This is the start of the stable review cycle for the 6.18.56 release. There are 403 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know.

Responses should be made by Sun, 11 Oct 2026 14:08:27 +0000. Anything received after that time might be too late.

The whole patch series can be found in one patch at: https://www.kernel.org/pub/linux/kernel/v6.x/stable-review/patch-6.18.56-rc1... or in the git tree and branch at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-6.18.y and the diffstat can be found below.

thanks,

greg k-h

------------- Pseudo-Shortlog of commits:

Greg Kroah-Hartman gregkh@linuxfoundation.org Linux 6.18.56-rc1

Janani Sunil janani.sunil@analog.com iio: adc: adi-axi-adc: Initialize state mutex

Nuno Sá nuno.sa@analog.com iio: adc: adi-axi-adc: Make use of dev_err_probe()

Michael Hennerich michael.hennerich@analog.com iio: buffer-dmaengine: fix sg entry iteration when building dma_vecs

Dexuan Cui decui@microsoft.com net: mana: Sync page pool RX frags for CPU

Dipayaan Roy dipayanroy@linux.microsoft.com net: mana: remove double CQ cleanup in mana_create_rxq error path

Josef Bacik josef@toxicpanda.com xen/netfront: drop RX packets with a short Ethernet header

Gilberto Conde gilbertorconde@gmail.com net: usb: qmi_wwan: add Quectel EG120K-EA

Sean Christopherson seanjc@google.com KVM: x86: Re-pend GET_NESTED_STATE_PAGES if getting said pages fails

Sean Christopherson seanjc@google.com KVM: x86: Add static calls for nested virtualization ops

Sean Christopherson seanjc@google.com KVM: x86: Reject nested CAP enablement if nested virtualization is disabled

Paolo Bonzini pbonzini@redhat.com KVM: move TSS constants from kvm_host.h to tss.h

Sean Christopherson seanjc@google.com KVM: SVM: Use the active VMCB's MSR bitmap when checking if MSR is intercepted

Mostafa Saleh smostafa@google.com KVM: arm64: Use stage-1 leaf size for VM_PFNMAP

Fuad Tabba fuad.tabba@linux.dev KVM: arm64: Apply the fine-grained UNDEFs without FEAT_FGT

Marc Zyngier maz@kernel.org KVM: arm64: Always populate FGT masks at boot time

Sean Christopherson seanjc@google.com KVM: x86: Move IRQ-related helper declarations from kvm_host.h => irq.h

Beata Michalska beata.michalska@arm.com arm64: errata: Add Cortex-A725 erratum 3821522 workaround

Beata Michalska beata.michalska@arm.com arm64: errata: Factor out broken AMU const counter cap

Andrea Parri parri.andrea@gmail.com arm64: mm: Fix the break-before-make flush range for erratum 2645198

Zhengchuan Liang zcliangcn@gmail.com perf: Require kernel access for text poke events

Dapeng Mi dapeng1.mi@linux.intel.com perf/core: Check kernel access when kernel callchains are requested

Ian Rogers irogers@google.com perf: Replace perf_event_header__init_id with full header init

Peter Zijlstra peterz@infradead.org unwind: Shorten lines

Johan Hovold johan@kernel.org tty: fix saved termios reset race

Pannarat Wiriyaarritham pannarat.wiriyaarritham@danielcorp.dev usb: typec: ucsi: acpi: Assume UCSI 1.2 on Acer Nitro ANV15-41

Daniel Starke daniel.starke@siemens.com tty: n_gsm: fix missing modem controls after DLCI open in convergence layer type 2

Jiazi Liu jiazi.liu1984@gmail.com usb: dwc3: gadget: fix IRQ storm on invalid event buffer count

Timur Kristóf timur.kristof@gmail.com drm/amd/display: Fix fast updates on DCE 8.1

Francisco Beltrán Millalén fbeltranmillalen@gmail.com drm/amdgpu: reset VI ASIC on MacBookPro14,3

Andre Eikmeyer dev@deq.rocks drm/amdgpu: reset VI ASIC on MacBookPro15,1

Arthur Heymans arthur@aheymans.xyz drm/amd/display: Preserve eDP mode on initial ASSR failure

Timur Kristóf timur.kristof@gmail.com drm/amd/display: Mark DCE 6.4 as not APU

Salah Triki salah.triki@gmail.com iio: adc: ad4030: fix invalid oversampling_ratio validation

Marcelo Schmitt marcelo.schmitt@analog.com iio: adc: ad4030: Use BIT macro to improve code readability

Andy Shevchenko andriy.shevchenko@linux.intel.com units: Add HZ_PER_GHZ

Paulo Alcantara pc@manguebit.org smb: client: only require read lease for size-extending preallocate

Pengpeng Hou pengpeng@iscas.ac.cn iio: adc: aspeed: propagate reset deassert errors

Krzysztof Kozlowski krzysztof.kozlowski@oss.qualcomm.com iio: adc: aspeed: Simplify with dev_err_probe

Paulo Alcantara pc@manguebit.org smb: client: distinguish real EOF from a stale remote_i_size on read

Paulo Alcantara pc@manguebit.org smb: client: flush dirty data before zeroing a range

Sven Peter sven@kernel.org thunderbolt: Don't access a DP tunnel after its DPRX read was canceled

Felix Fietkau nbd@nbd.name wifi: mac80211: set info->band for 802.3 encap offload frames

Tamizh Chelvam Raja tamizh.raja@oss.qualcomm.com wifi: mac80211: Add sta pointer sanity check in ieee80211_8023_xmit()

Zhiling Zou zhilinz@nebusec.ai wifi: mac80211: count only matching reservations in reserved switch

Nuno Sá nuno.sa@analog.com mtd: spinand: fix NULL pointer dereference with no ECC engine

Guixin Liu kanie@linux.alibaba.com nvme-multipath: set BLK_FEAT_ZONED only after the zone info is known

Guixin Liu kanie@linux.alibaba.com nvmet: copy the hostid into the ctrl before creating PR pc_refs

Alistair Francis alistair.francis@wdc.com nvmet-tcp: Don't error if TLS is enabed on a reset

Chengfeng Ye nicoyip.dev@gmail.com Bluetooth: Serialize SMP remote OOB data access

Eric Biggers ebiggers@kernel.org fsverity: add dependency on 64K or smaller pages

Andrey Albershteyn aalbersh@kernel.org fs,fsverity: remove check for fsverity being enabled in setattr_prepare()

Christoph Hellwig hch@lst.de fs,fsverity: reject size changes on fsverity files in setattr_prepare

Alice Ryhl aliceryhl@google.com rust: irq: pass RegistrationInner as cookie to request_irq

Danilo Krummrich dakr@kernel.org rust: devres: ensure revocation is complete before device finishes unbinding

Danilo Krummrich dakr@kernel.org rust: devres: fix race between concurrent revokers

Danilo Krummrich dakr@kernel.org rust: devres: add 'static bound to Devres<T>

Danilo Krummrich dakr@kernel.org rust: devres: fix race condition due to nesting

Lorenzo Stoakes (ARM) ljs@kernel.org mm/vma: predicate setting mmap_prepare VMA fields on new vma alloc

Lorenzo Stoakes lorenzo.stoakes@oracle.com mm/vma: rename __mmap_prepare() function to avoid confusion

Paulo Alcantara pc@manguebit.org netfs: clear post-EOF pagecache when extending a file via write

Xuanqiang Luo luoxuanqiang@kylinos.cn pfcp: fix socket lifetime on netdevice registration failure

Mehmet Fide mehmet.fide@screeningeagle.com mtd: rawnand: vf610_nfc: fix false bitflips on reads of erased pages

Asad Kamal asad.kamal@amd.com drm/amd/powerplay: fix VoltageObjectInfo zero-stride loop and OOB read

Chuck Lever chuck.lever@oracle.com svcrdma: Use svc_xprt_put to free listener on create failure

Matthieu Baerts (NGI0) matttbe@kernel.org mptcp: fix msk->timer_ival reset

Fan Wu fanwu01@zju.edu.cn iio: trigger: cancel reenable_work before freeing trigger

Donggeun Yoo donggeunyoo.kernel@gmail.com iio: proximity: vl53l0x-i2c: claim direct mode for raw reads

Salah Triki salah.triki@gmail.com iio: proximity: vcnl3020: fix ISR bitmask check in IRQ handler

Zhang Jie zhangjie14@huaqin.corp-partner.google.com iio: proximity: sx9324: Correct proximity channel resolution

Cong Nguyen congnt264@gmail.com iio: proximity: pulsedlight: fix iio_device left registered on PM setup failure

Salah Triki salah.triki@gmail.com iio: proximity: isl29501: Fix return type of isl29501_register_write

