chukun Pan <amadeus(a)jmu.edu.cn> pinctrl: airoha: fix pinctrl function mismatch issue Matt Bobrowski <mattbobrowski(a)google.com> bpf: Reject BPF_MAP_TYPE_INODE_STORAGE creation if BPF LSM is uninitialized Nicolin Chen <nicolinc(a)nvidia.com> iommufd: Move vevent memory allocation outside spinlock Nicolin Chen <nicolinc(a)nvidia.com> iommufd: Propagate allocation failure in iommufd_veventq_deliver_fetch() Oliver Upton <oupton(a)kernel.org> KVM: arm64: nv: Re-translate VNCR before injecting abort Marc Zyngier <maz(a)kernel.org> KVM: arm64: Deduplicate ASID retrieval code Zenghui Yu <yuzenghui(a)huawei.com> samples/damon/mtier: fail early if address range parameters are invalid SeongJae Park <sj(a)kernel.org> mm/damon/core: trace esz at first setup SeongJae Park <sj(a)kernel.org> mm/damon/core: always put unsuccessfully committed target pids Marc Zyngier <maz(a)kernel.org> KVM: arm64: Fix propagation of TLBI level in kvm_pgtable_stage2_relax_perms() Oliver Upton <oupton(a)kernel.org> KVM: arm64: Ensure level is always initialized when relaxing perms Qu Wenruo <wqu(a)suse.com> btrfs: fix incorrect buffered IO fallback for append direct writes Qu Wenruo <wqu(a)suse.com> btrfs: fix false IO failure after falling back to buffered write Ahsan Atta <ahsan.atta(a)intel.com> crypto: qat - fix restarting state leak on allocation failure Qu Wenruo <wqu(a)suse.com> btrfs: remove folio parameter from ordered io related functions Qu Wenruo <wqu(a)suse.com> btrfs: replace for_each_set_bit() with for_each_set_bitmap() Qu Wenruo <wqu(a)suse.com> btrfs: concentrate the error handling of submit_one_sector() Thorsten Blum <thorsten.blum(a)linux.dev> crypto: atmel-sha204a - fail on hwrng registration error in probe path Neill Kapron <nkapron(a)google.com> usb: gadget: f_fs: Tie read_buffer lifetime to ffs_epfile Tyler Baker <tyler.baker(a)oss.qualcomm.com> usb: gadget: f_fs: initialize reset_work at allocation time Al Viro <viro(a)zeniv.linux.org.uk> functionfs: use spinlock for FFS_DEACTIVATED/FFS_CLOSING transitions Al Viro <viro(a)zeniv.linux.org.uk> functionfs: switch to simple_remove_by_name() Al Viro <viro(a)zeniv.linux.org.uk> functionfs: don't bother with ffs->ref in ffs_data_{opened,closed}() Al Viro <viro(a)zeniv.linux.org.uk> functionfs: don't abuse ffs_data_closed() on fs shutdown Al Viro <viro(a)zeniv.linux.org.uk> new helper: simple_remove_by_name() Mauricio Faria de Oliveira <mfo(a)igalia.com> usb: atm: ueagle-atm: wait for pre-firmware load in .disconnect() Mauricio Faria de Oliveira <mfo(a)igalia.com> usb: atm: ueagle-atm: remove function entry/exit debug messages Mauricio Faria de Oliveira <mfo(a)igalia.com> usb: atm: ueagle-atm: use dev_dbg() for 'device found' message Ben Dooks <ben.dooks(a)codethink.co.uk> usb: dwc3: fix dwc3_readl() and dwc3_writel() calls in dwc3_ulpi_setup() Ingo Rohloff <ingo.rohloff(a)lauterbach.com> usb: dwc3: Support USB3340x ULPI PHY high-speed negotiation. Christoph Hellwig <hch(a)lst.de> xfs: use bio_reuse in the zone GC code Christoph Hellwig <hch(a)lst.de> xfs: only log freed extents for the current RTG in zoned growfs Christoph Hellwig <hch(a)lst.de> xfs: add a xfs_groups_to_rfsbs helper Vlad Poenaru <vlad.wing(a)gmail.com> bpf: Allow LPM map access from sleepable BPF programs Andrii Nakryiko <andrii(a)kernel.org> bpf: Consistently use bpf_rcu_lock_held() everywhere Nuoqi Gui <gnq25(a)mails.tsinghua.edu.cn> bpf: Keep dynamic inner array lookups nullable Mykyta Yatsenko <yatsenko(a)meta.com> bpf: Introduce struct bpf_map_desc in verifier Mykyta Yatsenko <yatsenko(a)meta.com> bpf: Consistently use reg_state() for register access in the verifier Christoph Hellwig <hch(a)lst.de> xfs: initialize iomap->flags earlier in xfs_bmbt_to_iomap Tristan Madani <tristan(a)talencesecurity.com> hfs/hfsplus: fix u32 overflow in check_and_correct_requested_length Viacheslav Dubeyko <slava(a)dubeyko.com> hfs/hfsplus: prevent getting negative values of offset/length Jann Horn <jannh(a)google.com> proc: protect ptrace_may_access() with exec_update_lock (part 1) Oleg Nesterov <oleg(a)redhat.com> seqlock: Change do_task_stat() to use scoped_seqlock_read() Peter Zijlstra <peterz(a)infradead.org> seqlock: Introduce scoped_seqlock_read() Jann Horn <jannh(a)google.com> proc: protect ptrace_may_access() with exec_update_lock (FD links) Christoph Hellwig <hch(a)lst.de> proc: rename proc_setattr to proc_nochmod_setattr Haofeng Li <lihaofeng(a)kylinos.cn> ksmbd: validate NTLMv2 response before updating session key Eric Biggers <ebiggers(a)kernel.org> ksmbd: Use HMAC-MD5 library for NTLMv2 Eric Biggers <ebiggers(a)kernel.org> ksmbd: Use HMAC-SHA256 library for message signing and key generation Eric Biggers <ebiggers(a)kernel.org> ksmbd: Use SHA-512 library for SMB3.1.1 preauth hash Namjae Jeon <linkinjeon(a)kernel.org> ksmbd: track the connection owning a byte-range lock DaeMyung Kang <charsyam(a)gmail.com> ksmbd: centralize ksmbd_conn final release to plug transport leak Davide Ornaghi <d.ornaghi97(a)gmail.com> ksmbd: fix path resolution in ksmbd_vfs_kern_path_create Namjae Jeon <linkinjeon(a)kernel.org> ksmbd: use opener credentials for FSCTL mutations David Howells <dhowells(a)redhat.com> cifs: SMB1 split: Add some #includes David Howells <dhowells(a)redhat.com> cifs: SMB1 split: Rename cifstransport.c Siwei Zhang <oss(a)fourdim.xyz> Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_new_connection_cb() Pauli Virtanen <pav(a)iki.fi> Bluetooth: 6lowpan: fix cyclic locking warning on netdev unregister Xiaolei Wang <xiaolei.wang(a)windriver.com> media: nxp: imx8-isi: Fix use-after-free on remove Frank Li <Frank.Li(a)nxp.com> media: nxp: imx8-isi: use devm_pm_runtime_enable() to simplify code Giovanni Cabiddu <giovanni.cabiddu(a)intel.com> crypto: qat - fix VF2PF work teardown race in adf_disable_sriov() Alexandru Hossu <hossu.alexandru(a)gmail.com> staging: rtl8723bs: fix OOB reads in rtw_get_sec_ie(), rtw_get_wapi_ie(), and rtw_get_wps_attr() Nikolay Kulikov <nikolayof23(a)gmail.com> staging: rtl8723bs: fix spaces around binary operators William Hansen-Baird <william.hansen.baird(a)gmail.com> staging: rtl8723bs: core: move constants to right side in comparison Marco Nenciarini <mnencia(a)kcore.it> PCI: Skip Resizable BAR restore on read error Ilpo Järvinen <ilpo.jarvinen(a)linux.intel.com> PCI: Move Resizable BAR code to rebar.c Ilpo Järvinen <ilpo.jarvinen(a)linux.intel.com> PCI: Add kerneldoc for pci_resize_resource() Ilpo Järvinen <ilpo.jarvinen(a)linux.intel.com> PCI: Fix restoring BARs on BAR resize rollback path Ilpo Järvinen <ilpo.jarvinen(a)linux.intel.com> PCI: Free saved list without holding pci_bus_sem Ilpo Järvinen <ilpo.jarvinen(a)linux.intel.com> PCI: Try BAR resize even when no window was released Ilpo Järvinen <ilpo.jarvinen(a)linux.intel.com> PCI: Change pci_dev variable from 'bridge' to 'dev' Ilpo Järvinen <ilpo.jarvinen(a)linux.intel.com> PCI/IOV: Adjust ->barsz[] when changing BAR size Richard Zhu <hongxing.zhu(a)nxp.com> PCI: imx6: Configure REF_USE_PAD before PHY reset for i.MX95 Franz Schnyder <franz.schnyder(a)toradex.com> PCI: imx6: Fix reference clock source selection for i.MX95 Chris Mason <clm(a)meta.com> binder: cache secctx size before release zeroes it Jisheng Zhang <jszhang(a)kernel.org> binder: Use LIST_HEAD() to initialize on stack list head Alex Williamson <alex.williamson(a)nvidia.com> vfio/mlx5: Fix racy bitfields and tighten struct layout Cássio Gabriel <cassiogabrielcontato(a)gmail.com> ALSA: hda/tas2781: Cancel async firmware request at unbind Cássio Gabriel <cassiogabrielcontato(a)gmail.com> firmware_loader: Add cancel helper for async requests Geoffrey D. Bennett <g(a)b4.vu> ALSA: scarlett2: Update offsets for 2i2 Gen 4 firmware 2417 Geoffrey D. Bennett <g(a)b4.vu> ALSA: scarlett2: Allow selecting config_set by firmware version Zhang Lixu <lixu.zhang(a)intel.com> iio: hid-sensor-rotation: Fix stale or zero output when reading raw values Rafael J. Wysocki <rafael.j.wysocki(a)intel.com> ACPI: NFIT: core: Fix possible deadlock and missing notifications Rafael J. Wysocki <rafael.j.wysocki(a)intel.com> ACPI: NFIT: core: Use devm_acpi_install_notify_handler() Rafael J. Wysocki <rafael.j.wysocki(a)intel.com> ACPI: bus: Introduce devm_acpi_install_notify_handler() Rafael J. Wysocki <rafael.j.wysocki(a)intel.com> ACPI: driver: Check ACPI_COMPANION() against NULL during probe Rafael J. Wysocki <rafael.j.wysocki(a)intel.com> ACPI: NFIT: core: Fix acpi_nfit_init() error cleanup Eric Biggers <ebiggers(a)kernel.org> crypto: xilinx-trng - Remove crypto_rng interface Luke Wang <ziniu.wang_1(a)nxp.com> mmc: sdhci-esdhc-imx: fix resume error handling Luke Wang <ziniu.wang_1(a)nxp.com> mmc: sdhci-esdhc-imx: make non-fatal errors non-blocking in suspend Luke Wang <ziniu.wang_1(a)nxp.com> mmc: sdhci-esdhc-imx: use pm_runtime_resume_and_get() in suspend Luke Wang <ziniu.wang_1(a)nxp.com> mmc: sdhci-esdhc-imx: disable irq during suspend to fix unhandled interrupt Luke Wang <ziniu.wang_1(a)nxp.com> mmc: sdhci-esdhc-imx: fix esdhc_change_pinstate() to allow default state restore Luke Wang <ziniu.wang_1(a)nxp.com> mmc: sdhci-esdhc-imx: restore DLL override for DDR modes on resume Luke Wang <ziniu.wang_1(a)nxp.com> mmc: sdhci-esdhc-imx: remove unnecessary mmc_card_wake_sdio_irq check for tuning save/restore Sergey Shtylyov <s.shtylyov(a)auroraos.dev> mmc: sdhci-of-dwcmshc: check bus clock enable result in the probe() method Ao Sun <ao.sun(a)transsion.com> mmc: block: fix RPMB device unregister ordering Pengpeng Hou <pengpeng(a)iscas.ac.cn> mtd: rawnand: lpc32xx_slc: fail DMA transfer on completion timeout Pengpeng Hou <pengpeng(a)iscas.ac.cn> mtd: rawnand: lpc32xx_mlc: fail DMA transfers on timeout Pengpeng Hou <pengpeng(a)iscas.ac.cn> mtd: rawnand: fsl_ifc: return errors for failed page reads Runyu Xiao <runyu.xiao(a)seu.edu.cn> mmc: vub300: defer reset until cmd_mutex is unlocked Pengpeng Hou <pengpeng(a)iscas.ac.cn> mtd: mchp23k256: use SPI match data for chip caps Pengpeng Hou <pengpeng(a)iscas.ac.cn> mtd: onenand: samsung: report DMA completion timeouts Rafael Beims <rafael.beims(a)toradex.com> wifi: mwifiex: fix permanently busy scans after multiple roam iterations Zhiling Zou <roxy520tt(a)gmail.com> wifi: mac80211: free ack status frame on TX header build failure Zhao Li <enderaoelyther(a)gmail.com> wifi: ieee80211: validate MLE common info length Haofeng Li <lihaofeng(a)kylinos.cn> wifi: cfg80211: validate EHT MLE before MLD ID read Junrui Luo <moonafterrain(a)outlook.com> powerpc/spufs: fix out-of-bounds access in spufs_mem_mmap_access() Zhao Dongdong <zhaodongdong(a)kylinos.cn> reset: sunxi: fix memory region leak on ioremap failure Robby Cai <robby.cai(a)nxp.com> reset: imx7: Correct polarity of MIPI CSI resets on i.MX8MQ Florian Westphal <fw(a)strlen.de> ipvs: reload ip header after head reallocation Julian Anastasov <ja(a)ssi.bg> ipvs: fix more places with wrong ipv6 transport offsets Maoyi Xie <maoyixie.tju(a)gmail.com> memstick: ms_block: reject a card that reports too many blocks James Raphael Tiovalen <jamestiotio(a)gmail.com> macsec: fix promiscuity refcount leak in macsec_dev_open() Xuanqiang Luo <luoxuanqiang(a)kylinos.cn> llc: fix SAP refcount leak when creating incoming sockets Laxman Acharya Padhya <acharyalaxman8848(a)gmail.com> Bluetooth: btrtl: validate firmware patch bounds Asim Viladi Oglu Manizada <manizada(a)pm.me> net: openvswitch: reject oversized nested action attrs Abhishek Ojha <Abhishek.ojha(a)savoirfairelinux.com> regulator: ltc3676: Fix incorrect IRQSTAT bit offsets Thomas Weißschuh <thomas.weissschuh(a)linutronix.de> riscv: vdso: Do not use LTO for the vDSO Maoyi Xie <maoyixie.tju(a)gmail.com> wifi: brcmfmac: cyw: fix heap overflow on a short auth frame Dawei Feng <dawei.feng(a)seu.edu.cn> wifi: mac80211: fix memory leak in ieee80211_register_hw() Rafael Beims <rafael.beims(a)toradex.com> wifi: mwifiex: fix roaming to different channel in host_mlme mode Runyu Xiao <runyu.xiao(a)seu.edu.cn> wifi: rt2x00: avoid full teardown before work setup in probe Zhiping Zhang <zhipingz(a)meta.com> net/mlx5: free mlx5_st_idx_data on final dealloc Thorsten Blum <thorsten.blum(a)linux.dev> powerpc/pseries: fix memory leak on krealloc failure in papr_init Luke Wang <ziniu.wang_1(a)nxp.com> mmc: sdhci-esdhc-imx: restore pinctrl before restoring ios timing on resume Thomas Huth <thuth(a)redhat.com> selftests/landlock: Fix screwed up pointers in the scoped_signal_test Thomas Huth <thuth(a)redhat.com> selftests/landlock: Skip scoped_signal subtest with MSG_OOB if not available Peng Fan <peng.fan(a)nxp.com> pmdomain: imx: Fix i.MX8MP VC8000E power up sequence Peng Fan <peng.fan(a)nxp.com> pmdomain: imx: Fix i.MX8MP power notifier Farhad Alemi <farhad.alemi(a)berkeley.edu> cgroup/cpuset: rebind mm mempolicy to effective_mems, not mems_allowed Hui Wang <hui.wang(a)canonical.com> selftests/rseq: Fix a building error for riscv arch Gerald Schaefer <gerald.schaefer(a)linux.ibm.com> s390/mm: Fix type mismatch in get_align_mask(). Heiko Carstens <hca(a)linux.ibm.com> s390/diag: Add missing array_index_nospec() call to memtop_get_page_count() Crystal Wood <crwood(a)redhat.com> tracing/osnoise: Call synchronize_rcu() when unregistering Tao Liu <ltao(a)redhat.com> riscv: Prevent NULL pointer dereference in machine_kexec_prepare() Michael Bommarito <michael.bommarito(a)gmail.com> drbd: reject data replies with an out-of-range payload size TJ Adams <tadamsjr(a)google.com> ata: libata-core: Allow capacity transition to zero for locked drives TJ Adams <tadamsjr(a)google.com> ata: libata-core: Skip HPA resize for locked drives Reinette Chatre <reinette.chatre(a)intel.com> fs/resctrl: Fix double-add of pseudo-locked region's RMID to free list Tony Luck <tony.luck(a)intel.com> fs/resctrl: Free mon_data structures on rdt_get_tree() failure Jinjie Ruan <ruanjinjie(a)huawei.com> cpu/hotplug: Fix NULL kobject warning in cpuhp_smt_enable() Jinjie Ruan <ruanjinjie(a)huawei.com> arm64: smp: Fix hot-unplug tearing by forcing unregistration Théo Lebrun <theo.lebrun(a)bootlin.com> net: macb: drop in-flight Tx SKBs on close Dust Li <dust.li(a)linux.alibaba.com> dibs: loopback: validate offset and size in move_data() Daehyeon Ko <4ncienth(a)gmail.com> macsec: don't read an unset MAC header in macsec_encrypt() Yizhou Zhao <zhaoyz24(a)mails.tsinghua.edu.cn> ipvs: reset full ip_vs_seq structs in ip_vs_conn_new Yizhou Zhao <zhaoyz24(a)mails.tsinghua.edu.cn> ipvs: use parsed transport offset in SCTP state lookup Shuangpeng Bai <shuangpeng.kernel(a)gmail.com> llc: fix SAP refcount leak in llc_ui_autobind() Nirmoy Das <nirmoyd(a)nvidia.com> selftests: net: make busywait timeout clock portable Dawei Feng <dawei.feng(a)seu.edu.cn> octeontx2-pf: fix SQB pointer leak on init failure Yousef Alhouseen <alhouseenyousef(a)gmail.com> mac802154: remove interfaces with RCU list deletion Gerald Schaefer <gerald.schaefer(a)linux.ibm.com> s390/monwriter: Reject buffer reuse with different data length Haoxiang Li <haoxiang_li2024(a)163.com> irqchip/irq-riscv-imsic-early: Fix fwnode leak on state setup failure Zi Yan <ziy(a)nvidia.com> mm/compaction: handle free_pages_prepare() properly in compaction_free() Martin Kaiser <martin(a)kaiser.cx> riscv: probes: save original sp in rethook trampoline HyeongJun An <sammiee5311(a)gmail.com> hwmon: (asus_atk0110) Check package count before accessing element Maoyi Xie <maoyixie.tju(a)gmail.com> net: wwan: iosm: bound device offsets in the MUX downlink decoder Wentao Liang <vulab(a)iscas.ac.cn> ata: pata_pxa: Fix DMA channel leak on probe error Dawei Feng <dawei.feng(a)seu.edu.cn> net/mlx5: HWS, fix matcher leak on resize target setup failure Bryam Vargas <hexlabsecurity(a)proton.me> orangefs: keep the readdir entry size 64-bit in fill_from_part() Masami Hiramatsu (Google) <mhiramat(a)kernel.org> tracing/probes: Fix double addition of offset for @+FOFFSET Joshua Crofts <joshua.crofts1(a)gmail.com> hwmon: (max1619) add missing 'select REGMAP' to Kconfig David Lee <david.lee(a)trailofbits.com> fhandle: reject detached mounts in capable_wrt_mount() Bryam Vargas <hexlabsecurity(a)proton.me> net/sched: sch_taprio: Replace direct dequeue call with peek and qdisc_dequeue_peeked Bryam Vargas <hexlabsecurity(a)proton.me> net/sched: sch_multiq: Replace direct dequeue call with peek and qdisc_dequeue_peeked Andrea Righi <arighi(a)nvidia.com> net: lan743x: Initialize eth_syslock spinlock before use Haoxiang Li <haoxiang_li2024(a)163.com> fsl/fman: Free init resources on KeyGen failure in fman_init() Runyu Xiao <runyu.xiao(a)seu.edu.cn> hwmon: (occ) unregister sysfs devices outside occ lock Haoxiang Li <haoxiang_li2024(a)163.com> net: liquidio: fix BAR resource leak on PF number failure Pengpeng Hou <pengpeng(a)iscas.ac.cn> hwmon: (w83793) remove vrm sysfs file on probe failure Pengpeng Hou <pengpeng(a)iscas.ac.cn> hwmon: (w83627hf) remove VID sysfs files on error and remove Conor Dooley <conor.dooley(a)microchip.com> rtc: mpfs: fix counter upload completion condition Lad Prabhakar <prabhakar.mahadev-lad.rj(a)bp.renesas.com> rtc: renesas-rtca3: Fix PIE clear polling condition in alarm setup error path Abdun Nihaal <nihaal(a)cse.iitm.ac.in> bnx2x: fix potential memory leak in bnx2x_alloc_mem_bp() Wentao Liang <vulab(a)iscas.ac.cn> ipmi: fix refcount leak in i_ipmi_request() Sabrina Dubroca <sd(a)queasysnail.net> espintcp: use sk_msg_free_partial to fix partial send Matt Fleming <mfleming(a)cloudflare.com> ipmi: Fix user refcount underflow in event delivery Hongchen Zhang <zhanghongchen(a)loongson.cn> LoongArch: Fix missing dirty page tracking in {pte,pmd}_wrprotect() Xuewen Wang <wangxuewen(a)kylinos.cn> LoongArch: Fix nr passing in set_direct_map_valid_noflush() Biju Das <biju.das.jz(a)bp.renesas.com> pwm: rzg2l-gpt: Fix period_ticks type from u32 to u64 Ihor Solodrai <ihor.solodrai(a)linux.dev> selftests/bpf: Add simple strscpy() implementation Sean Christopherson <seanjc(a)google.com> KVM: TDX: Account all non-transient page allocations for per-TD structures Shuicheng Lin <shuicheng.lin(a)intel.com> drm/xe/userptr: Stub notifier_lock helpers when DRM_GPUSVM=n Jamal Hadi Salim <jhs(a)mojatatu.com> net/sched: sch_teql: move rcu_read_lock()/spin_lock() from _bh variants Daniel Gibson <daniel(a)gibson.sh> platform/x86/amd/pmc: Avoid logging "(null)" for DMI values Ankit Garg <nktgrg(a)google.com> gve: fix header buffer corruption with header-split and HW-GRO Shitalkumar Gandhi <shital.gandhi45(a)gmail.com> ieee802154: ca8210: fix pointer truncation in kfifo on 64-bit Shitalkumar Gandhi <shital.gandhi45(a)gmail.com> ieee802154: ca8210: fix cas_ctl leak on spi_async failure Michael Bommarito <michael.bommarito(a)gmail.com> ieee802154: allow legacy LLSEC ADD/DEL ops to pass strict validation Michael Bommarito <michael.bommarito(a)gmail.com> ieee802154: admin-gate legacy LLSEC dump operations Haoxiang Li <haoxiang_li2024(a)163.com> octeontx2-af: Free BPID bitmap on setup failure Maoyi Xie <maoyixie.tju(a)gmail.com> net: ip6_tunnel: require CAP_NET_ADMIN in the device netns for changelink Maoyi Xie <maoyixie.tju(a)gmail.com> net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink Maoyi Xie <maoyixie.tju(a)gmail.com> net: ipip: require CAP_NET_ADMIN in the device netns for changelink Maoyi Xie <maoyixie.tju(a)gmail.com> net: ip_vti: require CAP_NET_ADMIN in the device netns for changelink Maoyi Xie <maoyixie.tju(a)gmail.com> net: ip6_vti: require CAP_NET_ADMIN in the device netns for changelink Dawei Feng <dawei.feng(a)seu.edu.cn> net: ena: clean up XDP TX queues when regular TX setup fails Ross Porter <ross.porter(a)canonical.com> selftests: net: fix file owner for broadcast_ether_dst test Zihan Xi <xizh2024(a)lzu.edu.cn> net/sched: act_ct: preserve tc_skb_cb across defragmentation Haoxiang Li <haoxiang_li2024(a)163.com> net: ixp4xx_hss: fix duplicate HDLC netdev allocation Haoxiang Li <haoxiang_li2024(a)163.com> net: wwan: t7xx: destroy DMA pool on CLDMA late init failure Philippe Schenker <philippe.schenker(a)impulsing.ch> net: ethernet: ti: icssg: guard PA stat lookups Maoyi Xie <maoyixie.tju(a)gmail.com> net: sit: require CAP_NET_ADMIN in the device netns for changelink Andreas Kemnade <andreas(a)kemnade.info> gpios: palmas: add .get_direction() op Sergio Paracuellos <sergio.paracuellos(a)gmail.com> gpio: mt7621: avoid corruption of shared interrupt trigger state Paul Louvel <paul.louvel(a)bootlin.com> gpio-f7188x: Add support for NCT6126D version B Sergio Paracuellos <sergio.paracuellos(a)gmail.com> gpio: mt7621: be sure IRQ domain is created before exposing GPIO chips Runyu Xiao <runyu.xiao(a)seu.edu.cn> gpio: tegra: do not call pinctrl for GPIO direction Sergio Paracuellos <sergio.paracuellos(a)gmail.com> gpio: mt7621: more robust management of IRQ domain teardown Bradley Morgan <include(a)grrlz.net> cpu: hotplug: Bound hotplug states sysfs output Bradley Morgan <include(a)grrlz.net> cpu: hotplug: Preserve per instance callback errors Cao Ruichuang <create0818(a)163.com> selftests/ftrace: Drop invalid top-level local in test_ownership Zhan Xusheng <zhanxusheng1024(a)gmail.com> posix-cpu-timers: Use u64 multiplication in update_rlimit_cpu() Thomas Gleixner <tglx(a)kernel.org> locking/rt: Fix the incorrect RCU protection in rt_spin_unlock() Maoyi Xie <maoyixie.tju(a)gmail.com> wifi: libertas_tf: fix use-after-free in lbtf_free_adapter() Michael Bommarito <michael.bommarito(a)gmail.com> tracing/user_events: Fix use-after-free in user_event_mm_dup() Doruk Tan Ozturk <doruk(a)0sec.ai> net/mlx5e: macsec: fix use-after-free of metadata_dst on RX SC delete Dmitry Torokhov <dmitry.torokhov(a)gmail.com> Input: ims-pcu - fix type confusion in CDC union descriptor parsing Dmitry Torokhov <dmitry.torokhov(a)gmail.com> Input: ims-pcu - fix race condition in reset_device sysfs callback Dmitry Torokhov <dmitry.torokhov(a)gmail.com> Input: ims-pcu - fix potential infinite loop in CDC union descriptor parsing Dmitry Torokhov <dmitry.torokhov(a)gmail.com> Input: ims-pcu - fix out-of-bounds read in ims_pcu_irq() debug logging Dmitry Torokhov <dmitry.torokhov(a)gmail.com> Input: ims-pcu - fix firmware leak in async update Dmitry Torokhov <dmitry.torokhov(a)gmail.com> Input: ims-pcu - fix DMA mapping violation in line setup Dmitry Torokhov <dmitry.torokhov(a)gmail.com> Input: ims-pcu - add response length checks Dmitry Torokhov <dmitry.torokhov(a)gmail.com> Input: ims-pcu - validate control endpoint type Dmitry Torokhov <dmitry.torokhov(a)gmail.com> Input: ims-pcu - release data interface on disconnect Dmitry Torokhov <dmitry.torokhov(a)gmail.com> Input: ims-pcu - only expose sysfs attributes on control interface Dmitry Torokhov <dmitry.torokhov(a)gmail.com> Input: ims-pcu - fix use-after-free and double-free in disconnect Haoxiang Li <haoxiang_li2024(a)163.com> scsi: elx: efct: Fix I/O leak on unsupported additional CDB WenTao Liang <vulab(a)iscas.ac.cn> scsi: elx: efct: Fix refcount leak in efct_hw_io_abort() Bryam Vargas <hexlabsecurity(a)proton.me> scsi: target: core: Fix iSCSI ISID use-after-free in REGISTER AND MOVE Bryam Vargas <hexlabsecurity(a)proton.me> scsi: target: Bound PR-OUT TransportID parsing to the received buffer Michael Bommarito <michael.bommarito(a)gmail.com> scsi: xen: scsiback: Free unsubmitted command instead of double-putting it Michael Bommarito <michael.bommarito(a)gmail.com> scsi: xen: scsiback: Free the command tag on the TMR submit-failure path Xu Rao <raoxu(a)uniontech.com> scsi: sg: Report request-table problems when any status is set Abdun Nihaal <nihaal(a)cse.iitm.ac.in> scsi: lpfc: Fix memory leak in lpfc_sli4_driver_resource_setup() Haoxiang Li <haoxiang_li2024(a)163.com> scsi: hpsa: Fix DMA mapping leak on IOACCEL2 reset path Jhonraushan <raushan.jhon(a)gmail.com> accel/ivpu: Reject firmware log with size smaller than header Wentao Liang <vulab(a)iscas.ac.cn> accel/amdxdna: Fix use-after-free in amdxdna_gem_dmabuf_mmap() Baineng Shou <shoubaineng(a)gmail.com> dma-fence: Make dma_fence_dedup_array() robust against 0-count input Mikulas Patocka <mpatocka(a)redhat.com> dm-verity: make error counter atomic Mikulas Patocka <mpatocka(a)redhat.com> dm-verity: increase sprintf buffer size Mikulas Patocka <mpatocka(a)redhat.com> dm-verity: fix a possible NULL pointer dereference Mikulas Patocka <mpatocka(a)redhat.com> dm-verity: avoid double increment of &use_bh_wq_enabled Mikulas Patocka <mpatocka(a)redhat.com> dm-integrity: don't increment hash_offset twice Mikulas Patocka <mpatocka(a)redhat.com> dm-integrity: fix a bug if the bio is out of limits Mikulas Patocka <mpatocka(a)redhat.com> dm-integrity: fix leaking uninitialized kernel memory Mikulas Patocka <mpatocka(a)redhat.com> dm_early_create: fix freeing used table on dm_resume failure Mikulas Patocka <mpatocka(a)redhat.com> dm-stats: fix merge accounting Mikulas Patocka <mpatocka(a)redhat.com> dm-stats: fix dm_jiffies_to_msec64 Samuel Moelius <sam.moelius(a)trailofbits.com> dm-pcache: reject option groups without values Benjamin Marzinski <bmarzins(a)redhat.com> dm-log: fix a bitset_size overflow on 32bit machines Mikulas Patocka <mpatocka(a)redhat.com> dm-ioctl: fix a possible overflow in list_version_get_info Mikulas Patocka <mpatocka(a)redhat.com> dm-bufio: fix wrong count calculation in dm_bufio_issue_discard Samuel Moelius <sam.moelius(a)trailofbits.com> dm era: fix out-of-bounds memory access for non-zero start sector Ming-Hung Tsai <mtsai(a)redhat.com> dm thin metadata: fix metadata snapshot consistency on commit failure Genjian Zhang <zhanggenjian(a)kylinos.cn> dm thin metadata: fix superblock refcount leak on snapshot shadow failure Haoxiang Li <haoxiang_li2024(a)163.com> net: sparx5: unregister blocking notifier on init failure Yitang Yang <yi1tang.yang(a)gmail.com> block: fix IORING_URING_CMD_REISSUE flags check in blkdev_uring_cmd Mike Waychison <mike(a)waychison.com> block: fix race in blk_time_get_ns() returning 0 Connor Williamson <connordw(a)amazon.com> block: remove redundant GD_NEED_PART_SCAN in add_disk_final() Jiri Olsa <jolsa(a)kernel.org> bpf: Add missing access_ok call to copy_user_syms Jann Horn <jannh(a)google.com> bpf,fork: wipe ->bpf_storage before bailouts that access it Tristan Madani <tristan(a)talencesecurity.com> bpf: Reset register bounds before narrowing retval range in check_mem_access() Oliver Hartkopp <socketcan(a)hartkopp.net> can: bcm: add missing rcu list annotations and operations Oliver Hartkopp <socketcan(a)hartkopp.net> can: bcm: fix lockless bound/ifindex race and silent RX_SETUP failure Lee Jones <lee(a)kernel.org> can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF Oliver Hartkopp <socketcan(a)hartkopp.net> can: isotp: serialize TX state transitions under so->rx_lock Oliver Hartkopp <socketcan(a)hartkopp.net> can: isotp: fix use-after-free race with concurrent NETDEV_UNREGISTER Oliver Hartkopp <socketcan(a)hartkopp.net> can: isotp: use unconditional synchronize_rcu() in isotp_release() Fan Wu <fanwu01(a)zju.edu.cn> can: esd_usb: kill anchored URBs before freeing netdevs Maoyi Xie <maoyixie.tju(a)gmail.com> netdev-genl: report NAPI thread PID in the caller's pid namespace Wentao Liang <vulab(a)iscas.ac.cn> nvmet: fix refcount leak in nvmet_sq_create() Bryam Vargas <hexlabsecurity(a)proton.me> nvmet-rdma: handle