This is the start of the stable review cycle for the 6.18.57 release. There are 621 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know.
Responses should be made by Thu, 15 Oct 2026 11:28:22 +0000. Anything received after that time might be too late.
The whole patch series can be found in one patch at: https://www.kernel.org/pub/linux/kernel/v6.x/stable-review/patch-6.18.57-rc1... or in the git tree and branch at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-6.18.y and the diffstat can be found below.
thanks,
greg k-h
------------- Pseudo-Shortlog of commits:
Greg Kroah-Hartman gregkh@linuxfoundation.org Linux 6.18.57-rc1
Rafael J. Wysocki rafael.j.wysocki@intel.com ACPI: scan: Use acpi_setup_gpe_for_wake() for buttons
Rafael J. Wysocki rafael.j.wysocki@intel.com ACPI: scan: Do not mark button ACPI devices as wakeup-capable
Tejun Heo tj@kernel.org workqueue: Annotate alloc_workqueue_va() with __printf(1, 0)
Lizhi Hou lizhi.hou@amd.com accel/amdxdna: Fix crash when destroying a suspended hardware context
Lizhi Hou lizhi.hou@amd.com accel/amdxdna: Fix race condition when checking rpm_on
Lizhi Hou lizhi.hou@amd.com accel/amdxdna: Resume power for creating and destroying hardware context
Harald Freudenberger freude@linux.ibm.com s390/zcrypt: Pad trailing CCA or EP11 message with zeros
Harald Freudenberger freude@linux.ibm.com s390/zcrypt: Improve EP11 CPRB domain handling with ASN.1 parsing
Harald Freudenberger freude@linux.ibm.com s390/zcrypt: Improve EP11 CPRB length and overflow checks
Harald Freudenberger freude@linux.ibm.com s390/zcrypt: Improve CCA CPRB length and overflow checks
Alexander Lobakin aleksander.lobakin@intel.com ice: fix broken Rx on VFs
Breno Leitao leitao@debian.org workqueue: fix devm_alloc_workqueue() va_list misuse
Hao Ge hao.ge@linux.dev netfs: Fix missing alloc tagging of direct mempool allocations
Eric Dumazet edumazet@google.com net: fix backlog_unlock_irq_restore() vs CONFIG_PREEMPT_RT
Ming Qian ming.qian@oss.nxp.com media: verisilicon: Fix kernel panic due to __initconst misuse
David Howells dhowells@redhat.com netfs, afs: Fix symlink reading
Frank Sorenson sorenson@redhat.com cifs: consolidate time_last_write stamp into _cifsFileInfo_put()
Qu Wenruo wqu@suse.com btrfs: make sure EXTENT_BUFFER_READING is cleared under refs_lock
Osama Abdelkader osama.abdelkader@gmail.com drm/panthor: validate userspace queue count against initialized firmware slot count
Borislav Petkov (AMD) bp@alien8.de x86/CPU/AMD: Fix AMD TLBI Erratum #1718
Maíra Canal mcanal@igalia.com drm/vc4: Fix binner slot allocation failing on an idle GPU
Ilia Gavrilov Ilia.Gavrilov@infotecs.ru vsock: Fix memory leak in vmci_transport_recv_dgram_cb()
Fernando Fernandez Mancera fmancera@suse.de net: openvswitch: validate transport header presence in set_ipv6_addr
Vadim Fedorenko vadim.fedorenko@linux.dev ptp: ocp: fix PCIe delay estimation calculation
Willem de Bruijn willemb@google.com net/packet: call packet_parse_headers after virtio_net_hdr_to_skb
Petr Machata petrm@nvidia.com mlxsw: spectrum_flower: Fix port range register leak in tmplt_create()
Li RongQing lirongqing@baidu.com net/mlx5e: Order ICOSQ cc update after CQ doorbell
Tianyi Gao tianyi@cloudflare.com veth: fix peer NETDEV_XDP_ACT_NDO_XMIT after GRO is toggled while down
Gyeyoung Baek gye976@gmail.com drm/imagination: Fix reference and vm_bo handling in remap()
Eric Dumazet edumazet@kernel.org flow_dissector: avoid u16 truncation of hlen in bpf_flow_dissect()
Pavan Chebbi pavan.chebbi@broadcom.com bnxt_en: Re-write the BARs following any type of PCIe errors
Lukas Wunner lukas@wunner.de bnxt_en: Drop pci_save_state() after pci_restore_state()
Michael Chan michael.chan@broadcom.com bnxt_en: Delay for 5 seconds after AER DPC for all chips
Michael Chan michael.chan@broadcom.com bnxt_en: Fix driver init in kdump kernel
Michael Chan michael.chan@broadcom.com bnxt_en: Add bnxt_clear_bars() helper
Haishuang Yan yanhaishuang@cmss.chinamobile.com pfcp: make sure the SEID is linear before reading it
Justin Chen justin.chen@broadcom.com net: bcmgenet: if UMAC was suspended in SW_RESET, restore it to SW_RESET
Or Har-Toov ohartoov@nvidia.com Revert "net/mlx5: E-Switch, preserve max tx speed on vport state modification"
Victor Nogueira victor@mojatatu.com net/sched: cls_route: reject change with no routing attribute
Haishuang Yan yanhaishuang@cmss.chinamobile.com devlink: fix devlink_rel reference leak when notify work is pending
Quentin Freimanis quentin@q-lab.dev net: sparx5: start the TOD counters on non-PTP lan969x variants
Eric Dumazet edumazet@kernel.org flow_dissector: avoid u16 truncation of skb->len when computing thoff
Waiman Long longman@redhat.com cgroup/cpuset: Call is_in_v2_mode() after acquiring cpuset_mutex in cpuset_handle_hotplug()
Han Gao gaohan@iscas.ac.cn spi: sg2044-nor: Honor SPI clock limits
Han Gao gaohan@iscas.ac.cn spi: sg2044-nor: Return transfer errors
Marek Szyprowski m.szyprowski@samsung.com ASoC: samsung: i2s: enable op_clk in probe to balance runtime PM
Alvin Šipraga alvin.sipraga@analog.com ASoC: adau1372: fix invalid default state of output ASRC and DAC muxes
Alvin Šipraga alvin.sipraga@analog.com ASoC: adau1372: allow sleepy powerdown GPIOs
Yingying Tang yingying.tang@oss.qualcomm.com Revert "wifi: ath12k: add panic handler"
Devin Wittmayer lucid_duck@justthetip.ca wifi: mt76: mt792x: pick the SAR table layout from the table itself
Junjie Cao junjie.cao@intel.com wifi: mt76: mt792x: treat 0xff ACPI SAR entries as no limit
Devin Wittmayer lucid_duck@justthetip.ca wifi: mt76: mt7925: don't put the band auto marker in TGID
Nicolas Cavallari nicolas.cavallari@green-communications.fr wifi: mt76: mt7915: disable rx napi when removing device
Tao Gong gongtao0607@gmail.com wifi: mt76: mt7996: fix struct mt7996_mcu_wed_rro_ba_delete_event layout
Aaron Ma aaron.ma@canonical.com wifi: mt76: mt7925: restore the legacy BSS after MLO teardown
Felix Fietkau nbd@nbd.name wifi: mt76: use ALTX queue for packets to disassociated stations
Felix Fietkau nbd@nbd.name wifi: mt76: route nullfunc frames to PSD/ALTX queue
Felix Fietkau nbd@nbd.name wifi: mt76: account non-AQL frames per peer rather than per link
Felix Fietkau nbd@nbd.name wifi: mt76: add PS buffering support for HW-managed TIM drivers
Felix Fietkau nbd@nbd.name wifi: mac80211: add ieee80211_txq_aql_pending()
Felix Fietkau nbd@nbd.name wifi: mac80211: add AQL support for multicast packets
David Bauer mail@david-bauer.net wifi: mt76: don't return TXQ when exceeding max non-AQL packets
Aurelien Jarno aurelien@aurel32.net riscv: vector: Fix output operands in context save
Troy Mitchell troy.mitchell@linux.dev riscv: vector: Fix data pointer constraints in context save/restore
Jakub Kicinski kuba@kernel.org net: make dev_xdp_sb_prog_count() see programs attached through a link
Alan Previn alan.previn.teres.alexis@intel.com drm/xe/mmio: Fix xe_mmio_wait32() to honor delay/sleep maximums
Filipe Manana fdmanana@suse.com btrfs: fix lost error return value in btrfs_listxattr()
Filipe Manana fdmanana@suse.com btrfs: fix xattr replace when multiple xattrs are packed in the same item
Yang Xiuwei yangxiuwei@kylinos.cn btrfs: unlock inode and extent in caller when io_uring read extent fails
Yang Xiuwei yangxiuwei@kylinos.cn btrfs: free iov when btrfs_uring_read_extent() fails
Yang Xiuwei yangxiuwei@kylinos.cn btrfs: always return -EIOCBQUEUED after btrfs_uring_read_extent_endio
Shin'ichiro Kawasaki shinichiro.kawasaki@wdc.com zloop: zero out only the unread tail of short reads
Fuad Tabba fuad.tabba@linux.dev arm64/boot: Don't set PMUv3p9 FGT2 bits without PMUv3
Sang-Hoon Choi csh0052@gmail.com nvmet: use the local P2P device on metadata allocation failure
Guixin Liu kanie@linux.alibaba.com nvmet: return Invalid Field for invalid NSIDs feature 82h
Bryan Fraschetti bryan.fraschetti@canonical.com ice: Restore Ordered MMIO Writes for Tx Doorbells
Mahantesh Salimath mahantesh@nvidia.com tee: optee: ffa: support shared memory offsets on large-page kernels
Rodrigo Zaiden rodrigoffzz@gmail.com tee: optee: fix kernel-doc warnings
Sang-Hoon Choi csh0052@gmail.com cxgb4/ch_ktls: disable softirqs around tid_list erases
Omar Ramadan omar@blockcast.net amt: send the relay's General Query directly from the receive path
Jamal Hadi Salim jhs@mojatatu.com net/sched: em_text: reject unterminated algo before autoload
Maíra Canal mcanal@igalia.com drm/vc4: Free the BO cache size list on teardown
Myeonghun Pak mhun512@gmail.com drm/aspeed: Balance the display clock enable on teardown
Sang-Hoon Choi csh0052@gmail.com gpio: exar: initialize the ID before registering its cleanup
Oleg Keri okerixx@gmail.com drm/dp: don't mark the AUX backlight enabled when enabling failed
Sai Teja Aluvala aluvala.sai.teja@intel.com Bluetooth: btintel_pcie: Add shared HW reset for clean start
Ravindra ravindra@intel.com Bluetooth: btintel_pcie: fix TX descriptor bounds check
Christian Brauner brauner@kernel.org fs: don't let a migrating task hide its reference from do_umount()
Mateusz Guzik mjguzik@gmail.com fs: move mntput_no_expire() slowpath into a dedicated routine
Christian Brauner brauner@kernel.org mount: refuse MOVE_MOUNT_SET_GROUP on an unbindable mount
Vincent Jardin vjardin@free.fr arm64: dts: lx2160a: fix the iic5 spi3 pinmux offset and value
Vincent Jardin vjardin@free.fr arm64: dts: lx2160a: fix IIC1 pinmux submask rejected by pinctrl-single
Vincent Jardin vjardin@free.fr arm64: dts: lx2160a: fix incorrect pinmux
Ze Tan tanze@kylinos.cn smb/server: fix tree connection leak in smb2_tree_connect()
Namjae Jeon linkinjeon@kernel.org ksmbd: convert tree_conns_lock to rw_semaphore
Tetsuo Handa penguin-kernel@I-love.SAKURA.ne.jp printk: Don't WARN on kthread_run failure.