Laxman Acharya Padhya acharyalaxman8848@gmail.com iio: proximity: aw96103: validate firmware data length

Matti Vaittinen mazziesaccount@gmail.com iio: pressure: rohm-bm1390: Return error when read fails

Hui Su sh_def@163.com iio: pressure: bmp280: fix out-of-bounds access in sampling frequency lookup

Matti Vaittinen mazziesaccount@gmail.com iio: light: rohm-bu27034: Fix infinite delay on error

Fan Wu fanwu01@zju.edu.cn iio: light: gp2ap020a00f: drain irq_work after free_irq

Arka Mondal arkamondalofficial@gmail.com iio: imu: adis16480: fix unprotected debugfs reads

Arka Mondal arkamondalofficial@gmail.com iio: imu: adis16400: fix unprotected debugfs reads

Marco Chen marcochen.dev@gmail.com iio: health: max30102: fix NULL dereference in interrupt handler

Arka Mondal arkamondalofficial@gmail.com iio: gyro: adis16136: fix unprotected debugfs reads

Salah Triki salah.triki@gmail.com iio: frequency: admv1013: fix wrong channel field used in admv1013_read_raw()

Pengpeng Hou hppiscas@163.com iio: cdc: ad7150: fix OF matching and publish module aliases

Jonathan Cameron jonathan.cameron@oss.qualcomm.com iio: buffer: Ensure bounce buffer used for unaligned case is zeroed.

Jinseob Kim kimjinseob88@gmail.com iio: buffer: serialize buffer teardown with mode claims

Runyu Xiao runyu.xiao@seu.edu.cn iio: admv1013: initialize callback mutex before registering notifier

Fan Wu fanwu01@zju.edu.cn iio: adc: xilinx-xadc: free IRQ before cancelling the unmask worker on unbind

Felix Gu ustc.gu@gmail.com iio: adc: sun4i-gpadc-iio: drop underflowing pm_runtime_put() calls

Felix Gu ustc.gu@gmail.com iio: adc: sun4i-gpadc-iio: clean up on thermal zone registration failure

Fabrice Gasnier fabrice.gasnier@foss.st.com iio: adc: stm32-adc: fix possible division by zero in processed channel

Fabrice Gasnier fabrice.gasnier@foss.st.com iio: adc: stm32-adc: fix check on internal channel availability

Matti Vaittinen mazziesaccount@gmail.com iio: adc: rohm-bd79124: Fix rising alarm

Matti Vaittinen mazziesaccount@gmail.com iio: adc: rohm-bd79124: Fix GPIO mask check

Matti Vaittinen mazziesaccount@gmail.com iio: adc: rohm-bd79124: Fix channel initialization

Matti Vaittinen mazziesaccount@gmail.com iio: adc: rohm-bd79124: Catch regmap errors at measurement start/stop

Slavin Liu bolin.liu@seu.edu.cn iio: adc: pac1934: check ACPI label duplication

Cong Nguyen congnt264@gmail.com iio: adc: max1363: sign-extend bipolar differential channel reads

Vladyslav Ivashchenko cactucatu4eckuu@gmail.com iio: adc: axp288: Add TS bias override for Haier HV103H

Antoniu Miclaus antoniu.miclaus@analog.com iio: adc: ade9000: request interrupts after powering the device

Antoniu Miclaus antoniu.miclaus@analog.com iio: adc: ade9000: handle Phase C dip events in IRQ1 handler

Antoniu Miclaus antoniu.miclaus@analog.com iio: adc: ade9000: fix overlapping scan_index for current and voltage channels

Linmao Li lilinmao@kylinos.cn iio: adc: ade9000: fix NULL pointer dereference in clkout registration

Fan Wu fanwu01@zju.edu.cn iio: adc: ad_sigma_delta: fix use-after-free on unbind

Marcelo Schmitt marcelo.schmitt@analog.com iio: adc: ad7173: Fix digital filter configuration

Salah Triki salah.triki@gmail.com iio: accel: sca3000: fix frequency divider condition check

Jiale Yao yaojiale02@163.com iio: accel: kxcjk-1013: reject duplicate event disable

Matti Vaittinen mazziesaccount@gmail.com iio: accel: kionix-kx022a: Prevent memory leak and fix state

Frank Sorenson sorenson@redhat.com smb: client: split cifsFileInfo bitfields to avoid shared-byte RMW races

Paulo Alcantara pc@manguebit.org smb: client: flush and commit data before querying allocated ranges

Paulo Alcantara pc@manguebit.org smb: client: discard post-EOF pagecache when extending a file via copy range

Paulo Alcantara pc@manguebit.org smb: client: discard post-EOF pagecache when extending a file via zero range

Daehyeon Ko 4ncienth@gmail.com thunderbolt: Reject oversized XDomain properties responses

Kurt Lieber kurt@lieber.org thunderbolt: Disable CL states for the Anker Prime TB5 dock

Sven Peter sven@kernel.org thunderbolt: Fix domain reference leak when DPRX read is canceled

Sven Peter sven@kernel.org thunderbolt: Tear down inactive DP tunnels when the domain is stopped

Sven Peter sven@kernel.org thunderbolt: Mark discovered tunnels as active

Sven Peter sven@kernel.org thunderbolt: Hold a router reference for each allocated HopID

Mika Westerberg mika.westerberg@linux.intel.com thunderbolt: Fix KASAN reported use-after-free when request is canceled

Ian Lin ian.lin@jetone.com.tw USB: serial: option: add Compal EXC-T1 support

Sebastian Sjoholm sebastian.sjoholm@gmail.com USB: serial: option: add Quectel RG660QB

Ian Lin jisayme@gmail.com USB: serial: option: add Compal EXM-G1x support

Carlo Szelinsky github@szelinsky.de USB: serial: option: add Quectel EG060W

Zhao Dongdong zhaodongdong@kylinos.cn USB: serial: option: add support for SIMCom SIM8260C

Johan Hovold johan@kernel.org USB: serial: fix ioctl hangup race

Johan Hovold johan@kernel.org USB: serial: fix driver deregistration order

Johan Hovold johan@kernel.org USB: serial: fix dynamic id driver deregistration race

Johan Hovold johan@kernel.org USB: serial: ssu100: fix baud rate overflow

Johan Hovold johan@kernel.org USB: serial: quatech2: fix baud rate overflow

Jérémy Carrat jeremy.carrat@icloud.com USB: serial: cp210x: add Corsair AX1500i Power Supply

Yuqi Xu xuyuqiabc@gmail.com wifi: mac80211: handle empty FILS association request payload

Zihan Xi zihanx@nebusec.ai wifi: mac80211: fix mesh fast xmit path deletion UAF

Zhao Li enderaoelyther@gmail.com wifi: mac80211: release mesh path quota on failed additions

Ruide Cao caoruide123@gmail.com wifi: mac80211: reject invalid 320 MHz CSA bandwidth

Yuqi Xu xuyuqiabc@gmail.com wifi: mac80211: minstrel_ht: validate fixed rate index

Zhao Li enderaoelyther@gmail.com wifi: mac80211: keep fallback association elements alive

Zhao Li enderaoelyther@gmail.com wifi: mac80211: account proxy paths against the mesh path limit

Zhao Li enderaoelyther@gmail.com wifi: mac80211: drain PS delivery work during station teardown

Zhao Li enderaoelyther@gmail.com wifi: mac80211: shut down RX BA session timer on teardown

Zhiling Zou zhilinz@nebusec.ai wifi: mac80211: keep paired old chanctx alive

Guangshuo Li lgs201920130244@gmail.com wifi: iwlegacy: 3945: free EEPROM data on remove

Tianchu Chen flynnnchen@tencent.com wifi: cw1200: fix TX padding OOB read leaking heap data to device

Stanislaw Gruszka stf_xl@wp.pl wifi: cfg80211: fix RTS threshold setting for single-radio PHY

Marc Zyngier maz@kernel.org KVM: arm64: vgic-its: Fix MOVALL handling of source redistributor

Fuad Tabba fuad.tabba@linux.dev KVM: arm64: Clear HCR_EL2.RW for 32-bit non-protected vCPUs

Sean Christopherson seanjc@google.com KVM: x86/mmu: Bail from shadow walks if the root is invalid or a dummy

Sean Christopherson seanjc@google.com KVM: SEV: Do cache maintenance on the source VM *before* clearing SEV state

Sean Christopherson seanjc@google.com KVM: SEV: Nullify "have run CPUs" mask pointer when freeing it

Sean Christopherson seanjc@google.com KVM: nVMX: Force MSR bitmap refresh if runtime eVMCS controls are modified

Sagnik Sasmal sagnik@sagnik.me mtd: spinand: Do not update the QE bit on devices without one

Nuno Sá nuno.sa@analog.com mtd: spinand: fix zero oobavail when no ECC engine is used