inline data with a nonzero offset Michael Bommarito <michael.bommarito(a)gmail.com> nvmet-auth: reject short AUTH_RECEIVE buffers Nick Chan <towinchenmi(a)gmail.com> nvme-apple: Prevent shared tags across queues on Apple A11 Benjamin Coddington <ben.coddington(a)hammerspace.com> NFS: Charge unstable writes by request size, not folio size Weiming Shi <bestswngs(a)gmail.com> sctp: validate STALE_COOKIE cause length before reading staleness Kunihiko Hayashi <hayashi.kunihiko(a)socionext.com> spi: uniphier: Fix completion initialization order before devm_request_irq() Wang Yan <wangyan01(a)kylinos.cn> time: Fix off-by-one in compat settimeofday() usec validation Jaewon Yang <yong010301(a)gmail.com> tpm: Make the TPM character devices non-seekable Thorsten Blum <thorsten.blum(a)linux.dev> tpm: fix event_size output in tpm1_binary_bios_measurements_show Maoyi Xie <maoyixie.tju(a)gmail.com> xfrm: xfrm_interface: require CAP_NET_ADMIN in the device netns for changelink Sanman Pradhan <psanman(a)juniper.net> xfrm: use compat translator only for u64 alignment mismatch Qianyu Luo <qianyuluo3(a)gmail.com> xfrm: nat_keepalive: avoid double free on send error Wentao Liang <vulab(a)iscas.ac.cn> xen/gntdev: fix error handling in ioctl Steven Rostedt <rostedt(a)goodmis.org> ufs: core: tracing: Do not dereference pointers in TP_printk() Dmitry Safonov <0x7f454c46(a)gmail.com> tcp: Decrement tcp_md5_needed static branch Michael Bommarito <michael.bommarito(a)gmail.com> tcp: defer md5sig_info kfree past RCU grace period in tcp_connect Paul Greenwalt <paul.greenwalt(a)intel.com> ice: fix ice_init_link() error return preventing probe Pei Xiao <xiaopei01(a)kylinos.cn> i2c: spacemit: fix spurious IRQ handling returning IRQ_HANDLED Xuanqiang Luo <luoxuanqiang(a)kylinos.cn> i2c: mlxbf: Fix use-after-free in mlxbf_i2c_init_resource() Roman Vivchar <rva333(a)protonmail.com> i2c: mediatek: fix WRRD for SoCs without auto_restart option Vincent Jardin <vjardin(a)free.fr> i2c: imx: fix locked bus on SMBus block-read of 0 (IRQ) Vincent Jardin <vjardin(a)free.fr> i2c: imx: fix locked bus on SMBus block-read of 0 (atomic) Joshua Crofts <joshua.crofts1(a)gmail.com> hwmon: (max6697) add missing 'select REGMAP_I2C' to Kconfig Joshua Crofts <joshua.crofts1(a)gmail.com> hwmon: (ltc2992) add missing 'select REGMAP_I2C' to Kconfig Ibrahim Hashimov <security(a)auditcode.ai> ksmbd: fix integer overflow in set_file_allocation_info() Fredric Cover <fredric.cover.lkernel(a)gmail.com> smb: client: use kvzalloc() for megabyte buffer in simple fallocate Holger Dengler <dengler(a)linux.ibm.com> pkey: Move keytype check from pkey api to handler Daniel Gibson <daniel(a)gibson.sh> platform/x86/amd/pmc: Don't log during intermediate wakeups Daniel Gibson <daniel(a)gibson.sh> platform/x86/amd/pmc: Add delay_suspend module parameter Daniel Gibson <daniel(a)gibson.sh> platform/x86/amd/pmc: Delay suspend for some Lenovo Laptops Daniel Gibson <daniel(a)gibson.sh> platform/x86/amd/pmc: Check for intermediate wakeup in function Srinivas Pandruvada <srinivas.pandruvada(a)intel.com> platform/x86: ISST: Restore SST-PP control to all domains Haoxiang Li <lihaoxiang(a)isrc.iscas.ac.cn> platform/x86: dell-laptop: fix missing cleanups in init error path Frank Li <Frank.Li(a)nxp.com> dmaengine: dw-edma: Add spinlock to protect DONE_INT_MASK and ABORT_INT_MASK Kartik Rajput <kkartik(a)nvidia.com> dmaengine: tegra: Fix burst size calculation Hongling Zeng <zenghongling(a)kylinos.cn> sunrpc: fix uninitialized xprt_create_args structure Michael Bommarito <michael.bommarito(a)gmail.com> tpm: tpm2-sessions: wait for async KPP completion in tpm_buf_append_salt Jarkko Sakkinen <jarkko(a)kernel.org> tpm: tpm_tis_spi: Use wait_woken() in wait_for_tmp_stat() Baoli Zhang <baoli.zhang(a)linux.intel.com> tpm: restore timeout for key creation commands Bhargav Joshi <j.bhargav.u(a)gmail.com> irqchip/crossbar: Use correct index in crossbar_domain_free() Yiyang Chen <cyyzero16(a)gmail.com> taskstats: retain dead thread stats in TGID queries Florian Fuchs <fuchsfl(a)gmail.com> mtd: maps: vmu-flash: fix NULL pointer dereference in initialization Stafford Horne <shorne(a)gmail.com> openrisc: Fix jump_label smp syncing Miquel Raynal <miquel.raynal(a)bootlin.com> mtd: rawnand: Pause continuous reads at block boundaries Takahiro Kuwano <takahiro.kuwano(a)infineon.com> mtd: spi-nor: spansion: use die erase for multi-die devices only Miquel Raynal <miquel.raynal(a)bootlin.com> mtd: spi-nor: swp: Improve locking user experience Holger Dengler <dengler(a)linux.ibm.com> s390/pkey: Check length in pkey_pckmo handler implementation Holger Dengler <dengler(a)linux.ibm.com> s390/pkey: Check length in PKEY_VERIFYPROTK ioctl Sebastian Alba Vives <sebasjosue84(a)gmail.com> fpga: microchip-spi: fix zero header_size OOB read in mpf_ops_parse_header() Maoyi Xie <maoyixie.tju(a)gmail.com> net: thunderbolt: Fix frags[] overflow by bounding frame_count Manivannan Sadhasivam <manivannan.sadhasivam(a)oss.qualcomm.com> bus: mhi: ep: Protect mhi_ep_handle_syserr() in the error path Manivannan Sadhasivam <manivannan.sadhasivam(a)oss.qualcomm.com> bus: mhi: host: pci_generic: Fix the physical function check Sebastian Alba Vives <sebasjosue84(a)gmail.com> fpga: dfl: add bounds check in dfh_get_param_size() Michael Bommarito <michael.bommarito(a)gmail.com> ocfs2: reject non-inline dinodes with i_size and zero i_clusters Michael Bommarito <michael.bommarito(a)gmail.com> ocfs2: reject dinodes whose i_rdev disagrees with the file type Michael Bommarito <michael.bommarito(a)gmail.com> ocfs2: reject dinodes with non-canonical i_mode type Joseph Qi <joseph.qi(a)linux.alibaba.com> ocfs2: add journal NULL check in ocfs2_checkpoint_inode() Ian Bridges <icb(a)fastmail.org> ocfs2: fix UBSAN array-index-out-of-bounds in ocfs2_sum_rightmost_rec Ian Bridges <icb(a)fastmail.org> ocfs2: fix NULL h_transaction deref in ocfs2_assure_trans_credits Kyle Zeng <kylebot(a)openai.com> ocfs2: avoid moving extents to occupied clusters Arseniy Krasnov <avkrasnov(a)rulkc.org> mtd: rawnand: fix condition in 'nand_select_target()' Vasiliy Kovalev <kovalev(a)altlinux.org> net/9p: fix infinite loop in p9_client_rpc on fatal signal Bastien Curutchet <bastien.curutchet(a)bootlin.com> mtd: rawnand: pl353: fix probe resource allocation Tristan Madani <tristan(a)talencesecurity.com> ocfs2: use kzalloc for quota recovery bitmap allocation Stafford Horne <shorne(a)gmail.com> openrisc: Add full instruction cache invalidate functions Ionut Nechita <ionut.nechita(a)windriver.com> scsi: sas: Skip opt_sectors when DMA reports no real optimization hint Martin Wilck <martin.wilck(a)suse.com> scsi: smartpqi: Use shost_to_hba() in pqi_scan_finished() Alexey Charkov <alchark(a)flipper.net> power: supply: bq257xx: Fix VSYSMIN clamping logic Breno Leitao <leitao(a)debian.org> 9p: skip nlink update in cacheless mode to fix WARN_ON Ruoyu Wang <ruoyuw560(a)gmail.com> mtd: slram: remove failed entries from the device list Karl Mehltretter <kmehltretter(a)gmail.com> kcov: use WRITE_ONCE() for selftest mode stores Muchun Song <muchun.song(a)linux.dev> mm/mm_init: fix uninitialized struct pages for ZONE_DEVICE Amit Machhiwal <amachhiw(a)linux.ibm.com> powerpc/dt_cpu_ftrs: Set CPU_FTR_P11_PVR for Power11 and later processors Jinjiang Tu <tujinjiang(a)huawei.com> fs/proc: fix KPF_KSM reported for all anonymous pages Krzysztof Wilczyński <kwilczynski(a)kernel.org> proc: only bump parent nlink when registering directories Kiryl Shutsemau (Meta) <kas(a)kernel.org> fs/proc/task_mmu: use huge_page_size() in pagemap_scan_hugetlb_entry() Kiryl Shutsemau (Meta) <kas(a)kernel.org> fs/proc/task_mmu: fix hugetlb self-deadlock in pagemap_scan_pte_hole() SeongJae Park <sj(a)kernel.org> mm/damon/sysfs-schemes: put stats for scheme_add_dirs() internal error SeongJae Park <sj(a)kernel.org> mm/damon/sysfs-schemes: fix dir put orders in access_pattern_add_dirs() Zishun Yi <vulab(a)iscas.ac.cn> riscv: cacheinfo: Fix node reference leak in populate_cache_leaves Aaron Tomlin <atomlin(a)atomlin.com> mips: sched: Fix CPUMASK_OFFSTACK memory corruption Bryam Vargas <hexlabsecurity(a)proton.me> selftests/landlock: Test SCOPE_SIGNAL on the SIGIO/fowner pgid path WenTao Liang <vulab(a)iscas.ac.cn> power: supply: charger-manager: fix refcount leak in is_full_charged() Bryam Vargas <hexlabsecurity(a)proton.me> landlock: Fix LANDLOCK_SCOPE_SIGNAL bypass on the SIGIO path Tristan Madani <tristan(a)talencesecurity.com> ntfs3: fix out-of-bounds read in decompress_lznt Michael Bommarito <michael.bommarito(a)gmail.com> ntfs3: validate split-point offset in indx_insert_into_buffer Michael Bommarito <michael.bommarito(a)gmail.com> ntfs3: bound to_move in indx_insert_into_root before hdr_insert_head Michael Bommarito <michael.bommarito(a)gmail.com> ntfs3: cap RESTART_TABLE free-chain walker at rt->used Michael Bommarito <michael.bommarito(a)gmail.com> fs/ntfs3: bound NTFS_DE view.data_off in UpdateRecordData{Root,Allocation} Michael Bommarito <michael.bommarito(a)gmail.com> fs/ntfs3: add depth limit to indx_find_buffer to prevent stack overflow Konstantin Komarov <almaz.alexandrovich(a)paragon-software.com> fs/ntfs3: validate lcns_follow in log_replay conversion Konstantin Komarov <almaz.alexandrovich(a)paragon-software.com> fs/ntfs3: bound attr_off in UpdateResidentValue against data_off Michael Bommarito <michael.bommarito(a)gmail.com> fs/ntfs3: bound copy_lcns dp->page_lcns[] index in analysis pass Konstantin Komarov <almaz.alexandrovich(a)paragon-software.com> fs/ntfs3: bound DeleteIndexEntryAllocation memmove length Zhan Xusheng <zhanxusheng1024(a)gmail.com> fs/ntfs3: fix syncing wrong inode on DIRSYNC cross-directory rename SeongJae Park <sj(a)kernel.org> mm/damon/core: make charge_addr_from aware of end-address exclusivity Muchun Song <muchun.song(a)linux.dev> mm/memory_hotplug: fix incorrect altmap passing in error path Deepanshu Kartikey <kartikey406(a)gmail.com> mm/hugetlb: fix hugetlb cgroup rsvd charge/uncharge mismatch Johan Hovold <johan(a)kernel.org> power: supply: max17042: fix OF node reference imbalance Ma Ke <make24(a)iscas.ac.cn> power: supply: cpcap-battery: Fix missing nvmem_device_put() causing reference leak Muchun Song <muchun.song(a)linux.dev> mm/mm_init: fix pageblock migratetype for ZONE_DEVICE compound pages Maciej W. Rozycki <macro(a)orcam.me.uk> MIPS: DEC: Ensure 32-bit stack location for o32 prom_printf() Johan Hovold <johan(a)kernel.org> MIPS: ip22-gio: fix device reference leak in probe Johan Hovold <johan(a)kernel.org> MIPS: ip22-gio: fix kfree() of static object Johan Hovold <johan(a)kernel.org> MIPS: ip22-gio: fix gio device memory leak Wasim Nazir <wasim.nazir(a)oss.qualcomm.com> remoteproc: qcom: Fix leak when custom dump_segments addition fails Chuck Lever <chuck.lever(a)oracle.com> SUNRPC: Bound-check xdr_buf_to_bvec() stores before writing Chuck Lever <chuck.lever(a)oracle.com> lockd: Plug nlm_file refcount leak on cached nlm_do_fopen() failure Chuck Lever <chuck.lever(a)oracle.com> lockd: Plug nlm_file leak when nlm_do_fopen() fails Luxiao Xu <rakukuip(a)gmail.com> sunrpc: harden rq_procinfo lifecycle to prevent double-free Chuck Lever <chuck.lever(a)oracle.com> sunrpc: wait for in-flight TLS handshake callback when cancel loses race Chris Mason <clm(a)meta.com> sunrpc: pin svc_xprt across the asynchronous TLS handshake callback Abdun Nihaal <nihaal(a)cse.iitm.ac.in> nvdimm/btt: Free arena sub-allocations on discover_arenas() error path Abdun Nihaal <nihaal(a)cse.iitm.ac.in> nvdimm/btt: Free arenas on btt_init() error paths Junrui Luo <moonafterrain(a)outlook.com> jbd2: fix integer underflow in jbd2_journal_initialize_fast_commit() Pauli Virtanen <pav(a)iki.fi> Bluetooth: SCO: hold sk properly in sco_conn_ready Pauli Virtanen <pav(a)iki.fi> Bluetooth: SCO: fix sleeping under spinlock in sco_conn_ready Benoît Sevens <bsevens(a)google.com> HID: playstation: validate num_touch_reports in DualShock 4 reports Bartosz Golaszewski <bartosz.golaszewski(a)oss.qualcomm.com> mfd: tps6586x: Fix OF node refcount Shyam Prasad N <sprasad(a)microsoft.com> cifs: invalidate cfid on unlink/rename/rmdir Sven Eckelmann <sven(a)narfation.org> batman-adv: tt: prevent TVLV OOB check overflow Sven Eckelmann <sven(a)narfation.org> batman-adv: mcast: avoid OOB read of num_dests header Sven Eckelmann <sven(a)narfation.org> batman-adv: frag: fix primary_if leak on failed linearization Sven Eckelmann <sven(a)narfation.org> batman-adv: clean untagged VLAN on netdev registration failure Sven Eckelmann <sven(a)narfation.org> batman-adv: frag: free unfragmentable packet Sven Eckelmann <sven(a)narfation.org> batman-adv: fix VLAN priority offset Sven Eckelmann <sven(a)narfation.org> batman-adv: tt: avoid request storms during pending request Sven Eckelmann <sven(a)narfation.org> batman-adv: dat: fix tie-break for candidate selection Sven Eckelmann <sven(a)narfation.org> batman-adv: ensure minimal ethernet header on TX Sven Eckelmann <sven(a)narfation.org> batman-adv: dat: ensure accessible eth_hdr proto field Sven Eckelmann <sven(a)narfation.org> batman-adv: bla: reacquire gw address after skb realloc Sven Eckelmann <sven(a)narfation.org> batman-adv: dat: acquire ARP hw source only after skb realloc Sven Eckelmann <sven(a)narfation.org> batman-adv: access unicast_ttvn skb->data only after skb realloc Sven Eckelmann <sven(a)narfation.org> batman-adv: retrieve ethhdr after potential skb realloc on RX Sven Eckelmann <sven(a)narfation.org> batman-adv: gw: acquire ethernet header only after skb realloc Sumanth Korikkar <sumanthk(a)linux.ibm.com> s390/perf_cpum_cf: Add missing array_index_nospec() to __hw_perf_event_init() Rafael J. Wysocki <rafael.j.wysocki(a)intel.com> cpufreq: intel_pstate: Set non-turbo capacity to HWP_GUARANTEED_PERF() Zhongqiu Han <zhongqiu.han(a)oss.qualcomm.com> cpufreq: schedutil: Fix uncleared need_freq_update on the .adjust_perf() path Sandipan Das <sandipan.das(a)amd.com> perf/x86/amd/lbr: Fix kernel address leakage Sandipan Das <sandipan.das(a)amd.com> perf/x86/amd/brs: Fix kernel address leakage Thorsten Blum <thorsten.blum(a)linux.dev> x86/boot: Reject too long acpi_rsdp= values Thorsten Blum <thorsten.blum(a)linux.dev> x86/boot: Validate console=uart8250 baud rate to fix early boot hang Mario Limonciello <mario.limonciello(a)amd.com> x86/video: Only fall back to vga_default_device() without screen info Ali Ahmet MEMIS <dev(a)unknownbbqr.xyz> tools/power/x86/intel-speed-select: Harden daemon pidfile open Guangshuo Li <lgs201920130244(a)gmail.com> mfd: sm501: Fix reference leak on failed device registration Armin Wolf <W_Armin(a)gmx.de> leds: uleds: Fix potential buffer overread Ondrej Mosnacek <omosnace(a)redhat.com> selinux: fix incorrect execmem checks on overlayfs Tristan Madani <tristan(a)talencesecurity.com> selinux: avoid sk_socket dereference in selinux_sctp_bind_connect() Stephen Smalley <stephen.smalley.work(a)gmail.com> selinux: check connect-related permissions on TCP Fast Open Wang Jun <1742789905(a)qq.com> soc: fsl: qe: panic on ioremap() failure in qe_reset() Siddharth Vadapalli <s-vadapalli(a)ti.com> soc: ti: k3-ringacc: Fix access mode for k3_ringacc_ring_pop_tail_io/proxy Guangshuo Li <lgs201920130244(a)gmail.com> gpu: host1x: Fix device reference leak in host1x_device_parse_dt() error path Eliot Courtney <ecourtney(a)nvidia.com> gpu: nova-core: simplify and_then with condition to filter Xiang Mei (Microsoft) <xmei5(a)asu.edu> netfilter: bridge: fix stale prevhdr pointer in br_ip6_fragment() Wyatt Feng <bronzed_45_vested(a)icloud.com> netfilter: xt_nat: reject unsupported target families Yizhou Zhao <zhaoyz24(a)mails.tsinghua.edu.cn> netfilter: ecache: fix inverted time_after() check Yizhou Zhao <zhaoyz24(a)mails.tsinghua.edu.cn> netfilter: nf_conncount: fix zone comparison in tuple dedup Xiang Mei <xmei5(a)asu.edu> netfilter: nf_conntrack_reasm: guard mac_header adjustment after IPv6 defrag Florian Westphal <fw(a)strlen.de> netfilter: nf_nat_sip: reload possible stale data pointer Florian Westphal <fw(a)strlen.de> netfilter: nft_set_pipapo: don't leak bad clone into future transaction Haoze Xie <royenheart(a)gmail.com> netfilter: nf_queue: pin bridge device while NFQUEUE holds fake dst Wyatt Feng <bronzed_45_vested(a)icloud.com> netfilter: xt_cluster: reject template conntracks in hash match David Carlier <devnexen(a)gmail.com> netfilter: nfnl_cthelper: apply per-class values when updating policies Muhammad Bilal <meatuni001(a)gmail.com> netfilter: nf_conntrack_irc: fix parse_dcc() off-by-one OOB read Srinivas Kandagatla <srinivas.kandagatla(a)oss.qualcomm.com> ASoC: qcom: q6apm: fix NULL pointer dereference in graph_callback Cássio Gabriel <cassiogabrielcontato(a)gmail.com> ASoC: mediatek: mt8183: Release reserved memory on cleanup Cássio Gabriel <cassiogabrielcontato(a)gmail.com> ASoC: mediatek: mt8183: Check runtime resume during probe Cássio Gabriel <cassiogabrielcontato(a)gmail.com> ASoC: mediatek: mt8192: Release reserved memory on cleanup Cássio Gabriel <cassiogabrielcontato(a)gmail.com> ASoC: mediatek: mt8192: Check runtime resume during probe Peter Ujfalusi <peter.ujfalusi(a)linux.intel.com> ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control Peter Ujfalusi <peter.ujfalusi(a)linux.intel.com> ASoC: SOF: ipc3-control: Fix heap overflow in bytes_ext put/get Abdun Nihaal <nihaal(a)cse.iitm.ac.in> fbdev: tridentfb: fix potential memory leak in trident_pci_probe() Abdun Nihaal <nihaal(a)cse.iitm.ac.in> fbdev: nvidia: fix potential memory leak in nvidiafb_probe() Abdun Nihaal <nihaal(a)cse.iitm.ac.in> fbdev: vesafb: fix memory leak in vesafb_probe() Abdun Nihaal <nihaal(a)cse.iitm.ac.in> fbdev: carminefb: fix potential memory leak in alloc_carmine_fb() Abdun Nihaal <nihaal(a)cse.iitm.ac.in> fbdev: tdfxfb: fix potential memory leak in tdfxfb_probe() Abdun Nihaal <nihaal(a)cse.iitm.ac.in> fbdev: uvesafb: fix potential memory leak in uvesafb_probe() Abdun Nihaal <nihaal(a)cse.iitm.ac.in> fbdev: s3fb: fix potential memory leak in s3_pci_probe() Abdun Nihaal <nihaal(a)cse.iitm.ac.in> fbdev: i740fb: fix potential memory leak in i740fb_probe() Abdun Nihaal <nihaal(a)cse.iitm.ac.in> fbdev: radeon: fix potential memory leak in radeonfb_pci_register() Abdun Nihaal <nihaal(a)cse.iitm.ac.in> fbdev: efifb: fix memory leak in efifb_probe() Li RongQing <lirongqing(a)baidu.com> fbdev: sm712: Fix operator precedence in big_swap macro Abdun Nihaal <nihaal(a)cse.iitm.ac.in> fbdev: hecubafb: fix potential memory leak in hecubafb_probe() Abdun Nihaal <nihaal(a)cse.iitm.ac.in> fbdev: broadsheetfb: fix potential memory leak in broadsheetfb_probe() Abdun Nihaal <nihaal(a)cse.iitm.ac.in> fbdev: metronomefb: fix potential memory leak in metronomefb_probe() Oliver Upton <oupton(a)kernel.org> KVM: arm64: nv: Inject SEA if guest VNCR isn't normal memory Oliver Upton <oupton(a)kernel.org> KVM: arm64: nv: Inject SEA if kvm_translate_vncr() can't resolve PFN Oliver Upton <oupton(a)kernel.org> KVM: arm64: nv: Respect read-only PFN when mapping L1 VNCR Weiming Shi <bestswngs(a)gmail.com> KVM: arm64: nv: Fix SPSR_EL2 restore in kvm_hyp_handle_mops() Fuad Tabba <tabba(a)google.com> KVM: arm64: nv: Write ESR_EL2 for injected nested SError exceptions Oliver Upton <oupton(a)kernel.org> KVM: arm64: nv: Drop bogus WARN for write to ZCR_EL2 Marc Zyngier <maz(a)kernel.org> KVM: Move kvm_io_bus_get_dev() locking responsibilities to callers Sean Christopherson <seanjc(a)google.com> KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state leixiang <leixiang(a)kylinos.cn> KVM: x86: Nullify irqfd->producer if updating IRTE for bypass fails Sean Christopherson <seanjc(a)google.com> KVM: x86: Ignore pending PV EOI if the vCPU has since disabled PV EOIs Atish Patra <atishp(a)meta.com> KVM: SEV: Do not allow intra-host migration/mirroring of SNP VMs Matthew Rosato <mjrosato(a)linux.ibm.com> KVM: s390: pci: Fix handling of AIF enable without AISB Marc Zyngier <maz(a)kernel.org> KVM: arm64: vgic: Handle race between interrupt affinity change and LPI disabling Hyunwoo Kim <imv4bel(a)gmail.com> KVM: arm64: vgic: Check the interrupt is still ours before migrating it Haoxiang Li <haoxiang_li2024(a)163.com> KVM: s390: pci: Fix GISC refcount leak on AIF enable failure Gautam Menghani <gautam(a)linux.ibm.com> powerpc/pseries/Kconfig: Enable CONFIG_VPA_PMU to be used with KVM Qiang Ma <maqianga(a)uniontech.com> LoongArch: KVM: Return full old CSR value from kvm_emu_xchg_csr() Bibo Mao <maobibo(a)loongson.cn> LoongArch: KVM: Fix FPU register width with user access API Qiang Ma <maqianga(a)uniontech.com> LoongArch: KVM: Check the return values for put_user() Bibo Mao <maobibo(a)loongson.cn> LoongArch: KVM: Check irq validity in kvm_vcpu_ioctl_interrupt() Yanfei Xu <yanfei.xu(a)bytedance.com> LoongArch: KVM: Validate irqchip index in irqfd routing David Jander <david(a)protonic.nl> ARM: dts: stm32: stm32mp15x-mecio1-io: Move expander gpio-line-names to board files David Jander <david(a)protonic.nl> ARM: dts: stm32: stm32mp15x-mecio1-io: Fix expander gpio line typo David Jander <david(a)protonic.nl> ARM: dts: stm32: stm32mp15x-mecio1-io: Move gpio-line-names to board files David Jander <david(a)protonic.nl> ARM: dts: stm32: stm32mp15x-mecio1-io: Fix GPIO names typo Krzysztof Kozlowski <krzysztof.kozlowski(a)oss.qualcomm.com> arm64: dts: imx8ulp-evk: Correct Type-C int GPIO flags David Jander <david(a)protonic.nl> ARM: dts: stm32: stm32mp15x-mecio1-io: Enable internal ADC reference Judith Mendez <jm(a)ti.com> arm64: dts: ti: k3-am62a7-sk: Add bootph-all tag to vqmmc David Jander <david(a)protonic.nl> ARM: dts: stm32: stm32mp15x-mecio1-io: Move divergent mecio1 ADC channels to board files David Jander <david(a)protonic.nl> ARM: dts: stm32: stm32mp15x-mecio1-io: Fix ADC sampling times Quentin Schulz <quentin.schulz(a)cherry.de> arm64: dts: rockchip: fix Ethernet PHY not found on PX30 Ringneck Nickolay Goppen <setotau(a)mainlining.org> arm64: dts: qcom: sdm630: describe adsp_mem region properly Hugo Villeneuve <hvilleneuve(a)dimonoff.com> ARM: dts: imx6ul-var-som: fix warning for non-existent dc-supply property Krzysztof Kozlowski <krzysztof.kozlowski(a)oss.qualcomm.com> arm64: dts: s32g3: Fix SWT8 watchdog address Mark Rutland <mark.rutland(a)arm.com> arm64: fpsimd: Fix type mismatch in sve_{save,load}_state() Yong Wang <edragain(a)163.com> net: ife: require ETH_HLEN to be pullable in ife_decode() Runyu Xiao <runyu.xiao(a)seu.edu.cn> octeontx2-vf: clear stale mailbox IRQ state before request_irq() Runyu Xiao <runyu.xiao(a)seu.edu.cn> octeontx2-pf: clear stale mailbox IRQ state before request_irq() Zhengchuan Liang <zcliangcn(a)gmail.com> net: atm: reject out-of-range traffic classes in QoS validation Michael Bommarito <michael.bommarito(a)gmail.com> net: qrtr: fix 32-bit integer overflow in qrtr_endpoint_post() Li Xiasong <lixiasong1(a)huawei.com> tipc: restrict socket queue dumps in enqueue tracepoints Cássio Gabriel <cassiogabrielcontato(a)gmail.com> ASoC: SOF: topology: validate vendor array size before parsing Peter Ujfalusi <peter.ujfalusi(a)linux.intel.com> ASoC: SOF: ipc3-control: Fix TOCTOU in bytes_put and bytes_get Peter Ujfalusi <peter.ujfalusi(a)linux.intel.com> ASoC: SOF: ipc3-control: Use overflow checks in control_update size calc Peter Ujfalusi <peter.ujfalusi(a)linux.intel.com> ASoC: SOF: ipc4-control: Fix TOCTOU in sof_ipc4_bytes_put Zhang Tianci <zhangtianci.1997(a)bytedance.com> vduse: Fix race in vduse_dev_msg_sync and vduse_dev_read_iter Wentao Liang <vulab(a)iscas.ac.cn> mlxsw: fix refcount leak in mlxsw_sp_vrs_lpm_tree_replace() Wentao Liang <vulab(a)iscas.ac.cn> mlxsw: fix refcount leak in mlxsw_sp_port_lag_join() Przemyslaw Korba <przemyslaw.korba(a)intel.com> idpf: add padding to PTP virtchnl structures Guangshuo Li <lgs201920130244(a)gmail.com> smb: client: fix overflow in passthrough ioctl bounds check Anas Khan <anxkhn28(a)gmail.com> drm/xe: remove duplicate <kunit/test-bug.h> include Harman Kalra <hkalra(a)marvell.com> octeontx2-af: fix VF bringup affecting PF promiscuous state Li RongQing <lirongqing(a)baidu.com> net/mlx5: Fix L3 tunnel entropy refcount leak Wang Yan <wangyan01(a)kylinos.cn> selftests/net: fix EVP_MD_CTX leak in tcp_mmap Timur Tabi <ttabi(a)nvidia.com> regulator: core: regulator_lock_two() should test for EDEADLK not EDEADLOCK Cao Guanghui <caoguanghui(a)kylinos.cn> dm era: fix NULL pointer dereference in metadata_open() Chuck Lever <chuck.lever(a)oracle.com> SUNRPC: pin upper rpc_clnt across the TLS connect_worker Chuck Lever <chuck.lever(a)oracle.com> SUNRPC: release lower rpc_clnt if killed waiting for XPRT_LOCKED Guangshuo Li <lgs201920130244(a)gmail.com> cifs: validate DFS referral string offsets Rongguang Wei <weirongguang(a)kylinos.cn> s390/zcrypt: Remove the empty file Julian Anastasov <ja(a)ssi.bg> ipvs: ensure inner headers in ICMP errors are in headroom Yizhou Zhao <zhaoyz24(a)mails.tsinghua.edu.cn> ipvs: fix PMTU for GUE/GRE tunnel ICMP errors Yizhou Zhao <zhaoyz24(a)mails.tsinghua.edu.cn> ipvs: use parsed transport offset in TCP state lookup Yizhou Zhao <zhaoyz24(a)mails.tsinghua.edu.cn> ipvs: pass parsed transport offset to state handlers Tamaki Yanagawa <ty(a)000ty.net> netfilter: nft_lookup: fix catchall element handling with inverted lookups Eric Dumazet <edumazet(a)google.com> ipv4: igmp: Fix potential memory leaks in igmp_mod_timer() and igmp_stop_timer() Yuyang Huang <yuyanghuang(a)google.com> ipv4: igmp: annotate data-races around timer-related fields Yuyang Huang <sigefriedhyy(a)gmail.com> ipv4: igmp: annotate data-races around im->users Eric Dumazet <edumazet(a)google.com> ipv6: mcast: Fix potential UAF in MLD delayed work Eric Dumazet <edumazet(a)google.com> ipv4: igmp: Fix potential UAF in igmp_gq_start_timer() Rosen Penev <rosenp(a)gmail.com> gpio: mvebu: free generic chips on unbind Sandipan Das <sandipan.das(a)amd.com> perf/x86/amd/core: Avoid enabling BRS from the SVM reload path Suman Ghosh <sumang(a)marvell.com> octeontx2-pf: check DMAC extraction support before filtering Samuel Moelius <sam.moelius(a)trailofbits.com> net/sched: cake: reject overhead values that underflow length Rosen Penev <rosenp(a)gmail.com> net: mdio: select REGMAP_MMIO instead of depending on it Maíra Canal <mcanal(a)igalia.com> drm/v3d: Reject invalid indirect BO handle in indirect CSD setup Lizhi Hou <lizhi.hou(a)amd.com> accel/amdxdna: Fix potential amdxdna_umap lifetime race Ben Dooks <ben.dooks(a)codethink.co.uk> tracing: Make tracepoint_printk static as not exported Jia Wang <wangjia(a)ultrarisc.com> gpio: dwapb: Defer clock gating until noirq Rosen Penev <rosenp(a)gmail.com> gpio: dwapb: reduce allocation to single kzalloc Jisheng Zhang <jszhang(a)kernel.org> gpio: dwapb: Use modern PM macros Enrico Pozzobon <enrico.pozzobon(a)dissecto.com> net: usb: lan78xx: disable VLAN filter in promiscuous mode Chuck Lever <chuck.lever(a)oracle.com> net/tls: Consume empty data records in tls_sw_read_sock() Lizhi Hou <lizhi.hou(a)amd.com> accel/amdxdna: Use unsigned long for nr_pages in amdxdna_hmm_register() Hui Wang <hui.wang(a)canonical.com> ring-buffer: Fix event length with forced 8-byte alignment Stig Hornang <stig(a)hornang.me> Bluetooth: L2CAP: fix tx ident leak for commands without a response Weiming Shi <bestswngs(a)gmail.com> Bluetooth: bpa10x: avoid OOB read of revision string in bpa10x_setup() Pauli Virtanen <pav(a)iki.fi> Bluetooth: ISO: exclude RFU bits from ISO_SDU_Length Sungwoo Kim <iam(a)sung-woo.kim> Bluetooth: sco: Fix a race condition in sco_sock_timeout() Cen Zhang <zzzccc427(a)gmail.com> Bluetooth: MGMT: Fix adv monitor add failure cleanup Cen Zhang <zzzccc427(a)gmail.com> Bluetooth: 6lowpan: hold L2CAP conn across debugfs control Eric Dumazet <edumazet(a)google.com> amt: fix size calculation in amt_get_size() Xiang Mei <xmei5(a)asu.edu> net/smc: fix UAF in smc_cdc_rx_handler() by pinning the socket Jamal Hadi Salim <jhs(a)mojatatu.com> net/sched: act_pedit: fix TOCTOU heap OOB write in tc offload Xiang Mei <xmei5(a)asu.edu> net: qualcomm: rmnet: validate MAP frame length before ingress parsing Shigeru Yoshida <syoshida(a)redhat.com> qede: fix off-by-one in BD ring consumption on build_skb failure Jens Emil Schulz Østergaard <jensemil.schulzostergaard(a)microchip.com> net: microchip: vcap: fix races on the shared Super VCAP block Feng Liu <feliu(a)nvidia.com> net/mlx5e: Fix publication race for priv->channel_stats[] Feng Liu <feliu(a)nvidia.com> net/mlx5e: Fix HV VHCA stats agent registration race Feng Liu <feliu(a)nvidia.com> net/mlx5e: Fix HV VHCA stats zero-sized buffer allocation Shay Drory <shayd(a)nvidia.com> net/mlx5: LAG, MPESW, Fix missing complete() on devcom error Wyatt Feng <bronzed_45_vested(a)icloud.com> netfilter: xt_connmark: reject invalid shift parameters Pablo Neira Ayuso <pablo(a)netfilter.org> netfilter: nft_set_rbtree: get command skips end element with open interval Zhixing Chen <running910(a)gmail.com> netfilter: ip6tables: mark malformed IPv6 extension headers for hotdrop Feng Wu <wufengwufengwufeng(a)gmail.com> netfilter: xt_rateest: fix u64 truncation in xt_rateest_mt() Wyatt Feng <bronzed_45_vested(a)icloud.com> netfilter: xt_u32: reject invalid shift counts Qihang <q.h.hack.winter(a)gmail.com> gue: validate REMCSUM private option length Xiang Mei <xmei5(a)asu.edu> net: usb: net1080: validate packet_len before pad-byte access in rx_fixup Jia He <justin.he(a)arm.com> arm64/sysreg: Fix BWE field encoding in ID_AA64DFR2_EL1 Yiyang Chen <chenyy23(a)mails.tsinghua.edu.cn> selftests/hid: Cover hid_bpf_get_data() size overflow Yiyang Chen <chenyy23(a)mails.tsinghua.edu.cn> selftests/hid: Load only requested struct_ops maps Yiyang Chen <chenyy23(a)mails.tsinghua.edu.cn> HID: bpf: Fix hid_bpf_get_data() range check Anshuman Khandual <anshuman.khandual(a)arm.com> arm64/mm: Optimize TLB flush in unmap_hotplug_[pmd|pud]_range() Lee Jones <lee(a)kernel.org> HID: core: Fix OOB read in hid_get_report for numbered reports Georgiy Osokin <g.osokin(a)auroraos.dev> HID: picolcd: prevent NULL pointer dereference in picolcd_send_and_wait() Karuna Ramkumar <rkaruna(a)google.com> ata: libata-scsi: limit simulated SCSI command copy to response length Myeonghun Pak <mhun512(a)gmail.com> ata: sata_gemini: unwind clocks on IDE pinctrl errors David Howells <dhowells(a)redhat.com> cifs: Fix missing credit release on failure in cifs_issue_read() Jiri Olsa <jolsa(a)kernel.org> uprobes/x86: Use proper mm_struct in __in_uprobe_trampoline David Windsor <dwindsor(a)gmail.com> x86/uprobes: Keep shadow stack in sync for emulated CALLs Michal Wajdeczko <michal.wajdeczko(a)intel.com> drm/xe/pf: Don't attempt to process FAST_REQ or EVENT relays Shuicheng Lin <shuicheng.lin(a)intel.com> drm/xe/hw_engine: Fix double-free of managed BO in error path Shuicheng Lin <shuicheng.lin(a)intel.com> drm/xe/userptr: Hold notifier_lock for write on inject test path Francois Dugast <francois.dugast(a)intel.com> drm/xe/pt: Fix NULL pointer dereference in xe_pt_zap_ptes_entry() David Howells <dhowells(a)redhat.com> netfs: Fix folio state after ENOMEM whilst under writeback iteration David Howells <dhowells(a)redhat.com> netfs: Fix writeback error handling David Howells <dhowells(a)redhat.com> netfs: Fix writethrough to use collection offload David Howells <dhowells(a)redhat.com> netfs: Fix netfs_create_write_req() to handle async cache object creation Morduan Zang <zhangdandan(a)uniontech.com> iomap: guard io_size EOF trim against concurrent truncate underflow Amir Goldstein <amir73il(a)gmail.com> ovl: fix comment about locking order Michael Bommarito <michael.bommarito(a)gmail.com> minix: avoid overflow in bitmap block count calculation David Howells <dhowells(a)redhat.com> afs: Fix unchecked-length string display in debug statement David Howells <dhowells(a)redhat.com> afs: Fix the volume AFS_VOLUME_RM_TREE is set on David Howells <dhowells(a)redhat.com> afs: Fix premature cell exposure through /afs David Howells <dhowells(a)redhat.com> afs: Fix lack of locking around modifications of net->cells_dyn_ino David Howells <dhowells(a)redhat.com> afs: Fix vllist leak David Howells <dhowells(a)redhat.com> afs: Fix missing NULL pointer check in afs_break_some_callbacks() David Howells <dhowells(a)redhat.com> afs: Fix callback service message parsers to pass through -EAGAIN David Howells <dhowells(a)redhat.com> afs: Fix reinitialisation of the inode, in particular ->lock_work David Howells <dhowells(a)redhat.com> afs: Fix misplaced inc of net->cells_outstanding David Howells <dhowells(a)redhat.com> afs: Fix bulk lookup malfunction due to change in dir_emit() API Li RongQing <lirongqing(a)baidu.com> afs: Remove erroneous seq |= 1 in volume lookup loop Zilin Guan <zilin(a)seu.edu.cn> afs: use kvfree() to free memory allocated by kvcalloc() David Howells <dhowells(a)redhat.com> afs: Fix double netfs initialisation in afs_root_iget() Dan Carpenter <error27(a)gmail.com> afs: Fix error code in afs_extract_vl_addrs() Christian Brauner <brauner(a)kernel.org> fs: refuse O_TMPFILE creation with an unmapped fsuid or fsgid Samuel Moelius <sam.moelius(a)trailofbits.com> net/sched: hhf: clear heavy-hitter state on reset Samuel Moelius <sam.moelius(a)trailofbits.com> net/sched: dualpi2: clear stale classification on filter miss Viacheslav Bocharov <v(a)baodeep.com> pinctrl: meson: restore non-sleeping GPIO access Vladimir Zapolskiy <vz(a)kernel.org> gpio: timberdale: Return -ENOMEM on dynamic memory allocation in probe Gil Portnoy <dddhkts1(a)gmail.com> ksmbd: fix use-after-free of fp->owner.name in durable handle owner check Haofeng Li <lihaofeng(a)kylinos.cn> ksmbd: reject undersized DACLs before parsing ACEs Sechang Lim <rhkrqnwk98(a)gmail.com> net/sched: act_bpf: use rcu_dereference_bh() to read the filter Jakub Kicinski <kuba(a)kernel.org> selftests: drv-net: tso: don't touch dangerous feature bits Gleb Markov <markov.gi(a)npc-ksb.ru> cxgb4: Fix decode strings dump for T6 adapters Longjun Tang <tanglongjun(a)kylinos.cn> virtio_net: disable cb when NAPI is busy-polled Xin Long <lucien.xin(a)gmail.com> sctp: fix addr_wq_timer race in sctp_free_addr_wq() Qingshuang Fu <fuqingshuang(a)kylinos.cn> irqchip/ts4800: Fix missing chained handler cleanup on remove Yuho Choi <dbgh9129(a)gmail.com> irqchip/gic-v3-its: Fix OF node reference leak Masami Hiramatsu (Google) <mhiramat(a)kernel.org> tracing/probes: Make the $ prefix mandatory for comm access Sechang Lim <rhkrqnwk98(a)gmail.com> tracing/fprobe: Fix NULL pointer dereference in fprobe_fgraph_entry() Martin Kaiser <martin(a)kaiser.cx> tracing: eprobe: read the complete FILTER_PTR_STRING pointer Masami Hiramatsu (Google) <mhiramat(a)kernel.org> tracing/events: Fix to check the simple_tsk_fn creation Masami Hiramatsu (Google) <mhiramat(a)kernel.org> tracing/probes: Remove WARN_ON_ONCE from parse_btf_arg Steven Rostedt <rostedt(a)goodmis.org> tracing/eprobes: Allow use of BTF names to dereference pointers Boris Brezillon <boris.brezillon(a)collabora.com> drm/panthor: Interrupt group start/resumption if group_bind_locked() fails Boris Brezillon <boris.brezillon(a)collabora.com> drm/panthor: Fix a leak when a group is evicted before the tiler OOM is serviced Boris Brezillon <boris.brezillon(a)collabora.com> drm/panthor: Don't overrule pending immediate ticks in sched_resume_tick() Boris Brezillon <boris.brezillon(a)collabora.com> drm/panthor: Fix potential invalid pointer deref in group_process_tiler_oom() Ido Schimmel <idosch(a)nvidia.com> bridge: stp: Fix a potential use-after-free when deleting a bridge Jamal Hadi Salim <jhs(a)mojatatu.com> net/sched: sch_teql: Introduce slaves_lock to avoid race condition and UAF Rosen Penev <rosenp(a)gmail.com> net: gianfar: dispose irq mappings on probe failure and device removal Jiawen Wu <jiawenwu(a)trustnetic.com> net: libwx: fix VMDQ mask for 1-queue mode Petr Wozniak <petr.wozniak(a)gmail.com> net: phy: sfp: free mii_bus in sfp_i2c_mdiobus_destroy Xiang Mei <xmei5(a)asu.edu> usbnet: gl620a: fix out-of-bounds read in genelink_rx_fixup() Pengfei Zhang <zhangfeionline(a)gmail.com> ipv6: fib6: fix NULL deref in fib6_walk_continue() on multi-batch dump Jakub Kicinski <kuba(a)kernel.org> eth: fbnic: don't cache shinfo across skb realloc Guenter Roeck <linux(a)roeck-us.net> hwmon: (aspeed-g6-pwm-tach) Guard fan RPM calculation against divide-by-zero Guenter Roeck <linux(a)roeck-us.net> hwmon: (pmbus) Fix passing events to regulator core Matti Vaittinen <mazziesaccount(a)gmail.com> hwmon: adm1275: Prevent reading uninitialized stack Luca Weiss <luca.weiss(a)fairphone.com> ASoC: codecs: lpass-va-macro: Fix LPASS Codec Version for SC7280 Srinivas Kandagatla <srinivas.kandagatla(a)oss.qualcomm.com> ASoC: codecs: lpass-va-macro: add SM6115 compatible Kyle Hendry <kylehendrydev(a)gmail.com> MIPS: mm: Add check for highmem before removing memory block Maciej W. Rozycki <macro(a)orcam.me.uk> MIPS: DEC: Ensure RTC platform device deregistration upon failure Xin Long <lucien.xin(a)gmail.com> sctp: add INIT verification after cookie unpacking Yousef Alhouseen <alhouseenyousef(a)gmail.com> sctp: fix SCTP_RESET_STREAMS stream list length limit Wei Fang <wei.fang(a)nxp.com> net: enetc: check the number of BDs needed for xdp_frame Matvey Kovalev <matvey.kovalev(a)ispras.ru> qede: fix out-of-bounds check for cqe->len_list[] Nuoqi Gui <gnq25(a)mails.tsinghua.edu.cn> seg6: validate SRH length before reading fixed fields Corey Leavitt <corey(a)leavitt.info> net: pse-pd: scope pse_control regulator handle to kref lifetime Pengpeng Hou <pengpeng(a)iscas.ac.cn> gpio: htc-egpio: use managed gpiochip registration Pengpeng Hou <pengpeng(a)iscas.ac.cn> gpio: mvebu: fail probe if gpiochip registration fails Samuel Holland <samuel.holland(a)sifive.com> riscv: Fix 32-bit call_on_irq_stack() frame pointer ABI Yicong Yang <yang.yicong(a)picoheart.com> ACPI: RIMT: Only defer the IOMMU configuration in init stage Pengpeng Hou <pengpeng(a)iscas.ac.cn> spi: sh-msiof: abort transfers when reset times out Martin Kaiser <martin(a)kaiser.cx> tracing: probes: fix typo in a log message Jiaming Zhang <r772577952(a)gmail.com> ALSA: FCP: Fix NULL pointer dereference in interface lookup Shuaisong Yang <yangshuaisong(a)h-partners.com> net: hns3: differentiate autoneg default values between copper and fiber Shuaisong Yang <yangshuaisong(a)h-partners.com> net: hns3: fix permanent link down deadlock after reset Shuaisong Yang <yangshuaisong(a)h-partners.com> net: hns3: refactor MAC autoneg and speed configuration Shuaisong Yang <yangshuaisong(a)h-partners.com> net: hns3: unify copper port ksettings configuration path Nirmoy Das <nirmoyd(a)nvidia.com> selftests: tls: size splice_short pipe by page size Rob Herring (Arm) <robh(a)kernel.org> dt-bindings: net: renesas,ether: Drop example "ethernet-phy-ieee802.3-c22" fallback Eric Dumazet <edumazet(a)google.com> net: udp_tunnel: prevent double queueing in udp_tunnel_nic_device_sync Shengjiu Wang <shengjiu.wang(a)nxp.com> ASoC: fsl_asrc_dma: fix eDMA maxburst misalignment with channel count Tiezhu Yang <yangtiezhu(a)loongson.cn> LoongArch: BPF: Fix off-by-one error in tail call Tiezhu Yang <yangtiezhu(a)loongson.cn> LoongArch: BPF: Fix outdated tail call comments 谢致邦 (XIE Zhibang) <Yeking(a)Red54.com> LoongArch: Move struct kimage forward declaration before use Shitalkumar Gandhi <shital.gandhi45(a)gmail.com> net: ethernet: sunplus: spl2sw: fix phy_node refcount leak in remove Ruoyu Wang <ruoyuw560(a)gmail.com> net: sungem: fix probe error cleanup Yun Zhou <yun.zhou(a)windriver.com> net: mvneta: re-enable percpu interrupt on resume Subbaraya Sundeep <sbhatta(a)marvell.com> octeontx2-af: Validate NIX maximum LFs correctly Jan Klos <honza.klos(a)gmail.com> net: phy: realtek: Clear MDIO_AN_10GBT_CTRL_ADV10G bit David Yang <mmyangfl(a)gmail.com> net: dsa: realtek: fix memory leak in rtl8366rb_setup_led() Haoxiang Li <haoxiang_li2024(a)163.com> rtc: cmos: unregister HPET IRQ handler on probe failure Fredrik M Olsson <fredrik.m.olsson(a)axis.com> rtc: ds1307: Fix off-by-one issue with wday for rx8130 Huiwen He <hehuiwen(a)kylinos.cn> smb/client: preserve errors from smb2_set_sparse() Li RongQing <lirongqing(a)baidu.com> ACPI: processor_idle: Mark LPI enter functions as __cpuidle Rafael J. Wysocki <rafael.j.wysocki(a)intel.com> thermal: testing: zone: Flush work items during cleanup Jakub Kicinski <kuba(a)kernel.org> eth: fbnic: fix ordering of heartbeat vs ownership Fernando Fernandez Mancera <fmancera(a)suse.de> ipv6: fix missing notification for ignore_routes_with_linkdown Fernando Fernandez Mancera <fmancera(a)suse.de> ipv6: fix state corruption during proxy_ndp sysctl restart Fernando Fernandez Mancera <fmancera(a)suse.de> ipv6: fix error handling in disable_policy sysctl Fernando Fernandez Mancera <fmancera(a)suse.de> ipv6: fix error handling in forwarding sysctl Fernando Fernandez Mancera <fmancera(a)suse.de> ipv6: fix error handling in ignore_routes_with_linkdown sysctl Fernando Fernandez Mancera <fmancera(a)suse.de> ipv6: fix error handling in disable_ipv6 sysctl Jamal Hadi Salim <jhs(a)mojatatu.com> net/sched: cls_api: Handle TC_ACT_CONSUMED in tcf_qevent_handle Nicolai Buchwitz <nb(a)tipi-net.de> net: usb: lan78xx: restore VLAN and hash filters after link up Eric Dumazet <edumazet(a)google.com> veth: fix NAPI leak in XDP enable error path Aleksandrova Alyona <aga(a)itb.spb.ru> net: dsa: sja1105: round up PTP perout pin duration Eric Dumazet <edumazet(a)google.com> net: do not acquire dev->tx_global_lock in netdev_watchdog_up() Xiang Mei <xmei5(a)asu.edu> net, bpf: check master for NULL in xdp_master_redirect() Krzysztof Wilczyński <kwilczynski(a)kernel.org> alpha/PCI: Fix __pci_mmap_fits() overflow for zero-length BARs Krzysztof Wilczyński <kwilczynski(a)kernel.org> alpha/PCI: Add security_locked_down() check to pci_mmap_resource() Koichiro Den <den(a)valinux.co.jp> NTB: epf: Fix doorbell bitmask and IRQ vector handling Koichiro Den <den(a)valinux.co.jp> NTB: epf: Report 0-based doorbell vector via ntb_db_event() Koichiro Den <den(a)valinux.co.jp> NTB: epf: Make db_valid_mask cover only real doorbell bits Qingshuang Fu <fuqingshuang(a)kylinos.cn> gpio: davinci: fix IRQ domain leak on devm_kzalloc failure Florian Westphal <fw(a)strlen.de> netfilter: nft_compat: ebtables emulation must reject non-bridge targets Runyu Xiao <runyu.xiao(a)seu.edu.cn> netfilter: nft_synproxy: stop bypassing the priv->info snapshot Fernando Fernandez Mancera <fmancera(a)suse.de> netfilter: nf_conncount: prevent connlimit drops for early confirmed ct Mathias Krause <minipli(a)grsecurity.net> netfilter: nf_nat: avoid invalid nat_net pointer use on failed nf_nat_init() Bradley Morgan <include(a)grrlz.net> bpf: Disable xfrm_decode_session hook attachment Chen Cheng <chencheng(a)fnnas.com> md/raid5: avoid R5_Overlap races while breaking stripe batches Chen Cheng <chencheng(a)fnnas.com> md/raid5: use stripe state snapshot in break_stripe_batch_list() Kuniyuki Iwashima <kuniyu(a)google.com> ipv4: fib: Don't ignore error route in local/main tables. Jakub Kicinski <kuba(a)kernel.org> eth: bnxt: improve the timing of stats Jakub Kicinski <kuba(a)kernel.org> eth: bnxt: rename ring_err_stats -> ring_drv_stats Jakub Kicinski <kuba(a)kernel.org> eth: bnxt: gather and report HW-GRO stats Xiang Mei <xmei5(a)asu.edu> ipv6: Fix null-ptr-deref in fib6_nh_mtu_change(). Gil Portnoy <dddhkts1(a)gmail.com> ksmbd: fix use-after-free of conn->preauth_info in concurrent SMB2 NEGOTIATE Stepan Ionichev <sozdayvek(a)gmail.com> rtc: msc313: fix NULL deref in shared IRQ handler at probe Mohamed Khalfella <mkhalfella(a)purestorage.com> i40e: Fix i40e_debug() to use struct i40e_hw argument ZhaoJinming <zhaojinming(a)uniontech.com> ice: dpll: fix memory leak in ice_dpll_init_info error paths ZhaoJinming <zhaojinming(a)uniontech.com> ice: dpll: set pointers to NULL after kfree in ice_dpll_deinit_info John Madieu <john.madieu.xa(a)bp.renesas.com> rtc: isl1208: Balance enable_irq_wake() with disable_irq_wake() on cleanup Marcin Szycik <marcin.szycik(a)intel.com> ice: call netif_keep_dst() once when entering switchdev mode Lukasz Czapnik <lukasz.czapnik(a)intel.com> ice: fix AQ error code comparison in ice_set_pauseparam() Dawid Osuchowski <dawid.osuchowski(a)linux.intel.com> ice: fix FDIR CTRL VSI resource leak in ice_reset_all_vfs() Manivannan Sadhasivam <manivannan.sadhasivam(a)oss.qualcomm.com> PCI: endpoint: pci-epf-ntb: Add check to detect 'db_count' value of 0 Manivannan Sadhasivam <manivannan.sadhasivam(a)oss.qualcomm.com> PCI: endpoint: pci-epf-vntb: Add check to detect 'db_count' value of 0 Xiang Mei <xmei5(a)asu.edu> drm/edid: fix OOB read in drm_parse_tiled_block() Ruoyu Wang <ruoyuw560(a)gmail.com> gpiolib: initialize return value in gpiochip_set_multiple() Bartosz Golaszewski <bartosz.golaszewski(a)oss.qualcomm.com> power: sequencing: fix ABBA deadlock in pwrseq_device_unregister() Amery Hung <ameryhung(a)gmail.com> bpf: Fix effective prog array index with BPF_F_PREORDER Avinash Duduskar <avinash.duduskar(a)gmail.com> bpf: zero-initialize the fib lookup flow struct Yichong Chen <chenyichong(a)uniontech.com> bpftool: Fix vmlinux BTF leak in cgroup commands Nuoqi Gui <gnq25(a)mails.tsinghua.edu.cn> bpf: Fix stack slot index in nospec checks Ronan Dalton <ronan.dalton(a)alliedtelesis.co.nz> rtc: ds1307: handle oscillator stop flag for ds1337/ds1339/ds3231 Antoni Pokusinski <apokusinski01(a)gmail.com> rtc: abx80x: fix the RTC_VL_CLR clearing all status flags Ioana Ciornei <ioana.ciornei(a)nxp.com> dpaa2-switch: do not accept VLAN uppers while bridged Jiayuan Chen <jiayuan.chen(a)linux.dev> ipv6: ioam: fix type confusion of dst_entry Weiming Shi <bestswngs(a)gmail.com> ipv6: ndisc: fix NULL deref in accept_untracked_na() Wayen Yan <win847(a)gmail.com> net: airoha: Fix skb->priority underflow in airoha_dev_select_queue() Michael Bommarito <michael.bommarito(a)gmail.com> net/sched: act_ct: fix nf_connlabels leak on two error paths Rosen Penev <rosenp(a)gmail.com> net: emac: Fix NULL pointer dereference in emac_probe Geetha sowjanya <gakula(a)marvell.com> octeontx2-pf: mcs: Fix mcs resources free on PF shutdown Subbaraya Sundeep <sbhatta(a)marvell.com> octeontx2-pf: Clear stats of all resources when freeing resources Geetha sowjanya <gakula(a)marvell.com> octeontx2-af: mcs: Fix unsupported secy stats read Wayen Yan <win847(a)gmail.com> net: ethernet: mtk_ppe: Fix rhashtable leak in mtk_ppe_init error paths Weiming Shi <bestswngs(a)gmail.com> tipc: fix use-after-free of the discoverer in tipc_disc_rcv() Ruoyu Wang <ruoyuw560(a)gmail.com> net: marvell: prestera: initialize err in prestera_port_sfp_bind Aboorva Devarajan <aboorvad(a)linux.ibm.com> selftests/mm: fix exclusive_cow test fork() handling Sayali Patil <sayalip(a)linux.ibm.com> selftests/mm: allow PUD-level entries in compound testcase of hmm tests Sayali Patil <sayalip(a)linux.ibm.com> selftests/mm: clarify alternate unmapping in compaction_test Sayali Patil <sayalip(a)linux.ibm.com> selftests/mm: skip uffd-stress test when nr_pages_per_cpu is zero Sayali Patil <sayalip(a)linux.ibm.com> selftests/mm: ensure destination is hugetlb-backed in hugetlb-mremap Sayali Patil <sayalip(a)linux.ibm.com> selftest/mm: register existing mapping with userfaultfd in hugetlb-mremap Sayali Patil <sayalip(a)linux.ibm.com> selftests/mm: free dynamically allocated PMD-sized buffers in split_huge_page_test Sayali Patil <sayalip(a)linux.ibm.com> selftests/mm: size tmpfs according to PMD page size in split_huge_page_test Sayali Patil <sayalip(a)linux.ibm.com> selftests/mm: fix cgroup task placement and drop memory.current checks in hugetlb_reparenting_test.sh Sayali Patil <sayalip(a)linux.ibm.com> selftests/mm: fix hugetlb pathname construction in hugetlb_reparenting_test.sh Sayali Patil <sayalip(a)linux.ibm.com> selftests/mm: restore default nr_hugepages value via exit trap in hugetlb_reparenting_test.sh Sayali Patil <sayalip(a)linux.ibm.com> selftests/mm: restore default nr_hugepages value via exit trap in charge_reserved_hugetlb.sh Hao Ge <hao.ge(a)linux.dev> alloc_tag: fix use-after-free in /proc/allocinfo after module unload Bhargav Joshi <j.bhargav.u(a)gmail.com> irqchip/crossbar: Fix parent domain resource leak Sebastian Andrzej Siewior <bigeasy(a)linutronix.de> mailbox: imx: Forward the timeout/ error in imx_mu_generic_tx() Florian Westphal <fw(a)strlen.de> netfilter: nft_meta_bridge: fix NFT_META_BRI_IIFPVID stack leak Florian Westphal <fw(a)strlen.de> netfilter: nf_reject: skip iphdr options when looking for icmp header Florian Westphal <fw(a)strlen.de> netfilter: nft_flow_offload: zero device address for non-ether case Pablo Neira Ayuso <pablo(a)netfilter.org> netfilter: flowtable: move path discovery infrastructure to its own file Florian Westphal <fw(a)strlen.de> netfilter: nft_meta_bridge: add validate callback for get operations Florian Westphal <fw(a)strlen.de> netfilter: nft_payload: reject offsets exceeding 65535 bytes Jozsef Kadlecsik <kadlec(a)netfilter.org> netfilter: ipset: make sure gc is properly stopped Jozsef Kadlecsik <kadlec(a)netfilter.org> netfilter: ipset: fix order of kfree_rcu() and rcu_assign_pointer() Jozsef Kadlecsik <kadlec(a)netfilter.org> netfilter: ipset: Don't use test_bit() in lockless RCU readers in hash types Jozsef Kadlecsik <kadlec(a)netfilter.org> netfilter: ipset: annotate "pos" for concurrent readers/writers Jozsef Kadlecsik <kadlec(a)netfilter.org> netfilter: ipset: Fix data race between add and dump in all hash types Abd-Alrhman Masalkhi <abd.masalkhi(a)gmail.com> md/raid1: free r1_bio when REQ_NOWAIT is set and read would block on retry Abd-Alrhman Masalkhi <abd.masalkhi(a)gmail.com> md/raid1: honor REQ_NOWAIT when waiting for behind writes Yu Kuai <yukuai(a)fnnas.com> md: merge mddev serialize_policy into mddev_flags Yu Kuai <yukuai(a)fnnas.com> md: merge mddev faillast_dev into mddev_flags Yu Kuai <yukuai(a)fnnas.com> md: merge mddev has_superblock into mddev_flags Robertus Diawan Chris <robertusdchris(a)gmail.com> mac802154: Prevent overwrite return code in mac802154_perform_association() Aleksandr Nogikh <nogikh(a)google.com> ieee802154: fix kernel-infoleak in dgram_recvmsg() Ivan Abramov <i.abramov(a)mt-integration.ru> ieee802154: Remove WARN_ON() in cfg802154_pernet_exit() Ivan Abramov <i.abramov(a)mt-integration.ru> ieee802154: Avoid calling WARN_ON() on -ENOMEM in cfg802154_switch_netns() Ivan Abramov <i.abramov(a)mt-integration.ru> ieee802154: Restore initial state on failed device_rename() in cfg802154_switch_netns() Xu Rao <raoxu(a)uniontech.com> ACPI: IPMI: Fix inverted interface check in ipmi_bmc_gone() Andy Shevchenko <andriy.shevchenko(a)linux.intel.com> ACPI: resource: Amend kernel-doc style Ricardo Neri <ricardo.neri-calderon(a)linux.intel.com> thermal: intel: Fix dangling resources on thermal_throttle_online() failure Breno Leitao <leitao(a)debian.org> arm64/hw_breakpoint: reject unaligned watchpoints that would truncate BAS Cen Zhang <zzzccc427(a)gmail.com> ALSA: usb-audio: Kill MIDI 2.0 URBs before freeing endpoints Ido Schimmel <idosch(a)nvidia.com> selftests: vlan_bridge_binding: Fix flaky operational state check Yun Zhou <yun.zhou(a)windriver.com> flow_dissector: check device type before reading ETH_ADDRS Lukasz Raczylo <lukasz(a)raczylo.com> net: macb: add TX stall timeout callback to recover from lost TSTART write Wayen Yan <win847(a)gmail.com> net: airoha: fix foe_check_time allocation size Cosmin Ratiu <cratiu(a)nvidia.com> devlink: Fix parent ref leak on tc-bw failure Cosmin Ratiu <cratiu(a)nvidia.com> devlink: Fix parent ref leak in devl_rate_node_create() Ioana Ciornei <ioana.ciornei(a)nxp.com> dpaa2-switch: fix VLAN upper check not rejecting bridge join Xiang Mei <xmei5(a)asu.edu> virtio-net: fix len check in receive_big() Quang Nguyen <quang.nguyen.wx(a)renesas.com> spi: rpc-if: Use correct device for hardware reinitialization on resume Mark Tomlinson <mark.tomlinson(a)alliedtelesis.co.nz> PCI: iproc: Restore .map_irq() for the platform bus driver Michael Bommarito <michael.bommarito(a)gmail.com> ALSA: usb-audio: qcom: clear opened when stream enable fails Michael Bommarito <michael.bommarito(a)gmail.com> ALSA: usb-audio: qcom: reject stream disable with no active interface Xin Long <lucien.xin(a)gmail.com> sctp: hold socket lock when dumping endpoints in sctp_diag Jakub Kicinski <kuba(a)kernel.org> net: psample: fix info leak in PSAMPLE_ATTR_DATA Ratheesh Kannoth <rkannoth(a)marvell.com> octeontx2-pf: Fix leak of SQ timestamp buffer on teardown Thadeu Lima de Souza Cascardo <cascardo(a)igalia.com> drm/amdgpu: initialize irq.lock spinlock earlier Mario Limonciello <mario.limonciello(a)amd.com> drm/amdkfd: fix list_del corruption in kfd_criu_resume_svm Matthew Schwartz <matthew.schwartz(a)linux.dev> drm/amd/display: Fix mem_type change detection for async flips Yunxiang Li <Yunxiang.Li(a)amd.com> drm/amdkfd: Avoid double-unpin of DOORBELL/MMIO BOs on free Sen Wang <sen(a)ti.com> ASoC: tlv320aic3x: restrict CLKDIV bypass Q values in dual-rate mode Arnaldo Carvalho de Melo <acme(a)redhat.com> perf dso: Set standard errno on decompression failure Arnaldo Carvalho de Melo <acme(a)redhat.com> perf bpf: Validate array presence before casting BPF prog info pointers Arnaldo Carvalho de Melo <acme(a)redhat.com> perf cs-etm: Bounds-check CPU in cs_etm__get_queue() Arnaldo Carvalho de Melo <acme(a)redhat.com> perf cs-etm: Require full global header in auxtrace_info size check Arnaldo Carvalho de Melo <acme(a)redhat.com> perf cs-etm: Validate num_cpu before metadata allocation Arnaldo Carvalho de Melo <acme(a)redhat.com> perf machine: Use snprintf() for guestmount path construction Eric Dumazet <edumazet(a)google.com> xfrm: validate selector family and prefixlen during match Eric Dumazet <edumazet(a)google.com> xfrm: annotate data-races around xfrm_policy_count[] and xfrm_policy_default[] Herbert Xu <herbert(a)gondor.apana.org.au> xfrm: Fix xfrm state cache insertion race Xu Rao <raoxu(a)uniontech.com> ALSA: usb-audio: qcom: Free sideband sg_table objects Adrian Hunter <adrian.hunter(a)intel.com> i3c: master: Add missing runtime PM get in dev_nack_retry_count_store() Adrian Hunter <adrian.hunter(a)intel.com> i3c: master: Update dev_nack_retry_count under maintenance lock Jisheng Zhang <jszhang(a)kernel.org> spi: dw: fix wrong BAUDR setting after resume Thomas Hellström <thomas.hellstrom(a)linux.intel.com> drm/xe: Fix wa_oob codegen recipe for external module builds Guangshuo Li <lgs201920130244(a)gmail.com> drm/i915: clear CRTC color blob