Eduard Zingerman eddyz87@gmail.com bpf: check_cond_jmp_op(): properly infer if register is null
Lorenzo Bianconi lorenzo.bianconi@oss.qualcomm.com net: stmmac: fix dma mapping leak in stmmac_tso_xmit()
Eric Dumazet edumazet@google.com ipv6: mcast: use rcu_assign_pointer() for __rcu list updates
Yuyang Huang sigefriedhyy@gmail.com ipv6: mcast: annotate data-races around mca_users
Eduard Zingerman eddyz87@gmail.com bpf: backtrack_insn(): Handle ld_{abs,ind} subprog exit edge
Eduard Zingerman eddyz87@gmail.com bpf: backtracking shouldn't clear outer frame R1-R5 for callbacks
Kumar Kartikeya Dwivedi memxor@gmail.com bpf: Mark syscall helpers as sleepable
Steven Rostedt rostedt@goodmis.org ring-buffer: Add checking nr_subbufs to persistent ring buffer validation
Masami Hiramatsu (Google) mhiramat@kernel.org ring-buffer: Skip invalid sub-buffers when validating persistent ring buffer
Eduard Zingerman eddyz87@gmail.com bpf: zero extend the result of an arena 32-bit cmpxchg
Eduard Zingerman eddyz87@gmail.com bpf: don't rewrite bpf_fastcall patterns entered by a jump
Eduard Zingerman eddyz87@gmail.com bpf: Don't infer non-NULL from a pointer with an unbounded offset
Ning Ding dingning04@gmail.com bpf: Keep refcount_acquire nullable for borrowed RCU kptrs
Kumar Kartikeya Dwivedi memxor@gmail.com bpf: Mark NULL kptr stores precise
Kumar Kartikeya Dwivedi memxor@gmail.com bpf: Preserve inner map identity in callback frames
Vincent Donnefort vdonnefort@google.com tracing: Fix subbuf resize races with trace_pipe_raw readers
Eduard Zingerman eddyz87@gmail.com bpf: mark a NULL call argument precise
Fangyu Yu fangyu.yu@linux.alibaba.com iommu/riscv: Serialize command queue publishing
Alexander Graf graf@amazon.com virtio_ring: fix stale descriptor flags after a failed packed add
Jia Jia physicalmtea@gmail.com vduse: validate virtqueue alignment
Jia Jia physicalmtea@gmail.com vhost: invalidate vring access on IOTLB transitions
Steven Rostedt rostedt@goodmis.org tracing: Take trace_array reference when opening a tracer options file
Arunpravin Paneer Selvam Arunpravin.PaneerSelvam@amd.com drm/amdgpu: skip the VMID 0 flush for VRAM
Paulo Alcantara pc@manguebit.org smb: client: honor forceuid/forcegid when mapping SIDs to uid/gid
Paulo Alcantara pc@manguebit.org smb: client: avoid using uninitialized SIDs in cifs_posix_to_fattr()
Namjae Jeon linkinjeon@kernel.org ksmbd: fix maximum allowed access checks
Alexey Velichayshiy a.velichayshiy@ispras.ru ksmbd: remove redundant DACL check in smb_check_perm_dacl
Val Packett val@packett.cool remoteproc: qcom_wcnss: Fix handling the lack of PD regulators in v3
Gou Hao gouhao@uniontech.com powerpc/xive: propagate IPI init errors to prevent use-after-free
Gou Hao gouhao@uniontech.com powerpc/xive: add error return value to xive_smp_probe()
Rafael J. Wysocki rafael.j.wysocki@intel.com ACPI: bus: Introduce acpi_bus_get_primary_device()
Nitin Gote nitin.r.gote@intel.com drm/xe: don't WARN on kernel job timeout when device already wedged
Chris Mason clm@meta.com nfsd: convert nfsd_net boolean flags to unsigned long flags word
NeilBrown neil@brown.name nfsd: use workqueue enable/disable APIs for v4_end_grace sync
Bryam Vargas hexlabsecurity@proton.me dm-pcache: validate seg_id fields from persistent memory
Evgenii Burenchev evg28bur@yandex.ru drm/amd/display: Fix dangling pointer in plane reset function
Evgenii Burenchev evg28bur@yandex.ru drm/amd/display: Fix dangling pointer in CRTC reset function
Alex Bereza alex@bereza.email dmaengine: xilinx_dma: Fix CPU stall in xilinx_dma_poll_timeout
Jiri Olsa jolsa@kernel.org uprobes/x86: Move optimized uprobe from nop5 to nop10
Yiyang Chen chenyy23@mails.tsinghua.edu.cn bpf: Reject MEM_ALLOC BTF accesses past object bounds
Nicholas Dudar main.kalliope@gmail.com bpf: Reject writes through untrusted BTF pointers
Armin Wolf W_Armin@gmx.de platform/x86: dell-wmi-base: Fix handling of ultra performance key
Nicholas Dudar main.kalliope@gmail.com bpf: Reject rdonly/rdwr_buf_size kfunc arguments that exceed u32 max
Qing Ming a0yami@mailbox.org usb: gadget: uac: validate rate list length before storing
Marco Scardovi scardracs@disroot.org platform/x86: asus-wmi: fix resource leaks on probe failure
Maher Azzouzi maherazz04@gmail.com esp: do not unref managed frag pages in esp_ssg_unref()
Leon Romanovsky leon@kernel.org RDMA/rvt: Return NULL after port allocation failure
Reinette Chatre reinette.chatre@intel.com fs/resctrl: Fix UAF from worker threads when domains are removed
Dave Jiang dave.jiang@intel.com cxl/features: Serialize multi-part Get/Set Feature transfers
Sudeep Holla sudeep.holla@kernel.org firmware: arm_scmi: Fix SCMI device destroy lifetimes
Sudeep Holla sudeep.holla@kernel.org firmware: arm_scmi: Fix OF node reference handling
Sudeep Holla sudeep.holla@kernel.org firmware: arm_scmi: Clear SystemPower flag on create failure
Aditya Prakash Srivastava aditya.ansh182@gmail.com ext4: fix ABBA deadlock in ext4_xattr_inode_cache_find()
Leon Hwang leon.hwang@linux.dev bpf: Fix WARNING in bpf_tracing_link_release
Justin Yeh justin.yeh@mediatek.com pinctrl: mediatek: use devm_gpiochip_add_data() for GPIO chip
Li Qiang liqiang01@kylinos.cn scsi: ufs: core: Validate string descriptors
Bean Huo beanhuo@micron.com scsi: ufs: core: Convert string descriptor format macros to enum
Nicolin Chen nicolinc@nvidia.com iommu/tegra241-cmdqv: Don't fall back to a freed smmu after devm_krealloc()
Gary Guo gary@garyguo.net PCI: Fix UAF when probe runs concurrent to dyn ID removal
Gary Guo gary@garyguo.net PCI: Fix dyn_id add TOCTOU
Gary Guo gary@garyguo.net PCI: Make pci_match_one_device() match on ID instead of device
Leon Romanovsky leon@kernel.org RDMA/cxgb4: Fix dereg_skb leak and double free in write_tpt_entry()
Guixin Liu kanie@linux.alibaba.com nvmet: fix return status of RMI log page on allocation failure
Adrián Larumbe adrian.larumbe@collabora.com drm/panthor: Add vm_bind region with kbo range overlap check
Jeff Johnson jeff.johnson@oss.qualcomm.com wifi: ath12k: fix overreads in ath12k_wmi_process_csa_switch_count_event()
Abd-Alrhman Masalkhi abd.masalkhi@gmail.com md: remove REQ_NOWAIT support from raid1/10/456
Shayne Chen shayne.chen@mediatek.com wifi: mt76: fix handling channel context with different bands in mt76_switch_vif_chanctx()
Eason Lai Eason.Lai@mediatek.com wifi: mt76: mt792x: fix use-after-free in mt76_rx_poll_complete
Felix Fietkau nbd@nbd.name wifi: mt76: cancel reset and rc work on device unregister
Yonghong Song yonghong.song@linux.dev bpf: Reject >8 byte return values on return-reading trampoline paths
Felix Fietkau nbd@nbd.name wifi: mt76: mt7996: clear stale link state on full reset
Will Deacon will@kernel.org arm64: ptrace: Keep 'orig_x0' in-sync with x0 on syscall entry
Zhao Li enderaoelyther@gmail.com wifi: nl80211: clean up color-change beacon data on errors
Jason Huang jason.huang2@infineon.com wifi: brcmfmac: fix P2P action frame handling without device vif
Karl Mehltretter kmehltretter@gmail.com serial: core: do fallible allocations before the console can be registered
Karl Mehltretter kmehltretter@gmail.com serial: core: clear freed pointers on uart_register_driver() failure
Karl Mehltretter kmehltretter@gmail.com tty: skip cdev_del() when no cdev is registered
Haoxiang Li haoxiang_li2024@163.com HID: logitech-hidpp: Fix FF device cleanup on init failure
Yang Xiuwei yangxiuwei@kylinos.cn ublk: validate auto buf reg before taking uring_cmd
Ning Ding dingning04@gmail.com bpf: Invalidate RCU pointers after final spin unlock
Krzysztof Wilczyński kwilczynski@kernel.org PCI/sysfs: Add lockdown checks to legacy I/O and memory handlers
Rafael J. Wysocki rafael.j.wysocki@intel.com thermal: hwmon: Remove hwmon class device along with its parent
Cen Zhang zzzccc427@gmail.com ocfs2: o2hb: quiesce negotiate handlers and timeout work
Yufan Chen ericterminal@gmail.com ocfs2/heartbeat: fix slot mapping rollback leaks on error paths
Jiri Olsa jolsa@kernel.org bpf: Clear buf on error in __bpf_get_task_stack
Jiri Olsa jolsa@kernel.org bpf: Remove trace_in argument from __bpf_get_stack
Jiri Olsa jolsa@kernel.org bpf: Factor callchain_finalize function from __bpf_get_stack
Jiri Olsa jolsa@kernel.org bpf: Factor callchain_store function from __bpf_get_stack
Harry Wentland harry.wentland@amd.com drm/amd/display: Resize MST HDCP per-connector arrays to 32
Ray Wu ray.wu@amd.com drm/amd/display: disable replay when crc source is enabled
Yeoreum Yun yeoreum.yun@arm.com coresight: etm4x: missing cscfg_csdev_disable_active_config() in perf enable
Yang Xiuwei yangxiuwei@kylinos.cn scsi: sd: Fix special_vec mempool leak when scsi_alloc_sgtables() fails
Bart Van Assche bvanassche@acm.org scsi: sd: Move the sd_config_discard() function definition
Bart Van Assche bvanassche@acm.org scsi: sd: Move the sd_remove() function definition
Uwe Kleine-König u.kleine-koenig@baylibre.com scsi: sd: Convert to SCSI bus methods
Uwe Kleine-König u.kleine-koenig@baylibre.com scsi: core: sysfs: Make use of bus callbacks
Uwe Kleine-König u.kleine-koenig@baylibre.com scsi: core: Pass a struct scsi_driver to scsi_{,un}register_driver()
Sun YangKai sunyangkai@fnnas.com btrfs: check if root is readonly when setting posix acl
Miquel Sabaté Solà mssola@mssola.com btrfs: apply the AUTO_K(V)FREE macros throughout the code
Johannes Thumshirn johannes.thumshirn@wdc.com btrfs: zoned: flush active metadata block group at btree_writepages() start
Lu Baolu baolu.lu@linux.intel.com iommu/vt-d: Fix iopf_refcount leak on RID domain replacement
Nicolin Chen nicolinc@nvidia.com iommu: Pass in old domain to attach_dev callback functions
Chuck Lever chuck.lever@oracle.com NFS: Return a delegation the client fails to record
Ning Ding dingning04@gmail.com bpf: Compare iterator types during state pruning
Daniel Borkmann daniel@iogearbox.net bpf, s390: Clear fetch destination on faulting arena atomic
Marek Szyprowski m.szyprowski@samsung.com clocksource/drivers/samsung_pwm: Switch to raw_spinlock_t type
Maurizio Lombardi mlombard@redhat.com nvmet: fix max_qid race between configfs and controller allocation
Usama Arif usama.arif@linux.dev blk-iolatency: clear delay state when freeing policy data
Usama Arif usama.arif@linux.dev blk-iocost: clear delay state when freeing policy data
Yu Kuai yukuai@fygo.io blk-cgroup: delay freeing policy data after rcu grace period
Yiyang Chen chenyy23@mails.tsinghua.edu.cn bpf: Check pointer type for all atomic RMW paths
Yunseong Kim yunseong.kim@est.tech ksmbd: fix slab-out-of-bounds read in ksmbd_alloc_user()
Namjae Jeon linkinjeon@kernel.org ksmbd: serialize oplock close with pending break ownership
Ilan Dudnik ilan.dudnik@safebreach.com ksmbd: defer publishing granted locks to prevent UAF/double-free race
Namjae Jeon linkinjeon@kernel.org ksmbd: safely discard unregistered deferred locks
Namjae Jeon linkinjeon@kernel.org ksmbd: detach blocked lock requests before freeing
Namjae Jeon linkinjeon@kernel.org ksmbd: scope session state changes to bound connections
Petr Oros poros@redhat.com dpll: fix NULL deref in dpll_device_ops() during teardown race
Anton Protopopov a.s.protopopov@gmail.com virtio_net: Fix resize of the RX ring
Sascha Bischoff Sascha.Bischoff@arm.com irqchip/gic-v5: Clear per-CPU IRS data on teardown
Eric Dumazet edumazet@google.com ip6mr: do not clone dst in ip6mr_cache_report()
Nikolay Aleksandrov razor@blackwall.org net: bridge: arp/nd proxy: fix reading neigh ha
Nikolay Aleksandrov razor@blackwall.org vxlan: fix reading neigh ha
Jérémy Jean Jeremy.Jean@oss.cyber.gouv.fr NFSv4.1: zero referring call lists before decoding
Jamal Hadi Salim jhs@mojatatu.com net/sched: account classifier filter allocations to memcg
