This is the start of the stable review cycle for the 7.2.9 release. There are 457 patches in this series, all will be posted as a response to this one. If anyone has any issues with these being applied, please let me know.

Responses should be made by Fri, 02 Oct 2026 15:23:04 +0000. Anything received after that time might be too late.

The whole patch series can be found in one patch at: https://www.kernel.org/pub/linux/kernel/v7.x/stable-review/patch-7.2.9-rc1.g... or in the git tree and branch at: git://git.kernel.org/pub/scm/linux/kernel/git/stable/linux-stable-rc.git linux-7.2.y and the diffstat can be found below.

thanks,

greg k-h

------------- Pseudo-Shortlog of commits:

Greg Kroah-Hartman gregkh@linuxfoundation.org Linux 7.2.9-rc1

Shengzhuo Wei me@cherr.cc i2c: qcom-geni: release DMA channels on probe error

Karol Wachowski karol.wachowski@linux.intel.com accel/ivpu: Drop IRQF_ONESHOT to allow IPC IRQ threading on PREEMPT_RT

Sean Christopherson seanjc@google.com KVM: x86: Add static calls for nested virtualization ops

Sean Christopherson seanjc@google.com KVM: x86: Reject nested CAP enablement if nested virtualization is disabled

Paolo Bonzini pbonzini@redhat.com KVM: move TSS constants from kvm_host.h to tss.h

Sean Christopherson seanjc@google.com KVM: x86/mmu: Move kvm_mmu_do_page_fault() from mmu_internal.h => mmu.c

Sean Christopherson seanjc@google.com KVM: x86/mmu: Move kvm_arch_async_page_ready() below kvm_tdp_page_fault()

Sean Christopherson seanjc@google.com KVM: x86: Move IRQ-related helper declarations from kvm_host.h => irq.h

Marc Zyngier maz@kernel.org KVM: arm64: nv: Delay freeing of shadow S2 structures until VM destruction

Marc Zyngier maz@kernel.org KVM: arm64: nv: Fix life cycle of the nested_mmus array

Ilya Maximets i.maximets@ovn.org net/sched: act_ct: avoid modifying shared unconfirmed ct entry

Ilya Maximets i.maximets@ovn.org net/sched: act_ct: fix helper UAF due to extensions realloc

Alex Hung alex.hung@amd.com drm/amd/display: Relax DML frame limit with UBSAN

Christian Brauner brauner@kernel.org super: make iterate_supers_type() deletion-safe

Christian Brauner brauner@kernel.org super: take lock after last reference count

Christian Brauner brauner@kernel.org super: convert s_count to refcount_t s_passive

Viken Dadhaniya viken.dadhaniya@oss.qualcomm.com i2c: qcom-geni: Fix hardcoded clock index in SE_GENI_CLK_SEL

Praveen Talari praveen.talari@oss.qualcomm.com i2c: qcom-geni: Store of_device_id data in driver private struct

Praveen Talari praveen.talari@oss.qualcomm.com i2c: qcom-geni: Move resource initialization to separate function

Praveen Talari praveen.talari@oss.qualcomm.com i2c: qcom-geni: Isolate serial engine setup

Jakub Pawlak jakub.pawlak@intel.com accel/ivpu: Use separate flag for job timeout

Karol Wachowski karol.wachowski@linux.intel.com accel/ivpu: Use threaded IRQ for IPC callback processing

Arnd Bergmann arnd@arndb.de landlock: Work around gcc-16 -Wuninitialized warning

Tangudu Tilak Tirumalesh tilak.tirumalesh.tangudu@intel.com drm/xe: Add wa_14025941587 to xe2, xe3 and xe3p platforms

Darrick J. Wong djwong@kernel.org xfs: fix cursor and pointer handling when recovering iunlink buckets

Darrick J. Wong djwong@kernel.org xfs: fix blockgc group quota scanning when usrquota isn't enforced

Darrick J. Wong djwong@kernel.org xfs: drop dquot flush lock when we can't find a buffer to flush

Darrick J. Wong djwong@kernel.org xfs: don't merge different file IO error types

Darrick J. Wong djwong@kernel.org xfs: don't let memory failures leak blocks and kill repairs

Darrick J. Wong djwong@kernel.org xfs: don't let hidden_space go negative in xfs_metafile_resv_init

Darrick J. Wong djwong@kernel.org xfs: call xfs_dquot_set_prealloc_limits if we installed default rtb limits

Darrick J. Wong djwong@kernel.org xfs: fix wild memcpy access when formatting ondisk rtrefcount btree roots

Darrick J. Wong djwong@kernel.org xfs: fix rtgroup repair estimations

Darrick J. Wong djwong@kernel.org xfs: check di_forkoff correctly in scrub

Darrick J. Wong djwong@kernel.org xfs: use the correct reservations for rtrmap/refcount recovery

Darrick J. Wong djwong@kernel.org xfs: only flag zero padding for dir3 data blocks, not dir3 block blocks

Darrick J. Wong djwong@kernel.org xfs: don't call xfs_exchange_range_finish for a dry run

Darrick J. Wong djwong@kernel.org xfs: check padding field in xfs_ioc_commit_range

Darrick J. Wong djwong@kernel.org xfs: use correct jiffies comparison function in xchk_maybe_relax

Darrick J. Wong djwong@kernel.org xfs: release orphanage dir inode if chown fails

Darrick J. Wong djwong@kernel.org xfs: fix attr fork block count checks in xrep_inode_blockcounts

Darrick J. Wong djwong@kernel.org xfs: don't assert when XFS_SCRUB_TYPE_HEALTHY scans return corruption

Adarsh Das adarshdas950@gmail.com smb: client: delete compound mids on send failure before unlock

Zihan Xi zihanx@nebusec.ai smb: client: close completed creates on compound wait errors

Zihan Xi zihanx@nebusec.ai smb: client: validate POSIX create context length

Namjae Jeon linkinjeon@kernel.org smb: client: use finish_no_open() for non-regular inodes

Zihan Xi zihanx@nebusec.ai smb: client: preserve create-context parsing errors

Zihan Xi zihanx@nebusec.ai smb: client: clean up failed cached directory opens

Zihan Xi zihanx@nebusec.ai smb: client: close handle after create-context parsing failure

Zihan Xi zihanx@nebusec.ai smb: client: fix create context out-of-bounds reads

Hui Peng benquike@gmail.com Bluetooth: RFCOMM: fix NULL dereference of dlc->session in RFCOMM_CONNINFO

Aldo Ariel Panzardo qwe.aldo@gmail.com Bluetooth: mgmt: fix race in read_unconf_index_list()

Aldo Ariel Panzardo qwe.aldo@gmail.com Bluetooth: L2CAP: validate frame length before control and FCS access

Aldo Ariel Panzardo qwe.aldo@gmail.com Bluetooth: ISO: release unused CIS holds after channel attach

Aldo Ariel Panzardo qwe.aldo@gmail.com Bluetooth: ISO: balance the parent hold in hci_bind_bis()

Aldo Ariel Panzardo qwe.aldo@gmail.com Bluetooth: hci_sock: reject out-of-range OCF values

Aldo Ariel Panzardo qwe.aldo@gmail.com Bluetooth: hci_sock: validate event length before filtering

Aldo Ariel Panzardo qwe.aldo@gmail.com Bluetooth: hci_conn: fix CIS hold ownership on reuse

Davi Chaves Azevedo davichazbh@gmail.com sched/cache: Refresh LLC capacity across CPU hotplug, to fix capacity underestimation bug

Tim Chen tim.c.chen@linux.intel.com sched/cache: Decouple sched_cache_group from mm to fix UAF

Tejun Heo tj@kernel.org sched_ext: Derive SCX_RQ_IN_WAKEUP from the core enqueue flags

Tan Chi tanchi25@mails.ucas.ac.cn RISC-V: KVM: Fix HSM hart status error propagation

Xie Bo xb@ultrarisc.com RISC-V: KVM: Propagate interrupted G-stage faults

Xie Bo xb@ultrarisc.com RISC-V: KVM: Release unused page after MMU invalidation

Myeonghun Pak mhun512@gmail.com RISC-V: KVM: Synchronize hrtimer callback during teardown

Xie Bo xb@ultrarisc.com RISC-V: KVM: Serialize IMSIC attributes with vCPU migration

Fuad Tabba fuad.tabba@linux.dev KVM: arm64: Transfer the hyp stack pages out of the host stage-2

Lorenzo Stoakes (ARM) ljs@kernel.org KVM: arm64: nv: Fix null ptr deref on nested wp/unmap, teardown race

Lorenzo Stoakes (ARM) ljs@kernel.org KVM: arm64: Fix spurious warning for benign stage 2 teardown race

Karl Mehltretter kmehltretter@gmail.com KVM: arm64: Fix AArch32 DBGBXVR<n> handling

Fuad Tabba fuad.tabba@linux.dev KVM: arm64: Don't WARN on an unknown VM ioctl in protected mode

Sean Christopherson seanjc@google.com KVM: SEV: Do cache maintenance on the source VM during intra-host migration

Sean Christopherson seanjc@google.com KVM: SEV: Free have_run_cpus during VM destruction even if VM is no longer SEV

Zeng Chi zengchi@kylinos.cn KVM: Don't treat reserved xarray entries as having memory attributes

David Ballesteros davimaba.v@proton.me KVM: Ensure memory attributes xarray nodes are accounted to the caller's memcg

Anthony Krowiak akrowiak@linux.ibm.com s390/vfio-ap: fix KVM GISC and page leak when queue removed from host config

Niklas Schnelle schnelle@linux.ibm.com s390/pci: Don't report recovery success on skipped recovery

Niklas Schnelle schnelle@linux.ibm.com s390/pci: Report SCLP status on error events when no pdev is associated

Niklas Schnelle schnelle@linux.ibm.com s390/pci: Fix missing device lock in zpci_report_status()

Niklas Schnelle schnelle@linux.ibm.com s390/pci: Fix leak of struct pci_dev reference in zpci_report_status()

Peter Oberparleiter oberpar@linux.ibm.com s390/cmf: Fix virtual vs physical address confusion

Vineeth Vijayan vneethv@linux.ibm.com s390/cio: Fix NULL pointer dereference in ccw_device_get_util_str()

Ilya Titov ilya.titov@wirenboard.com pinctrl: sunxi: keep a shadow copy of the data register output latches

Myeonghun Pak mhun512@gmail.com pinctrl: single: free the IRQ on domain creation failure