Han Xu han.xu@nxp.com mtd: spinand: Enable QE on all dies

Runyu Xiao runyu.xiao@seu.edu.cn mtd: spi-nor: core: Fix mutex leak in spi_nor_rww_start_exclusive()

Mehmet Fide mehmet.fide@screeningeagle.com mtd: rawnand: vf610_nfc: fix reads on chips with more than 64 bytes of OOB

Runyu Xiao runyu.xiao@seu.edu.cn mtd: rawnand: cadence: Initialize IRQ state before requesting IRQ

Menachem Adin menachem.adin@intel.com mtd: mtd_intel_dg: reset poll counter for each erase

Pei Xiao xiaopei01@kylinos.cn mtd: block2mtd: Fix divide error when erase_size is zero

Daehyeon Ko 4ncienth@gmail.com nvmet: pci-epf: reject too-short SGL segments

Weiming Shi bestswngs@gmail.com nvmet-auth: fix out-of-bounds write in nvmet_auth_challenge()

Bean Huo beanhuo@micron.com nvme-pci: add NVME_QUIRK_DMAPOOL_ALIGN_512 for Micron 4100AT

Daehyeon Ko 4ncienth@gmail.com nvme-multipath: fix underflow in ANA log bounds checks

Jiangshan Yi yijiangshan@kylinos.cn tpm: fix off-by-four bounds check in tpm2_get_random()

Willem de Bruijn willemb@google.com net: extend IPv6 exthdr detection of tunneled packets

Zhiling Zou zhilinz@nebusec.ai ipvs: bound LBLCR and LBLC cache growth

Jens Axboe axboe@kernel.dk io_uring: fix task_work add use-after-free with SQPOLL

Masami Hiramatsu (Google) mhiramat@kernel.org fprobe: Use guard(rcu_sched_notrace) and check rcu_is_watching()

Menglong Dong menglong8.dong@gmail.com tracing: fprobe: fix suspicious rcu usage in fprobe_entry

SeongJae Park sj@kernel.org mm/damon/core: do non-safe region walk on kdamond_apply_schemes()

Mikhail Gavrilov mikhail.v.gavrilov@gmail.com x86/mm: Drop unnecessary PMD page copy when freeing

Laurent Wandrebeck l.wandrebeck@quelquesmots.fr x86/mm: Don't apply va_align to hugetlb mappings on AMD F15h

Chandrashekar Devegowda chandrashekar.devegowda@intel.com Bluetooth: btintel_pcie: reject oversized TX packets in send_frame()

Chandrashekar Devegowda chandrashekar.devegowda@intel.com Bluetooth: btintel_pcie: fix plen overflow in btintel_pcie_recv_frame()

Chandrashekar Devegowda chandrashekar.devegowda@intel.com Bluetooth: btintel: fix buffer over-read in btintel_hw_error()

Chengfeng Ye nicoyip.dev@gmail.com Bluetooth: hci_core: Serialize fragmented ISO packet queueing

Chengfeng Ye nicoyip.dev@gmail.com Bluetooth: hci_core: Serialize SCO and ISO scheduling with teardown

Chengfeng Ye nicoyip.dev@gmail.com Bluetooth: hci_core: Serialize ACL scheduling with channel deletion

Linmao Li lilinmao@kylinos.cn Bluetooth: hci_core: Fix inquiry cache timestamps on 64-bit systems

Chengfeng Ye nicoyip.dev@gmail.com Bluetooth: hci_conn: Lock parent access during enhanced SCO setup

Chengfeng Ye nicoyip.dev@gmail.com Bluetooth: hci_sync: Fix inquiry cache use-after-free

Chengfeng Ye nicoyip.dev@gmail.com Bluetooth: RFCOMM: Fix initial port reference race

Abdurrahman Hussain abdurrahman@nexthop.ai i2c: xiic: don't clobber msg->len to signal block-read completion

Abdurrahman Hussain abdurrahman@nexthop.ai i2c: xiic: defer RX_FULL until all trailing bytes are in FIFO

Abdurrahman Hussain abdurrahman@nexthop.ai i2c: xiic: preserve PEC byte length in SMBus block read setup

Rounak Das rounakdas2025@gmail.com EDAC/altera: Fix device node reference leaks in the SDMMC ECC setup

Dinh Nguyen dinguyen@kernel.org EDAC/altera: Fix use-after-free in error paths

Dinh Nguyen dinguyen@kernel.org EDAC/altera: Fix memory leak on dci allocation failure

Dinh Nguyen dinguyen@kernel.org EDAC/altera: Drop __init from ECC setup paths for re-probe safety

Dinh Nguyen dinguyen@kernel.org EDAC/altera: Do not allow driver unbinding

Guangshuo Li lgs201920130244@gmail.com EDAC/versalnet: Drop remote processor handle refcount on driver removal

Yu-Hsiang Tseng asas1asas200@gmail.com ALSA: hda/realtek: Fix silent speaker on Higole F9B

Zhang Heng zhangheng@kylinos.cn ALSA: hda/realtek: Fix square wave output on ASUS Strix G615LR

Xiang Mei xmei5@asu.edu ALSA: ua101: reject mismatched capture/playback packet sizes

Kyle Zeng kylebot@openai.com ALSA: seq: Serialize compat port-info ioctls

Aaron Kling webgeek1234@gmail.com ALSA: hda/tegra: Re-enable SDO workaround for Tegra194

Zimeng Li me@lizi.moe ASoC: qcom: lpass-cpu: use DAI table index for playback constraints

Jiangshan Yi yijiangshan@kylinos.cn ASoC: codecs: rt1017-sdca-sdw: fix uninitialized stream_config->type

Jiangshan Yi yijiangshan@kylinos.cn ASoC: codecs: max98363: fix uninitialized stream_config->type

Mark Rutland mark.rutland@arm.com arm64/fpsimd: signal: Forbid non-streaming SVE payload on SME-only systems

Paul Mbewe paultyson.mbewe@ziehl-abegg.de serial: sc16is7xx: refill TX FIFO below trigger using fresh TXLVL

Paul Mbewe paultyson.mbewe@ziehl-abegg.de serial: sc16is7xx: fix TX gap caused by kfifo circular buffer wrap-around

Wentao Liang vulab@iscas.ac.cn serial: vt8500: Fix clock reference leak in vt8500_serial_probe()

Simon Gassner simon.gassner@noxsystems.com serial: tegra: don't clear the Tx FIFO on an Rx-only reset

Wentao Liang vulab@iscas.ac.cn serial: ma35d1: Fix clock reference leak in ma35d1serial_probe()

Johan Hovold johan@kernel.org serial: fix TIOCMIWAIT race

Johan Hovold johan@kernel.org serial: revert guards in uart_wait_modem_status()

Kendall Willis k-willis@ti.com serial: 8250_omap: fix wake irq cleared during suspend

Fan Wu fanwu01@zju.edu.cn serial: 8250_bcm7271: fix use-after-free in brcmuart_remove()

Fan Wu fanwu01@zju.edu.cn tty: serial: max3100: shut down timer before freeing port

Johan Hovold johan@kernel.org tty: abort break signalling on hangup

Viken Dadhaniya viken.dadhaniya@oss.qualcomm.com tty: serial: qcom_geni_serial: Keep console RX functional after deep idle

Johan Hovold johan@kernel.org tty: port: fix tty_port_tty_vhangup() race

Johan Hovold johan@kernel.org tty: tty_port: restore TTY_IO_ERROR on activation failure

Joshua Rogers linux@joshua.hu tty: vcc: hold port lock when clearing tty pointer in vcc_cleanup

Joshua Rogers linux@joshua.hu tty: vcc: zero-initialize control packet in vcc_send_ctl()

Johan Hovold johan@kernel.org tty: amiserial: fix broken TIOCMIWAIT

Mingyu Wang 25181214217@stu.xidian.edu.cn tty: vt: fix memory leak in vc_allocate()

Jie Deng dengjie03@kylinos.cn usb: cdns3: Fix NULL pointer dereference in cdns3_pci_probe

Fan Wu fanwu01@zju.edu.cn usb: cdns3: fix use-after-free in cdns3_gadget_exit()

Jameson Thies jthies@google.com usb: typec: ucsi: displayport: Current CAM OOB index fixup

Prashanth K prashanth.k@oss.qualcomm.com usb: typec: ucsi: Get the connector fwnode based on reg value

Fan Wu fanwu01@zju.edu.cn usb: typec: ucsi: glink: fix use-after-free of ucsi on remove

Radhey Shyam Pandey radhey.shyam.pandey@amd.com usb: typec: tipd: fix uninitialized typec_partner_desc in cd321x_update_work()