Bernd Schubert bernd@bsbernd.com fuse: Fix the condition to enable over-io-uring
Pauli Virtanen pav@iki.fi Bluetooth: L2CAP: access chan->conn safely in get/setsockopt
Radek Podgorny radek@podgorny.cz Bluetooth: do not leak an hci_conn when a second LE connect is rejected
Long Li longli@microsoft.com net: mana: Cap MSI-X vectors to the device MSI-X table size
Sai Krishna saikrishnag@marvell.com octeontx2-af: fix cn20k mailbox lifetime on repeated rvu_mbox_init()
Pablo Neira Ayuso pablo@netfilter.org netfilter: nf_tables: skip double clone set expressions on element insert
Sean Christopherson seanjc@google.com KVM: SEV: Forcefully invalidate SNP VMSA if its backing gmem page is zapped
Zeng Chi zengchi@kylinos.cn LoongArch: KVM: Validate MSI data before routing it to EIOINTC
Bibo Mao maobibo@loongson.cn LoongArch: KVM: Get VM PMU capability from HW GCFG register
Jackson Lee jackson.lee@chipsnmedia.com media: chips-media: wave5: Resume device before setting EOS flag
Jesse Zhang Jesse.Zhang@amd.com drm/amdgpu: force complete the KIQ ring fences on reset
Jesse Zhang Jesse.Zhang@amd.com drm/amdgpu: force complete the MES ring fences on reset
Longlong Xia xialonglong@kylinos.cn zram: fix out-of-bounds access in writeback_store()
Jeff Layton jlayton@kernel.org lockd, nfsd: RCU-protect nlmsvc_ops dispatch
Jeff Layton jlayton@kernel.org nfsd: restore rq_status_counter to even on all nfsd_dispatch() exit paths
Xiubo Li xiubo.li@clyso.com ceph: fix UAF in check_new_map() on session freed during unlock
Frank Sorenson sorenson@redhat.com cifs: call pagecache_isize_extended() in cifs_setsize() when extending
Jan Kara jack@suse.cz ext2: Fix lost inode updates for IS_SYNC inodes
Pratyush Yadav (Google) pratyush@kernel.org kho: fix size calculation in kho_preserved_memory_reserve()
Chuck Lever chuck.lever@oracle.com SUNRPC: Reject short RFC 4121 MIC tokens in gss_krb5_verify_mic_v2
Chuck Lever chuck.lever@oracle.com SUNRPC: Switch MIC token verification to crypto/krb5
Chuck Lever chuck.lever@oracle.com SUNRPC: Switch MIC token generation to crypto/krb5
Chuck Lever chuck.lever@oracle.com SUNRPC: Switch wrap token decryption to crypto/krb5
Chuck Lever chuck.lever@oracle.com SUNRPC: Switch wrap token encryption to crypto/krb5
Chuck Lever chuck.lever@oracle.com SUNRPC: Prepare crypto/krb5 encryption and checksum handles
Chuck Lever chuck.lever@oracle.com SUNRPC: Add errno-to-GSS status conversion helper
Chuck Lever chuck.lever@oracle.com SUNRPC: Add crypto/krb5 enctype lookup to krb5_ctx
Chuck Lever chuck.lever@oracle.com svcrdma: Clear sc_cm_id when ADDR_CHANGE replacement fails
Chuck Lever chuck.lever@oracle.com svcrdma: wake sq waiters when the transport closes
Chuck Lever chuck.lever@oracle.com svcrdma: Add Write chunk WRs to the RPC's Send WR chain
Guidong Han 2045gemini@gmail.com RISC-V: KVM: Fix PMU event info array size overflow
Lukas Gerlach lukas.gerlach@cispa.de KVM: riscv: Fix Spectre-v1 in PMU counter access
Leon Romanovsky leon@kernel.org ntb: Store original DMA address for future release
Koichiro Den den@valinux.co.jp NTB: ntb_transport: Use ntb_get_dma_dev() for DMA buffers
Koichiro Den den@valinux.co.jp NTB: core: Add .get_dma_dev() callback to ntb_dev_ops
Eric Dumazet edumazet@google.com tipc: avoid busy looping in tipc_exit_net()
Thomas Zimmermann tzimmermann@suse.de fbdev: Wrap user-invoked calls to fb_set_var() in helper
William Palacek William.Palacek@amd.com drm/amdkfd: Add bounds check for CRAT subtype length
Yongqiang Sun Yongqiang.Sun@amd.com drm/amdkfd: Fix infinite loop parsing CRAT with zero subtype length
Luxiao Xu rakukuip@gmail.com bpf: Check sk_state before sk_protocol in bpf_tcp_*_syncookie
Alex Deucher alexander.deucher@amd.com drm/amd/display: check if dml21_add_phantom_plane() is successful
Yuho Choi dbgh9129@gmail.com dmaengine: idxd: fix double free of wq, engine, and group structs
Michael Bommarito michael.bommarito@gmail.com idpf: bound interrupt-vector register fill to the allocated array
Pauli Virtanen pav@iki.fi Bluetooth: hci_sync: hold conn in hci_connect_acl/le_sync() callbacks
Prasanna Kumar T S M ptsm@linux.microsoft.com soc: xilinx: Fix race condition in event registration
Jay Buddhabhatti jay.buddhabhatti@amd.com drivers: firmware: xilinx: Switch to new family code in zynqmp_pm_get_family_info()
Jay Buddhabhatti jay.buddhabhatti@amd.com drivers: firmware: xilinx: Add unique family code for all platforms
David Carlier devnexen@gmail.com netfilter: flowtable: avoid num_encaps underflow on bridge VLAN untag
Weiming Shi bestswngs@gmail.com btrfs: lzo: reject compressed segment that overflows the compressed input
Mostafa Saleh smostafa@google.com optee: ffa: Add NULL check in optee_ffa_lend_protmem
Hongjie Fang hongjiefang@asrmicro.com scsi: core: pair EH runtime PM get and put
Ralf Lici ralf@mandelbit.com ovpn: defer key slot crypto freeing to workqueue
Julian Anastasov ja@ssi.bg ipvs: revalidate ihl to prevent out-of-bounds access
Jakub Kicinski kuba@kernel.org eth: bnxt: avoid deadlock when canceling IRQ affinity notifier
Jakub Kicinski kuba@kernel.org eth: bnxt: decrease indent in bnxt_request_irq()
Mark Tomlinson mark.tomlinson@alliedtelesis.co.nz gpio: pca953x: fix pca953x_irq_bus_sync_unlock regmap lock
Karthikeyan KS karthiproffesional@gmail.com soc: aspeed: lpc-snoop: Fix usercopy overflow in snoop_file_read
David Lee david.lee@trailofbits.com btrfs: lzo: reject inline extents without valid headers
Lizhi Hou lizhi.hou@amd.com accel/amdxdna: Fix locally exploitable BUG_ON in amdxdna_insert_pages()
Lizhi Hou lizhi.hou@amd.com accel/amxdna: Fix page-insertion errors in amdxdna_insert_pages()
Chengfeng Ye nicoyip.dev@gmail.com bpf: Fix netns reference imbalance in conntrack kfuncs
Linfeng Sun linfeng.sun.dev@gamil.com vhost_iotlb: bound map allocation in add_range
Steven Rostedt rostedt@goodmis.org eventfs: Use children field for rcu head and add memory barriers
Dongjiang Zhu zhudongjiang@fnnas.com btrfs: skip global block reserve accounting for rescue mounts
Qu Wenruo wqu@suse.com btrfs: warn about extent buffer that can not be released
Qu Wenruo wqu@suse.com btrfs: only invalidate btree inode pages after all ebs are released
David Sterba dsterba@suse.com btrfs: split btrfs_fs_closing() and change return type to bool
Carlos López clopez@suse.de KVM: arm64: vgic: Fix race between LPI release and re-registration
Xiang Mei (Microsoft) xmei5@asu.edu nexthop: take nh->lock for f6i_list walks in replace check and notify
Xiang Mei (Microsoft) xmei5@asu.edu nexthop: avoid unlocked f6i_list walk in nh_rt_cache_flush
Maciej Fijalkowski maciej.fijalkowski@intel.com xsk: reclaim invalid Tx descriptors in ZC batch path
Maciej Fijalkowski maciej.fijalkowski@intel.com xsk: provide sufficient space in pool->tx_descs
Cen Zhang (Microsoft) blbllhy@gmail.com net/sched: cls_u32: validate offshift to prevent shift-out-of-bounds
David Howells dhowells@redhat.com netfs: Fix folio_queue ENOMEM in writeback by adding a mempool
Pauli Virtanen pav@iki.fi Bluetooth: hci_sync: hold conn in hci_connect_big_sync() callback
Luiz Augusto von Dentz luiz.von.dentz@intel.com Bluetooth: hci_conn: Fix using conn->le_{tx,rx}_phy as supported PHYs
Kees Cook kees@kernel.org net: Convert proto_ops bind() callbacks to use sockaddr_unsized
Kriish Sharma kriish.sharma2006@gmail.com hdlc_ppp: fix potential null pointer in ppp_cp_event logging
Pauli Virtanen pav@iki.fi Bluetooth: hci_sync: hold conn in hci_connect_pa_sync() callback
Hariprasad Kelam hkelam@marvell.com octeontx2-af: Block VFs from clobbering special CGX PKIND state
Harald Freudenberger freude@linux.ibm.com s390/zcrypt: Close speculative mem read possibility
Harald Freudenberger freude@linux.ibm.com s390/zcrypt: Rework domain processing within zcrypt device driver
Harald Freudenberger freude@linux.ibm.com s390/zcrypt: Move inline function rng_type6cprb_msgx from header to code
George Zhang george.zhang@amd.com drm/amd/display: Fix divide-by-zero in calculate_mcache_setting on zero viewport
Abd-Alrhman Masalkhi abd.masalkhi@gmail.com md/raid1,raid10: fix error-path detection with md_cloned_bio()
Abd-Alrhman Masalkhi abd.masalkhi@gmail.com md/raid1,raid10: fix bio accounting for split md cloned bios
Abd-Alrhman Masalkhi abd.masalkhi@gmail.com md/raid1,raid10: fix deadlock in read error recovery path
Abd-Alrhman Masalkhi abd.masalkhi@gmail.com md: replace wait loop with wait_event() in md_handle_request()
Miaoqing Pan miaoqing.pan@oss.qualcomm.com wifi: ath12k: fix memory leak in ath12k_wifi7_dp_rx_h_verify_tkip_mic()
Wei Zhang wei.zhang@oss.qualcomm.com wifi: ath12k: fix inconsistent arvif state in vdev_create error paths
Zhang Cen rollkingzzc@gmail.com ocfs2: validate fast symlink target during inode read
David Windsor dwindsor@gmail.com bpf: Reject sleepable BPF_LSM_CGROUP programs at load time
Bryam Vargas hexlabsecurity@proton.me wifi: mac80211: bound S1G TIM PVB walk to the TIM element
Johannes Berg johannes.berg@intel.com wifi: ieee80211: split S1G definitions out
Larysa Zaremba larysa.zaremba@intel.com ixgbe: do not configure xps for XDP queues
Yun Zhou yun.zhou@windriver.com ext4: validate donor file superblock early in EXT4_IOC_MOVE_EXT
Zhang Yi yi.zhang@huawei.com ext4: add mext_check_validity() to do basic check
Li RongQing lirongqing@baidu.com iommu/dma-iommu: Fix wrong scatterlist length assignment in P2PDMA path
Dan Williams djbw@kernel.org cxl/region: Block region delete during region creation
Pablo Neira Ayuso pablo@netfilter.org netfilter: nf_dup_netdev: add nf_dev_xmit_recursion*() helpers and use them
Weiming Shi bestswngs@gmail.com netfilter: nft_fwd_netdev: use recursion counter in neigh egress path
Pablo Neira Ayuso pablo@netfilter.org netfilter: nft_fwd_netdev: add device and headroom validate with neigh forwarding
Selvin Xavier selvin.xavier@broadcom.com RDMA/bnxt_re: Free CQ toggle page after firmware teardown
Selvin Xavier selvin.xavier@broadcom.com RDMA/bnxt_re: Add a max slot check for SQ
Eric Dumazet edumazet@google.com net: serialize netif_running() check in enqueue_to_backlog()
Eric Dumazet edumazet@google.com net: fully inline backlog_unlock_irq_restore()
Eric Dumazet edumazet@google.com net: optimize enqueue_to_backlog() for the fast path
Helen Koike koike@igalia.com fs/ntfs3: call _ntfs_bad_inode() when failing to rename
Konstantin Komarov almaz.alexandrovich@paragon-software.com fs/ntfs3: Reformat code and update terminology
Adrian Hunter adrian.hunter@intel.com i3c: mipi-i3c-hci: Fix race in i3c_hci_addr_to_dev()
Abd-Alrhman Masalkhi abd.masalkhi@gmail.com md/raid1: fix writes_pending and barrier reference leaks on write failures
Abd-Alrhman Masalkhi abd.masalkhi@gmail.com md/raid10: fix writes_pending leak on write request failures
Yiyang Chen chenyy23@mails.tsinghua.edu.cn bpf: Guard conntrack opts error writes
Puranjay Mohan puranjay@kernel.org bpf: net: netfilter: drop dead NULL checks
Eric Dumazet edumazet@google.com tipc: fix UAF in cleanup_bearer() due to premature dst_cache_destroy()
Boris Brezillon boris.brezillon@collabora.com drm/panthor: Always use the IRQ-safe variant when acquiring the fence lock
Michael Bommarito michael.bommarito@gmail.com xen/pvcalls: bound backend response req_id before indexing rsp[]
Fengnan Chang changfengnan@bytedance.com iomap: release pages on atomic dio size mismatch
Shay Drory shayd@nvidia.com net/mlx5: LAG, Fix off-by-one in single-FDB error rollback
Cen Zhang zzzccc427@gmail.com Bluetooth: 6lowpan: avoid untracked enable work
Lizhi Hou lizhi.hou@amd.com accel/amdxdna: Fix VMA access race
Max Zhen max.zhen@amd.com accel/amdxdna: Refactor GEM BO handling and add helper APIs for address retrieval