Shawn Guo shengchao.guo@oss.qualcomm.com pinctrl: qcom: nord: Split QUP1 SE2/SE3 into lane-pair functions

Conor Dooley conor.dooley@microchip.com pinctrl: mpfs-mssio: use correct regmap function to set bank voltage

Conor Dooley conor.dooley@microchip.com pinctrl: mpfs-mssio: fix width of unused bank voltage setting

Dapeng Mi dapeng1.mi@linux.intel.com perf/x86/intel: Constrain Panther Cove UOPS_DISPATCHED events to PMCs 0-3

Dapeng Mi dapeng1.mi@linux.intel.com perf/x86/intel: Remove incorrect Panther Cove PEBS data-source constraints

Dapeng Mi dapeng1.mi@linux.intel.com perf/x86/intel: Remove incorrect LionCove PEBS data-source constraints

Dapeng Mi dapeng1.mi@linux.intel.com perf/x86/intel: Fix Panther Cove PEBS data-source snoop states

Dapeng Mi dapeng1.mi@linux.intel.com perf/x86/intel: Fix DKT PEBS load/store direction for latency events, to fix sample classification

Dapeng Mi dapeng1.mi@linux.intel.com perf/x86/intel: Fix GRT PEBS load/store direction for latency events, to fix sample classification

Dapeng Mi dapeng1.mi@linux.intel.com perf/x86/intel: Fix CMT PEBS load/store direction for latency events, to fix sample classification

Puranjay Mohan puranjay@kernel.org perf/core: Run sched_task() for PMUs with only CPU-wide events

Puranjay Mohan puranjay@kernel.org perf/core: Fix NULL pmu_ctx passed to pmu->sched_task()

Zhenghui Hao zhenghui.hao@qq.com parisc: parse early parameters in setup_arch()

Helge Deller deller@gmx.de parisc: Increase kernel stack size to 32kb

Geert Uytterhoeven geert+renesas@glider.be scsi: ufs: pltfrm: Add quirk for R-Car S4 lacking lanes-per-direction

Stanley Jhu stanleyjhu@google.com scsi: ufs: core: Keep internal commands dispatchable during error handling

Yehyeong Lee yhlee@isslab.korea.ac.kr scsi: libiscsi_tcp: Check the data direction of a Data-In PDU

Myeonghun Pak mhun512@gmail.com nfc: trf7970a: power down on startup RX gain failure

Doruk Tan Ozturk doruk@0sec.ai nfc: port100: reject frames whose declared length exceeds the received data

Aamir Ahmed elb12345@hotmail.co.uk nfc: llcp: drop truncated I/RR/RNR PDUs in nfc_llcp_recv_hdlc()

Luxiao Xu rakukuip@gmail.com nfc: fix use-after-free in nfc_get_local_general_bytes

Aohan Mei henrymei@tencent.com netfilter: nf_tables: skip expired catchall elements on insert and delete

Luxiao Xu rakukuip@gmail.com netfilter: ip6t_rt: fix zero-address non-strict match out-of-bounds read

Weiming Shi bestswngs@gmail.com netfilter: ip6t_rpfilter: reject routes without inet6_dev

Wentao Liang vulab@iscas.ac.cn net: usb: lan78xx: Fix URB reference leak in lan78xx_submit_deferred_urbs()

Ming Wang wangming01@loongson.cn net: usb: cdc_mbim: add MeiG Smart SRM821 to ZLP whitelist

Zhang Yunfei zhangyunfei1@kylinos.cn net: txgbe: fix FDIR filter restore for VF rules

Abhishek Ojha abhishek.ojha@savoirfairelinux.com net: phy: micrel: Advance register data pointer in write loop

Alexander Sverdlin alexander.sverdlin@siemens.com net: phy: intel-xway: workaround 100BASE-TX Link-Up issue

Guangshuo Li lgs201920130244@gmail.com net: ena: fix MMIO read buffer leak on probe failure

Guangshuo Li lgs201920130244@gmail.com net: ena: fix PHC cleanup on probe failure

Fourie Zhang littleddfu@gmail.com net: bridge: mdb: restart port group walk after deletion

Gajdos Tamás tamas@rimpianto.com net: atl1e: fix soft lockup on out-of-range hw_next_to_clean read

Gajdos Tamás tamas@rimpianto.com net: atl1c: fix soft lockup on out-of-range tpd_cons read

Ilya Maximets i.maximets@ovn.org net: openvswitch: conntrack: fix helper UAF due to extensions realloc

Ilya Maximets i.maximets@ovn.org net: openvswitch: conntrack: remove 'add_helper' dead code

Ilya Maximets i.maximets@ovn.org net: openvswitch: conntrack: avoid modifying shared unconfirmed ct entry

Théo Lebrun theo.lebrun@bootlin.com net: macb: fix dma_alloc_coherent() leak on macb_alloc() error paths

Yuqi Xu xuyuqiabc@gmail.com net: ipconfig: bound DHCP option construction

Wentao Liang vulab@iscas.ac.cn net: hisilicon: hns_dsaf_mac: fix mdio device leak in hns_mac_register_phy()

Gajdos Tamás tamas@rimpianto.com net: atl1: fix soft lockup on out-of-range cmb_tpd_next_to_clean read

Zijie Huang milkory@outlook.com net: arp: terminate device name before lookup

Myeonghun Pak mhun512@gmail.com net: airoha: npu: cancel wdt_work after releasing the WDT IRQ

Weiming Shi bestswngs@gmail.com net/sched: reject IDR error pointers when deleting actions

Andrea Parri parri.andrea@gmail.com net/mlx5e: fix swapped IPv6 IPsec policy masks

Ralf Lici ralf@mandelbit.com net/mlx5e: advertise MACsec offload only when supported

Wentao Liang vulab@iscas.ac.cn net/mlx5: Fix rev_entry reference leak in mlx5_tc_ct_shared_counter_get()

Wei Jie LAW 98lawweijie@gmail.com HID: wacom: fix OOB read in wacom_wac_pen_serial_enforce()

Junjie Cao junjie.cao@intel.com HID: quirks: add ALWAYS_POLL quirk for SDINNOVATION gaming keyboard

Tristan Madani tristan@talencesecurity.com HID: hid-oxp: use cancel_delayed_work_sync() in remove

Chen Changcheng chenchangcheng@kylinos.cn HID: alps: fix use-after-free on input2 registration failure

Chen Changcheng chenchangcheng@kylinos.cn HID: alps: unregister DualPoint Stick input device on remove

Willem de Bruijn willemb@google.com packet: use ubuf_info completion for TX_RING packets

Angel J iamanaws@httpd.dev PCI: of_property: Omit bus properties without a subordinate bus

Liz Fong-Jones lizf@honeycomb.io PCI: Fix BAR resize for devices on a root bus

SJ Park sj@kernel.org mm/damon/core: reset invalid quota->charge_target_from

Liew Rui Yan aethernet65535@gmail.com mm/damon/core: allow esz to be set to zero

Liew Rui Yan aethernet65535@gmail.com mm/damon/core: fix unconditionally skip last region

Nathan Gao zcgao@amazon.com mm/damon/ops-common: use a page-aligned address in damon_ptep_mkold()

SJ Park sj@kernel.org mm/damon/vaddr: avoid hw-driven pte updates during damon_hugetlb_mkold()

Jaewook You jaewook376@gmail.com mm/hugetlb: preserve mremap address delta when skipping page tables

Longlong Xia xialonglong@kylinos.cn mm/hugetlb: do not dissolve gigantic pages without runtime support

Jinjiang Tu tujinjiang@huawei.com mm/rmap: fix missing barrier between anon_vma init and vma->anon_vma publish

Karl Mehltretter kmehltretter@gmail.com gpio: tps65219: Fix TPS65214 GPIO direction programming

Karl Mehltretter kmehltretter@gmail.com gpio: tps65219: Use the variant-specific direction callback

Karl Mehltretter kmehltretter@gmail.com gpio: tps65219: Fix GPIO input value reads

Peiyang He peiyang_he@smail.nju.edu.cn drm/virtio: fix NULL pointer dereference on fence allocation failure

Peiyang He peiyang_he@smail.nju.edu.cn drm/virtio: fix memory leak of fence event on execbuffer failure

Matthew Brost matthew.brost@intel.com drm/xe: Keep walking on SVM eviction failure

Szymon Acedański accek@invisiblethingslab.com drm/xe: Limit sg segment size to PAGE_SIZE on Xen PV

Tangudu Tilak Tirumalesh tilak.tirumalesh.tangudu@intel.com drm/xe: harden adjust_idledly() against divide-by-zero and overflow

Matthew Auld matthew.auld@intel.com drm/xe/vm: nuke PTs only after unlinking contested VMAs

Peiyang He peiyang_he@smail.nju.edu.cn drm/nouveau: don't bump pin count on failed re-pin in nouveau_bo_pin_locked()

Jonghyuk Kim(MalHyuk) malhyuk97@gmail.com drm/nouveau: RCU-free the scheduler-containing nouveau_sched

Wentao Liang vulab@iscas.ac.cn drm/nouveau: Fix runtime PM leak in nouveau_connector_detect()

Wentao Liang vulab@iscas.ac.cn drm/nouveau: Fix gem reference leak in validate_init()

Peiyang He peiyang_he@smail.nju.edu.cn drm/nouveau: fix double-free in nvif_vmm_dtor

Wentao Liang vulab@iscas.ac.cn drm/nouveau: Fix bridge reference leak in nv1a_ram_new()

Guangshuo Li lgs201920130244@gmail.com drm/nouveau: fix autosuspend cleanup during teardown

Peiyang He peiyang_he@smail.nju.edu.cn drm/nouveau/uvmm: fix UAF in nouveau_uvmm_sm when BO is in TTM_PL_SYSTEM

Junrui Luo moonafterrain@outlook.com drm/nouveau/dmem: pin VRAM for the whole registered range

Prike Liang Prike.Liang@amd.com drm/amdgpu: move userq fence wait out of signalling section

Wentao Liang vulab@iscas.ac.cn drm/amdgpu: Fix vmid_wait fence leak in amdgpu_ring_init()

Wentao Liang vulab@iscas.ac.cn drm/amdgpu: Fix runtime PM leak in amdgpu_debugfs_test_ib_show()

Wentao Liang vulab@iscas.ac.cn drm/amdgpu: Fix last_update fence leak in amdgpu_vm_init()

Wentao Liang vulab@iscas.ac.cn drm/amdgpu: Fix acpi device leak in amdgpu_acpi_enumerate_xcc()