Radhey Shyam Pandey radhey.shyam.pandey@amd.com usb: typec: tipd: fix uninitialized typec_partner_desc in tps6598x_connect()

Marian Rotariu marian.c.rotariu@gmail.com usb: typec: tipd: don't send GAID when probe fails in APP mode

Amit Sunil Dhamne amitsd@google.com usb: typec: tcpm: recover after failure to start the frs ams

Runyu Xiao runyu.xiao@seu.edu.cn USB: dwc2: shut down wakeup timer before freeing HCD state

Hui Peng benquike@gmail.com usb: core: clear both ep_in and ep_out for non-ep0 control endpoints

Myeonghun Pak mhun512@gmail.com usb: chipidea: tegra: disable runtime PM on resume failure

Yuchao Zhang ndaugoing@gmail.com usb: gadget: f_fs: Fix NULL pointer dereference in FUNCTIONFS_ENDPOINT_DESC

Alan Stern stern@rowland.harvard.edu USB: gadget: dummy-hcd: Fix wait for outstanding request completions

Fan Wu fanwu01@zju.edu.cn usb: gadget: aspeed-vhub: cancel wake work on device removal

Radhey Shyam Pandey radhey.shyam.pandey@amd.com usb: dwc3: am62: Fix runtime PM usage count leak on probe error path

Marek Maslanka mmaslanka@google.com usb: typec: port-mapper: Only match USB4 port if host interface is available

Linkai Gong gonglinkai@kylinos.cn usb: typec: anx7411 - stop the IRQ before destroying the workqueue

Liu Chao liuc63@xiaopeng.com usb: gadget: f_uac1_legacy: validate bRequest index in generic_{set,get}_cmd

Takashi Iwai tiwai@suse.de usb: gadget: midi2: Fix the jack descriptor array sizes

Myeonghun Pak mhun512@gmail.com usb: ohci-st: disable controller wakeup on removal

Myeonghun Pak mhun512@gmail.com usb: ohci-spear: disable controller wakeup on removal

Myeonghun Pak mhun512@gmail.com usb: ohci-s3c2410: disable controller wakeup on removal

Myeonghun Pak mhun512@gmail.com usb: ohci-da8xx: disable controller wakeup on cleanup

Orgad Shaneh orgads@gmail.com usb: octeon-hcd: fix the FIFO-flush timeout computation

Lovekesh Solanki lovekeshsolanki00@gmail.com usb: hub: use shorter 120ms post resume hold for SS root hubs

Syed Labeeq Sajid Bukhari syedlabeeq@gmail.com usb: storage: sierra_ms: reject short SWoC info transfers

Johan Hovold johan@kernel.org USB: serial: fix port tear down use-after-free

Yuchao Zhang ndaugoing@gmail.com USB: cdc-acm: skip URB restart in port_shutdown if disconnected

Johan Hovold johan@kernel.org USB: cdc-acm: fix racy TIOCMIWAIT implementation

Viken Dadhaniya viken.dadhaniya@oss.qualcomm.com soc: qcom: geni-se: Correct QUP Core ICC vote constants

Alice Ryhl aliceryhl@google.com rust_binder: reschedule node refcount update on thread exit

Alice Ryhl aliceryhl@google.com rust_binder: cancel deferred work items in thread exit

Yuxiao Wang yuxiao.wang@certik.com nitro_enclaves: fix use-after-free on SLOT_ALLOC failure

Raphaël Larocque rlarocque@disroot.org Input: synaptics - limit T440p InterTouch quirk to LEN0036

Lovekesh Solanki lovekeshsolanki00@gmail.com Input: synaptics - add LEN205b entry to smbus_pnp_ids for ThinkPad T490

David Heidelberg david@ixit.cz Input: s6sy761 - fix resume ordering and restore sensing

Lovekesh Solanki lovekeshsolanki00@gmail.com Input: i8042 - add nomux quirk for Fujitsu LIFEBOOK U7410

Martino Papero martino.papero@lcb.to.it Input: atkbd - skip deactivate for Lenovo IdeaPad Slim 3 15IWC11

Wentao Liang vulab@iscas.ac.cn kgdboc: Fix tty driver reference leak in configure_kgdboc()

Tomer Pomeranc tomerpo@gmail.com binder: fix leaked fd fixups on TF_UPDATE_TXN supersede

Tomer Pomeranc tomerpo@gmail.com binder: fix is_failure flag for superseded transaction cleanup

Theo Andersen Carton andersen.theo@gmail.com drm/amdgpu: skip the noirq suspend reset for a switcheroo-parked GPU

Guangshuo Li lgs201920130244@gmail.com drm/amdgpu: fix ACP MFD device leak on init failure

Guangshuo Li lgs201920130244@gmail.com drm/amdgpu: fix IP instance memory leak on kobject add failure

Wentao Liang vulab@iscas.ac.cn drm/mediatek: Fix pdev reference leak in mtk_drm_bind()

Guangshuo Li lgs201920130244@gmail.com drm/mediatek: Fix ovl adaptor platform device leak

Haojie Li lihaojie@kylinos.cn drm/mediatek: Add missing IS_ERR check for ovl_adaptor platform device

Imre Kaloz kaloz@kernel.org drm/radeon: Read the VRAM VBIOS signature with readb()

Willian Oliveira williandossantosdeoliveira287@gmail.com drm/amdgpu/gfx6: fix firmware leak on teardown

Timur Kristóf timur.kristof@gmail.com drm/amd/pm/si: Fix updating clock limits on AC/DC

Timur Kristóf timur.kristof@gmail.com drm/amd/pm/si: Check AMD_IS_MOBILITY flag for PPSMC_SYSTEMFLAG_GPIO_DC

Jiangshan Yi yijiangshan@kylinos.cn drm/amd/display: check dc_state_create_copy() for NULL in dm_suspend

Nikola Prica nikola.prica@amd.com PCI: Accept AtomicOps already enabled by the hypervisor

Richard Fitzgerald rf@opensource.cirrus.com spi: cs42l43: Workaround for wrong speaker ID on Dell XPS 13 DX13260

Takashi Iwai tiwai@suse.de ALSA: ice1712: Fix the error handling via auto-cleanup at probe

Takashi Iwai tiwai@suse.de ALSA: core: Define auto-cleanup for snd_card_free()

Luo Gengkun luogengkun2@huawei.com perf: Fix race between perf_event_exit_task() and perf_pending_task()

Hongjian Dai daihongjian@kylinsec.com.cn i2c: at91: release DMA channels when probe defers

Lorenzo Bianconi lorenzo.bianconi@oss.qualcomm.com net: mvneta: clear XDP pfmemalloc flag between frames

Eric Dumazet edumazet@kernel.org ipv6: sr: use skb_get_hash_net() in seg6_make_flowlabel()

Prathamesh Deshpande prathameshdeshpande7@gmail.com net/mlx5e: Fix AF_XDP TX timestamp teardown NULL dereference

Quentin Freimanis quentin@q-lab.dev net: sparx5: make ports inherit the switch base mac address type

Yuho Choi oss.patchbox@gmail.com of: Put coreboot node after compatibility check

Harshit Mogalapalli harshit.m.mogalapalli@oracle.com net: microchip: vcap: stop scanning after deleting key field

Pablo Neira Ayuso pablo@netfilter.org netfilter: flowtable: generalize pending status bit

Fernando Fernandez Mancera fmancera@suse.de netfilter: bpf: reject invalid NAT manipulation types

Julian Anastasov ja@ssi.bg ipvs: filter some flags received in the backup server

Julian Anastasov ja@ssi.bg ipvs: do not create invisible templates

Julian Anastasov ja@ssi.bg ipvs: fix missing counter decrement in lblc

Jeff Jo jeffjo@openai.com tcp: refresh TS.Recent for accepted old ACKs

Quentin Freimanis quentin@q-lab.dev net: sparx5: skip ptp deinit if init was skipped

Daniel Machon daniel.machon@microchip.com net: sparx5: move PTP IRQ handling out of sparx5_start()

Daniel Machon daniel.machon@microchip.com net: sparx5: move stats initialization and add deinit function

Daniel Machon daniel.machon@microchip.com net: sparx5: move MAC table initialization and add deinit function

Daniel Machon daniel.machon@microchip.com net: sparx5: move VCAP initialization to probe

Daniel Machon daniel.machon@microchip.com net: sparx5: move netdev and notifier block registration to probe

Yongzhao Chen yongzhao.derek@gmail.com net: phy: qcom: at803x: Fix IPQ5018 short-cable DAC values

Sandeep Haemoon sandeeph@loljews.com net: ethernet: mtk_eth_soc: allocate dummy netdev sooner

Jamal Hadi Salim jhs@mojatatu.com net: cap skb->queue_mapping when the tx queue is picked