Lizhi Hou lizhi.hou@amd.com accel/amdxdna: Fill invalid payload for failed command
Yuho Choi dbgh9129@gmail.com net/liquidio: drop cached VF pci_dev LUT
Doruk Tan Ozturk doruk@0sec.ai accel/amdxdna: reject user command submission without a command BO
Bryam Vargas hexlabsecurity@proton.me ata: libata-core: Add NOLPM quirk for PNY CS900 1TB SSD
Niklas Cassel cassel@kernel.org ata: libata-core: Disable LPM on Silicon Motion MD619{H,G}XCLDE3TC
Zhao Li enderaoelyther@gmail.com wifi: mac80211: validate extension-frame layout before RX
Jamal Hadi Salim jhs@mojatatu.com net/sched: Handle TC_ACT_REDIRECT from qdisc filter chains
Honglei Huang honghuan@amd.com drm/amd/display: use kvzalloc to allocate struct dc
Cen Zhang zzzccc427@gmail.com wifi: cfg80211: use wiphy work for socket owner autodisconnect
Matt Bobrowski mattbobrowski@google.com bpf: Fix UAF in sock clone early bailouts
Fushuai Wang wangfushuai@baidu.com bpf: Use rcu_read_lock_dont_migrate in bpf_sk_storage.c
Arvind Yadav arvind.yadav@intel.com drm/xe/guc: Keep scheduler timeline name alive
Arvind Yadav arvind.yadav@intel.com drm/xe/guc: Hold device ref until queue teardown completes
Ruoyu Wang ruoyuw560@gmail.com bnxt_en: Handle partially initialized auxiliary devices
Pavan Chebbi pavan.chebbi@broadcom.com fwctl/bnxt_en: Refactor aux bus functions to be more generic
Weiming Shi bestswngs@gmail.com tipc: serialize udp bearer replicast list updates
Frank Sorenson sorenson@redhat.com cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths
Frank Sorenson sorenson@redhat.com cifs: prevent readdir from changing file size due to stale directory metadata
Satyanarayana K V P satyanarayana.k.v.p@intel.com drm/xe/vf: Add drm_dev guards when detaching CCS read/write buffers
Nicholas Dudar main.kalliope@gmail.com LoongArch: BPF: Zero-extend signed ALU32 div/mod results
Emil Tantilov emil.s.tantilov@intel.com idpf: fix max_vport related crash on allocation error during init
Joonas Lahtinen joonas.lahtinen@linux.intel.com drm/i915/gt: Fix NULL deref on sched_engine alloc failure
Harish Kasiviswanathan Harish.Kasiviswanathan@amd.com drm/amdgpu: Fix kernel panic during driver load failure
Namjae Jeon linkinjeon@kernel.org ksmbd: prevent path traversal bypass by restricting caseless retry
Ralph Boehme slow@samba.org smb/client: fix chown/chgrp with SMB3 POSIX Extensions
Arjan van de Ven arjan@linux.intel.com wifi: mt76: mt7921/mt7925: fix NULL dereference in CSA beacon
Sean Christopherson seanjc@google.com KVM: guest_memfd: Treat memslot binding offset+size as unsigned values
David Howells dhowells@redhat.com netfs: Fix zeropoint update where i_size > remote_i_size
Felix Gu ustc.gu@gmail.com drm/msm/adreno: Fix a reference leak in a6xx_gpu_init()
Jia Zhu zhujia.zj@bytedance.com erofs: fix metabuf leak in inode xattr initialization
Michael Bommarito michael.bommarito@gmail.com net: hsr: defer node table free until after RCU readers
Zhao Li enderaoelyther@gmail.com wifi: mac80211: capture fast-RX rate before mesh reuses skb->cb
Sarika Sharma sarika.sharma@oss.qualcomm.com wifi: mac80211: fix missing RX bitrate update for mesh forwarding path
Florian Westphal fw@strlen.de netfilter: x_tables: allocate hook ops while under mutex
Florian Westphal fw@strlen.de netfilter: x_tables: allow initial table replace without emitting audit log message
David Howells dhowells@redhat.com netfs: Fix missing barriers when accessing stream->subrequests locklessly
David Howells dhowells@redhat.com afs: Fix the locking used by afs_get_link()
Hongling Zeng zenghongling@kylinos.cn cachefiles: Fix error return when vfs_mkdir() fails
Keith Busch kbusch@kernel.org nvme-pci: fix dma_vecs leak on p2p memory
Keith Busch kbusch@kernel.org nvme-pci: fix dma mapping leak on data setup error
Rafael J. Wysocki rafael.j.wysocki@intel.com ACPI: button: Fix ACPI GPE handler leak during removal
Rafael J. Wysocki rafael.j.wysocki@intel.com ACPI: button: Tweak acpi_button_remove()
Rafael J. Wysocki rafael.j.wysocki@intel.com ACPI: button: Convert the driver to a platform one
Rafael J. Wysocki rafael.j.wysocki@intel.com ACPI: button: Adjust event notification routines
Jamal Hadi Salim jhs@mojatatu.com net/sched: fix packet loop on netem when duplicate is on
Jamal Hadi Salim jhs@mojatatu.com net: Introduce skb tc depth field to track packet loops
Mark Brown broonie@kernel.org KVM: arm64: Correctly cap ZCR_EL2 provided by a guest hypervisor
Christian König christian.koenig@amd.com drm/amdgpu: fix amdgpu_hmm_range_get_pages
Pablo Neira Ayuso pablo@netfilter.org netfilter: nf_tables: add hook transactions for device deletions
Mikhail Lobanov m.lobanov@rosa.ru f2fs: read COW data with the original inode during atomic write
Hongling Zeng zenghongling@kylinos.cn fbdev: omap2: fix use-after-free in omapfb_mmap
Hongling Zeng zenghongling@kylinos.cn fbdev: omap2: fix inconsistent lock returns in omapfb_mmap
Krzysztof Kozlowski krzysztof.kozlowski@oss.qualcomm.com power: supply: max77705: Free allocated workqueue and fix removal order
Krzysztof Kozlowski krzysztof.kozlowski@oss.qualcomm.com power: supply: max77705: Drop duplicated IRQ error message
Krzysztof Kozlowski krzysztof.kozlowski@oss.qualcomm.com workqueue: devres: Add device-managed allocate workqueue
Morduan Zang zhangdandan@uniontech.com net: phonet: do not BUG_ON() in pn_socket_autobind() on failed bind
Mikhail Gavrilov mikhail.v.gavrilov@gmail.com drm/amd/display: Wrap DCN32 phantom-plane allocation in DC_RUN_WITH_PREEMPTION_ENABLED
Johannes Berg johannes.berg@intel.com wifi: cfg80211: enforce HE/EHT cap/oper consistency
Vadim Fedorenko vadim.fedorenko@linux.dev ptp: ocp: fix resource freeing order
Andy Shevchenko andriy.shevchenko@linux.intel.com ptp: ocp: Make ptp_ocp_unregister_ext() NULL-aware
Uday Shankar ushankar@purestorage.com ublk: reset per-IO canceled flag on each fetch
Ritesh Harjani (IBM) ritesh.list@gmail.com powerpc/64s: Fix unmap race with PMD migration entries
Damien Riégel damien.riegel@silabs.com greybus: raw: fix use-after-free on cdev close
Yongpeng Yang yangyongpeng@xiaomi.com f2fs: fix data loss caused by incorrect use of nat_entry flag
Michal Schmidt mschmidt@redhat.com ice: fix double-free of tx_buf skb
Kohei Enju kohei@enjuk.jp ice: fix potential NULL pointer deref in error path of ice_set_ringparam()
Keita Morisaki kmta1236@gmail.com ice: fix race condition in TX timestamp ring cleanup
Alexander Lobakin aleksander.lobakin@intel.com ice: reshuffle and group Rx and Tx queue fields by cachelines
Hristo Venev hristo@venev.name ceph: put folios not suitable for writeback
Raphael Zimmer raphael.zimmer@tu-ilmenau.de libceph: Fix potential out-of-bounds access in __ceph_x_decrypt()
Thomas Hellström thomas.hellstrom@linux.intel.com drm/ttm: Fix ttm_bo_shrink() infinite LRU walk on backup failure
Thomas Hellström thomas.hellstrom@linux.intel.com drm/ttm: Fix ttm_bo_swapout() infinite LRU walk on swapout failure
D. Wythe alibuda@linux.alibaba.com Revert "net/smc: Introduce TCP ULP support"
Sunil Khatri sunil.khatri@amd.com drm/amdgpu/userq: fix access to stale wptr mapping
Ritesh Harjani (IBM) ritesh.list@gmail.com pseries/papr-hvpipe: Fix race with interrupt handler
Christian Brauner brauner@kernel.org papr-hvpipe: convert papr_hvpipe_dev_create_handle() to FD_PREPARE()
Srinivasan Shanmugam srinivasan.shanmugam@amd.com drm/amd/display: Fix dc_link NULL handling in HPD init
Vishnu Reddy busanna.reddy@oss.qualcomm.com media: iris: fix use-after-free of fmt_src during MBPF check
Dmitry Baryshkov dmitry.baryshkov@oss.qualcomm.com media: iris: turn platform caps into constants
Yosry Ahmed yosry@kernel.org KVM: nSVM: Triple fault if restore host CR3 fails on nested #VMEXIT
Seohyeon Maeng bioloidgp@gmail.com udf: fix partition descriptor append bookkeeping
Deepanshu Kartikey kartikey406@gmail.com gfs2: fix memory leaks in gfs2_fill_super error path
Andreas Gruenbacher agruenba@redhat.com gfs2: Rename gfs2_{withdrawing_or_ => }withdrawn
Andreas Gruenbacher agruenba@redhat.com gfs2: Get rid of delayed withdraws
Andreas Gruenbacher agruenba@redhat.com gfs2: Asynchronous withdraw
Andreas Gruenbacher agruenba@redhat.com gfs2: Add clean argument to lm_unmount hook
Andreas Gruenbacher agruenba@redhat.com gfs2: Clean up quotad timeout handling
Utkarsh Singh utkarsh.singh.em@gmail.com gfs2/sysfs: Replace sprintf/snprintf with sysfs_emit
Chen Ni nichen@iscas.ac.cn ASoC: amd: acp-mach-common: Add missing error check for clock acquisition
Vladimir Riabchun ferr.lambarginio@gmail.com scsi: qla2xxx: Completely fix fcport double free
Prathamesh Shete pshete@nvidia.com soc/tegra: pmc: Fix unsafe generic_handle_irq() call
Ming Qian ming.qian@oss.nxp.com media: verisilicon: Avoid G2 bus error while decoding H.264 and HEVC
Nicolas Dufresne nicolas.dufresne@collabora.com media: v4l2-mem2mem: Add a kref to the v4l2_m2m_dev structure
Filipe Manana fdmanana@suse.com btrfs: don't BUG() on unexpected delayed ref type in run_one_delayed_ref()
Filipe Manana fdmanana@suse.com btrfs: remove 'reserved' argument from btrfs_pin_extent()
Qu Wenruo wqu@suse.com btrfs: do not ASSERT() when the fs flips RO inside btrfs_repair_io_failure()
Jori Koolstra jkoolstra@xs4all.nl hfs: Replace BUG_ON with error handling for CNID count checks
Cédric Bellegarde cedric.bellegarde@adishatz.org ASoC: qcom: q6asm: drop DSP responses for closed data streams
Srinivas Kandagatla srinivas.kandagatla@oss.qualcomm.com ASoC: qcom: q6asm: handle the responses after closing
Nicholas Kazlauskas nicholas.kazlauskas@amd.com drm/amd/display: Adjust PHY FSM transition to TX_EN-to-PLL_ON for TMDS on DCN35
Nicholas Kazlauskas nicholas.kazlauskas@amd.com drm/amd/display: Rename FAMS2 global control lock to DMUB HW control lock
Joel Fernandes joelagnelf@nvidia.com srcu: Use irq_work to start GP in tiny SRCU
Stanislav Kinsburskii skinsburskii@linux.microsoft.com mshv: Fix error handling in mshv_region_pin
Stanislav Kinsburskii skinsburskii@linux.microsoft.com mshv: Move region management to mshv_regions.c
Stanislav Kinsburskii skinsburskii@linux.microsoft.com mshv: Centralize guest memory region destruction
Stanislav Kinsburskii skinsburskii@linux.microsoft.com mshv: Refactor and rename memory region handling functions
Naman Jain namjain@linux.microsoft.com static_call: allow using STATIC_CALL_TRAMP_STR() from assembly
Pauli Virtanen pav@iki.fi Bluetooth: hci_sync: hci_cmd_sync_queue_once() return -EEXIST if exists
Takashi Iwai tiwai@suse.de ALSA: ctxfi: Check the error for index mapping
Harin Lee me@harin.net ALSA: ctxfi: Refactor resource alloc for sparse mappings
Harin Lee me@harin.net ALSA: ctxfi: Use explicit output flag for DAIO resources
Harin Lee me@harin.net ALSA: ctxfi: Add hw parameter to daio_mgr_dao_init()
Oleh Konko security@1seal.org Bluetooth: hci_event: move wake reason storage into validated event handlers
David Carlier devnexen@gmail.com net: ti: icssg-prueth: fix use-after-free of CPPI descriptor in RX path
Meghana Malladi m-malladi@ti.com net: ti: icssg-prueth: Make emac_run_xdp function independent of page
Meghana Malladi m-malladi@ti.com net: ti: icssg-prueth: Add functions to create and destroy Rx/Tx queues
Vadim Fedorenko vadim.fedorenko@linux.dev ti: icssg: convert to ndo_hwtstamp API
Larysa Zaremba larysa.zaremba@intel.com ice: change XDP RxQ frag_size from DMA write length to xdp.frame_sz
Larysa Zaremba larysa.zaremba@intel.com ice: fix rxq info registering in mbuf packets
Michal Schmidt mschmidt@redhat.com ice: fix crash in ethtool offline loopback test
Michal Kubiak michal.kubiak@intel.com ice: drop page splitting and recycling