Sunil Khatri sunil.khatri@amd.com drm/amdgpu/vcn5.0.1: fix video_timeout unit mismatch in jpeg reset wait

Sunil Khatri sunil.khatri@amd.com drm/amdgpu/vcn4.0.3: fix video_timeout unit mismatch in jpeg reset wait

Sunil Khatri sunil.khatri@amd.com drm/amdgpu/userq: fix double jiffies conversion in hang detect timeout

Ivan Lipski ivan.lipski@amd.com drm/amd/display: Bump frame warning limit for clang builds of dml

Wentao Liang vulab@iscas.ac.cn drm/amd/display: Fix dc stream excess put in dm_update_crtc_state()

Asad Kamal asad.kamal@amd.com drm/amdkfd: fix use-after-free and multi-container gap in kfd_dev_mapping

Imre Deak imre.deak@intel.com drm/i915/dp_mst: Fix configuring TUs for a disconnected stream

Imre Deak imre.deak@intel.com drm/i915/dp_mst: Fix configuring FEC for a disconnected stream

Ankit Nautiyal ankit.k.nautiyal@intel.com drm/i915/quirks: Limit eDP rate to HBR2 on HP Pavilion Plus 14-ew1

Christian König ckoenig.leichtzumerken@gmail.com drm/i915: fix incorrect RCU teardown order

Brajesh Gupta brajesh.gupta@imgtec.com drm/imagination: Fix page count for page table for map() interface

Brajesh Gupta brajesh.gupta@imgtec.com drm/imagination: Propagate map failures correctly from pvr_mmu_map_sgl()

shechenglong shechenglong@xfusion.com drm/client: fix restore of partially initialized client

Dongliang Qin cccccccccccc777777@gmail.com rds: ib: Clear the sg list when mapping an MR fails

Hui Peng benquike@gmail.com mctp: route: iterate socket tag list in mctp_lookup_prealloc_tag()

Zixuan Chai petalzu987@gmail.com llc: reserve device headroom for allocated frames

Ridham Khurana khurana.ridham222@gmail.com gpio: zynq: fix runtime PM leak on request error path

Bartosz Golaszewski bartosz.golaszewski@oss.qualcomm.com gpio: cdev: fix kernel stack leak to user-space in error path

Wentao Liang vulab@iscas.ac.cn gpio: arizona: Fix runtime PM leak in arizona_gpio_direction_out()

Andrea Parri parri.andrea@gmail.com kprobes: Fix permanent hang when flushing the kprobe optimizer

Hui Peng benquike@gmail.com ipv6: sr: enforce exact attribute length for SEG6_ATTR_DST

Norbert Szetei norbert@doyensec.com ipv6: do not let ipv6_find_hdr() return an offset past the packet end

Fan Wu wufan@kernel.org ipe: protect the dm-verity root hash with RCU

Fan Wu wufan@kernel.org ipe: fix use-after-free when auditing a newly loaded policy

Wentao Liang vulab@iscas.ac.cn fsl/fman: Fix clk reference leak in read_dts_node()

Josef Bacik josef@toxicpanda.com writeback: report a Tasks-RCU quiescent state per cgwb drain pass

Pavankumar Kondeti pavan.kondeti@oss.qualcomm.com workqueue: Fix NULL current_pwq deref in flush dependency check

Patrick Lu (Anthropic) perf.patrick.lu@gmail.com writeback: bound cleanup_offline_cgwb() rescans by rotating scanned inodes

Hao Ge hao.ge@linux.dev netfs: Fix missing alloc tagging of direct mempool allocations

Christian Brauner brauner@kernel.org fs/ntfs3: use d_instantiate_new() in ntfs_create_inode() and murder syzbot's "WARNING in do_new_mount" saga

David Carlier devnexen@gmail.com fprobe: Terminate the fgraph_data list when the reservation is not filled

Hui Peng benquike@gmail.com fou: reject omitted FOU_ATTR_IPPROTO on FOU_ENCAP_DIRECT

Guopeng Zhang zhangguopeng@kylinos.cn cgroup/pids: Restore pids.events notifications in local mode

Hui Peng benquike@gmail.com cgroup/cpuset: Return PERR_NOCPUS in remote_partition_enable() on subpartitions_cpus conflict

Holger Dengler dengler@linux.ibm.com crypto: s390/hmac - Generate intermediate CV for API partial block handling

Andrea Parri parri.andrea@gmail.com bpf: fs/xattr: don't assume the inode is locked in path_unlink/path_rmdir

Myeonghun Pak mhun512@gmail.com bna: prevent IOC timer rearm during teardown

Matthias Goergens matthias.goergens@gmail.com ata: libata-scsi: bound the ATA passthru sense descriptor writes

David Carlier devnexen@gmail.com arm64: errata: match the target implementation CPU's own MIDR

Fuad Tabba fuad.tabba@linux.dev arm64/boot: Disable trapping of PMZR_EL0 writes to EL2

Dairui Zhang zhangdairui@gmail.com af_packet: fix integer overflow in prb_calc_retire_blk_tmo()

Aohan Mei henrymei@tencent.com sctp: discard the rest of the packet on a stale-cookie error

Willem de Bruijn willemb@google.com tcp: prevent collapsing skbs across boundary in rtx queue

Eric Dumazet edumazet@google.com tipc: reject invalid and unexpected GRP_ACK_MSG to prevent bc_ackers underflow

Willem de Bruijn willemb@google.com virtio_net: copy zerocopy frags in start_xmit without NAPI

Aldo Ariel Panzardo qwe.aldo@gmail.com vsock: ignore empty child namespace mode writes

Melody Wang huibo.wang@amd.com x86/sev: Make vTPM SVSM calls preemption-safe

Mario Limonciello mario.limonciello@amd.com x86/PCI: Disable enhanced atomics on AMD NBIO 7.7 and 7.11

Masami Hiramatsu (Google) mhiramat@kernel.org x86/mce: Fix hardware debug register corruption on task migration

Xiang Mei xmei5@asu.edu vlan: require the MAC header to be present in __vlan_insert_inner_tag()

Matthew Brost matthew.brost@intel.com drm/pagemap: dma-unmap pages before handling migration errors

Mark Amirkan markdamirkan@gmail.com mptcp: return sk_wait_data() errors from recvmsg()

Zhan Xusheng zhanxusheng1024@gmail.com sched/core: Account PSI IRQ time to the execution context, not the scheduling context

Puranjay Mohan puranjay@kernel.org perf/core: Fill branch entries with a single assignment

Namhyung Kim namhyung@kernel.org perf/core: Fix a refcount leak in attach_perf_ctx_data()

Dapeng Mi dapeng1.mi@linux.intel.com perf/x86/intel: Delete dead NVL PEBS data-source initcall

Sean Christopherson seanjc@google.com perf/x86/intel: Make @data a mandatory param for intel_guest_get_msrs()

Sean Christopherson seanjc@google.com perf/x86/intel: Don't pointlessly context switch DS_AREA (and PEBS config) if PEBS is unused

Sean Christopherson seanjc@google.com perf/x86/intel: Don't write PEBS_ENABLED on host<=>guest xfers if CPU has PEBS isolation, to fix stuck PEBS_ENABLED

Sean Christopherson seanjc@google.com perf/x86/intel: Ensure KVM guest PEBS path doesn't set unwanted PERF_GLOBAL_CTRL bits

Hui Peng benquike@gmail.com autofs: fix sbi->pipe file reference leak in autofs_kill_sb()

Amir Goldstein amir73il@gmail.com ovl: fix UAF in ovl_do_mkdir() debug print

Eric Dumazet edumazet@google.com vlan: ensure sufficient headroom in vlan_dev_hard_header()

Eric Dumazet edumazet@google.com net/sched: sch_teql: fix shadowed err in __teql_resolve()

Eric Dumazet edumazet@google.com bridge: check llc_mac_hdr_init() return value in br_send_bpdu()

Eric Dumazet edumazet@google.com llc: fix skb UAF and leaks on llc_mac_hdr_init() failure

Eric Dumazet edumazet@google.com gve: DQO: reject TSO packets with an out of range MSS

Eddie Phillips eddiephillips@google.com gve: fix TX drop when GSO MSS is too small for hw

Eric Dumazet edumazet@google.com gve: DQO: fix header length used by gve_can_send_tso() for UDP GSO

Eric Dumazet edumazet@google.com net: flush skb_defer_nodes in dev_cpu_dead()

Coia Prant coiaprant@gmail.com net: ethernet: stmmac: dwmac-rk: fix bulk clock leak when the PHY clock fails

Ginger Li ginger.jzllee@gmail.com tipc: Fix a data race on mon->peer_cnt in mon_timeout()

Sidraya Jayagond sidraya@linux.ibm.com net/smc: fix UAF on lgr list traversal in smcr_port_err()

Allison Henderson achender@kernel.org net/rds: size a connection's path set by the transport it ends up with

Sang-Hoon Choi csh0052@gmail.com nfp: hold IPsec RX state under the XArray lock

Jiawen Wu jiawenwu@trustnetic.com net: libwx: fix races in Tx timestamp handling

Jiawen Wu jiawenwu@trustnetic.com net: wangxun: implement soft quiesce for PCIe error recovery

Aleksei Sviridkin f@lex.la net: phylink: record the PHY only once bringup cannot fail

Yilin Zhang yilinzhang@moonshot.ai tcp: fix use-after-free of retransmit_skb_hint in tcp_send_synack()

Aleksei Sviridkin f@lex.la net: dsa: mt7530: leave the MDIO IRQ mappings to regmap-irq

Aleksei Sviridkin f@lex.la net: dsa: mt7530: fix NULL dereference on unbind of MT7531 and MT7621

Donggeun Yoo donggeunyoo.kernel@gmail.com bpf: Zero-fill other CPUs when BPF_F_CPU creates a per-cpu hash element

Christian Lamparter chunkeey@gmail.com net: emac: move setting of netops to fix crash

Fang Xieyan fangxy@xiaopeng.com net/sched: act_ife: validate metadata length before decoding

Haseeb Malik haseebulhaq55@gmail.com macsec: initialize SecY before registering the netdevice

David Dai zdai@linux.ibm.com bonding: crypto offload enabled, non-offload slave failover, rekey failed

Pengpeng Hou hppiscas@163.com drm/imagination: clamp freelist reconstruction requests

Norbert Szetei norbert@doyensec.com net: xps: reject an out of range traffic class