Nicolai Buchwitz nb@tipi-net.de net: bcmgenet: fix NULL dereference in set_coalesce before first open

Yoshihisa Yamamoto yoshihisa.yamamoto.xn@renesas.com net: pcs: rzn1-miic: Clear MIIC protection state before unprotect sequence

Niklas Cassel cassel@kernel.org virtio_blk: set the zone write granularity

Jamal Hadi Salim jhs@mojatatu.com net/sched: sch_codel: match the no-drop threshold to the packet size

Jamal Hadi Salim jhs@mojatatu.com net/sched: fq_codel: match the no-drop threshold to the packet size

Hannu Varjoranta hannu@varjosoft.com gve: DQO: accept TSO packets with non-protocol gso_type bits

Eric Dumazet edumazet@google.com net: restrict SO_RESERVE_MEM to TCP sockets and cap max value

Lorenzo Bianconi lorenzo.bianconi@oss.qualcomm.com net: stmmac: fix rx Scatter-Gather support

Russell King (Oracle) rmk+kernel@armlinux.org.uk net: stmmac: convert priv->sph* to boolean and rename

Mina Almasry almasrymina@google.com net: page_pool: fix use-after-free in page_pool_recycle_ring_bulk()

Jérémy Jean Jeremy.Jean@oss.cyber.gouv.fr tipc: prevent GCM nonce reuse on peer key changes

Baha Mesleh baha.mesleh@nokia.com octeontx2-af: mcs: Fix SC resource cleanup loop

Anirudh Virdi avirdi@redhat.com net/mlx5: Fix slab-out-of-bounds when handling team device events

Florian Fainelli florian.fainelli@broadcom.com net: systemport: Fix RUNT MIB counter register offset calculation

Florian Fainelli florian.fainelli@broadcom.com net: systemport: Fix buffer overflow in bcm_sysport_get_stats()

Nguyen Ngoc Thang ngocthang2710.1999@gmail.com Bluetooth: hci_sync: don't drain cmd_sync backlog on unregister

Florian Westphal fw@strlen.de netfilter: ipset: do not update comments from kernel-side adds

Qishuai Liu lqs@lqs.me ipv6: fix prefix route expiry in modify_prefix_route()

Nicolai Buchwitz nb@tipi-net.de net: bcmgenet: allocate RX buffers as page fragments

Jamal Hadi Salim jhs@mojatatu.com net/sched: cls_api: reclaim an empty proto on the error path

Binbin Deng 18983559317@163.com net/mctp: publish the mctp_dev only after it is initialised

Vineet Gupta vgupta@kernel.org ARC: arch_cmpxchg_relaxed to use size of pointed type not pointer

Oleg Keri okerixx@gmail.com arm64: topology: fix arch_freq_get_on_cpu() overflow above 4.19 GHz

Sai Teja Aluvala aluvala.sai.teja@intel.com Bluetooth: btintel: validate DDC record lengths

Sang-Hoon Choi csh0052@gmail.com Bluetooth: hci_core: free the HCI ID if naming fails

Keith Busch kbusch@kernel.org blk-mq: set RQF_USE_SCHED when the operation is known

Yu Kuai yukuai@fnnas.com blk-mq: factor out a helper blk_mq_limit_depth()

Yang Xiuwei yangxiuwei@kylinos.cn block: reject polled dio with user integrity metadata

Cezary Rojewski cezary.rojewski@intel.com ASoC: codecs: rt274: Fix format setting for 44100 rate

Cezary Rojewski cezary.rojewski@intel.com ASoC: codecs: rt286: Revert delay value for jack setup

Felix Fietkau nbd@nbd.name wifi: mac80211: prevent AP VLAN tx from other interfaces

Tamizh Chelvam Raja tamizh.raja@oss.qualcomm.com wifi: mac80211: Add 802.3 multicast encapsulation offload support

Tamizh Chelvam Raja tamizh.raja@oss.qualcomm.com wifi: mac80211: Add multicast to unicast support for 802.3 path

Zhao Li enderaoelyther@gmail.com wifi: cfg80211: preserve hidden-group beacon IE ownership

Manush Prajwal manushprajwal555@gmail.com rtc: mpfs: fix unchecked devm_clk_get() error pointer in probe()

Aamir Ahmed elb12345@hotmail.co.uk rtc: ac100: Fix clock provider use-after-free on probe failure

Liu Dalin liudalin@kylinsec.com.cn rtc: dev: zero-initialize struct rtc_wkalrm to prevent information leak

Georgios Karantzas gck.kara@gmail.com wifi: ath9k_htc: bound TX aggregation to MAX_TX_BUF_SIZE

Pengpeng Hou pengpeng@iscas.ac.cn wifi: ath9k: reject short WMI command responses

Nicolas Escande nico.escande@gmail.com wifi: ath11k: reset ar->num_stations on hardware start

Yuchao Zhang ndaugoing@gmail.com wifi: mac80211: drop oversized fragments to avoid extra_len overflow

Johannes Berg johannes.berg@intel.com wifi: mac80211: remove RX_DROP

Sheetal sheetal@nvidia.com ASoC: tegra: Fix ASRC Stream6 input threshold control

Aamir Ahmed elb12345@hotmail.co.uk wifi: wfx: validate MIB read length before copying to caller

HyeongJun An sammiee5311@gmail.com ASoC: wm8903: Move the DRC QR threshold to the register that holds it

Abdurrahman Hussain abdurrahman@nexthop.ai of/overlay: don't create "//" paths for fragments targeting the root

Abdurrahman Hussain abdurrahman@nexthop.ai of/overlay: don't leak fragment references when changeset init fails

Karl Mehltretter kmehltretter@gmail.com random: fix vgetrandom_opaque_params kernel-doc

Julian Sun sunjunchao@bytedance.com nvmet: preserve device path on allocation failure

Karl Mehltretter kmehltretter@gmail.com mtd: core: call _get_device() with the master MTD

Matti Vaittinen mazziesaccount@gmail.com iio: accel: kionix-kx022a: Fix array boundary check

Matti Vaittinen mazziesaccount@gmail.com iio: light: rohm-bu27034: Fix error return

Matti Vaittinen mazziesaccount@gmail.com iio: dac: rohm-bd79703: Do not allow writing SCALE

SJ Park sj@kernel.org mm/damon/core: don't skip damos_adjust_quota() while esz is not zero

Nathan Chancellor nathan@kernel.org random: vDSO: avoid call to memset() when zeroing reserved parameter

Xiang Mei xmei5@asu.edu ALSA: line6: reject oversized playback packets

Nguyen Ngoc Thang ngocthang2710.1999@gmail.com ALSA: caiaq: unregister the input device when probe fails

Wentao Liang vulab@iscas.ac.cn wifi: wlcore: Fix runtime PM leak in wlcore_remove()

Zizhi Wo wozizhi@huawei.com vt: skip screen update for DEC alignment test on backgroup consoles

Hui Peng benquike@gmail.com vt: selection: Fix unsigned underflow and slab-out-of-bounds read in paste_selection()

Yi Yang yiyang13@huawei.com vc_screen: reload vc pointer before if (ret) in vcs_write() to avoid UAF

Ilya Maximets i.maximets@ovn.org net: dst_metadata: fix false-positive memcpy overflow in tun_dst_unclone

Maoyi Xie maoyixie.tju@gmail.com rds_tcp: close NULL deref window in rds_tcp_set_callbacks

Matt Fleming mfleming@cloudflare.com mm/huge_memory: initialise workingset state before folio split

Baolin Wang baolin.wang@linux.alibaba.com mm: shmem: ignore sysfs configs for shmem forced collapse

Zhichen Wang wangzhichen@manus.ai virt: vmgenid: set driver_data before registering notification handlers

Vitaly Kuznetsov vkuznets@redhat.com virt: vmgenid: remap memory as decrypted

Hao Ge hao.ge@linux.dev module: fix lost error code from codetag_load_module()

Paulo Alcantara pc@manguebit.org netfs: zero gaps in read-gaps folio to avoid writing back stale data

Surendran Kanagaraj surenkj@amazon.com tpm: Disable TPM on null key name mismatch

Jun Yang junvyyang@tencent.com sctp: check RCV_SHUTDOWN after the sendmsg connect wait

Runyu Xiao runyu.xiao@seu.edu.cn rtc: spear: initialize IRQ state before requesting alarm IRQ

Aamir Ahmed elb12345@hotmail.co.uk rtc: ac100: Assign .num before accessing .hws

Oleksij Rempel o.rempel@pengutronix.de r8169: disable EEE on RTL8168h/8111h

Ilkka Lappeteläinen ilkka.lappetelainen@gmail.com net/packet: prevent TX_RING byte count overflow

Aohan Mei henrymei@tencent.com netfilter: nft_flow_offload: drop flowtable reference on init error path