Michal Kubiak michal.kubiak@intel.com ice: remove legacy Rx and construct SKB
Chaitanya Kulkarni kch@nvidia.com blktrace: fix __this_cpu_read/write in preemptible context
Lizhi Hou lizhi.hou@amd.com accel/amdxdna: Fix NULL pointer dereference of mgmt_chann
Haotian Zhang vulab@iscas.ac.cn PCI: endpoint: Add missing NULL check for alloc_workqueue()
Marco Crivellari marco.crivellari@suse.com PCI: Add WQ_PERCPU to alloc_workqueue() users
Lizhi Hou lizhi.hou@amd.com accel/amdxdna: Fix potential NULL pointer dereference in context cleanup
Lizhi Hou lizhi.hou@amd.com accel/amdxdna: Add hardware specific attributes
Lizhi Hou lizhi.hou@amd.com accel/amdxdna: Enhance runtime power management
Hengyu Liang hengyul@cs.unc.edu ata: libata-scsi: do not lose CHECK CONDITION for failed ATAPI commands
Christian Brauner brauner@kernel.org namespace: handle mount locking for automounts correctly
Christian Brauner brauner@kernel.org namespace: never expire a locked mount
Christian Brauner brauner@kernel.org namespace: refuse an automount below a mount that is in no namespace
Christian Brauner brauner@kernel.org fcntl: refuse F_SET_RW_HINT on an immutable inode
Christian Brauner brauner@kernel.org namei: don't reveal overmounted entries in refwalk
Christian Brauner brauner@kernel.org namespace: unhash a dentry before detaching the mounts on it
Christian Brauner brauner@kernel.org namespace: don't let a pseudo dentry become the root of a mount
Christian Brauner brauner@kernel.org dcache: don't put a mountpoint on a dentry that's being removed
Christian Brauner brauner@kernel.org namespace: check the mounts before reading their parents in pivot_root()
Christian Brauner brauner@kernel.org namespace: remove the fsnotify marks of a mount namespace in process context
Christian Brauner brauner@kernel.org namespace: look at the topmost mount for a mount namespace file
Christian Brauner brauner@kernel.org namespace: check a recursive bind mount for mount namespace loops
Christian Brauner brauner@kernel.org namespace: check a submount for references right before unmounting it
Christian Brauner brauner@kernel.org namespace: queue a mount only once for mount notifications
Christian Brauner brauner@kernel.org namespace: check the target before walking it in do_mount_setattr()
Christian Brauner brauner@kernel.org fs: refuse fspick() on internal superblocks
Christian Brauner brauner@kernel.org namespace: don't copy an unmounted mount tree
Christian Brauner brauner@kernel.org namespace: don't inherit MNT_UMOUNT in clone_mnt()
Christian Brauner brauner@kernel.org namespace: reset the old parent's ->overmount in mnt_change_mountpoint()
Christian Brauner brauner@kernel.org fs: don't silently unmount busy mounts
Christian Brauner brauner@kernel.org mount: keep a copied mount unbindable
Leo Li sunpeng.li@amd.com drm/amd/display: Fix direct scanout alpha on some DRM_FORMATs
Jesse Zhang Jesse.Zhang@amd.com drm/amdgpu/userq: return the memdup_user() error for the user MQD
Jesse Zhang Jesse.Zhang@amd.com drm/amdgpu/userq: only accept doorbell BOs as queue doorbell
Mikhail Gavrilov mikhail.v.gavrilov@gmail.com drm/amdgpu: copy debugfs register data outside the GRBM/SRBM locks
Alex Deucher alexander.deucher@amd.com drm/amdgpu: make Mac FB workaround generic
Vitaly Prosyak vitaly.prosyak@amd.com drm/amdgpu: serialize vblank counter reads against GPU reset
Haojie Li lihaojie@kylinos.cn drm/amdkfd: fix dma_buf reference leak in get_dmabuf_info
Saleel Kudchadker Saleel.Kudchadker@amd.com drm/amdkfd: align SDMA doorbell base for shader doorbell writes
Thomas Hellström thomas.hellstrom@linux.intel.com drm/xe: Fix stale pinned_link entry when fb-pin performs the final unpin
Thomas Hellström thomas.hellstrom@linux.intel.com drm/xe: Fix shrinker accounting double-subtraction on nested external pins
Zack Rusin zack.rusin@broadcom.com drm/vmwgfx: validate pitch coming from userspace
Wentao Liang vulab@iscas.ac.cn drm/vc4: Fix firmware reference leak in vc4_drm_bind()
Fan Wu fanwu01@zju.edu.cn drm/vc4: drain the hangcheck timer and works on V3D unbind
Gyeyoung Baek gye976@gmail.com drm/imagination: Size page table preallocation by device address
Krzysztof Karas krzysztof.karas@intel.com drm/i915/gt: Unmask interrupts only when ACTIVE is true
Krzysztof Karas krzysztof.karas@intel.com drm/i915/gem: Prevent overstepping exec array boundary
Sajal Gupta sajal2005gupta@gmail.com drm/gud: don't keep a connector without a CRTC as connector_state
Nguyen Ngoc Thang ngocthang2710.1999@gmail.com drm/fb-helper: defer setup when fbdev_probe() fails, not just on -EAGAIN
Palla Raghunath raghunathpalla.0209@gmail.com Bluetooth: RFCOMM: Fix NULL tty_dev dereference in rfcomm_dev_shutdown
Maxim Skokov skokovmaksimevg@gmail.com Bluetooth: RFCOMM: free the skb when the DLC has no owner
Aldo Ariel Panzardo qwe.aldo@gmail.com Bluetooth: SCO: serialise sco_conn lifetime against sco_recv_scodata()
Iaroslav Voitovych yaroslav.voytovych@gmail.com Bluetooth: MGMT: Fix status of pending commands flushed on power off
Chengfeng Ye nicoyip.dev@gmail.com Bluetooth: ISO: Serialize concurrent connect calls
Chengfeng Ye nicoyip.dev@gmail.com Bluetooth: ISO: Reject concurrent BIS listener setup
Chengfeng Ye nicoyip.dev@gmail.com Bluetooth: hci_sync: Fix command skb lifetime during scan setup
Chengfeng Ye nicoyip.dev@gmail.com Bluetooth: hci_sock: Serialize dead-device detachment
Runyu Xiao runyu.xiao@seu.edu.cn Bluetooth: btintel_pcie: use managed IRQ teardown
Zongmin Zhou zhouzongmin@kylinos.cn riscv: hwprobe: use _BITULL() rather than BIT() in MIPS vendor uapi header
Ziyi Guo guoziyi114@gmail.com riscv: futex: untag the user pointer before the atomic access
Karl Mehltretter kmehltretter@gmail.com riscv: fix load_unaligned_zeropad() fixup for RV32
Zongmin Zhou zhouzongmin@kylinos.cn riscv: errata: select RISCV_ALTERNATIVE_EARLY for THEAD GHOSTWRITE
Ziyi Guo guoziyi114@gmail.com riscv: entry: gate shadow call stack reload on sstatus.SPP, not tp
Runyu Xiao runyu.xiao@seu.edu.cn scsi: qedi: Initialize callback state before registration
Shawn Lin shawn.lin@rock-chips.com pmdomain: rockchip: propagate subdomain add errors
Shawn Lin shawn.lin@rock-chips.com pmdomain: rockchip: fix clock leak on domain probe failure
Shawn Lin shawn.lin@rock-chips.com pmdomain: rockchip: don't ignore clock lookup errors on attach
Ming Qian ming.qian@oss.nxp.com pmdomain: imx8m-blk-ctrl: Serialize power on/off across sibling domains
Ridham Khurana khurana.ridham222@gmail.com regulator: tps6594-regulator: Fix n_linear_ranges for TPS65224 BUCK2-4
Abhishek Ojha Abhishek.ojha@savoirfairelinux.com regulator: ltc3676: don't read the write-only HRST and CLIRQ registers
Shao-Fu Chen shf.chen@mediatek.com optee: register TEE devices only once fully initialized
Denis V. Lunev den@openvz.org openvswitch: fix soft lockup in the netlink flow dump
Karl Bonde Torp k.torp@samsung.com nvme: fix swapped ZRASF zone state values for full and read only
Weiming Shi bestswngs@gmail.com net: team: free skb when broadcast has no txable port
Weiming Shi bestswngs@gmail.com net: team: stop reusing skb after queue override
Fredrik Nyberg fredrik.nyberg@volvocars.com net: usb: ax88179_178a: fix rx frame length for non-last packets
Daniel Machon daniel.machon@microchip.com net: sparx5: free the matchall entry on destroy
Josef Bacik josef@toxicpanda.com net: skbuff: don't leave stale bytes in skb_copy_and_csum_bits()
Sebastien Royen sebastien.royen@armadeus.com net: dsa: microchip: fix KSZ8765 fiber detection
Zixuan Chai petalzu987@gmail.com net: bridge: avoid recursive multicast port cleanup
Chengfeng Ye nicoyip.dev@gmail.com net/smc: protect clcsock lifetime in smc_getname
Quchaosheng quchaosheng000406@163.com net/packet: guard the ll header push in packet_rcv_spkt()
Guangshuo Li lgs201920130244@gmail.com mmc: sdhci-sprd: disable runtime PM on remove
Yibo Tan lhfff@tju.edu.cn mmc: mtk-sd: Cancel request timeout work on remove
Guangshuo Li lgs201920130244@gmail.com mmc: cavium-thunderx: destroy slot platform devices on remove
Guangshuo Li lgs201920130244@gmail.com mmc: cavium-octeon: destroy slot platform devices on remove
Mikulas Patocka mpatocka@redhat.com dm: fix reading free memory in do_resume
Ma Xinmeng 1564938642@qq.com dm-snap: reject the transient exception store for snapshot-merge
Ben Cressey ben@cressey.dev dm-integrity: fix buffer overflow in inline mode with large tag size
Ben Cressey ben@cressey.dev dm-crypt: reject the lmk IV mode with AEAD ciphers
Mikhail Gavrilov mikhail.v.gavrilov@gmail.com mm: don't schedule deferred kernel page table freeing while booting
Nguyen Ngoc Thang ngocthang2710.1999@gmail.com memstick: rtsx_usb_ms: complete requests after eject instead of dropping them
Raj Ojha rajojha047@gmail.com memstick: core: wait for request completion before freeing card
성병찬 tjdqudcks0424@naver.com KEYS: Fix add_key() race with keyring restriction
Karl Mehltretter kmehltretter@gmail.com keys: finalize persistent keyring timeout after link attempt
Tristan Madani tristan@talencesecurity.com ice: fix metadata_dst refcount handling on representor teardown
Xuanqiang Luo luoxuanqiang@kylinos.cn ice: fix use-after-free in dynamic port cleanup
Mingming Cao mmc@linux.ibm.com ibmveth: fix TX LTB and filter unwind on open-fail
Mingming Cao mmc@linux.ibm.com ibmveth: h_free logical LAN on open-fail after register
Joshua Washington joshwash@google.com gve: fix XSK buffer leak on error descriptor
Joshua Washington joshwash@google.com gve: fix XSK buffer leak when rings are stopped
Joshua Washington joshwash@google.com gve: fix napi_disable deadlock when attempting to disable XSK pools
Ridham Khurana khurana.ridham222@gmail.com gpio: xilinx: fix runtime PM leak on request error path
Fan Wu fanwu01@zju.edu.cn gpio: mpsse: fix race when arming the IRQ poll worker
Vishal Badole Vishal.Badole@amd.com EDAC/amd64: Mask UMC chip select to the four implemented selects
Hui Peng benquike@gmail.com sctp: copy zeroed stats to user in sctp_getsockopt_pr_streamstatus() when !streamoute
Stephen Smalley stephen.smalley.work@gmail.com selinux: preserve NATIVE_LABELS on already-initialized sb in set_mnt_opts
Christian Göttsche cgzones@googlemail.com selinux: fix data race on AVC latest_notif
Yong-Xuan Wang yongxuan.wang@sifive.com RISC-V: Clear HSTATUS.HU on CPU initialization
Johannes Berg johannes.berg@intel.com Revert "wifi: libertas: reject short monitor TX frames"
Chengfeng Ye nicoyip.dev@gmail.com tipc: hold a reference to nodes found by link name
Yuqi Xu xuyuqiabc@gmail.com tipc: destroy topsrv workqueues before closing connections
Daehyeon Ko 4ncienth@gmail.com tcp: reject net_iov in zerocopy receive mapping hints
Marek Szyprowski m.szyprowski@samsung.com swiotlb: fix default_swiotlb_limit() for non-growable default pool
Sabrina Dubroca sd@queasysnail.net strparser: make sure __strp_recv isn't running before tearing down the parser
Georgiy Osokin g.osokin@auroraos.dev tee: shm: reject zero-sized allocations in tee_dyn_shm_alloc_helper()
Josef Bacik josef@toxicpanda.com xen/netfront: don't leak the skb when xennet_fill_frags() fails
Pavankumar Kondeti pavan.kondeti@oss.qualcomm.com workqueue: Fix NULL current_pwq deref in chained work check
Jason A. Donenfeld Jason@zx2c4.com wireguard: noise: reject response consumption after intermediate initiation
Ramses de Norre ramses@well-founded.dev wireguard: queueing: preserve tstamp_type when encapsulating packet
Lu Huang huanglu@kylinos.cn wifi: mt76: mt7996: fix uninitialized buf read in mt7996_variant_fem_init()
Cristian Papa pcristian292@gmail.com wifi: mt76: mt7603: initialize global station WCID
Michele Dionisio michele.dionisio@gmail.com wifi: brcmfmac: fix P2P device removal race in brcmf_detach()