Sanghyun Park sanghyun.park.cnu@gmail.com vxlan: use one headroom snapshot for neighbour replies

Xuanqiang Luo luoxuanqiang@kylinos.cn ip_gre: Reject enabling collect metadata through changelink

Florian Fainelli florian.fainelli@broadcom.com net: bcmgenet: mask DMA_TIMEOUT_MASK when reading DMA_RING0_TIMEOUT

Florian Fainelli florian.fainelli@broadcom.com net: bcmgenet: validate Ethernet address in bcmgenet_set_mac_addr

Florian Fainelli florian.fainelli@broadcom.com net: bcmgenet: do not skip WoL power up on GENET V1

Florian Fainelli florian.fainelli@broadcom.com net: bcmgenet: initialize u64 stats seq counter for all queues

Florian Fainelli florian.fainelli@broadcom.com net: bcmgenet: fix 64-bit RTNL stats reading in ethtool on 32-bit systems

Yuya Kusakabe yuya.kusakabe@gmail.com net: ipv6: keep room for the mac header in dst_dev_overhead()

Lorenzo Bianconi lorenzo.bianconi@oss.qualcomm.com net: stmmac: clear stale buf->page after recycling on skb build failure

Ivan Delalande colona@arista.com tg3: use random MAC address when tg3_get_device_address fails

Johan Almbladh johan.almbladh@anyfinetworks.com bpf: Fix BSWAP 32 and 16 on MIPS64

Johan Almbladh johan.almbladh@anyfinetworks.com bpf: Fix immediate JMP JEQ/JNE on MIPS32

Jonas Jelonek jonas@jonasjelonek.de net: mdio: realtek-rtl9300: fix RTL931x C22 extended page selection

Nicolo Giuliani nicolo.giuliani6@studio.unibo.it net: dsa: mv88e6xxx: 88E6191X and 88E6193X have no PTP

Ido Schimmel idosch@nvidia.com vrf: Stop corrupting skb->csum when capturing CHECKSUM_COMPLETE packets

Shihuang Liu shlomojune6@gmail.com net: skbuff: fix pull-bound underflow in skb_checksum_setup_ipv6()

Jakub Kicinski kuba@kernel.org veth: manage XDP program pointers during channel resize

Nicolai Buchwitz nb@tipi-net.de net: bcmgenet: stop Tx NAPI before disabling the queues

Victor Nogueira victor@mojatatu.com net/sched: act_gate: budget the per-entry list in get_fill_size

Deepanshu Kartikey kartikey406@gmail.com nfc: pn533: fix OOB read in pn533_acr122_is_rx_frame_valid()

Ömer Mete Kaya omermetekaya0@gmail.com nfc: llcp: fix slab-out-of-bounds reads when logging service names

Ömer Mete Kaya omermetekaya0@gmail.com nfc: llcp: fix WKS SAP hijacking via prefix match in nfc_llcp_wks_sap()

Ömer Mete Kaya omermetekaya0@gmail.com nfc: llcp: fix -ENOMEM on connect with zero-length service name

Pengpeng Hou pengpeng@iscas.ac.cn nfc: st21nfca: validate ISO15693 inventory length

Cong Nguyen congnt264@gmail.com nfc: llcp: fix sdreq TLV list leak on parse/alloc/send failure

Chris Gellermann christian.gellermann@codasip.com nfc: virtual_ncidev: Add missing ioctl compat handler

Chris Gellermann christian.gellermann@codasip.com selftests/nci: Fix out-of-bounds store on thread join

Chaithanya Lagisetty nagachaithanya9911@gmail.com selftests: nci: Fix uninitialized family ID on missing attribute

Lee Jones lee@kernel.org nfc: llcp: Fix race condition in accept_queue lifecycle

Lei Zhu zhulei@kylinos.cn selftests: nci: Correct pthread_create return value check

Aldo Ariel Panzardo qwe.aldo@gmail.com nfc: llcp: Fix list corruption / refcount desync in nfc_llcp_recv_dm()

Pengpeng Hou pengpeng@iscas.ac.cn nfc: st21nfca: validate received frame size

Pengpeng Hou pengpeng@iscas.ac.cn nfc: nfcmrvl: validate helper command length before pull

Weiming Shi bestswngs@gmail.com bpf: Reject dev-bound-only programs on other devices

Bernard Ladenthin bernard.ladenthin@gmail.com net/sched: fix potential stack infoleak in em_text_dump()

Björn Töpel bjorn@kernel.org eth: fbnic: Avoid rounding zero ring sizes

Maxime Chevallier maxime.chevallier@bootlin.com net: stmmac: selftests: Account for alignment shift on dwmac1000 for Jumbo test

Maxime Chevallier maxime.chevallier@bootlin.com net: stmmac: size the RX buffers from the frame length, not the MTU

Maxime Chevallier maxime.chevallier@bootlin.com net: stmmac: dwmac4: Use the correct bufzise when the len is exactly 8K

Maxime Chevallier maxime.chevallier@bootlin.com net: stmmac: selftests: Capture all packets for vlan checks

Maxime Chevallier maxime.chevallier@bootlin.com net: stmmac: selftests: Check the dev->features for S-TAG offload testing

Maxime Chevallier maxime.chevallier@bootlin.com net: stmmac: selftests: Validate EEE based on the actual LPI timer value

Maxime Chevallier maxime.chevallier@bootlin.com net: stmmac: selftests: Support running selftests on DSA conduits

Xin Long lucien.xin@gmail.com sctp: hold asoc or transport before mod_timer() in timer handlers

Bernardo Soares bsoares.it@gmail.com net/mlx5: Bridge, don't fail unlink of untracked/unsupported peer ports

Bernardo Soares bsoares.it@gmail.com net/mlx5: Bridge, don't fail switchdev events of sibling eswitch ports

Takashi Sakamoto o-takashi@sakamocchi.jp firewire: cdev: fix back-transition for iso_resource_auto client resource

Zhao Gongyi zhaogongyi@BYTEDANCE.COM bpf, sockmap: Reject max_entries > INT_MAX in sock_map_alloc

Emil Tsalapatis emil@etsalapatis.com bpf: Reject pkt arguments in mutating subprogs

Emil Tsalapatis emil@etsalapatis.com bpf: Fix bpf_sock context code generation

Emil Tsalapatis emil@etsalapatis.com bpf: Fix bounds check for skb-backed dynptrs

Manaf Meethalavalappu Pallikunhi manaf.pallikunhi@oss.qualcomm.com thermal: gov_step_wise: Fix stale mitigation vote with non-zero lower bounds

Florian Schmaus flo@geekplace.eu PM: hibernate: Freeze kernel threads after image preallocation

Coia Prant coiaprant@gmail.com net: pcs: xpcs: fix clock reference leak on xpcs_init_clks failure

Jakub Kicinski kuba@kernel.org genetlink: report the real command id for dump-only ops in policy dumps

bui duc phuc phucduc.bui@gmail.com net: ethernet: ti: netcp: fix pm_runtime usage counter leak on error

Muhammad Bilal meatuni001@gmail.com net: spacemit: clear TX descriptor on fragment mapping failure

Mikhail Zaslonko zaslonko@linux.ibm.com s390/debug: Fix NULL pointer dereference in debug_info_copy()

Mikhail Zaslonko zaslonko@linux.ibm.com s390/debug: Do not register views for failed static debug areas

Nemesa Garg nemesa.garg@intel.com drm/i915/psr: Clear stale sel fetch enable bits on sel fetch disable

Myeonghun Pak mhun512@gmail.com tg3: clean up PHYLIB resources on probe failure

Shardul Bankar shardul.b@mpiricsoftware.com udp: remove a disconnected socket from the 4-tuple hash table

Shardul Bankar shardul.b@mpiricsoftware.com udp: relocate a connected socket in the 4-tuple hash table on re-connect

Kuniyuki Iwashima kuniyu@google.com ipv6: Fix dst leak for uncached routes.

Pengpeng Hou hppiscas@163.com net: usb: sr9700: include receive overhead in the length check

Ivan Vecera ivecera@redhat.com dpll: use exact lookup for reference sync pin id

Nicolai Buchwitz nb@tipi-net.de net: don't require the hwtstamp NDOs when a PHY provides timestamping

Kuniyuki Iwashima kuniyu@google.com ipv6: Prevent rt6_insert_exception() for dying fib6_info.

Ratheesh Kannoth rkannoth@marvell.com octeontx2-af: Fix memory scaling limitation in SR-IOV mode

Xu Yunxiang xyx2021@mail.ustc.edu.cn bpf: Reject non-negative offsets in stack_slot_obj_get_spi()

Hui Peng benquike@gmail.com Bluetooth: RFCOMM: Reject short EA=0 frames in rfcomm_recv_frame()

Ravindra ravindra@intel.com Bluetooth: btintel_pcie: validate device-supplied DMA indices

Hui Peng benquike@gmail.com Bluetooth: bnep: fix out-of-bounds reads on short RX/TX frames and control fallthrough

Sk Anirban sk.anirban@intel.com drm/xe/gt_throttle: Report power brake as a throttle reason on CRI

Ralf Lici ralf@mandelbit.com ovpn: reject invalid peer VPN addresses

Ralf Lici ralf@mandelbit.com ovpn: reject multipeer peers without VPN addresses

Ralf Lici ralf@mandelbit.com ovpn: reject duplicate peer VPN addresses

Ralf Lici ralf@mandelbit.com ovpn: always unhash old VPN addresses before rehashing

Ralf Lici ralf@mandelbit.com ovpn: replace bind when clearing stale local source

Ralf Lici ralf@mandelbit.com ovpn: replace bind when learning local endpoint

Ralf Lici ralf@mandelbit.com ovpn: validate peer state before caching UDP dst

Ralf Lici ralf@mandelbit.com ovpn: track UDP socket route key for peer dst cache

Ralf Lici ralf@mandelbit.com ovpn: skip UDP source validation for unspecified addresses

Ralf Lici ralf@mandelbit.com ovpn: preserve IPv6 scope id for netlink peer endpoints

Li Youhong liyouhong@kylinos.cn drm/bridge: samsung-dsim: fix TE GPIO lifetime for host attach

Prathamesh Shete pshete@nvidia.com pinctrl: tegra238: Fix register bank for AON pin groups

Benjamin Leggett benjamin@edera.io drm/virtio: sync shmem backing on guest-bound transfers

Dmitry Osipenko dmitry.osipenko@collabora.com Revert "drm/virtio: Allow importing prime buffers when 3D is enabled"