pointers after dropping refs Pengpeng Hou <pengpeng(a)iscas.ac.cn> gpio: mlxbf3: fail probe if gpiochip registration fails Arnaldo Carvalho de Melo <acme(a)redhat.com> perf cs-etm: Reject CPU IDs that would overflow signed comparison Leo Yan <leo.yan(a)arm.com> perf: Remove redundant kernel.h include Arnaldo Carvalho de Melo <acme(a)redhat.com> perf bpf: Bounds-check array offsets in bpil_offs_to_addr() Arnaldo Carvalho de Melo <acme(a)redhat.com> perf bpf: Reject oversized BPF metadata events that truncate header.size Arnaldo Carvalho de Melo <acme(a)redhat.com> perf bpf: Validate func_info_rec_size and sub_id in synthesize_bpf_prog_name() Arnaldo Carvalho de Melo <acme(a)redhat.com> perf sched: Replace (void*)1 sentinel with proper runtime allocation Arnaldo Carvalho de Melo <acme(a)redhat.com> perf hwmon: Fix fd check to accept fd 0 in hwmon_pmu__describe_items() Arnaldo Carvalho de Melo <acme(a)redhat.com> perf tools: Use snprintf() for root_dir path construction Arnaldo Carvalho de Melo <acme(a)redhat.com> perf dso: Set error code when open() fails on uncompressed fallback path Arnaldo Carvalho de Melo <acme(a)redhat.com> perf dso: Fix heap overflow in dso__get_filename() on decompressed path Arnaldo Carvalho de Melo <acme(a)redhat.com> perf tools: Fix uninitialized pathname on uncompressed fallback in filename__decompress() Arnaldo Carvalho de Melo <acme(a)redhat.com> perf tools: Add O_CLOEXEC to open() calls in DSO and ELF code James Clark <james.clark(a)linaro.org> perf tools: Don't read build-ids from non-regular files Arnaldo Carvalho de Melo <acme(a)redhat.com> perf symbols: Break infinite loop on zero-filled notes in sysfs__read_build_id() Arnaldo Carvalho de Melo <acme(a)redhat.com> perf symbols: Validate p_filesz before use in filename__read_build_id() Arnaldo Carvalho de Melo <acme(a)redhat.com> perf symbols: Fix bswap copy-paste error for 32-bit ELF p_filesz Ian Rogers <irogers(a)google.com> perf maps: Add maps__mutate_mapping Pengpeng Hou <pengpeng(a)iscas.ac.cn> sparc: led: avoid trimming a newline from empty writes Karol Wachowski <karol.wachowski(a)linux.intel.com> accel/ivpu: fix HWS command queue leak on registration failure John Johansen <john.johansen(a)canonical.com> apparmor: fix label can not be immediately before a declaration Adrian Hunter <adrian.hunter(a)intel.com> i3c: master: Prevent reuse of dynamic address on device add failure Adrian Hunter <adrian.hunter(a)intel.com> i3c: master: Defer new-device registration out of DAA caller context Adrian Hunter <adrian.hunter(a)intel.com> i3c: master: Ensure Hot-Join operations are stopped on shutdown Adrian Hunter <adrian.hunter(a)intel.com> i3c: master: Consolidate Hot-Join DAA work in the core Jorge Marques <jorge.marques(a)analog.com> i3c: master: Move rstdaa error suppression Adrian Hunter <adrian.hunter(a)intel.com> i3c: master: Add i3c_master_do_daa_ext() for post-hibernation address recovery Adrian Hunter <adrian.hunter(a)intel.com> i3c: master: Introduce optional Runtime PM support Adrian Hunter <adrian.hunter(a)intel.com> i3c: master: Replace WARN_ON() with dev_err() in i3c_dev_free_ibi_locked() Adrian Ng Ho Yin <adrianhoyin.ng(a)altera.com> i3c: add sysfs entry and attribute for Device NACK Retry count Adrian Hunter <adrian.hunter(a)intel.com> i3c: master: Make hot-join workqueue freezable to block hot-join during suspend Marco Crivellari <marco.crivellari(a)suse.com> i3c: master: add WQ_PERCPU to alloc_workqueue users Adrian Hunter <adrian.hunter(a)intel.com> i3c: mipi-i3c-hci: Preserve RUN bit when aborting DMA ring Adrian Hunter <adrian.hunter(a)intel.com> i3c: mipi-i3c-hci: Switch PIO data allocation to devm_kzalloc() Adrian Hunter <adrian.hunter(a)intel.com> i3c: mipi-i3c-hci: Allow for Multi-Bus Instances Adrian Hunter <adrian.hunter(a)intel.com> i3c: mipi-i3c-hci: Quieten initialization messages Maciek Borzecki <maciek.borzecki(a)gmail.com> apparmor: fix uninitialised pointer passed to audit_log_untrustedstring() Georgia Garcia <georgia.garcia(a)canonical.com> apparmor: don't audit files pointing to aa_null.dentry Zygmunt Krynicki <me(a)zygoon.pl> apparmor: put secmark label after secid lookup Zygmunt Krynicki <me(a)zygoon.pl> apparmor: aa_getprocattr free procattr leak on format failure Zygmunt Krynicki <me(a)zygoon.pl> apparmor: fail policy unpack on accept2 allocation failure Hongling Zeng <zenghongling(a)kylinos.cn> apparmor: Fix return in ns_mkdir_op Georgia Garcia <georgia.garcia(a)canonical.com> apparmor: remove or add symlinks to rawdata according to export_binary Georgia Garcia <georgia.garcia(a)canonical.com> apparmor: fix NULL pointer dereference in unpack_pdb Maxime Bélair <maxime.belair(a)canonical.com> apparmor: fix potential UAF in aa_replace_profiles Ryan Lee <ryan.lee(a)canonical.com> apparmor: grab ns lock and refresh when looking up changehat child profiles John Johansen <john.johansen(a)canonical.com> apparmor: fix rawdata_f_data implicit flex array Zygmunt Krynicki <me(a)zygoon.pl> apparmor: aa_label_alloc use aa_label_free on alloc failure Ruoyu Wang <ruoyuw560(a)gmail.com> apparmor: check label build before no_new_privs test Andrew Morton <akpm(a)linux-foundation.org> security/apparmor/apparmorfs.c: conditionally compile get_loaddata_common_ref() John Johansen <john.johansen(a)canonical.com> apparmor: fix refcount leak when updating the sk_ctx John Johansen <john.johansen(a)canonical.com> apparmor: fix race in unix socket mediation when peer_path is used John Johansen <john.johansen(a)canonical.com> apparmor: fix shadowing of plabel that prevents cache from being updated Yuanhe Shu <xiangzao(a)linux.alibaba.com> Revert "PCI/MSI: Unmap MSI-X region on error" Shuvam Pandey <shuvampandey1(a)gmail.com> PCI: dwc: Avoid dwc_pcie_rasdes_debugfs_deinit() NULL dereference when no RAS DES capability Felix Gu <ustc.gu(a)gmail.com> phy: freescale: phy-fsl-imx8qm-lvds-phy: Fix missing pm_runtime_disable() on probe error path Manivannan Sadhasivam <manivannan.sadhasivam(a)oss.qualcomm.com> PCI: mediatek: Use actual physical address instead of virt_to_phys() Ryder Lee <ryder.lee(a)mediatek.com> PCI: mediatek: Fix possible truncation in mtk_pcie_parse_port() Konrad Dybcio <konrad.dybcio(a)oss.qualcomm.com> dt-bindings: phy: sc8280xp-qmp-pcie: Disallow bifurcation register on Purwa Arnaldo Carvalho de Melo <acme(a)redhat.com> perf symbols: Add bounds checks to read_build_id() note iteration in minimal build Arnaldo Carvalho de Melo <acme(a)redhat.com> perf symbols: Add bounds checks to elf_read_build_id() note iteration Arnaldo Carvalho de Melo <acme(a)redhat.com> perf bpf: Fix metadata leak in perf_env__add_bpf_info() on duplicate insert Arnaldo Carvalho de Melo <acme(a)redhat.com> perf bpf: Fix map data leak in bpf_metadata_create() on alloc failure Arnaldo Carvalho de Melo <acme(a)redhat.com> perf bpf: Add NULL check for btf__type_by_id() in synthesize_bpf_prog_name() Arnaldo Carvalho de Melo <acme(a)redhat.com> tools lib api: Fix mount_overload() snprintf truncation and toupper range Arnaldo Carvalho de Melo <acme(a)redhat.com> tools lib api: Fix filename__write_int() writing uninitialized stack data Arnaldo Carvalho de Melo <acme(a)redhat.com> perf tools: Use snprintf() in dso__read_running_kernel_build_id() Arnaldo Carvalho de Melo <acme(a)redhat.com> perf hwmon: Guard label read against empty or failed reads Arnaldo Carvalho de Melo <acme(a)redhat.com> perf symbols: Bounds-check descsz in sysfs__read_build_id() GNU fallback Arnaldo Carvalho de Melo <acme(a)redhat.com> perf hwmon: Fix parse_hwmon_filename() strlcpy buffer overflow Arnaldo Carvalho de Melo <acme(a)redhat.com> perf hwmon: Use scnprintf() in hwmon_pmu__for_each_event() Arnaldo Carvalho de Melo <acme(a)redhat.com> perf hwmon: Fix off-by-one null termination on sysfs reads Arnaldo Carvalho de Melo <acme(a)redhat.com> perf tools: Fix thread__set_comm_from_proc() on empty comm file Arnaldo Carvalho de Melo <acme(a)redhat.com> perf intel-pt: Fix snprintf size tracking bug in insn decoder Arnaldo Carvalho de Melo <acme(a)redhat.com> perf symbols: Bounds-check .gnu_debuglink section data Arnaldo Carvalho de Melo <acme(a)redhat.com> perf symbols: Fix signed overflow in sysfs__read_build_id() size check Arnaldo Carvalho de Melo <acme(a)redhat.com> tools lib api: Fix missing null termination in filename__read_int/ull() Arnaldo Carvalho de Melo <acme(a)redhat.com> perf pmu: Fix perf_pmu__parse_scale/unit() OOB access on empty sysfs file Arnaldo Carvalho de Melo <acme(a)redhat.com> perf pmu: Fix pmu_id() heap underwrite on empty identifier file James Clark <james.clark(a)linaro.org> perf cs-etm: Queue context packets for frontend Jens Remus <jremus(a)linux.ibm.com> perf s390: Fix TEXTREL in Python extension by compiling as PIC Chuck Lever <chuck.lever(a)oracle.com> xprtrdma: Return sendctx slot after Send preparation failure Chuck Lever <chuck.lever(a)oracle.com> xprtrdma: Repost Receive buffers for malformed replies Chuck Lever <chuck.lever(a)oracle.com> xprtrdma: Sanitize the reply credit grant after parsing Chris Mason <clm(a)meta.com> xprtrdma: Fix bcall rep leak and unbounded peek Chuck Lever <chuck.lever(a)oracle.com> xprtrdma: Resize reply buffers before reposting receives Chuck Lever <chuck.lever(a)oracle.com> xprtrdma: Document and assert reply-handler invariants Chuck Lever <chuck.lever(a)oracle.com> xprtrdma: Check frwr_wp_create() during connect Chris Mason <clm(a)meta.com> xprtrdma: Initialize re_id before removal registration Chris Mason <clm(a)meta.com> xprtrdma: Fix ep kref imbalance on ADDR_CHANGE Arnaldo Carvalho de Melo <acme(a)redhat.com> perf hists: Fix snprintf() in hists__scnprintf_title() UID filter path Arnaldo Carvalho de Melo <acme(a)redhat.com> perf bpf: Use scnprintf() in snprintf_hex() and synthesize_bpf_prog_name() Arnaldo Carvalho de Melo <acme(a)redhat.com> perf sched: Fix idle-hist callchain display using wrong rb_first variant Arnaldo Carvalho de Melo <acme(a)redhat.com> perf sched: Bounds-check prio before test_bit() in timehist Lad Prabhakar <prabhakar.mahadev-lad.rj(a)bp.renesas.com> PCI: rcar-host: Remove unused LIST_HEAD(res) Arnaldo Carvalho de Melo <acme(a)redhat.com> perf tools: Use perf_env__get_cpu_topology() in machine__resolve() Arnaldo Carvalho de Melo <acme(a)redhat.com> perf tools: Use scnprintf() in cpu_map__snprint() to prevent overflow Arnaldo Carvalho de Melo <acme(a)redhat.com> perf tools: Fix get_max_num() size_t underflow on empty sysfs file David E. Box <david.e.box(a)linux.intel.com> platform/x86/intel/vsec: Restore BAR fallback for header walk David E. Box <david.e.box(a)linux.intel.com> platform/x86/intel/vsec: Return real error codes from registration path David E. Box <david.e.box(a)linux.intel.com> platform/x86/intel/vsec: Switch exported helpers from pci_dev to device David E. Box <david.e.box(a)linux.intel.com> platform/x86/intel/vsec: Decouple add/link helpers from PCI Randy Dunlap <rdunlap(a)infradead.org> platform/x86/intel/vsec: correct kernel-doc comments Xi Pardee <xi.pardee(a)linux.intel.com> platform/x86:intel/pmc: Relocate lpm_req_guid to pmc_reg_map Xi Pardee <xi.pardee(a)linux.intel.com> platform/x86:intel/pmc: Rename PMC index variable to pmc_idx Xi Pardee <xi.pardee(a)linux.intel.com> platform/x86:intel/pmc: Add support for multiple DMU GUIDs Jamie Nguyen <jamien(a)nvidia.com> fs/ntfs3: resize log->one_page_buf when adopting on-disk page size Shuvam Pandey <shuvampandey1(a)gmail.com> PCI: meson: Add missing remove callback Shuvam Pandey <shuvampandey1(a)gmail.com> PCI: meson: Propagate devm_add_action_or_reset() failure Biju Das <biju.das.jz(a)bp.renesas.com> pwm: rzg2l-gpt: Add missing newlines to dev_err_probe() messages Li RongQing <lirongqing(a)baidu.com> PCI: mediatek: Fix operator precedence in PCIE_FTS_NUM_L0 macro Yang Erkun <yangerkun(a)huawei.com> nfs: use nfsi->rwsem to protect traversal of the file lock list Mike Snitzer <snitzer(a)kernel.org> NFSv4/flexfiles: honor FF_FLAGS_NO_IO_THRU_MDS in pg_get_mirror_count_write Mike Snitzer <snitzer(a)kernel.org> NFSv4/flexfiles: honor FF_FLAGS_NO_IO_THRU_MDS on fatal DS connect errors Clark Wang <xiaoning.wang(a)nxp.com> nfs: keep PG_UPTODATE clear after read errors in page groups Dai Ngo <dai.ngo(a)oracle.com> NFSv4/pnfs: defer return_range callbacks until after inode unlock Chuck Lever <chuck.lever(a)oracle.com> xprtrdma: Decouple req recycling from RPC completion Chuck Lever <chuck.lever(a)oracle.com> xprtrdma: Use sendctx DMA state for Send signaling Chuck Lever <chuck.lever(a)oracle.com> xprtrdma: Post receive buffers after RPC completion Chuck Lever <chuck.lever(a)oracle.com> xprtrdma: Close lost-wakeup race in xprt_rdma_alloc_slot Chuck Lever <chuck.lever(a)oracle.com> xprtrdma: Avoid 250 ms delay on backlog wakeup Sagi Grimberg <sagi(a)grimberg.me> pNFS/filelayout: fix cheking if a layout is striped Hongling Zeng <zenghongling(a)kylinos.cn> sunrpc: Fix error handling in rpc_sysfs_xprt_switch_add_xprt_store() Phillip Varney <pbvarney(a)protonmail.com> clk: qcom: a53: Corrected frequency multiplier for 1152MHz Nuno Sá <nuno.sa(a)analog.com> dmaengine: dma-axi-dmac: use DMA pool to manange DMA descriptor Nuno Sá <nuno.sa(a)analog.com> dmaengine: dma-axi-dmac: Properly free struct axi_dmac_desc Nuno Sá <nuno.sa(a)analog.com> dmaengine: Fix possible use after free Icenowy Zheng <zhengxingda(a)iscas.ac.cn> dmaengine: qcom: gpi: set DMA_PRIVATE capability Junrui Luo <moonafterrain(a)outlook.com> mshv: add bounds check on vp_index in mshv_intercept_isr() Jagadeesh Kona <jagadeesh.kona(a)oss.qualcomm.com> clk: qcom: camcc-x1e80100: Add support for camera QDSS debug clocks Jagadeesh Kona <jagadeesh.kona(a)oss.qualcomm.com> dt-bindings: clock: qcom: Add X1P42100 camera clock controller Arnaldo Carvalho de Melo <acme(a)redhat.com> perf tools: Fix int16_t truncation of max_cpu_num in set_max_cpu_num() Arnaldo Carvalho de Melo <acme(a)redhat.com> perf timechart: Fix cpu2y() OOB read on untrusted CPU index Arnaldo Carvalho de Melo <acme(a)redhat.com> perf c2c: Fix use-after-free in he__get_c2c_hists() error path Arnaldo Carvalho de Melo <acme(a)redhat.com> perf stat: Introduce perf_env__get_cpu_topology() to guard NULL env->cpu Arnaldo Carvalho de Melo <acme(a)redhat.com> perf mmap: Fix NULL deref in aio cleanup on alloc failure Arnaldo Carvalho de Melo <acme(a)redhat.com> perf sched: Replace BUG_ON and add NULL checks in replay event helpers Arnaldo Carvalho de Melo <acme(a)redhat.com> perf sched: Use thread__put() in free_idle_threads() Arnaldo Carvalho de Melo <acme(a)redhat.com> perf sched: Clean up idle_threads entry on init failure Arnaldo Carvalho de Melo <acme(a)redhat.com> perf c2c: Bounds-check CPU IDs in setup_nodes() topology loop Arnaldo Carvalho de Melo <acme(a)redhat.com> perf c2c: Bounds-check CPU and node IDs before bitmap and array access Arnaldo Carvalho de Melo <acme(a)redhat.com> perf stat: Bounds-check CPU index in topology aggregation callbacks Arnaldo Carvalho de Melo <acme(a)redhat.com> perf mmap: Guard cpu__get_node() return in aio_bind() Arnaldo Carvalho de Melo <acme(a)redhat.com> perf sched: Fix register_pid() overflow, strcpy, and BUG_ON Arnaldo Carvalho de Melo <acme(a)redhat.com> perf sched: Cap max_cpu at MAX_CPUS in timehist sample processing Arnaldo Carvalho de Melo <acme(a)redhat.com> perf tools: Add bounds check to cpu__get_node() Arnaldo Carvalho de Melo <acme(a)redhat.com> perf sched: Fix NULL dereference in latency_runtime_event Arnaldo Carvalho de Melo <acme(a)redhat.com> perf sched: Replace BUG_ON on invalid CPU with graceful skip Arnaldo Carvalho de Melo <acme(a)redhat.com> perf sched: Fix thread reference leak in latency_switch_event Arnaldo Carvalho de Melo <acme(a)redhat.com> perf tools: Guard test_bit from out-of-bounds sample CPU James Clark <james.clark(a)linaro.org> perf annotate: Fix crashes on empty annotate windows Rui Qi <qirui.001(a)bytedance.com> perf: Fix off-by-one stack buffer overflow in kallsyms__parse() Akhil R <akhilrajeev(a)nvidia.com> dt-bindings: dma: nvidia,tegra186-gpc-dma: Make reset optional Shengjiu Wang <shengjiu.wang(a)nxp.com> dmaengine: imx-sdma: Refine spba bus searching in probe Xu Rao <raoxu(a)uniontech.com> thunderbolt: debugfs: Fix margining error counter buffer leak Srinivasan Shanmugam <srinivasan.shanmugam(a)amd.com> drm/amd/display: Add missing kdoc for ALLM parameters Jamie Nguyen <jamien(a)nvidia.com> fs/ntfs3: fix mount failure on 64K page-size kernels Konstantin Komarov <almaz.alexandrovich(a)paragon-software.com> fs/ntfs3: add bounds check to run_get_highest_vcn() Rosen Penev <rosenp(a)gmail.com> HID: logitech-hidpp: remove excess kernel-doc member in hidpp_scroll_counter Yuho Choi <dbgh9129(a)gmail.com> clk: at91: keep securam node alive while mapping it Aldo Conte <aldocontelk(a)gmail.com> iio: tcs3472: power down chip on probe failure Sanjay Chitroda <sanjayembeddedse(a)gmail.com> iio: accel: mma8452: handle I2C read error(s) in mma8452_read() Guilherme Ivo Bozi <guilherme.bozi(a)usp.br> iio: adc: xilinx-ams: fix out-of-bounds channel lookup in event handling Joshua Crofts <joshua.crofts1(a)gmail.com> iio: magnetometer: ak8975: fix potential kernel stack memory leak Joshua Crofts <joshua.crofts1(a)gmail.com> iio: light: si1133: prevent race condition on timeout Joshua Crofts <joshua.crofts1(a)gmail.com> iio: light: si1133: reset counter to prevent race condition Arnaldo Carvalho de Melo <acme(a)redhat.com> perf header: Sanity check HEADER_EVENT_DESC attr.size before swap Shawn Guo <shengchao.guo(a)oss.qualcomm.com> PCI: qcom: Disable ASPM L0s for SA8775P Athira Rajeev <atrajeev(a)linux.ibm.com> powerpc tools perf: Initialize error code in auxtrace_record_init function Lad Prabhakar <prabhakar.mahadev-lad.rj(a)bp.renesas.com> clk: renesas: rzg2l: Rename iterator in for_each_mod_clock() to avoid shadowing Hongling Zeng <zenghongling(a)kylinos.cn> gpib: cb7210: Fix region leak when request_irq fails Adam Crosser <adam.crosser(a)praetorian.com> gpib: fix double decrement of descriptor_busy in command_ioctl() James Kim <james010kim(a)gmail.com> char: tlclk: fix use-after-free in tlclk_cleanup() Dave Penkler <dpenkler(a)gmail.com> gpib: Fix inappropriate ioctl error return Ravi Bangoria <ravi.bangoria(a)amd.com> perf test amd ibs: Fix incorrect kernel version check Seungjin Bae <eeodqql09(a)gmail.com> usb: host: max3421: Reject hub port requests for non-existent ports Seungjin Bae <eeodqql09(a)gmail.com> usb: host: max3421: Fix shift-out-of-bounds in max3421_hub_control() Guangshuo Li <lgs201920130244(a)gmail.com> staging: most: video: avoid double free on video register failure Ian Rogers <irogers(a)google.com> perf inject: Fix itrace branch stack synthesis Ian Rogers <irogers(a)google.com> perf event: Fix size of synthesized sample with branch stacks Namhyung Kim <namhyung(a)kernel.org> perf inject: Add --convert-callchain option Michael Petlan <mpetlan(a)redhat.com> perf build-id: Fix off-by-one bug when printing kernel/module build-id Dan Carpenter <error27(a)gmail.com> PCI: dwc: Fix signedness bug in fault injection test code Sergey Senozhatsky <senozhatsky(a)chromium.org> mailbox: mtk-adsp: fix UAF during device teardown Conor Dooley <conor.dooley(a)microchip.com> mailbox: mpfs: fix check for syscon presence in mpfs_mbox_inbox_isr() Jie Gan <jie.gan(a)oss.qualcomm.com> coresight: Fix source not disabled on idr_alloc_u32 failure Bard Liao <yung-chuan.liao(a)linux.intel.com> soundwire: intel_ace2x: release bpt_stream when close it Mihai Sain <mihai.sain(a)microchip.com> clk: at91: sam9x7: Fix gmac_gclk clock definition Leo Yan <leo.yan(a)arm.com> perf pmu: Skip test on Arm64 when #slots is zero Andy Shevchenko <andriy.shevchenko(a)linux.intel.com> phy: phy-can-transceiver: Check driver match and driver data against NULL Luo Jie <jie.luo(a)oss.qualcomm.com> clk: qcom: cmnpll: Account for reference clock divider Jie Gan <jie.gan(a)oss.qualcomm.com> coresight: fix missing error code when trace ID is invalid Sumit Kumar <sumit.kumar(a)oss.qualcomm.com> bus: mhi: ep: Fix potential deadlock in mhi_ep_reset_worker() Hsiu Che Yu <yu.whisper.personal(a)gmail.com> rust: alloc: fix assert in `Vec::reserve` doc test Rong Zhang <i(a)rong.moe> PCI: loongson: Do not ignore downstream devices on external bridges Ian Rogers <irogers(a)google.com> perf sched: Add missing mmap2 handler in timehist Rafael J. Wysocki <rafael.j.wysocki(a)intel.com> platform/x86: xo15-ebook: Fix wakeup source and GPE handling Rafael J. Wysocki <rafael.j.wysocki(a)intel.com> x86/platform/olpc: xo15: Drop wakeup source on driver removal Guixin Liu <kanie(a)linux.alibaba.com> PCI: Check ROM header and data structure addr before accessing Guixin Liu <kanie(a)linux.alibaba.com> PCI: Introduce named defines for PCI ROM Carlos Bilbao <carlos.bilbao(a)kernel.org> PCI/ASPM: Don't reconfigure ASPM entering low-power state Leo Yan <leo.yan(a)arm.com> coresight: etm4x: Correct TRCVMIDCCTLR1 save and restore James Clark <james.clark(a)linaro.org> coresight: ete: Always save state on power down Leo Yan <leo.yan(a)arm.com> coresight: etm4x: Remove the state_needs_restore flag Baoli.Zhang <baoli.zhang(a)linux.intel.com> soundwire: fix bug in sdw_add_element_group_count found by syzkaller Bard Liao <yung-chuan.liao(a)linux.intel.com> soundwire: don't program SDW_SCP_BUSCLOCK_SCALE on a unattached Peripheral Yingchao Deng <yingchao.deng(a)oss.qualcomm.com> coresight: cti: Fix DT filter signals silently ignored Ian Rogers <irogers(a)google.com> perf debuginfo: Fix libdw API contract violations Alexandru Hossu <hossu.alexandru(a)gmail.com> staging: nvec: fix use-after-free in nvec_rx_completed() Stanley Chu <yschu(a)nuvoton.com> i3c: master: svc: Fix missed IBI after false SLVSTART on NPCM845 Mario Limonciello <mario.limonciello(a)amd.com> gpiolib: acpi: Only trigger ActiveBoth interrupts on boot Nam Cao <namcao(a)linutronix.de> eventpoll: Fix epoll_wait() report false negative Christian Brauner <brauner(a)kernel.org> eventpoll: rename epi->next and txlist for clarity Christian Brauner <brauner(a)kernel.org> eventpoll: wrap EP_UNACTIVE_PTR in typed sentinel helpers Christian Brauner <brauner(a)kernel.org> eventpoll: extract ep_deliver_event() from ep_send_events() Christian Brauner <brauner(a)kernel.org> eventpoll: split ep_insert() into alloc + register stages Christian Brauner <brauner(a)kernel.org> eventpoll: rename attach_epitem() to ep_attach_file() Christian Brauner <brauner(a)kernel.org> eventpoll: expand top-of-file overview / locking doc Christian Brauner <brauner(a)kernel.org> eventpoll: rename ep_remove_safe() back to ep_remove() Yizhou Zhao <zhaoyz24(a)mails.tsinghua.edu.cn> net/9p: fix race condition on rdma->state in trans_rdma.c Hongling Zeng <zenghongling(a)kylinos.cn> 9p: avoid returning ERR_PTR(0) from mkdir operations Aleksandr Nogikh <nogikh(a)google.com> ocfs2: fix circular locking dependency in ocfs2_dio_end_io_write Charles Keepax <ckeepax(a)opensource.cirrus.com> mfd: cs42l43: Sanity check firmware size Matthew Bystrin <dev.mbstr(a)gmail.com> mfd: rsmu: Fix page register setup Guangshuo Li <lgs201920130244(a)gmail.com> ksmbd: fix use-after-free in same_client_has_lease() Selvin Xavier <selvin.xavier(a)broadcom.com> RDMA/bnxt_re: Fail DBR related page allocation UAPIs if the feature is disabled Kalesh AP <kalesh-anakkur.purayil(a)broadcom.com> RDMA/bnxt_re: Move the UAPI methods to a dedicated file Selvin Xavier <selvin.xavier(a)broadcom.com> RDMA/bnxt_re: Avoid displaying the kernel pointer Selvin Xavier <selvin.xavier(a)broadcom.com> RDMA/bnxt_re: Free SRQ toggle page after firmware teardown Brett Creeley <brett.creeley(a)amd.com> ionic: Fix check in ionic_get_link_ext_stats Selvamani Rajagopal <Selvamani.Rajagopal(a)onsemi.com> dt-bindings: net: updated interrupt type to be active low, level triggered Selvamani Rajagopal <Selvamani.Rajagopal(a)onsemi.com> net: ethernet: oa_tc6: Remove FCS size in RX frame Selvamani Rajagopal <Selvamani.Rajagopal(a)onsemi.com> net: ethernet: oa_tc6: mdiobus->parent initialized with NULL Wayen.Yan <win847(a)gmail.com> net: airoha: Fix always-true condition in PPE1 queue reservation loop Eric Dumazet <edumazet(a)google.com> tcp: ipv6: clamp default adverting MSS to avoid GSO_BY_FRAGS (0xFFFF) Eric Dumazet <edumazet(a)google.com> tipc: fix UAF in tipc_l2_send_msg() Gui-Dong Han <hanguidong02(a)gmail.com> KEYS: Use acquire when reading state in keyring search Aboorva Devarajan <aboorvad(a)linux.ibm.com> powerpc/kexec: fix double get_cpu() imbalance in kexec_prepare_cpus Aboorva Devarajan <aboorvad(a)linux.ibm.com> powerpc/powernv: fix preempt count leak in pnv_kexec_wait_secondaries_down Aboorva Devarajan <aboorvad(a)linux.ibm.com> powerpc/perf: fix preempt count underflow in fsl_emb_pmu_del Yadan Fan <ydfan(a)suse.com> MIPS: mm: Fix out-of-bounds write in maar_res_walk() Sechang Lim <rhkrqnwk98(a)gmail.com> bpf, sockmap: fix integer overflow in bpf_msg_pop_data() bounds check Kuniyuki Iwashima <kuniyu(a)google.com> sockmap: Fix use-after-free in udp_bpf_recvmsg() Eric Dumazet <edumazet(a)google.com> net: remove addr_len argument of recvmsg() handlers Weiming Shi <bestswngs(a)gmail.com> bpf, sockmap: reject overflowing copy + len in bpf_msg_push_data() Al Viro <viro(a)zeniv.linux.org.uk> udf: fix nls leak on udf_fill_super() failure Leon Hwang <leon.hwang(a)linux.dev> bpf: Fix bpf_get/setsockopt to tos for ipv4-mapped ipv6 socket Leo Yan <leo.yan(a)arm.com> selftests/bpf: Initialize operation name before use Jiri Olsa <jolsa(a)kernel.org> selftests/bpf: Fix typo in verify_umulti_link_info Huiwen He <hehuiwen(a)kylinos.cn> smb/client: always return a value for FS_IOC_GETFLAGS Jian Zhang <zhangjian496(a)huawei.com> cifs: remove all cifs files before kill super Takashi Iwai <tiwai(a)suse.de> ALSA: core: Fix unintuitive behavior of snd_power_ref_and_wait() Florian Westphal <fw(a)strlen.de> netfilter: nf_conncount: callers must hold rcu read lock Cen Zhang <zzzccc427(a)gmail.com> ALSA: seq: avoid stale FIFO cells during resize Cen Zhang <zzzccc427(a)gmail.com> ALSA: seq: oss: Serialize readq reset state with q->lock Runyu Xiao <runyu.xiao(a)seu.edu.cn> kcm: use WRITE_ONCE() when changing lower socket callbacks Wayen.Yan <win847(a)gmail.com> net: airoha: Fix debugfs new-tuple display for IPv4 ROUTE entries Wayen.Yan <win847(a)gmail.com> net: airoha: Fix register index for Tx-fwd counter configuration Ovidiu Panait <ovidiu.panait.rb(a)renesas.com> net: bcmgenet: Use weighted round-robin TX DMA arbitration Matthieu Buffet <matthieu(a)buffet.re> landlock: Fix unmarked concurrent access to socket family Grzegorz Nitka <grzegorz.nitka(a)intel.com> dpll: balance create/delete notifications in __dpll_pin_(un)register Grzegorz Nitka <grzegorz.nitka(a)intel.com> dpll: guard sync-pair removal on full pin unregister Grzegorz Nitka <grzegorz.nitka(a)intel.com> dpll: emit per-dpll delete notifications in dpll_pin_on_pin_unregister() Grzegorz Nitka <grzegorz.nitka(a)intel.com> dpll: send delete notification before unregister in on-pin rollback Grzegorz Nitka <grzegorz.nitka(a)intel.com> dpll: fix stale iteration in dpll_pin_on_pin_unregister() Ivan Vecera <ivecera(a)redhat.com> dpll: Enhance and consolidate reference counting logic Ivan Vecera <ivecera(a)redhat.com> dpll: Support dynamic pin index