Daehyeon Ko 4ncienth@gmail.com vsock/virtio: account only unread bytes in read_skb()
Ji-Ze Hong (Peter Hong) peter_hong@fintek.com.tw usb: f81604: fix struct f81604_int_data size mismatch
Palla Raghunath raghunathpalla.0209@gmail.com dm ioctl: don't let data_start run past the buffer
Daehyeon Ko 4ncienth@gmail.com cipso: adjust cached option offsets when removing CIPSO
Waiman Long longman@redhat.com cgroup/cpuset: Handle cpu hotplug race in guarantee_active_cpus()
Wentao Liang vulab@iscas.ac.cn btrfs: scrub: fix local_root reference leak in scrub_print_warning_inode()
Michael Garland minimelkav@gmail.com ASoC: amd: yc: Add DMI quirk for Acer Aspire Go 15 (AG15-21P)
Karl Mehltretter kmehltretter@gmail.com arm64: irq: exclude the softirq stack switch from KCOV
Mohamed Yassine Jebabli med.jebabli@gmail.com ALSA: hda/tas2781: Accept V1 calibration data without CRC
Harin Lee me@harin.net ALSA: ctxfi: Fix memory leakage when clearing DAO input mappers
Krzysztof Furman krisfur@proton.me Input: xpad - add support for Corsair Novablade Pro
Bihaan Sen stevewholikesthings@gmail.com Input: xpad - add support for 8BitDo Pro 2 Wired Controller for Xbox
Haotian Zhang vulab@iscas.ac.cn Input: ati_remote2 - fix type confusion in device attribute handlers
Daehyeon Ko 4ncienth@gmail.com ipv6: do not warn on route notification size race
Daehyeon Ko 4ncienth@gmail.com ipv4: do not warn on route notification size race
Daehyeon Ko 4ncienth@gmail.com ipv4: stop route notification sizing when nexthop group shrinks
Daehyeon Ko 4ncienth@gmail.com ipv4: stop exception dump when nexthop group shrinks
Daehyeon Ko 4ncienth@gmail.com ipv4: stop PMTU walk when nexthop group shrinks
Alice Ryhl aliceryhl@google.com rust_binder: reschedule node refcount update on thread exit
Michael S. Tsirkin mst@redhat.com ipv4: validate checksum_start before completing checksum
Ido Schimmel idosch@nvidia.com ipv6: Fix redirect exception creation for UDP/RAW sockets
Eric Biggers ebiggers@kernel.org crypto: drbg - Fix ineffective sanity check
Daniel Golle daniel@makrotopia.org net: dsa: mt7530: fix .get_stats64 sleeping in atomic context
Chao Yu chao@kernel.org f2fs: fix to reset all pinned status during fggc
Chao Yu chao@kernel.org f2fs: fix to shrink gc_lock coverage in f2fs_gc_range()
Eva Crystal 0xiviel@gmail.com accel/amdxdna: Bound the sync_bo flush range to the BO size
Donald Hunter donald.hunter@gmail.com ynl: fix schema check errors
Remy D. Farley one-d-wide@protonmail.com doc/netlink: netlink-raw: Add max check
Paulo Alcantara pc@manguebit.org netfs: zero the tail of a short DIO/unbuffered read
Dipayaan Roy dipayanroy@linux.microsoft.com net: mana: Skip WQ object destruction for uninitialized RXQ
Dipayaan Roy dipayanroy@linux.microsoft.com net: mana: check xdp_rxq registration before unreg in mana_destroy_rxq()
Jerome Tollet jtollet@cisco.com net/mlx5e: Prevent stale XSK buffer release on MPWQE refill retry
Jerome Tollet jtollet@cisco.com net/mlx5e: Prevent stale XSK buffer release on refill retry
Matthew Wilcox (Oracle) willy@infradead.org fs: Free any excess xarray nodes in clear_inode()
Eric Dumazet edumazet@kernel.org bnxt_en: fix DMA mapping length for padded small packets
-------------
Diffstat:
Documentation/driver-api/driver-model/devres.rst | 4 + Documentation/netlink/netlink-raw.yaml | 11 +- Documentation/netlink/specs/conntrack.yaml | 2 +- Documentation/netlink/specs/nftables.yaml | 2 +- Documentation/networking/af_xdp.rst | 54 +- Documentation/networking/strparser.rst | 2 +- Makefile | 4 +- arch/arm64/boot/dts/freescale/fsl-lx2160a.dtsi | 19 +- arch/arm64/include/asm/el2_setup.h | 5 +- arch/arm64/include/asm/kvm_host.h | 2 +- arch/arm64/kernel/Makefile | 3 + arch/arm64/kernel/ptrace.c | 50 ++ arch/arm64/kvm/hyp/include/hyp/switch.h | 16 +- arch/arm64/kvm/nested.c | 4 + arch/arm64/kvm/sys_regs.c | 11 +- arch/arm64/kvm/vgic/vgic-its.c | 24 +- arch/arm64/kvm/vgic/vgic.c | 18 +- arch/loongarch/include/asm/kvm_host.h | 8 + arch/loongarch/include/asm/loongarch.h | 2 + arch/loongarch/kvm/intc/pch_pic.c | 3 + arch/loongarch/kvm/vm.c | 40 +- arch/loongarch/net/bpf_jit.c | 8 +- arch/powerpc/include/asm/book3s/64/pgtable.h | 15 + arch/powerpc/include/asm/xive.h | 4 +- arch/powerpc/kernel/iommu.c | 5 +- arch/powerpc/mm/book3s64/pgtable.c | 13 +- arch/powerpc/platforms/powernv/smp.c | 8 +- arch/powerpc/platforms/pseries/papr-hvpipe.c | 59 +-- arch/powerpc/platforms/pseries/smp.c | 8 +- arch/powerpc/sysdev/xive/common.c | 10 +- arch/riscv/Kconfig.errata | 1 + arch/riscv/include/asm/cpufeature.h | 2 + arch/riscv/include/asm/futex.h | 2 + arch/riscv/include/asm/scs.h | 17 +- arch/riscv/include/asm/vector.h | 8 +- arch/riscv/include/uapi/asm/vendor/mips.h | 4 +- arch/riscv/kernel/cpufeature.c | 12 + arch/riscv/kernel/entry.S | 2 +- arch/riscv/kernel/setup.c | 2 + arch/riscv/kernel/smpboot.c | 2 + arch/riscv/kernel/suspend.c | 2 + arch/riscv/kvm/vcpu_pmu.c | 28 +- arch/riscv/mm/extable.c | 4 +- arch/s390/net/bpf_jit_comp.c | 11 + arch/x86/include/asm/cpufeatures.h | 4 + arch/x86/include/asm/kvm-x86-ops.h | 4 + arch/x86/include/asm/kvm_host.h | 6 + arch/x86/include/asm/tlb.h | 6 + arch/x86/kernel/cpu/amd.c | 4 + arch/x86/kernel/uprobes.c | 294 ++++++++--- arch/x86/kvm/mmu/mmu.c | 5 + arch/x86/kvm/svm/nested.c | 10 +- arch/x86/kvm/svm/sev.c | 80 ++- arch/x86/kvm/svm/svm.c | 13 +- arch/x86/kvm/svm/svm.h | 8 +- arch/x86/kvm/x86.c | 6 + block/bfq-cgroup.c | 9 +- block/blk-cgroup.h | 2 + block/blk-iocost.c | 21 +- block/blk-iolatency.c | 19 +- block/blk-throttle.c | 15 +- crypto/af_alg.c | 2 +- crypto/drbg.c | 11 +- drivers/accel/amdxdna/Makefile | 1 + drivers/accel/amdxdna/aie2_ctx.c | 76 ++- drivers/accel/amdxdna/aie2_message.c | 93 ++-- drivers/accel/amdxdna/aie2_pci.c | 88 ++-- drivers/accel/amdxdna/aie2_pci.h | 8 +- drivers/accel/amdxdna/aie2_pm.c | 17 +- drivers/accel/amdxdna/aie2_smu.c | 12 + drivers/accel/amdxdna/amdxdna_ctx.c | 98 ++-- drivers/accel/amdxdna/amdxdna_ctx.h | 3 + drivers/accel/amdxdna/amdxdna_gem.c | 97 ++-- drivers/accel/amdxdna/amdxdna_gem.h | 1 - drivers/accel/amdxdna/amdxdna_mailbox.c | 13 +- drivers/accel/amdxdna/amdxdna_pci_drv.c | 56 +- drivers/accel/amdxdna/amdxdna_pci_drv.h | 1 + drivers/accel/amdxdna/amdxdna_pm.c | 76 +++ drivers/accel/amdxdna/amdxdna_pm.h | 18 + drivers/accel/amdxdna/npu1_regs.c | 1 + drivers/accel/amdxdna/npu2_regs.c | 1 + drivers/accel/amdxdna/npu4_regs.c | 1 + drivers/accel/amdxdna/npu5_regs.c | 1 + drivers/accel/amdxdna/npu6_regs.c | 1 + drivers/acpi/bus.c | 54 +- drivers/acpi/button.c | 132 ++--- drivers/acpi/scan.c | 19 +- drivers/android/binder/node.rs | 20 +- drivers/android/binder/node/wrapper.rs | 34 +- drivers/ata/libata-core.c | 7 + drivers/ata/libata-scsi.c | 10 +- drivers/block/drbd/drbd_receiver.c | 4 +- drivers/block/ublk_drv.c | 103 ++-- drivers/block/zloop.c | 31 +- drivers/block/zram/zram_drv.c | 7 +- drivers/bluetooth/btintel_pcie.c | 17 +- drivers/clocksource/samsung_pwm_timer.c | 22 +- drivers/cxl/core/features.c | 3 + drivers/cxl/core/mbox.c | 1 + drivers/cxl/core/port.c | 2 +- drivers/cxl/core/region.c | 12 +- drivers/cxl/cxl.h | 4 +- drivers/dma/idxd/init.c | 36 +- drivers/dma/xilinx/xilinx_dma.c | 14 +- drivers/dpll/dpll_core.c | 12 +- drivers/dpll/dpll_netlink.c | 68 ++- drivers/edac/amd64_edac.c | 4 +- drivers/firmware/arm_scmi/bus.c | 95 ++-- drivers/firmware/arm_scmi/driver.c | 4 - drivers/firmware/xilinx/zynqmp.c | 68 ++- drivers/gpio/gpio-exar.c | 2 +- drivers/gpio/gpio-mpsse.c | 24 +- drivers/gpio/gpio-pca953x.c | 20 +- drivers/gpio/gpio-xilinx.c | 9 +- drivers/gpu/drm/amd/amdgpu/amdgpu_amdkfd.c | 8 +- drivers/gpu/drm/amd/amdgpu/amdgpu_debugfs.c | 77 +-- drivers/gpu/drm/amd/amdgpu/amdgpu_device.c | 25 + drivers/gpu/drm/amd/amdgpu/amdgpu_gmc.c | 17 +- drivers/gpu/drm/amd/amdgpu/amdgpu_hmm.c | 14 +- drivers/gpu/drm/amd/amdgpu/amdgpu_kms.c | 5 + drivers/gpu/drm/amd/amdgpu/amdgpu_ttm.c | 25 +- drivers/gpu/drm/amd/amdgpu/amdgpu_userq.c | 13 +- drivers/gpu/drm/amd/amdgpu/gfx_v12_0.c | 13 +- drivers/gpu/drm/amd/amdgpu/mes_userqueue.c | 91 ++-- drivers/gpu/drm/amd/amdkfd/kfd_crat.c | 17 + .../gpu/drm/amd/amdkfd/kfd_device_queue_manager.c | 32 +- drivers/gpu/drm/amd/amdkfd/kfd_priv.h | 7 + drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm.h | 3 +- .../gpu/drm/amd/display/amdgpu_dm/amdgpu_dm_crc.c | 25 +- .../gpu/drm/amd/display/amdgpu_dm/amdgpu_dm_crtc.c | 8 +- .../gpu/drm/amd/display/amdgpu_dm/amdgpu_dm_hdcp.c | 10 +- .../gpu/drm/amd/display/amdgpu_dm/amdgpu_dm_hdcp.h | 8 +- .../gpu/drm/amd/display/amdgpu_dm/amdgpu_dm_irq.c | 2 + .../drm/amd/display/amdgpu_dm/amdgpu_dm_plane.c | 32 +- .../drm/amd/display/amdgpu_dm/amdgpu_dm_replay.c | 7 + drivers/gpu/drm/amd/display/dc/core/dc.c | 35 +- .../gpu/drm/amd/display/dc/core/dc_hw_sequencer.c | 24 +- .../drm/amd/display/dc/dml2/dml21/dml21_utils.c | 15 +- .../dml21/src/dml2_core/dml2_core_dcn4_calcs.c | 31 +- .../drm/amd/display/dc/hwss/dcn35/dcn35_hwseq.c | 52 ++ .../drm/amd/display/dc/hwss/dcn35/dcn35_hwseq.h | 4 + .../gpu/drm/amd/display/dc/hwss/dcn35/dcn35_init.c | 2 +- .../drm/amd/display/dc/hwss/dcn401/dcn401_hwseq.c | 18 +- .../drm/amd/display/dc/hwss/dcn401/dcn401_hwseq.h | 4 +- .../drm/amd/display/dc/hwss/dcn401/dcn401_init.c | 4 +- drivers/gpu/drm/amd/display/dc/hwss/hw_sequencer.h | 10 +- .../amd/display/dc/resource/dcn32/dcn32_resource.c | 8 +- drivers/gpu/drm/aspeed/aspeed_gfx_drv.c | 5 +- drivers/gpu/drm/display/drm_dp_helper.c | 4 +- drivers/gpu/drm/drm_fb_helper.c | 6 +- drivers/gpu/drm/gud/gud_pipe.c | 1 + drivers/gpu/drm/i915/gem/i915_gem_execbuffer.c | 2 +- .../gpu/drm/i915/gt/intel_execlists_submission.c | 19 +- drivers/gpu/drm/i915/gt/intel_rps.c | 3 +- drivers/gpu/drm/imagination/pvr_mmu.c | 25 +- drivers/gpu/drm/imagination/pvr_vm.c | 8 +- drivers/gpu/drm/msm/adreno/a6xx_gpu.c | 5 +- drivers/gpu/drm/panthor/panthor_mmu.c | 9 + drivers/gpu/drm/panthor/panthor_sched.c | 37 +- drivers/gpu/drm/ttm/ttm_bo.c | 16 +- drivers/gpu/drm/ttm/ttm_bo_util.c | 11 +- drivers/gpu/drm/ttm/ttm_resource.c | 13 + drivers/gpu/drm/vc4/vc4_bo.c | 1 + drivers/gpu/drm/vc4/vc4_drv.c | 5 +- drivers/gpu/drm/vc4/vc4_drv.h | 2 +- drivers/gpu/drm/vc4/vc4_gem.c | 8 +- drivers/gpu/drm/vc4/vc4_irq.c | 6 +- drivers/gpu/drm/vc4/vc4_v3d.c | 52 +- drivers/gpu/drm/vc4/vc4_validate.c | 2 +- drivers/gpu/drm/vmwgfx/vmwgfx_cursor_plane.c | 26 +- drivers/gpu/drm/xe/display/xe_fb_pin.c | 6 +- drivers/gpu/drm/xe/xe_bo.c | 139 +++-- drivers/gpu/drm/xe/xe_bo.h | 2 + drivers/gpu/drm/xe/xe_device.c | 2 +- drivers/gpu/drm/xe/xe_device_types.h | 2 +- drivers/gpu/drm/xe/xe_guc_exec_queue_types.h | 5 + drivers/gpu/drm/xe/xe_guc_submit.c | 74 ++- drivers/gpu/drm/xe/xe_guc_types.h | 2 - drivers/gpu/drm/xe/xe_migrate.c | 17 +- drivers/gpu/drm/xe/xe_migrate.h | 3 +- drivers/gpu/drm/xe/xe_mmio.c | 5 +- drivers/gpu/drm/xe/xe_module.c | 49 ++ drivers/gpu/drm/xe/xe_module.h | 5 + drivers/gpu/drm/xe/xe_pci.c | 6 + drivers/gpu/drm/xe/xe_sriov_vf_ccs.c | 14 +- drivers/hid/hid-logitech-hidpp.c | 23 +- drivers/hv/Makefile | 2 +- drivers/hv/mshv_regions.c | 177 +++++++ drivers/hv/mshv_root.h | 10 + drivers/hv/mshv_root_main.c | 225 ++------ drivers/hwtracing/coresight/coresight-etm4x-core.c | 51 +- drivers/i3c/master/mipi-i3c-hci/core.c | 37 +- drivers/i3c/master/mipi-i3c-hci/dma.c | 12 +- drivers/i3c/master/mipi-i3c-hci/hci.h | 1 + drivers/i3c/master/mipi-i3c-hci/ibi.h | 13 +- drivers/i3c/master/mipi-i3c-hci/pio.c | 7 +- drivers/infiniband/hw/bnxt_re/ib_verbs.c | 9 +- drivers/infiniband/hw/bnxt_re/qplib_sp.h | 1 + drivers/infiniband/hw/cxgb4/mem.c | 46 +- drivers/infiniband/hw/erdma/erdma_cm.c | 4 +- drivers/infiniband/sw/rdmavt/vt.c | 4 +- drivers/infiniband/sw/siw/siw_cm.c | 6 +- drivers/input/joystick/xpad.c | 4 + drivers/input/misc/ati_remote2.c | 12 +- drivers/iommu/amd/iommu.c | 11 +- drivers/iommu/apple-dart.c | 9 +- .../iommu/arm/arm-smmu-v3/arm-smmu-v3-iommufd.c | 5 +- drivers/iommu/arm/arm-smmu-v3/arm-smmu-v3.c | 31 +- drivers/iommu/arm/arm-smmu-v3/tegra241-cmdqv.c | 54 +- drivers/iommu/arm/arm-smmu/arm-smmu.c | 9 +- drivers/iommu/arm/arm-smmu/qcom_iommu.c | 11 +- drivers/iommu/dma-iommu.c | 2 +- drivers/iommu/exynos-iommu.c | 11 +- drivers/iommu/fsl_pamu_domain.c | 12 +- drivers/iommu/intel/iommu.c | 23 +- drivers/iommu/intel/nested.c | 2 +- drivers/iommu/iommu.c | 25 +- drivers/iommu/iommufd/selftest.c | 2 +- drivers/iommu/ipmmu-vmsa.c | 10 +- drivers/iommu/msm_iommu.c | 11 +- drivers/iommu/mtk_iommu.c | 8 +- drivers/iommu/mtk_iommu_v1.c | 7 +- drivers/iommu/omap-iommu.c | 12 +- drivers/iommu/riscv/iommu.c | 111 ++-- drivers/iommu/rockchip-iommu.c | 20 +- drivers/iommu/s390-iommu.c | 13 +- drivers/iommu/sprd-iommu.c | 3 +- drivers/iommu/sun50i-iommu.c | 8 +- drivers/iommu/tegra-smmu.c | 10 +- drivers/iommu/virtio-iommu.c | 6 +- drivers/irqchip/irq-gic-v5-irs.c | 14 + drivers/isdn/mISDN/l1oip_core.c | 2 +- drivers/isdn/mISDN/socket.c | 4 +- drivers/md/dm-crypt.c | 7 +- drivers/md/dm-integrity.c | 4 +- drivers/md/dm-ioctl.c | 14 +- drivers/md/dm-pcache/cache.c | 4 + drivers/md/dm-pcache/cache.h | 14 + drivers/md/dm-pcache/cache_gc.c | 16 +- drivers/md/dm-pcache/cache_key.c | 11 + drivers/md/dm-pcache/cache_writeback.c | 20 +- drivers/md/dm-snap.c | 14 + drivers/md/md-bitmap.c | 9 +- drivers/md/md-bitmap.h | 2 +- drivers/md/md-linear.c | 1 + drivers/md/md-llbitmap.c | 10 +- drivers/md/md.c | 39 +- drivers/md/md.h | 5 + drivers/md/raid0.c | 1 + drivers/md/raid1-10.c | 8 +- drivers/md/raid1.c | 116 ++-- drivers/md/raid10.c | 143 ++--- drivers/md/raid5.c | 12 - .../platform/chips-media/wave5/wave5-vpu-dec.c | 19 + drivers/media/platform/qcom/iris/iris_ctrls.c | 2 +- .../platform/qcom/iris/iris_platform_common.h | 4 +- .../media/platform/qcom/iris/iris_platform_gen2.c | 4 +- .../platform/qcom/iris/iris_platform_qcs8300.h | 4 +- .../platform/qcom/iris/iris_platform_sm8250.c | 4 +- drivers/media/platform/qcom/iris/iris_vdec.c | 6 - drivers/media/platform/qcom/iris/iris_vdec.h | 1 - drivers/media/platform/qcom/iris/iris_venc.c | 6 - drivers/media/platform/qcom/iris/iris_venc.h | 1 - drivers/media/platform/qcom/iris/iris_vidc.c | 6 +- drivers/media/platform/verisilicon/hantro.h | 2 + drivers/media/platform/verisilicon/hantro_drv.c | 42 +- drivers/media/platform/verisilicon/imx8m_vpu_hw.c | 8 + drivers/media/v4l2-core/v4l2-mem2mem.c | 23 + drivers/memstick/core/memstick.c | 8 +- drivers/memstick/host/rtsx_usb_ms.c | 31 +- drivers/mmc/host/cavium-octeon.c | 5 +- drivers/mmc/host/cavium-thunderx.c | 5 +- drivers/mmc/host/mtk-sd.c | 1 + drivers/mmc/host/sdhci-sprd.c | 4 + drivers/net/amt.c | 48 +- drivers/net/can/usb/f81604.c | 2 +- drivers/net/dsa/microchip/ksz_common.h | 2 +- drivers/net/dsa/mt7530.c | 75 ++- drivers/net/dsa/mt7530.h | 8 + drivers/net/ethernet/broadcom/bnxt/bnxt.c | 346 +++++++----- drivers/net/ethernet/broadcom/bnxt/bnxt.h | 23 +- drivers/net/ethernet/broadcom/bnxt/bnxt_devlink.c | 8 +- drivers/net/ethernet/broadcom/bnxt/bnxt_ethtool.c | 2 +- drivers/net/ethernet/broadcom/bnxt/bnxt_ulp.c | 350 +++++++----- drivers/net/ethernet/broadcom/genet/bcmgenet_wol.c | 11 + drivers/net/ethernet/cavium/liquidio/lio_main.c | 27 - .../net/ethernet/cavium/liquidio/octeon_device.h | 3 - .../net/ethernet/cavium/liquidio/octeon_mailbox.c | 33 +- .../chelsio/inline_crypto/ch_ktls/chcr_ktls.c | 4 +- drivers/net/ethernet/google/gve/gve_main.c | 8 +- drivers/net/ethernet/google/gve/gve_rx_dqo.c | 13 +- drivers/net/ethernet/ibm/ibmveth.c | 22 +- drivers/net/ethernet/intel/ice/devlink/port.c | 2 +- drivers/net/ethernet/intel/ice/ice.h | 7 +- drivers/net/ethernet/intel/ice/ice_base.c | 79 +-- drivers/net/ethernet/intel/ice/ice_dcb_lib.c | 2 +- drivers/net/ethernet/intel/ice/ice_eswitch.c | 2 +- drivers/net/ethernet/intel/ice/ice_ethtool.c | 11 +- drivers/net/ethernet/intel/ice/ice_lib.c | 19 +- drivers/net/ethernet/intel/ice/ice_main.c | 11 +- drivers/net/ethernet/intel/ice/ice_txrx.c | 266 ++-------- drivers/net/ethernet/intel/ice/ice_txrx.h | 149 ++---- drivers/net/ethernet/intel/ice/ice_xsk.c | 75 +-- drivers/net/ethernet/intel/ice/virt/queues.c | 6 +- drivers/net/ethernet/intel/idpf/idpf_dev.c | 2 +- drivers/net/ethernet/intel/idpf/idpf_vf_dev.c | 2 +- drivers/net/ethernet/intel/idpf/idpf_virtchnl.c | 12 +- drivers/net/ethernet/intel/idpf/idpf_virtchnl.h | 2 +- drivers/net/ethernet/intel/ixgbe/ixgbe_main.c | 3 +- drivers/net/ethernet/marvell/octeontx2/af/cgx.c | 12 + drivers/net/ethernet/marvell/octeontx2/af/cgx.h | 1 + .../net/ethernet/marvell/octeontx2/af/cn20k/api.h | 1 + .../marvell/octeontx2/af/cn20k/mbox_init.c | 21 +- drivers/net/ethernet/marvell/octeontx2/af/rvu.c | 39 +- drivers/net/ethernet/marvell/octeontx2/af/rvu.h | 2 + .../net/ethernet/marvell/octeontx2/af/rvu_cgx.c | 79 +++ .../net/ethernet/marvell/octeontx2/af/rvu_nix.c | 22 +- .../net/ethernet/marvell/octeontx2/af/rvu_npc.c | 29 +- .../net/ethernet/mellanox/mlx5/core/en/xsk/rx.c | 2 + drivers/net/ethernet/mellanox/mlx5/core/en_rx.c | 13 +- .../ethernet/mellanox/mlx5/core/esw/adj_vport.c | 20 - drivers/net/ethernet/mellanox/mlx5/core/lag/lag.c | 2 +- drivers/net/ethernet/mellanox/mlx5/core/vport.c | 24 - drivers/net/ethernet/mellanox/mlxsw/spectrum.h | 2 + drivers/net/ethernet/mellanox/mlxsw/spectrum_acl.c | 10 +- .../net/ethernet/mellanox/mlxsw/spectrum_flower.c | 9 +- drivers/net/ethernet/microchip/sparx5/sparx5_ptp.c | 28 +- .../ethernet/microchip/sparx5/sparx5_tc_matchall.c | 1 + drivers/net/ethernet/microsoft/mana/gdma_main.c | 19 + drivers/net/ethernet/microsoft/mana/mana_en.c | 7 +- drivers/net/ethernet/stmicro/stmmac/stmmac_main.c | 67 ++- drivers/net/ethernet/ti/icssg/icssg_common.c | 86 ++- drivers/net/ethernet/ti/icssg/icssg_prueth.c | 184 ++++--- drivers/net/ethernet/ti/icssg/icssg_prueth.h | 17 +- drivers/net/ethernet/ti/icssg/icssg_prueth_sr1.c | 4 +- drivers/net/ovpn/crypto.c | 10 +- drivers/net/ovpn/crypto.h | 4 +- drivers/net/ovpn/crypto_aead.c | 19 +- drivers/net/ovpn/crypto_aead.h | 1 - drivers/net/pfcp.c | 7 + drivers/net/ppp/pptp.c | 4 +- drivers/net/team/team_core.c | 16 +- drivers/net/team/team_mode_broadcast.c | 2 + drivers/net/usb/ax88179_178a.c | 6 +- drivers/net/veth.c | 1 + drivers/net/virtio_net.c | 14 + drivers/net/vxlan/vxlan_core.c | 20 +- drivers/net/wan/hdlc_ppp.c | 4 +- drivers/net/wireguard/noise.c | 7 +- drivers/net/wireguard/queueing.h | 2 + drivers/net/wireless/ath/ath12k/core.c | 33 +- drivers/net/wireless/ath/ath12k/core.h | 3 - drivers/net/wireless/ath/ath12k/dp_rx.c | 4 +- drivers/net/wireless/ath/ath12k/hif.h | 9 - drivers/net/wireless/ath/ath12k/mac.c | 7 +- drivers/net/wireless/ath/ath12k/pci.c | 8 - drivers/net/wireless/ath/ath12k/wmi.c | 16 + .../wireless/broadcom/brcm80211/brcmfmac/core.c | 27 +- .../net/wireless/broadcom/brcm80211/brcmfmac/p2p.c | 4 + drivers/net/wireless/marvell/libertas/tx.c | 7 - drivers/net/wireless/mediatek/mt76/channel.c | 98 ++-- drivers/net/wireless/mediatek/mt76/mt76.h | 10 + drivers/net/wireless/mediatek/mt76/mt7603/init.c | 1 + .../net/wireless/mediatek/mt76/mt76_connac_mcu.h | 1 + drivers/net/wireless/mediatek/mt76/mt7915/init.c | 8 + drivers/net/wireless/mediatek/mt76/mt7915/main.c | 2 + drivers/net/wireless/mediatek/mt76/mt7921/main.c | 3 + drivers/net/wireless/mediatek/mt76/mt7925/mac.c | 3 +- drivers/net/wireless/mediatek/mt76/mt7925/main.c | 48 +- .../net/wireless/mediatek/mt76/mt792x_acpi_sar.c | 134 +++-- .../net/wireless/mediatek/mt76/mt792x_acpi_sar.h | 2 + drivers/net/wireless/mediatek/mt76/mt7996/init.c | 4 +- drivers/net/wireless/mediatek/mt76/mt7996/mac.c | 3 + drivers/net/wireless/mediatek/mt76/mt7996/main.c | 1 + drivers/net/wireless/mediatek/mt76/mt7996/mcu.h | 3 + drivers/net/wireless/mediatek/mt76/tx.c | 101 +++- drivers/net/xen-netfront.c | 4 +- drivers/ntb/ntb_transport.c | 18 +- drivers/nvme/host/pci.c | 28 +- drivers/nvme/host/tcp.c | 2 +- drivers/nvme/target/admin-cmd.c | 12 +- drivers/nvme/target/core.c | 59 ++- drivers/nvme/target/fabrics-cmd.c | 2 +- drivers/nvme/target/nvmet.h | 6 + drivers/nvme/target/pci-epf.c | 2 +- drivers/nvme/target/pr.c | 4 + drivers/nvme/target/tcp.c | 2 +- drivers/pci/endpoint/functions/pci-epf-mhi.c | 2 +- drivers/pci/endpoint/functions/pci-epf-ntb.c | 9 +- drivers/pci/endpoint/functions/pci-epf-test.c | 2 +- drivers/pci/endpoint/functions/pci-epf-vntb.c | 9 +- drivers/pci/hotplug/pnv_php.c | 2 +- drivers/pci/hotplug/shpchp_core.c | 3 +- drivers/pci/pci-driver.c | 192 ++++--- drivers/pci/pci-sysfs.c | 15 + drivers/pci/pci.h | 41 +- drivers/pci/search.c | 8 +- drivers/pinctrl/mediatek/pinctrl-moore.c | 6 +- drivers/pinctrl/mediatek/pinctrl-mtk-common.c | 14 +- drivers/pinctrl/mediatek/pinctrl-paris.c | 2 +- drivers/pinctrl/pinctrl-zynqmp.c | 7 +- drivers/platform/x86/asus-wmi.c | 6 +- drivers/platform/x86/dell/dell-wmi-base.c | 2 +- drivers/pmdomain/imx/imx8m-blk-ctrl.c | 15 + drivers/pmdomain/rockchip/pm-domains.c | 20 +- drivers/power/supply/max77705_charger.c | 30 +- drivers/ptp/ptp_ocp.c | 38 +- drivers/pwm/pwm-samsung.c | 22 +- drivers/regulator/ltc3676.c | 15 +- drivers/regulator/tps6594-regulator.c | 6 +- drivers/remoteproc/qcom_wcnss.c | 23 +- drivers/s390/crypto/zcrypt_api.c | 38 +- drivers/s390/crypto/zcrypt_msgtype6.c | 431 ++++++++++----- drivers/s390/crypto/zcrypt_msgtype6.h | 51 +- drivers/scsi/ch.c | 4 +- drivers/scsi/qedi/qedi_main.c | 3 +- drivers/scsi/qla2xxx/qla_iocb.c | 2 - drivers/scsi/scsi_error.c | 6 +- drivers/scsi/scsi_sysfs.c | 77 ++- drivers/scsi/sd.c | 213 ++++---- drivers/scsi/ses.c | 4 +- drivers/scsi/sr.c | 4 +- drivers/scsi/st.c | 4 +- drivers/soc/aspeed/aspeed-lpc-snoop.c | 29 +- drivers/soc/tegra/pmc.c | 104 ++-- drivers/soc/xilinx/xlnx_event_manager.c | 8 +- drivers/soc/xilinx/zynqmp_power.c | 53 +- drivers/spi/spi-sg2044-nor.c | 60 ++- drivers/staging/greybus/raw.c | 67 ++- drivers/target/iscsi/iscsi_target_login.c | 2 +- drivers/tee/optee/ffa_abi.c | 41 +- drivers/tee/optee/optee_msg.h | 50 +- drivers/tee/optee/optee_private.h | 120 +++-- drivers/tee/optee/smc_abi.c | 17 +- drivers/tee/tee_shm.c | 4 + drivers/thermal/thermal_hwmon.c | 89 ++-- drivers/tty/serial/serial_core.c | 33 +- drivers/tty/tty_io.c | 2 +- drivers/ufs/core/ufshcd-priv.h | 14 +- drivers/ufs/core/ufshcd.c | 40 +- drivers/usb/gadget/function/f_uac1.c | 13 +- drivers/usb/gadget/function/f_uac2.c | 13 +- drivers/vdpa/mlx5/core/mlx5_vdpa.h | 2 + drivers/vdpa/mlx5/core/mr.c | 5 +- drivers/vdpa/mlx5/core/resources.c | 11 +- drivers/vdpa/vdpa_sim/vdpa_sim.c | 14 +- drivers/vdpa/vdpa_user/iova_domain.c | 11 +- drivers/vdpa/vdpa_user/vduse_dev.c | 4 +- drivers/vhost/iotlb.c | 47 +- drivers/vhost/net.c | 2 + drivers/vhost/vdpa.c | 9 +- drivers/vhost/vhost.c | 65 ++- drivers/vhost/vhost.h | 1 + drivers/vhost/vsock.c | 2 + drivers/video/fbdev/core/fb_chrdev.c | 6 +- drivers/video/fbdev/core/fbcon.c | 2 - drivers/video/fbdev/core/fbmem.c | 13 + drivers/video/fbdev/core/fbsysfs.c | 4 +- drivers/video/fbdev/omap2/omapfb/omapfb-main.c | 11 +- drivers/video/fbdev/ps3fb.c | 5 +- drivers/video/fbdev/sh_mobile_lcdcfb.c | 5 +- drivers/virtio/virtio_ring.c | 19 +- drivers/xen/pvcalls-back.c | 2 +- drivers/xen/pvcalls-front.c | 88 +++- fs/afs/Makefile | 1 + fs/afs/dir.c | 68 +-- fs/afs/fsclient.c | 4 +- fs/afs/inode.c | 96 +--- fs/afs/internal.h | 34 +- fs/afs/rxrpc.c | 6 +- fs/afs/symlink.c | 278 ++++++++++ fs/afs/validation.c | 14 +- fs/afs/yfsclient.c | 4 +- fs/btrfs/acl.c | 29 +- fs/btrfs/bio.c | 8 +- fs/btrfs/block-group.c | 2 +- fs/btrfs/block-rsv.c | 19 +- fs/btrfs/delayed-inode.c | 15 +- fs/btrfs/disk-io.c | 82 ++- fs/btrfs/extent-tree.c | 52 +- fs/btrfs/extent-tree.h | 3 +- fs/btrfs/extent_io.c | 162 ++++-- fs/btrfs/extent_io.h | 6 + fs/btrfs/fs.h | 27 +- fs/btrfs/inode.c | 7 +- fs/btrfs/ioctl.c | 50 +- fs/btrfs/lzo.c | 14 +- fs/btrfs/qgroup.c | 3 +- fs/btrfs/raid-stripe-tree.c | 14 +- fs/btrfs/reflink.c | 7 +- fs/btrfs/relocation.c | 34 +- fs/btrfs/scrub.c | 4 +- fs/btrfs/send.c | 50 +- fs/btrfs/super.c | 3 +- fs/btrfs/tests/extent-io-tests.c | 3 +- fs/btrfs/tests/extent-map-tests.c | 6 +- fs/btrfs/tree-log.c | 43 +- fs/btrfs/volumes.c | 28 +- fs/btrfs/xattr.c | 15 +- fs/btrfs/zoned.c | 3 +- fs/cachefiles/namei.c | 7 +- fs/ceph/addr.c | 2 + fs/ceph/mds_client.c | 6 + fs/dcache.c | 4 +- fs/dlm/lowcomms.c | 6 +- fs/erofs/xattr.c | 6 +- fs/ext2/inode.c | 3 +- fs/ext2/xattr.c | 4 +- fs/ext4/ext4.h | 3 +- fs/ext4/inode.c | 35 +- fs/ext4/ioctl.c | 11 +- fs/ext4/move_extent.c | 102 ++-- fs/ext4/xattr.c | 2 +- fs/f2fs/data.c | 27 +- fs/f2fs/f2fs.h | 2 +- fs/f2fs/gc.c | 36 +- fs/f2fs/node.c | 2 + fs/f2fs/segment.c | 4 +- fs/fcntl.c | 3 + fs/fsopen.c | 3 + fs/fuse/dev_uring.c | 30 +- fs/fuse/inode.c | 4 - fs/gfs2/aops.c | 2 +- fs/gfs2/file.c | 2 +- fs/gfs2/glock.c | 10 +- fs/gfs2/glock.h | 2 +- fs/gfs2/glops.c | 13 +- fs/gfs2/incore.h | 2 +- fs/gfs2/lock_dlm.c | 22 +- fs/gfs2/log.c | 43 +- fs/gfs2/lops.c | 2 +- fs/gfs2/meta_io.c | 6 +- fs/gfs2/ops_fstype.c | 8 +- fs/gfs2/quota.c | 66 ++- fs/gfs2/recovery.c | 2 +- fs/gfs2/super.c | 14 +- fs/gfs2/sys.c | 34 +- fs/gfs2/trans.c | 2 +- fs/gfs2/util.c | 74 ++- fs/gfs2/util.h | 43 +- fs/hfs/dir.c | 15 +- fs/hfs/hfs_fs.h | 1 + fs/hfs/inode.c | 30 +- fs/hfs/mdb.c | 31 +- fs/hfs/super.c | 3 + fs/inode.c | 23 +- fs/iomap/direct-io.c | 1 + fs/lockd/svc.c | 4 +- fs/lockd/svc4proc.c | 4 +- fs/lockd/svcproc.c | 4 +- fs/lockd/svcsubs.c | 52 +- fs/mount.h | 6 +- fs/namei.c | 29 + fs/namespace.c | 232 +++++--- fs/netfs/buffered_read.c | 9 +- fs/netfs/internal.h | 1 + fs/netfs/main.c | 7 + fs/netfs/misc.c | 3 +- fs/netfs/objects.c | 30 +- fs/netfs/read_collect.c | 35 +- fs/netfs/read_pgpriv2.c | 2 +- fs/netfs/rolling_buffer.c | 22 +- fs/netfs/write_collect.c | 6 +- fs/netfs/write_issue.c | 13 +- fs/nfs/callback_xdr.c | 6 +- fs/nfs/delegation.c | 18 +- fs/nfsd/lockd.c | 6 +- fs/nfsd/netns.h | 20 +- fs/nfsd/nfs4proc.c | 2 +- fs/nfsd/nfs4recover.c | 12 +- fs/nfsd/nfs4state.c | 60 ++- fs/nfsd/nfsctl.c | 4 +- fs/nfsd/nfssvc.c | 45 +- fs/ntfs3/dir.c | 3 +- fs/ntfs3/file.c | 6 +- fs/ntfs3/frecord.c | 7 +- fs/ntfs3/inode.c | 19 +- fs/ntfs3/namei.c | 6 +- fs/ntfs3/ntfs_fs.h | 6 +- fs/ntfs3/super.c | 31 +- fs/ocfs2/cluster/heartbeat.c | 139 +++-- fs/ocfs2/cluster/tcp.c | 107 +++- fs/ocfs2/cluster/tcp.h | 1 + fs/ocfs2/inode.c | 23 + fs/pnode.c | 108 +++- fs/resctrl/monitor.c | 60 ++- fs/resctrl/rdtgroup.c | 48 +- fs/smb/client/cifsacl.c | 28 +- fs/smb/client/cifsfs.c | 1 + fs/smb/client/cifsglob.h | 1 + fs/smb/client/connect.c | 2 +- fs/smb/client/file.c | 65 ++- fs/smb/client/inode.c | 24 +- fs/smb/client/misc.c | 35 +- fs/smb/client/readdir.c | 17 +- fs/smb/server/connection.c | 37 +- fs/smb/server/connection.h | 6 +- fs/smb/server/mgmt/tree_connect.c | 33 +- fs/smb/server/mgmt/user_config.c | 11 + fs/smb/server/mgmt/user_session.c | 10 +- fs/smb/server/mgmt/user_session.h | 2 +- fs/smb/server/oplock.c | 81 ++- fs/smb/server/oplock.h | 1 + fs/smb/server/smb2pdu.c | 106 ++-- fs/smb/server/smbacl.c | 88 ++-- fs/smb/server/smbacl.h | 2 +- fs/smb/server/transport_tcp.c | 4 +- fs/smb/server/vfs.c | 2 +- fs/smb/server/vfs_cache.c | 8 +- fs/tracefs/event_inode.c | 24 + fs/tracefs/internal.h | 4 +- fs/udf/super.c | 4 +- include/acpi/acpi_bus.h | 6 + include/clocksource/samsung_pwm.h | 2 +- include/cxl/mailbox.h | 2 + include/drm/ttm/ttm_resource.h | 2 + include/kvm/arm_vgic.h | 3 - include/linux/bnxt/ulp.h | 25 +- include/linux/bpf.h | 5 +- include/linux/bpf_verifier.h | 2 + include/linux/compiler_types.h | 8 +- include/linux/fb.h | 2 + include/linux/firmware/xlnx-zynqmp.h | 18 +- include/linux/ieee80211-s1g.h | 575 ++++++++++++++++++++ include/linux/ieee80211.h | 585 +-------------------- include/linux/iommu.h | 3 +- include/linux/kvm_host.h | 1 + include/linux/list.h | 37 ++ include/linux/lockd/bind.h | 12 +- include/linux/mempool.h | 7 + include/linux/mount.h | 2 +- include/linux/net.h | 4 +- include/linux/netfilter/x_tables.h | 1 + include/linux/netfs.h | 1 + include/linux/ntb.h | 24 + include/linux/nvme.h | 4 +- include/linux/pci.h | 1 + include/linux/ring_buffer.h | 5 +- include/linux/rolling_buffer.h | 6 +- include/linux/skbuff.h | 2 + include/linux/socket.h | 17 + include/linux/srcutiny.h | 4 + include/linux/static_call_types.h | 4 + include/linux/sunrpc/svc_rdma.h | 14 +- include/linux/workqueue.h | 24 + include/media/v4l2-mem2mem.h | 21 + include/net/amt.h | 4 - include/net/bluetooth/hci_core.h | 2 + include/net/cfg80211.h | 3 +- include/net/inet_common.h | 2 +- include/net/ip.h | 7 + include/net/ip_vs.h | 2 +- include/net/ipv6.h | 2 +- include/net/mac80211.h | 14 +- include/net/netfilter/nf_dup_netdev.h | 37 ++ include/net/netfilter/nf_tables.h | 15 +- include/net/pkt_cls.h | 14 +- include/net/sock.h | 2 +- include/net/strparser.h | 10 +- include/net/xsk_buff_pool.h | 9 +- include/scsi/scsi_driver.h | 7 +- include/scsi/scsi_host.h | 7 +- include/ufs/ufshcd.h | 4 - kernel/bpf/bpf_struct_ops.c | 12 + kernel/bpf/btf.c | 17 +- kernel/bpf/stackmap.c | 120 +++-- kernel/bpf/syscall.c | 2 + kernel/bpf/trampoline.c | 7 + kernel/bpf/verifier.c | 215 ++++++-- kernel/cgroup/cpuset.c | 29 +- kernel/dma/swiotlb.c | 6 +- kernel/kexec_handover.c | 2 +- kernel/printk/nbcon.c | 2 +- kernel/printk/printk.c | 2 +- kernel/rcu/srcutiny.c | 19 +- kernel/trace/blktrace.c | 4 +- kernel/trace/ring_buffer.c | 260 +++++---- kernel/trace/ring_buffer_benchmark.c | 6 +- kernel/trace/trace.c | 156 +++--- kernel/trace/trace.h | 1 + kernel/workqueue.c | 51 +- mm/pgtable-generic.c | 20 +- net/9p/trans_fd.c | 2 +- net/appletalk/ddp.c | 2 +- net/atm/pvc.c | 4 +- net/atm/svc.c | 2 +- net/ax25/af_ax25.c | 2 +- net/bluetooth/6lowpan.c | 27 +- net/bluetooth/hci_conn.c | 17 +- net/bluetooth/hci_core.c | 4 + net/bluetooth/hci_event.c | 108 ++-- net/bluetooth/hci_sock.c | 4 +- net/bluetooth/hci_sync.c | 103 +++- net/bluetooth/iso.c | 56 +- net/bluetooth/l2cap_sock.c | 59 ++- net/bluetooth/mgmt.c | 2 +- net/bluetooth/rfcomm/core.c | 4 +- net/bluetooth/rfcomm/sock.c | 7 +- net/bluetooth/rfcomm/tty.c | 2 +- net/bluetooth/sco.c | 89 +++- net/bridge/br_arp_nd_proxy.c | 24 +- net/bridge/br_multicast.c | 23 +- net/bridge/netfilter/nf_conntrack_bridge.c | 10 +- net/can/isotp.c | 2 +- net/can/j1939/socket.c | 2 +- net/can/raw.c | 2 +- net/ceph/auth_x.c | 5 + net/core/bpf_sk_storage.c | 14 +- net/core/dev.c | 59 ++- net/core/filter.c | 4 +- net/core/flow_dissector.c | 11 +- net/core/skbuff.c | 6 +- net/core/sock.c | 5 +- net/devlink/core.c | 10 +- net/hsr/hsr_framereg.c | 6 +- net/ieee802154/socket.c | 4 +- net/ipv4/af_inet.c | 4 +- net/ipv4/cipso_ipv4.c | 8 + net/ipv4/esp4.c | 7 + net/ipv4/fib_semantics.c | 3 + net/ipv4/fib_trie.c | 2 - net/ipv4/ip_output.c | 10 +- net/ipv4/netfilter/arp_tables.c | 35 +- net/ipv4/netfilter/ip_tables.c | 41 +- net/ipv4/nexthop.c | 22 +- net/ipv4/route.c | 5 + net/ipv4/tcp.c | 2 + net/ipv4/udp_tunnel_core.c | 2 +- net/ipv6/af_inet6.c | 4 +- net/ipv6/esp6.c | 7 + net/ipv6/ip6_udp_tunnel.c | 2 +- net/ipv6/ip6mr.c | 3 +- net/ipv6/mcast.c | 31 +- net/ipv6/netfilter/ip6_tables.c | 38 +- net/ipv6/route.c | 4 +- net/iucv/af_iucv.c | 2 +- net/l2tp/l2tp_core.c | 4 +- net/llc/af_llc.c | 2 +- net/mac80211/debugfs.c | 13 +- net/mac80211/ieee80211_i.h | 2 + net/mac80211/main.c | 1 + net/mac80211/rx.c | 50 +- net/mac80211/sta_info.c | 17 +- net/mac80211/sta_info.h | 3 +- net/mac80211/status.c | 5 +- net/mac80211/tx.c | 70 ++- net/mac80211/util.c | 3 + net/mctp/af_mctp.c | 2 +- net/mctp/test/route-test.c | 2 +- net/mctp/test/utils.c | 2 +- net/mptcp/protocol.c | 6 +- net/mptcp/subflow.c | 2 +- net/netfilter/ipvs/ip_vs_core.c | 11 +- net/netfilter/ipvs/ip_vs_sync.c | 4 +- net/netfilter/ipvs/ip_vs_xmit.c | 3 +- net/netfilter/nf_conntrack_bpf.c | 113 ++-- net/netfilter/nf_dup_netdev.c | 31 +- net/netfilter/nf_flow_table_path.c | 3 +- net/netfilter/nf_tables_api.c | 320 +++++++---- net/netfilter/nfnetlink_queue.c | 7 + net/netfilter/nft_dynset.c | 25 +- net/netfilter/nft_fwd_netdev.c | 27 +- net/netfilter/x_tables.c | 77 ++- net/netfilter/xt_CHECKSUM.c | 6 +- net/netlink/af_netlink.c | 2 +- net/netrom/af_netrom.c | 2 +- net/nfc/llcp_sock.c | 4 +- net/openvswitch/actions.c | 7 +- net/openvswitch/datapath.c | 8 + net/packet/af_packet.c | 39 +- net/phonet/socket.c | 18 +- net/qrtr/af_qrtr.c | 2 +- net/qrtr/ns.c | 2 +- net/rds/bind.c | 2 +- net/rds/rds.h | 2 +- net/rds/tcp_connect.c | 2 +- net/rds/tcp_listen.c | 2 +- net/rose/af_rose.c | 2 +- net/rxrpc/af_rxrpc.c | 2 +- net/rxrpc/rxperf.c | 2 +- net/sched/cls_api.c | 6 +- net/sched/cls_basic.c | 6 +- net/sched/cls_bpf.c | 6 +- net/sched/cls_cgroup.c | 2 +- net/sched/cls_flow.c | 2 +- net/sched/cls_flower.c | 4 +- net/sched/cls_fw.c | 4 +- net/sched/cls_matchall.c | 4 +- net/sched/cls_route.c | 10 +- net/sched/cls_u32.c | 18 +- net/sched/em_text.c | 3 + net/sched/sch_cake.c | 2 +- net/sched/sch_drr.c | 2 +- net/sched/sch_dualpi2.c | 2 +- net/sched/sch_ets.c | 2 +- net/sched/sch_fq_codel.c | 2 +- net/sched/sch_fq_pie.c | 2 +- net/sched/sch_hfsc.c | 2 +- net/sched/sch_htb.c | 2 +- net/sched/sch_multiq.c | 2 +- net/sched/sch_netem.c | 7 +- net/sched/sch_prio.c | 2 +- net/sched/sch_qfq.c | 2 +- net/sched/sch_sfb.c | 2 +- net/sched/sch_sfq.c | 2 +- net/sctp/socket.c | 6 +- net/smc/af_smc.c | 100 +--- net/smc/smc.h | 2 +- net/socket.c | 6 +- net/strparser/strparser.c | 6 +- net/sunrpc/auth_gss/gss_krb5_crypto.c | 232 ++++++++ net/sunrpc/auth_gss/gss_krb5_internal.h | 20 + net/sunrpc/auth_gss/gss_krb5_mech.c | 96 +++- net/sunrpc/auth_gss/gss_krb5_seal.c | 45 +- net/sunrpc/auth_gss/gss_krb5_unseal.c | 39 +- net/sunrpc/clnt.c | 4 +- net/sunrpc/svcsock.c | 2 +- net/sunrpc/xprtrdma/svc_rdma_recvfrom.c | 4 +- net/sunrpc/xprtrdma/svc_rdma_rw.c | 100 +++- net/sunrpc/xprtrdma/svc_rdma_sendto.c | 16 +- net/sunrpc/xprtrdma/svc_rdma_transport.c | 32 +- net/sunrpc/xprtsock.c | 4 +- net/tipc/core.c | 4 +- net/tipc/node.c | 10 +- net/tipc/socket.c | 4 +- net/tipc/topsrv.c | 80 ++- net/tipc/udp_media.c | 75 +-- net/unix/af_unix.c | 4 +- net/vmw_vsock/af_vsock.c | 6 +- net/vmw_vsock/virtio_transport_common.c | 4 +- net/wireless/core.c | 7 +- net/wireless/core.h | 2 +- net/wireless/nl80211.c | 19 +- net/wireless/sme.c | 6 +- net/x25/af_x25.c | 2 +- net/xdp/xsk.c | 201 ++++++- net/xdp/xsk_buff_pool.c | 13 +- net/xdp/xsk_queue.h | 65 ++- net/xfrm/xfrm_output.c | 16 +- security/keys/key.c | 6 +- security/keys/persistent.c | 55 +- security/selinux/avc.c | 5 +- security/selinux/hooks.c | 9 +- sound/hda/codecs/side-codecs/tas2781_hda.c | 18 +- sound/pci/ctxfi/ctatc.c | 63 ++- sound/pci/ctxfi/ctatc.h | 4 - sound/pci/ctxfi/ctdaio.c | 97 ++-- sound/pci/ctxfi/ctdaio.h | 2 + sound/pci/ctxfi/cthardware.h | 2 +- sound/pci/ctxfi/cthw20k1.c | 2 +- sound/pci/ctxfi/cthw20k2.c | 2 +- sound/soc/amd/acp/acp-mach-common.c | 18 +- sound/soc/amd/yc/acp6x-mach.c | 7 + sound/soc/codecs/adau1372.c | 18 +- sound/soc/qcom/qdsp6/q6asm.c | 5 + sound/soc/samsung/i2s.c | 8 + tools/include/linux/static_call_types.h | 4 + .../bpf/progs/verifier_subprog_precision.c | 12 +- .../testing/selftests/bpf/test_kmods/bpf_testmod.c | 2 +- virt/kvm/guest_memfd.c | 12 +- virt/kvm/kvm_mm.h | 7 +- 861 files changed, 13310 insertions(+), 7485 deletions(-)