Bartosz Golaszewski bartosz.golaszewski@oss.qualcomm.com net: phy: aquantia: fix system interface type not updated in forced mode

Alireza Asgari alireza@asgari.net net: fix checksum offsets in skb_splice_from_iter()

Abdurrahman Hussain abdurrahman@nexthop.ai of/overlay: only treat a positive changeset id as registered

Abdurrahman Hussain abdurrahman@nexthop.ai of/overlay: put property on deadprops only after changeset add succeeds

Wentao Liang vulab@iscas.ac.cn of/irq: Fix remaining refcount leaks in of_irq_init()

Jari Seppälä jase@nocloud.org octeontx2-pf: Fix RSS indirection table size

Leon Hwang leon.hwang@linux.dev kprobes: Skip disarmed probes when checking optkprobe overlap

Andrey Ryabinin ryabinin.a.a@gmail.com kasan: unpoison task stack below watermark only in generic mode

Junyuan Feng a@lollipopkit.com io_uring/zcrx: requeue multishot receives stopped by a local resource

lollipopkit a@lolli.tech io_uring/cmd_net: end TX_TIMESTAMP multishot when the CQ is full

Aldo Ariel Panzardo qwe.aldo@gmail.com HID: multitouch: stop the release timer from being rearmed on remove

Benjamin Tissoires bentiss@kernel.org HID: bpf: cast size to ssize_t when checking hid_bpf_hw_request

Mohamad Raizudeen raizudeen.kerneldev@gmail.com crypto: x86/aes-gcm - fix always true check for last AAD segment

Jérémy Jean Jeremy.Jean@oss.cyber.gouv.fr audit: fix exe mark UAF in kill_rules()

Takashi Iwai tiwai@suse.de ALSA: usb-audio: Apply IGNORE_CTL_ERROR quirk to all Audient devices

Zihan Xi zihanx@nebusec.ai smb: client: close completed creates on compound wait errors

David Howells dhowells@redhat.com cifs: Remove the RFC1002 header from smb_hdr

Zihan Xi zihanx@nebusec.ai smb: client: close handle after create-context parsing failure

ChenXiaoSong chenxiaosong@kylinos.cn smb/client: pass cifs_open_info_data to SMB2_open()

ChenXiaoSong chenxiaosong@kylinos.cn smb/client: use stack-allocated smb2_file_all_info in smb3_query_mf_symlink()

Shyam Prasad N sprasad@microsoft.com cifs: on replayable errors back-off before replay, not after

Tibor Harcsa silurust@gmail.com Bluetooth: btusb: Add IMC Networks QCA9377 to quirks table

Richard Fitzgerald rf@opensource.cirrus.com ASoC: sdw_utils: Set snd_soc_dai_link_ch_map.codec_ch_mask for capture

Kuniyuki Iwashima kuniyu@google.com neighbour: Annotate access to neigh_parms fields.

Kuniyuki Iwashima kuniyu@google.com neighbour: Use RCU list helpers for neigh_parms.list writers.

Jiakai Xu jiakaipeanut@gmail.com RISC-V: KVM: Fix null pointer dereference in kvm_riscv_aia_imsic_has_attr()

Darrick J. Wong djwong@kernel.org xfs: don't let memory failures leak blocks and kill repairs

Namjae Jeon linkinjeon@kernel.org smb: client: use finish_no_open() for non-regular inodes

Hubert Mazur hmazur@google.com mm/execmem: make the populate and alloc atomic

Mike Rapoport (Microsoft) rppt@kernel.org selftests/mm: hugetlb-mremap: add setup of HugeTLB pages

Marc Zyngier maz@kernel.org KVM: arm64: nv: Delay freeing of shadow S2 structures until VM destruction

Marc Zyngier maz@kernel.org KVM: arm64: nv: Fix life cycle of the nested_mmus array

Qu Wenruo wqu@suse.com btrfs: initialize inode mapping flags for cached inodes

-------------

Diffstat:

Documentation/arch/arm64/silicon-errata.rst | 2 + Documentation/filesystems/netfs_library.rst | 26 ++ Makefile | 4 +- arch/arc/include/asm/atomic64-arcv2.h | 6 + arch/arc/include/asm/cmpxchg.h | 4 +- arch/arm64/Kconfig | 30 +++ arch/arm64/include/asm/kvm_host.h | 2 +- arch/arm64/include/asm/kvm_nested.h | 3 +- arch/arm64/kernel/cpu_errata.c | 24 +- arch/arm64/kernel/cpufeature.c | 2 +- arch/arm64/kernel/signal.c | 34 ++- arch/arm64/kernel/topology.c | 17 +- arch/arm64/kernel/vdso/Makefile | 2 +- arch/arm64/kvm/arm.c | 12 +- arch/arm64/kvm/emulate-nested.c | 15 +- arch/arm64/kvm/hyp/nvhe/pkvm.c | 9 + arch/arm64/kvm/mmu.c | 46 +--- arch/arm64/kvm/nested.c | 100 ++++--- arch/arm64/kvm/vgic/vgic-its.c | 12 +- arch/arm64/mm/mmu.c | 2 +- arch/arm64/tools/cpucaps | 2 +- arch/loongarch/vdso/Makefile | 1 + arch/powerpc/kernel/vdso/Makefile | 1 + arch/powerpc/perf/imc-pmu.c | 23 +- arch/riscv/kernel/vdso/Makefile | 1 + arch/riscv/kvm/aia_imsic.c | 5 +- arch/s390/kernel/vdso64/Makefile | 1 + arch/x86/crypto/aesni-intel_glue.c | 2 +- arch/x86/entry/vdso/Makefile | 1 + arch/x86/include/asm/kvm-x86-nested-ops.h | 35 +++ arch/x86/include/asm/kvm_host.h | 22 +- arch/x86/kernel/sys_x86_64.c | 15 +- arch/x86/kvm/hyperv.c | 6 +- arch/x86/kvm/irq.h | 6 + arch/x86/kvm/mmu/mmu.c | 6 + arch/x86/kvm/mmu/paging_tmpl.h | 2 +- arch/x86/kvm/svm/nested.c | 1 + arch/x86/kvm/svm/sev.c | 46 ++-- arch/x86/kvm/svm/svm.c | 13 +- arch/x86/kvm/tss.h | 7 + arch/x86/kvm/vmx/nested.c | 7 + arch/x86/kvm/vmx/vmx.c | 2 + arch/x86/kvm/x86.c | 63 +++-- arch/x86/kvm/x86.h | 2 +- arch/x86/mm/pgtable.c | 38 +-- block/blk-mq.c | 115 +++++--- block/fops.c | 5 + block/mq-deadline.c | 2 +- drivers/android/binder.c | 3 +- drivers/android/binder/node.rs | 20 +- drivers/android/binder/node/wrapper.rs | 34 ++- drivers/android/binder/thread.rs | 8 +- drivers/block/virtio_blk.c | 1 + drivers/bluetooth/btintel.c | 15 +- drivers/bluetooth/btintel_pcie.c | 12 +- drivers/bluetooth/btusb.c | 2 + drivers/char/tpm/tpm2-cmd.c | 2 +- drivers/char/tpm/tpm2-sessions.c | 1 + drivers/edac/altera_edac.c | 67 ++--- drivers/edac/versalnet_edac.c | 1 + drivers/gpu/drm/amd/amdgpu/amdgpu_acp.c | 13 +- drivers/gpu/drm/amd/amdgpu/amdgpu_discovery.c | 2 + drivers/gpu/drm/amd/amdgpu/amdgpu_drv.c | 8 + drivers/gpu/drm/amd/amdgpu/gfx_v6_0.c | 9 + drivers/gpu/drm/amd/amdgpu/vi.c | 21 ++ drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm.c | 9 +- drivers/gpu/drm/amd/display/dc/dc.h | 1 + .../dc/link/protocols/link_edp_panel_control.c | 4 +- .../amd/display/dc/resource/dce60/dce60_resource.c | 1 - .../amd/display/dc/resource/dce80/dce80_resource.c | 1 + drivers/gpu/drm/amd/pm/legacy-dpm/si_dpm.c | 39 +-- .../gpu/drm/amd/pm/powerplay/hwmgr/ppatomctrl.c | 10 +- .../gpu/drm/amd/pm/powerplay/hwmgr/ppatomfwctrl.c | 11 +- drivers/gpu/drm/mediatek/mtk_drm_drv.c | 17 +- drivers/gpu/drm/radeon/radeon_bios.c | 6 +- drivers/hid/bpf/hid_bpf_dispatch.c | 2 +- drivers/hid/hid-multitouch.c | 2 +- drivers/i2c/busses/i2c-at91-master.c | 8 +- drivers/i2c/busses/i2c-xiic.c | 61 +++-- drivers/iio/accel/kionix-kx022a.c | 30 ++- drivers/iio/accel/kxcjk-1013.c | 2 +- drivers/iio/accel/sca3000.c | 2 +- drivers/iio/adc/ad4030.c | 23 +- drivers/iio/adc/ad7173.c | 4 +- drivers/iio/adc/ad_sigma_delta.c | 31 ++- drivers/iio/adc/ade9000.c | 36 +-- drivers/iio/adc/adi-axi-adc.c | 59 ++--- drivers/iio/adc/aspeed_adc.c | 13 +- drivers/iio/adc/axp288_adc.c | 8 + drivers/iio/adc/max1363.c | 8 + drivers/iio/adc/pac1934.c | 4 + drivers/iio/adc/rohm-bd79124.c | 20 +- drivers/iio/adc/stm32-adc.c | 47 ++-- drivers/iio/adc/sun4i-gpadc-iio.c | 10 +- drivers/iio/adc/xilinx-xadc-core.c | 9 +- drivers/iio/buffer/industrialio-buffer-dmaengine.c | 16 +- drivers/iio/cdc/ad7150.c | 8 +- drivers/iio/dac/rohm-bd79703.c | 3 + drivers/iio/frequency/admv1013.c | 9 +- drivers/iio/gyro/adis16136.c | 2 +- drivers/iio/health/max30102.c | 12 +- drivers/iio/imu/adis16400.c | 2 +- drivers/iio/imu/adis16480.c | 4 +- drivers/iio/industrialio-buffer.c | 7 +- drivers/iio/industrialio-trigger.c | 2 + drivers/iio/light/gp2ap020a00f.c | 2 + drivers/iio/light/rohm-bu27034.c | 62 +++-- drivers/iio/pressure/bmp280-core.c | 2 +- drivers/iio/pressure/rohm-bm1390.c | 2 +- drivers/iio/proximity/aw96103.c | 30 ++- drivers/iio/proximity/isl29501.c | 2 +- drivers/iio/proximity/pulsedlight-lidar-lite-v2.c | 4 +- drivers/iio/proximity/sx9324.c | 2 +- drivers/iio/proximity/vcnl3020.c | 24 +- drivers/iio/proximity/vl53l0x-i2c.c | 3 + drivers/input/keyboard/atkbd.c | 8 + drivers/input/mouse/synaptics.c | 7 +- drivers/input/serio/i8042-acpipnpio.h | 9 + drivers/input/touchscreen/s6sy761.c | 14 +- drivers/mtd/devices/block2mtd.c | 2 +- drivers/mtd/devices/mtd_intel_dg.c | 3 +- drivers/mtd/mtdcore.c | 2 +- drivers/mtd/nand/raw/cadence-nand-controller.c | 6 +- drivers/mtd/nand/raw/vf610_nfc.c | 85 ++++-- drivers/mtd/nand/spi/core.c | 48 +++- drivers/mtd/spi-nor/core.c | 2 +- drivers/net/ethernet/broadcom/bcmsysport.c | 8 +- drivers/net/ethernet/broadcom/genet/bcmgenet.c | 34 ++- drivers/net/ethernet/broadcom/genet/bcmgenet.h | 2 + drivers/net/ethernet/google/gve/gve_tx_dqo.c | 14 +- drivers/net/ethernet/marvell/mvneta.c | 2 +- drivers/net/ethernet/marvell/octeontx2/af/mcs.c | 4 +- .../ethernet/marvell/octeontx2/nic/otx2_common.c | 2 +- drivers/net/ethernet/mediatek/mtk_eth_soc.c | 38 ++- drivers/net/ethernet/mellanox/mlx5/core/en/xdp.c | 3 + drivers/net/ethernet/mellanox/mlx5/core/lag/lag.c | 10 +- .../net/ethernet/microchip/sparx5/sparx5_ethtool.c | 9 +- .../ethernet/microchip/sparx5/sparx5_mactable.c | 34 ++- .../net/ethernet/microchip/sparx5/sparx5_main.c | 123 ++++----- .../net/ethernet/microchip/sparx5/sparx5_main.h | 10 +- .../net/ethernet/microchip/sparx5/sparx5_netdev.c | 1 + drivers/net/ethernet/microchip/sparx5/sparx5_ptp.c | 21 ++ .../ethernet/microchip/sparx5/sparx5_vcap_impl.c | 2 +- drivers/net/ethernet/microchip/vcap/vcap_api.c | 2 +- drivers/net/ethernet/microsoft/mana/mana_en.c | 43 ++- drivers/net/ethernet/realtek/r8169_main.c | 6 + drivers/net/ethernet/stmicro/stmmac/stmmac.h | 4 +- drivers/net/ethernet/stmicro/stmmac/stmmac_main.c | 99 ++++--- .../net/ethernet/stmicro/stmmac/stmmac_selftests.c | 2 +- drivers/net/ethernet/stmicro/stmmac/stmmac_xdp.c | 2 +- drivers/net/pcs/pcs-rzn1-miic.c | 3 + drivers/net/pfcp.c | 3 + drivers/net/phy/aquantia/aquantia_main.c | 5 +- drivers/net/phy/qcom/at803x.c | 8 +- drivers/net/usb/qmi_wwan.c | 1 + drivers/net/wireless/ath/ath11k/mac.c | 1 + drivers/net/wireless/ath/ath9k/hif_usb.c | 21 +- drivers/net/wireless/ath/ath9k/wmi.c | 16 +- drivers/net/wireless/ath/ath9k/wmi.h | 1 + drivers/net/wireless/intel/iwlegacy/3945-mac.c | 1 + drivers/net/wireless/silabs/wfx/hif_tx.c | 4 +- drivers/net/wireless/st/cw1200/bh.c | 8 +- drivers/net/wireless/st/cw1200/txrx.c | 14 + drivers/net/wireless/ti/wlcore/main.c | 4 +- drivers/net/xen-netfront.c | 12 +- drivers/nvme/host/multipath.c | 7 +- drivers/nvme/host/pci.c | 2 + drivers/nvme/target/auth.c | 4 +- drivers/nvme/target/configfs.c | 9 +- drivers/nvme/target/core.c | 7 +- drivers/nvme/target/fabrics-cmd-auth.c | 5 +- drivers/nvme/target/nvmet.h | 4 +- drivers/nvme/target/pci-epf.c | 3 + drivers/of/base.c | 10 +- drivers/of/irq.c | 2 + drivers/of/overlay.c | 17 +- drivers/pci/pci.c | 15 +- drivers/rtc/dev.c | 2 +- drivers/rtc/rtc-ac100.c | 39 +-- drivers/rtc/rtc-mpfs.c | 6 +- drivers/rtc/rtc-spear.c | 11 +- drivers/spi/spi-cs42l43.c | 97 +++++++ drivers/staging/greybus/uart.c | 3 +- drivers/thunderbolt/ctl.c | 63 +++-- drivers/thunderbolt/quirks.c | 3 + drivers/thunderbolt/switch.c | 9 +- drivers/thunderbolt/tb.c | 27 +- drivers/thunderbolt/test.c | 21 ++ drivers/thunderbolt/tunnel.c | 26 +- drivers/thunderbolt/xdomain.c | 4 + drivers/tty/amiserial.c | 9 +- drivers/tty/n_gsm.c | 47 +--- drivers/tty/serial/8250/8250_bcm7271.c | 2 +- drivers/tty/serial/8250/8250_omap.c | 15 +- drivers/tty/serial/kgdboc.c | 9 + drivers/tty/serial/ma35d1_serial.c | 6 +- drivers/tty/serial/max3100.c | 13 +- drivers/tty/serial/qcom_geni_serial.c | 5 +- drivers/tty/serial/sc16is7xx.c | 53 +++- drivers/tty/serial/serial-tegra.c | 18 +- drivers/tty/serial/serial_core.c | 15 +- drivers/tty/serial/vt8500_serial.c | 1 + drivers/tty/tty_io.c | 54 ++-- drivers/tty/tty_port.c | 91 ++++--- drivers/tty/vcc.c | 5 +- drivers/tty/vt/selection.c | 4 +- drivers/tty/vt/vc_screen.c | 23 +- drivers/tty/vt/vt.c | 5 +- drivers/usb/cdns3/cdns3-gadget.c | 4 + drivers/usb/cdns3/cdns3-pci-wrap.c | 5 + drivers/usb/chipidea/ci_hdrc_tegra.c | 4 +- drivers/usb/class/cdc-acm.c | 41 +-- drivers/usb/class/cdc-acm.h | 1 - drivers/usb/core/hub.c | 7 +- drivers/usb/core/message.c | 8 +- drivers/usb/dwc2/hcd.c | 3 +- drivers/usb/dwc3/core.h | 19 ++ drivers/usb/dwc3/dwc3-am62.c | 1 + drivers/usb/dwc3/ep0.c | 9 + drivers/usb/dwc3/gadget.c | 108 +++++++- drivers/usb/gadget/function/f_fs.c | 15 +- drivers/usb/gadget/function/f_midi2.c | 4 +- drivers/usb/gadget/function/f_uac1_legacy.c | 6 + drivers/usb/gadget/udc/aspeed-vhub/core.c | 4 + drivers/usb/gadget/udc/aspeed-vhub/dev.c | 2 +- drivers/usb/gadget/udc/aspeed-vhub/hub.c | 5 +- drivers/usb/gadget/udc/aspeed-vhub/vhub.h | 1 + drivers/usb/gadget/udc/dummy_hcd.c | 4 + drivers/usb/host/octeon-hcd.c | 2 +- drivers/usb/host/ohci-da8xx.c | 2 + drivers/usb/host/ohci-s3c2410.c | 1 + drivers/usb/host/ohci-spear.c | 1 + drivers/usb/host/ohci-st.c | 1 + drivers/usb/serial/bus.c | 6 +- drivers/usb/serial/cp210x.c | 1 + drivers/usb/serial/generic.c | 10 +- drivers/usb/serial/option.c | 14 + drivers/usb/serial/quatech2.c | 19 +- drivers/usb/serial/ssu100.c | 18 +- drivers/usb/serial/usb-serial.c | 127 +++++++-- drivers/usb/serial/xr_serial.c | 10 +- drivers/usb/storage/sierra_ms.c | 7 + drivers/usb/typec/anx7411.c | 5 +- drivers/usb/typec/port-mapper.c | 21 +- drivers/usb/typec/tcpm/tcpm.c | 2 +- drivers/usb/typec/tipd/core.c | 11 +- drivers/usb/typec/ucsi/displayport.c | 9 +- drivers/usb/typec/ucsi/ucsi.c | 17 +- drivers/usb/typec/ucsi/ucsi_acpi.c | 33 +++ drivers/usb/typec/ucsi/ucsi_glink.c | 15 +- drivers/virt/nitro_enclaves/ne_misc_dev.c | 1 + drivers/virt/vmgenid.c | 9 +- fs/attr.c | 12 +- fs/btrfs/inode.c | 3 +- fs/ext4/inode.c | 4 - fs/f2fs/file.c | 4 - fs/netfs/buffered_read.c | 7 + fs/netfs/buffered_write.c | 9 + fs/netfs/direct_write.c | 9 + fs/netfs/internal.h | 2 + fs/netfs/misc.c | 99 +++++++ fs/smb/client/cached_dir.c | 6 +- fs/smb/client/cifsfs.c | 7 +- fs/smb/client/cifsglob.h | 10 +- fs/smb/client/dir.c | 39 ++- fs/smb/client/link.c | 15 +- fs/smb/client/smb2file.c | 19 +- fs/smb/client/smb2inode.c | 23 +- fs/smb/client/smb2misc.c | 9 +- fs/smb/client/smb2ops.c | 119 ++++++--- fs/smb/client/smb2pdu.c | 156 +++++++---- fs/smb/client/smb2proto.h | 2 +- fs/smb/client/transport.c | 138 ++++++---- fs/verity/Kconfig | 3 + fs/verity/open.c | 8 - fs/xfs/scrub/newbt.c | 8 +- include/linux/fsverity.h | 25 -- include/linux/netfilter_netdev.h | 2 +- include/linux/netfs.h | 2 + include/linux/perf_event.h | 7 +- include/linux/rtnetlink.h | 7 +- include/linux/skbuff.h | 2 +- include/linux/soc/qcom/geni-se.h | 15 +- include/linux/tty.h | 1 + include/linux/tty_driver.h | 6 + include/linux/tty_port.h | 22 +- include/linux/units.h | 3 + include/linux/unwind_deferred.h | 18 +- include/linux/usb/serial.h | 1 + include/net/bluetooth/hci_core.h | 5 +- include/net/dst_metadata.h | 7 +- include/net/mac80211.h | 4 + include/net/mana/mana.h | 8 + include/net/neighbour.h | 15 +- include/net/netfilter/nf_flow_table.h | 2 +- include/net/sch_generic.h | 9 + include/net/xdp.h | 5 + include/sound/core.h | 9 + include/uapi/linux/random.h | 2 +- init/Kconfig | 5 + io_uring/cmd_net.c | 19 +- io_uring/io_uring.c | 7 +- io_uring/zcrx.c | 9 +- kernel/audit_tree.c | 36 ++- kernel/events/core.c | 294 +++++++++------------ kernel/events/ring_buffer.c | 7 +- kernel/kprobes.c | 8 +- kernel/module/main.c | 8 +- kernel/trace/fprobe.c | 25 +- mm/damon/core.c | 27 +- mm/execmem.c | 55 ++-- mm/huge_memory.c | 4 +- mm/kasan/common.c | 13 +- mm/shmem.c | 7 +- mm/vma.c | 18 +- net/bluetooth/hci_conn.c | 18 +- net/bluetooth/hci_core.c | 54 +++- net/bluetooth/hci_debugfs.c | 2 +- net/bluetooth/hci_sync.c | 19 +- net/bluetooth/rfcomm/tty.c | 7 +- net/bluetooth/smp.c | 2 + net/core/dev.c | 78 ++++-- net/core/neighbour.c | 21 +- net/core/page_pool.c | 2 +- net/core/skbuff.c | 8 +- net/core/sock.c | 4 +- net/ipv4/tcp_input.c | 6 + net/ipv6/addrconf.c | 2 +- net/ipv6/ndisc.c | 8 +- net/ipv6/seg6_iptunnel.c | 2 +- net/mac80211/agg-rx.c | 2 +- net/mac80211/chan.c | 45 +++- net/mac80211/drop.h | 47 +++- net/mac80211/fils_aead.c | 8 + net/mac80211/ieee80211_i.h | 2 +- net/mac80211/mesh_pathtbl.c | 30 ++- net/mac80211/mlme.c | 4 +- net/mac80211/rc80211_minstrel_ht.c | 30 ++- net/mac80211/rx.c | 104 ++++---- net/mac80211/spectmgmt.c | 4 +- net/mac80211/sta_info.c | 6 +- net/mac80211/tx.c | 128 +++++++-- net/mctp/device.c | 6 +- net/mptcp/protocol.c | 2 +- net/netfilter/ipset/ip_set_bitmap_gen.h | 2 +- net/netfilter/ipvs/ip_vs_conn.c | 3 + net/netfilter/ipvs/ip_vs_lblc.c | 4 + net/netfilter/ipvs/ip_vs_lblcr.c | 3 + net/netfilter/ipvs/ip_vs_sync.c | 33 ++- net/netfilter/nf_flow_table_core.c | 7 +- net/netfilter/nf_flow_table_offload.c | 14 +- net/netfilter/nf_nat_bpf.c | 3 + net/netfilter/nf_nat_core.c | 5 +- net/netfilter/nft_flow_offload.c | 7 +- net/packet/af_packet.c | 3 + net/rds/tcp.c | 9 +- net/sched/act_ct.c | 2 +- net/sched/act_skbedit.c | 5 +- net/sched/cls_api.c | 15 +- net/sched/sch_codel.c | 2 +- net/sched/sch_fq_codel.c | 4 +- net/sctp/socket.c | 2 +- net/sunrpc/xprtrdma/svc_rdma_transport.c | 8 +- net/tipc/crypto.c | 20 +- net/wireless/nl80211.c | 11 +- net/wireless/scan.c | 22 +- rust/kernel/devres.rs | 166 +++++------- rust/kernel/irq/request.rs | 89 ++++--- sound/core/seq/seq_compat.c | 4 +- sound/hda/codecs/realtek/alc269.c | 3 +- sound/hda/controllers/tegra.c | 3 +- sound/pci/ice1712/ice1712.c | 2 +- sound/soc/codecs/max98363.c | 2 +- sound/soc/codecs/rt1017-sdca-sdw.c | 27 +- sound/soc/codecs/rt274.c | 4 +- sound/soc/codecs/rt286.c | 2 +- sound/soc/codecs/wm8903.c | 2 +- sound/soc/qcom/lpass-cpu.c | 4 +- sound/soc/sdw_utils/soc_sdw_utils.c | 20 +- sound/soc/tegra/tegra186_asrc.c | 2 +- sound/usb/caiaq/device.c | 3 + sound/usb/line6/playback.c | 7 + sound/usb/misc/ua101.c | 9 + sound/usb/quirks.c | 4 +- tools/testing/selftests/mm/hugepage-mremap.c | 5 + 385 files changed, 4349 insertions(+), 2078 deletions(-)