Junrui Luo moonafterrain@outlook.com drm/virtio: release the GEM object on virtio_gpu_vram_create() errors

Junrui Luo moonafterrain@outlook.com drm/virtio: fix object leaks in virtio_gpu_resource_create_blob_ioctl()

Junrui Luo moonafterrain@outlook.com drm/virtio: fix object leak in virtio_gpu_resource_create_ioctl()

Junrui Luo moonafterrain@outlook.com drm/virtio: fix object leak when drm_gem_handle_create() fails

Jamal Hadi Salim jhs@mojatatu.com net/sched: sch_hfsc: bound the classify inner-filter walk with a drift budget

Yuqi Xu xuyuqiabc@gmail.com bpf: Check params size before reading reserved fields

Aamir Ahmed elb12345@hotmail.co.uk net: usb: catc: bound the RX packet length in catc_rx_done()

Kumar Kartikeya Dwivedi memxor@gmail.com bpf: Bound ownership depth through local kptrs and graph roots

Quentin Armitage quentin@armitage.org.uk net: allow IFLA_INET_CONF messages when NLA_F_NESTED unset

Yiqi Sun sunyiqixm@gmail.com sctp: avoid livelock while updating retransmit path

Alexander Duyck alexanderduyck@fb.com eth: fbnic: Handle FW mailbox completions flagged with an error

Alexander Duyck alexanderduyck@fb.com eth: fbnic: Set AW_FLUSH_MODE alongside AW_FLUSH when flushing the mailbox

Alexander Duyck alexanderduyck@fb.com eth: fbnic: reset num_napi when the napi vectors are freed

Alexander Duyck alexanderduyck@fb.com eth: fbnic: use the Rx queue napi pointer to find the napi vector

Björn Töpel bjorn@kernel.org eth: fbnic: Handle maximum standalone channels

Alexander Duyck alexanderduyck@fb.com net: ethtool: keep rtnl_lock for the ioctl self test

Kuniyuki Iwashima kuniyu@google.com ip6_gre: Call ip6erspan_tunnel_unlink_md() in ip6erspan_changelink().

Lorenzo Bianconi lorenzo.bianconi@oss.qualcomm.com net: ethernet: mtk_eth_soc: unregister net_devices in case of probe failure

Jérémy Jean Jeremy.Jean@oss.cyber.gouv.fr net: gue: reject invalid REMCSUM offsets

Nguyen Ngoc Thang ngocthang2710.1999@gmail.com net/sched: act_ct: don't WARN on benign flow_offload_alloc() failure

Giuseppe Ranieri giuseppe@ranieri.dev drm/nouveau/disp: don't reject HDMI config on cards without SCDC

Francesco Magazzu postadelmaga@gmail.com drm/nouveau/clk: don't clobber reclock status when restoring volt/fan

Dan Carpenter error27@gmail.com drm/nouveau/clk: fix list cursor use after loop in nvkm_clk_ustate_update

hpp.iscas hppiscas@163.com pinctrl: qcom: ipq5210: Publish the OF module alias

Joseph Qi joseph.qi@linux.alibaba.com ocfs2: make ocfs2_calc_xattr_init() return void

Zeng Heng zengheng4@huawei.com arm64: io: Reject non-user protection in ioremap_prot()

Naman Gulati namangulati@google.com netfilter: ctnetlink: fix suspicious RCU usage in expect_iter_name

Julian Anastasov ja@ssi.bg ipvs: revalidate ihl before icmp_send

Karl Mehltretter kmehltretter@gmail.com netfilter: nft_synproxy: use the family-aware checksum helper

Florian Westphal fw@strlen.de netfilter: nfnetlink_queue: hold nfnl mutex in event notifier

Jérémy Jean Jeremy.Jean@oss.cyber.gouv.fr netfilter: flowtable: publish HW_DEAD after worker is done

Frank Wunderlich frank-w@public-files.de gpiolib: use of_node_name if line-name is missing

Linkui Xiao xiaolinkui@kylinos.cn ipv4: fib: fix data-race and stale genid check around nh->nh_saddr

Kumar Kartikeya Dwivedi memxor@gmail.com libbpf: Reject truncated ldimm64 CO-RE relocations

Kumar Kartikeya Dwivedi memxor@gmail.com bpf: Restrict CO-RE poisoning to relocatable instructions

Kumar Kartikeya Dwivedi memxor@gmail.com bpf: Preserve packet pointer class displacement in regsafe()

Kumar Kartikeya Dwivedi memxor@gmail.com bpf: Make post-verification instruction rewrites killable

Shay Drory shayd@nvidia.com net/mlx5: LAG, reload IB reps of LAG master before the rest

Shay Drory shayd@nvidia.com net/mlx5: SD, unload reps on shared FDB create error path

Shay Drory shayd@nvidia.com net/mlx5: devcom, Base component size on linked devices

Heyang Tan thy15333007817@163.com octeontx2-af: use seq_file for rsrc_alloc debugfs

Kyle Hendry khendry@reliablecontrols.com net: pcs: rzn1-miic: Fix config array initialization

Jamal Hadi Salim jhs@mojatatu.com net/sched: cls_u32: fix manual hash table handle IDR aliasing

Björn Töpel bjorn@kernel.org eth: fbnic: Fix payload page pool error cleanup

Weiming Shi bestswngs@gmail.com bpf: Skip unsettled links in link iterator

Zhiling Zou zhilinz@nebusec.ai xsk: Use a 32-bit compare in xsk_map_gen_lookup

Julian Sun sunjunchao@bytedance.com fs: avoid repeated scans in evict_inodes()

David Howells dhowells@redhat.com netfs, afs: Fix symlink reading

David Howells dhowells@redhat.com netfs: Fix netfs_read_gaps() to use separate sink folios

Vineeth Vijayan vneethv@linux.ibm.com s390/cio: Guard PMCW field accesses with dnv check

Vineeth Vijayan vneethv@linux.ibm.com s390/cio: Check pmcw.dnv before pmcw.ena in I/O entry points

Vineeth Vijayan vneethv@linux.ibm.com s390/cio: Fix cio_update_schib() to not cache invalid schib

Karl Mehltretter kmehltretter@gmail.com s390/pci/docs: Fix sriov_numvfs attribute name

Bart Van Assche bvanassche@acm.org scsi: megaraid_sas: Protect megasas_get_ctrl_info() in megasas_resume()

Eva Kurchatova eva.kurchatova@virtuozzo.com selftests: cgroup: give the O_TMPFILE open in get_temp_fd() a mode

Lee Jones lee@kernel.org Bluetooth: mgmt: Dequeue pending mesh_send_sync entries on cancel

Zijun Hu zijun.hu@oss.qualcomm.com Bluetooth: btnxpuart: Fix skb leak in nxp_process_fw_dump()

Christiano Amora christiano.amora@gmail.com Bluetooth: SMP: reject Security Request over BR/EDR

Andre Przywara andre.przywara@arm.com pinctrl: sunxi: A523: fix voltage withstand encoding

ZHOU Jiaxiang me@fxti.xyz scsi: sd_zbc: Reject disks with too many zones

ZHOU Jiaxiang me@fxti.xyz scsi: block: Fix zones_cond out-of-bounds write on zone report

Ran Hongyun ranhongyun1@huawei.com squashfs: Add dictionary size range check to prevent shift-out-of-bounds

Mark Brown broonie@kernel.org KVM: arm64: Fix FGT mapping for HFGITR_EL2.nGCSEPP

Sebastian Ott sebott@redhat.com KVM: selftests: fix steal_time for arm64 with host page size > 4K

Fuad Tabba fuad.tabba@linux.dev KVM: arm64: Match hyp text by physical address in fix_host_ownership()

Karl Mehltretter kmehltretter@gmail.com KVM: arm64: Return -EINVAL for an empty SMCCC filter range at base 0

Fuad Tabba fuad.tabba@linux.dev KVM: arm64: Derive GUEST_HAS_SVE from the SVE feature bit at EL2

Fuad Tabba fuad.tabba@linux.dev KVM: arm64: Do not clear VM-wide SVE feature on vCPU init failure

Fuad Tabba fuad.tabba@linux.dev KVM: arm64: Validate the SVE vector length in pkvm_vcpu_init_sve()

Fuad Tabba fuad.tabba@linux.dev KVM: arm64: vgic-its: Skip unreachable devices instead of failing the save

Fuad Tabba fuad.tabba@linux.dev KVM: arm64: vgic-its: Free the caches when GITS_BASER changes

SeungJu Cheon suunj1331@gmail.com RISC-V: KVM: Fix perf-backed counter accounting across stop and read

SeungJu Cheon suunj1331@gmail.com RISC-V: KVM: Report snapshot write failure to the guest

SeungJu Cheon suunj1331@gmail.com RISC-V: KVM: Preserve firmware counter value across stop/start

Zongmin Zhou zhouzongmin@kylinos.cn KVM: riscv: Fix NACL hfence entry update order

Yicong Yang yang.yicong@picoheart.com RISC-V: KVM: Fix the conversion between vsip and hvip

Benjamin Tissoires bentiss@kernel.org HID: bpf: fix __hid_bpf_hw_check_params report length

Slawomir Stepien sst@poczta.fm HID: amd_sfh: Validate PCI BAR size before mapping

Sarah Emery sarah.emery@canonical.com pinctrl: generic: serialise pinctrl_generic_dt_node_to_map()

Sean Anderson sanderson@brivo.com pinctrl: meson: Fix typo in s4 group name

Donggeun Yoo donggeunyoo.kernel@gmail.com bpf, arm64: set up the frame pointer for the exception callback

Masoud Aghasi maghasi@disroot.org bpf: Fix u32 overflow issue in map batch operations

Geliang Tang geliang@kernel.org bpf, sockmap: Fix self-redirect copied_seq double-counting

Pu Lehui pulehui@huawei.com bpf: Fix UAF due to concurrent consumption of ttrace lists in alloc_bulk

Jiayuan Chen jiayuan.chen@linux.dev bpf: Fix out-of-bounds read of rtt_min in sock_ops

Jose Fernandez (Anthropic) jose.fernandez@linux.dev bpf: Avoid soft lockup in __htab_map_lookup_and_delete_batch()

Siddharth Chintamaneni sidchintamaneni@gmail.com bpf: Allow terminal gotox instructions

Jim Mattson jmattson@google.com KVM: x86/pmu: Move Intel PMU global MSRs to intel_is_valid_msr()

Oscar Priego Verdugo oscar.priegov@gmail.com HID: elecom: fix bus type for M-XGL20DLBK