allocation Ruoyu Wang <ruoyuw560(a)gmail.com> net: wwan: t7xx: check skb_clone in control TX Wentao Guan <guanwentao(a)uniontech.com> net: ethernet: mtk_wed: debugfs: correct index in wed_amsdu_show() Ratheesh Kannoth <rkannoth(a)marvell.com> octeontx2-af: npc: Fix size of entry2cntr_map Xu Kuohai <xukuohai(a)huawei.com> bpf: Fix setting retval to -EPERM for cgroup hooks not returning errno Dragos Tatulea <dtatulea(a)nvidia.com> net/mlx5: Check max_macs devlink param value against max capability Sun Jian <sun.jian.kdev(a)gmail.com> bpf: Run generic devmap egress prog on private skb Victor Nogueira <victor(a)mojatatu.com> net/sched: sch_dualpi2: Add missing module alias Zhi-Jun You <hujy652(a)gmail.com> net: ethernet: mtk_wed: fix loading WO firmware for MT7986 Eric Dumazet <edumazet(a)google.com> net: watchdog: fix refcount tracking races Aditya Garg <gargaditya(a)linux.microsoft.com> net: mana: guard TX wq object destroy with INVALID_MANA_HANDLE check Aditya Garg <gargaditya(a)linux.microsoft.com> net: mana: initialize gdma queue id to INVALID_QUEUE_ID Victor Nogueira <victor(a)mojatatu.com> net/sched: sch_dualpi2: Do not call qdisc_tree_reduce_backlog during peek before restoring qlen Victor Nogueira <victor(a)mojatatu.com> net/sched: sch_codel: Do not call qdisc_tree_reduce_backlog during peek before restoring qlen Victor Nogueira <victor(a)mojatatu.com> net/sched: sch_fq_codel: Do not call qdisc_tree_reduce_backlog during peek before restoring qlen Paolo Abeni <pabeni(a)redhat.com> virtio_net: do not allow tunnel csum offload for non GSO packets Sechang Lim <rhkrqnwk98(a)gmail.com> tcp: clear sock_ops cb flags before force-closing a child socket Chuck Lever <chuck.lever(a)oracle.com> handshake: Require admin permission for DONE command Lucas Tsai <lucas_tsai(a)richtek.com> power: supply: core: fix supplied_from allocations Guangshuo Li <lgs201920130244(a)gmail.com> ASoC: adau1372: Clear PLL_EN on failed PLL lock without reset GPIO Nicolin Chen <nicolinc(a)nvidia.com> iommu: Avoid copying the user array twice in the full-array copy helper Lars Pöschel <lars.poeschel(a)edag.com> spi: xilinx: use FIFO occupancy register to determine buffer size HanQuan <eilaimemedsnaimel(a)gmail.com> ALSA: seq: Fix kernel heap address leak in bounce_error_event() Cássio Gabriel <cassiogabrielcontato(a)gmail.com> ALSA: usb-audio: qcom: Guard sideband endpoint removal Herbert Xu <herbert(a)gondor.apana.org.au> crypto: rng - Free default RNG on module exit Felix Gu <ustc.gu(a)gmail.com> crypto: cavium/cpt - fix DMA cleanup using wrong loop index Felix Gu <ustc.gu(a)gmail.com> crypto: marvell/octeontx - fix DMA cleanup using wrong loop index Dave Jiang <dave.jiang(a)intel.com> cxl/test: Add check after kzalloc() memory in alloc_mock_res() Dave Jiang <dave.jiang(a)intel.com> cxl/test: Unregister cxl_acpi in cxl_test_init() error path Michael Bommarito <michael.bommarito(a)gmail.com> tipc: reject inverted service ranges from peer bindings Michael Bommarito <michael.bommarito(a)gmail.com> tipc: prevent snt_unacked underflow on CONN_ACK Michael Bommarito <michael.bommarito(a)gmail.com> tipc: require net admin for TIPCv2 netlink mutators Victor Nogueira <victor(a)mojatatu.com> net/sched: sch_hfsc: Don't make class passive twice Samuel Moelius <sam.moelius(a)trailofbits.com> net: pfcp: allocate per-cpu tstats for PFCP netdevs Xin Long <lucien.xin(a)gmail.com> sctp: validate embedded address parameter length Xiang Mei <xmei5(a)asu.edu> bridge: cfm: reject invalid CCM interval at configuration time Kuniyuki Iwashima <kuniyu(a)google.com> net: fib_rules: Don't dump dying fib_rule in fib_rules_dump(). Jamal Hadi Salim <jhs(a)mojatatu.com> net/sched: cls_flow: Dont expose folded kernel pointers George Moussalem <george.moussalem(a)outlook.com> net: dsa: qca8k: fix led devicename when using external mdio bus HyeongJun An <sammiee5311(a)gmail.com> ASoC: tegra: tegra210_ahub: Validate written enum value HyeongJun An <sammiee5311(a)gmail.com> ASoC: fsl: fsl_audmix: Validate written enum values HyeongJun An <sammiee5311(a)gmail.com> ASoC: codecs: hdac_hdmi: Validate written enum value Arnd Bergmann <arnd(a)arndb.de> ASoC: SOF: Intel: hda-sdw-bpt: select SND_SOF_SOF_HDA_SDW_BPT properly Leon Romanovsky <leon(a)kernel.org> RDMA/mlx5: Release the HW‑provided UAR index rather than the SW one Maher Sanalla <msanalla(a)nvidia.com> RDMA/mlx5: Fix undefined shift of user RQ WQE size Patrisious Haddad <phaddad(a)nvidia.com> RDMA/mlx5: Remove raw RSS QP restrack tracking Patrisious Haddad <phaddad(a)nvidia.com> RDMA/mlx5: Remove DCT restrack tracking Maxwell Doose <m32285159(a)gmail.com> fs: efs: remove unneeded debug prints Samuel Moelius <sam.moelius(a)trailofbits.com> Bluetooth: vhci: validate devcoredump state before side effects Samuel Moelius <sam.moelius(a)trailofbits.com> Bluetooth: hci: validate codec capability element length Zhao Dongdong <zhaodongdong(a)kylinos.cn> Bluetooth: btmtk: fix URB leak in alloc_mtk_intr_urb error path Jordan Walters <jaggyaur(a)gmail.com> Bluetooth: hci_core: Fix UAF in hci_unregister_dev() Jiajia Liu <liujiajia(a)kylinos.cn> Bluetooth: hci_event: fix simultaneous discovery stuck in FINDING Weiming Shi <bestswngs(a)gmail.com> Bluetooth: eir: Fix stack OOB write when prepending the Flags AD Zijun Hu <zijun.hu(a)oss.qualcomm.com> Bluetooth: hci_qca: fix NULL pointer dereference in qca_dmp_hdr() for non-serdev device Heiko Carstens <hca(a)linux.ibm.com> s390/process: Fix kernel thread function pointer type Richard Fitzgerald <rf(a)opensource.cirrus.com> ASoC: cs35l56: Fix possible uninitialized value in cs35l56_spi_system_reset() Andre Przywara <andre.przywara(a)arm.com> arm64: dts: allwinner: a523: Add missing GPIO interrupt Mikhail Kshevetskiy <mikhail.kshevetskiy(a)iopsys.eu> pinctrl: airoha: an7581: fix misprint in gpio19 pinconf Mikhail Kshevetskiy <mikhail.kshevetskiy(a)iopsys.eu> pinctrl: airoha: an7581: add missed gpio32 pin group Christian Marangi <ansuelsmth(a)gmail.com> pinctrl: airoha: generalize pins/group/function/confs handling Andre Przywara <andre.przywara(a)arm.com> pinctrl: sunxi: a523: Remove unneeded IRQ remuxing flag Daniel Borkmann <daniel(a)iogearbox.net> bpf: Tighten cgroup storage cookie checks for prog arrays Giovanni Cabiddu <giovanni.cabiddu(a)intel.com> vfio/qat: fix f_pos race in qat_vf_resume_write() Sergey Shtylyov <s.shtylyov(a)auroraos.dev> of: cpu: add check in __of_find_n_match_cpu_property() Dave Jiang <dave.jiang(a)intel.com> cxl/test: Zero out LSA backing memory to avoid leaking to user Dave Jiang <dave.jiang(a)intel.com> cxl/test: Fix integer overflow in mock LSA bounds checks Yonghong Song <yonghong.song(a)linux.dev> selftests/bpf: Fix bpf_iter/task_vma test Aditya Prakash Srivastava <aditya.ansh182(a)gmail.com> ext4: fix kernel BUG in ext4_write_inline_data_end Louis Scalbert <louis.scalbert(a)6wind.com> bonding: 3ad: fix mux port state on oper down Louis Scalbert <louis.scalbert(a)6wind.com> bonding: 3ad: fix carrier when no usable slaves Louis Scalbert <louis.scalbert(a)6wind.com> bonding: 3ad: add lacp_strict configuration knob Louis Scalbert <louis.scalbert(a)6wind.com> netlink: specs: rt-link: missed broadcast-neigh Louis Scalbert <louis.scalbert(a)6wind.com> tools: missed broadcast_neigh if_link uapi header Hongling Zeng <zenghongling(a)kylinos.cn> ext4: fix ERR_PTR(0) in ext4_mkdir() Richard Fitzgerald <rf(a)opensource.cirrus.com> ASoC: cs35l56: Don't leave parent IRQ disabled if system_suspend fails Richard Fitzgerald <rf(a)opensource.cirrus.com> ASoC: cs35l56: Fix missing calls to wm_adsp2_remove() Srujana Challa <schalla(a)marvell.com> vdpa/octeon_ep: fix IRQ-to-ring mapping in interrupt handler Srujana Challa <schalla(a)marvell.com> vdpa/octeon_ep: Fix PF->VF mailbox data address calculation longlong yan <yanlonglong(a)kylinos.cn> tools/virtio: check mmap return value in vringh_test Qing Ming <a0yami(a)mailbox.org> vhost/net: complete zerocopy ubufs only once Zhang Tianci <zhangtianci.1997(a)bytedance.com> vduse: Requeue failed read to send_list head Filip Hejsek <filip.hejsek(a)gmail.com> virtio_console: read size from config space during device init Jia Jia <physicalmtea(a)gmail.com> virtio: rtc: tear down old virtqueues before restore Qihang Tang <q.h.hack.winter(a)gmail.com> vhost/vdpa: validate virtqueue index in mmap and fault paths Qihang Tang <q.h.hack.winter(a)gmail.com> vduse: hold vduse_lock across IDR lookup in open path Val Packett <val(a)packett.cool> ASoC: codecs: aw88261: fix incorrect masks for boost regs Ruoyu Wang <ruoyuw560(a)gmail.com> spi: meson-spifc: fix runtime PM leak on remove Chuck Lever <chuck.lever(a)oracle.com> NFSD: Handle layout stid in nfsd4_drop_revoked_stid() Jason Gunthorpe <jgg(a)ziepe.ca> IB/mlx4: Fill in the access_flags if IB_MR_REREG_ACCESS is not specified Cássio Gabriel <cassiogabrielcontato(a)gmail.com> ASoC: sma1307: Fix uevent string leaks in fault worker KhaiWenTan <khai.wen.tan(a)linux.intel.com> igc: skip RX timestamp header for frame preemption verification Filipe Manana <fdmanana(a)suse.com> btrfs: fix deadlock cloning inline extent when using flushoncommit Cen Zhang <zzzccc427(a)gmail.com> btrfs: annotate lockless read of defrag_bytes in should_nocow() Johannes Thumshirn <johannes.thumshirn(a)wdc.com> btrfs: zoned: always set max_active_zones for zoned devices Matthew Wilcox (Oracle) <willy(a)infradead.org> Revert "btrfs: fix the file offset calculation inside btrfs_decompress_buf2page()" Johannes Thumshirn <johannes.thumshirn(a)wdc.com> btrfs: zoned: don't account data relocation space-info in statfs free space Nikita Zhandarovich <n.zhandarovich(a)fintech.ru> hwmon: (it87) Clamp negative values to zero in set_fan() Jeff Layton <jlayton(a)kernel.org> vfs: add FS_USERNS_DELEGATABLE flag and set it for NFS David Laight <david.laight.linux(a)gmail.com> fbdev: sm501fb: Fix buffer errors in OF binding code Wen Gong <quic_wgong(a)quicinc.com> wifi: ath12k: enable IEEE80211_VHT_EXT_NSS_BW_CAPABLE when NSS ratio is reported Sergio Paracuellos <sergio.paracuellos(a)gmail.com> gpio: mt7621: fix interrupt banks mapping on gpio chips Takashi Iwai <tiwai(a)suse.de> ALSA: aloop: Drop superfluous break Filipe Manana <fdmanana(a)suse.com> btrfs: fix invalid pointer dereference in __btrfs_run_delayed_refs() Ryder Lee <ryder.lee(a)mediatek.com> wifi: mt76: mt7996: fix potential tx_retries underflow Ryder Lee <ryder.lee(a)mediatek.com> wifi: mt76: mt7925: fix potential tx_retries underflow Ryder Lee <ryder.lee(a)mediatek.com> wifi: mt76: mt7921: fix potential tx_retries underflow Ryder Lee <ryder.lee(a)mediatek.com> wifi: mt76: mt7915: fix potential tx_retries underflow Bjoern A. Zeeb <bz(a)FreeBSD.org> wifi: mt76: fix argument to ieee80211_is_first_frag() Dylan Eskew <dylan.eskew(a)candelatech.com> wifi: mt76: mt7996: limit work in set_bitrate_mask Lorenzo Bianconi <lorenzo(a)kernel.org> wifi: mt76: mt7996: fix reading zeroed info->control.flags after mt76_tx_status_skb_add() Lorenzo Bianconi <lorenzo(a)kernel.org> wifi: mt76: mt7996: Fix possible NULL pointer dereference in mt7996_mac_write_txwi_80211() Lorenzo Bianconi <lorenzo(a)kernel.org> wifi: mt76: mt7996: Fix possible token leak in mt7996_tx_prepare_skb() Aviel Zohar <avielzohar123(a)gmail.com> wifi: mt76: mt7925: validate skb length in testmode query Sean Wang <sean.wang(a)mediatek.com> wifi: mt76: mt792x: skip MLD header rewrite for 802.3 encap TX Sean Wang <sean.wang(a)mediatek.com> wifi: mt76: mt7925: keep TX BA state in the primary WCID Javier Tia <floss(a)jetm.me> wifi: mt76: mt7925: fix stale pointer comparisons in change_vif_links Felix Fietkau <nbd(a)nbd.name> wifi: mt76: mt7996: add missing max_remain_on_channel_duration Rajat Gupta <rajat.gupta(a)oss.qualcomm.com> wifi: mt76: use kfree_rcu for offchannel link in mt76_put_vif_phy_link Myeonghun Pak <mhun512(a)gmail.com> wifi: mt76: mt7925: clean up DMA on probe failure Krzysztof Kozlowski <krzysztof.kozlowski(a)oss.qualcomm.com> ARM: configs: Drop duplicated CONFIG_EXT4_FS Hongyan Xia <hongyan.xia(a)transsion.com> sched/fair: Fix cpu_util runnable_avg arithmetic Wolfram Sang <wsa+renesas(a)sang-engineering.com> hwspinlock: qcom: avoid uninitialized struct members Hui Zhu <zhuhui(a)kylinos.cn> vmalloc: fix NULL pointer dereference in is_vm_area_hugepages() Luca Leonardo Scorcia <l.scorcia(a)gmail.com> pinctrl: mediatek: mt8167: Fix Schmitt trigger register offset of pins 34-39 Luca Leonardo Scorcia <l.scorcia(a)gmail.com> pinctrl: mediatek: mt8516: Fix Schmitt trigger register offset of pins 34-39 Mike Christie <michael.christie(a)oracle.com> scsi: target: Remove tcm_loop target reset handling David Disseldorp <ddiss(a)suse.de> scsi: target: Fix hexadecimal CHAP_I handling Sneh Mankad <sneh.mankad(a)oss.qualcomm.com> pinctrl: qcom: Fix resolving register base address from device node Yuho Choi <dbgh9129(a)gmail.com> watchdog: unregister PM notifier on watchdog unregister Al Viro <viro(a)zeniv.linux.org.uk> configfs: fix lockless traversals of ->s_children Dmitry Vyukov <dvyukov(a)google.com> firmware_loader: Fix recursive lock in device_cache_fw_images() Aaron Ma <aaron.ma(a)canonical.com> ASoC: amd: acp-sdw-sof: Bound DAI link iteration Aaron Ma <aaron.ma(a)canonical.com> ASoC: amd: acp-sdw-legacy: Bound DAI link iteration Felix Gu <ustc.gu(a)gmail.com> spi: ep93xx: fix double-free of zeropage on DMA setup failure Jason Gunthorpe <jgg(a)ziepe.ca> IB/mlx5: Don't mangle the mr->pd inside the rereg callback Jason Gunthorpe <jgg(a)ziepe.ca> IB/mlx5: Pull the pdn out of the depths of the umr machinery Jason Gunthorpe <jgg(a)ziepe.ca> IB/mlx5: Remove unused mkc bits in mlx5r_umr_update_mr_page_shift() Jason Gunthorpe <jgg(a)ziepe.ca> IB/mlx5: Properly support implicit ODP rereg_mr Jason Gunthorpe <jgg(a)ziepe.ca> IB/mlx5: Don't take the rereg_mr fallback without a new translation Mark Harmstone <mark(a)harmstone.com> btrfs: don't force DIO writes to be serialized Samuel Moelius <sam.moelius(a)trailofbits.com> thermal: testing: reject missing command arguments Pengjie Zhang <zhangpengjie2(a)huawei.com> cpufreq: Documentation: fix conservative governor freq_step description Yuho Choi <dbgh9129(a)gmail.com> ACPI: IPMI: Fix message kref handling on dead device Sechang Lim <rhkrqnwk98(a)gmail.com> bpf: Fix NULL pointer dereference in bpf_task_from_vpid() Bartosz Golaszewski <bartosz.golaszewski(a)oss.qualcomm.com> powerpc/8xx: implement get_direction() in cpm1 David Gow <david(a)davidgow.net> kunit:tool: Don't write to stdout when it should be disabled Mykyta Yatsenko <yatsenko(a)meta.com> bpf: Fix NMI/tracepoint re-entry deadlock on lru locks Kyle Zeng <kylebot(a)openai.com> ALSA: seq: Clear variable event pointer on read Rui Qi <qirui.001(a)bytedance.com> riscv: stacktrace: Remove bogus -0x4 offset in non-FP walk_stackframe Hui Wang <hui.wang(a)canonical.com> riscv: cpu_ops: Change return value type of cpu_is_stopped() to bool HyeongJun An <sammiee5311(a)gmail.com> ALSA: seq: Fix partial userptr event expansion Tristan Madani <tristan(a)talencesecurity.com> wifi: wcn36xx: fix OOB read from short trigger BA firmware response Tristan Madani <tristan(a)talencesecurity.com> wifi: wcn36xx: fix OOB read from firmware count in PRINT_REG_INFO indication Tristan Madani <tristan(a)talencesecurity.com> wifi: wcn36xx: fix heap overflow from oversized firmware HAL response Leon Hwang <leon.hwang(a)linux.dev> bpf: Update transport_header when encapsulating UDP tunnel in lwt Leon Hwang <leon.hwang(a)linux.dev> bpf: Check tail zero of bpf_prog_info Leon Hwang <leon.hwang(a)linux.dev> bpf: Check tail zero of bpf_map_info Kaitao Cheng <chengkaitao(a)kylinos.cn> bpf: Clear rb node linkage when freeing bpf_rb_root Bernard Metzler <bernard.metzler(a)linux.dev> RDMA/siw: Fix endpoint/socket association handling Frieder Schrempf <frieder.schrempf(a)kontron.de> arm64: dts: imx8mp-kontron: Fix GPIO for display power switch Alexander Stein <alexander.stein(a)ew.tq-group.com> arm64: dts: tqma8mpql-mba8mpxl: configure sai clock in audio codec as well Josua Mayer <josua(a)solid-run.com> arm64: dts: lx2162a-clearfog: use rev2 SoC dtsi Richard Zhu <hongxing.zhu(a)nxp.com> arm64: dts: imx95: Correct PCIe outbound address space configuration Frieder Schrempf <frieder.schrempf(a)kontron.de> arm64: dts: imx8mp-kontron: Reduce EERAM SPI clock frequency Jacob Moroni <jmoroni(a)google.com> RDMA/irdma: Initialize iwmr->access during MR registration Jacob Moroni <jmoroni(a)google.com> RDMA/irdma: Fix OOB read during CQ MR registration Oliver Hartkopp <socketcan(a)hartkopp.net> ALSA: hda: fix Kconfig dependency of HD Audio PCI Jason Gunthorpe <jgg(a)ziepe.ca> IB/cm: Fix av cm device leak on an error path in cm_init_av_by_path() Arnd Bergmann <arnd(a)arndb.de> RDMA/hfi1: Open-code rvt_set_ibdev_name() Pablo Neira Ayuso <pablo(a)netfilter.org> netfilter: conntrack: call nf_ct_gre_keymap_destroy() if master helper is pptp Pablo Neira Ayuso <pablo(a)netfilter.org> netfilter: conntrack: revert ct extension genid infrastructure Junxiao Chang <junxiao.chang(a)intel.com> x86/cpu: Remove obsolete aperfmperf_get_khz() declaration Cássio Gabriel <cassiogabrielcontato(a)gmail.com> ALSA: usb-audio: qcom: Initialize offload control return value Fernando Fernandez Mancera <fmancera(a)suse.de> netfilter: synproxy: protect nf_ct_seqadj_init() with conntrack lock Fernando Fernandez Mancera <fmancera(a)suse.de> netfilter: synproxy: fix unaligned memory access in timestamp adjustment Fernando Fernandez Mancera <fmancera(a)suse.de> netfilter: synproxy: adjust duplicate timestamp options Fernando Fernandez Mancera <fmancera(a)suse.de> netfilter: synproxy: drop packets if timestamp adjustment fails Pablo Neira Ayuso <pablo(a)netfilter.org> netfilter: nfnetlink_cthelper: use {READ,WRITE}_ONCE for accessing helper flags Fernando Fernandez Mancera <fmancera(a)suse.de> netfilter: nfnetlink_osf: fix mss parsing on big-endian architectures Joseph Qi <joseph.qi(a)linux.alibaba.com> ocfs2: fix race between ocfs2_control_install_private() and ocfs2_control_release() Zhang Cen <rollkingzzc(a)gmail.com> ocfs2/dlm: require a ref for locking_state debugfs open Zhang Cen <rollkingzzc(a)gmail.com> ocfs2: reject FITRIM ranges shorter than a cluster Dmitry Antipov <dmantipov(a)yandex.ru> ocfs2: fix buffer head management in ocfs2_read_blocks() Thomas Weißschuh <linux(a)weissschuh.net> lib: kunit_iov_iter: repeatedly call alloc_pages_bulk() Zhang Cen <rollkingzzc(a)gmail.com> ocfs2: rebase copied fsdlm LVB pointers in locking_state Wandun Chen <chenwandun(a)lixiang.com> of: reserved_mem: avoid post-init UAF when alloc_reserved_mem_array() fails Alex Deucher <alexander.deucher(a)amd.com> drm/amdkfd: always resume_all after suspend_all Dan Williams <djbw(a)kernel.org> cxl/fwctl: Fix __fortify_panic Antony Antony <antony.antony(a)secunet.com> xfrm: fix NAT-related field inheritance in SA migration Sandipan Das <sandipan.das(a)amd.com> perf/x86/amd/uncore: Use Node ID to identify DF and UMC domains Zide Chen <zide.chen(a)intel.com> perf/x86/intel/uncore: Fix discovery unit lookup for multi-die systems Sandipan Das <sandipan.das(a)amd.com> perf/x86/amd/core: Always use the NMI latency mitigation Pranjal Shrivastava <praan(a)google.com> iommu/vt-d: Fix RB-tree corruption in probe error path Michael S. Tsirkin <mst(a)redhat.com> vhost: fix vhost_get_avail_idx for a non empty ring Woojin Ji <random6.xyz(a)gmail.com> bpftool: Use libbpf error code for flow dissector query Yunxiang Li <Yunxiang.Li(a)amd.com> drm/amdgpu: set sub_block_index for mca ras sub-blocks Li Chen <me(a)linux.beauty> ext4: fix fast commit wait/wake bit mapping on 64-bit Karl Mehltretter <kmehltretter(a)gmail.com> lockdep/selftests: Restore sched_rt_mutex state on PREEMPT_RT Karl Mehltretter <kmehltretter(a)gmail.com> lockdep/selftests: Restore migrate_disable() state on PREEMPT_RT Al Viro <viro(a)zeniv.linux.org.uk> configfs_lookup(): don't leave ->s_dentry dangling on failure Inochi Amaoto <inochiama(a)gmail.com> riscv: dts: sophgo: sg2042: use hex for CPU unit address Inochi Amaoto <inochiama(a)gmail.com> riscv: dts: sophgo: sg2044: use hex for CPU unit address Alexander Potapenko <glider(a)google.com> lib/test_meminit: use && for bools Frederic Weisbecker <frederic(a)kernel.org> tick/sched: Fix TOCTOU in nohz idle time fetch Daniel Borkmann <daniel(a)iogearbox.net> bpf: Reject exclusive maps for bpf_map_elem iterators Nathan Chancellor <nathan(a)kernel.org> driver core: Use system_percpu_wq instead of system_wq liuxixin <gliuxen(a)gmail.com> nvme: fix FDP fdpcidx bounds check Guanyou.Chen <chenguanyou9338(a)gmail.com> sched: restore timer_slack_ns when resetting RT policy on fork Danila Chernetsov <listdansp(a)mail.ru> ext2: fix ignored return value of generic_write_sync() Sang-Heon Jeon <ekffu200098(a)gmail.com> mm/fake-numa: fix under-allocation detection in uniform split Deepanshu Kartikey <kartikey406(a)gmail.com> bpf: fix UAF by restoring RCU-delayed inode freeing in bpffs Chanwoo Lee <cw9316.lee(a)samsung.com> scsi: ufs: Fix wrong value printed in unexpected UPIU response case Dan Carpenter <error27(a)gmail.com> scsi: pm8001: Fix error code in non_fatal_log_show() Daniel Borkmann <daniel(a)iogearbox.net> libbpf: Skip max_entries override on signed loaders Daniel Borkmann <daniel(a)iogearbox.net> libbpf: Skip initial_value override on signed loaders KP Singh <kpsingh(a)kernel.org> libbpf: Reject non-exclusive metadata maps in the signed loader Daniel Borkmann <daniel(a)iogearbox.net> bpf: Reject exclusive maps as inner maps in map-in-map Martin Wilck <martin.wilck(a)suse.com> scsi: Revert "scsi: Fix sas_user_scan() to handle wildcard and multi-channel scans" Alison Schofield <alison.schofield(a)intel.com> nvdimm/btt: Handle preemption in BTT lane acquisition Randy Dunlap <rdunlap(a)infradead.org> x86/cpu: Keep the PROCESSOR_SELECT menu together Yuho Choi <dbgh9129(a)gmail.com> ARM: imx31: Fix IIM mapping leak in revision check Bart Van Assche <bvanassche(a)acm.org> ata: libata: Fix ata_exec_internal() Wei Zhang <wei.zhang(a)oss.qualcomm.com> wifi: ath12k: fix NULL deref in change_sta_links for unready link Kwan Lai Chee Hou <laicheehou9(a)gmail.com> wifi: ath12k: fix incorrect HT/VHT/HE/EHT MCS reporting in monitor mode J. Neuschäfer <j.ne(a)posteo.net> HID: wiimote: Fix table layout and whitespace errors Yuho Choi <dbgh9129(a)gmail.com> ARM: imx3: Fix CCM node reference leak Chuck Lever <chuck.lever(a)oracle.com> NFSD: Fix delegation reference leak in nfsd4_revoke_states John Madieu <john.madieu.xa(a)bp.renesas.com> ASoC: rsnd: Fix RSND_SOC_MASK width to single nibble Felix Gu <ustc.gu(a)gmail.com> spi: atmel: fix DMA channel and bounce buffer leaks Zhang Yi <yi.zhang(a)huawei.com> ext4: fix LOGFLUSH shutdown ordering to allow ordered-mode data writeback Daniel Borkmann <daniel(a)iogearbox.net> libbpf: Skip endianness swap when loader generation failed Daniel Borkmann <daniel(a)iogearbox.net> libbpf: Skip hash computation when loader generation failed Yuyang Huang <yuyanghuang(a)google.com> selftests/bpf: add verification for BPF_PROG_QUERY attr size boundaries Yuyang Huang <yuyanghuang(a)google.com> bpf: fix BPF_PROG_QUERY OOB write and cgroup backward compat Abd-Alrhman Masalkhi <abd.masalkhi(a)gmail.com> raid1: fix nr_pending leak in REQ_ATOMIC bad-block error path Chen Cheng <chencheng(a)fnnas.com> md/raid10: reset read_slot when reusing r10bio for discard Danilo Krummrich <dakr(a)kernel.org> rpmsg: use generic driver_override infrastructure Danilo Krummrich <dakr(a)kernel.org> Drivers: hv: vmbus: use generic driver_override infrastructure Danilo Krummrich <dakr(a)kernel.org> cdx: use generic driver_override infrastructure Danilo Krummrich <dakr(a)kernel.org> amba: use generic driver_override infrastructure Renjiang Han <renjiang.han(a)oss.qualcomm.com> media: qcom: venus: relax encoder frame/blur step size on v6 Renjiang Han <renjiang.han(a)oss.qualcomm.com> media: qcom: venus: relax encoder frame/blur dimension steps on v4 Renjiang Han <renjiang.han(a)oss.qualcomm.com> media: qcom: venus: drop extra padding in NV12 raw size calculation Dmitry Baryshkov <dmitry.baryshkov(a)oss.qualcomm.com> Revert "media: venus: hfi_platform: Correct supported codecs for sc7280" Tristan Madani <tristmd(a)gmail.com> RDMA/rxe: Copy WQE to local buffer in non-SRQ receive path Tristan Madani <tristmd(a)gmail.com> RDMA/rxe: Fix TOCTOU heap overflow in get_srq_wqe Jiri Pirko <jiri(a)resnulli.us> RDMA/umem: Add ib_umem_is_contiguous() stub for !CONFIG_INFINIBAND_USER_MEM Marek Vasut <marex(a)nabladev.com> arm64: dts: st: Fix SAI addresses on stm32mp251 zhoumin <teczm(a)foxmail.com> EDAC/{skx_common,skx}: Fix UBSAN shift-out-of-bounds in skx_get_dimm_info Qiuxu Zhuo <qiuxu.zhuo(a)intel.com> EDAC/igen6: Fix call trace due to missing release() Jessica Zhang <jessica.zhang(a)oss.qualcomm.com> drm/msm/dp: Fix the ISR_* enum values Jessica Zhang <jessica.zhang(a)oss.qualcomm.com> drm/msm/dp: fix HPD state status bit shift value Andrea Righi <arighi(a)nvidia.com> sched/deadline: Reject debugfs dl_server writes for offline CPUs Herbert Xu <herbert(a)gondor.apana.org.au> crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm Herbert Xu <herbert(a)gondor.apana.org.au> crypto: tegra - Fix dma_free_coherent size error Aleksander Jan Bajkowski <olek2(a)wp.pl> crypto: inside-secure/eip93 - Add check for devm_request_threaded_irq Weili Qian <qianweili(a)huawei.com> crypto: hisilicon/qm - disable error report before flr Tetsuo Handa <penguin-kernel(a)I-love.SAKURA.ne.jp> ocfs2: kill osb->system_file_mutex lock ZhengYuan Huang <gality369(a)gmail.com> ocfs2: don't BUG_ON an invalid journal dinode Dan Carpenter <error27(a)gmail.com> rapidio/tsi721: prevent a bad dereference in tsi721_db_dpc() Davidlohr Bueso <dave(a)stgolabs.net> dax/kmem: account for partial discontiguous resource upon removal Brian Norris <briannorris(a)chromium.org> arm64: tegra: Add #{address,size}-cells to Chromium-based /firmware Brian Norris <briannorris(a)chromium.org> ARM: tegra: Add #{address,size}-cells to Chromium-based /firmware Carlos Llamas <cmllamas(a)google.com> libbpf: Fix UAF in strset__add_str() Siddharth Nayyar <sidnayyar(a)google.com> bpftool: Fix typo in struct_ops map FD generation for light skeleton Michael Bommarito <michael.bommarito(a)gmail.com> libbpf: Harden parse_vma_segs() path parsing Timur Tabi <ttabi(a)nvidia.com> drm/nouveau/bios: specify correct display fuse register for Ampere and Ada Mikko Perttunen <mperttunen(a)nvidia.com> drm/tegra: Fix iommu_map_sgtable() return value check Mikko Perttunen <mperttunen(a)nvidia.com> gpu: host1x: Fix iommu_map_sgtable() return value check Felix Gu <ustc.gu(a)gmail.com> drm/tegra: dc: Fix device node reference leak in tegra_dc_has_output() Mikko Perttunen <mperttunen(a)nvidia.com> gpu: host1x: Allow entries in BO caches to be freed Ion Agorria <ion(a)agorria.com> drm/tegra: gr2d/gr3d: Contain PM in the gr*d_probe/gr*d_remove Svyatoslav Ryhel <clamor95(a)gmail.com> drm/tegra: gr2d/gr3d: Initialize address register map before HOST1X client is registered Tomas Glozar <tglozar(a)redhat.com> rtla/actions: Restore continue flag in actions_perform() Wander Lairson Costa <wander(a)redhat.com> rtla: Introduce for_each_action() helper Vasant Hegde <vasant.hegde(a)amd.com> iommu/amd: Fix premature break in init_iommu_one() Jiayuan Chen <jiayuan.chen(a)linux.dev> net/sched: cls_bpf: prevent unbounded recursion in offload rollback Eric Dumazet <edumazet(a)google.com> ipv6: guard against possible NULL deref in __in6_dev_stats_get() Breno Leitao <leitao(a)debian.org> workqueue: drop spurious '*' from print_worker_info() fn declaration Mateusz Nowicki <mateusz.nowicki(a)posteo.net> nvme-pci: fix out-of-bounds access in nvme_setup_descriptor_pools Nilay Shroff <nilay(a)linux.ibm.com> nvme-multipath: fix flex array size in struct nvme_ns_head Geliang Tang <geliang(a)kernel.org> nvmet-tcp: check return value of nvmet_tcp_set_queue_sock Geliang Tang <geliang(a)kernel.org> nvmet-tcp: fix page fragment cache leak in error path Jia He <justin.he(a)arm.com> init/initramfs_test: wait_for_initramfs() before running Charles Keepax <ckeepax(a)opensource.cirrus.com> pinctrl: cs42l43: Fix polarity on debounce Charles Keepax <ckeepax(a)opensource.cirrus.com> pinctrl: cs42l43: Fix leaked pm reference on error path Joey Lu <a0987203069(a)gmail.com> pinctrl: nuvoton: ma35d1: fix MFP register offset and pin table Florian Schmaus <flo(a)geekplace.eu> selftests: Fix Makefile target for nsfs Zhang Cen <rollkingzzc(a)gmail.com> ALSA: seq: midi: Serialize output teardown with event_input Takashi Iwai <tiwai(a)suse.de> ALSA: seq: oss: Fix UAF at handling events with embedded SysEx data Cássio Gabriel <cassiogabrielcontato(a)gmail.com> ALSA: xen-front: Connect event channel after stream prepare Cássio Gabriel <cassiogabrielcontato(a)gmail.com> ALSA: xen-front: Reset event channel state on stream clear Miquel Raynal <miquel.raynal(a)bootlin.com> mtd: spi-nor: Drop duplicate Kconfig dependency Miquel Raynal <miquel.raynal(a)bootlin.com> mtd: spi-nor: debugfs: Fix the flags list Danilo Krummrich <dakr(a)kernel.org> driver core: Guard deferred probe timeout extension with delayed_work_pending() Danilo Krummrich <dakr(a)kernel.org> driver core: Fix missing jiffies conversion in deferred_probe_extend_timeout() Rosen Penev <rosenp(a)gmail.com> mips: n64: add __iomem for writel call Rosen Penev <rosenp(a)gmail.com> mips: ralink: mt7621: add missing __iomem Maciej W. Rozycki <macro(a)orcam.me.uk> MIPS: DEC: Remove do_IRQ() call indirection Maciej W. Rozycki <macro(a)orcam.me.uk> MIPS: Fix big-endian stack argument fetching in o32 wrapper Jiakai Xu <xujiakai24(a)mails.ucas.ac.cn> PM: sleep: Use complete() in device_pm_sleep_init() Xianwei Zhao <xianwei.zhao(a)amlogic.com> pinctrl: meson: amlogic-a4: fix gpio output glitch Tao Cui <cuitao(a)kylinos.cn> RDMA/counter: Fix incorrect port index in rdma_counter_init() error cleanup Lianfa Weng <wenglianfa(a)huawei.com> RDMA/hns: Fix log flood after cmd_mbox failure Lianfa Weng <wenglianfa(a)huawei.com> RDMA/hns: Fix warning in poll cq direct mode Eliot Courtney <ecourtney(a)nvidia.com> gpu: nova-core: vbios: read BitToken using FromBytes Alexandre Courbot <acourbot(a)nvidia.com> gpu: nova-core: replace `as` with `from` conversions where possible Eliot Courtney <ecourtney(a)nvidia.com> gpu: nova-core: vbios: avoid reading too far in read_more_at_offset Eliot Courtney <ecourtney(a)nvidia.com> gpu: nova-core: vbios: use checked arithmetic for bios image range end Eliot Courtney <ecourtney(a)nvidia.com> gpu: nova-core: vbios: stop scanning at BIOS_MAX_SCAN_LEN Guangshuo Li <lgs201920130244(a)gmail.com> IB/mlx4: Fix refcount leak in add_port() error path Zhu Yanjun <yanjun.zhu(a)linux.dev> RDMA/rxe: Fix a use-after-free problem in rxe_mmap Jacob Moroni <jmoroni(a)google.com> RDMA/irdma: Fix out-of-bounds write in irdma_copy_user_pgaddrs Han Gao <gaohan(a)iscas.ac.cn> pinctrl: spacemit: fix NULL check in spacemit_pin_set_config Samuel Holland <samuel(a)sholland.org> bus: sunxi-rsb: Always check register address validity Shiraz Saleem <shirazsaleem(a)microsoft.com> RDMA/mana_ib: Use ib_get_eth_speed for reporting port speed Ronaldo Nunez <rnunez(a)baylibre.com> pwm: imx27: Fix variable truncation in .apply() Lifeng Zheng <zhenglifeng1(a)huawei.com> cpufreq: conservative: Simplify frequency limit handling Pengjie Zhang <zhangpengjie2(a)huawei.com> cpufreq: Documentation: fix sampling_down_factor range Aleksander Jan Bajkowski <olek2(a)wp.pl> crypto: eip93 - fix reset ring register definition Saravana Kannan <saravanak(a)google.com> of: dynamic: Fix overlayed devices not probing because of fw_devlink Saravana Kannan <saravanak(a)google.com> Revert "treewide: Fix probing of devices in DT overlays" Zhang Yuwei <zhangyuwei20(a)huawei.com> driver core: Use mod_delayed_work to prevent lost deferred probe work Stepan Ionichev <sozdayvek(a)gmail.com> device property: fix fwnode reference leak in fwnode_graph_get_endpoint_by_id() Conor Kotwasinski <conorkotwasinski2024(a)u.northwestern.edu> kernfs: fix suspicious RCU usage in kernfs_put() Baokun Li <libaokun(a)linux.alibaba.com> writeback: drop now-unnecessary rcu_barrier() in cgroup_writeback_umount() Ritesh Kumar <quic_riteshk(a)quicinc.com> arm64: dts: qcom: lemans: Add eDP ref clock for eDP PHYs Pengpeng Hou <pengpeng(a)iscas.ac.cn> tracing: Bound synthetic-field strings with seq_buf Harshal Dev <harshal.dev(a)oss.qualcomm.com> arm64: dts: qcom: sm8750: Add power-domain and iface clk for ice node Harshal Dev <harshal.dev(a)oss.qualcomm.com> arm64: dts: qcom: sm8650: Add power-domain and iface clk for ice node Harshal Dev <harshal.dev(a)oss.qualcomm.com> arm64: dts: qcom: sm8550: Add power-domain and iface clk for ice node Harshal Dev <harshal.dev(a)oss.qualcomm.com> arm64: dts: qcom: sm8450: Add power-domain and iface clk for ice node Harshal Dev <harshal.dev(a)oss.qualcomm.com> arm64: dts: qcom: kodiak: Add power-domain and iface clk for ice node Harshal Dev <harshal.dev(a)oss.qualcomm.com> arm64: dts: qcom: sc7180: Add power-domain and iface clk for ice node Harshal Dev <harshal.dev(a)oss.qualcomm.com> arm64: dts: qcom: monaco: Add power-domain and iface clk for ice node Harshal Dev <harshal.dev(a)oss.qualcomm.com> arm64: dts: qcom: lemans: Add power-domain and iface clk for ice node Geert Uytterhoeven <geert+renesas(a)glider.be> firmware: arm_scmi: Fix OOB in scmi_power_name_get() Sven Püschel <s.pueschel(a)pengutronix.de> media: rockchip: rga: fix too small buffer size Eric Dumazet <edumazet(a)google.com> net/sched: sch_drr: annotate data-races around cl->deficit Hongling Zeng <zenghongling(a)kylinos.cn> nilfs2: Fix return in nilfs_mkdir Daniel Palmer <daniel(a)thingy.jp> tools/nolibc: getopt: Fix potential out of bounds access Chen-Yu Tsai <wenst(a)chromium.org> regulator: dt-bindings: mt6359: Drop regulator-name pattern restrictions Randy Dunlap <rdunlap(a)infradead.org> bitops: use common function parameter names Greg Kroah-Hartman <gregkh(a)linuxfoundation.org> sysfs: clamp show() return value in sysfs_kf_read() Sudeep Holla <sudeep.holla(a)kernel.org> firmware: arm_scmi: Read sensor config as 32-bit value Andre Przywara <andre.przywara(a)arm.com> firmware: smccc: Fix Arm SMCCC SOC_ID name call Aurelien Jarno <aurelien(a)aurel32.net> riscv: dts: spacemit: set console baud rate on Milk-V Jupiter Jose A. Perez de Azpillaga <azpijr(a)gmail.com> staging: media: atomisp: fix loop shadowing in ia_css_stream_destroy() Yuho Choi <dbgh9129(a)gmail.com> media: atomisp: gc2235: fix UAF and memory leak Zilin Guan <zilin(a)seu.edu.cn> media: atomisp: Fix memory leak in atomisp_fixed_pattern_table() Sherry Sun <sherry.sun(a)nxp.com> arm64: dts: imx95-19x19-evk: Fix PCIe EP vpcie-supply Sherry Sun <sherry.sun(a)nxp.com> arm64: dts: imx8qxp-mek: Remove unnecessary PCIe EP vpcie-supply Sherry Sun <sherry.sun(a)nxp.com> arm64: dts: imx8dxl-evk: Remove unnecessary PCIe EP properties Jamie Nguyen <jamien(a)nvidia.com> firmware: arm_ffa: Honor partition info descriptor size Kevin Brodsky <kevin.brodsky(a)arm.com> selftests/mm: Fix resv_sz when parsing arm64 signal frame Bibek Kumar Patro <bibek.patro(a)oss.qualcomm.com> iommu/arm-smmu-qcom: Fix fastrpc compatible string in ACTLR client match table Paul Chaignon <paul.chaignon(a)gmail.com> selftests/bpf: Fix test for refinement of single-value tnum Roman Kvasnytskyi <roman(a)kvasnytskyi.net> selftests/bpf: Reject unsupported -k option in vmtest.sh Liviu Dudau <liviu.dudau(a)arm.com> drm/syncobj: Fix memory leak in drm_syncobj_find_fence() Junxian Huang <huangjunxian6(a)hisilicon.com> RDMA/hns: Initialize seqfile before creating file Sara Venkatesh <sarajvenkatesh(a)gmail.com> RDMA/srpt: fix integer overflow in immediate data length check Prathamesh Deshpande <prathameshdeshpande7(a)gmail.com> RDMA/mlx5: Fix devx subscribe-event unwind NULL dereference Prathamesh Deshpande <prathameshdeshpande7(a)gmail.com> RDMA/mlx5: Fix UMR XLT cleanup on ODP populate failure Alexander Chesnokov <Alexander.Chesnokov(a)kaspersky.com> RDMA/hns: Fix arithmetic overflow in calc_hem_config() Prathamesh Deshpande <prathameshdeshpande7(a)gmail.com> IB/mlx5: Fix transport-domain rollback and initialize lb mutex earlier Linmao Li <lilinmao(a)kylinos.cn> ipv6: addrconf: bail out of dad_failure when state is no longer POSTDAD Eric Dumazet <edumazet(a)google.com> net/sched: sch_htb: annotate data-races (I) Eric Dumazet <edumazet(a)google.com> net/sched: sch_htb: do not change sch->flags in htb_dump() Qiang Ma <maqianga(a)uniontech.com> spi: hisi-kunpeng: Use dev_err_probe() for host registration failure Sean Christopherson <seanjc(a)google.com> crypto: ccp - Treat zero-length cert chain as query for blob lengths Yihang Li <liyihang9(a)huawei.com> scsi: hisi_sas: Add slave_destroy interface for v3 hw Eric Dumazet <edumazet(a)google.com> net/sched: sch_hfsc: annotate data-races in hfsc_dump_class_stats() Stepan Ionichev <sozdayvek(a)gmail.com> clk: scpi: Unregister child clock providers on remove Rafael J. Wysocki <rafael.j.wysocki(a)intel.com> thermal: hwmon: Fix critical temperature attribute removal Pengpeng Hou <pengpeng(a)iscas.ac.cn> evm: terminate and bound the evm_xattrs read buffer Lin He <helin52(a)huawei.com> drm/hisilicon/hibmc: use clock to look up the PLL value Lin He <helin52(a)huawei.com> drm/hisilicon/hibmc: move display contrl config to hibmc_probe() Lin He <helin52(a)huawei.com> drm/hisilicon/hibmc: fix no showing when no connectors connected Lin He <helin52(a)huawei.com> drm/hisilicon/hibmc: add updating link cap in DP detect() Kuldeep Singh <kuldeep.singh(a)oss.qualcomm.com> arm64: dts: qcom: sm8450: Fix ICE reg size Kuldeep Singh <kuldeep.singh(a)oss.qualcomm.com> arm64: dts: qcom: kodiak: Fix ICE reg size Cristian Marussi <cristian.marussi(a)arm.com> clk: scmi: Fix clock rate rounding Hsiu Che Yu <yu.whisper.personal(a)gmail.com> rust: alloc: fix `Vec::extend_with` SAFETY comment Chen-Yu Tsai <wenst(a)chromium.org> arm64: dts: mediatek: mt8192-asurada: Move PCIe DMA bounce buffer to host Stefan Metzmacher <metze(a)samba.org> uaccess: fix ignored_trailing logic in copy_struct_to_user() Matt Bobrowski <mattbobrowski(a)google.com> bpf: fix crash in bpf_[set|remove]_dentry_xattr for negative dentries Luca Leonardo Scorcia <l.scorcia(a)gmail.com> soc: mediatek: mtk-mmsys: Restore MT8167 routing masks lost during merge Sean Christopherson <seanjc(a)google.com> iommu/amd: Fix a stale comment about which legacy mode is user visible Dmitry Baryshkov <dmitry.baryshkov(a)oss.qualcomm.com> media: venus: scale MMCX power domain on SM8250 Dmitry Baryshkov <dmitry.baryshkov(a)oss.qualcomm.com> media: iris: scale MMCX power domain on SM8250 Wenmeng Liu <wenmeng.liu(a)oss.qualcomm.com> media: qcom: camss: vfe: fix PIX subdev naming on VFE lite Shuangpeng Bai <shuangpeng.kernel(a)gmail.com> nilfs2: fix backing_dev_info reference leak Alexander Aring <aahringo(a)redhat.com> dlm: fix add msg handle in send_queue ordered Krzysztof Kozlowski <krzysztof.kozlowski(a)oss.qualcomm.com> ARM: multi_v7_defconfig: Correct QCOM_RPMH and QCOM_RPMHPD Weiming Shi <bestswngs(a)gmail.com> crypto: asymmetric_keys - fix OOB read in pefile_digest_pe_contents Thorsten Blum <thorsten.blum(a)linux.dev> crypto: ecrdsa - fix unknown OID check in ecrdsa_param_curve Lothar Rubusch <l.rubusch(a)gmail.com> crypto: atmel-sha204a - fix blocking and non-blocking rng logic Tycho Andersen (AMD) <tycho(a)kernel.org> crypto: ccp - Fix snp_filter_reserved_mem_regions() off-by-one Tycho Andersen (AMD) <tycho(a)kernel.org> crypto: ccp - Reverse the cleanup order in psp_dev_destroy() Di Shen <di.shen(a)unisoc.com> OPP: Fix race between OPP addition and lookup Zhan Xusheng <zhanxusheng1024(a)gmail.com> alarmtimer: Remove stale return description from alarm_handle_timer() Chris Brandt <chris.brandt(a)renesas.com> drm: renesas: rz-du: mipi_dsi: Fix return path on error Kuniyuki Iwashima <kuniyu(a)google.com> vxlan: Fix potential null-ptr-deref in vxlan_gro_prepare_receive(). Peng Fan <peng.fan(a)nxp.com> Revert "arm64: dts: imx8mp-kontron: Add support for reading SD_VSEL signal" Peng Fan <peng.fan(a)nxp.com> Revert "arm64: dts: imx8mm-kontron: Add support for reading SD_VSEL signal" Peng Fan <peng.fan(a)nxp.com> arm64: dts: imx8x-colibri: Correct SODIMM PAD settings Weixin Guo <2298701336(a)qq.com> arm64: dts: rockchip: fix rk809 interrupt pin on rk3566-roc-pc Brian Norris <briannorris(a)chromium.org> arm64: dts: rockchip: Add #{address,size}-cells to Chromium-based /firmware Brian Norris <briannorris(a)chromium.org> ARM: dts: rockchip: Add #{address,size}-cells to Chromium-based /firmware David Heidelberg <david(a)ixit.cz> drm/panel: Clean up S6E3HA2 config dependencies and fill help text Alice Ryhl <aliceryhl(a)google.com> drm/gpuvm: take refcount on DRM device Marek Vasut <marex(a)nabladev.com> dt-bindings: vendor-prefixes: Add Displaytech Ltd. Felix Gu <ustc.gu(a)gmail.com> pinctrl: sunxi: fix regulator leak in sunxi_pmx_request() error path Conor Dooley <conor.dooley(a)microchip.com> dts: spacemit: set console baud rate on bpif3 Masami Hiramatsu (Google) <mhiramat(a)kernel.org> lib/vsprintf: Fix to check field_width and precision Damian Muszynski <damian.muszynski(a)intel.com> crypto: qat - fix heartbeat error injection Ashish Mhetre <amhetre(a)nvidia.com> memory: tegra: Wire up system sleep PM ops Nas Chung <nas.chung(a)chipsnmedia.com> media: v4l2-common: Add YUV24 format info Samuel Holland <samuel(a)sholland.org> media: cedrus: Fix failure to clean up hardware on probe failure Felix Gu <ustc.gu(a)gmail.com> watchdog: sprd_wdt: Remove redundant sprd_wdt_disable() on register failure Balakrishnan Sambath <balakrishnan.s(a)microchip.com> watchdog: sama5d4_wdt: Fix WDDIS detection on SAM9X60 and SAMA7G5 Yingjie Gao <gaoyingjie(a)uniontech.com> watchdog: sp5100_tco: Use EFCH MMIO for newer Hygon FCH Gabriele Monaco <gmonaco(a)redhat.com> Documentation/rv: Replace stale website link Jihed Chaibi <jihed.chaibi.dev(a)gmail.com> ARM: dts: am335x-sl50: Fix audio bitclock and frame master endpoint Tristan Madani <tristan(a)talencesecurity.com> wifi: ath9k: fix OOB access from firmware tx status queue ID Chen-Yu Tsai <wenst(a)chromium.org> pinctrl: mediatek: eint: Drop base from mtk_eint_chip_write_mask() Prasanna Kumar T S M <ptsm(a)linux.microsoft.com> soc: xilinx: Shutdown and free rx mailbox channel Xingjing Deng <micro6947(a)gmail.com> kconfig: fix potential NULL pointer dereference in conf_askvalue Tristan Madani <tristan(a)talencesecurity.com> wifi: rtw89: add bounds check on firmware mac_id in link lookup Tristan Madani <tristan(a)talencesecurity.com> wifi: rtw88: fix OOB read from firmware RX descriptor exceeding DMA buffer Shin-Yi Lin <isaiah(a)realtek.com> wifi: rtw89: Correct data type for scan index to avoid infinite loop Chin-Yen Lee <timlee(a)realtek.com> wifi: rtw88: fix wrong pci_get_drvdata type in AER handlers Christos Longros <chris.longros(a)gmail.com> wifi: rtw89: fix wrong pci_get_drvdata type in AER handlers Danilo Krummrich <dakr(a)kernel.org> driver core: use READ_ONCE() for dev->driver in dev_has_sync_state() Srinivasan Shanmugam <srinivasan.shanmugam(a)amd.com> drm/amdkfd: Validate CRIU-restored IDs before idr_alloc Krzysztof Kozlowski <krzysztof.kozlowski(a)oss.qualcomm.com> dt-bindings: pinctrl: nvidia,tegra234: Add missing required block Jon Hunter <jonathanh(a)nvidia.com> arm64: tegra: Fix Tegra234 MGBE PTP clock Louis Kotze <loukot(a)gmail.com> wifi: cfg80211: fix grammar in MLO group key error message Krzysztof Kozlowski <krzysztof.kozlowski(a)oss.qualcomm.com> arm64: dts: qcom: sdm845-mezzanine: Fix camss ports unit_address_vs_reg warning Krzysztof Kozlowski <krzysztof.kozlowski(a)oss.qualcomm.com> arm64: dts: qcom: sc8180x: Fix phy simple_bus_reg warning Krzysztof Kozlowski <krzysztof.kozlowski(a)oss.qualcomm.com> arm64: dts: qcom: ipq5424: Fix USB simple_bus_reg warnings Diederik de Haas <diederik(a)cknow-tech.com> arm64: dts: rockchip: Fix gmac0 reset pin for NanoPi R5S Quentin Schulz <quentin.schulz(a)cherry.de> arm64: dts: rockchip: fix Ethernet PHY not found on PX30 Cobra Baolin Liu <liubaolin(a)kylinos.cn> Documentation: proc: fix section numbering in table of contents Gregory Bell <grbell(a)redhat.com> selftests/bpf: Use local type for bpf_fou_encap in test_tunnel_kern Gregory Bell <grbell(a)redhat.com> selftests/bpf: Use local type for flow_offload_tuple_rhash in xdp_flowtable Yang Wang <kevinyang.wang(a)amd.com> drm/amd/pm: remove trailing semicolon from AMDGPU_PM_POLICY_ATTR macro Nick Hu <nick.hu(a)sifive.com> dt-bindings: timer: Remove sifive,fine-ctr-bits property Matt Bobrowski <mattbobrowski(a)google.com> selftests/bpf: Fix off-by-one in bpf_cpumask_populate related selftest Aaron Tomlin <atomlin(a)atomlin.com> libbpf: Report error when a negative kprobe offset is specified Yuho Choi <dbgh9129(a)gmail.com> drm/radeon: fix memory leak in radeon_ring_restore() on lock failure Werner Kasselman <werner(a)verivus.ai> drm/radeon: fix integer overflow in radeon_align_pitch() Werner Kasselman <werner(a)verivus.ai> drm/amdgpu: fix integer overflow in amdgpu_gem_align_pitch() Jonathan Cavitt <jonathan.cavitt(a)intel.com> drm/gpuvm: Do not prepare NULL objects Matthew Brost <matthew.brost(a)intel.com> drm/gpusvm: Reject VMAs with VM_IO or VM_PFNMAP when creating SVM ranges Tomi Valkeinen <tomi.valkeinen(a)ideasonboard.com> drm/tidss: Drop extra drm_mode_config_reset() call Thomas Zimmermann <tzimmermann(a)suse.de> drm/rockchip: Test for imported buffers with drm_gem_is_imported() Cristian Ciocaltea <cristian.ciocaltea(a)collabora.com> drm/rockchip: dw_dp: Fix null-ptr-deref in dw_dp_remove() Cristian Ciocaltea <cristian.ciocaltea(a)collabora.com> drm/rockchip: dw_dp: Switch to drmm_kzalloc() Max Zhen <max.zhen(a)amd.com> accel/amdxdna: Fix leak when pinning ubuf pages Chen Ni <nichen(a)iscas.ac.cn> clocksource/drivers/sun5i: Handle error returns from devm_reset_control_get_optional_exclusive() Stafford Horne <shorne(a)gmail.com> openrisc: mm: Fix section mismatch between map_page and __set_fixmap Jiacheng Yu <yujiacheng3(a)huawei.com> fbcon: Use correct type for vc_resize() return value Ian Bridges <icb(a)fastmail.org> fbcon: fix NULL pointer dereference for a console without vc_data David Howells <dhowells(a)redhat.com> afs: Fix uncancelled rxrpc OOB message handler David Howells <dhowells(a)redhat.com> afs: Fix further netns teardown to cancel the preallocation charger Nan Li <tonanli66(a)gmail.com> afs: handle CB.InitCallBackState3 requests without a server record Matvey Kovalev <matvey.kovalev(a)ispras.ru> afs: fix NULL pointer dereference in afs_get_tree() David Howells <dhowells(a)redhat.com> afs: Fix netns teardown to cancel the preallocation charger David Howells <dhowells(a)redhat.com> rxrpc: Fix double unlock in rxrpc_recvmsg() David Howells <dhowells(a)redhat.com> rxrpc: Fix leak of connection from OOB challenge David Howells <dhowells(a)redhat.com> rxrpc: Fix the reception of a reply packet before data transmission Wyatt Feng <bronzed_45_vested(a)icloud.com> rxrpc: Fix ACKALL packet handling David Howells <dhowells(a)redhat.com> rxrpc: Fix oob challenge leak in cleanup after notification failure David Howells <dhowells(a)redhat.com> rxrpc: Fix rxrpc_rotate_tx_rotate() to check there's something to rotate David Howells <dhowells(a)redhat.com> rxrpc: Fix potential infinite loop in rxrpc_recvmsg() David Howells <dhowells(a)redhat.com> rxrpc: Fix leak of released call in recvmsg(MSG_PEEK) David Howells <dhowells(a)redhat.com> rxrpc: Fix socket notification race David Howells <dhowells(a)redhat.com> rxrpc: Fix UAF in rxgk_issue_challenge() Hyunwoo Kim <imv4bel(a)gmail.com> rxrpc: Don't move a peeked OOB message onto the pending queue Jeffrey Altman <jaltman(a)auristor.com> rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc Li Daming <d4n.for.sec(a)gmail.com> rxrpc: serialize kernel accept preallocation with socket teardown Matthias Feser <mfe(a)KBSgmbhfr.onmicrosoft.com> serial: 8250_omap: clear rx_running on zero-length DMA completes Tapio Reijonen <tapio.reijonen(a)vaisala.com> serial: max310x: implement gpio_chip::get_direction() Stephan Gerhold <stephan.gerhold(a)linaro.org> serial: msm: Disable DMA for kernel console UART Guoniu Zhou <guoniu.zhou(a)oss.nxp.com> dt-bindings: power: imx93: Add MIPI PHY power domain Chen-Yu Tsai <wens(a)kernel.org> dt-bindings: media: sun4i-a10-video-engine: Add interconnect properties Ricardo Ribalda <ribalda(a)chromium.org> media: uvcvideo: Fix sequence number when no EOF Ricardo Ribalda <ribalda(a)chromium.org> media: uvcvideo: Relax the constrains for interpolating the hw clock Ricardo Ribalda <ribalda(a)chromium.org> media: uvcvideo: Do not add clock samples with small sof delta Ricardo Ribalda <ribalda(a)chromium.org> media: uvcvideo: Fix dev_sof filtering in hw timestamp Ricardo Ribalda <ribalda(a)chromium.org> media: uvcvideo: Fix buffer sequence in frame gaps Ricardo Ribalda <ribalda(a)chromium.org> media: uvcvideo: Avoid partial metadata buffers Ricardo Ribalda <ribalda(a)chromium.org> media: uvcvideo: Use hw timestaming if the clock buffer is full Damien Laine <damien.laine(a)gmail.com> ALSA: hda/realtek: Fix speakers on Legion Pro 7 16ARX8H with codec SSID 17aa:38a7 Xu Rao <raoxu(a)uniontech.com> ALSA: hda: Fix cached processing coefficient verbs Zhang Heng <zhangheng(a)kylinos.cn> ALSA: hda: conexant: Remove mic bias threshold override Eckhart Mohr <e.mohr(a)tuxedocomputers.com> ALSA: hda/realtek: Add quirk for TongFang X6xx45xU Kuniyuki Iwashima <kuniyu(a)google.com> af_unix: Drop all SCM attributes for SOCKMAP. Vasant Hegde <vasant.hegde(a)amd.com> iommu/amd: Use maximum PPR log buffer size when SNP is enabled on Family 0x19 Vasant Hegde <vasant.hegde(a)amd.com> iommu/amd: Use maximum Event log buffer size when SNP is enabled on Family 0x19 Rochan Avlur <rochan.avlur(a)gmail.com> exfat: preserve benign secondary entries during rename and move Daniel Borkmann <daniel(a)iogearbox.net> selftests/bpf: Add tests for stale delta leaking through id reassignment Daniel Borkmann <daniel(a)iogearbox.net> selftests/bpf: Add tests for delta tracking when src_reg == dst_reg Daniel Borkmann <daniel(a)iogearbox.net> bpf: Clear delta when clearing reg id for non-{add,sub} ops Daniel Borkmann <daniel(a)iogearbox.net> selftests/bpf: Add a test cases for sync_linked_regs regarding zext propagation Puranjay Mohan <puranjay(a)kernel.org> selftests/bpf: Add tests for improved linked register tracking Puranjay Mohan <puranjay(a)kernel.org> selftests: bpf: Add test for multiple syncs from linked register Sean Anderson <sean.anderson(a)linux.dev> media: uvcvideo: Fix deadlock if uvc_status_stop is called from async_ctrl.work Eric Biggers <ebiggers(a)kernel.org> crypto: sun4i-ss - Remove insecure and unused rng_alg Sagi Grimberg <sagi(a)grimberg.me> nvmet-tcp: Fix potential UAF when ddgst mismatch Shivam Kumar <kumar.shivam43666(a)gmail.com> nvmet-tcp: check INIT_FAILED before nvmet_req_uninit in digest error path Michael Bommarito <michael.bommarito(a)gmail.com> iommu/vt-d: Clear Present bit before tearing down scalable-mode context entry Hyunwoo Kim <imv4bel(a)gmail.com> KVM: arm64: Bound used_lrs when flushing the pKVM hyp vCPU Muhammet Kaan KILINÇ <muhammetkaankilinc(a)gmail.com> crypto: algif_skcipher - force synchronous processing Kuniyuki Iwashima <kuniyu(a)google.com> tcp: Add preempt_{disable,enable}_nested() in reqsk_queue_hash_req(). ChenXiaoSong <chenxiaosong(a)kylinos.cn> smb/server: do not require delete access for non-replacing links Roger Pau Monne <roger.pau(a)citrix.com> nvme-pci: DMA unmap the correct regions in nvme_free_sgls ------------- Diffstat: Documentation/ABI/testing/sysfs-bus-i3c | 11 + Documentation/admin-guide/pm/cpufreq.rst | 6 +- Documentation/arch/arm64/cpu-hotplug.rst | 28 +- .../bindings/clock/qcom,x1e80100-camcc.yaml | 1 + .../bindings/dma/nvidia,tegra186-gpc-dma.yaml | 23 +- .../media/allwinner,sun4i-a10-video-engine.yaml | 10 + .../devicetree/bindings/net/microchip,lan8650.yaml | 2 +- .../devicetree/bindings/net/renesas,ether.yaml | 3 +- .../bindings/phy/qcom,sc8280xp-qmp-pcie-phy.yaml | 13 +- .../pinctrl/nvidia,tegra234-pinmux-aon.yaml | 4 + .../bindings/pinctrl/nvidia,tegra234-pinmux.yaml | 4 + .../bindings/regulator/mt6359-regulator.yaml | 43 -- .../devicetree/bindings/timer/sifive,clint.yaml | 16 - .../devicetree/bindings/vendor-prefixes.yaml | 2 + Documentation/driver-api/nvdimm/btt.rst | 5 +- Documentation/driver-api/pci/pci.rst | 3 + Documentation/filesystems/proc.rst | 14 +- Documentation/netlink/specs/handshake.yaml | 1 + Documentation/netlink/specs/rt-link.yaml | 6 + Documentation/networking/bonding.rst | 23 + Documentation/trace/eprobetrace.rst | 4 + Documentation/trace/rv/monitor_sched.rst | 7 +- Makefile | 4 +- arch/alpha/kernel/pci-sysfs.c | 13 +- arch/arm/boot/dts/nvidia/tegra124-nyan.dtsi | 5 + arch/arm/boot/dts/nvidia/tegra124-venice2.dts | 5 + arch/arm/boot/dts/nxp/imx/imx6ul-var-som.dtsi | 4 - arch/arm/boot/dts/rockchip/rk3288-veyron.dtsi | 5 + arch/arm/boot/dts/st/stm32mp151c-mecio1r0.dts | 128 +++++ arch/arm/boot/dts/st/stm32mp153c-mecio1r1.dts | 144 +++++ arch/arm/boot/dts/st/stm32mp15x-mecio1-io.dtsi | 146 +---- arch/arm/boot/dts/ti/omap/am335x-sl50.dts | 4 +- arch/arm/configs/axm55xx_defconfig | 1 - arch/arm/configs/dove_defconfig | 1 - arch/arm/configs/ep93xx_defconfig | 1 - arch/arm/configs/mmp2_defconfig | 1 - arch/arm/configs/multi_v7_defconfig | 4 +- arch/arm/configs/mv78xx0_defconfig | 1 - arch/arm/configs/sunxi_defconfig | 1 - arch/arm/mach-imx/cpu-imx31.c | 9 +- arch/arm/mach-imx/mm-imx3.c | 2 + arch/arm64/boot/dts/allwinner/sun55i-a523.dtsi | 3 +- .../boot/dts/freescale/fsl-lx2162a-clearfog.dts | 2 +- arch/arm64/boot/dts/freescale/imx8dxl-evk.dts | 2 - .../arm64/boot/dts/freescale/imx8mm-kontron-bl.dts | 10 +- .../boot/dts/freescale/imx8mm-kontron-osm-s.dtsi | 7 +- .../boot/dts/freescale/imx8mp-kontron-bl-osm-s.dts | 14 +- .../boot/dts/freescale/imx8mp-kontron-osm-s.dtsi | 7 +- .../dts/freescale/imx8mp-tqma8mpql-mba8mpxl.dts | 3 + arch/arm64/boot/dts/freescale/imx8qxp-mek.dts | 1 - arch/arm64/boot/dts/freescale/imx8ulp-evk.dts | 4 +- arch/arm64/boot/dts/freescale/imx8x-colibri.dtsi | 4 +- arch/arm64/boot/dts/freescale/imx95-19x19-evk.dts | 2 +- arch/arm64/boot/dts/freescale/imx95.dtsi | 10 +- arch/arm64/boot/dts/freescale/s32g3.dtsi | 2 +- arch/arm64/boot/dts/mediatek/mt8192-asurada.dtsi | 2 +- arch/arm64/boot/dts/nvidia/tegra132-norrin.dts | 5 + arch/arm64/boot/dts/nvidia/tegra210-smaug.dts | 5 + arch/arm64/boot/dts/nvidia/tegra234.dtsi | 8 +- arch/arm64/boot/dts/qcom/ipq5424.dtsi | 4 +- arch/arm64/boot/dts/qcom/lemans.dtsi | 18 +- arch/arm64/boot/dts/qcom/qcs8300.dtsi | 6 +- arch/arm64/boot/dts/qcom/sc7180.dtsi | 6 +- arch/arm64/boot/dts/qcom/sc7280.dtsi | 8 +- arch/arm64/boot/dts/qcom/sc8180x.dtsi | 2 +- arch/arm64/boot/dts/qcom/sdm630.dtsi | 9 +- .../qcom/sdm845-db845c-navigation-mezzanine.dtso | 5 + arch/arm64/boot/dts/qcom/sm8450.dtsi | 8 +- arch/arm64/boot/dts/qcom/sm8550.dtsi | 6 +- arch/arm64/boot/dts/qcom/sm8650.dtsi | 6 +- arch/arm64/boot/dts/qcom/sm8750.dtsi | 6 +- arch/arm64/boot/dts/rockchip/px30-cobra.dtsi | 2 +- arch/arm64/boot/dts/rockchip/px30-ringneck.dtsi | 2 +- arch/arm64/boot/dts/rockchip/rk3399-gru.dtsi | 5 + arch/arm64/boot/dts/rockchip/rk3566-roc-pc.dts | 2 +- arch/arm64/boot/dts/rockchip/rk3568-nanopi-r5s.dts | 6 +- arch/arm64/boot/dts/st/stm32mp251.dtsi | 8 +- arch/arm64/boot/dts/ti/k3-am62a7-sk.dts | 2 + arch/arm64/include/asm/kvm_hyp.h | 1 + arch/arm64/include/asm/kvm_nested.h | 10 + arch/arm64/kernel/acpi.c | 2 + arch/arm64/kernel/entry-fpsimd.S | 8 +- arch/arm64/kernel/hw_breakpoint.c | 9 + arch/arm64/kernel/smp.c | 28 +- arch/arm64/kvm/arm.c | 2 + arch/arm64/kvm/at.c | 35 +- arch/arm64/kvm/emulate-nested.c | 1 + arch/arm64/kvm/hyp/include/hyp/switch.h | 11 +- arch/arm64/kvm/hyp/nvhe/hyp-main.c | 9 + arch/arm64/kvm/hyp/pgtable.c | 3 +- arch/arm64/kvm/nested.c | 222 ++++---- arch/arm64/kvm/vgic/vgic-its.c | 2 + arch/arm64/kvm/vgic/vgic.c | 20 +- arch/arm64/mm/mmu.c | 11 +- arch/arm64/tools/sysreg | 2 +- arch/loongarch/include/asm/kexec.h | 3 +- arch/loongarch/include/asm/pgtable.h | 4 + arch/loongarch/kvm/exit.c | 1 - arch/loongarch/kvm/irqfd.c | 3 +- arch/loongarch/kvm/vcpu.c | 11 +- arch/loongarch/mm/pageattr.c | 2 +- arch/loongarch/net/bpf_jit.c | 28 +- arch/mips/dec/int-handler.S | 2 +- arch/mips/dec/platform.c | 6 +- arch/mips/dec/prom/init.c | 6 +- arch/mips/dec/setup.c | 6 - arch/mips/fw/lib/call_o32.S | 2 +- arch/mips/include/asm/dec/prom.h | 15 +- arch/mips/kernel/mips-mt-fpaff.c | 28 +- arch/mips/mm/init.c | 17 +- arch/mips/n64/init.c | 2 +- arch/mips/ralink/mt7621.c | 2 +- arch/mips/sgi-ip22/ip22-gio.c | 7 +- arch/openrisc/include/asm/cacheflush.h | 4 + arch/openrisc/kernel/jump_label.c | 2 +- arch/openrisc/kernel/patching.c | 3 + arch/openrisc/kernel/smp.c | 21 + arch/openrisc/mm/cache.c | 16 + arch/openrisc/mm/init.c | 2 +- arch/powerpc/kernel/dt_cpu_ftrs.c | 9 + arch/powerpc/kexec/core_64.c | 4 +- arch/powerpc/perf/core-fsl-emb.c | 3 +- arch/powerpc/platforms/8xx/cpm1.c | 26 + arch/powerpc/platforms/cell/spufs/file.c | 6 +- arch/powerpc/platforms/powernv/setup.c | 3 +- arch/powerpc/platforms/pseries/Kconfig | 1 + .../platforms/pseries/papr_platform_attributes.c | 8 +- arch/riscv/boot/dts/sophgo/sg2042-cpus.dtsi | 236 ++++---- arch/riscv/boot/dts/sophgo/sg2044-cpus.dtsi | 236 ++++---- arch/riscv/boot/dts/spacemit/k1-bananapi-f3.dts | 2 +- arch/riscv/boot/dts/spacemit/k1-milkv-jupiter.dts | 2 +- arch/riscv/include/asm/cpu_ops.h | 2 +- arch/riscv/kernel/asm-offsets.c | 4 +- arch/riscv/kernel/cacheinfo.c | 2 +- arch/riscv/kernel/cpu-hotplug.c | 4 +- arch/riscv/kernel/cpu_ops_sbi.c | 11 +- arch/riscv/kernel/entry.S | 8 +- arch/riscv/kernel/machine_kexec.c | 3 + arch/riscv/kernel/probes/rethook_trampoline.S | 3 + arch/riscv/kernel/stacktrace.c | 2 +- arch/riscv/kernel/vdso/Makefile | 6 +- arch/s390/kernel/diag/diag310.c | 7 +- arch/s390/kernel/perf_cpum_cf.c | 3 + arch/s390/kernel/process.c | 2 +- arch/s390/kvm/pci.c | 12 +- arch/s390/mm/mmap.c | 2 +- arch/sparc/kernel/led.c | 2 +- arch/x86/Kconfig.cpu | 8 +- arch/x86/boot/compressed/acpi.c | 7 +- arch/x86/boot/early_serial_console.c | 11 +- arch/x86/events/amd/brs.c | 10 +- arch/x86/events/amd/core.c | 18 +- arch/x86/events/amd/lbr.c | 3 +- arch/x86/events/amd/uncore.c | 6 +- arch/x86/events/intel/uncore_discovery.c | 4 +- arch/x86/kernel/cpu/cpu.h | 1 - arch/x86/kernel/uprobes.c | 26 +- arch/x86/kvm/irq.c | 4 +- arch/x86/kvm/lapic.c | 8 +- arch/x86/kvm/svm/sev.c | 6 +- arch/x86/kvm/vmx/nested.c | 2 + arch/x86/kvm/vmx/tdx.c | 12 +- arch/x86/platform/olpc/olpc-xo15-sci.c | 1 + arch/x86/video/video-common.c | 23 +- block/blk.h | 13 +- block/genhd.c | 4 - block/ioctl.c | 2 +- crypto/algif_skcipher.c | 75 +-- crypto/asymmetric_keys/verify_pefile.c | 2 + crypto/ecrdsa.c | 2 +- crypto/rng.c | 11 + drivers/accel/amdxdna/aie2_ctx.c | 4 +- drivers/accel/amdxdna/amdxdna_gem.c | 3 +- drivers/accel/amdxdna/amdxdna_ubuf.c | 12 +- drivers/accel/ivpu/ivpu_fw_log.c | 4 + drivers/accel/ivpu/ivpu_job.c | 10 +- drivers/acpi/ac.c | 6 +- drivers/acpi/acpi_ipmi.c | 4 +- drivers/acpi/acpi_pad.c | 6 +- drivers/acpi/acpi_tad.c | 6 +- drivers/acpi/bus.c | 70 +++ drivers/acpi/nfit/core.c | 89 ++- drivers/acpi/pfr_telemetry.c | 6 +- drivers/acpi/pfr_update.c | 6 +- drivers/acpi/processor_idle.c | 4 +- drivers/acpi/resource.c | 6 +- drivers/acpi/riscv/cpuidle.c | 2 +- drivers/acpi/riscv/rimt.c | 7 +- drivers/acpi/thermal.c | 2 +- drivers/amba/bus.c | 37 +- drivers/android/binder.c | 18 +- drivers/ata/libata-core.c | 23 +- drivers/ata/libata-scsi.c | 7 +- drivers/ata/pata_pxa.c | 1 + drivers/ata/sata_gemini.c | 2 +- drivers/base/core.c | 83 ++- drivers/base/dd.c | 7 +- drivers/base/firmware_loader/main.c | 71 ++- drivers/base/power/main.c | 6 +- drivers/base/property.c | 4 +- drivers/block/drbd/drbd_receiver.c | 5 + drivers/bluetooth/bpa10x.c | 8 +- drivers/bluetooth/btmtk.c | 4 +- drivers/bluetooth/btrtl.c | 5 +- drivers/bluetooth/hci_qca.c | 2 +- drivers/bluetooth/hci_vhci.c | 10 + drivers/bus/imx-weim.c | 6 - drivers/bus/mhi/ep/main.c | 9 +- drivers/bus/mhi/host/pci_generic.c | 20 +- drivers/bus/sunxi-rsb.c | 3 + drivers/cdx/cdx.c | 40 +- drivers/char/ipmi/ipmi_msghandler.c | 10 +- drivers/char/tlclk.c | 4 + drivers/char/tpm/eventlog/tpm1.c | 4 +- drivers/char/tpm/tpm-dev.c | 2 +- drivers/char/tpm/tpm2-cmd.c | 6 +- drivers/char/tpm/tpm2-sessions.c | 45 +- drivers/char/tpm/tpm_tis_core.c | 35 +- drivers/char/tpm/tpmrm-dev.c | 2 +- drivers/char/virtio_console.c | 52 +- drivers/clk/at91/pmc.c | 2 +- drivers/clk/at91/sam9x7.c | 18 +- drivers/clk/clk-scmi.c | 4 +- drivers/clk/clk-scpi.c | 2 +- drivers/clk/qcom/a53-pll.c | 2 +- drivers/clk/qcom/camcc-x1e80100.c | 64 +++ drivers/clk/qcom/ipq-cmn-pll.c | 11 +- drivers/clk/renesas/rzg2l-cpg.c | 6 +- drivers/clocksource/timer-sun5i.c | 3 + drivers/cpufreq/cpufreq_conservative.c | 12 +- drivers/cpufreq/intel_pstate.c | 6 +- drivers/crypto/Kconfig | 1 - drivers/crypto/allwinner/Kconfig | 8 - drivers/crypto/allwinner/sun4i-ss/Makefile | 1 - drivers/crypto/allwinner/sun4i-ss/sun4i-ss-core.c | 36 -- drivers/crypto/allwinner/sun4i-ss/sun4i-ss-prng.c | 69 --- drivers/crypto/allwinner/sun4i-ss/sun4i-ss.h | 20 - drivers/crypto/atmel-sha204a.c | 16 +- drivers/crypto/cavium/cpt/cptvf_reqmanager.c | 4 +- drivers/crypto/ccp/psp-dev.c | 12 +- drivers/crypto/ccp/sev-dev.c | 10 +- drivers/crypto/hisilicon/qm.c | 4 +- drivers/crypto/inside-secure/eip93/eip93-main.c | 2 + drivers/crypto/inside-secure/eip93/eip93-regs.h | 2 +- .../intel/qat/qat_common/adf_accel_devices.h | 2 + drivers/crypto/intel/qat/qat_common/adf_aer.c | 7 +- .../crypto/intel/qat/qat_common/adf_common_drv.h | 3 +- .../intel/qat/qat_common/adf_heartbeat_inject.c | 6 +- .../crypto/intel/qat/qat_common/adf_hw_arbiter.c | 25 - drivers/crypto/intel/qat/qat_common/adf_isr.c | 39 ++ drivers/crypto/intel/qat/qat_common/adf_sriov.c | 20 +- drivers/crypto/marvell/octeontx/otx_cptvf_reqmgr.c | 4 +- drivers/crypto/tegra/tegra-se-aes.c | 33 +- drivers/crypto/xilinx/xilinx-trng.c | 75 +-- drivers/cxl/core/features.c | 2 +- drivers/dax/kmem.c | 6 + drivers/dibs/dibs_loopback.c | 5 + drivers/dma-buf/dma-fence-unwrap.c | 3 + drivers/dma/dma-axi-dmac.c | 68 ++- drivers/dma/dmaengine.c | 3 +- drivers/dma/dw-edma/dw-edma-core.h | 2 +- drivers/dma/dw-edma/dw-edma-v0-core.c | 6 + drivers/dma/imx-sdma.c | 4 +- drivers/dma/qcom/gpi.c | 1 + drivers/dma/tegra186-gpc-dma.c | 7 + drivers/dpll/dpll_core.c | 140 +++-- drivers/edac/igen6_edac.c | 6 + drivers/edac/skx_common.c | 3 + drivers/firmware/arm_ffa/driver.c | 27 +- drivers/firmware/arm_scmi/power.c | 6 +- drivers/firmware/arm_scmi/sensors.c | 2 +- drivers/firmware/smccc/soc_id.c | 2 +- drivers/fpga/dfl.c | 2 + drivers/fpga/microchip-spi.c | 3 + drivers/gpio/gpio-davinci.c | 4 +- drivers/gpio/gpio-dwapb.c | 116 ++-- drivers/gpio/gpio-f7188x.c | 6 +- drivers/gpio/gpio-htc-egpio.c | 6 +- drivers/gpio/gpio-mlxbf3.c | 3 +- drivers/gpio/gpio-mt7621.c | 283 +++++++--- drivers/gpio/gpio-mvebu.c | 6 +- drivers/gpio/gpio-palmas.c | 19 + drivers/gpio/gpio-tegra.c | 18 +- drivers/gpio/gpio-timberdale.c | 2 +- drivers/gpio/gpiolib-acpi-core.c | 19 +- drivers/gpio/gpiolib.c | 2 +- drivers/gpu/drm/amd/amdgpu/amdgpu_amdkfd_gpuvm.c | 16 +- drivers/gpu/drm/amd/amdgpu/amdgpu_device.c | 6 +- drivers/gpu/drm/amd/amdgpu/amdgpu_gem.c | 25 +- drivers/gpu/drm/amd/amdgpu/amdgpu_irq.c | 2 - drivers/gpu/drm/amd/amdgpu/amdgpu_mca.c | 3 + drivers/gpu/drm/amd/amdkfd/kfd_chardev.c | 3 + .../gpu/drm/amd/amdkfd/kfd_device_queue_manager.c | 20 +- drivers/gpu/drm/amd/amdkfd/kfd_events.c | 5 + drivers/gpu/drm/amd/amdkfd/kfd_svm.c | 1 + drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm.c | 10 +- .../amd/display/modules/info_packet/info_packet.c | 2 + drivers/gpu/drm/amd/pm/amdgpu_pm.c | 6 +- drivers/gpu/drm/drm_edid.c | 8 + drivers/gpu/drm/drm_gpusvm.c | 5 + drivers/gpu/drm/drm_gpuvm.c | 9 +- drivers/gpu/drm/drm_syncobj.c | 10 +- drivers/gpu/drm/hisilicon/hibmc/dp/dp_comm.h | 1 + drivers/gpu/drm/hisilicon/hibmc/dp/dp_hw.h | 1 + drivers/gpu/drm/hisilicon/hibmc/dp/dp_link.c | 2 +- drivers/gpu/drm/hisilicon/hibmc/hibmc_drm_de.c | 78 +-- drivers/gpu/drm/hisilicon/hibmc/hibmc_drm_dp.c | 35 +- drivers/gpu/drm/hisilicon/hibmc/hibmc_drm_drv.c | 14 + drivers/gpu/drm/hisilicon/hibmc/hibmc_drm_drv.h | 1 + drivers/gpu/drm/hisilicon/hibmc/hibmc_drm_vdac.c | 75 ++- drivers/gpu/drm/i915/display/intel_atomic.c | 6 + drivers/gpu/drm/i915/gt/intel_region_lmem.c | 2 +- drivers/gpu/drm/msm/dp/dp_display.c | 4 +- drivers/gpu/drm/msm/dp/dp_reg.h | 4 +- .../gpu/drm/nouveau/nvkm/subdev/bios/shadowramin.c | 3 +- drivers/gpu/drm/panel/Kconfig | 9 +- drivers/gpu/drm/panthor/panthor_sched.c | 25 +- drivers/gpu/drm/radeon/radeon_gem.c | 13 +- drivers/gpu/drm/radeon/radeon_ring.c | 4 +- drivers/gpu/drm/renesas/rz-du/rzg2l_mipi_dsi.c | 12 +- drivers/gpu/drm/rockchip/dw_dp-rockchip.c | 7 +- drivers/gpu/drm/rockchip/rockchip_drm_gem.c | 2 +- drivers/gpu/drm/tegra/dc.c | 4 +- drivers/gpu/drm/tegra/gem.c | 22 +- drivers/gpu/drm/tegra/gr2d.c | 19 +- drivers/gpu/drm/tegra/gr3d.c | 19 +- drivers/gpu/drm/tegra/submit.c | 3 +- drivers/gpu/drm/tidss/tidss_kms.c | 2 - drivers/gpu/drm/v3d/v3d_submit.c | 2 + drivers/gpu/drm/xe/Makefile | 4 +- drivers/gpu/drm/xe/tests/xe_pci.c | 1 - drivers/gpu/drm/xe/xe_debugfs.c | 2 +- drivers/gpu/drm/xe/xe_guc_relay.c | 13 +- drivers/gpu/drm/xe/xe_hw_engine.c | 4 +- drivers/gpu/drm/xe/xe_hwmon.c | 2 +- drivers/gpu/drm/xe/xe_pt.c | 60 +- drivers/gpu/drm/xe/xe_svm.h | 15 +- drivers/gpu/drm/xe/xe_vram.c | 2 +- drivers/gpu/drm/xe/xe_vsec.c | 7 +- drivers/gpu/drm/xe/xe_vsec.h | 4 +- drivers/gpu/host1x/bus.c | 62 +- drivers/gpu/host1x/job.c | 10 +- drivers/gpu/nova-core/falcon/hal/ga102.rs | 6 +- drivers/gpu/nova-core/firmware.rs | 8 +- drivers/gpu/nova-core/firmware/fwsec.rs | 4 +- drivers/gpu/nova-core/vbios.rs | 108 ++-- drivers/hid/bpf/hid_bpf_dispatch.c | 5 +- drivers/hid/hid-core.c | 7 + drivers/hid/hid-logitech-hidpp.c | 1 - drivers/hid/hid-picolcd_core.c | 3 +- drivers/hid/hid-playstation.c | 12 + drivers/hid/hid-wiimote-modules.c | 58 +- drivers/hv/mshv_synic.c | 5 + drivers/hv/vmbus_drv.c | 43 +- drivers/hwmon/Kconfig | 3 + drivers/hwmon/aspeed-g6-pwm-tach.c | 5 +- drivers/hwmon/asus_atk0110.c | 3 + drivers/hwmon/it87.c | 3 + drivers/hwmon/occ/common.c | 34 +- drivers/hwmon/occ/common.h | 1 + drivers/hwmon/pmbus/adm1275.c | 2 +- drivers/hwmon/pmbus/pmbus_core.c | 13 +- drivers/hwmon/w83627hf.c | 4 + drivers/hwmon/w83793.c | 1 + drivers/hwspinlock/qcom_hwspinlock.c | 5 +- drivers/hwtracing/coresight/coresight-core.c | 23 +- .../hwtracing/coresight/coresight-cti-platform.c | 1 + drivers/hwtracing/coresight/coresight-etm-perf.c | 5 +- drivers/hwtracing/coresight/coresight-etm4x-core.c | 62 +- drivers/hwtracing/coresight/coresight-etm4x.h | 2 - drivers/hwtracing/coresight/coresight-priv.h | 2 +- drivers/hwtracing/coresight/coresight-sysfs.c | 8 +- drivers/i2c/busses/i2c-imx.c | 36 +- drivers/i2c/busses/i2c-k1.c | 2 +- drivers/i2c/busses/i2c-mlxbf.c | 4 +- drivers/i2c/busses/i2c-mt65xx.c | 2 +- drivers/i2c/i2c-core-of.c | 5 - drivers/i3c/device.c | 46 +- drivers/i3c/internals.h | 4 + drivers/i3c/master.c | 316 +++++++++-- drivers/i3c/master/dw-i3c-master.c | 15 +- drivers/i3c/master/dw-i3c-master.h | 2 - drivers/i3c/master/i3c-master-cdns.c | 14 +- drivers/i3c/master/mipi-i3c-hci/core.c | 39 +- drivers/i3c/master/mipi-i3c-hci/dma.c | 6 +- drivers/i3c/master/mipi-i3c-hci/ext_caps.c | 55 +- drivers/i3c/master/mipi-i3c-hci/pio.c | 20 +- drivers/i3c/master/svc-i3c-master.c | 30 +- drivers/iio/accel/mma8452.c | 2 + drivers/iio/adc/xilinx-ams.c | 5 + drivers/iio/light/si1133.c | 14 +- drivers/iio/light/tcs3472.c | 38 +- drivers/iio/magnetometer/ak8975.c | 14 + drivers/iio/orientation/hid-sensor-rotation.c | 40 +- drivers/infiniband/core/cm.c | 13 +- drivers/infiniband/core/counters.c | 2 +- drivers/infiniband/hw/bnxt_re/Makefile | 2 +- drivers/infiniband/hw/bnxt_re/ib_verbs.c | 312 +---------- drivers/infiniband/hw/bnxt_re/ib_verbs.h | 4 + drivers/infiniband/hw/bnxt_re/main.c | 2 - drivers/infiniband/hw/bnxt_re/uapi.c | 364 ++++++++++++ drivers/infiniband/hw/hfi1/init.c | 13 +- drivers/infiniband/hw/hns/hns_roce_cq.c | 6 +- drivers/infiniband/hw/hns/hns_roce_debugfs.c | 19 +- drivers/infiniband/hw/hns/hns_roce_hem.c | 8 +- drivers/infiniband/hw/hns/hns_roce_hw_v2.c | 18 +- drivers/infiniband/hw/hns/hns_roce_main.c | 2 +- drivers/infiniband/hw/hns/hns_roce_mr.c | 6 +- drivers/infiniband/hw/hns/hns_roce_srq.c | 2 +- drivers/infiniband/hw/irdma/verbs.c | 19 +- drivers/infiniband/hw/irdma/verbs.h | 1 - drivers/infiniband/hw/mana/main.c | 3 +- drivers/infiniband/hw/mlx4/mlx4_ib.h | 1 + drivers/infiniband/hw/mlx4/mr.c | 9 +- drivers/infiniband/hw/mlx4/sysfs.c | 45 +- drivers/infiniband/hw/mlx5/devx.c | 30 +- drivers/infiniband/hw/mlx5/main.c | 17 +- drivers/infiniband/hw/mlx5/mlx5_ib.h | 9 + drivers/infiniband/hw/mlx5/mr.c | 29 +- drivers/infiniband/hw/mlx5/odp.c | 12 +- drivers/infiniband/hw/mlx5/qp.c | 13 +- drivers/infiniband/hw/mlx5/restrack.c | 3 - drivers/infiniband/hw/mlx5/umr.c | 93 ++- drivers/infiniband/hw/mlx5/umr.h | 9 +- drivers/infiniband/sw/rxe/rxe_mmap.c | 19 +- drivers/infiniband/sw/rxe/rxe_resp.c | 33 +- drivers/infiniband/sw/siw/siw_cm.c | 30 +- drivers/infiniband/ulp/srpt/ib_srpt.c | 5 +- drivers/input/misc/ims-pcu.c | 129 ++++- drivers/iommu/amd/amd_iommu.h | 3 + drivers/iommu/amd/amd_iommu_types.h | 32 +- drivers/iommu/amd/init.c | 140 +++-- drivers/iommu/amd/iommu.c | 2 +- drivers/iommu/amd/ppr.c | 8 +- drivers/iommu/arm/arm-smmu/arm-smmu-qcom.c | 2 +- drivers/iommu/intel/iommu.c | 6 +- drivers/iommu/intel/pasid.c | 4 +- drivers/iommu/iommufd/driver.c | 13 +- drivers/iommu/iommufd/eventq.c | 10 +- drivers/irqchip/irq-crossbar.c | 10 +- drivers/irqchip/irq-gic-v3-its.c | 6 +- drivers/irqchip/irq-riscv-imsic-early.c | 15 +- drivers/irqchip/irq-ts4800.c | 10 + drivers/leds/uleds.c | 3 +- drivers/mailbox/imx-mailbox.c | 3 +- drivers/mailbox/mailbox-mpfs.c | 2 +- drivers/mailbox/mtk-adsp-mailbox.c | 9 +- drivers/md/dm-bufio.c | 4 +- drivers/md/dm-era-target.c | 10 +- drivers/md/dm-integrity.c | 12 +- drivers/md/dm-ioctl.c | 4 +- drivers/md/dm-log.c | 3 + drivers/md/dm-pcache/dm_pcache.c | 8 + drivers/md/dm-stats.c | 10 +- drivers/md/dm-thin-metadata.c | 67 +-- drivers/md/dm-verity-loadpin.c | 2 +- drivers/md/dm-verity-target.c | 16 +- drivers/md/dm-verity.h | 2 +- drivers/md/md-bitmap.c | 13 +- drivers/md/md-bitmap.h | 2 +- drivers/md/md-llbitmap.c | 13 +- drivers/md/md.c | 38 +- drivers/md/md.h | 10 +- drivers/md/raid0.c | 4 +- drivers/md/raid1.c | 28 +- drivers/md/raid10.c | 5 +- drivers/md/raid5.c | 61 +- .../media/platform/nxp/imx8-isi/imx8-isi-core.c | 18 +- drivers/media/platform/qcom/camss/camss-vfe.c | 2 +- .../platform/qcom/iris/iris_platform_sm8250.c | 2 +- drivers/media/platform/qcom/iris/iris_probe.c | 7 + drivers/media/platform/qcom/venus/core.c | 7 +- drivers/media/platform/qcom/venus/core.h | 1 + drivers/media/platform/qcom/venus/helpers.c | 4 +- drivers/media/platform/qcom/venus/hfi_parser.c | 6 +- drivers/media/platform/qcom/venus/hfi_platform.c | 24 - drivers/media/platform/qcom/venus/hfi_platform.h | 2 - .../media/platform/qcom/venus/hfi_platform_v4.c | 20 +- .../media/platform/qcom/venus/hfi_platform_v6.c | 16 +- drivers/media/platform/qcom/venus/pm_helpers.c | 8 +- drivers/media/platform/rockchip/rga/rga-hw.c | 2 +- drivers/media/platform/rockchip/rga/rga-hw.h | 2 +- drivers/media/usb/uvc/uvc_status.c | 28 +- drivers/media/usb/uvc/uvc_video.c | 179 +++--- drivers/media/v4l2-core/v4l2-common.c | 1 + drivers/memory/tegra/mc.c | 14 + drivers/memstick/core/ms_block.c | 4 + drivers/mfd/cs42l43.c | 2 +- drivers/mfd/rsmu_i2c.c | 6 +- drivers/mfd/rsmu_spi.c | 5 +- drivers/mfd/sm501.c | 4 +- drivers/mfd/tps6586x.c | 2 +- drivers/mmc/core/block.c | 3 +- drivers/mmc/host/sdhci-esdhc-imx.c | 91 +-- drivers/mmc/host/sdhci-of-dwcmshc.c | 14 +- drivers/mmc/host/vub300.c | 26 +- drivers/mtd/devices/mchp23k256.c | 2 +- drivers/mtd/devices/slram.c | 22 +- drivers/mtd/maps/vmu-flash.c | 1 + drivers/mtd/nand/onenand/onenand_samsung.c | 7 +- drivers/mtd/nand/raw/fsl_ifc_nand.c | 9 +- drivers/mtd/nand/raw/lpc32xx_mlc.c | 12 +- drivers/mtd/nand/raw/lpc32xx_slc.c | 12 +- drivers/mtd/nand/raw/nand_base.c | 24 +- drivers/mtd/nand/raw/pl35x-nand-controller.c | 2 +- drivers/mtd/spi-nor/Kconfig | 1 - drivers/mtd/spi-nor/debugfs.c | 1 + drivers/mtd/spi-nor/spansion.c | 4 +- drivers/mtd/spi-nor/swp.c | 11 +- drivers/net/amt.c | 6 +- drivers/net/bonding/bond_3ad.c | 27 +- drivers/net/bonding/bond_main.c | 1 + drivers/net/bonding/bond_netlink.c | 16 + drivers/net/bonding/bond_options.c | 27 + drivers/net/can/usb/esd_usb.c | 5 +- drivers/net/dsa/qca/qca8k-leds.c | 3 +- drivers/net/dsa/realtek/rtl8366rb-leds.c | 8 +- drivers/net/dsa/sja1105/sja1105_ptp.c | 2 +- drivers/net/ethernet/airoha/airoha_eth.c | 6 +- drivers/net/ethernet/airoha/airoha_ppe.c | 3 +- drivers/net/ethernet/airoha/airoha_ppe_debugfs.c | 2 - drivers/net/ethernet/amazon/ena/ena_netdev.c | 23 +- drivers/net/ethernet/broadcom/bnx2x/bnx2x_cmn.c | 3 +- drivers/net/ethernet/broadcom/bnxt/bnxt.c | 77 ++- drivers/net/ethernet/broadcom/bnxt/bnxt.h | 19 +- drivers/net/ethernet/broadcom/bnxt/bnxt_ethtool.c | 21 +- drivers/net/ethernet/broadcom/genet/bcmgenet.c | 23 +- drivers/net/ethernet/cadence/macb_main.c | 29 +- .../ethernet/cavium/liquidio/cn23xx_pf_device.c | 18 +- drivers/net/ethernet/chelsio/cxgb4/t4_hw.c | 8 - .../ethernet/chelsio/inline_crypto/chtls/chtls.h | 2 +- .../chelsio/inline_crypto/chtls/chtls_io.c | 8 +- .../net/ethernet/freescale/dpaa2/dpaa2-switch.c | 10 +- drivers/net/ethernet/freescale/enetc/enetc.c | 7 + drivers/net/ethernet/freescale/fman/fman.c | 4 +- drivers/net/ethernet/freescale/gianfar.c | 16 +- drivers/net/ethernet/google/gve/gve_rx_dqo.c | 28 +- drivers/net/ethernet/hisilicon/hns3/hns3_ethtool.c | 31 +- .../ethernet/hisilicon/hns3/hns3pf/hclge_main.c | 108 +++- .../ethernet/hisilicon/hns3/hns3pf/hclge_main.h | 1 + drivers/net/ethernet/ibm/emac/core.c | 13 +- drivers/net/ethernet/intel/i40e/i40e_debug.h | 2 +- drivers/net/ethernet/intel/ice/ice_common.c | 1 - drivers/net/ethernet/intel/ice/ice_dpll.c | 20 +- drivers/net/ethernet/intel/ice/ice_eswitch.c | 4 +- drivers/net/ethernet/intel/ice/ice_ethtool.c | 12 +- drivers/net/ethernet/intel/ice/ice_main.c | 16 +- drivers/net/ethernet/intel/ice/ice_vf_lib.c | 2 +- drivers/net/ethernet/intel/idpf/virtchnl2.h | 12 +- drivers/net/ethernet/intel/igc/igc_main.c | 2 +- drivers/net/ethernet/marvell/mvneta.c | 3 + drivers/net/ethernet/marvell/octeontx2/af/mcs.c | 6 +- .../ethernet/marvell/octeontx2/af/rvu_debugfs.c | 3 +- .../ethernet/marvell/octeontx2/af/rvu_devlink.c | 27 +- .../net/ethernet/marvell/octeontx2/af/rvu_nix.c | 15 +- .../net/ethernet/marvell/octeontx2/af/rvu_npc.c | 40 +- .../ethernet/marvell/octeontx2/nic/cn10k_macsec.c | 10 +- .../net/ethernet/marvell/octeontx2/nic/otx2_pf.c | 83 ++- .../net/ethernet/marvell/octeontx2/nic/otx2_vf.c | 22 +- .../net/ethernet/marvell/prestera/prestera_main.c | 2 +- drivers/net/ethernet/mediatek/mtk_ppe.c | 4 +- drivers/net/ethernet/mediatek/mtk_wed_debugfs.c | 6 +- drivers/net/ethernet/mediatek/mtk_wed_mcu.c | 8 +- drivers/net/ethernet/mellanox/mlx5/core/en.h | 12 + .../ethernet/mellanox/mlx5/core/en/hv_vhca_stats.c | 37 +- .../ethernet/mellanox/mlx5/core/en_accel/macsec.c | 47 +- drivers/net/ethernet/mellanox/mlx5/core/en_main.c | 14 +- drivers/net/ethernet/mellanox/mlx5/core/en_stats.c | 9 +- .../net/ethernet/mellanox/mlx5/core/ipoib/ipoib.c | 3 +- .../net/ethernet/mellanox/mlx5/core/lag/mpesw.c | 7 +- .../net/ethernet/mellanox/mlx5/core/lib/hv_vhca.c | 8 +- .../net/ethernet/mellanox/mlx5/core/lib/hv_vhca.h | 6 +- .../net/ethernet/mellanox/mlx5/core/lib/port_tun.c | 3 +- drivers/net/ethernet/mellanox/mlx5/core/lib/st.c | 1 + drivers/net/ethernet/mellanox/mlx5/core/main.c | 12 +- .../ethernet/mellanox/mlx5/core/steering/hws/bwc.c | 1 + drivers/net/ethernet/mellanox/mlxsw/spectrum.c | 2 +- .../net/ethernet/mellanox/mlxsw/spectrum_router.c | 1 + drivers/net/ethernet/meta/fbnic/fbnic_fw.c | 9 +- drivers/net/ethernet/meta/fbnic/fbnic_txrx.c | 11 +- drivers/net/ethernet/microchip/lan743x_main.c | 2 +- .../ethernet/microchip/lan966x/lan966x_vcap_impl.c | 5 +- .../ethernet/microchip/sparx5/sparx5_switchdev.c | 4 +- .../ethernet/microchip/sparx5/sparx5_vcap_impl.c | 5 +- drivers/net/ethernet/microchip/vcap/vcap_api.c | 72 ++- drivers/net/ethernet/microchip/vcap/vcap_api.h | 3 +- .../net/ethernet/microchip/vcap/vcap_api_debugfs.c | 8 +- .../microchip/vcap/vcap_api_debugfs_kunit.c | 3 +- .../net/ethernet/microchip/vcap/vcap_api_kunit.c | 3 +- .../net/ethernet/microchip/vcap/vcap_api_private.h | 3 + drivers/net/ethernet/microsoft/mana/gdma_main.c | 2 + drivers/net/ethernet/microsoft/mana/mana_en.c | 3 +- drivers/net/ethernet/oa_tc6.c | 14 +- .../net/ethernet/pensando/ionic/ionic_ethtool.c | 11 +- drivers/net/ethernet/qlogic/qede/qede_fp.c | 9 +- .../net/ethernet/qualcomm/rmnet/rmnet_handlers.c | 5 +- drivers/net/ethernet/qualcomm/rmnet/rmnet_map.h | 1 + .../net/ethernet/qualcomm/rmnet/rmnet_map_data.c | 78 +-- drivers/net/ethernet/sun/sungem.c | 13 +- drivers/net/ethernet/sunplus/spl2sw_phy.c | 6 +- drivers/net/ethernet/ti/icssg/icssg_common.c | 49 +- drivers/net/ethernet/wangxun/libwx/wx_lib.c | 1 + drivers/net/ethernet/wangxun/libwx/wx_type.h | 1 + drivers/net/ieee802154/ca8210.c | 9 +- drivers/net/macsec.c | 9 +- drivers/net/mdio/Kconfig | 3 +- drivers/net/ovpn/tcp.c | 2 +- drivers/net/pfcp.c | 1 + drivers/net/phy/realtek/realtek_main.c | 3 +- drivers/net/phy/sfp.c | 1 + drivers/net/pse-pd/pse_core.c | 6 +- drivers/net/thunderbolt/main.c | 8 +- drivers/net/usb/gl620a.c | 6 +- drivers/net/usb/lan78xx.c | 55 +- drivers/net/usb/net1080.c | 2 +- drivers/net/veth.c | 2 + drivers/net/virtio_net.c | 27 +- drivers/net/vxlan/vxlan_core.c | 8 +- drivers/net/wan/ixp4xx_hss.c | 4 +- drivers/net/wireless/ath/ath12k/dp_mon.c | 6 +- drivers/net/wireless/ath/ath12k/mac.c | 12 +- drivers/net/wireless/ath/ath9k/xmit.c | 5 + drivers/net/wireless/ath/wcn36xx/smd.c | 13 + .../broadcom/brcm80211/brcmfmac/cyw/core.c | 6 + drivers/net/wireless/marvell/libertas_tf/main.c | 2 +- drivers/net/wireless/marvell/mwifiex/cfg80211.c | 2 +- drivers/net/wireless/marvell/mwifiex/join.c | 1 - drivers/net/wireless/mediatek/mt76/channel.c | 2 +- drivers/net/wireless/mediatek/mt76/mac80211.c | 4 +- drivers/net/wireless/mediatek/mt76/mt7615/init.c | 1 - drivers/net/wireless/mediatek/mt76/mt7915/mac.c | 10 +- drivers/net/wireless/mediatek/mt76/mt7921/mac.c | 5 +- drivers/net/wireless/mediatek/mt76/mt7925/mac.c | 20 +- drivers/net/wireless/mediatek/mt76/mt7925/main.c | 4 +- drivers/net/wireless/mediatek/mt76/mt7925/pci.c | 4 +- .../net/wireless/mediatek/mt76/mt7925/testmode.c | 5 + drivers/net/wireless/mediatek/mt76/mt792x_core.c | 4 +- drivers/net/wireless/mediatek/mt76/mt7996/mac.c | 35 +- drivers/net/wireless/mediatek/mt76/mt7996/main.c | 9 +- drivers/net/wireless/mediatek/mt76/mt7996/mcu.c | 5 +- drivers/net/wireless/mediatek/mt76/mt7996/mt7996.h | 3 +- drivers/net/wireless/mediatek/mt76/tx.c | 2 +- drivers/net/wireless/ralink/rt2x00/rt2x00dev.c | 12 +- drivers/net/wireless/realtek/rtw88/pci.c | 13 +- drivers/net/wireless/realtek/rtw89/core.h | 3 + drivers/net/wireless/realtek/rtw89/fw.c | 2 +- drivers/net/wireless/realtek/rtw89/pci.c | 8 +- drivers/net/wwan/iosm/iosm_ipc_mux_codec.c | 40 +- drivers/net/wwan/t7xx/t7xx_hif_cldma.c | 3 + drivers/net/wwan/t7xx/t7xx_port_wwan.c | 2 + drivers/ntb/hw/epf/ntb_hw_epf.c | 81 ++- drivers/nvdimm/btt.c | 14 +- drivers/nvdimm/nd.h | 11 +- drivers/nvdimm/region_devs.c | 66 +-- drivers/nvme/host/apple.c | 12 +- drivers/nvme/host/core.c | 4 +- drivers/nvme/host/pci.c | 13 +- drivers/nvme/target/core.c | 2 +- drivers/nvme/target/fabrics-cmd-auth.c | 26 +- drivers/nvme/target/rdma.c | 18 +- drivers/nvme/target/tcp.c | 16 +- drivers/of/cpu.c | 2 +- drivers/of/dynamic.c | 1 - drivers/of/of_reserved_mem.c | 28 +- drivers/of/overlay.c | 15 + drivers/of/platform.c | 5 - drivers/opp/core.c | 5 +- drivers/pci/Makefile | 2 +- drivers/pci/controller/dwc/pci-imx6.c | 35 +- drivers/pci/controller/dwc/pci-meson.c | 13 +- .../pci/controller/dwc/pcie-designware-debugfs.c | 10 +- drivers/pci/controller/dwc/pcie-qcom.c | 1 + drivers/pci/controller/pci-loongson.c | 31 +- drivers/pci/controller/pcie-iproc-bcma.c | 2 +- drivers/pci/controller/pcie-iproc-platform.c | 2 +- drivers/pci/controller/pcie-iproc.c | 1 - drivers/pci/controller/pcie-iproc.h | 2 - drivers/pci/controller/pcie-mediatek.c | 21 +- drivers/pci/controller/pcie-rcar-host.c | 1 - drivers/pci/endpoint/functions/pci-epf-ntb.c | 21 +- drivers/pci/endpoint/functions/pci-epf-vntb.c | 9 +- drivers/pci/iov.c | 15 +- drivers/pci/msi/msi.c | 4 +- drivers/pci/pci-sysfs.c | 17 +- drivers/pci/pci.c | 148 ----- drivers/pci/pci.h | 10 +- drivers/pci/rebar.c | 237 ++++++++ drivers/pci/rom.c | 149 ++++- drivers/pci/setup-bus.c | 136 +++-- drivers/pci/setup-res.c | 78 --- drivers/phy/freescale/phy-fsl-imx8qm-lvds-phy.c | 24 +- drivers/phy/phy-can-transceiver.c | 3 + drivers/pinctrl/cirrus/pinctrl-cs42l43.c | 6 +- drivers/pinctrl/mediatek/mtk-eint.c | 6 +- drivers/pinctrl/mediatek/pinctrl-airoha.c | 575 ++++++++++--------- drivers/pinctrl/mediatek/pinctrl-mt8167.c | 2 +- drivers/pinctrl/mediatek/pinctrl-mt8516.c | 2 +- drivers/pinctrl/meson/pinctrl-amlogic-a4.c | 15 +- drivers/pinctrl/meson/pinctrl-meson.c | 2 +- drivers/pinctrl/nuvoton/pinctrl-ma35.c | 3 +- drivers/pinctrl/nuvoton/pinctrl-ma35d1.c | 470 +++++++++------- drivers/pinctrl/qcom/tlmm-test.c | 19 +- drivers/pinctrl/spacemit/pinctrl-k1.c | 2 +- drivers/pinctrl/sunxi/pinctrl-sun55i-a523-r.c | 1 - drivers/pinctrl/sunxi/pinctrl-sun55i-a523.c | 1 - drivers/pinctrl/sunxi/pinctrl-sunxi.c | 2 +- drivers/platform/x86/amd/pmc/pmc-quirks.c | 39 ++ drivers/platform/x86/amd/pmc/pmc.c | 83 ++- drivers/platform/x86/amd/pmc/pmc.h | 2 + drivers/platform/x86/dell/dell-laptop.c | 5 + drivers/platform/x86/intel/pmc/arl.c | 12 +- drivers/platform/x86/intel/pmc/core.c | 145 ++--- drivers/platform/x86/intel/pmc/core.h | 10 +- drivers/platform/x86/intel/pmc/lnl.c | 2 +- drivers/platform/x86/intel/pmc/mtl.c | 9 +- drivers/platform/x86/intel/pmc/ptl.c | 3 +- drivers/platform/x86/intel/pmc/ssram_telemetry.c | 2 +- drivers/platform/x86/intel/pmt/class.c | 8 +- drivers/platform/x86/intel/pmt/class.h | 5 +- drivers/platform/x86/intel/pmt/discovery.c | 4 +- drivers/platform/x86/intel/pmt/telemetry.c | 13 +- drivers/platform/x86/intel/pmt/telemetry.h | 12 +- drivers/platform/x86/intel/sdsi.c | 5 +- .../x86/intel/speed_select_if/isst_tpmi_core.c | 2 +- drivers/platform/x86/intel/vsec.c | 84 ++- drivers/platform/x86/intel/vsec_tpmi.c | 8 +- drivers/platform/x86/xo15-ebook.c | 7 +- drivers/pmdomain/imx/imx8m-blk-ctrl.c | 46 +- drivers/power/sequencing/core.c | 9 +- drivers/power/supply/bq257xx_charger.c | 7 +- drivers/power/supply/charger-manager.c | 6 +- drivers/power/supply/cpcap-battery.c | 11 +- drivers/power/supply/max17042_battery.c | 3 +- drivers/power/supply/power_supply_core.c | 11 +- drivers/pwm/pwm-imx27.c | 8 +- drivers/pwm/pwm-rzg2l-gpt.c | 8 +- drivers/rapidio/devices/tsi721.c | 3 +- drivers/regulator/core.c | 4 +- drivers/regulator/ltc3676.c | 10 +- drivers/remoteproc/qcom_common.c | 14 +- drivers/reset/reset-imx7.c | 6 + drivers/reset/reset-sunxi.c | 4 +- drivers/rpmsg/qcom_glink_native.c | 2 - drivers/rpmsg/rpmsg_core.c | 43 +- drivers/rpmsg/virtio_rpmsg_bus.c | 1 - drivers/rtc/rtc-abx80x.c | 3 +- drivers/rtc/rtc-cmos.c | 6 + drivers/rtc/rtc-ds1307.c | 30 +- drivers/rtc/rtc-isl1208.c | 15 +- drivers/rtc/rtc-mpfs.c | 2 +- drivers/rtc/rtc-msc313.c | 4 +- drivers/rtc/rtc-renesas-rtca3.c | 2 +- drivers/s390/char/monwriter.c | 3 + drivers/s390/crypto/pkey_api.c | 8 +- drivers/s390/crypto/pkey_pckmo.c | 4 + drivers/s390/crypto/zcrypt_cex2a.c | 0 drivers/s390/crypto/zcrypt_cex2a.h | 0 drivers/s390/crypto/zcrypt_cex2c.c | 0 drivers/s390/crypto/zcrypt_cex2c.h | 0 drivers/scsi/elx/efct/efct_hw.c | 2 + drivers/scsi/elx/efct/efct_unsol.c | 1 + drivers/scsi/hisi_sas/hisi_sas_v3_hw.c | 12 +- drivers/scsi/hpsa.c | 4 + drivers/scsi/lpfc/lpfc_init.c | 3 +- drivers/scsi/pm8001/pm8001_ctl.c | 5 +- drivers/scsi/scsi_scan.c | 2 +- drivers/scsi/scsi_transport_sas.c | 101 ++-- drivers/scsi/sg.c | 7 +- drivers/scsi/smartpqi/smartpqi_init.c | 2 +- drivers/soc/fsl/qe/qe.c | 3 + drivers/soc/mediatek/mt8167-mmsys.h | 11 +- drivers/soc/ti/k3-ringacc.c | 4 +- drivers/soc/xilinx/zynqmp_power.c | 4 +- drivers/soundwire/generic_bandwidth_allocation.c | 57 +- drivers/soundwire/intel_ace2x.c | 1 + drivers/soundwire/stream.c | 7 + drivers/spi/spi-atmel.c | 133 ++--- drivers/spi/spi-dw.h | 1 + drivers/spi/spi-ep93xx.c | 1 + drivers/spi/spi-hisi-kunpeng.c | 6 +- drivers/spi/spi-meson-spifc.c | 1 + drivers/spi/spi-rpc-if.c | 6 +- drivers/spi/spi-sh-msiof.c | 10 +- drivers/spi/spi-uniphier.c | 4 +- drivers/spi/spi-xilinx.c | 11 +- drivers/spi/spi.c | 5 - drivers/staging/gpib/cb7210/cb7210.c | 1 + drivers/staging/gpib/common/gpib_os.c | 4 +- drivers/staging/media/atomisp/i2c/atomisp-gc2235.c | 29 +- drivers/staging/media/atomisp/pci/atomisp_cmd.c | 6 +- drivers/staging/media/atomisp/pci/sh_css.c | 8 +- drivers/staging/media/sunxi/cedrus/cedrus.c | 4 +- drivers/staging/most/video/video.c | 7 +- drivers/staging/nvec/nvec.c | 4 +- drivers/staging/rtl8723bs/core/rtw_ieee80211.c | 93 +-- drivers/staging/rtl8723bs/core/rtw_security.c | 2 +- drivers/target/iscsi/iscsi_target_auth.c | 6 +- drivers/target/loopback/tcm_loop.c | 64 --- drivers/target/target_core_fabric_lib.c | 89 ++- drivers/target/target_core_internal.h | 3 +- drivers/target/target_core_pr.c | 12 +- drivers/thermal/intel/therm_throt.c | 7 +- drivers/thermal/testing/command.c | 48 +- drivers/thermal/testing/thermal_testing.h | 8 + drivers/thermal/testing/zone.c | 7 +- drivers/thermal/thermal_hwmon.c | 5 +- drivers/thunderbolt/debugfs.c | 8 +- drivers/tty/serial/8250/8250_omap.c | 3 +- drivers/tty/serial/max310x.c | 12 + drivers/tty/serial/msm_serial.c | 3 +- drivers/ufs/core/ufs_trace.h | 36 +- drivers/ufs/core/ufshcd.c | 2 +- drivers/usb/atm/ueagle-atm.c | 94 ++-- drivers/usb/dwc3/core.c | 20 + drivers/usb/dwc3/core.h | 4 + drivers/usb/dwc3/ulpi.c | 25 + drivers/usb/gadget/function/f_fs.c | 89 ++- drivers/usb/host/max3421-hcd.c | 8 + drivers/vdpa/octeon_ep/octep_vdpa_main.c | 20 +- drivers/vdpa/vdpa_user/vduse_dev.c | 72 ++- drivers/vfio/pci/mlx5/cmd.h | 15 +- drivers/vfio/pci/qat/main.c | 18 +- drivers/vhost/net.c | 15 +- drivers/vhost/vdpa.c | 29 +- drivers/vhost/vhost.c | 11 +- drivers/video/fbdev/aty/radeon_base.c | 1 + drivers/video/fbdev/broadsheetfb.c | 8 +- drivers/video/fbdev/carminefb.c | 1 + drivers/video/fbdev/core/fbcon.c | 10 +- drivers/video/fbdev/efifb.c | 1 + drivers/video/fbdev/hecubafb.c | 6 +- drivers/video/fbdev/i740fb.c | 1 + drivers/video/fbdev/metronomefb.c | 8 +- drivers/video/fbdev/nvidia/nvidia.c | 1 + drivers/video/fbdev/s3fb.c | 1 + drivers/video/fbdev/sm501fb.c | 16 +- drivers/video/fbdev/sm712.h | 2 +- drivers/video/fbdev/tdfxfb.c | 1 + drivers/video/fbdev/tridentfb.c | 1 + drivers/video/fbdev/uvesafb.c | 4 +- drivers/video/fbdev/vesafb.c | 1 + drivers/virtio/virtio_rtc_driver.c | 28 +- drivers/watchdog/sama5d4_wdt.c | 48 +- drivers/watchdog/sp5100_tco.c | 3 +- drivers/watchdog/sprd_wdt.c | 5 +- drivers/watchdog/watchdog_core.c | 3 + drivers/xen/gntdev.c | 8 +- drivers/xen/xen-scsiback.c | 30 +- fs/9p/vfs_inode.c | 28 +- fs/9p/vfs_inode_dotl.c | 4 +- fs/afs/callback.c | 7 +- fs/afs/cell.c | 27 +- fs/afs/cm_security.c | 3 +- fs/afs/cmservice.c | 7 +- fs/afs/dir.c | 40 +- fs/afs/dynroot.c | 2 +- fs/afs/fs_operation.c | 2 +- fs/afs/inode.c | 2 +- fs/afs/internal.h | 1 + fs/afs/rxrpc.c | 16 +- fs/afs/super.c | 5 +- fs/afs/vl_list.c | 10 +- fs/afs/volume.c | 2 +- fs/bpf_fs_kfuncs.c | 10 +- fs/btrfs/compression.c | 20 +- fs/btrfs/direct-io.c | 69 ++- fs/btrfs/extent-tree.c | 5 +- fs/btrfs/extent_io.c | 72 ++- fs/btrfs/inode.c | 14 +- fs/btrfs/ordered-data.c | 41 +- fs/btrfs/ordered-data.h | 8 +- fs/btrfs/reflink.c | 101 ++-- fs/btrfs/super.c | 4 +- fs/btrfs/zoned.c | 64 ++- fs/configfs/dir.c | 57 +- fs/dlm/midcomms.c | 4 +- fs/efs/file.c | 21 +- fs/eventpoll.c | 623 ++++++++++++++------- fs/exfat/dir.c | 49 +- fs/exfat/exfat_fs.h | 5 +- fs/exfat/namei.c | 89 ++- fs/ext2/file.c | 9 +- fs/ext4/ext4.h | 20 + fs/ext4/fast_commit.c | 50 +- fs/ext4/inode.c | 3 +- fs/ext4/ioctl.c | 12 +- fs/ext4/namei.c | 2 +- fs/fhandle.c | 2 +- fs/fs-writeback.c | 5 - fs/fuse/control.c | 7 +- fs/hfs/bfind.c | 2 +- fs/hfs/bnode.c | 54 +- fs/hfs/brec.c | 2 +- fs/hfs/btree.c | 2 +- fs/hfs/btree.h | 71 +-- fs/hfs/hfs_fs.h | 88 +-- fs/hfs/inode.c | 3 +- fs/hfsplus/bfind.c | 2 +- fs/hfsplus/bnode.c | 60 +- fs/hfsplus/brec.c | 2 +- fs/hfsplus/btree.c | 2 +- fs/hfsplus/hfsplus_fs.h | 40 +- fs/iomap/ioend.c | 8 +- fs/jbd2/journal.c | 2 + fs/kernfs/dir.c | 11 +- fs/libfs.c | 13 + fs/lockd/svcsubs.c | 4 +- fs/minix/minix.h | 2 +- fs/namei.c | 4 + fs/netfs/write_issue.c | 18 +- fs/nfs/callback_proc.c | 9 +- fs/nfs/delegation.c | 9 +- fs/nfs/filelayout/filelayout.c | 2 + fs/nfs/flexfilelayout/flexfilelayout.c | 29 + fs/nfs/flexfilelayout/flexfilelayout.h | 16 + fs/nfs/fs_context.c | 8 +- fs/nfs/internal.h | 12 +- fs/nfs/nfs4proc.c | 22 +- fs/nfs/pnfs.c | 4 +- fs/nfs/pnfs_nfs.c | 2 +- fs/nfs/read.c | 25 +- fs/nfs/write.c | 14 +- fs/nfsd/nfs4state.c | 16 +- fs/nilfs2/namei.c | 2 +- fs/nilfs2/super.c | 2 - fs/ntfs3/fslog.c | 147 ++++- fs/ntfs3/index.c | 45 +- fs/ntfs3/lznt.c | 2 +- fs/ntfs3/namei.c | 2 +- fs/ntfs3/ntfs_fs.h | 3 +- fs/ntfs3/run.c | 9 +- fs/ocfs2/alloc.c | 2 +- fs/ocfs2/aops.c | 13 +- fs/ocfs2/buffer_head_io.c | 7 +- fs/ocfs2/dlm/dlmdebug.c | 16 +- fs/ocfs2/dlmglue.c | 17 + fs/ocfs2/inode.c | 182 +++++- fs/ocfs2/journal.c | 13 +- fs/ocfs2/journal.h | 3 + fs/ocfs2/move_extents.c | 4 +- fs/ocfs2/ocfs2.h | 2 - fs/ocfs2/quota_local.c | 2 +- fs/ocfs2/stack_user.c | 10 +- fs/ocfs2/super.c | 2 - fs/ocfs2/sysfile.c | 9 +- fs/orangefs/dir.c | 7 +- fs/overlayfs/inode.c | 4 +- fs/proc/array.c | 15 +- fs/proc/base.c | 184 +++--- fs/proc/fd.c | 31 +- fs/proc/generic.c | 9 +- fs/proc/internal.h | 6 +- fs/proc/namespaces.c | 16 +- fs/proc/page.c | 2 +- fs/proc/proc_net.c | 2 +- fs/proc/task_mmu.c | 61 +- fs/resctrl/rdtgroup.c | 15 +- fs/smb/client/Makefile | 5 +- fs/smb/client/cifssmb.c | 5 +- fs/smb/client/connect.c | 3 + fs/smb/client/file.c | 1 + fs/smb/client/inode.c | 30 +- fs/smb/client/ioctl.c | 12 +- fs/smb/client/misc.c | 8 + fs/smb/client/{cifstransport.c => smb1transport.c} | 4 +- fs/smb/client/smb2ops.c | 38 +- fs/smb/server/Kconfig | 6 +- fs/smb/server/auth.c | 398 +++---------- fs/smb/server/auth.h | 10 +- fs/smb/server/connection.c | 101 +++- fs/smb/server/connection.h | 6 + fs/smb/server/crypto_ctx.c | 24 - fs/smb/server/crypto_ctx.h | 15 +- fs/smb/server/misc.c | 33 -- fs/smb/server/misc.h | 1 - fs/smb/server/oplock.c | 13 +- fs/smb/server/server.c | 16 +- fs/smb/server/smb2pdu.c | 78 ++- fs/smb/server/smb_common.h | 2 +- fs/smb/server/smbacl.c | 7 +- fs/smb/server/vfs.c | 60 +- fs/smb/server/vfs_cache.c | 114 +++- fs/smb/server/vfs_cache.h | 1 + fs/super.c | 11 +- fs/sysfs/file.c | 4 + fs/udf/super.c | 2 +- fs/xfs/libxfs/xfs_group.h | 9 + fs/xfs/libxfs/xfs_rtgroup.h | 8 + fs/xfs/xfs_iomap.c | 2 +- fs/xfs/xfs_rtalloc.c | 8 +- fs/xfs/xfs_zone_gc.c | 13 +- fs/xfs/xfs_zone_space_resv.c | 8 +- include/acpi/acpi_bus.h | 2 + include/asm-generic/bitops/lock.h | 22 +- include/dt-bindings/clock/qcom,x1e80100-camcc.h | 3 + include/dt-bindings/power/fsl,imx93-power.h | 1 + include/linux/amba/bus.h | 5 - include/linux/arm-smccc.h | 5 + include/linux/bpf-cgroup.h | 5 +- include/linux/bpf.h | 4 + include/linux/bpf_local_storage.h | 3 - include/linux/bpf_lsm.h | 10 + include/linux/cdx/cdx_bus.h | 4 - include/linux/device.h | 5 +- include/linux/dpll.h | 2 + include/linux/firmware.h | 10 + include/linux/fs.h | 3 + include/linux/fwnode.h | 1 + include/linux/host1x.h | 7 + include/linux/hyperv.h | 5 - include/linux/i3c/master.h | 25 +- include/linux/ieee80211-eht.h | 12 +- include/linux/inetdevice.h | 5 + include/linux/intel_vsec.h | 30 +- include/linux/iommu.h | 1 + include/linux/netdevice.h | 4 + include/linux/nfs_page.h | 1 + include/linux/nfs_xdr.h | 1 - include/linux/pci.h | 3 +- include/linux/platform_data/mipi-i3c-hci.h | 15 + include/linux/rpmsg.h | 4 - include/linux/seqlock.h | 110 ++++ include/linux/sunrpc/clnt.h | 1 + include/linux/sunrpc/xprt.h | 2 + include/linux/uaccess.h | 2 +- include/linux/vmalloc.h | 4 +- include/net/addrconf.h | 10 +- include/net/bluetooth/hci.h | 5 +- include/net/bluetooth/l2cap.h | 10 +- include/net/bond_options.h | 1 + include/net/bonding.h | 1 + include/net/fib_rules.h | 5 + include/net/gue.h | 2 +- include/net/inet_common.h | 3 +- include/net/ip.h | 2 +- include/net/ip_fib.h | 7 +- include/net/ip_vs.h | 3 +- include/net/ipv6.h | 6 +- include/net/netfilter/nf_conntrack_extend.h | 12 - include/net/netfilter/nf_flow_table.h | 6 + include/net/netfilter/nf_queue.h | 1 + include/net/netfilter/nft_meta.h | 2 + include/net/ping.h | 5 +- include/net/sctp/sctp.h | 3 +- include/net/sock.h | 2 +- include/net/tc_act/tc_pedit.h | 18 +- include/net/tcp.h | 11 +- include/net/xfrm.h | 15 +- include/rdma/ib_umem.h | 4 + include/rdma/rdma_vt.h | 20 - include/uapi/linux/bpf.h | 2 + include/uapi/linux/if_link.h | 1 + init/initramfs_test.c | 17 +- kernel/bpf/bpf_inode_storage.c | 9 + kernel/bpf/bpf_lru_list.c | 165 +++--- kernel/bpf/bpf_lru_list.h | 25 +- kernel/bpf/bpf_lsm.c | 23 + kernel/bpf/cgroup.c | 168 +++--- kernel/bpf/core.c | 2 +- kernel/bpf/devmap.c | 12 + kernel/bpf/hashtab.c | 21 +- kernel/bpf/helpers.c | 29 +- kernel/bpf/inode.c | 13 +- kernel/bpf/lpm_trie.c | 8 +- kernel/bpf/map_in_map.c | 5 +- kernel/bpf/map_iter.c | 4 + kernel/bpf/syscall.c | 23 +- kernel/bpf/verifier.c | 186 +++--- kernel/cgroup/cpuset.c | 7 +- kernel/cpu.c | 20 +- kernel/fork.c | 9 +- kernel/kcov.c | 4 +- kernel/locking/spinlock_rt.c | 27 +- kernel/sched/core.c | 1 + kernel/sched/cpufreq_schedutil.c | 1 + kernel/sched/debug.c | 3 + kernel/sched/fair.c | 23 +- kernel/taskstats.c | 62 +- kernel/time/alarmtimer.c | 2 - kernel/time/posix-cpu-timers.c | 2 +- kernel/time/tick-sched.c | 11 +- kernel/time/time.c | 2 +- kernel/trace/bpf_trace.c | 11 +- kernel/trace/fprobe.c | 10 + kernel/trace/ring_buffer.c | 3 +- kernel/trace/trace.c | 2 +- kernel/trace/trace_eprobe.c | 2 +- kernel/trace/trace_events_hist.c | 41 +- kernel/trace/trace_events_user.c | 43 +- kernel/trace/trace_osnoise.c | 4 +- kernel/trace/trace_probe.c | 174 +++++- kernel/trace/trace_probe.h | 7 +- kernel/workqueue.c | 2 +- lib/alloc_tag.c | 9 +- lib/locking-selftest.c | 7 +- lib/test_meminit.c | 2 +- lib/tests/kunit_iov_iter.c | 12 +- lib/vsprintf.c | 36 +- mm/compaction.c | 7 +- mm/damon/core.c | 53 +- mm/damon/sysfs-schemes.c | 17 +- mm/hugetlb.c | 7 +- mm/memory_hotplug.c | 2 +- mm/mm_init.c | 47 +- mm/numa_emulation.c | 17 +- net/9p/client.c | 2 + net/9p/trans_rdma.c | 19 +- net/atm/common.c | 2 + net/batman-adv/distributed-arp-table.c | 30 +- net/batman-adv/fragmentation.c | 8 +- net/batman-adv/gateway_client.c | 3 +- net/batman-adv/main.c | 13 +- net/batman-adv/mesh-interface.c | 17 +- net/batman-adv/mesh-interface.h | 2 + net/batman-adv/multicast_forw.c | 7 +- net/batman-adv/routing.c | 3 +- net/batman-adv/translation-table.c | 5 +- net/bluetooth/6lowpan.c | 56 +- net/bluetooth/eir.c | 8 +- net/bluetooth/hci_codec.c | 2 +- net/bluetooth/hci_core.c | 2 + net/bluetooth/hci_event.c | 7 + net/bluetooth/l2cap_core.c | 94 +++- net/bluetooth/l2cap_sock.c | 103 ++-- net/bluetooth/mgmt.c | 2 + net/bluetooth/msft.c | 2 +- net/bluetooth/sco.c | 77 ++- net/bluetooth/smp.c | 27 +- net/bridge/br_cfm.c | 6 + net/bridge/br_cfm_netlink.c | 4 +- net/bridge/br_if.c | 3 + net/bridge/br_stp.c | 3 +- net/bridge/netfilter/nft_meta_bridge.c | 23 +- net/can/bcm.c | 127 ++++- net/can/isotp.c | 298 +++++++--- net/core/dev.c | 3 +- net/core/fib_rules.c | 6 +- net/core/filter.c | 28 +- net/core/flow_dissector.c | 12 +- net/core/lwt_bpf.c | 12 + net/core/netdev-genl.c | 4 +- net/core/sock.c | 7 +- net/devlink/rate.c | 25 +- net/handshake/genl.c | 2 +- net/ieee802154/core.c | 49 +- net/ieee802154/header_ops.c | 9 +- net/ieee802154/ieee802154.h | 17 + net/ieee802154/netlink.c | 36 +- net/ieee802154/socket.c | 6 +- net/ife/ife.c | 2 +- net/ipv4/af_inet.c | 17 +- net/ipv4/igmp.c | 63 ++- net/ipv4/inet_connection_sock.c | 7 + net/ipv4/ip_sockglue.c | 4 +- net/ipv4/ip_vti.c | 3 + net/ipv4/ipip.c | 3 + net/ipv4/netfilter/nf_reject_ipv4.c | 2 +- net/ipv4/ping.c | 9 +- net/ipv4/raw.c | 6 +- net/ipv4/tcp.c | 5 +- net/ipv4/tcp_bpf.c | 17 +- net/ipv4/tcp_ipv4.c | 4 +- net/ipv4/tcp_output.c | 8 +- net/ipv4/udp.c | 9 +- net/ipv4/udp_bpf.c | 25 +- net/ipv4/udp_impl.h | 3 +- net/ipv4/udp_tunnel_nic.c | 2 +- net/ipv6/addrconf.c | 55 +- net/ipv6/af_inet6.c | 11 +- net/ipv6/datagram.c | 9 +- net/ipv6/ioam6_iptunnel.c | 8 +- net/ipv6/ip6_fib.c | 17 +- net/ipv6/ip6_gre.c | 6 + net/ipv6/ip6_tunnel.c | 3 + net/ipv6/ip6_vti.c | 3 + net/ipv6/mcast.c | 40 +- net/ipv6/ndisc.c | 8 +- net/ipv6/netfilter.c | 4 +- net/ipv6/netfilter/ip6t_ah.c | 5 + net/ipv6/netfilter/ip6t_hbh.c | 1 + net/ipv6/netfilter/ip6t_rt.c | 3 +- net/ipv6/netfilter/nf_conntrack_reasm.c | 3 +- net/ipv6/ping.c | 3 +- net/ipv6/raw.c | 8 +- net/ipv6/route.c | 9 +- net/ipv6/seg6.c | 3 + net/ipv6/sit.c | 3 + net/ipv6/udp.c | 10 +- net/ipv6/udp_impl.h | 3 +- net/kcm/kcmsock.c | 8 +- net/l2tp/l2tp_ip.c | 4 +- net/l2tp/l2tp_ip6.c | 6 +- net/llc/af_llc.c | 1 + net/llc/llc_conn.c | 1 - net/mac80211/main.c | 3 +- net/mac80211/tx.c | 17 +- net/mac802154/iface.c | 2 +- net/mac802154/scan.c | 1 + net/mptcp/protocol.c | 4 +- net/netfilter/Makefile | 1 + net/netfilter/ipset/ip_set_core.c | 4 +- net/netfilter/ipset/ip_set_hash_gen.h | 69 ++- net/netfilter/ipvs/ip_vs_app.c | 10 +- net/netfilter/ipvs/ip_vs_conn.c | 4 +- net/netfilter/ipvs/ip_vs_core.c | 36 +- net/netfilter/ipvs/ip_vs_proto_sctp.c | 18 +- net/netfilter/ipvs/ip_vs_proto_tcp.c | 11 +- net/netfilter/ipvs/ip_vs_proto_udp.c | 3 +- net/netfilter/ipvs/ip_vs_xmit.c | 6 +- net/netfilter/nf_conncount.c | 23 +- net/netfilter/nf_conntrack_core.c | 83 +-- net/netfilter/nf_conntrack_ecache.c | 2 +- net/netfilter/nf_conntrack_extend.c | 32 +- net/netfilter/nf_conntrack_irc.c | 6 +- net/netfilter/nf_conntrack_seqadj.c | 2 + net/netfilter/nf_flow_table_path.c | 276 +++++++++ net/netfilter/nf_nat_core.c | 10 + net/netfilter/nf_nat_sip.c | 11 + net/netfilter/nf_queue.c | 14 + net/netfilter/nf_synproxy_core.c | 40 +- net/netfilter/nf_tables_api.c | 3 + net/netfilter/nfnetlink_cthelper.c | 24 +- net/netfilter/nfnetlink_osf.c | 6 +- net/netfilter/nfnetlink_queue.c | 3 + net/netfilter/nft_compat.c | 24 +- net/netfilter/nft_flow_offload.c | 259 --------- net/netfilter/nft_lookup.c | 10 +- net/netfilter/nft_meta.c | 5 +- net/netfilter/nft_payload.c | 16 +- net/netfilter/nft_set_pipapo.c | 34 +- net/netfilter/nft_set_pipapo.h | 8 + net/netfilter/nft_set_rbtree.c | 8 +- net/netfilter/nft_synproxy.c | 9 +- net/netfilter/xt_cluster.c | 2 +- net/netfilter/xt_connmark.c | 14 +- net/netfilter/xt_nat.c | 9 + net/netfilter/xt_rateest.c | 2 +- net/netfilter/xt_u32.c | 12 +- net/openvswitch/conntrack.c | 2 +- net/openvswitch/flow_netlink.c | 201 +++++-- net/phonet/datagram.c | 4 +- net/phonet/pep.c | 2 +- net/psample/psample.c | 6 +- net/qrtr/af_qrtr.c | 2 +- net/rxrpc/ar-internal.h | 6 +- net/rxrpc/call_accept.c | 25 +- net/rxrpc/call_event.c | 5 +- net/rxrpc/call_object.c | 2 + net/rxrpc/conn_client.c | 2 +- net/rxrpc/conn_event.c | 9 +- net/rxrpc/input.c | 39 +- net/rxrpc/oob.c | 12 +- net/rxrpc/recvmsg.c | 23 +- net/rxrpc/rxgk.c | 3 +- net/rxrpc/sendmsg.c | 3 +- net/sched/act_api.c | 13 +- net/sched/act_bpf.c | 2 +- net/sched/act_ct.c | 13 +- net/sched/act_pedit.c | 13 +- net/sched/cls_api.c | 25 +- net/sched/cls_bpf.c | 10 +- net/sched/cls_flow.c | 12 +- net/sched/sch_cake.c | 5 +- net/sched/sch_codel.c | 48 +- net/sched/sch_drr.c | 8 +- net/sched/sch_dualpi2.c | 48 +- net/sched/sch_fq_codel.c | 41 +- net/sched/sch_generic.c | 41 +- net/sched/sch_hfsc.c | 24 +- net/sched/sch_hhf.c | 27 + net/sched/sch_htb.c | 14 +- net/sched/sch_multiq.c | 2 +- net/sched/sch_taprio.c | 2 +- net/sched/sch_teql.c | 126 +++-- net/sctp/diag.c | 67 ++- net/sctp/protocol.c | 3 +- net/sctp/sm_make_chunk.c | 15 +- net/sctp/sm_statefuns.c | 59 +- net/sctp/socket.c | 50 +- net/smc/smc_cdc.c | 15 +- net/sunrpc/clnt.c | 19 +- net/sunrpc/svc.c | 10 + net/sunrpc/svcsock.c | 10 + net/sunrpc/sysfs.c | 4 +- net/sunrpc/xdr.c | 14 +- net/sunrpc/xprt.c | 16 + net/sunrpc/xprtrdma/backchannel.c | 5 +- net/sunrpc/xprtrdma/frwr_ops.c | 2 +- net/sunrpc/xprtrdma/rpc_rdma.c | 171 ++++-- net/sunrpc/xprtrdma/transport.c | 85 ++- net/sunrpc/xprtrdma/verbs.c | 126 ++++- net/sunrpc/xprtrdma/xprt_rdma.h | 4 +- net/sunrpc/xprtsock.c | 16 +- net/tipc/bearer.c | 1 + net/tipc/core.c | 5 + net/tipc/discover.c | 14 +- net/tipc/name_distr.c | 13 +- net/tipc/netlink.c | 12 + net/tipc/socket.c | 9 +- net/tls/tls.h | 2 +- net/tls/tls_sw.c | 14 +- net/unix/af_unix.c | 39 +- net/unix/unix_bpf.c | 2 +- net/vmw_vsock/af_vsock.c | 4 +- net/vmw_vsock/vsock_bpf.c | 2 +- net/wireless/nl80211.c | 2 +- net/wireless/scan.c | 5 +- net/xfrm/espintcp.c | 36 +- net/xfrm/xfrm_interface_core.c | 3 + net/xfrm/xfrm_nat_keepalive.c | 15 +- net/xfrm/xfrm_policy.c | 27 +- net/xfrm/xfrm_state.c | 26 +- net/xfrm/xfrm_user.c | 20 +- rust/kernel/alloc/kvec.rs | 4 +- samples/damon/mtier.c | 2 + samples/trace_events/trace-events-sample.c | 4 + scripts/kconfig/conf.c | 6 +- security/apparmor/af_unix.c | 65 ++- security/apparmor/apparmorfs.c | 113 +++- security/apparmor/domain.c | 58 +- security/apparmor/file.c | 12 +- security/apparmor/include/apparmorfs.h | 12 + security/apparmor/label.c | 2 +- security/apparmor/net.c | 1 + security/apparmor/policy.c | 20 +- security/apparmor/policy_unpack.c | 6 +- security/apparmor/procattr.c | 2 + security/bpf/hooks.c | 3 + security/integrity/evm/evm_secfs.c | 16 +- security/keys/keyring.c | 2 +- security/landlock/fs.c | 14 + security/landlock/fs.h | 10 + security/landlock/net.c | 11 +- security/landlock/task.c | 11 + security/selinux/hooks.c | 80 ++- sound/core/init.c | 11 +- sound/core/seq/oss/seq_oss_event.c | 6 +- sound/core/seq/oss/seq_oss_event.h | 3 +- sound/core/seq/oss/seq_oss_ioctl.c | 5 +- sound/core/seq/oss/seq_oss_midi.c | 6 +- sound/core/seq/oss/seq_oss_midi.h | 2 +- sound/core/seq/oss/seq_oss_readq.c | 77 ++- sound/core/seq/oss/seq_oss_rw.c | 5 +- sound/core/seq/seq_clientmgr.c | 33 +- sound/core/seq/seq_fifo.c | 52 +- sound/core/seq/seq_memory.c | 2 +- sound/core/seq/seq_midi.c | 55 +- sound/drivers/aloop.c | 1 - sound/hda/codecs/conexant.c | 3 - sound/hda/codecs/realtek/alc269.c | 2 + sound/hda/codecs/side-codecs/tas2781_hda_i2c.c | 3 + sound/hda/codecs/side-codecs/tas2781_hda_spi.c | 3 + sound/hda/controllers/Kconfig | 2 +- sound/hda/core/regmap.c | 4 +- sound/soc/amd/acp/acp-sdw-legacy-mach.c | 7 +- sound/soc/amd/acp/acp-sdw-sof-mach.c | 7 +- sound/soc/codecs/adau1372.c | 5 + sound/soc/codecs/aw88261.c | 12 +- sound/soc/codecs/cs35l56-shared.c | 1 + sound/soc/codecs/cs35l56.c | 14 +- sound/soc/codecs/hdac_hdmi.c | 4 +- sound/soc/codecs/lpass-va-macro.c | 8 +- sound/soc/codecs/sma1307.c | 35 +- sound/soc/codecs/tlv320aic3x.c | 25 +- sound/soc/fsl/fsl_asrc_dma.c | 20 + sound/soc/fsl/fsl_audmix.c | 6 + sound/soc/mediatek/mt8183/mt8183-afe-pcm.c | 23 +- sound/soc/mediatek/mt8192/mt8192-afe-pcm.c | 21 +- sound/soc/qcom/qdsp6/q6apm.c | 8 + sound/soc/renesas/rcar/rsnd.h | 2 +- sound/soc/sof/intel/Kconfig | 4 +- sound/soc/sof/ipc3-control.c | 79 ++- sound/soc/sof/ipc4-control.c | 11 +- sound/soc/sof/topology.c | 5 +- sound/soc/tegra/tegra210_ahub.c | 4 +- sound/usb/fcp.c | 2 + sound/usb/midi2.c | 5 + sound/usb/mixer_scarlett2.c | 201 ++++++- sound/usb/qcom/mixer_usb_offload.c | 2 +- sound/usb/qcom/qc_audio_offload.c | 30 +- sound/xen/xen_snd_front_alsa.c | 17 +- sound/xen/xen_snd_front_evtchnl.c | 28 +- sound/xen/xen_snd_front_evtchnl.h | 6 +- tools/bpf/bpftool/cgroup.c | 14 +- tools/bpf/bpftool/gen.c | 2 +- tools/bpf/bpftool/net.c | 4 +- tools/include/linux/args.h | 4 + tools/include/nolibc/getopt.h | 2 +- tools/include/uapi/linux/bpf.h | 2 + tools/include/uapi/linux/if_link.h | 2 + tools/lib/api/fs/fs.c | 19 +- tools/lib/bpf/gen_loader.c | 81 ++- tools/lib/bpf/libbpf.c | 9 +- tools/lib/bpf/strset.c | 62 +- tools/lib/bpf/usdt.c | 16 +- tools/lib/symbol/kallsyms.c | 5 +- tools/perf/Documentation/perf-inject.txt | 5 + tools/perf/Makefile.config | 1 + tools/perf/arch/arm64/util/header.c | 1 - tools/perf/arch/common.c | 4 +- tools/perf/arch/powerpc/util/auxtrace.c | 6 + tools/perf/arch/x86/tests/amd-ibs-period.c | 2 +- tools/perf/bench/inject-buildid.c | 11 +- tools/perf/builtin-annotate.c | 3 +- tools/perf/builtin-buildid-cache.c | 12 +- tools/perf/builtin-buildid-list.c | 4 +- tools/perf/builtin-c2c.c | 24 +- tools/perf/builtin-diff.c | 3 +- tools/perf/builtin-inject.c | 304 +++++++++- tools/perf/builtin-record.c | 1 + tools/perf/builtin-report.c | 3 +- tools/perf/builtin-sched.c | 148 +++-- tools/perf/builtin-stat.c | 50 +- tools/perf/tests/code-reading.c | 7 +- tools/perf/tests/dlfilter-test.c | 8 +- tools/perf/tests/pe-file-parsing.c | 4 +- tools/perf/tests/pmu-events.c | 24 +- tools/perf/tests/sample-parsing.c | 5 +- tools/perf/tests/sdt.c | 2 +- tools/perf/ui/browser.c | 3 + tools/perf/ui/browsers/annotate.c | 5 +- tools/perf/util/arm-spe.c | 28 +- tools/perf/util/bpf-event.c | 52 +- tools/perf/util/bpf-event.h | 4 +- tools/perf/util/bpf-utils.c | 16 + tools/perf/util/build-id.c | 4 +- tools/perf/util/cpumap.c | 49 +- tools/perf/util/cs-etm-base.c | 4 +- tools/perf/util/cs-etm-decoder/cs-etm-decoder.c | 21 +- tools/perf/util/cs-etm.c | 311 ++++++---- tools/perf/util/cs-etm.h | 8 +- tools/perf/util/debuginfo.c | 11 +- tools/perf/util/disasm.c | 7 +- tools/perf/util/dso.c | 46 +- tools/perf/util/dsos.c | 4 +- tools/perf/util/env.h | 14 + tools/perf/util/event.c | 15 +- tools/perf/util/header.c | 57 +- tools/perf/util/hist.c | 7 +- tools/perf/util/hwmon_pmu.c | 24 +- tools/perf/util/intel-bts.c | 3 +- .../util/intel-pt-decoder/intel-pt-insn-decoder.c | 11 +- tools/perf/util/intel-pt.c | 35 +- tools/perf/util/libbfd.c | 11 +- tools/perf/util/libbfd.h | 5 +- tools/perf/util/machine.c | 42 +- tools/perf/util/maps.c | 156 +++++- tools/perf/util/maps.h | 3 + tools/perf/util/mmap.c | 18 +- tools/perf/util/pmu.c | 10 +- tools/perf/util/svghelper.c | 10 +- tools/perf/util/symbol-elf.c | 128 +++-- tools/perf/util/symbol-minimal.c | 29 +- tools/perf/util/symbol.c | 24 +- tools/perf/util/symbol.h | 2 +- tools/perf/util/synthetic-events.c | 27 +- tools/perf/util/synthetic-events.h | 6 +- tools/perf/util/thread.c | 5 + tools/power/x86/intel-speed-select/isst-daemon.c | 9 +- tools/testing/cxl/test/cxl.c | 10 +- tools/testing/cxl/test/mem.c | 6 +- tools/testing/kunit/kunit_parser.py | 12 +- tools/testing/selftests/Makefile | 2 +- tools/testing/selftests/bpf/bpf_util.h | 45 +- tools/testing/selftests/bpf/cgroup_helpers.c | 2 +- .../selftests/bpf/prog_tests/bpf_attr_size.c | 69 +++ .../selftests/bpf/prog_tests/fill_link_info.c | 2 +- .../selftests/bpf/prog_tests/verifier_log.c | 1 + .../selftests/bpf/progs/bpf_iter_task_vmas.c | 2 +- .../testing/selftests/bpf/progs/cpumask_success.c | 2 +- .../testing/selftests/bpf/progs/test_tunnel_kern.c | 13 +- .../testing/selftests/bpf/progs/verifier_bounds.c | 14 +- .../selftests/bpf/progs/verifier_linked_scalars.c | 556 +++++++++++++++++- tools/testing/selftests/bpf/progs/xdp_flowtable.c | 7 +- tools/testing/selftests/bpf/vmtest.sh | 2 +- tools/testing/selftests/drivers/net/hw/tso.py | 16 +- .../ftrace/test.d/00basic/test_ownership.tc | 2 +- tools/testing/selftests/hid/Makefile | 2 +- tools/testing/selftests/hid/hid_bpf.c | 36 +- tools/testing/selftests/hid/progs/hid.c | 15 + .../selftests/landlock/scoped_signal_test.c | 237 +++++++- .../selftests/mm/charge_reserved_hugetlb.sh | 3 +- tools/testing/selftests/mm/compaction_test.c | 3 + tools/testing/selftests/mm/hmm-tests.c | 63 ++- tools/testing/selftests/mm/hugepage-mremap.c | 32 +- .../selftests/mm/hugetlb_reparenting_test.sh | 60 +- tools/testing/selftests/mm/pkey-arm64.h | 3 +- tools/testing/selftests/mm/split_huge_page_test.c | 27 +- tools/testing/selftests/mm/uffd-stress.c | 5 +- tools/testing/selftests/net/broadcast_ether_dst.sh | 2 +- tools/testing/selftests/net/lib.sh | 25 +- tools/testing/selftests/net/tcp_mmap.c | 4 + tools/testing/selftests/net/tls.c | 8 +- tools/testing/selftests/net/vlan_bridge_binding.sh | 2 +- tools/testing/selftests/rseq/Makefile | 6 +- tools/tracing/rtla/src/actions.c | 8 +- tools/tracing/rtla/src/actions.h | 5 + tools/virtio/vringh_test.c | 5 + virt/kvm/kvm_main.c | 16 +- 1499 files changed, 19926 insertions(+), 10240 deletions(-)

1 month, 2 weeks

← Newer
1
...
4
5
6
7
8
9
10
...
3425
Older →

Jump to page:

2026

2025

2024

2023

2022

2021

2020

2019

2018

2017

Lkft-triage