René Onier f3nr1l@me.com HID: winwing: fix use-after-free in force feedback teardown

Lovekesh Solanki lovekeshsolanki00@gmail.com HID: multitouch: Add report ID mismatch quirk for ASUS ROG Z13 Folio

Jiayuan Chen jiayuan.chen@linux.dev tcp: Skip cond_resched() in inet_csk_listen_stop() under BPF context

Jiayuan Chen jiayuan.chen@linux.dev bpf: Fix out-of-bounds read of sk_protocol in bpf_sock_destroy()

Jiayuan Chen jiayuan.chen@linux.dev bpf: Fix divide-by-zero in btf_struct_walk()

Sven Schnelle svens@linux.ibm.com selftests/ftrace: Fix unique symbol check in kprobe_non_uniq_symbol.tc

Weiming Shi bestswngs@gmail.com bpf: Disallow bpf_skb_pull_data() for LWT_SEG6LOCAL

Daniel Borkmann daniel@iogearbox.net bpf: Fix bpf_skb_change_tail wrt csum partial skbs

Steffen Eiden seiden@linux.ibm.com s390/uv: Prevent potential out-of-bounds read

Steffen Eiden seiden@linux.ibm.com s390/uv: Fix loop condition in uv_find_secrets

Claudio Imbrenda imbrenda@linux.ibm.com KVM: s390: Fix race in _destroy_pages_crste()

Claudio Imbrenda imbrenda@linux.ibm.com KVM: s390: Fix potential races in dat skey functions

Claudio Imbrenda imbrenda@linux.ibm.com KVM: s390: Properly handle NULL pointer in dat_cond_set_storage_key()

Claudio Imbrenda imbrenda@linux.ibm.com KVM: s390: Add missing srcu in kvm_s390_set_irq_state()

Claudio Imbrenda imbrenda@linux.ibm.com KVM: s390: Fix IRQ injection with SIGP Stop and Store Status

Claudio Imbrenda imbrenda@linux.ibm.com KVM: s390: Fix _gaccess_shadow_fault()

Claudio Imbrenda imbrenda@linux.ibm.com KVM: s390: Fix dirty marking in adapter_indicators_set*()

Mostafa Saleh smostafa@google.com remoteproc: qcom_q6v5_adsp: Fix iommu_unmap() usage

Dominik Kaszewski dominik.kaszewski@amd.com drm/amd/display: Remove sink usage from DPMS

Sean Rhodes sean@starlabs.systems ALSA: hda/realtek: Add StarFighter HDA SSID

Sean Rhodes sean@starlabs.systems ALSA: hda/realtek: Limit Star Labs internal mic boost

Leo Li sunpeng.li@amd.com drm/amd/display: Atomize IRQ register read/modify/write ops

-------------

Diffstat:

Documentation/arch/arm64/booting.rst | 1 + Documentation/arch/s390/pci.rst | 2 +- .../bindings/pinctrl/qcom,nord-tlmm.yaml | 7 +- Makefile | 4 +- arch/arm64/include/asm/el2_setup.h | 9 +- arch/arm64/include/asm/io.h | 3 +- arch/arm64/include/asm/kvm_host.h | 2 +- arch/arm64/include/asm/kvm_nested.h | 3 +- arch/arm64/include/asm/kvm_pkvm.h | 3 +- arch/arm64/kernel/cpu_errata.c | 15 +- arch/arm64/kvm/arm.c | 8 +- arch/arm64/kvm/emulate-nested.c | 2 +- arch/arm64/kvm/hyp/include/nvhe/mem_protect.h | 1 + arch/arm64/kvm/hyp/nvhe/mem_protect.c | 8 + arch/arm64/kvm/hyp/nvhe/pkvm.c | 25 +- arch/arm64/kvm/hyp/nvhe/setup.c | 12 +- arch/arm64/kvm/hypercalls.c | 3 +- arch/arm64/kvm/mmu.c | 15 +- arch/arm64/kvm/nested.c | 115 ++++---- arch/arm64/kvm/sys_regs.c | 1 + arch/arm64/kvm/vgic/vgic-its.c | 43 +-- arch/arm64/net/bpf_jit_comp.c | 2 + arch/mips/net/bpf_jit_comp32.c | 2 +- arch/mips/net/bpf_jit_comp64.c | 3 +- arch/parisc/include/asm/thread_info.h | 2 +- arch/parisc/kernel/setup.c | 12 + arch/riscv/include/asm/csr.h | 20 +- arch/riscv/kvm/aia_imsic.c | 11 +- arch/riscv/kvm/mmu.c | 10 +- arch/riscv/kvm/nacl.c | 20 +- arch/riscv/kvm/vcpu.c | 3 +- arch/riscv/kvm/vcpu_exit.c | 2 +- arch/riscv/kvm/vcpu_onereg.c | 8 +- arch/riscv/kvm/vcpu_pmu.c | 33 +-- arch/riscv/kvm/vcpu_sbi_hsm.c | 4 +- arch/riscv/kvm/vcpu_timer.c | 5 +- arch/s390/crypto/hmac_s390.c | 5 +- arch/s390/include/asm/debug.h | 8 +- arch/s390/kernel/debug.c | 15 +- arch/s390/kernel/uv.c | 8 +- arch/s390/kvm/dat.c | 41 ++- arch/s390/kvm/gaccess.c | 13 + arch/s390/kvm/gmap.c | 6 +- arch/s390/kvm/interrupt.c | 149 ++++++----- arch/s390/pci/pci_event.c | 7 +- arch/s390/pci/pci_report.c | 32 ++- arch/s390/pci/pci_report.h | 4 +- arch/x86/coco/sev/svsm.c | 10 +- arch/x86/events/amd/brs.c | 9 +- arch/x86/events/amd/lbr.c | 16 +- arch/x86/events/intel/core.c | 80 ++++-- arch/x86/events/intel/ds.c | 68 ++--- arch/x86/events/intel/lbr.c | 63 +++-- arch/x86/events/perf_event.h | 4 - arch/x86/include/asm/kvm-x86-nested-ops.h | 36 +++ arch/x86/include/asm/kvm_host.h | 22 +- arch/x86/kernel/cpu/mce/core.c | 27 +- arch/x86/kvm/hyperv.c | 6 +- arch/x86/kvm/irq.h | 6 + arch/x86/kvm/mmu.h | 5 +- arch/x86/kvm/mmu/mmu.c | 129 ++++++--- arch/x86/kvm/mmu/mmu_internal.h | 66 ----- arch/x86/kvm/mmu/paging_tmpl.h | 2 +- arch/x86/kvm/pmu.c | 8 - arch/x86/kvm/svm/nested.c | 1 + arch/x86/kvm/svm/sev.c | 18 +- arch/x86/kvm/svm/svm.c | 1 + arch/x86/kvm/tss.h | 7 + arch/x86/kvm/vmx/nested.c | 1 + arch/x86/kvm/vmx/pmu_intel.c | 3 + arch/x86/kvm/vmx/vmx.c | 2 + arch/x86/kvm/x86.c | 62 +++-- arch/x86/kvm/x86.h | 2 +- arch/x86/pci/fixup.c | 99 +++++++ block/blk-zoned.c | 15 +- drivers/accel/ivpu/ivpu_drv.c | 31 ++- drivers/accel/ivpu/ivpu_drv.h | 7 +- drivers/accel/ivpu/ivpu_hw.c | 4 + drivers/accel/ivpu/ivpu_ipc.c | 8 +- drivers/accel/ivpu/ivpu_ipc.h | 2 +- drivers/accel/ivpu/ivpu_job.c | 66 ++++- drivers/accel/ivpu/ivpu_job.h | 7 +- drivers/accel/ivpu/ivpu_mmu.c | 1 - drivers/accel/ivpu/ivpu_pm.c | 1 + drivers/ata/libata-scsi.c | 10 +- drivers/base/cacheinfo.c | 11 +- drivers/bluetooth/btintel_pcie.c | 16 ++ drivers/bluetooth/btnxpuart.c | 8 +- drivers/dpll/dpll_netlink.c | 3 +- drivers/firewire/core-cdev.c | 6 +- drivers/gpio/gpio-arizona.c | 8 +- drivers/gpio/gpio-tps65219.c | 12 +- drivers/gpio/gpio-zynq.c | 10 +- drivers/gpio/gpiolib-cdev.c | 32 ++- drivers/gpio/gpiolib.c | 7 + drivers/gpu/drm/amd/amdgpu/amdgpu_acpi.c | 4 +- drivers/gpu/drm/amd/amdgpu/amdgpu_debugfs.c | 4 +- drivers/gpu/drm/amd/amdgpu/amdgpu_eviction_fence.c | 3 + drivers/gpu/drm/amd/amdgpu/amdgpu_ring.c | 2 +- drivers/gpu/drm/amd/amdgpu/amdgpu_userq.c | 16 +- drivers/gpu/drm/amd/amdgpu/amdgpu_userq.h | 1 + drivers/gpu/drm/amd/amdgpu/amdgpu_vm.c | 1 + drivers/gpu/drm/amd/amdgpu/vcn_v4_0_3.c | 3 +- drivers/gpu/drm/amd/amdgpu/vcn_v5_0_1.c | 3 +- drivers/gpu/drm/amd/amdkfd/kfd_chardev.c | 71 ++++- drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm.c | 8 +- drivers/gpu/drm/amd/display/amdgpu_dm/amdgpu_dm.h | 12 + .../gpu/drm/amd/display/amdgpu_dm/amdgpu_dm_crtc.c | 3 +- .../drm/amd/display/amdgpu_dm/amdgpu_dm_helpers.c | 3 +- .../gpu/drm/amd/display/amdgpu_dm/amdgpu_dm_irq.c | 62 +++-- .../gpu/drm/amd/display/amdgpu_dm/amdgpu_dm_irq.h | 28 ++ drivers/gpu/drm/amd/display/dc/dml/Makefile | 8 +- drivers/gpu/drm/amd/display/dc/dml2_0/Makefile | 2 +- drivers/gpu/drm/amd/display/dc/link/link_dpms.c | 180 ++++++------- drivers/gpu/drm/bridge/samsung-dsim.c | 2 +- drivers/gpu/drm/clients/drm_fbdev_client.c | 8 + drivers/gpu/drm/drm_pagemap.c | 12 +- drivers/gpu/drm/i915/display/intel_cursor.c | 7 +- drivers/gpu/drm/i915/display/intel_display_types.h | 2 + drivers/gpu/drm/i915/display/intel_dp_mst.c | 24 +- drivers/gpu/drm/i915/display/intel_dp_mst.h | 2 + drivers/gpu/drm/i915/display/intel_link_bw.c | 3 +- drivers/gpu/drm/i915/display/intel_psr.c | 15 ++ drivers/gpu/drm/i915/display/intel_quirks.c | 3 + drivers/gpu/drm/i915/display/skl_universal_plane.c | 9 +- drivers/gpu/drm/i915/gem/i915_gem_object.c | 2 +- drivers/gpu/drm/imagination/pvr_free_list.c | 15 +- drivers/gpu/drm/imagination/pvr_mmu.c | 19 +- drivers/gpu/drm/imagination/pvr_mmu.h | 2 +- drivers/gpu/drm/imagination/pvr_vm.c | 4 +- drivers/gpu/drm/nouveau/nouveau_bo.c | 3 +- drivers/gpu/drm/nouveau/nouveau_connector.c | 5 +- drivers/gpu/drm/nouveau/nouveau_dmem.c | 4 +- drivers/gpu/drm/nouveau/nouveau_drm.c | 5 +- drivers/gpu/drm/nouveau/nouveau_gem.c | 2 + drivers/gpu/drm/nouveau/nouveau_sched.c | 2 +- drivers/gpu/drm/nouveau/nouveau_sched.h | 1 + drivers/gpu/drm/nouveau/nouveau_uvmm.c | 13 +- drivers/gpu/drm/nouveau/nvif/vmm.c | 1 + drivers/gpu/drm/nouveau/nvkm/engine/disp/uoutp.c | 3 +- drivers/gpu/drm/nouveau/nvkm/subdev/clk/base.c | 23 +- drivers/gpu/drm/nouveau/nvkm/subdev/fb/ramnv1a.c | 2 + drivers/gpu/drm/virtio/virtgpu_drv.h | 5 + drivers/gpu/drm/virtio/virtgpu_gem.c | 2 +- drivers/gpu/drm/virtio/virtgpu_ioctl.c | 49 +++- drivers/gpu/drm/virtio/virtgpu_prime.c | 2 +- drivers/gpu/drm/virtio/virtgpu_submit.c | 11 +- drivers/gpu/drm/virtio/virtgpu_vq.c | 46 ++++ drivers/gpu/drm/virtio/virtgpu_vram.c | 17 +- drivers/gpu/drm/xe/regs/xe_gt_regs.h | 1 + drivers/gpu/drm/xe/xe_bo.c | 7 + drivers/gpu/drm/xe/xe_bo.h | 19 ++ drivers/gpu/drm/xe/xe_gt_throttle.c | 5 +- drivers/gpu/drm/xe/xe_guc_ads.c | 2 +- drivers/gpu/drm/xe/xe_hw_engine.c | 96 ++++++- drivers/gpu/drm/xe/xe_vm.c | 21 +- drivers/gpu/drm/xe/xe_wa_oob.rules | 2 + drivers/hid/amd-sfh-hid/amd_sfh_common.h | 4 + drivers/hid/amd-sfh-hid/amd_sfh_pcie.c | 10 + drivers/hid/bpf/hid_bpf_dispatch.c | 12 +- drivers/hid/hid-alps.c | 25 +- drivers/hid/hid-ids.h | 3 + drivers/hid/hid-multitouch.c | 29 +- drivers/hid/hid-oxp.c | 6 +- drivers/hid/hid-quirks.c | 3 +- drivers/hid/hid-winwing.c | 10 +- drivers/hid/wacom_sys.c | 5 +- drivers/i2c/busses/i2c-qcom-geni.c | 293 +++++++++++---------- drivers/net/bonding/bond_main.c | 2 +- drivers/net/dsa/mt7530-mdio.c | 18 +- drivers/net/dsa/mt7530.c | 3 - drivers/net/dsa/mv88e6xxx/chip.c | 68 ++++- drivers/net/ethernet/airoha/airoha_npu.c | 18 +- drivers/net/ethernet/amazon/ena/ena_netdev.c | 2 + drivers/net/ethernet/atheros/atl1c/atl1c_main.c | 3 + drivers/net/ethernet/atheros/atl1e/atl1e_main.c | 3 + drivers/net/ethernet/atheros/atlx/atl1.c | 3 + drivers/net/ethernet/broadcom/bnxt/bnxt_ethtool.c | 3 +- drivers/net/ethernet/broadcom/genet/bcmgenet.c | 34 ++- drivers/net/ethernet/broadcom/tg3.c | 15 +- drivers/net/ethernet/brocade/bna/bnad.c | 24 +- drivers/net/ethernet/cadence/macb_main.c | 14 +- drivers/net/ethernet/freescale/fman/fman.c | 1 + drivers/net/ethernet/google/gve/gve_desc_dqo.h | 5 + drivers/net/ethernet/google/gve/gve_tx_dqo.c | 40 ++- drivers/net/ethernet/hisilicon/hns/hns_dsaf_mac.c | 3 + drivers/net/ethernet/ibm/emac/core.c | 16 +- drivers/net/ethernet/marvell/octeontx2/af/common.h | 45 +++- .../ethernet/marvell/octeontx2/af/rvu_debugfs.c | 104 +++----- drivers/net/ethernet/mediatek/mtk_eth_soc.c | 6 +- .../ethernet/mellanox/mlx5/core/en/rep/bridge.c | 45 +++- drivers/net/ethernet/mellanox/mlx5/core/en/tc_ct.c | 3 + .../mellanox/mlx5/core/en_accel/ipsec_fs.c | 4 +- .../ethernet/mellanox/mlx5/core/en_accel/macsec.c | 2 + drivers/net/ethernet/mellanox/mlx5/core/en_main.c | 1 - .../net/ethernet/mellanox/mlx5/core/esw/bridge.c | 15 +- .../net/ethernet/mellanox/mlx5/core/esw/bridge.h | 2 + drivers/net/ethernet/mellanox/mlx5/core/lag/lag.c | 44 +++- .../ethernet/mellanox/mlx5/core/lag/shared_fdb.c | 1 + .../net/ethernet/mellanox/mlx5/core/lib/devcom.c | 5 +- drivers/net/ethernet/meta/fbnic/fbnic_csr.h | 5 + drivers/net/ethernet/meta/fbnic/fbnic_debugfs.c | 4 +- drivers/net/ethernet/meta/fbnic/fbnic_ethtool.c | 16 +- drivers/net/ethernet/meta/fbnic/fbnic_fw.c | 47 +++- drivers/net/ethernet/meta/fbnic/fbnic_fw.h | 1 + drivers/net/ethernet/meta/fbnic/fbnic_pci.c | 18 +- drivers/net/ethernet/meta/fbnic/fbnic_txrx.c | 30 ++- drivers/net/ethernet/netronome/nfp/crypto/ipsec.c | 3 +- drivers/net/ethernet/spacemit/k1_emac.c | 3 + drivers/net/ethernet/stmicro/stmmac/dwmac-rk.c | 5 +- drivers/net/ethernet/stmicro/stmmac/dwmac4_descs.c | 4 +- drivers/net/ethernet/stmicro/stmmac/hwif.h | 2 +- drivers/net/ethernet/stmicro/stmmac/ring_mode.c | 4 +- drivers/net/ethernet/stmicro/stmmac/stmmac_main.c | 21 +- .../net/ethernet/stmicro/stmmac/stmmac_selftests.c | 153 ++++++++--- drivers/net/ethernet/ti/netcp_core.c | 2 +- drivers/net/ethernet/wangxun/libwx/wx_hw.c | 1 + drivers/net/ethernet/wangxun/libwx/wx_lib.c | 65 ++++- drivers/net/ethernet/wangxun/libwx/wx_lib.h | 1 + drivers/net/ethernet/wangxun/libwx/wx_ptp.c | 161 ++++++++--- drivers/net/ethernet/wangxun/libwx/wx_ptp.h | 1 + drivers/net/ethernet/wangxun/libwx/wx_type.h | 2 + drivers/net/ethernet/wangxun/txgbe/txgbe_fdir.c | 13 +- drivers/net/ethernet/wangxun/txgbe/txgbe_main.c | 16 ++ drivers/net/macsec.c | 84 +++--- drivers/net/mdio/mdio-realtek-rtl9300.c | 6 + drivers/net/ovpn/netlink.c | 108 +++++++- drivers/net/ovpn/peer.c | 121 +++++++-- drivers/net/ovpn/peer.h | 25 +- drivers/net/ovpn/udp.c | 193 +++++++++++--- drivers/net/pcs/pcs-rzn1-miic.c | 3 +- drivers/net/pcs/pcs-xpcs.c | 4 +- drivers/net/phy/intel-xway.c | 29 +- drivers/net/phy/micrel.c | 1 + drivers/net/phy/phylink.c | 20 +- drivers/net/usb/catc.c | 15 +- drivers/net/usb/cdc_mbim.c | 5 + drivers/net/usb/lan78xx.c | 2 + drivers/net/usb/sr9700.c | 3 +- drivers/net/veth.c | 2 + drivers/net/virtio_net.c | 9 + drivers/net/vrf.c | 2 - drivers/net/vxlan/vxlan_core.c | 6 +- drivers/nfc/microread/microread.c | 6 +- drivers/nfc/nfcmrvl/fw_dnld.c | 11 +- drivers/nfc/pn533/pn533.c | 14 +- drivers/nfc/pn533/pn533.h | 4 +- drivers/nfc/pn533/usb.c | 4 +- drivers/nfc/pn544/pn544.c | 7 +- drivers/nfc/port100.c | 7 + drivers/nfc/st21nfca/core.c | 12 +- drivers/nfc/st21nfca/i2c.c | 29 +- drivers/nfc/trf7970a.c | 4 +- drivers/nfc/virtual_ncidev.c | 3 +- drivers/pci/of_property.c | 11 +- drivers/pci/setup-bus.c | 23 +- drivers/perf/arm_brbe.c | 2 +- drivers/pinctrl/meson/pinctrl-meson-s4.c | 2 +- drivers/pinctrl/microchip/pinctrl-mpfs-mssio.c | 6 +- drivers/pinctrl/pinctrl-generic.c | 4 + drivers/pinctrl/pinctrl-single.c | 3 +- drivers/pinctrl/qcom/pinctrl-ipq5210.c | 1 + drivers/pinctrl/qcom/pinctrl-nord.c | 34 ++- drivers/pinctrl/sunxi/pinctrl-sun55i-a523-r.c | 2 +- drivers/pinctrl/sunxi/pinctrl-sun55i-a523.c | 2 +- drivers/pinctrl/sunxi/pinctrl-sunxi.c | 82 ++++-- drivers/pinctrl/sunxi/pinctrl-sunxi.h | 9 + drivers/pinctrl/tegra/pinctrl-tegra238.c | 204 +++++++------- drivers/remoteproc/qcom_q6v5_adsp.c | 8 +- drivers/s390/cio/chp.c | 3 + drivers/s390/cio/cio.c | 11 +- drivers/s390/cio/cio.h | 5 +- drivers/s390/cio/cmf.c | 2 +- drivers/s390/cio/device.c | 9 +- drivers/s390/cio/device_fsm.c | 3 + drivers/s390/cio/device_ops.c | 23 ++ drivers/s390/cio/vfio_ccw_fsm.c | 2 +- drivers/s390/crypto/vfio_ap_ops.c | 18 +- drivers/scsi/libiscsi_tcp.c | 3 + drivers/scsi/megaraid/megaraid_sas_base.c | 4 +- drivers/scsi/sd_zbc.c | 8 +- drivers/thermal/gov_step_wise.c | 10 +- drivers/ufs/core/ufshcd.c | 6 + drivers/ufs/host/ufshcd-pltfrm.c | 6 +- fs/autofs/inode.c | 4 + fs/bpf_fs_kfuncs.c | 4 - fs/fs-writeback.c | 25 +- fs/inode.c | 11 +- fs/kernfs/mount.c | 4 +- fs/netfs/buffered_read.c | 34 +-- fs/netfs/objects.c | 4 +- fs/netfs/read_collect.c | 5 + fs/netfs/rolling_buffer.c | 2 +- fs/ntfs3/inode.c | 7 +- fs/ocfs2/namei.c | 9 +- fs/ocfs2/xattr.c | 13 +- fs/ocfs2/xattr.h | 8 +- fs/overlayfs/overlayfs.h | 4 +- fs/smb/client/cached_dir.c | 32 ++- fs/smb/client/dir.c | 52 +++- fs/smb/client/smb2inode.c | 6 +- fs/smb/client/smb2misc.c | 9 +- fs/smb/client/smb2ops.c | 28 +- fs/smb/client/smb2pdu.c | 54 +++- fs/smb/client/transport.c | 71 ++++- fs/squashfs/xz_wrapper.c | 6 +- fs/super.c | 114 ++++---- fs/xfs/libxfs/xfs_metafile.c | 8 +- fs/xfs/libxfs/xfs_rtrefcount_btree.c | 4 +- fs/xfs/scrub/dir.c | 2 +- fs/xfs/scrub/health.c | 6 +- fs/xfs/scrub/inode.c | 2 +- fs/xfs/scrub/inode_repair.c | 2 +- fs/xfs/scrub/newbt.c | 8 +- fs/xfs/scrub/orphanage.c | 6 +- fs/xfs/scrub/repair.c | 21 +- fs/xfs/scrub/scrub.h | 2 +- fs/xfs/scrub/trace.h | 12 +- fs/xfs/xfs_dquot.c | 8 +- fs/xfs/xfs_exchrange.c | 13 +- fs/xfs/xfs_healthmon.c | 4 +- fs/xfs/xfs_icache.c | 2 +- fs/xfs/xfs_log_recover.c | 13 +- fs/xfs/xfs_qm.c | 10 +- fs/xfs/xfs_refcount_item.c | 8 +- fs/xfs/xfs_rmap_item.c | 8 +- include/linux/ethtool.h | 2 + include/linux/fs/super_types.h | 2 +- include/linux/if_vlan.h | 3 + include/linux/mempool.h | 7 + include/linux/mm_types.h | 15 +- include/linux/perf_event.h | 17 -- include/linux/sched.h | 6 +- include/linux/sched/topology.h | 4 +- include/linux/skbuff.h | 24 +- include/net/dst.h | 3 +- include/net/gue.h | 19 +- include/net/ip6_route.h | 4 +- include/net/netfilter/nf_conntrack.h | 5 + include/net/nfc/hci.h | 2 +- include/net/nfc/nfc.h | 3 +- include/net/tcp.h | 4 +- kernel/bpf/btf.c | 140 ++++++---- kernel/bpf/core.c | 21 +- kernel/bpf/crypto.c | 5 +- kernel/bpf/fixups.c | 24 +- kernel/bpf/hashtab.c | 43 ++- kernel/bpf/memalloc.c | 50 ++-- kernel/bpf/offload.c | 2 + kernel/bpf/states.c | 3 + kernel/bpf/syscall.c | 15 +- kernel/bpf/verifier.c | 17 +- kernel/cgroup/cpuset.c | 3 +- kernel/cgroup/pids.c | 5 + kernel/events/core.c | 17 +- kernel/exit.c | 11 +- kernel/kprobes.c | 22 +- kernel/power/hibernate.c | 26 +- kernel/sched/core.c | 2 +- kernel/sched/ext/ext.c | 7 +- kernel/sched/fair.c | 173 ++++++++---- kernel/sched/topology.c | 22 +- kernel/trace/fprobe.c | 15 ++ kernel/workqueue.c | 2 +- mm/backing-dev.c | 5 +- mm/damon/core.c | 39 ++- mm/damon/ops-common.c | 7 +- mm/damon/vaddr.c | 21 +- mm/hugetlb.c | 20 +- mm/rmap.c | 6 +- mm/vma.c | 8 + net/8021q/vlan_dev.c | 5 + net/bluetooth/bnep/core.c | 17 +- net/bluetooth/bnep/netdev.c | 8 +- net/bluetooth/hci_conn.c | 14 +- net/bluetooth/hci_sock.c | 20 +- net/bluetooth/iso.c | 7 + net/bluetooth/l2cap_core.c | 10 +- net/bluetooth/mgmt.c | 27 +- net/bluetooth/rfcomm/core.c | 3 +- net/bluetooth/rfcomm/sock.c | 6 +- net/bluetooth/smp.c | 17 ++ net/bridge/br_mdb.c | 2 + net/bridge/br_stp_bpdu.c | 5 +- net/core/dev.c | 49 +++- net/core/dev.h | 2 + net/core/dev_ioctl.c | 25 +- net/core/filter.c | 46 ++-- net/core/skbuff.c | 21 +- net/core/skmsg.c | 4 + net/core/sock_map.c | 1 + net/ethtool/common.h | 2 + net/ipv4/arp.c | 1 + net/ipv4/devinet.c | 7 +- net/ipv4/fib_semantics.c | 13 +- net/ipv4/fou_core.c | 4 + net/ipv4/inet_connection_sock.c | 3 +- net/ipv4/ip_gre.c | 12 + net/ipv4/ipconfig.c | 45 ++-- net/ipv4/tcp_output.c | 3 + net/ipv4/udp.c | 44 +++- net/ipv6/exthdrs_core.c | 3 + net/ipv6/ip6_fib.c | 2 +- net/ipv6/ip6_gre.c | 2 +- net/ipv6/netfilter/ip6t_rpfilter.c | 2 +- net/ipv6/netfilter/ip6t_rt.c | 11 +- net/ipv6/route.c | 12 +- net/ipv6/seg6.c | 4 +- net/llc/llc_c_ac.c | 2 +- net/llc/llc_s_ac.c | 4 + net/llc/llc_sap.c | 8 +- net/mctp/route.c | 2 +- net/mptcp/protocol.c | 2 +- net/netfilter/ipvs/ip_vs_core.c | 6 + net/netfilter/nf_conntrack_netlink.c | 3 +- net/netfilter/nf_flow_table_offload.c | 7 +- net/netfilter/nf_tables_api.c | 10 +- net/netfilter/nfnetlink_queue.c | 8 +- net/netfilter/nft_synproxy.c | 3 +- net/netlink/genetlink.c | 8 +- net/nfc/core.c | 15 +- net/nfc/digital_dep.c | 8 +- net/nfc/llcp.h | 1 + net/nfc/llcp_commands.c | 2 +- net/nfc/llcp_core.c | 173 ++++++++---- net/nfc/llcp_sock.c | 67 +++-- net/nfc/nci/core.c | 10 +- net/nfc/netlink.c | 7 +- net/nfc/nfc.h | 3 +- net/openvswitch/conntrack.c | 37 ++- net/packet/af_packet.c | 104 +++++--- net/rds/connection.c | 6 + net/rds/ib_frmr.c | 11 +- net/sched/act_api.c | 2 +- net/sched/act_ct.c | 41 ++- net/sched/act_gate.c | 30 ++- net/sched/act_ife.c | 17 +- net/sched/act_meta_mark.c | 6 +- net/sched/act_meta_skbprio.c | 6 +- net/sched/act_meta_skbtcindex.c | 6 +- net/sched/cls_u32.c | 12 +- net/sched/em_text.c | 2 +- net/sched/sch_hfsc.c | 22 ++ net/sched/sch_teql.c | 7 +- net/sctp/associola.c | 15 +- net/sctp/input.c | 7 +- net/sctp/sm_sideeffect.c | 37 +-- net/sctp/sm_statefuns.c | 2 + net/smc/smc_core.c | 2 + net/smc/smc_ib.c | 10 +- net/tipc/group.c | 4 +- net/tipc/monitor.c | 3 +- net/vmw_vsock/af_vsock.c | 3 + net/xdp/xskmap.c | 2 +- security/ipe/eval.c | 12 +- security/ipe/eval.h | 2 +- security/ipe/fs.c | 8 +- security/ipe/hooks.c | 22 +- security/ipe/policy_fs.c | 3 + security/landlock/access.h | 8 + sound/hda/codecs/realtek/alc269.c | 9 + tools/arch/riscv/include/asm/csr.h | 20 +- tools/lib/bpf/libbpf.c | 7 + tools/lib/bpf/relo_core.c | 58 ++-- .../testing/selftests/bpf/prog_tests/linked_list.c | 4 +- tools/testing/selftests/cgroup/test_cpuset_prs.sh | 2 + tools/testing/selftests/cgroup/test_memcontrol.c | 2 +- .../ftrace/test.d/kprobe/kprobe_non_uniq_symbol.tc | 2 +- tools/testing/selftests/kvm/steal_time.c | 30 ++- tools/testing/selftests/nci/nci_dev.c | 45 ++-- virt/kvm/kvm_main.c | 30 ++- 471 files changed, 5769 insertions(+), 2585 deletions(-)